@reclack/walletkit 0.0.0-stage → 0.1.1

package/dist/catalog-fetch.d.ts

@@ -0,0 +1,18 @@
+import type { WalletEntry } from './catalog.js';
+/**
+ * The wallets Reclack can name, read from public configuration.
+ *
+ * Configuration rather than a list in a bundle, because four places kept
+ * their own copy and they drifted: the hosted checkout, the dashboard, the
+ * marketing site, and a second list inside the checkout itself. This is the
+ * one reader they all now share.
+ *
+ * Never throws, and an empty catalogue is a working page rather than a broken
+ * one. Wallets that announce themselves, over EIP-6963 or the Wallet
+ * Standard, carry their own name and icon and still connect; what is lost is
+ * the install list and the ordering. So this never blocks rendering: somebody
+ * with a wallet installed can always get through.
+ */
+export declare function fetchWalletCatalog(url: string): Promise<WalletEntry[]>;
+/** The configuration endpoint the catalogue is a row of. */
+export declare function walletCatalogUrl(apiUrl: string): string;

package/dist/catalog-fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-fetch.d.ts","sourceRoot":"","sources":["../src/catalog-fetch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,WAAW,EAAE,MAAM,cAAc,CAAA;AAE7D;;;;;;;;;;;;;GAaG;AACH,wBAAsB,kBAAkB,CAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAyB7E;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/catalog-fetch.js

@@ -0,0 +1,85 @@
+/**
+ * The wallets Reclack can name, read from public configuration.
+ *
+ * Configuration rather than a list in a bundle, because four places kept
+ * their own copy and they drifted: the hosted checkout, the dashboard, the
+ * marketing site, and a second list inside the checkout itself. This is the
+ * one reader they all now share.
+ *
+ * Never throws, and an empty catalogue is a working page rather than a broken
+ * one. Wallets that announce themselves, over EIP-6963 or the Wallet
+ * Standard, carry their own name and icon and still connect; what is lost is
+ * the install list and the ordering. So this never blocks rendering: somebody
+ * with a wallet installed can always get through.
+ */
+export async function fetchWalletCatalog(url) {
+    try {
+        const response = await fetch(url, {
+            // Public configuration. Sending credentials would make this a
+            // cross-origin request that needs them back, for a row that is
+            // the same for everybody.
+            credentials: 'omit',
+            headers: { Accept: 'application/json' },
+        });
+        if (!response.ok) {
+            return [];
+        }
+        const rows = (await response.json());
+        const row = Array.isArray(rows)
+            ? rows.find((entry) => entry.name === 'wallets')
+            : undefined;
+        if (!Array.isArray(row?.value)) {
+            return [];
+        }
+        return row.value
+            .map(toWalletEntry)
+            .filter((entry) => entry !== undefined);
+    }
+    catch {
+        return [];
+    }
+}
+/** The configuration endpoint the catalogue is a row of. */
+export function walletCatalogUrl(apiUrl) {
+    return `${apiUrl.replace(/\/$/, '')}/v1/configurations?name=wallets`;
+}
+/**
+ * rdns as a list, whatever the configuration row holds.
+ *
+ * It was a single string until the catalogue learned that one wallet
+ * announces itself under several ids, and a row written before that is still
+ * a string until the migration reaches it. The declared type says list, so
+ * nothing downstream would think to check.
+ */
+function withRdnsList(engine) {
+    const rdns = engine.rdns;
+    if (rdns === undefined || Array.isArray(rdns)) {
+        return engine;
+    }
+    return { ...engine, rdns: typeof rdns === 'string' ? [rdns] : undefined };
+}
+/**
+ * One catalogue row, read rather than cast.
+ *
+ * The API sends install_url; this package reads installUrl. A cast renames
+ * nothing at runtime, so the install link was an anchor with no href and
+ * clicking it did nothing. Engine fields keep their wire names, so they pass
+ * through as they came, bar the one shape that changed under them.
+ */
+function toWalletEntry(value) {
+    const row = value;
+    if (typeof row?.id !== 'string' || typeof row.name !== 'string') {
+        return undefined;
+    }
+    return {
+        id: row.id,
+        name: row.name,
+        // Empty when the catalogue has none: the panel offers no install link
+        // rather than one that goes nowhere.
+        installUrl: typeof row.install_url === 'string' ? row.install_url : '',
+        browser: row.browser === true,
+        engines: (Array.isArray(row.engines) ? row.engines : [])
+            .map(withRdnsList),
+    };
+}
+//# sourceMappingURL=catalog-fetch.js.map

package/dist/catalog-fetch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-fetch.js","sourceRoot":"","sources":["../src/catalog-fetch.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAE,GAAW;IACpD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YACjC,8DAA8D;YAC9D,+DAA+D;YAC/D,0BAA0B;YAC1B,WAAW,EAAE,MAAM;YACnB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACvC,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,OAAO,EAAE,CAAA;QACV,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuC,CAAA;QAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC;YAChD,CAAC,CAAC,SAAS,CAAA;QACZ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,EAAE,CAAA;QACV,CAAC;QACD,OAAO,GAAG,CAAC,KAAK;aACd,GAAG,CAAC,aAAa,CAAC;aAClB,MAAM,CAAC,CAAC,KAAK,EAAwB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;IAC/D,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAA;IACV,CAAC;AACF,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAE,MAAc;IAC/C,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,iCAAiC,CAAA;AACrE,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAE,MAAoB;IAC1C,MAAM,IAAI,GAAY,MAAM,CAAC,IAAI,CAAA;IACjC,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAA;IACd,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAA;AAC1E,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,aAAa,CAAE,KAAc;IACrC,MAAM,GAAG,GAAG,KAAuC,CAAA;IACnD,IAAI,OAAO,GAAG,EAAE,EAAE,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,OAAO;QACN,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,sEAAsE;QACtE,qCAAqC;QACrC,UAAU,EAAE,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACtE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,IAAI;QAC7B,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,OAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1E,GAAG,CAAC,YAAY,CAAC;KACnB,CAAA;AACF,CAAC"}

package/dist/catalog.d.ts

@@ -0,0 +1,57 @@
+import type { ChainFamily, WalletOption } from './types.js';
+/**
+ * One chain engine a wallet signs for, and how to recognise it there.
+ *
+ * Every field below `id` is a parameter to a check this file already knows
+ * how to run, and all are optional: a wallet that announces itself needs none
+ * of them. Nothing here is executable, because reading a path off `window` is
+ * not something a configuration row can do.
+ *
+ * An engine a wallet does not sign for is simply absent, which is why this is
+ * a list and there is no separate set of names beside it: the engine's own id
+ * says which family it serves, and two facts could disagree.
+ */
+export interface WalletEngine {
+    /** The engine, which is also the chain family it serves. */
+    id: ChainFamily;
+    /**
+     * The reverse-DNS ids a wallet announces itself under, over EIP-6963.
+     *
+     * Several, because one wallet is several builds: MetaMask's extension,
+     * its phone browser and Flask each announce their own.
+     */
+    rdns?: string[];
+    /** Paths into `window` to try in order, such as ["phantom","ethereum"]. */
+    globals?: string[][];
+    /** Properties identifying an injected provider; ANY is a match. */
+    flags?: string[];
+    /** Properties that rule one out: several wallets set another's flag. */
+    not_flags?: string[];
+}
+/** One wallet Reclack can name, as the API describes it. */
+export interface WalletEntry extends WalletOption {
+    engines: WalletEngine[];
+}
+/** How to recognise a wallet on one engine, or nothing if it does not sign there. */
+export declare function engineOf(wallet: WalletEntry, engine: ChainFamily): WalletEngine | undefined;
+/**
+ * The wallets to offer for an engine, in the order the API listed them.
+ *
+ * Order is the API's so the list is stable rather than dependent on which
+ * wallet answered first, which is the same reason it used to be a literal
+ * here.
+ */
+export declare function walletsFor(catalog: WalletEntry[], engine: ChainFamily): WalletEntry[];
+/**
+ * Runs a wallet's detection against this window.
+ *
+ * Globals first, each one being that wallet's own namespace, then the flags
+ * on whatever claimed `window.ethereum`. Never the generic global by itself:
+ * it belongs to whichever extension got there, and trusting it names the
+ * wrong wallet.
+ *
+ * A namespace is checked against the exclusions too, not only the flags. One
+ * wallet injects another's namespace as a compatibility shim, so finding
+ * window.phantom is not proof that Phantom is installed.
+ */
+export declare function detect(win: Window, detection: WalletEngine | undefined): unknown;

package/dist/catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.d.ts","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAmB,YAAY,EAAE,MAAM,YAAY,CAAA;AAE5E;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,YAAY;IAC5B,4DAA4D;IAC5D,EAAE,EAAE,WAAW,CAAA;IACf;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;IACf,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,CAAA;IACpB,mEAAmE;IACnE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,4DAA4D;AAC5D,MAAM,WAAW,WAAY,SAAQ,YAAY;IAChD,OAAO,EAAE,YAAY,EAAE,CAAA;CACvB;AAED,qFAAqF;AACrF,wBAAgB,QAAQ,CACvB,MAAM,EAAE,WAAW,EACnB,MAAM,EAAE,WAAW,GACjB,YAAY,GAAG,SAAS,CAE1B;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CACzB,OAAO,EAAE,WAAW,EAAE,EACtB,MAAM,EAAE,WAAW,GACjB,WAAW,EAAE,CAEf;AAqDD;;;;;;;;;;;GAWG;AACH,wBAAgB,MAAM,CACrB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,YAAY,GAAG,SAAS,GACjC,OAAO,CAWT"}

package/dist/catalog.js

@@ -0,0 +1,80 @@
+/** How to recognise a wallet on one engine, or nothing if it does not sign there. */
+export function engineOf(wallet, engine) {
+    return wallet.engines?.find((entry) => entry.id === engine);
+}
+/**
+ * The wallets to offer for an engine, in the order the API listed them.
+ *
+ * Order is the API's so the list is stable rather than dependent on which
+ * wallet answered first, which is the same reason it used to be a literal
+ * here.
+ */
+export function walletsFor(catalog, engine) {
+    return catalog.filter((wallet) => Boolean(engineOf(wallet, engine)));
+}
+/** Follows a path into the window, returning whatever provider is there. */
+function atPath(win, path) {
+    let current = win;
+    for (const key of path) {
+        if (!current || typeof current !== 'object') {
+            return undefined;
+        }
+        current = current[key];
+    }
+    return current;
+}
+/** Whether a provider carries a flag that rules this wallet out. */
+function impostor(provider, detection) {
+    const flags = provider;
+    return Boolean(detection.not_flags?.some((flag) => Boolean(flags[flag])));
+}
+/**
+ * Finds a provider among the several a browser may have injected.
+ *
+ * Several wallets installed at once expose a `providers` array; the bare
+ * object is whichever one won the global.
+ */
+function matchInjected(win, detection) {
+    if (!detection.flags?.length) {
+        return undefined;
+    }
+    const root = win.ethereum;
+    if (!root) {
+        return undefined;
+    }
+    const candidates = Array.isArray(root.providers)
+        ? root.providers
+        : [root];
+    return candidates.find((provider) => {
+        // Any flag is a match: a wallet may set more than one across
+        // versions. None of the exclusions may be set, because a flag alone
+        // names the wrong wallet when another sets it on purpose.
+        const claims = detection.flags?.some((flag) => Boolean(provider[flag]));
+        return Boolean(claims) && !impostor(provider, detection);
+    });
+}
+/**
+ * Runs a wallet's detection against this window.
+ *
+ * Globals first, each one being that wallet's own namespace, then the flags
+ * on whatever claimed `window.ethereum`. Never the generic global by itself:
+ * it belongs to whichever extension got there, and trusting it names the
+ * wrong wallet.
+ *
+ * A namespace is checked against the exclusions too, not only the flags. One
+ * wallet injects another's namespace as a compatibility shim, so finding
+ * window.phantom is not proof that Phantom is installed.
+ */
+export function detect(win, detection) {
+    if (!detection) {
+        return undefined;
+    }
+    for (const path of detection.globals ?? []) {
+        const found = atPath(win, path);
+        if (found && typeof found === 'object' && !impostor(found, detection)) {
+            return found;
+        }
+    }
+    return matchInjected(win, detection);
+}
+//# sourceMappingURL=catalog.js.map

package/dist/catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAqCA,qFAAqF;AACrF,MAAM,UAAU,QAAQ,CACvB,MAAmB,EACnB,MAAmB;IAEnB,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAA;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACzB,OAAsB,EACtB,MAAmB;IAEnB,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;AACrE,CAAC;AAMD,4EAA4E;AAC5E,SAAS,MAAM,CAAE,GAAW,EAAE,IAAc;IAC3C,IAAI,OAAO,GAAY,GAAG,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,OAAO,SAAS,CAAA;QACjB,CAAC;QACD,OAAO,GAAI,OAAmC,CAAC,GAAG,CAAC,CAAA;IACpD,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC;AAED,oEAAoE;AACpE,SAAS,QAAQ,CAAE,QAAiB,EAAE,SAAuB;IAC5D,MAAM,KAAK,GAAG,QAAmC,CAAA;IACjD,OAAO,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAC1E,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACrB,GAAW,EACX,SAAuB;IAEvB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,MAAM,IAAI,GAAI,GAA+C,CAAC,QAAQ,CAAA;IACtE,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,MAAM,UAAU,GAAoB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;QAChE,CAAC,CAAE,IAAI,CAAC,SAAwC;QAChD,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACT,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACnC,6DAA6D;QAC7D,oEAAoE;QACpE,0DAA0D;QAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACvE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,MAAM,CACrB,GAAW,EACX,SAAmC;IAEnC,IAAI,CAAC,SAAS,EAAE,CAAC;QAChB,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC/B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;YACvE,OAAO,KAAK,CAAA;QACb,CAAC;IACF,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;AACrC,CAAC"}

package/dist/chains.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Chain metadata for `wallet_addEthereumChain`.
+ *
+ * Deliberately a client-side registry rather than something the API sends.
+ * Adding a chain hands the wallet an RPC endpoint that will then see the
+ * payer's traffic, so the list of endpoints a payment page can propose is
+ * pinned in the bundle where it can be reviewed, not taken from a response
+ * body. A chain missing here simply cannot be auto-added.
+ */
+export interface ChainMetadata {
+    chainId: number;
+    chainName: string;
+    nativeCurrency: {
+        name: string;
+        symbol: string;
+        decimals: number;
+    };
+    rpcUrls: string[];
+    blockExplorerUrls: string[];
+}
+export declare const CHAINS: Record<number, ChainMetadata>;
+/**
+ * The link a payer follows to see their own transaction.
+ *
+ * Takes the network as well as the chain id so it can answer for either
+ * family. Returns nothing for a chain with no explorer configured, and the
+ * caller shows no link rather than a broken one.
+ */
+export declare function explorerTxUrl(chainId: number, hash: string, network?: string): string | undefined;
+/** "sepolia.basescan.org": names the destination before the payer clicks. */
+export declare function explorerHost(chainId: number, network?: string): string | undefined;
+export declare function chainMetadata(chainId: number): ChainMetadata | undefined;

package/dist/chains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chains.d.ts","sourceRoot":"","sources":["../src/chains.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAA;IAClE,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAID,eAAO,MAAM,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CA2ChD,CAAA;AA0BD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC5B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,GACd,MAAM,GAAG,SAAS,CASpB;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWnF;AAED,wBAAgB,aAAa,CAAE,OAAO,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAEzE"}

package/dist/chains.js

@@ -0,0 +1,103 @@
+const ETH = { name: 'Ether', symbol: 'ETH', decimals: 18 };
+export const CHAINS = {
+    1: {
+        chainId: 1,
+        chainName: 'Ethereum',
+        nativeCurrency: ETH,
+        rpcUrls: ['https://ethereum-rpc.publicnode.com'],
+        blockExplorerUrls: ['https://etherscan.io'],
+    },
+    11155111: {
+        chainId: 11155111,
+        chainName: 'Ethereum Sepolia',
+        nativeCurrency: ETH,
+        rpcUrls: ['https://ethereum-sepolia-rpc.publicnode.com'],
+        blockExplorerUrls: ['https://sepolia.etherscan.io'],
+    },
+    8453: {
+        chainId: 8453,
+        chainName: 'Base',
+        nativeCurrency: ETH,
+        rpcUrls: ['https://mainnet.base.org'],
+        blockExplorerUrls: ['https://basescan.org'],
+    },
+    84532: {
+        chainId: 84532,
+        chainName: 'Base Sepolia',
+        nativeCurrency: ETH,
+        rpcUrls: ['https://sepolia.base.org'],
+        blockExplorerUrls: ['https://sepolia.basescan.org'],
+    },
+    137: {
+        chainId: 137,
+        chainName: 'Polygon',
+        nativeCurrency: { name: 'POL', symbol: 'POL', decimals: 18 },
+        rpcUrls: ['https://polygon-bor-rpc.publicnode.com'],
+        blockExplorerUrls: ['https://polygonscan.com'],
+    },
+    80002: {
+        chainId: 80002,
+        chainName: 'Polygon Amoy',
+        nativeCurrency: { name: 'POL', symbol: 'POL', decimals: 18 },
+        rpcUrls: ['https://polygon-amoy-bor-rpc.publicnode.com'],
+        blockExplorerUrls: ['https://amoy.polygonscan.com'],
+    },
+};
+/**
+ * A link to one transaction on the chain's own explorer.
+ *
+ * Derived from the same pinned registry the wallet is offered, so the link
+ * always matches the chain actually paid on: a testnet payment opens the
+ * testnet explorer. A mainnet link would 404 on a hash that only exists on a
+ * testnet, which to a payer looks like the payment vanished.
+ *
+ * Undefined for a chain with no explorer, so the caller can show the bare hash
+ * rather than a dead link.
+ */
+/**
+ * Solana explorers, keyed by network name.
+ *
+ * By name and not by chain id, because every non-EVM chain carries zero:
+ * Solana and its devnet would otherwise be the same key, and a devnet payer
+ * would be sent to a mainnet explorer that has never heard of their
+ * transaction. The cluster is part of the URL for the same reason.
+ */
+const SVM_EXPLORERS = {
+    solana: 'https://solscan.io',
+    'solana-devnet': 'https://solscan.io?cluster=devnet',
+};
+/**
+ * The link a payer follows to see their own transaction.
+ *
+ * Takes the network as well as the chain id so it can answer for either
+ * family. Returns nothing for a chain with no explorer configured, and the
+ * caller shows no link rather than a broken one.
+ */
+export function explorerTxUrl(chainId, hash, network) {
+    const solana = network ? SVM_EXPLORERS[network] : undefined;
+    if (solana) {
+        // The cluster rides in the query string, so the path goes before it.
+        const [base, cluster] = solana.split('?');
+        return cluster ? `${base}/tx/${hash}?${cluster}` : `${base}/tx/${hash}`;
+    }
+    const base = CHAINS[chainId]?.blockExplorerUrls[0];
+    return base ? `${base}/tx/${hash}` : undefined;
+}
+/** "sepolia.basescan.org": names the destination before the payer clicks. */
+export function explorerHost(chainId, network) {
+    const base = (network ? SVM_EXPLORERS[network] : undefined)
+        ?? CHAINS[chainId]?.blockExplorerUrls[0];
+    if (!base) {
+        return undefined;
+    }
+    try {
+        return new URL(base).hostname.replace(/^www\./, '');
+    }
+    catch {
+        return undefined;
+    }
+}
+export function chainMetadata(chainId) {
+    return CHAINS[chainId];
+}
+//# sourceMappingURL=chains.js.map

package/dist/chains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chains.js","sourceRoot":"","sources":["../src/chains.ts"],"names":[],"mappings":"AAiBA,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAA;AAE1D,MAAM,CAAC,MAAM,MAAM,GAAkC;IACpD,CAAC,EAAE;QACF,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,UAAU;QACrB,cAAc,EAAE,GAAG;QACnB,OAAO,EAAE,CAAC,qCAAqC,CAAC;QAChD,iBAAiB,EAAE,CAAC,sBAAsB,CAAC;KAC3C;IACD,QAAQ,EAAE;QACT,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,kBAAkB;QAC7B,cAAc,EAAE,GAAG;QACnB,OAAO,EAAE,CAAC,6CAA6C,CAAC;QACxD,iBAAiB,EAAE,CAAC,8BAA8B,CAAC;KACnD;IACD,IAAI,EAAE;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,MAAM;QACjB,cAAc,EAAE,GAAG;QACnB,OAAO,EAAE,CAAC,0BAA0B,CAAC;QACrC,iBAAiB,EAAE,CAAC,sBAAsB,CAAC;KAC3C;IACD,KAAK,EAAE;QACN,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,cAAc;QACzB,cAAc,EAAE,GAAG;QACnB,OAAO,EAAE,CAAC,0BAA0B,CAAC;QACrC,iBAAiB,EAAE,CAAC,8BAA8B,CAAC;KACnD;IACD,GAAG,EAAE;QACJ,OAAO,EAAE,GAAG;QACZ,SAAS,EAAE,SAAS;QACpB,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5D,OAAO,EAAE,CAAC,wCAAwC,CAAC;QACnD,iBAAiB,EAAE,CAAC,yBAAyB,CAAC;KAC9C;IACD,KAAK,EAAE;QACN,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,cAAc;QACzB,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5D,OAAO,EAAE,CAAC,6CAA6C,CAAC;QACxD,iBAAiB,EAAE,CAAC,8BAA8B,CAAC;KACnD;CACD,CAAA;AAED;;;;;;;;;;GAUG;AACH;;;;;;;GAOG;AACH,MAAM,aAAa,GAA2B;IAC7C,MAAM,EAAE,oBAAoB;IAC5B,eAAe,EAAE,mCAAmC;CACpD,CAAA;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC5B,OAAe,EACf,IAAY,EACZ,OAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3D,IAAI,MAAM,EAAE,CAAC;QACZ,qEAAqE;QACrE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzC,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,IAAI,EAAE,CAAA;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAA;IAClD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AAC/C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,YAAY,CAAE,OAAe,EAAE,OAAgB;IAC9D,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;WACvD,MAAM,CAAC,OAAO,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAA;IACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,SAAS,CAAA;IACjB,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IACpD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAA;IACjB,CAAC;AACF,CAAC;AAED,MAAM,UAAU,aAAa,CAAE,OAAe;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;AACvB,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Where this kit talks to Reclack, and with what.
+ *
+ * Defaults rather than required options. None of this is a decision a page
+ * embedding a wallet picker should have to make: it is Reclack's own
+ * infrastructure, and a host that had to supply it would be configuring our
+ * deployment on our behalf. Every value here can still be overridden, for a
+ * sandbox, a private endpoint, or a partner running the kit under its own
+ * name.
+ */
+/** The API the wallet catalogue is a configuration row of. */
+export declare const DEFAULT_API_URL = "https://api.reclack.com";
+/**
+ * Reclack's Reown project id, used only to pair with a wallet that injects
+ * nothing into the page: Safe, Kraken, BitPay, Bitcoin.com and Blockchain.com
+ * reach an app over WalletConnect and cannot be seen any other way.
+ *
+ * Public by design. It identifies the page to the relay and carries no
+ * authority, which is why it ships here rather than being asked of every
+ * host. It is already in the bundle every Reclack checkout serves.
+ */
+export declare const DEFAULT_WALLETCONNECT_PROJECT_ID = "9bb122bca7ef21f2c2110494ad9ad559";
+/**
+ * Where Solana balances are read from.
+ *
+ * Solana wallets sign; they do not answer questions about the chain, so there
+ * is no provider to fall back on the way there is on EVM. The public endpoint
+ * is rate-limited and fine for one balance on a page; anything heavier should
+ * pass its own.
+ */
+export declare const DEFAULT_SVM_RPC_URL = "https://api.mainnet-beta.solana.com";
+/**
+ * The read endpoint for an EVM chain, from the registry already pinned in
+ * this package.
+ *
+ * The same endpoints the kit would propose to a wallet when adding a chain,
+ * reused rather than listed twice: the reason they are pinned in the bundle
+ * at all is that they are reviewed, and a second list would not be.
+ */
+export declare function defaultRpcUrl(chainId: number): string | undefined;

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,8DAA8D;AAC9D,eAAO,MAAM,eAAe,4BAA4B,CAAA;AAExD;;;;;;;;GAQG;AACH,eAAO,MAAM,gCAAgC,qCAAqC,CAAA;AAElF;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,wCAAwC,CAAA;AAExE;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAE,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAElE"}

package/dist/config.js

@@ -0,0 +1,44 @@
+import { chainMetadata } from './chains.js';
+/**
+ * Where this kit talks to Reclack, and with what.
+ *
+ * Defaults rather than required options. None of this is a decision a page
+ * embedding a wallet picker should have to make: it is Reclack's own
+ * infrastructure, and a host that had to supply it would be configuring our
+ * deployment on our behalf. Every value here can still be overridden, for a
+ * sandbox, a private endpoint, or a partner running the kit under its own
+ * name.
+ */
+/** The API the wallet catalogue is a configuration row of. */
+export const DEFAULT_API_URL = 'https://api.reclack.com';
+/**
+ * Reclack's Reown project id, used only to pair with a wallet that injects
+ * nothing into the page: Safe, Kraken, BitPay, Bitcoin.com and Blockchain.com
+ * reach an app over WalletConnect and cannot be seen any other way.
+ *
+ * Public by design. It identifies the page to the relay and carries no
+ * authority, which is why it ships here rather than being asked of every
+ * host. It is already in the bundle every Reclack checkout serves.
+ */
+export const DEFAULT_WALLETCONNECT_PROJECT_ID = '9bb122bca7ef21f2c2110494ad9ad559';
+/**
+ * Where Solana balances are read from.
+ *
+ * Solana wallets sign; they do not answer questions about the chain, so there
+ * is no provider to fall back on the way there is on EVM. The public endpoint
+ * is rate-limited and fine for one balance on a page; anything heavier should
+ * pass its own.
+ */
+export const DEFAULT_SVM_RPC_URL = 'https://api.mainnet-beta.solana.com';
+/**
+ * The read endpoint for an EVM chain, from the registry already pinned in
+ * this package.
+ *
+ * The same endpoints the kit would propose to a wallet when adding a chain,
+ * reused rather than listed twice: the reason they are pinned in the bundle
+ * at all is that they are reviewed, and a second list would not be.
+ */
+export function defaultRpcUrl(chainId) {
+    return chainMetadata(chainId)?.rpcUrls[0];
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAE3C;;;;;;;;;GASG;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,eAAe,GAAG,yBAAyB,CAAA;AAExD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,kCAAkC,CAAA;AAElF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,qCAAqC,CAAA;AAExE;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAE,OAAe;IAC7C,OAAO,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;AAC1C,CAAC"}

package/dist/deep-links.d.ts

@@ -0,0 +1,22 @@
+import { type MobileOS } from './device.js';
+/**
+ * Whether this wallet has a phone application that can read a pairing code.
+ *
+ * Read off the table above rather than kept as a second list of its own. Every
+ * entry there is a mobile link the wallet published to the WalletConnect
+ * registry, and a wallet with no phone application publishes none.
+ *
+ * Asked by a desktop checkout, where a code can only be scanned. On a phone it
+ * can be pasted instead, so one is offered there whatever this says.
+ */
+export declare function walletScans(id: string): boolean;
+/**
+ * The link that hands this pairing string to one named wallet, or nothing
+ * where that wallet publishes no way to be reached.
+ */
+export declare function walletPairingLink(id: string, uri: string): string | undefined;
+/**
+ * The link that opens this checkout in one wallet, or nothing if that wallet
+ * has no known one.
+ */
+export declare function walletDeepLink(id: string, url: string, platform?: MobileOS | undefined): string | undefined;

package/dist/deep-links.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deep-links.d.ts","sourceRoot":"","sources":["../src/deep-links.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAA;AA0MrD;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAEhD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAU9E;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC7B,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,QAAQ,GAAG,SAAsB,GACzC,MAAM,GAAG,SAAS,CAWpB"}