@solidus-network/sdk 0.5.0 → 0.6.1

package/dist/chain/podbundle.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Pod credential-bundle encryption (privacy rebuild §5.6).
+ *
+ * The wallet seals its credential bundle (BBS signature + 8 messages +
+ * header + epoch + issuer pubkey) under `pod_wrap_key` — HKDF'd from the
+ * seed on the device (§5.1, `derivePodWrapKey`) — before storing it as a
+ * Solid resource in the user's pod. Solidus never holds `pod_wrap_key`, so
+ * the at-rest resource is opaque to us: the same encrypted blob serves the
+ * BD-1 fallback (the wallet reads + decrypts it locally, then ferries the
+ * plaintext to the stateless prover) and multi-device sync (a fresh device
+ * with the same seed re-derives the key and decrypts).
+ *
+ * AES-256-GCM via WebCrypto (`globalThis.crypto.subtle`) — identical in the
+ * browser wallet and in node. The version tag is bound as AES-GCM
+ * additional-authenticated-data, so a format downgrade fails the tag.
+ */
+export declare const POD_BUNDLE_V1 = "solidus.podbundle.v1";
+export interface SealedBundle {
+    /** Format tag — bound as GCM AAD. */
+    v: string;
+    /** 12-byte AES-GCM nonce, hex. Fresh per seal. */
+    iv: string;
+    /** Ciphertext ‖ 16-byte GCM tag, hex. */
+    ct: string;
+}
+/** Seal a plaintext bundle under `podWrapKey`. Fresh random IV per call. */
+export declare function sealCredentialBundle(podWrapKey: Uint8Array, plaintext: Uint8Array): Promise<SealedBundle>;
+/** Open a sealed bundle. Throws on wrong key, tampered ciphertext, or version mismatch. */
+export declare function openCredentialBundle(podWrapKey: Uint8Array, sealed: SealedBundle): Promise<Uint8Array>;
+//# sourceMappingURL=podbundle.d.ts.map

package/dist/chain/podbundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"podbundle.d.ts","sourceRoot":"","sources":["../../src/chain/podbundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,aAAa,yBAAyB,CAAA;AAEnD,MAAM,WAAW,YAAY;IAC3B,qCAAqC;IACrC,CAAC,EAAE,MAAM,CAAA;IACT,kDAAkD;IAClD,EAAE,EAAE,MAAM,CAAA;IACV,yCAAyC;IACzC,EAAE,EAAE,MAAM,CAAA;CACX;AA8BD,4EAA4E;AAC5E,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,YAAY,CAAC,CAavB;AAED,2FAA2F;AAC3F,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,UAAU,EACtB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,UAAU,CAAC,CAarB"}

package/dist/chain/podbundle.js

@@ -0,0 +1,74 @@
+/**
+ * Pod credential-bundle encryption (privacy rebuild §5.6).
+ *
+ * The wallet seals its credential bundle (BBS signature + 8 messages +
+ * header + epoch + issuer pubkey) under `pod_wrap_key` — HKDF'd from the
+ * seed on the device (§5.1, `derivePodWrapKey`) — before storing it as a
+ * Solid resource in the user's pod. Solidus never holds `pod_wrap_key`, so
+ * the at-rest resource is opaque to us: the same encrypted blob serves the
+ * BD-1 fallback (the wallet reads + decrypts it locally, then ferries the
+ * plaintext to the stateless prover) and multi-device sync (a fresh device
+ * with the same seed re-derives the key and decrypts).
+ *
+ * AES-256-GCM via WebCrypto (`globalThis.crypto.subtle`) — identical in the
+ * browser wallet and in node. The version tag is bound as AES-GCM
+ * additional-authenticated-data, so a format downgrade fails the tag.
+ */
+export const POD_BUNDLE_V1 = 'solidus.podbundle.v1';
+function subtle() {
+    const c = globalThis.crypto;
+    if (!c?.subtle) {
+        throw new Error('WebCrypto SubtleCrypto is unavailable in this runtime');
+    }
+    return c.subtle;
+}
+function assertKey(key) {
+    if (key.length !== 32) {
+        throw new Error(`pod wrap key must be 32 bytes (AES-256), got ${key.length}`);
+    }
+}
+function toHex(bytes) {
+    let out = '';
+    for (let i = 0; i < bytes.length; i++)
+        out += bytes[i].toString(16).padStart(2, '0');
+    return out;
+}
+function fromHex(hex) {
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < bytes.length; i++) {
+        bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return bytes;
+}
+/** Seal a plaintext bundle under `podWrapKey`. Fresh random IV per call. */
+export async function sealCredentialBundle(podWrapKey, plaintext) {
+    assertKey(podWrapKey);
+    const s = subtle();
+    const iv = globalThis.crypto.getRandomValues(new Uint8Array(12));
+    const key = await s.importKey('raw', ab(podWrapKey), 'AES-GCM', false, ['encrypt']);
+    const ct = new Uint8Array(await s.encrypt({ name: 'AES-GCM', iv: ab(iv), additionalData: ab(aad()) }, key, ab(plaintext)));
+    return { v: POD_BUNDLE_V1, iv: toHex(iv), ct: toHex(ct) };
+}
+/** Open a sealed bundle. Throws on wrong key, tampered ciphertext, or version mismatch. */
+export async function openCredentialBundle(podWrapKey, sealed) {
+    assertKey(podWrapKey);
+    if (sealed.v !== POD_BUNDLE_V1) {
+        throw new Error(`unsupported sealed-bundle version ${sealed.v}`);
+    }
+    const s = subtle();
+    const key = await s.importKey('raw', ab(podWrapKey), 'AES-GCM', false, ['decrypt']);
+    const pt = await s.decrypt({ name: 'AES-GCM', iv: ab(fromHex(sealed.iv)), additionalData: ab(aad()) }, key, ab(fromHex(sealed.ct)));
+    return new Uint8Array(pt);
+}
+function aad() {
+    return new TextEncoder().encode(POD_BUNDLE_V1);
+}
+// WebCrypto wants a plain-ArrayBuffer-backed source; copy into a fresh
+// ArrayBuffer so a SharedArrayBuffer-backed input can't leak in and the
+// current lib.dom `ArrayBufferView<ArrayBuffer>` constraint is satisfied.
+function ab(bytes) {
+    const out = new ArrayBuffer(bytes.byteLength);
+    new Uint8Array(out).set(bytes);
+    return out;
+}
+//# sourceMappingURL=podbundle.js.map

package/dist/chain/podbundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"podbundle.js","sourceRoot":"","sources":["../../src/chain/podbundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAC,MAAM,aAAa,GAAG,sBAAsB,CAAA;AAWnD,SAAS,MAAM;IACb,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,CAAA;IACpD,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAA;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,GAAe;IAChC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gDAAgD,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IAC/E,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACrF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAsB,EACtB,SAAqB;IAErB,SAAS,CAAC,UAAU,CAAC,CAAA;IACrB,MAAM,CAAC,GAAG,MAAM,EAAE,CAAA;IAClB,MAAM,EAAE,GAAI,UAAU,CAAC,MAAiB,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IACnF,MAAM,EAAE,GAAG,IAAI,UAAU,CACvB,MAAM,CAAC,CAAC,OAAO,CACb,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAC1D,GAAG,EACH,EAAE,CAAC,SAAS,CAAC,CACd,CACF,CAAA;IACD,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,EAAE,CAAA;AAC3D,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,UAAsB,EACtB,MAAoB;IAEpB,SAAS,CAAC,UAAU,CAAC,CAAA;IACrB,IAAI,MAAM,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,EAAE,CAAA;IAClB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IACnF,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,OAAO,CACxB,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAC1E,GAAG,EACH,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACvB,CAAA;IACD,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;AAC3B,CAAC;AAED,SAAS,GAAG;IACV,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAA;AAChD,CAAC;AAED,uEAAuE;AACvE,wEAAwE;AACxE,0EAA0E;AAC1E,SAAS,EAAE,CAAC,KAAiB;IAC3B,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC7C,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC9B,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/chain/podsync.d.ts

@@ -0,0 +1,30 @@
+import type { SealedBundle } from './podbundle.js';
+/**
+ * Deterministic opaque resource locator for the pod bundle:
+ * `hex(HKDF-SHA-512(seed64, ∅, "solidus.pod.bundlelocator.v1", 16))`.
+ * Seed-bound (device B finds it) but non-correlatable (16 opaque bytes).
+ */
+export declare function derivePodBundleLocator(seed64: Uint8Array): string;
+/** Abstract pod resource store — put/get a sealed bundle by locator. */
+export interface PodBundleClient {
+    put(locator: string, sealed: SealedBundle): Promise<void>;
+    get(locator: string): Promise<SealedBundle | null>;
+}
+/** Seal-and-store: write the sealed bundle to the seed's pod locator. */
+export declare function syncBundleToPod(client: PodBundleClient, seed64: Uint8Array, sealed: SealedBundle): Promise<void>;
+/** Fetch the sealed bundle for a seed (null if none synced). Caller decrypts. */
+export declare function restoreBundleFromPod(client: PodBundleClient, seed64: Uint8Array): Promise<SealedBundle | null>;
+export declare function createInMemoryPodBundleClient(): PodBundleClient;
+/**
+ * A pod bundle client backed by an HTTP Solid resource:
+ * `PUT/GET {baseUrl}/credentials/kyc/{locator}.bundle.enc`. `authToken` is the
+ * wallet's Solid access token; `fetchImpl` is injectable for tests. A 404 on
+ * GET means "no bundle yet" → null (not an error). Only the sealed (opaque)
+ * bytes ever leave the device.
+ */
+export declare function createHttpPodBundleClient(opts: {
+    baseUrl: string;
+    authToken?: string;
+    fetchImpl?: typeof fetch;
+}): PodBundleClient;
+//# sourceMappingURL=podsync.d.ts.map

package/dist/chain/podsync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"podsync.d.ts","sourceRoot":"","sources":["../../src/chain/podsync.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAiBlD;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAGjE;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzD,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;CACnD;AAED,yEAAyE;AACzE,wBAAsB,eAAe,CACnC,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,iFAAiF;AACjF,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,eAAe,EACvB,MAAM,EAAE,UAAU,GACjB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAE9B;AAMD,wBAAgB,6BAA6B,IAAI,eAAe,CAU/D;AAMD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CACzB,GAAG,eAAe,CA0BlB"}

package/dist/chain/podsync.js

@@ -0,0 +1,106 @@
+/**
+ * Pod multi-device sync (privacy rebuild §5.6).
+ *
+ * The single AES-256-GCM bundle sealed under `pod_wrap_key` (see
+ * `podbundle.ts`) doubles as multi-device continuity: a fresh device with the
+ * SAME seed re-derives both the wrap key AND a deterministic resource locator,
+ * pulls the sealed resource from the pod, and decrypts it — reconstructing a
+ * working credential with no prior local state.
+ *
+ * The locator is HKDF-derived from the seed so device B knows where to look
+ * without any prior coordination, yet it is an opaque 16-byte id — not a DID,
+ * not correlatable to identity. A different seed derives a different locator
+ * and cannot even find (let alone read) the resource.
+ *
+ * NON-BLOCKING (§5.6): nothing here is on the core unlinkability path. Proof
+ * generation is pure local crypto over the bundle and never calls the pod, so
+ * an offline/unhealthy Solid server cannot break a presentation. Sync is a
+ * convenience layer on top.
+ */
+import { hkdf } from '@noble/hashes/hkdf';
+import { sha512 } from '@noble/hashes/sha512';
+import { POD_BUNDLE_V1 } from './podbundle.js';
+const LOCATOR_INFO_TAG = 'solidus.pod.bundlelocator.v1';
+function assertSeed64(seed64) {
+    if (seed64.length !== 64) {
+        throw new Error(`seed must be the 64-byte BIP-39 seed, got ${seed64.length} bytes`);
+    }
+}
+function toHex(bytes) {
+    let out = '';
+    for (let i = 0; i < bytes.length; i++)
+        out += bytes[i].toString(16).padStart(2, '0');
+    return out;
+}
+/**
+ * Deterministic opaque resource locator for the pod bundle:
+ * `hex(HKDF-SHA-512(seed64, ∅, "solidus.pod.bundlelocator.v1", 16))`.
+ * Seed-bound (device B finds it) but non-correlatable (16 opaque bytes).
+ */
+export function derivePodBundleLocator(seed64) {
+    assertSeed64(seed64);
+    return toHex(hkdf(sha512, seed64, new Uint8Array(0), new TextEncoder().encode(LOCATOR_INFO_TAG), 16));
+}
+/** Seal-and-store: write the sealed bundle to the seed's pod locator. */
+export async function syncBundleToPod(client, seed64, sealed) {
+    await client.put(derivePodBundleLocator(seed64), sealed);
+}
+/** Fetch the sealed bundle for a seed (null if none synced). Caller decrypts. */
+export async function restoreBundleFromPod(client, seed64) {
+    return client.get(derivePodBundleLocator(seed64));
+}
+// ---------------------------------------------------------------------------
+// In-memory client — tests + single-process use.
+// ---------------------------------------------------------------------------
+export function createInMemoryPodBundleClient() {
+    const store = new Map();
+    return {
+        async put(locator, sealed) {
+            store.set(locator, sealed);
+        },
+        async get(locator) {
+            return store.get(locator) ?? null;
+        },
+    };
+}
+// ---------------------------------------------------------------------------
+// HTTP (Solid resource) client.
+// ---------------------------------------------------------------------------
+/**
+ * A pod bundle client backed by an HTTP Solid resource:
+ * `PUT/GET {baseUrl}/credentials/kyc/{locator}.bundle.enc`. `authToken` is the
+ * wallet's Solid access token; `fetchImpl` is injectable for tests. A 404 on
+ * GET means "no bundle yet" → null (not an error). Only the sealed (opaque)
+ * bytes ever leave the device.
+ */
+export function createHttpPodBundleClient(opts) {
+    const doFetch = opts.fetchImpl ?? globalThis.fetch;
+    if (!doFetch)
+        throw new Error('no fetch implementation available');
+    const base = opts.baseUrl.replace(/\/$/, '');
+    const url = (locator) => `${base}/credentials/kyc/${locator}.bundle.enc`;
+    const headers = (extra = {}) => opts.authToken ? { ...extra, authorization: `Bearer ${opts.authToken}` } : extra;
+    return {
+        async put(locator, sealed) {
+            const res = await doFetch(url(locator), {
+                method: 'PUT',
+                headers: headers({ 'content-type': 'application/json' }),
+                body: JSON.stringify(sealed),
+            });
+            if (!res.ok)
+                throw new Error(`pod PUT failed: ${res.status}`);
+        },
+        async get(locator) {
+            const res = await doFetch(url(locator), { method: 'GET', headers: headers() });
+            if (res.status === 404)
+                return null;
+            if (!res.ok)
+                throw new Error(`pod GET failed: ${res.status}`);
+            const body = (await res.json());
+            if (body?.v !== POD_BUNDLE_V1)
+                throw new Error('pod resource is not a valid sealed bundle');
+            return body;
+        },
+    };
+}
+//# sourceMappingURL=podsync.js.map

package/dist/chain/podsync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"podsync.js","sourceRoot":"","sources":["../../src/chain/podsync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE9C,MAAM,gBAAgB,GAAG,8BAA8B,CAAA;AAEvD,SAAS,YAAY,CAAC,MAAkB;IACtC,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6CAA6C,MAAM,CAAC,MAAM,QAAQ,CAAC,CAAA;IACrF,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACrF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAkB;IACvD,YAAY,CAAC,MAAM,CAAC,CAAA;IACpB,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AACvG,CAAC;AAQD,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAuB,EACvB,MAAkB,EAClB,MAAoB;IAEpB,MAAM,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;AAC1D,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAuB,EACvB,MAAkB;IAElB,OAAO,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAA;AACnD,CAAC;AAED,8EAA8E;AAC9E,iDAAiD;AACjD,8EAA8E;AAE9E,MAAM,UAAU,6BAA6B;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAA;IAC7C,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM;YACvB,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC5B,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,OAAO;YACf,OAAO,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAA;QACnC,CAAC;KACF,CAAA;AACH,CAAC;AAED,8EAA8E;AAC9E,gCAAgC;AAChC,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAIzC;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAK,UAAU,CAAC,KAAsB,CAAA;IACpE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IAC5C,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,IAAI,oBAAoB,OAAO,aAAa,CAAA;IAChF,MAAM,OAAO,GAAG,CAAC,QAAgC,EAAE,EAAE,EAAE,CACrD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;IAElF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM;YACvB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;gBACtC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBACxD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;aAC7B,CAAC,CAAA;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,OAAO;YACf,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;YAC9E,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAA;YACnC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;YAC7D,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAA;YAC/C,IAAI,IAAI,EAAE,CAAC,KAAK,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;YAC3F,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/chain/recovery.d.ts

@@ -0,0 +1,54 @@
+import { type ChainTransaction } from './transaction.js';
+export interface GuardianApproval {
+    guardian_did: string;
+    signature: number[];
+}
+export interface RecoveryPolicy {
+    guardians: string[];
+    threshold: number;
+    delay_blocks: number;
+}
+/**
+ * The 32-byte BLAKE3 message a guardian signs to approve a recovery. Mirrors the Rust
+ * `recovery_signing_message`: BLAKE3( "solidus.did.recover.v1" ‖ (network.len() as u32 LE) ‖ network
+ * ‖ (subject_did.len() as u32 LE) ‖ subject_did ‖ new_public_key[32] ‖ recovery_nonce u64 LE ).
+ */
+export declare function recoverySigningMessage(network: string, subjectDid: string, newPublicKey: Uint8Array, recoveryNonce: number | bigint): Uint8Array;
+/**
+ * Sign the recovery message as a guardian. Returns the 64-byte Ed25519 signature as a number[],
+ * ready to drop into a `GuardianApproval`. The guardian signs the 32-byte hash directly (matching
+ * the Rust executor, which recomputes the same hash and verifies against the guardian's on-chain key).
+ */
+export declare function signAsGuardian(guardianPrivateKey: string | Uint8Array, params: {
+    network: string;
+    subjectDid: string;
+    newPublicKey: Uint8Array;
+    recoveryNonce: number | bigint;
+}): Promise<number[]>;
+/**
+ * Build a signed `DidRecover` transaction. `signerPrivateKey` is the NEW key — the chain enforces
+ * `sender_pubkey == new_public_key`, so this throws if the supplied `newPublicKey` is not the
+ * signer's own public key (mirroring that guard before a doomed submit).
+ */
+export declare function buildRecover(opts: {
+    signerPrivateKey: string;
+    subjectDid: string;
+    newPublicKey: Uint8Array;
+    approvals: GuardianApproval[];
+    nonce: number;
+}): Promise<ChainTransaction>;
+/** Relay a signed `DidRecover` tx and poll its receipt. Mirrors `did.submitCreate`. */
+export declare function submitRecover(rpc: {
+    call<T>(method: string, params: unknown[]): Promise<T>;
+}, signedTx: ChainTransaction): Promise<void>;
+/**
+ * Build a signed `DidUpdate` that sets the DID's recovery policy (a k-of-n guardian set). The signer
+ * must currently control the DID. Patch key order = Rust field order: guardians, threshold, delay_blocks.
+ */
+export declare function buildSetRecoveryPolicy(opts: {
+    signerPrivateKey: string;
+    did: string;
+    policy: RecoveryPolicy;
+    nonce: number;
+}): Promise<ChainTransaction>;
+//# sourceMappingURL=recovery.d.ts.map

package/dist/chain/recovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../src/chain/recovery.ts"],"names":[],"mappings":"AAYA,OAAO,EAA6C,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAEnG,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;CACrB;AAoBD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,UAAU,EACxB,aAAa,EAAE,MAAM,GAAG,MAAM,GAC7B,UAAU,CAaZ;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,kBAAkB,EAAE,MAAM,GAAG,UAAU,EACvC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,UAAU,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,GACxG,OAAO,CAAC,MAAM,EAAE,CAAC,CAKnB;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,UAAU,CAAA;IACxB,SAAS,EAAE,gBAAgB,EAAE,CAAA;IAC7B,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAe5B;AAED,uFAAuF;AACvF,wBAAsB,aAAa,CACjC,GAAG,EAAE;IAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CAAE,EAC/D,QAAQ,EAAE,gBAAgB,GACzB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,gBAAgB,EAAE,MAAM,CAAA;IACxB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,cAAc,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;CACd,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAgB5B"}

package/dist/chain/recovery.js

@@ -0,0 +1,115 @@
+/**
+ * DID social recovery — SDK surface (sub-project #2).
+ *
+ * Byte-for-byte compatible with the Rust protocol primitive (sub-project #1): the recovery signing
+ * message and the `DidRecover` / `SetRecoveryPolicy` payload JSON must match the Rust exactly, or a
+ * guardian signature built here will not verify on chain. Parity is locked by shared test vectors
+ * generated from Rust (see recovery.test.ts; vectors from solidus-txns commit 21377537).
+ */
+import { blake3 } from '@noble/hashes/blake3';
+import * as ed from '@noble/ed25519';
+// Importing transaction.ts also runs its `ed.etc.sha512Sync = …` side-effect, so @noble/ed25519 is
+// configured for both this module and any consumer that only imports recovery.
+import { buildTransaction, hexToBytes, pollReceipt } from './transaction.js';
+const RECOVER_DOMAIN_SEP = new TextEncoder().encode('solidus.did.recover.v1');
+function u32le(n) {
+    const b = new Uint8Array(4);
+    new DataView(b.buffer).setUint32(0, n, true);
+    return b;
+}
+function u64le(n) {
+    const b = new Uint8Array(8);
+    new DataView(b.buffer).setBigUint64(0, BigInt(n), true);
+    return b;
+}
+function bytesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    for (let i = 0; i < a.length; i++)
+        if (a[i] !== b[i])
+            return false;
+    return true;
+}
+/**
+ * The 32-byte BLAKE3 message a guardian signs to approve a recovery. Mirrors the Rust
+ * `recovery_signing_message`: BLAKE3( "solidus.did.recover.v1" ‖ (network.len() as u32 LE) ‖ network
+ * ‖ (subject_did.len() as u32 LE) ‖ subject_did ‖ new_public_key[32] ‖ recovery_nonce u64 LE ).
+ */
+export function recoverySigningMessage(network, subjectDid, newPublicKey, recoveryNonce) {
+    if (newPublicKey.length !== 32)
+        throw new Error('newPublicKey must be 32 bytes');
+    const net = new TextEncoder().encode(network);
+    const sub = new TextEncoder().encode(subjectDid);
+    const parts = [RECOVER_DOMAIN_SEP, u32le(net.length), net, u32le(sub.length), sub, newPublicKey, u64le(recoveryNonce)];
+    const total = parts.reduce((n, p) => n + p.length, 0);
+    const buf = new Uint8Array(total);
+    let off = 0;
+    for (const p of parts) {
+        buf.set(p, off);
+        off += p.length;
+    }
+    return blake3(buf);
+}
+/**
+ * Sign the recovery message as a guardian. Returns the 64-byte Ed25519 signature as a number[],
+ * ready to drop into a `GuardianApproval`. The guardian signs the 32-byte hash directly (matching
+ * the Rust executor, which recomputes the same hash and verifies against the guardian's on-chain key).
+ */
+export async function signAsGuardian(guardianPrivateKey, params) {
+    const sk = typeof guardianPrivateKey === 'string' ? hexToBytes(guardianPrivateKey) : guardianPrivateKey;
+    const msg = recoverySigningMessage(params.network, params.subjectDid, params.newPublicKey, params.recoveryNonce);
+    const sig = await ed.signAsync(msg, sk);
+    return Array.from(sig);
+}
+/**
+ * Build a signed `DidRecover` transaction. `signerPrivateKey` is the NEW key — the chain enforces
+ * `sender_pubkey == new_public_key`, so this throws if the supplied `newPublicKey` is not the
+ * signer's own public key (mirroring that guard before a doomed submit).
+ */
+export async function buildRecover(opts) {
+    if (opts.newPublicKey.length !== 32)
+        throw new Error('newPublicKey must be 32 bytes');
+    const signerPub = await ed.getPublicKeyAsync(hexToBytes(opts.signerPrivateKey));
+    if (!bytesEqual(signerPub, opts.newPublicKey)) {
+        throw new Error('buildRecover: newPublicKey must equal the signer public key (the recovery envelope sender == the new key)');
+    }
+    // Key order = Rust struct-field order: did, new_public_key, approvals (locked by the parity test).
+    const payload = {
+        DidRecover: {
+            did: opts.subjectDid,
+            new_public_key: Array.from(opts.newPublicKey),
+            approvals: opts.approvals,
+        },
+    };
+    return buildTransaction(opts.signerPrivateKey, opts.nonce, payload);
+}
+/** Relay a signed `DidRecover` tx and poll its receipt. Mirrors `did.submitCreate`. */
+export async function submitRecover(rpc, signedTx) {
+    const txHash = await rpc.call('solidus_sendTransaction', [JSON.stringify(signedTx)]);
+    const receipt = await pollReceipt(rpc, txHash);
+    if (!receipt.status.startsWith('success')) {
+        throw new Error(`DidRecover failed: ${receipt.status}`);
+    }
+}
+/**
+ * Build a signed `DidUpdate` that sets the DID's recovery policy (a k-of-n guardian set). The signer
+ * must currently control the DID. Patch key order = Rust field order: guardians, threshold, delay_blocks.
+ */
+export async function buildSetRecoveryPolicy(opts) {
+    const payload = {
+        DidUpdate: {
+            did: opts.did,
+            patches: [
+                {
+                    SetRecoveryPolicy: {
+                        guardians: opts.policy.guardians,
+                        threshold: opts.policy.threshold,
+                        delay_blocks: opts.policy.delay_blocks,
+                    },
+                },
+            ],
+        },
+    };
+    return buildTransaction(opts.signerPrivateKey, opts.nonce, payload);
+}
+//# sourceMappingURL=recovery.js.map

package/dist/chain/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../src/chain/recovery.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,mGAAmG;AACnG,+EAA+E;AAC/E,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAyB,MAAM,kBAAkB,CAAA;AAanG,MAAM,kBAAkB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAA;AAE7E,SAAS,KAAK,CAAC,CAAS;IACtB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5C,OAAO,CAAC,CAAA;AACV,CAAC;AACD,SAAS,KAAK,CAAC,CAAkB;IAC/B,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACvD,OAAO,CAAC,CAAA;AACV,CAAC;AACD,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;IAClE,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAe,EACf,UAAkB,EAClB,YAAwB,EACxB,aAA8B;IAE9B,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAChF,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAChD,MAAM,KAAK,GAAG,CAAC,kBAAkB,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAA;IACtH,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACrD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,GAAG,GAAG,CAAC,CAAA;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACf,GAAG,IAAI,CAAC,CAAC,MAAM,CAAA;IACjB,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAA;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,kBAAuC,EACvC,MAAyG;IAEzG,MAAM,EAAE,GAAG,OAAO,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAA;IACvG,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,aAAa,CAAC,CAAA;IAChH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;IACvC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAMlC;IACC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACrF,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAA;IAC/E,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,2GAA2G,CAAC,CAAA;IAC9H,CAAC;IACD,mGAAmG;IACnG,MAAM,OAAO,GAAG;QACd,UAAU,EAAE;YACV,GAAG,EAAE,IAAI,CAAC,UAAU;YACpB,cAAc,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YAC7C,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B;KACF,CAAA;IACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AACrE,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAA+D,EAC/D,QAA0B;IAE1B,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,yBAAyB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC5F,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IACzD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAK5C;IACC,MAAM,OAAO,GAAG;QACd,SAAS,EAAE;YACT,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,OAAO,EAAE;gBACP;oBACE,iBAAiB,EAAE;wBACjB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;wBAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;wBAChC,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY;qBACvC;iBACF;aACF;SACF;KACF,CAAA;IACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;AACrE,CAAC"}

package/dist/chain/transaction.d.ts

@@ -32,6 +32,25 @@ export interface RpcReceipt {
 export declare function pollReceipt(rpc: {
     call<T>(method: string, params: unknown[]): Promise<T>;
 }, txHash: string): Promise<RpcReceipt>;
+/**
+ * Fetch the signer's nonce, build, submit, and confirm a one-shot
+ * transaction — retrying when the receipt reports `invalid nonce`.
+ *
+ * `solidus_getNonce` can lag the previous transaction's receipt by a
+ * beat, so an immediate follow-up tx from the same signer races it
+ * (observed live 2026-07-13: create → deactivate failed with
+ * "invalid nonce: expected 1, got 0"). The failed receipt names the
+ * expected nonce, so the retry is deterministic — no sleep-and-hope.
+ *
+ * Exactly ONE retry, on purpose: the observed race is a one-beat lag,
+ * and a caller that abandons this promise (e.g. behind a 5s
+ * withChainTimeout) cannot cancel it — every extra attempt widens the
+ * window in which an abandoned loop and a caller-level retry both land
+ * a non-idempotent payload (duplicate CredentialIssue) on chain.
+ */
+export declare function submitWithNonceRetry(rpc: {
+    call<T>(method: string, params: unknown[]): Promise<T>;
+}, signerKey: string, payload: unknown, label: string): Promise<RpcReceipt>;
 /**
  * Build and sign a transaction for the Solidus chain.
  */

package/dist/chain/transaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../src/chain/transaction.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAA;CACxD;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE;IAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CAAE,EAC/D,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,gBAAgB,CAAC,CAuB3B;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI9E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAIlE;AAID,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAMlD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIpD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAEhD"}
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../src/chain/transaction.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC,CAAA;CACxD;AAED;;;;;;;;;GASG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE;IAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CAAE,EAC/D,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,UAAU,CAAC,CAQrB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE;IAAE,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;CAAE,EAC/D,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,UAAU,CAAC,CAcrB;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,gBAAgB,CAAC,CAuB3B;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI9E;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAIlE;AAID,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAMlD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIpD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAEhD"}

package/dist/chain/transaction.js

@@ -35,6 +35,38 @@ export async function pollReceipt(rpc, txHash) {
     }
     throw new Error(`Transaction ${txHash} not confirmed after 10 seconds`);
 }
+/**
+ * Fetch the signer's nonce, build, submit, and confirm a one-shot
+ * transaction — retrying when the receipt reports `invalid nonce`.
+ *
+ * `solidus_getNonce` can lag the previous transaction's receipt by a
+ * beat, so an immediate follow-up tx from the same signer races it
+ * (observed live 2026-07-13: create → deactivate failed with
+ * "invalid nonce: expected 1, got 0"). The failed receipt names the
+ * expected nonce, so the retry is deterministic — no sleep-and-hope.
+ *
+ * Exactly ONE retry, on purpose: the observed race is a one-beat lag,
+ * and a caller that abandons this promise (e.g. behind a 5s
+ * withChainTimeout) cannot cancel it — every extra attempt widens the
+ * window in which an abandoned loop and a caller-level retry both land
+ * a non-idempotent payload (duplicate CredentialIssue) on chain.
+ */
+export async function submitWithNonceRetry(rpc, signerKey, payload, label) {
+    const address = await getAddressFromKey(signerKey);
+    let nonce = await rpc.call('solidus_getNonce', [address]);
+    for (let attempt = 0;; attempt++) {
+        const tx = await buildTransaction(signerKey, nonce, payload);
+        const txHash = await rpc.call('solidus_sendTransaction', [JSON.stringify(tx)]);
+        const receipt = await pollReceipt(rpc, txHash);
+        if (receipt.status.startsWith('success'))
+            return receipt;
+        const expected = /invalid nonce: expected (\d+)/.exec(receipt.status);
+        if (expected === null || attempt >= 1) {
+            throw new Error(`${label} failed: ${receipt.status}`);
+        }
+        nonce = Number(expected[1]);
+    }
+}
 /**
  * Build and sign a transaction for the Solidus chain.
  */

package/dist/chain/transaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../../src/chain/transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,yDAAyD;AACzD,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAe,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAsB5E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAA+D,EAC/D,MAAc;IAEd,MAAM,WAAW,GAAG,EAAE,CAAA,CAAC,mBAAmB;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAoB,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QACjF,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,iCAAiC,CAAC,CAAA;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,KAAa,EACb,OAAgB;IAEhB,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAExD,mEAAmE;IACnE,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;IACpC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAA,CAAC,gBAAgB;IACrF,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;IAEtE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IAC3F,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IAC1B,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAEhE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IAE7D,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QACpC,KAAK;QACL,OAAO;QACP,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;KACjC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,aAAqB;IAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IACxD,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAA;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAqB;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;IAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;AAClC,CAAC;AAED,sCAAsC;AAEtC,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AACpC,CAAC"}
+{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../../src/chain/transaction.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AAC7C,OAAO,IAAI,MAAM,MAAM,CAAA;AAEvB,yDAAyD;AACzD,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,CAAe,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAsB5E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAA+D,EAC/D,MAAc;IAEd,MAAM,WAAW,GAAG,EAAE,CAAA,CAAC,mBAAmB;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,CAAoB,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;QACjF,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAA;IAC1D,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,iCAAiC,CAAC,CAAA;AACzE,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAA+D,EAC/D,SAAiB,EACjB,OAAgB,EAChB,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAA;IAClD,IAAI,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,kBAAkB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAA;IACjE,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;QAC5D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,yBAAyB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACtF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC9C,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,OAAO,CAAA;QACxD,MAAM,QAAQ,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACrE,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,YAAY,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QACvD,CAAC;QACD,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,aAAqB,EACrB,KAAa,EACb,OAAgB;IAEhB,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAExD,mEAAmE;IACnE,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;IACpC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAA,CAAC,gBAAgB;IACrF,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAA;IAEtE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IAC3F,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IAC1B,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;IAEhE,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;IACpC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;IAE7D,OAAO;QACL,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QACpC,KAAK;QACL,OAAO;QACP,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;KACjC,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,aAAqB;IAC3D,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAA;IACxD,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAA;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,SAAqB;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAA;IAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtC,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA;AAClC,CAAC;AAED,sCAAsC;AAEtC,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAA;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AACpC,CAAC"}

package/dist/chain/transfer.d.ts

@@ -22,5 +22,5 @@ export interface TransferOptions {
     /** Optional nonce override; fetched via `solidus_getNonce` when omitted. */
     nonce?: number;
 }
-export declare function createChainTransfer(rpc: RpcClient): (opts: TransferOptions) => Promise<RpcReceipt>;
+export declare function createChainTransfer(rpc: RpcClient, network: string): (opts: TransferOptions) => Promise<RpcReceipt>;
 //# sourceMappingURL=transfer.d.ts.map

package/dist/chain/transfer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transfer.d.ts","sourceRoot":"","sources":["../../src/chain/transfer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEzC,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAEjF,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,CAAA;IACxB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;IACd,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,SAAS,IAOjB,MAAM,eAAe,KAAG,OAAO,CAAC,UAAU,CAAC,CA0B3E"}
+{"version":3,"file":"transfer.d.ts","sourceRoot":"","sources":["../../src/chain/transfer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAA;AAEzC,OAAO,EAAiC,KAAK,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAEjF,MAAM,WAAW,eAAe;IAC9B,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,CAAA;IACxB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAA;IACjB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;IACd,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,IAOlC,MAAM,eAAe,KAAG,OAAO,CAAC,UAAU,CAAC,CA6C3E"}

package/dist/chain/transfer.js

@@ -1,6 +1,6 @@
 import bs58 from 'bs58';
 import { buildTransaction, pollReceipt } from './transaction.js';
-export function createChainTransfer(rpc) {
+export function createChainTransfer(rpc, network) {
     /**
      * Submit a `Transfer` transaction, poll its receipt, and return it.
      * Throws on a failed receipt. The signer's address is derived from
@@ -15,9 +15,24 @@ export function createChainTransfer(rpc) {
         if (toBytes.length !== 20) {
             throw new Error(`chain.transfer: toAddress must decode to 20 bytes (got ${toBytes.length}); pass the base58 address, not the public key`);
         }
-        // Resolve nonce.
         const { getAddressFromKey } = await import('./transaction.js');
         const senderAddress = await getAddressFromKey(signerPrivateKey);
+        // Identity/value separation (interim convention — see
+        // .claude/plans/2026-06-11-did-payment-unlinkability.md): the SDK never
+        // signs a value Transfer from a DID/identity address. If the signer's
+        // address has a DID registered on chain, refuse — value must move with a
+        // separate payment account so that resolving a DID never exposes payment
+        // history. Relayer/sponsor funding accounts are not DIDs, so they pass.
+        // The protocol-level decouple that makes this guard redundant is roadmapped
+        // in .claude/plans/2026-06-26-did-value-account-decoupling.md.
+        const senderDid = `did:solidus:${network}:${senderAddress}`;
+        const existingDid = await rpc.call('solidus_didResolve', [senderDid]);
+        if (existingDid != null) {
+            throw new Error(`chain.transfer: refusing to sign a Transfer from identity address ${senderAddress} — ` +
+                `it has a DID registered. Move value with a separate payment account ` +
+                `(identity and value must stay unlinkable).`);
+        }
+        // Resolve nonce.
         const nonce = opts.nonce ?? (await rpc.call('solidus_getNonce', [senderAddress]));
         const payload = { Transfer: { to: Array.from(toBytes), amount } };
         const tx = await buildTransaction(signerPrivateKey, nonce, payload);

package/dist/chain/transfer.js.map

@@ -1 +1 @@
-{"version":3,"file":"transfer.js","sourceRoot":"","sources":["../../src/chain/transfer.ts"],"names":[],"mappings":"AAaA,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAmB,MAAM,kBAAkB,CAAA;AAajF,MAAM,UAAU,mBAAmB,CAAC,GAAc;IAChD;;;;;OAKG;IACH,OAAO,KAAK,UAAU,QAAQ,CAAC,IAAqB;QAClD,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QACpD,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,0DAA0D,OAAO,CAAC,MAAM,gDAAgD,CACzH,CAAA;QACH,CAAC;QAED,iBAAiB;QACjB,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC9D,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,CAAA;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAS,kBAAkB,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAEzF,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,CAAA;QACjE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;QAEnE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,yBAAyB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACtF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QACvD,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"transfer.js","sourceRoot":"","sources":["../../src/chain/transfer.ts"],"names":[],"mappings":"AAaA,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAmB,MAAM,kBAAkB,CAAA;AAajF,MAAM,UAAU,mBAAmB,CAAC,GAAc,EAAE,OAAe;IACjE;;;;;OAKG;IACH,OAAO,KAAK,UAAU,QAAQ,CAAC,IAAqB;QAClD,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;QACpD,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,0DAA0D,OAAO,CAAC,MAAM,gDAAgD,CACzH,CAAA;QACH,CAAC;QAED,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;QAC9D,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,CAAA;QAE/D,sDAAsD;QACtD,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,4EAA4E;QAC5E,+DAA+D;QAC/D,MAAM,SAAS,GAAG,eAAe,OAAO,IAAI,aAAa,EAAE,CAAA;QAC3D,MAAM,WAAW,GAAG,MAAM,GAAG,CAAC,IAAI,CAAU,oBAAoB,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;QAC9E,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,qEAAqE,aAAa,KAAK;gBACrF,sEAAsE;gBACtE,4CAA4C,CAC/C,CAAA;QACH,CAAC;QAED,iBAAiB;QACjB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAS,kBAAkB,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;QAEzF,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,EAAE,CAAA;QACjE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,gBAAgB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;QAEnE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAS,yBAAyB,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QACtF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC9C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QACvD,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;AACH,CAAC"}