@t-0/provider-sdk 1.1.28 → 1.1.30

package/lib/cjs/index.d.ts

@@ -1,7 +1,11 @@
+export * from "./crypto/index.js";
 export * from "./client/client.js";
 export * from "./service/service.js";
+export * from "./common/validation.js";
 export * from "./service/validate_response.js";
+export * from "./service/validate.js";
 export * from "./service/node.js";
+export { default as NetworkHeaders } from "./common/headers.js";
 export { connectNodeAdapter as nodeAdapter } from "@connectrpc/connect-node";
 export type { Client, HandlerContext } from "@connectrpc/connect";
 export * from './common/gen/tzero/v1/common/common_pb.js';

package/lib/cjs/index.js

@@ -35,12 +35,20 @@ var __importStar = (this && this.__importStar) || (function () {
         return result;
     };
 })();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PaymentIntentRecipient = exports.PaymentIntentProvider = exports.PaymentIntentBeneficiary = exports.PaymentIntentPayInProvider = exports.PaymentIntentNetwork = exports.nodeAdapter = void 0;
+exports.PaymentIntentRecipient = exports.PaymentIntentProvider = exports.PaymentIntentBeneficiary = exports.PaymentIntentPayInProvider = exports.PaymentIntentNetwork = exports.nodeAdapter = exports.NetworkHeaders = void 0;
+__exportStar(require("./crypto/index.js"), exports);
 __exportStar(require("./client/client.js"), exports);
 __exportStar(require("./service/service.js"), exports);
+__exportStar(require("./common/validation.js"), exports);
 __exportStar(require("./service/validate_response.js"), exports);
+__exportStar(require("./service/validate.js"), exports);
 __exportStar(require("./service/node.js"), exports);
+var headers_js_1 = require("./common/headers.js");
+Object.defineProperty(exports, "NetworkHeaders", { enumerable: true, get: function () { return __importDefault(headers_js_1).default; } });
 var connect_node_1 = require("@connectrpc/connect-node");
 Object.defineProperty(exports, "nodeAdapter", { enumerable: true, get: function () { return connect_node_1.connectNodeAdapter; } });
 __exportStar(require("./common/gen/tzero/v1/common/common_pb.js"), exports);

package/lib/cjs/service/health.d.ts

@@ -1,21 +1,4 @@
-import { type ServiceImpl } from "@connectrpc/connect";
-import { Health } from "./health_pb.js";
-/**
- * Headers carrying the identity of the SDK answering the probe. They ride on
- * the health response and nowhere else: `HealthCheckResponse` has a single
- * status field and `check` names its service in the request, so the contract
- * itself has no room for this — and taxing every callback with headers only the
- * probe reads would be worse.
- */
-export declare const SDK_ECOSYSTEM_HEADER = "T0-Sdk-Ecosystem";
-export declare const SDK_VERSION_HEADER = "T0-Sdk-Version";
-/**
- * Reports SERVING for the services registered on this server and NOT_FOUND for
- * anything else. The set is frozen at registration; nothing is computed per
- * request.
- *
- * `watch` is absent on purpose: it is server-streaming, and the body-hash
- * signature scheme these servers run behind has no story for streams. Omitting
- * it from a partial `ServiceImpl` makes connect-es answer UNIMPLEMENTED.
- */
-export declare const createHealthServiceImpl: (services: string[]) => Partial<ServiceImpl<typeof Health>>;
+import type { ServiceImpl } from "@connectrpc/connect";
+import type { Health } from "../common/health_pb.js";
+export { SDK_ECOSYSTEM_HEADER, SDK_VERSION_HEADER } from "../common/health.js";
+export declare const createHealthServiceImpl: (services: string[], version?: string) => Partial<ServiceImpl<typeof Health>>;

package/lib/cjs/service/health.js

@@ -1,46 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createHealthServiceImpl = exports.SDK_VERSION_HEADER = exports.SDK_ECOSYSTEM_HEADER = void 0;
-const protobuf_1 = require("@bufbuild/protobuf");
-const connect_1 = require("@connectrpc/connect");
-const health_pb_js_1 = require("./health_pb.js");
+const health_js_1 = require("../common/health.js");
 const version_js_1 = require("../version.js");
-/**
- * Headers carrying the identity of the SDK answering the probe. They ride on
- * the health response and nowhere else: `HealthCheckResponse` has a single
- * status field and `check` names its service in the request, so the contract
- * itself has no room for this — and taxing every callback with headers only the
- * probe reads would be worse.
- */
-exports.SDK_ECOSYSTEM_HEADER = "T0-Sdk-Ecosystem";
-exports.SDK_VERSION_HEADER = "T0-Sdk-Version";
-const SDK_ECOSYSTEM = "node";
-/**
- * Reports SERVING for the services registered on this server and NOT_FOUND for
- * anything else. The set is frozen at registration; nothing is computed per
- * request.
- *
- * `watch` is absent on purpose: it is server-streaming, and the body-hash
- * signature scheme these servers run behind has no story for streams. Omitting
- * it from a partial `ServiceImpl` makes connect-es answer UNIMPLEMENTED.
- */
-const createHealthServiceImpl = (services) => {
-    const registered = new Set(services);
-    const serving = (0, protobuf_1.create)(health_pb_js_1.HealthCheckResponseSchema, {
-        status: health_pb_js_1.HealthCheckResponse_ServingStatus.SERVING,
-    });
-    return {
-        check(req, ctx) {
-            ctx.responseHeader.set(exports.SDK_ECOSYSTEM_HEADER, SDK_ECOSYSTEM);
-            ctx.responseHeader.set(exports.SDK_VERSION_HEADER, version_js_1.SDK_VERSION);
-            const { service } = req;
-            // An empty service name asks about the process as a whole, which is up if
-            // this handler is running at all.
-            if (service !== "" && !registered.has(service)) {
-                throw new connect_1.ConnectError(`unknown service '${service}'`, connect_1.Code.NotFound);
-            }
-            return serving;
-        },
-    };
-};
+var health_js_2 = require("../common/health.js");
+Object.defineProperty(exports, "SDK_ECOSYSTEM_HEADER", { enumerable: true, get: function () { return health_js_2.SDK_ECOSYSTEM_HEADER; } });
+Object.defineProperty(exports, "SDK_VERSION_HEADER", { enumerable: true, get: function () { return health_js_2.SDK_VERSION_HEADER; } });
+const createHealthServiceImpl = (services, version) => (0, health_js_1.createHealthServiceImpl)(services, version ?? version_js_1.SDK_VERSION);
 exports.createHealthServiceImpl = createHealthServiceImpl;

package/lib/cjs/service/health_pb.d.ts

@@ -1,157 +1 @@
-import type { GenEnum, GenFile, GenMessage, GenService } from "@bufbuild/protobuf/codegenv2";
-import type { Message } from "@bufbuild/protobuf";
-/**
- * Describes the file grpc/health/v1/health.proto.
- */
-export declare const file_grpc_health_v1_health: GenFile;
-/**
- * @generated from message grpc.health.v1.HealthCheckRequest
- */
-export type HealthCheckRequest = Message<"grpc.health.v1.HealthCheckRequest"> & {
-    /**
-     * @generated from field: string service = 1;
-     */
-    service: string;
-};
-/**
- * Describes the message grpc.health.v1.HealthCheckRequest.
- * Use `create(HealthCheckRequestSchema)` to create a new message.
- */
-export declare const HealthCheckRequestSchema: GenMessage<HealthCheckRequest>;
-/**
- * @generated from message grpc.health.v1.HealthCheckResponse
- */
-export type HealthCheckResponse = Message<"grpc.health.v1.HealthCheckResponse"> & {
-    /**
-     * @generated from field: grpc.health.v1.HealthCheckResponse.ServingStatus status = 1;
-     */
-    status: HealthCheckResponse_ServingStatus;
-};
-/**
- * Describes the message grpc.health.v1.HealthCheckResponse.
- * Use `create(HealthCheckResponseSchema)` to create a new message.
- */
-export declare const HealthCheckResponseSchema: GenMessage<HealthCheckResponse>;
-/**
- * @generated from enum grpc.health.v1.HealthCheckResponse.ServingStatus
- */
-export declare enum HealthCheckResponse_ServingStatus {
-    /**
-     * @generated from enum value: UNKNOWN = 0;
-     */
-    UNKNOWN = 0,
-    /**
-     * @generated from enum value: SERVING = 1;
-     */
-    SERVING = 1,
-    /**
-     * @generated from enum value: NOT_SERVING = 2;
-     */
-    NOT_SERVING = 2,
-    /**
-     * Used only by the Watch method.
-     *
-     * @generated from enum value: SERVICE_UNKNOWN = 3;
-     */
-    SERVICE_UNKNOWN = 3
-}
-/**
- * Describes the enum grpc.health.v1.HealthCheckResponse.ServingStatus.
- */
-export declare const HealthCheckResponse_ServingStatusSchema: GenEnum<HealthCheckResponse_ServingStatus>;
-/**
- * @generated from message grpc.health.v1.HealthListRequest
- */
-export type HealthListRequest = Message<"grpc.health.v1.HealthListRequest"> & {};
-/**
- * Describes the message grpc.health.v1.HealthListRequest.
- * Use `create(HealthListRequestSchema)` to create a new message.
- */
-export declare const HealthListRequestSchema: GenMessage<HealthListRequest>;
-/**
- * @generated from message grpc.health.v1.HealthListResponse
- */
-export type HealthListResponse = Message<"grpc.health.v1.HealthListResponse"> & {
-    /**
-     * statuses contains all the services and their respective status.
-     *
-     * @generated from field: map<string, grpc.health.v1.HealthCheckResponse> statuses = 1;
-     */
-    statuses: {
-        [key: string]: HealthCheckResponse;
-    };
-};
-/**
- * Describes the message grpc.health.v1.HealthListResponse.
- * Use `create(HealthListResponseSchema)` to create a new message.
- */
-export declare const HealthListResponseSchema: GenMessage<HealthListResponse>;
-/**
- * Health is gRPC's mechanism for checking whether a server is able to handle
- * RPCs. Its semantics are documented in
- * https://github.com/grpc/grpc/blob/master/doc/health-checking.md.
- *
- * @generated from service grpc.health.v1.Health
- */
-export declare const Health: GenService<{
-    /**
-     * Check gets the health of the specified service. If the requested service
-     * is unknown, the call will fail with status NOT_FOUND. If the caller does
-     * not specify a service name, the server should respond with its overall
-     * health status.
-     *
-     * Clients should set a deadline when calling Check, and can declare the
-     * server unhealthy if they do not receive a timely response.
-     *
-     * @generated from rpc grpc.health.v1.Health.Check
-     */
-    check: {
-        methodKind: "unary";
-        input: typeof HealthCheckRequestSchema;
-        output: typeof HealthCheckResponseSchema;
-    };
-    /**
-     * List provides a non-atomic snapshot of the health of all the available
-     * services.
-     *
-     * The server may respond with a RESOURCE_EXHAUSTED error if too many services
-     * exist.
-     *
-     * Clients should set a deadline when calling List, and can declare the server
-     * unhealthy if they do not receive a timely response.
-     *
-     * Clients should keep in mind that the list of health services exposed by an
-     * application can change over the lifetime of the process.
-     *
-     * @generated from rpc grpc.health.v1.Health.List
-     */
-    list: {
-        methodKind: "unary";
-        input: typeof HealthListRequestSchema;
-        output: typeof HealthListResponseSchema;
-    };
-    /**
-     * Performs a watch for the serving status of the requested service.
-     * The server will immediately send back a message indicating the current
-     * serving status.  It will then subsequently send a new message whenever
-     * the service's serving status changes.
-     *
-     * If the requested service is unknown when the call is received, the
-     * server will send a message setting the serving status to
-     * SERVICE_UNKNOWN but will *not* terminate the call.  If at some
-     * future point, the serving status of the service becomes known, the
-     * server will send a new message with the service's serving status.
-     *
-     * If the call terminates with status UNIMPLEMENTED, then clients
-     * should assume this method is not supported and should not retry the
-     * call.  If the call terminates with any other status (including OK),
-     * clients should retry the call with appropriate exponential backoff.
-     *
-     * @generated from rpc grpc.health.v1.Health.Watch
-     */
-    watch: {
-        methodKind: "server_streaming";
-        input: typeof HealthCheckRequestSchema;
-        output: typeof HealthCheckResponseSchema;
-    };
-}>;
+export * from "../common/health_pb.js";

package/lib/cjs/service/health_pb.js

@@ -1,87 +1,17 @@
 "use strict";
-// Vendored generated stubs for grpc.health.v1 -- do not edit by hand.
-//
-// Source:   buf.build/grpc/grpc, grpc/health/v1/health.proto
-// Plugin:   buf.build/bufbuild/es:v2.12.0 (kept in step with the root
-//           buf.gen.yaml pin -- plugin and @bufbuild/protobuf runtime must
-//           agree on major).
-//
-// Regenerate by overwriting this file:
-//
-//   cd node/sdk
-//   buf generate buf.build/grpc/grpc --path grpc/health/v1/health.proto \
-//     --template '{"version":"v2","plugins":[{"remote":"buf.build/bufbuild/es:v2.12.0","out":"gen-health","opt":["target=ts","import_extension=js"]}]}'
-//   mv gen-health/grpc/health/v1/health_pb.ts src/service/health_pb.ts
-//   rm -rf gen-health
-//
-// Vendored rather than depended on: the equivalent package
-// `@buf/grpc_grpc.bufbuild_es` is published only on the Buf Schema Registry, and
-// reaching it needs registry config that a published npm package cannot hand its
-// consumers -- so depending on it 404'd every downstream install. Rationale in
-// docs/HEALTH_SERVICE.md.
-//
-// Lives under src/service/ rather than src/common/gen/ so the transport keeps
-// importing nothing from common/gen.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Health = exports.HealthListResponseSchema = exports.HealthListRequestSchema = exports.HealthCheckResponse_ServingStatusSchema = exports.HealthCheckResponse_ServingStatus = exports.HealthCheckResponseSchema = exports.HealthCheckRequestSchema = exports.file_grpc_health_v1_health = void 0;
-const codegenv2_1 = require("@bufbuild/protobuf/codegenv2");
-/**
- * Describes the file grpc/health/v1/health.proto.
- */
-exports.file_grpc_health_v1_health = (0, codegenv2_1.fileDesc)("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");
-/**
- * Describes the message grpc.health.v1.HealthCheckRequest.
- * Use `create(HealthCheckRequestSchema)` to create a new message.
- */
-exports.HealthCheckRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_grpc_health_v1_health, 0);
-/**
- * Describes the message grpc.health.v1.HealthCheckResponse.
- * Use `create(HealthCheckResponseSchema)` to create a new message.
- */
-exports.HealthCheckResponseSchema = (0, codegenv2_1.messageDesc)(exports.file_grpc_health_v1_health, 1);
-/**
- * @generated from enum grpc.health.v1.HealthCheckResponse.ServingStatus
- */
-var HealthCheckResponse_ServingStatus;
-(function (HealthCheckResponse_ServingStatus) {
-    /**
-     * @generated from enum value: UNKNOWN = 0;
-     */
-    HealthCheckResponse_ServingStatus[HealthCheckResponse_ServingStatus["UNKNOWN"] = 0] = "UNKNOWN";
-    /**
-     * @generated from enum value: SERVING = 1;
-     */
-    HealthCheckResponse_ServingStatus[HealthCheckResponse_ServingStatus["SERVING"] = 1] = "SERVING";
-    /**
-     * @generated from enum value: NOT_SERVING = 2;
-     */
-    HealthCheckResponse_ServingStatus[HealthCheckResponse_ServingStatus["NOT_SERVING"] = 2] = "NOT_SERVING";
-    /**
-     * Used only by the Watch method.
-     *
-     * @generated from enum value: SERVICE_UNKNOWN = 3;
-     */
-    HealthCheckResponse_ServingStatus[HealthCheckResponse_ServingStatus["SERVICE_UNKNOWN"] = 3] = "SERVICE_UNKNOWN";
-})(HealthCheckResponse_ServingStatus || (exports.HealthCheckResponse_ServingStatus = HealthCheckResponse_ServingStatus = {}));
-/**
- * Describes the enum grpc.health.v1.HealthCheckResponse.ServingStatus.
- */
-exports.HealthCheckResponse_ServingStatusSchema = (0, codegenv2_1.enumDesc)(exports.file_grpc_health_v1_health, 1, 0);
-/**
- * Describes the message grpc.health.v1.HealthListRequest.
- * Use `create(HealthListRequestSchema)` to create a new message.
- */
-exports.HealthListRequestSchema = (0, codegenv2_1.messageDesc)(exports.file_grpc_health_v1_health, 2);
-/**
- * Describes the message grpc.health.v1.HealthListResponse.
- * Use `create(HealthListResponseSchema)` to create a new message.
- */
-exports.HealthListResponseSchema = (0, codegenv2_1.messageDesc)(exports.file_grpc_health_v1_health, 3);
-/**
- * Health is gRPC's mechanism for checking whether a server is able to handle
- * RPCs. Its semantics are documented in
- * https://github.com/grpc/grpc/blob/master/doc/health-checking.md.
- *
- * @generated from service grpc.health.v1.Health
- */
-exports.Health = (0, codegenv2_1.serviceDesc)(exports.file_grpc_health_v1_health, 0);
+__exportStar(require("../common/health_pb.js"), exports);

package/lib/cjs/service/node.d.ts

@@ -1,3 +1 @@
-import type * as http from "node:http";
-export type NodeHandlerFn = (request: http.IncomingMessage, response: http.ServerResponse) => void;
-export declare const signatureValidation: (next: NodeHandlerFn) => NodeHandlerFn;
+export * from "../common/node.js";

package/lib/cjs/service/node.js

@@ -1,15 +1,17 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.signatureValidation = void 0;
-const sha3_js_1 = require("@noble/hashes/sha3.js");
-const signatureValidation = (next) => (req, resp) => {
-    const hasher = sha3_js_1.keccak_256.create();
-    req.hasher = hasher;
-    req.on("data", (chunk) => {
-        if (chunk instanceof Buffer) {
-            hasher.update(chunk);
-        }
-    });
-    next(req, resp);
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
-exports.signatureValidation = signatureValidation;
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("../common/node.js"), exports);

package/lib/cjs/service/service.d.ts

@@ -1,15 +1,12 @@
-import { ConnectRouter } from "@connectrpc/connect";
-import type { Interceptor } from "@connectrpc/connect";
-import type { DescService } from "@bufbuild/protobuf";
-import type { ServiceImpl } from "@connectrpc/connect";
-export declare const REQUEST_VALIDITY_MILLIS = 60000;
+import { type CreateServiceOptions } from "../common/service.js";
+export type { CreateServiceOptions } from "../common/service.js";
+export { REQUEST_VALIDITY_MILLIS } from "../common/service.js";
 interface Router {
-    service: <T extends DescService, I extends ServiceImpl<T>>(service: T, implementation: I) => void;
+    service: <T extends import("@bufbuild/protobuf").DescService, I extends import("@connectrpc/connect").ServiceImpl<T>>(service: T, implementation: I) => void;
 }
-export declare const createService: (networkPublicKey: string | Buffer, registerRoutes: (router: Router) => void) => {
-    routes: (router: ConnectRouter) => void;
-    interceptors: Interceptor[];
+export declare const createService: (networkPublicKey: string | Buffer, registerRoutes: (router: Router) => void, options?: CreateServiceOptions) => {
+    routes: (router: import("@connectrpc/connect").ConnectRouter) => void;
+    interceptors: import("@connectrpc/connect").Interceptor[];
     grpcWeb: boolean;
     contextValues: (req: any) => import("@connectrpc/connect").ContextValues;
 };
-export {};

package/lib/cjs/service/service.js

@@ -1,98 +1,9 @@
 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createService = exports.REQUEST_VALIDITY_MILLIS = void 0;
-const connect_1 = require("@connectrpc/connect");
-const headers_js_1 = __importDefault(require("../common/headers.js"));
-const secp256k1_js_1 = require("@noble/curves/secp256k1.js");
-const validate_response_js_1 = require("./validate_response.js");
-const health_pb_js_1 = require("./health_pb.js");
-const health_js_1 = require("./health.js");
-exports.REQUEST_VALIDITY_MILLIS = 60000;
-const createSignatureVerification = (networkPublicKey) => (next) => async (req) => {
-    const ts = decodeNum(getHeader(req, headers_js_1.default.SignatureTimestamp));
-    if (Date.now() - ts > 60000) {
-        throw new connect_1.ConnectError(`${headers_js_1.default.SignatureTimestamp} must be within ${exports.REQUEST_VALIDITY_MILLIS} milliseconds from now`, connect_1.Code.InvalidArgument);
-    }
-    const publicKey = decodeHex(getHeader(req, headers_js_1.default.PublicKey));
-    if (networkPublicKey.compare(publicKey) !== 0) {
-        throw new connect_1.ConnectError(`${headers_js_1.default.PublicKey} value is not network public key`, connect_1.Code.Unauthenticated);
-    }
-    let signature = decodeHex(getHeader(req, headers_js_1.default.Signature));
-    if (signature.length === 65) {
-        signature = signature.subarray(0, 64);
-    }
-    const hasher = req.contextValues.get(kHash);
-    const tsBuf = Buffer.alloc(8);
-    tsBuf.writeBigUInt64LE(BigInt(ts)); // 64‑bit little‑endian timestamp
-    const hash = hasher
-        .update(tsBuf)
-        .digest();
-    let signatureValid = false;
-    try {
-        signatureValid = secp256k1_js_1.secp256k1.verify(signature, hash, publicKey, { prehash: false });
-    }
-    catch (e) {
-        throw new connect_1.ConnectError(`${headers_js_1.default.Signature} has invalid signature or public key format: ${e}`, connect_1.Code.Unauthenticated);
-    }
-    if (!signatureValid) {
-        throw new connect_1.ConnectError(`${headers_js_1.default.Signature} has invalid signature`, connect_1.Code.Unauthenticated);
-    }
-    return await next(req);
-};
-const createService = (networkPublicKey, registerRoutes) => {
-    if (typeof networkPublicKey == "string") {
-        networkPublicKey = decodeHex(networkPublicKey);
-    }
-    return {
-        routes: (router) => {
-            const collected = [];
-            const origService = router.service.bind(router);
-            const wrappedRouter = {
-                service: (desc, impl) => {
-                    collected.push(desc.typeName);
-                    origService(desc, impl);
-                },
-            };
-            registerRoutes(wrappedRouter);
-            // Health is the only service this transport mounts on its own — see
-            // docs/HEALTH_SERVICE.md. Same interceptors as everything else, so the
-            // probe is signed like any other call.
-            collected.push(health_pb_js_1.Health.typeName);
-            origService(health_pb_js_1.Health, (0, health_js_1.createHealthServiceImpl)(collected));
-        },
-        interceptors: [createSignatureVerification(networkPublicKey), (0, validate_response_js_1.createValidationInterceptor)()],
-        grpcWeb: false,
-        contextValues: (req) => {
-            return (0, connect_1.createContextValues)().set(kHash, req.hasher);
-        }
-    };
-};
+const service_js_1 = require("../common/service.js");
+const version_js_1 = require("../version.js");
+var service_js_2 = require("../common/service.js");
+Object.defineProperty(exports, "REQUEST_VALIDITY_MILLIS", { enumerable: true, get: function () { return service_js_2.REQUEST_VALIDITY_MILLIS; } });
+const createService = (networkPublicKey, registerRoutes, options) => (0, service_js_1.createService)(networkPublicKey, registerRoutes, { ...options, version: options?.version ?? version_js_1.SDK_VERSION });
 exports.createService = createService;
-const kHash = (0, connect_1.createContextKey)(undefined);
-function getHeader(req, header) {
-    const raw = req.header.get(header);
-    if (!raw) {
-        throw new connect_1.ConnectError(`missing required header '${header}'`, connect_1.Code.InvalidArgument);
-    }
-    return raw;
-}
-function decodeHex(value) {
-    value = value.startsWith('0x') ? value.slice(2) : value;
-    try {
-        return Buffer.from(value, "hex");
-    }
-    catch (e) {
-        throw new connect_1.ConnectError(`invalid header format. '${value}' must be hex encoded`, connect_1.Code.InvalidArgument);
-    }
-}
-function decodeNum(value) {
-    try {
-        return parseInt(value);
-    }
-    catch (e) {
-        throw new connect_1.ConnectError(`invalid header format. '${value}' must be a number`, connect_1.Code.InvalidArgument);
-    }
-}

package/lib/cjs/service/validate.d.ts

@@ -0,0 +1 @@
+export * from "../common/validate.js";

package/lib/cjs/service/validate.js

@@ -0,0 +1,17 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("../common/validate.js"), exports);

package/lib/cjs/service/validate_response.d.ts

@@ -1,12 +1,17 @@
 import type { Interceptor } from "@connectrpc/connect";
+import type { Logger } from "../common/validation.js";
+import { createValidationInterceptor } from "../common/validation.js";
+export { createValidationInterceptor, type Logger, type ValidationInterceptorOptions } from "../common/validation.js";
 /**
- * Creates a ConnectRPC interceptor that validates provider responses against
- * buf.validate proto annotations before they are serialized and sent.
- * Also validates incoming requests using the official @connectrpc/validate interceptor.
- *
- * Invalid requests return Code.InvalidArgument; invalid responses return Code.Internal.
+ * Registry covering the t-0 network provider contract protos. Leaf file
+ * descriptors pull in their full dependency graph, so adding new messages
+ * or fields to existing protos requires only `buf:generate`.
  */
-export declare function createValidationInterceptor(): Interceptor;
+export declare const networkRegistry: import("@bufbuild/protobuf").Registry;
+/**
+ * Validation interceptor pre-configured for the t-0 network provider contract.
+ */
+export declare function createNetworkValidationInterceptor(logger?: Logger): Interceptor;
 /**
  * @deprecated Use createValidationInterceptor instead.
  */