@theoo/sdk 0.1.0

package/dist/transport.js

@@ -0,0 +1,170 @@
+import { TheooError } from "./errors.js";
+/**
+ * Refuse a base URL that would put credentials on the wire in the clear.
+ *
+ * `http://localhost` is fine and necessary — a browser treats it as a secure
+ * context and passkeys require one — so loopback is allowed. Anything else
+ * over plaintext has to be asked for explicitly.
+ */
+function checkBaseUrl(raw, allowInsecure) {
+    let url;
+    try {
+        url = new URL(raw);
+    }
+    catch {
+        throw new Error(`Theoo: baseUrl is not a URL: ${raw}`);
+    }
+    if (url.protocol !== "https:" && url.protocol !== "http:") {
+        throw new Error(`Theoo: baseUrl must be http or https, got ${url.protocol}`);
+    }
+    const loopback = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]" || url.hostname === "::1";
+    if (url.protocol === "http:" && !loopback && !allowInsecure) {
+        throw new Error(`Theoo: refusing to send your API key and session token in the clear to ${url.origin}. ` +
+            `Use https, or pass allowInsecureHttp: true if this is a network you control.`);
+    }
+    return raw.replace(/\/+$/, "");
+}
+/**
+ * How long to keep waiting for an account's previous operation to land.
+ *
+ * Three tries over about twelve seconds: long enough to cover a block or two
+ * on the chains Theoo runs on, short enough that a caller who is actually
+ * stuck finds out rather than watching a spinner.
+ */
+const PENDING_BACKOFF_MS = [2000, 4000, 6000];
+const PENDING_RETRIES = PENDING_BACKOFF_MS.length;
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+/** HTTP with the two headers every Theoo call needs, the error shape decoded, and refresh-on-expiry. */
+export class Transport {
+    constructor(opts) {
+        this.refreshing = null;
+        this.baseUrl = checkBaseUrl(opts.baseUrl, opts.allowInsecureHttp === true);
+        this.apiKey = opts.apiKey;
+        this.fetchImpl = opts.fetch ?? ((input, init) => fetch(input, init));
+        this.tokens = opts.tokens ?? new (class {
+            constructor() {
+                this.t = null;
+            }
+            async load() {
+                return this.t;
+            }
+            async save(t) {
+                this.t = t;
+            }
+        })();
+        this.onSession = opts.onSession;
+    }
+    async request(method, path, body, opts = {}) {
+        let attempt = await this.once(method, path, body, opts);
+        if (attempt.ok)
+            return attempt.value;
+        if (opts.user && attempt.error.code === "SESSION_EXPIRED") {
+            const refreshed = await this.refresh();
+            if (refreshed) {
+                const second = await this.once(method, path, body, opts);
+                if (second.ok)
+                    return second.value;
+                throw second.error;
+            }
+        }
+        // `OPERATION_PENDING` means an earlier operation on the same account has
+        // not been included yet, so this one was built on a nonce that is still
+        // spoken for. Nothing was submitted and nothing was charged, so sending
+        // it again is safe in a way almost no other failure is — and waiting is
+        // the only thing that resolves it. Doing it here saves every caller
+        // writing the same loop and calling a normal few seconds an error.
+        for (let i = 0; i < PENDING_RETRIES && attempt.error.code === "OPERATION_PENDING"; i++) {
+            await sleep(PENDING_BACKOFF_MS[i] ?? 4000);
+            attempt = await this.once(method, path, body, opts);
+            if (attempt.ok)
+                return attempt.value;
+        }
+        throw attempt.error;
+    }
+    async once(method, path, body, opts) {
+        const headers = { "x-api-key": this.apiKey, accept: "application/json" };
+        if (body !== undefined)
+            headers["content-type"] = "application/json";
+        if (opts.user) {
+            const t = await this.tokens.load();
+            if (!t)
+                return { ok: false, error: new TheooError("SESSION_INVALID", "Not signed in.", 401) };
+            headers.authorization = `Bearer ${t.accessToken}`;
+        }
+        let res;
+        try {
+            res = await this.fetchImpl(this.baseUrl + path, {
+                method,
+                headers,
+                body: body === undefined ? undefined : JSON.stringify(body),
+                // The API never redirects. Following one would hand `x-api-key` —
+                // a custom header, which the Fetch spec does not strip the way it
+                // strips `Authorization` — to whatever host the redirect names.
+                redirect: "error",
+                // Nothing here authenticates with cookies, and sending them would
+                // make every call a CSRF target on the API's own origin.
+                credentials: "omit",
+            });
+        }
+        catch (e) {
+            return { ok: false, error: new TheooError("NETWORK", e.message ?? "network error", 0) };
+        }
+        if (res.status === 204)
+            return { ok: true, value: undefined };
+        if (res.status === 404 && opts.optional)
+            return { ok: true, value: null };
+        const text = await res.text();
+        let json = null;
+        try {
+            json = text ? JSON.parse(text) : null;
+        }
+        catch {
+            /* not JSON */
+        }
+        if (res.ok)
+            return { ok: true, value: json };
+        const err = json?.error;
+        return {
+            ok: false,
+            error: new TheooError(err?.code ?? "INTERNAL", err?.message ?? `HTTP ${res.status}`, res.status),
+        };
+    }
+    /** Store a fresh session; `null` signs out locally. */
+    async setSession(session, user) {
+        const stored = session
+            ? {
+                accessToken: session.accessToken,
+                refreshToken: session.refreshToken,
+                expiresAt: Date.now() + session.expiresIn * 1000,
+                sessionId: session.sessionId,
+                user: user ?? (await this.tokens.load())?.user ?? "",
+                aal: session.aal,
+            }
+            : null;
+        await this.tokens.save(stored);
+        this.onSession?.(stored);
+        return stored;
+    }
+    /** One refresh at a time; concurrent callers share it. */
+    refresh() {
+        if (!this.refreshing) {
+            this.refreshing = this.doRefresh().finally(() => {
+                this.refreshing = null;
+            });
+        }
+        return this.refreshing;
+    }
+    async doRefresh() {
+        const t = await this.tokens.load();
+        if (!t)
+            return null;
+        const r = await this.once("POST", "/v1/auth/refresh", { refreshToken: t.refreshToken }, {});
+        if (!r.ok) {
+            if (r.error.needsSignIn)
+                await this.setSession(null);
+            return null;
+        }
+        return this.setSession(r.value, t.user);
+    }
+}
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAyBzC;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,GAAW,EAAE,aAAsB;IACvD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC;IACpI,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,0EAA0E,GAAG,CAAC,MAAM,IAAI;YACtF,8EAA8E,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC9C,MAAM,eAAe,GAAG,kBAAkB,CAAC,MAAM,CAAC;AAElD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAStF,wGAAwG;AACxG,MAAM,OAAO,SAAS;IAQpB,YAAY,IAAsB;QAF1B,eAAU,GAAwC,IAAI,CAAC;QAG7D,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC;YAAA;gBACxB,MAAC,GAAwB,IAAI,CAAC;YAOxC,CAAC;YANC,KAAK,CAAC,IAAI;gBACR,OAAO,IAAI,CAAC,CAAC,CAAC;YAChB,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,CAAsB;gBAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACb,CAAC;SACF,CAAC,EAAE,CAAC;QACL,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc,EAAE,OAAuB,EAAE;QACtF,IAAI,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC;QAErC,IAAI,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YAC1D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC5D,IAAI,MAAM,CAAC,EAAE;oBAAE,OAAO,MAAM,CAAC,KAAK,CAAC;gBACnC,MAAM,MAAM,CAAC,KAAK,CAAC;YACrB,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,wEAAwE;QACxE,oEAAoE;QACpE,mEAAmE;QACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC,EAAE,EAAE,CAAC;YACvF,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YAC3C,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC;QACvC,CAAC;QAED,MAAM,OAAO,CAAC,KAAK,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,IAAI,CAChB,MAAc,EACd,IAAY,EACZ,IAAa,EACb,IAAoB;QAEpB,MAAM,OAAO,GAA2B,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACjG,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACrE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC;YAC9F,OAAO,CAAC,aAAa,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,CAAC;QACD,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE;gBAC9C,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3D,kEAAkE;gBAClE,kEAAkE;gBAClE,gEAAgE;gBAChE,QAAQ,EAAE,OAAO;gBACjB,kEAAkE;gBAClE,yDAAyD;gBACzD,WAAW,EAAE,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,SAAS,EAAG,CAAW,CAAC,OAAO,IAAI,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC;QACrG,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAc,EAAE,CAAC;QACnE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAS,EAAE,CAAC;QAC/E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAY,IAAI,CAAC;QACzB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAS,EAAE,CAAC;QAClD,MAAM,GAAG,GAAI,IAAkE,EAAE,KAAK,CAAC;QACvF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,IAAI,UAAU,EAAE,GAAG,EAAE,OAAO,IAAI,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC;SACjG,CAAC;IACJ,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,UAAU,CAAC,OAA6B,EAAE,IAAa;QAC3D,MAAM,MAAM,GAAwB,OAAO;YACzC,CAAC,CAAC;gBACE,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI;gBAChD,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,IAAI,EAAE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,IAAI,EAAE;gBACpD,GAAG,EAAE,OAAO,CAAC,GAAG;aACjB;YACH,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0DAA0D;IAC1D,OAAO;QACL,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC9C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACzB,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAgB,MAAM,EAAE,kBAAkB,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW;gBAAE,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,453 @@
+/**
+ * Wire types, one to one with the Rust DTOs in `theoo-core` and
+ * `theoo-api`. Field names are the JSON names (camelCase); enums are the
+ * serde spellings. Chain ids are plain numbers.
+ */
+export type AuthProvider = "kingschat" | "email" | "phone" | "google" | "passkey";
+export type ChallengePurpose = "signup" | "login" | "link_identity" | "step_up" | "recovery" | "verify_contact";
+export type AssuranceLevel = "none" | "basic" | "possession" | "verified";
+export type ErrorCode = "CHALLENGE_INVALID" | "CHALLENGE_EXPIRED" | "CHALLENGE_EXHAUSTED" | "SESSION_INVALID" | "SESSION_EXPIRED" | "SESSION_REPLAYED" | "OAUTH_STATE_MISMATCH" | "OAUTH_PROVIDER_ERROR" | "OAUTH_AUDIENCE_MISMATCH" | "PROVIDER_NOT_ENABLED" | "PASSKEY_VERIFICATION_FAILED" | "PASSKEY_CLONED" | "PASSKEY_UNKNOWN" | "IDENTITY_TAKEN" | "IDENTITY_NOT_FOUND" | "LAST_IDENTITY" | "INSUFFICIENT_ASSURANCE" | "STEP_UP_REQUIRED" | "STEP_UP_UNAVAILABLE" | "ACCOUNT_SUSPENDED" | "ACCOUNT_PROVISIONING" | "NO_ACCOUNT" | "CHAIN_UNAVAILABLE" | "OPERATION_INVALID" | "RECOVERY_UNAVAILABLE" | "SESSION_KEY_INVALID" | "BUDGET_EXHAUSTED" | "OPERATION_PENDING" | "TENANT_UNKNOWN" | "TENANT_SUSPENDED" | "API_KEY_INVALID" | "RATE_LIMITED" | "VALIDATION_FAILED" | "NOT_FOUND" | "CONFLICT" | "INTERNAL";
+/** What the tenant knows about the end user's client. Sent along on every request that acts for a user. */
+export interface ClientInfo {
+    ip?: string | null;
+    userAgent?: string | null;
+    origin?: string | null;
+}
+export interface BeginAuthRequest {
+    provider: AuthProvider;
+    purpose?: ChallengePurpose;
+    /** Email or E.164 phone. For a passkey enrolment, the label for the new credential. */
+    destination?: string;
+    client?: ClientInfo;
+}
+export type AuthChallenge = {
+    kind: "code";
+    challengeId: string;
+    destinationMasked: string;
+    expiresAt: number;
+    devCode?: string | null;
+} | {
+    kind: "redirect";
+    state: string;
+    url: string;
+} | {
+    kind: "popup";
+    state: string;
+    url: string;
+    expectsPostMessage: boolean;
+} | {
+    kind: "webauthn";
+    ceremonyId: string;
+    options: WebAuthnOptions;
+    expiresAt: number;
+};
+/** A WebAuthn options document as the server produces it: `{ publicKey: … }` with base64url byte fields. */
+export interface WebAuthnOptions {
+    publicKey: Record<string, unknown>;
+    [k: string]: unknown;
+}
+export type CompleteAuthRequest = {
+    kind: "code";
+    challengeId: string;
+    code: string;
+    client?: ClientInfo;
+} | {
+    kind: "oauth_callback";
+    state: string;
+    code: string;
+    client?: ClientInfo;
+} | {
+    kind: "forwarded_token";
+    state: string;
+    accessToken: string;
+    client?: ClientInfo;
+} | {
+    kind: "webauthn";
+    ceremonyId: string;
+    assertion: unknown;
+    client?: ClientInfo;
+};
+export interface SessionTokens {
+    accessToken: string;
+    refreshToken: string;
+    expiresIn: number;
+    aal: AssuranceLevel;
+    sessionId: string;
+}
+export interface SmartAccount {
+    address: string;
+    chain: number;
+    deployed: boolean;
+    /**
+     * The passkey that owns this account, as a SEC1 compressed P-256 point
+     * (`0x02`/`0x03` then x). A public key: the address is derived from it and
+     * the chain holds it once deployed. Never the private half, which exists
+     * only on the user's device.
+     */
+    owner: string;
+}
+export interface AuthOutcome {
+    session: SessionTokens;
+    user: string;
+    account: SmartAccount | null;
+    isNewUser: boolean;
+    linkedExisting: boolean;
+    recommendedNextFactor: AuthProvider | null;
+}
+export interface Me {
+    user: string;
+    session: string;
+    aal: AssuranceLevel;
+    effectiveAal: AssuranceLevel;
+    stepUpFreshUntil: number | null;
+    isStaff: boolean;
+}
+/**
+ * An authenticated end user, as a server sees them after resolving the access
+ * token their app is holding.
+ *
+ * Read the level with `effectiveAssurance`, never `subject.aal`: the base
+ * level ignores whether a step-up has since gone stale.
+ */
+export interface Caller {
+    tenant: string;
+    user: string;
+    session: string;
+    subject: {
+        aal: AssuranceLevel;
+        stepUpFreshUntil: number | null;
+        isStaff: boolean;
+    };
+}
+/**
+ * A chain this tenant's users can hold accounts on.
+ *
+ * Every entry shares the tenant's account model, because that is fixed for
+ * life. Note that **the account address differs per chain** unless the
+ * factory was deployed at the same address everywhere — the address is
+ * derived from the factory, so a different factory address gives a different
+ * account address for the same passkey.
+ */
+export interface ChainOption {
+    chain: number;
+    name: string;
+    model: "legacy" | "erc4337";
+    /** What a call with no `chain` gets. */
+    isDefault: boolean;
+    /** Whether Theoo pays the gas here. */
+    sponsored: boolean;
+}
+/**
+ * A chain a project could be pointed at, as the console sees it before any
+ * project exists. Unlike {@link ChainOption} this spans both account models,
+ * because choosing the model is part of creating a project.
+ */
+export interface AvailableChain {
+    chain: number;
+    name: string;
+    model: "legacy" | "erc4337";
+    /** Whether Theoo pays the gas here. */
+    sponsored: boolean;
+}
+/** A project, as the developer who owns it sees it. */
+export interface Project {
+    id: string;
+    slug: string;
+    displayName: string;
+    status: string;
+    rpId: string;
+    origins: string[];
+    defaultChain: number;
+    accountModel: "legacy" | "erc4337";
+    solanaCluster: string | null;
+    sponsorshipDailyWei: string | null;
+    webhookUrl: string | null;
+    googleEnabled: boolean;
+    kingschatEnabled: boolean;
+    createdAt: number;
+    /** How many keys are live on it. */
+    keys: number;
+}
+export interface NewProject {
+    slug: string;
+    name: string;
+    /**
+     * The domain this project's passkeys bind to. **Permanent** once its users
+     * enrol: changing it orphans every credential they have.
+     */
+    rpId: string;
+    origins: string[];
+    chain: number;
+    accountModel?: "legacy" | "erc4337";
+}
+export interface NewProjectKey {
+    label: string;
+    /** `secret` for a server, `publishable` for an app. */
+    scope?: "secret" | "publishable";
+    origins?: string[];
+    providers?: string[];
+    providerLimits?: Record<string, number>;
+}
+/** A key, returned once. Theoo stores only its hash. */
+export interface IssuedKey extends ApiKeySummary {
+    key: string;
+}
+export interface ApiKeySummary {
+    prefix: string;
+    label: string;
+    scope: string;
+    allowedOrigins: string[] | null;
+    allowedProviders: string[] | null;
+    providerLimits: Record<string, number> | null;
+    createdAt: number;
+    lastUsedAt: number | null;
+    revokedAt: number | null;
+}
+export interface Elevation {
+    elevatedUntil: number;
+    ttlSeconds: number;
+}
+export interface IdentitySummary {
+    provider: AuthProvider;
+    contactMasked: string | null;
+    label: string | null;
+    verified: boolean;
+    canStepUp: boolean;
+    addedAt: number;
+    lastUsedAt: number | null;
+}
+/** A call for the account to make. Hex strings and decimal wei, so nothing here needs a chain library. */
+export interface ChainCall {
+    to: string;
+    value?: string;
+    data?: string;
+}
+export interface SessionGrant {
+    /** The one contract the session may call. Never the account itself. */
+    target: string;
+    /**
+     * The one function it may call there, as `0x` plus eight hex digits.
+     * Absent means any function on that target, which a spend cap cannot bound:
+     * `transfer` and `approve` live on the same token. ERC-4337 accounts only.
+     */
+    selector?: string | null;
+    /** Total native value it may send over its life, decimal wei. */
+    spendCap?: string;
+    /** Unix seconds. */
+    expiresAt: number;
+    label?: string | null;
+}
+export type OperationKind = {
+    kind: "call";
+    call: ChainCall;
+} | {
+    kind: "enable_recovery";
+} | {
+    kind: "cancel_recovery";
+} | {
+    kind: "grant_session";
+    session: SessionGrant;
+} | {
+    kind: "renew_session";
+    session: SessionRenewal;
+} | {
+    kind: "revoke_session";
+    session: string;
+};
+/**
+ * New terms for a session key that already exists, keeping its address, its
+ * target and its selector.
+ *
+ * Both account models implement a grant by overwriting the key's slot, so a
+ * renewal **resets what has been spent** rather than continuing the old
+ * tally. It is a new grant to the same key, which is why the passkey signs
+ * it; what you save is minting a key and distributing a new address.
+ */
+export interface SessionRenewal {
+    session: string;
+    /** Unix seconds, later than now. */
+    expiresAt: number;
+    /** A new cap, or omit to keep the one it has. Either way, spent restarts. */
+    spendCap?: string;
+}
+export interface PreparedOperation {
+    id: string;
+    chain: number;
+    account: string;
+    /** The 32 bytes the passkey signs, hex. */
+    challenge: string;
+    webauthnOptions: WebAuthnOptions;
+    expiresAt: number;
+    model: "legacy" | "erc4337";
+    sponsored: boolean;
+    deploys: boolean;
+    session?: string | null;
+}
+export type OperationState = "prepared" | "submitted" | "included" | "failed" | "expired";
+export interface OperationStatus {
+    id: string;
+    chain: number;
+    account: string;
+    kind: string;
+    state: OperationState;
+    to: string;
+    value: string;
+    txHash: string | null;
+    deployTxHash: string | null;
+    userOpHash: string | null;
+    error: string | null;
+    session?: string | null;
+    createdAt: number;
+    submittedAt: number | null;
+    includedAt: number | null;
+}
+export interface PendingRecovery {
+    newPasskey: string | null;
+    readyAt: number;
+    approvals: number;
+    canComplete: boolean;
+}
+export interface RecoveryStatus {
+    chain: number;
+    account: string | null;
+    deployed: boolean;
+    platformGuardian: string | null;
+    enabled: boolean;
+    guardianCount: number;
+    threshold: number;
+    ownerPasskey: string | null;
+    candidatePasskey: string | null;
+    pending: PendingRecovery | null;
+}
+export type SessionKeyState = "pending" | "active" | "expired" | "revoked" | "failed";
+export interface SessionKey {
+    id: string;
+    chain: number;
+    account: string;
+    key: string;
+    target: string;
+    selector: string | null;
+    spendCap: string;
+    spent: string;
+    expiresAt: number;
+    state: SessionKeyState;
+    label: string | null;
+    grantOperation: string | null;
+    renewOperation: string | null;
+    revokeOperation: string | null;
+    createdAt: number;
+    lastUsedAt: number | null;
+}
+export interface SolanaAccountMeta {
+    pubkey: string;
+    isSigner?: boolean;
+    isWritable?: boolean;
+}
+/** What a Solana session key may do. The program enforces every bound. */
+export interface SolanaSessionGrant {
+    /** The one address it may send to, or the one program it may invoke. */
+    target: string;
+    /** Total lamports it may send over its life, decimal. */
+    spendCap?: string;
+    /** Unix seconds. */
+    expiresAt: number;
+    label?: string | null;
+}
+/** What the passkey authorises on Solana. Lamports are decimal strings; instruction data is base64. */
+export type SolanaAction = {
+    kind: "transfer";
+    to: string;
+    lamports: string;
+} | {
+    kind: "invoke";
+    programId: string;
+    accounts: SolanaAccountMeta[];
+    data: string;
+} | {
+    kind: "enable_recovery";
+} | {
+    kind: "cancel_recovery";
+} | {
+    kind: "grant_session";
+    session: SolanaSessionGrant;
+} | {
+    kind: "renew_session";
+    session: SessionRenewal;
+} | {
+    kind: "revoke_session";
+    session: string;
+};
+/**
+ * A Solana session key. The same bounded delegate as on the EVM side, minus
+ * the selector: a Solana instruction has no four-byte function id, so the
+ * bound is the one program it may call.
+ */
+export interface SolanaSessionKey {
+    id: string;
+    cluster: string;
+    account: string;
+    key: string;
+    target: string;
+    spendCap: string;
+    spent: string;
+    expiresAt: number;
+    state: SessionKeyState;
+    label: string | null;
+    grantOperation: string | null;
+    renewOperation: string | null;
+    revokeOperation: string | null;
+    createdAt: number;
+    lastUsedAt: number | null;
+}
+export interface SolanaPendingRecovery {
+    newPasskey: string | null;
+    readyAt: number;
+    approvals: number;
+    canComplete: boolean;
+}
+export interface SolanaRecoveryStatus {
+    cluster: string;
+    account: string | null;
+    initialized: boolean;
+    platformGuardian: string | null;
+    enabled: boolean;
+    guardianCount: number;
+    threshold: number;
+    ownerPasskey: string | null;
+    candidatePasskey: string | null;
+    pending: SolanaPendingRecovery | null;
+}
+export interface SolanaAccount {
+    cluster: string;
+    address: string;
+    initialized: boolean;
+    lamports: string;
+}
+export interface PreparedSolanaOperation {
+    id: string;
+    cluster: string;
+    account: string;
+    challenge: string;
+    webauthnOptions: WebAuthnOptions;
+    expiresAt: number;
+    nonce: number;
+    initializes: boolean;
+    /** For `grant_session` and `revoke_session`: the key concerned. */
+    session?: string | null;
+}
+export interface SolanaOperationStatus {
+    id: string;
+    cluster: string;
+    account: string;
+    kind: "transfer" | "invoke" | "enable_recovery" | "cancel_recovery" | "grant_session" | "renew_session" | "revoke_session" | "session_call";
+    /** The session key this operation granted, revoked or acted under. */
+    session?: string | null;
+    summary: Record<string, unknown>;
+    state: OperationState;
+    signature: string | null;
+    error: string | null;
+    createdAt: number;
+    submittedAt: number | null;
+    includedAt: number | null;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAClF,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,OAAO,GAAG,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAChH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,CAAC;AAE1E,MAAM,MAAM,SAAS,GACjB,mBAAmB,GACnB,mBAAmB,GACnB,qBAAqB,GACrB,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,GACzB,sBAAsB,GACtB,6BAA6B,GAC7B,gBAAgB,GAChB,iBAAiB,GACjB,gBAAgB,GAChB,oBAAoB,GACpB,eAAe,GACf,wBAAwB,GACxB,kBAAkB,GAClB,qBAAqB,GACrB,mBAAmB,GACnB,sBAAsB,GACtB,YAAY,GACZ,mBAAmB,GACnB,mBAAmB,GACnB,sBAAsB,GACtB,qBAAqB,GACrB,kBAAkB,GAClB,mBAAmB,GACnB,gBAAgB,GAChB,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,GACd,mBAAmB,GACnB,WAAW,GACX,UAAU,GACV,UAAU,CAAC;AAEf,2GAA2G;AAC3G,MAAM,WAAW,UAAU;IACzB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAID,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,uFAAuF;IACvF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAC5G;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,kBAAkB,EAAE,OAAO,CAAA;CAAE,GAC1E;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F,4GAA4G;AAC5G,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAAE,GAC5E;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAAE,GACpF;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,UAAU,CAAA;CAAE,CAAC;AAEtF,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,cAAc,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,aAAa,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,qBAAqB,EAAE,YAAY,GAAG,IAAI,CAAC;CAC5C;AAED,MAAM,WAAW,EAAE;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,cAAc,CAAC;IACpB,YAAY,EAAE,cAAc,CAAC;IAC7B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,MAAM;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QACP,GAAG,EAAE,cAAc,CAAC;QACpB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC;CACH;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,wCAAwC;IACxC,SAAS,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;CACpB;AAID;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,uCAAuC;IACvC,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,uDAAuD;AACvD,MAAM,WAAW,OAAO;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,QAAQ,GAAG,SAAS,CAAC;IACnC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,KAAK,CAAC,EAAE,QAAQ,GAAG,aAAa,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AAED,wDAAwD;AACxD,MAAM,WAAW,SAAU,SAAQ,aAAa;IAC9C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,gBAAgB,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,YAAY,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAID,0GAA0G;AAC1G,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,eAAe,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC5B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE1F,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;CACjC;AAID,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;AAEtF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAID,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,uGAAuG;AACvG,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAClF;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,iBAAiB,CAAA;CAAE,GAC3B;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,eAAe,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,OAAO,CAAC;IACrB,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EACA,UAAU,GACV,QAAQ,GACR,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,eAAe,GACf,gBAAgB,GAChB,cAAc,CAAC;IACnB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,EAAE,cAAc,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B"}

package/dist/types.js

@@ -0,0 +1,7 @@
+/**
+ * Wire types, one to one with the Rust DTOs in `theoo-core` and
+ * `theoo-api`. Field names are the JSON names (camelCase); enums are the
+ * serde spellings. Chain ids are plain numbers.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}