@veridex/sdk 1.0.0-beta.1

package/dist/payload.mjs

@@ -0,0 +1,269 @@
+// src/payload.ts
+import { ethers } from "ethers";
+
+// src/constants.ts
+var ACTION_TRANSFER = 1;
+var ACTION_EXECUTE = 2;
+var ACTION_CONFIG = 3;
+var ACTION_BRIDGE = 4;
+var PROTOCOL_VERSION = 1;
+
+// src/payload.ts
+function encodeTransferAction(token, recipient, amount) {
+  const tokenPadded = padTo32Bytes(token);
+  const recipientPadded = padTo32Bytes(recipient);
+  const amountBytes = ethers.zeroPadValue(ethers.toBeHex(amount), 32);
+  return ethers.concat([
+    ethers.toBeHex(ACTION_TRANSFER, 1),
+    tokenPadded,
+    recipientPadded,
+    amountBytes
+  ]);
+}
+function encodeBridgeAction(token, amount, targetChain, recipient) {
+  const tokenPadded = padTo32Bytes(token);
+  const amountBytes = ethers.zeroPadValue(ethers.toBeHex(amount), 32);
+  const targetChainBytes = ethers.toBeHex(targetChain, 2);
+  const recipientPadded = padTo32Bytes(recipient);
+  return ethers.concat([
+    ethers.toBeHex(ACTION_BRIDGE, 1),
+    tokenPadded,
+    amountBytes,
+    targetChainBytes,
+    recipientPadded
+  ]);
+}
+function encodeExecuteAction(target, value, data) {
+  const targetPadded = padTo32Bytes(target);
+  const valueBytes = ethers.zeroPadValue(ethers.toBeHex(value), 32);
+  const dataBytes = ethers.getBytes(data);
+  const dataLengthBytes = ethers.toBeHex(dataBytes.length, 2);
+  return ethers.concat([
+    ethers.toBeHex(ACTION_EXECUTE, 1),
+    targetPadded,
+    valueBytes,
+    dataLengthBytes,
+    data
+  ]);
+}
+function encodeConfigAction(configType, configData) {
+  return ethers.concat([
+    ethers.toBeHex(ACTION_CONFIG, 1),
+    ethers.toBeHex(configType, 1),
+    configData
+  ]);
+}
+function encodeVeridexPayload(userKeyHash, targetChain, nonce, publicKeyX, publicKeyY, actionPayload) {
+  return ethers.concat([
+    ethers.toBeHex(PROTOCOL_VERSION, 1),
+    userKeyHash,
+    ethers.toBeHex(targetChain, 2),
+    ethers.zeroPadValue(ethers.toBeHex(nonce), 32),
+    ethers.zeroPadValue(ethers.toBeHex(publicKeyX), 32),
+    ethers.zeroPadValue(ethers.toBeHex(publicKeyY), 32),
+    actionPayload
+  ]);
+}
+function decodeActionPayload(payload) {
+  const data = ethers.getBytes(payload);
+  const actionType = data[0];
+  switch (actionType) {
+    case ACTION_TRANSFER:
+      return decodeTransferAction(payload);
+    case ACTION_BRIDGE:
+      return decodeBridgeAction(payload);
+    case ACTION_EXECUTE:
+      return decodeExecuteAction(payload);
+    default:
+      return { type: `unknown_${actionType}`, raw: payload };
+  }
+}
+function decodeTransferAction(payload) {
+  const data = ethers.getBytes(payload);
+  const tokenBytes = data.slice(1, 33);
+  const recipientBytes = data.slice(33, 65);
+  const amountBytes = data.slice(65, 97);
+  return {
+    type: "transfer",
+    token: trimTo20Bytes(ethers.hexlify(tokenBytes)),
+    recipient: trimTo20Bytes(ethers.hexlify(recipientBytes)),
+    amount: BigInt(ethers.hexlify(amountBytes))
+  };
+}
+function decodeBridgeAction(payload) {
+  const data = ethers.getBytes(payload);
+  const tokenBytes = data.slice(1, 33);
+  const amountBytes = data.slice(33, 65);
+  const targetChainByte0 = data[65];
+  const targetChainByte1 = data[66];
+  const recipientBytes = data.slice(67, 99);
+  const targetChain = (targetChainByte0 ?? 0) << 8 | (targetChainByte1 ?? 0);
+  return {
+    type: "bridge",
+    token: trimTo20Bytes(ethers.hexlify(tokenBytes)),
+    amount: BigInt(ethers.hexlify(amountBytes)),
+    targetChain,
+    recipient: ethers.hexlify(recipientBytes)
+  };
+}
+function decodeExecuteAction(payload) {
+  const data = ethers.getBytes(payload);
+  const targetBytes = data.slice(1, 33);
+  const valueBytes = data.slice(33, 65);
+  const dataLengthByte0 = data[65];
+  const dataLengthByte1 = data[66];
+  const dataLength = (dataLengthByte0 ?? 0) << 8 | (dataLengthByte1 ?? 0);
+  const callData = data.slice(67, 67 + dataLength);
+  return {
+    type: "execute",
+    target: trimTo20Bytes(ethers.hexlify(targetBytes)),
+    value: BigInt(ethers.hexlify(valueBytes)),
+    data: ethers.hexlify(callData)
+  };
+}
+function encodeSolanaTransferAction(amount, recipient) {
+  const amountBytes = Buffer.alloc(8);
+  amountBytes.writeBigUInt64LE(amount);
+  const recipientBytes = ethers.getBytes(recipient);
+  return ethers.hexlify(
+    Buffer.concat([
+      Buffer.from([ACTION_TRANSFER]),
+      amountBytes,
+      Buffer.from(recipientBytes)
+    ])
+  );
+}
+function encodeAptosTransferAction(amount, recipient) {
+  const amountBytes = Buffer.alloc(8);
+  amountBytes.writeBigUInt64LE(amount);
+  const recipientPadded = padTo32Bytes(recipient);
+  return ethers.hexlify(
+    Buffer.concat([
+      Buffer.from([ACTION_TRANSFER]),
+      amountBytes,
+      Buffer.from(ethers.getBytes(recipientPadded))
+    ])
+  );
+}
+function encodeSuiTransferAction(amount, recipient) {
+  const amountBytes = Buffer.alloc(8);
+  amountBytes.writeBigUInt64LE(amount);
+  const recipientPadded = padTo32Bytes(recipient);
+  return ethers.hexlify(
+    Buffer.concat([
+      Buffer.from([ACTION_TRANSFER]),
+      amountBytes,
+      Buffer.from(ethers.getBytes(recipientPadded))
+    ])
+  );
+}
+function padTo32Bytes(address) {
+  if (address.toLowerCase() === "native") {
+    return "0x" + "0".repeat(64);
+  }
+  if (address.startsWith("0x")) {
+    const hex2 = address.replace("0x", "");
+    if (!/^[0-9a-fA-F]*$/.test(hex2)) {
+      throw new Error(`Invalid address: ${address}. Expected hex string or 'native'.`);
+    }
+    return "0x" + hex2.padStart(64, "0");
+  }
+  const base58Chars = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
+  for (const char of address) {
+    if (!base58Chars.includes(char)) {
+      throw new Error(`Invalid address: ${address}. Contains invalid base58 character '${char}'.`);
+    }
+  }
+  let value = BigInt(0);
+  for (const char of address) {
+    value = value * 58n + BigInt(base58Chars.indexOf(char));
+  }
+  let hex = value.toString(16);
+  if (hex.length > 64) {
+    throw new Error(`Invalid address: ${address}. Decoded value too large for 32 bytes.`);
+  }
+  return "0x" + hex.padStart(64, "0");
+}
+function trimTo20Bytes(hex32) {
+  const clean = hex32.replace("0x", "");
+  return "0x" + clean.slice(-40);
+}
+function solanaAddressToBytes32(base58Address) {
+  return padTo32Bytes(base58Address);
+}
+function formatAmount(amount, decimals = 18) {
+  const divisor = 10n ** BigInt(decimals);
+  const whole = amount / divisor;
+  const fraction = amount % divisor;
+  if (fraction === 0n) {
+    return whole.toString();
+  }
+  const fractionStr = fraction.toString().padStart(decimals, "0");
+  const trimmedFraction = fractionStr.replace(/0+$/, "");
+  return `${whole}.${trimmedFraction}`;
+}
+function parseAmount(amountStr, decimals = 18) {
+  const parts = amountStr.split(".");
+  const whole = BigInt(parts[0] ?? "0");
+  if (parts.length === 1 || !parts[1]) {
+    return whole * 10n ** BigInt(decimals);
+  }
+  const fractionStr = parts[1].slice(0, decimals).padEnd(decimals, "0");
+  const fraction = BigInt(fractionStr);
+  return whole * 10n ** BigInt(decimals) + fraction;
+}
+function generateNonce() {
+  const timestamp = BigInt(Date.now());
+  const random = BigInt(Math.floor(Math.random() * 1e6));
+  return timestamp << 20n | random;
+}
+function createMessageHash(targetChain, actionPayload, nonce) {
+  return ethers.keccak256(
+    ethers.solidityPacked(
+      ["uint16", "bytes", "uint256"],
+      [targetChain, actionPayload, nonce]
+    )
+  );
+}
+function createGaslessMessageHash(targetChain, actionPayload, nonce, hubChainId) {
+  return ethers.solidityPacked(
+    ["uint16", "bytes", "uint256", "uint16"],
+    [targetChain, actionPayload, nonce, hubChainId]
+  );
+}
+function buildGaslessChallenge(targetChain, actionPayload, nonce, hubChainId) {
+  const packed = createGaslessMessageHash(targetChain, actionPayload, nonce, hubChainId);
+  return ethers.getBytes(packed);
+}
+function buildChallenge(userKeyHash, targetChain, nonce, actionPayload) {
+  const encoded = ethers.solidityPacked(
+    ["bytes32", "uint16", "uint256", "bytes"],
+    [userKeyHash, targetChain, nonce, actionPayload]
+  );
+  return ethers.getBytes(ethers.keccak256(encoded));
+}
+export {
+  buildChallenge,
+  buildGaslessChallenge,
+  createGaslessMessageHash,
+  createMessageHash,
+  decodeActionPayload,
+  decodeBridgeAction,
+  decodeExecuteAction,
+  decodeTransferAction,
+  encodeAptosTransferAction,
+  encodeBridgeAction,
+  encodeConfigAction,
+  encodeExecuteAction,
+  encodeSolanaTransferAction,
+  encodeSuiTransferAction,
+  encodeTransferAction,
+  encodeVeridexPayload,
+  formatAmount,
+  generateNonce,
+  padTo32Bytes,
+  parseAmount,
+  solanaAddressToBytes32,
+  trimTo20Bytes
+};
+//# sourceMappingURL=payload.mjs.map

package/dist/payload.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/payload.ts","../src/constants.ts"],"sourcesContent":["/**\n * Veridex Protocol SDK - Payload Encoding/Decoding Utilities\n */\n\nimport { ethers } from 'ethers';\nimport {\n  ACTION_TRANSFER,\n  ACTION_EXECUTE,\n  ACTION_CONFIG,\n  ACTION_BRIDGE,\n  PROTOCOL_VERSION,\n} from './constants.js';\nimport type { TransferAction, BridgeAction, ExecuteAction, ActionPayload } from './types.js';\n\n// ============================================================================\n// Action Encoding\n// ============================================================================\n\n/**\n * Encode a transfer action payload\n * Format: [actionType(1)] [token(32)] [recipient(32)] [amount(32)]\n */\nexport function encodeTransferAction(\n  token: string,\n  recipient: string,\n  amount: bigint\n): string {\n  const tokenPadded = padTo32Bytes(token);\n  const recipientPadded = padTo32Bytes(recipient);\n  const amountBytes = ethers.zeroPadValue(ethers.toBeHex(amount), 32);\n\n  return ethers.concat([\n    ethers.toBeHex(ACTION_TRANSFER, 1),\n    tokenPadded,\n    recipientPadded,\n    amountBytes,\n  ]);\n}\n\n/**\n * Encode a bridge action payload\n * Format: [actionType(1)] [token(32)] [amount(32)] [targetChain(2)] [recipient(32)]\n */\nexport function encodeBridgeAction(\n  token: string,\n  amount: bigint,\n  targetChain: number,\n  recipient: string\n): string {\n  const tokenPadded = padTo32Bytes(token);\n  const amountBytes = ethers.zeroPadValue(ethers.toBeHex(amount), 32);\n  const targetChainBytes = ethers.toBeHex(targetChain, 2);\n  const recipientPadded = padTo32Bytes(recipient);\n\n  return ethers.concat([\n    ethers.toBeHex(ACTION_BRIDGE, 1),\n    tokenPadded,\n    amountBytes,\n    targetChainBytes,\n    recipientPadded,\n  ]);\n}\n\n/**\n * Encode an execute action payload (arbitrary contract call)\n * Format: [actionType(1)] [target(32)] [value(32)] [dataLength(2)] [data(variable)]\n */\nexport function encodeExecuteAction(\n  target: string,\n  value: bigint,\n  data: string\n): string {\n  const targetPadded = padTo32Bytes(target);\n  const valueBytes = ethers.zeroPadValue(ethers.toBeHex(value), 32);\n  const dataBytes = ethers.getBytes(data);\n  const dataLengthBytes = ethers.toBeHex(dataBytes.length, 2);\n\n  return ethers.concat([\n    ethers.toBeHex(ACTION_EXECUTE, 1),\n    targetPadded,\n    valueBytes,\n    dataLengthBytes,\n    data,\n  ]);\n}\n\n/**\n * Encode a config action payload\n * Format: [actionType(1)] [configType(1)] [configData(variable)]\n */\nexport function encodeConfigAction(configType: number, configData: string): string {\n  return ethers.concat([\n    ethers.toBeHex(ACTION_CONFIG, 1),\n    ethers.toBeHex(configType, 1),\n    configData,\n  ]);\n}\n\n// ============================================================================\n// Veridex Payload Encoding\n// ============================================================================\n\n/**\n * Encode the full Veridex message payload that gets published via Wormhole\n * Format: [version(1)] [userKeyHash(32)] [targetChain(2)] [nonce(32)] [pubKeyX(32)] [pubKeyY(32)] [actionPayload]\n */\nexport function encodeVeridexPayload(\n  userKeyHash: string,\n  targetChain: number,\n  nonce: bigint,\n  publicKeyX: bigint,\n  publicKeyY: bigint,\n  actionPayload: string\n): string {\n  return ethers.concat([\n    ethers.toBeHex(PROTOCOL_VERSION, 1),\n    userKeyHash,\n    ethers.toBeHex(targetChain, 2),\n    ethers.zeroPadValue(ethers.toBeHex(nonce), 32),\n    ethers.zeroPadValue(ethers.toBeHex(publicKeyX), 32),\n    ethers.zeroPadValue(ethers.toBeHex(publicKeyY), 32),\n    actionPayload,\n  ]);\n}\n\n// ============================================================================\n// Action Decoding\n// ============================================================================\n\n/**\n * Decode an action payload to determine its type and contents\n */\nexport function decodeActionPayload(payload: string): ActionPayload {\n  const data = ethers.getBytes(payload);\n  const actionType = data[0];\n\n  switch (actionType) {\n    case ACTION_TRANSFER:\n      return decodeTransferAction(payload);\n    case ACTION_BRIDGE:\n      return decodeBridgeAction(payload);\n    case ACTION_EXECUTE:\n      return decodeExecuteAction(payload);\n    default:\n      return { type: `unknown_${actionType}`, raw: payload };\n  }\n}\n\n/**\n * Decode a transfer action payload\n */\nexport function decodeTransferAction(payload: string): TransferAction {\n  const data = ethers.getBytes(payload);\n\n  const tokenBytes = data.slice(1, 33);\n  const recipientBytes = data.slice(33, 65);\n  const amountBytes = data.slice(65, 97);\n\n  return {\n    type: 'transfer',\n    token: trimTo20Bytes(ethers.hexlify(tokenBytes)),\n    recipient: trimTo20Bytes(ethers.hexlify(recipientBytes)),\n    amount: BigInt(ethers.hexlify(amountBytes)),\n  };\n}\n\n/**\n * Decode a bridge action payload\n */\nexport function decodeBridgeAction(payload: string): BridgeAction {\n  const data = ethers.getBytes(payload);\n\n  const tokenBytes = data.slice(1, 33);\n  const amountBytes = data.slice(33, 65);\n  const targetChainByte0 = data[65];\n  const targetChainByte1 = data[66];\n  const recipientBytes = data.slice(67, 99);\n\n  const targetChain = ((targetChainByte0 ?? 0) << 8) | (targetChainByte1 ?? 0);\n\n  return {\n    type: 'bridge',\n    token: trimTo20Bytes(ethers.hexlify(tokenBytes)),\n    amount: BigInt(ethers.hexlify(amountBytes)),\n    targetChain,\n    recipient: ethers.hexlify(recipientBytes),\n  };\n}\n\n/**\n * Decode an execute action payload\n */\nexport function decodeExecuteAction(payload: string): ExecuteAction {\n  const data = ethers.getBytes(payload);\n\n  const targetBytes = data.slice(1, 33);\n  const valueBytes = data.slice(33, 65);\n  const dataLengthByte0 = data[65];\n  const dataLengthByte1 = data[66];\n  const dataLength = ((dataLengthByte0 ?? 0) << 8) | (dataLengthByte1 ?? 0);\n  const callData = data.slice(67, 67 + dataLength);\n\n  return {\n    type: 'execute',\n    target: trimTo20Bytes(ethers.hexlify(targetBytes)),\n    value: BigInt(ethers.hexlify(valueBytes)),\n    data: ethers.hexlify(callData),\n  };\n}\n\n// ============================================================================\n// Chain-Specific Encodings\n// ============================================================================\n\n/**\n * Encode a Solana-compatible transfer action\n * Solana uses: [actionType(1)] [amount(8 LE)] [recipient(32)]\n */\nexport function encodeSolanaTransferAction(\n  amount: bigint,\n  recipient: string\n): string {\n  const amountBytes = Buffer.alloc(8);\n  amountBytes.writeBigUInt64LE(amount);\n\n  const recipientBytes = ethers.getBytes(recipient);\n\n  return ethers.hexlify(\n    Buffer.concat([\n      Buffer.from([ACTION_TRANSFER]),\n      amountBytes,\n      Buffer.from(recipientBytes),\n    ])\n  );\n}\n\n/**\n * Encode an Aptos-compatible transfer action\n * Aptos uses: [actionType(1)] [amount(8 LE)] [recipient(32)]\n */\nexport function encodeAptosTransferAction(\n  amount: bigint,\n  recipient: string\n): string {\n  const amountBytes = Buffer.alloc(8);\n  amountBytes.writeBigUInt64LE(amount);\n\n  const recipientPadded = padTo32Bytes(recipient);\n\n  return ethers.hexlify(\n    Buffer.concat([\n      Buffer.from([ACTION_TRANSFER]),\n      amountBytes,\n      Buffer.from(ethers.getBytes(recipientPadded)),\n    ])\n  );\n}\n\n/**\n * Encode a Sui-compatible transfer action\n * Sui uses: [actionType(1)] [amount(8 LE)] [recipient(32)]\n */\nexport function encodeSuiTransferAction(\n  amount: bigint,\n  recipient: string\n): string {\n  const amountBytes = Buffer.alloc(8);\n  amountBytes.writeBigUInt64LE(amount);\n\n  const recipientPadded = padTo32Bytes(recipient);\n\n  return ethers.hexlify(\n    Buffer.concat([\n      Buffer.from([ACTION_TRANSFER]),\n      amountBytes,\n      Buffer.from(ethers.getBytes(recipientPadded)),\n    ])\n  );\n}\n\n// ============================================================================\n// Address Utilities\n// ============================================================================\n\n/**\n * Pad an address to 32 bytes (Wormhole standard)\n * Supports both EVM addresses (0x...) and Solana addresses (base58)\n */\nexport function padTo32Bytes(address: string): string {\n  // Handle native token - convert to zero address\n  if (address.toLowerCase() === 'native') {\n    return '0x' + '0'.repeat(64);\n  }\n  \n  // If it starts with 0x, treat as hex\n  if (address.startsWith('0x')) {\n    const hex = address.replace('0x', '');\n    // Validate that hex only contains valid hex characters\n    if (!/^[0-9a-fA-F]*$/.test(hex)) {\n      throw new Error(`Invalid address: ${address}. Expected hex string or 'native'.`);\n    }\n    return '0x' + hex.padStart(64, '0');\n  }\n  \n  // Otherwise, assume base58 Solana address and decode it\n  // Base58 character set (Bitcoin/Solana style - no 0, O, I, l)\n  const base58Chars = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';\n  \n  // Validate base58 characters\n  for (const char of address) {\n    if (!base58Chars.includes(char)) {\n      throw new Error(`Invalid address: ${address}. Contains invalid base58 character '${char}'.`);\n    }\n  }\n  \n  // Decode base58 to bytes\n  let value = BigInt(0);\n  for (const char of address) {\n    value = value * 58n + BigInt(base58Chars.indexOf(char));\n  }\n  \n  // Convert to 32-byte hex\n  let hex = value.toString(16);\n  // Ensure it's not longer than 64 chars (32 bytes)\n  if (hex.length > 64) {\n    throw new Error(`Invalid address: ${address}. Decoded value too large for 32 bytes.`);\n  }\n  \n  return '0x' + hex.padStart(64, '0');\n}\n\n/**\n * Trim a 32-byte hex to a 20-byte EVM address\n */\nexport function trimTo20Bytes(hex32: string): string {\n  const clean = hex32.replace('0x', '');\n  return '0x' + clean.slice(-40);\n}\n\n/**\n * Convert a Solana public key (base58) to bytes32\n * @deprecated Use padTo32Bytes instead, which now handles both EVM and Solana addresses\n */\nexport function solanaAddressToBytes32(base58Address: string): string {\n  return padTo32Bytes(base58Address);\n}\n\n// ============================================================================\n// Amount Utilities\n// ============================================================================\n\n/**\n * Format an amount with decimals for display\n */\nexport function formatAmount(amount: bigint, decimals = 18): string {\n  const divisor = 10n ** BigInt(decimals);\n  const whole = amount / divisor;\n  const fraction = amount % divisor;\n\n  if (fraction === 0n) {\n    return whole.toString();\n  }\n\n  const fractionStr = fraction.toString().padStart(decimals, '0');\n  const trimmedFraction = fractionStr.replace(/0+$/, '');\n\n  return `${whole}.${trimmedFraction}`;\n}\n\n/**\n * Parse an amount string with decimals to bigint\n */\nexport function parseAmount(amountStr: string, decimals = 18): bigint {\n  const parts = amountStr.split('.');\n  const whole = BigInt(parts[0] ?? '0');\n\n  if (parts.length === 1 || !parts[1]) {\n    return whole * (10n ** BigInt(decimals));\n  }\n\n  const fractionStr = parts[1].slice(0, decimals).padEnd(decimals, '0');\n  const fraction = BigInt(fractionStr);\n\n  return whole * (10n ** BigInt(decimals)) + fraction;\n}\n\n// ============================================================================\n// Nonce Utilities\n// ============================================================================\n\n/**\n * Generate a unique nonce for a transaction\n */\nexport function generateNonce(): bigint {\n  const timestamp = BigInt(Date.now());\n  const random = BigInt(Math.floor(Math.random() * 1000000));\n  return (timestamp << 20n) | random;\n}\n\n/**\n * Create a message hash for signing (used in authenticateRawAndDispatch)\n */\nexport function createMessageHash(\n  targetChain: number,\n  actionPayload: string,\n  nonce: bigint\n): string {\n  return ethers.keccak256(\n    ethers.solidityPacked(\n      ['uint16', 'bytes', 'uint256'],\n      [targetChain, actionPayload, nonce]\n    )\n  );\n}\n\n/**\n * Create the challenge bytes for gasless dispatch (matches Hub's authenticateAndDispatch)\n * \n * The Hub contract passes raw packed bytes to WebAuthn.verify():\n * abi.encodePacked(targetChain, actionPayload, userNonce, hubChainId)\n * \n * The WebAuthn library then base64url-encodes these bytes to match against clientDataJSON.\n * We do NOT hash here - the challenge is the raw packed bytes.\n * \n * @param targetChain - Wormhole chain ID of the destination\n * @param actionPayload - The action payload (hex string)\n * @param nonce - User's current nonce\n * @param hubChainId - Wormhole chain ID of the Hub (e.g., 30 for Base)\n * @returns The packed bytes as hex string (NOT hashed)\n */\nexport function createGaslessMessageHash(\n  targetChain: number,\n  actionPayload: string,\n  nonce: bigint,\n  hubChainId: number\n): string {\n  // Return raw packed bytes - NO sha256 hash\n  // The contract passes these bytes directly to WebAuthn.verify()\n  return ethers.solidityPacked(\n    ['uint16', 'bytes', 'uint256', 'uint16'],\n    [targetChain, actionPayload, nonce, hubChainId]\n  );\n}\n\n/**\n * Build the challenge bytes for WebAuthn signing (gasless flow)\n * Returns raw packed bytes that match what the Hub contract expects\n * \n * @param targetChain - Wormhole chain ID of the destination\n * @param actionPayload - The action payload (hex string)\n * @param nonce - User's current nonce\n * @param hubChainId - Wormhole chain ID of the Hub\n * @returns Challenge bytes for WebAuthn signing (raw packed, not hashed)\n */\nexport function buildGaslessChallenge(\n  targetChain: number,\n  actionPayload: string,\n  nonce: bigint,\n  hubChainId: number\n): Uint8Array {\n  const packed = createGaslessMessageHash(targetChain, actionPayload, nonce, hubChainId);\n  return ethers.getBytes(packed);\n}\n\n/**\n * Build the challenge bytes for WebAuthn signing\n */\nexport function buildChallenge(\n  userKeyHash: string,\n  targetChain: number,\n  nonce: bigint,\n  actionPayload: string\n): Uint8Array {\n  const encoded = ethers.solidityPacked(\n    ['bytes32', 'uint16', 'uint256', 'bytes'],\n    [userKeyHash, targetChain, nonce, actionPayload]\n  );\n  return ethers.getBytes(ethers.keccak256(encoded));\n}\n","/**\n * Veridex Protocol SDK - Constants and Chain Configurations\n */\n\nimport type { ChainConfig } from './types.js';\n\n// ============================================================================\n// Action Type Constants\n// ============================================================================\n\nexport const ACTION_TYPES = {\n  TRANSFER: 1,\n  EXECUTE: 2,\n  CONFIG: 3,\n  BRIDGE: 4,\n} as const;\n\nexport const ACTION_TRANSFER = 1;\nexport const ACTION_EXECUTE = 2;\nexport const ACTION_CONFIG = 3;\nexport const ACTION_BRIDGE = 4;\n\n// Protocol version\nexport const PROTOCOL_VERSION = 1;\n\n// ============================================================================\n// Wormhole Chain IDs\n// ============================================================================\n\n/**\n * Wormhole Chain IDs organized by network\n * @see https://docs.wormhole.com/wormhole/reference/constants\n */\nexport const WORMHOLE_CHAIN_IDS = {\n  MAINNET: {\n    SOLANA: 1,\n    ETHEREUM: 2,\n    TERRA: 3,\n    BSC: 4,\n    POLYGON: 5,\n    AVALANCHE: 6,\n    OASIS: 7,\n    ALGORAND: 8,\n    AURORA: 9,\n    FANTOM: 10,\n    KARURA: 11,\n    ACALA: 12,\n    KLAYTN: 13,\n    CELO: 14,\n    NEAR: 15,\n    MOONBEAM: 16,\n    NEON: 17,\n    TERRA2: 18,\n    INJECTIVE: 19,\n    OSMOSIS: 20,\n    SUI: 21,\n    APTOS: 22,\n    ARBITRUM: 23,\n    OPTIMISM: 24,\n    GNOSIS: 25,\n    PYTHNET: 26,\n    XPLA: 28,\n    BASE: 30,\n    SEI: 32,\n    ROOTSTOCK: 33,\n    SCROLL: 34,\n    MANTLE: 35,\n    BLAST: 36,\n    XLAYER: 37,\n    LINEA: 38,\n    BERACHAIN: 39,\n    SEIEVM: 40,\n  },\n  TESTNET: {\n    SOLANA_DEVNET: 1,\n    GOERLI: 2,\n    BSC_TESTNET: 4,\n    POLYGON_MUMBAI: 5,\n    AVALANCHE_FUJI: 6,\n    FANTOM_TESTNET: 10,\n    CELO_ALFAJORES: 14,\n    MOONBASE_ALPHA: 16,\n    SUI_TESTNET: 21,\n    APTOS_TESTNET: 22,\n    SEPOLIA: 10002,\n    ARBITRUM_SEPOLIA: 10003,\n    BASE_SEPOLIA: 10004,\n    OPTIMISM_SEPOLIA: 10005,\n    HOLESKY: 10006,\n    POLYGON_SEPOLIA: 10007,\n    SEI_ATLANTIC_2: 10066, // Sei Arctic-1 testnet (EVM)\n    STARKNET_SEPOLIA: 50001, // Custom bridge (non-Wormhole, relayer-attested)\n  },\n} as const;\n\n// Legacy flat exports for backward compatibility\nexport const WORMHOLE_CHAIN_IDS_FLAT = {\n  // Mainnets\n  SOLANA: 1,\n  ETHEREUM: 2,\n  TERRA: 3,\n  BSC: 4,\n  POLYGON: 5,\n  AVALANCHE: 6,\n  OASIS: 7,\n  ALGORAND: 8,\n  AURORA: 9,\n  FANTOM: 10,\n  KARURA: 11,\n  ACALA: 12,\n  KLAYTN: 13,\n  CELO: 14,\n  NEAR: 15,\n  MOONBEAM: 16,\n  NEON: 17,\n  TERRA2: 18,\n  INJECTIVE: 19,\n  OSMOSIS: 20,\n  SUI: 21,\n  APTOS: 22,\n  ARBITRUM: 23,\n  OPTIMISM: 24,\n  GNOSIS: 25,\n  PYTHNET: 26,\n  XPLA: 28,\n  BASE: 30,\n  SEI: 32,\n  ROOTSTOCK: 33,\n  SCROLL: 34,\n  MANTLE: 35,\n  BLAST: 36,\n  XLAYER: 37,\n  LINEA: 38,\n  BERACHAIN: 39,\n  SEIEVM: 40,\n\n  // Testnets\n  SOLANA_DEVNET: 1,\n  GOERLI: 2,\n  BSC_TESTNET: 4,\n  POLYGON_MUMBAI: 5,\n  AVALANCHE_FUJI: 6,\n  FANTOM_TESTNET: 10,\n  CELO_ALFAJORES: 14,\n  MOONBASE_ALPHA: 16,\n  SUI_TESTNET: 21,\n  APTOS_TESTNET: 22,\n  ARBITRUM_SEPOLIA: 10003,\n  BASE_SEPOLIA: 10004,\n  OPTIMISM_SEPOLIA: 10005,\n  POLYGON_SEPOLIA: 10007,\n  HOLESKY: 10006,\n  STARKNET_SEPOLIA: 50001, // Custom bridge (non-Wormhole)\n} as const;\n\n// ============================================================================\n// Testnet Chain Configurations\n// ============================================================================\n\nexport const TESTNET_CHAINS: Record<string, ChainConfig> = {\n  baseSepolia: {\n    name: 'Base Sepolia',\n    chainId: 84532,\n    wormholeChainId: 10004,\n    rpcUrl: 'https://sepolia.base.org', // Public CORS-friendly RPC\n    explorerUrl: 'https://sepolia.basescan.org',\n    isEvm: true,\n    contracts: {\n      hub: '0x66D87dE68327f48A099c5B9bE97020Feab9a7c82',\n      vaultFactory: '0x40D9B16094808Fa48e73598E31AB964Cf15b475f',\n      vaultImplementation: '0xcBEb49b0109E61c1C69C51D5D9483A3aD6D18258',\n      wormholeCoreBridge: '0x79A1027a6A159502049F10906D333EC57E95F083',\n      tokenBridge: '0x86F55A04690fd7815A3D802bD587e83eA888B239',\n    },\n  },\n  optimismSepolia: {\n    name: 'Optimism Sepolia',\n    chainId: 11155420,\n    wormholeChainId: 10005,\n    rpcUrl: 'https://sepolia.optimism.io',\n    explorerUrl: 'https://sepolia-optimism.etherscan.io',\n    isEvm: true,\n    contracts: {\n      vaultFactory: '0xAbB421166E648953CDBE93c0078a0A794c56Fb84',\n      vaultImplementation: '0xDCD7daEf1AC06f4a8392957cca4834F7a16c058D',\n      wormholeCoreBridge: '0x31377888146f3253211EFEf5c676D41ECe7D58Fe',\n      tokenBridge: '0x99737Ec4B815d816c49A385943baf0380e75c0Ac',\n    },\n  },\n  arbitrumSepolia: {\n    name: 'Arbitrum Sepolia',\n    chainId: 421614,\n    wormholeChainId: 10003,\n    rpcUrl: 'https://sepolia-rollup.arbitrum.io/rpc',\n    explorerUrl: 'https://sepolia.arbiscan.io',\n    isEvm: true,\n    contracts: {\n      vaultFactory: '0xd36D3D5DB59d78f1E33813490F72DABC15C9B07c',\n      vaultImplementation: '0xB10ACf39eBF17fc33F722cBD955b7aeCB0611bc4',\n      wormholeCoreBridge: '0x6b9C8671cdDC8dEab9c719bB87cBd3e782bA6a35',\n      tokenBridge: '0xC7A204bDBFe983FCD8d8E61D02b475D4073fF97e',\n    },\n  },\n  seiTestnet: {\n    name: 'Sei Atlantic-2',\n    chainId: 1328,\n    wormholeChainId: 40,\n    rpcUrl: 'https://evm-rpc-testnet.sei-apis.com',\n    explorerUrl: 'https://seitrace.com/?chain=atlantic-2',\n    isEvm: true,\n    contracts: {\n      vaultFactory: '0x07F608AFf6d63b68029488b726d895c4Bb593038',\n      vaultImplementation: '0xD66153fccFB6731fB6c4944FbD607ba86A76a1f6',\n      wormholeCoreBridge: '0x0000000000000000000000000000000000000000', // Mock - not yet deployed\n    },\n  },\n  solanaDevnet: {\n    name: 'Solana Devnet',\n    chainId: 0,\n    wormholeChainId: 1,\n    rpcUrl: 'https://api.devnet.solana.com',\n    explorerUrl: 'https://explorer.solana.com',\n    isEvm: false,\n    contracts: {\n      hub: 'AnyXHsqq9c2BiW4WgBcj6Aye7Ua7a7L7iSuwpfJxECJM',\n      wormholeCoreBridge: '3u8hJUVTA4jH1wYAyUur7FFZVQ8H635K3tSHHF4ssjQ5',\n      tokenBridge: 'DZnkkTmCiFWfYTfT41X3Rd1kDgozqzxWaHqsw6W4x2oe',\n    },\n  },\n  aptosTestnet: {\n    name: 'Aptos Testnet',\n    chainId: 0,\n    wormholeChainId: 22,\n    rpcUrl: 'https://fullnode.testnet.aptoslabs.com/v1',\n    explorerUrl: 'https://explorer.aptoslabs.com',\n    isEvm: false,\n    contracts: {\n      hub: '0x1a89da9e9f8f0bc90d8d492890bd55fb261c6277d2a95dfcac70c268d0c23dcc',\n      wormholeCoreBridge: '0x5bc11445584a763c1fa7ed39081f1b920954da14e04b32440cba863d03e19625',\n      tokenBridge: '0x576410486a2da45eee6c949c995670112ddf2fbeedab20350d506328eefc9d4f',\n    },\n  },\n  suiTestnet: {\n    name: 'Sui Testnet',\n    chainId: 0,\n    wormholeChainId: 21,\n    rpcUrl: 'https://fullnode.testnet.sui.io:443',\n    explorerUrl: 'https://suiscan.xyz/testnet',\n    isEvm: false,\n    contracts: {\n      hub: '0x35e99fdbbc1cde7e093da6f9e758ba2c4a077904bd64caee2fa6db5e6c4e9e37',\n      wormholeCoreBridge: '0x31358d198147da50db32eda2562951d53973a0c0ad5ed738e9b17d88b213d790',\n    },\n  },\n  starknetSepolia: {\n    name: 'Starknet Sepolia',\n    chainId: 0, // Native Starknet chain ID (SN_SEPOLIA = 0x534e5f5345504f4c4941)\n    wormholeChainId: 50001, // Custom chain ID (50000+ reserved for non-Wormhole chains)\n    rpcUrl: 'https://starknet-sepolia.g.alchemy.com/starknet/version/rpc/v0_7/tsOnfTBZDKMXcUA26OED-',\n    explorerUrl: 'https://sepolia.starkscan.co',\n    isEvm: false,\n    contracts: {\n      // Starknet spoke contract\n      hub: '0x68adcc730ed6c355200d00f763825448497b9cdf7936ca121711e078c88e811',\n      // Custom bridge contract (NOT Wormhole)\n      wormholeCoreBridge: '0x2c458c1ae64556482b05cc2d3ee5b032ed114d68429dda2062c9849a5a725f8',\n    },\n    // Hub chain ID that Starknet bridge validates (Base Sepolia = 10004)\n    hubChainId: 10004,\n  },\n};\n\n// ============================================================================\n// Mainnet Chain Configurations\n// ============================================================================\n\nexport const MAINNET_CHAINS: Record<string, ChainConfig> = {\n  ethereum: {\n    name: 'Ethereum',\n    chainId: 1,\n    wormholeChainId: 2,\n    rpcUrl: 'https://eth.llamarpc.com',\n    explorerUrl: 'https://etherscan.io',\n    isEvm: true,\n    contracts: {\n      wormholeCoreBridge: '0x98f3c9e6E3fAce36bAAd05FE09d375Ef1464288B',\n      tokenBridge: '0x3ee18B2214AFF97000D974cf647E7C347E8fa585',\n    },\n  },\n  base: {\n    name: 'Base',\n    chainId: 8453,\n    wormholeChainId: 30,\n    rpcUrl: 'https://mainnet.base.org',\n    explorerUrl: 'https://basescan.org',\n    isEvm: true,\n    contracts: {\n      wormholeCoreBridge: '0xbebdb6C8ddC678FfA9f8748f85C815C556Dd8ac6',\n      tokenBridge: '0x8d2de8d2f73F1F4cAB472AC9A881C9b123C79627',\n    },\n  },\n  optimism: {\n    name: 'Optimism',\n    chainId: 10,\n    wormholeChainId: 24,\n    rpcUrl: 'https://mainnet.optimism.io',\n    explorerUrl: 'https://optimistic.etherscan.io',\n    isEvm: true,\n    contracts: {\n      wormholeCoreBridge: '0xEe91C335eab126dF5fDB3797EA9d6aD93aeC9722',\n      tokenBridge: '0x1D68124e65faFC907325e3EDbF8c4d84499DAa8b',\n    },\n  },\n  arbitrum: {\n    name: 'Arbitrum',\n    chainId: 42161,\n    wormholeChainId: 23,\n    rpcUrl: 'https://arb1.arbitrum.io/rpc',\n    explorerUrl: 'https://arbiscan.io',\n    isEvm: true,\n    contracts: {\n      wormholeCoreBridge: '0xa5f208e072434bC67592E4C49C1B991BA79BCA46',\n      tokenBridge: '0x0b2402144Bb366A632D14B83F244D2e0e21bD39c',\n    },\n  },\n  polygon: {\n    name: 'Polygon',\n    chainId: 137,\n    wormholeChainId: 5,\n    rpcUrl: 'https://polygon-rpc.com',\n    explorerUrl: 'https://polygonscan.com',\n    isEvm: true,\n    contracts: {\n      wormholeCoreBridge: '0x7A4B5a56256163F07b2C80A7cA55aBE66c4ec4d7',\n      tokenBridge: '0x5a58505a96D1dbf8dF91cB21B54419FC36e93fdE',\n    },\n  },\n  solana: {\n    name: 'Solana',\n    chainId: 0,\n    wormholeChainId: 1,\n    rpcUrl: 'https://api.mainnet-beta.solana.com',\n    explorerUrl: 'https://explorer.solana.com',\n    isEvm: false,\n    contracts: {\n      wormholeCoreBridge: 'worm2ZoG2kUd4vFXhvjh93UUH596ayRfgQ2MgjNMTth',\n      tokenBridge: 'wormDTUJ6AWPNvk59vGQbDvGJmqbDTdgWgAqcLBCgUb',\n    },\n  },\n  aptos: {\n    name: 'Aptos',\n    chainId: 0,\n    wormholeChainId: 22,\n    rpcUrl: 'https://fullnode.mainnet.aptoslabs.com/v1',\n    explorerUrl: 'https://explorer.aptoslabs.com',\n    isEvm: false,\n    contracts: {\n      wormholeCoreBridge: '0x5bc11445584a763c1fa7ed39081f1b920954da14e04b32440cba863d03e19625',\n      tokenBridge: '0x576410486a2da45eee6c949c995670112ddf2fbeedab20350d506328eefc9d4f',\n    },\n  },\n  sui: {\n    name: 'Sui',\n    chainId: 0,\n    wormholeChainId: 21,\n    rpcUrl: 'https://fullnode.mainnet.sui.io:443',\n    explorerUrl: 'https://suiscan.xyz/mainnet',\n    isEvm: false,\n    contracts: {\n      wormholeCoreBridge: '0xaeab97f96cf9877fee2883315d459552b2b921edc16d7ceac6eab944dd88919c',\n    },\n  },\n};\n\n// ============================================================================\n// Wormhole API Endpoints\n// ============================================================================\n\nexport const WORMHOLE_API = {\n  MAINNET: 'https://api.wormholescan.io',\n  TESTNET: 'https://api.testnet.wormholescan.io',\n  GUARDIAN_RPC_MAINNET: 'https://wormhole-v2-mainnet-api.certus.one',\n  GUARDIAN_RPC_TESTNET: 'https://wormhole-v2-testnet-api.certus.one',\n} as const;\n\n// ============================================================================\n// Hub Contract ABI (minimal)\n// ============================================================================\n\nexport const HUB_ABI = [\n  'function authenticateAndDispatch((bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, uint16 targetChain, bytes actionPayload) external payable returns (uint64 sequence)',\n  'function authenticateRawAndDispatch(uint256 r, uint256 s, bytes32 messageHash, uint256 publicKeyX, uint256 publicKeyY, uint16 targetChain, bytes actionPayload, uint256 nonce) external payable returns (uint64 sequence)',\n  'function getNonce(bytes32 userKeyHash) external view returns (uint256)',\n  'function encodeTransferAction(address token, address recipient, uint256 amount) external pure returns (bytes)',\n  'function encodeExecuteAction(address target, uint256 value, bytes data) external pure returns (bytes)',\n  'function encodeBridgeAction(bytes32 token, uint256 amount, uint16 targetChain, bytes32 recipient) external pure returns (bytes)',\n  'function messageFee() external view returns (uint256)',\n  'event Dispatched(bytes32 indexed userKeyHash, uint16 targetChain, uint256 nonce, uint64 sequence, bytes actionPayload)',\n] as const;\n\n// ============================================================================\n// Vault Factory ABI (minimal)\n// ============================================================================\n\nexport const VAULT_FACTORY_ABI = [\n  'function createVault(bytes32 userKeyHash) external returns (address)',\n  'function getVault(bytes32 userKeyHash) external view returns (address)',\n  'function vaultExists(bytes32 userKeyHash) external view returns (bool)',\n  'event VaultCreated(bytes32 indexed userKeyHash, address vault)',\n] as const;\n\n// ============================================================================\n// Vault ABI (minimal)\n// ============================================================================\n\nexport const VAULT_ABI = [\n  'function execute(address target, uint256 value, bytes data) external returns (bytes)',\n  'function executeFromHub(bytes32 vaaHash, uint16 emitterChain, bytes32 emitterAddress, bytes payload) external',\n  'function owner() external view returns (bytes32)',\n  'function hub() external view returns (address)',\n  'receive() external payable',\n] as const;\n"],"mappings":";AAIA,SAAS,cAAc;;;ACahB,IAAM,kBAAkB;AACxB,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AACtB,IAAM,gBAAgB;AAGtB,IAAM,mBAAmB;;;ADDzB,SAAS,qBACd,OACA,WACA,QACQ;AACR,QAAM,cAAc,aAAa,KAAK;AACtC,QAAM,kBAAkB,aAAa,SAAS;AAC9C,QAAM,cAAc,OAAO,aAAa,OAAO,QAAQ,MAAM,GAAG,EAAE;AAElE,SAAO,OAAO,OAAO;AAAA,IACnB,OAAO,QAAQ,iBAAiB,CAAC;AAAA,IACjC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAMO,SAAS,mBACd,OACA,QACA,aACA,WACQ;AACR,QAAM,cAAc,aAAa,KAAK;AACtC,QAAM,cAAc,OAAO,aAAa,OAAO,QAAQ,MAAM,GAAG,EAAE;AAClE,QAAM,mBAAmB,OAAO,QAAQ,aAAa,CAAC;AACtD,QAAM,kBAAkB,aAAa,SAAS;AAE9C,SAAO,OAAO,OAAO;AAAA,IACnB,OAAO,QAAQ,eAAe,CAAC;AAAA,IAC/B;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAMO,SAAS,oBACd,QACA,OACA,MACQ;AACR,QAAM,eAAe,aAAa,MAAM;AACxC,QAAM,aAAa,OAAO,aAAa,OAAO,QAAQ,KAAK,GAAG,EAAE;AAChE,QAAM,YAAY,OAAO,SAAS,IAAI;AACtC,QAAM,kBAAkB,OAAO,QAAQ,UAAU,QAAQ,CAAC;AAE1D,SAAO,OAAO,OAAO;AAAA,IACnB,OAAO,QAAQ,gBAAgB,CAAC;AAAA,IAChC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAMO,SAAS,mBAAmB,YAAoB,YAA4B;AACjF,SAAO,OAAO,OAAO;AAAA,IACnB,OAAO,QAAQ,eAAe,CAAC;AAAA,IAC/B,OAAO,QAAQ,YAAY,CAAC;AAAA,IAC5B;AAAA,EACF,CAAC;AACH;AAUO,SAAS,qBACd,aACA,aACA,OACA,YACA,YACA,eACQ;AACR,SAAO,OAAO,OAAO;AAAA,IACnB,OAAO,QAAQ,kBAAkB,CAAC;AAAA,IAClC;AAAA,IACA,OAAO,QAAQ,aAAa,CAAC;AAAA,IAC7B,OAAO,aAAa,OAAO,QAAQ,KAAK,GAAG,EAAE;AAAA,IAC7C,OAAO,aAAa,OAAO,QAAQ,UAAU,GAAG,EAAE;AAAA,IAClD,OAAO,aAAa,OAAO,QAAQ,UAAU,GAAG,EAAE;AAAA,IAClD;AAAA,EACF,CAAC;AACH;AASO,SAAS,oBAAoB,SAAgC;AAClE,QAAM,OAAO,OAAO,SAAS,OAAO;AACpC,QAAM,aAAa,KAAK,CAAC;AAEzB,UAAQ,YAAY;AAAA,IAClB,KAAK;AACH,aAAO,qBAAqB,OAAO;AAAA,IACrC,KAAK;AACH,aAAO,mBAAmB,OAAO;AAAA,IACnC,KAAK;AACH,aAAO,oBAAoB,OAAO;AAAA,IACpC;AACE,aAAO,EAAE,MAAM,WAAW,UAAU,IAAI,KAAK,QAAQ;AAAA,EACzD;AACF;AAKO,SAAS,qBAAqB,SAAiC;AACpE,QAAM,OAAO,OAAO,SAAS,OAAO;AAEpC,QAAM,aAAa,KAAK,MAAM,GAAG,EAAE;AACnC,QAAM,iBAAiB,KAAK,MAAM,IAAI,EAAE;AACxC,QAAM,cAAc,KAAK,MAAM,IAAI,EAAE;AAErC,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,cAAc,OAAO,QAAQ,UAAU,CAAC;AAAA,IAC/C,WAAW,cAAc,OAAO,QAAQ,cAAc,CAAC;AAAA,IACvD,QAAQ,OAAO,OAAO,QAAQ,WAAW,CAAC;AAAA,EAC5C;AACF;AAKO,SAAS,mBAAmB,SAA+B;AAChE,QAAM,OAAO,OAAO,SAAS,OAAO;AAEpC,QAAM,aAAa,KAAK,MAAM,GAAG,EAAE;AACnC,QAAM,cAAc,KAAK,MAAM,IAAI,EAAE;AACrC,QAAM,mBAAmB,KAAK,EAAE;AAChC,QAAM,mBAAmB,KAAK,EAAE;AAChC,QAAM,iBAAiB,KAAK,MAAM,IAAI,EAAE;AAExC,QAAM,eAAgB,oBAAoB,MAAM,KAAM,oBAAoB;AAE1E,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,cAAc,OAAO,QAAQ,UAAU,CAAC;AAAA,IAC/C,QAAQ,OAAO,OAAO,QAAQ,WAAW,CAAC;AAAA,IAC1C;AAAA,IACA,WAAW,OAAO,QAAQ,cAAc;AAAA,EAC1C;AACF;AAKO,SAAS,oBAAoB,SAAgC;AAClE,QAAM,OAAO,OAAO,SAAS,OAAO;AAEpC,QAAM,cAAc,KAAK,MAAM,GAAG,EAAE;AACpC,QAAM,aAAa,KAAK,MAAM,IAAI,EAAE;AACpC,QAAM,kBAAkB,KAAK,EAAE;AAC/B,QAAM,kBAAkB,KAAK,EAAE;AAC/B,QAAM,cAAe,mBAAmB,MAAM,KAAM,mBAAmB;AACvE,QAAM,WAAW,KAAK,MAAM,IAAI,KAAK,UAAU;AAE/C,SAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,cAAc,OAAO,QAAQ,WAAW,CAAC;AAAA,IACjD,OAAO,OAAO,OAAO,QAAQ,UAAU,CAAC;AAAA,IACxC,MAAM,OAAO,QAAQ,QAAQ;AAAA,EAC/B;AACF;AAUO,SAAS,2BACd,QACA,WACQ;AACR,QAAM,cAAc,OAAO,MAAM,CAAC;AAClC,cAAY,iBAAiB,MAAM;AAEnC,QAAM,iBAAiB,OAAO,SAAS,SAAS;AAEhD,SAAO,OAAO;AAAA,IACZ,OAAO,OAAO;AAAA,MACZ,OAAO,KAAK,CAAC,eAAe,CAAC;AAAA,MAC7B;AAAA,MACA,OAAO,KAAK,cAAc;AAAA,IAC5B,CAAC;AAAA,EACH;AACF;AAMO,SAAS,0BACd,QACA,WACQ;AACR,QAAM,cAAc,OAAO,MAAM,CAAC;AAClC,cAAY,iBAAiB,MAAM;AAEnC,QAAM,kBAAkB,aAAa,SAAS;AAE9C,SAAO,OAAO;AAAA,IACZ,OAAO,OAAO;AAAA,MACZ,OAAO,KAAK,CAAC,eAAe,CAAC;AAAA,MAC7B;AAAA,MACA,OAAO,KAAK,OAAO,SAAS,eAAe,CAAC;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;AAMO,SAAS,wBACd,QACA,WACQ;AACR,QAAM,cAAc,OAAO,MAAM,CAAC;AAClC,cAAY,iBAAiB,MAAM;AAEnC,QAAM,kBAAkB,aAAa,SAAS;AAE9C,SAAO,OAAO;AAAA,IACZ,OAAO,OAAO;AAAA,MACZ,OAAO,KAAK,CAAC,eAAe,CAAC;AAAA,MAC7B;AAAA,MACA,OAAO,KAAK,OAAO,SAAS,eAAe,CAAC;AAAA,IAC9C,CAAC;AAAA,EACH;AACF;AAUO,SAAS,aAAa,SAAyB;AAEpD,MAAI,QAAQ,YAAY,MAAM,UAAU;AACtC,WAAO,OAAO,IAAI,OAAO,EAAE;AAAA,EAC7B;AAGA,MAAI,QAAQ,WAAW,IAAI,GAAG;AAC5B,UAAMA,OAAM,QAAQ,QAAQ,MAAM,EAAE;AAEpC,QAAI,CAAC,iBAAiB,KAAKA,IAAG,GAAG;AAC/B,YAAM,IAAI,MAAM,oBAAoB,OAAO,oCAAoC;AAAA,IACjF;AACA,WAAO,OAAOA,KAAI,SAAS,IAAI,GAAG;AAAA,EACpC;AAIA,QAAM,cAAc;AAGpB,aAAW,QAAQ,SAAS;AAC1B,QAAI,CAAC,YAAY,SAAS,IAAI,GAAG;AAC/B,YAAM,IAAI,MAAM,oBAAoB,OAAO,wCAAwC,IAAI,IAAI;AAAA,IAC7F;AAAA,EACF;AAGA,MAAI,QAAQ,OAAO,CAAC;AACpB,aAAW,QAAQ,SAAS;AAC1B,YAAQ,QAAQ,MAAM,OAAO,YAAY,QAAQ,IAAI,CAAC;AAAA,EACxD;AAGA,MAAI,MAAM,MAAM,SAAS,EAAE;AAE3B,MAAI,IAAI,SAAS,IAAI;AACnB,UAAM,IAAI,MAAM,oBAAoB,OAAO,yCAAyC;AAAA,EACtF;AAEA,SAAO,OAAO,IAAI,SAAS,IAAI,GAAG;AACpC;AAKO,SAAS,cAAc,OAAuB;AACnD,QAAM,QAAQ,MAAM,QAAQ,MAAM,EAAE;AACpC,SAAO,OAAO,MAAM,MAAM,GAAG;AAC/B;AAMO,SAAS,uBAAuB,eAA+B;AACpE,SAAO,aAAa,aAAa;AACnC;AASO,SAAS,aAAa,QAAgB,WAAW,IAAY;AAClE,QAAM,UAAU,OAAO,OAAO,QAAQ;AACtC,QAAM,QAAQ,SAAS;AACvB,QAAM,WAAW,SAAS;AAE1B,MAAI,aAAa,IAAI;AACnB,WAAO,MAAM,SAAS;AAAA,EACxB;AAEA,QAAM,cAAc,SAAS,SAAS,EAAE,SAAS,UAAU,GAAG;AAC9D,QAAM,kBAAkB,YAAY,QAAQ,OAAO,EAAE;AAErD,SAAO,GAAG,KAAK,IAAI,eAAe;AACpC;AAKO,SAAS,YAAY,WAAmB,WAAW,IAAY;AACpE,QAAM,QAAQ,UAAU,MAAM,GAAG;AACjC,QAAM,QAAQ,OAAO,MAAM,CAAC,KAAK,GAAG;AAEpC,MAAI,MAAM,WAAW,KAAK,CAAC,MAAM,CAAC,GAAG;AACnC,WAAO,QAAS,OAAO,OAAO,QAAQ;AAAA,EACxC;AAEA,QAAM,cAAc,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE,OAAO,UAAU,GAAG;AACpE,QAAM,WAAW,OAAO,WAAW;AAEnC,SAAO,QAAS,OAAO,OAAO,QAAQ,IAAK;AAC7C;AASO,SAAS,gBAAwB;AACtC,QAAM,YAAY,OAAO,KAAK,IAAI,CAAC;AACnC,QAAM,SAAS,OAAO,KAAK,MAAM,KAAK,OAAO,IAAI,GAAO,CAAC;AACzD,SAAQ,aAAa,MAAO;AAC9B;AAKO,SAAS,kBACd,aACA,eACA,OACQ;AACR,SAAO,OAAO;AAAA,IACZ,OAAO;AAAA,MACL,CAAC,UAAU,SAAS,SAAS;AAAA,MAC7B,CAAC,aAAa,eAAe,KAAK;AAAA,IACpC;AAAA,EACF;AACF;AAiBO,SAAS,yBACd,aACA,eACA,OACA,YACQ;AAGR,SAAO,OAAO;AAAA,IACZ,CAAC,UAAU,SAAS,WAAW,QAAQ;AAAA,IACvC,CAAC,aAAa,eAAe,OAAO,UAAU;AAAA,EAChD;AACF;AAYO,SAAS,sBACd,aACA,eACA,OACA,YACY;AACZ,QAAM,SAAS,yBAAyB,aAAa,eAAe,OAAO,UAAU;AACrF,SAAO,OAAO,SAAS,MAAM;AAC/B;AAKO,SAAS,eACd,aACA,aACA,OACA,eACY;AACZ,QAAM,UAAU,OAAO;AAAA,IACrB,CAAC,WAAW,UAAU,WAAW,OAAO;AAAA,IACxC,CAAC,aAAa,aAAa,OAAO,aAAa;AAAA,EACjD;AACA,SAAO,OAAO,SAAS,OAAO,UAAU,OAAO,CAAC;AAClD;","names":["hex"]}

package/dist/queries/index.d.mts

@@ -0,0 +1,148 @@
+import { QueryRequest as QueryRequest$1, QueryResponse as QueryResponse$1 } from '@wormhole-foundation/wormhole-query-sdk';
+
+type QueryNetwork = 'mainnet' | 'testnet';
+/**
+ * Configuration for calling the Wormhole Query Proxy.
+ *
+ * `apiKey` is required for hosted Query Proxy access.
+ * `endpoint` may be overridden for custom proxy deployments.
+ */
+interface QueryConfig {
+    apiKey: string;
+    endpoint?: string;
+    timeoutMs?: number;
+}
+/**
+ * Re-exported Wormhole Query SDK types (type-only).
+ * These map directly to the request/response shapes expected by the Query Proxy.
+ */
+type QueryRequest = QueryRequest$1;
+type QueryResponse = QueryResponse$1;
+type QueryOperationType = 'hubState' | 'portfolio';
+interface HubStateQuery {
+    type: 'hubState';
+    wormholeChainId: number;
+    hubAddress: string;
+}
+interface PortfolioQuery {
+    type: 'portfolio';
+    walletAddress: string;
+    wormholeChainIds: readonly number[];
+}
+type QueryOperation = HubStateQuery | PortfolioQuery;
+
+declare const WORMHOLE_QUERY_PROXY_URLS: {
+    readonly mainnet: "https://query.wormhole.com/v1/query";
+    readonly testnet: "https://testnet.query.wormhole.com/v1/query";
+};
+/**
+ * Wormhole Query Proxy rate limit: 6 queries per second.
+ * SDK callers should throttle requests accordingly.
+ */
+declare const WORMHOLE_QUERY_RATE_LIMIT_PER_SECOND = 6;
+/**
+ * Convenience set of Wormhole chain IDs commonly supported by Queries.
+ * This is not an exhaustive list of all Wormhole chains.
+ */
+declare const WORMHOLE_QUERY_CHAIN_IDS: {
+    readonly ETHEREUM: 2;
+    readonly POLYGON: 5;
+    readonly ARBITRUM: 23;
+    readonly OPTIMISM: 24;
+    readonly BASE: 30;
+};
+
+type QueryHubStateNetwork = 'testnet' | 'mainnet';
+type QueryHubStateOptions = {
+    /** Max response age in seconds (default: 60). */
+    maxAge?: number;
+    network?: QueryHubStateNetwork;
+    /** Maximum attempts including the first try (default: 4). */
+    maxAttempts?: number;
+};
+type HubStateResult = {
+    nonce: bigint;
+    isRegistered: boolean;
+    blockTime: number;
+    proof: Uint8Array;
+    /** Last action hash (Issue #9/#10 - for action-hash binding) */
+    lastActionHash?: string;
+};
+type QueryHubStateErrorCode = 'INVALID_ARGUMENT' | 'UNSUPPORTED_NETWORK' | 'MISSING_HUB_ADDRESS' | 'PROXY_HTTP_ERROR' | 'PROXY_RESPONSE_INVALID' | 'ATTESTATION_STALE' | 'QUERY_RESPONSE_INVALID';
+declare class QueryHubStateError extends Error {
+    code: QueryHubStateErrorCode;
+    cause?: unknown;
+    constructor(code: QueryHubStateErrorCode, message: string, cause?: unknown);
+}
+/** * Fetch Guardian-attested Hub state directly from the Wormhole Query Proxy.
+ *
+ * Client-side only: this avoids relayer API costs and produces a Guardian-signed proof
+ * that can be forwarded to the relayer for on-chain verification/submission.
+ */
+declare function queryHubState(userKeyHash: string, apiKey: string, options?: QueryHubStateOptions): Promise<HubStateResult>;
+
+type QueryPortfolioNetwork = 'testnet' | 'mainnet';
+type QueryPortfolioOptions = {
+    /** Max response age in seconds (default: 60). */
+    maxAge?: number;
+    network?: QueryPortfolioNetwork;
+    /** Maximum attempts including the first try (default: 4). */
+    maxAttempts?: number;
+    /** Cache TTL in ms (default: 30_000). */
+    cacheTtlMs?: number;
+    /** Request timeout in ms (default: 15_000 for testnet, 10_000 for mainnet). */
+    timeout?: number;
+    /** Override Query Proxy endpoint. */
+    endpoint?: string;
+    /** Override per-chain RPC URLs used for block tag lookups. */
+    rpcUrls?: Record<number, string>;
+    /** Override derived vault addresses for specific Wormhole chain IDs. */
+    vaultAddresses?: Record<number, string>;
+    /** Override token lists (ERC20 only) for specific Wormhole chain IDs. */
+    evmTokenAddresses?: Record<number, string[]>;
+    /** Additional Solana accounts to include in the Solana account query (base58). */
+    solanaAccounts?: string[];
+    /** Optional USD prices by symbol/address for aggregation (e.g. { USDC: 1 }). */
+    pricesUsd?: Record<string, number>;
+};
+type PortfolioBalance = {
+    assetId: string;
+    amount: bigint;
+    decimals?: number;
+    symbol?: string;
+    usdValue?: number;
+};
+type PortfolioChainErrorCode = 'UNSUPPORTED_CHAIN' | 'MISSING_VAULT' | 'MISSING_TOKENS' | 'ATTESTATION_STALE' | 'DECODE_ERROR';
+type PortfolioChainResult = {
+    wormholeChainId: number;
+    chainName?: string;
+    vaultAddress?: string;
+    blockTime?: number;
+    balances: PortfolioBalance[];
+    error?: {
+        code: PortfolioChainErrorCode;
+        message: string;
+    };
+};
+type PortfolioResult = {
+    proof: Uint8Array;
+    totalUsd?: number;
+    chains: PortfolioChainResult[];
+};
+type QueryPortfolioErrorCode = 'INVALID_ARGUMENT' | 'NETWORK_ERROR' | 'PROXY_HTTP_ERROR' | 'PROXY_RESPONSE_INVALID' | 'QUERY_RESPONSE_INVALID';
+declare class QueryPortfolioError extends Error {
+    code: QueryPortfolioErrorCode;
+    cause?: unknown;
+    constructor(code: QueryPortfolioErrorCode, message: string, cause?: unknown);
+}
+/**
+ * Fetch Guardian-attested vault balances across multiple chains in one Query Proxy request.
+ *
+ * Notes:
+ * - EVM balances are ERC20-only via `eth_call` (native ETH is not queryable via this query type).
+ * - Solana balance uses lamports of the Veridex vault PDA (plus optional extra accounts).
+ * - Aptos is included only if/when Wormhole Queries adds Aptos query types (currently returned as unsupported).
+ */
+declare function queryPortfolio(userKeyHash: string, apiKey: string, options?: QueryPortfolioOptions): Promise<PortfolioResult>;
+
+export { type HubStateQuery, type HubStateResult, type PortfolioBalance, type PortfolioChainErrorCode, type PortfolioChainResult, type PortfolioQuery, type PortfolioResult, type QueryConfig, QueryHubStateError, type QueryHubStateErrorCode, type QueryHubStateNetwork, type QueryHubStateOptions, type QueryNetwork, type QueryOperation, type QueryOperationType, QueryPortfolioError, type QueryPortfolioErrorCode, type QueryPortfolioNetwork, type QueryPortfolioOptions, type QueryRequest, type QueryResponse, WORMHOLE_QUERY_CHAIN_IDS, WORMHOLE_QUERY_PROXY_URLS, WORMHOLE_QUERY_RATE_LIMIT_PER_SECOND, queryHubState, queryPortfolio };

package/dist/queries/index.d.ts

@@ -0,0 +1,148 @@
+import { QueryRequest as QueryRequest$1, QueryResponse as QueryResponse$1 } from '@wormhole-foundation/wormhole-query-sdk';
+
+type QueryNetwork = 'mainnet' | 'testnet';
+/**
+ * Configuration for calling the Wormhole Query Proxy.
+ *
+ * `apiKey` is required for hosted Query Proxy access.
+ * `endpoint` may be overridden for custom proxy deployments.
+ */
+interface QueryConfig {
+    apiKey: string;
+    endpoint?: string;
+    timeoutMs?: number;
+}
+/**
+ * Re-exported Wormhole Query SDK types (type-only).
+ * These map directly to the request/response shapes expected by the Query Proxy.
+ */
+type QueryRequest = QueryRequest$1;
+type QueryResponse = QueryResponse$1;
+type QueryOperationType = 'hubState' | 'portfolio';
+interface HubStateQuery {
+    type: 'hubState';
+    wormholeChainId: number;
+    hubAddress: string;
+}
+interface PortfolioQuery {
+    type: 'portfolio';
+    walletAddress: string;
+    wormholeChainIds: readonly number[];
+}
+type QueryOperation = HubStateQuery | PortfolioQuery;
+
+declare const WORMHOLE_QUERY_PROXY_URLS: {
+    readonly mainnet: "https://query.wormhole.com/v1/query";
+    readonly testnet: "https://testnet.query.wormhole.com/v1/query";
+};
+/**
+ * Wormhole Query Proxy rate limit: 6 queries per second.
+ * SDK callers should throttle requests accordingly.
+ */
+declare const WORMHOLE_QUERY_RATE_LIMIT_PER_SECOND = 6;
+/**
+ * Convenience set of Wormhole chain IDs commonly supported by Queries.
+ * This is not an exhaustive list of all Wormhole chains.
+ */
+declare const WORMHOLE_QUERY_CHAIN_IDS: {
+    readonly ETHEREUM: 2;
+    readonly POLYGON: 5;
+    readonly ARBITRUM: 23;
+    readonly OPTIMISM: 24;
+    readonly BASE: 30;
+};
+
+type QueryHubStateNetwork = 'testnet' | 'mainnet';
+type QueryHubStateOptions = {
+    /** Max response age in seconds (default: 60). */
+    maxAge?: number;
+    network?: QueryHubStateNetwork;
+    /** Maximum attempts including the first try (default: 4). */
+    maxAttempts?: number;
+};
+type HubStateResult = {
+    nonce: bigint;
+    isRegistered: boolean;
+    blockTime: number;
+    proof: Uint8Array;
+    /** Last action hash (Issue #9/#10 - for action-hash binding) */
+    lastActionHash?: string;
+};
+type QueryHubStateErrorCode = 'INVALID_ARGUMENT' | 'UNSUPPORTED_NETWORK' | 'MISSING_HUB_ADDRESS' | 'PROXY_HTTP_ERROR' | 'PROXY_RESPONSE_INVALID' | 'ATTESTATION_STALE' | 'QUERY_RESPONSE_INVALID';
+declare class QueryHubStateError extends Error {
+    code: QueryHubStateErrorCode;
+    cause?: unknown;
+    constructor(code: QueryHubStateErrorCode, message: string, cause?: unknown);
+}
+/** * Fetch Guardian-attested Hub state directly from the Wormhole Query Proxy.
+ *
+ * Client-side only: this avoids relayer API costs and produces a Guardian-signed proof
+ * that can be forwarded to the relayer for on-chain verification/submission.
+ */
+declare function queryHubState(userKeyHash: string, apiKey: string, options?: QueryHubStateOptions): Promise<HubStateResult>;
+
+type QueryPortfolioNetwork = 'testnet' | 'mainnet';
+type QueryPortfolioOptions = {
+    /** Max response age in seconds (default: 60). */
+    maxAge?: number;
+    network?: QueryPortfolioNetwork;
+    /** Maximum attempts including the first try (default: 4). */
+    maxAttempts?: number;
+    /** Cache TTL in ms (default: 30_000). */
+    cacheTtlMs?: number;
+    /** Request timeout in ms (default: 15_000 for testnet, 10_000 for mainnet). */
+    timeout?: number;
+    /** Override Query Proxy endpoint. */
+    endpoint?: string;
+    /** Override per-chain RPC URLs used for block tag lookups. */
+    rpcUrls?: Record<number, string>;
+    /** Override derived vault addresses for specific Wormhole chain IDs. */
+    vaultAddresses?: Record<number, string>;
+    /** Override token lists (ERC20 only) for specific Wormhole chain IDs. */
+    evmTokenAddresses?: Record<number, string[]>;
+    /** Additional Solana accounts to include in the Solana account query (base58). */
+    solanaAccounts?: string[];
+    /** Optional USD prices by symbol/address for aggregation (e.g. { USDC: 1 }). */
+    pricesUsd?: Record<string, number>;
+};
+type PortfolioBalance = {
+    assetId: string;
+    amount: bigint;
+    decimals?: number;
+    symbol?: string;
+    usdValue?: number;
+};
+type PortfolioChainErrorCode = 'UNSUPPORTED_CHAIN' | 'MISSING_VAULT' | 'MISSING_TOKENS' | 'ATTESTATION_STALE' | 'DECODE_ERROR';
+type PortfolioChainResult = {
+    wormholeChainId: number;
+    chainName?: string;
+    vaultAddress?: string;
+    blockTime?: number;
+    balances: PortfolioBalance[];
+    error?: {
+        code: PortfolioChainErrorCode;
+        message: string;
+    };
+};
+type PortfolioResult = {
+    proof: Uint8Array;
+    totalUsd?: number;
+    chains: PortfolioChainResult[];
+};
+type QueryPortfolioErrorCode = 'INVALID_ARGUMENT' | 'NETWORK_ERROR' | 'PROXY_HTTP_ERROR' | 'PROXY_RESPONSE_INVALID' | 'QUERY_RESPONSE_INVALID';
+declare class QueryPortfolioError extends Error {
+    code: QueryPortfolioErrorCode;
+    cause?: unknown;
+    constructor(code: QueryPortfolioErrorCode, message: string, cause?: unknown);
+}
+/**
+ * Fetch Guardian-attested vault balances across multiple chains in one Query Proxy request.
+ *
+ * Notes:
+ * - EVM balances are ERC20-only via `eth_call` (native ETH is not queryable via this query type).
+ * - Solana balance uses lamports of the Veridex vault PDA (plus optional extra accounts).
+ * - Aptos is included only if/when Wormhole Queries adds Aptos query types (currently returned as unsupported).
+ */
+declare function queryPortfolio(userKeyHash: string, apiKey: string, options?: QueryPortfolioOptions): Promise<PortfolioResult>;
+
+export { type HubStateQuery, type HubStateResult, type PortfolioBalance, type PortfolioChainErrorCode, type PortfolioChainResult, type PortfolioQuery, type PortfolioResult, type QueryConfig, QueryHubStateError, type QueryHubStateErrorCode, type QueryHubStateNetwork, type QueryHubStateOptions, type QueryNetwork, type QueryOperation, type QueryOperationType, QueryPortfolioError, type QueryPortfolioErrorCode, type QueryPortfolioNetwork, type QueryPortfolioOptions, type QueryRequest, type QueryResponse, WORMHOLE_QUERY_CHAIN_IDS, WORMHOLE_QUERY_PROXY_URLS, WORMHOLE_QUERY_RATE_LIMIT_PER_SECOND, queryHubState, queryPortfolio };