@veridex/sdk 1.1.1 → 1.1.2

package/dist/chunk-DZUNCSI5.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/chains/evm/EVMClient.ts"],"sourcesContent":["/**\n * Veridex Protocol SDK - EVM Chain Client\n * \n * Implementation of ChainClient interface for EVM-compatible chains\n */\n\nimport { ethers } from 'ethers';\nimport type {\n    ChainClient,\n    ChainConfig,\n    TransferParams,\n    ExecuteParams,\n    BridgeParams,\n    DispatchResult,\n    WebAuthnSignature,\n    VaultCreationResult,\n} from '../../core/types.js';\nimport { encodeTransferAction, encodeExecuteAction, encodeBridgeAction } from '../../payload.js';\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport interface EVMClientConfig {\n    chainId: number;\n    wormholeChainId: number;\n    rpcUrl: string;\n    hubContractAddress: string;\n    wormholeCoreBridge: string;\n    name?: string;\n    explorerUrl?: string;\n    vaultFactory?: string;\n    vaultImplementation?: string;\n    tokenBridge?: string;\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/**\n * EIP-1167 minimal proxy bytecode prefix (before implementation address)\n */\nconst PROXY_BYTECODE_PREFIX = '0x3d602d80600a3d3981f3363d3d373d3d3d363d73';\n\n/**\n * EIP-1167 minimal proxy bytecode suffix (after implementation address)\n */\nconst PROXY_BYTECODE_SUFFIX = '5af43d82803e903d91602b57fd5bf3';\n\n/**\n * ERC20 ABI for balance and transfer operations\n */\nconst ERC20_ABI = [\n    'function balanceOf(address owner) view returns (uint256)',\n    'function decimals() view returns (uint8)',\n    'function symbol() view returns (string)',\n    'function name() view returns (string)',\n    'function allowance(address owner, address spender) view returns (uint256)',\n    'function transfer(address to, uint256 amount) returns (bool)',\n    'function approve(address spender, uint256 amount) returns (bool)',\n];\n\n// ============================================================================\n// Hub Contract ABI (minimal)\n// ============================================================================\n\nconst HUB_ABI = [\n    'function dispatch(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) signature, uint256 publicKeyX, uint256 publicKeyY, uint16 targetChain, bytes actionPayload, uint256 nonce) payable returns (uint64 sequence)',\n    'function userNonces(bytes32 userKeyHash) view returns (uint256)',\n    // Hub exposes the Wormhole core bridge address; message fee is read from the\n    // bridge directly (getMessageFee() was removed from the Hub).\n    'function wormhole() view returns (address)',\n    'function getVaultAddress(bytes32 userKeyHash) view returns (address)',\n    'function vaultExists(bytes32 userKeyHash) view returns (bool)',\n    'function createVault(bytes32 userKeyHash) returns (address)',\n    // Issue #9/#10: New Hub methods for Query-based execution\n    'function getUserState(bytes32 userKeyHash) view returns (bytes32 keyHash, uint256 nonce, bytes32 lastActionHash)',\n    'function getUserLastActionHash(bytes32 userKeyHash) view returns (bytes32)',\n    // Issue #13: Session key management\n    'function registerSession(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32 sessionKeyHash, uint256 duration, uint256 maxValue, bool requireUV) external',\n    'function isSessionActive(bytes32 userKeyHash, bytes32 sessionKeyHash) view returns (bool active, uint256 expiry, uint256 maxValue, uint256 sessionIndex)',\n    'function revokeSession(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32 sessionKeyHash, bool requireUV) external',\n    'function getUserSessions(bytes32 userKeyHash) view returns (tuple(bytes32 sessionKeyHash, uint256 expiry, uint256 maxValue, bool revoked)[])',\n    'function getUserSessionCount(bytes32 userKeyHash) view returns (uint256)',\n    // Issue #22: Backup Passkey / Multi-Key Identity management\n    'function registerIdentity(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY) external',\n    'function addBackupKey(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, uint256 newPublicKeyX, uint256 newPublicKeyY, uint256 nonce) external payable returns (uint64 sequence)',\n    'function removeKey(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32 keyToRemove, uint256 nonce) external payable returns (uint64 sequence)',\n    'function getIdentityForKey(bytes32 keyHash) view returns (bytes32)',\n    'function getAuthorizedKeys(bytes32 identity) view returns (bytes32[])',\n    'function getAuthorizedKeyCount(bytes32 identity) view returns (uint256)',\n    'function isAuthorizedForIdentity(bytes32 identity, bytes32 keyHash) view returns (bool)',\n    'function isIdentityRoot(bytes32 keyHash) view returns (bool)',\n    'function getIdentityState(bytes32 keyHash) view returns (bytes32 identity, uint256 keyCount, uint256 maxKeys, bool isRoot)',\n    \n    // Issue #23: Social Recovery / Guardian Management\n    'function setupGuardians(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32[] guardians, uint256 threshold) external payable returns (uint64 sequence)',\n    'function addGuardian(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32 guardianKeyHash) external payable returns (uint64 sequence)',\n    'function removeGuardian(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32 guardianKeyHash) external payable returns (uint64 sequence)',\n    'function initiateRecovery(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32 identityToRecover, bytes32 newOwnerKeyHash) external payable returns (uint64 sequence)',\n    'function approveRecovery(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32 identityToRecover) external payable returns (uint64 sequence)',\n    'function executeRecovery(bytes32 identityToRecover, uint256 newPublicKeyX, uint256 newPublicKeyY) external payable returns (uint64 sequence)',\n    'function cancelRecovery(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY) external payable returns (uint64 sequence)',\n    'function getGuardians(bytes32 identityKeyHash) view returns (bytes32[] guardians, uint256 threshold, bool isConfigured)',\n    'function getRecoveryStatus(bytes32 identityKeyHash) view returns (bool isActive, bytes32 newOwnerKeyHash, uint256 initiatedAt, uint256 approvalCount, uint256 threshold, uint256 canExecuteAt, uint256 expiresAt)',\n    'function hasGuardianApproved(bytes32 identityKeyHash, bytes32 guardianKeyHash) view returns (bool hasApproved)',\n    \n    // ADR-0037: Threshold Multisig\n    'function configureTransactionPolicy(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, uint256 threshold, uint256 protectedActionMask, uint256 proposalTtl, bool disableSessions) external',\n    'function createTransactionProposal(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, uint16 targetChain, bytes actionPayload) external returns (bytes32 proposalId)',\n    'function approveTransactionProposal(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32 proposalId) external returns (uint256 approvalCount, bool thresholdReached)',\n    'function cancelTransactionProposal(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) auth, uint256 publicKeyX, uint256 publicKeyY, bytes32 proposalId) external',\n    'function executeTransactionProposal(bytes32 proposalId) external payable returns (uint64 sequence)',\n    'function getTransactionPolicy(bytes32 identityKeyHash) view returns (bool enabled, uint256 threshold, uint256 protectedActionMask, uint256 proposalTtl, bool disableSessions)',\n    'function getTransactionProposal(bytes32 proposalId) view returns (bytes32 identityKeyHash, bytes32 proposerKeyHash, uint16 targetChain, uint8 actionType, bytes32 actionHash, uint256 createdAt, uint256 expiresAt, uint256 approvalCount, uint256 requiredThreshold, uint8 state)',\n    'function hasApprovedTransactionProposal(bytes32 proposalId, bytes32 keyHash) view returns (bool)',\n];\n\n// ============================================================================\n// Factory Contract ABI (minimal)\n// ============================================================================\n\nconst FACTORY_ABI = [\n    'function createVault(bytes32 ownerKeyHash) returns (address vault)',\n    'function getVault(bytes32 ownerKeyHash) view returns (address)',\n    'function computeVaultAddress(bytes32 ownerKeyHash) view returns (address vault)',\n    'function vaultExists(bytes32 ownerKeyHash) view returns (bool)',\n    'function implementation() view returns (address)',\n];\n\n// ============================================================================\n// EVMClient Class\n// ============================================================================\n\n/**\n * EVM implementation of the ChainClient interface\n */\nexport class EVMClient implements ChainClient {\n    private config: ChainConfig;\n    private provider: ethers.JsonRpcProvider;\n    private hubContract: ethers.Contract;\n    private factoryContract: ethers.Contract | null = null;\n    private cachedImplementation: string | null = null;\n    private cachedWormholeAddress: string | null = null;\n    private cachedMessageFee: { value: bigint; expiresAt: number } | null = null;\n\n    constructor(config: EVMClientConfig) {\n        this.config = {\n            name: config.name ?? `EVM Chain ${config.chainId}`,\n            chainId: config.chainId,\n            wormholeChainId: config.wormholeChainId,\n            rpcUrl: config.rpcUrl,\n            explorerUrl: config.explorerUrl ?? '',\n            isEvm: true,\n            contracts: {\n                hub: config.hubContractAddress,\n                vaultFactory: config.vaultFactory,\n                vaultImplementation: config.vaultImplementation,\n                wormholeCoreBridge: config.wormholeCoreBridge,\n                tokenBridge: config.tokenBridge,\n            },\n        };\n\n        this.provider = new ethers.JsonRpcProvider(config.rpcUrl);\n        this.hubContract = new ethers.Contract(\n            config.hubContractAddress,\n            HUB_ABI,\n            this.provider\n        );\n\n        // Initialize factory contract if address is provided\n        if (config.vaultFactory) {\n            this.factoryContract = new ethers.Contract(\n                config.vaultFactory,\n                FACTORY_ABI,\n                this.provider\n            );\n        }\n\n        // Cache implementation address if provided\n        if (config.vaultImplementation) {\n            this.cachedImplementation = config.vaultImplementation;\n        }\n    }\n\n    getConfig(): ChainConfig {\n        return this.config;\n    }\n\n    async getNonce(userKeyHash: string): Promise<bigint> {\n        const nonce = await this.hubContract.userNonces(userKeyHash);\n        return BigInt(nonce.toString());\n    }\n\n    /**\n     * Get user state from Hub (Issue #9/#10)\n     * Returns comprehensive state including last action hash\n     */\n    async getUserState(userKeyHash: string): Promise<{\n        keyHash: string;\n        nonce: bigint;\n        lastActionHash: string;\n    }> {\n        try {\n            const result = await this.hubContract.getUserState(userKeyHash);\n            return {\n                keyHash: result[0],\n                nonce: BigInt(result[1].toString()),\n                lastActionHash: result[2],\n            };\n        } catch (error) {\n            // Fallback for older Hub deployments without getUserState\n            const nonce = await this.getNonce(userKeyHash);\n            return {\n                keyHash: userKeyHash,\n                nonce,\n                lastActionHash: ethers.ZeroHash,\n            };\n        }\n    }\n\n    /**\n     * Get user's last action hash from Hub (Issue #9/#10)\n     * Returns zero hash if user has no actions yet\n     */\n    async getUserLastActionHash(userKeyHash: string): Promise<string> {\n        try {\n            return await this.hubContract.getUserLastActionHash(userKeyHash);\n        } catch (error) {\n            // Fallback for older Hub deployments\n            return ethers.ZeroHash;\n        }\n    }\n\n    // ==========================================================================\n    // Session Management Methods (Issue #13)\n    // ==========================================================================\n\n    /**\n     * Register a new session key for temporary authentication\n     * Enables native L1 speed for repeat transactions without biometric auth\n     * \n     * @param params Session registration parameters\n     * @param signer Ethereum signer to pay gas\n     * @returns Transaction receipt\n     */\n    async registerSession(\n        params: import('../../types.js').RegisterSessionParams,\n        signer: ethers.Signer\n    ): Promise<ethers.TransactionReceipt> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: params.signature.authenticatorData,\n            clientDataJSON: params.signature.clientDataJSON,\n            challengeIndex: params.signature.challengeIndex,\n            typeIndex: params.signature.typeIndex,\n            r: params.signature.r,\n            s: params.signature.s,\n        };\n\n        const tx = await hubWithSigner.registerSession(\n            authTuple,\n            params.publicKeyX,\n            params.publicKeyY,\n            params.sessionKeyHash,\n            params.duration,\n            params.maxValue,\n            params.requireUV\n        );\n\n        return await tx.wait();\n    }\n\n    /**\n     * Check if a session is currently active (queryable via Wormhole CCQ)\n     * \n     * @param userKeyHash Hash of the user's Passkey public key\n     * @param sessionKeyHash Hash of the session key to check\n     * @returns Session validation result\n     */\n    async isSessionActive(\n        userKeyHash: string,\n        sessionKeyHash: string\n    ): Promise<import('../../types.js').SessionValidationResult> {\n        const result = await this.hubContract.isSessionActive(userKeyHash, sessionKeyHash);\n        \n        return {\n            active: result[0],\n            expiry: Number(result[1]),\n            maxValue: BigInt(result[2].toString()),\n            sessionIndex: Number(result[3]),\n        };\n    }\n\n    /**\n     * Revoke a session key immediately\n     * \n     * @param params Session revocation parameters\n     * @param signer Ethereum signer to pay gas\n     * @returns Transaction receipt\n     */\n    async revokeSession(\n        params: import('../../types.js').RevokeSessionParams,\n        signer: ethers.Signer\n    ): Promise<ethers.TransactionReceipt> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: params.signature.authenticatorData,\n            clientDataJSON: params.signature.clientDataJSON,\n            challengeIndex: params.signature.challengeIndex,\n            typeIndex: params.signature.typeIndex,\n            r: params.signature.r,\n            s: params.signature.s,\n        };\n\n        const tx = await hubWithSigner.revokeSession(\n            authTuple,\n            params.publicKeyX,\n            params.publicKeyY,\n            params.sessionKeyHash,\n            params.requireUV\n        );\n\n        return await tx.wait();\n    }\n\n    /**\n     * Get all sessions for a user\n     * \n     * @param userKeyHash Hash of the user's Passkey public key\n     * @returns Array of all sessions (active and expired/revoked)\n     */\n    async getUserSessions(userKeyHash: string): Promise<import('../../types.js').SessionKey[]> {\n        const sessions = await this.hubContract.getUserSessions(userKeyHash);\n        \n        return sessions.map((s: any) => ({\n            sessionKeyHash: s.sessionKeyHash,\n            expiry: Number(s.expiry),\n            maxValue: BigInt(s.maxValue.toString()),\n            revoked: s.revoked,\n        }));\n    }\n\n    /**\n     * Get the number of sessions for a user\n     * \n     * @param userKeyHash Hash of the user's Passkey public key\n     * @returns Number of sessions\n     */\n    async getUserSessionCount(userKeyHash: string): Promise<number> {\n        const count = await this.hubContract.getUserSessionCount(userKeyHash);\n        return Number(count);\n    }\n\n    async getMessageFee(): Promise<bigint> {\n        // Short cache to avoid hammering the RPC on every dispatch.\n        const now = Date.now();\n        if (this.cachedMessageFee && this.cachedMessageFee.expiresAt > now) {\n            return this.cachedMessageFee.value;\n        }\n\n        // Resolve the Wormhole core bridge address. Prefer the value supplied\n        // via config; otherwise read it from the Hub once and cache it.\n        let wormholeAddress =\n            this.config.contracts.wormholeCoreBridge ?? this.cachedWormholeAddress;\n        if (!wormholeAddress) {\n            wormholeAddress = await this.hubContract.wormhole();\n            this.cachedWormholeAddress = wormholeAddress;\n        }\n\n        const wormhole = new ethers.Contract(\n            wormholeAddress as string,\n            ['function messageFee() view returns (uint256)'],\n            this.provider,\n        );\n        const fee = await wormhole.messageFee();\n        const value = BigInt(fee.toString());\n        this.cachedMessageFee = { value, expiresAt: now + 30_000 };\n        return value;\n    }\n\n    async buildTransferPayload(params: TransferParams): Promise<string> {\n        return encodeTransferAction(\n            params.token,\n            params.recipient,\n            params.amount\n        );\n    }\n\n    async buildExecutePayload(params: ExecuteParams): Promise<string> {\n        return encodeExecuteAction(\n            params.target,\n            params.value,\n            params.data\n        );\n    }\n\n    async buildBridgePayload(params: BridgeParams): Promise<string> {\n        return encodeBridgeAction(\n            params.token,\n            params.amount,\n            params.destinationChain,\n            params.recipient\n        );\n    }\n\n    async dispatch(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        targetChain: number,\n        actionPayload: string,\n        nonce: bigint,\n        signer: ethers.Signer\n    ): Promise<DispatchResult> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const signatureTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.dispatch(\n            signatureTuple,\n            publicKeyX,\n            publicKeyY,\n            targetChain,\n            actionPayload,\n            nonce,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n\n        // Extract sequence from event logs\n        const dispatchEvent = receipt.logs.find((log: any) => {\n            try {\n                const parsed = hubWithSigner.interface.parseLog(log);\n                return parsed?.name === 'ActionDispatched';\n            } catch {\n                return false;\n            }\n        });\n\n        let sequence = 0n;\n        if (dispatchEvent) {\n            const parsed = hubWithSigner.interface.parseLog(dispatchEvent);\n            sequence = BigInt(parsed?.args?.sequence?.toString() ?? '0');\n        }\n\n        const keyHash = ethers.keccak256(\n            ethers.AbiCoder.defaultAbiCoder().encode(\n                ['uint256', 'uint256'],\n                [publicKeyX, publicKeyY]\n            )\n        );\n\n        return {\n            transactionHash: receipt.hash,\n            sequence,\n            userKeyHash: keyHash,\n            targetChain,\n            blockNumber: receipt.blockNumber,\n        };\n    }\n\n    /**\n     * Dispatch an action to the Hub via relayer (gasless)\n     * The relayer pays for gas and submits the transaction on behalf of the user\n     */\n    async dispatchGasless(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        targetChain: number,\n        actionPayload: string,\n        nonce: bigint,\n        relayerUrl: string\n    ): Promise<DispatchResult> {\n        // Compute message hash that was signed\n        // This should match how the WebAuthn signature was generated\n        const keyHash = ethers.keccak256(\n            ethers.AbiCoder.defaultAbiCoder().encode(\n                ['uint256', 'uint256'],\n                [publicKeyX, publicKeyY]\n            )\n        );\n\n        // Build the message that was signed\n        const message = ethers.keccak256(\n            ethers.AbiCoder.defaultAbiCoder().encode(\n                ['bytes32', 'uint16', 'bytes', 'uint256'],\n                [keyHash, targetChain, actionPayload, nonce]\n            )\n        );\n\n        // Prepare request for relayer\n        const request = {\n            messageHash: message,\n            r: '0x' + signature.r.toString(16).padStart(64, '0'),\n            s: '0x' + signature.s.toString(16).padStart(64, '0'),\n            publicKeyX: '0x' + publicKeyX.toString(16).padStart(64, '0'),\n            publicKeyY: '0x' + publicKeyY.toString(16).padStart(64, '0'),\n            targetChain,\n            actionPayload,\n            nonce: Number(nonce),\n        };\n\n        // Submit to relayer with retries for transient failures.\n        // Retry semantics:\n        //   - network errors (fetch throws) → retry up to 3 times\n        //   - HTTP 5xx                       → retry up to 3 times\n        //   - HTTP 408 / 429                 → retry up to 3 times (respect Retry-After if present)\n        //   - HTTP 4xx (incl. 403 policy)    → no retry, surface immediately\n        // Backoff: 1s, 2s, 4s (with small jitter)\n        const MAX_ATTEMPTS = 3;\n        const baseDelayMs = 1000;\n        const sleep = (ms: number) =>\n            new Promise<void>((resolve) => setTimeout(resolve, ms));\n\n        let response: Response | undefined;\n        let lastError: unknown;\n        for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {\n            try {\n                response = await fetch(`${relayerUrl}/api/v1/submit`, {\n                    method: 'POST',\n                    headers: {\n                        'Content-Type': 'application/json',\n                    },\n                    body: JSON.stringify(request),\n                });\n\n                const retryable =\n                    response.status >= 500 ||\n                    response.status === 408 ||\n                    response.status === 429;\n\n                if (!retryable) {\n                    break; // success or deterministic failure\n                }\n\n                if (attempt === MAX_ATTEMPTS) break;\n\n                const retryAfter = response.headers.get('retry-after');\n                const explicitDelay = retryAfter ? parseInt(retryAfter, 10) * 1000 : 0;\n                const backoff =\n                    explicitDelay > 0\n                        ? explicitDelay\n                        : baseDelayMs * 2 ** (attempt - 1) + Math.floor(Math.random() * 200);\n                await sleep(backoff);\n            } catch (err) {\n                lastError = err;\n                if (attempt === MAX_ATTEMPTS) break;\n                const backoff = baseDelayMs * 2 ** (attempt - 1) + Math.floor(Math.random() * 200);\n                await sleep(backoff);\n            }\n        }\n\n        if (!response) {\n            throw new Error(\n                `Relayer submission failed after ${MAX_ATTEMPTS} attempts: ${\n                    lastError instanceof Error ? lastError.message : String(lastError)\n                }`,\n            );\n        }\n\n        if (!response.ok) {\n            const error = await response.json().catch(() => ({ error: response!.statusText }));\n            throw new Error(`Relayer submission failed: ${error.error || response.statusText}`);\n        }\n\n        const result = await response.json();\n\n        if (!result.success) {\n            throw new Error(`Relayer submission failed: ${result.error}`);\n        }\n\n        return {\n            transactionHash: result.txHash,\n            sequence: BigInt(result.sequence || '0'),\n            userKeyHash: keyHash,\n            targetChain,\n        };\n    }\n\n    async getVaultAddress(userKeyHash: string): Promise<string | null> {\n        try {\n            // Try factory first if available\n            if (this.factoryContract) {\n                const address = await this.factoryContract.getVault(userKeyHash);\n                if (address !== ethers.ZeroAddress) {\n                    return address;\n                }\n            }\n\n            // Fallback to hub contract\n            const address = await this.hubContract.getVaultAddress(userKeyHash);\n            if (address === ethers.ZeroAddress) {\n                return null;\n            }\n            return address;\n        } catch (error) {\n            console.error('Error getting vault address:', error);\n            return null;\n        }\n    }\n\n    /**\n     * Compute vault address deterministically without querying the chain\n     * Uses CREATE2 with EIP-1167 minimal proxy pattern\n     */\n    computeVaultAddress(userKeyHash: string): string {\n        const factoryAddress = this.getFactoryAddress();\n        const implementationAddress = this.getImplementationAddress();\n\n        if (!factoryAddress || !implementationAddress) {\n            throw new Error('Factory and implementation addresses required for address computation');\n        }\n\n        // Compute salt: keccak256(abi.encodePacked(factory, keyHash))\n        const salt = ethers.keccak256(\n            ethers.solidityPacked(\n                ['address', 'bytes32'],\n                [factoryAddress, userKeyHash]\n            )\n        );\n\n        // Build EIP-1167 initcode\n        const initCode = this.buildProxyInitCode(implementationAddress);\n        const initCodeHash = ethers.keccak256(initCode);\n\n        // CREATE2 address computation:\n        // address = keccak256(0xff ++ factory ++ salt ++ initCodeHash)[12:]\n        const create2Data = ethers.solidityPacked(\n            ['bytes1', 'address', 'bytes32', 'bytes32'],\n            ['0xff', factoryAddress, salt, initCodeHash]\n        );\n\n        const hash = ethers.keccak256(create2Data);\n        // Take last 20 bytes as address\n        return ethers.getAddress('0x' + hash.slice(26));\n    }\n\n    /**\n     * Build EIP-1167 minimal proxy initcode\n     */\n    private buildProxyInitCode(implementationAddress: string): string {\n        const impl = implementationAddress.toLowerCase().replace('0x', '');\n        return PROXY_BYTECODE_PREFIX + impl + PROXY_BYTECODE_SUFFIX;\n    }\n\n    async vaultExists(userKeyHash: string): Promise<boolean> {\n        try {\n            // Try factory first if available\n            if (this.factoryContract) {\n                return await this.factoryContract.vaultExists(userKeyHash);\n            }\n            // Hub chains may not have vaultExists, silently return false\n            if (this.hubContract.vaultExists) {\n                try {\n                    return await this.hubContract.vaultExists(userKeyHash);\n                } catch {\n                    // Hub contract doesn't have vaultExists - this is expected on hub-only chains\n                    return false;\n                }\n            }\n            return false;\n        } catch {\n            // Silently return false - vault existence check is non-critical\n            return false;\n        }\n    }\n\n    async createVault(userKeyHash: string, signer: ethers.Signer): Promise<VaultCreationResult> {\n        // Check if vault already exists\n        const exists = await this.vaultExists(userKeyHash);\n        if (exists) {\n            const address = await this.getVaultAddress(userKeyHash);\n            if (address) {\n                return {\n                    address,\n                    transactionHash: '',\n                    blockNumber: 0,\n                    gasUsed: 0n,\n                    alreadyExisted: true,\n                };\n            }\n        }\n\n        // Create vault using factory or hub\n        let tx: ethers.TransactionResponse;\n\n        if (this.factoryContract) {\n            const factoryWithSigner = this.factoryContract.connect(signer) as ethers.Contract;\n            tx = await factoryWithSigner.createVault(userKeyHash);\n        } else {\n            const hubWithSigner = this.hubContract.connect(signer) as ethers.Contract;\n            tx = await hubWithSigner.createVault(userKeyHash);\n        }\n\n        const receipt = await tx.wait();\n        if (!receipt) {\n            throw new Error('Transaction failed - no receipt');\n        }\n\n        const vaultAddress = await this.getVaultAddress(userKeyHash);\n        if (!vaultAddress) {\n            throw new Error('Failed to create vault - address not found after creation');\n        }\n\n        return {\n            address: vaultAddress,\n            transactionHash: receipt.hash,\n            blockNumber: receipt.blockNumber,\n            gasUsed: receipt.gasUsed,\n            alreadyExisted: false,\n        };\n    }\n\n    /**\n     * Create a vault with a sponsor wallet paying for gas\n     * \n     * @param userKeyHash - The user's passkey hash\n     * @param sponsorPrivateKey - Private key of the wallet that will pay gas\n     * @param rpcUrl - Optional RPC URL to use (defaults to client's RPC)\n     * @returns VaultCreationResult with address and transaction details\n     */\n    async createVaultSponsored(\n        userKeyHash: string,\n        sponsorPrivateKey: string,\n        rpcUrl?: string\n    ): Promise<VaultCreationResult> {\n        // Check if vault already exists\n        const exists = await this.vaultExists(userKeyHash);\n        if (exists) {\n            const address = await this.getVaultAddress(userKeyHash);\n            if (address) {\n                return {\n                    address,\n                    transactionHash: '',\n                    blockNumber: 0,\n                    gasUsed: 0n,\n                    alreadyExisted: true,\n                };\n            }\n        }\n\n        // Create sponsor signer\n        const provider = rpcUrl\n            ? new ethers.JsonRpcProvider(rpcUrl)\n            : this.provider;\n        const sponsorWallet = new ethers.Wallet(sponsorPrivateKey, provider);\n\n        // Check sponsor balance\n        const sponsorBalance = await provider.getBalance(sponsorWallet.address);\n        const estimatedGas = await this.estimateVaultCreationGas(userKeyHash);\n        const feeData = await provider.getFeeData();\n        const estimatedCost = estimatedGas * (feeData.gasPrice ?? 1000000000n);\n\n        if (sponsorBalance < estimatedCost) {\n            throw new Error(\n                `Sponsor wallet has insufficient funds. ` +\n                `Balance: ${ethers.formatEther(sponsorBalance)} ETH, ` +\n                `Estimated cost: ${ethers.formatEther(estimatedCost)} ETH`\n            );\n        }\n\n        // Create vault using factory or hub with sponsor wallet\n        let tx: ethers.TransactionResponse;\n\n        if (this.factoryContract) {\n            const factoryWithSponsor = this.factoryContract.connect(sponsorWallet) as ethers.Contract;\n            tx = await factoryWithSponsor.createVault(userKeyHash);\n        } else {\n            const hubWithSponsor = this.hubContract.connect(sponsorWallet) as ethers.Contract;\n            tx = await hubWithSponsor.createVault(userKeyHash);\n        }\n\n        const receipt = await tx.wait();\n        if (!receipt) {\n            throw new Error('Transaction failed - no receipt');\n        }\n\n        const vaultAddress = await this.getVaultAddress(userKeyHash);\n        if (!vaultAddress) {\n            throw new Error('Failed to create vault - address not found after creation');\n        }\n\n        return {\n            address: vaultAddress,\n            transactionHash: receipt.hash,\n            blockNumber: receipt.blockNumber,\n            gasUsed: receipt.gasUsed,\n            alreadyExisted: false,\n            sponsoredBy: sponsorWallet.address,\n        };\n    }\n\n    async estimateVaultCreationGas(userKeyHash: string): Promise<bigint> {\n        try {\n            if (this.factoryContract) {\n                return await this.factoryContract.createVault.estimateGas(userKeyHash);\n            }\n            return await this.hubContract.createVault.estimateGas(userKeyHash);\n        } catch (error) {\n            // Return a default estimate if estimation fails (vault might already exist)\n            console.warn('Gas estimation failed, returning default:', error);\n            return 150000n; // Default estimate for vault creation\n        }\n    }\n\n    getFactoryAddress(): string | undefined {\n        return this.config.contracts.vaultFactory;\n    }\n\n    getImplementationAddress(): string | undefined {\n        return this.config.contracts.vaultImplementation ?? this.cachedImplementation ?? undefined;\n    }\n\n    /**\n     * Fetch implementation address from factory contract\n     */\n    async fetchImplementationAddress(): Promise<string | null> {\n        if (this.cachedImplementation) {\n            return this.cachedImplementation;\n        }\n\n        if (!this.factoryContract) {\n            return null;\n        }\n\n        try {\n            this.cachedImplementation = await this.factoryContract.implementation();\n            return this.cachedImplementation;\n        } catch (error) {\n            console.error('Error fetching implementation address:', error);\n            return null;\n        }\n    }\n\n    /**\n     * Get the provider instance\n     */\n    getProvider(): ethers.JsonRpcProvider {\n        return this.provider;\n    }\n\n    // ========================================================================\n    // Balance Methods (Phase 2)\n    // ========================================================================\n\n    /**\n     * Get native token balance for an address\n     */\n    async getNativeBalance(address: string): Promise<bigint> {\n        return await this.provider.getBalance(address);\n    }\n\n    /**\n     * Get ERC20 token balance for an address\n     */\n    async getTokenBalance(tokenAddress: string, ownerAddress: string): Promise<bigint> {\n        const contract = new ethers.Contract(tokenAddress, ERC20_ABI, this.provider);\n        return await contract.balanceOf(ownerAddress);\n    }\n\n    /**\n     * Get token allowance\n     */\n    async getTokenAllowance(\n        tokenAddress: string,\n        ownerAddress: string,\n        spenderAddress: string\n    ): Promise<bigint> {\n        const contract = new ethers.Contract(tokenAddress, ERC20_ABI, this.provider);\n        return await contract.allowance(ownerAddress, spenderAddress);\n    }\n\n    /**\n     * Estimate gas for a dispatch transaction\n     */\n    async estimateDispatchGas(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        targetChain: number,\n        actionPayload: string,\n        nonce: bigint\n    ): Promise<bigint> {\n        const signatureTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        try {\n            const gasEstimate = await this.hubContract.dispatch.estimateGas(\n                signatureTuple,\n                publicKeyX,\n                publicKeyY,\n                targetChain,\n                actionPayload,\n                nonce,\n                { value: messageFee }\n            );\n            return gasEstimate;\n        } catch (error) {\n            console.warn('Gas estimation failed, using default:', error);\n            return 500000n; // Default estimate for dispatch\n        }\n    }\n\n    /**\n     * Get current gas price\n     */\n    async getGasPrice(): Promise<bigint> {\n        const feeData = await this.provider.getFeeData();\n        return feeData.gasPrice ?? feeData.maxFeePerGas ?? 0n;\n    }\n\n    /**\n     * Get current block number\n     */\n    async getBlockNumber(): Promise<number> {\n        return await this.provider.getBlockNumber();\n    }\n\n    /**\n     * Get transaction receipt\n     */\n    async getTransactionReceipt(hash: string): Promise<ethers.TransactionReceipt | null> {\n        return await this.provider.getTransactionReceipt(hash);\n    }\n\n    /**\n     * Wait for transaction confirmation\n     */\n    async waitForTransaction(\n        hash: string,\n        confirmations: number = 1\n    ): Promise<ethers.TransactionReceipt | null> {\n        return await this.provider.waitForTransaction(hash, confirmations);\n    }\n\n    // ==========================================================================\n    // Backup Passkey / Multi-Key Identity Methods (Issue #22)\n    // ==========================================================================\n\n    /**\n     * Get the identity for a given key hash\n     * Returns zero hash if key is not registered to any identity\n     * \n     * @param keyHash Hash of the passkey to look up\n     * @returns Identity (first passkey's keyHash) or zero hash\n     */\n    async getIdentityForKey(keyHash: string): Promise<string> {\n        try {\n            return await this.hubContract.getIdentityForKey(keyHash);\n        } catch (error) {\n            return ethers.ZeroHash;\n        }\n    }\n\n    /**\n     * Get all authorized keys for an identity\n     * \n     * @param identity The identity key hash (first passkey's keyHash)\n     * @returns Array of authorized key hashes\n     */\n    async getAuthorizedKeys(identity: string): Promise<string[]> {\n        try {\n            return await this.hubContract.getAuthorizedKeys(identity);\n        } catch (error) {\n            return [];\n        }\n    }\n\n    /**\n     * Get count of authorized keys for an identity\n     * \n     * @param identity The identity key hash\n     * @returns Number of authorized keys\n     */\n    async getAuthorizedKeyCount(identity: string): Promise<number> {\n        try {\n            const count = await this.hubContract.getAuthorizedKeyCount(identity);\n            return Number(count);\n        } catch (error) {\n            return 0;\n        }\n    }\n\n    /**\n     * Check if a key is authorized for an identity\n     * \n     * @param identity The identity key hash\n     * @param keyHash The key hash to check\n     * @returns Whether the key is authorized\n     */\n    async isAuthorizedForIdentity(identity: string, keyHash: string): Promise<boolean> {\n        try {\n            return await this.hubContract.isAuthorizedForIdentity(identity, keyHash);\n        } catch (error) {\n            return false;\n        }\n    }\n\n    /**\n     * Check if a key is the root identity key\n     * \n     * @param keyHash The key hash to check\n     * @returns Whether the key is a root identity\n     */\n    async isIdentityRootKey(keyHash: string): Promise<boolean> {\n        try {\n            return await this.hubContract.isIdentityRoot(keyHash);\n        } catch (error) {\n            return false;\n        }\n    }\n\n    /**\n     * Get comprehensive identity state for a key\n     * \n     * @param keyHash Hash of any key in the identity\n     * @returns Identity state including count, max, and root status\n     */\n    async getIdentityState(keyHash: string): Promise<import('../../types.js').IdentityState> {\n        try {\n            const result = await this.hubContract.getIdentityState(keyHash);\n            return {\n                identity: result[0],\n                keyCount: Number(result[1]),\n                maxKeys: Number(result[2]),\n                isRoot: result[3],\n            };\n        } catch (error) {\n            // Fallback for keys not registered\n            return {\n                identity: ethers.ZeroHash,\n                keyCount: 0,\n                maxKeys: 5,\n                isRoot: false,\n            };\n        }\n    }\n\n    /**\n     * Register a new identity with the first passkey\n     * This makes the passkey the root identity key\n     * \n     * @param signature WebAuthn signature\n     * @param publicKeyX Passkey public key X coordinate\n     * @param publicKeyY Passkey public key Y coordinate\n     * @param signer Ethereum signer to pay gas\n     * @returns Transaction receipt and identity hash\n     */\n    async registerIdentity(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; identity: string }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const tx = await hubWithSigner.registerIdentity(\n            authTuple,\n            publicKeyX,\n            publicKeyY\n        );\n\n        const receipt = await tx.wait();\n        \n        // Compute identity (keyHash of the registered key)\n        const keyHash = ethers.keccak256(\n            ethers.solidityPacked(['uint256', 'uint256'], [publicKeyX, publicKeyY])\n        );\n\n        return { receipt, identity: keyHash };\n    }\n\n    /**\n     * Add a backup passkey to an existing identity\n     * Requires WebAuthn signature from an authorized key\n     * \n     * @param signature WebAuthn signature from existing authorized key\n     * @param publicKeyX Existing key's X coordinate\n     * @param publicKeyY Existing key's Y coordinate\n     * @param newPublicKeyX New backup key's X coordinate\n     * @param newPublicKeyY New backup key's Y coordinate\n     * @param nonce Current nonce for the signing key\n     * @param signer Ethereum signer to pay gas\n     * @returns Transaction receipt and sequence number\n     */\n    async addBackupKey(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        newPublicKeyX: bigint,\n        newPublicKeyY: bigint,\n        nonce: bigint,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; sequence: bigint }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.addBackupKey(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            newPublicKeyX,\n            newPublicKeyY,\n            nonce,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n\n        // Extract sequence from Dispatch event\n        let sequence = 0n;\n        for (const log of receipt.logs) {\n            try {\n                const parsed = this.hubContract.interface.parseLog({\n                    topics: log.topics as string[],\n                    data: log.data,\n                });\n                if (parsed?.name === 'Dispatched') {\n                    sequence = BigInt(parsed.args[3]); // sequence is 4th arg\n                    break;\n                }\n            } catch {\n                // Not a Hub event, skip\n            }\n        }\n\n        return { receipt, sequence };\n    }\n\n    /**\n     * Remove a passkey from an identity\n     * Cannot remove the last remaining key\n     * \n     * @param signature WebAuthn signature from an authorized key\n     * @param publicKeyX Signing key's X coordinate\n     * @param publicKeyY Signing key's Y coordinate\n     * @param keyToRemove Hash of the key to remove\n     * @param nonce Current nonce for the signing key\n     * @param signer Ethereum signer to pay gas\n     * @returns Transaction receipt and sequence number\n     */\n    async removeKey(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        keyToRemove: string,\n        nonce: bigint,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; sequence: bigint }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.removeKey(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            keyToRemove,\n            nonce,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n\n        // Extract sequence from Dispatch event\n        let sequence = 0n;\n        for (const log of receipt.logs) {\n            try {\n                const parsed = this.hubContract.interface.parseLog({\n                    topics: log.topics as string[],\n                    data: log.data,\n                });\n                if (parsed?.name === 'Dispatched') {\n                    sequence = BigInt(parsed.args[3]);\n                    break;\n                }\n            } catch {\n                // Not a Hub event, skip\n            }\n        }\n\n        return { receipt, sequence };\n    }\n\n    // =========================================================================\n    //                      SOCIAL RECOVERY METHODS (Issue #23)\n    // =========================================================================\n\n    /**\n     * Setup guardians for an identity\n     * @param signature WebAuthn signature from owner\n     * @param publicKeyX Owner's public key X coordinate\n     * @param publicKeyY Owner's public key Y coordinate\n     * @param guardians Array of guardian key hashes\n     * @param threshold Required approvals for recovery\n     * @param signer Ethers signer for transaction\n     */\n    async setupGuardians(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        guardians: string[],\n        threshold: bigint,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; sequence: bigint }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.setupGuardians(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            guardians,\n            threshold,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n        const sequence = this._extractSequenceFromReceipt(receipt);\n\n        return { receipt, sequence };\n    }\n\n    /**\n     * Add a guardian to an identity\n     */\n    async addGuardian(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        guardianKeyHash: string,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; sequence: bigint }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.addGuardian(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            guardianKeyHash,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n        const sequence = this._extractSequenceFromReceipt(receipt);\n\n        return { receipt, sequence };\n    }\n\n    /**\n     * Remove a guardian from an identity\n     */\n    async removeGuardian(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        guardianKeyHash: string,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; sequence: bigint }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.removeGuardian(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            guardianKeyHash,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n        const sequence = this._extractSequenceFromReceipt(receipt);\n\n        return { receipt, sequence };\n    }\n\n    /**\n     * Initiate recovery as a guardian\n     */\n    async initiateRecovery(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        identityToRecover: string,\n        newOwnerKeyHash: string,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; sequence: bigint }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.initiateRecovery(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            identityToRecover,\n            newOwnerKeyHash,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n        const sequence = this._extractSequenceFromReceipt(receipt);\n\n        return { receipt, sequence };\n    }\n\n    /**\n     * Approve recovery as a guardian\n     */\n    async approveRecovery(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        identityToRecover: string,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; sequence: bigint }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.approveRecovery(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            identityToRecover,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n        const sequence = this._extractSequenceFromReceipt(receipt);\n\n        return { receipt, sequence };\n    }\n\n    /**\n     * Execute recovery after timelock (anyone can call)\n     */\n    async executeRecovery(\n        identityToRecover: string,\n        newPublicKeyX: bigint,\n        newPublicKeyY: bigint,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; sequence: bigint }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.executeRecovery(\n            identityToRecover,\n            newPublicKeyX,\n            newPublicKeyY,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n        const sequence = this._extractSequenceFromReceipt(receipt);\n\n        return { receipt, sequence };\n    }\n\n    /**\n     * Cancel recovery as owner\n     */\n    async cancelRecovery(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        signer: ethers.Signer\n    ): Promise<{ receipt: ethers.TransactionReceipt; sequence: bigint }> {\n        const hubWithSigner = this.hubContract.connect(signer) as any;\n\n        const authTuple = {\n            authenticatorData: signature.authenticatorData,\n            clientDataJSON: signature.clientDataJSON,\n            challengeIndex: signature.challengeIndex,\n            typeIndex: signature.typeIndex,\n            r: signature.r,\n            s: signature.s,\n        };\n\n        const messageFee = await this.getMessageFee();\n\n        const tx = await hubWithSigner.cancelRecovery(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            { value: messageFee }\n        );\n\n        const receipt = await tx.wait();\n        const sequence = this._extractSequenceFromReceipt(receipt);\n\n        return { receipt, sequence };\n    }\n\n    /**\n     * Get guardians for an identity\n     */\n    async getGuardians(identityKeyHash: string): Promise<{\n        guardians: string[];\n        threshold: bigint;\n        isConfigured: boolean;\n    }> {\n        const result = await this.hubContract.getGuardians(identityKeyHash);\n        return {\n            guardians: result.guardians,\n            threshold: result.threshold,\n            isConfigured: result.isConfigured,\n        };\n    }\n\n    /**\n     * Get recovery status for an identity\n     */\n    async getRecoveryStatus(identityKeyHash: string): Promise<{\n        isActive: boolean;\n        newOwnerKeyHash: string;\n        initiatedAt: bigint;\n        approvalCount: bigint;\n        threshold: bigint;\n        canExecuteAt: bigint;\n        expiresAt: bigint;\n    }> {\n        const result = await this.hubContract.getRecoveryStatus(identityKeyHash);\n        return {\n            isActive: result.isActive,\n            newOwnerKeyHash: result.newOwnerKeyHash,\n            initiatedAt: result.initiatedAt,\n            approvalCount: result.approvalCount,\n            threshold: result.threshold,\n            canExecuteAt: result.canExecuteAt,\n            expiresAt: result.expiresAt,\n        };\n    }\n\n    /**\n     * Check if a guardian has approved recovery\n     */\n    async hasGuardianApproved(\n        identityKeyHash: string,\n        guardianKeyHash: string\n    ): Promise<boolean> {\n        return this.hubContract.hasGuardianApproved(identityKeyHash, guardianKeyHash);\n    }\n\n    // ========================================================================\n    // Threshold Multisig (ADR-0037)\n    // ========================================================================\n\n    async configureTransactionPolicy(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        threshold: number,\n        protectedActionMask: number,\n        proposalTtl: number,\n        disableSessions: boolean,\n        signer: unknown,\n    ): Promise<{ receipt: unknown }> {\n        const s = signer as ethers.Signer;\n        const hub = this.hubContract.connect(s) as ethers.Contract;\n        const authTuple = this._toAuthTuple(signature);\n        const tx = await hub.configureTransactionPolicy(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            threshold,\n            protectedActionMask,\n            proposalTtl,\n            disableSessions,\n        );\n        const receipt = await tx.wait();\n        return { receipt };\n    }\n\n    async getTransactionPolicy(identityKeyHash: string): Promise<{\n        enabled: boolean;\n        threshold: number;\n        protectedActionMask: number;\n        proposalTtl: number;\n        disableSessions: boolean;\n    }> {\n        const result = await this.hubContract.getTransactionPolicy(identityKeyHash);\n        return {\n            enabled: result.enabled,\n            threshold: Number(result.threshold),\n            protectedActionMask: Number(result.protectedActionMask),\n            proposalTtl: Number(result.proposalTtl),\n            disableSessions: result.disableSessions,\n        };\n    }\n\n    async createTransactionProposal(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        targetChain: number,\n        actionPayload: string,\n        signer: unknown,\n    ): Promise<{ proposalId: string; receipt: unknown; sequence: bigint }> {\n        const s = signer as ethers.Signer;\n        const hub = this.hubContract.connect(s) as ethers.Contract;\n        const authTuple = this._toAuthTuple(signature);\n        const tx = await hub.createTransactionProposal(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            targetChain,\n            actionPayload,\n        );\n        const receipt = await tx.wait();\n\n        // Extract proposalId from logs\n        let proposalId = ethers.ZeroHash;\n        for (const log of receipt.logs) {\n            try {\n                const parsed = this.hubContract.interface.parseLog({\n                    topics: log.topics as string[],\n                    data: log.data,\n                });\n                if (parsed?.name === 'ProposalCreated') {\n                    proposalId = parsed.args.proposalId;\n                    break;\n                }\n            } catch {\n                // Not our event\n            }\n        }\n\n        return { proposalId, receipt, sequence: 0n };\n    }\n\n    async approveTransactionProposal(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        proposalId: string,\n        signer: unknown,\n    ): Promise<{ receipt: unknown; approvalCount: number; thresholdReached: boolean }> {\n        const s = signer as ethers.Signer;\n        const hub = this.hubContract.connect(s) as ethers.Contract;\n        const authTuple = this._toAuthTuple(signature);\n        const tx = await hub.approveTransactionProposal(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            proposalId,\n        );\n        const receipt = await tx.wait();\n\n        // Extract approval info from logs\n        let approvalCount = 0;\n        let thresholdReached = false;\n        for (const log of receipt.logs) {\n            try {\n                const parsed = this.hubContract.interface.parseLog({\n                    topics: log.topics as string[],\n                    data: log.data,\n                });\n                if (parsed?.name === 'ProposalApproved') {\n                    approvalCount = Number(parsed.args.currentApprovals);\n                    thresholdReached = Number(parsed.args.currentApprovals) >= Number(parsed.args.requiredThreshold);\n                    break;\n                }\n            } catch {\n                // Not our event\n            }\n        }\n\n        return { receipt, approvalCount, thresholdReached };\n    }\n\n    async cancelTransactionProposal(\n        signature: WebAuthnSignature,\n        publicKeyX: bigint,\n        publicKeyY: bigint,\n        proposalId: string,\n        signer: unknown,\n    ): Promise<{ receipt: unknown }> {\n        const s = signer as ethers.Signer;\n        const hub = this.hubContract.connect(s) as ethers.Contract;\n        const authTuple = this._toAuthTuple(signature);\n        const tx = await hub.cancelTransactionProposal(\n            authTuple,\n            publicKeyX,\n            publicKeyY,\n            proposalId,\n        );\n        const receipt = await tx.wait();\n        return { receipt };\n    }\n\n    async executeTransactionProposal(\n        proposalId: string,\n        signer: unknown,\n    ): Promise<{ receipt: unknown; sequence: bigint }> {\n        const s = signer as ethers.Signer;\n        const hub = this.hubContract.connect(s) as ethers.Contract;\n        const fee = await this.getMessageFee();\n        const tx = await hub.executeTransactionProposal(proposalId, { value: fee });\n        const receipt = await tx.wait();\n        const sequence = this._extractSequenceFromReceipt(receipt);\n        return { receipt, sequence };\n    }\n\n    async getTransactionProposal(proposalId: string): Promise<{\n        identityKeyHash: string;\n        proposerKeyHash: string;\n        targetChain: number;\n        actionType: number;\n        actionHash: string;\n        createdAt: bigint;\n        expiresAt: bigint;\n        approvalCount: number;\n        requiredThreshold: number;\n        state: number;\n    }> {\n        const result = await this.hubContract.getTransactionProposal(proposalId);\n        return {\n            identityKeyHash: result.identityKeyHash,\n            proposerKeyHash: result.proposerKeyHash,\n            targetChain: Number(result.targetChain),\n            actionType: Number(result.actionType),\n            actionHash: result.actionHash,\n            createdAt: result.createdAt,\n            expiresAt: result.expiresAt,\n            approvalCount: Number(result.approvalCount),\n            requiredThreshold: Number(result.requiredThreshold),\n            state: Number(result.state),\n        };\n    }\n\n    async hasApprovedTransactionProposal(\n        proposalId: string,\n        keyHash: string,\n    ): Promise<boolean> {\n        return this.hubContract.hasApprovedTransactionProposal(proposalId, keyHash);\n    }\n\n    /**\n     * Convert a WebAuthnSignature to the struct tuple expected by the Hub contract\n     */\n    private _toAuthTuple(sig: WebAuthnSignature) {\n        return {\n            authenticatorData: sig.authenticatorData,\n            clientDataJSON: sig.clientDataJSON,\n            challengeIndex: sig.challengeIndex,\n            typeIndex: sig.typeIndex,\n            r: sig.r,\n            s: sig.s,\n        };\n    }\n\n    /**\n     * Helper to extract sequence from transaction receipt\n     */\n    private _extractSequenceFromReceipt(receipt: ethers.TransactionReceipt): bigint {\n        for (const log of receipt.logs) {\n            try {\n                const parsed = this.hubContract.interface.parseLog({\n                    topics: log.topics as string[],\n                    data: log.data,\n                });\n                if (parsed?.name === 'Dispatch') {\n                    return BigInt(parsed.args.sequence);\n                }\n            } catch {\n                // Not a Hub event, skip\n            }\n        }\n        return 0n;\n    }\n}\n"],"mappings":";;;;;;;AAMA,SAAS,cAAc;AAqCvB,IAAM,wBAAwB;AAK9B,IAAM,wBAAwB;AAK9B,IAAM,YAAY;AAAA,EACd;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ;AAMA,IAAM,UAAU;AAAA,EACZ;AAAA,EACA;AAAA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA;AAAA,EAGA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ;AAMA,IAAM,cAAc;AAAA,EAChB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACJ;AASO,IAAM,YAAN,MAAuC;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAA0C;AAAA,EAC1C,uBAAsC;AAAA,EACtC,wBAAuC;AAAA,EACvC,mBAAgE;AAAA,EAExE,YAAY,QAAyB;AACjC,SAAK,SAAS;AAAA,MACV,MAAM,OAAO,QAAQ,aAAa,OAAO,OAAO;AAAA,MAChD,SAAS,OAAO;AAAA,MAChB,iBAAiB,OAAO;AAAA,MACxB,QAAQ,OAAO;AAAA,MACf,aAAa,OAAO,eAAe;AAAA,MACnC,OAAO;AAAA,MACP,WAAW;AAAA,QACP,KAAK,OAAO;AAAA,QACZ,cAAc,OAAO;AAAA,QACrB,qBAAqB,OAAO;AAAA,QAC5B,oBAAoB,OAAO;AAAA,QAC3B,aAAa,OAAO;AAAA,MACxB;AAAA,IACJ;AAEA,SAAK,WAAW,IAAI,OAAO,gBAAgB,OAAO,MAAM;AACxD,SAAK,cAAc,IAAI,OAAO;AAAA,MAC1B,OAAO;AAAA,MACP;AAAA,MACA,KAAK;AAAA,IACT;AAGA,QAAI,OAAO,cAAc;AACrB,WAAK,kBAAkB,IAAI,OAAO;AAAA,QAC9B,OAAO;AAAA,QACP;AAAA,QACA,KAAK;AAAA,MACT;AAAA,IACJ;AAGA,QAAI,OAAO,qBAAqB;AAC5B,WAAK,uBAAuB,OAAO;AAAA,IACvC;AAAA,EACJ;AAAA,EAEA,YAAyB;AACrB,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,MAAM,SAAS,aAAsC;AACjD,UAAM,QAAQ,MAAM,KAAK,YAAY,WAAW,WAAW;AAC3D,WAAO,OAAO,MAAM,SAAS,CAAC;AAAA,EAClC;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aAAa,aAIhB;AACC,QAAI;AACA,YAAM,SAAS,MAAM,KAAK,YAAY,aAAa,WAAW;AAC9D,aAAO;AAAA,QACH,SAAS,OAAO,CAAC;AAAA,QACjB,OAAO,OAAO,OAAO,CAAC,EAAE,SAAS,CAAC;AAAA,QAClC,gBAAgB,OAAO,CAAC;AAAA,MAC5B;AAAA,IACJ,SAAS,OAAO;AAEZ,YAAM,QAAQ,MAAM,KAAK,SAAS,WAAW;AAC7C,aAAO;AAAA,QACH,SAAS;AAAA,QACT;AAAA,QACA,gBAAgB,OAAO;AAAA,MAC3B;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,sBAAsB,aAAsC;AAC9D,QAAI;AACA,aAAO,MAAM,KAAK,YAAY,sBAAsB,WAAW;AAAA,IACnE,SAAS,OAAO;AAEZ,aAAO,OAAO;AAAA,IAClB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,gBACF,QACA,QACkC;AAClC,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,OAAO,UAAU;AAAA,MACpC,gBAAgB,OAAO,UAAU;AAAA,MACjC,gBAAgB,OAAO,UAAU;AAAA,MACjC,WAAW,OAAO,UAAU;AAAA,MAC5B,GAAG,OAAO,UAAU;AAAA,MACpB,GAAG,OAAO,UAAU;AAAA,IACxB;AAEA,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACX;AAEA,WAAO,MAAM,GAAG,KAAK;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBACF,aACA,gBACyD;AACzD,UAAM,SAAS,MAAM,KAAK,YAAY,gBAAgB,aAAa,cAAc;AAEjF,WAAO;AAAA,MACH,QAAQ,OAAO,CAAC;AAAA,MAChB,QAAQ,OAAO,OAAO,CAAC,CAAC;AAAA,MACxB,UAAU,OAAO,OAAO,CAAC,EAAE,SAAS,CAAC;AAAA,MACrC,cAAc,OAAO,OAAO,CAAC,CAAC;AAAA,IAClC;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,cACF,QACA,QACkC;AAClC,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,OAAO,UAAU;AAAA,MACpC,gBAAgB,OAAO,UAAU;AAAA,MACjC,gBAAgB,OAAO,UAAU;AAAA,MACjC,WAAW,OAAO,UAAU;AAAA,MAC5B,GAAG,OAAO,UAAU;AAAA,MACpB,GAAG,OAAO,UAAU;AAAA,IACxB;AAEA,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACX;AAEA,WAAO,MAAM,GAAG,KAAK;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,gBAAgB,aAAqE;AACvF,UAAM,WAAW,MAAM,KAAK,YAAY,gBAAgB,WAAW;AAEnE,WAAO,SAAS,IAAI,CAAC,OAAY;AAAA,MAC7B,gBAAgB,EAAE;AAAA,MAClB,QAAQ,OAAO,EAAE,MAAM;AAAA,MACvB,UAAU,OAAO,EAAE,SAAS,SAAS,CAAC;AAAA,MACtC,SAAS,EAAE;AAAA,IACf,EAAE;AAAA,EACN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,oBAAoB,aAAsC;AAC5D,UAAM,QAAQ,MAAM,KAAK,YAAY,oBAAoB,WAAW;AACpE,WAAO,OAAO,KAAK;AAAA,EACvB;AAAA,EAEA,MAAM,gBAAiC;AAEnC,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,KAAK,oBAAoB,KAAK,iBAAiB,YAAY,KAAK;AAChE,aAAO,KAAK,iBAAiB;AAAA,IACjC;AAIA,QAAI,kBACA,KAAK,OAAO,UAAU,sBAAsB,KAAK;AACrD,QAAI,CAAC,iBAAiB;AAClB,wBAAkB,MAAM,KAAK,YAAY,SAAS;AAClD,WAAK,wBAAwB;AAAA,IACjC;AAEA,UAAM,WAAW,IAAI,OAAO;AAAA,MACxB;AAAA,MACA,CAAC,8CAA8C;AAAA,MAC/C,KAAK;AAAA,IACT;AACA,UAAM,MAAM,MAAM,SAAS,WAAW;AACtC,UAAM,QAAQ,OAAO,IAAI,SAAS,CAAC;AACnC,SAAK,mBAAmB,EAAE,OAAO,WAAW,MAAM,IAAO;AACzD,WAAO;AAAA,EACX;AAAA,EAEA,MAAM,qBAAqB,QAAyC;AAChE,WAAO;AAAA,MACH,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,oBAAoB,QAAwC;AAC9D,WAAO;AAAA,MACH,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,mBAAmB,QAAuC;AAC5D,WAAO;AAAA,MACH,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,SACF,WACA,YACA,YACA,aACA,eACA,OACA,QACuB;AACvB,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,iBAAiB;AAAA,MACnB,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAG9B,UAAM,gBAAgB,QAAQ,KAAK,KAAK,CAAC,QAAa;AAClD,UAAI;AACA,cAAM,SAAS,cAAc,UAAU,SAAS,GAAG;AACnD,eAAO,QAAQ,SAAS;AAAA,MAC5B,QAAQ;AACJ,eAAO;AAAA,MACX;AAAA,IACJ,CAAC;AAED,QAAI,WAAW;AACf,QAAI,eAAe;AACf,YAAM,SAAS,cAAc,UAAU,SAAS,aAAa;AAC7D,iBAAW,OAAO,QAAQ,MAAM,UAAU,SAAS,KAAK,GAAG;AAAA,IAC/D;AAEA,UAAM,UAAU,OAAO;AAAA,MACnB,OAAO,SAAS,gBAAgB,EAAE;AAAA,QAC9B,CAAC,WAAW,SAAS;AAAA,QACrB,CAAC,YAAY,UAAU;AAAA,MAC3B;AAAA,IACJ;AAEA,WAAO;AAAA,MACH,iBAAiB,QAAQ;AAAA,MACzB;AAAA,MACA,aAAa;AAAA,MACb;AAAA,MACA,aAAa,QAAQ;AAAA,IACzB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBACF,WACA,YACA,YACA,aACA,eACA,OACA,YACuB;AAGvB,UAAM,UAAU,OAAO;AAAA,MACnB,OAAO,SAAS,gBAAgB,EAAE;AAAA,QAC9B,CAAC,WAAW,SAAS;AAAA,QACrB,CAAC,YAAY,UAAU;AAAA,MAC3B;AAAA,IACJ;AAGA,UAAM,UAAU,OAAO;AAAA,MACnB,OAAO,SAAS,gBAAgB,EAAE;AAAA,QAC9B,CAAC,WAAW,UAAU,SAAS,SAAS;AAAA,QACxC,CAAC,SAAS,aAAa,eAAe,KAAK;AAAA,MAC/C;AAAA,IACJ;AAGA,UAAM,UAAU;AAAA,MACZ,aAAa;AAAA,MACb,GAAG,OAAO,UAAU,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AAAA,MACnD,GAAG,OAAO,UAAU,EAAE,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AAAA,MACnD,YAAY,OAAO,WAAW,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AAAA,MAC3D,YAAY,OAAO,WAAW,SAAS,EAAE,EAAE,SAAS,IAAI,GAAG;AAAA,MAC3D;AAAA,MACA;AAAA,MACA,OAAO,OAAO,KAAK;AAAA,IACvB;AASA,UAAM,eAAe;AACrB,UAAM,cAAc;AACpB,UAAM,QAAQ,CAAC,OACX,IAAI,QAAc,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AAE1D,QAAI;AACJ,QAAI;AACJ,aAAS,UAAU,GAAG,WAAW,cAAc,WAAW;AACtD,UAAI;AACA,mBAAW,MAAM,MAAM,GAAG,UAAU,kBAAkB;AAAA,UAClD,QAAQ;AAAA,UACR,SAAS;AAAA,YACL,gBAAgB;AAAA,UACpB;AAAA,UACA,MAAM,KAAK,UAAU,OAAO;AAAA,QAChC,CAAC;AAED,cAAM,YACF,SAAS,UAAU,OACnB,SAAS,WAAW,OACpB,SAAS,WAAW;AAExB,YAAI,CAAC,WAAW;AACZ;AAAA,QACJ;AAEA,YAAI,YAAY,aAAc;AAE9B,cAAM,aAAa,SAAS,QAAQ,IAAI,aAAa;AACrD,cAAM,gBAAgB,aAAa,SAAS,YAAY,EAAE,IAAI,MAAO;AACrE,cAAM,UACF,gBAAgB,IACV,gBACA,cAAc,MAAM,UAAU,KAAK,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AAC3E,cAAM,MAAM,OAAO;AAAA,MACvB,SAAS,KAAK;AACV,oBAAY;AACZ,YAAI,YAAY,aAAc;AAC9B,cAAM,UAAU,cAAc,MAAM,UAAU,KAAK,KAAK,MAAM,KAAK,OAAO,IAAI,GAAG;AACjF,cAAM,MAAM,OAAO;AAAA,MACvB;AAAA,IACJ;AAEA,QAAI,CAAC,UAAU;AACX,YAAM,IAAI;AAAA,QACN,mCAAmC,YAAY,cAC3C,qBAAqB,QAAQ,UAAU,UAAU,OAAO,SAAS,CACrE;AAAA,MACJ;AAAA,IACJ;AAEA,QAAI,CAAC,SAAS,IAAI;AACd,YAAM,QAAQ,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO,EAAE,OAAO,SAAU,WAAW,EAAE;AACjF,YAAM,IAAI,MAAM,8BAA8B,MAAM,SAAS,SAAS,UAAU,EAAE;AAAA,IACtF;AAEA,UAAM,SAAS,MAAM,SAAS,KAAK;AAEnC,QAAI,CAAC,OAAO,SAAS;AACjB,YAAM,IAAI,MAAM,8BAA8B,OAAO,KAAK,EAAE;AAAA,IAChE;AAEA,WAAO;AAAA,MACH,iBAAiB,OAAO;AAAA,MACxB,UAAU,OAAO,OAAO,YAAY,GAAG;AAAA,MACvC,aAAa;AAAA,MACb;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,MAAM,gBAAgB,aAA6C;AAC/D,QAAI;AAEA,UAAI,KAAK,iBAAiB;AACtB,cAAMA,WAAU,MAAM,KAAK,gBAAgB,SAAS,WAAW;AAC/D,YAAIA,aAAY,OAAO,aAAa;AAChC,iBAAOA;AAAA,QACX;AAAA,MACJ;AAGA,YAAM,UAAU,MAAM,KAAK,YAAY,gBAAgB,WAAW;AAClE,UAAI,YAAY,OAAO,aAAa;AAChC,eAAO;AAAA,MACX;AACA,aAAO;AAAA,IACX,SAAS,OAAO;AACZ,cAAQ,MAAM,gCAAgC,KAAK;AACnD,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,oBAAoB,aAA6B;AAC7C,UAAM,iBAAiB,KAAK,kBAAkB;AAC9C,UAAM,wBAAwB,KAAK,yBAAyB;AAE5D,QAAI,CAAC,kBAAkB,CAAC,uBAAuB;AAC3C,YAAM,IAAI,MAAM,uEAAuE;AAAA,IAC3F;AAGA,UAAM,OAAO,OAAO;AAAA,MAChB,OAAO;AAAA,QACH,CAAC,WAAW,SAAS;AAAA,QACrB,CAAC,gBAAgB,WAAW;AAAA,MAChC;AAAA,IACJ;AAGA,UAAM,WAAW,KAAK,mBAAmB,qBAAqB;AAC9D,UAAM,eAAe,OAAO,UAAU,QAAQ;AAI9C,UAAM,cAAc,OAAO;AAAA,MACvB,CAAC,UAAU,WAAW,WAAW,SAAS;AAAA,MAC1C,CAAC,QAAQ,gBAAgB,MAAM,YAAY;AAAA,IAC/C;AAEA,UAAM,OAAO,OAAO,UAAU,WAAW;AAEzC,WAAO,OAAO,WAAW,OAAO,KAAK,MAAM,EAAE,CAAC;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAmB,uBAAuC;AAC9D,UAAM,OAAO,sBAAsB,YAAY,EAAE,QAAQ,MAAM,EAAE;AACjE,WAAO,wBAAwB,OAAO;AAAA,EAC1C;AAAA,EAEA,MAAM,YAAY,aAAuC;AACrD,QAAI;AAEA,UAAI,KAAK,iBAAiB;AACtB,eAAO,MAAM,KAAK,gBAAgB,YAAY,WAAW;AAAA,MAC7D;AAEA,UAAI,KAAK,YAAY,aAAa;AAC9B,YAAI;AACA,iBAAO,MAAM,KAAK,YAAY,YAAY,WAAW;AAAA,QACzD,QAAQ;AAEJ,iBAAO;AAAA,QACX;AAAA,MACJ;AACA,aAAO;AAAA,IACX,QAAQ;AAEJ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,MAAM,YAAY,aAAqB,QAAqD;AAExF,UAAM,SAAS,MAAM,KAAK,YAAY,WAAW;AACjD,QAAI,QAAQ;AACR,YAAM,UAAU,MAAM,KAAK,gBAAgB,WAAW;AACtD,UAAI,SAAS;AACT,eAAO;AAAA,UACH;AAAA,UACA,iBAAiB;AAAA,UACjB,aAAa;AAAA,UACb,SAAS;AAAA,UACT,gBAAgB;AAAA,QACpB;AAAA,MACJ;AAAA,IACJ;AAGA,QAAI;AAEJ,QAAI,KAAK,iBAAiB;AACtB,YAAM,oBAAoB,KAAK,gBAAgB,QAAQ,MAAM;AAC7D,WAAK,MAAM,kBAAkB,YAAY,WAAW;AAAA,IACxD,OAAO;AACH,YAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AACrD,WAAK,MAAM,cAAc,YAAY,WAAW;AAAA,IACpD;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,QAAI,CAAC,SAAS;AACV,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACrD;AAEA,UAAM,eAAe,MAAM,KAAK,gBAAgB,WAAW;AAC3D,QAAI,CAAC,cAAc;AACf,YAAM,IAAI,MAAM,2DAA2D;AAAA,IAC/E;AAEA,WAAO;AAAA,MACH,SAAS;AAAA,MACT,iBAAiB,QAAQ;AAAA,MACzB,aAAa,QAAQ;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,gBAAgB;AAAA,IACpB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,qBACF,aACA,mBACA,QAC4B;AAE5B,UAAM,SAAS,MAAM,KAAK,YAAY,WAAW;AACjD,QAAI,QAAQ;AACR,YAAM,UAAU,MAAM,KAAK,gBAAgB,WAAW;AACtD,UAAI,SAAS;AACT,eAAO;AAAA,UACH;AAAA,UACA,iBAAiB;AAAA,UACjB,aAAa;AAAA,UACb,SAAS;AAAA,UACT,gBAAgB;AAAA,QACpB;AAAA,MACJ;AAAA,IACJ;AAGA,UAAM,WAAW,SACX,IAAI,OAAO,gBAAgB,MAAM,IACjC,KAAK;AACX,UAAM,gBAAgB,IAAI,OAAO,OAAO,mBAAmB,QAAQ;AAGnE,UAAM,iBAAiB,MAAM,SAAS,WAAW,cAAc,OAAO;AACtE,UAAM,eAAe,MAAM,KAAK,yBAAyB,WAAW;AACpE,UAAM,UAAU,MAAM,SAAS,WAAW;AAC1C,UAAM,gBAAgB,gBAAgB,QAAQ,YAAY;AAE1D,QAAI,iBAAiB,eAAe;AAChC,YAAM,IAAI;AAAA,QACN,mDACY,OAAO,YAAY,cAAc,CAAC,yBAC3B,OAAO,YAAY,aAAa,CAAC;AAAA,MACxD;AAAA,IACJ;AAGA,QAAI;AAEJ,QAAI,KAAK,iBAAiB;AACtB,YAAM,qBAAqB,KAAK,gBAAgB,QAAQ,aAAa;AACrE,WAAK,MAAM,mBAAmB,YAAY,WAAW;AAAA,IACzD,OAAO;AACH,YAAM,iBAAiB,KAAK,YAAY,QAAQ,aAAa;AAC7D,WAAK,MAAM,eAAe,YAAY,WAAW;AAAA,IACrD;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,QAAI,CAAC,SAAS;AACV,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACrD;AAEA,UAAM,eAAe,MAAM,KAAK,gBAAgB,WAAW;AAC3D,QAAI,CAAC,cAAc;AACf,YAAM,IAAI,MAAM,2DAA2D;AAAA,IAC/E;AAEA,WAAO;AAAA,MACH,SAAS;AAAA,MACT,iBAAiB,QAAQ;AAAA,MACzB,aAAa,QAAQ;AAAA,MACrB,SAAS,QAAQ;AAAA,MACjB,gBAAgB;AAAA,MAChB,aAAa,cAAc;AAAA,IAC/B;AAAA,EACJ;AAAA,EAEA,MAAM,yBAAyB,aAAsC;AACjE,QAAI;AACA,UAAI,KAAK,iBAAiB;AACtB,eAAO,MAAM,KAAK,gBAAgB,YAAY,YAAY,WAAW;AAAA,MACzE;AACA,aAAO,MAAM,KAAK,YAAY,YAAY,YAAY,WAAW;AAAA,IACrE,SAAS,OAAO;AAEZ,cAAQ,KAAK,6CAA6C,KAAK;AAC/D,aAAO;AAAA,IACX;AAAA,EACJ;AAAA,EAEA,oBAAwC;AACpC,WAAO,KAAK,OAAO,UAAU;AAAA,EACjC;AAAA,EAEA,2BAA+C;AAC3C,WAAO,KAAK,OAAO,UAAU,uBAAuB,KAAK,wBAAwB;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,6BAAqD;AACvD,QAAI,KAAK,sBAAsB;AAC3B,aAAO,KAAK;AAAA,IAChB;AAEA,QAAI,CAAC,KAAK,iBAAiB;AACvB,aAAO;AAAA,IACX;AAEA,QAAI;AACA,WAAK,uBAAuB,MAAM,KAAK,gBAAgB,eAAe;AACtE,aAAO,KAAK;AAAA,IAChB,SAAS,OAAO;AACZ,cAAQ,MAAM,0CAA0C,KAAK;AAC7D,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,cAAsC;AAClC,WAAO,KAAK;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,iBAAiB,SAAkC;AACrD,WAAO,MAAM,KAAK,SAAS,WAAW,OAAO;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,gBAAgB,cAAsB,cAAuC;AAC/E,UAAM,WAAW,IAAI,OAAO,SAAS,cAAc,WAAW,KAAK,QAAQ;AAC3E,WAAO,MAAM,SAAS,UAAU,YAAY;AAAA,EAChD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBACF,cACA,cACA,gBACe;AACf,UAAM,WAAW,IAAI,OAAO,SAAS,cAAc,WAAW,KAAK,QAAQ;AAC3E,WAAO,MAAM,SAAS,UAAU,cAAc,cAAc;AAAA,EAChE;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBACF,WACA,YACA,YACA,aACA,eACA,OACe;AACf,UAAM,iBAAiB;AAAA,MACnB,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,QAAI;AACA,YAAM,cAAc,MAAM,KAAK,YAAY,SAAS;AAAA,QAChD;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,EAAE,OAAO,WAAW;AAAA,MACxB;AACA,aAAO;AAAA,IACX,SAAS,OAAO;AACZ,cAAQ,KAAK,yCAAyC,KAAK;AAC3D,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cAA+B;AACjC,UAAM,UAAU,MAAM,KAAK,SAAS,WAAW;AAC/C,WAAO,QAAQ,YAAY,QAAQ,gBAAgB;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAkC;AACpC,WAAO,MAAM,KAAK,SAAS,eAAe;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,sBAAsB,MAAyD;AACjF,WAAO,MAAM,KAAK,SAAS,sBAAsB,IAAI;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,mBACF,MACA,gBAAwB,GACiB;AACzC,WAAO,MAAM,KAAK,SAAS,mBAAmB,MAAM,aAAa;AAAA,EACrE;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,MAAM,kBAAkB,SAAkC;AACtD,QAAI;AACA,aAAO,MAAM,KAAK,YAAY,kBAAkB,OAAO;AAAA,IAC3D,SAAS,OAAO;AACZ,aAAO,OAAO;AAAA,IAClB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,kBAAkB,UAAqC;AACzD,QAAI;AACA,aAAO,MAAM,KAAK,YAAY,kBAAkB,QAAQ;AAAA,IAC5D,SAAS,OAAO;AACZ,aAAO,CAAC;AAAA,IACZ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,sBAAsB,UAAmC;AAC3D,QAAI;AACA,YAAM,QAAQ,MAAM,KAAK,YAAY,sBAAsB,QAAQ;AACnE,aAAO,OAAO,KAAK;AAAA,IACvB,SAAS,OAAO;AACZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,wBAAwB,UAAkB,SAAmC;AAC/E,QAAI;AACA,aAAO,MAAM,KAAK,YAAY,wBAAwB,UAAU,OAAO;AAAA,IAC3E,SAAS,OAAO;AACZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,kBAAkB,SAAmC;AACvD,QAAI;AACA,aAAO,MAAM,KAAK,YAAY,eAAe,OAAO;AAAA,IACxD,SAAS,OAAO;AACZ,aAAO;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,iBAAiB,SAAkE;AACrF,QAAI;AACA,YAAM,SAAS,MAAM,KAAK,YAAY,iBAAiB,OAAO;AAC9D,aAAO;AAAA,QACH,UAAU,OAAO,CAAC;AAAA,QAClB,UAAU,OAAO,OAAO,CAAC,CAAC;AAAA,QAC1B,SAAS,OAAO,OAAO,CAAC,CAAC;AAAA,QACzB,QAAQ,OAAO,CAAC;AAAA,MACpB;AAAA,IACJ,SAAS,OAAO;AAEZ,aAAO;AAAA,QACH,UAAU,OAAO;AAAA,QACjB,UAAU;AAAA,QACV,SAAS;AAAA,QACT,QAAQ;AAAA,MACZ;AAAA,IACJ;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYA,MAAM,iBACF,WACA,YACA,YACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAG9B,UAAM,UAAU,OAAO;AAAA,MACnB,OAAO,eAAe,CAAC,WAAW,SAAS,GAAG,CAAC,YAAY,UAAU,CAAC;AAAA,IAC1E;AAEA,WAAO,EAAE,SAAS,UAAU,QAAQ;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,aACF,WACA,YACA,YACA,eACA,eACA,OACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAG9B,QAAI,WAAW;AACf,eAAW,OAAO,QAAQ,MAAM;AAC5B,UAAI;AACA,cAAM,SAAS,KAAK,YAAY,UAAU,SAAS;AAAA,UAC/C,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,QACd,CAAC;AACD,YAAI,QAAQ,SAAS,cAAc;AAC/B,qBAAW,OAAO,OAAO,KAAK,CAAC,CAAC;AAChC;AAAA,QACJ;AAAA,MACJ,QAAQ;AAAA,MAER;AAAA,IACJ;AAEA,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAM,UACF,WACA,YACA,YACA,aACA,OACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAG9B,QAAI,WAAW;AACf,eAAW,OAAO,QAAQ,MAAM;AAC5B,UAAI;AACA,cAAM,SAAS,KAAK,YAAY,UAAU,SAAS;AAAA,UAC/C,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,QACd,CAAC;AACD,YAAI,QAAQ,SAAS,cAAc;AAC/B,qBAAW,OAAO,OAAO,KAAK,CAAC,CAAC;AAChC;AAAA,QACJ;AAAA,MACJ,QAAQ;AAAA,MAER;AAAA,IACJ;AAEA,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAeA,MAAM,eACF,WACA,YACA,YACA,WACA,WACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,UAAM,WAAW,KAAK,4BAA4B,OAAO;AAEzD,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YACF,WACA,YACA,YACA,iBACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,UAAM,WAAW,KAAK,4BAA4B,OAAO;AAEzD,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eACF,WACA,YACA,YACA,iBACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,UAAM,WAAW,KAAK,4BAA4B,OAAO;AAEzD,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBACF,WACA,YACA,YACA,mBACA,iBACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,UAAM,WAAW,KAAK,4BAA4B,OAAO;AAEzD,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,gBACF,WACA,YACA,YACA,mBACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,UAAM,WAAW,KAAK,4BAA4B,OAAO;AAEzD,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,gBACF,mBACA,eACA,eACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,UAAM,WAAW,KAAK,4BAA4B,OAAO;AAEzD,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,eACF,WACA,YACA,YACA,QACiE;AACjE,UAAM,gBAAgB,KAAK,YAAY,QAAQ,MAAM;AAErD,UAAM,YAAY;AAAA,MACd,mBAAmB,UAAU;AAAA,MAC7B,gBAAgB,UAAU;AAAA,MAC1B,gBAAgB,UAAU;AAAA,MAC1B,WAAW,UAAU;AAAA,MACrB,GAAG,UAAU;AAAA,MACb,GAAG,UAAU;AAAA,IACjB;AAEA,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,KAAK,MAAM,cAAc;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA,EAAE,OAAO,WAAW;AAAA,IACxB;AAEA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,UAAM,WAAW,KAAK,4BAA4B,OAAO;AAEzD,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,iBAIhB;AACC,UAAM,SAAS,MAAM,KAAK,YAAY,aAAa,eAAe;AAClE,WAAO;AAAA,MACH,WAAW,OAAO;AAAA,MAClB,WAAW,OAAO;AAAA,MAClB,cAAc,OAAO;AAAA,IACzB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBAAkB,iBAQrB;AACC,UAAM,SAAS,MAAM,KAAK,YAAY,kBAAkB,eAAe;AACvE,WAAO;AAAA,MACH,UAAU,OAAO;AAAA,MACjB,iBAAiB,OAAO;AAAA,MACxB,aAAa,OAAO;AAAA,MACpB,eAAe,OAAO;AAAA,MACtB,WAAW,OAAO;AAAA,MAClB,cAAc,OAAO;AAAA,MACrB,WAAW,OAAO;AAAA,IACtB;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,oBACF,iBACA,iBACgB;AAChB,WAAO,KAAK,YAAY,oBAAoB,iBAAiB,eAAe;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,2BACF,WACA,YACA,YACA,WACA,qBACA,aACA,iBACA,QAC6B;AAC7B,UAAM,IAAI;AACV,UAAM,MAAM,KAAK,YAAY,QAAQ,CAAC;AACtC,UAAM,YAAY,KAAK,aAAa,SAAS;AAC7C,UAAM,KAAK,MAAM,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AACA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,WAAO,EAAE,QAAQ;AAAA,EACrB;AAAA,EAEA,MAAM,qBAAqB,iBAMxB;AACC,UAAM,SAAS,MAAM,KAAK,YAAY,qBAAqB,eAAe;AAC1E,WAAO;AAAA,MACH,SAAS,OAAO;AAAA,MAChB,WAAW,OAAO,OAAO,SAAS;AAAA,MAClC,qBAAqB,OAAO,OAAO,mBAAmB;AAAA,MACtD,aAAa,OAAO,OAAO,WAAW;AAAA,MACtC,iBAAiB,OAAO;AAAA,IAC5B;AAAA,EACJ;AAAA,EAEA,MAAM,0BACF,WACA,YACA,YACA,aACA,eACA,QACmE;AACnE,UAAM,IAAI;AACV,UAAM,MAAM,KAAK,YAAY,QAAQ,CAAC;AACtC,UAAM,YAAY,KAAK,aAAa,SAAS;AAC7C,UAAM,KAAK,MAAM,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AACA,UAAM,UAAU,MAAM,GAAG,KAAK;AAG9B,QAAI,aAAa,OAAO;AACxB,eAAW,OAAO,QAAQ,MAAM;AAC5B,UAAI;AACA,cAAM,SAAS,KAAK,YAAY,UAAU,SAAS;AAAA,UAC/C,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,QACd,CAAC;AACD,YAAI,QAAQ,SAAS,mBAAmB;AACpC,uBAAa,OAAO,KAAK;AACzB;AAAA,QACJ;AAAA,MACJ,QAAQ;AAAA,MAER;AAAA,IACJ;AAEA,WAAO,EAAE,YAAY,SAAS,UAAU,GAAG;AAAA,EAC/C;AAAA,EAEA,MAAM,2BACF,WACA,YACA,YACA,YACA,QAC+E;AAC/E,UAAM,IAAI;AACV,UAAM,MAAM,KAAK,YAAY,QAAQ,CAAC;AACtC,UAAM,YAAY,KAAK,aAAa,SAAS;AAC7C,UAAM,KAAK,MAAM,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AACA,UAAM,UAAU,MAAM,GAAG,KAAK;AAG9B,QAAI,gBAAgB;AACpB,QAAI,mBAAmB;AACvB,eAAW,OAAO,QAAQ,MAAM;AAC5B,UAAI;AACA,cAAM,SAAS,KAAK,YAAY,UAAU,SAAS;AAAA,UAC/C,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,QACd,CAAC;AACD,YAAI,QAAQ,SAAS,oBAAoB;AACrC,0BAAgB,OAAO,OAAO,KAAK,gBAAgB;AACnD,6BAAmB,OAAO,OAAO,KAAK,gBAAgB,KAAK,OAAO,OAAO,KAAK,iBAAiB;AAC/F;AAAA,QACJ;AAAA,MACJ,QAAQ;AAAA,MAER;AAAA,IACJ;AAEA,WAAO,EAAE,SAAS,eAAe,iBAAiB;AAAA,EACtD;AAAA,EAEA,MAAM,0BACF,WACA,YACA,YACA,YACA,QAC6B;AAC7B,UAAM,IAAI;AACV,UAAM,MAAM,KAAK,YAAY,QAAQ,CAAC;AACtC,UAAM,YAAY,KAAK,aAAa,SAAS;AAC7C,UAAM,KAAK,MAAM,IAAI;AAAA,MACjB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AACA,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,WAAO,EAAE,QAAQ;AAAA,EACrB;AAAA,EAEA,MAAM,2BACF,YACA,QAC+C;AAC/C,UAAM,IAAI;AACV,UAAM,MAAM,KAAK,YAAY,QAAQ,CAAC;AACtC,UAAM,MAAM,MAAM,KAAK,cAAc;AACrC,UAAM,KAAK,MAAM,IAAI,2BAA2B,YAAY,EAAE,OAAO,IAAI,CAAC;AAC1E,UAAM,UAAU,MAAM,GAAG,KAAK;AAC9B,UAAM,WAAW,KAAK,4BAA4B,OAAO;AACzD,WAAO,EAAE,SAAS,SAAS;AAAA,EAC/B;AAAA,EAEA,MAAM,uBAAuB,YAW1B;AACC,UAAM,SAAS,MAAM,KAAK,YAAY,uBAAuB,UAAU;AACvE,WAAO;AAAA,MACH,iBAAiB,OAAO;AAAA,MACxB,iBAAiB,OAAO;AAAA,MACxB,aAAa,OAAO,OAAO,WAAW;AAAA,MACtC,YAAY,OAAO,OAAO,UAAU;AAAA,MACpC,YAAY,OAAO;AAAA,MACnB,WAAW,OAAO;AAAA,MAClB,WAAW,OAAO;AAAA,MAClB,eAAe,OAAO,OAAO,aAAa;AAAA,MAC1C,mBAAmB,OAAO,OAAO,iBAAiB;AAAA,MAClD,OAAO,OAAO,OAAO,KAAK;AAAA,IAC9B;AAAA,EACJ;AAAA,EAEA,MAAM,+BACF,YACA,SACgB;AAChB,WAAO,KAAK,YAAY,+BAA+B,YAAY,OAAO;AAAA,EAC9E;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAa,KAAwB;AACzC,WAAO;AAAA,MACH,mBAAmB,IAAI;AAAA,MACvB,gBAAgB,IAAI;AAAA,MACpB,gBAAgB,IAAI;AAAA,MACpB,WAAW,IAAI;AAAA,MACf,GAAG,IAAI;AAAA,MACP,GAAG,IAAI;AAAA,IACX;AAAA,EACJ;AAAA;AAAA;AAAA;AAAA,EAKQ,4BAA4B,SAA4C;AAC5E,eAAW,OAAO,QAAQ,MAAM;AAC5B,UAAI;AACA,cAAM,SAAS,KAAK,YAAY,UAAU,SAAS;AAAA,UAC/C,QAAQ,IAAI;AAAA,UACZ,MAAM,IAAI;AAAA,QACd,CAAC;AACD,YAAI,QAAQ,SAAS,YAAY;AAC7B,iBAAO,OAAO,OAAO,KAAK,QAAQ;AAAA,QACtC;AAAA,MACJ,QAAQ;AAAA,MAER;AAAA,IACJ;AACA,WAAO;AAAA,EACX;AACJ;","names":["address"]}

package/dist/{index-CySMITQ9.d.mts → index-CKKUV4J7.d.mts}

@@ -1,5 +1,5 @@
-import { E as EVMClient } from './EVMClient-DtqvdfUP.mjs';
-import { b as SessionConfig, d as SessionManagerConfig, a as SessionKey, A as ActionParams, c as SessionSignature, g as SessionSignedAction, f as SessionEventCallback } from './types-DWx-5jmz.mjs';
+import { E as EVMClient } from './EVMClient-Bmy9czkE.mjs';
+import { b as SessionConfig, d as SessionManagerConfig, a as SessionKey, A as ActionParams, c as SessionSignature, g as SessionSignedAction, f as SessionEventCallback } from './types-C564CfsE.mjs';
 import { PasskeyCredential } from './passkey.mjs';
 import { RegisterSessionParams, RevokeSessionParams } from './types.mjs';
 import { ethers } from 'ethers';

package/dist/index.d.mts

@@ -5,15 +5,15 @@ export { PasskeyManagerConfig, VERIDEX_RP_ID, detectRpId, supportsRelatedOrigins
 import { ethers } from 'ethers';
 import { BridgeParams as BridgeParams$1, ChainConfig as ChainConfig$1, SessionKey } from './types.mjs';
 export { AddGuardianResult, ApproveRecoveryResult, CancelRecoveryResult, ExecuteRecoveryResult, ExecutionPath, GuardianConfig, InitiateRecoveryResult, QueryProof, QuerySubmissionResult, RecoveryStatus, RegisterSessionParams, RemoveGuardianResult, RevokeSessionParams, SessionValidationResult, SetupGuardiansResult } from './types.mjs';
-export { E as EVMHubClientAdapter, H as HubClient, S as SessionManager } from './index-CySMITQ9.mjs';
-export { E as EVMClient, a as EVMClientConfig } from './EVMClient-DtqvdfUP.mjs';
+export { E as EVMHubClientAdapter, H as HubClient, S as SessionManager } from './index-CKKUV4J7.mjs';
+export { E as EVMClient, a as EVMClientConfig } from './EVMClient-Bmy9czkE.mjs';
 export { SolanaClient, SolanaClientConfig } from './chains/solana/index.mjs';
 export { AptosClient, AptosClientConfig } from './chains/aptos/index.mjs';
 export { SuiClient, SuiClientConfig } from './chains/sui/index.mjs';
 export { StarknetClient, StarknetClientConfig } from './chains/starknet/index.mjs';
 export { FtPostCondition, NftPostCondition, PostConditionComparison, STACKS_ACTION_TYPES, StacksClient, StacksClientConfig, PostCondition as StacksPostCondition, StxPostCondition, buildSbtcWithdrawalPostConditions, buildExecutePostConditions as buildStacksExecutePostConditions, buildStxDepositPostConditions, buildStxWithdrawalPostConditions, getContractPrincipal as getStacksContractPrincipal, getStacksExplorerAddressUrl, getStacksExplorerTxUrl, getNetworkFromAddress as getStacksNetworkFromAddress, isContractPrincipal as isStacksContractPrincipal, isValidContractName as isValidStacksContractName, isValidStacksPrincipal, isValidStandardPrincipal as isValidStacksStandardPrincipal, parseContractPrincipal as parseStacksContractPrincipal, buildExecuteHash as stacksBuildExecuteHash, buildRegistrationHash as stacksBuildRegistrationHash, buildRevocationHash as stacksBuildRevocationHash, buildSessionRegistrationHash as stacksBuildSessionRegistrationHash, buildWithdrawalHash as stacksBuildWithdrawalHash, compressPublicKey as stacksCompressPublicKey, computeKeyHash as stacksComputeKeyHash, computeKeyHashFromCoords as stacksComputeKeyHashFromCoords, derToCompactSignature as stacksDerToCompactSignature, rsToCompactSignature as stacksRsToCompactSignature, validatePostConditions as validateStacksPostConditions } from './chains/stacks/index.mjs';
-import { S as SessionStorage, a as SessionKey$1 } from './types-DWx-5jmz.mjs';
-export { A as ActionParams, b as SessionConfig, i as SessionError, h as SessionErrorCode, e as SessionEvent, f as SessionEventCallback, d as SessionManagerConfig, c as SessionSignature, g as SessionSignedAction } from './types-DWx-5jmz.mjs';
+import { S as SessionStorage, a as SessionKey$1 } from './types-C564CfsE.mjs';
+export { A as ActionParams, b as SessionConfig, i as SessionError, h as SessionErrorCode, e as SessionEvent, f as SessionEventCallback, d as SessionManagerConfig, c as SessionSignature, g as SessionSignedAction } from './types-C564CfsE.mjs';
 export { CONSISTENCY_LEVELS, FetchVAAOptions, GUARDIAN_CONFIG, WaitForSignaturesOptions, emitterToEvmAddress, encodeVAAForSolana, encodeVAAToBytes, evmAddressToBytes32, fetchVAA, fetchVAAByTxHash, fetchVAAByTxHashFallback, getSequenceFromTxReceipt, getWormholeCoreBridge, getWormholeRelayer, getWormholeTokenBridge, hasQuorum, normalizeEmitterAddress, parseVAA, parseVAABytes, parseVeridexPayload, supportsRelayer, validateEmitter, waitForGuardianSignatures } from './wormhole.mjs';
 export { ACTION_BRIDGE, ACTION_CONFIG, ACTION_EXECUTE, ACTION_TRANSFER, ACTION_TYPES, HUB_ABI, MAINNET_CHAINS, PROTOCOL_VERSION, TESTNET_CHAINS, VAULT_ABI, VAULT_FACTORY_ABI, WORMHOLE_API, WORMHOLE_CHAIN_IDS, WORMHOLE_CHAIN_IDS_FLAT } from './constants.mjs';
 export { base64URLDecode, base64URLEncode, computeKeyHash, encodeSignatureForSolidity, getAddressExplorerUrl, getChainByEvmId, getChainByWormholeId, getTxExplorerUrl, isEvmChain, isValidBytes32, isValidEvmAddress, isValidWormholeChainId, parseDERSignature, retryWithBackoff } from './utils.mjs';
@@ -4372,6 +4372,7 @@ declare function decrypt(encryptedData: Uint8Array, key: CryptoKey): Promise<Uin
 declare function validateSessionConfig(config: {
     duration: number;
     maxValue: bigint;
+    allowUnboundedMaxValue?: boolean;
 }): void;
 
 /**

package/dist/index.js

@@ -12755,7 +12755,9 @@ var ERC20_ABI2 = [
 var HUB_ABI2 = [
   "function dispatch(tuple(bytes authenticatorData, string clientDataJSON, uint256 challengeIndex, uint256 typeIndex, uint256 r, uint256 s) signature, uint256 publicKeyX, uint256 publicKeyY, uint16 targetChain, bytes actionPayload, uint256 nonce) payable returns (uint64 sequence)",
   "function userNonces(bytes32 userKeyHash) view returns (uint256)",
-  "function getMessageFee() view returns (uint256)",
+  // Hub exposes the Wormhole core bridge address; message fee is read from the
+  // bridge directly (getMessageFee() was removed from the Hub).
+  "function wormhole() view returns (address)",
   "function getVaultAddress(bytes32 userKeyHash) view returns (address)",
   "function vaultExists(bytes32 userKeyHash) view returns (bool)",
   "function createVault(bytes32 userKeyHash) returns (address)",
@@ -12812,6 +12814,8 @@ var EVMClient = class {
   hubContract;
   factoryContract = null;
   cachedImplementation = null;
+  cachedWormholeAddress = null;
+  cachedMessageFee = null;
   constructor(config) {
     this.config = {
       name: config.name ?? `EVM Chain ${config.chainId}`,
@@ -12984,8 +12988,24 @@ var EVMClient = class {
     return Number(count);
   }
   async getMessageFee() {
-    const fee = await this.hubContract.getMessageFee();
-    return BigInt(fee.toString());
+    const now = Date.now();
+    if (this.cachedMessageFee && this.cachedMessageFee.expiresAt > now) {
+      return this.cachedMessageFee.value;
+    }
+    let wormholeAddress = this.config.contracts.wormholeCoreBridge ?? this.cachedWormholeAddress;
+    if (!wormholeAddress) {
+      wormholeAddress = await this.hubContract.wormhole();
+      this.cachedWormholeAddress = wormholeAddress;
+    }
+    const wormhole = new import_ethers16.ethers.Contract(
+      wormholeAddress,
+      ["function messageFee() view returns (uint256)"],
+      this.provider
+    );
+    const fee = await wormhole.messageFee();
+    const value = BigInt(fee.toString());
+    this.cachedMessageFee = { value, expiresAt: now + 3e4 };
+    return value;
   }
   async buildTransferPayload(params) {
     return encodeTransferAction(
@@ -13084,13 +13104,41 @@ var EVMClient = class {
       actionPayload,
       nonce: Number(nonce)
     };
-    const response = await fetch(`${relayerUrl}/api/v1/submit`, {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify(request)
-    });
+    const MAX_ATTEMPTS = 3;
+    const baseDelayMs = 1e3;
+    const sleep5 = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+    let response;
+    let lastError;
+    for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
+      try {
+        response = await fetch(`${relayerUrl}/api/v1/submit`, {
+          method: "POST",
+          headers: {
+            "Content-Type": "application/json"
+          },
+          body: JSON.stringify(request)
+        });
+        const retryable = response.status >= 500 || response.status === 408 || response.status === 429;
+        if (!retryable) {
+          break;
+        }
+        if (attempt === MAX_ATTEMPTS) break;
+        const retryAfter = response.headers.get("retry-after");
+        const explicitDelay = retryAfter ? parseInt(retryAfter, 10) * 1e3 : 0;
+        const backoff = explicitDelay > 0 ? explicitDelay : baseDelayMs * 2 ** (attempt - 1) + Math.floor(Math.random() * 200);
+        await sleep5(backoff);
+      } catch (err) {
+        lastError = err;
+        if (attempt === MAX_ATTEMPTS) break;
+        const backoff = baseDelayMs * 2 ** (attempt - 1) + Math.floor(Math.random() * 200);
+        await sleep5(backoff);
+      }
+    }
+    if (!response) {
+      throw new Error(
+        `Relayer submission failed after ${MAX_ATTEMPTS} attempts: ${lastError instanceof Error ? lastError.message : String(lastError)}`
+      );
+    }
     if (!response.ok) {
       const error = await response.json().catch(() => ({ error: response.statusText }));
       throw new Error(`Relayer submission failed: ${error.error || response.statusText}`);
@@ -13921,7 +13969,7 @@ var EVMClient = class {
   async executeTransactionProposal(proposalId, signer) {
     const s = signer;
     const hub = this.hubContract.connect(s);
-    const fee = await this.hubContract.getMessageFee();
+    const fee = await this.getMessageFee();
     const tx = await hub.executeTransactionProposal(proposalId, { value: fee });
     const receipt = await tx.wait();
     const sequence = this._extractSequenceFromReceipt(receipt);
@@ -16551,6 +16599,12 @@ function validateSessionConfig(config) {
       "INVALID_CONFIG" /* INVALID_CONFIG */
     );
   }
+  if (config.maxValue === 0n && config.allowUnboundedMaxValue !== true) {
+    throw new SessionError(
+      'Session maxValue=0 means "no per-tx limit" \u2014 the vault daily cap is then the only bound. This is a foot-gun: a compromised session key can drain the vault up to that cap. Pass a non-zero maxValue, or set allowUnboundedMaxValue:true if you have verified the vault daily cap and accept the residual risk.',
+      "INVALID_CONFIG" /* INVALID_CONFIG */
+    );
+  }
 }
 
 // src/sessions/storage.ts
@@ -17096,7 +17150,8 @@ var SessionManager = class {
       maxValue: config.maxValue ?? 0n,
       autoRefresh: config.autoRefresh ?? true,
       refreshBuffer: config.refreshBuffer ?? DEFAULT_REFRESH_BUFFER,
-      chainScopes: config.chainScopes ?? []
+      chainScopes: config.chainScopes ?? [],
+      allowUnboundedMaxValue: config.allowUnboundedMaxValue ?? false
     };
     validateSessionConfig(this.config);
     this.debug = managerConfig?.debug ?? false;