@wishknish/knishio-client-ts 0.8.2 → 0.9.0

package/dist/index.js

@@ -939,9 +939,19 @@ var init_StackableUnitAmountException = __esm({
 });
 
 // src/exception/StackableUnitDecimalsException.ts
+var StackableUnitDecimalsException, StackableUnitDecimalsException_default;
 var init_StackableUnitDecimalsException = __esm({
   "src/exception/StackableUnitDecimalsException.ts"() {
     init_BaseException();
+    StackableUnitDecimalsException = class extends BaseException {
+      /**
+       * Constructor using proper error type
+       */
+      constructor(message = "Stackable tokens with unit IDs cannot have decimal places!") {
+        super("STACKABLE_UNIT_DECIMALS_ERROR", message);
+      }
+    };
+    StackableUnitDecimalsException_default = StackableUnitDecimalsException;
   }
 });
 
@@ -1560,15 +1570,15 @@ var init_EnhancedResponse = __esm({
 // src/response/Response.ts
 var Response_exports = {};
 __export(Response_exports, {
-  default: () => Response
+  default: () => Response2
 });
-var Response;
+var Response2;
 var init_Response = __esm({
   "src/response/Response.ts"() {
     init_exception();
     init_Dot();
     init_EnhancedResponse();
-    Response = class {
+    Response2 = class {
       dataKey;
       errorKey = "exception";
       $__payload = null;
@@ -1923,9 +1933,6 @@ function generateSecret(seed = null, length = CRYPTO_CONSTANTS.SECRET_LENGTH) {
   }
 }
 function generateBundleHash(secret, _source = null) {
-  if (!secret || secret.length === 0) {
-    throw new Error("Secret is required for bundle hash generation");
-  }
   const hash = shake256(secret, CRYPTO_CONSTANTS.BUNDLE_HASH_LENGTH * 4);
   return hash;
 }
@@ -3336,8 +3343,7 @@ var QUERY_TYPES = [
   "Batch",
   "ActiveSession",
   "Policy",
-  "Token",
-  "UserActivity"
+  "Token"
 ];
 function createLookup(values) {
   return values.reduce((acc, value) => {
@@ -3596,6 +3602,29 @@ var Wallet = class _Wallet {
     }
     remainderWallet.tokenUnits = remainderTokenUnits;
   }
+  /**
+   * Split token units across MULTIPLE recipients (N-way sibling of splitUnits).
+   *
+   * The source retains the SENT union (all units leaving), each recipient gets its own
+   * subset, and the remainder keeps the KEPT units (those not assigned to any recipient).
+   * recipientUnitLists is parallel to recipientWallets. No-op when no units are sent.
+   *
+   * @param recipientUnitLists - per-recipient arrays of token unit IDs (parallel to recipientWallets)
+   * @param recipientWallets - destination wallets
+   * @param remainderWallet - wallet to receive the KEPT units
+   */
+  splitUnitsMulti(recipientUnitLists, recipientWallets, remainderWallet) {
+    const sentIds = new Set(recipientUnitLists.flat());
+    if (sentIds.size === 0) {
+      return;
+    }
+    recipientWallets.forEach((recipientWallet, i) => {
+      const ids = recipientUnitLists[i] ?? [];
+      recipientWallet.tokenUnits = this.tokenUnits.filter((tokenUnit) => ids.includes(tokenUnit.id));
+    });
+    remainderWallet.tokenUnits = this.tokenUnits.filter((tokenUnit) => !sentIds.has(tokenUnit.id));
+    this.tokenUnits = this.tokenUnits.filter((tokenUnit) => sentIds.has(tokenUnit.id));
+  }
   /**
    * Get token units data
    * Stub for compatibility
@@ -3642,6 +3671,15 @@ var Wallet = class _Wallet {
     };
   }
   async decryptMessage(encryptedData) {
+    const decryptedString = await this._mlkemDecryptToString(encryptedData);
+    return decryptedString === null ? null : JSON.parse(decryptedString);
+  }
+  /**
+   * ML-KEM768 decapsulate + AES-256-GCM decrypt → the RAW decrypted UTF-8 string (no JSON.parse).
+   * Shared by {@link decryptMessage} (which JSON.parses the result) and the PQ CipherHash transport
+   * ({@link decryptMyMessageML768}, which needs the raw response JSON text). PQ-transport Phase E.
+   */
+  async _mlkemDecryptToString(encryptedData) {
     const { cipherText, encryptedMessage } = encryptedData;
     let sharedSecret;
     try {
@@ -3670,9 +3708,8 @@ var Wallet = class _Wallet {
       console.info("Wallet::decryptMessage() - deserialized encrypted message", deserializedEncryptedMessage);
       return null;
     }
-    let decryptedString;
     try {
-      decryptedString = new TextDecoder().decode(decryptedUint8);
+      return new TextDecoder().decode(decryptedUint8);
     } catch (e) {
       console.warn("Wallet::decryptMessage() - Decoding failed", e);
       console.info("Wallet::decryptMessage() - my public key", this.pubkey);
@@ -3681,7 +3718,40 @@ var Wallet = class _Wallet {
       console.info("Wallet::decryptMessage() - decrypted Uint8Array", decryptedUint8);
       return null;
     }
-    return JSON.parse(decryptedString);
+  }
+  /**
+   * Canonical cross-SDK hashShare for a public key: standard base64 of SHAKE256(pubkey_utf8, 8 bytes)
+   * — byte-matches the validator's hash_share and the JS/Kotlin/PHP hashShare. `shake256(pubkey, 64)`
+   * = 64 bits = 8 bytes (hex) → hex-decode → standard base64 via serializeKey. PQ-transport Phase E.
+   */
+  hashShare(pubkey) {
+    const hex = shake256(pubkey, 64);
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < bytes.length; i++) {
+      bytes[i] = parseInt(hex.substr(i * 2, 2), 16);
+    }
+    return this.serializeKey(bytes);
+  }
+  /**
+   * Post-quantum (ML-KEM768) CipherHash request envelope: a stringified single-recipient map
+   * `{ "<hashShare(recipientPubkey)>": {cipherText, encryptedMessage} }` (object-valued, via
+   * {@link encryptMessage}). Matches the Rust validator's CipherHash handler. PQ-transport Phase E.
+   */
+  async encryptStringML768(message, recipientPubkey) {
+    const envelope = await this.encryptMessage(message, recipientPubkey);
+    return JSON.stringify({ [this.hashShare(recipientPubkey)]: envelope });
+  }
+  /**
+   * Decrypt a CipherHash response map addressed to THIS wallet's ML-KEM pubkey
+   * (`hashShare(this.pubkey)`) → the RAW decrypted GraphQL response JSON text (NOT JSON.parsed;
+   * it replaces the HTTP response body for the normal parser). `null` if no entry / decrypt fails.
+   */
+  async decryptMyMessageML768(map) {
+    const envelope = map[this.hashShare(this.pubkey)];
+    if (!envelope) {
+      return null;
+    }
+    return this._mlkemDecryptToString(envelope);
   }
   // =============================================================================
   // SYMMETRIC ENCRYPTION HELPERS (AES-GCM with shared secret)
@@ -3806,7 +3876,8 @@ z.object({
   client: z.unknown().optional(),
   socket: z.unknown().optional(),
   serverSdkVersion: z.number().int().min(1).optional(),
-  logging: z.boolean().optional()
+  logging: z.boolean().optional(),
+  defaultRequestPolicy: z.enum(["cache-first", "cache-only", "network-only", "cache-and-network"]).nullable().optional()
 }).strict();
 z.object({
   token: z.string().min(1, "Auth token cannot be empty"),
@@ -4979,6 +5050,46 @@ var Molecule = class _Molecule {
     }));
     return this;
   }
+  /**
+   * Initialize a MULTI-recipient V-type molecule: one source debits its FULL balance to fund
+   * N recipients (each its own amount + stackable units) plus a remainder back to the sender.
+   * Multi-recipient sibling of initValue (WP line 544: fund multiple recipients with one
+   * transaction). recipientWallets is parallel to amounts.
+   */
+  initValues({
+    recipientWallets,
+    amounts
+  }) {
+    if (!this.sourceWallet) {
+      throw new Error("Source wallet required for value transfer");
+    }
+    const total = amounts.reduce((sum, amount) => sum + amount, 0);
+    if (Number(this.sourceWallet.balance) - total < 0) {
+      throw new BalanceInsufficientException();
+    }
+    this.addAtom(Atom.create({
+      isotope: "V",
+      wallet: this.sourceWallet,
+      value: -Number(this.sourceWallet.balance)
+    }));
+    recipientWallets.forEach((recipientWallet, i) => {
+      this.addAtom(Atom.create({
+        isotope: "V",
+        wallet: recipientWallet,
+        value: amounts[i],
+        metaType: "walletBundle",
+        metaId: recipientWallet.bundle
+      }));
+    });
+    this.addAtom(Atom.create({
+      isotope: "V",
+      wallet: this.remainderWallet,
+      value: Number(this.sourceWallet.balance) - total,
+      metaType: "walletBundle",
+      metaId: this.remainderWallet.bundle
+    }));
+    return this;
+  }
   /**
    * Sign the molecule with one-time signature
    * Matches JavaScript SDK sign method
@@ -5736,7 +5847,7 @@ var Decimal = class _Decimal {
    * @param debug Enable debug logging
    * @returns 0 if equal, 1 if value1 > value2, -1 if value1 < value2
    */
-  static cmp(value1, value2, debug = false) {
+  static cmp(value1, value2, _debug = false) {
     const val1 = _Decimal.val(value1) * MULTIPLIER;
     const val2 = _Decimal.val(value2) * MULTIPLIER;
     if (Math.abs(val1 - val2) < 1) {
@@ -5751,6 +5862,14 @@ var Decimal = class _Decimal {
     return _Decimal.cmp(value1, value2) === 0;
   }
 };
+var CIPHER_HASH_QUERY = "query ( $Hash: String! ) { CipherHash ( Hash: $Hash ) { hash } }";
+function parseOperation(query) {
+  const typeMatch = (query || "").match(/\b(query|mutation|subscription)\b/i);
+  const type = typeMatch?.[1]?.toLowerCase() ?? "query";
+  const braceIdx = (query || "").indexOf("{");
+  const nameMatch = braceIdx >= 0 ? query.slice(braceIdx + 1).match(/[A-Za-z_][A-Za-z0-9_]*/) : null;
+  return { type, name: nameMatch?.[0] ?? "" };
+}
 var GraphQLClient = class {
   $__client;
   $__authToken = "";
@@ -5796,6 +5915,10 @@ var GraphQLClient = class {
     return createClient$1({
       url: serverUri,
       exchanges,
+      // PQ-transport Phase E: when encryption is on, route fetch through the CipherHash wrapper
+      // (encrypt the request body to the validator's ML-KEM pubkey, decrypt the response).
+      // Omitted → urql uses the global fetch (plaintext).
+      ...this.cipherLink ? { fetch: ((input, init) => this.cipherFetch(input, init)) } : {},
       fetchOptions: () => ({
         headers: {
           "X-Auth-Token": this.$__authToken
@@ -5805,6 +5928,62 @@ var GraphQLClient = class {
       })
     });
   }
+  /**
+   * Whether an outgoing GraphQL request body should be wrapped in CipherHash. Bypass (plaintext):
+   * introspection `__schema`, `ContinuId`, the `AccessToken` mutation, and the U-isotope
+   * `ProposeMolecule` (auth bootstrap — the key exchange itself can't be encrypted). Mirrors the
+   * Kotlin/PHP/validator bypass set.
+   */
+  shouldEncrypt(body) {
+    let parsed;
+    try {
+      parsed = JSON.parse(body);
+    } catch (e) {
+      return false;
+    }
+    const { type, name } = parseOperation(parsed.query);
+    if (type === "query" && (name === "__schema" || name === "ContinuId")) return false;
+    if (type === "mutation" && name === "AccessToken") return false;
+    if (type === "mutation" && name === "ProposeMolecule") {
+      const isotope = parsed.variables?.molecule?.atoms?.[0]?.isotope;
+      if (isotope === "U") return false;
+    }
+    return true;
+  }
+  /**
+   * Custom `fetch` that wraps a GraphQL request in the ML-KEM CipherHash envelope and decrypts the
+   * response (PQ-transport Phase E). Operates on the raw POST body (mirrors the JS/Kotlin transform).
+   * Reads the CURRENT client wallet + validator pubkey from auth.
+   */
+  async cipherFetch(input, init) {
+    const wallet = this.$__wallet;
+    const serverPubkey = this.$__pubkey;
+    let encryptedRequest = false;
+    let requestInit = init;
+    if (wallet && serverPubkey && init && typeof init.body === "string" && this.shouldEncrypt(init.body)) {
+      const hashVar = await wallet.encryptStringML768(init.body, serverPubkey);
+      requestInit = { ...init, body: JSON.stringify({ query: CIPHER_HASH_QUERY, variables: { Hash: hashVar } }) };
+      encryptedRequest = true;
+    }
+    const response = await fetch(input, requestInit);
+    if (!encryptedRequest) {
+      return response;
+    }
+    const text = await response.text();
+    const init2 = { status: response.status, statusText: response.statusText, headers: response.headers };
+    let parsed;
+    try {
+      parsed = JSON.parse(text);
+    } catch (e) {
+      return new Response(text, init2);
+    }
+    const hash = parsed?.data?.CipherHash?.hash;
+    if (typeof hash !== "string") {
+      return new Response(text, init2);
+    }
+    const decrypted = await wallet.decryptMyMessageML768(JSON.parse(hash));
+    return new Response(decrypted != null ? decrypted : text, init2);
+  }
   setAuthData({
     token,
     pubkey,
@@ -6099,8 +6278,8 @@ var Query = class {
    * Returns a Response object
    */
   createResponse(json) {
-    const Response2 = (init_Response(), __toCommonJS(Response_exports)).default;
-    return new Response2({
+    const Response3 = (init_Response(), __toCommonJS(Response_exports)).default;
+    return new Response3({
       query: this,
       json
     });
@@ -6170,8 +6349,8 @@ var Query = class {
     } catch (error) {
       if (error.name === "AbortError") {
         this.knishIOClient.log("warn", "Query was cancelled");
-        const Response2 = (init_Response(), __toCommonJS(Response_exports)).default;
-        return new Response2({
+        const Response3 = (init_Response(), __toCommonJS(Response_exports)).default;
+        return new Response3({
           query: this,
           json: { data: null, errors: [{ message: "Query was cancelled" }] }
         });
@@ -6215,8 +6394,8 @@ var Mutation = class extends Query {
     } catch (error) {
       if (error.name === "AbortError") {
         this.knishIOClient.log("warn", "Mutation was cancelled");
-        const Response2 = (init_Response(), __toCommonJS(Response_exports)).default;
-        return new Response2({
+        const Response3 = (init_Response(), __toCommonJS(Response_exports)).default;
+        return new Response3({
           query: this,
           json: { data: null, errors: [{ message: "Mutation was cancelled" }] }
         });
@@ -6336,7 +6515,11 @@ var KnishIOClientConfigSchema2 = z.object({
   client: z.unknown().optional(),
   socket: z.unknown().optional(),
   serverSdkVersion: z.number().int().min(1).max(10).default(4),
-  logging: z.boolean().default(false)
+  logging: z.boolean().default(false),
+  // Optional default urql request policy for reads (server/sync clients pass
+  // 'network-only'). Permitted by the strict schema so the constructor option
+  // isn't rejected.
+  defaultRequestPolicy: z.enum(["cache-first", "cache-only", "network-only", "cache-and-network"]).nullable().optional()
 }).strict();
 var EnvironmentConfigSchema = z.object({
   NODE_ENV: z.enum(["development", "production", "test"]).default("development"),
@@ -7148,7 +7331,90 @@ var ConfigValidator = class _ConfigValidator {
 
 // src/response/ResponseBalance.ts
 init_Response();
-var ResponseBalance = class _ResponseBalance extends Response {
+
+// src/core/TokenUnit.ts
+var TokenUnit = class _TokenUnit {
+  id;
+  name;
+  metas;
+  /**
+   * Create new TokenUnit instance
+   * Matches JavaScript SDK constructor signature exactly
+   */
+  constructor(id, name, metas) {
+    this.id = id;
+    this.name = name;
+    this.metas = metas || {};
+  }
+  /**
+   * Create TokenUnit from GraphQL response data
+   * Matches JavaScript SDK createFromGraphQL method exactly
+   */
+  static createFromGraphQL(data) {
+    let metas = data.metas || {};
+    if (Array.isArray(metas) && metas.length) {
+      try {
+        metas = JSON.parse(metas);
+        if (!metas) {
+          metas = {};
+        }
+      } catch (error) {
+        metas = {};
+      }
+    }
+    return new _TokenUnit(
+      data.id,
+      data.name,
+      metas
+    );
+  }
+  /**
+   * Create TokenUnit from database array data
+   * Matches JavaScript SDK createFromDB method exactly
+   */
+  static createFromDB(data) {
+    return new _TokenUnit(
+      data[0],
+      data[1],
+      data.length > 2 ? data[2] : {}
+    );
+  }
+  /**
+   * Get fragment zone from metadata
+   * Matches JavaScript SDK getFragmentZone method exactly
+   */
+  getFragmentZone() {
+    return this.metas.fragmentZone || null;
+  }
+  /**
+   * Get fused token units from metadata
+   * Matches JavaScript SDK getFusedTokenUnits method exactly
+   */
+  getFusedTokenUnits() {
+    return this.metas.fusedTokenUnits || null;
+  }
+  /**
+   * Convert to data array format
+   * Matches JavaScript SDK toData method exactly
+   */
+  toData() {
+    return [this.id, this.name, this.metas];
+  }
+  /**
+   * Convert to GraphQL response format
+   * Matches JavaScript SDK toGraphQLResponse method exactly
+   */
+  toGraphQLResponse() {
+    return {
+      id: this.id,
+      name: this.name,
+      metas: JSON.stringify(this.metas)
+    };
+  }
+};
+
+// src/response/ResponseBalance.ts
+var ResponseBalance = class _ResponseBalance extends Response2 {
   /**
    * Class constructor
    */
@@ -7210,6 +7476,11 @@ var ResponseBalance = class _ResponseBalance extends Response {
       wallet.tokenSupply = data.token.supply;
       wallet.tokenFungibility = data.token.fungibility;
     }
+    if (data.tokenUnits && data.tokenUnits.length) {
+      for (const tokenUnitData of data.tokenUnits) {
+        wallet.tokenUnits.push(TokenUnit.createFromGraphQL(tokenUnitData));
+      }
+    }
     if (data.tradeRates && data.tradeRates.length) {
       for (const tradeRate of data.tradeRates) {
         wallet.tradeRates[tradeRate.tokenSlug] = tradeRate.amount;
@@ -7267,90 +7538,7 @@ var QueryBalance = class extends Query {
 
 // src/response/ResponseWalletList.ts
 init_Response();
-
-// src/core/TokenUnit.ts
-var TokenUnit = class _TokenUnit {
-  id;
-  name;
-  metas;
-  /**
-   * Create new TokenUnit instance
-   * Matches JavaScript SDK constructor signature exactly
-   */
-  constructor(id, name, metas) {
-    this.id = id;
-    this.name = name;
-    this.metas = metas || {};
-  }
-  /**
-   * Create TokenUnit from GraphQL response data
-   * Matches JavaScript SDK createFromGraphQL method exactly
-   */
-  static createFromGraphQL(data) {
-    let metas = data.metas || {};
-    if (Array.isArray(metas) && metas.length) {
-      try {
-        metas = JSON.parse(metas);
-        if (!metas) {
-          metas = {};
-        }
-      } catch (error) {
-        metas = {};
-      }
-    }
-    return new _TokenUnit(
-      data.id,
-      data.name,
-      metas
-    );
-  }
-  /**
-   * Create TokenUnit from database array data
-   * Matches JavaScript SDK createFromDB method exactly
-   */
-  static createFromDB(data) {
-    return new _TokenUnit(
-      data[0],
-      data[1],
-      data.length > 2 ? data[2] : {}
-    );
-  }
-  /**
-   * Get fragment zone from metadata
-   * Matches JavaScript SDK getFragmentZone method exactly
-   */
-  getFragmentZone() {
-    return this.metas.fragmentZone || null;
-  }
-  /**
-   * Get fused token units from metadata
-   * Matches JavaScript SDK getFusedTokenUnits method exactly
-   */
-  getFusedTokenUnits() {
-    return this.metas.fusedTokenUnits || null;
-  }
-  /**
-   * Convert to data array format
-   * Matches JavaScript SDK toData method exactly
-   */
-  toData() {
-    return [this.id, this.name, this.metas];
-  }
-  /**
-   * Convert to GraphQL response format
-   * Matches JavaScript SDK toGraphQLResponse method exactly
-   */
-  toGraphQLResponse() {
-    return {
-      id: this.id,
-      name: this.name,
-      metas: JSON.stringify(this.metas)
-    };
-  }
-};
-
-// src/response/ResponseWalletList.ts
-var ResponseWalletList = class _ResponseWalletList extends Response {
+var ResponseWalletList = class _ResponseWalletList extends Response2 {
   /**
    * Class constructor
    * Matches JavaScript SDK constructor signature exactly
@@ -7489,7 +7677,7 @@ var QueryWalletList = class extends Query {
 
 // src/response/ResponseWalletBundle.ts
 init_Response();
-var ResponseWalletBundle = class extends Response {
+var ResponseWalletBundle = class extends Response2 {
   /**
    * Class constructor
    */
@@ -7556,7 +7744,7 @@ var QueryWalletBundle = class extends Query {
 
 // src/response/ResponseContinuId.ts
 init_Response();
-var ResponseContinuId = class extends Response {
+var ResponseContinuId = class extends Response2 {
   /**
    * Class constructor
    * Matches JavaScript SDK constructor signature exactly
@@ -7636,7 +7824,7 @@ var QueryContinuId = class extends Query {
 
 // src/response/ResponseMetaType.ts
 init_Response();
-var ResponseMetaType = class extends Response {
+var ResponseMetaType = class extends Response2 {
   /**
    * Class constructor
    * Matches JavaScript SDK constructor signature exactly
@@ -7861,7 +8049,7 @@ var QueryBatch = class _QueryBatch extends Query {
    * Matches JavaScript SDK createResponse method exactly
    */
   createResponse(json) {
-    const responseObject = new Response({
+    const responseObject = new Response2({
       query: this,
       json
     });
@@ -7890,7 +8078,7 @@ var QueryBatchHistory = class extends Query {
    * Returns a Response object
    */
   createResponse(json) {
-    const responseObject = new Response({
+    const responseObject = new Response2({
       query: this,
       json
     });
@@ -7901,7 +8089,7 @@ var QueryBatchHistory = class extends Query {
 
 // src/response/ResponseAtom.ts
 init_Response();
-var ResponseAtom = class extends Response {
+var ResponseAtom = class extends Response2 {
   /**
    * Class constructor
    * Matches JavaScript SDK constructor signature exactly
@@ -8142,7 +8330,7 @@ var QueryAtom = class extends Query {
 
 // src/response/ResponsePolicy.ts
 init_Response();
-var ResponsePolicy = class extends Response {
+var ResponsePolicy = class extends Response2 {
   /**
    * Constructor
    */
@@ -8204,7 +8392,7 @@ var QueryPolicy = class extends Query {
 
 // src/response/ResponseQueryActiveSession.ts
 init_Response();
-var ResponseQueryActiveSession = class extends Response {
+var ResponseQueryActiveSession = class extends Response2 {
   /**
    * Constructor
    */
@@ -8273,131 +8461,6 @@ var QueryActiveSession = class extends Query {
   }
 };
 
-// src/response/ResponseQueryUserActivity.ts
-init_Response();
-var ResponseQueryUserActivity = class extends Response {
-  /**
-   * Constructor
-   */
-  constructor({
-    query,
-    json
-  }) {
-    super({
-      query,
-      json,
-      dataKey: "data.UserActivity"
-    });
-  }
-  /**
-   * Returns processed user activity data
-   */
-  payload() {
-    const data = JSON.parse(JSON.stringify(this.data()));
-    if (data.instances) {
-      for (const datum of data.instances) {
-        if (datum.jsonData) {
-          datum.jsonData = JSON.parse(datum.jsonData);
-        }
-      }
-    }
-    return data;
-  }
-};
-var QueryUserActivity = class extends Query {
-  /**
-   * Constructor
-   */
-  constructor(graphQLClient, knishIOClient) {
-    super(graphQLClient, knishIOClient);
-    this.$__query = gql`
-      query UserActivity(
-        $bundleHash: String
-        $metaType: String
-        $metaId: String
-        $ipAddress: String
-        $browser: String
-        $osCpu: String
-        $resolution: String
-        $timeZone: String
-        $countBy: [CountByUserActivity]
-        $interval: span
-      ) {
-        UserActivity(
-          bundleHash: $bundleHash
-          metaType: $metaType
-          metaId: $metaId
-          ipAddress: $ipAddress
-          browser: $browser
-          osCpu: $osCpu
-          resolution: $resolution
-          timeZone: $timeZone
-          countBy: $countBy
-          interval: $interval
-        ) {
-          createdAt
-          bundleHash
-          metaType
-          metaId
-          instances {
-            bundleHash
-            metaType
-            metaId
-            jsonData
-            createdAt
-            updatedAt
-          }
-          instanceCount {
-            ...SubFields
-            ...Recursive
-          }
-        }
-      }
-
-      fragment SubFields on InstanceCountType {
-        id
-        count
-      }
-
-      fragment Recursive on InstanceCountType {
-        instances {
-          ...SubFields
-          instances {
-            ...SubFields
-            instances {
-              ...SubFields
-              instances {
-                ...SubFields
-                instances {
-                  ...SubFields
-                  instances {
-                    ...SubFields
-                    instances {
-                      ...SubFields
-                      instances {
-                        ...SubFields
-                      }
-                    }
-                  }
-                }
-              }
-            }
-          }
-        }
-      }
-    `;
-  }
-  /**
-   * Returns a Response object
-   */
-  createResponse(json) {
-    return new ResponseQueryUserActivity({
-      query: this,
-      json
-    });
-  }
-};
-
 // src/query/QueryToken.ts
 init_Response();
 var QueryToken = class extends Query {
@@ -8424,7 +8487,7 @@ var QueryToken = class extends Query {
    * Creates a Response object
    */
   createResponse(json) {
-    return new Response({
+    return new Response2({
       query: this,
       json,
       dataKey: "data.Token"
@@ -8434,7 +8497,7 @@ var QueryToken = class extends Query {
 
 // src/response/ResponseMetaTypeViaAtom.ts
 init_Response();
-var ResponseMetaTypeViaAtom = class extends Response {
+var ResponseMetaTypeViaAtom = class extends Response2 {
   /**
    * Class constructor
    * Matches JavaScript SDK constructor signature exactly
@@ -8592,7 +8655,7 @@ var QueryMetaTypeViaAtom = class extends Query {
 
 // src/response/ResponseMetaTypeViaMolecule.ts
 init_Response();
-var ResponseMetaTypeViaMolecule = class _ResponseMetaTypeViaMolecule extends Response {
+var ResponseMetaTypeViaMolecule = class _ResponseMetaTypeViaMolecule extends Response2 {
   /**
    * Class constructor
    */
@@ -8838,7 +8901,7 @@ var QueryMetaTypeViaMolecule = class extends Query {
 
 // src/response/ResponseEmbeddingStatus.ts
 init_Response();
-var ResponseEmbeddingStatus = class extends Response {
+var ResponseEmbeddingStatus = class extends Response2 {
   /**
    * Class constructor
    */
@@ -8921,7 +8984,7 @@ init_Dot();
 init_MolecularHashMismatchException();
 init_SignatureMismatchException();
 init_AtomIndexException();
-var ResponseProposeMolecule = class extends Response {
+var ResponseProposeMolecule = class extends Response2 {
   $__clientMolecule;
   /**
    * Class constructor
@@ -9231,6 +9294,20 @@ var MutationTransferTokens = class extends MutationProposeMolecule {
     this.$__molecule.sign({});
     this.$__molecule.check(this.$__molecule.sourceWallet);
   }
+  /**
+   * Fills the Molecule for a MULTI-recipient transfer (one source funds N recipients)
+   */
+  fillMoleculeMulti({
+    recipientWallets,
+    amounts
+  }) {
+    this.$__molecule.initValues({
+      recipientWallets,
+      amounts
+    });
+    this.$__molecule.sign({});
+    this.$__molecule.check(this.$__molecule.sourceWallet);
+  }
   /**
    * Builds a Response object out of a JSON object
    * Matches JavaScript SDK createResponse method signature exactly
@@ -9291,7 +9368,8 @@ var MutationClaimShadowWallet = class extends MutationProposeMolecule {
       bundle: this.$__molecule.bundle,
       token,
       batchId
-    })(this.$__molecule).initShadowWalletClaim(wallet);
+    });
+    this.$__molecule.initShadowWalletClaim(wallet);
     this.$__molecule.sign({});
     this.$__molecule.check();
   }
@@ -9417,7 +9495,7 @@ var MutationCreateIdentifier = class extends MutationProposeMolecule {
 
 // src/response/ResponseActiveSession.ts
 init_Response();
-var ResponseActiveSession = class extends Response {
+var ResponseActiveSession = class extends Response2 {
   /**
    * Constructor
    */
@@ -9608,7 +9686,7 @@ var MutationRequestAuthorization = class extends MutationProposeMolecule {
 init_Response();
 init_Dot();
 init_exception();
-var ResponseRequestAuthorizationGuest = class extends Response {
+var ResponseRequestAuthorizationGuest = class extends Response2 {
   /**
    * Constructor
    */
@@ -9724,7 +9802,7 @@ var MutationRequestAuthorizationGuest = class extends Mutation {
 // src/response/ResponseLinkIdentifier.ts
 init_Response();
 init_Dot();
-var ResponseLinkIdentifier = class extends Response {
+var ResponseLinkIdentifier = class extends Response2 {
   /**
    * Constructor
    */
@@ -10064,6 +10142,10 @@ var KnishIOClient = class {
   $__client;
   $__serverSdkVersion = 3;
   $__logging = false;
+  // Default urql request policy applied to reads when the caller doesn't pass
+  // one. null = urql's default (cache-first). Server/sync clients set this to
+  // 'network-only' so a long-lived client never serves a stale cached read.
+  $__defaultRequestPolicy = null;
   $__authTokenObjects = {};
   $__authToken = null;
   $__authInProcess = false;
@@ -10103,13 +10185,15 @@ var KnishIOClient = class {
       serverSdkVersion = 3,
       logging = false
     } = validatedConfig;
+    const defaultRequestPolicy = config.defaultRequestPolicy ?? null;
     this.initialize({
       uri,
       cellSlug,
       socket,
       client,
       serverSdkVersion,
-      logging
+      logging,
+      defaultRequestPolicy
     });
   }
   /**
@@ -10121,7 +10205,8 @@ var KnishIOClient = class {
     socket = null,
     client = null,
     serverSdkVersion = 3,
-    logging = false
+    logging = false,
+    defaultRequestPolicy = null
   }) {
     this.reset();
     this.$__logging = logging;
@@ -10143,6 +10228,7 @@ var KnishIOClient = class {
       encrypt: this.$__encrypt
     });
     this.$__serverSdkVersion = serverSdkVersion;
+    this.$__defaultRequestPolicy = defaultRequestPolicy;
   }
   /**
    * Get random uri from specified this.$__uris
@@ -10190,6 +10276,20 @@ var KnishIOClient = class {
   getServerSdkVersion() {
     return this.$__serverSdkVersion;
   }
+  /**
+   * Gets the client's default urql request policy (null = urql default).
+   */
+  getDefaultRequestPolicy() {
+    return this.$__defaultRequestPolicy;
+  }
+  /**
+   * Sets the default urql request policy applied to reads that don't specify
+   * one. Pass 'network-only' on a long-lived server/sync client so it never
+   * serves a stale cached read; null restores urql's default (cache-first).
+   */
+  setDefaultRequestPolicy(policy) {
+    this.$__defaultRequestPolicy = policy;
+  }
   /**
    * Reset common properties
    */
@@ -10394,7 +10494,8 @@ var KnishIOClient = class {
         return response;
       });
     }
-    return await query.execute({ variables: variables || {}, context });
+    const effectiveContext = this.$__defaultRequestPolicy && !context.requestPolicy ? { requestPolicy: this.$__defaultRequestPolicy, ...context } : context;
+    return await query.execute({ variables: variables || {}, context: effectiveContext });
   }
   /**
    * When a ProposeMolecule submission is rejected for a position-related
@@ -10514,6 +10615,75 @@ var KnishIOClient = class {
     });
     return await this.executeQuery(query);
   }
+  /**
+   * Fund N recipients from a single source in ONE molecule (multi-recipient sibling of
+   * transferToken). Each recipient gets its own subset of stackable units (or a fungible
+   * amount); a remainder returns the rest to the sender. Conserves:
+   * -balance + Σamounts + (balance - Σ) === 0.
+   *
+   * @param token - token slug
+   * @param recipients - destinations (bundleHash + units OR amount + optional batchId)
+   * @param sourceWallet - optional pre-resolved source (defaults to the client's own wallet)
+   */
+  async transferTokens({
+    token,
+    recipients,
+    sourceWallet = null
+  }) {
+    const amounts = recipients.map((recipient) => {
+      const unitCount = recipient.units ? recipient.units.length : 0;
+      if (unitCount > 0) {
+        if (recipient.amount !== null && recipient.amount !== void 0 && recipient.amount > 0) {
+          throw new StackableUnitAmountException_default();
+        }
+        return unitCount;
+      }
+      return recipient.amount ?? 0;
+    });
+    const total = amounts.reduce((sum, amount) => sum + amount, 0);
+    if (sourceWallet === null) {
+      sourceWallet = await this.querySourceWallet({
+        token,
+        amount: total
+      });
+    }
+    if (sourceWallet === null || Decimal.cmp(Number(sourceWallet.balance), total) < 0) {
+      throw new TransferBalanceException();
+    }
+    const recipientWallets = recipients.map((recipient) => {
+      const recipientWallet = Wallet.create({
+        bundle: recipient.bundleHash,
+        token
+      });
+      if (recipient.batchId !== null && recipient.batchId !== void 0) {
+        recipientWallet.batchId = recipient.batchId;
+      } else {
+        recipientWallet.initBatchId({ sourceWallet });
+      }
+      return recipientWallet;
+    });
+    const remainderWallet = sourceWallet.createRemainder(this.getSecret());
+    if (recipients.some((recipient) => recipient.units && recipient.units.length > 0)) {
+      sourceWallet.splitUnitsMulti(
+        recipients.map((recipient) => recipient.units ?? []),
+        recipientWallets,
+        remainderWallet
+      );
+    }
+    const molecule = await this.createMolecule({
+      sourceWallet,
+      remainderWallet
+    });
+    const query = await this.createMoleculeMutation({
+      mutationClass: MutationTransferTokens,
+      molecule
+    });
+    query.fillMoleculeMulti({
+      recipientWallets,
+      amounts
+    });
+    return await this.executeQuery(query);
+  }
   /**
    * Request authorization token (guest or profile)
    *
@@ -10970,36 +11140,6 @@ var KnishIOClient = class {
       metaId
     });
   }
-  /**
-   * Query user activity
-   */
-  async queryUserActivity({
-    bundleHash,
-    metaType,
-    metaId,
-    ipAddress = null,
-    browser = null,
-    osCpu = null,
-    resolution = null,
-    timeZone = null,
-    countBy = null,
-    interval = null
-  }) {
-    const query = this.createQuery(QueryUserActivity);
-    const variables = {
-      bundleHash,
-      metaType,
-      metaId
-    };
-    if (ipAddress !== null) variables.ipAddress = ipAddress;
-    if (browser !== null) variables.browser = browser;
-    if (osCpu !== null) variables.osCpu = osCpu;
-    if (resolution !== null) variables.resolution = resolution;
-    if (timeZone !== null) variables.timeZone = timeZone;
-    if (countBy !== null) variables.countBy = countBy;
-    if (interval !== null) variables.interval = interval;
-    return this.executeQuery(query, variables);
-  }
   /**
    * Query token information
    */
@@ -11108,9 +11248,27 @@ var KnishIOClient = class {
     amount = null,
     meta = null,
     batchId = null,
-    units: _units = null
+    units = null
   }) {
     this.log("info", `KnishIOClient::createToken() - Creating token ${token}...`);
+    const tokenMeta = meta || {};
+    const fungibility = tokenMeta.fungibility;
+    let resolvedAmount = amount ?? 0;
+    if (fungibility === "stackable") {
+      tokenMeta.batchId = batchId || generateBatchId({});
+    }
+    if ((fungibility === "stackable" || fungibility === "nonfungible" || fungibility === "non-fungible") && units && units.length > 0) {
+      if (Number(tokenMeta.decimals ?? 0) > 0) {
+        throw new StackableUnitDecimalsException_default();
+      }
+      if (Number(amount ?? 0) > 0) {
+        throw new StackableUnitAmountException_default();
+      }
+      resolvedAmount = units.length;
+      tokenMeta.splittable = "1";
+      tokenMeta.decimals = "0";
+      tokenMeta.tokenUnits = JSON.stringify(units);
+    }
     const mutation = await this.createMoleculeMutation({ mutationClass: MutationCreateToken });
     const recipientWallet = new Wallet({
       secret: this.getSecret(),
@@ -11120,8 +11278,8 @@ var KnishIOClient = class {
     });
     await mutation.fillMolecule({
       recipientWallet,
-      amount: amount ?? 0,
-      meta
+      amount: resolvedAmount,
+      meta: tokenMeta
     });
     const response = await this.executeQuery(mutation);
     if (!response) {
@@ -11562,8 +11720,12 @@ var KnishIOClient = class {
       mutationClass: MutationRequestAuthorization,
       molecule
     });
+    const authMeta = { encrypt: encrypt ? "true" : "false" };
+    if (wallet.pubkey) {
+      authMeta.walletPubkey = wallet.pubkey;
+    }
     mutation.fillMolecule({
-      meta: { encrypt: encrypt ? "true" : "false" }
+      meta: authMeta
     });
     const response = await this.executeQuery(mutation);
     if (!response) {
@@ -11815,6 +11977,6 @@ var KnishIO = {
   SDK_INFO
 };
 
-export { Atom, AtomIndexException, AtomMeta, AtomsMissingException, AuthToken, BaseException, COMPATIBLE_SERVER_VERSIONS, CRYPTO_CONSTANTS, CheckMolecule, DevUtils, Dot, EXCEPTION_CODES, EXCEPTION_TYPES, EXTENDED_COMPATIBILITY_TEST_VECTORS, ExceptionFactory, GraphQLClient, InvalidResponseException, KnishIO, KnishIOClient, Meta, MolecularHashMismatchException, Molecule, Mutation, MutationAppendRequest, MutationCreateMeta, MutationCreateToken, MutationCreateWallet, MutationPeering, MutationProposeMolecule, MutationRequestAuthorization, MutationRequestTokens, MutationTransferTokens, PolicyMeta, Query, QueryAtom, QueryBalance, QueryBatch, QueryContinuId, QueryEmbeddingStatus, QueryMetaType, QueryMetaTypeViaAtom, QueryWalletBundle, QueryWalletList, Response, ResponseAppendRequest, ResponseAtom, ResponseBalance, ResponseContinuId, ResponseCreateMeta, ResponseCreateToken, ResponseCreateWallet, ResponseEmbeddingStatus, ResponseMetaType, ResponseMetaTypeViaAtom, ResponsePeering, ResponseProposeMolecule, ResponseRequestAuthorization, ResponseRequestTokens, ResponseTransferTokens, ResponseWalletBundle, ResponseWalletList, SDK_INFO, SDK_NAME, SDK_VERSION, SignatureMismatchException, TokenUnit, TransferBalanceException, Wallet, WalletCredentialException, base64ToHex, bufferToHexString, capitalize, charsetBaseConvert, chunkArray, chunkSubstr, configureSDK, convertToBase17, createBundleHash, createMolecularHash, createPosition, createTokenSlug, createWalletAddress, deepCloning, diff, enumerateMolecularHash, generateBatchId, generateBundleHash, generateOTSSignature, generatePosition, generateSecret, generateWalletAddress, generateWalletKey, getSDKConfig, hexStringToBuffer, hexToBase64, intersect, isAtomIsotope, isBundleHash, isHex, isHexString, isMolecularHash, isNumeric, isPosition2 as isPosition, isWalletAddress2 as isWalletAddress, normalizeMolecularHash, randomString, runCompatibilityTests, runExtendedCompatibilityTests, shake256, toCamelCase, toSnakeCase, truncate, validateBundleHash, validateMolecularHashForSignature, validateOTSSignature, validatePosition, validateSecret, validateWalletAddress, verifyOTSSignature };
+export { Atom, AtomIndexException, AtomMeta, AtomsMissingException, AuthToken, BaseException, COMPATIBLE_SERVER_VERSIONS, CRYPTO_CONSTANTS, CheckMolecule, DevUtils, Dot, EXCEPTION_CODES, EXCEPTION_TYPES, EXTENDED_COMPATIBILITY_TEST_VECTORS, ExceptionFactory, GraphQLClient, InvalidResponseException, KnishIO, KnishIOClient, Meta, MolecularHashMismatchException, Molecule, Mutation, MutationAppendRequest, MutationCreateMeta, MutationCreateToken, MutationCreateWallet, MutationPeering, MutationProposeMolecule, MutationRequestAuthorization, MutationRequestTokens, MutationTransferTokens, PolicyMeta, Query, QueryAtom, QueryBalance, QueryBatch, QueryContinuId, QueryEmbeddingStatus, QueryMetaType, QueryMetaTypeViaAtom, QueryWalletBundle, QueryWalletList, Response2 as Response, ResponseAppendRequest, ResponseAtom, ResponseBalance, ResponseContinuId, ResponseCreateMeta, ResponseCreateToken, ResponseCreateWallet, ResponseEmbeddingStatus, ResponseMetaType, ResponseMetaTypeViaAtom, ResponsePeering, ResponseProposeMolecule, ResponseRequestAuthorization, ResponseRequestTokens, ResponseTransferTokens, ResponseWalletBundle, ResponseWalletList, SDK_INFO, SDK_NAME, SDK_VERSION, SignatureMismatchException, TokenUnit, TransferBalanceException, Wallet, WalletCredentialException, base64ToHex, bufferToHexString, capitalize, charsetBaseConvert, chunkArray, chunkSubstr, configureSDK, convertToBase17, createBundleHash, createMolecularHash, createPosition, createTokenSlug, createWalletAddress, deepCloning, diff, enumerateMolecularHash, generateBatchId, generateBundleHash, generateOTSSignature, generatePosition, generateSecret, generateWalletAddress, generateWalletKey, getSDKConfig, hexStringToBuffer, hexToBase64, intersect, isAtomIsotope, isBundleHash, isHex, isHexString, isMolecularHash, isNumeric, isPosition2 as isPosition, isWalletAddress2 as isWalletAddress, normalizeMolecularHash, randomString, runCompatibilityTests, runExtendedCompatibilityTests, shake256, toCamelCase, toSnakeCase, truncate, validateBundleHash, validateMolecularHashForSignature, validateOTSSignature, validatePosition, validateSecret, validateWalletAddress, verifyOTSSignature };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map