@wishknish/knishio-client-ts 0.9.4 → 0.9.6

package/dist/index.js

@@ -2172,11 +2172,9 @@ function verifyOTSSignature(otsFragments, molecularHash, signingAddress) {
     const base17Hash = convertToBase17(molecularHash);
     const enumerated = enumerateMolecularHash(base17Hash);
     const normalized = normalizeMolecularHash(enumerated);
-    let ots = otsFragments;
+    const ots = otsFragments;
     if (ots.length !== 2048) {
-      if (ots.length !== 2048) {
-        return false;
-      }
+      return false;
     }
     const otsChunks = [];
     for (let i = 0; i < ots.length; i += CRYPTO_CONSTANTS.KEY_FRAGMENT_SIZE) {
@@ -2679,6 +2677,123 @@ var Meta = class {
     });
   }
 };
+
+// src/libraries/array.ts
+function deepCloning(o, h) {
+  let i;
+  let r;
+  let x;
+  const t = [Array, Date, Number, String, Boolean];
+  const s = Object.prototype.toString;
+  h = h || [];
+  for (i = 0; i < h.length; i += 2) {
+    if (o === h[i]) {
+      return h[i + 1];
+    }
+  }
+  if (!r && o && typeof o === "object") {
+    r = {};
+    for (i = 0; i < t.length; i++) {
+      if (s.call(o) === s.call(x = new t[i](o))) {
+        r = i ? x : [];
+      }
+    }
+    h.push(o, r);
+    for (i in o) {
+      if (Object.prototype.hasOwnProperty.call(o, i)) {
+        r[i] = deepCloning(o[i], h);
+      }
+    }
+  }
+  return r || o;
+}
+function chunkArray(arr, size) {
+  const chunks = [];
+  for (let i = 0; i < arr.length; i += size) {
+    chunks.push(arr.slice(i, i + size));
+  }
+  return chunks;
+}
+function diff(...arrays) {
+  return [].concat(...arrays.map((arr, i) => {
+    const others = arrays.slice(0);
+    others.splice(i, 1);
+    const unique = [...new Set([].concat(...others))];
+    return arr.filter((item) => !unique.includes(item));
+  }));
+}
+function intersect(...arrays) {
+  if (arrays.length === 0) return [];
+  if (arrays.length === 1) return arrays[0];
+  return arrays.reduce(
+    (first, second) => first.filter((item) => second.includes(item))
+  );
+}
+
+// src/core/PolicyMeta.ts
+var PolicyMeta = class _PolicyMeta {
+  policy;
+  /**
+   * Create new PolicyMeta instance
+   * Matches JavaScript SDK constructor signature exactly
+   */
+  constructor(policy = {}, metaKeys = []) {
+    this.policy = _PolicyMeta.normalizePolicy(policy);
+    this.fillDefault(metaKeys);
+  }
+  /**
+   * Normalize policy object structure
+   * Matches JavaScript SDK normalizePolicy method exactly
+   */
+  static normalizePolicy(policy = {}) {
+    const policyMeta = {};
+    for (const [policyKey, value] of Object.entries(policy)) {
+      if (value !== null && ["read", "write"].includes(policyKey)) {
+        policyMeta[policyKey] = {};
+        for (const [key, content] of Object.entries(value)) {
+          policyMeta[policyKey][key] = content;
+        }
+      }
+    }
+    return policyMeta;
+  }
+  /**
+   * Fill default policy values for metadata keys
+   * Matches JavaScript SDK fillDefault method exactly
+   */
+  fillDefault(metaKeys = []) {
+    const readPolicy = Array.from(this.policy).filter((item) => item.action === "read");
+    const writePolicy = Array.from(this.policy).filter((item) => item.action === "write");
+    for (const [type, value] of Object.entries({
+      read: readPolicy,
+      write: writePolicy
+    })) {
+      const policyKey = value.map((item) => item.key);
+      if (!this.policy[type]) {
+        this.policy[type] = {};
+      }
+      for (const key of diff(metaKeys, policyKey)) {
+        if (!this.policy[type][key]) {
+          this.policy[type][key] = type === "write" && !["characters", "pubkey"].includes(key) ? ["self"] : ["all"];
+        }
+      }
+    }
+  }
+  /**
+   * Get the policy object
+   * Matches JavaScript SDK get method exactly
+   */
+  get() {
+    return this.policy;
+  }
+  /**
+   * Convert policy to JSON string
+   * Matches JavaScript SDK toJson method exactly
+   */
+  toJson() {
+    return JSON.stringify(this.get());
+  }
+};
 var AtomMeta = class _AtomMeta {
   meta;
   /**
@@ -2774,8 +2889,9 @@ var AtomMeta = class _AtomMeta {
    * @return This instance for chaining
    */
   addPolicy(policy) {
+    const policyMeta = new PolicyMeta(policy, Object.keys(this.meta));
     this.merge({
-      policy: JSON.stringify(policy)
+      policy: policyMeta.toJson()
     });
     return this;
   }
@@ -3408,6 +3524,87 @@ function createMolecularHash(value) {
   }
   return value;
 }
+
+// src/core/TokenUnit.ts
+var TokenUnit = class _TokenUnit {
+  id;
+  name;
+  metas;
+  /**
+   * Create new TokenUnit instance
+   * Matches JavaScript SDK constructor signature exactly
+   */
+  constructor(id, name, metas) {
+    this.id = id;
+    this.name = name;
+    this.metas = metas || {};
+  }
+  /**
+   * Create TokenUnit from GraphQL response data
+   * Matches JavaScript SDK createFromGraphQL method exactly
+   */
+  static createFromGraphQL(data) {
+    let metas = data.metas || {};
+    if (Array.isArray(metas) && metas.length) {
+      try {
+        metas = JSON.parse(metas);
+        if (!metas) {
+          metas = {};
+        }
+      } catch (error) {
+        metas = {};
+      }
+    }
+    return new _TokenUnit(
+      data.id,
+      data.name,
+      metas
+    );
+  }
+  /**
+   * Create TokenUnit from database array data
+   * Matches JavaScript SDK createFromDB method exactly
+   */
+  static createFromDB(data) {
+    return new _TokenUnit(
+      data[0],
+      data[1],
+      data.length > 2 ? data[2] : {}
+    );
+  }
+  /**
+   * Get fragment zone from metadata
+   * Matches JavaScript SDK getFragmentZone method exactly
+   */
+  getFragmentZone() {
+    return this.metas.fragmentZone || null;
+  }
+  /**
+   * Get fused token units from metadata
+   * Matches JavaScript SDK getFusedTokenUnits method exactly
+   */
+  getFusedTokenUnits() {
+    return this.metas.fusedTokenUnits || null;
+  }
+  /**
+   * Convert to data array format
+   * Matches JavaScript SDK toData method exactly
+   */
+  toData() {
+    return [this.id, this.name, this.metas];
+  }
+  /**
+   * Convert to GraphQL response format
+   * Matches JavaScript SDK toGraphQLResponse method exactly
+   */
+  toGraphQLResponse() {
+    return {
+      id: this.id,
+      name: this.name,
+      metas: JSON.stringify(this.metas)
+    };
+  }
+};
 var Wallet = class _Wallet {
   token;
   balance;
@@ -3548,11 +3745,13 @@ var Wallet = class _Wallet {
     return typeof maybeBundleHash === "string" && isBundleHash(maybeBundleHash);
   }
   /**
-   * Get formatted token units from raw data
-   * Stub implementation for now
+   * Map raw token-unit tuples to TokenUnit instances.
+   * Matches JS SDK Wallet.getTokenUnits (Wallet.js:190-196). The serialised shape reaches hashed
+   * atom meta via AtomMeta.setAtomWallet -> JSON.stringify(getTokenUnitsData()), so returning raw
+   * tuples here would diverge from every other SDK.
    */
   static getTokenUnits(unitsData) {
-    return unitsData;
+    return unitsData.map((unitData) => TokenUnit.createFromDB(unitData));
   }
   /**
    * Create a remainder wallet for transactions
@@ -3833,6 +4032,14 @@ var Wallet = class _Wallet {
 };
 var hexStringRegex = /^[0-9a-fA-F]+$/;
 var base17HashRegex = /^[0-9a-g]+$/;
+var urlString = (message = "Invalid URL") => z.string().refine((value) => {
+  try {
+    new URL(value);
+    return true;
+  } catch {
+    return false;
+  }
+}, message);
 z.string().regex(hexStringRegex, "Must be a valid hexadecimal string").brand();
 var WalletAddressSchema = z.string().regex(hexStringRegex, "Wallet address must be hexadecimal").length(64, "Wallet address must be exactly 64 characters").brand();
 var BundleHashSchema = z.string().regex(hexStringRegex, "Bundle hash must be hexadecimal").length(64, "Bundle hash must be exactly 64 characters").brand();
@@ -3841,10 +4048,10 @@ z.string().regex(base17HashRegex, "Molecular hash must be base17 format (0-9,a-g
 var TokenSlugSchema = z.string().min(1, "Token slug cannot be empty").max(64, "Token slug cannot exceed 64 characters").transform((val) => val.toUpperCase()).brand();
 var MetaTypeSchema = z.string().min(1, "Meta type cannot be empty").max(256, "Meta type cannot exceed 256 characters").brand();
 var MetaIdSchema = z.string().min(1, "Meta ID cannot be empty").brand();
-var BatchIdSchema = z.string().min(1, "Batch ID cannot be empty").brand();
+var BatchIdSchema = z.string().regex(/^[0-9a-fA-F]{64}$/, "Batch ID must be 64 hexadecimal characters").brand();
 var CellSlugSchema = z.string().min(1, "Cell slug cannot be empty").max(64, "Cell slug cannot exceed 64 characters").brand();
 var AtomIsotopeSchema = z.enum(["C", "V", "U", "T", "M", "I", "R", "B", "F"], {
-  errorMap: () => ({ message: "Invalid atom isotope. Must be one of: C, V, U, T, M, I, R, B, F" })
+  error: "Invalid atom isotope. Must be one of: C, V, U, T, M, I, R, B, F"
 });
 var MetaDataValueSchema = z.union([
   z.string(),
@@ -3857,7 +4064,7 @@ var AtomMetaDataSchema = z.object({
   value: MetaDataValueSchema
 }).strict();
 var MetaDataSchema = z.lazy(
-  () => z.record(z.union([
+  () => z.record(z.string(), z.union([
     MetaDataValueSchema,
     MetaDataSchema,
     z.array(MetaDataSchema)
@@ -3896,7 +4103,7 @@ z.object({
   version: z.number().int().min(1).optional()
 }).strict();
 z.object({
-  uri: z.union([z.string().url(), z.array(z.string().url())]).optional(),
+  uri: z.union([urlString(), z.array(urlString())]).optional(),
   cellSlug: z.union([CellSlugSchema, z.string(), z.null()]).optional(),
   client: z.unknown().optional(),
   socket: z.unknown().optional(),
@@ -3913,7 +4120,7 @@ z.object({
 z.object({
   cellSlug: z.union([CellSlugSchema, z.string(), z.null()]).optional(),
   encrypt: z.boolean().optional(),
-  callback: z.function().args(z.unknown()).returns(z.void()).optional()
+  callback: z.custom((value) => typeof value === "function").optional()
 }).strict();
 z.object({
   cellSlug: z.union([CellSlugSchema, z.string(), z.null()]).optional()
@@ -3922,7 +4129,7 @@ z.object({
   recipient: z.union([WalletAddressSchema, z.string()]),
   amount: z.union([z.number().positive(), z.string().min(1)]),
   token: z.union([TokenSlugSchema, z.string()]).optional(),
-  callbackUrl: z.union([z.string().url(), z.null()]).optional(),
+  callbackUrl: z.union([urlString(), z.null()]).optional(),
   metaType: z.union([MetaTypeSchema, z.string(), z.null()]).optional(),
   metaId: z.union([MetaIdSchema, z.string(), z.null()]).optional(),
   meta: z.union([MetaDataSchema, z.null()]).optional()
@@ -3963,7 +4170,7 @@ z.object({
   value: z.union([z.string(), z.null()]).optional(),
   latest: z.union([z.boolean(), z.null()]).optional(),
   filter: z.union([z.array(MetaFilterSchema), z.null()]).optional(),
-  queryArgs: z.union([z.record(z.unknown()), z.null()]).optional(),
+  queryArgs: z.union([z.record(z.string(), z.unknown()), z.null()]).optional(),
   count: z.union([z.number().int().min(1), z.null()]).optional(),
   countBy: z.union([z.string(), z.null()]).optional(),
   cellSlug: z.union([CellSlugSchema, z.string(), z.null()]).optional()
@@ -3988,7 +4195,7 @@ z.object({
 }).strict();
 z.object({
   query: z.string().min(1, "GraphQL query cannot be empty"),
-  variables: z.record(z.unknown()).optional(),
+  variables: z.record(z.string(), z.unknown()).optional(),
   operationName: z.union([z.string(), z.null()]).optional()
 }).strict();
 var GraphQLErrorSchema = z.object({
@@ -3998,18 +4205,18 @@ var GraphQLErrorSchema = z.object({
     column: z.number().int().min(1)
   })).optional(),
   path: z.array(z.union([z.string(), z.number()])).optional(),
-  extensions: z.record(z.unknown()).optional()
+  extensions: z.record(z.string(), z.unknown()).optional()
 }).strict();
 z.object({
   data: z.unknown().optional(),
   errors: z.array(GraphQLErrorSchema).nullable().optional(),
-  extensions: z.record(z.unknown()).optional()
+  extensions: z.record(z.string(), z.unknown()).optional()
 }).strict();
 z.object({
   operationName: z.string().optional(),
   query: z.string().optional(),
-  variables: z.record(z.unknown()).optional(),
-  callback: z.function().args(z.unknown()).returns(z.void()).optional()
+  variables: z.record(z.string(), z.unknown()).optional(),
+  callback: z.custom((value) => typeof value === "function").optional()
 }).strict();
 z.object({
   valid: z.boolean(),
@@ -4019,7 +4226,7 @@ z.object({
 }).strict();
 z.object({
   operation: z.string().optional(),
-  parameters: z.record(z.unknown()).optional(),
+  parameters: z.record(z.string(), z.unknown()).optional(),
   timestamp: z.number().int().min(0).optional(),
   stack: z.string().optional()
 }).strict();
@@ -4165,65 +4372,13 @@ var RuleArgumentException = class extends BaseException {
 };
 var RuleArgumentException_default = RuleArgumentException;
 
-// src/libraries/array.ts
-function deepCloning(o, h) {
-  let i;
-  let r;
-  let x;
-  const t = [Array, Date, Number, String, Boolean];
-  const s = Object.prototype.toString;
-  h = h || [];
-  for (i = 0; i < h.length; i += 2) {
-    if (o === h[i]) {
-      return h[i + 1];
-    }
-  }
-  if (!r && o && typeof o === "object") {
-    r = {};
-    for (i = 0; i < t.length; i++) {
-      if (s.call(o) === s.call(x = new t[i](o))) {
-        r = i ? x : [];
-      }
-    }
-    h.push(o, r);
-    for (i in o) {
-      if (Object.prototype.hasOwnProperty.call(o, i)) {
-        r[i] = deepCloning(o[i], h);
-      }
-    }
-  }
-  return r || o;
-}
-function chunkArray(arr, size) {
-  const chunks = [];
-  for (let i = 0; i < arr.length; i += size) {
-    chunks.push(arr.slice(i, i + size));
-  }
-  return chunks;
-}
-function diff(...arrays) {
-  return [].concat(...arrays.map((arr, i) => {
-    const others = arrays.slice(0);
-    others.splice(i, 1);
-    const unique = [...new Set([].concat(...others))];
-    return arr.filter((item) => !unique.includes(item));
-  }));
-}
-function intersect(...arrays) {
-  if (arrays.length === 0) return [];
-  if (arrays.length === 1) return arrays[0];
-  return arrays.reduce(
-    (first, second) => first.filter((item) => second.includes(item))
-  );
-}
-
 // src/instance/rules/Callback.ts
 init_exception();
 var CallbackParamsSchema = z.object({
   action: z.string().min(1, "Action cannot be empty"),
   metaType: z.union([z.string(), z.null()]).optional(),
   metaId: z.union([z.string(), z.null()]).optional(),
-  meta: z.union([z.instanceof(Meta2), z.record(z.unknown()), z.null()]).optional(),
+  meta: z.union([z.instanceof(Meta2), z.record(z.string(), z.unknown()), z.null()]).optional(),
   address: z.union([z.string(), z.null()]).optional(),
   token: z.union([z.string(), z.null()]).optional(),
   amount: z.union([z.string(), z.null()]).optional(),
@@ -5547,6 +5702,51 @@ var Molecule = class _Molecule {
     }));
     return this;
   }
+  /**
+   * Replenishes non-finite token supplies.
+   * Matches JS SDK Molecule.replenishToken (Molecule.js:521-566) exactly.
+   *
+   * Two orderings here are load-bearing for the molecular hash and must not be reordered:
+   * the remainder balance is computed BEFORE the source balance is overwritten, and the
+   * source V-atom is added BEFORE the remainder V-atom.
+   */
+  replenishToken({
+    amount,
+    units = []
+  }) {
+    if (amount < 0) {
+      throw new NegativeAmountException("Molecule::replenishToken() - Amount to replenish must be positive!");
+    }
+    if (!this.sourceWallet || !this.remainderWallet) {
+      throw new Error("Source and remainder wallets required for token replenishment");
+    }
+    if (units.length) {
+      const formatted = Wallet.getTokenUnits(units);
+      this.remainderWallet.tokenUnits = this.sourceWallet.tokenUnits;
+      for (const unit of formatted) {
+        this.remainderWallet.tokenUnits.push(unit);
+      }
+      this.remainderWallet.balance = String(this.remainderWallet.tokenUnits.length);
+      this.sourceWallet.tokenUnits = formatted;
+      this.sourceWallet.balance = String(this.sourceWallet.tokenUnits.length);
+    } else {
+      this.remainderWallet.balance = String(Number(this.sourceWallet.balance) + amount);
+      this.sourceWallet.balance = String(amount);
+    }
+    this.addAtom(Atom.create({
+      isotope: "V",
+      wallet: this.sourceWallet,
+      value: Number(this.sourceWallet.balance)
+    }));
+    this.addAtom(Atom.create({
+      isotope: "V",
+      wallet: this.remainderWallet,
+      value: Number(this.remainderWallet.balance),
+      metaType: "walletBundle",
+      metaId: this.remainderWallet.bundle
+    }));
+    return this;
+  }
   /**
    * Initialize authorization request
    * Creates U-isotope (authorization) atom for requesting auth token
@@ -6081,16 +6281,27 @@ var GraphQLClient = class {
     return createClient$1({
       url: serverUri,
       exchanges,
-      // PQ-transport Phase E: when encryption is on, route fetch through the CipherHash wrapper
-      // (encrypt the request body to the validator's ML-KEM pubkey, decrypt the response).
-      // Omitted → urql uses the global fetch (plaintext).
-      ...this.cipherLink ? { fetch: ((input, init) => this.cipherFetch(input, init)) } : {},
+      // urql 5 had no default and always POSTed; urql 6 defaults to 'within-url-limit', which
+      // URL-encodes short queries and sends NO body. That would silently disable the CipherHash
+      // envelope below — cipherFetch's `typeof init.body === 'string'` guard fails on a GET, so
+      // the query would leave as plaintext URL parameters with no error. Pin POST explicitly.
+      preferGetMethod: false,
+      // Always route through our own fetch. Two reasons: (1) PQ-transport Phase E — when
+      // encryption is on, cipherFetch wraps the request body in the CipherHash envelope and
+      // decrypts the response; (2) the 60s timeout. urql's makeFetchSource unconditionally
+      // overwrites init.signal with its own AbortController, so a signal returned from
+      // fetchOptions() is discarded and never fired. Combining it here is the only place it
+      // survives.
+      fetch: ((input, init) => {
+        const timeoutSignal = AbortSignal.timeout(6e4);
+        const signal = init?.signal && typeof AbortSignal.any === "function" ? AbortSignal.any([init.signal, timeoutSignal]) : init?.signal ?? timeoutSignal;
+        const timedInit = { ...init, signal };
+        return this.cipherLink ? this.cipherFetch(input, timedInit) : fetch(input, timedInit);
+      }),
       fetchOptions: () => ({
         headers: {
           "X-Auth-Token": this.$__authToken
-        },
-        // Add 60 second timeout
-        signal: AbortSignal.timeout(6e4)
+        }
       })
     });
   }
@@ -6570,6 +6781,14 @@ var Mutation = class extends Query {
     }
   }
 };
+var urlString2 = (message = "Invalid URL") => z.string().refine((value) => {
+  try {
+    new URL(value);
+    return true;
+  } catch {
+    return false;
+  }
+}, message);
 function createBrandedSchema(name, baseSchema = z.string()) {
   return baseSchema.brand(name);
 }
@@ -6595,7 +6814,12 @@ var TokenSlugSchema2 = createBrandedSchema(
 );
 var BatchIdSchema2 = createBrandedSchema(
   "BatchId",
-  z.string().uuid("Invalid batch ID format")
+  // 64 hex characters. generateBatchId (src/libraries/crypto.ts) returns either
+  // shake256(molecularHash + index, 256) — 256 bits, 64 hex chars — or randomString(64) over the
+  // alphabet 'abcdef0123456789'. A UUID shape matches nothing this SDK can produce, so the
+  // previous 8-4-4-4-12 regex rejected every real batch ID. Agrees with isBatchId in
+  // src/types/guards.ts.
+  z.string().regex(/^[0-9a-fA-F]{64}$/, "Invalid batch ID format")
 );
 var CellSlugSchema2 = createBrandedSchema(
   "CellSlug",
@@ -6639,7 +6863,7 @@ var AtomMetaDataSchema2 = z.object({
 z.object({
   key: z.string(),
   value: z.union([z.string(), z.number(), z.boolean(), z.null()])
-}).passthrough();
+}).loose();
 var AtomParamsSchema2 = z.object({
   position: z.string().optional(),
   walletAddress: z.union([WalletAddressSchema2, z.string()]).optional(),
@@ -6674,8 +6898,8 @@ var MoleculeParamsSchema2 = z.object({
 }).strict();
 var KnishIOClientConfigSchema2 = z.object({
   uri: z.union([
-    z.string().url("Invalid URI format"),
-    z.array(z.string().url("Invalid URI format")).min(1)
+    urlString2("Invalid URI format"),
+    z.array(urlString2("Invalid URI format")).min(1)
   ]).optional(),
   cellSlug: z.union([CellSlugSchema2, z.string()]).optional(),
   client: z.unknown().optional(),
@@ -6688,11 +6912,11 @@ var KnishIOClientConfigSchema2 = z.object({
   defaultRequestPolicy: z.enum(["cache-first", "cache-only", "network-only", "cache-and-network"]).nullable().optional()
 }).strict();
 var EnvironmentConfigSchema = z.object({
-  NODE_ENV: z.enum(["development", "production", "test"]).default("development"),
-  KNISHIO_NODE_URI: z.string().url().optional(),
+  NODE_ENV: z.enum(["development", "production", "test"]).optional(),
+  KNISHIO_NODE_URI: urlString2().optional(),
   KNISHIO_CELL_SLUG: z.string().optional(),
-  KNISHIO_LOGGING: z.string().transform((val) => val === "true").default("false"),
-  KNISHIO_SERVER_SDK_VERSION: z.string().transform((val) => parseInt(val, 10)).default("4")
+  KNISHIO_LOGGING: z.string().transform((val) => val === "true").optional(),
+  KNISHIO_SERVER_SDK_VERSION: z.string().transform((val) => parseInt(val, 10)).optional()
 }).partial();
 var TransferParamsSchema2 = z.object({
   recipient: z.union([WalletAddressSchema2, z.string()]),
@@ -6701,7 +6925,7 @@ var TransferParamsSchema2 = z.object({
     "Amount must be positive"
   ),
   token: z.union([TokenSlugSchema2, z.string()]).optional(),
-  callbackUrl: z.string().url().optional(),
+  callbackUrl: urlString2().optional(),
   metaType: z.string().optional(),
   metaId: z.string().optional(),
   meta: MetaDataSchema2.optional()
@@ -6742,7 +6966,7 @@ var MetaQueryParamsSchema2 = z.object({
   value: z.string().optional(),
   latest: z.boolean().optional(),
   filter: z.string().optional(),
-  queryArgs: z.record(z.unknown()).optional(),
+  queryArgs: z.record(z.string(), z.unknown()).optional(),
   count: z.number().int().min(0).optional(),
   countBy: z.string().optional(),
   cellSlug: z.union([CellSlugSchema2, z.string()]).optional()
@@ -6761,14 +6985,14 @@ var AuthTokenParamsSchema2 = z.object({
 var AuthParamsSchema2 = z.object({
   cellSlug: z.union([CellSlugSchema2, z.string()]).optional(),
   encrypt: z.boolean().optional(),
-  callback: z.function().optional()
+  callback: z.custom((value) => typeof value === "function").optional()
 }).strict();
 var GuestAuthParamsSchema2 = z.object({
   cellSlug: z.union([CellSlugSchema2, z.string()]).optional()
 }).strict();
 var GraphQLRequestSchema2 = z.object({
   query: z.string().min(1),
-  variables: z.record(z.unknown()).optional(),
+  variables: z.record(z.string(), z.unknown()).optional(),
   operationName: z.string().optional()
 }).strict();
 var GraphQLErrorSchema2 = z.object({
@@ -6778,12 +7002,12 @@ var GraphQLErrorSchema2 = z.object({
     column: z.number().int()
   })).optional(),
   path: z.array(z.union([z.string(), z.number()])).optional(),
-  extensions: z.record(z.unknown()).optional()
+  extensions: z.record(z.string(), z.unknown()).optional()
 }).strict();
 var GraphQLResponseSchema2 = z.object({
   data: z.unknown().optional(),
   errors: z.array(GraphQLErrorSchema2).optional(),
-  extensions: z.record(z.unknown()).optional()
+  extensions: z.record(z.string(), z.unknown()).optional()
 }).strict();
 function safeParse(schema, data) {
   const result = schema.safeParse(data);
@@ -6793,7 +7017,7 @@ function safeParse(schema, data) {
       error: {
         issues: result.error.issues,
         message: result.error.message,
-        formatted: result.error.format()
+        formatted: z.treeifyError(result.error)
       }
     };
   }
@@ -7498,89 +7722,6 @@ var ConfigValidator = class _ConfigValidator {
 
 // src/response/ResponseBalance.ts
 init_Response();
-
-// src/core/TokenUnit.ts
-var TokenUnit = class _TokenUnit {
-  id;
-  name;
-  metas;
-  /**
-   * Create new TokenUnit instance
-   * Matches JavaScript SDK constructor signature exactly
-   */
-  constructor(id, name, metas) {
-    this.id = id;
-    this.name = name;
-    this.metas = metas || {};
-  }
-  /**
-   * Create TokenUnit from GraphQL response data
-   * Matches JavaScript SDK createFromGraphQL method exactly
-   */
-  static createFromGraphQL(data) {
-    let metas = data.metas || {};
-    if (Array.isArray(metas) && metas.length) {
-      try {
-        metas = JSON.parse(metas);
-        if (!metas) {
-          metas = {};
-        }
-      } catch (error) {
-        metas = {};
-      }
-    }
-    return new _TokenUnit(
-      data.id,
-      data.name,
-      metas
-    );
-  }
-  /**
-   * Create TokenUnit from database array data
-   * Matches JavaScript SDK createFromDB method exactly
-   */
-  static createFromDB(data) {
-    return new _TokenUnit(
-      data[0],
-      data[1],
-      data.length > 2 ? data[2] : {}
-    );
-  }
-  /**
-   * Get fragment zone from metadata
-   * Matches JavaScript SDK getFragmentZone method exactly
-   */
-  getFragmentZone() {
-    return this.metas.fragmentZone || null;
-  }
-  /**
-   * Get fused token units from metadata
-   * Matches JavaScript SDK getFusedTokenUnits method exactly
-   */
-  getFusedTokenUnits() {
-    return this.metas.fusedTokenUnits || null;
-  }
-  /**
-   * Convert to data array format
-   * Matches JavaScript SDK toData method exactly
-   */
-  toData() {
-    return [this.id, this.name, this.metas];
-  }
-  /**
-   * Convert to GraphQL response format
-   * Matches JavaScript SDK toGraphQLResponse method exactly
-   */
-  toGraphQLResponse() {
-    return {
-      id: this.id,
-      name: this.name,
-      metas: JSON.stringify(this.metas)
-    };
-  }
-};
-
-// src/response/ResponseBalance.ts
 var ResponseBalance = class _ResponseBalance extends Response2 {
   /**
    * Class constructor
@@ -10089,6 +10230,12 @@ var MutationAppendRequest = class extends MutationProposeMolecule {
   }
 };
 
+// src/mutation/MutationReplenishToken.ts
+var MutationReplenishToken = class extends MutationProposeMolecule {
+  fillMolecule() {
+  }
+};
+
 // src/subscribe/Subscribe.ts
 init_exception();
 var Subscribe = class {
@@ -11522,20 +11669,42 @@ var KnishIOClient = class {
     return response;
   }
   /**
-   * Replenish tokens
+   * Replenish a non-finite token supply.
+   * Matches JS SDK KnishIOClient.replenishToken (KnishIOClient.js:2195-2231).
    */
   async replenishToken({
     token,
     amount = null,
     units = null,
-    sourceWallet: _sourceWallet = null
+    sourceWallet = null
   }) {
     this.log("info", `KnishIOClient::replenishToken() - Replenishing ${amount || "units"} of ${token}...`);
-    return this.requestTokens({
-      token,
-      amount,
-      units
+    if (!sourceWallet) {
+      sourceWallet = (await this.queryBalance({ token }))?.payload();
+    }
+    if (!sourceWallet) {
+      throw new TransferBalanceException("Source wallet is missing or invalid.");
+    }
+    const remainderWallet = sourceWallet.createRemainder(this.getSecret());
+    const molecule = await this.createMolecule({
+      sourceWallet,
+      remainderWallet
+    });
+    molecule.replenishToken({
+      amount: Number(amount ?? 0),
+      units: units ?? []
+    });
+    molecule.sign({ bundle: this.getBundle() });
+    molecule.check();
+    const mutation = await this.createMoleculeMutation({
+      mutationClass: MutationReplenishToken,
+      molecule
     });
+    const response = await this.executeQuery(mutation);
+    if (!response) {
+      throw new CodeException("Token replenishment failed");
+    }
+    return response;
   }
   /**
    * Fuse token units
@@ -11986,75 +12155,8 @@ var KnishIOClient = class {
 
 // src/index.ts
 init_Response();
-
-// src/core/PolicyMeta.ts
-var PolicyMeta = class _PolicyMeta {
-  policy;
-  /**
-   * Create new PolicyMeta instance
-   * Matches JavaScript SDK constructor signature exactly
-   */
-  constructor(policy = {}, metaKeys = []) {
-    this.policy = _PolicyMeta.normalizePolicy(policy);
-    this.fillDefault(metaKeys);
-  }
-  /**
-   * Normalize policy object structure
-   * Matches JavaScript SDK normalizePolicy method exactly
-   */
-  static normalizePolicy(policy = {}) {
-    const policyMeta = {};
-    for (const [policyKey, value] of Object.entries(policy)) {
-      if (value !== null && ["read", "write"].includes(policyKey)) {
-        policyMeta[policyKey] = {};
-        for (const [key, content] of Object.entries(value)) {
-          policyMeta[policyKey][key] = content;
-        }
-      }
-    }
-    return policyMeta;
-  }
-  /**
-   * Fill default policy values for metadata keys
-   * Matches JavaScript SDK fillDefault method exactly
-   */
-  fillDefault(metaKeys = []) {
-    const readPolicy = Array.from(this.policy).filter((item) => item.action === "read");
-    const writePolicy = Array.from(this.policy).filter((item) => item.action === "write");
-    for (const [type, value] of Object.entries({
-      read: readPolicy,
-      write: writePolicy
-    })) {
-      const policyKey = value.map((item) => item.key);
-      if (!this.policy[type]) {
-        this.policy[type] = {};
-      }
-      for (const key of diff(metaKeys, policyKey)) {
-        if (!this.policy[type][key]) {
-          this.policy[type][key] = type === "write" && !["characters", "pubkey"].includes(key) ? ["self"] : ["all"];
-        }
-      }
-    }
-  }
-  /**
-   * Get the policy object
-   * Matches JavaScript SDK get method exactly
-   */
-  get() {
-    return this.policy;
-  }
-  /**
-   * Convert policy to JSON string
-   * Matches JavaScript SDK toJson method exactly
-   */
-  toJson() {
-    return JSON.stringify(this.get());
-  }
-};
-
-// src/index.ts
 init_exception();
-var SDK_VERSION = "1.0.0";
+var SDK_VERSION = "0.9.6";
 var SDK_NAME = "KnishIO-Client-TS";
 var COMPATIBLE_SERVER_VERSIONS = [4, 5];
 var SDK_INFO = {