crypto-aio 0.0.3 → 0.1.0

package/dist/adapters/solana/web3.js

@@ -0,0 +1,83 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.web3DriverFactory = void 0;
+exports.createWeb3Codec = createWeb3Codec;
+/**
+ * The only module that imports `@solana/web3.js`: program-derived addresses, legacy
+ * message compilation and the `crypto-aio/native` `Connection`. It is never on a driver
+ * request path: `Connection` retries HTTP 429 on a real timer and would drop the call's
+ * tags, so the driver sends every request straight to the transport, and the native
+ * `Connection` reaches the same transport through `transport.createFetch`.
+ */
+const web3_js_1 = require("@solana/web3.js");
+const types_1 = require("../../core/transport/types");
+const driver_1 = require("./driver");
+const programs_1 = require("./programs");
+const rpc_1 = require("./rpc");
+const TOKEN = new web3_js_1.PublicKey(programs_1.TOKEN_PROGRAM);
+const ASSOCIATED_TOKEN = new web3_js_1.PublicKey(programs_1.ASSOCIATED_TOKEN_PROGRAM);
+/**
+ * The tags of a native client's requests: broadcasts for its writes (a transaction send
+ * and a faucet airdrop, neither safe to retry as a read), plain reads for the rest.
+ */
+function classify(_url, init) {
+    const body = typeof init?.body === 'string' ? init.body : '';
+    return /"method"\s*:\s*"(?:sendTransaction|requestAirdrop)"/.test(body)
+        ? rpc_1.BROADCAST
+        : rpc_1.READ;
+}
+function createWeb3Codec(transport) {
+    return {
+        associatedTokenAddress(owner, mint) {
+            const [address] = web3_js_1.PublicKey.findProgramAddressSync([
+                new web3_js_1.PublicKey(owner).toBuffer(),
+                TOKEN.toBuffer(),
+                new web3_js_1.PublicKey(mint).toBuffer(),
+            ], ASSOCIATED_TOKEN);
+            return address.toBase58();
+        },
+        compileMessage(payer, recentBlockhash, instructions) {
+            const message = new web3_js_1.TransactionMessage({
+                payerKey: new web3_js_1.PublicKey(payer),
+                recentBlockhash,
+                instructions: instructions.map((ix) => new web3_js_1.TransactionInstruction({
+                    programId: new web3_js_1.PublicKey(ix.programId),
+                    keys: ix.accounts.map((a) => ({
+                        pubkey: new web3_js_1.PublicKey(a.address),
+                        isSigner: a.signer,
+                        isWritable: a.writable,
+                    })),
+                    data: Buffer.from(ix.data),
+                })),
+            }).compileToLegacyMessage();
+            return new Uint8Array(message.serialize());
+        },
+        createNative() {
+            const connection = new web3_js_1.Connection(`${types_1.PLACEHOLDER_ORIGIN}/`, {
+                commitment: 'confirmed',
+                fetch: transport.createFetch(classify),
+                httpAgent: false,
+                disableRetryOnRateLimit: true,
+            });
+            return {
+                client: connection,
+                close: () => {
+                    // Subscriptions have no transport bridge, so a socket client that was used only
+                    // ever fails against the placeholder host and retries on a timer. Turn retries
+                    // off (a flag: it does not cancel a retry already armed), cancel the armed one
+                    // (while it waits there is no socket, so `close()` alone does nothing), then
+                    // close the socket if there is one.
+                    const socket = connection._rpcWebSocket;
+                    if (!socket)
+                        return;
+                    socket.setAutoReconnect(false);
+                    clearTimeout(socket.reconnect_timer_id);
+                    socket.close();
+                },
+            };
+        },
+    };
+}
+/** The `@solana/web3.js` adapter's driver factory; the manifest's `load()` returns it. */
+exports.web3DriverFactory = (0, driver_1.solanaDriverFactory)(createWeb3Codec);
+//# sourceMappingURL=web3.js.map

package/dist/adapters/solana/web3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web3.js","sourceRoot":"","sources":["../../../src/adapters/solana/web3.ts"],"names":[],"mappings":";;;AAiCA,0CAgEC;AAjGD;;;;;;GAMG;AACH,6CAKyB;AACzB,sDAAgF;AAChF,qCAA+C;AAC/C,yCAAqE;AACrE,+BAAwC;AAGxC,MAAM,KAAK,GAAG,IAAI,mBAAS,CAAC,wBAAa,CAAC,CAAC;AAC3C,MAAM,gBAAgB,GAAG,IAAI,mBAAS,CAAC,mCAAwB,CAAC,CAAC;AAEjE;;;GAGG;AACH,SAAS,QAAQ,CAAC,IAAS,EAAE,IAA6B;IACxD,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC;QACrE,CAAC,CAAC,eAAS;QACX,CAAC,CAAC,UAAI,CAAC;AACX,CAAC;AAED,SAAgB,eAAe,CAAC,SAAoB;IAClD,OAAO;QACL,sBAAsB,CAAC,KAAK,EAAE,IAAI;YAChC,MAAM,CAAC,OAAO,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAChD;gBACE,IAAI,mBAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;gBAC/B,KAAK,CAAC,QAAQ,EAAE;gBAChB,IAAI,mBAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;aAC/B,EACD,gBAAgB,CACjB,CAAC;YACF,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC;QACD,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,YAAY;YACjD,MAAM,OAAO,GAAG,IAAI,4BAAkB,CAAC;gBACrC,QAAQ,EAAE,IAAI,mBAAS,CAAC,KAAK,CAAC;gBAC9B,eAAe;gBACf,YAAY,EAAE,YAAY,CAAC,GAAG,CAC5B,CAAC,EAAE,EAAE,EAAE,CACL,IAAI,gCAAsB,CAAC;oBACzB,SAAS,EAAE,IAAI,mBAAS,CAAC,EAAE,CAAC,SAAS,CAAC;oBACtC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBAC5B,MAAM,EAAE,IAAI,mBAAS,CAAC,CAAC,CAAC,OAAO,CAAC;wBAChC,QAAQ,EAAE,CAAC,CAAC,MAAM;wBAClB,UAAU,EAAE,CAAC,CAAC,QAAQ;qBACvB,CAAC,CAAC;oBACH,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;iBAC3B,CAAC,CACL;aACF,CAAC,CAAC,sBAAsB,EAAE,CAAC;YAC5B,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,YAAY;YACV,MAAM,UAAU,GAAG,IAAI,oBAAU,CAAC,GAAG,0BAAkB,GAAG,EAAE;gBAC1D,UAAU,EAAE,WAAW;gBACvB,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,QAAQ,CAAC;gBACtC,SAAS,EAAE,KAAK;gBAChB,uBAAuB,EAAE,IAAI;aAC9B,CAAC,CAAC;YACH,OAAO;gBACL,MAAM,EAAE,UAAU;gBAClB,KAAK,EAAE,GAAG,EAAE;oBACV,gFAAgF;oBAChF,+EAA+E;oBAC/E,+EAA+E;oBAC/E,6EAA6E;oBAC7E,oCAAoC;oBACpC,MAAM,MAAM,GACV,UAOD,CAAC,aAAa,CAAC;oBAChB,IAAI,CAAC,MAAM;wBAAE,OAAO;oBACpB,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;oBAC/B,YAAY,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;oBACxC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACjB,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC7E,QAAA,iBAAiB,GAAG,IAAA,4BAAmB,EAAC,eAAe,CAAC,CAAC","sourcesContent":["/**\n * The only module that imports `@solana/web3.js`: program-derived addresses, legacy\n * message compilation and the `crypto-aio/native` `Connection`. It is never on a driver\n * request path: `Connection` retries HTTP 429 on a real timer and would drop the call's\n * tags, so the driver sends every request straight to the transport, and the native\n * `Connection` reaches the same transport through `transport.createFetch`.\n */\nimport {\n  Connection,\n  PublicKey,\n  TransactionInstruction,\n  TransactionMessage,\n} from '@solana/web3.js';\nimport { PLACEHOLDER_ORIGIN, type Transport } from '../../core/transport/types';\nimport { solanaDriverFactory } from './driver';\nimport { ASSOCIATED_TOKEN_PROGRAM, TOKEN_PROGRAM } from './programs';\nimport { BROADCAST, READ } from './rpc';\nimport type { SolanaCodec } from './types';\n\nconst TOKEN = new PublicKey(TOKEN_PROGRAM);\nconst ASSOCIATED_TOKEN = new PublicKey(ASSOCIATED_TOKEN_PROGRAM);\n\n/**\n * The tags of a native client's requests: broadcasts for its writes (a transaction send\n * and a faucet airdrop, neither safe to retry as a read), plain reads for the rest.\n */\nfunction classify(_url: URL, init: RequestInit | undefined) {\n  const body = typeof init?.body === 'string' ? init.body : '';\n  return /\"method\"\\s*:\\s*\"(?:sendTransaction|requestAirdrop)\"/.test(body)\n    ? BROADCAST\n    : READ;\n}\n\nexport function createWeb3Codec(transport: Transport): SolanaCodec {\n  return {\n    associatedTokenAddress(owner, mint) {\n      const [address] = PublicKey.findProgramAddressSync(\n        [\n          new PublicKey(owner).toBuffer(),\n          TOKEN.toBuffer(),\n          new PublicKey(mint).toBuffer(),\n        ],\n        ASSOCIATED_TOKEN,\n      );\n      return address.toBase58();\n    },\n    compileMessage(payer, recentBlockhash, instructions) {\n      const message = new TransactionMessage({\n        payerKey: new PublicKey(payer),\n        recentBlockhash,\n        instructions: instructions.map(\n          (ix) =>\n            new TransactionInstruction({\n              programId: new PublicKey(ix.programId),\n              keys: ix.accounts.map((a) => ({\n                pubkey: new PublicKey(a.address),\n                isSigner: a.signer,\n                isWritable: a.writable,\n              })),\n              data: Buffer.from(ix.data),\n            }),\n        ),\n      }).compileToLegacyMessage();\n      return new Uint8Array(message.serialize());\n    },\n    createNative() {\n      const connection = new Connection(`${PLACEHOLDER_ORIGIN}/`, {\n        commitment: 'confirmed',\n        fetch: transport.createFetch(classify),\n        httpAgent: false,\n        disableRetryOnRateLimit: true,\n      });\n      return {\n        client: connection,\n        close: () => {\n          // Subscriptions have no transport bridge, so a socket client that was used only\n          // ever fails against the placeholder host and retries on a timer. Turn retries\n          // off (a flag: it does not cancel a retry already armed), cancel the armed one\n          // (while it waits there is no socket, so `close()` alone does nothing), then\n          // close the socket if there is one.\n          const socket = (\n            connection as unknown as {\n              _rpcWebSocket?: {\n                close(): void;\n                setAutoReconnect(on: boolean): void;\n                reconnect_timer_id?: ReturnType<typeof setTimeout>;\n              };\n            }\n          )._rpcWebSocket;\n          if (!socket) return;\n          socket.setAutoReconnect(false);\n          clearTimeout(socket.reconnect_timer_id);\n          socket.close();\n        },\n      };\n    },\n  };\n}\n\n/** The `@solana/web3.js` adapter's driver factory; the manifest's `load()` returns it. */\nexport const web3DriverFactory = solanaDriverFactory(createWeb3Codec);\n"]}

package/dist/adapters/solana/wire.d.ts

@@ -0,0 +1,62 @@
+/** Solana's compact-u16 ("shortvec") length prefix. */
+export declare function encodeLength(value: number): Uint8Array;
+/**
+ * A compact-u16 at `offset`: its value and the offset after it, or `null`. Only the
+ * canonical form is read, as the runtime reads it: at most three bytes, no zero byte after
+ * the first (an alias of a shorter form), and no value above 65,535.
+ */
+export declare function decodeLength(bytes: Uint8Array, offset: number): {
+    readonly value: number;
+    readonly next: number;
+} | null;
+/** One instruction of a legacy message: its program's key index, account indexes and data. */
+export interface MessageInstruction {
+    readonly program: number;
+    /** Indexes into the message's keys. */
+    readonly accounts: Uint8Array;
+    readonly data: Uint8Array;
+}
+/**
+ * The parts of one well-formed legacy message. Keys, the blockhash, account indexes and data
+ * are views into the message bytes, not copies.
+ */
+export interface MessageParts {
+    /** Signers: the first `required` keys; the fee payer first. */
+    readonly required: number;
+    readonly readonlySigned: number;
+    readonly readonlyUnsigned: number;
+    readonly keys: readonly Uint8Array[];
+    readonly blockhash: Uint8Array;
+    readonly instructions: readonly MessageInstruction[];
+}
+/**
+ * The parts of `message`, or `null` unless it is exactly one well-formed legacy message (the
+ * runtime's sanitize rules): at least one signer, a writable fee payer, signer and read-only
+ * non-signer ranges within the keys, every program and account index within the keys, no
+ * program at index 0, and no trailing bytes. Each count is checked against the bytes that
+ * remain before anything is read, so the work and the views it makes are linear in the input.
+ */
+export declare function parseMessage(message: Uint8Array): MessageParts | null;
+/**
+ * A legacy message's signer addresses, in order, or `null` unless `message` is exactly one
+ * well-formed legacy message (`parseMessage`).
+ */
+export declare function messageSigners(message: Uint8Array): readonly string[] | null;
+/** A signed legacy transaction read back: its signatures, in signer order, and its message. */
+export interface SignedParts {
+    /** Views into the bytes, 64 each; one per required signer. */
+    readonly signatures: readonly Uint8Array[];
+    /** The message bytes the signatures sign (a view). */
+    readonly message: Uint8Array;
+    readonly parts: MessageParts;
+}
+/**
+ * The parts of `bytes`, or `null` unless it is exactly one signed legacy transaction: a
+ * canonical signature count equal to the message's required signers, 64 bytes per
+ * signature, then one well-formed legacy message (`parseMessage`) with nothing after it. No
+ * signature is sliced before the count matches the header, so the work is linear in the
+ * input.
+ */
+export declare function parseSignedTransaction(bytes: Uint8Array): SignedParts | null;
+/** A signed transaction: the signatures (64 bytes each), in signer order, then the message. */
+export declare function signedTransaction(signatures: readonly Uint8Array[], message: Uint8Array): Uint8Array;

package/dist/adapters/solana/wire.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeLength = encodeLength;
+exports.decodeLength = decodeLength;
+exports.parseMessage = parseMessage;
+exports.messageSigners = messageSigners;
+exports.parseSignedTransaction = parseSignedTransaction;
+exports.signedTransaction = signedTransaction;
+/**
+ * The Solana wire format the driver reads and writes itself, SDK-free: compact-u16 lengths,
+ * a legacy message's parts (header, keys, blockhash and instructions, which the builder
+ * reads back before anything is signed), and a signed transaction (signatures followed by
+ * the message). Message compilation stays with the SDK (`web3.ts`).
+ *
+ * Read bytes are untrusted (a stored message, a node's answer): every length prefix is
+ * checked against the bytes that remain before anything is sliced or allocated, and a
+ * malformed input is `null`, never a throw. Written values are range-checked with fixed
+ * texts, never wrapped.
+ */
+const error_1 = require("../../core/errors/error");
+const keys_1 = require("./keys");
+const MAX_LENGTH = 0xffff;
+const KEY_BYTES = 32;
+const BLOCKHASH_BYTES = 32;
+const SIGNATURE_BYTES = 64;
+/** Solana's compact-u16 ("shortvec") length prefix. */
+function encodeLength(value) {
+    if (!Number.isInteger(value) || value < 0 || value > MAX_LENGTH) {
+        throw new error_1.ValidationError('INVALID_INTENT', 'a length does not fit in its compact-u16 field');
+    }
+    const out = [];
+    let rest = value;
+    for (;;) {
+        const byte = rest & 0x7f;
+        rest >>= 7;
+        if (rest === 0) {
+            out.push(byte);
+            return Uint8Array.from(out);
+        }
+        out.push(byte | 0x80);
+    }
+}
+/**
+ * A compact-u16 at `offset`: its value and the offset after it, or `null`. Only the
+ * canonical form is read, as the runtime reads it: at most three bytes, no zero byte after
+ * the first (an alias of a shorter form), and no value above 65,535.
+ */
+function decodeLength(bytes, offset) {
+    let value = 0;
+    for (let i = 0; i < 3; i++) {
+        const byte = bytes[offset + i];
+        if (byte === undefined || (byte === 0 && i > 0))
+            return null;
+        value |= (byte & 0x7f) << (7 * i);
+        if ((byte & 0x80) === 0) {
+            return value > MAX_LENGTH ? null : { value, next: offset + i + 1 };
+        }
+    }
+    return null;
+}
+/**
+ * The parts of `message`, or `null` unless it is exactly one well-formed legacy message (the
+ * runtime's sanitize rules): at least one signer, a writable fee payer, signer and read-only
+ * non-signer ranges within the keys, every program and account index within the keys, no
+ * program at index 0, and no trailing bytes. Each count is checked against the bytes that
+ * remain before anything is read, so the work and the views it makes are linear in the input.
+ */
+function parseMessage(message) {
+    const required = message[0];
+    const readonlySigned = message[1];
+    const readonlyUnsigned = message[2];
+    if (required === undefined ||
+        readonlySigned === undefined ||
+        readonlyUnsigned === undefined) {
+        return null;
+    }
+    // A versioned message starts with 0x80 | version; the driver only builds legacy ones.
+    if (required === 0 || (required & 0x80) !== 0 || readonlySigned >= required) {
+        return null;
+    }
+    const keys = decodeLength(message, 3);
+    if (!keys || keys.value < required + readonlyUnsigned)
+        return null;
+    let at = keys.next + KEY_BYTES * keys.value + BLOCKHASH_BYTES;
+    if (at > message.length)
+        return null;
+    const instructions = decodeLength(message, at);
+    // Each instruction takes at least three bytes: its program index and two lengths.
+    if (!instructions || 3 * instructions.value > message.length - instructions.next) {
+        return null;
+    }
+    at = instructions.next;
+    const list = [];
+    for (let i = 0; i < instructions.value; i++) {
+        const program = message[at];
+        if (program === undefined || program === 0 || program >= keys.value)
+            return null;
+        const accounts = decodeLength(message, at + 1);
+        if (!accounts || accounts.value > message.length - accounts.next)
+            return null;
+        for (let j = accounts.next; j < accounts.next + accounts.value; j++) {
+            if (message[j] >= keys.value)
+                return null;
+        }
+        const data = decodeLength(message, accounts.next + accounts.value);
+        if (!data || data.value > message.length - data.next)
+            return null;
+        list.push({
+            program,
+            accounts: message.subarray(accounts.next, accounts.next + accounts.value),
+            data: message.subarray(data.next, data.next + data.value),
+        });
+        at = data.next + data.value;
+    }
+    if (at !== message.length)
+        return null;
+    const start = keys.next + KEY_BYTES * keys.value;
+    return {
+        required,
+        readonlySigned,
+        readonlyUnsigned,
+        keys: Array.from({ length: keys.value }, (_, i) => message.subarray(keys.next + KEY_BYTES * i, keys.next + KEY_BYTES * (i + 1))),
+        blockhash: message.subarray(start, start + BLOCKHASH_BYTES),
+        instructions: list,
+    };
+}
+/**
+ * A legacy message's signer addresses, in order, or `null` unless `message` is exactly one
+ * well-formed legacy message (`parseMessage`).
+ */
+function messageSigners(message) {
+    const parts = parseMessage(message);
+    return parts ? parts.keys.slice(0, parts.required).map(keys_1.encodeBase58) : null;
+}
+/**
+ * The parts of `bytes`, or `null` unless it is exactly one signed legacy transaction: a
+ * canonical signature count equal to the message's required signers, 64 bytes per
+ * signature, then one well-formed legacy message (`parseMessage`) with nothing after it. No
+ * signature is sliced before the count matches the header, so the work is linear in the
+ * input.
+ */
+function parseSignedTransaction(bytes) {
+    const count = decodeLength(bytes, 0);
+    if (!count)
+        return null;
+    // A count beyond the bytes leaves an empty message, which does not parse; a message
+    // always requires a signer, so a zero count never matches its header.
+    const message = bytes.subarray(count.next + SIGNATURE_BYTES * count.value);
+    const parts = parseMessage(message);
+    if (!parts || parts.required !== count.value)
+        return null;
+    const signatures = Array.from({ length: count.value }, (_, i) => bytes.subarray(count.next + SIGNATURE_BYTES * i, count.next + SIGNATURE_BYTES * (i + 1)));
+    return { signatures, message, parts };
+}
+/** A signed transaction: the signatures (64 bytes each), in signer order, then the message. */
+function signedTransaction(signatures, message) {
+    if (signatures.some((signature) => signature.length !== SIGNATURE_BYTES)) {
+        throw new error_1.ValidationError('INVALID_INTENT', 'a Solana signature is exactly 64 bytes');
+    }
+    const prefix = encodeLength(signatures.length);
+    const start = prefix.length + SIGNATURE_BYTES * signatures.length;
+    const out = new Uint8Array(start + message.length);
+    out.set(prefix, 0);
+    signatures.forEach((signature, i) => out.set(signature, prefix.length + SIGNATURE_BYTES * i));
+    out.set(message, start);
+    return out;
+}
+//# sourceMappingURL=wire.js.map

package/dist/adapters/solana/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../../src/adapters/solana/wire.ts"],"names":[],"mappings":";;AAoBA,oCAkBC;AAOD,oCAcC;AA+BD,oCAuDC;AAMD,wCAGC;AAkBD,wDAeC;AAGD,8CAgBC;AA9MD;;;;;;;;;;GAUG;AACH,mDAA0D;AAC1D,iCAAsC;AAEtC,MAAM,UAAU,GAAG,MAAM,CAAC;AAC1B,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,uDAAuD;AACvD,SAAgB,YAAY,CAAC,KAAa;IACxC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;QAChE,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QACzB,IAAI,KAAK,CAAC,CAAC;QACX,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,YAAY,CAC1B,KAAiB,EACjB,MAAc;IAEd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7D,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAwBD;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,OAAmB;IAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACpC,IACE,QAAQ,KAAK,SAAS;QACtB,cAAc,KAAK,SAAS;QAC5B,gBAAgB,KAAK,SAAS,EAC9B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sFAAsF;IACtF,IAAI,QAAQ,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,cAAc,IAAI,QAAQ,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,QAAQ,GAAG,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC;IAC9D,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,kFAAkF;IAClF,IAAI,CAAC,YAAY,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC;IACvB,MAAM,IAAI,GAAyB,EAAE,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACjF,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9E,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YACpE,IAAK,OAAO,CAAC,CAAC,CAAY,IAAI,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;QACxD,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC;YACR,OAAO;YACP,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC;YACzE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;SAC1D,CAAC,CAAC;QACH,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;IAC9B,CAAC;IACD,IAAI,EAAE,KAAK,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;IACjD,OAAO;QACL,QAAQ;QACR,cAAc;QACd,gBAAgB;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAChD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,SAAS,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,GAAG,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAC7E;QACD,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,eAAe,CAAC;QAC3D,YAAY,EAAE,IAAI;KACnB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,OAAmB;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,mBAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAWD;;;;;;GAMG;AACH,SAAgB,sBAAsB,CAAC,KAAiB;IACtD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,oFAAoF;IACpF,sEAAsE;IACtE,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9D,KAAK,CAAC,QAAQ,CACZ,KAAK,CAAC,IAAI,GAAG,eAAe,GAAG,CAAC,EAChC,KAAK,CAAC,IAAI,GAAG,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CACvC,CACF,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC;AAED,+FAA+F;AAC/F,SAAgB,iBAAiB,CAC/B,UAAiC,EACjC,OAAmB;IAEnB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,eAAe,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,eAAe,GAAG,UAAU,CAAC,MAAM,CAAC;IAClE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnB,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAClC,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,eAAe,GAAG,CAAC,CAAC,CACxD,CAAC;IACF,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC","sourcesContent":["/**\n * The Solana wire format the driver reads and writes itself, SDK-free: compact-u16 lengths,\n * a legacy message's parts (header, keys, blockhash and instructions, which the builder\n * reads back before anything is signed), and a signed transaction (signatures followed by\n * the message). Message compilation stays with the SDK (`web3.ts`).\n *\n * Read bytes are untrusted (a stored message, a node's answer): every length prefix is\n * checked against the bytes that remain before anything is sliced or allocated, and a\n * malformed input is `null`, never a throw. Written values are range-checked with fixed\n * texts, never wrapped.\n */\nimport { ValidationError } from '../../core/errors/error';\nimport { encodeBase58 } from './keys';\n\nconst MAX_LENGTH = 0xffff;\nconst KEY_BYTES = 32;\nconst BLOCKHASH_BYTES = 32;\nconst SIGNATURE_BYTES = 64;\n\n/** Solana's compact-u16 (\"shortvec\") length prefix. */\nexport function encodeLength(value: number): Uint8Array {\n  if (!Number.isInteger(value) || value < 0 || value > MAX_LENGTH) {\n    throw new ValidationError(\n      'INVALID_INTENT',\n      'a length does not fit in its compact-u16 field',\n    );\n  }\n  const out: number[] = [];\n  let rest = value;\n  for (;;) {\n    const byte = rest & 0x7f;\n    rest >>= 7;\n    if (rest === 0) {\n      out.push(byte);\n      return Uint8Array.from(out);\n    }\n    out.push(byte | 0x80);\n  }\n}\n\n/**\n * A compact-u16 at `offset`: its value and the offset after it, or `null`. Only the\n * canonical form is read, as the runtime reads it: at most three bytes, no zero byte after\n * the first (an alias of a shorter form), and no value above 65,535.\n */\nexport function decodeLength(\n  bytes: Uint8Array,\n  offset: number,\n): { readonly value: number; readonly next: number } | null {\n  let value = 0;\n  for (let i = 0; i < 3; i++) {\n    const byte = bytes[offset + i];\n    if (byte === undefined || (byte === 0 && i > 0)) return null;\n    value |= (byte & 0x7f) << (7 * i);\n    if ((byte & 0x80) === 0) {\n      return value > MAX_LENGTH ? null : { value, next: offset + i + 1 };\n    }\n  }\n  return null;\n}\n\n/** One instruction of a legacy message: its program's key index, account indexes and data. */\nexport interface MessageInstruction {\n  readonly program: number;\n  /** Indexes into the message's keys. */\n  readonly accounts: Uint8Array;\n  readonly data: Uint8Array;\n}\n\n/**\n * The parts of one well-formed legacy message. Keys, the blockhash, account indexes and data\n * are views into the message bytes, not copies.\n */\nexport interface MessageParts {\n  /** Signers: the first `required` keys; the fee payer first. */\n  readonly required: number;\n  readonly readonlySigned: number;\n  readonly readonlyUnsigned: number;\n  readonly keys: readonly Uint8Array[];\n  readonly blockhash: Uint8Array;\n  readonly instructions: readonly MessageInstruction[];\n}\n\n/**\n * The parts of `message`, or `null` unless it is exactly one well-formed legacy message (the\n * runtime's sanitize rules): at least one signer, a writable fee payer, signer and read-only\n * non-signer ranges within the keys, every program and account index within the keys, no\n * program at index 0, and no trailing bytes. Each count is checked against the bytes that\n * remain before anything is read, so the work and the views it makes are linear in the input.\n */\nexport function parseMessage(message: Uint8Array): MessageParts | null {\n  const required = message[0];\n  const readonlySigned = message[1];\n  const readonlyUnsigned = message[2];\n  if (\n    required === undefined ||\n    readonlySigned === undefined ||\n    readonlyUnsigned === undefined\n  ) {\n    return null;\n  }\n  // A versioned message starts with 0x80 | version; the driver only builds legacy ones.\n  if (required === 0 || (required & 0x80) !== 0 || readonlySigned >= required) {\n    return null;\n  }\n  const keys = decodeLength(message, 3);\n  if (!keys || keys.value < required + readonlyUnsigned) return null;\n  let at = keys.next + KEY_BYTES * keys.value + BLOCKHASH_BYTES;\n  if (at > message.length) return null;\n  const instructions = decodeLength(message, at);\n  // Each instruction takes at least three bytes: its program index and two lengths.\n  if (!instructions || 3 * instructions.value > message.length - instructions.next) {\n    return null;\n  }\n  at = instructions.next;\n  const list: MessageInstruction[] = [];\n  for (let i = 0; i < instructions.value; i++) {\n    const program = message[at];\n    if (program === undefined || program === 0 || program >= keys.value) return null;\n    const accounts = decodeLength(message, at + 1);\n    if (!accounts || accounts.value > message.length - accounts.next) return null;\n    for (let j = accounts.next; j < accounts.next + accounts.value; j++) {\n      if ((message[j] as number) >= keys.value) return null;\n    }\n    const data = decodeLength(message, accounts.next + accounts.value);\n    if (!data || data.value > message.length - data.next) return null;\n    list.push({\n      program,\n      accounts: message.subarray(accounts.next, accounts.next + accounts.value),\n      data: message.subarray(data.next, data.next + data.value),\n    });\n    at = data.next + data.value;\n  }\n  if (at !== message.length) return null;\n  const start = keys.next + KEY_BYTES * keys.value;\n  return {\n    required,\n    readonlySigned,\n    readonlyUnsigned,\n    keys: Array.from({ length: keys.value }, (_, i) =>\n      message.subarray(keys.next + KEY_BYTES * i, keys.next + KEY_BYTES * (i + 1)),\n    ),\n    blockhash: message.subarray(start, start + BLOCKHASH_BYTES),\n    instructions: list,\n  };\n}\n\n/**\n * A legacy message's signer addresses, in order, or `null` unless `message` is exactly one\n * well-formed legacy message (`parseMessage`).\n */\nexport function messageSigners(message: Uint8Array): readonly string[] | null {\n  const parts = parseMessage(message);\n  return parts ? parts.keys.slice(0, parts.required).map(encodeBase58) : null;\n}\n\n/** A signed legacy transaction read back: its signatures, in signer order, and its message. */\nexport interface SignedParts {\n  /** Views into the bytes, 64 each; one per required signer. */\n  readonly signatures: readonly Uint8Array[];\n  /** The message bytes the signatures sign (a view). */\n  readonly message: Uint8Array;\n  readonly parts: MessageParts;\n}\n\n/**\n * The parts of `bytes`, or `null` unless it is exactly one signed legacy transaction: a\n * canonical signature count equal to the message's required signers, 64 bytes per\n * signature, then one well-formed legacy message (`parseMessage`) with nothing after it. No\n * signature is sliced before the count matches the header, so the work is linear in the\n * input.\n */\nexport function parseSignedTransaction(bytes: Uint8Array): SignedParts | null {\n  const count = decodeLength(bytes, 0);\n  if (!count) return null;\n  // A count beyond the bytes leaves an empty message, which does not parse; a message\n  // always requires a signer, so a zero count never matches its header.\n  const message = bytes.subarray(count.next + SIGNATURE_BYTES * count.value);\n  const parts = parseMessage(message);\n  if (!parts || parts.required !== count.value) return null;\n  const signatures = Array.from({ length: count.value }, (_, i) =>\n    bytes.subarray(\n      count.next + SIGNATURE_BYTES * i,\n      count.next + SIGNATURE_BYTES * (i + 1),\n    ),\n  );\n  return { signatures, message, parts };\n}\n\n/** A signed transaction: the signatures (64 bytes each), in signer order, then the message. */\nexport function signedTransaction(\n  signatures: readonly Uint8Array[],\n  message: Uint8Array,\n): Uint8Array {\n  if (signatures.some((signature) => signature.length !== SIGNATURE_BYTES)) {\n    throw new ValidationError('INVALID_INTENT', 'a Solana signature is exactly 64 bytes');\n  }\n  const prefix = encodeLength(signatures.length);\n  const start = prefix.length + SIGNATURE_BYTES * signatures.length;\n  const out = new Uint8Array(start + message.length);\n  out.set(prefix, 0);\n  signatures.forEach((signature, i) =>\n    out.set(signature, prefix.length + SIGNATURE_BYTES * i),\n  );\n  out.set(message, start);\n  return out;\n}\n"]}

package/dist/adapters/ton/address.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Strict TON addresses, SDK-free. Two forms are accepted, nothing else:
+ * - raw: `0:<64 hex>` or `-1:<64 hex>` (hex in either case; canonical is lower case);
+ * - user-friendly: 48 base64 characters, either all standard (`+/`) or all URL-safe
+ *   (`-_`) alphabet, decoding to tag · workchain · 32-byte hash · CRC16-XMODEM.
+ * `@ton/core` is laxer (an unanchored hex test, any `parseInt` workchain, mixed base64
+ * alphabets, workchain bytes other than 0x00/0xff, a thrown string on a bad tag), so every
+ * address reaches the SDK only in the canonical raw form produced here.
+ * Canonical is the raw form; `display` keeps the caller's text; `variant` keeps only the
+ * flag that decides bounce behaviour (a raw address is bounceable, as in `@ton/core`).
+ * The variant is part of the intent hash and carries semantic fields only, so the
+ * encoding-only flags (test-only, alphabet) stay out of it: every spelling of one
+ * recipient with the same bounce flag hashes the same.
+ */
+import type { AddressCodec, WalletOptions } from '../../core/driver/types';
+export type TonWorkchain = 0 | -1;
+/** The flags a user-friendly TON address carries (TEP-2). */
+export type TonAddressVariant = {
+    readonly bounceable: boolean;
+    readonly testOnly: boolean;
+    readonly urlSafe: boolean;
+};
+export type ParsedTonAddress = TonAddressVariant & {
+    readonly workchain: TonWorkchain;
+    /** 32 bytes. */
+    readonly hash: Uint8Array;
+    readonly form: 'raw' | 'friendly';
+};
+/** CRC16-XMODEM (polynomial 0x1021, initial 0), as TEP-2 specifies for the checksum. */
+export declare function crc16(data: Uint8Array): number;
+/** `0:<hex>` / `-1:<hex>`, lower case: the canonical form. */
+export declare function rawAddress(workchain: TonWorkchain, hash: Uint8Array): string;
+/** The user-friendly form (TEP-2) with the given flags. */
+export declare function friendlyAddress(workchain: TonWorkchain, hash: Uint8Array, flags: TonAddressVariant): string;
+/** Parses either form strictly; `null` for anything else. */
+export declare function parseTonAddress(value: string): ParsedTonAddress | null;
+export interface TonAddressCodecOptions {
+    /** Mainnet refuses testnet-only addresses (TEP-2); testnet accepts both flags. */
+    readonly testnet: boolean;
+    /** The wallet address for a public key and wallet identity (needs the SDK). */
+    readonly fromPublicKey: (publicKey: Uint8Array, wallet?: WalletOptions) => string;
+}
+export declare function createTonAddressCodec(options: TonAddressCodecOptions): AddressCodec;

package/dist/adapters/ton/address.js

@@ -0,0 +1,168 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.crc16 = crc16;
+exports.rawAddress = rawAddress;
+exports.friendlyAddress = friendlyAddress;
+exports.parseTonAddress = parseTonAddress;
+exports.createTonAddressCodec = createTonAddressCodec;
+const error_1 = require("../../core/errors/error");
+const RAW = /^(0|-1):([0-9a-fA-F]{64})$/;
+const FRIENDLY_STANDARD = /^[A-Za-z0-9+/]{48}$/;
+const FRIENDLY_URL_SAFE = /^[A-Za-z0-9_-]{48}$/;
+const BOUNCEABLE = 0x11;
+const NON_BOUNCEABLE = 0x51;
+const TEST_ONLY = 0x80;
+const HASH_BYTES = 32;
+/**
+ * Untrusted text is capped before decoding: the longest form is `-1:` and 64 hex digits,
+ * and anything longer is not decoded.
+ */
+const MAX_ADDRESS_LENGTH = 67;
+/** CRC16-XMODEM (polynomial 0x1021, initial 0), as TEP-2 specifies for the checksum. */
+function crc16(data) {
+    let crc = 0;
+    for (const byte of data) {
+        crc ^= byte << 8;
+        for (let bit = 0; bit < 8; bit++) {
+            crc = crc & 0x8000 ? ((crc << 1) ^ 0x1021) & 0xffff : (crc << 1) & 0xffff;
+        }
+    }
+    return crc;
+}
+const toHex = (bytes) => Buffer.from(bytes).toString('hex');
+/** An account id is exactly 32 bytes: never padded or truncated into another address. */
+function assertHash(hash) {
+    if (hash.length !== HASH_BYTES) {
+        throw new error_1.ValidationError('INVALID_ADDRESS', 'a TON address hash is 32 bytes');
+    }
+}
+/** `0:<hex>` / `-1:<hex>`, lower case: the canonical form. */
+function rawAddress(workchain, hash) {
+    assertHash(hash);
+    return `${workchain}:${toHex(hash)}`;
+}
+/** The user-friendly form (TEP-2) with the given flags. */
+function friendlyAddress(workchain, hash, flags) {
+    assertHash(hash);
+    const bytes = new Uint8Array(36);
+    bytes[0] =
+        (flags.bounceable ? BOUNCEABLE : NON_BOUNCEABLE) | (flags.testOnly ? TEST_ONLY : 0);
+    bytes[1] = workchain === -1 ? 0xff : 0x00;
+    bytes.set(hash, 2);
+    const crc = crc16(bytes.subarray(0, 34));
+    bytes[34] = crc >> 8;
+    bytes[35] = crc & 0xff;
+    const text = Buffer.from(bytes).toString('base64');
+    return flags.urlSafe ? text.replace(/\+/g, '-').replace(/\//g, '_') : text;
+}
+function parseFriendly(value) {
+    const urlSafe = FRIENDLY_URL_SAFE.test(value);
+    if (!urlSafe && !FRIENDLY_STANDARD.test(value))
+        return null;
+    const bytes = Buffer.from(urlSafe ? value.replace(/-/g, '+').replace(/_/g, '/') : value, 'base64');
+    if (bytes.length !== 36)
+        return null;
+    const tag = bytes[0];
+    const testOnly = (tag & TEST_ONLY) !== 0;
+    const flag = tag & ~TEST_ONLY;
+    if (flag !== BOUNCEABLE && flag !== NON_BOUNCEABLE)
+        return null;
+    const wc = bytes[1];
+    if (wc !== 0x00 && wc !== 0xff)
+        return null;
+    const crc = crc16(bytes.subarray(0, 34));
+    if (bytes[34] !== crc >> 8 || bytes[35] !== (crc & 0xff))
+        return null;
+    return {
+        workchain: wc === 0xff ? -1 : 0,
+        hash: new Uint8Array(bytes.subarray(2, 34)),
+        form: 'friendly',
+        bounceable: flag === BOUNCEABLE,
+        testOnly,
+        // A 48-character text in the shared alphabet (no `+/-_`) is both; call it URL-safe.
+        urlSafe: urlSafe,
+    };
+}
+/** Parses either form strictly; `null` for anything else. */
+function parseTonAddress(value) {
+    if (typeof value !== 'string' || value.length > MAX_ADDRESS_LENGTH)
+        return null;
+    const raw = RAW.exec(value);
+    if (raw) {
+        return {
+            workchain: raw[1] === '-1' ? -1 : 0,
+            hash: new Uint8Array(Buffer.from(raw[2], 'hex')),
+            form: 'raw',
+            bounceable: true,
+            testOnly: false,
+            urlSafe: true,
+        };
+    }
+    return parseFriendly(value);
+}
+function createTonAddressCodec(options) {
+    const parse = (value) => {
+        const parsed = parseTonAddress(value);
+        if (!parsed)
+            throw new error_1.ValidationError('INVALID_ADDRESS', 'not a TON address');
+        if (parsed.testOnly && !options.testnet) {
+            throw new error_1.ValidationError('INVALID_ADDRESS', 'a testnet-only TON address cannot be used on mainnet');
+        }
+        return parsed;
+    };
+    const normalize = (value) => {
+        const parsed = parse(value);
+        const canonical = rawAddress(parsed.workchain, parsed.hash);
+        // Only the semantic bounce flag is hashed. A raw address carries no flags and
+        // is bounceable, as in `@ton/core`.
+        return parsed.form === 'raw'
+            ? { canonical, display: canonical, variant: { bounceable: true } }
+            : { canonical, display: value, variant: { bounceable: parsed.bounceable } };
+    };
+    return {
+        validate: (value) => {
+            try {
+                parse(value);
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+        normalize,
+        fromPublicKey: (publicKey, wallet) => {
+            const parsed = parse(options.fromPublicKey(publicKey, wallet));
+            // A wallet address as wallets show it: non-bounceable, flagged on testnet.
+            const flags = { bounceable: false, testOnly: options.testnet, urlSafe: true };
+            return {
+                canonical: rawAddress(parsed.workchain, parsed.hash),
+                display: friendlyAddress(parsed.workchain, parsed.hash, flags),
+                variant: { bounceable: false },
+            };
+        },
+        format: (address, formatOptions) => {
+            const parsed = parseTonAddress(address.canonical);
+            if (!parsed)
+                return address.display;
+            if (formatOptions?.raw === true)
+                return address.canonical;
+            if (formatOptions === undefined || Object.keys(formatOptions).length === 0) {
+                return address.display;
+            }
+            // The variant holds the bounce flag only; the caller's own text keeps the others.
+            const shown = parseTonAddress(address.display);
+            const spelled = shown?.form === 'friendly' ? shown : undefined;
+            const pick = (key, fallback) => {
+                const value = formatOptions[key];
+                return typeof value === 'boolean' ? value : fallback;
+            };
+            const bounceable = address.variant?.bounceable;
+            return friendlyAddress(parsed.workchain, parsed.hash, {
+                bounceable: pick('bounceable', typeof bounceable === 'boolean' ? bounceable : true),
+                testOnly: pick('testOnly', spelled?.testOnly ?? options.testnet),
+                urlSafe: pick('urlSafe', spelled?.urlSafe ?? true),
+            });
+        },
+    };
+}
+//# sourceMappingURL=address.js.map

package/dist/adapters/ton/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../../../src/adapters/ton/address.ts"],"names":[],"mappings":";;AAgDA,sBASC;AAYD,gCAGC;AAGD,0CAgBC;AA8BD,0CAcC;AASD,sDAkEC;AAnMD,mDAA0D;AAmB1D,MAAM,GAAG,GAAG,4BAA4B,CAAC;AACzC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB;;;GAGG;AACH,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,wFAAwF;AACxF,SAAgB,KAAK,CAAC,IAAgB;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,GAAG,IAAI,IAAI,IAAI,CAAC,CAAC;QACjB,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YACjC,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEhF,yFAAyF;AACzF,SAAS,UAAU,CAAC,IAAgB;IAClC,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/B,MAAM,IAAI,uBAAe,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,SAAgB,UAAU,CAAC,SAAuB,EAAE,IAAgB;IAClE,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,GAAG,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,2DAA2D;AAC3D,SAAgB,eAAe,CAC7B,SAAuB,EACvB,IAAgB,EAChB,KAAwB;IAExB,UAAU,CAAC,IAAI,CAAC,CAAC;IACjB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,CAAC,CAAC,CAAC;QACN,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACnB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzC,KAAK,CAAC,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACrB,KAAK,CAAC,EAAE,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC;IACvB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7E,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAC7D,QAAQ,CACT,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;IAC/B,MAAM,QAAQ,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC;IAC9B,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtE,OAAO;QACL,SAAS,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,IAAI,EAAE,UAAU;QAChB,UAAU,EAAE,IAAI,KAAK,UAAU;QAC/B,QAAQ;QACR,oFAAoF;QACpF,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAgB,eAAe,CAAC,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAChF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,GAAG,EAAE,CAAC;QACR,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAW,EAAE,KAAK,CAAC,CAAC;YAC1D,IAAI,EAAE,KAAK;YACX,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AASD,SAAgB,qBAAqB,CAAC,OAA+B;IACnE,MAAM,KAAK,GAAG,CAAC,KAAa,EAAoB,EAAE;QAChD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,uBAAe,CAAC,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACxC,MAAM,IAAI,uBAAe,CACvB,iBAAiB,EACjB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,KAAa,EAAqB,EAAE;QACrD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5D,8EAA8E;QAC9E,oCAAoC;QACpC,OAAO,MAAM,CAAC,IAAI,KAAK,KAAK;YAC1B,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE;YAClE,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IAChF,CAAC,CAAC;IACF,OAAO;QACL,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC;gBACH,KAAK,CAAC,KAAK,CAAC,CAAC;gBACb,OAAO,IAAI,CAAC;YACd,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,SAAS;QACT,aAAa,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YAC/D,2EAA2E;YAC3E,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC9E,OAAO;gBACL,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC;gBACpD,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;gBAC9D,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;aAC/B,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE;YACjC,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC;YACpC,IAAI,aAAa,EAAE,GAAG,KAAK,IAAI;gBAAE,OAAO,OAAO,CAAC,SAAS,CAAC;YAC1D,IAAI,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC3E,OAAO,OAAO,CAAC,OAAO,CAAC;YACzB,CAAC;YACD,kFAAkF;YAClF,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/D,MAAM,IAAI,GAAG,CAAC,GAA4B,EAAE,QAAiB,EAAW,EAAE;gBACxE,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;gBACjC,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvD,CAAC,CAAC;YACF,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC;YAC/C,OAAO,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE;gBACpD,UAAU,EAAE,IAAI,CACd,YAAY,EACZ,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CACpD;gBACD,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,IAAI,OAAO,CAAC,OAAO,CAAC;gBAChE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC;aACnD,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Strict TON addresses, SDK-free. Two forms are accepted, nothing else:\n * - raw: `0:<64 hex>` or `-1:<64 hex>` (hex in either case; canonical is lower case);\n * - user-friendly: 48 base64 characters, either all standard (`+/`) or all URL-safe\n *   (`-_`) alphabet, decoding to tag · workchain · 32-byte hash · CRC16-XMODEM.\n * `@ton/core` is laxer (an unanchored hex test, any `parseInt` workchain, mixed base64\n * alphabets, workchain bytes other than 0x00/0xff, a thrown string on a bad tag), so every\n * address reaches the SDK only in the canonical raw form produced here.\n * Canonical is the raw form; `display` keeps the caller's text; `variant` keeps only the\n * flag that decides bounce behaviour (a raw address is bounceable, as in `@ton/core`).\n * The variant is part of the intent hash and carries semantic fields only, so the\n * encoding-only flags (test-only, alphabet) stay out of it: every spelling of one\n * recipient with the same bounce flag hashes the same.\n */\nimport type { AddressCodec, WalletOptions } from '../../core/driver/types';\nimport { ValidationError } from '../../core/errors/error';\nimport type { NormalizedAddress } from '../../core/model/address';\n\nexport type TonWorkchain = 0 | -1;\n\n/** The flags a user-friendly TON address carries (TEP-2). */\nexport type TonAddressVariant = {\n  readonly bounceable: boolean;\n  readonly testOnly: boolean;\n  readonly urlSafe: boolean;\n};\n\nexport type ParsedTonAddress = TonAddressVariant & {\n  readonly workchain: TonWorkchain;\n  /** 32 bytes. */\n  readonly hash: Uint8Array;\n  readonly form: 'raw' | 'friendly';\n};\n\nconst RAW = /^(0|-1):([0-9a-fA-F]{64})$/;\nconst FRIENDLY_STANDARD = /^[A-Za-z0-9+/]{48}$/;\nconst FRIENDLY_URL_SAFE = /^[A-Za-z0-9_-]{48}$/;\nconst BOUNCEABLE = 0x11;\nconst NON_BOUNCEABLE = 0x51;\nconst TEST_ONLY = 0x80;\nconst HASH_BYTES = 32;\n/**\n * Untrusted text is capped before decoding: the longest form is `-1:` and 64 hex digits,\n * and anything longer is not decoded.\n */\nconst MAX_ADDRESS_LENGTH = 67;\n\n/** CRC16-XMODEM (polynomial 0x1021, initial 0), as TEP-2 specifies for the checksum. */\nexport function crc16(data: Uint8Array): number {\n  let crc = 0;\n  for (const byte of data) {\n    crc ^= byte << 8;\n    for (let bit = 0; bit < 8; bit++) {\n      crc = crc & 0x8000 ? ((crc << 1) ^ 0x1021) & 0xffff : (crc << 1) & 0xffff;\n    }\n  }\n  return crc;\n}\n\nconst toHex = (bytes: Uint8Array): string => Buffer.from(bytes).toString('hex');\n\n/** An account id is exactly 32 bytes: never padded or truncated into another address. */\nfunction assertHash(hash: Uint8Array): void {\n  if (hash.length !== HASH_BYTES) {\n    throw new ValidationError('INVALID_ADDRESS', 'a TON address hash is 32 bytes');\n  }\n}\n\n/** `0:<hex>` / `-1:<hex>`, lower case: the canonical form. */\nexport function rawAddress(workchain: TonWorkchain, hash: Uint8Array): string {\n  assertHash(hash);\n  return `${workchain}:${toHex(hash)}`;\n}\n\n/** The user-friendly form (TEP-2) with the given flags. */\nexport function friendlyAddress(\n  workchain: TonWorkchain,\n  hash: Uint8Array,\n  flags: TonAddressVariant,\n): string {\n  assertHash(hash);\n  const bytes = new Uint8Array(36);\n  bytes[0] =\n    (flags.bounceable ? BOUNCEABLE : NON_BOUNCEABLE) | (flags.testOnly ? TEST_ONLY : 0);\n  bytes[1] = workchain === -1 ? 0xff : 0x00;\n  bytes.set(hash, 2);\n  const crc = crc16(bytes.subarray(0, 34));\n  bytes[34] = crc >> 8;\n  bytes[35] = crc & 0xff;\n  const text = Buffer.from(bytes).toString('base64');\n  return flags.urlSafe ? text.replace(/\\+/g, '-').replace(/\\//g, '_') : text;\n}\n\nfunction parseFriendly(value: string): ParsedTonAddress | null {\n  const urlSafe = FRIENDLY_URL_SAFE.test(value);\n  if (!urlSafe && !FRIENDLY_STANDARD.test(value)) return null;\n  const bytes = Buffer.from(\n    urlSafe ? value.replace(/-/g, '+').replace(/_/g, '/') : value,\n    'base64',\n  );\n  if (bytes.length !== 36) return null;\n  const tag = bytes[0] as number;\n  const testOnly = (tag & TEST_ONLY) !== 0;\n  const flag = tag & ~TEST_ONLY;\n  if (flag !== BOUNCEABLE && flag !== NON_BOUNCEABLE) return null;\n  const wc = bytes[1];\n  if (wc !== 0x00 && wc !== 0xff) return null;\n  const crc = crc16(bytes.subarray(0, 34));\n  if (bytes[34] !== crc >> 8 || bytes[35] !== (crc & 0xff)) return null;\n  return {\n    workchain: wc === 0xff ? -1 : 0,\n    hash: new Uint8Array(bytes.subarray(2, 34)),\n    form: 'friendly',\n    bounceable: flag === BOUNCEABLE,\n    testOnly,\n    // A 48-character text in the shared alphabet (no `+/-_`) is both; call it URL-safe.\n    urlSafe: urlSafe,\n  };\n}\n\n/** Parses either form strictly; `null` for anything else. */\nexport function parseTonAddress(value: string): ParsedTonAddress | null {\n  if (typeof value !== 'string' || value.length > MAX_ADDRESS_LENGTH) return null;\n  const raw = RAW.exec(value);\n  if (raw) {\n    return {\n      workchain: raw[1] === '-1' ? -1 : 0,\n      hash: new Uint8Array(Buffer.from(raw[2] as string, 'hex')),\n      form: 'raw',\n      bounceable: true,\n      testOnly: false,\n      urlSafe: true,\n    };\n  }\n  return parseFriendly(value);\n}\n\nexport interface TonAddressCodecOptions {\n  /** Mainnet refuses testnet-only addresses (TEP-2); testnet accepts both flags. */\n  readonly testnet: boolean;\n  /** The wallet address for a public key and wallet identity (needs the SDK). */\n  readonly fromPublicKey: (publicKey: Uint8Array, wallet?: WalletOptions) => string;\n}\n\nexport function createTonAddressCodec(options: TonAddressCodecOptions): AddressCodec {\n  const parse = (value: string): ParsedTonAddress => {\n    const parsed = parseTonAddress(value);\n    if (!parsed) throw new ValidationError('INVALID_ADDRESS', 'not a TON address');\n    if (parsed.testOnly && !options.testnet) {\n      throw new ValidationError(\n        'INVALID_ADDRESS',\n        'a testnet-only TON address cannot be used on mainnet',\n      );\n    }\n    return parsed;\n  };\n  const normalize = (value: string): NormalizedAddress => {\n    const parsed = parse(value);\n    const canonical = rawAddress(parsed.workchain, parsed.hash);\n    // Only the semantic bounce flag is hashed. A raw address carries no flags and\n    // is bounceable, as in `@ton/core`.\n    return parsed.form === 'raw'\n      ? { canonical, display: canonical, variant: { bounceable: true } }\n      : { canonical, display: value, variant: { bounceable: parsed.bounceable } };\n  };\n  return {\n    validate: (value) => {\n      try {\n        parse(value);\n        return true;\n      } catch {\n        return false;\n      }\n    },\n    normalize,\n    fromPublicKey: (publicKey, wallet) => {\n      const parsed = parse(options.fromPublicKey(publicKey, wallet));\n      // A wallet address as wallets show it: non-bounceable, flagged on testnet.\n      const flags = { bounceable: false, testOnly: options.testnet, urlSafe: true };\n      return {\n        canonical: rawAddress(parsed.workchain, parsed.hash),\n        display: friendlyAddress(parsed.workchain, parsed.hash, flags),\n        variant: { bounceable: false },\n      };\n    },\n    format: (address, formatOptions) => {\n      const parsed = parseTonAddress(address.canonical);\n      if (!parsed) return address.display;\n      if (formatOptions?.raw === true) return address.canonical;\n      if (formatOptions === undefined || Object.keys(formatOptions).length === 0) {\n        return address.display;\n      }\n      // The variant holds the bounce flag only; the caller's own text keeps the others.\n      const shown = parseTonAddress(address.display);\n      const spelled = shown?.form === 'friendly' ? shown : undefined;\n      const pick = (key: keyof TonAddressVariant, fallback: boolean): boolean => {\n        const value = formatOptions[key];\n        return typeof value === 'boolean' ? value : fallback;\n      };\n      const bounceable = address.variant?.bounceable;\n      return friendlyAddress(parsed.workchain, parsed.hash, {\n        bounceable: pick(\n          'bounceable',\n          typeof bounceable === 'boolean' ? bounceable : true,\n        ),\n        testOnly: pick('testOnly', spelled?.testOnly ?? options.testnet),\n        urlSafe: pick('urlSafe', spelled?.urlSafe ?? true),\n      });\n    },\n  };\n}\n"]}