crypto-aio 0.0.3 → 0.1.0

package/dist/adapters/ton/driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"driver.js","sourceRoot":"","sources":["../../../src/adapters/ton/driver.ts"],"names":[],"mappings":";;;AAaA,mDAAqE;AAErE,+BAAoF;AACpF,uCAAmE;AACnE,yCAAyC;AACzC,uCAA6C;AAC7C,qCAA6D;AAC7D,qCAKkB;AAClB,uCAA4C;AAE5C,2FAA2F;AAC3F,MAAM,cAAc,GAAG,CAAC,KAAa,EAAE,EAAE,CACvC,IAAI,qBAAa,CAAC,sBAAsB,EAAE,iCAAiC,KAAK,EAAE,EAAE;IAClF,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AAEL;;;;;;;;GAQG;AACH,MAAM,SAAS,GAAG,CAAC,gBAAwB,EAAgB,EAAE,CAAC,CAAC;IAC7D,QAAQ,EAAE,KAAK,EAAE,IAAkB,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,iBAAiB,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC;YAC3B,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;YACtB,KAAK;SACN,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,sBAAW,EAAC,IAAA,oBAAc,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAChE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,aAAa,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,gBAAgB;IAChB,MAAM,EAAE,KAAK,EAAE,IAAkB,EAAE,EAAE;QACnC,MAAM,KAAK,GAAG,qBAAqB,CAAC;QACpC,OAAO,MAAM,CACX,IAAA,0BAAoB,EAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CACpF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,aAAa,GAAG,CAAC,gBAAwB,EAAgB,EAAE;IAC/D,MAAM,KAAK,GAAG,kBAAkB,CAAC;IACjC,MAAM,WAAW,GAAG,KAAK,EAAE,IAAkB,EAAE,EAAE,CAC/C,IAAA,mBAAa,EAAC,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/E,OAAO;QACL,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpE,gBAAgB;QAChB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;KAChE,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,GAAiB,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;AAElE,yFAAyF;AACzF,SAAS,QAAQ,CAAC,MAAqB,EAAE,QAAgB;IACvD,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;QAAE,IAAA,yBAAe,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,0FAA0F;AACnF,MAAM,gBAAgB,GAAG,CAC9B,UAA4D,EAC7C,EAAE,CAAC,CAAC;IACnB,KAAK,CAAC,MAAM,CAAC,GAAG;QACd,wFAAwF;QACxF,sFAAsF;QACtF,gDAAgD;QAChD,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,qFAAqF;QACrF,sFAAsF;QACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAA,yBAAgB,EAAC;YAC3B,GAAG,EAAE,IAAI,YAAM,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC;YAC3C,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM;YACN,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,KAAK,EAAE,GAAG,CAAC,KAAK;SACjB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,qBAAY,EAAC,GAAG,CAAC,CAAC;QAC9B,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,qFAAqF;YACrF,6DAA6D;YAC7D,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,OAAO,EAAE,GAAG,CAAC,KAAK;YAClB,MAAM,EAAE,IAAA,wBAAe,EAAC,GAAG,CAAC;YAC5B,OAAO,EAAE,IAAA,0BAAgB,EAAC,GAAG,CAAC;YAC9B,WAAW,EAAE,IAAA,8BAAoB,EAAC,GAAG,CAAC;YACtC,MAAM,EAAE,IAAA,wBAAe,EAAC,GAAG,CAAC;YAC5B,QAAQ,EAAE,IAAA,0BAAiB,EAAC,GAAG,CAAC;YAChC,OAAO,EAAE,IAAA,yBAAgB,EAAC,GAAG,CAAC;YAC9B,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE;YAChF,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC;YACrD,kEAAkE;YAClE,kBAAkB,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC;SACpD,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AA9CU,QAAA,gBAAgB,oBA8C1B","sourcesContent":["/**\n * The TON driver: one factory for both built-in networks, configured by each network's\n * registry data. The family shape: `tonDriverFactory(makeNative)` lives here and imports\n * no client module; the library's module (`native-client.ts`) supplies the native client\n * and exports the loadable factory.\n */\nimport type {\n  ChainDriver,\n  DisposableNativeClient,\n  DriverFactory,\n  DriverLimits,\n  WalletOptions,\n} from '../../core/driver/types';\nimport { ConfigError, ProviderError } from '../../core/errors/error';\nimport type { EndpointCall, HealthProbes, Transport } from '../../core/transport/types';\nimport { TonApi, configParamBoc, indexedHeadOf, masterchainInfoSeqno } from './api';\nimport { createTonBroadcaster, createTonBuilder } from './builder';\nimport { cellFromBoc } from './messages';\nimport { tonNetworkConfig } from './network';\nimport { createTonHistory, createTonProofs } from './proofs';\nimport {\n  createTonContext,\n  createTonExt,\n  createTonReader,\n  createTonSequence,\n} from './reader';\nimport { resolveIdentity } from './wallets';\n\n/** A probe answer that does not parse: the endpoint fails its health check (retryable). */\nconst malformedProbe = (route: string) =>\n  new ProviderError('PROVIDER_UNAVAILABLE', `malformed toncenter answer to ${route}`, {\n    retryable: true,\n  });\n\n/**\n * The probes read heights and the indexer's global id with `api.ts`'s own\n * parsers, the ones the proofs use, so the two never drift.\n *\n * v2: identity = config param 19, the network's global id, from a cell that holds\n * exactly one int32 (`global_id#_ global_id:int32 = ConfigParam 19`); height = the\n * liteserver's masterchain head. One call each: each probe takes a token from the\n * endpoint's rate limit.\n */\nconst rpcProbes = (expectedIdentity: string): HealthProbes => ({\n  identity: async (call: EndpointCall) => {\n    const route = '/getConfigParam';\n    const body = await call.http({\n      method: 'GET',\n      path: route,\n      query: { param: '19' },\n      route,\n    });\n    const cell = cellFromBoc(configParamBoc(body, route));\n    const slice = cell && !cell.isExotic ? cell.beginParse() : null;\n    if (!slice || slice.remainingBits !== 32 || slice.remainingRefs !== 0) {\n      throw malformedProbe(route);\n    }\n    return String(slice.loadInt(32));\n  },\n  expectedIdentity,\n  height: async (call: EndpointCall) => {\n    const route = '/getMasterchainInfo';\n    return BigInt(\n      masterchainInfoSeqno(await call.http({ method: 'GET', path: route, route }), route),\n    );\n  },\n});\n\n/**\n * v3: identity = the indexed head's `global_id` (an int32); height = the newest\n * indexed masterchain block.\n */\nconst indexerProbes = (expectedIdentity: string): HealthProbes => {\n  const route = '/masterchainInfo';\n  const indexedHead = async (call: EndpointCall) =>\n    indexedHeadOf(await call.http({ method: 'GET', path: route, route }), route);\n  return {\n    identity: async (call) => String((await indexedHead(call)).globalId),\n    expectedIdentity,\n    height: async (call) => BigInt((await indexedHead(call)).seqno),\n  };\n};\n\n/**\n * A TON transfer carries exactly one output (a partly delivered batch has no safe single\n * verdict: `failed` invites a whole re-send that pays the delivered outputs twice),\n * whatever the wallet version. The core prefers this answer to its own capability\n * default, so it holds even for a selection that somehow lists `batch-transfer`.\n */\nconst ONE_OUTPUT: DriverLimits = Object.freeze({ maxOutputs: 1 });\n\n/** The batch limit of a wallet; a malformed TON identity throws its `CONFIG_INVALID`. */\nfunction limitsOf(wallet: WalletOptions, globalId: number): DriverLimits {\n  if (wallet.ton !== undefined) resolveIdentity(wallet, globalId);\n  return ONE_OUTPUT;\n}\n\n/** The TON driver factory over a native-client maker (the library module supplies it). */\nexport const tonDriverFactory = (\n  makeNative: (transport: Transport) => DisposableNativeClient,\n): DriverFactory => ({\n  async create(ctx): Promise<ChainDriver> {\n    // First: a network that adds a capability TON lacks (`batch-transfer`, `block-scan`, …)\n    // or carries inconsistent data fails here, before any probe. The handle's options too\n    // (`maxNetworkFee`); an unknown one is refused.\n    const config = tonNetworkConfig(ctx.chain, ctx.network, ctx.options);\n    if (!ctx.indexer) {\n      throw new ConfigError(\n        'CONFIG_INVALID',\n        'TON needs an indexer provider (toncenter API v3); set chains.ton.indexer',\n      );\n    }\n    // Probes go on every transport this driver receives, before any traffic. Both expect\n    // the global id as parsed from the registry, so they compare values, never spellings.\n    const identity = String(config.globalId);\n    ctx.transport.setProbes(rpcProbes(identity));\n    ctx.indexer.setProbes(indexerProbes(identity));\n    const ton = createTonContext({\n      api: new TonApi(ctx.transport, ctx.indexer),\n      chain: ctx.chain,\n      network: ctx.network,\n      config,\n      log: ctx.log,\n      clock: ctx.clock,\n    });\n    const ext = createTonExt(ton);\n    return {\n      ordering: 'seqno',\n      // Informational: the core gates every capability, `address-history` included, on its\n      // own selection (manifest ∪ indexer ∪ network add − remove).\n      capabilities: config.capabilities,\n      address: ton.codec,\n      reader: createTonReader(ton),\n      builder: createTonBuilder(ton),\n      broadcaster: createTonBroadcaster(ton),\n      proofs: createTonProofs(ton),\n      sequence: createTonSequence(ton),\n      history: createTonHistory(ton),\n      ext: { ton: { getSeqno: ext.ton.getSeqno, jettonWallet: ext.ton.jettonWallet } },\n      limits: (wallet) => limitsOf(wallet, config.globalId),\n      // A fresh SDK client on every call, over this driver's transport.\n      createNativeClient: () => makeNative(ctx.transport),\n    };\n  },\n});\n"]}

package/dist/adapters/ton/errors.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Classifies a definitive send refusal. toncenter answers every liteserver refusal, and
+ * malformed bytes too, with HTTP 500, which the transport reports as an ambiguous failure
+ * that the broadcaster rethrows unclassified. Its definitive 4xx answers (422) mean the
+ * request did not parse. So this table serves the 4xx answers of other v2-compatible
+ * endpoints, and it matches the chain's own texts only:
+ * - liteserver.cpp `perform_sendMessage` prefixes "cannot apply external message to current
+ *   state : ", and tonlib names the liteserver's error code ("LITE_SERVER_UNKNOWN: ");
+ * - external-message.cpp `run_message_on_account` prefixes "External message was not
+ *   accepted: cannot run message on account: ";
+ * - collator.cpp `impl_create_ordinary_transaction` writes "inbound external message
+ *   rejected by transaction <HEX>:\nexitcode=<n>, steps=<n>, gas_used=<n>" (then a VM
+ *   log) when the wallet code refuses, and "… rejected by account <HEX> before
+ *   smart-contract execution" when the balance cannot pay the import fee;
+ * - ext-message-checker.cpp writes "Failed to unpack account state";
+ * - liteserver-cache.hpp answers a repeated `sendMessage` "duplicate message", behind
+ *   "cannot send external message : " (liteserver.cpp);
+ * - ext-message-pool.cpp answers "not ready", "too many pending external message checks"
+ *   and "too many external messages to address <wc>:<HEX>" when it cannot check a message
+ *   now: those are thrown as transient failures, never classified.
+ *
+ * Every text-based answer is a refusal or a success, never `rejected`: one endpoint's
+ * text decides no verdict, and a refused TON message still ends, proven, when it expires.
+ * A `rejected` would end the Operation, and if a lying endpoint relayed the bytes anyway,
+ * a caller's retry with a new seqno would pay twice. Bytes that are no external message
+ * are `rejected` by the broadcaster itself, before anything is sent. Reasons are fixed
+ * texts: a node's text carries addresses. Each pattern is linear and reads a bounded
+ * prefix; a text anchored at both ends is matched only when that prefix is the whole
+ * text, so the cut never completes one. SDK-free.
+ */
+import type { BroadcastResult } from '../../core/driver/types';
+/**
+ * @throws a retryable, ambiguous `ProviderError('PROVIDER_UNAVAILABLE')` for a transient
+ * answer (the message may still reach the network), as a transport failure is thrown.
+ */
+export declare function classifyBroadcastError(message: string): BroadcastResult;

package/dist/adapters/ton/errors.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyBroadcastError = classifyBroadcastError;
+const error_1 = require("../../core/errors/error");
+const refused = (code, reason) => Object.freeze({ kind: 'refused', code, reason });
+/** Only this much of a text is read; every chain text above ends its verdict well within. */
+const MAX_TEXT = 1024;
+/**
+ * The wallet code's refusals by exit code, all state-dependent (another seqno, a later
+ * clock, a W5 extension that turns signatures back on): wallet-v4-code.fc checks 36, 33, 34
+ * and 35; wallet_v5.fc `process_signed_request` checks 135, 132, 133, 134 and 136.
+ */
+const BY_EXIT_CODE = new Map([
+    ['33', refused('NONCE_CONFLICT', 'seqno mismatch')],
+    ['133', refused('NONCE_CONFLICT', 'seqno mismatch')],
+    ['36', refused('TX_EXPIRED', 'message expired')],
+    ['136', refused('TX_EXPIRED', 'message expired')],
+    ['34', refused('TX_REFUSED', 'wallet id mismatch')],
+    ['134', refused('TX_REFUSED', 'wallet id mismatch')],
+    ['35', refused('TX_REFUSED', 'signature not accepted')],
+    ['135', refused('TX_REFUSED', 'signature not accepted')],
+    ['132', refused('TX_REFUSED', 'signature disabled')],
+]);
+/**
+ * The wallet code refused, or its compute phase never ran. The code and the steps must each
+ * end at their comma, so a text cut short is never read as another code.
+ */
+const BY_TRANSACTION = /inbound external message rejected by transaction [0-9A-Fa-f]{64}:\nexitcode=(-?\d{1,10}), steps=(\d{1,10}),/;
+/**
+ * No code runs: the account does not exist, or has no code and no matching `StateInit`, no
+ * gas, or is frozen (a skipped compute phase reads `exitcode=0, steps=0`).
+ */
+const INACTIVE = refused('TX_REFUSED', 'wallet not active or not funded');
+const NO_ACCOUNT = /^(?:LITE_SERVER_UNKNOWN: )?(?:cannot apply external message to current state : )?Failed to unpack account state\s*$/;
+/**
+ * The balance cannot pay the import fee (transaction.cpp `unpack_input_msg`). The same text
+ * covers message shapes the builder never makes (an anycast or too deep destination).
+ */
+const BY_ACCOUNT = /inbound external message rejected by account [0-9A-Fa-f]{64} before smart-contract execution/;
+const NO_FUNDS = refused('INSUFFICIENT_FUNDS', 'insufficient funds');
+/** tonlib's answers to bytes that are no message; exact, anchored texts. */
+const NO_MESSAGE = /^Failed to unpack Message\s*$/;
+const BAD_BOC = /^INVALID_BAG_OF_CELLS: /;
+const MALFORMED_RESULT = refused('TX_REFUSED', 'malformed message');
+/**
+ * Success: this liteserver already took these exact bytes (it forgets a send that
+ * failed). Matched as strictly as a refusal: the whole answer, and only after every
+ * refusal pattern.
+ */
+const ALREADY_KNOWN = /^(?:LITE_SERVER_UNKNOWN: )?cannot send external message : duplicate message\s*$/;
+const ALREADY_KNOWN_RESULT = Object.freeze({ kind: 'already-known' });
+const REFUSED_BY_NODE = refused('TX_REFUSED', 'refused by the node');
+/**
+ * The node cannot check the message now (ext-message-pool.cpp): it is not ready or has too
+ * many checks pending (`ErrorCode::notready`, which tonlib names `LITE_SERVER_NOTREADY`),
+ * or it holds too many messages to this address. That says nothing about the message, and
+ * another node may take it: a transient failure, never a stalling refusal.
+ */
+const NOT_READY = /^LITE_SERVER_NOTREADY: /;
+const BUSY = /^(?:LITE_SERVER_UNKNOWN: )?(?:cannot apply external message to current state : )?(?:not ready|too many pending external message checks|too many external messages to address -?\d{1,10}:[0-9A-Fa-f]{64})\s*$/;
+/**
+ * @throws a retryable, ambiguous `ProviderError('PROVIDER_UNAVAILABLE')` for a transient
+ * answer (the message may still reach the network), as a transport failure is thrown.
+ */
+function classifyBroadcastError(message) {
+    // Texts anchored at both ends are read only when nothing was cut.
+    const whole = message.length <= MAX_TEXT;
+    // A v2 body the transport cut (300 characters) stays JSON-escaped: `\n` is two characters.
+    const text = message.slice(0, MAX_TEXT).replace(/\\n/g, '\n');
+    if (NOT_READY.test(text) || (whole && BUSY.test(text))) {
+        throw new error_1.ProviderError('PROVIDER_UNAVAILABLE', 'the node cannot take the message now; it may still reach the network', { retryable: true, ambiguous: true });
+    }
+    const compute = BY_TRANSACTION.exec(text);
+    if (compute) {
+        if (compute[1] === '0' && compute[2] === '0')
+            return INACTIVE;
+        return BY_EXIT_CODE.get(compute[1]) ?? REFUSED_BY_NODE;
+    }
+    if (whole && NO_ACCOUNT.test(text))
+        return INACTIVE;
+    if (BY_ACCOUNT.test(text))
+        return NO_FUNDS;
+    if (BAD_BOC.test(text) || (whole && NO_MESSAGE.test(text)))
+        return MALFORMED_RESULT;
+    if (whole && ALREADY_KNOWN.test(text))
+        return ALREADY_KNOWN_RESULT;
+    return REFUSED_BY_NODE;
+}
+//# sourceMappingURL=errors.js.map

package/dist/adapters/ton/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/adapters/ton/errors.ts"],"names":[],"mappings":";;AA+GA,wDAsBC;AAtGD,mDAAwD;AAIxD,MAAM,OAAO,GAAG,CAAC,IAAiB,EAAE,MAAc,EAAmB,EAAE,CACrE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAEnD,6FAA6F;AAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC;AAEtB;;;;GAIG;AACH,MAAM,YAAY,GAAyC,IAAI,GAAG,CAAC;IACjE,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IACnD,CAAC,KAAK,EAAE,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IACpD,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAChD,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IACjD,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IACnD,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IACpD,CAAC,IAAI,EAAE,OAAO,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;IACvD,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,wBAAwB,CAAC,CAAC;IACxD,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;CACrD,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,cAAc,GAClB,6GAA6G,CAAC;AAEhH;;;GAGG;AACH,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,EAAE,iCAAiC,CAAC,CAAC;AAC1E,MAAM,UAAU,GACd,qHAAqH,CAAC;AAExH;;;GAGG;AACH,MAAM,UAAU,GACd,8FAA8F,CAAC;AACjG,MAAM,QAAQ,GAAG,OAAO,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;AAErE,4EAA4E;AAC5E,MAAM,UAAU,GAAG,+BAA+B,CAAC;AACnD,MAAM,OAAO,GAAG,yBAAyB,CAAC;AAC1C,MAAM,gBAAgB,GAAG,OAAO,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;AAEpE;;;;GAIG;AACH,MAAM,aAAa,GACjB,iFAAiF,CAAC;AACpF,MAAM,oBAAoB,GAAoB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;AAEvF,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC;AAErE;;;;;GAKG;AACH,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAC5C,MAAM,IAAI,GACR,8MAA8M,CAAC;AAEjN;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,OAAe;IACpD,kEAAkE;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;IACzC,2FAA2F;IAC3F,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,qBAAa,CACrB,sBAAsB,EACtB,sEAAsE,EACtE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CACrC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,OAAO,QAAQ,CAAC;QAC9D,OAAO,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAW,CAAC,IAAI,eAAe,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpD,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACpF,IAAI,KAAK,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,oBAAoB,CAAC;IACnE,OAAO,eAAe,CAAC;AACzB,CAAC","sourcesContent":["/**\n * Classifies a definitive send refusal. toncenter answers every liteserver refusal, and\n * malformed bytes too, with HTTP 500, which the transport reports as an ambiguous failure\n * that the broadcaster rethrows unclassified. Its definitive 4xx answers (422) mean the\n * request did not parse. So this table serves the 4xx answers of other v2-compatible\n * endpoints, and it matches the chain's own texts only:\n * - liteserver.cpp `perform_sendMessage` prefixes \"cannot apply external message to current\n *   state : \", and tonlib names the liteserver's error code (\"LITE_SERVER_UNKNOWN: \");\n * - external-message.cpp `run_message_on_account` prefixes \"External message was not\n *   accepted: cannot run message on account: \";\n * - collator.cpp `impl_create_ordinary_transaction` writes \"inbound external message\n *   rejected by transaction <HEX>:\\nexitcode=<n>, steps=<n>, gas_used=<n>\" (then a VM\n *   log) when the wallet code refuses, and \"… rejected by account <HEX> before\n *   smart-contract execution\" when the balance cannot pay the import fee;\n * - ext-message-checker.cpp writes \"Failed to unpack account state\";\n * - liteserver-cache.hpp answers a repeated `sendMessage` \"duplicate message\", behind\n *   \"cannot send external message : \" (liteserver.cpp);\n * - ext-message-pool.cpp answers \"not ready\", \"too many pending external message checks\"\n *   and \"too many external messages to address <wc>:<HEX>\" when it cannot check a message\n *   now: those are thrown as transient failures, never classified.\n *\n * Every text-based answer is a refusal or a success, never `rejected`: one endpoint's\n * text decides no verdict, and a refused TON message still ends, proven, when it expires.\n * A `rejected` would end the Operation, and if a lying endpoint relayed the bytes anyway,\n * a caller's retry with a new seqno would pay twice. Bytes that are no external message\n * are `rejected` by the broadcaster itself, before anything is sent. Reasons are fixed\n * texts: a node's text carries addresses. Each pattern is linear and reads a bounded\n * prefix; a text anchored at both ends is matched only when that prefix is the whole\n * text, so the cut never completes one. SDK-free.\n */\nimport type { BroadcastResult } from '../../core/driver/types';\nimport { ProviderError } from '../../core/errors/error';\n\ntype RefusalCode = Extract<BroadcastResult, { kind: 'refused' }>['code'];\n\nconst refused = (code: RefusalCode, reason: string): BroadcastResult =>\n  Object.freeze({ kind: 'refused', code, reason });\n\n/** Only this much of a text is read; every chain text above ends its verdict well within. */\nconst MAX_TEXT = 1024;\n\n/**\n * The wallet code's refusals by exit code, all state-dependent (another seqno, a later\n * clock, a W5 extension that turns signatures back on): wallet-v4-code.fc checks 36, 33, 34\n * and 35; wallet_v5.fc `process_signed_request` checks 135, 132, 133, 134 and 136.\n */\nconst BY_EXIT_CODE: ReadonlyMap<string, BroadcastResult> = new Map([\n  ['33', refused('NONCE_CONFLICT', 'seqno mismatch')],\n  ['133', refused('NONCE_CONFLICT', 'seqno mismatch')],\n  ['36', refused('TX_EXPIRED', 'message expired')],\n  ['136', refused('TX_EXPIRED', 'message expired')],\n  ['34', refused('TX_REFUSED', 'wallet id mismatch')],\n  ['134', refused('TX_REFUSED', 'wallet id mismatch')],\n  ['35', refused('TX_REFUSED', 'signature not accepted')],\n  ['135', refused('TX_REFUSED', 'signature not accepted')],\n  ['132', refused('TX_REFUSED', 'signature disabled')],\n]);\n\n/**\n * The wallet code refused, or its compute phase never ran. The code and the steps must each\n * end at their comma, so a text cut short is never read as another code.\n */\nconst BY_TRANSACTION =\n  /inbound external message rejected by transaction [0-9A-Fa-f]{64}:\\nexitcode=(-?\\d{1,10}), steps=(\\d{1,10}),/;\n\n/**\n * No code runs: the account does not exist, or has no code and no matching `StateInit`, no\n * gas, or is frozen (a skipped compute phase reads `exitcode=0, steps=0`).\n */\nconst INACTIVE = refused('TX_REFUSED', 'wallet not active or not funded');\nconst NO_ACCOUNT =\n  /^(?:LITE_SERVER_UNKNOWN: )?(?:cannot apply external message to current state : )?Failed to unpack account state\\s*$/;\n\n/**\n * The balance cannot pay the import fee (transaction.cpp `unpack_input_msg`). The same text\n * covers message shapes the builder never makes (an anycast or too deep destination).\n */\nconst BY_ACCOUNT =\n  /inbound external message rejected by account [0-9A-Fa-f]{64} before smart-contract execution/;\nconst NO_FUNDS = refused('INSUFFICIENT_FUNDS', 'insufficient funds');\n\n/** tonlib's answers to bytes that are no message; exact, anchored texts. */\nconst NO_MESSAGE = /^Failed to unpack Message\\s*$/;\nconst BAD_BOC = /^INVALID_BAG_OF_CELLS: /;\nconst MALFORMED_RESULT = refused('TX_REFUSED', 'malformed message');\n\n/**\n * Success: this liteserver already took these exact bytes (it forgets a send that\n * failed). Matched as strictly as a refusal: the whole answer, and only after every\n * refusal pattern.\n */\nconst ALREADY_KNOWN =\n  /^(?:LITE_SERVER_UNKNOWN: )?cannot send external message : duplicate message\\s*$/;\nconst ALREADY_KNOWN_RESULT: BroadcastResult = Object.freeze({ kind: 'already-known' });\n\nconst REFUSED_BY_NODE = refused('TX_REFUSED', 'refused by the node');\n\n/**\n * The node cannot check the message now (ext-message-pool.cpp): it is not ready or has too\n * many checks pending (`ErrorCode::notready`, which tonlib names `LITE_SERVER_NOTREADY`),\n * or it holds too many messages to this address. That says nothing about the message, and\n * another node may take it: a transient failure, never a stalling refusal.\n */\nconst NOT_READY = /^LITE_SERVER_NOTREADY: /;\nconst BUSY =\n  /^(?:LITE_SERVER_UNKNOWN: )?(?:cannot apply external message to current state : )?(?:not ready|too many pending external message checks|too many external messages to address -?\\d{1,10}:[0-9A-Fa-f]{64})\\s*$/;\n\n/**\n * @throws a retryable, ambiguous `ProviderError('PROVIDER_UNAVAILABLE')` for a transient\n * answer (the message may still reach the network), as a transport failure is thrown.\n */\nexport function classifyBroadcastError(message: string): BroadcastResult {\n  // Texts anchored at both ends are read only when nothing was cut.\n  const whole = message.length <= MAX_TEXT;\n  // A v2 body the transport cut (300 characters) stays JSON-escaped: `\\n` is two characters.\n  const text = message.slice(0, MAX_TEXT).replace(/\\\\n/g, '\\n');\n  if (NOT_READY.test(text) || (whole && BUSY.test(text))) {\n    throw new ProviderError(\n      'PROVIDER_UNAVAILABLE',\n      'the node cannot take the message now; it may still reach the network',\n      { retryable: true, ambiguous: true },\n    );\n  }\n  const compute = BY_TRANSACTION.exec(text);\n  if (compute) {\n    if (compute[1] === '0' && compute[2] === '0') return INACTIVE;\n    return BY_EXIT_CODE.get(compute[1] as string) ?? REFUSED_BY_NODE;\n  }\n  if (whole && NO_ACCOUNT.test(text)) return INACTIVE;\n  if (BY_ACCOUNT.test(text)) return NO_FUNDS;\n  if (BAD_BOC.test(text) || (whole && NO_MESSAGE.test(text))) return MALFORMED_RESULT;\n  if (whole && ALREADY_KNOWN.test(text)) return ALREADY_KNOWN_RESULT;\n  return REFUSED_BY_NODE;\n}\n"]}

package/dist/adapters/ton/fees.d.ts

@@ -0,0 +1,28 @@
+import { type FeeEstimateDraft, type FeeOverride, type FeeSpeed } from '../../core/model/fee';
+import type { TonFeeDetails } from './types';
+/** The largest `Coins` value (TL-B `VarUInteger 16`): every nanogram amount on the wire. */
+export declare const MAX_COINS: bigint;
+export interface FeeRequest {
+    readonly speed: FeeSpeed | 'custom';
+    /** Jettons only: the override, or `undefined` for the network's default. */
+    readonly attached?: bigint;
+}
+/** Validates `TransferIntent.fee` for TON. */
+export declare function feeRequest(fee: FeeSpeed | FeeOverride, jetton: boolean): FeeRequest;
+/** The `network` charge of a draft's details. */
+export declare function networkFee(details: TonFeeDetails): bigint;
+/** The fee draft: `expected` for native coin, `upper` with the attached value for jettons. */
+export declare function tonFeeDraft(args: {
+    readonly speed: FeeSpeed | 'custom';
+    readonly details: TonFeeDetails;
+    /** Jetton transfers: how many jetton wallet messages carry `details.attached`. */
+    readonly jettonOutputs?: number;
+    readonly payer: string;
+}): FeeEstimateDraft;
+/**
+ * Parses `fee.details` back (drafts are stored records: plain data only). Strict: a
+ * missing or ill-typed field is refused, never filled with a default, so a damaged record
+ * cannot change what a transfer attaches or whether it deploys. `undefined` is absent, and
+ * keys the core adds (`requestedFee`) are not read.
+ */
+export declare function tonFeeDetails(details: Readonly<Record<string, unknown>>): TonFeeDetails;

package/dist/adapters/ton/fees.js

@@ -0,0 +1,121 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_COINS = void 0;
+exports.feeRequest = feeRequest;
+exports.networkFee = networkFee;
+exports.tonFeeDraft = tonFeeDraft;
+exports.tonFeeDetails = tonFeeDetails;
+/**
+ * The `ton` fee kind, pure: the `network` charge (import, gas and
+ * storage from the endpoint's emulation, plus every outgoing message's forward fee) and,
+ * for jettons, the `attached` charge whose unspent part the jetton wallet refunds. TON fees
+ * are fixed by the network config, so a speed changes nothing; the only override is the
+ * jetton `attached` value. Every amount is a bigint in nanograms, so no sum or product
+ * rounds. SDK-free.
+ */
+const error_1 = require("../../core/errors/error");
+const fee_1 = require("../../core/model/fee");
+/** The largest `Coins` value (TL-B `VarUInteger 16`): every nanogram amount on the wire. */
+exports.MAX_COINS = (1n << 120n) - 1n;
+const isCoins = (value) => typeof value === 'bigint' && value >= 0n && value <= exports.MAX_COINS;
+/** Validates `TransferIntent.fee` for TON. */
+function feeRequest(fee, jetton) {
+    if ((0, fee_1.isFeeSpeed)(fee))
+        return { speed: fee };
+    if (typeof fee !== 'object' || fee === null) {
+        throw new error_1.ValidationError('INVALID_INTENT', `a TON fee is a speed or an override object`);
+    }
+    const keys = Object.keys(fee).filter((key) => fee[key] !== undefined);
+    if (keys.some((key) => key !== 'attached')) {
+        throw new error_1.ValidationError('INVALID_INTENT', `a TON fee override takes only 'attached' (jetton transfers)`);
+    }
+    const attached = Object.hasOwn(fee, 'attached') ? fee.attached : undefined;
+    if (attached === undefined)
+        return { speed: 'custom' };
+    if (!jetton) {
+        throw new error_1.ValidationError('INVALID_INTENT', `'attached' applies to jetton transfers only`);
+    }
+    // Encoded as Coins in each jetton wallet message: range-checked here with a fixed text,
+    // never left to the encoder to wrap or throw.
+    if (!isCoins(attached) || attached === 0n) {
+        throw new error_1.ValidationError('INVALID_INTENT', `'attached' must be a bigint in [1, 2^120 - 1] (nanograms)`);
+    }
+    return { speed: 'custom', attached };
+}
+/** The `network` charge of a draft's details. */
+function networkFee(details) {
+    return details.importFee + details.gasFee + details.storageFee + details.forwardFee;
+}
+/** The fee draft: `expected` for native coin, `upper` with the attached value for jettons. */
+function tonFeeDraft(args) {
+    // A draft is a stored record of plain data: only what `tonFeeDetails` reads back.
+    const details = tonFeeDetails({ ...args.details });
+    const outputs = args.jettonOutputs;
+    if ((outputs === undefined) !== (details.attached === undefined)) {
+        throw new error_1.ValidationError('INVALID_INTENT', 'a TON jetton fee needs both its outputs and its attached value');
+    }
+    const charges = [
+        { asset: 'native', amount: networkFee(details), label: 'network' },
+    ];
+    if (outputs !== undefined) {
+        if (!Number.isSafeInteger(outputs) || outputs < 1) {
+            throw new error_1.ValidationError('INVALID_INTENT', 'a TON jetton fee needs a positive whole number of outputs');
+        }
+        charges.push({
+            asset: 'native',
+            amount: details.attached * BigInt(outputs),
+            label: 'attached',
+        });
+    }
+    return {
+        kind: 'ton',
+        speed: args.speed,
+        charges,
+        bound: outputs !== undefined ? 'upper' : 'expected',
+        payer: args.payer,
+        details: { ...details },
+    };
+}
+/**
+ * Parses `fee.details` back (drafts are stored records: plain data only). Strict: a
+ * missing or ill-typed field is refused, never filled with a default, so a damaged record
+ * cannot change what a transfer attaches or whether it deploys. `undefined` is absent, and
+ * keys the core adds (`requestedFee`) are not read.
+ */
+function tonFeeDetails(details) {
+    const field = (key) => Object.hasOwn(details, key) ? details[key] : undefined;
+    const refuse = (key) => {
+        throw new error_1.ValidationError('INVALID_INTENT', `the TON fee has no valid '${key}'`);
+    };
+    const coins = (key) => {
+        const value = field(key);
+        return isCoins(value) ? value : refuse(key);
+    };
+    const source = field('forwardFeeSource');
+    if (source !== 'emulated' && source !== 'computed')
+        refuse('forwardFeeSource');
+    const deploy = field('deploy');
+    if (typeof deploy !== 'boolean')
+        refuse('deploy');
+    const result = {
+        importFee: coins('importFee'),
+        gasFee: coins('gasFee'),
+        storageFee: coins('storageFee'),
+        forwardFee: coins('forwardFee'),
+        forwardFeeSource: source,
+        deploy: deploy,
+    };
+    let attached;
+    if (field('attached') !== undefined) {
+        attached = coins('attached');
+        if (attached === 0n)
+            refuse('attached');
+    }
+    const forwardAmount = field('forwardAmount') !== undefined ? coins('forwardAmount') : undefined;
+    return {
+        ...result,
+        ...(attached !== undefined ? { attached } : {}),
+        ...(forwardAmount !== undefined ? { forwardAmount } : {}),
+    };
+}
+//# sourceMappingURL=fees.js.map

package/dist/adapters/ton/fees.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fees.js","sourceRoot":"","sources":["../../../src/adapters/ton/fees.ts"],"names":[],"mappings":";;;AA8BA,gCAgCC;AAGD,gCAEC;AAGD,kCAwCC;AAQD,sCAkCC;AAxJD;;;;;;;GAOG;AACH,mDAA0D;AAC1D,8CAK8B;AAG9B,4FAA4F;AAC/E,QAAA,SAAS,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;AAE3C,MAAM,OAAO,GAAG,CAAC,KAAc,EAAmB,EAAE,CAClD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,EAAE,IAAI,KAAK,IAAI,iBAAS,CAAC;AAQjE,8CAA8C;AAC9C,SAAgB,UAAU,CAAC,GAA2B,EAAE,MAAe;IACrE,IAAI,IAAA,gBAAU,EAAC,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACvD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,wFAAwF;IACxF,8CAA8C;IAC9C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED,iDAAiD;AACjD,SAAgB,UAAU,CAAC,OAAsB;IAC/C,OAAO,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;AACtF,CAAC;AAED,8FAA8F;AAC9F,SAAgB,WAAW,CAAC,IAM3B;IACC,kFAAkF;IAClF,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;IACnC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG;QACd,EAAE,KAAK,EAAE,QAAiB,EAAE,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;KAC5E,CAAC;IACF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,2DAA2D,CAC5D,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,QAAQ;YACf,MAAM,EAAG,OAAO,CAAC,QAAmB,GAAG,MAAM,CAAC,OAAO,CAAC;YACtD,KAAK,EAAE,UAAU;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO;QACP,KAAK,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU;QACnD,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE;KACxB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,OAA0C;IACtE,MAAM,KAAK,GAAG,CAAC,GAAW,EAAW,EAAE,CACrC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,MAAM,MAAM,GAAG,CAAC,GAAW,EAAS,EAAE;QACpC,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,6BAA6B,GAAG,GAAG,CAAC,CAAC;IACnF,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAU,EAAE;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,UAAU;QAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,OAAO,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAkB;QAC5B,SAAS,EAAE,KAAK,CAAC,WAAW,CAAC;QAC7B,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;QACvB,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC;QAC/B,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC;QAC/B,gBAAgB,EAAE,MAA2C;QAC7D,MAAM,EAAE,MAAiB;KAC1B,CAAC;IACF,IAAI,QAA4B,CAAC;IACjC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;QACpC,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7B,IAAI,QAAQ,KAAK,EAAE;YAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,aAAa,GACjB,KAAK,CAAC,eAAe,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,OAAO;QACL,GAAG,MAAM;QACT,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC","sourcesContent":["/**\n * The `ton` fee kind, pure: the `network` charge (import, gas and\n * storage from the endpoint's emulation, plus every outgoing message's forward fee) and,\n * for jettons, the `attached` charge whose unspent part the jetton wallet refunds. TON fees\n * are fixed by the network config, so a speed changes nothing; the only override is the\n * jetton `attached` value. Every amount is a bigint in nanograms, so no sum or product\n * rounds. SDK-free.\n */\nimport { ValidationError } from '../../core/errors/error';\nimport {\n  isFeeSpeed,\n  type FeeEstimateDraft,\n  type FeeOverride,\n  type FeeSpeed,\n} from '../../core/model/fee';\nimport type { TonFeeDetails } from './types';\n\n/** The largest `Coins` value (TL-B `VarUInteger 16`): every nanogram amount on the wire. */\nexport const MAX_COINS = (1n << 120n) - 1n;\n\nconst isCoins = (value: unknown): value is bigint =>\n  typeof value === 'bigint' && value >= 0n && value <= MAX_COINS;\n\nexport interface FeeRequest {\n  readonly speed: FeeSpeed | 'custom';\n  /** Jettons only: the override, or `undefined` for the network's default. */\n  readonly attached?: bigint;\n}\n\n/** Validates `TransferIntent.fee` for TON. */\nexport function feeRequest(fee: FeeSpeed | FeeOverride, jetton: boolean): FeeRequest {\n  if (isFeeSpeed(fee)) return { speed: fee };\n  if (typeof fee !== 'object' || fee === null) {\n    throw new ValidationError(\n      'INVALID_INTENT',\n      `a TON fee is a speed or an override object`,\n    );\n  }\n  const keys = Object.keys(fee).filter((key) => fee[key] !== undefined);\n  if (keys.some((key) => key !== 'attached')) {\n    throw new ValidationError(\n      'INVALID_INTENT',\n      `a TON fee override takes only 'attached' (jetton transfers)`,\n    );\n  }\n  const attached = Object.hasOwn(fee, 'attached') ? fee.attached : undefined;\n  if (attached === undefined) return { speed: 'custom' };\n  if (!jetton) {\n    throw new ValidationError(\n      'INVALID_INTENT',\n      `'attached' applies to jetton transfers only`,\n    );\n  }\n  // Encoded as Coins in each jetton wallet message: range-checked here with a fixed text,\n  // never left to the encoder to wrap or throw.\n  if (!isCoins(attached) || attached === 0n) {\n    throw new ValidationError(\n      'INVALID_INTENT',\n      `'attached' must be a bigint in [1, 2^120 - 1] (nanograms)`,\n    );\n  }\n  return { speed: 'custom', attached };\n}\n\n/** The `network` charge of a draft's details. */\nexport function networkFee(details: TonFeeDetails): bigint {\n  return details.importFee + details.gasFee + details.storageFee + details.forwardFee;\n}\n\n/** The fee draft: `expected` for native coin, `upper` with the attached value for jettons. */\nexport function tonFeeDraft(args: {\n  readonly speed: FeeSpeed | 'custom';\n  readonly details: TonFeeDetails;\n  /** Jetton transfers: how many jetton wallet messages carry `details.attached`. */\n  readonly jettonOutputs?: number;\n  readonly payer: string;\n}): FeeEstimateDraft {\n  // A draft is a stored record of plain data: only what `tonFeeDetails` reads back.\n  const details = tonFeeDetails({ ...args.details });\n  const outputs = args.jettonOutputs;\n  if ((outputs === undefined) !== (details.attached === undefined)) {\n    throw new ValidationError(\n      'INVALID_INTENT',\n      'a TON jetton fee needs both its outputs and its attached value',\n    );\n  }\n  const charges = [\n    { asset: 'native' as const, amount: networkFee(details), label: 'network' },\n  ];\n  if (outputs !== undefined) {\n    if (!Number.isSafeInteger(outputs) || outputs < 1) {\n      throw new ValidationError(\n        'INVALID_INTENT',\n        'a TON jetton fee needs a positive whole number of outputs',\n      );\n    }\n    charges.push({\n      asset: 'native',\n      amount: (details.attached as bigint) * BigInt(outputs),\n      label: 'attached',\n    });\n  }\n  return {\n    kind: 'ton',\n    speed: args.speed,\n    charges,\n    bound: outputs !== undefined ? 'upper' : 'expected',\n    payer: args.payer,\n    details: { ...details },\n  };\n}\n\n/**\n * Parses `fee.details` back (drafts are stored records: plain data only). Strict: a\n * missing or ill-typed field is refused, never filled with a default, so a damaged record\n * cannot change what a transfer attaches or whether it deploys. `undefined` is absent, and\n * keys the core adds (`requestedFee`) are not read.\n */\nexport function tonFeeDetails(details: Readonly<Record<string, unknown>>): TonFeeDetails {\n  const field = (key: string): unknown =>\n    Object.hasOwn(details, key) ? details[key] : undefined;\n  const refuse = (key: string): never => {\n    throw new ValidationError('INVALID_INTENT', `the TON fee has no valid '${key}'`);\n  };\n  const coins = (key: string): bigint => {\n    const value = field(key);\n    return isCoins(value) ? value : refuse(key);\n  };\n  const source = field('forwardFeeSource');\n  if (source !== 'emulated' && source !== 'computed') refuse('forwardFeeSource');\n  const deploy = field('deploy');\n  if (typeof deploy !== 'boolean') refuse('deploy');\n  const result: TonFeeDetails = {\n    importFee: coins('importFee'),\n    gasFee: coins('gasFee'),\n    storageFee: coins('storageFee'),\n    forwardFee: coins('forwardFee'),\n    forwardFeeSource: source as TonFeeDetails['forwardFeeSource'],\n    deploy: deploy as boolean,\n  };\n  let attached: bigint | undefined;\n  if (field('attached') !== undefined) {\n    attached = coins('attached');\n    if (attached === 0n) refuse('attached');\n  }\n  const forwardAmount =\n    field('forwardAmount') !== undefined ? coins('forwardAmount') : undefined;\n  return {\n    ...result,\n    ...(attached !== undefined ? { attached } : {}),\n    ...(forwardAmount !== undefined ? { forwardAmount } : {}),\n  };\n}\n"]}

package/dist/adapters/ton/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `crypto-aio/ton`: the SDK-free TON types, the family's peer dependencies and
+ * capabilities, and the `crypto-aio/native` client type: importing this entry types
+ * `native(bc, '@ton/ton')` as a `TonClient`.
+ *
+ * @module crypto-aio/ton
+ */
+import type { TonClient } from '@ton/ton';
+declare module '../../index' {
+    interface NativeClientMap {
+        '@ton/ton': TonClient;
+    }
+}
+export { TON_PEER_DEPENDENCIES } from './plugin';
+export { TON_CAPABILITIES, TON_INDEXER_CAPABILITIES } from './network';
+export type { TonExt, TonFeeDetails, TonFeeOverride, TonSeqnoOrdering, TonWalletIdentity, TonWalletVersion, } from './types';

package/dist/adapters/ton/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TON_INDEXER_CAPABILITIES = exports.TON_CAPABILITIES = exports.TON_PEER_DEPENDENCIES = void 0;
+var plugin_1 = require("./plugin");
+Object.defineProperty(exports, "TON_PEER_DEPENDENCIES", { enumerable: true, get: function () { return plugin_1.TON_PEER_DEPENDENCIES; } });
+var network_1 = require("./network");
+Object.defineProperty(exports, "TON_CAPABILITIES", { enumerable: true, get: function () { return network_1.TON_CAPABILITIES; } });
+Object.defineProperty(exports, "TON_INDEXER_CAPABILITIES", { enumerable: true, get: function () { return network_1.TON_INDEXER_CAPABILITIES; } });
+//# sourceMappingURL=index.js.map

package/dist/adapters/ton/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/ton/index.ts"],"names":[],"mappings":";;;AAgBA,mCAAiD;AAAxC,+GAAA,qBAAqB,OAAA;AAC9B,qCAAuE;AAA9D,2GAAA,gBAAgB,OAAA;AAAE,mHAAA,wBAAwB,OAAA","sourcesContent":["/**\n * `crypto-aio/ton`: the SDK-free TON types, the family's peer dependencies and\n * capabilities, and the `crypto-aio/native` client type: importing this entry types\n * `native(bc, '@ton/ton')` as a `TonClient`.\n *\n * @module crypto-aio/ton\n */\nimport type { TonClient } from '@ton/ton';\n\n// Through the package entry, as users augment 'crypto-aio'. SDK types appear only here.\ndeclare module '../../index' {\n  interface NativeClientMap {\n    '@ton/ton': TonClient;\n  }\n}\n\nexport { TON_PEER_DEPENDENCIES } from './plugin';\nexport { TON_CAPABILITIES, TON_INDEXER_CAPABILITIES } from './network';\nexport type {\n  TonExt,\n  TonFeeDetails,\n  TonFeeOverride,\n  TonSeqnoOrdering,\n  TonWalletIdentity,\n  TonWalletVersion,\n} from './types';\n"]}

package/dist/adapters/ton/messages.d.ts

@@ -0,0 +1,157 @@
+/**
+ * TON message bodies over `@ton/core`: text comments (the memo), native transfers, TEP-74
+ * jetton transfers, and the decoders the verdict and history paths use. Loaded only
+ * through the adapter manifest's `load()`.
+ */
+import { Address, Cell, type MessageRelaxed } from '@ton/core';
+/** TEP-74 op codes, and the text-comment op (0). */
+export declare const OP: Readonly<{
+    comment: 0;
+    jettonTransfer: 260734629;
+    jettonInternalTransfer: 395134233;
+    jettonNotification: 1935855772;
+    jettonExcesses: 3576854235;
+    w5SignedExternal: 1936287598;
+    w5SignedInternal: 1936289396;
+}>;
+/** The longest memo, in UTF-8 bytes (library policy: comments stay a few cells). */
+export declare const MAX_MEMO_BYTES = 1024;
+/**
+ * The longest provider text `addressFromBoc` decodes (untrusted text is capped before
+ * decoding). An address is one cell of at most 1023 bits, under 200 base64 characters as
+ * a BOC; the rest leaves room for a slice that still carries refs, so a jetton wallet is
+ * never refused for its encoding.
+ */
+export declare const MAX_ADDRESS_BOC_LENGTH = 4096;
+export { MAX_BODY_BOC_LENGTH, MAX_BODY_CELLS } from './api';
+/**
+ * The most cells a comment's snake chain may span. A cell holds at most 127 bytes, so a
+ * memo of `MAX_MEMO_BYTES` spans 9 cells; 256 cells (about 32 KB of text) keeps the
+ * longer comments other wallets write readable while bounding the work on an untrusted
+ * body. A longer chain reads as no comment.
+ */
+export declare const MAX_COMMENT_CELLS = 256;
+/**
+ * The SDK's `Address` for a raw address, parsed strictly: `Address.parseRaw` takes any
+ * `parseInt` workchain and throws a bare `Error`.
+ */
+export declare function sdkAddress(raw: string): Address;
+export declare function memoBytes(memo: string): number;
+/** A text comment: op 0, then the UTF-8 text as a snake string. */
+export declare function commentCell(memo: string): Cell;
+/** A native transfer of `value` nanograms; `bounce` comes from the recipient's address. */
+export declare function nativeMessage(args: {
+    readonly to: string;
+    readonly value: bigint;
+    readonly bounce: boolean;
+    readonly memo?: string;
+}): MessageRelaxed;
+/**
+ * A TEP-74 `transfer` to the sender's own jetton wallet: `amount` base units to the owner
+ * `destination`, excess back to `responseDestination`, and `forwardAmount` nanograms with
+ * the memo (if any) as the recipient's notification payload.
+ */
+export declare function jettonMessage(args: {
+    readonly jettonWallet: string;
+    readonly attached: bigint;
+    readonly queryId: bigint;
+    readonly amount: bigint;
+    readonly destination: string;
+    readonly responseDestination: string;
+    readonly forwardAmount: bigint;
+    readonly memo?: string;
+}): MessageRelaxed;
+/** A one-cell slice holding `raw`: the `get_wallet_address` argument, as base64 BOC. */
+export declare function addressArgument(raw: string): string;
+/** The address a get-method returned in a cell or slice (base64 BOC); null if none. */
+export declare function addressFromBoc(boc: string): string | null;
+/**
+ * The text of a comment body, or undefined for any other body. The snake string is read
+ * in one pass: `@ton/core`'s `loadStringTail` recurses per cell and concatenates at each
+ * level, which is quadratic in the chain length (3.6 s for one 1 MB comment). Past
+ * `MAX_COMMENT_CELLS` cells, or for a cell that is not a whole number of bytes with at
+ * most one ref, it is no comment.
+ */
+export declare function decodeComment(body: Cell): string | undefined;
+export interface JettonTransferBody {
+    readonly queryId: bigint;
+    readonly amount: bigint;
+    readonly destination: string;
+    /** Where the excess goes; null for `addr_none` or a workchain other than 0 or -1. */
+    readonly responseDestination: string | null;
+    /** Whether a `custom_payload` rides along (for the jetton wallet's own code). */
+    readonly customPayload: boolean;
+    readonly forwardAmount: bigint;
+    readonly comment?: string;
+}
+/** A TEP-74 `transfer` body, or null for any other body. */
+export declare function decodeJettonTransfer(body: Cell): JettonTransferBody | null;
+export interface JettonInternalTransferBody {
+    readonly queryId: bigint;
+    readonly amount: bigint;
+    /** The sending owner, when the body names one. */
+    readonly from: string | null;
+    readonly comment?: string;
+}
+/** A TEP-74 `internal_transfer` body, or null for any other body. */
+export declare function decodeJettonInternalTransfer(body: Cell): JettonInternalTransferBody | null;
+export interface JettonNotificationBody {
+    readonly queryId: bigint;
+    readonly amount: bigint;
+    /** The sending owner, when the body names one. */
+    readonly sender: string | null;
+    readonly comment?: string;
+}
+/** A TEP-74 `transfer_notification` body, or null for any other body. */
+export declare function decodeJettonNotification(body: Cell): JettonNotificationBody | null;
+export interface WalletRequest {
+    /**
+     * `internal`: a W5 signed request relayed in an internal message (gasless). Anyone can
+     * post such a body: it proves nothing until `requestIsOwn` authenticates it.
+     */
+    readonly auth: 'external' | 'internal';
+    /** v4r2: the subwallet id; v5r1: the signed 32-bit wallet id. */
+    readonly walletId: number;
+    readonly seqno: number;
+    readonly validUntil: number;
+    readonly messages: readonly MessageRelaxed[];
+    /** Each message's send mode, as the wallet reads it (`modes[i]` for `messages[i]`). */
+    readonly modes: readonly number[];
+}
+/**
+ * The signed header of an external wallet request, read alone, as the proof reads a
+ * consumer's seqno, so that the replay guard knows stored bytes whose message list does
+ * not decode: a W5 request's (its op, then the wallet id, `valid_until` and seqno, in a
+ * body of exactly a W5 request's length) or a v4r2 request's (after the signature,
+ * whatever the op). Null when the body cannot hold one. Nothing here says whose request
+ * it is.
+ */
+export declare function requestHeaderOf(body: Cell): {
+    readonly walletId: number;
+    readonly validUntil: number;
+    readonly seqno: number;
+} | null;
+/**
+ * The signed request inside a v4r2 or v5r1 external message body: its seqno, lifetime and
+ * the internal messages it asks for. Null for anything else (another wallet, a plugin or
+ * extension request): the verdict then has no evidence and decides nothing.
+ */
+export declare function decodeWalletRequest(body: Cell): WalletRequest | null;
+/** A message's destination (raw), value and body hash (hex), for matching on chain. */
+export declare function messageFacts(message: MessageRelaxed): {
+    readonly to: string;
+    readonly value: bigint;
+    readonly bodyHash: string;
+    readonly body: Cell;
+} | null;
+/** A body cell from a base64 BOC; null when it does not parse. */
+export declare function cellFromBoc(boc: string | null | undefined): Cell | null;
+/**
+ * An indexed message's body, bound to the body hash the quorum keyed. A body that does
+ * not parse or hash to `bodyHash`, or that comes without one, is a malformed answer
+ * (retryable): no verdict or decoding ever reads an unbound body.
+ */
+export declare function messageBody(message: {
+    readonly body?: string;
+    readonly bodyHash?: string;
+}): Cell | null;