crypto-aio 0.0.3 → 0.1.0

package/dist/adapters/ton/types.d.ts

@@ -0,0 +1,105 @@
+/**
+ * SDK-free types of the TON family: the wallet identity, the `ext.ton` API, fee
+ * details and overrides, and the transport tags. Nothing here imports an SDK, so the
+ * composition root can export these types.
+ */
+import type { CallOptions } from '../../core/transport/types';
+declare module '../../index' {
+    interface ChainRegistry {
+        ton: {
+            family: 'ton';
+            network: 'mainnet' | 'testnet';
+        };
+    }
+    interface FamilyRegistry {
+        ton: {
+            library: '@ton/ton';
+            ext: TonExt;
+            fee: TonFeeDetails;
+        };
+    }
+}
+export type TonWalletVersion = 'v4r2' | 'v5r1';
+/**
+ * The wallet contract behind a TON address. Every field determines the address,
+ * so it is wallet config (`wallets.<name>.ton`), never a per-call option.
+ * - v4r2: `subwalletId` defaults to `698983191 + workchain`.
+ * - v5r1: `subwalletNumber` defaults to 0 (15 bits); `networkGlobalId` defaults to the
+ *   network's global id (-239 mainnet, -3 testnet) and must equal it.
+ */
+export type TonWalletIdentity = {
+    readonly version: 'v4r2';
+    readonly workchain?: 0 | -1;
+    readonly subwalletId?: number;
+} | {
+    readonly version: 'v5r1';
+    readonly workchain?: 0 | -1;
+    readonly subwalletNumber?: number;
+    readonly networkGlobalId?: number;
+};
+/** `bc.ext.ton`: the TON family extension. */
+export interface TonExt {
+    readonly ton: {
+        /** The wallet's seqno at the latest masterchain block; 0 while it is not deployed. */
+        getSeqno(address: string): Promise<bigint>;
+        /** The jetton wallet that `owner` holds for the jetton `master` (raw form). */
+        jettonWallet(owner: string, master: string): Promise<string>;
+    };
+}
+/**
+ * `FeeEstimate.details` of the `ton` fee kind, in nanograms. The `network` charge is
+ * `importFee + gasFee + storageFee + forwardFee`; a jetton transfer adds an `attached`
+ * charge (`attached` per output), whose unspent part the jetton wallet refunds.
+ */
+export interface TonFeeDetails {
+    /** The inbound external message's import fee. */
+    readonly importFee: bigint;
+    /** The wallet's compute phase, from the endpoint's emulation. */
+    readonly gasFee: bigint;
+    readonly storageFee: bigint;
+    /** The forward fees of every outgoing internal message (full `fwd_fee`), counted once. */
+    readonly forwardFee: bigint;
+    /**
+     * Where `forwardFee` comes from: the endpoint's emulation (`fwd_fee`, which follows
+     * the real action list), or, when it reports none, config params 24/25.
+     */
+    readonly forwardFeeSource: 'emulated' | 'computed';
+    /** Jetton transfers: the value attached to each jetton wallet message. */
+    readonly attached?: bigint;
+    /** Jetton transfers: `forward_ton_amount`, which pays for the recipient's notification. */
+    readonly forwardAmount?: bigint;
+    /** Whether the message deploys the wallet (its first send carries the `StateInit`). */
+    readonly deploy: boolean;
+}
+/**
+ * An explicit TON fee (`TransferIntent.fee`). TON fees are fixed by the network config, so
+ * there is nothing to bid; a jetton transfer may change the value attached to each jetton
+ * wallet message (default: the network's `jettonAttached`).
+ */
+export interface TonFeeOverride {
+    readonly attached?: bigint;
+}
+/**
+ * The seqno ordering a TON build records: the signed seqno and `valid_until`, and
+ * `validFrom`, the chain time the build ran at (the state's `sync_utime`, and never later
+ * than the local clock), in seconds. The message cannot run in a block older than that, less
+ * the builder's chain-time tolerance, so a proof that it was not included walks the
+ * wallet's history back to there, whatever the network's `validForSeconds` is now. It is a
+ * core `seqno` ordering with one more property, which the core stores whole. A store that
+ * drops `validFrom` costs only liveness (the proof and the replay guard fall back to a
+ * one-day window); one that moves it later could hide a wallet reset and prove "not
+ * included" falsely, and a `rebuild` would then pay twice.
+ */
+export interface TonSeqnoOrdering {
+    readonly kind: 'seqno';
+    readonly seqno: bigint;
+    readonly validUntil: number;
+    readonly validFrom: number;
+}
+/**
+ * The transport tags every TON I/O call carries, as the `ChainDriver` contract table sets
+ * them. A caller's `quorumKey` replaces the call's default consensus key: proofs attest a
+ * monotone predicate, such as "my seqno is above n", instead of comparing data read at a
+ * moving head.
+ */
+export type TonCallTags = Pick<CallOptions, 'purpose' | 'retry' | 'quorum' | 'quorumKey' | 'fanout' | 'signal'>;

package/dist/{type/transact.js → adapters/ton/types.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=transact.js.map
+//# sourceMappingURL=types.js.map

package/dist/adapters/ton/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/adapters/ton/types.ts"],"names":[],"mappings":"","sourcesContent":["/**\n * SDK-free types of the TON family: the wallet identity, the `ext.ton` API, fee\n * details and overrides, and the transport tags. Nothing here imports an SDK, so the\n * composition root can export these types.\n */\nimport type { CallOptions } from '../../core/transport/types';\n\n// Augment the registries through the package entry, as users do with 'crypto-aio'.\ndeclare module '../../index' {\n  interface ChainRegistry {\n    ton: { family: 'ton'; network: 'mainnet' | 'testnet' };\n  }\n  interface FamilyRegistry {\n    ton: { library: '@ton/ton'; ext: TonExt; fee: TonFeeDetails };\n  }\n}\n\nexport type TonWalletVersion = 'v4r2' | 'v5r1';\n\n/**\n * The wallet contract behind a TON address. Every field determines the address,\n * so it is wallet config (`wallets.<name>.ton`), never a per-call option.\n * - v4r2: `subwalletId` defaults to `698983191 + workchain`.\n * - v5r1: `subwalletNumber` defaults to 0 (15 bits); `networkGlobalId` defaults to the\n *   network's global id (-239 mainnet, -3 testnet) and must equal it.\n */\nexport type TonWalletIdentity =\n  | {\n      readonly version: 'v4r2';\n      readonly workchain?: 0 | -1;\n      readonly subwalletId?: number;\n    }\n  | {\n      readonly version: 'v5r1';\n      readonly workchain?: 0 | -1;\n      readonly subwalletNumber?: number;\n      readonly networkGlobalId?: number;\n    };\n\n/** `bc.ext.ton`: the TON family extension. */\nexport interface TonExt {\n  readonly ton: {\n    /** The wallet's seqno at the latest masterchain block; 0 while it is not deployed. */\n    getSeqno(address: string): Promise<bigint>;\n    /** The jetton wallet that `owner` holds for the jetton `master` (raw form). */\n    jettonWallet(owner: string, master: string): Promise<string>;\n  };\n}\n\n/**\n * `FeeEstimate.details` of the `ton` fee kind, in nanograms. The `network` charge is\n * `importFee + gasFee + storageFee + forwardFee`; a jetton transfer adds an `attached`\n * charge (`attached` per output), whose unspent part the jetton wallet refunds.\n */\nexport interface TonFeeDetails {\n  /** The inbound external message's import fee. */\n  readonly importFee: bigint;\n  /** The wallet's compute phase, from the endpoint's emulation. */\n  readonly gasFee: bigint;\n  readonly storageFee: bigint;\n  /** The forward fees of every outgoing internal message (full `fwd_fee`), counted once. */\n  readonly forwardFee: bigint;\n  /**\n   * Where `forwardFee` comes from: the endpoint's emulation (`fwd_fee`, which follows\n   * the real action list), or, when it reports none, config params 24/25.\n   */\n  readonly forwardFeeSource: 'emulated' | 'computed';\n  /** Jetton transfers: the value attached to each jetton wallet message. */\n  readonly attached?: bigint;\n  /** Jetton transfers: `forward_ton_amount`, which pays for the recipient's notification. */\n  readonly forwardAmount?: bigint;\n  /** Whether the message deploys the wallet (its first send carries the `StateInit`). */\n  readonly deploy: boolean;\n}\n\n/**\n * An explicit TON fee (`TransferIntent.fee`). TON fees are fixed by the network config, so\n * there is nothing to bid; a jetton transfer may change the value attached to each jetton\n * wallet message (default: the network's `jettonAttached`).\n */\nexport interface TonFeeOverride {\n  readonly attached?: bigint;\n}\n\n/**\n * The seqno ordering a TON build records: the signed seqno and `valid_until`, and\n * `validFrom`, the chain time the build ran at (the state's `sync_utime`, and never later\n * than the local clock), in seconds. The message cannot run in a block older than that, less\n * the builder's chain-time tolerance, so a proof that it was not included walks the\n * wallet's history back to there, whatever the network's `validForSeconds` is now. It is a\n * core `seqno` ordering with one more property, which the core stores whole. A store that\n * drops `validFrom` costs only liveness (the proof and the replay guard fall back to a\n * one-day window); one that moves it later could hide a wallet reset and prove \"not\n * included\" falsely, and a `rebuild` would then pay twice.\n */\nexport interface TonSeqnoOrdering {\n  readonly kind: 'seqno';\n  readonly seqno: bigint;\n  readonly validUntil: number;\n  readonly validFrom: number;\n}\n\n/**\n * The transport tags every TON I/O call carries, as the `ChainDriver` contract table sets\n * them. A caller's `quorumKey` replaces the call's default consensus key: proofs attest a\n * monotone predicate, such as \"my seqno is above n\", instead of comparing data read at a\n * moving head.\n */\nexport type TonCallTags = Pick<\n  CallOptions,\n  'purpose' | 'retry' | 'quorum' | 'quorumKey' | 'fanout' | 'signal'\n>;\n"]}

package/dist/adapters/ton/wallets.d.ts

@@ -0,0 +1,86 @@
+/**
+ * TON wallet contracts, over `@ton/core` and `@ton/ton`: the wallet identity,
+ * its address and `StateInit`, the signing message, and the external message around it.
+ * Loaded only through the adapter manifest's `load()`.
+ *
+ * Signing flow: `build` asks the SDK for the transfer body with a zero signature and keeps
+ * the whole unsigned external message (a BOC) as the payload; the one ed25519 request signs
+ * the signing message's cell hash. `assemble` finds the 512 zero bits the signature
+ * replaces (front for v4r2, tail for v5r1) by the one position whose remainder hashes to
+ * the signed digest, so it needs no wallet version and cannot write a signature anywhere
+ * else.
+ */
+import { Cell, type MessageRelaxed, type StateInit } from '@ton/core';
+import type { WalletOptions } from '../../core/driver/types';
+import { type TonWorkchain } from './address';
+import { sdkAddress } from './messages';
+import type { TonWalletVersion } from './types';
+/** Messages one external request may carry: 4 refs per cell (v4r2), 255 (v5r1). */
+export declare const MAX_MESSAGES: Readonly<Record<TonWalletVersion, number>>;
+/** Pay forward fees separately and never fail the action phase (W5 requires +2). */
+export declare const SEND_MODE: number;
+/** The resolved wallet identity: every field that determines the address. */
+export type TonIdentity = {
+    readonly version: 'v4r2';
+    readonly workchain: TonWorkchain;
+    readonly subwalletId: number;
+} | {
+    readonly version: 'v5r1';
+    readonly workchain: TonWorkchain;
+    readonly subwalletNumber: number;
+    readonly networkGlobalId: number;
+};
+/**
+ * `wallets.<name>.ton` validated against the network: a v5r1 wallet id made for
+ * another network is refused before any key is used. Every problem is `CONFIG_INVALID`.
+ */
+export declare function resolveIdentity(wallet: WalletOptions | undefined, globalId: number): TonIdentity;
+/** The wallet's raw address: the hash of its `StateInit` in its workchain. */
+export declare function walletAddress(identity: TonIdentity, publicKey: Uint8Array): string;
+/** The code and data a first message carries to deploy the wallet. */
+export declare function walletStateInit(identity: TonIdentity, publicKey: Uint8Array): StateInit;
+/** The wallet's wire wallet id (v4r2: the subwallet id; v5r1: the signed 32-bit id). */
+export declare function walletIdOf(identity: TonIdentity, publicKey: Uint8Array): number;
+export interface UnsignedRequest {
+    /** The unsigned external message: the wallet body with 512 zero bits for the signature. */
+    readonly message: Cell;
+    /** The signing message's cell hash: what the ed25519 key signs. */
+    readonly digest: Uint8Array;
+}
+/**
+ * The external request for `messages` at `seqno`, valid while chain time is before
+ * `validUntil` (seconds). `init` deploys the wallet with its first message.
+ */
+export declare function unsignedRequest(identity: TonIdentity, publicKey: Uint8Array, args: {
+    readonly seqno: number;
+    readonly validUntil: number;
+    readonly messages: readonly MessageRelaxed[];
+    readonly deploy: boolean;
+}): Promise<UnsignedRequest>;
+/**
+ * The signed external message: `signature` in place of the 512 zero bits whose remainder
+ * hashes to `digest` (the front for v4r2, the tail for v5r1). Refuses (`SIGNING_FAILED`) a
+ * payload with no such position, so a signature can never land anywhere else.
+ */
+export declare function signedRequest(unsigned: Cell, digest: Uint8Array, signature: Uint8Array): Cell;
+/**
+ * TEP-467: the hash of the external-in message with `src` = addr_none, `import_fee` = 0,
+ * no `init`, and the body always as a reference. Stable across relays; the Attempt id.
+ */
+export declare function normalizedHash(externalMessage: Cell): Uint8Array;
+/**
+ * Whether the wallet request `body` (external, or a W5
+ * `internal_signed` request relayed in an internal message) is `from`'s own. Anyone can post
+ * a relayed body, and a lone lying indexer can make up an external one, so a request
+ * proves nothing unless its ed25519 signature verifies over the rest of the request under
+ * `publicKey`, the wallet's key (v4r2: the first 512 bits; v5r1: the last 512), and its
+ * wallet id derives `from` with that key (v4r2: the subwallet id in `from`'s workchain;
+ * v5r1: the signed wallet id). A request of another wallet sharing the key, replayed
+ * here, never counts. For a relayed request the caller also requires the transaction's
+ * compute phase to have succeeded, i.e. the wallet ran it.
+ */
+export declare function requestIsOwn(from: string, body: Cell, publicKey: Uint8Array, globalId: number): boolean;
+/** The SDK's `Address` for a raw address, parsed strictly. */
+export { sdkAddress };
+/** The TEP-467 hash (hex) of the external message `body` to `account` would travel in. */
+export declare function externalHashOf(account: string, body: Cell): string;

package/dist/adapters/ton/wallets.js

@@ -0,0 +1,373 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sdkAddress = exports.SEND_MODE = exports.MAX_MESSAGES = void 0;
+exports.resolveIdentity = resolveIdentity;
+exports.walletAddress = walletAddress;
+exports.walletStateInit = walletStateInit;
+exports.walletIdOf = walletIdOf;
+exports.unsignedRequest = unsignedRequest;
+exports.signedRequest = signedRequest;
+exports.normalizedHash = normalizedHash;
+exports.requestIsOwn = requestIsOwn;
+exports.externalHashOf = externalHashOf;
+/**
+ * TON wallet contracts, over `@ton/core` and `@ton/ton`: the wallet identity,
+ * its address and `StateInit`, the signing message, and the external message around it.
+ * Loaded only through the adapter manifest's `load()`.
+ *
+ * Signing flow: `build` asks the SDK for the transfer body with a zero signature and keeps
+ * the whole unsigned external message (a BOC) as the payload; the one ed25519 request signs
+ * the signing message's cell hash. `assemble` finds the 512 zero bits the signature
+ * replaces (front for v4r2, tail for v5r1) by the one position whose remainder hashes to
+ * the signed digest, so it needs no wallet version and cannot write a signature anywhere
+ * else.
+ */
+const core_1 = require("@ton/core");
+const ed25519_1 = require("@noble/curves/ed25519");
+const ton_1 = require("@ton/ton");
+const error_1 = require("../../core/errors/error");
+const address_1 = require("./address");
+const messages_1 = require("./messages");
+Object.defineProperty(exports, "sdkAddress", { enumerable: true, get: function () { return messages_1.sdkAddress; } });
+/** Messages one external request may carry: 4 refs per cell (v4r2), 255 (v5r1). */
+exports.MAX_MESSAGES = Object.freeze({
+    v4r2: 4,
+    v5r1: 255,
+});
+/** Pay forward fees separately and never fail the action phase (W5 requires +2). */
+exports.SEND_MODE = core_1.SendMode.PAY_GAS_SEPARATELY + core_1.SendMode.IGNORE_ERRORS;
+const V4_KEYS = new Set(['version', 'workchain', 'subwalletId']);
+const V5_KEYS = new Set(['version', 'workchain', 'subwalletNumber', 'networkGlobalId']);
+/**
+ * `wallets.<name>.ton` validated against the network: a v5r1 wallet id made for
+ * another network is refused before any key is used. Every problem is `CONFIG_INVALID`.
+ */
+function resolveIdentity(wallet, globalId) {
+    const fail = (reason) => {
+        throw new error_1.ConfigError('CONFIG_INVALID', `TON wallet: ${reason}`);
+    };
+    const ton = wallet?.ton;
+    if (ton === undefined || ton === null || typeof ton !== 'object') {
+        return fail(`set wallets.<name>.ton = { version: 'v4r2' | 'v5r1' }`);
+    }
+    const config = ton;
+    const version = config.version;
+    if (version !== 'v4r2' && version !== 'v5r1') {
+        return fail(`version must be 'v4r2' or 'v5r1'`);
+    }
+    const allowed = version === 'v4r2' ? V4_KEYS : V5_KEYS;
+    for (const key of Object.keys(config)) {
+        if (config[key] !== undefined && !allowed.has(key)) {
+            // The caller's key is never echoed (it could be a pasted secret).
+            fail(`a ${version} wallet takes only ${[...allowed].join(', ')}`);
+        }
+    }
+    const workchain = config.workchain ?? 0;
+    if (workchain !== 0 && workchain !== -1)
+        fail('workchain must be 0 or -1');
+    const wc = workchain;
+    if (version === 'v4r2') {
+        const subwalletId = config.subwalletId ?? 698983191 + wc;
+        if (!Number.isInteger(subwalletId) ||
+            subwalletId < 0 ||
+            subwalletId > 0xffffffff) {
+            fail('subwalletId must be an integer in [0, 2^32 - 1]');
+        }
+        return { version, workchain: wc, subwalletId: subwalletId };
+    }
+    const subwalletNumber = config.subwalletNumber ?? 0;
+    if (!Number.isInteger(subwalletNumber) ||
+        subwalletNumber < 0 ||
+        subwalletNumber > 0x7fff) {
+        fail('subwalletNumber must be an integer in [0, 32767]');
+    }
+    const networkGlobalId = config.networkGlobalId ?? globalId;
+    if (networkGlobalId !== globalId) {
+        fail(`networkGlobalId is not this network's (${globalId})`);
+    }
+    return {
+        version,
+        workchain: wc,
+        subwalletNumber: subwalletNumber,
+        networkGlobalId: globalId,
+    };
+}
+/** A strict (RFC 8032) encoding of a point that is not of small order. */
+function canonicalKey(publicKey) {
+    try {
+        return !ed25519_1.ed25519.Point.fromHex(publicKey, false).isSmallOrder();
+    }
+    catch {
+        return false;
+    }
+}
+const isInt = (value, min, max) => Number.isInteger(value) && value >= min && value <= max;
+/**
+ * Every identity field fits the wire field the SDK writes it into (workchain
+ * int8, subwallet id uint32, subwallet number uint15, network id int32), so an identity
+ * not made by `resolveIdentity` is refused rather than wrapped or thrown as a bare `Error`.
+ */
+function identityFits(identity) {
+    if (identity.workchain !== 0 && identity.workchain !== -1)
+        return false;
+    if (identity.version === 'v4r2')
+        return isInt(identity.subwalletId, 0, 0xffffffff);
+    return (identity.version === 'v5r1' &&
+        isInt(identity.subwalletNumber, 0, 0x7fff) &&
+        isInt(identity.networkGlobalId, -0x80000000, 0x7fffffff));
+}
+function contractOf(identity, publicKey) {
+    if (!identityFits(identity)) {
+        throw new error_1.ConfigError('CONFIG_INVALID', 'the TON wallet identity is out of range');
+    }
+    if (publicKey.length !== 32 || !canonicalKey(publicKey)) {
+        throw new error_1.ConfigError('CONFIG_INVALID', 'a TON wallet key must be a canonical 32-byte ed25519 public key');
+    }
+    const key = Buffer.from(publicKey);
+    if (identity.version === 'v4r2') {
+        return ton_1.WalletContractV4.create({
+            workchain: identity.workchain,
+            publicKey: key,
+            walletId: identity.subwalletId,
+        });
+    }
+    // Every field explicit: the SDK's defaults are mainnet's id and workchain 0.
+    return ton_1.WalletContractV5R1.create({
+        publicKey: key,
+        walletId: {
+            networkGlobalId: identity.networkGlobalId,
+            context: {
+                workchain: identity.workchain,
+                walletVersion: 'v5r1',
+                subwalletNumber: identity.subwalletNumber,
+            },
+        },
+    });
+}
+/** The wallet's raw address: the hash of its `StateInit` in its workchain. */
+function walletAddress(identity, publicKey) {
+    const contract = contractOf(identity, publicKey);
+    return (0, address_1.rawAddress)(identity.workchain, contract.address.hash);
+}
+/** The code and data a first message carries to deploy the wallet. */
+function walletStateInit(identity, publicKey) {
+    const { init } = contractOf(identity, publicKey);
+    return { code: init.code, data: init.data };
+}
+/** The wallet's wire wallet id (v4r2: the subwallet id; v5r1: the signed 32-bit id). */
+function walletIdOf(identity, publicKey) {
+    const contract = contractOf(identity, publicKey);
+    if (contract instanceof ton_1.WalletContractV4)
+        return contract.walletId;
+    // v5r1 data: is_signature_allowed:1 seqno:32 wallet_id:int32 public_key:256 extensions.
+    const data = contract.init.data.beginParse();
+    data.skip(1 + 32);
+    return data.loadInt(32);
+}
+/**
+ * The external request for `messages` at `seqno`, valid while chain time is before
+ * `validUntil` (seconds). `init` deploys the wallet with its first message.
+ */
+async function unsignedRequest(identity, publicKey, args) {
+    // The seqno is a uint32 on the wire, never wrapped.
+    if (!Number.isSafeInteger(args.seqno) || args.seqno < 0 || args.seqno > 0xffffffff) {
+        throw new error_1.ValidationError('INVALID_INTENT', 'seqno must be a uint32');
+    }
+    // The SDK falls back to the wall clock for a falsy timeout; never let it.
+    if (!Number.isSafeInteger(args.validUntil) ||
+        args.validUntil <= 0 ||
+        args.validUntil > 0xffffffff) {
+        throw new error_1.ValidationError('INVALID_INTENT', 'validUntil must be a uint32 above 0');
+    }
+    if (args.messages.length === 0 ||
+        args.messages.length > exports.MAX_MESSAGES[identity.version]) {
+        throw new error_1.ValidationError('INVALID_INTENT', `a ${identity.version} request carries 1 to ${exports.MAX_MESSAGES[identity.version]} messages`);
+    }
+    const contract = contractOf(identity, publicKey);
+    let signing;
+    const transfer = {
+        seqno: args.seqno,
+        timeout: args.validUntil,
+        sendMode: exports.SEND_MODE,
+        messages: [...args.messages],
+        signer: async (cell) => {
+            signing = cell;
+            return Buffer.alloc(64);
+        },
+    };
+    let message;
+    try {
+        const body = await (contract instanceof ton_1.WalletContractV4
+            ? contract.createTransfer(transfer)
+            : contract.createTransfer(transfer));
+        message = (0, core_1.beginCell)()
+            .store((0, core_1.storeMessage)((0, core_1.external)({
+            to: contract.address,
+            body,
+            ...(args.deploy
+                ? { init: { code: contract.init.code, data: contract.init.data } }
+                : {}),
+        })))
+            .endCell();
+    }
+    catch {
+        // The SDK throws bare errors that may name a value; `nativeMessage` and
+        // `jettonMessage` range-check theirs, so only a hand-built message ends here.
+        throw new error_1.ValidationError('INVALID_INTENT', 'the TON request cannot be encoded');
+    }
+    if (!signing) {
+        throw new error_1.SigningError('SIGNING_FAILED', 'the SDK did not produce a signing message');
+    }
+    return { message, digest: new Uint8Array(signing.hash()) };
+}
+/** The message in `cell`, or undefined when it holds none (the SDK throws a bare `Error`). */
+function messageOf(cell) {
+    try {
+        return (0, core_1.loadMessage)(cell.beginParse());
+    }
+    catch {
+        return undefined;
+    }
+}
+/** A cell of `bits` then `refs`. */
+function cellOf(parts, refs) {
+    const builder = (0, core_1.beginCell)();
+    for (const part of parts) {
+        if (Buffer.isBuffer(part))
+            builder.storeBuffer(part);
+        else
+            builder.storeBits(part);
+    }
+    for (const ref of refs)
+        builder.storeRef(ref);
+    return builder.endCell();
+}
+const ZERO_SIGNATURE = Buffer.alloc(64);
+/**
+ * The signed external message: `signature` in place of the 512 zero bits whose remainder
+ * hashes to `digest` (the front for v4r2, the tail for v5r1). Refuses (`SIGNING_FAILED`) a
+ * payload with no such position, so a signature can never land anywhere else.
+ */
+function signedRequest(unsigned, digest, signature) {
+    if (signature.length !== 64) {
+        throw new error_1.SigningError('SIGNING_FAILED', 'a TON signature is 64 bytes');
+    }
+    const message = messageOf(unsigned);
+    if (message?.info.type !== 'external-in') {
+        throw new error_1.SigningError('SIGNING_FAILED', 'the unsigned TON payload is not an external message');
+    }
+    const { body } = message;
+    const length = body.bits.length;
+    const expected = Buffer.from(digest);
+    const zero = cellOf([ZERO_SIGNATURE], []).bits;
+    const sig = Buffer.from(signature);
+    let signedBody;
+    if (length >= 512) {
+        const front = body.bits.substring(0, 512);
+        const afterFront = body.bits.substring(512, length - 512);
+        const tail = body.bits.substring(length - 512, 512);
+        const beforeTail = body.bits.substring(0, length - 512);
+        if (front.equals(zero) && cellOf([afterFront], body.refs).hash().equals(expected)) {
+            signedBody = cellOf([sig, afterFront], body.refs);
+        }
+        else if (tail.equals(zero) &&
+            cellOf([beforeTail], body.refs).hash().equals(expected)) {
+            signedBody = cellOf([beforeTail, sig], body.refs);
+        }
+    }
+    if (!signedBody) {
+        throw new error_1.SigningError('SIGNING_FAILED', 'the unsigned TON payload does not match its signing request');
+    }
+    return (0, core_1.beginCell)()
+        .store((0, core_1.storeMessage)({
+        info: message.info,
+        ...(message.init ? { init: message.init } : {}),
+        body: signedBody,
+    }))
+        .endCell();
+}
+/**
+ * TEP-467: the hash of the external-in message with `src` = addr_none, `import_fee` = 0,
+ * no `init`, and the body always as a reference. Stable across relays; the Attempt id.
+ */
+function normalizedHash(externalMessage) {
+    const message = messageOf(externalMessage);
+    if (message?.info.type !== 'external-in') {
+        throw new error_1.ValidationError('INVALID_INTENT', 'not an external-in message');
+    }
+    const normalized = (0, core_1.beginCell)()
+        .storeUint(2, 2)
+        .storeUint(0, 2)
+        .storeAddress(message.info.dest)
+        .storeCoins(0)
+        .storeBit(false)
+        .storeBit(true)
+        .storeRef(message.body)
+        .endCell();
+    return new Uint8Array(normalized.hash());
+}
+/**
+ * Whether the wallet request `body` (external, or a W5
+ * `internal_signed` request relayed in an internal message) is `from`'s own. Anyone can post
+ * a relayed body, and a lone lying indexer can make up an external one, so a request
+ * proves nothing unless its ed25519 signature verifies over the rest of the request under
+ * `publicKey`, the wallet's key (v4r2: the first 512 bits; v5r1: the last 512), and its
+ * wallet id derives `from` with that key (v4r2: the subwallet id in `from`'s workchain;
+ * v5r1: the signed wallet id). A request of another wallet sharing the key, replayed
+ * here, never counts. For a relayed request the caller also requires the transaction's
+ * compute phase to have succeeded, i.e. the wallet ran it.
+ */
+function requestIsOwn(from, body, publicKey, globalId) {
+    try {
+        const length = body.bits.length;
+        if (length < 512 + 32 || publicKey.length !== 32)
+            return false;
+        const op = body.beginParse().preloadUint(32);
+        const v5 = op === messages_1.OP.w5SignedExternal || op === messages_1.OP.w5SignedInternal;
+        const [signed, rest] = v5
+            ? [body.bits.substring(length - 512, 512), body.bits.substring(0, length - 512)]
+            : [body.bits.substring(0, 512), body.bits.substring(512, length - 512)];
+        const signing = cellOf([rest], body.refs);
+        const signature = cellOf([signed], []).beginParse().loadBuffer(64);
+        if (!ed25519_1.ed25519.verify(signature, signing.hash(), publicKey))
+            return false;
+        const identity = v5
+            ? v5IdentityOf(signing.beginParse().skip(32).loadInt(32), globalId)
+            : v4IdentityOf(from, signing.beginParse().loadUint(32));
+        return identity !== undefined && walletAddress(identity, publicKey) === from;
+    }
+    catch {
+        return false;
+    }
+}
+/** The v4r2 identity a request's subwallet id names in `from`'s workchain. */
+function v4IdentityOf(from, subwalletId) {
+    const workchain = Number(from.split(':')[0]);
+    if (workchain !== 0 && workchain !== -1)
+        return undefined;
+    return { version: 'v4r2', workchain, subwalletId };
+}
+/** The v5r1 identity a signed wallet id names: 1 bit set, workchain int8, version 0, uint15. */
+function v5IdentityOf(walletId, globalId) {
+    const context = (walletId ^ globalId) | 0;
+    if (context >>> 31 !== 1 || ((context >> 15) & 0xff) !== 0)
+        return undefined;
+    const byte = (context >> 23) & 0xff;
+    const workchain = byte >= 128 ? byte - 256 : byte;
+    if (workchain !== 0 && workchain !== -1)
+        return undefined;
+    return {
+        version: 'v5r1',
+        workchain,
+        subwalletNumber: context & 0x7fff,
+        networkGlobalId: globalId,
+    };
+}
+/** The TEP-467 hash (hex) of the external message `body` to `account` would travel in. */
+function externalHashOf(account, body) {
+    const message = (0, core_1.beginCell)()
+        .store((0, core_1.storeMessage)((0, core_1.external)({ to: (0, messages_1.sdkAddress)(account), body })))
+        .endCell();
+    return Buffer.from(normalizedHash(message)).toString('hex');
+}
+//# sourceMappingURL=wallets.js.map

package/dist/adapters/ton/wallets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallets.js","sourceRoot":"","sources":["../../../src/adapters/ton/wallets.ts"],"names":[],"mappings":";;;AA6DA,0CAuDC;AAgED,sCAGC;AAGD,0CAGC;AAGD,gCAOC;AAaD,0CAsEC;AA6BD,sCAkDC;AAMD,wCAeC;AAaD,oCAwBC;AA4BD,wCAKC;AApcD;;;;;;;;;;;GAWG;AACH,oCAUmB;AACnB,mDAAgD;AAChD,kCAAgE;AAEhE,mDAAqF;AACrF,uCAA0D;AAC1D,yCAA4C;AAganC,2FAhaI,qBAAU,OAgaJ;AA7ZnB,mFAAmF;AACtE,QAAA,YAAY,GAA+C,MAAM,CAAC,MAAM,CAAC;IACpF,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,GAAG;CACV,CAAC,CAAC;AAEH,oFAAoF;AACvE,QAAA,SAAS,GAAG,eAAQ,CAAC,kBAAkB,GAAG,eAAQ,CAAC,aAAa,CAAC;AAgB9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AACjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAExF;;;GAGG;AACH,SAAgB,eAAe,CAC7B,MAAiC,EACjC,QAAgB;IAEhB,MAAM,IAAI,GAAG,CAAC,MAAc,EAAS,EAAE;QACrC,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,eAAe,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,EAAE,GAAG,CAAC;IACxB,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,kEAAkE;YAClE,IAAI,CAAC,KAAK,OAAO,sBAAsB,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;IACxC,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC3E,MAAM,EAAE,GAAG,SAAyB,CAAC;IACrC,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,SAAS,GAAG,EAAE,CAAC;QACzD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC;YAC7B,WAAsB,GAAG,CAAC;YAC1B,WAAsB,GAAG,UAAU,EACpC,CAAC;YACD,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,WAAqB,EAAE,CAAC;IACxE,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,CAAC,CAAC;IACpD,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC;QACjC,eAA0B,GAAG,CAAC;QAC9B,eAA0B,GAAG,MAAM,EACpC,CAAC;QACD,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,QAAQ,CAAC;IAC3D,IAAI,eAAe,KAAK,QAAQ,EAAE,CAAC;QACjC,IAAI,CAAC,0CAA0C,QAAQ,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO;QACL,OAAO;QACP,SAAS,EAAE,EAAE;QACb,eAAe,EAAE,eAAyB;QAC1C,eAAe,EAAE,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAID,0EAA0E;AAC1E,SAAS,YAAY,CAAC,SAAqB;IACzC,IAAI,CAAC;QACH,OAAO,CAAC,iBAAO,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW,EAAW,EAAE,CACjE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC;AAE1D;;;;GAIG;AACH,SAAS,YAAY,CAAC,QAAqB;IACzC,IAAI,QAAQ,CAAC,SAAS,KAAK,CAAC,IAAI,QAAQ,CAAC,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IACnF,OAAO,CACL,QAAQ,CAAC,OAAO,KAAK,MAAM;QAC3B,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,EAAE,MAAM,CAAC;QAC1C,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAAqB,EAAE,SAAqB;IAC9D,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO,sBAAgB,CAAC,MAAM,CAAC;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,QAAQ,CAAC,WAAW;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,6EAA6E;IAC7E,OAAO,wBAAkB,CAAC,MAAM,CAAC;QAC/B,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE;YACR,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,OAAO,EAAE;gBACP,SAAS,EAAE,QAAQ,CAAC,SAAS;gBAC7B,aAAa,EAAE,MAAM;gBACrB,eAAe,EAAE,QAAQ,CAAC,eAAe;aAC1C;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,SAAgB,aAAa,CAAC,QAAqB,EAAE,SAAqB;IACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,OAAO,IAAA,oBAAU,EAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AAC/D,CAAC;AAED,sEAAsE;AACtE,SAAgB,eAAe,CAAC,QAAqB,EAAE,SAAqB;IAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,wFAAwF;AACxF,SAAgB,UAAU,CAAC,QAAqB,EAAE,SAAqB;IACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,QAAQ,YAAY,sBAAgB;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC;IACnE,wFAAwF;IACxF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;IAC7C,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC1B,CAAC;AASD;;;GAGG;AACI,KAAK,UAAU,eAAe,CACnC,QAAqB,EACrB,SAAqB,EACrB,IAKC;IAED,oDAAoD;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,UAAU,EAAE,CAAC;QACnF,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IACxE,CAAC;IACD,0EAA0E;IAC1E,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,UAAU,IAAI,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,UAAU,EAC5B,CAAC;QACD,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;IACrF,CAAC;IACD,IACE,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,oBAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EACrD,CAAC;QACD,MAAM,IAAI,uBAAe,CACvB,gBAAgB,EAChB,KAAK,QAAQ,CAAC,OAAO,yBAAyB,oBAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,IAAI,OAAyB,CAAC;IAC9B,MAAM,QAAQ,GAAG;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,UAAU;QACxB,QAAQ,EAAE,iBAAS;QACnB,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,MAAM,EAAE,KAAK,EAAE,IAAU,EAAmB,EAAE;YAC5C,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1B,CAAC;KACF,CAAC;IACF,IAAI,OAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,YAAY,sBAAgB;YACtD,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC;YACnC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,OAAO,GAAG,IAAA,gBAAS,GAAE;aAClB,KAAK,CACJ,IAAA,mBAAY,EACV,IAAA,eAAQ,EAAC;YACP,EAAE,EAAE,QAAQ,CAAC,OAAO;YACpB,IAAI;YACJ,GAAG,CAAC,IAAI,CAAC,MAAM;gBACb,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;gBAClE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH,CACF;aACA,OAAO,EAAE,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,8EAA8E;QAC9E,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,oBAAY,CAAC,gBAAgB,EAAE,2CAA2C,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,8FAA8F;AAC9F,SAAS,SAAS,CAAC,IAAU;IAC3B,IAAI,CAAC;QACH,OAAO,IAAA,kBAAW,EAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,oCAAoC;AACpC,SAAS,MAAM,CAAC,KAAyC,EAAE,IAAqB;IAC9E,MAAM,OAAO,GAAG,IAAA,gBAAS,GAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;;YAChD,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAExC;;;;GAIG;AACH,SAAgB,aAAa,CAC3B,QAAc,EACd,MAAkB,EAClB,SAAqB;IAErB,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,oBAAY,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,oBAAY,CACpB,gBAAgB,EAChB,qDAAqD,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,UAA4B,CAAC;IACjC,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,UAAU,GAAG,MAAM,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;aAAM,IACL,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACjB,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EACvD,CAAC;YACD,UAAU,GAAG,MAAM,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,oBAAY,CACpB,gBAAgB,EAChB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,gBAAS,GAAE;SACf,KAAK,CACJ,IAAA,mBAAY,EAAC;QACX,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,IAAI,EAAE,UAAU;KACjB,CAAC,CACH;SACA,OAAO,EAAE,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAC,eAAqB;IAClD,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;IAC3C,IAAI,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,uBAAe,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,gBAAS,GAAE;SAC3B,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;SACf,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;SACf,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;SAC/B,UAAU,CAAC,CAAC,CAAC;SACb,QAAQ,CAAC,KAAK,CAAC;SACf,QAAQ,CAAC,IAAI,CAAC;SACd,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;SACtB,OAAO,EAAE,CAAC;IACb,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,YAAY,CAC1B,IAAY,EACZ,IAAU,EACV,SAAqB,EACrB,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;QAChC,IAAI,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAC/D,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,EAAE,GAAG,EAAE,KAAK,aAAE,CAAC,gBAAgB,IAAI,EAAE,KAAK,aAAE,CAAC,gBAAgB,CAAC;QACpE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE;YACvB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;YAChF,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,MAAM,QAAQ,GAAG,EAAE;YACjB,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC;YACnE,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,QAAQ,KAAK,SAAS,IAAI,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,IAAI,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,IAAY,EAAE,WAAmB;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACrD,CAAC;AAED,gGAAgG;AAChG,SAAS,YAAY,CAAC,QAAgB,EAAE,QAAgB;IACtD,MAAM,OAAO,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,OAAO,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7E,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAClD,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1D,OAAO;QACL,OAAO,EAAE,MAAM;QACf,SAAS;QACT,eAAe,EAAE,OAAO,GAAG,MAAM;QACjC,eAAe,EAAE,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAKD,0FAA0F;AAC1F,SAAgB,cAAc,CAAC,OAAe,EAAE,IAAU;IACxD,MAAM,OAAO,GAAG,IAAA,gBAAS,GAAE;SACxB,KAAK,CAAC,IAAA,mBAAY,EAAC,IAAA,eAAQ,EAAC,EAAE,EAAE,EAAE,IAAA,qBAAU,EAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;SAChE,OAAO,EAAE,CAAC;IACb,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC","sourcesContent":["/**\n * TON wallet contracts, over `@ton/core` and `@ton/ton`: the wallet identity,\n * its address and `StateInit`, the signing message, and the external message around it.\n * Loaded only through the adapter manifest's `load()`.\n *\n * Signing flow: `build` asks the SDK for the transfer body with a zero signature and keeps\n * the whole unsigned external message (a BOC) as the payload; the one ed25519 request signs\n * the signing message's cell hash. `assemble` finds the 512 zero bits the signature\n * replaces (front for v4r2, tail for v5r1) by the one position whose remainder hashes to\n * the signed digest, so it needs no wallet version and cannot write a signature anywhere\n * else.\n */\nimport {\n  Cell,\n  SendMode,\n  beginCell,\n  external,\n  loadMessage,\n  storeMessage,\n  type Message,\n  type MessageRelaxed,\n  type StateInit,\n} from '@ton/core';\nimport { ed25519 } from '@noble/curves/ed25519';\nimport { WalletContractV4, WalletContractV5R1 } from '@ton/ton';\nimport type { WalletOptions } from '../../core/driver/types';\nimport { ConfigError, SigningError, ValidationError } from '../../core/errors/error';\nimport { rawAddress, type TonWorkchain } from './address';\nimport { OP, sdkAddress } from './messages';\nimport type { TonWalletVersion } from './types';\n\n/** Messages one external request may carry: 4 refs per cell (v4r2), 255 (v5r1). */\nexport const MAX_MESSAGES: Readonly<Record<TonWalletVersion, number>> = Object.freeze({\n  v4r2: 4,\n  v5r1: 255,\n});\n\n/** Pay forward fees separately and never fail the action phase (W5 requires +2). */\nexport const SEND_MODE = SendMode.PAY_GAS_SEPARATELY + SendMode.IGNORE_ERRORS;\n\n/** The resolved wallet identity: every field that determines the address. */\nexport type TonIdentity =\n  | {\n      readonly version: 'v4r2';\n      readonly workchain: TonWorkchain;\n      readonly subwalletId: number;\n    }\n  | {\n      readonly version: 'v5r1';\n      readonly workchain: TonWorkchain;\n      readonly subwalletNumber: number;\n      readonly networkGlobalId: number;\n    };\n\nconst V4_KEYS = new Set(['version', 'workchain', 'subwalletId']);\nconst V5_KEYS = new Set(['version', 'workchain', 'subwalletNumber', 'networkGlobalId']);\n\n/**\n * `wallets.<name>.ton` validated against the network: a v5r1 wallet id made for\n * another network is refused before any key is used. Every problem is `CONFIG_INVALID`.\n */\nexport function resolveIdentity(\n  wallet: WalletOptions | undefined,\n  globalId: number,\n): TonIdentity {\n  const fail = (reason: string): never => {\n    throw new ConfigError('CONFIG_INVALID', `TON wallet: ${reason}`);\n  };\n  const ton = wallet?.ton;\n  if (ton === undefined || ton === null || typeof ton !== 'object') {\n    return fail(`set wallets.<name>.ton = { version: 'v4r2' | 'v5r1' }`);\n  }\n  const config = ton as Record<string, unknown>;\n  const version = config.version;\n  if (version !== 'v4r2' && version !== 'v5r1') {\n    return fail(`version must be 'v4r2' or 'v5r1'`);\n  }\n  const allowed = version === 'v4r2' ? V4_KEYS : V5_KEYS;\n  for (const key of Object.keys(config)) {\n    if (config[key] !== undefined && !allowed.has(key)) {\n      // The caller's key is never echoed (it could be a pasted secret).\n      fail(`a ${version} wallet takes only ${[...allowed].join(', ')}`);\n    }\n  }\n  const workchain = config.workchain ?? 0;\n  if (workchain !== 0 && workchain !== -1) fail('workchain must be 0 or -1');\n  const wc = workchain as TonWorkchain;\n  if (version === 'v4r2') {\n    const subwalletId = config.subwalletId ?? 698983191 + wc;\n    if (\n      !Number.isInteger(subwalletId) ||\n      (subwalletId as number) < 0 ||\n      (subwalletId as number) > 0xffffffff\n    ) {\n      fail('subwalletId must be an integer in [0, 2^32 - 1]');\n    }\n    return { version, workchain: wc, subwalletId: subwalletId as number };\n  }\n  const subwalletNumber = config.subwalletNumber ?? 0;\n  if (\n    !Number.isInteger(subwalletNumber) ||\n    (subwalletNumber as number) < 0 ||\n    (subwalletNumber as number) > 0x7fff\n  ) {\n    fail('subwalletNumber must be an integer in [0, 32767]');\n  }\n  const networkGlobalId = config.networkGlobalId ?? globalId;\n  if (networkGlobalId !== globalId) {\n    fail(`networkGlobalId is not this network's (${globalId})`);\n  }\n  return {\n    version,\n    workchain: wc,\n    subwalletNumber: subwalletNumber as number,\n    networkGlobalId: globalId,\n  };\n}\n\ntype WalletContract = WalletContractV4 | WalletContractV5R1;\n\n/** A strict (RFC 8032) encoding of a point that is not of small order. */\nfunction canonicalKey(publicKey: Uint8Array): boolean {\n  try {\n    return !ed25519.Point.fromHex(publicKey, false).isSmallOrder();\n  } catch {\n    return false;\n  }\n}\n\nconst isInt = (value: number, min: number, max: number): boolean =>\n  Number.isInteger(value) && value >= min && value <= max;\n\n/**\n * Every identity field fits the wire field the SDK writes it into (workchain\n * int8, subwallet id uint32, subwallet number uint15, network id int32), so an identity\n * not made by `resolveIdentity` is refused rather than wrapped or thrown as a bare `Error`.\n */\nfunction identityFits(identity: TonIdentity): boolean {\n  if (identity.workchain !== 0 && identity.workchain !== -1) return false;\n  if (identity.version === 'v4r2') return isInt(identity.subwalletId, 0, 0xffffffff);\n  return (\n    identity.version === 'v5r1' &&\n    isInt(identity.subwalletNumber, 0, 0x7fff) &&\n    isInt(identity.networkGlobalId, -0x80000000, 0x7fffffff)\n  );\n}\n\nfunction contractOf(identity: TonIdentity, publicKey: Uint8Array): WalletContract {\n  if (!identityFits(identity)) {\n    throw new ConfigError('CONFIG_INVALID', 'the TON wallet identity is out of range');\n  }\n  if (publicKey.length !== 32 || !canonicalKey(publicKey)) {\n    throw new ConfigError(\n      'CONFIG_INVALID',\n      'a TON wallet key must be a canonical 32-byte ed25519 public key',\n    );\n  }\n  const key = Buffer.from(publicKey);\n  if (identity.version === 'v4r2') {\n    return WalletContractV4.create({\n      workchain: identity.workchain,\n      publicKey: key,\n      walletId: identity.subwalletId,\n    });\n  }\n  // Every field explicit: the SDK's defaults are mainnet's id and workchain 0.\n  return WalletContractV5R1.create({\n    publicKey: key,\n    walletId: {\n      networkGlobalId: identity.networkGlobalId,\n      context: {\n        workchain: identity.workchain,\n        walletVersion: 'v5r1',\n        subwalletNumber: identity.subwalletNumber,\n      },\n    },\n  });\n}\n\n/** The wallet's raw address: the hash of its `StateInit` in its workchain. */\nexport function walletAddress(identity: TonIdentity, publicKey: Uint8Array): string {\n  const contract = contractOf(identity, publicKey);\n  return rawAddress(identity.workchain, contract.address.hash);\n}\n\n/** The code and data a first message carries to deploy the wallet. */\nexport function walletStateInit(identity: TonIdentity, publicKey: Uint8Array): StateInit {\n  const { init } = contractOf(identity, publicKey);\n  return { code: init.code, data: init.data };\n}\n\n/** The wallet's wire wallet id (v4r2: the subwallet id; v5r1: the signed 32-bit id). */\nexport function walletIdOf(identity: TonIdentity, publicKey: Uint8Array): number {\n  const contract = contractOf(identity, publicKey);\n  if (contract instanceof WalletContractV4) return contract.walletId;\n  // v5r1 data: is_signature_allowed:1 seqno:32 wallet_id:int32 public_key:256 extensions.\n  const data = contract.init.data.beginParse();\n  data.skip(1 + 32);\n  return data.loadInt(32);\n}\n\nexport interface UnsignedRequest {\n  /** The unsigned external message: the wallet body with 512 zero bits for the signature. */\n  readonly message: Cell;\n  /** The signing message's cell hash: what the ed25519 key signs. */\n  readonly digest: Uint8Array;\n}\n\n/**\n * The external request for `messages` at `seqno`, valid while chain time is before\n * `validUntil` (seconds). `init` deploys the wallet with its first message.\n */\nexport async function unsignedRequest(\n  identity: TonIdentity,\n  publicKey: Uint8Array,\n  args: {\n    readonly seqno: number;\n    readonly validUntil: number;\n    readonly messages: readonly MessageRelaxed[];\n    readonly deploy: boolean;\n  },\n): Promise<UnsignedRequest> {\n  // The seqno is a uint32 on the wire, never wrapped.\n  if (!Number.isSafeInteger(args.seqno) || args.seqno < 0 || args.seqno > 0xffffffff) {\n    throw new ValidationError('INVALID_INTENT', 'seqno must be a uint32');\n  }\n  // The SDK falls back to the wall clock for a falsy timeout; never let it.\n  if (\n    !Number.isSafeInteger(args.validUntil) ||\n    args.validUntil <= 0 ||\n    args.validUntil > 0xffffffff\n  ) {\n    throw new ValidationError('INVALID_INTENT', 'validUntil must be a uint32 above 0');\n  }\n  if (\n    args.messages.length === 0 ||\n    args.messages.length > MAX_MESSAGES[identity.version]\n  ) {\n    throw new ValidationError(\n      'INVALID_INTENT',\n      `a ${identity.version} request carries 1 to ${MAX_MESSAGES[identity.version]} messages`,\n    );\n  }\n  const contract = contractOf(identity, publicKey);\n  let signing: Cell | undefined;\n  const transfer = {\n    seqno: args.seqno,\n    timeout: args.validUntil,\n    sendMode: SEND_MODE,\n    messages: [...args.messages],\n    signer: async (cell: Cell): Promise<Buffer> => {\n      signing = cell;\n      return Buffer.alloc(64);\n    },\n  };\n  let message: Cell;\n  try {\n    const body = await (contract instanceof WalletContractV4\n      ? contract.createTransfer(transfer)\n      : contract.createTransfer(transfer));\n    message = beginCell()\n      .store(\n        storeMessage(\n          external({\n            to: contract.address,\n            body,\n            ...(args.deploy\n              ? { init: { code: contract.init.code, data: contract.init.data } }\n              : {}),\n          }),\n        ),\n      )\n      .endCell();\n  } catch {\n    // The SDK throws bare errors that may name a value; `nativeMessage` and\n    // `jettonMessage` range-check theirs, so only a hand-built message ends here.\n    throw new ValidationError('INVALID_INTENT', 'the TON request cannot be encoded');\n  }\n  if (!signing) {\n    throw new SigningError('SIGNING_FAILED', 'the SDK did not produce a signing message');\n  }\n  return { message, digest: new Uint8Array(signing.hash()) };\n}\n\n/** The message in `cell`, or undefined when it holds none (the SDK throws a bare `Error`). */\nfunction messageOf(cell: Cell): Message | undefined {\n  try {\n    return loadMessage(cell.beginParse());\n  } catch {\n    return undefined;\n  }\n}\n\n/** A cell of `bits` then `refs`. */\nfunction cellOf(parts: readonly (Buffer | Cell['bits'])[], refs: readonly Cell[]): Cell {\n  const builder = beginCell();\n  for (const part of parts) {\n    if (Buffer.isBuffer(part)) builder.storeBuffer(part);\n    else builder.storeBits(part);\n  }\n  for (const ref of refs) builder.storeRef(ref);\n  return builder.endCell();\n}\n\nconst ZERO_SIGNATURE = Buffer.alloc(64);\n\n/**\n * The signed external message: `signature` in place of the 512 zero bits whose remainder\n * hashes to `digest` (the front for v4r2, the tail for v5r1). Refuses (`SIGNING_FAILED`) a\n * payload with no such position, so a signature can never land anywhere else.\n */\nexport function signedRequest(\n  unsigned: Cell,\n  digest: Uint8Array,\n  signature: Uint8Array,\n): Cell {\n  if (signature.length !== 64) {\n    throw new SigningError('SIGNING_FAILED', 'a TON signature is 64 bytes');\n  }\n  const message = messageOf(unsigned);\n  if (message?.info.type !== 'external-in') {\n    throw new SigningError(\n      'SIGNING_FAILED',\n      'the unsigned TON payload is not an external message',\n    );\n  }\n  const { body } = message;\n  const length = body.bits.length;\n  const expected = Buffer.from(digest);\n  const zero = cellOf([ZERO_SIGNATURE], []).bits;\n  const sig = Buffer.from(signature);\n  let signedBody: Cell | undefined;\n  if (length >= 512) {\n    const front = body.bits.substring(0, 512);\n    const afterFront = body.bits.substring(512, length - 512);\n    const tail = body.bits.substring(length - 512, 512);\n    const beforeTail = body.bits.substring(0, length - 512);\n    if (front.equals(zero) && cellOf([afterFront], body.refs).hash().equals(expected)) {\n      signedBody = cellOf([sig, afterFront], body.refs);\n    } else if (\n      tail.equals(zero) &&\n      cellOf([beforeTail], body.refs).hash().equals(expected)\n    ) {\n      signedBody = cellOf([beforeTail, sig], body.refs);\n    }\n  }\n  if (!signedBody) {\n    throw new SigningError(\n      'SIGNING_FAILED',\n      'the unsigned TON payload does not match its signing request',\n    );\n  }\n  return beginCell()\n    .store(\n      storeMessage({\n        info: message.info,\n        ...(message.init ? { init: message.init } : {}),\n        body: signedBody,\n      }),\n    )\n    .endCell();\n}\n\n/**\n * TEP-467: the hash of the external-in message with `src` = addr_none, `import_fee` = 0,\n * no `init`, and the body always as a reference. Stable across relays; the Attempt id.\n */\nexport function normalizedHash(externalMessage: Cell): Uint8Array {\n  const message = messageOf(externalMessage);\n  if (message?.info.type !== 'external-in') {\n    throw new ValidationError('INVALID_INTENT', 'not an external-in message');\n  }\n  const normalized = beginCell()\n    .storeUint(2, 2)\n    .storeUint(0, 2)\n    .storeAddress(message.info.dest)\n    .storeCoins(0)\n    .storeBit(false)\n    .storeBit(true)\n    .storeRef(message.body)\n    .endCell();\n  return new Uint8Array(normalized.hash());\n}\n\n/**\n * Whether the wallet request `body` (external, or a W5\n * `internal_signed` request relayed in an internal message) is `from`'s own. Anyone can post\n * a relayed body, and a lone lying indexer can make up an external one, so a request\n * proves nothing unless its ed25519 signature verifies over the rest of the request under\n * `publicKey`, the wallet's key (v4r2: the first 512 bits; v5r1: the last 512), and its\n * wallet id derives `from` with that key (v4r2: the subwallet id in `from`'s workchain;\n * v5r1: the signed wallet id). A request of another wallet sharing the key, replayed\n * here, never counts. For a relayed request the caller also requires the transaction's\n * compute phase to have succeeded, i.e. the wallet ran it.\n */\nexport function requestIsOwn(\n  from: string,\n  body: Cell,\n  publicKey: Uint8Array,\n  globalId: number,\n): boolean {\n  try {\n    const length = body.bits.length;\n    if (length < 512 + 32 || publicKey.length !== 32) return false;\n    const op = body.beginParse().preloadUint(32);\n    const v5 = op === OP.w5SignedExternal || op === OP.w5SignedInternal;\n    const [signed, rest] = v5\n      ? [body.bits.substring(length - 512, 512), body.bits.substring(0, length - 512)]\n      : [body.bits.substring(0, 512), body.bits.substring(512, length - 512)];\n    const signing = cellOf([rest], body.refs);\n    const signature = cellOf([signed], []).beginParse().loadBuffer(64);\n    if (!ed25519.verify(signature, signing.hash(), publicKey)) return false;\n    const identity = v5\n      ? v5IdentityOf(signing.beginParse().skip(32).loadInt(32), globalId)\n      : v4IdentityOf(from, signing.beginParse().loadUint(32));\n    return identity !== undefined && walletAddress(identity, publicKey) === from;\n  } catch {\n    return false;\n  }\n}\n\n/** The v4r2 identity a request's subwallet id names in `from`'s workchain. */\nfunction v4IdentityOf(from: string, subwalletId: number): TonIdentity | undefined {\n  const workchain = Number(from.split(':')[0]);\n  if (workchain !== 0 && workchain !== -1) return undefined;\n  return { version: 'v4r2', workchain, subwalletId };\n}\n\n/** The v5r1 identity a signed wallet id names: 1 bit set, workchain int8, version 0, uint15. */\nfunction v5IdentityOf(walletId: number, globalId: number): TonIdentity | undefined {\n  const context = (walletId ^ globalId) | 0;\n  if (context >>> 31 !== 1 || ((context >> 15) & 0xff) !== 0) return undefined;\n  const byte = (context >> 23) & 0xff;\n  const workchain = byte >= 128 ? byte - 256 : byte;\n  if (workchain !== 0 && workchain !== -1) return undefined;\n  return {\n    version: 'v5r1',\n    workchain,\n    subwalletNumber: context & 0x7fff,\n    networkGlobalId: globalId,\n  };\n}\n\n/** The SDK's `Address` for a raw address, parsed strictly. */\nexport { sdkAddress };\n\n/** The TEP-467 hash (hex) of the external message `body` to `account` would travel in. */\nexport function externalHashOf(account: string, body: Cell): string {\n  const message = beginCell()\n    .store(storeMessage(external({ to: sdkAddress(account), body })))\n    .endCell();\n  return Buffer.from(normalizedHash(message)).toString('hex');\n}\n"]}