neozip-blockchain 0.7.2 → 0.8.0

package/README.md

@@ -25,7 +25,7 @@ This package provides the client-side API and utilities that work with the sibli
 ```bash
 npm install neozip-blockchain
 # or
-yarn add neozip-blockchain
+pnpm add neozip-blockchain
 ```
 
 For full NZIP creation and verification you typically use **neozipkit** together with this package:
@@ -185,24 +185,24 @@ MIT License - see [LICENSE](LICENSE) for details.
 
 The npm tarball is intentionally minimal: compiled **`dist/`**, the **package root [`README.md`](README.md)**, and **[`LICENSE`](LICENSE)** only (`package.json` `"files"`). **`examples/`**, **`contracts/`**, and other repo docs are **not** on npm; use this repository for those.
 
-Preview what will ship: run **`yarn publish:dry-run`** (it uses **`npm publish --dry-run`**, which matches npm’s file list). Avoid **`yarn npm publish --dry-run`** for previews—Yarn can print extra paths such as nested `README.md` files that are **not** in the published package.
+Preview what will ship: run **`pnpm publish:dry-run`** (it uses **`npm publish --dry-run`**, which matches npm’s file list).
 
 ## Development
 
 This package is part of the [neozipkit monorepo](../../README.md). From the **repository root**:
 
 ```bash
-yarn install
-yarn build        # builds neozipkit first, then neozip-blockchain
-yarn test:unit
+pnpm install
+pnpm build        # builds neozipkit first, then neozip-blockchain
+pnpm test:unit
 ```
 
 To work on this package alone:
 
 ```bash
 cd packages/neozip-blockchain
-yarn build
-yarn test
+pnpm build
+pnpm test
 ```
 
 See the [monorepo README](../../README.md) for version management and release workflow.

package/dist/token-service/TokenServiceAccountAuth.d.ts

@@ -0,0 +1,97 @@
+/**
+ * NeoZip Token Service account authentication HTTP client.
+ *
+ * Stateless functions for obtaining and renewing Token Service access tokens:
+ *
+ *   POST /auth/register             email verification (delivery: app|cli|browser)
+ *   POST /auth/verify-email-code    exchange a 6-digit code for an access token
+ *   POST /auth/exchange-token       exchange a magic-link token for an access token
+ *   POST /auth/wallet-login/...     silent SIWE-style renewal via wallet signature
+ *   POST /auth/phone/request-otp    Bearer; start phone verification
+ *   POST /auth/phone/verify         Bearer; complete phone verification
+ *
+ * These functions never persist credentials. Callers receive the access token
+ * (and parsed expiry) and are responsible for storing it.
+ */
+/** How the Token Service formats the verification email for `/auth/register`. */
+export type AccountVerificationDelivery = 'app' | 'cli' | 'browser';
+export interface RegisterEmailResult {
+    success: boolean;
+    message?: string;
+    error?: string;
+}
+export interface AccessTokenResult {
+    accessToken: string;
+    email: string;
+    expiresAt: number | null;
+}
+/**
+ * Register an email for verification with a chosen delivery format.
+ *
+ * `app` sends a NeoZip deep link, `cli`/`browser` send a 6-digit code. The
+ * email is normalized (trimmed + lowercased) before sending.
+ */
+export declare function registerEmailWithDelivery(baseUrl: string, email: string, verificationDelivery: AccountVerificationDelivery): Promise<RegisterEmailResult>;
+/** Desktop-style registration (deep link email). */
+export declare function registerEmailApp(baseUrl: string, email: string): Promise<RegisterEmailResult>;
+/** Terminal / CLI registration (6-digit code only). */
+export declare function registerEmailCli(baseUrl: string, email: string): Promise<RegisterEmailResult>;
+/**
+ * Verify an emailed 6-digit code and return the issued access token.
+ *
+ * @throws {Error} when the code is invalid, the request fails, or the response
+ *   contains no access token.
+ */
+export declare function verifyEmailAndExtractToken(baseUrl: string, email: string, code: string): Promise<AccessTokenResult>;
+/**
+ * Exchange a magic-link token for an access token.
+ *
+ * @throws {Error} when the token is invalid, the request fails, or the response
+ *   is missing an access token or email.
+ */
+export declare function exchangeMagicLinkToken(baseUrl: string, token: string): Promise<AccessTokenResult>;
+/**
+ * Thrown when the Token Service does not expose the wallet-login endpoints
+ * (older deployment). Callers should fall back to interactive email re-auth.
+ */
+export declare class WalletLoginUnavailableError extends Error {
+    constructor(message?: string);
+}
+/**
+ * Request a wallet-login challenge (first leg of silent, SIWE-style renewal).
+ *
+ * @throws {WalletLoginUnavailableError} when the endpoint returns 404.
+ * @throws {Error} on other failures or malformed responses.
+ */
+export declare function requestWalletLoginChallenge(baseUrl: string, evmAddress: string): Promise<{
+    challengeId: string;
+    message: string;
+    evmAddress: string;
+}>;
+/**
+ * Complete a wallet-login challenge with a signature and receive an access
+ * token (second leg of silent renewal).
+ *
+ * @throws {WalletLoginUnavailableError} when the endpoint returns 404.
+ * @throws {Error} on other failures or when no access token is returned.
+ */
+export declare function walletLogin(baseUrl: string, input: {
+    evmAddress: string;
+    challengeId: string;
+    evmSignature: string;
+}): Promise<{
+    accessToken: string;
+    email: string | null;
+    expiresAt: number | null;
+}>;
+/** Start phone verification for the authenticated account (Bearer). */
+export declare function requestPhoneOtp(baseUrl: string, accessToken: string, phoneE164: string): Promise<{
+    success: boolean;
+    error?: string;
+}>;
+/** Complete phone verification with the emailed/texted code (Bearer). */
+export declare function verifyPhoneOtp(baseUrl: string, accessToken: string, phoneE164: string, code: string): Promise<{
+    success: boolean;
+    error?: string;
+}>;
+//# sourceMappingURL=TokenServiceAccountAuth.d.ts.map

package/dist/token-service/TokenServiceAccountAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenServiceAccountAuth.d.ts","sourceRoot":"","sources":["../../src/token-service/TokenServiceAccountAuth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAYH,iFAAiF;AACjF,MAAM,MAAM,2BAA2B,GAAG,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;AAEpE,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,oBAAoB,EAAE,2BAA2B,GAChD,OAAO,CAAC,mBAAmB,CAAC,CAwB9B;AAED,oDAAoD;AACpD,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,mBAAmB,CAAC,CAE9B;AAED,uDAAuD;AACvD,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,mBAAmB,CAAC,CAE9B;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,iBAAiB,CAAC,CA+B5B;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,CAiC5B;AAED;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,OAAO,SAAgD;CAIpE;AAED;;;;;GAKG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CA2BvE;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACvE,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAkClF;AAED,uEAAuE;AACvE,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB/C;AAED,yEAAyE;AACzE,wBAAsB,cAAc,CAClC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB/C"}

package/dist/token-service/TokenServiceAccountAuth.js

@@ -0,0 +1,286 @@
+"use strict";
+/**
+ * NeoZip Token Service account authentication HTTP client.
+ *
+ * Stateless functions for obtaining and renewing Token Service access tokens:
+ *
+ *   POST /auth/register             email verification (delivery: app|cli|browser)
+ *   POST /auth/verify-email-code    exchange a 6-digit code for an access token
+ *   POST /auth/exchange-token       exchange a magic-link token for an access token
+ *   POST /auth/wallet-login/...     silent SIWE-style renewal via wallet signature
+ *   POST /auth/phone/request-otp    Bearer; start phone verification
+ *   POST /auth/phone/verify         Bearer; complete phone verification
+ *
+ * These functions never persist credentials. Callers receive the access token
+ * (and parsed expiry) and are responsible for storing it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WalletLoginUnavailableError = void 0;
+exports.registerEmailWithDelivery = registerEmailWithDelivery;
+exports.registerEmailApp = registerEmailApp;
+exports.registerEmailCli = registerEmailCli;
+exports.verifyEmailAndExtractToken = verifyEmailAndExtractToken;
+exports.exchangeMagicLinkToken = exchangeMagicLinkToken;
+exports.requestWalletLoginChallenge = requestWalletLoginChallenge;
+exports.walletLogin = walletLogin;
+exports.requestPhoneOtp = requestPhoneOtp;
+exports.verifyPhoneOtp = verifyPhoneOtp;
+const ethers_1 = require("ethers");
+const http_1 = require("./http");
+/**
+ * Register an email for verification with a chosen delivery format.
+ *
+ * `app` sends a NeoZip deep link, `cli`/`browser` send a 6-digit code. The
+ * email is normalized (trimmed + lowercased) before sending.
+ */
+async function registerEmailWithDelivery(baseUrl, email, verificationDelivery) {
+    const url = (0, http_1.normalizeServerUrl)(baseUrl);
+    let res;
+    try {
+        res = await fetch(`${url}/auth/register`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({
+                email: email.trim().toLowerCase(),
+                verificationDelivery,
+            }),
+        });
+    }
+    catch (err) {
+        return { success: false, error: (0, http_1.formatTokenServiceFetchError)(url, err) };
+    }
+    const parsed = await (0, http_1.safeJson)(res);
+    if (!res.ok || !parsed || parsed.success !== true) {
+        return { success: false, error: (0, http_1.extractError)(parsed, `HTTP ${res.status}`) };
+    }
+    return {
+        success: true,
+        message: typeof parsed.message === 'string' ? parsed.message : 'Verification email sent.',
+    };
+}
+/** Desktop-style registration (deep link email). */
+async function registerEmailApp(baseUrl, email) {
+    return registerEmailWithDelivery(baseUrl, email, 'app');
+}
+/** Terminal / CLI registration (6-digit code only). */
+async function registerEmailCli(baseUrl, email) {
+    return registerEmailWithDelivery(baseUrl, email, 'cli');
+}
+/**
+ * Verify an emailed 6-digit code and return the issued access token.
+ *
+ * @throws {Error} when the code is invalid, the request fails, or the response
+ *   contains no access token.
+ */
+async function verifyEmailAndExtractToken(baseUrl, email, code) {
+    const url = (0, http_1.normalizeServerUrl)(baseUrl);
+    let res;
+    try {
+        res = await fetch(`${url}/auth/verify-email-code`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ email: email.trim().toLowerCase(), code: code.trim() }),
+        });
+    }
+    catch (err) {
+        throw new Error((0, http_1.formatTokenServiceFetchError)(url, err));
+    }
+    const parsed = await (0, http_1.safeJson)(res);
+    if (!res.ok || !parsed || parsed.success !== true) {
+        throw new Error((0, http_1.extractError)(parsed, `Verification failed (HTTP ${res.status})`, {
+            status: res.status,
+        }));
+    }
+    const accessToken = (0, http_1.pickString)(parsed, 'accessToken', 'token', 'bearerToken');
+    if (!accessToken) {
+        throw new Error('Verification succeeded but no accessToken in response. Set NEOZIP_TOKEN_SERVICE_ACCESS_TOKEN manually or update the Token Service deployment.');
+    }
+    return {
+        accessToken,
+        email: (0, http_1.pickString)(parsed, 'email') ?? email.trim().toLowerCase(),
+        expiresAt: (0, http_1.parseAccessTokenExpiry)(parsed),
+    };
+}
+/**
+ * Exchange a magic-link token for an access token.
+ *
+ * @throws {Error} when the token is invalid, the request fails, or the response
+ *   is missing an access token or email.
+ */
+async function exchangeMagicLinkToken(baseUrl, token) {
+    const url = (0, http_1.normalizeServerUrl)(baseUrl);
+    let res;
+    try {
+        res = await fetch(`${url}/auth/exchange-token`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ token: token.trim() }),
+        });
+    }
+    catch (err) {
+        throw new Error((0, http_1.formatTokenServiceFetchError)(url, err));
+    }
+    const parsed = await (0, http_1.safeJson)(res);
+    if (!res.ok || !parsed || parsed.success !== true) {
+        throw new Error((0, http_1.extractError)(parsed, `Magic link exchange failed (HTTP ${res.status})`, {
+            status: res.status,
+        }));
+    }
+    const accessToken = (0, http_1.pickString)(parsed, 'accessToken', 'token', 'bearerToken');
+    if (!accessToken) {
+        throw new Error('Magic link exchange succeeded but no accessToken in response.');
+    }
+    const verifiedEmail = (0, http_1.pickString)(parsed, 'email');
+    if (!verifiedEmail) {
+        throw new Error('Magic link exchange succeeded but no email in response.');
+    }
+    return {
+        accessToken,
+        email: verifiedEmail,
+        expiresAt: (0, http_1.parseAccessTokenExpiry)(parsed),
+    };
+}
+/**
+ * Thrown when the Token Service does not expose the wallet-login endpoints
+ * (older deployment). Callers should fall back to interactive email re-auth.
+ */
+class WalletLoginUnavailableError extends Error {
+    constructor(message = 'Token Service does not support wallet login') {
+        super(message);
+        this.name = 'WalletLoginUnavailableError';
+    }
+}
+exports.WalletLoginUnavailableError = WalletLoginUnavailableError;
+/**
+ * Request a wallet-login challenge (first leg of silent, SIWE-style renewal).
+ *
+ * @throws {WalletLoginUnavailableError} when the endpoint returns 404.
+ * @throws {Error} on other failures or malformed responses.
+ */
+async function requestWalletLoginChallenge(baseUrl, evmAddress) {
+    const url = (0, http_1.normalizeServerUrl)(baseUrl);
+    const checksummed = (0, ethers_1.getAddress)(evmAddress.trim());
+    let res;
+    try {
+        res = await fetch(`${url}/auth/wallet-login/challenge`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({ evmAddress: checksummed }),
+        });
+    }
+    catch (err) {
+        throw new Error((0, http_1.formatTokenServiceFetchError)(url, err));
+    }
+    if (res.status === 404) {
+        throw new WalletLoginUnavailableError();
+    }
+    const parsed = await (0, http_1.safeJson)(res);
+    if (!res.ok || !parsed || parsed.success !== true) {
+        throw new Error((0, http_1.extractError)(parsed, `Wallet login challenge failed (HTTP ${res.status})`));
+    }
+    const challengeId = (0, http_1.pickString)(parsed, 'challengeId');
+    const message = (0, http_1.pickString)(parsed, 'message');
+    const addr = (0, http_1.pickString)(parsed, 'evmAddress');
+    if (!challengeId || !message || !addr) {
+        throw new Error('Wallet login challenge response missing fields');
+    }
+    return { challengeId, message, evmAddress: addr };
+}
+/**
+ * Complete a wallet-login challenge with a signature and receive an access
+ * token (second leg of silent renewal).
+ *
+ * @throws {WalletLoginUnavailableError} when the endpoint returns 404.
+ * @throws {Error} on other failures or when no access token is returned.
+ */
+async function walletLogin(baseUrl, input) {
+    const url = (0, http_1.normalizeServerUrl)(baseUrl);
+    let res;
+    try {
+        res = await fetch(`${url}/auth/wallet-login`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({
+                evmAddress: (0, ethers_1.getAddress)(input.evmAddress.trim()),
+                challengeId: input.challengeId,
+                evmSignature: input.evmSignature,
+            }),
+        });
+    }
+    catch (err) {
+        throw new Error((0, http_1.formatTokenServiceFetchError)(url, err));
+    }
+    if (res.status === 404) {
+        throw new WalletLoginUnavailableError();
+    }
+    const parsed = await (0, http_1.safeJson)(res);
+    if (!res.ok || !parsed || parsed.success !== true) {
+        throw new Error((0, http_1.extractError)(parsed, `Wallet login failed (HTTP ${res.status})`, { status: res.status }));
+    }
+    const accessToken = (0, http_1.pickString)(parsed, 'accessToken', 'token', 'bearerToken');
+    if (!accessToken) {
+        throw new Error('Wallet login succeeded but no accessToken in response.');
+    }
+    return {
+        accessToken,
+        email: (0, http_1.pickString)(parsed, 'email'),
+        expiresAt: (0, http_1.parseAccessTokenExpiry)(parsed),
+    };
+}
+/** Start phone verification for the authenticated account (Bearer). */
+async function requestPhoneOtp(baseUrl, accessToken, phoneE164) {
+    const url = (0, http_1.normalizeServerUrl)(baseUrl);
+    let res;
+    try {
+        res = await fetch(`${url}/auth/phone/request-otp`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify({ phoneE164: phoneE164.trim() }),
+        });
+    }
+    catch (err) {
+        return { success: false, error: (0, http_1.formatTokenServiceFetchError)(url, err) };
+    }
+    const parsed = await (0, http_1.safeJson)(res);
+    if (!res.ok || !parsed || parsed.success !== true) {
+        return {
+            success: false,
+            error: (0, http_1.extractError)(parsed, `Phone OTP request failed (HTTP ${res.status})`, {
+                status: res.status,
+            }),
+        };
+    }
+    return { success: true };
+}
+/** Complete phone verification with the emailed/texted code (Bearer). */
+async function verifyPhoneOtp(baseUrl, accessToken, phoneE164, code) {
+    const url = (0, http_1.normalizeServerUrl)(baseUrl);
+    let res;
+    try {
+        res = await fetch(`${url}/auth/phone/verify`, {
+            method: 'POST',
+            headers: {
+                Authorization: `Bearer ${accessToken}`,
+                'content-type': 'application/json',
+            },
+            body: JSON.stringify({ phoneE164: phoneE164.trim(), code: code.trim() }),
+        });
+    }
+    catch (err) {
+        return { success: false, error: (0, http_1.formatTokenServiceFetchError)(url, err) };
+    }
+    const parsed = await (0, http_1.safeJson)(res);
+    if (!res.ok || !parsed || parsed.success !== true) {
+        return {
+            success: false,
+            error: (0, http_1.extractError)(parsed, `Phone verification failed (HTTP ${res.status})`, {
+                status: res.status,
+            }),
+        };
+    }
+    return { success: true };
+}
+//# sourceMappingURL=TokenServiceAccountAuth.js.map

package/dist/token-service/TokenServiceAccountAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenServiceAccountAuth.js","sourceRoot":"","sources":["../../src/token-service/TokenServiceAccountAuth.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAiCH,8DA4BC;AAGD,4CAKC;AAGD,4CAKC;AAQD,gEAmCC;AAQD,wDAoCC;AAmBD,kEA8BC;AASD,kCAqCC;AAGD,0CA6BC;AAGD,wCA8BC;AAlUD,mCAAoC;AACpC,iCAOgB;AAiBhB;;;;;GAKG;AACI,KAAK,UAAU,yBAAyB,CAC7C,OAAe,EACf,KAAa,EACb,oBAAiD;IAEjD,MAAM,GAAG,GAAG,IAAA,yBAAkB,EAAC,OAAO,CAAC,CAAC;IACxC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,gBAAgB,EAAE;YACxC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;gBACjC,oBAAoB;aACrB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAA,mCAA4B,EAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,eAAQ,EAA0B,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAA,mBAAY,EAAC,MAAM,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI;QACb,OAAO,EACL,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B;KACnF,CAAC;AACJ,CAAC;AAED,oDAAoD;AAC7C,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,KAAa;IAEb,OAAO,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,uDAAuD;AAChD,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,KAAa;IAEb,OAAO,yBAAyB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,0BAA0B,CAC9C,OAAe,EACf,KAAa,EACb,IAAY;IAEZ,MAAM,GAAG,GAAG,IAAA,yBAAkB,EAAC,OAAO,CAAC,CAAC;IACxC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,yBAAyB,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;SAC/E,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,IAAA,mCAA4B,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,eAAQ,EAA0B,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,IAAA,mBAAY,EAAC,MAAM,EAAE,6BAA6B,GAAG,CAAC,MAAM,GAAG,EAAE;YAC/D,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,iBAAU,EAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,+IAA+I,CAChJ,CAAC;IACJ,CAAC;IACD,OAAO;QACL,WAAW;QACX,KAAK,EAAE,IAAA,iBAAU,EAAC,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QAChE,SAAS,EAAE,IAAA,6BAAsB,EAAC,MAAM,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,sBAAsB,CAC1C,OAAe,EACf,KAAa;IAEb,MAAM,GAAG,GAAG,IAAA,yBAAkB,EAAC,OAAO,CAAC,CAAC;IACxC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,sBAAsB,EAAE;YAC9C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,IAAA,mCAA4B,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,eAAQ,EAA0B,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,IAAA,mBAAY,EAAC,MAAM,EAAE,oCAAoC,GAAG,CAAC,MAAM,GAAG,EAAE;YACtE,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,iBAAU,EAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,aAAa,GAAG,IAAA,iBAAU,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO;QACL,WAAW;QACX,KAAK,EAAE,aAAa;QACpB,SAAS,EAAE,IAAA,6BAAsB,EAAC,MAAM,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAa,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAO,GAAG,6CAA6C;QACjE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AALD,kEAKC;AAED;;;;;GAKG;AACI,KAAK,UAAU,2BAA2B,CAC/C,OAAe,EACf,UAAkB;IAElB,MAAM,GAAG,GAAG,IAAA,yBAAkB,EAAC,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,IAAA,mBAAU,EAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IAClD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,8BAA8B,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,IAAA,mCAA4B,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,eAAQ,EAA0B,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,IAAA,mBAAY,EAAC,MAAM,EAAE,uCAAuC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,iBAAU,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,IAAA,iBAAU,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,KAAwE;IAExE,MAAM,GAAG,GAAG,IAAA,yBAAkB,EAAC,OAAO,CAAC,CAAC;IACxC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,oBAAoB,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,IAAA,mBAAU,EAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBAC/C,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;aACjC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,IAAA,mCAA4B,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,eAAQ,EAA0B,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,IAAA,mBAAY,EAAC,MAAM,EAAE,6BAA6B,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CACzF,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,iBAAU,EAAC,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9E,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO;QACL,WAAW;QACX,KAAK,EAAE,IAAA,iBAAU,EAAC,MAAM,EAAE,OAAO,CAAC;QAClC,SAAS,EAAE,IAAA,6BAAsB,EAAC,MAAM,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,uEAAuE;AAChE,KAAK,UAAU,eAAe,CACnC,OAAe,EACf,WAAmB,EACnB,SAAiB;IAEjB,MAAM,GAAG,GAAG,IAAA,yBAAkB,EAAC,OAAO,CAAC,CAAC;IACxC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,yBAAyB,EAAE;YACjD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAA,mCAA4B,EAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,eAAQ,EAA0B,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAA,mBAAY,EAAC,MAAM,EAAE,kCAAkC,GAAG,CAAC,MAAM,GAAG,EAAE;gBAC3E,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC;SACH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,yEAAyE;AAClE,KAAK,UAAU,cAAc,CAClC,OAAe,EACf,WAAmB,EACnB,SAAiB,EACjB,IAAY;IAEZ,MAAM,GAAG,GAAG,IAAA,yBAAkB,EAAC,OAAO,CAAC,CAAC;IACxC,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,oBAAoB,EAAE;YAC5C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;gBACtC,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAA,mCAA4B,EAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,eAAQ,EAA0B,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,IAAA,mBAAY,EAAC,MAAM,EAAE,mCAAmC,GAAG,CAAC,MAAM,GAAG,EAAE;gBAC5E,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB,CAAC;SACH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/token-service/TokenServiceFunding.d.ts

@@ -0,0 +1,87 @@
+/**
+ * NeoZip Token Service funding API client.
+ *
+ * The Token Service can disburse small native-gas grants to the user's primary
+ * linked Data Wallet so on-chain operations (tokenization, timestamping) can pay
+ * for gas. The recipient is server-authoritative — a client may only request a
+ * grant, never redirect it.
+ *
+ *   GET  /funding/policy?chainId=<id>   (no auth)
+ *   GET  /funding/status?chainId=<id>   (Bearer)
+ *   POST /funding/request               (Bearer, optional Idempotency-Key)
+ */
+export interface FundingPolicy {
+    enabled: boolean;
+    grantWei: string;
+    grantEth: string;
+    cooldownHours: number;
+    lowBalanceWei?: string;
+    lowBalanceEth?: string;
+}
+export interface FundingPolicyResult {
+    chainId: number;
+    network: string;
+    policy: FundingPolicy;
+}
+export interface FundingGrantSummary {
+    id: number;
+    status: string;
+    amountWei: string;
+    amountEth: string;
+    transactionHash: string | null;
+    requestedAt: string;
+    confirmedAt: string | null;
+}
+export interface FundingStatusResult {
+    chainId: number;
+    recipientAddress: string | null;
+    enabled: boolean;
+    requiresPayment: boolean;
+    lastGrantAt: string | null;
+    nextEligibleAt: string | null;
+    recentGrants: FundingGrantSummary[];
+}
+export interface FundingRequestResult {
+    success: boolean;
+    status: string;
+    grantId: number;
+    amountWei: string;
+    amountEth: string;
+    recipientAddress: string;
+    transactionHash?: string | null;
+    paymentRequired?: boolean;
+    error?: string;
+    errorCode?: string;
+}
+/** Thrown when the Token Service does not expose the funding endpoints (older deployment). */
+export declare class FundingUnavailableError extends Error {
+    constructor(message?: string);
+}
+/**
+ * Fetch the public funding policy for a chain (grant size, cooldown, low-balance
+ * threshold). No authentication required.
+ *
+ * @throws {FundingUnavailableError} when the endpoint returns 404.
+ * @throws {Error} on other failures or a malformed response.
+ */
+export declare function getFundingPolicy(baseUrl: string, chainId: number): Promise<FundingPolicyResult>;
+/**
+ * Fetch the caller's funding status for a chain (recipient address, eligibility,
+ * recent grants). Requires a Bearer access token.
+ *
+ * @throws {FundingUnavailableError} when the endpoint returns 404.
+ * @throws {Error} on other failures (including 401/403) or a malformed response.
+ */
+export declare function getFundingStatus(baseUrl: string, accessToken: string, chainId: number): Promise<FundingStatusResult>;
+/**
+ * Request a native-gas grant to the caller's primary Data Wallet. Requires a
+ * Bearer access token; an optional `idempotencyKey` makes retries safe.
+ *
+ * Returns the parsed result (which may itself report `success: false` with an
+ * `errorCode` such as a cooldown).
+ *
+ * @throws {FundingUnavailableError} when the endpoint returns 404.
+ * @throws {Error} when the response is non-JSON (e.g. auth failures).
+ */
+export declare function requestFundingGrant(baseUrl: string, accessToken: string, chainId: number, idempotencyKey?: string): Promise<FundingRequestResult>;
+//# sourceMappingURL=TokenServiceFunding.d.ts.map

package/dist/token-service/TokenServiceFunding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TokenServiceFunding.d.ts","sourceRoot":"","sources":["../../src/token-service/TokenServiceFunding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,YAAY,EAAE,mBAAmB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,8FAA8F;AAC9F,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,SAA2C;CAI/D;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,mBAAmB,CAAC,CA0B9B;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,mBAAmB,CAAC,CAkC9B;AAED;;;;;;;;;GASG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,cAAc,CAAC,EAAE,MAAM,GACtB,OAAO,CAAC,oBAAoB,CAAC,CA8B/B"}