passkey-kit 0.12.1 → 0.14.0

package/dist/managers/submission-manager.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Submission manager: builds and signs the deploy transaction with the fee-
+ * paying deployer keypair, derives deterministic wallet addresses, and drives
+ * the footprint-restore flow.
+ *
+ * Network submission itself is the server's job (`PasskeyServer` / relayer); this
+ * manager owns the deployer keypair and the fee-payer signature that make a
+ * deploy transaction submittable.
+ *
+ * @packageDocumentation
+ */
+import type { Keypair } from "@stellar/stellar-sdk";
+import type { AssembledTransaction } from "@stellar/stellar-sdk/contract";
+import type { Server } from "@stellar/stellar-sdk/rpc";
+import type { Client as PasskeyClient } from "passkey-kit-sdk";
+import { type RestorePreamble } from "../kit/tx-ops.js";
+export interface SubmissionManagerDeps {
+    rpc: Server;
+    rpcUrl: string;
+    networkPassphrase: string;
+    walletWasmHash: string;
+    deployerKeypair: Keypair;
+    timeoutInSeconds: number;
+}
+export declare class SubmissionManager {
+    private readonly deps;
+    constructor(deps: SubmissionManagerDeps);
+    /** The deployer's `G…` public key (fee source + derivation deployer). */
+    get deployerPublicKey(): string;
+    /** Deterministically derive the wallet address for a passkey credential. */
+    deriveWalletAddress(keyId: Buffer): string;
+    /** Build the wallet deploy transaction (initial Secp256r1 signer). */
+    buildDeployTransaction(keyId: Buffer, publicKey: Uint8Array): Promise<AssembledTransaction<PasskeyClient>>;
+    /**
+     * Sign a deploy transaction with the deployer keypair (the fee source) and
+     * return the signed transaction XDR.
+     *
+     * The deploy carries source-account auth, so it is submitted through the
+     * relayer's fee-bump (`{ xdr }`) path. A fee-bumped Soroban inner transaction
+     * must have `fee == resourceFee` — the fee-bump supplies the inclusion fee —
+     * or the relayer rejects it with a fee mismatch ("Transaction fee must be
+     * equal to the resource fee"). The assembled fee is `inclusion + resource`,
+     * so pin it to the resource fee BEFORE the deployer signs (the signature
+     * commits to the fee). `TransactionBuilder.cloneFrom` drops
+     * `SorobanTransactionData` (→ txMalformed), so set the fee field surgically on
+     * the envelope and rebuild.
+     */
+    signDeploy(tx: AssembledTransaction<PasskeyClient>): Promise<string>;
+    /** Restore an archived footprint reported by simulation. */
+    restoreFootprint(restorePreamble: RestorePreamble): Promise<string>;
+}
+//# sourceMappingURL=submission-manager.d.ts.map

package/dist/managers/submission-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"submission-manager.d.ts","sourceRoot":"","sources":["../../src/managers/submission-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAe,MAAM,sBAAsB,CAAC;AACjE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAK/D,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,qBAAqB;IAExD,yEAAyE;IACzE,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,4EAA4E;IAC5E,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAU1C,sEAAsE;IACtE,sBAAsB,CACpB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAc/C;;;;;;;;;;;;;OAaG;IACG,UAAU,CAAC,EAAE,EAAE,oBAAoB,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAiB1E,4DAA4D;IAC5D,gBAAgB,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;CAWpE"}

package/dist/managers/submission-manager.js

@@ -0,0 +1,77 @@
+/**
+ * Submission manager: builds and signs the deploy transaction with the fee-
+ * paying deployer keypair, derives deterministic wallet addresses, and drives
+ * the footprint-restore flow.
+ *
+ * Network submission itself is the server's job (`PasskeyServer` / relayer); this
+ * manager owns the deployer keypair and the fee-payer signature that make a
+ * deploy transaction submittable.
+ *
+ * @packageDocumentation
+ */
+import { TransactionBuilder } from "@stellar/stellar-sdk";
+import { buildDeployTransaction as buildDeployTransactionOp, deriveWalletAddress as deriveWalletAddressOp, } from "../kit/deploy-ops.js";
+import { restoreFootprint as restoreFootprintOp, } from "../kit/tx-ops.js";
+export class SubmissionManager {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /** The deployer's `G…` public key (fee source + derivation deployer). */
+    get deployerPublicKey() {
+        return this.deps.deployerKeypair.publicKey();
+    }
+    /** Deterministically derive the wallet address for a passkey credential. */
+    deriveWalletAddress(keyId) {
+        return deriveWalletAddressOp({
+            networkPassphrase: this.deps.networkPassphrase,
+            deployerPublicKey: this.deployerPublicKey,
+        }, keyId);
+    }
+    /** Build the wallet deploy transaction (initial Secp256r1 signer). */
+    buildDeployTransaction(keyId, publicKey) {
+        return buildDeployTransactionOp({
+            rpcUrl: this.deps.rpcUrl,
+            networkPassphrase: this.deps.networkPassphrase,
+            walletWasmHash: this.deps.walletWasmHash,
+            deployerPublicKey: this.deployerPublicKey,
+            timeoutInSeconds: this.deps.timeoutInSeconds,
+        }, keyId, publicKey);
+    }
+    /**
+     * Sign a deploy transaction with the deployer keypair (the fee source) and
+     * return the signed transaction XDR.
+     *
+     * The deploy carries source-account auth, so it is submitted through the
+     * relayer's fee-bump (`{ xdr }`) path. A fee-bumped Soroban inner transaction
+     * must have `fee == resourceFee` — the fee-bump supplies the inclusion fee —
+     * or the relayer rejects it with a fee mismatch ("Transaction fee must be
+     * equal to the resource fee"). The assembled fee is `inclusion + resource`,
+     * so pin it to the resource fee BEFORE the deployer signs (the signature
+     * commits to the fee). `TransactionBuilder.cloneFrom` drops
+     * `SorobanTransactionData` (→ txMalformed), so set the fee field surgically on
+     * the envelope and rebuild.
+     */
+    async signDeploy(tx) {
+        if (!tx.built) {
+            throw new Error("deploy transaction has not been built/simulated");
+        }
+        const envelope = tx.built.toEnvelope();
+        const inner = envelope.v1().tx();
+        const resourceFee = inner.ext().sorobanData().resourceFee().toString();
+        inner.fee(Number(resourceFee));
+        const feeAdjusted = TransactionBuilder.fromXDR(envelope.toXDR("base64"), this.deps.networkPassphrase);
+        feeAdjusted.sign(this.deps.deployerKeypair);
+        return feeAdjusted.toXDR();
+    }
+    /** Restore an archived footprint reported by simulation. */
+    restoreFootprint(restorePreamble) {
+        return restoreFootprintOp({
+            rpc: this.deps.rpc,
+            networkPassphrase: this.deps.networkPassphrase,
+            deployerKeypair: this.deps.deployerKeypair,
+            timeoutInSeconds: this.deps.timeoutInSeconds,
+        }, restorePreamble);
+    }
+}
+//# sourceMappingURL=submission-manager.js.map

package/dist/managers/submission-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submission-manager.js","sourceRoot":"","sources":["../../src/managers/submission-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAK1D,OAAO,EACL,sBAAsB,IAAI,wBAAwB,EAClD,mBAAmB,IAAI,qBAAqB,GAC7C,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,IAAI,kBAAkB,GAEvC,MAAM,kBAAkB,CAAC;AAW1B,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,IAA2B;QAA3B,SAAI,GAAJ,IAAI,CAAuB;IAAG,CAAC;IAE5D,yEAAyE;IACzE,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,4EAA4E;IAC5E,mBAAmB,CAAC,KAAa;QAC/B,OAAO,qBAAqB,CAC1B;YACE,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC9C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,sBAAsB,CACpB,KAAa,EACb,SAAqB;QAErB,OAAO,wBAAwB,CAC7B;YACE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YACxB,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC9C,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc;YACxC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB;SAC7C,EACD,KAAK,EACL,SAAS,CACV,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,UAAU,CAAC,EAAuC;QACtD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC;QACvE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAE/B,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAC5C,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EACxB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CACb,CAAC;QACjB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5C,OAAO,WAAW,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED,4DAA4D;IAC5D,gBAAgB,CAAC,eAAgC;QAC/C,OAAO,kBAAkB,CACvB;YACE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG;YAClB,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC9C,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;YAC1C,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB;SAC7C,EACD,eAAe,CAChB,CAAC;IACJ,CAAC;CACF"}

package/dist/relayer.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Server-side relayer client.
+ *
+ * A thin, typed wrapper over the OpenZeppelin Channels client
+ * (`@openzeppelin/relayer-plugin-channels` ^0.20) for fee-sponsored submission.
+ * It holds the relayer API key, so it MUST run server-side only (it is reached
+ * through `PasskeyServer`, exported from the `passkey-kit/server` subpath).
+ *
+ * Two submission modes:
+ * - {@link RelayerClient.send} — `{ func, auth }` for invokeHostFunction flows
+ *   (the preferred Soroban path; the relayer builds the envelope + pays fees).
+ * - {@link RelayerClient.sendTransaction} — `{ xdr }` for a signed envelope
+ *   (e.g. a deploy transaction that needs source-account auth + a fee bump).
+ *
+ * Every method returns a discriminated {@link TransactionResult} and NEVER
+ * throws for expected relayer/on-chain failures — a `PluginClientError` is
+ * mapped to a typed {@link RelayerError} (or a {@link ContractError} when a
+ * contract code can be decoded from its details).
+ *
+ * @packageDocumentation
+ */
+import type { TransactionResult } from "./types.js";
+/** Configuration for a {@link RelayerClient}. */
+export interface RelayerClientConfig {
+    /** Base URL of the Channels relayer service. */
+    baseUrl: string;
+    /** API key for the relayer service (server-side secret). */
+    apiKey: string;
+    /** Optional admin secret for management operations. */
+    adminSecret?: string;
+    /** Request timeout in ms (default {@link DEFAULT_RELAYER_TIMEOUT_MS}). */
+    timeout?: number;
+}
+/** Per-submission relayer options. */
+export interface RelayerSubmitOptions {
+    /** Return immediately after submission; poll {@link RelayerClient.getTransaction}. */
+    skipWait?: boolean;
+    /** Alternative fund-relayer id for the fee bump (must be allow-listed). */
+    fundRelayerId?: string;
+}
+export declare class RelayerClient {
+    private readonly channels;
+    constructor(config: RelayerClientConfig);
+    /**
+     * Submit an invokeHostFunction via `{ func, auth }` (the preferred Soroban
+     * path). The relayer builds the transaction envelope with a channel account
+     * and pays the fees.
+     */
+    send(func: string, auth: string[], options?: RelayerSubmitOptions): Promise<TransactionResult>;
+    /**
+     * Submit a signed transaction envelope via `{ xdr }` for a fee bump (preserves
+     * the inner signature; use for deploys / source-account-auth transactions).
+     */
+    sendTransaction(xdr: string, options?: RelayerSubmitOptions): Promise<TransactionResult>;
+    /** Poll a previously-submitted (`skipWait`) transaction by its relayer id. */
+    getTransaction(transactionId: string): Promise<TransactionResult>;
+    private run;
+    private toResult;
+    private mapError;
+}
+//# sourceMappingURL=relayer.d.ts.map

package/dist/relayer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relayer.d.ts","sourceRoot":"","sources":["../src/relayer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAOH,OAAO,KAAK,EAAE,iBAAiB,EAAsB,MAAM,YAAY,CAAC;AAQxE,iDAAiD;AACjD,MAAM,WAAW,mBAAmB;IAClC,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,sCAAsC;AACtC,MAAM,WAAW,oBAAoB;IACnC,sFAAsF;IACtF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,2EAA2E;IAC3E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAgBD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;gBAE9B,MAAM,EAAE,mBAAmB;IAevC;;;;OAIG;IACG,IAAI,CACR,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,iBAAiB,CAAC;IAW7B;;;OAGG;IACG,eAAe,CACnB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,iBAAiB,CAAC;IAU7B,8EAA8E;IACxE,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;YAIzD,GAAG;IAUjB,OAAO,CAAC,QAAQ;IAqChB,OAAO,CAAC,QAAQ;CAiCjB"}

package/dist/relayer.js

@@ -0,0 +1,122 @@
+/**
+ * Server-side relayer client.
+ *
+ * A thin, typed wrapper over the OpenZeppelin Channels client
+ * (`@openzeppelin/relayer-plugin-channels` ^0.20) for fee-sponsored submission.
+ * It holds the relayer API key, so it MUST run server-side only (it is reached
+ * through `PasskeyServer`, exported from the `passkey-kit/server` subpath).
+ *
+ * Two submission modes:
+ * - {@link RelayerClient.send} — `{ func, auth }` for invokeHostFunction flows
+ *   (the preferred Soroban path; the relayer builds the envelope + pays fees).
+ * - {@link RelayerClient.sendTransaction} — `{ xdr }` for a signed envelope
+ *   (e.g. a deploy transaction that needs source-account auth + a fee bump).
+ *
+ * Every method returns a discriminated {@link TransactionResult} and NEVER
+ * throws for expected relayer/on-chain failures — a `PluginClientError` is
+ * mapped to a typed {@link RelayerError} (or a {@link ContractError} when a
+ * contract code can be decoded from its details).
+ *
+ * @packageDocumentation
+ */
+import { ChannelsClient, PluginClientError, } from "@openzeppelin/relayer-plugin-channels";
+import { RelayerError, PasskeyKitErrorCode } from "./errors.js";
+import { decodeContractError, failedTransaction, } from "./contract-errors.js";
+import { DEFAULT_RELAYER_TIMEOUT_MS } from "./constants.js";
+/**
+ * Terminal-success statuses (ALLOWLIST). Only a status that positively confirms
+ * on-chain inclusion counts as success — anything else is failure or still
+ * pending. An allowlist (not a failure denylist) is deliberate: an unrecognized
+ * or non-terminal status must never be mistaken for a confirmed transaction.
+ * Word-bounded so negated forms ("unsuccessful", "unconfirmed") and
+ * non-terminal forms ("confirming") never match. Keep identical to
+ * relayer-proxy/src/constants.ts.
+ */
+const SUCCESS_STATUS = /\b(?:confirm(?:ed)?|success(?:ful)?)\b/i;
+/** Terminal-failure statuses. */
+const FAILURE_STATUS = /fail|error|revert|reject/i;
+export class RelayerClient {
+    channels;
+    constructor(config) {
+        if (!config.baseUrl || !config.apiKey) {
+            throw new RelayerError("RelayerClient requires both baseUrl and apiKey", PasskeyKitErrorCode.RELAYER_NOT_CONFIGURED);
+        }
+        this.channels = new ChannelsClient({
+            baseUrl: config.baseUrl,
+            apiKey: config.apiKey,
+            adminSecret: config.adminSecret,
+            timeout: config.timeout ?? DEFAULT_RELAYER_TIMEOUT_MS,
+        });
+    }
+    /**
+     * Submit an invokeHostFunction via `{ func, auth }` (the preferred Soroban
+     * path). The relayer builds the transaction envelope with a channel account
+     * and pays the fees.
+     */
+    async send(func, auth, options) {
+        return this.run(() => this.channels.submitSorobanTransaction({
+            func,
+            auth,
+            skipWait: options?.skipWait,
+            fundRelayerId: options?.fundRelayerId,
+        }));
+    }
+    /**
+     * Submit a signed transaction envelope via `{ xdr }` for a fee bump (preserves
+     * the inner signature; use for deploys / source-account-auth transactions).
+     */
+    async sendTransaction(xdr, options) {
+        return this.run(() => this.channels.submitTransaction({
+            xdr,
+            skipWait: options?.skipWait,
+            fundRelayerId: options?.fundRelayerId,
+        }));
+    }
+    /** Poll a previously-submitted (`skipWait`) transaction by its relayer id. */
+    async getTransaction(transactionId) {
+        return this.run(() => this.channels.getTransaction({ transactionId }));
+    }
+    async run(fn) {
+        try {
+            return this.toResult(await fn());
+        }
+        catch (err) {
+            return this.mapError(err);
+        }
+    }
+    toResult(res) {
+        const status = res.status ?? "";
+        if (SUCCESS_STATUS.test(status)) {
+            return {
+                success: true,
+                hash: res.hash ?? "",
+                ...(res.transactionId ? { transactionId: res.transactionId } : {}),
+            };
+        }
+        if (FAILURE_STATUS.test(status)) {
+            return failedTransaction(new RelayerError(`Relayer reported status "${res.status}"`, PasskeyKitErrorCode.RELAYER_REQUEST_FAILED, { status: res.status, transactionId: res.transactionId }), res.hash ?? undefined);
+        }
+        // Neither terminal-success nor terminal-failure: the transaction is still
+        // pending (e.g. a `skipWait` submit not yet polled to confirmation). Surface
+        // it as a distinct, NON-success result carrying RELAYER_PENDING — never as
+        // `success: true` — so a poll loop keeps polling instead of treating an
+        // unconfirmed (or later-reverted) transaction as done.
+        return failedTransaction(new RelayerError(`Relayer status "${res.status ?? "unknown"}" is not terminal (pending)`, PasskeyKitErrorCode.RELAYER_PENDING, { status: res.status, transactionId: res.transactionId, pending: true }), res.hash ?? undefined);
+    }
+    mapError(err) {
+        // Prefer a decoded contract error when the relayer surfaced one.
+        const details = err instanceof PluginClientError
+            ? err.errorDetails
+            : undefined;
+        const contractError = (err instanceof Error && decodeContractError(err.message)) ||
+            decodeContractError(details);
+        if (contractError) {
+            return failedTransaction(contractError);
+        }
+        if (err instanceof PluginClientError) {
+            return failedTransaction(new RelayerError(err.message, PasskeyKitErrorCode.RELAYER_REQUEST_FAILED, { category: err.category, details }, err));
+        }
+        return failedTransaction(new RelayerError(err instanceof Error ? err.message : String(err), PasskeyKitErrorCode.RELAYER_REQUEST_FAILED, undefined, err instanceof Error ? err : undefined));
+    }
+}
+//# sourceMappingURL=relayer.js.map

package/dist/relayer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relayer.js","sourceRoot":"","sources":["../src/relayer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EACL,cAAc,EACd,iBAAiB,GAElB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAsB5D;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAG,yCAAyC,CAAC;AAEjE,iCAAiC;AACjC,MAAM,cAAc,GAAG,2BAA2B,CAAC;AAEnD,MAAM,OAAO,aAAa;IACP,QAAQ,CAAiB;IAE1C,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACtC,MAAM,IAAI,YAAY,CACpB,gDAAgD,EAChD,mBAAmB,CAAC,sBAAsB,CAC3C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,cAAc,CAAC;YACjC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,0BAA0B;SACtD,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CACR,IAAY,EACZ,IAAc,EACd,OAA8B;QAE9B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACnB,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YACrC,IAAI;YACJ,IAAI;YACJ,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,aAAa,EAAE,OAAO,EAAE,aAAa;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CACnB,GAAW,EACX,OAA8B;QAE9B,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CACnB,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC9B,GAAG;YACH,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,aAAa,EAAE,OAAO,EAAE,aAAa;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,cAAc,CAAC,aAAqB;QACxC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC;IAEO,KAAK,CAAC,GAAG,CACf,EAA8C;QAE9C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,QAAQ,CAAC,GAAgC;QAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAEhC,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;gBACpB,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC;QACJ,CAAC;QAED,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,OAAO,iBAAiB,CACtB,IAAI,YAAY,CACd,4BAA4B,GAAG,CAAC,MAAM,GAAG,EACzC,mBAAmB,CAAC,sBAAsB,EAC1C,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CACzD,EACD,GAAG,CAAC,IAAI,IAAI,SAAS,CACtB,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,6EAA6E;QAC7E,2EAA2E;QAC3E,wEAAwE;QACxE,uDAAuD;QACvD,OAAO,iBAAiB,CACtB,IAAI,YAAY,CACd,mBAAmB,GAAG,CAAC,MAAM,IAAI,SAAS,6BAA6B,EACvE,mBAAmB,CAAC,eAAe,EACnC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CACxE,EACD,GAAG,CAAC,IAAI,IAAI,SAAS,CACtB,CAAC;IACJ,CAAC;IAEO,QAAQ,CAAC,GAAY;QAC3B,iEAAiE;QACjE,MAAM,OAAO,GACX,GAAG,YAAY,iBAAiB;YAC9B,CAAC,CAAE,GAAkC,CAAC,YAAY;YAClD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,aAAa,GACjB,CAAC,GAAG,YAAY,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC1D,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC/B,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;YACrC,OAAO,iBAAiB,CACtB,IAAI,YAAY,CACd,GAAG,CAAC,OAAO,EACX,mBAAmB,CAAC,sBAAsB,EAC1C,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,EACnC,GAAG,CACJ,CACF,CAAC;QACJ,CAAC;QAED,OAAO,iBAAiB,CACtB,IAAI,YAAY,CACd,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAChD,mBAAmB,CAAC,sBAAsB,EAC1C,SAAS,EACT,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CACvC,CACF,CAAC;IACJ,CAAC;CACF"}

package/dist/rpc-data.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Direct contract-data ledger reads that distinguish a genuine not-found from a
+ * transport failure.
+ *
+ * `Server.getContractData` collapses BOTH a real not-found AND any transport
+ * error (429/5xx/timeout, aborted fetch) into an identical `{ code: 404 }`
+ * throw, so a caller can't tell "the entry is gone" from "the RPC hiccuped".
+ * These helpers go one level lower: `getLedgerEntries` resolves with an empty
+ * `entries` array for a genuine not-found and only throws on an actual transport
+ * failure. That lets eviction detection and `getSigner`'s ownership check treat
+ * the two cases correctly instead of false-evicting live signers (audit H2) or
+ * reporting a valid passkey as "not a signer" on a flaky RPC.
+ *
+ * @packageDocumentation
+ */
+import { xdr } from "@stellar/stellar-sdk";
+import { Durability, type Server } from "@stellar/stellar-sdk/rpc";
+/** Build the contract-data `LedgerKey` for a (contract, key, durability) triple. */
+export declare function contractDataLedgerKey(contractId: string, key: xdr.ScVal, durability: Durability): xdr.LedgerKey;
+/**
+ * Read a contract-data entry's stored ScVal, or `null` when the entry genuinely
+ * does not exist in that durability.
+ *
+ * Transport errors are NOT swallowed — they propagate so a caller never mistakes
+ * a flaky RPC for an absent entry.
+ */
+export declare function readContractData(rpc: Server, contractId: string, key: xdr.ScVal, durability: Durability): Promise<xdr.ScVal | null>;
+/**
+ * Whether a contract's instance entry exists on-chain.
+ *
+ * Returns `false` only on a genuine not-found; a transport error (429/5xx/
+ * timeout) throws. `connectWallet` uses this to confirm the deterministically
+ * derived wallet address: only an authoritative not-found may abandon the
+ * canonical derivation for the storage/indexer fallbacks — a flaky RPC must
+ * never reroute resolution away from the canonical derivation.
+ */
+export declare function contractInstanceExists(rpc: Server, contractId: string): Promise<boolean>;
+/**
+ * Whether a contract-data entry exists in the given durability.
+ *
+ * Returns `false` only on a genuine not-found; a transport error throws (so
+ * callers conclude eviction exclusively from an authoritative not-found).
+ */
+export declare function contractDataExists(rpc: Server, contractId: string, key: xdr.ScVal, durability: Durability): Promise<boolean>;
+//# sourceMappingURL=rpc-data.d.ts.map

package/dist/rpc-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-data.d.ts","sourceRoot":"","sources":["../src/rpc-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAW,GAAG,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,KAAK,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAEnE,oFAAoF;AACpF,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,GAAG,CAAC,KAAK,EACd,UAAU,EAAE,UAAU,GACrB,GAAG,CAAC,SAAS,CAWf;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,GAAG,CAAC,KAAK,EACd,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAM3B;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,GAAG,CAAC,KAAK,EACd,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,OAAO,CAAC,CAElB"}

package/dist/rpc-data.js

@@ -0,0 +1,61 @@
+/**
+ * Direct contract-data ledger reads that distinguish a genuine not-found from a
+ * transport failure.
+ *
+ * `Server.getContractData` collapses BOTH a real not-found AND any transport
+ * error (429/5xx/timeout, aborted fetch) into an identical `{ code: 404 }`
+ * throw, so a caller can't tell "the entry is gone" from "the RPC hiccuped".
+ * These helpers go one level lower: `getLedgerEntries` resolves with an empty
+ * `entries` array for a genuine not-found and only throws on an actual transport
+ * failure. That lets eviction detection and `getSigner`'s ownership check treat
+ * the two cases correctly instead of false-evicting live signers (audit H2) or
+ * reporting a valid passkey as "not a signer" on a flaky RPC.
+ *
+ * @packageDocumentation
+ */
+import { Address, xdr } from "@stellar/stellar-sdk";
+import { Durability } from "@stellar/stellar-sdk/rpc";
+/** Build the contract-data `LedgerKey` for a (contract, key, durability) triple. */
+export function contractDataLedgerKey(contractId, key, durability) {
+    return xdr.LedgerKey.contractData(new xdr.LedgerKeyContractData({
+        contract: Address.fromString(contractId).toScAddress(),
+        key,
+        durability: durability === Durability.Temporary
+            ? xdr.ContractDataDurability.temporary()
+            : xdr.ContractDataDurability.persistent(),
+    }));
+}
+/**
+ * Read a contract-data entry's stored ScVal, or `null` when the entry genuinely
+ * does not exist in that durability.
+ *
+ * Transport errors are NOT swallowed — they propagate so a caller never mistakes
+ * a flaky RPC for an absent entry.
+ */
+export async function readContractData(rpc, contractId, key, durability) {
+    const { entries } = await rpc.getLedgerEntries(contractDataLedgerKey(contractId, key, durability));
+    const entry = entries[0];
+    return entry ? entry.val.contractData().val() : null;
+}
+/**
+ * Whether a contract's instance entry exists on-chain.
+ *
+ * Returns `false` only on a genuine not-found; a transport error (429/5xx/
+ * timeout) throws. `connectWallet` uses this to confirm the deterministically
+ * derived wallet address: only an authoritative not-found may abandon the
+ * canonical derivation for the storage/indexer fallbacks — a flaky RPC must
+ * never reroute resolution away from the canonical derivation.
+ */
+export async function contractInstanceExists(rpc, contractId) {
+    return contractDataExists(rpc, contractId, xdr.ScVal.scvLedgerKeyContractInstance(), Durability.Persistent);
+}
+/**
+ * Whether a contract-data entry exists in the given durability.
+ *
+ * Returns `false` only on a genuine not-found; a transport error throws (so
+ * callers conclude eviction exclusively from an authoritative not-found).
+ */
+export async function contractDataExists(rpc, contractId, key, durability) {
+    return (await readContractData(rpc, contractId, key, durability)) !== null;
+}
+//# sourceMappingURL=rpc-data.js.map

package/dist/rpc-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc-data.js","sourceRoot":"","sources":["../src/rpc-data.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAe,MAAM,0BAA0B,CAAC;AAEnE,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,GAAc,EACd,UAAsB;IAEtB,OAAO,GAAG,CAAC,SAAS,CAAC,YAAY,CAC/B,IAAI,GAAG,CAAC,qBAAqB,CAAC;QAC5B,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QACtD,GAAG;QACH,UAAU,EACR,UAAU,KAAK,UAAU,CAAC,SAAS;YACjC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,SAAS,EAAE;YACxC,CAAC,CAAC,GAAG,CAAC,sBAAsB,CAAC,UAAU,EAAE;KAC9C,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,UAAkB,EAClB,GAAc,EACd,UAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAC5C,qBAAqB,CAAC,UAAU,EAAE,GAAG,EAAE,UAAU,CAAC,CACnD,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAW,EACX,UAAkB;IAElB,OAAO,kBAAkB,CACvB,GAAG,EACH,UAAU,EACV,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,EACxC,UAAU,CAAC,UAAU,CACtB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,UAAkB,EAClB,GAAc,EACd,UAAsB;IAEtB,OAAO,CAAC,MAAM,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,KAAK,IAAI,CAAC;AAC7E,CAAC"}

package/dist/sac.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Stellar Asset Contract (SEP-41) helpers.
+ *
+ * DECISION (todo 950): keep the generated `sac-sdk` client rather than collapsing
+ * it to a bare `buildTokenTransferHostFunction` helper. The demo needs the full
+ * SEP-41 surface (balance, name/symbol/decimals reads, transfer) for token UX,
+ * which a transfer-only host-function builder cannot provide. We ALSO expose
+ * {@link buildTokenTransferHostFunction} for the low-level relayer `{func,auth}`
+ * path. (`sac-sdk` regeneration from a canonical source is handled in B4.)
+ *
+ * @packageDocumentation
+ */
+import { xdr } from "@stellar/stellar-sdk";
+import { Client as SacClient } from "sac-sdk";
+/** A thin factory around the generated SEP-41 `sac-sdk` client. */
+export declare class SACClient {
+    readonly networkPassphrase: string;
+    readonly rpcUrl: string;
+    constructor(options: {
+        networkPassphrase: string;
+        rpcUrl: string;
+    });
+    /** Build a SEP-41 client for a specific SAC/token contract. */
+    getSACClient(sacContractId: string): SacClient;
+}
+/**
+ * Build a raw SEP-41 `transfer(from, to, amount)` host function, for the
+ * low-level relayer `{ func, auth }` submission path (no client instance needed).
+ */
+export declare function buildTokenTransferHostFunction(tokenContract: string, from: string, to: string, amountInStroops: bigint): xdr.HostFunction;
+//# sourceMappingURL=sac.d.ts.map

package/dist/sac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sac.d.ts","sourceRoot":"","sources":["../src/sac.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAW,GAAG,EAAiB,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAE9C,mEAAmE;AACnE,qBAAa,SAAS;IACpB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,OAAO,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;IAKlE,+DAA+D;IAC/D,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS;CAO/C;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,eAAe,EAAE,MAAM,GACtB,GAAG,CAAC,YAAY,CAYlB"}

package/dist/sac.js

@@ -0,0 +1,47 @@
+/**
+ * Stellar Asset Contract (SEP-41) helpers.
+ *
+ * DECISION (todo 950): keep the generated `sac-sdk` client rather than collapsing
+ * it to a bare `buildTokenTransferHostFunction` helper. The demo needs the full
+ * SEP-41 surface (balance, name/symbol/decimals reads, transfer) for token UX,
+ * which a transfer-only host-function builder cannot provide. We ALSO expose
+ * {@link buildTokenTransferHostFunction} for the low-level relayer `{func,auth}`
+ * path. (`sac-sdk` regeneration from a canonical source is handled in B4.)
+ *
+ * @packageDocumentation
+ */
+import { Address, xdr, nativeToScVal } from "@stellar/stellar-sdk";
+import { Client as SacClient } from "sac-sdk";
+/** A thin factory around the generated SEP-41 `sac-sdk` client. */
+export class SACClient {
+    networkPassphrase;
+    rpcUrl;
+    constructor(options) {
+        this.networkPassphrase = options.networkPassphrase;
+        this.rpcUrl = options.rpcUrl;
+    }
+    /** Build a SEP-41 client for a specific SAC/token contract. */
+    getSACClient(sacContractId) {
+        return new SacClient({
+            contractId: sacContractId,
+            networkPassphrase: this.networkPassphrase,
+            rpcUrl: this.rpcUrl,
+        });
+    }
+}
+/**
+ * Build a raw SEP-41 `transfer(from, to, amount)` host function, for the
+ * low-level relayer `{ func, auth }` submission path (no client instance needed).
+ */
+export function buildTokenTransferHostFunction(tokenContract, from, to, amountInStroops) {
+    return xdr.HostFunction.hostFunctionTypeInvokeContract(new xdr.InvokeContractArgs({
+        contractAddress: Address.fromString(tokenContract).toScAddress(),
+        functionName: "transfer",
+        args: [
+            xdr.ScVal.scvAddress(Address.fromString(from).toScAddress()),
+            xdr.ScVal.scvAddress(Address.fromString(to).toScAddress()),
+            nativeToScVal(amountInStroops, { type: "i128" }),
+        ],
+    }));
+}
+//# sourceMappingURL=sac.js.map

package/dist/sac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sac.js","sourceRoot":"","sources":["../src/sac.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,MAAM,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAE9C,mEAAmE;AACnE,MAAM,OAAO,SAAS;IACX,iBAAiB,CAAS;IAC1B,MAAM,CAAS;IAExB,YAAY,OAAsD;QAChE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACnD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED,+DAA+D;IAC/D,YAAY,CAAC,aAAqB;QAChC,OAAO,IAAI,SAAS,CAAC;YACnB,UAAU,EAAE,aAAa;YACzB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC5C,aAAqB,EACrB,IAAY,EACZ,EAAU,EACV,eAAuB;IAEvB,OAAO,GAAG,CAAC,YAAY,CAAC,8BAA8B,CACpD,IAAI,GAAG,CAAC,kBAAkB,CAAC;QACzB,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;QAChE,YAAY,EAAE,UAAU;QACxB,IAAI,EAAE;YACJ,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5D,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1D,aAAa,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;SACjD;KACF,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,79 @@
+/**
+ * `PasskeyServer` — the SERVER-ONLY counterpart to {@link PasskeyKit}.
+ *
+ * It holds the relayer API key and therefore must never run in a browser
+ * bundle: it is exported exclusively from the `passkey-kit/server` subpath so a
+ * bundler can't pull it into client code, and its config must come from
+ * server-side environment variables (never `VITE_`-prefixed).
+ *
+ * Responsibilities: fee-sponsored submission via {@link RelayerClient} and
+ * convenience signer-discovery helpers that delegate to a {@link MercuryIndexer}
+ * over Mercury's keyless hosted passkey-indexer. (`MercuryIndexer` itself is
+ * keyless and browser-safe — exported from the main `passkey-kit` entry; these
+ * server methods are a thin convenience over it.)
+ *
+ * @packageDocumentation
+ */
+import { type Transaction } from "@stellar/stellar-sdk";
+import { Server } from "@stellar/stellar-sdk/rpc";
+import { AssembledTransaction } from "@stellar/stellar-sdk/contract";
+import { type RelayerClientConfig, type RelayerSubmitOptions } from "./relayer.js";
+import type { WalletSigner } from "./indexer/index.js";
+import type { TransactionResult } from "./types.js";
+export { RelayerClient, type RelayerClientConfig, type RelayerSubmitOptions, } from "./relayer.js";
+/** Mercury hosted passkey-indexer configuration (keyless). */
+export interface MercuryConfig {
+    /**
+     * Passkey-indexer base URL. Defaults to the network's hosted endpoint
+     * (`https://{testnet,mainnet}.mercurydata.app/rest/passkey-indexer`); set it
+     * only to point at a self-hosted instance.
+     */
+    url?: string;
+}
+/** Configuration for a {@link PasskeyServer}. */
+export interface PasskeyServerConfig {
+    /** Network passphrase (required). */
+    networkPassphrase: string;
+    /** Stellar RPC URL (needed for temporary-signer eviction probes). */
+    rpcUrl?: string;
+    /** Relayer configuration for fee-sponsored submission. */
+    relayer?: RelayerClientConfig;
+    /** Mercury indexer configuration. */
+    mercury?: MercuryConfig;
+}
+export declare class PasskeyServer {
+    readonly networkPassphrase: string;
+    readonly rpc?: Server;
+    private readonly relayer?;
+    private readonly mercury?;
+    constructor(config: PasskeyServerConfig);
+    /**
+     * Submit a transaction via the relayer for fee sponsorship.
+     *
+     * invokeHostFunction transactions without source-account auth use the preferred
+     * `{ func, auth }` Soroban path; everything else (deploys, source-account auth)
+     * is fee-bumped via the `{ xdr }` envelope path. Never throws — returns a typed
+     * {@link TransactionResult}.
+     */
+    send(input: AssembledTransaction<unknown> | Transaction | string, options?: RelayerSubmitOptions): Promise<TransactionResult>;
+    /** Poll a `skipWait` submission by its relayer transaction id. */
+    getTransaction(transactionId: string): Promise<TransactionResult>;
+    private requireMercury;
+    /**
+     * Enumerate a wallet's signers via Mercury. Temporary signers whose ledger
+     * entry has been evicted are flagged `status: "evicted"` when this server was
+     * given an `rpcUrl` (the indexer can't observe TTL eviction directly).
+     */
+    getSigners(contractId: string): Promise<WalletSigner[]>;
+    /**
+     * Reverse lookup: find the wallet(s) a signer belongs to via Mercury.
+     *
+     * @returns the confirmed address at `index`, or `undefined` if there are none.
+     */
+    getContractId(options: {
+        keyId?: string;
+        publicKey?: string;
+        policy?: string;
+    }, index?: number): Promise<string | undefined>;
+}
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAiB,KAAK,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AASlG,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIpD,OAAO,EACL,aAAa,EACb,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,cAAc,CAAC;AAEtB,8DAA8D;AAC9D,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,iDAAiD;AACjD,MAAM,WAAW,mBAAmB;IAClC,qCAAqC;IACrC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,qCAAqC;IACrC,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAmCD,qBAAa,aAAa;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAEtB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAgB;IACzC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAiB;gBAE9B,MAAM,EAAE,mBAAmB;IAgCvC;;;;;;;OAOG;IACG,IAAI,CACR,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,WAAW,GAAG,MAAM,EAC3D,OAAO,CAAC,EAAE,oBAAoB,GAC7B,OAAO,CAAC,iBAAiB,CAAC;IAmC7B,kEAAkE;IAClE,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAgBjE,OAAO,CAAC,cAAc;IAUtB;;;;OAIG;IACH,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIvD;;;;OAIG;IACG,aAAa,CACjB,OAAO,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAChE,KAAK,SAAI,GACR,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAmB/B"}