sta-sdk 0.1.0

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config.ts","../src/scval.ts","../src/auth.ts","../src/payments.ts","../src/events.ts","../src/state.ts"],"names":["xdr","Address","hash","authorizeEntry","nativeToScVal","TransactionBuilder","BASE_FEE","Operation","rpc","scValToNative","Contract","u32ScVal","u64ScVal","bytesN32ScVal","addressScVal"],"mappings":";;;;;AAwCO,IAAM,OAAA,GAAyB;AAAA,EACpC,OAAA,EAAS,SAAA;AAAA,EACT,MAAA,EAAQ,qCAAA;AAAA,EACR,iBAAA,EAAmB,mCAAA;AAAA,EACnB,SAAA,EAAW;AAAA,IACT,YAAA,EAAc,0DAAA;AAAA,IACd,YAAA,EAAc,0DAAA;AAAA,IACd,cAAA,EAAgB,0DAAA;AAAA,IAChB,eAAA,EAAiB,0DAAA;AAAA,IACjB,cAAA,EAAgB,0DAAA;AAAA,IAChB,eAAA,EAAiB,0DAAA;AAAA,IACjB,YAAA,EAAc;AAAA;AAElB;AASO,IAAM,0BAAA,GAA6B;AAanC,IAAM,mBAAA,GAAsB;AAoB5B,SAAS,kBAAA,CACd,SAAA,EACA,MAAA,GAAA,CAAkB,OAAO,OAAA,KAAY,WAAA,GAAc,OAAA,CAAQ,GAAA,GAAM,mBAAmB,CAAA,GAAI,MAAA,KAAc,EAAA,EACvF;AACf,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,uFAAuF,mBAAmB,CAAA,qIAAA;AAAA,KAC5G;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,SAAA;AAAA,IACT,MAAA;AAAA,IACA,iBAAA,EAAmB,0BAAA;AAAA,IACnB;AAAA,GACF;AACF;AAKO,IAAM,OAAA,GAAqC;AAE3C,IAAM,QAAA,GAAW;AAAA,EACtB,OAAA,EAAS,OAAA;AAAA,EACT,OAAA,EAAS;AACX;ACxGO,SAAS,YAAY,MAAA,EAA8C;AACxE,EAAA,OAAOA,eAAI,KAAA,CAAM,MAAA;AAAA,IACf,OAAO,OAAA,CAAQ,MAAM,EAClB,IAAA,CAAK,CAAC,CAAC,IAAI,CAAA,EAAG,CAAC,KAAK,CAAA,KAAO,OAAO,KAAA,GAAQ,EAAA,GAAK,OAAO,KAAA,GAAQ,CAAA,GAAI,CAAE,CAAA,CACpE,GAAA;AAAA,MACC,CAAC,CAAC,GAAA,EAAK,GAAG,CAAA,KACR,IAAIA,eAAI,UAAA,CAAW;AAAA,QACjB,GAAA,EAAKA,cAAA,CAAI,KAAA,CAAM,SAAA,CAAU,GAAG,CAAA;AAAA,QAC5B;AAAA,OACD;AAAA;AACL,GACJ;AACF;;;ACkBO,SAAS,gBAAgB,IAAA,EAA0D;AACxF,EAAA,MAAM,EAAA,GAAK,IAAIA,cAAAA,CAAI,kBAAA,CAAmB;AAAA,IACpC,iBAAiB,IAAIC,kBAAA,CAAQ,IAAA,CAAK,UAAU,EAAE,WAAA,EAAY;AAAA,IAC1D,cAAc,IAAA,CAAK,YAAA;AAAA,IACnB,MAAM,IAAA,CAAK;AAAA,GACZ,CAAA;AACD,EAAA,MAAM,IAAA,GAAOD,cAAAA,CAAI,yBAAA,CAA0B,uCAAA,CAAwC,EAAE,CAAA;AACrF,EAAA,OAAO,IAAIA,eAAI,2BAAA,CAA4B;AAAA,IACzC,QAAA,EAAU,IAAA;AAAA,IACV,cAAA,EAAgB,IAAA,CAAK,cAAA,IAAkB;AAAC,GACzC,CAAA;AACH;AAEA,SAAS,UAAU,iBAAA,EAAmC;AACpD,EAAA,OAAOE,eAAA,CAAK,MAAA,CAAO,IAAA,CAAK,iBAAiB,CAAC,CAAA;AAC5C;AAMO,SAAS,gBAAA,CACd,UAAA,EACA,KAAA,EACA,yBAAA,EACA,iBAAA,EACQ;AACR,EAAA,MAAM,QAAA,GAAWF,eAAI,cAAA,CAAe,gCAAA;AAAA,IAClC,IAAIA,eAAI,kCAAA,CAAmC;AAAA,MACzC,SAAA,EAAW,UAAU,iBAAiB,CAAA;AAAA,MACtC,OAAOA,cAAAA,CAAI,KAAA,CAAM,UAAA,CAAW,KAAA,CAAM,UAAU,CAAA;AAAA,MAC5C,yBAAA;AAAA,MACA;AAAA,KACD;AAAA,GACH;AACA,EAAA,OAAOE,eAAA,CAAK,QAAA,CAAS,KAAA,EAAO,CAAA;AAC9B;AAEA,SAAS,WAAA,GAAsB;AAE7B,EAAA,MAAM,IAAA,GAAO,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,MAAA,EAAO,GAAI,CAAA,IAAK,EAAE,CAAC,CAAA;AACvD,EAAA,MAAM,GAAA,GAAM,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,MAAA,EAAO,GAAI,CAAA,IAAK,EAAE,CAAC,CAAA;AACtD,EAAA,OAAQ,QAAQ,GAAA,GAAO,GAAA;AACzB;AAYA,eAAe,qBAAA,CACb,OAAA,EACA,UAAA,EACA,IAAA,EACA,2BACA,iBAAA,EACwC;AACxC,EAAA,MAAM,QAAQ,WAAA,EAAY;AAC1B,EAAA,MAAM,aAAA,GAAgB,IAAIF,cAAAA,CAAI,yBAAA,CAA0B;AAAA,IACtD,WAAA,EAAaA,eAAI,kBAAA,CAAmB,yBAAA;AAAA,MAClC,IAAIA,eAAI,yBAAA,CAA0B;AAAA,QAChC,OAAA,EAAS,IAAIC,kBAAA,CAAQ,OAAO,EAAE,WAAA,EAAY;AAAA,QAC1C,OAAOD,cAAAA,CAAI,KAAA,CAAM,UAAA,CAAW,KAAA,CAAM,UAAU,CAAA;AAAA,QAC5C,yBAAA;AAAA,QACA,SAAA,EAAWA,cAAAA,CAAI,KAAA,CAAM,OAAA;AAAQ,OAC9B;AAAA,KACH;AAAA,IACA,cAAA,EAAgB;AAAA,GACjB,CAAA;AACD,EAAA,OAAOG,yBAAA,CAAe,aAAA,EAAe,IAAA,EAAM,yBAAA,EAA2B,iBAAiB,CAAA;AACzF;AAWA,SAAS,4BAAA,CAA6B,eAAuB,mBAAA,EAA2C;AACtG,EAAA,MAAM,SAAA,GAAYH,cAAAA,CAAI,KAAA,CAAM,MAAA,CAAO;AAAA,IACjCA,cAAAA,CAAI,KAAA,CAAM,SAAA,CAAU,WAAW,CAAA;AAAA,IAC/B,IAAIC,kBAAA,CAAQ,aAAa,CAAA,CAAE,OAAA;AAAQ,GACpC,CAAA;AACD,EAAA,MAAM,UAAA,GAAaD,cAAAA,CAAI,KAAA,CAAM,MAAA,CAAO;AAAA,IAClC,IAAIA,cAAAA,CAAI,UAAA,CAAW,EAAE,KAAK,SAAA,EAAW,GAAA,EAAKA,cAAAA,CAAI,KAAA,CAAM,SAAS,MAAA,CAAO,KAAA,CAAM,CAAC,CAAC,GAAG;AAAA,GAChF,CAAA;AACD,EAAA,OAAO,WAAA,CAAY;AAAA,IACjB,gBAAA,EAAkB,mBAAA;AAAA,IAClB,OAAA,EAAS;AAAA,GACV,CAAA;AACH;AAoCA,eAAsB,6BACpB,IAAA,EACyE;AACzE,EAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,cAAA,IAAkB,CAAC,CAAC,CAAA;AAChD,EAAA,MAAM,SAAS,WAAA,EAAY;AAC3B,EAAA,MAAM,WAAA,GAAc,gBAAA;AAAA,IAClB,IAAA,CAAK,cAAA;AAAA,IACL,MAAA;AAAA,IACA,IAAA,CAAK,yBAAA;AAAA,IACL,IAAA,CAAK;AAAA,GACP;AAEA,EAAA,MAAM,mBAAA,GAAsBA,eAAI,KAAA,CAAM,MAAA;AAAA,IACpC,cAAA,CAAe,IAAI,CAAC,EAAA,KAAOA,eAAI,KAAA,CAAM,MAAA,CAAO,EAAE,CAAC;AAAA,GACjD;AACA,EAAA,MAAM,UAAA,GAAaE,eAAA;AAAA,IACjB,MAAA,CAAO,MAAA,CAAO,CAAC,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,mBAAA,CAAoB,KAAA,EAAO,CAAC,CAAC;AAAA,GACpF;AAEA,EAAA,MAAM,MAAA,GAAS,IAAIF,cAAAA,CAAI,yBAAA,CAA0B;AAAA,IAC/C,WAAA,EAAaA,eAAI,kBAAA,CAAmB,yBAAA;AAAA,MAClC,IAAIA,eAAI,yBAAA,CAA0B;AAAA,QAChC,SAAS,IAAIC,kBAAA,CAAQ,IAAA,CAAK,cAAc,EAAE,WAAA,EAAY;AAAA,QACtD,OAAOD,cAAAA,CAAI,KAAA,CAAM,UAAA,CAAW,MAAA,CAAO,UAAU,CAAA;AAAA,QAC7C,2BAA2B,IAAA,CAAK,yBAAA;AAAA,QAChC,SAAA,EAAW,4BAAA,CAA6B,IAAA,CAAK,aAAA,EAAe,mBAAmB;AAAA,OAChF;AAAA,KACH;AAAA,IACA,gBAAgB,IAAA,CAAK;AAAA,GACtB,CAAA;AAED,EAAA,MAAM,mBAAmB,eAAA,CAAgB;AAAA,IACvC,YAAY,IAAA,CAAK,cAAA;AAAA,IACjB,YAAA,EAAc,cAAA;AAAA,IACd,MAAM,CAACA,cAAAA,CAAI,KAAA,CAAM,QAAA,CAAS,UAAU,CAAC;AAAA,GACtC,CAAA;AACD,EAAA,MAAM,SAAS,MAAM,qBAAA;AAAA,IACnB,IAAA,CAAK,aAAA;AAAA,IACL,gBAAA;AAAA,IACA,IAAA,CAAK,IAAA;AAAA,IACL,IAAA,CAAK,yBAAA;AAAA,IACL,IAAA,CAAK;AAAA,GACP;AAEA,EAAA,OAAO,CAAC,QAAQ,MAAM,CAAA;AACxB;AA6BA,eAAsB,uBACpB,IAAA,EACwC;AACxC,EAAA,MAAM,aAAa,eAAA,CAAgB;AAAA,IACjC,YAAY,IAAA,CAAK,gBAAA;AAAA,IACjB,YAAA,EAAc,qBAAA;AAAA,IACd,IAAA,EAAM,CAACA,cAAAA,CAAI,KAAA,CAAM,QAAA,CAAS,IAAA,CAAK,QAAQ,CAAA,EAAGA,cAAAA,CAAI,KAAA,CAAM,MAAA,CAAO,IAAA,CAAK,aAAa,CAAC;AAAA,GAC/E,CAAA;AACD,EAAA,OAAO,qBAAA;AAAA,IACL,IAAA,CAAK,eAAA;AAAA,IACL,UAAA;AAAA,IACA,IAAA,CAAK,IAAA;AAAA,IACL,IAAA,CAAK,yBAAA;AAAA,IACL,IAAA,CAAK;AAAA,GACP;AACF;AC1OA,IAAM,iCAAA,GAAoC,GAAA;AAC1C,IAAM,gBAAA,GAAmB,GAAA;AACzB,IAAM,iBAAA,GAAoB,EAAA;AAE1B,SAAS,aAAa,EAAA,EAAY;AAChC,EAAA,OAAO,IAAIC,kBAAAA,CAAQ,EAAE,CAAA,CAAE,OAAA,EAAQ;AACjC;AAEA,SAAS,UAAU,KAAA,EAAe;AAChC,EAAA,OAAOG,wBAAA,CAAc,KAAA,EAAO,EAAE,IAAA,EAAM,QAAQ,CAAA;AAC9C;AAEA,SAAS,SAAS,KAAA,EAAe;AAC/B,EAAA,OAAOA,wBAAA,CAAc,KAAA,EAAO,EAAE,IAAA,EAAM,OAAO,CAAA;AAC7C;AAEA,SAAS,SAAS,KAAA,EAAe;AAC/B,EAAA,OAAOA,wBAAA,CAAc,KAAA,EAAO,EAAE,IAAA,EAAM,OAAO,CAAA;AAC7C;AAEA,SAAS,UAAU,KAAA,EAAgB;AACjC,EAAA,OAAOA,yBAAc,KAAK,CAAA;AAC5B;AAEA,SAAS,cAAc,KAAA,EAAe;AACpC,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAAA,EAC9C;AACA,EAAA,OAAOJ,cAAAA,CAAI,KAAA,CAAM,QAAA,CAAS,KAAK,CAAA;AACjC;AAaA,SAAS,2BACP,MAAA,EACA,GAAA,EACA,eACA,QAAA,EACA,YAAA,EACA,MACA,IAAA,EACsB;AACtB,EAAA,MAAM,OAAA,GAAU,IAAIK,6BAAA,CAAmB,aAAA,EAAe;AAAA,IACpD,GAAA,EAAKC,mBAAA;AAAA,IACL,mBAAmB,GAAA,CAAI;AAAA,GACxB,CAAA,CACE,YAAA,CAAaC,oBAAA,CAAU,sBAAA,CAAuB,EAAE,QAAA,EAAU,QAAA,EAAU,YAAA,EAAc,IAAA,EAAM,MAAM,CAAC,EAC/F,UAAA,CAAW,GAAG,EACd,KAAA,EAAM;AAET,EAAA,OAAO,MAAA,CAAO,mBAAmB,OAAO,CAAA;AAC1C;AAaA,eAAe,uBAAA,CACb,IAAA,EACA,YAAA,EACA,IAAA,EACsB;AACtB,EAAA,MAAM,SAAS,IAAIC,cAAA,CAAI,MAAA,CAAO,IAAA,CAAK,IAAI,MAAM,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,MAAM,MAAA,CAAO,eAAA,EAAgB;AAClD,EAAA,MAAM,yBAAA,GAA4B,aAAa,QAAA,GAAW,iCAAA;AAE1D,EAAA,MAAM,iBAAiB,eAAA,CAAgB;AAAA,IACrC,UAAA,EAAY,IAAA,CAAK,GAAA,CAAI,SAAA,CAAU,YAAA;AAAA,IAC/B,YAAA;AAAA,IACA;AAAA,GACD,CAAA;AAKD,EAAA,MAAM,CAAC,CAAC,MAAA,EAAQ,MAAM,GAAG,aAAa,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI;AAAA,IAC1D,4BAAA,CAA6B;AAAA,MAC3B,cAAA,EAAgB,IAAA,CAAK,GAAA,CAAI,SAAA,CAAU,YAAA;AAAA,MACnC,cAAA;AAAA,MACA,eAAe,IAAA,CAAK,aAAA;AAAA,MACpB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,iBAAA,EAAmB,KAAK,GAAA,CAAI,iBAAA;AAAA,MAC5B,gBAAgB,IAAA,CAAK,cAAA;AAAA,MACrB;AAAA,KACD,CAAA;AAAA,IACD,MAAA,CAAO,UAAA,CAAW,IAAA,CAAK,gBAAgB;AAAA,GACxC,CAAA;AAED,EAAA,OAAO,0BAAA;AAAA,IACL,MAAA;AAAA,IACA,IAAA,CAAK,GAAA;AAAA,IACL,aAAA;AAAA,IACA,IAAA,CAAK,IAAI,SAAA,CAAU,YAAA;AAAA,IACnB,YAAA;AAAA,IACA,IAAA;AAAA,IACA,CAAC,QAAQ,MAAM;AAAA,GACjB;AACF;AAUA,eAAsB,sBAAA,CACpB,MACA,OAAA,EACsB;AACtB,EAAA,MAAM,IAAA,GAAO;AAAA,IACX,YAAA,CAAa,QAAQ,KAAK,CAAA;AAAA,IAC1B,YAAA,CAAa,QAAQ,WAAW,CAAA;AAAA,IAChC,SAAA,CAAU,QAAQ,MAAM,CAAA;AAAA,IACxB,QAAA,CAAS,QAAQ,KAAK,CAAA;AAAA,IACtB,QAAA,CAAS,QAAQ,qBAAqB;AAAA,GACxC;AACA,EAAA,OAAO,uBAAA,CAAwB,IAAA,EAAM,0BAAA,EAA4B,IAAI,CAAA;AACvE;AAUA,eAAsB,mBAAA,CACpB,MACA,OAAA,EACsB;AACtB,EAAA,MAAM,IAAA,GAAO;AAAA,IACX,YAAA,CAAa,QAAQ,KAAK,CAAA;AAAA,IAC1BR,eAAI,KAAA,CAAM,MAAA,CAAO,QAAQ,UAAA,CAAW,GAAA,CAAI,YAAY,CAAC,CAAA;AAAA,IACrDA,eAAI,KAAA,CAAM,MAAA,CAAO,QAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAC,CAAA;AAAA,IAC/C,QAAA,CAAS,QAAQ,KAAK,CAAA;AAAA,IACtB,QAAA,CAAS,QAAQ,qBAAqB;AAAA,GACxC;AACA,EAAA,OAAO,uBAAA,CAAwB,IAAA,EAAM,uBAAA,EAAyB,IAAI,CAAA;AACpE;AAwBA,SAAS,qBAAqB,MAAA,EAA6B;AACzD,EAAA,OAAO,WAAA,CAAY;AAAA,IACjB,SAAA,EAAW,aAAA,CAAc,MAAA,CAAO,SAAS,CAAA;AAAA,IACzC,KAAA,EAAO,YAAA,CAAa,MAAA,CAAO,KAAK,CAAA;AAAA,IAChC,WAAA,EAAa,YAAA,CAAa,MAAA,CAAO,WAAW,CAAA;AAAA,IAC5C,MAAA,EAAQ,SAAA,CAAU,MAAA,CAAO,MAAM,CAAA;AAAA,IAC/B,YAAA,EAAc,QAAA,CAAS,MAAA,CAAO,YAAY,CAAA;AAAA,IAC1C,UAAA,EAAY,QAAA,CAAS,MAAA,CAAO,UAAU,CAAA;AAAA,IACtC,gBAAA,EAAkB,QAAA,CAAS,MAAA,CAAO,gBAAgB,CAAA;AAAA,IAClD,cAAA,EAAgB,QAAA,CAAS,MAAA,CAAO,cAAc,CAAA;AAAA,IAC9C,eAAA,EAAiB,QAAA,CAAS,MAAA,CAAO,eAAe,CAAA;AAAA,IAChD,cAAA,EAAgB,QAAA,CAAS,MAAA,CAAO,cAAc,CAAA;AAAA,IAC9C,OAAA,EAAS,YAAA,CAAa,MAAA,CAAO,OAAO,CAAA;AAAA,IACpC,SAAA,EAAW,SAAA,CAAU,MAAA,CAAO,SAAS;AAAA,GACtC,CAAA;AACH;AAMA,eAAsB,uBAAA,CACpB,MACA,MAAA,EACsB;AACtB,EAAA,MAAM,IAAA,GAAO,CAAC,oBAAA,CAAqB,MAAM,CAAC,CAAA;AAC1C,EAAA,OAAO,uBAAA,CAAwB,IAAA,EAAM,0BAAA,EAA4B,IAAI,CAAA;AACvE;AAEA,eAAsB,6BAAA,CACpB,MACA,QAAA,EACsB;AACtB,EAAA,MAAM,IAAA,GAAO,CAAC,aAAA,CAAc,QAAQ,CAAC,CAAA;AACrC,EAAA,OAAO,uBAAA,CAAwB,IAAA,EAAM,0BAAA,EAA4B,IAAI,CAAA;AACvE;AAKA,eAAsB,aAAA,CACpB,GAAA,EACA,EAAA,EACA,gBAAA,EACmD;AACnD,EAAA,MAAM,MAAA,GAAS,IAAIQ,cAAA,CAAI,MAAA,CAAO,IAAI,MAAM,CAAA;AACxC,EAAA,EAAA,CAAG,KAAK,gBAAgB,CAAA;AACxB,EAAA,MAAM,YAAA,GAAe,MAAM,MAAA,CAAO,eAAA,CAAgB,EAAE,CAAA;AACpD,EAAA,IAAI,YAAA,CAAa,WAAW,OAAA,EAAS;AACnC,IAAA,MAAM,IAAI,MAAM,CAAA,wBAAA,EAA2B,IAAA,CAAK,UAAU,YAAA,CAAa,WAAW,CAAC,CAAA,CAAE,CAAA;AAAA,EACvF;AAEA,EAAA,IAAI,QAAA,GAAW,MAAM,MAAA,CAAO,cAAA,CAAe,aAAa,IAAI,CAAA;AAC5D,EAAA,KAAA,IACM,OAAA,GAAU,CAAA,EACd,QAAA,CAAS,MAAA,KAAWA,cAAA,CAAI,IAAI,oBAAA,CAAqB,SAAA,IAAa,OAAA,GAAU,iBAAA,EACxE,OAAA,EAAA,EACA;AACA,IAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,gBAAgB,CAAC,CAAA;AACpE,IAAA,QAAA,GAAW,MAAM,MAAA,CAAO,cAAA,CAAe,YAAA,CAAa,IAAI,CAAA;AAAA,EAC1D;AACA,EAAA,IAAI,QAAA,CAAS,MAAA,KAAWA,cAAA,CAAI,GAAA,CAAI,qBAAqB,SAAA,EAAW;AAC9D,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,YAAA,EAAe,YAAA,CAAa,IAAI,CAAA,iBAAA,EAAoB,iBAAiB,CAAA,iBAAA;AAAA,KACvE;AAAA,EACF;AACA,EAAA,IAAI,QAAA,CAAS,MAAA,KAAWA,cAAA,CAAI,GAAA,CAAI,qBAAqB,OAAA,EAAS;AAC5D,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,YAAA,EAAe,YAAA,CAAa,IAAI,YAAY,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC,CAAA,CAAE,CAAA;AAAA,EACxF;AACA,EAAA,OAAO,QAAA;AACT;AAiBA,eAAsB,wBAAwB,IAAA,EAAmD;AAC/F,EAAA,MAAM,SAAS,IAAIA,cAAA,CAAI,MAAA,CAAO,IAAA,CAAK,IAAI,MAAM,CAAA;AAC7C,EAAA,MAAM,YAAA,GAAe,MAAM,MAAA,CAAO,eAAA,EAAgB;AAClD,EAAA,MAAM,yBAAA,GAA4B,aAAa,QAAA,GAAW,iCAAA;AAE1D,EAAA,MAAM,CAAC,aAAA,EAAe,aAAa,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,IACvD,sBAAA,CAAuB;AAAA,MACrB,gBAAA,EAAkB,IAAA,CAAK,GAAA,CAAI,SAAA,CAAU,cAAA;AAAA,MACrC,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,eAAe,IAAA,CAAK,aAAA;AAAA,MACpB,iBAAiB,IAAA,CAAK,eAAA;AAAA,MACtB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,iBAAA,EAAmB,KAAK,GAAA,CAAI,iBAAA;AAAA,MAC5B;AAAA,KACD,CAAA;AAAA,IACD,MAAA,CAAO,UAAA,CAAW,IAAA,CAAK,eAAe;AAAA,GACvC,CAAA;AAED,EAAA,MAAM,IAAA,GAAO,CAAC,aAAA,CAAc,IAAA,CAAK,QAAQ,CAAA,EAAG,QAAA,CAAS,IAAA,CAAK,aAAa,CAAC,CAAA;AACxE,EAAA,OAAO,0BAAA;AAAA,IACL,MAAA;AAAA,IACA,IAAA,CAAK,GAAA;AAAA,IACL,aAAA;AAAA,IACA,IAAA,CAAK,IAAI,SAAA,CAAU,YAAA;AAAA,IACnB,2BAAA;AAAA,IACA,IAAA;AAAA,IACA,CAAC,aAAa;AAAA,GAChB;AACF;AC3NA,SAAS,YAAY,KAAA,EAA8C;AACjE,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,EAAK,CAAE,EAAA,EAAG;AAC7B,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,MAAA,EAAO,CAAE,CAAC,CAAA;AAC7B,EAAA,OAAO,KAAA,EAAO,QAAO,CAAE,IAAA,KAAS,cAAc,KAAA,CAAM,GAAA,EAAI,CAAE,QAAA,EAAS,GAAI,MAAA;AACzE;AAWA,IAAM,YAAA,GAAiD;AAAA,EACrD,MAAA,EAAQ,CAAC,OAAA,EAAS,aAAa,CAAA;AAAA,EAC/B,OAAA,EAAS,CAAC,OAAO,CAAA;AAAA,EACjB,OAAA,EAAS,CAAC,WAAW,CAAA;AAAA,EACrB,MAAA,EAAQ,CAAC,WAAW,CAAA;AAAA,EACpB,MAAA,EAAQ,CAAC,WAAW,CAAA;AAAA,EACpB,MAAA,EAAQ,CAAC,WAAW,CAAA;AAAA,EACpB,IAAA,EAAM,CAAC,WAAW,CAAA;AAAA,EAClB,IAAA,EAAM,CAAC,YAAY,CAAA;AAAA,EACnB,IAAA,EAAM,CAAC,YAAA,EAAc,UAAU,CAAA;AAAA,EAC/B,KAAA,EAAO,CAAC,YAAY,CAAA;AAAA,EACpB,OAAA,EAAS,CAAC,YAAY,CAAA;AAAA,EACtB,OAAA,EAAS,CAAC,UAAU,CAAA;AAAA,EACpB,QAAQ;AACV,CAAA;AAEA,SAAS,aAAa,KAAA,EAAmD;AACvE,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,IAAA,EAAK,CAAE,EAAA,EAAG;AAC7B,EAAA,MAAM,MAAA,GAAS,KAAK,MAAA,EAAO;AAC3B,EAAA,MAAM,KAAA,GAAQ,YAAY,KAAK,CAAA;AAC/B,EAAA,MAAM,kBAAkB,KAAA,IAAS,KAAA,IAAS,eAAe,YAAA,CAAa,KAAuB,IAAI,EAAC;AAElG,EAAA,MAAM,aAAsC,EAAC;AAC7C,EAAA,eAAA,CAAgB,OAAA,CAAQ,CAAC,IAAA,EAAM,CAAA,KAAM;AACnC,IAAA,UAAA,CAAW,IAAI,CAAA,GAAIC,wBAAA,CAAc,MAAA,CAAO,CAAA,GAAI,CAAC,CAAC,CAAA;AAAA,EAChD,CAAC,CAAA;AAED,EAAA,MAAM,MAAA,GAASA,wBAAA,CAAc,IAAA,CAAK,IAAA,EAAM,CAAA;AACxC,EAAA,MAAM,WAAW,MAAA,IAAU,OAAO,MAAA,KAAW,QAAA,GAAY,SAAqC,EAAC;AAE/F,EAAA,OAAO,EAAE,GAAG,UAAA,EAAY,GAAG,QAAA,EAAS;AACtC;AAQO,SAAS,mBAAmB,KAAA,EAAuC;AACxE,EAAA,MAAM,KAAA,GAAQ,YAAY,KAAK,CAAA;AAC/B,EAAA,MAAM,MAAA,GAAS,aAAa,KAAK,CAAA;AACjC,EAAA,OAAO,EAAE,KAAA,EAAO,KAAA,IAAS,EAAA,EAAI,OAAO,MAAA,EAAO;AAC7C;AAMO,SAAS,oBAAoB,MAAA,EAA4C;AAC9E,EAAA,OAAO,MAAA,CAAO,IAAI,kBAAkB,CAAA;AACtC;AAEO,SAAS,SAAA,CACd,QACA,KAAA,EACyB;AACzB,EAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,UAAU,KAAK,CAAA;AAClD,EAAA,OAAO,KAAA,EAAO,KAAA;AAChB;AC7GA,SAAS,kBACP,UAAA,EACwD;AACxD,EAAA,OAAO,OAAA,IAAW,UAAA;AACpB;AAEA,eAAe,aACb,GAAA,EACA,aAAA,EACA,YACA,MAAA,EACA,IAAA,GAAoB,EAAC,EACH;AAClB,EAAA,MAAM,MAAA,GAAS,IAAID,cAAAA,CAAI,MAAA,CAAO,IAAI,MAAM,CAAA;AACxC,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,CAAW,aAAa,CAAA;AACpD,EAAA,MAAM,EAAA,GAAK,IAAIH,6BAAAA,CAAmB,MAAA,EAAQ,EAAE,GAAA,EAAKC,mBAAAA,EAAU,iBAAA,EAAmB,GAAA,CAAI,iBAAA,EAAmB,CAAA,CAClG,YAAA,CAAa,IAAII,mBAAA,CAAS,UAAU,CAAA,CAAE,IAAA,CAAK,MAAA,EAAQ,GAAG,IAAI,CAAC,CAAA,CAC3D,UAAA,CAAW,EAAE,CAAA,CACb,KAAA,EAAM;AAET,EAAA,MAAM,UAAA,GAAa,MAAM,MAAA,CAAO,mBAAA,CAAoB,EAAE,CAAA;AACtD,EAAA,IAAI,iBAAA,CAAkB,UAAU,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,KAAA,CAAM,UAAA,CAAW,KAAK,CAAA;AAAA,EAClC;AACA,EAAA,OAAO,WAAW,MAAA,EAAQ,MAAA,GAASD,yBAAc,UAAA,CAAW,MAAA,CAAO,MAAM,CAAA,GAAI,IAAA;AAC/E;AAEA,SAASE,UAAS,KAAA,EAAe;AAC/B,EAAA,OAAOP,wBAAAA,CAAc,KAAA,EAAO,EAAE,IAAA,EAAM,OAAO,CAAA;AAC7C;AAEA,SAASQ,UAAS,KAAA,EAAe;AAC/B,EAAA,OAAOR,wBAAAA,CAAc,KAAA,EAAO,EAAE,IAAA,EAAM,OAAO,CAAA;AAC7C;AAEA,SAASS,eAAc,KAAA,EAAe;AACpC,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACvB,IAAA,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAAA,EAC9C;AACA,EAAA,OAAOb,cAAAA,CAAI,KAAA,CAAM,QAAA,CAAS,KAAK,CAAA;AACjC;AAEA,SAASc,cAAa,KAAA,EAAe;AACnC,EAAA,OAAOV,wBAAAA,CAAc,KAAA,EAAO,EAAE,IAAA,EAAM,WAAW,CAAA;AACjD;AAKA,eAAsB,iBAAA,CACpB,KACA,aAAA,EACwB;AACxB,EAAA,OAAQ,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,cAAc,QAAQ,CAAA;AACrF;AAEA,eAAsB,SAAA,CAAU,KAAoB,aAAA,EAA+C;AACjG,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,cAAc,WAAW,CAAA;AAC7F,EAAA,OAAO,OAAO,MAAA,KAAW,QAAA,GAAW,MAAA,GAAS,IAAA;AAC/C;AAIA,eAAsB,qBAAA,CAAsB,KAAoB,aAAA,EAAwC;AACtG,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,cAAc,yBAAyB,CAAA;AAC3G,EAAA,OAAO,MAAA,CAAO,UAAU,CAAC,CAAA;AAC3B;AAEA,eAAsB,eAAA,CACpB,GAAA,EACA,aAAA,EACA,aAAA,EACsB;AACtB,EAAA,OAAQ,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,cAAc,kBAAA,EAAoB;AAAA,IAC7FO,UAAS,aAAa;AAAA,GACvB,CAAA;AACH;AAEA,eAAsB,WAAA,CAAY,GAAA,EAAoB,aAAA,EAAuB,KAAA,EAAiC;AAC5G,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,cAAc,eAAA,EAAiB;AAAA,IACjGC,UAAS,KAAK;AAAA,GACf,CAAA;AACD,EAAA,OAAO,QAAQ,MAAM,CAAA;AACvB;AAMA,eAAsB,iBAAA,CAAkB,KAAoB,aAAA,EAAwC;AAClG,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,cAAc,SAAS,CAAA;AAC3F,EAAA,OAAO,MAAA,CAAO,UAAU,CAAC,CAAA;AAC3B;AAEA,eAAsB,mBAAA,CACpB,GAAA,EACA,aAAA,EACA,QAAA,EAC0B;AAC1B,EAAA,OAAQ,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,gBAAgB,YAAA,EAAc;AAAA,IACzFC,eAAc,QAAQ;AAAA,GACvB,CAAA;AACH;AAEA,eAAsB,eAAA,CACpB,GAAA,EACA,aAAA,EACA,QAAA,EACA,aAAA,EACkB;AAClB,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,gBAAgB,mBAAA,EAAqB;AAAA,IACvGA,eAAc,QAAQ,CAAA;AAAA,IACtBF,UAAS,aAAa;AAAA,GACvB,CAAA;AACD,EAAA,OAAO,QAAQ,MAAM,CAAA;AACvB;AAGA,eAAsB,mBAAA,CACpB,GAAA,EACA,aAAA,EACA,SAAA,EAC0B;AAC1B,EAAA,OAAQ,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,iBAAiB,gBAAA,EAAkB;AAAA,IAC9FE,eAAc,SAAS;AAAA,GACxB,CAAA;AACH;AAEA,eAAsB,qBAAA,CACpB,GAAA,EACA,aAAA,EACA,SAAA,EACiB;AACjB,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,iBAAiB,qBAAA,EAAuB;AAAA,IAC1GA,eAAc,SAAS;AAAA,GACxB,CAAA;AACD,EAAA,OAAO,MAAA,CAAO,UAAU,CAAC,CAAA;AAC3B;AAEA,eAAsB,UAAA,CACpB,GAAA,EACA,aAAA,EACA,QAAA,EACkB;AAClB,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,iBAAiB,aAAA,EAAe;AAAA,IAClGC,cAAa,QAAQ;AAAA,GACtB,CAAA;AACD,EAAA,OAAO,QAAQ,MAAM,CAAA;AACvB;AAKA,eAAsB,uBAAA,CAAwB,KAAoB,aAAA,EAAwC;AACxG,EAAA,MAAM,MAAA,GAAS,MAAM,YAAA,CAAa,GAAA,EAAK,eAAe,GAAA,CAAI,SAAA,CAAU,iBAAiB,uBAAuB,CAAA;AAC5G,EAAA,OAAO,MAAA,CAAO,UAAU,CAAC,CAAA;AAC3B;AAEA,eAAsB,qBAAA,CAAsB,KAAoB,aAAA,EAA4C;AAC1G,EAAA,OAAQ,MAAM,YAAA;AAAA,IACZ,GAAA;AAAA,IACA,aAAA;AAAA,IACA,IAAI,SAAA,CAAU,cAAA;AAAA,IACd;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["/**\n * Network configuration for `sta-sdk`.\n *\n * `testnet` is populated with the live, currently-deployed contract set --\n * the `smart_account` address is the account_factory-deployed treasury from\n * the smart-contracts repo's docs/TESTNET_FACTORY_DEPLOYMENT.md §13.2,\n * which runs the fixed contract code (see docs/SECURITY_REVIEW_STRICT.md\n * finding 29). The older hand-deployed treasury from docs/TESTNET_DEPLOYMENT.md\n * predates that fix and is not the default here.\n *\n * `MAINNET` stays `undefined` until `buildMainnetConfig` is actually called\n * with real, deployed contract addresses -- no mainnet deployment exists\n * yet, and nothing here fabricates one. What *is* ready now is the rest of\n * the mainnet shape: the real, verified mainnet network passphrase\n * (`MAINNET_NETWORK_PASSPHRASE`, a fixed protocol constant, unlike an RPC\n * URL) and `buildMainnetConfig` itself, so wiring in a real mainnet\n * deployment later is \"call this function with the six addresses,\" not a\n * code change.\n */\n\nexport interface ContractAddresses {\n  smartAccount: string;\n  policyEngine: string;\n  intentRegistry: string;\n  recoveryManager: string;\n  accountFactory: string;\n  /** Never called directly by a client (see docs/DAPP_INTEGRATION_SPEC.md\n   * §1) -- recorded for reference and for building auth-entry\n   * sub-invocations by hand. */\n  transferAdapter: string;\n  splitAdapter: string;\n}\n\nexport interface NetworkConfig {\n  network: \"testnet\" | \"mainnet\";\n  rpcUrl: string;\n  networkPassphrase: string;\n  contracts: ContractAddresses;\n}\n\nexport const TESTNET: NetworkConfig = {\n  network: \"testnet\",\n  rpcUrl: \"https://soroban-testnet.stellar.org\",\n  networkPassphrase: \"Test SDF Network ; September 2015\",\n  contracts: {\n    smartAccount: \"CD6GY4UUTNPW4TUV7LDL5SELN4BBHJG4KDDT3W6G23DY6XCGM75MULMQ\",\n    policyEngine: \"CCOP7NRMST5K6TL7FBDMX25LDEPW3DSFBOGBIKVFIDNAAZY7GBMVP3M4\",\n    intentRegistry: \"CAFIATSIZQSBILZJWVT4PVDXPVITJHLP6LPAVKDRHCA7I7XPZSLTRPUS\",\n    recoveryManager: \"CCHC4YKVYS3CAZUOUYWYTEMQ6TZDW75WB2BGENUC2CDWDX5RH7NMKZWU\",\n    accountFactory: \"CAQQTRRYNXIQGFVNCTMTBJDXW3PN7O44KPT7GWCCE4FRKTOHDBCWGUZO\",\n    transferAdapter: \"CBRYGIR3ORDW5LE6J7AVPSKRNTMRUYHD6FVPHQMJGPQLQ5FQUZ2U6GFH\",\n    splitAdapter: \"CBQA7UI7QN6RN4IZT7WPDHWTK2OO7J4FH2KMCVJGKMKVFGDURD63UQ7U\",\n  },\n};\n\n/**\n * Stellar's mainnet (Public Network) passphrase -- a fixed protocol\n * constant defined by the network itself (verified against\n * https://developers.stellar.org/docs/encyclopedia/network-passphrases),\n * not something that depends on which contracts (if any) are deployed.\n * Safe to hardcode, unlike a mainnet RPC URL (see `buildMainnetConfig`).\n */\nexport const MAINNET_NETWORK_PASSPHRASE = \"Public Global Stellar Network ; September 2015\";\n\n/**\n * Unlike testnet (SDF hosts `https://soroban-testnet.stellar.org` for\n * free), SDF does **not** operate a free public mainnet Soroban RPC\n * endpoint -- confirmed against\n * https://developers.stellar.org/docs/data/apis/rpc/providers, which\n * lists only third-party ecosystem providers (QuickNode, Ankr, Tatum,\n * Blockdaemon, etc.) for mainnet. There is no single correct default to\n * hardcode here, so `buildMainnetConfig` reads this env var instead of\n * assuming a provider on your behalf -- set it to whichever provider's\n * URL you've chosen, or pass `rpcUrl` to that function directly.\n */\nexport const MAINNET_RPC_URL_ENV = \"STA_MAINNET_RPC_URL\";\n\n/**\n * Builds a mainnet `NetworkConfig` once the contracts are actually deployed\n * there. No mainnet deployment exists yet -- this function exists so this\n * module is ready to receive real mainnet addresses the moment a\n * deployment happens, not to fabricate one now.\n *\n * A `NetworkConfig` with `network: \"mainnet\"` and real signing keys\n * submits real, fee-paying, fund-moving transactions against Stellar's\n * production ledger -- don't build one just to \"try it out\" with testnet\n * addresses.\n *\n * @param contracts The six real contract addresses from an actual mainnet\n *   deployment record (mirroring how `TESTNET.contracts` above is sourced\n *   from the smart-contracts repo's docs/TESTNET_FACTORY_DEPLOYMENT.md).\n * @param rpcUrl Your chosen mainnet RPC provider's URL. Defaults to\n *   `process.env[MAINNET_RPC_URL_ENV]`; throws if neither is supplied,\n *   rather than silently falling back to some hardcoded provider.\n */\nexport function buildMainnetConfig(\n  contracts: ContractAddresses,\n  rpcUrl: string = (typeof process !== \"undefined\" ? process.env?.[MAINNET_RPC_URL_ENV] : undefined) ?? \"\",\n): NetworkConfig {\n  if (!rpcUrl) {\n    throw new Error(\n      `Mainnet RPC URL not configured -- pass one explicitly to buildMainnetConfig, or set ${MAINNET_RPC_URL_ENV}. SDF hosts no free public mainnet endpoint; see https://developers.stellar.org/docs/data/apis/rpc/providers for ecosystem providers.`,\n    );\n  }\n  return {\n    network: \"mainnet\",\n    rpcUrl,\n    networkPassphrase: MAINNET_NETWORK_PASSPHRASE,\n    contracts,\n  };\n}\n\n/** `undefined` until `buildMainnetConfig` is actually called with real,\n * deployed contract addresses -- see this module's doc comment and that\n * function's. No mainnet deployment exists yet. */\nexport const MAINNET: NetworkConfig | undefined = undefined;\n\nexport const NETWORKS = {\n  testnet: TESTNET,\n  mainnet: MAINNET,\n} as const;\n","import { xdr } from \"@stellar/stellar-sdk\";\n\n/**\n * Builds the `ScMap` representation of a Soroban `#[contracttype]` struct.\n *\n * Keys are sorted, because the Soroban host requires it: an unsorted map is\n * rejected before the contract runs, with `Error(Object, InvalidInput)` and the\n * diagnostic \"ScMap was not sorted by key for conversion to host object\". The\n * Rust field declaration order is irrelevant to the wire format, so building\n * these maps in struct order — the intuitive thing to do — silently produces\n * calls that can never succeed.\n *\n * Plain string comparison is byte-order comparison here: Soroban symbols are\n * restricted to `[a-zA-Z0-9_]`, so UTF-16 code-unit order and UTF-8 byte order\n * agree.\n */\nexport function structScVal(fields: Record<string, xdr.ScVal>): xdr.ScVal {\n  return xdr.ScVal.scvMap(\n    Object.entries(fields)\n      .sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0))\n      .map(\n        ([key, val]) =>\n          new xdr.ScMapEntry({\n            key: xdr.ScVal.scvSymbol(key),\n            val,\n          }),\n      ),\n  );\n}\n","/**\n * `smart_account`'s custom-account authorization: \"Entry A\" / \"Entry B\"\n * construction (\"sta-sdk\").\n *\n * Deliberately does not depend on the Stellar CLI's generated per-contract\n * bindings (`stellar contract bindings typescript`) for this encoding:\n * those bindings pin to a specific `@stellar/stellar-sdk` major, and\n * loading a second major of the same classes (`Address`, `xdr.ScVal`, ...)\n * in a consumer's bundle risks `instanceof` mismatches between them. This\n * module hand-encodes the `AuthPayload` struct shape directly instead\n * (`smartAccountAuthPayloadScVal` below), verified against the real\n * `#[contracttype]` definition (`{ signers: Map<Signer, Bytes>,\n * context_rule_ids: Vec<u32> }`) rather than derived from a generated\n * client's `Spec`.\n *\n * `smart_account` implements Soroban's `CustomAccountInterface`\n * (`__check_auth`), composed from OpenZeppelin's `stellar-accounts` crate.\n * Any call that does `env.current_contract_address().require_auth()` --\n * every fund-moving or schedule-creating entrypoint -- needs the\n * transaction to carry a `SorobanAuthorizationEntry` whose\n * `credentials.signature` is not a signature at all, but a\n * contract-defined `AuthPayload` struct.\n *\n * Two entries are required per required `Signer::Delegated` signer:\n *\n * - **Entry A** (once, for `smart_account` itself): the `AuthPayload`\n *   structure -- no wallet interaction, assembled directly from the\n *   caller-supplied context rule id(s).\n * - **Entry B** (one per required signer): a standard classic-account\n *   authorization entry for the nested\n *   `addr.require_auth_for_args((auth_digest,))` call -- this is what a\n *   wallet (or a raw `Keypair`, server-side) actually signs, via\n *   `@stellar/stellar-sdk`'s own `authorizeEntry`.\n */\nimport { Address, hash, Keypair, xdr, type SigningCallback } from \"@stellar/stellar-sdk\";\nimport { authorizeEntry } from \"@stellar/stellar-sdk\";\n\nimport { structScVal } from \"./scval\";\n\nexport interface SubInvocationSpec {\n  contractId: string;\n  functionName: string;\n  args: xdr.ScVal[];\n  subInvocations?: xdr.SorobanAuthorizedInvocation[];\n}\n\nexport function buildInvocation(spec: SubInvocationSpec): xdr.SorobanAuthorizedInvocation {\n  const fn = new xdr.InvokeContractArgs({\n    contractAddress: new Address(spec.contractId).toScAddress(),\n    functionName: spec.functionName,\n    args: spec.args,\n  });\n  const func = xdr.SorobanAuthorizedFunction.sorobanAuthorizedFunctionTypeContractFn(fn);\n  return new xdr.SorobanAuthorizedInvocation({\n    function: func,\n    subInvocations: spec.subInvocations ?? [],\n  });\n}\n\nfunction networkId(networkPassphrase: string): Buffer {\n  return hash(Buffer.from(networkPassphrase));\n}\n\n/** The standard Soroban authorization-entry signature payload: the hash of\n * the `HashIdPreimage::SorobanAuthorization` preimage over a given\n * invocation, nonce, and expiration ledger. Every `Address` credential\n * (custom-account or classic) signs a value derived from this. */\nexport function signaturePayload(\n  invocation: xdr.SorobanAuthorizedInvocation,\n  nonce: bigint,\n  signatureExpirationLedger: number,\n  networkPassphrase: string,\n): Buffer {\n  const preimage = xdr.HashIdPreimage.envelopeTypeSorobanAuthorization(\n    new xdr.HashIdPreimageSorobanAuthorization({\n      networkId: networkId(networkPassphrase),\n      nonce: xdr.Int64.fromString(nonce.toString()),\n      signatureExpirationLedger,\n      invocation,\n    }),\n  );\n  return hash(preimage.toXDR());\n}\n\nfunction randomNonce(): bigint {\n  // 62-bit random nonce, matching the upstream SDK's scripts/execute_signer_authorized_call.py.\n  const high = BigInt(Math.floor(Math.random() * 2 ** 30));\n  const low = BigInt(Math.floor(Math.random() * 2 ** 32));\n  return (high << 32n) | low;\n}\n\n/**\n * Builds and signs one ordinary classic-account `SorobanAuthorizationEntry`\n * -- an `Address` credential whose signature is a real Ed25519 signature\n * (via `authorizeEntry`), not a contract-defined payload like\n * `smart_account`'s `AuthPayload`. Shared by Entry B of\n * `buildSmartAccountAuthEntries` (the nested `__check_auth` call a\n * `Signer::Delegated` wallet signs) and `buildExecutorAuthEntry` (the\n * relayer's `mark_child_executed` authorization) -- both are the same\n * mechanism pointed at a different invocation/address.\n */\nasync function buildClassicAuthEntry(\n  address: string,\n  invocation: xdr.SorobanAuthorizedInvocation,\n  sign: Keypair | SigningCallback,\n  signatureExpirationLedger: number,\n  networkPassphrase: string,\n): Promise<xdr.SorobanAuthorizationEntry> {\n  const nonce = randomNonce();\n  const unsignedEntry = new xdr.SorobanAuthorizationEntry({\n    credentials: xdr.SorobanCredentials.sorobanCredentialsAddress(\n      new xdr.SorobanAddressCredentials({\n        address: new Address(address).toScAddress(),\n        nonce: xdr.Int64.fromString(nonce.toString()),\n        signatureExpirationLedger,\n        signature: xdr.ScVal.scvVoid(),\n      }),\n    ),\n    rootInvocation: invocation,\n  });\n  return authorizeEntry(unsignedEntry, sign, signatureExpirationLedger, networkPassphrase);\n}\n\n/** Encodes `smart_account`'s `AuthPayload { signers: Map<Signer, Bytes>,\n * context_rule_ids: Vec<u32> }` directly against the contract's known\n * struct shape -- see this module's doc comment for why this replaces\n * upstream's `spec.nativeToScVal` call. `Signer::Delegated(address)` is\n * the enum variant encoding (a two-element vector: the variant's symbol,\n * then its payload) every delegated-signer call in this workspace uses;\n * the signature bytes are empty because `do_check_auth` does not check\n * them for a delegated signer (the wallet's classic signature on Entry B\n * is what's actually verified). */\nfunction smartAccountAuthPayloadScVal(signerAddress: string, contextRuleIdsScVal: xdr.ScVal): xdr.ScVal {\n  const signerKey = xdr.ScVal.scvVec([\n    xdr.ScVal.scvSymbol(\"Delegated\"),\n    new Address(signerAddress).toScVal(),\n  ]);\n  const signersMap = xdr.ScVal.scvMap([\n    new xdr.ScMapEntry({ key: signerKey, val: xdr.ScVal.scvBytes(Buffer.alloc(0)) }),\n  ]);\n  return structScVal({\n    context_rule_ids: contextRuleIdsScVal,\n    signers: signersMap,\n  });\n}\n\nexport interface BuildSmartAccountAuthOptions {\n  smartAccountId: string;\n  /** The actual `smart_account` call being authorized (its root\n   * invocation) -- e.g. `execute_transfer_payment(...)`. Declare any\n   * further sub-invocations that must be pre-cleared by this SAME entry\n   * as its `subInvocations`. */\n  rootInvocation: xdr.SorobanAuthorizedInvocation;\n  /** G-address of the `Signer::Delegated` wallet authorizing this call. */\n  signerAddress: string;\n  /** Signs Entry B's classic authorization entry -- a raw `Keypair` for\n   * server-side use, or a `SigningCallback` forwarding to a connected\n   * wallet's `signAuthEntry`. */\n  sign: Keypair | SigningCallback;\n  networkPassphrase: string;\n  /** Context rule id(s) the signer is registered under, one per auth\n   * context reaching `__check_auth` (root + any declared\n   * sub-invocation). Default: `[0]` (the founding rule), applied to every\n   * context. */\n  contextRuleIds?: number[];\n  signatureExpirationLedger: number;\n}\n\n/**\n * Builds Entry A + Entry B for a single required `Signer::Delegated`.\n *\n * KNOWN ISSUE: for a multi-signer context rule (threshold > 1), calling\n * this once per signer and attaching each pair produces N separate\n * Entry As, each with a single-key `signers` map. That does not match\n * `DAPP_INTEGRATION_SPEC.md` §5.4, which specifies one shared Entry A\n * carrying all N signers' keys plus N Entry Bs (one per signer) collected\n * against that same Entry A over time. Multi-signer callers should not\n * rely on this function as-is until that's reconciled -- track before\n * shipping real M-of-N threshold support.\n */\nexport async function buildSmartAccountAuthEntries(\n  opts: BuildSmartAccountAuthOptions,\n): Promise<[xdr.SorobanAuthorizationEntry, xdr.SorobanAuthorizationEntry]> {\n  const contextRuleIds = opts.contextRuleIds ?? [0];\n  const nonceA = randomNonce();\n  const sigPayloadA = signaturePayload(\n    opts.rootInvocation,\n    nonceA,\n    opts.signatureExpirationLedger,\n    opts.networkPassphrase,\n  );\n\n  const contextRuleIdsScVal = xdr.ScVal.scvVec(\n    contextRuleIds.map((id) => xdr.ScVal.scvU32(id)),\n  );\n  const authDigest = hash(\n    Buffer.concat([Buffer.from(sigPayloadA), Buffer.from(contextRuleIdsScVal.toXDR())]),\n  );\n\n  const entryA = new xdr.SorobanAuthorizationEntry({\n    credentials: xdr.SorobanCredentials.sorobanCredentialsAddress(\n      new xdr.SorobanAddressCredentials({\n        address: new Address(opts.smartAccountId).toScAddress(),\n        nonce: xdr.Int64.fromString(nonceA.toString()),\n        signatureExpirationLedger: opts.signatureExpirationLedger,\n        signature: smartAccountAuthPayloadScVal(opts.signerAddress, contextRuleIdsScVal),\n      }),\n    ),\n    rootInvocation: opts.rootInvocation,\n  });\n\n  const nestedInvocation = buildInvocation({\n    contractId: opts.smartAccountId,\n    functionName: \"__check_auth\",\n    args: [xdr.ScVal.scvBytes(authDigest)],\n  });\n  const entryB = await buildClassicAuthEntry(\n    opts.signerAddress,\n    nestedInvocation,\n    opts.sign,\n    opts.signatureExpirationLedger,\n    opts.networkPassphrase,\n  );\n\n  return [entryA, entryB];\n}\n\nexport interface BuildExecutorAuthOptions {\n  intentRegistryId: string;\n  intentId: Buffer;\n  childSequence: number;\n  executorAddress: string;\n  sign: Keypair | SigningCallback;\n  networkPassphrase: string;\n  signatureExpirationLedger: number;\n}\n\n/**\n * Authorizes `intent_registry.mark_child_executed`, the *only* real\n * authorization check in `execute_scheduled_payment`'s whole call graph.\n *\n * `SourceAccount`/auto-fill credentials only cover a `require_auth()` at\n * the ROOT of the invocation tree; `mark_child_executed`'s\n * `executor.require_auth()` is two levels deep (`execute_scheduled_payment\n * -> intent_registry.mark_child_executed -> ensure_executor`), so it needs\n * an explicit entry, built and signed the same way as any other non-root\n * classic-account authorization -- this is *not* custom-account machinery\n * (the executor is a plain account), so no `AuthPayload`/Entry-A-Entry-B\n * pairing is involved, just one ordinary signed entry rooted directly at\n * `mark_child_executed`. Verified against live testnet (see the\n * smart-contracts repo's docs/TESTNET_FACTORY_DEPLOYMENT.md §8 and\n * docs/DAPP_INTEGRATION_SPEC.md §8), and independently against this same\n * failure mode in this dApp's own `src/lib/relayer/executor.ts`.\n */\nexport async function buildExecutorAuthEntry(\n  opts: BuildExecutorAuthOptions,\n): Promise<xdr.SorobanAuthorizationEntry> {\n  const invocation = buildInvocation({\n    contractId: opts.intentRegistryId,\n    functionName: \"mark_child_executed\",\n    args: [xdr.ScVal.scvBytes(opts.intentId), xdr.ScVal.scvU32(opts.childSequence)],\n  });\n  return buildClassicAuthEntry(\n    opts.executorAddress,\n    invocation,\n    opts.sign,\n    opts.signatureExpirationLedger,\n    opts.networkPassphrase,\n  );\n}\n","/**\n * Transaction-preparation helpers: prepare -> simulate -> approve. Each\n * function returns a prepared, auth-entry-attached `Transaction` --\n * simulated (fee/resource estimation) with the custom `smart_account`\n * `AuthPayload` entries already present, ready for the caller to sign the\n * envelope with a fee-paying account and submit (see `signAndSubmit`\n * below). None of these functions touch a wallet directly -- signing is\n * always an injected `Keypair | SigningCallback` (see `auth.ts`), so a\n * browser dApp can swap in a connected wallet's `signAuthEntry` without\n * changing anything here.\n *\n * Call args are hand-encoded (`transferArgs`, `splitArgs`,\n * `scheduledIntentScVal`, below) against the contracts' real signatures,\n * rather than through a generated-bindings client's\n * `.spec.funcArgsToScVals(...)` -- see `auth.ts`'s module doc comment for\n * why this SDK avoids depending on those generated bindings directly.\n */\nimport {\n  Account,\n  Address,\n  Keypair,\n  Operation,\n  TransactionBuilder,\n  BASE_FEE,\n  nativeToScVal,\n  rpc,\n  xdr,\n  type SigningCallback,\n  type Transaction,\n} from \"@stellar/stellar-sdk\";\n\nimport { structScVal } from \"./scval\";\nimport { buildExecutorAuthEntry, buildInvocation, buildSmartAccountAuthEntries } from \"./auth\";\nimport type { NetworkConfig } from \"./config\";\n\nconst DEFAULT_EXPIRATION_WINDOW_LEDGERS = 100;\nconst POLL_INTERVAL_MS = 3000;\nconst MAX_POLL_ATTEMPTS = 40; // ~2 minutes at POLL_INTERVAL_MS\n\nfunction addressScVal(id: string) {\n  return new Address(id).toScVal();\n}\n\nfunction i128ScVal(value: bigint) {\n  return nativeToScVal(value, { type: \"i128\" });\n}\n\nfunction u32ScVal(value: number) {\n  return nativeToScVal(value, { type: \"u32\" });\n}\n\nfunction u64ScVal(value: bigint) {\n  return nativeToScVal(value, { type: \"u64\" });\n}\n\nfunction boolScVal(value: boolean) {\n  return nativeToScVal(value);\n}\n\nfunction bytesN32ScVal(value: Buffer) {\n  if (value.length !== 32) {\n    throw new Error(\"Expected exactly 32 bytes.\");\n  }\n  return xdr.ScVal.scvBytes(value);\n}\n\n/**\n * Builds, simulates, and returns a prepared `Transaction` invoking one\n * contract function with a given set of auth entries already attached.\n * Shared scaffolding for every `prepare*` helper below (signer-authored\n * `smart_account` calls and the relayer's `execute_scheduled_payment`\n * alike) -- only the auth entries and operation args actually differ\n * between them. Takes an already-fetched `sourceAccount` rather than\n * fetching it itself, so callers can build auth entries (a signing round\n * trip, possibly a wallet prompt) and fetch the source account\n * concurrently instead of serially.\n */\nfunction buildAndPrepareTransaction(\n  server: rpc.Server,\n  net: NetworkConfig,\n  sourceAccount: Account,\n  contract: string,\n  functionName: string,\n  args: xdr.ScVal[],\n  auth: xdr.SorobanAuthorizationEntry[],\n): Promise<Transaction> {\n  const builder = new TransactionBuilder(sourceAccount, {\n    fee: BASE_FEE,\n    networkPassphrase: net.networkPassphrase,\n  })\n    .addOperation(Operation.invokeContractFunction({ contract, function: functionName, args, auth }))\n    .setTimeout(120)\n    .build();\n\n  return server.prepareTransaction(builder);\n}\n\nexport interface PrepareOptions {\n  net: NetworkConfig;\n  /** Any funded account that pays the network fee -- independent of who\n   * authorizes the `smart_account` call. Only its public key is needed to\n   * build the transaction. */\n  feeSourceAddress: string;\n  signerAddress: string;\n  sign: Keypair | SigningCallback;\n  contextRuleIds?: number[];\n}\n\nasync function prepareSmartAccountCall(\n  opts: PrepareOptions,\n  functionName: string,\n  args: xdr.ScVal[],\n): Promise<Transaction> {\n  const server = new rpc.Server(opts.net.rpcUrl);\n  const latestLedger = await server.getLatestLedger();\n  const signatureExpirationLedger = latestLedger.sequence + DEFAULT_EXPIRATION_WINDOW_LEDGERS;\n\n  const rootInvocation = buildInvocation({\n    contractId: opts.net.contracts.smartAccount,\n    functionName,\n    args,\n  });\n\n  // Neither depends on the other's result -- run the signing round trip\n  // (possibly a wallet prompt) and the account-fetch RPC call concurrently\n  // rather than paying both latencies serially.\n  const [[entryA, entryB], sourceAccount] = await Promise.all([\n    buildSmartAccountAuthEntries({\n      smartAccountId: opts.net.contracts.smartAccount,\n      rootInvocation,\n      signerAddress: opts.signerAddress,\n      sign: opts.sign,\n      networkPassphrase: opts.net.networkPassphrase,\n      contextRuleIds: opts.contextRuleIds,\n      signatureExpirationLedger,\n    }),\n    server.getAccount(opts.feeSourceAddress),\n  ]);\n\n  return buildAndPrepareTransaction(\n    server,\n    opts.net,\n    sourceAccount,\n    opts.net.contracts.smartAccount,\n    functionName,\n    args,\n    [entryA, entryB],\n  );\n}\n\nexport interface TransferPaymentArgs {\n  asset: string;\n  destination: string;\n  amount: bigint;\n  nonce: bigint;\n  expectedPolicyVersion: number;\n}\n\nexport async function prepareTransferPayment(\n  opts: PrepareOptions,\n  payment: TransferPaymentArgs,\n): Promise<Transaction> {\n  const args = [\n    addressScVal(payment.asset),\n    addressScVal(payment.destination),\n    i128ScVal(payment.amount),\n    u64ScVal(payment.nonce),\n    u32ScVal(payment.expectedPolicyVersion),\n  ];\n  return prepareSmartAccountCall(opts, \"execute_transfer_payment\", args);\n}\n\nexport interface SplitPaymentArgs {\n  asset: string;\n  recipients: string[];\n  amounts: bigint[];\n  nonce: bigint;\n  expectedPolicyVersion: number;\n}\n\nexport async function prepareSplitPayment(\n  opts: PrepareOptions,\n  payment: SplitPaymentArgs,\n): Promise<Transaction> {\n  const args = [\n    addressScVal(payment.asset),\n    xdr.ScVal.scvVec(payment.recipients.map(addressScVal)),\n    xdr.ScVal.scvVec(payment.amounts.map(i128ScVal)),\n    u64ScVal(payment.nonce),\n    u32ScVal(payment.expectedPolicyVersion),\n  ];\n  return prepareSmartAccountCall(opts, \"execute_split_payment\", args);\n}\n\nexport interface ScheduledIntentArgs {\n  intent_id: Buffer;\n  asset: string;\n  destination: string;\n  amount: bigint;\n  start_ledger: number;\n  end_ledger: number;\n  interval_ledgers: number;\n  max_executions: number;\n  /** Ignored/overwritten server-side, pinned to `0` at creation -- pass any\n   * placeholder value; read the resolved field back from the\n   * `IntentCreated` event or a follow-up `get_intent` read. */\n  execution_count: number;\n  /** Ignored/overwritten server-side, pinned to `policy_engine.version()`\n   * at creation time -- see `execution_count` above. */\n  policy_version: number;\n  /** Ignored/overwritten server-side, pinned to the currently configured\n   * `transfer_adapter` at creation time -- see `execution_count` above. */\n  adapter: string;\n  cancelled: boolean;\n}\n\nfunction scheduledIntentScVal(intent: ScheduledIntentArgs) {\n  return structScVal({\n    intent_id: bytesN32ScVal(intent.intent_id),\n    asset: addressScVal(intent.asset),\n    destination: addressScVal(intent.destination),\n    amount: i128ScVal(intent.amount),\n    start_ledger: u32ScVal(intent.start_ledger),\n    end_ledger: u32ScVal(intent.end_ledger),\n    interval_ledgers: u32ScVal(intent.interval_ledgers),\n    max_executions: u32ScVal(intent.max_executions),\n    execution_count: u32ScVal(intent.execution_count),\n    policy_version: u32ScVal(intent.policy_version),\n    adapter: addressScVal(intent.adapter),\n    cancelled: boolScVal(intent.cancelled),\n  });\n}\n\n/** `intent`'s caller-supplied `policy_version`/`adapter` are ignored and\n * overwritten by the contract (pinned to current values at approval time)\n * -- pass any placeholder value; read the resolved fields back from the\n * `IntentCreated` event or a follow-up `get_intent` read. */\nexport async function prepareScheduledPayment(\n  opts: PrepareOptions,\n  intent: ScheduledIntentArgs,\n): Promise<Transaction> {\n  const args = [scheduledIntentScVal(intent)];\n  return prepareSmartAccountCall(opts, \"create_scheduled_payment\", args);\n}\n\nexport async function prepareCancelScheduledPayment(\n  opts: PrepareOptions,\n  intentId: Buffer,\n): Promise<Transaction> {\n  const args = [bytesN32ScVal(intentId)];\n  return prepareSmartAccountCall(opts, \"cancel_scheduled_payment\", args);\n}\n\n/** Signs the transaction envelope with the fee-paying account's key\n * (independent of the `smart_account` auth entries, already attached by\n * `prepare*`) and submits it, polling until a terminal status. */\nexport async function signAndSubmit(\n  net: NetworkConfig,\n  tx: Transaction,\n  feeSourceKeypair: Keypair,\n): Promise<rpc.Api.GetSuccessfulTransactionResponse> {\n  const server = new rpc.Server(net.rpcUrl);\n  tx.sign(feeSourceKeypair);\n  const sendResponse = await server.sendTransaction(tx);\n  if (sendResponse.status === \"ERROR\") {\n    throw new Error(`sendTransaction failed: ${JSON.stringify(sendResponse.errorResult)}`);\n  }\n\n  let response = await server.getTransaction(sendResponse.hash);\n  for (\n    let attempt = 0;\n    response.status === rpc.Api.GetTransactionStatus.NOT_FOUND && attempt < MAX_POLL_ATTEMPTS;\n    attempt++\n  ) {\n    await new Promise((resolve) => setTimeout(resolve, POLL_INTERVAL_MS));\n    response = await server.getTransaction(sendResponse.hash);\n  }\n  if (response.status === rpc.Api.GetTransactionStatus.NOT_FOUND) {\n    throw new Error(\n      `transaction ${sendResponse.hash} not found after ${MAX_POLL_ATTEMPTS} polling attempts`,\n    );\n  }\n  if (response.status !== rpc.Api.GetTransactionStatus.SUCCESS) {\n    throw new Error(`transaction ${sendResponse.hash} failed: ${JSON.stringify(response)}`);\n  }\n  return response;\n}\n\nexport interface RelayerExecuteOptions {\n  net: NetworkConfig;\n  intentId: Buffer;\n  childSequence: number;\n  executorAddress: string;\n  sign: Keypair | SigningCallback;\n}\n\n/**\n * Prepares a relayer's `execute_scheduled_payment` call. Unlike the\n * signer-authored payment helpers above, this needs no `smart_account`\n * `AuthPayload` at all -- only an explicit authorization entry for\n * `intent_registry.mark_child_executed`'s `Executor` requirement (see\n * `buildExecutorAuthEntry`'s doc comment in `auth.ts`).\n */\nexport async function prepareRelayerExecution(opts: RelayerExecuteOptions): Promise<Transaction> {\n  const server = new rpc.Server(opts.net.rpcUrl);\n  const latestLedger = await server.getLatestLedger();\n  const signatureExpirationLedger = latestLedger.sequence + DEFAULT_EXPIRATION_WINDOW_LEDGERS;\n\n  const [executorEntry, sourceAccount] = await Promise.all([\n    buildExecutorAuthEntry({\n      intentRegistryId: opts.net.contracts.intentRegistry,\n      intentId: opts.intentId,\n      childSequence: opts.childSequence,\n      executorAddress: opts.executorAddress,\n      sign: opts.sign,\n      networkPassphrase: opts.net.networkPassphrase,\n      signatureExpirationLedger,\n    }),\n    server.getAccount(opts.executorAddress),\n  ]);\n\n  const args = [bytesN32ScVal(opts.intentId), u32ScVal(opts.childSequence)];\n  return buildAndPrepareTransaction(\n    server,\n    opts.net,\n    sourceAccount,\n    opts.net.contracts.smartAccount,\n    \"execute_scheduled_payment\",\n    args,\n    [executorEntry],\n  );\n}\n\nexport { Account };\n","/**\n * Typed event parsing. Depends only on `@stellar/stellar-sdk`'s\n * `xdr`/`scValToNative` -- no generated per-contract bindings involved.\n * Keep in sync by hand if the source contracts' `#[contractevent]`\n * definitions change — there is no automated link between this package\n * and the contracts repo.\n *\n * The Stellar CLI's generated bindings expose function signatures, errors,\n * and structs from a contract's spec, but not its `#[contractevent]`\n * definitions — those are hand-typed here, against the actual struct\n * definitions in each contract's `src/lib.rs`, and are exposed as\n * first-class types rather than raw event XDR.\n *\n * Every `#[contractevent]` struct is encoded on-chain as: topics[0] = the\n * event's short topic symbol (see the smart-contracts repo's\n * docs/DAPP_INTEGRATION_SPEC.md §10.4), followed by any further\n * `#[topic]`-tagged fields, then a data map of the remaining fields keyed\n * by their Rust field name.\n */\nimport { scValToNative, xdr } from \"@stellar/stellar-sdk\";\n\nexport interface TransferPaid {\n  asset: string;\n  destination: string;\n  amount: bigint;\n  nonce: bigint;\n}\n\nexport interface SplitPaid {\n  asset: string;\n  recipient_count: number;\n  nonce: bigint;\n}\n\nexport interface ScheduledPaymentExecuted {\n  intent_id: Buffer;\n  child_sequence: number;\n  asset: string;\n  destination: string;\n  amount: bigint;\n}\n\nexport interface PolicyValidated {\n  operation: string;\n  asset: string;\n  destination: string;\n  amount: bigint;\n  expected_version: number;\n}\n\nexport interface IntentCreated {\n  intent_id: Buffer;\n}\n\nexport interface IntentCancelled {\n  intent_id: Buffer;\n}\n\nexport interface ChildExecuted {\n  intent_id: Buffer;\n  child_sequence: number;\n}\n\nexport interface RecoveryOpened {\n  request_id: Buffer;\n}\n\nexport interface RecoveryApproved {\n  request_id: Buffer;\n  guardian: string;\n}\n\nexport interface RecoveryFinalized {\n  request_id: Buffer;\n  replacement_owner: string;\n}\n\nexport interface RecoveryApplied {\n  request_id: Buffer;\n  replacement_owner: string;\n}\n\nexport interface GuardianFreezeRequested {\n  guardian: string;\n}\n\nexport interface Frozen {\n  triggered_by_guardian: boolean;\n}\n\n/** Every event type this module knows how to decode, keyed by its on-chain\n * topic symbol. Add new entries here as new contract events are curated. */\nexport interface EventMap {\n  pay_ok: TransferPaid;\n  splt_ok: SplitPaid;\n  auto_ok: ScheduledPaymentExecuted;\n  pol_ok: PolicyValidated;\n  intent: IntentCreated;\n  cancel: IntentCancelled;\n  exec: ChildExecuted;\n  open: RecoveryOpened;\n  appr: RecoveryApproved;\n  final: RecoveryFinalized;\n  recover: RecoveryApplied;\n  gfreeze: GuardianFreezeRequested;\n  frozen: Frozen;\n}\n\nexport type ParsedEvent =\n  | { [K in keyof EventMap]: { topic: K; event: EventMap[K] } }[keyof EventMap]\n  | { topic: string; event: Record<string, unknown> };\n\nfunction topicSymbol(event: xdr.ContractEvent): string | undefined {\n  const body = event.body().v0();\n  const first = body.topics()[0];\n  return first?.switch().name === \"scvSymbol\" ? first.sym().toString() : undefined;\n}\n\n/** `#[contractevent]`'s `#[topic]`-tagged fields, beyond the topic symbol\n * itself, in declaration order -- these live in `topics[1..]`, not the\n * data map, and (unlike the data map) carry no field names on-chain, so\n * this ordering must match each event struct's actual field order in its\n * `src/lib.rs`. Topic symbols are not globally unique across contracts\n * (e.g. `intent_registry`'s `IntentCancelled` and `recovery_manager`'s\n * `RecoveryCancelled` both use `\"cancel\"`) -- this map only covers the\n * events in `EventMap`; a topic outside it decodes as the untyped\n * catch-all below regardless of which contract emitted it. */\nconst TOPIC_FIELDS: Record<keyof EventMap, string[]> = {\n  pay_ok: [\"asset\", \"destination\"],\n  splt_ok: [\"asset\"],\n  auto_ok: [\"intent_id\"],\n  pol_ok: [\"operation\"],\n  intent: [\"intent_id\"],\n  cancel: [\"intent_id\"],\n  exec: [\"intent_id\"],\n  open: [\"request_id\"],\n  appr: [\"request_id\", \"guardian\"],\n  final: [\"request_id\"],\n  recover: [\"request_id\"],\n  gfreeze: [\"guardian\"],\n  frozen: [],\n};\n\nfunction decodeFields(event: xdr.ContractEvent): Record<string, unknown> {\n  const body = event.body().v0();\n  const topics = body.topics();\n  const topic = topicSymbol(event);\n  const topicFieldNames = topic && topic in TOPIC_FIELDS ? TOPIC_FIELDS[topic as keyof EventMap] : [];\n\n  const fromTopics: Record<string, unknown> = {};\n  topicFieldNames.forEach((name, i) => {\n    fromTopics[name] = scValToNative(topics[i + 1]);\n  });\n\n  const native = scValToNative(body.data());\n  const fromData = native && typeof native === \"object\" ? (native as Record<string, unknown>) : {};\n\n  return { ...fromTopics, ...fromData };\n}\n\n/** Parses one `xdr.ContractEvent` into its typed shape, matched by topic,\n * merging `#[topic]`-tagged fields (from `topics[1..]`) with the data map\n * -- both are needed to reconstruct the full `#[contractevent]` struct.\n * Unknown topics still parse -- as `{ topic, event: <raw decoded map> }`\n * -- rather than throwing, so a caller can log/inspect an event this\n * module doesn't have a named type for yet. */\nexport function parseContractEvent(event: xdr.ContractEvent): ParsedEvent {\n  const topic = topicSymbol(event);\n  const fields = decodeFields(event);\n  return { topic: topic ?? \"\", event: fields } as ParsedEvent;\n}\n\n/** Parses every event from a `getTransaction` response's\n * `events.contractEventsXdr` (one array of events per operation -- this\n * dApp's transactions always have exactly one operation, so pass\n * `contractEventsXdr[0]`). */\nexport function parseContractEvents(events: xdr.ContractEvent[]): ParsedEvent[] {\n  return events.map(parseContractEvent);\n}\n\nexport function findEvent<T extends keyof EventMap>(\n  events: ParsedEvent[],\n  topic: T,\n): EventMap[T] | undefined {\n  const found = events.find((e) => e.topic === topic);\n  return found?.event as EventMap[T] | undefined;\n}\n","/**\n * First-class typed reads for policy-version, replay-state (nonce), and\n * recovery-state. Every function here is a read-only simulation (no\n * signature, no submission), built directly on\n * `rpc.Server.simulateTransaction` rather than a generated per-contract\n * `Client` -- see `auth.ts`'s module doc comment for why this SDK avoids\n * depending on generated bindings directly. One consequence: every\n * function here takes an explicit `sourceAddress` (a real, funded account\n * to build the simulation transaction from -- `getAccount` fails for one\n * that doesn't exist on-chain).\n *\n * Every type below (`AccountStatus`, `ContextRule`, `ScheduledIntent`,\n * `RecoveryRequest`, `WasmHashes`) is verified directly against the real\n * `#[contracttype]` struct definitions in the source contracts (and the\n * `stellar-accounts` OZ crate for `ContextRule`), not reconstructed from\n * observed JSON shapes.\n */\nimport { Contract, TransactionBuilder, BASE_FEE, rpc, scValToNative, nativeToScVal, xdr } from \"@stellar/stellar-sdk\";\n\nimport type { NetworkConfig } from \"./config\";\n\nexport interface AccountStatus {\n  initialized: boolean;\n  paused: boolean;\n  frozen: boolean;\n  policy_version_hint: number;\n}\n\n/** From the vendored `stellar-accounts` OZ crate\n * (`smart_account::storage::ContextRule`), not this workspace's own\n * contracts -- `get_context_rule`'s actual return type. */\nexport interface ContextRule {\n  id: number;\n  context_type: string;\n  name: string;\n  signers: unknown[];\n  signer_ids: number[];\n  policies: string[];\n  policy_ids: number[];\n  valid_until?: number;\n}\n\nexport interface ScheduledIntent {\n  intent_id: Buffer;\n  asset: string;\n  destination: string;\n  amount: bigint;\n  start_ledger: number;\n  end_ledger: number;\n  interval_ledgers: number;\n  max_executions: number;\n  execution_count: number;\n  policy_version: number;\n  adapter: string;\n  cancelled: boolean;\n}\n\nexport interface RecoveryRequest {\n  request_id: Buffer;\n  replacement_owner: string;\n  replacement_signers: unknown[];\n  replacement_policies: Record<string, unknown>;\n  earliest_ledger: number;\n  approvers: string[];\n  cancelled: boolean;\n  finalized: boolean;\n}\n\nexport interface WasmHashes {\n  policy_engine: Buffer;\n  intent_registry: Buffer;\n  recovery_manager: Buffer;\n  transfer_adapter: Buffer;\n  split_adapter: Buffer;\n  smart_account: Buffer;\n}\n\nfunction isSimulationError(\n  simulation: rpc.Api.SimulateTransactionResponse,\n): simulation is rpc.Api.SimulateTransactionErrorResponse {\n  return \"error\" in simulation;\n}\n\nasync function simulateRead(\n  net: NetworkConfig,\n  sourceAddress: string,\n  contractId: string,\n  method: string,\n  args: xdr.ScVal[] = [],\n): Promise<unknown> {\n  const server = new rpc.Server(net.rpcUrl);\n  const source = await server.getAccount(sourceAddress);\n  const tx = new TransactionBuilder(source, { fee: BASE_FEE, networkPassphrase: net.networkPassphrase })\n    .addOperation(new Contract(contractId).call(method, ...args))\n    .setTimeout(60)\n    .build();\n\n  const simulation = await server.simulateTransaction(tx);\n  if (isSimulationError(simulation)) {\n    throw new Error(simulation.error);\n  }\n  return simulation.result?.retval ? scValToNative(simulation.result.retval) : null;\n}\n\nfunction u32ScVal(value: number) {\n  return nativeToScVal(value, { type: \"u32\" });\n}\n\nfunction u64ScVal(value: bigint) {\n  return nativeToScVal(value, { type: \"u64\" });\n}\n\nfunction bytesN32ScVal(value: Buffer) {\n  if (value.length !== 32) {\n    throw new Error(\"Expected exactly 32 bytes.\");\n  }\n  return xdr.ScVal.scvBytes(value);\n}\n\nfunction addressScVal(value: string) {\n  return nativeToScVal(value, { type: \"address\" });\n}\n\n/** `smart_account.status()` -- check before offering any payment action; a\n * paused or frozen treasury should disable the payment UI, not let the\n * user hit a rejected simulation. */\nexport async function readAccountStatus(\n  net: NetworkConfig,\n  sourceAddress: string,\n): Promise<AccountStatus> {\n  return (await simulateRead(net, sourceAddress, net.contracts.smartAccount, \"status\")) as AccountStatus;\n}\n\nexport async function readOwner(net: NetworkConfig, sourceAddress: string): Promise<string | null> {\n  const result = await simulateRead(net, sourceAddress, net.contracts.smartAccount, \"get_owner\");\n  return typeof result === \"string\" ? result : null;\n}\n\n/** Rule IDs are `0..count`, not necessarily contiguous after removals --\n * check existence with `readContextRule`, don't assume. */\nexport async function readContextRulesCount(net: NetworkConfig, sourceAddress: string): Promise<number> {\n  const result = await simulateRead(net, sourceAddress, net.contracts.smartAccount, \"get_context_rules_count\");\n  return Number(result ?? 0);\n}\n\nexport async function readContextRule(\n  net: NetworkConfig,\n  sourceAddress: string,\n  contextRuleId: number,\n): Promise<ContextRule> {\n  return (await simulateRead(net, sourceAddress, net.contracts.smartAccount, \"get_context_rule\", [\n    u32ScVal(contextRuleId),\n  ])) as ContextRule;\n}\n\nexport async function isNonceUsed(net: NetworkConfig, sourceAddress: string, nonce: bigint): Promise<boolean> {\n  const result = await simulateRead(net, sourceAddress, net.contracts.smartAccount, \"is_nonce_used\", [\n    u64ScVal(nonce),\n  ]);\n  return Boolean(result);\n}\n\n/** The authoritative current policy version -- read fresh immediately\n * before building a payment, never cached across a user session (a stale\n * value here causes a clean `VersionMismatch` rejection rather than\n * executing under outdated rules). */\nexport async function readPolicyVersion(net: NetworkConfig, sourceAddress: string): Promise<number> {\n  const result = await simulateRead(net, sourceAddress, net.contracts.policyEngine, \"version\");\n  return Number(result ?? 1);\n}\n\nexport async function readScheduledIntent(\n  net: NetworkConfig,\n  sourceAddress: string,\n  intentId: Buffer,\n): Promise<ScheduledIntent> {\n  return (await simulateRead(net, sourceAddress, net.contracts.intentRegistry, \"get_intent\", [\n    bytesN32ScVal(intentId),\n  ])) as ScheduledIntent;\n}\n\nexport async function isChildExecuted(\n  net: NetworkConfig,\n  sourceAddress: string,\n  intentId: Buffer,\n  childSequence: number,\n): Promise<boolean> {\n  const result = await simulateRead(net, sourceAddress, net.contracts.intentRegistry, \"is_child_executed\", [\n    bytesN32ScVal(intentId),\n    u32ScVal(childSequence),\n  ]);\n  return Boolean(result);\n}\n\n/** Recovery-request state -- first-class typed state, not a raw XDR blob. */\nexport async function readRecoveryRequest(\n  net: NetworkConfig,\n  sourceAddress: string,\n  requestId: Buffer,\n): Promise<RecoveryRequest> {\n  return (await simulateRead(net, sourceAddress, net.contracts.recoveryManager, \"request_status\", [\n    bytesN32ScVal(requestId),\n  ])) as RecoveryRequest;\n}\n\nexport async function readLiveApprovalCount(\n  net: NetworkConfig,\n  sourceAddress: string,\n  requestId: Buffer,\n): Promise<number> {\n  const result = await simulateRead(net, sourceAddress, net.contracts.recoveryManager, \"live_approval_count\", [\n    bytesN32ScVal(requestId),\n  ]);\n  return Number(result ?? 0);\n}\n\nexport async function isGuardian(\n  net: NetworkConfig,\n  sourceAddress: string,\n  guardian: string,\n): Promise<boolean> {\n  const result = await simulateRead(net, sourceAddress, net.contracts.recoveryManager, \"is_guardian\", [\n    addressScVal(guardian),\n  ]);\n  return Boolean(result);\n}\n\n/** Monotonically increasing, never-cleared -- compare against a locally\n * stored \"last applied\" value to detect a pending guardian freeze rather\n * than treating this as a boolean. */\nexport async function readGuardianFreezeEpoch(net: NetworkConfig, sourceAddress: string): Promise<number> {\n  const result = await simulateRead(net, sourceAddress, net.contracts.recoveryManager, \"guardian_freeze_epoch\");\n  return Number(result ?? 0);\n}\n\nexport async function readFactoryWasmHashes(net: NetworkConfig, sourceAddress: string): Promise<WasmHashes> {\n  return (await simulateRead(\n    net,\n    sourceAddress,\n    net.contracts.accountFactory,\n    \"get_wasm_hashes\",\n  )) as WasmHashes;\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,484 @@
+import { Keypair, SigningCallback, xdr, Transaction, rpc } from '@stellar/stellar-sdk';
+export { Account } from '@stellar/stellar-sdk';
+
+/**
+ * Network configuration for `sta-sdk`.
+ *
+ * `testnet` is populated with the live, currently-deployed contract set --
+ * the `smart_account` address is the account_factory-deployed treasury from
+ * the smart-contracts repo's docs/TESTNET_FACTORY_DEPLOYMENT.md §13.2,
+ * which runs the fixed contract code (see docs/SECURITY_REVIEW_STRICT.md
+ * finding 29). The older hand-deployed treasury from docs/TESTNET_DEPLOYMENT.md
+ * predates that fix and is not the default here.
+ *
+ * `MAINNET` stays `undefined` until `buildMainnetConfig` is actually called
+ * with real, deployed contract addresses -- no mainnet deployment exists
+ * yet, and nothing here fabricates one. What *is* ready now is the rest of
+ * the mainnet shape: the real, verified mainnet network passphrase
+ * (`MAINNET_NETWORK_PASSPHRASE`, a fixed protocol constant, unlike an RPC
+ * URL) and `buildMainnetConfig` itself, so wiring in a real mainnet
+ * deployment later is "call this function with the six addresses," not a
+ * code change.
+ */
+interface ContractAddresses {
+    smartAccount: string;
+    policyEngine: string;
+    intentRegistry: string;
+    recoveryManager: string;
+    accountFactory: string;
+    /** Never called directly by a client (see docs/DAPP_INTEGRATION_SPEC.md
+     * §1) -- recorded for reference and for building auth-entry
+     * sub-invocations by hand. */
+    transferAdapter: string;
+    splitAdapter: string;
+}
+interface NetworkConfig {
+    network: "testnet" | "mainnet";
+    rpcUrl: string;
+    networkPassphrase: string;
+    contracts: ContractAddresses;
+}
+declare const TESTNET: NetworkConfig;
+/**
+ * Stellar's mainnet (Public Network) passphrase -- a fixed protocol
+ * constant defined by the network itself (verified against
+ * https://developers.stellar.org/docs/encyclopedia/network-passphrases),
+ * not something that depends on which contracts (if any) are deployed.
+ * Safe to hardcode, unlike a mainnet RPC URL (see `buildMainnetConfig`).
+ */
+declare const MAINNET_NETWORK_PASSPHRASE = "Public Global Stellar Network ; September 2015";
+/**
+ * Unlike testnet (SDF hosts `https://soroban-testnet.stellar.org` for
+ * free), SDF does **not** operate a free public mainnet Soroban RPC
+ * endpoint -- confirmed against
+ * https://developers.stellar.org/docs/data/apis/rpc/providers, which
+ * lists only third-party ecosystem providers (QuickNode, Ankr, Tatum,
+ * Blockdaemon, etc.) for mainnet. There is no single correct default to
+ * hardcode here, so `buildMainnetConfig` reads this env var instead of
+ * assuming a provider on your behalf -- set it to whichever provider's
+ * URL you've chosen, or pass `rpcUrl` to that function directly.
+ */
+declare const MAINNET_RPC_URL_ENV = "STA_MAINNET_RPC_URL";
+/**
+ * Builds a mainnet `NetworkConfig` once the contracts are actually deployed
+ * there. No mainnet deployment exists yet -- this function exists so this
+ * module is ready to receive real mainnet addresses the moment a
+ * deployment happens, not to fabricate one now.
+ *
+ * A `NetworkConfig` with `network: "mainnet"` and real signing keys
+ * submits real, fee-paying, fund-moving transactions against Stellar's
+ * production ledger -- don't build one just to "try it out" with testnet
+ * addresses.
+ *
+ * @param contracts The six real contract addresses from an actual mainnet
+ *   deployment record (mirroring how `TESTNET.contracts` above is sourced
+ *   from the smart-contracts repo's docs/TESTNET_FACTORY_DEPLOYMENT.md).
+ * @param rpcUrl Your chosen mainnet RPC provider's URL. Defaults to
+ *   `process.env[MAINNET_RPC_URL_ENV]`; throws if neither is supplied,
+ *   rather than silently falling back to some hardcoded provider.
+ */
+declare function buildMainnetConfig(contracts: ContractAddresses, rpcUrl?: string): NetworkConfig;
+/** `undefined` until `buildMainnetConfig` is actually called with real,
+ * deployed contract addresses -- see this module's doc comment and that
+ * function's. No mainnet deployment exists yet. */
+declare const MAINNET: NetworkConfig | undefined;
+declare const NETWORKS: {
+    readonly testnet: NetworkConfig;
+    readonly mainnet: undefined;
+};
+
+/**
+ * `smart_account`'s custom-account authorization: "Entry A" / "Entry B"
+ * construction ("sta-sdk").
+ *
+ * Deliberately does not depend on the Stellar CLI's generated per-contract
+ * bindings (`stellar contract bindings typescript`) for this encoding:
+ * those bindings pin to a specific `@stellar/stellar-sdk` major, and
+ * loading a second major of the same classes (`Address`, `xdr.ScVal`, ...)
+ * in a consumer's bundle risks `instanceof` mismatches between them. This
+ * module hand-encodes the `AuthPayload` struct shape directly instead
+ * (`smartAccountAuthPayloadScVal` below), verified against the real
+ * `#[contracttype]` definition (`{ signers: Map<Signer, Bytes>,
+ * context_rule_ids: Vec<u32> }`) rather than derived from a generated
+ * client's `Spec`.
+ *
+ * `smart_account` implements Soroban's `CustomAccountInterface`
+ * (`__check_auth`), composed from OpenZeppelin's `stellar-accounts` crate.
+ * Any call that does `env.current_contract_address().require_auth()` --
+ * every fund-moving or schedule-creating entrypoint -- needs the
+ * transaction to carry a `SorobanAuthorizationEntry` whose
+ * `credentials.signature` is not a signature at all, but a
+ * contract-defined `AuthPayload` struct.
+ *
+ * Two entries are required per required `Signer::Delegated` signer:
+ *
+ * - **Entry A** (once, for `smart_account` itself): the `AuthPayload`
+ *   structure -- no wallet interaction, assembled directly from the
+ *   caller-supplied context rule id(s).
+ * - **Entry B** (one per required signer): a standard classic-account
+ *   authorization entry for the nested
+ *   `addr.require_auth_for_args((auth_digest,))` call -- this is what a
+ *   wallet (or a raw `Keypair`, server-side) actually signs, via
+ *   `@stellar/stellar-sdk`'s own `authorizeEntry`.
+ */
+
+interface SubInvocationSpec {
+    contractId: string;
+    functionName: string;
+    args: xdr.ScVal[];
+    subInvocations?: xdr.SorobanAuthorizedInvocation[];
+}
+declare function buildInvocation(spec: SubInvocationSpec): xdr.SorobanAuthorizedInvocation;
+/** The standard Soroban authorization-entry signature payload: the hash of
+ * the `HashIdPreimage::SorobanAuthorization` preimage over a given
+ * invocation, nonce, and expiration ledger. Every `Address` credential
+ * (custom-account or classic) signs a value derived from this. */
+declare function signaturePayload(invocation: xdr.SorobanAuthorizedInvocation, nonce: bigint, signatureExpirationLedger: number, networkPassphrase: string): Buffer;
+interface BuildSmartAccountAuthOptions {
+    smartAccountId: string;
+    /** The actual `smart_account` call being authorized (its root
+     * invocation) -- e.g. `execute_transfer_payment(...)`. Declare any
+     * further sub-invocations that must be pre-cleared by this SAME entry
+     * as its `subInvocations`. */
+    rootInvocation: xdr.SorobanAuthorizedInvocation;
+    /** G-address of the `Signer::Delegated` wallet authorizing this call. */
+    signerAddress: string;
+    /** Signs Entry B's classic authorization entry -- a raw `Keypair` for
+     * server-side use, or a `SigningCallback` forwarding to a connected
+     * wallet's `signAuthEntry`. */
+    sign: Keypair | SigningCallback;
+    networkPassphrase: string;
+    /** Context rule id(s) the signer is registered under, one per auth
+     * context reaching `__check_auth` (root + any declared
+     * sub-invocation). Default: `[0]` (the founding rule), applied to every
+     * context. */
+    contextRuleIds?: number[];
+    signatureExpirationLedger: number;
+}
+/**
+ * Builds Entry A + Entry B for a single required `Signer::Delegated`.
+ *
+ * KNOWN ISSUE: for a multi-signer context rule (threshold > 1), calling
+ * this once per signer and attaching each pair produces N separate
+ * Entry As, each with a single-key `signers` map. That does not match
+ * `DAPP_INTEGRATION_SPEC.md` §5.4, which specifies one shared Entry A
+ * carrying all N signers' keys plus N Entry Bs (one per signer) collected
+ * against that same Entry A over time. Multi-signer callers should not
+ * rely on this function as-is until that's reconciled -- track before
+ * shipping real M-of-N threshold support.
+ */
+declare function buildSmartAccountAuthEntries(opts: BuildSmartAccountAuthOptions): Promise<[xdr.SorobanAuthorizationEntry, xdr.SorobanAuthorizationEntry]>;
+interface BuildExecutorAuthOptions {
+    intentRegistryId: string;
+    intentId: Buffer;
+    childSequence: number;
+    executorAddress: string;
+    sign: Keypair | SigningCallback;
+    networkPassphrase: string;
+    signatureExpirationLedger: number;
+}
+/**
+ * Authorizes `intent_registry.mark_child_executed`, the *only* real
+ * authorization check in `execute_scheduled_payment`'s whole call graph.
+ *
+ * `SourceAccount`/auto-fill credentials only cover a `require_auth()` at
+ * the ROOT of the invocation tree; `mark_child_executed`'s
+ * `executor.require_auth()` is two levels deep (`execute_scheduled_payment
+ * -> intent_registry.mark_child_executed -> ensure_executor`), so it needs
+ * an explicit entry, built and signed the same way as any other non-root
+ * classic-account authorization -- this is *not* custom-account machinery
+ * (the executor is a plain account), so no `AuthPayload`/Entry-A-Entry-B
+ * pairing is involved, just one ordinary signed entry rooted directly at
+ * `mark_child_executed`. Verified against live testnet (see the
+ * smart-contracts repo's docs/TESTNET_FACTORY_DEPLOYMENT.md §8 and
+ * docs/DAPP_INTEGRATION_SPEC.md §8), and independently against this same
+ * failure mode in this dApp's own `src/lib/relayer/executor.ts`.
+ */
+declare function buildExecutorAuthEntry(opts: BuildExecutorAuthOptions): Promise<xdr.SorobanAuthorizationEntry>;
+
+/**
+ * Transaction-preparation helpers: prepare -> simulate -> approve. Each
+ * function returns a prepared, auth-entry-attached `Transaction` --
+ * simulated (fee/resource estimation) with the custom `smart_account`
+ * `AuthPayload` entries already present, ready for the caller to sign the
+ * envelope with a fee-paying account and submit (see `signAndSubmit`
+ * below). None of these functions touch a wallet directly -- signing is
+ * always an injected `Keypair | SigningCallback` (see `auth.ts`), so a
+ * browser dApp can swap in a connected wallet's `signAuthEntry` without
+ * changing anything here.
+ *
+ * Call args are hand-encoded (`transferArgs`, `splitArgs`,
+ * `scheduledIntentScVal`, below) against the contracts' real signatures,
+ * rather than through a generated-bindings client's
+ * `.spec.funcArgsToScVals(...)` -- see `auth.ts`'s module doc comment for
+ * why this SDK avoids depending on those generated bindings directly.
+ */
+
+interface PrepareOptions {
+    net: NetworkConfig;
+    /** Any funded account that pays the network fee -- independent of who
+     * authorizes the `smart_account` call. Only its public key is needed to
+     * build the transaction. */
+    feeSourceAddress: string;
+    signerAddress: string;
+    sign: Keypair | SigningCallback;
+    contextRuleIds?: number[];
+}
+interface TransferPaymentArgs {
+    asset: string;
+    destination: string;
+    amount: bigint;
+    nonce: bigint;
+    expectedPolicyVersion: number;
+}
+declare function prepareTransferPayment(opts: PrepareOptions, payment: TransferPaymentArgs): Promise<Transaction>;
+interface SplitPaymentArgs {
+    asset: string;
+    recipients: string[];
+    amounts: bigint[];
+    nonce: bigint;
+    expectedPolicyVersion: number;
+}
+declare function prepareSplitPayment(opts: PrepareOptions, payment: SplitPaymentArgs): Promise<Transaction>;
+interface ScheduledIntentArgs {
+    intent_id: Buffer;
+    asset: string;
+    destination: string;
+    amount: bigint;
+    start_ledger: number;
+    end_ledger: number;
+    interval_ledgers: number;
+    max_executions: number;
+    /** Ignored/overwritten server-side, pinned to `0` at creation -- pass any
+     * placeholder value; read the resolved field back from the
+     * `IntentCreated` event or a follow-up `get_intent` read. */
+    execution_count: number;
+    /** Ignored/overwritten server-side, pinned to `policy_engine.version()`
+     * at creation time -- see `execution_count` above. */
+    policy_version: number;
+    /** Ignored/overwritten server-side, pinned to the currently configured
+     * `transfer_adapter` at creation time -- see `execution_count` above. */
+    adapter: string;
+    cancelled: boolean;
+}
+/** `intent`'s caller-supplied `policy_version`/`adapter` are ignored and
+ * overwritten by the contract (pinned to current values at approval time)
+ * -- pass any placeholder value; read the resolved fields back from the
+ * `IntentCreated` event or a follow-up `get_intent` read. */
+declare function prepareScheduledPayment(opts: PrepareOptions, intent: ScheduledIntentArgs): Promise<Transaction>;
+declare function prepareCancelScheduledPayment(opts: PrepareOptions, intentId: Buffer): Promise<Transaction>;
+/** Signs the transaction envelope with the fee-paying account's key
+ * (independent of the `smart_account` auth entries, already attached by
+ * `prepare*`) and submits it, polling until a terminal status. */
+declare function signAndSubmit(net: NetworkConfig, tx: Transaction, feeSourceKeypair: Keypair): Promise<rpc.Api.GetSuccessfulTransactionResponse>;
+interface RelayerExecuteOptions {
+    net: NetworkConfig;
+    intentId: Buffer;
+    childSequence: number;
+    executorAddress: string;
+    sign: Keypair | SigningCallback;
+}
+/**
+ * Prepares a relayer's `execute_scheduled_payment` call. Unlike the
+ * signer-authored payment helpers above, this needs no `smart_account`
+ * `AuthPayload` at all -- only an explicit authorization entry for
+ * `intent_registry.mark_child_executed`'s `Executor` requirement (see
+ * `buildExecutorAuthEntry`'s doc comment in `auth.ts`).
+ */
+declare function prepareRelayerExecution(opts: RelayerExecuteOptions): Promise<Transaction>;
+
+/**
+ * Typed event parsing. Depends only on `@stellar/stellar-sdk`'s
+ * `xdr`/`scValToNative` -- no generated per-contract bindings involved.
+ * Keep in sync by hand if the source contracts' `#[contractevent]`
+ * definitions change — there is no automated link between this package
+ * and the contracts repo.
+ *
+ * The Stellar CLI's generated bindings expose function signatures, errors,
+ * and structs from a contract's spec, but not its `#[contractevent]`
+ * definitions — those are hand-typed here, against the actual struct
+ * definitions in each contract's `src/lib.rs`, and are exposed as
+ * first-class types rather than raw event XDR.
+ *
+ * Every `#[contractevent]` struct is encoded on-chain as: topics[0] = the
+ * event's short topic symbol (see the smart-contracts repo's
+ * docs/DAPP_INTEGRATION_SPEC.md §10.4), followed by any further
+ * `#[topic]`-tagged fields, then a data map of the remaining fields keyed
+ * by their Rust field name.
+ */
+
+interface TransferPaid {
+    asset: string;
+    destination: string;
+    amount: bigint;
+    nonce: bigint;
+}
+interface SplitPaid {
+    asset: string;
+    recipient_count: number;
+    nonce: bigint;
+}
+interface ScheduledPaymentExecuted {
+    intent_id: Buffer;
+    child_sequence: number;
+    asset: string;
+    destination: string;
+    amount: bigint;
+}
+interface PolicyValidated {
+    operation: string;
+    asset: string;
+    destination: string;
+    amount: bigint;
+    expected_version: number;
+}
+interface IntentCreated {
+    intent_id: Buffer;
+}
+interface IntentCancelled {
+    intent_id: Buffer;
+}
+interface ChildExecuted {
+    intent_id: Buffer;
+    child_sequence: number;
+}
+interface RecoveryOpened {
+    request_id: Buffer;
+}
+interface RecoveryApproved {
+    request_id: Buffer;
+    guardian: string;
+}
+interface RecoveryFinalized {
+    request_id: Buffer;
+    replacement_owner: string;
+}
+interface RecoveryApplied {
+    request_id: Buffer;
+    replacement_owner: string;
+}
+interface GuardianFreezeRequested {
+    guardian: string;
+}
+interface Frozen {
+    triggered_by_guardian: boolean;
+}
+/** Every event type this module knows how to decode, keyed by its on-chain
+ * topic symbol. Add new entries here as new contract events are curated. */
+interface EventMap {
+    pay_ok: TransferPaid;
+    splt_ok: SplitPaid;
+    auto_ok: ScheduledPaymentExecuted;
+    pol_ok: PolicyValidated;
+    intent: IntentCreated;
+    cancel: IntentCancelled;
+    exec: ChildExecuted;
+    open: RecoveryOpened;
+    appr: RecoveryApproved;
+    final: RecoveryFinalized;
+    recover: RecoveryApplied;
+    gfreeze: GuardianFreezeRequested;
+    frozen: Frozen;
+}
+type ParsedEvent = {
+    [K in keyof EventMap]: {
+        topic: K;
+        event: EventMap[K];
+    };
+}[keyof EventMap] | {
+    topic: string;
+    event: Record<string, unknown>;
+};
+/** Parses one `xdr.ContractEvent` into its typed shape, matched by topic,
+ * merging `#[topic]`-tagged fields (from `topics[1..]`) with the data map
+ * -- both are needed to reconstruct the full `#[contractevent]` struct.
+ * Unknown topics still parse -- as `{ topic, event: <raw decoded map> }`
+ * -- rather than throwing, so a caller can log/inspect an event this
+ * module doesn't have a named type for yet. */
+declare function parseContractEvent(event: xdr.ContractEvent): ParsedEvent;
+/** Parses every event from a `getTransaction` response's
+ * `events.contractEventsXdr` (one array of events per operation -- this
+ * dApp's transactions always have exactly one operation, so pass
+ * `contractEventsXdr[0]`). */
+declare function parseContractEvents(events: xdr.ContractEvent[]): ParsedEvent[];
+declare function findEvent<T extends keyof EventMap>(events: ParsedEvent[], topic: T): EventMap[T] | undefined;
+
+interface AccountStatus {
+    initialized: boolean;
+    paused: boolean;
+    frozen: boolean;
+    policy_version_hint: number;
+}
+/** From the vendored `stellar-accounts` OZ crate
+ * (`smart_account::storage::ContextRule`), not this workspace's own
+ * contracts -- `get_context_rule`'s actual return type. */
+interface ContextRule {
+    id: number;
+    context_type: string;
+    name: string;
+    signers: unknown[];
+    signer_ids: number[];
+    policies: string[];
+    policy_ids: number[];
+    valid_until?: number;
+}
+interface ScheduledIntent {
+    intent_id: Buffer;
+    asset: string;
+    destination: string;
+    amount: bigint;
+    start_ledger: number;
+    end_ledger: number;
+    interval_ledgers: number;
+    max_executions: number;
+    execution_count: number;
+    policy_version: number;
+    adapter: string;
+    cancelled: boolean;
+}
+interface RecoveryRequest {
+    request_id: Buffer;
+    replacement_owner: string;
+    replacement_signers: unknown[];
+    replacement_policies: Record<string, unknown>;
+    earliest_ledger: number;
+    approvers: string[];
+    cancelled: boolean;
+    finalized: boolean;
+}
+interface WasmHashes {
+    policy_engine: Buffer;
+    intent_registry: Buffer;
+    recovery_manager: Buffer;
+    transfer_adapter: Buffer;
+    split_adapter: Buffer;
+    smart_account: Buffer;
+}
+/** `smart_account.status()` -- check before offering any payment action; a
+ * paused or frozen treasury should disable the payment UI, not let the
+ * user hit a rejected simulation. */
+declare function readAccountStatus(net: NetworkConfig, sourceAddress: string): Promise<AccountStatus>;
+declare function readOwner(net: NetworkConfig, sourceAddress: string): Promise<string | null>;
+/** Rule IDs are `0..count`, not necessarily contiguous after removals --
+ * check existence with `readContextRule`, don't assume. */
+declare function readContextRulesCount(net: NetworkConfig, sourceAddress: string): Promise<number>;
+declare function readContextRule(net: NetworkConfig, sourceAddress: string, contextRuleId: number): Promise<ContextRule>;
+declare function isNonceUsed(net: NetworkConfig, sourceAddress: string, nonce: bigint): Promise<boolean>;
+/** The authoritative current policy version -- read fresh immediately
+ * before building a payment, never cached across a user session (a stale
+ * value here causes a clean `VersionMismatch` rejection rather than
+ * executing under outdated rules). */
+declare function readPolicyVersion(net: NetworkConfig, sourceAddress: string): Promise<number>;
+declare function readScheduledIntent(net: NetworkConfig, sourceAddress: string, intentId: Buffer): Promise<ScheduledIntent>;
+declare function isChildExecuted(net: NetworkConfig, sourceAddress: string, intentId: Buffer, childSequence: number): Promise<boolean>;
+/** Recovery-request state -- first-class typed state, not a raw XDR blob. */
+declare function readRecoveryRequest(net: NetworkConfig, sourceAddress: string, requestId: Buffer): Promise<RecoveryRequest>;
+declare function readLiveApprovalCount(net: NetworkConfig, sourceAddress: string, requestId: Buffer): Promise<number>;
+declare function isGuardian(net: NetworkConfig, sourceAddress: string, guardian: string): Promise<boolean>;
+/** Monotonically increasing, never-cleared -- compare against a locally
+ * stored "last applied" value to detect a pending guardian freeze rather
+ * than treating this as a boolean. */
+declare function readGuardianFreezeEpoch(net: NetworkConfig, sourceAddress: string): Promise<number>;
+declare function readFactoryWasmHashes(net: NetworkConfig, sourceAddress: string): Promise<WasmHashes>;
+
+export { type AccountStatus, type BuildExecutorAuthOptions, type BuildSmartAccountAuthOptions, type ChildExecuted, type ContextRule, type ContractAddresses, type EventMap, type Frozen, type GuardianFreezeRequested, type IntentCancelled, type IntentCreated, MAINNET, MAINNET_NETWORK_PASSPHRASE, MAINNET_RPC_URL_ENV, NETWORKS, type NetworkConfig, type ParsedEvent, type PolicyValidated, type PrepareOptions, type RecoveryApplied, type RecoveryApproved, type RecoveryFinalized, type RecoveryOpened, type RecoveryRequest, type RelayerExecuteOptions, type ScheduledIntent, type ScheduledIntentArgs, type ScheduledPaymentExecuted, type SplitPaid, type SplitPaymentArgs, type SubInvocationSpec, TESTNET, type TransferPaid, type TransferPaymentArgs, type WasmHashes, buildExecutorAuthEntry, buildInvocation, buildMainnetConfig, buildSmartAccountAuthEntries, findEvent, isChildExecuted, isGuardian, isNonceUsed, parseContractEvent, parseContractEvents, prepareCancelScheduledPayment, prepareRelayerExecution, prepareScheduledPayment, prepareSplitPayment, prepareTransferPayment, readAccountStatus, readContextRule, readContextRulesCount, readFactoryWasmHashes, readGuardianFreezeEpoch, readLiveApprovalCount, readOwner, readPolicyVersion, readRecoveryRequest, readScheduledIntent, signAndSubmit, signaturePayload };