@atbash/sdk 0.19.2-dev.0 → 0.21.0-dev.0

package/dist/browser.mjs

@@ -33,14 +33,6 @@ var __toESM = (mod2, isNodeMode, target) => (target = mod2 != null ? __create(__
   mod2
 ));
 
-// <define:__ATBASH_CHROMIA_NODE_URLS__>
-var define_ATBASH_CHROMIA_NODE_URLS_default;
-var init_define_ATBASH_CHROMIA_NODE_URLS = __esm({
-  "<define:__ATBASH_CHROMIA_NODE_URLS__>"() {
-    define_ATBASH_CHROMIA_NODE_URLS_default = ["https://node0.testnet.chromia.com:7740", "https://node1.testnet.chromia.com:7740"];
-  }
-});
-
 // <define:__ATBASH_PRIVATE_NODE_URLS__>
 var define_ATBASH_PRIVATE_NODE_URLS_default;
 var init_define_ATBASH_PRIVATE_NODE_URLS = __esm({
@@ -53,7 +45,6 @@ var init_define_ATBASH_PRIVATE_NODE_URLS = __esm({
 var require_buffer = __commonJS({
   "(disabled):node_modules/buffer/index.js"() {
     "use strict";
-    init_define_ATBASH_CHROMIA_NODE_URLS();
     init_define_ATBASH_PRIVATE_NODE_URLS();
   }
 });
@@ -62,7 +53,6 @@ var require_buffer = __commonJS({
 var require_bn = __commonJS({
   "node_modules/bn.js/lib/bn.js"(exports, module) {
     "use strict";
-    init_define_ATBASH_CHROMIA_NODE_URLS();
     init_define_ATBASH_PRIVATE_NODE_URLS();
     (function(module2, exports2) {
       "use strict";
@@ -2882,27 +2872,21 @@ var require_bn = __commonJS({
 });
 
 // src-ts/index.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // src-ts/browser/native.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // node_modules/@noble/curves/secp256k1.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // node_modules/@noble/hashes/sha2.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // node_modules/@noble/hashes/_md.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // node_modules/@noble/hashes/utils.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 function isBytes(a) {
   return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
@@ -3325,11 +3309,9 @@ var sha256 = /* @__PURE__ */ createHasher(
 );
 
 // node_modules/@noble/curves/abstract/curve.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // node_modules/@noble/curves/utils.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var abytes2 = (value, length, title) => abytes(value, length, title);
 var anumber2 = anumber;
@@ -3483,7 +3465,6 @@ function validateObject(object, fields = {}, optFields = {}) {
 }
 
 // node_modules/@noble/curves/abstract/modular.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var _0n2 = /* @__PURE__ */ BigInt(0);
 var _1n2 = /* @__PURE__ */ BigInt(1);
@@ -4133,11 +4114,9 @@ function createKeygen(randomSecretKey, getPublicKey) {
 }
 
 // node_modules/@noble/curves/abstract/weierstrass.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // node_modules/@noble/hashes/hmac.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var _HMAC = class {
   oHash;
@@ -5170,7 +5149,6 @@ var Pointk1 = /* @__PURE__ */ weierstrass(secp256k1_CURVE, {
 var secp256k1 = /* @__PURE__ */ ecdsa(Pointk1, sha256);
 
 // node_modules/postchain-client/built/esm/index.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var import_bn = __toESM(require_bn(), 1);
 var commonjsGlobal = typeof globalThis !== "undefined" ? globalThis : typeof window !== "undefined" ? window : typeof global !== "undefined" ? global : typeof self !== "undefined" ? self : {};
@@ -21769,23 +21747,23 @@ Splitter$1.prototype.flush = function() {
   return Buffer$9.concat([this.cache, padBuff]);
 };
 function createCipheriv$1(suite, password, iv) {
-  var config2 = MODES$1[suite.toLowerCase()];
-  if (!config2) throw new TypeError("invalid suite type");
+  var config3 = MODES$1[suite.toLowerCase()];
+  if (!config3) throw new TypeError("invalid suite type");
   if (typeof password === "string") password = Buffer$9.from(password);
-  if (password.length !== config2.key / 8) throw new TypeError("invalid key length " + password.length);
+  if (password.length !== config3.key / 8) throw new TypeError("invalid key length " + password.length);
   if (typeof iv === "string") iv = Buffer$9.from(iv);
-  if (config2.mode !== "GCM" && iv.length !== config2.iv) throw new TypeError("invalid iv length " + iv.length);
-  if (config2.type === "stream") {
-    return new StreamCipher$1(config2.module, password, iv);
-  } else if (config2.type === "auth") {
-    return new AuthCipher$1(config2.module, password, iv);
+  if (config3.mode !== "GCM" && iv.length !== config3.iv) throw new TypeError("invalid iv length " + iv.length);
+  if (config3.type === "stream") {
+    return new StreamCipher$1(config3.module, password, iv);
+  } else if (config3.type === "auth") {
+    return new AuthCipher$1(config3.module, password, iv);
   }
-  return new Cipher(config2.module, password, iv);
+  return new Cipher(config3.module, password, iv);
 }
 function createCipher$1(suite, password) {
-  var config2 = MODES$1[suite.toLowerCase()];
-  if (!config2) throw new TypeError("invalid suite type");
-  var keys2 = ebtk$2(password, false, config2.key, config2.iv);
+  var config3 = MODES$1[suite.toLowerCase()];
+  if (!config3) throw new TypeError("invalid suite type");
+  var keys2 = ebtk$2(password, false, config3.key, config3.iv);
   return createCipheriv$1(suite, keys2.key, keys2.iv);
 }
 encrypter.createCipheriv = createCipheriv$1;
@@ -21873,23 +21851,23 @@ function unpad(last) {
   return last.slice(0, 16 - padded);
 }
 function createDecipheriv$1(suite, password, iv) {
-  var config2 = MODES[suite.toLowerCase()];
-  if (!config2) throw new TypeError("invalid suite type");
+  var config3 = MODES[suite.toLowerCase()];
+  if (!config3) throw new TypeError("invalid suite type");
   if (typeof iv === "string") iv = Buffer$8.from(iv);
-  if (config2.mode !== "GCM" && iv.length !== config2.iv) throw new TypeError("invalid iv length " + iv.length);
+  if (config3.mode !== "GCM" && iv.length !== config3.iv) throw new TypeError("invalid iv length " + iv.length);
   if (typeof password === "string") password = Buffer$8.from(password);
-  if (password.length !== config2.key / 8) throw new TypeError("invalid key length " + password.length);
-  if (config2.type === "stream") {
-    return new StreamCipher(config2.module, password, iv, true);
-  } else if (config2.type === "auth") {
-    return new AuthCipher(config2.module, password, iv, true);
+  if (password.length !== config3.key / 8) throw new TypeError("invalid key length " + password.length);
+  if (config3.type === "stream") {
+    return new StreamCipher(config3.module, password, iv, true);
+  } else if (config3.type === "auth") {
+    return new AuthCipher(config3.module, password, iv, true);
   }
-  return new Decipher(config2.module, password, iv);
+  return new Decipher(config3.module, password, iv);
 }
 function createDecipher$1(suite, password) {
-  var config2 = MODES[suite.toLowerCase()];
-  if (!config2) throw new TypeError("invalid suite type");
-  var keys2 = ebtk$1(password, false, config2.key, config2.iv);
+  var config3 = MODES[suite.toLowerCase()];
+  if (!config3) throw new TypeError("invalid suite type");
+  var keys2 = ebtk$1(password, false, config3.key, config3.iv);
   return createDecipheriv$1(suite, keys2.key, keys2.iv);
 }
 decrypter.createDecipher = createDecipher$1;
@@ -40614,29 +40592,29 @@ function requireFailoverStrategies() {
       }
     }
     function abortOnError(_a2) {
-      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config2, postObject, timeoutOverride }) {
+      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config3, postObject, timeoutOverride }) {
         return yield retryRequest({
           method,
           path: path3,
-          config: config2,
+          config: config3,
           postObject,
           timeoutOverride,
           useNextNodeOnError: false,
-          recoveryThreshold: config2.recoveryThreshold
+          recoveryThreshold: config3.recoveryThreshold
           // Use user config or let nodeManager use default
         });
       });
     }
     function tryNextOnError(_a2) {
-      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config2, postObject, timeoutOverride }) {
+      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config3, postObject, timeoutOverride }) {
         return yield retryRequest({
           method,
           path: path3,
-          config: config2,
+          config: config3,
           postObject,
           timeoutOverride,
           useNextNodeOnError: true,
-          recoveryThreshold: config2.recoveryThreshold
+          recoveryThreshold: config3.recoveryThreshold
         });
       });
     }
@@ -40647,17 +40625,17 @@ function requireFailoverStrategies() {
       return endpointPoolLength - (endpointPoolLength - 1) / 3;
     }
     function queryMajority(_a2) {
-      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config2, postObject, timeoutOverride }) {
+      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config3, postObject, timeoutOverride }) {
         var _b;
-        const bftMajorityThreshold = calculateBftMajorityThreshold(config2.endpointPool.length);
-        const failureThreshold = config2.endpointPool.length - bftMajorityThreshold + 1;
-        const { nodeManager: nodeManager2 } = config2;
+        const bftMajorityThreshold = calculateBftMajorityThreshold(config3.endpointPool.length);
+        const failureThreshold = config3.endpointPool.length - bftMajorityThreshold + 1;
+        const { nodeManager: nodeManager2 } = config3;
         const timeout = 15e3;
-        const availableNodes = nodeManager2.getAvailableNodes((_b = config2.recoveryThreshold) !== null && _b !== void 0 ? _b : bftMajorityThreshold);
+        const availableNodes = nodeManager2.getAvailableNodes((_b = config3.recoveryThreshold) !== null && _b !== void 0 ? _b : bftMajorityThreshold);
         const outcomes = [];
         const promises = availableNodes.map((node2) => __awaiter2(this, void 0, void 0, function* () {
           try {
-            const requestTimeout = timeoutOverride !== null && timeoutOverride !== void 0 ? timeoutOverride : config2.responseTimeout;
+            const requestTimeout = timeoutOverride !== null && timeoutOverride !== void 0 ? timeoutOverride : config3.responseTimeout;
             const response = yield (0, httpUtil_1.handleRequest)(method, path3, node2.url, requestTimeout, postObject);
             const { statusCode } = response;
             if (statusCode && (0, http_utils_1.isSuccessfulStatusCode)(statusCode)) {
@@ -40697,7 +40675,7 @@ function requireFailoverStrategies() {
               throw errorOutcomes[0].result;
             }
           }
-          if (outcomes.length >= config2.endpointPool.length) {
+          if (outcomes.length >= config3.endpointPool.length) {
             throw new Error(exports.errorMessages.NO_CONSENSUS);
           }
           remainingPromises = yield racePromisesWithTimeout(remainingPromises, timeout);
@@ -40705,17 +40683,17 @@ function requireFailoverStrategies() {
       });
     }
     function singleEndpoint(_a2) {
-      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config2, postObject, timeoutOverride }) {
+      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config3, postObject, timeoutOverride }) {
         let statusCode = null;
         let rspBody = null;
         let error4 = null;
         let transactionTimestamp = void 0;
-        const endpoint = config2.nodeManager.getNode();
+        const endpoint = config3.nodeManager.getNode();
         if (!endpoint) {
           throw new Error("No nodes available after recovery attempt. Check node configuration.");
         }
-        for (let attempt = 0; attempt < config2.attemptsPerEndpoint; attempt++) {
-          const requestTimeout = timeoutOverride !== null && timeoutOverride !== void 0 ? timeoutOverride : config2.responseTimeout;
+        for (let attempt = 0; attempt < config3.attemptsPerEndpoint; attempt++) {
+          const requestTimeout = timeoutOverride !== null && timeoutOverride !== void 0 ? timeoutOverride : config3.responseTimeout;
           const response = yield (0, httpUtil_1.handleRequest)(method, path3, endpoint.url, requestTimeout, postObject);
           if (response) {
             ({ error: error4, statusCode, rspBody, transactionTimestamp } = response);
@@ -40724,24 +40702,24 @@ function requireFailoverStrategies() {
           if (!isError4 && !error4) {
             return { error: error4, statusCode, rspBody, transactionTimestamp };
           }
-          logger3.info(`${method} request failed on ${endpoint.url}. Attempt: ${attempt + 1} / ${config2.attemptsPerEndpoint}`);
-          yield (0, utils_12.sleep)(config2.attemptInterval);
+          logger3.info(`${method} request failed on ${endpoint.url}. Attempt: ${attempt + 1} / ${config3.attemptsPerEndpoint}`);
+          yield (0, utils_12.sleep)(config3.attemptInterval);
         }
         return { error: error4, statusCode, rspBody, transactionTimestamp };
       });
     }
     function retryRequest(_a2) {
-      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config2, postObject, useNextNodeOnError, recoveryThreshold, timeoutOverride }) {
+      return __awaiter2(this, arguments, void 0, function* ({ method, path: path3, config: config3, postObject, useNextNodeOnError, recoveryThreshold, timeoutOverride }) {
         var _b, _c, _d;
         let statusCode = null;
         let rspBody = null;
         let error4 = null;
         let transactionTimestamp = void 0;
-        const { nodeManager: nodeManager2 } = config2;
+        const { nodeManager: nodeManager2 } = config3;
         const availableNodes = nodeManager2.getAvailableNodes(recoveryThreshold);
         for (const node2 of availableNodes) {
-          for (let attempt = 0; attempt < config2.attemptsPerEndpoint; attempt++) {
-            const requestTimeout = timeoutOverride !== null && timeoutOverride !== void 0 ? timeoutOverride : config2.responseTimeout;
+          for (let attempt = 0; attempt < config3.attemptsPerEndpoint; attempt++) {
+            const requestTimeout = timeoutOverride !== null && timeoutOverride !== void 0 ? timeoutOverride : config3.responseTimeout;
             const response = yield (0, httpUtil_1.handleRequest)(method, path3, node2.url, requestTimeout, postObject);
             error4 = (_b = response === null || response === void 0 ? void 0 : response.error) !== null && _b !== void 0 ? _b : null;
             statusCode = (_c = response === null || response === void 0 ? void 0 : response.statusCode) !== null && _c !== void 0 ? _c : null;
@@ -40772,9 +40750,9 @@ function requireFailoverStrategies() {
                 break;
               }
             }
-            logger3.info(`${method} request failed on ${node2.url}. Attempt: ${attempt + 1} / ${config2.attemptsPerEndpoint}`);
-            if (config2.attemptInterval > 0) {
-              yield (0, utils_12.sleep)(config2.attemptInterval);
+            logger3.info(`${method} request failed on ${node2.url}. Attempt: ${attempt + 1} / ${config3.attemptsPerEndpoint}`);
+            if (config3.attemptInterval > 0) {
+              yield (0, utils_12.sleep)(config3.attemptInterval);
             }
           }
         }
@@ -40885,21 +40863,21 @@ function requireRequestWithFailoverStrategy() {
   const enums_12 = enums;
   const failoverStrategies_1 = requireFailoverStrategies();
   function requestWithFailoverStrategy$1(method_1, path_1, config_1, postObject_1) {
-    return __awaiter2(this, arguments, void 0, function* (method, path3, config2, postObject, forceSingleEndpoint = false, timeoutOverride) {
-      switch (config2.failoverStrategy) {
+    return __awaiter2(this, arguments, void 0, function* (method, path3, config3, postObject, forceSingleEndpoint = false, timeoutOverride) {
+      switch (config3.failoverStrategy) {
         case enums_12.FailoverStrategy.AbortOnError:
-          return yield (0, failoverStrategies_1.abortOnError)({ method, path: path3, config: config2, postObject, timeoutOverride });
+          return yield (0, failoverStrategies_1.abortOnError)({ method, path: path3, config: config3, postObject, timeoutOverride });
         case enums_12.FailoverStrategy.TryNextOnError:
-          return yield (0, failoverStrategies_1.tryNextOnError)({ method, path: path3, config: config2, postObject, timeoutOverride });
+          return yield (0, failoverStrategies_1.tryNextOnError)({ method, path: path3, config: config3, postObject, timeoutOverride });
         case enums_12.FailoverStrategy.SingleEndpoint:
-          return yield (0, failoverStrategies_1.singleEndpoint)({ method, path: path3, config: config2, postObject, timeoutOverride });
+          return yield (0, failoverStrategies_1.singleEndpoint)({ method, path: path3, config: config3, postObject, timeoutOverride });
         case enums_12.FailoverStrategy.QueryMajority:
           if (forceSingleEndpoint) {
-            return yield (0, failoverStrategies_1.singleEndpoint)({ method, path: path3, config: config2, postObject, timeoutOverride });
+            return yield (0, failoverStrategies_1.singleEndpoint)({ method, path: path3, config: config3, postObject, timeoutOverride });
           }
-          return yield (0, failoverStrategies_1.queryMajority)({ method, path: path3, config: config2, postObject, timeoutOverride });
+          return yield (0, failoverStrategies_1.queryMajority)({ method, path: path3, config: config3, postObject, timeoutOverride });
         default:
-          throw new Error(`Unsupported failover strategy: ${config2.failoverStrategy}`);
+          throw new Error(`Unsupported failover strategy: ${config3.failoverStrategy}`);
       }
     });
   }
@@ -41068,11 +41046,11 @@ function requireUtils$1() {
         return Object.assign(Object.assign(Object.assign({ endpointPool, nodeManager: nodeManager2 }, settings.blockedNodeUrlSubstrings !== void 0 ? { blockedNodeUrlSubstrings: settings.blockedNodeUrlSubstrings } : {}), settings.nodeUrlFilter !== void 0 ? { nodeUrlFilter: settings.nodeUrlFilter } : {}), { blockchainRid: blockchainRidToUse, merkleHashVersion: (_e = settings.merkleHashVersion) !== null && _e !== void 0 ? _e : constants_12.MERKLE_HASH_VERSIONS.UNSET, dappStatusPolling: setStatusPolling(settings.dappStatusPolling), clusterAnchoringStatusPolling: setStatusPolling(settings.clusterAnchoringStatusPolling), systemAnchoringStatusPolling: setStatusPolling(settings.systemAnchoringStatusPolling), retryTransactionPolling: setRetryTransactionPolling(settings.retryTransactionPolling), failoverStrategy: ((_f = settings.failOverConfig) === null || _f === void 0 ? void 0 : _f.strategy) || exports.defaultFailoverConfig.strategy, attemptsPerEndpoint: ((_g = settings.failOverConfig) === null || _g === void 0 ? void 0 : _g.attemptsPerEndpoint) || exports.defaultFailoverConfig.attemptsPerEndpoint, attemptInterval: ((_h = settings.failOverConfig) === null || _h === void 0 ? void 0 : _h.attemptInterval) || exports.defaultFailoverConfig.attemptInterval, unreachableDuration: ((_j = settings.failOverConfig) === null || _j === void 0 ? void 0 : _j.unreachableDuration) || exports.defaultFailoverConfig.unreachableDuration, directoryChainRid: settings.directoryChainRid || directoryChainRid, connectTimeout: settings.connectTimeout, responseTimeout: settings.responseTimeout });
       });
     }
-    function getMerkleHashVersionFromDapp(config2) {
+    function getMerkleHashVersionFromDapp(config3) {
       return __awaiter2(this, void 0, void 0, function* () {
         var _a2;
         try {
-          const response = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/config/${config2.blockchainRid}/features`, config2, void 0, false, (_a2 = config2.connectTimeout) !== null && _a2 !== void 0 ? _a2 : config2.responseTimeout);
+          const response = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/config/${config3.blockchainRid}/features`, config3, void 0, false, (_a2 = config3.connectTimeout) !== null && _a2 !== void 0 ? _a2 : config3.responseTimeout);
           const validatedResponse = (0, merkleHash_1.validateMerkleHash)(response.rspBody);
           return validatedResponse.merkle_hash_version;
         } catch (error4) {
@@ -41528,7 +41506,7 @@ function requireUtils$1() {
       return __awaiter2(this, arguments, void 0, function* ({ endpointPool, chainId, failOverConfig = {}, nodeManager: nodeManager2, connectTimeout, responseTimeout }) {
         var _b;
         const mergedFailOverConfig = Object.assign(Object.assign({}, exports.defaultFailoverConfig), failOverConfig);
-        const config2 = {
+        const config3 = {
           endpointPool,
           nodeManager: nodeManager2,
           dappStatusPolling: setStatusPolling(),
@@ -41543,7 +41521,7 @@ function requireUtils$1() {
           connectTimeout,
           responseTimeout
         };
-        const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/brid/iid_${chainId}`, config2, void 0, false, (_b = config2.connectTimeout) !== null && _b !== void 0 ? _b : config2.responseTimeout);
+        const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/brid/iid_${chainId}`, config3, void 0, false, (_b = config3.connectTimeout) !== null && _b !== void 0 ? _b : config3.responseTimeout);
         const blockchainRid = (0, requests_1.isString)(rspBody);
         if (!blockchainRid) {
           throw error4;
@@ -42279,10 +42257,10 @@ function requireBlockchainClient() {
   function createClient(settings) {
     return __awaiter2(this, void 0, void 0, function* () {
       (0, networkSettings_1.isNetworkSettingValid)(settings, { throwOnError: true });
-      const config2 = yield (0, utils_12.getClientConfigFromSettings)(settings);
-      config2.merkleHashVersion = yield getMerkleHashVersion(settings);
+      const config3 = yield (0, utils_12.getClientConfigFromSettings)(settings);
+      config3.merkleHashVersion = yield getMerkleHashVersion(settings);
       return {
-        config: config2,
+        config: config3,
         query(nameOrQueryObject, args, callback) {
           return __awaiter2(this, void 0, void 0, function* () {
             let _name, _args;
@@ -42293,7 +42271,7 @@ function requireBlockchainClient() {
               _name = nameOrQueryObject === null || nameOrQueryObject === void 0 ? void 0 : nameOrQueryObject.name;
               _args = nameOrQueryObject === null || nameOrQueryObject === void 0 ? void 0 : nameOrQueryObject.args;
             }
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.POST, `query_gtv/${config2.blockchainRid}`, config2, (0, serialization_12.encodeValue)((0, formatter_12.toQueryObjectGTV)(_name, _args)));
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.POST, `query_gtv/${config3.blockchainRid}`, config3, (0, serialization_12.encodeValue)((0, formatter_12.toQueryObjectGTV)(_name, _args)));
             return new Promise((resolve2, reject) => {
               (0, utils_12.handlePostResponse)(error4, statusCode, (0, requests_1.isRawGtv)(rspBody), (0, utils_12.callbackPromiseBuilder)(reject, resolve2, callback));
             });
@@ -42302,9 +42280,9 @@ function requireBlockchainClient() {
         signTransaction(transaction, signMethod2, callback) {
           return __awaiter2(this, void 0, void 0, function* () {
             logger3.debug(`Signing transaction with ${!(0, utils_12.isKeyPair)(signMethod2) ? "signature provider containing " : ""}pubKey: ${(0, formatter_12.toString)(signMethod2.pubKey)}`);
-            const gtx2 = (0, utils_12.getGTXFromBufferOrTransactionOrOperation)(transaction, config2.blockchainRid);
+            const gtx2 = (0, utils_12.getGTXFromBufferOrTransactionOrOperation)(transaction, config3.blockchainRid);
             try {
-              const signedTx = yield (0, utils_12.isKeyPair)(signMethod2) ? gtxTool.sign(gtx2, signMethod2.privKey, config2.merkleHashVersion, signMethod2.pubKey) : gtxTool.sign(gtx2, signMethod2, config2.merkleHashVersion);
+              const signedTx = yield (0, utils_12.isKeyPair)(signMethod2) ? gtxTool.sign(gtx2, signMethod2.privKey, config3.merkleHashVersion, signMethod2.pubKey) : gtxTool.sign(gtx2, signMethod2, config3.merkleHashVersion);
               const gtxBytes = (0, utils_12.getSerializedGTX)(signedTx);
               if (typeof callback === "function") {
                 callback(null, gtxBytes);
@@ -42325,8 +42303,8 @@ function requireBlockchainClient() {
           }
           const promiEvent = new promiEvents_12.Web3PromiEvent((resolve2, reject) => __awaiter2(this, void 0, void 0, function* () {
             let error4 = null;
-            for (let i = 0; i < config2.retryTransactionPolling.count; i++) {
-              logger3.info(`sendTransactionWithRetries attempt ${i + 1} of ${config2.retryTransactionPolling.count}`);
+            for (let i = 0; i < config3.retryTransactionPolling.count; i++) {
+              logger3.info(`sendTransactionWithRetries attempt ${i + 1} of ${config3.retryTransactionPolling.count}`);
               const tmpPromiEvent = sendOnce().on(enums_12.TransactionEvent.ClusterAnchoringConfirmation, (receipt) => {
                 promiEvent.emit(enums_12.TransactionEvent.ClusterAnchoringConfirmation, receipt);
               }).on(enums_12.TransactionEvent.SystemAnchoringConfirmation, (receipt) => {
@@ -42338,7 +42316,7 @@ function requireBlockchainClient() {
               }).on(enums_12.TransactionEvent.DappConfirmed, (receipt) => {
                 promiEvent.emit(enums_12.TransactionEvent.DappConfirmed, receipt);
               }).catch((tmpError) => {
-                logger3.warning(`sendTransactionWithRetries error on attempt ${i + 1} of ${config2.retryTransactionPolling.count}: ${tmpError}`);
+                logger3.warning(`sendTransactionWithRetries error on attempt ${i + 1} of ${config3.retryTransactionPolling.count}: ${tmpError}`);
                 promiEvent.emit(enums_12.TransactionEvent.Rejected, tmpError);
                 error4 = tmpError;
               });
@@ -42347,7 +42325,7 @@ function requireBlockchainClient() {
                 resolve2(tmpReceipt);
                 return;
               }
-              yield (0, utils_12.sleep)(config2.retryTransactionPolling.interval);
+              yield (0, utils_12.sleep)(config3.retryTransactionPolling.interval);
             }
             reject(error4);
           }));
@@ -42357,13 +42335,13 @@ function requireBlockchainClient() {
           const promiEvent = new promiEvents_12.Web3PromiEvent((resolve2, reject) => __awaiter2(this, void 0, void 0, function* () {
             var _a2, _b;
             try {
-              const gtx2 = (0, utils_12.getGTXFromBufferOrTransactionOrOperation)(transaction, config2.blockchainRid);
+              const gtx2 = (0, utils_12.getGTXFromBufferOrTransactionOrOperation)(transaction, config3.blockchainRid);
               if (gtx2.signers.length !== ((_a2 = gtx2.signatures) === null || _a2 === void 0 ? void 0 : _a2.length)) {
                 reject(new errors_12.NumberOfSignersAndSignaturesException());
               }
               const gtxBytes = (0, utils_12.getSerializedGTX)(gtx2);
-              const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.POST, `tx/${config2.blockchainRid}`, config2, gtxBytes);
-              const transactionRid = gtxTool.getDigestToSign(gtx2, config2.merkleHashVersion);
+              const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.POST, `tx/${config3.blockchainRid}`, config3, gtxBytes);
+              const transactionRid = gtxTool.getDigestToSign(gtx2, config3.merkleHashVersion);
               try {
                 yield (0, utils_12.handlePostResponsePromisified)(error4, statusCode, (0, requests_1.isRawGtv)(rspBody));
                 if (typeof callback === "function") {
@@ -42371,7 +42349,7 @@ function requireBlockchainClient() {
                     status: enums_12.ResponseStatus.Waiting,
                     statusCode,
                     transactionRid,
-                    node: (_b = config2.nodeManager.lastUsedNode) === null || _b === void 0 ? void 0 : _b.url
+                    node: (_b = config3.nodeManager.lastUsedNode) === null || _b === void 0 ? void 0 : _b.url
                   });
                 }
               } catch (_error) {
@@ -42434,7 +42412,7 @@ function requireBlockchainClient() {
               callback === null || callback === void 0 ? void 0 : callback(error5, null);
               throw error5;
             }
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `tx/${config2.blockchainRid}/${(0, formatter_12.ensureString)(transactionRid)}`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `tx/${config3.blockchainRid}/${(0, formatter_12.ensureString)(transactionRid)}`, config3);
             const transaction = (0, requests_1.isTransaction)(rspBody);
             return new Promise((resolve2, reject) => {
               (0, utils_12.handleGetResponse)(error4, statusCode, statusCode === 200 && transaction ? (0, formatter_12.toBuffer)(transaction.tx) : (0, requests_1.isRawGtv)(rspBody), (0, utils_12.callbackPromiseBuilder)(reject, resolve2, callback));
@@ -42449,7 +42427,7 @@ function requireBlockchainClient() {
               callback === null || callback === void 0 ? void 0 : callback(error5, null);
               throw error5;
             }
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `tx/${config2.blockchainRid}/${transactionRid.toString("hex")}/status`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `tx/${config3.blockchainRid}/${transactionRid.toString("hex")}/status`, config3);
             return new Promise((resolve2, reject) => {
               (0, utils_12.handleGetResponse)(error4, statusCode, (0, requests_1.isRawGtv)(rspBody), (0, utils_12.callbackPromiseBuilder)(reject, (result) => resolve2((0, transactionStatusReponse_1.validateTransactionStatusReponse)({
                 statusCode,
@@ -42472,7 +42450,7 @@ function requireBlockchainClient() {
             const beforeTimeQueryParam = beforeTime ? `&before-time=${beforeTime.getTime()}` : "";
             const afterTimeQueryParam = afterTime ? `&after-time=${afterTime.getTime()}` : "";
             const signerQueryParam = signerPubKey ? `&signer=${signerPubKey}` : "";
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `transactions/${config2.blockchainRid}?limit=${limit}${beforeTimeQueryParam}${afterTimeQueryParam}${signerQueryParam}`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `transactions/${config3.blockchainRid}?limit=${limit}${beforeTimeQueryParam}${afterTimeQueryParam}${signerQueryParam}`, config3);
             const transactionsInfoResponseArray = (0, requests_1.isTransactionInfoResponseArray)(rspBody);
             const body = statusCode === 200 && transactionsInfoResponseArray ? transactionsInfoResponseArray.map(utils_12.formatTransactionInfoResponse) : rspBody;
             return new Promise((resolve2, reject) => {
@@ -42488,7 +42466,7 @@ function requireBlockchainClient() {
               callback === null || callback === void 0 ? void 0 : callback(error5, null);
               throw error5;
             }
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `transactions/${config2.blockchainRid}/${(0, formatter_12.ensureString)(transactionRid)}`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `transactions/${config3.blockchainRid}/${(0, formatter_12.ensureString)(transactionRid)}`, config3);
             const transactionInfoResponse = (0, requests_1.isTransactionInfoResponse)(rspBody);
             const body = statusCode === 200 && transactionInfoResponse ? (0, utils_12.formatTransactionInfoResponse)(transactionInfoResponse) : rspBody;
             return new Promise((resolve2, reject) => {
@@ -42500,7 +42478,7 @@ function requireBlockchainClient() {
           return __awaiter2(this, void 0, void 0, function* () {
             const client = this;
             const result = { status: enums_12.AnchoringStatus.NotAnchored };
-            const clusterAnchoredTx = yield (0, utils_2.awaitGetAnchoringTransactionForBlockRid)(anchoringClient, (0, formatter_12.ensureBuffer)(client.config.blockchainRid), (0, formatter_12.ensureBuffer)(blockRid), config2.clusterAnchoringStatusPolling);
+            const clusterAnchoredTx = yield (0, utils_2.awaitGetAnchoringTransactionForBlockRid)(anchoringClient, (0, formatter_12.ensureBuffer)(client.config.blockchainRid), (0, formatter_12.ensureBuffer)(blockRid), config3.clusterAnchoringStatusPolling);
             if (!clusterAnchoredTx) {
               return result;
             }
@@ -42510,7 +42488,7 @@ function requireBlockchainClient() {
             }
             result.status = enums_12.AnchoringStatus.ClusterAnchored;
             result.clusterAnchoredTx = anchoringTransactionValidation.data;
-            const systemAnchoredTransaction = yield (0, utils_12.getSystemAnchoringTransaction)(config2.endpointPool, anchoringTransactionValidation.data.txRid, anchoringClient, systemAnchoringChainRid, config2.systemAnchoringStatusPolling, config2.merkleHashVersion, config2.blockedNodeUrlSubstrings, config2.nodeUrlFilter);
+            const systemAnchoredTransaction = yield (0, utils_12.getSystemAnchoringTransaction)(config3.endpointPool, anchoringTransactionValidation.data.txRid, anchoringClient, systemAnchoringChainRid, config3.systemAnchoringStatusPolling, config3.merkleHashVersion, config3.blockedNodeUrlSubstrings, config3.nodeUrlFilter);
             if (!systemAnchoredTransaction) {
               return result;
             }
@@ -42574,7 +42552,7 @@ function requireBlockchainClient() {
         },
         getTransactionCount(callback) {
           return __awaiter2(this, void 0, void 0, function* () {
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `transactions/${config2.blockchainRid}/count`, config2, void 0, true);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `transactions/${config3.blockchainRid}/count`, config3, void 0, true);
             const transactionsCount = (0, requests_1.isTransactionsCount)(rspBody);
             return new Promise((resolve2, reject) => {
               (0, utils_12.handleGetResponse)(error4, statusCode, statusCode === 200 ? transactionsCount === null || transactionsCount === void 0 ? void 0 : transactionsCount.transactionsCount : (0, requests_1.isRawGtv)(rspBody), (0, utils_12.callbackPromiseBuilder)(reject, resolve2, callback));
@@ -42585,7 +42563,7 @@ function requireBlockchainClient() {
           return __awaiter2(this, arguments, void 0, function* (blockIdentifier2, txs = false, callback) {
             (0, blockIdentifier_1.isBlockIdentifierValid)(blockIdentifier2, { throwOnError: true });
             const queryString = typeof blockIdentifier2 === "string" ? blockIdentifier2 : `height/${blockIdentifier2}`;
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `blocks/${config2.blockchainRid}/${queryString}?txs=${txs}`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `blocks/${config3.blockchainRid}/${queryString}?txs=${txs}`, config3);
             const blockInfoResponse = (0, requests_1.isBlockInfoResponse)(rspBody);
             return new Promise((resolve2, reject) => {
               (0, utils_12.handleGetResponse)(error4, statusCode, statusCode === 200 && blockInfoResponse !== null && blockInfoResponse ? (0, utils_12.formatBlockInfoResponse)(blockInfoResponse) : (0, requests_1.isRawGtv)(rspBody), (0, utils_12.callbackPromiseBuilder)(reject, resolve2, callback));
@@ -42595,7 +42573,7 @@ function requireBlockchainClient() {
         getLatestBlock() {
           return __awaiter2(this, arguments, void 0, function* (txs = false, callback) {
             const shouldIncludeFullTransaction = txs ? `&txs=${txs}` : "";
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `blocks/${config2.blockchainRid}?limit=1${shouldIncludeFullTransaction}`, config2, void 0, true);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `blocks/${config3.blockchainRid}?limit=1${shouldIncludeFullTransaction}`, config3, void 0, true);
             const indexOfLatestBlock = 0;
             const blockInfoResponseArray = (0, requests_1.isBlockInfoResponseArray)(rspBody);
             return new Promise((resolve2, reject) => {
@@ -42620,7 +42598,7 @@ function requireBlockchainClient() {
                 searchParams.append(key3, value.toString());
               }
             }
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `blocks/${config2.blockchainRid}?${searchParams}`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `blocks/${config3.blockchainRid}?${searchParams}`, config3);
             const blockInfoResponseArray = (0, requests_1.isBlockInfoResponseArray)(rspBody);
             return new Promise((resolve2, reject) => {
               (0, utils_12.handleGetResponse)(error4, statusCode, statusCode === 200 && blockInfoResponseArray ? blockInfoResponseArray.map(utils_12.formatBlockInfoResponse) : (0, requests_1.isRawGtv)(rspBody), (0, utils_12.callbackPromiseBuilder)(reject, resolve2, callback));
@@ -42628,7 +42606,7 @@ function requireBlockchainClient() {
           });
         },
         getClientNodeUrlPool() {
-          return config2.endpointPool.map((endpoint) => endpoint.url);
+          return config3.endpointPool.map((endpoint) => endpoint.url);
         },
         /**
          * Retrieves a confirmation proof for a transaction with the specified sha256
@@ -42663,7 +42641,7 @@ function requireBlockchainClient() {
               callback === null || callback === void 0 ? void 0 : callback(error5, null);
               throw error5;
             }
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `tx/${config2.blockchainRid}/${(0, formatter_12.ensureString)(txRid2)}/confirmationProof`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `tx/${config3.blockchainRid}/${(0, formatter_12.ensureString)(txRid2)}/confirmationProof`, config3);
             const confirmationProof = {
               merkleProofTree: "",
               txIndex: 0
@@ -42727,13 +42705,13 @@ function requireBlockchainClient() {
               callback === null || callback === void 0 ? void 0 : callback(error4, null);
               throw error4;
             }
-            const systemAnchoringTransactionTransaction = yield (0, utils_12.getSystemAnchoringTransaction)(config2.endpointPool, anchoredTxRid, anchoringClient, systemAnchoringChainRid, config2.systemAnchoringStatusPolling, config2.merkleHashVersion, config2.blockedNodeUrlSubstrings, config2.nodeUrlFilter);
+            const systemAnchoringTransactionTransaction = yield (0, utils_12.getSystemAnchoringTransaction)(config3.endpointPool, anchoredTxRid, anchoringClient, systemAnchoringChainRid, config3.systemAnchoringStatusPolling, config3.merkleHashVersion, config3.blockedNodeUrlSubstrings, config3.nodeUrlFilter);
             return systemAnchoringTransactionTransaction;
           });
         },
         getWaitingTransactions(blockchainRid, callback) {
           return __awaiter2(this, void 0, void 0, function* () {
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/tx/${(0, formatter_12.ensureString)(blockchainRid)}/waiting`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/tx/${(0, formatter_12.ensureString)(blockchainRid)}/waiting`, config3);
             return new Promise((resolve2, reject) => {
               (0, utils_12.handleGetResponse)(error4, statusCode, (0, requests_1.isRawGtv)(rspBody), (0, utils_12.callbackPromiseBuilder)(reject, resolve2, callback));
             });
@@ -42741,7 +42719,7 @@ function requireBlockchainClient() {
         },
         getWaitingTransaction(blockchainRid, txRid2, callback) {
           return __awaiter2(this, void 0, void 0, function* () {
-            const { error: error4, statusCode, rspBody, transactionTimestamp } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/tx/${(0, formatter_12.ensureString)(blockchainRid)}/waiting/${(0, formatter_12.ensureString)(txRid2)}`, config2);
+            const { error: error4, statusCode, rspBody, transactionTimestamp } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/tx/${(0, formatter_12.ensureString)(blockchainRid)}/waiting/${(0, formatter_12.ensureString)(txRid2)}`, config3);
             const transaction = (0, requests_1.isTransaction)(rspBody);
             const result = transaction ? (0, formatter_12.toBuffer)(transaction.tx) : (0, requests_1.isRawGtv)(rspBody);
             return new Promise((resolve2, reject) => {
@@ -42754,7 +42732,7 @@ function requireBlockchainClient() {
         },
         getRejectedTransactions(blockchainRid, callback) {
           return __awaiter2(this, void 0, void 0, function* () {
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/tx/${(0, formatter_12.ensureString)(blockchainRid)}/rejected`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/tx/${(0, formatter_12.ensureString)(blockchainRid)}/rejected`, config3);
             const rejectedTransactionsArray = (0, requests_1.isRejectedTransactionResponseArray)(rspBody);
             const validResponseBody = statusCode === 200 && rejectedTransactionsArray ? rejectedTransactionsArray.map((rejectedTransaction) => (0, utils_12.formatRejectedTransactionFromResponse)(rejectedTransaction)) : rspBody;
             return new Promise((resolve2, reject) => {
@@ -42768,7 +42746,7 @@ function requireBlockchainClient() {
          */
         getAppStructure(callback) {
           return __awaiter2(this, void 0, void 0, function* () {
-            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/query/${config2.blockchainRid}?type=rell.get_app_structure`, config2);
+            const { error: error4, statusCode, rspBody } = yield (0, requestWithFailoverStrategy_1.requestWithFailoverStrategy)(enums_12.Method.GET, `/query/${config3.blockchainRid}?type=rell.get_app_structure`, config3);
             return new Promise((resolve2, reject) => {
               (0, utils_12.handleGetResponse)(error4, statusCode, (0, requests_1.isRawGtv)(rspBody), (0, utils_12.callbackPromiseBuilder)(reject, resolve2, callback));
             });
@@ -42781,7 +42759,7 @@ function requireBlockchainClient() {
           if (settings2.merkleHashVersion !== void 0) {
             merkleHashVersion = settings2.merkleHashVersion;
           } else {
-            merkleHashVersion = yield (0, utils_12.getMerkleHashVersionFromDapp)(config2);
+            merkleHashVersion = yield (0, utils_12.getMerkleHashVersionFromDapp)(config3);
           }
           return merkleHashVersion;
         });
@@ -43295,9 +43273,7 @@ var index = /* @__PURE__ */ getDefaultExportFromCjs(builtExports);
 // src-ts/browser/native.ts
 var { Buffer: Buffer3, gtx: pcgtx } = index;
 var ATBASH_ENDPOINT = "https://chromia-verified-ai-dev-two.vercel.app";
-var ATBASH_BLOCKCHAIN_RID = "02668C5218871F69A93CC0F7032DCFFE06EF0D35EF2F0B07A92A3D83A3F23A7D";
 var ATBASH_PRIVATE_BLOCKCHAIN_RID = "2603569AE8DC3F254323F719C8D4347BBA964E874E781291F8474236BE8B6493";
-var DEFAULT_CHROMIA_NODE_URLS_ARR = define_ATBASH_CHROMIA_NODE_URLS_default;
 var DEFAULT_PRIVATE_NODE_URLS_ARR = define_ATBASH_PRIVATE_NODE_URLS_default;
 var MERKLE_HASH_VERSION = 2;
 function stripHex(s2) {
@@ -43449,10 +43425,8 @@ var native = {
   deriveMemoryKey,
   encryptMemoryContent,
   decryptMemoryContent,
-  DEFAULT_BLOCKCHAIN_RID: ATBASH_BLOCKCHAIN_RID,
   DEFAULT_PRIVATE_BLOCKCHAIN_RID: ATBASH_PRIVATE_BLOCKCHAIN_RID,
   DEFAULT_ENDPOINT: ATBASH_ENDPOINT,
-  defaultChromiaNodeUrls: () => [...DEFAULT_CHROMIA_NODE_URLS_ARR],
   defaultPrivateNodeUrls: () => [...DEFAULT_PRIVATE_NODE_URLS_ARR],
   // Server-only surfaces — throw at runtime, keep types satisfied.
   // The memory signers are here and not with the other signing shims because
@@ -43522,11 +43496,9 @@ var native = {
 };
 
 // src-ts/client.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // src-ts/random.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 function randomBytes4(size) {
   const buf = new Uint8Array(size);
@@ -43543,7 +43515,6 @@ function randomHex(size) {
 }
 
 // src-ts/auth-bearer.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var BEARER_TTL_MS = 4 * 60 * 1e3;
 var bearers = /* @__PURE__ */ new Map();
@@ -43569,47 +43540,36 @@ function agentAuthHeaders(auth, blockchainRid) {
 }
 
 // src-ts/chain-config.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
-init_define_ATBASH_PRIVATE_NODE_URLS();
-
-// src-ts/constants.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
-var DEFAULT_ENDPOINT = native.DEFAULT_ENDPOINT;
-var DEFAULT_CHROMIA_NODE_URLS = Object.freeze(
-  native.defaultChromiaNodeUrls()
-);
-var DEFAULT_BLOCKCHAIN_RID = native.DEFAULT_BLOCKCHAIN_RID;
-
-// src-ts/chain-config.ts
 var DEFAULT_PRIVATE_NODE_URLS = Object.freeze(
   native.defaultPrivateNodeUrls()
 );
 var DEFAULT_PRIVATE_BLOCKCHAIN_RID = native.DEFAULT_PRIVATE_BLOCKCHAIN_RID;
-var PUBLIC_CHAIN = {
-  network: "public",
-  blockchainRid: DEFAULT_BLOCKCHAIN_RID,
-  nodeUrls: DEFAULT_CHROMIA_NODE_URLS
-};
 var PRIVATE_CHAIN = {
   network: "private",
   blockchainRid: DEFAULT_PRIVATE_BLOCKCHAIN_RID,
   nodeUrls: DEFAULT_PRIVATE_NODE_URLS
 };
 function chainForNetwork(network) {
-  return network === "private" ? PRIVATE_CHAIN : PUBLIC_CHAIN;
+  if (network !== "private") {
+    throw new Error(
+      `network must be "private" (the public chain is retired), got ${JSON.stringify(network)}`
+    );
+  }
+  return PRIVATE_CHAIN;
 }
 
+// src-ts/constants.ts
+init_define_ATBASH_PRIVATE_NODE_URLS();
+var DEFAULT_ENDPOINT = native.DEFAULT_ENDPOINT;
+
 // src-ts/browser/encrypted-toolcall.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // src-ts/browser/crypto-ecies.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // node_modules/@noble/hashes/hkdf.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 function extract(hash3, ikm, salt) {
   ahash(hash3);
@@ -43651,15 +43611,12 @@ function expand2(hash3, prk, info2, length = 32) {
 var hkdf = (hash3, ikm, salt, info2, length) => expand2(hash3, extract(hash3, ikm, salt), info2, length);
 
 // node_modules/@noble/ciphers/aes.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // node_modules/@noble/ciphers/_polyval.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // node_modules/@noble/ciphers/utils.js
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 function isBytes3(a) {
   return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array" && "BYTES_PER_ELEMENT" in a && a.BYTES_PER_ELEMENT === 1;
@@ -44253,7 +44210,6 @@ function encryptedLength(plaintextByteLength) {
 }
 
 // src-ts/crypto/envelope.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var PREFIX = "atb1";
 var SEPARATOR = ".";
@@ -44387,7 +44343,6 @@ function signEncryptedToolCall(toolCallId, action, context, toolName, toolArgsJs
 }
 
 // src-ts/endpoint.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 function buildAllowedJudgeHosts() {
   return /* @__PURE__ */ new Set([
@@ -44446,7 +44401,6 @@ function validateJudgeEndpoint(judge) {
 }
 
 // src-ts/errors.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var AtbashAPIError = class extends Error {
   /** HTTP status code (or 0 if the request never completed). */
@@ -44478,6 +44432,15 @@ var SignatureVerificationError = class extends Error {
     this.name = "SignatureVerificationError";
   }
 };
+var JudgeRefusalError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "JudgeRefusalError";
+  }
+};
+function isRefusalStatus(status) {
+  return status >= 400 && status < 500 && status !== 408;
+}
 function enrich(status, body, statusText, endpoint, path3) {
   const dashboard = endpoint.replace(/\/+$/, "") || DEFAULT_ENDPOINT;
   let msg = `API error ${status}${path3 ? ` from ${path3}` : ""}: ${body || statusText}`;
@@ -44501,8 +44464,63 @@ function enrich(status, body, statusText, endpoint, path3) {
   return msg;
 }
 
+// src-ts/jail-hold.ts
+init_define_ATBASH_PRIVATE_NODE_URLS();
+var DEFAULTS = { ceilingMs: 3e4, pollMs: 1e3 };
+var holds = /* @__PURE__ */ new Map();
+var blockedAt = /* @__PURE__ */ new Map();
+var BLOCK_MEMORY_MS = 10 * 6e4;
+var config2 = { ...DEFAULTS };
+function isJailHeld(pubkey) {
+  return holds.has(pubkey);
+}
+function recordBlock(pubkey) {
+  const now = Date.now();
+  for (const [key3, at] of blockedAt) if (now - at > BLOCK_MEMORY_MS) blockedAt.delete(key3);
+  blockedAt.set(pubkey, now);
+}
+function blockedSince(pubkey, startedAt) {
+  const at = blockedAt.get(pubkey);
+  return at !== void 0 && startedAt <= at;
+}
+function holdJail(pubkey, confirmJailed, onGiveUp) {
+  if (holds.has(pubkey)) return;
+  const hold = { timer: null };
+  holds.set(pubkey, hold);
+  const deadline = Date.now() + config2.ceilingMs;
+  const tick = async () => {
+    if (holds.get(pubkey) !== hold) return;
+    let jailed = false;
+    try {
+      jailed = await confirmJailed();
+    } catch {
+    }
+    if (holds.get(pubkey) !== hold) return;
+    if (jailed) {
+      holds.delete(pubkey);
+      return;
+    }
+    if (Date.now() >= deadline) {
+      holds.delete(pubkey);
+      onGiveUp?.();
+      return;
+    }
+    const timer = setTimeout(() => void tick(), config2.pollMs);
+    timer.unref?.();
+    hold.timer = timer;
+  };
+  void tick();
+}
+function releaseJailHolds() {
+  for (const hold of holds.values()) if (hold.timer) clearTimeout(hold.timer);
+  holds.clear();
+  blockedAt.clear();
+}
+function configureJailHold(next) {
+  config2 = { ...DEFAULTS, ...next };
+}
+
 // src-ts/http/client.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var HttpClient = class {
   baseUrl;
@@ -44608,7 +44626,6 @@ function classifyTransportError(err, url, method, timeoutMs) {
 }
 
 // src-ts/browser/keyLoader.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var NOT_AVAILABLE = "keyLoader is not available in the browser bundle \u2014 pass `agentKey` explicitly to Atbash.fromConfig or use `new Atbash(privkey, opts)`.";
 function resolveKeyPath(_input) {
@@ -44619,11 +44636,9 @@ function loadAgentFromFile(_keyPath) {
 }
 
 // src-ts/decision.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // src-ts/normalize.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 function wireText(raw2, fallback = "") {
   if (raw2 === null || raw2 === void 0) return fallback;
@@ -44735,7 +44750,6 @@ function canonicalAllow(data) {
 }
 
 // src-ts/opentel/events.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var SLOW_MS = 1500;
 var SUCCESS_SAMPLE_RATE = 10;
@@ -44791,7 +44805,6 @@ function recordEvent(e) {
 }
 
 // src-ts/browser/opentel/telemetry.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 function setupTelemetry(_config) {
 }
@@ -44805,7 +44818,6 @@ async function shutdownTelemetry() {
 }
 
 // src-ts/browser/userConfig.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var NOT_AVAILABLE2 = "userConfig file I/O is not available in the browser bundle.";
 function getConfigDir() {
@@ -44824,7 +44836,7 @@ function resolve(_key, flagValue) {
   return flagValue ?? "";
 }
 function forcedChainNetwork(flagValue) {
-  return flagValue === "public" || flagValue === "private" ? flagValue : void 0;
+  return flagValue === "private" ? flagValue : void 0;
 }
 function agentKeyFromEnv() {
   return "";
@@ -44834,6 +44846,7 @@ function strandedAgentKey() {
 }
 
 // src-ts/client.ts
+var AGENT_NOT_REGISTERED = "Agent not registered. Onboard the agent at the dashboard before submitting actions.";
 function generateToolCallId() {
   return `tc-${Date.now()}-${randomHex(4)}`;
 }
@@ -44843,15 +44856,13 @@ function resolveConstructorChain(options) {
   const hasBrid = options.blockchainRid !== void 0;
   if (hasNodeUrls !== hasBrid) {
     throw new Error(
-      'nodeUrls and blockchainRid must be provided together \u2014 passing one without the other 404s every chain request. Prefer `chain: PUBLIC_CHAIN | PRIVATE_CHAIN` or `network: "public" | "private"`.'
+      'nodeUrls and blockchainRid must be provided together \u2014 passing one without the other 404s every chain request. Prefer `chain: PRIVATE_CHAIN` or `network: "private"`.'
     );
   }
   if (hasNodeUrls && hasBrid) {
-    const brid = options.blockchainRid;
-    const derivedNetwork = options.network ?? (brid === PUBLIC_CHAIN.blockchainRid ? "public" : brid === PRIVATE_CHAIN.blockchainRid ? "private" : "private");
     return {
-      network: derivedNetwork,
-      blockchainRid: brid,
+      network: "private",
+      blockchainRid: options.blockchainRid,
       nodeUrls: options.nodeUrls
     };
   }
@@ -44991,10 +45002,9 @@ var Atbash = class _Atbash {
     _Atbash.environmentLogged = true;
     const brief = (rid) => rid ? `${rid.slice(0, 8)}\u2026` : "(unset)";
     this.logger.info?.(
-      `[atbash] environment \u2014 judge=${this.endpoint} publicChain=${brief(native.DEFAULT_BLOCKCHAIN_RID)} privateChain=${brief(native.DEFAULT_PRIVATE_BLOCKCHAIN_RID)} activeChain=${brief(this.blockchainRid)} responseSignatureCheck=${this.verifyPubKey ? "on" : "off"}`,
+      `[atbash] environment \u2014 judge=${this.endpoint} privateChain=${brief(native.DEFAULT_PRIVATE_BLOCKCHAIN_RID)} activeChain=${brief(this.blockchainRid)} responseSignatureCheck=${this.verifyPubKey ? "on" : "off"}`,
       {
         judgeEndpoint: this.endpoint,
-        publicBlockchainRid: native.DEFAULT_BLOCKCHAIN_RID,
         privateBlockchainRid: native.DEFAULT_PRIVATE_BLOCKCHAIN_RID,
         activeBlockchainRid: this.blockchainRid,
         responseSignatureCheck: Boolean(this.verifyPubKey)
@@ -45182,6 +45192,15 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
    * return the signed tx hex. The server broadcasts to chain.
    */
   async logToolCall(action, context = "", options = {}) {
+    return this._logToolCall(action, context, options, false);
+  }
+  /**
+   * `raisePreflightErrors` (the judge path, like Python's
+   * `raise_preflight_errors`): a failed registration check throws instead of
+   * becoming `{ success: false }`, so the caller can tell Atbash's "no"
+   * (not registered, or a 4xx) from an outage.
+   */
+  async _logToolCall(action, context, options, raisePreflightErrors) {
     const start = performance.now();
     recordCall("logToolCall", void 0, this.auth.pubkey);
     let exists;
@@ -45191,18 +45210,20 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
       });
     } catch (err) {
       recordDuration("logToolCall", performance.now() - start, "error");
+      if (raisePreflightErrors) throw err;
       return { success: false, toolCallId: null, error: errorMessage(err) };
     }
     if (!exists) {
       recordDuration("logToolCall", performance.now() - start, "error");
+      if (raisePreflightErrors) throw new JudgeRefusalError(AGENT_NOT_REGISTERED);
       return {
         success: false,
         toolCallId: null,
-        error: "Agent not registered. Onboard the agent at the dashboard before submitting actions."
+        error: AGENT_NOT_REGISTERED
       };
     }
     const toolCallId = generateToolCallId();
-    const brid = options.chainOpts?.blockchainRid || options.chainOpts?.network ? this.bridFromChainOpts(options.chainOpts) : await this.defaultOrgBrid() ?? this.blockchainRid;
+    const brid = await this.callBrid(options.chainOpts);
     const orgKey = options.orgEncryptionPubKey ?? this.orgEncryptionPubKey ?? this._orgKeyFromChain;
     try {
       const signedHex = orgKey ? signEncryptedToolCall(
@@ -45252,9 +45273,13 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
     if (!action?.trim()) {
       throw new Error("action is required and cannot be empty.");
     }
+    if (isJailHeld(this.auth.pubkey)) return this.localJailBlock();
+    const startedAt = Date.now();
     let chainOpts = options.chainOpts;
     if (options.orgName && this._explicitChain) {
-      chainOpts = options.chainOpts ?? { network: this._defaultChain.network };
+      chainOpts = options.chainOpts ?? {
+        blockchainRid: this._defaultChain.blockchainRid
+      };
     } else if (options.orgName && this.forcedNetwork()) {
       chainOpts = { network: this.forcedNetwork() };
     } else if (options.orgName) {
@@ -45264,8 +45289,7 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
       } else {
         const mapNetwork = await this.getActiveNetworkForOrg(options.orgName);
         if (mapNetwork) {
-          const chain = mapNetwork === "private" ? PRIVATE_CHAIN : PUBLIC_CHAIN;
-          this._chainCache.set(options.orgName, chain);
+          this._chainCache.set(options.orgName, chainForNetwork(mapNetwork));
           chainOpts = { network: mapNetwork };
         } else if (!chainOpts?.blockchainRid) {
           const resolved = await this.resolveChainFromMap(
@@ -45276,12 +45300,13 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
         }
       }
     }
-    const brid = this.bridFromChainOpts(chainOpts);
-    const logResult = await this.logToolCall(action, context, {
-      toolName: options.toolName,
-      toolArgsJson: options.toolArgsJson,
-      chainOpts
-    });
+    const brid = await this.callBrid(chainOpts);
+    const logResult = await this._logToolCall(
+      action,
+      context,
+      { toolName: options.toolName, toolArgsJson: options.toolArgsJson, chainOpts },
+      true
+    );
     if (!logResult.success || !logResult.toolCallId || !logResult.signedHex) {
       throw new Error(logResult.error || "Failed to sign log_tool_call");
     }
@@ -45318,10 +45343,16 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
     if (verifyPubKey !== void 0) {
       verifyResponseSignature(bodyBytes, resp, verifyPubKey);
     }
-    const data = parseJson(bodyBytes);
+    const parsed = tryParseJson(bodyBytes.toString("utf-8"));
+    if (!isRecord2(parsed)) {
+      throw new JudgeRefusalError(
+        "The judge's reply could not be read, so the action was not approved."
+      );
+    }
+    const data = parsed;
     const rawScore = data.score;
     const score = typeof rawScore === "number" && Number.isInteger(rawScore) && rawScore >= 1 && rawScore <= 10 ? rawScore : void 0;
-    return {
+    const result = {
       verdict: normalizeVerdict(data.verdict),
       allow: this.executable(data),
       actionType: normalizeActionType(data.action_type),
@@ -45337,6 +45368,45 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
       score,
       refusal: explicitRefusal(data)
     };
+    return this.applyJailHold(result, startedAt);
+  }
+  /**
+   * Start a local hold on an enforced, on-chain BLOCK (the verdict that jails).
+   * Refuse any other result that lands while the agent is held, or whose
+   * request was already in flight when the block arrived: the server judged it
+   * on pre-jail state.
+   */
+  applyJailHold(result, startedAt) {
+    const pubkey = this.auth.pubkey;
+    if (result.verdict === "BLOCK" && result.enforced && result.onChain) {
+      recordBlock(pubkey);
+      holdJail(
+        pubkey,
+        () => this.getAgentPolicy(pubkey).then((p) => p.isJailed),
+        () => this.logger.warn?.("[atbash] local jail hold released: the chain did not confirm the jail in time")
+      );
+      return result;
+    }
+    return isJailHeld(pubkey) || blockedSince(pubkey, startedAt) ? this.localJailBlock(result.toolCallId) : result;
+  }
+  /** The server's jailed refusal, produced locally while the agent is held. */
+  localJailBlock(toolCallId = generateToolCallId()) {
+    return {
+      verdict: "BLOCK",
+      allow: false,
+      actionType: "block",
+      reason: "Agent is jailed. All actions are blocked until the organization owner unjails this agent.",
+      confidence: 1,
+      provider: "policy",
+      latencyMs: 0,
+      toolCallId,
+      onChain: false,
+      enforced: true,
+      enforcementMode: "enforce",
+      status: "",
+      score: void 0,
+      refusal: "BLOCK"
+    };
   }
   /* ── audit_tool_call (redact → judge → decision) ───────────────────────── */
   /**
@@ -45388,6 +45458,9 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
           reason: `The judge's reply failed its signature check (${errorMessage(err)}), so it was not trusted.`
         };
       }
+      if (err instanceof JudgeRefusalError || err instanceof AtbashAPIError && isRefusalStatus(err.status)) {
+        return { ...this.failJudge(errorMessage(err), err), allow: false };
+      }
       return this.failJudge(errorMessage(err), err);
     }
   }
@@ -45417,6 +45490,15 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
    * never overrides a refusal.
    */
   decide(result) {
+    const inner = this.decideInner(result);
+    if (!result.enforcementMode) return inner;
+    return {
+      ...inner,
+      enforced: result.enforced,
+      enforcementMode: result.enforcementMode
+    };
+  }
+  decideInner(result) {
     const toolCallId = result.toolCallId;
     const deny = (verdict, reason) => ({
       allow: false,
@@ -45530,17 +45612,17 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
   /**
    * Return the current status of a previously submitted judgment.
    *
-   * `chainOpts` names which chain the judgment was signed against. The
-   * server's GET /api/v1/judge routes to that chain when the SDK sends
-   * a `brid` query param; without it, the server falls back to public.
-   * Callers on the private chain must pass a `chainOpts` (or configure
-   * the client on the private chain) — otherwise polling a POSTed
-   * judgment on the private chain 404s at the server.
+   * `chainOpts` names which chain the judgment was signed against; the SDK
+   * sends it as the `brid` query param the server routes by. Without it the
+   * read uses the same chain `judgeAction` signs for (see `callBrid`): the
+   * client's org chain when it has an `orgName`, else the client default.
+   * A judgment signed with an explicit per-call `chainOpts` (or a per-call
+   * `orgName` on another chain) must be polled with that same `chainOpts`.
    */
   async getJudgmentStatus(judgmentId, agentPubkey, chainOpts) {
     const pk = agentPubkey ?? this.auth.pubkey;
-    const brid = this.bridFromChainOpts(chainOpts);
     return this.track("getJudgmentStatus", pk, async () => {
+      const brid = await this.callBrid(chainOpts);
       const resp = await this.http.get(
         "/api/v1/judge",
         { tool_call_id: judgmentId, agent_pubkey: pk, brid },
@@ -45745,21 +45827,16 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
     }
     if (resp.status !== 200) throw await this.httpError(resp);
     const data = await this.json(resp);
-    if (data?.network === "public" || data?.network === "private") {
-      return data.network;
-    }
+    if (data?.network === "private") return data.network;
     return null;
   }
   /**
    * Resolve which chain an org's actions should run against. Cached
    * per-client by orgName. Resolution order:
    *   1. `org_networks` map (authoritative).
-   *   2. Per-chain subscription fallback — public + private records
-   *      are fetched in parallel, with `is_private_blockchain` and
-   *      `assigned_at` reconciling mixed states.
-   * A lookup that names exactly one chain wins outright. Where it names
-   * neither (a brand-new org) or cannot choose between them, the client's
-   * configured default decides.
+   *   2. Subscription fallback — the org's subscription row on the chain.
+   * A lookup that finds the org wins outright. Where it finds nothing (a
+   * brand-new org), the client's configured default decides.
    */
   async resolveChainForOrg(orgName) {
     const name2 = orgName.trim();
@@ -45781,35 +45858,14 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
     const cached = this._chainCache.get(orgName);
     if (cached) return cached;
     if (mapNetwork) {
-      const chain = mapNetwork === "private" ? PRIVATE_CHAIN : PUBLIC_CHAIN;
-      this._chainCache.set(orgName, chain);
-      return chain;
-    }
-    const [pubRes, privRes] = await Promise.allSettled([
-      this.getOrgSubscription(orgName, "public"),
-      this.getOrgSubscription(orgName, "private")
-    ]);
-    const pubSub = pubRes.status === "fulfilled" ? pubRes.value : null;
-    const privSub = privRes.status === "fulfilled" ? privRes.value : null;
-    const failure = pubRes.status === "rejected" ? pubRes.reason : privRes.status === "rejected" ? privRes.reason : null;
-    if (pubSub?.is_private_blockchain) {
-      this._chainCache.set(orgName, PRIVATE_CHAIN);
-      return PRIVATE_CHAIN;
-    }
-    if (pubSub && privSub) {
-      const chain = privSub.assigned_at === pubSub.assigned_at ? this._defaultChain : privSub.assigned_at > pubSub.assigned_at ? PRIVATE_CHAIN : PUBLIC_CHAIN;
+      const chain = chainForNetwork(mapNetwork);
       this._chainCache.set(orgName, chain);
       return chain;
     }
-    if (pubSub) {
-      this._chainCache.set(orgName, PUBLIC_CHAIN);
-      return PUBLIC_CHAIN;
-    }
-    if (privSub?.is_private_blockchain) {
-      this._chainCache.set(orgName, PRIVATE_CHAIN);
-      return PRIVATE_CHAIN;
-    }
-    if (failure) {
+    let privSub;
+    try {
+      privSub = await this.getOrgSubscription(orgName, "private");
+    } catch (failure) {
       const detail = failure instanceof Error ? failure.message : String(failure);
       throw new AtbashAPIError(
         failure instanceof AtbashAPIError ? failure.status : 0,
@@ -45818,6 +45874,10 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
         this.endpoint
       );
     }
+    if (privSub) {
+      this._chainCache.set(orgName, PRIVATE_CHAIN);
+      return PRIVATE_CHAIN;
+    }
     this._chainCache.set(orgName, this._defaultChain);
     return this._defaultChain;
   }
@@ -45874,10 +45934,21 @@ config.json still holds an "agentKey" (${identity}), but a settings file no long
    */
   bridFromChainOpts(chainOpts) {
     if (chainOpts?.blockchainRid) return chainOpts.blockchainRid;
-    if (chainOpts?.network === "private") return PRIVATE_CHAIN.blockchainRid;
-    if (chainOpts?.network === "public") return PUBLIC_CHAIN.blockchainRid;
+    if (chainOpts?.network) return chainForNetwork(chainOpts.network).blockchainRid;
     return this.blockchainRid;
   }
+  /**
+   * The chain one call's transactions are signed for: the per-call override
+   * when given, otherwise the client's org, otherwise the client default.
+   * log_tool_call, judge_action and the judgment-status read all use this, so
+   * a request never pairs transactions signed for two different chains.
+   */
+  async callBrid(chainOpts) {
+    if (chainOpts?.blockchainRid || chainOpts?.network) {
+      return this.bridFromChainOpts(chainOpts);
+    }
+    return await this.defaultOrgBrid() ?? this.blockchainRid;
+  }
   /**
    * Resolve the dashboard chain used by agent metadata/policy reads.
    * Explicit per-call network overrides win; otherwise use the supplied org
@@ -46185,10 +46256,6 @@ function tryParseJson(text) {
     return void 0;
   }
 }
-function parseJson(bytes) {
-  const parsed = tryParseJson(bytes.toString("utf-8"));
-  return parsed === void 0 ? {} : parsed;
-}
 function requestPath(url) {
   if (!url) return void 0;
   try {
@@ -46227,7 +46294,6 @@ function truncate(text, limit = MAX_ACTION_LEN) {
 }
 
 // src-ts/browser/key-path.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var KEY_FILENAMES = ["guard-client-key", "atbash-client-key"];
 var unavailable = (name2) => {
@@ -46241,7 +46307,6 @@ function chooseKeyPath(_input, _exists) {
 }
 
 // src-ts/redact.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 function redactJsonStrings(value) {
   if (typeof value === "string") {
@@ -46261,7 +46326,6 @@ function redactJsonStrings(value) {
 }
 
 // src-ts/signature.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 function verifyJudgeResponseSignature(bodyBytes, signatureHex, pubKeyHex) {
   if (!signatureHex) {
@@ -46285,7 +46349,6 @@ function verifyJudgeResponseSignature(bodyBytes, signatureHex, pubKeyHex) {
 }
 
 // src-ts/memory/boot-sync-message.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var BOOT_SYNC_HINT = "check the chain endpoint and orgName if the cause above does not explain it";
 function bootSyncFailureLine(cause) {
@@ -46298,11 +46361,9 @@ function bootSyncFailureLine(cause) {
 }
 
 // src-ts/memory/index.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 
 // src-ts/browser/memory-crypto.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var { Buffer: Buffer4 } = index;
 var HKDF_INFO = new TextEncoder().encode("atbash:memory-encryption");
@@ -46378,7 +46439,6 @@ async function decryptMemoryContent2(ciphertext, nonce, key3) {
 }
 
 // src-ts/browser/memory-scan.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var STUB_MSG2 = "not available in @atbash/sdk browser bundle \u2014 scan memory server-side";
 async function scanMemory(_entry, _auth, _opts) {
@@ -46389,7 +46449,6 @@ async function scanMemoryBatch(_entries, _auth, _opts) {
 }
 
 // src-ts/browser/memory-chain.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var STUB_MSG3 = "not available in @atbash/sdk browser bundle \u2014 commit/rollback memory server-side";
 async function commitMemoryVersion(_plaintext, _auth, _opts) {
@@ -46418,7 +46477,6 @@ async function rollbackMemory(_toId, _reason, _auth, _opts) {
 }
 
 // src-ts/browser/memory-classifier.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var STUB_MSG4 = "not available in @atbash/sdk browser bundle \u2014 classify memory writes server-side";
 var DEFAULT_MEMORY_WRITE_TOOL_NAMES = [
@@ -46442,15 +46500,22 @@ function classifyMemoryWrite(_event, _ctx, _opts = {}) {
 }
 
 // src-ts/browser/memory-guard.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var STUB_MSG5 = "not available in @atbash/sdk browser bundle \u2014 guard memory writes agent-side";
 async function guardMemoryWrite(_input) {
   throw new Error(`guardMemoryWrite ${STUB_MSG5}`);
 }
 
+// src-ts/browser/memory-slot.ts
+init_define_ATBASH_PRIVATE_NODE_URLS();
+var unavailable2 = (name2) => {
+  throw new Error(`${name2} is not available in the browser bundle`);
+};
+function memorySlotOf(_target, _home, _root2, _extraHomes, _p) {
+  return unavailable2("memorySlotOf");
+}
+
 // src-ts/memory/sync.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var MemoryIntegrityError = class extends Error {
   constructor(id, reason) {
@@ -46484,9 +46549,8 @@ async function syncLocalMemory(auth, pointer, opts = {}) {
 }
 
 // src-ts/browser/memory-pointer-store.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
-var unavailable2 = (name2) => {
+var unavailable3 = (name2) => {
   throw new Error(`${name2} is not available in the browser bundle`);
 };
 var PointerStore = class {
@@ -46500,24 +46564,22 @@ var PointerStore = class {
   }
 };
 function defaultPointerPath(_workspaceDir) {
-  return unavailable2("defaultPointerPath");
+  return unavailable3("defaultPointerPath");
 }
 
 // src-ts/browser/memory-file-logger.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
-var unavailable3 = (name2) => {
+var unavailable4 = (name2) => {
   throw new Error(`${name2} is not available in the browser bundle`);
 };
 function createFileLogger(_logFilePath, _hostLogger) {
-  return unavailable3("createFileLogger");
+  return unavailable4("createFileLogger");
 }
 function defaultPluginLogPath(_workspaceDir) {
-  return unavailable3("defaultPluginLogPath");
+  return unavailable4("defaultPluginLogPath");
 }
 
 // src-ts/browser/memory-read-classifier.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
 var STUB_MSG6 = "not available in @atbash/sdk browser bundle \u2014 classify memory reads server-side";
 var DEFAULT_MEMORY_READ_TOOL_NAMES = [
@@ -46529,9 +46591,8 @@ function classifyMemoryRead(_event, _ctx, _opts = {}) {
 }
 
 // src-ts/browser/memory-guard-manager.ts
-init_define_ATBASH_CHROMIA_NODE_URLS();
 init_define_ATBASH_PRIVATE_NODE_URLS();
-var unavailable4 = (name2) => {
+var unavailable5 = (name2) => {
   throw new Error(`${name2} is not available in the browser bundle`);
 };
 var MemoryGuardManager = class {
@@ -46551,7 +46612,7 @@ var MemoryGuardManager = class {
   }
 };
 function createMemoryGuardManager(_opts) {
-  return unavailable4("createMemoryGuardManager");
+  return unavailable5("createMemoryGuardManager");
 }
 
 // src-ts/index.ts
@@ -46613,8 +46674,6 @@ export {
   Atbash,
   AtbashAPIError,
   BOOT_SYNC_HINT,
-  DEFAULT_BLOCKCHAIN_RID,
-  DEFAULT_CHROMIA_NODE_URLS,
   DEFAULT_ENDPOINT,
   DEFAULT_MEMORY_PATH_PATTERNS,
   DEFAULT_MEMORY_READ_TOOL_NAMES,
@@ -46622,11 +46681,11 @@ export {
   EciesDomain,
   HttpClient,
   HttpTransportError,
+  JudgeRefusalError,
   KEY_FILENAMES,
   MemoryGuardManager,
   MemoryIntegrityError,
   PRIVATE_CHAIN,
-  PUBLIC_CHAIN,
   PointerStore,
   SignatureVerificationError,
   bootSyncFailureLine,
@@ -46640,6 +46699,7 @@ export {
   columnAad,
   commitMemoryVersion,
   configureEvents,
+  configureJailHold,
   containsEvasionCharacters2 as containsEvasionCharacters,
   containsSecret2 as containsSecret,
   createFileLogger,
@@ -46668,12 +46728,14 @@ export {
   getRollbackHistory,
   guardMemoryWrite,
   isEnvelope,
+  isJailHeld,
   isValidPrivateKey2 as isValidPrivateKey,
   keyFingerprintOf,
   keyPathCandidates,
   loadAgent2 as loadAgent,
   loadAgentFromFile,
   loadUserConfig,
+  memorySlotOf,
   normalizeActionForHash,
   normalizeActionType,
   normalizeForMatching2 as normalizeForMatching,
@@ -46687,6 +46749,7 @@ export {
   recordEvent,
   redactJsonStrings,
   redactSecrets2 as redactSecrets,
+  releaseJailHolds,
   resolve,
   resolveKeyPath,
   rollbackMemory,