@ftptech/canton-agent-wallet 1.2.0 → 1.3.1

package/dist/swap.d.ts

@@ -0,0 +1,205 @@
+/**
+ * swap — a self-custody swap primitive over Tradecraft (an AMM DEX on Canton).
+ * A Tradecraft swap is just an on-ledger transfer of the input token to a
+ * per-pair pool party (`tc-swp_{IN}-{OUT}::<amm_cid>`); the pool sends the
+ * counter-asset back within a minute or two, as a transfer OFFER when the output
+ * is not pre-approved (which `claimAll` accepts) or DIRECTLY when it is.
+ *
+ * SAFETY MODEL (what actually holds):
+ *  - The recipient is ALWAYS a pool party derived from a trusted `amm_cid`
+ *    (config/constant), never a client- or 402-supplied address. This is the one
+ *    unconditional guarantee.
+ *  - Slippage protection is OPTIONAL: Tradecraft reads the minimum from the
+ *    transfer's memo field, so it is attached only when a memo key is configured
+ *    (`ticket.memoKey`, from CANTON_AGENT_TRADECRAFT_MEMO_KEY). With NO key the
+ *    swap fills at MARKET price — the proven bare flow — and `swap` warns.
+ *  - Output preapproval is ON by default (`--no-preapprove` opts out), because a
+ *    Tradecraft pool delivers a registry output only to a PREAPPROVED receiver.
+ *    Tradecraft's docs note the hazard that on a DIRECT settlement an
+ *    un-preapproved output can be "consumed on fill with no funds returned",
+ *    which is exactly what the auto-provisioned preapproval prevents. An
+ *    unfilled trade returns
+ *    the input either way.
+ */
+import { RelayClient } from "./relay-client.js";
+import { type AgentWallet } from "./store.js";
+import type { HashBindingOptions } from "./verify-prepared.js";
+/** A registry instrument, or `null` for native Canton Coin. */
+export type SwapInstrument = {
+    admin: string;
+    id: string;
+} | null;
+/** Everything needed to execute one swap, resolved up front (locally, or by the
+ *  facilitator /swap fee-ticket which knows the network's registrars). */
+export interface SwapTicket {
+    /** The pool party to send the input to: `tc-swp_{IN}-{OUT}::<amm_cid>`. */
+    poolParty: string;
+    /** Slippage-protected minimum output, as a ledger decimal string. Always
+     *  computed for display; only ENFORCED when `memoKey` is set (see below). */
+    minOutput: string;
+    /** The transfer-meta key Tradecraft reads the minimum from ("the memo field").
+     *  When set, the minimum is attached to the input transfer and the pool honors
+     *  it (below-minimum → the trade fails and the input returns). When UNDEFINED,
+     *  the swap executes at market price with no slippage protection — exactly the
+     *  bare "send to the pool" flow, which works. Tradecraft's docs: the minimum is
+     *  the first text in the memo field, a decimal with ≤10 places. */
+    memoKey?: string;
+    /** The raw quote (estimated output) that produced `minOutput`. */
+    quote: string;
+    /** The instrument being sent in (null = CC). */
+    inInstrument: SwapInstrument;
+    /** The instrument expected back (null = CC). */
+    outInstrument: SwapInstrument;
+}
+/** Per-input-token advisory minimums, mirrored from the Tradecraft web app (there
+ *  is NO API endpoint for these — they are a hardcoded frontend constant). A trade
+ *  below the minimum is ADVISORY only: the pool safely returns the funds if it will
+ *  not fill (no loss), and amounts slightly under still often fill. `swap` warns
+ *  when the amount is under the listed minimum but does not block. Symbols not
+ *  listed have no advertised minimum. */
+export declare const TRADECRAFT_MIN_INPUT: Readonly<Record<string, number>>;
+/** The advisory minimum input for `symbol` (canonical), or undefined if none is
+ *  advertised. Case-sensitive on the canonical symbol. */
+export declare function tradecraftMinInput(symbol: string): number | undefined;
+/** Derive the Tradecraft pool party for a pair: `tc-swp_{TOKEN1}-{TOKEN2}::<ammCid>`.
+ *  `token1`/`token2` MUST be in the pool's CANONICAL order (as listed by /pools),
+ *  NOT the swap direction: Tradecraft has one pool party per pair that accepts
+ *  either token and returns the other, so `tc-swp_CC-USDCx` serves both CC→USDCx
+ *  and USDCx→CC. Deriving from the swap direction (`{in}-{out}`) yields a
+ *  non-existent party for one of the two directions. The amm_cid is a single
+ *  AMM-rules contract shared by every pair. Pure. */
+export declare function derivePoolParty(token1: string, token2: string, ammCid: string): string;
+/** One pool row from Tradecraft `/v1/pools`, reduced to what a swap needs: the
+ *  pair in the pool party's CANONICAL order. That order is the one in
+ *  `lp_token_name` ("TC {TOKEN1}-{TOKEN2} LP"), which is what the on-ledger pool
+ *  party `tc-swp_{TOKEN1}-{TOKEN2}::<ammCid>` uses — NOT the row's `token1`/`token2`
+ *  fields, which are ordered differently for 9 of 34 live pools (e.g. the CBTC/CC
+ *  pool lists token1=CC,token2=CBTC but its party and LP name are CBTC-CC). */
+export interface TradecraftPool {
+    /** First symbol of the pool party, from lp_token_name. */
+    token1: string;
+    /** Second symbol of the pool party, from lp_token_name. */
+    token2: string;
+}
+/** Parse `/v1/pools` into rows carrying each pool's CANONICAL pair order (from
+ *  `lp_token_name`, falling back to `token1`/`token2`). Tolerates a bare array or
+ *  `{pools:[…]}`. Exported for unit testing. */
+export declare function parseTradecraftPools(body: unknown): TradecraftPool[];
+/** Find the pool whose pair equals {a, b} (case-insensitive, unordered) and
+ *  return its CANONICAL token order (the pool party's order). Throws when no such
+ *  pool exists — exactly the "send to a non-existent pool party" mistake we must
+ *  not make. Exported for unit testing. */
+export declare function resolvePoolPair(pools: TradecraftPool[], a: string, b: string): {
+    token1: string;
+    token2: string;
+};
+/** Slippage-protected minimum output: `quote * (1 - slippagePct/100)`, floored to
+ *  10 decimals (every DA-Utility instrument and Canton Coin use 10). Floored, not
+ *  rounded — the minimum must never sit ABOVE the true floor, or an honest fill
+ *  could be rejected. `slippagePct` must be in [0, 100). Pure. */
+export declare function computeMinOutput(quote: number, slippagePct: number): string;
+/** Parse Tradecraft's `/v1/quoteForFixedInput/{IN}/{OUT}?givingAmount=N` →
+ *  `{ user_gets: number }`. Exported for unit testing the shape. */
+export declare function parseTradecraftQuote(body: unknown): number;
+/** Fetch a live quote from Tradecraft's public REST and build a ticket locally
+ *  (the `--no-fee` / test path). The fee path gets its ticket from the
+ *  facilitator /swap endpoint instead. */
+export declare function buildLocalTicket(opts: {
+    tradecraftApi: string;
+    ammCid: string;
+    /** The memo key that enforces the minimum; omit to swap at market. */
+    memoKey?: string;
+    inSymbol: string;
+    outSymbol: string;
+    amount: string;
+    slippagePct: number;
+    inInstrument: SwapInstrument;
+    outInstrument: SwapInstrument;
+    fetchImpl?: typeof globalThis.fetch;
+}): Promise<SwapTicket>;
+/** Parse a swap-endpoint ticket response into a SwapTicket, validating the fields
+ *  the local execute path relies on. Extra fields (e.g. ammCid) are ignored. */
+export declare function parseEndpointTicket(body: unknown): SwapTicket;
+/**
+ * Validate an endpoint-returned ticket against LOCALLY-TRUSTED values before it is
+ * ever executed. The swap endpoint is UNTRUSTED for money safety: the ticket's
+ * `poolParty` becomes the transfer receiver and its instruments become the assets
+ * moved, and verify-before-sign only pins those to caller INTENT — so if intent
+ * came from the endpoint unchecked, a malicious/compromised endpoint could name an
+ * attacker party and drain the swap amount. We therefore pin, client-side:
+ *   - `poolParty` MUST be `tc-swp_{A}-{B}::<trustedAmmCid>` for the two canonical
+ *     symbols the caller chose (either pair order) — its namespace equals our own
+ *     trusted amm_cid, which a hostile endpoint cannot forge, and its localpart is
+ *     the Tradecraft pool naming for exactly this pair;
+ *   - the in/out instruments MUST equal the ones the caller resolved locally from
+ *     KNOWN_INSTRUMENTS.
+ * The endpoint is then trusted ONLY for the price/minimum (a bad one loses at most
+ * a bad fill, which returns the input) — never for where the funds go.
+ */
+export declare function assertTicketMatchesIntent(ticket: SwapTicket, expect: {
+    inCanon: string;
+    outCanon: string;
+    inInstrument: SwapInstrument;
+    outInstrument: SwapInstrument;
+    trustedAmmCid: string;
+}): void;
+/** Fetch a swap ticket from OUR x402-gated `/swap` endpoint (the default path): the
+ *  managed router that stays current with Tradecraft's pools/amm_cid/minimums and
+ *  charges a small fee. `payingFetch` is a `makePayingFetch` result, so the 402 is
+ *  paid automatically from the agent's wallet. The endpoint is UNTRUSTED for money
+ *  safety — the returned ticket is validated against the caller's locally-trusted
+ *  amm_cid + instruments (see assertTicketMatchesIntent) before it is returned, so
+ *  a hostile endpoint can only give a bad price, never redirect funds. */
+export declare function fetchTicketFromEndpoint(opts: {
+    swapUrl: string;
+    inSymbol: string;
+    outSymbol: string;
+    amount: string;
+    slippagePct: number;
+    payingFetch: typeof globalThis.fetch;
+    /** Locally-resolved input instrument (null = CC) the ticket MUST match. */
+    inInstrument: SwapInstrument;
+    /** Locally-resolved output instrument (null = CC) the ticket MUST match. */
+    outInstrument: SwapInstrument;
+    /** The caller's OWN trusted amm_cid the pool party MUST derive from. */
+    trustedAmmCid: string;
+}): Promise<SwapTicket>;
+export interface ExecuteSwapOpts {
+    amount: string;
+    ticket: SwapTicket;
+    apiKey?: string | undefined;
+    hashBinding?: HashBindingOptions;
+    wallet?: AgentWallet;
+    relay?: RelayClient;
+    /**
+     * Self-provision a TransferPreapproval for the OUTPUT instrument before sending
+     * the input, so the pool can deliver the counter-asset DIRECTLY. This is
+     * REQUIRED for a registry output: a Tradecraft pool holds no preapproval for the
+     * payer and does not create a return offer, so without our preapproval the pool
+     * keeps the swapped-out asset (the trade does not complete on our side). Defaults
+     * to ON for a registry output (`outInstrument` set) and is a no-op for a CC
+     * output (Amulet needs none). Set false only to skip it deliberately (e.g. the
+     * preapproval already exists, or a test).
+     */
+    preapproveOutput?: boolean;
+    /** Injectable sleep + poll bounds for the return-claim (tests). */
+    sleep?: (ms: number) => Promise<void>;
+    claimAttempts?: number;
+    claimIntervalMs?: number;
+}
+export interface SwapResult {
+    /** updateId of the input transfer we sent to the pool. */
+    sentUpdateId: string;
+    /** How many returning transfers we claimed (0 if the pool settled directly to
+     *  our preapproval, or if it has not arrived within the poll window). */
+    claimed: number;
+    claimedUpdateIds: string[];
+}
+/**
+ * Execute a swap from a resolved ticket: (1) pre-approve the output instrument so
+ * the pool's return can never be a consumed-input-no-return loss, (2) send the
+ * input to the pool with the minimum in meta, (3) claim the returning transfer if
+ * it arrives as an offer rather than settling directly.
+ */
+export declare function executeSwap(opts: ExecuteSwapOpts): Promise<SwapResult>;
+//# sourceMappingURL=swap.d.ts.map

package/dist/swap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"swap.d.ts","sourceRoot":"","sources":["../src/swap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIhD,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,+DAA+D;AAC/D,MAAM,MAAM,cAAc,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC;AAElE;0EAC0E;AAC1E,MAAM,WAAW,UAAU;IACzB,2EAA2E;IAC3E,SAAS,EAAE,MAAM,CAAC;IAClB;iFAC6E;IAC7E,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;uEAKmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,YAAY,EAAE,cAAc,CAAC;IAC7B,gDAAgD;IAChD,aAAa,EAAE,cAAc,CAAC;CAC/B;AAID;;;;;yCAKyC;AACzC,eAAO,MAAM,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAejE,CAAC;AAEF;0DAC0D;AAC1D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErE;AAED;;;;;;qDAMqD;AACrD,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,MAAM,CAER;AAED;;;;;+EAK+E;AAC/E,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;CAChB;AAUD;;gDAEgD;AAChD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,cAAc,EAAE,CAuBpE;AAED;;;2CAG2C;AAC3C,wBAAgB,eAAe,CAC7B,KAAK,EAAE,cAAc,EAAE,EACvB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,GACR;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAapC;AAED;;;kEAGkE;AAClE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAmB3E;AAED;oEACoE;AACpE,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAW1D;AAED;;0CAE0C;AAC1C,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,cAAc,CAAC;IAC7B,aAAa,EAAE,cAAc,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACrC,GAAG,OAAO,CAAC,UAAU,CAAC,CAoCtB;AAYD;gFACgF;AAChF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,CAiB7D;AAQD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE;IACN,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,cAAc,CAAC;IAC7B,aAAa,EAAE,cAAc,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;CACvB,GACA,IAAI,CAyBN;AAED;;;;;;0EAM0E;AAC1E,wBAAsB,uBAAuB,CAAC,IAAI,EAAE;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACrC,2EAA2E;IAC3E,YAAY,EAAE,cAAc,CAAC;IAC7B,4EAA4E;IAC5E,aAAa,EAAE,cAAc,CAAC;IAC9B,wEAAwE;IACxE,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,UAAU,CAAC,CAqBtB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,mEAAmE;IACnE,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,0DAA0D;IAC1D,YAAY,EAAE,MAAM,CAAC;IACrB;6EACyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAKD;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CA2E5E"}

package/dist/swap.js

@@ -0,0 +1,361 @@
+/**
+ * swap — a self-custody swap primitive over Tradecraft (an AMM DEX on Canton).
+ * A Tradecraft swap is just an on-ledger transfer of the input token to a
+ * per-pair pool party (`tc-swp_{IN}-{OUT}::<amm_cid>`); the pool sends the
+ * counter-asset back within a minute or two, as a transfer OFFER when the output
+ * is not pre-approved (which `claimAll` accepts) or DIRECTLY when it is.
+ *
+ * SAFETY MODEL (what actually holds):
+ *  - The recipient is ALWAYS a pool party derived from a trusted `amm_cid`
+ *    (config/constant), never a client- or 402-supplied address. This is the one
+ *    unconditional guarantee.
+ *  - Slippage protection is OPTIONAL: Tradecraft reads the minimum from the
+ *    transfer's memo field, so it is attached only when a memo key is configured
+ *    (`ticket.memoKey`, from CANTON_AGENT_TRADECRAFT_MEMO_KEY). With NO key the
+ *    swap fills at MARKET price — the proven bare flow — and `swap` warns.
+ *  - Output preapproval is ON by default (`--no-preapprove` opts out), because a
+ *    Tradecraft pool delivers a registry output only to a PREAPPROVED receiver.
+ *    Tradecraft's docs note the hazard that on a DIRECT settlement an
+ *    un-preapproved output can be "consumed on fill with no funds returned",
+ *    which is exactly what the auto-provisioned preapproval prevents. An
+ *    unfilled trade returns
+ *    the input either way.
+ */
+import { RelayClient } from "./relay-client.js";
+import { withdraw } from "./withdraw.js";
+import { selfProvisionRegistryPreapproval, claimAll } from "./tx.js";
+import { resolveHashBinding } from "./hash-binding.js";
+import { loadWallet } from "./store.js";
+const AMM_PAIR_SEP = "-";
+/** Per-input-token advisory minimums, mirrored from the Tradecraft web app (there
+ *  is NO API endpoint for these — they are a hardcoded frontend constant). A trade
+ *  below the minimum is ADVISORY only: the pool safely returns the funds if it will
+ *  not fill (no loss), and amounts slightly under still often fill. `swap` warns
+ *  when the amount is under the listed minimum but does not block. Symbols not
+ *  listed have no advertised minimum. */
+export const TRADECRAFT_MIN_INPUT = {
+    CC: 6,
+    USDCx: 1,
+    USDXLR: 1,
+    cETH: 6e-4,
+    CBTC: 1.25e-5,
+    HANDL: 100,
+    EDELx: 75,
+    HECTO: 500,
+    "FRXUSD.B": 1,
+    eXAG: 0.017,
+    eXAU: 2.5e-4,
+    TRKXRWA: 0.015,
+    USDM1: 1,
+    USTY: 1,
+};
+/** The advisory minimum input for `symbol` (canonical), or undefined if none is
+ *  advertised. Case-sensitive on the canonical symbol. */
+export function tradecraftMinInput(symbol) {
+    return TRADECRAFT_MIN_INPUT[symbol];
+}
+/** Derive the Tradecraft pool party for a pair: `tc-swp_{TOKEN1}-{TOKEN2}::<ammCid>`.
+ *  `token1`/`token2` MUST be in the pool's CANONICAL order (as listed by /pools),
+ *  NOT the swap direction: Tradecraft has one pool party per pair that accepts
+ *  either token and returns the other, so `tc-swp_CC-USDCx` serves both CC→USDCx
+ *  and USDCx→CC. Deriving from the swap direction (`{in}-{out}`) yields a
+ *  non-existent party for one of the two directions. The amm_cid is a single
+ *  AMM-rules contract shared by every pair. Pure. */
+export function derivePoolParty(token1, token2, ammCid) {
+    return `tc-swp_${token1}${AMM_PAIR_SEP}${token2}::${ammCid}`;
+}
+/** Parse the canonical pair order out of an `lp_token_name` like "TC CBTC/CC LP".
+ *  Returns undefined when it does not match (caller falls back). */
+function parseLpName(lp) {
+    if (typeof lp !== "string")
+        return undefined;
+    const m = lp.match(/^TC\s+(\S+)\/(\S+)\s+LP$/);
+    return m ? { token1: m[1], token2: m[2] } : undefined;
+}
+/** Parse `/v1/pools` into rows carrying each pool's CANONICAL pair order (from
+ *  `lp_token_name`, falling back to `token1`/`token2`). Tolerates a bare array or
+ *  `{pools:[…]}`. Exported for unit testing. */
+export function parseTradecraftPools(body) {
+    const rows = Array.isArray(body)
+        ? body
+        : Array.isArray(body?.pools)
+            ? body.pools
+            : undefined;
+    if (!rows) {
+        throw new Error(`swap: unexpected Tradecraft /pools response ${JSON.stringify(body)}`);
+    }
+    const out = [];
+    for (const r of rows) {
+        const fromLp = parseLpName(r.lp_token_name);
+        if (fromLp) {
+            out.push(fromLp);
+            continue;
+        }
+        const t1 = r.token1;
+        const t2 = r.token2;
+        if (typeof t1 === "string" && typeof t2 === "string") {
+            out.push({ token1: t1, token2: t2 });
+        }
+    }
+    return out;
+}
+/** Find the pool whose pair equals {a, b} (case-insensitive, unordered) and
+ *  return its CANONICAL token order (the pool party's order). Throws when no such
+ *  pool exists — exactly the "send to a non-existent pool party" mistake we must
+ *  not make. Exported for unit testing. */
+export function resolvePoolPair(pools, a, b) {
+    const lo = a.toLowerCase();
+    const ro = b.toLowerCase();
+    for (const p of pools) {
+        const p1 = p.token1.toLowerCase();
+        const p2 = p.token2.toLowerCase();
+        if ((p1 === lo && p2 === ro) || (p1 === ro && p2 === lo)) {
+            return { token1: p.token1, token2: p.token2 };
+        }
+    }
+    throw new Error(`swap: no Tradecraft pool for the pair ${a}/${b} — check the symbols and that a pool exists`);
+}
+/** Slippage-protected minimum output: `quote * (1 - slippagePct/100)`, floored to
+ *  10 decimals (every DA-Utility instrument and Canton Coin use 10). Floored, not
+ *  rounded — the minimum must never sit ABOVE the true floor, or an honest fill
+ *  could be rejected. `slippagePct` must be in [0, 100). Pure. */
+export function computeMinOutput(quote, slippagePct) {
+    if (!Number.isFinite(quote) || quote < 0) {
+        throw new Error(`swap: invalid quote ${JSON.stringify(quote)}`);
+    }
+    if (!Number.isFinite(slippagePct) || slippagePct < 0 || slippagePct >= 100) {
+        throw new Error(`swap: slippage must be a percentage in [0, 100) (got ${JSON.stringify(slippagePct)})`);
+    }
+    const min = quote * (1 - slippagePct / 100);
+    // Floor to 10 decimal places by STRING TRUNCATION, never a float ×1e10 (which
+    // re-introduces noise: 0.693 * 1e10 === 6929999999.999…). Snap to 12 fractional
+    // places to absorb binary-float noise (0.693 → "0.693000000000"), then keep the
+    // first 10 fractional digits. Truncating (not rounding) keeps the result at or
+    // below the true minimum, so an honest fill is never rejected.
+    const fixed = min.toFixed(12); // always "<whole>.<12 digits>"
+    const [whole, frac12] = fixed.split(".");
+    const frac = frac12.slice(0, 10).replace(/0+$/, "");
+    return frac.length > 0 ? `${whole}.${frac}` : whole;
+}
+/** Parse Tradecraft's `/v1/quoteForFixedInput/{IN}/{OUT}?givingAmount=N` →
+ *  `{ user_gets: number }`. Exported for unit testing the shape. */
+export function parseTradecraftQuote(body) {
+    if (typeof body !== "object" ||
+        body === null ||
+        typeof body.user_gets !== "number") {
+        throw new Error(`swap: unexpected Tradecraft quote response ${JSON.stringify(body)}`);
+    }
+    return body.user_gets;
+}
+/** Fetch a live quote from Tradecraft's public REST and build a ticket locally
+ *  (the `--no-fee` / test path). The fee path gets its ticket from the
+ *  facilitator /swap endpoint instead. */
+export async function buildLocalTicket(opts) {
+    const f = opts.fetchImpl ?? globalThis.fetch;
+    const base = opts.tradecraftApi.replace(/\/$/, "");
+    // Tradecraft's edge (Cloudflare) 403s a request with no User-Agent — node's
+    // fetch sends none by default. A plain UA is enough.
+    const get = async (path) => {
+        const res = await f(`${base}${path}`, {
+            headers: { "user-agent": "canton-agent-wallet", accept: "application/json" },
+        });
+        if (!res.ok) {
+            throw new Error(`swap: Tradecraft GET ${path} failed (HTTP ${res.status})`);
+        }
+        return res.json();
+    };
+    // Resolve the pool's CANONICAL pair order from /pools so the pool party is
+    // correct for BOTH swap directions (one party per pair serves either way). This
+    // also validates the pool exists before we send any funds.
+    const pools = parseTradecraftPools(await get("/v1/pools"));
+    const { token1, token2 } = resolvePoolPair(pools, opts.inSymbol, opts.outSymbol);
+    // The quote IS directional: giving `inSymbol`, receiving `outSymbol`.
+    const userGets = parseTradecraftQuote(await get(`/v1/quoteForFixedInput/${encodeURIComponent(opts.inSymbol)}/` +
+        `${encodeURIComponent(opts.outSymbol)}?givingAmount=${encodeURIComponent(opts.amount)}`));
+    return {
+        poolParty: derivePoolParty(token1, token2, opts.ammCid),
+        minOutput: computeMinOutput(userGets, opts.slippagePct),
+        ...(opts.memoKey ? { memoKey: opts.memoKey } : {}),
+        quote: String(userGets),
+        inInstrument: opts.inInstrument,
+        outInstrument: opts.outInstrument,
+    };
+}
+/** Validate a value as a SwapInstrument ({admin,id} or null). */
+function asSwapInstrument(v) {
+    if (v === null || v === undefined)
+        return null;
+    const o = v;
+    if (typeof o.admin === "string" && typeof o.id === "string") {
+        return { admin: o.admin, id: o.id };
+    }
+    throw new Error(`swap: endpoint returned a malformed instrument ${JSON.stringify(v)}`);
+}
+/** Parse a swap-endpoint ticket response into a SwapTicket, validating the fields
+ *  the local execute path relies on. Extra fields (e.g. ammCid) are ignored. */
+export function parseEndpointTicket(body) {
+    const b = body;
+    if (typeof b?.poolParty !== "string" ||
+        typeof b?.minOutput !== "string" ||
+        typeof b?.quote !== "string") {
+        throw new Error(`swap: malformed ticket from endpoint ${JSON.stringify(body)}`);
+    }
+    return {
+        poolParty: b.poolParty,
+        minOutput: b.minOutput,
+        ...(typeof b.memoKey === "string" ? { memoKey: b.memoKey } : {}),
+        quote: b.quote,
+        inInstrument: asSwapInstrument(b.inInstrument),
+        outInstrument: asSwapInstrument(b.outInstrument),
+    };
+}
+/** True when two SwapInstruments are the same (both null, or same admin+id). */
+function sameInstrument(a, b) {
+    if (a === null || b === null)
+        return a === b;
+    return a.admin === b.admin && a.id === b.id;
+}
+/**
+ * Validate an endpoint-returned ticket against LOCALLY-TRUSTED values before it is
+ * ever executed. The swap endpoint is UNTRUSTED for money safety: the ticket's
+ * `poolParty` becomes the transfer receiver and its instruments become the assets
+ * moved, and verify-before-sign only pins those to caller INTENT — so if intent
+ * came from the endpoint unchecked, a malicious/compromised endpoint could name an
+ * attacker party and drain the swap amount. We therefore pin, client-side:
+ *   - `poolParty` MUST be `tc-swp_{A}-{B}::<trustedAmmCid>` for the two canonical
+ *     symbols the caller chose (either pair order) — its namespace equals our own
+ *     trusted amm_cid, which a hostile endpoint cannot forge, and its localpart is
+ *     the Tradecraft pool naming for exactly this pair;
+ *   - the in/out instruments MUST equal the ones the caller resolved locally from
+ *     KNOWN_INSTRUMENTS.
+ * The endpoint is then trusted ONLY for the price/minimum (a bad one loses at most
+ * a bad fill, which returns the input) — never for where the funds go.
+ */
+export function assertTicketMatchesIntent(ticket, expect) {
+    const wantA = derivePoolParty(expect.inCanon, expect.outCanon, expect.trustedAmmCid);
+    const wantB = derivePoolParty(expect.outCanon, expect.inCanon, expect.trustedAmmCid);
+    if (ticket.poolParty !== wantA && ticket.poolParty !== wantB) {
+        throw new Error(`swap: endpoint returned pool party ${JSON.stringify(ticket.poolParty)} which is not the ` +
+            `trusted ${expect.inCanon}/${expect.outCanon} pool — refusing (a compromised endpoint ` +
+            `cannot redirect the swap: the pool must be tc-swp of this pair under our own amm_cid)`);
+    }
+    if (!sameInstrument(ticket.inInstrument, expect.inInstrument)) {
+        throw new Error(`swap: endpoint returned a different input instrument than requested — refusing`);
+    }
+    if (!sameInstrument(ticket.outInstrument, expect.outInstrument)) {
+        throw new Error(`swap: endpoint returned a different output instrument than requested — refusing`);
+    }
+    if (!/^\d+(\.\d+)?$/.test(ticket.minOutput)) {
+        throw new Error(`swap: endpoint returned a non-numeric minOutput ${JSON.stringify(ticket.minOutput)} — refusing`);
+    }
+}
+/** Fetch a swap ticket from OUR x402-gated `/swap` endpoint (the default path): the
+ *  managed router that stays current with Tradecraft's pools/amm_cid/minimums and
+ *  charges a small fee. `payingFetch` is a `makePayingFetch` result, so the 402 is
+ *  paid automatically from the agent's wallet. The endpoint is UNTRUSTED for money
+ *  safety — the returned ticket is validated against the caller's locally-trusted
+ *  amm_cid + instruments (see assertTicketMatchesIntent) before it is returned, so
+ *  a hostile endpoint can only give a bad price, never redirect funds. */
+export async function fetchTicketFromEndpoint(opts) {
+    const base = opts.swapUrl.replace(/\/$/, "");
+    const url = `${base}/swap?in=${encodeURIComponent(opts.inSymbol)}` +
+        `&out=${encodeURIComponent(opts.outSymbol)}` +
+        `&amount=${encodeURIComponent(opts.amount)}` +
+        `&slippage=${encodeURIComponent(String(opts.slippagePct))}`;
+    const res = await opts.payingFetch(url);
+    if (!res.ok) {
+        const text = await res.text().catch(() => "");
+        throw new Error(`swap: endpoint ${base}/swap failed (HTTP ${res.status}) ${text.slice(0, 200)}`);
+    }
+    const ticket = parseEndpointTicket(await res.json());
+    assertTicketMatchesIntent(ticket, {
+        inCanon: opts.inSymbol,
+        outCanon: opts.outSymbol,
+        inInstrument: opts.inInstrument,
+        outInstrument: opts.outInstrument,
+        trustedAmmCid: opts.trustedAmmCid,
+    });
+    return ticket;
+}
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/**
+ * Execute a swap from a resolved ticket: (1) pre-approve the output instrument so
+ * the pool's return can never be a consumed-input-no-return loss, (2) send the
+ * input to the pool with the minimum in meta, (3) claim the returning transfer if
+ * it arrives as an offer rather than settling directly.
+ */
+export async function executeSwap(opts) {
+    const wallet = opts.wallet ?? loadWallet();
+    if (!wallet)
+        throw new Error("no wallet — run `create` first");
+    const relay = opts.relay ??
+        new RelayClient({ relayUrl: wallet.relayUrl, apiKey: opts.apiKey });
+    const hashBinding = opts.hashBinding ?? resolveHashBinding();
+    const { ticket } = opts;
+    // (1) OUTPUT PREAPPROVAL (direct settlement). REQUIRED for a registry output:
+    // the pool delivers the counter-asset only to a preapproved receiver, so without
+    // this the swapped-out asset never reaches us. Defaults ON for a registry output;
+    // a CC output needs none (native Amulet). Idempotent — skipped when one already
+    // exists. Opt out with preapproveOutput:false.
+    const wantPreapprove = opts.preapproveOutput ?? true;
+    if (wantPreapprove && ticket.outInstrument) {
+        const { admin, id } = ticket.outInstrument;
+        const status = await relay.preapprovalStatus(wallet.party, admin, id);
+        if (status.hasPreapproval !== true) {
+            await selfProvisionRegistryPreapproval(relay, wallet, {
+                instrumentId: { admin, id },
+                hashBinding,
+            });
+        }
+    }
+    // (2) SEND THE INPUT to the pool, carrying the slippage floor in the AMM's meta
+    // key. The ticket's pool party was derived from (or validated against, on the
+    // endpoint path via assertTicketMatchesIntent) the CALLER's trusted amm_cid, so
+    // it cannot have been redirected by an untrusted quote source.
+    const sent = await withdraw({
+        to: ticket.poolParty,
+        amount: opts.amount,
+        apiKey: opts.apiKey,
+        hashBinding,
+        // Attach the slippage floor ONLY when a memo key is configured; without it
+        // the swap executes at market price (the pool needs no meta to fill).
+        ...(ticket.memoKey ? { meta: { [ticket.memoKey]: ticket.minOutput } } : {}),
+        ...(ticket.inInstrument
+            ? {
+                instrumentAdmin: ticket.inInstrument.admin,
+                instrumentId: ticket.inInstrument.id,
+                // A pool holds no preapproval, so a registry INPUT settles via the
+                // two-step offer shape — opt verify-before-sign into it. CC input uses
+                // the Amulet path and needs no such opt-in.
+                allowRegistryOffer: true,
+            }
+            : {}),
+        wallet,
+        relay,
+    });
+    // (3) CLAIM THE RETURN. When we pre-approved a registry output the pool settles
+    // it DIRECTLY — nothing to accept — so skip the poll. Otherwise (a CC output, or
+    // preapproval opted out) the return may land as an offer; poll a few times since
+    // it arrives within ~1-2 minutes. `claimAll` accepts every pending offer.
+    const preapprovedRegistryOutput = wantPreapprove && ticket.outInstrument !== null;
+    const claimedUpdateIds = [];
+    if (!preapprovedRegistryOutput) {
+        const sleep = opts.sleep ?? defaultSleep;
+        const attempts = opts.claimAttempts ?? 6;
+        const intervalMs = opts.claimIntervalMs ?? 15_000;
+        for (let i = 0; i < attempts; i++) {
+            const r = await claimAll(relay, wallet, { hashBinding });
+            claimedUpdateIds.push(...r.updateIds);
+            if (r.claimed > 0)
+                break;
+            if (i < attempts - 1)
+                await sleep(intervalMs);
+        }
+    }
+    return {
+        sentUpdateId: sent.updateId,
+        claimed: claimedUpdateIds.length,
+        claimedUpdateIds,
+    };
+}
+//# sourceMappingURL=swap.js.map

package/dist/swap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"swap.js","sourceRoot":"","sources":["../src/swap.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,gCAAgC,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAoB,MAAM,YAAY,CAAC;AA6B1D,MAAM,YAAY,GAAG,GAAG,CAAC;AAEzB;;;;;yCAKyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAqC;IACpE,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,GAAG;IACV,KAAK,EAAE,EAAE;IACT,KAAK,EAAE,GAAG;IACV,UAAU,EAAE,CAAC;IACb,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,KAAK;IACd,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;CACR,CAAC;AAEF;0DAC0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;qDAMqD;AACrD,MAAM,UAAU,eAAe,CAC7B,MAAc,EACd,MAAc,EACd,MAAc;IAEd,OAAO,UAAU,MAAM,GAAG,YAAY,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC;AAC/D,CAAC;AAeD;oEACoE;AACpE,SAAS,WAAW,CAAC,EAAW;IAC9B,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1D,CAAC;AAED;;gDAEgD;AAChD,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9B,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,IAA4B,EAAE,KAAK,CAAC;YACnD,CAAC,CAAE,IAA6B,CAAC,KAAK;YACtC,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,WAAW,CAAE,CAAiC,CAAC,aAAa,CAAC,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAI,CAA0B,CAAC,MAAM,CAAC;QAC9C,MAAM,EAAE,GAAI,CAA0B,CAAC,MAAM,CAAC;QAC9C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;2CAG2C;AAC3C,MAAM,UAAU,eAAe,CAC7B,KAAuB,EACvB,CAAS,EACT,CAAS;IAET,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACzD,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,yCAAyC,CAAC,IAAI,CAAC,6CAA6C,CAC7F,CAAC;AACJ,CAAC;AAED;;;kEAGkE;AAClE,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,WAAmB;IACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,wDAAwD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,GAAG,WAAW,GAAG,GAAG,CAAC,CAAC;IAC5C,8EAA8E;IAC9E,gFAAgF;IAChF,gFAAgF;IAChF,+EAA+E;IAC/E,+DAA+D;IAC/D,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B;IAC9D,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC;AACvD,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,OAAQ,IAAgC,CAAC,SAAS,KAAK,QAAQ,EAC/D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,8CAA8C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACrE,CAAC;IACJ,CAAC;IACD,OAAQ,IAA8B,CAAC,SAAS,CAAC;AACnD,CAAC;AAED;;0CAE0C;AAC1C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAYtC;IACC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnD,4EAA4E;IAC5E,qDAAqD;IACrD,MAAM,GAAG,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;YACpC,OAAO,EAAE,EAAE,YAAY,EAAE,qBAAqB,EAAE,MAAM,EAAE,kBAAkB,EAAE;SAC7E,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,iBAAiB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC,CAAC;IAEF,2EAA2E;IAC3E,gFAAgF;IAChF,2DAA2D;IAC3D,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3D,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAEjF,sEAAsE;IACtE,MAAM,QAAQ,GAAG,oBAAoB,CACnC,MAAM,GAAG,CACP,0BAA0B,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG;QAC5D,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,iBAAiB,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAC1F,CACF,CAAC;IACF,OAAO;QACL,SAAS,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;QACvD,SAAS,EAAE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,SAAS,gBAAgB,CAAC,CAAU;IAClC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,CAAC,GAAG,CAAsC,CAAC;IACjD,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,MAAM,CAAC,GAAG,IAAqD,CAAC;IAChE,IACE,OAAO,CAAC,EAAE,SAAS,KAAK,QAAQ;QAChC,OAAO,CAAC,EAAE,SAAS,KAAK,QAAQ;QAChC,OAAO,CAAC,EAAE,KAAK,KAAK,QAAQ,EAC5B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO;QACL,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC;QAC9C,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC,aAAa,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,SAAS,cAAc,CAAC,CAAiB,EAAE,CAAiB;IAC1D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAkB,EAClB,MAMC;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,oBAAoB;YACxF,WAAW,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,2CAA2C;YACvF,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CACjG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;0EAM0E;AAC1E,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,IAa7C;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,GAAG,GACP,GAAG,IAAI,YAAY,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;QACtD,QAAQ,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE;QAC5C,WAAW,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QAC5C,aAAa,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,sBAAsB,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,yBAAyB,CAAC,MAAM,EAAE;QAChC,OAAO,EAAE,IAAI,CAAC,QAAQ;QACtB,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;KAClC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAmCD,MAAM,YAAY,GAAG,CAAC,EAAU,EAAiB,EAAE,CACjD,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAqB;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/D,MAAM,KAAK,GACT,IAAI,CAAC,KAAK;QACV,IAAI,WAAW,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;IAC7D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAExB,8EAA8E;IAC9E,iFAAiF;IACjF,kFAAkF;IAClF,gFAAgF;IAChF,+CAA+C;IAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC;IACrD,IAAI,cAAc,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,aAAa,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YACnC,MAAM,gCAAgC,CAAC,KAAK,EAAE,MAAM,EAAE;gBACpD,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,8EAA8E;IAC9E,gFAAgF;IAChF,+DAA+D;IAC/D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC;QAC1B,EAAE,EAAE,MAAM,CAAC,SAAS;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,WAAW;QACX,2EAA2E;QAC3E,sEAAsE;QACtE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,YAAY;YACrB,CAAC,CAAC;gBACE,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK;gBAC1C,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE;gBACpC,mEAAmE;gBACnE,uEAAuE;gBACvE,4CAA4C;gBAC5C,kBAAkB,EAAE,IAAI;aACzB;YACH,CAAC,CAAC,EAAE,CAAC;QACP,MAAM;QACN,KAAK;KACN,CAAC,CAAC;IAEH,gFAAgF;IAChF,iFAAiF;IACjF,iFAAiF;IACjF,0EAA0E;IAC1E,MAAM,yBAAyB,GAAG,cAAc,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC;IAClF,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC;QAClD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;YACzD,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;YACtC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC;gBAAE,MAAM;YACzB,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,OAAO;QACL,YAAY,EAAE,IAAI,CAAC,QAAQ;QAC3B,OAAO,EAAE,gBAAgB,CAAC,MAAM;QAChC,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/tx.d.ts

@@ -48,6 +48,11 @@ export declare function transfer(relay: RelayClient, wallet: AgentWallet, opts:
      *  DSO). For Amulet leave false — the relay resolves the DSO itself, and
      *  `expectInstrumentAdmin` still pins it in verify-before-sign. */
     registryInstrument?: boolean;
+    /** Opt into the registry two-step transfer-offer shape (receiver has no
+     *  preapproval) — threaded to verify-before-sign. Only a caller that means to
+     *  send a registry token to a non-preapproved receiver (a swap to a pool) sets
+     *  this. See PreparedTransferExpectation.allowRegistryOffer. */
+    allowRegistryOffer?: boolean;
 }): Promise<string>;
 /**
  * transfer-factory ("V3") pay: PREPARE + VERIFY-BEFORE-SIGN + SIGN a relay-built

package/dist/tx.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tx.d.ts","sourceRoot":"","sources":["../src/tx.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAOL,KAAK,kBAAkB,EAKxB,MAAM,sBAAsB,CAAC;AAgI9B;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;6DAEyD;IACzD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;6EAGyE;IACzE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;2DAEuD;IACvD,sBAAsB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C;;;uEAGmE;IACnE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GACA,OAAO,CAAC,MAAM,CAAC,CAyGjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;mFAI+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;2DAEuD;IACvD,sBAAsB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C;;;;;mFAK+E;IAC/E,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GACA,OAAO,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,wBAAwB,EAAE,UAAU,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,2BAA2B,CAAC;CACnD,CAAC,CA2DD;AAsBD;sBACsB;AACtB,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EAChD,MAAM,EAAE,MAAM,GACb;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CA4CzC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAgB9D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,kBAAkB,CAAA;CAAO,GAC9C,OAAO,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;iFAC6E;IAC7E,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,MAAM,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C;;;;;sEAKkE;IAClE,gBAAgB,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzD,CAAC,CA+GD;AAiBD,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,kBAAkB,CAAA;CAAE,EAC/D,KAAK,GAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CACI,GACtC,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAuF/B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE;IACJ,YAAY,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC,GACA,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA8C/B"}
+{"version":3,"file":"tx.d.ts","sourceRoot":"","sources":["../src/tx.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAOL,KAAK,kBAAkB,EAKxB,MAAM,sBAAsB,CAAC;AAgI9B;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;6DAEyD;IACzD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;6EAGyE;IACzE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;;OAKG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;;;;;OAQG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;2DAEuD;IACvD,sBAAsB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C;;;uEAGmE;IACnE,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;oEAGgE;IAChE,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GACA,OAAO,CAAC,MAAM,CAAC,CA0GjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE;IACJ,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,6DAA6D;IAC7D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,oEAAoE;IACpE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC;;;;mFAI+E;IAC/E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;2DAEuD;IACvD,sBAAsB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C;;;;;mFAK+E;IAC/E,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GACA,OAAO,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,yDAAyD;IACzD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,wBAAwB,EAAE,UAAU,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE,2BAA2B,CAAC;CACnD,CAAC,CA2DD;AAsBD;sBACsB;AACtB,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,EAChD,MAAM,EAAE,MAAM,GACb;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CA4CzC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAgB9D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,QAAQ,CAC5B,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,kBAAkB,CAAA;CAAO,GAC9C,OAAO,CAAC;IACT,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;iFAC6E;IAC7E,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,MAAM,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9C;;;;;sEAKkE;IAClE,gBAAgB,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACzD,CAAC,CA+GD;AAiBD,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,kBAAkB,CAAA;CAAE,EAC/D,KAAK,GAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CACI,GACtC,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAuF/B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,gCAAgC,CACpD,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE;IACJ,YAAY,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC,GACA,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA8C/B"}

package/dist/tx.js

@@ -207,6 +207,7 @@ export async function transfer(relay, wallet, opts) {
             ...(opts.trustedRegistryParties !== undefined
                 ? { trustedRegistryParties: opts.trustedRegistryParties }
                 : {}),
+            ...(opts.allowRegistryOffer === true ? { allowRegistryOffer: true } : {}),
             nowMs: Date.now(),
         },
     }, opts.hashBinding, opts.expectSynchronizerId);