@gvnrdao/dh-sdk 0.0.347 → 0.0.348

package/dist/sign-guard.js

@@ -37,9 +37,12 @@ __export(sign_guard_exports, {
   QUANTUM_SECONDS: () => QUANTUM_SECONDS,
   REQUEST_TIMEOUT_MS: () => REQUEST_TIMEOUT_MS,
   SIGNABLE_FUNCTIONS: () => SIGNABLE_FUNCTIONS,
+  SIGNABLE_TYPED_DATA: () => SIGNABLE_TYPED_DATA,
   TxValidationError: () => TxValidationError,
+  TypedDataRefused: () => TypedDataRefused,
   asEnvelope: () => asEnvelope,
   assertFeeCeiling: () => assertFeeCeiling,
+  assertSignableTypedData: () => assertSignableTypedData,
   authValiditySec: () => authValiditySec,
   authorizeWithServer: () => authorizeWithServer,
   broadcastSignedTx: () => broadcastSignedTx,
@@ -201,6 +204,311 @@ function assertFeeCeiling(gasLimit, maxFeePerGas, raise, ceiling = DEFAULT_FEE_C
 var import_ethers3 = require("ethers");
 
 // src/constants/chunks/deployment-addresses.ts
+var SEPOLIA_DEPLOYMENT = {
+  network: "sepolia",
+  chainId: 11155111,
+  timestamp: "2026-03-13T20:04:15.417Z",
+  deployer: "",
+  contracts: {
+    UpgradeValidator: "0x592e650edD9bA26ecc407989fdd6F9cdcDeC27A6",
+    UCDToken: "0xdd817Ff47C9b8f81335Ac579895D8EA321Fa86Df",
+    UCDController: "0x360Bde4e489ee94E26601B206932De09EE60FF04",
+    PriceFeedConsumer: "0xb3Dc64501935a6f0334779126Ee37bE463cee318",
+    PositionManagerCoreModule: "0xfFAA39a08887FeFB697eBC8691A8630CbCC33391",
+    TermManagerModule: "0x94Adc6F9558368B1482197584f1fc7133Ecf835b",
+    LoanOperationsManagerModule: "0x3e05e760a87715207b7F4e8fD35EF7559BcA72C0",
+    CollateralManagerModule: "0x967E92c976Fc0fa8268D37D4d6B7245d912aA7dB",
+    LiquidationManagerModule: "0xC4AB00f39e7ceD812F5C67058C9fa44e15d40e76",
+    CircuitBreakerModule: "0x3D0B2cAE481821E57BA9CC3807bCC0d0D7F18bd8",
+    AdminModule: "0xAcd1f07915b17CA3727e7fE89BdF618A1545a1ed",
+    PositionManagerViews: "0x3b970E41a0668508B4B2ACb83653b2A402F745AE",
+    PositionManager: "0x68e0507D982AEBF1D1C1Af8FBbd842327e2deeFF",
+    OperationAuthorizationRegistry: "0x75f36E772df9616d40b02092642744D6fd702Df8",
+    PKPValidation: "0x8a1365A974F91e92D2dF5C51216EFCD408e209A8",
+    BTCSpendAuthorizer: "0xd7E9Eb5eE53f1d9ee55Dc162bBC7486bE437B6bD",
+    LITActionValidator: "0x54eECd7C90F8A8fac27749Ba30BbE8AFBAccc856",
+    SimplePSMV2: "0x19EcF7BA26e054fd4Ff06009A03070103dbBB058",
+    BitcoinProviderRegistry: "0xbfA0c48B070D0a9A9CD27469AeacFD2d4261cEE2",
+    ContractVersionRegistry: "0x97E43AA6aFF2C0cf659d3aE501658D2Ef6777522",
+    mockUsdcToken: "0x96409A98e0D322d6566b7F44a0fAbD1BD4ce2AEc",
+    mockUsdtToken: "0xF8b7fB38b17a310960E47805Be9adba0b0e0394D",
+    PositionDelegateRegistry: "0x482369De283622E7b05731875ec137d4E3D208F9",
+    FeeRecipientRegistry: "0x95795F8403DDb629E8527B2934C4e71f5fC0C374",
+    BitcoinWithdrawalAddressRegistry: "0x6376D392097F0A81e51BD83960A97EA20eaf1dbe",
+    AgentDelegationRegistry: "0x6AE7fc6bE0925126b9D25b1B7Ce5AD5d127ec025",
+    DHAgentDelegate: "0xa5A14489ae883960df6E1463A41a47aBE9Ecc5AF",
+    AgentModuleFactory: "0x1Fd3aCa2C030Cf77ce28Af9694D3Bb3034ACa2E5"
+  },
+  upgraded: {
+    PositionManager: {
+      previousImplementation: "0xb1885Be99BA64Bba773Bf423783A0334B7109409",
+      newImplementation: "0xfA7413a4547F496BF223ed25DF443c17ef6D4668",
+      upgradedAt: "2026-07-30T17:55:25.314Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Add setViews escape hatch so PositionManagerViews can be repointed (mainnet Views is a frozen non-proxy)"
+    },
+    LoanOperationsManagerModule: {
+      previousImplementation: "0x8c20e9Edf44146718F2EF15eEF47A201CaC229B8",
+      newImplementation: "0x6Ad08177F264f441074921C437670D1fA5934676",
+      upgradedAt: "2026-07-03T20:19:49.032Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: LoanOperationsManagerModule implementation update"
+    },
+    UCDController: {
+      previousImplementation: "0xF820098c311C736AB1793656044d95A0F6806B27",
+      newImplementation: "0x91204831bBCfcDCEa5fEE09B0d875778E9651690",
+      upgradedAt: "2026-07-03T19:52:40.152Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: UCDController implementation update"
+    },
+    TermManagerModule: {
+      previousImplementation: "0x358d6A7A864853beAA3E157fEB83dCEb1628E8eB",
+      newImplementation: "0xA2D6543faFA9d84C16Cd5e5E34F746B6e138F54d",
+      upgradedAt: "2026-07-03T19:58:25.937Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: TermManagerModule implementation update"
+    },
+    CircuitBreakerModule: {
+      previousImplementation: "0xF6277dEF72D51312CC99616B5380f34Eb7603D75",
+      newImplementation: "0x4b28F1d4ecBcc13b51a8d0f890e6d5bF4966EEB4",
+      upgradedAt: "2026-07-30T09:28:12.835Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: CircuitBreakerModule implementation update"
+    },
+    AdminModule: {
+      previousImplementation: "0xBBA86246169f81a307Fafff02C1e3D8456aab973",
+      newImplementation: "0x2905964e27BD78595cf8fFa6FFc5A99E54F399c4",
+      upgradedAt: "2026-07-30T09:02:25.915Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: AdminModule implementation update"
+    },
+    PositionManagerViews: {
+      previousImplementation: "0xA455B542cFb36AF8451fc420dB89e590E5c87cef",
+      newImplementation: "0x8cEB3F1c07fDB3301f55b96a5B9aDb33C8d36Da3",
+      upgradedAt: "2026-10-02T17:04:25.853Z",
+      upgradedBy: "0x0f8f23674cc90Ef7107930a4437341fD8B460362",
+      reason: "1.1.2: getBackingVaults (PoR backing set) + implementation lock (constructor)"
+    },
+    TestPositionManager: {
+      previousImplementation: "0x0B46Ee1a9C6b42559758B7FF78294Cd867BB08f8",
+      newImplementation: "0x0B46Ee1a9C6b42559758B7FF78294Cd867BB08f8",
+      upgradedAt: "2026-03-17T15:18:07.382Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Add setPositionExpiry() for expiry-liquidation E2E testing"
+    },
+    UCDToken: {
+      previousImplementation: "0xC587a2cb7e828A44d8C6190eDA6c47b08BA07115",
+      newImplementation: "0xa6C8C4cfc7DD3dCE5F1259A4a1eAf8461aA8CeC8",
+      upgradedAt: "2026-07-03T19:54:36.519Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: UCDToken implementation update"
+    },
+    PositionManagerCoreModule: {
+      previousImplementation: "0xA52580D61Bc451dEe897F64cf51187Ad594B048c",
+      newImplementation: "0x0E721048c066C5589C41f97785f7E5737ac2BEB3",
+      upgradedAt: "2026-07-03T19:56:24.960Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: PositionManagerCoreModule implementation update"
+    },
+    CollateralManagerModule: {
+      previousImplementation: "0xCf5d2b210C8e30bE8e05bFC79593b9439b8b9670",
+      newImplementation: "0xF57BBbb4818371605e308228A04F8Ec4Dcc5E7Ba",
+      upgradedAt: "2026-07-07T16:59:13.883Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: CollateralManagerModule implementation update"
+    },
+    LiquidationManagerModule: {
+      previousImplementation: "0x31CD6191d80F484b72925Aa1834c80F5f739252A",
+      newImplementation: "0xCe7587C47094BBb3dCa13D7a2299Ec9beA6cd759",
+      upgradedAt: "2026-07-03T20:02:00.579Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: LiquidationManagerModule implementation update"
+    },
+    BTCSpendAuthorizer: {
+      previousImplementation: "0xdd3DFaEc50d6214d57eA64e8b76ff318b501607b",
+      newImplementation: "0xf3282B5A1AE6428ee1b08cfaAF4EB4e198877484",
+      upgradedAt: "2026-09-06T15:03:13.627Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: BTCSpendAuthorizer implementation update"
+    },
+    SimplePSMV2: {
+      previousImplementation: "0xd2488cb7d9ba211e7437FcE9dcfBC3c2D4CBe419",
+      newImplementation: "0xE38010BE47B389922A1cd4b533470F0af7d20101",
+      upgradedAt: "2026-07-03T20:21:49.843Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: SimplePSMV2 implementation update"
+    },
+    UpgradeValidator: {
+      previousImplementation: "0x2Dd375041Be067E7d12bAB2106911Ce209EbD12f",
+      newImplementation: "0x9E70e1D07AB11ac9dD37B67AA091Efe97d7Ed84b",
+      upgradedAt: "2026-07-30T09:32:13.726Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: UpgradeValidator implementation update"
+    },
+    LITActionValidator: {
+      previousImplementation: "0xE2f99EA35b4DA01A66338427EC9077581d28FDb5",
+      newImplementation: "0x8FF30Fab0cC09C67dF6DF0ee017f817d5B101457",
+      upgradedAt: "2026-07-30T09:30:13.928Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: LITActionValidator implementation update"
+    },
+    ContractVersionRegistry: {
+      previousImplementation: "0x327Ced106C2804283994F0C0e2436E4B76AA7dAD",
+      newImplementation: "0xF3389De4bCeC735e4F6d35b9f71170D96037D1B7",
+      upgradedAt: "2026-07-03T19:50:48.918Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: ContractVersionRegistry implementation update"
+    },
+    PositionDelegateRegistry: {
+      previousImplementation: "0x301fa9AA527016D033e151b982C64cD8670a39E3",
+      newImplementation: "0xc681c48688cdAA966119E265e4a378ef8Fe0eBcA",
+      upgradedAt: "2026-07-30T09:02:27.050Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Reconciled implementation from chain"
+    },
+    OperationAuthorizationRegistry: {
+      previousImplementation: "0xF56090039c268B90f1867075813B5B36C40092B4",
+      newImplementation: "0xe0D981B60351f0f8fFDA2b50C8180Fb37CeF3883",
+      upgradedAt: "2026-07-03T20:23:37.669Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: OperationAuthorizationRegistry implementation update"
+    },
+    FeeRecipientRegistry: {
+      previousImplementation: "0xd08513a7cB2dd354B26cDDf549616F12054c34c9",
+      newImplementation: "0x44057f5Ca13B1C3a74E5507c372704F3c8c5834f",
+      upgradedAt: "2026-07-30T09:23:25.934Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: FeeRecipientRegistry implementation update"
+    },
+    BitcoinProviderRegistry: {
+      previousImplementation: "0xc5899d53426aD9354CEdAFe3002cbd3aBfAC46ab",
+      newImplementation: "0x37A8D9a57f9dEa7ae7D5B7BC7B1BB61a80960eB7",
+      upgradedAt: "2026-07-30T09:26:01.725Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: BitcoinProviderRegistry implementation update"
+    },
+    BitcoinWithdrawalAddressRegistry: {
+      previousImplementation: "0xFF270BC4470dBA80430Bd1a3a66EB691599354fA",
+      newImplementation: "0x76E0a2c9d89562fD7c50b5f554d7fa25957e39Db",
+      upgradedAt: "2026-07-07T16:56:49.844Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Shared upgrade script: BitcoinWithdrawalAddressRegistry implementation update"
+    },
+    AgentDelegationRegistry: {
+      previousImplementation: "0xE931E4b9ceF2A48Ac7D57192da4B523756cFC310",
+      newImplementation: "0xE931E4b9ceF2A48Ac7D57192da4B523756cFC310",
+      upgradedAt: "2026-09-06T15:06:02.814Z",
+      upgradedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      reason: "Reconciled implementation from chain"
+    }
+  },
+  history: {
+    LoanOperationsManagerModule: {
+      previous: "0x48D46188e25452148A743f8f6599b0E66C178512",
+      new: "0x1f70024444C5E89fFC232d2768C0359F7a13c6e7",
+      reason: "Storage layout scrambled \u2014 fresh deploy with F20 admin",
+      deployedAt: "2026-03-12T10:28:15.833Z",
+      deployedBy: "0x2767441E044aCd9bbC21a759fB0517494875092d"
+    },
+    freshDeploy: {
+      reason: "Full fresh deploy \u2014 F20 as admin, correct AdminModule on PM, no 0x276 dependency",
+      deployedAt: "2026-03-12T11:07:45.335Z",
+      deployedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+      old: {
+        UCDToken: "0x86060fa5b3e01e003b8afd9c1295f1f444a7dc60",
+        UCDController: "0x703Ce9a94A8e42EC48499a79ef5c38a37664Fc5a",
+        PositionManagerCoreModule: "0x3Ff6F2E40B0d7c0557Da8fd04F699198Bdcb1b4C",
+        LiquidationManagerModule: "0xAC3886766Ac20d379b069BdFB97e401aBad6188C",
+        LoanOperationsManagerModule: "0x1f70024444C5E89fFC232d2768C0359F7a13c6e7",
+        CollateralManagerModule: "0x34E3DcA5d00570f323c62f09f46D8314674de723",
+        PositionManagerViews: "0xAC32f1845ace22e012aF30760fe9296b9aEb8a45",
+        PositionManager: "0x141D078A82F093F4Ea8345b9Bc9999C9008619Ae"
+      },
+      new: {
+        UCDToken: "0xdd817Ff47C9b8f81335Ac579895D8EA321Fa86Df",
+        UCDController: "0x360Bde4e489ee94E26601B206932De09EE60FF04",
+        PositionManagerCoreModule: "0xfFAA39a08887FeFB697eBC8691A8630CbCC33391",
+        LiquidationManagerModule: "0xC4AB00f39e7ceD812F5C67058C9fa44e15d40e76",
+        LoanOperationsManagerModule: "0xD3ADCCe9b46287763f723dC9a3FCfa59ab74b8bB",
+        CollateralManagerModule: "0x967E92c976Fc0fa8268D37D4d6B7245d912aA7dB",
+        PositionManagerViews: "0x3b970E41a0668508B4B2ACb83653b2A402F745AE",
+        PositionManager: "0xc767484Cced727D3fC0c5C2872BA6549967d7517"
+      }
+    }
+  },
+  pkpValidationDeployed: {
+    address: "0x8a1365A974F91e92D2dF5C51216EFCD408e209A8",
+    deployedAt: "2026-07-03T19:48:13.932Z",
+    deployedBy: "0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6",
+    setPKPValidationRegistryTx: "0xab6b7e610c1ecf68da9a1e1150e61631e1f2a945bec12608c8357e03be25c4a5",
+    replacedAddress: "0xC8Ca02238fbCDAEbE6dbF804461D43F46F9406F4"
+  },
+  latestEnv: {
+    UCD_TOKEN: "0xdd817Ff47C9b8f81335Ac579895D8EA321Fa86Df",
+    UCD_CONTROLLER: "0x360Bde4e489ee94E26601B206932De09EE60FF04",
+    POSITION_MANAGER: "0x68e0507D982AEBF1D1C1Af8FBbd842327e2deeFF",
+    PKP_VALIDATION_REGISTRY: "0x8a1365A974F91e92D2dF5C51216EFCD408e209A8",
+    PKP_VALIDATION_REGISTRY_IMPL: "0x4f752c8c00b75d925CC9C7e693e1D9E45B6D195d",
+    PKP_VALIDATION_CID_V1: "0x1220246b43f71828ed1cfdc455b6bd4fd9e7382251ea634589f8da9b12f61d40cd51",
+    PKP_ETH_ADDRESS: "0x9624C46073E1d1F5AB975c67Fc899536d599bb57",
+    OPERATION_AUTHORIZATION_REGISTRY: "0x75f36E772df9616d40b02092642744D6fd702Df8",
+    UCD_MINT_VALIDATOR_ADDRESS: "0x4D9299055093938d0CD2F26C42A87260CB50adD8",
+    UCD_MINT_VALIDATOR_VERSION: 1,
+    BTC_WITHDRAWAL_VALIDATOR_ADDRESS: "0x7b9316cAA00B257F7CE30F7F6979bd6867BA9eE2",
+    BTC_WITHDRAWAL_VALIDATOR_VERSION: 1,
+    UPDATE_BALANCE_VALIDATOR_ADDRESS: "0x8A40C22B03348bc10df9ae0dc54346b4AE8e909c",
+    UPDATE_BALANCE_VALIDATOR_VERSION: 1,
+    PROCESS_PAYMENT_VALIDATOR_ADDRESS: "0x2800E9e335e51730132f7CB9F4912bCc2ED0636C",
+    PROCESS_PAYMENT_VALIDATOR_VERSION: 1,
+    EXTEND_POSITION_VALIDATOR_ADDRESS: "0xa8031d1F4515Ef021A13357E8462340cE1b8711b",
+    EXTEND_POSITION_VALIDATOR_VERSION: 1,
+    LOAN_OPERATIONS_MANAGER_MODULE: "0x3e05e760a87715207b7F4e8fD35EF7559BcA72C0",
+    TERM_MANAGER_MODULE: "0x94Adc6F9558368B1482197584f1fc7133Ecf835b",
+    COMMUNITY_MANAGER_MODULE: "0x7f8fC386fbD96ed690cdf6B1648d060d93Bf99d5",
+    POSITION_MANAGER_VIEWS: "0x3b970E41a0668508B4B2ACb83653b2A402F745AE",
+    CIRCUIT_BREAKER_MODULE: "0x3D0B2cAE481821E57BA9CC3807bCC0d0D7F18bd8",
+    ADMIN_MODULE: "0xAcd1f07915b17CA3727e7fE89BdF618A1545a1ed",
+    UCD_CONTROLLER_IMPL: "0x91204831bBCfcDCEa5fEE09B0d875778E9651690",
+    LOAN_OPERATIONS_MANAGER_MODULE_IMPL: "0x6Ad08177F264f441074921C437670D1fA5934676",
+    TERM_MANAGER_MODULE_IMPL: "0xA2D6543faFA9d84C16Cd5e5E34F746B6e138F54d",
+    CIRCUIT_BREAKER_MODULE_IMPL: "0x4b28F1d4ecBcc13b51a8d0f890e6d5bF4966EEB4",
+    ADMIN_MODULE_IMPL: "0x2905964e27BD78595cf8fFa6FFc5A99E54F399c4",
+    POSITION_MANAGER_VIEWS_IMPL: "0xA455B542cFb36AF8451fc420dB89e590E5c87cef",
+    POSITION_MANAGER_IMPL: "0xfA7413a4547F496BF223ed25DF443c17ef6D4668",
+    SIMPLE_PSM_V2: "0x19EcF7BA26e054fd4Ff06009A03070103dbBB058",
+    SIMPLE_PSM_V2_IMPL: "0xE38010BE47B389922A1cd4b533470F0af7d20101",
+    UCD_TOKEN_IMPL: "0xa6C8C4cfc7DD3dCE5F1259A4a1eAf8461aA8CeC8",
+    POSITION_MANAGER_CORE_MODULE: "0xfFAA39a08887FeFB697eBC8691A8630CbCC33391",
+    POSITION_MANAGER_CORE_MODULE_IMPL: "0x0E721048c066C5589C41f97785f7E5737ac2BEB3",
+    COLLATERAL_MANAGER_MODULE: "0x967E92c976Fc0fa8268D37D4d6B7245d912aA7dB",
+    COLLATERAL_MANAGER_MODULE_IMPL: "0xF57BBbb4818371605e308228A04F8Ec4Dcc5E7Ba",
+    LIQUIDATION_MANAGER_MODULE: "0xC4AB00f39e7ceD812F5C67058C9fa44e15d40e76",
+    LIQUIDATION_MANAGER_MODULE_IMPL: "0xCe7587C47094BBb3dCa13D7a2299Ec9beA6cd759",
+    BTC_SPEND_AUTHORIZER: "0xd7E9Eb5eE53f1d9ee55Dc162bBC7486bE437B6bD",
+    BTC_SPEND_AUTHORIZER_IMPL: "0xf3282B5A1AE6428ee1b08cfaAF4EB4e198877484",
+    UPGRADE_VALIDATOR: "0x592e650edD9bA26ecc407989fdd6F9cdcDeC27A6",
+    UPGRADE_VALIDATOR_IMPL: "0x9E70e1D07AB11ac9dD37B67AA091Efe97d7Ed84b",
+    BITCOIN_PROVIDER_REGISTRY: "0xbfA0c48B070D0a9A9CD27469AeacFD2d4261cEE2",
+    BITCOIN_PROVIDER_REGISTRY_IMPL: "0x37A8D9a57f9dEa7ae7D5B7BC7B1BB61a80960eB7",
+    LIT_ACTION_VALIDATOR: "0x54eECd7C90F8A8fac27749Ba30BbE8AFBAccc856",
+    LIT_ACTION_VALIDATOR_IMPL: "0x8FF30Fab0cC09C67dF6DF0ee017f817d5B101457",
+    CONTRACT_VERSION_REGISTRY: "0x97E43AA6aFF2C0cf659d3aE501658D2Ef6777522",
+    CONTRACT_VERSION_REGISTRY_IMPL: "0xF3389De4bCeC735e4F6d35b9f71170D96037D1B7",
+    MOCK_USDC_TOKEN: "0x96409A98e0D322d6566b7F44a0fAbD1BD4ce2AEc",
+    MOCK_USDT_TOKEN: "0xF8b7fB38b17a310960E47805Be9adba0b0e0394D",
+    POSITION_DELEGATE_REGISTRY: "0x482369De283622E7b05731875ec137d4E3D208F9",
+    POSITION_DELEGATE_REGISTRY_IMPL: "0xc681c48688cdAA966119E265e4a378ef8Fe0eBcA",
+    AGENT_MODULE: "0xefb8C29C1e7e92ed7d81a52dbedaed74e37fe380",
+    FEE_RECIPIENT_REGISTRY: "0x95795F8403DDb629E8527B2934C4e71f5fC0C374",
+    FEE_RECIPIENT_REGISTRY_IMPL: "0x44057f5Ca13B1C3a74E5507c372704F3c8c5834f",
+    OPERATION_AUTHORIZATION_REGISTRY_IMPL: "0xe0D981B60351f0f8fFDA2b50C8180Fb37CeF3883",
+    BITCOIN_WITHDRAWAL_ADDRESS_REGISTRY: "0x6376D392097F0A81e51BD83960A97EA20eaf1dbe",
+    BITCOIN_WITHDRAWAL_ADDRESS_REGISTRY_IMPL: "0x76E0a2c9d89562fD7c50b5f554d7fa25957e39Db",
+    AGENT_DELEGATION_REGISTRY: "0x6AE7fc6bE0925126b9D25b1B7Ce5AD5d127ec025",
+    AGENT_DELEGATION_REGISTRY_IMPL: "0x56a5af2C1549EFf70feD1F3BB8E1997717A84973",
+    DH_AGENT_DELEGATE: "0xa5A14489ae883960df6E1463A41a47aBE9Ecc5AF"
+  }
+};
 var SEPOLIA_CONTRACTS = {
   UpgradeValidator: "0x592e650edD9bA26ecc407989fdd6F9cdcDeC27A6",
   UCDToken: "0xdd817Ff47C9b8f81335Ac579895D8EA321Fa86Df",
@@ -231,6 +539,231 @@ var SEPOLIA_CONTRACTS = {
   DHAgentDelegate: "0xa5A14489ae883960df6E1463A41a47aBE9Ecc5AF",
   AgentModuleFactory: "0x1Fd3aCa2C030Cf77ce28Af9694D3Bb3034ACa2E5"
 };
+var MAINNET_DEPLOYMENT = {
+  network: "mainnet",
+  chainId: 1,
+  timestamp: "2026-06-16T16:40:50.629Z",
+  deployer: "0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f",
+  contracts: {
+    MessageHashBuilder: "0xaDE074023F9e87f6AEaF679e36B5d7B93FA22269",
+    LITActionValidator: "0xD2c5d59c2CC5c409AC65ce0A817236aeC6869512",
+    UpgradeValidator: "0xC46Ae71F22e3741A6CF46E399aE914C4868fEbed",
+    UCDToken: "0xaAaB6B05E5EecB015898483d4e6703d7F218850b",
+    UCDController: "0x4b4f8063048bCD59D469219E3f07C6aaDF4f6157",
+    PositionManagerCoreModule: "0xd895B685914c1BE4e1c7aab9f89a90c203DE8d22",
+    TermManagerModule: "0xDB99CdF883ffa38acD099bC39F8d1f4508c9239E",
+    LoanOperationsManagerModule: "0x2561974A40F1AEed1251d0A090A83cF8536FB9E9",
+    BTCSpendAuthorizer: "0xfBbF108486fa07F1B06a811C5b66ed68DD9c508a",
+    CollateralManagerModule: "0x2Eb74FEc478218f5C260aAc78Bb8eC297F9d7135",
+    LiquidationManagerModule: "0x74B28695352E7bf736D6c9F76ccb7B4439477De9",
+    CircuitBreakerModule: "0xF7b545d3a4Ee056D06909AB367E2F7bFFE3cB1BC",
+    AdminModule: "0x0023B71B586795eE5fa4E83E384345C1EC8Bb946",
+    PositionManagerViews: "0x8B57954eA338c6A6bfF1457f71080e25baFF3937",
+    PositionManager: "0x12A1836e56139ccaD8722B89519d84233efc224B",
+    OperationAuthorizationRegistry: "0xD4505645b724754f5170a2027804a4265e860d44",
+    ContractVersionRegistry: "0x5e18f77d01940dA5B1D986D373D9A6ad0767008d",
+    FeeRecipientRegistry: "0x8fbCAAdA198E1C246ecEb2fB021C5A3d8050c6B3",
+    PositionDelegateRegistry: "0xf0aa2678aD4F60f49e8F7725089B5E86B7F8FE4C",
+    BitcoinProviderRegistry: "0x4ab3Fb96e02893Ed6FAa61bad1918390c8DbbFFC",
+    BitcoinWithdrawalAddressRegistry: "0xf667f77FDba7458345f227eB6Bfe4148243E7270",
+    SimplePSMV2: "0xfE0C14B4E614f40Bf58845b4B04CeD17fd116532",
+    PKPValidation: "0x29922d3ccb86516f6C24F89f1eb3068655ca7Fa0",
+    AgentDelegationRegistry: "0x54853b7E91ce2Be34ce65655D80c4447e67187Fa",
+    DHAgentDelegate: "0x70232d0caBe529e29a01A442423d7e03BBd414c8"
+  },
+  upgraded: {
+    SimplePSMV2: {
+      previousImplementation: "0x1a555FB8D6EDdF755a4575E541651EdB8B49a15A",
+      newImplementation: "0x8717761444b1822c2E6916aB5bD9ac96c91b6DF5",
+      upgradedAt: "2026-07-06T10:41:35.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0x5052d1559d56b8e178699183e56c4fd84a163e987365c5af9c8d669a723c35d6 (block 25472960)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0x5052d1559d56b8e178699183e56c4fd84a163e987365c5af9c8d669a723c35d6",
+      block: 25472960
+    },
+    CollateralManagerModule: {
+      previousImplementation: "0x1919860e528Cd2AbbD31a17858c986b8aCc8C185",
+      newImplementation: "0x55110B9dd6B2c9f812564e7a1ef42b3c76E1A3Bb",
+      upgradedAt: "2026-07-08T20:33:59.000Z",
+      upgradedBy: "AdminModule generic-op 0x740efe0cfe85044479cbd8ee3058aa244057d90703dd2b37044dd6787cbf3485 (3-of-5 ADMIN_ROLE Safes, 24h timelock; executed via Safe 0xfb3B8cbeFB7D666A6Af34C53e189EdC31862a7be, submitted by EOA 0x2002827d34A781883Ec4c83c36ECC140c3911F2B, tx 0x430c8e450f12d3d9359cde356ac5e2ef39661d7a89884b5674a596c1090f6cff, block 25490267)",
+      reason: "Validator gas fix (#420): BitcoinAddressValidator packed-table lookups; VERSION 1.3.0 -> 1.3.1. NOTE: not part of the audit rollout batch \u2014 reconcile-deployment-record.ts --write templates every row as 'audit rollout batch'; this hand-authored provenance is the accurate one, restore it if --write flattens it again.",
+      executeTx: "0x430c8e450f12d3d9359cde356ac5e2ef39661d7a89884b5674a596c1090f6cff",
+      block: 25490267
+    },
+    BitcoinWithdrawalAddressRegistry: {
+      previousImplementation: "0x11731bFEC3068F2cc19D016381dfEA3B93013b1C",
+      newImplementation: "0x190c08300Ae650fb88ed8156445BBeb13bE9E8a3",
+      upgradedAt: "2026-07-08T20:33:59.000Z",
+      upgradedBy: "AdminModule generic-op 0x2603a486c0f34554b864cc1d909b325c7e105331da10ec0fd7e0b9373fa76207 (3-of-5 ADMIN_ROLE Safes, 24h timelock; executed via Safe 0xfb3B8cbeFB7D666A6Af34C53e189EdC31862a7be, submitted by EOA 0x2002827d34A781883Ec4c83c36ECC140c3911F2B, tx 0x430c8e450f12d3d9359cde356ac5e2ef39661d7a89884b5674a596c1090f6cff, block 25490267)",
+      reason: "Validator gas fix (#420): BitcoinAddressValidator packed-table lookups; VERSION 1.0.0 -> 1.0.1. NOTE: not part of the audit rollout batch \u2014 see the CollateralManagerModule row above.",
+      executeTx: "0x430c8e450f12d3d9359cde356ac5e2ef39661d7a89884b5674a596c1090f6cff",
+      block: 25490267
+    },
+    UCDController: {
+      previousImplementation: "0x16f94AcC78cE87bEeBCfF90552091B3EfC071E48",
+      newImplementation: "0x28B8cAB89D89B3F83581FD2290de2Ce84535bd0A",
+      upgradedAt: "2026-07-06T10:41:59.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7 (block 25472962)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0xf6609d3fa43b460d953c85d8d7265b59bf177723042db79a6a700571bad777b7",
+      block: 25472962
+    },
+    PositionManagerCoreModule: {
+      previousImplementation: "0x6C8b0FB93F8d0239254aefaC24d4264cA2F8AAeB",
+      newImplementation: "0x5067Ea1d40b2Aaf4ad693bD9b6e7463C1A29E849",
+      upgradedAt: "2026-07-06T08:02:35.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0x2002827d34A781883Ec4c83c36ECC140c3911F2B in tx 0xeb2bfe77d46394b6d0afd46beb0a80cd9beb91f6771ccb59ff9fba27d4af4f3d (block 25472167)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0xeb2bfe77d46394b6d0afd46beb0a80cd9beb91f6771ccb59ff9fba27d4af4f3d",
+      block: 25472167
+    },
+    LiquidationManagerModule: {
+      previousImplementation: "0xc2f4517eeD7c4c516939a64c7938a6ab432D99c4",
+      newImplementation: "0xe7444C1d9652dAb31BaAdBE4C7c7e7Df3515dA46",
+      upgradedAt: "2026-07-06T10:40:47.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0xc173b97af68cc9172ea0ddc91a2c90bf02eac1505e749d92aa044aa69891f48c (block 25472956)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0xc173b97af68cc9172ea0ddc91a2c90bf02eac1505e749d92aa044aa69891f48c",
+      block: 25472956
+    },
+    BTCSpendAuthorizer: {
+      previousImplementation: "0x40c9e8C46C65E0A57BB63da5368868A9E8Df81A5",
+      newImplementation: "0x00D7a47798E8ff169104b748131703B78f23390C",
+      upgradedAt: "2026-09-09T12:05:35.000Z",
+      upgradedBy: "AdminModule generic op 0xc0214ff38bb454864a34f6482dcd03570b3fd04171c84be2c20184afb1a2e161 (bsa-1-7-0 ceremony: proposed by seat 0x3030C0414B6d95aA9d5A57269E51a347fCBaB472 2026-09-08T11:35:23Z, 3/3 seat signatures, 24h timelock); executeGenericAdminOperation sent by 0xF20986F02420EF443AE9BE5092FB8A4975cF3aA6 in tx 0x77cd231966c546177bd8f1a07bd4e705afd5c2dfbd110b096836401679c0c69c (block 25939703)",
+      reason: "BTCSpendAuthorizer 1.6.0 -> 1.7.0: allow a full-vault sweep (targetAmount == satoshis); TargetMustLeaveFeeRoom -> TargetExceedsInputValue (PR #849; mainnet incidents 2026-09-04 and 2026-09-07). Impl deployed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f at nonce 430 from source 0a7c535a1 (contracts/src identical to main 99b335f77). Cross-ref onchain-auth/.safe-batches/mainnet-bsa-1-7-0-{propose,sign,execute}.json and docs/mainnet-bsa-1-7-0-ceremony-2026-09-08.md",
+      executeTx: "0x77cd231966c546177bd8f1a07bd4e705afd5c2dfbd110b096836401679c0c69c",
+      block: 25939703
+    },
+    PositionManager: {
+      previousImplementation: "0x600Dc0D1C2c0F94882B6Bc09172f8650047Ad5B1",
+      newImplementation: "0x2e7170d6Fb15A876dB726732e72e63109bcB916d",
+      upgradedAt: "2026-08-03T08:34:23.000Z",
+      upgradedBy: "AdminModule generic-op 0x69b79a906ed2 (3-of-3 signatures, 24h timelock; proposed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f, executed in the release batch onchain-auth/.safe-batches/mainnet-release-execute-B.json, submitted by EOA 0x2002827d34A781883Ec4c83c36ECC140c3911F2B, tx 0xf1f8d5fc13f45d7a3f932bf1a2d6e29381fdd41cd31298ad785bf7688df07fe6, block 25673200)",
+      reason: "2026-08 agent-stack release, Execute B: agent-delegation digest rebind. makePayment/mintUCD/extendPosition now bind their EIP-712 digest to the STORED borrower rather than msg.sender, so a scoped AgentDelegationRegistry grant can submit; withdrawBTC still binds msg.sender and stays non-delegable. Also adds setViews(address), which the same batch used to repoint PM at the replacement PositionManagerViews. NOTE: VERSION reads 1.5.4 on BOTH sides of this upgrade \u2014 verify by implementation ADDRESS, never by VERSION(). NOTE: not the July audit rollout batch \u2014 reconcile-deployment-record.ts --write templates every row with that text; this hand-authored provenance is the accurate one, restore it if --write flattens it again.",
+      executeTx: "0xf1f8d5fc13f45d7a3f932bf1a2d6e29381fdd41cd31298ad785bf7688df07fe6",
+      block: 25673200
+    },
+    LoanOperationsManagerModule: {
+      previousImplementation: "0x56671D671e492Dae625413d463D47605Cf54edf6",
+      newImplementation: "0x7d90aAB4466f59BA9aC9C7a9BF14dC53734336e7",
+      upgradedAt: "2026-07-06T10:41:23.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0x327ae9f7a3917788d22dfe95611e1afcd18583f210b03a119d9f04eca50b9e7a (block 25472959)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0x327ae9f7a3917788d22dfe95611e1afcd18583f210b03a119d9f04eca50b9e7a",
+      block: 25472959
+    },
+    OperationAuthorizationRegistry: {
+      previousImplementation: "0x327662917Ac8EEda47851d74AF6A151348636fCe",
+      newImplementation: "0x493118746840EDB2D396E71632D2E774CA14070e",
+      upgradedAt: "2026-07-06T10:41:47.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0x9820e259700865a281b8376e248044048ba2fed1d17c811ac66ac54d36711a5b (block 25472961)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0x9820e259700865a281b8376e248044048ba2fed1d17c811ac66ac54d36711a5b",
+      block: 25472961
+    },
+    BitcoinProviderRegistry: {
+      newImplementation: "0x7Bc9473E45fb3EA594e8b13992F57D0444902ddB",
+      upgradedAt: "2026-06-16T17:51:11.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0xf97e21ce2bc23876d60414c24ce6f45b2f0dd5e1ce42aca84f245f90f18ea17d (block 25331694)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0xf97e21ce2bc23876d60414c24ce6f45b2f0dd5e1ce42aca84f245f90f18ea17d",
+      block: 25331694
+    },
+    FeeRecipientRegistry: {
+      newImplementation: "0xEfAeB37faAdc2D420dC6F99128296B79fDDe74bE",
+      upgradedAt: "2026-06-16T17:30:35.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0xc8f592166923f83b9b0cfc44e67c2ec75f79ca95be4f8ffa01654f702eaac502 (block 25331591)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0xc8f592166923f83b9b0cfc44e67c2ec75f79ca95be4f8ffa01654f702eaac502",
+      block: 25331591
+    },
+    PositionDelegateRegistry: {
+      previousImplementation: "0x3c7B975c03F549fe0656D9cbbA218BcF1C7092af",
+      newImplementation: "0x560a87251b3D306116F32D6e197FD068577e5349",
+      upgradedAt: "2026-08-02T18:34:35.000Z",
+      upgradedBy: "AdminModule generic-op 0x9acc88e33647ed5158ea161728c60ee4afecea7e3767735e7c1af0bb10ee0cb5 (3-of-3 signatures, 24h timelock; proposed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f, executed in the release batch onchain-auth/.safe-batches/mainnet-release-execute-A.json, submitted by EOA 0x2002827d34A781883Ec4c83c36ECC140c3911F2B, tx 0xf0f237f6c4e958c37de556571908283c59c3fba6ebf9fa3cefb956f37e315a10, block 25669024)",
+      reason: "2026-08 agent-stack release: PositionDelegateRegistry VERSION 1.1.0 -> 2.0.0 via upgradeToAndCall + initializeV2(AdminModule, registrar 0x5D54E0BE\u2026, pauser 0xC205Ae99\u2026) \u2014 kill-switch, deny-only registrar, permanent delegate burn. NOTE: not the July audit rollout batch \u2014 reconcile-deployment-record.ts --write templates every row with that text; this hand-authored provenance is the accurate one, restore it if --write flattens it again.",
+      executeTx: "0xf0f237f6c4e958c37de556571908283c59c3fba6ebf9fa3cefb956f37e315a10",
+      block: 25669024
+    },
+    PositionManagerViews: {
+      previousImplementation: "0xE68DC096A65Ecddbc6A9b5c6e5f878e2CE143Bfe",
+      newImplementation: "0x8fe7aF14dB9Bef814c4c8fBc0ce206Cb17F25E8e",
+      proxy: "0x8B57954eA338c6A6bfF1457f71080e25baFF3937",
+      upgradedAt: "2026-10-17T12:16:35.000Z",
+      upgradedBy: "AdminModule generic-op 0x60494d283c30afb95748d8c1bb95b800ab8f17d2a2a45fb04784ebde7b05393c upgradeToAndCall(0x8fe7aF14, initializeV2(AdminModule)) \u2014 3-of-3 signatures (0x3030C041, 0x52b67f31, 0xfb3B8cbe), 24h timelock; proposed by Safe 0x3030C0414B6d95aA9d5A57269E51a347fCBaB472 in tx 0xffe3dd376736d542a89f944290b876d8eb8e5c3df8fc8349bc34a963106dd0f2, executed from Safe 0x52b67f31Ca7A58Ef20322512EB359b7D4758C868 via onchain-auth/.safe-batches/mainnet-pmv-backing-view-execute.json",
+      reason: "PoR vault-address gaps (tasks/vault-address-por-gaps-plan-2026-10-02.md, runbook tasks/RUNBOOK-pmv-backing-view-mainnet-2026-10-02.md). VERSION 1.1.1 -> 1.1.2: adds getBackingVaults (paged backing set: positions with ucdDebt > 0 and their stored vault addresses), locks the implementation (_disableInitializers constructor), and the call data initializeV2(AdminModule) consumes the previously OPEN reinitializer(2) (Cloudflare audit finding) without changing adminModule. No storage layout change. Post-upgrade: scripts/audit/backing-vaults-verify.ts PASS @ block 26226360 (72 positions, 15 backing vaults, view == independent scan; Initializable version 2; impl locked). Pre-proposed rollback op 0x43f50eb30d360a779f24c8229dd2d3b56a5d9eb40f056d3cd13047e5f0f51e84 (1/3 sigs) is to be cancelled by the proposer Safe via mainnet-pmv-backing-view-cancel-REVERT.json.",
+      executeTx: "0xbb36e557141827a0de990b7124ef8615352a2eb8c197efb3ce3a63998994fef5",
+      block: 26212216,
+      history: [
+        {
+          previousImplementation: "0x9225647a30bbACA4Acc0491B786869036914242e",
+          newImplementation: "0xE68DC096A65Ecddbc6A9b5c6e5f878e2CE143Bfe",
+          proxy: "0x8B57954eA338c6A6bfF1457f71080e25baFF3937",
+          upgradedAt: "2026-08-03T08:34:23.000Z",
+          upgradedBy: "REPLACED, not upgraded. Fresh ERC1967Proxy (atomically initialized) + AdminModule generic-op 0x848a97186f0d PositionManager.setViews(proxy) \u2014 3-of-3, 24h timelock, executed in onchain-auth/.safe-batches/mainnet-release-execute-B.json",
+          reason: "2026-08 agent-stack release. The mainnet PositionManagerViews at 0x9225647a was deployed as a BARE implementation (EIP-1967 slot 0x00), so upgradeToAndCall reverts UUPSUnauthorizedCallContext \u2014 it could never be upgraded. PositionManager.setViews (added in the same Execute B batch) removed the repoint blocker, so Views was replaced behind a new proxy rather than upgraded. This makes the Pashov F3 renewal debt-ceiling check REACHABLE for the first time: ExceedsMaxLoan (0x499e7985) is present in 0xE68DC096 and absent from 0x9225647a. Views holds no protocol state (8 wiring slots + roles + pause), which is what made replacement safe. The old contract is ABANDONED, not decommissioned \u2014 it stays live and callable as the rollback target for setViews. NOTE: VERSION reads 1.1.1 on both sides; verify by address.",
+          executeTx: "0xf1f8d5fc13f45d7a3f932bf1a2d6e29381fdd41cd31298ad785bf7688df07fe6",
+          block: 25673200
+        }
+      ]
+    },
+    AgentDelegationRegistry: {
+      newImplementation: "0xa9fF405Edd4329fc3159a64F56B37EBD253e4928",
+      upgradedAt: "2026-07-31T22:03:35.000Z",
+      upgradedBy: "AdminModule/Safe audit-batch upgradeToAndCall; executed by 0xEba7BfAeB35ee18408b424Ee0BB45AdDf776589f in tx 0x8fed0ab7eee3aaaa3792a35b40b0ef74bd09cfb1a175934afd846bee546048d4 (block 25655710)",
+      reason: "Reconciled from chain \u2014 mainnet audit rollout batch (cross-ref onchain-auth/.safe-batches/mainnet-audit-execute.json)",
+      executeTx: "0x8fed0ab7eee3aaaa3792a35b40b0ef74bd09cfb1a175934afd846bee546048d4",
+      block: 25655710
+    }
+  },
+  latestEnv: {
+    CONTRACT_VERSION_REGISTRY: "0x5e18f77d01940dA5B1D986D373D9A6ad0767008d",
+    CONTRACT_VERSION_REGISTRY_IMPL: "0x1Cf8C10fE37092320CB9E7082e0bB482a6B3acE0",
+    FEE_RECIPIENT_REGISTRY: "0x8fbCAAdA198E1C246ecEb2fB021C5A3d8050c6B3",
+    FEE_RECIPIENT_REGISTRY_IMPL: "0xEfAeB37faAdc2D420dC6F99128296B79fDDe74bE",
+    POSITION_DELEGATE_REGISTRY: "0xf0aa2678aD4F60f49e8F7725089B5E86B7F8FE4C",
+    POSITION_DELEGATE_REGISTRY_IMPL: "0x560a87251b3D306116F32D6e197FD068577e5349",
+    BITCOIN_PROVIDER_REGISTRY: "0x4ab3Fb96e02893Ed6FAa61bad1918390c8DbbFFC",
+    BITCOIN_PROVIDER_REGISTRY_IMPL: "0x7Bc9473E45fb3EA594e8b13992F57D0444902ddB",
+    BITCOIN_WITHDRAWAL_ADDRESS_REGISTRY: "0xf667f77FDba7458345f227eB6Bfe4148243E7270",
+    BITCOIN_WITHDRAWAL_ADDRESS_REGISTRY_IMPL: "0x190c08300Ae650fb88ed8156445BBeb13bE9E8a3",
+    SIMPLE_PSM_V2: "0xfE0C14B4E614f40Bf58845b4B04CeD17fd116532",
+    SIMPLE_PSM_V2_IMPL: "0x8717761444b1822c2E6916aB5bD9ac96c91b6DF5",
+    UCD_CONTROLLER: "0x4b4f8063048bCD59D469219E3f07C6aaDF4f6157",
+    UCD_CONTROLLER_IMPL: "0x28B8cAB89D89B3F83581FD2290de2Ce84535bd0A",
+    UCD_TOKEN: "0xaAaB6B05E5EecB015898483d4e6703d7F218850b",
+    UCD_TOKEN_IMPL: "0x5f09C660036021D7e916DF47234C24a2536C3A72",
+    POSITION_MANAGER_CORE_MODULE: "0xd895B685914c1BE4e1c7aab9f89a90c203DE8d22",
+    POSITION_MANAGER_CORE_MODULE_IMPL: "0x5067Ea1d40b2Aaf4ad693bD9b6e7463C1A29E849",
+    TERM_MANAGER_MODULE: "0xDB99CdF883ffa38acD099bC39F8d1f4508c9239E",
+    TERM_MANAGER_MODULE_IMPL: "0x971f63f92990e59270E971612dd399fF2C63B0c3",
+    COLLATERAL_MANAGER_MODULE: "0x2Eb74FEc478218f5C260aAc78Bb8eC297F9d7135",
+    COLLATERAL_MANAGER_MODULE_IMPL: "0x55110B9dd6B2c9f812564e7a1ef42b3c76E1A3Bb",
+    LIQUIDATION_MANAGER_MODULE: "0x74B28695352E7bf736D6c9F76ccb7B4439477De9",
+    LIQUIDATION_MANAGER_MODULE_IMPL: "0xe7444C1d9652dAb31BaAdBE4C7c7e7Df3515dA46",
+    CIRCUIT_BREAKER_MODULE: "0xF7b545d3a4Ee056D06909AB367E2F7bFFE3cB1BC",
+    CIRCUIT_BREAKER_MODULE_IMPL: "0x40e8328D61342C6ADC51dfdC723296c908f95038",
+    ADMIN_MODULE: "0x0023B71B586795eE5fa4E83E384345C1EC8Bb946",
+    ADMIN_MODULE_IMPL: "0xb4C5C7E051A1e672F014B25CB5D55B225Aa0D512",
+    BTC_SPEND_AUTHORIZER: "0xfBbF108486fa07F1B06a811C5b66ed68DD9c508a",
+    BTC_SPEND_AUTHORIZER_IMPL: "0x00D7a47798E8ff169104b748131703B78f23390C",
+    POSITION_MANAGER_VIEWS: "0x8B57954eA338c6A6bfF1457f71080e25baFF3937",
+    POSITION_MANAGER_VIEWS_IMPL: "0xE68DC096A65Ecddbc6A9b5c6e5f878e2CE143Bfe",
+    POSITION_MANAGER: "0x12A1836e56139ccaD8722B89519d84233efc224B",
+    POSITION_MANAGER_IMPL: "0x2e7170d6Fb15A876dB726732e72e63109bcB916d",
+    LOAN_OPERATIONS_MANAGER_MODULE: "0x2561974A40F1AEed1251d0A090A83cF8536FB9E9",
+    LOAN_OPERATIONS_MANAGER_MODULE_IMPL: "0x7d90aAB4466f59BA9aC9C7a9BF14dC53734336e7",
+    UPGRADE_VALIDATOR: "0xC46Ae71F22e3741A6CF46E399aE914C4868fEbed",
+    UPGRADE_VALIDATOR_IMPL: "0x4f835e77D1211299a1cbb8Aa2b42d9B390cC95CA",
+    OPERATION_AUTHORIZATION_REGISTRY: "0xD4505645b724754f5170a2027804a4265e860d44",
+    OPERATION_AUTHORIZATION_REGISTRY_IMPL: "0x493118746840EDB2D396E71632D2E774CA14070e",
+    AGENT_DELEGATION_REGISTRY: "0x54853b7E91ce2Be34ce65655D80c4447e67187Fa",
+    AGENT_DELEGATION_REGISTRY_IMPL: "0xa9fF405Edd4329fc3159a64F56B37EBD253e4928",
+    DH_AGENT_DELEGATE: "0x70232d0caBe529e29a01A442423d7e03BBd414c8"
+  }
+};
 var MAINNET_CONTRACTS = {
   MessageHashBuilder: "0xaDE074023F9e87f6AEaF679e36B5d7B93FA22269",
   LITActionValidator: "0xD2c5d59c2CC5c409AC65ce0A817236aeC6869512",
@@ -258,6 +791,31 @@ var MAINNET_CONTRACTS = {
   AgentDelegationRegistry: "0x54853b7E91ce2Be34ce65655D80c4447e67187Fa",
   DHAgentDelegate: "0x70232d0caBe529e29a01A442423d7e03BBd414c8"
 };
+var LOCALHOST_DEPLOYMENT = {
+  network: "localhost",
+  chainId: 1337,
+  timestamp: "2026-07-20T19:45:58.514Z",
+  deployer: "",
+  contracts: {
+    MessageHashBuilder: "0xa82fF9aFd8f496c3d6ac40E2a0F282E47488CFc9",
+    LITActionValidator: "0xa513E6E4b8f2a923D98304ec87F64353C4D5C853",
+    UpgradeValidator: "0x8A791620dd6260079BF849Dc5567aDC3F2FdC318",
+    UCDToken: "0xe7f1725E7734CE288F8367e1Bb143E90bb3F0512",
+    UCDController: "0xCf7Ed3AccA5a467e9e704C703E8D87F634fB0Fc9",
+    PositionManagerCoreModule: "0xB7f8BC63BbcaD18155201308C8f3540b07f84F5e",
+    TermManagerModule: "0x0DCd1Bf9A1b36cE34237eEaFef220932846BCD82",
+    LoanOperationsManagerModule: "0x68B1D87F95878fE05B998F19b66F4baba5De1aed",
+    BTCSpendAuthorizer: "0xc6e7DF5E7b4f2A278906862b61205850344D4e7d",
+    CollateralManagerModule: "0x322813Fd9A801c5507c9de605d63CEA4f2CE6c44",
+    LiquidationManagerModule: "0x4A679253410272dd5232B3Ff7cF5dbB88f295319",
+    CircuitBreakerModule: "0x0B306BF915C4d645ff596e518fAf3F9669b97016",
+    AdminModule: "0x09635F643e140090A9A8Dcd712eD6285858ceBef",
+    PositionManagerViews: "0x959922bE3CAee4b8Cd9a407cc3ac1C251C2007B1",
+    PositionManager: "0x851356ae760d987E095750cCeb3bC6014560891C",
+    OperationAuthorizationRegistry: "0xc96304e3c037f81dA488ed9dEa1D8F2a48278a75",
+    PKPValidation: "0xD0141E899a65C95a556fE2B27e5982A6DE7fDD7A"
+  }
+};
 var LOCALHOST_CONTRACTS = {
   MessageHashBuilder: "0xa82fF9aFd8f496c3d6ac40E2a0F282E47488CFc9",
   LITActionValidator: "0xa513E6E4b8f2a923D98304ec87F64353C4D5C853",
@@ -277,6 +835,11 @@ var LOCALHOST_CONTRACTS = {
   OperationAuthorizationRegistry: "0xc96304e3c037f81dA488ed9dEa1D8F2a48278a75",
   PKPValidation: "0xD0141E899a65C95a556fE2B27e5982A6DE7fDD7A"
 };
+var ALL_DEPLOYMENTS = {
+  sepolia: SEPOLIA_DEPLOYMENT,
+  mainnet: MAINNET_DEPLOYMENT,
+  localhost: LOCALHOST_DEPLOYMENT
+};
 var ALL_CONTRACTS = {
   sepolia: SEPOLIA_CONTRACTS,
   mainnet: MAINNET_CONTRACTS,
@@ -1103,6 +1666,177 @@ async function executePsmPlan(plan, signer, vctx) {
   });
   return { ...exec, approvalHashes };
 }
+
+// src/utils/sign-guard/typed-data-guard.ts
+var import_ethers7 = require("ethers");
+var LOGIN_BASE = [
+  { name: "address", type: "address" },
+  { name: "issuedAt", type: "uint256" },
+  { name: "nonce", type: "bytes32" }
+];
+function deepFreeze(value) {
+  if (value && typeof value === "object" && !Object.isFrozen(value)) {
+    Object.freeze(value);
+    for (const child of Object.values(value))
+      deepFreeze(child);
+  }
+  return value;
+}
+var SIGNABLE_TYPED_DATA = deepFreeze({
+  DiamondHands: {
+    label: "Sign in to Diamond Hands (no transaction, no funds)",
+    domain: "login",
+    variants: [
+      LOGIN_BASE,
+      [...LOGIN_BASE, { name: "audience", type: "string" }],
+      [{ name: "statement", type: "string" }, ...LOGIN_BASE, { name: "audience", type: "string" }]
+    ]
+  },
+  MintRequest: {
+    label: "Authorize minting UCD against your position",
+    domain: "loan-operations",
+    variants: [[
+      { name: "positionId", type: "bytes32" },
+      { name: "mintAmount", type: "uint256" },
+      { name: "quantumTimestamp", type: "uint256" }
+    ]]
+  },
+  RepayRequest: {
+    label: "Authorize a loan repayment",
+    domain: "loan-operations",
+    variants: [[
+      { name: "positionId", type: "bytes32" },
+      { name: "paymentAmount", type: "uint256" },
+      { name: "quantumTimestamp", type: "uint256" }
+    ]]
+  },
+  RenewRequest: {
+    label: "Authorize renewing your loan term",
+    domain: "loan-operations",
+    variants: [[
+      { name: "positionId", type: "bytes32" },
+      { name: "selectedTerm", type: "uint256" },
+      { name: "quantumTimestamp", type: "uint256" }
+    ]]
+  },
+  WithdrawRequest: {
+    label: "Request a BTC withdrawal (reserves the coins)",
+    domain: "loan-operations",
+    variants: [[
+      { name: "positionId", type: "bytes32" },
+      { name: "totalDeduction", type: "uint256" },
+      { name: "withdrawalAddress", type: "string" },
+      { name: "quantumTimestamp", type: "uint256" }
+    ]]
+  },
+  ExecuteBtcWithdrawalRequest: {
+    label: "Release a BTC withdrawal (sends the coins)",
+    domain: "btc-spend-authorizer",
+    variants: [[
+      { name: "positionId", type: "bytes32" },
+      { name: "withdrawalAddress", type: "string" },
+      { name: "recipientAmount", type: "uint256" },
+      { name: "networkFee", type: "uint256" },
+      { name: "totalDeduction", type: "uint256" },
+      { name: "spendTxid", type: "string" },
+      { name: "spendVout", type: "uint32" },
+      { name: "inputSetHash", type: "bytes32" },
+      { name: "quantumTimestamp", type: "uint256" }
+    ]]
+  },
+  InvalidateStaleSpendRequest: {
+    label: "Invalidate a stuck BTC reservation (moves coins vault-to-vault)",
+    domain: "btc-spend-authorizer",
+    variants: [[
+      { name: "positionId", type: "bytes32" },
+      { name: "spendTxid", type: "string" },
+      { name: "spendVout", type: "uint32" },
+      { name: "quantumTimestamp", type: "uint256" }
+    ]]
+  }
+});
+var DOMAIN_FIELD_ORDER = [
+  { name: "name", type: "string" },
+  { name: "version", type: "string" },
+  { name: "chainId", type: "uint256" },
+  { name: "verifyingContract", type: "address" },
+  { name: "salt", type: "bytes32" }
+];
+var PROTOCOL_DOMAIN_NAME = "DiamondHands.Protocol";
+var LOGIN_DOMAIN_NAME = "Diamond Hands";
+var DOMAIN_VERSION = "1";
+var TypedDataRefused = class extends Error {
+  constructor(reason) {
+    super(`typed-data request refused before the wallet: ${reason}`);
+    this.name = "TypedDataRefused";
+  }
+};
+function pinnedVerifyingContract(chainId, kind) {
+  const deployment = chainId === 31337 ? ALL_DEPLOYMENTS["localhost"] : Object.values(ALL_DEPLOYMENTS).find((d) => d.chainId === chainId);
+  const address = kind === "loan-operations" ? deployment?.contracts?.LoanOperationsManagerModule : deployment?.contracts?.BTCSpendAuthorizer;
+  if (!address) {
+    throw new TypedDataRefused(`no pinned ${kind} contract for chainId ${chainId}`);
+  }
+  return address;
+}
+function sameFields(a, b) {
+  return a.length === b.length && a.every((f, i) => f.name === b[i].name && f.type === b[i].type);
+}
+function assertSignableTypedData(chainId, domain, types, primaryType, message) {
+  const suppliedDomainType = types["EIP712Domain"];
+  if (suppliedDomainType !== void 0) {
+    const expectedDomainType = DOMAIN_FIELD_ORDER.filter((f) => f.name in domain);
+    if (!sameFields(suppliedDomainType, expectedDomainType)) {
+      throw new TypedDataRefused("the supplied EIP712Domain type does not match the domain's keys");
+    }
+  }
+  const structs = Object.fromEntries(
+    Object.entries(types).filter(([name]) => name !== "EIP712Domain")
+  );
+  const structNames = Object.keys(structs);
+  if (structNames.length !== 1) {
+    throw new TypedDataRefused(`expected exactly one struct type, got ${structNames.join(", ") || "none"}`);
+  }
+  const derived = import_ethers7.TypedDataEncoder.getPrimaryType(structs);
+  if (derived !== primaryType) {
+    throw new TypedDataRefused(`primaryType "${primaryType}" does not match the types' primary "${derived}"`);
+  }
+  const allowed = Object.prototype.hasOwnProperty.call(SIGNABLE_TYPED_DATA, primaryType) ? SIGNABLE_TYPED_DATA[primaryType] : void 0;
+  if (!allowed) {
+    throw new TypedDataRefused(`"${primaryType}" is not a Diamond Hands request`);
+  }
+  if (!allowed.variants.some((variant) => sameFields(structs[primaryType], variant))) {
+    throw new TypedDataRefused(`"${primaryType}" fields do not match any allowed field list`);
+  }
+  const expectedKeys = allowed.domain === "login" ? ["chainId", "name", "version"] : ["chainId", "name", "verifyingContract", "version"];
+  const domainKeys = Object.keys(domain).sort();
+  if (domainKeys.join(",") !== expectedKeys.join(",")) {
+    throw new TypedDataRefused(
+      `"${primaryType}" domain must have exactly ${expectedKeys.join(", ")}; got ${domainKeys.join(", ")}`
+    );
+  }
+  const expectedName = allowed.domain === "login" ? LOGIN_DOMAIN_NAME : PROTOCOL_DOMAIN_NAME;
+  if (domain["name"] !== expectedName || domain["version"] !== DOMAIN_VERSION) {
+    throw new TypedDataRefused(`"${primaryType}" domain must be "${expectedName}" v${DOMAIN_VERSION}`);
+  }
+  if (typeof domain["chainId"] !== "number" || domain["chainId"] !== chainId) {
+    throw new TypedDataRefused(`domain chainId ${String(domain["chainId"])} is not this session's chain ${chainId}`);
+  }
+  if (allowed.domain !== "login") {
+    const pinned = pinnedVerifyingContract(chainId, allowed.domain);
+    if (typeof domain["verifyingContract"] !== "string" || domain["verifyingContract"].toLowerCase() !== pinned.toLowerCase()) {
+      throw new TypedDataRefused(
+        `"${primaryType}" verifyingContract ${String(domain["verifyingContract"])} is not the pinned ${allowed.domain} contract ${pinned}`
+      );
+    }
+  }
+  const messageKeys = Object.keys(message).sort().join(",");
+  const fieldKeys = structs[primaryType].map((f) => f.name).sort().join(",");
+  if (messageKeys !== fieldKeys) {
+    throw new TypedDataRefused(`"${primaryType}" message keys (${messageKeys}) are not exactly its fields (${fieldKeys})`);
+  }
+  return { label: allowed.label };
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AUTH_VALIDITY_WINDOWS,
@@ -1122,9 +1856,12 @@ async function executePsmPlan(plan, signer, vctx) {
   QUANTUM_SECONDS,
   REQUEST_TIMEOUT_MS,
   SIGNABLE_FUNCTIONS,
+  SIGNABLE_TYPED_DATA,
   TxValidationError,
+  TypedDataRefused,
   asEnvelope,
   assertFeeCeiling,
+  assertSignableTypedData,
   authValiditySec,
   authorizeWithServer,
   broadcastSignedTx,