@monolythium/core-sdk 0.4.0 → 0.4.2

package/dist/index.cjs

@@ -2,11 +2,13 @@
 
 var blake3_js = require('@noble/hashes/blake3.js');
 var sha3_js = require('@noble/hashes/sha3.js');
+var mlKem_js = require('@noble/post-quantum/ml-kem.js');
+var chacha_js = require('@noble/ciphers/chacha.js');
+require('@noble/hashes/utils.js');
 var mlDsa_js = require('@noble/post-quantum/ml-dsa.js');
 var bls12381_js = require('@noble/curves/bls12-381.js');
-require('@noble/post-quantum/ml-kem.js');
-require('@noble/ciphers/chacha.js');
-require('@noble/hashes/utils.js');
+var bip39 = require('@scure/bip39');
+var english_js = require('@scure/bip39/wordlists/english.js');
 
 // src/error.ts
 var SdkError = class _SdkError extends Error {
@@ -437,13 +439,36 @@ var NODE_REGISTRY_SELECTORS = {
   /** `getOperatorNetworkMetadata(bytes32)` view (PF-6). */
   getOperatorNetworkMetadata: "0x" + selectorHex("getOperatorNetworkMetadata(bytes32)"),
   /** `getClusterDiversity(uint32)` view (PF-6). */
-  getClusterDiversity: "0x" + selectorHex("getClusterDiversity(uint32)")
+  getClusterDiversity: "0x" + selectorHex("getClusterDiversity(uint32)"),
+  /** `requestClusterJoin(uint32,bytes)` — CJ-1 joining operator posts an admit request. */
+  requestClusterJoin: "0x" + selectorHex("requestClusterJoin(uint32,bytes)"),
+  /** `voteClusterAdmit(uint32,bytes32,bytes)` — CJ-1 current member admit vote. */
+  voteClusterAdmit: "0x" + selectorHex("voteClusterAdmit(uint32,bytes32,bytes)"),
+  /** `cancelClusterJoin(uint32,bytes32)` — CJ-1 requester cancellation/refund. */
+  cancelClusterJoin: "0x" + selectorHex("cancelClusterJoin(uint32,bytes32)"),
+  /** `expireClusterJoin(uint32,bytes32)` — CJ-1 public reaper/refund. */
+  expireClusterJoin: "0x" + selectorHex("expireClusterJoin(uint32,bytes32)"),
+  /** `getClusterJoinRequest(uint32,bytes32)` — CJ-1 request status view. */
+  getClusterJoinRequest: "0x" + selectorHex("getClusterJoinRequest(uint32,bytes32)"),
+  /** `formCluster(bytes,bytes,bytes)` — no-foundation cluster formation by roster consent. */
+  formCluster: "0x" + selectorHex("formCluster(bytes,bytes,bytes)")
 };
-var NODE_REGISTRY_BLS_PUBKEY_BYTES = 48;
-var NODE_REGISTRY_DKG_THRESHOLD_SIG_BYTES = 96;
+var NODE_REGISTRY_CLUSTER_MEMBER_REF_BYTES = 48;
+var NODE_REGISTRY_LEGACY_CLUSTER_MEMBER_PUBKEY_BYTES = NODE_REGISTRY_CLUSTER_MEMBER_REF_BYTES;
+var NODE_REGISTRY_BLS_PUBKEY_BYTES = NODE_REGISTRY_CLUSTER_MEMBER_REF_BYTES;
+var NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES = 1952;
+var NODE_REGISTRY_CONSENSUS_SIGNATURE_BYTES = 3309;
+var NODE_REGISTRY_CONSENSUS_POP_BYTES = 3309;
+var NODE_REGISTRY_DKG_ATTESTATION_SIG_BYTES = 96;
+var NODE_REGISTRY_DKG_THRESHOLD_SIG_BYTES = NODE_REGISTRY_DKG_ATTESTATION_SIG_BYTES;
 var NODE_REGISTRY_DKG_RESHARE_MIN_SIGNERS = 5;
 var NODE_REGISTRY_DKG_RESHARE_MAX_SIGNERS = 7;
 var NODE_REGISTRY_PENDING_CHANGE_MAX_INTENT_ID = (1n << 56n) - 1n;
+var NODE_REGISTRY_FORM_CLUSTER_ACTIVE_COUNT = 7;
+var NODE_REGISTRY_FORM_CLUSTER_STANDBY_COUNT = 3;
+var NODE_REGISTRY_FORM_CLUSTER_MEMBER_COUNT = NODE_REGISTRY_FORM_CLUSTER_ACTIVE_COUNT + NODE_REGISTRY_FORM_CLUSTER_STANDBY_COUNT;
+var NODE_REGISTRY_FORM_CLUSTER_THRESHOLD = 7;
+var NODE_REGISTRY_FORM_CLUSTER_MESSAGE_DOMAIN = "PROTOCORE_NODE_REGISTRY_CLUSTER_FORM_V1\0";
 var PENDING_CHANGE_KIND_CODES = {
   add: 1,
   remove: 2,
@@ -510,7 +535,7 @@ function encodeSubmitPendingChangeCalldata(args) {
   const { kind, kindCode } = normalizePendingChangeKind(args.kind);
   const targetPubkey = expectLength2(
     toBytes(args.targetPubkey),
-    NODE_REGISTRY_BLS_PUBKEY_BYTES,
+    NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES,
     "targetPubkey"
   );
   const effectiveEpoch = toUint64(args.effectiveEpoch, "effectiveEpoch");
@@ -524,8 +549,7 @@ function encodeSubmitPendingChangeCalldata(args) {
   if (kind !== "rotate" && intentId !== 0n) {
     throw new NodeRegistryError("only rotate pending changes may carry a non-zero intentId");
   }
-  const targetTail = new Uint8Array(32);
-  targetTail.set(targetPubkey.slice(32, 48), 0);
+  const targetPubkeyPadded = padToWord(targetPubkey);
   return bytesToHex(
     concatBytes(
       hexToBytes(NODE_REGISTRY_SELECTORS.submitPendingChange),
@@ -533,55 +557,59 @@ function encodeSubmitPendingChangeCalldata(args) {
       uint64Word(4n * 32n, "targetPubkeyOffset"),
       uint64Word(effectiveEpoch, "effectiveEpoch"),
       uint64Word(intentId, "intentId"),
-      uint64Word(BigInt(NODE_REGISTRY_BLS_PUBKEY_BYTES), "targetPubkeyLength"),
-      targetPubkey.slice(0, 32),
-      targetTail
+      uint64Word(BigInt(targetPubkey.length), "targetPubkeyLength"),
+      targetPubkeyPadded
     )
   );
 }
 function encodeCancelPendingChangeCalldata(args) {
   const targetPubkey = expectLength2(
     toBytes(args.targetPubkey),
-    NODE_REGISTRY_BLS_PUBKEY_BYTES,
+    NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES,
     "targetPubkey"
   );
-  const targetTail = new Uint8Array(32);
-  targetTail.set(targetPubkey.slice(32, 48), 0);
+  const targetPubkeyPadded = padToWord(targetPubkey);
   return bytesToHex(
     concatBytes(
       hexToBytes(NODE_REGISTRY_SELECTORS.cancelPendingChange),
       uint64Word(args.epoch, "epoch"),
       uint64Word(2n * 32n, "targetPubkeyOffset"),
-      uint64Word(BigInt(NODE_REGISTRY_BLS_PUBKEY_BYTES), "targetPubkeyLength"),
-      targetPubkey.slice(0, 32),
-      targetTail
+      uint64Word(BigInt(targetPubkey.length), "targetPubkeyLength"),
+      targetPubkeyPadded
     )
   );
 }
-function parseDkgResharePublicKeys(blsPublicKeys) {
-  const keys = toBytes(blsPublicKeys);
-  if (keys.length % NODE_REGISTRY_BLS_PUBKEY_BYTES !== 0) {
-    throw new NodeRegistryError("blsPublicKeys length must be a multiple of 48 bytes");
+function parseDkgResharePublicKeys(consensusPublicKeys) {
+  const keys = toBytes(consensusPublicKeys);
+  if (keys.length % NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES !== 0) {
+    throw new NodeRegistryError(
+      `consensusPublicKeys length must be a multiple of ${NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES} bytes`
+    );
   }
-  const signerCount = keys.length / NODE_REGISTRY_BLS_PUBKEY_BYTES;
+  const signerCount = keys.length / NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES;
   if (signerCount < NODE_REGISTRY_DKG_RESHARE_MIN_SIGNERS || signerCount > NODE_REGISTRY_DKG_RESHARE_MAX_SIGNERS) {
     throw new NodeRegistryError(
-      `blsPublicKeys must contain ${NODE_REGISTRY_DKG_RESHARE_MIN_SIGNERS}..${NODE_REGISTRY_DKG_RESHARE_MAX_SIGNERS} signers`
+      `consensusPublicKeys must contain ${NODE_REGISTRY_DKG_RESHARE_MIN_SIGNERS}..${NODE_REGISTRY_DKG_RESHARE_MAX_SIGNERS} signers`
     );
   }
   const out = [];
   const seen = /* @__PURE__ */ new Set();
-  for (let offset = 0; offset < keys.length; offset += NODE_REGISTRY_BLS_PUBKEY_BYTES) {
-    const key = keys.slice(offset, offset + NODE_REGISTRY_BLS_PUBKEY_BYTES);
+  for (let offset = 0; offset < keys.length; offset += NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES) {
+    const key = keys.slice(offset, offset + NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES);
     const keyHex = bytesToHex(key);
     if (seen.has(keyHex)) {
-      throw new NodeRegistryError("blsPublicKeys contains a duplicate signer pubkey");
+      throw new NodeRegistryError("consensusPublicKeys contains a duplicate signer pubkey");
     }
     seen.add(keyHex);
     out.push(key);
   }
   return out;
 }
+function dkgReshareConsensusPublicKeys(args) {
+  if (args.consensusPublicKeys !== void 0) return args.consensusPublicKeys;
+  if (args.blsPublicKeys !== void 0) return args.blsPublicKeys;
+  throw new NodeRegistryError("consensusPublicKeys is required");
+}
 function encodeAttestDkgReshareCalldata(args) {
   const intentId = toUint64(args.intentId, "intentId");
   if (intentId === 0n) {
@@ -590,10 +618,10 @@ function encodeAttestDkgReshareCalldata(args) {
   if (intentId > NODE_REGISTRY_PENDING_CHANGE_MAX_INTENT_ID) {
     throw new NodeRegistryError("intentId must be <= 2^56-1");
   }
-  const publicKeys = concatBytes(...parseDkgResharePublicKeys(args.blsPublicKeys));
+  const publicKeys = concatBytes(...parseDkgResharePublicKeys(dkgReshareConsensusPublicKeys(args)));
   const thresholdSig = expectLength2(
     toBytes(args.thresholdSig),
-    NODE_REGISTRY_DKG_THRESHOLD_SIG_BYTES,
+    NODE_REGISTRY_DKG_ATTESTATION_SIG_BYTES,
     "thresholdSig"
   );
   const keysPadded = padToWord(publicKeys);
@@ -604,15 +632,158 @@ function encodeAttestDkgReshareCalldata(args) {
     concatBytes(
       hexToBytes(NODE_REGISTRY_SELECTORS.attestDkgReshare),
       uint64Word(intentId, "intentId"),
-      uint64Word(offsetKeys, "blsPublicKeysOffset"),
+      uint64Word(offsetKeys, "consensusPublicKeysOffset"),
       uint64Word(offsetSig, "thresholdSigOffset"),
-      uint64Word(BigInt(publicKeys.length), "blsPublicKeysLength"),
+      uint64Word(BigInt(publicKeys.length), "consensusPublicKeysLength"),
       keysPadded,
       uint64Word(BigInt(thresholdSig.length), "thresholdSigLength"),
       sigPadded
     )
   );
 }
+function encodeRequestClusterJoinCalldata(args) {
+  const operatorPubkey = expectLength2(
+    toBytes(args.operatorPubkey),
+    NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES,
+    "operatorPubkey"
+  );
+  const operatorPubkeyPadded = padToWord(operatorPubkey);
+  return bytesToHex(
+    concatBytes(
+      hexToBytes(NODE_REGISTRY_SELECTORS.requestClusterJoin),
+      uint32Word(toUint32(args.clusterId, "clusterId")),
+      uint64Word(2n * 32n, "operatorPubkeyOffset"),
+      uint64Word(BigInt(operatorPubkey.length), "operatorPubkeyLength"),
+      operatorPubkeyPadded
+    )
+  );
+}
+function encodeVoteClusterAdmitCalldata(args) {
+  const operatorId = expectLength2(toBytes(args.operatorId), 32, "operatorId");
+  const voterPubkey = expectLength2(
+    toBytes(args.voterPubkey),
+    NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES,
+    "voterPubkey"
+  );
+  const voterPubkeyPadded = padToWord(voterPubkey);
+  return bytesToHex(
+    concatBytes(
+      hexToBytes(NODE_REGISTRY_SELECTORS.voteClusterAdmit),
+      uint32Word(toUint32(args.clusterId, "clusterId")),
+      operatorId,
+      uint64Word(3n * 32n, "voterPubkeyOffset"),
+      uint64Word(BigInt(voterPubkey.length), "voterPubkeyLength"),
+      voterPubkeyPadded
+    )
+  );
+}
+function encodeCancelClusterJoinCalldata(args) {
+  return bytesToHex(
+    concatBytes(
+      hexToBytes(NODE_REGISTRY_SELECTORS.cancelClusterJoin),
+      uint32Word(toUint32(args.clusterId, "clusterId")),
+      expectLength2(toBytes(args.operatorId), 32, "operatorId")
+    )
+  );
+}
+function encodeExpireClusterJoinCalldata(args) {
+  return bytesToHex(
+    concatBytes(
+      hexToBytes(NODE_REGISTRY_SELECTORS.expireClusterJoin),
+      uint32Word(toUint32(args.clusterId, "clusterId")),
+      expectLength2(toBytes(args.operatorId), 32, "operatorId")
+    )
+  );
+}
+function encodeGetClusterJoinRequestCalldata(args) {
+  return bytesToHex(
+    concatBytes(
+      hexToBytes(NODE_REGISTRY_SELECTORS.getClusterJoinRequest),
+      uint32Word(toUint32(args.clusterId, "clusterId")),
+      expectLength2(toBytes(args.operatorId), 32, "operatorId")
+    )
+  );
+}
+function formClusterMessage(activePubkeys, standbyPubkeys) {
+  const active = expectLength2(
+    toBytes(activePubkeys),
+    NODE_REGISTRY_FORM_CLUSTER_ACTIVE_COUNT * NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES,
+    "activePubkeys"
+  );
+  const standby = expectLength2(
+    toBytes(standbyPubkeys),
+    NODE_REGISTRY_FORM_CLUSTER_STANDBY_COUNT * NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES,
+    "standbyPubkeys"
+  );
+  return blake3_js.blake3(
+    concatBytes(
+      new TextEncoder().encode(NODE_REGISTRY_FORM_CLUSTER_MESSAGE_DOMAIN),
+      u16BeBytes(NODE_REGISTRY_FORM_CLUSTER_ACTIVE_COUNT),
+      u16BeBytes(NODE_REGISTRY_FORM_CLUSTER_STANDBY_COUNT),
+      u16BeBytes(NODE_REGISTRY_FORM_CLUSTER_THRESHOLD),
+      u32BeBytes(active.length),
+      active,
+      u32BeBytes(standby.length),
+      standby
+    )
+  );
+}
+function formClusterMessageHex(activePubkeys, standbyPubkeys) {
+  return bytesToHex(formClusterMessage(activePubkeys, standbyPubkeys));
+}
+function encodeFormClusterCalldata(args) {
+  const activePubkeys = expectLength2(
+    toBytes(args.activePubkeys),
+    NODE_REGISTRY_FORM_CLUSTER_ACTIVE_COUNT * NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES,
+    "activePubkeys"
+  );
+  const standbyPubkeys = expectLength2(
+    toBytes(args.standbyPubkeys),
+    NODE_REGISTRY_FORM_CLUSTER_STANDBY_COUNT * NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES,
+    "standbyPubkeys"
+  );
+  const signatures = expectLength2(
+    toBytes(args.signatures),
+    NODE_REGISTRY_FORM_CLUSTER_MEMBER_COUNT * NODE_REGISTRY_CONSENSUS_SIGNATURE_BYTES,
+    "signatures"
+  );
+  const activePadded = padToWord(activePubkeys);
+  const standbyPadded = padToWord(standbyPubkeys);
+  const signaturesPadded = padToWord(signatures);
+  const activeOffset = 3n * 32n;
+  const standbyOffset = activeOffset + 32n + BigInt(activePadded.length);
+  const signaturesOffset = standbyOffset + 32n + BigInt(standbyPadded.length);
+  return bytesToHex(
+    concatBytes(
+      hexToBytes(NODE_REGISTRY_SELECTORS.formCluster),
+      uint64Word(activeOffset, "activePubkeysOffset"),
+      uint64Word(standbyOffset, "standbyPubkeysOffset"),
+      uint64Word(signaturesOffset, "signaturesOffset"),
+      uint64Word(BigInt(activePubkeys.length), "activePubkeysLength"),
+      activePadded,
+      uint64Word(BigInt(standbyPubkeys.length), "standbyPubkeysLength"),
+      standbyPadded,
+      uint64Word(BigInt(signatures.length), "signaturesLength"),
+      signaturesPadded
+    )
+  );
+}
+function decodeClusterJoinRequest(returnData) {
+  const bytes = expectLength2(toBytes(returnData), 8 * 32, "clusterJoinRequest");
+  const word = (i) => bytes.slice(i * 32, (i + 1) * 32);
+  const statusCode = numberFromWord(word(5), "status", 255);
+  return {
+    owner: bytesToHex(word(0).slice(12, 32)),
+    requestEpoch: u64FromWord(word(1)),
+    snapshotThreshold: numberFromWord(word(2), "snapshotThreshold", 65535),
+    snapshotN: numberFromWord(word(3), "snapshotN", 65535),
+    voteCount: numberFromWord(word(4), "voteCount", 65535),
+    statusCode,
+    status: clusterJoinRequestStatusLabel(statusCode),
+    bondLythoshi: uintFromWord(word(6)),
+    sealRosterPending: numberFromWord(word(7), "sealRosterPending", 1) === 1
+  };
+}
 function encodeReportServiceProbeCalldata(args) {
   if (!isValidPublicServiceProbeMask(args.serviceMask)) {
     throw new NodeRegistryError(
@@ -699,7 +870,9 @@ function deriveClusterAnchorAddress(roster, threshold) {
   if (!Number.isInteger(threshold) || threshold < 0 || threshold > 65535) {
     throw new NodeRegistryError("threshold must be a uint16");
   }
-  const members = roster.map((m, i) => expectLength2(toBytes(m), 48, `roster[${i}]`));
+  const members = roster.map(
+    (m, i) => expectLength2(toBytes(m), NODE_REGISTRY_CLUSTER_MEMBER_REF_BYTES, `roster[${i}]`)
+  );
   members.sort(compareBytes);
   const parts = [
     new TextEncoder().encode(MULTISIG_ADDRESS_DERIVATION_DOMAIN),
@@ -724,6 +897,36 @@ function u64FromWord(word) {
   }
   return v;
 }
+function uintFromWord(word) {
+  let v = 0n;
+  for (const byte of word) {
+    v = v << 8n | BigInt(byte);
+  }
+  return v;
+}
+function numberFromWord(word, name, max) {
+  const value = uintFromWord(word);
+  if (value > BigInt(max)) {
+    throw new NodeRegistryError(`${name} must be <= ${max}`);
+  }
+  return Number(value);
+}
+function clusterJoinRequestStatusLabel(status) {
+  switch (status) {
+    case 0:
+      return "none";
+    case 1:
+      return "open";
+    case 2:
+      return "admitted";
+    case 3:
+      return "cancelled";
+    case 4:
+      return "expired";
+    default:
+      return "unknown";
+  }
+}
 function u64BeBytes(value) {
   const out = new Uint8Array(8);
   let n = value;
@@ -733,6 +936,16 @@ function u64BeBytes(value) {
   }
   return out;
 }
+function u32BeBytes(value) {
+  const n = expectUint32(value, "uint32");
+  return Uint8Array.from([n >>> 24 & 255, n >>> 16 & 255, n >>> 8 & 255, n & 255]);
+}
+function u16BeBytes(value) {
+  if (!Number.isInteger(value) || value < 0 || value > 65535) {
+    throw new NodeRegistryError("uint16 value out of range");
+  }
+  return Uint8Array.from([value >>> 8 & 255, value & 255]);
+}
 function compareBytes(a, b) {
   const len = Math.min(a.length, b.length);
   for (let i = 0; i < len; i++) {
@@ -755,6 +968,27 @@ function expectUint32(value, name) {
   }
   return value;
 }
+function toUint32(value, name) {
+  let parsed;
+  if (typeof value === "bigint") {
+    parsed = value;
+  } else if (typeof value === "number") {
+    if (!Number.isSafeInteger(value)) {
+      throw new NodeRegistryError(`${name} must be a safe integer`);
+    }
+    parsed = BigInt(value);
+  } else {
+    const trimmed = value.trim();
+    if (!/^\d+$/u.test(trimmed)) {
+      throw new NodeRegistryError(`${name} must be a decimal uint32`);
+    }
+    parsed = BigInt(trimmed);
+  }
+  if (parsed < 0n || parsed > 0xffffffffn) {
+    throw new NodeRegistryError(`${name} must fit uint32`);
+  }
+  return Number(parsed);
+}
 function uint32Word(value) {
   const out = new Uint8Array(32);
   const n = expectUint32(value, "uint32");
@@ -897,26 +1131,15 @@ function bigintToBeBytes(value, bytes, label) {
   }
   return out;
 }
-
-// src/crypto/submission.ts
-async function fetchEncryptionKey(client) {
-  const result = await client.call(
-    "lyth_getEncryptionKey",
-    []
-  );
-  return {
-    algo: result.algo ?? "ml-kem-768",
-    epoch: typeof result.epoch === "string" ? BigInt(result.epoch) : BigInt(result.epoch),
-    encapsulationKey: hexToBytes2(result.encapsulationKey, "encapsulationKey")
-  };
-}
-var ENCRYPTED_SUBMISSION_UNAVAILABLE_MESSAGE = "encrypted mempool submission unavailable until MB-3 threshold decryption is active";
-async function buildEncryptedSubmission(_args) {
-  await Promise.resolve();
-  throw new Error(ENCRYPTED_SUBMISSION_UNAVAILABLE_MESSAGE);
-}
-async function submitEncryptedEnvelope(client, envelopeWireHex) {
-  return client.call("lyth_submitEncrypted", [envelopeWireHex]);
+function parseBigint(value, label) {
+  if (value === void 0) throw new Error(`${label} missing`);
+  if (typeof value === "bigint") return value;
+  if (typeof value === "number") {
+    if (!Number.isSafeInteger(value) || value < 0) throw new Error(`${label} must be a non-negative safe integer`);
+    return BigInt(value);
+  }
+  if (value.startsWith("0x") || value.startsWith("0X")) return BigInt(value);
+  return BigInt(value);
 }
 
 // src/crypto/bincode.ts
@@ -978,6 +1201,645 @@ var BincodeWriter = class {
   }
 };
 
+// src/crypto/tx.ts
+function encodeTransactionForHash(fields, tag) {
+  const n = normalizeTxFields(fields);
+  return concatBytes2(
+    Uint8Array.of(tag),
+    bigintToBeBytes(n.chainId, 8, "chainId"),
+    bigintToBeBytes(n.nonce, 8, "nonce"),
+    bigintToBeBytes(n.maxPriorityFeePerGas, 32, "maxPriorityFeePerGas"),
+    bigintToBeBytes(n.maxFeePerGas, 32, "maxFeePerGas"),
+    bigintToBeBytes(n.gasLimit, 8, "gasLimit"),
+    n.to === null ? Uint8Array.of(0) : concatBytes2(Uint8Array.of(1), n.to),
+    bigintToBeBytes(n.value, 32, "value"),
+    bigintToBeBytes(BigInt(n.input.length), 4, "input.length"),
+    n.input,
+    new Uint8Array(4),
+    // access_list length
+    encodeExtensionsForHash(n.extensions)
+  );
+}
+function bincodeSignedTransaction(fields, signature, publicKey) {
+  const n = normalizeTxFields(fields);
+  const sig = expectBytes(signature, ML_DSA_65_SIGNATURE_LEN, "ML-DSA-65 signature");
+  const pk = expectBytes(publicKey, ML_DSA_65_PUBLIC_KEY_LEN, "ML-DSA-65 public key");
+  const w = new BincodeWriter();
+  w.u64(n.chainId);
+  w.u64(n.nonce);
+  w.bytes(uint256Be(n.maxPriorityFeePerGas, "maxPriorityFeePerGas"));
+  w.bytes(uint256Be(n.maxFeePerGas, "maxFeePerGas"));
+  w.u64(n.gasLimit);
+  if (n.to === null) {
+    w.u8(0);
+  } else {
+    w.u8(1);
+    w.bytes(n.to);
+  }
+  w.bytes(uint256Be(n.value, "value"));
+  w.bytes(n.input);
+  w.u64(0n);
+  w.u64(BigInt(n.extensions.length));
+  for (const ext of n.extensions) bincodeTypedExtensionInto(w, ext);
+  bincodeMlDsa65OpaqueInto(w, sig);
+  bincodeMlDsa65OpaqueInto(w, pk);
+  return w.toBytes();
+}
+function normalizeTxFields(fields) {
+  return {
+    chainId: parseBigint(fields.chainId, "chainId"),
+    nonce: parseBigint(fields.nonce, "nonce"),
+    maxPriorityFeePerGas: parseBigint(fields.maxPriorityFeePerGas, "maxPriorityFeePerGas"),
+    maxFeePerGas: parseBigint(fields.maxFeePerGas, "maxFeePerGas"),
+    gasLimit: parseBigint(fields.gasLimit, "gasLimit"),
+    to: normalizeTo(fields.to),
+    value: parseBigint(fields.value, "value"),
+    input: normalizeBytes(fields.input ?? new Uint8Array(0), "input"),
+    extensions: normalizeExtensions(fields.extensions)
+  };
+}
+function normalizeTo(value) {
+  if (value === null) return null;
+  const bytes = normalizeBytes(value, "to");
+  return expectBytes(bytes, 20, "to");
+}
+function normalizeBytes(value, label) {
+  if (typeof value === "string") return hexToBytes2(value, label);
+  return value instanceof Uint8Array ? value : Uint8Array.from(value);
+}
+function normalizeExtensions(value) {
+  if (value === void 0) return [];
+  return value.map((ext, index) => {
+    if (!Number.isInteger(ext.kind) || ext.kind < 0 || ext.kind > 255) {
+      throw new Error(`extensions[${index}].kind out of u8 range`);
+    }
+    const body = normalizeBytes("bodyHex" in ext ? ext.bodyHex : ext.body, `extensions[${index}].body`);
+    if (body.length > 4294967295) {
+      throw new Error(`extensions[${index}].body exceeds u32 length`);
+    }
+    return { kind: ext.kind, body };
+  });
+}
+function encodeExtensionsForHash(extensions) {
+  const chunks = [bigintToBeBytes(BigInt(extensions.length), 4, "extensions.length")];
+  for (const ext of extensions) {
+    chunks.push(
+      Uint8Array.of(ext.kind),
+      bigintToBeBytes(BigInt(ext.body.length), 4, "extension.body.length"),
+      ext.body
+    );
+  }
+  return concatBytes2(...chunks);
+}
+function uint256Be(value, label) {
+  if (value < 0n || value >= 1n << 256n) throw new Error(`${label} out of u256 range`);
+  const out = new Uint8Array(32);
+  let v = value;
+  for (let i = 31; i >= 0; i--) {
+    out[i] = Number(v & 0xffn);
+    v >>= 8n;
+  }
+  return out;
+}
+function bincodeMlDsa65OpaqueInto(w, raw) {
+  w.enumVariant(ENUM_VARIANT_INDEX_ML_DSA_65);
+  w.u16(STANDARD_ALGO_NUMBER_ML_DSA_65);
+  w.bytes(raw);
+}
+function bincodeTypedExtensionInto(w, ext) {
+  w.u8(ext.kind);
+  w.bytes(ext.body);
+}
+
+// src/crypto/ml-dsa.ts
+var ML_DSA_65_SEED_LEN = 32;
+var ML_DSA_65_SIGNING_KEY_LEN = 4032;
+var ML_DSA_65_PUBLIC_KEY_LEN = 1952;
+var ML_DSA_65_SIGNATURE_LEN = 3309;
+var STANDARD_ALGO_NUMBER_ML_DSA_65 = 1001;
+var ENUM_VARIANT_INDEX_ML_DSA_65 = 5;
+var ADDRESS_DERIVATION_DOMAIN = "MONO_ADDRESS_BLAKE3_20_V1";
+var ADDRESS_DERIVATION_DOMAIN_BYTES = new TextEncoder().encode(ADDRESS_DERIVATION_DOMAIN);
+var MlDsa65Backend = class _MlDsa65Backend {
+  #secretKey;
+  #publicKey;
+  #addressBytes;
+  constructor(secretKey, publicKey) {
+    this.#secretKey = expectBytes(secretKey, ML_DSA_65_SIGNING_KEY_LEN, "ML-DSA-65 secret key").slice();
+    this.#publicKey = expectBytes(publicKey, ML_DSA_65_PUBLIC_KEY_LEN, "ML-DSA-65 public key").slice();
+    this.#addressBytes = mlDsa65AddressBytes(this.#publicKey);
+  }
+  static fromSeed(seed) {
+    const kp = mlDsa_js.ml_dsa65.keygen(expectBytes(seed, ML_DSA_65_SEED_LEN, "ML-DSA-65 seed"));
+    return new _MlDsa65Backend(kp.secretKey, kp.publicKey);
+  }
+  publicKey() {
+    return this.#publicKey.slice();
+  }
+  addressBytes() {
+    return this.#addressBytes.slice();
+  }
+  getAddress() {
+    return bytesToHex2(this.#addressBytes);
+  }
+  sign(message) {
+    return mlDsa_js.ml_dsa65.sign(message, this.#secretKey, { extraEntropy: false });
+  }
+  signPrehash(digest) {
+    return this.sign(expectBytes(digest, 32, "prehash"));
+  }
+  verify(message, signature) {
+    return mlDsa_js.ml_dsa65.verify(
+      expectBytes(signature, ML_DSA_65_SIGNATURE_LEN, "ML-DSA-65 signature"),
+      message,
+      this.#publicKey
+    );
+  }
+  signEvmTx(fields) {
+    const txHashPreimage = encodeTransactionForHash(fields, 1);
+    const sighash = sha3_js.keccak_256(txHashPreimage);
+    const signature = this.sign(sighash);
+    const wireBytes = bincodeSignedTransaction(fields, signature, this.#publicKey);
+    const txHash = sha3_js.keccak_256(
+      concatBytes2(
+        encodeTransactionForHash(fields, 2),
+        signature,
+        this.#publicKey
+      )
+    );
+    return {
+      wireHex: bytesToHex2(wireBytes).slice(2),
+      wireBytes,
+      sighash,
+      txHash
+    };
+  }
+};
+function mlDsa65AddressFromPublicKey(publicKey) {
+  return bytesToHex2(mlDsa65AddressBytes(publicKey));
+}
+function mlDsa65AddressBytes(publicKey) {
+  const bytes = expectBytes(publicKey, ML_DSA_65_PUBLIC_KEY_LEN, "ML-DSA-65 public key");
+  return blake3_js.blake3(concatBytes2(
+    ADDRESS_DERIVATION_DOMAIN_BYTES,
+    bigintToBeBytes(BigInt(STANDARD_ALGO_NUMBER_ML_DSA_65), 2, "ML-DSA-65 algo id"),
+    bytes
+  )).slice(0, 20);
+}
+
+// src/crypto/envelope.ts
+new TextEncoder().encode("protocore/v2/mempool/dkg-mlkem768/1");
+var MempoolClass = {
+  Transfer: 0,
+  ContractCall: 1,
+  CLOBOp: 3};
+function bincodeNonceAad(aad) {
+  const w = new BincodeWriter();
+  w.bytes(expectBytes(aad.sender, 20, "NonceAad.sender"));
+  w.u64(aad.nonce);
+  w.u64(aad.chainId);
+  w.enumVariant(aad.class);
+  w.u128(aad.maxFeePerGas);
+  w.u128(aad.maxPriorityFeePerGas);
+  w.u64(aad.gasLimit);
+  return w.toBytes();
+}
+function bincodeDecryptHint(hint) {
+  const w = new BincodeWriter();
+  w.u64(hint.epoch);
+  w.u16(hint.scheme);
+  return w.toBytes();
+}
+function bincodeEncryptedEnvelope(env) {
+  const w = new BincodeWriter();
+  w.rawBytes(bincodeNonceAad(env.nonceAad));
+  w.bytes(env.ciphertext);
+  w.rawBytes(bincodeDecryptHint(env.decryptionHint));
+  bincodeMlDsa65OpaqueInto2(w, expectBytes(env.senderPubkey, ML_DSA_65_PUBLIC_KEY_LEN, "senderPubkey"));
+  bincodeMlDsa65OpaqueInto2(w, expectBytes(env.outerSignature, ML_DSA_65_SIGNATURE_LEN, "outerSignature"));
+  w.bytes(expectBytes(env.sender, 20, "sender"));
+  return w.toBytes();
+}
+function outerSigDigest(nonceAad, ciphertext, decryptionHint, senderPubkey) {
+  const aad = bincodeNonceAad(nonceAad);
+  const hint = bincodeDecryptHint(decryptionHint);
+  return sha3_js.keccak_256(concatBytes2(aad, ciphertext, hint, expectBytes(senderPubkey, ML_DSA_65_PUBLIC_KEY_LEN, "senderPubkey")));
+}
+function bincodeMlDsa65OpaqueInto2(w, raw) {
+  w.enumVariant(ENUM_VARIANT_INDEX_ML_DSA_65);
+  w.u16(STANDARD_ALGO_NUMBER_ML_DSA_65);
+  w.bytes(raw);
+}
+var SEAL_EK_LEN = 1184;
+var SEAL_KEY_LEN = 32;
+var SEAL_NONCE_LEN = 12;
+var SEAL_COMMIT_LEN = 32;
+var SEAL_SECRET_LEN = 32;
+var SEAL_SHARE_LEN = 1 + SEAL_SECRET_LEN;
+var CLUSTER_MLKEM_SHAMIR = 3;
+var COMMIT_DOMAIN = new TextEncoder().encode("lythiumseal/commit/v1");
+var KEK_DOMAIN = new TextEncoder().encode("lythiumseal/kek/v1");
+var NONCE_DOMAIN = new TextEncoder().encode("lythiumseal/nonce/v1");
+var BODY_AAD_DOMAIN = new TextEncoder().encode("lythiumseal/body/v1");
+var SHARE_AAD_DOMAIN = new TextEncoder().encode("lythiumseal/share/v1");
+var ROSTER_DOMAIN = new TextEncoder().encode("lythiumseal/roster/v1");
+function cryptoRandomSource() {
+  return {
+    fillBytes(dest) {
+      crypto.getRandomValues(dest);
+    }
+  };
+}
+function u32le(n) {
+  const out = new Uint8Array(4);
+  out[0] = n & 255;
+  out[1] = n >>> 8 & 255;
+  out[2] = n >>> 16 & 255;
+  out[3] = n >>> 24 & 255;
+  return out;
+}
+function u64le(n) {
+  const out = new Uint8Array(8);
+  let v = n;
+  for (let i = 0; i < 8; i++) {
+    out[i] = Number(v & 0xffn);
+    v >>= 8n;
+  }
+  return out;
+}
+function framed(field2) {
+  return concatBytes2(u32le(field2.length), field2);
+}
+function keyCommitment(key) {
+  return sha3_js.shake256(concatBytes2(framed(COMMIT_DOMAIN), key), { dkLen: SEAL_COMMIT_LEN });
+}
+function deriveKek(sharedSecret, domain, clusterId, epoch, opIndex) {
+  const input = concatBytes2(
+    framed(KEK_DOMAIN),
+    framed(sharedSecret),
+    framed(domain),
+    u32le(clusterId),
+    u64le(epoch),
+    Uint8Array.of(opIndex)
+  );
+  return sha3_js.shake256(input, { dkLen: SEAL_KEY_LEN });
+}
+function deriveNonce(domain, context) {
+  const input = concatBytes2(framed(NONCE_DOMAIN), framed(domain), framed(context));
+  return sha3_js.shake256(input, { dkLen: SEAL_NONCE_LEN });
+}
+function bodyAad(ctx, k, n) {
+  return concatBytes2(
+    BODY_AAD_DOMAIN,
+    u32le(ctx.clusterId),
+    u64le(ctx.epoch),
+    Uint8Array.of(k),
+    Uint8Array.of(n),
+    ctx.rosterHash
+  );
+}
+function shareAad(ctx, opIndex) {
+  return concatBytes2(
+    SHARE_AAD_DOMAIN,
+    u32le(ctx.clusterId),
+    u64le(ctx.epoch),
+    Uint8Array.of(opIndex),
+    ctx.rosterHash
+  );
+}
+function aeadSeal(key, nonce, plaintext, aad) {
+  const cipher = chacha_js.chacha20poly1305(key, nonce, aad);
+  const ct = cipher.encrypt(plaintext);
+  return { nonce, ct, commitment: keyCommitment(key) };
+}
+function gfMul(a, b) {
+  let product = 0;
+  let x = a & 255;
+  let y = b & 255;
+  for (let i = 0; i < 8; i++) {
+    const mask = -(y & 1) & 255;
+    product ^= x & mask;
+    const high = -(x >> 7 & 1) & 255;
+    x = x << 1 & 255;
+    x ^= 27 & high;
+    y >>= 1;
+  }
+  return product & 255;
+}
+function polyEval(coeffs, x) {
+  let acc = 0;
+  for (let i = coeffs.length - 1; i >= 0; i--) {
+    acc = gfMul(acc, x) ^ coeffs[i];
+  }
+  return acc & 255;
+}
+function shamirSplit(secret, t, n, rng) {
+  const byteCoeffs = [];
+  for (let j = 0; j < SEAL_SECRET_LEN; j++) {
+    const c = new Uint8Array(t);
+    c[0] = secret[j];
+    if (t > 1) {
+      const tail = new Uint8Array(t - 1);
+      rng.fillBytes(tail);
+      c.set(tail, 1);
+    }
+    byteCoeffs.push(c);
+  }
+  const shares = [];
+  for (let k = 0; k < n; k++) {
+    const x = k + 1 & 255;
+    const value = new Uint8Array(SEAL_SECRET_LEN);
+    for (let j = 0; j < SEAL_SECRET_LEN; j++) {
+      value[j] = polyEval(byteCoeffs[j], x);
+    }
+    shares.push({ index: x, value });
+  }
+  return shares;
+}
+function shareToBytes(s) {
+  const out = new Uint8Array(SEAL_SHARE_LEN);
+  out[0] = s.index;
+  out.set(s.value, 1);
+  return out;
+}
+function sealRosterHash(keccak2562, clusterId, t, n, roster) {
+  const chunks = [ROSTER_DOMAIN, u32le(clusterId), Uint8Array.of(t), Uint8Array.of(n)];
+  for (const { operatorIndex, ek } of roster) {
+    chunks.push(Uint8Array.of(operatorIndex), ek);
+  }
+  return keccak2562(concatBytes2(...chunks));
+}
+function encodeSealEnvelope(env) {
+  const chunks = [];
+  chunks.push(u32le(env.clusterId));
+  chunks.push(u64le(env.epoch));
+  chunks.push(expectBytes(env.rosterHash, 32, "rosterHash"));
+  chunks.push(Uint8Array.of(env.t));
+  chunks.push(Uint8Array.of(env.n));
+  pushAeadBody(chunks, env.aeadBody);
+  chunks.push(u64le(BigInt(env.recipients.length)));
+  for (const r of env.recipients) {
+    chunks.push(Uint8Array.of(r.operatorIndex));
+    chunks.push(u64le(BigInt(r.kemCt.length)));
+    chunks.push(r.kemCt);
+    pushAeadBody(chunks, r.wrapped);
+  }
+  return concatBytes2(...chunks);
+}
+function pushAeadBody(chunks, body) {
+  chunks.push(expectBytes(body.nonce, SEAL_NONCE_LEN, "aead nonce"));
+  chunks.push(u64le(BigInt(body.ct.length)));
+  chunks.push(body.ct);
+  chunks.push(expectBytes(body.commitment, SEAL_COMMIT_LEN, "aead commitment"));
+}
+function sealToCluster(args) {
+  const { plaintext, recipientEks, t, clusterId } = args;
+  const epoch = args.epoch;
+  const rosterHash = expectBytes(args.rosterHash, 32, "rosterHash");
+  const rng = args.rng ?? cryptoRandomSource();
+  const n = recipientEks.length;
+  if (!Number.isInteger(t) || t < 1 || t > n || n < 1 || n > 255) {
+    throw new Error(`invalid threshold/recipient count: t=${t} n=${n}`);
+  }
+  for (let i = 0; i < n; i++) {
+    expectBytes(recipientEks[i], SEAL_EK_LEN, `recipientEks[${i}]`);
+  }
+  const ctx = { clusterId, epoch, rosterHash };
+  const bodyKey = new Uint8Array(SEAL_KEY_LEN);
+  rng.fillBytes(bodyKey);
+  const aad = bodyAad(ctx, t, n);
+  const bodyNonce = deriveNonce(new TextEncoder().encode("body"), aad);
+  const aeadBody = aeadSeal(bodyKey, bodyNonce, plaintext, aad);
+  const shares = shamirSplit(bodyKey, t, n, rng);
+  const recipients = [];
+  for (let i = 0; i < n; i++) {
+    const opIndex = i + 1 & 255;
+    const m = new Uint8Array(32);
+    rng.fillBytes(m);
+    const { cipherText: kemCt, sharedSecret } = mlKem_js.ml_kem768.encapsulate(recipientEks[i], m);
+    const kek = deriveKek(sharedSecret, rosterHash, clusterId, epoch, opIndex);
+    const sAad = shareAad(ctx, opIndex);
+    const wrapNonce = deriveNonce(new TextEncoder().encode("share"), sAad);
+    const wrapped = aeadSeal(kek, wrapNonce, shareToBytes(shares[i]), sAad);
+    recipients.push({ operatorIndex: opIndex, kemCt, wrapped });
+    sharedSecret.fill(0);
+    kek.fill(0);
+  }
+  bodyKey.fill(0);
+  return {
+    clusterId,
+    epoch,
+    rosterHash,
+    t,
+    n,
+    aeadBody,
+    recipients
+  };
+}
+
+// src/crypto/seal.ts
+var CLUSTER_MLKEM_SHAMIR_ALGO = "cluster-mlkem768-shamir";
+function parseClusterSealKeys(source) {
+  const n = source.roster.length;
+  if (n === 0) {
+    throw new Error("cluster seal roster is empty");
+  }
+  if (source.n !== n) {
+    throw new Error(`cluster seal roster n=${source.n} disagrees with ${n} entries`);
+  }
+  if (!Number.isInteger(source.t) || source.t < 2 || source.t > n) {
+    throw new Error(`cluster seal threshold t=${source.t} out of range 2..=${n}`);
+  }
+  const sorted = [...source.roster].sort((a, b) => a.operatorIndex - b.operatorIndex);
+  const recipientEks = [];
+  const hashInput = [];
+  for (let i = 0; i < n; i++) {
+    const entry = sorted[i];
+    if (entry.operatorIndex !== i + 1) {
+      throw new Error(
+        `cluster seal roster operator indices must be 1..=${n}; got ${entry.operatorIndex} at slot ${i + 1}`
+      );
+    }
+    const ek = expectBytes(hexToBytes2(entry.mlKemEk, `operator ${entry.operatorIndex} mlKemEk`), SEAL_EK_LEN, `operator ${entry.operatorIndex} ek`);
+    recipientEks.push(ek);
+    hashInput.push({ operatorIndex: entry.operatorIndex, ek });
+  }
+  const recomputed = sealRosterHash(keccak256, source.clusterId, source.t, n, hashInput);
+  if (source.rosterHash !== void 0) {
+    const supplied = expectBytes(hexToBytes2(source.rosterHash, "rosterHash"), 32, "rosterHash");
+    if (!bytesEqual(supplied, recomputed)) {
+      throw new Error(
+        `cluster seal roster hash mismatch: source ${bytesToHex2(supplied)} != recomputed ${bytesToHex2(recomputed)} (the roster hash does not commit to this ek set)`
+      );
+    }
+  }
+  return {
+    algo: source.algo ?? CLUSTER_MLKEM_SHAMIR_ALGO,
+    clusterId: source.clusterId,
+    epoch: toBigInt(source.epoch),
+    rosterHash: recomputed,
+    t: source.t,
+    n,
+    recipientEks
+  };
+}
+async function sealTransaction(args) {
+  const keys = args.clusterSealKeys;
+  const senderPubkey = expectBytes(args.senderPubkey, ML_DSA_65_PUBLIC_KEY_LEN, "senderPubkey");
+  const senderAddress = expectBytes(args.senderAddress, 20, "senderAddress");
+  const env = sealToCluster({
+    plaintext: args.signedTxBincode,
+    recipientEks: keys.recipientEks,
+    t: keys.t,
+    clusterId: keys.clusterId,
+    epoch: keys.epoch,
+    rosterHash: keys.rosterHash,
+    rng: args.rng
+  });
+  const ciphertext = encodeSealEnvelope(env);
+  const decryptionHint = { epoch: keys.epoch, scheme: CLUSTER_MLKEM_SHAMIR };
+  const digest = outerSigDigest(args.aad, ciphertext, decryptionHint, senderPubkey);
+  const outerSignature = expectBytes(
+    await args.signOuterDigest(digest),
+    ML_DSA_65_SIGNATURE_LEN,
+    "outerSignature"
+  );
+  const envelope = {
+    nonceAad: args.aad,
+    ciphertext,
+    decryptionHint,
+    senderPubkey,
+    outerSignature,
+    sender: senderAddress
+  };
+  const envelopeWireBytes = bincodeEncryptedEnvelope(envelope);
+  return {
+    envelopeWireHex: `0x${bytesToHex2(envelopeWireBytes).slice(2)}`,
+    envelopeWireBytes,
+    ciphertextBytes: ciphertext.length
+  };
+}
+function keccak256(input) {
+  return sha3_js.keccak_256(input);
+}
+function toBigInt(value) {
+  if (typeof value === "bigint") return value;
+  return BigInt(value);
+}
+function bytesEqual(a, b) {
+  if (a.length !== b.length) return false;
+  for (let i = 0; i < a.length; i++) {
+    if (a[i] !== b[i]) return false;
+  }
+  return true;
+}
+
+// src/crypto/submission.ts
+async function fetchEncryptionKey(client) {
+  const result = await client.call(
+    "lyth_getEncryptionKey",
+    []
+  );
+  return {
+    algo: result.algo ?? "ml-kem-768",
+    epoch: typeof result.epoch === "string" ? BigInt(result.epoch) : BigInt(result.epoch),
+    encapsulationKey: hexToBytes2(result.encapsulationKey, "encapsulationKey")
+  };
+}
+var ENCRYPTED_SUBMISSION_UNAVAILABLE_MESSAGE = "private submission requires cluster seal keys; pass clusterSealKeysSource or enable lyth_getClusterSealKeys";
+async function buildEncryptedSubmission(args) {
+  const signed = args.backend.signEvmTx(args.tx);
+  const clusterSealKeys = await resolveClusterSealKeys(args);
+  const aad = nonceAadForTx(args.tx, args.backend.addressBytes(), args.class);
+  const sealed = await sealTransaction({
+    signedTxBincode: signed.wireBytes,
+    clusterSealKeys,
+    aad,
+    senderAddress: args.backend.addressBytes(),
+    senderPubkey: args.backend.publicKey(),
+    signOuterDigest: (digest) => args.backend.signPrehash(digest)
+  });
+  return {
+    envelopeWireHex: sealed.envelopeWireHex,
+    innerSighashHex: bytesToHex2(signed.sighash),
+    innerTxHashHex: bytesToHex2(signed.txHash),
+    innerWireBytes: signed.wireBytes.length
+  };
+}
+async function submitEncryptedEnvelope(client, envelopeWireHex) {
+  return client.call("lyth_submitEncrypted", [envelopeWireHex]);
+}
+function buildPlaintextSubmission(args) {
+  const signed = args.backend.signEvmTx(args.tx);
+  return {
+    signedTxWireHex: `0x${signed.wireHex}`,
+    innerTxHashHex: bytesToHex2(signed.txHash),
+    innerSighashHex: bytesToHex2(signed.sighash),
+    innerWireBytes: signed.wireBytes.length
+  };
+}
+async function submitPlaintextTransaction(client, signedTxWireHex, expectedTxHashHex) {
+  const returned = await client.call("mesh_submitTx", [signedTxWireHex]);
+  const returnedBytes = hexToBytes2(returned, "mesh_submitTx tx hash");
+  if (returnedBytes.length !== 32) {
+    throw new Error(
+      `mesh_submitTx tx hash must be 32 bytes, got ${returnedBytes.length}`
+    );
+  }
+  const expectedBytes = hexToBytes2(expectedTxHashHex, "expected tx hash");
+  if (!bytesEqual2(returnedBytes, expectedBytes)) {
+    throw new Error(
+      `mesh_submitTx returned tx hash ${bytesToHex2(returnedBytes)} but the locally computed canonical hash is ${bytesToHex2(expectedBytes)}`
+    );
+  }
+  return bytesToHex2(returnedBytes);
+}
+function bytesEqual2(a, b) {
+  if (a.length !== b.length) return false;
+  for (let i = 0; i < a.length; i++) {
+    if (a[i] !== b[i]) return false;
+  }
+  return true;
+}
+async function resolveClusterSealKeys(args) {
+  if (args.clusterSealKeys !== void 0) return args.clusterSealKeys;
+  if (args.clusterSealKeysSource !== void 0) {
+    return parseClusterSealKeys(args.clusterSealKeysSource);
+  }
+  if (args.client === void 0) {
+    throw new Error(ENCRYPTED_SUBMISSION_UNAVAILABLE_MESSAGE);
+  }
+  const clusterId = args.clusterId ?? 0;
+  const result = await args.client.call(
+    "lyth_getClusterSealKeys",
+    [clusterId]
+  );
+  return parseClusterSealKeys({ ...result, clusterId: result.clusterId ?? clusterId });
+}
+function nonceAadForTx(tx, sender, mempoolClass) {
+  return {
+    sender,
+    nonce: parseBigint(tx.nonce, "nonce"),
+    chainId: parseBigint(tx.chainId, "chainId"),
+    class: mempoolClass ?? inferMempoolClass(tx),
+    maxFeePerGas: parseBigint(tx.maxFeePerGas, "maxFeePerGas"),
+    maxPriorityFeePerGas: parseBigint(tx.maxPriorityFeePerGas, "maxPriorityFeePerGas"),
+    gasLimit: parseBigint(tx.gasLimit, "gasLimit")
+  };
+}
+function inferMempoolClass(tx) {
+  if (tx.to === null || hasInput(tx.input)) return MempoolClass.ContractCall;
+  return MempoolClass.Transfer;
+}
+function hasInput(input) {
+  if (input === void 0) return false;
+  if (typeof input === "string") {
+    const stripped = input.startsWith("0x") || input.startsWith("0X") ? input.slice(2) : input;
+    return stripped.length > 0;
+  }
+  return input.length > 0;
+}
+
 // src/mrv.ts
 var MRV_FORMAT_VERSION = 1;
 var MRV_DEPLOY_PAYLOAD_VERSION = 1;
@@ -1479,6 +2341,7 @@ async function submitMrvCallNativeTx(client, backend, contractAddress, input, op
 }
 async function submitMrvEncryptedNativeTxGated(client, backend, plan, options) {
   const submission = await buildEncryptedSubmission({
+    backend,
     tx: plan.tx,
     encryptionKey: options.encryptionKey ?? await fetchEncryptionKey(client),
     class: options.class
@@ -1835,22 +2698,6 @@ function concatBytes3(...parts) {
 function isIdentifier(value) {
   return /^[a-z][a-z0-9_]*$/.test(value);
 }
-var ML_DSA_65_PUBLIC_KEY_LEN = 1952;
-var ML_DSA_65_SIGNATURE_LEN = 3309;
-var STANDARD_ALGO_NUMBER_ML_DSA_65 = 1001;
-var ADDRESS_DERIVATION_DOMAIN = "MONO_ADDRESS_BLAKE3_20_V1";
-var ADDRESS_DERIVATION_DOMAIN_BYTES = new TextEncoder().encode(ADDRESS_DERIVATION_DOMAIN);
-function mlDsa65AddressFromPublicKey(publicKey) {
-  return bytesToHex2(mlDsa65AddressBytes(publicKey));
-}
-function mlDsa65AddressBytes(publicKey) {
-  const bytes = expectBytes(publicKey, ML_DSA_65_PUBLIC_KEY_LEN, "ML-DSA-65 public key");
-  return blake3_js.blake3(concatBytes2(
-    ADDRESS_DERIVATION_DOMAIN_BYTES,
-    bigintToBeBytes(BigInt(STANDARD_ALGO_NUMBER_ML_DSA_65), 2, "ML-DSA-65 algo id"),
-    bytes
-  )).slice(0, 20);
-}
 
 // src/registry.ts
 var BLS_PUBLIC_KEY_BYTE_LENGTH = 48;
@@ -1859,8 +2706,8 @@ var TESTNET_69420 = {
   network: "testnet-69420",
   display_name: "Monolythium Testnet",
   description: "Public Monolythium testnet. Testnet state may reset without notice; do not store value on this network.",
-  genesis_hash: "0xe67cf82131fc63e335ce61afeae53299283eaa3a692830a618911aa840245031",
-  binary_sha: "e4697f9b",
+  genesis_hash: "0x6a2bb3c8a6701bedcddc0447583bb24f34b77310e3aa77c62ca303a453e9f7ba",
+  binary_sha: "c283c75d",
   rpc: [
     {
       url: "http://178.105.12.9:8545",
@@ -3447,11 +4294,15 @@ var RpcClient = class _RpcClient {
     const params = status === void 0 ? operator == null ? [] : [operator] : [operator ?? null, status];
     return this.call("lyth_getClusterResignations", params);
   }
-  /** `lyth_getBlsRoundCertificate` — round-advancement BLS aggregate. */
+  /** `lyth_getRoundCertificate` — round-advancement certificate. */
+  async lythGetRoundCertificate(round) {
+    return this.call("lyth_getRoundCertificate", [encodeRpcInteger(round)]);
+  }
+  /** @deprecated Use lythGetRoundCertificate. */
   async lythGetBlsRoundCertificate(round) {
-    return this.call("lyth_getBlsRoundCertificate", [encodeRpcInteger(round)]);
+    return this.lythGetRoundCertificate(round);
   }
-  /** `lyth_getLeaderCertificate` — leader-vote BLS aggregate for a block ref. */
+  /** `lyth_getLeaderCertificate` — leader-vote certificate for a block ref. */
   async lythGetLeaderCertificate(round, authority, digest) {
     return this.call("lyth_getLeaderCertificate", [encodeRpcInteger(round), authority, digest]);
   }
@@ -4049,7 +4900,9 @@ function normalizeOperatorInfo(value) {
       (v, i) => parseRpcNumber(v, `operator info activeClusterIds[${i}]`)
     ),
     operatorKeyFingerprint: parseStringNullable(row["operatorKeyFingerprint"]),
-    blsKeyFingerprint: parseStringNullable(row["blsKeyFingerprint"]),
+    consensusKeyFingerprint: parseStringNullable(
+      row["consensusKeyFingerprint"] ?? row["blsKeyFingerprint"]
+    ),
     lifecycleState: String(row["lifecycleState"]),
     capability: capability && typeof capability === "object" && !Array.isArray(capability) ? capability : {}
   };
@@ -4058,7 +4911,7 @@ function normalizeClusterMember(value, label) {
   const row = expectObject(value, label);
   return {
     operatorId: String(row["operatorId"]),
-    blsPubkey: String(row["blsPubkey"]),
+    consensusPubkey: String(row["consensusPubkey"] ?? row["blsPubkey"]),
     state: String(row["state"])
   };
 }
@@ -4124,7 +4977,7 @@ function normalizeOperatorAuthority(value) {
     schemaVersion: parseRpcNumber(row["schemaVersion"], "operator authority schemaVersion"),
     operatorId: String(row["operatorId"]),
     authorityIndex: parseRpcNumber(row["authorityIndex"], "operator authority authorityIndex"),
-    blsPubkey: String(row["blsPubkey"]),
+    consensusPubkey: String(row["consensusPubkey"] ?? row["blsPubkey"]),
     active: Boolean(row["active"])
   };
 }
@@ -5870,7 +6723,7 @@ var NO_EVM_COMPACT_INCLUSION_TREE_ALGORITHM = "binary-keccak-receipt-tree";
 var NO_EVM_ARCHIVE_PROOF_SCHEMA = "mono.no_evm_receipt_archive_binding.v1";
 var NO_EVM_ARCHIVE_SIGNATURE_SCHEME = "mono.snapshot.sig.v1";
 var NO_EVM_FINALITY_EVIDENCE_SCHEMA = "mono.no_evm_receipt_finality.v1";
-var NO_EVM_FINALITY_EVIDENCE_SOURCE = "blsRoundCertificate";
+var NO_EVM_FINALITY_EVIDENCE_SOURCE = "roundCertificate";
 var EMPTY_ROOT_DOMAIN_BYTES = new TextEncoder().encode(NO_EVM_RECEIPTS_ROOT_DOMAIN);
 var LEAF_DOMAIN_BYTES = new TextEncoder().encode(NO_EVM_RECEIPT_LEAF_DOMAIN);
 var NODE_DOMAIN_BYTES = new TextEncoder().encode(NO_EVM_RECEIPT_NODE_DOMAIN);
@@ -6412,7 +7265,7 @@ function verifyBoundedReceiptProof(proof) {
   }
   const actualRoot = computeNoEvmReceiptsRoot(receipts);
   const expectedRoot = decodeHash(proof.receiptsRoot, "receiptsRoot");
-  if (!bytesEqual(expectedRoot, decodeHash(actualRoot, "computedReceiptsRoot"))) {
+  if (!bytesEqual3(expectedRoot, decodeHash(actualRoot, "computedReceiptsRoot"))) {
     throw new NoEvmReceiptProofError(
       "receipts_root_mismatch",
       `receiptsRoot mismatch: expected ${proof.receiptsRoot}, computed ${actualRoot}`
@@ -6420,7 +7273,7 @@ function verifyBoundedReceiptProof(proof) {
   }
   const actualTargetHash = computeNoEvmTargetReceiptHash(targetReceipt);
   const expectedTargetHash = decodeHash(proof.targetReceiptHash, "targetReceiptHash");
-  if (!bytesEqual(expectedTargetHash, decodeHash(actualTargetHash, "computedTargetReceiptHash"))) {
+  if (!bytesEqual3(expectedTargetHash, decodeHash(actualTargetHash, "computedTargetReceiptHash"))) {
     throw new NoEvmReceiptProofError(
       "target_receipt_hash_mismatch",
       `targetReceiptHash mismatch: expected ${proof.targetReceiptHash}, computed ${actualTargetHash}`
@@ -6477,7 +7330,7 @@ function verifyCompactReceiptProof(proof) {
   const targetReceipt = decodeHexBytes(targetReceiptBytes, "targetReceiptBytes");
   const actualTargetHash = computeNoEvmTargetReceiptHash(targetReceipt);
   const expectedTargetHash = decodeHash(proof.targetReceiptHash, "targetReceiptHash");
-  if (!bytesEqual(expectedTargetHash, decodeHash(actualTargetHash, "computedTargetReceiptHash"))) {
+  if (!bytesEqual3(expectedTargetHash, decodeHash(actualTargetHash, "computedTargetReceiptHash"))) {
     throw new NoEvmReceiptProofError(
       "target_receipt_hash_mismatch",
       `targetReceiptHash mismatch: expected ${proof.targetReceiptHash}, computed ${actualTargetHash}`
@@ -6488,7 +7341,7 @@ function verifyCompactReceiptProof(proof) {
     compactProof.leafHash,
     "compactInclusionProof.leafHash"
   );
-  if (!bytesEqual(expectedLeafHashBytes, actualLeafHashBytes)) {
+  if (!bytesEqual3(expectedLeafHashBytes, actualLeafHashBytes)) {
     throw new NoEvmReceiptProofError(
       "compact_leaf_hash_mismatch",
       `compactInclusionProof.leafHash mismatch: expected ${compactProof.leafHash}, computed ${bytesToHex6(
@@ -6498,7 +7351,7 @@ function verifyCompactReceiptProof(proof) {
   }
   const compactRootBytes = decodeHash(compactProof.root, "compactInclusionProof.root");
   const receiptsRootBytes = decodeHash(proof.receiptsRoot, "receiptsRoot");
-  if (!bytesEqual(receiptsRootBytes, compactRootBytes)) {
+  if (!bytesEqual3(receiptsRootBytes, compactRootBytes)) {
     throw new NoEvmReceiptProofError(
       "compact_root_mismatch",
       `receiptsRoot must equal compactInclusionProof.root: receiptsRoot ${proof.receiptsRoot}, compact root ${compactProof.root}`
@@ -6521,7 +7374,7 @@ function verifyCompactReceiptProof(proof) {
     siblingHashes,
     pathSides
   );
-  if (!bytesEqual(actualRootBytes, compactRootBytes)) {
+  if (!bytesEqual3(actualRootBytes, compactRootBytes)) {
     throw new NoEvmReceiptProofError(
       "compact_path_mismatch",
       `compact inclusion path mismatch: expected ${compactProof.root}, computed ${bytesToHex6(
@@ -6675,7 +7528,7 @@ function validateCoveringSnapshotObject(snapshot, archiveContentHash, proofBlock
       "archiveProof.coveringSnapshot.checkpointTo must match blockHeight"
     );
   }
-  if (!bytesEqual(checkpointContentHash, archiveContentHash)) {
+  if (!bytesEqual3(checkpointContentHash, archiveContentHash)) {
     throw new NoEvmReceiptProofError(
       "invalid_proof_shape",
       "archiveProof.coveringSnapshot.checkpointContentHash must match archiveProof.contentHash"
@@ -6874,7 +7727,7 @@ function validateFinalityBlockReference(blockReference, round, proofBlockHash) {
   );
   if (proofBlockHash !== void 0) {
     const blockHash = decodeHash(proofBlockHash, "blockHash");
-    if (!bytesEqual(digest, blockHash)) {
+    if (!bytesEqual3(digest, blockHash)) {
       throw new NoEvmReceiptProofError(
         "invalid_proof_shape",
         "finalityEvidence.blockReference.digest must match blockHash"
@@ -7224,7 +8077,7 @@ function assertHashBytes(value, field2) {
 function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function bytesEqual(a, b) {
+function bytesEqual3(a, b) {
   if (a.length !== b.length) return false;
   let diff = 0;
   for (let index = 0; index < a.length; index++) {
@@ -7432,6 +8285,307 @@ function assertWholeNumber(field2, value) {
     throw new Error(`${field2} must be a whole number`);
   }
 }
+var PQM1_ALGO_TAG_MLDSA65 = 1;
+var PQM1_VERSION_V1 = 1;
+var PQM1_PAYLOAD_LEN = 32;
+var PQM1_V1_MNEMONIC_WORDS = 24;
+var PQM1_V1_MLDSA65_DOMAIN_TAG = "monolythium.pqm1.v1.mldsa65";
+var Pqm1Error = class extends Error {
+  constructor(kind, message) {
+    super(message);
+    this.kind = kind;
+    this.name = "Pqm1Error";
+  }
+  kind;
+};
+var DOMAIN_BYTES = new TextEncoder().encode(PQM1_V1_MLDSA65_DOMAIN_TAG);
+function normalizeMnemonic(mnemonic) {
+  return mnemonic.trim().toLowerCase().replace(/\s+/g, " ");
+}
+function ensureSupportedPayload(bytes) {
+  if (bytes.length !== PQM1_PAYLOAD_LEN) {
+    throw new Pqm1Error("badPayloadLength", `PQM-1 payload must be ${PQM1_PAYLOAD_LEN} bytes, got ${bytes.length}`);
+  }
+  if (bytes[0] !== PQM1_ALGO_TAG_MLDSA65) {
+    throw new Pqm1Error("unsupportedAlgorithm", `unsupported PQM-1 algorithm tag 0x${bytes[0].toString(16).padStart(2, "0")}`);
+  }
+  if (bytes[1] !== PQM1_VERSION_V1) {
+    throw new Pqm1Error("unsupportedVersion", `unsupported PQM-1 version 0x${bytes[1].toString(16).padStart(2, "0")}`);
+  }
+}
+function parsePqm1Payload(payload) {
+  const bytes = expectBytes(payload, PQM1_PAYLOAD_LEN, "PQM-1 payload").slice();
+  ensureSupportedPayload(bytes);
+  return {
+    algoTag: PQM1_ALGO_TAG_MLDSA65,
+    version: PQM1_VERSION_V1,
+    entropy: bytes.slice(2),
+    bytes
+  };
+}
+function pqm1MnemonicToPayload(mnemonic) {
+  const normalized = normalizeMnemonic(mnemonic);
+  const words = normalized.length === 0 ? [] : normalized.split(" ");
+  if (words.length !== PQM1_V1_MNEMONIC_WORDS) {
+    throw new Pqm1Error("badWordCount", `PQM-1 mnemonic must be ${PQM1_V1_MNEMONIC_WORDS} words, got ${words.length}`);
+  }
+  let payload;
+  try {
+    payload = bip39.mnemonicToEntropy(normalized, english_js.wordlist);
+  } catch (e) {
+    throw new Pqm1Error("bip39Decode", `invalid PQM-1 mnemonic: ${e.message}`);
+  }
+  return parsePqm1Payload(payload);
+}
+function derivePqm1MlDsa65SeedFromPayload(payload) {
+  const parsed = parsePqm1Payload(payload);
+  return sha3_js.shake256(concatBytes2(DOMAIN_BYTES, parsed.bytes), { dkLen: ML_DSA_65_SEED_LEN });
+}
+function pqm1MnemonicToMlDsa65Seed(mnemonic) {
+  return derivePqm1MlDsa65SeedFromPayload(pqm1MnemonicToPayload(mnemonic).bytes);
+}
+function pqm1MnemonicToMlDsa65Backend(mnemonic) {
+  return MlDsa65Backend.fromSeed(pqm1MnemonicToMlDsa65Seed(mnemonic));
+}
+
+// src/cluster-join.ts
+var DEFAULT_CLUSTER_JOIN_EXECUTION_UNIT_LIMIT = REGISTRY_DEFAULT_EXECUTION_UNIT_LIMIT;
+var ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
+var MAX_UINT32 = (1n << 32n) - 1n;
+function deriveClusterJoinOperatorId(operatorPubkey) {
+  return bytesToHex2(blake3_js.blake3(normalizeConsensusPubkey(operatorPubkey, "operatorPubkey")));
+}
+function clusterJoinRequestExists(view) {
+  return view.status !== "none" || view.owner.toLowerCase() !== ZERO_ADDRESS || view.bondLythoshi !== 0n;
+}
+async function readClusterJoinRequest(client, args) {
+  const clusterId = parseUint32(args.clusterId, "clusterId");
+  const operatorId = normalizeOperatorId(args.operatorId);
+  const envelope = await client.call("lyth_getClusterJoinRequest", [
+    Number(clusterId),
+    operatorId
+  ]);
+  return adaptNativeClusterJoinRequest(envelope.request);
+}
+async function preflightClusterJoinRequest(client, args) {
+  try {
+    return await readClusterJoinRequest(client, args);
+  } catch (cause) {
+    throw new Error(
+      `CJ-1 lyth_getClusterJoinRequest is not exposed or failed on the connected chain: ${errorMessage(cause)}`
+    );
+  }
+}
+async function previewRequestClusterJoin(client, args) {
+  const clusterId = parseUint32(args.clusterId, "clusterId");
+  try {
+    return await client.call("lyth_previewRequestClusterJoin", [{
+      from: args.from,
+      clusterId: Number(clusterId),
+      operatorPubkey: bytesToHex2(normalizeConsensusPubkey(args.operatorPubkey, "operatorPubkey")),
+      bondLythoshi: parseU256(args.bondLythoshi, "bondLythoshi").toString(10)
+    }]);
+  } catch (cause) {
+    throw new Error(
+      `CJ-1 request preview is not exposed or failed on the connected chain: ${errorMessage(cause)}`
+    );
+  }
+}
+async function previewVoteClusterAdmit(client, args) {
+  const clusterId = parseUint32(args.clusterId, "clusterId");
+  try {
+    return await client.call("lyth_previewVoteClusterAdmit", [{
+      from: args.from,
+      clusterId: Number(clusterId),
+      operatorId: normalizeOperatorId(args.operatorId),
+      voterPubkey: bytesToHex2(normalizeConsensusPubkey(args.voterPubkey, "voterPubkey"))
+    }]);
+  } catch (cause) {
+    throw new Error(
+      `CJ-1 admit-vote preview is not exposed or failed on the connected chain: ${errorMessage(cause)}`
+    );
+  }
+}
+function resolveClusterJoinExecutionFee(quote, options = {}) {
+  const quoted = parseBigint(quote.executionUnitPriceLythoshi, "executionUnitPriceLythoshi");
+  const floor = options.minPriceLythoshi === void 0 ? MIN_EXECUTION_UNIT_PRICE_LYTHOSHI : parseBigint(options.minPriceLythoshi, "minPriceLythoshi");
+  const multiplier = options.safetyMultiplier === void 0 ? EXECUTION_UNIT_PRICE_SAFETY_MULTIPLIER : parseBigint(options.safetyMultiplier, "safetyMultiplier");
+  if (multiplier <= 0n) throw new Error("safetyMultiplier must be greater than zero");
+  const base = quoted > floor ? quoted : floor;
+  const maxFeePerGas = base * multiplier;
+  const tip = options.priorityTipLythoshi === void 0 ? maxFeePerGas : clampPriorityTip(options.priorityTipLythoshi, maxFeePerGas);
+  return {
+    maxFeePerGas,
+    maxPriorityFeePerGas: tip,
+    gasLimit: options.executionUnitLimit ?? DEFAULT_CLUSTER_JOIN_EXECUTION_UNIT_LIMIT
+  };
+}
+function buildRequestClusterJoinTxFields(args) {
+  return {
+    chainId: args.chainId,
+    nonce: args.nonce,
+    maxFeePerGas: parseBigint(args.fee.maxFeePerGas, "maxFeePerGas"),
+    maxPriorityFeePerGas: parseBigint(args.fee.maxPriorityFeePerGas, "maxPriorityFeePerGas"),
+    gasLimit: parseBigint(
+      args.fee.gasLimit ?? DEFAULT_CLUSTER_JOIN_EXECUTION_UNIT_LIMIT,
+      "gasLimit"
+    ),
+    to: nodeRegistryAddressHex(),
+    value: parseU256(args.bondLythoshi, "bondLythoshi"),
+    input: encodeRequestClusterJoinCalldata({
+      clusterId: args.clusterId,
+      operatorPubkey: normalizeConsensusPubkey(args.operatorPubkey, "operatorPubkey")
+    })
+  };
+}
+function buildVoteClusterAdmitTxFields(args) {
+  return {
+    chainId: args.chainId,
+    nonce: args.nonce,
+    maxFeePerGas: parseBigint(args.fee.maxFeePerGas, "maxFeePerGas"),
+    maxPriorityFeePerGas: parseBigint(args.fee.maxPriorityFeePerGas, "maxPriorityFeePerGas"),
+    gasLimit: parseBigint(
+      args.fee.gasLimit ?? DEFAULT_CLUSTER_JOIN_EXECUTION_UNIT_LIMIT,
+      "gasLimit"
+    ),
+    to: nodeRegistryAddressHex(),
+    value: 0n,
+    input: encodeVoteClusterAdmitCalldata({
+      clusterId: args.clusterId,
+      operatorId: normalizeOperatorId(args.operatorId),
+      voterPubkey: normalizeConsensusPubkey(args.voterPubkey, "voterPubkey")
+    })
+  };
+}
+async function submitRequestClusterJoin(args) {
+  const clusterId = parseUint32(args.clusterId, "clusterId");
+  const operatorPubkey = normalizeConsensusPubkey(args.operatorPubkey, "operatorPubkey");
+  const operatorIdHex = deriveClusterJoinOperatorId(operatorPubkey);
+  const backend = pqm1MnemonicToMlDsa65Backend(args.mnemonic);
+  const senderAddress = addressToTypedBech32("user", backend.addressBytes());
+  const preview = await previewRequestClusterJoin(args.client, {
+    from: senderAddress,
+    clusterId,
+    operatorPubkey,
+    bondLythoshi: args.bondLythoshi
+  });
+  assertPreviewOk("requestClusterJoin", preview);
+  const [chainId, nonce, quote] = await Promise.all([
+    args.client.ethChainId(),
+    args.client.lythGetTransactionCount(senderAddress),
+    args.client.lythExecutionUnitPrice()
+  ]);
+  const tx = buildRequestClusterJoinTxFields({
+    chainId,
+    nonce,
+    fee: resolveClusterJoinExecutionFee(quote, args),
+    clusterId,
+    operatorPubkey,
+    bondLythoshi: args.bondLythoshi
+  });
+  return submitClusterJoinTx(args.client, backend, tx, clusterId, operatorIdHex);
+}
+async function submitVoteClusterAdmit(args) {
+  const clusterId = parseUint32(args.clusterId, "clusterId");
+  const operatorIdHex = normalizeOperatorId(args.operatorId);
+  const backend = pqm1MnemonicToMlDsa65Backend(args.mnemonic);
+  const senderAddress = addressToTypedBech32("user", backend.addressBytes());
+  const preview = await previewVoteClusterAdmit(args.client, {
+    from: senderAddress,
+    clusterId,
+    operatorId: operatorIdHex,
+    voterPubkey: args.voterPubkey
+  });
+  assertPreviewOk("voteClusterAdmit", preview);
+  const [chainId, nonce, quote] = await Promise.all([
+    args.client.ethChainId(),
+    args.client.lythGetTransactionCount(senderAddress),
+    args.client.lythExecutionUnitPrice()
+  ]);
+  const tx = buildVoteClusterAdmitTxFields({
+    chainId,
+    nonce,
+    fee: resolveClusterJoinExecutionFee(quote, args),
+    clusterId,
+    operatorId: operatorIdHex,
+    voterPubkey: args.voterPubkey
+  });
+  return submitClusterJoinTx(args.client, backend, tx, clusterId, operatorIdHex);
+}
+async function submitClusterJoinTx(client, backend, tx, clusterId, operatorIdHex) {
+  const plaintext = buildPlaintextSubmission({ backend, tx });
+  const txHash = await submitPlaintextTransaction(
+    client,
+    plaintext.signedTxWireHex,
+    plaintext.innerTxHashHex
+  );
+  return {
+    txHash,
+    clusterId: clusterId.toString(10),
+    operatorIdHex,
+    innerSighashHex: plaintext.innerSighashHex,
+    signedTxWireBytes: plaintext.innerWireBytes
+  };
+}
+function adaptNativeClusterJoinRequest(request) {
+  return {
+    owner: request.owner ?? ZERO_ADDRESS,
+    requestEpoch: parseBigint(request.requestEpoch, "requestEpoch"),
+    requestNonce: request.requestNonce === void 0 ? void 0 : parseBigint(request.requestNonce, "requestNonce"),
+    snapshotThreshold: request.snapshotThreshold,
+    snapshotN: request.snapshotN,
+    voteCount: request.voteCount,
+    statusCode: request.statusCode,
+    status: clusterJoinStatus(request.status),
+    bondLythoshi: parseBigint(request.bondLythoshi, "bondLythoshi"),
+    sealRosterPending: request.sealRosterPending
+  };
+}
+function clusterJoinStatus(status) {
+  switch (status) {
+    case "none":
+    case "open":
+    case "admitted":
+    case "cancelled":
+    case "expired":
+      return status;
+    default:
+      return "unknown";
+  }
+}
+function previewError(action, preview) {
+  const reason = preview.reason ? `: ${preview.reason}` : "";
+  const message = preview.message ? ` (${preview.message})` : "";
+  return new Error(`${action} preview rejected${reason}${message}`);
+}
+function assertPreviewOk(action, preview) {
+  if (!preview.ok) throw previewError(action, preview);
+}
+function normalizeConsensusPubkey(value, label) {
+  const bytes = typeof value === "string" ? hexToBytes2(value, label) : value;
+  return expectBytes(bytes, NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES, label).slice();
+}
+function normalizeOperatorId(value) {
+  const bytes = typeof value === "string" ? hexToBytes2(value, "operatorId") : value;
+  return bytesToHex2(expectBytes(bytes, 32, "operatorId"));
+}
+function parseUint32(value, label) {
+  const parsed = parseBigint(value, label);
+  if (parsed < 0n || parsed > MAX_UINT32) {
+    throw new Error(`${label} out of 32-bit range`);
+  }
+  return parsed;
+}
+function parseU256(value, label) {
+  const parsed = parseBigint(value, label);
+  if (parsed < 0n || parsed >= 1n << 256n) {
+    throw new Error(`${label} out of 256-bit range`);
+  }
+  return parsed;
+}
+function errorMessage(cause) {
+  return cause instanceof Error ? cause.message : String(cause);
+}
 var ORACLE_EVENT_SIGS = {
   oracleRoundFinalized: "OracleRoundFinalized(bytes32,uint64,uint256,uint64,uint32)",
   observationSubmitted: "ObservationSubmitted(bytes32,uint64,address,uint256,uint64)",
@@ -8400,11 +9554,6 @@ function wordToBigint(word) {
   }
   return out;
 }
-new TextEncoder().encode("protocore/v2/mempool/dkg-mlkem768/1");
-var MempoolClass = {
-  CLOBOp: 3};
-
-// src/market-actions.ts
 var CLOB_MARKET_ID_DOMAIN_TAG = 193;
 var NATIVE_MARKET_MODULE_ADDRESS_BYTES = "0x4d41524b45545f4e41544956455f4d4f445f5631";
 var NATIVE_MARKET_MODULE_ADDRESS = addressToTypedBech32(
@@ -9735,7 +10884,7 @@ var MONOLYTHIUM_NETWORKS = {
 };
 
 // src/index.ts
-var version = "0.3.16";
+var version = "0.4.2";
 
 exports.ADDRESS_HRP = ADDRESS_HRP;
 exports.ADDRESS_KIND_HRPS = ADDRESS_KIND_HRPS;
@@ -9755,6 +10904,7 @@ exports.CHAIN_REGISTRY_RAW_BASE = CHAIN_REGISTRY_RAW_BASE;
 exports.CLOB_MARKET_ID_DOMAIN_TAG = CLOB_MARKET_ID_DOMAIN_TAG;
 exports.CLOB_SELECTORS = CLOB_SELECTORS;
 exports.CLUSTER_FORMED_EVENT_SIG = CLUSTER_FORMED_EVENT_SIG;
+exports.DEFAULT_CLUSTER_JOIN_EXECUTION_UNIT_LIMIT = DEFAULT_CLUSTER_JOIN_EXECUTION_UNIT_LIMIT;
 exports.DELEGATION_REVERT_TAGS = DELEGATION_REVERT_TAGS;
 exports.DELEGATION_SELECTORS = DELEGATION_SELECTORS;
 exports.DIVERSITY_SCORE_MAX = DIVERSITY_SCORE_MAX;
@@ -9809,9 +10959,20 @@ exports.NATIVE_MARKET_ORDER_BOOK_STREAM_TOPIC = NATIVE_MARKET_ORDER_BOOK_STREAM_
 exports.NODE_REGISTRY_BLS_PUBKEY_BYTES = NODE_REGISTRY_BLS_PUBKEY_BYTES;
 exports.NODE_REGISTRY_CAPABILITIES = NODE_REGISTRY_CAPABILITIES;
 exports.NODE_REGISTRY_CAPABILITY_MASK = NODE_REGISTRY_CAPABILITY_MASK;
+exports.NODE_REGISTRY_CLUSTER_MEMBER_REF_BYTES = NODE_REGISTRY_CLUSTER_MEMBER_REF_BYTES;
+exports.NODE_REGISTRY_CONSENSUS_POP_BYTES = NODE_REGISTRY_CONSENSUS_POP_BYTES;
+exports.NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES = NODE_REGISTRY_CONSENSUS_PUBKEY_BYTES;
+exports.NODE_REGISTRY_CONSENSUS_SIGNATURE_BYTES = NODE_REGISTRY_CONSENSUS_SIGNATURE_BYTES;
+exports.NODE_REGISTRY_DKG_ATTESTATION_SIG_BYTES = NODE_REGISTRY_DKG_ATTESTATION_SIG_BYTES;
 exports.NODE_REGISTRY_DKG_RESHARE_MAX_SIGNERS = NODE_REGISTRY_DKG_RESHARE_MAX_SIGNERS;
 exports.NODE_REGISTRY_DKG_RESHARE_MIN_SIGNERS = NODE_REGISTRY_DKG_RESHARE_MIN_SIGNERS;
 exports.NODE_REGISTRY_DKG_THRESHOLD_SIG_BYTES = NODE_REGISTRY_DKG_THRESHOLD_SIG_BYTES;
+exports.NODE_REGISTRY_FORM_CLUSTER_ACTIVE_COUNT = NODE_REGISTRY_FORM_CLUSTER_ACTIVE_COUNT;
+exports.NODE_REGISTRY_FORM_CLUSTER_MEMBER_COUNT = NODE_REGISTRY_FORM_CLUSTER_MEMBER_COUNT;
+exports.NODE_REGISTRY_FORM_CLUSTER_MESSAGE_DOMAIN = NODE_REGISTRY_FORM_CLUSTER_MESSAGE_DOMAIN;
+exports.NODE_REGISTRY_FORM_CLUSTER_STANDBY_COUNT = NODE_REGISTRY_FORM_CLUSTER_STANDBY_COUNT;
+exports.NODE_REGISTRY_FORM_CLUSTER_THRESHOLD = NODE_REGISTRY_FORM_CLUSTER_THRESHOLD;
+exports.NODE_REGISTRY_LEGACY_CLUSTER_MEMBER_PUBKEY_BYTES = NODE_REGISTRY_LEGACY_CLUSTER_MEMBER_PUBKEY_BYTES;
 exports.NODE_REGISTRY_PENDING_CHANGE_MAX_INTENT_ID = NODE_REGISTRY_PENDING_CHANGE_MAX_INTENT_ID;
 exports.NODE_REGISTRY_PUBLIC_SERVICE_MASK = NODE_REGISTRY_PUBLIC_SERVICE_MASK;
 exports.NODE_REGISTRY_SELECTORS = NODE_REGISTRY_SELECTORS;
@@ -9929,6 +11090,8 @@ exports.buildPlaceLimitOrderViaPlan = buildPlaceLimitOrderViaPlan;
 exports.buildPlaceSpotLimitOrderPlan = buildPlaceSpotLimitOrderPlan;
 exports.buildPlaceSpotMarketOrderExPlan = buildPlaceSpotMarketOrderExPlan;
 exports.buildPlaceSpotMarketOrderPlan = buildPlaceSpotMarketOrderPlan;
+exports.buildRequestClusterJoinTxFields = buildRequestClusterJoinTxFields;
+exports.buildVoteClusterAdmitTxFields = buildVoteClusterAdmitTxFields;
 exports.categoryRoot = categoryRoot;
 exports.checkMrvFeeDisplayConformance = checkMrvFeeDisplayConformance;
 exports.checkMrvStructuredFeeConformance = checkMrvStructuredFeeConformance;
@@ -9936,6 +11099,7 @@ exports.checkNativeDevkitCompatibility = checkNativeDevkitCompatibility;
 exports.clampPriorityTip = clampPriorityTip;
 exports.clobAddressHex = clobAddressHex;
 exports.clusterApyPercent = clusterApyPercent;
+exports.clusterJoinRequestExists = clusterJoinRequestExists;
 exports.compareNativeDevVersions = compareNativeDevVersions;
 exports.composeClaimBoundMessage = composeClaimBoundMessage;
 exports.computeNoEvmDacFinalityMessage = computeNoEvmDacFinalityMessage;
@@ -9947,6 +11111,7 @@ exports.computeQuoteLiquidity = computeQuoteLiquidity;
 exports.consumeNativeEvents = consumeNativeEvents;
 exports.decodeClusterDiversity = decodeClusterDiversity;
 exports.decodeClusterFormedEvent = decodeClusterFormedEvent;
+exports.decodeClusterJoinRequest = decodeClusterJoinRequest;
 exports.decodeHasPubkeyReturn = decodeHasPubkeyReturn;
 exports.decodeLookupPubkeyReturn = decodeLookupPubkeyReturn;
 exports.decodeNativeAgentStateResponse = decodeNativeAgentStateResponse;
@@ -9962,6 +11127,7 @@ exports.delegationAddressHex = delegationAddressHex;
 exports.denyRootFor = denyRootFor;
 exports.deriveClobMarketId = deriveClobMarketId;
 exports.deriveClusterAnchorAddress = deriveClusterAnchorAddress;
+exports.deriveClusterJoinOperatorId = deriveClusterJoinOperatorId;
 exports.deriveFeedId = deriveFeedId;
 exports.deriveMrvContractAddress = deriveMrvContractAddress;
 exports.deriveNativeSpotMarketId = deriveNativeSpotMarketId;
@@ -9971,6 +11137,7 @@ exports.encodeAttestDkgReshareCalldata = encodeAttestDkgReshareCalldata;
 exports.encodeBlockSelector = encodeBlockSelector;
 exports.encodeBridgeChallengeCalldata = encodeBridgeChallengeCalldata;
 exports.encodeBridgeClaimCalldata = encodeBridgeClaimCalldata;
+exports.encodeCancelClusterJoinCalldata = encodeCancelClusterJoinCalldata;
 exports.encodeCancelOrderCalldata = encodeCancelOrderCalldata;
 exports.encodeCancelPendingChangeCalldata = encodeCancelPendingChangeCalldata;
 exports.encodeClaimCalldata = encodeClaimCalldata;
@@ -9981,6 +11148,9 @@ exports.encodeCreateRequestCanonical = encodeCreateRequestCanonical;
 exports.encodeDelegateCalldata = encodeDelegateCalldata;
 exports.encodeDisableCalldata = encodeDisableCalldata;
 exports.encodeEnableCalldata = encodeEnableCalldata;
+exports.encodeExpireClusterJoinCalldata = encodeExpireClusterJoinCalldata;
+exports.encodeFormClusterCalldata = encodeFormClusterCalldata;
+exports.encodeGetClusterJoinRequestCalldata = encodeGetClusterJoinRequestCalldata;
 exports.encodeHasPubkeyCalldata = encodeHasPubkeyCalldata;
 exports.encodeLockBridgeConfigCalldata = encodeLockBridgeConfigCalldata;
 exports.encodeLookupPubkeyCalldata = encodeLookupPubkeyCalldata;
@@ -10041,6 +11211,7 @@ exports.encodeRecoverOperatorNodeCalldata = encodeRecoverOperatorNodeCalldata;
 exports.encodeRedelegateCalldata = encodeRedelegateCalldata;
 exports.encodeRegisterPubkeyCalldata = encodeRegisterPubkeyCalldata;
 exports.encodeReportServiceProbeCalldata = encodeReportServiceProbeCalldata;
+exports.encodeRequestClusterJoinCalldata = encodeRequestClusterJoinCalldata;
 exports.encodeSetAutoCompoundCalldata = encodeSetAutoCompoundCalldata;
 exports.encodeSetBridgeResumeCooldownCalldata = encodeSetBridgeResumeCooldownCalldata;
 exports.encodeSetBridgeRouteFinalityCalldata = encodeSetBridgeRouteFinalityCalldata;
@@ -10052,9 +11223,12 @@ exports.encodeSetTickSizeCalldata = encodeSetTickSizeCalldata;
 exports.encodeSubmitBridgeProofCalldata = encodeSubmitBridgeProofCalldata;
 exports.encodeSubmitPendingChangeCalldata = encodeSubmitPendingChangeCalldata;
 exports.encodeUndelegateCalldata = encodeUndelegateCalldata;
+exports.encodeVoteClusterAdmitCalldata = encodeVoteClusterAdmitCalldata;
 exports.exportBridgeRouteCatalogueJson = exportBridgeRouteCatalogueJson;
 exports.fetchChainInfoLatest = fetchChainInfoLatest;
 exports.fetchChainRegistryLatest = fetchChainRegistryLatest;
+exports.formClusterMessage = formClusterMessage;
+exports.formClusterMessageHex = formClusterMessageHex;
 exports.formatLyth = formatLyth;
 exports.formatLythoshi = formatLythoshi;
 exports.formatNativeReceiptFeeDisplay = formatNativeReceiptFeeDisplay;
@@ -10112,13 +11286,18 @@ exports.parseNameCategory = parseNameCategory;
 exports.parseNativeDecodedEvent = parseNativeDecodedEvent;
 exports.parseQuantity = parseQuantity;
 exports.parseQuantityBig = parseQuantityBig;
+exports.preflightClusterJoinRequest = preflightClusterJoinRequest;
+exports.previewRequestClusterJoin = previewRequestClusterJoin;
+exports.previewVoteClusterAdmit = previewVoteClusterAdmit;
 exports.proverMarketStateFromByte = proverMarketStateFromByte;
 exports.pubkeyRegistryAddressHex = pubkeyRegistryAddressHex;
 exports.quoteOperatorFee = quoteOperatorFee;
 exports.rankBridgeRoutes = rankBridgeRoutes;
 exports.rankMarketsByVolume = rankMarketsByVolume;
+exports.readClusterJoinRequest = readClusterJoinRequest;
 exports.requestSighash = requestSighash;
 exports.requireTypedAddress = requireTypedAddress;
+exports.resolveClusterJoinExecutionFee = resolveClusterJoinExecutionFee;
 exports.resolveExecutionFee = resolveExecutionFee;
 exports.resolveMaxExecutionUnitPrice = resolveMaxExecutionUnitPrice;
 exports.resolveRegistryExecutionFee = resolveRegistryExecutionFee;
@@ -10130,7 +11309,9 @@ exports.spendingPolicyAddressHex = spendingPolicyAddressHex;
 exports.submitMrvCallNativeTx = submitMrvCallNativeTx;
 exports.submitMrvDeployNativeTx = submitMrvDeployNativeTx;
 exports.submitMrvDeployPayloadNativeTx = submitMrvDeployPayloadNativeTx;
+exports.submitRequestClusterJoin = submitRequestClusterJoin;
 exports.submitSighash = submitSighash;
+exports.submitVoteClusterAdmit = submitVoteClusterAdmit;
 exports.transactionFeeExposure = transactionFeeExposure;
 exports.typedBech32ToAddress = typedBech32ToAddress;
 exports.validateAddress = validateAddress;