@qorechain/sdk 0.6.0 → 0.7.0

package/dist/index.d.ts

@@ -213,6 +213,39 @@ interface PaginatedOptions {
 type RestClientOptions = HttpOptions;
 /** Relative urgency of a fee estimate. */
 type FeeUrgency = "fast" | "normal" | "slow";
+/**
+ * REST shape of `GET /qorechain/abstractaccount/v1/permission_schema` — the
+ * canonical authenticator permission taxonomy (v3.1.85). `schema_version` bumps
+ * whenever the taxonomy or the mapping changes, so clients compare it to their
+ * embedded copy to detect drift.
+ */
+interface PermissionSchemaResponse {
+    /** Version tag that bumps on any taxonomy/mapping change. */
+    schema_version: string;
+    /** Every valid permission string (e.g. `send`, `evm`, `svm`, `all`). */
+    permissions: string[];
+    /** Maps a message typeURL to the permission it requires. */
+    msg_permissions: Record<string, string>;
+    /** TypeURLs that are NEVER delegable to a linked authenticator key. */
+    key_management_msgs: string[];
+}
+/** REST shape of an abstract-account view (subset of `AccountView`). */
+interface AbstractAccountView {
+    address: string;
+    contract_address?: string;
+    account_type?: string;
+    spending_rules_count?: number;
+    session_keys_count?: number;
+    created_at?: string;
+    owner?: string;
+}
+/** REST shape of the abstractaccount module config view. */
+interface AbstractAccountConfigView {
+    enabled: boolean;
+    max_session_keys?: number;
+    max_spending_rules?: number;
+    default_session_ttl?: string;
+}
 /** Native + QoreChain REST read client. */
 declare class RestClient {
     private readonly baseUrl;
@@ -252,6 +285,28 @@ declare class RestClient {
     getXqorePosition<T = Record<string, unknown>>(address: string): Promise<T>;
     /** Current inflation rate (`/qorechain/inflation/v1/rate`). */
     getInflationRate<T = Record<string, unknown>>(): Promise<T>;
+    /**
+     * The canonical authenticator permission taxonomy
+     * (`/qorechain/abstractaccount/v1/permission_schema`): the valid permission
+     * strings, the message-typeURL→permission mapping, the never-delegable
+     * key-management typeURLs, and a `schema_version` for drift detection.
+     */
+    getPermissionSchema(): Promise<PermissionSchemaResponse>;
+    /** Abstract-account module config (`/qorechain/abstractaccount/v1/config`). */
+    getAbstractAccountConfig<T = {
+        config: AbstractAccountConfigView;
+    }>(): Promise<T>;
+    /** All abstract accounts (`/qorechain/abstractaccount/v1/accounts`). */
+    getAbstractAccounts<T = {
+        accounts: AbstractAccountView[];
+    }>(): Promise<T>;
+    /**
+     * A single abstract account by address
+     * (`/qorechain/abstractaccount/v1/accounts/{address}`).
+     */
+    getAbstractAccount<T = {
+        account: AbstractAccountView;
+    }>(address: string): Promise<T>;
 }
 
 /**
@@ -2254,6 +2309,117 @@ interface RetryOptions {
  */
 declare function withRetry<T>(fn: (attempt: number) => Promise<T>, opts?: RetryOptions): Promise<T>;
 
+/**
+ * Authenticator-lane sign-bytes (v3.1.85).
+ *
+ * QoreChain "authenticator lanes" let a linked external key (a Phantom ed25519
+ * key, or an EVM secp256k1 key) spend from the ONE canonical PQC-required
+ * account under least-privilege, spend-limited, revocable terms — WITHOUT the
+ * external key ever producing an ML-DSA co-signature. A relayer submits and
+ * pays fees (its own hybrid-PQC signature satisfies the ante on the envelope);
+ * the authenticator's signature over the domain-separated, replay-bound
+ * sign-bytes below IS the authorization.
+ *
+ * There are three lanes:
+ *   - EVM lane    — `MsgExecuteEVM`:    an EVM call/transfer from the account's
+ *                   0x address, authorized by {@link evmAuthSignBytes}.
+ *   - Native lane — `MsgExecuteCosmos`: a bank send from the account, authorized
+ *                   by {@link cosmosAuthSignBytes}.
+ *   - Key rotation — `MsgRotatePQCKey`: dual-signed over
+ *                    {@link rotationSignBytes}.
+ *
+ * The digests here are rebuilt BYTE-FOR-BYTE from what the chain re-derives
+ * (`x/abstractaccount/types/{evm,cosmos}_sign.go`, `x/pqc/types` rotation
+ * bytes). A mismatch is rejected on-chain (codespace `abstractaccount`, code 11
+ * replay / 10 permission / 5 spending-limit / 6 session-expired; codespace
+ * `pqc`, code 21 hybrid-verify-failed).
+ *
+ * These are pure byte-builders — no wallet, no network. See
+ * {@link ../wallet/authenticator} for the DX builders that sign them.
+ */
+/** 8-byte big-endian encoding of a non-negative integer (`binary.BigEndian`). */
+declare function be64(n: number | bigint): Uint8Array;
+/** Length-prefixed field: `BE64(len) ‖ bytes` (the chain's framing). */
+declare function lengthPrefixed(bytes: Uint8Array): Uint8Array;
+/** Input to {@link evmAuthSignBytes}. */
+interface EvmAuthSignBytesInput {
+    /** The chain id (e.g. `qorechain-diana`). */
+    chainId: string;
+    /** The bech32 canonical account the authenticator acts for. */
+    account: string;
+    /** The authenticator's raw public key (32 bytes for ed25519; the 20-byte eth address for secp256k1). */
+    pubkey: Uint8Array;
+    /** 0x-hex recipient/contract address; empty string for contract creation. */
+    to?: string;
+    /** Native QOR amount in wei (aqor) as a decimal string. */
+    value?: string;
+    /** EVM calldata. */
+    data?: Uint8Array;
+    /**
+     * The account's CURRENT EVM nonce. The relayer is a DIFFERENT account than the
+     * owner, so the relayer envelope does NOT bump the account's nonce — use the
+     * current value as-is (do NOT +1).
+     */
+    nonce: number | bigint;
+}
+/**
+ * Rebuild the 32-byte digest the chain re-derives for a `MsgExecuteEVM`:
+ *
+ * ```
+ * sha256( "qorechain-evm-auth-v1"
+ *         ‖ LP(chainId) ‖ LP(account) ‖ LP(pubkey)
+ *         ‖ LP(to) ‖ LP(value) ‖ LP(data) ‖ BE64(nonce) )
+ * ```
+ *
+ * where `LP(x) = BE64(len(x)) ‖ x`. Returns the raw 32 bytes the authenticator
+ * signs.
+ */
+declare function evmAuthSignBytes(input: EvmAuthSignBytesInput): Uint8Array;
+/** Input to {@link cosmosAuthSignBytes}. */
+interface CosmosAuthSignBytesInput {
+    /** The chain id (e.g. `qorechain-diana`). */
+    chainId: string;
+    /** The bech32 canonical account the authenticator acts for. */
+    account: string;
+    /** The authenticator's raw public key (32 bytes for ed25519; the 20-byte eth address for secp256k1). */
+    pubkey: Uint8Array;
+    /** The bech32 recipient address. */
+    to: string;
+    /** The CANONICAL single-coin amount string (e.g. `100uqor`). */
+    amount: string;
+    /**
+     * The per-authenticator sequence for `(account, pubkey)` — a store counter
+     * distinct from the account's own sequence, incremented on each successful
+     * Native-lane spend.
+     */
+    nonce: number | bigint;
+}
+/**
+ * Rebuild the 32-byte digest the chain re-derives for a `MsgExecuteCosmos`:
+ *
+ * ```
+ * sha256( "qorechain-cosmos-auth-v1"
+ *         ‖ LP(chainId) ‖ LP(account) ‖ LP(pubkey)
+ *         ‖ LP(to) ‖ LP(amount) ‖ BE64(nonce) )
+ * ```
+ *
+ * `amount` is the canonical single-coin string (e.g. `100uqor`). Returns the
+ * raw 32 bytes the authenticator signs.
+ */
+declare function cosmosAuthSignBytes(input: CosmosAuthSignBytesInput): Uint8Array;
+/**
+ * The domain-separated STRING both the old and the new key sign for a
+ * `MsgRotatePQCKey`:
+ *
+ * ```
+ * "qorechain-pqc-rotate-v1|<chainId>|<algorithmId>|<account>|<oldHex>|<newHex>"
+ * ```
+ *
+ * `oldHex`/`newHex` are lowercase hex of the public keys. Sign `utf8(result)`
+ * with BOTH the old and the new key.
+ */
+declare function rotationSignBytes(chainId: string, algorithmId: number, account: string, oldPub: Uint8Array, newPub: Uint8Array): string;
+
 /**
  * Encoding and attachment of the QoreChain PQC hybrid-signature extension to a
  * native tx.
@@ -2266,13 +2432,15 @@ declare function withRetry<T>(fn: (attempt: number) => Promise<T>, opts?: RetryO
  * / {@link signAndBroadcastHybrid}) — prefer those for end-to-end signing. This
  * module documents the on-wire encoding the chain reads:
  *
- *  - `PQCHybridSignature` struct, JSON field tags (`algorithm_id`,
- *    `pqc_signature`, `pqc_public_key,omitempty`), and type URL
+ *  - `PQCHybridSignature` protobuf message (fields `algorithm_id` = 1,
+ *    `pqc_signature` = 2, `pqc_public_key` = 3) and type URL
  *    `/qorechain.pqc.v1.PQCHybridSignature`.
- *  - The ante handler extracts the extension by type URL and JSON-decodes it, so
- *    the `Any.value` carries the struct's Go-JSON encoding (Go marshals
- *    `[]byte` as standard padded base64 strings), NOT a protobuf message. This
- *    module encodes accordingly (see {@link toGoJson}).
+ *  - The ante handler extracts the extension by type URL and PROTOBUF-decodes it,
+ *    so the `Any.value` carries the message's protobuf encoding (via the
+ *    generated `PQCHybridSignature` codec), NOT JSON. Its first byte is `0x08`
+ *    (field-1 varint tag). A prior release JSON-encoded this value; the chain's
+ *    tx decoder rejected every such tx at CheckTx (the leading `0x7b` = `{` was
+ *    misread as field 15 `start_group`). Verified live on testnet 2026-07-05.
  *  - PLACEMENT: the extension is a CRITICAL extension option — it goes in
  *    `TxBody.extension_options`. {@link buildHybridTx} always uses this slot.
  *    This module additionally exposes `non_critical_extension_options` via
@@ -2306,9 +2474,11 @@ interface AttachHybridOptions {
  * `TxBody` extension option.
  *
  * The `Any.typeUrl` is the core {@link HYBRID_SIG_TYPE_URL}; the `Any.value` is
- * the UTF-8 bytes of the struct's Go-JSON encoding (see {@link toGoJson} and the
- * module header — the chain reads this extension by type URL + JSON decoding,
- * not protobuf).
+ * the PROTOBUF encoding of the `PQCHybridSignature` message (via the generated
+ * codec — fields `algorithmId` = 1, `pqcSignature` = 2, `pqcPublicKey` = 3), so
+ * the encoded value always begins with `0x08` (field-1 varint tag). The chain's
+ * ante handler protobuf-decodes this extension; a JSON-encoded value is rejected
+ * by the tx decoder at CheckTx.
  */
 declare function encodeHybridExtension(ext: PQCHybridSignature$1): Any;
 /**
@@ -2349,9 +2519,11 @@ declare function attachHybridExtension(body: TxBody, ext: PQCHybridSignature$1,
  *    ML-DSA-87, empty context) — 4627 bytes for Dilithium-5.
  *  - The `PQCHybridSignature` extension is then added to
  *    `TxBody.extension_options` (CRITICAL extension options) as an `Any` with
- *    `type_url = "/qorechain.pqc.v1.PQCHybridSignature"` and `value` = UTF-8
- *    bytes of the Go-JSON `{ "algorithm_id", "pqc_signature", "pqc_public_key"? }`
- *    (standard padded base64; `pqc_public_key` omitted when not provided).
+ *    `type_url = "/qorechain.pqc.v1.PQCHybridSignature"` and `value` = the
+ *    PROTOBUF encoding of the `PQCHybridSignature` message (fields
+ *    `algorithm_id` = 1, `pqc_signature` = 2, `pqc_public_key` = 3; the encoded
+ *    value begins with `0x08`). The chain protobuf-decodes it — a JSON value is
+ *    rejected by the tx decoder.
  *  - The CLASSICAL signature is computed normally (SIGN_MODE_DIRECT) over the
  *    FINAL body (the one WITH the PQC extension) + authInfo + chainId +
  *    accountNumber, and goes in `TxRaw.signatures` (outside the body). There is
@@ -2723,7 +2895,7 @@ declare const SvmAccountMeta: MessageFns$p<SvmAccountMeta>;
 /**
  * SVMAuth carries a foreign-scheme (e.g. Phantom ed25519) authorization for an
  * SVM action. When present on MsgExecuteProgram, the EFFECTIVE SVM signer is the
- * canonical account this key authenticates (verified on-chain), NOT the Native
+ * canonical account this key authenticates (verified on-chain), NOT the Cosmos
  * `sender` — so any funded account may relay a Phantom-authorized action through
  * consensus while the foreign key remains the authority.
  */
@@ -3726,6 +3898,24 @@ declare const MsgMigratePQCKey: MessageFns$j<MsgMigratePQCKey>;
 interface MsgMigratePQCKeyResponse {
 }
 declare const MsgMigratePQCKeyResponse: MessageFns$j<MsgMigratePQCKeyResponse>;
+/**
+ * MsgRotatePQCKey replaces an account's PQC key with a new key of the SAME
+ * algorithm. Both signatures are over the domain-separated bytes
+ * "qorechain-pqc-rotate-v1|chainid|algo|account|oldkey|newkey" (no block height —
+ * the signer cannot predict it; replay is prevented because after the rotation
+ * the old key no longer matches the registered key).
+ */
+interface MsgRotatePQCKey {
+    sender: string;
+    oldPublicKey: Uint8Array;
+    newPublicKey: Uint8Array;
+    oldSignature: Uint8Array;
+    newSignature: Uint8Array;
+}
+declare const MsgRotatePQCKey: MessageFns$j<MsgRotatePQCKey>;
+interface MsgRotatePQCKeyResponse {
+}
+declare const MsgRotatePQCKeyResponse: MessageFns$j<MsgRotatePQCKeyResponse>;
 /** MsgDeprecateAlgorithm proposes deprecating an algorithm (starts migration period). */
 interface MsgDeprecateAlgorithm {
     authority: string;
@@ -3780,6 +3970,20 @@ declare const MsgDefinition$5: {
             readonly responseStream: false;
             readonly options: {};
         };
+        /**
+         * RotatePQCKey replaces an account's PQC key with a NEW key of the SAME
+         * algorithm — for rotating a compromised key or moving a legacy-derived key to
+         * the canonical derivation. Dual-signed (old proves ownership, new proves
+         * control); needs no active algorithm migration.
+         */
+        readonly rotatePQCKey: {
+            readonly name: "RotatePQCKey";
+            readonly requestType: typeof MsgRotatePQCKey;
+            readonly requestStream: false;
+            readonly responseType: typeof MsgRotatePQCKeyResponse;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** DeprecateAlgorithm starts the migration period for an algorithm (governance). */
         readonly deprecateAlgorithm: {
             readonly name: "DeprecateAlgorithm";
@@ -3823,8 +4027,10 @@ declare const tx$5_MsgRegisterPQCKey: typeof MsgRegisterPQCKey;
 declare const tx$5_MsgRegisterPQCKeyResponse: typeof MsgRegisterPQCKeyResponse;
 declare const tx$5_MsgRegisterPQCKeyV2: typeof MsgRegisterPQCKeyV2;
 declare const tx$5_MsgRegisterPQCKeyV2Response: typeof MsgRegisterPQCKeyV2Response;
+declare const tx$5_MsgRotatePQCKey: typeof MsgRotatePQCKey;
+declare const tx$5_MsgRotatePQCKeyResponse: typeof MsgRotatePQCKeyResponse;
 declare namespace tx$5 {
-  export { type DeepPartial$j as DeepPartial, type MessageFns$j as MessageFns, MsgDefinition$5 as MsgDefinition, tx$5_MsgDeprecateAlgorithm as MsgDeprecateAlgorithm, tx$5_MsgDeprecateAlgorithmResponse as MsgDeprecateAlgorithmResponse, tx$5_MsgDisableAlgorithm as MsgDisableAlgorithm, tx$5_MsgDisableAlgorithmResponse as MsgDisableAlgorithmResponse, tx$5_MsgMigratePQCKey as MsgMigratePQCKey, tx$5_MsgMigratePQCKeyResponse as MsgMigratePQCKeyResponse, tx$5_MsgRegisterPQCKey as MsgRegisterPQCKey, tx$5_MsgRegisterPQCKeyResponse as MsgRegisterPQCKeyResponse, tx$5_MsgRegisterPQCKeyV2 as MsgRegisterPQCKeyV2, tx$5_MsgRegisterPQCKeyV2Response as MsgRegisterPQCKeyV2Response, protobufPackage$j as protobufPackage };
+  export { type DeepPartial$j as DeepPartial, type MessageFns$j as MessageFns, MsgDefinition$5 as MsgDefinition, tx$5_MsgDeprecateAlgorithm as MsgDeprecateAlgorithm, tx$5_MsgDeprecateAlgorithmResponse as MsgDeprecateAlgorithmResponse, tx$5_MsgDisableAlgorithm as MsgDisableAlgorithm, tx$5_MsgDisableAlgorithmResponse as MsgDisableAlgorithmResponse, tx$5_MsgMigratePQCKey as MsgMigratePQCKey, tx$5_MsgMigratePQCKeyResponse as MsgMigratePQCKeyResponse, tx$5_MsgRegisterPQCKey as MsgRegisterPQCKey, tx$5_MsgRegisterPQCKeyResponse as MsgRegisterPQCKeyResponse, tx$5_MsgRegisterPQCKeyV2 as MsgRegisterPQCKeyV2, tx$5_MsgRegisterPQCKeyV2Response as MsgRegisterPQCKeyV2Response, tx$5_MsgRotatePQCKey as MsgRotatePQCKey, tx$5_MsgRotatePQCKeyResponse as MsgRotatePQCKeyResponse, protobufPackage$j as protobufPackage };
 }
 
 declare const protobufPackage$i = "qorechain.lightnode.v1";
@@ -4092,6 +4298,79 @@ declare const MsgRevokeAuthenticator: MessageFns$g<MsgRevokeAuthenticator>;
 interface MsgRevokeAuthenticatorResponse {
 }
 declare const MsgRevokeAuthenticatorResponse: MessageFns$g<MsgRevokeAuthenticatorResponse>;
+/**
+ * MsgExecuteEVM executes an EVM call/transfer authorized by a linked
+ * authenticator (v3.1.85). The relayer submits + pays fees; the authenticator
+ * (scheme,pubkey) signs the domain-separated sign-bytes binding chain-id, the
+ * canonical account, the pubkey, to/value/data and the account's expected EVM
+ * nonce (replay protection — the nonce must equal the account's current EVM
+ * nonce, and executing the call increments it, so a signature cannot be replayed).
+ * The chain resolves the authenticator, checks the "evm" permission + SpendingRule
+ * against `value`, then executes the call FROM the canonical account's EVM address.
+ */
+interface MsgExecuteEVM {
+    relayer: string;
+    /** bech32 canonical account (the authenticator's owner) */
+    account: string;
+    /** "ed25519" | "secp256k1" */
+    scheme: string;
+    /** authenticator public key */
+    pubkey: Uint8Array;
+    /** authenticator signature over the EVM auth sign-bytes */
+    signature: Uint8Array;
+    /** 0x-hex recipient/contract; empty = contract create */
+    to: string;
+    /** native QOR amount in wei (aqor), decimal string */
+    value: string;
+    /** EVM calldata */
+    data: Uint8Array;
+    gasLimit: string;
+    /** MUST equal the account's current EVM nonce */
+    nonce: string;
+}
+declare const MsgExecuteEVM: MessageFns$g<MsgExecuteEVM>;
+interface MsgExecuteEVMResponse {
+    success: boolean;
+    ret: Uint8Array;
+    gasUsed: string;
+    vmError: string;
+}
+declare const MsgExecuteEVMResponse: MessageFns$g<MsgExecuteEVMResponse>;
+/**
+ * MsgExecuteCosmos executes a Native-lane (Cosmos) bank transfer authorized by a
+ * linked authenticator (v3.1.85). It is the Native counterpart of MsgExecuteEVM:
+ * the relayer submits + pays fees and signs the outer tx (so the account's own
+ * PQC-required signature is not needed — the relayer's hybrid-PQC signature
+ * satisfies the ante on the envelope), while the authenticator (scheme,pubkey)
+ * signs the domain-separated sign-bytes binding chain-id, the canonical account,
+ * the pubkey, the recipient, the amount and a per-authenticator sequence (replay:
+ * nonce must equal the account+key's current sequence, incremented on success).
+ * The chain resolves the authenticator, checks the "send" permission + SpendingRule
+ * against `amount`, then moves the coins FROM the canonical account via x/bank.
+ * This lets an external key (Phantom ed25519 / EVM secp256k1) spend native QOR from
+ * a PQC-required account under least-privilege, spend-limited, revocable terms.
+ */
+interface MsgExecuteCosmos {
+    relayer: string;
+    /** bech32 canonical account (the authenticator's owner) */
+    account: string;
+    /** "ed25519" | "secp256k1" */
+    scheme: string;
+    /** authenticator public key */
+    pubkey: Uint8Array;
+    /** authenticator signature over the Cosmos auth sign-bytes */
+    signature: Uint8Array;
+    /** bech32 recipient */
+    to: string;
+    amount: Coin[];
+    /** MUST equal the account+key's current authenticator sequence */
+    nonce: string;
+}
+declare const MsgExecuteCosmos: MessageFns$g<MsgExecuteCosmos>;
+interface MsgExecuteCosmosResponse {
+    success: boolean;
+}
+declare const MsgExecuteCosmosResponse: MessageFns$g<MsgExecuteCosmosResponse>;
 /** Msg defines the abstractaccount module's transaction service. */
 type MsgDefinition$2 = typeof MsgDefinition$2;
 declare const MsgDefinition$2: {
@@ -4130,6 +4409,22 @@ declare const MsgDefinition$2: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly executeEVM: {
+            readonly name: "ExecuteEVM";
+            readonly requestType: typeof MsgExecuteEVM;
+            readonly requestStream: false;
+            readonly responseType: typeof MsgExecuteEVMResponse;
+            readonly responseStream: false;
+            readonly options: {};
+        };
+        readonly executeCosmos: {
+            readonly name: "ExecuteCosmos";
+            readonly requestType: typeof MsgExecuteCosmos;
+            readonly requestStream: false;
+            readonly responseType: typeof MsgExecuteCosmosResponse;
+            readonly responseStream: false;
+            readonly options: {};
+        };
     };
 };
 type Builtin$g = Date | Function | Uint8Array | string | number | boolean | undefined;
@@ -4147,6 +4442,10 @@ interface MessageFns$g<T> {
 
 declare const tx$2_MsgCreateAbstractAccount: typeof MsgCreateAbstractAccount;
 declare const tx$2_MsgCreateAbstractAccountResponse: typeof MsgCreateAbstractAccountResponse;
+declare const tx$2_MsgExecuteCosmos: typeof MsgExecuteCosmos;
+declare const tx$2_MsgExecuteCosmosResponse: typeof MsgExecuteCosmosResponse;
+declare const tx$2_MsgExecuteEVM: typeof MsgExecuteEVM;
+declare const tx$2_MsgExecuteEVMResponse: typeof MsgExecuteEVMResponse;
 declare const tx$2_MsgRegisterAuthenticator: typeof MsgRegisterAuthenticator;
 declare const tx$2_MsgRegisterAuthenticatorResponse: typeof MsgRegisterAuthenticatorResponse;
 declare const tx$2_MsgRevokeAuthenticator: typeof MsgRevokeAuthenticator;
@@ -4155,7 +4454,7 @@ declare const tx$2_MsgUpdateSpendingRules: typeof MsgUpdateSpendingRules;
 declare const tx$2_MsgUpdateSpendingRulesResponse: typeof MsgUpdateSpendingRulesResponse;
 declare const tx$2_SpendingRule: typeof SpendingRule;
 declare namespace tx$2 {
-  export { type DeepPartial$g as DeepPartial, type MessageFns$g as MessageFns, tx$2_MsgCreateAbstractAccount as MsgCreateAbstractAccount, tx$2_MsgCreateAbstractAccountResponse as MsgCreateAbstractAccountResponse, MsgDefinition$2 as MsgDefinition, tx$2_MsgRegisterAuthenticator as MsgRegisterAuthenticator, tx$2_MsgRegisterAuthenticatorResponse as MsgRegisterAuthenticatorResponse, tx$2_MsgRevokeAuthenticator as MsgRevokeAuthenticator, tx$2_MsgRevokeAuthenticatorResponse as MsgRevokeAuthenticatorResponse, tx$2_MsgUpdateSpendingRules as MsgUpdateSpendingRules, tx$2_MsgUpdateSpendingRulesResponse as MsgUpdateSpendingRulesResponse, tx$2_SpendingRule as SpendingRule, protobufPackage$g as protobufPackage };
+  export { type DeepPartial$g as DeepPartial, type MessageFns$g as MessageFns, tx$2_MsgCreateAbstractAccount as MsgCreateAbstractAccount, tx$2_MsgCreateAbstractAccountResponse as MsgCreateAbstractAccountResponse, MsgDefinition$2 as MsgDefinition, tx$2_MsgExecuteCosmos as MsgExecuteCosmos, tx$2_MsgExecuteCosmosResponse as MsgExecuteCosmosResponse, tx$2_MsgExecuteEVM as MsgExecuteEVM, tx$2_MsgExecuteEVMResponse as MsgExecuteEVMResponse, tx$2_MsgRegisterAuthenticator as MsgRegisterAuthenticator, tx$2_MsgRegisterAuthenticatorResponse as MsgRegisterAuthenticatorResponse, tx$2_MsgRevokeAuthenticator as MsgRevokeAuthenticator, tx$2_MsgRevokeAuthenticatorResponse as MsgRevokeAuthenticatorResponse, tx$2_MsgUpdateSpendingRules as MsgUpdateSpendingRules, tx$2_MsgUpdateSpendingRulesResponse as MsgUpdateSpendingRulesResponse, tx$2_SpendingRule as SpendingRule, protobufPackage$g as protobufPackage };
 }
 
 declare const protobufPackage$f = "qorechain.crossvm.v1";
@@ -4424,6 +4723,14 @@ declare const pqc: {
     migratePqcKey: (value: PartialMsg<MsgMigratePQCKey>) => EncodeObject;
     deprecateAlgorithm: (value: PartialMsg<MsgDeprecateAlgorithm>) => EncodeObject;
     disableAlgorithm: (value: PartialMsg<MsgDisableAlgorithm>) => EncodeObject;
+    /**
+     * Replace an account's PQC key with a NEW key of the SAME algorithm (rotate a
+     * compromised key, or migrate a legacy-derived key to the canonical
+     * derivation). Dual-signed over the domain-separated rotation bytes (the old
+     * key proves ownership, the new key proves control). Sender-signed; broadcast
+     * BY the account, cosigned (hybrid) with the OLD key.
+     */
+    rotatePqcKey: (value: PartialMsg<MsgRotatePQCKey>) => EncodeObject;
 };
 /** SVM (virtual machine programs/accounts) message composers. */
 declare const svm: {
@@ -4458,6 +4765,20 @@ declare const abstractaccount: {
     registerAuthenticator: (value: PartialMsg<MsgRegisterAuthenticator>) => EncodeObject;
     /** Instantly disable a previously linked wallet key. Owner-signed. */
     revokeAuthenticator: (value: PartialMsg<MsgRevokeAuthenticator>) => EncodeObject;
+    /**
+     * EVM-lane spend: execute an EVM call/transfer FROM the canonical account's
+     * 0x address, authorized by a linked authenticator's signature over the EVM
+     * auth sign-bytes. Relayer-signed (it submits + pays fees). See
+     * {@link ../tx/authenticator.evmAuthSignBytes}.
+     */
+    executeEvm: (value: PartialMsg<MsgExecuteEVM>) => EncodeObject;
+    /**
+     * Native-lane spend: move native QOR FROM the canonical account via x/bank,
+     * authorized by a linked authenticator's signature over the Cosmos auth
+     * sign-bytes. Relayer-signed (it submits + pays fees). See
+     * {@link ../tx/authenticator.cosmosAuthSignBytes}.
+     */
+    executeCosmos: (value: PartialMsg<MsgExecuteCosmos>) => EncodeObject;
 };
 /** Cross-VM message composers. */
 declare const crossvm: {
@@ -6035,11 +6356,9 @@ declare const msg: {
             algorithmId?: number | undefined;
             reason?: string | undefined;
         }) => _cosmjs_proto_signing.EncodeObject;
-    };
-    readonly svm: {
-        deployProgram: (value: {
+        rotatePqcKey: (value: {
             sender?: string | undefined;
-            bytecode?: {
+            oldPublicKey?: {
                 [x: number]: number | undefined;
                 readonly BYTES_PER_ELEMENT?: number | undefined;
                 readonly buffer?: ({
@@ -6084,10 +6403,7 @@ declare const msg: {
                 [Symbol.iterator]?: {} | undefined;
                 readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
             } | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        createAccount: (value: {
-            sender?: string | undefined;
-            owner?: {
+            newPublicKey?: {
                 [x: number]: number | undefined;
                 readonly BYTES_PER_ELEMENT?: number | undefined;
                 readonly buffer?: ({
@@ -6132,9 +6448,7 @@ declare const msg: {
                 [Symbol.iterator]?: {} | undefined;
                 readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
             } | undefined;
-            space?: string | undefined;
-            lamports?: string | undefined;
-            salt?: {
+            oldSignature?: {
                 [x: number]: number | undefined;
                 readonly BYTES_PER_ELEMENT?: number | undefined;
                 readonly buffer?: ({
@@ -6179,10 +6493,7 @@ declare const msg: {
                 [Symbol.iterator]?: {} | undefined;
                 readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
             } | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        executeProgram: (value: {
-            sender?: string | undefined;
-            programId?: {
+            newSignature?: {
                 [x: number]: number | undefined;
                 readonly BYTES_PER_ELEMENT?: number | undefined;
                 readonly buffer?: ({
@@ -6227,56 +6538,12 @@ declare const msg: {
                 [Symbol.iterator]?: {} | undefined;
                 readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
             } | undefined;
-            accounts?: ({
-                address?: {
-                    [x: number]: number | undefined;
-                    readonly BYTES_PER_ELEMENT?: number | undefined;
-                    readonly buffer?: ({
-                        readonly byteLength?: number | undefined;
-                        slice?: {} | undefined;
-                        readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
-                    } | {
-                        readonly byteLength?: number | undefined;
-                        slice?: {} | undefined;
-                        readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
-                    }) | undefined;
-                    readonly byteLength?: number | undefined;
-                    readonly byteOffset?: number | undefined;
-                    copyWithin?: {} | undefined;
-                    every?: {} | undefined;
-                    fill?: {} | undefined;
-                    filter?: {} | undefined;
-                    find?: {} | undefined;
-                    findIndex?: {} | undefined;
-                    forEach?: {} | undefined;
-                    indexOf?: {} | undefined;
-                    join?: {} | undefined;
-                    lastIndexOf?: {} | undefined;
-                    readonly length?: number | undefined;
-                    map?: {} | undefined;
-                    reduce?: {} | undefined;
-                    reduceRight?: {} | undefined;
-                    reverse?: {} | undefined;
-                    set?: {} | undefined;
-                    slice?: {} | undefined;
-                    some?: {} | undefined;
-                    sort?: {} | undefined;
-                    subarray?: {} | undefined;
-                    toLocaleString?: {} | undefined;
-                    toString?: {} | undefined;
-                    valueOf?: {} | undefined;
-                    entries?: {} | undefined;
-                    keys?: {} | undefined;
-                    values?: {} | undefined;
-                    includes?: {} | undefined;
-                    at?: {} | undefined;
-                    [Symbol.iterator]?: {} | undefined;
-                    readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
-                } | undefined;
-                isSigner?: boolean | undefined;
-                isWritable?: boolean | undefined;
-            } | undefined)[] | undefined;
-            data?: {
+        }) => _cosmjs_proto_signing.EncodeObject;
+    };
+    readonly svm: {
+        deployProgram: (value: {
+            sender?: string | undefined;
+            bytecode?: {
                 [x: number]: number | undefined;
                 readonly BYTES_PER_ELEMENT?: number | undefined;
                 readonly buffer?: ({
@@ -6321,11 +6588,10 @@ declare const msg: {
                 [Symbol.iterator]?: {} | undefined;
                 readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
             } | undefined;
-            auth?: SVMAuth | undefined;
         }) => _cosmjs_proto_signing.EncodeObject;
-        registerSvmPqcKey: (value: {
+        createAccount: (value: {
             sender?: string | undefined;
-            svmAddr?: {
+            owner?: {
                 [x: number]: number | undefined;
                 readonly BYTES_PER_ELEMENT?: number | undefined;
                 readonly buffer?: ({
@@ -6370,7 +6636,9 @@ declare const msg: {
                 [Symbol.iterator]?: {} | undefined;
                 readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
             } | undefined;
-            pqcPubKey?: {
+            space?: string | undefined;
+            lamports?: string | undefined;
+            salt?: {
                 [x: number]: number | undefined;
                 readonly BYTES_PER_ELEMENT?: number | undefined;
                 readonly buffer?: ({
@@ -6416,69 +6684,9 @@ declare const msg: {
                 readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
             } | undefined;
         }) => _cosmjs_proto_signing.EncodeObject;
-    };
-    readonly lightnode: {
-        registerLightNode: (value: {
-            operator?: string | undefined;
-            nodeType?: string | undefined;
-            version?: string | undefined;
-            capabilities?: (string | undefined)[] | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        heartbeat: (value: {
-            operator?: string | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        deregisterLightNode: (value: {
-            operator?: string | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        claimLightNodeRewards: (value: {
-            operator?: string | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-    };
-    readonly license: {
-        grantLicense: (value: {
-            authority?: string | undefined;
-            grantee?: string | undefined;
-            featureId?: string | undefined;
-            expiresAt?: string | undefined;
-            metadata?: string | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        revokeLicense: (value: {
-            authority?: string | undefined;
-            grantee?: string | undefined;
-            featureId?: string | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        suspendLicense: (value: {
-            authority?: string | undefined;
-            grantee?: string | undefined;
-            featureId?: string | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        resumeLicense: (value: {
-            authority?: string | undefined;
-            grantee?: string | undefined;
-            featureId?: string | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-    };
-    readonly abstractaccount: {
-        createAbstractAccount: (value: {
-            owner?: string | undefined;
-            accountType?: string | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        updateSpendingRules: (value: {
-            owner?: string | undefined;
-            accountAddress?: string | undefined;
-            rules?: ({
-                id?: string | undefined;
-                dailyLimit?: string | undefined;
-                perTxLimit?: string | undefined;
-                allowedDenoms?: (string | undefined)[] | undefined;
-                enabled?: boolean | undefined;
-            } | undefined)[] | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        registerAuthenticator: (value: {
-            owner?: string | undefined;
-            accountAddress?: string | undefined;
-            scheme?: string | undefined;
-            pubkey?: {
+        executeProgram: (value: {
+            sender?: string | undefined;
+            programId?: {
                 [x: number]: number | undefined;
                 readonly BYTES_PER_ELEMENT?: number | undefined;
                 readonly buffer?: ({
@@ -6523,22 +6731,557 @@ declare const msg: {
                 [Symbol.iterator]?: {} | undefined;
                 readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
             } | undefined;
-            permissions?: (string | undefined)[] | undefined;
-            expiryUnix?: string | undefined;
-            label?: string | undefined;
-        }) => _cosmjs_proto_signing.EncodeObject;
-        revokeAuthenticator: (value: {
-            owner?: string | undefined;
-            accountAddress?: string | undefined;
-            scheme?: string | undefined;
-            pubkey?: {
-                [x: number]: number | undefined;
-                readonly BYTES_PER_ELEMENT?: number | undefined;
-                readonly buffer?: ({
-                    readonly byteLength?: number | undefined;
-                    slice?: {} | undefined;
-                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
-                } | {
+            accounts?: ({
+                address?: {
+                    [x: number]: number | undefined;
+                    readonly BYTES_PER_ELEMENT?: number | undefined;
+                    readonly buffer?: ({
+                        readonly byteLength?: number | undefined;
+                        slice?: {} | undefined;
+                        readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                    } | {
+                        readonly byteLength?: number | undefined;
+                        slice?: {} | undefined;
+                        readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                    }) | undefined;
+                    readonly byteLength?: number | undefined;
+                    readonly byteOffset?: number | undefined;
+                    copyWithin?: {} | undefined;
+                    every?: {} | undefined;
+                    fill?: {} | undefined;
+                    filter?: {} | undefined;
+                    find?: {} | undefined;
+                    findIndex?: {} | undefined;
+                    forEach?: {} | undefined;
+                    indexOf?: {} | undefined;
+                    join?: {} | undefined;
+                    lastIndexOf?: {} | undefined;
+                    readonly length?: number | undefined;
+                    map?: {} | undefined;
+                    reduce?: {} | undefined;
+                    reduceRight?: {} | undefined;
+                    reverse?: {} | undefined;
+                    set?: {} | undefined;
+                    slice?: {} | undefined;
+                    some?: {} | undefined;
+                    sort?: {} | undefined;
+                    subarray?: {} | undefined;
+                    toLocaleString?: {} | undefined;
+                    toString?: {} | undefined;
+                    valueOf?: {} | undefined;
+                    entries?: {} | undefined;
+                    keys?: {} | undefined;
+                    values?: {} | undefined;
+                    includes?: {} | undefined;
+                    at?: {} | undefined;
+                    [Symbol.iterator]?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+                } | undefined;
+                isSigner?: boolean | undefined;
+                isWritable?: boolean | undefined;
+            } | undefined)[] | undefined;
+            data?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                }) | undefined;
+                readonly byteLength?: number | undefined;
+                readonly byteOffset?: number | undefined;
+                copyWithin?: {} | undefined;
+                every?: {} | undefined;
+                fill?: {} | undefined;
+                filter?: {} | undefined;
+                find?: {} | undefined;
+                findIndex?: {} | undefined;
+                forEach?: {} | undefined;
+                indexOf?: {} | undefined;
+                join?: {} | undefined;
+                lastIndexOf?: {} | undefined;
+                readonly length?: number | undefined;
+                map?: {} | undefined;
+                reduce?: {} | undefined;
+                reduceRight?: {} | undefined;
+                reverse?: {} | undefined;
+                set?: {} | undefined;
+                slice?: {} | undefined;
+                some?: {} | undefined;
+                sort?: {} | undefined;
+                subarray?: {} | undefined;
+                toLocaleString?: {} | undefined;
+                toString?: {} | undefined;
+                valueOf?: {} | undefined;
+                entries?: {} | undefined;
+                keys?: {} | undefined;
+                values?: {} | undefined;
+                includes?: {} | undefined;
+                at?: {} | undefined;
+                [Symbol.iterator]?: {} | undefined;
+                readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+            } | undefined;
+            auth?: SVMAuth | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        registerSvmPqcKey: (value: {
+            sender?: string | undefined;
+            svmAddr?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                }) | undefined;
+                readonly byteLength?: number | undefined;
+                readonly byteOffset?: number | undefined;
+                copyWithin?: {} | undefined;
+                every?: {} | undefined;
+                fill?: {} | undefined;
+                filter?: {} | undefined;
+                find?: {} | undefined;
+                findIndex?: {} | undefined;
+                forEach?: {} | undefined;
+                indexOf?: {} | undefined;
+                join?: {} | undefined;
+                lastIndexOf?: {} | undefined;
+                readonly length?: number | undefined;
+                map?: {} | undefined;
+                reduce?: {} | undefined;
+                reduceRight?: {} | undefined;
+                reverse?: {} | undefined;
+                set?: {} | undefined;
+                slice?: {} | undefined;
+                some?: {} | undefined;
+                sort?: {} | undefined;
+                subarray?: {} | undefined;
+                toLocaleString?: {} | undefined;
+                toString?: {} | undefined;
+                valueOf?: {} | undefined;
+                entries?: {} | undefined;
+                keys?: {} | undefined;
+                values?: {} | undefined;
+                includes?: {} | undefined;
+                at?: {} | undefined;
+                [Symbol.iterator]?: {} | undefined;
+                readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+            } | undefined;
+            pqcPubKey?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                }) | undefined;
+                readonly byteLength?: number | undefined;
+                readonly byteOffset?: number | undefined;
+                copyWithin?: {} | undefined;
+                every?: {} | undefined;
+                fill?: {} | undefined;
+                filter?: {} | undefined;
+                find?: {} | undefined;
+                findIndex?: {} | undefined;
+                forEach?: {} | undefined;
+                indexOf?: {} | undefined;
+                join?: {} | undefined;
+                lastIndexOf?: {} | undefined;
+                readonly length?: number | undefined;
+                map?: {} | undefined;
+                reduce?: {} | undefined;
+                reduceRight?: {} | undefined;
+                reverse?: {} | undefined;
+                set?: {} | undefined;
+                slice?: {} | undefined;
+                some?: {} | undefined;
+                sort?: {} | undefined;
+                subarray?: {} | undefined;
+                toLocaleString?: {} | undefined;
+                toString?: {} | undefined;
+                valueOf?: {} | undefined;
+                entries?: {} | undefined;
+                keys?: {} | undefined;
+                values?: {} | undefined;
+                includes?: {} | undefined;
+                at?: {} | undefined;
+                [Symbol.iterator]?: {} | undefined;
+                readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+            } | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+    };
+    readonly lightnode: {
+        registerLightNode: (value: {
+            operator?: string | undefined;
+            nodeType?: string | undefined;
+            version?: string | undefined;
+            capabilities?: (string | undefined)[] | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        heartbeat: (value: {
+            operator?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        deregisterLightNode: (value: {
+            operator?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        claimLightNodeRewards: (value: {
+            operator?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+    };
+    readonly license: {
+        grantLicense: (value: {
+            authority?: string | undefined;
+            grantee?: string | undefined;
+            featureId?: string | undefined;
+            expiresAt?: string | undefined;
+            metadata?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        revokeLicense: (value: {
+            authority?: string | undefined;
+            grantee?: string | undefined;
+            featureId?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        suspendLicense: (value: {
+            authority?: string | undefined;
+            grantee?: string | undefined;
+            featureId?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        resumeLicense: (value: {
+            authority?: string | undefined;
+            grantee?: string | undefined;
+            featureId?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+    };
+    readonly abstractaccount: {
+        createAbstractAccount: (value: {
+            owner?: string | undefined;
+            accountType?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        updateSpendingRules: (value: {
+            owner?: string | undefined;
+            accountAddress?: string | undefined;
+            rules?: ({
+                id?: string | undefined;
+                dailyLimit?: string | undefined;
+                perTxLimit?: string | undefined;
+                allowedDenoms?: (string | undefined)[] | undefined;
+                enabled?: boolean | undefined;
+            } | undefined)[] | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        registerAuthenticator: (value: {
+            owner?: string | undefined;
+            accountAddress?: string | undefined;
+            scheme?: string | undefined;
+            pubkey?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                }) | undefined;
+                readonly byteLength?: number | undefined;
+                readonly byteOffset?: number | undefined;
+                copyWithin?: {} | undefined;
+                every?: {} | undefined;
+                fill?: {} | undefined;
+                filter?: {} | undefined;
+                find?: {} | undefined;
+                findIndex?: {} | undefined;
+                forEach?: {} | undefined;
+                indexOf?: {} | undefined;
+                join?: {} | undefined;
+                lastIndexOf?: {} | undefined;
+                readonly length?: number | undefined;
+                map?: {} | undefined;
+                reduce?: {} | undefined;
+                reduceRight?: {} | undefined;
+                reverse?: {} | undefined;
+                set?: {} | undefined;
+                slice?: {} | undefined;
+                some?: {} | undefined;
+                sort?: {} | undefined;
+                subarray?: {} | undefined;
+                toLocaleString?: {} | undefined;
+                toString?: {} | undefined;
+                valueOf?: {} | undefined;
+                entries?: {} | undefined;
+                keys?: {} | undefined;
+                values?: {} | undefined;
+                includes?: {} | undefined;
+                at?: {} | undefined;
+                [Symbol.iterator]?: {} | undefined;
+                readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+            } | undefined;
+            permissions?: (string | undefined)[] | undefined;
+            expiryUnix?: string | undefined;
+            label?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        revokeAuthenticator: (value: {
+            owner?: string | undefined;
+            accountAddress?: string | undefined;
+            scheme?: string | undefined;
+            pubkey?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                }) | undefined;
+                readonly byteLength?: number | undefined;
+                readonly byteOffset?: number | undefined;
+                copyWithin?: {} | undefined;
+                every?: {} | undefined;
+                fill?: {} | undefined;
+                filter?: {} | undefined;
+                find?: {} | undefined;
+                findIndex?: {} | undefined;
+                forEach?: {} | undefined;
+                indexOf?: {} | undefined;
+                join?: {} | undefined;
+                lastIndexOf?: {} | undefined;
+                readonly length?: number | undefined;
+                map?: {} | undefined;
+                reduce?: {} | undefined;
+                reduceRight?: {} | undefined;
+                reverse?: {} | undefined;
+                set?: {} | undefined;
+                slice?: {} | undefined;
+                some?: {} | undefined;
+                sort?: {} | undefined;
+                subarray?: {} | undefined;
+                toLocaleString?: {} | undefined;
+                toString?: {} | undefined;
+                valueOf?: {} | undefined;
+                entries?: {} | undefined;
+                keys?: {} | undefined;
+                values?: {} | undefined;
+                includes?: {} | undefined;
+                at?: {} | undefined;
+                [Symbol.iterator]?: {} | undefined;
+                readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+            } | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        executeEvm: (value: {
+            relayer?: string | undefined;
+            account?: string | undefined;
+            scheme?: string | undefined;
+            pubkey?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                }) | undefined;
+                readonly byteLength?: number | undefined;
+                readonly byteOffset?: number | undefined;
+                copyWithin?: {} | undefined;
+                every?: {} | undefined;
+                fill?: {} | undefined;
+                filter?: {} | undefined;
+                find?: {} | undefined;
+                findIndex?: {} | undefined;
+                forEach?: {} | undefined;
+                indexOf?: {} | undefined;
+                join?: {} | undefined;
+                lastIndexOf?: {} | undefined;
+                readonly length?: number | undefined;
+                map?: {} | undefined;
+                reduce?: {} | undefined;
+                reduceRight?: {} | undefined;
+                reverse?: {} | undefined;
+                set?: {} | undefined;
+                slice?: {} | undefined;
+                some?: {} | undefined;
+                sort?: {} | undefined;
+                subarray?: {} | undefined;
+                toLocaleString?: {} | undefined;
+                toString?: {} | undefined;
+                valueOf?: {} | undefined;
+                entries?: {} | undefined;
+                keys?: {} | undefined;
+                values?: {} | undefined;
+                includes?: {} | undefined;
+                at?: {} | undefined;
+                [Symbol.iterator]?: {} | undefined;
+                readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+            } | undefined;
+            signature?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                }) | undefined;
+                readonly byteLength?: number | undefined;
+                readonly byteOffset?: number | undefined;
+                copyWithin?: {} | undefined;
+                every?: {} | undefined;
+                fill?: {} | undefined;
+                filter?: {} | undefined;
+                find?: {} | undefined;
+                findIndex?: {} | undefined;
+                forEach?: {} | undefined;
+                indexOf?: {} | undefined;
+                join?: {} | undefined;
+                lastIndexOf?: {} | undefined;
+                readonly length?: number | undefined;
+                map?: {} | undefined;
+                reduce?: {} | undefined;
+                reduceRight?: {} | undefined;
+                reverse?: {} | undefined;
+                set?: {} | undefined;
+                slice?: {} | undefined;
+                some?: {} | undefined;
+                sort?: {} | undefined;
+                subarray?: {} | undefined;
+                toLocaleString?: {} | undefined;
+                toString?: {} | undefined;
+                valueOf?: {} | undefined;
+                entries?: {} | undefined;
+                keys?: {} | undefined;
+                values?: {} | undefined;
+                includes?: {} | undefined;
+                at?: {} | undefined;
+                [Symbol.iterator]?: {} | undefined;
+                readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+            } | undefined;
+            to?: string | undefined;
+            value?: string | undefined;
+            data?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                }) | undefined;
+                readonly byteLength?: number | undefined;
+                readonly byteOffset?: number | undefined;
+                copyWithin?: {} | undefined;
+                every?: {} | undefined;
+                fill?: {} | undefined;
+                filter?: {} | undefined;
+                find?: {} | undefined;
+                findIndex?: {} | undefined;
+                forEach?: {} | undefined;
+                indexOf?: {} | undefined;
+                join?: {} | undefined;
+                lastIndexOf?: {} | undefined;
+                readonly length?: number | undefined;
+                map?: {} | undefined;
+                reduce?: {} | undefined;
+                reduceRight?: {} | undefined;
+                reverse?: {} | undefined;
+                set?: {} | undefined;
+                slice?: {} | undefined;
+                some?: {} | undefined;
+                sort?: {} | undefined;
+                subarray?: {} | undefined;
+                toLocaleString?: {} | undefined;
+                toString?: {} | undefined;
+                valueOf?: {} | undefined;
+                entries?: {} | undefined;
+                keys?: {} | undefined;
+                values?: {} | undefined;
+                includes?: {} | undefined;
+                at?: {} | undefined;
+                [Symbol.iterator]?: {} | undefined;
+                readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+            } | undefined;
+            gasLimit?: string | undefined;
+            nonce?: string | undefined;
+        }) => _cosmjs_proto_signing.EncodeObject;
+        executeCosmos: (value: {
+            relayer?: string | undefined;
+            account?: string | undefined;
+            scheme?: string | undefined;
+            pubkey?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
+                }) | undefined;
+                readonly byteLength?: number | undefined;
+                readonly byteOffset?: number | undefined;
+                copyWithin?: {} | undefined;
+                every?: {} | undefined;
+                fill?: {} | undefined;
+                filter?: {} | undefined;
+                find?: {} | undefined;
+                findIndex?: {} | undefined;
+                forEach?: {} | undefined;
+                indexOf?: {} | undefined;
+                join?: {} | undefined;
+                lastIndexOf?: {} | undefined;
+                readonly length?: number | undefined;
+                map?: {} | undefined;
+                reduce?: {} | undefined;
+                reduceRight?: {} | undefined;
+                reverse?: {} | undefined;
+                set?: {} | undefined;
+                slice?: {} | undefined;
+                some?: {} | undefined;
+                sort?: {} | undefined;
+                subarray?: {} | undefined;
+                toLocaleString?: {} | undefined;
+                toString?: {} | undefined;
+                valueOf?: {} | undefined;
+                entries?: {} | undefined;
+                keys?: {} | undefined;
+                values?: {} | undefined;
+                includes?: {} | undefined;
+                at?: {} | undefined;
+                [Symbol.iterator]?: {} | undefined;
+                readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
+            } | undefined;
+            signature?: {
+                [x: number]: number | undefined;
+                readonly BYTES_PER_ELEMENT?: number | undefined;
+                readonly buffer?: ({
+                    readonly byteLength?: number | undefined;
+                    slice?: {} | undefined;
+                    readonly [Symbol.toStringTag]?: "ArrayBuffer" | undefined;
+                } | {
                     readonly byteLength?: number | undefined;
                     slice?: {} | undefined;
                     readonly [Symbol.toStringTag]?: "SharedArrayBuffer" | undefined;
@@ -6576,6 +7319,12 @@ declare const msg: {
                 [Symbol.iterator]?: {} | undefined;
                 readonly [Symbol.toStringTag]?: "Uint8Array" | undefined;
             } | undefined;
+            to?: string | undefined;
+            amount?: ({
+                denom?: string | undefined;
+                amount?: string | undefined;
+            } | undefined)[] | undefined;
+            nonce?: string | undefined;
         }) => _cosmjs_proto_signing.EncodeObject;
     };
     readonly crossvm: {
@@ -6666,7 +7415,7 @@ declare const protobufPackage$d = "qorechain.pqc.v1";
  * PQCHybridSignature is a transaction extension option carried in
  * TxBody.extension_options. It pairs a post-quantum (Dilithium-5) signature with
  * the account's classical secp256k1 signature so every transaction can be
- * quantum-safe while remaining compatible with the standard Native auth
+ * quantum-safe while remaining compatible with the standard Cosmos SDK auth
  * path. It is registered as a cosmos.tx.v1beta1.TxExtensionOptionI.
  */
 interface PQCHybridSignature {
@@ -6739,6 +7488,30 @@ interface QueryAccountsResponse {
     accounts: AccountView[];
 }
 declare const QueryAccountsResponse: MessageFns$c<QueryAccountsResponse>;
+interface QueryPermissionSchemaRequest {
+}
+declare const QueryPermissionSchemaRequest: MessageFns$c<QueryPermissionSchemaRequest>;
+interface QueryPermissionSchemaResponse {
+    /**
+     * schema_version bumps whenever the taxonomy or the mapping changes; clients
+     * compare it to their embedded copy to detect drift.
+     */
+    schemaVersion: string;
+    /** permissions is every valid permission string (e.g. send, evm, svm, all). */
+    permissions: string[];
+    /** msg_permissions maps a message typeURL to the permission it requires. */
+    msgPermissions: {
+        [key: string]: string;
+    };
+    /** key_management_msgs are typeURLs that are NEVER delegable to a linked key. */
+    keyManagementMsgs: string[];
+}
+declare const QueryPermissionSchemaResponse: MessageFns$c<QueryPermissionSchemaResponse>;
+interface QueryPermissionSchemaResponse_MsgPermissionsEntry {
+    key: string;
+    value: string;
+}
+declare const QueryPermissionSchemaResponse_MsgPermissionsEntry: MessageFns$c<QueryPermissionSchemaResponse_MsgPermissionsEntry>;
 /** Query defines the gRPC query service for the abstractaccount module. */
 type QueryDefinition$c = typeof QueryDefinition$c;
 declare const QueryDefinition$c: {
@@ -6752,7 +7525,11 @@ declare const QueryDefinition$c: {
             readonly requestStream: false;
             readonly responseType: typeof QueryConfigResponse$2;
             readonly responseStream: false;
-            readonly options: {};
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Uint8Array<ArrayBufferLike>];
+                };
+            };
         };
         /** Account returns a single abstract account by address. */
         readonly account: {
@@ -6761,7 +7538,11 @@ declare const QueryDefinition$c: {
             readonly requestStream: false;
             readonly responseType: typeof QueryAccountResponse$2;
             readonly responseStream: false;
-            readonly options: {};
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Uint8Array<ArrayBufferLike>];
+                };
+            };
         };
         /** Accounts lists all abstract accounts. */
         readonly accounts: {
@@ -6770,7 +7551,28 @@ declare const QueryDefinition$c: {
             readonly requestStream: false;
             readonly responseType: typeof QueryAccountsResponse;
             readonly responseStream: false;
-            readonly options: {};
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Uint8Array<ArrayBufferLike>];
+                };
+            };
+        };
+        /**
+         * PermissionSchema returns the canonical authenticator permission taxonomy so
+         * clients (QoreX/dashboard/relayer) validate scopes without hardcoding strings
+         * and detect drift via schema_version (v3.1.85).
+         */
+        readonly permissionSchema: {
+            readonly name: "PermissionSchema";
+            readonly requestType: typeof QueryPermissionSchemaRequest;
+            readonly requestStream: false;
+            readonly responseType: typeof QueryPermissionSchemaResponse;
+            readonly responseStream: false;
+            readonly options: {
+                readonly _unknownFields: {
+                    readonly 578365826: readonly [Uint8Array<ArrayBufferLike>];
+                };
+            };
         };
     };
 };
@@ -6791,8 +7593,11 @@ declare const query$c_AccountView: typeof AccountView;
 declare const query$c_ConfigView: typeof ConfigView;
 declare const query$c_QueryAccountsRequest: typeof QueryAccountsRequest;
 declare const query$c_QueryAccountsResponse: typeof QueryAccountsResponse;
+declare const query$c_QueryPermissionSchemaRequest: typeof QueryPermissionSchemaRequest;
+declare const query$c_QueryPermissionSchemaResponse: typeof QueryPermissionSchemaResponse;
+declare const query$c_QueryPermissionSchemaResponse_MsgPermissionsEntry: typeof QueryPermissionSchemaResponse_MsgPermissionsEntry;
 declare namespace query$c {
-  export { query$c_AccountView as AccountView, query$c_ConfigView as ConfigView, type DeepPartial$c as DeepPartial, type MessageFns$c as MessageFns, QueryAccountRequest$2 as QueryAccountRequest, QueryAccountResponse$2 as QueryAccountResponse, query$c_QueryAccountsRequest as QueryAccountsRequest, query$c_QueryAccountsResponse as QueryAccountsResponse, QueryConfigRequest$2 as QueryConfigRequest, QueryConfigResponse$2 as QueryConfigResponse, QueryDefinition$c as QueryDefinition, protobufPackage$c as protobufPackage };
+  export { query$c_AccountView as AccountView, query$c_ConfigView as ConfigView, type DeepPartial$c as DeepPartial, type MessageFns$c as MessageFns, QueryAccountRequest$2 as QueryAccountRequest, QueryAccountResponse$2 as QueryAccountResponse, query$c_QueryAccountsRequest as QueryAccountsRequest, query$c_QueryAccountsResponse as QueryAccountsResponse, QueryConfigRequest$2 as QueryConfigRequest, QueryConfigResponse$2 as QueryConfigResponse, QueryDefinition$c as QueryDefinition, query$c_QueryPermissionSchemaRequest as QueryPermissionSchemaRequest, query$c_QueryPermissionSchemaResponse as QueryPermissionSchemaResponse, query$c_QueryPermissionSchemaResponse_MsgPermissionsEntry as QueryPermissionSchemaResponse_MsgPermissionsEntry, protobufPackage$c as protobufPackage };
 }
 
 declare const protobufPackage$b = "qorechain.amm.v1";
@@ -8451,6 +9256,246 @@ declare namespace index {
   export { tx$2 as abstractaccount, query$c as abstractaccountQuery, tx$8 as amm, query$b as ammQuery, tx$9 as bridge, query$a as bridgeQuery, tx$1 as crossvm, query$9 as crossvmQuery, tx$3 as license, query$8 as licenseQuery, tx$4 as lightnode, query$7 as lightnodeQuery, tx$6 as multilayer, query$6 as multilayerQuery, tx$5 as pqc, hybrid as pqcHybrid, query$5 as pqcQuery, query$4 as qcaQuery, tx$7 as rdk, query$3 as rdkQuery, query$2 as reputationQuery, tx as rlconsensus, query$1 as rlconsensusQuery, tx$a as svm, query as svmQuery };
 }
 
+/**
+ * Wallet DX for the v3.1.85 authenticator lanes.
+ *
+ * These builders mirror the reference wallet-adapter: they take a linked
+ * external wallet (a Phantom ed25519 key, or a MetaMask / EIP-1193 secp256k1
+ * key), rebuild the domain-separated authenticator sign-bytes (see
+ * {@link ../tx/authenticator}), have the wallet sign the 32-byte digest, and
+ * return a relayer-ready `{ typeUrl, value }` message for the EVM or Native
+ * lane. A relayer then submits and pays fees; the authenticator's signature IS
+ * the authorization — the external key never produces an ML-DSA co-signature.
+ *
+ * Signature schemes:
+ *   - `ed25519` (Phantom): the chain verifies `ed25519.Verify(pubkey, digest,
+ *     sig)`, so a Phantom `signMessage(digest)` matches directly.
+ *   - `secp256k1` (MetaMask): the key is linked by its 20-byte ETH ADDRESS; the
+ *     wallet produces a 65-byte `personal_sign` (EIP-191) signature over the
+ *     same digest.
+ *
+ * Also included: the low-level message composers, and mnemonic-based PQC key
+ * rotation (legacy→canonical migration) with both keys dual-signing the
+ * rotation bytes.
+ */
+
+/** Fields for {@link executeEvmMsg}. */
+interface ExecuteEvmMsgInput {
+    relayer: string;
+    account: string;
+    scheme: "ed25519" | "secp256k1";
+    pubkey: Uint8Array;
+    signature: Uint8Array;
+    to?: string;
+    value?: string;
+    data?: Uint8Array;
+    gasLimit: number | bigint;
+    nonce: number | bigint;
+}
+/**
+ * Build a `MsgExecuteEVM` (`{ typeUrl, value }`) — the relayer broadcasts this
+ * and is the fee payer. `to` is a 0x-hex address, `value` a decimal wei string.
+ */
+declare function executeEvmMsg(input: ExecuteEvmMsgInput): EncodeObject;
+/** Fields for {@link executeCosmosMsg}. */
+interface ExecuteCosmosMsgInput {
+    relayer: string;
+    account: string;
+    scheme: "ed25519" | "secp256k1";
+    pubkey: Uint8Array;
+    signature: Uint8Array;
+    to: string;
+    /** Single-coin amount string, e.g. `100uqor`. */
+    amount: string;
+    nonce: number | bigint;
+}
+/**
+ * Build a `MsgExecuteCosmos` (`{ typeUrl, value }`) — the relayer broadcasts
+ * this. `amount` is a single-coin string like `100uqor`.
+ */
+declare function executeCosmosMsg(input: ExecuteCosmosMsgInput): EncodeObject;
+/** Fields for {@link revokeAuthenticatorMsg}. */
+interface RevokeAuthenticatorMsgInput {
+    owner: string;
+    account?: string;
+    scheme: "ed25519" | "secp256k1";
+    pubkey: Uint8Array;
+}
+/**
+ * Build a `MsgRevokeAuthenticator` (`{ typeUrl, value }`) — owner-signed;
+ * instantly disables a linked key. `account` defaults to `owner`.
+ */
+declare function revokeAuthenticatorMsg(input: RevokeAuthenticatorMsgInput): EncodeObject;
+/** Fields for {@link registerEthAuthenticatorMsg}. */
+interface RegisterEthAuthenticatorMsgInput {
+    owner: string;
+    account?: string;
+    /** 0x-hex 20-byte ETH address that becomes the authenticator pubkey. */
+    ethAddress: string;
+    permissions?: string[];
+    expiryUnix: number | bigint;
+    label?: string;
+}
+/**
+ * Build a `MsgRegisterAuthenticator` (`{ typeUrl, value }`) that links a
+ * MetaMask / EVM key (by its 0x address, scheme `secp256k1`) to the owner's
+ * account. Owner-signed. `account` defaults to `owner`.
+ */
+declare function registerEthAuthenticatorMsg(input: RegisterEthAuthenticatorMsgInput): EncodeObject;
+/** Fields for {@link rotatePqcKeyMsg}. */
+interface RotatePqcKeyMsgInput {
+    sender: string;
+    oldPublicKey: Uint8Array;
+    newPublicKey: Uint8Array;
+    oldSignature: Uint8Array;
+    newSignature: Uint8Array;
+}
+/**
+ * Build a `MsgRotatePQCKey` (`{ typeUrl, value }`) — sender-signed (hybrid, with
+ * the OLD key); dual-signed payload.
+ */
+declare function rotatePqcKeyMsg(input: RotatePqcKeyMsgInput): EncodeObject;
+/**
+ * The minimal Phantom-style ed25519 wallet shape the builders need: a public
+ * key (as `.toBytes()` or raw bytes) and `signMessage` returning `{ signature }`
+ * or raw bytes.
+ */
+interface AuthenticatorWallet {
+    publicKey: {
+        toBytes(): Uint8Array;
+    } | Uint8Array;
+    signMessage(message: Uint8Array): Promise<{
+        signature: Uint8Array;
+    } | Uint8Array>;
+}
+/** Fields for {@link buildPhantomExecuteEvm}. */
+interface BuildPhantomExecuteEvmOptions {
+    wallet: AuthenticatorWallet;
+    relayer: string;
+    chainId: string;
+    account: string;
+    to?: string;
+    value?: string;
+    data?: Uint8Array;
+    gasLimit?: number | bigint;
+    /** The account's CURRENT EVM nonce (relayer ≠ owner → do NOT +1). */
+    nonce: number | bigint;
+}
+/**
+ * Sign the EVM auth digest with a Phantom-style ed25519 wallet and return a
+ * `MsgExecuteEVM` ready for the relayer to broadcast.
+ */
+declare function buildPhantomExecuteEvm(opts: BuildPhantomExecuteEvmOptions): Promise<EncodeObject>;
+/** Fields for {@link buildPhantomExecuteCosmos}. */
+interface BuildPhantomExecuteCosmosOptions {
+    wallet: AuthenticatorWallet;
+    relayer: string;
+    chainId: string;
+    account: string;
+    to: string;
+    /** Single-coin amount string, e.g. `100uqor`. */
+    amount: string;
+    /** The per-authenticator sequence for `(account, pubkey)`. */
+    nonce: number | bigint;
+}
+/**
+ * Sign the Native (Cosmos) auth digest with a Phantom-style ed25519 wallet and
+ * return a `MsgExecuteCosmos` ready for the relayer to broadcast.
+ */
+declare function buildPhantomExecuteCosmos(opts: BuildPhantomExecuteCosmosOptions): Promise<EncodeObject>;
+/** The minimal EIP-1193 provider shape the MetaMask builders need. */
+interface Eip1193Provider {
+    request(args: {
+        method: string;
+        params: unknown[];
+    }): Promise<string>;
+}
+/** Fields for {@link buildMetaMaskExecuteEvm}. */
+interface BuildMetaMaskExecuteEvmOptions {
+    provider: Eip1193Provider;
+    /** 0x-hex 20-byte ETH address (the authenticator pubkey). */
+    address: string;
+    relayer: string;
+    chainId: string;
+    account: string;
+    to?: string;
+    value?: string;
+    data?: Uint8Array;
+    gasLimit?: number | bigint;
+    /** The account's CURRENT EVM nonce (relayer ≠ owner → do NOT +1). */
+    nonce: number | bigint;
+}
+/**
+ * Sign the EVM auth digest via MetaMask (EIP-191 `personal_sign`) and return a
+ * `MsgExecuteEVM` ready for the relayer. The key is linked by its 20-byte ETH
+ * address (scheme `secp256k1`).
+ */
+declare function buildMetaMaskExecuteEvm(opts: BuildMetaMaskExecuteEvmOptions): Promise<EncodeObject>;
+/** Fields for {@link buildMetaMaskExecuteCosmos}. */
+interface BuildMetaMaskExecuteCosmosOptions {
+    provider: Eip1193Provider;
+    /** 0x-hex 20-byte ETH address (the authenticator pubkey). */
+    address: string;
+    relayer: string;
+    chainId: string;
+    account: string;
+    to: string;
+    /** Single-coin amount string, e.g. `100uqor`. */
+    amount: string;
+    /** The per-authenticator sequence for `(account, address)`. */
+    nonce: number | bigint;
+}
+/**
+ * Sign the Native (Cosmos) auth digest via MetaMask (EIP-191 `personal_sign`)
+ * and return a `MsgExecuteCosmos` ready for the relayer.
+ */
+declare function buildMetaMaskExecuteCosmos(opts: BuildMetaMaskExecuteCosmosOptions): Promise<EncodeObject>;
+/**
+ * The CANONICAL address-bound PQC derivation (SDK / wallet-adapter):
+ * `shake256("qorechain:pqc:v1|" + account + "|" + mnemonic, 32)` → ML-DSA-87
+ * keygen. This matches {@link ../accounts/unified.deriveUnifiedAccount}.
+ */
+declare const CANONICAL_DERIVATION = "adapter";
+/**
+ * The LEGACY chain-bridge / faucet-api PQC derivation:
+ * `shake256(utf8(mnemonic), 32)` → ML-DSA-87 keygen. Not address-bound.
+ */
+declare const LEGACY_DERIVATION = "bridge";
+/** Derive the LEGACY (chain-bridge) ML-DSA-87 keypair for a mnemonic. */
+declare function derivePqcLegacy(mnemonic: string): PqcKeypair;
+/** Options for {@link rotatePqcKeyMsgFromMnemonic}. */
+interface RotatePqcKeyMsgFromMnemonicOptions {
+    account: string;
+    mnemonic: string;
+    chainId: string;
+    /** PQC algorithm id (ML-DSA-87 = 1). */
+    algorithmId?: number;
+    /** Source derivation (defaults to the legacy chain-bridge derivation). */
+    oldDerivation?: string;
+    /** Target derivation (defaults to the canonical address-bound derivation). */
+    newDerivation?: string;
+}
+/** Result of {@link rotatePqcKeyMsgFromMnemonic}. */
+interface RotatePqcKeyMsgFromMnemonicResult {
+    /** The `{ typeUrl, value }` `MsgRotatePQCKey` to broadcast. */
+    msg: EncodeObject;
+    /** The OLD keypair (still the registered key until the rotation lands). */
+    oldKeypair: PqcKeypair;
+    /** The NEW keypair (becomes the registered key after rotation). */
+    newKeypair: PqcKeypair;
+}
+/**
+ * Build a `MsgRotatePQCKey` that rotates an account's ML-DSA-87 key (SAME
+ * algorithm) from one derivation to another — canonically migrating a LEGACY
+ * chain-bridge key (`shake256(mnemonic)`) to the canonical address-bound key
+ * (`shake256("qorechain:pqc:v1|addr|mnemonic")`). Both keys dual-sign the
+ * domain-separated rotation bytes.
+ *
+ * The returned message must be broadcast BY the account, cosigned (hybrid) with
+ * the OLD key (it is still the registered key until the rotation lands).
+ */
+declare function rotatePqcKeyMsgFromMnemonic(opts: RotatePqcKeyMsgFromMnemonicOptions): RotatePqcKeyMsgFromMnemonicResult;
+
 /**
  * Native browser-wallet integration for QoreChain (Keplr and Leap).
  *
@@ -8654,6 +9699,13 @@ interface AbstractAccountQueryClient {
     account(req: QueryAccountRequest$2): Promise<QueryAccountResponse$2>;
     /** All abstract accounts. */
     accounts(req?: QueryAccountsRequest): Promise<QueryAccountsResponse>;
+    /**
+     * The canonical authenticator permission taxonomy (v3.1.85): the valid
+     * permission strings, the message-typeURL→permission mapping, the
+     * never-delegable key-management typeURLs, and a `schema_version` clients
+     * compare against their embedded copy to detect drift.
+     */
+    permissionSchema(req?: QueryPermissionSchemaRequest): Promise<QueryPermissionSchemaResponse>;
 }
 /** Multilayer (sidechain / paychain) module query client. */
 interface MultilayerQueryClient {
@@ -9462,6 +10514,6 @@ declare function migrateToHybrid(tx: TxClient, opts: MigrateToHybridOptions): Pr
  * callers who want to compose them directly. Internal helpers are not exported.
  */
 /** SDK version. */
-declare const VERSION = "0.6.0";
+declare const VERSION = "0.7.0";
 
-export { type AbstractAccountQueryClient, type Account, type AccountSequence, AlgorithmDilithium5, type AlgorithmID, AlgorithmMLKEM1024, AlgorithmUnspecified, type AllBalancesResponse, type AmmQueryClient, type AnchorStateOptions, type AttachHybridOptions, type AutoFeeOptions, type BalanceResponse, type BankSendOptions, type Bech32Config, type Bech32Prefixes, type BridgeQueryClient, type BroadcastMode, type BroadcastResult, type BuildHybridTxOptions, type BuiltHybridTx, type CallOptions, type ChallengeBatchOptions, type ClientFees, type CoinInfo, type ConnectPhantomUnifiedOptions, type ConnectTxOptions, type ContractMsg, type CosmWasmPayload, type CosmWasmReadClient, type CosmWasmSigningClient, type CosmosWalletConnection, type CosmosWalletName, type CreateClientOptions, type CreateCrossVMClientOptions, type CreateMultilayerClientOptions, type CreateRollupClientOptions, type CreateRollupOptions, type CrossVMAtomicResult, type CrossVMCallBase, type CrossVMCallOptions, type CrossVMCallResult, type CrossVMClient, type CrossVMWriteOptions, type CrossVmMessage, type CrossVmMessageResponse, type CrossVmParamsResponse, type CrossVmQueryClient, DEFAULT_GAS_MULTIPLIER, DEFAULT_GAS_PRICE, type DecodedTxError, type DenomOptions, type DerivationOptions, ETHSECP256K1_PUBKEY_TYPE, type Ed25519Account, type EnsurePqcRegisteredOptions, type EnsurePqcRegisteredResult, type EstimateFeeOptions, type EthBroadcaster, EthNativeSigner, type EthNativeSignerOptions, type EthSignParams, type EthSigningKey, type EthTxParams, type EventFilters, type EventStream, type EvmPayload, type ExecuteWithdrawalOptions, type ExplorerConfig, type FaucetConfig, type FeeInput, type FeeUrgency, type FetchLike, GasPrice, type GetBlockResponse, type GetCosmosWalletOptions, type GetJsonOptions, type GetTxFn, type GetTxResponse, HYBRID_SIG_TYPE_URL, type Handler, type HashInput, type HttpOptions, type HybridBroadcaster, type HybridPlacement, type HybridSendPath, HybridSigner, type IncludedTx, type InjectedCosmosWallet, type InstantiateOpts, JsonRpcClient, type JsonRpcClientOptions, JsonRpcError, type JsonRpcErrorObject, type JsonRpcResponse, type KeplrChainInfo, type KeplrCurrency, type KeplrFeeCurrency, type KeyType, type LicenseQueryClient, type LightNodeQueryClient, ML_DSA_87_PUBLIC_KEY_LENGTH, ML_DSA_87_SECRET_KEY_LENGTH, ML_DSA_87_SEED_LENGTH, ML_DSA_87_SIGNATURE_LENGTH, MSG_SEND_TYPE_URL, type MigratePqcKeyOptions, type MigrateToHybridOptions, type MultilayerClient, type MultilayerQueryClient, type MultilayerWriteOptions, NETWORKS, type NetworkConfig, type NetworkEndpoints, type NetworkName, type NewBlockEventLike, PHANTOM_DERIVATION_DOMAIN, type PQCHybridSignature$1 as PQCHybridSignature, PQC_KEY_STATUS_PRECOMPILE_ADDRESS, type PageResponse, type PaginatedOptions, type Pagination, type ParsedAccountAuth, type PayloadInput, type PendingCrossVmMessagesResponse, type PhantomProvider, type PqcKeypair, type PqcQueryClient, type PqcSignaturePart, PqcSigner, type PqcStatus, type PqcStatusSource, type QcaQueryClient, QorClient, type QoreChainClient, type QoreChainQueryClients, QoreHttpError, QoreTxError, type QueryValue, type RawPayload, type RdkQueryClient, type RegisterPaychainOptions, type RegisterSidechainOptions, type ReputationQueryClient, type RequestFaucetOptions, type ResolveChallengeOptions, RestClient, type RestClientOptions, type RetryOptions, type RlConsensusQueryClient, type RollupClient, type RollupLifecycleOptions, type RollupWriteOptions, type RouteTransactionOptions, STATIC_FALLBACK, type SearchTxsOptions, type SearchTxsResponse, type Secp256k1Account, type SignAndBroadcastHybridOptions, type SignAndBroadcastOptions, type SignOutput, type SignatureMode, type SignedEthTx, type Signer, type SigningClientLike, type SimulateOptions, type SubmitBatchOptions, type SubscriptionClient, type SvmPayload, type SvmQueryClient, type SyncBroadcaster, TxClient, type TxClientOptions, type TxConnectOptions, type TxErrorInput, type TxEventLike, type FeeInput$1 as TxFeeInput, type TxOrderBy, type TxQueryFilters, type TxResultLike, type UnifiedAccount, type UnifiedAddresses, type Unsubscribe, VERSION, type VMType, VM_TYPES, type WaitForTxOptions, abstractaccount, accountAuthInfo, addressesFrom20, algorithmName, amm, attachHybridExtension, authz, bank, bech32ToHex, bridge, broadcastAndWait, buildAminoTypes, buildEventsQuery, buildHybridSignatureExtension, buildHybridTx, buildRegisterPqcKeyMsg, buildTxQuery, buildUrl, bytesToBech32, calculateFee, clearAdmin, connectCosmWasmSigner, connectPhantomUnified, connectQueryClients, createClient, createCosmWasmClient, createCrossVMClient, createMultilayerClient, createQueryClients, createRollupClient, createSubscriptionClient, crossvm, decodeTxError, deriveEvmAccount, deriveNativeAccount, deriveSvmAccount, deriveUnifiedAccount, directSignerFromPrivateKey, distribution, encodeHybridExtension, ensurePqcRegistered, estimateFee, evmToQor, execute, explorerAddressUrl, explorerBlockUrl, explorerTxUrl, feegrant, formatUnits, fromBase, generateMnemonic, generatePqcKeypair, getBlock, getCodeDetails, getCodes, getContractInfo, getContracts, getCosmosWallet, getCrossVmMessage, getCrossVmParams, getJson, getLatestBlock, getNetwork, getPendingCrossVmMessages, getPqcStatus, getTx, gov, hexToBech32, ibc, instantiate, instantiate2, isChecksumAddress, isPqcRegistered, isSignatureAlgorithm, isTxFailure, isValidBech32, isValidEvmAddress, isValidSvmAddress, joinUrl, keccak256, keccak256Hex, license, lightnode, listNetworks, migrate, migratePqcKey, migrateToHybrid, msg, multilayer, parseEthPubkeyAny, parseUnits, postJsonRpc, pqc as pqcMsg, pqcSign, pqcVerify, qorToEvm, qoreAddresses, qorechainRegistry, qorechainRegistryTypes, index as qorechainTypes, queryContractSmart, rdk, requestFaucet, ripemd160, ripemd160Hex, rlconsensus, searchTxs, sha256, sha256Hex, signAndBroadcastHybrid, signClassicalEth, signHybridEth, staking, subscribeNewBlocks, subscribeTx, suggestChainInfo, svm, toBase, toChecksumAddress, toHex, txErrorFrom, unifiedAccountFromPhantomSignature, unifiedAccountFromSeed, updateAdmin, uploadCode, validateMnemonic, waitForTx, withRetry };
+export { type AbstractAccountConfigView, type AbstractAccountQueryClient, type AbstractAccountView, type Account, type AccountSequence, AlgorithmDilithium5, type AlgorithmID, AlgorithmMLKEM1024, AlgorithmUnspecified, type AllBalancesResponse, type AmmQueryClient, type AnchorStateOptions, type AttachHybridOptions, type AuthenticatorWallet, type AutoFeeOptions, type BalanceResponse, type BankSendOptions, type Bech32Config, type Bech32Prefixes, type BridgeQueryClient, type BroadcastMode, type BroadcastResult, type BuildHybridTxOptions, type BuildMetaMaskExecuteCosmosOptions, type BuildMetaMaskExecuteEvmOptions, type BuildPhantomExecuteCosmosOptions, type BuildPhantomExecuteEvmOptions, type BuiltHybridTx, CANONICAL_DERIVATION, type CallOptions, type ChallengeBatchOptions, type ClientFees, type CoinInfo, type ConnectPhantomUnifiedOptions, type ConnectTxOptions, type ContractMsg, type CosmWasmPayload, type CosmWasmReadClient, type CosmWasmSigningClient, type CosmosAuthSignBytesInput, type CosmosWalletConnection, type CosmosWalletName, type CreateClientOptions, type CreateCrossVMClientOptions, type CreateMultilayerClientOptions, type CreateRollupClientOptions, type CreateRollupOptions, type CrossVMAtomicResult, type CrossVMCallBase, type CrossVMCallOptions, type CrossVMCallResult, type CrossVMClient, type CrossVMWriteOptions, type CrossVmMessage, type CrossVmMessageResponse, type CrossVmParamsResponse, type CrossVmQueryClient, DEFAULT_GAS_MULTIPLIER, DEFAULT_GAS_PRICE, type DecodedTxError, type DenomOptions, type DerivationOptions, ETHSECP256K1_PUBKEY_TYPE, type Ed25519Account, type Eip1193Provider, type EnsurePqcRegisteredOptions, type EnsurePqcRegisteredResult, type EstimateFeeOptions, type EthBroadcaster, EthNativeSigner, type EthNativeSignerOptions, type EthSignParams, type EthSigningKey, type EthTxParams, type EventFilters, type EventStream, type EvmAuthSignBytesInput, type EvmPayload, type ExecuteCosmosMsgInput, type ExecuteEvmMsgInput, type ExecuteWithdrawalOptions, type ExplorerConfig, type FaucetConfig, type FeeInput, type FeeUrgency, type FetchLike, GasPrice, type GetBlockResponse, type GetCosmosWalletOptions, type GetJsonOptions, type GetTxFn, type GetTxResponse, HYBRID_SIG_TYPE_URL, type Handler, type HashInput, type HttpOptions, type HybridBroadcaster, type HybridPlacement, type HybridSendPath, HybridSigner, type IncludedTx, type InjectedCosmosWallet, type InstantiateOpts, JsonRpcClient, type JsonRpcClientOptions, JsonRpcError, type JsonRpcErrorObject, type JsonRpcResponse, type KeplrChainInfo, type KeplrCurrency, type KeplrFeeCurrency, type KeyType, LEGACY_DERIVATION, type LicenseQueryClient, type LightNodeQueryClient, ML_DSA_87_PUBLIC_KEY_LENGTH, ML_DSA_87_SECRET_KEY_LENGTH, ML_DSA_87_SEED_LENGTH, ML_DSA_87_SIGNATURE_LENGTH, MSG_SEND_TYPE_URL, type MigratePqcKeyOptions, type MigrateToHybridOptions, type MultilayerClient, type MultilayerQueryClient, type MultilayerWriteOptions, NETWORKS, type NetworkConfig, type NetworkEndpoints, type NetworkName, type NewBlockEventLike, PHANTOM_DERIVATION_DOMAIN, type PQCHybridSignature$1 as PQCHybridSignature, PQC_KEY_STATUS_PRECOMPILE_ADDRESS, type PageResponse, type PaginatedOptions, type Pagination, type ParsedAccountAuth, type PayloadInput, type PendingCrossVmMessagesResponse, type PermissionSchemaResponse, type PhantomProvider, type PqcKeypair, type PqcQueryClient, type PqcSignaturePart, PqcSigner, type PqcStatus, type PqcStatusSource, type QcaQueryClient, QorClient, type QoreChainClient, type QoreChainQueryClients, QoreHttpError, QoreTxError, type QueryValue, type RawPayload, type RdkQueryClient, type RegisterEthAuthenticatorMsgInput, type RegisterPaychainOptions, type RegisterSidechainOptions, type ReputationQueryClient, type RequestFaucetOptions, type ResolveChallengeOptions, RestClient, type RestClientOptions, type RetryOptions, type RevokeAuthenticatorMsgInput, type RlConsensusQueryClient, type RollupClient, type RollupLifecycleOptions, type RollupWriteOptions, type RotatePqcKeyMsgFromMnemonicOptions, type RotatePqcKeyMsgFromMnemonicResult, type RotatePqcKeyMsgInput, type RouteTransactionOptions, STATIC_FALLBACK, type SearchTxsOptions, type SearchTxsResponse, type Secp256k1Account, type SignAndBroadcastHybridOptions, type SignAndBroadcastOptions, type SignOutput, type SignatureMode, type SignedEthTx, type Signer, type SigningClientLike, type SimulateOptions, type SubmitBatchOptions, type SubscriptionClient, type SvmPayload, type SvmQueryClient, type SyncBroadcaster, TxClient, type TxClientOptions, type TxConnectOptions, type TxErrorInput, type TxEventLike, type FeeInput$1 as TxFeeInput, type TxOrderBy, type TxQueryFilters, type TxResultLike, type UnifiedAccount, type UnifiedAddresses, type Unsubscribe, VERSION, type VMType, VM_TYPES, type WaitForTxOptions, abstractaccount, accountAuthInfo, addressesFrom20, algorithmName, amm, attachHybridExtension, authz, bank, be64, bech32ToHex, bridge, broadcastAndWait, buildAminoTypes, buildEventsQuery, buildHybridSignatureExtension, buildHybridTx, buildMetaMaskExecuteCosmos, buildMetaMaskExecuteEvm, buildPhantomExecuteCosmos, buildPhantomExecuteEvm, buildRegisterPqcKeyMsg, buildTxQuery, buildUrl, bytesToBech32, calculateFee, clearAdmin, connectCosmWasmSigner, connectPhantomUnified, connectQueryClients, cosmosAuthSignBytes, createClient, createCosmWasmClient, createCrossVMClient, createMultilayerClient, createQueryClients, createRollupClient, createSubscriptionClient, crossvm, decodeTxError, deriveEvmAccount, deriveNativeAccount, derivePqcLegacy, deriveSvmAccount, deriveUnifiedAccount, directSignerFromPrivateKey, distribution, encodeHybridExtension, ensurePqcRegistered, estimateFee, evmAuthSignBytes, evmToQor, execute, executeCosmosMsg, executeEvmMsg, explorerAddressUrl, explorerBlockUrl, explorerTxUrl, feegrant, formatUnits, fromBase, generateMnemonic, generatePqcKeypair, getBlock, getCodeDetails, getCodes, getContractInfo, getContracts, getCosmosWallet, getCrossVmMessage, getCrossVmParams, getJson, getLatestBlock, getNetwork, getPendingCrossVmMessages, getPqcStatus, getTx, gov, hexToBech32, ibc, instantiate, instantiate2, isChecksumAddress, isPqcRegistered, isSignatureAlgorithm, isTxFailure, isValidBech32, isValidEvmAddress, isValidSvmAddress, joinUrl, keccak256, keccak256Hex, lengthPrefixed, license, lightnode, listNetworks, migrate, migratePqcKey, migrateToHybrid, msg, multilayer, parseEthPubkeyAny, parseUnits, postJsonRpc, pqc as pqcMsg, pqcSign, pqcVerify, qorToEvm, qoreAddresses, qorechainRegistry, qorechainRegistryTypes, index as qorechainTypes, queryContractSmart, rdk, registerEthAuthenticatorMsg, requestFaucet, revokeAuthenticatorMsg, ripemd160, ripemd160Hex, rlconsensus, rotatePqcKeyMsg, rotatePqcKeyMsgFromMnemonic, rotationSignBytes, searchTxs, sha256, sha256Hex, signAndBroadcastHybrid, signClassicalEth, signHybridEth, staking, subscribeNewBlocks, subscribeTx, suggestChainInfo, svm, toBase, toChecksumAddress, toHex, txErrorFrom, unifiedAccountFromPhantomSignature, unifiedAccountFromSeed, updateAdmin, uploadCode, validateMnemonic, waitForTx, withRetry };