@sequence0/sdk 1.1.0 → 1.2.0

package/dist/chains/ton.d.ts

@@ -0,0 +1,40 @@
+/**
+ * TON Chain Adapter
+ *
+ * Builds TON blockchain transactions using Cell/BoC serialization,
+ * attaches Ed25519 signatures from the FROST threshold signing
+ * network, and broadcasts via TON Center API.
+ *
+ * Requires: npm install @ton/ton
+ */
+import { ChainAdapter, TonTransaction } from '../core/types';
+export declare class TonAdapter implements ChainAdapter {
+    private rpcUrl;
+    private network;
+    private tonSdk;
+    constructor(network?: 'mainnet' | 'testnet', rpcUrl?: string);
+    getRpcUrl(): string;
+    /**
+     * Build an unsigned TON transaction.
+     *
+     * TON uses Cell tree serialization. The signing payload is the
+     * SHA-256 hash of the external message body cell.
+     */
+    buildTransaction(tx: TonTransaction, fromAddress: string): Promise<string>;
+    getSigningPayload(unsignedTx: string): string;
+    /**
+     * Attach an Ed25519 signature to the TON transaction
+     */
+    attachSignature(unsignedTx: string, signature: string): Promise<string>;
+    /**
+     * Broadcast a signed TON transaction
+     */
+    broadcast(signedTx: string): Promise<string>;
+    /**
+     * Get TON balance in nanotons
+     */
+    getBalance(address: string): Promise<string>;
+}
+export declare function createTonAdapter(rpcUrl?: string): TonAdapter;
+export declare function createTonTestnetAdapter(rpcUrl?: string): TonAdapter;
+//# sourceMappingURL=ton.d.ts.map

package/dist/chains/ton.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ton.d.ts","sourceRoot":"","sources":["../../src/chains/ton.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAS7D,qBAAa,UAAW,YAAW,YAAY;IAC3C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAM;gBAER,OAAO,GAAE,SAAS,GAAG,SAAqB,EAAE,MAAM,CAAC,EAAE,MAAM;IAMvE,SAAS,IAAI,MAAM;IAInB;;;;;OAKG;IACG,gBAAgB,CAAC,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAuDhF,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAS7C;;OAEG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB7E;;OAEG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4ClD;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAUrD;AAED,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAE5D;AAED,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,UAAU,CAEnE"}

package/dist/chains/ton.js

@@ -0,0 +1,168 @@
+"use strict";
+/**
+ * TON Chain Adapter
+ *
+ * Builds TON blockchain transactions using Cell/BoC serialization,
+ * attaches Ed25519 signatures from the FROST threshold signing
+ * network, and broadcasts via TON Center API.
+ *
+ * Requires: npm install @ton/ton
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TonAdapter = void 0;
+exports.createTonAdapter = createTonAdapter;
+exports.createTonTestnetAdapter = createTonTestnetAdapter;
+const errors_1 = require("../utils/errors");
+const optional_deps_1 = require("../utils/optional-deps");
+const DEFAULT_RPCS = {
+    'mainnet': 'https://toncenter.com/api/v2',
+    'testnet': 'https://testnet.toncenter.com/api/v2',
+};
+class TonAdapter {
+    constructor(network = 'mainnet', rpcUrl) {
+        this.network = network;
+        this.rpcUrl = rpcUrl || DEFAULT_RPCS[network];
+        this.tonSdk = (0, optional_deps_1.requireOptionalDependency)('@ton/ton', 'ton');
+    }
+    getRpcUrl() {
+        return this.rpcUrl;
+    }
+    /**
+     * Build an unsigned TON transaction.
+     *
+     * TON uses Cell tree serialization. The signing payload is the
+     * SHA-256 hash of the external message body cell.
+     */
+    async buildTransaction(tx, fromAddress) {
+        try {
+            const { TonClient, WalletContractV4, internal, Address, toNano, beginCell } = this.tonSdk;
+            const client = new TonClient({
+                endpoint: this.rpcUrl,
+            });
+            const address = Address.parse(fromAddress);
+            // Get seqno (sequence number) from wallet contract
+            const contract = client.open(WalletContractV4.create({
+                workchain: 0,
+                publicKey: Buffer.alloc(32), // placeholder
+            }));
+            // Build the internal message
+            const internalMsg = internal({
+                to: Address.parse(tx.to),
+                value: BigInt(tx.amount),
+                body: tx.payload ? beginCell().storeStringTail(tx.payload).endCell() : undefined,
+                bounce: true,
+            });
+            // Create the transfer message body
+            const body = beginCell()
+                .storeUint(0, 32) // seqno placeholder
+                .storeUint(Math.floor(Date.now() / 1000) + 60, 32) // expiry
+                .storeUint(0, 8) // mode: 0 = pay transfer fees separately
+                .storeRef(beginCell()
+                .store(internalMsg)
+                .endCell())
+                .endCell();
+            const bodyHash = body.hash();
+            const payload = {
+                signingHash: Buffer.from(bodyHash).toString('hex'),
+                body: body.toBoc().toString('hex'),
+                fromAddress,
+                toAddress: tx.to,
+                amount: tx.amount,
+                payload: tx.payload || '',
+            };
+            return Buffer.from(JSON.stringify(payload)).toString('hex');
+        }
+        catch (e) {
+            if (e instanceof errors_1.ChainError)
+                throw e;
+            throw new errors_1.ChainError(`Failed to build TON transaction: ${e.message}`, 'ton');
+        }
+    }
+    getSigningPayload(unsignedTx) {
+        try {
+            const payload = JSON.parse(Buffer.from(unsignedTx, 'hex').toString());
+            return payload.signingHash;
+        }
+        catch {
+            return unsignedTx;
+        }
+    }
+    /**
+     * Attach an Ed25519 signature to the TON transaction
+     */
+    async attachSignature(unsignedTx, signature) {
+        try {
+            const payload = JSON.parse(Buffer.from(unsignedTx, 'hex').toString());
+            const sig = signature.startsWith('0x') ? signature.slice(2) : signature;
+            const signedPayload = {
+                ...payload,
+                signature: sig,
+            };
+            return Buffer.from(JSON.stringify(signedPayload)).toString('hex');
+        }
+        catch (e) {
+            throw new errors_1.ChainError(`Failed to attach TON signature: ${e.message}`, 'ton');
+        }
+    }
+    /**
+     * Broadcast a signed TON transaction
+     */
+    async broadcast(signedTx) {
+        try {
+            const { TonClient, Cell, beginCell } = this.tonSdk;
+            const payload = JSON.parse(Buffer.from(signedTx, 'hex').toString());
+            const client = new TonClient({ endpoint: this.rpcUrl });
+            // Reconstruct the signed external message
+            const bodyBoc = Buffer.from(payload.body, 'hex');
+            const body = Cell.fromBoc(bodyBoc)[0];
+            const sigBytes = Buffer.from(payload.signature, 'hex');
+            // Prepend signature to message body
+            const signedBody = beginCell()
+                .storeBuffer(sigBytes)
+                .storeSlice(body.beginParse())
+                .endCell();
+            // Create external message
+            const ext = beginCell()
+                .storeUint(0b10, 2) // ext_in_msg_info
+                .storeUint(0, 2) // src: addr_none
+                .storeAddress(null) // dest: will be set
+                .storeCoins(0) // import_fee
+                .storeBit(false) // state_init: none
+                .storeBit(true) // body: in reference
+                .storeRef(signedBody)
+                .endCell();
+            await client.sendFile(ext.toBoc());
+            // TON doesn't return a hash on send — compute it from the BoC
+            const crypto = require('crypto');
+            const hash = crypto.createHash('sha256').update(ext.toBoc()).digest('hex');
+            return hash;
+        }
+        catch (e) {
+            if (e instanceof errors_1.ChainError)
+                throw e;
+            throw new errors_1.ChainError(`Failed to broadcast TON tx: ${e.message}`, 'ton');
+        }
+    }
+    /**
+     * Get TON balance in nanotons
+     */
+    async getBalance(address) {
+        try {
+            const { TonClient, Address } = this.tonSdk;
+            const client = new TonClient({ endpoint: this.rpcUrl });
+            const balance = await client.getBalance(Address.parse(address));
+            return balance.toString();
+        }
+        catch {
+            return '0';
+        }
+    }
+}
+exports.TonAdapter = TonAdapter;
+function createTonAdapter(rpcUrl) {
+    return new TonAdapter('mainnet', rpcUrl);
+}
+function createTonTestnetAdapter(rpcUrl) {
+    return new TonAdapter('testnet', rpcUrl);
+}
+//# sourceMappingURL=ton.js.map

package/dist/chains/ton.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ton.js","sourceRoot":"","sources":["../../src/chains/ton.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAoLH,4CAEC;AAED,0DAEC;AAvLD,4CAA6C;AAC7C,0DAAmE;AAEnE,MAAM,YAAY,GAA2B;IACzC,SAAS,EAAE,8BAA8B;IACzC,SAAS,EAAE,sCAAsC;CACpD,CAAC;AAEF,MAAa,UAAU;IAKnB,YAAY,UAAiC,SAAS,EAAE,MAAe;QACnE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,IAAA,yCAAyB,EAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,EAAkB,EAAE,WAAmB;QAC1D,IAAI,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;YAE1F,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;gBACzB,QAAQ,EAAE,IAAI,CAAC,MAAM;aACxB,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAE3C,mDAAmD;YACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;gBACjD,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,cAAc;aAC9C,CAAC,CAAC,CAAC;YAEJ,6BAA6B;YAC7B,MAAM,WAAW,GAAG,QAAQ,CAAC;gBACzB,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC;gBACxB,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;gBAChF,MAAM,EAAE,IAAI;aACf,CAAC,CAAC;YAEH,mCAAmC;YACnC,MAAM,IAAI,GAAG,SAAS,EAAE;iBACnB,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,oBAAoB;iBACtC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAE,SAAS;iBAC5D,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAG,yCAAyC;iBAC3D,QAAQ,CAAC,SAAS,EAAE;iBAChB,KAAK,CAAC,WAAW,CAAC;iBAClB,OAAO,EAAE,CAAC;iBACd,OAAO,EAAE,CAAC;YAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAE7B,MAAM,OAAO,GAAG;gBACZ,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAClD,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAClC,WAAW;gBACX,SAAS,EAAE,EAAE,CAAC,EAAE;gBAChB,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,OAAO,EAAE,EAAE,CAAC,OAAO,IAAI,EAAE;aAC5B,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,mBAAU;gBAAE,MAAM,CAAC,CAAC;YACrC,MAAM,IAAI,mBAAU,CAChB,oCAAqC,CAAW,CAAC,OAAO,EAAE,EAC1D,KAAK,CACR,CAAC;QACN,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,UAAkB;QAChC,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtE,OAAO,OAAO,CAAC,WAAW,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,UAAU,CAAC;QACtB,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,SAAiB;QACvD,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAExE,MAAM,aAAa,GAAG;gBAClB,GAAG,OAAO;gBACV,SAAS,EAAE,GAAG;aACjB,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,mBAAU,CAChB,mCAAoC,CAAW,CAAC,OAAO,EAAE,EACzD,KAAK,CACR,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC5B,IAAI,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;YACnD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEpE,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YAExD,0CAA0C;YAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACjD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAEvD,oCAAoC;YACpC,MAAM,UAAU,GAAG,SAAS,EAAE;iBACzB,WAAW,CAAC,QAAQ,CAAC;iBACrB,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;iBAC7B,OAAO,EAAE,CAAC;YAEf,0BAA0B;YAC1B,MAAM,GAAG,GAAG,SAAS,EAAE;iBAClB,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAE,kBAAkB;iBACtC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAK,iBAAiB;iBACrC,YAAY,CAAC,IAAI,CAAC,CAAE,oBAAoB;iBACxC,UAAU,CAAC,CAAC,CAAC,CAAO,aAAa;iBACjC,QAAQ,CAAC,KAAK,CAAC,CAAK,mBAAmB;iBACvC,QAAQ,CAAC,IAAI,CAAC,CAAM,qBAAqB;iBACzC,QAAQ,CAAC,UAAU,CAAC;iBACpB,OAAO,EAAE,CAAC;YAEf,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAEnC,8DAA8D;YAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC3E,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,mBAAU;gBAAE,MAAM,CAAC,CAAC;YACrC,MAAM,IAAI,mBAAU,CAChB,+BAAgC,CAAW,CAAC,OAAO,EAAE,EACrD,KAAK,CACR,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,OAAe;QAC5B,IAAI,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACxD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAChE,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,GAAG,CAAC;QACf,CAAC;IACL,CAAC;CACJ;AAvKD,gCAuKC;AAED,SAAgB,gBAAgB,CAAC,MAAe;IAC5C,OAAO,IAAI,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,SAAgB,uBAAuB,CAAC,MAAe;IACnD,OAAO,IAAI,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC"}

package/dist/chains/tron.d.ts

@@ -0,0 +1,41 @@
+/**
+ * TRON Chain Adapter
+ *
+ * Builds TRON transactions using Protobuf serialization (NOT EVM RLP),
+ * attaches secp256k1 ECDSA signatures from the FROST threshold signing
+ * network, and broadcasts via TRON full node HTTP API.
+ *
+ * Requires: npm install tronweb
+ */
+import { ChainAdapter, TronTransaction } from '../core/types';
+export declare class TronAdapter implements ChainAdapter {
+    private rpcUrl;
+    private network;
+    private tronWeb;
+    constructor(network?: 'mainnet' | 'shasta' | 'nile', rpcUrl?: string);
+    getRpcUrl(): string;
+    /**
+     * Build an unsigned TRON transaction.
+     *
+     * TRON uses Protobuf for TX serialization. The signing payload
+     * is SHA-256 of the raw transaction data (returned as txID by TronWeb).
+     */
+    buildTransaction(tx: TronTransaction, fromAddress: string): Promise<string>;
+    getSigningPayload(unsignedTx: string): string;
+    /**
+     * Attach a secp256k1 ECDSA signature to the TRON transaction.
+     * TRON expects 65-byte signatures (r + s + v), same format as EVM.
+     */
+    attachSignature(unsignedTx: string, signature: string): Promise<string>;
+    /**
+     * Broadcast a signed TRON transaction
+     */
+    broadcast(signedTx: string): Promise<string>;
+    /**
+     * Get TRX balance in SUN
+     */
+    getBalance(address: string): Promise<string>;
+}
+export declare function createTronAdapter(rpcUrl?: string): TronAdapter;
+export declare function createTronShastaAdapter(rpcUrl?: string): TronAdapter;
+//# sourceMappingURL=tron.d.ts.map

package/dist/chains/tron.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tron.d.ts","sourceRoot":"","sources":["../../src/chains/tron.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAU9D,qBAAa,WAAY,YAAW,YAAY;IAC5C,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAM;gBAET,OAAO,GAAE,SAAS,GAAG,QAAQ,GAAG,MAAkB,EAAE,MAAM,CAAC,EAAE,MAAM;IAO/E,SAAS,IAAI,MAAM;IAInB;;;;;OAKG;IACG,gBAAgB,CAAC,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAwBjF,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM;IAS7C;;;OAGG;IACG,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAmB7E;;OAEG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA2BlD;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAQrD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAE9D;AAED,wBAAgB,uBAAuB,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,WAAW,CAEpE"}

package/dist/chains/tron.js

@@ -0,0 +1,124 @@
+"use strict";
+/**
+ * TRON Chain Adapter
+ *
+ * Builds TRON transactions using Protobuf serialization (NOT EVM RLP),
+ * attaches secp256k1 ECDSA signatures from the FROST threshold signing
+ * network, and broadcasts via TRON full node HTTP API.
+ *
+ * Requires: npm install tronweb
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TronAdapter = void 0;
+exports.createTronAdapter = createTronAdapter;
+exports.createTronShastaAdapter = createTronShastaAdapter;
+const errors_1 = require("../utils/errors");
+const optional_deps_1 = require("../utils/optional-deps");
+const DEFAULT_RPCS = {
+    'mainnet': 'https://api.trongrid.io',
+    'shasta': 'https://api.shasta.trongrid.io',
+    'nile': 'https://nile.trongrid.io',
+};
+class TronAdapter {
+    constructor(network = 'mainnet', rpcUrl) {
+        this.network = network;
+        this.rpcUrl = rpcUrl || DEFAULT_RPCS[network];
+        const TronWeb = (0, optional_deps_1.requireOptionalDependency)('tronweb', 'tron');
+        this.tronWeb = new TronWeb({ fullHost: this.rpcUrl });
+    }
+    getRpcUrl() {
+        return this.rpcUrl;
+    }
+    /**
+     * Build an unsigned TRON transaction.
+     *
+     * TRON uses Protobuf for TX serialization. The signing payload
+     * is SHA-256 of the raw transaction data (returned as txID by TronWeb).
+     */
+    async buildTransaction(tx, fromAddress) {
+        try {
+            const unsignedTx = await this.tronWeb.transactionBuilder.sendTrx(tx.to, tx.amount, fromAddress);
+            // txID is already SHA-256(rawData) — the signing hash
+            const payload = {
+                signingHash: unsignedTx.txID,
+                rawData: unsignedTx.raw_data,
+                rawDataHex: unsignedTx.raw_data_hex,
+            };
+            return Buffer.from(JSON.stringify(payload)).toString('hex');
+        }
+        catch (e) {
+            throw new errors_1.ChainError(`Failed to build TRON transaction: ${e.message}`, 'tron');
+        }
+    }
+    getSigningPayload(unsignedTx) {
+        try {
+            const payload = JSON.parse(Buffer.from(unsignedTx, 'hex').toString());
+            return payload.signingHash;
+        }
+        catch {
+            return unsignedTx;
+        }
+    }
+    /**
+     * Attach a secp256k1 ECDSA signature to the TRON transaction.
+     * TRON expects 65-byte signatures (r + s + v), same format as EVM.
+     */
+    async attachSignature(unsignedTx, signature) {
+        try {
+            const payload = JSON.parse(Buffer.from(unsignedTx, 'hex').toString());
+            const sig = signature.startsWith('0x') ? signature.slice(2) : signature;
+            const signedPayload = {
+                ...payload,
+                signature: [sig],
+            };
+            return Buffer.from(JSON.stringify(signedPayload)).toString('hex');
+        }
+        catch (e) {
+            throw new errors_1.ChainError(`Failed to attach TRON signature: ${e.message}`, 'tron');
+        }
+    }
+    /**
+     * Broadcast a signed TRON transaction
+     */
+    async broadcast(signedTx) {
+        try {
+            const payload = JSON.parse(Buffer.from(signedTx, 'hex').toString());
+            const signedTransaction = {
+                txID: payload.signingHash,
+                raw_data: payload.rawData,
+                raw_data_hex: payload.rawDataHex,
+                signature: payload.signature,
+            };
+            const result = await this.tronWeb.trx.sendRawTransaction(signedTransaction);
+            if (!result.result && !result.txid) {
+                throw new Error(result.message || 'Broadcast failed');
+            }
+            return result.txid || payload.signingHash;
+        }
+        catch (e) {
+            if (e instanceof errors_1.ChainError)
+                throw e;
+            throw new errors_1.ChainError(`Failed to broadcast TRON tx: ${e.message}`, 'tron');
+        }
+    }
+    /**
+     * Get TRX balance in SUN
+     */
+    async getBalance(address) {
+        try {
+            const balance = await this.tronWeb.trx.getBalance(address);
+            return balance.toString();
+        }
+        catch {
+            return '0';
+        }
+    }
+}
+exports.TronAdapter = TronAdapter;
+function createTronAdapter(rpcUrl) {
+    return new TronAdapter('mainnet', rpcUrl);
+}
+function createTronShastaAdapter(rpcUrl) {
+    return new TronAdapter('shasta', rpcUrl);
+}
+//# sourceMappingURL=tron.js.map

package/dist/chains/tron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tron.js","sourceRoot":"","sources":["../../src/chains/tron.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAqIH,8CAEC;AAED,0DAEC;AAxID,4CAA6C;AAC7C,0DAAmE;AAEnE,MAAM,YAAY,GAA2B;IACzC,SAAS,EAAE,yBAAyB;IACpC,QAAQ,EAAE,gCAAgC;IAC1C,MAAM,EAAE,0BAA0B;CACrC,CAAC;AAEF,MAAa,WAAW;IAKpB,YAAY,UAAyC,SAAS,EAAE,MAAe;QAC3E,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAA,yCAAyB,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,SAAS;QACL,OAAO,IAAI,CAAC,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,EAAmB,EAAE,WAAmB;QAC3D,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,OAAO,CAC5D,EAAE,CAAC,EAAE,EACL,EAAE,CAAC,MAAM,EACT,WAAW,CACd,CAAC;YAEF,sDAAsD;YACtD,MAAM,OAAO,GAAG;gBACZ,WAAW,EAAE,UAAU,CAAC,IAAI;gBAC5B,OAAO,EAAE,UAAU,CAAC,QAAQ;gBAC5B,UAAU,EAAE,UAAU,CAAC,YAAY;aACtC,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,mBAAU,CAChB,qCAAsC,CAAW,CAAC,OAAO,EAAE,EAC3D,MAAM,CACT,CAAC;QACN,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,UAAkB;QAChC,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtE,OAAO,OAAO,CAAC,WAAW,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,UAAU,CAAC;QACtB,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB,EAAE,SAAiB;QACvD,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAExE,MAAM,aAAa,GAAG;gBAClB,GAAG,OAAO;gBACV,SAAS,EAAE,CAAC,GAAG,CAAC;aACnB,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,MAAM,IAAI,mBAAU,CAChB,oCAAqC,CAAW,CAAC,OAAO,EAAE,EAC1D,MAAM,CACT,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,QAAgB;QAC5B,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAEpE,MAAM,iBAAiB,GAAG;gBACtB,IAAI,EAAE,OAAO,CAAC,WAAW;gBACzB,QAAQ,EAAE,OAAO,CAAC,OAAO;gBACzB,YAAY,EAAE,OAAO,CAAC,UAAU;gBAChC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC/B,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;YAE5E,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,CAAC;YAC1D,CAAC;YAED,OAAO,MAAM,CAAC,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;QAC9C,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,IAAI,CAAC,YAAY,mBAAU;gBAAE,MAAM,CAAC,CAAC;YACrC,MAAM,IAAI,mBAAU,CAChB,gCAAiC,CAAW,CAAC,OAAO,EAAE,EACtD,MAAM,CACT,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,OAAe;QAC5B,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAC3D,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,GAAG,CAAC;QACf,CAAC;IACL,CAAC;CACJ;AAvHD,kCAuHC;AAED,SAAgB,iBAAiB,CAAC,MAAe;IAC7C,OAAO,IAAI,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED,SAAgB,uBAAuB,CAAC,MAAe;IACnD,OAAO,IAAI,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC"}

package/dist/core/client.d.ts

@@ -238,13 +238,12 @@ export declare class Sequence0 {
     private getRpcUrl;
     private getCurveForChain;
     /**
-     * Build an ownership proof for a sign request.
+     * Build an ownership proof for a sign request using EIP-712 typed structured data.
      *
-     * The proof is: sign( keccak256( wallet_id_bytes + message_hex_bytes + timestamp_be_bytes ) )
+     * EIP-712 domain: { name: "Sequence0", version: "1", chainId, verifyingContract: WalletFactory }
+     * EIP-712 type:   Sequence0Auth(string walletId, string action, uint256 timestamp)
      *
-     * - wallet_id_bytes: UTF-8 encoding of the wallet ID string
-     * - message_hex_bytes: the raw bytes of the hex-encoded message (i.e. the message as passed to /sign)
-     * - timestamp_be_bytes: 8-byte big-endian encoding of the Unix epoch second
+     * The digest is: keccak256("\x19\x01" || domainSeparator || hashStruct)
      *
      * Returns null when no ownerSigner is configured (backwards compatible).
      */

package/dist/core/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/core/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACH,aAAa,EACb,mBAAmB,EAEnB,cAAc,EACd,cAAc,EAEd,YAAY,EAGZ,kBAAkB,EAErB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,MAAM,EAAgB,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,QAAQ,EAAa,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAc,aAAa,EAAE,MAAM,cAAc,CAAC;AAmHzD,qBAAa,SAAS;IAClB,OAAO,CAAC,MAAM,CAA2D;IACzE,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,cAAc,CAAwC;IAC9D,4EAA4E;IAC5E,OAAO,CAAC,YAAY,CAAkC;IACtD,kDAAkD;IAClD,OAAO,CAAC,WAAW,CAA4B;IAC/C,wEAAwE;IACxE,OAAO,CAAC,YAAY,CAAuB;IAE3C;;;;;;;;;;;;;;;;;;;;;;OAsBG;gBACS,MAAM,EAAE,aAAa;IAyEjC;;;OAGG;YACW,OAAO;IAYrB;;;OAGG;YACW,WAAW;IAwBzB;;;;OAIG;YACW,mBAAmB;IA0BjC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAS5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAYxB;;;;OAIG;YACW,YAAY;IAoC1B;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IA4GjE;;;;;;;;;;OAUG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BlD;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAY5C;;;;;;OAMG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAyB1E;;;;;OAKG;IACG,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAYxE;;;;;;;OAOG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAqCzF;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC;IAO1C;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAOvC;;;OAGG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiBlD;;OAEG;IACG,cAAc;IAIpB;;;OAGG;IACG,iBAAiB;IAQvB;;;;;;;;;;;;;;;;OAgBG;IACG,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAKxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAkCjE;;;;;;;;;OASG;IACG,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAWrD;;;OAGG;IACH,OAAO,IAAI,IAAI;YAiBD,WAAW;IAUzB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,gBAAgB;IAexB;;;;;;;;;;OAUG;YACW,kBAAkB;IAiChC;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;OAEG;IACH,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,gBAAgB;CAK3B"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/core/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACH,aAAa,EACb,mBAAmB,EAEnB,cAAc,EACd,cAAc,EAEd,YAAY,EAGZ,kBAAkB,EAErB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,MAAM,EAAgB,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAAE,QAAQ,EAAa,MAAM,oBAAoB,CAAC;AAEzD,OAAO,EAAc,aAAa,EAAE,MAAM,cAAc,CAAC;AAsIzD,qBAAa,SAAS;IAClB,OAAO,CAAC,MAAM,CAA2D;IACzE,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,EAAE,CAAyB;IACnC,OAAO,CAAC,SAAS,CAA+B;IAChD,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,gBAAgB,CAAuB;IAC/C,OAAO,CAAC,cAAc,CAAwC;IAC9D,4EAA4E;IAC5E,OAAO,CAAC,YAAY,CAAkC;IACtD,kDAAkD;IAClD,OAAO,CAAC,WAAW,CAA4B;IAC/C,wEAAwE;IACxE,OAAO,CAAC,YAAY,CAAuB;IAE3C;;;;;;;;;;;;;;;;;;;;;;OAsBG;gBACS,MAAM,EAAE,aAAa;IAyEjC;;;OAGG;YACW,OAAO;IAYrB;;;OAGG;YACW,WAAW;IAwBzB;;;;OAIG;YACW,mBAAmB;IA0BjC;;OAEG;IACH,OAAO,CAAC,oBAAoB;IAS5B;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAYxB;;;;OAIG;YACW,YAAY;IAoC1B;;;;;;;;;;;;OAYG;IACG,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IA8GjE;;;;;;;;;;OAUG;IACG,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA0BlD;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;IAY5C;;;;;;OAMG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAyB1E;;;;;OAKG;IACG,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAYxE;;;;;;;OAOG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IA8CzF;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,cAAc,CAAC;IAO1C;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAOvC;;;OAGG;IACG,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBlD;;OAEG;IACG,cAAc;IAIpB;;;OAGG;IACG,iBAAiB;IAQvB;;;;;;;;;;;;;;;;OAgBG;IACG,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC;IAKxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAkCjE;;;;;;;;;OASG;IACG,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAWrD;;;OAGG;IACH,OAAO,IAAI,IAAI;YAyBD,WAAW;IAUzB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,gBAAgB;IAexB;;;;;;;;;OASG;YACW,kBAAkB;IAuBhC;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAkC5B;;OAEG;IACH,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,gBAAgB;CAK3B"}

package/dist/core/client.js

@@ -32,7 +32,24 @@ const websocket_1 = require("../utils/websocket");
 const discovery_1 = require("../utils/discovery");
 const fee_1 = require("../utils/fee");
 const errors_1 = require("../utils/errors");
+const eip712_1 = require("../utils/eip712");
 const validation_1 = require("../utils/validation");
+/**
+ * Cryptographically secure random number in [0, 1).
+ * Replaces Math.random() for agent selection to prevent prediction attacks.
+ */
+function secureRandom() {
+    const array = new Uint32Array(1);
+    if (typeof globalThis.crypto !== 'undefined') {
+        globalThis.crypto.getRandomValues(array);
+    }
+    else {
+        // Node.js fallback
+        const { randomBytes } = require('crypto');
+        array[0] = randomBytes(4).readUInt32BE(0);
+    }
+    return array[0] / (0xFFFFFFFF + 1);
+}
 /** Default agent URL for testnet (we run these ourselves) */
 const TESTNET_AGENT_URL = 'http://3.140.248.117:8080';
 /** Module-level flag to emit HTTP warning only once */
@@ -46,13 +63,13 @@ const SEQUENCE_RPC = {
 };
 /** AgentRegistry contract addresses */
 const REGISTRY_ADDRESSES = {
-    testnet: '0xc0437Ae04aA961f90dD237839704155A4E06af5D',
-    mainnet: '0x84E44eD38E30FD1F0ec37D88AbAAE831A90C610E',
+    testnet: '0xe00bc0ad2d623ea021c9299221125b4e5951cdab',
+    mainnet: '0x774d9a0dc937bfdc7636cbc6e0fc37f9a0809177',
 };
 /** FeeCollector contract addresses */
 const FEE_COLLECTOR_ADDRESSES = {
-    testnet: '0x0000000000000000000000000000000000000000', // No fee on testnet
-    mainnet: '0x24963595AdEbf6608Dd20DDBfcEf7D5931a595D9',
+    testnet: '0x2a23644695fb62f6ab2dffdaf58fc1ce89f3bada',
+    mainnet: '0x1977f852aa0d16a59c4ea71b6cc72db02803395f',
 };
 /** Default chain RPC URLs */
 const CHAIN_RPCS = {
@@ -254,12 +271,12 @@ class Sequence0 {
             // If all healthy agents have been excluded, clear exclusions and try again
             if (healthy.length > 0) {
                 this.failedAgents.clear();
-                const idx = Math.floor(Math.random() * healthy.length);
+                const idx = Math.floor(secureRandom() * healthy.length);
                 return healthy[idx].apiUrl;
             }
             throw new errors_1.NetworkError('No healthy agents found in the registry. The network may not have active node runners yet.');
         }
-        const idx = Math.floor(Math.random() * available.length);
+        const idx = Math.floor(secureRandom() * available.length);
         return available[idx].apiUrl;
     }
     /**
@@ -431,6 +448,9 @@ class Sequence0 {
         catch (e) {
             if (e instanceof errors_1.DkgError)
                 throw e;
+            // Propagate validation errors from malformed agent responses
+            if (e instanceof errors_1.Sequence0Error && e.code === 'INVALID_RESPONSE')
+                throw e;
             throw new errors_1.DkgError(`DKG ceremony timed out after ${timeout}ms. The agent network may be busy.`);
         }
         // Derive address from public key based on chain
@@ -552,9 +572,15 @@ class Sequence0 {
         try {
             const ws = await this.getWsClient();
             const result = await ws.waitFor('SigningComplete', (e) => e.request_id === requestId, timeoutMs);
-            return result.signature;
+            // Validate the WebSocket signing result before using
+            const validated = (0, validation_1.validateSignResultResponse)({ ...result, status: 'complete' }, 'ws:SigningComplete');
+            return validated.signature;
         }
-        catch {
+        catch (e) {
+            // If validation failed, propagate it — only swallow connection errors
+            if (e instanceof errors_1.Sequence0Error && e.code === 'INVALID_RESPONSE') {
+                throw e;
+            }
             // Fall back to polling
         }
         // Polling fallback
@@ -600,11 +626,12 @@ class Sequence0 {
             throw new errors_1.Sequence0Error('ownerSigner or ownerPrivateKey is required to sign refresh requests');
         }
         return this.withFailover(async (http) => {
-            await http.post('/refresh', {
+            const rawResponse = await http.post('/refresh', {
                 wallet_id: walletId,
                 owner_signature: proof.owner_signature,
                 timestamp: proof.timestamp,
             });
+            (0, validation_1.validateRefreshResponse)(rawResponse, '/refresh');
         });
     }
     /**
@@ -733,6 +760,13 @@ class Sequence0 {
         }
         this.circuitBreaker.resetAll();
         this.failedAgents.clear();
+        // Clear sensitive references
+        this.ownerSigner = undefined;
+        this.ownerAddress = undefined;
+        // Clear config reference that may hold ownerPrivateKey
+        if (this.config) {
+            delete this.config.ownerPrivateKey;
+        }
     }
     // ────────────────────────────────────────────────
     //  Internals
@@ -767,32 +801,23 @@ class Sequence0 {
         return 'secp256k1';
     }
     /**
-     * Build an ownership proof for a sign request.
+     * Build an ownership proof for a sign request using EIP-712 typed structured data.
      *
-     * The proof is: sign( keccak256( wallet_id_bytes + message_hex_bytes + timestamp_be_bytes ) )
+     * EIP-712 domain: { name: "Sequence0", version: "1", chainId, verifyingContract: WalletFactory }
+     * EIP-712 type:   Sequence0Auth(string walletId, string action, uint256 timestamp)
      *
-     * - wallet_id_bytes: UTF-8 encoding of the wallet ID string
-     * - message_hex_bytes: the raw bytes of the hex-encoded message (i.e. the message as passed to /sign)
-     * - timestamp_be_bytes: 8-byte big-endian encoding of the Unix epoch second
+     * The digest is: keccak256("\x19\x01" || domainSeparator || hashStruct)
      *
      * Returns null when no ownerSigner is configured (backwards compatible).
      */
-    async signOwnershipProof(walletId, messageHex) {
+    async signOwnershipProof(walletId, action) {
         if (!this.ownerSigner)
             return null;
         const timestamp = Math.floor(Date.now() / 1000);
-        // wallet_id as UTF-8 bytes
-        const walletIdBytes = new TextEncoder().encode(walletId);
-        // message as UTF-8 string bytes (must match Rust: message.as_bytes())
-        const messageBytes = new TextEncoder().encode(messageHex);
-        // timestamp as 8-byte big-endian
-        const timestampBytes = new Uint8Array(8);
-        const view = new DataView(timestampBytes.buffer);
-        // DataView setBigUint64 writes big-endian by default
-        view.setBigUint64(0, BigInt(timestamp), false);
-        // Concatenate and hash: keccak256(walletId + message + timestamp)
-        const payload = (0, ethers_1.concat)([walletIdBytes, messageBytes, timestampBytes]);
-        const digest = (0, ethers_1.getBytes)((0, ethers_1.keccak256)(payload));
+        const network = this.config.network;
+        const chainId = eip712_1.SEQUENCE0_CHAIN_IDS[network] || eip712_1.SEQUENCE0_CHAIN_IDS.mainnet;
+        const walletFactory = eip712_1.WALLET_FACTORY_ADDRESSES[network] || eip712_1.WALLET_FACTORY_ADDRESSES.mainnet;
+        const digest = (0, eip712_1.computeEip712Digest)(walletId, action, timestamp, chainId, walletFactory);
         // Sign the digest
         const signature = await this.ownerSigner(digest);
         return {
@@ -815,7 +840,7 @@ class Sequence0 {
         const remaining = [...weighted];
         for (let i = 0; i < n && remaining.length > 0; i++) {
             const totalWeight = remaining.reduce((sum, w) => sum + w.weight, 0);
-            let rand = Math.random() * totalWeight;
+            let rand = secureRandom() * totalWeight;
             let picked = remaining.length - 1; // fallback to last
             for (let j = 0; j < remaining.length; j++) {
                 rand -= remaining[j].weight;
@@ -842,7 +867,7 @@ class Sequence0 {
     }
     generateWalletId() {
         const timestamp = Date.now().toString(36);
-        const random = Math.random().toString(36).slice(2, 8);
+        const random = secureRandom().toString(36).slice(2, 8);
         return `s0-${timestamp}-${random}`;
     }
 }