@settlemint/dalp-cli 3.0.6-main.28333103539 → 3.0.6-main.28339035451

package/dist/dalp.js

@@ -68673,6 +68673,34 @@ var ENTRIES_INDEX = {
     owner: "dapi",
     orpcCode: "CUSTODY_PROVIDER_IMMUTABLE"
   },
+  "DALP-0679": {
+    id: "DALP-0679",
+    kind: "route",
+    category: "client",
+    status: 400,
+    retryable: false,
+    expectedClientError: true,
+    public: {
+      message: "The sale token cannot be withdrawn as a payment currency",
+      why: "The selected withdrawal currency is the token being sold; the contract reserves those tokens for buyers and reverts CannotWithdrawSaleToken.",
+      fix: "Choose one of the sale's payment currencies instead of the sale token, then retry."
+    },
+    observability: {
+      severity: "info",
+      otelEventName: "dapi.error",
+      metricAttributeKey: "dapi.error.id",
+      dimensions: [
+        "error.id",
+        "error.category",
+        "surface",
+        "route",
+        "status_class",
+        "retryable"
+      ]
+    },
+    owner: "dapi",
+    orpcCode: "TOKEN_SALE_CANNOT_WITHDRAW_SALE_TOKEN_CURRENCY"
+  },
   "DALP-1001": {
     id: "DALP-1001",
     kind: "contract",
@@ -84508,7 +84536,7 @@ var ENTRIES_INDEX = {
     kind: "contract",
     category: "contract",
     status: 422,
-    retryable: false,
+    retryable: true,
     expectedClientError: true,
     public: {
       message: "Slippage exceeded",
@@ -94271,6 +94299,7 @@ var DALP_ERROR_TYPED_FIELD_NAMES = {
   "DALP-0676": [],
   "DALP-0677": [],
   "DALP-0678": [],
+  "DALP-0679": [],
   "DALP-1001": [
     "args",
     "correlationId",
@@ -104345,6 +104374,7 @@ var DALP_ERROR_DATA_SCHEMA_BY_ID = {
   "DALP-0676": DALP_ORPC_ERROR_DATA_WIRE_SCHEMA,
   "DALP-0677": DALP_ORPC_ERROR_DATA_WIRE_SCHEMA,
   "DALP-0678": DALP_ORPC_ERROR_DATA_WIRE_SCHEMA,
+  "DALP-0679": DALP_ORPC_ERROR_DATA_WIRE_SCHEMA,
   "DALP-1001": DALP_ORPC_ERROR_DATA_BASE_SCHEMA.extend({
     args: exports_external.record(exports_external.string(), exports_external.string()),
     correlationId: exports_external.string(),
@@ -118200,6 +118230,10 @@ var CUSTOM_ERRORS = {
     status: 403,
     message: "Provided system addon does not belong to the authenticated system"
   },
+  TOKEN_SALE_CANNOT_WITHDRAW_SALE_TOKEN_CURRENCY: {
+    status: 400,
+    message: "The sale token cannot be withdrawn as a payment currency"
+  },
   TOKEN_SALE_DEPLOYMENT_INDEXED_AMBIGUOUSLY_TRANSACTION_MULTIPLE_SALES_MATCHED_CONFIRMED: {
     status: 500,
     message: "Token sale deployment indexed ambiguously for transaction {transactionHash}. Multiple token sales matched the confirmed deployment transaction"
@@ -121931,6 +121965,10 @@ var TokenSchema = exports_external.object({
     description: "The symbol of the token",
     examples: ["USTB", "CORP-A", "BOND"]
   }),
+  logoUrl: exports_external.string().nullable().optional().meta({
+    description: "Presigned URL for the token's brand logo (latest non-deleted `brand_logo` document), or null when none is uploaded. Short-lived (~1h); the client `Web3Avatar` falls back to the deterministic jazzicon when null/expired. Optional so token projections that do not resolve it omit the field.",
+    examples: [null]
+  }),
   decimals: decimals(),
   basePrice: bigDecimal().meta({
     description: "The base price of the token",
@@ -126865,6 +126903,7 @@ var tokenDocumentTypes = [
   "storage_receipt",
   "chain_of_custody",
   "insurance_certificate",
+  "brand_logo",
   "other"
 ];
 var TokenDocumentTypeSchema = exports_external.enum(tokenDocumentTypes).meta({
@@ -131418,6 +131457,12 @@ var TokenSaleReadQuerySchema = exports_external.object({
   buyerAddress: ethereumAddress.optional().meta({
     description: "Optional buyer address filter for returned purchases",
     examples: ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"]
+  }),
+  live: exports_external.union([exports_external.boolean(), exports_external.literal("true"), exports_external.literal("false")]).optional().transform((value22) => value22 === true || value22 === "true").pipe(exports_external.boolean()).default(false).meta({
+    description: "When true, recompute eligibility via a live canTransfer against the sale token's compliance engine. Cold-RPC, multi-second p95 latency; reserved for the explicit pre-submit recheck."
+  }),
+  amount: apiBigInt.optional().meta({
+    description: "Token amount (base units) for the live eligibility recheck; ignored in indexer mode."
   })
 });
 var TokenSaleMutationInputSchema = TokenSaleReadInputSchema.extend(MutationInputSchema.shape);
@@ -131595,6 +131640,37 @@ var TokenSaleFinalizeInputSchema = TokenSaleMutationInputSchema;
 var TokenSaleFinalizeOutputSchema = exports_external.object({
   transactionHash: exports_external.string()
 });
+var TokenSaleAccessControlRoleSchema = exports_external.enum(["saleAdmin", "fundsManager"]);
+var TokenSaleGrantRoleByParticipantCommonSchema = TokenSaleMutationInputSchema.extend({
+  role: TokenSaleAccessControlRoleSchema
+});
+var TokenSaleGrantRoleByParticipantInputSchema = exports_external.union([
+  TokenSaleGrantRoleByParticipantCommonSchema.extend({
+    participantId: exports_external.string().min(1)
+  }),
+  TokenSaleGrantRoleByParticipantCommonSchema.extend({
+    identityAddress: ethereumAddress
+  })
+]);
+var TokenSaleGrantRoleByParticipantOutputSchema = exports_external.object({
+  accounts: exports_external.array(ethereumAddress),
+  roles: exports_external.array(TokenSaleAccessControlRoleSchema)
+});
+var TokenSaleRevokeRoleByParticipantCommonSchema = TokenSaleMutationInputSchema.extend({
+  role: TokenSaleAccessControlRoleSchema
+});
+var TokenSaleRevokeRoleByParticipantInputSchema = exports_external.union([
+  TokenSaleRevokeRoleByParticipantCommonSchema.extend({
+    participantId: exports_external.string().min(1)
+  }),
+  TokenSaleRevokeRoleByParticipantCommonSchema.extend({
+    identityAddress: ethereumAddress
+  })
+]);
+var TokenSaleRevokeRoleByParticipantOutputSchema = exports_external.object({
+  accounts: exports_external.array(ethereumAddress),
+  roles: exports_external.array(TokenSaleAccessControlRoleSchema)
+});
 var TokenSalePauseSaleInputSchema = TokenSaleMutationInputSchema;
 var TokenSalePauseSaleOutputSchema = exports_external.object({
   transactionHash: exports_external.string()
@@ -131651,6 +131727,10 @@ var TokenSaleSetTermsHashInputSchema = TokenSaleMutationInputSchema.extend({
 var TokenSaleSetTermsHashOutputSchema = exports_external.object({
   transactionHash: exports_external.string()
 });
+var TokenSaleTransitionToPublicInputSchema = TokenSaleMutationInputSchema;
+var TokenSaleTransitionToPublicOutputSchema = exports_external.object({
+  transactionHash: exports_external.string()
+});
 var TokenSaleUnpauseSaleInputSchema = TokenSaleMutationInputSchema;
 var TokenSaleUnpauseSaleOutputSchema = exports_external.object({
   transactionHash: exports_external.string()
@@ -131660,8 +131740,8 @@ var TokenSaleWithdrawFundsInputSchema = TokenSaleMutationInputSchema.extend({
     description: "Payment currency token address",
     examples: ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"]
   }),
-  recipient: ethereumAddress.meta({
-    description: "Recipient wallet address",
+  recipient: nonZeroEthereumAddress.meta({
+    description: "Treasury recipient wallet address (the zero address is rejected)",
     examples: ["0x71C7656EC7ab88b098defB751B7401B5f6d8976F"]
   })
 });
@@ -131681,6 +131761,67 @@ var TokenSaleWithdrawUnsoldTokensInputSchema = TokenSaleMutationInputSchema.exte
 var TokenSaleWithdrawUnsoldTokensOutputSchema = exports_external.object({
   transactionHash: exports_external.string()
 });
+var EligibilityReadParamsSchema = exports_external.object({
+  participantId: exports_external.string().min(1).meta({
+    description: "Identifier of the participant whose global eligibility is being evaluated."
+  })
+});
+var EligibilityReadQuerySchema = exports_external.object({
+  live: exports_external.union([exports_external.boolean(), exports_external.literal("true"), exports_external.literal("false")]).optional().transform((value22) => value22 === true || value22 === "true").pipe(exports_external.boolean()).default(false).meta({
+    description: "When true, bypass the indexer and evaluate the verdict via live readContract against installed compliance modules. Cold-RPC, multi-second p95 latency; reserved for the dapp's explicit Recheck action."
+  })
+});
+var EligibilityVerdictSchema = exports_external.enum(["allowed", "needs-action", "blocked"]).meta({
+  description: "Top-level eligibility verdict. `allowed` means the participant satisfies every installed rule; `needs-action` flags missing/expired claims or allow-list gaps; `blocked` indicates at least one block-list match."
+});
+var EligibilitySourceSchema = exports_external.enum(["indexer", "live"]).meta({
+  description: "Where the verdict was evaluated."
+});
+var EligibilityReasonCodeSchema = exports_external.enum([
+  "address-blocked",
+  "country-blocked",
+  "country-not-allowed",
+  "identity-blocked",
+  "identity-not-verified",
+  "claim-missing",
+  "claim-revoked",
+  "claim-expired",
+  "live-timeout"
+]).meta({ description: "Reason code attached to a single rule failure." });
+var EligibilityReasonDetailsSchema = exports_external.object({
+  topic: exports_external.string().optional().meta({ description: "Claim topic name (for claim-* reason codes)." }),
+  expiresAt: timestamp().optional().meta({ description: "Timestamp the related claim expired or expires." }),
+  countryCode: isoCountryCodeNumeric.optional().meta({
+    description: "ISO numeric country code involved in a country-list reason."
+  })
+}).meta({ description: "Optional reason-specific context." });
+var EligibilityReasonSchema = exports_external.object({
+  code: EligibilityReasonCodeSchema,
+  moduleTypeId: complianceTypeId().optional().meta({
+    description: "TypeId of the module that produced this reason, when known."
+  }),
+  instanceAddress: ethereumAddress.optional().meta({
+    description: "Address of the specific module instance that produced this reason."
+  }),
+  details: EligibilityReasonDetailsSchema.optional()
+});
+var WalletEligibilityVerdictItemSchema = exports_external.object({
+  verdict: EligibilityVerdictSchema,
+  source: EligibilitySourceSchema,
+  checkedAt: timestamp().meta({
+    description: "Timestamp at which the verdict was evaluated."
+  }),
+  wallet: ethereumAddress.nullable().meta({
+    description: "Wallet address the verdict was evaluated against. Null when no wallet is resolvable yet."
+  }),
+  reasons: exports_external.array(EligibilityReasonSchema)
+});
+var EligibilityVerdictItemSchema = WalletEligibilityVerdictItemSchema.extend({
+  wallets: exports_external.array(WalletEligibilityVerdictItemSchema).optional().meta({
+    description: "Per-wallet verdict breakdown when the participant owns multiple wallets, such as an EOA and smart wallet pair."
+  })
+});
+var EligibilityReadOutputSchema = createSingleResponse(EligibilityVerdictItemSchema);
 var TokenSaleGraphItemSchema = exports_external.object({
   id: ethereumAddress,
   token: exports_external.object({
@@ -131748,6 +131889,7 @@ var TokenSaleReadGraphSchema = TokenSaleGraphItemSchema.extend({
   vestingDuration: exports_external.string().nullable(),
   vestingCliff: exports_external.string().nullable(),
   termsHash: exports_external.string().nullable(),
+  failedAt: timestamp().nullable(),
   paymentCurrencies: exports_external.array(TokenSalePaymentCurrencySchema),
   purchases: exports_external.array(TokenSalePurchaseSchema),
   whitelistEntries: exports_external.array(TokenSaleWhitelistEntrySchema),
@@ -131755,14 +131897,66 @@ var TokenSaleReadGraphSchema = TokenSaleGraphItemSchema.extend({
     id: ethereumAddress
   }).nullable()
 });
+var TokenSalePositionCurrencyAmountSchema = exports_external.object({
+  currency: ethereumAddress,
+  amount: bigDecimal(),
+  amountExact: apiBigInt
+});
+var TokenSalePositionPendingReasonSchema = exports_external.enum([
+  "pending_finalization",
+  "before_cliff",
+  "fully_withdrawn",
+  "not_started"
+]);
+var TokenSalePositionSchema = exports_external.object({
+  buyerAddresses: exports_external.array(ethereumAddress),
+  purchased: bigDecimal(),
+  purchasedExact: apiBigInt,
+  withdrawn: bigDecimal(),
+  withdrawnExact: apiBigInt,
+  claimableNow: bigDecimal(),
+  claimableNowExact: apiBigInt,
+  nextUnlockAt: timestamp().nullable(),
+  pendingReason: TokenSalePositionPendingReasonSchema.nullable(),
+  contributedByCurrency: exports_external.array(TokenSalePositionCurrencyAmountSchema),
+  refundableByCurrency: exports_external.array(TokenSalePositionCurrencyAmountSchema)
+});
 var TokenSaleReadResponseSchema = TokenSaleReadGraphSchema.extend({
-  hasAcknowledgedTerms: exports_external.boolean()
+  hasAcknowledgedTerms: exports_external.boolean(),
+  position: TokenSalePositionSchema.nullable(),
+  eligibility: EligibilityVerdictItemSchema.nullable(),
+  accessControl: accessControlSchema().nullable(),
+  coverPhotoUrl: exports_external.string().nullable(),
+  logoUrl: exports_external.string().nullable()
+});
+var CapTableKycStatusSchema = exports_external.enum(["registered", "pending", "unknown"]);
+var CapTableRowSchema = exports_external.object({
+  buyer: exports_external.object({ id: ethereumAddress }),
+  identityAddress: ethereumAddress.nullable(),
+  name: exports_external.string().nullable(),
+  kycStatus: CapTableKycStatusSchema,
+  country: isoCountryCode.nullable(),
+  paymentCurrency: exports_external.object({ id: ethereumAddress, symbol: exports_external.string().nullable() }).nullable(),
+  purchaseCount: exports_external.number().int(),
+  totalPaymentAmount: bigDecimal(),
+  totalPaymentAmountExact: apiBigInt,
+  totalTokenAmount: bigDecimal(),
+  totalTokenAmountExact: apiBigInt
+});
+var TokenSaleCapTableResponseSchema = exports_external.object({
+  saleAddress: ethereumAddress,
+  tokenAddress: ethereumAddress.nullable(),
+  investorCount: exports_external.number().int(),
+  totalTokenAllocated: bigDecimal(),
+  totalTokenAllocatedExact: apiBigInt,
+  rows: exports_external.array(CapTableRowSchema)
 });
 var TOKEN_SALE_COLLECTION_FIELDS = {
   saleStartTime: dateField(),
   saleEndTime: dateField(),
   totalSold: numberField(),
   systemAddon: addressField(),
+  token: addressField({ defaultOperator: "eq" }),
   createdAt: dateField()
 };
 var TokenSaleV2ListInputSchema = createCollectionInputSchema(TOKEN_SALE_COLLECTION_FIELDS, {
@@ -131770,6 +131964,137 @@ var TokenSaleV2ListInputSchema = createCollectionInputSchema(TOKEN_SALE_COLLECTI
   globalSearch: true
 });
 var TokenSaleV2ListOutputSchema = createPaginatedResponse(TokenSaleListItemSchema);
+var TOKEN_SALE_INVESTMENT_COLLECTION_FIELDS = {
+  saleStartTime: dateField(),
+  saleEndTime: dateField(),
+  totalSold: numberField(),
+  createdAt: dateField(),
+  investableNow: booleanField({ sortable: false })
+};
+var TokenSaleInvestmentsV2ListInputSchema = createCollectionInputSchema(TOKEN_SALE_INVESTMENT_COLLECTION_FIELDS, {
+  defaultSort: "saleStartTime",
+  globalSearch: true
+});
+var TokenSaleInvestmentItemSchema = TokenSaleListItemSchema.extend({
+  position: TokenSalePositionSchema,
+  participated: exports_external.boolean(),
+  discoverable: exports_external.boolean(),
+  coverPhotoUrl: exports_external.string().nullable(),
+  logoUrl: exports_external.string().nullable()
+});
+var TokenSaleInvestmentsV2ListOutputSchema = createPaginatedResponse(TokenSaleInvestmentItemSchema);
+var TokenSaleAlertSchema = exports_external.enum(["near-cap", "presale-ended", "awaiting-finalization", "grace-closing"]);
+var TokenSaleOperationsItemSchema = TokenSaleListItemSchema.extend({
+  alert: TokenSaleAlertSchema.nullable(),
+  investorCount: exports_external.number().int().nonnegative()
+});
+var TOKEN_SALE_OPERATIONS_COLLECTION_FIELDS = {
+  saleStartTime: dateField(),
+  saleEndTime: dateField(),
+  totalSold: numberField(),
+  createdAt: dateField()
+};
+var TokenSaleV2OperationsInputSchema = createCollectionInputSchema(TOKEN_SALE_OPERATIONS_COLLECTION_FIELDS, {
+  defaultSort: "saleStartTime",
+  globalSearch: true
+});
+var TokenSaleV2OperationsOutputSchema = createPaginatedResponse(TokenSaleOperationsItemSchema);
+var tokenSaleDocumentTypes = ["cover_photo", "sale_logo", "brochure", "faq", "other"];
+var TokenSaleDocumentTypeSchema = exports_external.enum(tokenSaleDocumentTypes).meta({
+  description: "Type of token-sale marketing document",
+  examples: ["cover_photo", "sale_logo", "brochure"]
+});
+var tokenSaleDocumentType = () => TokenSaleDocumentTypeSchema;
+var TokenSaleDocumentTypeArraySchema = exports_external.array(TokenSaleDocumentTypeSchema).min(1, "At least one document type must be specified").meta({ description: "List of token-sale document types", examples: [["cover_photo", "brochure"]] });
+var TOKEN_SALE_DOCUMENTS_COLLECTION_FIELDS = {
+  fileName: textField(),
+  documentType: enumField(tokenSaleDocumentTypes, { facetable: true }),
+  visibility: enumField(tokenDocumentVisibilities, { facetable: true }),
+  mimeType: textField({ facetable: true }),
+  isLatest: booleanField({ facetable: true }),
+  fileSize: numberField(),
+  uploadedAt: dateField()
+};
+var TokenSaleDocumentsV2ListInputSchema = createCollectionInputSchema(TOKEN_SALE_DOCUMENTS_COLLECTION_FIELDS, {
+  defaultSort: "uploadedAt"
+});
+var TokenSaleDocumentsV2ListItemSchema = exports_external.object({
+  id: exports_external.string(),
+  saleAddress: exports_external.string(),
+  documentType: tokenSaleDocumentType(),
+  visibility: tokenDocumentVisibility(),
+  groupId: exports_external.string(),
+  versionNumber: exports_external.number(),
+  isLatest: exports_external.boolean(),
+  fileName: exports_external.string(),
+  fileSize: exports_external.number(),
+  mimeType: exports_external.string(),
+  title: exports_external.string().nullable(),
+  description: exports_external.string().nullable(),
+  fileHash: exports_external.string().nullable(),
+  uploadedAt: timestamp(),
+  uploadedBy: exports_external.string().nullable(),
+  thumbnailUrl: exports_external.string().url().nullable()
+});
+var TokenSaleDocumentsV2ListOutputSchema = createPaginatedResponse(TokenSaleDocumentsV2ListItemSchema);
+var TokenSaleDocumentGetUploadUrlBodySchema = exports_external.object({
+  documentType: tokenSaleDocumentType(),
+  fileName: exports_external.string().min(1, "File name is required").max(255, "File name too long"),
+  fileSize: exports_external.number().int().positive("File size must be positive").max(TOKEN_DOCUMENT_MAX_FILE_SIZE, "File size must be under 50MB"),
+  mimeType: tokenDocumentMimeType,
+  visibility: tokenDocumentVisibility(),
+  title: exports_external.string().max(500, "Title too long").optional(),
+  description: exports_external.string().max(2000, "Description too long").optional()
+});
+var TokenSaleDocumentGetUploadUrlOutputSchema = exports_external.object({
+  uploadUrl: exports_external.string().url(),
+  objectKey: exports_external.string(),
+  expiresAt: timestamp(),
+  method: exports_external.literal("PUT"),
+  headers: exports_external.record(exports_external.string(), exports_external.string())
+});
+var TokenSaleDocumentConfirmUploadBodySchema = exports_external.object({
+  objectKey: exports_external.string().min(1, "Object key is required"),
+  documentType: tokenSaleDocumentType(),
+  fileName: exports_external.string().min(1, "File name is required").max(255, "File name too long"),
+  fileSize: exports_external.number().int().positive("File size must be positive").max(TOKEN_DOCUMENT_MAX_FILE_SIZE, "File size must be under 50MB"),
+  mimeType: tokenDocumentMimeType,
+  visibility: tokenDocumentVisibility(),
+  title: exports_external.string().max(500, "Title too long").optional(),
+  description: exports_external.string().max(2000, "Description too long").optional(),
+  replaceGroupId: exports_external.string().optional()
+});
+var TokenSaleDocumentConfirmUploadOutputSchema = exports_external.object({
+  id: exports_external.string(),
+  saleAddress: exports_external.string(),
+  documentType: tokenSaleDocumentType(),
+  visibility: tokenDocumentVisibility(),
+  groupId: exports_external.string(),
+  versionNumber: exports_external.number(),
+  isLatest: exports_external.boolean(),
+  fileName: exports_external.string(),
+  fileSize: exports_external.number(),
+  mimeType: exports_external.string(),
+  title: exports_external.string().nullable(),
+  description: exports_external.string().nullable(),
+  fileHash: exports_external.string().nullable(),
+  uploadedAt: timestamp(),
+  uploadedBy: exports_external.string().nullable()
+});
+var TokenSaleDocumentGetDownloadUrlParamsSchema = exports_external.object({
+  saleAddress: exports_external.string(),
+  documentId: exports_external.string().min(1, "Document ID is required")
+});
+var TokenSaleDocumentGetDownloadUrlOutputSchema = exports_external.object({
+  downloadUrl: exports_external.string().url(),
+  fileName: exports_external.string(),
+  mimeType: exports_external.string(),
+  expiresAt: timestamp()
+});
+var TokenSaleDocumentDeleteParamsSchema = exports_external.object({
+  saleAddress: exports_external.string(),
+  documentId: exports_external.string().min(1, "Document ID is required")
+});
 var TAGS26 = [V2_TAG.tokenSale];
 var list16 = v2Contract.route({
   method: "GET",
@@ -131778,6 +132103,20 @@ var list16 = v2Contract.route({
   successDescription: "Paginated array of token sales with total count and faceted filter values.",
   tags: [...TAGS26]
 }).input(v2Input.query(TokenSaleV2ListInputSchema)).output(TokenSaleV2ListOutputSchema);
+var investments = v2Contract.route({
+  method: "GET",
+  path: "/addons/token-sale-investments",
+  description: "List the authenticated caller's token-sale investments: every sale their wallet set (executor + signing EOAs) participated in, plus sales they are coarsely eligible for but have not bought. Each row carries the caller's aggregate position (purchased / claimable-now / refundable per currency). Buyer-scoped and caller-own only; never accepts an impersonation target. Scoped to the active chain (resolved via system context). The response `status` field is computed per request from the indexed status plus the active chain's timestamp, so it is not exposed as a filterable or facetable field.",
+  successDescription: "Paginated array of the caller's investments with total count and faceted filter values.",
+  tags: [...TAGS26]
+}).input(v2Input.query(TokenSaleInvestmentsV2ListInputSchema)).output(TokenSaleInvestmentsV2ListOutputSchema);
+var operationsList = v2Contract.route({
+  method: "GET",
+  path: "/addons/token-sale-operations",
+  description: "List every token sale across all tokens in the tenant for the cross-token Operations view. Scoped registry-wide via the addon-registry parent address (NOT a single systemAddon factory) and gated on a system-level ops role (admin / tokenManager) so a caller privileged on one token cannot enumerate other tokens' sales. Each row carries an operations `alert` (near-cap, presale-ended, awaiting-finalization, grace-closing) and the distinct investor count. Sortable by saleStartTime, saleEndTime, createdAt, totalSold. Scoped to the active chain; the `status` and `alert` fields are computed per request from the chain clock and are therefore not filterable or facetable.",
+  successDescription: "Paginated array of token sales across all tenant tokens with operations alerts and investor counts.",
+  tags: [...TAGS26]
+}).input(v2Input.query(TokenSaleV2OperationsInputSchema)).output(TokenSaleV2OperationsOutputSchema);
 var read12 = v2Contract.route({
   method: "GET",
   path: "/addons/token-sales/{saleAddress}",
@@ -131788,6 +132127,13 @@ var read12 = v2Contract.route({
   params: TokenSaleReadInputSchema,
   query: TokenSaleReadQuerySchema.optional()
 })).output(createSingleResponse(TokenSaleReadResponseSchema));
+var capTable = v2Contract.route({
+  method: "GET",
+  path: "/addons/token-sales/{saleAddress}/cap-table",
+  description: "Fetch the manager-gated cap table for a token sale: per-buyer identity, KYC status, and aggregated allocation. Returns investor PII and is restricted to a caller holding SALE_ADMIN or FUNDS_MANAGER (or admin / tokenManager) on the sold token's access manager; non-managers are rejected.",
+  successDescription: "Identity-resolved cap table for the sale's buyers.",
+  tags: [...TAGS26]
+}).input(exports_external.object({ params: TokenSaleReadInputSchema })).output(createSingleResponse(TokenSaleCapTableResponseSchema));
 var currentTime = v2Contract.route({
   method: "GET",
   path: "/addons/token-sales/current-time",
@@ -131809,6 +132155,13 @@ var activate = v2Contract.route({
   successDescription: "Token sale activated on-chain",
   tags: [...TAGS26]
 }).meta({ contractErrors: [...COMMON_CONTRACT_ERRORS, "DALP-4250", "DALP-4251"] }).input(v2Input.body(TokenSaleActivateInputSchema)).output(createAsyncBlockchainMutationResponse(TokenSaleActivateOutputSchema));
+var transitionToPublic = v2Contract.route({
+  method: "POST",
+  path: "/addons/token-sale-public-transitions",
+  description: "Transition a token sale from its presale phase to the public sale phase",
+  successDescription: "Token sale transitioned to public sale on-chain",
+  tags: [...TAGS26]
+}).meta({ contractErrors: [...COMMON_CONTRACT_ERRORS, "DALP-4182", "DALP-4260"] }).input(v2Input.body(TokenSaleTransitionToPublicInputSchema)).output(createAsyncBlockchainMutationResponse(TokenSaleTransitionToPublicOutputSchema));
 var buy = v2Contract.route({
   method: "POST",
   path: "/addons/token-sale-purchases",
@@ -131935,12 +132288,65 @@ var setTermsHash = v2Contract.route({
   successDescription: "Terms hash set on-chain",
   tags: [...TAGS26]
 }).meta({ contractErrors: [...COMMON_CONTRACT_ERRORS] }).input(v2Input.body(TokenSaleSetTermsHashInputSchema)).output(createAsyncBlockchainMutationResponse(TokenSaleSetTermsHashOutputSchema));
+var grantRoleByParticipant = v2Contract.route({
+  method: "POST",
+  path: "/addons/token-sale-participant-role-grants",
+  description: "Grant a sale role (Sale Admin / Funds Manager) to every wallet owned by a participant, on the sold token's access manager",
+  successDescription: "Role grant submitted on-chain for the participant's wallets",
+  tags: [...TAGS26]
+}).meta({ contractErrors: [...COMMON_CONTRACT_ERRORS] }).input(v2Input.body(TokenSaleGrantRoleByParticipantInputSchema)).output(createAsyncBlockchainMutationResponse(TokenSaleGrantRoleByParticipantOutputSchema));
+var revokeRoleByParticipant = v2Contract.route({
+  method: "DELETE",
+  path: "/addons/token-sale-participant-role-grants",
+  description: "Revoke a sale role (Sale Admin / Funds Manager) from every wallet owned by a participant, on the sold token's access manager",
+  successDescription: "Role revoke submitted on-chain for the participant's wallets",
+  tags: [...TAGS26]
+}).meta({ contractErrors: [...COMMON_CONTRACT_ERRORS] }).input(v2Input.body(TokenSaleRevokeRoleByParticipantInputSchema)).output(createAsyncBlockchainMutationResponse(TokenSaleRevokeRoleByParticipantOutputSchema));
+var documentsGetUploadUrl = v2Contract.route({
+  method: "POST",
+  path: "/addons/token-sales/{saleAddress}/document-uploads",
+  description: "Get presigned URL for direct token-sale document upload to object storage.",
+  successDescription: "Presigned URL for upload.",
+  tags: [...TAGS26]
+}).input(v2Input.paramsBody(TokenSaleReadInputSchema, TokenSaleDocumentGetUploadUrlBodySchema)).output(createSingleResponse(TokenSaleDocumentGetUploadUrlOutputSchema));
+var documentsConfirmUpload = v2Contract.route({
+  method: "POST",
+  path: "/addons/token-sales/{saleAddress}/documents",
+  description: "Create token-sale document record after file has been uploaded via presigned URL.",
+  successDescription: "Document record created successfully.",
+  tags: [...TAGS26]
+}).input(v2Input.paramsBody(TokenSaleReadInputSchema, TokenSaleDocumentConfirmUploadBodySchema)).output(createSingleResponse(TokenSaleDocumentConfirmUploadOutputSchema));
+var documentsList = v2Contract.route({
+  method: "GET",
+  path: "/addons/token-sales/{saleAddress}/documents",
+  description: "List documents for a token sale with pagination, sorting, and filtering. Visibility-tiered: public always visible; holders tier requires token balance or purchase position; restricted tier requires sale manager.",
+  successDescription: "Paginated array of token-sale documents with total count and faceted filter values.",
+  tags: [...TAGS26]
+}).input(v2Input.paramsQuery(TokenSaleReadInputSchema, TokenSaleDocumentsV2ListInputSchema)).output(TokenSaleDocumentsV2ListOutputSchema);
+var documentsGetDownloadUrl = v2Contract.route({
+  method: "POST",
+  path: "/addons/token-sales/{saleAddress}/documents/{documentId}/downloads",
+  description: "Get presigned URL for secure token-sale document download.",
+  successDescription: "Presigned URL for download.",
+  tags: [...TAGS26]
+}).input(v2Input.params(TokenSaleDocumentGetDownloadUrlParamsSchema)).output(createSingleResponse(TokenSaleDocumentGetDownloadUrlOutputSchema));
+var documentsDelete = v2Contract.route({
+  method: "DELETE",
+  path: "/addons/token-sales/{saleAddress}/documents/{documentId}",
+  description: "Delete a token-sale document.",
+  successDescription: "Document deleted successfully.",
+  tags: [...TAGS26]
+}).input(v2Input.params(TokenSaleDocumentDeleteParamsSchema)).output(DeleteResponseSchema);
 var tokenSaleV2Contract = {
   list: list16,
+  investments,
+  operationsList,
   read: read12,
+  capTable,
   currentTime,
   create: create8,
   activate,
+  transitionToPublic,
   buy,
   configureVesting,
   end,
@@ -131958,7 +132364,14 @@ var tokenSaleV2Contract = {
   removePaymentCurrency,
   setSoftCap,
   setPurchaseLimits,
-  setTermsHash
+  setTermsHash,
+  grantRoleByParticipant,
+  revokeRoleByParticipant,
+  documentsGetUploadUrl,
+  documentsConfirmUpload,
+  documentsList,
+  documentsGetDownloadUrl,
+  documentsDelete
 };
 var XVP_COLLECTION_FIELDS = {
   name: textField(),
@@ -134725,67 +135138,6 @@ var ActivityListV2InputSchema = createCollectionInputSchema(ACTIVITY_LIST_COLLEC
   globalSearch: true
 });
 var ActivityListV2OutputSchema = createPaginatedResponse(ActivityEventV2ItemSchema);
-var EligibilityReadParamsSchema = exports_external.object({
-  participantId: exports_external.string().min(1).meta({
-    description: "Identifier of the participant whose global eligibility is being evaluated."
-  })
-});
-var EligibilityReadQuerySchema = exports_external.object({
-  live: exports_external.union([exports_external.boolean(), exports_external.literal("true"), exports_external.literal("false")]).optional().transform((value22) => value22 === true || value22 === "true").pipe(exports_external.boolean()).default(false).meta({
-    description: "When true, bypass the indexer and evaluate the verdict via live readContract against installed compliance modules. Cold-RPC, multi-second p95 latency; reserved for the dapp's explicit Recheck action."
-  })
-});
-var EligibilityVerdictSchema = exports_external.enum(["allowed", "needs-action", "blocked"]).meta({
-  description: "Top-level eligibility verdict. `allowed` means the participant satisfies every installed rule; `needs-action` flags missing/expired claims or allow-list gaps; `blocked` indicates at least one block-list match."
-});
-var EligibilitySourceSchema = exports_external.enum(["indexer", "live"]).meta({
-  description: "Where the verdict was evaluated."
-});
-var EligibilityReasonCodeSchema = exports_external.enum([
-  "address-blocked",
-  "country-blocked",
-  "country-not-allowed",
-  "identity-blocked",
-  "identity-not-verified",
-  "claim-missing",
-  "claim-revoked",
-  "claim-expired",
-  "live-timeout"
-]).meta({ description: "Reason code attached to a single rule failure." });
-var EligibilityReasonDetailsSchema = exports_external.object({
-  topic: exports_external.string().optional().meta({ description: "Claim topic name (for claim-* reason codes)." }),
-  expiresAt: timestamp().optional().meta({ description: "Timestamp the related claim expired or expires." }),
-  countryCode: isoCountryCodeNumeric.optional().meta({
-    description: "ISO numeric country code involved in a country-list reason."
-  })
-}).meta({ description: "Optional reason-specific context." });
-var EligibilityReasonSchema = exports_external.object({
-  code: EligibilityReasonCodeSchema,
-  moduleTypeId: complianceTypeId().optional().meta({
-    description: "TypeId of the module that produced this reason, when known."
-  }),
-  instanceAddress: ethereumAddress.optional().meta({
-    description: "Address of the specific module instance that produced this reason."
-  }),
-  details: EligibilityReasonDetailsSchema.optional()
-});
-var WalletEligibilityVerdictItemSchema = exports_external.object({
-  verdict: EligibilityVerdictSchema,
-  source: EligibilitySourceSchema,
-  checkedAt: timestamp().meta({
-    description: "Timestamp at which the verdict was evaluated."
-  }),
-  wallet: ethereumAddress.nullable().meta({
-    description: "Wallet address the verdict was evaluated against. Null when no wallet is resolvable yet."
-  }),
-  reasons: exports_external.array(EligibilityReasonSchema)
-});
-var EligibilityVerdictItemSchema = WalletEligibilityVerdictItemSchema.extend({
-  wallets: exports_external.array(WalletEligibilityVerdictItemSchema).optional().meta({
-    description: "Per-wallet verdict breakdown when the participant owns multiple wallets, such as an EOA and smart wallet pair."
-  })
-});
-var EligibilityReadOutputSchema = createSingleResponse(EligibilityVerdictItemSchema);
 var read20 = v2Contract.route({
   method: "GET",
   path: "/participants/{participantId}/compliance-eligibility",
@@ -136455,7 +136807,7 @@ var grantRole = v2Contract.route({
   successDescription: "Roles granted successfully.",
   tags: [V2_TAG.accessManager]
 }).meta({ contractErrors: [...ACCESS_ERRORS] }).input(v2Input.paramsBody(exports_external.object({ address: GrantRoleInputSchema.shape.account }), GrantRoleInputSchema.omit({ account: true }))).output(createAsyncBlockchainMutationResponse(GrantRoleOutputSchema));
-var grantRoleByParticipant = v2Contract.route({
+var grantRoleByParticipant2 = v2Contract.route({
   method: "POST",
   path: "/system/participants/role-grants",
   description: "Grant a role to every wallet owned by a participant.",
@@ -136469,7 +136821,7 @@ var revokeRole = v2Contract.route({
   successDescription: "Roles revoked successfully.",
   tags: [V2_TAG.accessManager]
 }).meta({ contractErrors: [...ACCESS_ERRORS] }).input(v2Input.paramsBody(exports_external.object({ address: RevokeRoleInputSchema.shape.account }), RevokeRoleInputSchema.omit({ account: true }))).output(createAsyncBlockchainMutationResponse(RevokeRoleOutputSchema));
-var revokeRoleByParticipant = v2Contract.route({
+var revokeRoleByParticipant2 = v2Contract.route({
   method: "POST",
   path: "/system/participants/role-revocations",
   description: "Revoke a role from every wallet owned by a participant.",
@@ -136480,9 +136832,9 @@ var accessManagerV2Contract = {
   rolesList,
   rolesRead,
   grantRole,
-  grantRoleByParticipant,
+  grantRoleByParticipant: grantRoleByParticipant2,
   revokeRole,
-  revokeRoleByParticipant,
+  revokeRoleByParticipant: revokeRoleByParticipant2,
   participantRolesView
 };
 var BundlerStatusSchema = exports_external.object({
@@ -138550,6 +138902,7 @@ var TOKEN_COLLECTION_FIELDS = {
   templateId: textField({ sortable: false, defaultOperator: "eq" }),
   templateSlug: textField({ sortable: false, defaultOperator: "eq" }),
   paused: enumField(["active", "paused"], { sortable: false }),
+  governedByCaller: booleanField({ sortable: false, facetable: false }),
   createdAt: dateField()
 };
 var BaseInputSchema = createCollectionInputSchema(TOKEN_COLLECTION_FIELDS, {
@@ -139782,7 +140135,7 @@ var grantRole2 = v2Contract.route({
   exports_external.object(TokenGrantRoleInputSchema.options[0].shape).omit({ tokenAddress: true }),
   exports_external.object(TokenGrantRoleInputSchema.options[1].shape).omit({ tokenAddress: true })
 ]))).output(createAsyncBlockchainMutationResponse(TokenGrantRoleOutputSchema));
-var grantRoleByParticipant2 = v2Contract.route({
+var grantRoleByParticipant3 = v2Contract.route({
   method: "POST",
   path: "/tokens/{tokenAddress}/participant-role-grants",
   description: "Grant a role to every wallet owned by a participant on a token.",
@@ -139802,7 +140155,7 @@ var revokeRole2 = v2Contract.route({
   exports_external.object(TokenRevokeRoleInputSchema.options[0].shape).omit({ tokenAddress: true }),
   exports_external.object(TokenRevokeRoleInputSchema.options[1].shape).omit({ tokenAddress: true })
 ]))).output(createAsyncBlockchainMutationResponse(TokenRevokeRoleOutputSchema));
-var revokeRoleByParticipant2 = v2Contract.route({
+var revokeRoleByParticipant3 = v2Contract.route({
   method: "POST",
   path: "/tokens/{tokenAddress}/participant-role-revocations",
   description: "Revoke a role from every wallet owned by a participant on a token.",
@@ -139901,9 +140254,9 @@ var tokenV2MutationsContract = {
   setModuleScope,
   configureScopedComplianceModule,
   grantRole: grantRole2,
-  grantRoleByParticipant: grantRoleByParticipant2,
+  grantRoleByParticipant: grantRoleByParticipant3,
   revokeRole: revokeRole2,
-  revokeRoleByParticipant: revokeRoleByParticipant2,
+  revokeRoleByParticipant: revokeRoleByParticipant3,
   claimIssue: claimIssue2,
   claimRevoke: claimRevoke2,
   setMetadata,
@@ -143268,28 +143621,28 @@ var versionRequestUpdate = v2Contract.route({
   successDescription: "Update request created successfully.",
   tags: [V2_TAG.userKyc]
 }).input(v2Input.paramsBody(exports_external.object({ versionId: KycProfileVersionRequestUpdateInputSchema.shape.versionId }), KycProfileVersionRequestUpdateInputSchema.omit({ versionId: true }))).output(createSingleResponse(KycProfileVersionRequestUpdateOutputSchema));
-var documentsList = v2Contract.route({
+var documentsList2 = v2Contract.route({
   method: "GET",
   path: "/kyc-profile-versions/{versionId}/documents",
   description: "List documents attached to a KYC profile version with pagination, sorting, and filtering. Sortable by fileName, documentType, fileSize, uploadedAt.",
   successDescription: "Paginated array of KYC documents with total count and faceted filter values.",
   tags: [V2_TAG.userKyc]
 }).input(v2Input.paramsQuery(exports_external.object({ versionId: exports_external.string().min(1) }), KycProfileVersionDocumentsV2ListInputSchema)).output(KycProfileVersionDocumentsV2ListOutputSchema);
-var documentsDelete = v2Contract.route({
+var documentsDelete2 = v2Contract.route({
   method: "DELETE",
   path: "/kyc-profile-versions/{versionId}/documents/{documentId}",
   description: "Delete a document from a draft KYC profile version.",
   successDescription: "KYC document deleted successfully.",
   tags: [V2_TAG.userKyc]
 }).input(v2Input.params(KycProfileVersionDocumentDeleteInputSchema)).output(DeleteResponseSchema);
-var documentsConfirmUpload = v2Contract.route({
+var documentsConfirmUpload2 = v2Contract.route({
   method: "POST",
   path: "/kyc-profile-versions/{versionId}/documents",
   description: "Upload a KYC document through DAPI so the payload is encrypted before object storage.",
   successDescription: "Document uploaded successfully.",
   tags: [V2_TAG.userKyc]
 }).input(v2Input.paramsBody(exports_external.object({ versionId: KycProfileVersionDocumentConfirmUploadV2InputSchema.shape.versionId }), KycProfileVersionDocumentConfirmUploadV2InputSchema.omit({ versionId: true }))).output(createSingleResponse(KycProfileVersionDocumentConfirmUploadOutputSchema));
-var documentsGetDownloadUrl = v2Contract.route({
+var documentsGetDownloadUrl2 = v2Contract.route({
   method: "POST",
   path: "/kyc-profile-versions/{versionId}/documents/{documentId}/downloads",
   description: "Generate a presigned URL for downloading a KYC document.",
@@ -143315,10 +143668,10 @@ var kycV2Contract = {
     requestUpdate: versionRequestUpdate
   },
   documents: {
-    list: documentsList,
-    delete: documentsDelete,
-    confirmUpload: documentsConfirmUpload,
-    getDownloadUrl: documentsGetDownloadUrl
+    list: documentsList2,
+    delete: documentsDelete2,
+    confirmUpload: documentsConfirmUpload2,
+    getDownloadUrl: documentsGetDownloadUrl2
   },
   actionRequest: { fulfill: actionRequestFulfill }
 };
@@ -144210,7 +144563,7 @@ function normalizeDalpBaseUrl(url2) {
 }
 var package_default = {
   name: "@settlemint/dalp-sdk",
-  version: "3.0.6-main.28333103539",
+  version: "3.0.6-main.28339035451",
   private: false,
   description: "Fully typed SDK for the DALP tokenization platform API",
   homepage: "https://settlemint.com",
@@ -145391,6 +145744,7 @@ var DAPI_ROUTE_ERROR_IDS = {
   "DALP-0676": "DALP-0676",
   "DALP-0677": "DALP-0677",
   "DALP-0678": "DALP-0678",
+  "DALP-0679": "DALP-0679",
   "DALP-9070": "DALP-9070",
   "DALP-9071": "DALP-9071",
   "DALP-9072": "DALP-9072",
@@ -145454,7 +145808,7 @@ var failedStateSet = new Set(FAILED_TRANSACTION_STATES);
 // package.json
 var package_default2 = {
   name: "@settlemint/dalp-cli",
-  version: "3.0.6-main.28333103539",
+  version: "3.0.6-main.28339035451",
   private: false,
   description: "CLI for the Digital Asset Lifecycle Platform — manage tokens, identities, compliance, and more from the command line.",
   homepage: "https://settlemint.com",
@@ -163457,6 +163811,34 @@ var ENTRIES_INDEX2 = {
     owner: "dapi",
     orpcCode: "CUSTODY_PROVIDER_IMMUTABLE"
   },
+  "DALP-0679": {
+    id: "DALP-0679",
+    kind: "route",
+    category: "client",
+    status: 400,
+    retryable: false,
+    expectedClientError: true,
+    public: {
+      message: "The sale token cannot be withdrawn as a payment currency",
+      why: "The selected withdrawal currency is the token being sold; the contract reserves those tokens for buyers and reverts CannotWithdrawSaleToken.",
+      fix: "Choose one of the sale's payment currencies instead of the sale token, then retry."
+    },
+    observability: {
+      severity: "info",
+      otelEventName: "dapi.error",
+      metricAttributeKey: "dapi.error.id",
+      dimensions: [
+        "error.id",
+        "error.category",
+        "surface",
+        "route",
+        "status_class",
+        "retryable"
+      ]
+    },
+    owner: "dapi",
+    orpcCode: "TOKEN_SALE_CANNOT_WITHDRAW_SALE_TOKEN_CURRENCY"
+  },
   "DALP-1001": {
     id: "DALP-1001",
     kind: "contract",
@@ -179292,7 +179674,7 @@ var ENTRIES_INDEX2 = {
     kind: "contract",
     category: "contract",
     status: 422,
-    retryable: false,
+    retryable: true,
     expectedClientError: true,
     public: {
       message: "Slippage exceeded",
@@ -189072,6 +189454,7 @@ var DALP_ERROR_TYPED_FIELD_NAMES2 = {
   "DALP-0676": [],
   "DALP-0677": [],
   "DALP-0678": [],
+  "DALP-0679": [],
   "DALP-1001": [
     "args",
     "correlationId",
@@ -199148,6 +199531,7 @@ var DALP_ERROR_DATA_SCHEMA_BY_ID2 = {
   "DALP-0676": DALP_ORPC_ERROR_DATA_WIRE_SCHEMA2,
   "DALP-0677": DALP_ORPC_ERROR_DATA_WIRE_SCHEMA2,
   "DALP-0678": DALP_ORPC_ERROR_DATA_WIRE_SCHEMA2,
+  "DALP-0679": DALP_ORPC_ERROR_DATA_WIRE_SCHEMA2,
   "DALP-1001": DALP_ORPC_ERROR_DATA_BASE_SCHEMA2.extend({
     args: exports_external.record(exports_external.string(), exports_external.string()),
     correlationId: exports_external.string(),
@@ -214521,6 +214905,12 @@ tokenSalesCommand.command("list", {
     return c.var.orpc.addons.tokenSale.list({ query: {} });
   }
 });
+tokenSalesCommand.command("investments", {
+  description: "List the authenticated caller's token-sale investments (participated + coarsely-eligible sales)",
+  run(c) {
+    return c.var.orpc.addons.tokenSale.investments({ query: {} });
+  }
+});
 tokenSalesCommand.command("read", {
   description: "Read token sale details",
   args: exports_external.object({ address: exports_external.string().describe("Token sale address") }),
@@ -214528,6 +214918,19 @@ tokenSalesCommand.command("read", {
     return c.var.orpc.addons.tokenSale.read({ params: { saleAddress: c.args.address } });
   }
 });
+tokenSalesCommand.command("operations", {
+  description: "List every token sale across all tokens (cross-token Operations view; admin / tokenManager only)",
+  run(c) {
+    return c.var.orpc.addons.tokenSale.operationsList({ query: {} });
+  }
+});
+tokenSalesCommand.command("cap-table", {
+  description: "Read the manager-gated cap table (investor identity + KYC + allocation) for a token sale",
+  args: exports_external.object({ address: exports_external.string().describe("Token sale address") }),
+  run(c) {
+    return c.var.orpc.addons.tokenSale.capTable({ params: { saleAddress: c.args.address } });
+  }
+});
 tokenSalesCommand.command("create", {
   description: "Create a token sale",
   options: exports_external.object({
@@ -214547,6 +214950,13 @@ tokenSalesCommand.command("activate", {
     return c.var.orpc.addons.tokenSale.activate({ body: { saleAddress: c.args.address } });
   }
 });
+tokenSalesCommand.command("transition-to-public", {
+  description: "Transition a token sale from presale to public sale",
+  args: exports_external.object({ address: exports_external.string().describe("Token sale address") }),
+  run(c) {
+    return c.var.orpc.addons.tokenSale.transitionToPublic({ body: { saleAddress: c.args.address } });
+  }
+});
 tokenSalesCommand.command("buy", {
   description: "Buy tokens in a sale",
   options: exports_external.object({
@@ -214780,12 +215190,158 @@ tokenSalesCommand.command("set-terms-hash", {
     });
   }
 });
+tokenSalesCommand.command("grant-role-by-participant", {
+  description: "Grant a sale role (saleAdmin / fundsManager) to every wallet owned by a participant",
+  options: exports_external.object({
+    address: exports_external.string().describe("Token sale address"),
+    role: exports_external.enum(["saleAdmin", "fundsManager"]).describe("Sale role to grant"),
+    participantId: exports_external.string().optional().describe("Participant ID"),
+    identityAddress: exports_external.string().optional().describe("Identity contract address (alternative to --participant-id)")
+  }),
+  run(c) {
+    if (c.options.identityAddress) {
+      return c.var.orpc.addons.tokenSale.grantRoleByParticipant({
+        body: { saleAddress: c.options.address, role: c.options.role, identityAddress: c.options.identityAddress }
+      });
+    }
+    if (!c.options.participantId) {
+      throw new Error("Either --participant-id or --identity-address is required");
+    }
+    return c.var.orpc.addons.tokenSale.grantRoleByParticipant({
+      body: { saleAddress: c.options.address, role: c.options.role, participantId: c.options.participantId }
+    });
+  }
+});
+tokenSalesCommand.command("revoke-role-by-participant", {
+  description: "Revoke a sale role (saleAdmin / fundsManager) from every wallet owned by a participant",
+  options: exports_external.object({
+    address: exports_external.string().describe("Token sale address"),
+    role: exports_external.enum(["saleAdmin", "fundsManager"]).describe("Sale role to revoke"),
+    participantId: exports_external.string().optional().describe("Participant ID"),
+    identityAddress: exports_external.string().optional().describe("Identity contract address (alternative to --participant-id)")
+  }),
+  run(c) {
+    if (c.options.identityAddress) {
+      return c.var.orpc.addons.tokenSale.revokeRoleByParticipant({
+        body: { saleAddress: c.options.address, role: c.options.role, identityAddress: c.options.identityAddress }
+      });
+    }
+    if (!c.options.participantId) {
+      throw new Error("Either --participant-id or --identity-address is required");
+    }
+    return c.var.orpc.addons.tokenSale.revokeRoleByParticipant({
+      body: { saleAddress: c.options.address, role: c.options.role, participantId: c.options.participantId }
+    });
+  }
+});
 tokenSalesCommand.command("current-time", {
   description: "Fetch the current chain head timestamp used for token sale scheduling",
   run(c) {
     return c.var.orpc.addons.tokenSale.currentTime({ query: {} });
   }
 });
+tokenSalesCommand.command("documents-get-upload-url", {
+  description: "Get presigned URL for direct token-sale document upload (manager-gated)",
+  options: exports_external.object({
+    saleAddress: exports_external.string().describe("Token sale contract address"),
+    fileName: exports_external.string().describe("File name"),
+    fileSize: exports_external.coerce.number().describe("File size in bytes"),
+    mimeType: exports_external.enum([
+      "application/pdf",
+      "image/jpeg",
+      "image/png",
+      "image/webp",
+      "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+      "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+      "text/csv"
+    ]).describe("MIME type"),
+    documentType: exports_external.enum(["cover_photo", "sale_logo", "brochure", "faq", "other"]).describe("Document type"),
+    visibility: exports_external.enum(["public", "holders", "restricted"]).describe("Visibility tier")
+  }),
+  run(c) {
+    return c.var.orpc.addons.tokenSale.documentsGetUploadUrl({
+      params: { saleAddress: c.options.saleAddress },
+      body: {
+        fileName: c.options.fileName,
+        fileSize: c.options.fileSize,
+        mimeType: c.options.mimeType,
+        documentType: c.options.documentType,
+        visibility: c.options.visibility
+      }
+    });
+  }
+});
+tokenSalesCommand.command("documents-confirm-upload", {
+  description: "Confirm a token-sale document upload after file has been stored (manager-gated)",
+  options: exports_external.object({
+    saleAddress: exports_external.string().describe("Token sale contract address"),
+    objectKey: exports_external.string().describe("Object key returned from documents-get-upload-url"),
+    fileName: exports_external.string().describe("File name"),
+    fileSize: exports_external.coerce.number().describe("File size in bytes"),
+    mimeType: exports_external.enum([
+      "application/pdf",
+      "image/jpeg",
+      "image/png",
+      "image/webp",
+      "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+      "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+      "text/csv"
+    ]).describe("MIME type"),
+    documentType: exports_external.enum(["cover_photo", "sale_logo", "brochure", "faq", "other"]).describe("Document type"),
+    visibility: exports_external.enum(["public", "holders", "restricted"]).describe("Visibility tier"),
+    replaceGroupId: exports_external.string().optional().describe("Group ID of an existing document to replace")
+  }),
+  run(c) {
+    return c.var.orpc.addons.tokenSale.documentsConfirmUpload({
+      params: { saleAddress: c.options.saleAddress },
+      body: {
+        objectKey: c.options.objectKey,
+        fileName: c.options.fileName,
+        fileSize: c.options.fileSize,
+        mimeType: c.options.mimeType,
+        documentType: c.options.documentType,
+        visibility: c.options.visibility,
+        replaceGroupId: c.options.replaceGroupId
+      }
+    });
+  }
+});
+tokenSalesCommand.command("documents-list", {
+  description: "List documents for a token sale (visibility-tiered)",
+  options: exports_external.object({
+    saleAddress: exports_external.string().describe("Token sale contract address")
+  }),
+  run(c) {
+    return c.var.orpc.addons.tokenSale.documentsList({
+      params: { saleAddress: c.options.saleAddress },
+      query: {}
+    });
+  }
+});
+tokenSalesCommand.command("documents-get-download-url", {
+  description: "Get presigned download URL for a token-sale document",
+  options: exports_external.object({
+    saleAddress: exports_external.string().describe("Token sale contract address"),
+    documentId: exports_external.string().describe("Document ID")
+  }),
+  run(c) {
+    return c.var.orpc.addons.tokenSale.documentsGetDownloadUrl({
+      params: { saleAddress: c.options.saleAddress, documentId: c.options.documentId }
+    });
+  }
+});
+tokenSalesCommand.command("documents-delete", {
+  description: "Delete a token-sale document (manager-gated)",
+  options: exports_external.object({
+    saleAddress: exports_external.string().describe("Token sale contract address"),
+    documentId: exports_external.string().describe("Document ID")
+  }),
+  run(c) {
+    return c.var.orpc.addons.tokenSale.documentsDelete({
+      params: { saleAddress: c.options.saleAddress, documentId: c.options.documentId }
+    });
+  }
+});
 
 // src/commands/blockchain-transactions.ts
 var blockchainTransactionsCommand = exports_Cli.create("blockchain-transactions", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@settlemint/dalp-cli",
-  "version": "3.0.6-main.28333103539",
+  "version": "3.0.6-main.28339035451",
   "private": false,
   "description": "CLI for the Digital Asset Lifecycle Platform — manage tokens, identities, compliance, and more from the command line.",
   "homepage": "https://settlemint.com",