@toon-protocol/core 3.0.0 → 3.1.1

package/dist/index.d.ts

@@ -3,6 +3,7 @@ export { I as InvalidEventError, P as PeerDiscoveryError, a as ToonDecodeError,
 import { NostrEvent, Event } from 'nostr-tools/pure';
 import { SimplePool } from 'nostr-tools/pool';
 import { TurboAuthenticatedClient } from '@ardrive/turbo-sdk';
+export { balanceProofFieldsMina, balanceProofHashEvm, balanceProofHashSolana, bigintToBytes32BE, concatBytes, coopCloseHashEvm, eip712DomainSeparatorEvm, hexToBytes, minaHashToField } from '@toon-protocol/settlement-digest';
 
 /**
  * Nostr event kind constants for ILP-related events.
@@ -2483,138 +2484,6 @@ declare function negotiateSettlementChain(requesterChains: string[], responderCh
  */
 declare function resolveTokenForChain(chain: string, requesterPreferredTokens?: Record<string, string>, responderPreferredTokens?: Record<string, string>): string | undefined;
 
-/**
- * Shared balance-proof hash helpers — the single source of truth for the
- * byte/field layout that ALL signers and verifiers across the monorepo depend
- * on:
- *  - the Swap-side signer (`packages/swap/src/payment-channel-signer.ts`)
- *  - the sender-side settlement verifier (`packages/sdk/src/settlement/{evm,solana,mina}.ts`)
- *  - the client-side balance-proof signers (`packages/client/src/signing/{solana,mina}-signer.ts`)
- *
- * Originally extracted from the Swap signer (Story 12.4) into `@toon-protocol/sdk`
- * (Story 12.6 AC-6). Relocated here to `@toon-protocol/core` so the client can
- * consume the canonical hashes WITHOUT taking a dependency on `@toon-protocol/sdk`
- * (the client only depends on core). `@toon-protocol/sdk` re-exports these names
- * unchanged, so Swap and existing SDK consumers are unaffected.
- *
- * Any change to a hash layout here automatically applies to every signer AND
- * verifier — they cannot drift.
- *
- * @module
- */
-/**
- * Convert a hex string (with or without `0x` prefix) to bytes. Rejects
- * odd-length and non-hex input.
- */
-declare function hexToBytes(hex: string): Uint8Array;
-/**
- * Encode a non-negative bigint as 32-byte big-endian. Throws if negative or
- * exceeds 256 bits.
- */
-declare function bigintToBytes32BE(x: bigint): Uint8Array;
-/**
- * Concat N Uint8Arrays into one new Uint8Array.
- */
-declare function concatBytes(...parts: Uint8Array[]): Uint8Array;
-/**
- * Compute the EIP-712 domain separator for the RollingSwapChannel v2 domain:
- *   keccak256(abi.encode(
- *     EIP712DOMAIN_TYPEHASH,
- *     keccak256("RollingSwapChannel"),
- *     keccak256("2"),
- *     chainId,               // uint256, big-endian
- *     verifyingContract      // address, right-aligned in 32 bytes
- *   ))
- *
- * `verifyingContractBytes` MUST be the 20-byte deployed RollingSwapChannel
- * address. Equivalent to OpenZeppelin `EIP712._domainSeparatorV4()`.
- *
- * @stable — every signer and verifier depends on the exact layout.
- */
-declare function eip712DomainSeparatorEvm(chainId: bigint, verifyingContractBytes: Uint8Array): Uint8Array;
-/**
- * Compute the v2 EVM balance-proof (claim) digest — the 32-byte EIP-712 typed
- * digest the swap node signs and the on-chain `RollingSwapChannel` verifies:
- *
- *   structHash = keccak256(abi.encode(
- *     CLAIM_TYPEHASH, channelId, cumulativeAmount, nonce, recipient))
- *   digest     = keccak256(0x1901 || domainSeparator || structHash)
- *
- * with domain `EIP712Domain(name="RollingSwapChannel", version="2", chainId,
- * verifyingContract)`. `channelIdBytes` MUST be 32 bytes, `recipientBytes` MUST
- * be 20 bytes, `verifyingContractBytes` MUST be the 20-byte deployed contract
- * address. Equivalent to OZ `EIP712._hashTypedDataV4(claimStructHash)`.
- *
- * v2 REQUIRES `chainId` + `verifyingContract` — the two inputs v1 lacked. This
- * hash is what `EvmPaymentChannelSigner.signBalanceProof` signs and what
- * `recoverEvmSignerAddress` recovers against.
- *
- * @stable — signer and verifier depend on the exact byte layout.
- */
-declare function balanceProofHashEvm(channelIdBytes: Uint8Array, cumulativeAmount: bigint, nonce: bigint, recipientBytes: Uint8Array, chainId: bigint, verifyingContractBytes: Uint8Array): Uint8Array;
-/**
- * Compute the v2 EVM cooperative-close digest — the 32-byte EIP-712 typed
- * digest the recipient signs to acknowledge a cooperative close:
- *
- *   structHash = keccak256(abi.encode(
- *     COOP_CLOSE_TYPEHASH, channelId, cumulativeAmount, nonce))
- *   digest     = keccak256(0x1901 || domainSeparator || structHash)
- *
- * Shares the SAME domain as the claim digest (so it is bound to
- * `chainId + verifyingContract` too), but the distinct `CooperativeClose`
- * type hash guarantees a close-ack can never be recovered as a balance-proof
- * claim (or vice-versa). `channelIdBytes` MUST be 32 bytes.
- *
- * @stable — signer and verifier depend on the exact byte layout.
- */
-declare function coopCloseHashEvm(channelIdBytes: Uint8Array, cumulativeAmount: bigint, nonce: bigint, chainId: bigint, verifyingContractBytes: Uint8Array): Uint8Array;
-/**
- * Compute the Solana balance-proof message hash:
- *   sha256(utf8(channelId) || cumulativeAmount(32BE) || nonce(32BE) || utf8(recipient))
- *
- * `channelId` and `recipient` are base58-encoded strings (ASCII-subset of
- * UTF-8). This hash is what `SolanaPaymentChannelSigner.signBalanceProof`
- * signs and what `verifyEd25519Signature` verifies against.
- *
- * @stable — signer and verifier depend on the exact byte layout.
- */
-declare function balanceProofHashSolana(channelId: string, cumulativeAmount: bigint, nonce: bigint, recipient: string): Uint8Array;
-/**
- * Hash an arbitrary string to a Pallas-field-safe bigint.
- *
- * The Pallas base field order is slightly below 2^254, so we take the first
- * 240 bits (60 hex chars / 30 bytes) of `sha256(utf8(s))` as a conservative,
- * guaranteed-in-field representation. Used to fold the variable-length
- * `channelId` / `recipient` strings into the fixed field-element array a Mina
- * Schnorr signature is computed over.
- *
- * @stable — Swap signer and SDK verifier depend on the exact derivation.
- */
-declare function minaHashToField(s: string): bigint;
-/**
- * Compute the Mina balance-proof field-element message:
- *   [ minaHashToField(channelId),
- *     cumulativeAmount,
- *     nonce,
- *     minaHashToField(recipient) ]
- *
- * This is the EXACT `fields` array that the Swap's `MinaPaymentChannelSigner`
- * passes to `mina-signer`'s `signFields(...)`, and that the sender-side
- * `verifyMinaSignature` re-derives and passes to `verifyFields(...)`. Keeping
- * the derivation here (shared across `@toon-protocol/swap`, `@toon-protocol/sdk`,
- * and `@toon-protocol/client`) prevents signer/verifier drift — mirroring the
- * EVM/Solana hash helpers above.
- *
- * NOTE: this is the Swap↔sender wire contract (a Schnorr signature over four
- * field elements), NOT the connector's on-chain `MinaPaymentChannelSDK`
- * Poseidon-commitment proof shape. The two are distinct; see
- * `packages/sdk/src/settlement/mina.ts` for the relationship + the
- * remaining on-chain-settlement gap.
- *
- * @stable — Swap signer and SDK verifier depend on the exact byte layout.
- */
-declare function balanceProofFieldsMina(channelId: string, cumulativeAmount: bigint, nonce: bigint, recipient: string): bigint[];
-
 /**
  * Base58 (Bitcoin/Solana alphabet) encode/decode.
  *
@@ -4686,4 +4555,4 @@ declare function selectLatestAddressable<T extends Event>(events: T[]): T | unde
  */
 declare const VERSION = "0.1.0";
 
-export { AddressRegistry, type AgentRuntimeClient, ArDrivePeerRegistry, AttestationBootstrap, type AttestationBootstrapConfig, type AttestationBootstrapEvent, type AttestationBootstrapEventListener, type AttestationBootstrapResult, type AttestationEventOptions, AttestationState, AttestationVerifier, type AttestationVerifierConfig, type AttestedResultVerificationOptions, type AttestedResultVerificationResult, AttestedResultVerifier, BLOB_STORAGE_REQUEST_KIND, BLOB_STORAGE_RESULT_KIND, type BlobStorageRequestParams, type BootstrapConfig, BootstrapError, type BootstrapEvent, type BootstrapEventListener, type BootstrapPhase, type BootstrapResult, BootstrapService, type BootstrapServiceConfig, type BtpHandshakeExtension, type BuildIlpPeerInfoOptions, type BuildIlpPrepareParams, CHAIN_PRESETS, type CalculateRouteAmountParams, type ChainName, type ChainPreset, type ChainProviderConfigEntry, type ChainType, type ChannelState, type ClientNetworkPresets, type ConnectorAdminClient, type ConnectorAdminLike, type ConnectorChannelClient, type ConnectorChannelLike, type ConnectorNodeLike, type CustomEndpoints, type DeriveFromKmsSeedOptions, type DeterminismReport, type DirectRuntimeClientConfig, type DiscoveredPeer, type DiscoveryTracker, type DiscoveryTrackerConfig, type DvmJobStatus, type EVMProviderConfigEntry, EXPIRATION_TAG, type EmbeddableConnectorLike, type ForbiddenPattern, type GenesisPeer, GenesisPeerLoader, type HandlePacketAcceptResponse, type HandlePacketRejectResponse, type HandlePacketRequest, type HandlePacketResponse, ILP_PEER_INFO_KIND, ILP_ROOT_PREFIX, ILP_TO_SEMANTIC, IMAGE_GENERATION_KIND, type IlpClient, type IlpPeerInfo, type IlpPreparePacket, type IlpSendResult, JOB_FEEDBACK_KIND, JOB_REQUEST_KIND_BASE, JOB_RESULT_KIND_BASE, JOB_REVIEW_KIND, type JobFeedbackParams, type JobRequestParams, type JobResultParams, type JobReviewParams, KmsIdentityError, type KmsKeypair, type KnownPeer, type LogEntry, type LogLevel, type Logger, type LoggerConfig, MINA_CHAIN_PRESETS, MOCK_USDC_ADDRESS, MOCK_USDC_CONFIG, type MinaChainName, type MinaChainPreset, type MinaProviderConfigEntry, type MockUsdcConfig, type MultiChainName, type NetworkFamilyStatus, type NetworkMode, type NetworkNodeEnv, type NetworkProfile, type NixBuildResult, NixBuilder, type NixBuilderConfig, NostrPeerDiscovery, type OpenChannelParams, type OpenChannelResult, PET_INTERACTION_EVENT_KIND, PET_INTERACTION_REQUEST_KIND, PET_INTERACTION_RESULT_KIND, PREFIX_CLAIM_KIND, PREFIX_GRANT_KIND, type PacketHandler, type ParsedAttestation, type ParsedBlobStorageRequest, type ParsedJobFeedback, type ParsedJobRequest, type ParsedJobResult, type ParsedJobReview, type ParsedSwarmRequest, type ParsedSwarmSelection, type ParsedWorkflowDefinition, type ParsedWotDeclaration, PcrReproducibilityError, type PcrReproducibilityResult, type PeerDescriptor, type PrefixClaimContent, type PrefixGrantContent, type PrefixValidationResult, type PublishSeedRelayConfig, RELAY_ONLY_CHAIN, type RegisterPeerParams, type ReputationScore, ReputationScoreCalculator, type ReputationSignals, type ResolveRouteFeesParams, type ResolveRouteFeesResult, SEED_RELAY_LIST_KIND, SERVICE_DISCOVERY_KIND, SOLANA_CHAIN_PRESETS, SeedRelayDiscovery, type SeedRelayDiscoveryConfig, type SeedRelayDiscoveryResult, type SeedRelayEntry, type SendPacketParams, type SendPacketResult, type ServiceDiscoveryContent, type SettlementConfig, type SkillDescriptor, type SocialDiscoveryEvent, type SocialDiscoveryEventListener, SocialPeerDiscovery, type SocialPeerDiscoveryConfig, type SolanaChainName, type SolanaChainPreset, type SolanaProviderConfigEntry, type Subscription, type SwapPair, type SwarmRequestParams, type SwarmSelectionParams, TEE_ATTESTATION_KIND, TEXT_GENERATION_KIND, TEXT_TO_SPEECH_KIND, TRANSLATION_KIND, type TeeAttestation, ToonError, type ToonNode, type ToonNodeConfig, type ToonNodeStartResult, UI_RENDERER_KIND, UI_TAG, USDC_DECIMALS, USDC_NAME, USDC_SYMBOL, type UiCoordinate, VERSION, type VerificationResult, type VerifyOptions, type Violation, WEB_OF_TRUST_KIND, WORKFLOW_CHAIN_KIND, type WorkflowDefinitionParams, type WorkflowStep, type WotDeclarationParams, analyzeDockerfileForNonDeterminism, assignAddressFromHandshake, balanceProofFieldsMina, balanceProofHashEvm, balanceProofHashSolana, base58Decode, base58Encode, bigintToBytes32BE, buildAttestationEvent, buildBlobStorageRequest, buildEip712Domain, buildEvmProviderEntry, buildIlpPeerInfoEvent, buildIlpPrepare, buildJobFeedbackEvent, buildJobRequestEvent, buildJobResultEvent, buildJobReviewEvent, buildMinaProviderEntry, buildPrefixClaimEvent, buildPrefixGrantEvent, buildPrefixHandshakeData, buildSeedRelayListEvent, buildServiceDiscoveryEvent, buildSolanaProviderEntry, buildSwarmRequestEvent, buildSwarmSelectionEvent, buildUiCoordinate, buildWorkflowDefinitionEvent, buildWotDeclarationEvent, calculateRouteAmount, checkAddressCollision, concatBytes, coopCloseHashEvm, createAgentRuntimeClient, createDirectChannelClient, createDirectConnectorAdmin, createDirectIlpClient, createDirectRuntimeClient, createDiscoveryTracker, createHttpChannelClient, createHttpConnectorAdmin, createHttpIlpClient$1 as createHttpIlpClient, createHttpRuntimeClient, createHttpIlpClient as createHttpRuntimeClientV2, createLogger, createToonNode, deriveChildAddress, deriveFromKmsSeed, deriveMinaPublicKeyBase58, eip712DomainSeparatorEvm, extractPrefixFromHandshake, getEventExpiration, getUiCoordinate, hasMinReputation, hasRequireAttestation, hexToBytes, hexToMinaBase58PrivateKey, ilpCodeToSemantic, isEventExpired, isGenesisNode, isValidIlpAddressStructure, minaHashToField, negotiateSettlementChain, parseAttestation, parseBlobStorageRequest, parseIlpPeerInfo, parseJobFeedback, parseJobRequest, parseJobResult, parseJobReview, parsePrefixClaimEvent, parsePrefixGrantEvent, parseSeedRelayList, parseServiceDiscovery, parseSwarmRequest, parseSwarmSelection, parseUiCoordinate, parseWorkflowDefinition, parseWotDeclaration, publishSeedRelayEntry, readDockerfileNix, resolveChainConfig, resolveClientNetwork, resolveMinaChainConfig, resolveNetworkProfile, resolveRouteFees, resolveSolanaChainConfig, resolveTokenForChain, selectLatestAddressable, validateChainId, validateIlpAddress, validatePrefix, validatePrefixConsistency, verifyPcrReproducibility };
+export { AddressRegistry, type AgentRuntimeClient, ArDrivePeerRegistry, AttestationBootstrap, type AttestationBootstrapConfig, type AttestationBootstrapEvent, type AttestationBootstrapEventListener, type AttestationBootstrapResult, type AttestationEventOptions, AttestationState, AttestationVerifier, type AttestationVerifierConfig, type AttestedResultVerificationOptions, type AttestedResultVerificationResult, AttestedResultVerifier, BLOB_STORAGE_REQUEST_KIND, BLOB_STORAGE_RESULT_KIND, type BlobStorageRequestParams, type BootstrapConfig, BootstrapError, type BootstrapEvent, type BootstrapEventListener, type BootstrapPhase, type BootstrapResult, BootstrapService, type BootstrapServiceConfig, type BtpHandshakeExtension, type BuildIlpPeerInfoOptions, type BuildIlpPrepareParams, CHAIN_PRESETS, type CalculateRouteAmountParams, type ChainName, type ChainPreset, type ChainProviderConfigEntry, type ChainType, type ChannelState, type ClientNetworkPresets, type ConnectorAdminClient, type ConnectorAdminLike, type ConnectorChannelClient, type ConnectorChannelLike, type ConnectorNodeLike, type CustomEndpoints, type DeriveFromKmsSeedOptions, type DeterminismReport, type DirectRuntimeClientConfig, type DiscoveredPeer, type DiscoveryTracker, type DiscoveryTrackerConfig, type DvmJobStatus, type EVMProviderConfigEntry, EXPIRATION_TAG, type EmbeddableConnectorLike, type ForbiddenPattern, type GenesisPeer, GenesisPeerLoader, type HandlePacketAcceptResponse, type HandlePacketRejectResponse, type HandlePacketRequest, type HandlePacketResponse, ILP_PEER_INFO_KIND, ILP_ROOT_PREFIX, ILP_TO_SEMANTIC, IMAGE_GENERATION_KIND, type IlpClient, type IlpPeerInfo, type IlpPreparePacket, type IlpSendResult, JOB_FEEDBACK_KIND, JOB_REQUEST_KIND_BASE, JOB_RESULT_KIND_BASE, JOB_REVIEW_KIND, type JobFeedbackParams, type JobRequestParams, type JobResultParams, type JobReviewParams, KmsIdentityError, type KmsKeypair, type KnownPeer, type LogEntry, type LogLevel, type Logger, type LoggerConfig, MINA_CHAIN_PRESETS, MOCK_USDC_ADDRESS, MOCK_USDC_CONFIG, type MinaChainName, type MinaChainPreset, type MinaProviderConfigEntry, type MockUsdcConfig, type MultiChainName, type NetworkFamilyStatus, type NetworkMode, type NetworkNodeEnv, type NetworkProfile, type NixBuildResult, NixBuilder, type NixBuilderConfig, NostrPeerDiscovery, type OpenChannelParams, type OpenChannelResult, PET_INTERACTION_EVENT_KIND, PET_INTERACTION_REQUEST_KIND, PET_INTERACTION_RESULT_KIND, PREFIX_CLAIM_KIND, PREFIX_GRANT_KIND, type PacketHandler, type ParsedAttestation, type ParsedBlobStorageRequest, type ParsedJobFeedback, type ParsedJobRequest, type ParsedJobResult, type ParsedJobReview, type ParsedSwarmRequest, type ParsedSwarmSelection, type ParsedWorkflowDefinition, type ParsedWotDeclaration, PcrReproducibilityError, type PcrReproducibilityResult, type PeerDescriptor, type PrefixClaimContent, type PrefixGrantContent, type PrefixValidationResult, type PublishSeedRelayConfig, RELAY_ONLY_CHAIN, type RegisterPeerParams, type ReputationScore, ReputationScoreCalculator, type ReputationSignals, type ResolveRouteFeesParams, type ResolveRouteFeesResult, SEED_RELAY_LIST_KIND, SERVICE_DISCOVERY_KIND, SOLANA_CHAIN_PRESETS, SeedRelayDiscovery, type SeedRelayDiscoveryConfig, type SeedRelayDiscoveryResult, type SeedRelayEntry, type SendPacketParams, type SendPacketResult, type ServiceDiscoveryContent, type SettlementConfig, type SkillDescriptor, type SocialDiscoveryEvent, type SocialDiscoveryEventListener, SocialPeerDiscovery, type SocialPeerDiscoveryConfig, type SolanaChainName, type SolanaChainPreset, type SolanaProviderConfigEntry, type Subscription, type SwapPair, type SwarmRequestParams, type SwarmSelectionParams, TEE_ATTESTATION_KIND, TEXT_GENERATION_KIND, TEXT_TO_SPEECH_KIND, TRANSLATION_KIND, type TeeAttestation, ToonError, type ToonNode, type ToonNodeConfig, type ToonNodeStartResult, UI_RENDERER_KIND, UI_TAG, USDC_DECIMALS, USDC_NAME, USDC_SYMBOL, type UiCoordinate, VERSION, type VerificationResult, type VerifyOptions, type Violation, WEB_OF_TRUST_KIND, WORKFLOW_CHAIN_KIND, type WorkflowDefinitionParams, type WorkflowStep, type WotDeclarationParams, analyzeDockerfileForNonDeterminism, assignAddressFromHandshake, base58Decode, base58Encode, buildAttestationEvent, buildBlobStorageRequest, buildEip712Domain, buildEvmProviderEntry, buildIlpPeerInfoEvent, buildIlpPrepare, buildJobFeedbackEvent, buildJobRequestEvent, buildJobResultEvent, buildJobReviewEvent, buildMinaProviderEntry, buildPrefixClaimEvent, buildPrefixGrantEvent, buildPrefixHandshakeData, buildSeedRelayListEvent, buildServiceDiscoveryEvent, buildSolanaProviderEntry, buildSwarmRequestEvent, buildSwarmSelectionEvent, buildUiCoordinate, buildWorkflowDefinitionEvent, buildWotDeclarationEvent, calculateRouteAmount, checkAddressCollision, createAgentRuntimeClient, createDirectChannelClient, createDirectConnectorAdmin, createDirectIlpClient, createDirectRuntimeClient, createDiscoveryTracker, createHttpChannelClient, createHttpConnectorAdmin, createHttpIlpClient$1 as createHttpIlpClient, createHttpRuntimeClient, createHttpIlpClient as createHttpRuntimeClientV2, createLogger, createToonNode, deriveChildAddress, deriveFromKmsSeed, deriveMinaPublicKeyBase58, extractPrefixFromHandshake, getEventExpiration, getUiCoordinate, hasMinReputation, hasRequireAttestation, hexToMinaBase58PrivateKey, ilpCodeToSemantic, isEventExpired, isGenesisNode, isValidIlpAddressStructure, negotiateSettlementChain, parseAttestation, parseBlobStorageRequest, parseIlpPeerInfo, parseJobFeedback, parseJobRequest, parseJobResult, parseJobReview, parsePrefixClaimEvent, parsePrefixGrantEvent, parseSeedRelayList, parseServiceDiscovery, parseSwarmRequest, parseSwarmSelection, parseUiCoordinate, parseWorkflowDefinition, parseWotDeclaration, publishSeedRelayEntry, readDockerfileNix, resolveChainConfig, resolveClientNetwork, resolveMinaChainConfig, resolveNetworkProfile, resolveRouteFees, resolveSolanaChainConfig, resolveTokenForChain, selectLatestAddressable, validateChainId, validateIlpAddress, validatePrefix, validatePrefixConsistency, verifyPcrReproducibility };

package/dist/index.js

@@ -2948,150 +2948,17 @@ function resolveTokenForChain(chain, requesterPreferredTokens, responderPreferre
 }
 
 // src/settlement/hashes.ts
-import { keccak_256 } from "@noble/hashes/sha3.js";
-import { sha256 } from "@noble/hashes/sha2.js";
 import {
-  bytesToHex,
-  hexToBytes as nobleHexToBytes
-} from "@noble/hashes/utils.js";
-function hexToBytes(hex) {
-  const clean = hex.startsWith("0x") ? hex.slice(2) : hex;
-  if (clean.length % 2 !== 0 || !/^[0-9a-fA-F]*$/.test(clean)) {
-    throw new Error(`Invalid hex string: ${hex}`);
-  }
-  return nobleHexToBytes(clean);
-}
-function bigintToBytes32BE(x) {
-  if (x < 0n) {
-    throw new Error("bigint must be non-negative for balance-proof encoding");
-  }
-  const out = new Uint8Array(32);
-  let v = x;
-  for (let i = 31; i >= 0; i--) {
-    out[i] = Number(v & 0xffn);
-    v >>= 8n;
-  }
-  if (v !== 0n) {
-    throw new Error("bigint exceeds 256 bits");
-  }
-  return out;
-}
-function concatBytes(...parts) {
-  let len = 0;
-  for (const p of parts) len += p.length;
-  const out = new Uint8Array(len);
-  let o = 0;
-  for (const p of parts) {
-    out.set(p, o);
-    o += p.length;
-  }
-  return out;
-}
-var EIP712_PREFIX = new Uint8Array([25, 1]);
-var EIP712DOMAIN_TYPEHASH = keccak_256(
-  new TextEncoder().encode(
-    "EIP712Domain(string name,string version,uint256 chainId,address verifyingContract)"
-  )
-);
-var DOMAIN_NAME_HASH = keccak_256(new TextEncoder().encode("RollingSwapChannel"));
-var DOMAIN_VERSION_HASH = keccak_256(new TextEncoder().encode("2"));
-var CLAIM_TYPEHASH = keccak_256(
-  new TextEncoder().encode(
-    "ClaimBalanceProof(bytes32 channelId,uint256 cumulativeAmount,uint256 nonce,address recipient)"
-  )
-);
-var COOP_CLOSE_TYPEHASH = keccak_256(
-  new TextEncoder().encode(
-    "CooperativeClose(bytes32 channelId,uint256 cumulativeAmount,uint256 nonce)"
-  )
-);
-function leftPad32(bytes) {
-  if (bytes.length > 32) {
-    throw new Error(`cannot left-pad ${bytes.length} bytes into 32`);
-  }
-  const out = new Uint8Array(32);
-  out.set(bytes, 32 - bytes.length);
-  return out;
-}
-function eip712DomainSeparatorEvm(chainId, verifyingContractBytes) {
-  if (verifyingContractBytes.length !== 20) {
-    throw new Error(
-      `verifyingContract must be 20 bytes (got ${verifyingContractBytes.length})`
-    );
-  }
-  return keccak_256(
-    concatBytes(
-      EIP712DOMAIN_TYPEHASH,
-      DOMAIN_NAME_HASH,
-      DOMAIN_VERSION_HASH,
-      bigintToBytes32BE(chainId),
-      leftPad32(verifyingContractBytes)
-    )
-  );
-}
-function eip712Digest(domainSeparator, structHash) {
-  return keccak_256(concatBytes(EIP712_PREFIX, domainSeparator, structHash));
-}
-function balanceProofHashEvm(channelIdBytes, cumulativeAmount, nonce, recipientBytes, chainId, verifyingContractBytes) {
-  if (channelIdBytes.length !== 32) {
-    throw new Error(`channelId must be 32 bytes (got ${channelIdBytes.length})`);
-  }
-  if (recipientBytes.length !== 20) {
-    throw new Error(`recipient must be 20 bytes (got ${recipientBytes.length})`);
-  }
-  const structHash = keccak_256(
-    concatBytes(
-      CLAIM_TYPEHASH,
-      channelIdBytes,
-      bigintToBytes32BE(cumulativeAmount),
-      bigintToBytes32BE(nonce),
-      leftPad32(recipientBytes)
-    )
-  );
-  return eip712Digest(
-    eip712DomainSeparatorEvm(chainId, verifyingContractBytes),
-    structHash
-  );
-}
-function coopCloseHashEvm(channelIdBytes, cumulativeAmount, nonce, chainId, verifyingContractBytes) {
-  if (channelIdBytes.length !== 32) {
-    throw new Error(`channelId must be 32 bytes (got ${channelIdBytes.length})`);
-  }
-  const structHash = keccak_256(
-    concatBytes(
-      COOP_CLOSE_TYPEHASH,
-      channelIdBytes,
-      bigintToBytes32BE(cumulativeAmount),
-      bigintToBytes32BE(nonce)
-    )
-  );
-  return eip712Digest(
-    eip712DomainSeparatorEvm(chainId, verifyingContractBytes),
-    structHash
-  );
-}
-function balanceProofHashSolana(channelId, cumulativeAmount, nonce, recipient) {
-  return sha256(
-    concatBytes(
-      new TextEncoder().encode(channelId),
-      bigintToBytes32BE(cumulativeAmount),
-      bigintToBytes32BE(nonce),
-      new TextEncoder().encode(recipient)
-    )
-  );
-}
-function minaHashToField(s) {
-  const digestHex = bytesToHex(sha256(new TextEncoder().encode(s)));
-  return BigInt("0x" + digestHex.slice(0, 60));
-}
-function balanceProofFieldsMina(channelId, cumulativeAmount, nonce, recipient) {
-  return [
-    minaHashToField(channelId),
-    cumulativeAmount,
-    nonce,
-    minaHashToField(recipient)
-  ];
-}
+  hexToBytes,
+  bigintToBytes32BE,
+  concatBytes,
+  eip712DomainSeparatorEvm,
+  balanceProofHashEvm,
+  coopCloseHashEvm,
+  balanceProofHashSolana,
+  minaHashToField,
+  balanceProofFieldsMina
+} from "@toon-protocol/settlement-digest";
 
 // src/settlement/base58.ts
 var BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
@@ -3133,7 +3000,7 @@ function base58Decode(str) {
 }
 
 // src/settlement/mina-key.ts
-import { sha256 as sha2562 } from "@noble/hashes/sha2.js";
+import { sha256 } from "@noble/hashes/sha2.js";
 var MINA_PRIVATE_KEY_VERSION = 90;
 function hexToMinaBase58PrivateKey(privateKey) {
   if (!/^(0x)?[0-9a-fA-F]{64}$/.test(privateKey)) {
@@ -3145,7 +3012,7 @@ function hexToMinaBase58PrivateKey(privateKey) {
     Uint8Array.from([MINA_PRIVATE_KEY_VERSION, 1]),
     leScalar
   );
-  const checksum = sha2562(sha2562(payload)).slice(0, 4);
+  const checksum = sha256(sha256(payload)).slice(0, 4);
   return base58Encode(concatBytes(payload, checksum));
 }
 async function deriveMinaPublicKeyBase58(privateKey) {
@@ -4692,9 +4559,13 @@ var CHAIN_PRESETS = {
     name: "base-sepolia",
     chainId: 84532,
     rpcUrl: "https://sepolia.base.org",
-    usdcAddress: "0xac80670b86db1eeb5c18c82e18a6bda98fcb4504",
-    tokenNetworkAddress: "0x47616F4b9cF4dA25F74FD727Cd85E9CA0C70Ec5C",
-    registryAddress: "0xb9516c6c53c016c43f3671b1e5eb6096c83ec2c7"
+    // Post-2026-07-19 public-chain cutover addresses (source of truth: toon-meta
+    // docs/deployment.md). USDC is a 6-decimal mock with an ungated mint; the
+    // retired e2e deployment (18-decimal USDC 0xac806…, TokenNetwork 0x47616F4b…,
+    // registry 0xb9516c…) is still on-chain but MUST NOT be used.
+    usdcAddress: "0x49beE1Bca5d15Fb0963117923403F9498119a9Ce",
+    tokenNetworkAddress: "0x1E95493fEF46707E034b4a1945f25a8C76A1823D",
+    registryAddress: "0xcC9079adE929b168B54145f6d25262b64FAB9D5b"
   },
   // Base mainnet (public). USDC is Circle's native USDC on Base.
   // TOON TokenNetwork/registry not deployed yet → settlement relay-only.
@@ -4849,8 +4720,12 @@ var EVM_TIER = {
 var SOLANA_DEPLOYED_DEVNET = {
   rpcUrl: "https://api.devnet.solana.com",
   cluster: "devnet",
-  usdcMint: "9FtYCXjNiGDn17jSGvZuB5P4dZAKgVxUsDiQpLc8rbWy",
-  programId: "EdJxYPDxGvaJuu57DSUptf4soLv8enpdyQJJhHDLiydG"
+  // Post-2026-07-19 public-chain cutover (source of truth: toon-meta
+  // docs/deployment.md). USDC mint authority is the faucet treasury
+  // AEPoA5xT…; the pre-cutover self-hosted-validator values (mint
+  // 9FtYCX…, program EdJxYPD…) are retired and MUST NOT be used.
+  usdcMint: "xyc5J8MgKFiEN13PnfftdXxUzYH34FEvw1LCrFwN7in",
+  programId: "2aEVJ8koKD8LTZrLRSGtAtU7LBt4e7QjjCgf1kzQ7Rip"
 };
 var SOLANA_TIER = {
   mainnet: {
@@ -5226,8 +5101,8 @@ var NixBuilder = class {
         );
       }
       const imageData = await readFile(imagePath);
-      const sha2563 = createHash("sha256").update(imageData).digest("hex");
-      const imageHash = `sha256:${sha2563}`;
+      const sha2562 = createHash("sha256").update(imageData).digest("hex");
+      const imageHash = `sha256:${sha2562}`;
       const pcr0 = createHash("sha384").update(imageData).digest("hex");
       const KERNEL_REGION_SIZE = 1024 * 1024;
       const kernelRegion = imageData.subarray(