dexe-mcp 0.17.0 → 0.20.0

package/dist/lib/imageSniff.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Magic-byte sniffing for avatar uploads.
+ *
+ * The DeXe serving chain is unforgiving about content type: the Go
+ * `ipfs-cache` service copies DAO avatar bytes to R2 under `<descCid>.jpeg`
+ * with a hardcoded `image/jpeg` content-type and no byte inspection, and the
+ * app.dexe.io `<img>` has no error fallback after a successful GET. Raster
+ * bytes (JPEG/PNG/WebP/GIF) survive that because browsers content-sniff
+ * rasters inside `<img>`; SVG does not — browsers never sniff SVG, so SVG
+ * bytes labeled `image/jpeg` render as a broken image. Hence: validate what
+ * the caller claims against what the bytes actually are.
+ */
+export type SniffedImageFormat = "jpeg" | "png" | "webp" | "gif" | "svg" | "html" | "unknown";
+export type RasterFormat = Extract<SniffedImageFormat, "jpeg" | "png" | "webp" | "gif">;
+/** Identify an image (or image impostor) by its magic bytes. */
+export declare function sniffImageFormat(bytes: Uint8Array): SniffedImageFormat;
+/**
+ * Gate for every avatar upload path. Returns the detected raster format and
+ * its true MIME type, or throws an actionable error for anything that would
+ * end up as a permanently broken avatar on app.dexe.io.
+ */
+export declare function assertRasterAvatar(bytes: Uint8Array): {
+    format: RasterFormat;
+    mime: string;
+};
+/**
+ * Best-effort remote validation for avatar CIDs passed **by reference**
+ * (dexe_ipfs_upload_dao_metadata / dexe_ipfs_update_dao_metadata /
+ * dexe_dao_create take an avatarCID that was pinned elsewhere, so the local
+ * byte gate never saw it). Fetches the first KB of `<cid>/<fileName>` off the
+ * gateway chain and sniffs it.
+ *
+ * Verdicts:
+ * - `{ ok: true }`                 — bytes fetched, real raster.
+ * - `{ ok: false, error }`         — bytes fetched, NOT a raster → hard-block.
+ * - `{ ok: true, warning }`        — unreachable/timeout (fresh pins often
+ *   haven't propagated to gateways yet) → proceed, surface the warning.
+ */
+export declare function checkAvatarCidBytes(cid: string, fileName: string, gateways: string[], perRequestTimeoutMs?: number): Promise<{
+    ok: boolean;
+    error?: string;
+    warning?: string;
+}>;
+//# sourceMappingURL=imageSniff.d.ts.map

package/dist/lib/imageSniff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"imageSniff.d.ts","sourceRoot":"","sources":["../../src/lib/imageSniff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;AAE9F,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,kBAAkB,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC;AAmBxF,gEAAgE;AAChE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,kBAAkB,CAuBtE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CA0B5F;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAAE,EAClB,mBAAmB,SAAO,GACzB,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA2C5D"}

package/dist/lib/imageSniff.js

@@ -0,0 +1,145 @@
+/**
+ * Magic-byte sniffing for avatar uploads.
+ *
+ * The DeXe serving chain is unforgiving about content type: the Go
+ * `ipfs-cache` service copies DAO avatar bytes to R2 under `<descCid>.jpeg`
+ * with a hardcoded `image/jpeg` content-type and no byte inspection, and the
+ * app.dexe.io `<img>` has no error fallback after a successful GET. Raster
+ * bytes (JPEG/PNG/WebP/GIF) survive that because browsers content-sniff
+ * rasters inside `<img>`; SVG does not — browsers never sniff SVG, so SVG
+ * bytes labeled `image/jpeg` render as a broken image. Hence: validate what
+ * the caller claims against what the bytes actually are.
+ */
+const RASTER_MIME = {
+    jpeg: "image/jpeg",
+    png: "image/png",
+    webp: "image/webp",
+    gif: "image/gif",
+};
+const PNG_SIG = [0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a];
+function startsWith(bytes, sig, offset = 0) {
+    if (bytes.length < offset + sig.length)
+        return false;
+    for (let i = 0; i < sig.length; i++) {
+        if (bytes[offset + i] !== sig[i])
+            return false;
+    }
+    return true;
+}
+/** Identify an image (or image impostor) by its magic bytes. */
+export function sniffImageFormat(bytes) {
+    if (startsWith(bytes, [0xff, 0xd8, 0xff]))
+        return "jpeg";
+    if (startsWith(bytes, PNG_SIG))
+        return "png";
+    if (startsWith(bytes, [0x47, 0x49, 0x46, 0x38, 0x37, 0x61]) || startsWith(bytes, [0x47, 0x49, 0x46, 0x38, 0x39, 0x61])) {
+        return "gif";
+    }
+    // RIFF....WEBP
+    if (startsWith(bytes, [0x52, 0x49, 0x46, 0x46]) && startsWith(bytes, [0x57, 0x45, 0x42, 0x50], 8)) {
+        return "webp";
+    }
+    // Text-based impostors: skip BOM + leading whitespace (trimStart strips
+    // U+FEFF too — it's spec whitespace), look at the first tag.
+    const head = Buffer.from(bytes.slice(0, 512))
+        .toString("utf8")
+        .trimStart()
+        .toLowerCase();
+    if (head.startsWith("<?xml") || head.startsWith("<svg"))
+        return "svg";
+    if (head.startsWith("<!doctype")) {
+        // `<!DOCTYPE svg ...>` is a legal SVG prologue — don't call it HTML.
+        return /^<!doctype\s+svg/.test(head) ? "svg" : "html";
+    }
+    if (head.startsWith("<html"))
+        return "html";
+    return "unknown";
+}
+/**
+ * Gate for every avatar upload path. Returns the detected raster format and
+ * its true MIME type, or throws an actionable error for anything that would
+ * end up as a permanently broken avatar on app.dexe.io.
+ */
+export function assertRasterAvatar(bytes) {
+    const format = sniffImageFormat(bytes);
+    switch (format) {
+        case "jpeg":
+        case "png":
+        case "webp":
+        case "gif":
+            return { format, mime: RASTER_MIME[format] };
+        case "svg":
+            throw new Error("Avatar bytes are SVG, which never renders on app.dexe.io: the ipfs-cache service serves DAO avatars " +
+                "with a hardcoded image/jpeg content-type and browsers refuse SVG bytes labeled image/jpeg. " +
+                "Provide real raster bytes (JPEG/PNG/WebP/GIF), or use dexe_dao_generate_avatar to get a valid JPEG.");
+        case "html":
+            throw new Error("Avatar bytes look like an HTML page, not an image — most likely a gateway error/directory-listing page " +
+                "was downloaded instead of the image file. Re-fetch the image (use the full <cid>/<fileName> path, " +
+                "not the bare CID) and upload the actual raster bytes.");
+        default:
+            throw new Error("Avatar bytes are not a recognized raster image — expected JPEG (FF D8 FF), PNG, WebP, or GIF magic bytes. " +
+                "Check that the base64 payload is the image file itself (not a data: URL wrapper or a truncated buffer).");
+    }
+}
+/**
+ * Best-effort remote validation for avatar CIDs passed **by reference**
+ * (dexe_ipfs_upload_dao_metadata / dexe_ipfs_update_dao_metadata /
+ * dexe_dao_create take an avatarCID that was pinned elsewhere, so the local
+ * byte gate never saw it). Fetches the first KB of `<cid>/<fileName>` off the
+ * gateway chain and sniffs it.
+ *
+ * Verdicts:
+ * - `{ ok: true }`                 — bytes fetched, real raster.
+ * - `{ ok: false, error }`         — bytes fetched, NOT a raster → hard-block.
+ * - `{ ok: true, warning }`        — unreachable/timeout (fresh pins often
+ *   haven't propagated to gateways yet) → proceed, surface the warning.
+ */
+export async function checkAvatarCidBytes(cid, fileName, gateways, perRequestTimeoutMs = 4000) {
+    const pinataGatewayToken = process.env.DEXE_PINATA_GATEWAY_TOKEN?.trim();
+    for (const gw of gateways.slice(0, 3)) {
+        const base = gw.replace(/\/+$/, "").replace(/\/ipfs$/, "");
+        const url = `${base}/ipfs/${cid}/${fileName}`;
+        const controller = new AbortController();
+        const t = setTimeout(() => controller.abort(), perRequestTimeoutMs);
+        try {
+            const headers = { Range: "bytes=0-1023" };
+            let host = null;
+            try {
+                host = new URL(base).hostname;
+            }
+            catch {
+                host = null;
+            }
+            if (pinataGatewayToken && host && (host === "mypinata.cloud" || host.endsWith(".mypinata.cloud"))) {
+                headers["x-pinata-gateway-token"] = pinataGatewayToken;
+            }
+            const res = await fetch(url, { headers, signal: controller.signal });
+            if (!res.ok)
+                continue;
+            const head = new Uint8Array(await res.arrayBuffer());
+            try {
+                assertRasterAvatar(head);
+                return { ok: true };
+            }
+            catch (err) {
+                return {
+                    ok: false,
+                    error: `avatarCID ${cid}/${fileName} does not contain a usable avatar: ${err instanceof Error ? err.message : String(err)}`,
+                };
+            }
+        }
+        catch {
+            // gateway unreachable/timeout — try the next one
+        }
+        finally {
+            clearTimeout(t);
+        }
+    }
+    return {
+        ok: true,
+        warning: `avatar bytes at ${cid}/${fileName} were not reachable on any configured gateway (fresh pins can take a while ` +
+            `to propagate) — byte validation skipped. If this CID did not come from dexe_ipfs_upload_avatar or ` +
+            `dexe_dao_generate_avatar, verify it is a real raster image.`,
+    };
+}
+//# sourceMappingURL=imageSniff.js.map

package/dist/lib/imageSniff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imageSniff.js","sourceRoot":"","sources":["../../src/lib/imageSniff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,MAAM,WAAW,GAAiC;IAChD,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;CACjB,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEjE,SAAS,UAAU,CAAC,KAAiB,EAAE,GAAa,EAAE,MAAM,GAAG,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACzD,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACvH,OAAO,KAAK,CAAC;IACf,CAAC;IACD,eAAe;IACf,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAClG,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC1C,QAAQ,CAAC,MAAM,CAAC;SAChB,SAAS,EAAE;SACX,WAAW,EAAE,CAAC;IACjB,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,qEAAqE;QACrE,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB;IAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACvC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK;YACR,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,KAAK,KAAK;YACR,MAAM,IAAI,KAAK,CACb,sGAAsG;gBACpG,6FAA6F;gBAC7F,qGAAqG,CACxG,CAAC;QACJ,KAAK,MAAM;YACT,MAAM,IAAI,KAAK,CACb,yGAAyG;gBACvG,oGAAoG;gBACpG,uDAAuD,CAC1D,CAAC;QACJ;YACE,MAAM,IAAI,KAAK,CACb,4GAA4G;gBAC1G,yGAAyG,CAC5G,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAW,EACX,QAAgB,EAChB,QAAkB,EAClB,mBAAmB,GAAG,IAAI;IAE1B,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IACzE,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,GAAG,IAAI,SAAS,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC9C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAAC;QACpE,IAAI,CAAC;YACH,MAAM,OAAO,GAA2B,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;YAClE,IAAI,IAAI,GAAkB,IAAI,CAAC;YAC/B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;YACD,IAAI,kBAAkB,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;gBAClG,OAAO,CAAC,wBAAwB,CAAC,GAAG,kBAAkB,CAAC;YACzD,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,SAAS;YACtB,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC;gBACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;gBACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,aAAa,GAAG,IAAI,QAAQ,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAC5H,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EACL,mBAAmB,GAAG,IAAI,QAAQ,6EAA6E;YAC/G,oGAAoG;YACpG,6DAA6D;KAChE,CAAC;AACJ,CAAC"}

package/dist/lib/preflight.d.ts

@@ -105,7 +105,15 @@ export declare const DEPOSITED_POWER_REMEDIATION: string;
  * will under-count. Advisory (never blocks): the flow re-reads live power.
  */
 export declare function checkTokensUnlocked(depositedPower: bigint, availablePower: bigint): PreflightResult;
-/** cap must be 0 (uncapped) or strictly greater than mintedTotal. */
+/**
+ * cap rules (verified live on BSC mainnet via eth_call, 2026-07-06):
+ *   - `cap = 0` reverts — the gov token is ERC20Capped: "ERC20Capped: cap is 0".
+ *     There is NO uncapped mode (the old "cap=0 = uncapped" belief was wrong).
+ *   - `cap < mintedTotal` reverts: "ERC20Gov: mintedTotal should not be greater than cap".
+ *   - `cap == mintedTotal` is VALID (fixed supply) — the old bug #28 ("cap==minted
+ *     reverts") is outdated; it succeeds live.
+ * So the rule is simply: `cap ≥ mintedTotal` and `cap > 0`.
+ */
 export declare function checkDeployCap(cap: string, mintedTotal: string, isTokenCreation: boolean): PreflightResult;
 /** LINEAR vote power needs the `__LinearPower_init()` selector, never 0x. */
 export declare const LINEAR_POWER_INIT_SELECTOR = "0x892aea1f";
@@ -113,10 +121,65 @@ export declare function checkLinearInitData(voteType: string, initData: string |
 /** UserKeeper needs at least one non-zero governance asset (token or NFT). */
 export declare function checkUserKeeperAsset(tokenAddress: string, nftAddress: string, isTokenCreation: boolean): PreflightResult;
 /**
- * Mode 7 / bug #32 — on mainnet (chain 56) deployGovPool reverts if
- * mintedTotal ≠ sum(amounts). Testnet tolerates a remainder; warn only there.
+ * Treasury is an IMPLICIT remainder. `sum(amounts)` may be LESS than
+ * `mintedTotal`: the contract mints the difference to the DAO (govPool) itself.
+ * This is the frontend's proven pattern (`useCreateDAO.ts` — `users`/`amounts`
+ * cover only the wallet distribution; the treasury is never an explicit
+ * recipient), shipped to BSC mainnet daily. The earlier "mainnet needs
+ * mintedTotal == sum(amounts)" belief (old bug #32) was wrong and forced the
+ * treasury address into `users[]`. Only OVER-distribution (sum > minted) is
+ * invalid. See also `checkNoTreasuryRecipient`.
+ */
+export declare function checkTreasuryRemainder(mintedTotal: string, amounts: string[], isTokenCreation: boolean): PreflightResult;
+/**
+ * Meritocratic (polynomial) voting power for `votes` at a given `totalSupply`,
+ * ported from the frontend `calcMeritocraticVotingPower`
+ * (`utils/votePowerMath.ts`) with the default holder coefficient k3 = 0.97.
+ * Below the 7%-of-supply threshold, power is linear (== votes); above it the
+ * cubic curve applies. Token-amount math stays in bigint (wei); only the
+ * dimensionless percentage `t` uses float, at 6-decimal precision.
+ */
+export declare function meritocraticVotingPower(votes: bigint, totalSupply: bigint): bigint;
+/**
+ * Quorum must be REACHABLE by the votable (wallet-held) token distribution —
+ * treasury/undistributed tokens can't vote. Mirrors the frontend's blocking
+ * `isLteThanInitialDistribution` (LINEAR) / `isDistributionCanReachQuorum`
+ * (POLYNOMIAL). Token-creation only (an external token's supply/distribution
+ * is unknown at deploy time, so the frontend skips it too).
+ */
+export declare function checkQuorumReachable(args: {
+    voteType: string;
+    quorumRaw: string;
+    mintedTotal: string;
+    votable: string;
+    isTokenCreation: boolean;
+}): PreflightResult;
+/**
+ * `minVotesForVoting` / `minVotesForCreating` must not exceed the largest single
+ * recipient's balance — otherwise no holder can ever create or vote. Mirrors the
+ * frontend `value-lower-than-distribution` rule. Token-creation only.
+ */
+export declare function checkMinVotesVsDistribution(minVotesForVoting: string, minVotesForCreating: string, amounts: string[], isTokenCreation: boolean): PreflightResult;
+/**
+ * Contract-level init bounds (`GovSettings.sol:94-106`, `GovValidators.sol`):
+ * `0 < quorum ≤ 1e27`, `0 < quorumValidators ≤ 1e27`, `duration > 0`,
+ * `durationValidators > 0`. Violations revert `deployGovPool` with an empty
+ * reason — catch them here with a readable message.
+ */
+export declare function checkSettingsBounds(s: {
+    quorum: string;
+    quorumValidators: string;
+    duration: string;
+    durationValidators: string;
+}): PreflightResult;
+/**
+ * The DAO treasury (predicted govPool) must NEVER be a token recipient in
+ * `tokenParams.users` — treasury tokens can't vote, and the frontend never
+ * lists it (the remainder is minted to the DAO implicitly). Listing it inflates
+ * `sum(amounts)`, hides an unreachable quorum, and diverges from the frontend
+ * calldata shape.
  */
-export declare function checkTreasuryRemainder(mintedTotal: string, amounts: string[], chainId: number, isTokenCreation: boolean): PreflightResult;
+export declare function checkNoTreasuryRecipient(users: string[], predictedGovPool?: string): PreflightResult;
 /** Avatar must be a real JPEG, not SVG bytes with a .jpeg name (browser rejects). */
 export declare function checkAvatarIsJpeg(fileName: string, firstBytes?: Uint8Array): PreflightResult;
 /**

package/dist/lib/preflight.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../src/lib/preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAUD,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,eAAe,GAAG,IAAI,CAE/E;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAGhE;AAMD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,6KAWvB,CAAC;AAEX,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,gEAAgE;AAChE,eAAO,MAAM,iBAAiB,aAAqB,CAAC;AAMpD;;;GAGG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAa5B,CAAC;AAEjB,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,CAQpE;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,CACrC,YAAY,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,EACjC,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,eAAe,CAOjB;AAMD,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,CAc/G;AAMD,eAAO,MAAM,2BAA2B,QAEiC,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,eAAe,CAQnG;AAMD,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,eAAe,CAU1G;AAED,6EAA6E;AAC7E,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,eAAe,CAanG;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,eAAe,CAUxH;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EAAE,EACjB,OAAO,EAAE,MAAM,EACf,eAAe,EAAE,OAAO,GACvB,eAAe,CAcjB;AAMD,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,eAAe,CAqB5F;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,GAAG,eAAe,CAazG;AAED,uEAAuE;AACvE,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,CAM1B"}
+{"version":3,"file":"preflight.d.ts","sourceRoot":"","sources":["../../src/lib/preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI/C,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAUD,6DAA6D;AAC7D,wBAAgB,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,eAAe,GAAG,IAAI,CAE/E;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAGhE;AAMD;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,6KAWvB,CAAC;AAEX,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,gEAAgE;AAChE,eAAO,MAAM,iBAAiB,aAAqB,CAAC;AAMpD;;;GAGG;AACH,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAa5B,CAAC;AAEjB,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,eAAe,CAQpE;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,CACrC,YAAY,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,EACjC,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,eAAe,CAOjB;AAMD,wBAAgB,kBAAkB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,eAAe,CAc/G;AAMD,eAAO,MAAM,2BAA2B,QAEiC,CAAC;AAE1E;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,eAAe,CAQnG;AAMD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,eAAe,CAmB1G;AAED,6EAA6E;AAC7E,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,eAAe,CAanG;AAED,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,GAAG,eAAe,CAUxH;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EAAE,EACjB,eAAe,EAAE,OAAO,GACvB,eAAe,CAajB;AAeD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAYlF;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,OAAO,CAAC;CAC1B,GAAG,eAAe,CAqBlB;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,iBAAiB,EAAE,MAAM,EACzB,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE,MAAM,EAAE,EACjB,eAAe,EAAE,OAAO,GACvB,eAAe,CAYjB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,GAAG,eAAe,CAYlB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,eAAe,CAapG;AAMD,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,UAAU,GAAG,eAAe,CAqB5F;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAAE,GAAG,eAAe,CAazG;AAED,uEAAuE;AACvE,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,UAAU,EAClB,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,eAAe,CAAC,CAM1B"}

package/dist/lib/preflight.js

@@ -18,6 +18,7 @@
 import { z } from "zod";
 import { isAddress, ZeroAddress } from "ethers";
 import { checkBlacklist, blacklistError } from "./blacklist.js";
+import { quorumPctFromRaw } from "./quorumRisk.js";
 const pass = (check, detail) => ({ check, ok: true, detail });
 const fail = (check, remediation, detail) => ({
     check,
@@ -128,16 +129,29 @@ export function checkTokensUnlocked(depositedPower, availablePower) {
 // ==========================================================================
 // Mode 7 — DAO deploy silent reverts
 // ==========================================================================
-/** cap must be 0 (uncapped) or strictly greater than mintedTotal. */
+/**
+ * cap rules (verified live on BSC mainnet via eth_call, 2026-07-06):
+ *   - `cap = 0` reverts — the gov token is ERC20Capped: "ERC20Capped: cap is 0".
+ *     There is NO uncapped mode (the old "cap=0 = uncapped" belief was wrong).
+ *   - `cap < mintedTotal` reverts: "ERC20Gov: mintedTotal should not be greater than cap".
+ *   - `cap == mintedTotal` is VALID (fixed supply) — the old bug #28 ("cap==minted
+ *     reverts") is outdated; it succeeds live.
+ * So the rule is simply: `cap ≥ mintedTotal` and `cap > 0`.
+ */
 export function checkDeployCap(cap, mintedTotal, isTokenCreation) {
     if (!isTokenCreation)
         return pass("deploy.cap");
     const capBn = BigInt(cap);
     const mintedBn = BigInt(mintedTotal);
-    if (capBn === 0n || capBn > mintedBn)
-        return pass("deploy.cap", `cap=${capBn} minted=${mintedBn}`);
-    return fail("deploy.cap", `tokenParams.cap (${capBn}) must be 0 (uncapped) or strictly greater than mintedTotal (${mintedBn}). ` +
-        "ERC20Gov init reverts silently otherwise (bug #28).");
+    if (capBn <= 0n) {
+        return fail("deploy.cap", `tokenParams.cap must be > 0 — the gov token is ERC20Capped and cap=0 reverts ("ERC20Capped: cap is 0"). ` +
+            `There is no uncapped mode. Set cap ≥ mintedTotal (${mintedBn}); cap == mintedTotal is a valid fixed supply.`);
+    }
+    if (capBn < mintedBn) {
+        return fail("deploy.cap", `tokenParams.cap (${capBn}) must be ≥ mintedTotal (${mintedBn}) — otherwise deployGovPool reverts ` +
+            `"ERC20Gov: mintedTotal should not be greater than cap". cap == mintedTotal is allowed (fixed supply).`);
+    }
+    return pass("deploy.cap", `cap=${capBn} minted=${mintedBn}`);
 }
 /** LINEAR vote power needs the `__LinearPower_init()` selector, never 0x. */
 export const LINEAR_POWER_INIT_SELECTOR = "0x892aea1f";
@@ -167,21 +181,148 @@ export function checkUserKeeperAsset(tokenAddress, nftAddress, isTokenCreation)
         "userKeeperParams.nftAddress (existing ERC721), or tokenParams.name to create a new token.");
 }
 /**
- * Mode 7 / bug #32 — on mainnet (chain 56) deployGovPool reverts if
- * mintedTotal ≠ sum(amounts). Testnet tolerates a remainder; warn only there.
+ * Treasury is an IMPLICIT remainder. `sum(amounts)` may be LESS than
+ * `mintedTotal`: the contract mints the difference to the DAO (govPool) itself.
+ * This is the frontend's proven pattern (`useCreateDAO.ts` — `users`/`amounts`
+ * cover only the wallet distribution; the treasury is never an explicit
+ * recipient), shipped to BSC mainnet daily. The earlier "mainnet needs
+ * mintedTotal == sum(amounts)" belief (old bug #32) was wrong and forced the
+ * treasury address into `users[]`. Only OVER-distribution (sum > minted) is
+ * invalid. See also `checkNoTreasuryRecipient`.
  */
-export function checkTreasuryRemainder(mintedTotal, amounts, chainId, isTokenCreation) {
+export function checkTreasuryRemainder(mintedTotal, amounts, isTokenCreation) {
     if (!isTokenCreation)
         return pass("deploy.treasury-remainder");
     const minted = BigInt(mintedTotal);
     const sum = amounts.reduce((a, b) => a + BigInt(b), 0n);
-    if (minted === sum)
-        return pass("deploy.treasury-remainder", `minted=${minted}`);
-    if (chainId === 56) {
-        return fail("deploy.treasury-remainder", `On BSC mainnet, tokenParams.mintedTotal (${minted}) must equal sum(amounts) (${sum}) — a treasury remainder ` +
-            "reverts deployGovPool (bug #32). Distribute the full mintedTotal across recipients.", `remainder=${minted - sum}`);
+    if (sum > minted) {
+        return fail("deploy.treasury-remainder", `sum(amounts) (${sum}) exceeds tokenParams.mintedTotal (${minted}) — cannot distribute more than the total ` +
+            "mint. Lower the recipient amounts or raise mintedTotal.", `over=${sum - minted}`);
+    }
+    return pass("deploy.treasury-remainder", `treasuryRemainder=${minted - sum}`);
+}
+// ==========================================================================
+// DAO governance coherence — frontend parity (never ship a broken/unusable DAO)
+// ==========================================================================
+//
+// The frontend (C:/dev/investing-dashboard, source of truth) BLOCKS DAO configs
+// where governance can never function. dexe-mcp had none of these, so the model
+// could (and did) ship a DAO whose quorum was unreachable or whose treasury was
+// jammed into the voter list. These guards mirror the frontend's create-DAO
+// validation (`DefaultProposalStep`, `TokenCreationStep`, `GovSettings.sol`).
+/** DeXe percentage base: 100% = 1e27 (a quorum setting is pct × 1e25). */
+const PERCENTAGE_100 = 10n ** 27n;
+/**
+ * Meritocratic (polynomial) voting power for `votes` at a given `totalSupply`,
+ * ported from the frontend `calcMeritocraticVotingPower`
+ * (`utils/votePowerMath.ts`) with the default holder coefficient k3 = 0.97.
+ * Below the 7%-of-supply threshold, power is linear (== votes); above it the
+ * cubic curve applies. Token-amount math stays in bigint (wei); only the
+ * dimensionless percentage `t` uses float, at 6-decimal precision.
+ */
+export function meritocraticVotingPower(votes, totalSupply) {
+    if (totalSupply <= 0n)
+        return votes;
+    const threshold = (totalSupply * 7n) / 100n - 7n;
+    if (votes < threshold)
+        return votes;
+    // t = (votes/totalSupply)×100 − 7, in percentage points, 6-dec precision.
+    const t = Number((votes * 1000000n) / totalSupply) / 1_000_000 * 100 - 7;
+    let poly = t * 1.041 + t * t * -0.007211 + t * t * t * 0.00001994;
+    poly = poly * 0.97; // k3 (holders)
+    // power above threshold = poly% of totalSupply (poly scaled ×1e6 to stay integer).
+    const aboveWei = (BigInt(Math.round(poly * 1_000_000)) * totalSupply) / (100n * 1000000n);
+    const above = aboveWei > 0n ? aboveWei : 0n;
+    return above + threshold;
+}
+/**
+ * Quorum must be REACHABLE by the votable (wallet-held) token distribution —
+ * treasury/undistributed tokens can't vote. Mirrors the frontend's blocking
+ * `isLteThanInitialDistribution` (LINEAR) / `isDistributionCanReachQuorum`
+ * (POLYNOMIAL). Token-creation only (an external token's supply/distribution
+ * is unknown at deploy time, so the frontend skips it too).
+ */
+export function checkQuorumReachable(args) {
+    if (!args.isTokenCreation)
+        return pass("deploy.quorum-reachable", "external token");
+    const quorum = BigInt(args.quorumRaw);
+    const supply = BigInt(args.mintedTotal);
+    const votable = BigInt(args.votable);
+    if (supply <= 0n)
+        return pass("deploy.quorum-reachable", "no supply");
+    const quorumInTokens = (quorum * supply) / PERCENTAGE_100;
+    const power = args.voteType === "POLYNOMIAL_VOTES" ? meritocraticVotingPower(votable, supply) : votable;
+    if (power >= quorumInTokens) {
+        return pass("deploy.quorum-reachable", `quorumTokens=${quorumInTokens} ≤ votablePower=${power}`);
+    }
+    const quorumPct = quorumPctFromRaw(args.quorumRaw);
+    const reachablePct = Number((power * 10000n) / supply) / 100;
+    return fail("deploy.quorum-reachable", `Quorum ${quorumPct}% is UNREACHABLE: it requires ${quorumInTokens} vote-power but the votable token ` +
+        `distribution only provides ${power} (~${reachablePct}% of supply). Treasury/undistributed tokens cannot ` +
+        `vote. Fix: lower quorum to ≤ ${reachablePct}%, distribute more tokens to voters, or shrink the treasury ` +
+        `share. The frontend blocks this exact config (DefaultProposalStep isLteThanInitialDistribution).`, `voteType=${args.voteType}`);
+}
+/**
+ * `minVotesForVoting` / `minVotesForCreating` must not exceed the largest single
+ * recipient's balance — otherwise no holder can ever create or vote. Mirrors the
+ * frontend `value-lower-than-distribution` rule. Token-creation only.
+ */
+export function checkMinVotesVsDistribution(minVotesForVoting, minVotesForCreating, amounts, isTokenCreation) {
+    if (!isTokenCreation || amounts.length === 0)
+        return pass("deploy.min-votes");
+    const largest = amounts.reduce((m, a) => (BigInt(a) > m ? BigInt(a) : m), 0n);
+    const bad = [];
+    if (BigInt(minVotesForVoting) > largest)
+        bad.push(`minVotesForVoting (${minVotesForVoting})`);
+    if (BigInt(minVotesForCreating) > largest)
+        bad.push(`minVotesForCreating (${minVotesForCreating})`);
+    if (bad.length === 0)
+        return pass("deploy.min-votes", `largestRecipient=${largest}`);
+    return fail("deploy.min-votes", `${bad.join(" and ")} exceed the largest single recipient's balance (${largest}). No holder could then create ` +
+        "or vote on a proposal. Set these ≤ the biggest voter's token balance (frontend: value-lower-than-distribution).");
+}
+/**
+ * Contract-level init bounds (`GovSettings.sol:94-106`, `GovValidators.sol`):
+ * `0 < quorum ≤ 1e27`, `0 < quorumValidators ≤ 1e27`, `duration > 0`,
+ * `durationValidators > 0`. Violations revert `deployGovPool` with an empty
+ * reason — catch them here with a readable message.
+ */
+export function checkSettingsBounds(s) {
+    const q = BigInt(s.quorum);
+    const qv = BigInt(s.quorumValidators);
+    const d = BigInt(s.duration);
+    const dv = BigInt(s.durationValidators);
+    const bad = [];
+    if (q <= 0n || q > PERCENTAGE_100)
+        bad.push(`quorum must be 0 < q ≤ 1e27 (got ${q})`);
+    if (qv <= 0n || qv > PERCENTAGE_100)
+        bad.push(`quorumValidators must be 0 < q ≤ 1e27 (got ${qv})`);
+    if (d <= 0n)
+        bad.push(`duration must be > 0 (got ${d})`);
+    if (dv <= 0n)
+        bad.push(`durationValidators must be > 0 (got ${dv})`);
+    if (bad.length === 0)
+        return pass("deploy.settings-bounds");
+    return fail("deploy.settings-bounds", `GovSettings/GovValidators init would revert: ${bad.join("; ")}.`);
+}
+/**
+ * The DAO treasury (predicted govPool) must NEVER be a token recipient in
+ * `tokenParams.users` — treasury tokens can't vote, and the frontend never
+ * lists it (the remainder is minted to the DAO implicitly). Listing it inflates
+ * `sum(amounts)`, hides an unreachable quorum, and diverges from the frontend
+ * calldata shape.
+ */
+export function checkNoTreasuryRecipient(users, predictedGovPool) {
+    if (!predictedGovPool)
+        return pass("deploy.no-treasury-recipient");
+    const gp = predictedGovPool.toLowerCase();
+    if (users.some((u) => u.toLowerCase() === gp)) {
+        return fail("deploy.no-treasury-recipient", `Do not list the DAO treasury (predicted govPool ${predictedGovPool}) in tokenParams.users. Treasury tokens ` +
+            "cannot vote. Leave the treasury as an IMPLICIT remainder: set mintedTotal = full supply and users/amounts = " +
+            "external holders only (sum(amounts) < mintedTotal); the contract mints the remainder to the DAO. " +
+            "(matches frontend useCreateDAO — govPool is never in users[])");
     }
-    return { check: "deploy.treasury-remainder", ok: true, detail: `remainder=${minted - sum} tolerated on chain ${chainId} (advisory)` };
+    return pass("deploy.no-treasury-recipient");
 }
 // ==========================================================================
 // Mode 10 — edge cases (avatar, offchain, blacklist)

package/dist/lib/preflight.js.map

@@ -1 +1 @@
-{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/lib/preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAYhE,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,MAAe,EAAmB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAChG,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,WAAmB,EAAE,MAAe,EAAmB,EAAE,CAAC,CAAC;IACtF,KAAK;IACL,EAAE,EAAE,KAAK;IACT,WAAW;IACX,MAAM;CACP,CAAC,CAAC;AAEH,6DAA6D;AAC7D,MAAM,UAAU,YAAY,CAAC,OAA0B;IACrD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,KAAK,aAAa,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzH,CAAC;AAED,6EAA6E;AAC7E,iEAAiE;AACjE,6EAA6E;AAE7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,QAAQ;IACR,0BAA0B;IAC1B,iBAAiB;IACjB,UAAU;IACV,cAAc;IACd,kBAAkB;IAClB,QAAQ;IACR,aAAa;IACb,iBAAiB;IACjB,WAAW;CACH,CAAC;AAEX,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,OAAO,oBAAoB,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,yCAAyC;AAE9F,6EAA6E;AAC7E,6CAA6C;AAC7C,6EAA6E;AAE7E;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;IAC3D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KACtC,CAAC;SACD,QAAQ,EAAE;CACd,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClD,OAAO,IAAI,CACT,gBAAgB,EAChB,iIAAiI;QAC/H,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CACrC,YAAiC,EACjC,IAA+B;IAE/B,IAAI,IAAI,EAAE,UAAU,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,iBAAiB,EAAE,GAAG,YAAY,CAAC,MAAM,YAAY,CAAC,CAAC;IACpH,OAAO,IAAI,CACT,iBAAiB,EACjB,6GAA6G;QAC3G,sHAAsH,CACzH,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,6CAA6C;AAC7C,6EAA6E;AAE7E,MAAM,UAAU,kBAAkB,CAAC,cAAsB,EAAE,UAAkB,EAAE,OAAe;IAC5F,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7F,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,OAAO,IAAI,CACT,gBAAgB,EAChB,yCAAyC,UAAU,mBAAmB,OAAO,KAAK;YAChF,8FAA8F,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CACT,gBAAgB,EAChB,wBAAwB,cAAc,mCAAmC,UAAU,iBAAiB;QAClG,yBAAyB,CAC5B,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,+CAA+C;AAC/C,6EAA6E;AAE7E,MAAM,CAAC,MAAM,2BAA2B,GACtC,iHAAiH;IACjH,uEAAuE,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,cAAsB,EAAE,cAAsB;IAChF,IAAI,cAAc,KAAK,EAAE,IAAI,cAAc,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjF,OAAO,IAAI,CACT,iBAAiB,EACjB,sGAAsG;QACpG,uGAAuG,EACzG,aAAa,cAAc,cAAc,cAAc,EAAE,CAC1D,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,qCAAqC;AACrC,6EAA6E;AAE7E,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,WAAmB,EAAE,eAAwB;IACvF,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,GAAG,QAAQ;QAAE,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,KAAK,WAAW,QAAQ,EAAE,CAAC,CAAC;IACnG,OAAO,IAAI,CACT,YAAY,EACZ,oBAAoB,KAAK,gEAAgE,QAAQ,KAAK;QACpG,qDAAqD,CACxD,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAEvD,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,QAA4B;IAChF,IAAI,QAAQ,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,oEAAoE;IACpE,4EAA4E;IAC5E,8CAA8C;IAC9C,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,UAAU,CAAC,0BAA0B,CAAC;QAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAChF,OAAO,IAAI,CACT,oBAAoB,EACpB,6CAA6C,QAAQ,6CAA6C,0BAA0B,KAAK;QAC/H,mFAAmF,CACtF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,YAAoB,EAAE,UAAkB,EAAE,eAAwB;IACrG,IAAI,eAAe;QAAE,OAAO,IAAI,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,KAAK,WAAW,CAAC;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,WAAW,CAAC;IACnE,IAAI,QAAQ,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC/D,OAAO,IAAI,CACT,yBAAyB,EACzB,0GAA0G;QACxG,2FAA2F,CAC9F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,OAAiB,EACjB,OAAe,EACf,eAAwB;IAExB,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC,2BAA2B,EAAE,UAAU,MAAM,EAAE,CAAC,CAAC;IACjF,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,OAAO,IAAI,CACT,2BAA2B,EAC3B,4CAA4C,MAAM,8BAA8B,GAAG,2BAA2B;YAC5G,qFAAqF,EACvF,aAAa,MAAM,GAAG,GAAG,EAAE,CAC5B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,2BAA2B,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,MAAM,GAAG,GAAG,uBAAuB,OAAO,aAAa,EAAE,CAAC;AACxI,CAAC;AAED,6EAA6E;AAC7E,qDAAqD;AACrD,6EAA6E;AAE7E,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,UAAuB;IACzE,MAAM,QAAQ,GACZ,UAAU,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC;QAClC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAC9E,CAAC,CAAC,KAAK,CAAC;IACZ,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,IAAI,CACT,aAAa,EACb,mDAAmD,QAAQ,gDAAgD;YACzG,kGAAkG,CACrG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,gBAAgB,QAAQ,iEAAiE;SAClG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAkD;IACtF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,6EAA6E,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,gEAAgE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAkB,EAClB,KAAa,EACb,SAAiB;IAEjB,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,CAAC;IACpG,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1D,IAAI,EAAE,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC,qBAAqB,EAAE,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IACtG,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;IAChH,OAAO,IAAI,CAAC,qBAAqB,EAAE,2BAA2B,CAAC,CAAC;AAClE,CAAC"}
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/lib/preflight.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAYnD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,MAAe,EAAmB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAChG,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,WAAmB,EAAE,MAAe,EAAmB,EAAE,CAAC,CAAC;IACtF,KAAK;IACL,EAAE,EAAE,KAAK;IACT,WAAW;IACX,MAAM;CACP,CAAC,CAAC;AAEH,6DAA6D;AAC7D,MAAM,UAAU,YAAY,CAAC,OAA0B;IACrD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;AAC5C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,OAA0B;IACxD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,KAAK,aAAa,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzH,CAAC;AAED,6EAA6E;AAC7E,iEAAiE;AACjE,6EAA6E;AAE7E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,QAAQ;IACR,0BAA0B;IAC1B,iBAAiB;IACjB,UAAU;IACV,cAAc;IACd,kBAAkB;IAClB,QAAQ;IACR,aAAa;IACb,iBAAiB;IACjB,WAAW;CACH,CAAC;AAEX,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,OAAO,oBAAoB,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC;AACpD,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,yCAAyC;AAE9F,6EAA6E;AAC7E,6CAA6C;AAC7C,6EAA6E;AAE7E;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0BAA0B,CAAC;IAC3D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtC,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;KACtC,CAAC;SACD,QAAQ,EAAE;CACd,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,UAAU,qBAAqB,CAAC,IAAa;IACjD,MAAM,MAAM,GAAG,+BAA+B,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClD,OAAO,IAAI,CACT,gBAAgB,EAChB,iIAAiI;QAC/H,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CACrC,YAAiC,EACjC,IAA+B;IAE/B,IAAI,IAAI,EAAE,UAAU,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,iBAAiB,EAAE,GAAG,YAAY,CAAC,MAAM,YAAY,CAAC,CAAC;IACpH,OAAO,IAAI,CACT,iBAAiB,EACjB,6GAA6G;QAC3G,sHAAsH,CACzH,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,6CAA6C;AAC7C,6EAA6E;AAE7E,MAAM,UAAU,kBAAkB,CAAC,cAAsB,EAAE,UAAkB,EAAE,OAAe;IAC5F,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE;QAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7F,IAAI,cAAc,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC3D,OAAO,IAAI,CACT,gBAAgB,EAChB,yCAAyC,UAAU,mBAAmB,OAAO,KAAK;YAChF,8FAA8F,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CACT,gBAAgB,EAChB,wBAAwB,cAAc,mCAAmC,UAAU,iBAAiB;QAClG,yBAAyB,CAC5B,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,+CAA+C;AAC/C,6EAA6E;AAE7E,MAAM,CAAC,MAAM,2BAA2B,GACtC,iHAAiH;IACjH,uEAAuE,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,cAAsB,EAAE,cAAsB;IAChF,IAAI,cAAc,KAAK,EAAE,IAAI,cAAc,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACjF,OAAO,IAAI,CACT,iBAAiB,EACjB,sGAAsG;QACpG,uGAAuG,EACzG,aAAa,cAAc,cAAc,cAAc,EAAE,CAC1D,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,qCAAqC;AACrC,6EAA6E;AAE7E;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW,EAAE,WAAmB,EAAE,eAAwB;IACvF,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAChB,OAAO,IAAI,CACT,YAAY,EACZ,0GAA0G;YACxG,qDAAqD,QAAQ,gDAAgD,CAChH,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QACrB,OAAO,IAAI,CACT,YAAY,EACZ,oBAAoB,KAAK,4BAA4B,QAAQ,sCAAsC;YACjG,uGAAuG,CAC1G,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,YAAY,EAAE,OAAO,KAAK,WAAW,QAAQ,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAEvD,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,QAA4B;IAChF,IAAI,QAAQ,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,oEAAoE;IACpE,4EAA4E;IAC5E,8CAA8C;IAC9C,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;IAChG,IAAI,CAAC,CAAC,UAAU,CAAC,0BAA0B,CAAC;QAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC;IAChF,OAAO,IAAI,CACT,oBAAoB,EACpB,6CAA6C,QAAQ,6CAA6C,0BAA0B,KAAK;QAC/H,mFAAmF,CACtF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAAC,YAAoB,EAAE,UAAkB,EAAE,eAAwB;IACrG,IAAI,eAAe;QAAE,OAAO,IAAI,CAAC,yBAAyB,EAAE,oBAAoB,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,KAAK,WAAW,CAAC;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,WAAW,CAAC;IACnE,IAAI,QAAQ,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC,yBAAyB,CAAC,CAAC;IAC/D,OAAO,IAAI,CACT,yBAAyB,EACzB,0GAA0G;QACxG,2FAA2F,CAC9F,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,OAAiB,EACjB,eAAwB;IAExB,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;QACjB,OAAO,IAAI,CACT,2BAA2B,EAC3B,iBAAiB,GAAG,sCAAsC,MAAM,4CAA4C;YAC1G,yDAAyD,EAC3D,QAAQ,GAAG,GAAG,MAAM,EAAE,CACvB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,2BAA2B,EAAE,qBAAqB,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,6EAA6E;AAC7E,gFAAgF;AAChF,6EAA6E;AAC7E,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,4EAA4E;AAC5E,8EAA8E;AAE9E,0EAA0E;AAC1E,MAAM,cAAc,GAAG,GAAG,IAAI,GAAG,CAAC;AAElC;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa,EAAE,WAAmB;IACxE,IAAI,WAAW,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,SAAS,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;IACjD,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,0EAA0E;IAC1E,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,GAAG,QAAU,CAAC,GAAG,WAAW,CAAC,GAAG,SAAS,GAAG,GAAG,GAAG,CAAC,CAAC;IAC3E,IAAI,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC;IAClE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,eAAe;IACnC,mFAAmF;IACnF,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,QAAU,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,OAAO,KAAK,GAAG,SAAS,CAAC;AAC3B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAMpC;IACC,IAAI,CAAC,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC,yBAAyB,EAAE,gBAAgB,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrC,IAAI,MAAM,IAAI,EAAE;QAAE,OAAO,IAAI,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,GAAG,cAAc,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,KAAK,kBAAkB,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxG,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,yBAAyB,EAAE,gBAAgB,cAAc,mBAAmB,KAAK,EAAE,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC;IAC7D,OAAO,IAAI,CACT,yBAAyB,EACzB,UAAU,SAAS,iCAAiC,cAAc,oCAAoC;QACpG,8BAA8B,KAAK,MAAM,YAAY,qDAAqD;QAC1G,gCAAgC,YAAY,8DAA8D;QAC1G,kGAAkG,EACpG,YAAY,IAAI,CAAC,QAAQ,EAAE,CAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,iBAAyB,EACzB,mBAA2B,EAC3B,OAAiB,EACjB,eAAwB;IAExB,IAAI,CAAC,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,MAAM,CAAC,iBAAiB,CAAC,GAAG,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,sBAAsB,iBAAiB,GAAG,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,mBAAmB,CAAC,GAAG,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,mBAAmB,GAAG,CAAC,CAAC;IACpG,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,OAAO,EAAE,CAAC,CAAC;IACrF,OAAO,IAAI,CACT,kBAAkB,EAClB,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,mDAAmD,OAAO,iCAAiC;QAC7G,iHAAiH,CACpH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAKnC;IACC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,cAAc;QAAE,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,GAAG,CAAC,CAAC;IACtF,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,cAAc;QAAE,GAAG,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;IACnG,IAAI,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,EAAE,IAAI,EAAE;QAAE,GAAG,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,wBAAwB,EAAE,gDAAgD,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3G,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAe,EAAE,gBAAyB;IACjF,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACnE,MAAM,EAAE,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC;IAC1C,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CACT,8BAA8B,EAC9B,mDAAmD,gBAAgB,0CAA0C;YAC3G,8GAA8G;YAC9G,mGAAmG;YACnG,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,8BAA8B,CAAC,CAAC;AAC9C,CAAC;AAED,6EAA6E;AAC7E,qDAAqD;AACrD,6EAA6E;AAE7E,qFAAqF;AACrF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,UAAuB;IACzE,MAAM,QAAQ,GACZ,UAAU,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC;QAClC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAC9E,CAAC,CAAC,KAAK,CAAC;IACZ,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,IAAI,CACT,aAAa,EACb,mDAAmD,QAAQ,gDAAgD;YACzG,kGAAkG,CACrG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO;YACL,KAAK,EAAE,aAAa;YACpB,EAAE,EAAE,IAAI;YACR,MAAM,EAAE,gBAAgB,QAAQ,iEAAiE;SAClG,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAkD;IACtF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,6EAA6E,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,MAAM,gEAAgE,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAkB,EAClB,KAAa,EACb,SAAiB;IAEjB,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC,qBAAqB,EAAE,0BAA0B,CAAC,CAAC;IACpG,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1D,IAAI,EAAE,CAAC,MAAM,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC,qBAAqB,EAAE,cAAc,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IACtG,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;IAChH,OAAO,IAAI,CAAC,qBAAqB,EAAE,2BAA2B,CAAC,CAAC;AAClE,CAAC"}

package/dist/lib/qr.d.ts

@@ -0,0 +1,43 @@
+/**
+ * QR rendering for WalletConnect pairing URIs.
+ *
+ * `qrcode` is **lazily imported** (mirrors the WalletConnect provider in
+ * `walletconnect.ts`) so read-only / EOA installs that never pair pay no cost,
+ * and a missing/broken install degrades gracefully to `null` — callers then
+ * fall back to the raw `uri` string plus the external QR-image URL.
+ */
+export interface RenderedQr {
+    /** Scannable ASCII/half-block QR for a monospace terminal, or null. */
+    ascii: string | null;
+    /** Base64 PNG (no data-URL prefix) for an MCP `image` content block, or null. */
+    pngBase64: string | null;
+}
+/**
+ * Render `text` (a WalletConnect `wc:` URI) as both a terminal ASCII QR and a
+ * base64 PNG. Never throws — any failure yields `{ ascii: null, pngBase64: null }`.
+ */
+export declare function renderQr(text: string): Promise<RenderedQr>;
+/** External fallback image URL for clients that can render neither ASCII nor an image block. */
+export declare function qrFallbackUrl(uri: string): string;
+/** One MCP `content[]` item — text or image. Kept loose to match the tool call sites. */
+type PairingContent = {
+    type: "text";
+    text: string;
+} | {
+    type: "image";
+    data: string;
+    mimeType: string;
+};
+/**
+ * Build the MCP `content[]` for a WalletConnect pairing response, shared by
+ * `dexe_wc_connect` and `dexe_tx_send`'s auto-pairing branch so the QR + the
+ * fallbacks stay identical everywhere.
+ *
+ *   1. An ASCII QR text block (captioned) — scannable in a bare terminal.
+ *   2. An `image/png` block — a crisp QR in GUI MCP clients.
+ *   3. A JSON block with `uri`, `chainId`, the external fallback URL, and a
+ *      `renderHint` telling the assistant to echo the ASCII block verbatim.
+ */
+export declare function wcPairingContent(uri: string, chainId: number, extra?: Record<string, unknown>): Promise<PairingContent[]>;
+export {};
+//# sourceMappingURL=qr.d.ts.map

package/dist/lib/qr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qr.d.ts","sourceRoot":"","sources":["../../src/lib/qr.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAQH,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,iFAAiF;IACjF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAqBD;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAmBhE;AAED,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,yFAAyF;AACzF,KAAK,cAAc,GACf;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,cAAc,EAAE,CAAC,CAkC3B"}