tenzro-wallet 0.1.0

package/dist/ports/bridge/bridge.d.ts

@@ -0,0 +1,123 @@
+/**
+ * BridgeRoutePort — cross-chain bridge route abstraction (M8 milestone).
+ *
+ * The kernel never picks a bridge itself; it asks each registered adapter
+ * for a quote and lets the consumer (router UI / agent policy) pick the
+ * winner. Adapters wrap third-party SDKs (LI.FI, CCIP, LayerZero) — none
+ * of which are browser-clean as a class. Each adapter file in
+ * `./adapters/` lives as a stub (`*-pending.ts`-style: shape + throws)
+ * until the third-party SDK shape is pinned and we decide whether to
+ * embed via dynamic import, run server-side, or wrap a Tenzro RPC proxy.
+ *
+ * Per DESIGN.md §10 milestone 8 — "mostly assembly", not new design work.
+ *
+ * Per `reference_agentic_payments_2026.md`: the wallet's *unique* multi-VM
+ * value lands at the kernel's route layer (one consent flow across
+ * EVM/SVM/Canton/Tenzro), so we keep the *port* shape stable now even
+ * though the adapters wait for M8.
+ */
+/**
+ * Vendor adapters Tenzro's BridgeRouter supports (per docs/bridge):
+ *   - `lifi` — LI.FI aggregator (27+ bridges, 58+ chains)
+ *   - `ccip` — Chainlink CCIP (DON-verified)
+ *   - `layerzero` — LayerZero v2 (cross-chain messaging)
+ *   - `wormhole` — Wormhole (rolled out in the latest Tenzro update)
+ *   - `debridge` — deBridge DLN (intent-based, post-fulfilment hooks)
+ *   - `canton` — Canton-side adapter for Canton/external-chain corridors
+ */
+export type BridgeAdapterId = 'lifi' | 'ccip' | 'layerzero' | 'wormhole' | 'debridge' | 'canton';
+/**
+ * Identifies a destination chain in a bridge-vendor-neutral way. The
+ * adapter maps this onto the vendor's own ID space (LI.FI uses chain ids,
+ * CCIP uses 64-bit selectors, LayerZero uses endpoint ids — the kernel
+ * does not care).
+ */
+export interface BridgeChainRef {
+    /**
+     * Tenzro-side surface name when the source/destination is on Tenzro.
+     * For external chains, this is the canonical chain slug
+     * (`'ethereum'`, `'polygon'`, `'solana'`, `'canton-mainnet'`, etc.).
+     */
+    readonly chain: string;
+    /**
+     * Optional — chain id (EVM 1, 137; non-EVM "solana"). Carried only when
+     * the adapter needs it; canonical chain slug above is the primary key.
+     */
+    readonly chainId?: number;
+}
+export interface BridgeQuoteRequest {
+    readonly fromChain: BridgeChainRef;
+    readonly toChain: BridgeChainRef;
+    /** Sender address (chain-native shape). */
+    readonly fromAddress: string;
+    /** Receiver address (chain-native shape). */
+    readonly toAddress: string;
+    /** Asset on the source side. Adapter resolves the destination asset. */
+    readonly fromAsset: string;
+    /** Decimal amount in source-asset smallest units. */
+    readonly amount: bigint;
+    /**
+     * Optional preference — caller can ask for the cheapest, fastest, or
+     * lowest-trust route. Adapters may ignore unknown values and return
+     * their default ordering.
+     */
+    readonly prefer?: 'cheapest' | 'fastest' | 'safest';
+}
+export interface BridgeQuote {
+    readonly adapter: BridgeAdapterId;
+    /** Estimated arrival on destination, in source-asset smallest units. */
+    readonly toAmount: bigint;
+    /** Estimated total fees in source-asset smallest units. */
+    readonly fees: bigint;
+    /** ETA in seconds. */
+    readonly etaSec: number;
+    /** Adapter-specific opaque payload — the wallet hands it back to `build`. */
+    readonly opaque: Readonly<Record<string, unknown>>;
+    /**
+     * One-line human description shown in the route picker
+     * (e.g. "LI.FI · Stargate USDC · ~30s · $0.42").
+     */
+    readonly summary: string;
+}
+export interface BridgeBuildRequest {
+    /** A `BridgeQuote.opaque` returned by the same adapter. */
+    readonly opaque: Readonly<Record<string, unknown>>;
+}
+/**
+ * The transactions the wallet must sign + submit to start the bridge. The
+ * kernel hands these to the source surface for signing; the adapter does
+ * NOT sign on its own. Most adapters return one tx; some (e.g. ERC-20
+ * approve + bridge call) return two.
+ */
+export interface BridgeBuildResult {
+    readonly transactions: ReadonlyArray<{
+        readonly chain: string;
+        /**
+         * Surface-shaped tx body — opaque to the kernel. EVM bridges return
+         * `{ to, data, value }`; SVM bridges return `{ instructions: [...] }`;
+         * Canton bridges return `{ command: ... }`. The source surface narrows.
+         */
+        readonly body: Readonly<Record<string, unknown>>;
+        /** Free-form label for the consent screen ("Approve USDC", "Bridge"). */
+        readonly label: string;
+    }>;
+    /** Bridge identifier the adapter uses to track delivery. */
+    readonly trackerId: string;
+}
+export type BridgeStatusPhase = 'pending-source' | 'in-flight' | 'delivered' | 'failed';
+export interface BridgeStatus {
+    readonly trackerId: string;
+    readonly phase: BridgeStatusPhase;
+    /** Source-chain tx hash, when known. */
+    readonly sourceTx?: string;
+    /** Destination-chain tx hash, when known. */
+    readonly destinationTx?: string;
+    readonly error?: string;
+}
+export interface BridgeRoutePort {
+    readonly adapterId: BridgeAdapterId;
+    quote(req: BridgeQuoteRequest): Promise<BridgeQuote>;
+    build(req: BridgeBuildRequest): Promise<BridgeBuildResult>;
+    track(trackerId: string): AsyncIterable<BridgeStatus>;
+}
+//# sourceMappingURL=bridge.d.ts.map

package/dist/ports/bridge/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/ports/bridge/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEjG;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,2CAA2C;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,6CAA6C;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;CACrD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sBAAsB;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;QACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB;;;;WAIG;QACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QACjD,yEAAyE;QACzE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;IACH,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,iBAAiB,GAAG,gBAAgB,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;AAExF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,wCAAwC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,6CAA6C;IAC7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,KAAK,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,KAAK,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC3D,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;CACvD"}

package/dist/ports/bridge/bridge.js

@@ -0,0 +1,20 @@
+/**
+ * BridgeRoutePort — cross-chain bridge route abstraction (M8 milestone).
+ *
+ * The kernel never picks a bridge itself; it asks each registered adapter
+ * for a quote and lets the consumer (router UI / agent policy) pick the
+ * winner. Adapters wrap third-party SDKs (LI.FI, CCIP, LayerZero) — none
+ * of which are browser-clean as a class. Each adapter file in
+ * `./adapters/` lives as a stub (`*-pending.ts`-style: shape + throws)
+ * until the third-party SDK shape is pinned and we decide whether to
+ * embed via dynamic import, run server-side, or wrap a Tenzro RPC proxy.
+ *
+ * Per DESIGN.md §10 milestone 8 — "mostly assembly", not new design work.
+ *
+ * Per `reference_agentic_payments_2026.md`: the wallet's *unique* multi-VM
+ * value lands at the kernel's route layer (one consent flow across
+ * EVM/SVM/Canton/Tenzro), so we keep the *port* shape stable now even
+ * though the adapters wait for M8.
+ */
+export {};
+//# sourceMappingURL=bridge.js.map

package/dist/ports/bridge/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/ports/bridge/bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG"}

package/dist/ports/bridge/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Bridge router ports + adapter stubs (M8). All adapters throw "M8 pending"
+ * until the third-party SDK wiring lands; the port shape is stable.
+ */
+export type { BridgeAdapterId, BridgeChainRef, BridgeQuoteRequest, BridgeQuote, BridgeBuildRequest, BridgeBuildResult, BridgeStatusPhase, BridgeStatus, BridgeRoutePort, } from './bridge.js';
+export { LiFiBridgeAdapter } from './adapters/lifi-adapter.js';
+export { CcipBridgeAdapter } from './adapters/ccip-adapter.js';
+export { LayerZeroBridgeAdapter } from './adapters/layerzero-adapter.js';
+export { WormholeBridgeAdapter } from './adapters/wormhole-adapter.js';
+export { DeBridgeBridgeAdapter } from './adapters/debridge-adapter.js';
+export { CantonBridgeAdapter } from './adapters/canton-bridge-adapter.js';
+export type { BridgeClientLike } from './adapters/bridge-adapter-base.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/bridge/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ports/bridge/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,YAAY,EACV,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAC1E,YAAY,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC"}

package/dist/ports/bridge/index.js

@@ -0,0 +1,11 @@
+/**
+ * Bridge router ports + adapter stubs (M8). All adapters throw "M8 pending"
+ * until the third-party SDK wiring lands; the port shape is stable.
+ */
+export { LiFiBridgeAdapter } from "./adapters/lifi-adapter.js";
+export { CcipBridgeAdapter } from "./adapters/ccip-adapter.js";
+export { LayerZeroBridgeAdapter } from "./adapters/layerzero-adapter.js";
+export { WormholeBridgeAdapter } from "./adapters/wormhole-adapter.js";
+export { DeBridgeBridgeAdapter } from "./adapters/debridge-adapter.js";
+export { CantonBridgeAdapter } from "./adapters/canton-bridge-adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/ports/bridge/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ports/bridge/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC"}

package/dist/ports/canton/adapters/ledger-api-adapter.d.ts

@@ -0,0 +1,52 @@
+/**
+ * LedgerApiAdapter — `CantonValidatorPort` backed by the JSON Ledger API
+ * + Splice validator-app HTTP surface.
+ *
+ * Browser-clean by design: only `fetch` + `WebCrypto` (the `http.ts`
+ * helpers handle both). No `@canton-network/wallet-sdk` dep — that package
+ * pulls `@grpc/grpc-js` which doesn't run in browsers, Workers, or Deno.
+ *
+ * The adapter mirrors the pattern Splice Wallet Kernel itself uses
+ * (`core/ledger-client`): hand-rolled HTTP client over the published JSON
+ * Ledger API. CIP-0103 explicitly endorses raw Ledger API access.
+ *
+ * Wire-format details:
+ *   - Bytes are base64-encoded on the JSON Ledger API (handled by the
+ *     `replacer` in `http.ts`; decoded back to `Uint8Array` here).
+ *   - Bigint amounts are decimal strings on the wire; the kernel keeps them
+ *     as bigint internally.
+ *   - Completion stream is NDJSON over a keep-alive HTTP/1.1 connection.
+ *
+ * Spec refs:
+ *   - DESIGN.md §4.4 (canton-internal) + §4.5 (canton-external)
+ *   - https://docs.digitalasset.com/integrate/devnet/preparing-and-signing-transactions/
+ *   - Canton OSS `interactive_submission_service.proto`
+ *   - Splice Wallet Kernel `core/ledger-client` (reference pattern)
+ */
+import type { ActiveContractsFilter, CantonActiveContract, CantonCompletion, CantonValidatorPort, CompletionFilter, ExecuteSubmissionRequest, GenerateTopologyRequest, GenerateTopologyResponse, PrepareAcceptSetupRequest, PrepareAcceptSetupResponse, PrepareSubmissionRequest, PrepareSubmissionResponse, SetupProposalRequest, SubmitAcceptSetupRequest, SubmitTopologyRequest, TransferPreapproval } from '../canton-validator.js';
+import { type CantonHttpConfig } from '../http.js';
+export interface LedgerApiAdapterConfig extends CantonHttpConfig {
+    /**
+     * The Ledger API requires a `user_id` on prepare/execute and completions
+     * filters. This is the validator-side identifier of the wallet's
+     * application user (Auth0 subject mapped to a Canton user). The host
+     * passes it through; the kernel doesn't care about its shape.
+     */
+    readonly userId: string;
+}
+export declare class LedgerApiAdapter implements CantonValidatorPort {
+    #private;
+    constructor(cfg: LedgerApiAdapterConfig);
+    prepareSubmission(req: PrepareSubmissionRequest): Promise<PrepareSubmissionResponse>;
+    executeSubmission(req: ExecuteSubmissionRequest): Promise<void>;
+    tailCompletions(filter: CompletionFilter): AsyncIterable<CantonCompletion>;
+    getActiveContracts(filter: ActiveContractsFilter): AsyncIterable<CantonActiveContract>;
+    lookupPreapproval(party: string): Promise<TransferPreapproval | null>;
+    resolveCns(name: string): Promise<string | null>;
+    generateTopology(req: GenerateTopologyRequest): Promise<GenerateTopologyResponse>;
+    submitTopology(req: SubmitTopologyRequest): Promise<void>;
+    setupProposal(req: SetupProposalRequest): Promise<void>;
+    prepareAcceptSetup(req: PrepareAcceptSetupRequest): Promise<PrepareAcceptSetupResponse>;
+    submitAcceptSetup(req: SubmitAcceptSetupRequest): Promise<void>;
+}
+//# sourceMappingURL=ledger-api-adapter.d.ts.map

package/dist/ports/canton/adapters/ledger-api-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-api-adapter.d.ts","sourceRoot":"","sources":["../../../../src/ports/canton/adapters/ledger-api-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAEhB,mBAAmB,EACnB,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,oBAAoB,EACpB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,gBAAgB,EAMtB,MAAM,YAAY,CAAC;AAkHpB,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC9D;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,gBAAiB,YAAW,mBAAmB;;gBAG9C,GAAG,EAAE,sBAAsB;IAIjC,iBAAiB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAuBpF,iBAAiB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB9D,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,aAAa,CAAC,gBAAgB,CAAC;IA4B1E,kBAAkB,CAAC,MAAM,EAAE,qBAAqB,GAAG,aAAa,CAAC,oBAAoB,CAAC;IA4CvF,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC;IAuBrE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAchD,gBAAgB,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAuBjF,cAAc,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBzD,aAAa,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IASvD,kBAAkB,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAqBvF,iBAAiB,CAAC,GAAG,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC;CAetE"}

package/dist/ports/canton/adapters/ledger-api-adapter.js

@@ -0,0 +1,232 @@
+/**
+ * LedgerApiAdapter — `CantonValidatorPort` backed by the JSON Ledger API
+ * + Splice validator-app HTTP surface.
+ *
+ * Browser-clean by design: only `fetch` + `WebCrypto` (the `http.ts`
+ * helpers handle both). No `@canton-network/wallet-sdk` dep — that package
+ * pulls `@grpc/grpc-js` which doesn't run in browsers, Workers, or Deno.
+ *
+ * The adapter mirrors the pattern Splice Wallet Kernel itself uses
+ * (`core/ledger-client`): hand-rolled HTTP client over the published JSON
+ * Ledger API. CIP-0103 explicitly endorses raw Ledger API access.
+ *
+ * Wire-format details:
+ *   - Bytes are base64-encoded on the JSON Ledger API (handled by the
+ *     `replacer` in `http.ts`; decoded back to `Uint8Array` here).
+ *   - Bigint amounts are decimal strings on the wire; the kernel keeps them
+ *     as bigint internally.
+ *   - Completion stream is NDJSON over a keep-alive HTTP/1.1 connection.
+ *
+ * Spec refs:
+ *   - DESIGN.md §4.4 (canton-internal) + §4.5 (canton-external)
+ *   - https://docs.digitalasset.com/integrate/devnet/preparing-and-signing-transactions/
+ *   - Canton OSS `interactive_submission_service.proto`
+ *   - Splice Wallet Kernel `core/ledger-client` (reference pattern)
+ */
+import { base64Decode, base64Encode, getJson, postJson, streamNdjson, } from "../http.js";
+export class LedgerApiAdapter {
+    #cfg;
+    constructor(cfg) {
+        this.#cfg = cfg;
+    }
+    async prepareSubmission(req) {
+        const wire = {
+            user_id: this.#cfg.userId,
+            command_id: req.commandId,
+            synchronizer_id: req.synchronizerId,
+            act_as: [req.actAs],
+            package_id_selection_preference: [req.packageIdSelectionPreference],
+            commands: req.commands,
+            verbose_hashing: true,
+        };
+        const res = await postJson(this.#cfg, 'ledger', '/v2/interactive-submission/prepare', wire);
+        return {
+            preparedTransaction: base64Decode(res.prepared_transaction),
+            preparedTransactionHash: base64Decode(res.prepared_transaction_hash),
+            hashingSchemeVersion: assertHashingScheme(res.hashing_scheme_version),
+        };
+    }
+    async executeSubmission(req) {
+        const wire = {
+            prepared_transaction: base64Encode(req.preparedTransaction),
+            party_signatures: req.partySignatures.map((s) => ({
+                party: s.party,
+                signature: base64Encode(s.signature),
+                signing_algorithm_spec: s.scheme,
+                signed_by: s.signedBy,
+            })),
+            hashing_scheme_version: req.hashingSchemeVersion,
+            submission_id: req.submissionId,
+            user_id: this.#cfg.userId,
+        };
+        await postJson(this.#cfg, 'ledger', '/v2/interactive-submission/execute', wire);
+    }
+    async *tailCompletions(filter) {
+        const wire = {
+            user_id: filter.userId,
+            parties: [...filter.actAs],
+            ...(filter.beginExclusive !== undefined ? { begin_exclusive: filter.beginExclusive } : {}),
+        };
+        for await (const el of streamNdjson(this.#cfg, 'ledger', '/v2/commands/completions', wire)) {
+            const c = el.completion;
+            if (!c)
+                continue;
+            // Canton status codes: 0 = OK, anything else is a failure. The
+            // gRPC status carries the structured error in `message`.
+            const failed = c.status !== undefined && c.status.code !== 0;
+            const completion = {
+                commandId: c.command_id,
+                updateId: c.update_id,
+                completionOffset: c.offset,
+                status: failed ? 'failed' : 'executed',
+                ...(failed && c.status?.message !== undefined ? { errorMessage: c.status.message } : {}),
+            };
+            yield completion;
+        }
+    }
+    async *getActiveContracts(filter) {
+        // Active set on the JSON Ledger API needs an offset to read at. We pull
+        // the current ledger end first, then read the active set at that point.
+        // This matches Splice Wallet Kernel's `getActiveContracts` flow.
+        const ledgerEnd = await getJson(this.#cfg, 'ledger', '/v2/state/ledger-end');
+        const wire = {
+            filter: {
+                filters_by_party: {
+                    [filter.party]: {
+                        cumulative: filter.templateIds === undefined || filter.templateIds.length === 0
+                            ? [{ wildcard_filter: {} }]
+                            : filter.templateIds.map((t) => ({
+                                template_filter: { template_id: t },
+                            })),
+                    },
+                },
+            },
+            verbose: false,
+            active_at_offset: ledgerEnd.offset,
+        };
+        for await (const el of streamNdjson(this.#cfg, 'ledger', '/v2/state/active-contracts', wire)) {
+            const ev = el.contract_entry?.active_contract?.created_event;
+            if (!ev)
+                continue;
+            yield {
+                contractId: ev.contract_id,
+                templateId: ev.template_id,
+                // The validator returns either a structured payload or a base64 blob;
+                // the kernel surface narrows this per template, so keep it raw.
+                payload: ev.create_arguments ?? ev.create_arguments_blob ?? null,
+                createdAtOffset: ev.offset,
+            };
+        }
+    }
+    async lookupPreapproval(party) {
+        // Scan-proxied via the validator-app. The Tenzro validator wraps the
+        // global Scan API at `/api/validator/v0/scan-proxy/...`.
+        try {
+            const res = await getJson(this.#cfg, 'validator', `/api/validator/v0/scan-proxy/transfer-preapprovals/by-party/${encodeURIComponent(party)}`);
+            if (!res.transfer_preapproval)
+                return null;
+            const p = res.transfer_preapproval;
+            return {
+                contractId: p.contract_id,
+                receiver: p.payload.receiver,
+                provider: p.payload.provider,
+                expiresAt: parseTimestamp(p.payload.expires_at),
+            };
+        }
+        catch (e) {
+            if (isHttpStatus(e, 404))
+                return null;
+            throw e;
+        }
+    }
+    async resolveCns(name) {
+        try {
+            const res = await getJson(this.#cfg, 'validator', `/api/validator/v0/scan-proxy/ans-entries/by-name/${encodeURIComponent(name)}`);
+            return res.entry?.party_id ?? null;
+        }
+        catch (e) {
+            if (isHttpStatus(e, 404))
+                return null;
+            throw e;
+        }
+    }
+    async generateTopology(req) {
+        const wire = {
+            party_hint: req.partyHint,
+            public_key: base64Encode(req.namespacePublicKey),
+            signing_keys: req.signingPublicKeys.map((k) => ({
+                public_key: base64Encode(k.publicKey),
+                signing_algorithm_spec: k.scheme,
+            })),
+            threshold: req.threshold,
+        };
+        const res = await postJson(this.#cfg, 'validator', '/api/validator/v0/admin/external-party/topology/generate', wire);
+        return {
+            topologyTransactions: res.topology_transactions.map(base64Decode),
+            bundleHash: base64Decode(res.multi_hash),
+            partyId: res.party_id,
+        };
+    }
+    async submitTopology(req) {
+        const wire = {
+            topology_transactions: req.topologyTransactions.map(base64Encode),
+            signed_topology_txs: [
+                {
+                    signature: base64Encode(req.namespaceSignature),
+                    // Namespace key is always Ed25519 per Canton's external-party model.
+                    signed_by: 'namespace',
+                    signing_algorithm_spec: 'ed25519',
+                },
+            ],
+        };
+        await postJson(this.#cfg, 'validator', '/api/validator/v0/admin/external-party/topology/submit', wire);
+    }
+    async setupProposal(req) {
+        await postJson(this.#cfg, 'validator', '/api/validator/v0/admin/external-party/setup-proposal', { user_party_id: req.partyId });
+    }
+    async prepareAcceptSetup(req) {
+        const res = await postJson(this.#cfg, 'validator', '/api/validator/v0/admin/external-party/setup-proposal/prepare-accept', { user_party_id: req.partyId });
+        return {
+            preparedTransaction: base64Decode(res.transaction),
+            preparedTransactionHash: base64Decode(res.tx_hash),
+            hashingSchemeVersion: assertHashingScheme(res.hashing_scheme_version),
+        };
+    }
+    async submitAcceptSetup(req) {
+        const wire = {
+            transaction: base64Encode(req.preparedTransaction),
+            signed_tx_hash: base64Encode(req.signature),
+            hashing_scheme_version: req.hashingSchemeVersion,
+            // Setup acceptance is always Ed25519 (signed by the namespace key).
+            signing_algorithm_spec: 'ed25519',
+        };
+        await postJson(this.#cfg, 'validator', '/api/validator/v0/admin/external-party/setup-proposal/submit-accept', wire);
+    }
+}
+// ─────────────────────────── helpers ───────────────────────────
+function assertHashingScheme(v) {
+    if (v !== 'HASHING_SCHEME_VERSION_V2') {
+        throw new Error(`LedgerApiAdapter: unsupported hashing scheme ${v}; kernel only knows V2 ` +
+            `(see DESIGN.md §11 open question #4)`);
+    }
+    return 'HASHING_SCHEME_VERSION_V2';
+}
+/**
+ * Parse a Canton timestamp. The Scan API returns ISO-8601 strings; some
+ * validator-app endpoints emit epoch microseconds as decimal strings. This
+ * normalises both to Unix milliseconds.
+ */
+function parseTimestamp(s) {
+    if (/^\d+$/.test(s)) {
+        // Epoch microseconds → milliseconds.
+        return Math.floor(Number(s) / 1000);
+    }
+    return Date.parse(s);
+}
+function isHttpStatus(e, status) {
+    return (typeof e === 'object' &&
+        e !== null &&
+        'status' in e &&
+        e.status === status);
+}
+//# sourceMappingURL=ledger-api-adapter.js.map

package/dist/ports/canton/adapters/ledger-api-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-api-adapter.js","sourceRoot":"","sources":["../../../../src/ports/canton/adapters/ledger-api-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAqBH,OAAO,EAEL,YAAY,EACZ,YAAY,EACZ,OAAO,EACP,QAAQ,EACR,YAAY,GACb,MAAM,YAAY,CAAC;AA4HpB,MAAM,OAAO,gBAAgB;IAClB,IAAI,CAAyB;IAEtC,YAAY,GAA2B;QACrC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,GAA6B;QACnD,MAAM,IAAI,GAA0B;YAClC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YACzB,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,eAAe,EAAE,GAAG,CAAC,cAAc;YACnC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;YACnB,+BAA+B,EAAE,CAAC,GAAG,CAAC,4BAA4B,CAAC;YACnE,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,eAAe,EAAE,IAAI;SACtB,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,IAAI,EACT,QAAQ,EACR,oCAAoC,EACpC,IAAI,CACL,CAAC;QACF,OAAO;YACL,mBAAmB,EAAE,YAAY,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC3D,uBAAuB,EAAE,YAAY,CAAC,GAAG,CAAC,yBAAyB,CAAC;YACpE,oBAAoB,EAAE,mBAAmB,CAAC,GAAG,CAAC,sBAAsB,CAAC;SACtE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,GAA6B;QACnD,MAAM,IAAI,GAA0B;YAClC,oBAAoB,EAAE,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC3D,gBAAgB,EAAE,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAChD,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpC,sBAAsB,EAAE,CAAC,CAAC,MAAM;gBAChC,SAAS,EAAE,CAAC,CAAC,QAAQ;aACtB,CAAC,CAAC;YACH,sBAAsB,EAAE,GAAG,CAAC,oBAAoB;YAChD,aAAa,EAAE,GAAG,CAAC,YAAY;YAC/B,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;SAC1B,CAAC;QACF,MAAM,QAAQ,CACZ,IAAI,CAAC,IAAI,EACT,QAAQ,EACR,oCAAoC,EACpC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,eAAe,CAAC,MAAwB;QAC7C,MAAM,IAAI,GAAoB;YAC5B,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;YAC1B,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3F,CAAC;QACF,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,YAAY,CACjC,IAAI,CAAC,IAAI,EACT,QAAQ,EACR,0BAA0B,EAC1B,IAAI,CACL,EAAE,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC;YACxB,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,+DAA+D;YAC/D,yDAAyD;YACzD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;YAC7D,MAAM,UAAU,GAAqB;gBACnC,SAAS,EAAE,CAAC,CAAC,UAAU;gBACvB,QAAQ,EAAE,CAAC,CAAC,SAAS;gBACrB,gBAAgB,EAAE,CAAC,CAAC,MAAM;gBAC1B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;gBACtC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzF,CAAC;YACF,MAAM,UAAU,CAAC;QACnB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAA6B;QACrD,wEAAwE;QACxE,wEAAwE;QACxE,iEAAiE;QACjE,MAAM,SAAS,GAAG,MAAM,OAAO,CAC7B,IAAI,CAAC,IAAI,EACT,QAAQ,EACR,sBAAsB,CACvB,CAAC;QACF,MAAM,IAAI,GAAwB;YAChC,MAAM,EAAE;gBACN,gBAAgB,EAAE;oBAChB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;wBACd,UAAU,EACR,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;4BACjE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;4BAC3B,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gCAC7B,eAAe,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE;6BACpC,CAAC,CAAC;qBACV;iBACF;aACF;YACD,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,SAAS,CAAC,MAAM;SACnC,CAAC;QACF,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,YAAY,CACjC,IAAI,CAAC,IAAI,EACT,QAAQ,EACR,4BAA4B,EAC5B,IAAI,CACL,EAAE,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,eAAe,EAAE,aAAa,CAAC;YAC7D,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,MAAM;gBACJ,UAAU,EAAE,EAAE,CAAC,WAAW;gBAC1B,UAAU,EAAE,EAAE,CAAC,WAAW;gBAC1B,sEAAsE;gBACtE,gEAAgE;gBAChE,OAAO,EAAE,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,qBAAqB,IAAI,IAAI;gBAChE,eAAe,EAAE,EAAE,CAAC,MAAM;aAC3B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,KAAa;QACnC,qEAAqE;QACrE,yDAAyD;QACzD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,CAAC,IAAI,EACT,WAAW,EACX,+DAA+D,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAC3F,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,oBAAoB;gBAAE,OAAO,IAAI,CAAC;YAC3C,MAAM,CAAC,GAAG,GAAG,CAAC,oBAAoB,CAAC;YACnC,OAAO;gBACL,UAAU,EAAE,CAAC,CAAC,WAAW;gBACzB,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ;gBAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ;gBAC5B,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;aAChD,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,CAAC,IAAI,EACT,WAAW,EACX,oDAAoD,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAC/E,CAAC;YACF,OAAO,GAAG,CAAC,KAAK,EAAE,QAAQ,IAAI,IAAI,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACtC,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,GAA4B;QACjD,MAAM,IAAI,GAAG;YACX,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAChD,YAAY,EAAE,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC9C,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;gBACrC,sBAAsB,EAAE,CAAC,CAAC,MAAM;aACjC,CAAC,CAAC;YACH,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CACxB,IAAI,CAAC,IAAI,EACT,WAAW,EACX,0DAA0D,EAC1D,IAAI,CACL,CAAC;QACF,OAAO;YACL,oBAAoB,EAAE,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC;YACjE,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;YACxC,OAAO,EAAE,GAAG,CAAC,QAAQ;SACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,GAA0B;QAC7C,MAAM,IAAI,GAAG;YACX,qBAAqB,EAAE,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,YAAY,CAAC;YACjE,mBAAmB,EAAE;gBACnB;oBACE,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC;oBAC/C,qEAAqE;oBACrE,SAAS,EAAE,WAAW;oBACtB,sBAAsB,EAAE,SAAS;iBAClC;aACF;SACF,CAAC;QACF,MAAM,QAAQ,CACZ,IAAI,CAAC,IAAI,EACT,WAAW,EACX,wDAAwD,EACxD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,GAAyB;QAC3C,MAAM,QAAQ,CACZ,IAAI,CAAC,IAAI,EACT,WAAW,EACX,uDAAuD,EACvD,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,CAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,GAA8B;QACrD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAQxB,IAAI,CAAC,IAAI,EACT,WAAW,EACX,sEAAsE,EACtE,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,CAC/B,CAAC;QACF,OAAO;YACL,mBAAmB,EAAE,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;YAClD,uBAAuB,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;YAClD,oBAAoB,EAAE,mBAAmB,CAAC,GAAG,CAAC,sBAAsB,CAAC;SACtE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,GAA6B;QACnD,MAAM,IAAI,GAAG;YACX,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAClD,cAAc,EAAE,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;YAC3C,sBAAsB,EAAE,GAAG,CAAC,oBAAoB;YAChD,oEAAoE;YACpE,sBAAsB,EAAE,SAAS;SAClC,CAAC;QACF,MAAM,QAAQ,CACZ,IAAI,CAAC,IAAI,EACT,WAAW,EACX,qEAAqE,EACrE,IAAI,CACL,CAAC;IACJ,CAAC;CACF;AAED,kEAAkE;AAElE,SAAS,mBAAmB,CAAC,CAAS;IACpC,IAAI,CAAC,KAAK,2BAA2B,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,gDAAgD,CAAC,yBAAyB;YACxE,sCAAsC,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,CAAS;IAC/B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,qCAAqC;QACrC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,CAAU,EAAE,MAAc;IAC9C,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,QAAQ,IAAI,CAAC;QACZ,CAAyB,CAAC,MAAM,KAAK,MAAM,CAC7C,CAAC;AACJ,CAAC"}

package/dist/ports/canton/canton-identity.d.ts

@@ -0,0 +1,60 @@
+/**
+ * CantonIdentityPort — narrow port for resolving DIDs to Canton party ids.
+ *
+ * Mirror of `TenzroIdentityPort` but for Canton parties. Like its tenzro-
+ * native sibling, this port handles *other people's* DIDs only — the user's
+ * own canton-internal/canton-external party ids come in synchronously through
+ * the kernel constructor as `identity.keys`.
+ *
+ * Two distinct backing paths share the same port:
+ *   - **canton-external**: lookup goes through the validator's Scan proxy
+ *     (`/v0/scan-proxy/...`) and Canton Name Service (`name.cns` → party id).
+ *     A DID maps to at most one party on the Global Synchronizer.
+ *   - **canton-internal**: lookup goes through the Tenzro-operated
+ *     synchronizer's directory (validator-app endpoint TBD until 2026-05-05).
+ *     A DID maps to at most one party on the Tenzro synchronizer.
+ *
+ * The kernel asks for both in parallel because the two surfaces are routed
+ * separately — a DID can have a canton-internal party, a canton-external
+ * party, both, or neither. Returning `undefined` for the missing surface
+ * is normal (vs. throwing — only RPC failures throw).
+ *
+ * Spec refs:
+ *   - DESIGN.md §4.4 (canton-internal) + §4.5 (canton-external)
+ *   - Splice Wallet Kernel `openrpc-dapp-remote-api.json` for the wire shape
+ *     of party-resolution requests
+ */
+import type { TdipDid } from '../../types/identity.js';
+export interface TenzroSurfaceCantonParty {
+    /** `<hint>::<32-byte-fingerprint-hex>` */
+    readonly partyId: string;
+    /** Synchronizer the party is hosted on. `global-domain::<fp>` for MainNet
+     *  external, Tenzro-operated synchronizer id for internal. */
+    readonly synchronizerId: string;
+    /** Participant id hosting the party — used when constructing
+     *  `PartyToParticipant` topology references and when filtering
+     *  completions. */
+    readonly hostingParticipantId: string;
+}
+export interface CantonIdentityPort {
+    /**
+     * Resolve a DID to its Canton party on the Global Synchronizer (the
+     * canton-external surface). Returns `undefined` if the DID has no
+     * external party registered.
+     */
+    resolveCantonExternalParty(did: TdipDid): Promise<TenzroSurfaceCantonParty | undefined>;
+    /**
+     * Resolve a DID to its Canton party on the Tenzro-operated synchronizer
+     * (the canton-internal surface). Returns `undefined` if the DID has no
+     * internal party registered.
+     */
+    resolveCantonInternalParty(did: TdipDid): Promise<TenzroSurfaceCantonParty | undefined>;
+    /**
+     * Reverse direction: Canton Name Service entry → party id. Used for
+     * "send to alice.cns" UX flows on canton-external. Tenzro-internal CNS
+     * (if any) is TBD — implementations may throw "not supported" for
+     * the internal synchronizer until the namespace is published.
+     */
+    resolveCnsName(name: string): Promise<string | null>;
+}
+//# sourceMappingURL=canton-identity.d.ts.map

package/dist/ports/canton/canton-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canton-identity.d.ts","sourceRoot":"","sources":["../../../src/ports/canton/canton-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,WAAW,wBAAwB;IACvC,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;kEAC8D;IAC9D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;uBAEmB;IACnB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IAExF;;;;OAIG;IACH,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,wBAAwB,GAAG,SAAS,CAAC,CAAC;IAExF;;;;;OAKG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACtD"}

package/dist/ports/canton/canton-identity.js

@@ -0,0 +1,28 @@
+/**
+ * CantonIdentityPort — narrow port for resolving DIDs to Canton party ids.
+ *
+ * Mirror of `TenzroIdentityPort` but for Canton parties. Like its tenzro-
+ * native sibling, this port handles *other people's* DIDs only — the user's
+ * own canton-internal/canton-external party ids come in synchronously through
+ * the kernel constructor as `identity.keys`.
+ *
+ * Two distinct backing paths share the same port:
+ *   - **canton-external**: lookup goes through the validator's Scan proxy
+ *     (`/v0/scan-proxy/...`) and Canton Name Service (`name.cns` → party id).
+ *     A DID maps to at most one party on the Global Synchronizer.
+ *   - **canton-internal**: lookup goes through the Tenzro-operated
+ *     synchronizer's directory (validator-app endpoint TBD until 2026-05-05).
+ *     A DID maps to at most one party on the Tenzro synchronizer.
+ *
+ * The kernel asks for both in parallel because the two surfaces are routed
+ * separately — a DID can have a canton-internal party, a canton-external
+ * party, both, or neither. Returning `undefined` for the missing surface
+ * is normal (vs. throwing — only RPC failures throw).
+ *
+ * Spec refs:
+ *   - DESIGN.md §4.4 (canton-internal) + §4.5 (canton-external)
+ *   - Splice Wallet Kernel `openrpc-dapp-remote-api.json` for the wire shape
+ *     of party-resolution requests
+ */
+export {};
+//# sourceMappingURL=canton-identity.js.map

package/dist/ports/canton/canton-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canton-identity.js","sourceRoot":"","sources":["../../../src/ports/canton/canton-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG"}