tenzro-wallet 0.1.0

package/dist/ports/canton/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/ports/canton/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAmBH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE7B;IACA;IACA;IAHX,YACW,MAAc,EACd,GAAW,EACX,IAAY;QAErB,KAAK,CAAC,eAAe,MAAM,OAAO,GAAG,KAAK,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAJxD,WAAM,GAAN,MAAM,CAAQ;QACd,QAAG,GAAH,GAAG,CAAQ;QACX,SAAI,GAAJ,IAAI,CAAQ;QAGrB,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAqB,EACrB,IAA4B,EAC5B,IAAY,EACZ,IAAU;IAEV,MAAM,OAAO,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC7E,MAAM,GAAG,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,EAAE;QACvB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC;KACrC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAS,CAAC;AACpC,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAqB,EACrB,IAA4B,EAC5B,IAAY;IAEZ,MAAM,OAAO,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC7E,MAAM,GAAG,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,EAAE;QACvB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC9C,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAS,CAAC;AACpC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,YAAY,CACjC,GAAqB,EACrB,IAA4B,EAC5B,IAAY,EACZ,IAAa,EACb,MAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC7E,MAAM,GAAG,GAAG,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAgB;QACxB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,wCAAwC;YAChD,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC;QACpC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;IACF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAE9E,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,IAAI,EAAE,CAAC;YACT,oCAAoC;YACpC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAM,CAAC;YACvD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;YACf,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;YACjD,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC;AAED,kEAAkE;AAElE;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,EAAU,EAAE,CAAU;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,IAAI,CAAC,YAAY,UAAU;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS;IACnC,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,mBAAmB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,CAAS;IACpC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3E,8CAA8C;IAC9C,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/ports/cross-vm.d.ts

@@ -0,0 +1,79 @@
+/**
+ * CrossVmPointerPort — wire-level shape of a cross-VM pointer op on Tenzro.
+ *
+ * Tenzro Ledger holds a single canonical TNZO balance. Each on-Tenzro surface
+ * (tenzro-native, evm-on-tenzro, svm-on-tenzro, canton-internal) presents a
+ * *view* of that balance at its own decimal precision. Moving TNZO "from" one
+ * view "to" another is therefore not a value transfer — it's a balance-view
+ * pointer update. The Tenzro runtime exposes this as:
+ *
+ *   - On EVM-on-Tenzro:  precompile call to 0x1003, calldata =
+ *       abi.encode(toSurface, owner, amount).
+ *   - On SVM-on-Tenzro:  a `tenzro_cross_vm` system program instruction
+ *       carrying the same payload.
+ *   - On tenzro-native:  a native syscall (`crossvm_pointer_move`).
+ *   - On canton-internal: same as native, executed inside DAML choice on the
+ *       Tenzro-internal synchroniser (M4 wires this; M3 stops at native/EVM/SVM).
+ *
+ * Each surface module owns the encoding of its own pointer-op tx. This port
+ * exists so the kernel can describe the *intent* of a pointer op uniformly,
+ * and so dust-truncation accounting at the EVM↔SVM boundary lives in one
+ * place (see `decimalsFor` + `truncateForView`).
+ *
+ * Notes:
+ *   - Pointer ops are atomic and free of value-transfer fees on Tenzro. Gas is
+ *     still charged at the source surface (e.g. EVM-side gas for a precompile
+ *     call from EVM-on-Tenzro). The router surfaces this as a single fee row,
+ *     not as a "bridge fee."
+ *   - The "receive" side has no work to do — the balance view update is a
+ *     side-effect of the source-side tx. `watch()` is the source surface's
+ *     own watch loop (e.g. EVM tx receipt).
+ *
+ * Refs:
+ *   - https://tenzro.com/docs/multi-vm
+ *   - https://tenzro.com/docs/cross-vm-tokens
+ *   - DESIGN.md §2 (the four surfaces), §5.2 (decimal problem),
+ *     §6.1 (route table — pointer ops vs bridges).
+ */
+import type { TdipDid } from '../types/identity.js';
+import type { SurfaceName } from '../types/surface.js';
+/** Cross-VM pointer-op address constant. */
+export declare const CROSS_VM_PRECOMPILE: "0x1003";
+/**
+ * The pointer-op intent, surface-agnostic. Each source surface reads this and
+ * encodes its own wire-format tx (EVM precompile call, SVM system instruction,
+ * native syscall).
+ *
+ * `amount` is in canonical native units (1 TNZO = 10^18). Truncation to the
+ * destination view's precision happens via `truncateForView` and any residual
+ * dust is surfaced as a `PreparedTx.warnings` entry.
+ */
+export interface CrossVmPointerOp {
+    readonly fromSurface: SurfaceName;
+    readonly toSurface: SurfaceName;
+    /** TDIP DID owning the balance — same DID on both surfaces. */
+    readonly owner: TdipDid;
+    /** Amount to move, in canonical native units (10^18-scaled). */
+    readonly amount: bigint;
+}
+/**
+ * Return the decimal precision a surface uses for its TNZO view. The kernel
+ * stores balances in canonical 10^18 units; surfaces convert at the wire.
+ */
+export declare function decimalsFor(surface: SurfaceName): number;
+/**
+ * Truncate a canonical (10^18) amount to the precision of `surface`, then
+ * re-expand to canonical units. The difference between input and output is
+ * the dust that gets dropped on the destination view.
+ *
+ * Example: 1.000_000_000_500_000_000 TNZO from EVM (18 dec) into SVM (9 dec)
+ * truncates the trailing 500_000_000 sub-units (sub-lamport dust).
+ */
+export declare function truncateForView(amount: bigint, surface: SurfaceName): bigint;
+/**
+ * Sub-unit dust that would be lost moving `amount` from one canonical-units
+ * view to a lower-precision view. Positive only when the destination has
+ * fewer decimals than 18 and `amount` is not a whole multiple of that step.
+ */
+export declare function dustResidual(amount: bigint, toSurface: SurfaceName): bigint;
+//# sourceMappingURL=cross-vm.d.ts.map

package/dist/ports/cross-vm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-vm.d.ts","sourceRoot":"","sources":["../../src/ports/cross-vm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,EAAG,QAAiB,CAAC;AAErD;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,CAaxD;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,MAAM,CAK5E;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,MAAM,CAE3E"}

package/dist/ports/cross-vm.js

@@ -0,0 +1,81 @@
+/**
+ * CrossVmPointerPort — wire-level shape of a cross-VM pointer op on Tenzro.
+ *
+ * Tenzro Ledger holds a single canonical TNZO balance. Each on-Tenzro surface
+ * (tenzro-native, evm-on-tenzro, svm-on-tenzro, canton-internal) presents a
+ * *view* of that balance at its own decimal precision. Moving TNZO "from" one
+ * view "to" another is therefore not a value transfer — it's a balance-view
+ * pointer update. The Tenzro runtime exposes this as:
+ *
+ *   - On EVM-on-Tenzro:  precompile call to 0x1003, calldata =
+ *       abi.encode(toSurface, owner, amount).
+ *   - On SVM-on-Tenzro:  a `tenzro_cross_vm` system program instruction
+ *       carrying the same payload.
+ *   - On tenzro-native:  a native syscall (`crossvm_pointer_move`).
+ *   - On canton-internal: same as native, executed inside DAML choice on the
+ *       Tenzro-internal synchroniser (M4 wires this; M3 stops at native/EVM/SVM).
+ *
+ * Each surface module owns the encoding of its own pointer-op tx. This port
+ * exists so the kernel can describe the *intent* of a pointer op uniformly,
+ * and so dust-truncation accounting at the EVM↔SVM boundary lives in one
+ * place (see `decimalsFor` + `truncateForView`).
+ *
+ * Notes:
+ *   - Pointer ops are atomic and free of value-transfer fees on Tenzro. Gas is
+ *     still charged at the source surface (e.g. EVM-side gas for a precompile
+ *     call from EVM-on-Tenzro). The router surfaces this as a single fee row,
+ *     not as a "bridge fee."
+ *   - The "receive" side has no work to do — the balance view update is a
+ *     side-effect of the source-side tx. `watch()` is the source surface's
+ *     own watch loop (e.g. EVM tx receipt).
+ *
+ * Refs:
+ *   - https://tenzro.com/docs/multi-vm
+ *   - https://tenzro.com/docs/cross-vm-tokens
+ *   - DESIGN.md §2 (the four surfaces), §5.2 (decimal problem),
+ *     §6.1 (route table — pointer ops vs bridges).
+ */
+/** Cross-VM pointer-op address constant. */
+export const CROSS_VM_PRECOMPILE = '0x1003';
+/**
+ * Return the decimal precision a surface uses for its TNZO view. The kernel
+ * stores balances in canonical 10^18 units; surfaces convert at the wire.
+ */
+export function decimalsFor(surface) {
+    switch (surface) {
+        case 'tenzro-native':
+            return 18;
+        case 'evm-on-tenzro':
+            return 18;
+        case 'svm-on-tenzro':
+            return 9;
+        case 'canton-internal':
+            return 10;
+        case 'canton-external':
+            return 10;
+    }
+}
+/**
+ * Truncate a canonical (10^18) amount to the precision of `surface`, then
+ * re-expand to canonical units. The difference between input and output is
+ * the dust that gets dropped on the destination view.
+ *
+ * Example: 1.000_000_000_500_000_000 TNZO from EVM (18 dec) into SVM (9 dec)
+ * truncates the trailing 500_000_000 sub-units (sub-lamport dust).
+ */
+export function truncateForView(amount, surface) {
+    const dec = decimalsFor(surface);
+    if (dec >= 18)
+        return amount;
+    const div = 10n ** BigInt(18 - dec);
+    return (amount / div) * div;
+}
+/**
+ * Sub-unit dust that would be lost moving `amount` from one canonical-units
+ * view to a lower-precision view. Positive only when the destination has
+ * fewer decimals than 18 and `amount` is not a whole multiple of that step.
+ */
+export function dustResidual(amount, toSurface) {
+    return amount - truncateForView(amount, toSurface);
+}
+//# sourceMappingURL=cross-vm.js.map

package/dist/ports/cross-vm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cross-vm.js","sourceRoot":"","sources":["../../src/ports/cross-vm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAKH,4CAA4C;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,QAAiB,CAAC;AAoBrD;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,OAAoB;IAC9C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,eAAe;YAClB,OAAO,EAAE,CAAC;QACZ,KAAK,eAAe;YAClB,OAAO,EAAE,CAAC;QACZ,KAAK,eAAe;YAClB,OAAO,CAAC,CAAC;QACX,KAAK,iBAAiB;YACpB,OAAO,EAAE,CAAC;QACZ,KAAK,iBAAiB;YACpB,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,OAAoB;IAClE,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,GAAG,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC;IACpC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,SAAsB;IACjE,OAAO,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AACrD,CAAC"}

package/dist/ports/index.d.ts

@@ -0,0 +1,18 @@
+export type { TenzroRpcPort, TenzroSendArgs, TenzroTxStatus, } from './tenzro-rpc.js';
+export { TenzroSdkAdapter, TenzroNotInstalledError, } from './adapters/tenzro-sdk-adapter.js';
+export type { TenzroClientLike } from './adapters/tenzro-sdk-adapter.js';
+export type { TenzroIdentityPort } from './tenzro-identity.js';
+export { TenzroIdentityAdapter } from './adapters/tenzro-identity-adapter.js';
+export type { IdentityClientLike } from './adapters/tenzro-identity-adapter.js';
+export type { CrossVmPointerOp } from './cross-vm.js';
+export { CROSS_VM_PRECOMPILE, decimalsFor, truncateForView, dustResidual, } from './cross-vm.js';
+export type { CantonValidatorPort, PrepareSubmissionRequest, PrepareSubmissionResponse, ExecuteSubmissionRequest, CantonCompletion, CompletionFilter, ActiveContractsFilter, CantonActiveContract, TransferPreapproval, GenerateTopologyRequest, GenerateTopologyResponse, SubmitTopologyRequest, SetupProposalRequest, PrepareAcceptSetupRequest, PrepareAcceptSetupResponse, SubmitAcceptSetupRequest, CantonHashingSchemeVersion, CantonSigningScheme, } from './canton/canton-validator.js';
+export type { CantonIdentityPort, TenzroSurfaceCantonParty } from './canton/canton-identity.js';
+export type { CantonHttpConfig } from './canton/http.js';
+export { CantonHttpError } from './canton/http.js';
+export { LedgerApiAdapter } from './canton/adapters/ledger-api-adapter.js';
+export type { LedgerApiAdapterConfig } from './canton/adapters/ledger-api-adapter.js';
+export { preparedTransactionHash, topologyBundleHash, bytesEqualConstantTime, } from './canton/hash.js';
+export * from './agent/index.js';
+export * from './bridge/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,aAAa,EACb,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAChF,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAChG,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,YAAY,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAG1B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,mBAAmB,CAAC"}

package/dist/ports/index.js

@@ -0,0 +1,11 @@
+export { TenzroSdkAdapter, TenzroNotInstalledError, } from "./adapters/tenzro-sdk-adapter.js";
+export { TenzroIdentityAdapter } from "./adapters/tenzro-identity-adapter.js";
+export { CROSS_VM_PRECOMPILE, decimalsFor, truncateForView, dustResidual, } from "./cross-vm.js";
+export { CantonHttpError } from "./canton/http.js";
+export { LedgerApiAdapter } from "./canton/adapters/ledger-api-adapter.js";
+export { preparedTransactionHash, topologyBundleHash, bytesEqualConstantTime, } from "./canton/hash.js";
+// ── Agent-payments ports + adapters (AP2, ERC-8004, agent-payments, nano) ──
+export * from "./agent/index.js";
+// ── Bridge router ports + adapter stubs (M8 — see DESIGN.md §10) ──
+export * from "./bridge/index.js";
+//# sourceMappingURL=index.js.map

package/dist/ports/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAG9E,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,eAAe,CAAC;AAyBvB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAE3E,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,8EAA8E;AAC9E,cAAc,kBAAkB,CAAC;AAEjC,qEAAqE;AACrE,cAAc,mBAAmB,CAAC"}

package/dist/ports/tenzro-identity.d.ts

@@ -0,0 +1,29 @@
+/**
+ * TenzroIdentityPort — narrow port for resolving *other people's* DIDs.
+ *
+ * The kernel already knows the user's own surface keys synchronously (they
+ * come in through the constructor as `identity.keys`). This port exists for
+ * the *recipient* side: when a user sends to a DID that isn't their own,
+ * the kernel needs to ask the network "what tenzro-native address does
+ * `did:tenzro:human:...` map to?".
+ *
+ * Why a separate port (vs. folding into a single `identityPort` that also
+ * serves the user's own keys): own-keys are cached locally and used on the
+ * sign-time hot path. Conflating them with a remote lookup would force an
+ * `await` on every signing operation. This port stays remote-only.
+ *
+ * Backed by `IdentityClient.resolveDidDocument` over JSON-RPC; see
+ * `TenzroIdentityAdapter`.
+ */
+import type { TdipDid } from '../types/identity.js';
+export interface TenzroIdentityPort {
+    /**
+     * Resolve a DID to its tenzro-native base58 address.
+     *
+     * Returns `undefined` when the DID exists but has no tenzro-native key
+     * (e.g., a Canton-only identity). Throws if the DID is unknown or the
+     * RPC fails — callers should let those propagate.
+     */
+    resolveTenzroAddress(did: TdipDid): Promise<string | undefined>;
+}
+//# sourceMappingURL=tenzro-identity.d.ts.map

package/dist/ports/tenzro-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-identity.d.ts","sourceRoot":"","sources":["../../src/ports/tenzro-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC;;;;;;OAMG;IACH,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACjE"}

package/dist/ports/tenzro-identity.js

@@ -0,0 +1,19 @@
+/**
+ * TenzroIdentityPort — narrow port for resolving *other people's* DIDs.
+ *
+ * The kernel already knows the user's own surface keys synchronously (they
+ * come in through the constructor as `identity.keys`). This port exists for
+ * the *recipient* side: when a user sends to a DID that isn't their own,
+ * the kernel needs to ask the network "what tenzro-native address does
+ * `did:tenzro:human:...` map to?".
+ *
+ * Why a separate port (vs. folding into a single `identityPort` that also
+ * serves the user's own keys): own-keys are cached locally and used on the
+ * sign-time hot path. Conflating them with a remote lookup would force an
+ * `await` on every signing operation. This port stays remote-only.
+ *
+ * Backed by `IdentityClient.resolveDidDocument` over JSON-RPC; see
+ * `TenzroIdentityAdapter`.
+ */
+export {};
+//# sourceMappingURL=tenzro-identity.js.map

package/dist/ports/tenzro-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-identity.js","sourceRoot":"","sources":["../../src/ports/tenzro-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG"}

package/dist/ports/tenzro-rpc.d.ts

@@ -0,0 +1,79 @@
+/**
+ * TenzroRpcPort — the kernel's view of the Tenzro Ledger JSON-RPC.
+ *
+ * The port is the only contract the surface modules (and tests) care about.
+ * The real implementation in `adapters/tenzro-sdk-adapter.ts` wraps
+ * `tenzro-sdk`'s `TenzroClient`. Tests inject in-memory fakes shaped like
+ * this interface, so nothing under `src/surfaces/` or `src/kernel.ts` ever
+ * imports from `tenzro-sdk` directly.
+ *
+ * Why a port at all (instead of taking the SDK type as the parameter):
+ *  - `tenzro-sdk` is a moving target on testnet. Pinning the surface modules
+ *    to its exact shape would mean every SDK release touches every surface.
+ *  - We only need a tiny slice of the SDK; the port documents that slice.
+ *  - Tests can build a fake without instantiating an `RpcClient`.
+ *
+ * Spec refs:
+ *  - https://tenzro.com/docs/wallet-sdk
+ *  - https://tenzro.com/docs/typescript-sdk
+ */
+/**
+ * Server-side hybrid-signed transaction submission.
+ * Maps to `tenzro_signAndSendTransaction` (see SDK `WalletClient.signAndSend`).
+ *
+ * The node holds the TEE share of a 2-of-2 passkey-quorum (per DESIGN.md §4.3),
+ * derives the canonical preimage including the PQ pubkey, signs both Ed25519
+ * and ML-DSA-65 legs, and submits. Authorisation is via the ambient DPoP-bound
+ * session JWT (the SDK's `RpcClient` reads `TENZRO_BEARER_JWT` /
+ * `TENZRO_DPOP_PROOF` env vars and sets the headers automatically).
+ */
+export interface TenzroSendArgs {
+    /** Sender's Tenzro-shape address (20-byte hex, "0x..."). */
+    readonly from: string;
+    /** Recipient's Tenzro-shape address. */
+    readonly to: string;
+    /** Amount in canonical units (1 TNZO = 10^18). */
+    readonly value: bigint;
+    /** Defaults to 21000 in the SDK. */
+    readonly gasLimit?: number;
+    /** Defaults to 1 gwei in the SDK. */
+    readonly gasPrice?: number;
+    /** Optional nonce override; SDK fetches if omitted. */
+    readonly nonce?: number;
+    /** Optional chain id override; SDK fetches if omitted. */
+    readonly chainId?: number;
+}
+/**
+ * On-chain transaction state — kept narrow on purpose. Surfaces the only
+ * fields the kernel's `watch()` walk needs to translate to a TxStatus.phase.
+ */
+export interface TenzroTxStatus {
+    /** 64-char lowercase hex, no '0x' prefix per SDK convention. */
+    readonly hash: string;
+    /** 'pending' before inclusion, 'included' after, 'finalized' after the
+     *  finalized-block-height crosses the inclusion height. */
+    readonly status: 'pending' | 'included' | 'finalized' | 'failed';
+    /** Block height at which the tx was included; absent when pending. */
+    readonly blockHeight?: number;
+}
+/**
+ * The kernel-facing slice of Tenzro RPC. Implemented for real by
+ * `TenzroSdkAdapter`; faked in-memory for tests.
+ */
+export interface TenzroRpcPort {
+    /** Latest nonce for an address (for transaction ordering). */
+    getNonce(address: string): Promise<number>;
+    /** Chain id. Maps to `eth_chainId` in the SDK. */
+    getChainId(): Promise<number>;
+    /**
+     * Server-side sign + submit. Returns the tx hash.
+     * Throws if the session is unauthenticated or the TEE refuses to co-sign.
+     */
+    sendTransaction(args: TenzroSendArgs): Promise<string>;
+    /**
+     * Look up a tx by hash. Returns `null` if the node has never seen it.
+     * Used by the kernel's `watch()` poll loop.
+     */
+    getTransaction(hash: string): Promise<TenzroTxStatus | null>;
+}
+//# sourceMappingURL=tenzro-rpc.d.ts.map

package/dist/ports/tenzro-rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-rpc.d.ts","sourceRoot":"","sources":["../../src/ports/tenzro-rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;+DAC2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;IACjE,sEAAsE;IACtE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3C,kDAAkD;IAClD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE9B;;;OAGG;IACH,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvD;;;OAGG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;CAC9D"}

package/dist/ports/tenzro-rpc.js

@@ -0,0 +1,21 @@
+/**
+ * TenzroRpcPort — the kernel's view of the Tenzro Ledger JSON-RPC.
+ *
+ * The port is the only contract the surface modules (and tests) care about.
+ * The real implementation in `adapters/tenzro-sdk-adapter.ts` wraps
+ * `tenzro-sdk`'s `TenzroClient`. Tests inject in-memory fakes shaped like
+ * this interface, so nothing under `src/surfaces/` or `src/kernel.ts` ever
+ * imports from `tenzro-sdk` directly.
+ *
+ * Why a port at all (instead of taking the SDK type as the parameter):
+ *  - `tenzro-sdk` is a moving target on testnet. Pinning the surface modules
+ *    to its exact shape would mean every SDK release touches every surface.
+ *  - We only need a tiny slice of the SDK; the port documents that slice.
+ *  - Tests can build a fake without instantiating an `RpcClient`.
+ *
+ * Spec refs:
+ *  - https://tenzro.com/docs/wallet-sdk
+ *  - https://tenzro.com/docs/typescript-sdk
+ */
+export {};
+//# sourceMappingURL=tenzro-rpc.js.map

package/dist/ports/tenzro-rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-rpc.js","sourceRoot":"","sources":["../../src/ports/tenzro-rpc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}

package/dist/router/index.d.ts

@@ -0,0 +1,3 @@
+export { selectRoute } from './route.js';
+export type { RouteSelection } from './route.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/router/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/dist/router/index.js

@@ -0,0 +1,2 @@
+export { selectRoute } from "./route.js";
+//# sourceMappingURL=index.js.map

package/dist/router/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/router/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC"}

package/dist/router/route.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Route selection. Given a SendIntent, choose the source surface and the
+ * route shape (native-on-surface, cross-VM pointer, or external bridge).
+ *
+ * The wallet's UX promise hinges on this: pointer ops within Tenzro must NOT
+ * be presented as bridges, must NOT charge a bridge fee, and must NOT show a
+ * "lock-and-mint" confirmation. Bridges are reserved for moves that genuinely
+ * cross ledgers.
+ */
+import type { Intent, Route } from '../types/intent.js';
+import { type SurfaceName } from '../types/surface.js';
+export interface RouteSelection {
+    readonly route: Route;
+    readonly fromSurface: SurfaceName;
+}
+export declare function selectRoute(intent: Intent): RouteSelection;
+//# sourceMappingURL=route.d.ts.map

package/dist/router/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../src/router/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAwB,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE7E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAkC1D"}

package/dist/router/route.js

@@ -0,0 +1,78 @@
+/**
+ * Route selection. Given a SendIntent, choose the source surface and the
+ * route shape (native-on-surface, cross-VM pointer, or external bridge).
+ *
+ * The wallet's UX promise hinges on this: pointer ops within Tenzro must NOT
+ * be presented as bridges, must NOT charge a bridge fee, and must NOT show a
+ * "lock-and-mint" confirmation. Bridges are reserved for moves that genuinely
+ * cross ledgers.
+ */
+import { SURFACE_IS_ON_TENZRO } from "../types/surface.js";
+export function selectRoute(intent) {
+    if (intent.kind !== 'send') {
+        throw new Error(`route selection unsupported for intent: ${intent.kind}`);
+    }
+    const fromSurface = intent.fromSurface ?? inferFromSurface(intent);
+    const toSurface = inferToSurface(intent);
+    if (fromSurface === toSurface) {
+        return { fromSurface, route: { kind: 'native', surface: fromSurface } };
+    }
+    // Both surfaces inside the Tenzro runtime → pointer op, no bridge.
+    if (SURFACE_IS_ON_TENZRO[fromSurface] && SURFACE_IS_ON_TENZRO[toSurface]) {
+        return {
+            fromSurface,
+            route: {
+                kind: 'cross-vm-pointer',
+                fromSurface,
+                toSurface,
+                precompile: '0x1003',
+            },
+        };
+    }
+    // Otherwise we cross a real ledger boundary — pick a bridge adapter.
+    return {
+        fromSurface,
+        route: {
+            kind: 'bridge',
+            fromSurface,
+            toSurface,
+            adapter: pickBridgeAdapter(fromSurface, toSurface),
+        },
+    };
+}
+function inferFromSurface(intent) {
+    switch (intent.asset.scope) {
+        case 'tenzro-native':
+            return 'tenzro-native';
+        case 'tenzro-asset':
+            return 'tenzro-native';
+        case 'external-evm':
+            return 'evm-on-tenzro'; // bridged in via EVM by default
+        case 'external-svm':
+            return 'svm-on-tenzro';
+        case 'canton-mainnet':
+            return 'canton-external';
+    }
+}
+function inferToSurface(intent) {
+    switch (intent.to.kind) {
+        case 'tdip':
+            return 'tenzro-native';
+        case 'evm':
+            return 'evm-on-tenzro';
+        case 'svm':
+            return 'svm-on-tenzro';
+        case 'canton':
+            // Without more context, Canton MainNet is the safer default — internal
+            // Canton routing is typically requested explicitly via fromSurface.
+            return 'canton-external';
+    }
+}
+function pickBridgeAdapter(from, to) {
+    // M1 heuristic: Canton-external goes through the Canton adapter; everything
+    // else defaults to LI.FI (the aggregator picks underlying bridges).
+    if (from === 'canton-external' || to === 'canton-external')
+        return 'canton-adapter';
+    return 'lifi';
+}
+//# sourceMappingURL=route.js.map

package/dist/router/route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.js","sourceRoot":"","sources":["../../src/router/route.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,oBAAoB,EAAoB,MAAM,qBAAqB,CAAC;AAO7E,MAAM,UAAU,WAAW,CAAC,MAAc;IACxC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEzC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED,mEAAmE;IACnE,IAAI,oBAAoB,CAAC,WAAW,CAAC,IAAI,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,OAAO;YACL,WAAW;YACX,KAAK,EAAE;gBACL,IAAI,EAAE,kBAAkB;gBACxB,WAAW;gBACX,SAAS;gBACT,UAAU,EAAE,QAAQ;aACrB;SACF,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,OAAO;QACL,WAAW;QACX,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW;YACX,SAAS;YACT,OAAO,EAAE,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC;SACnD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAyC;IACjE,QAAQ,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QAC3B,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;QACzB,KAAK,cAAc;YACjB,OAAO,eAAe,CAAC;QACzB,KAAK,cAAc;YACjB,OAAO,eAAe,CAAC,CAAC,gCAAgC;QAC1D,KAAK,cAAc;YACjB,OAAO,eAAe,CAAC;QACzB,KAAK,gBAAgB;YACnB,OAAO,iBAAiB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAyC;IAC/D,QAAQ,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,eAAe,CAAC;QACzB,KAAK,KAAK;YACR,OAAO,eAAe,CAAC;QACzB,KAAK,KAAK;YACR,OAAO,eAAe,CAAC;QACzB,KAAK,QAAQ;YACX,uEAAuE;YACvE,oEAAoE;YACpE,OAAO,iBAAiB,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAiB,EACjB,EAAe;IAEf,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,IAAI,KAAK,iBAAiB,IAAI,EAAE,KAAK,iBAAiB;QAAE,OAAO,gBAAgB,CAAC;IACpF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/settlement/nanopayment-flow.d.ts

@@ -0,0 +1,48 @@
+/**
+ * NanopaymentFlow — wallet-side orchestration helpers for nanopayment
+ * channels. The `NanopaymentPort` exposes the SDK's primitives one-for-one;
+ * this module composes them into the lifecycle a real consumer (LLM
+ * streaming UI, per-API-call paywall, bandwidth meter) actually drives:
+ *
+ *   open → many sendNanopayment → autoFlush at threshold → close on done
+ *
+ * The orchestration is all wallet-side. The node holds the channel state,
+ * the SDK exposes RPCs, this module sequences them.
+ */
+import type { NanopaymentPort, NanopaymentReceipt } from '../ports/agent/nanopayment.js';
+export interface NanopaymentSessionOptions {
+    /** Auto-flush after this many off-chain payments accumulate. */
+    readonly flushEvery?: number;
+    /** Auto-flush when accumulated value crosses this threshold (smallest units). */
+    readonly flushAtAmount?: bigint;
+    /** Hard cap on total session spend. Throws if exceeded. */
+    readonly sessionCap?: bigint;
+}
+/**
+ * Stateful helper that owns one open channel. Counts payments + value, flushes
+ * on threshold, closes on `done()`. Designed to be created once at the start
+ * of a streaming session and discarded at the end.
+ */
+export declare class NanopaymentSession {
+    #private;
+    private constructor();
+    /** Open a channel and return a session bound to it. */
+    static open(port: NanopaymentPort, req: {
+        payer: string;
+        payee: string;
+        deposit: bigint;
+        asset?: string;
+    }, opts?: NanopaymentSessionOptions): Promise<NanopaymentSession>;
+    get channelId(): string;
+    get totalPaid(): bigint;
+    /**
+     * Send a single off-chain payment. Returns the receipt. Auto-flushes
+     * when count or amount thresholds cross.
+     */
+    send(amount: bigint, memo?: string): Promise<NanopaymentReceipt>;
+    /** Force an on-chain batch settlement. Resets unsettled counters. */
+    flush(): Promise<void>;
+    /** Close the channel. Idempotent; subsequent sends throw. */
+    close(): Promise<void>;
+}
+//# sourceMappingURL=nanopayment-flow.d.ts.map

package/dist/settlement/nanopayment-flow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nanopayment-flow.d.ts","sourceRoot":"","sources":["../../src/settlement/nanopayment-flow.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAEV,eAAe,EACf,kBAAkB,EACnB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,WAAW,yBAAyB;IACxC,gEAAgE;IAChE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,2DAA2D;IAC3D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAOD;;;;GAIG;AACH,qBAAa,kBAAkB;;IAS7B,OAAO;IAUP,uDAAuD;WAC1C,IAAI,CACf,IAAI,EAAE,eAAe,EACrB,GAAG,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EACtE,IAAI,GAAE,yBAA8B,GACnC,OAAO,CAAC,kBAAkB,CAAC;IAU9B,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;;OAGG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAyBtE,qEAAqE;IAC/D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,6DAA6D;IACvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAsB7B"}