tenzro-wallet 0.1.0

package/dist/surfaces/canton-onboarding.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Canton external-party onboarding flow.
+ *
+ * Kept separate from the canton-external/canton-internal "send" surface
+ * because onboarding is a one-shot ceremony, not a transaction:
+ *   1. Wallet derives namespace + signing keypairs (provisioned at identity
+ *      creation time — see `provisionIdentity`).
+ *   2. `generateTopology` asks the validator to render the three unsigned
+ *      topology transactions (NamespaceDelegation, PartyToKeyMapping,
+ *      PartyToParticipant) plus a bundle hash.
+ *   3. Wallet signs the bundle hash with the **namespace key** (cold key —
+ *      this is the only time it's used in normal operation; rotations re-use it).
+ *   4. `submitTopology` ships the signed bundle to the synchronizer.
+ *   5. `setupProposal` asks the Tenzro validator to publish a setup-proposal
+ *      contract that, once accepted, federates the new external party with
+ *      the validator's hosting participant.
+ *   6. `prepareAcceptSetup` returns a PreparedTransaction for the
+ *      `ExternalPartySetupProposal_Accept` choice.
+ *   7. Wallet recomputes the prepared-tx hash, signs it with the namespace
+ *      key (Canton's setup-proposal accept is namespace-signed by convention).
+ *   8. `submitAcceptSetup` finalises — TransferPreapproval + featured-app
+ *      delegate are created in the same atomic submission.
+ *
+ * After step 8 the party can transact normally through `cantonExternalSurface`.
+ *
+ * Spec refs:
+ *   - DESIGN.md §4.5.5 (onboarding flow), §4.5.6 (auto-renewal)
+ *   - Splice docs `validator-onboarding-external-party.md`
+ *   - Canton OSS `topology.proto` (NamespaceDelegation, PartyToKeyMapping,
+ *     PartyToParticipant)
+ */
+import type { CantonValidatorPort } from '../ports/canton/canton-validator.js';
+import type { SurfaceKey, TdipDid } from '../types/identity.js';
+import type { SigningDriver } from '../types/signing-driver.js';
+export interface CantonOnboardingDeps {
+    readonly keyResolver: (did: TdipDid) => SurfaceKey | undefined;
+    readonly signingDriver: SigningDriver;
+    /** Pointed at the Tenzro validator hosting the new party (canton-external
+     *  goes to the GSN-attached validator; canton-internal to the Tenzro-
+     *  operated synchronizer's validator). */
+    readonly validatorPort: CantonValidatorPort;
+}
+export interface OnboardExternalPartyRequest {
+    readonly did: TdipDid;
+    /** `canton-internal` or `canton-external` — selects which provisioned
+     *  party key to onboard. */
+    readonly surface: 'canton-internal' | 'canton-external';
+    /** Hint portion of the resulting party id; the validator may sanitize it. */
+    readonly partyHint: string;
+}
+export interface OnboardExternalPartyResult {
+    /** The fully-qualified party id (`<hint>::<namespace-fingerprint>`). */
+    readonly partyId: string;
+}
+/**
+ * Run the complete onboarding ceremony. Idempotent at the validator-app
+ * layer — the validator no-ops topology submissions for a party already on
+ * the synchronizer, and `setupProposal` no-ops if a live proposal exists.
+ * Re-running on a party that's already accepted-setup will fail at step 7
+ * (the validator returns 409); that's fine — the surface caller should only
+ * invoke this once.
+ */
+export declare function onboardExternalParty(deps: CantonOnboardingDeps, req: OnboardExternalPartyRequest): Promise<OnboardExternalPartyResult>;
+//# sourceMappingURL=canton-onboarding.d.ts.map

package/dist/surfaces/canton-onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canton-onboarding.d.ts","sourceRoot":"","sources":["../../src/surfaces/canton-onboarding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAM/E,OAAO,KAAK,EAAkB,UAAU,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,UAAU,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC;;8CAE0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,mBAAmB,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB;gCAC4B;IAC5B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAAC;IACxD,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,oBAAoB,EAC1B,GAAG,EAAE,2BAA2B,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAoFrC"}

package/dist/surfaces/canton-onboarding.js

@@ -0,0 +1,113 @@
+/**
+ * Canton external-party onboarding flow.
+ *
+ * Kept separate from the canton-external/canton-internal "send" surface
+ * because onboarding is a one-shot ceremony, not a transaction:
+ *   1. Wallet derives namespace + signing keypairs (provisioned at identity
+ *      creation time — see `provisionIdentity`).
+ *   2. `generateTopology` asks the validator to render the three unsigned
+ *      topology transactions (NamespaceDelegation, PartyToKeyMapping,
+ *      PartyToParticipant) plus a bundle hash.
+ *   3. Wallet signs the bundle hash with the **namespace key** (cold key —
+ *      this is the only time it's used in normal operation; rotations re-use it).
+ *   4. `submitTopology` ships the signed bundle to the synchronizer.
+ *   5. `setupProposal` asks the Tenzro validator to publish a setup-proposal
+ *      contract that, once accepted, federates the new external party with
+ *      the validator's hosting participant.
+ *   6. `prepareAcceptSetup` returns a PreparedTransaction for the
+ *      `ExternalPartySetupProposal_Accept` choice.
+ *   7. Wallet recomputes the prepared-tx hash, signs it with the namespace
+ *      key (Canton's setup-proposal accept is namespace-signed by convention).
+ *   8. `submitAcceptSetup` finalises — TransferPreapproval + featured-app
+ *      delegate are created in the same atomic submission.
+ *
+ * After step 8 the party can transact normally through `cantonExternalSurface`.
+ *
+ * Spec refs:
+ *   - DESIGN.md §4.5.5 (onboarding flow), §4.5.6 (auto-renewal)
+ *   - Splice docs `validator-onboarding-external-party.md`
+ *   - Canton OSS `topology.proto` (NamespaceDelegation, PartyToKeyMapping,
+ *     PartyToParticipant)
+ */
+import { bytesEqualConstantTime, preparedTransactionHash, topologyBundleHash, } from "../ports/canton/hash.js";
+/**
+ * Run the complete onboarding ceremony. Idempotent at the validator-app
+ * layer — the validator no-ops topology submissions for a party already on
+ * the synchronizer, and `setupProposal` no-ops if a live proposal exists.
+ * Re-running on a party that's already accepted-setup will fail at step 7
+ * (the validator returns 409); that's fine — the surface caller should only
+ * invoke this once.
+ */
+export async function onboardExternalParty(deps, req) {
+    const key = deps.keyResolver(req.did);
+    if (!key || key.surface !== req.surface) {
+        throw new Error(`onboarding: no ${req.surface} key for ${req.did}`);
+    }
+    const partyKey = key;
+    // 1) Ask the validator to render the unsigned topology bundle.
+    const generated = await deps.validatorPort.generateTopology({
+        partyHint: req.partyHint,
+        namespacePublicKey: partyKey.namespaceKey.publicKey,
+        signingPublicKeys: partyKey.signingKeys.map((k) => ({
+            publicKey: k.publicKey,
+            scheme: k.scheme,
+        })),
+        threshold: partyKey.threshold,
+    });
+    // 2) Recompute the bundle hash and verify it matches the validator's hash.
+    // Same security argument as `preparedTransactionHash` recomputation: we
+    // can't sign the validator's claim of what the bundle hashes to without
+    // verifying it ourselves, otherwise a malicious validator could swap in
+    // a different topology behind our back.
+    const recomputedBundle = await topologyBundleHash(generated.topologyTransactions);
+    if (!bytesEqualConstantTime(recomputedBundle, generated.bundleHash)) {
+        throw new Error('onboarding: topology bundle hash mismatch — refusing to sign. ' +
+            'Validator returned bundle bytes whose hash differs from its claimed bundle hash.');
+    }
+    // 3) Sign the bundle hash with the namespace (cold) key.
+    const namespaceSig = await deps.signingDriver.sign({
+        did: req.did,
+        surfaceKey: key,
+        scheme: 'ed25519',
+        preimage: recomputedBundle,
+        purpose: 'canton-topology-bundle',
+    });
+    if (namespaceSig.signatures.length === 0) {
+        throw new Error('onboarding: signing driver returned no signatures');
+    }
+    const namespaceSignature = namespaceSig.signatures[0];
+    // 4) Submit the signed topology bundle to the synchronizer.
+    await deps.validatorPort.submitTopology({
+        topologyTransactions: generated.topologyTransactions,
+        namespaceSignature,
+    });
+    // 5) Ask the Tenzro validator to publish a setup-proposal contract.
+    await deps.validatorPort.setupProposal({ partyId: generated.partyId });
+    // 6) Get the prepared accept-setup tx + its hash from the validator.
+    const accept = await deps.validatorPort.prepareAcceptSetup({
+        partyId: generated.partyId,
+    });
+    // 7) Recompute the accept-setup hash and assert equality before signing.
+    const recomputedAccept = await preparedTransactionHash(accept.preparedTransaction);
+    if (!bytesEqualConstantTime(recomputedAccept, accept.preparedTransactionHash)) {
+        throw new Error('onboarding: accept-setup preparedTransactionHash mismatch — refusing to sign.');
+    }
+    const acceptSig = await deps.signingDriver.sign({
+        did: req.did,
+        surfaceKey: key,
+        scheme: 'ed25519',
+        preimage: recomputedAccept,
+        purpose: 'canton-accept-setup',
+    });
+    if (acceptSig.signatures.length === 0) {
+        throw new Error('onboarding: signing driver returned no signatures for accept-setup');
+    }
+    // 8) Finalise — submit the signed accept-setup.
+    await deps.validatorPort.submitAcceptSetup({
+        preparedTransaction: accept.preparedTransaction,
+        signature: acceptSig.signatures[0],
+        hashingSchemeVersion: accept.hashingSchemeVersion,
+    });
+    return { partyId: generated.partyId };
+}
+//# sourceMappingURL=canton-onboarding.js.map

package/dist/surfaces/canton-onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canton-onboarding.js","sourceRoot":"","sources":["../../src/surfaces/canton-onboarding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAGH,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,kBAAkB,GACnB,MAAM,yBAAyB,CAAC;AA2BjC;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAA0B,EAC1B,GAAgC;IAEhC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,OAAO,YAAY,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAmB,GAAG,CAAC;IAErC,+DAA+D;IAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC;QAC1D,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,kBAAkB,EAAE,QAAQ,CAAC,YAAY,CAAC,SAAS;QACnD,iBAAiB,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClD,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC,CAAC;QACH,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC,CAAC;IAEH,2EAA2E;IAC3E,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,wCAAwC;IACxC,MAAM,gBAAgB,GAAG,MAAM,kBAAkB,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAClF,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,gEAAgE;YAC9D,kFAAkF,CACrF,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QACjD,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,UAAU,EAAE,GAAG;QACf,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,gBAAgB;QAC1B,OAAO,EAAE,wBAAwB;KAClC,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,kBAAkB,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC;IAEvD,4DAA4D;IAC5D,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC;QACtC,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,kBAAkB;KACnB,CAAC,CAAC;IAEH,oEAAoE;IACpE,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;IAEvE,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC;QACzD,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,gBAAgB,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnF,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,MAAM,CAAC,uBAAuB,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAC9C,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,UAAU,EAAE,GAAG;QACf,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,gBAAgB;QAC1B,OAAO,EAAE,qBAAqB;KAC/B,CAAC,CAAC;IACH,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IAED,gDAAgD;IAChD,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC;QACzC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;QAC/C,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAE;QACnC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;KAClD,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;AACxC,CAAC"}

package/dist/surfaces/evm-on-tenzro.d.ts

@@ -0,0 +1,29 @@
+/**
+ * EVM surface inside the Tenzro multi-VM runtime. wTNZO ERC-20 lives at
+ * 0x7a4bcb13a6b2b384c284b5caa6e5ef3126527f93. Cross-VM token moves to other
+ * on-Tenzro surfaces are pointer ops via precompile 0x1003 — handled by the
+ * router, not by this surface directly.
+ */
+import type { SurfaceKey, TdipDid } from '../types/identity.js';
+import type { SigningDriver } from '../types/signing-driver.js';
+import type { SurfaceModule } from '../types/surface-module.js';
+export interface EvmOnTenzroDeps {
+    readonly keyResolver: (did: TdipDid) => SurfaceKey | undefined;
+    readonly signingDriver: SigningDriver;
+    readonly rpc?: {
+        getNonce(addr: `0x${string}`): Promise<number>;
+        getChainId(): Promise<number>;
+        estimateFees(): Promise<{
+            maxFeePerGas: bigint;
+            maxPriorityFeePerGas: bigint;
+        }>;
+        /**
+         * Broadcast wire-format bytes (`0x02 || rlp(...)` for EIP-1559) and
+         * return the tx hash. Maps to `eth_sendRawTransaction` on real EVM
+         * RPC nodes.
+         */
+        sendRawTransaction(rawTx: Uint8Array): Promise<string>;
+    };
+}
+export declare function evmOnTenzroSurface(deps: EvmOnTenzroDeps): SurfaceModule;
+//# sourceMappingURL=evm-on-tenzro.d.ts.map

package/dist/surfaces/evm-on-tenzro.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-on-tenzro.d.ts","sourceRoot":"","sources":["../../src/surfaces/evm-on-tenzro.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAgBH,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAsChE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,UAAU,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACb,QAAQ,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9B,YAAY,IAAI,OAAO,CAAC;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,oBAAoB,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAChF;;;;WAIG;QACH,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KACxD,CAAC;CACH;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,CAgJvE"}

package/dist/surfaces/evm-on-tenzro.js

@@ -0,0 +1,226 @@
+/**
+ * EVM surface inside the Tenzro multi-VM runtime. wTNZO ERC-20 lives at
+ * 0x7a4bcb13a6b2b384c284b5caa6e5ef3126527f93. Cross-VM token moves to other
+ * on-Tenzro surfaces are pointer ops via precompile 0x1003 — handled by the
+ * router, not by this surface directly.
+ */
+import { encodeForSigning, serializeSigned, signingHash, splitSignature, } from "../crypto/eip1559.js";
+import { CROSS_VM_PRECOMPILE, dustResidual, truncateForView, } from "../ports/cross-vm.js";
+import { makeHandle, mockStatusWalk } from "./util.js";
+export function evmOnTenzroSurface(deps) {
+    const rpc = deps.rpc ?? mockRpc();
+    return {
+        name: 'evm-on-tenzro',
+        async prepare(intent) {
+            if (intent.kind !== 'send')
+                throw new Error(`unsupported: ${intent.kind}`);
+            if (intent.to.kind !== 'evm') {
+                throw new Error('evm-on-tenzro requires an EVM recipient');
+            }
+            const fromKey = deps.keyResolver(intent.from);
+            if (!fromKey || fromKey.surface !== 'evm-on-tenzro') {
+                throw new Error(`no evm-on-tenzro key for ${intent.from}`);
+            }
+            const [nonce, chainId, fees] = await Promise.all([
+                rpc.getNonce(fromKey.address),
+                rpc.getChainId(),
+                rpc.estimateFees(),
+            ]);
+            const body = {
+                kind: 'evm-send',
+                from: fromKey.address,
+                to: intent.to.address,
+                value: intent.amount,
+                nonce,
+                chainId,
+                maxFeePerGas: fees.maxFeePerGas,
+                maxPriorityFeePerGas: fees.maxPriorityFeePerGas,
+                gasLimit: 21000n,
+            };
+            return {
+                route: { kind: 'native', surface: 'evm-on-tenzro' },
+                intent,
+                fees: [
+                    {
+                        asset: intent.asset,
+                        amount: body.gasLimit * body.maxFeePerGas,
+                        label: 'evm gas',
+                    },
+                ],
+                etaMs: 1000,
+                reversibility: 'final-on-submit',
+                warnings: [],
+                body,
+            };
+        },
+        async preparePointer(intent, op) {
+            if (intent.kind !== 'send')
+                throw new Error(`unsupported: ${intent.kind}`);
+            const fromKey = deps.keyResolver(intent.from);
+            if (!fromKey || fromKey.surface !== 'evm-on-tenzro') {
+                throw new Error(`no evm-on-tenzro key for ${intent.from}`);
+            }
+            const [nonce, chainId, fees] = await Promise.all([
+                rpc.getNonce(fromKey.address),
+                rpc.getChainId(),
+                rpc.estimateFees(),
+            ]);
+            const body = {
+                kind: 'evm-pointer',
+                from: fromKey.address,
+                to: CROSS_VM_PRECOMPILE,
+                value: 0n,
+                nonce,
+                chainId,
+                maxFeePerGas: fees.maxFeePerGas,
+                maxPriorityFeePerGas: fees.maxPriorityFeePerGas,
+                // Pointer ops cost more than a plain send because the precompile
+                // touches multiple-VM state. 80k is a placeholder; M3.3 / a Tenzro
+                // gas oracle will refine.
+                gasLimit: 80000n,
+                data: encodePointerCall(op),
+                pointer: op,
+            };
+            const dust = dustResidual(op.amount, op.toSurface);
+            const truncated = truncateForView(op.amount, op.toSurface);
+            const warnings = [];
+            if (dust > 0n) {
+                warnings.push(`${dust.toString()} sub-units below ${op.toSurface} precision will ` +
+                    `not appear in the destination view; ${truncated.toString()} ` +
+                    `canonical units will move`);
+            }
+            return {
+                route: {
+                    kind: 'cross-vm-pointer',
+                    fromSurface: 'evm-on-tenzro',
+                    toSurface: op.toSurface,
+                    precompile: CROSS_VM_PRECOMPILE,
+                },
+                intent,
+                fees: [
+                    {
+                        asset: intent.asset,
+                        amount: body.gasLimit * body.maxFeePerGas,
+                        label: 'evm gas (pointer call)',
+                    },
+                ],
+                // Pointer ops settle in the same EVM block — same ETA shape as a send.
+                etaMs: 1000,
+                reversibility: 'final-on-submit',
+                warnings,
+                body,
+            };
+        },
+        async sign(prepared, _consent) {
+            const body = prepared.body;
+            const did = prepared.intent.from;
+            const key = deps.keyResolver(did);
+            if (!key || key.surface !== 'evm-on-tenzro') {
+                throw new Error('missing evm key at sign time');
+            }
+            const preimage = canonicalize(body);
+            const result = await deps.signingDriver.sign({
+                did,
+                surfaceKey: key,
+                scheme: 'secp256k1',
+                preimage,
+                purpose: body.kind === 'evm-pointer' ? 'evm-pointer' : 'evm-send',
+            });
+            return { prepared, signatures: result.signatures, body };
+        },
+        async submit(signed) {
+            const body = signed.body;
+            const sig = signed.signatures[0];
+            if (!sig)
+                throw new Error('missing signature');
+            const rawTx = serializeForSubmit(body, sig);
+            const hash = await rpc.sendRawTransaction(rawTx);
+            return makeHandle('evm-on-tenzro', signed.prepared.intent, hash);
+        },
+        watch(handle) {
+            return mockStatusWalk(handle);
+        },
+    };
+}
+/**
+ * Encode the calldata for a pointer-op call to precompile 0x1003.
+ *
+ * The outer EIP-1559 envelope is real (RLP-encoded, keccak-hashed,
+ * secp256k1-signed) — what's still placeholder is the *inner* calldata
+ * format. The Tenzro precompile's exact Solidity-side ABI signature is not
+ * pinned in our docs yet; once `https://tenzro.com/docs/cross-vm-tokens`
+ * publishes the canonical signature (likely
+ * `(uint8 toSurfaceTag, bytes32 owner, uint256 amount)`), swap this for
+ * proper ABI head/tail encoding. The wallet's signature over the EIP-1559
+ * envelope is unchanged when that swap happens — only the inner `data`
+ * bytes change.
+ */
+function encodePointerCall(op) {
+    const payload = JSON.stringify({
+        fromSurface: op.fromSurface,
+        toSurface: op.toSurface,
+        owner: op.owner,
+        amount: op.amount.toString(),
+    });
+    return new TextEncoder().encode(payload);
+}
+/**
+ * Map an `EvmBody | EvmPointerBody` to the canonical `Eip1559Tx` shape the
+ * RLP encoder consumes. Sends use `to = recipient, value = amount, data = ∅`.
+ * Pointer ops use `to = 0x1003, value = 0, data = encoded payload`.
+ */
+function toEip1559(body) {
+    if (body.kind === 'evm-send') {
+        return {
+            chainId: body.chainId,
+            nonce: body.nonce,
+            maxPriorityFeePerGas: body.maxPriorityFeePerGas,
+            maxFeePerGas: body.maxFeePerGas,
+            gasLimit: body.gasLimit,
+            to: body.to,
+            value: body.value,
+            data: new Uint8Array(0),
+        };
+    }
+    return {
+        chainId: body.chainId,
+        nonce: body.nonce,
+        maxPriorityFeePerGas: body.maxPriorityFeePerGas,
+        maxFeePerGas: body.maxFeePerGas,
+        gasLimit: body.gasLimit,
+        // The precompile lives at the canonical address `0x1003` left-padded
+        // to 20 bytes (Ethereum address width). Equivalent to
+        // `0x0000000000000000000000000000000000001003`.
+        to: '0x0000000000000000000000000000000000001003',
+        value: 0n,
+        data: body.data,
+    };
+}
+/**
+ * 32-byte EIP-1559 signing hash. Replaces the M1/M3.2 JSON canonicalize
+ * placeholder. SigningDriver consumes this directly; secp256k1 signs over
+ * the hash, not the pre-image.
+ */
+function canonicalize(body) {
+    return signingHash(toEip1559(body));
+}
+/**
+ * Wire-format bytes the RPC submits. `0x02 || rlp(body || [yParity, r, s])`.
+ * Driver-supplied signatures may be 65-byte r||s||v (legacy) or
+ * (r, s, yParity) split — `splitSignature` normalises.
+ */
+function serializeForSubmit(body, signature) {
+    return serializeSigned(toEip1559(body), splitSignature(signature));
+}
+function mockRpc() {
+    return {
+        getNonce: async () => 0,
+        getChainId: async () => 1337,
+        estimateFees: async () => ({
+            maxFeePerGas: 1000000000n,
+            maxPriorityFeePerGas: 100000000n,
+        }),
+        sendRawTransaction: async () => '0xmock',
+    };
+}
+//# sourceMappingURL=evm-on-tenzro.js.map

package/dist/surfaces/evm-on-tenzro.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm-on-tenzro.js","sourceRoot":"","sources":["../../src/surfaces/evm-on-tenzro.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAEL,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mBAAmB,EAEnB,YAAY,EACZ,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAM9B,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAqDvD,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;IAElC,OAAO;QACL,IAAI,EAAE,eAAe;QAErB,KAAK,CAAC,OAAO,CAAC,MAAc;YAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC/C,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC7B,GAAG,CAAC,UAAU,EAAE;gBAChB,GAAG,CAAC,YAAY,EAAE;aACnB,CAAC,CAAC;YAEH,MAAM,IAAI,GAAY;gBACpB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,OAAO;gBACrB,KAAK,EAAE,MAAM,CAAC,MAAM;gBACpB,KAAK;gBACL,OAAO;gBACP,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;gBAC/C,QAAQ,EAAE,MAAM;aACjB,CAAC;YAEF,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;gBACnD,MAAM;gBACN,IAAI,EAAE;oBACJ;wBACE,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,MAAM,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY;wBACzC,KAAK,EAAE,SAAS;qBACjB;iBACF;gBACD,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,iBAAiB;gBAChC,QAAQ,EAAE,EAAE;gBACZ,IAAI;aACL,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,EAAoB;YACvD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC/C,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC7B,GAAG,CAAC,UAAU,EAAE;gBAChB,GAAG,CAAC,YAAY,EAAE;aACnB,CAAC,CAAC;YAEH,MAAM,IAAI,GAAmB;gBAC3B,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,OAAO,CAAC,OAAO;gBACrB,EAAE,EAAE,mBAAmB;gBACvB,KAAK,EAAE,EAAE;gBACT,KAAK;gBACL,OAAO;gBACP,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;gBAC/C,iEAAiE;gBACjE,mEAAmE;gBACnE,0BAA0B;gBAC1B,QAAQ,EAAE,MAAO;gBACjB,IAAI,EAAE,iBAAiB,CAAC,EAAE,CAAC;gBAC3B,OAAO,EAAE,EAAE;aACZ,CAAC;YAEF,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC,SAAS,kBAAkB;oBAClE,uCAAuC,SAAS,CAAC,QAAQ,EAAE,GAAG;oBAC9D,2BAA2B,CAC9B,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,KAAK,EAAE;oBACL,IAAI,EAAE,kBAAkB;oBACxB,WAAW,EAAE,eAAe;oBAC5B,SAAS,EAAE,EAAE,CAAC,SAAS;oBACvB,UAAU,EAAE,mBAAmB;iBAChC;gBACD,MAAM;gBACN,IAAI,EAAE;oBACJ;wBACE,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,MAAM,EAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,YAAY;wBACzC,KAAK,EAAE,wBAAwB;qBAChC;iBACF;gBACD,uEAAuE;gBACvE,KAAK,EAAE,IAAI;gBACX,aAAa,EAAE,iBAAiB;gBAChC,QAAQ;gBACR,IAAI;aACL,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,QAAoB,EAAE,QAAiB;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAgC,CAAC;YACvD,MAAM,GAAG,GAAI,QAAQ,CAAC,MAA4C,CAAC,IAAI,CAAC;YACxE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAC3C,GAAG;gBACH,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,WAAW;gBACnB,QAAQ;gBACR,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU;aAClE,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAgB;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAgC,CAAC;YACrD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACjD,OAAO,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,MAAgB;YACpB,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,iBAAiB,CAAC,EAAoB;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,KAAK,EAAE,EAAE,CAAC,KAAK;QACf,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE;KAC7B,CAAC,CAAC;IACH,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,IAA8B;IAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;SACxB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,qEAAqE;QACrE,sDAAsD;QACtD,gDAAgD;QAChD,EAAE,EAAE,4CAA4C;QAChD,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAA8B;IAClD,OAAO,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAA8B,EAAE,SAAqB;IAC/E,OAAO,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,OAAO;IACd,OAAO;QACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACvB,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QAC5B,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACzB,YAAY,EAAE,WAAc;YAC5B,oBAAoB,EAAE,UAAY;SACnC,CAAC;QACF,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;KACzC,CAAC;AACJ,CAAC"}

package/dist/surfaces/index.d.ts

@@ -0,0 +1,13 @@
+export { tenzroNativeSurface } from './tenzro-native.js';
+export type { TenzroNativeDeps } from './tenzro-native.js';
+export { evmOnTenzroSurface } from './evm-on-tenzro.js';
+export type { EvmOnTenzroDeps } from './evm-on-tenzro.js';
+export { svmOnTenzroSurface } from './svm-on-tenzro.js';
+export type { SvmOnTenzroDeps } from './svm-on-tenzro.js';
+export { cantonInternalSurface } from './canton-internal.js';
+export type { CantonInternalDeps } from './canton-internal.js';
+export { cantonExternalSurface } from './canton-external.js';
+export type { CantonExternalDeps } from './canton-external.js';
+export { onboardExternalParty } from './canton-onboarding.js';
+export type { CantonOnboardingDeps, OnboardExternalPartyRequest, OnboardExternalPartyResult, } from './canton-onboarding.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/surfaces/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/surfaces/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAE1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,YAAY,EACV,oBAAoB,EACpB,2BAA2B,EAC3B,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC"}

package/dist/surfaces/index.js

@@ -0,0 +1,7 @@
+export { tenzroNativeSurface } from "./tenzro-native.js";
+export { evmOnTenzroSurface } from "./evm-on-tenzro.js";
+export { svmOnTenzroSurface } from "./svm-on-tenzro.js";
+export { cantonInternalSurface } from "./canton-internal.js";
+export { cantonExternalSurface } from "./canton-external.js";
+export { onboardExternalParty } from "./canton-onboarding.js";
+//# sourceMappingURL=index.js.map

package/dist/surfaces/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/surfaces/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAGzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAG7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAG7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/surfaces/svm-on-tenzro.d.ts

@@ -0,0 +1,24 @@
+/**
+ * SVM surface inside the Tenzro runtime. SPL Token Adapter view of TNZO at
+ * 9 decimals. Sub-lamport (sub-9-decimal) dust is truncated when crossing into
+ * this view from EVM/native — the router surfaces a warning when applicable.
+ */
+import type { SurfaceKey, TdipDid } from '../types/identity.js';
+import type { SigningDriver } from '../types/signing-driver.js';
+import type { SurfaceModule } from '../types/surface-module.js';
+export interface SvmOnTenzroDeps {
+    readonly keyResolver: (did: TdipDid) => SurfaceKey | undefined;
+    readonly signingDriver: SigningDriver;
+    readonly rpc?: {
+        /** Returns a base58-encoded 32-byte recent blockhash. */
+        getRecentBlockhash(): Promise<string>;
+        /**
+         * Broadcast wire-format bytes (compact-array(sigs) || compiled-message)
+         * and return the base58 transaction signature (SVM uses the first sig
+         * as the tx id). Maps to `sendTransaction` on Solana JSON-RPC.
+         */
+        sendRawTransaction(rawTx: Uint8Array): Promise<string>;
+    };
+}
+export declare function svmOnTenzroSurface(deps: SvmOnTenzroDeps): SurfaceModule;
+//# sourceMappingURL=svm-on-tenzro.d.ts.map

package/dist/surfaces/svm-on-tenzro.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"svm-on-tenzro.d.ts","sourceRoot":"","sources":["../../src/surfaces/svm-on-tenzro.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAsChE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,UAAU,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE;QACb,yDAAyD;QACzD,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC;;;;WAIG;QACH,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;KACxD,CAAC;CACH;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,aAAa,CAiHvE"}