tenzro-wallet 0.1.0

package/dist/surfaces/svm-on-tenzro.js

@@ -0,0 +1,238 @@
+/**
+ * SVM surface inside the Tenzro runtime. SPL Token Adapter view of TNZO at
+ * 9 decimals. Sub-lamport (sub-9-decimal) dust is truncated when crossing into
+ * this view from EVM/native — the router surfaces a warning when applicable.
+ */
+import { base58Decode, base58Encode, serializeCompiledMessage, serializeTransaction, } from "../crypto/solana.js";
+import { dustResidual, truncateForView } from "../ports/cross-vm.js";
+import { makeHandle, mockStatusWalk } from "./util.js";
+/**
+ * Placeholder program ID (32 bytes, base58 of all-zeros + last byte = 3) for
+ * `tenzro_cross_vm`. The real address is gated on the SVM-on-Tenzro spec
+ * publishing the canonical program ID — when it does, swap in those bytes.
+ * Documentation TODO at https://tenzro.com/docs/cross-vm-tokens.
+ */
+const TENZRO_CROSS_VM_PROGRAM_ID = (() => {
+    const b = new Uint8Array(32);
+    b[31] = 0x03; // sentinel — distinct from System Program (all zeros)
+    return b;
+})();
+export function svmOnTenzroSurface(deps) {
+    const rpc = deps.rpc ?? mockRpc();
+    return {
+        name: 'svm-on-tenzro',
+        async prepare(intent) {
+            if (intent.kind !== 'send')
+                throw new Error(`unsupported: ${intent.kind}`);
+            if (intent.to.kind !== 'svm')
+                throw new Error('svm-on-tenzro requires an SVM recipient');
+            const fromKey = deps.keyResolver(intent.from);
+            if (!fromKey || fromKey.surface !== 'svm-on-tenzro') {
+                throw new Error(`no svm-on-tenzro key for ${intent.from}`);
+            }
+            const recentBlockhash = await rpc.getRecentBlockhash();
+            const lamports = toLamports(intent.amount, intent.asset.decimals);
+            const dustTruncated = fromLamports(lamports, intent.asset.decimals) !== intent.amount;
+            const body = {
+                kind: 'svm-send',
+                fromPubkey: fromKey.address,
+                toPubkey: intent.to.publicKey,
+                lamports,
+                recentBlockhash,
+            };
+            return {
+                route: { kind: 'native', surface: 'svm-on-tenzro' },
+                intent,
+                fees: [{ asset: intent.asset, amount: 5000n, label: 'solana-style fee (lamports)' }],
+                etaMs: 800,
+                reversibility: 'final-on-submit',
+                warnings: dustTruncated
+                    ? ['amount truncated to 9-decimal precision (sub-lamport dust dropped)']
+                    : [],
+                body,
+            };
+        },
+        async preparePointer(intent, op) {
+            if (intent.kind !== 'send')
+                throw new Error(`unsupported: ${intent.kind}`);
+            const fromKey = deps.keyResolver(intent.from);
+            if (!fromKey || fromKey.surface !== 'svm-on-tenzro') {
+                throw new Error(`no svm-on-tenzro key for ${intent.from}`);
+            }
+            const recentBlockhash = await rpc.getRecentBlockhash();
+            const body = {
+                kind: 'svm-pointer',
+                fromPubkey: fromKey.address,
+                recentBlockhash,
+                pointer: op,
+            };
+            const dust = dustResidual(op.amount, op.toSurface);
+            const truncated = truncateForView(op.amount, op.toSurface);
+            const warnings = [];
+            if (dust > 0n) {
+                warnings.push(`${dust.toString()} sub-units below ${op.toSurface} precision will ` +
+                    `not appear in the destination view; ${truncated.toString()} ` +
+                    `canonical units will move`);
+            }
+            return {
+                route: {
+                    kind: 'cross-vm-pointer',
+                    fromSurface: 'svm-on-tenzro',
+                    toSurface: op.toSurface,
+                    precompile: '0x1003',
+                },
+                intent,
+                fees: [{ asset: intent.asset, amount: 5000n, label: 'solana-style fee (lamports)' }],
+                etaMs: 800,
+                reversibility: 'final-on-submit',
+                warnings,
+                body,
+            };
+        },
+        async sign(prepared, _consent) {
+            const body = prepared.body;
+            const did = prepared.intent.from;
+            const key = deps.keyResolver(did);
+            if (!key || key.surface !== 'svm-on-tenzro') {
+                throw new Error('missing svm key at sign time');
+            }
+            const preimage = canonicalize(body);
+            const result = await deps.signingDriver.sign({
+                did,
+                surfaceKey: key,
+                scheme: 'ed25519',
+                preimage,
+                purpose: body.kind === 'svm-pointer' ? 'svm-pointer' : 'svm-send',
+            });
+            return { prepared, signatures: result.signatures, body };
+        },
+        async submit(signed) {
+            const body = signed.body;
+            const sig = signed.signatures[0];
+            if (!sig)
+                throw new Error('missing signature');
+            const message = compileMessage(body);
+            const rawTx = serializeTransaction(message, [sig]);
+            const txSig = await rpc.sendRawTransaction(rawTx);
+            return makeHandle('svm-on-tenzro', signed.prepared.intent, txSig);
+        },
+        watch(handle) {
+            return mockStatusWalk(handle);
+        },
+    };
+}
+function toLamports(amount, decimals) {
+    if (decimals === 9)
+        return amount;
+    if (decimals > 9) {
+        const div = 10n ** BigInt(decimals - 9);
+        return amount / div;
+    }
+    const mul = 10n ** BigInt(9 - decimals);
+    return amount * mul;
+}
+function fromLamports(lamports, decimals) {
+    if (decimals === 9)
+        return lamports;
+    if (decimals > 9)
+        return lamports * 10n ** BigInt(decimals - 9);
+    return lamports / 10n ** BigInt(9 - decimals);
+}
+/**
+ * Canonical signing pre-image for an SVM transaction is the *compiled message
+ * bytes themselves*. Ed25519 (RFC 8032) hashes internally, so unlike EVM we
+ * do NOT pre-hash here — feeding the message bytes to the SigningDriver is
+ * what `solana-validator` will recompute and verify against `accountKeys[0]`.
+ */
+function canonicalize(body) {
+    return serializeCompiledMessage(compileMessage(body));
+}
+/**
+ * Compile the structured tx body into a Solana legacy `CompiledMessage`.
+ *
+ * For `svm-send`: signer is the fee payer + sender (`fromPubkey`); recipient
+ * is a non-signer; the System Program (all-zeros pubkey) is the program; the
+ * single instruction is a System Program transfer with little-endian u64
+ * lamports.
+ *
+ * For `svm-pointer`: signer is the fee payer (`fromPubkey`); program is
+ * `TENZRO_CROSS_VM_PROGRAM_ID`; data is the structured payload (placeholder
+ * JSON until the program's instruction discriminator is published).
+ */
+function compileMessage(body) {
+    if (body.kind === 'svm-send') {
+        const from = base58Decode(body.fromPubkey);
+        const to = base58Decode(body.toPubkey);
+        const sysProgram = new Uint8Array(32); // 11111…11
+        return {
+            numRequiredSignatures: 1,
+            numReadonlySignedAccounts: 0,
+            // Recipient is writable (sees value increase) but not a signer; program
+            // is read-only and not a signer.
+            numReadonlyUnsignedAccounts: 1,
+            // Solana ordering: signers first, then writable non-signers, then
+            // read-only non-signers. So [from, to, sysProgram].
+            accountKeys: [from, to, sysProgram],
+            recentBlockhash: base58Decode(body.recentBlockhash),
+            instructions: [
+                {
+                    programIdIndex: 2, // sysProgram
+                    accountKeyIndices: [0, 1], // from, to
+                    data: encodeSystemTransfer(body.lamports),
+                },
+            ],
+        };
+    }
+    // pointer op
+    const from = base58Decode(body.fromPubkey);
+    return {
+        numRequiredSignatures: 1,
+        numReadonlySignedAccounts: 0,
+        numReadonlyUnsignedAccounts: 1, // program is read-only
+        accountKeys: [from, TENZRO_CROSS_VM_PROGRAM_ID],
+        recentBlockhash: base58Decode(body.recentBlockhash),
+        instructions: [
+            {
+                programIdIndex: 1, // tenzro_cross_vm
+                accountKeyIndices: [0], // signer
+                // Placeholder until the program publishes its instruction
+                // discriminator. The wire path that wraps and signs this is real;
+                // only the inner bytes are TBD.
+                data: new TextEncoder().encode(JSON.stringify({
+                    toSurface: body.pointer.toSurface,
+                    owner: body.pointer.owner,
+                    amount: body.pointer.amount.toString(),
+                })),
+            },
+        ],
+    };
+}
+/**
+ * Solana System Program `Transfer` instruction:
+ *   layout: u32 instruction_index (= 2 for transfer) || u64 LE lamports
+ */
+function encodeSystemTransfer(lamports) {
+    const out = new Uint8Array(12);
+    // instruction = 2 (Transfer), little-endian u32
+    out[0] = 2;
+    // lamports, little-endian u64
+    let v = lamports;
+    for (let i = 0; i < 8; i++) {
+        out[4 + i] = Number(v & 0xffn);
+        v >>= 8n;
+    }
+    return out;
+}
+/**
+ * Mock RPC used when no real Solana port is injected. Returns deterministic
+ * placeholders shaped like real Solana wire types (32-byte blockhash
+ * base58-encoded, fixed tx-signature string).
+ */
+function mockRpc() {
+    const blockhash = base58Encode(new Uint8Array(32).fill(0x01));
+    return {
+        getRecentBlockhash: async () => blockhash,
+        sendRawTransaction: async () => 'mocksig',
+    };
+}
+//# sourceMappingURL=svm-on-tenzro.js.map

package/dist/surfaces/svm-on-tenzro.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"svm-on-tenzro.js","sourceRoot":"","sources":["../../src/surfaces/svm-on-tenzro.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEL,YAAY,EACZ,YAAY,EACZ,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAyB,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAM5F,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAyBvD;;;;;GAKG;AACH,MAAM,0BAA0B,GAAe,CAAC,GAAG,EAAE;IACnD,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,sDAAsD;IACpE,OAAO,CAAC,CAAC;AACX,CAAC,CAAC,EAAE,CAAC;AAiBL,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;IAElC,OAAO;QACL,IAAI,EAAE,eAAe;QAErB,KAAK,CAAC,OAAO,CAAC,MAAc;YAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAEvD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClE,MAAM,aAAa,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC;YAEtF,MAAM,IAAI,GAAY;gBACpB,IAAI,EAAE,UAAU;gBAChB,UAAU,EAAE,OAAO,CAAC,OAAO;gBAC3B,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS;gBAC7B,QAAQ;gBACR,eAAe;aAChB,CAAC;YAEF,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;gBACnD,MAAM;gBACN,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;gBACpF,KAAK,EAAE,GAAG;gBACV,aAAa,EAAE,iBAAiB;gBAChC,QAAQ,EAAE,aAAa;oBACrB,CAAC,CAAC,CAAC,oEAAoE,CAAC;oBACxE,CAAC,CAAC,EAAE;gBACN,IAAI;aACL,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,EAAoB;YACvD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAEvD,MAAM,IAAI,GAAmB;gBAC3B,IAAI,EAAE,aAAa;gBACnB,UAAU,EAAE,OAAO,CAAC,OAAO;gBAC3B,eAAe;gBACf,OAAO,EAAE,EAAE;aACZ,CAAC;YAEF,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC,SAAS,kBAAkB;oBAClE,uCAAuC,SAAS,CAAC,QAAQ,EAAE,GAAG;oBAC9D,2BAA2B,CAC9B,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,KAAK,EAAE;oBACL,IAAI,EAAE,kBAAkB;oBACxB,WAAW,EAAE,eAAe;oBAC5B,SAAS,EAAE,EAAE,CAAC,SAAS;oBACvB,UAAU,EAAE,QAAQ;iBACrB;gBACD,MAAM;gBACN,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;gBACpF,KAAK,EAAE,GAAG;gBACV,aAAa,EAAE,iBAAiB;gBAChC,QAAQ;gBACR,IAAI;aACL,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,QAAoB,EAAE,QAAiB;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAgC,CAAC;YACvD,MAAM,GAAG,GAAI,QAAQ,CAAC,MAA4C,CAAC,IAAI,CAAC;YACxE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAClD,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAC3C,GAAG;gBACH,UAAU,EAAE,GAAG;gBACf,MAAM,EAAE,SAAS;gBACjB,QAAQ;gBACR,OAAO,EAAE,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU;aAClE,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAgB;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAgC,CAAC;YACrD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACpE,CAAC;QAED,KAAK,CAAC,MAAgB;YACpB,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,QAAgB;IAClD,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;QACxC,OAAO,MAAM,GAAG,GAAG,CAAC;IACtB,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;IACxC,OAAO,MAAM,GAAG,GAAG,CAAC;AACtB,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,QAAgB;IACtD,IAAI,QAAQ,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACpC,IAAI,QAAQ,GAAG,CAAC;QAAE,OAAO,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IAChE,OAAO,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAA8B;IAClD,OAAO,wBAAwB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,cAAc,CAAC,IAA8B;IACpD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;QAClD,OAAO;YACL,qBAAqB,EAAE,CAAC;YACxB,yBAAyB,EAAE,CAAC;YAC5B,wEAAwE;YACxE,iCAAiC;YACjC,2BAA2B,EAAE,CAAC;YAC9B,kEAAkE;YAClE,oDAAoD;YACpD,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,UAAU,CAAC;YACnC,eAAe,EAAE,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC;YACnD,YAAY,EAAE;gBACZ;oBACE,cAAc,EAAE,CAAC,EAAE,aAAa;oBAChC,iBAAiB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,WAAW;oBACtC,IAAI,EAAE,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC;iBAC1C;aACF;SACF,CAAC;IACJ,CAAC;IAED,aAAa;IACb,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,OAAO;QACL,qBAAqB,EAAE,CAAC;QACxB,yBAAyB,EAAE,CAAC;QAC5B,2BAA2B,EAAE,CAAC,EAAE,uBAAuB;QACvD,WAAW,EAAE,CAAC,IAAI,EAAE,0BAA0B,CAAC;QAC/C,eAAe,EAAE,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC;QACnD,YAAY,EAAE;YACZ;gBACE,cAAc,EAAE,CAAC,EAAE,kBAAkB;gBACrC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS;gBACjC,0DAA0D;gBAC1D,kEAAkE;gBAClE,gCAAgC;gBAChC,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAC5B,IAAI,CAAC,SAAS,CAAC;oBACb,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;oBACjC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;oBACzB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;iBACvC,CAAC,CACH;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,gDAAgD;IAChD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACX,8BAA8B;IAC9B,IAAI,CAAC,GAAG,QAAQ,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC/B,CAAC,KAAK,EAAE,CAAC;IACX,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO;IACd,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,OAAO;QACL,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACzC,kBAAkB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;KAC1C,CAAC;AACJ,CAAC"}

package/dist/surfaces/tenzro-native.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Tenzro native surface — the canonical TNZO ledger. Hybrid signing
+ * (Ed25519 + ML-DSA-65) per https://tenzro.com/docs/wallet-sdk.
+ *
+ * M2 path (current):
+ *   prepare → sign (local placeholder) → submit (server-side hybrid signing
+ *   via `tenzro_signAndSendTransaction`, see TenzroRpcPort.sendTransaction).
+ *
+ * M5 path (future):
+ *   sign() runs the FROST-Ed25519 device-leg with a passkey assertion;
+ *   submit() sends the local share + assertion to the node, which combines
+ *   with the TEE share and the ML-DSA leg. Same surface contract; the
+ *   signing driver gets swapped under the kernel.
+ *
+ * The signing-driver call here is retained so the M1 mock test continues to
+ * exercise the threshold-share collection abstraction. Its output is not
+ * consumed by `submit()` in M2 (the node signs server-side); it will be
+ * consumed in M5.
+ */
+import type { TenzroIdentityPort } from '../ports/tenzro-identity.js';
+import type { TenzroRpcPort } from '../ports/tenzro-rpc.js';
+import type { SurfaceKey, TdipDid } from '../types/identity.js';
+import type { SigningDriver } from '../types/signing-driver.js';
+import type { SurfaceModule } from '../types/surface-module.js';
+export interface TenzroNativeDeps {
+    /** Resolves the surface key (with on-chain address) for a given DID. */
+    readonly keyResolver: (did: TdipDid) => SurfaceKey | undefined;
+    readonly signingDriver: SigningDriver;
+    /**
+     * Tenzro RPC port. Real builds inject `TenzroSdkAdapter.fromClient(...)`;
+     * tests inject an in-memory fake. Optional only because the M1 smoke tests
+     * exercise the abstraction without a node — defaults to a stub that returns
+     * deterministic placeholders.
+     */
+    readonly rpc?: TenzroRpcPort;
+    /**
+     * Optional remote identity port. Used only when a recipient DID is *not*
+     * the user's own (i.e., not in `keyResolver`'s local cache). Without it,
+     * sends to non-self DIDs throw — useful in tests and offline-first builds
+     * where every DID is locally known.
+     */
+    readonly identityPort?: TenzroIdentityPort;
+}
+export declare function tenzroNativeSurface(deps: TenzroNativeDeps): SurfaceModule;
+//# sourceMappingURL=tenzro-native.d.ts.map

package/dist/surfaces/tenzro-native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-native.d.ts","sourceRoot":"","sources":["../../src/surfaces/tenzro-native.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,wBAAwB,CAAC;AAE5E,OAAO,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEhE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAgChE,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,UAAU,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,aAAa,CAAC;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,kBAAkB,CAAC;CAC5C;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,GAAG,aAAa,CAoKzE"}

package/dist/surfaces/tenzro-native.js

@@ -0,0 +1,299 @@
+/**
+ * Tenzro native surface — the canonical TNZO ledger. Hybrid signing
+ * (Ed25519 + ML-DSA-65) per https://tenzro.com/docs/wallet-sdk.
+ *
+ * M2 path (current):
+ *   prepare → sign (local placeholder) → submit (server-side hybrid signing
+ *   via `tenzro_signAndSendTransaction`, see TenzroRpcPort.sendTransaction).
+ *
+ * M5 path (future):
+ *   sign() runs the FROST-Ed25519 device-leg with a passkey assertion;
+ *   submit() sends the local share + assertion to the node, which combines
+ *   with the TEE share and the ML-DSA leg. Same surface contract; the
+ *   signing driver gets swapped under the kernel.
+ *
+ * The signing-driver call here is retained so the M1 mock test continues to
+ * exercise the threshold-share collection abstraction. Its output is not
+ * consumed by `submit()` in M2 (the node signs server-side); it will be
+ * consumed in M5.
+ */
+import { dustResidual, truncateForView } from "../ports/cross-vm.js";
+import { makeHandle } from "./util.js";
+export function tenzroNativeSurface(deps) {
+    const rpc = deps.rpc ?? stubRpc();
+    return {
+        name: 'tenzro-native',
+        async prepare(intent) {
+            if (intent.kind !== 'send') {
+                throw new Error(`unsupported intent on tenzro-native: ${intent.kind}`);
+            }
+            const fromKey = deps.keyResolver(intent.from);
+            if (!fromKey || fromKey.surface !== 'tenzro-native') {
+                throw new Error(`no tenzro-native key for ${intent.from}`);
+            }
+            const fromAddress = fromKey.address;
+            const nonce = await rpc.getNonce(fromAddress);
+            const chainId = await rpc.getChainId();
+            const toAddress = await resolveRecipientAddress(intent.to, deps.keyResolver, deps.identityPort);
+            const body = {
+                kind: 'tenzro-native-send',
+                from: intent.from,
+                fromAddress,
+                ...(intent.to.kind === 'tdip' ? { toDid: intent.to.did } : {}),
+                toAddress,
+                amount: intent.amount,
+                assetSymbol: intent.asset.symbol,
+                nonce,
+                chainId,
+            };
+            return {
+                route: { kind: 'native', surface: 'tenzro-native' },
+                intent,
+                fees: [
+                    {
+                        asset: intent.asset,
+                        // M2: 21000 gas × 1 gwei placeholder; real estimate via
+                        // node-side gas oracle lands when the SDK exposes one.
+                        amount: 21000n * 1000000000n,
+                        label: 'tenzro gas',
+                    },
+                ],
+                etaMs: 500,
+                reversibility: 'final-on-submit',
+                warnings: [],
+                body,
+            };
+        },
+        async preparePointer(intent, op) {
+            if (intent.kind !== 'send') {
+                throw new Error(`unsupported intent on tenzro-native: ${intent.kind}`);
+            }
+            const fromKey = deps.keyResolver(intent.from);
+            if (!fromKey || fromKey.surface !== 'tenzro-native') {
+                throw new Error(`no tenzro-native key for ${intent.from}`);
+            }
+            const [nonce, chainId] = await Promise.all([rpc.getNonce(fromKey.address), rpc.getChainId()]);
+            const body = {
+                kind: 'tenzro-native-pointer',
+                from: intent.from,
+                fromAddress: fromKey.address,
+                nonce,
+                chainId,
+                pointer: op,
+            };
+            const dust = dustResidual(op.amount, op.toSurface);
+            const truncated = truncateForView(op.amount, op.toSurface);
+            const warnings = [];
+            if (dust > 0n) {
+                warnings.push(`${dust.toString()} sub-units below ${op.toSurface} precision will ` +
+                    `not appear in the destination view; ${truncated.toString()} ` +
+                    `canonical units will move`);
+            }
+            return {
+                route: {
+                    kind: 'cross-vm-pointer',
+                    fromSurface: 'tenzro-native',
+                    toSurface: op.toSurface,
+                    precompile: '0x1003',
+                },
+                intent,
+                fees: [
+                    {
+                        asset: intent.asset,
+                        amount: 21000n * 1000000000n,
+                        label: 'tenzro gas (pointer call)',
+                    },
+                ],
+                etaMs: 500,
+                reversibility: 'final-on-submit',
+                warnings,
+                body,
+            };
+        },
+        async sign(prepared, _consent) {
+            const body = prepared.body;
+            const surfaceKey = deps.keyResolver(body.from);
+            if (!surfaceKey || surfaceKey.surface !== 'tenzro-native') {
+                throw new Error(`no tenzro-native key for ${body.from}`);
+            }
+            const preimage = canonicalize(body);
+            // M2: the signing driver still runs (so the M1 test fixture keeps
+            // working and the consent/policy gate stays at the kernel-level
+            // sign() boundary). In M5 the driver becomes a real FROST-Ed25519
+            // device-leg + passkey assertion, and `submit()` forwards that to
+            // the node along with the canonical body for TEE-side completion.
+            const result = await deps.signingDriver.sign({
+                did: body.from,
+                surfaceKey,
+                scheme: 'ed25519+ml-dsa-65',
+                preimage,
+                purpose: body.kind === 'tenzro-native-pointer' ? 'tenzro-native-pointer' : 'tenzro-native-send',
+            });
+            return { prepared, signatures: result.signatures, body };
+        },
+        async submit(signed) {
+            const body = signed.body;
+            // M2: server-side hybrid signing path. The kernel's local signature
+            // shares are not yet wire-bound; the SDK's DPoP-asserted session is
+            // the auth boundary. M5 wires the local Ed25519 leg + passkey
+            // assertion through to the node here.
+            //
+            // M3: pointer ops also flow through `sendTransaction` for now — the
+            // node's RPC will branch on the body's `kind` to invoke the
+            // `crossvm_pointer_move` syscall instead of value-transfer settlement.
+            // When the SDK adds a dedicated pointer endpoint this branches.
+            const sendArgs = body.kind === 'tenzro-native-pointer'
+                ? {
+                    from: body.fromAddress,
+                    to: '0x1003',
+                    value: 0n,
+                    nonce: body.nonce,
+                    chainId: body.chainId,
+                }
+                : {
+                    from: body.fromAddress,
+                    to: body.toAddress,
+                    value: body.amount,
+                    nonce: body.nonce,
+                    chainId: body.chainId,
+                };
+            const hash = await rpc.sendTransaction(sendArgs);
+            return makeHandle('tenzro-native', signed.prepared.intent, hash);
+        },
+        watch(handle) {
+            return watchViaPort(handle, rpc);
+        },
+    };
+}
+// --- helpers ---
+async function resolveRecipientAddress(to, keyResolver, identityPort) {
+    switch (to.kind) {
+        case 'tdip': {
+            // Local-first: self-sends and any DID the kernel already knows about
+            // resolve from the in-memory `SurfaceKey` map without a round-trip.
+            const k = keyResolver(to.did);
+            if (k && k.surface === 'tenzro-native')
+                return k.address;
+            // Remote: ask the identity port. This is where `resolveDidDocument`
+            // happens in real builds; tests can leave the port unset to enforce
+            // local-only resolution.
+            if (!identityPort) {
+                throw new Error(`cannot resolve tenzro-native address for recipient DID ${to.did}; ` +
+                    `no identity port wired (pass deps.identityPort to enable remote DID resolution)`);
+            }
+            const remote = await identityPort.resolveTenzroAddress(to.did);
+            if (!remote) {
+                throw new Error(`DID ${to.did} has no tenzro-native key; cannot send to it on this surface`);
+            }
+            return remote;
+        }
+        case 'evm':
+            return to.address;
+        case 'svm':
+            return to.publicKey;
+        case 'canton':
+            return to.partyId;
+    }
+}
+function canonicalize(body) {
+    // Stable JSON canonicalization is fine for the M2 stub; the wire format
+    // the chain actually verifies is `Transaction::hash()` per wallet-sdk
+    // docs, but server-side signing means the node owns canonicalization.
+    // Local canonicalization here only matters for the local signing-driver
+    // leg (which is a placeholder until M5).
+    const json = JSON.stringify(body, (_k, v) => (typeof v === 'bigint' ? v.toString() : v));
+    return new TextEncoder().encode(json);
+}
+function stubRpc() {
+    return {
+        getNonce: async () => 0,
+        getChainId: async () => 1337,
+        sendTransaction: async () => '0xmock',
+        getTransaction: async () => null,
+    };
+}
+/**
+ * Watch loop: yields one `created` status, then polls the node every
+ * `intervalMs` and yields whenever the inferred status changes. Stops
+ * after `finalized` or `failed`, or when `timeoutMs` elapses (yielding a
+ * synthetic `dropped`).
+ *
+ * Defaults: 250ms poll, 60s timeout. Both can be overridden via the
+ * `TENZRO_WATCH_INTERVAL_MS` / `TENZRO_WATCH_TIMEOUT_MS` env vars at
+ * runtime — useful for smoke tests against slow testnets.
+ */
+async function* watchViaPort(handle, rpc) {
+    const env = readEnv();
+    const intervalMs = Number(env.TENZRO_WATCH_INTERVAL_MS ?? 250);
+    const timeoutMs = Number(env.TENZRO_WATCH_TIMEOUT_MS ?? 60_000);
+    yield { handle, phase: 'created' };
+    if (handle.hash === undefined) {
+        // No hash to poll for — surface produced a placeholder handle. Treat as
+        // dropped immediately rather than spinning a doomed poll loop.
+        yield { handle, phase: 'dropped', error: 'no transaction hash on handle' };
+        return;
+    }
+    const deadline = Date.now() + timeoutMs;
+    let lastPhase = 'created';
+    while (Date.now() < deadline) {
+        let nodeStatus = null;
+        try {
+            nodeStatus = await rpc.getTransaction(handle.hash);
+        }
+        catch (err) {
+            // Transient RPC errors don't kill the walk — they just fall through
+            // to the next interval. M3+ may surface them as warnings.
+            const message = err instanceof Error ? err.message : String(err);
+            // Yielding a `failed` here would lie about the on-chain state; just
+            // sleep and retry. If the issue is persistent we'll time out.
+            void message;
+        }
+        const phase = mapStatusToPhase(nodeStatus);
+        if (phase !== lastPhase) {
+            lastPhase = phase;
+            const update = {
+                handle,
+                phase,
+                ...(handle.hash !== undefined ? { hash: handle.hash } : {}),
+                ...(nodeStatus?.blockHeight !== undefined ? { blockHeight: nodeStatus.blockHeight } : {}),
+            };
+            yield update;
+            if (phase === 'finalized' || phase === 'failed')
+                return;
+        }
+        await sleep(intervalMs);
+    }
+    // Timed out without seeing finalization.
+    yield {
+        handle,
+        phase: 'dropped',
+        ...(handle.hash !== undefined ? { hash: handle.hash } : {}),
+        error: `watch timed out after ${timeoutMs}ms`,
+    };
+}
+function mapStatusToPhase(s) {
+    if (s === null)
+        return 'pending';
+    switch (s.status) {
+        case 'pending':
+            return 'pending';
+        case 'included':
+            return 'confirmed';
+        case 'finalized':
+            return 'finalized';
+        case 'failed':
+            return 'failed';
+    }
+}
+function sleep(ms) {
+    return new Promise((r) => setTimeout(r, ms));
+}
+/**
+ * Read env vars without requiring `@types/node`. Falls back to an empty
+ * object in non-Node runtimes (browsers, web workers).
+ */
+function readEnv() {
+    const g = globalThis;
+    return g.process?.env ?? {};
+}
+//# sourceMappingURL=tenzro-native.js.map

package/dist/surfaces/tenzro-native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenzro-native.js","sourceRoot":"","sources":["../../src/surfaces/tenzro-native.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAyB,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAQ5F,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAmDvC,MAAM,UAAU,mBAAmB,CAAC,IAAsB;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,EAAE,CAAC;IAElC,OAAO;QACL,IAAI,EAAE,eAAe;QAErB,KAAK,CAAC,OAAO,CAAC,MAAc;YAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAC7C,MAAM,CAAC,EAAE,EACT,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,YAAY,CAClB,CAAC;YAEF,MAAM,IAAI,GAAqB;gBAC7B,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW;gBACX,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,SAAS;gBACT,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;gBAChC,KAAK;gBACL,OAAO;aACR,CAAC;YAEF,OAAO;gBACL,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;gBACnD,MAAM;gBACN,IAAI,EAAE;oBACJ;wBACE,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,wDAAwD;wBACxD,uDAAuD;wBACvD,MAAM,EAAE,MAAO,GAAG,WAAc;wBAChC,KAAK,EAAE,YAAY;qBACpB;iBACF;gBACD,KAAK,EAAE,GAAG;gBACV,aAAa,EAAE,iBAAiB;gBAChC,QAAQ,EAAE,EAAE;gBACZ,IAAI;aACL,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,EAAoB;YACvD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBACpD,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YAC7D,CAAC;YACD,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAE9F,MAAM,IAAI,GAA4B;gBACpC,IAAI,EAAE,uBAAuB;gBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,WAAW,EAAE,OAAO,CAAC,OAAO;gBAC5B,KAAK;gBACL,OAAO;gBACP,OAAO,EAAE,EAAE;aACZ,CAAC;YAEF,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC,SAAS,kBAAkB;oBAClE,uCAAuC,SAAS,CAAC,QAAQ,EAAE,GAAG;oBAC9D,2BAA2B,CAC9B,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,KAAK,EAAE;oBACL,IAAI,EAAE,kBAAkB;oBACxB,WAAW,EAAE,eAAe;oBAC5B,SAAS,EAAE,EAAE,CAAC,SAAS;oBACvB,UAAU,EAAE,QAAQ;iBACrB;gBACD,MAAM;gBACN,IAAI,EAAE;oBACJ;wBACE,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,MAAM,EAAE,MAAO,GAAG,WAAc;wBAChC,KAAK,EAAE,2BAA2B;qBACnC;iBACF;gBACD,KAAK,EAAE,GAAG;gBACV,aAAa,EAAE,iBAAiB;gBAChC,QAAQ;gBACR,IAAI;aACL,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,QAAoB,EAAE,QAAiB;YAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAkD,CAAC;YACzE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;YACpC,kEAAkE;YAClE,gEAAgE;YAChE,kEAAkE;YAClE,kEAAkE;YAClE,kEAAkE;YAClE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;gBAC3C,GAAG,EAAE,IAAI,CAAC,IAAI;gBACd,UAAU;gBACV,MAAM,EAAE,mBAAmB;gBAC3B,QAAQ;gBACR,OAAO,EACL,IAAI,CAAC,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB;aACzF,CAAC,CAAC;YACH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;QAC3D,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,MAAgB;YAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAkD,CAAC;YACvE,oEAAoE;YACpE,oEAAoE;YACpE,8DAA8D;YAC9D,sCAAsC;YACtC,EAAE;YACF,oEAAoE;YACpE,4DAA4D;YAC5D,uEAAuE;YACvE,gEAAgE;YAChE,MAAM,QAAQ,GACZ,IAAI,CAAC,IAAI,KAAK,uBAAuB;gBACnC,CAAC,CAAC;oBACE,IAAI,EAAE,IAAI,CAAC,WAAW;oBACtB,EAAE,EAAE,QAAQ;oBACZ,KAAK,EAAE,EAAE;oBACT,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;iBACtB;gBACH,CAAC,CAAC;oBACE,IAAI,EAAE,IAAI,CAAC,WAAW;oBACtB,EAAE,EAAE,IAAI,CAAC,SAAS;oBAClB,KAAK,EAAE,IAAI,CAAC,MAAM;oBAClB,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;iBACtB,CAAC;YACR,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACjD,OAAO,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,MAAgB;YACpB,OAAO,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kBAAkB;AAElB,KAAK,UAAU,uBAAuB,CACpC,EAAgB,EAChB,WAAqD,EACrD,YAA4C;IAE5C,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,qEAAqE;YACrE,oEAAoE;YACpE,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,eAAe;gBAAE,OAAO,CAAC,CAAC,OAAO,CAAC;YACzD,oEAAoE;YACpE,oEAAoE;YACpE,yBAAyB;YACzB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CACb,0DAA0D,EAAE,CAAC,GAAG,IAAI;oBAClE,iFAAiF,CACpF,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,oBAAoB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,OAAO,EAAE,CAAC,GAAG,8DAA8D,CAC5E,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,KAAK;YACR,OAAO,EAAE,CAAC,OAAO,CAAC;QACpB,KAAK,KAAK;YACR,OAAO,EAAE,CAAC,SAAS,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC,OAAO,CAAC;IACtB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAgD;IACpE,wEAAwE;IACxE,sEAAsE;IACtE,sEAAsE;IACtE,wEAAwE;IACxE,yCAAyC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,OAAO;IACd,OAAO;QACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;QACvB,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QAC5B,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ;QACrC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,SAAS,CAAC,CAAC,YAAY,CAAC,MAAgB,EAAE,GAAkB;IAC/D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,uBAAuB,IAAI,MAAM,CAAC,CAAC;IAEhE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QAC3E,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,SAAS,GAAsB,SAAS,CAAC;IAE7C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,UAAU,GAA0B,IAAI,CAAC;QAC7C,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,oEAAoE;YACpE,0DAA0D;YAC1D,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,oEAAoE;YACpE,8DAA8D;YAC9D,KAAK,OAAO,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,MAAM,GAAa;gBACvB,MAAM;gBACN,KAAK;gBACL,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,UAAU,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC1F,CAAC;YACF,MAAM,MAAM,CAAC;YACb,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO;QAC1D,CAAC;QAED,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;IAED,yCAAyC;IACzC,MAAM;QACJ,MAAM;QACN,KAAK,EAAE,SAAS;QAChB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,KAAK,EAAE,yBAAyB,SAAS,IAAI;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAwB;IAChD,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACjC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,WAAW,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO;IACd,MAAM,CAAC,GAAG,UAAwE,CAAC;IACnF,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AAC9B,CAAC"}

package/dist/surfaces/util.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Surface-internal helpers. Not exported from the package root.
+ */
+import type { Intent, TxHandle, TxStatus } from '../types/intent.js';
+import type { SurfaceName } from '../types/surface.js';
+export declare function makeHandle(surface: SurfaceName, _intent: Intent, hash?: string): TxHandle;
+/**
+ * M1 placeholder confirmation walk: created → pending → confirmed → finalized.
+ *
+ * Used by every surface that doesn't yet have a real port wired. As of M2,
+ * `tenzro-native` replaces this with `watchViaPort` against a real RPC; the
+ * remaining consumers (evm-on-tenzro, svm-on-tenzro, canton-internal,
+ * canton-external) keep using this until their respective milestones land.
+ *
+ * Delete this when no surface imports it any more.
+ */
+export declare function mockStatusWalk(handle: TxHandle): AsyncIterable<TxStatus>;
+//# sourceMappingURL=util.d.ts.map

package/dist/surfaces/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/surfaces/util.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAIvD,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,CAQzF;AAED;;;;;;;;;GASG;AACH,wBAAuB,cAAc,CAAC,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAQ/E"}