tenzro-wallet 0.2.4 → 0.2.6

package/README.md

@@ -11,7 +11,9 @@ The official wallet for [Tenzro Network](https://tenzro.com) — a browser-clean
 - **First-class Canton / DAML support.** Three surfaces for regulated-finance flows (`cantonInternalSurface` for single-party flows, `cantonExternalSurface` for multi-party flows across synchronizers, `cantonOnboardingSurface` for external-party onboarding) backed by `CantonValidatorPort` + `CantonIdentityPort` + `LedgerApiAdapter` (Canton JSON Ledger API v2). The kernel signs Canton `prepare` / `execute` submissions through its passkey-quorum custody, computes the prepared-transaction hash and topology-bundle hash itself, and surfaces every Canton flow alongside EVM / SVM / native flows in the same router.
 - **Agent payments built-in** — AP2 (Google), x402 (Coinbase), Visa TAP, Mastercard Agent Pay, OpenAI ACP, ERC-8004 trustless agent identity, ERC-7802 cross-chain mint/burn.
 - **Capital markets + multi-party workflows** — Capital Intents (open / quote / assign / execute / verify / compensate / settle), reserve attestations + attested mints, saga workflows with AP2 / x402 / MPP / Stripe SPT / Visa TAP / Mastercard Agent Pay mandate binding.
-- **EVM primitives, first-class** — EIP-7702 (Pectra Type-4) delegation, Permit2 SignatureTransfer with optional ERC-7683-witness binding, Secure-Mint registry (1:1 reserve invariant for tokenized RWAs), ERC-7683 cross-chain intents.
+- **EVM primitives, first-class** — EIP-7702 (Pectra Type-4) delegation, Permit2 SignatureTransfer with optional ERC-7683-witness binding, Secure-Mint registry (1:1 reserve invariant for tokenized RWAs), ERC-7683 cross-chain intents with optional `BridgeFeeHint` so one signed order is fungible across the 6 supported bridges.
+- **Bridge fee in TNZO + Chainlink-backed oracle.** `BridgeFeeAdapter` lets the wallet quote destination-native bridge fees in TNZO, surface per-adapter sponsorship-pool state, sponsor a previously-quoted envelope, and read the caller's own Compute Unit consumption + per-method counters. The operator's node enables a live Chainlink-backed oracle when configured; otherwise quotes fall back to the governance-set rate table. Admin-only paths (rate registration, refill-threshold tuning, cross-tenant analytics) gated by `X-Tenzro-Admin-Token`.
+- **Compliance + identity primitives.** `UrwaAdapter` (ERC-7943 uRWA kill-switch + frozen-tokens reads for the signing UI; admin-token-gated mutations), `Ivms101Adapter` (FATF Travel Rule IVMS101 v1.1.0 envelope canonical-hash binding), `AttestedClockAdapter` (TEE-attested timestamp envelope for saga step deadlines + AP2 mandate validity windows + parametric-insurance trigger windows), `SignedAgentCardAdapter` (A2A v1.0 SignedAgentCard canonical-hash for issuer-signed agent cards), `WormholeNttAdapter` (NTT chain catalog + transceiver registry).
 - **Eight-vendor bridge router** — LI.FI, Chainlink CCIP, LayerZero V2, Wormhole, deBridge, Canton HTLC, Hyperlane V3 (sovereign Tenzro-ISM), Axelar GMP (Cosmos / Move / Stellar / XRPL). The kernel never picks a vendor for you; it surfaces all available quotes.
 - **Chain-agnostic discovery (CAIP)** — CAIP-2 / CAIP-10 / CAIP-19 per the submitted `tenzro` CASA namespace (`ChainAgnostic/namespaces#184`), so every dApp connect + agent handshake returns unambiguous chain + account + asset labels.
 - **Babylon BTC-secured staking, surfaced.** Read-side surface for staking dashboards (list finality providers, sum BTC delegations, list delegations) plus validator-operator write paths so a validator host can use the wallet kernel as the EOTS signing surface.
@@ -95,6 +97,10 @@ Six independent VM surfaces — Tenzro native, EVM-on-Tenzro, SVM-on-Tenzro, Can
 | Discovery port | `CaipAdapter` — `caip2()` / `caip10(address)` / `caip19({ kind, token_id?, collection_id?, nft_token_id? })` per the submitted `tenzro` CASA namespace. |
 | Shared-security port | `BabylonAdapter` — read surface for staking dashboards (`listFinalityProviders` / `totalStakeForProvider` / `listDelegations`) + validator-operator write paths (`registerFinalityProvider` / `submitFinalitySignature`) so a validator host can use the wallet kernel as the signing surface. |
 | Distributed-training port | `TrainingAdapter(read[, write])` — read + write surface for the Tenzro Train protocol layer. Read methods inspect active runs, sealed receipts, and Confidential-tier sealed-shard manifests. Write methods (gated on a `TrainingClient`) post tasks, enroll trainers (with `ConfidentialEnrollment` for Phase 4 TEE-attested enrollment), submit outer gradients, finalize rounds, install sealed-shard manifests. |
+| Bridge-fee + Chainlink port | `BridgeFeeAdapter` — cross-chain bridge fees in TNZO. `quote()` for destination-native fees, `listSponsorshipPools()` for per-adapter vault state, `sponsor()` against a previously-quoted envelope, `getAnalytics()` for subject self-read of CU consumption + per-method counters. Admin-only paths (`setRate()`, `setRefillThreshold()`, `listAnalytics()`) gated by `X-Tenzro-Admin-Token`. Read paths consult the operator's configured Chainlink-backed fee oracle when enabled; otherwise fall back to the governance-set rate table. Per-tenant rate-limiting + Compute Unit attribution applies — the read paths require a `chainlink`-scoped API key on the node. |
+| Compliance + identity ports | `UrwaAdapter` (ERC-7943 — `isKillSwitched` / `getFrozenTokens` reads for the signing UI; admin-token-gated `setFrozenTokens` / `triggerKillSwitch` / `clearKillSwitch` mutations), `Ivms101Adapter` (FATF Travel Rule IVMS101 v1.1.0 envelope canonical-hash for cross-border transfer binding), `SignedAgentCardAdapter` (A2A v1.0 SignedAgentCard canonical-hash for issuer-signed agent cards), `AttestedClockAdapter` (TEE-attested timestamp envelope for saga step deadlines + obligation expiries + AP2 mandate validity windows + parametric-insurance trigger windows). |
+| Wormhole NTT port | `WormholeNttAdapter` — Native Token Transfers chain catalog + multi-transceiver registry (Wormhole / Axelar / LayerZero / custom). Surfaces NTT chain reach so the signing UI shows which destination chains an NTT-deployed token can reach. |
+| ERC-7683 `BridgeFeeHint` | Optional addition to `TenzroOrderData` that makes a single user-signed order fungible across the 6 supported bridges. The TNZO ceiling bounds the solver's destination-native fee commitment; the wallet UI surfaces the ceiling to the signer. |
 | Surfaces | `tenzroNativeSurface`, `evmOnTenzroSurface`, `svmOnTenzroSurface`, `cantonInternalSurface`, `cantonExternalSurface`, `cantonOnboardingSurface`. |
 | Router | `routeIntent()` — chooses the right surface (or bridge) for an intent and returns a typed plan. |
 | Balance aggregator | `BalanceAggregator` — single-pass cross-surface balance read. |
@@ -128,10 +134,9 @@ Testnet-functional today against the live Tenzro testnet at `rpc.tenzro.network`
 | M7 | Settlement (Visa TAP, Mastercard Agent Pay, x402) | Settle-side shipped (`payVisaTap`, `payMastercard`, `payX402`); issuance-side hooks declared, SDK-pending |
 | M8 | Bridge router | Eight per-vendor adapters live (`lifi`, `ccip`, `layerzero`, `wormhole`, `debridge`, `canton`, `hyperlane`, `axelar`); SDK-shipped — all forward to the same `client.bridge` with `vendor:BridgeAdapterId` multiplexing |
 | M9 | TDIP integration (delegate sets, recovery flows) | Kernel orchestrators shipped |
-| M10 | Capital markets + workflows + EVM primitives + extended cross-chain reach + CAIP discovery | Ports + nine adapters shipped against `tenzro-sdk@^0.4.2` |
-| M11 | Babylon Bitcoin staking + Tenzro Train protocol port (Phase 4 Confidential-tier) | Babylon port (read + validator-write surface) + Training port (`TrainingAdapter(read)` for monitoring, `TrainingAdapter(read, write)` for full custodial enrollment + sealed-shard manifest install) against `tenzro-sdk@^0.4.2` |
-| M12 | Canton 3.5+ JSON Ledger API extension | `CantonClient` extended with 10 new methods through the Tenzro node (`uploadDar`, `listParties`, `health`, `version`, `getMyUser`, `cantonCoinBalance`, `feeSchedule`, `connectedSynchronizers`, `listPackages`, `getTransaction`). Verified against Canton 3.5.1 DevNet: live `activeAtOffset` Long fetched per query, FQ party id resolved via CIP-26 (`GET /v2/users/<client_id>@clients`), DAR upload via `POST /v2/packages` with a single Content-Type. |
-| M13 | Canton multi-tenant isolation (Stage 1) | `CantonClient` extended with `allocateParty`, `grantUserRights`, `listUserRights`, `getMyAnalytics`, `listApiKeyAnalytics` against `tenzro-sdk@^0.4.3`. The Tenzro node binds each API key to a Canton User Management Service user id at issuance; canton-scoped calls auto-forward `actAs` as the bound user's `primaryParty`. Canton's AuthService enforces per-user CanActAs server-side; per-tenant call counters persist in RocksDB (`CF_CANTON_ANALYTICS`). |
+| M10 | Capital markets + workflows + EVM primitives + extended cross-chain reach + CAIP discovery | Ports + nine adapters shipped against `tenzro-sdk@^0.4.1` |
+| M11 | Babylon Bitcoin staking + Tenzro Train protocol port (Phase 4 Confidential-tier) | Babylon port (read + validator-write surface) + Training port (`TrainingAdapter(read)` for monitoring, `TrainingAdapter(read, write)` for full custodial enrollment + sealed-shard manifest install) against `tenzro-sdk@^0.4.1` |
+| M12 | Cross-chain bridge fee in TNZO + Chainlink-backed oracle + ERC-7683 `BridgeFeeHint` + ERC-7943 uRWA compliance + FATF IVMS101 + A2A SignedAgentCard + TEE-attested clock + Wormhole NTT | Six new ports + adapters (`BridgeFeeAdapter`, `UrwaAdapter`, `Ivms101Adapter`, `AttestedClockAdapter`, `SignedAgentCardAdapter`, `WormholeNttAdapter`) plus `BridgeFeeHint` on `Erc7683` against `tenzro-sdk@^0.4.7`. Per-tenant Compute Unit attribution + GCRA rate-limit on `chainlink`-scoped methods at the node layer. |
 
 **407 unit tests** pass; 5 env-gated integration smokes exercise the live testnet end-to-end.
 

package/dist/ports/attested-clock/adapter.d.ts

@@ -0,0 +1,13 @@
+/**
+ * AttestedClockAdapter — `AttestedClockPort` backed by `tenzro-sdk`
+ * `AttestedClockClient`.
+ */
+import type { AttestedClockClient } from 'tenzro-sdk';
+import type { AttestedClockPort, AttestedTimestamp } from './attested-clock.js';
+export type AttestedClockClientLike = Pick<AttestedClockClient, 'now'>;
+export declare class AttestedClockAdapter implements AttestedClockPort {
+    private readonly client;
+    constructor(client: AttestedClockClientLike);
+    now(): Promise<AttestedTimestamp>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/ports/attested-clock/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/ports/attested-clock/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEhF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;AAEvE,qBAAa,oBAAqB,YAAW,iBAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,uBAAuB;IAEtD,GAAG,IAAI,OAAO,CAAC,iBAAiB,CAAC;CASxC"}

package/dist/ports/attested-clock/adapter.js

@@ -0,0 +1,20 @@
+/**
+ * AttestedClockAdapter — `AttestedClockPort` backed by `tenzro-sdk`
+ * `AttestedClockClient`.
+ */
+export class AttestedClockAdapter {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async now() {
+        const r = await this.client.now();
+        return {
+            wallMs: r.wall_ms,
+            monotonicNs: r.monotonic_ns,
+            teeVendor: r.tee_vendor,
+            ...(r.note !== undefined ? { note: r.note } : {}),
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/ports/attested-clock/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/ports/attested-clock/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAOH,MAAM,OAAO,oBAAoB;IACF;IAA7B,YAA6B,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;IAAG,CAAC;IAEhE,KAAK,CAAC,GAAG;QACP,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAClC,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,OAAO;YACjB,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC;CACF"}

package/dist/ports/attested-clock/attested-clock.d.ts

@@ -0,0 +1,20 @@
+/**
+ * AttestedClockPort — TEE-attested timestamp envelope.
+ *
+ * Wallet usage: long-running operations (saga step deadlines,
+ * obligation expiries, AP2 mandate validity windows, parametric
+ * insurance trigger windows, margin-call grace periods) need a
+ * tamper-resistant timestamp. The wallet asks the node for an
+ * attested-clock envelope, surfaces `wallMs` to the user, and binds
+ * the envelope into the operation it's signing.
+ */
+export interface AttestedTimestamp {
+    readonly wallMs: number;
+    readonly monotonicNs: number;
+    readonly teeVendor: string | null;
+    readonly note?: string;
+}
+export interface AttestedClockPort {
+    now(): Promise<AttestedTimestamp>;
+}
+//# sourceMappingURL=attested-clock.d.ts.map

package/dist/ports/attested-clock/attested-clock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attested-clock.d.ts","sourceRoot":"","sources":["../../../src/ports/attested-clock/attested-clock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACnC"}

package/dist/ports/attested-clock/attested-clock.js

@@ -0,0 +1,12 @@
+/**
+ * AttestedClockPort — TEE-attested timestamp envelope.
+ *
+ * Wallet usage: long-running operations (saga step deadlines,
+ * obligation expiries, AP2 mandate validity windows, parametric
+ * insurance trigger windows, margin-call grace periods) need a
+ * tamper-resistant timestamp. The wallet asks the node for an
+ * attested-clock envelope, surfaces `wallMs` to the user, and binds
+ * the envelope into the operation it's signing.
+ */
+export {};
+//# sourceMappingURL=attested-clock.js.map

package/dist/ports/attested-clock/attested-clock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attested-clock.js","sourceRoot":"","sources":["../../../src/ports/attested-clock/attested-clock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/ports/attested-clock/index.d.ts

@@ -0,0 +1,4 @@
+export type { AttestedClockPort, AttestedTimestamp } from './attested-clock.js';
+export { AttestedClockAdapter } from './adapter.js';
+export type { AttestedClockClientLike } from './adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/attested-clock/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ports/attested-clock/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/attested-clock/index.js

@@ -0,0 +1,2 @@
+export { AttestedClockAdapter } from "./adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/ports/attested-clock/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ports/attested-clock/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/bridge-fee/adapter.d.ts

@@ -0,0 +1,18 @@
+/**
+ * BridgeFeeAdapter — `BridgeFeePort` backed by `tenzro-sdk` `BridgeFeeClient`.
+ */
+import type { BridgeFeeClient } from 'tenzro-sdk';
+import type { BridgeFeePort, BridgeFeeQuote, BridgeKeyAnalytics, BridgeSponsorshipPool, BridgeSponsorshipReceipt, QuoteBridgeFeeRequest, SetBridgeFeeRateRequest, SponsorBridgeFeeRequest } from './bridge-fee.js';
+export type BridgeFeeClientLike = Pick<BridgeFeeClient, 'quote' | 'listSponsorshipPools' | 'sponsor' | 'getAnalytics' | 'setRate' | 'setRefillThreshold' | 'listAnalytics'>;
+export declare class BridgeFeeAdapter implements BridgeFeePort {
+    private readonly client;
+    constructor(client: BridgeFeeClientLike);
+    quote(req: QuoteBridgeFeeRequest): Promise<BridgeFeeQuote>;
+    listSponsorshipPools(): Promise<readonly BridgeSponsorshipPool[]>;
+    sponsor(req: SponsorBridgeFeeRequest): Promise<BridgeSponsorshipReceipt>;
+    getAnalytics(): Promise<BridgeKeyAnalytics>;
+    setRate(req: SetBridgeFeeRateRequest): Promise<unknown>;
+    setRefillThreshold(adapter: string, refillThresholdBps: number): Promise<unknown>;
+    listAnalytics(_keyId?: string): Promise<readonly BridgeKeyAnalytics[]>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/ports/bridge-fee/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/ports/bridge-fee/adapter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,mBAAmB,GAAG,IAAI,CACpC,eAAe,EACb,OAAO,GACP,sBAAsB,GACtB,SAAS,GACT,cAAc,GACd,SAAS,GACT,oBAAoB,GACpB,eAAe,CAClB,CAAC;AA0BF,qBAAa,gBAAiB,YAAW,aAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,mBAAmB;IAElD,KAAK,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;IAe1D,oBAAoB,IAAI,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC;IAajE,OAAO,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IA0BxE,YAAY,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAKjD,OAAO,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC;IAUvD,kBAAkB,CAChB,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAAC,OAAO,CAAC;IAIb,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC;CAI7E"}

package/dist/ports/bridge-fee/adapter.js

@@ -0,0 +1,94 @@
+/**
+ * BridgeFeeAdapter — `BridgeFeePort` backed by `tenzro-sdk` `BridgeFeeClient`.
+ */
+function toAnalytics(o) {
+    return {
+        keyId: o.key_id,
+        callsTotal: o.calls_total,
+        errorsTotal: o.errors_total,
+        callsByMethod: o.calls_by_method,
+        errorsByMethod: o.errors_by_method,
+        cuConsumedTotal: o.cu_consumed_total,
+        ...(o.first_seen_at !== undefined ? { firstSeenAt: o.first_seen_at } : {}),
+        ...(o.last_called_at !== undefined ? { lastCalledAt: o.last_called_at } : {}),
+        rateLimitRejections: o.rate_limit_rejections,
+    };
+}
+export class BridgeFeeAdapter {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async quote(req) {
+        const r = await this.client.quote({
+            adapter: req.adapter,
+            dest_chain: req.destChain,
+            native_fee_smallest_unit: req.nativeFeeSmallestUnit,
+        });
+        return {
+            adapter: r.adapter,
+            destChain: r.dest_chain,
+            nativeFeeSmallestUnit: r.native_fee_smallest_unit,
+            tnzoAmountWei: r.tnzo_amount_wei,
+            oracleBacking: r.oracle_backing,
+        };
+    }
+    async listSponsorshipPools() {
+        const r = await this.client.listSponsorshipPools();
+        return r.pools.map((p) => ({
+            adapter: p.adapter,
+            vaultAddressHex: p.vault_address_hex,
+            tnzoBalanceWei: p.tnzo_balance_wei,
+            nativeOutstandingSmallestUnit: p.native_outstanding_smallest_unit,
+            ...(p.refill_threshold_bps !== undefined
+                ? { refillThresholdBps: p.refill_threshold_bps }
+                : {}),
+        }));
+    }
+    async sponsor(req) {
+        const r = await this.client.sponsor({
+            quote_id_hex: req.quoteIdHex,
+            adapter: req.adapter,
+            dest_chain: req.destChain,
+            native_fee_smallest_unit: req.nativeFeeSmallestUnit,
+            tnzo_amount_wei: req.tnzoAmountWei,
+            rate_q18_hex: req.rateQ18Hex,
+            issued_at_ms: req.issuedAtMs,
+            valid_until_ms: req.validUntilMs,
+            ...(req.oracleBacking !== undefined ? { oracle_backing: req.oracleBacking } : {}),
+            payer_did: req.payerDid,
+        });
+        return {
+            sponsorshipIdHex: r.sponsorship_id_hex,
+            quoteIdHex: r.quote_id_hex,
+            adapter: r.adapter,
+            destChain: r.dest_chain,
+            payerDid: r.payer_did,
+            tnzoPaidWei: r.tnzo_paid_wei,
+            nativeCommittedSmallestUnit: r.native_committed_smallest_unit,
+            sponsoredAtMs: r.sponsored_at_ms,
+            poolAddressHex: r.pool_address_hex,
+        };
+    }
+    async getAnalytics() {
+        const r = await this.client.getAnalytics();
+        return toAnalytics(r);
+    }
+    setRate(req) {
+        return this.client.setRate({
+            adapter: req.adapter,
+            dest_chain: req.destChain,
+            rate_q18: req.rateQ18,
+            markup_bps: req.markupBps,
+            valid_window_ms: req.validWindowMs,
+        });
+    }
+    setRefillThreshold(adapter, refillThresholdBps) {
+        return this.client.setRefillThreshold(adapter, refillThresholdBps);
+    }
+    async listAnalytics(_keyId) {
+        const r = await this.client.listAnalytics();
+        return r.analytics.map(toAnalytics);
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/ports/bridge-fee/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/ports/bridge-fee/adapter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAyBH,SAAS,WAAW,CAAC,CAUpB;IACC,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,MAAM;QACf,UAAU,EAAE,CAAC,CAAC,WAAW;QACzB,WAAW,EAAE,CAAC,CAAC,YAAY;QAC3B,aAAa,EAAE,CAAC,CAAC,eAAe;QAChC,cAAc,EAAE,CAAC,CAAC,gBAAgB;QAClC,eAAe,EAAE,CAAC,CAAC,iBAAiB;QACpC,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,mBAAmB,EAAE,CAAC,CAAC,qBAAqB;KAC7C,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,gBAAgB;IACE;IAA7B,YAA6B,MAA2B;QAA3B,WAAM,GAAN,MAAM,CAAqB;IAAG,CAAC;IAE5D,KAAK,CAAC,KAAK,CAAC,GAA0B;QACpC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAChC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,wBAAwB,EAAE,GAAG,CAAC,qBAAqB;SACpD,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,qBAAqB,EAAE,CAAC,CAAC,wBAAwB;YACjD,aAAa,EAAE,CAAC,CAAC,eAAe;YAChC,aAAa,EAAE,CAAC,CAAC,cAAc;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACnD,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,eAAe,EAAE,CAAC,CAAC,iBAAiB;YACpC,cAAc,EAAE,CAAC,CAAC,gBAAgB;YAClC,6BAA6B,EAAE,CAAC,CAAC,gCAAgC;YACjE,GAAG,CAAC,CAAC,CAAC,oBAAoB,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,oBAAoB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAA4B;QACxC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAClC,YAAY,EAAE,GAAG,CAAC,UAAU;YAC5B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,wBAAwB,EAAE,GAAG,CAAC,qBAAqB;YACnD,eAAe,EAAE,GAAG,CAAC,aAAa;YAClC,YAAY,EAAE,GAAG,CAAC,UAAU;YAC5B,YAAY,EAAE,GAAG,CAAC,UAAU;YAC5B,cAAc,EAAE,GAAG,CAAC,YAAY;YAChC,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,SAAS,EAAE,GAAG,CAAC,QAAQ;SACxB,CAAC,CAAC;QACH,OAAO;YACL,gBAAgB,EAAE,CAAC,CAAC,kBAAkB;YACtC,UAAU,EAAE,CAAC,CAAC,YAAY;YAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,UAAU;YACvB,QAAQ,EAAE,CAAC,CAAC,SAAS;YACrB,WAAW,EAAE,CAAC,CAAC,aAAa;YAC5B,2BAA2B,EAAE,CAAC,CAAC,8BAA8B;YAC7D,aAAa,EAAE,CAAC,CAAC,eAAe;YAChC,cAAc,EAAE,CAAC,CAAC,gBAAgB;SACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IAED,OAAO,CAAC,GAA4B;QAClC,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YACzB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,QAAQ,EAAE,GAAG,CAAC,OAAO;YACrB,UAAU,EAAE,GAAG,CAAC,SAAS;YACzB,eAAe,EAAE,GAAG,CAAC,aAAa;SACnC,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAChB,OAAe,EACf,kBAA0B;QAE1B,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAe;QACjC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,OAAO,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/ports/bridge-fee/bridge-fee.d.ts

@@ -0,0 +1,87 @@
+/**
+ * BridgeFeePort — destination-native bridge fees paid in TNZO.
+ *
+ * Wallet usage:
+ *  1. Quote: ask the node for the TNZO-denominated cost of a
+ *     destination-native bridge fee, surface it to the signer.
+ *  2. Sponsor: debit TNZO from the user, credit the per-adapter
+ *     sponsorship-pool vault.
+ *  3. Analytics: subject self-read of CU consumption + counters.
+ *
+ * Admin paths (`setRate`, `setRefillThreshold`, `listAnalytics`) are
+ * operator-only and gated by `X-Tenzro-Admin-Token` at the node layer.
+ */
+export interface QuoteBridgeFeeRequest {
+    readonly adapter: string;
+    readonly destChain: string;
+    readonly nativeFeeSmallestUnit: string;
+}
+export interface BridgeFeeQuote {
+    readonly adapter: string;
+    readonly destChain: string;
+    readonly nativeFeeSmallestUnit: string;
+    readonly tnzoAmountWei: string;
+    readonly oracleBacking: string;
+}
+export interface BridgeSponsorshipPool {
+    readonly adapter: string;
+    readonly vaultAddressHex: string;
+    readonly tnzoBalanceWei: string;
+    readonly nativeOutstandingSmallestUnit: string;
+    readonly refillThresholdBps?: number;
+}
+export interface SetBridgeFeeRateRequest {
+    readonly adapter: string;
+    readonly destChain: string;
+    readonly rateQ18: string;
+    readonly markupBps: number;
+    readonly validWindowMs: number;
+}
+export interface SponsorBridgeFeeRequest {
+    readonly quoteIdHex: string;
+    readonly adapter: string;
+    readonly destChain: string;
+    readonly nativeFeeSmallestUnit: string;
+    readonly tnzoAmountWei: string;
+    readonly rateQ18Hex: string;
+    readonly issuedAtMs: number;
+    readonly validUntilMs: number;
+    readonly oracleBacking?: string;
+    readonly payerDid: string;
+}
+export interface BridgeSponsorshipReceipt {
+    readonly sponsorshipIdHex: string;
+    readonly quoteIdHex: string;
+    readonly adapter: string;
+    readonly destChain: string;
+    readonly payerDid: string;
+    readonly tnzoPaidWei: string;
+    readonly nativeCommittedSmallestUnit: string;
+    readonly sponsoredAtMs: number;
+    readonly poolAddressHex: string;
+}
+export interface BridgeKeyAnalytics {
+    readonly keyId: string;
+    readonly callsTotal: number;
+    readonly errorsTotal: number;
+    readonly callsByMethod: Readonly<Record<string, number>>;
+    readonly errorsByMethod: Readonly<Record<string, number>>;
+    /** Compute Units consumed (sum of per-method weights on success). */
+    readonly cuConsumedTotal: number;
+    readonly firstSeenAt?: number;
+    readonly lastCalledAt?: number;
+    readonly rateLimitRejections: number;
+}
+export interface BridgeFeePort {
+    quote(req: QuoteBridgeFeeRequest): Promise<BridgeFeeQuote>;
+    listSponsorshipPools(): Promise<readonly BridgeSponsorshipPool[]>;
+    sponsor(req: SponsorBridgeFeeRequest): Promise<BridgeSponsorshipReceipt>;
+    /** Subject self-read of the caller's own analytics. */
+    getAnalytics(): Promise<BridgeKeyAnalytics>;
+    /** Admin-token-gated. */
+    setRate(req: SetBridgeFeeRateRequest): Promise<unknown>;
+    setRefillThreshold(adapter: string, refillThresholdBps: number): Promise<unknown>;
+    /** Admin-token-gated cross-tenant read. */
+    listAnalytics(keyId?: string): Promise<readonly BridgeKeyAnalytics[]>;
+}
+//# sourceMappingURL=bridge-fee.d.ts.map

package/dist/ports/bridge-fee/bridge-fee.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-fee.d.ts","sourceRoot":"","sources":["../../../src/ports/bridge-fee/bridge-fee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,6BAA6B,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,2BAA2B,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzD,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,GAAG,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC3D,oBAAoB,IAAI,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACzE,uDAAuD;IACvD,YAAY,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC5C,yBAAyB;IACzB,OAAO,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClF,2CAA2C;IAC3C,aAAa,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAAC;CACvE"}

package/dist/ports/bridge-fee/bridge-fee.js

@@ -0,0 +1,15 @@
+/**
+ * BridgeFeePort — destination-native bridge fees paid in TNZO.
+ *
+ * Wallet usage:
+ *  1. Quote: ask the node for the TNZO-denominated cost of a
+ *     destination-native bridge fee, surface it to the signer.
+ *  2. Sponsor: debit TNZO from the user, credit the per-adapter
+ *     sponsorship-pool vault.
+ *  3. Analytics: subject self-read of CU consumption + counters.
+ *
+ * Admin paths (`setRate`, `setRefillThreshold`, `listAnalytics`) are
+ * operator-only and gated by `X-Tenzro-Admin-Token` at the node layer.
+ */
+export {};
+//# sourceMappingURL=bridge-fee.js.map

package/dist/ports/bridge-fee/bridge-fee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-fee.js","sourceRoot":"","sources":["../../../src/ports/bridge-fee/bridge-fee.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/ports/bridge-fee/index.d.ts

@@ -0,0 +1,4 @@
+export type { BridgeFeePort, BridgeFeeQuote, BridgeKeyAnalytics, BridgeSponsorshipPool, BridgeSponsorshipReceipt, QuoteBridgeFeeRequest, SetBridgeFeeRateRequest, SponsorBridgeFeeRequest, } from './bridge-fee.js';
+export { BridgeFeeAdapter } from './adapter.js';
+export type { BridgeFeeClientLike } from './adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/bridge-fee/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ports/bridge-fee/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,qBAAqB,EACrB,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,YAAY,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/bridge-fee/index.js

@@ -0,0 +1,2 @@
+export { BridgeFeeAdapter } from "./adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/ports/bridge-fee/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ports/bridge-fee/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/erc7683/erc7683.d.ts

@@ -31,6 +31,23 @@ export interface ListOrdersOpts {
     readonly destChain?: number;
     readonly limit?: number;
 }
+/**
+ * BridgeFeeHint — optional addition to TenzroOrderData that lets a
+ * single user-signed order be filled by any of the 6 supported
+ * bridges. The TNZO ceiling bounds the solver's destination-native
+ * fee commitment. The wallet UI surfaces this so the signer can
+ * see what TNZO ceiling they're authorizing.
+ */
+export interface BridgeFeeHint {
+    /** Reference quote id from the BridgeFeeOracle (auditable). */
+    readonly quoteIdHex: string;
+    /** TNZO ceiling the swapper authorized for the destination fee. */
+    readonly tnzoAmountWei: string;
+    /** Wall-clock expiry — solvers MUST NOT execute fills after expiry. */
+    readonly validUntilMs: number;
+    /** Adapter the swapper had in mind at quote time (advisory). */
+    readonly preferredAdapter: string;
+}
 export interface Erc7683Port {
     getOrder(orderId: string): Promise<unknown>;
     listOrders(opts?: ListOrdersOpts): Promise<unknown>;

package/dist/ports/erc7683/erc7683.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"erc7683.d.ts","sourceRoot":"","sources":["../../../src/ports/erc7683/erc7683.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IAClF,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,UAAU,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/B"}
+{"version":3,"file":"erc7683.d.ts","sourceRoot":"","sources":["../../../src/ports/erc7683/erc7683.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,WAAW,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;IAClF,QAAQ,CAAC,OAAO,EAAE,SAAS,aAAa,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5C,UAAU,CAAC,IAAI,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,UAAU,CAAC,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/B"}

package/dist/ports/erc7683/index.d.ts

@@ -1,4 +1,4 @@
-export type { Erc7683Port, Erc7683Output, RecordFillRequest, ListOrdersOpts, } from './erc7683.js';
+export type { Erc7683Port, Erc7683Output, RecordFillRequest, ListOrdersOpts, BridgeFeeHint, } from './erc7683.js';
 export { Erc7683Adapter } from './adapter.js';
 export type { Erc7683ClientLike } from './adapter.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/ports/erc7683/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ports/erc7683/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ports/erc7683/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/erc7683/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ports/erc7683/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ports/erc7683/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/index.d.ts

@@ -26,4 +26,11 @@ export * from './erc7683/index.js';
 export * from './caip/index.js';
 export * from './babylon/index.js';
 export * from './training/index.js';
+export * from './bridge-fee/index.js';
+export type { UrwaPort, UrwaKillSwitchState, UrwaFrozenAmount, SetFrozenTokensRequest, UrwaFrozenRecord, UrwaKillSwitchTriggerRequest, UrwaKillSwitchTriggered, UrwaKillSwitchCleared, UrwaClientLike, } from './urwa/index.js';
+export { UrwaAdapter } from './urwa/index.js';
+export * from './ivms101/index.js';
+export * from './attested-clock/index.js';
+export * from './signed-agent-card/index.js';
+export * from './wormhole-ntt/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/ports/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,aAAa,EACb,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAChF,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAChG,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,YAAY,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAG1B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,mBAAmB,CAAC;AAKlC,cAAc,oBAAoB,CAAC;AAKnC,cAAc,qBAAqB,CAAC;AAKpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AAKvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAKnC,cAAc,iBAAiB,CAAC;AAMhC,cAAc,oBAAoB,CAAC;AAOnC,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,aAAa,EACb,cAAc,EACd,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,YAAY,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAChF,YAAY,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACtD,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,wBAAwB,EACxB,yBAAyB,EACzB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,uBAAuB,EACvB,wBAAwB,EACxB,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,mBAAmB,GACpB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAChG,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,YAAY,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AACtF,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAG1B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,mBAAmB,CAAC;AAKlC,cAAc,oBAAoB,CAAC;AAKnC,cAAc,qBAAqB,CAAC;AAKpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AAKvC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAKnC,cAAc,iBAAiB,CAAC;AAMhC,cAAc,oBAAoB,CAAC;AAOnC,cAAc,qBAAqB,CAAC;AAMpC,cAAc,uBAAuB,CAAC;AAOtC,YAAY,EACV,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,4BAA4B,EAC5B,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,GACf,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAK9C,cAAc,oBAAoB,CAAC;AAKnC,cAAc,2BAA2B,CAAC;AAI1C,cAAc,8BAA8B,CAAC;AAI7C,cAAc,yBAAyB,CAAC"}

package/dist/ports/index.js

@@ -43,4 +43,24 @@ export * from "./babylon/index.js";
 // agents, or `(read, write)` for full custodial enrollment +
 // gradient submission flows.
 export * from "./training/index.js";
+// ── Cross-chain bridge fee in TNZO + Chainlink-backed oracle ──
+// Quote / sponsor / per-tenant analytics for the bridge fee surface.
+// Operator-only paths (set-rate, set-refill, list-analytics) are
+// gated by admin token at the node layer.
+export * from "./bridge-fee/index.js";
+export { UrwaAdapter } from "./urwa/index.js";
+// ── FATF Travel Rule (IVMS101 v1.1.0) canonical-hash helper ──
+// Compute the canonical hash of an IVMS101 payload so the wallet
+// can bind it to a cross-border transfer envelope before signing.
+export * from "./ivms101/index.js";
+// ── TEE-attested timestamp envelope ──
+// For saga step deadlines, obligation expiries, and AP2 mandate
+// validity windows.
+export * from "./attested-clock/index.js";
+// ── A2A v1.0 Signed Agent Card canonical-hash helper ──
+// Issuer signs the hash; verifier recomputes + checks.
+export * from "./signed-agent-card/index.js";
+// ── Wormhole NTT (Native Token Transfers) registry ──
+// Chain catalog + multi-transceiver kinds.
+export * from "./wormhole-ntt/index.js";
 //# sourceMappingURL=index.js.map

package/dist/ports/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAG9E,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,eAAe,CAAC;AAyBvB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAE3E,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,8EAA8E;AAC9E,cAAc,kBAAkB,CAAC;AAEjC,qEAAqE;AACrE,cAAc,mBAAmB,CAAC;AAElC,yCAAyC;AACzC,uEAAuE;AACvE,yCAAyC;AACzC,cAAc,oBAAoB,CAAC;AAEnC,8CAA8C;AAC9C,iEAAiE;AACjE,wCAAwC;AACxC,cAAc,qBAAqB,CAAC;AAEpC,uCAAuC;AACvC,kEAAkE;AAClE,mEAAmE;AACnE,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AAEvC,oDAAoD;AACpD,mEAAmE;AACnE,mEAAmE;AACnE,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAEnC,iDAAiD;AACjD,uEAAuE;AACvE,kCAAkC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,gDAAgD;AAChD,oEAAoE;AACpE,qEAAqE;AACrE,WAAW;AACX,cAAc,oBAAoB,CAAC;AAEnC,8CAA8C;AAC9C,mEAAmE;AACnE,oEAAoE;AACpE,6DAA6D;AAC7D,6BAA6B;AAC7B,cAAc,qBAAqB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAG9E,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,eAAe,CAAC;AAyBvB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAE3E,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAE1B,8EAA8E;AAC9E,cAAc,kBAAkB,CAAC;AAEjC,qEAAqE;AACrE,cAAc,mBAAmB,CAAC;AAElC,yCAAyC;AACzC,uEAAuE;AACvE,yCAAyC;AACzC,cAAc,oBAAoB,CAAC;AAEnC,8CAA8C;AAC9C,iEAAiE;AACjE,wCAAwC;AACxC,cAAc,qBAAqB,CAAC;AAEpC,uCAAuC;AACvC,kEAAkE;AAClE,mEAAmE;AACnE,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AAEvC,oDAAoD;AACpD,mEAAmE;AACnE,mEAAmE;AACnE,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AAEnC,iDAAiD;AACjD,uEAAuE;AACvE,kCAAkC;AAClC,cAAc,iBAAiB,CAAC;AAEhC,gDAAgD;AAChD,oEAAoE;AACpE,qEAAqE;AACrE,WAAW;AACX,cAAc,oBAAoB,CAAC;AAEnC,8CAA8C;AAC9C,mEAAmE;AACnE,oEAAoE;AACpE,6DAA6D;AAC7D,6BAA6B;AAC7B,cAAc,qBAAqB,CAAC;AAEpC,iEAAiE;AACjE,qEAAqE;AACrE,iEAAiE;AACjE,0CAA0C;AAC1C,cAAc,uBAAuB,CAAC;AAkBtC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C,gEAAgE;AAChE,iEAAiE;AACjE,kEAAkE;AAClE,cAAc,oBAAoB,CAAC;AAEnC,wCAAwC;AACxC,gEAAgE;AAChE,oBAAoB;AACpB,cAAc,2BAA2B,CAAC;AAE1C,yDAAyD;AACzD,uDAAuD;AACvD,cAAc,8BAA8B,CAAC;AAE7C,uDAAuD;AACvD,2CAA2C;AAC3C,cAAc,yBAAyB,CAAC"}

package/dist/ports/ivms101/adapter.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Ivms101Adapter — `Ivms101Port` backed by `tenzro-sdk` `Ivms101Client`.
+ */
+import type { Ivms101Client } from 'tenzro-sdk';
+import type { Ivms101HashRequest, Ivms101HashResult, Ivms101Port } from './ivms101.js';
+export type Ivms101ClientLike = Pick<Ivms101Client, 'canonicalHash'>;
+export declare class Ivms101Adapter implements Ivms101Port {
+    private readonly client;
+    constructor(client: Ivms101ClientLike);
+    canonicalHash(req: Ivms101HashRequest): Promise<Ivms101HashResult>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/ports/ivms101/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/ports/ivms101/adapter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EACV,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACZ,MAAM,cAAc,CAAC;AAEtB,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;AAErE,qBAAa,cAAe,YAAW,WAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,iBAAiB;IAEhD,aAAa,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAWzE"}

package/dist/ports/ivms101/adapter.js

@@ -0,0 +1,21 @@
+/**
+ * Ivms101Adapter — `Ivms101Port` backed by `tenzro-sdk` `Ivms101Client`.
+ */
+export class Ivms101Adapter {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async canonicalHash(req) {
+        const r = await this.client.canonicalHash(req.payload);
+        return {
+            envelopeHashHex: r.envelope_hash_hex,
+            specVersion: r.spec_version,
+            originatingVaspDid: r.originating_vasp_did,
+            beneficiaryVaspDid: r.beneficiary_vasp_did,
+            assetCaip19: r.asset_caip19,
+            amountSmallestUnit: r.amount_smallest_unit,
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/ports/ivms101/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/ports/ivms101/adapter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAWH,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,MAAyB;QAAzB,WAAM,GAAN,MAAM,CAAmB;IAAG,CAAC;IAE1D,KAAK,CAAC,aAAa,CAAC,GAAuB;QACzC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvD,OAAO;YACL,eAAe,EAAE,CAAC,CAAC,iBAAiB;YACpC,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,kBAAkB,EAAE,CAAC,CAAC,oBAAoB;YAC1C,kBAAkB,EAAE,CAAC,CAAC,oBAAoB;YAC1C,WAAW,EAAE,CAAC,CAAC,YAAY;YAC3B,kBAAkB,EAAE,CAAC,CAAC,oBAAoB;SAC3C,CAAC;IACJ,CAAC;CACF"}

package/dist/ports/ivms101/index.d.ts

@@ -0,0 +1,4 @@
+export type { Ivms101Port, Ivms101HashRequest, Ivms101HashResult } from './ivms101.js';
+export { Ivms101Adapter } from './adapter.js';
+export type { Ivms101ClientLike } from './adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/ivms101/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ports/ivms101/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/ivms101/index.js

@@ -0,0 +1,2 @@
+export { Ivms101Adapter } from "./adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/ports/ivms101/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ports/ivms101/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/ivms101/ivms101.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Ivms101Port — FATF Travel Rule IVMS101 v1.1.0 canonical envelope.
+ *
+ * Wallet usage: cross-border transfers that fall under the FATF Travel
+ * Rule (typically >$1000 equivalent crossing VASP boundaries) require an
+ * IVMS101 KYC payload attached to the transfer. The wallet computes the
+ * canonical hash of the payload, binds it to the transfer envelope,
+ * and surfaces the hash to the user before signing.
+ */
+export interface Ivms101HashRequest {
+    /** Canonical IVMS101 v1.1.0 JSON payload (envelope shape). */
+    readonly payload: Record<string, unknown>;
+}
+export interface Ivms101HashResult {
+    readonly envelopeHashHex: string;
+    readonly specVersion: string;
+    readonly originatingVaspDid: string | null;
+    readonly beneficiaryVaspDid: string | null;
+    readonly assetCaip19: string;
+    readonly amountSmallestUnit: string;
+}
+export interface Ivms101Port {
+    canonicalHash(req: Ivms101HashRequest): Promise<Ivms101HashResult>;
+}
+//# sourceMappingURL=ivms101.d.ts.map

package/dist/ports/ivms101/ivms101.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ivms101.d.ts","sourceRoot":"","sources":["../../../src/ports/ivms101/ivms101.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,kBAAkB;IACjC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACpE"}

package/dist/ports/ivms101/ivms101.js

@@ -0,0 +1,11 @@
+/**
+ * Ivms101Port — FATF Travel Rule IVMS101 v1.1.0 canonical envelope.
+ *
+ * Wallet usage: cross-border transfers that fall under the FATF Travel
+ * Rule (typically >$1000 equivalent crossing VASP boundaries) require an
+ * IVMS101 KYC payload attached to the transfer. The wallet computes the
+ * canonical hash of the payload, binds it to the transfer envelope,
+ * and surfaces the hash to the user before signing.
+ */
+export {};
+//# sourceMappingURL=ivms101.js.map

package/dist/ports/ivms101/ivms101.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ivms101.js","sourceRoot":"","sources":["../../../src/ports/ivms101/ivms101.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/ports/signed-agent-card/adapter.d.ts

@@ -0,0 +1,13 @@
+/**
+ * SignedAgentCardAdapter — `SignedAgentCardPort` backed by `tenzro-sdk`
+ * `SignedAgentCardClient`.
+ */
+import type { SignedAgentCardClient } from 'tenzro-sdk';
+import type { AgentCard, CanonicalHashResult, SignedAgentCardPort } from './signed-agent-card.js';
+export type SignedAgentCardClientLike = Pick<SignedAgentCardClient, 'canonicalHash'>;
+export declare class SignedAgentCardAdapter implements SignedAgentCardPort {
+    private readonly client;
+    constructor(client: SignedAgentCardClientLike);
+    canonicalHash(card: AgentCard): Promise<CanonicalHashResult>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/ports/signed-agent-card/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/ports/signed-agent-card/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,KAAK,EACV,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAC1C,qBAAqB,EACrB,eAAe,CAChB,CAAC;AAEF,qBAAa,sBAAuB,YAAW,mBAAmB;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,yBAAyB;IAExD,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAUnE"}

package/dist/ports/signed-agent-card/adapter.js

@@ -0,0 +1,21 @@
+/**
+ * SignedAgentCardAdapter — `SignedAgentCardPort` backed by `tenzro-sdk`
+ * `SignedAgentCardClient`.
+ */
+export class SignedAgentCardAdapter {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async canonicalHash(card) {
+        const r = await this.client.canonicalHash(card);
+        return {
+            canonicalHashHex: r.canonical_hash_hex,
+            agentCardName: r.agent_card_name,
+            agentCardUrl: r.agent_card_url,
+            protocolVersion: r.protocol_version,
+            skillsCount: r.skills_count,
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/ports/signed-agent-card/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/ports/signed-agent-card/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAcH,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,MAAiC;QAAjC,WAAM,GAAN,MAAM,CAA2B;IAAG,CAAC;IAElE,KAAK,CAAC,aAAa,CAAC,IAAe;QACjC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO;YACL,gBAAgB,EAAE,CAAC,CAAC,kBAAkB;YACtC,aAAa,EAAE,CAAC,CAAC,eAAe;YAChC,YAAY,EAAE,CAAC,CAAC,cAAc;YAC9B,eAAe,EAAE,CAAC,CAAC,gBAAgB;YACnC,WAAW,EAAE,CAAC,CAAC,YAAY;SAC5B,CAAC;IACJ,CAAC;CACF"}

package/dist/ports/signed-agent-card/index.d.ts

@@ -0,0 +1,4 @@
+export type { SignedAgentCardPort, AgentCard, CanonicalHashResult, } from './signed-agent-card.js';
+export { SignedAgentCardAdapter } from './adapter.js';
+export type { SignedAgentCardClientLike } from './adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/signed-agent-card/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ports/signed-agent-card/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,mBAAmB,EACnB,SAAS,EACT,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,YAAY,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/signed-agent-card/index.js

@@ -0,0 +1,2 @@
+export { SignedAgentCardAdapter } from "./adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/ports/signed-agent-card/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ports/signed-agent-card/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/signed-agent-card/signed-agent-card.d.ts

@@ -0,0 +1,28 @@
+/**
+ * SignedAgentCardPort — A2A v1.0 Signed Agent Card.
+ *
+ * Wallet usage: when an agent publishes its Agent Card under a domain
+ * the agent owns, it signs the canonical SHA-256 hash of the card with
+ * its JWS key. Relying parties recompute the hash and verify the
+ * signature before trusting the card's claims (skills, endpoints,
+ * identity).
+ */
+export interface AgentCard {
+    readonly name: string;
+    readonly description?: string;
+    readonly version?: string;
+    readonly url?: string;
+    readonly skills?: readonly unknown[];
+    readonly [key: string]: unknown;
+}
+export interface CanonicalHashResult {
+    readonly canonicalHashHex: string;
+    readonly agentCardName: string;
+    readonly agentCardUrl: string;
+    readonly protocolVersion: string;
+    readonly skillsCount: number;
+}
+export interface SignedAgentCardPort {
+    canonicalHash(card: AgentCard): Promise<CanonicalHashResult>;
+}
+//# sourceMappingURL=signed-agent-card.d.ts.map

package/dist/ports/signed-agent-card/signed-agent-card.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-agent-card.d.ts","sourceRoot":"","sources":["../../../src/ports/signed-agent-card/signed-agent-card.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACrC,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC9D"}

package/dist/ports/signed-agent-card/signed-agent-card.js

@@ -0,0 +1,11 @@
+/**
+ * SignedAgentCardPort — A2A v1.0 Signed Agent Card.
+ *
+ * Wallet usage: when an agent publishes its Agent Card under a domain
+ * the agent owns, it signs the canonical SHA-256 hash of the card with
+ * its JWS key. Relying parties recompute the hash and verify the
+ * signature before trusting the card's claims (skills, endpoints,
+ * identity).
+ */
+export {};
+//# sourceMappingURL=signed-agent-card.js.map

package/dist/ports/signed-agent-card/signed-agent-card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signed-agent-card.js","sourceRoot":"","sources":["../../../src/ports/signed-agent-card/signed-agent-card.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/ports/urwa/adapter.d.ts

@@ -0,0 +1,16 @@
+/**
+ * UrwaAdapter — `UrwaPort` backed by `tenzro-sdk` `UrwaClient`.
+ */
+import type { UrwaClient } from 'tenzro-sdk';
+import type { SetFrozenTokensRequest, UrwaFrozenAmount, UrwaFrozenRecord, UrwaKillSwitchCleared, UrwaKillSwitchState, UrwaKillSwitchTriggered, UrwaKillSwitchTriggerRequest, UrwaPort } from './urwa.js';
+export type UrwaClientLike = Pick<UrwaClient, 'isKillSwitched' | 'getFrozenTokens' | 'setFrozenTokens' | 'triggerKillSwitch' | 'clearKillSwitch'>;
+export declare class UrwaAdapter implements UrwaPort {
+    private readonly client;
+    constructor(client: UrwaClientLike);
+    isKillSwitched(tokenIdHex: string): Promise<UrwaKillSwitchState>;
+    getFrozenTokens(tokenIdHex: string, accountHex: string): Promise<UrwaFrozenAmount>;
+    setFrozenTokens(req: SetFrozenTokensRequest): Promise<UrwaFrozenRecord>;
+    triggerKillSwitch(req: UrwaKillSwitchTriggerRequest): Promise<UrwaKillSwitchTriggered>;
+    clearKillSwitch(tokenIdHex: string): Promise<UrwaKillSwitchCleared>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/ports/urwa/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/ports/urwa/adapter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,KAAK,EACV,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,EAC5B,QAAQ,EACT,MAAM,WAAW,CAAC;AAEnB,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,UAAU,EACR,gBAAgB,GAChB,iBAAiB,GACjB,iBAAiB,GACjB,mBAAmB,GACnB,iBAAiB,CACpB,CAAC;AAEF,qBAAa,WAAY,YAAW,QAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,cAAc;IAE7C,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAUhE,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,gBAAgB,CAAC;IAStB,eAAe,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgBvE,iBAAiB,CACrB,GAAG,EAAE,4BAA4B,GAChC,OAAO,CAAC,uBAAuB,CAAC;IAe7B,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC;CAO1E"}

package/dist/ports/urwa/adapter.js

@@ -0,0 +1,63 @@
+/**
+ * UrwaAdapter — `UrwaPort` backed by `tenzro-sdk` `UrwaClient`.
+ */
+export class UrwaAdapter {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async isKillSwitched(tokenIdHex) {
+        const r = await this.client.isKillSwitched(tokenIdHex);
+        return {
+            tokenIdHex: r.token_id_hex,
+            active: r.active,
+            selectors: r.selectors,
+            precompileAddresses: r.precompile_addresses,
+        };
+    }
+    async getFrozenTokens(tokenIdHex, accountHex) {
+        const r = await this.client.getFrozenTokens(tokenIdHex, accountHex);
+        return {
+            tokenIdHex: r.token_id_hex,
+            accountHex: r.account_hex,
+            frozenAmount: r.frozen_amount,
+        };
+    }
+    async setFrozenTokens(req) {
+        const r = await this.client.setFrozenTokens({
+            token_id_hex: req.tokenIdHex,
+            account_hex: req.accountHex,
+            amount: req.amount,
+            ...(req.reason !== undefined ? { reason: req.reason } : {}),
+        });
+        return {
+            tokenIdHex: r.token_id_hex,
+            accountHex: r.account_hex,
+            amount: r.amount,
+            reason: r.reason,
+            setAtMs: r.set_at_ms,
+        };
+    }
+    async triggerKillSwitch(req) {
+        const r = await this.client.triggerKillSwitch({
+            token_id_hex: req.tokenIdHex,
+            ...(req.triggeredByDid !== undefined ? { triggered_by_did: req.triggeredByDid } : {}),
+            ...(req.reason !== undefined ? { reason: req.reason } : {}),
+        });
+        return {
+            tokenIdHex: r.token_id_hex,
+            active: r.active,
+            triggeredByDid: r.triggered_by_did,
+            reason: r.reason,
+            triggeredAtMs: r.triggered_at_ms,
+        };
+    }
+    async clearKillSwitch(tokenIdHex) {
+        const r = await this.client.clearKillSwitch(tokenIdHex);
+        return {
+            tokenIdHex: r.token_id_hex,
+            active: r.active,
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/ports/urwa/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/ports/urwa/adapter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAuBH,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,cAAc,CAAC,UAAkB;QACrC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACvD,OAAO;YACL,UAAU,EAAE,CAAC,CAAC,YAAY;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,mBAAmB,EAAE,CAAC,CAAC,oBAAoB;SAC5C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,UAAkB,EAClB,UAAkB;QAElB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACpE,OAAO;YACL,UAAU,EAAE,CAAC,CAAC,YAAY;YAC1B,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,YAAY,EAAE,CAAC,CAAC,aAAa;SAC9B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,GAA2B;QAC/C,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAC1C,YAAY,EAAE,GAAG,CAAC,UAAU;YAC5B,WAAW,EAAE,GAAG,CAAC,UAAU;YAC3B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,OAAO;YACL,UAAU,EAAE,CAAC,CAAC,YAAY;YAC1B,UAAU,EAAE,CAAC,CAAC,WAAW;YACzB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,SAAS;SACrB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,GAAiC;QAEjC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YAC5C,YAAY,EAAE,GAAG,CAAC,UAAU;YAC5B,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,OAAO;YACL,UAAU,EAAE,CAAC,CAAC,YAAY;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,cAAc,EAAE,CAAC,CAAC,gBAAgB;YAClC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,aAAa,EAAE,CAAC,CAAC,eAAe;SACjC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QACxD,OAAO;YACL,UAAU,EAAE,CAAC,CAAC,YAAY;YAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC;IACJ,CAAC;CACF"}

package/dist/ports/urwa/index.d.ts

@@ -0,0 +1,4 @@
+export type { UrwaPort, UrwaKillSwitchState, UrwaFrozenAmount, SetFrozenTokensRequest, UrwaFrozenRecord, UrwaKillSwitchTriggerRequest, UrwaKillSwitchTriggered, UrwaKillSwitchCleared, } from './urwa.js';
+export { UrwaAdapter } from './adapter.js';
+export type { UrwaClientLike } from './adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/urwa/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ports/urwa/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,4BAA4B,EAC5B,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/urwa/index.js

@@ -0,0 +1,2 @@
+export { UrwaAdapter } from "./adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/ports/urwa/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ports/urwa/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/urwa/urwa.d.ts

@@ -0,0 +1,58 @@
+/**
+ * UrwaPort — ERC-7943 (uRWA) compliance surface for tokenized RWAs.
+ *
+ * Wallet usage: surfaces compliance status (kill-switch active,
+ * frozen-tokens record) to the user before they sign any transfer
+ * of an affected asset. Mutations are admin-token-gated at the
+ * node layer.
+ */
+export interface UrwaKillSwitchState {
+    readonly tokenIdHex: string;
+    readonly active: boolean;
+    readonly selectors: Readonly<Record<string, string>>;
+    readonly precompileAddresses: Readonly<Record<string, string>>;
+}
+export interface UrwaFrozenAmount {
+    readonly tokenIdHex: string;
+    readonly accountHex: string;
+    readonly frozenAmount: string;
+}
+export interface SetFrozenTokensRequest {
+    readonly tokenIdHex: string;
+    readonly accountHex: string;
+    readonly amount: string;
+    readonly reason?: string;
+}
+export interface UrwaFrozenRecord {
+    readonly tokenIdHex: string;
+    readonly accountHex: string;
+    readonly amount: string;
+    readonly reason: string | null;
+    readonly setAtMs: number;
+}
+export interface UrwaKillSwitchTriggerRequest {
+    readonly tokenIdHex: string;
+    readonly triggeredByDid?: string;
+    readonly reason?: string;
+}
+export interface UrwaKillSwitchTriggered {
+    readonly tokenIdHex: string;
+    readonly active: boolean;
+    readonly triggeredByDid: string | null;
+    readonly reason: string | null;
+    readonly triggeredAtMs: number;
+}
+export interface UrwaKillSwitchCleared {
+    readonly tokenIdHex: string;
+    readonly active: boolean;
+}
+export interface UrwaPort {
+    /** Read: surface kill-switch + frozen state to the signing UI. */
+    isKillSwitched(tokenIdHex: string): Promise<UrwaKillSwitchState>;
+    getFrozenTokens(tokenIdHex: string, accountHex: string): Promise<UrwaFrozenAmount>;
+    /** Admin-token-gated mutations. */
+    setFrozenTokens(req: SetFrozenTokensRequest): Promise<UrwaFrozenRecord>;
+    triggerKillSwitch(req: UrwaKillSwitchTriggerRequest): Promise<UrwaKillSwitchTriggered>;
+    clearKillSwitch(tokenIdHex: string): Promise<UrwaKillSwitchCleared>;
+}
+//# sourceMappingURL=urwa.d.ts.map

package/dist/ports/urwa/urwa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"urwa.d.ts","sourceRoot":"","sources":["../../../src/ports/urwa/urwa.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAChE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,kEAAkE;IAClE,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjE,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnF,mCAAmC;IACnC,eAAe,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACxE,iBAAiB,CAAC,GAAG,EAAE,4BAA4B,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACvF,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACrE"}

package/dist/ports/urwa/urwa.js

@@ -0,0 +1,10 @@
+/**
+ * UrwaPort — ERC-7943 (uRWA) compliance surface for tokenized RWAs.
+ *
+ * Wallet usage: surfaces compliance status (kill-switch active,
+ * frozen-tokens record) to the user before they sign any transfer
+ * of an affected asset. Mutations are admin-token-gated at the
+ * node layer.
+ */
+export {};
+//# sourceMappingURL=urwa.js.map

package/dist/ports/urwa/urwa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"urwa.js","sourceRoot":"","sources":["../../../src/ports/urwa/urwa.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/ports/wormhole-ntt/adapter.d.ts

@@ -0,0 +1,13 @@
+/**
+ * WormholeNttAdapter — `WormholeNttPort` backed by `tenzro-sdk`
+ * `WormholeNttClient`.
+ */
+import type { WormholeNttClient } from 'tenzro-sdk';
+import type { WormholeNttCatalog, WormholeNttPort } from './wormhole-ntt.js';
+export type WormholeNttClientLike = Pick<WormholeNttClient, 'listChains'>;
+export declare class WormholeNttAdapter implements WormholeNttPort {
+    private readonly client;
+    constructor(client: WormholeNttClientLike);
+    listChains(): Promise<WormholeNttCatalog>;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/ports/wormhole-ntt/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/ports/wormhole-ntt/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;AAE1E,qBAAa,kBAAmB,YAAW,eAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,qBAAqB;IAEpD,UAAU,IAAI,OAAO,CAAC,kBAAkB,CAAC;CAYhD"}

package/dist/ports/wormhole-ntt/adapter.js

@@ -0,0 +1,23 @@
+/**
+ * WormholeNttAdapter — `WormholeNttPort` backed by `tenzro-sdk`
+ * `WormholeNttClient`.
+ */
+export class WormholeNttAdapter {
+    client;
+    constructor(client) {
+        this.client = client;
+    }
+    async listChains() {
+        const r = await this.client.listChains();
+        return {
+            chains: r.chains.map((c) => ({
+                wormholeChainId: c.wormhole_chain_id,
+                name: c.name,
+            })),
+            transceiverKinds: r.transceiver_kinds,
+            scaffolding: r.scaffolding,
+            ...(r.note !== undefined ? { note: r.note } : {}),
+        };
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/ports/wormhole-ntt/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/ports/wormhole-ntt/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,MAA6B;QAA7B,WAAM,GAAN,MAAM,CAAuB;IAAG,CAAC;IAE9D,KAAK,CAAC,UAAU;QACd,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACzC,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,eAAe,EAAE,CAAC,CAAC,iBAAiB;gBACpC,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC,CAAC;YACH,gBAAgB,EAAE,CAAC,CAAC,iBAAiB;YACrC,WAAW,EAAE,CAAC,CAAC,WAAW;YAC1B,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC;CACF"}

package/dist/ports/wormhole-ntt/index.d.ts

@@ -0,0 +1,4 @@
+export type { WormholeNttPort, WormholeNttCatalog, WormholeNttChain, } from './wormhole-ntt.js';
+export { WormholeNttAdapter } from './adapter.js';
+export type { WormholeNttClientLike } from './adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ports/wormhole-ntt/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ports/wormhole-ntt/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,YAAY,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/wormhole-ntt/index.js

@@ -0,0 +1,2 @@
+export { WormholeNttAdapter } from "./adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/ports/wormhole-ntt/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/ports/wormhole-ntt/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC"}

package/dist/ports/wormhole-ntt/wormhole-ntt.d.ts

@@ -0,0 +1,22 @@
+/**
+ * WormholeNttPort — Wormhole Native Token Transfers (NTT) registry.
+ *
+ * Wallet usage: surfaces the registered NTT chain catalog + supported
+ * transceiver kinds (Wormhole / Axelar / LayerZero / custom) so the
+ * user can see which destination chains an NTT-deployed token can
+ * reach before they sign.
+ */
+export interface WormholeNttChain {
+    readonly wormholeChainId: number;
+    readonly name: string;
+}
+export interface WormholeNttCatalog {
+    readonly chains: readonly WormholeNttChain[];
+    readonly transceiverKinds: readonly string[];
+    readonly scaffolding: boolean;
+    readonly note?: string;
+}
+export interface WormholeNttPort {
+    listChains(): Promise<WormholeNttCatalog>;
+}
+//# sourceMappingURL=wormhole-ntt.d.ts.map

package/dist/ports/wormhole-ntt/wormhole-ntt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wormhole-ntt.d.ts","sourceRoot":"","sources":["../../../src/ports/wormhole-ntt/wormhole-ntt.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC3C"}

package/dist/ports/wormhole-ntt/wormhole-ntt.js

@@ -0,0 +1,10 @@
+/**
+ * WormholeNttPort — Wormhole Native Token Transfers (NTT) registry.
+ *
+ * Wallet usage: surfaces the registered NTT chain catalog + supported
+ * transceiver kinds (Wormhole / Axelar / LayerZero / custom) so the
+ * user can see which destination chains an NTT-deployed token can
+ * reach before they sign.
+ */
+export {};
+//# sourceMappingURL=wormhole-ntt.js.map

package/dist/ports/wormhole-ntt/wormhole-ntt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wormhole-ntt.js","sourceRoot":"","sources":["../../../src/ports/wormhole-ntt/wormhole-ntt.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tenzro-wallet",
-  "version": "0.2.4",
-  "description": "Tenzro Wallet kernel — one identity, four VM surfaces (Tenzro native, EVM, SVM, Canton). Passkey-quorum custody, post-quantum signing, agent-payment ports, capital intents + multi-party workflows, EVM primitives (EIP-7702 / Permit2 / Secure-Mint / ERC-7683), eight-vendor bridge router, CAIP discovery, Babylon Bitcoin staking, Tenzro Train protocol port (Phase 4 Confidential-tier).",
+  "version": "0.2.6",
+  "description": "Tenzro Wallet kernel — one identity, four VM surfaces (Tenzro native, EVM, SVM, Canton). Passkey-quorum custody, post-quantum signing, agent-payment ports, capital intents + multi-party workflows, EVM primitives (EIP-7702 / Permit2 / Secure-Mint / ERC-7683 + BridgeFeeHint), eight-vendor bridge router, cross-chain bridge fee in TNZO + Chainlink-backed oracle + per-tenant analytics, CAIP discovery, Babylon Bitcoin staking, Tenzro Train protocol port (Phase 4 Confidential-tier), ERC-7943 uRWA compliance, FATF Travel Rule (IVMS101), TEE-attested clock, A2A v1.0 SignedAgentCard, Wormhole NTT.",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -31,7 +31,7 @@
     "prepublishOnly": "pnpm build"
   },
   "dependencies": {
-    "tenzro-sdk": "^0.4.3"
+    "tenzro-sdk": "^0.4.7"
   },
   "devDependencies": {
     "@types/node": "22.10.5",