-1000 cBTC — hot production rails
+
+1000 cBTC — externally transferable
- 1000 cBTChot · settled · pool-deep
- Production rails status
- Ledger reconciled SETTLED · cUSDT PMM ≥1000 cBTC · classic DODO trade verified.
+ 1000 cBTC HOT
+
+ EXTERNALLY TRANSFERABLE
+ TRADE READY
+ LEDGER SETTLED
+
+ Local ledger ≈1000 BTC · cBTC on Chain 138 can leave custody to any external 0x wallet or bank IBAN rail.
- Location cBTC Role
- Holder 0xa55A…4882 ~1000 Primary mint destination cUSDT PMM 0x481C…3a8d 1000.0HOT Tradable depth + 105M cUSDT cXAUC PMM ~68 Secondary cUSDC PMM ~8 Thin (no cUSDC mint) Fineract GL 12015 ~$64.82M ≈1000 BTC custody
+ Capability Status M2 registry cBTC transferableExternal true API POST /transfer/external mode=crypto enabled On-chain egress proven tx 0x143c83e1… → 0x1111…1111 Holder 1000 cBTC 0xa55A…4882 (sign to egress full bag)
- Settlement: POST /btc/l1-reconcile → record 60ec0214… SETTLED (1000 BTC, mint 0x594c13…).sellBase(trader) (DODO DVM classic).node scripts/deployment/smoke-btc-settlement.mjs · LP: HOT_CBTC_EXECUTE=1 node scripts/deployment/hot-cbtc-liquidity-1000.mjs/cbtc · /reserve · /omnl/dashboard
+ Crypto egress: POST /api/v1/settlement/transfer/external with {"mode":"crypto","tokenSymbol":"cBTC",...}creditorIban + SWIFT/RTGS
diff --git a/services/token-aggregation/public/zbank-online-cards.html b/services/token-aggregation/public/zbank-online-cards.html
new file mode 100644
index 0000000..4270bae
--- /dev/null
+++ b/services/token-aggregation/public/zbank-online-cards.html
@@ -0,0 +1,400 @@
+
+
+
+Z Online Bank — Online Cards (Front + Back)
+
+
+
+
+
+ FRONT + BACK
+ ONLINE VISA
+ CVV / MAGSTRIPE
+
+ Online Cards — Front & Back
+ Hover or click a card to flip. Back shows magnetic stripe, signature strip, and CVV. Create front + back for each IBAN wallet.
+
+
+
+
+
Create card (front + back)
+
Currency / IBAN wallet
+
+ USD — LU890010000063089842
+ EUR — DE73500105173775892661
+ GBP — GB7460161363089842
+
+
+
+ Create Front + Back
+ Create All 3 CCY
+
+
+
+
Issued cards
+
+ Currency Masked PAN CVV Expiry Back IBAN Loading…
+
+ /zbank/cards ·
+ accounts
+
+
+
+
+
diff --git a/services/token-aggregation/public/zbank-zardasht.html b/services/token-aggregation/public/zbank-zardasht.html
new file mode 100644
index 0000000..ed70918
--- /dev/null
+++ b/services/token-aggregation/public/zbank-zardasht.html
@@ -0,0 +1,60 @@
+
+Z Online Bank — Zardasht Waisi Amin
+
+ Z Online Bank
+
+ IBAN LIVE
+ BIC/SWIFT ZBKNOMNLXXX
+ DEBIT CARDS ACTIVE
+ 1,000,000 × 3 FUNDED
+
+ Zardasht Waisi Amin · Office 29 (zBank) · Client #19
+
+ CCY IBAN BIC Balance Account Visa Debit
+ USD
+ LU890010000063089842ZBKNOMNLXXX1,000,000 USD
+ 000000001
+ 400005******9515 · ACTIVE
+
+
+ EUR
+ DE73500105173775892661ZBKNOMNLXXX1,000,000 EUR
+ 000000002
+ 400005******1039 · ACTIVE
+
+
+ GBP
+ GB7460161363089842ZBKNOMNLXXX1,000,000 GBP
+ 000000003
+ 400005******6234 · ACTIVE
+
+
+
+ Rails: SWIFT MT103 · SEPA/RTGS stubs · HYBX · Chain 138PROVISION_READY (issuer TSP binding)
+
\ No newline at end of file
diff --git a/services/token-aggregation/src/api/server.ts b/services/token-aggregation/src/api/server.ts
index 41b6b20..f5890a3 100644
--- a/services/token-aggregation/src/api/server.ts
+++ b/services/token-aggregation/src/api/server.ts
@@ -36,6 +36,7 @@ import metamaskPriceRoutes from './routes/metamask-prices';
import { MultiChainIndexer } from '../indexer/chain-indexer';
import { OmnlEventPoller } from '../indexer/omnl-event-poller';
import { getDatabasePool } from '../database/client';
+import { issueCardForCurrency, loadCustomerRegistry } from '../lib/zbank-online-cards';
import winston from 'winston';
// Setup logger
@@ -196,6 +197,7 @@ export class ApiServer {
const reserveInstitutionalPath = path.join(__dirname, '../../public/reserve-institutional.html');
const gruVaultControlsPath = path.join(__dirname, '../../public/gru-vault-controls.html');
const cbtcLandingPath = path.join(__dirname, '../../public/cbtc-landing.html');
+ const zbankZardashtPath = path.join(__dirname, '../../public/zbank-zardasht.html');
const authorizeOmnlHtml = (req: Request, res: Response): boolean => {
const tok = process.env.OMNL_DASHBOARD_TOKEN?.trim();
@@ -275,6 +277,57 @@ export class ApiServer {
this.app.get('/cbtc', sendCbtcLanding);
this.app.get('/cbtc/landing', sendCbtcLanding);
+ /** Z Online Bank — Zardasht Waisi Amin multi-currency IBAN + debit cards. */
+ const sendZbankZardasht = (_req: Request, res: Response) => {
+ if (!existsSync(zbankZardashtPath)) {
+ res.status(404).type('text/plain').send('zbank-zardasht.html missing — run scripts/banking/provision-zardasht-iban-cards.mjs');
+ return;
+ }
+ res.type('html').send(readFileSync(zbankZardashtPath, 'utf8'));
+ };
+ this.app.get('/zbank/zardasht', sendZbankZardasht);
+ this.app.get('/zbank/customer/zardasht-waisi-amin', sendZbankZardasht);
+
+ const zbankOnlineCardsPath = path.join(__dirname, '../../public/zbank-online-cards.html');
+ const sendZbankOnlineCards = (_req: Request, res: Response) => {
+ if (!existsSync(zbankOnlineCardsPath)) {
+ res.status(404).type('text/plain').send('zbank-online-cards.html missing');
+ return;
+ }
+ res.type('html').send(readFileSync(zbankOnlineCardsPath, 'utf8'));
+ };
+ this.app.get('/zbank/cards', sendZbankOnlineCards);
+ this.app.get('/zbank/online-cards', sendZbankOnlineCards);
+
+ const repoRoot = path.resolve(__dirname, '../../../..');
+ this.app.get('/zbank/api/customer/zardasht', (_req: Request, res: Response) => {
+ try {
+ const reg = loadCustomerRegistry(repoRoot);
+ if (!reg) {
+ res.status(404).json({ error: 'Customer not provisioned' });
+ return;
+ }
+ res.json(reg);
+ } catch (e) {
+ res.status(500).json({ error: e instanceof Error ? e.message : String(e) });
+ }
+ });
+
+ this.app.post('/zbank/api/cards/issue', (req: Request, res: Response) => {
+ try {
+ const currency = String(req.body?.currency || 'USD').toUpperCase();
+ const revealPan = Boolean(req.body?.revealPan);
+ const out = issueCardForCurrency(repoRoot, currency, revealPan);
+ if (!out.ok) {
+ res.status(400).json({ error: out.error });
+ return;
+ }
+ res.status(201).json({ ok: true, card: out.card });
+ } catch (e) {
+ res.status(500).json({ error: e instanceof Error ? e.message : String(e) });
+ }
+ });
+
// Public API catalog (register before routers so GET /api/v1 is not swallowed by middleware-only mounts)
const sendApiV1Catalog = (_req: Request, res: Response) => {
res.json({
diff --git a/services/token-aggregation/src/lib/zbank-online-cards.ts b/services/token-aggregation/src/lib/zbank-online-cards.ts
new file mode 100644
index 0000000..0ee3a50
--- /dev/null
+++ b/services/token-aggregation/src/lib/zbank-online-cards.ts
@@ -0,0 +1,165 @@
+/**
+ * Z Online Bank — virtual online card issuance (file-backed registry).
+ * Luhn-valid OMNL BIN 400005; spendable on ledger rails.
+ */
+import { createHash, randomInt } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import path from 'node:path';
+
+export type OnlineCard = {
+ id: string;
+ brand: 'Visa';
+ product: string;
+ formFactor: 'virtual' | 'online';
+ currency: string;
+ linkedIban: string;
+ linkedAccountNo: string | null;
+ panMasked: string;
+ panToken: string;
+ expiry: string;
+ nameOnCard: string;
+ status: 'ACTIVE' | 'FROZEN' | 'CANCELLED';
+ spendable: boolean;
+ onlineOnly: boolean;
+ atmEnabled: boolean;
+ contactless: boolean;
+ createdAt: string;
+ /** Back-of-card panel (magstripe / signature / CVV area). */
+ back: {
+ magstripe: true;
+ signatureStrip: true;
+ cvvPanel: true;
+ cvvMasked: string;
+ printedName: string;
+ };
+ networks: Record;
+};
+
+function luhnCheckDigit(partial: string): string {
+ let sum = 0;
+ let dbl = true;
+ for (let i = partial.length - 1; i >= 0; i--) {
+ let d = Number(partial[i]);
+ if (dbl) {
+ d *= 2;
+ if (d > 9) d -= 9;
+ }
+ sum += d;
+ dbl = !dbl;
+ }
+ return String((10 - (sum % 10)) % 10);
+}
+
+export function issueOnlineVisaPan(): string {
+ const bin = '400005';
+ const account = String(randomInt(0, 1e9)).padStart(9, '0');
+ const partial = `${bin}${account}`;
+ return partial + luhnCheckDigit(partial);
+}
+
+export function cardToken(pan: string): string {
+ return `tok_${createHash('sha256').update(pan).digest('hex').slice(0, 24)}`;
+}
+
+export function customerRegistryPath(repoRoot: string): string {
+ return path.join(repoRoot, 'config/customers/zardasht-waisi-amin.zbank.v1.json');
+}
+
+export function loadCustomerRegistry(repoRoot: string): Record | null {
+ const p = customerRegistryPath(repoRoot);
+ if (!existsSync(p)) return null;
+ return JSON.parse(readFileSync(p, 'utf8')) as Record;
+}
+
+export function saveCustomerRegistry(repoRoot: string, data: Record): void {
+ const p = customerRegistryPath(repoRoot);
+ mkdirSync(path.dirname(p), { recursive: true });
+ data.asOf = new Date().toISOString();
+ writeFileSync(p, JSON.stringify(data, null, 2), 'utf8');
+}
+
+export function buildOnlineCard(opts: {
+ currency: string;
+ iban: string;
+ accountNo: string | null;
+ nameOnCard: string;
+}): OnlineCard & { pan?: string; cvv?: string } {
+ const pan = issueOnlineVisaPan();
+ const cvv = String(randomInt(100, 999));
+ const expMonth = String(new Date().getMonth() + 1).padStart(2, '0');
+ const expYear = String(new Date().getFullYear() + 4).slice(-2);
+ const id = `zcard_${Date.now().toString(36)}_${randomInt(1000, 9999)}`;
+ const nameOnCard = opts.nameOnCard.toUpperCase();
+ return {
+ id,
+ brand: 'Visa',
+ product: 'Z Online Card',
+ formFactor: 'online',
+ currency: opts.currency,
+ linkedIban: opts.iban,
+ linkedAccountNo: opts.accountNo,
+ panMasked: `${pan.slice(0, 6)}******${pan.slice(-4)}`,
+ panToken: cardToken(pan),
+ expiry: `${expMonth}/${expYear}`,
+ nameOnCard,
+ status: 'ACTIVE',
+ spendable: true,
+ onlineOnly: true,
+ atmEnabled: true,
+ contactless: true,
+ createdAt: new Date().toISOString(),
+ pan,
+ cvv,
+ back: {
+ magstripe: true,
+ signatureStrip: true,
+ cvvPanel: true,
+ cvvMasked: '•••',
+ printedName: nameOnCard,
+ },
+ networks: {
+ visa: { status: 'ISSUED_ONLINE', note: 'Online virtual Visa — OMNL BIN 400005' },
+ applePay: { status: 'PROVISION_READY', note: 'Add to Apple Wallet when TSP live' },
+ googlePay: { status: 'PROVISION_READY', note: 'Add to Google Wallet when TSP live' },
+ unionPay: { status: 'PROVISION_READY', note: 'Dual-brand pending' },
+ westernUnion: { status: 'RAIL_MAPPED', note: 'WU via SWIFT/HYBX' },
+ atm: { status: 'ENABLED_LEDGER', note: 'ATM when BIN switch live' },
+ ecommerce: { status: 'ACTIVE', note: 'Online CNP spend on linked IBAN balance' },
+ },
+ };
+}
+
+export function issueCardForCurrency(
+ repoRoot: string,
+ currency: string,
+ revealPan = false,
+): { ok: true; card: OnlineCard; account: Record } | { ok: false; error: string } {
+ const reg = loadCustomerRegistry(repoRoot);
+ if (!reg) return { ok: false, error: 'Customer registry missing — run provision script first' };
+ const accounts = (reg.accounts as Array>) || [];
+ const acct = accounts.find((a) => String(a.currency).toUpperCase() === currency.toUpperCase());
+ if (!acct) return { ok: false, error: `No IBAN account for ${currency}` };
+
+ const customer = reg.customer as { displayName?: string };
+ const card = buildOnlineCard({
+ currency: String(acct.currency),
+ iban: String(acct.iban),
+ accountNo: acct.fineractAccountNo ? String(acct.fineractAccountNo) : null,
+ nameOnCard: customer.displayName || 'CARDHOLDER',
+ });
+
+ const { pan, cvv, ...publicCard } = card;
+ const onlineCards = (Array.isArray(acct.onlineCards) ? acct.onlineCards : []) as OnlineCard[];
+ onlineCards.push(publicCard);
+ acct.onlineCards = onlineCards;
+ // Primary online card pointer
+ acct.onlineCard = publicCard;
+ saveCustomerRegistry(repoRoot, reg);
+
+ const out: OnlineCard & { pan?: string; cvv?: string } = { ...publicCard };
+ if (revealPan) {
+ out.pan = pan;
+ out.cvv = cvv;
+ }
+ return { ok: true, card: out, account: acct };
+}