diff --git a/.gitattributes b/.gitattributes
new file mode 100644
index 00000000..93e81659
--- /dev/null
+++ b/.gitattributes
@@ -0,0 +1 @@
+*.dar binary
diff --git a/CLAUDE.md b/CLAUDE.md
index 18f058d9..3ebd8569 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -66,6 +66,7 @@ A README may state that a contract exists and link to it. It may not restate it.
 | Node | 24 | Exact version pinned via root `.nvmrc`; inherits to every Node subproject. Root and the four Node subprojects all declare `engines.node` at `>=24.15.0`, which is what jsdom 30 requires |
 | Container runtime | Docker | Required by the `@bootnodedev/canton-barebones` LocalNet; nothing in this repository builds an image |
 | LocalNet | @bootnodedev/canton-barebones | Pinned exact in root devDependencies and reached through `pnpm exec canton-barebones`, so the version is the one in `package.json`. Nothing about its config is committed: `scripts/localnet-config.mjs` scaffolds the gitignored `.canton-localnet/` from the tool's own template and turns on `validators.appUser.ui` and `sv.scanUI`, without which nginx serves no `/api/validator` or `/api/scan`. The Splice checkout and the runtime env land in `.canton-localnet/.generated/` |
+| Token registry | @bootnodedev/canton-token-forge | Read-only CIP-56 registry service. A git dependency pinned to `v0.2.0` and reached through `pnpm exec canton-token-forge-registry`. Its `prepare` is what compiles `registry/dist`, so `pnpm-workspace.yaml`'s `allowBuilds` must carry the resolved git specifier or the bin resolves to nothing. `scripts/dev-stack.sh` runs it on 3013, configured entirely from the block `scripts/bootstrap-vesting.mjs` prints |
 | Commit linting | commitlint + husky | Enforced via root `.husky/commit-msg` |
 | Lint / format | Biome | One root `biome.json` and a single root `@biomejs/biome`; per-project specifics live in `overrides`. No per-subproject Biome install or config. `pnpm lint` = `biome check --error-on-warnings` (warnings fail); standalone SVG assets are excluded |
 | Pre-commit | lint-staged | Two passes from `.husky/pre-commit`, because only the first writes: `.lintstagedrc.format.mjs` runs root Biome (`biome check --write`) across `canton-connect/`, `canton-dappbooster/`, `canton-theme/`, `dapp/frontend/` and `scripts/`, then `.lintstagedrc.mjs` runs the read-only gates — the tests, the doc check and the anatomy check — concurrently. One pass would let a reformat land mid-parse |
@@ -90,7 +91,7 @@ A README may state that a contract exists and link to it. It may not restate it.
 | [`canton-dappbooster/`](canton-dappbooster/) | L2 headless UI components for Canton dApps (tsdown-built, zero styling), plus the light/dark/system theme runtime that drives `data-theme`, plus the pure utilities the components are built on, the exact-decimal amount ones included. Styling lives in `canton-theme`. `src/index.ts` is the public API; `src/connect.ts` is the `/connect` sub-path, holding the components that read the wallet session so the main barrel stays free of the Canton SDK. | TypeScript + React 19 + tsdown + vitest + Biome | n/a (library) |
 | [`canton-theme/`](canton-theme/) | L3 plain-CSS theme for the kit: `--cnc-*` tokens + prestyled defaults, consumed by importing its CSS. | CSS | n/a (library) |
 
-Two things the loop needs are not subprojects but dependencies. wallet-service ships from
+Three things the loop needs are not subprojects but dependencies. wallet-service ships from
 [BootNodeDev/canton-wallet-service](https://github.com/BootNodeDev/canton-wallet-service),
 arrives as a git dependency pinned to a tag, and `scripts/dev-stack.sh` runs it on
 port 3010 through `pnpm exec canton-wallet-service`. The LocalNet ships from
@@ -98,6 +99,12 @@ port 3010 through `pnpm exec canton-wallet-service`. The LocalNet ships from
 devDependency whose config `scripts/dev-stack.sh` scaffolds into the gitignored
 `.canton-localnet/` and drives there over `pnpm exec`.
 
+The token registry ships from
+[BootNodeDev/canton-token-forge](https://github.com/BootNodeDev/canton-token-forge), arrives as a
+git dependency pinned to a tag, and `scripts/dev-stack.sh` runs it on port 3013 through
+`pnpm exec canton-token-forge-registry`. That repository also builds both DARs under `vendor/`;
+`vendor/PROVENANCE.md` records which release each came from.
+
 ## Code Style
 
 - All source code in English regardless of conversation language.
@@ -333,7 +340,13 @@ package, because only `canton-dappbooster` splits markup from styles across a pa
 
 - Use **pnpm** only (never npm or yarn).
 - This is a pnpm workspaces monorepo: one `pnpm install` from the repo root installs and links every package. There is no per-package install step.
-- Run a subproject script either by `cd <subproject>` or by using `pnpm -C <subproject> run <script>`. The root `package.json` is the whole local loop, in order: `mint-token`, `build-dar`, `deploy-dar -- <dar>`, `bootstrap`, `app:dev`. Docs and `dev-stack.sh` use those names, not the underlying commands, so the implementation can move without a doc sweep. There is no `format` script anywhere: `lint:fix` is `biome check --write`, which formats too.
+- Run a subproject script either by `cd <subproject>` or by using `pnpm -C <subproject> run <script>`. The root `package.json` is the whole local loop, in order: `mint-token`, `build-dar`, `deploy-dar -- <dar>` for the built DAR and both `vendor/` binaries, `bootstrap`, `app:dev`. Docs and `dev-stack.sh` use those names, not the underlying commands, so the implementation can move without a doc sweep. There is no `format` script anywhere: `lint:fix` is `biome check --write`, which formats too.
+- **`bootstrap` and `dev-stack.sh` share one contract: the `KEY=value` block bootstrap prints on
+  stdout.** Nothing is written to disk, so nothing can go stale, and a manual run gets a block it
+  can paste into a `.env`. `scripts/bootstrap-vesting.test.mjs` holds the printed keys and
+  `dev-stack.sh`'s `REGISTRY_ENV_KEYS` together; add a registry variable to one and that test
+  fails until the other follows. `LEDGER_API_TOKEN` is the one variable outside it, because
+  bootstrap never sees the bearer.
 - **The LocalNet is not in this repository, and neither is its config.** It is
   `@bootnodedev/canton-barebones`, a pinned devDependency driven with `start` / `stop` / `reset` in
   the directory holding `canton-barebones.config.json`. `up` scaffolds that directory itself through
@@ -350,10 +363,12 @@ package, because only `canton-dappbooster` splits markup from styles across a pa
   directory of its own via `CANTON_LOCALNET_DIR`, not in `.canton-localnet/`.
 - `node scripts/add-component.mjs <PascalCaseName>` scaffolds a `canton-dappbooster` component
   folder. Not wired into `package.json`: it is an authoring convenience, not part of the loop above.
-- `pnpm run bootstrap` creates the vesting operator and its factory, which the
-  dApp cannot start without. Run it after the DAR is deployed. It writes no file: the dApp reads
-  both back off the ledger once a wallet connects, so nothing can go stale between the two, and
-  pointing the wallet at another participant is the whole of switching networks.
+- `pnpm run bootstrap` creates the vesting operator and its factory, which the dApp cannot start
+  without, plus the instrument admin and its `DBT` InstrumentConfig. Run it after both DARs deploy.
+  It writes no file, printing the admin and instrument as a registry env block instead: the dApp
+  reads the operator and factory back off the ledger once a wallet connects, so nothing can go
+  stale between the two, and pointing the wallet at another participant is the whole of switching
+  networks.
 - **One `.env`, at the root.** It is wallet-service's entire configuration, because the service
   loads dotenv from the directory it starts in and `pnpm exec` starts it here; it also holds the
   signing recipe `scripts/mint-token.mjs` reads and the token `scripts/deploy-dar.sh` sends. Both
@@ -385,7 +400,9 @@ See [`architecture.md`](architecture.md) for the system shape, subproject layout
   - `canton-connect`: `pnpm test` (vitest + jsdom)
   - `canton-dappbooster`: `pnpm test` (vitest + jsdom + Testing Library)
   - root `scripts/`: covered by the root `pnpm test`, which appends
-    `node --test "scripts/*.test.mjs"` to the fan-out because `pnpm -r` skips the root package
+    `node --test "scripts/*.test.mjs"` to the fan-out because `pnpm -r` skips the root package.
+    `bootstrap-vesting.test.mjs` is the one test that reads a second file: it parses
+    `dev-stack.sh` for the key list, which is what makes the two-script contract checkable
 - Kit components are tested inside `canton-dappbooster` (vitest + jsdom). `dapp/frontend`'s vitest run covers its pure logic wherever that lives; component/DOM behaviour and app+kit integration are out of scope there.
 - From the root, `pnpm test` / `pnpm typecheck` / `pnpm build` / `pnpm knip` fan out across every workspace (`pnpm -r --if-present`). CI runs these minus `dapp/daml`'s build, which needs `dpm` and a network fetch of the Splice DARs.
 - `pnpm docs:check` (typedoc plus `scripts/docs-check.mjs`) and `pnpm run check:anatomy` do not fan out: both read the two library packages directly, and typedoc has one config over both. `pnpm docs:build` writes the reference site to `typedoc/`.
diff --git a/README.md b/README.md
index 1164f3a7..055c9469 100644
--- a/README.md
+++ b/README.md
@@ -88,9 +88,13 @@ pnpm exec canton-barebones start
 ```bash
 pnpm run build-dar
 pnpm run deploy-dar -- dapp/daml/.daml/dist/amulet-vesting-0.0.1.dar
+pnpm run deploy-dar -- vendor/canton-token-forge.dar
+pnpm run deploy-dar -- vendor/vesting.dar
 ```
 
 **Note:** The step is only needed the first time. Run again if the Daml source changes or if LocalNet is reset.
+The two `vendor/` DARs are committed binaries and need no build; `canton-token-forge` goes
+first, because `vesting` data-depends on it. See `vendor/PROVENANCE.md`.
 
 ### Wallet service
 
@@ -110,6 +114,20 @@ pnpm run bootstrap
 
 **Note:** The step is only needed the first time. Run again if the Daml source changes or if LocalNet is reset.
 
+### Token registry
+
+Needs the registry env block `bootstrap` printed above, plus `CANTON_BACKEND_TOKEN` from `.env` as the bearer.
+
+```bash
+source .env
+# paste the block bootstrap printed, skipping its LEDGER_API_TOKEN placeholder line, then:
+export LEDGER_API_URL ADMIN_PARTY INSTRUMENT_CONFIG_TEMPLATE_ID PREAPPROVAL_TEMPLATE_ID \
+  LOCKED_TOKEN_TEMPLATE_ID TRANSFER_INSTRUCTION_TEMPLATE_ID ALLOCATION_TEMPLATE_ID PORT
+LEDGER_API_TOKEN="$CANTON_BACKEND_TOKEN" pnpm exec canton-token-forge-registry
+```
+
+**Note:** `./scripts/dev-stack.sh up` automates this step, reading the block back out of its own bootstrap log.
+
 ### Demo dApp
 
 Start the Vesting demo app.
diff --git a/architecture.md b/architecture.md
index 6c58fc46..518e1d6e 100644
--- a/architecture.md
+++ b/architecture.md
@@ -7,6 +7,7 @@
 | LocalNet (external: [BootNodeDev/canton-barebones](https://github.com/BootNodeDev/canton-barebones)) | Node CLI over Docker Compose + the official Splice LocalNet bundle | Starts `sv + app-user`. A pinned devDependency, scaffolded by `dev-stack.sh` into the gitignored `.canton-localnet/` |
 | `scripts/` | Bash + Node | The local loop: `dev-stack.sh`, the Splice dep fetch, the DAR build and upload, the token mint, the vesting bootstrap |
 | wallet-service (external: [BootNodeDev/canton-wallet-service](https://github.com/BootNodeDev/canton-wallet-service)) | Node 24 + Express 5 + TypeScript + `@canton-network/wallet-sdk` | Bridge the wallet uses for external-party onboarding and participant JSON API calls. A git dependency pinned to a tag, run on the host by `scripts/dev-stack.sh` |
+| token registry (external: [BootNodeDev/canton-token-forge](https://github.com/BootNodeDev/canton-token-forge)) | Node + Express + TypeScript | Read-only CIP-56 registry over the `canton-token-forge` package: serves instrument metadata and the transfer-factory choice context. A git dependency pinned to a tag, run on the host by `scripts/dev-stack.sh` |
 | `dapp/frontend/` | Vite + React + Tailwind v4 + zustand + react-router | Canton Coin **vesting** dApp; every read and write goes through the connected CIP-0103 wallet via `canton-connect` |
 | `dapp/daml/` | DAML | `amulet-vesting` DAR: the vesting factory, proposal, contract and residual-claim templates, escrowing real Canton Coin as a Splice `LockedAmulet`. Vendored from [BootNodeDev/cc-vesting-contracts](https://github.com/BootNodeDev/cc-vesting-contracts); its Splice data-dependencies are fetched, not committed |
 | `canton-connect/` | TypeScript + React 19 | wagmi-style hooks wrapping the dapp-sdk facade |
@@ -69,6 +70,7 @@ State boundaries:
 | wallet-service | `http://localhost:3010` | wallet bridge for onboarding and JSON API calls |
 | CIP-0103 browser wallet | `http://localhost:3011` | browser wallet UI/provider, run from its own repo |
 | dApp frontend | `http://localhost:3012` | example dApp |
+| canton-token-forge registry | `http://localhost:3013` | CIP-56 registry, run from the env block `bootstrap` prints |
 | app-user Wallet UI | `http://wallet.localhost:2000` | optional official Splice wallet UI |
 | app-user Ledger API | `grpc://localhost:2901` | SDK/tools |
 | app-user Admin API | `grpc://localhost:2902` | wallet-service/tools |
@@ -109,14 +111,14 @@ with the same script, configured manually in its LocalNet settings.
 
 | Command | What it does |
 | --- | --- |
-| `./scripts/dev-stack.sh up` | the whole local loop: LocalNet, DAR, wallet-service on 3010, bootstrap, dApp dev server |
-| `./scripts/dev-stack.sh down` | stop wallet-service and the dApp dev server, stop the LocalNet |
+| `./scripts/dev-stack.sh up` | the whole local loop: LocalNet, DARs, wallet-service on 3010, bootstrap, token registry on 3013, dApp dev server |
+| `./scripts/dev-stack.sh down` | stop the dApp dev server, the token registry and wallet-service, stop the LocalNet |
 | `pnpm exec canton-barebones start` / `stop` / `reset` / `status` | the LocalNet itself, run from `.canton-localnet/` |
 | `node scripts/localnet-config.mjs <dir>` | scaffold that directory and apply the flags nginx needs |
 | `pnpm run mint-token` | generate a LocalNet dev JWT, offline |
 | `pnpm run build-dar` | fetch the Splice deps, then compile the DAR with `dpm` |
-| `pnpm run deploy-dar -- <dar>` | upload DAR to app-user JSON API |
-| `pnpm run bootstrap` | create the vesting operator and its factory |
+| `pnpm run deploy-dar -- <dar>` | upload DAR to app-user JSON API; called for the built DAR and both `vendor/` binaries |
+| `pnpm run bootstrap` | create the vesting operator and its factory, the instrument admin and its `DBT` InstrumentConfig, and print the registry env block |
 | `pnpm run app:dev` | start the dApp frontend |
 
 `dev-stack.sh` shells out to the LocalNet tool in the directory passed as its second argument
diff --git a/knip.json b/knip.json
index fc39e9e8..6d1bd7d3 100644
--- a/knip.json
+++ b/knip.json
@@ -1,7 +1,11 @@
 {
   "$schema": "https://unpkg.com/knip@6/schema.json",
   "ignoreExportsUsedInFile": true,
-  "ignoreDependencies": ["@mermaid-js/mermaid-cli", "@bootnodedev/canton-wallet-service"],
+  "ignoreDependencies": [
+    "@mermaid-js/mermaid-cli",
+    "@bootnodedev/canton-token-forge",
+    "@bootnodedev/canton-wallet-service"
+  ],
   "ignoreWorkspaces": ["dapp/daml"],
   "workspaces": {
     ".": {
diff --git a/package.json b/package.json
index b8274aa3..6959d409 100644
--- a/package.json
+++ b/package.json
@@ -27,6 +27,7 @@
   "devDependencies": {
     "@biomejs/biome": "2.5.11",
     "@bootnodedev/canton-barebones": "0.3.0",
+    "@bootnodedev/canton-token-forge": "github:BootNodeDev/canton-token-forge#v0.2.0",
     "@bootnodedev/canton-wallet-service": "git+ssh://git@github.com/BootNodeDev/canton-wallet-service.git#v0.1.4",
     "@commitlint/cli": "^21.0.1",
     "@commitlint/config-conventional": "^21.0.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 97e6b298..060c8686 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -14,6 +14,9 @@ importers:
       '@bootnodedev/canton-barebones':
         specifier: 0.3.0
         version: 0.3.0
+      '@bootnodedev/canton-token-forge':
+        specifier: github:BootNodeDev/canton-token-forge#v0.2.0
+        version: https://codeload.github.com/BootNodeDev/canton-token-forge/tar.gz/da18cbebd20e093ea77a9374829b3765caae60f1(@types/json-schema@7.0.15)(supports-color@7.2.0)
       '@bootnodedev/canton-wallet-service':
         specifier: git+ssh://git@github.com/BootNodeDev/canton-wallet-service.git#v0.1.4
         version: https://codeload.github.com/BootNodeDev/canton-wallet-service/tar.gz/99e7e69d2d91109e527a74a5c97c566a882de477(supports-color@7.2.0)
@@ -240,6 +243,12 @@ packages:
   '@antfu/install-pkg@1.1.0':
     resolution: {integrity: sha512-MGQsmw10ZyI+EJo45CdSER4zEb+p31LpDAFp2Z3gkSd1yqVZGi0Ebx++YTEMonJy4oChEMLsxZ64j8FH6sSqtQ==}
 
+  '@apidevtools/json-schema-ref-parser@14.2.1':
+    resolution: {integrity: sha512-HmdFw9CDYqM6B25pqGBpNeLCKvGPlIx1EbLrVL0zPvj50CJQUHyBNBw45Muk0kEIkogo1VZvOKHajdMuAzSxRg==}
+    engines: {node: '>= 20'}
+    peerDependencies:
+      '@types/json-schema': ^7.0.15
+
   '@asamuzakjp/css-color@6.0.7':
     resolution: {integrity: sha512-vC/bk1Lz7Tn/EfU9/apOTBk80/8dyGyWMowPoV1tJ52muDGsDqt2HPT2klrFUiY60MQmQv9q8yIht15JnBgDGw==}
     engines: {node: ^22.13.0 || >=24.0.0}
@@ -339,6 +348,12 @@ packages:
     engines: {node: '>=22'}
     hasBin: true
 
+  '@bootnodedev/canton-token-forge@https://codeload.github.com/BootNodeDev/canton-token-forge/tar.gz/da18cbebd20e093ea77a9374829b3765caae60f1':
+    resolution: {gitHosted: true, integrity: sha512-kscwjARIk3uaaus+vYY4kBMDoV9C4WR3Xnk/ISFB/6cxqzvI1xxG1kSgcYRbQpm+dF0m3dgh2w/qhXqD7IAreQ==, tarball: https://codeload.github.com/BootNodeDev/canton-token-forge/tar.gz/da18cbebd20e093ea77a9374829b3765caae60f1}
+    version: 0.2.0
+    engines: {node: '>=20'}
+    hasBin: true
+
   '@bootnodedev/canton-wallet-service@https://codeload.github.com/BootNodeDev/canton-wallet-service/tar.gz/99e7e69d2d91109e527a74a5c97c566a882de477':
     resolution: {gitHosted: true, integrity: sha512-IsmVEEcQsixxj5eyau4wS6WcxaEBMDcedyea0QDRlxqNJfe2uQcM6DfzVVKqTORoOmCHUsEy1RqlmIT120C95A==, tarball: https://codeload.github.com/BootNodeDev/canton-wallet-service/tar.gz/99e7e69d2d91109e527a74a5c97c566a882de477}
     version: 0.1.4
@@ -701,6 +716,9 @@ packages:
   '@js-sdsl/ordered-map@4.4.2':
     resolution: {integrity: sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw==}
 
+  '@jsdevtools/ono@7.1.3':
+    resolution: {integrity: sha512-4JQNk+3mVzK3xh2rqd6RB4J46qUR19azEHBneZyTZM+c456qOrbbM/5xcR8huNCCcbVt7+UmizG6GuUvPvKUYg==}
+
   '@lit-labs/ssr-dom-shim@1.6.0':
     resolution: {integrity: sha512-VHb0ALPMTlgKjM6yIxxoQNnpKyUKLD04VzeQdsiXkMqkvYlAHxq9glGLmgbb889/1GsohSOAjvQYoiBppXFqrQ==}
 
@@ -1454,9 +1472,15 @@ packages:
   '@types/aria-query@5.0.4':
     resolution: {integrity: sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==}
 
+  '@types/body-parser@1.19.6':
+    resolution: {integrity: sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g==}
+
   '@types/chai@5.2.3':
     resolution: {integrity: sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==}
 
+  '@types/connect@3.4.38':
+    resolution: {integrity: sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==}
+
   '@types/d3-array@3.2.2':
     resolution: {integrity: sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw==}
 
@@ -1559,24 +1583,45 @@ packages:
   '@types/estree@1.0.9':
     resolution: {integrity: sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==}
 
+  '@types/express-serve-static-core@5.1.3':
+    resolution: {integrity: sha512-dPfW8NFiOF4wOHc7+N/QSxlY9cfSsenewGbAz8C8U/MULPd/YZ27LvJUIlzaXie7e6Ove9YunJGgC9tbHD2cKw==}
+
+  '@types/express@5.0.6':
+    resolution: {integrity: sha512-sKYVuV7Sv9fbPIt/442koC7+IIwK5olP1KWeD88e/idgoJqDm3JV/YUiPwkoKK92ylff2MGxSz1CSjsXelx0YA==}
+
   '@types/geojson@7946.0.16':
     resolution: {integrity: sha512-6C8nqWur3j98U6+lXDfTUWIfgvZU+EumvpHKcYjujKH7woYyLj2sUmff0tRhrqM7BohUw7Pz3ZB1jj2gW9Fvmg==}
 
   '@types/hast@3.0.5':
     resolution: {integrity: sha512-rp/ezSWaD1m44dPKICGhiskI13nVr7qTloFwDa/IYkhhf5nzwP+zIQcIJh3WIFSBOy/H1PzB40jPjMDksN4F+g==}
 
+  '@types/http-errors@2.0.5':
+    resolution: {integrity: sha512-r8Tayk8HJnX0FztbZN7oVqGccWgw98T/0neJphO91KkmOzug1KkofZURD4UaD5uH8AqcFLfdPErnBod0u71/qg==}
+
+  '@types/json-schema@7.0.15':
+    resolution: {integrity: sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==}
+
   '@types/lodash@4.17.25':
     resolution: {integrity: sha512-+K1NIO8I+F9/wNulfVvu23QYd0Pe9/OCqRrim4NoYIf1VoEDL90Ve4ClzpyqBLc7NpGGWRvYNCKZ1BE/Jpf8dQ==}
 
   '@types/ms@2.1.0':
     resolution: {integrity: sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==}
 
+  '@types/multer@2.2.0':
+    resolution: {integrity: sha512-3U1troeqGV8Ntp7Q3klwf4zr23VEoqYVocYXaswm9+8z3O9UHDYAqLxjJ/h550iRADTjKdOdhhasXw6gD6kYtg==}
+
   '@types/node@25.9.5':
     resolution: {integrity: sha512-OScDchr2fwuUmWdf4kZ9h7PcJiYDVInhJizG/biAq3cAvqwYktuy/TYGGdZNMtNTFUP7rnb0NU4TUdm82kt4Rg==}
 
   '@types/node@26.4.0':
     resolution: {integrity: sha512-faiGnoIrLH/V8cibOMEAZ8pMw6oXqSukl29ra4mN8GdaB2ZewzeaLj+INpV5N+Z1eKWzY+IzaIZH2EIR6YZRNQ==}
 
+  '@types/qs@6.15.1':
+    resolution: {integrity: sha512-GZHUBZR9hckSUhrxmp1nG6NwdpM9fCunJwyThLW1X3AyHgd9IlHb6VANpQQqDr2o/qQp6McZ3y/IA2rVzKzSbw==}
+
+  '@types/range-parser@1.2.7':
+    resolution: {integrity: sha512-hKormJbkJqzQGhziax5PItDUTMAM9uE2XXQmM37dyd4hVM+5aVl7oVxMVUiVQn2oCQFN/LKCZdvSM0pFRqbSmQ==}
+
   '@types/react-dom@19.2.5':
     resolution: {integrity: sha512-fMPwH9v7r/pp43yUd2/Mbiex5KouJwwR3dzHkhLREUC6764VyDsqxhAxv6OFEYR1RhjOyD1naqba8ECDBe7ZQg==}
     peerDependencies:
@@ -1585,6 +1630,12 @@ packages:
   '@types/react@19.2.18':
     resolution: {integrity: sha512-AnzbBERsrLKtk2XSfTbYRLjQPdy116Sty4q+T+Bp3IC4l6jNBvreVPAHmpq9qhXQM7CXZPjLVmGMw9sy+hxQ3w==}
 
+  '@types/send@1.2.1':
+    resolution: {integrity: sha512-arsCikDvlU99zl1g69TcAB3mzZPpxgw0UQnaHeC1Nwb015xp8bknZv5rIfri9xTOcMuaVgvabfIRA7PSZVuZIQ==}
+
+  '@types/serve-static@2.2.0':
+    resolution: {integrity: sha512-8mam4H1NHLtu7nmtalF7eyBH14QyOASmcxHhSfEoRyr0nP/YdoesEtU+uSRvMe96TW/HPTtkoKqQLl53N7UXMQ==}
+
   '@types/trusted-types@2.0.7':
     resolution: {integrity: sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==}
 
@@ -1924,10 +1975,30 @@ packages:
       zod:
         optional: true
 
+  accepts@1.3.8:
+    resolution: {integrity: sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==}
+    engines: {node: '>= 0.6'}
+
   accepts@2.0.0:
     resolution: {integrity: sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==}
     engines: {node: '>= 0.6'}
 
+  ajv-draft-04@1.0.0:
+    resolution: {integrity: sha512-mv00Te6nmYbRp5DCwclxtt7yV/joXJPGS7nM+97GdxvuttCOfgI3K4U25zboyeX0O+myI8ERluxQe5wljMmVIw==}
+    peerDependencies:
+      ajv: ^8.5.0
+    peerDependenciesMeta:
+      ajv:
+        optional: true
+
+  ajv-formats@3.0.1:
+    resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
+    peerDependencies:
+      ajv: ^8.0.0
+    peerDependenciesMeta:
+      ajv:
+        optional: true
+
   ajv@8.20.0:
     resolution: {integrity: sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==}
 
@@ -1963,6 +2034,9 @@ packages:
     resolution: {integrity: sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==}
     engines: {node: '>= 8'}
 
+  append-field@1.0.0:
+    resolution: {integrity: sha512-klpgFSWLW1ZEs8svjfb7g4qWY0YS5imI82dTg+QahUvJ8YqAY0P10Uk8tTyh9ZGuYEZEMaeJYCF5BFuX552hsw==}
+
   argparse@2.0.1:
     resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
 
@@ -1981,6 +2055,9 @@ packages:
     resolution: {integrity: sha512-COROpnaoap1E2F000S62r6A60uHZnmlvomhfyT2DlTcrY1OrBKn2UhH7qn5wTC9zMvD0AY7csdPSNwKP+7WiQw==}
     engines: {node: '>= 0.4'}
 
+  array-flatten@1.1.1:
+    resolution: {integrity: sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==}
+
   assertion-error@2.0.1:
     resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
     engines: {node: '>=12'}
@@ -2008,6 +2085,10 @@ packages:
   blakejs@1.2.1:
     resolution: {integrity: sha512-QXUSXI3QVc/gJME0dBpXrag1kbzOqCjCX8/b54ntNyW6sjtoqxqRk3LTmXzaJoh71zMsDCjM+47jS7XiwN/+fQ==}
 
+  body-parser@1.20.6:
+    resolution: {integrity: sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==}
+    engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
+
   body-parser@2.3.0:
     resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==}
     engines: {node: '>=18'}
@@ -2027,6 +2108,13 @@ packages:
     resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
     engines: {node: 20 || >=22}
 
+  buffer-from@1.1.2:
+    resolution: {integrity: sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==}
+
+  busboy@1.6.0:
+    resolution: {integrity: sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==}
+    engines: {node: '>=10.16.0'}
+
   bytes@3.1.2:
     resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
     engines: {node: '>= 0.8'}
@@ -2125,6 +2213,14 @@ packages:
     resolution: {integrity: sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==}
     engines: {node: '>= 12'}
 
+  concat-stream@2.0.0:
+    resolution: {integrity: sha512-MWufYdFw53ccGjCA+Ol7XJYpAlW6/prSMzuPOTRnJGcGzuhLn4Scrz7qf6o8bROZ514ltazcIFJZevcfbo0x7A==}
+    engines: {'0': node >= 6.0}
+
+  content-disposition@0.5.4:
+    resolution: {integrity: sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==}
+    engines: {node: '>= 0.6'}
+
   content-disposition@1.1.0:
     resolution: {integrity: sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==}
     engines: {node: '>=18'}
@@ -2156,6 +2252,9 @@ packages:
   cookie-es@1.2.3:
     resolution: {integrity: sha512-lXVyvUvrNXblMqzIRrxHb57UUVmqsSWlxqt3XIjCkUP0wDAf6uicO6KMbEgYrMNtEvWgWHwe42CKxPu9MYAnWw==}
 
+  cookie-signature@1.0.7:
+    resolution: {integrity: sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==}
+
   cookie-signature@1.2.2:
     resolution: {integrity: sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==}
     engines: {node: '>=6.6.0'}
@@ -2379,6 +2478,14 @@ packages:
   dayjs@1.11.23:
     resolution: {integrity: sha512-QDTCU0M0MxR3hQfnlDJfwekQiaanm1ubOD231u73WBckQ/fsamwRLiE2GBz6D3a/xF1NgfiDLJjXBa1hYOYTtQ==}
 
+  debug@2.6.9:
+    resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
   debug@4.4.3:
     resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
     engines: {node: '>=6.0'}
@@ -2412,6 +2519,10 @@ packages:
   destr@2.0.5:
     resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
 
+  destroy@1.2.0:
+    resolution: {integrity: sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==}
+    engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
+
   detect-browser@5.3.0:
     resolution: {integrity: sha512-53rsFbGdwMwlF7qvCt0ypLM5V5/Mbl0szB7GPN8y9NCcbknYOeVVXdrXEq+90IwAfrrzt6Hd+u2E2ntakICU8w==}
 
@@ -2434,6 +2545,10 @@ packages:
   dompurify@3.4.14:
     resolution: {integrity: sha512-dVoH9z+MY+C9IilgGCk3YfFqjLi3fChm2OiKJMzh6axrJ5qwxqWaZamgmHrpv22CN/KdbZJuGEGgfQoL00LTdg==}
 
+  dotenv@16.6.1:
+    resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
+    engines: {node: '>=12'}
+
   dotenv@17.4.2:
     resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
     engines: {node: '>=12'}
@@ -2542,6 +2657,15 @@ packages:
     resolution: {integrity: sha512-KfYbmpRm0VbLjEvVa9yGwCi9GI34xvi7A/HXYWQO65CSD2u3MczUJSuwXKFIxlGsgBQizV9q5J9NHj4VG0n+pA==}
     engines: {node: '>=12.0.0'}
 
+  express-openapi-validator@5.6.2:
+    resolution: {integrity: sha512-fkDn4+ImUC4HTJ1g0cek/ItqYhmEO19AglJd2Iw2OJco0jLIbxIlDGVazmXbvvYeziU4Bnah2h+S2tb6NtWg8w==}
+    peerDependencies:
+      express: '*'
+
+  express@4.22.2:
+    resolution: {integrity: sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==}
+    engines: {node: '>= 0.10.0'}
+
   express@5.2.1:
     resolution: {integrity: sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==}
     engines: {node: '>= 18'}
@@ -2573,6 +2697,10 @@ packages:
       picomatch:
         optional: true
 
+  finalhandler@1.3.2:
+    resolution: {integrity: sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==}
+    engines: {node: '>= 0.8'}
+
   finalhandler@2.1.1:
     resolution: {integrity: sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==}
     engines: {node: '>= 18.0.0'}
@@ -2590,6 +2718,10 @@ packages:
     resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
     engines: {node: '>= 0.6'}
 
+  fresh@0.5.2:
+    resolution: {integrity: sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==}
+    engines: {node: '>= 0.6'}
+
   fresh@2.0.0:
     resolution: {integrity: sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==}
     engines: {node: '>= 0.8'}
@@ -2687,6 +2819,10 @@ packages:
     engines: {node: '>=18'}
     hasBin: true
 
+  iconv-lite@0.4.24:
+    resolution: {integrity: sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==}
+    engines: {node: '>=0.10.0'}
+
   iconv-lite@0.6.3:
     resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
     engines: {node: '>=0.10.0'}
@@ -3027,6 +3163,13 @@ packages:
   lodash.camelcase@4.3.0:
     resolution: {integrity: sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==}
 
+  lodash.clonedeep@4.5.0:
+    resolution: {integrity: sha512-H5ZhCF25riFd9uB5UCkVKo61m3S/xZk1x4wA6yp/L3RFP6Z/eHH1ymQcGLo7J3GMPfm0V/7m1tryHuGVxpqEBQ==}
+
+  lodash.get@4.4.2:
+    resolution: {integrity: sha512-z+Uw/vLuy6gQe8cfaFWD7p0wVv8fJl3mbzXh33RS+0oW2wvUqiRXiQ69gLWSLpgB5/6sU+r6BlQR0MBILadqTQ==}
+    deprecated: This package is deprecated. Use the optional chaining (?.) operator instead.
+
   lodash.isequal@4.5.0:
     resolution: {integrity: sha512-pDo3lu8Jhfjqls6GkMgpahsF9kCyayhgykjyLMNFTKWrpVdAQtYyB4muAMWozBB4ig/dtWAmsMxLEI8wuz+DYQ==}
     deprecated: This package is deprecated. Use require('node:util').isDeepStrictEqual instead.
@@ -3086,10 +3229,17 @@ packages:
   mdurl@2.1.0:
     resolution: {integrity: sha512-1+HBaOx0zi/dQWht8rNv9MYf9qqpqL/kxI0hXImU6Y547zM6Sni8BQibt7ifgMcYtQg41ao3Ivd6cnSM86inpg==}
 
+  media-typer@0.3.0:
+    resolution: {integrity: sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==}
+    engines: {node: '>= 0.6'}
+
   media-typer@1.1.1:
     resolution: {integrity: sha512-yz3xRaG20c6/BOzvYoDaGtPmGscs7YivItZEEqe6GbwNfHuxu9YNmvnEkMzKldAGY4/80pRcQRZSEnhquk9XuQ==}
     engines: {node: '>= 0.8'}
 
+  merge-descriptors@1.0.3:
+    resolution: {integrity: sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==}
+
   merge-descriptors@2.0.0:
     resolution: {integrity: sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==}
     engines: {node: '>=18'}
@@ -3097,17 +3247,34 @@ packages:
   mermaid@11.17.2:
     resolution: {integrity: sha512-V6K3C8EBdEsPFZXSKMJe6ppQOENxuHARr9GvHX4hh47lAbhMRD9qf4oEK7LoaRQxULMa80/qt5gHO73aCleBBg==}
 
+  methods@1.1.2:
+    resolution: {integrity: sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==}
+    engines: {node: '>= 0.6'}
+
   micro-ftch@0.3.1:
     resolution: {integrity: sha512-/0LLxhzP0tfiR5hcQebtudP56gUurs2CLkGarnCiB/OqEyUFQ6U3paQi/tgLv0hBJYt2rnr9MNpxz4fiiugstg==}
 
+  mime-db@1.52.0:
+    resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
+    engines: {node: '>= 0.6'}
+
   mime-db@1.54.0:
     resolution: {integrity: sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==}
     engines: {node: '>= 0.6'}
 
+  mime-types@2.1.35:
+    resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
+    engines: {node: '>= 0.6'}
+
   mime-types@3.0.2:
     resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==}
     engines: {node: '>=18'}
 
+  mime@1.6.0:
+    resolution: {integrity: sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==}
+    engines: {node: '>=4'}
+    hasBin: true
+
   min-indent@1.0.1:
     resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
     engines: {node: '>=4'}
@@ -3126,9 +3293,16 @@ packages:
     resolution: {integrity: sha512-gN54ddmyzEg10orwZ2u4OOv+bjpMWdIl5jIkodK97bMq8QBSL5c0D7YX0lT1Ooz+99S7+PvFbnxzdjgHo1r41g==}
     engines: {node: '>=18.0.0'}
 
+  ms@2.0.0:
+    resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==}
+
   ms@2.1.3:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
 
+  multer@2.3.0:
+    resolution: {integrity: sha512-cjNbm3sttszgZeGfJR124D+jFEfkXCVAsoPBmFn9X7UxmDSFHWqE2CoEj0vrmSpuAFnqWR1Szcm9QTsiHr60Xw==}
+    engines: {node: '>= 10.16.0'}
+
   multiformats@9.9.0:
     resolution: {integrity: sha512-HoMUjhH9T8DDBNT+6xzkrd9ga/XiBI4xLr58LJACwK6G3HTOPeMz4nB4KJs33L2BelrIJa7P0VuNaVF3hMYfjg==}
 
@@ -3137,6 +3311,10 @@ packages:
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
+  negotiator@0.6.3:
+    resolution: {integrity: sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==}
+    engines: {node: '>= 0.6'}
+
   negotiator@1.1.0:
     resolution: {integrity: sha512-NMPBRMJgiQHjbd8phG3Vebdx4kZ1H121rbl5IkMqeOsahptB9BKo/d7oJ3zTXqTgagn2bWlNSXkh0QUGM31RYg==}
     engines: {node: '>=18'}
@@ -3177,6 +3355,9 @@ packages:
   once@1.4.0:
     resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
 
+  ono@7.1.3:
+    resolution: {integrity: sha512-9jnfVriq7uJM4o5ganUY54ntUm+5EK21EGaQ5NWnkWg3zz5ywbbonlBguRcnmF1/HDiIe3zxNxXcO1YPBmPcQQ==}
+
   openapi-fetch@0.15.2:
     resolution: {integrity: sha512-rdYTzUmSsJevmNqg7fwUVGuKc2Gfb9h6ph74EVPkPfIGJaZTfqdIbJahtbJ3qg1LKinln30hqZniLnKpH0RJBg==}
 
@@ -3245,6 +3426,9 @@ packages:
     resolution: {integrity: sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==}
     engines: {node: '>=8'}
 
+  path-to-regexp@0.1.13:
+    resolution: {integrity: sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==}
+
   path-to-regexp@8.4.2:
     resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
 
@@ -3344,6 +3528,10 @@ packages:
     engines: {node: '>=10.13.0'}
     hasBin: true
 
+  qs@6.15.3:
+    resolution: {integrity: sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==}
+    engines: {node: '>=0.6'}
+
   qs@6.16.0:
     resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==}
     engines: {node: '>=0.6'}
@@ -3361,10 +3549,18 @@ packages:
   radix3@1.1.2:
     resolution: {integrity: sha512-b484I/7b8rDEdSDKckSSBA8knMpcdsXudlE/LNL639wFoHKwLbEkQFZHWEYwDC0wa0FKUcCY+GAF73Z7wxNVFA==}
 
+  range-parser@1.2.1:
+    resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==}
+    engines: {node: '>= 0.6'}
+
   range-parser@1.3.0:
     resolution: {integrity: sha512-hek2mFQpPuI4E1BBKrSto+BU3e3x4xuarsbiwr3+lf7p44juvFMV0XFWQAP3xUyqXA4RrXLIoaSUGbSt056ZMw==}
     engines: {node: '>= 0.6'}
 
+  raw-body@2.5.3:
+    resolution: {integrity: sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==}
+    engines: {node: '>= 0.8'}
+
   raw-body@3.0.2:
     resolution: {integrity: sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==}
     engines: {node: '>= 0.10'}
@@ -3409,6 +3605,10 @@ packages:
     resolution: {integrity: sha512-PWaYA1L/q9u2u7xYQi+Y3L3Yfnie7XyLeaJICV1MGD6LprsBxcAqGjYyr0eY3p+QdsA+x/Irkt4Qif8D63+Sbw==}
     engines: {node: '>=0.10.0'}
 
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
   readdirp@5.1.1:
     resolution: {integrity: sha512-Kko+Y5XQ6fM+Ce3dq3m9YGxnacYZYl9cA1wZjaF3Vbry2L3i1qVg8+CAgNPsXRArPMUMCaOR7oa9Nqntc43JKA==}
     engines: {node: '>= 20.19.0'}
@@ -3483,6 +3683,9 @@ packages:
   rw@1.3.3:
     resolution: {integrity: sha512-PdhdWy89SiZogBLaw42zdeqtRJ//zFd2PgQavcICDUgJT5oW10QCRKbJ6bg4r0/UY2M6BWd5tkxuGFRvCkgfHQ==}
 
+  safe-buffer@5.2.1:
+    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
+
   safe-stable-stringify@2.5.0:
     resolution: {integrity: sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==}
     engines: {node: '>=10'}
@@ -3505,10 +3708,18 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
+  send@0.19.2:
+    resolution: {integrity: sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==}
+    engines: {node: '>= 0.8.0'}
+
   send@1.2.1:
     resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==}
     engines: {node: '>= 18'}
 
+  serve-static@1.16.3:
+    resolution: {integrity: sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==}
+    engines: {node: '>= 0.8.0'}
+
   serve-static@2.2.1:
     resolution: {integrity: sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==}
     engines: {node: '>= 18'}
@@ -3569,6 +3780,10 @@ packages:
   std-env@4.2.0:
     resolution: {integrity: sha512-oCUKSupKTHX53EyjDtuZQ64pjLJ6yYCtpmEw0goYxtjG9KpbRe8KAsl2tBUGU9DyMcJ0RwJ8GqJAFzMXcXW1Rw==}
 
+  streamsearch@1.1.0:
+    resolution: {integrity: sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==}
+    engines: {node: '>=10.0.0'}
+
   strictdom@1.0.1:
     resolution: {integrity: sha512-cEmp9QeXXRmjj/rVp9oyiqcvyocWab/HaoN4+bwFeZ7QzykJD6L3yD4v12K1x0tHpqRqVpJevN3gW7kyM39Bqg==}
 
@@ -3588,6 +3803,9 @@ packages:
     resolution: {integrity: sha512-GaPUh5gfdrYzqeVNZvUfT23vYYxXzKYidUcnMtJg/3rxRV63EFZy3k6xfKlmfeJD0176lnUV/Usr3XcwSvFzpg==}
     engines: {node: '>=20'}
 
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
   strip-ansi@6.0.1:
     resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==}
     engines: {node: '>=8'}
@@ -3730,6 +3948,10 @@ packages:
     resolution: {integrity: sha512-YGYEVz3Fm5iy/AybuA0oyNFq7H4CgQNfRp/qfe8nurE1kuCeNm3/vfm9X4Mtl+qLyaKJUh5xrFZwogr41SMjYA==}
     engines: {node: '>=20'}
 
+  type-is@1.6.18:
+    resolution: {integrity: sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==}
+    engines: {node: '>= 0.6'}
+
   type-is@2.1.0:
     resolution: {integrity: sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==}
     engines: {node: '>= 18'}
@@ -3737,6 +3959,9 @@ packages:
   typed-query-selector@2.12.2:
     resolution: {integrity: sha512-EOPFbyIub4ngnEdqi2yOcNeDLaX/0jcE1JoAXQDDMIthap7FoN795lc/SHfIq2d416VufXpM8z/lD+WRm2gfOQ==}
 
+  typedarray@0.0.6:
+    resolution: {integrity: sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==}
+
   typedoc@0.28.20:
     resolution: {integrity: sha512-uSKqkh8Cr48vllnEy+jdaAgOeR6Y+QCBW7usgUsKj7gJEfR7stw9U/fE49LBnj2tPRKPY0c0EBJSWe9Appmplg==}
     engines: {node: '>= 18', pnpm: '>= 10'}
@@ -3865,6 +4090,13 @@ packages:
     peerDependencies:
       react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
 
+  util-deprecate@1.0.2:
+    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
+
+  utils-merge@1.0.1:
+    resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
+    engines: {node: '>= 0.4.0'}
+
   uuid@14.0.2:
     resolution: {integrity: sha512-xZe/16rV4aa+HGSOCiY2YeLT1OybRLrrkL/Rqaq7p7GMVXjFh+6wN4oMYgjFmnSnhY8t6Xpdl2l9qmnHYuMHwQ==}
     hasBin: true
@@ -4134,6 +4366,11 @@ snapshots:
       package-manager-detector: 1.8.0
       tinyexec: 1.3.0
 
+  '@apidevtools/json-schema-ref-parser@14.2.1(@types/json-schema@7.0.15)':
+    dependencies:
+      '@types/json-schema': 7.0.15
+      js-yaml: 4.3.2
+
   '@asamuzakjp/css-color@6.0.7':
     dependencies:
       '@csstools/css-calc': 3.3.0(@csstools/css-parser-algorithms@4.0.0(@csstools/css-tokenizer@4.0.0))(@csstools/css-tokenizer@4.0.0)
@@ -4211,6 +4448,16 @@ snapshots:
     dependencies:
       zod: 4.5.4
 
+  '@bootnodedev/canton-token-forge@https://codeload.github.com/BootNodeDev/canton-token-forge/tar.gz/da18cbebd20e093ea77a9374829b3765caae60f1(@types/json-schema@7.0.15)(supports-color@7.2.0)':
+    dependencies:
+      dotenv: 16.6.1
+      express: 4.22.2(supports-color@7.2.0)
+      express-openapi-validator: 5.6.2(@types/json-schema@7.0.15)(express@4.22.2(supports-color@7.2.0))
+      pino: 10.3.1
+    transitivePeerDependencies:
+      - '@types/json-schema'
+      - supports-color
+
   '@bootnodedev/canton-wallet-service@https://codeload.github.com/BootNodeDev/canton-wallet-service/tar.gz/99e7e69d2d91109e527a74a5c97c566a882de477(supports-color@7.2.0)':
     dependencies:
       '@canton-network/wallet-sdk': 1.3.1(supports-color@7.2.0)
@@ -4823,6 +5070,8 @@ snapshots:
 
   '@js-sdsl/ordered-map@4.4.2': {}
 
+  '@jsdevtools/ono@7.1.3': {}
+
   '@lit-labs/ssr-dom-shim@1.6.0': {}
 
   '@lit/reactive-element@2.1.2':
@@ -5392,11 +5641,20 @@ snapshots:
 
   '@types/aria-query@5.0.4': {}
 
+  '@types/body-parser@1.19.6':
+    dependencies:
+      '@types/connect': 3.4.38
+      '@types/node': 26.4.0
+
   '@types/chai@5.2.3':
     dependencies:
       '@types/deep-eql': 4.0.2
       assertion-error: 2.0.1
 
+  '@types/connect@3.4.38':
+    dependencies:
+      '@types/node': 26.4.0
+
   '@types/d3-array@3.2.2': {}
 
   '@types/d3-axis@3.0.6':
@@ -5522,16 +5780,37 @@ snapshots:
 
   '@types/estree@1.0.9': {}
 
+  '@types/express-serve-static-core@5.1.3':
+    dependencies:
+      '@types/node': 26.4.0
+      '@types/qs': 6.15.1
+      '@types/range-parser': 1.2.7
+      '@types/send': 1.2.1
+
+  '@types/express@5.0.6':
+    dependencies:
+      '@types/body-parser': 1.19.6
+      '@types/express-serve-static-core': 5.1.3
+      '@types/serve-static': 2.2.0
+
   '@types/geojson@7946.0.16': {}
 
   '@types/hast@3.0.5':
     dependencies:
       '@types/unist': 3.0.3
 
+  '@types/http-errors@2.0.5': {}
+
+  '@types/json-schema@7.0.15': {}
+
   '@types/lodash@4.17.25': {}
 
   '@types/ms@2.1.0': {}
 
+  '@types/multer@2.2.0':
+    dependencies:
+      '@types/express': 5.0.6
+
   '@types/node@25.9.5':
     dependencies:
       undici-types: 7.24.6
@@ -5540,6 +5819,10 @@ snapshots:
     dependencies:
       undici-types: 8.3.0
 
+  '@types/qs@6.15.1': {}
+
+  '@types/range-parser@1.2.7': {}
+
   '@types/react-dom@19.2.5(@types/react@19.2.18)':
     dependencies:
       '@types/react': 19.2.18
@@ -5548,6 +5831,15 @@ snapshots:
     dependencies:
       csstype: 3.2.3
 
+  '@types/send@1.2.1':
+    dependencies:
+      '@types/node': 26.4.0
+
+  '@types/serve-static@2.2.0':
+    dependencies:
+      '@types/http-errors': 2.0.5
+      '@types/node': 26.4.0
+
   '@types/trusted-types@2.0.7': {}
 
   '@types/unist@3.0.3': {}
@@ -6066,11 +6358,24 @@ snapshots:
       typescript: 5.9.3
       zod: 4.5.4
 
+  accepts@1.3.8:
+    dependencies:
+      mime-types: 2.1.35
+      negotiator: 0.6.3
+
   accepts@2.0.0:
     dependencies:
       mime-types: 3.0.2
       negotiator: 1.1.0
 
+  ajv-draft-04@1.0.0(ajv@8.20.0):
+    optionalDependencies:
+      ajv: 8.20.0
+
+  ajv-formats@3.0.1(ajv@8.20.0):
+    optionalDependencies:
+      ajv: 8.20.0
+
   ajv@8.20.0:
     dependencies:
       fast-deep-equal: 3.1.3
@@ -6099,6 +6404,8 @@ snapshots:
       normalize-path: 3.0.0
       picomatch: 2.3.2
 
+  append-field@1.0.0: {}
+
   argparse@2.0.1: {}
 
   argue-cli@3.1.0: {}
@@ -6113,6 +6420,8 @@ snapshots:
 
   aria-query@5.3.2: {}
 
+  array-flatten@1.1.1: {}
+
   assertion-error@2.0.1: {}
 
   ast-v8-to-istanbul@1.0.5:
@@ -6135,6 +6444,23 @@ snapshots:
 
   blakejs@1.2.1: {}
 
+  body-parser@1.20.6(supports-color@7.2.0):
+    dependencies:
+      bytes: 3.1.2
+      content-type: 1.0.5
+      debug: 2.6.9(supports-color@7.2.0)
+      depd: 2.0.0
+      destroy: 1.2.0
+      http-errors: 2.0.1
+      iconv-lite: 0.4.24
+      on-finished: 2.4.1
+      qs: 6.15.3
+      raw-body: 2.5.3
+      type-is: 1.6.18
+      unpipe: 1.0.0
+    transitivePeerDependencies:
+      - supports-color
+
   body-parser@2.3.0(supports-color@7.2.0):
     dependencies:
       bytes: 3.1.2
@@ -6162,6 +6488,12 @@ snapshots:
     dependencies:
       balanced-match: 4.0.4
 
+  buffer-from@1.1.2: {}
+
+  busboy@1.6.0:
+    dependencies:
+      streamsearch: 1.1.0
+
   bytes@3.1.2: {}
 
   cac@7.0.0: {}
@@ -6247,6 +6579,17 @@ snapshots:
 
   commander@8.3.0: {}
 
+  concat-stream@2.0.0:
+    dependencies:
+      buffer-from: 1.1.2
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+      typedarray: 0.0.6
+
+  content-disposition@0.5.4:
+    dependencies:
+      safe-buffer: 5.2.1
+
   content-disposition@1.1.0: {}
 
   content-type@1.0.5: {}
@@ -6270,6 +6613,8 @@ snapshots:
 
   cookie-es@1.2.3: {}
 
+  cookie-signature@1.0.7: {}
+
   cookie-signature@1.2.2: {}
 
   cookie@0.7.2: {}
@@ -6515,6 +6860,12 @@ snapshots:
 
   dayjs@1.11.23: {}
 
+  debug@2.6.9(supports-color@7.2.0):
+    dependencies:
+      ms: 2.0.0
+    optionalDependencies:
+      supports-color: 7.2.0
+
   debug@4.4.3(supports-color@7.2.0):
     dependencies:
       ms: 2.1.3
@@ -6537,6 +6888,8 @@ snapshots:
 
   destr@2.0.5: {}
 
+  destroy@1.2.0: {}
+
   detect-browser@5.3.0: {}
 
   detect-libc@2.1.2: {}
@@ -6553,6 +6906,8 @@ snapshots:
     optionalDependencies:
       '@types/trusted-types': 2.0.7
 
+  dotenv@16.6.1: {}
+
   dotenv@17.4.2: {}
 
   dts-resolver@3.0.0(oxc-resolver@11.24.2):
@@ -6633,6 +6988,62 @@ snapshots:
 
   expect-type@1.4.0: {}
 
+  express-openapi-validator@5.6.2(@types/json-schema@7.0.15)(express@4.22.2(supports-color@7.2.0)):
+    dependencies:
+      '@apidevtools/json-schema-ref-parser': 14.2.1(@types/json-schema@7.0.15)
+      '@types/multer': 2.2.0
+      ajv: 8.20.0
+      ajv-draft-04: 1.0.0(ajv@8.20.0)
+      ajv-formats: 3.0.1(ajv@8.20.0)
+      content-type: 1.0.5
+      express: 4.22.2(supports-color@7.2.0)
+      json-schema-traverse: 1.0.0
+      lodash.clonedeep: 4.5.0
+      lodash.get: 4.4.2
+      media-typer: 1.1.1
+      multer: 2.3.0
+      ono: 7.1.3
+      path-to-regexp: 8.4.2
+      qs: 6.16.0
+    transitivePeerDependencies:
+      - '@types/json-schema'
+
+  express@4.22.2(supports-color@7.2.0):
+    dependencies:
+      accepts: 1.3.8
+      array-flatten: 1.1.1
+      body-parser: 1.20.6(supports-color@7.2.0)
+      content-disposition: 0.5.4
+      content-type: 1.0.5
+      cookie: 0.7.2
+      cookie-signature: 1.0.7
+      debug: 2.6.9(supports-color@7.2.0)
+      depd: 2.0.0
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      finalhandler: 1.3.2(supports-color@7.2.0)
+      fresh: 0.5.2
+      http-errors: 2.0.1
+      merge-descriptors: 1.0.3
+      methods: 1.1.2
+      on-finished: 2.4.1
+      parseurl: 1.3.3
+      path-to-regexp: 0.1.13
+      proxy-addr: 2.0.7
+      qs: 6.15.3
+      range-parser: 1.2.1
+      safe-buffer: 5.2.1
+      send: 0.19.2(supports-color@7.2.0)
+      serve-static: 1.16.3(supports-color@7.2.0)
+      setprototypeof: 1.2.0
+      statuses: 2.0.2
+      type-is: 1.6.18
+      utils-merge: 1.0.1
+      vary: 1.1.2
+    transitivePeerDependencies:
+      - supports-color
+
   express@5.2.1(supports-color@7.2.0):
     dependencies:
       accepts: 2.0.0
@@ -6686,6 +7097,18 @@ snapshots:
     optionalDependencies:
       picomatch: 4.0.7
 
+  finalhandler@1.3.2(supports-color@7.2.0):
+    dependencies:
+      debug: 2.6.9(supports-color@7.2.0)
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      on-finished: 2.4.1
+      parseurl: 1.3.3
+      statuses: 2.0.2
+      unpipe: 1.0.0
+    transitivePeerDependencies:
+      - supports-color
+
   finalhandler@2.1.1(supports-color@7.2.0):
     dependencies:
       debug: 4.4.3(supports-color@7.2.0)
@@ -6709,6 +7132,8 @@ snapshots:
 
   forwarded@0.2.0: {}
 
+  fresh@0.5.2: {}
+
   fresh@2.0.0: {}
 
   fs-extra@11.4.0:
@@ -6808,6 +7233,10 @@ snapshots:
 
   husky@9.1.7: {}
 
+  iconv-lite@0.4.24:
+    dependencies:
+      safer-buffer: 2.1.2
+
   iconv-lite@0.6.3:
     dependencies:
       safer-buffer: 2.1.2
@@ -7087,6 +7516,10 @@ snapshots:
 
   lodash.camelcase@4.3.0: {}
 
+  lodash.clonedeep@4.5.0: {}
+
+  lodash.get@4.4.2: {}
+
   lodash.isequal@4.5.0: {}
 
   lodash@4.18.1: {}
@@ -7134,8 +7567,12 @@ snapshots:
 
   mdurl@2.1.0: {}
 
+  media-typer@0.3.0: {}
+
   media-typer@1.1.1: {}
 
+  merge-descriptors@1.0.3: {}
+
   merge-descriptors@2.0.0: {}
 
   mermaid@11.17.2:
@@ -7163,14 +7600,24 @@ snapshots:
       ts-dedent: 2.3.0
       uuid: 14.0.2
 
+  methods@1.1.2: {}
+
   micro-ftch@0.3.1: {}
 
+  mime-db@1.52.0: {}
+
   mime-db@1.54.0: {}
 
+  mime-types@2.1.35:
+    dependencies:
+      mime-db: 1.52.0
+
   mime-types@3.0.2:
     dependencies:
       mime-db: 1.54.0
 
+  mime@1.6.0: {}
+
   min-indent@1.0.1: {}
 
   minimatch@10.2.6:
@@ -7183,12 +7630,23 @@ snapshots:
 
   modern-tar@0.8.4: {}
 
+  ms@2.0.0: {}
+
   ms@2.1.3: {}
 
+  multer@2.3.0:
+    dependencies:
+      append-field: 1.0.0
+      busboy: 1.6.0
+      concat-stream: 2.0.0
+      type-is: 1.6.18
+
   multiformats@9.9.0: {}
 
   nanoid@3.3.18: {}
 
+  negotiator@0.6.3: {}
+
   negotiator@1.1.0:
     dependencies:
       content-type: 2.1.0
@@ -7221,6 +7679,10 @@ snapshots:
     dependencies:
       wrappy: 1.0.2
 
+  ono@7.1.3:
+    dependencies:
+      '@jsdevtools/ono': 7.1.3
+
   openapi-fetch@0.15.2:
     dependencies:
       openapi-typescript-helpers: 0.0.15
@@ -7331,6 +7793,8 @@ snapshots:
 
   path-exists@4.0.0: {}
 
+  path-to-regexp@0.1.13: {}
+
   path-to-regexp@8.4.2: {}
 
   pathe@2.0.3: {}
@@ -7484,6 +7948,11 @@ snapshots:
       pngjs: 5.0.0
       yargs: 15.4.1
 
+  qs@6.15.3:
+    dependencies:
+      es-define-property: 1.0.1
+      side-channel: 1.1.1
+
   qs@6.16.0:
     dependencies:
       es-define-property: 1.0.1
@@ -7497,8 +7966,17 @@ snapshots:
 
   radix3@1.1.2: {}
 
+  range-parser@1.2.1: {}
+
   range-parser@1.3.0: {}
 
+  raw-body@2.5.3:
+    dependencies:
+      bytes: 3.1.2
+      http-errors: 2.0.1
+      iconv-lite: 0.4.24
+      unpipe: 1.0.0
+
   raw-body@3.0.2:
     dependencies:
       bytes: 3.1.2
@@ -7553,6 +8031,12 @@ snapshots:
 
   react@19.2.8: {}
 
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+
   readdirp@5.1.1: {}
 
   real-require@0.2.0: {}
@@ -7632,6 +8116,8 @@ snapshots:
 
   rw@1.3.3: {}
 
+  safe-buffer@5.2.1: {}
+
   safe-stable-stringify@2.5.0: {}
 
   safer-buffer@2.1.2: {}
@@ -7646,6 +8132,24 @@ snapshots:
 
   semver@7.8.5: {}
 
+  send@0.19.2(supports-color@7.2.0):
+    dependencies:
+      debug: 2.6.9(supports-color@7.2.0)
+      depd: 2.0.0
+      destroy: 1.2.0
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      fresh: 0.5.2
+      http-errors: 2.0.1
+      mime: 1.6.0
+      ms: 2.1.3
+      on-finished: 2.4.1
+      range-parser: 1.2.1
+      statuses: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
   send@1.2.1(supports-color@7.2.0):
     dependencies:
       debug: 4.4.3(supports-color@7.2.0)
@@ -7662,6 +8166,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  serve-static@1.16.3(supports-color@7.2.0):
+    dependencies:
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      parseurl: 1.3.3
+      send: 0.19.2(supports-color@7.2.0)
+    transitivePeerDependencies:
+      - supports-color
+
   serve-static@2.2.1(supports-color@7.2.0):
     dependencies:
       encodeurl: 2.0.0
@@ -7725,6 +8238,8 @@ snapshots:
 
   std-env@4.2.0: {}
 
+  streamsearch@1.1.0: {}
+
   strictdom@1.0.1: {}
 
   string-argv@0.3.2: {}
@@ -7746,6 +8261,10 @@ snapshots:
       get-east-asian-width: 1.6.0
       strip-ansi: 7.2.0
 
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
   strip-ansi@6.0.1:
     dependencies:
       ansi-regex: 5.0.1
@@ -7854,6 +8373,11 @@ snapshots:
     dependencies:
       tagged-tag: 1.0.0
 
+  type-is@1.6.18:
+    dependencies:
+      media-typer: 0.3.0
+      mime-types: 2.1.35
+
   type-is@2.1.0:
     dependencies:
       content-type: 2.1.0
@@ -7862,6 +8386,8 @@ snapshots:
 
   typed-query-selector@2.12.2: {}
 
+  typedarray@0.0.6: {}
+
   typedoc@0.28.20(typescript@5.9.3):
     dependencies:
       '@gerrit0/mini-shiki': 3.23.0
@@ -7925,6 +8451,10 @@ snapshots:
     dependencies:
       react: 19.2.8
 
+  util-deprecate@1.0.2: {}
+
+  utils-merge@1.0.1: {}
+
   uuid@14.0.2: {}
 
   uuid@9.0.1: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 321bdc64..30f1ad28 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -8,12 +8,16 @@ packages:
 # Dependencies allowed to run install/build scripts (pnpm blocks them by default).
 # esbuild: needed by Vite/tsx. puppeteer (via @mermaid-js/mermaid-cli): blocked so
 # it does not download a Chromium; nothing here renders mermaid via the CLI.
+# @bootnodedev/canton-token-forge: a git dependency whose `prepare` compiles
+# registry/src into the registry/dist its bin points at; upstream gitignores that
+# directory, so without this entry the bin exists but resolves to nothing.
 # @bootnodedev/canton-wallet-service: a git dependency, so its `prepare` build is
 # what produces the dist/ the canton-wallet-service binary points at. pnpm matches
 # a git dependency only by its resolved tarball id, so moving the ref in
 # package.json means replacing the commit sha below; `pnpm approve-builds` prints
 # the new key.
 allowBuilds:
+  '@bootnodedev/canton-token-forge@https://codeload.github.com/BootNodeDev/canton-token-forge/tar.gz/da18cbebd20e093ea77a9374829b3765caae60f1': true
   '@bootnodedev/canton-wallet-service@https://codeload.github.com/BootNodeDev/canton-wallet-service/tar.gz/99e7e69d2d91109e527a74a5c97c566a882de477': true
   esbuild: true
   protobufjs: true
diff --git a/scripts/bootstrap-vesting.mjs b/scripts/bootstrap-vesting.mjs
index a637e5a1..1222c627 100644
--- a/scripts/bootstrap-vesting.mjs
+++ b/scripts/bootstrap-vesting.mjs
@@ -12,6 +12,40 @@ const RPC_URL = process.env.RPC_URL ?? 'http://localhost:3010/rpc'
 const PACKAGE_NAME = 'amulet-vesting'
 const STAMP = Date.now()
 
+const TOKEN_FORGE_PACKAGE = 'canton-token-forge'
+const INSTRUMENT = {
+  instrumentId: 'DBT',
+  name: 'dAppBooster Token',
+  symbol: 'DBT',
+  decimals: 10,
+  maxPerTap: '1000.0',
+}
+
+export const REGISTRY_PORT = 3013
+
+// Spelled out rather than built from a helper, so these read the same here, in
+// the registry's own .env.example, and in a grep.
+export const REGISTRY_TEMPLATE_IDS = {
+  INSTRUMENT_CONFIG_TEMPLATE_ID: '#canton-token-forge:Canton.TokenForge.Registry:InstrumentConfig',
+  PREAPPROVAL_TEMPLATE_ID:
+    '#canton-token-forge:Canton.TokenForge.Registry:TokenTransferPreapproval',
+  LOCKED_TOKEN_TEMPLATE_ID: '#canton-token-forge:Canton.TokenForge.Locked:LockedToken',
+  TRANSFER_INSTRUCTION_TEMPLATE_ID:
+    '#canton-token-forge:Canton.TokenForge.Instruction:TokenTransferInstruction',
+  ALLOCATION_TEMPLATE_ID: '#canton-token-forge:Canton.TokenForge.Allocation:TokenAllocation',
+}
+
+// Every template id is single-quoted: a value starting with `#` is otherwise read
+// as a comment and the variable parses as empty.
+export const formatRegistryEnv = ({ ledgerApiUrl, adminParty, port }) =>
+  [
+    `LEDGER_API_URL=${ledgerApiUrl}`,
+    'LEDGER_API_TOKEN=<the CANTON_BACKEND_TOKEN from .env>',
+    `ADMIN_PARTY=${adminParty}`,
+    ...Object.entries(REGISTRY_TEMPLATE_IDS).map(([key, id]) => `${key}='${id}'`),
+    `PORT=${port}`,
+  ].join('\n')
+
 const rpc = async (method, params) => {
   const response = await fetch(RPC_URL, {
     method: 'POST',
@@ -44,7 +78,10 @@ const ledger = (requestMethod, resource, body, query) =>
     ...(query === undefined ? {} : { query }),
   })
 
-const createOperator = async (hint) => {
+// Allocates the party and grants the authenticated user rights over it. That user is
+// whoever the participant authenticated CANTON_BACKEND_TOKEN as, which is also the
+// token the registry reads with, so this grant is what lets it read as the admin.
+const createParty = async (hint) => {
   const result = await ledger('post', '/v2/parties', { partyIdHint: hint })
   const party = result?.partyDetails?.party
   if (typeof party !== 'string' || party.length === 0) {
@@ -65,24 +102,65 @@ const createOperator = async (hint) => {
 
 // Ask the participant which package it would pick for the name, so a stale id cannot silently
 // produce an empty dashboard. Fails loudly with PACKAGE_NAMES_NOT_FOUND if the DAR is not deployed.
-const resolvePackage = async (party) => {
+const resolvePackage = async (party, packageName = PACKAGE_NAME) => {
   const result = await ledger(
     'get',
     '/v2/interactive-submission/preferred-package-version',
     undefined,
-    { 'package-name': PACKAGE_NAME, parties: party },
+    { 'package-name': packageName, parties: party },
   )
   const pkg = result?.packagePreference?.packageReference?.packageId
   if (typeof pkg !== 'string' || pkg.length === 0) {
-    throw new Error(`participant returned no package id for ${PACKAGE_NAME}`)
+    throw new Error(`participant returned no package id for ${packageName}`)
   }
   return pkg
 }
 
+// Read back from the ACS rather than out of the submission response, so this does not
+// depend on where a given Canton version puts a create result in the envelope. The
+// filter takes the package-name reference; the participant rejects a package id here.
+const findInstrumentConfig = async (admin) => {
+  const end = await ledger('get', '/v2/state/ledger-end')
+  if (end?.offset === undefined) {
+    throw new Error('participant returned no ledger-end offset')
+  }
+  const rows = await ledger('post', '/v2/state/active-contracts', {
+    filter: {
+      filtersByParty: {
+        [admin]: {
+          cumulative: [
+            {
+              identifierFilter: {
+                TemplateFilter: {
+                  value: {
+                    templateId: REGISTRY_TEMPLATE_IDS.INSTRUMENT_CONFIG_TEMPLATE_ID,
+                    includeCreatedEventBlob: false,
+                  },
+                },
+              },
+            },
+          ],
+        },
+      },
+    },
+    activeAtOffset: end.offset,
+    verbose: true,
+  })
+  const configs = (Array.isArray(rows) ? rows : [])
+    .map((row) => row?.contractEntry?.JsActiveContract?.createdEvent)
+    .filter((event) => event?.createArgument?.instrumentId === INSTRUMENT.instrumentId)
+  if (configs.length !== 1) {
+    throw new Error(
+      `expected one ${INSTRUMENT.instrumentId} InstrumentConfig for ${admin}, found ${configs.length}`,
+    )
+  }
+  return configs[0].contractId
+}
+
 const main = async () => {
   // A fresh operator per run, so the config always matches a factory this run created. Earlier
   // operators and factories stay active on the local ledger and are simply superseded.
-  const operator = await createOperator(`vesting-operator-${STAMP}`)
+  const operator = await createParty(`vesting-operator-${STAMP}`)
   console.log(`operator   ${operator}`)
 
   const pkg = process.env.PKG ?? (await resolvePackage(operator))
@@ -133,6 +211,54 @@ const main = async () => {
     throw new Error('factory created but no createdEventBlob came back from the ACS read')
   }
   console.log(`factory    ${active.createdEvent.contractId}`)
+
+  // Preflight before the admin exists, so an undeployed vendor/canton-token-forge.dar fails
+  // with PACKAGE_NAMES_NOT_FOUND rather than a raw create error and a stray party.
+  await resolvePackage(operator, TOKEN_FORGE_PACKAGE)
+
+  // A fresh admin per run, so (admin, instrumentId) is new every time and the registry
+  // can never find two configs for one instrument.
+  const admin = await createParty(`instrument-admin-${STAMP}`)
+
+  await ledger('post', '/v2/commands/submit-and-wait-for-transaction-tree', {
+    commandId: `instrument-config-${STAMP}`,
+    actAs: [admin],
+    readAs: [admin],
+    commands: [
+      {
+        CreateCommand: {
+          templateId: REGISTRY_TEMPLATE_IDS.INSTRUMENT_CONFIG_TEMPLATE_ID,
+          createArguments: {
+            admin,
+            instrumentId: INSTRUMENT.instrumentId,
+            name: INSTRUMENT.name,
+            symbol: INSTRUMENT.symbol,
+            // Int64 is encoded as a JSON string; a bare number is rejected.
+            decimals: String(INSTRUMENT.decimals),
+            faucet: { maxPerTap: INSTRUMENT.maxPerTap },
+            meta: { values: {} },
+          },
+        },
+      },
+    ],
+  })
+
+  const configCid = await findInstrumentConfig(admin)
+  console.log(`admin      ${admin}`)
+  console.log(`instrument ${INSTRUMENT.instrumentId} (${INSTRUMENT.symbol}) ${configCid}`)
+  console.log('\nregistry env')
+  console.log(
+    formatRegistryEnv({
+      ledgerApiUrl: process.env.CANTON_JSON_API_URL || 'http://localhost:2975',
+      adminParty: admin,
+      port: REGISTRY_PORT,
+    }),
+  )
 }
 
-await main()
+// import.meta.main, not a comparison against argv[1]: the loader realpaths
+// import.meta.filename while argv[1] keeps symlinks, so a symlinked path made the
+// guard false and exited 0 having created nothing.
+if (import.meta.main) {
+  await main()
+}
diff --git a/scripts/bootstrap-vesting.test.mjs b/scripts/bootstrap-vesting.test.mjs
new file mode 100644
index 00000000..89117522
--- /dev/null
+++ b/scripts/bootstrap-vesting.test.mjs
@@ -0,0 +1,90 @@
+import assert from 'node:assert/strict'
+import { readFileSync } from 'node:fs'
+import path from 'node:path'
+import { describe, it } from 'node:test'
+import { fileURLToPath } from 'node:url'
+import { formatRegistryEnv, REGISTRY_PORT, REGISTRY_TEMPLATE_IDS } from './bootstrap-vesting.mjs'
+
+const block = formatRegistryEnv({
+  ledgerApiUrl: 'http://localhost:2975',
+  adminParty: 'admin-1::abc',
+  port: REGISTRY_PORT,
+})
+
+const scriptsDir = path.dirname(fileURLToPath(import.meta.url))
+const devStack = readFileSync(path.join(scriptsDir, 'dev-stack.sh'), 'utf8')
+
+// Read from the array dev-stack.sh declares rather than a copy of it, so the two
+// files cannot drift apart while the test still passes.
+const devStackKeys = () => {
+  const declaration = devStack.match(/REGISTRY_ENV_KEYS=\(([^)]*)\)/)
+  assert.ok(declaration, 'dev-stack.sh no longer declares REGISTRY_ENV_KEYS')
+  return declaration[1].split(/\s+/).filter((key) => key !== '')
+}
+
+describe('the registry env block bootstrap prints', () => {
+  it('quotes every template id, because dotenv reads the leading # as a comment', () => {
+    const lines = block.split('\n')
+    for (const [key, id] of Object.entries(REGISTRY_TEMPLATE_IDS)) {
+      assert.ok(lines.includes(`${key}='${id}'`))
+      assert.ok(id.startsWith('#canton-token-forge:'), `${key} is not package-name form`)
+    }
+  })
+
+  it('carries the party and the url only this run knows', () => {
+    assert.match(block, /^ADMIN_PARTY=admin-1::abc$/m)
+    assert.match(block, /^LEDGER_API_URL=http:\/\/localhost:2975$/m)
+    assert.match(block, /^PORT=3013$/m)
+  })
+
+  it('never prints the bearer token', () => {
+    // The block is pasteable by hand, so it names the token rather than carrying
+    // it: bootstrap's stdout reaches terminal scrollback and a dev-stack log file.
+    assert.match(block, /^LEDGER_API_TOKEN=<[^>]+>$/m)
+    assert.doesNotMatch(block, /eyJ[A-Za-z0-9_-]+\./)
+  })
+
+  it('is a nine-line block pasteable into the registry .env as it stands', () => {
+    // dev-stack.sh parses this back out (see the contract tests below), and a human
+    // still copies it by hand, so a silently reordered or truncated block breaks both.
+    const lines = block.split('\n')
+    assert.equal(lines.length, 9)
+    assert.doesNotMatch(block, /\n$/)
+    assert.deepEqual(
+      lines.map((line) => line.split('=')[0]),
+      [
+        'LEDGER_API_URL',
+        'LEDGER_API_TOKEN',
+        'ADMIN_PARTY',
+        ...Object.keys(REGISTRY_TEMPLATE_IDS),
+        'PORT',
+      ],
+    )
+  })
+})
+
+describe('the contract between bootstrap and dev-stack.sh', () => {
+  it('prints every key dev-stack.sh reads back, exactly once', () => {
+    for (const key of devStackKeys()) {
+      const occurrences = block.split('\n').filter((line) => line.startsWith(`${key}=`))
+      assert.equal(
+        occurrences.length,
+        1,
+        `${key} is read by dev-stack.sh but printed ${occurrences.length} times`,
+      )
+    }
+  })
+
+  it('leaves the bearer token to dev-stack.sh', () => {
+    // The one registry variable bootstrap cannot supply: it never sees the token.
+    assert.ok(!devStackKeys().includes('LEDGER_API_TOKEN'))
+  })
+
+  it('strips to the same template ids the registry checks at boot', () => {
+    for (const [key, id] of Object.entries(REGISTRY_TEMPLATE_IDS)) {
+      assert.ok(devStackKeys().includes(key), `dev-stack.sh does not read ${key}`)
+      const printed = block.split('\n').find((line) => line.startsWith(`${key}=`))
+      assert.equal(printed.slice(key.length + 1).replace(/^'|'$/g, ''), id)
+    }
+  })
+})
diff --git a/scripts/dev-stack.sh b/scripts/dev-stack.sh
index 3f5ade23..a72e99f6 100755
--- a/scripts/dev-stack.sh
+++ b/scripts/dev-stack.sh
@@ -20,8 +20,8 @@
 #   ./scripts/dev-stack.sh menu [dir]  # same as above
 #   ./scripts/dev-stack.sh install     # install + link every workspace from the repo root (pnpm install)
 #   ./scripts/dev-stack.sh docker-up   # macOS only: launch Docker Desktop, wait for the daemon
-#   ./scripts/dev-stack.sh up [dir]    # start the stack (LocalNet, DAR, wallet-service, bootstrap, dApp)
-#   ./scripts/dev-stack.sh down [dir]  # stop wallet-service + the dApp dev server, stop the LocalNet
+#   ./scripts/dev-stack.sh up [dir]    # start the stack (LocalNet, DARs, wallet-service, bootstrap, registry, dApp)
+#   ./scripts/dev-stack.sh down [dir]  # stop the dApp dev server, the token registry and wallet-service, stop the LocalNet
 #   ./scripts/dev-stack.sh docker-down # macOS only: quit Docker Desktop
 #   ./scripts/dev-stack.sh status [dir] # show what is currently running
 #
@@ -29,12 +29,13 @@
 #
 # What `up` starts (in order; Docker must already be running):
 #   1. LocalNet containers           (canton-barebones start)
-#   2. Builds and deploys the vesting DAR (name derived from daml.yaml)
+#   2. Builds and deploys the amulet-vesting DAR, then the two vendored DARs
 #   3. wallet-service                -> http://localhost:3010  (background)
-#   4. Bootstraps the vesting operator and its factory
-#   5. dApp frontend dev server      -> http://localhost:3012  (background)
+#   4. Bootstraps the vesting operator, its factory and the DBT instrument
+#   5. Token registry                -> http://localhost:3013  (background)
+#   6. dApp frontend dev server      -> http://localhost:3012  (background)
 #
-# `down` reverses 5 and 3 (kills both background processes) and stops the
+# `down` reverses 6, 5 and 3 (kills the background processes) and stops the
 # LocalNet, keeping its volumes.
 
 set -euo pipefail
@@ -49,6 +50,23 @@ DAPP_LOG="$RUN_DIR/dapp-dev.log"
 DAPP_PID="$RUN_DIR/dapp-dev.pid"
 WS_LOG="$RUN_DIR/wallet-service.log"
 WS_PID="$RUN_DIR/wallet-service.pid"
+REGISTRY_LOG="$RUN_DIR/registry.log"
+REGISTRY_PID="$RUN_DIR/registry.pid"
+BOOTSTRAP_LOG="$RUN_DIR/bootstrap.log"
+
+# The registry variables bootstrap prints and this script reads back. LEDGER_API_TOKEN
+# is deliberately absent: bootstrap never sees the bearer, so it is supplied here from
+# .env instead. scripts/bootstrap-vesting.test.mjs holds the two lists together.
+REGISTRY_ENV_KEYS=(
+  LEDGER_API_URL
+  ADMIN_PARTY
+  INSTRUMENT_CONFIG_TEMPLATE_ID
+  PREAPPROVAL_TEMPLATE_ID
+  LOCKED_TOKEN_TEMPLATE_ID
+  TRANSFER_INSTRUCTION_TEMPLATE_ID
+  ALLOCATION_TEMPLATE_ID
+  PORT
+)
 
 # Resolved in up(), once ./.env has been read.
 JSON_API_URL=""
@@ -58,6 +76,10 @@ DAML_DIR="dapp/daml"
 DAR_NAME="$(awk '/^name:/{n=$2} /^version:/{v=$2} END{print n"-"v".dar"}' "$DAML_DIR/daml.yaml")"
 DAR_PATH="$DAML_DIR/.daml/dist/$DAR_NAME"
 
+# Vendored binaries, not built here. canton-token-forge goes first: vesting
+# data-depends on it. See vendor/PROVENANCE.md.
+VENDOR_DARS=(vendor/canton-token-forge.dar vendor/vesting.dar)
+
 log()  { printf '\033[1;36m==>\033[0m %s\n' "$*"; }
 warn() { printf '\033[1;33m[!]\033[0m %s\n' "$*"; }
 die()  { printf '\033[1;31m[x]\033[0m %s\n' "$*" >&2; exit 1; }
@@ -119,6 +141,18 @@ wait_for_http() { # wait_for_http <seconds> <url> <label> <any|ok>
   return 1
 }
 
+# `kill` returns before the process has released its socket, so a restart needs this
+# between the stop and the next bind.
+wait_for_port_free() { # wait_for_port_free <seconds> <port>
+  local timeout="$1" port="$2" deadline
+  deadline=$((SECONDS + timeout))
+  while [ "$SECONDS" -lt "$deadline" ]; do
+    lsof -nP -iTCP:"$port" -sTCP:LISTEN >/dev/null 2>&1 || return 0
+    sleep 1
+  done
+  return 1
+}
+
 # Returns non-zero rather than exiting, so `down` still stops the host processes and
 # `status` still prints the ports when the LocalNet itself is unreachable.
 localnet() { # localnet <start|stop|reset|status|logs> [args…]
@@ -184,6 +218,79 @@ start_wallet_service() {
     || die "wallet-service is not answering on 3010 (log: $WS_LOG)."
 }
 
+# Read one KEY=value line out of the block bootstrap printed, dropping the single
+# quotes the template ids carry for the paste-into-a-.env case. Keys come from
+# REGISTRY_ENV_KEYS and nowhere else, so the sed pattern is never caller data.
+read_bootstrap_env() { # read_bootstrap_env <key>
+  local value
+  value="$(sed -n "s/^$1=//p" "$BOOTSTRAP_LOG" | tail -n1)"
+  value="${value#\'}"
+  printf '%s' "${value%\'}"
+}
+
+# The port has one definition, in scripts/bootstrap-vesting.mjs, and reaches this
+# script only in the block bootstrap prints. 3013 is the fallback for a `down` that
+# never saw one.
+registry_port() {
+  local port=''
+  if [ -f "$BOOTSTRAP_LOG" ]; then
+    port="$(read_bootstrap_env PORT)"
+  fi
+  printf '%s' "${port:-3013}"
+}
+
+# Scoped to the port on purpose: matching the registry's path alone would also kill
+# one a developer is running on another port, from this checkout or another.
+kill_registry_on_port() { # kill_registry_on_port <port>
+  local port="$1" pid
+  for pid in $(lsof -t -nP -iTCP:"$port" -sTCP:LISTEN 2>/dev/null); do
+    if ps -p "$pid" -o args= 2>/dev/null | grep -q 'canton-token-forge/registry/dist'; then
+      kill "$pid" 2>/dev/null || true
+    fi
+  done
+}
+
+# The registry ships from BootNodeDev/canton-token-forge as a git dependency and runs
+# on the host. It is read-only and takes the same bearer the DAR upload does, so no
+# new secret is introduced.
+start_registry() {
+  local key value port
+  local -a registry_env=()
+  for key in "${REGISTRY_ENV_KEYS[@]}"; do
+    value="$(read_bootstrap_env "$key")"
+    [ -n "$value" ] || die "bootstrap printed no $key; cannot configure the registry (log: $BOOTSTRAP_LOG)"
+    registry_env+=("$key=$value")
+  done
+  port="$(read_bootstrap_env PORT)"
+
+  # Restarted rather than skipped: bootstrap mints a fresh admin party each run, so a
+  # leftover registry serves a superseded instrument and still answers /readyz.
+  if lsof -nP -iTCP:"$port" -sTCP:LISTEN >/dev/null 2>&1; then
+    log "Port $port in use; restarting the token registry."
+    stop_pidfile "$REGISTRY_PID" "token registry"
+    kill_registry_on_port "$port"
+    # Comfortably past the registry's own SHUTDOWN_TIMEOUT_MS, which is 8s by
+    # default: a shorter budget reports a draining registry as a foreign process.
+    wait_for_port_free 20 "$port" \
+      || die "Port $port is still held after 20s; free it, then run 'up'. A token registry draining an in-flight request takes up to SHUTDOWN_TIMEOUT_MS (8s by default)."
+  fi
+
+  log "Starting the token registry -> http://localhost:$port"
+  # The bearer goes in the environment rather than through `env`'s argv, where `ps`
+  # would show it to every local user for the life of the process.
+  # DOTENV_CONFIG_PATH points the registry's `import 'dotenv/config'` at an empty file:
+  # its cwd is the repo root, so it would otherwise read all of wallet-service's .env
+  # into itself, the CANTON_AUTH_SECRET signing key included, for no purpose.
+  LEDGER_API_TOKEN="$CANTON_BACKEND_TOKEN" \
+    nohup env DOTENV_CONFIG_PATH=/dev/null "${registry_env[@]}" pnpm exec canton-token-forge-registry >"$REGISTRY_LOG" 2>&1 &
+  echo $! >"$REGISTRY_PID"
+
+  # /readyz rather than /healthz: it reads the ledger end, so a 2xx proves the
+  # registry can reach the participant and not merely that something holds the port.
+  wait_for_http 60 "http://localhost:$port/readyz" "token registry" ok \
+    || die "The token registry is not ready on $port (log: $REGISTRY_LOG)."
+}
+
 up() {
   mkdir -p "$RUN_DIR"
 
@@ -257,15 +364,28 @@ up() {
   pnpm run build-dar
   log "Deploying $DAR_PATH to Canton..."
   pnpm run deploy-dar -- "$DAR_PATH"
+  local dar
+  for dar in "${VENDOR_DARS[@]}"; do
+    log "Deploying $dar to Canton..."
+    pnpm run deploy-dar -- "$dar"
+  done
 
   # 3. wallet-service (3010)
   start_wallet_service
 
-  # 4. Bootstrap, which goes through wallet-service's /rpc
-  log "Bootstrapping the vesting operator and factory..."
-  pnpm run bootstrap
+  # 4. Bootstrap, which goes through wallet-service's /rpc. Its stdout is teed rather
+  # than swallowed: the registry's whole non-secret configuration is in it, and a
+  # manual run still wants to read the block. `set -o pipefail` is on, so a failing
+  # bootstrap still fails here.
+  # The URL is passed explicitly, which bootstrap's own --env-file loses to: otherwise a
+  # caller override moves the upload and the probe but not what the registry points at.
+  log "Bootstrapping the vesting operator, factory and DBT instrument..."
+  CANTON_JSON_API_URL="$JSON_API_URL" pnpm run bootstrap | tee "$BOOTSTRAP_LOG"
+
+  # 5. Token registry (3013), which needs the admin party bootstrap just created
+  start_registry
 
-  # 5. dApp frontend dev server (3012)
+  # 6. dApp frontend dev server (3012)
   if lsof -nP -iTCP:3012 -sTCP:LISTEN >/dev/null 2>&1; then
     warn "Port 3012 already in use; skipping dApp dev server."
   else
@@ -279,6 +399,7 @@ up() {
   log "Stack is up:"
   cat <<EOF
    wallet-service          http://localhost:3010   (log: $WS_LOG)
+   token registry          http://localhost:3013   (log: $REGISTRY_LOG)
    dApp frontend           http://localhost:3012   (log: $DAPP_LOG)
    app-user wallet UI      http://wallet.localhost:2000
    app-user JSON API       $JSON_API_URL
@@ -310,6 +431,8 @@ down() {
   stop_pidfile "$DAPP_PID" "dApp dev server"
   # Belt-and-suspenders: kill any stray vite on our port.
   pkill -f "vite --host localhost --port 3012" 2>/dev/null || true
+  stop_pidfile "$REGISTRY_PID" "token registry"
+  kill_registry_on_port "$(registry_port)"
   stop_pidfile "$WS_PID" "wallet-service"
   pkill -f "canton-wallet-service" 2>/dev/null || true
 
@@ -324,9 +447,9 @@ down() {
   fi
 
   echo
-  log "Dev-server ports 3010-3012:"
-  if lsof -nP -iTCP:3010-3012 -sTCP:LISTEN >/dev/null 2>&1; then
-    lsof -nP -iTCP:3010-3012 -sTCP:LISTEN | awk 'NR>1{print "   "$1, $9}'
+  log "Dev-server ports 3010-3013:"
+  if lsof -nP -iTCP:3010-3013 -sTCP:LISTEN >/dev/null 2>&1; then
+    lsof -nP -iTCP:3010-3013 -sTCP:LISTEN | awk 'NR>1{print "   "$1, $9}'
   else
     echo "   (all free)"
   fi
@@ -344,8 +467,8 @@ menu() {
     "install + link every workspace"
     "start Docker Desktop (macOS)"
     "quit Docker Desktop (macOS)"
-    "start LocalNet, deploy DAR, wallet-service, bootstrap, dApp"
-    "stop wallet-service + dApp dev server, stop the LocalNet"
+    "start LocalNet, deploy DARs, wallet-service, bootstrap, registry, dApp"
+    "stop dApp dev server, token registry, wallet-service, stop the LocalNet"
     "exit"
   )
   local n=${#keys[@]} sel=0 key rest i num choice
@@ -416,9 +539,9 @@ status() {
   else
     echo "   (docker daemon not running)"
   fi
-  log "Dev-server ports 3010-3012:"
-  if lsof -nP -iTCP:3010-3012 -sTCP:LISTEN >/dev/null 2>&1; then
-    lsof -nP -iTCP:3010-3012 -sTCP:LISTEN | awk 'NR>1{print "   "$1, $9}'
+  log "Dev-server ports 3010-3013:"
+  if lsof -nP -iTCP:3010-3013 -sTCP:LISTEN >/dev/null 2>&1; then
+    lsof -nP -iTCP:3010-3013 -sTCP:LISTEN | awk 'NR>1{print "   "$1, $9}'
   else
     echo "   (none)"
   fi
diff --git a/scripts/mint-token.mjs b/scripts/mint-token.mjs
index 37e42886..ed51d7d3 100755
--- a/scripts/mint-token.mjs
+++ b/scripts/mint-token.mjs
@@ -79,6 +79,8 @@ const main = () => {
   )
 }
 
-if (import.meta.url === `file://${process.argv[1]}`) {
+// See scripts/bootstrap-vesting.mjs: neither a percent-encoded import.meta.url nor
+// a realpath-resolved import.meta.filename compares equal to argv[1] on every path.
+if (import.meta.main) {
   main()
 }
diff --git a/scripts/mint-token.test.mjs b/scripts/mint-token.test.mjs
index 3f1bc25d..5bc02ba2 100644
--- a/scripts/mint-token.test.mjs
+++ b/scripts/mint-token.test.mjs
@@ -1,5 +1,7 @@
 import assert from 'node:assert/strict'
 import { execFileSync } from 'node:child_process'
+import fs from 'node:fs'
+import os from 'node:os'
 import path from 'node:path'
 import { describe, it } from 'node:test'
 import { fileURLToPath } from 'node:url'
@@ -58,4 +60,29 @@ describe('Canton token generation', () => {
     assert.match(output, /CANTON_BACKEND_TOKEN=/)
     assert.match(output, /wallet LocalNet settings/)
   })
+
+  it('still runs when invoked through a symlinked path', () => {
+    // Scenario: a checkout reached through a symlink (macOS /tmp, a linked repo).
+    // The main-module guard is the same idiom bootstrap-vesting.mjs uses, and
+    // comparing argv[1] against a realpathed path made it false and exit 0 mutely.
+    const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'mint-token-'))
+    const linkedScripts = path.join(tmpDir, 'scripts')
+    fs.symlinkSync(__dirname, linkedScripts, 'dir')
+
+    try {
+      const output = execFileSync(process.execPath, [path.join(linkedScripts, 'mint-token.mjs')], {
+        cwd: tmpDir,
+        env: {
+          ...process.env,
+          CANTON_AUTH_AUDIENCE: 'https://canton.network.global',
+          CANTON_AUTH_SECRET: 'unsafe',
+        },
+        encoding: 'utf8',
+      })
+
+      assert.match(output, /CANTON_BACKEND_TOKEN=/)
+    } finally {
+      fs.rmSync(tmpDir, { recursive: true, force: true })
+    }
+  })
 })
diff --git a/vendor/PROVENANCE.md b/vendor/PROVENANCE.md
new file mode 100644
index 00000000..5ca3574c
--- /dev/null
+++ b/vendor/PROVENANCE.md
@@ -0,0 +1,55 @@
+# vendor/
+
+The two Daml packages this repository needs, committed as binaries. Neither is
+built here: `dpm` is not a requirement to run this repository, and both DARs are
+byte-reproducible from a clean tree at the tag below, so they can be rebuilt and
+compared rather than trusted.
+
+## `canton-token-forge.dar`
+
+| | |
+|---|---|
+| Source | https://github.com/BootNodeDev/canton-token-forge |
+| Release | `v0.2.0` |
+| Asset | `canton-token-forge-0.0.1.dar` |
+| Size | 725807 bytes |
+| sha256 | `147835e775e523f78c784996c43500c57e1ed97bcab97c97df6515b65f9332da` |
+| package-id | `20d54824dc4d76694c70ac51dd5f0b9e063ab789ffa02d07432abb848c8360cc` |
+| Built against Splice | `0.6.7` (commit `c8d8d977794c514ed2ee9eb64de322a6779898f3`) |
+| Daml SDK | 3.4.11 |
+| LF target | 2.1 |
+
+The asset is byte-identical to the one on `v0.1.0`. It is taken from `v0.2.0`
+because that is also the tag `package.json` pins the registry service to, so one
+tag governs both halves of the dependency.
+
+It bundles all six `splice-api-token-*` interface packages it links against, at
+the package-ids it was compiled with, so this repository vendors no Splice of
+its own.
+
+## `vesting.dar`
+
+| | |
+|---|---|
+| Source | https://github.com/BootNodeDev/canton-vesting-forge |
+| Release | `v0.1.0` |
+| Asset | `vesting-0.0.1.dar` |
+| Size | 677236 bytes |
+| sha256 | `0aafd73375f82679a575e4ea87efa3ea96b4b98da4e71251db793460a9ce801b` |
+| package-id | `64ed80c9a4bd847b2aa9621c02510a1feddb9a0e7e47a48b890a5fa800eeae30` |
+| Bundled canton-token-forge | 0.0.1, package-id `20d54824dc4d76694c70ac51dd5f0b9e063ab789ffa02d07432abb848c8360cc` |
+| Daml SDK | 3.4.11 |
+| LF target | 2.1 |
+
+`vesting` data-depends on `canton-token-forge`, so the participant must have
+`canton-token-forge.dar` before this one: `scripts/dev-stack.sh` uploads them in
+that order.
+
+## Re-verifying
+
+    sha256sum vendor/canton-token-forge.dar vendor/vesting.dar
+
+## Updating
+
+There is no automated update path. To move to a later release of either: replace
+the binary, re-run the checksum, and update every row above by hand.
diff --git a/vendor/canton-token-forge.dar b/vendor/canton-token-forge.dar
new file mode 100644
index 00000000..3de300d1
Binary files /dev/null and b/vendor/canton-token-forge.dar differ
diff --git a/vendor/vesting.dar b/vendor/vesting.dar
new file mode 100644
index 00000000..6d83022d
Binary files /dev/null and b/vendor/vesting.dar differ