@ecency/hive-tx 7.1.0

package/dist/esm/helpers/PrivateKey.d.ts

@@ -0,0 +1,114 @@
+import { PublicKey } from './PublicKey';
+import { Signature } from './Signature';
+export type KeyRole = 'owner' | 'active' | 'posting' | 'memo';
+/**
+ * ECDSA (secp256k1) private key for signing and encryption operations.
+ * Handles key generation, derivation from seeds/passwords, and cryptographic operations.
+ *
+ * All private keys are stored internally as Uint8Array and can be converted to/from
+ * Wallet Import Format (WIF) strings for storage and transmission.
+ *
+ * @example
+ * ```typescript
+ * // From WIF string
+ * const key = PrivateKey.from('5JdeC9P7Pbd1uGdFVEsJ41EkEnADbbHGq6p1BwFxm6txNBsQnsw')
+ *
+ * // Generate random key
+ * const randomKey = PrivateKey.randomKey()
+ *
+ * // From username and password
+ * const loginKey = PrivateKey.fromLogin('username', 'password')
+ *
+ * // Sign a message
+ * const signature = key.sign(someHash)
+ *
+ * // Get public key
+ * const pubKey = key.createPublic()
+ * ```
+ */
+export declare class PrivateKey {
+    key: Uint8Array;
+    constructor(key: Uint8Array);
+    /**
+     * Creates a PrivateKey instance from a WIF string or raw Uint8Array.
+     * Automatically detects the input type and uses the appropriate method.
+     *
+     * @param value - WIF formatted string or raw 32-byte key as Uint8Array
+     * @returns New PrivateKey instance
+     * @throws Error if the key format is invalid
+     */
+    static from(value: string | Uint8Array): PrivateKey;
+    /**
+     * Creates a PrivateKey from a Wallet Import Format (WIF) encoded string.
+     *
+     * @param wif - WIF encoded private key string
+     * @returns New PrivateKey instance
+     * @throws Error if WIF format is invalid or checksum fails
+     */
+    static fromString(wif: string): PrivateKey;
+    /**
+     * Creates a PrivateKey from a seed string or Uint8Array.
+     * The seed is hashed with SHA256 to produce the private key.
+     *
+     * @param seed - Seed string (converted to bytes) or raw byte array
+     * @returns New PrivateKey instance derived from seed
+     */
+    static fromSeed(seed: string | Uint8Array): PrivateKey;
+    /**
+     * Derives a PrivateKey from username, password, and role using Hive's key derivation scheme.
+     * This generates the same keys that the Hive wallet uses for login-based keys.
+     *
+     * @param username - Hive username
+     * @param password - Master password (or seed phrase)
+     * @param role - Key role ('owner', 'active', 'posting', 'memo')
+     * @returns New PrivateKey instance for the specified role
+     */
+    static fromLogin(username: string, password: string, role?: KeyRole): PrivateKey;
+    /**
+     * Signs a 32-byte message hash using ECDSA and returns a recoverable signature.
+     * The signature includes recovery information to allow public key recovery.
+     *
+     * @param message - 32-byte message hash to sign (Uint8Array)
+     * @returns Signature object containing the signature data
+     */
+    sign(message: Uint8Array): Signature;
+    /**
+     * Derives the corresponding public key for this private key.
+     *
+     * @param prefix - Optional address prefix (defaults to config.address_prefix)
+     * @returns PublicKey instance derived from this private key
+     */
+    createPublic(prefix?: string): PublicKey;
+    /**
+     * Returns the private key as a Wallet Import Format (WIF) encoded string.
+     * This includes network ID and checksum for safe storage/transmission.
+     *
+     * @returns WIF encoded private key string
+     */
+    toString(): string;
+    /**
+     * Returns a masked representation of the private key for debugging/logging.
+     * Shows only the first and last 6 characters to avoid accidental exposure.
+     * Use toString() to get the full key for export/serialization.
+     *
+     * @returns Masked key representation for safe logging
+     */
+    inspect(): string;
+    /**
+     * Computes a shared secret using ECDH key exchange for memo encryption.
+     * The shared secret is used as a key for AES encryption/decryption.
+     *
+     * @param publicKey - Other party's public key
+     * @returns 64-byte shared secret as Uint8Array
+     */
+    getSharedSecret(publicKey: PublicKey): Uint8Array;
+    /**
+     * Generates a new cryptographically secure random private key.
+     * Uses the secp256k1 key generation algorithm for security.
+     * This method may take up to 250ms due to entropy collection.
+     *
+     * @returns New randomly generated PrivateKey instance
+     */
+    static randomKey(): PrivateKey;
+}
+//# sourceMappingURL=PrivateKey.d.ts.map

package/dist/esm/helpers/PrivateKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrivateKey.d.ts","sourceRoot":"","sources":["../../../src/helpers/PrivateKey.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAGvC,MAAM,MAAM,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAA;AAI7D;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,qBAAa,UAAU;IACrB,GAAG,EAAE,UAAU,CAAA;gBAEH,GAAG,EAAE,UAAU;IAS3B;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU;IAQnD;;;;;;OAMG;IACH,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU;IAI1C;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,UAAU;IAatD;;;;;;;;OAQG;IACH,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,GAAE,OAAkB,GAAG,UAAU;IAK1F;;;;;;OAMG;IACH,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS;IAUpC;;;;;OAKG;IACH,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS;IAIxC;;;;;OAKG;IACH,QAAQ,IAAI,MAAM;IAIlB;;;;;;OAMG;IACH,OAAO,IAAI,MAAM;IAKjB;;;;;;OAMG;IACH,eAAe,CAAC,SAAS,EAAE,SAAS,GAAG,UAAU;IAMjD;;;;;;OAMG;IACH,MAAM,CAAC,SAAS,IAAI,UAAU;CAG/B"}

package/dist/esm/helpers/PrivateKey.js

@@ -0,0 +1,205 @@
+import bs58 from 'bs58';
+import { secp256k1 } from '@noble/curves/secp256k1.js';
+import { sha256, sha512 } from '@noble/hashes/sha2.js';
+import { PublicKey } from './PublicKey';
+import { Signature } from './Signature';
+import { bytesToHex, hexToBytes } from '@noble/hashes/utils.js';
+const NETWORK_ID = new Uint8Array([0x80]);
+/**
+ * ECDSA (secp256k1) private key for signing and encryption operations.
+ * Handles key generation, derivation from seeds/passwords, and cryptographic operations.
+ *
+ * All private keys are stored internally as Uint8Array and can be converted to/from
+ * Wallet Import Format (WIF) strings for storage and transmission.
+ *
+ * @example
+ * ```typescript
+ * // From WIF string
+ * const key = PrivateKey.from('5JdeC9P7Pbd1uGdFVEsJ41EkEnADbbHGq6p1BwFxm6txNBsQnsw')
+ *
+ * // Generate random key
+ * const randomKey = PrivateKey.randomKey()
+ *
+ * // From username and password
+ * const loginKey = PrivateKey.fromLogin('username', 'password')
+ *
+ * // Sign a message
+ * const signature = key.sign(someHash)
+ *
+ * // Get public key
+ * const pubKey = key.createPublic()
+ * ```
+ */
+export class PrivateKey {
+    constructor(key) {
+        this.key = key;
+        try {
+            secp256k1.getPublicKey(key);
+        }
+        catch (e) {
+            throw new Error('invalid private key');
+        }
+    }
+    /**
+     * Creates a PrivateKey instance from a WIF string or raw Uint8Array.
+     * Automatically detects the input type and uses the appropriate method.
+     *
+     * @param value - WIF formatted string or raw 32-byte key as Uint8Array
+     * @returns New PrivateKey instance
+     * @throws Error if the key format is invalid
+     */
+    static from(value) {
+        if (typeof value === 'string') {
+            return PrivateKey.fromString(value);
+        }
+        else {
+            return new PrivateKey(value);
+        }
+    }
+    /**
+     * Creates a PrivateKey from a Wallet Import Format (WIF) encoded string.
+     *
+     * @param wif - WIF encoded private key string
+     * @returns New PrivateKey instance
+     * @throws Error if WIF format is invalid or checksum fails
+     */
+    static fromString(wif) {
+        return new PrivateKey(decodePrivate(wif).subarray(1));
+    }
+    /**
+     * Creates a PrivateKey from a seed string or Uint8Array.
+     * The seed is hashed with SHA256 to produce the private key.
+     *
+     * @param seed - Seed string (converted to bytes) or raw byte array
+     * @returns New PrivateKey instance derived from seed
+     */
+    static fromSeed(seed) {
+        if (typeof seed === 'string') {
+            const isHex = /^[0-9a-fA-F]+$/.test(seed);
+            if (isHex) {
+                seed = hexToBytes(seed);
+            }
+            else {
+                // Convert non-hex string to Uint8Array using UTF-8 encoding
+                seed = new TextEncoder().encode(seed);
+            }
+        }
+        return new PrivateKey(sha256(seed));
+    }
+    /**
+     * Derives a PrivateKey from username, password, and role using Hive's key derivation scheme.
+     * This generates the same keys that the Hive wallet uses for login-based keys.
+     *
+     * @param username - Hive username
+     * @param password - Master password (or seed phrase)
+     * @param role - Key role ('owner', 'active', 'posting', 'memo')
+     * @returns New PrivateKey instance for the specified role
+     */
+    static fromLogin(username, password, role = 'active') {
+        const seed = username + role + password;
+        return PrivateKey.fromSeed(seed);
+    }
+    /**
+     * Signs a 32-byte message hash using ECDSA and returns a recoverable signature.
+     * The signature includes recovery information to allow public key recovery.
+     *
+     * @param message - 32-byte message hash to sign (Uint8Array)
+     * @returns Signature object containing the signature data
+     */
+    sign(message) {
+        const rv = secp256k1.sign(message, this.key, {
+            extraEntropy: true,
+            format: 'recovered',
+            prehash: false // prehash does sha256 on the message
+        });
+        const recovery = parseInt(bytesToHex(rv.subarray(0, 1)), 16);
+        return Signature.from((recovery + 31).toString(16) + bytesToHex(rv.subarray(1)));
+    }
+    /**
+     * Derives the corresponding public key for this private key.
+     *
+     * @param prefix - Optional address prefix (defaults to config.address_prefix)
+     * @returns PublicKey instance derived from this private key
+     */
+    createPublic(prefix) {
+        return new PublicKey(secp256k1.getPublicKey(this.key), prefix);
+    }
+    /**
+     * Returns the private key as a Wallet Import Format (WIF) encoded string.
+     * This includes network ID and checksum for safe storage/transmission.
+     *
+     * @returns WIF encoded private key string
+     */
+    toString() {
+        return encodePrivate(new Uint8Array([...NETWORK_ID, ...this.key]));
+    }
+    /**
+     * Returns a masked representation of the private key for debugging/logging.
+     * Shows only the first and last 6 characters to avoid accidental exposure.
+     * Use toString() to get the full key for export/serialization.
+     *
+     * @returns Masked key representation for safe logging
+     */
+    inspect() {
+        const key = this.toString();
+        return `PrivateKey: ${key.slice(0, 6)}...${key.slice(-6)}`;
+    }
+    /**
+     * Computes a shared secret using ECDH key exchange for memo encryption.
+     * The shared secret is used as a key for AES encryption/decryption.
+     *
+     * @param publicKey - Other party's public key
+     * @returns 64-byte shared secret as Uint8Array
+     */
+    getSharedSecret(publicKey) {
+        const s = secp256k1.getSharedSecret(this.key, publicKey.key);
+        // strip the parity byte
+        return sha512(s.subarray(1));
+    }
+    /**
+     * Generates a new cryptographically secure random private key.
+     * Uses the secp256k1 key generation algorithm for security.
+     * This method may take up to 250ms due to entropy collection.
+     *
+     * @returns New randomly generated PrivateKey instance
+     */
+    static randomKey() {
+        return new PrivateKey(secp256k1.keygen().secretKey);
+    }
+}
+const doubleSha256 = (input) => {
+    const dbl = sha256(sha256(input));
+    return dbl;
+};
+/** Encode bs58+doubleSha256-checksum private key. */
+const encodePrivate = (key) => {
+    // assert.equal(key.readUInt8(0), 0x80, 'private key network id mismatch')
+    const checksum = doubleSha256(key);
+    return bs58.encode(new Uint8Array([...key, ...checksum.slice(0, 4)]));
+};
+/** Decode bs58+doubleSha256-checksum encoded private key. */
+const decodePrivate = (encodedKey) => {
+    const buffer = bs58.decode(encodedKey);
+    if (!isUint8ArrayEqual(buffer.slice(0, 1), NETWORK_ID)) {
+        throw new Error('Private key network id mismatch');
+    }
+    const checksum = buffer.slice(-4);
+    const key = buffer.slice(0, -4);
+    const checksumVerify = doubleSha256(key).slice(0, 4);
+    if (!isUint8ArrayEqual(checksum, checksumVerify)) {
+        throw new Error('Private key checksum mismatch');
+    }
+    return key;
+};
+const isUint8ArrayEqual = (a, b) => {
+    if (a === b)
+        return true;
+    if (a.byteLength !== b.byteLength)
+        return false;
+    const len = a.byteLength;
+    let i = 0;
+    while (i < len && a[i] === b[i])
+        i++;
+    return i === len;
+};
+//# sourceMappingURL=PrivateKey.js.map

package/dist/esm/helpers/PrivateKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PrivateKey.js","sourceRoot":"","sources":["../../../src/helpers/PrivateKey.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAI/D,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,OAAO,UAAU;IAGrB,YAAY,GAAe;QACzB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC;YACH,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAA;QAC7B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;QACxC,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,CAAC,KAA0B;QACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACrC,CAAC;aAAM,CAAC;YACN,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,UAAU,CAAC,GAAW;QAC3B,OAAO,IAAI,UAAU,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IACvD,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,QAAQ,CAAC,IAAyB;QACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACzC,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAA;YACzB,CAAC;iBAAM,CAAC;gBACN,4DAA4D;gBAC5D,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YACvC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IACrC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,SAAS,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAgB,QAAQ;QAC3E,MAAM,IAAI,GAAG,QAAQ,GAAG,IAAI,GAAG,QAAQ,CAAA;QACvC,OAAO,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAClC,CAAC;IAED;;;;;;OAMG;IACH,IAAI,CAAC,OAAmB;QACtB,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;YAC3C,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,KAAK,CAAC,qCAAqC;SACrD,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC5D,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAClF,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,MAAe;QAC1B,OAAO,IAAI,SAAS,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAA;IAChE,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACN,OAAO,aAAa,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,UAAU,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACpE,CAAC;IAED;;;;;;OAMG;IACH,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAA;QAC3B,OAAO,eAAe,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5D,CAAC;IAED;;;;;;OAMG;IACH,eAAe,CAAC,SAAoB;QAClC,MAAM,CAAC,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAA;QAC5D,wBAAwB;QACxB,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,SAAS;QACd,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAA;IACrD,CAAC;CACF;AAED,MAAM,YAAY,GAAG,CAAC,KAAiB,EAAE,EAAE;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;IACjC,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,qDAAqD;AACrD,MAAM,aAAa,GAAG,CAAC,GAAe,EAAE,EAAE;IACxC,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAClC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACvE,CAAC,CAAA;AAED,6DAA6D;AAC7D,MAAM,aAAa,GAAG,CAAC,UAAkB,EAAE,EAAE;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACtC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/B,MAAM,cAAc,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACpD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,cAAc,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAClD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAa,EAAE,CAAa,EAAE,EAAE;IACzD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAAE,OAAO,KAAK,CAAA;IAC/C,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAA;IACxB,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,CAAC,EAAE,CAAA;IACpC,OAAO,CAAC,KAAK,GAAG,CAAA;AAClB,CAAC,CAAA"}

package/dist/esm/helpers/PublicKey.d.ts

@@ -0,0 +1,47 @@
+import { Signature } from './Signature';
+export declare class PublicKey {
+    key: Uint8Array;
+    prefix: string;
+    /**
+     * Creates a new PublicKey instance from raw bytes.
+     * @param key Raw public key bytes (33 bytes, compressed format)
+     * @param prefix Optional address prefix (defaults to config.address_prefix)
+     */
+    constructor(key: Uint8Array, prefix?: string);
+    /**
+     * Creates a PublicKey from a string representation.
+     * @param wif Public key string (e.g., "STM8m5UgaFAAYQRuaNejYdS8FVLVp9Ss3K1qAVk5de6F8s3HnVbvA")
+     * @returns New PublicKey instance
+     * @throws Error if the key format is invalid
+     */
+    static fromString(wif: string): PublicKey;
+    /**
+     * Creates a PublicKey from a string or returns the instance if already a PublicKey.
+     * @param value Public key string or PublicKey instance
+     * @returns New or existing PublicKey instance
+     */
+    static from(value: string | PublicKey): PublicKey;
+    /**
+     * Verifies a signature against a message hash.
+     * @param message 32-byte message hash to verify
+     * @param signature Signature to verify
+     * @returns True if signature is valid, false otherwise
+     */
+    verify(message: Uint8Array, signature: Signature | string): boolean;
+    /**
+     * Returns the public key as a string for storage or transmission.
+     * @returns Public key string with prefix (e.g., "STM8m5UgaFAAYQRuaNejYdS8FVLVp9Ss3K1qAVk5de6F8s3HnVbvA")
+     */
+    toString(): string;
+    /**
+     * Returns JSON representation (same as toString()).
+     * @returns Public key string
+     */
+    toJSON(): string;
+    /**
+     * Returns a string representation for debugging.
+     * @returns Formatted public key string
+     */
+    inspect(): string;
+}
+//# sourceMappingURL=PublicKey.d.ts.map

package/dist/esm/helpers/PublicKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicKey.d.ts","sourceRoot":"","sources":["../../../src/helpers/PublicKey.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAIvC,qBAAa,SAAS;IACpB,GAAG,EAAE,UAAU,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;IAEd;;;;OAIG;gBACS,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM;IAM5C;;;;;OAKG;IACH,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS;IAKzC;;;;OAIG;IACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAQjD;;;;;OAKG;IACH,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,GAAG,OAAO;IAUnE;;;OAGG;IACH,QAAQ,IAAI,MAAM;IAIlB;;;OAGG;IACH,MAAM,IAAI,MAAM;IAIhB;;;OAGG;IACH,OAAO,IAAI,MAAM;CAGlB"}

package/dist/esm/helpers/PublicKey.js

@@ -0,0 +1,90 @@
+import { ripemd160 } from '@noble/hashes/legacy.js';
+import bs58 from 'bs58';
+import { config } from '../config';
+import { secp256k1 } from '@noble/curves/secp256k1.js';
+import { Signature } from './Signature';
+const DEFAULT_ADDRESS_PREFIX = config.address_prefix;
+export class PublicKey {
+    /**
+     * Creates a new PublicKey instance from raw bytes.
+     * @param key Raw public key bytes (33 bytes, compressed format)
+     * @param prefix Optional address prefix (defaults to config.address_prefix)
+     */
+    constructor(key, prefix) {
+        this.key = key;
+        this.prefix = prefix ?? DEFAULT_ADDRESS_PREFIX;
+        // assert(secp256k1.publicKeyVerify(key), 'invalid public key')
+    }
+    /**
+     * Creates a PublicKey from a string representation.
+     * @param wif Public key string (e.g., "STM8m5UgaFAAYQRuaNejYdS8FVLVp9Ss3K1qAVk5de6F8s3HnVbvA")
+     * @returns New PublicKey instance
+     * @throws Error if the key format is invalid
+     */
+    static fromString(wif) {
+        const { key, prefix } = decodePublic(wif);
+        return new PublicKey(key, prefix);
+    }
+    /**
+     * Creates a PublicKey from a string or returns the instance if already a PublicKey.
+     * @param value Public key string or PublicKey instance
+     * @returns New or existing PublicKey instance
+     */
+    static from(value) {
+        if (value instanceof PublicKey) {
+            return value;
+        }
+        else {
+            return PublicKey.fromString(value);
+        }
+    }
+    /**
+     * Verifies a signature against a message hash.
+     * @param message 32-byte message hash to verify
+     * @param signature Signature to verify
+     * @returns True if signature is valid, false otherwise
+     */
+    verify(message, signature) {
+        if (typeof signature === 'string') {
+            signature = Signature.from(signature);
+        }
+        return secp256k1.verify(signature.data, message, this.key, {
+            prehash: false,
+            format: 'compact'
+        });
+    }
+    /**
+     * Returns the public key as a string for storage or transmission.
+     * @returns Public key string with prefix (e.g., "STM8m5UgaFAAYQRuaNejYdS8FVLVp9Ss3K1qAVk5de6F8s3HnVbvA")
+     */
+    toString() {
+        return encodePublic(this.key, this.prefix);
+    }
+    /**
+     * Returns JSON representation (same as toString()).
+     * @returns Public key string
+     */
+    toJSON() {
+        return this.toString();
+    }
+    /**
+     * Returns a string representation for debugging.
+     * @returns Formatted public key string
+     */
+    inspect() {
+        return `PublicKey: ${this.toString()}`;
+    }
+}
+const encodePublic = (key, prefix) => {
+    const checksum = ripemd160(key);
+    return prefix + bs58.encode(new Uint8Array([...key, ...checksum.subarray(0, 4)]));
+};
+/** Decode bs58+ripemd160-checksum encoded public key. */
+const decodePublic = (encodedKey) => {
+    const prefix = encodedKey.slice(0, 3);
+    encodedKey = encodedKey.slice(3);
+    const buffer = bs58.decode(encodedKey);
+    const key = buffer.subarray(0, buffer.length - 4);
+    return { key: key, prefix };
+};
+//# sourceMappingURL=PublicKey.js.map

package/dist/esm/helpers/PublicKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicKey.js","sourceRoot":"","sources":["../../../src/helpers/PublicKey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvC,MAAM,sBAAsB,GAAG,MAAM,CAAC,cAAc,CAAA;AAEpD,MAAM,OAAO,SAAS;IAIpB;;;;OAIG;IACH,YAAY,GAAe,EAAE,MAAe;QAC1C,IAAI,CAAC,GAAG,GAAG,GAAG,CAAA;QACd,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,sBAAsB,CAAA;QAC9C,+DAA+D;IACjE,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,UAAU,CAAC,GAAW;QAC3B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;QACzC,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACnC,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,IAAI,CAAC,KAAyB;QACnC,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAA;QACd,CAAC;aAAM,CAAC;YACN,OAAO,SAAS,CAAC,UAAU,CAAC,KAAe,CAAC,CAAA;QAC9C,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,OAAmB,EAAE,SAA6B;QACvD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACvC,CAAC;QACD,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;YACzD,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS;SAClB,CAAC,CAAA;IACJ,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAA;IAC5C,CAAC;IAED;;;OAGG;IACH,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAA;IACxB,CAAC;IAED;;;OAGG;IACH,OAAO;QACL,OAAO,cAAc,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAA;IACxC,CAAC;CACF;AAED,MAAM,YAAY,GAAG,CAAC,GAAe,EAAE,MAAc,EAAU,EAAE;IAC/D,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAC/B,OAAO,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACnF,CAAC,CAAA;AAED,yDAAyD;AACzD,MAAM,YAAY,GAAG,CAAC,UAAkB,EAAE,EAAE;IAC1C,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACrC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IACtC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACjD,OAAO,EAAE,GAAG,EAAE,GAAiB,EAAE,MAAM,EAAE,CAAA;AAC3C,CAAC,CAAA"}

package/dist/esm/helpers/Signature.d.ts

@@ -0,0 +1,38 @@
+import { PublicKey } from './PublicKey';
+export declare class Signature {
+    data: Uint8Array;
+    recovery: number;
+    private compressed;
+    /**
+     * Creates a new Signature instance.
+     * @param data Raw signature data (64 bytes)
+     * @param recovery Recovery byte (0-3)
+     * @param compressed Whether signature is compressed (default: true)
+     */
+    constructor(data: Uint8Array, recovery: number, compressed?: boolean);
+    /**
+     * Creates a Signature from a hex string.
+     * @param string 130-character hex string containing signature and recovery data
+     * @returns New Signature instance
+     * @throws Error if input is not a string
+     */
+    static from(string: string): Signature;
+    /**
+     * Converts signature to 65-byte buffer format.
+     * @returns 65-byte buffer containing recovery byte + signature data
+     */
+    toBuffer(): Uint8Array<ArrayBuffer>;
+    /**
+     * Returns signature as 130-character hex string.
+     * @returns Hex string representation of signature
+     */
+    customToString(): string;
+    /**
+     * Recovers the public key from this signature and message.
+     * @param message 32-byte message hash (Uint8Array) or 64-character hex string
+     * @returns PublicKey that created this signature
+     * @throws Error if message is not a valid 32-byte SHA256 hash
+     */
+    getPublicKey(message: Uint8Array | string): PublicKey;
+}
+//# sourceMappingURL=Signature.d.ts.map

package/dist/esm/helpers/Signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Signature.d.ts","sourceRoot":"","sources":["../../../src/helpers/Signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAIvC,qBAAa,SAAS;IACpB,IAAI,EAAE,UAAU,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,UAAU,CAAS;IAE3B;;;;;OAKG;gBACS,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,OAAO;IAMpE;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM;IAkB1B;;;OAGG;IACH,QAAQ;IAWR;;;OAGG;IACH,cAAc;IAId;;;;;OAKG;IACH,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS;CActD"}

package/dist/esm/helpers/Signature.js

@@ -0,0 +1,81 @@
+import { PublicKey } from './PublicKey';
+import { secp256k1 } from '@noble/curves/secp256k1.js';
+import { bytesToHex, hexToBytes } from '@noble/hashes/utils.js';
+export class Signature {
+    /**
+     * Creates a new Signature instance.
+     * @param data Raw signature data (64 bytes)
+     * @param recovery Recovery byte (0-3)
+     * @param compressed Whether signature is compressed (default: true)
+     */
+    constructor(data, recovery, compressed) {
+        this.data = data;
+        this.recovery = recovery;
+        this.compressed = compressed ?? true;
+    }
+    /**
+     * Creates a Signature from a hex string.
+     * @param string 130-character hex string containing signature and recovery data
+     * @returns New Signature instance
+     * @throws Error if input is not a string
+     */
+    static from(string) {
+        if (typeof string === 'string') {
+            const temp = hexToBytes(string);
+            let recovery = parseInt(bytesToHex(temp.subarray(0, 1)), 16) - 31;
+            let compressed = true;
+            // non-compressed signatures have -4
+            // https://github.com/bitcoin/bitcoin/blob/95ea54ba089610019a74c1176a2c7c0dba144b1c/src/key.cpp#L257
+            if (recovery < 0) {
+                compressed = false;
+                recovery = recovery + 4;
+            }
+            const data = temp.subarray(1);
+            return new Signature(data, recovery, compressed);
+        }
+        else {
+            throw new Error('Expected string for data');
+        }
+    }
+    /**
+     * Converts signature to 65-byte buffer format.
+     * @returns 65-byte buffer containing recovery byte + signature data
+     */
+    toBuffer() {
+        const buffer = new Uint8Array(65).fill(0);
+        if (this.compressed) {
+            buffer[0] = (this.recovery + 31) & 0xff;
+        }
+        else {
+            buffer[0] = (this.recovery + 27) & 0xff;
+        }
+        buffer.set(this.data, 1);
+        return buffer;
+    }
+    /**
+     * Returns signature as 130-character hex string.
+     * @returns Hex string representation of signature
+     */
+    customToString() {
+        return bytesToHex(this.toBuffer());
+    }
+    /**
+     * Recovers the public key from this signature and message.
+     * @param message 32-byte message hash (Uint8Array) or 64-character hex string
+     * @returns PublicKey that created this signature
+     * @throws Error if message is not a valid 32-byte SHA256 hash
+     */
+    getPublicKey(message) {
+        if ((message instanceof Uint8Array && message.length !== 32) ||
+            (typeof message === 'string' && message.length !== 64)) {
+            throw new Error('Expected a valid sha256 hash as message');
+        }
+        if (typeof message === 'string') {
+            message = hexToBytes(message);
+        }
+        const sig = secp256k1.Signature.fromBytes(this.data, 'compact');
+        const temp = new secp256k1.Signature(sig.r, sig.s, this.recovery);
+        return new PublicKey(temp.recoverPublicKey(message).toBytes());
+    }
+}
+//# sourceMappingURL=Signature.js.map

package/dist/esm/helpers/Signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Signature.js","sourceRoot":"","sources":["../../../src/helpers/Signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAE/D,MAAM,OAAO,SAAS;IAKpB;;;;;OAKG;IACH,YAAY,IAAgB,EAAE,QAAgB,EAAE,UAAoB;QAClE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,IAAI,CAAA;IACtC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,MAAc;QACxB,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAA;YAC/B,IAAI,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,CAAA;YACjE,IAAI,UAAU,GAAG,IAAI,CAAA;YACrB,oCAAoC;YACpC,oGAAoG;YACpG,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,UAAU,GAAG,KAAK,CAAA;gBAClB,QAAQ,GAAG,QAAQ,GAAG,CAAC,CAAA;YACzB,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;YAC7B,OAAO,IAAI,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAA;QAClD,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC7C,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACzC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,GAAG,IAAI,CAAA;QACzC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,EAAE,CAAC,GAAG,IAAI,CAAA;QACzC,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACxB,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;OAGG;IACH,cAAc;QACZ,OAAO,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;IACpC,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,OAA4B;QACvC,IACE,CAAC,OAAO,YAAY,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,CAAC;YACxD,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,CAAC,EACtD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;QAC5D,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAA;QAC/B,CAAC;QACD,MAAM,GAAG,GAAG,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QAC/D,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAA;QACjE,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;IAChE,CAAC;CACF"}

package/dist/esm/helpers/aes.d.ts

@@ -0,0 +1,15 @@
+import { PrivateKey } from './PrivateKey';
+import { PublicKey } from './PublicKey';
+export declare const encrypt: (privateKey: PrivateKey, publicKey: PublicKey, message: Uint8Array, nonce?: bigint) => {
+    nonce: bigint;
+    message: Uint8Array;
+    checksum: number;
+};
+export declare const decrypt: (privateKey: PrivateKey, publicKey: PublicKey, nonce: bigint, message: Uint8Array, checksum: number) => Uint8Array;
+/**
+ * This method does not use a checksum, the returned data must be validated some other way.
+ * @arg {string|Uint8Array} plaintext - binary format
+ * @return {Uint8Array} binary
+ */
+export declare const cryptoJsEncrypt: (message: Uint8Array, tag: Uint8Array, iv: Uint8Array) => Uint8Array;
+//# sourceMappingURL=aes.d.ts.map

package/dist/esm/helpers/aes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aes.d.ts","sourceRoot":"","sources":["../../../src/helpers/aes.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEvC,eAAO,MAAM,OAAO,GAClB,YAAY,UAAU,EACtB,WAAW,SAAS,EACpB,SAAS,UAAU,EACnB,QAAO,MAAsB;WAwBnB,MAAM;aAAW,UAAU;cAAY,MAAM;CAvBR,CAAA;AAEjD,eAAO,MAAM,OAAO,GAClB,YAAY,UAAU,EACtB,WAAW,SAAS,EACpB,OAAO,MAAM,EACb,SAAS,UAAU,EACnB,UAAU,MAAM,KACf,UAGF,CAAA;AAsDD;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAC1B,SAAS,UAAU,EACnB,KAAK,UAAU,EACf,IAAI,UAAU,KACb,UAMF,CAAA"}