@guveno/wallet-sdk 1.0.0

package/dist/mnemonic.js

@@ -0,0 +1,44 @@
+import { createHash } from 'node:crypto';
+import { generateMnemonic, validateMnemonic } from '@scure/bip39';
+import { wordlist as englishWordlist } from '@scure/bip39/wordlists/english.js';
+import { SUPPORTED_MNEMONIC_WORD_COUNTS } from './constants.js';
+import { ValidationError } from './errors.js';
+export function normalizeMnemonic(mnemonic) {
+    return mnemonic
+        .trim()
+        .toLowerCase()
+        .split(/\s+/)
+        .filter(Boolean)
+        .join(' ');
+}
+export function getMnemonicWordCount(mnemonic) {
+    const normalized = normalizeMnemonic(mnemonic);
+    return normalized.length === 0 ? 0 : normalized.split(' ').length;
+}
+export function isSupportedMnemonicWordCount(count) {
+    return SUPPORTED_MNEMONIC_WORD_COUNTS.includes(count);
+}
+export function assertValidMnemonic(mnemonic) {
+    const normalized = normalizeMnemonic(mnemonic);
+    const wordCount = getMnemonicWordCount(normalized);
+    if (!isSupportedMnemonicWordCount(wordCount)) {
+        throw new ValidationError('Mnemonic must contain exactly 12 or 24 words.');
+    }
+    if (!validateMnemonic(normalized, englishWordlist)) {
+        throw new ValidationError('Mnemonic is not a valid BIP39 English mnemonic.');
+    }
+    return normalized;
+}
+export function generateRandomMnemonic(wordCount = 12) {
+    const strength = wordCount === 12 ? 128 : 256;
+    return generateMnemonic(englishWordlist, strength);
+}
+/**
+ * SHA-256 of the trimmed mnemonic, hex-encoded — the `keyFingerprint` a wallet is
+ * registered under. Used to confirm a key provider returned the mnemonic that
+ * actually belongs to a given wallet before signing.
+ */
+export function fingerprintMnemonic(mnemonic) {
+    return createHash('sha256').update(mnemonic.trim(), 'utf8').digest('hex');
+}
+//# sourceMappingURL=mnemonic.js.map

package/dist/mnemonic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mnemonic.js","sourceRoot":"","sources":["../src/mnemonic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAChF,OAAO,EAAE,8BAA8B,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,QAAQ;SACZ,IAAI,EAAE;SACN,WAAW,EAAE;SACb,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAa;IACxD,OAAO,8BAA8B,CAAC,QAAQ,CAAC,KAA0B,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAEnD,IAAI,CAAC,4BAA4B,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,eAAe,CAAC,+CAA+C,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,eAAe,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CAAC,iDAAiD,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,YAA+B,EAAE;IACtE,MAAM,QAAQ,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9C,OAAO,gBAAgB,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC"}

package/dist/session/file-store.d.ts

@@ -0,0 +1,10 @@
+import type { ApiSession, ApiSessionStore } from '../api/types.js';
+export declare class FileSystemApiSessionStore implements ApiSessionStore {
+    readonly rootDir: string;
+    private readonly sessionPath;
+    constructor(storageDir?: string);
+    read(): Promise<ApiSession | null>;
+    write(session: ApiSession): Promise<void>;
+    clear(): Promise<void>;
+}
+//# sourceMappingURL=file-store.d.ts.map

package/dist/session/file-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-store.d.ts","sourceRoot":"","sources":["../../src/session/file-store.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AA6CnE,qBAAa,yBAA0B,YAAW,eAAe;IAC/D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;gBAEzB,UAAU,CAAC,EAAE,MAAM;IAKzB,IAAI,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAmBlC,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUzC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAa7B"}

package/dist/session/file-store.js

@@ -0,0 +1,88 @@
+import { promises as fs } from 'node:fs';
+import { randomUUID } from 'node:crypto';
+import path from 'node:path';
+import { z } from 'zod';
+import { StorageError } from '../errors.js';
+import { resolveStorageDir } from '../storage/file-store.js';
+const jsonObjectSchema = z.record(z.string(), z.unknown());
+const companyMembershipSchema = z.object({
+    id: z.number().int().positive(),
+    name: z.string(),
+    role: z.enum(['owner', 'admin', 'manager', 'signer', 'viewer'])
+});
+const userEncryptionKeySchema = z.object({
+    id: z.uuid(),
+    publicKey: z.string(),
+    encryptedPrivateKeyJson: jsonObjectSchema,
+    createdAt: z.iso.datetime(),
+    updatedAt: z.iso.datetime()
+});
+const apiUserSchema = z.object({
+    id: z.number().int().positive(),
+    email: z.email(),
+    company: companyMembershipSchema.nullable(),
+    encryptionKey: userEncryptionKeySchema.nullable(),
+    createdAt: z.iso.datetime(),
+    updatedAt: z.iso.datetime()
+});
+const sessionSchema = z.object({
+    baseUrl: z.url(),
+    accessToken: z.string().min(1),
+    tokenType: z.literal('Bearer'),
+    expiresIn: z.string().min(1),
+    user: apiUserSchema,
+    authenticatedAt: z.iso.datetime()
+});
+async function writeJsonAtomic(filePath, value) {
+    const dir = path.dirname(filePath);
+    const tempPath = path.join(dir, `${path.basename(filePath)}.${randomUUID()}.tmp`);
+    const payload = `${JSON.stringify(value, null, 2)}\n`;
+    await fs.writeFile(tempPath, payload, { encoding: 'utf8', mode: 0o600 });
+    await fs.rename(tempPath, filePath);
+}
+export class FileSystemApiSessionStore {
+    rootDir;
+    sessionPath;
+    constructor(storageDir) {
+        this.rootDir = resolveStorageDir(storageDir);
+        this.sessionPath = path.join(this.rootDir, 'auth-session.json');
+    }
+    async read() {
+        await fs.mkdir(this.rootDir, { recursive: true, mode: 0o700 });
+        try {
+            const raw = await fs.readFile(this.sessionPath, 'utf8');
+            return sessionSchema.parse(JSON.parse(raw));
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return null;
+            }
+            if (error instanceof z.ZodError) {
+                throw new StorageError(`Session file ${this.sessionPath} is malformed.`, { cause: error });
+            }
+            throw new StorageError('Failed to read the API session store.', { cause: error });
+        }
+    }
+    async write(session) {
+        await fs.mkdir(this.rootDir, { recursive: true, mode: 0o700 });
+        try {
+            await writeJsonAtomic(this.sessionPath, session);
+        }
+        catch (error) {
+            throw new StorageError('Failed to persist the API session store.', { cause: error });
+        }
+    }
+    async clear() {
+        try {
+            await fs.unlink(this.sessionPath);
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === 'ENOENT') {
+                return;
+            }
+            throw new StorageError('Failed to clear the API session store.', { cause: error });
+        }
+    }
+}
+//# sourceMappingURL=file-store.js.map

package/dist/session/file-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-store.js","sourceRoot":"","sources":["../../src/session/file-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAG7D,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAE3D,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;CAChE,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,uBAAuB,EAAE,gBAAgB;IACzC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE;IAChB,OAAO,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC3C,aAAa,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,aAAa;IACnB,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,KAAK,UAAU,eAAe,CAAC,QAAgB,EAAE,KAAc;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAEtD,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,OAAO,yBAAyB;IAC3B,OAAO,CAAS;IACR,WAAW,CAAS;IAErC,YAAY,UAAmB;QAC7B,IAAI,CAAC,OAAO,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE/D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACxD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAe,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAChC,MAAM,IAAI,YAAY,CAAC,gBAAgB,IAAI,CAAC,WAAW,gBAAgB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7F,CAAC;YAED,MAAM,IAAI,YAAY,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAmB;QAC7B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAE/D,IAAI,CAAC;YACH,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,YAAY,CAAC,0CAA0C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;YAEnD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YAED,MAAM,IAAI,YAAY,CAAC,wCAAwC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF"}

package/dist/signing/sign-bitcoin.d.ts

@@ -0,0 +1,14 @@
+import type { SigningPayload } from './types.js';
+/**
+ * Builds and signs a P2WPKH (native SegWit) Bitcoin withdrawal for a prepared
+ * payload, returning the signed raw transaction hex the server broadcasts.
+ *
+ * The server selects the source address's UTXOs and supplies the fee rate and
+ * change address; this signer spends all of them, pays the requested output(s),
+ * computes the fee from the fee rate and the transaction's virtual size, and
+ * returns the remainder as change to the source address (dropping it into the
+ * fee when it would be dust). The private key is derived in-process from the
+ * mnemonic and never leaves the caller.
+ */
+export declare function signBitcoinWithdrawal(payload: SigningPayload, mnemonic: string, derivationPath: string): string;
+//# sourceMappingURL=sign-bitcoin.d.ts.map

package/dist/signing/sign-bitcoin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-bitcoin.d.ts","sourceRoot":"","sources":["../../src/signing/sign-bitcoin.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAoC,cAAc,EAAE,MAAM,YAAY,CAAC;AA6CnF;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CA8F/G"}

package/dist/signing/sign-bitcoin.js

@@ -0,0 +1,133 @@
+import { mnemonicToSeedSync } from '@scure/bip39';
+import { BIP32Factory } from 'bip32';
+import { address as btcAddress, initEccLib, networks, payments, Psbt } from 'bitcoinjs-lib';
+import * as ecc from 'tiny-secp256k1';
+initEccLib(ecc);
+const bip32 = BIP32Factory(ecc);
+// Outputs below this many sats cost more to spend than they're worth, so we fold
+// a sub-dust change amount into the fee rather than create an unspendable output.
+// 294 sats is the standard relay dust limit for a P2WPKH output.
+const DUST_THRESHOLD = 294n;
+// Conservative virtual-size constants (vbytes) for fee estimation. We round up so
+// we never underpay and risk the transaction being rejected by the mempool.
+//   - overhead: nVersion(4) + segwit marker+flag(0.5) + in/out var-ints + locktime(4)
+//   - P2WPKH input: 36 outpoint + 4 sequence + 1 empty scriptSig + ~27 witness
+const TX_OVERHEAD_VBYTES = 11;
+const P2WPKH_INPUT_VBYTES = 68;
+/** Serialized-output virtual size: 8-byte value + var-int script length + script. */
+function outputVbytes(script) {
+    const length = script.length;
+    const varint = length < 0xfd ? 1 : 3;
+    return 8 + varint + length;
+}
+/**
+ * Converts a decimal display amount (e.g. "0.25") to integer base units (sats)
+ * without floating point. Rejects amounts with more precision than the asset allows.
+ */
+function toBaseUnits(amount, decimals) {
+    const trimmed = amount.trim();
+    const parts = trimmed.split('.');
+    if (parts.length > 2) {
+        throw new Error(`Invalid Bitcoin amount "${amount}".`);
+    }
+    const whole = parts[0] ?? '';
+    const fraction = parts[1] ?? '';
+    if (!/^\d+$/.test(whole) || (fraction !== '' && !/^\d+$/.test(fraction))) {
+        throw new Error(`Invalid Bitcoin amount "${amount}".`);
+    }
+    if (fraction.length > decimals) {
+        throw new Error(`Amount "${amount}" has more than ${decimals} decimal places.`);
+    }
+    return BigInt(whole + fraction.padEnd(decimals, '0'));
+}
+/**
+ * Builds and signs a P2WPKH (native SegWit) Bitcoin withdrawal for a prepared
+ * payload, returning the signed raw transaction hex the server broadcasts.
+ *
+ * The server selects the source address's UTXOs and supplies the fee rate and
+ * change address; this signer spends all of them, pays the requested output(s),
+ * computes the fee from the fee rate and the transaction's virtual size, and
+ * returns the remainder as change to the source address (dropping it into the
+ * fee when it would be dust). The private key is derived in-process from the
+ * mnemonic and never leaves the caller.
+ */
+export function signBitcoinWithdrawal(payload, mnemonic, derivationPath) {
+    const state = payload.chainState;
+    if (state == null) {
+        throw new Error('Missing Bitcoin chain state from the server.');
+    }
+    if (!Array.isArray(state.utxos) || state.utxos.length === 0) {
+        throw new Error('No spendable UTXOs are available for this address.');
+    }
+    const network = payload.network === 'testnet' ? networks.testnet : networks.bitcoin;
+    const seed = mnemonicToSeedSync(mnemonic);
+    const node = bip32.fromSeed(Buffer.from(seed), network).derivePath(derivationPath);
+    const source = payments.p2wpkh({ pubkey: Buffer.from(node.publicKey), network });
+    if (source.address == null || source.output == null) {
+        throw new Error('Unable to derive the Bitcoin signing key.');
+    }
+    // Safety net: the derived key must own the source address (and therefore the
+    // UTXOs). A mismatch means a wrong path/mnemonic — fail before signing.
+    if (source.address !== payload.sourceAddress) {
+        throw new Error(`Derived address ${source.address} does not match the withdrawal's source ${payload.sourceAddress}.`);
+    }
+    const sourceScript = Buffer.from(source.output);
+    const decimals = payload.asset.decimals;
+    const recipients = payload.outputs != null && payload.outputs.length > 0
+        ? payload.outputs
+        : payload.toAddress != null
+            ? [{ toAddress: payload.toAddress, amount: payload.amount }]
+            : [];
+    if (recipients.length === 0) {
+        throw new Error('Bitcoin withdrawals require at least one output.');
+    }
+    // Resolve each recipient to a value + output script (also validates the address
+    // belongs to this network).
+    const outputs = recipients.map((recipient) => {
+        const value = toBaseUnits(recipient.amount, decimals);
+        if (value <= 0n) {
+            throw new Error('Each Bitcoin output amount must be greater than zero.');
+        }
+        return { value, script: btcAddress.toOutputScript(recipient.toAddress, network) };
+    });
+    const totalIn = state.utxos.reduce((sum, utxo) => sum + BigInt(utxo.value), 0n);
+    const totalOut = outputs.reduce((sum, output) => sum + output.value, 0n);
+    const feeRate = BigInt(Math.max(1, Math.ceil(state.feeRate)));
+    const changeScript = btcAddress.toOutputScript(state.changeAddress ?? payload.sourceAddress, network);
+    const baseVbytes = TX_OVERHEAD_VBYTES +
+        state.utxos.length * P2WPKH_INPUT_VBYTES +
+        outputs.reduce((sum, output) => sum + outputVbytes(output.script), 0);
+    // First assume a change output exists; if the leftover is dust, drop it and let
+    // the whole remainder be the fee.
+    const feeWithChange = BigInt(baseVbytes + outputVbytes(changeScript)) * feeRate;
+    const change = totalIn - totalOut - feeWithChange;
+    const finalOutputs = outputs.map((output) => ({ script: output.script, value: output.value }));
+    if (change >= DUST_THRESHOLD) {
+        finalOutputs.push({ script: changeScript, value: change });
+    }
+    else {
+        const feeWithoutChange = BigInt(baseVbytes) * feeRate;
+        if (totalIn < totalOut + feeWithoutChange) {
+            throw new Error('Insufficient funds to cover the withdrawal and network fee.');
+        }
+    }
+    const psbt = new Psbt({ network });
+    for (const utxo of state.utxos) {
+        psbt.addInput({
+            hash: utxo.txid,
+            index: utxo.vout,
+            witnessUtxo: { script: sourceScript, value: BigInt(utxo.value) },
+        });
+    }
+    for (const output of finalOutputs) {
+        psbt.addOutput({ script: output.script, value: output.value });
+    }
+    const signer = {
+        publicKey: Buffer.from(node.publicKey),
+        sign: (hash) => Buffer.from(node.sign(hash)),
+    };
+    psbt.signAllInputs(signer);
+    psbt.finalizeAllInputs();
+    return psbt.extractTransaction().toHex();
+}
+//# sourceMappingURL=sign-bitcoin.js.map

package/dist/signing/sign-bitcoin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-bitcoin.js","sourceRoot":"","sources":["../../src/signing/sign-bitcoin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAC5F,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AAGtC,UAAU,CAAC,GAAG,CAAC,CAAC;AAChB,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AAEhC,iFAAiF;AACjF,kFAAkF;AAClF,iEAAiE;AACjE,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,kFAAkF;AAClF,4EAA4E;AAC5E,sFAAsF;AACtF,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,qFAAqF;AACrF,SAAS,YAAY,CAAC,MAAkB;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,MAAc,EAAE,QAAgB;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,mBAAmB,QAAQ,kBAAkB,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAuB,EAAE,QAAgB,EAAE,cAAsB;IACrG,MAAM,KAAK,GAAG,OAAO,CAAC,UAA2C,CAAC;IAClE,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;IAEpF,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,CAAC,OAAO,2CAA2C,OAAO,CAAC,aAAa,GAAG,CACrG,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;IACxC,MAAM,UAAU,GACd,OAAO,CAAC,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACnD,CAAC,CAAC,OAAO,CAAC,OAAO;QACjB,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI;YACzB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;YAC5D,CAAC,CAAC,EAAE,CAAC;IACX,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,gFAAgF;IAChF,4BAA4B;IAC5B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtD,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAE9D,MAAM,YAAY,GAAG,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAEtG,MAAM,UAAU,GACd,kBAAkB;QAClB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,mBAAmB;QACxC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAExE,gFAAgF;IAChF,kCAAkC;IAClC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC,GAAG,OAAO,CAAC;IAChF,MAAM,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,aAAa,CAAC;IAElD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE/F,IAAI,MAAM,IAAI,cAAc,EAAE,CAAC;QAC7B,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,MAAM,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC;QACtD,IAAI,OAAO,GAAG,QAAQ,GAAG,gBAAgB,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,IAAI;YAChB,WAAW,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;QAClC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QACtC,IAAI,EAAE,CAAC,IAAY,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAC7D,CAAC;IACF,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAEzB,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,CAAC;AAC3C,CAAC"}

package/dist/signing/sign-ethereum.d.ts

@@ -0,0 +1,13 @@
+import type { SigningPayload } from './types.js';
+/** Optional caller-set gas, in wei (fees) and gas units (limit). Each falls back to the server suggestion. */
+export interface EthereumGasOverrides {
+    maxFeePerGas?: string;
+    maxPriorityFeePerGas?: string;
+    gasLimit?: string;
+}
+/**
+ * Builds and signs an EIP-1559 Ethereum transaction for a prepared withdrawal.
+ * Returns a serialized signed tx the server relays via `provider.broadcastTransaction`.
+ */
+export declare function signEthereumWithdrawal(payload: SigningPayload, mnemonic: string, derivationPath: string, overrides?: EthereumGasOverrides): Promise<string>;
+//# sourceMappingURL=sign-ethereum.d.ts.map

package/dist/signing/sign-ethereum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-ethereum.d.ts","sourceRoot":"","sources":["../../src/signing/sign-ethereum.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAsB,cAAc,EAAE,MAAM,YAAY,CAAC;AAIrE,8GAA8G;AAC9G,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,SAAS,CAAC,EAAE,oBAAoB,GAC/B,OAAO,CAAC,MAAM,CAAC,CA6CjB"}

package/dist/signing/sign-ethereum.js

@@ -0,0 +1,49 @@
+import { HDNodeWallet, Interface, parseUnits } from 'ethers';
+const ERC20_INTERFACE = new Interface(['function transfer(address to,uint256 amount)']);
+/**
+ * Builds and signs an EIP-1559 Ethereum transaction for a prepared withdrawal.
+ * Returns a serialized signed tx the server relays via `provider.broadcastTransaction`.
+ */
+export async function signEthereumWithdrawal(payload, mnemonic, derivationPath, overrides) {
+    const state = payload.chainState;
+    if (!state) {
+        throw new Error('Missing Ethereum chain state from the server.');
+    }
+    if (!payload.toAddress) {
+        throw new Error('Ethereum withdrawals require a destination address.');
+    }
+    const wallet = HDNodeWallet.fromPhrase(mnemonic, undefined, derivationPath);
+    const value = parseUnits(payload.amount, payload.asset.decimals);
+    // Nonce and chainId are correctness-critical and never overridable; gas is.
+    const maxFeePerGas = BigInt(overrides?.maxFeePerGas ?? state.maxFeePerGas);
+    const maxPriorityFeePerGas = BigInt(overrides?.maxPriorityFeePerGas ?? state.maxPriorityFeePerGas);
+    const gasLimit = BigInt(overrides?.gasLimit ?? state.gasLimit);
+    if (maxPriorityFeePerGas > maxFeePerGas) {
+        throw new Error('Max priority fee cannot exceed max fee.');
+    }
+    const base = {
+        nonce: state.nonce,
+        chainId: BigInt(state.chainId),
+        maxFeePerGas,
+        maxPriorityFeePerGas,
+        gasLimit,
+        type: 2
+    };
+    let request;
+    if (payload.asset.type === 'erc20') {
+        if (!payload.asset.contractAddress) {
+            throw new Error('ERC20 asset is missing its contract address.');
+        }
+        request = {
+            ...base,
+            to: payload.asset.contractAddress,
+            value: 0n,
+            data: ERC20_INTERFACE.encodeFunctionData('transfer', [payload.toAddress, value])
+        };
+    }
+    else {
+        request = { ...base, to: payload.toAddress, value };
+    }
+    return wallet.signTransaction(request);
+}
+//# sourceMappingURL=sign-ethereum.js.map

package/dist/signing/sign-ethereum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-ethereum.js","sourceRoot":"","sources":["../../src/signing/sign-ethereum.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAA2B,MAAM,QAAQ,CAAC;AAGtF,MAAM,eAAe,GAAG,IAAI,SAAS,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC;AASxF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAuB,EACvB,QAAgB,EAChB,cAAsB,EACtB,SAAgC;IAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,UAA4C,CAAC;IACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAEjE,4EAA4E;IAC5E,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,EAAE,YAAY,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3E,MAAM,oBAAoB,GAAG,MAAM,CAAC,SAAS,EAAE,oBAAoB,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,oBAAoB,GAAG,YAAY,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,IAAI,GAAuB;QAC/B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,YAAY;QACZ,oBAAoB;QACpB,QAAQ;QACR,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,IAAI,OAA2B,CAAC;IAChC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,GAAG;YACR,GAAG,IAAI;YACP,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,eAAe;YACjC,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,eAAe,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;SACjF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/dist/signing/sign-polkadot.d.ts

@@ -0,0 +1,9 @@
+import type { SigningPayload } from './types.js';
+/**
+ * Builds and signs a `balances.transferKeepAlive` extrinsic for a prepared
+ * Polkadot withdrawal. Fully offline: the server-supplied {@link PolkadotChainState}
+ * carries the runtime metadata so the call is SCALE-encoded here without any RPC.
+ * Returns the signed extrinsic hex the server relays via `author.submitExtrinsic`.
+ */
+export declare function signPolkadotWithdrawal(payload: SigningPayload, mnemonic: string, derivationPath: string): Promise<string>;
+//# sourceMappingURL=sign-polkadot.d.ts.map

package/dist/signing/sign-polkadot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-polkadot.d.ts","sourceRoot":"","sources":["../../src/signing/sign-polkadot.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAsB,cAAc,EAAE,MAAM,YAAY,CAAC;AAoBrE;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,CA2DjB"}

package/dist/signing/sign-polkadot.js

@@ -0,0 +1,79 @@
+import { Keyring } from '@polkadot/keyring';
+import { u8aEq } from '@polkadot/util';
+import { cryptoWaitReady, decodeAddress } from '@polkadot/util-crypto';
+import { construct, getRegistryBase, methods } from '@substrate/txwrapper-polkadot';
+import { POLKADOT_SS58_FORMAT } from '../chains.js';
+/**
+ * Converts a decimal display amount (e.g. "1.5") to integer base units (plancks)
+ * using the asset's decimals, without floating point. Rejects more precision than
+ * the asset supports so we never silently truncate a user's amount.
+ */
+function toBaseUnits(amount, decimals) {
+    const trimmed = amount.trim();
+    if (!/^\d+(\.\d+)?$/.test(trimmed)) {
+        throw new Error(`Invalid Polkadot amount "${amount}".`);
+    }
+    const [whole, fraction = ''] = trimmed.split('.');
+    if (fraction.length > decimals) {
+        throw new Error(`Amount "${amount}" exceeds the asset's ${decimals} decimals of precision.`);
+    }
+    const combined = `${whole}${fraction.padEnd(decimals, '0')}`.replace(/^0+(?=\d)/, '');
+    return BigInt(combined).toString();
+}
+/**
+ * Builds and signs a `balances.transferKeepAlive` extrinsic for a prepared
+ * Polkadot withdrawal. Fully offline: the server-supplied {@link PolkadotChainState}
+ * carries the runtime metadata so the call is SCALE-encoded here without any RPC.
+ * Returns the signed extrinsic hex the server relays via `author.submitExtrinsic`.
+ */
+export async function signPolkadotWithdrawal(payload, mnemonic, derivationPath) {
+    const state = payload.chainState;
+    if (!state) {
+        throw new Error('Missing Polkadot chain state from the server.');
+    }
+    if (!payload.toAddress) {
+        throw new Error('Polkadot withdrawals require a destination address.');
+    }
+    await cryptoWaitReady();
+    const ss58Format = POLKADOT_SS58_FORMAT[payload.network] ?? 0;
+    const keyring = new Keyring({ type: 'sr25519', ss58Format });
+    const pair = keyring.createFromUri(`${mnemonic}${derivationPath}`);
+    // The 32-byte public key is the account's true identity regardless of SS58
+    // encoding; refuse to sign if the derived key doesn't own the source address.
+    if (!u8aEq(pair.publicKey, decodeAddress(payload.sourceAddress))) {
+        throw new Error('The derived Polkadot key does not match the withdrawal source address.');
+    }
+    const metadataRpc = state.metadataRpc;
+    const registry = getRegistryBase({
+        chainProperties: {
+            ss58Format,
+            tokenDecimals: payload.asset.decimals,
+            tokenSymbol: payload.asset.symbol
+        },
+        // Polkadot and Paseo encode a balances transfer with base Substrate types, so
+        // no chain-specific type overrides are needed to decode the metadata.
+        specTypes: {},
+        metadataRpc
+    });
+    const unsigned = methods.balances.transferKeepAlive({
+        dest: { id: payload.toAddress },
+        value: toBaseUnits(payload.amount, payload.asset.decimals)
+    }, {
+        address: payload.sourceAddress,
+        blockHash: state.blockHash,
+        blockNumber: state.blockNumber,
+        eraPeriod: state.eraPeriod,
+        genesisHash: state.genesisHash,
+        metadataRpc,
+        nonce: state.nonce,
+        specVersion: state.specVersion,
+        tip: Number(state.tip),
+        transactionVersion: state.transactionVersion
+    }, { metadataRpc, registry });
+    const signingPayload = construct.signingPayload(unsigned, { registry });
+    const { signature } = registry
+        .createType('ExtrinsicPayload', signingPayload, { version: unsigned.version })
+        .sign(pair);
+    return construct.signedTx(unsigned, signature, { metadataRpc, registry });
+}
+//# sourceMappingURL=sign-polkadot.js.map

package/dist/signing/sign-polkadot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-polkadot.js","sourceRoot":"","sources":["../../src/signing/sign-polkadot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,+BAA+B,CAAC;AACpF,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGpD;;;;GAIG;AACH,SAAS,WAAW,CAAC,MAAc,EAAE,QAAgB;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,IAAI,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,QAAQ,GAAG,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,yBAAyB,QAAQ,yBAAyB,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAuB,EACvB,QAAgB,EAChB,cAAsB;IAEtB,MAAM,KAAK,GAAG,OAAO,CAAC,UAA4C,CAAC;IACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,eAAe,EAAE,CAAC;IACxB,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,QAAQ,GAAG,cAAc,EAAE,CAAC,CAAC;IAEnE,2EAA2E;IAC3E,8EAA8E;IAC9E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,WAA4B,CAAC;IACvD,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,eAAe,EAAE;YACf,UAAU;YACV,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ;YACrC,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM;SAClC;QACD,8EAA8E;QAC9E,sEAAsE;QACtE,SAAS,EAAE,EAAE;QACb,WAAW;KACZ,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CACjD;QACE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,SAAS,EAAE;QAC/B,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;KAC3D,EACD;QACE,OAAO,EAAE,OAAO,CAAC,aAAa;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,WAAW;QACX,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;KAC7C,EACD,EAAE,WAAW,EAAE,QAAQ,EAAE,CAC1B,CAAC;IAEF,MAAM,cAAc,GAAG,SAAS,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;IACxE,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ;SAC3B,UAAU,CAAC,kBAAkB,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;SAC7E,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC5E,CAAC"}

package/dist/signing/sign-withdrawal.d.ts

@@ -0,0 +1,21 @@
+import { type EthereumGasOverrides } from './sign-ethereum.js';
+import { type SigningPayload } from './types.js';
+export interface SignWithdrawalInput {
+    payload: SigningPayload;
+    /** Decrypted mnemonic for the wallet's key. Held only in caller scope; never persisted. */
+    mnemonic: string;
+    /** Derivation path of the source address (from its Address record). */
+    derivationPath: string;
+    /** Caller-customized Ethereum gas (wei / units); falls back to server suggestions. */
+    ethereumGas?: EthereumGasOverrides;
+}
+/**
+ * Produces a fully-signed raw transaction (hex) for a prepared withdrawal. Pure — no
+ * network access. New chains are added here as their per-chain signer + server chain
+ * state land.
+ */
+export declare function signWithdrawal({ payload, mnemonic, derivationPath, ethereumGas }: SignWithdrawalInput): Promise<string>;
+/** Chains the SDK signer currently supports. */
+export declare const SIGNABLE_CHAINS: readonly ["ethereum", "xrp", "bitcoin", "polkadot"];
+export declare function canSignChain(chain: string): boolean;
+//# sourceMappingURL=sign-withdrawal.d.ts.map

package/dist/signing/sign-withdrawal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-withdrawal.d.ts","sourceRoot":"","sources":["../../src/signing/sign-withdrawal.ts"],"names":[],"mappings":"AAEA,OAAO,EAA0B,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAGvF,OAAO,EAAmD,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAElG,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,cAAc,CAAC;IACxB,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAC;IACvB,sFAAsF;IACtF,WAAW,CAAC,EAAE,oBAAoB,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,EACnC,OAAO,EACP,QAAQ,EACR,cAAc,EACd,WAAW,EACZ,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmBvC;AAED,gDAAgD;AAChD,eAAO,MAAM,eAAe,qDAAsD,CAAC;AAEnF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD"}

package/dist/signing/sign-withdrawal.js

@@ -0,0 +1,35 @@
+import { assertValidMnemonic } from '../mnemonic.js';
+import { signBitcoinWithdrawal } from './sign-bitcoin.js';
+import { signEthereumWithdrawal } from './sign-ethereum.js';
+import { signPolkadotWithdrawal } from './sign-polkadot.js';
+import { signXrpWithdrawal } from './sign-xrp.js';
+import { UnsupportedSigningError, WithdrawalExpiredError } from './types.js';
+/**
+ * Produces a fully-signed raw transaction (hex) for a prepared withdrawal. Pure — no
+ * network access. New chains are added here as their per-chain signer + server chain
+ * state land.
+ */
+export async function signWithdrawal({ payload, mnemonic, derivationPath, ethereumGas }) {
+    assertValidMnemonic(mnemonic);
+    if (Date.now() >= new Date(payload.expiresAt).getTime()) {
+        throw new WithdrawalExpiredError();
+    }
+    switch (payload.chain) {
+        case 'ethereum':
+            return signEthereumWithdrawal(payload, mnemonic, derivationPath, ethereumGas);
+        case 'xrp':
+            return signXrpWithdrawal(payload, mnemonic, derivationPath);
+        case 'bitcoin':
+            return signBitcoinWithdrawal(payload, mnemonic, derivationPath);
+        case 'polkadot':
+            return signPolkadotWithdrawal(payload, mnemonic, derivationPath);
+        default:
+            throw new UnsupportedSigningError(payload.chain);
+    }
+}
+/** Chains the SDK signer currently supports. */
+export const SIGNABLE_CHAINS = ['ethereum', 'xrp', 'bitcoin', 'polkadot'];
+export function canSignChain(chain) {
+    return SIGNABLE_CHAINS.includes(chain);
+}
+//# sourceMappingURL=sign-withdrawal.js.map

package/dist/signing/sign-withdrawal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-withdrawal.js","sourceRoot":"","sources":["../../src/signing/sign-withdrawal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAA6B,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAuB,MAAM,YAAY,CAAC;AAYlG;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,OAAO,EACP,QAAQ,EACR,cAAc,EACd,WAAW,EACS;IACpB,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAE9B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,IAAI,sBAAsB,EAAE,CAAC;IACrC,CAAC;IAED,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,UAAU;YACb,OAAO,sBAAsB,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QAChF,KAAK,KAAK;YACR,OAAO,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC9D,KAAK,SAAS;YACZ,OAAO,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;QAClE,KAAK,UAAU;YACb,OAAO,sBAAsB,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;QACnE;YACE,MAAM,IAAI,uBAAuB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAEnF,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAQ,eAAqC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/signing/sign-xrp.d.ts

@@ -0,0 +1,7 @@
+import type { SigningPayload } from './types.js';
+/**
+ * Builds and signs an XRP Payment for a prepared withdrawal. Returns the signed
+ * tx_blob hex the server relays via `client.submit`.
+ */
+export declare function signXrpWithdrawal(payload: SigningPayload, mnemonic: string, derivationPath: string): string;
+//# sourceMappingURL=sign-xrp.d.ts.map

package/dist/signing/sign-xrp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-xrp.d.ts","sourceRoot":"","sources":["../../src/signing/sign-xrp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAiB,MAAM,YAAY,CAAC;AAEhE;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAuB3G"}

package/dist/signing/sign-xrp.js

@@ -0,0 +1,27 @@
+import { Wallet as XrplWallet, xrpToDrops } from 'xrpl';
+/**
+ * Builds and signs an XRP Payment for a prepared withdrawal. Returns the signed
+ * tx_blob hex the server relays via `client.submit`.
+ */
+export function signXrpWithdrawal(payload, mnemonic, derivationPath) {
+    const state = payload.chainState;
+    if (!state) {
+        throw new Error('Missing XRP chain state from the server.');
+    }
+    if (!payload.toAddress) {
+        throw new Error('XRP withdrawals require a destination address.');
+    }
+    const wallet = XrplWallet.fromMnemonic(mnemonic, { derivationPath });
+    const payment = {
+        TransactionType: 'Payment',
+        Account: payload.sourceAddress,
+        Destination: payload.toAddress,
+        Amount: xrpToDrops(payload.amount),
+        Sequence: state.sequence,
+        Fee: state.fee,
+        LastLedgerSequence: state.lastLedgerSequence,
+        ...(payload.destinationTag != null ? { DestinationTag: payload.destinationTag } : {})
+    };
+    return wallet.sign(payment).tx_blob;
+}
+//# sourceMappingURL=sign-xrp.js.map

package/dist/signing/sign-xrp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-xrp.js","sourceRoot":"","sources":["../../src/signing/sign-xrp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,UAAU,EAAgB,MAAM,MAAM,CAAC;AAGtE;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAuB,EAAE,QAAgB,EAAE,cAAsB;IACjG,MAAM,KAAK,GAAG,OAAO,CAAC,UAAuC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IAErE,MAAM,OAAO,GAAY;QACvB,eAAe,EAAE,SAAS;QAC1B,OAAO,EAAE,OAAO,CAAC,aAAa;QAC9B,WAAW,EAAE,OAAO,CAAC,SAAS;QAC9B,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtF,CAAC;IAEF,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;AACtC,CAAC"}