@miradexio/client 0.1.0

package/dist/lib/bitcoin/tx-verify.d.ts

@@ -0,0 +1,43 @@
+import type { BlockchainDataProvider } from '../../interfaces/blockchain.js';
+export interface TxCancelVerification {
+    readonly verified: boolean;
+    readonly reason: string;
+    /** Raw TxCancel hex, present on the success path. Needed by client-side refund. */
+    readonly txCancelHex?: string;
+    /** TxCancel txid (big-endian display form), present on the success path. */
+    readonly txCancelTxid?: string;
+    /** Block height at which TxCancel confirmed, present on the success path. */
+    readonly blockHeight?: number;
+}
+/**
+ * Verify a TxCancel transaction on-chain before sharing s_b.
+ *
+ * @param blockchain Connected blockchain data provider
+ * @param txCancelTxid  Transaction ID from the server's cancel response
+ * @param txCancelHex   Raw transaction hex from the server
+ * @param lockAddress   The P2WSH lock address our BTC was funded to
+ * @param network       Bitcoin network
+ */
+export declare function verifyTxCancel(blockchain: BlockchainDataProvider, txCancelTxid: string, txCancelHex: string, lockAddress: string, network: 'mainnet' | 'testnet' | 'regtest'): Promise<TxCancelVerification>;
+/**
+ * Additional check: verify the lock address has been spent (no remaining UTXOs).
+ * This is a secondary confirmation that TxCancel actually consumed the locked funds.
+ */
+export declare function verifyLockAddressSpent(blockchain: BlockchainDataProvider, lockAddress: string, network: 'mainnet' | 'testnet' | 'regtest'): Promise<boolean>;
+/**
+ * Discover and verify TxCancel entirely from on-chain data.
+ *
+ * Zero server trust — finds TxCancel by querying the lock address's transaction
+ * history via Electrum. The lock address will have exactly 2 transactions:
+ * TxLock (the deposit) and TxCancel (the spend).
+ *
+ * If depositTxid is known, we filter it out. If not, we identify TxCancel by
+ * checking which transaction spends FROM the lock address (has it as an input).
+ *
+ * @param blockchain    Connected blockchain data provider
+ * @param lockAddress   The P2WSH lock address
+ * @param depositTxid   The known deposit (TxLock) txid, or empty string if unknown
+ * @param network       Bitcoin network
+ */
+export declare function discoverAndVerifyTxCancel(blockchain: BlockchainDataProvider, lockAddress: string, depositTxid: string, network: 'mainnet' | 'testnet' | 'regtest'): Promise<TxCancelVerification>;
+//# sourceMappingURL=tx-verify.d.ts.map

package/dist/lib/bitcoin/tx-verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tx-verify.d.ts","sourceRoot":"","sources":["../../../src/lib/bitcoin/tx-verify.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAI7E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mFAAmF;IACnF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,6EAA6E;IAC7E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,sBAAsB,EAClC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GACzC,OAAO,CAAC,oBAAoB,CAAC,CAuC/B;AAsDD;;;GAGG;AACH,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,sBAAsB,EAClC,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GACzC,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,yBAAyB,CAC7C,UAAU,EAAE,sBAAsB,EAClC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,GACzC,OAAO,CAAC,oBAAoB,CAAC,CA6E/B"}

package/dist/lib/bitcoin/tx-verify.js

@@ -0,0 +1,202 @@
+/**
+ * Independent on-chain verification of TxCancel before sharing s_b.
+ *
+ * Prevents the collusion attack where the server lies about TxCancel being
+ * confirmed in order to trick the client into revealing s_b. If s_b is leaked
+ * without a confirmed TxCancel, the maker can combine s_a + s_b to sweep
+ * the XMR while keeping the BTC locked (punishing the client).
+ *
+ * Verification steps:
+ * 1. Fetch raw tx from Electrum independently (not from the server)
+ * 2. Confirm the server's hex matches the on-chain hex
+ * 3. Decode the tx and verify it spends from our known lock address
+ * 4. Confirm the tx is included in a block (height > 0)
+ */
+import * as bitcoin from 'bitcoinjs-lib';
+import { addressToScriptHash } from './script-hash.js';
+import { uint8ArrayEquals } from '../crypto/bytes.js';
+/**
+ * Verify a TxCancel transaction on-chain before sharing s_b.
+ *
+ * @param blockchain Connected blockchain data provider
+ * @param txCancelTxid  Transaction ID from the server's cancel response
+ * @param txCancelHex   Raw transaction hex from the server
+ * @param lockAddress   The P2WSH lock address our BTC was funded to
+ * @param network       Bitcoin network
+ */
+export async function verifyTxCancel(blockchain, txCancelTxid, txCancelHex, lockAddress, network) {
+    const onChainHex = await blockchain.getTransaction(txCancelTxid);
+    if (!onChainHex) {
+        return { verified: false, reason: 'TxCancel not found on-chain via Electrum' };
+    }
+    if (onChainHex !== txCancelHex) {
+        return {
+            verified: false,
+            reason: 'Server tx hex does not match on-chain tx — possible tampering',
+        };
+    }
+    const spendsFromLock = verifyTxSpendsFromAddress(onChainHex, lockAddress, network);
+    if (!spendsFromLock) {
+        return {
+            verified: false,
+            reason: 'TxCancel does not spend from the expected lock address',
+        };
+    }
+    const height = await blockchain.getTransactionHeight(txCancelTxid);
+    if (height <= 0) {
+        return {
+            verified: false,
+            reason: height === 0
+                ? 'TxCancel is in the mempool but not yet confirmed'
+                : 'Could not verify TxCancel block inclusion',
+        };
+    }
+    return {
+        verified: true,
+        reason: `Confirmed at block height ${String(height)}`,
+        txCancelHex: onChainHex,
+        txCancelTxid,
+        blockHeight: height,
+    };
+}
+/**
+ * Decode a raw Bitcoin transaction and check that at least one input
+ * spends from the given address (the P2WSH lock address).
+ *
+ * For P2WSH inputs, the previous output script is not directly in the tx.
+ * Instead, we verify using the script hash of the lock address against
+ * the Electrum UTXO list. As a belt-and-suspenders check, we also verify
+ * the lock address has no remaining UTXOs (the TxCancel spent them).
+ */
+function verifyTxSpendsFromAddress(rawHex, lockAddress, network) {
+    try {
+        const tx = bitcoin.Transaction.fromHex(rawHex);
+        const btcNetwork = network === 'mainnet' ? bitcoin.networks.bitcoin : (network === 'regtest' ? bitcoin.networks.regtest : bitcoin.networks.testnet);
+        // For P2WSH, the witness script's last push is the redeem script.
+        // We can derive the expected scriptPubKey from the lock address and compare.
+        const expectedOutput = bitcoin.address.toOutputScript(lockAddress, btcNetwork);
+        // In the atomic swap protocol, TxCancel spends the TxLock output which
+        // was sent to the P2WSH lock address. The witness contains the redeem script
+        // as the last element; hashing it with OP_0 <SHA256> gives us the scriptPubKey.
+        for (const input of tx.ins) {
+            if (!input.witness || input.witness.length === 0)
+                continue;
+            // The last witness element for P2WSH is the witness script
+            const witnessScript = input.witness[input.witness.length - 1];
+            if (!witnessScript || witnessScript.length === 0)
+                continue;
+            // Derive P2WSH scriptPubKey from the witness script
+            const p2wsh = bitcoin.payments.p2wsh({
+                redeem: { output: witnessScript },
+                network: btcNetwork,
+            });
+            if (p2wsh.output &&
+                uint8ArrayEquals(new Uint8Array(p2wsh.output), new Uint8Array(expectedOutput))) {
+                return true;
+            }
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Additional check: verify the lock address has been spent (no remaining UTXOs).
+ * This is a secondary confirmation that TxCancel actually consumed the locked funds.
+ */
+export async function verifyLockAddressSpent(blockchain, lockAddress, network) {
+    try {
+        const scriptHash = addressToScriptHash(lockAddress, network);
+        const utxos = await blockchain.listUnspent(scriptHash);
+        return utxos.length === 0;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Discover and verify TxCancel entirely from on-chain data.
+ *
+ * Zero server trust — finds TxCancel by querying the lock address's transaction
+ * history via Electrum. The lock address will have exactly 2 transactions:
+ * TxLock (the deposit) and TxCancel (the spend).
+ *
+ * If depositTxid is known, we filter it out. If not, we identify TxCancel by
+ * checking which transaction spends FROM the lock address (has it as an input).
+ *
+ * @param blockchain    Connected blockchain data provider
+ * @param lockAddress   The P2WSH lock address
+ * @param depositTxid   The known deposit (TxLock) txid, or empty string if unknown
+ * @param network       Bitcoin network
+ */
+export async function discoverAndVerifyTxCancel(blockchain, lockAddress, depositTxid, network) {
+    const scriptHash = addressToScriptHash(lockAddress, network);
+    const history = await blockchain.getHistory(scriptHash);
+    if (history.length < 2) {
+        return {
+            verified: false,
+            reason: `Lock address has ${String(history.length)} transaction(s) — TxCancel not yet broadcast`,
+        };
+    }
+    // Strategy A: If we know the deposit txid, filter it out
+    // Strategy B: If we don't, check each tx to find the one that spends FROM the lock address
+    let cancelTxid = '';
+    let cancelHeight = 0;
+    if (depositTxid) {
+        const cancelEntry = history.find((entry) => entry.tx_hash !== depositTxid);
+        if (cancelEntry) {
+            cancelTxid = cancelEntry.tx_hash;
+            cancelHeight = cancelEntry.height;
+        }
+    }
+    // Fallback: iterate history and find the tx that spends from the lock address
+    if (!cancelTxid) {
+        for (const entry of history) {
+            const hex = await blockchain.getTransaction(entry.tx_hash);
+            if (!hex)
+                continue;
+            if (verifyTxSpendsFromAddress(hex, lockAddress, network)) {
+                cancelTxid = entry.tx_hash;
+                cancelHeight = entry.height;
+                break;
+            }
+        }
+    }
+    if (!cancelTxid) {
+        return {
+            verified: false,
+            reason: 'Could not identify TxCancel in lock address history',
+        };
+    }
+    if (cancelHeight <= 0) {
+        return {
+            verified: false,
+            reason: cancelHeight === 0
+                ? 'TxCancel is in the mempool but not yet confirmed'
+                : 'TxCancel has unknown confirmation status',
+        };
+    }
+    const rawHex = await blockchain.getTransaction(cancelTxid);
+    if (!rawHex) {
+        return {
+            verified: false,
+            reason: 'Could not fetch TxCancel raw transaction from Electrum',
+        };
+    }
+    const spendsFromLock = verifyTxSpendsFromAddress(rawHex, lockAddress, network);
+    if (!spendsFromLock) {
+        return {
+            verified: false,
+            reason: 'Transaction found but does not spend from the lock address',
+        };
+    }
+    return {
+        verified: true,
+        reason: `TxCancel ${cancelTxid.slice(0, 12)}... confirmed at height ${String(cancelHeight)}`,
+        txCancelHex: rawHex,
+        txCancelTxid: cancelTxid,
+        blockHeight: cancelHeight,
+    };
+}
+//# sourceMappingURL=tx-verify.js.map

package/dist/lib/bitcoin/tx-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tx-verify.js","sourceRoot":"","sources":["../../../src/lib/bitcoin/tx-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,OAAO,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAatD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkC,EAClC,YAAoB,EACpB,WAAmB,EACnB,WAAmB,EACnB,OAA0C;IAE1C,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;IACjF,CAAC;IAED,IAAI,UAAU,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,+DAA+D;SACxE,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,yBAAyB,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IACnF,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,wDAAwD;SACjE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACnE,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,MAAM,KAAK,CAAC;gBACV,CAAC,CAAC,kDAAkD;gBACpD,CAAC,CAAC,2CAA2C;SAClD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,6BAA6B,MAAM,CAAC,MAAM,CAAC,EAAE;QACrD,WAAW,EAAE,UAAU;QACvB,YAAY;QACZ,WAAW,EAAE,MAAM;KACpB,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,yBAAyB,CAChC,MAAc,EACd,WAAmB,EACnB,OAA0C;IAE1C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEpJ,kEAAkE;QAClE,6EAA6E;QAC7E,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;QAE/E,uEAAuE;QACvE,6EAA6E;QAC7E,gFAAgF;QAChF,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE3D,2DAA2D;YAC3D,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE3D,oDAAoD;YACpD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACnC,MAAM,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;gBACjC,OAAO,EAAE,UAAU;aACpB,CAAC,CAAC;YAEH,IACE,KAAK,CAAC,MAAM;gBACZ,gBAAgB,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC,EAC9E,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAkC,EAClC,WAAmB,EACnB,OAA0C;IAE1C,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACvD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,UAAkC,EAClC,WAAmB,EACnB,WAAmB,EACnB,OAA0C;IAE1C,MAAM,UAAU,GAAG,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAExD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,oBAAoB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,8CAA8C;SACjG,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,2FAA2F;IAC3F,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;QAC3E,IAAI,WAAW,EAAE,CAAC;YAChB,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC;YACjC,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC;QACpC,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,yBAAyB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;gBACzD,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC3B,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;gBAC5B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,qDAAqD;SAC9D,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,YAAY,KAAK,CAAC;gBAChB,CAAC,CAAC,kDAAkD;gBACpD,CAAC,CAAC,0CAA0C;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,wDAAwD;SACjE,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,yBAAyB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/E,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,4DAA4D;SACrE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,YAAY,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,MAAM,CAAC,YAAY,CAAC,EAAE;QAC5F,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,YAAY;KAC1B,CAAC;AACJ,CAAC"}

package/dist/lib/bitcoin/wallet.d.ts

@@ -0,0 +1,71 @@
+declare const ECPair: any;
+export interface TempBtcWallet {
+    readonly keyPair: ReturnType<typeof ECPair.makeRandom>;
+    readonly address: string;
+    readonly publicKey: Buffer;
+    readonly wif: string;
+}
+/**
+ * Create an ephemeral P2WPKH wallet. The private key is held in memory only
+ * and must be persisted via `createKeystore` if the caller needs to resume.
+ */
+export declare function createTempWallet(network?: 'mainnet' | 'testnet' | 'regtest'): TempBtcWallet;
+/**
+ * Sign every input of a PSBT with the wallet's key pair and finalise.
+ * Returns the base64-encoded signed PSBT.
+ */
+export declare function signPsbt(psbtBase64: string, wallet: TempBtcWallet, network?: 'mainnet' | 'testnet' | 'regtest'): string;
+/**
+ * Identity of the lock transaction derivable from an unsigned PSBT.
+ *
+ * Segwit txid is invariant to signing — it's hash(version, inputs, outputs,
+ * locktime) without witnesses — so callers can trust this matches what the
+ * sidecar will broadcast after `signFundingPsbt`.
+ */
+export interface UnsignedFundingPsbt {
+    /** Base64-encoded UNSIGNED PSBT, ready to send to the sidecar in /presigs. */
+    readonly psbtBase64: string;
+    /** Big-endian display-form txid of the (eventually-signed) lock tx. */
+    readonly txid: string;
+    /** Index of the lock output within the tx (always 0 for the simple shape). */
+    readonly vout: number;
+    /** Lock-output value in satoshis. */
+    readonly amountSats: number;
+}
+/**
+ * Build an UNSIGNED PSBT that pays from the wallet's UTXOs to a lock address.
+ *
+ * Returns the unsigned PSBT plus the deterministic txid+vout+value the sidecar
+ * uses to drive the libp2p protocol's Message2/3 with Alice. Sign later with
+ * `signFundingPsbt` once the encsig has been received and a snapshot persisted.
+ *
+ * @param lockAmountSats — Exact output amount the protocol negotiated. MUST
+ *   match what Alice expects in Message2; mismatches cause rejection. When
+ *   omitted, falls back to the total UTXO value (zero mining fee — testing only).
+ */
+export declare function buildUnsignedFundingPsbt(wallet: TempBtcWallet, utxos: readonly {
+    readonly txid: string;
+    readonly vout: number;
+    readonly value: number;
+}[], lockAddress: string, network?: 'mainnet' | 'testnet' | 'regtest', lockAmountSats?: number): UnsignedFundingPsbt;
+/**
+ * Sign a previously-built unsigned funding PSBT. Returns the base64 of the
+ * fully-signed, finalized PSBT, ready to broadcast (or to forward to the
+ * sidecar's /fund endpoint).
+ */
+export declare function signFundingPsbt(unsignedPsbtBase64: string, wallet: TempBtcWallet, network?: 'mainnet' | 'testnet' | 'regtest'): string;
+/**
+ * Backwards-compatible build+sign in one call. Prefer `buildUnsignedFundingPsbt`
+ * + `signFundingPsbt` so the snapshot can be written between the two steps.
+ */
+export declare function buildAndSignFundingPsbt(wallet: TempBtcWallet, utxos: readonly {
+    readonly txid: string;
+    readonly vout: number;
+    readonly value: number;
+}[], lockAddress: string, network?: 'mainnet' | 'testnet' | 'regtest', lockAmountSats?: number): string;
+/**
+ * Recover a wallet instance from a WIF-encoded private key.
+ */
+export declare function walletFromWif(wif: string, network?: 'mainnet' | 'testnet' | 'regtest'): TempBtcWallet;
+export {};
+//# sourceMappingURL=wallet.d.ts.map

package/dist/lib/bitcoin/wallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.d.ts","sourceRoot":"","sources":["../../../src/lib/bitcoin/wallet.ts"],"names":[],"mappings":"AAUA,QAAA,MAAM,MAAM,KAAqB,CAAC;AAElC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,GAAG,aAAa,CAiBtG;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CACtB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,GACrD,MAAM,CAQR;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,EAC1F,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,EACtD,cAAc,CAAC,EAAE,MAAM,GACtB,mBAAmB,CA6DrB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,kBAAkB,EAAE,MAAM,EAC1B,MAAM,EAAE,aAAa,EACrB,OAAO,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,GACrD,MAAM,CAER;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,SAAS;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,EAAE,EAC1F,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,EACtD,cAAc,CAAC,EAAE,MAAM,GACtB,MAAM,CAGR;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,GACrD,aAAa,CAiBf"}

package/dist/lib/bitcoin/wallet.js

@@ -0,0 +1,141 @@
+/**
+ * Ephemeral P2WPKH wallet for atomic swap lock transactions.
+ * Keys are generated in-memory and persisted only via the keystore file.
+ */
+import * as bitcoin from 'bitcoinjs-lib';
+import { ECPairFactory } from 'ecpair';
+import * as ecc from 'tiny-secp256k1';
+import { VerificationError } from '../../types/index.js';
+bitcoin.initEccLib(ecc);
+const ECPair = ECPairFactory(ecc);
+/**
+ * Create an ephemeral P2WPKH wallet. The private key is held in memory only
+ * and must be persisted via `createKeystore` if the caller needs to resume.
+ */
+export function createTempWallet(network = 'mainnet') {
+    const net = network === 'mainnet' ? bitcoin.networks.bitcoin : (network === 'regtest' ? bitcoin.networks.regtest : bitcoin.networks.testnet);
+    const keyPair = ECPair.makeRandom({ network: net });
+    const { address } = bitcoin.payments.p2wpkh({
+        pubkey: Buffer.from(keyPair.publicKey),
+        network: net,
+    });
+    if (!address)
+        throw new Error('Failed to derive BTC address');
+    return {
+        keyPair,
+        address,
+        publicKey: Buffer.from(keyPair.publicKey),
+        wif: keyPair.toWIF(),
+    };
+}
+/**
+ * Sign every input of a PSBT with the wallet's key pair and finalise.
+ * Returns the base64-encoded signed PSBT.
+ */
+export function signPsbt(psbtBase64, wallet, network = 'mainnet') {
+    const net = network === 'mainnet' ? bitcoin.networks.bitcoin : (network === 'regtest' ? bitcoin.networks.regtest : bitcoin.networks.testnet);
+    const psbt = bitcoin.Psbt.fromBase64(psbtBase64, { network: net });
+    psbt.signAllInputs(wallet.keyPair);
+    psbt.finalizeAllInputs();
+    return psbt.toBase64();
+}
+/**
+ * Build an UNSIGNED PSBT that pays from the wallet's UTXOs to a lock address.
+ *
+ * Returns the unsigned PSBT plus the deterministic txid+vout+value the sidecar
+ * uses to drive the libp2p protocol's Message2/3 with Alice. Sign later with
+ * `signFundingPsbt` once the encsig has been received and a snapshot persisted.
+ *
+ * @param lockAmountSats — Exact output amount the protocol negotiated. MUST
+ *   match what Alice expects in Message2; mismatches cause rejection. When
+ *   omitted, falls back to the total UTXO value (zero mining fee — testing only).
+ */
+export function buildUnsignedFundingPsbt(wallet, utxos, lockAddress, network = 'mainnet', lockAmountSats) {
+    if (utxos.length === 0)
+        throw new Error('At least one UTXO is required');
+    const net = network === 'mainnet' ? bitcoin.networks.bitcoin : (network === 'regtest' ? bitcoin.networks.regtest : bitcoin.networks.testnet);
+    try {
+        bitcoin.address.toOutputScript(lockAddress, net);
+    }
+    catch {
+        throw new VerificationError('E_DEST_ADDR_INVALID', `lockAddress ${lockAddress} is invalid for ${network}`);
+    }
+    const psbt = new bitcoin.Psbt({ network: net });
+    const p2wpkh = bitcoin.payments.p2wpkh({
+        pubkey: Buffer.from(wallet.keyPair.publicKey),
+        network: net,
+    });
+    if (!p2wpkh.output)
+        throw new Error('Failed to derive P2WPKH script');
+    const totalInputValue = utxos.reduce((sum, u) => sum + u.value, 0);
+    for (const utxo of utxos) {
+        psbt.addInput({
+            hash: utxo.txid,
+            index: utxo.vout,
+            witnessUtxo: {
+                script: p2wpkh.output,
+                value: BigInt(utxo.value),
+            },
+        });
+    }
+    const outputSats = lockAmountSats && lockAmountSats > 0 ? lockAmountSats : totalInputValue;
+    psbt.addOutput({
+        address: lockAddress,
+        value: BigInt(outputSats),
+    });
+    // Read txid from the unsigned tx; segwit txid is fixed once inputs/outputs
+    // are set. bitcoinjs-lib doesn't expose an unsigned-Transaction accessor on
+    // Psbt, so reconstruct one from the public input/output lists.
+    const tx = new bitcoin.Transaction();
+    tx.version = 2;
+    tx.locktime = 0;
+    for (const input of psbt.txInputs) {
+        tx.addInput(input.hash, input.index, input.sequence ?? 0xffffffff);
+    }
+    for (const output of psbt.txOutputs) {
+        tx.addOutput(output.script, BigInt(output.value));
+    }
+    const txid = tx.getId();
+    return {
+        psbtBase64: psbt.toBase64(),
+        txid,
+        vout: 0,
+        amountSats: outputSats,
+    };
+}
+/**
+ * Sign a previously-built unsigned funding PSBT. Returns the base64 of the
+ * fully-signed, finalized PSBT, ready to broadcast (or to forward to the
+ * sidecar's /fund endpoint).
+ */
+export function signFundingPsbt(unsignedPsbtBase64, wallet, network = 'mainnet') {
+    return signPsbt(unsignedPsbtBase64, wallet, network);
+}
+/**
+ * Backwards-compatible build+sign in one call. Prefer `buildUnsignedFundingPsbt`
+ * + `signFundingPsbt` so the snapshot can be written between the two steps.
+ */
+export function buildAndSignFundingPsbt(wallet, utxos, lockAddress, network = 'mainnet', lockAmountSats) {
+    const unsigned = buildUnsignedFundingPsbt(wallet, utxos, lockAddress, network, lockAmountSats);
+    return signFundingPsbt(unsigned.psbtBase64, wallet, network);
+}
+/**
+ * Recover a wallet instance from a WIF-encoded private key.
+ */
+export function walletFromWif(wif, network = 'mainnet') {
+    const net = network === 'mainnet' ? bitcoin.networks.bitcoin : (network === 'regtest' ? bitcoin.networks.regtest : bitcoin.networks.testnet);
+    const keyPair = ECPair.fromWIF(wif, net);
+    const { address } = bitcoin.payments.p2wpkh({
+        pubkey: Buffer.from(keyPair.publicKey),
+        network: net,
+    });
+    if (!address)
+        throw new Error('Failed to derive BTC address from WIF');
+    return {
+        keyPair,
+        address,
+        publicKey: Buffer.from(keyPair.publicKey),
+        wif: keyPair.toWIF(),
+    };
+}
+//# sourceMappingURL=wallet.js.map

package/dist/lib/bitcoin/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../../src/lib/bitcoin/wallet.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,OAAO,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACvC,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACxB,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;AASlC;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAA6C,SAAS;IACrF,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7I,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAEpD,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,OAAO,EAAE,GAAG;KACb,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAE9D,OAAO;QACL,OAAO;QACP,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE;KACrB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,QAAQ,CACtB,UAAkB,EAClB,MAAqB,EACrB,UAA6C,SAAS;IAEtD,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7I,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAEnE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAEzB,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzB,CAAC;AAoBD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAqB,EACrB,KAA0F,EAC1F,WAAmB,EACnB,UAA6C,SAAS,EACtD,cAAuB;IAEvB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAEzE,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7I,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAiB,CACzB,qBAAqB,EACrB,eAAe,WAAW,mBAAmB,OAAO,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAEhD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7C,OAAO,EAAE,GAAG;KACb,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAEtE,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEnE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,IAAI;YAChB,WAAW,EAAE;gBACX,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;aAC1B;SACF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,cAAc,IAAI,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC;IAE3F,IAAI,CAAC,SAAS,CAAC;QACb,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC;KAC1B,CAAC,CAAC;IAEH,2EAA2E;IAC3E,4EAA4E;IAC5E,+DAA+D;IAC/D,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IACrC,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC;IACf,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;IAExB,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE;QAC3B,IAAI;QACJ,IAAI,EAAE,CAAC;QACP,UAAU,EAAE,UAAU;KACvB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,kBAA0B,EAC1B,MAAqB,EACrB,UAA6C,SAAS;IAEtD,OAAO,QAAQ,CAAC,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAqB,EACrB,KAA0F,EAC1F,WAAmB,EACnB,UAA6C,SAAS,EACtD,cAAuB;IAEvB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/F,OAAO,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,UAA6C,SAAS;IAEtD,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7I,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAEzC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,OAAO,EAAE,GAAG;KACb,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAEvE,OAAO;QACL,OAAO;QACP,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE;KACrB,CAAC;AACJ,CAAC"}

package/dist/lib/crypto/bytes.d.ts

@@ -0,0 +1,21 @@
+import { bytesToHex as toHex, hexToBytes as fromHex } from '@noble/hashes/utils.js';
+export { toHex as bytesToHex, fromHex as hexToBytes };
+/** Byte-wise equality for two `Uint8Array`s of any length. */
+export declare function uint8ArrayEquals(a: Uint8Array, b: Uint8Array): boolean;
+/**
+ * Constant-time equality over two equal-length hex strings. Canonical
+ * comparator for hex-encoded bytes in the client; used for digest, pubkey, and
+ * txid equality checks.
+ *
+ * @remarks Hex itself is not secret at the boundaries this function is used
+ * today, but keeping one comparator avoids footguns when future code compares
+ * a secret-dependent hex value.
+ */
+export declare function constantTimeEqualHex(a: string, b: string): boolean;
+/**
+ * Zero-fill a buffer holding secret bytes. Best-effort; V8 may copy buffers
+ * internally, so this is a defence-in-depth mechanism alongside minimising
+ * secret lifetime (AV-G.2).
+ */
+export declare function wipe(buf: Uint8Array): void;
+//# sourceMappingURL=bytes.d.ts.map

package/dist/lib/crypto/bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.d.ts","sourceRoot":"","sources":["../../../src/lib/crypto/bytes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,UAAU,IAAI,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEpF,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC;AAEtD,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAMtE;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAOlE;AAED;;;;GAIG;AACH,wBAAgB,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAE1C"}

package/dist/lib/crypto/bytes.js

@@ -0,0 +1,39 @@
+import { bytesToHex as toHex, hexToBytes as fromHex } from '@noble/hashes/utils.js';
+export { toHex as bytesToHex, fromHex as hexToBytes };
+/** Byte-wise equality for two `Uint8Array`s of any length. */
+export function uint8ArrayEquals(a, b) {
+    if (a.length !== b.length)
+        return false;
+    for (let i = 0; i < a.length; i++) {
+        if (a[i] !== b[i])
+            return false;
+    }
+    return true;
+}
+/**
+ * Constant-time equality over two equal-length hex strings. Canonical
+ * comparator for hex-encoded bytes in the client; used for digest, pubkey, and
+ * txid equality checks.
+ *
+ * @remarks Hex itself is not secret at the boundaries this function is used
+ * today, but keeping one comparator avoids footguns when future code compares
+ * a secret-dependent hex value.
+ */
+export function constantTimeEqualHex(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let acc = 0;
+    for (let i = 0; i < a.length; i++) {
+        acc |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    }
+    return acc === 0;
+}
+/**
+ * Zero-fill a buffer holding secret bytes. Best-effort; V8 may copy buffers
+ * internally, so this is a defence-in-depth mechanism alongside minimising
+ * secret lifetime (AV-G.2).
+ */
+export function wipe(buf) {
+    buf.fill(0);
+}
+//# sourceMappingURL=bytes.js.map

package/dist/lib/crypto/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../../../src/lib/crypto/bytes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,UAAU,IAAI,OAAO,EAAE,MAAM,wBAAwB,CAAC;AAEpF,OAAO,EAAE,KAAK,IAAI,UAAU,EAAE,OAAO,IAAI,UAAU,EAAE,CAAC;AAEtD,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,CAAa,EAAE,CAAa;IAC3D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAS,EAAE,CAAS;IACvD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,IAAI,CAAC,GAAe;IAClC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACd,CAAC"}

package/dist/lib/crypto/errors.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Unified error class for every WASM-backed operation.
+ * `.code` is a stable string matching the Rust-side MiradexWasmError::code()
+ * (see ../../../miradex-rust/src).
+ */
+export declare class WasmError extends Error {
+    readonly code: string;
+    readonly cause?: unknown | undefined;
+    readonly name = "WasmError";
+    constructor(code: string, message: string, cause?: unknown | undefined);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/lib/crypto/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/lib/crypto/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,qBAAa,SAAU,SAAQ,KAAK;aAGhB,IAAI,EAAE,MAAM;aAEZ,KAAK,CAAC,EAAE,OAAO;IAJjC,QAAQ,CAAC,IAAI,eAAe;gBAEV,IAAI,EAAE,MAAM,EAC5B,OAAO,EAAE,MAAM,EACC,KAAK,CAAC,EAAE,OAAO,YAAA;CAIlC"}

package/dist/lib/crypto/errors.js

@@ -0,0 +1,16 @@
+/**
+ * Unified error class for every WASM-backed operation.
+ * `.code` is a stable string matching the Rust-side MiradexWasmError::code()
+ * (see ../../../miradex-rust/src).
+ */
+export class WasmError extends Error {
+    code;
+    cause;
+    name = 'WasmError';
+    constructor(code, message, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/lib/crypto/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/lib/crypto/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IAGhB;IAEA;IAJT,IAAI,GAAG,WAAW,CAAC;IAC5B,YACkB,IAAY,EAC5B,OAAe,EACC,KAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,SAAI,GAAJ,IAAI,CAAQ;QAEZ,UAAK,GAAL,KAAK,CAAU;IAGjC,CAAC;CACF"}

package/dist/lib/crypto/keygen.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @deprecated Import directly from '@miradex/client' (or './wasm.js').
+ * This file re-exports the unified surface for backwards compatibility.
+ * Scheduled for removal in 0.4.0.
+ */
+import { WasmError } from './errors.js';
+export { ensureWasm as ensureKeygen, generateClientKeys, generateClientKeysFromSeed, verifyDleqProof, signDigest, encsignDigest, decryptSignature, verifyEncsig, recoverAdaptorScalar, isKeygenAvailable, initKeygen, } from './wasm.js';
+/**
+ * Legacy error class retained for downstream `new KeygenError(...)` and
+ * `err.name === 'KeygenError'` patterns. Thrown errors from the new unified
+ * loader are plain `WasmError` instances; this subclass is for direct
+ * construction by consumers.
+ */
+export declare class KeygenError extends WasmError {
+    constructor(message: string, code?: string, cause?: unknown);
+}
+export type { WasmModule as KeygenWasmModule } from './types.js';
+export type { EnsureWasmOptions as EnsureKeygenOptions } from './wasm.js';
+//# sourceMappingURL=keygen.d.ts.map

package/dist/lib/crypto/keygen.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keygen.d.ts","sourceRoot":"","sources":["../../../src/lib/crypto/keygen.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EACL,UAAU,IAAI,YAAY,EAC1B,kBAAkB,EAClB,0BAA0B,EAC1B,eAAe,EACf,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,UAAU,GACX,MAAM,WAAW,CAAC;AAEnB;;;;;GAKG;AACH,qBAAa,WAAY,SAAQ,SAAS;gBAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,SAAa,EAAE,KAAK,CAAC,EAAE,OAAO;CAQhE;AAED,YAAY,EAAE,UAAU,IAAI,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACjE,YAAY,EAAE,iBAAiB,IAAI,mBAAmB,EAAE,MAAM,WAAW,CAAC"}

package/dist/lib/crypto/keygen.js

@@ -0,0 +1,24 @@
+/**
+ * @deprecated Import directly from '@miradex/client' (or './wasm.js').
+ * This file re-exports the unified surface for backwards compatibility.
+ * Scheduled for removal in 0.4.0.
+ */
+import { WasmError } from './errors.js';
+export { ensureWasm as ensureKeygen, generateClientKeys, generateClientKeysFromSeed, verifyDleqProof, signDigest, encsignDigest, decryptSignature, verifyEncsig, recoverAdaptorScalar, isKeygenAvailable, initKeygen, } from './wasm.js';
+/**
+ * Legacy error class retained for downstream `new KeygenError(...)` and
+ * `err.name === 'KeygenError'` patterns. Thrown errors from the new unified
+ * loader are plain `WasmError` instances; this subclass is for direct
+ * construction by consumers.
+ */
+export class KeygenError extends WasmError {
+    constructor(message, code = 'E_KEYGEN', cause) {
+        super(code, message, cause);
+        Object.defineProperty(this, 'name', {
+            value: 'KeygenError',
+            writable: false,
+            configurable: true,
+        });
+    }
+}
+//# sourceMappingURL=keygen.js.map

package/dist/lib/crypto/keygen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keygen.js","sourceRoot":"","sources":["../../../src/lib/crypto/keygen.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EACL,UAAU,IAAI,YAAY,EAC1B,kBAAkB,EAClB,0BAA0B,EAC1B,eAAe,EACf,UAAU,EACV,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,UAAU,GACX,MAAM,WAAW,CAAC;AAEnB;;;;;GAKG;AACH,MAAM,OAAO,WAAY,SAAQ,SAAS;IACxC,YAAY,OAAe,EAAE,IAAI,GAAG,UAAU,EAAE,KAAe;QAC7D,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE;YAClC,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;CACF"}