@miradexio/client 0.1.0

package/dist/lib/crypto/libp2p-identity.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Derive a libp2p Ed25519 identity from a 32-byte master seed, matching
+ * eigenwallet's swap/src/seed.rs::derive_libp2p_identity byte-for-byte:
+ *
+ *   network_seed = SHA256(master_seed || "NETWORK")
+ *   libp2p_seed  = SHA256(network_seed || "LIBP2P_IDENTITY")
+ *   keypair      = Ed25519::from_bytes(libp2p_seed)
+ *   peer_id      = base58btc(identity_multihash(protobuf(pubkey)))
+ *
+ * Note: this is plain concatenated SHA-256, NOT HMAC-SHA256. Matches the
+ * Rust `derive` helper that does `sha256(seed.bytes() || scope)`.
+ *
+ * Producing the same peer-id eigenwallet would derive from the same seed is
+ * what makes cross-binary recovery work without patching eigenwallet.
+ */
+export interface DerivedLibp2pIdentity {
+    /** 32-byte Ed25519 secret seed (hex). What eigenwallet writes to seed.pem. */
+    readonly libp2pSeedHex: string;
+    /** base58btc PeerId string (e.g. "12D3KooW..."). */
+    readonly libp2pPeerId: string;
+    /** libp2p PublicKey protobuf bytes (hex), useful for diagnostics. */
+    readonly libp2pPublicKeyProtoHex: string;
+}
+export declare function deriveLibp2pIdentity(masterSeedHex: string): Promise<DerivedLibp2pIdentity>;
+//# sourceMappingURL=libp2p-identity.d.ts.map

package/dist/lib/crypto/libp2p-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"libp2p-identity.d.ts","sourceRoot":"","sources":["../../../src/lib/crypto/libp2p-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAgCH,MAAM,WAAW,qBAAqB;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;CAC1C;AASD,wBAAsB,oBAAoB,CACxC,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,qBAAqB,CAAC,CAwChC"}

package/dist/lib/crypto/libp2p-identity.js

@@ -0,0 +1,80 @@
+/**
+ * Derive a libp2p Ed25519 identity from a 32-byte master seed, matching
+ * eigenwallet's swap/src/seed.rs::derive_libp2p_identity byte-for-byte:
+ *
+ *   network_seed = SHA256(master_seed || "NETWORK")
+ *   libp2p_seed  = SHA256(network_seed || "LIBP2P_IDENTITY")
+ *   keypair      = Ed25519::from_bytes(libp2p_seed)
+ *   peer_id      = base58btc(identity_multihash(protobuf(pubkey)))
+ *
+ * Note: this is plain concatenated SHA-256, NOT HMAC-SHA256. Matches the
+ * Rust `derive` helper that does `sha256(seed.bytes() || scope)`.
+ *
+ * Producing the same peer-id eigenwallet would derive from the same seed is
+ * what makes cross-binary recovery work without patching eigenwallet.
+ */
+import { sha256, sha512 } from '@noble/hashes/sha2.js';
+import { getPublicKey, hashes as edHashes } from '@noble/ed25519';
+import { base58 } from '@scure/base';
+import { hexToBytes, bytesToHex } from '@noble/hashes/utils.js';
+// `@noble/ed25519`'s default async API hits WebCrypto for SHA-512, which
+// browsers gate to secure contexts (HTTPS / localhost / 127.0.0.1). Self-
+// hosted miradex-web runs over plain HTTP from a LAN IP, .local hostname,
+// or onion address — none of which qualify — and any call to
+// `getPublicKeyAsync` throws "crypto.subtle must be defined, consider
+// polyfill". Wire the pure-JS sha512 from `@noble/hashes` (sibling of the
+// sha256 we already use) into ed25519's sync hash slot once at module load
+// so we can use the sync `getPublicKey` everywhere instead. Same crypto
+// guarantees, zero new deps, no secure-context requirement.
+edHashes.sha512 = sha512;
+const NETWORK_DOMAIN = new TextEncoder().encode('NETWORK');
+const LIBP2P_IDENTITY_DOMAIN = new TextEncoder().encode('LIBP2P_IDENTITY');
+function concatBytes(a, b) {
+    const out = new Uint8Array(a.length + b.length);
+    out.set(a, 0);
+    out.set(b, a.length);
+    return out;
+}
+function deriveScope(seed, scope) {
+    return sha256(concatBytes(seed, scope));
+}
+const ED25519_PUBKEY_BYTES = 32;
+const PROTOBUF_PUBKEY_LEN = 36;
+const IDENTITY_MULTIHASH_CODE = 0x00;
+const PROTOBUF_KEYTYPE_TAG = 0x08;
+const PROTOBUF_KEYTYPE_ED25519 = 0x01;
+const PROTOBUF_DATA_TAG = 0x12;
+export async function deriveLibp2pIdentity(masterSeedHex) {
+    const masterSeed = hexToBytes(masterSeedHex);
+    if (masterSeed.length !== 32) {
+        throw new Error(`master_seed must be 32 bytes, got ${String(masterSeed.length)}`);
+    }
+    const networkSeed = deriveScope(masterSeed, NETWORK_DOMAIN);
+    const libp2pSeed = deriveScope(networkSeed, LIBP2P_IDENTITY_DOMAIN);
+    const publicKey = getPublicKey(libp2pSeed);
+    if (publicKey.length !== ED25519_PUBKEY_BYTES) {
+        throw new Error(`Ed25519 pubkey must be 32 bytes, got ${String(publicKey.length)}`);
+    }
+    // libp2p PublicKey protobuf:
+    //   field 1 (KeyType = Ed25519 = 1): tag 0x08, value 0x01
+    //   field 2 (Data, 32 bytes):         tag 0x12, length 0x20, <32 bytes>
+    const pubkeyProto = new Uint8Array(PROTOBUF_PUBKEY_LEN);
+    pubkeyProto[0] = PROTOBUF_KEYTYPE_TAG;
+    pubkeyProto[1] = PROTOBUF_KEYTYPE_ED25519;
+    pubkeyProto[2] = PROTOBUF_DATA_TAG;
+    pubkeyProto[3] = ED25519_PUBKEY_BYTES;
+    pubkeyProto.set(publicKey, 4);
+    // Identity multihash (code 0x00) for keys ≤ 42 bytes — libp2p uses this
+    // for Ed25519 PeerIds.
+    const multihash = new Uint8Array(2 + pubkeyProto.length);
+    multihash[0] = IDENTITY_MULTIHASH_CODE;
+    multihash[1] = pubkeyProto.length;
+    multihash.set(pubkeyProto, 2);
+    const peerId = base58.encode(multihash);
+    return {
+        libp2pSeedHex: bytesToHex(libp2pSeed),
+        libp2pPeerId: peerId,
+        libp2pPublicKeyProtoHex: bytesToHex(pubkeyProto),
+    };
+}
+//# sourceMappingURL=libp2p-identity.js.map

package/dist/lib/crypto/libp2p-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"libp2p-identity.js","sourceRoot":"","sources":["../../../src/lib/crypto/libp2p-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEhE,yEAAyE;AACzE,0EAA0E;AAC1E,0EAA0E;AAC1E,6DAA6D;AAC7D,sEAAsE;AACtE,0EAA0E;AAC1E,2EAA2E;AAC3E,wEAAwE;AACxE,4DAA4D;AAC5D,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC;AAEzB,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAC3D,MAAM,sBAAsB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAE3E,SAAS,WAAW,CAAC,CAAa,EAAE,CAAa;IAC/C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,IAAgB,EAAE,KAAiB;IACtD,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAWD,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AACtC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,aAAqB;IAErB,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,WAAW,GAAG,WAAW,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IAEpE,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,wCAAwC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,0DAA0D;IAC1D,wEAAwE;IACxE,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;IACxD,WAAW,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC;IACtC,WAAW,CAAC,CAAC,CAAC,GAAG,wBAAwB,CAAC;IAC1C,WAAW,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC;IACnC,WAAW,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC;IACtC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAE9B,wEAAwE;IACxE,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACzD,SAAS,CAAC,CAAC,CAAC,GAAG,uBAAuB,CAAC;IACvC,SAAS,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC;IAClC,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAExC,OAAO;QACL,aAAa,EAAE,UAAU,CAAC,UAAU,CAAC;QACrC,YAAY,EAAE,MAAM;QACpB,uBAAuB,EAAE,UAAU,CAAC,WAAW,CAAC;KACjD,CAAC;AACJ,CAAC"}

package/dist/lib/crypto/mnemonic.d.ts

@@ -0,0 +1,28 @@
+import type { KeystoreDerivation } from '../keystore.js';
+export interface MnemonicKeys {
+    readonly mnemonic: string;
+    readonly wif: string;
+    readonly btcAddress: string;
+    /** 32-byte hex seed for s_b — feed to WASM generate_client_keys_from_seed */
+    readonly s_b_seed: string;
+    /** 32-byte hex seed for v_b — feed to WASM generate_client_keys_from_seed */
+    readonly v_b_seed: string;
+    /** 32-byte hex seed for b (secp256k1 Bitcoin key) — feed to WASM */
+    readonly b_seed: string;
+    readonly derivation: KeystoreDerivation;
+}
+/**
+ * Generate a fresh 24-word BIP39 mnemonic (256 bits of entropy, sourced from
+ * the platform's `crypto.getRandomValues` via @scure/bip39) and derive every
+ * downstream swap key.
+ */
+export declare function generateMnemonicKeys(network?: 'mainnet' | 'testnet' | 'regtest'): MnemonicKeys;
+/**
+ * Derive all keys from an existing mnemonic.
+ * Throws if the mnemonic is invalid.
+ */
+export declare function deriveFromMnemonic(mnemonic: string, network?: 'mainnet' | 'testnet' | 'regtest'): MnemonicKeys;
+export declare class MnemonicError extends Error {
+    readonly name = "MnemonicError";
+}
+//# sourceMappingURL=mnemonic.d.ts.map

package/dist/lib/crypto/mnemonic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mnemonic.d.ts","sourceRoot":"","sources":["../../../src/lib/crypto/mnemonic.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAczD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CACzC;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,GAAG,YAAY,CAGzG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE,SAAS,GAAG,SAAS,GAAG,SAAqB,GACrD,YAAY,CAuDd;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,mBAAmB;CACjC"}

package/dist/lib/crypto/mnemonic.js

@@ -0,0 +1,97 @@
+/**
+ * BIP39 mnemonic-based deterministic key derivation for atomic swaps.
+ *
+ * Derivation scheme (miradex-v0):
+ *   BIP39 mnemonic (24 words, 256-bit entropy)
+ *     -> BIP32 seed (64 bytes via PBKDF2)
+ *       -> BTC key: m/84'/0'/0'/0/0 (BIP84 P2WPKH)
+ *       -> s_b:     HMAC-SHA512(seed, "miradex/s_b/v0") -> first 32 bytes -> reduce mod L
+ *       -> v_b:     HMAC-SHA512(seed, "miradex/v_b/v0") -> first 32 bytes -> reduce mod L
+ *
+ * The mnemonic is THE master recovery key. From it, the user can reconstruct:
+ *   - BTC funding wallet (WIF + address)
+ *   - Swap scalar s_b (for XMR sweep after maker redeems)
+ *   - View key v_b (for Monero view-only wallet)
+ *   - DLEQ proof (regenerated via WASM from s_b)
+ */
+import * as bip39 from 'bip39';
+import { BIP32Factory } from 'bip32';
+import * as ecc from 'tiny-secp256k1';
+import { hmac } from '@noble/hashes/hmac.js';
+import { sha512 } from '@noble/hashes/sha2.js';
+import { bytesToHex } from '@noble/hashes/utils.js';
+import * as bitcoin from 'bitcoinjs-lib';
+import { wipe } from './bytes.js';
+const bip32 = BIP32Factory(ecc);
+const DERIVATION_SCHEME = 'miradex-v0';
+const SCALAR_DOMAIN = 'miradex/s_b/v0';
+const VIEW_KEY_DOMAIN = 'miradex/v_b/v0';
+const BTC_KEY_DOMAIN = 'miradex/b/v0';
+function btcDerivationPath(network) {
+    return network === 'mainnet' ? "m/84'/0'/0'/0/0" : "m/84'/1'/0'/0/0";
+}
+/**
+ * Generate a fresh 24-word BIP39 mnemonic (256 bits of entropy, sourced from
+ * the platform's `crypto.getRandomValues` via @scure/bip39) and derive every
+ * downstream swap key.
+ */
+export function generateMnemonicKeys(network = 'mainnet') {
+    const mnemonic = bip39.generateMnemonic(256);
+    return deriveFromMnemonic(mnemonic, network);
+}
+/**
+ * Derive all keys from an existing mnemonic.
+ * Throws if the mnemonic is invalid.
+ */
+export function deriveFromMnemonic(mnemonic, network = 'mainnet') {
+    const words = mnemonic.trim().split(/\s+/);
+    if (words.length !== 12 && words.length !== 24) {
+        throw new MnemonicError(`mnemonic must be 12 or 24 words, got ${String(words.length)}`);
+    }
+    if (!bip39.validateMnemonic(mnemonic)) {
+        throw new MnemonicError('Invalid BIP39 mnemonic');
+    }
+    const seed = bip39.mnemonicToSeedSync(mnemonic);
+    const net = network === 'mainnet' ? bitcoin.networks.bitcoin : (network === 'regtest' ? bitcoin.networks.regtest : bitcoin.networks.testnet);
+    const path = btcDerivationPath(network);
+    const root = bip32.fromSeed(seed, net);
+    const child = root.derivePath(path);
+    const wif = child.toWIF();
+    const { address } = bitcoin.payments.p2wpkh({
+        pubkey: Buffer.from(child.publicKey),
+        network: net,
+    });
+    if (!address) {
+        throw new MnemonicError('Failed to derive BTC address from mnemonic');
+    }
+    const s_b_raw = hmac(sha512, seed, new TextEncoder().encode(SCALAR_DOMAIN));
+    const s_b_seed = bytesToHex(s_b_raw.subarray(0, 32));
+    const v_b_raw = hmac(sha512, seed, new TextEncoder().encode(VIEW_KEY_DOMAIN));
+    const v_b_seed = bytesToHex(v_b_raw.subarray(0, 32));
+    const b_raw = hmac(sha512, seed, new TextEncoder().encode(BTC_KEY_DOMAIN));
+    const b_seed = bytesToHex(b_raw.subarray(0, 32));
+    // AV-G.2: wipe the HMAC scratch and the root seed as soon as every derived
+    // hex string is captured. Best-effort; V8 may copy internally.
+    wipe(s_b_raw);
+    wipe(v_b_raw);
+    wipe(b_raw);
+    wipe(seed);
+    return {
+        mnemonic,
+        wif,
+        btcAddress: address,
+        s_b_seed,
+        v_b_seed,
+        b_seed,
+        derivation: {
+            scheme: DERIVATION_SCHEME,
+            btcPath: path,
+            scalarDomain: SCALAR_DOMAIN,
+            viewKeyDomain: VIEW_KEY_DOMAIN,
+        },
+    };
+}
+export class MnemonicError extends Error {
+    name = 'MnemonicError';
+}
+//# sourceMappingURL=mnemonic.js.map

package/dist/lib/crypto/mnemonic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mnemonic.js","sourceRoot":"","sources":["../../../src/lib/crypto/mnemonic.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,KAAK,MAAM,OAAO,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACrC,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,KAAK,OAAO,MAAM,eAAe,CAAC;AAEzC,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAElC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AAEhC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AACvC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,MAAM,eAAe,GAAG,gBAAgB,CAAC;AACzC,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC,SAAS,iBAAiB,CAAC,OAA0C;IACnE,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACvE,CAAC;AAeD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAA6C,SAAS;IACzF,MAAM,QAAQ,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC7C,OAAO,kBAAkB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,UAA6C,SAAS;IAEtD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,aAAa,CAAC,wCAAwC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,wBAAwB,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7I,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;IAC1B,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QACpC,OAAO,EAAE,GAAG;KACb,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAErD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAErD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAEjD,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,IAAI,CAAC,IAAI,CAAC,CAAC;IAEX,OAAO;QACL,QAAQ;QACR,GAAG;QACH,UAAU,EAAE,OAAO;QACnB,QAAQ;QACR,QAAQ;QACR,MAAM;QACN,UAAU,EAAE;YACV,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,aAAa;YAC3B,aAAa,EAAE,eAAe;SAC/B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,GAAG,eAAe,CAAC;CACjC"}

package/dist/lib/crypto/platform.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Runtime environment detection for the WASM loader.
+ * Result is cached after the first call; call `__resetPlatformCache`
+ * from tests to observe a freshly-detected platform.
+ */
+export type Platform = 'node' | 'browser' | 'react-native' | 'electron-renderer' | 'electron-main' | 'worker' | 'unknown';
+export declare function detectPlatform(): Platform;
+/** Test-only; not for production code paths. */
+export declare function __resetPlatformCache(): void;
+//# sourceMappingURL=platform.d.ts.map

package/dist/lib/crypto/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../../src/lib/crypto/platform.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,QAAQ,GAChB,MAAM,GACN,SAAS,GACT,cAAc,GACd,mBAAmB,GACnB,eAAe,GACf,QAAQ,GACR,SAAS,CAAC;AAId,wBAAgB,cAAc,IAAI,QAAQ,CAIzC;AAwBD,gDAAgD;AAChD,wBAAgB,oBAAoB,IAAI,IAAI,CAE3C"}

package/dist/lib/crypto/platform.js

@@ -0,0 +1,38 @@
+/**
+ * Runtime environment detection for the WASM loader.
+ * Result is cached after the first call; call `__resetPlatformCache`
+ * from tests to observe a freshly-detected platform.
+ */
+let cached = null;
+export function detectPlatform() {
+    if (cached)
+        return cached;
+    cached = computePlatform();
+    return cached;
+}
+function computePlatform() {
+    const g = globalThis;
+    const navigator = g['navigator'];
+    if (navigator?.product === 'ReactNative')
+        return 'react-native';
+    if (typeof process !== 'undefined') {
+        const type = process.type;
+        if (type === 'renderer')
+            return 'electron-renderer';
+        if (type === 'browser')
+            return 'electron-main';
+    }
+    const selfGlobal = g['self'];
+    if (selfGlobal && typeof selfGlobal.importScripts === 'function')
+        return 'worker';
+    if (typeof process !== 'undefined' && process.versions?.node)
+        return 'node';
+    if (g['window'] !== undefined && g['document'] !== undefined)
+        return 'browser';
+    return 'unknown';
+}
+/** Test-only; not for production code paths. */
+export function __resetPlatformCache() {
+    cached = null;
+}
+//# sourceMappingURL=platform.js.map

package/dist/lib/crypto/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../../src/lib/crypto/platform.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,IAAI,MAAM,GAAoB,IAAI,CAAC;AAEnC,MAAM,UAAU,cAAc;IAC5B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,GAAG,eAAe,EAAE,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe;IACtB,MAAM,CAAC,GAAG,UAAqC,CAAC;IAEhD,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAqC,CAAC;IACrE,IAAI,SAAS,EAAE,OAAO,KAAK,aAAa;QAAE,OAAO,cAAc,CAAC;IAEhE,IAAI,OAAO,OAAO,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,IAAI,GAAI,OAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,mBAAmB,CAAC;QACpD,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,eAAe,CAAC;IACjD,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAA4C,CAAC;IACxE,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,aAAa,KAAK,UAAU;QAAE,OAAO,QAAQ,CAAC;IAElF,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,QAAQ,EAAE,IAAI;QAAE,OAAO,MAAM,CAAC;IAE5E,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE/E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,oBAAoB;IAClC,MAAM,GAAG,IAAI,CAAC;AAChB,CAAC"}

package/dist/lib/crypto/scalars.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Ed25519 scalar arithmetic for atomic-swap key combination.
+ *
+ * All Monero scalars are encoded little-endian per the protocol spec; Bitcoin
+ * sighash machinery is big-endian. Each function names its endianness.
+ */
+/** Ed25519 scalar-field prime (2^252 + 27742317777372353535851937790883648493). */
+export declare const ED25519_GROUP_ORDER: bigint;
+/**
+ * Decode a byte sequence as a little-endian bigint (byte[0] is the
+ * least-significant byte). This is the Monero / ed25519 convention.
+ */
+export declare function bytesToBigIntLE(bytes: Uint8Array): bigint;
+/**
+ * Decode a byte sequence as a big-endian bigint (byte[0] is the
+ * most-significant byte). This is the Bitcoin sighash convention.
+ */
+export declare function bytesToBigIntBE(bytes: Uint8Array): bigint;
+/**
+ * Back-compat alias for `bytesToBigIntLE`. Every call site should prefer the
+ * endian-suffixed variant so the byte order is visible at the call site.
+ */
+export declare function bytesToBigInt(bytes: Uint8Array): bigint;
+/** Encode a non-negative bigint as a 32-byte little-endian buffer, reduced mod L. */
+export declare function bigIntToBytes(num: bigint): Uint8Array;
+/** Decode a hex-encoded little-endian scalar and reduce it mod L. */
+export declare function hexToScalarLE(hex: string): bigint;
+/** Sum two 32-byte little-endian scalars mod L, returning a 32-byte LE buffer. */
+export declare function addScalars(a: Uint8Array, b: Uint8Array): Uint8Array;
+/** Back-compat hex/byte helpers used by older call sites. */
+export declare function bytesToHex(bytes: Uint8Array): string;
+export declare function hexToBytes(hex: string): Uint8Array;
+//# sourceMappingURL=scalars.d.ts.map

package/dist/lib/crypto/scalars.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scalars.d.ts","sourceRoot":"","sources":["../../../src/lib/crypto/scalars.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,QACkC,CAAC;AAEnE;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAQzD;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMzD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEvD;AAED,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAQrD;AAED,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIjD;AAED,kFAAkF;AAClF,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,UAAU,CAEnE;AAeD,6DAA6D;AAC7D,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEpD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAElD"}

package/dist/lib/crypto/scalars.js

@@ -0,0 +1,81 @@
+/**
+ * Ed25519 scalar arithmetic for atomic-swap key combination.
+ *
+ * All Monero scalars are encoded little-endian per the protocol spec; Bitcoin
+ * sighash machinery is big-endian. Each function names its endianness.
+ */
+/** Ed25519 scalar-field prime (2^252 + 27742317777372353535851937790883648493). */
+export const ED25519_GROUP_ORDER = 2n ** 252n + 27742317777372353535851937790883648493n;
+/**
+ * Decode a byte sequence as a little-endian bigint (byte[0] is the
+ * least-significant byte). This is the Monero / ed25519 convention.
+ */
+export function bytesToBigIntLE(bytes) {
+    let result = 0n;
+    for (let i = bytes.length - 1; i >= 0; i--) {
+        const b = bytes[i];
+        if (b === undefined)
+            continue;
+        result = (result << 8n) | BigInt(b);
+    }
+    return result;
+}
+/**
+ * Decode a byte sequence as a big-endian bigint (byte[0] is the
+ * most-significant byte). This is the Bitcoin sighash convention.
+ */
+export function bytesToBigIntBE(bytes) {
+    let result = 0n;
+    for (const b of bytes) {
+        result = (result << 8n) | BigInt(b);
+    }
+    return result;
+}
+/**
+ * Back-compat alias for `bytesToBigIntLE`. Every call site should prefer the
+ * endian-suffixed variant so the byte order is visible at the call site.
+ */
+export function bytesToBigInt(bytes) {
+    return bytesToBigIntLE(bytes);
+}
+/** Encode a non-negative bigint as a 32-byte little-endian buffer, reduced mod L. */
+export function bigIntToBytes(num) {
+    const bytes = new Uint8Array(32);
+    let n = ((num % ED25519_GROUP_ORDER) + ED25519_GROUP_ORDER) % ED25519_GROUP_ORDER;
+    for (let i = 0; i < 32; i++) {
+        bytes[i] = Number(n & 0xffn);
+        n >>= 8n;
+    }
+    return bytes;
+}
+/** Decode a hex-encoded little-endian scalar and reduce it mod L. */
+export function hexToScalarLE(hex) {
+    const bytes = hexToBytesLocal(hex);
+    const raw = bytesToBigIntLE(bytes);
+    return ((raw % ED25519_GROUP_ORDER) + ED25519_GROUP_ORDER) % ED25519_GROUP_ORDER;
+}
+/** Sum two 32-byte little-endian scalars mod L, returning a 32-byte LE buffer. */
+export function addScalars(a, b) {
+    return bigIntToBytes((bytesToBigIntLE(a) + bytesToBigIntLE(b)) % ED25519_GROUP_ORDER);
+}
+function hexToBytesLocal(hex) {
+    if (hex.length % 2 !== 0) {
+        throw new Error('hexToScalarLE: odd-length hex');
+    }
+    const out = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < out.length; i++) {
+        const byte = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+        if (Number.isNaN(byte))
+            throw new Error('hexToScalarLE: invalid hex');
+        out[i] = byte;
+    }
+    return out;
+}
+/** Back-compat hex/byte helpers used by older call sites. */
+export function bytesToHex(bytes) {
+    return Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');
+}
+export function hexToBytes(hex) {
+    return hexToBytesLocal(hex);
+}
+//# sourceMappingURL=scalars.js.map

package/dist/lib/crypto/scalars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scalars.js","sourceRoot":"","sources":["../../../src/lib/crypto/scalars.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mFAAmF;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAC9B,EAAE,IAAI,IAAI,GAAG,uCAAmD,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,mBAAmB,CAAC,GAAG,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;IAClF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC7B,CAAC,KAAK,EAAE,CAAC;IACX,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACnC,OAAO,CAAC,CAAC,GAAG,GAAG,mBAAmB,CAAC,GAAG,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;AACnF,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,UAAU,CAAC,CAAa,EAAE,CAAa;IACrD,OAAO,aAAa,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,GAAG,mBAAmB,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACtE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}

package/dist/lib/crypto/types.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Shape of the compiled miradex-rust module after `init()` runs.
+ * Mirrors #[wasm_bindgen] exports in ../../../miradex-rust/src/lib.rs.
+ */
+export interface WasmModule {
+    readonly generate_client_keys: () => string;
+    readonly generate_client_keys_from_seed: (s_b_hex: string, v_b_hex: string, b_hex: string) => string;
+    readonly verify_dleq_proof: (s_bitcoin_hex: string, s_monero_hex: string, proof_hex: string) => boolean;
+    readonly sign_digest: (b_hex: string, digest_hex: string) => string;
+    readonly encsign_digest: (b_hex: string, encryption_key_hex: string, digest_hex: string) => string;
+    readonly decrypt_signature: (scalar_hex: string, encsig_hex: string) => string;
+    readonly verify_encsig: (verification_key_hex: string, encryption_key_hex: string, digest_hex: string, encsig_hex: string) => boolean;
+    readonly recover_adaptor_scalar: (sig_hex: string, encsig_hex: string, encryption_key_hex: string) => string;
+    readonly derive_key_images: (outputs_json: string, view_key_hex: string, spend_key_hex: string) => string;
+    readonly select_decoys: (real_output_index: bigint, cumulative_distribution_json: string, ring_size: number) => string;
+    readonly sign_sweep_tx: (construction_data_json: string, spend_key_hex: string, view_key_hex: string) => string;
+    readonly compute_commitment_mask: (view_key_hex: string, tx_public_key_hex: string, output_index: bigint) => string;
+    readonly verify_commitment: (view_key_hex: string, tx_public_key_hex: string, output_index: bigint, amount: bigint, on_chain_commitment_hex: string) => boolean;
+    readonly decrypt_amount: (view_key_hex: string, tx_public_key_hex: string, output_index: bigint, encrypted_amount_hex: string) => bigint;
+    readonly secp256k1_scalar_to_ed25519: (secp_scalar_hex: string) => string;
+    readonly ed25519_scalar_add: (scalar_a_hex: string, scalar_b_hex: string) => string;
+    readonly version: () => string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/crypto/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/crypto/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,UAAU;IAEzB,QAAQ,CAAC,oBAAoB,EAAE,MAAM,MAAM,CAAC;IAC5C,QAAQ,CAAC,8BAA8B,EAAE,CACvC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,KACV,MAAM,CAAC;IACZ,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM,KACd,OAAO,CAAC;IAGb,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IACpE,QAAQ,CAAC,cAAc,EAAE,CACvB,KAAK,EAAE,MAAM,EACb,kBAAkB,EAAE,MAAM,EAC1B,UAAU,EAAE,MAAM,KACf,MAAM,CAAC;IACZ,QAAQ,CAAC,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC;IAC/E,QAAQ,CAAC,aAAa,EAAE,CACtB,oBAAoB,EAAE,MAAM,EAC5B,kBAAkB,EAAE,MAAM,EAC1B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,KACf,OAAO,CAAC;IACb,QAAQ,CAAC,sBAAsB,EAAE,CAC/B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,kBAAkB,EAAE,MAAM,KACvB,MAAM,CAAC;IAGZ,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,KAClB,MAAM,CAAC;IACZ,QAAQ,CAAC,aAAa,EAAE,CACtB,iBAAiB,EAAE,MAAM,EACzB,4BAA4B,EAAE,MAAM,EACpC,SAAS,EAAE,MAAM,KACd,MAAM,CAAC;IACZ,QAAQ,CAAC,aAAa,EAAE,CACtB,sBAAsB,EAAE,MAAM,EAC9B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,KACjB,MAAM,CAAC;IACZ,QAAQ,CAAC,uBAAuB,EAAE,CAChC,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,MAAM,EACzB,YAAY,EAAE,MAAM,KACjB,MAAM,CAAC;IACZ,QAAQ,CAAC,iBAAiB,EAAE,CAC1B,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,MAAM,EACzB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,EACd,uBAAuB,EAAE,MAAM,KAC5B,OAAO,CAAC;IACb,QAAQ,CAAC,cAAc,EAAE,CACvB,YAAY,EAAE,MAAM,EACpB,iBAAiB,EAAE,MAAM,EACzB,YAAY,EAAE,MAAM,EACpB,oBAAoB,EAAE,MAAM,KACzB,MAAM,CAAC;IAGZ,QAAQ,CAAC,2BAA2B,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1E,QAAQ,CAAC,kBAAkB,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;IAGpF,QAAQ,CAAC,OAAO,EAAE,MAAM,MAAM,CAAC;CAChC"}

package/dist/lib/crypto/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/lib/crypto/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/lib/crypto/types.ts"],"names":[],"mappings":""}

package/dist/lib/crypto/wasm.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Unified WASM loader + synchronous crypto wrappers.
+ *
+ * Callers invoke `await ensureWasm()` once (typically at the entry of an
+ * atomic-swap flow) and then call the synchronous wrappers afterwards.
+ * Thorchain, Chainflip, and NEAR-Intents verification paths never call this
+ * file, so the WASM binary is never loaded when those providers are used.
+ */
+import type { WasmModule } from './types.js';
+import type { ClientKeys } from '../../types/index.js';
+export interface EnsureWasmOptions {
+    /**
+     * When true, hash the loaded bytes and compare to SWAP_WASM_SHA256.
+     * When undefined, falls back to process.env.MIRADEX_VERIFY_WASM === '1'.
+     * Default: unverified (matches today's keygen-wasm behaviour).
+     */
+    readonly verifyIntegrity?: boolean;
+    /**
+     * Custom byte reader — used when the default platform reader cannot locate
+     * the binary (e.g., browser with a non-default asset path).
+     * Ignored if `overrideBytes` is provided.
+     */
+    readonly loadBytes?: () => Promise<Uint8Array>;
+    /**
+     * Pre-loaded bytes. Required on React Native. When provided, no byte
+     * reader runs; integrity still runs if `verifyIntegrity` is true.
+     */
+    readonly overrideBytes?: Uint8Array;
+}
+export declare function ensureWasm(options?: EnsureWasmOptions): Promise<void>;
+export declare function isKeygenAvailable(): boolean;
+export declare function initKeygen(mod: WasmModule): void;
+export declare function generateClientKeys(): ClientKeys;
+export declare function generateClientKeysFromSeed(sBHex: string, vBHex: string, bHex: string): ClientKeys;
+export declare function verifyDleqProof(sBitcoinHex: string, sMoneroHex: string, proofHex: string): boolean;
+export declare function signDigest(bHex: string, digestHex: string): string;
+export declare function encsignDigest(bHex: string, encryptionKeyHex: string, digestHex: string): string;
+export declare function decryptSignature(scalarHex: string, encsigHex: string): string;
+export declare function verifyEncsig(verificationKeyHex: string, encryptionKeyHex: string, digestHex: string, encsigHex: string): boolean;
+export declare function recoverAdaptorScalar(sigHex: string, encsigHex: string, encryptionKeyHex: string): string;
+export declare function deriveKeyImages(outputsJson: string, viewKeyHex: string, spendKeyHex: string): string;
+export declare function selectDecoys(realOutputIndex: number, distributionJson: string, ringSize: number): string;
+export declare function signSweepTx(constructionDataJson: string, spendKeyHex: string, viewKeyHex: string): string;
+export declare function computeCommitmentMask(viewKeyHex: string, txPublicKeyHex: string, outputIndex: number): string;
+export declare function verifyCommitment(viewKeyHex: string, txPublicKeyHex: string, outputIndex: number, amount: bigint, onChainCommitmentHex: string): boolean;
+export declare function decryptAmount(viewKeyHex: string, txPublicKeyHex: string, outputIndex: number, encryptedAmountHex: string): bigint;
+export declare function secp256k1ScalarToEd25519(secpScalarHex: string): string;
+export declare function ed25519ScalarAdd(scalarAHex: string, scalarBHex: string): string;
+/** Test-only: reset the cache so successive tests can re-init the module. */
+export declare function __resetWasmCache(): void;
+//# sourceMappingURL=wasm.d.ts.map

package/dist/lib/crypto/wasm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm.d.ts","sourceRoot":"","sources":["../../../src/lib/crypto/wasm.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAE7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAKvD,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC;CACrC;AAED,wBAAsB,UAAU,CAAC,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC3E;AAyFD,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AACD,wBAAgB,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAEhD;AAyBD,wBAAgB,kBAAkB,IAAI,UAAU,CAE/C;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GACX,UAAU,CAEZ;AAED,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAET;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAElE;AAED,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,GAChB,MAAM,CAER;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE7E;AAED,wBAAgB,YAAY,CAC1B,kBAAkB,EAAE,MAAM,EAC1B,gBAAgB,EAAE,MAAM,EACxB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAET;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,MAAM,GACvB,MAAM,CAER;AAED,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,MAAM,CAER;AAED,wBAAgB,YAAY,CAC1B,eAAe,EAAE,MAAM,EACvB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,GACf,MAAM,CAER;AAED,wBAAgB,WAAW,CACzB,oBAAoB,EAAE,MAAM,EAC5B,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB,MAAM,CAER;AAED,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,GAClB,MAAM,CAER;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAQT;AAED,wBAAgB,aAAa,CAC3B,UAAU,EAAE,MAAM,EAClB,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,GACzB,MAAM,CAOR;AAED,wBAAgB,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/E;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,IAAI,IAAI,CAGvC"}