@miradexio/client 0.1.0

package/dist/lib/monero/output-scanner.js

@@ -0,0 +1,180 @@
+/**
+ * Monero output scanning — detect owned outputs in a transaction.
+ *
+ * Given a transaction JSON (from monerod /get_transactions), the shared view key,
+ * and the combined spend public key, this module scans each output to determine
+ * if it belongs to the lock address. For matching outputs, it decrypts the amount
+ * and computes the RCT commitment mask.
+ *
+ * Reusable by both verify-xmr-lock.ts (lock verification) and monero-sweep.ts
+ * (sweep construction).
+ */
+import { Point } from '@noble/ed25519';
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { bytesToHex, hexToBytes } from '@noble/hashes/utils.js';
+import { noopLogger } from '../../interfaces/logger.js';
+import { ED25519_GROUP_ORDER, bytesToBigIntLE, hexToScalarLE, bigIntToBytes, } from '../crypto/scalars.js';
+/**
+ * Scan a transaction's outputs to find ones belonging to the given keys.
+ *
+ * @param txJson - Parsed transaction JSON from monerod
+ * @param globalOutputIndices - Global indices for each output (from get_transactions response)
+ * @param viewKeyHex - Combined private view key (32 bytes hex)
+ * @param spendPubHex - Combined public spend key S_a + S_b (32 bytes hex)
+ * @param computeMask - Function to compute commitment mask (typically WASM compute_commitment_mask)
+ * @param decryptAmountFn - Function to decrypt RCT amount (typically WASM decrypt_amount). If not provided, uses TS fallback.
+ * @param logger - Optional structured logger
+ * @returns Array of matching outputs with all metadata
+ */
+export function scanTransactionOutputs(params) {
+    const { txJson, globalOutputIndices, viewKeyHex, spendPubHex, computeMask, decryptAmountFn, logger: log = noopLogger } = params;
+    const txPubKeyR = extractTxPubKey(txJson.extra);
+    if (!txPubKeyR) {
+        log.error({ extraLen: txJson.extra.length }, 'No tx public key (tag 0x01) found in extra');
+        return [];
+    }
+    const txPubKeyHex = bytesToHex(txPubKeyR);
+    log.debug({ txPubKeyR: txPubKeyHex.slice(0, 16) + '...' }, 'Extracted tx public key R');
+    let d8Bytes;
+    try {
+        const viewKey = hexToScalar(viewKeyHex);
+        const rPoint = Point.fromHex(txPubKeyHex);
+        const sharedSecret = rPoint.multiply(viewKey);
+        const d8 = sharedSecret.clearCofactor();
+        d8Bytes = d8.toBytes();
+    }
+    catch (err) {
+        log.error({ error: err instanceof Error ? err.message : String(err) }, 'Failed to compute shared secret');
+        return [];
+    }
+    let spendPub;
+    try {
+        spendPub = Point.fromHex(spendPubHex);
+    }
+    catch (err) {
+        log.error({ error: err instanceof Error ? err.message : String(err), spendPubHex }, 'Invalid spend public key');
+        return [];
+    }
+    const results = [];
+    for (let i = 0; i < txJson.vout.length; i++) {
+        const output = txJson.vout[i];
+        if (!output)
+            continue;
+        const outputKeyHex = output.target.tagged_key?.key ?? output.target.key;
+        if (!outputKeyHex)
+            continue;
+        // P' = Hs(D8 || varint(i)) * G + B
+        const derivationScalar = deriveScalar(d8Bytes, i);
+        const expectedKey = Point.BASE.multiply(derivationScalar).add(spendPub);
+        const expectedKeyHex = bytesToHex(expectedKey.toBytes());
+        const isMatch = expectedKeyHex === outputKeyHex;
+        if (isMatch) {
+            // Decrypt amount — prefer WASM (uses same key derivation as mask/key images)
+            const ecdhInfo = txJson.rct_signatures.ecdhInfo[i];
+            let amount;
+            if (decryptAmountFn && ecdhInfo) {
+                amount = decryptAmountFn(viewKeyHex, txPubKeyHex, i, ecdhInfo.amount);
+            }
+            else {
+                amount = decryptAmount(d8Bytes, i, ecdhInfo);
+            }
+            let rctMask = '';
+            try {
+                rctMask = computeMask(viewKeyHex, txPubKeyHex, i);
+            }
+            catch (err) {
+                log.warn({ outputIndex: i, error: err instanceof Error ? err.message : String(err) }, 'Failed to compute commitment mask');
+            }
+            const globalIdx = globalOutputIndices[i] ?? 0;
+            log.info({
+                outputIndex: i,
+                globalOutputIndex: globalIdx,
+                amount: amount.toString(),
+                rctMaskLen: rctMask.length,
+            }, 'Found matching output');
+            results.push({
+                oneTimePublicKey: outputKeyHex,
+                txPublicKey: txPubKeyHex,
+                outputIndex: i,
+                globalOutputIndex: globalIdx,
+                amount,
+                rctMask,
+            });
+        }
+    }
+    log.info({ scannedOutputs: txJson.vout.length, matches: results.length }, 'Output scanning complete');
+    return results;
+}
+/** Extract the tx public key R from the extra field. Tag 0x01 = 32-byte pubkey. */
+export function extractTxPubKey(extra) {
+    for (let i = 0; i < extra.length; i++) {
+        if (extra[i] === 0x01 && i + 32 < extra.length) {
+            return new Uint8Array(extra.slice(i + 1, i + 33));
+        }
+    }
+    return null;
+}
+/** Decode a hex-encoded little-endian scalar reduced mod L. */
+export function hexToScalar(hex) {
+    return hexToScalarLE(hex);
+}
+/** Hs(D8 || varint(i)) mod L: keccak output interpreted as a little-endian scalar. */
+export function deriveScalar(d8Bytes, outputIndex) {
+    const hash = deriveScalarBytes(d8Bytes, outputIndex);
+    const raw = bytesToBigIntLE(hash);
+    return ((raw % ED25519_GROUP_ORDER) + ED25519_GROUP_ORDER) % ED25519_GROUP_ORDER;
+}
+/** Keccak256(D8 || varint(i)) as raw 32 bytes. */
+export function deriveScalarBytes(d8Bytes, outputIndex) {
+    const varintBuf = encodeVarint(outputIndex);
+    const preimage = new Uint8Array(d8Bytes.length + varintBuf.length);
+    preimage.set(d8Bytes);
+    preimage.set(varintBuf, d8Bytes.length);
+    return keccak_256(preimage);
+}
+/** Decrypt a Monero RingCT amount (Bulletproofs+ style, 8-byte XOR). */
+export function decryptAmount(d8Bytes, outputIndex, ecdhInfo) {
+    if (!ecdhInfo)
+        return 0n;
+    // Match wallet2 / Rust WASM `decrypt_amount_inner`:
+    //   derivation_scalar = sc_reduce32(keccak256(D8 || varint(i)))
+    //   amount_key        = keccak256("amount" || derivation_scalar.as_bytes())
+    // The reduced scalar is serialised canonically as 32 LE bytes before the
+    // second hash. Feeding the raw keccak256 output (without mod-L reduction)
+    // is wrong whenever the hash exceeds the group order, which silently
+    // produces garbage XOR plaintexts that can pass a one-sided
+    // `< expectedAmount` check downstream.
+    const rawDerivationHash = deriveScalarBytes(d8Bytes, outputIndex);
+    const derivationScalarBytes = bigIntToBytes(bytesToBigIntLE(rawDerivationHash));
+    const amountPrefix = new TextEncoder().encode('amount');
+    const amountPreimage = new Uint8Array(amountPrefix.length + 32);
+    amountPreimage.set(amountPrefix);
+    amountPreimage.set(derivationScalarBytes, amountPrefix.length);
+    const amountKey = keccak_256(amountPreimage);
+    // XOR first 8 bytes
+    const encryptedAmount = hexToBytes(ecdhInfo.amount);
+    const decrypted = new Uint8Array(8);
+    for (let i = 0; i < 8; i++) {
+        decrypted[i] = (encryptedAmount[i] ?? 0) ^ (amountKey[i] ?? 0);
+    }
+    // Read as little-endian u64
+    let amount = 0n;
+    for (let i = 7; i >= 0; i--) {
+        amount = (amount << 8n) | BigInt(decrypted[i] ?? 0);
+    }
+    return amount;
+}
+/** Encode a number as a Monero varint (unsigned LEB128). */
+export function encodeVarint(value) {
+    const bytes = [];
+    let v = value;
+    do {
+        let b = v & 0x7f;
+        v >>>= 7;
+        if (v !== 0)
+            b |= 0x80;
+        bytes.push(b);
+    } while (v !== 0);
+    return new Uint8Array(bytes);
+}
+//# sourceMappingURL=output-scanner.js.map

package/dist/lib/monero/output-scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-scanner.js","sourceRoot":"","sources":["../../../src/lib/monero/output-scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EACL,mBAAmB,EACnB,eAAe,EACf,aAAa,EACb,aAAa,GACd,MAAM,sBAAsB,CAAC;AAmB9B;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAQtC;IACC,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,EAAE,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;IAEhI,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,4CAA4C,CAAC,CAAC;QAC3F,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1C,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,EAAE,EAAE,2BAA2B,CAAC,CAAC;IAExF,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,YAAY,CAAC,aAAa,EAAE,CAAC;QACxC,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CACP,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC3D,iCAAiC,CAClC,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,QAAoC,CAAC;IACzC,IAAI,CAAC;QACH,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CACP,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,EACxE,0BAA0B,CAC3B,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAoB,EAAE,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QACxE,IAAI,CAAC,YAAY;YAAE,SAAS;QAE5B,mCAAmC;QACnC,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxE,MAAM,cAAc,GAAG,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,cAAc,KAAK,YAAY,CAAC;QAEhD,IAAI,OAAO,EAAE,CAAC;YACZ,6EAA6E;YAC7E,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACnD,IAAI,MAAc,CAAC;YACnB,IAAI,eAAe,IAAI,QAAQ,EAAE,CAAC;gBAChC,MAAM,GAAG,eAAe,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC/C,CAAC;YAED,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CACN,EAAE,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAC3E,mCAAmC,CACpC,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAE9C,GAAG,CAAC,IAAI,CACN;gBACE,WAAW,EAAE,CAAC;gBACd,iBAAiB,EAAE,SAAS;gBAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,UAAU,EAAE,OAAO,CAAC,MAAM;aAC3B,EACD,uBAAuB,CACxB,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC;gBACX,gBAAgB,EAAE,YAAY;gBAC9B,WAAW,EAAE,WAAW;gBACxB,WAAW,EAAE,CAAC;gBACd,iBAAiB,EAAE,SAAS;gBAC5B,MAAM;gBACN,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,GAAG,CAAC,IAAI,CACN,EAAE,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAC/D,0BAA0B,CAC3B,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,KAAwB;IACtD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC/C,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,OAAmB,EAAE,WAAmB;IACnE,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,CAAC,GAAG,GAAG,mBAAmB,CAAC,GAAG,mBAAmB,CAAC,GAAG,mBAAmB,CAAC;AACnF,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,iBAAiB,CAAC,OAAmB,EAAE,WAAmB;IACxE,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACnE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAC3B,OAAmB,EACnB,WAAmB,EACnB,QAAiD;IAEjD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,oDAAoD;IACpD,gEAAgE;IAChE,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,4DAA4D;IAC5D,uCAAuC;IACvC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAClE,MAAM,qBAAqB,GAAG,aAAa,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAEhF,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAChE,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjC,cAAc,CAAC,GAAG,CAAC,qBAAqB,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,UAAU,CAAC,cAAc,CAAC,CAAC;IAE7C,oBAAoB;IACpB,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,4BAA4B;IAC5B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,GAAG,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACjB,CAAC,MAAM,CAAC,CAAC;QACT,IAAI,CAAC,KAAK,CAAC;YAAE,CAAC,IAAI,IAAI,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;IAClB,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC"}

package/dist/lib/monero/rpc.d.ts

@@ -0,0 +1,131 @@
+/**
+ * Typed wrappers for monerod RPC endpoints.
+ *
+ * All functions use multi-node fallback: try each node in order until one succeeds.
+ * Supports both binary RPC (POST to path) and JSON-RPC (POST to /json_rpc).
+ * Works on restricted RPC port (18089/38089).
+ */
+import type { Logger } from '../../interfaces/logger.js';
+export interface MonerodConfig {
+    readonly nodes: readonly string[];
+    readonly logger?: Logger;
+}
+/**
+ * Default public Monero mainnet RPC endpoints. Source of truth lives in
+ * `default-config.ts`; this re-export preserves the existing public name.
+ */
+export declare const MAINNET_NODES: readonly string[];
+/**
+ * Default public Monero stagenet RPC endpoints. Source of truth lives in
+ * `default-config.ts`.
+ */
+export declare const STAGENET_NODES: readonly string[];
+export interface MoneroTxJson {
+    readonly extra: readonly number[];
+    readonly unlock_time?: number;
+    readonly vout: readonly {
+        readonly amount: number;
+        readonly target: {
+            readonly tagged_key?: {
+                readonly key: string;
+                readonly view_tag: string;
+            };
+            readonly key?: string;
+        };
+        readonly unlock_time?: number;
+    }[];
+    readonly rct_signatures: {
+        readonly type: number;
+        readonly ecdhInfo: readonly {
+            readonly amount: string;
+        }[];
+        readonly outPk: readonly string[];
+    };
+}
+export interface FetchedTransaction {
+    readonly txJson: MoneroTxJson;
+    readonly blockHeight: number;
+    readonly confirmations: number;
+    readonly inPool: boolean;
+    /** Global output indices for each output in the transaction. */
+    readonly outputIndices: readonly number[];
+    readonly txHash: string;
+}
+export interface OutputKeyInfo {
+    readonly key: string;
+    readonly mask: string;
+    readonly unlocked: boolean;
+    readonly height: number;
+}
+export interface FeeEstimate {
+    readonly feePerByte: number;
+    readonly quantizationMask: number;
+}
+/**
+ * Fetch a transaction by hash from monerod.
+ * Returns the full parsed tx JSON, global output indices, and metadata.
+ */
+export declare function fetchTransaction(config: MonerodConfig, txHash: string): Promise<FetchedTransaction>;
+export interface MoneroQuorumConfig {
+    readonly nodes: readonly string[];
+    readonly quorum: number;
+    readonly timeoutMs: number;
+    readonly logger?: Logger;
+}
+/**
+ * Fetch a transaction from `quorum`-many independent monerod nodes in parallel
+ * and only return once at least that many nodes agree on the canonical fields
+ * (extra, vout, ecdhInfo, unlock_time). Confirmations may differ by up to ±2.
+ *
+ * @throws {VerificationError} `E_MONERO_QUORUM` when too few nodes respond.
+ * @security Closes AV-E.5 — single malicious node cannot forge a lock tx.
+ */
+export declare function fetchTransactionQuorum(config: MoneroQuorumConfig, lockTxHash: string): Promise<FetchedTransaction>;
+/**
+ * Fetch output public keys and commitments by global index.
+ * Used for building the ring of decoys.
+ */
+export declare function fetchOutputKeys(config: MonerodConfig, globalIndices: readonly number[]): Promise<readonly OutputKeyInfo[]>;
+/**
+ * Get the current chain height from monerod.
+ */
+export declare function fetchChainHeight(config: MonerodConfig): Promise<number>;
+export interface BroadcastResult {
+    readonly txHash: string;
+    readonly status: string;
+    /** True if the tx was rejected because the key image is already spent.
+     *  This means we already broadcast this tx successfully in a previous attempt. */
+    readonly alreadySpent: boolean;
+}
+/**
+ * Broadcast a raw signed transaction to the Monero network.
+ *
+ * If the daemon returns `double_spend`, this is treated as a prior successful
+ * broadcast (only we have the spend key, so we must have sent it before).
+ * Returns `alreadySpent: true` instead of throwing.
+ */
+export declare function broadcastTransaction(config: MonerodConfig, rawTxHex: string): Promise<BroadcastResult>;
+/**
+ * Fetch the cumulative RCT output distribution per block.
+ * Used for gamma distribution decoy selection.
+ *
+ * Returns an array where `distribution[i]` is the cumulative count
+ * of RCT outputs up to and including block `i + startHeight`.
+ */
+/**
+ * Fetch the cumulative RCT output distribution per block.
+ * Used for gamma distribution decoy selection.
+ *
+ * Returns the full cumulative distribution: `base` is added to each entry
+ * so the array represents absolute cumulative counts from block 0.
+ *
+ * Must request with `binary: false` to get JSON-parseable data
+ * (default binary format embeds raw bytes that break JSON.parse).
+ */
+export declare function fetchOutputDistribution(config: MonerodConfig): Promise<readonly number[]>;
+/**
+ * Get the current fee estimate from monerod.
+ * Returns fee per byte in piconeros.
+ */
+export declare function fetchFeeEstimate(config: MonerodConfig): Promise<FeeEstimate>;
+//# sourceMappingURL=rpc.d.ts.map

package/dist/lib/monero/rpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.d.ts","sourceRoot":"","sources":["../../../src/lib/monero/rpc.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAIzD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAOD;;;GAGG;AACH,eAAO,MAAM,aAAa,mBAAuB,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,cAAc,mBAAwB,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,SAAS;QACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,UAAU,CAAC,EAAE;gBAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;aAAE,CAAC;YAC1E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;SACvB,CAAC;QACF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,EAAE,CAAC;IACJ,QAAQ,CAAC,cAAc,EAAE;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,SAAS;YAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC1D,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAwBD;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,CAAC,CAyC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,kBAAkB,EAC1B,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,kBAAkB,CAAC,CAgB7B;AAqDD;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,SAAS,MAAM,EAAE,GAC/B,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAwBnC;AAED;;GAEG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAe7E;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;sFACkF;IAClF,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,EACrB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,eAAe,CAAC,CA4C1B;AAsBD;;;;;;GAMG;AACH;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAiC5B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAiBlF"}

package/dist/lib/monero/rpc.js

@@ -0,0 +1,267 @@
+import { noopLogger } from '../../interfaces/logger.js';
+import { VerificationError } from '../../types/index.js';
+import { MONERO_MAINNET_NODES, MONERO_STAGENET_NODES, } from '../default-config.js';
+/**
+ * Default public Monero mainnet RPC endpoints. Source of truth lives in
+ * `default-config.ts`; this re-export preserves the existing public name.
+ */
+export const MAINNET_NODES = MONERO_MAINNET_NODES;
+/**
+ * Default public Monero stagenet RPC endpoints. Source of truth lives in
+ * `default-config.ts`.
+ */
+export const STAGENET_NODES = MONERO_STAGENET_NODES;
+async function tryNodes(config, label, makeRequest) {
+    const log = config.logger ?? noopLogger;
+    const errors = [];
+    for (const nodeUrl of config.nodes) {
+        try {
+            log.debug({ nodeUrl, label }, 'Trying monerod node');
+            return await makeRequest(nodeUrl);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            errors.push(`${nodeUrl}: ${msg}`);
+            log.warn({ nodeUrl, error: msg, label }, 'Monerod node failed, trying next');
+        }
+    }
+    throw new Error(`${label}: all ${String(config.nodes.length)} nodes failed. Errors: ${errors.join('; ')}`);
+}
+/**
+ * Fetch a transaction by hash from monerod.
+ * Returns the full parsed tx JSON, global output indices, and metadata.
+ */
+export async function fetchTransaction(config, txHash) {
+    return tryNodes(config, 'get_transactions', async (nodeUrl) => {
+        const response = await fetch(`${nodeUrl}/get_transactions`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ txs_hashes: [txHash], decode_as_json: true }),
+        });
+        if (!response.ok)
+            throw new Error(`HTTP ${String(response.status)}`);
+        const result = (await response.json());
+        if (result.status !== 'OK')
+            throw new Error(`RPC status: ${result.status}`);
+        if (!result.txs || result.txs.length === 0) {
+            const missed = result.missed_tx?.join(', ') ?? txHash;
+            throw new Error(`Transaction not found: ${missed}`);
+        }
+        const entry = result.txs[0];
+        if (!entry)
+            throw new Error('Empty txs array');
+        return {
+            txJson: JSON.parse(entry.as_json),
+            blockHeight: entry.block_height,
+            confirmations: entry.confirmations,
+            inPool: entry.in_pool,
+            outputIndices: entry.output_indices ?? [],
+            txHash: entry.tx_hash,
+        };
+    });
+}
+/**
+ * Fetch a transaction from `quorum`-many independent monerod nodes in parallel
+ * and only return once at least that many nodes agree on the canonical fields
+ * (extra, vout, ecdhInfo, unlock_time). Confirmations may differ by up to ±2.
+ *
+ * @throws {VerificationError} `E_MONERO_QUORUM` when too few nodes respond.
+ * @security Closes AV-E.5 — single malicious node cannot forge a lock tx.
+ */
+export async function fetchTransactionQuorum(config, lockTxHash) {
+    const log = config.logger ?? noopLogger;
+    const attempts = config.nodes.map((url) => withTimeout(fetchTransaction({ nodes: [url], logger: log }, lockTxHash), config.timeoutMs));
+    const settled = await Promise.allSettled(attempts);
+    const successes = settled
+        .filter((s) => s.status === 'fulfilled')
+        .map((s) => s.value);
+    if (successes.length < config.quorum) {
+        throw new VerificationError('E_MONERO_QUORUM', `only ${String(successes.length)} of ${String(config.nodes.length)} nodes responded, need ${String(config.quorum)}`);
+    }
+    return pickAgreeingTransaction(successes, config.quorum);
+}
+function canonicalTxKey(tx) {
+    const { txJson } = tx;
+    return JSON.stringify({
+        extra: txJson.extra,
+        unlock_time: txJson.unlock_time ?? 0,
+        vout: txJson.vout,
+        ecdhInfo: txJson.rct_signatures.ecdhInfo,
+        outPk: txJson.rct_signatures.outPk,
+    });
+}
+function pickAgreeingTransaction(successes, quorum) {
+    const buckets = new Map();
+    for (const tx of successes) {
+        const key = canonicalTxKey(tx);
+        const bucket = buckets.get(key);
+        if (bucket)
+            bucket.push(tx);
+        else
+            buckets.set(key, [tx]);
+    }
+    for (const [, txs] of buckets) {
+        if (txs.length >= quorum) {
+            const confirmations = medianConfirmations(txs);
+            const first = txs[0];
+            if (!first)
+                continue;
+            return { ...first, confirmations };
+        }
+    }
+    throw new VerificationError('E_MONERO_QUORUM', `no ${String(quorum)} nodes returned byte-identical transaction data`);
+}
+function medianConfirmations(txs) {
+    const values = txs.map((t) => t.confirmations).sort((a, b) => a - b);
+    return values[Math.floor(values.length / 2)] ?? 0;
+}
+async function withTimeout(promise, ms) {
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => reject(new Error(`timeout after ${String(ms)}ms`)), ms);
+        promise.then((value) => { clearTimeout(timer); resolve(value); }, (err) => { clearTimeout(timer); reject(err instanceof Error ? err : new Error(String(err))); });
+    });
+}
+/**
+ * Fetch output public keys and commitments by global index.
+ * Used for building the ring of decoys.
+ */
+export async function fetchOutputKeys(config, globalIndices) {
+    return tryNodes(config, 'get_outs', async (nodeUrl) => {
+        const response = await fetch(`${nodeUrl}/get_outs`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                outputs: globalIndices.map((index) => ({ amount: 0, index })),
+                get_txid: false,
+            }),
+        });
+        if (!response.ok)
+            throw new Error(`HTTP ${String(response.status)}`);
+        const result = (await response.json());
+        if (result.status !== 'OK' || !result.outs) {
+            throw new Error(`get_outs failed: ${result.status}`);
+        }
+        return result.outs;
+    });
+}
+/**
+ * Get the current chain height from monerod.
+ */
+export async function fetchChainHeight(config) {
+    return tryNodes(config, 'get_info', async (nodeUrl) => {
+        const response = await fetch(`${nodeUrl}/get_info`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({}),
+        });
+        if (!response.ok)
+            throw new Error(`HTTP ${String(response.status)}`);
+        const result = (await response.json());
+        if (result.status !== 'OK')
+            throw new Error(`get_info failed: ${result.status}`);
+        return result.height;
+    });
+}
+/**
+ * Broadcast a raw signed transaction to the Monero network.
+ *
+ * If the daemon returns `double_spend`, this is treated as a prior successful
+ * broadcast (only we have the spend key, so we must have sent it before).
+ * Returns `alreadySpent: true` instead of throwing.
+ */
+export async function broadcastTransaction(config, rawTxHex) {
+    return tryNodes(config, 'send_raw_transaction', async (nodeUrl) => {
+        const response = await fetch(`${nodeUrl}/send_raw_transaction`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ tx_as_hex: rawTxHex, do_not_relay: false }),
+        });
+        if (!response.ok)
+            throw new Error(`HTTP ${String(response.status)}`);
+        const result = (await response.json());
+        if (result.status === 'OK') {
+            return { txHash: result.tx_hash ?? '', status: 'OK', alreadySpent: false };
+        }
+        // Double spend means we already broadcast this tx — treat as success
+        if (result.double_spend) {
+            return { txHash: '', status: 'double_spend', alreadySpent: true };
+        }
+        // Any other rejection is a real error
+        const flags = Object.entries(result)
+            .filter(([k, v]) => k !== 'status' && k !== 'reason' && k !== 'tx_hash' && v === true)
+            .map(([k]) => k);
+        const detail = flags.length > 0 ? ` [flags: ${flags.join(', ')}]` : '';
+        throw new Error(`Daemon rejected tx: ${result.reason || 'unknown reason'}${detail} (status: ${result.status})`);
+    });
+}
+async function jsonRpc(nodeUrl, method, params) {
+    const response = await fetch(`${nodeUrl}/json_rpc`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ jsonrpc: '2.0', id: '0', method, params }),
+    });
+    if (!response.ok)
+        throw new Error(`HTTP ${String(response.status)}`);
+    const result = (await response.json());
+    if (result.error)
+        throw new Error(`JSON-RPC error: ${result.error.message}`);
+    if (!result.result)
+        throw new Error(`JSON-RPC returned no result for ${method}`);
+    return result.result;
+}
+/**
+ * Fetch the cumulative RCT output distribution per block.
+ * Used for gamma distribution decoy selection.
+ *
+ * Returns an array where `distribution[i]` is the cumulative count
+ * of RCT outputs up to and including block `i + startHeight`.
+ */
+/**
+ * Fetch the cumulative RCT output distribution per block.
+ * Used for gamma distribution decoy selection.
+ *
+ * Returns the full cumulative distribution: `base` is added to each entry
+ * so the array represents absolute cumulative counts from block 0.
+ *
+ * Must request with `binary: false` to get JSON-parseable data
+ * (default binary format embeds raw bytes that break JSON.parse).
+ */
+export async function fetchOutputDistribution(config) {
+    return tryNodes(config, 'get_output_distribution', async (nodeUrl) => {
+        const result = await jsonRpc(nodeUrl, 'get_output_distribution', {
+            amounts: [0],
+            cumulative: true,
+            from_height: 0,
+            binary: false,
+        });
+        if (result.status !== 'OK' || !result.distributions || result.distributions.length === 0) {
+            throw new Error(`get_output_distribution failed: ${result.status}`);
+        }
+        const dist = result.distributions[0];
+        if (!dist)
+            throw new Error('Empty distributions array');
+        // If from_height > 0, the distribution is relative to `base`.
+        // Add base to get absolute cumulative counts.
+        if (dist.base > 0) {
+            return dist.distribution.map((v) => v + dist.base);
+        }
+        return dist.distribution;
+    });
+}
+/**
+ * Get the current fee estimate from monerod.
+ * Returns fee per byte in piconeros.
+ */
+export async function fetchFeeEstimate(config) {
+    return tryNodes(config, 'get_fee_estimate', async (nodeUrl) => {
+        const result = await jsonRpc(nodeUrl, 'get_fee_estimate', { grace_blocks: 10 });
+        if (result.status !== 'OK') {
+            throw new Error(`get_fee_estimate failed: ${result.status}`);
+        }
+        return {
+            feePerByte: result.fee,
+            quantizationMask: result.quantization_mask,
+        };
+    });
+}
+//# sourceMappingURL=rpc.js.map

package/dist/lib/monero/rpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rpc.js","sourceRoot":"","sources":["../../../src/lib/monero/rpc.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAOzD,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,sBAAsB,CAAC;AAE9B;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,qBAAqB,CAAC;AA0CpD,KAAK,UAAU,QAAQ,CACrB,MAAqB,EACrB,KAAa,EACb,WAA4C;IAE5C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC;IACxC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,qBAAqB,CAAC,CAAC;YACrD,OAAO,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,KAAK,GAAG,EAAE,CAAC,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,kCAAkC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC7G,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAqB,EACrB,MAAc;IAEd,OAAO,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mBAAmB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;SACrE,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAWpC,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAE/C,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAiB;YACjD,WAAW,EAAE,KAAK,CAAC,YAAY;YAC/B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,MAAM,EAAE,KAAK,CAAC,OAAO;YACrB,aAAa,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;YACzC,MAAM,EAAE,KAAK,CAAC,OAAO;SACtB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AASD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAA0B,EAC1B,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,UAAU,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACxC,WAAW,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,SAAS,CAAC,CAC3F,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,OAAO;SACtB,MAAM,CAAC,CAAC,CAAC,EAAmD,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;SACxF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,IAAI,iBAAiB,CACzB,iBAAiB,EACjB,QAAQ,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACpH,CAAC;IACJ,CAAC;IACD,OAAO,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,EAAsB;IAC5C,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACtB,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC;QACpC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC,QAAQ;QACxC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,KAAK;KACnC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAAwC,EACxC,MAAc;IAEd,MAAM,OAAO,GAAG,IAAI,GAAG,EAAgC,CAAC;IACxD,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;YACvB,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,iBAAiB,CACzB,iBAAiB,EACjB,MAAM,MAAM,CAAC,MAAM,CAAC,iDAAiD,CACtE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAkC;IAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,WAAW,CAAI,OAAmB,EAAE,EAAU;IAC3D,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvF,OAAO,CAAC,IAAI,CACV,CAAC,KAAK,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EACnD,CAAC,GAAY,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACxG,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAqB,EACrB,aAAgC;IAEhC,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,WAAW,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC7D,QAAQ,EAAE,KAAK;aAChB,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGpC,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAqB;IAC1D,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,WAAW,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuC,CAAC;QAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEjF,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAqB,EACrB,QAAgB;IAEhB,OAAO,QAAQ,CAAC,MAAM,EAAE,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,uBAAuB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;SACnE,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAcpC,CAAC;QAEF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC7E,CAAC;QAED,qEAAqE;QACrE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACpE,CAAC;QAED,sCAAsC;QACtC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aACjC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC;aACrF,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,uBAAuB,MAAM,CAAC,MAAM,IAAI,gBAAgB,GAAG,MAAM,aAAa,MAAM,CAAC,MAAM,GAAG,CAC/F,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,OAAO,CAAI,OAAe,EAAE,MAAc,EAAE,MAAe;IACxE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,WAAW,EAAE;QAClD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;KAClE,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAErE,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAGpC,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;IAEjF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAqB;IAErB,OAAO,QAAQ,CAAC,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CASzB,OAAO,EAAE,yBAAyB,EAAE;YACrC,OAAO,EAAE,CAAC,CAAC,CAAC;YACZ,UAAU,EAAE,IAAI;YAChB,WAAW,EAAE,CAAC;YACd,MAAM,EAAE,KAAK;SACd,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAExD,8DAA8D;QAC9D,8CAA8C;QAC9C,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACrD,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAqB;IAC1D,OAAO,QAAQ,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAIzB,OAAO,EAAE,kBAAkB,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAEtD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO;YACL,UAAU,EAAE,MAAM,CAAC,GAAG;YACtB,gBAAgB,EAAE,MAAM,CAAC,iBAAiB;SAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/monero/verify-lock.d.ts

@@ -0,0 +1,50 @@
+import type { Logger } from '../../interfaces/logger.js';
+export interface XmrLockVerification {
+    /** Whether the lock was verified. */
+    readonly verified: boolean;
+    /** Amount locked in piconeros (if verified). */
+    readonly amount: bigint;
+    /** Number of confirmations. */
+    readonly confirmations: number;
+    /** Reason for failure (if not verified). */
+    readonly reason?: string;
+    /**
+     * True when a failure is the user waiting for confirmations to accumulate.
+     * Callers may retry after a delay. Any other failure is terminal and must
+     * not be retried without human decision.
+     */
+    readonly retryable?: boolean;
+}
+export interface VerifyXmrLockParams {
+    /** Lock transaction hash (hex, 64 chars). */
+    readonly lockTxHash: string;
+    /** Shared private view key v = v_a + v_b (hex, 64 chars). */
+    readonly viewKeyHex: string;
+    /** Combined public spend key S_a_monero + S_b_monero (hex, 64 chars). */
+    readonly spendPubHex: string;
+    /** Expected amount in piconeros. */
+    readonly expectedAmount: bigint;
+    /** Minimum confirmations required (default: 10). */
+    readonly minConfirmations?: number;
+    /** Public Monero node URL (single-node path; prefer `monerodNodes` + quorum). */
+    readonly monerodUrl?: string;
+    /** Multiple Monero node URLs for quorum verification (≥3 recommended). */
+    readonly monerodNodes?: readonly string[];
+    /** Minimum nodes that must agree on the tx. Default 2. */
+    readonly monerodQuorum?: number;
+    /** Per-node request timeout in ms. Default 15_000. */
+    readonly monerodTimeoutMs?: number;
+    /** Alice's tx secret key r (hex). If provided, verifies R = r*G. */
+    readonly txKeyHex?: string;
+    /** Logger. */
+    readonly logger?: Logger;
+}
+/**
+ * Verify that XMR is locked at the shared address by scanning the lock
+ * transaction from a public Monero node.
+ *
+ * Call this BEFORE submitting encsig. If this returns verified: false,
+ * DO NOT submit the encrypted signature.
+ */
+export declare function verifyXmrLocked(params: VerifyXmrLockParams): Promise<XmrLockVerification>;
+//# sourceMappingURL=verify-lock.d.ts.map