@miradexio/client 0.1.0

package/dist/lib/monero/verify-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-lock.d.ts","sourceRoot":"","sources":["../../../src/lib/monero/verify-lock.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAWzD,MAAM,WAAW,mBAAmB;IAClC,qCAAqC;IACrC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+BAA+B;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,6DAA6D;IAC7D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oCAAoC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,oDAAoD;IACpD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,iFAAiF;IACjF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,0DAA0D;IAC1D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc;IACd,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,mBAAmB,CAAC,CA8K9B"}

package/dist/lib/monero/verify-lock.js

@@ -0,0 +1,161 @@
+/**
+ * Client-side verification that XMR is locked at the shared address.
+ *
+ * Fetches the lock transaction from a public Monero node and scans its
+ * outputs using the shared view key. This ensures the client doesn't
+ * submit encsig (releasing BTC) unless the XMR is actually locked.
+ *
+ * Uses @noble/ed25519 + @noble/hashes — both already in dependencies.
+ * No WASM, no heavy dependencies, no sidecar required.
+ */
+import { Point } from '@noble/ed25519';
+import { bytesToHex } from '@noble/hashes/utils.js';
+import { noopLogger } from '../../interfaces/logger.js';
+import { extractTxPubKey, hexToScalar, deriveScalar, decryptAmount, } from './output-scanner.js';
+import { fetchTransaction, fetchTransactionQuorum, STAGENET_NODES } from './rpc.js';
+const FAIL = { verified: false, amount: 0n, confirmations: 0 };
+/**
+ * Verify that XMR is locked at the shared address by scanning the lock
+ * transaction from a public Monero node.
+ *
+ * Call this BEFORE submitting encsig. If this returns verified: false,
+ * DO NOT submit the encrypted signature.
+ */
+export async function verifyXmrLocked(params) {
+    const { lockTxHash, viewKeyHex, spendPubHex, expectedAmount, minConfirmations = 10, txKeyHex, logger: log = noopLogger, } = params;
+    const quorumNodes = params.monerodNodes;
+    const nodes = quorumNodes ?? (params.monerodUrl ? [params.monerodUrl] : [...STAGENET_NODES]);
+    const quorum = params.monerodQuorum ?? 2;
+    const timeoutMs = params.monerodTimeoutMs ?? 15_000;
+    log.info({ lockTxHash, nodes, quorum, viewKeyLen: viewKeyHex.length, spendPubLen: spendPubHex.length }, 'Verifying XMR lock');
+    let txJson;
+    let confirmations;
+    try {
+        const fetched = quorumNodes && quorumNodes.length >= quorum
+            ? await fetchTransactionQuorum({ nodes, quorum, timeoutMs, logger: log }, lockTxHash)
+            : await fetchTransaction({ nodes, logger: log }, lockTxHash);
+        txJson = fetched.txJson;
+        confirmations = fetched.confirmations;
+        log.info({ confirmations, inPool: fetched.inPool, blockHeight: fetched.blockHeight }, 'Transaction found on chain');
+    }
+    catch (err) {
+        const reason = `Could not fetch tx: ${err instanceof Error ? err.message : String(err)}`;
+        log.warn({ lockTxHash, reason }, 'Monerod fetch failed; marking retryable');
+        // Transient network / node failure — the caller should retry after a
+        // backoff rather than treat this as a hard verification failure.
+        return { ...FAIL, reason, retryable: true };
+    }
+    if (confirmations < minConfirmations) {
+        return {
+            verified: false,
+            amount: 0n,
+            confirmations,
+            reason: `Only ${String(confirmations)} confirmations (need ${String(minConfirmations)})`,
+            retryable: true,
+        };
+    }
+    // AV-A.5: a non-zero tx-level unlock_time keeps the output spend-locked past
+    // the cancel window. There is no legitimate reason for a swap-lock tx to use
+    // it, so treat any non-zero value as a griefing attempt.
+    if (txJson.unlock_time !== undefined && txJson.unlock_time !== 0) {
+        return {
+            verified: false,
+            amount: 0n,
+            confirmations,
+            reason: `unlock_time is ${String(txJson.unlock_time)} (expected 0)`,
+        };
+    }
+    const txPubKeyR = extractTxPubKey(txJson.extra);
+    if (!txPubKeyR) {
+        return {
+            verified: false,
+            amount: 0n,
+            confirmations,
+            reason: 'Could not extract tx public key from extra',
+        };
+    }
+    const txPubKeyHex = bytesToHex(txPubKeyR);
+    log.info({ txPubKeyR: txPubKeyHex }, 'Extracted tx public key R');
+    let d8Bytes;
+    try {
+        if (txKeyHex) {
+            log.debug({ txKeyLen: txKeyHex.length }, 'Using tx_key path for verification');
+            const txKey = hexToScalar(txKeyHex);
+            const expectedR = Point.BASE.multiply(txKey);
+            const expectedRHex = bytesToHex(expectedR.toBytes());
+            if (expectedRHex !== bytesToHex(txPubKeyR)) {
+                return {
+                    verified: false,
+                    amount: 0n,
+                    confirmations,
+                    reason: 'tx_key does not match tx public key — Alice may have provided a fake tx_key',
+                };
+            }
+            log.info({}, 'tx_key verified: R = r*G');
+            const viewKeyScalar = hexToScalar(viewKeyHex);
+            const viewPub = Point.BASE.multiply(viewKeyScalar);
+            const sharedSecret = viewPub.multiply(txKey);
+            d8Bytes = sharedSecret.clearCofactor().toBytes();
+        }
+        else {
+            const viewKey = hexToScalar(viewKeyHex);
+            const rPoint = Point.fromHex(txPubKeyHex);
+            const sharedSecret = rPoint.multiply(viewKey);
+            d8Bytes = sharedSecret.clearCofactor().toBytes();
+        }
+    }
+    catch (err) {
+        const reason = `Cryptographic error: ${err instanceof Error ? err.message : String(err)}`;
+        return { verified: false, amount: 0n, confirmations, reason };
+    }
+    let spendPub;
+    try {
+        spendPub = Point.fromHex(spendPubHex);
+    }
+    catch (err) {
+        const reason = `Invalid spend public key: ${err instanceof Error ? err.message : String(err)}`;
+        return { verified: false, amount: 0n, confirmations, reason };
+    }
+    for (let i = 0; i < txJson.vout.length; i++) {
+        const output = txJson.vout[i];
+        if (!output)
+            continue;
+        // AV-A.5: skip per-output unlock_time != 0 so a mixed lock tx can still
+        // match if its honest output is the target.
+        if (output.unlock_time !== undefined && output.unlock_time !== 0)
+            continue;
+        const outputKeyHex = output.target.tagged_key?.key ?? output.target.key;
+        if (!outputKeyHex)
+            continue;
+        const derivationScalar = deriveScalar(d8Bytes, i);
+        const expectedKey = Point.BASE.multiply(derivationScalar).add(spendPub);
+        const expectedKeyHex = bytesToHex(expectedKey.toBytes());
+        if (expectedKeyHex === outputKeyHex) {
+            log.info({ outputIndex: i }, 'Found matching output');
+            const ecdhInfo = txJson.rct_signatures.ecdhInfo[i];
+            const amount = decryptAmount(d8Bytes, i, ecdhInfo);
+            log.info({
+                amount: amount.toString(),
+                expectedAmount: expectedAmount.toString(),
+                amountXmr: (Number(amount) / 1e12).toFixed(12),
+            }, 'Decrypted amount');
+            if (amount < expectedAmount) {
+                return {
+                    verified: false,
+                    amount,
+                    confirmations,
+                    reason: `Locked amount ${amount.toString()} is less than expected ${expectedAmount.toString()}`,
+                };
+            }
+            return { verified: true, amount, confirmations };
+        }
+    }
+    log.error({ outputCount: txJson.vout.length }, 'No output matched the lock address');
+    return {
+        verified: false,
+        amount: 0n,
+        confirmations,
+        reason: 'No output matched the lock address',
+    };
+}
+//# sourceMappingURL=verify-lock.js.map

package/dist/lib/monero/verify-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-lock.js","sourceRoot":"","sources":["../../../src/lib/monero/verify-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EACL,eAAe,EACf,WAAW,EACX,YAAY,EACZ,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AA6CpF,MAAM,IAAI,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAW,CAAC;AAExE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAA2B;IAE3B,MAAM,EACJ,UAAU,EACV,UAAU,EACV,WAAW,EACX,cAAc,EACd,gBAAgB,GAAG,EAAE,EACrB,QAAQ,EACR,MAAM,EAAE,GAAG,GAAG,UAAU,GACzB,GAAG,MAAM,CAAC;IAEX,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;IACxC,MAAM,KAAK,GAAG,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,IAAI,MAAM,CAAC;IACpD,GAAG,CAAC,IAAI,CACN,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,EAC7F,oBAAoB,CACrB,CAAC;IAEF,IAAI,MAAoB,CAAC;IACzB,IAAI,aAAqB,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,IAAI,WAAW,CAAC,MAAM,IAAI,MAAM;YACzD,CAAC,CAAC,MAAM,sBAAsB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,UAAU,CAAC;YACrF,CAAC,CAAC,MAAM,gBAAgB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACxB,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QACtC,GAAG,CAAC,IAAI,CACN,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EAC3E,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,yCAAyC,CAAC,CAAC;QAC5E,qEAAqE;QACrE,iEAAiE;QACjE,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,aAAa,GAAG,gBAAgB,EAAE,CAAC;QACrC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,EAAE;YACV,aAAa;YACb,MAAM,EAAE,QAAQ,MAAM,CAAC,aAAa,CAAC,wBAAwB,MAAM,CAAC,gBAAgB,CAAC,GAAG;YACxF,SAAS,EAAE,IAAI;SAChB,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,yDAAyD;IACzD,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,EAAE;YACV,aAAa;YACb,MAAM,EAAE,kBAAkB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,eAAe;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,EAAE;YACV,aAAa;YACb,MAAM,EAAE,4CAA4C;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,2BAA2B,CAAC,CAAC;IAElE,IAAI,OAAmB,CAAC;IAExB,IAAI,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAC;YAC/E,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;YAEpC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAErD,IAAI,YAAY,KAAK,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3C,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,EAAE;oBACV,aAAa;oBACb,MAAM,EAAE,6EAA6E;iBACtF,CAAC;YACJ,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,0BAA0B,CAAC,CAAC;YAEzC,MAAM,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,GAAG,YAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC1C,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC9C,OAAO,GAAG,YAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1F,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,QAAoC,CAAC;IACzC,IAAI,CAAC;QACH,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/F,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;IAChE,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM;YAAE,SAAS;QAEtB,wEAAwE;QACxE,4CAA4C;QAC5C,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC;YAAE,SAAS;QAE3E,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;QACxE,IAAI,CAAC,YAAY;YAAE,SAAS;QAE5B,MAAM,gBAAgB,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxE,MAAM,cAAc,GAAG,UAAU,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAEzD,IAAI,cAAc,KAAK,YAAY,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;YAEtD,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAEnD,GAAG,CAAC,IAAI,CACN;gBACE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;gBACzB,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;gBACzC,SAAS,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aAC/C,EACD,kBAAkB,CACnB,CAAC;YAEF,IAAI,MAAM,GAAG,cAAc,EAAE,CAAC;gBAC5B,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM;oBACN,aAAa;oBACb,MAAM,EAAE,iBAAiB,MAAM,CAAC,QAAQ,EAAE,0BAA0B,cAAc,CAAC,QAAQ,EAAE,EAAE;iBAChG,CAAC;YACJ,CAAC;YAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED,GAAG,CAAC,KAAK,CACP,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,EACnC,oCAAoC,CACrC,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,EAAE;QACV,aAAa;QACb,MAAM,EAAE,oCAAoC;KAC7C,CAAC;AACJ,CAAC"}

package/dist/lib/monero/verify-sweep.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Verify a sweep transaction's construction data before signing.
+ *
+ * Checks that:
+ * 1. The destination address matches the expected receive address
+ * 2. The amount is positive
+ * 3. The fee is reasonable (not zero, not more than 10% of amount)
+ * 4. The inputs exist and have valid ring sizes
+ *
+ * This runs in TypeScript (not WASM) so business rules like fee caps
+ * can be updated without recompiling Rust.
+ */
+import type { Logger } from '../../interfaces/logger.js';
+export interface SweepConstructionData {
+    readonly inputs: readonly SweepInputData[];
+    readonly destination: {
+        readonly address: string;
+        readonly amount: string | number;
+    };
+    readonly fee: string | number;
+    readonly tx_extra: string;
+    readonly rct_type: number;
+}
+interface SweepInputData {
+    readonly ring_members: readonly {
+        readonly public_key: string;
+        readonly commitment: string;
+    }[];
+    readonly real_output_index: number;
+    readonly real_output?: {
+        readonly one_time_public_key: string;
+        readonly tx_public_key: string;
+        readonly output_index: number;
+        readonly global_output_index: number;
+        readonly amount: number;
+        readonly rct_mask: string;
+        readonly additional_tx_keys: readonly string[];
+        readonly subaddr_major: number;
+        readonly subaddr_minor: number;
+    };
+    readonly key_offsets: readonly number[];
+}
+export interface SweepVerificationResult {
+    readonly valid: boolean;
+    readonly amount: string;
+    readonly fee: string;
+    readonly reason?: string;
+}
+/**
+ * Verify sweep construction data before signing.
+ *
+ * @param constructionData - Full construction data from server
+ * @param expectedAddress - The client's XMR receive address
+ * @param logger - Optional structured logger
+ * @returns Verification result with amount, fee, and reason if invalid
+ */
+export declare function verifySweepTx(constructionData: SweepConstructionData, expectedAddress: string, logger?: Logger): SweepVerificationResult;
+export {};
+//# sourceMappingURL=verify-sweep.d.ts.map

package/dist/lib/monero/verify-sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-sweep.d.ts","sourceRoot":"","sources":["../../../src/lib/monero/verify-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAMzD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,SAAS,cAAc,EAAE,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;IACrF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,UAAU,cAAc;IACtB,QAAQ,CAAC,YAAY,EAAE,SAAS;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/F,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;QAC/C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;KAChC,CAAC;IACF,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,gBAAgB,EAAE,qBAAqB,EACvC,eAAe,EAAE,MAAM,EACvB,MAAM,GAAE,MAAmB,GAC1B,uBAAuB,CAqEzB"}

package/dist/lib/monero/verify-sweep.js

@@ -0,0 +1,82 @@
+/**
+ * Verify a sweep transaction's construction data before signing.
+ *
+ * Checks that:
+ * 1. The destination address matches the expected receive address
+ * 2. The amount is positive
+ * 3. The fee is reasonable (not zero, not more than 10% of amount)
+ * 4. The inputs exist and have valid ring sizes
+ *
+ * This runs in TypeScript (not WASM) so business rules like fee caps
+ * can be updated without recompiling Rust.
+ */
+import { noopLogger } from '../../interfaces/logger.js';
+const CLSAG_RING_SIZE = 16;
+const PRE_CLSAG_RING_SIZE = 11;
+/**
+ * Verify sweep construction data before signing.
+ *
+ * @param constructionData - Full construction data from server
+ * @param expectedAddress - The client's XMR receive address
+ * @param logger - Optional structured logger
+ * @returns Verification result with amount, fee, and reason if invalid
+ */
+export function verifySweepTx(constructionData, expectedAddress, logger = noopLogger) {
+    const amount = String(constructionData.destination.amount);
+    const fee = String(constructionData.fee);
+    // 1. Destination address must match exactly
+    if (constructionData.destination.address !== expectedAddress) {
+        const reason = `Destination mismatch: expected ${expectedAddress}, got ${constructionData.destination.address}`;
+        logger.error({ expectedAddress, got: constructionData.destination.address }, reason);
+        return { valid: false, amount, fee, reason };
+    }
+    // 2. Amount must be positive
+    const amountNum = BigInt(amount);
+    if (amountNum <= 0n) {
+        const reason = `Sweep amount must be positive, got ${amount}`;
+        logger.error({ amount }, reason);
+        return { valid: false, amount, fee, reason };
+    }
+    // 3. Fee must be positive and not exceed 10% of amount
+    const feeNum = BigInt(fee);
+    if (feeNum <= 0n) {
+        const reason = `Fee must be positive, got ${fee}`;
+        logger.error({ fee }, reason);
+        return { valid: false, amount, fee, reason };
+    }
+    const maxFee = amountNum / 10n;
+    if (feeNum > maxFee) {
+        const reason = `Fee ${fee} exceeds 10% of amount ${amount}`;
+        logger.warn({ fee, amount, maxFee: maxFee.toString() }, reason);
+        return { valid: false, amount, fee, reason };
+    }
+    // 4. Must have at least one input
+    if (constructionData.inputs.length === 0) {
+        const reason = 'No inputs in construction data';
+        logger.error({}, reason);
+        return { valid: false, amount, fee, reason };
+    }
+    // 5. Ring size must match RCT type (CLSAG+BP+ or CLSAG+BP)
+    const expectedRingSize = constructionData.rct_type === 6 ? CLSAG_RING_SIZE : PRE_CLSAG_RING_SIZE;
+    for (let i = 0; i < constructionData.inputs.length; i++) {
+        const input = constructionData.inputs[i];
+        if (!input) {
+            const reason = `Input ${i} is undefined`;
+            logger.error({ inputIndex: i }, reason);
+            return { valid: false, amount, fee, reason };
+        }
+        if (input.ring_members.length !== expectedRingSize) {
+            const reason = `Input ${i} has ${input.ring_members.length} ring members, expected ${expectedRingSize}`;
+            logger.error({ inputIndex: i, ringSize: input.ring_members.length }, reason);
+            return { valid: false, amount, fee, reason };
+        }
+        if (input.real_output_index >= input.ring_members.length) {
+            const reason = `Input ${i} real_output_index ${input.real_output_index} out of range`;
+            logger.error({ inputIndex: i, realIndex: input.real_output_index }, reason);
+            return { valid: false, amount, fee, reason };
+        }
+    }
+    logger.info({ amount, fee, inputs: constructionData.inputs.length }, 'Sweep tx verified');
+    return { valid: true, amount, fee };
+}
+//# sourceMappingURL=verify-sweep.js.map

package/dist/lib/monero/verify-sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-sweep.js","sourceRoot":"","sources":["../../../src/lib/monero/verify-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAkC/B;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,gBAAuC,EACvC,eAAuB,EACvB,SAAiB,UAAU;IAE3B,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAEzC,4CAA4C;IAC5C,IAAI,gBAAgB,CAAC,WAAW,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;QAC7D,MAAM,MAAM,GAAG,kCAAkC,eAAe,SAAS,gBAAgB,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAChH,MAAM,CAAC,KAAK,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,gBAAgB,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QACrF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;IAED,6BAA6B;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,SAAS,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,sCAAsC,MAAM,EAAE,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;IAED,uDAAuD;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,6BAA6B,GAAG,EAAE,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,GAAG,GAAG,CAAC;IAC/B,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,OAAO,GAAG,0BAA0B,MAAM,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;IAED,kCAAkC;IAClC,IAAI,gBAAgB,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,gCAAgC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAC/C,CAAC;IAED,2DAA2D;IAC3D,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACjG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACxC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAC/C,CAAC;QAED,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,KAAK,CAAC,YAAY,CAAC,MAAM,2BAA2B,gBAAgB,EAAE,CAAC;YACxG,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;YAC7E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAC/C,CAAC;QAED,IAAI,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,SAAS,CAAC,sBAAsB,KAAK,CAAC,iBAAiB,eAAe,CAAC;YACtF,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAC;YAC5E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,EACvD,mBAAmB,CACpB,CAAC;IACF,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACtC,CAAC"}

package/dist/lib/monero/wasm.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @deprecated Import directly from '@miradex/client' (or '../crypto/wasm.js').
+ * This file re-exports the unified surface for backwards compatibility.
+ * Scheduled for removal in 0.4.0.
+ */
+import { WasmError } from '../crypto/errors.js';
+export { ensureWasm as ensureMoneroSweep, deriveKeyImages, selectDecoys, signSweepTx, computeCommitmentMask, verifyCommitment, decryptAmount as wasmDecryptAmount, isMoneroSweepAvailable, initMoneroSweep, } from '../crypto/wasm.js';
+/**
+ * Legacy error class retained for downstream `new MoneroSweepError(...)` and
+ * `err.name === 'MoneroSweepError'` patterns. Thrown errors from the new
+ * unified loader are plain `WasmError` instances; this subclass is for
+ * direct construction by consumers.
+ */
+export declare class MoneroSweepError extends WasmError {
+    constructor(message: string, code?: string, cause?: unknown);
+}
+export type { WasmModule as MoneroSweepWasmModule } from '../crypto/types.js';
+export type { EnsureWasmOptions as EnsureMoneroSweepOptions } from '../crypto/wasm.js';
+//# sourceMappingURL=wasm.d.ts.map

package/dist/lib/monero/wasm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm.d.ts","sourceRoot":"","sources":["../../../src/lib/monero/wasm.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EACL,UAAU,IAAI,iBAAiB,EAC/B,eAAe,EACf,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,IAAI,iBAAiB,EAClC,sBAAsB,EACtB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,SAAS;gBACjC,OAAO,EAAE,MAAM,EAAE,IAAI,SAAmB,EAAE,KAAK,CAAC,EAAE,OAAO;CAQtE;AAED,YAAY,EAAE,UAAU,IAAI,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,YAAY,EAAE,iBAAiB,IAAI,wBAAwB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/lib/monero/wasm.js

@@ -0,0 +1,24 @@
+/**
+ * @deprecated Import directly from '@miradex/client' (or '../crypto/wasm.js').
+ * This file re-exports the unified surface for backwards compatibility.
+ * Scheduled for removal in 0.4.0.
+ */
+import { WasmError } from '../crypto/errors.js';
+export { ensureWasm as ensureMoneroSweep, deriveKeyImages, selectDecoys, signSweepTx, computeCommitmentMask, verifyCommitment, decryptAmount as wasmDecryptAmount, isMoneroSweepAvailable, initMoneroSweep, } from '../crypto/wasm.js';
+/**
+ * Legacy error class retained for downstream `new MoneroSweepError(...)` and
+ * `err.name === 'MoneroSweepError'` patterns. Thrown errors from the new
+ * unified loader are plain `WasmError` instances; this subclass is for
+ * direct construction by consumers.
+ */
+export class MoneroSweepError extends WasmError {
+    constructor(message, code = 'E_MONERO_SWEEP', cause) {
+        super(code, message, cause);
+        Object.defineProperty(this, 'name', {
+            value: 'MoneroSweepError',
+            writable: false,
+            configurable: true,
+        });
+    }
+}
+//# sourceMappingURL=wasm.js.map

package/dist/lib/monero/wasm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wasm.js","sourceRoot":"","sources":["../../../src/lib/monero/wasm.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EACL,UAAU,IAAI,iBAAiB,EAC/B,eAAe,EACf,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,gBAAgB,EAChB,aAAa,IAAI,iBAAiB,EAClC,sBAAsB,EACtB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,OAAO,gBAAiB,SAAQ,SAAS;IAC7C,YAAY,OAAe,EAAE,IAAI,GAAG,gBAAgB,EAAE,KAAe;QACnE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE;YAClC,KAAK,EAAE,kBAAkB;YACzB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/lib/pow-solver.d.ts

@@ -0,0 +1,4 @@
+import type { PowChallenge, PowPayload } from '../types/index.js';
+export declare function solveChallenge(challenge: PowChallenge, onProgress?: (current: number, total: number) => void): Promise<PowPayload>;
+export declare function encodePowHeader(payload: PowPayload): string;
+//# sourceMappingURL=pow-solver.d.ts.map

package/dist/lib/pow-solver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pow-solver.d.ts","sourceRoot":"","sources":["../../src/lib/pow-solver.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIlE,wBAAsB,cAAc,CAClC,SAAS,EAAE,YAAY,EACvB,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GACpD,OAAO,CAAC,UAAU,CAAC,CA0BrB;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAE3D"}

package/dist/lib/pow-solver.js

@@ -0,0 +1,37 @@
+/**
+ * Proof-of-work solver for swap creation.
+ *
+ * The server issues a SHA-256 hash-preimage challenge: given a salt and a
+ * target hash, find a number n in [0, maxnumber] such that
+ * SHA-256(salt + String(n)) === challenge. The solution is sent as a
+ * Base64-encoded JSON header on the swap creation request.
+ */
+import { sha256 } from '@noble/hashes/sha2.js';
+import { bytesToHex } from '@noble/hashes/utils.js';
+const BATCH_SIZE = 10_000;
+export async function solveChallenge(challenge, onProgress) {
+    const { salt, challenge: target, maxnumber } = challenge;
+    for (let start = 0; start <= maxnumber; start += BATCH_SIZE) {
+        const end = Math.min(start + BATCH_SIZE, maxnumber + 1);
+        for (let n = start; n < end; n++) {
+            const hash = bytesToHex(sha256(new TextEncoder().encode(salt + String(n))));
+            if (hash === target) {
+                return {
+                    algorithm: challenge.algorithm,
+                    challenge: target,
+                    number: n,
+                    salt,
+                    signature: challenge.signature,
+                };
+            }
+        }
+        onProgress?.(end, maxnumber);
+        // Yield to the event loop between batches so the TUI stays responsive
+        await new Promise((r) => setTimeout(r, 0));
+    }
+    throw new Error('PoW solution not found within search space');
+}
+export function encodePowHeader(payload) {
+    return btoa(JSON.stringify(payload));
+}
+//# sourceMappingURL=pow-solver.js.map

package/dist/lib/pow-solver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pow-solver.js","sourceRoot":"","sources":["../../src/lib/pow-solver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAIpD,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAuB,EACvB,UAAqD;IAErD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC;IAEzD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,IAAI,UAAU,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,UAAU,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;QAExD,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5E,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,OAAO;oBACL,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,SAAS,EAAE,MAAM;oBACjB,MAAM,EAAE,CAAC;oBACT,IAAI;oBACJ,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,UAAU,EAAE,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAE7B,sEAAsE;QACtE,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAmB;IACjD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/lib/retry.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Cross-platform retry helper.
+ *
+ * Wraps an async operation and retries it according to the {@link ErrorCategory}
+ * derived from each thrown value. Network and server errors retry indefinitely
+ * with exponential backoff capped at {@link RetryOptions.maxBackoffMs}; bounded
+ * categories retry at most {@link RetryOptions.maxBoundedRetries} times before
+ * surfacing the error; fatal categories propagate immediately.
+ *
+ * Cancellation is honoured via an optional {@link AbortSignal}. The signal is
+ * checked before every attempt and during every backoff sleep — a caller that
+ * aborts mid-retry sees a {@link SwapCancelledError} within ms, never the
+ * original failure that triggered the retry.
+ *
+ * Cross-platform: only `setTimeout` / `clearTimeout` and `AbortSignal` are
+ * used. Works in Node 20+ and modern browsers without polyfills.
+ */
+import type { Logger } from '../interfaces/logger.js';
+import { type ErrorCategory } from './errors.js';
+export interface RetryOptions {
+    /**
+     * Cap on retries for `client-bounded` and `unknown` categories.
+     * After this many failures the original error is rethrown.
+     * Default: 3.
+     */
+    readonly maxBoundedRetries?: number;
+    /**
+     * Initial backoff in ms. Each subsequent attempt doubles the wait
+     * (capped at {@link maxBackoffMs}).
+     * Default: 500.
+     */
+    readonly baseMs?: number;
+    /**
+     * Upper bound for the per-retry backoff sleep, in ms. Network / server /
+     * rate-limit errors retry indefinitely; this caps how long each successive
+     * sleep can grow to before plateauing.
+     * Default: 60000 (one minute).
+     */
+    readonly maxBackoffMs?: number;
+    /**
+     * Optional cancellation signal. When aborted, the in-flight wait or the
+     * next attempt rejects with {@link SwapCancelledError}.
+     */
+    readonly signal?: AbortSignal;
+    /** Optional structured logger. Defaults to a no-op. */
+    readonly logger?: Logger;
+    /**
+     * Diagnostic label appended to log lines. Use the call site / endpoint
+     * (e.g. `"GET /api/v1/swap/SWP-…"`).
+     * Default: `"op"`.
+     */
+    readonly label?: string;
+    /**
+     * Optional override for the classifier. Useful when a caller wants to
+     * promote a known transient string to `network`, or treat a 404 as
+     * `client-fatal` instead of `client-bounded`.
+     */
+    readonly classify?: (err: unknown) => ErrorCategory;
+    /**
+     * Hook called once per retry, after classification, before backoff. Lets
+     * callers integrate with metrics / UI without re-implementing the loop.
+     */
+    readonly onRetry?: (info: RetryInfo) => void;
+}
+export interface RetryInfo {
+    readonly category: ErrorCategory;
+    readonly attempt: number;
+    readonly backoffMs: number;
+    readonly error: unknown;
+    readonly isUnbounded: boolean;
+}
+/**
+ * Run `fn` with retries until it succeeds, the signal aborts, or the policy
+ * rejects further attempts. Returns the resolved value of the first
+ * successful call.
+ *
+ * @example
+ *   await withRetry(
+ *     () => api.executeAction(swapId, { type: 'submit_encsig', tx_redeem_encsig }),
+ *     { logger, label: 'submit_encsig', signal: engineSignal },
+ *   );
+ */
+export declare function withRetry<T>(fn: (attempt: number) => Promise<T>, options?: RetryOptions): Promise<T>;
+/** Public for tests / callers that want the same backoff schedule. */
+export declare function computeBackoffMs(retryNumber: number, baseMs: number, maxMs: number): number;
+//# sourceMappingURL=retry.d.ts.map

package/dist/lib/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/lib/retry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,EAIL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,YAAY;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,aAAa,CAAC;IACpD;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAQD;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,EAAE,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,EACnC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,CAAC,CAAC,CA2EZ;AAED,sEAAsE;AACtE,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAI3F"}

package/dist/lib/retry.js

@@ -0,0 +1,104 @@
+import { noopLogger } from '../interfaces/logger.js';
+import { SwapCancelledError, classifyError, errorMessage, } from './errors.js';
+const DEFAULT_MAX_BOUNDED = 3;
+const DEFAULT_BASE_MS = 500;
+const DEFAULT_MAX_BACKOFF_MS = 60_000;
+/** Cap the exponent so `2 ** n` cannot overflow `Number` after a long retry chain. */
+const MAX_EXPONENT = 30;
+/**
+ * Run `fn` with retries until it succeeds, the signal aborts, or the policy
+ * rejects further attempts. Returns the resolved value of the first
+ * successful call.
+ *
+ * @example
+ *   await withRetry(
+ *     () => api.executeAction(swapId, { type: 'submit_encsig', tx_redeem_encsig }),
+ *     { logger, label: 'submit_encsig', signal: engineSignal },
+ *   );
+ */
+export async function withRetry(fn, options = {}) {
+    const maxBounded = options.maxBoundedRetries ?? DEFAULT_MAX_BOUNDED;
+    const baseMs = options.baseMs ?? DEFAULT_BASE_MS;
+    const maxBackoffMs = options.maxBackoffMs ?? DEFAULT_MAX_BACKOFF_MS;
+    const log = options.logger ?? noopLogger;
+    const label = options.label ?? 'op';
+    const classify = options.classify ?? classifyError;
+    let unboundedRetries = 0;
+    let boundedRetries = 0;
+    let attempt = 0;
+    while (true) {
+        if (options.signal?.aborted)
+            throw new SwapCancelledError();
+        try {
+            return await fn(attempt);
+        }
+        catch (err) {
+            attempt++;
+            const category = classify(err);
+            if (category === 'cancelled' ||
+                category === 'protocol' ||
+                category === 'verification' ||
+                category === 'client-fatal') {
+                throw err;
+            }
+            const isUnbounded = category === 'network' || category === 'server';
+            if (isUnbounded) {
+                unboundedRetries++;
+            }
+            else {
+                // 'rate-limit' | 'client-bounded' | 'unknown'
+                boundedRetries++;
+                if (boundedRetries > maxBounded) {
+                    log.warn({
+                        label,
+                        attempts: boundedRetries,
+                        category,
+                        error: errorMessage(err),
+                    }, `${label}: bounded retry exhausted, surfacing error`);
+                    throw err;
+                }
+            }
+            const totalRetries = unboundedRetries + boundedRetries;
+            const backoffMs = computeBackoffMs(totalRetries, baseMs, maxBackoffMs);
+            log.warn({
+                label,
+                attempt: totalRetries,
+                category,
+                backoffMs,
+                error: errorMessage(err),
+            }, `${label}: retrying after ${String(backoffMs)}ms`);
+            options.onRetry?.({
+                category,
+                attempt: totalRetries,
+                backoffMs,
+                error: err,
+                isUnbounded,
+            });
+            await sleepWithSignal(backoffMs, options.signal);
+        }
+    }
+}
+/** Public for tests / callers that want the same backoff schedule. */
+export function computeBackoffMs(retryNumber, baseMs, maxMs) {
+    if (retryNumber <= 0)
+        return 0;
+    const exp = baseMs * 2 ** Math.min(retryNumber - 1, MAX_EXPONENT);
+    return Math.min(exp, maxMs);
+}
+async function sleepWithSignal(ms, signal) {
+    if (ms <= 0)
+        return;
+    if (signal?.aborted)
+        throw new SwapCancelledError();
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(resolve, ms);
+        if (signal === undefined)
+            return;
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(new SwapCancelledError());
+        };
+        signal.addEventListener('abort', onAbort, { once: true });
+    });
+}
+//# sourceMappingURL=retry.js.map

package/dist/lib/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/lib/retry.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,YAAY,GAEb,MAAM,aAAa,CAAC;AAwDrB,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,sFAAsF;AACtF,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAmC,EACnC,UAAwB,EAAE;IAE1B,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,IAAI,mBAAmB,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC;IACjD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC;IAEnD,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;QAE5D,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,OAAO,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;YAE/B,IACE,QAAQ,KAAK,WAAW;gBACxB,QAAQ,KAAK,UAAU;gBACvB,QAAQ,KAAK,cAAc;gBAC3B,QAAQ,KAAK,cAAc,EAC3B,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,MAAM,WAAW,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,CAAC;YACpE,IAAI,WAAW,EAAE,CAAC;gBAChB,gBAAgB,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,cAAc,EAAE,CAAC;gBACjB,IAAI,cAAc,GAAG,UAAU,EAAE,CAAC;oBAChC,GAAG,CAAC,IAAI,CACN;wBACE,KAAK;wBACL,QAAQ,EAAE,cAAc;wBACxB,QAAQ;wBACR,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC;qBACzB,EACD,GAAG,KAAK,4CAA4C,CACrD,CAAC;oBACF,MAAM,GAAG,CAAC;gBACZ,CAAC;YACH,CAAC;YAED,MAAM,YAAY,GAAG,gBAAgB,GAAG,cAAc,CAAC;YACvD,MAAM,SAAS,GAAG,gBAAgB,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YAEvE,GAAG,CAAC,IAAI,CACN;gBACE,KAAK;gBACL,OAAO,EAAE,YAAY;gBACrB,QAAQ;gBACR,SAAS;gBACT,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC;aACzB,EACD,GAAG,KAAK,oBAAoB,MAAM,CAAC,SAAS,CAAC,IAAI,CAClD,CAAC;YAEF,OAAO,CAAC,OAAO,EAAE,CAAC;gBAChB,QAAQ;gBACR,OAAO,EAAE,YAAY;gBACrB,SAAS;gBACT,KAAK,EAAE,GAAG;gBACV,WAAW;aACZ,CAAC,CAAC;YAEH,MAAM,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,WAAmB,EAAE,MAAc,EAAE,KAAa;IACjF,IAAI,WAAW,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,MAAoB;IAC7D,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO;IACpB,IAAI,MAAM,EAAE,OAAO;QAAE,MAAM,IAAI,kBAAkB,EAAE,CAAC;IACpD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO;QACjC,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC;QACF,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC"}