@miradexio/client 0.1.0

package/dist/portable.d.ts

@@ -0,0 +1,23 @@
+export { swapPipelineStage, atomicPipelineStage, computeDoneStages, mapServerStatus, PIPELINE_LABELS, PIPELINE_LABELS_CANCEL, PIPELINE_LABELS_REFUND, PIPELINE_LABELS_EXPIRED, } from './engine/pipeline.js';
+export type { PipelineStage, PipelineLabel } from './engine/pipeline.js';
+export { TERMINAL_STATUSES } from './types/index.js';
+export { createInitialEngineState } from './engine/engine-state.js';
+export type { SwapStatus, TerminalStatus, SwapProvider, SwapQuote, SwapDetail, SwapFee, SwapTokenInfo, SwapTokenMap, SwapPair, SwapVerification, CreateSwapBody, CreateSwapResponse, VerificationCheck, VerificationResult, QuotesResponse, RateResponse, LimitsResponse, ProviderInfo, ProvidersResponse, RecentSwap, HistoryEntry, RequiredAction, } from './types/index.js';
+export type { EngineState, ActiveFlow } from './engine/engine-state.js';
+export type { SwapFlowState } from './engine/flows/swap-flow-state.js';
+export type { AtomicFlowState } from './engine/flows/atomic-flow-state.js';
+export type { KeystoreMetadata, KeystoreStatus } from './engine/platform.js';
+export type { VerifyDepositParams } from './verification/index.js';
+export type { StartSwapParams, StartAtomicSwapParams } from './engine/miradex-engine.js';
+export type { GetQuotesParams, GetRateParams, GetLimitsParams } from './api/index.js';
+export { validateAddress, resolveChain, getSupportedChains, tokensForChain, } from './address/index.js';
+export type { ValidationResult } from './address/index.js';
+export { DEFAULT_NODES, MONERO_MAINNET_NODES, MONERO_STAGENET_NODES, ELECTRUM_SERVERS, ELECTRUM_PRIMARY_URL, ELECTRUM_TESTNET_URL, electrumUrlForNetwork, } from './lib/default-config.js';
+export type { DefaultNodeBlockchain, ElectrumServerEntry } from './lib/default-config.js';
+export { ensureWasm } from './lib/crypto/wasm.js';
+export type { EnsureWasmOptions } from './lib/crypto/wasm.js';
+export { WasmError } from './lib/crypto/errors.js';
+export type { WasmModule } from './lib/crypto/types.js';
+export { detectPlatform } from './lib/crypto/platform.js';
+export type { Platform } from './lib/crypto/platform.js';
+//# sourceMappingURL=portable.d.ts.map

package/dist/portable.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable.d.ts","sourceRoot":"","sources":["../src/portable.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,YAAY,EACV,UAAU,EACV,cAAc,EACd,YAAY,EACZ,SAAS,EACT,UAAU,EACV,OAAO,EACP,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,cAAc,GACf,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACxE,YAAY,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACvE,YAAY,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC7E,YAAY,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AACnE,YAAY,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACzF,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtF,OAAO,EACL,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAE1F,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,YAAY,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,YAAY,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/portable.js

@@ -0,0 +1,13 @@
+// Portable subset of the @miradex/client surface — safe in browsers, Electron
+// renderer, React Native, and any runtime without Node built-ins. Pulls only
+// pure-TS modules with no fs/net dependencies. Server / signing code lives in
+// the main barrel ('@miradex/client').
+export { swapPipelineStage, atomicPipelineStage, computeDoneStages, mapServerStatus, PIPELINE_LABELS, PIPELINE_LABELS_CANCEL, PIPELINE_LABELS_REFUND, PIPELINE_LABELS_EXPIRED, } from './engine/pipeline.js';
+export { TERMINAL_STATUSES } from './types/index.js';
+export { createInitialEngineState } from './engine/engine-state.js';
+export { validateAddress, resolveChain, getSupportedChains, tokensForChain, } from './address/index.js';
+export { DEFAULT_NODES, MONERO_MAINNET_NODES, MONERO_STAGENET_NODES, ELECTRUM_SERVERS, ELECTRUM_PRIMARY_URL, ELECTRUM_TESTNET_URL, electrumUrlForNetwork, } from './lib/default-config.js';
+export { ensureWasm } from './lib/crypto/wasm.js';
+export { WasmError } from './lib/crypto/errors.js';
+export { detectPlatform } from './lib/crypto/platform.js';
+//# sourceMappingURL=portable.js.map

package/dist/portable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portable.js","sourceRoot":"","sources":["../src/portable.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,uCAAuC;AAEvC,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAmCpE,OAAO,EACL,eAAe,EACf,YAAY,EACZ,kBAAkB,EAClB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,aAAa,EACb,oBAAoB,EACpB,qBAAqB,EACrB,gBAAgB,EAChB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/quote-binding.d.ts

@@ -0,0 +1,31 @@
+import type { SwapProvider } from './types/index.js';
+export interface AcceptedQuote {
+    readonly provider: SwapProvider;
+    readonly fromAsset: string;
+    readonly toAsset: string;
+    readonly amount: string;
+    readonly destAddress: string;
+    readonly refundAddress: string;
+    readonly expectedOutputAmount: string;
+    readonly rateBpsFromOracle: number;
+    readonly acceptedAtEpochMs: number;
+    readonly quoteHash: string;
+}
+export declare const QUOTE_MAX_AGE_MS: number;
+/**
+ * Compute the canonical SHA-256 hash over an accepted quote. The hash is
+ * deterministic under key-order normalisation; consumers may compare two
+ * quotes for strict equality via their hashes.
+ */
+export declare function hashQuote(q: Omit<AcceptedQuote, 'quoteHash'>): string;
+/**
+ * Assert a quote hashes to the same value the consumer recorded at accept
+ * time. Throws `E_QUOTE_TAMPERED` on mismatch.
+ */
+export declare function requireQuoteHashMatches(accepted: AcceptedQuote, current: Omit<AcceptedQuote, 'quoteHash'>): void;
+/**
+ * Assert the accepted quote is still within `QUOTE_MAX_AGE_MS` of now.
+ * Throws `E_QUOTE_STALE` when expired.
+ */
+export declare function requireQuoteFresh(accepted: AcceptedQuote, nowEpochMs?: number): void;
+//# sourceMappingURL=quote-binding.d.ts.map

package/dist/quote-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote-binding.d.ts","sourceRoot":"","sources":["../src/quote-binding.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAGrD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,gBAAgB,QAAgB,CAAC;AAE9C;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,MAAM,CAIrE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,aAAa,EACvB,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GACxC,IAAI,CAQN;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,aAAa,EACvB,UAAU,GAAE,MAAmB,GAC9B,IAAI,CAQN"}

package/dist/quote-binding.js

@@ -0,0 +1,40 @@
+/**
+ * Quote binding: every AcceptedQuote is hashed canonically at accept time and
+ * re-hashed just before funding. Prevents the server from changing the
+ * expected output between accept and funding (AV-D.4 / Part VIII §8.4.1).
+ */
+import { sha256 } from '@noble/hashes/sha2.js';
+import { bytesToHex } from '@noble/hashes/utils.js';
+import { VerificationError } from './types/index.js';
+export const QUOTE_MAX_AGE_MS = 5 * 60 * 1000;
+/**
+ * Compute the canonical SHA-256 hash over an accepted quote. The hash is
+ * deterministic under key-order normalisation; consumers may compare two
+ * quotes for strict equality via their hashes.
+ */
+export function hashQuote(q) {
+    const keys = Object.keys(q).sort();
+    const canonical = JSON.stringify(q, keys);
+    return bytesToHex(sha256(new TextEncoder().encode(canonical)));
+}
+/**
+ * Assert a quote hashes to the same value the consumer recorded at accept
+ * time. Throws `E_QUOTE_TAMPERED` on mismatch.
+ */
+export function requireQuoteHashMatches(accepted, current) {
+    const currentHash = hashQuote(current);
+    if (currentHash !== accepted.quoteHash) {
+        throw new VerificationError('E_QUOTE_TAMPERED', `quote hash mismatch: accepted=${accepted.quoteHash.slice(0, 16)}..., current=${currentHash.slice(0, 16)}...`);
+    }
+}
+/**
+ * Assert the accepted quote is still within `QUOTE_MAX_AGE_MS` of now.
+ * Throws `E_QUOTE_STALE` when expired.
+ */
+export function requireQuoteFresh(accepted, nowEpochMs = Date.now()) {
+    const age = nowEpochMs - accepted.acceptedAtEpochMs;
+    if (age > QUOTE_MAX_AGE_MS) {
+        throw new VerificationError('E_QUOTE_STALE', `quote age ${Math.round(age / 1000)}s exceeds max ${Math.round(QUOTE_MAX_AGE_MS / 1000)}s`);
+    }
+}
+//# sourceMappingURL=quote-binding.js.map

package/dist/quote-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quote-binding.js","sourceRoot":"","sources":["../src/quote-binding.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAerD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9C;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,CAAmC;IAC3D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAuB,EACvB,OAAyC;IAEzC,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,WAAW,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvC,MAAM,IAAI,iBAAiB,CACzB,kBAAkB,EAClB,iCAAiC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAC9G,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAuB,EACvB,aAAqB,IAAI,CAAC,GAAG,EAAE;IAE/B,MAAM,GAAG,GAAG,UAAU,GAAG,QAAQ,CAAC,iBAAiB,CAAC;IACpD,IAAI,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC3B,MAAM,IAAI,iBAAiB,CACzB,eAAe,EACf,aAAa,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAC3F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/swap-executor.d.ts

@@ -0,0 +1,51 @@
+import type { ApiClient } from './api/index.js';
+import type { SwapDetail, VerificationResult, SwapStatus, ProtocolData } from './types/index.js';
+export interface SwapResult {
+    readonly swapId: string;
+    readonly swapNumber: string;
+    readonly status: SwapStatus;
+    readonly provider: string;
+    readonly depositAddress: string | null;
+    readonly verification: VerificationResult | null;
+    readonly expectedAmountOut: string | null;
+    readonly amountIn: string | null;
+    readonly expiresAt: string | null;
+    readonly protocolData?: ProtocolData;
+}
+export declare class SwapExecutor {
+    private readonly api;
+    private readonly pollIntervalMs;
+    private readonly fetchFn;
+    constructor(api: ApiClient, pollIntervalMs?: number, fetchFn?: typeof globalThis.fetch);
+    executeSwap(params: {
+        from: string;
+        to: string;
+        amount: string;
+        destAddress: string;
+        refundAddress: string;
+        provider?: string;
+        variantId?: string;
+        fromChain?: string;
+        toChain?: string;
+        slippageBps?: number;
+        /**
+         * Opt-in escape hatch for providers that don't expose a refund-address
+         * binding. Setting this to `true` logs a security warning and lets the
+         * swap proceed without refund-address assertion.
+         */
+        acknowledgedNoRefundAddress?: boolean;
+    }, powHeader?: string): Promise<SwapResult>;
+    executeAtomicSwap(params: {
+        amount: string;
+        destAddress: string;
+        refundAddress: string;
+    }): Promise<SwapResult>;
+    fundSwap(swapId: string, signedPsbt: string): Promise<unknown>;
+    cancelSwap(swapId: string, reason?: string): Promise<unknown>;
+    getSweepOutputs(swapId: string): Promise<unknown>;
+    submitKeyImages(swapId: string, keyImagesHex: string): Promise<unknown>;
+    submitMoneroTx(swapId: string, signedTxHex: string): Promise<unknown>;
+    pollUntil(swapId: string, targets: readonly SwapStatus[], timeoutMs?: number, onPoll?: (detail: SwapDetail) => void, signal?: AbortSignal): Promise<SwapDetail>;
+    private verify;
+}
+//# sourceMappingURL=swap-executor.d.ts.map

package/dist/swap-executor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"swap-executor.d.ts","sourceRoot":"","sources":["../src/swap-executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAEV,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,YAAY,EAEb,MAAM,kBAAkB,CAAC;AAM1B,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;CACtC;AAED,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,cAAc;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAFP,GAAG,EAAE,SAAS,EACd,cAAc,SAAQ,EACtB,OAAO,GAAE,OAAO,UAAU,CAAC,KAAwB;IAGhE,WAAW,CACf,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB;;;;WAIG;QACH,2BAA2B,CAAC,EAAE,OAAO,CAAC;KACvC,EACD,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,UAAU,CAAC;IA8BhB,iBAAiB,CAAC,MAAM,EAAE;QAC9B,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,UAAU,CAAC;IAsDjB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI9D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI7D,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIjD,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIvE,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrE,SAAS,CACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,SAAS,UAAU,EAAE,EAC9B,SAAS,SAAU,EACnB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,EACrC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,UAAU,CAAC;YAuBR,MAAM;CAuCrB"}

package/dist/swap-executor.js

@@ -0,0 +1,138 @@
+import { TERMINAL_STATUSES, VerificationError, isAtomicProtocolData } from './types/index.js';
+import { verifyDepositAddress } from './verification/index.js';
+import { generateClientKeys, isKeygenAvailable } from './lib/crypto/wasm.js';
+import { delay } from './lib/delay.js';
+export class SwapExecutor {
+    api;
+    pollIntervalMs;
+    fetchFn;
+    constructor(api, pollIntervalMs = 5_000, fetchFn = globalThis.fetch) {
+        this.api = api;
+        this.pollIntervalMs = pollIntervalMs;
+        this.fetchFn = fetchFn;
+    }
+    async executeSwap(params, powHeader) {
+        if (!params.refundAddress && !params.acknowledgedNoRefundAddress) {
+            throw new VerificationError('E_PROVIDER_UNSUPPORTED_REFUND', 'refundAddress is required; set acknowledgedNoRefundAddress:true to override');
+        }
+        const swap = await this.api.createSwap(params, powHeader);
+        if (params.provider && swap.provider !== params.provider) {
+            throw new VerificationError('E_PROVIDER_SUBSTITUTED', `server returned provider ${swap.provider}, caller requested ${params.provider}`);
+        }
+        const vr = await this.verify(swap, params);
+        return {
+            swapId: swap.swapNumber,
+            swapNumber: swap.swapNumber,
+            status: swap.status,
+            provider: swap.provider,
+            depositAddress: vr?.verified ? swap.depositAddress : null,
+            verification: vr,
+            expectedAmountOut: swap.expectedAmountOut,
+            amountIn: swap.amountIn,
+            expiresAt: swap.expiresAt,
+            protocolData: swap.protocolData ?? undefined,
+        };
+    }
+    async executeAtomicSwap(params) {
+        if (!isKeygenAvailable()) {
+            throw new Error('keygen-wasm not available — atomic swaps disabled');
+        }
+        const keys = generateClientKeys();
+        const body = {
+            from: 'BTC',
+            to: 'XMR',
+            amount: params.amount,
+            destAddress: params.destAddress,
+            refundAddress: params.refundAddress,
+            provider: 'atomicswap',
+            protocol: {
+                type: 'atomicSwap',
+                atomicSwap: {
+                    S_b_bitcoin: keys.s_b_bitcoin,
+                    S_b_monero: keys.s_b_monero,
+                    dleq_proof: keys.dleq_proof,
+                    v_b: keys.v_b,
+                    B: keys.B,
+                },
+            },
+        };
+        const swap = await this.api.createSwap(body);
+        if (swap.provider !== 'atomicswap') {
+            throw new VerificationError('E_PROVIDER_SUBSTITUTED', `server returned provider ${swap.provider} for an atomic-swap request`);
+        }
+        const current = swap.status === 'initializing'
+            ? await this.pollUntil(swap.swapNumber, ['awaiting_funding', 'failed', 'expired'])
+            : swap;
+        const vr = await this.verify(current, { ...params, from: 'BTC', to: 'XMR' });
+        return {
+            swapId: current.swapNumber,
+            swapNumber: current.swapNumber,
+            status: current.status,
+            provider: 'atomicswap',
+            depositAddress: vr?.verified ? current.depositAddress : null,
+            verification: vr,
+            expectedAmountOut: current.expectedAmountOut,
+            amountIn: current.amountIn,
+            expiresAt: current.expiresAt,
+            protocolData: current.protocolData ?? undefined,
+        };
+    }
+    async fundSwap(swapId, signedPsbt) {
+        return this.api.executeAction(swapId, { type: 'fund', signedPsbt });
+    }
+    async cancelSwap(swapId, reason) {
+        return this.api.executeAction(swapId, { type: 'cancel', reason });
+    }
+    async getSweepOutputs(swapId) {
+        return this.api.executeAction(swapId, { type: 'get-outputs' }, 120_000);
+    }
+    async submitKeyImages(swapId, keyImagesHex) {
+        return this.api.executeAction(swapId, { type: 'get-key-images', keyImagesHex }, 120_000);
+    }
+    async submitMoneroTx(swapId, signedTxHex) {
+        return this.api.executeAction(swapId, { type: 'submit-monero-tx', signedTxHex }, 120_000);
+    }
+    async pollUntil(swapId, targets, timeoutMs = 120_000, onPoll, signal) {
+        const targetSet = new Set([...targets, ...TERMINAL_STATUSES]);
+        const deadline = Date.now() + timeoutMs;
+        while (Date.now() < deadline) {
+            if (signal?.aborted)
+                return this.api.getSwapDetail(swapId);
+            const detail = await this.api.getSwapDetail(swapId);
+            onPoll?.(detail);
+            if (targetSet.has(detail.status))
+                return detail;
+            // Break out of polling if a user-actionable requiredAction is detected.
+            const actionType = detail.requiredAction?.type;
+            if (actionType === 'cancel' || actionType === 'refund' || actionType === 'sweep') {
+                return detail;
+            }
+            await delay(this.pollIntervalMs, signal);
+        }
+        return this.api.getSwapDetail(swapId);
+    }
+    async verify(swap, params) {
+        if (swap.depositAddress === null || swap.verification === null) {
+            return null;
+        }
+        return verifyDepositAddress({
+            depositAddress: swap.depositAddress,
+            verification: swap.verification,
+            destAddress: params.destAddress,
+            refundAddress: params.refundAddress,
+            toToken: params.to ?? params.toToken ?? '',
+            amount: params.amount ?? '',
+            protocol: isAtomicProtocolData(swap.protocolData)
+                ? {
+                    psbt: swap.protocolData.psbt,
+                    lock_address: swap.protocolData.lock_address,
+                    timelock_blocks: swap.protocolData.timelock_blocks,
+                }
+                : undefined,
+            expectedAmountOut: swap.expectedAmountOut ?? undefined,
+            expectedDestAddress: params.destAddress,
+            fetchFn: this.fetchFn,
+        });
+    }
+}
+//# sourceMappingURL=swap-executor.js.map

package/dist/swap-executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"swap-executor.js","sourceRoot":"","sources":["../src/swap-executor.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAevC,MAAM,OAAO,YAAY;IAEJ;IACA;IACA;IAHnB,YACmB,GAAc,EACd,iBAAiB,KAAK,EACtB,UAAmC,UAAU,CAAC,KAAK;QAFnD,QAAG,GAAH,GAAG,CAAW;QACd,mBAAc,GAAd,cAAc,CAAQ;QACtB,YAAO,GAAP,OAAO,CAA4C;IACnE,CAAC;IAEJ,KAAK,CAAC,WAAW,CACf,MAiBC,EACD,SAAkB;QAElB,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,2BAA2B,EAAE,CAAC;YACjE,MAAM,IAAI,iBAAiB,CACzB,+BAA+B,EAC/B,6EAA6E,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzD,MAAM,IAAI,iBAAiB,CACzB,wBAAwB,EACxB,4BAA4B,IAAI,CAAC,QAAQ,sBAAsB,MAAM,CAAC,QAAQ,EAAE,CACjF,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE3C,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,UAAU;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;YACzD,YAAY,EAAE,EAAE;YAChB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,SAAS;SAC7C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAIvB;QACC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,IAAI,GAAG,kBAAkB,EAAE,CAAC;QAClC,MAAM,IAAI,GAAmB;YAC3B,IAAI,EAAE,KAAK;YACX,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE;gBACR,IAAI,EAAE,YAAY;gBAClB,UAAU,EAAE;oBACV,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,CAAC,EAAE,IAAI,CAAC,CAAC;iBACV;aACF;SACF,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,iBAAiB,CACzB,wBAAwB,EACxB,4BAA4B,IAAI,CAAC,QAAQ,6BAA6B,CACvE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,KAAK,cAAc;YAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,kBAAkB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;YAClF,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAE7E,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,UAAU;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,YAAY;YACtB,cAAc,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;YAC5D,YAAY,EAAE,EAAE;YAChB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;SAChD,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,UAAkB;QAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc,EAAE,MAAe;QAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc;QAClC,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,YAAoB;QACxD,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,WAAmB;QACtD,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5F,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAc,EACd,OAA8B,EAC9B,SAAS,GAAG,OAAO,EACnB,MAAqC,EACrC,MAAoB;QAEpB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAExC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,MAAM,EAAE,OAAO;gBAAE,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAE3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;YACjB,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC;YAEhD,wEAAwE;YACxE,MAAM,UAAU,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC;YAC/C,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;gBACjF,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,MAAM,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,IAKC,EACD,MAOC;QAED,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,oBAAoB,CAAC;YAC1B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,OAAO,EAAE,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE;YAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,QAAQ,EAAE,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC;gBAC/C,CAAC,CAAC;oBACE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI;oBAC5B,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,YAAY;oBAC5C,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,eAAe;iBACnD;gBACH,CAAC,CAAC,SAAS;YACb,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,SAAS;YACtD,mBAAmB,EAAE,MAAM,CAAC,WAAW;YACvC,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/types/api.d.ts

@@ -0,0 +1,34 @@
+import type { SwapStatus, SwapDetailProtocolData } from '../wire/server/index.js';
+/**
+ * Unified protocol data shape used by the engine during atomic-swap state
+ * tracking. Directly typed from the swapDetailProtocolDataSchema so shape
+ * drift from the server surfaces as a SCHEMA_MISMATCH at the API boundary.
+ */
+export type ProtocolData = SwapDetailProtocolData;
+/** Type guard for the atomic-swap protocol shape (psbt + lock + timelock). */
+export declare function isAtomicProtocolData(pd: unknown): pd is SwapDetailProtocolData & {
+    psbt: string;
+    lock_address: string;
+    timelock_blocks: number;
+};
+export interface HistoryEntry {
+    readonly id: number;
+    readonly swapNumber: string;
+    readonly fromToken: string;
+    readonly toToken: string;
+    readonly amountIn: string;
+    readonly expectedAmountOut: string;
+    readonly actualAmountOut: string | null;
+    readonly provider: string;
+    readonly status: SwapStatus;
+    readonly depositAddress: string;
+    readonly destAddress: string;
+    readonly refundAddress: string;
+    readonly depositTxHash: string | null;
+    readonly outputTxHash: string | null;
+    readonly verified: boolean;
+    readonly createdAt: string;
+    readonly updatedAt: string;
+    readonly completedAt: string | null;
+}
+//# sourceMappingURL=api.d.ts.map

package/dist/types/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../src/types/api.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAElF;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAElD,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAClC,EAAE,EAAE,OAAO,GACV,EAAE,IAAI,sBAAsB,GAAG;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;CACzB,CAQA;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC"}

package/dist/types/api.js

@@ -0,0 +1,18 @@
+// Client-side types that are NOT server-response shapes.
+//
+// Server-response types live in src/wire/server/ and are inferred from
+// zod schemas. This file houses:
+//   - HistoryEntry: the client-side history-store row (distinct from recents)
+//   - ProtocolData + isAtomicProtocolData: the unified shape the engine
+//     tracks during atomic-swap state transitions, sourced from the
+//     swapDetailProtocolDataSchema.
+/** Type guard for the atomic-swap protocol shape (psbt + lock + timelock). */
+export function isAtomicProtocolData(pd) {
+    if (!pd || typeof pd !== 'object')
+        return false;
+    const obj = pd;
+    return (typeof obj.psbt === 'string' &&
+        typeof obj.lock_address === 'string' &&
+        typeof obj.timelock_blocks === 'number');
+}
+//# sourceMappingURL=api.js.map

package/dist/types/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/types/api.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,EAAE;AACF,uEAAuE;AACvE,iCAAiC;AACjC,8EAA8E;AAC9E,wEAAwE;AACxE,oEAAoE;AACpE,oCAAoC;AAWpC,8EAA8E;AAC9E,MAAM,UAAU,oBAAoB,CAClC,EAAW;IAMX,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,GAAG,GAAG,EAA6B,CAAC;IAC1C,OAAO,CACL,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAC5B,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;QACpC,OAAO,GAAG,CAAC,eAAe,KAAK,QAAQ,CACxC,CAAC;AACJ,CAAC"}

package/dist/types/errors.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Canonical error codes emitted by the client. Every `VerificationError` and
+ * `ProtocolError` constructs with one of these. Consumers switch on `code`
+ * to produce stable UI.
+ *
+ * @see docs/ERROR-CODES.md for the human-readable reference.
+ */
+export declare const ERROR_CODES: {
+    readonly E_REDEEM_DIGEST_MISMATCH: "Local redeem digest differs from sidecar claim";
+    readonly E_LOCK_ADDR_MISMATCH: "Derived P2WSH address differs from sidecar claim";
+    readonly E_LOCK_SCRIPT: "Failed to derive P2WSH from (A, B)";
+    readonly E_S_A_MISMATCH: "Sidecar s_a does not satisfy s_a * G == S_a_monero";
+    readonly E_S_A_MONERO_MISSING: "Protocol params missing S_a_monero";
+    readonly E_COOP_SA_ADAPTOR_MISMATCH: "Cooperative s_a fails adaptor-target check";
+    readonly E_COOP_SA_PUBKEY_MISMATCH: "Cooperative s_a does not hash to S_a_monero";
+    readonly E_AMNESTY_EXCEEDS_CAP: "Amnesty exceeds configured ratio cap";
+    readonly E_AMNESTY_NEGATIVE: "Amnesty amount is negative";
+    readonly E_FEE_BELOW_RELAY: "Fee below relay floor";
+    readonly E_FEE_ABOVE_CAP: "Fee above sanity ceiling";
+    readonly E_OUTPUT_DUST: "Output below dust floor";
+    readonly E_XMR_LOCK_FAILED: "XMR lock verification failed";
+    readonly E_XMR_TIMELOCKED_OUTPUT: "Monero output has non-zero unlock_time";
+    readonly E_QUORUM_IMPOSSIBLE: "Quorum target exceeds provider count";
+    readonly E_QUORUM_DISAGREE: "Providers did not reach quorum";
+    readonly E_MONERO_QUORUM: "Not enough Monero nodes responded";
+    readonly E_DEST_ADDR_INVALID: "Destination address invalid for network";
+    readonly E_PROVIDER_UNKNOWN: "Unknown swap provider";
+    readonly E_PROTOCOL_PARAMS_MISSING: "Protocol params expected but absent";
+    readonly E_NO_SIGNED_PSBT: "Need locally-signed PSBT to recompute digest";
+    readonly E_DRIVE_TIMEOUT: "Swap driver exceeded wall-clock budget";
+    readonly E_TERMINAL: "Swap reached terminal state";
+    readonly E_WASM_INTEGRITY: "WASM SHA-256 integrity check failed";
+    readonly E_KEYSTORE_V1_INCOMPLETE: "V1 keystore migration missing required field";
+    readonly E_ENCSIG_SUBMIT_FAILED: "Encsig submission exceeded retry budget";
+    readonly E_MEMO_MALFORMED: "THORChain memo does not parse";
+    readonly E_MEMO_DEST_MISMATCH: "THORChain memo destination differs from expected";
+    readonly E_THORCHAIN_QUORUM: "Too few THORChain vault sources responded";
+    readonly E_THORCHAIN_VAULT_DISAGREE: "THORNode and Midgard disagree on vault";
+    readonly E_VAULT_UNKNOWN: "Sidecar-claimed vault does not appear in authoritative list";
+    readonly E_VAULT_HALTED: "THORChain vault or chain trading is halted";
+    readonly E_THORNODE_QUOTE_UNAVAILABLE: "Could not fetch THORNode quote";
+    readonly E_UNEXPECTED_TIMELOCK: "timelock_blocks set for non-atomicswap provider";
+    readonly E_CHAINFLIP_SHAPE: "Chainflip response failed schema validation";
+    readonly E_CHAINFLIP_HTTP: "Chainflip broker returned error status";
+    readonly E_CHAINFLIP_TIMEOUT: "Chainflip channel not found within timeout";
+    readonly E_CHAINFLIP_CHANNEL_DISAGREE: "Broker and state-chain disagree on channel";
+    readonly E_CHAINFLIP_CHANNEL_MISBINDING: "Channel does not bind user destination / refund";
+    readonly E_CHAINFLIP_CHANNEL_EXPIRING: "Channel expires before funding can confirm";
+    readonly E_CHAINFLIP_AMOUNT_BELOW_MIN: "Deposit amount below channel minimum";
+    readonly E_CHAINFLIP_AMOUNT_ABOVE_MAX: "Deposit amount above channel maximum";
+    readonly E_NEAR_INTENT_NOT_REGISTERED: "Intent not found on 1Click";
+    readonly E_NEAR_INTENT_EXPIRED: "Intent deadline passed";
+    readonly E_NEAR_INTENT_EXPIRING: "Intent deadline too close to funding confirmation";
+    readonly E_NEAR_INTENT_FAILED: "1Click reports intent failed";
+    readonly E_NEAR_INTENT_MISBINDING: "Intent does not bind user destination / refund";
+    readonly E_NEAR_INTENT_CHAIN_DEST: "On-chain intent destination differs from 1Click claim";
+    readonly E_NEAR_INTENT_CHAIN_AMOUNT: "On-chain intent amount differs from 1Click claim";
+    readonly E_RATE_DRIFT: "Engine expected output outside slippage band";
+    readonly E_QUOTE_DRIFT: "Server quote drifted from accepted quote beyond slippage";
+    readonly E_QUOTE_TAMPERED: "Server quote hash does not match accepted quote";
+    readonly E_QUOTE_STALE: "Accepted quote exceeds max age, re-quote required";
+    readonly E_ORACLE_QUORUM: "Too few rate oracles responded";
+    readonly E_ORACLE_SPREAD: "Rate oracles disagree beyond threshold";
+    readonly E_RATE_DEVIATION: "Engine rate deviates from oracle median beyond threshold";
+    readonly E_PROVIDER_UNSUPPORTED_REFUND: "Provider does not support refund-address binding";
+    readonly E_DEPOSIT_TOO_MANY_UTXOS: "Deposit address received too many UTXOs";
+    readonly E_SWEEP_DUST: "Sweep output below dust floor";
+    readonly E_SLIPPAGE_OUT_OF_RANGE: "slippageBps out of permitted range";
+    readonly E_INVALID_DEST_ADDRESS: "destAddress is not valid for the destination token";
+    readonly E_POLL_OUT_OF_RANGE: "pollMs out of permitted range";
+    readonly E_RETRIES_OUT_OF_RANGE: "maxRetries out of permitted range";
+    readonly E_PROVIDER_SUBSTITUTED: "Server returned a different provider than requested";
+    readonly E_VERIFICATION_ABSENT: "Server has not produced a verification after retry budget";
+    readonly E_TX_CANCEL_UNVERIFIED: "TxCancel not confirmed on-chain";
+    readonly E_TX_CANCEL_MALFORMED: "TxCancel hex did not parse";
+    readonly E_ENCSIG_REFUND_INVALID: "Alice encsig_refund did not verify under recomputed digest";
+    readonly E_ENCSIG_REFUND_MISSING: "Server did not provide tx_full_refund_encsig at setup";
+    readonly E_REFUND_DUST: "Refund output below dust floor";
+    readonly E_AMNESTY_DUST: "Amnesty output below dust floor";
+    readonly E_AMNESTY_DERIVE: "Failed to derive amnesty P2WSH";
+    readonly E_REFUND_SIG_A: "Alice sig on TxRefund failed local verification";
+    readonly E_REFUND_SIG_B: "Bob sig on TxRefund failed local verification";
+    readonly E_REFUND_BROADCAST: "Refund broadcast failed";
+    readonly E_SIG_HIGH_S: "Signature is not in low-S form";
+    readonly E_REFUND_PARAMS_MISSING: "Refund protocol params absent from server response";
+    readonly E_SNAPSHOT_WRITE_FAILED: "Failed to persist recovery snapshot before broadcast";
+    readonly E_LIBP2P_SEED_REQUIRED: "Keystore has no libp2p master seed — legacy V2 keystores cannot start new swaps. Create a new keystore.";
+    readonly E_TIMELOCK_OUT_OF_RANGE: "BIP68 sequence supplied by sidecar is outside the accepted range";
+    readonly E_DLEQ_PROOF_REQUIRED: "Alice DLEQ proof is required before funding; refusing to proceed without it";
+    readonly E_DLEQ_PROOF_INVALID: "Alice DLEQ proof failed cross-curve verification";
+    readonly E_PRESIGS_WEDGED: "Sidecar repeatedly rejected /presigs with \"no pending PSBT\" while the encsig never appeared on /getSwapDetail. The sidecar broker is out of sync with crypto-server's view; the swap cannot progress without operator intervention.";
+};
+export type ErrorCode = keyof typeof ERROR_CODES;
+//# sourceMappingURL=errors.d.ts.map

package/dist/types/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/types/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsFd,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,WAAW,CAAC"}

package/dist/types/errors.js

@@ -0,0 +1,93 @@
+/**
+ * Canonical error codes emitted by the client. Every `VerificationError` and
+ * `ProtocolError` constructs with one of these. Consumers switch on `code`
+ * to produce stable UI.
+ *
+ * @see docs/ERROR-CODES.md for the human-readable reference.
+ */
+export const ERROR_CODES = {
+    E_REDEEM_DIGEST_MISMATCH: 'Local redeem digest differs from sidecar claim',
+    E_LOCK_ADDR_MISMATCH: 'Derived P2WSH address differs from sidecar claim',
+    E_LOCK_SCRIPT: 'Failed to derive P2WSH from (A, B)',
+    E_S_A_MISMATCH: 'Sidecar s_a does not satisfy s_a * G == S_a_monero',
+    E_S_A_MONERO_MISSING: 'Protocol params missing S_a_monero',
+    E_COOP_SA_ADAPTOR_MISMATCH: 'Cooperative s_a fails adaptor-target check',
+    E_COOP_SA_PUBKEY_MISMATCH: 'Cooperative s_a does not hash to S_a_monero',
+    E_AMNESTY_EXCEEDS_CAP: 'Amnesty exceeds configured ratio cap',
+    E_AMNESTY_NEGATIVE: 'Amnesty amount is negative',
+    E_FEE_BELOW_RELAY: 'Fee below relay floor',
+    E_FEE_ABOVE_CAP: 'Fee above sanity ceiling',
+    E_OUTPUT_DUST: 'Output below dust floor',
+    E_XMR_LOCK_FAILED: 'XMR lock verification failed',
+    E_XMR_TIMELOCKED_OUTPUT: 'Monero output has non-zero unlock_time',
+    E_QUORUM_IMPOSSIBLE: 'Quorum target exceeds provider count',
+    E_QUORUM_DISAGREE: 'Providers did not reach quorum',
+    E_MONERO_QUORUM: 'Not enough Monero nodes responded',
+    E_DEST_ADDR_INVALID: 'Destination address invalid for network',
+    E_PROVIDER_UNKNOWN: 'Unknown swap provider',
+    E_PROTOCOL_PARAMS_MISSING: 'Protocol params expected but absent',
+    E_NO_SIGNED_PSBT: 'Need locally-signed PSBT to recompute digest',
+    E_DRIVE_TIMEOUT: 'Swap driver exceeded wall-clock budget',
+    E_TERMINAL: 'Swap reached terminal state',
+    E_WASM_INTEGRITY: 'WASM SHA-256 integrity check failed',
+    E_KEYSTORE_V1_INCOMPLETE: 'V1 keystore migration missing required field',
+    E_ENCSIG_SUBMIT_FAILED: 'Encsig submission exceeded retry budget',
+    E_MEMO_MALFORMED: 'THORChain memo does not parse',
+    E_MEMO_DEST_MISMATCH: 'THORChain memo destination differs from expected',
+    E_THORCHAIN_QUORUM: 'Too few THORChain vault sources responded',
+    E_THORCHAIN_VAULT_DISAGREE: 'THORNode and Midgard disagree on vault',
+    E_VAULT_UNKNOWN: 'Sidecar-claimed vault does not appear in authoritative list',
+    E_VAULT_HALTED: 'THORChain vault or chain trading is halted',
+    E_THORNODE_QUOTE_UNAVAILABLE: 'Could not fetch THORNode quote',
+    E_UNEXPECTED_TIMELOCK: 'timelock_blocks set for non-atomicswap provider',
+    E_CHAINFLIP_SHAPE: 'Chainflip response failed schema validation',
+    E_CHAINFLIP_HTTP: 'Chainflip broker returned error status',
+    E_CHAINFLIP_TIMEOUT: 'Chainflip channel not found within timeout',
+    E_CHAINFLIP_CHANNEL_DISAGREE: 'Broker and state-chain disagree on channel',
+    E_CHAINFLIP_CHANNEL_MISBINDING: 'Channel does not bind user destination / refund',
+    E_CHAINFLIP_CHANNEL_EXPIRING: 'Channel expires before funding can confirm',
+    E_CHAINFLIP_AMOUNT_BELOW_MIN: 'Deposit amount below channel minimum',
+    E_CHAINFLIP_AMOUNT_ABOVE_MAX: 'Deposit amount above channel maximum',
+    E_NEAR_INTENT_NOT_REGISTERED: 'Intent not found on 1Click',
+    E_NEAR_INTENT_EXPIRED: 'Intent deadline passed',
+    E_NEAR_INTENT_EXPIRING: 'Intent deadline too close to funding confirmation',
+    E_NEAR_INTENT_FAILED: '1Click reports intent failed',
+    E_NEAR_INTENT_MISBINDING: 'Intent does not bind user destination / refund',
+    E_NEAR_INTENT_CHAIN_DEST: 'On-chain intent destination differs from 1Click claim',
+    E_NEAR_INTENT_CHAIN_AMOUNT: 'On-chain intent amount differs from 1Click claim',
+    E_RATE_DRIFT: 'Engine expected output outside slippage band',
+    E_QUOTE_DRIFT: 'Server quote drifted from accepted quote beyond slippage',
+    E_QUOTE_TAMPERED: 'Server quote hash does not match accepted quote',
+    E_QUOTE_STALE: 'Accepted quote exceeds max age, re-quote required',
+    E_ORACLE_QUORUM: 'Too few rate oracles responded',
+    E_ORACLE_SPREAD: 'Rate oracles disagree beyond threshold',
+    E_RATE_DEVIATION: 'Engine rate deviates from oracle median beyond threshold',
+    E_PROVIDER_UNSUPPORTED_REFUND: 'Provider does not support refund-address binding',
+    E_DEPOSIT_TOO_MANY_UTXOS: 'Deposit address received too many UTXOs',
+    E_SWEEP_DUST: 'Sweep output below dust floor',
+    E_SLIPPAGE_OUT_OF_RANGE: 'slippageBps out of permitted range',
+    E_INVALID_DEST_ADDRESS: 'destAddress is not valid for the destination token',
+    E_POLL_OUT_OF_RANGE: 'pollMs out of permitted range',
+    E_RETRIES_OUT_OF_RANGE: 'maxRetries out of permitted range',
+    E_PROVIDER_SUBSTITUTED: 'Server returned a different provider than requested',
+    E_VERIFICATION_ABSENT: 'Server has not produced a verification after retry budget',
+    E_TX_CANCEL_UNVERIFIED: 'TxCancel not confirmed on-chain',
+    E_TX_CANCEL_MALFORMED: 'TxCancel hex did not parse',
+    E_ENCSIG_REFUND_INVALID: 'Alice encsig_refund did not verify under recomputed digest',
+    E_ENCSIG_REFUND_MISSING: 'Server did not provide tx_full_refund_encsig at setup',
+    E_REFUND_DUST: 'Refund output below dust floor',
+    E_AMNESTY_DUST: 'Amnesty output below dust floor',
+    E_AMNESTY_DERIVE: 'Failed to derive amnesty P2WSH',
+    E_REFUND_SIG_A: 'Alice sig on TxRefund failed local verification',
+    E_REFUND_SIG_B: 'Bob sig on TxRefund failed local verification',
+    E_REFUND_BROADCAST: 'Refund broadcast failed',
+    E_SIG_HIGH_S: 'Signature is not in low-S form',
+    E_REFUND_PARAMS_MISSING: 'Refund protocol params absent from server response',
+    E_SNAPSHOT_WRITE_FAILED: 'Failed to persist recovery snapshot before broadcast',
+    E_LIBP2P_SEED_REQUIRED: 'Keystore has no libp2p master seed \u2014 legacy V2 keystores cannot start new swaps. Create a new keystore.',
+    E_TIMELOCK_OUT_OF_RANGE: 'BIP68 sequence supplied by sidecar is outside the accepted range',
+    E_DLEQ_PROOF_REQUIRED: 'Alice DLEQ proof is required before funding; refusing to proceed without it',
+    E_DLEQ_PROOF_INVALID: 'Alice DLEQ proof failed cross-curve verification',
+    E_PRESIGS_WEDGED: 'Sidecar repeatedly rejected /presigs with "no pending PSBT" while the encsig never appeared on /getSwapDetail. The sidecar broker is out of sync with crypto-server\'s view; the swap cannot progress without operator intervention.',
+};
+//# sourceMappingURL=errors.js.map

package/dist/types/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/types/errors.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,wBAAwB,EAAE,gDAAgD;IAC1E,oBAAoB,EAAE,kDAAkD;IACxE,aAAa,EAAE,oCAAoC;IACnD,cAAc,EAAE,oDAAoD;IACpE,oBAAoB,EAAE,oCAAoC;IAC1D,0BAA0B,EAAE,4CAA4C;IACxE,yBAAyB,EAAE,6CAA6C;IACxE,qBAAqB,EAAE,sCAAsC;IAC7D,kBAAkB,EAAE,4BAA4B;IAChD,iBAAiB,EAAE,uBAAuB;IAC1C,eAAe,EAAE,0BAA0B;IAC3C,aAAa,EAAE,yBAAyB;IACxC,iBAAiB,EAAE,8BAA8B;IACjD,uBAAuB,EAAE,wCAAwC;IACjE,mBAAmB,EAAE,sCAAsC;IAC3D,iBAAiB,EAAE,gCAAgC;IACnD,eAAe,EAAE,mCAAmC;IACpD,mBAAmB,EAAE,yCAAyC;IAC9D,kBAAkB,EAAE,uBAAuB;IAC3C,yBAAyB,EAAE,qCAAqC;IAChE,gBAAgB,EAAE,8CAA8C;IAChE,eAAe,EAAE,wCAAwC;IACzD,UAAU,EAAE,6BAA6B;IACzC,gBAAgB,EAAE,qCAAqC;IACvD,wBAAwB,EAAE,8CAA8C;IACxE,sBAAsB,EAAE,yCAAyC;IACjE,gBAAgB,EAAE,+BAA+B;IACjD,oBAAoB,EAAE,kDAAkD;IACxE,kBAAkB,EAAE,2CAA2C;IAC/D,0BAA0B,EAAE,wCAAwC;IACpE,eAAe,EAAE,6DAA6D;IAC9E,cAAc,EAAE,4CAA4C;IAC5D,4BAA4B,EAAE,gCAAgC;IAC9D,qBAAqB,EAAE,iDAAiD;IACxE,iBAAiB,EAAE,6CAA6C;IAChE,gBAAgB,EAAE,wCAAwC;IAC1D,mBAAmB,EAAE,4CAA4C;IACjE,4BAA4B,EAAE,4CAA4C;IAC1E,8BAA8B,EAAE,iDAAiD;IACjF,4BAA4B,EAAE,4CAA4C;IAC1E,4BAA4B,EAAE,sCAAsC;IACpE,4BAA4B,EAAE,sCAAsC;IACpE,4BAA4B,EAAE,4BAA4B;IAC1D,qBAAqB,EAAE,wBAAwB;IAC/C,sBAAsB,EAAE,mDAAmD;IAC3E,oBAAoB,EAAE,8BAA8B;IACpD,wBAAwB,EAAE,gDAAgD;IAC1E,wBAAwB,EAAE,uDAAuD;IACjF,0BAA0B,EAAE,kDAAkD;IAC9E,YAAY,EAAE,8CAA8C;IAC5D,aAAa,EAAE,0DAA0D;IACzE,gBAAgB,EAAE,iDAAiD;IACnE,aAAa,EAAE,mDAAmD;IAClE,eAAe,EAAE,gCAAgC;IACjD,eAAe,EAAE,wCAAwC;IACzD,gBAAgB,EAAE,0DAA0D;IAC5E,6BAA6B,EAAE,kDAAkD;IACjF,wBAAwB,EAAE,yCAAyC;IACnE,YAAY,EAAE,+BAA+B;IAC7C,uBAAuB,EAAE,oCAAoC;IAC7D,sBAAsB,EAAE,oDAAoD;IAC5E,mBAAmB,EAAE,+BAA+B;IACpD,sBAAsB,EAAE,mCAAmC;IAC3D,sBAAsB,EAAE,qDAAqD;IAC7E,qBAAqB,EAAE,2DAA2D;IAClF,sBAAsB,EAAE,iCAAiC;IACzD,qBAAqB,EAAE,4BAA4B;IACnD,uBAAuB,EAAE,4DAA4D;IACrF,uBAAuB,EAAE,uDAAuD;IAChF,aAAa,EAAE,gCAAgC;IAC/C,cAAc,EAAE,iCAAiC;IACjD,gBAAgB,EAAE,gCAAgC;IAClD,cAAc,EAAE,iDAAiD;IACjE,cAAc,EAAE,+CAA+C;IAC/D,kBAAkB,EAAE,yBAAyB;IAC7C,YAAY,EAAE,gCAAgC;IAC9C,uBAAuB,EAAE,oDAAoD;IAC7E,uBAAuB,EAAE,sDAAsD;IAC/E,sBAAsB,EACpB,8GAA8G;IAChH,uBAAuB,EAAE,kEAAkE;IAC3F,qBAAqB,EAAE,6EAA6E;IACpG,oBAAoB,EAAE,kDAAkD;IACxE,gBAAgB,EACd,sOAAsO;CAChO,CAAC"}

package/dist/types/index.d.ts

@@ -0,0 +1,8 @@
+export * from '../wire/server/index.js';
+export * from './api.js';
+export * from './errors.js';
+export * from './keys.js';
+export * from './protocol.js';
+export * from './status.js';
+export * from './verification.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAEA,cAAc,yBAAyB,CAAC;AACxC,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC"}

package/dist/types/index.js

@@ -0,0 +1,10 @@
+// Server-response schemas + inferred types live in ../wire/server/.
+// Re-exported here so internal files can still `import { X } from '../types/index.js'`.
+export * from '../wire/server/index.js';
+export * from './api.js';
+export * from './errors.js';
+export * from './keys.js';
+export * from './protocol.js';
+export * from './status.js';
+export * from './verification.js';
+//# sourceMappingURL=index.js.map