@shroud-fi/agent-runtime 0.1.0

package/dist/cjs/agent.js

@@ -0,0 +1,594 @@
+"use strict";
+/**
+ * ShroudAgent — the ergonomic runtime that composes core + payments + scanning
+ * + transport into a single class.
+ *
+ * Privacy invariants (binding — code-reviewer will check):
+ *   - No console.* anywhere in this file.
+ *   - No JSON.stringify of keys, identity, detection, signature, or masterSeed.
+ *   - No key bytes / signature bytes in error messages.
+ *   - No amount values in error messages.
+ *   - The spend key never leaves runtime; the scanning module needs it for
+ *     ECDH derivation only.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ShroudAgent = void 0;
+const viem_1 = require("viem");
+const core_1 = require("@shroud-fi/core");
+const payments_1 = require("@shroud-fi/payments");
+const scanning_1 = require("@shroud-fi/scanning");
+const transport_1 = require("@shroud-fi/transport");
+const errors_js_1 = require("./errors.js");
+/**
+ * ETH zero-address sentinel — some callers may pass this to indicate "ETH" on
+ * the sweep dispatch. Kept beside the canonical ETH_SENTINEL constant.
+ */
+const ZERO_ADDRESS_ETH = '0x0000000000000000000000000000000000000000';
+/**
+ * The ShroudAgent class. Wraps an EIP-5564 identity + the four ShroudFi
+ * packages behind a single ergonomic surface.
+ *
+ * Constructor is exported but typically reached through `createShroudAgent` or
+ * `createShroudAgentFromBrowserWallet`. Direct construction is supported for
+ * tests that need to inject a mock scanner backend.
+ */
+class ShroudAgent {
+    identity;
+    metaAddress;
+    metaAddressEncoded;
+    transport;
+    stealthContract;
+    finality;
+    startBlock;
+    announcer;
+    backendOverride;
+    autoRegister;
+    scanner;
+    isStarted = false;
+    controller;
+    constructor(opts) {
+        this.identity = opts.identity;
+        this.metaAddress = opts.identity.metaAddress;
+        this.metaAddressEncoded = (0, core_1.encodeMetaAddress)(opts.identity.metaAddress);
+        this.transport = opts.transport;
+        this.stealthContract = opts.stealthContract;
+        this.startBlock = opts.startBlock;
+        this.finality = opts.finality ?? 'safe';
+        this.announcer = opts.announcer;
+        this.backendOverride = opts.backend;
+        this.autoRegister = opts.autoRegister ?? false;
+        // Scanner is built lazily in start() — see H8 in docs/debug/P4-STEP3-STALL.md.
+        // Reusing one Scanner across start/stop/start cycles silently dropped events
+        // because Scanner.close() permanently sets its `closed` flag.
+    }
+    /**
+     * Build a fresh Scanner with this agent's config. Called from start() so
+     * each lifecycle gets its own scanner instance (a closed scanner can't be
+     * reopened — see H8).
+     */
+    buildScanner() {
+        return (0, scanning_1.createScanner)({
+            transport: this.transport,
+            scanningKey: this.identity.keys.scanningKey,
+            spendingKey: this.identity.keys.spendingKey,
+            startBlock: this.startBlock,
+            finality: this.finality,
+            ...(this.announcer !== undefined ? { contractAddress: this.announcer } : {}),
+            ...(this.backendOverride !== undefined ? { backend: this.backendOverride } : {}),
+        });
+    }
+    /**
+     * Start receiving detected payments.
+     *
+     * Returns an AsyncIterable; consumer drives via `for await`. If
+     * `opts.backfillFrom` is set, the first phase yields scanRange results,
+     * then transitions to live watch().
+     *
+     * @throws AgentAlreadyStartedError if called twice without stop().
+     */
+    start(opts) {
+        if (this.isStarted) {
+            throw new errors_js_1.AgentAlreadyStartedError();
+        }
+        this.isStarted = true;
+        const controller = new AbortController();
+        this.controller = controller;
+        // Forward external signal to internal controller.
+        const externalSignal = opts?.signal;
+        if (externalSignal !== undefined) {
+            if (externalSignal.aborted) {
+                controller.abort();
+            }
+            else {
+                externalSignal.addEventListener('abort', () => controller.abort(), { once: true });
+            }
+        }
+        // Build a fresh scanner for THIS start() cycle. Reusing the same scanner
+        // across start/stop/start would silently drop events because Scanner.close()
+        // sets a permanent `closed` flag inside detector.ts. See H8.
+        const scanner = this.buildScanner();
+        this.scanner = scanner;
+        const finality = this.finality;
+        const transport = this.transport;
+        const backfillFrom = opts?.backfillFrom;
+        const resetStarted = () => {
+            this.isStarted = false;
+        };
+        // EAGERLY open the live watch subscription before this method returns.
+        // `scanner.watch()` is lazy — the backend.watchAnnouncements registration
+        // only fires when [Symbol.asyncIterator]() is called. If we left this to
+        // the generator body below (which runs on first iter.next()), a caller
+        // pattern like:
+        //   const iter = agent.start();
+        //   await agent.send(...)           // tx mines before we subscribe
+        //   for await (const d of iter) ... // never sees the event
+        // would race and miss the announcement. Subscribing here closes the gap.
+        const watchIterator = scanner.watch(controller.signal)[Symbol.asyncIterator]();
+        return {
+            [Symbol.asyncIterator]: async function* () {
+                try {
+                    if (backfillFrom !== undefined) {
+                        // Determine the latest block we can backfill to. The tag mirrors
+                        // the configured finality so unfinalized history is not yielded
+                        // for 'safe' / 'finalized' callers. 'unsafe' callers (and chains
+                        // that don't track 'safe'/'finalized' — e.g. Anvil) use 'latest'
+                        // so the backfill reaches the actual head.
+                        const tag = finality === 'finalized'
+                            ? 'finalized'
+                            : finality === 'safe'
+                                ? 'safe'
+                                : 'latest';
+                        const latestBlock = await transport.publicClient.getBlock({
+                            blockTag: tag,
+                        });
+                        const latestSafe = latestBlock.number ?? backfillFrom;
+                        if (latestSafe >= backfillFrom) {
+                            for await (const detection of scanner.scanRange(backfillFrom, latestSafe, controller.signal)) {
+                                if (controller.signal.aborted)
+                                    return;
+                                yield detection;
+                            }
+                        }
+                    }
+                    // Drain the live watch iterator we eagerly opened above.
+                    while (true) {
+                        if (controller.signal.aborted)
+                            return;
+                        const r = await watchIterator.next();
+                        if (r.done)
+                            return;
+                        yield r.value;
+                    }
+                }
+                finally {
+                    // Tear down the eagerly-opened watch iterator so scanner.watchActive
+                    // resets and a follow-up start() can resubscribe.
+                    try {
+                        await watchIterator.return?.({
+                            value: undefined,
+                            done: true,
+                        });
+                    }
+                    catch {
+                        // close path must never throw out of finally.
+                    }
+                    resetStarted();
+                }
+            },
+        };
+    }
+    /**
+     * Stop the agent. Aborts the internal signal, closes the current scanner,
+     * and clears the reference so the next start() builds a fresh one.
+     * Idempotent — safe to call multiple times or before start().
+     */
+    stop() {
+        if (this.controller !== undefined) {
+            try {
+                this.controller.abort();
+            }
+            catch {
+                // Swallow — stop must not throw.
+            }
+            this.controller = undefined;
+        }
+        if (this.scanner !== undefined) {
+            try {
+                this.scanner.close();
+            }
+            catch {
+                // Swallow — stop must not throw.
+            }
+            this.scanner = undefined;
+        }
+        this.isStarted = false;
+    }
+    /**
+     * Send native ETH to a recipient stealth meta-address.
+     *
+     * Accepts either a parsed StealthMetaAddress or the encoded string form
+     * (`st:base:0x...`). String form is decoded via decodeMetaAddress before use.
+     */
+    async send(to, valueWei) {
+        const meta = typeof to === 'string' ? (0, core_1.decodeMetaAddress)(to) : to;
+        return (0, payments_1.sendETHPayment)(this.transport, this.stealthContract, meta, valueWei);
+    }
+    /**
+     * Send an ERC-20 token to a recipient stealth meta-address.
+     *
+     * Caller MUST have already approved the stealth contract to spend the token
+     * — v1 does not include an approve flow.
+     */
+    async sendERC20(to, token, amount) {
+        const meta = typeof to === 'string' ? (0, core_1.decodeMetaAddress)(to) : to;
+        return (0, payments_1.sendERC20Payment)(this.transport, this.stealthContract, meta, token, amount);
+    }
+    /**
+     * M3 — read the canonical ERC-6538 registry and return whether the agent's
+     * registrant wallet has a non-empty stealth meta-address on file for
+     * scheme 1 (the ShroudFi default).
+     *
+     * The registrant is keyed by `transport.walletClient.account.address` —
+     * the EOA that would sign the `registerKeys` transaction. Read-only
+     * transports (no walletClient or no account) cannot be registered and
+     * therefore return `false`.
+     *
+     * No side effects, no gas. Safe to call before every send.
+     */
+    async isRegistered() {
+        const walletClient = this.transport.walletClient;
+        if (walletClient === undefined)
+            return false;
+        const account = walletClient.account;
+        if (account === undefined)
+            return false;
+        const registrant = account.address;
+        const raw = (await this.transport.publicClient.readContract({
+            address: transport_1.ERC6538_REGISTRY,
+            abi: transport_1.ERC6538RegistryAbi,
+            functionName: 'stealthMetaAddressOf',
+            args: [registrant, REGISTRY_SCHEME_ID],
+        }));
+        // viem returns '0x' for empty bytes. Anything longer is a registration.
+        return raw !== '0x' && raw.length > 2;
+    }
+    /**
+     * M3 — publish the agent's stealth meta-address (33-byte spending pubkey
+     * concatenated with 33-byte viewing pubkey) into the canonical ERC-6538
+     * registry under scheme 1.
+     *
+     * Throws `AlreadyRegisteredError` if the registrant wallet already has a
+     * non-empty entry. Throws `RegistrationRequiresWalletError` if the
+     * transport has no walletClient with an account.
+     *
+     * Privacy: only the agent's PUBLIC keys cross the wire (these are the
+     * same bytes that already live in `metaAddressEncoded`). The spending
+     * private key is never touched by this path.
+     *
+     * @returns the transaction hash of the `registerKeys` call.
+     */
+    async register() {
+        const walletClient = this.transport.walletClient;
+        if (walletClient === undefined) {
+            throw new errors_js_1.RegistrationRequiresWalletError();
+        }
+        const account = walletClient.account;
+        if (account === undefined) {
+            throw new errors_js_1.RegistrationRequiresWalletError();
+        }
+        // Fail fast if already registered. This both saves the operator a gas
+        // payment and keeps `register()` honest: the only way to overwrite an
+        // existing entry on the canonical registry is to bump the per-scheme
+        // nonce, which is out of scope for v1.
+        if (await this.isRegistered()) {
+            throw new errors_js_1.AlreadyRegisteredError();
+        }
+        // Build the 66-byte payload: 33 spending pubkey || 33 viewing pubkey.
+        // The registrar contract layout is confirmed by
+        // contracts/src/ShroudFiRegistrar.sol (each pubkey is a compressed
+        // secp256k1 point — 33 bytes, prefix 0x02 / 0x03).
+        const payload = (0, viem_1.concatBytes)([
+            this.metaAddress.spendingPubKey,
+            this.metaAddress.viewingPubKey,
+        ]);
+        const stealthMetaAddress = (0, viem_1.bytesToHex)(payload);
+        const writeArgs = {
+            address: transport_1.ERC6538_REGISTRY,
+            abi: transport_1.ERC6538RegistryAbi,
+            functionName: 'registerKeys',
+            args: [REGISTRY_SCHEME_ID, stealthMetaAddress],
+            account,
+            chain: this.transport.chain,
+        };
+        // viem's writeContract has a complex union signature — cast at the
+        // boundary, mirroring the pattern used in @shroud-fi/payments.
+        const txHash = (await walletClient.writeContract(writeArgs));
+        return txHash;
+    }
+    /**
+     * M3 — composite, idempotent registration helper.
+     *
+     * Returns `{ registered: false }` if the agent is already registered
+     * (no tx broadcast). Otherwise returns `{ registered: true, txHash }`
+     * with the registration tx hash.
+     *
+     * Safe to call before every send — the check is a single eth_call.
+     */
+    async ensureRegistered() {
+        if (await this.isRegistered()) {
+            return { registered: false };
+        }
+        const txHash = await this.register();
+        return { registered: true, txHash };
+    }
+    /**
+     * M4 — ergonomic helper: pay an EVM wallet by its plain address, no
+     * meta-address handling on the caller side.
+     *
+     * Delegates to `sendToWallet` from `@shroud-fi/payments` which does the
+     * ERC-6538 registry lookup, decodes the recipient's stealth meta-address,
+     * and dispatches `sendETHPayment` or `sendERC20Payment` as appropriate.
+     *
+     * If the agent was constructed with `autoRegister: true`, this method
+     * calls `ensureRegistered` BEFORE dispatching the payment so the agent
+     * itself becomes reachable as a stealth-payment recipient the first time
+     * it pays someone. A failure inside `ensureRegistered` is wrapped in
+     * `AutoRegistrationFailedError` so callers can distinguish setup failures
+     * from payment failures via the `cause` chain.
+     *
+     * Privacy: the recipient wallet address never appears in error messages
+     * — `RecipientNotOnboardedError.wallet` exposes it on a structured field
+     * for callers that need to show a UI hint.
+     */
+    async sendToWallet(recipientWallet, asset, amount, options) {
+        if (this.autoRegister) {
+            try {
+                await this.ensureRegistered();
+            }
+            catch (err) {
+                // Preserve the underlying cause so callers can introspect (e.g.,
+                // tell apart a missing walletClient from an RPC error). The wrapper
+                // message itself is privacy-safe — see AutoRegistrationFailedError.
+                throw new errors_js_1.AutoRegistrationFailedError(err);
+            }
+        }
+        return (0, payments_1.sendToWallet)(this.transport, recipientWallet, asset, amount, options);
+    }
+    /**
+     * Sweep funds from a detected stealth address to a destination.
+     *
+     * If `opts.token` is undefined or matches the ETH sentinel (or zero address)
+     * the agent dispatches to sweepETH; otherwise it dispatches to sweepERC20
+     * with the given token.
+     *
+     * Direct sweep (the default path) requires the stealth address to hold
+     * enough ETH to pay its own gas. When the stealth holds zero ETH set
+     * `opts.viaRelayer = true`:
+     *   - ERC-20 → routed to {@link sweepViaRelayer} (Gelato or self-host).
+     *   - ETH    → routed to {@link sweepEthViaRelayer} via EIP-7702 (P5.1).
+     *     Requires `opts.ethRelayerOptions.selfHostEndpoint` since there's no
+     *     third-party fallback for the 7702 path.
+     */
+    async sweep(detection, destination, opts) {
+        const token = opts?.token;
+        const isEth = token === undefined ||
+            token === ZERO_ADDRESS_ETH ||
+            token.toLowerCase() === payments_1.ETH_SENTINEL.toLowerCase();
+        if (opts?.viaRelayer === true) {
+            if (isEth) {
+                if (opts.ethRelayerOptions === undefined) {
+                    throw new errors_js_1.EthRelayerEndpointRequiredError();
+                }
+                return this.sweepEthViaRelayer(detection, destination, {
+                    ...(opts.ethRelayerContract !== undefined
+                        ? { ethRelayerContract: opts.ethRelayerContract }
+                        : {}),
+                    relayerOptions: opts.ethRelayerOptions,
+                });
+            }
+            return this.sweepViaRelayer(detection, destination, {
+                token,
+                ...(opts.relayerContract !== undefined ? { relayerContract: opts.relayerContract } : {}),
+                ...(opts.relayerOptions !== undefined ? { relayerOptions: opts.relayerOptions } : {}),
+            });
+        }
+        if (isEth) {
+            const swept = await (0, payments_1.sweepETH)(this.transport, detection.stealthPrivateKey, destination);
+            return { swept, detection };
+        }
+        const swept = await (0, payments_1.sweepERC20)(this.transport, detection.stealthPrivateKey, token, destination);
+        return { swept, detection };
+    }
+    /**
+     * Gasless ERC-20 sweep via the ShroudFiRelayer + Gelato 1Balance.
+     *
+     * Lazy-imports `@shroud-fi/relayer` so the agent-runtime bundle stays small
+     * for callers that never use the relayer path. The Gelato SDK + axios + ws
+     * deps only land in the bundle when this method is actually called.
+     *
+     * Relayer contract resolution order:
+     *   1. `opts.relayerContract` if provided
+     *   2. `getRelayer(transport.chain.id)` lookup from `@shroud-fi/transport`
+     *   3. Throw `RelayerContractNotConfiguredError`
+     *
+     * @throws RelayerContractNotConfiguredError if no relayer is resolvable.
+     * @throws RelayerNotAvailableForETHError if the agent itself ever invokes
+     *         this with an ETH-like token (the dispatch in `sweep()` already
+     *         guards, this guards direct callers too).
+     */
+    async sweepViaRelayer(detection, destination, opts) {
+        const { token } = opts;
+        const isEth = token === ZERO_ADDRESS_ETH ||
+            token.toLowerCase() === payments_1.ETH_SENTINEL.toLowerCase();
+        if (isEth) {
+            // Direct callers asking for ERC-20 relayer with the ETH sentinel need
+            // to use sweepEthViaRelayer instead.
+            throw new errors_js_1.EthRelayerEndpointRequiredError();
+        }
+        const chainId = this.transport.chain.id;
+        const relayerContract = opts.relayerContract ?? (0, transport_1.getRelayer)(chainId);
+        if (relayerContract === undefined) {
+            throw new errors_js_1.RelayerContractNotConfiguredError();
+        }
+        // Lazy dynamic import — keeps the agent-runtime ESM bundle small for
+        // consumers that never call sweepViaRelayer. The Gelato SDK + transitive
+        // deps (axios, ws, isomorphic-ws) only enter the bundle on demand.
+        const relayerMod = await Promise.resolve().then(() => __importStar(require('@shroud-fi/relayer')));
+        // Self-host path: skip Gelato. Sign the permit locally, POST the request
+        // to the operator-controlled relayer service, return a receipt shaped
+        // like the Gelato one.
+        const selfHostEndpoint = opts.relayerOptions?.selfHostEndpoint;
+        if (typeof selfHostEndpoint === 'string' && selfHostEndpoint.length > 0) {
+            const swept = await this.sweepViaSelfHost(relayerMod.signEip2612Permit, detection, destination, token, relayerContract, selfHostEndpoint, opts.relayerOptions);
+            return { swept, detection };
+        }
+        const swept = await relayerMod.relayedSweepERC20(this.transport, detection.stealthPrivateKey, token, destination, relayerContract, opts.relayerOptions);
+        return { swept, detection };
+    }
+    /**
+     * Self-host dispatch: sign the EIP-2612 permit, POST to the operator's
+     * service, return a Gelato-shaped receipt.
+     *
+     * Privacy: only the (public) permit signature + stealth address + token
+     * + destination cross the wire. The stealth private key never leaves the
+     * client.
+     */
+    async sweepViaSelfHost(signEip2612Permit, detection, destination, token, relayerContract, endpoint, options) {
+        // 1. Read the stealth balance.
+        const stealthAddress = detection.stealthAddress;
+        const balance = (await this.transport.publicClient.readContract({
+            address: token,
+            abi: BALANCE_OF_ABI,
+            functionName: 'balanceOf',
+            args: [stealthAddress],
+        }));
+        // 2. Compute the permit deadline.
+        const lifetime = options?.deadlineSecs ?? 1800n;
+        const latestBlock = await this.transport.publicClient.getBlock();
+        const deadline = latestBlock.timestamp + lifetime;
+        // 3. Sign the permit (the only place the stealth private key is consumed).
+        const permit = await signEip2612Permit(this.transport, detection.stealthPrivateKey, token, relayerContract, balance, deadline);
+        // 4. POST to the self-host service.
+        const body = {
+            token,
+            destination,
+            stealthAddress,
+            deadline: permit.deadline.toString(),
+            v: permit.v,
+            r: permit.r,
+            s: permit.s,
+        };
+        const fetchInit = {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(body),
+        };
+        if (options?.signal !== undefined) {
+            fetchInit.signal = options.signal;
+        }
+        const response = await fetch(`${endpoint.replace(/\/$/, '')}/relay`, fetchInit);
+        const json = (await response.json());
+        if (!json.ok) {
+            throw new Error(json.error);
+        }
+        return {
+            taskId: `self-host:${json.txHash}`,
+            txHash: json.txHash,
+            status: 'success',
+            relayerContract,
+            token,
+            destination,
+            blockNumber: BigInt(json.blockNumber),
+        };
+    }
+    /**
+     * P5.1 — gasless ETH sweep via EIP-7702 + self-host relayer service.
+     *
+     * Dispatch order for the ShroudFiEthRelayer contract address:
+     *   1. `opts.ethRelayerContract` if provided
+     *   2. `getEthRelayer(transport.chain.id)` lookup
+     *   3. Throw EthRelayerContractNotConfiguredError
+     *
+     * Lazy-imports @shroud-fi/relayer so the agent-runtime bundle stays small
+     * for callers that never touch the gasless path.
+     *
+     * @throws EthRelayerContractNotConfiguredError if no contract is resolvable.
+     * @throws EthRelayerEndpointRequiredError if no self-host endpoint is provided.
+     */
+    async sweepEthViaRelayer(detection, destination, opts) {
+        const chainId = this.transport.chain.id;
+        const ethRelayerContract = opts.ethRelayerContract ?? (0, transport_1.getEthRelayer)(chainId);
+        if (ethRelayerContract === undefined) {
+            throw new errors_js_1.EthRelayerContractNotConfiguredError();
+        }
+        const endpoint = opts.relayerOptions.selfHostEndpoint;
+        if (typeof endpoint !== 'string' || endpoint.length === 0) {
+            throw new errors_js_1.EthRelayerEndpointRequiredError();
+        }
+        // Lazy dynamic import keeps the agent-runtime ESM bundle small.
+        const relayerMod = await Promise.resolve().then(() => __importStar(require('@shroud-fi/relayer')));
+        const passOptions = {};
+        if (opts.relayerOptions.deadlineSecs !== undefined) {
+            passOptions.deadlineSecs = opts.relayerOptions.deadlineSecs;
+        }
+        if (opts.relayerOptions.pollTimeoutMs !== undefined) {
+            passOptions.pollTimeoutMs = opts.relayerOptions.pollTimeoutMs;
+        }
+        if (opts.relayerOptions.signal !== undefined) {
+            passOptions.signal = opts.relayerOptions.signal;
+        }
+        const swept = await relayerMod.relayedSweepETH(this.transport, detection.stealthPrivateKey, destination, ethRelayerContract, endpoint, passOptions);
+        return { swept, detection };
+    }
+}
+exports.ShroudAgent = ShroudAgent;
+// Minimal balanceOf ABI for the self-host pre-flight balance read.
+const BALANCE_OF_ABI = [
+    {
+        type: 'function',
+        name: 'balanceOf',
+        stateMutability: 'view',
+        inputs: [{ name: 'account', type: 'address' }],
+        outputs: [{ name: '', type: 'uint256' }],
+    },
+];
+/**
+ * ERC-6538 scheme identifier for secp256k1 stealth addresses with view-tag
+ * filtering (per EIP-5564). Kept as a `bigint` because the registry signature
+ * is `uint256 schemeId`. Mirrors `SCHEME_ID` in @shroud-fi/payments.
+ */
+const REGISTRY_SCHEME_ID = 1n;
+//# sourceMappingURL=agent.js.map

package/dist/cjs/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/agent.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGH,+BAA+C;AAC/C,0CAGyB;AAKzB,kDAO6B;AAM7B,kDAAoD;AAQpD,oDAK8B;AAC9B,2CAQqB;AAiCrB;;;GAGG;AACH,MAAM,gBAAgB,GACpB,4CAA4C,CAAC;AAE/C;;;;;;;GAOG;AACH,MAAa,WAAW;IACb,QAAQ,CAAgB;IACxB,WAAW,CAAqB;IAChC,kBAAkB,CAAS;IAC3B,SAAS,CAAoB;IAC7B,eAAe,CAAU;IAEjB,QAAQ,CAAgB;IACxB,UAAU,CAAS;IACnB,SAAS,CAAsB;IAC/B,eAAe,CAA6B;IAC5C,YAAY,CAAU;IAC/B,OAAO,CAAsB;IAC7B,SAAS,GAAG,KAAK,CAAC;IAClB,UAAU,CAA8B;IAEhD,YAAY,IAAgC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7C,IAAI,CAAC,kBAAkB,GAAG,IAAA,wBAAiB,EAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC;QAC/C,+EAA+E;QAC/E,6EAA6E;QAC7E,8DAA8D;IAChE,CAAC;IAED;;;;OAIG;IACK,YAAY;QAClB,OAAO,IAAA,wBAAa,EAAC;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW;YAC3C,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW;YAC3C,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,IAA8B;QAClC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,oCAAwB,EAAE,CAAC;QACvC,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,kDAAkD;QAClD,MAAM,cAAc,GAAG,IAAI,EAAE,MAAM,CAAC;QACpC,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,cAAc,CAAC,OAAO,EAAE,CAAC;gBAC3B,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,gBAAgB,CAC7B,OAAO,EACP,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YACJ,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,6EAA6E;QAC7E,6DAA6D;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,MAAM,YAAY,GAAG,IAAI,EAAE,YAAY,CAAC;QACxC,MAAM,YAAY,GAAG,GAAS,EAAE;YAC9B,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACzB,CAAC,CAAC;QAEF,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,uEAAuE;QACvE,gBAAgB;QAChB,gCAAgC;QAChC,oEAAoE;QACpE,4DAA4D;QAC5D,yEAAyE;QACzE,MAAM,aAAa,GACjB,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAE3D,OAAO;YACL,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,SAAS,CAAC;gBACrC,IAAI,CAAC;oBACH,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;wBAC/B,iEAAiE;wBACjE,gEAAgE;wBAChE,iEAAiE;wBACjE,iEAAiE;wBACjE,2CAA2C;wBAC3C,MAAM,GAAG,GACP,QAAQ,KAAK,WAAW;4BACtB,CAAC,CAAC,WAAW;4BACb,CAAC,CAAC,QAAQ,KAAK,MAAM;gCACnB,CAAC,CAAC,MAAM;gCACR,CAAC,CAAC,QAAQ,CAAC;wBACjB,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC;4BACxD,QAAQ,EAAE,GAAG;yBACd,CAAC,CAAC;wBACH,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,IAAI,YAAY,CAAC;wBAEtD,IAAI,UAAU,IAAI,YAAY,EAAE,CAAC;4BAC/B,IAAI,KAAK,EAAE,MAAM,SAAS,IAAI,OAAO,CAAC,SAAS,CAC7C,YAAY,EACZ,UAAU,EACV,UAAU,CAAC,MAAM,CAClB,EAAE,CAAC;gCACF,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;oCAAE,OAAO;gCACtC,MAAM,SAAS,CAAC;4BAClB,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,yDAAyD;oBACzD,OAAO,IAAI,EAAE,CAAC;wBACZ,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;4BAAE,OAAO;wBACtC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;wBACrC,IAAI,CAAC,CAAC,IAAI;4BAAE,OAAO;wBACnB,MAAM,CAAC,CAAC,KAAK,CAAC;oBAChB,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,qEAAqE;oBACrE,kDAAkD;oBAClD,IAAI,CAAC;wBACH,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC;4BAC3B,KAAK,EAAE,SAAS;4BAChB,IAAI,EAAE,IAAI;yBACwB,CAAC,CAAC;oBACxC,CAAC;oBAAC,MAAM,CAAC;wBACP,8CAA8C;oBAChD,CAAC;oBACD,YAAY,EAAE,CAAC;gBACjB,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;YACD,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CACR,EAA+B,EAC/B,QAAgB;QAEhB,MAAM,IAAI,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,wBAAiB,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,IAAA,yBAAc,EAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CACb,EAA+B,EAC/B,KAAc,EACd,MAAc;QAEd,MAAM,IAAI,GAAG,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,wBAAiB,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,OAAO,IAAA,2BAAgB,EACrB,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,eAAe,EACpB,IAAI,EACJ,KAAK,EACL,MAAM,CACP,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;QACjD,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;QACrC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;QAEnC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC;YAC1D,OAAO,EAAE,4BAAgB;YACzB,GAAG,EAAE,8BAAkB;YACvB,YAAY,EAAE,sBAAsB;YACpC,IAAI,EAAE,CAAC,UAAU,EAAE,kBAAkB,CAAC;SACvC,CAAC,CAAQ,CAAC;QAEX,wEAAwE;QACxE,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,QAAQ;QACZ,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;QACjD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,2CAA+B,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;QACrC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,2CAA+B,EAAE,CAAC;QAC9C,CAAC;QAED,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,uCAAuC;QACvC,IAAI,MAAM,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,kCAAsB,EAAE,CAAC;QACrC,CAAC;QAED,sEAAsE;QACtE,gDAAgD;QAChD,mEAAmE;QACnE,mDAAmD;QACnD,MAAM,OAAO,GAAG,IAAA,kBAAW,EAAC;YAC1B,IAAI,CAAC,WAAW,CAAC,cAAc;YAC/B,IAAI,CAAC,WAAW,CAAC,aAAa;SAC/B,CAAC,CAAC;QACH,MAAM,kBAAkB,GAAG,IAAA,iBAAU,EAAC,OAAO,CAAC,CAAC;QAE/C,MAAM,SAAS,GAA4B;YACzC,OAAO,EAAE,4BAAgB;YACzB,GAAG,EAAE,8BAAkB;YACvB,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;YAC9C,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;SAC5B,CAAC;QAEF,mEAAmE;QACnE,+DAA+D;QAC/D,MAAM,MAAM,GAAG,CAAC,MACd,YAAY,CAAC,aACd,CAAC,SAAS,CAAC,CAAS,CAAC;QAEtB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB;QAIpB,IAAI,MAAM,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YAC9B,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,YAAY,CAChB,eAAwB,EACxB,KAAwB,EACxB,MAAc,EACd,OAAqB;QAErB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAChC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iEAAiE;gBACjE,oEAAoE;gBACpE,oEAAoE;gBACpE,MAAM,IAAI,uCAA2B,CAAC,GAAG,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,OAAO,IAAA,uBAAY,EAAC,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/E,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,KAAK,CACT,SAA0B,EAC1B,WAAoB,EACpB,IAOC;QAID,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,CAAC;QAC1B,MAAM,KAAK,GACT,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,gBAAgB;YAC1B,KAAK,CAAC,WAAW,EAAE,KAAK,uBAAY,CAAC,WAAW,EAAE,CAAC;QAErD,IAAI,IAAI,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,EAAE,CAAC;gBACV,IAAI,IAAI,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;oBACzC,MAAM,IAAI,2CAA+B,EAAE,CAAC;gBAC9C,CAAC;gBACD,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,WAAW,EAAE;oBACrD,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,SAAS;wBACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE;wBACjD,CAAC,CAAC,EAAE,CAAC;oBACP,cAAc,EAAE,IAAI,CAAC,iBAAiB;iBACvC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,EAAE;gBAClD,KAAK;gBACL,GAAG,CAAC,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,MAAM,IAAA,mBAAQ,EAC1B,IAAI,CAAC,SAAS,EACd,SAAS,CAAC,iBAAiB,EAC3B,WAAW,CACZ,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAA,qBAAU,EAC5B,IAAI,CAAC,SAAS,EACd,SAAS,CAAC,iBAAiB,EAC3B,KAAK,EACL,WAAW,CACZ,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,eAAe,CACnB,SAA0B,EAC1B,WAAoB,EACpB,IAIC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,MAAM,KAAK,GACT,KAAK,KAAK,gBAAgB;YAC1B,KAAK,CAAC,WAAW,EAAE,KAAK,uBAAY,CAAC,WAAW,EAAE,CAAC;QACrD,IAAI,KAAK,EAAE,CAAC;YACV,sEAAsE;YACtE,qCAAqC;YACrC,MAAM,IAAI,2CAA+B,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,eAAe,GACnB,IAAI,CAAC,eAAe,IAAI,IAAA,sBAAU,EAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,6CAAiC,EAAE,CAAC;QAChD,CAAC;QAED,qEAAqE;QACrE,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,UAAU,GAAG,wDAAa,oBAAoB,GAAC,CAAC;QAEtD,yEAAyE;QACzE,sEAAsE;QACtE,uBAAuB;QACvB,MAAM,gBAAgB,GAAG,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAC/D,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CACvC,UAAU,CAAC,iBAAiB,EAC5B,SAAS,EACT,WAAW,EACX,KAAK,EACL,eAAe,EACf,gBAAgB,EAChB,IAAI,CAAC,cAAc,CACpB,CAAC;YACF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAC9C,IAAI,CAAC,SAAS,EACd,SAAS,CAAC,iBAAiB,EAC3B,KAAK,EACL,WAAW,EACX,eAAe,EACf,IAAI,CAAC,cAAc,CACpB,CAAC;QAEF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,gBAAgB,CAC5B,iBAAwE,EACxE,SAA0B,EAC1B,WAAoB,EACpB,KAAc,EACd,eAAwB,EACxB,QAAgB,EAChB,OAA6C;QAE7C,+BAA+B;QAC/B,MAAM,cAAc,GAAG,SAAS,CAAC,cAAc,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,CAAC;YAC9D,OAAO,EAAE,KAAK;YACd,GAAG,EAAE,cAAc;YACnB,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE,CAAC,cAAc,CAAC;SACvB,CAAC,CAAW,CAAC;QAEd,kCAAkC;QAClC,MAAM,QAAQ,GAAG,OAAO,EAAE,YAAY,IAAI,KAAK,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,WAAW,CAAC,SAAS,GAAG,QAAQ,CAAC;QAElD,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,IAAI,CAAC,SAAS,EACd,SAAS,CAAC,iBAAiB,EAC3B,KAAK,EACL,eAAe,EACf,OAAO,EACP,QAAQ,CACT,CAAC;QAEF,oCAAoC;QACpC,MAAM,IAAI,GAAG;YACX,KAAK;YACL,WAAW;YACX,cAAc;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE;YACpC,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,CAAC,EAAE,MAAM,CAAC,CAAC;SACZ,CAAC;QAEF,MAAM,SAAS,GAAgB;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC;QACF,IAAI,OAAO,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,EACtC,SAAS,CACV,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAEH,CAAC;QAEjC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC;QAED,OAAO;YACL,MAAM,EAAE,aAAa,IAAI,CAAC,MAAM,EAAE;YAClC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,SAAkB;YAC1B,eAAe;YACf,KAAK;YACL,WAAW;YACX,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;SACtC,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,kBAAkB,CACtB,SAA0B,EAC1B,WAAoB,EACpB,IAGC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,kBAAkB,GACtB,IAAI,CAAC,kBAAkB,IAAI,IAAA,yBAAa,EAAC,OAAO,CAAC,CAAC;QACpD,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,gDAAoC,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,gBAAgB,CAAC;QACtD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,2CAA+B,EAAE,CAAC;QAC9C,CAAC;QAED,gEAAgE;QAChE,MAAM,UAAU,GAAG,wDAAa,oBAAoB,GAAC,CAAC;QAEtD,MAAM,WAAW,GAIb,EAAE,CAAC;QACP,IAAI,IAAI,CAAC,cAAc,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACnD,WAAW,CAAC,YAAY,GAAG,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC;QAC9D,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACpD,WAAW,CAAC,aAAa,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7C,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;QAClD,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,eAAe,CAC5C,IAAI,CAAC,SAAS,EACd,SAAS,CAAC,iBAAiB,EAC3B,WAAW,EACX,kBAAkB,EAClB,QAAQ,EACR,WAAW,CACZ,CAAC;QAEF,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;CACF;AA1pBD,kCA0pBC;AAED,mEAAmE;AACnE,MAAM,cAAc,GAAG;IACrB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,WAAW;QACjB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;KACzC;CACO,CAAC;AAEX;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,EAAE,CAAC"}

package/dist/cjs/browser.d.ts

@@ -0,0 +1,38 @@
+/**
+ * createShroudAgentFromBrowserWallet — browser / EIP-1193 wallet entry point.
+ *
+ * Flow:
+ *   1. Ask the wallet to sign BROWSER_KEY_MESSAGE via personal_sign.
+ *   2. HKDF the signature bytes to a deterministic 32-byte master seed.
+ *   3. Delegate to createShroudAgent.
+ *
+ * The same wallet always produces the same agent identity — no localStorage,
+ * no persistence. Bumping BROWSER_KEY_MESSAGE forks the identity space.
+ *
+ * Privacy invariants:
+ *   - No console.* anywhere.
+ *   - The signature bytes never appear in error messages or stack frames.
+ *   - The derived master seed is passed to createShroudAgent and immediately
+ *     consumed by createAgentIdentity; no caller-visible reference is retained.
+ */
+import type { Address } from 'viem';
+import type { FinalityLevel } from '@shroud-fi/scanning';
+import type { ShroudFiTransport } from '@shroud-fi/transport';
+import type { ShroudAgent } from './agent.js';
+import type { BrowserWalletAdapter } from './types.js';
+export { BROWSER_KEY_MESSAGE, HKDF_BROWSER_SALT, HKDF_BROWSER_INFO, } from './constants.js';
+export interface CreateShroudAgentFromBrowserWalletArgs {
+    readonly wallet: BrowserWalletAdapter;
+    readonly transport: ShroudFiTransport;
+    readonly stealthContract?: Address;
+    readonly startBlock: bigint;
+    readonly finality?: FinalityLevel;
+}
+/**
+ * Build a ShroudAgent from a browser wallet adapter (e.g. MetaMask).
+ *
+ * @throws MissingBrowserWalletError if the adapter is missing required fields.
+ * @throws BrowserWalletSignatureRejectedError if the signature request is rejected.
+ */
+export declare function createShroudAgentFromBrowserWallet(args: CreateShroudAgentFromBrowserWalletArgs): Promise<ShroudAgent>;
+//# sourceMappingURL=browser.d.ts.map

package/dist/cjs/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAGpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAW9C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEvD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC;CACnC;AAoBD;;;;;GAKG;AACH,wBAAsB,kCAAkC,CACtD,IAAI,EAAE,sCAAsC,GAC3C,OAAO,CAAC,WAAW,CAAC,CAgDtB"}