@shroud-fi/core 0.1.0

package/dist/cjs/meta-address.js

@@ -0,0 +1,86 @@
+"use strict";
+/**
+ * ERC-6538 Stealth Meta-Address Encode/Decode
+ *
+ * Format: st:base:0x<spendingPubKey 33 bytes hex><viewingPubKey 33 bytes hex>
+ *
+ * Both keys are SEC1 compressed secp256k1 public keys (prefix 0x02 or 0x03).
+ * Total raw payload: 66 bytes = 132 hex characters.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeMetaAddress = encodeMetaAddress;
+exports.decodeMetaAddress = decodeMetaAddress;
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const utils_1 = require("@noble/hashes/utils");
+const errors_js_1 = require("./errors.js");
+const constants_js_1 = require("./constants.js");
+const META_ADDRESS_PREFIX = 'st:base:0x';
+const COMPRESSED_KEY_LENGTH = 33; // bytes
+const TOTAL_PAYLOAD_LENGTH = COMPRESSED_KEY_LENGTH * 2; // 66 bytes
+/**
+ * Validate that a byte array is a valid compressed secp256k1 public key.
+ * Must be 33 bytes with 0x02 or 0x03 prefix.
+ */
+function assertValidCompressedKey(key, label) {
+    if (key.length !== COMPRESSED_KEY_LENGTH) {
+        throw new errors_js_1.InvalidMetaAddressError(`${label} must be ${COMPRESSED_KEY_LENGTH} bytes, got ${key.length}`);
+    }
+    const prefix = key[0];
+    if (prefix !== 0x02 && prefix !== 0x03) {
+        throw new errors_js_1.InvalidMetaAddressError(`${label} must have 0x02 or 0x03 prefix`);
+    }
+    // Validate it's actually on the curve
+    try {
+        secp256k1_1.secp256k1.ProjectivePoint.fromHex(key);
+    }
+    catch {
+        throw new errors_js_1.InvalidMetaAddressError(`${label} is not a valid secp256k1 point`);
+    }
+}
+/**
+ * Encode a StealthMetaAddress into the ERC-6538 URI format.
+ *
+ * @param meta - Stealth meta-address containing spending and viewing public keys
+ * @returns Encoded string: "st:base:0x<spendHex><viewHex>"
+ * @throws InvalidMetaAddressError if keys are invalid
+ */
+function encodeMetaAddress(meta) {
+    assertValidCompressedKey(meta.spendingPubKey, 'Spending public key');
+    assertValidCompressedKey(meta.viewingPubKey, 'Viewing public key');
+    const spendHex = (0, utils_1.bytesToHex)(meta.spendingPubKey);
+    const viewHex = (0, utils_1.bytesToHex)(meta.viewingPubKey);
+    return `${META_ADDRESS_PREFIX}${spendHex}${viewHex}`;
+}
+/**
+ * Decode an ERC-6538 URI string into a StealthMetaAddress.
+ *
+ * @param encoded - String in format "st:base:0x<66 bytes hex>"
+ * @returns Parsed StealthMetaAddress
+ * @throws InvalidMetaAddressError if format is invalid
+ */
+function decodeMetaAddress(encoded) {
+    if (!encoded.startsWith(META_ADDRESS_PREFIX)) {
+        throw new errors_js_1.InvalidMetaAddressError(`Meta-address must start with "${META_ADDRESS_PREFIX}"`);
+    }
+    const hexPayload = encoded.slice(META_ADDRESS_PREFIX.length);
+    if (hexPayload.length !== TOTAL_PAYLOAD_LENGTH * 2) {
+        throw new errors_js_1.InvalidMetaAddressError(`Meta-address hex payload must be ${TOTAL_PAYLOAD_LENGTH * 2} characters, got ${hexPayload.length}`);
+    }
+    let payloadBytes;
+    try {
+        payloadBytes = (0, utils_1.hexToBytes)(hexPayload);
+    }
+    catch {
+        throw new errors_js_1.InvalidMetaAddressError('Meta-address contains invalid hex characters');
+    }
+    const spendingPubKey = payloadBytes.slice(0, COMPRESSED_KEY_LENGTH);
+    const viewingPubKey = payloadBytes.slice(COMPRESSED_KEY_LENGTH);
+    assertValidCompressedKey(spendingPubKey, 'Spending public key');
+    assertValidCompressedKey(viewingPubKey, 'Viewing public key');
+    return {
+        spendingPubKey,
+        viewingPubKey,
+        schemeId: constants_js_1.SCHEME_ID,
+    };
+}
+//# sourceMappingURL=meta-address.js.map

package/dist/cjs/meta-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"meta-address.js","sourceRoot":"","sources":["../../src/meta-address.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AA2CH,8CAQC;AASD,8CAiCC;AA3FD,uDAAoD;AACpD,+CAA6D;AAE7D,2CAAsD;AACtD,iDAA2C;AAE3C,MAAM,mBAAmB,GAAG,YAAY,CAAC;AACzC,MAAM,qBAAqB,GAAG,EAAE,CAAC,CAAC,QAAQ;AAC1C,MAAM,oBAAoB,GAAG,qBAAqB,GAAG,CAAC,CAAC,CAAC,WAAW;AAEnE;;;GAGG;AACH,SAAS,wBAAwB,CAAC,GAAe,EAAE,KAAa;IAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACzC,MAAM,IAAI,mCAAuB,CAC/B,GAAG,KAAK,YAAY,qBAAqB,eAAe,GAAG,CAAC,MAAM,EAAE,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,mCAAuB,CAC/B,GAAG,KAAK,gCAAgC,CACzC,CAAC;IACJ,CAAC;IACD,sCAAsC;IACtC,IAAI,CAAC;QACH,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mCAAuB,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,IAAwB;IACxD,wBAAwB,CAAC,IAAI,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;IACrE,wBAAwB,CAAC,IAAI,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,IAAA,kBAAU,EAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAA,kBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAE/C,OAAO,GAAG,mBAAmB,GAAG,QAAQ,GAAG,OAAO,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,mCAAuB,CAC/B,iCAAiC,mBAAmB,GAAG,CACxD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAE7D,IAAI,UAAU,CAAC,MAAM,KAAK,oBAAoB,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,mCAAuB,CAC/B,oCAAoC,oBAAoB,GAAG,CAAC,oBAAoB,UAAU,CAAC,MAAM,EAAE,CACpG,CAAC;IACJ,CAAC;IAED,IAAI,YAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,YAAY,GAAG,IAAA,kBAAU,EAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mCAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,YAAY,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAEhE,wBAAwB,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;IAChE,wBAAwB,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAE9D,OAAO;QACL,cAAc;QACd,aAAa;QACb,QAAQ,EAAE,wBAAS;KACpB,CAAC;AACJ,CAAC"}

package/dist/cjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/dist/cjs/stealth.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Stealth Address Generation (Sender Side)
+ *
+ * Implements EIP-5564 scheme 1 (secp256k1):
+ *   1. Generate random ephemeral key r, compute R = r*G
+ *   2. ECDH: sharedSecret = r * viewingPubKey
+ *   3. Hash: hashedSecret = keccak256(compress(sharedSecret))
+ *   4. View tag: viewTag = hashedSecret[0]
+ *   5. Stealth pubkey: P_stealth = spendingPubKey + hashedSecret * G
+ *   6. Stealth address: keccak256(uncompressed64(P_stealth))[12:] -> 20-byte address
+ */
+import type { StealthMetaAddress, StealthAddressResult } from './types.js';
+/**
+ * Generate a one-time stealth address for a recipient.
+ *
+ * @param meta - Recipient's stealth meta-address (two compressed public keys)
+ * @returns StealthAddressResult with stealth address, ephemeral pubkey, and view tag
+ * @throws InvalidKeyError if meta-address public keys are invalid
+ * @throws StealthAddressError if the derived stealth point is at infinity
+ */
+export declare function generateStealthAddress(meta: StealthMetaAddress): StealthAddressResult;
+//# sourceMappingURL=stealth.d.ts.map

package/dist/cjs/stealth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stealth.d.ts","sourceRoot":"","sources":["../../src/stealth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAa3E;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,kBAAkB,GACvB,oBAAoB,CA2DtB"}

package/dist/cjs/stealth.js

@@ -0,0 +1,100 @@
+"use strict";
+/**
+ * Stealth Address Generation (Sender Side)
+ *
+ * Implements EIP-5564 scheme 1 (secp256k1):
+ *   1. Generate random ephemeral key r, compute R = r*G
+ *   2. ECDH: sharedSecret = r * viewingPubKey
+ *   3. Hash: hashedSecret = keccak256(compress(sharedSecret))
+ *   4. View tag: viewTag = hashedSecret[0]
+ *   5. Stealth pubkey: P_stealth = spendingPubKey + hashedSecret * G
+ *   6. Stealth address: keccak256(uncompressed64(P_stealth))[12:] -> 20-byte address
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateStealthAddress = generateStealthAddress;
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const sha3_1 = require("@noble/hashes/sha3");
+const utils_1 = require("@noble/hashes/utils");
+const errors_js_1 = require("./errors.js");
+/**
+ * Convert a 64-byte uncompressed public key (no 0x04 prefix) to an EVM address.
+ * address = last 20 bytes of keccak256(pubkey64)
+ */
+function pubKeyToAddress(uncompressed64) {
+    const hash = (0, sha3_1.keccak_256)(uncompressed64);
+    const addrBytes = hash.slice(12);
+    return `0x${(0, utils_1.bytesToHex)(addrBytes)}`;
+}
+/**
+ * Generate a one-time stealth address for a recipient.
+ *
+ * @param meta - Recipient's stealth meta-address (two compressed public keys)
+ * @returns StealthAddressResult with stealth address, ephemeral pubkey, and view tag
+ * @throws InvalidKeyError if meta-address public keys are invalid
+ * @throws StealthAddressError if the derived stealth point is at infinity
+ */
+function generateStealthAddress(meta) {
+    // Validate input public keys by parsing them (fromHex validates on-curve)
+    let viewingPoint;
+    let spendingPoint;
+    try {
+        viewingPoint = secp256k1_1.secp256k1.ProjectivePoint.fromHex(meta.viewingPubKey);
+    }
+    catch {
+        throw new errors_js_1.InvalidKeyError('Invalid viewing public key in meta-address');
+    }
+    try {
+        spendingPoint = secp256k1_1.secp256k1.ProjectivePoint.fromHex(meta.spendingPubKey);
+    }
+    catch {
+        throw new errors_js_1.InvalidKeyError('Invalid spending public key in meta-address');
+    }
+    // Step 1: Generate ephemeral keypair
+    const ephemeralPriv = secp256k1_1.secp256k1.utils.randomPrivateKey();
+    const ephemeralPub = secp256k1_1.secp256k1.getPublicKey(ephemeralPriv, true); // compressed
+    try {
+        // Step 2: ECDH shared secret  S = r * P_view
+        const ephemeralScalar = bytesToBigInt(ephemeralPriv);
+        const sharedSecretPoint = viewingPoint.multiply(ephemeralScalar);
+        // Step 3: Hash the compressed shared secret
+        const sharedSecretCompressed = sharedSecretPoint.toRawBytes(true); // 33 bytes
+        const hashedSecret = (0, sha3_1.keccak_256)(sharedSecretCompressed); // 32 bytes
+        // Step 4: View tag = first byte
+        const viewTag = hashedSecret[0];
+        // Step 5: Stealth public key = P_spend + hashedSecret * G
+        const hashedScalar = bytesToBigInt(hashedSecret) % secp256k1_1.secp256k1.CURVE.n;
+        if (hashedScalar === 0n) {
+            throw new errors_js_1.StealthAddressError('Hashed secret reduced to zero');
+        }
+        const hashedPoint = secp256k1_1.secp256k1.ProjectivePoint.BASE.multiply(hashedScalar);
+        const stealthPubPoint = spendingPoint.add(hashedPoint);
+        // Verify not point at infinity
+        try {
+            stealthPubPoint.assertValidity();
+        }
+        catch {
+            throw new errors_js_1.StealthAddressError('Stealth public key is the point at infinity');
+        }
+        // Step 6: Derive EVM address from uncompressed stealth public key
+        const stealthPubUncompressed = stealthPubPoint.toRawBytes(false); // 65 bytes (04 || x || y)
+        const stealthAddress = pubKeyToAddress(stealthPubUncompressed.slice(1)); // strip 0x04 prefix
+        return {
+            stealthAddress,
+            ephemeralPubKey: ephemeralPub,
+            viewTag,
+        };
+    }
+    finally {
+        // Zero ephemeral private key
+        ephemeralPriv.fill(0);
+    }
+}
+/** Convert a Uint8Array to a BigInt (big-endian). */
+function bytesToBigInt(bytes) {
+    let result = 0n;
+    for (const byte of bytes) {
+        result = (result << 8n) | BigInt(byte);
+    }
+    return result;
+}
+//# sourceMappingURL=stealth.js.map

package/dist/cjs/stealth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stealth.js","sourceRoot":"","sources":["../../src/stealth.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AA0BH,wDA6DC;AArFD,uDAAoD;AACpD,6CAAgD;AAChD,+CAAiD;AAEjD,2CAAmE;AAEnE;;;GAGG;AACH,SAAS,eAAe,CAAC,cAA0B;IACjD,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,cAAc,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjC,OAAO,KAAK,IAAA,kBAAU,EAAC,SAAS,CAAC,EAAmB,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CACpC,IAAwB;IAExB,0EAA0E;IAC1E,IAAI,YAA4D,CAAC;IACjE,IAAI,aAA6D,CAAC;IAClE,IAAI,CAAC;QACH,YAAY,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAAe,CAAC,4CAA4C,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC;QACH,aAAa,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAAe,CAAC,6CAA6C,CAAC,CAAC;IAC3E,CAAC;IAED,qCAAqC;IACrC,MAAM,aAAa,GAAG,qBAAS,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACzD,MAAM,YAAY,GAAG,qBAAS,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa;IAE/E,IAAI,CAAC;QACH,6CAA6C;QAC7C,MAAM,eAAe,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAEjE,4CAA4C;QAC5C,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW;QAC9E,MAAM,YAAY,GAAG,IAAA,iBAAU,EAAC,sBAAsB,CAAC,CAAC,CAAC,WAAW;QAEpE,gCAAgC;QAChC,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;QAEjC,0DAA0D;QAC1D,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC,GAAG,qBAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,IAAI,YAAY,KAAK,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,+BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,WAAW,GAAG,qBAAS,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC1E,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAEvD,+BAA+B;QAC/B,IAAI,CAAC;YACH,eAAe,CAAC,cAAc,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,+BAAmB,CAAC,6CAA6C,CAAC,CAAC;QAC/E,CAAC;QAED,kEAAkE;QAClE,MAAM,sBAAsB,GAAG,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,0BAA0B;QAC5F,MAAM,cAAc,GAAG,eAAe,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB;QAE7F,OAAO;YACL,cAAc;YACd,eAAe,EAAE,YAAY;YAC7B,OAAO;SACR,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,6BAA6B;QAC7B,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,qDAAqD;AACrD,SAAS,aAAa,CAAC,KAAiB;IACtC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cjs/types.d.ts

@@ -0,0 +1,46 @@
+/**
+ * ShroudFi Core Types
+ *
+ * Branded key types for compile-time safety -- prevents accidentally
+ * passing a scanning key where a spending key is expected.
+ */
+/** secp256k1 spending private key (32 bytes). Controls funds. */
+export type SpendingKey = {
+    readonly __brand: 'SpendingKey';
+    readonly bytes: Uint8Array;
+};
+/** secp256k1 scanning private key (32 bytes). Detects incoming payments. */
+export type ScanningKey = {
+    readonly __brand: 'ScanningKey';
+    readonly bytes: Uint8Array;
+};
+/** secp256k1 viewing key (32 bytes). Enables selective disclosure. */
+export type ViewingKey = {
+    readonly __brand: 'ViewingKey';
+    readonly bytes: Uint8Array;
+};
+/**
+ * ERC-6538 stealth meta-address: two compressed secp256k1 public keys.
+ * Shareable -- contains NO private material.
+ */
+export interface StealthMetaAddress {
+    readonly spendingPubKey: Uint8Array;
+    readonly viewingPubKey: Uint8Array;
+    readonly schemeId: number;
+}
+/** Result of generating a one-time stealth address for a recipient. */
+export interface StealthAddressResult {
+    /** The derived stealth EVM address. */
+    readonly stealthAddress: `0x${string}`;
+    /** Compressed ephemeral public key (33 bytes) -- must be announced. */
+    readonly ephemeralPubKey: Uint8Array;
+    /** View tag (0-255) -- first byte of hashed shared secret. */
+    readonly viewTag: number;
+}
+/** Full key hierarchy derived from a master seed. */
+export interface KeyHierarchy {
+    readonly spendingKey: SpendingKey;
+    readonly scanningKey: ScanningKey;
+    readonly viewingKey: ViewingKey;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/cjs/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,iEAAiE;AACjE,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF,sEAAsE;AACtE,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,uEAAuE;AACvE,MAAM,WAAW,oBAAoB;IACnC,uCAAuC;IACvC,QAAQ,CAAC,cAAc,EAAE,KAAK,MAAM,EAAE,CAAC;IACvC,uEAAuE;IACvE,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC"}

package/dist/cjs/types.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * ShroudFi Core Types
+ *
+ * Branded key types for compile-time safety -- prevents accidentally
+ * passing a scanning key where a spending key is expected.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/cjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/cjs/view-tag.d.ts

@@ -0,0 +1,29 @@
+/**
+ * View Tag Utilities
+ *
+ * View tags enable fast filtering of stealth address announcements.
+ * The view tag is the first byte of keccak256(compress(ECDH_shared_secret)).
+ * This filters ~99.6% of non-matching announcements with a single byte check.
+ */
+import type { ScanningKey } from './types.js';
+/**
+ * Extract the view tag from a compressed shared secret point.
+ * The view tag is byte 0 of keccak256(compressedPoint).
+ *
+ * @param sharedSecretCompressed - 33-byte compressed secp256k1 point
+ * @returns View tag value (0-255)
+ */
+export declare function extractViewTag(sharedSecretCompressed: Uint8Array): number;
+/**
+ * Check whether a view tag matches for a given scanning key and ephemeral public key.
+ *
+ * Performs the ECDH step and view tag extraction, then compares against
+ * the expected tag. This is the fast-path filter for scanning.
+ *
+ * @param scanningKey - Recipient's scanning private key
+ * @param ephemeralPubKey - Ephemeral public key from the announcement (33 bytes)
+ * @param expectedTag - The view tag from the announcement metadata
+ * @returns true if the view tag matches (candidate for full verification)
+ */
+export declare function checkViewTag(scanningKey: ScanningKey, ephemeralPubKey: Uint8Array, expectedTag: number): boolean;
+//# sourceMappingURL=view-tag.d.ts.map

package/dist/cjs/view-tag.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-tag.d.ts","sourceRoot":"","sources":["../../src/view-tag.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,sBAAsB,EAAE,UAAU,GAAG,MAAM,CAGzE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,UAAU,EAC3B,WAAW,EAAE,MAAM,GAClB,OAAO,CAkBT"}

package/dist/cjs/view-tag.js

@@ -0,0 +1,62 @@
+"use strict";
+/**
+ * View Tag Utilities
+ *
+ * View tags enable fast filtering of stealth address announcements.
+ * The view tag is the first byte of keccak256(compress(ECDH_shared_secret)).
+ * This filters ~99.6% of non-matching announcements with a single byte check.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractViewTag = extractViewTag;
+exports.checkViewTag = checkViewTag;
+const secp256k1_1 = require("@noble/curves/secp256k1");
+const sha3_1 = require("@noble/hashes/sha3");
+const errors_js_1 = require("./errors.js");
+/**
+ * Extract the view tag from a compressed shared secret point.
+ * The view tag is byte 0 of keccak256(compressedPoint).
+ *
+ * @param sharedSecretCompressed - 33-byte compressed secp256k1 point
+ * @returns View tag value (0-255)
+ */
+function extractViewTag(sharedSecretCompressed) {
+    const hash = (0, sha3_1.keccak_256)(sharedSecretCompressed);
+    return hash[0];
+}
+/**
+ * Check whether a view tag matches for a given scanning key and ephemeral public key.
+ *
+ * Performs the ECDH step and view tag extraction, then compares against
+ * the expected tag. This is the fast-path filter for scanning.
+ *
+ * @param scanningKey - Recipient's scanning private key
+ * @param ephemeralPubKey - Ephemeral public key from the announcement (33 bytes)
+ * @param expectedTag - The view tag from the announcement metadata
+ * @returns true if the view tag matches (candidate for full verification)
+ */
+function checkViewTag(scanningKey, ephemeralPubKey, expectedTag) {
+    // Validate ephemeral public key
+    let ephemeralPoint;
+    try {
+        ephemeralPoint = secp256k1_1.secp256k1.ProjectivePoint.fromHex(ephemeralPubKey);
+    }
+    catch {
+        throw new errors_js_1.InvalidKeyError('Invalid ephemeral public key');
+    }
+    // ECDH: sharedSecret = scanningPriv * P_ephemeral
+    const scanScalar = bytesToBigInt(scanningKey.bytes);
+    const sharedSecretPoint = ephemeralPoint.multiply(scanScalar);
+    // Hash compressed shared secret and extract view tag
+    const sharedSecretCompressed = sharedSecretPoint.toRawBytes(true);
+    const tag = extractViewTag(sharedSecretCompressed);
+    return tag === expectedTag;
+}
+/** Convert a Uint8Array to a BigInt (big-endian). */
+function bytesToBigInt(bytes) {
+    let result = 0n;
+    for (const byte of bytes) {
+        result = (result << 8n) | BigInt(byte);
+    }
+    return result;
+}
+//# sourceMappingURL=view-tag.js.map

package/dist/cjs/view-tag.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"view-tag.js","sourceRoot":"","sources":["../../src/view-tag.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAcH,wCAGC;AAaD,oCAsBC;AAlDD,uDAAoD;AACpD,6CAAgD;AAEhD,2CAA8C;AAE9C;;;;;;GAMG;AACH,SAAgB,cAAc,CAAC,sBAAkC;IAC/D,MAAM,IAAI,GAAG,IAAA,iBAAU,EAAC,sBAAsB,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,YAAY,CAC1B,WAAwB,EACxB,eAA2B,EAC3B,WAAmB;IAEnB,gCAAgC;IAChC,IAAI,cAA8D,CAAC;IACnE,IAAI,CAAC;QACH,cAAc,GAAG,qBAAS,CAAC,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAAe,CAAC,8BAA8B,CAAC,CAAC;IAC5D,CAAC;IAED,kDAAkD;IAClD,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAE9D,qDAAqD;IACrD,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,GAAG,GAAG,cAAc,CAAC,sBAAsB,CAAC,CAAC;IAEnD,OAAO,GAAG,KAAK,WAAW,CAAC;AAC7B,CAAC;AAED,qDAAqD;AACrD,SAAS,aAAa,CAAC,KAAiB;IACtC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/compute-key.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Stealth Key Computation (Recipient Side)
+ *
+ * Given the scanning private key, spending private key, and the
+ * ephemeral public key from an announcement, derive the stealth
+ * private key that controls the stealth address.
+ *
+ *   1. ECDH: sharedSecret = scanningPrivKey * ephemeralPubKey
+ *   2. Hash: hashedSecret = keccak256(compress(sharedSecret))
+ *   3. Stealth private key: p_stealth = (spendingPrivKey + hashedSecret) mod n
+ */
+import type { ScanningKey, SpendingKey } from './types.js';
+/**
+ * Compute the stealth private key for a detected payment.
+ *
+ * @param scanningKey - Recipient's scanning private key
+ * @param spendingKey - Recipient's spending private key
+ * @param ephemeralPubKey - Ephemeral public key from the announcement (33 bytes compressed)
+ * @returns 32-byte stealth private key
+ * @throws InvalidKeyError if ephemeral public key is invalid
+ * @throws StealthAddressError if the derived stealth key is invalid
+ */
+export declare function computeStealthKey(scanningKey: ScanningKey, spendingKey: SpendingKey, ephemeralPubKey: Uint8Array): Uint8Array;
+//# sourceMappingURL=compute-key.d.ts.map

package/dist/esm/compute-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-key.d.ts","sourceRoot":"","sources":["../../src/compute-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG3D;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,WAAW,EACxB,eAAe,EAAE,UAAU,GAC1B,UAAU,CA6BZ"}

package/dist/esm/compute-key.js

@@ -0,0 +1,69 @@
+/**
+ * Stealth Key Computation (Recipient Side)
+ *
+ * Given the scanning private key, spending private key, and the
+ * ephemeral public key from an announcement, derive the stealth
+ * private key that controls the stealth address.
+ *
+ *   1. ECDH: sharedSecret = scanningPrivKey * ephemeralPubKey
+ *   2. Hash: hashedSecret = keccak256(compress(sharedSecret))
+ *   3. Stealth private key: p_stealth = (spendingPrivKey + hashedSecret) mod n
+ */
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { keccak_256 } from '@noble/hashes/sha3';
+import { InvalidKeyError, StealthAddressError } from './errors.js';
+/**
+ * Compute the stealth private key for a detected payment.
+ *
+ * @param scanningKey - Recipient's scanning private key
+ * @param spendingKey - Recipient's spending private key
+ * @param ephemeralPubKey - Ephemeral public key from the announcement (33 bytes compressed)
+ * @returns 32-byte stealth private key
+ * @throws InvalidKeyError if ephemeral public key is invalid
+ * @throws StealthAddressError if the derived stealth key is invalid
+ */
+export function computeStealthKey(scanningKey, spendingKey, ephemeralPubKey) {
+    // Validate ephemeral public key
+    let ephemeralPoint;
+    try {
+        ephemeralPoint = secp256k1.ProjectivePoint.fromHex(ephemeralPubKey);
+    }
+    catch {
+        throw new InvalidKeyError('Invalid ephemeral public key');
+    }
+    // Step 1: ECDH shared secret  S = scanningPriv * P_ephemeral
+    const scanScalar = bytesToBigInt(scanningKey.bytes);
+    const sharedSecretPoint = ephemeralPoint.multiply(scanScalar);
+    // Step 2: Hash the compressed shared secret
+    const sharedSecretCompressed = sharedSecretPoint.toRawBytes(true); // 33 bytes
+    const hashedSecret = keccak_256(sharedSecretCompressed); // 32 bytes
+    // Step 3: Stealth private key = (spendingPriv + hashedSecret) mod n
+    const n = secp256k1.CURVE.n;
+    const spendScalar = bytesToBigInt(spendingKey.bytes);
+    const hashedScalar = bytesToBigInt(hashedSecret) % n;
+    const stealthScalar = (spendScalar + hashedScalar) % n;
+    if (stealthScalar === 0n) {
+        throw new StealthAddressError('Derived stealth key is zero');
+    }
+    // Convert BigInt back to 32-byte Uint8Array (big-endian)
+    return bigIntToBytes(stealthScalar, 32);
+}
+/** Convert a Uint8Array to a BigInt (big-endian). */
+function bytesToBigInt(bytes) {
+    let result = 0n;
+    for (const byte of bytes) {
+        result = (result << 8n) | BigInt(byte);
+    }
+    return result;
+}
+/** Convert a BigInt to a fixed-length Uint8Array (big-endian). */
+function bigIntToBytes(value, length) {
+    const result = new Uint8Array(length);
+    let remaining = value;
+    for (let i = length - 1; i >= 0; i--) {
+        result[i] = Number(remaining & 0xffn);
+        remaining >>= 8n;
+    }
+    return result;
+}
+//# sourceMappingURL=compute-key.js.map

package/dist/esm/compute-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compute-key.js","sourceRoot":"","sources":["../../src/compute-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEnE;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,WAAwB,EACxB,WAAwB,EACxB,eAA2B;IAE3B,gCAAgC;IAChC,IAAI,cAA8D,CAAC;IACnE,IAAI,CAAC;QACH,cAAc,GAAG,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;IAC5D,CAAC;IAED,6DAA6D;IAC7D,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAE9D,4CAA4C;IAC5C,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW;IAC9E,MAAM,YAAY,GAAG,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,WAAW;IAEpE,oEAAoE;IACpE,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5B,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,CAAC,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAEvD,IAAI,aAAa,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,mBAAmB,CAAC,6BAA6B,CAAC,CAAC;IAC/D,CAAC;IAED,yDAAyD;IACzD,OAAO,aAAa,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,qDAAqD;AACrD,SAAS,aAAa,CAAC,KAAiB;IACtC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kEAAkE;AAClE,SAAS,aAAa,CAAC,KAAa,EAAE,MAAc;IAClD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACtC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC;QACtC,SAAS,KAAK,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/constants.d.ts

@@ -0,0 +1,20 @@
+/**
+ * ShroudFi Core Constants
+ *
+ * EIP-5564 / ERC-6538 scheme configuration for Base (EVM).
+ */
+/** EIP-5564 scheme ID for secp256k1 + view tags. */
+export declare const SCHEME_ID = 1;
+/** HKDF salt used for all key derivation from master seed. */
+export declare const HKDF_SALT = "ShroudFi-EVM-v1";
+/**
+ * ERC-5564 Announcer singleton address.
+ * Deterministic CREATE2 deployment -- same address on every EVM chain including Base.
+ */
+export declare const ERC5564_ANNOUNCER_ADDRESS: "0x55649E01B5Df198D18D95b5cc5051630cfD45564";
+/**
+ * ERC-6538 Stealth Meta-Address Registry singleton address.
+ * Deterministic CREATE2 deployment -- same address on every EVM chain including Base.
+ */
+export declare const ERC6538_REGISTRY_ADDRESS: "0x6538E6bf4B0eBd30A8Ea093027Ac2422ce5d6538";
+//# sourceMappingURL=constants.d.ts.map

package/dist/esm/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,oDAAoD;AACpD,eAAO,MAAM,SAAS,IAAI,CAAC;AAE3B,8DAA8D;AAC9D,eAAO,MAAM,SAAS,oBAAoB,CAAC;AAE3C;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EACpC,4CAAqD,CAAC;AAExD;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EACnC,4CAAqD,CAAC"}

package/dist/esm/constants.js

@@ -0,0 +1,20 @@
+/**
+ * ShroudFi Core Constants
+ *
+ * EIP-5564 / ERC-6538 scheme configuration for Base (EVM).
+ */
+/** EIP-5564 scheme ID for secp256k1 + view tags. */
+export const SCHEME_ID = 1;
+/** HKDF salt used for all key derivation from master seed. */
+export const HKDF_SALT = 'ShroudFi-EVM-v1';
+/**
+ * ERC-5564 Announcer singleton address.
+ * Deterministic CREATE2 deployment -- same address on every EVM chain including Base.
+ */
+export const ERC5564_ANNOUNCER_ADDRESS = '0x55649E01B5Df198D18D95b5cc5051630cfD45564';
+/**
+ * ERC-6538 Stealth Meta-Address Registry singleton address.
+ * Deterministic CREATE2 deployment -- same address on every EVM chain including Base.
+ */
+export const ERC6538_REGISTRY_ADDRESS = '0x6538E6bf4B0eBd30A8Ea093027Ac2422ce5d6538';
+//# sourceMappingURL=constants.js.map

package/dist/esm/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,oDAAoD;AACpD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,8DAA8D;AAC9D,MAAM,CAAC,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAE3C;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GACpC,4CAAqD,CAAC;AAExD;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GACnC,4CAAqD,CAAC"}

package/dist/esm/errors.d.ts

@@ -0,0 +1,35 @@
+/**
+ * ShroudFi Privacy-Safe Error Hierarchy
+ *
+ * Rules:
+ * - NEVER include private keys, seeds, or scalars in error messages.
+ * - NEVER include amounts or balances.
+ * - NEVER include stealth addresses or ephemeral keys.
+ * - Safe to include: error codes, generic descriptions.
+ */
+/** Base error for all ShroudFi operations. */
+export declare class ShroudFiError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/** Thrown when a private or public key fails validation. */
+export declare class InvalidKeyError extends ShroudFiError {
+    constructor(message?: string);
+}
+/** Thrown when a stealth meta-address cannot be parsed or is malformed. */
+export declare class InvalidMetaAddressError extends ShroudFiError {
+    constructor(message?: string);
+}
+/** Thrown when stealth address generation or verification fails. */
+export declare class StealthAddressError extends ShroudFiError {
+    constructor(message?: string);
+}
+/** Discriminated union result type -- avoids throwing for sensitive operations. */
+export type Result<T> = {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly error: ShroudFiError;
+};
+//# sourceMappingURL=errors.d.ts.map

package/dist/esm/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,8CAA8C;AAC9C,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAM1C;AAED,4DAA4D;AAC5D,qBAAa,eAAgB,SAAQ,aAAa;gBACpC,OAAO,GAAE,MAA+B;CAIrD;AAED,2EAA2E;AAC3E,qBAAa,uBAAwB,SAAQ,aAAa;gBAC5C,OAAO,GAAE,MAAuC;CAI7D;AAED,oEAAoE;AACpE,qBAAa,mBAAoB,SAAQ,aAAa;gBACxC,OAAO,GAAE,MAA2C;CAIjE;AAED,mFAAmF;AACnF,MAAM,MAAM,MAAM,CAAC,CAAC,IAChB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CAAC"}

package/dist/esm/errors.js

@@ -0,0 +1,41 @@
+/**
+ * ShroudFi Privacy-Safe Error Hierarchy
+ *
+ * Rules:
+ * - NEVER include private keys, seeds, or scalars in error messages.
+ * - NEVER include amounts or balances.
+ * - NEVER include stealth addresses or ephemeral keys.
+ * - Safe to include: error codes, generic descriptions.
+ */
+/** Base error for all ShroudFi operations. */
+export class ShroudFiError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'ShroudFiError';
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+/** Thrown when a private or public key fails validation. */
+export class InvalidKeyError extends ShroudFiError {
+    constructor(message = 'Invalid key material') {
+        super('INVALID_KEY', message);
+        this.name = 'InvalidKeyError';
+    }
+}
+/** Thrown when a stealth meta-address cannot be parsed or is malformed. */
+export class InvalidMetaAddressError extends ShroudFiError {
+    constructor(message = 'Invalid stealth meta-address') {
+        super('INVALID_META_ADDRESS', message);
+        this.name = 'InvalidMetaAddressError';
+    }
+}
+/** Thrown when stealth address generation or verification fails. */
+export class StealthAddressError extends ShroudFiError {
+    constructor(message = 'Stealth address operation failed') {
+        super('STEALTH_ADDRESS_ERROR', message);
+        this.name = 'StealthAddressError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/esm/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,8CAA8C;AAC9C,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,CAAS;IAEtB,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,eAAgB,SAAQ,aAAa;IAChD,YAAY,UAAkB,sBAAsB;QAClD,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,OAAO,uBAAwB,SAAQ,aAAa;IACxD,YAAY,UAAkB,8BAA8B;QAC1D,KAAK,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,OAAO,mBAAoB,SAAQ,aAAa;IACpD,YAAY,UAAkB,kCAAkC;QAC9D,KAAK,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF"}