@winbit32/wallet-kit 0.1.0

package/dist/cosign/index.js

@@ -0,0 +1,49 @@
+"use strict";
+/**
+ * @fileoverview Public surface of the WB32COSIGN co-signing client.
+ *
+ * Self-contained and framework-agnostic: load a WINBIT32 `.wult` share,
+ * derive the FROST UFVK / unified address, and drive a co-signed shielded
+ * send (QR pairing → two-round Orchard FROST ceremony → prove → broadcast)
+ * against any WB32COSIGN relay + NFPT PCZT endpoints. Wire format is
+ * byte-compatible with WINBIT32's `cosign.exe` and Secresea.
+ *
+ * Works in browsers and Node ≥ 18 (WebCrypto / Web Streams /
+ * BroadcastChannel are global in both; WebRTC is browser-only and skipped
+ * automatically by the transport factory).
+ *
+ *   - `vaultShare`   — load a WINBIT32 `.wult` co-signing share.
+ *   - `config`       — injectable host configuration (API/relay/WASM/network).
+ *   - `orchardFrost` — Orchard FROST WASM engine (load, derive, ceremony ops).
+ *   - `bytes`        — hex/base64 helpers.
+ *   - `seed`         — deterministic vault-identity → Zcash seed (HKDF).
+ *   - `transports`   — WB32COSIGN message transports (BroadcastChannel/HTTP/WebRTC).
+ *   - `relay`        — session/QR, encrypted envelopes, Orchard FROST initiator.
+ *   - `cosignSend`   — PCZT send orchestration + thin PCZT API client.
+ *   - `initiator`    — headless full pipeline (scan → select → build → ceremony).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./vaultShare"), exports);
+__exportStar(require("./config"), exports);
+__exportStar(require("./orchardFrost"), exports);
+__exportStar(require("./bytes"), exports);
+__exportStar(require("./seed"), exports);
+__exportStar(require("./transports"), exports);
+__exportStar(require("./relay"), exports);
+__exportStar(require("./cosignSend"), exports);
+__exportStar(require("./initiator"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cosign/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cosign/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;;;;;;;;;;;;;;AAEH,+CAA6B;AAC7B,2CAAyB;AACzB,iDAA+B;AAC/B,0CAAwB;AACxB,yCAAuB;AACvB,+CAA6B;AAC7B,0CAAwB;AACxB,+CAA6B;AAC7B,8CAA4B"}

package/dist/cosign/initiator.d.ts

@@ -0,0 +1,121 @@
+/**
+ * @fileoverview Headless co-sign initiator pipeline.
+ *
+ * The host-neutral remainder of Secresea's `CosignWalletService`: everything
+ * needed to drive "send shielded ZEC from a FROST vault, co-signed by a human
+ * on another device" without a browser or any UI framework:
+ *
+ *   bundle (.wult) → derive UFVK/UA → scan notes (witness) → select notes
+ *   (ZIP-317 fee) → POST /pczt/build → WB32COSIGN ceremony (QR pairing)
+ *   → apply + prove → broadcast → txid.
+ *
+ * Designed for Node hosts (the payments-gateway MCP `make_payment` flow runs
+ * exactly this) as well as browsers. All I/O is injected: the wallet-scanner
+ * client comes from this package's `scanner/` module, the PCZT + relay
+ * endpoints from {@link CosignConfig}, and the WASM engine from the caller.
+ */
+import type { CosignConfig } from './config';
+import type { CosignTransport } from './transports';
+import { type CosignCallbacks, type CosignSessionParams, type SigningDisplay } from './relay';
+import type { OrchardFrostWasmModule, OrchardKeyBundle } from './orchardFrost';
+import type { WalletScannerClientType } from '../scanner/zcashScannerClient';
+/** Orchard note commitment tree depth — a full witness has this many siblings. */
+export declare const ORCHARD_MERKLE_DEPTH = 32;
+/** Zatoshis per ZEC. */
+export declare const ZATOSHIS_PER_ZEC = 100000000;
+export declare const toZec: (zatoshis: number) => number;
+export declare const toZatoshis: (zec: number) => number;
+/** ZIP-317 conventional fee for the given action counts. */
+export declare const estimateFeeZat: (numSpends: number, numOutputs: number) => number;
+/** Raw note shape returned by the orchard-scanner (subset we consume). */
+export interface ScannedNote {
+    commitment: string;
+    value: number;
+    nullifier?: string;
+    note_nullifier?: string;
+    rho?: string;
+    anchor_height: number;
+    anchor_root?: string;
+    leaf_position?: number | string;
+    merkle_path?: {
+        siblings?: string[];
+    };
+    note_plaintext?: {
+        diversifier?: string;
+        pk_d?: string;
+        rseed?: string;
+        value?: number;
+    };
+    block_height: number;
+    [key: string]: unknown;
+}
+/** The scanner surface this pipeline needs (subset of the full client). */
+export type ScannerForCosign = Pick<WalletScannerClientType, 'startOrchardScanJob' | 'getOrchardScanJob'>;
+/**
+ * Coerce the `.wult` orchard payload into a validated {@link OrchardKeyBundle}.
+ * Throws a clear error if the share is missing the fields we need to co-sign.
+ */
+export declare const toOrchardBundle: (raw: unknown) => OrchardKeyBundle;
+/**
+ * Map a scanned witness note → PCZT `SpendInput` (exact field names the
+ * orchard-scanner `build-pczt` deserialises). Requires a full witness
+ * (anchor root + leaf position + 32 siblings); throws otherwise so we never
+ * submit an unspendable note.
+ */
+export declare const noteToSpend: (note: ScannedNote) => Record<string, unknown>;
+/**
+ * Greedily select notes (largest first) to cover `amountZat` plus the
+ * (count-dependent) ZIP-317 fee. Returns the chosen notes and the fee used.
+ */
+export declare const selectNotes: (notes: ScannedNote[], amountZat: number) => {
+    selected: ScannedNote[];
+    feeZat: number;
+};
+export interface ScanUfvkNotesParams {
+    scanner: ScannerForCosign;
+    ufvk: string;
+    birthdayHeight?: number;
+    apiKey?: string;
+    signal?: AbortSignal;
+    /** Override poll/timeout (tests). */
+    pollMs?: number;
+    timeoutMs?: number;
+}
+/** Run a view-only witness scan of a FROST UFVK and return its notes. */
+export declare const scanUfvkNotes: (p: ScanUfvkNotesParams) => Promise<ScannedNote[]>;
+export interface HeadlessCosignSendParams {
+    config: CosignConfig;
+    wasm: OrchardFrostWasmModule;
+    /** Validated Orchard FROST bundle (see {@link toOrchardBundle}). */
+    bundle: OrchardKeyBundle;
+    /** UFVK + UA derived from the bundle (see `deriveOrchardAddressFromBundle`). */
+    ufvk: string;
+    unifiedAddress: string;
+    /** Optional ZIP-32 seed fingerprint for PCZT metadata. */
+    seedFingerprintHex?: string | null;
+    scanner: ScannerForCosign;
+    scannerApiKey?: string;
+    toAddress: string;
+    amountZat: number;
+    memoText?: string;
+    birthdayHeight?: number;
+    /** Fires with the WB32COSIGN QR payload once the session is created. */
+    onQrReady?: (qrPayload: string, session: CosignSessionParams) => void;
+    /** Override the default transport stack (tests / custom fabrics). */
+    createTransport?: (sessionId: string, encKeyHex: string) => CosignTransport;
+    callbacks?: CosignCallbacks;
+    /** Extra display fields shown on the cosigner's approval screen. */
+    display?: Partial<SigningDisplay>;
+}
+export interface HeadlessCosignSendResult {
+    txid: string;
+    signedPczt: string;
+}
+/**
+ * Drive a complete headless co-signed send: create the pairing session (QR),
+ * scan + select notes, build the PCZT server-side, run the per-action FROST
+ * ceremony with whoever scans the QR, then broadcast. Mirrors Secresea's
+ * `CosignWalletService.send` minus the UI wiring.
+ */
+export declare const runHeadlessCosignSend: (p: HeadlessCosignSendParams) => Promise<HeadlessCosignSendResult>;
+//# sourceMappingURL=initiator.d.ts.map

package/dist/cosign/initiator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"initiator.d.ts","sourceRoot":"","sources":["../../src/cosign/initiator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAGN,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,MAAM,SAAS,CAAC;AAEjB,OAAO,KAAK,EAAE,sBAAsB,EAAE,gBAAgB,EAAmB,MAAM,gBAAgB,CAAC;AAChG,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAI7E,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,wBAAwB;AACxB,eAAO,MAAM,gBAAgB,YAAc,CAAC;AAY5C,eAAO,MAAM,KAAK,aAAc,MAAM,KAAG,MAAqC,CAAC;AAC/E,eAAO,MAAM,UAAU,QAAS,MAAM,KAAG,MAA4C,CAAC;AAEtF,4DAA4D;AAC5D,eAAO,MAAM,cAAc,cAAe,MAAM,cAAc,MAAM,KAAG,MACL,CAAC;AAInE,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACtC,cAAc,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzF,YAAY,EAAE,MAAM,CAAC;IACrB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED,2EAA2E;AAC3E,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,uBAAuB,EAAE,qBAAqB,GAAG,mBAAmB,CAAC,CAAC;AAI1G;;;GAGG;AACH,eAAO,MAAM,eAAe,QAAS,OAAO,KAAG,gBAW9C,CAAC;AAoBF;;;;;GAKG;AACH,eAAO,MAAM,WAAW,SAAU,WAAW,KAAG,OAAO,MAAM,EAAE,OAAO,CA8BrE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,WAAW,UAChB,WAAW,EAAE,aACT,MAAM;cACH,WAAW,EAAE;YAAU,MAAM;CAc3C,CAAC;AAIF,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,yEAAyE;AACzE,eAAO,MAAM,aAAa,MAAa,mBAAmB,KAAG,QAAQ,WAAW,EAAE,CAyBjF,CAAC;AAIF,MAAM,WAAW,wBAAwB;IACxC,MAAM,EAAE,YAAY,CAAC;IACrB,IAAI,EAAE,sBAAsB,CAAC;IAC7B,oEAAoE;IACpE,MAAM,EAAE,gBAAgB,CAAC;IACzB,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,wEAAwE;IACxE,SAAS,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IACtE,qEAAqE;IACrE,eAAe,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,eAAe,CAAC;IAC5E,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,oEAAoE;IACpE,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,MAAa,wBAAwB,KAAG,QAAQ,wBAAwB,CAiGzG,CAAC"}

package/dist/cosign/initiator.js

@@ -0,0 +1,270 @@
+"use strict";
+/**
+ * @fileoverview Headless co-sign initiator pipeline.
+ *
+ * The host-neutral remainder of Secresea's `CosignWalletService`: everything
+ * needed to drive "send shielded ZEC from a FROST vault, co-signed by a human
+ * on another device" without a browser or any UI framework:
+ *
+ *   bundle (.wult) → derive UFVK/UA → scan notes (witness) → select notes
+ *   (ZIP-317 fee) → POST /pczt/build → WB32COSIGN ceremony (QR pairing)
+ *   → apply + prove → broadcast → txid.
+ *
+ * Designed for Node hosts (the payments-gateway MCP `make_payment` flow runs
+ * exactly this) as well as browsers. All I/O is injected: the wallet-scanner
+ * client comes from this package's `scanner/` module, the PCZT + relay
+ * endpoints from {@link CosignConfig}, and the WASM engine from the caller.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runHeadlessCosignSend = exports.scanUfvkNotes = exports.selectNotes = exports.noteToSpend = exports.toOrchardBundle = exports.estimateFeeZat = exports.toZatoshis = exports.toZec = exports.ZATOSHIS_PER_ZEC = exports.ORCHARD_MERKLE_DEPTH = void 0;
+const transports_1 = require("./transports");
+const relay_1 = require("./relay");
+const cosignSend_1 = require("./cosignSend");
+// ─── Constants ──────────────────────────────────────────────────────
+/** Orchard note commitment tree depth — a full witness has this many siblings. */
+exports.ORCHARD_MERKLE_DEPTH = 32;
+/** Zatoshis per ZEC. */
+exports.ZATOSHIS_PER_ZEC = 100000000;
+/** ZIP-317 marginal fee (zatoshis per logical action). */
+const MARGINAL_FEE_ZAT = 5000;
+/** ZIP-317 grace actions (fee is charged for at least this many). */
+const GRACE_ACTIONS = 2;
+/** Scan-job poll interval. */
+const SCAN_POLL_MS = 4000;
+/** Scan-job overall timeout. */
+const SCAN_TIMEOUT_MS = 10 * 60 * 1000;
+const HEX64 = /^[0-9a-fA-F]{64}$/;
+const toZec = (zatoshis) => zatoshis / exports.ZATOSHIS_PER_ZEC;
+exports.toZec = toZec;
+const toZatoshis = (zec) => Math.round(zec * exports.ZATOSHIS_PER_ZEC);
+exports.toZatoshis = toZatoshis;
+/** ZIP-317 conventional fee for the given action counts. */
+const estimateFeeZat = (numSpends, numOutputs) => MARGINAL_FEE_ZAT * Math.max(GRACE_ACTIONS, numSpends, numOutputs);
+exports.estimateFeeZat = estimateFeeZat;
+// ─── Bundle validation ──────────────────────────────────────────────
+/**
+ * Coerce the `.wult` orchard payload into a validated {@link OrchardKeyBundle}.
+ * Throws a clear error if the share is missing the fields we need to co-sign.
+ */
+const toOrchardBundle = (raw) => {
+    const b = raw;
+    const share = b?.myShare;
+    const pkg = b?.publicKeyPackage;
+    if (!share?.id || !share.secretShare || !share.publicKey || !share.groupPublic) {
+        throw new Error('This share has no usable Orchard FROST key (missing myShare fields).');
+    }
+    if (!pkg?.groupPublic || !pkg.signerPubkeys) {
+        throw new Error('This share is missing its Orchard public key package.');
+    }
+    return b;
+};
+exports.toOrchardBundle = toOrchardBundle;
+// ─── Note → spend mapping + selection ───────────────────────────────
+/** Pick the first present, valid 64-hex value from a list of candidates. */
+const firstHex64 = (...candidates) => {
+    for (const c of candidates) {
+        if (typeof c === 'string' && HEX64.test(c))
+            return c.toLowerCase();
+    }
+    return null;
+};
+const extractSiblings = (note) => {
+    const s = note.merkle_path?.siblings
+        ?? note.merklePath?.siblings
+        ?? note.merkle_path_siblings_hex
+        ?? note.merklePathSiblingsHex;
+    return Array.isArray(s) ? s : [];
+};
+/**
+ * Map a scanned witness note → PCZT `SpendInput` (exact field names the
+ * orchard-scanner `build-pczt` deserialises). Requires a full witness
+ * (anchor root + leaf position + 32 siblings); throws otherwise so we never
+ * submit an unspendable note.
+ */
+const noteToSpend = (note) => {
+    const diversifier = note.note_plaintext?.diversifier ?? note.diversifier;
+    const pkd = note.note_plaintext?.pk_d ?? note.pk_d;
+    const rseed = note.note_plaintext?.rseed ?? note.rseed;
+    const nullifierHex = firstHex64(note.note_nullifier, note.nullifier);
+    const rhoHex = firstHex64(note.rho, note.rho_hex);
+    const anchorRootHex = firstHex64(note.anchor_root, note.anchor_root_hex);
+    const siblings = extractSiblings(note);
+    const leafPosition = note.leaf_position ?? note.leafPosition;
+    if (!nullifierHex)
+        throw new Error('Note is missing its nullifier — rescan with witness=true.');
+    if (!rhoHex)
+        throw new Error('Note is missing rho — rescan with an up-to-date scanner.');
+    if (!anchorRootHex || leafPosition === undefined || siblings.length !== exports.ORCHARD_MERKLE_DEPTH) {
+        throw new Error('Note is missing a full Orchard witness (anchor/position/merkle path) — rescan with witness=true.');
+    }
+    return {
+        noteCommitmentHex: note.commitment,
+        diversifierHex: diversifier,
+        pkdHex: pkd,
+        rseedHex: rseed,
+        rhoHex,
+        valueZatoshis: note.value,
+        anchorHeight: note.anchor_height,
+        anchorRootHex,
+        leafPosition: String(leafPosition),
+        merklePathSiblingsHex: siblings,
+        nullifierHex,
+        blockHeight: note.block_height,
+    };
+};
+exports.noteToSpend = noteToSpend;
+/**
+ * Greedily select notes (largest first) to cover `amountZat` plus the
+ * (count-dependent) ZIP-317 fee. Returns the chosen notes and the fee used.
+ */
+const selectNotes = (notes, amountZat) => {
+    const sorted = [...notes].filter((n) => Number(n.value) > 0).sort((a, b) => b.value - a.value);
+    const selected = [];
+    let sum = 0;
+    for (const note of sorted) {
+        selected.push(note);
+        sum += Number(note.value);
+        // One recipient output; assume a change output for the fee estimate.
+        const feeZat = (0, exports.estimateFeeZat)(selected.length, 2);
+        if (sum >= amountZat + feeZat)
+            return { selected, feeZat };
+    }
+    const have = (0, exports.toZec)(sum).toFixed(8);
+    const need = (0, exports.toZec)(amountZat).toFixed(8);
+    throw new Error(`Insufficient shielded funds: have ${have} ZEC, need ${need} ZEC plus fee.`);
+};
+exports.selectNotes = selectNotes;
+/** Run a view-only witness scan of a FROST UFVK and return its notes. */
+const scanUfvkNotes = async (p) => {
+    const start = await p.scanner.startOrchardScanJob({
+        ufvk: p.ufvk,
+        witness: true,
+        autoDetect: p.birthdayHeight === undefined,
+        ...(p.birthdayHeight !== undefined ? { birthdayHeight: p.birthdayHeight } : {}),
+    }, { apiKey: p.apiKey });
+    const jobId = start.data?.jobId;
+    const jobToken = start.data?.jobToken;
+    if (!jobId)
+        throw new Error('Scanner did not start a scan job.');
+    const deadline = Date.now() + (p.timeoutMs ?? SCAN_TIMEOUT_MS);
+    for (;;) {
+        if (p.signal?.aborted)
+            throw new Error('Scan cancelled.');
+        if (Date.now() > deadline)
+            throw new Error('Timed out scanning the wallet.');
+        const status = await p.scanner.getOrchardScanJob(jobId, { jobToken, apiKey: p.apiKey });
+        const job = status.data?.job;
+        if (job?.status === 'succeeded') {
+            return (job.results?.notes ?? []);
+        }
+        if (job?.status === 'failed') {
+            throw new Error(`Wallet scan failed: ${job.error ?? 'unknown error'}`);
+        }
+        await new Promise((r) => setTimeout(r, p.pollMs ?? SCAN_POLL_MS));
+    }
+};
+exports.scanUfvkNotes = scanUfvkNotes;
+/**
+ * Drive a complete headless co-signed send: create the pairing session (QR),
+ * scan + select notes, build the PCZT server-side, run the per-action FROST
+ * ceremony with whoever scans the QR, then broadcast. Mirrors Secresea's
+ * `CosignWalletService.send` minus the UI wiring.
+ */
+const runHeadlessCosignSend = async (p) => {
+    if (!p.toAddress || !p.toAddress.startsWith('u1')) {
+        throw new Error('A unified (u1…) recipient address is required for shielded sends.');
+    }
+    if (!Number.isFinite(p.amountZat) || p.amountZat <= 0) {
+        throw new Error('Amount must be greater than zero.');
+    }
+    const bundle = (0, exports.toOrchardBundle)(p.bundle);
+    const { callbacks } = p;
+    // 1. Create the pairing session up-front so the human can scan while we build.
+    const { params, qrPayload } = (0, relay_1.createCosignSession)(p.config.relayBaseUrl);
+    p.onQrReady?.(qrPayload, params);
+    const transport = p.createTransport
+        ? p.createTransport(params.sessionId, params.encKeyHex)
+        : (0, transports_1.createDefaultTransports)({
+            sessionId: params.sessionId,
+            relayBaseUrl: p.config.relayBaseUrl,
+            fetchImpl: p.config.fetchImpl,
+            myRole: 'init',
+        });
+    try {
+        // 2. Scan notes + select inputs.
+        callbacks?.onProgress?.('Scanning shielded notes...');
+        const notes = await (0, exports.scanUfvkNotes)({
+            scanner: p.scanner,
+            ufvk: p.ufvk,
+            birthdayHeight: p.birthdayHeight,
+            apiKey: p.scannerApiKey,
+            signal: callbacks?.signal,
+        });
+        const { selected, feeZat } = (0, exports.selectNotes)(notes, p.amountZat);
+        const spends = selected.map(exports.noteToSpend);
+        // 3. Assemble outputs (+ change back to ourselves).
+        const totalInZat = selected.reduce((s, n) => s + Number(n.value), 0);
+        const changeZat = totalInZat - p.amountZat - feeZat;
+        const memoHex = p.memoText
+            ? Array.from(new TextEncoder().encode(p.memoText), (b) => b.toString(16).padStart(2, '0')).join('')
+            : undefined;
+        const outputs = [{
+                toUnifiedAddress: p.toAddress,
+                valueZatoshis: p.amountZat,
+                ...(memoHex ? { memoHex } : {}),
+            }];
+        // 4. Build the unsigned PCZT server-side.
+        callbacks?.onProgress?.('Building the transaction...');
+        const built = await (0, cosignSend_1.buildPczt)(p.config, {
+            network: p.config.network,
+            ...(p.seedFingerprintHex ? { seedFingerprintHex: p.seedFingerprintHex } : {}),
+            accountIndex: 0,
+            ufvk: p.ufvk,
+            feeZatoshis: feeZat,
+            spends,
+            outputs,
+            ...(changeZat > 0 ? { changeUnifiedAddress: p.unifiedAddress } : {}),
+        });
+        if (!built?.pczt)
+            throw new Error('The server did not return a PCZT to sign.');
+        // 5. Co-sign each Orchard action with the remote cosigner, then broadcast.
+        const result = await (0, cosignSend_1.cosignSendPczt)({
+            config: p.config,
+            wasm: p.wasm,
+            encKeyHex: params.encKeyHex,
+            transport,
+            myPartyId: bundle.myShare.id,
+            share: {
+                id: bundle.myShare.id,
+                secretShare: bundle.myShare.secretShare,
+                publicKey: bundle.myShare.publicKey,
+                groupPublic: bundle.publicKeyPackage.groupPublic,
+            },
+            publicKeyPackage: {
+                signerPubkeys: bundle.publicKeyPackage.signerPubkeys,
+                groupPublic: bundle.publicKeyPackage.groupPublic,
+            },
+            unsignedPczt: built.pczt,
+            display: {
+                chain: 'Zcash',
+                ticker: 'ZEC',
+                amount: (0, exports.toZec)(p.amountZat).toString(),
+                toAddress: p.toAddress,
+                memo: p.memoText ?? '',
+                ...p.display,
+            },
+            callbacks,
+        });
+        return { txid: result.txid, signedPczt: result.signedPczt };
+    }
+    finally {
+        // Tell the cosigner we're done and release the transport.
+        await (0, relay_1.endCosignSession)(params.encKeyHex, transport).catch(() => { });
+        try {
+            transport.close?.();
+        }
+        catch { /* best effort */ }
+    }
+};
+exports.runHeadlessCosignSend = runHeadlessCosignSend;
+//# sourceMappingURL=initiator.js.map

package/dist/cosign/initiator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"initiator.js","sourceRoot":"","sources":["../../src/cosign/initiator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;GAeG;;;AAIH,6CAAuD;AACvD,mCAMiB;AACjB,6CAAyD;AAIzD,uEAAuE;AAEvE,kFAAkF;AACrE,QAAA,oBAAoB,GAAG,EAAE,CAAC;AACvC,wBAAwB;AACX,QAAA,gBAAgB,GAAG,SAAW,CAAC;AAC5C,0DAA0D;AAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,qEAAqE;AACrE,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,8BAA8B;AAC9B,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,gCAAgC;AAChC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAE3B,MAAM,KAAK,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,QAAQ,GAAG,wBAAgB,CAAC;AAAlE,QAAA,KAAK,SAA6D;AACxE,MAAM,UAAU,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,wBAAgB,CAAC,CAAC;AAAzE,QAAA,UAAU,cAA+D;AAEtF,4DAA4D;AACrD,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAE,UAAkB,EAAU,EAAE,CAC/E,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AADtD,QAAA,cAAc,kBACwC;AAuBnE,uEAAuE;AAEvE;;;GAGG;AACI,MAAM,eAAe,GAAG,CAAC,GAAY,EAAoB,EAAE;IACjE,MAAM,CAAC,GAAG,GAAuC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,EAAE,OAA+C,CAAC;IACjE,MAAM,GAAG,GAAG,CAAC,EAAE,gBAAgB,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;QAC/E,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;KACxF;IACD,IAAI,CAAC,GAAG,EAAE,WAAW,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE;QAC5C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;KACzE;IACD,OAAO,CAAqB,CAAC;AAC9B,CAAC,CAAC;AAXW,QAAA,eAAe,mBAW1B;AAEF,uEAAuE;AAEvE,4EAA4E;AAC5E,MAAM,UAAU,GAAG,CAAC,GAAG,UAA0B,EAAiB,EAAE;IACnE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;KACnE;IACD,OAAO,IAAI,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,IAAiB,EAAY,EAAE;IACvD,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ;WAC/B,IAAY,CAAC,UAAU,EAAE,QAAQ;WACjC,IAAY,CAAC,wBAAwB;WACrC,IAAY,CAAC,qBAAqB,CAAC;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAClC,CAAC,CAAC;AAEF;;;;;GAKG;AACI,MAAM,WAAW,GAAG,CAAC,IAAiB,EAA2B,EAAE;IACzE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,IAAK,IAAY,CAAC,WAAW,CAAC;IAClF,MAAM,GAAG,GAAG,IAAI,CAAC,cAAc,EAAE,IAAI,IAAK,IAAY,CAAC,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,KAAK,IAAK,IAAY,CAAC,KAAK,CAAC;IAChE,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAG,IAAY,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,WAAW,EAAG,IAAY,CAAC,eAAe,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,IAAK,IAAY,CAAC,YAAY,CAAC;IAEtE,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACzF,IAAI,CAAC,aAAa,IAAI,YAAY,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,4BAAoB,EAAE;QAC7F,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;KACpH;IAED,OAAO;QACN,iBAAiB,EAAE,IAAI,CAAC,UAAU;QAClC,cAAc,EAAE,WAAW;QAC3B,MAAM,EAAE,GAAG;QACX,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,aAAa,EAAE,IAAI,CAAC,KAAK;QACzB,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,aAAa;QACb,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC;QAClC,qBAAqB,EAAE,QAAQ;QAC/B,YAAY;QACZ,WAAW,EAAE,IAAI,CAAC,YAAY;KAC9B,CAAC;AACH,CAAC,CAAC;AA9BW,QAAA,WAAW,eA8BtB;AAEF;;;GAGG;AACI,MAAM,WAAW,GAAG,CAC1B,KAAoB,EACpB,SAAiB,EAC6B,EAAE;IAChD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAkB,EAAE,CAAC;IACnC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE;QAC1B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1B,qEAAqE;QACrE,MAAM,MAAM,GAAG,IAAA,sBAAc,EAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAClD,IAAI,GAAG,IAAI,SAAS,GAAG,MAAM;YAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;KAC3D;IACD,MAAM,IAAI,GAAG,IAAA,aAAK,EAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAA,aAAK,EAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,KAAK,CAAC,qCAAqC,IAAI,cAAc,IAAI,gBAAgB,CAAC,CAAC;AAC9F,CAAC,CAAC;AAjBW,QAAA,WAAW,eAiBtB;AAeF,yEAAyE;AAClE,MAAM,aAAa,GAAG,KAAK,EAAE,CAAsB,EAA0B,EAAE;IACrF,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACjD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,CAAC,CAAC,cAAc,KAAK,SAAS;QAC1C,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;IACtC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAEjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,eAAe,CAAC,CAAC;IAC/D,SAAS;QACR,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;QAC7B,IAAI,GAAG,EAAE,MAAM,KAAK,WAAW,EAAE;YAChC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAA6B,CAAC;SAC9D;QACD,IAAI,GAAG,EAAE,MAAM,KAAK,QAAQ,EAAE;YAC7B,MAAM,IAAI,KAAK,CAAC,uBAAwB,GAA0B,CAAC,KAAK,IAAI,eAAe,EAAE,CAAC,CAAC;SAC/F;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC;KAClE;AACF,CAAC,CAAC;AAzBW,QAAA,aAAa,iBAyBxB;AAkCF;;;;;GAKG;AACI,MAAM,qBAAqB,GAAG,KAAK,EAAE,CAA2B,EAAqC,EAAE;IAC7G,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE;QAClD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;KACrF;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,EAAE;QACtD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;KACrD;IACD,MAAM,MAAM,GAAG,IAAA,uBAAe,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAExB,+EAA+E;IAC/E,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,2BAAmB,EAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACzE,CAAC,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEjC,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe;QAClC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;QACvD,CAAC,CAAC,IAAA,oCAAuB,EAAC;YACzB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,YAAY;YACnC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS;YAC7B,MAAM,EAAE,MAAM;SACd,CAAC,CAAC;IAEJ,IAAI;QACH,iCAAiC;QACjC,SAAS,EAAE,UAAU,EAAE,CAAC,4BAA4B,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,IAAA,qBAAa,EAAC;YACjC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,MAAM,EAAE,CAAC,CAAC,aAAa;YACvB,MAAM,EAAE,SAAS,EAAE,MAAM;SACzB,CAAC,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAA,mBAAW,EAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,mBAAW,CAAC,CAAC;QAEzC,oDAAoD;QACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,UAAU,GAAG,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC;QACpD,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ;YACzB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACnG,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,OAAO,GAAmC,CAAC;gBAChD,gBAAgB,EAAE,CAAC,CAAC,SAAS;gBAC7B,aAAa,EAAE,CAAC,CAAC,SAAS;gBAC1B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/B,CAAC,CAAC;QAEH,0CAA0C;QAC1C,SAAS,EAAE,UAAU,EAAE,CAAC,6BAA6B,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,IAAA,sBAAS,EAAmB,CAAC,CAAC,MAAM,EAAE;YACzD,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO;YACzB,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,YAAY,EAAE,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,WAAW,EAAE,MAAM;YACnB,MAAM;YACN,OAAO;YACP,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAE/E,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAc,EAAC;YACnC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS;YACT,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;YAC5B,KAAK,EAAE;gBACN,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;gBACrB,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW;gBACvC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;gBACnC,WAAW,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW;aAChD;YACD,gBAAgB,EAAE;gBACjB,aAAa,EAAE,MAAM,CAAC,gBAAgB,CAAC,aAAa;gBACpD,WAAW,EAAE,MAAM,CAAC,gBAAgB,CAAC,WAAW;aAChD;YACD,YAAY,EAAE,KAAK,CAAC,IAAI;YACxB,OAAO,EAAE;gBACR,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,IAAA,aAAK,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;gBACrC,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,IAAI,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE;gBACtB,GAAG,CAAC,CAAC,OAAO;aACZ;YACD,SAAS;SACT,CAAC,CAAC;QAEH,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;KAC5D;YAAS;QACT,0DAA0D;QAC1D,MAAM,IAAA,wBAAgB,EAAC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAqB,CAAC,CAAC,CAAC;QACvF,IAAI;YAAE,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;SAAE;QAAC,MAAM,EAAE,iBAAiB,EAAE;KACxD;AACF,CAAC,CAAC;AAjGW,QAAA,qBAAqB,yBAiGhC"}

package/dist/cosign/orchardFrost.d.ts

@@ -0,0 +1,140 @@
+/**
+ * @fileoverview Orchard (RedPallas) FROST engine bridge.
+ *
+ * A framework-agnostic port of WINBIT32's `orchardFrostBridge` trimmed to
+ * the pieces an initiator needs: load the WASM, derive a UFVK / unified
+ * address from a FROST share, and (for tests / local 2-of-2) split a key
+ * with a trusted dealer. The two-round signing ceremony wrappers live here
+ * so their wire shapes stay matched to the relay protocol.
+ *
+ * Design for reuse: there is no module-global "current WASM" the way the
+ * original bridge keeps one. The loaded module is returned and passed
+ * explicitly into each function (dependency injection), so a host can run
+ * more than one engine instance and nothing leaks across React renders.
+ * The only internal state is a load cache keyed by asset URL.
+ *
+ * The underlying WASM is `orchard-frost-wasm` (built from frosty-lib /
+ * orchard-frost-wasm), served as static assets. See {@link CosignConfig}.
+ */
+import type { CosignConfig } from './config';
+export interface OrchardFrostWasmModule {
+    /** Trusted-dealer split: returns JSON {shares, public_key_package}. */
+    keygen_with_dealer: (max_signers: number, min_signers: number) => string;
+    /** Round 1: opaque nonces + serialisable commitments for one signer. */
+    commit_nonces: (secret_share_hex: string) => string;
+    /** Round 2: a signature share, bound to the per-action randomizer. */
+    sign_with_nonces: (identifier_hex: string, secret_share_hex: string, public_hex: string, group_public_hex: string, nonces_opaque_hex: string, all_commitments_json: string, message_hex: string, randomizer_hex: string) => string;
+    /** Aggregate signature shares into a 64-byte RedPallas signature. */
+    aggregate: (commitments_json: string, message_hex: string, sig_shares_json: string, signer_pubkeys_json: string, group_public_hex: string, randomizer_hex: string) => string;
+    generate_randomizer: () => string;
+    get_group_verifying_key: (group_public_hex: string) => string;
+    /** Build an Orchard-only UFVK whose `ak` == the FROST group_public. */
+    build_orchard_ufvk_from_frost?: (group_public_hex: string, orchard_extras_hex: string) => string;
+    build_orchard_unified_address_from_frost?: (group_public_hex: string, orchard_extras_hex: string) => string;
+    /** Random 64-byte nk‖rivk extras compatible with a given group_public. */
+    orchard_random_extras?: (group_public_hex: string) => string;
+    /** wasm-bindgen (`--target web`) init entry point. */
+    default: (input: BufferSource | string | URL | Request | Response) => Promise<unknown>;
+}
+export interface OrchardKeyShare {
+    id: string;
+    secretShare: string;
+    publicKey: string;
+    groupPublic: string;
+}
+export interface OrchardPublicKeyPackage {
+    signerPubkeys: Record<string, string>;
+    groupPublic: string;
+}
+export interface OrchardKeyBundle {
+    myShare: OrchardKeyShare;
+    publicKeyPackage: OrchardPublicKeyPackage;
+    /** 64-byte nk‖rivk that, with the group_public (ak), forms the FVK. */
+    orchardExtras?: string;
+    minSigners?: number;
+    maxSigners?: number;
+    birthday?: number;
+    [key: string]: unknown;
+}
+export interface OrchardKeygenResult {
+    shares: Record<string, OrchardKeyShare>;
+    publicKeyPackage: OrchardPublicKeyPackage;
+}
+export interface OrchardKeygenWithExtras {
+    keygen: OrchardKeygenResult;
+    orchardExtras: string;
+    keygenAttempts: number;
+}
+export interface OrchardAddressResult {
+    unifiedAddress: string;
+    ufvk: string;
+}
+/** Attempts before giving up on producing an Orchard-compatible `ak`. */
+export declare const DEFAULT_KEYGEN_RETRY_LIMIT = 32;
+/**
+ * Load + initialise the Orchard FROST WASM.
+ *
+ * Uses `config.loadOrchardFrostWasm` when provided (hosts that bundle the WASM
+ * themselves). Otherwise lazily fetches the artefacts from `config.wasmBaseUrl`
+ * — the dynamic `import()` is deliberate: it keeps the ~500 KB engine off the
+ * critical path until a co-signing flow actually needs it.
+ */
+export declare const loadOrchardFrostWasm: (config: CosignConfig) => Promise<OrchardFrostWasmModule>;
+/** Trusted-dealer t-of-n split (used by tests and local 2-of-2 setups). */
+export declare const orchardKeygenWithDealer: (wasm: OrchardFrostWasmModule, maxSigners: number, minSigners: number) => OrchardKeygenResult;
+/** Generate random 64-byte nk‖rivk extras compatible with `groupPublicHex`. */
+export declare const generateOrchardExtras: (wasm: OrchardFrostWasmModule, groupPublicHex: string) => string;
+/**
+ * Whether a 32-byte serialised group_public is a usable Orchard `ak`.
+ *
+ * Orchard's `SpendValidatingKey::from_bytes` rejects points whose y-sign bit
+ * (top bit of byte 31) is set, and the identity (all-zero) point. RedPallas
+ * keygen produces a random y-sign, so ~half of keygens are unusable as-is.
+ */
+export declare const isOrchardCompatibleGroupPublicHex: (groupPublicHex: string) => boolean;
+/**
+ * Trusted-dealer keygen that re-rolls until the group_public is an
+ * Orchard-compatible `ak`, then derives matching nk‖rivk extras. With
+ * p ≈ 0.5 per attempt, the default 32-attempt cap fails with probability
+ * ≈ 2^-32. Returns the keygen, the extras, and how many attempts it took.
+ */
+export declare const orchardKeygenWithCompatibleExtras: (wasm: OrchardFrostWasmModule, maxSigners: number, minSigners: number, options?: {
+    maxAttempts?: number;
+}) => OrchardKeygenWithExtras;
+/**
+ * Derive the Orchard UFVK + unified address for a FROST share bundle.
+ *
+ * The group_public is already the 32-byte serialised `ak`, so `ak‖nk‖rivk`
+ * trivially yields the Orchard FVK the PCZT will embed and verify against.
+ * Backfills missing `orchardExtras` (mutating the bundle so the caller can
+ * persist it) — without them the derived UFVK would not match the FROST
+ * signer's `ak` and every shielded send would fail.
+ *
+ * @returns the address pair, or null if extras can't be produced / the WASM
+ *   lacks the FROST-native helpers.
+ */
+export declare const deriveOrchardAddressFromBundle: (wasm: OrchardFrostWasmModule, bundle: OrchardKeyBundle) => OrchardAddressResult | null;
+export interface NonceCommitment {
+    /** Opaque, Rust-owned nonce handle — never leaves this device. */
+    noncesOpaque: string;
+    /** Serialisable per-signer commitments, shared with the other party. */
+    commitments: string;
+}
+/** Round 1: produce this signer's nonces (opaque) + commitments (shareable). */
+export declare const orchardCommitNonces: (wasm: OrchardFrostWasmModule, secretShareHex: string) => NonceCommitment;
+/**
+ * Round 2: produce this signer's signature share using its pre-committed
+ * nonces. Both parties MUST pass the same `allCommitmentsJson`, `messageHex`
+ * (sighash) and `randomizerHex` (the PCZT's per-action `alpha`).
+ */
+export declare const orchardSignWithNonces: (wasm: OrchardFrostWasmModule, identifierHex: string, secretShareHex: string, publicHex: string, groupPublicHex: string, noncesOpaqueHex: string, allCommitmentsJson: string, messageHex: string, randomizerHex: string) => string;
+/**
+ * Aggregate signature shares into a 64-byte RedPallas signature.
+ * Returns the raw WASM JSON (`{ signature, ... }`); callers read `.signature`.
+ */
+export declare const orchardAggregate: (wasm: OrchardFrostWasmModule, commitmentsJson: string, messageHex: string, sigSharesJson: string, signerPubkeysJson: string, groupPublicHex: string, randomizerHex: string) => string;
+/** Generate a random 32-byte scalar usable as a FROST randomizer (tests only — the live path uses the PCZT's alpha). */
+export declare const orchardGenerateRandomizer: (wasm: OrchardFrostWasmModule) => string;
+/** Derive the (un-randomized) group verifying key from a group_public. */
+export declare const orchardGroupVerifyingKey: (wasm: OrchardFrostWasmModule, groupPublicHex: string) => string;
+//# sourceMappingURL=orchardFrost.d.ts.map

package/dist/cosign/orchardFrost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchardFrost.d.ts","sourceRoot":"","sources":["../../src/cosign/orchardFrost.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAI7C,MAAM,WAAW,sBAAsB;IACtC,uEAAuE;IACvE,kBAAkB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,MAAM,CAAC;IACzE,wEAAwE;IACxE,aAAa,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,MAAM,CAAC;IACpD,sEAAsE;IACtE,gBAAgB,EAAE,CACjB,cAAc,EAAE,MAAM,EACtB,gBAAgB,EAAE,MAAM,EACxB,UAAU,EAAE,MAAM,EAClB,gBAAgB,EAAE,MAAM,EACxB,iBAAiB,EAAE,MAAM,EACzB,oBAAoB,EAAE,MAAM,EAC5B,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,KAClB,MAAM,CAAC;IACZ,qEAAqE;IACrE,SAAS,EAAE,CACV,gBAAgB,EAAE,MAAM,EACxB,WAAW,EAAE,MAAM,EACnB,eAAe,EAAE,MAAM,EACvB,mBAAmB,EAAE,MAAM,EAC3B,gBAAgB,EAAE,MAAM,EACxB,cAAc,EAAE,MAAM,KAClB,MAAM,CAAC;IACZ,mBAAmB,EAAE,MAAM,MAAM,CAAC;IAClC,uBAAuB,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,MAAM,CAAC;IAC9D,uEAAuE;IACvE,6BAA6B,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,KAAK,MAAM,CAAC;IACjG,wCAAwC,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,KAAK,MAAM,CAAC;IAC5G,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,CAAC,gBAAgB,EAAE,MAAM,KAAK,MAAM,CAAC;IAC7D,sDAAsD;IACtD,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,GAAG,GAAG,GAAG,OAAO,GAAG,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACvF;AAID,MAAM,WAAW,eAAe;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACvC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,eAAe,CAAC;IACzB,gBAAgB,EAAE,uBAAuB,CAAC;IAC1C,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IACnC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IACxC,gBAAgB,EAAE,uBAAuB,CAAC;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACvC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,yEAAyE;AACzE,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAS7C;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,WAAY,YAAY,KAAG,QAAQ,sBAAsB,CA2BzF,CAAC;AAIF,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,SAC7B,sBAAsB,cAChB,MAAM,cACN,MAAM,KAChB,mBAkBF,CAAC;AAEF,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,SAAU,sBAAsB,kBAAkB,MAAM,KAAG,MAK5F,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,mBAAoB,MAAM,KAAG,OAO1E,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iCAAiC,SACvC,sBAAsB,cAChB,MAAM,cACN,MAAM,YACT;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,KAC/B,uBAqBF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,8BAA8B,SACpC,sBAAsB,UACpB,gBAAgB,KACtB,oBAAoB,GAAG,IAyBzB,CAAC;AAOF,MAAM,WAAW,eAAe;IAC/B,kEAAkE;IAClE,YAAY,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,SAAU,sBAAsB,kBAAkB,MAAM,KAAG,eAG1F,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,SAC3B,sBAAsB,iBACb,MAAM,kBACL,MAAM,aACX,MAAM,kBACD,MAAM,mBACL,MAAM,sBACH,MAAM,cACd,MAAM,iBACH,MAAM,KACnB,MAUD,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB,SACtB,sBAAsB,mBACX,MAAM,cACX,MAAM,iBACH,MAAM,qBACF,MAAM,kBACT,MAAM,iBACP,MAAM,KACnB,MAC0G,CAAC;AAE9G,wHAAwH;AACxH,eAAO,MAAM,yBAAyB,SAAU,sBAAsB,KAAG,MAAoC,CAAC;AAE9G,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB,SAAU,sBAAsB,kBAAkB,MAAM,KAAG,MACnD,CAAC"}