@winbit32/wallet-kit 0.1.0

package/dist/cosign/vaultShare.js

@@ -0,0 +1,157 @@
+"use strict";
+/**
+ * @fileoverview Loader for a single WINBIT32 vault co-signing share (`.wult`).
+ *
+ * Load ONE Orchard FROST share, then co-sign a shielded transaction with a
+ * WINBIT32 cosigner ("cosign.exe") on another device over the WB32COSIGN
+ * relay the NFPT API hosts at `/api/cosign`. Works in browsers and Node ≥ 18
+ * (atob/btoa + WebCrypto are global in both).
+ *
+ * The on-disk `.wult` format is owned by WINBIT32's `vaultWrapperFormat.js`.
+ * This module is a faithful, byte-compatible port of the *load* path so a
+ * share exported from WINBIT32 opens here unchanged:
+ *
+ *   {
+ *     "type": "winbit32-vault-v2",
+ *     "version": 2,
+ *     "vaultData": "<base64 Vultisig SDK protobuf export>",
+ *     "encrypted": <bool>,
+ *     "crossChainIdentity"?: { "hexChainCode", "publicKeyEcdsa" },
+ *     "frost": { "orchard"?: <JSON | "salt.iv.ct">, "sapling"?: ... }
+ *   }
+ *
+ * When `encrypted` is true each FROST payload is PBKDF2-SHA-256 (600k iters) →
+ * AES-GCM-256, packed as `base64(salt).base64(iv).base64(ciphertext)`. These
+ * parameters MUST match WINBIT32 exactly, hence the constants below are not
+ * configurable.
+ *
+ * Scope note: native Vultisig `.vult` files (Orchard via the SDK's
+ * `chainKeyShares`) need the Vultisig SDK + frozto WASM to unpack and are
+ * handled in a later phase; this loader covers the `.wult` wrapper only.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.__test_internals = exports.unwrapVaultShare = exports.isWrappedVault = exports.VAULT_V2_TYPE = void 0;
+// Must match WINBIT32 vaultWrapperFormat.js — do not change.
+exports.VAULT_V2_TYPE = 'winbit32-vault-v2';
+const FROST_KDF_ITER = 600000;
+// ─── base64 / binary helpers (match WINBIT32 exactly) ───────────────
+const b64Enc = (buf) => {
+    const bytes = buf instanceof Uint8Array ? buf : new Uint8Array(buf);
+    let bin = '';
+    for (let i = 0; i < bytes.length; i++)
+        bin += String.fromCharCode(bytes[i]);
+    return btoa(bin);
+};
+const b64Dec = (str) => {
+    const bin = atob(str);
+    const a = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        a[i] = bin.charCodeAt(i);
+    return a;
+};
+const getSubtle = () => {
+    const c = (typeof window !== 'undefined' ? window.crypto : globalThis.crypto);
+    if (!c || !c.subtle) {
+        throw new Error('Web Crypto API unavailable — a secure (HTTPS) context is required to open an encrypted share.');
+    }
+    return c.subtle;
+};
+const getRandomBytes = (n) => {
+    const c = (typeof window !== 'undefined' ? window.crypto : globalThis.crypto);
+    return c.getRandomValues(new Uint8Array(n));
+};
+// ─── PBKDF2 + AES-GCM payload encryption (match WINBIT32 exactly) ────
+const frostEncrypt = async (jsonStr, password) => {
+    const subtle = getSubtle();
+    const enc = new TextEncoder();
+    const salt = getRandomBytes(16);
+    const iv = getRandomBytes(12);
+    const km = await subtle.importKey('raw', enc.encode(password), 'PBKDF2', false, ['deriveKey']);
+    const key = await subtle.deriveKey({ name: 'PBKDF2', salt, iterations: FROST_KDF_ITER, hash: 'SHA-256' }, km, { name: 'AES-GCM', length: 256 }, false, ['encrypt']);
+    const ct = await subtle.encrypt({ name: 'AES-GCM', iv }, key, enc.encode(jsonStr));
+    return `${b64Enc(salt)}.${b64Enc(iv)}.${b64Enc(ct)}`;
+};
+const frostDecrypt = async (encoded, password) => {
+    const [sB, iB, cB] = encoded.split('.');
+    if (!sB || !iB || !cB)
+        throw new Error('Malformed encrypted share blob.');
+    const subtle = getSubtle();
+    const km = await subtle.importKey('raw', new TextEncoder().encode(password), 'PBKDF2', false, ['deriveKey']);
+    const key = await subtle.deriveKey({ name: 'PBKDF2', salt: b64Dec(sB), iterations: FROST_KDF_ITER, hash: 'SHA-256' }, km, { name: 'AES-GCM', length: 256 }, false, ['decrypt']);
+    let plain;
+    try {
+        plain = await subtle.decrypt({ name: 'AES-GCM', iv: b64Dec(iB) }, key, b64Dec(cB));
+    }
+    catch {
+        throw new Error('Incorrect password (could not decrypt the share).');
+    }
+    return new TextDecoder().decode(plain);
+};
+// ─── Public API ─────────────────────────────────────────────────────
+/** Cheap structural sniff for a `.wult` v2 wrapper (never throws). */
+const isWrappedVault = (content) => {
+    if (typeof content !== 'string' || content[0] !== '{')
+        return false;
+    try {
+        return JSON.parse(content)?.type === exports.VAULT_V2_TYPE;
+    }
+    catch {
+        return false;
+    }
+};
+exports.isWrappedVault = isWrappedVault;
+/**
+ * Load a `.wult` share, decrypting its FROST payloads when a password is set.
+ * Throws if the content isn't a v2 wrapper or the password is wrong.
+ *
+ * Individual payload decryption failures (e.g. a corrupt Sapling blob) leave
+ * that field null rather than aborting the whole load — matching WINBIT32 — so
+ * a usable Orchard share still opens.
+ */
+const unwrapVaultShare = async (content, password) => {
+    let obj;
+    try {
+        obj = JSON.parse(content);
+    }
+    catch {
+        throw new Error('This file is not a valid Winbit32 vault share.');
+    }
+    if (obj?.type !== exports.VAULT_V2_TYPE) {
+        throw new Error('Not a Winbit32 co-signing share (.wult).');
+    }
+    const encrypted = !!obj.encrypted;
+    if (encrypted && !password) {
+        throw new Error('This share is password-protected. Enter its password to open it.');
+    }
+    const result = {
+        sdkVaultString: obj.vaultData,
+        orchardFrost: null,
+        saplingBundleBase64: null,
+        crossChainIdentity: null,
+        encrypted,
+    };
+    if (obj.crossChainIdentity?.hexChainCode && obj.crossChainIdentity?.publicKeyEcdsa) {
+        result.crossChainIdentity = {
+            hexChainCode: obj.crossChainIdentity.hexChainCode,
+            publicKeyEcdsa: obj.crossChainIdentity.publicKeyEcdsa,
+        };
+    }
+    if (obj.frost?.orchard) {
+        const raw = (encrypted && password) ? await frostDecrypt(obj.frost.orchard, password) : obj.frost.orchard;
+        result.orchardFrost = typeof raw === 'string' ? JSON.parse(raw) : raw;
+    }
+    if (obj.frost?.sapling) {
+        try {
+            const raw = (encrypted && password) ? await frostDecrypt(obj.frost.sapling, password) : obj.frost.sapling;
+            result.saplingBundleBase64 = typeof raw === 'string' ? raw : null;
+        }
+        catch (err) {
+            console.warn('Sapling share extraction failed:', err instanceof Error ? err.message : err);
+        }
+    }
+    return result;
+};
+exports.unwrapVaultShare = unwrapVaultShare;
+// Exposed for tests only (build a fixture without a real WINBIT32 export).
+exports.__test_internals = { frostEncrypt, frostDecrypt };
+//# sourceMappingURL=vaultShare.js.map

package/dist/cosign/vaultShare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vaultShare.js","sourceRoot":"","sources":["../../src/cosign/vaultShare.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;;;AAEH,6DAA6D;AAChD,QAAA,aAAa,GAAG,mBAAmB,CAAC;AACjD,MAAM,cAAc,GAAG,MAAO,CAAC;AAuB/B,uEAAuE;AAEvE,MAAM,MAAM,GAAG,CAAC,GAA6B,EAAU,EAAE;IACxD,MAAM,KAAK,GAAG,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACpE,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,GAAW,EAAc,EAAE;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC;AACV,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,GAAiB,EAAE;IACpC,MAAM,CAAC,GAAG,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,UAAkB,CAAC,MAAM,CAAuB,CAAC;IAC7G,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;QACpB,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;KACjH;IACD,OAAO,CAAC,CAAC,MAAM,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,CAAS,EAAc,EAAE;IAChD,MAAM,CAAC,GAAG,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,UAAkB,CAAC,MAAM,CAAW,CAAC;IACjG,OAAO,CAAC,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,wEAAwE;AAExE,MAAM,YAAY,GAAG,KAAK,EAAE,OAAe,EAAE,QAAgB,EAAmB,EAAE;IACjF,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CACjC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,EACrE,EAAE,EACF,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,CAAC,CACX,CAAC;IACF,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;AACtD,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,KAAK,EAAE,OAAe,EAAE,QAAgB,EAAmB,EAAE;IACjF,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7G,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CACjC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,EACjF,EAAE,EACF,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,CAAC,CACX,CAAC;IACF,IAAI,KAAkB,CAAC;IACvB,IAAI;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;KACnF;IAAC,MAAM;QACP,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;KACrE;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF,uEAAuE;AAEvE,sEAAsE;AAC/D,MAAM,cAAc,GAAG,CAAC,OAAgB,EAAW,EAAE;IAC3D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACpE,IAAI;QACH,OAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,EAAE,IAAI,KAAK,qBAAa,CAAC;KAC1E;IAAC,MAAM;QACP,OAAO,KAAK,CAAC;KACb;AACF,CAAC,CAAC;AAPW,QAAA,cAAc,kBAOzB;AAEF;;;;;;;GAOG;AACI,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAe,EAAE,QAAiB,EAA6B,EAAE;IACvG,IAAI,GAAQ,CAAC;IACb,IAAI;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;KAC1B;IAAC,MAAM;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;KAClE;IACD,IAAI,GAAG,EAAE,IAAI,KAAK,qBAAa,EAAE;QAChC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;KAC5D;IAED,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IAClC,IAAI,SAAS,IAAI,CAAC,QAAQ,EAAE;QAC3B,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;KACpF;IAED,MAAM,MAAM,GAAqB;QAChC,cAAc,EAAE,GAAG,CAAC,SAAS;QAC7B,YAAY,EAAE,IAAI;QAClB,mBAAmB,EAAE,IAAI;QACzB,kBAAkB,EAAE,IAAI;QACxB,SAAS;KACT,CAAC;IAEF,IAAI,GAAG,CAAC,kBAAkB,EAAE,YAAY,IAAI,GAAG,CAAC,kBAAkB,EAAE,cAAc,EAAE;QACnF,MAAM,CAAC,kBAAkB,GAAG;YAC3B,YAAY,EAAE,GAAG,CAAC,kBAAkB,CAAC,YAAY;YACjD,cAAc,EAAE,GAAG,CAAC,kBAAkB,CAAC,cAAc;SACrD,CAAC;KACF;IAED,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;QACvB,MAAM,GAAG,GAAG,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1G,MAAM,CAAC,YAAY,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;KACtE;IAED,IAAI,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;QACvB,IAAI;YACH,MAAM,GAAG,GAAG,CAAC,SAAS,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAC1G,MAAM,CAAC,mBAAmB,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;SAClE;QAAC,OAAO,GAAG,EAAE;YACb,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SAC3F;KACD;IAED,OAAO,MAAM,CAAC;AACf,CAAC,CAAC;AA9CW,QAAA,gBAAgB,oBA8C3B;AAEF,2EAA2E;AAC9D,QAAA,gBAAgB,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @winbit32/wallet-kit — embeddable Zcash + Monero wallet primitives.
+ *
+ * Extraction roadmap (see WINBIT32/project_outline.md, "Wallet-kit split
+ * + MCP payments processor"): scanner clients (done) → cosign
+ * (WB32COSIGN) client incl. headless initiator (done) → shielded
+ * send/scan core (mnemonic path) → MCP payment tools (payments-gateway).
+ */
+export { DEV_SCANNER_PROXY_BASE, PRODUCTION_SCANNER_BASE, resolveWalletScannerBaseUrl, } from './scanner/baseUrl';
+export { createWalletScannerClient, } from './scanner/zcashScannerClient';
+export type { WalletScannerClientConfig, WalletScannerClientType, } from './scanner/zcashScannerClient';
+export { createMoneroWalletScannerClient, mapScannerBalanceToSnapshot, resolveMoneroScannerBaseUrl, isMoneroBalanceViaScannerEnabled, } from './scanner/moneroScannerClient';
+export type { MoneroWalletScannerClientConfig, MoneroScannerBalanceWire, MoneroScannerJobWire, MoneroWalletScannerClientType, } from './scanner/moneroScannerClient';
+export type { MoneroBalanceSnapshot } from './monero/types';
+export * from './cosign/index';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EACN,sBAAsB,EACtB,uBAAuB,EACvB,2BAA2B,GAC3B,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EACN,yBAAyB,GACzB,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACX,yBAAyB,EACzB,uBAAuB,GACvB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,EACN,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,gCAAgC,GAChC,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACX,+BAA+B,EAC/B,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,GAC7B,MAAM,+BAA+B,CAAC;AAGvC,YAAY,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAI5D,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,43 @@
+"use strict";
+/**
+ * @winbit32/wallet-kit — embeddable Zcash + Monero wallet primitives.
+ *
+ * Extraction roadmap (see WINBIT32/project_outline.md, "Wallet-kit split
+ * + MCP payments processor"): scanner clients (done) → cosign
+ * (WB32COSIGN) client incl. headless initiator (done) → shielded
+ * send/scan core (mnemonic path) → MCP payment tools (payments-gateway).
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isMoneroBalanceViaScannerEnabled = exports.resolveMoneroScannerBaseUrl = exports.mapScannerBalanceToSnapshot = exports.createMoneroWalletScannerClient = exports.createWalletScannerClient = exports.resolveWalletScannerBaseUrl = exports.PRODUCTION_SCANNER_BASE = exports.DEV_SCANNER_PROXY_BASE = void 0;
+// Scanner base-URL resolution (dev proxy vs production API host).
+var baseUrl_1 = require("./scanner/baseUrl");
+Object.defineProperty(exports, "DEV_SCANNER_PROXY_BASE", { enumerable: true, get: function () { return baseUrl_1.DEV_SCANNER_PROXY_BASE; } });
+Object.defineProperty(exports, "PRODUCTION_SCANNER_BASE", { enumerable: true, get: function () { return baseUrl_1.PRODUCTION_SCANNER_BASE; } });
+Object.defineProperty(exports, "resolveWalletScannerBaseUrl", { enumerable: true, get: function () { return baseUrl_1.resolveWalletScannerBaseUrl; } });
+// Zcash Orchard scan-job + UTXO + broadcast client.
+var zcashScannerClient_1 = require("./scanner/zcashScannerClient");
+Object.defineProperty(exports, "createWalletScannerClient", { enumerable: true, get: function () { return zcashScannerClient_1.createWalletScannerClient; } });
+// Monero LWS scan-job client.
+var moneroScannerClient_1 = require("./scanner/moneroScannerClient");
+Object.defineProperty(exports, "createMoneroWalletScannerClient", { enumerable: true, get: function () { return moneroScannerClient_1.createMoneroWalletScannerClient; } });
+Object.defineProperty(exports, "mapScannerBalanceToSnapshot", { enumerable: true, get: function () { return moneroScannerClient_1.mapScannerBalanceToSnapshot; } });
+Object.defineProperty(exports, "resolveMoneroScannerBaseUrl", { enumerable: true, get: function () { return moneroScannerClient_1.resolveMoneroScannerBaseUrl; } });
+Object.defineProperty(exports, "isMoneroBalanceViaScannerEnabled", { enumerable: true, get: function () { return moneroScannerClient_1.isMoneroBalanceViaScannerEnabled; } });
+// WB32COSIGN co-signing client: .wult share loading, Orchard FROST engine
+// bridge, relay/QR ceremony, and the headless send pipeline.
+__exportStar(require("./cosign/index"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;AAEH,kEAAkE;AAClE,6CAI2B;AAH1B,iHAAA,sBAAsB,OAAA;AACtB,kHAAA,uBAAuB,OAAA;AACvB,sHAAA,2BAA2B,OAAA;AAG5B,oDAAoD;AACpD,mEAEsC;AADrC,+HAAA,yBAAyB,OAAA;AAO1B,8BAA8B;AAC9B,qEAKuC;AAJtC,sIAAA,+BAA+B,OAAA;AAC/B,kIAAA,2BAA2B,OAAA;AAC3B,kIAAA,2BAA2B,OAAA;AAC3B,uIAAA,gCAAgC,OAAA;AAYjC,0EAA0E;AAC1E,6DAA6D;AAC7D,iDAA+B"}

package/dist/monero/types.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Monero balance/scan wire types shared between the wallet-kit scanner
+ * client and host-app account logic (Winbit32's `moneroAccount.ts`
+ * re-exports {@link MoneroBalanceSnapshot} from here so there is one
+ * source of truth).
+ */
+export interface MoneroBalanceSnapshot {
+    /**
+     * `info.total_received - info.total_sent`. Can go *negative* when
+     * LWS flags ring-decoy hits as spends and the wallet hasn't
+     * scanned the matching receives (or never received them at all).
+     * Kept for callers that want the raw LWS arithmetic; the receive
+     * UI prefers {@link receivedAtomic} which is always >= 0.
+     */
+    totalAtomic: bigint;
+    /**
+     * `info.total_received` — every output LWS has detected for this
+     * view key. Never negative. Used as the headline "Total received"
+     * figure in the receive panel because it doesn't get poisoned by
+     * LWS's spend-detection false positives (see
+     * {@link lwsObservedSpentAtomic}).
+     */
+    receivedAtomic: bigint;
+    /**
+     * `info.total_sent` — the sum of every output amount LWS has ever
+     * seen referenced in a transaction's input ring that touches one
+     * of this wallet's known outputs.
+     *
+     * IMPORTANT: monero-lws cannot distinguish a real spend from a
+     * ring-decoy hit because the spend-detection path matches on
+     * `(amount, global_offset)` rather than computing the real key
+     * image. Wallets whose outputs are popular ring members will see
+     * this figure climb far above their actual outgoing volume — that
+     * is the root cause of the "negative balance" reports in the
+     * receive panel. Use this strictly as a diagnostic; the trusted
+     * source for spendable funds is {@link spendableAtomic} (which
+     * tracks what the LWS believes is unspent after its own filter).
+     */
+    lwsObservedSpentAtomic: bigint;
+    /** Confirmed, currently locked funds (e.g. coinbase outputs). */
+    lockedAtomic: bigint;
+    /** Pending outgoing (sent but not yet mined) — derived from history. */
+    pendingOutAtomic: bigint;
+    /** Pending incoming — derived from mempool transactions if present. */
+    pendingInAtomic: bigint;
+    /**
+     * Spendable balance — sum of `/get_unspent_outs` outputs after the
+     * host app's key-image filter (`MoneroAccount.filterSpentByKeyImage`
+     * for 1-of-1 wallets), minus locked and pending outgoing. NFPT
+     * scanner jobs only have the view key; the host's
+     * `applySpendableOverlay` patches their spendable figure in the
+     * browser. Falls back to arithmetic only when the unspent query
+     * fails.
+     */
+    spendableAtomic: bigint;
+    /** Scan progress as a 0–1 fraction; 1 means caught up with monerod. */
+    scanProgress: number;
+    /** LWS-reported chain head height. */
+    chainHeight: number;
+    /** Block height the LWS has scanned this account to. */
+    scannedHeight: number;
+    /**
+     * Earliest block the LWS scanned for this account. By default a
+     * freshly-registered view key starts at the current chain tip,
+     * but `/import_wallet_request` can shift it back. Surfaced so the
+     * receive panel can prompt users to rescan older blocks when an
+     * imported phrase shows zero balance.
+     */
+    startHeight: number;
+    /** Block height of the most recent transaction touching this account. */
+    transactionHeight: number;
+    /** Exchange rates served by the LWS, if `--exchange-rate-interval` is on. */
+    rates?: Record<string, number>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/monero/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/monero/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,qBAAqB;IACrC;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;OAcG;IACH,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,eAAe,EAAE,MAAM,CAAC;IACxB;;;;;;;;OAQG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B"}

package/dist/monero/types.js

@@ -0,0 +1,9 @@
+"use strict";
+/**
+ * Monero balance/scan wire types shared between the wallet-kit scanner
+ * client and host-app account logic (Winbit32's `moneroAccount.ts`
+ * re-exports {@link MoneroBalanceSnapshot} from here so there is one
+ * source of truth).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/monero/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/monero/types.ts"],"names":[],"mappings":";AAAA;;;;;GAKG"}

package/dist/scanner/baseUrl.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Canonical NFPT wallet-scanner base-URL resolution.
+ *
+ * One resolver for every consumer of the NFPT-hosted scanner API
+ * (Zcash Orchard scan jobs, Monero LWS scan jobs, the Money Manager NFPT
+ * viewer):
+ *
+ *   - Dev (`localhost:3000`): same-origin `/api`, so the host app's dev
+ *     proxy (Winbit32's `setupProxy.js`) forwards the path (e.g.
+ *     `/api/wallet-scanner`, `/api/nfpt`) to the API host with no
+ *     cross-origin preflight.
+ *   - Production: bundles are typically served from a different host
+ *     than the API, so a same-origin `/api/...` path has no route.
+ *     Target the public API host directly; its nginx is CORS-open and
+ *     injects the upstream X-API-Key, so browsers need no key.
+ *
+ * `REACT_APP_WALLET_SCANNER_URL` overrides both (staging/test hosts).
+ * Embedders not using CRA-style env injection can simply pass an
+ * explicit `baseUrl` to the client factories instead.
+ */
+export declare const DEV_SCANNER_PROXY_BASE = "/api";
+export declare const PRODUCTION_SCANNER_BASE = "https://api.zcash.winbit32.com/api";
+export declare function resolveWalletScannerBaseUrl(): string;
+//# sourceMappingURL=baseUrl.d.ts.map

package/dist/scanner/baseUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseUrl.d.ts","sourceRoot":"","sources":["../../src/scanner/baseUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,eAAO,MAAM,uBAAuB,uCAAuC,CAAC;AAE5E,wBAAgB,2BAA2B,IAAI,MAAM,CAMpD"}

package/dist/scanner/baseUrl.js

@@ -0,0 +1,35 @@
+"use strict";
+/**
+ * Canonical NFPT wallet-scanner base-URL resolution.
+ *
+ * One resolver for every consumer of the NFPT-hosted scanner API
+ * (Zcash Orchard scan jobs, Monero LWS scan jobs, the Money Manager NFPT
+ * viewer):
+ *
+ *   - Dev (`localhost:3000`): same-origin `/api`, so the host app's dev
+ *     proxy (Winbit32's `setupProxy.js`) forwards the path (e.g.
+ *     `/api/wallet-scanner`, `/api/nfpt`) to the API host with no
+ *     cross-origin preflight.
+ *   - Production: bundles are typically served from a different host
+ *     than the API, so a same-origin `/api/...` path has no route.
+ *     Target the public API host directly; its nginx is CORS-open and
+ *     injects the upstream X-API-Key, so browsers need no key.
+ *
+ * `REACT_APP_WALLET_SCANNER_URL` overrides both (staging/test hosts).
+ * Embedders not using CRA-style env injection can simply pass an
+ * explicit `baseUrl` to the client factories instead.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveWalletScannerBaseUrl = exports.PRODUCTION_SCANNER_BASE = exports.DEV_SCANNER_PROXY_BASE = void 0;
+exports.DEV_SCANNER_PROXY_BASE = '/api';
+exports.PRODUCTION_SCANNER_BASE = 'https://api.zcash.winbit32.com/api';
+function resolveWalletScannerBaseUrl() {
+    const explicit = (typeof process !== 'undefined' && process.env?.REACT_APP_WALLET_SCANNER_URL) || '';
+    if (explicit)
+        return explicit.replace(/\/$/, '');
+    const isProduction = typeof process !== 'undefined'
+        && process.env?.NODE_ENV === 'production';
+    return (isProduction ? exports.PRODUCTION_SCANNER_BASE : exports.DEV_SCANNER_PROXY_BASE).replace(/\/$/, '');
+}
+exports.resolveWalletScannerBaseUrl = resolveWalletScannerBaseUrl;
+//# sourceMappingURL=baseUrl.js.map

package/dist/scanner/baseUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseUrl.js","sourceRoot":"","sources":["../../src/scanner/baseUrl.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;AAEU,QAAA,sBAAsB,GAAG,MAAM,CAAC;AAChC,QAAA,uBAAuB,GAAG,oCAAoC,CAAC;AAE5E,SAAgB,2BAA2B;IAC1C,MAAM,QAAQ,GAAG,CAAC,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,4BAA4B,CAAC,IAAI,EAAE,CAAC;IACrG,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,YAAY,GAAG,OAAO,OAAO,KAAK,WAAW;WAC/C,OAAO,CAAC,GAAG,EAAE,QAAQ,KAAK,YAAY,CAAC;IAC3C,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,+BAAuB,CAAC,CAAC,CAAC,8BAAsB,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC7F,CAAC;AAND,kEAMC"}

package/dist/scanner/moneroScannerClient.d.ts

@@ -0,0 +1,97 @@
+/**
+ * NFPT wallet-scanner client for Monero LWS balance / scan jobs.
+ *
+ * Mirrors Zcash's orchard scan job flow: the browser polls NFPT every
+ * few seconds instead of hammering monero-lws directly.
+ *
+ * - POST /wallet-scanner/monero/scan/job
+ * - GET  /wallet-scanner/monero/scan/job/{jobId}
+ * - DELETE /wallet-scanner/monero/scan/job/{jobId}
+ */
+import type { MoneroBalanceSnapshot } from '../monero/types';
+export interface MoneroWalletScannerClientConfig {
+    baseUrl?: string;
+    apiKey?: string;
+}
+/** Wire balance from NFPT (atomic values as decimal strings). */
+export interface MoneroScannerBalanceWire {
+    totalAtomic: string;
+    /**
+     * Added in WINBIT32 ≥ v0.x to surface `info.total_received`
+     * separately from `total - sent`. Older NFPT builds omit it —
+     * the mapper below back-fills from `totalAtomic` so the snapshot
+     * still satisfies {@link MoneroBalanceSnapshot}.
+     */
+    receivedAtomic?: string;
+    /** `info.total_sent` (LWS-detected outgoing volume incl. ring decoys). */
+    lwsObservedSpentAtomic?: string;
+    lockedAtomic: string;
+    pendingInAtomic: string;
+    pendingOutAtomic: string;
+    spendableAtomic: string;
+    scanProgress: number;
+    chainHeight: number;
+    scannedHeight: number;
+    startHeight: number;
+    transactionHeight: number;
+    rates?: Record<string, number>;
+}
+export interface MoneroScannerJobWire {
+    jobId: string;
+    status: 'running' | 'completed' | 'failed' | 'cancelled';
+    startedAt?: string;
+    finishedAt?: string | null;
+    error?: string | null;
+    progress?: {
+        scannedHeight: number;
+        chainHeight: number;
+        scanProgress: number;
+        percentComplete: number;
+        startHeight?: number;
+    };
+    balance: MoneroScannerBalanceWire | null;
+}
+export declare function mapScannerBalanceToSnapshot(b: MoneroScannerBalanceWire): MoneroBalanceSnapshot;
+/**
+ * Kept as the monero-local name for existing callers/tests; resolution
+ * itself lives in the shared {@link resolveWalletScannerBaseUrl} (dev
+ * same-origin proxy vs production api.zcash.winbit32.com — see that
+ * module for the live-bug rationale).
+ */
+export declare function resolveMoneroScannerBaseUrl(): string;
+export declare function isMoneroBalanceViaScannerEnabled(): boolean;
+export declare const createMoneroWalletScannerClient: (config?: MoneroWalletScannerClientConfig) => {
+    startMoneroScanJob: (body: {
+        address: string;
+        viewKey: string;
+        fromHeight?: number;
+    }) => Promise<{
+        success: boolean;
+        data?: {
+            jobId: string;
+            jobToken: string;
+        } | undefined;
+        error?: string | undefined;
+    }>;
+    getMoneroScanJob: (jobId: string, auth: {
+        jobToken?: string;
+        apiKey?: string;
+    }) => Promise<{
+        success: boolean;
+        data?: {
+            job: MoneroScannerJobWire;
+        } | undefined;
+        error?: string | undefined;
+    }>;
+    cancelMoneroScanJob: (jobId: string, auth: {
+        jobToken?: string;
+        apiKey?: string;
+    }) => Promise<{
+        success: boolean;
+        data?: {
+            cancelled: boolean;
+        } | undefined;
+    }>;
+};
+export type MoneroWalletScannerClientType = ReturnType<typeof createMoneroWalletScannerClient>;
+//# sourceMappingURL=moneroScannerClient.d.ts.map

package/dist/scanner/moneroScannerClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"moneroScannerClient.d.ts","sourceRoot":"","sources":["../../src/scanner/moneroScannerClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG7D,MAAM,WAAW,+BAA+B;IAC/C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAkBD,iEAAiE;AACjE,MAAM,WAAW,wBAAwB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE;QACV,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAAC;CACzC;AAED,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,wBAAwB,GAAG,qBAAqB,CA6B9F;AAED;;;;;GAKG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,CAEpD;AAED,wBAAgB,gCAAgC,IAAI,OAAO,CAK1D;AAED,eAAO,MAAM,+BAA+B,YACnC,+BAA+B;+BAYL;QAChC,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,CAAC,EAAE,MAAM,CAAC;KACpB;iBAOU,OAAO;;mBACA,MAAM;sBAAY,MAAM;;;;8BAKV,MAAM,QAAQ;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;iBASzE,OAAO;;iBACF,oBAAoB;;;;iCAKD,MAAM,QAAQ;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE;iBAQjD,OAAO;;uBAAsB,OAAO;;;CAG3E,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG,UAAU,CAAC,OAAO,+BAA+B,CAAC,CAAC"}

package/dist/scanner/moneroScannerClient.js

@@ -0,0 +1,125 @@
+"use strict";
+/**
+ * NFPT wallet-scanner client for Monero LWS balance / scan jobs.
+ *
+ * Mirrors Zcash's orchard scan job flow: the browser polls NFPT every
+ * few seconds instead of hammering monero-lws directly.
+ *
+ * - POST /wallet-scanner/monero/scan/job
+ * - GET  /wallet-scanner/monero/scan/job/{jobId}
+ * - DELETE /wallet-scanner/monero/scan/job/{jobId}
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMoneroWalletScannerClient = exports.isMoneroBalanceViaScannerEnabled = exports.resolveMoneroScannerBaseUrl = exports.mapScannerBalanceToSnapshot = void 0;
+const baseUrl_1 = require("./baseUrl");
+async function handleJsonResponse(res) {
+    let payload = null;
+    try {
+        payload = await res.json();
+    }
+    catch {
+        throw new Error(`Invalid JSON response (status ${res.status})`);
+    }
+    if (!res.ok) {
+        const msg = payload?.error
+            || payload?.message
+            || `HTTP ${res.status}`;
+        throw new Error(msg);
+    }
+    return payload;
+}
+function mapScannerBalanceToSnapshot(b) {
+    const totalAtomic = BigInt(b.totalAtomic || '0');
+    // Back-fill the receive/spend split from `totalAtomic` for legacy
+    // NFPT builds that don't surface the fields explicitly. Positive
+    // total → assume all receipts, no observed spends; negative total
+    // → assume the absolute value is observed spends with no receipts.
+    // Real LWS polls overwrite this in seconds, so the back-fill only
+    // matters for the very first NFPT response after a job start.
+    const receivedAtomic = b.receivedAtomic != null
+        ? BigInt(b.receivedAtomic)
+        : (totalAtomic > 0n ? totalAtomic : 0n);
+    const lwsObservedSpentAtomic = b.lwsObservedSpentAtomic != null
+        ? BigInt(b.lwsObservedSpentAtomic)
+        : (totalAtomic < 0n ? -totalAtomic : 0n);
+    return {
+        totalAtomic,
+        receivedAtomic,
+        lwsObservedSpentAtomic,
+        lockedAtomic: BigInt(b.lockedAtomic || '0'),
+        pendingInAtomic: BigInt(b.pendingInAtomic || '0'),
+        pendingOutAtomic: BigInt(b.pendingOutAtomic || '0'),
+        spendableAtomic: BigInt(b.spendableAtomic || '0'),
+        scanProgress: b.scanProgress ?? 0,
+        chainHeight: b.chainHeight ?? 0,
+        scannedHeight: b.scannedHeight ?? 0,
+        startHeight: b.startHeight ?? 0,
+        transactionHeight: b.transactionHeight ?? 0,
+        rates: b.rates,
+    };
+}
+exports.mapScannerBalanceToSnapshot = mapScannerBalanceToSnapshot;
+/**
+ * Kept as the monero-local name for existing callers/tests; resolution
+ * itself lives in the shared {@link resolveWalletScannerBaseUrl} (dev
+ * same-origin proxy vs production api.zcash.winbit32.com — see that
+ * module for the live-bug rationale).
+ */
+function resolveMoneroScannerBaseUrl() {
+    return (0, baseUrl_1.resolveWalletScannerBaseUrl)();
+}
+exports.resolveMoneroScannerBaseUrl = resolveMoneroScannerBaseUrl;
+function isMoneroBalanceViaScannerEnabled() {
+    if (typeof process !== 'undefined' && process.env?.REACT_APP_MONERO_BALANCE_VIA_SCANNER === 'false') {
+        return false;
+    }
+    return true;
+}
+exports.isMoneroBalanceViaScannerEnabled = isMoneroBalanceViaScannerEnabled;
+const createMoneroWalletScannerClient = (config = {}) => {
+    const baseUrl = (config.baseUrl || resolveMoneroScannerBaseUrl()).replace(/\/$/, '');
+    const withHeaders = (extra) => {
+        const headers = { 'Content-Type': 'application/json' };
+        if (config.apiKey)
+            headers['X-API-Key'] = config.apiKey;
+        if (extra)
+            Object.assign(headers, extra);
+        return headers;
+    };
+    return {
+        startMoneroScanJob: async (body) => {
+            const res = await fetch(`${baseUrl}/wallet-scanner/monero/scan/job`, {
+                method: 'POST',
+                headers: withHeaders(),
+                body: JSON.stringify(body),
+            });
+            return handleJsonResponse(res);
+        },
+        getMoneroScanJob: async (jobId, auth) => {
+            const headers = withHeaders();
+            if (auth.jobToken)
+                headers['X-Job-Token'] = auth.jobToken;
+            if (auth.apiKey)
+                headers['X-API-Key'] = auth.apiKey;
+            const res = await fetch(`${baseUrl}/wallet-scanner/monero/scan/job/${jobId}`, {
+                method: 'GET',
+                headers,
+            });
+            return handleJsonResponse(res);
+        },
+        cancelMoneroScanJob: async (jobId, auth) => {
+            const headers = withHeaders();
+            if (auth.jobToken)
+                headers['X-Job-Token'] = auth.jobToken;
+            if (auth.apiKey)
+                headers['X-API-Key'] = auth.apiKey;
+            const res = await fetch(`${baseUrl}/wallet-scanner/monero/scan/job/${jobId}`, {
+                method: 'DELETE',
+                headers,
+            });
+            return handleJsonResponse(res);
+        },
+    };
+};
+exports.createMoneroWalletScannerClient = createMoneroWalletScannerClient;
+//# sourceMappingURL=moneroScannerClient.js.map

package/dist/scanner/moneroScannerClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"moneroScannerClient.js","sourceRoot":"","sources":["../../src/scanner/moneroScannerClient.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAGH,uCAAwD;AAOxD,KAAK,UAAU,kBAAkB,CAAI,GAAa;IACjD,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,IAAI;QACH,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;KAC3B;IAAC,MAAM;QACP,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;KAChE;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;QACZ,MAAM,GAAG,GAAI,OAAgD,EAAE,KAAK;eAC/D,OAAgC,EAAE,OAAO;eAC1C,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;KACrB;IACD,OAAO,OAAY,CAAC;AACrB,CAAC;AA0CD,SAAgB,2BAA2B,CAAC,CAA2B;IACtE,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC,CAAC;IACjD,kEAAkE;IAClE,iEAAiE;IACjE,kEAAkE;IAClE,mEAAmE;IACnE,kEAAkE;IAClE,8DAA8D;IAC9D,MAAM,cAAc,GAAG,CAAC,CAAC,cAAc,IAAI,IAAI;QAC9C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;QAC1B,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzC,MAAM,sBAAsB,GAAG,CAAC,CAAC,sBAAsB,IAAI,IAAI;QAC9D,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAClC,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,OAAO;QACN,WAAW;QACX,cAAc;QACd,sBAAsB;QACtB,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,CAAC;QAC3C,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,IAAI,GAAG,CAAC;QACjD,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,IAAI,GAAG,CAAC;QACnD,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,IAAI,GAAG,CAAC;QACjD,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC;QACjC,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC;QAC/B,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,CAAC;QACnC,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC;QAC/B,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,CAAC;QAC3C,KAAK,EAAE,CAAC,CAAC,KAAK;KACd,CAAC;AACH,CAAC;AA7BD,kEA6BC;AAED;;;;;GAKG;AACH,SAAgB,2BAA2B;IAC1C,OAAO,IAAA,qCAA2B,GAAE,CAAC;AACtC,CAAC;AAFD,kEAEC;AAED,SAAgB,gCAAgC;IAC/C,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,oCAAoC,KAAK,OAAO,EAAE;QACpG,OAAO,KAAK,CAAC;KACb;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AALD,4EAKC;AAEM,MAAM,+BAA+B,GAAG,CAC9C,SAA0C,EAAE,EAC3C,EAAE;IACH,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,2BAA2B,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAErF,MAAM,WAAW,GAAG,CAAC,KAA8B,EAAE,EAAE;QACtD,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACxD,IAAI,KAAK;YAAE,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,OAAO,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO;QACN,kBAAkB,EAAE,KAAK,EAAE,IAI1B,EAAE,EAAE;YACJ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,iCAAiC,EAAE;gBACpE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,WAAW,EAAE;gBACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC1B,CAAC,CAAC;YACH,OAAO,kBAAkB,CAItB,GAAG,CAAC,CAAC;QACT,CAAC;QAED,gBAAgB,EAAE,KAAK,EAAE,KAAa,EAAE,IAA4C,EAAE,EAAE;YACvF,MAAM,OAAO,GAA2B,WAAW,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC1D,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mCAAmC,KAAK,EAAE,EAAE;gBAC7E,MAAM,EAAE,KAAK;gBACb,OAAO;aACP,CAAC,CAAC;YACH,OAAO,kBAAkB,CAItB,GAAG,CAAC,CAAC;QACT,CAAC;QAED,mBAAmB,EAAE,KAAK,EAAE,KAAa,EAAE,IAA4C,EAAE,EAAE;YAC1F,MAAM,OAAO,GAA2B,WAAW,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,QAAQ;gBAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC1D,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,mCAAmC,KAAK,EAAE,EAAE;gBAC7E,MAAM,EAAE,QAAQ;gBAChB,OAAO;aACP,CAAC,CAAC;YACH,OAAO,kBAAkB,CAAsD,GAAG,CAAC,CAAC;QACrF,CAAC;KACD,CAAC;AACH,CAAC,CAAC;AAxDW,QAAA,+BAA+B,mCAwD1C"}