bch-rpa 0.0.0-stage → 1.1.0

package/CHANGELOG.md

@@ -0,0 +1,41 @@
+# Changelog
+
+## 1.1.0 (2026-10-27)
+
+### Migration
+
+- Only `cashcode:` and `cashcodetest:` are accepted. CashCodes use compressed one-time public keys and are incompatible with legacy uncompressed-key PayCodes; changing a prefix does not convert between variants.
+- New wallets default to `/3/0` scan and `/3/1` spend. Existing wallets must retain their original derivation paths to recover earlier payments. For wallets created with the former `/2` default, use `deriveRpaKeys(accountNode, { chainIndex: 2 })`.
+
+### Fixed
+
+- Match RPA outputs by decoded locking scripts rather than address strings, including equivalent token-aware CashAddresses
+- Use `cashcode:` and `cashcodetest:` wire prefixes for mainnet and testnet paycodes
+- Encode CashCode payloads without an extra CashAddr format-version byte
+- Preserve display-order outpoint transaction hashes and reconstruct wire-order serialized inputs when parsing raw transactions
+- Use Selene's agreed RPA derivation chain 3 for scan and spend keys
+- Enforce the sender's one-week minimum paycode expiry window
+- Scan every consecutive RPA payment output rather than stopping after ten child indices
+- Reject invalid paycodes, prefix sizes, outpoint indices, expiry values, and designated-input counts
+
+### Documentation
+
+- State that CashCodes use compressed one-time public keys and are intentionally incompatible with the legacy uncompressed-key `paycode:` / `paycodetest:` variant; remove misleading Electron Cash interoperability claims
+- Define CashCodes as token-aware destinations for BCH, fungible CashTokens, and NFTs, with token accounting and transaction construction owned by the integrating wallet
+- Clarify that scan network flags format returned addresses and do not affect locking-script ownership matching
+
+## 1.0.0 (2026-02-14)
+
+Initial stable release.
+
+### Features
+
+- **Paycode generation, encoding, and decoding** — P2PKH paycodes (versions 1/5) with configurable prefix size and optional expiry
+- **Sender flow** — `prepareSend()` derives one-time payment addresses from a static paycode via ECDH + CKDpub
+- **Receiver scanning** — Fulcrum-backed primary path (`tryTransaction`) and self-scan fallback (`scanTransaction`) with prefix matching
+- **Spending key derivation** — `deriveSpendingKey()` recovers the private key for matched one-time addresses
+- **HD wallet integration** — `deriveRpaKeys()` derives scan/spend keypairs from a BIP44 account node (chain 2, indices 0/1)
+- **Prefix grinding** — optional `@noble/secp256k1` peer dependency for signature grinding to match paycode prefixes
+- **Transaction parsing** — handles both Fulcrum verbose JSON and raw hex formats
+- **Mainnet and testnet** — network-specific encoding and automatic address prefix selection
+- **Shared-secret vectors** — tested shared-secret computation, including the 257-bit overflow edge case; these checks do not establish interoperability with legacy PayCode payments

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 bch-rpa contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,97 @@
-# Temporary Holding Version
+# bch-rpa
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+TypeScript library for Bitcoin Cash Reusable Payment Addresses (RPA). Share one CashCode; senders derive fresh one-time payment destinations, and the recipient detects payments and derives their spending keys.
+
+- `cashcode:` — mainnet.
+- `cashcodetest:` — testnet / chipnet.
+- **Both imply support for receiving and spending BCH, fungible CashTokens, and NFTs.**
+
+**CashCodes use compressed public keys, including the one-time public key hashed into each payment address. They are intentionally incompatible with the legacy uncompressed-key `paycode:` / `paycodetest:` variant.** This library rejects both legacy prefixes. Changing a prefix does not convert between variants.
+
+Built on [`@bitauth/libauth`](https://github.com/bitauth/libauth). The library handles encoding, key derivation, scanning, and signature grinding. Your wallet handles networking, transaction construction, validation, UTXOs, and token accounting.
+
+## Install
+
+```bash
+pnpm add bch-rpa
+```
+
+ESM only; Node.js 18+ or a modern browser. Sending to a CashCode with a nonzero scan prefix also requires:
+
+```bash
+pnpm add @noble/secp256k1@2
+```
+
+## Usage
+
+The examples assume your wallet already has keys, transaction inputs, and a source of raw transactions. Public API names retain the term `Paycode`.
+
+### Create a CashCode
+
+```typescript
+import { deriveRpaKeys, generatePaycode, encodePaycode } from 'bch-rpa';
+
+const keys = deriveRpaKeys(accountNode);
+const paycode = generatePaycode(keys.scanPubkey, keys.spendPubkey, {
+  prefixSize: 8,
+});
+const cashCode = encodePaycode(paycode);
+```
+
+Share `cashCode`; keep the private keys private. The default derivation paths are the account's `/3/0` scan key and `/3/1` spend key. Use `{ testnet: true }` when generating a testnet / chipnet CashCode.
+
+### Derive a payment destination
+
+```typescript
+import { decodePaycode, prepareSend } from 'bch-rpa';
+
+const [payment] = prepareSend(decodePaycode(recipientCashCode), {
+  privkey: inputPrivateKey,
+  outpointTxid: inputTxid,
+  outpointIndex: inputOutputIndex,
+});
+
+// Build a transaction output paying payment.address.
+```
+
+The designated P2PKH input must remain among the transaction's first 30 inputs. For nonzero scan prefixes, use [`grindPrefix()`](https://gitlab.com/selene.cash/bch-rpa/-/blob/v1.1.0/docs/INTEGRATION.md#grinding) when signing that input. The wallet then broadcasts the transaction.
+
+### Detect received payments
+
+Fetch candidates using Fulcrum's `blockchain.rpa.get_history` and `blockchain.rpa.get_mempool`, then retrieve each raw transaction with `blockchain.transaction.get`:
+
+```typescript
+import { parseRawTransaction, tryTransaction, deriveSpendingKey } from 'bch-rpa';
+
+const tx = parseRawTransaction(rawTxHex);
+const matches = tryTransaction(tx, keys.scanPrivkey, keys.spendPubkey);
+
+for (const match of matches) {
+  match.outputIndices.forEach((outputIndex, childIndex) => {
+    const spendingKey = deriveSpendingKey(
+      keys.spendPrivkey, match.sharedSecret, childIndex,
+    );
+    // spendingKey controls tx.txid:outputIndex.
+  });
+}
+```
+
+Check unspent status before counting or spending matched outputs. Without an RPA indexer, use `scanTransaction()` to perform prefix filtering locally.
+
+## Integration notes
+
+- **Tokens:** BCH-only and token-bearing outputs use the same derived locking scripts and spending keys. Keep token categories, amounts, NFT details, and token change in the wallet. The parsers return only a scanning projection; output `value` is BCH in satoshis.
+- **Addresses:** Scanning compares decoded locking scripts, so ordinary and token-aware CashAddr encodings match identically. If an address-based token-sending API requires a token-aware CashAddr, re-encode the derived destination's script accordingly.
+- **Networks:** `prepareSend()` selects address formatting from the CashCode version. Pass `true` as the final argument to parsing and scanning functions for testnet / chipnet address formatting; the wallet must connect to the correct blockchain separately.
+- **Scope:** Supports compressed-key, on-chain P2PKH paycodes (versions `1` and `5`). Legacy `paycode:` / `paycodetest:`, offline-only paycodes, P2SH multisig paycodes, and private-key interchange are not supported.
+
+## Reference
+
+- [Wallet integration guide](https://gitlab.com/selene.cash/bch-rpa/-/blob/v1.1.0/docs/INTEGRATION.md) — complete send/receive flows, server queries, and grinding.
+- [Public API](https://gitlab.com/selene.cash/bch-rpa/-/blob/v1.1.0/src/index.ts) and [TypeScript types](https://gitlab.com/selene.cash/bch-rpa/-/blob/v1.1.0/src/types.ts).
+- [Examples](https://gitlab.com/selene.cash/bch-rpa/-/tree/v1.1.0/examples) — sender, receiver, and HD wallet integration.
+- [RPA specification](https://github.com/imaginaryusername/Reusable_specs/blob/master/reusable_addresses.md).
+
+## License
+
+[MIT](LICENSE)

package/dist/derive.d.ts

@@ -0,0 +1,12 @@
+import type { RpaPaymentAddress } from './types.js';
+/**
+ * Derive a one-time payment address from the receiver's spend pubkey and a shared secret.
+ * Uses BIP32 CKDpub with a synthetic HD node.
+ */
+export declare function derivePaymentAddress(spendPubkey: Uint8Array, sharedSecret: Uint8Array, childIndex?: number, testnet?: boolean): RpaPaymentAddress;
+/**
+ * Derive the spending private key for a one-time address.
+ * Uses BIP32 CKDpriv with a synthetic HD node.
+ */
+export declare function deriveSpendingKey(spendPrivkey: Uint8Array, sharedSecret: Uint8Array, childIndex?: number): Uint8Array;
+//# sourceMappingURL=derive.d.ts.map

package/dist/derive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.d.ts","sourceRoot":"","sources":["../src/derive.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAMpD;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,UAAU,EACvB,YAAY,EAAE,UAAU,EACxB,UAAU,GAAE,MAAU,EACtB,OAAO,GAAE,OAAe,GACvB,iBAAiB,CAqCnB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,UAAU,EACxB,YAAY,EAAE,UAAU,EACxB,UAAU,GAAE,MAAU,GACrB,UAAU,CAyBZ"}

package/dist/derive.js

@@ -0,0 +1,70 @@
+import { deriveHdPublicNodeChild, deriveHdPrivateNodeChild, secp256k1, sha256, ripemd160, encodeCashAddress, CashAddressType, validateSecp256k1PrivateKey, } from '@bitauth/libauth';
+function hash160(data) {
+    return ripemd160.hash(sha256.hash(data));
+}
+/**
+ * Derive a one-time payment address from the receiver's spend pubkey and a shared secret.
+ * Uses BIP32 CKDpub with a synthetic HD node.
+ */
+export function derivePaymentAddress(spendPubkey, sharedSecret, childIndex = 0, testnet = false) {
+    if (!secp256k1.validatePublicKey(spendPubkey)) {
+        throw new Error('Invalid spendPubkey: must be a 33-byte compressed secp256k1 point');
+    }
+    if (sharedSecret.length !== 32) {
+        throw new Error('Invalid sharedSecret: must be 32 bytes');
+    }
+    if (!Number.isInteger(childIndex) || childIndex < 0 || childIndex >= 0x80000000) {
+        throw new Error('Invalid childIndex: must be an integer in [0, 2^31)');
+    }
+    const parentNode = {
+        publicKey: spendPubkey,
+        chainCode: sharedSecret,
+        childIndex: 0,
+        depth: 0,
+        parentFingerprint: new Uint8Array(4),
+    };
+    const childNode = deriveHdPublicNodeChild(parentNode, childIndex);
+    if (typeof childNode === 'string') {
+        throw new Error(`HD public derivation failed: ${childNode}`);
+    }
+    const pubkeyHash = hash160(childNode.publicKey);
+    const { address } = encodeCashAddress({
+        payload: pubkeyHash,
+        type: CashAddressType.p2pkh,
+        prefix: testnet ? 'bchtest' : 'bitcoincash',
+    });
+    return {
+        address,
+        pubkey: childNode.publicKey,
+        childIndex,
+        sharedSecret,
+    };
+}
+/**
+ * Derive the spending private key for a one-time address.
+ * Uses BIP32 CKDpriv with a synthetic HD node.
+ */
+export function deriveSpendingKey(spendPrivkey, sharedSecret, childIndex = 0) {
+    if (!validateSecp256k1PrivateKey(spendPrivkey)) {
+        throw new Error('Invalid spendPrivkey: must be a 32-byte valid secp256k1 scalar');
+    }
+    if (sharedSecret.length !== 32) {
+        throw new Error('Invalid sharedSecret: must be 32 bytes');
+    }
+    if (!Number.isInteger(childIndex) || childIndex < 0 || childIndex >= 0x80000000) {
+        throw new Error('Invalid childIndex: must be an integer in [0, 2^31)');
+    }
+    const parentNode = {
+        privateKey: spendPrivkey,
+        chainCode: sharedSecret,
+        childIndex: 0,
+        depth: 0,
+        parentFingerprint: new Uint8Array(4),
+    };
+    const childNode = deriveHdPrivateNodeChild(parentNode, childIndex);
+    if (typeof childNode === 'string') {
+        throw new Error(`HD private derivation failed: ${childNode}`);
+    }
+    return childNode.privateKey;
+}
+//# sourceMappingURL=derive.js.map

package/dist/derive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive.js","sourceRoot":"","sources":["../src/derive.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,SAAS,EACT,MAAM,EACN,SAAS,EACT,iBAAiB,EACjB,eAAe,EACf,2BAA2B,GAC5B,MAAM,kBAAkB,CAAC;AAI1B,SAAS,OAAO,CAAC,IAAgB;IAC/B,OAAO,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,WAAuB,EACvB,YAAwB,EACxB,aAAqB,CAAC,EACtB,UAAmB,KAAK;IAExB,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,UAAU,GAAsB;QACpC,SAAS,EAAE,WAAW;QACtB,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,CAAC;QACb,KAAK,EAAE,CAAC;QACR,iBAAiB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;KACrC,CAAC;IAEF,MAAM,SAAS,GAAG,uBAAuB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,gCAAgC,SAAS,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC;QACpC,OAAO,EAAE,UAAU;QACnB,IAAI,EAAE,eAAe,CAAC,KAAK;QAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;KAC5C,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,MAAM,EAAE,SAAS,CAAC,SAAS;QAC3B,UAAU;QACV,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAwB,EACxB,YAAwB,EACxB,aAAqB,CAAC;IAEtB,IAAI,CAAC,2BAA2B,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,UAAU,GAAuB;QACrC,UAAU,EAAE,YAAY;QACxB,SAAS,EAAE,YAAY;QACvB,UAAU,EAAE,CAAC;QACb,KAAK,EAAE,CAAC;QACR,iBAAiB,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;KACrC,CAAC;IAEF,MAAM,SAAS,GAAG,wBAAwB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,SAAS,CAAC,UAAU,CAAC;AAC9B,CAAC"}

package/dist/grind.d.ts

@@ -0,0 +1,28 @@
+import type { Paycode } from './types.js';
+/**
+ * Check if prefix grinding is available.
+ * Requires @noble/secp256k1 as a peer dependency (libauth signing is deterministic).
+ */
+export declare function isGrindingAvailable(): Promise<boolean>;
+/**
+ * Grind signature until serialized input's double-SHA256 matches paycode prefix.
+ * Requires @noble/secp256k1 as peer dependency for non-deterministic signing.
+ *
+ * **Signature format:** The callback receives and the result contains a 64-byte
+ * compact signature (r || s), NOT DER-encoded. Your `serializeInput` callback is
+ * responsible for DER-encoding the signature and appending the sighash byte
+ * (typically 0x41 for SIGHASH_ALL|FORKID) before building the scriptSig.
+ *
+ * @param paycode - Decoded paycode (prefix extracted via getScanPrefix)
+ * @param inputPrivkey - 32-byte private key of the designated input
+ * @param sigHash - 32-byte sighash to sign
+ * @param serializeInput - Callback that builds serialized input bytes from a 64-byte compact signature (r || s).
+ *   Must DER-encode the signature and append the sighash byte before constructing the full scriptSig.
+ * @param maxIterations - Maximum grinding attempts (default 1,000,000)
+ * @returns Matching signature (64-byte compact r||s) and iteration count, or null if prefixSize is 0 or max reached
+ */
+export declare function grindPrefix(paycode: Paycode, inputPrivkey: Uint8Array, sigHash: Uint8Array, serializeInput: (signature: Uint8Array) => Uint8Array, maxIterations?: number): Promise<{
+    signature: Uint8Array;
+    iterations: number;
+} | null>;
+//# sourceMappingURL=grind.d.ts.map

package/dist/grind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grind.d.ts","sourceRoot":"","sources":["../src/grind.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAgB1C;;;GAGG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAE5D;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,WAAW,CAC/B,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,UAAU,EACxB,OAAO,EAAE,UAAU,EACnB,cAAc,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,UAAU,EACrD,aAAa,GAAE,MAAkB,GAChC,OAAO,CAAC;IAAE,SAAS,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAAC,CAmC/D"}

package/dist/grind.js

@@ -0,0 +1,69 @@
+import { sha256, binToHex, validateSecp256k1PrivateKey } from '@bitauth/libauth';
+import { getScanPrefix } from './paycode.js';
+let cachedNoble;
+async function loadNoble() {
+    if (cachedNoble !== undefined)
+        return cachedNoble;
+    try {
+        cachedNoble = await import('@noble/secp256k1');
+        return cachedNoble;
+    }
+    catch {
+        cachedNoble = null;
+        return null;
+    }
+}
+/**
+ * Check if prefix grinding is available.
+ * Requires @noble/secp256k1 as a peer dependency (libauth signing is deterministic).
+ */
+export async function isGrindingAvailable() {
+    return (await loadNoble()) !== null;
+}
+/**
+ * Grind signature until serialized input's double-SHA256 matches paycode prefix.
+ * Requires @noble/secp256k1 as peer dependency for non-deterministic signing.
+ *
+ * **Signature format:** The callback receives and the result contains a 64-byte
+ * compact signature (r || s), NOT DER-encoded. Your `serializeInput` callback is
+ * responsible for DER-encoding the signature and appending the sighash byte
+ * (typically 0x41 for SIGHASH_ALL|FORKID) before building the scriptSig.
+ *
+ * @param paycode - Decoded paycode (prefix extracted via getScanPrefix)
+ * @param inputPrivkey - 32-byte private key of the designated input
+ * @param sigHash - 32-byte sighash to sign
+ * @param serializeInput - Callback that builds serialized input bytes from a 64-byte compact signature (r || s).
+ *   Must DER-encode the signature and append the sighash byte before constructing the full scriptSig.
+ * @param maxIterations - Maximum grinding attempts (default 1,000,000)
+ * @returns Matching signature (64-byte compact r||s) and iteration count, or null if prefixSize is 0 or max reached
+ */
+export async function grindPrefix(paycode, inputPrivkey, sigHash, serializeInput, maxIterations = 1_000_000) {
+    if (!validateSecp256k1PrivateKey(inputPrivkey)) {
+        throw new Error('Invalid inputPrivkey: must be a 32-byte valid secp256k1 scalar');
+    }
+    if (!(sigHash instanceof Uint8Array) || sigHash.length !== 32) {
+        throw new Error('Invalid sigHash: must be 32 bytes');
+    }
+    const targetPrefix = getScanPrefix(paycode);
+    if (targetPrefix === '')
+        return null;
+    const noble = await loadNoble();
+    if (!noble) {
+        throw new Error('Prefix grinding requires @noble/secp256k1 as a peer dependency. ' +
+            'Install it with: npm install @noble/secp256k1');
+    }
+    const n = targetPrefix.length;
+    for (let i = 0; i < maxIterations; i++) {
+        // lowS:true is required for BCH (BIP62), extraEntropy gives nonce variation for grinding
+        const sig = await noble.signAsync(sigHash, inputPrivkey, { lowS: true, extraEntropy: true });
+        const sigBytes = sig.toCompactRawBytes();
+        const serialized = serializeInput(sigBytes);
+        const hash = sha256.hash(sha256.hash(serialized));
+        const hashPrefix = binToHex(hash).slice(0, n);
+        if (hashPrefix === targetPrefix) {
+            return { signature: sigBytes, iterations: i + 1 };
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=grind.js.map

package/dist/grind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grind.js","sourceRoot":"","sources":["../src/grind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAI7C,IAAI,WAA6D,CAAC;AAElE,KAAK,UAAU,SAAS;IACtB,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAClD,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAA6C,CAAC;QAC3F,OAAO,WAAW,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,OAAO,CAAC,MAAM,SAAS,EAAE,CAAC,KAAK,IAAI,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,YAAwB,EACxB,OAAmB,EACnB,cAAqD,EACrD,gBAAwB,SAAS;IAEjC,IAAI,CAAC,2BAA2B,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,YAAY,UAAU,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,YAAY,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kEAAkE;YAClE,+CAA+C,CAChD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC;IAE9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,yFAAyF;QACzF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAE9C,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/hd.d.ts

@@ -0,0 +1,26 @@
+import type { HdPrivateNodeValid } from '@bitauth/libauth';
+/**
+ * Derive RPA scan and spend keypairs from an HD account node.
+ *
+ * Selene convention: chain 3 = RPA keys.
+ *   scan  = accountNode/3/0
+ *   spend = accountNode/3/1
+ *
+ * Given Selene's default path m/44'/145'/0', this produces:
+ *   scan  = m/44'/145'/0'/3/0
+ *   spend = m/44'/145'/0'/3/1
+ *
+ * This is a wallet convention, not a protocol requirement. Other wallets may
+ * use different derivation paths. Use the `options` parameter to customize indices.
+ */
+export declare function deriveRpaKeys(accountNode: HdPrivateNodeValid, options?: {
+    chainIndex?: number;
+    scanIndex?: number;
+    spendIndex?: number;
+}): {
+    scanPrivkey: Uint8Array;
+    scanPubkey: Uint8Array;
+    spendPrivkey: Uint8Array;
+    spendPubkey: Uint8Array;
+};
+//# sourceMappingURL=hd.d.ts.map

package/dist/hd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hd.d.ts","sourceRoot":"","sources":["../src/hd.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAC3B,WAAW,EAAE,kBAAkB,EAC/B,OAAO,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACzE;IACD,WAAW,EAAE,UAAU,CAAC;IACxB,UAAU,EAAE,UAAU,CAAC;IACvB,YAAY,EAAE,UAAU,CAAC;IACzB,WAAW,EAAE,UAAU,CAAC;CACzB,CAiCA"}

package/dist/hd.js

@@ -0,0 +1,47 @@
+import { deriveHdPrivateNodeChild, secp256k1 } from '@bitauth/libauth';
+/**
+ * Derive RPA scan and spend keypairs from an HD account node.
+ *
+ * Selene convention: chain 3 = RPA keys.
+ *   scan  = accountNode/3/0
+ *   spend = accountNode/3/1
+ *
+ * Given Selene's default path m/44'/145'/0', this produces:
+ *   scan  = m/44'/145'/0'/3/0
+ *   spend = m/44'/145'/0'/3/1
+ *
+ * This is a wallet convention, not a protocol requirement. Other wallets may
+ * use different derivation paths. Use the `options` parameter to customize indices.
+ */
+export function deriveRpaKeys(accountNode, options) {
+    const chainIndex = options?.chainIndex ?? 3;
+    const scanIndex = options?.scanIndex ?? 0;
+    const spendIndex = options?.spendIndex ?? 1;
+    const rpaChain = deriveHdPrivateNodeChild(accountNode, chainIndex);
+    if (typeof rpaChain === 'string') {
+        throw new Error(`HD derivation failed for chain ${chainIndex}: ${rpaChain}`);
+    }
+    const scanNode = deriveHdPrivateNodeChild(rpaChain, scanIndex);
+    if (typeof scanNode === 'string') {
+        throw new Error(`HD derivation failed for scan key (${chainIndex}/${scanIndex}): ${scanNode}`);
+    }
+    const spendNode = deriveHdPrivateNodeChild(rpaChain, spendIndex);
+    if (typeof spendNode === 'string') {
+        throw new Error(`HD derivation failed for spend key (${chainIndex}/${spendIndex}): ${spendNode}`);
+    }
+    const scanPubkey = secp256k1.derivePublicKeyCompressed(scanNode.privateKey);
+    if (typeof scanPubkey === 'string') {
+        throw new Error(`Failed to derive scan pubkey: ${scanPubkey}`);
+    }
+    const spendPubkey = secp256k1.derivePublicKeyCompressed(spendNode.privateKey);
+    if (typeof spendPubkey === 'string') {
+        throw new Error(`Failed to derive spend pubkey: ${spendPubkey}`);
+    }
+    return {
+        scanPrivkey: scanNode.privateKey,
+        scanPubkey,
+        spendPrivkey: spendNode.privateKey,
+        spendPubkey,
+    };
+}
+//# sourceMappingURL=hd.js.map

package/dist/hd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hd.js","sourceRoot":"","sources":["../src/hd.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGvE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAC3B,WAA+B,EAC/B,OAA0E;IAO1E,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACnE,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,KAAK,QAAQ,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC/D,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,IAAI,SAAS,MAAM,QAAQ,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,SAAS,GAAG,wBAAwB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACjE,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,uCAAuC,UAAU,IAAI,UAAU,MAAM,SAAS,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,yBAAyB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5E,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,UAAU,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,WAAW,GAAG,SAAS,CAAC,yBAAyB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,kCAAkC,WAAW,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,UAAU;QACV,YAAY,EAAE,SAAS,CAAC,UAAU;QAClC,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export type { Paycode, RpaSharedSecret, RpaPaymentAddress, RpaMatch, RpaScanInput, RpaScanOutput, RpaScanTransaction, FulcrumRpaHistoryItem, } from './types.js';
+export { generatePaycode, encodePaycode, decodePaycode, validatePaycode, getScanPrefix, isExpired, CASHCODE_PREFIX, CASHCODE_TEST_PREFIX, } from './paycode.js';
+export { computeSharedSecret } from './secret.js';
+export { derivePaymentAddress, deriveSpendingKey } from './derive.js';
+export { prepareSend, selectDesignatedInput } from './send.js';
+export { extractPubkeyFromScriptSig, parseRawTransaction, parseVerboseTransaction, } from './parse.js';
+export { tryTransaction, tryTransactions, scanTransaction, matchesPrefix, } from './scan.js';
+export { grindPrefix, isGrindingAvailable } from './grind.js';
+export { deriveRpaKeys } from './hd.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,OAAO,EACP,eAAe,EACf,iBAAiB,EACjB,QAAQ,EACR,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,EACf,aAAa,EACb,SAAS,EACT,eAAe,EACf,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE/D,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+export { generatePaycode, encodePaycode, decodePaycode, validatePaycode, getScanPrefix, isExpired, CASHCODE_PREFIX, CASHCODE_TEST_PREFIX, } from './paycode.js';
+export { computeSharedSecret } from './secret.js';
+export { derivePaymentAddress, deriveSpendingKey } from './derive.js';
+export { prepareSend, selectDesignatedInput } from './send.js';
+export { extractPubkeyFromScriptSig, parseRawTransaction, parseVerboseTransaction, } from './parse.js';
+export { tryTransaction, tryTransactions, scanTransaction, matchesPrefix, } from './scan.js';
+export { grindPrefix, isGrindingAvailable } from './grind.js';
+export { deriveRpaKeys } from './hd.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAWA,OAAO,EACL,eAAe,EACf,aAAa,EACb,aAAa,EACb,eAAe,EACf,aAAa,EACb,SAAS,EACT,eAAe,EACf,oBAAoB,GACrB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEtE,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAE/D,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,cAAc,EACd,eAAe,EACf,eAAe,EACf,aAAa,GACd,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAE9D,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC"}

package/dist/parse.d.ts

@@ -0,0 +1,33 @@
+import type { RpaScanTransaction } from './types.js';
+/**
+ * Extract a compressed public key from a P2PKH scriptSig (unlocking bytecode).
+ * P2PKH scriptSig format: <sig_len> <sig> 0x21 <33-byte compressed pubkey>
+ * Returns null if not a standard P2PKH input.
+ */
+export declare function extractPubkeyFromScriptSig(scriptSig: Uint8Array): Uint8Array | null;
+/**
+ * Parse a raw transaction hex string into an RpaScanTransaction.
+ * Extracts pubkeys from P2PKH scriptSigs, computes txid, and builds output addresses.
+ */
+export declare function parseRawTransaction(txHex: string, testnet?: boolean): RpaScanTransaction;
+/**
+ * Parse a Fulcrum verbose transaction JSON into an RpaScanTransaction.
+ */
+export declare function parseVerboseTransaction(verboseTx: {
+    txid: string;
+    vin: Array<{
+        txid: string;
+        vout: number;
+        scriptSig: {
+            hex: string;
+        };
+    }>;
+    vout: Array<{
+        value: number;
+        scriptPubKey: {
+            hex: string;
+            addresses?: string[];
+        };
+    }>;
+}, testnet?: boolean): RpaScanTransaction;
+//# sourceMappingURL=parse.d.ts.map

package/dist/parse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.d.ts","sourceRoot":"","sources":["../src/parse.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAA+B,MAAM,YAAY,CAAC;AAElF;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAanF;AA+BD;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,OAAe,GACvB,kBAAkB,CA2BpB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE;IACT,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,KAAK,CAAC;QACT,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,EAAE,KAAK,CAAC;QACV,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC;KACrD,CAAC,CAAC;CACJ,EACD,OAAO,GAAE,OAAe,GACvB,kBAAkB,CAuBpB"}

package/dist/parse.js

@@ -0,0 +1,106 @@
+import { decodeTransaction, hexToBin, binToHex, sha256, lockingBytecodeToCashAddress, encodeTransactionInput, } from '@bitauth/libauth';
+/**
+ * Extract a compressed public key from a P2PKH scriptSig (unlocking bytecode).
+ * P2PKH scriptSig format: <sig_len> <sig> 0x21 <33-byte compressed pubkey>
+ * Returns null if not a standard P2PKH input.
+ */
+export function extractPubkeyFromScriptSig(scriptSig) {
+    // Minimum: 1-byte push + some sig + 1-byte push (0x21) + 33 bytes pubkey
+    if (scriptSig.length < 36)
+        return null;
+    // Check if the last 34 bytes are: 0x21 (push 33 bytes) followed by 33 bytes
+    const pushBytePos = scriptSig.length - 34;
+    if (scriptSig[pushBytePos] !== 0x21)
+        return null;
+    const pubkey = scriptSig.slice(pushBytePos + 1);
+    // Compressed pubkey starts with 0x02 or 0x03
+    if (pubkey[0] !== 0x02 && pubkey[0] !== 0x03)
+        return null;
+    return pubkey;
+}
+/**
+ * Compute a transaction ID (double SHA256 of raw bytes, reversed to display order).
+ */
+function computeTxid(rawBytes) {
+    const hash = sha256.hash(sha256.hash(rawBytes));
+    // Reverse for display order
+    const reversed = new Uint8Array(hash.length);
+    for (let i = 0; i < hash.length; i++) {
+        reversed[i] = hash[hash.length - 1 - i];
+    }
+    return binToHex(reversed);
+}
+/**
+ * Convert a locking bytecode to a CashAddr string.
+ * Returns empty string for non-standard scripts.
+ */
+function lockingBytecodeToAddress(bytecode, testnet) {
+    const result = lockingBytecodeToCashAddress({
+        bytecode,
+        prefix: testnet ? 'bchtest' : 'bitcoincash',
+    });
+    if (typeof result === 'string')
+        return '';
+    return result.address;
+}
+/**
+ * Parse a raw transaction hex string into an RpaScanTransaction.
+ * Extracts pubkeys from P2PKH scriptSigs, computes txid, and builds output addresses.
+ */
+export function parseRawTransaction(txHex, testnet = false) {
+    const rawBytes = hexToBin(txHex);
+    const decoded = decodeTransaction(rawBytes);
+    if (typeof decoded === 'string') {
+        throw new Error(`Failed to decode transaction: ${decoded}`);
+    }
+    const txid = computeTxid(rawBytes);
+    const inputs = decoded.inputs.map((input) => {
+        const pubkey = extractPubkeyFromScriptSig(input.unlockingBytecode);
+        const outpointTxid = binToHex(input.outpointTransactionHash);
+        return {
+            pubkey,
+            serializedInput: encodeTransactionInput(input),
+            outpointTxid,
+            outpointIndex: input.outpointIndex,
+        };
+    });
+    const outputs = decoded.outputs.map((output) => ({
+        address: lockingBytecodeToAddress(output.lockingBytecode, testnet),
+        value: output.valueSatoshis,
+    }));
+    return { txid, inputs, outputs };
+}
+/**
+ * Parse a Fulcrum verbose transaction JSON into an RpaScanTransaction.
+ */
+export function parseVerboseTransaction(verboseTx, testnet = false) {
+    const inputs = verboseTx.vin.map((vin) => {
+        const scriptSigBytes = hexToBin(vin.scriptSig.hex);
+        const pubkey = extractPubkeyFromScriptSig(scriptSigBytes);
+        return {
+            pubkey,
+            serializedInput: new Uint8Array(0), // Not needed for Fulcrum-backed scanning
+            outpointTxid: vin.txid,
+            outpointIndex: vin.vout,
+        };
+    });
+    const outputs = verboseTx.vout.map((vout) => {
+        // Convert BCH amount to satoshis using string math to avoid IEEE 754 precision loss
+        const valueSatoshis = bchToSatoshis(vout.value);
+        // Derive address from scriptPubKey hex
+        const lockingBytecode = hexToBin(vout.scriptPubKey.hex);
+        const address = vout.scriptPubKey.addresses?.[0]
+            ?? lockingBytecodeToAddress(lockingBytecode, testnet);
+        return { address, value: valueSatoshis };
+    });
+    return { txid: verboseTx.txid, inputs, outputs };
+}
+/** Convert a BCH float value to satoshis using string math to avoid IEEE 754 issues. */
+function bchToSatoshis(value) {
+    // Convert to string, split on decimal point, pad/truncate to 8 decimal places
+    const str = value.toFixed(8);
+    const [whole, frac] = str.split('.');
+    const satStr = whole + (frac ?? '').padEnd(8, '0').slice(0, 8);
+    return BigInt(satStr);
+}
+//# sourceMappingURL=parse.js.map

package/dist/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../src/parse.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAG1B;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,SAAqB;IAC9D,yEAAyE;IACzE,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAEvC,4EAA4E;IAC5E,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC;IAC1C,IAAI,SAAS,CAAC,WAAW,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEjD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;IAChD,6CAA6C;IAC7C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE1D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,QAAoB;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,SAAS,wBAAwB,CAC/B,QAAoB,EACpB,OAAgB;IAEhB,MAAM,MAAM,GAAG,4BAA4B,CAAC;QAC1C,QAAQ;QACR,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa;KAC5C,CAAC,CAAC;IACH,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC1C,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAa,EACb,UAAmB,KAAK;IAExB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAmB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1D,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAE7D,OAAO;YACL,MAAM;YACN,eAAe,EAAE,sBAAsB,CAAC,KAAK,CAAC;YAC9C,YAAY;YACZ,aAAa,EAAE,KAAK,CAAC,aAAa;SACnC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAoB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAChE,OAAO,EAAE,wBAAwB,CAAC,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC;QAClE,KAAK,EAAE,MAAM,CAAC,aAAa;KAC5B,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,SAWC,EACD,UAAmB,KAAK;IAExB,MAAM,MAAM,GAAmB,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACvD,MAAM,cAAc,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,0BAA0B,CAAC,cAAc,CAAC,CAAC;QAC1D,OAAO;YACL,MAAM;YACN,eAAe,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,yCAAyC;YAC7E,YAAY,EAAE,GAAG,CAAC,IAAI;YACtB,aAAa,EAAE,GAAG,CAAC,IAAI;SACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAoB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3D,oFAAoF;QACpF,MAAM,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,uCAAuC;QACvC,MAAM,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;eAC3C,wBAAwB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACnD,CAAC;AAED,wFAAwF;AACxF,SAAS,aAAa,CAAC,KAAa;IAClC,8EAA8E;IAC9E,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC"}