dero-mcp-server 0.1.2 → 0.4.0

package/dist/http-server.js

@@ -0,0 +1,132 @@
+/**
+ * Streamable HTTP transport entry for dero-mcp-server.
+ *
+ * Same factory (`createDeroMcpServer`) as the stdio entry — just a
+ * different transport on top. Enable via `dero-mcp-server --http`
+ * or `DERO_MCP_HTTP=1` (see index.ts dispatcher).
+ *
+ * Stateless by design: each request is independent. No session
+ * tracking, no in-memory state across requests, no logs of query
+ * payloads. Pairs cleanly with read-only semantics and the
+ * privacy-first brand.
+ *
+ * Environment:
+ *   DERO_DAEMON_URL       — JSON-RPC base. If unset, resolves local-first:
+ *                           a local derod (127.0.0.1:10102) if reachable,
+ *                           else the baked-in public fallback.
+ *   DERO_MCP_HTTP_PORT    — listen port (default: 8787)
+ *   DERO_MCP_HTTP_HOST    — listen address (default: 127.0.0.1)
+ *   DERO_MCP_AUTH_TOKEN   — if set, require `Authorization: Bearer <token>`
+ *                           on /mcp. Constant-time compared. Recommended
+ *                           when binding to a public address; required
+ *                           if behind a reverse proxy without its own auth.
+ *
+ * Routes:
+ *   POST /mcp     — MCP streamable HTTP endpoint
+ *   GET  /mcp     — same (SSE compat for older clients)
+ *   GET  /health  — health check {status, version, daemon_url, daemon_source}
+ *   anything else → 404
+ *
+ * Reverse-proxy expectations:
+ *   - TLS handled upstream (Caddy / Cloudflare / etc.) — this server is
+ *     plain HTTP.
+ *   - Original client IP can be passed via X-Forwarded-For for logging;
+ *     we don't log IPs by default but the middleware reads it if present.
+ */
+import http from 'node:http';
+import { Buffer } from 'node:buffer';
+import { timingSafeEqual } from 'node:crypto';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import { createDeroMcpServer } from './server.js';
+import { resolveDaemonBase, describeDaemonResolution } from './daemon-base.js';
+const PACKAGE_VERSION = '0.4.0';
+function readEnv() {
+    const port = Number.parseInt(process.env.DERO_MCP_HTTP_PORT ?? '8787', 10);
+    const host = process.env.DERO_MCP_HTTP_HOST ?? '127.0.0.1';
+    const authToken = process.env.DERO_MCP_AUTH_TOKEN?.trim() || undefined;
+    return { port, host, authToken };
+}
+function isAuthorized(req, expectedToken) {
+    const header = req.headers['authorization'];
+    if (!header || Array.isArray(header))
+        return false;
+    const m = header.match(/^Bearer\s+(.+)$/i);
+    if (!m)
+        return false;
+    const given = m[1].trim();
+    const a = Buffer.from(given);
+    const b = Buffer.from(expectedToken);
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(a, b);
+}
+function send(res, status, body, contentType = 'application/json') {
+    res.writeHead(status, {
+        'content-type': contentType,
+        'content-length': Buffer.byteLength(body),
+    });
+    res.end(body);
+}
+export async function startHttpServer() {
+    const { port, host, authToken } = readEnv();
+    const resolution = await resolveDaemonBase();
+    const daemonUrl = resolution.base;
+    const mcpServer = createDeroMcpServer(daemonUrl);
+    // Stateless mode: no session IDs, no in-memory state across requests.
+    // Fits read-only semantics and minimizes the privacy surface.
+    const transport = new StreamableHTTPServerTransport({
+        sessionIdGenerator: undefined,
+    });
+    await mcpServer.connect(transport);
+    const httpServer = http.createServer(async (req, res) => {
+        const url = new URL(req.url ?? '/', `http://${req.headers.host ?? 'localhost'}`);
+        if (url.pathname === '/health' && req.method === 'GET') {
+            send(res, 200, JSON.stringify({
+                status: 'ok',
+                name: 'dero-daemon-mcp',
+                version: PACKAGE_VERSION,
+                transport: 'streamable-http',
+                daemon_url: daemonUrl,
+                daemon_source: resolution.source,
+            }));
+            return;
+        }
+        if (url.pathname !== '/mcp') {
+            send(res, 404, JSON.stringify({ error: 'not_found', message: 'See /mcp for the MCP endpoint, /health for status.' }));
+            return;
+        }
+        // Auth (optional but recommended). When DERO_MCP_AUTH_TOKEN is set,
+        // every /mcp request must carry Authorization: Bearer <token>.
+        if (authToken && !isAuthorized(req, authToken)) {
+            res.setHeader('www-authenticate', 'Bearer realm="dero-mcp"');
+            send(res, 401, JSON.stringify({ error: 'unauthorized' }));
+            return;
+        }
+        try {
+            await transport.handleRequest(req, res);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`[dero-mcp-server] http handler error: ${message}\n`);
+            if (!res.headersSent) {
+                send(res, 500, JSON.stringify({ error: 'internal_error' }));
+            }
+        }
+    });
+    await new Promise((resolve) => {
+        httpServer.listen(port, host, () => {
+            process.stderr.write(`[dero-mcp-server] HTTP listening on ${host}:${port} (POST /mcp · GET /health)\n`);
+            process.stderr.write(`[dero-mcp-server] ${describeDaemonResolution(resolution)} · auth: ${authToken ? 'bearer required' : 'none (do not expose publicly)'}\n`);
+            resolve();
+        });
+    });
+    const shutdown = (signal) => {
+        process.stderr.write(`[dero-mcp-server] ${signal} received, shutting down\n`);
+        httpServer.close(() => process.exit(0));
+        // Hard exit after 5s if connections won't drain.
+        setTimeout(() => process.exit(1), 5000).unref();
+    };
+    process.on('SIGTERM', () => shutdown('SIGTERM'));
+    process.on('SIGINT', () => shutdown('SIGINT'));
+}
+//# sourceMappingURL=http-server.js.map

package/dist/http-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-server.js","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAA;AAC5B,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,6BAA6B,EAAE,MAAM,oDAAoD,CAAA;AAClG,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAE9E,MAAM,eAAe,GAAG,OAAO,CAAA;AAE/B,SAAS,OAAO;IACd,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,MAAM,EAAE,EAAE,CAAC,CAAA;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,WAAW,CAAA;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;IACtE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAClC,CAAC;AAED,SAAS,YAAY,CAAC,GAAyB,EAAE,aAAqB;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAA;IAC3C,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAA;IAClD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAC1C,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACpB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAA;IAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACpC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,IAAI,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAY,EAAE,WAAW,GAAG,kBAAkB;IACpG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,WAAW;QAC3B,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;KAC1C,CAAC,CAAA;IACF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAAA;IAC3C,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAA;IAC5C,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAA;IACjC,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA;IAEhD,sEAAsE;IACtE,8DAA8D;IAC9D,MAAM,SAAS,GAAG,IAAI,6BAA6B,CAAC;QAClD,kBAAkB,EAAE,SAAS;KAC9B,CAAC,CAAA;IACF,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAElC,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAA;QAEhF,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACvD,IAAI,CACF,GAAG,EACH,GAAG,EACH,IAAI,CAAC,SAAS,CAAC;gBACb,MAAM,EAAE,IAAI;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,eAAe;gBACxB,SAAS,EAAE,iBAAiB;gBAC5B,UAAU,EAAE,SAAS;gBACrB,aAAa,EAAE,UAAU,CAAC,MAAM;aACjC,CAAC,CACH,CAAA;YACD,OAAM;QACR,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC,CAAC,CAAA;YACrH,OAAM;QACR,CAAC;QAED,oEAAoE;QACpE,+DAA+D;QAC/D,IAAI,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,SAAS,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAA;YAC5D,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAA;YACzD,OAAM;QACR,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAChE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,OAAO,IAAI,CAAC,CAAA;YAC1E,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAA;YAC7D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;YACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,IAAI,IAAI,IAAI,8BAA8B,CAClF,CAAA;YACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,qBAAqB,wBAAwB,CAAC,UAAU,CAAC,YAAY,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,+BAA+B,IAAI,CACzI,CAAA;YACD,OAAO,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE;QAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,MAAM,4BAA4B,CAAC,CAAA;QAC7E,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;QACvC,iDAAiD;QACjD,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAA;IACjD,CAAC,CAAA;IACD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;IAChD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;AAChD,CAAC"}

package/dist/index.js

@@ -1,21 +1,28 @@
 #!/usr/bin/env node
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { createDeroMcpServer } from './server.js';
-/** Default public mainnet JSON-RPC (override with DERO_DAEMON_URL). */
-const DEFAULT_DAEMON_BASE = 'http://82.65.143.182:10102';
-function daemonUrlFromEnv() {
-    const fromEnv = process.env.DERO_DAEMON_URL?.trim();
-    if (fromEnv)
-        return fromEnv.replace(/\/json_rpc\/?$/, '');
-    return DEFAULT_DAEMON_BASE;
+import { startHttpServer } from './http-server.js';
+import { resolveDaemonBase, describeDaemonResolution } from './daemon-base.js';
+function isHttpMode() {
+    if (process.argv.includes('--http'))
+        return true;
+    const env = process.env.DERO_MCP_HTTP?.trim().toLowerCase();
+    return env === '1' || env === 'true' || env === 'yes';
 }
-async function main() {
-    const base = daemonUrlFromEnv();
-    const server = createDeroMcpServer(base);
+async function runStdio() {
+    const resolution = await resolveDaemonBase();
+    const server = createDeroMcpServer(resolution.base);
     const transport = new StdioServerTransport();
-    process.stderr.write(`[dero-mcp-server] DERO_DAEMON_URL base: ${base} (JSON-RPC at ${base.replace(/\/$/, '')}/json_rpc)\n`);
+    process.stderr.write(`[dero-mcp-server] stdio · ${describeDaemonResolution(resolution)}\n`);
     await server.connect(transport);
 }
+async function main() {
+    if (isHttpMode()) {
+        await startHttpServer();
+        return;
+    }
+    await runStdio();
+}
 main().catch((err) => {
     process.stderr.write(`[dero-mcp-server] fatal: ${err instanceof Error ? err.message : String(err)}\n`);
     process.exit(1);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAEjD,uEAAuE;AACvE,MAAM,mBAAmB,GAAG,4BAA4B,CAAA;AAExD,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAA;IACnD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAA;IACzD,OAAO,mBAAmB,CAAA;AAC5B,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAA;IAC/B,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAA;IAExC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;IAE5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C,IAAI,iBAAiB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CACtG,CAAA;IAED,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACtG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAA;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAA;AAE9E,SAAS,UAAU;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAA;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC3D,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,CAAA;AACvD,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAA;IAC5C,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAA;IAE5C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,wBAAwB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;IAE3F,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;AACjC,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,eAAe,EAAE,CAAA;QACvB,OAAM;IACR,CAAC;IACD,MAAM,QAAQ,EAAE,CAAA;AAClB,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACtG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}

package/dist/proof-decode.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Decoder for DERO `deroproof…` / `dero…` / `deroi…` / `deto…` / `detoi…` bech32 strings.
+ *
+ * Implements the same wire format as `rpc/address.go` + `rpc/rpc.go` in DEROHE:
+ *
+ *   bech32 → convertbits(5→8, no pad) → version byte (=1) → 33-byte compressed point
+ *   → optional CBOR map of arguments (only present for HRPs `deroi`, `detoi`, `deroproof`).
+ *
+ * The CBOR map keys are `Name + DataType` ASCII strings (e.g. `"VU"` for
+ * `RPC_VALUE_TRANSFER` + `DataUint64`). Values are typed CBOR primitives.
+ *
+ * No new npm dependencies — bech32 + the minimum-needed CBOR subset are hand-rolled
+ * (~zero kB install delta for the MCP server, which is published for `npx` use).
+ *
+ * Verified against the publicly-cited 2022 inflation-claim proof string:
+ *   embedded `uint64` = 18446743853709551435 = signed -2,200,000.00181 DERO.
+ */
+/**
+ * Decode a bech32 string. Throws on invalid input.
+ * Returns `{ hrp, data }` where data is the 5-bit values WITHOUT the 6-byte checksum.
+ */
+export declare function bech32Decode(input: string): {
+    hrp: string;
+    data: number[];
+};
+/**
+ * Repack a bit-stream from `fromBits` to `toBits`. Mirrors DEROHE's `convertbits`
+ * (in turn from BIP-0173 reference impl).
+ */
+export declare function convertBits(data: readonly number[], fromBits: number, toBits: number, pad: boolean): number[];
+export declare function cborDecode(bytes: Uint8Array): unknown;
+/** DERO argument data-type single-char suffix. */
+export type DeroDataType = 'I' | 'U' | 'S' | 'H' | 'A' | 'F' | 'T';
+export type ParsedArgument = {
+    name: string;
+    type: DeroDataType;
+    type_label: string;
+    /** Human-readable name when the convention is known. */
+    semantic_name?: string;
+    /** Decoded value (uint64/int64/hash → bigint or hex; address → bech32; string → string; bool → boolean). */
+    value: unknown;
+};
+export type DecodedAddress = {
+    hrp: 'dero' | 'deto' | 'deroi' | 'detoi' | 'deroproof';
+    mainnet: boolean;
+    /** True when HRP === 'deroproof' — payload key is a derived blinder point, NOT a wallet pubkey. */
+    is_proof: boolean;
+    /** Compressed-point bytes, lowercase hex. */
+    public_key_hex: string;
+    /** All decoded arguments (empty for plain `dero`/`deto`). */
+    arguments: ParsedArgument[];
+    /** Convenience: the RPC_VALUE_TRANSFER uint64 if present, else undefined. */
+    value_transfer_uint64?: bigint;
+};
+export type ValueInterpretation = {
+    uint64: string;
+    signed_int64: string;
+    /** True when interpreted as signed int64, the value is negative. */
+    is_negative_wraparound: boolean;
+    /** Atomic units (signed). 1 DERO = 100,000 atomic. */
+    signed_atoms: string;
+    /** DERO float (signed_atoms / 100_000) as a string with 5 fractional digits. */
+    dero: string;
+};
+/**
+ * Interpret a uint64 transfer value as both unsigned and signed-wraparound.
+ *
+ * DERO transfer amounts are stored as `uint64` atomic units (1 DERO = 100,000 atoms).
+ * A "negative" transfer is the wraparound of a huge unsigned value; this helper
+ * surfaces both views without taking a position on which is "correct" — that's
+ * what the cited rebuttal docs are for.
+ */
+export declare function interpretValueTransfer(value: bigint): ValueInterpretation;
+/**
+ * Decode a full `deroproof…` / `dero…` / `deroi…` / `deto…` / `detoi…` bech32 string.
+ *
+ * Mirrors `rpc.NewAddress` from DEROHE: validates HRP, runs 5→8 bit repack,
+ * checks version byte, splits compressed point + (optional) CBOR arguments.
+ */
+export declare function decodeDeroBech32(input: string): DecodedAddress;
+/** Encode HRP + 5-bit data array to a bech32 string. Inverse of `bech32Decode`. */
+export declare function bech32Encode(hrp: string, data: readonly number[]): string;
+/**
+ * Value type accepted by the CBOR encoder. Mirrors the subset of types that
+ * `parseArgumentEntry` can surface — sufficient for deroproof argument maps.
+ */
+export type CborValue = bigint | number | string | Uint8Array | boolean | null | CborValue[] | {
+    [key: string]: CborValue;
+};
+/** Deterministic-CBOR encode a value (RFC 8949 core deterministic). */
+export declare function cborEncode(value: CborValue): Uint8Array;
+/**
+ * Build a `deroproof…` / `deroi…` / `detoi…` bech32 string from a compressed
+ * public-key point (the embedded blinder, for proofs) and a typed argument map.
+ *
+ * Arguments are passed as a plain object whose keys are `Name + DataType`
+ * (e.g. `HH` for hash, `VU` for uint64 value transfer). Values are typed:
+ *   - `U` / `I`: bigint
+ *   - `H` / `A`: Uint8Array (32 bytes for hash, 33 for address)
+ *   - `S`: string
+ */
+export declare function encodeDeroBech32(hrp: 'dero' | 'deto' | 'deroi' | 'detoi' | 'deroproof', pointBytes33: Uint8Array, args?: Record<string, CborValue>): string;
+/**
+ * Build a deroproof string for a forged amount. Convenience wrapper around
+ * `encodeDeroBech32` that handles the canonical `{HH, VU}` arg shape.
+ *
+ *   HH = 32 zero bytes (the docs forge code uses `crypto.Hash{}` here)
+ *   VU = uint64 amount
+ */
+export declare function encodeForgeProofString(blinderCompressed33: Uint8Array, amountUint64: bigint, hrp?: 'deroproof'): string;
+/** Citation: the 2022 inflation-claim payload proof. Used by self-tests. */
+export declare const CITED_2022_PROOF_STRING = "deroproof1qyyj0cgu3htmkumr79sgca75vwsx8kx7zkrjg0nfez46w36qyx4kwq9zvfyyskpqvdpcfhkhk4m7y9d77ehyj7yhnnrv9z0tjr9m5fqe2yx9t27dwtdxy4j4r0llll7vcmaxwjcl8jzfq";
+/**
+ * Decode the cited 2022 proof string, re-encode it with the **same decoded
+ * arguments** (the real H hash, not zeros), and confirm byte-equal output.
+ *
+ * If this fails, the encoder is not faithful to DERO's canonical CBOR + bech32
+ * wire format and forging anything else is unsafe to surface.
+ *
+ * (The forge path defaults H to 32 zero bytes — see `encodeForgeProofString`.
+ * That's correct for the docs-page demo but would not reproduce a real
+ * wallet-generated proof, which has a real shared-key hash in H.)
+ */
+export declare function verifyProofEncoderRoundtrip(): void;
+//# sourceMappingURL=proof-decode.d.ts.map

package/dist/proof-decode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-decode.d.ts","sourceRoot":"","sources":["../src/proof-decode.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAiCH;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAwB3E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,OAAO,GACX,MAAM,EAAE,CAsBV;AAmHD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAKrD;AAMD,kDAAkD;AAClD,MAAM,MAAM,YAAY,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;AAwBlE,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,YAAY,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,4GAA4G;IAC5G,KAAK,EAAE,OAAO,CAAA;CACf,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,CAAA;IACtD,OAAO,EAAE,OAAO,CAAA;IAChB,mGAAmG;IACnG,QAAQ,EAAE,OAAO,CAAA;IACjB,6CAA6C;IAC7C,cAAc,EAAE,MAAM,CAAA;IACtB,6DAA6D;IAC7D,SAAS,EAAE,cAAc,EAAE,CAAA;IAC3B,6EAA6E;IAC7E,qBAAqB,CAAC,EAAE,MAAM,CAAA;CAC/B,CAAA;AAKD,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,sBAAsB,EAAE,OAAO,CAAA;IAC/B,sDAAsD;IACtD,YAAY,EAAE,MAAM,CAAA;IACpB,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAoBzE;AAqED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,cAAc,CAoD9D;AAsBD,mFAAmF;AACnF,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CASzE;AAsDD;;;GAGG;AACH,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,MAAM,GACN,UAAU,GACV,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAA;AAEhC,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,UAAU,CA4CvD;AAeD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,WAAW,EACtD,YAAY,EAAE,UAAU,EACxB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAC/B,MAAM,CAcR;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,mBAAmB,EAAE,UAAU,EAC/B,YAAY,EAAE,MAAM,EACpB,GAAG,GAAE,WAAyB,GAC7B,MAAM,CAQR;AAMD,4EAA4E;AAC5E,eAAO,MAAM,uBAAuB,4JACuH,CAAA;AAE3J;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,IAAI,IAAI,CAkBlD"}