@adelos/sdk 0.1.11 → 0.1.12

package/dist/index.d.mts

@@ -115,6 +115,12 @@ declare function generateStealthAddress(recipientMetaPk: Uint8Array): {
     sharedSecret: Uint8Array<ArrayBufferLike>;
     memo: string;
 };
+/**
+ * Sign a message using a raw private SCALAR (not seed).
+ * Required because derived stealth keys are scalars, not seeds.
+ * Uses a random nonce for R, valid for Ed25519.
+ */
+declare function signWithScalar(message: Uint8Array, scalarBytes: Uint8Array): Promise<Uint8Array>;
 
 /**
  * Adelos Indexer - Privacy-Preserving Transaction Scanner
@@ -180,4 +186,4 @@ declare class AdelosSDK {
     sendAndConfirm(signedTx: Transaction | VersionedTransaction): Promise<string>;
 }
 
-export { ADELOS_CONFIG, AdelosIndexer, type AdelosOptions, AdelosSDK, MEMO_PREFIX, MEMO_PROGRAM_ID, PROGRAM_ID, REGISTRY_SEED, RPC_URL, type RegistryAccount, type RegistryInfo, STEALTH_DOMAIN, type SolanaCluster, type StealthTransaction, type WithdrawableTransaction, bytesToHex, computeSharedSecret, computeSharedSecretAsRecipient, createIndexer, derivePublicKey, deriveRegistryPda, deriveStealthPubkey, generateEphemeralKeypair, generateStealthAddress, generateStealthMemo, getDiscriminator, hexToBytes, isValidMetaPubkey, parseStealthMemo, recoverStealthSecretKey };
+export { ADELOS_CONFIG, AdelosIndexer, type AdelosOptions, AdelosSDK, MEMO_PREFIX, MEMO_PROGRAM_ID, PROGRAM_ID, REGISTRY_SEED, RPC_URL, type RegistryAccount, type RegistryInfo, STEALTH_DOMAIN, type SolanaCluster, type StealthTransaction, type WithdrawableTransaction, bytesToHex, computeSharedSecret, computeSharedSecretAsRecipient, createIndexer, derivePublicKey, deriveRegistryPda, deriveStealthPubkey, generateEphemeralKeypair, generateStealthAddress, generateStealthMemo, getDiscriminator, hexToBytes, isValidMetaPubkey, parseStealthMemo, recoverStealthSecretKey, signWithScalar };

package/dist/index.d.ts

@@ -115,6 +115,12 @@ declare function generateStealthAddress(recipientMetaPk: Uint8Array): {
     sharedSecret: Uint8Array<ArrayBufferLike>;
     memo: string;
 };
+/**
+ * Sign a message using a raw private SCALAR (not seed).
+ * Required because derived stealth keys are scalars, not seeds.
+ * Uses a random nonce for R, valid for Ed25519.
+ */
+declare function signWithScalar(message: Uint8Array, scalarBytes: Uint8Array): Promise<Uint8Array>;
 
 /**
  * Adelos Indexer - Privacy-Preserving Transaction Scanner
@@ -180,4 +186,4 @@ declare class AdelosSDK {
     sendAndConfirm(signedTx: Transaction | VersionedTransaction): Promise<string>;
 }
 
-export { ADELOS_CONFIG, AdelosIndexer, type AdelosOptions, AdelosSDK, MEMO_PREFIX, MEMO_PROGRAM_ID, PROGRAM_ID, REGISTRY_SEED, RPC_URL, type RegistryAccount, type RegistryInfo, STEALTH_DOMAIN, type SolanaCluster, type StealthTransaction, type WithdrawableTransaction, bytesToHex, computeSharedSecret, computeSharedSecretAsRecipient, createIndexer, derivePublicKey, deriveRegistryPda, deriveStealthPubkey, generateEphemeralKeypair, generateStealthAddress, generateStealthMemo, getDiscriminator, hexToBytes, isValidMetaPubkey, parseStealthMemo, recoverStealthSecretKey };
+export { ADELOS_CONFIG, AdelosIndexer, type AdelosOptions, AdelosSDK, MEMO_PREFIX, MEMO_PROGRAM_ID, PROGRAM_ID, REGISTRY_SEED, RPC_URL, type RegistryAccount, type RegistryInfo, STEALTH_DOMAIN, type SolanaCluster, type StealthTransaction, type WithdrawableTransaction, bytesToHex, computeSharedSecret, computeSharedSecretAsRecipient, createIndexer, derivePublicKey, deriveRegistryPda, deriveStealthPubkey, generateEphemeralKeypair, generateStealthAddress, generateStealthMemo, getDiscriminator, hexToBytes, isValidMetaPubkey, parseStealthMemo, recoverStealthSecretKey, signWithScalar };

package/dist/index.js

@@ -53,7 +53,8 @@ __export(index_exports, {
   hexToBytes: () => hexToBytes,
   isValidMetaPubkey: () => isValidMetaPubkey,
   parseStealthMemo: () => parseStealthMemo,
-  recoverStealthSecretKey: () => recoverStealthSecretKey
+  recoverStealthSecretKey: () => recoverStealthSecretKey,
+  signWithScalar: () => signWithScalar
 });
 module.exports = __toCommonJS(index_exports);
 var import_web33 = require("@solana/web3.js");
@@ -186,6 +187,27 @@ function generateStealthAddress(recipientMetaPk) {
   const memo = generateStealthMemo(ephemeralKeypair.publicKey);
   return { stealthPubkey, ephemeralKeypair, sharedSecret, memo };
 }
+async function signWithScalar(message, scalarBytes) {
+  const scalar = toScalar(scalarBytes);
+  const pubPoint = ed.ExtendedPoint.BASE.multiply(scalar);
+  const pubBytes = pubPoint.toRawBytes();
+  const rBytes = ed.utils.randomPrivateKey();
+  const rScalar = toScalar(rBytes);
+  const R = ed.ExtendedPoint.BASE.multiply(rScalar);
+  const RBytes = R.toRawBytes();
+  const content = new Uint8Array(RBytes.length + pubBytes.length + message.length);
+  content.set(RBytes);
+  content.set(pubBytes, RBytes.length);
+  content.set(message, RBytes.length + pubBytes.length);
+  const hram = (0, import_sha512.sha512)(content);
+  const k = ed.etc.mod(BigInt("0x" + bytesToHex(hram)), ed.CURVE.n);
+  const S = ed.etc.mod(rScalar + k * scalar, ed.CURVE.n);
+  const SBytes = hexToBytes(S.toString(16).padStart(64, "0"));
+  const signature = new Uint8Array(64);
+  signature.set(RBytes);
+  signature.set(SBytes, 32);
+  return signature;
+}
 
 // src/logger.ts
 var debugMode = false;
@@ -396,11 +418,6 @@ var AdelosSDK = class {
    * @param amountLamports - Amount to withdraw in lamports (use BigInt)
    */
   async createWithdrawTransaction(stealthSecretKey, stealthAddress, destination, amountLamports) {
-    const { Keypair } = await import("@solana/web3.js");
-    const stealthKeypair = Keypair.fromSeed(stealthSecretKey);
-    if (!stealthKeypair.publicKey.equals(stealthAddress)) {
-      throw new Error("Stealth secret key does not match stealth address");
-    }
     const ix = import_web33.SystemProgram.transfer({
       fromPubkey: stealthAddress,
       toPubkey: destination,
@@ -414,7 +431,9 @@ var AdelosSDK = class {
       instructions: [ix]
     }).compileToV0Message();
     const tx = new import_web33.VersionedTransaction(message);
-    tx.sign([stealthKeypair]);
+    const serializedMessage = message.serialize();
+    const signature = await signWithScalar(serializedMessage, stealthSecretKey);
+    tx.addSignature(stealthAddress, Buffer.from(signature));
     const sig = await this.connection.sendRawTransaction(tx.serialize());
     await this.connection.confirmTransaction(sig, "confirmed");
     return { transaction: tx, signature: sig };
@@ -468,5 +487,6 @@ var AdelosSDK = class {
   hexToBytes,
   isValidMetaPubkey,
   parseStealthMemo,
-  recoverStealthSecretKey
+  recoverStealthSecretKey,
+  signWithScalar
 });

package/dist/index.mjs

@@ -137,6 +137,27 @@ function generateStealthAddress(recipientMetaPk) {
   const memo = generateStealthMemo(ephemeralKeypair.publicKey);
   return { stealthPubkey, ephemeralKeypair, sharedSecret, memo };
 }
+async function signWithScalar(message, scalarBytes) {
+  const scalar = toScalar(scalarBytes);
+  const pubPoint = ed.ExtendedPoint.BASE.multiply(scalar);
+  const pubBytes = pubPoint.toRawBytes();
+  const rBytes = ed.utils.randomPrivateKey();
+  const rScalar = toScalar(rBytes);
+  const R = ed.ExtendedPoint.BASE.multiply(rScalar);
+  const RBytes = R.toRawBytes();
+  const content = new Uint8Array(RBytes.length + pubBytes.length + message.length);
+  content.set(RBytes);
+  content.set(pubBytes, RBytes.length);
+  content.set(message, RBytes.length + pubBytes.length);
+  const hram = sha512(content);
+  const k = ed.etc.mod(BigInt("0x" + bytesToHex(hram)), ed.CURVE.n);
+  const S = ed.etc.mod(rScalar + k * scalar, ed.CURVE.n);
+  const SBytes = hexToBytes(S.toString(16).padStart(64, "0"));
+  const signature = new Uint8Array(64);
+  signature.set(RBytes);
+  signature.set(SBytes, 32);
+  return signature;
+}
 
 // src/logger.ts
 var debugMode = false;
@@ -347,11 +368,6 @@ var AdelosSDK = class {
    * @param amountLamports - Amount to withdraw in lamports (use BigInt)
    */
   async createWithdrawTransaction(stealthSecretKey, stealthAddress, destination, amountLamports) {
-    const { Keypair } = await import("@solana/web3.js");
-    const stealthKeypair = Keypair.fromSeed(stealthSecretKey);
-    if (!stealthKeypair.publicKey.equals(stealthAddress)) {
-      throw new Error("Stealth secret key does not match stealth address");
-    }
     const ix = SystemProgram.transfer({
       fromPubkey: stealthAddress,
       toPubkey: destination,
@@ -365,7 +381,9 @@ var AdelosSDK = class {
       instructions: [ix]
     }).compileToV0Message();
     const tx = new VersionedTransaction(message);
-    tx.sign([stealthKeypair]);
+    const serializedMessage = message.serialize();
+    const signature = await signWithScalar(serializedMessage, stealthSecretKey);
+    tx.addSignature(stealthAddress, Buffer.from(signature));
     const sig = await this.connection.sendRawTransaction(tx.serialize());
     await this.connection.confirmTransaction(sig, "confirmed");
     return { transaction: tx, signature: sig };
@@ -418,5 +436,6 @@ export {
   hexToBytes,
   isValidMetaPubkey,
   parseStealthMemo,
-  recoverStealthSecretKey
+  recoverStealthSecretKey,
+  signWithScalar
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adelos/sdk",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "Adelos Protocol SDK - Privacy Stealth Transfers on Solana",
   "main": "dist/index.js",
   "module": "dist/index.mjs",