@arcanetech/privacy-sdk-stellar 0.2.3 → 0.4.1

package/dist/testing/index.d.ts

@@ -1,5 +1,4 @@
 import { OperationKind, DepositIntent, TransferIntent, WithdrawIntent } from '@arcanetech/privacy-sdk-core';
-import { OnboardingPayload } from 'contract';
 export { createInMemoryStateAdapter } from '@arcanetech/privacy-sdk-state-memory';
 
 type StellarPrivateRecordStatus = 'pending' | 'finalized' | 'spent';
@@ -12,25 +11,6 @@ interface StellarPrivateCoinNote {
     asset_lo: string;
     application_id?: string;
 }
-interface StellarPendingClaim {
-    id: string;
-    owner: StellarAddress;
-    asset: StellarAssetId;
-    amount: bigint;
-    createdAt: string;
-    poolTxId?: string;
-    commitmentHex?: string;
-    nullifierHex?: string;
-    futureNullifierHashHex?: string;
-    assetHiHex?: string;
-    assetLoHex?: string;
-    nullifierFieldHex?: string;
-    secretHex?: string;
-    tempPublicKeyXHex?: string;
-    tempPublicKeyYHex?: string;
-    encryptedRecoveryBase64?: string;
-    createdAtLedger?: number;
-}
 interface StellarPrivateRecord {
     id: string;
     owner: StellarAddress;
@@ -50,16 +30,9 @@ interface StellarPrivateRecord {
     precommitementHex?: string;
 }
 
-type KytApplicationIdHints = [string, string, string, string];
+type KytApplicationIdHints = string[];
 
-type StellarPendingClaimSource = {
-    kind: 'pendingClaim';
-    claimId: string;
-} | {
-    kind: 'pendingClaim';
-    claim: StellarPendingClaim;
-};
-type StellarTransferFromAddress = StellarAddress | StellarPendingClaimSource;
+type StellarTransferFromAddress = StellarAddress;
 
 type StellarAddress = string;
 type StellarAssetId = string;
@@ -82,16 +55,25 @@ interface StellarSubmissionPayload {
 interface StellarTransactArtifacts {
     proofHex?: string;
     publicHex?: string;
+    ciphertextHex?: string;
+    outputNoteEphemeralScalars?: string[];
     applicationIdsPlaintext?: KytApplicationIdHints;
     tokenAddress?: string;
     depositScalarHex?: string;
     precommitementHex?: string;
     commitmentHex?: string;
     walletPublicKey?: string;
-    onboarding?: OnboardingPayload;
+    escrowRecipient?: string;
+    escrowAuthorization?: string;
+    escrowSend?: boolean;
+    escrowSpendScalarHex?: string;
+    escrowClaimantLimbs?: {
+        recipientHi: string;
+        recipientLo: string;
+        nonceDecimal?: string;
+    };
     executeFinalizeRequired?: boolean;
-    pendingClaim?: StellarPendingClaim;
-    spendSource?: 'privateAddress' | 'pendingClaim';
+    spendSource?: 'privateAddress' | 'escrow';
 }
 interface StellarOperationReceipt {
     operationId: string;

package/dist/transact/index.d.ts

@@ -1,10 +1,34 @@
-import { DepositObject, CoinData, AuditPublicKey, PrivacyPoolSDK, StateFile, TransactionAuditParams, InspectKytPassageApproved } from '@auditable/privacy-pool-zk-sdk';
-export { DEFAULT_STEALTH_SIGN_NONCE as DEFAULT_PRIVATE_ADDRESS_SIGN_NONCE } from '@auditable/privacy-pool-zk-sdk';
+import { SpendScalarDomain, PrivacyPoolSDK, DepositObject, CoinData, ZkCircuitLayoutFields, BundledZkCircuit, AuditPublicKey, StateFile, TransactionAuditParams, InspectKytPassageApproved } from '@arcanetech/stellar-privacy-pool-zk-sdk';
+export { BundledZkCircuit, DEFAULT_STEALTH_SIGN_NONCE as DEFAULT_PRIVATE_ADDRESS_SIGN_NONCE, OWNER_BOUND_NOTE_SCHEMA_VERSION, SpendScalarDomain, spendScalarHexFromStellarSignature } from '@arcanetech/stellar-privacy-pool-zk-sdk';
 import { Buffer as Buffer$1 } from 'buffer';
-import { OnboardingPayload } from 'contract';
-export { OnboardingPayload, PrivateAddressRegistration } from 'contract';
+import { OperationKind, DepositIntent, TransferIntent, WithdrawIntent } from '@arcanetech/privacy-sdk-core';
 import { StateBridgeAdapter } from '@arcanetech/privacy-sdk-core/state';
 
+type DecodedPrivateAddress = {
+    x: string;
+    y: string;
+};
+type PrivateAddressGenerator = (signature: string, domain: SpendScalarDomain) => string | Promise<string>;
+type PrivateAddressSdk = {
+    generatePrivateAddressFromStellarSignature: PrivateAddressGenerator;
+};
+declare function buildPrivateAddressSignMessage(publicKey: string, domain: SpendScalarDomain, nonce?: string): string;
+declare function decodePrivateAddress(value: string): DecodedPrivateAddress;
+declare function encodePrivateAddress(decoded: DecodedPrivateAddress): string;
+declare function encodePrivateAddressFromHexCoordinates(publicKeyXHex: string, publicKeyYHex: string): string;
+declare function recipientPublicKeysDecimalFromPrivateAddress(value: string): unknown;
+declare function privateAddressSdk(sdk: PrivacyPoolSDK): PrivateAddressSdk;
+
+type StellarPrivateRecordStatus = 'pending' | 'finalized' | 'spent';
+interface StellarPrivateCoinNote {
+    value: string;
+    nullifier: string;
+    secret: string;
+    commitment: string;
+    asset_hi: string;
+    asset_lo: string;
+    application_id?: string;
+}
 interface StellarPoolMerkleState {
     poolContract: string;
     commitments: string[];
@@ -20,6 +44,24 @@ interface StellarLeafEphemeral {
     yHex: string;
     cachedAt?: string;
 }
+interface StellarPrivateRecord {
+    id: string;
+    owner: StellarAddress;
+    asset: StellarAssetId;
+    amount: bigint;
+    consumed: boolean;
+    status?: StellarPrivateRecordStatus;
+    poolContract?: string;
+    commitmentHex?: string;
+    nullifierHex?: string;
+    amountDisplay?: number;
+    deliveryId?: number;
+    privateAddress?: string;
+    txHash?: string;
+    coinNote?: StellarPrivateCoinNote;
+    depositScalarHex?: string;
+    precommitementHex?: string;
+}
 
 type AlignedDepositSlot = {
     deposit: DepositObject;
@@ -28,11 +70,13 @@ type AlignedDepositSlot = {
     depositScalarHex: string;
     precommitementHex: string;
 };
-type KytApplicationIdHints = [string, string, string, string];
+type KytApplicationIdHints = string[];
 type ProofResult = {
     proof_hex: string;
     public_hex: string;
     applicationIdsPlaintext: KytApplicationIdHints;
+    ciphertext_hex?: string;
+    output_note_ephemeral_scalars?: string[];
 };
 type ProofWithChange = ProofResult & {
     changeCoin?: {
@@ -43,6 +87,8 @@ type ProofWithChange = ProofResult & {
     };
 };
 
+type StellarTransferFromAddress = StellarAddress;
+
 interface PoolMerkleStatePort {
     get(poolContract: string): Promise<StellarPoolMerkleState | undefined>;
     set(state: StellarPoolMerkleState): Promise<void>;
@@ -63,33 +109,68 @@ type StellarSignTransaction = (input: {
     signedTxXdr: string;
 }>;
 
+type StellarBundledZkCircuitDefinition = ZkCircuitLayoutFields & {
+    circuit: BundledZkCircuit;
+};
+type StellarCustomZkCircuitDefinition = ZkCircuitLayoutFields & {
+    zkeyUrl: string;
+    circuitGraphUrl: string;
+    r1csUrl: string;
+    provingKeyUrl: string;
+};
+type StellarZkCircuitDefinition = StellarBundledZkCircuitDefinition | StellarCustomZkCircuitDefinition;
+declare const DEFAULT_STELLAR_ZK_CIRCUITS: Record<string, StellarBundledZkCircuitDefinition>;
+declare function optionalZkArtifactBaseUrl(value: string | undefined): {
+    zkArtifactBaseUrl?: string;
+};
+
 interface TransferTemporaryRecipientKey {
     temporaryScalarHex: string;
     temporaryPrivateAddressStpl1: string;
 }
-interface TransferOnboardingRecipientNoteInput$1 {
-    tokenAddress: string;
-    nullifier: string;
-    secret: string;
-    value: string;
+interface TransferEscrowSend {
+    nonceDecimal: string;
+    recipientHi: string;
+    recipientLo: string;
+    recipientStellarAddress: string;
+}
+interface TransferEscrowClaimantLimbs {
+    recipientHi: string;
+    recipientLo: string;
+    nonceDecimal?: string;
 }
 interface TransferRecipientExecutionContext {
     recipientPrivateAddressStpl1: string;
     recipientStellarAddress?: string;
+    escrowSend?: TransferEscrowSend;
     temporaryRecipientKey?: TransferTemporaryRecipientKey;
 }
-interface BuildTransferOnboardingAtExecuteInput {
-    ownerStellarAddress: string;
-    temporaryRecipientKey: TransferTemporaryRecipientKey;
-    recipientNote: TransferOnboardingRecipientNoteInput$1;
-}
 interface StellarKytEnvironment {
     apiBaseUrl: string;
     kytPassageRegistryContract: string;
     registerPassageOnChain?: boolean;
+    inspectAuthorization?: string;
 }
 interface StellarTransactEnvironment {
     network: StellarNetworkConfig;
+    /**
+     * Nonce (persistent storage key) of the pool's `ZkConfig` entry this
+     * environment's proofs/circuit shape target. Defaults to `2n` (Commitment
+     * V2, 95 public signals) when omitted. Nonce `0` is the retired 93-signal
+     * layout and must be passed explicitly.
+     */
+    zkConfigNonce?: bigint;
+    /**
+     * Optional nonce-keyed circuit map. Defaults to the SDK bundled 2×2 (nonce 2)
+     * and 6×6 (nonce 6) schemes. URL fields are only for a custom/dev circuit.
+     */
+    zkCircuits?: Record<string, StellarZkCircuitDefinition>;
+    /**
+     * Directory or HTTP prefix for graph / r1cs / proving-key files.
+     * Defaults to the GitHub release for `@arcanetech/stellar-privacy-pool-zk-sdk`.
+     * Staging and local stands override this to serve files from disk.
+     */
+    zkArtifactBaseUrl?: string;
     auditPublicKey?: AuditPublicKey;
     kyt: StellarKytEnvironment;
     signTransaction?: StellarSignTransaction;
@@ -105,14 +186,52 @@ interface StellarTransactEnvironment {
         recipientStellarAddress: string;
         walletPublicKey: string;
     }) => Promise<TransferRecipientExecutionContext>;
-    buildTransferOnboardingAtExecute?: (input: BuildTransferOnboardingAtExecuteInput) => Promise<OnboardingPayload>;
     resolveWalletPublicKey?: () => Promise<string>;
     poolMerkleState?: PoolMerkleStatePort;
     leafEphemeral?: LeafEphemeralStatePort;
 }
 
+type StellarAddress = string;
 type StellarAssetId = string;
 
+type StellarTransferIntent = TransferIntent<StellarTransferFromAddress, StellarAssetId, bigint, StellarAddress>;
+
+interface StellarPreparedOperation {
+    kind: OperationKind;
+    intent: DepositIntent<StellarAddress, StellarAssetId, bigint> | StellarTransferIntent | WithdrawIntent<StellarAddress, StellarAssetId, bigint>;
+    consumedRecords: StellarPrivateRecord[];
+    outputRecords: StellarPrivateRecord[];
+    submissionPayload: StellarSubmissionPayload;
+    transactArtifacts?: StellarTransactArtifacts;
+}
+interface StellarSubmissionPayload {
+    operationId: string;
+    signed: boolean;
+    txHash?: string;
+}
+interface StellarTransactArtifacts {
+    proofHex?: string;
+    publicHex?: string;
+    ciphertextHex?: string;
+    outputNoteEphemeralScalars?: string[];
+    applicationIdsPlaintext?: KytApplicationIdHints;
+    tokenAddress?: string;
+    depositScalarHex?: string;
+    precommitementHex?: string;
+    commitmentHex?: string;
+    walletPublicKey?: string;
+    escrowRecipient?: string;
+    escrowAuthorization?: string;
+    escrowSend?: boolean;
+    escrowSpendScalarHex?: string;
+    escrowClaimantLimbs?: {
+        recipientHi: string;
+        recipientLo: string;
+        nonceDecimal?: string;
+    };
+    executeFinalizeRequired?: boolean;
+    spendSource?: 'privateAddress' | 'escrow';
+}
 interface StellarNetworkConfig {
     id: string;
     rpcUrl: string;
@@ -123,27 +242,31 @@ interface StellarNetworkConfig {
 }
 interface StellarBrowserAssets {
     sdkWasm: ArrayBuffer;
-    circuitWasm: ArrayBuffer;
-    provingKey: ArrayBuffer;
 }
 
 declare class PrivacyPoolService {
     private readonly assets?;
     private readonly applicationId?;
     private readonly auditPublicKey?;
+    private readonly zkCircuits?;
+    private readonly zkConfigNonce?;
+    private readonly zkArtifactBaseUrl?;
     private sdk;
     private initPromise;
-    constructor(assets?: StellarBrowserAssets | undefined, applicationId?: string | undefined, auditPublicKey?: [string, string] | undefined);
+    constructor(assets?: StellarBrowserAssets | undefined, applicationId?: string | undefined, auditPublicKey?: [string, string] | undefined, zkCircuits?: Record<string, StellarZkCircuitDefinition> | undefined, zkConfigNonce?: bigint | undefined, zkArtifactBaseUrl?: string | undefined);
     private ensureInit;
     getInitializedSdk(): Promise<PrivacyPoolSDK>;
     getAuditPublicKey(): [string, string] | undefined;
     getApplicationId(): string;
-    generatePrivateAddressFromStellarSignature(signature: string): Promise<string>;
+    generatePrivateAddressFromStellarSignature(signature: string, domain: SpendScalarDomain): Promise<string>;
     sharedSecretX(recipientScalarHex: string, ephemeralKeyEncoded: string): Promise<string>;
     buildAlignedDepositSlot(parameters: {
         privateAddressStpl1: string;
         amountStroops: bigint;
         tokenAddress: string;
+        escrowNonce?: string;
+        recipientHi?: string;
+        recipientLo?: string;
     }): Promise<AlignedDepositSlot>;
     createAlignedShieldCoinData(parameters: {
         privateAddressStpl1: string;
@@ -157,7 +280,7 @@ declare class PrivacyPoolService {
         merkleRootBytes: Buffer$1;
         tokenAddress: string;
     }): Promise<ProofResult>;
-    calculateNullifierHash(nullifier: string): Promise<string>;
+    calculateNullifierHash(nullifier: string, privKeyScalar: string): Promise<string>;
     prepareWithdrawTransactProof(parameters: {
         coin: CoinData;
         state: StateFile;
@@ -186,6 +309,9 @@ declare function createPrivacyPoolService(input?: {
     assets?: StellarBrowserAssets;
     applicationId?: string;
     auditPublicKey?: [string, string];
+    zkCircuits?: Record<string, StellarZkCircuitDefinition>;
+    zkConfigNonce?: bigint;
+    zkArtifactBaseUrl?: string;
 }): PrivacyPoolService;
 declare function configurePrivacyPoolService(service: PrivacyPoolService): void;
 declare function getPrivacyPoolService(): PrivacyPoolService;
@@ -194,28 +320,111 @@ declare function parseAuditPublicKeyFromEnvHex(raw: string): AuditPublicKey;
 declare function buildPoolTransactionAuditParameters(input: {
     applicationId: string;
     auditPublicKey?: AuditPublicKey;
+    nAuditSlots?: number;
 }): TransactionAuditParams;
 declare function resolvePoolApplicationId(applicationId: string | undefined): string;
 
-type DecodedPrivateAddress = {
-    x: string;
-    y: string;
+type BlindedRecipientTagChallengeFields = {
+    stellarAddress: string;
+    networkPassphrase: string;
+    issuedAt: string;
+    expiresAt: string;
+    nonce: string;
 };
-type PrivateAddressGenerator = (signature: string) => string | Promise<string>;
-type PrivateAddressSdk = {
-    generatePrivateAddressFromStellarSignature: PrivateAddressGenerator;
+declare function buildBlindedRecipientTagChallengeMessage(fields: BlindedRecipientTagChallengeFields): string;
+
+type DerivedEscrowRecipient = {
+    nonceDecimal: string;
+    recipientHi: string;
+    recipientLo: string;
+    recipientStellarAddress: string;
+    privateAddressStpl1: string;
+    scalarHex: string;
 };
-declare function buildPrivateAddressSignMessage(publicKey: string, nonce: string): string;
-declare function decodePrivateAddress(value: string): DecodedPrivateAddress;
-declare function encodePrivateAddress(decoded: DecodedPrivateAddress): string;
-declare function encodePrivateAddressFromHexCoordinates(publicKeyXHex: string, publicKeyYHex: string): string;
-declare function recipientPublicKeysDecimalFromPrivateAddress(value: string): unknown;
-declare function privateAddressSdk(sdk: PrivacyPoolSDK): PrivateAddressSdk;
+type DerivedEscrowKeyFn = (nonce: bigint, recipientHi: bigint, recipientLo: bigint) => Promise<{
+    scalarHex: string;
+    pointXHex: string;
+    pointYHex: string;
+}>;
+declare function deriveEscrowRecipientFromStellarAddress(input: {
+    recipientStellarAddress: string;
+    nonceDecimal?: string;
+    deriveKey?: DerivedEscrowKeyFn;
+}): Promise<DerivedEscrowRecipient>;
+
+declare function assertEscrowSweepClaimant(input: {
+    walletPublicKey: string;
+    claimantAddress: string;
+}): void;
+
+type EscrowOutputNoteCiphertextEvent = {
+    outputIndex: number;
+    commitmentHashHex: string;
+    createdEphemeralKey: readonly [string, string];
+    ciphertext: readonly string[];
+    tag: string;
+};
+type ReconstructedEscrowNote = {
+    coin: CoinData;
+    scalarHex: string;
+    privateAddressStpl1: string;
+    recipientHi: string;
+    recipientLo: string;
+    nonceDecimal: string;
+    tokenAddress: string;
+    commitmentHex: string;
+};
+type DecryptEscrowOutputNote = (input: {
+    recipientScalarHex: string;
+    commitmentHashHex: string;
+    createdEphemeralKey: readonly [string, string];
+    ciphertext: readonly string[];
+    tag: string;
+    ownerMode?: bigint;
+}) => Promise<{
+    value: string;
+    assetHi: string;
+    assetLo: string;
+    nullifier: string;
+    secret: string;
+    applicationId: string;
+    commitmentHex: string;
+    commitmentMatches: boolean;
+}>;
+declare function reconstructEscrowNote(input: {
+    claimantAddress: string;
+    nonceDecimal: string;
+    seq: number;
+    events: readonly EscrowOutputNoteCiphertextEvent[];
+    decrypt?: DecryptEscrowOutputNote;
+    deriveKey?: DerivedEscrowKeyFn;
+}): Promise<ReconstructedEscrowNote>;
+
+type PrepareEscrowSweepInput = {
+    walletPublicKey: string;
+    claimantAddress: string;
+    registeredPrivateAddress: string;
+    reconstructed: ReconstructedEscrowNote;
+    poolContract: string;
+    asset: string;
+};
+declare function attachEscrowAuthorization(prepared: StellarPreparedOperation, escrowAuthorization: string): StellarPreparedOperation;
+declare function prepareEscrowSweepOperation(input: PrepareEscrowSweepInput): StellarPreparedOperation;
+
+declare function fetchEscrowOutputNoteEvents(input: {
+    transactEnvironment: StellarTransactEnvironment;
+    txId: string;
+    poolAddress: string;
+}): Promise<EscrowOutputNoteCiphertextEvent[]>;
+
+declare function unsignedEscrowAuthorizationForSweep(input: {
+    prepared: StellarPreparedOperation;
+    transactEnvironment: StellarTransactEnvironment;
+    relayerPublicKey: string;
+}): Promise<string>;
 
 interface LoadBrowserAssetsInput {
     sdkWasmUrl: string;
-    circuitWasmUrl: string;
-    provingKeyUrl: string;
     cacheBust?: boolean;
 }
 declare function loadStellarBrowserAssets(input: LoadBrowserAssetsInput): Promise<StellarBrowserAssets>;
@@ -223,30 +432,18 @@ declare function loadDefaultStellarBrowserAssets(options?: {
     cacheBust?: boolean;
 }): Promise<StellarBrowserAssets>;
 
+declare const STANDARD_ZK_CONFIG_NONCE = 0n;
+declare const COMMITMENT_V2_ZK_NONCE = 2n;
+declare const SIX_BY_SIX_ZK_NONCE = 6n;
+declare const DEFAULT_ZK_CONFIG_NONCE = 3n;
+declare function resolveZkConfigNonce(transactEnvironment: StellarTransactEnvironment): bigint;
+
+declare function generateRandomDepositScalarHex(): Promise<string>;
 declare function generateTemporaryRecipientPrivateAddress(): Promise<{
     temporaryScalarHex: string;
     temporaryPrivateAddressStpl1: string;
 }>;
 
-type TransferOnboardingRecipientNoteInput = {
-    tokenAddress: string;
-    nullifier: string;
-    secret: string;
-    value: string;
-};
-type TemporaryRecipientKeyMaterial = {
-    temporaryScalarHex: string;
-    temporaryPrivateAddressStpl1: string;
-};
-declare function generateRandomDepositScalarHex(): Promise<string>;
-declare function buildOnboardingPayload(parameters: {
-    ownerStellarAddress: string;
-    temporaryKey: TemporaryRecipientKeyMaterial;
-    recipientNotes: TransferOnboardingRecipientNoteInput[];
-    permanentPrivateAddressStpl1?: string;
-}): OnboardingPayload;
-declare function buildTransferOnboardingAtExecute(input: BuildTransferOnboardingAtExecuteInput): Promise<OnboardingPayload>;
-
 declare class KytInspectError extends Error {
     readonly reasonCode: string;
     readonly decisionId?: string;
@@ -282,7 +479,8 @@ interface SubmitSorobanConfidentialTransferInput {
     walletPublicKey: string;
     proofHex: string;
     publicHex: string;
-    onboarding?: OnboardingPayload;
+    ciphertextHex?: string;
+    outputNoteEphemeralScalars?: string[];
     applicationIdsPlaintext?: KytApplicationIdHints;
     networkPassphrase: string;
     sorobanRpcUrl: string;
@@ -304,7 +502,6 @@ type PrepareConfidentialTransferProofDualParameters = {
     coinA: CoinData;
     coinB: CoinData;
     state: StateFile;
-    senderGAddress: string;
     senderPrivKeyScalarHex: string;
     ephemeralAKey: string;
     ephemeralBKey: string;
@@ -312,10 +509,14 @@ type PrepareConfidentialTransferProofDualParameters = {
     recipientPrivateAddressStpl1: string;
     selfPrivateAddressStpl1ForChange: string | undefined;
     tokenAddress: string;
+    escrowSend?: TransferEscrowSend;
+    escrowClaimantLimbs?: TransferEscrowClaimantLimbs;
 };
 type PrepareConfidentialTransferProofDualResult = {
     proof_hex: string;
     public_hex: string;
+    ciphertext_hex?: string;
+    output_note_ephemeral_scalars?: string[];
     applicationIdsPlaintext: KytApplicationIdHints;
     recipientCoin: GeneratedOutputCoin;
     changeCoin?: GeneratedOutputCoin;
@@ -325,17 +526,20 @@ declare function prepareConfidentialTransferProofDual(parameters: PrepareConfide
 type PrepareConfidentialTransferProofParameters = {
     coin: CoinData;
     state: StateFile;
-    senderGAddress: string;
     senderPrivKeyScalarHex: string;
     depositorEphemeralKey: string;
     transferStroops: bigint;
     recipientPrivateAddressStpl1: string;
     selfPrivateAddressStpl1ForChange: string | undefined;
     tokenAddress: string;
+    escrowSend?: TransferEscrowSend;
+    escrowClaimantLimbs?: TransferEscrowClaimantLimbs;
 };
 type PrepareConfidentialTransferProofResult = {
     proof_hex: string;
     public_hex: string;
+    ciphertext_hex?: string;
+    output_note_ephemeral_scalars?: string[];
     applicationIdsPlaintext: KytApplicationIdHints;
     recipientCoin: GeneratedOutputCoin;
     changeCoin?: GeneratedOutputCoin;
@@ -378,7 +582,8 @@ interface RequestKytPassageForPoolInteractionInput {
     poolContract: string;
     proofHex: string;
     publicHex: string;
-    onboarding?: OnboardingPayload;
+    ciphertextHex?: string;
+    outputNoteEphemeralScalars?: string[];
     decryptedAuditSlots?: DecryptedKytAuditSlot[];
     applicationIdsPlaintext?: KytApplicationIdHints;
     networkPassphrase: string;
@@ -396,4 +601,106 @@ declare function runTtlPreflight(assembledTransaction: unknown): Promise<void>;
 
 declare function attachPoolStatePorts(transactEnvironment: StellarTransactEnvironment | undefined, state: StateBridgeAdapter): StellarTransactEnvironment | undefined;
 
-export { type AlignedDepositSlot, type BuildTransferOnboardingAtExecuteInput, type KytApplicationIdHints, KytInspectError, type LoadBrowserAssetsInput, MIN_CONFIDENTIAL_TRANSFER_STROOPS, PrivacyPoolService, type ProofResult, type ProofWithChange, type RequestKytPassageForPoolInteractionInput, type StellarKytEnvironment, type StellarTransactEnvironment, type TemporaryRecipientKeyMaterial, type TransferOnboardingRecipientNoteInput$1 as TransferOnboardingRecipientNoteInput, type TransferRecipientExecutionContext, type TransferTemporaryRecipientKey, ZERO_STROOPS, assetLegToTokenAddress, attachPoolStatePorts, buildOnboardingPayload, buildPoolTransactionAuditParameters, buildPrivateAddressSignMessage, buildTransferOnboardingAtExecute, configurePrivacyPoolService, createPrivacyPoolService, decodePrivateAddress, encodePrivateAddress, encodePrivateAddressFromHexCoordinates, fetchAndMergeMerkleState, frDecimalToPaddedBytes32, generateRandomDepositScalarHex, generateTemporaryRecipientPrivateAddress, getPrivacyPoolService, loadDefaultStellarBrowserAssets, loadStellarBrowserAssets, parseAuditPublicKeyFromEnvHex, parseKytReasonCode, prepareConfidentialTransferProof, prepareConfidentialTransferProofDual, privateAddressSdk, readLeafEphemeralHex, recipientPublicKeysDecimalFromPrivateAddress, requestKytPassageForPoolInteraction, resolvePoolApplicationId, runTtlPreflight, submitSorobanConfidentialTransfer, submitSorobanDeposit, tokenAddressToAssetLeg };
+declare function finalizeSpendOperationAtExecute(prepared: StellarPreparedOperation, environment: StellarTransactEnvironment, poolService: PrivacyPoolService): Promise<StellarPreparedOperation>;
+
+declare const RELAY_TRANSACT_PACKAGE_VERSION_V1 = 1;
+declare const RELAY_TRANSACT_SUPPORTED_SIGNAL_COUNT = 93;
+declare const RELAY_TRANSACT_FIELD_BYTES = 32;
+declare const RELAY_TRANSACT_SIGNAL_PREFIX_BYTES = 4;
+declare const RELAY_SIGNAL_INDEX_NULLIFIER_0 = 0;
+declare const RELAY_SIGNAL_INDEX_NULLIFIER_1 = 1;
+declare const RELAY_SIGNAL_INDEX_STATE_ROOT = 82;
+declare const RELAY_SIGNAL_INDEX_WITHDRAW_ADDRESS_HI = 83;
+declare const RELAY_SIGNAL_INDEX_WITHDRAW_ADDRESS_LO = 84;
+declare const RELAY_SIGNAL_INDEX_ESCROW_RECIPIENT_HI = 85;
+declare const RELAY_SIGNAL_INDEX_ESCROW_RECIPIENT_LO = 86;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL_ASSET_HI = 87;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL_ASSET_LO = 88;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT_ASSET_HI = 89;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT_ASSET_LO = 90;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT = 91;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL = 92;
+
+type RelayTransactPackageVersion = typeof RELAY_TRANSACT_PACKAGE_VERSION_V1;
+type RelayKeyVersionHints = [
+    number | undefined,
+    number | undefined,
+    number | undefined,
+    number | undefined
+];
+type RelayTransactPackageV1 = {
+    version: RelayTransactPackageVersion;
+    poolSelector: string;
+    zkConfigNonce: bigint;
+    proofBytes: string;
+    publicSignals: string;
+    ciphertextBytes?: string;
+    outputNoteEphemeralScalars?: string[];
+    applicationIdHints: KytApplicationIdHints;
+    escrowAuthorization?: string;
+    keyVersionHints?: RelayKeyVersionHints;
+};
+type PrepareRelayTransactPackageInput = {
+    poolSelector: string;
+    proofBytes: string;
+    publicSignals: string;
+    ciphertextBytes?: string;
+    outputNoteEphemeralScalars?: string[];
+    applicationIdHints: KytApplicationIdHints;
+    zkConfigNonce?: bigint;
+    escrowAuthorization?: string;
+    keyVersionHints?: RelayKeyVersionHints;
+};
+
+declare function prepareRelayTransactPackage(input: PrepareRelayTransactPackageInput): RelayTransactPackageV1;
+
+type PrepareRelayTransactPackageFromPreparedInput = {
+    prepared: StellarPreparedOperation;
+    poolSelector: string;
+    zkConfigNonce?: bigint;
+    keyVersionHints?: RelayKeyVersionHints;
+};
+declare function prepareRelayTransactPackageFromPrepared(input: PrepareRelayTransactPackageFromPreparedInput): RelayTransactPackageV1;
+
+type RelayTransactPublicLegContext = {
+    stateRoot: string;
+    withdrawAddressHi: string;
+    withdrawAddressLo: string;
+    escrowRecipientHi: string;
+    escrowRecipientLo: string;
+    publicWithdrawalAssetHi: string;
+    publicWithdrawalAssetLo: string;
+    publicDepositAssetHi: string;
+    publicDepositAssetLo: string;
+    publicDepositAmount: string;
+    publicWithdrawalAmount: string;
+};
+type RelayTransactSupportedProfile = {
+    orderedNullifiers: [string, string];
+    publicLegContext: RelayTransactPublicLegContext;
+};
+declare function readRelayTransactSupportedProfile(prepared: RelayTransactPackageV1): RelayTransactSupportedProfile;
+
+declare const SUBMISSION_METHOD: {
+    readonly direct: "direct";
+    readonly relay: "relay";
+};
+type SubmissionMethod = (typeof SUBMISSION_METHOD)[keyof typeof SUBMISSION_METHOD];
+declare const ESCROW_SUBMISSION_REFUSAL: {
+    readonly positivePublicDeposit: "escrow_positive_public_deposit";
+};
+type EscrowSubmissionRefusal = (typeof ESCROW_SUBMISSION_REFUSAL)[keyof typeof ESCROW_SUBMISSION_REFUSAL];
+type RequiredSubmissionMethodResult = {
+    method: SubmissionMethod;
+} | {
+    refused: EscrowSubmissionRefusal;
+};
+declare class EscrowSubmissionRefusedError extends Error {
+    readonly reason: EscrowSubmissionRefusal;
+    constructor(reason: EscrowSubmissionRefusal);
+}
+declare function isEscrowPreparedOperation(prepared: StellarPreparedOperation): boolean;
+declare function evaluateRequiredSubmissionMethod(prepared: StellarPreparedOperation, zkConfigNonce?: bigint): RequiredSubmissionMethodResult;
+declare function requiredSubmissionMethod(prepared: StellarPreparedOperation, zkConfigNonce?: bigint): SubmissionMethod;
+
+export { type AlignedDepositSlot, type BlindedRecipientTagChallengeFields, COMMITMENT_V2_ZK_NONCE, DEFAULT_STELLAR_ZK_CIRCUITS, DEFAULT_ZK_CONFIG_NONCE, ESCROW_SUBMISSION_REFUSAL, type EscrowOutputNoteCiphertextEvent, type EscrowSubmissionRefusal, EscrowSubmissionRefusedError, type KytApplicationIdHints, KytInspectError, type LoadBrowserAssetsInput, MIN_CONFIDENTIAL_TRANSFER_STROOPS, type PrepareRelayTransactPackageFromPreparedInput, type PrepareRelayTransactPackageInput, PrivacyPoolService, type ProofResult, type ProofWithChange, RELAY_SIGNAL_INDEX_ESCROW_RECIPIENT_HI, RELAY_SIGNAL_INDEX_ESCROW_RECIPIENT_LO, RELAY_SIGNAL_INDEX_NULLIFIER_0, RELAY_SIGNAL_INDEX_NULLIFIER_1, RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT, RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT_ASSET_HI, RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT_ASSET_LO, RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL, RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL_ASSET_HI, RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL_ASSET_LO, RELAY_SIGNAL_INDEX_STATE_ROOT, RELAY_SIGNAL_INDEX_WITHDRAW_ADDRESS_HI, RELAY_SIGNAL_INDEX_WITHDRAW_ADDRESS_LO, RELAY_TRANSACT_FIELD_BYTES, RELAY_TRANSACT_PACKAGE_VERSION_V1, RELAY_TRANSACT_SIGNAL_PREFIX_BYTES, RELAY_TRANSACT_SUPPORTED_SIGNAL_COUNT, type ReconstructedEscrowNote, type RelayKeyVersionHints, type RelayTransactPackageV1, type RelayTransactPackageVersion, type RelayTransactPublicLegContext, type RelayTransactSupportedProfile, type RequestKytPassageForPoolInteractionInput, type RequiredSubmissionMethodResult, SIX_BY_SIX_ZK_NONCE, STANDARD_ZK_CONFIG_NONCE, SUBMISSION_METHOD, type StellarBundledZkCircuitDefinition, type StellarCustomZkCircuitDefinition, type StellarKytEnvironment, type StellarTransactEnvironment, type StellarZkCircuitDefinition, type SubmissionMethod, type TransferEscrowClaimantLimbs, type TransferEscrowSend, type TransferRecipientExecutionContext, type TransferTemporaryRecipientKey, ZERO_STROOPS, assertEscrowSweepClaimant, assetLegToTokenAddress, attachEscrowAuthorization, attachPoolStatePorts, buildBlindedRecipientTagChallengeMessage, buildPoolTransactionAuditParameters, buildPrivateAddressSignMessage, configurePrivacyPoolService, createPrivacyPoolService, decodePrivateAddress, deriveEscrowRecipientFromStellarAddress, encodePrivateAddress, encodePrivateAddressFromHexCoordinates, evaluateRequiredSubmissionMethod, fetchAndMergeMerkleState, fetchEscrowOutputNoteEvents, finalizeSpendOperationAtExecute, frDecimalToPaddedBytes32, generateRandomDepositScalarHex, generateTemporaryRecipientPrivateAddress, getPrivacyPoolService, isEscrowPreparedOperation, loadDefaultStellarBrowserAssets, loadStellarBrowserAssets, optionalZkArtifactBaseUrl, parseAuditPublicKeyFromEnvHex, parseKytReasonCode, prepareConfidentialTransferProof, prepareConfidentialTransferProofDual, prepareEscrowSweepOperation, prepareRelayTransactPackage, prepareRelayTransactPackageFromPrepared, privateAddressSdk, readLeafEphemeralHex, readRelayTransactSupportedProfile, recipientPublicKeysDecimalFromPrivateAddress, reconstructEscrowNote, requestKytPassageForPoolInteraction, requiredSubmissionMethod, resolvePoolApplicationId, resolveZkConfigNonce, runTtlPreflight, submitSorobanConfidentialTransfer, submitSorobanDeposit, tokenAddressToAssetLeg, unsignedEscrowAuthorizationForSweep };