@arcanetech/privacy-sdk-stellar 0.3.0 → 0.5.0

package/dist/index.d.ts

@@ -3,10 +3,8 @@ import { OperationKind, DepositIntent, TransferIntent, WithdrawIntent, createRej
 export { isPreparedOperation } from '@arcanetech/privacy-sdk-core';
 import * as _arcanetech_privacy_sdk_core_state from '@arcanetech/privacy-sdk-core/state';
 import { StateBridgeAdapter, StateBridgeDefinition } from '@arcanetech/privacy-sdk-core/state';
-import { OnboardingPayload } from 'contract';
-export { OnboardingPayload, PrivateAddressRegistration } from 'contract';
-import { DepositObject, CoinData, AuditPublicKey, PrivacyPoolSDK, StateFile, TransactionAuditParams, InspectKytPassageApproved } from '@auditable/privacy-pool-zk-sdk';
-export { DEFAULT_STEALTH_SIGN_NONCE as DEFAULT_PRIVATE_ADDRESS_SIGN_NONCE } from '@auditable/privacy-pool-zk-sdk';
+import { DepositObject, CoinData, ZkCircuitLayoutFields, BundledZkCircuit, AuditPublicKey, SpendScalarDomain, PrivacyPoolSDK, StateFile, TransactionAuditParams, InspectKytPassageApproved } from '@arcanetech/stellar-privacy-pool-zk-sdk';
+export { BundledZkCircuit, DEFAULT_STEALTH_SIGN_NONCE as DEFAULT_PRIVATE_ADDRESS_SIGN_NONCE, OWNER_BOUND_NOTE_SCHEMA_VERSION, SpendScalarDomain, spendScalarHexFromStellarSignature } from '@arcanetech/stellar-privacy-pool-zk-sdk';
 import { Buffer as Buffer$1 } from 'buffer';
 
 type StellarPrivateRecordStatus = 'pending' | 'finalized' | 'spent';
@@ -81,35 +79,6 @@ interface StellarLeafEphemeral {
     yHex: string;
     cachedAt?: string;
 }
-interface StellarPendingClaim {
-    id: string;
-    owner: StellarAddress;
-    asset: StellarAssetId;
-    amount: bigint;
-    createdAt: string;
-    poolTxId?: string;
-    commitmentHex?: string;
-    nullifierHex?: string;
-    futureNullifierHashHex?: string;
-    assetHiHex?: string;
-    assetLoHex?: string;
-    nullifierFieldHex?: string;
-    secretHex?: string;
-    tempPublicKeyXHex?: string;
-    tempPublicKeyYHex?: string;
-    encryptedRecoveryBase64?: string;
-    createdAtLedger?: number;
-}
-interface StellarPendingClaimsPagination {
-    total: number;
-    page: number;
-    pageSize: number;
-    hasMore: boolean;
-}
-interface StellarPendingClaimsState {
-    items: StellarPendingClaim[];
-    pagination?: StellarPendingClaimsPagination;
-}
 interface StellarIncomingDelivery {
     id: number;
     privateAddress: string;
@@ -164,10 +133,6 @@ interface StellarAvailablePrivateRecordsFilter {
     privateAddress?: string;
     asset?: StellarAssetId;
 }
-interface StellarPendingClaimsFilter {
-    owner?: StellarAddress;
-    asset?: StellarAssetId;
-}
 interface StellarIncomingDeliveriesFilter {
     privateAddress: string;
     asset?: StellarAssetId;
@@ -181,11 +146,13 @@ type AlignedDepositSlot = {
     depositScalarHex: string;
     precommitementHex: string;
 };
-type KytApplicationIdHints = [string, string, string, string];
+type KytApplicationIdHints = string[];
 type ProofResult = {
     proof_hex: string;
     public_hex: string;
     applicationIdsPlaintext: KytApplicationIdHints;
+    ciphertext_hex?: string;
+    output_note_ephemeral_scalars?: string[];
 };
 type ProofWithChange = ProofResult & {
     changeCoin?: {
@@ -196,14 +163,7 @@ type ProofWithChange = ProofResult & {
     };
 };
 
-type StellarPendingClaimSource = {
-    kind: 'pendingClaim';
-    claimId: string;
-} | {
-    kind: 'pendingClaim';
-    claim: StellarPendingClaim;
-};
-type StellarTransferFromAddress = StellarAddress | StellarPendingClaimSource;
+type StellarTransferFromAddress = StellarAddress;
 
 interface PoolMerkleStatePort {
     get(poolContract: string): Promise<StellarPoolMerkleState | undefined>;
@@ -225,39 +185,68 @@ type StellarSignTransaction = (input: {
     signedTxXdr: string;
 }>;
 
+type StellarBundledZkCircuitDefinition = ZkCircuitLayoutFields & {
+    circuit: BundledZkCircuit;
+};
+type StellarCustomZkCircuitDefinition = ZkCircuitLayoutFields & {
+    zkeyUrl: string;
+    circuitGraphUrl: string;
+    r1csUrl: string;
+    provingKeyUrl: string;
+};
+type StellarZkCircuitDefinition = StellarBundledZkCircuitDefinition | StellarCustomZkCircuitDefinition;
+declare const DEFAULT_STELLAR_ZK_CIRCUITS: Record<string, StellarBundledZkCircuitDefinition>;
+declare function optionalZkArtifactBaseUrl(value: string | undefined): {
+    zkArtifactBaseUrl?: string;
+};
+
 interface TransferTemporaryRecipientKey {
     temporaryScalarHex: string;
     temporaryPrivateAddressStpl1: string;
 }
-interface TransferOnboardingRecipientNoteInput$1 {
-    tokenAddress: string;
-    nullifier: string;
-    secret: string;
-    value: string;
+interface TransferEscrowSend {
+    nonceDecimal: string;
+    recipientHi: string;
+    recipientLo: string;
+    recipientStellarAddress: string;
+}
+interface TransferEscrowClaimantLimbs {
+    recipientHi: string;
+    recipientLo: string;
+    nonceDecimal?: string;
 }
 interface TransferRecipientExecutionContext {
     recipientPrivateAddressStpl1: string;
     recipientStellarAddress?: string;
+    escrowSend?: TransferEscrowSend;
     temporaryRecipientKey?: TransferTemporaryRecipientKey;
 }
-interface BuildTransferOnboardingAtExecuteInput {
-    ownerStellarAddress: string;
-    temporaryRecipientKey: TransferTemporaryRecipientKey;
-    recipientNote: TransferOnboardingRecipientNoteInput$1;
-}
 interface StellarKytEnvironment {
     apiBaseUrl: string;
     kytPassageRegistryContract: string;
     registerPassageOnChain?: boolean;
+    inspectAuthorization?: string;
 }
 interface StellarTransactEnvironment {
     network: StellarNetworkConfig;
     /**
      * Nonce (persistent storage key) of the pool's `ZkConfig` entry this
-     * environment's proofs/circuit shape target. Defaults to `0n` (the
-     * standard circuit) when omitted.
+     * environment's proofs/circuit shape target. Defaults to `2n` (Commitment
+     * V2, 95 public signals) when omitted. Nonce `0` is the retired 93-signal
+     * layout and must be passed explicitly.
      */
     zkConfigNonce?: bigint;
+    /**
+     * Optional nonce-keyed circuit map. Defaults to the SDK bundled 2×2 (nonce 2)
+     * and 6×6 (nonce 6) schemes. URL fields are only for a custom/dev circuit.
+     */
+    zkCircuits?: Record<string, StellarZkCircuitDefinition>;
+    /**
+     * Directory or HTTP prefix for graph / r1cs / proving-key files.
+     * Defaults to the GitHub release for `@arcanetech/stellar-privacy-pool-zk-sdk`.
+     * Staging and local stands override this to serve files from disk.
+     */
+    zkArtifactBaseUrl?: string;
     auditPublicKey?: AuditPublicKey;
     kyt: StellarKytEnvironment;
     signTransaction?: StellarSignTransaction;
@@ -273,7 +262,6 @@ interface StellarTransactEnvironment {
         recipientStellarAddress: string;
         walletPublicKey: string;
     }) => Promise<TransferRecipientExecutionContext>;
-    buildTransferOnboardingAtExecute?: (input: BuildTransferOnboardingAtExecuteInput) => Promise<OnboardingPayload>;
     resolveWalletPublicKey?: () => Promise<string>;
     poolMerkleState?: PoolMerkleStatePort;
     leafEphemeral?: LeafEphemeralStatePort;
@@ -300,16 +288,25 @@ interface StellarSubmissionPayload {
 interface StellarTransactArtifacts {
     proofHex?: string;
     publicHex?: string;
+    ciphertextHex?: string;
+    outputNoteEphemeralScalars?: string[];
     applicationIdsPlaintext?: KytApplicationIdHints;
     tokenAddress?: string;
     depositScalarHex?: string;
     precommitementHex?: string;
     commitmentHex?: string;
     walletPublicKey?: string;
-    onboarding?: OnboardingPayload;
+    escrowRecipient?: string;
+    escrowAuthorization?: string;
+    escrowSend?: boolean;
+    escrowSpendScalarHex?: string;
+    escrowClaimantLimbs?: {
+        recipientHi: string;
+        recipientLo: string;
+        nonceDecimal?: string;
+    };
     executeFinalizeRequired?: boolean;
-    pendingClaim?: StellarPendingClaim;
-    spendSource?: 'privateAddress' | 'pendingClaim';
+    spendSource?: 'privateAddress' | 'escrow';
 }
 interface StellarOperationReceipt {
     operationId: string;
@@ -325,8 +322,6 @@ interface StellarNetworkConfig {
 }
 interface StellarBrowserAssets {
     sdkWasm: ArrayBuffer;
-    circuitWasm: ArrayBuffer;
-    provingKey: ArrayBuffer;
 }
 interface StellarWalletAdapter {
     getAddress(): Promise<StellarAddress>;
@@ -425,22 +420,6 @@ declare function composeStellarPrivacyClient(config: ResolvedStellarPrivacyClien
         getIncomingDeliveries: (filter: StellarIncomingDeliveriesFilter) => Promise<StellarIncomingDelivery[]>;
         upsertIncomingDeliveries: (deliveries: StellarIncomingDelivery[]) => Promise<void>;
         markDeliveryProcessed(id: number): Promise<void>;
-        getPendingClaims: (filter?: StellarPendingClaimsFilter) => Promise<StellarPendingClaimsState>;
-        getPendingClaimsCount(owner: StellarAddress): Promise<number | undefined>;
-        appendPendingClaims: (claims: StellarPendingClaim[], paginationInfo: StellarPendingClaimsPagination) => Promise<void>;
-        replacePendingClaimsPage: (input: {
-            owner: StellarAddress;
-            claims: StellarPendingClaim[];
-            paginationInfo: StellarPendingClaimsPagination;
-            count?: number;
-        }) => Promise<void>;
-        upsertPendingClaims: (claims: StellarPendingClaim[]) => Promise<void>;
-        removePendingClaims: (ids: string[]) => Promise<void>;
-        clearPendingClaims: (input?: {
-            owner?: StellarAddress;
-            asset?: StellarAssetId;
-        }) => Promise<void>;
-        setPendingClaimsCount: (owner: StellarAddress, count: number) => Promise<void>;
         getLeafEphemeral(input: {
             poolContract: string;
             leafIndex: number;
@@ -512,6 +491,7 @@ declare function composeStellarPrivacyClient(config: ResolvedStellarPrivacyClien
             poolContractId?: string;
             nullifier: string;
             walletPublicKey: string;
+            privKeyScalarHex: string;
         }) => Promise<{
             spent: boolean;
             nullifierHashHex: string;
@@ -557,18 +537,6 @@ declare function composeStellarPrivacyClient(config: ResolvedStellarPrivacyClien
 };
 type ComposedStellarPrivacyClient = ReturnType<typeof composeStellarPrivacyClient>;
 
-interface LoadPendingClaimsFromBackendInput {
-    backendBaseUrl: string;
-    ownerAddress: StellarAddress;
-    asset?: StellarAssetId;
-    page?: number;
-    pageSize?: number;
-}
-interface LoadPendingClaimsCountFromBackendInput {
-    backendBaseUrl: string;
-    ownerAddress: StellarAddress;
-}
-
 declare function readPrivateRecordsFromStateSnapshot(state: unknown): StellarPrivateRecord[];
 declare function readWalletPrivateAddressScalarFromStateSnapshot(input: {
     state: unknown;
@@ -632,22 +600,6 @@ declare function composeStellarStateService(adapter: StateBridgeAdapter): {
     getIncomingDeliveries: (filter: StellarIncomingDeliveriesFilter) => Promise<StellarIncomingDelivery[]>;
     upsertIncomingDeliveries: (deliveries: StellarIncomingDelivery[]) => Promise<void>;
     markDeliveryProcessed(id: number): Promise<void>;
-    getPendingClaims: (filter?: StellarPendingClaimsFilter) => Promise<StellarPendingClaimsState>;
-    getPendingClaimsCount(owner: StellarAddress): Promise<number | undefined>;
-    appendPendingClaims: (claims: StellarPendingClaim[], paginationInfo: StellarPendingClaimsPagination) => Promise<void>;
-    replacePendingClaimsPage: (input: {
-        owner: StellarAddress;
-        claims: StellarPendingClaim[];
-        paginationInfo: StellarPendingClaimsPagination;
-        count?: number;
-    }) => Promise<void>;
-    upsertPendingClaims: (claims: StellarPendingClaim[]) => Promise<void>;
-    removePendingClaims: (ids: string[]) => Promise<void>;
-    clearPendingClaims: (input?: {
-        owner?: StellarAddress;
-        asset?: StellarAssetId;
-    }) => Promise<void>;
-    setPendingClaimsCount: (owner: StellarAddress, count: number) => Promise<void>;
     getLeafEphemeral(input: {
         poolContract: string;
         leafIndex: number;
@@ -729,16 +681,6 @@ declare function createStateDelegates(state: StellarStateService): {
     markDeliveryProcessed: (id: Parameters<StellarStateService["markDeliveryProcessed"]>[0]) => Promise<void>;
     getDeliverySyncState: (input: Parameters<StellarStateService["getDeliverySyncState"]>[0]) => Promise<StellarDeliverySyncState | undefined>;
     setDeliverySyncState: (syncState: Parameters<StellarStateService["setDeliverySyncState"]>[0]) => Promise<void>;
-    appendPendingClaims: (claims: Parameters<StellarStateService["appendPendingClaims"]>[0], paginationInfo: Parameters<StellarStateService["appendPendingClaims"]>[1]) => Promise<void>;
-    loadPendingClaimsFromBackend: (input: LoadPendingClaimsFromBackendInput) => Promise<void>;
-    loadPendingClaimsCountFromBackend: (input: LoadPendingClaimsCountFromBackendInput) => Promise<void>;
-    replacePendingClaimsPage: (input: Parameters<StellarStateService["replacePendingClaimsPage"]>[0]) => Promise<void>;
-    upsertPendingClaims: (claims: Parameters<StellarStateService["upsertPendingClaims"]>[0]) => Promise<void>;
-    removePendingClaims: (ids: Parameters<StellarStateService["removePendingClaims"]>[0]) => Promise<void>;
-    clearPendingClaims: (input?: Parameters<StellarStateService["clearPendingClaims"]>[0]) => Promise<void>;
-    getPendingClaims: (filter?: Parameters<StellarStateService["getPendingClaims"]>[0]) => Promise<StellarPendingClaimsState>;
-    getPendingClaimsCount: (owner: Parameters<StellarStateService["getPendingClaimsCount"]>[0]) => Promise<number | undefined>;
-    setPendingClaimsCount: (owner: Parameters<StellarStateService["setPendingClaimsCount"]>[0], count: Parameters<StellarStateService["setPendingClaimsCount"]>[1]) => Promise<void>;
     getPoolMerkleState: (poolContract: Parameters<StellarStateService["getPoolMerkleState"]>[0]) => Promise<StellarPoolMerkleState | undefined>;
     setPoolMerkleState: (poolState: Parameters<StellarStateService["setPoolMerkleState"]>[0]) => Promise<void>;
     appendPoolCommitments: (input: Parameters<StellarStateService["appendPoolCommitments"]>[0]) => Promise<void>;
@@ -808,23 +750,44 @@ declare function createStellarPolicyAdapterFromEnvironment(transactEnvironment:
     inspectOperation: (_kind: StellarPreparedOperation["kind"], _intent: StellarPreparedOperation["intent"]) => Promise<void>;
 };
 
+type DecodedPrivateAddress = {
+    x: string;
+    y: string;
+};
+type PrivateAddressGenerator = (signature: string, domain: SpendScalarDomain) => string | Promise<string>;
+type PrivateAddressSdk = {
+    generatePrivateAddressFromStellarSignature: PrivateAddressGenerator;
+};
+declare function buildPrivateAddressSignMessage(publicKey: string, domain: SpendScalarDomain, nonce?: string): string;
+declare function decodePrivateAddress(value: string): DecodedPrivateAddress;
+declare function encodePrivateAddress(decoded: DecodedPrivateAddress): string;
+declare function encodePrivateAddressFromHexCoordinates(publicKeyXHex: string, publicKeyYHex: string): string;
+declare function recipientPublicKeysDecimalFromPrivateAddress(value: string): unknown;
+declare function privateAddressSdk(sdk: PrivacyPoolSDK): PrivateAddressSdk;
+
 declare class PrivacyPoolService {
     private readonly assets?;
     private readonly applicationId?;
     private readonly auditPublicKey?;
+    private readonly zkCircuits?;
+    private readonly zkConfigNonce?;
+    private readonly zkArtifactBaseUrl?;
     private sdk;
     private initPromise;
-    constructor(assets?: StellarBrowserAssets | undefined, applicationId?: string | undefined, auditPublicKey?: [string, string] | undefined);
+    constructor(assets?: StellarBrowserAssets | undefined, applicationId?: string | undefined, auditPublicKey?: [string, string] | undefined, zkCircuits?: Record<string, StellarZkCircuitDefinition> | undefined, zkConfigNonce?: bigint | undefined, zkArtifactBaseUrl?: string | undefined);
     private ensureInit;
     getInitializedSdk(): Promise<PrivacyPoolSDK>;
     getAuditPublicKey(): [string, string] | undefined;
     getApplicationId(): string;
-    generatePrivateAddressFromStellarSignature(signature: string): Promise<string>;
+    generatePrivateAddressFromStellarSignature(signature: string, domain: SpendScalarDomain): Promise<string>;
     sharedSecretX(recipientScalarHex: string, ephemeralKeyEncoded: string): Promise<string>;
     buildAlignedDepositSlot(parameters: {
         privateAddressStpl1: string;
         amountStroops: bigint;
         tokenAddress: string;
+        escrowNonce?: string;
+        recipientHi?: string;
+        recipientLo?: string;
     }): Promise<AlignedDepositSlot>;
     createAlignedShieldCoinData(parameters: {
         privateAddressStpl1: string;
@@ -838,7 +801,7 @@ declare class PrivacyPoolService {
         merkleRootBytes: Buffer$1;
         tokenAddress: string;
     }): Promise<ProofResult>;
-    calculateNullifierHash(nullifier: string): Promise<string>;
+    calculateNullifierHash(nullifier: string, privKeyScalar: string): Promise<string>;
     prepareWithdrawTransactProof(parameters: {
         coin: CoinData;
         state: StateFile;
@@ -867,6 +830,9 @@ declare function createPrivacyPoolService(input?: {
     assets?: StellarBrowserAssets;
     applicationId?: string;
     auditPublicKey?: [string, string];
+    zkCircuits?: Record<string, StellarZkCircuitDefinition>;
+    zkConfigNonce?: bigint;
+    zkArtifactBaseUrl?: string;
 }): PrivacyPoolService;
 declare function configurePrivacyPoolService(service: PrivacyPoolService): void;
 declare function getPrivacyPoolService(): PrivacyPoolService;
@@ -875,28 +841,111 @@ declare function parseAuditPublicKeyFromEnvHex(raw: string): AuditPublicKey;
 declare function buildPoolTransactionAuditParameters(input: {
     applicationId: string;
     auditPublicKey?: AuditPublicKey;
+    nAuditSlots?: number;
 }): TransactionAuditParams;
 declare function resolvePoolApplicationId(applicationId: string | undefined): string;
 
-type DecodedPrivateAddress = {
-    x: string;
-    y: string;
+type BlindedRecipientTagChallengeFields = {
+    stellarAddress: string;
+    networkPassphrase: string;
+    issuedAt: string;
+    expiresAt: string;
+    nonce: string;
 };
-type PrivateAddressGenerator = (signature: string) => string | Promise<string>;
-type PrivateAddressSdk = {
-    generatePrivateAddressFromStellarSignature: PrivateAddressGenerator;
+declare function buildBlindedRecipientTagChallengeMessage(fields: BlindedRecipientTagChallengeFields): string;
+
+type DerivedEscrowRecipient = {
+    nonceDecimal: string;
+    recipientHi: string;
+    recipientLo: string;
+    recipientStellarAddress: string;
+    privateAddressStpl1: string;
+    scalarHex: string;
 };
-declare function buildPrivateAddressSignMessage(publicKey: string, nonce: string): string;
-declare function decodePrivateAddress(value: string): DecodedPrivateAddress;
-declare function encodePrivateAddress(decoded: DecodedPrivateAddress): string;
-declare function encodePrivateAddressFromHexCoordinates(publicKeyXHex: string, publicKeyYHex: string): string;
-declare function recipientPublicKeysDecimalFromPrivateAddress(value: string): unknown;
-declare function privateAddressSdk(sdk: PrivacyPoolSDK): PrivateAddressSdk;
+type DerivedEscrowKeyFn = (nonce: bigint, recipientHi: bigint, recipientLo: bigint) => Promise<{
+    scalarHex: string;
+    pointXHex: string;
+    pointYHex: string;
+}>;
+declare function deriveEscrowRecipientFromStellarAddress(input: {
+    recipientStellarAddress: string;
+    nonceDecimal?: string;
+    deriveKey?: DerivedEscrowKeyFn;
+}): Promise<DerivedEscrowRecipient>;
+
+declare function assertEscrowSweepClaimant(input: {
+    walletPublicKey: string;
+    claimantAddress: string;
+}): void;
+
+type EscrowOutputNoteCiphertextEvent = {
+    outputIndex: number;
+    commitmentHashHex: string;
+    createdEphemeralKey: readonly [string, string];
+    ciphertext: readonly string[];
+    tag: string;
+};
+type ReconstructedEscrowNote = {
+    coin: CoinData;
+    scalarHex: string;
+    privateAddressStpl1: string;
+    recipientHi: string;
+    recipientLo: string;
+    nonceDecimal: string;
+    tokenAddress: string;
+    commitmentHex: string;
+};
+type DecryptEscrowOutputNote = (input: {
+    recipientScalarHex: string;
+    commitmentHashHex: string;
+    createdEphemeralKey: readonly [string, string];
+    ciphertext: readonly string[];
+    tag: string;
+    ownerMode?: bigint;
+}) => Promise<{
+    value: string;
+    assetHi: string;
+    assetLo: string;
+    nullifier: string;
+    secret: string;
+    applicationId: string;
+    commitmentHex: string;
+    commitmentMatches: boolean;
+}>;
+declare function reconstructEscrowNote(input: {
+    claimantAddress: string;
+    nonceDecimal: string;
+    seq: number;
+    events: readonly EscrowOutputNoteCiphertextEvent[];
+    decrypt?: DecryptEscrowOutputNote;
+    deriveKey?: DerivedEscrowKeyFn;
+}): Promise<ReconstructedEscrowNote>;
+
+type PrepareEscrowSweepInput = {
+    walletPublicKey: string;
+    claimantAddress: string;
+    registeredPrivateAddress: string;
+    reconstructed: ReconstructedEscrowNote;
+    poolContract: string;
+    asset: string;
+};
+declare function attachEscrowAuthorization(prepared: StellarPreparedOperation, escrowAuthorization: string): StellarPreparedOperation;
+declare function prepareEscrowSweepOperation(input: PrepareEscrowSweepInput): StellarPreparedOperation;
+
+declare function fetchEscrowOutputNoteEvents(input: {
+    transactEnvironment: StellarTransactEnvironment;
+    txId: string;
+    poolAddress: string;
+}): Promise<EscrowOutputNoteCiphertextEvent[]>;
+
+declare function unsignedEscrowAuthorizationForSweep(input: {
+    prepared: StellarPreparedOperation;
+    transactEnvironment: StellarTransactEnvironment;
+    relayerPublicKey: string;
+}): Promise<string>;
 
 interface LoadBrowserAssetsInput {
     sdkWasmUrl: string;
-    circuitWasmUrl: string;
-    provingKeyUrl: string;
     cacheBust?: boolean;
 }
 declare function loadStellarBrowserAssets(input: LoadBrowserAssetsInput): Promise<StellarBrowserAssets>;
@@ -904,30 +953,18 @@ declare function loadDefaultStellarBrowserAssets(options?: {
     cacheBust?: boolean;
 }): Promise<StellarBrowserAssets>;
 
+declare const STANDARD_ZK_CONFIG_NONCE = 0n;
+declare const COMMITMENT_V2_ZK_NONCE = 2n;
+declare const SIX_BY_SIX_ZK_NONCE = 6n;
+declare const DEFAULT_ZK_CONFIG_NONCE = 3n;
+declare function resolveZkConfigNonce(transactEnvironment: StellarTransactEnvironment): bigint;
+
+declare function generateRandomDepositScalarHex(): Promise<string>;
 declare function generateTemporaryRecipientPrivateAddress(): Promise<{
     temporaryScalarHex: string;
     temporaryPrivateAddressStpl1: string;
 }>;
 
-type TransferOnboardingRecipientNoteInput = {
-    tokenAddress: string;
-    nullifier: string;
-    secret: string;
-    value: string;
-};
-type TemporaryRecipientKeyMaterial = {
-    temporaryScalarHex: string;
-    temporaryPrivateAddressStpl1: string;
-};
-declare function generateRandomDepositScalarHex(): Promise<string>;
-declare function buildOnboardingPayload(parameters: {
-    ownerStellarAddress: string;
-    temporaryKey: TemporaryRecipientKeyMaterial;
-    recipientNotes: TransferOnboardingRecipientNoteInput[];
-    permanentPrivateAddressStpl1?: string;
-}): OnboardingPayload;
-declare function buildTransferOnboardingAtExecute(input: BuildTransferOnboardingAtExecuteInput): Promise<OnboardingPayload>;
-
 declare class KytInspectError extends Error {
     readonly reasonCode: string;
     readonly decisionId?: string;
@@ -963,7 +1000,8 @@ interface SubmitSorobanConfidentialTransferInput {
     walletPublicKey: string;
     proofHex: string;
     publicHex: string;
-    onboarding?: OnboardingPayload;
+    ciphertextHex?: string;
+    outputNoteEphemeralScalars?: string[];
     applicationIdsPlaintext?: KytApplicationIdHints;
     networkPassphrase: string;
     sorobanRpcUrl: string;
@@ -985,7 +1023,6 @@ type PrepareConfidentialTransferProofDualParameters = {
     coinA: CoinData;
     coinB: CoinData;
     state: StateFile;
-    senderGAddress: string;
     senderPrivKeyScalarHex: string;
     ephemeralAKey: string;
     ephemeralBKey: string;
@@ -993,10 +1030,14 @@ type PrepareConfidentialTransferProofDualParameters = {
     recipientPrivateAddressStpl1: string;
     selfPrivateAddressStpl1ForChange: string | undefined;
     tokenAddress: string;
+    escrowSend?: TransferEscrowSend;
+    escrowClaimantLimbs?: TransferEscrowClaimantLimbs;
 };
 type PrepareConfidentialTransferProofDualResult = {
     proof_hex: string;
     public_hex: string;
+    ciphertext_hex?: string;
+    output_note_ephemeral_scalars?: string[];
     applicationIdsPlaintext: KytApplicationIdHints;
     recipientCoin: GeneratedOutputCoin;
     changeCoin?: GeneratedOutputCoin;
@@ -1006,17 +1047,20 @@ declare function prepareConfidentialTransferProofDual(parameters: PrepareConfide
 type PrepareConfidentialTransferProofParameters = {
     coin: CoinData;
     state: StateFile;
-    senderGAddress: string;
     senderPrivKeyScalarHex: string;
     depositorEphemeralKey: string;
     transferStroops: bigint;
     recipientPrivateAddressStpl1: string;
     selfPrivateAddressStpl1ForChange: string | undefined;
     tokenAddress: string;
+    escrowSend?: TransferEscrowSend;
+    escrowClaimantLimbs?: TransferEscrowClaimantLimbs;
 };
 type PrepareConfidentialTransferProofResult = {
     proof_hex: string;
     public_hex: string;
+    ciphertext_hex?: string;
+    output_note_ephemeral_scalars?: string[];
     applicationIdsPlaintext: KytApplicationIdHints;
     recipientCoin: GeneratedOutputCoin;
     changeCoin?: GeneratedOutputCoin;
@@ -1036,7 +1080,8 @@ interface RequestKytPassageForPoolInteractionInput {
     poolContract: string;
     proofHex: string;
     publicHex: string;
-    onboarding?: OnboardingPayload;
+    ciphertextHex?: string;
+    outputNoteEphemeralScalars?: string[];
     decryptedAuditSlots?: DecryptedKytAuditSlot[];
     applicationIdsPlaintext?: KytApplicationIdHints;
     networkPassphrase: string;
@@ -1054,4 +1099,106 @@ declare function runTtlPreflight(assembledTransaction: unknown): Promise<void>;
 
 declare function attachPoolStatePorts(transactEnvironment: StellarTransactEnvironment | undefined, state: StateBridgeAdapter): StellarTransactEnvironment | undefined;
 
-export { type AlignedDepositSlot, type BuildTransferOnboardingAtExecuteInput, type CreateStellarPrivacyClientResult, type KytApplicationIdHints, KytInspectError, type LoadBrowserAssetsInput, type LoadPendingClaimsCountFromBackendInput, type LoadPendingClaimsFromBackendInput, MIN_CONFIDENTIAL_TRANSFER_STROOPS, PrivacyPoolService, type ProofResult, type ProofWithChange, type RequestKytPassageForPoolInteractionInput, type StellarAddress, type StellarAsset, type StellarAssetId, type StellarAssetsCatalog, type StellarAvailablePrivateRecordsFilter, type StellarBrowserAssets, type StellarBrowserPrivacyClientConfig, type StellarDeliverySyncState, type StellarIncomingDeliveriesFilter, type StellarIncomingDelivery, type StellarKytEnvironment, type StellarLeafEphemeral, type StellarNetworkConfig, type StellarOperationReceipt, type StellarPendingClaim, type StellarPendingClaimSource, type StellarPendingClaimsFilter, type StellarPendingClaimsPagination, type StellarPendingClaimsState, type StellarPolicyAdapter, type StellarPoolMerkleState, type StellarPreparedOperation, type StellarPrivacyClient, type StellarPrivacyClientConfig, type StellarPrivateAssetRow, type StellarPrivateRecord, type StellarPrivateRecordStatus, type StellarPublicBalance, type StellarPublicBalanceInput, type StellarRegistryLookup, type StellarStateAdapter, type StellarSubmissionPayload, type StellarTransactEngine, type StellarTransactEnvironment, type StellarTransactionDetails, type StellarTransactionStatus, type StellarTransferFromAddress, type StellarTransferIntent, type TemporaryRecipientKeyMaterial, type TransferOnboardingRecipientNoteInput$1 as TransferOnboardingRecipientNoteInput, type TransferRecipientExecutionContext, type TransferTemporaryRecipientKey, ZERO_STROOPS, assetLegToTokenAddress, attachPoolStatePorts, buildOnboardingPayload, buildPoolTransactionAuditParameters, buildPrivateAddressSignMessage, buildTransferOnboardingAtExecute, configurePrivacyPoolService, createDefaultTransactEngine, createPrivacyPoolService, createStellarPolicyAdapterFromEnvironment, createStellarPrivacyClient, createStellarPrivacyClientFromResolvedConfig, decodePrivateAddress, encodePrivateAddress, encodePrivateAddressFromHexCoordinates, fetchAndMergeMerkleState, frDecimalToPaddedBytes32, generateRandomDepositScalarHex, generateTemporaryRecipientPrivateAddress, getPrivacyPoolService, isStellarPrivacyClient, listWalletPrivateAddressRecordsForOwnerFromStateSnapshot, listWalletPrivateAddressScalarsForOwnerFromStateSnapshot, loadDefaultStellarBrowserAssets, loadStellarBrowserAssets, parseAuditPublicKeyFromEnvHex, parseKytReasonCode, prepareConfidentialTransferProof, prepareConfidentialTransferProofDual, privateAddressSdk, readLeafEphemeralHex, readPrivateRecordsFromStateSnapshot, readWalletDefaultPrivateAddressNonceFromStateSnapshot, readWalletPrivateAddressRecordFromStateSnapshot, readWalletPrivateAddressScalarFromStateSnapshot, recipientPublicKeysDecimalFromPrivateAddress, requestKytPassageForPoolInteraction, resolvePoolApplicationId, resolveStellarPrivacyClientConfig, runTtlPreflight, stellarStateDefinitions, submitSorobanConfidentialTransfer, submitSorobanDeposit, tokenAddressToAssetLeg };
+declare function finalizeSpendOperationAtExecute(prepared: StellarPreparedOperation, environment: StellarTransactEnvironment, poolService: PrivacyPoolService): Promise<StellarPreparedOperation>;
+
+declare const RELAY_TRANSACT_PACKAGE_VERSION_V1 = 1;
+declare const RELAY_TRANSACT_SUPPORTED_SIGNAL_COUNT = 93;
+declare const RELAY_TRANSACT_FIELD_BYTES = 32;
+declare const RELAY_TRANSACT_SIGNAL_PREFIX_BYTES = 4;
+declare const RELAY_SIGNAL_INDEX_NULLIFIER_0 = 0;
+declare const RELAY_SIGNAL_INDEX_NULLIFIER_1 = 1;
+declare const RELAY_SIGNAL_INDEX_STATE_ROOT = 82;
+declare const RELAY_SIGNAL_INDEX_WITHDRAW_ADDRESS_HI = 83;
+declare const RELAY_SIGNAL_INDEX_WITHDRAW_ADDRESS_LO = 84;
+declare const RELAY_SIGNAL_INDEX_ESCROW_RECIPIENT_HI = 85;
+declare const RELAY_SIGNAL_INDEX_ESCROW_RECIPIENT_LO = 86;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL_ASSET_HI = 87;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL_ASSET_LO = 88;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT_ASSET_HI = 89;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT_ASSET_LO = 90;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT = 91;
+declare const RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL = 92;
+
+type RelayTransactPackageVersion = typeof RELAY_TRANSACT_PACKAGE_VERSION_V1;
+type RelayKeyVersionHints = [
+    number | undefined,
+    number | undefined,
+    number | undefined,
+    number | undefined
+];
+type RelayTransactPackageV1 = {
+    version: RelayTransactPackageVersion;
+    poolSelector: string;
+    zkConfigNonce: bigint;
+    proofBytes: string;
+    publicSignals: string;
+    ciphertextBytes?: string;
+    outputNoteEphemeralScalars?: string[];
+    applicationIdHints: KytApplicationIdHints;
+    escrowAuthorization?: string;
+    keyVersionHints?: RelayKeyVersionHints;
+};
+type PrepareRelayTransactPackageInput = {
+    poolSelector: string;
+    proofBytes: string;
+    publicSignals: string;
+    ciphertextBytes?: string;
+    outputNoteEphemeralScalars?: string[];
+    applicationIdHints: KytApplicationIdHints;
+    zkConfigNonce?: bigint;
+    escrowAuthorization?: string;
+    keyVersionHints?: RelayKeyVersionHints;
+};
+
+declare function prepareRelayTransactPackage(input: PrepareRelayTransactPackageInput): RelayTransactPackageV1;
+
+type PrepareRelayTransactPackageFromPreparedInput = {
+    prepared: StellarPreparedOperation;
+    poolSelector: string;
+    zkConfigNonce?: bigint;
+    keyVersionHints?: RelayKeyVersionHints;
+};
+declare function prepareRelayTransactPackageFromPrepared(input: PrepareRelayTransactPackageFromPreparedInput): RelayTransactPackageV1;
+
+type RelayTransactPublicLegContext = {
+    stateRoot: string;
+    withdrawAddressHi: string;
+    withdrawAddressLo: string;
+    escrowRecipientHi: string;
+    escrowRecipientLo: string;
+    publicWithdrawalAssetHi: string;
+    publicWithdrawalAssetLo: string;
+    publicDepositAssetHi: string;
+    publicDepositAssetLo: string;
+    publicDepositAmount: string;
+    publicWithdrawalAmount: string;
+};
+type RelayTransactSupportedProfile = {
+    orderedNullifiers: [string, string];
+    publicLegContext: RelayTransactPublicLegContext;
+};
+declare function readRelayTransactSupportedProfile(prepared: RelayTransactPackageV1): RelayTransactSupportedProfile;
+
+declare const SUBMISSION_METHOD: {
+    readonly direct: "direct";
+    readonly relay: "relay";
+};
+type SubmissionMethod = (typeof SUBMISSION_METHOD)[keyof typeof SUBMISSION_METHOD];
+declare const ESCROW_SUBMISSION_REFUSAL: {
+    readonly positivePublicDeposit: "escrow_positive_public_deposit";
+};
+type EscrowSubmissionRefusal = (typeof ESCROW_SUBMISSION_REFUSAL)[keyof typeof ESCROW_SUBMISSION_REFUSAL];
+type RequiredSubmissionMethodResult = {
+    method: SubmissionMethod;
+} | {
+    refused: EscrowSubmissionRefusal;
+};
+declare class EscrowSubmissionRefusedError extends Error {
+    readonly reason: EscrowSubmissionRefusal;
+    constructor(reason: EscrowSubmissionRefusal);
+}
+declare function isEscrowPreparedOperation(prepared: StellarPreparedOperation): boolean;
+declare function evaluateRequiredSubmissionMethod(prepared: StellarPreparedOperation, zkConfigNonce?: bigint): RequiredSubmissionMethodResult;
+declare function requiredSubmissionMethod(prepared: StellarPreparedOperation, zkConfigNonce?: bigint): SubmissionMethod;
+
+export { type AlignedDepositSlot, type BlindedRecipientTagChallengeFields, COMMITMENT_V2_ZK_NONCE, type CreateStellarPrivacyClientResult, DEFAULT_STELLAR_ZK_CIRCUITS, DEFAULT_ZK_CONFIG_NONCE, ESCROW_SUBMISSION_REFUSAL, type EscrowOutputNoteCiphertextEvent, type EscrowSubmissionRefusal, EscrowSubmissionRefusedError, type KytApplicationIdHints, KytInspectError, type LoadBrowserAssetsInput, MIN_CONFIDENTIAL_TRANSFER_STROOPS, type PrepareRelayTransactPackageFromPreparedInput, type PrepareRelayTransactPackageInput, PrivacyPoolService, type ProofResult, type ProofWithChange, RELAY_SIGNAL_INDEX_ESCROW_RECIPIENT_HI, RELAY_SIGNAL_INDEX_ESCROW_RECIPIENT_LO, RELAY_SIGNAL_INDEX_NULLIFIER_0, RELAY_SIGNAL_INDEX_NULLIFIER_1, RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT, RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT_ASSET_HI, RELAY_SIGNAL_INDEX_PUBLIC_DEPOSIT_ASSET_LO, RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL, RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL_ASSET_HI, RELAY_SIGNAL_INDEX_PUBLIC_WITHDRAWAL_ASSET_LO, RELAY_SIGNAL_INDEX_STATE_ROOT, RELAY_SIGNAL_INDEX_WITHDRAW_ADDRESS_HI, RELAY_SIGNAL_INDEX_WITHDRAW_ADDRESS_LO, RELAY_TRANSACT_FIELD_BYTES, RELAY_TRANSACT_PACKAGE_VERSION_V1, RELAY_TRANSACT_SIGNAL_PREFIX_BYTES, RELAY_TRANSACT_SUPPORTED_SIGNAL_COUNT, type ReconstructedEscrowNote, type RelayKeyVersionHints, type RelayTransactPackageV1, type RelayTransactPackageVersion, type RelayTransactPublicLegContext, type RelayTransactSupportedProfile, type RequestKytPassageForPoolInteractionInput, type RequiredSubmissionMethodResult, SIX_BY_SIX_ZK_NONCE, STANDARD_ZK_CONFIG_NONCE, SUBMISSION_METHOD, type StellarAddress, type StellarAsset, type StellarAssetId, type StellarAssetsCatalog, type StellarAvailablePrivateRecordsFilter, type StellarBrowserAssets, type StellarBrowserPrivacyClientConfig, type StellarBundledZkCircuitDefinition, type StellarCustomZkCircuitDefinition, type StellarDeliverySyncState, type StellarIncomingDeliveriesFilter, type StellarIncomingDelivery, type StellarKytEnvironment, type StellarLeafEphemeral, type StellarNetworkConfig, type StellarOperationReceipt, type StellarPolicyAdapter, type StellarPoolMerkleState, type StellarPreparedOperation, type StellarPrivacyClient, type StellarPrivacyClientConfig, type StellarPrivateAssetRow, type StellarPrivateRecord, type StellarPrivateRecordStatus, type StellarPublicBalance, type StellarPublicBalanceInput, type StellarRegistryLookup, type StellarStateAdapter, type StellarSubmissionPayload, type StellarTransactEngine, type StellarTransactEnvironment, type StellarTransactionDetails, type StellarTransactionStatus, type StellarTransferFromAddress, type StellarTransferIntent, type StellarZkCircuitDefinition, type SubmissionMethod, type TransferEscrowClaimantLimbs, type TransferEscrowSend, type TransferRecipientExecutionContext, type TransferTemporaryRecipientKey, ZERO_STROOPS, assertEscrowSweepClaimant, assetLegToTokenAddress, attachEscrowAuthorization, attachPoolStatePorts, buildBlindedRecipientTagChallengeMessage, buildPoolTransactionAuditParameters, buildPrivateAddressSignMessage, configurePrivacyPoolService, createDefaultTransactEngine, createPrivacyPoolService, createStellarPolicyAdapterFromEnvironment, createStellarPrivacyClient, createStellarPrivacyClientFromResolvedConfig, decodePrivateAddress, deriveEscrowRecipientFromStellarAddress, encodePrivateAddress, encodePrivateAddressFromHexCoordinates, evaluateRequiredSubmissionMethod, fetchAndMergeMerkleState, fetchEscrowOutputNoteEvents, finalizeSpendOperationAtExecute, frDecimalToPaddedBytes32, generateRandomDepositScalarHex, generateTemporaryRecipientPrivateAddress, getPrivacyPoolService, isEscrowPreparedOperation, isStellarPrivacyClient, listWalletPrivateAddressRecordsForOwnerFromStateSnapshot, listWalletPrivateAddressScalarsForOwnerFromStateSnapshot, loadDefaultStellarBrowserAssets, loadStellarBrowserAssets, optionalZkArtifactBaseUrl, parseAuditPublicKeyFromEnvHex, parseKytReasonCode, prepareConfidentialTransferProof, prepareConfidentialTransferProofDual, prepareEscrowSweepOperation, prepareRelayTransactPackage, prepareRelayTransactPackageFromPrepared, privateAddressSdk, readLeafEphemeralHex, readPrivateRecordsFromStateSnapshot, readRelayTransactSupportedProfile, readWalletDefaultPrivateAddressNonceFromStateSnapshot, readWalletPrivateAddressRecordFromStateSnapshot, readWalletPrivateAddressScalarFromStateSnapshot, recipientPublicKeysDecimalFromPrivateAddress, reconstructEscrowNote, requestKytPassageForPoolInteraction, requiredSubmissionMethod, resolvePoolApplicationId, resolveStellarPrivacyClientConfig, resolveZkConfigNonce, runTtlPreflight, stellarStateDefinitions, submitSorobanConfidentialTransfer, submitSorobanDeposit, tokenAddressToAssetLeg, unsignedEscrowAuthorizationForSweep };