@arcanetech/privacy-sdk-stellar 0.6.2 → 1.0.0-rc.0

package/dist/transact/index.js

@@ -227,7 +227,10 @@ function uniformApplicationIdHints(applicationId, nAuditSlots) {
 }
 
 // src/transact/proofs/confidential/helpers.ts
-import { withdrawObjectFromMerkleWitness } from "@arcanetech/stellar-privacy-pool-zk-sdk";
+import {
+  withdrawObjectFromEscrowMerkleWitness,
+  withdrawObjectFromMerkleWitness
+} from "@arcanetech/stellar-privacy-pool-zk-sdk";
 
 // src/transact/merkle/lean-imt-api.ts
 function asLeanImtSessionApi(sdk) {
@@ -459,11 +462,33 @@ function withdrawMerkleWitnessFromTree(input) {
 // src/transact/proofs/confidential/helpers.ts
 var MIN_CONFIDENTIAL_TRANSFER_STROOPS = 1n;
 var ZERO_STROOPS = 0n;
+function escrowSpendWitnessFromLimbs(limbs, derivedScalarHex) {
+  const nonce = limbs.nonceDecimal?.trim() ?? "";
+  if (!nonce) {
+    throw new Error("Escrow claimant limbs require nonceDecimal");
+  }
+  return {
+    nonce,
+    recipientHi: limbs.recipientHi,
+    recipientLo: limbs.recipientLo,
+    derivedScalarHex
+  };
+}
 function withdrawWitnessForCoin(parameters) {
   const { sdk, coin, state } = parameters;
   const witness = withdrawMerkleWitnessFromTree({ sdk, coin, state });
   const withdrawApplicationId = coin.application_id ?? parameters.applicationId;
-  const withdrawObject = withdrawObjectFromMerkleWitness(
+  const withdrawObject = parameters.escrow ? withdrawObjectFromEscrowMerkleWitness(
+    witness,
+    parameters.ownerPubHex,
+    withdrawApplicationId,
+    parameters.escrow.derivedScalarHex,
+    {
+      nonce: parameters.escrow.nonce,
+      recipientHi: parameters.escrow.recipientHi,
+      recipientLo: parameters.escrow.recipientLo
+    }
+  ) : withdrawObjectFromMerkleWitness(
     witness,
     parameters.ownerPubHex,
     withdrawApplicationId,
@@ -472,21 +497,21 @@ function withdrawWitnessForCoin(parameters) {
   return { witness, withdrawObject };
 }
 function dualWithdrawLegsWithSharedRoot(parameters) {
-  const legA = withdrawWitnessForCoin({
+  const shared = {
     sdk: parameters.sdk,
-    coin: parameters.coinA,
     state: parameters.state,
     ownerPubHex: parameters.ownerPubHex,
     privKeyScalar: parameters.privKeyScalar,
-    applicationId: parameters.applicationId
+    applicationId: parameters.applicationId,
+    ...parameters.escrow ? { escrow: parameters.escrow } : {}
+  };
+  const legA = withdrawWitnessForCoin({
+    ...shared,
+    coin: parameters.coinA
   });
   const legB = withdrawWitnessForCoin({
-    sdk: parameters.sdk,
-    coin: parameters.coinB,
-    state: parameters.state,
-    ownerPubHex: parameters.ownerPubHex,
-    privKeyScalar: parameters.privKeyScalar,
-    applicationId: parameters.applicationId
+    ...shared,
+    coin: parameters.coinB
   });
   if (legA.witness.stateRoot !== legB.witness.stateRoot) {
     throw new Error("Merkle state root mismatch between input coins");
@@ -757,7 +782,10 @@ function ed25519PublicKeyHexFromStellarAccount(address) {
 }
 
 // src/transact/encoding/priv-key-scalar-from-recipient-hex.ts
-import { canonicalBabyJubScalarFromInteger } from "@arcanetech/stellar-privacy-pool-zk-sdk";
+import {
+  canonicalBabyJubScalarFromInteger,
+  reduceDerivedEscrowSpendScalar
+} from "@arcanetech/stellar-privacy-pool-zk-sdk";
 var SCALAR_HEX_CHAR_LENGTH = 64;
 var DECIMAL_RADIX2 = 10;
 function normalizeRecipientScalarHex(hexInput) {
@@ -780,6 +808,25 @@ function privKeyScalarDecimalFromRecipientScalarHex(hexInput) {
   const value = BigInt(`0x${hex}`);
   return canonicalBabyJubScalarFromInteger(value).toString(DECIMAL_RADIX2);
 }
+function privKeyScalarDecimalFromDerivedEscrowHex(hexInput) {
+  const hex = normalizeRecipientScalarHex(hexInput);
+  const value = BigInt(`0x${hex}`);
+  return reduceDerivedEscrowSpendScalar(value).toString(DECIMAL_RADIX2);
+}
+function resolveTransferSpendScalars(input) {
+  const senderHex = input.senderPrivKeyScalarHex;
+  if (!input.escrowSweep) {
+    return {
+      privKeyScalar: privKeyScalarDecimalFromRecipientScalarHex(senderHex),
+      ownerScalarHex: senderHex
+    };
+  }
+  const privKeyScalar = privKeyScalarDecimalFromDerivedEscrowHex(senderHex);
+  return {
+    privKeyScalar,
+    ownerScalarHex: BigInt(privKeyScalar).toString(16).padStart(SCALAR_HEX_CHAR_LENGTH, "0")
+  };
+}
 
 // src/transact/fees/append-fee-output.ts
 function feeCoinFromSlot(slot) {
@@ -3033,14 +3080,63 @@ async function buildSenderTransferDepositsAndPublicInput(parameters) {
   });
 }
 
-// src/transact/proofs/confidential/dual.ts
-function confidentialEscrowFields(parameters) {
+// src/transact/proofs/confidential/transfer-spend.ts
+function confidentialEscrowFields(input) {
   return {
-    ...parameters.escrowSend ? { escrowSend: parameters.escrowSend } : {},
-    ...parameters.escrowClaimantLimbs ? { escrowClaimantLimbs: parameters.escrowClaimantLimbs } : {}
+    ...input.escrowSend ? { escrowSend: input.escrowSend } : {},
+    ...input.escrowClaimantLimbs ? { escrowClaimantLimbs: input.escrowClaimantLimbs } : {}
+  };
+}
+function transferDepositInputFromProof(input, changeStroops, stateRoot) {
+  return {
+    senderPrivKeyScalarHex: input.senderPrivKeyScalarHex,
+    recipientPrivateAddressStpl1: input.recipientPrivateAddressStpl1,
+    transferStroops: input.transferStroops,
+    changeStroops,
+    selfPrivateAddressStpl1ForChange: input.selfPrivateAddressStpl1ForChange,
+    tokenAddress: input.tokenAddress,
+    stateRoot,
+    ...confidentialEscrowFields(input),
+    ...input.feeOutput ? { feeOutput: input.feeOutput } : {}
+  };
+}
+function spendWithdrawForTransfer(parameters) {
+  const limbs = parameters.input.escrowClaimantLimbs;
+  const { privKeyScalar, ownerScalarHex } = resolveTransferSpendScalars({
+    senderPrivKeyScalarHex: parameters.input.senderPrivKeyScalarHex,
+    escrowSweep: Boolean(limbs)
+  });
+  const spent = withdrawWitnessForCoin({
+    sdk: parameters.sdk,
+    coin: parameters.input.coin,
+    state: parameters.input.state,
+    ownerPubHex: parameters.sdk.ecdhEphemeralPublicKeyFromScalarHex(ownerScalarHex),
+    privKeyScalar,
+    applicationId: parameters.applicationId,
+    ...limbs ? {
+      escrow: escrowSpendWitnessFromLimbs(
+        limbs,
+        parameters.input.senderPrivKeyScalarHex
+      )
+    } : {}
+  });
+  if (limbs) {
+    return spent;
+  }
+  return {
+    witness: spent.witness,
+    withdrawObject: stampWithdrawEscrowLimbs(
+      spent.withdrawObject,
+      sweepWithdrawStamp(confidentialEscrowFields(parameters.input))
+    )
   };
 }
+
+// src/transact/proofs/confidential/dual.ts
 function stampDualWithdrawLegs(legs, parameters) {
+  if (parameters.escrowClaimantLimbs) {
+    return legs;
+  }
   const escrowLimbs = sweepWithdrawStamp(confidentialEscrowFields(parameters));
   return {
     legA: {
@@ -3104,12 +3200,12 @@ function dualTransferChangeStroops(parameters) {
 }
 async function buildDualTransferProofContext(parameters, applicationId, sdk) {
   const changeStroops = dualTransferChangeStroops(parameters);
-  const privKeyScalar = privKeyScalarDecimalFromRecipientScalarHex(
-    parameters.senderPrivKeyScalarHex
-  );
-  const ownerPubHex = sdk.ecdhEphemeralPublicKeyFromScalarHex(
-    parameters.senderPrivKeyScalarHex
-  );
+  const limbs = parameters.escrowClaimantLimbs;
+  const { privKeyScalar, ownerScalarHex } = resolveTransferSpendScalars({
+    senderPrivKeyScalarHex: parameters.senderPrivKeyScalarHex,
+    escrowSweep: Boolean(limbs)
+  });
+  const ownerPubHex = sdk.ecdhEphemeralPublicKeyFromScalarHex(ownerScalarHex);
   const { legA, legB } = stampDualWithdrawLegs(
     dualWithdrawLegsWithSharedRoot({
       sdk,
@@ -3118,7 +3214,13 @@ async function buildDualTransferProofContext(parameters, applicationId, sdk) {
       state: parameters.state,
       ownerPubHex,
       privKeyScalar,
-      applicationId
+      applicationId,
+      ...limbs ? {
+        escrow: escrowSpendWitnessFromLimbs(
+          limbs,
+          parameters.senderPrivKeyScalarHex
+        )
+      } : {}
     }),
     parameters
   );
@@ -3221,25 +3323,6 @@ async function proveTransaction(parameters) {
     parameters.audit
   );
 }
-function confidentialEscrowFields2(input) {
-  return {
-    ...input.escrowSend ? { escrowSend: input.escrowSend } : {},
-    ...input.escrowClaimantLimbs ? { escrowClaimantLimbs: input.escrowClaimantLimbs } : {}
-  };
-}
-function transferDepositInputFromProof(input, changeStroops, stateRoot) {
-  return {
-    senderPrivKeyScalarHex: input.senderPrivKeyScalarHex,
-    recipientPrivateAddressStpl1: input.recipientPrivateAddressStpl1,
-    transferStroops: input.transferStroops,
-    changeStroops,
-    selfPrivateAddressStpl1ForChange: input.selfPrivateAddressStpl1ForChange,
-    tokenAddress: input.tokenAddress,
-    stateRoot,
-    ...confidentialEscrowFields2(input),
-    ...input.feeOutput ? { feeOutput: input.feeOutput } : {}
-  };
-}
 async function buildTransferProofInputs(parameters) {
   const changeStroops = validateSingleCoinTransferAmounts(
     parameters.input.transferStroops,
@@ -3247,35 +3330,11 @@ async function buildTransferProofInputs(parameters) {
     parameters.input.selfPrivateAddressStpl1ForChange,
     parameters.input.feeOutput?.requiredFee ?? 0n
   );
-  const privKeyScalar = privKeyScalarDecimalFromRecipientScalarHex(
-    parameters.input.senderPrivKeyScalarHex
-  );
-  const { witness, withdrawObject } = withdrawWitnessForCoin({
-    sdk: parameters.sdk,
-    coin: parameters.input.coin,
-    state: parameters.input.state,
-    ownerPubHex: parameters.sdk.ecdhEphemeralPublicKeyFromScalarHex(
-      parameters.input.senderPrivKeyScalarHex
-    ),
-    privKeyScalar,
-    applicationId: parameters.applicationId
-  });
-  const stampedWithdraw = stampWithdrawEscrowLimbs(
-    withdrawObject,
-    sweepWithdrawStamp(confidentialEscrowFields2(parameters.input))
-  );
-  const { recipientSlot, deposits, changeCoin, feeCoin, publicInput } = await buildSenderTransferDepositsAndPublicInput(
+  const { witness, withdrawObject } = spendWithdrawForTransfer(parameters);
+  const depositsBuild = await buildSenderTransferDepositsAndPublicInput(
     transferDepositInputFromProof(parameters.input, changeStroops, witness.stateRoot)
   );
-  return {
-    witness,
-    withdrawObject: stampedWithdraw,
-    recipientSlot,
-    deposits,
-    changeCoin,
-    feeCoin,
-    publicInput
-  };
+  return { witness, withdrawObject, ...depositsBuild };
 }
 async function prepareConfidentialTransferProof(parameters) {
   const poolService = getPrivacyPoolService();