@auditable/privacy-pool-zk-sdk 0.7.0 → 0.8.0

package/dist/kyt-flow.d.ts

@@ -1,6 +1,5 @@
 import { Keypair } from '@stellar/stellar-sdk';
 import { buildKytPassageAuthorization, derivePassageFromTransactContext, hashPublicSignalBytes, type InspectKytPassageRequest, type PublicLegContextInput } from './kyt-passage.js';
-import { type OnboardingPayloadInput } from './kyt-onboarding.js';
 export interface RegisterPassageParams {
     kytRegistryId: string;
     poolContract: string;
@@ -8,7 +7,6 @@ export interface RegisterPassageParams {
     nonce?: bigint | number;
     publicSignalsBytes: Buffer | string;
     publicLegContext: PublicLegContextInput;
-    onboarding?: OnboardingPayloadInput | null;
     signature: string;
     expiresAtLedger: number;
     source: Keypair;
@@ -21,7 +19,6 @@ export interface SubmitKytTransactParams {
     nonce: bigint | number;
     proofBytes: Buffer;
     publicSignalsBytes: Buffer;
-    onboarding?: OnboardingPayloadInput | null;
     /** Omit when the pool's own registered passage covers this call (no explicit signed authorization). */
     kytAuthorization?: {
         expirationLedger: number;

package/dist/kyt-passage.d.ts

@@ -1,10 +1,10 @@
-import { type OnboardingPayloadInput } from './kyt-onboarding.js';
 export declare const KYT_PASSAGE_AUTH_DOMAIN = "privacy-pool-kyt-passage-v1";
 export declare const PUBLIC_LEG_CONTEXT_DOMAIN = "privacy-pool-public-leg-context-v1";
-export declare const PASSAGE_ID_DOMAIN = "privacy-pool-passage-id-v1";
-export declare const ONBOARDING_ZERO_DOMAIN = "privacy-pool-onboarding-zero-v1";
-export declare const NOTE_AUDIT_LEN = 9;
-export declare const TOTAL_PUBLIC_SIGNALS = 79;
+export declare const PASSAGE_ID_DOMAIN = "privacy-pool-passage-id-v2";
+export declare const PASSAGE_ID_DOMAIN_V1 = "privacy-pool-passage-id-v1";
+export declare const NOTE_AUDIT_LEN = 12;
+export declare const TOTAL_PUBLIC_SIGNALS = 93;
+export declare const NOTE_AUDIT_PLAINTEXT_LEN = 12;
 export interface PublicLegLayout {
     publicNInputs: number;
     publicNOutputs: number;
@@ -20,7 +20,6 @@ export interface PublicLegContextInput {
 export interface KytPassageDerivation {
     publicSignalHash: string;
     publicLegContextHash: string;
-    onboardingHash: string;
     passageId: string;
 }
 export interface KytPassageAuthorization {
@@ -33,10 +32,10 @@ export interface KytPassageAuthorization {
 /** Canonical zero-address sentinel for absent public-leg slots: `u32_be(0)` with no XDR bytes. */
 export declare function zeroAddressSentinelBuffer(): Buffer;
 export declare function addressToCanonicalXdr(address: string): Buffer;
-export declare function hashPublicSignalBytes(publicSignalsBytes: Buffer | string): string;
+export declare function hashPublicSignalBytes(publicSignalsBytes: Buffer | string, zkConfigNonce?: bigint): string;
 export declare function hashPublicLegContext(layout: PublicLegLayout, input: PublicLegContextInput): string;
-export declare function hashOnboarding(onboarding: OnboardingPayloadInput | null | undefined): string;
-export declare function derivePassageId(owner: string, nonce: bigint | number, publicSignalHash: string, publicLegContextHash: string, onboardingHash: string): string;
+export declare function derivePassageId(owner: string, nonce: bigint | number, publicSignalHash: string, publicLegContextHash: string): string;
+export declare function derivePassageIdV1(owner: string, nonce: bigint | number, publicSignalHash: string, publicLegContextHash: string, onboardingHash: string): string;
 export declare function buildKytPassageAuthorization(input: {
     poolContract: string;
     kytRegistry: string;
@@ -49,7 +48,6 @@ export declare function derivePassageFromTransactContext(input: {
     publicSignalsBytes: Buffer | string;
     publicLegContext: PublicLegContextInput;
     layout?: PublicLegLayout;
-    onboarding?: OnboardingPayloadInput | null;
 }): KytPassageDerivation;
 export declare function accountIdFromAddress(address: string): Buffer;
 export interface InspectKytPassageRequest {
@@ -59,7 +57,6 @@ export interface InspectKytPassageRequest {
     proofBytes: string;
     publicSignalsBytes: string;
     applicationIdsPlaintext: [string, string, string, string];
-    onboarding?: OnboardingPayloadInput | null;
     nonce?: string;
 }
 export interface InspectKytPassageApproved {

package/dist/output-note-encryption.d.ts

@@ -26,6 +26,7 @@ export type OutputNoteEventInput = {
     createdEphemeralKey: readonly [string, string];
     ciphertext: readonly string[];
     tag: string;
+    ownerMode?: bigint;
 };
 export declare function secretFromDepositEphemeralScalarDecimal(ephemeralKeyScalarDecimal: string): Promise<string>;
 export declare function encryptOutputNoteForDeposit(parameters: {

package/dist/sdk.d.ts

@@ -1,5 +1,6 @@
 import { type DecodedDepositorSharedSecretPreimage, type DecodedEphemeralKey, type EncodedDepositorSharedSecretPreimage, type EncodedEphemeralKey } from './ephemeral-key';
 import { type SharedSecret } from './shared-secret';
+import { type SpendScalarDomain } from './stealth-sign-message';
 import type { DecodedRecipientSharedSecretPreimage } from './stealth-address';
 import type { CoinData, GeneratedCoin, SDKOptions, StateFile, WithdrawMerkleWitness, WithdrawResult } from './types';
 import { type DepositSlot, type TransactionPublicLegParams, type WithdrawalProofPublicParams, type WithdrawSlot } from './withdrawal-transaction-input';
@@ -27,30 +28,34 @@ export declare class PrivacyPoolSDK {
      */
     static generateRandomScalarHex32(): string;
     /**
-     * Text to sign with a Stellar wallet for stealth derivation (UTF-8). No WASM required.
+     * Text to sign with a Stellar wallet for spend-key derivation (UTF-8). No WASM required.
+     * The message binds network, pool, registry, and schema version (H6).
      */
-    static buildStealthAddressSignMessage(address: string, nonce?: string): string;
+    static buildStealthAddressSignMessage(address: string, domain: SpendScalarDomain, nonce?: string): string;
     /**
-     * Generate a new coin with random nullifier, secret, and random shared-secret field elements (dev / self-contained tests).
-     * @param amount Stroops encoded as `bigint` or integer `number` (WASM `u64`).
+     * Generate a new coin with random nullifier, secret, and random owner-pub field elements (dev / self-contained tests).
+     * @param amount Decimal field element as `bigint` or decimal `string` (never JS `number`).
      * @param assetHiDecimal / assetLoDecimal Decimal Fr strings for Stellar asset contract id (two limbs).
      */
-    generateCoin(amount: bigint | number, assetHiDecimal: string, assetLoDecimal: string, applicationIdDecimal?: string): GeneratedCoin;
+    generateCoin(amount: bigint | string, assetHiDecimal: string, assetLoDecimal: string, applicationIdDecimal?: string): GeneratedCoin;
     /**
-     * Generate a coin with the same commitment shape as on-chain deposit: pass `ecdhSharedKey` output (hex x, y).
-     * @param amount Stroops (`bigint` | `number`).
+     * Generate a coin with the same commitment shape as on-chain deposit: pass owner public key (hex x, y).
+     * @param amount Decimal field element (`bigint` | `string`).
      */
-    generateCoinWithSharedSecret(shared: SharedSecret, amount: bigint | number, assetHiDecimal: string, assetLoDecimal: string, applicationIdDecimal?: string): GeneratedCoin;
+    generateCoinWithOwnerPub(ownerPub: {
+        x: string;
+        y: string;
+    }, amount: bigint | string, assetHiDecimal: string, assetLoDecimal: string, applicationIdDecimal?: string): GeneratedCoin;
     /**
      * Coin for a depositor `ephemeralKeyScalar` (32-byte hex): `coin.secret = Poseidon255(1)(scalar)` as in `deposit.circom`.
-     * @param amount Stroops (`bigint` | `number`).
+     * @param amount Decimal field element (`bigint` | `string`).
      */
-    generateCoinFromDepositEphemeralScalarHex(scalarHex: string, amount: bigint | number, assetHiDecimal: string, assetLoDecimal: string, applicationIdDecimal?: string): GeneratedCoin;
+    generateCoinFromDepositEphemeralScalarHex(scalarHex: string, amount: bigint | string, assetHiDecimal: string, assetLoDecimal: string, applicationIdDecimal?: string): GeneratedCoin;
     /**
-     * Aligned deposit coin: `secret = Poseidon₁(scalar)` and ECDH shared key from hex coords (e.g. `ecdhSharedKey(scalar, recipient_x, recipient_y)`).
-     * @param amount Stroops (`bigint` | `number`).
+     * Aligned deposit coin: `secret = Poseidon₁(scalar)` and owner pub from recipient hex coords.
+     * @param amount Decimal field element (`bigint` | `string`).
      */
-    generateCoinForDepositWithSharedHex(scalarHex: string, sharedXHex: string, sharedYHex: string, amount: bigint | number, assetHiDecimal: string, assetLoDecimal: string, applicationIdDecimal?: string): GeneratedCoin;
+    generateCoinForDepositWithOwnerPubHex(scalarHex: string, ownerXHex: string, ownerYHex: string, amount: bigint | string, assetHiDecimal: string, assetLoDecimal: string, applicationIdDecimal?: string): GeneratedCoin;
     /**
      * Merkle root, path, and coin fields for the first withdraw leg (Rust LeanIMT + Poseidon).
      */
@@ -101,16 +106,17 @@ export declare class PrivacyPoolSDK {
      */
     proveTransaction(publicParams: WithdrawalProofPublicParams, publicLegs: TransactionPublicLegParams, withdraws: [WithdrawSlot, WithdrawSlot], deposits: [DepositSlot, DepositSlot], audit: TransactionAuditParams): Promise<WithdrawResult>;
     /**
-     * Calculate nullifier hash: Poseidon(nullifier)
+     * Calculate owner-bound nullifier hash: Poseidon(DOM_NULLIFIER, nullifier, privKeyScalar)
      * @param nullifier Nullifier decimal string from coin data
+     * @param privKeyScalar Spend scalar decimal string
      * @returns Hex string (0x...) of the hash bytes
      */
-    calculateNullifierHash(nullifier: string): string;
+    calculateNullifierHash(nullifier: string, privKeyScalar: string): string;
     /**
      * Ed25519 signature from signing {@link buildStealthAddressSignMessage}: **128 hex chars** (optional `0x`)
-     * or **base64** (64 raw bytes after decode). `SHA-256(signature bytes)` → scalar → ECDH → `stpl1` Bech32.
+     * or **base64** (64 raw bytes after decode). Domain-separated SHA-256 → scalar → ECDH → `stpl1` Bech32.
      */
-    generateStealthAddressFromStellarSignature(signature: string): Promise<string>;
+    generateStealthAddressFromStellarSignature(signature: string, domain: SpendScalarDomain): Promise<string>;
     encodeDecodedEphemeralKey(decoded: DecodedEphemeralKey): EncodedEphemeralKey;
     decodeDecodedEphemeralKey(encoded: EncodedEphemeralKey): DecodedEphemeralKey;
     encodeDepositorSharedSecretPreimage(decoded: DecodedDepositorSharedSecretPreimage): EncodedDepositorSharedSecretPreimage;

package/dist/stealth-sign-message.d.ts

@@ -1,7 +1,20 @@
 /** Default nonce when deriving the wallet sign-in message. */
 export declare const DEFAULT_STEALTH_SIGN_NONCE = "main address";
+/** Domain tag mixed into the spend-scalar digest (H6). */
+export declare const SPEND_SCALAR_DOMAIN_TAG = "privacy-pool-spend-scalar-v1";
+/** Schema version bound into the spend-scalar message and digest. */
+export declare const OWNER_BOUND_NOTE_SCHEMA_VERSION = 1;
+export type SpendScalarDomain = {
+    networkPassphrase: string;
+    poolContract: string;
+    registryContract: string;
+    schemaVersion?: number;
+};
+export declare function resolveSpendScalarSchemaVersion(domain: SpendScalarDomain): number;
 /**
- * Plaintext for Stellar wallet message signing (stealth address derivation).
+ * Plaintext for Stellar wallet message signing (spend-key derivation).
  * Sign the exact bytes of this string (UTF-8) with the stellar account key.
+ *
+ * The derived scalar is the owner-bound spend key for notes in this environment.
  */
-export declare function buildStealthAddressSignMessage(address: string, nonce?: string): string;
+export declare function buildStealthAddressSignMessage(address: string, domain: SpendScalarDomain, nonce?: string): string;

package/dist/stealth-signature.d.ts

@@ -1,3 +1,4 @@
+import { type SpendScalarDomain } from './stealth-sign-message';
 /**
  * Ed25519 signature as **128 hex chars** (optional `0x`) or **base64** (typically 88 chars for 64 bytes, whitespace ignored).
  */
@@ -5,7 +6,14 @@ export declare function parseStellarEd25519SignatureRaw(input: string): Uint8Arr
 /** SHA-256 via Web Crypto only (`crypto.subtle`) — works in browsers and Node 19+ (global `crypto`). */
 export declare function sha256(data: Uint8Array): Promise<Uint8Array>;
 /**
- * Stellar Ed25519 signature (hex or base64) → SHA-256(signature bytes) → scalar → WASM ECDH (no UTF-8 seed hash).
+ * Domain-separated spend-scalar digest: SHA-256(
+ *   SPEND_SCALAR_DOMAIN_TAG || network || pool || registry || schemaVersion || signature
+ * ).
+ */
+export declare function spendScalarDigestFromStellarSignature(signature: string, domain: SpendScalarDomain): Promise<Uint8Array>;
+export declare function spendScalarHexFromStellarSignature(signature: string, domain: SpendScalarDomain): Promise<string>;
+/**
+ * Stellar Ed25519 signature (hex or base64) → domain-separated SHA-256 → scalar → WASM ECDH.
  */
 export declare function stealthAddressFromStellarSignature(ecdhFromScalarHex: (scalarHex64: string) => {
     x: string;
@@ -13,9 +21,9 @@ export declare function stealthAddressFromStellarSignature(ecdhFromScalarHex: (s
 }, encodeStealth: (decoded: {
     x: string;
     y: string;
-}) => string, signature: string): Promise<string>;
+}) => string, signature: string, domain: SpendScalarDomain): Promise<string>;
 /**
- * SHA-256(signature) as 32-byte BE integer, truncated to **253 bits** (same effective scalar as
- * `libs/cryptography` `scalar_mul_253` / circom `Num2Bits(253)`), decimal for `privKeyScalar`.
+ * Domain-separated SHA-256(signature, network, pool, registry, schema) reduced into
+ * `(0, BabyJub subgroup order)` so `privKeyScalar` matches `BabyPbk` and circom `LessThan(l)`.
  */
-export declare function privKeyScalarDecimalFromStellarSignature(signature: string): Promise<string>;
+export declare function privKeyScalarDecimalFromStellarSignature(signature: string, domain: SpendScalarDomain): Promise<string>;

package/dist/transaction-audit.d.ts

@@ -22,4 +22,9 @@ export declare function buildUniformAuditParams(applicationId: string | undefine
 export declare function resolveSlotApplicationIds(audit: TransactionAuditParams, withdrawSlots: [WithdrawSlot, WithdrawSlot], depositSlots: [DepositSlot, DepositSlot]): TransactionSlotApplicationIds;
 export declare function withApplicationIdOnDeposit(deposit: DepositObject, applicationId: string): DepositObject;
 export declare function withApplicationIdOnWithdraw(withdraw: WithdrawObject, applicationId: string): WithdrawObject;
+/**
+ * Prefer an explicit key, then `NOTE_AUDIT_PUBLIC_KEY_X`/`_Y` env (decimal Fr),
+ * then the built-in demo key. Used by CLI/`demo.sh` for per-app audit pubkeys.
+ */
+export declare function resolveAuditPublicKeyFromEnv(auditPublicKey?: AuditPublicKey): AuditPublicKey;
 export declare function resolveTransactionAuditParams(applicationId: string, auditPublicKey?: AuditPublicKey): TransactionAuditParams;

package/dist/types.d.ts

@@ -14,6 +14,8 @@ export interface GeneratedCoin {
     commitment_hex: string;
     /** 64-char lowercase hex (no `0x`), Fr big-endian for audit `precommitement`. */
     precommitement_hex: string;
+    /** JS alias of {@link GeneratedCoin.precommitement_hex}. */
+    precommitementHex: string;
 }
 /** Pool Merkle tree depth (matches `coin::TREE_DEPTH` / `Transaction` circuit). */
 export declare const POOL_MERKLE_TREE_DEPTH = 20;

package/dist/withdrawal-transaction-input.d.ts

@@ -1,11 +1,11 @@
 import type { TransactionAuditParams } from './transaction-audit';
 import type { WithdrawMerkleWitness } from './types';
-/** Matches `Transaction(20, 2, 2, publicNInputs, publicNOutputs, 4, 9)` in `circuits/main.circom`. */
+/** Matches `Transaction(20, 2, 2, publicNInputs, publicNOutputs, 4, 12, 6)` in `circuits/main.circom`. */
 export declare const TRANSACTION_TREE_DEPTH = 20;
 export declare const TRANSACTION_N_INS = 2;
 export declare const TRANSACTION_N_OUTS = 2;
 export declare const TRANSACTION_N_AUDIT_SLOTS = 4;
-export declare const NOTE_AUDIT_LEN = 9;
+export declare const NOTE_AUDIT_LEN = 12;
 export declare const NOTE_OUTPUT_LEN = 6;
 /** Must match `Transaction(..., publicNInputs, publicNOutputs)` and contract `get_public_slot_config`. */
 export declare const TRANSACTION_PUBLIC_N_INPUTS = 1;
@@ -24,7 +24,15 @@ export interface WithdrawalProofPublicParams {
     withdrawAddressHi: string;
     /** Decimal string, circom `withdrawAddressLo` (Ed25519 key bytes [16..32] as big-endian u128). */
     withdrawAddressLo: string;
-    /** Decimal string, circom `privKeyScalar`. */
+    /** Decimal string, circom `escrowRecipientHi`. */
+    escrowRecipientHi?: string;
+    /** Decimal string, circom `escrowRecipientLo`. */
+    escrowRecipientLo?: string;
+    /** Decimal string, circom `sweepOutputOwnerPubX`. Zero off-sweep. */
+    sweepOutputOwnerPubX?: string;
+    /** Decimal string, circom `sweepOutputOwnerPubY`. Zero off-sweep. */
+    sweepOutputOwnerPubY?: string;
+    /** Decimal string, default owner scalar copied onto dummy withdraw slots. */
     privKeyScalar: string;
 }
 /** Public accounting legs (`publicWithdrawnAssets`, `publicDepositedAssets`, `publicDeposits`, `publicWithdrawals`). */
@@ -45,8 +53,13 @@ export interface WithdrawObject {
     asset: [string, string];
     /** BN254 Fr decimal; `0` for dummy slots. */
     applicationId: string;
-    /** Depositor ECDH point `[x, y]` as decimal strings. */
-    ephemeralKeys: [string, string];
+    /** Owner BabyJubJub public key `[x, y]` as decimal strings. */
+    ownerPub: [string, string];
+    /** Per-input owner scalar. */
+    privKeyScalar: string;
+    paddingRandom: string;
+    escrowNonce: string;
+    recipientStellar: [string, string];
     stateSiblings: string[];
     stateIndex: string;
 }
@@ -60,6 +73,8 @@ export interface DepositObject {
     applicationId: string;
     /** Recipient public key `[x, y]` as decimal strings. */
     recipientPublicKeys: [string, string];
+    escrowNonce?: string;
+    recipientStellar?: [string, string];
 }
 export type WithdrawSlot = WithdrawObject | 'dummy';
 export type DepositSlot = DepositObject | 'dummy';
@@ -68,12 +83,19 @@ export interface TransactionWitnessInput {
     stateRoot: string;
     withdrawAddressHi: string;
     withdrawAddressLo: string;
-    privKeyScalar: string;
+    escrowRecipientHi: string;
+    escrowRecipientLo: string;
+    sweepOutputOwnerPubX: string;
+    sweepOutputOwnerPubY: string;
+    privKeyScalars: [string, string];
+    ownerPubs: [[string, string], [string, string]];
+    paddingRandoms: [string, string];
     withdrawnValues: [string, string];
     withdrawnNullifiers: [string, string];
     withdrawnSecrets: [string, string];
     withdrawnAssets: [[string, string], [string, string]];
-    ephemeralKeys: [[string, string], [string, string]];
+    withdrawnEscrowNonces: [string, string];
+    inputRecipientStellar: [[string, string], [string, string]];
     stateSiblings: [string[], string[]];
     stateIndex: [string, string];
     depositedValues: [string, string];
@@ -81,6 +103,8 @@ export interface TransactionWitnessInput {
     depositedAssets: [[string, string], [string, string]];
     depositedEphemeralKeyScalars: [string, string];
     depositedRecipientPublicKeys: [[string, string], [string, string]];
+    depositedEscrowNonces: [string, string];
+    outputRecipientStellar: [[string, string], [string, string]];
     publicWithdrawnAssets: Array<[string, string]>;
     publicDepositedAssets: Array<[string, string]>;
     publicDeposits: string[];
@@ -140,8 +164,8 @@ export declare function resolveDepositsForWitness(depositSlots: [DepositSlot, De
 export declare function buildTransactionWitnessInput(publicParams: WithdrawalProofPublicParams, publicLegs: TransactionPublicLegParams, withdrawSlots: [WithdrawSlot, WithdrawSlot], depositSlots: [DepositSlot, DepositSlot], audit: TransactionAuditParams, wasm: WasmEcdhPointFns): TransactionWitnessInput;
 /** `stpl1…` stealth address → `[x, y]` as decimal field strings for `depositedRecipientPublicKeys`. */
 export declare function recipientPublicKeysDecimalFromStealthAddress(stealthAddress: string): [string, string];
-/** First withdraw leg: Merkle witness + depositor ECDH point coordinates (hex). */
-export declare function withdrawObjectFromMerkleWitness(witness: WithdrawMerkleWitness, depositorEphemeralHex: {
+/** First withdraw leg: Merkle witness + owner public key (hex) and matching scalar. */
+export declare function withdrawObjectFromMerkleWitness(witness: WithdrawMerkleWitness, ownerPubHex: {
     x: string;
     y: string;
-}, applicationId: string): WithdrawObject;
+}, applicationId: string, privKeyScalar: string): WithdrawObject;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auditable/privacy-pool-zk-sdk",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Client SDK for Soroban Privacy Pools - coin generation, withdrawal proofs, and proof serialization",
   "main": "dist/index.mjs",
   "module": "dist/index.mjs",
@@ -36,7 +36,7 @@
     "build:ts": "rollup -c",
     "build": "rollup -c",
     "cli": "node dist/cli.js",
-    "test:kyt": "node test/kyt-onboarding-hash.mjs && node test/kyt-flow-atomic.mjs && node test/kyt-public-leg-context.mjs && node test/kyt-passage-id-auth.mjs",
+    "test:kyt": "node test/kyt-flow-atomic.mjs && node test/kyt-public-leg-context.mjs && node test/kyt-passage-id-auth.mjs && node test/derived-escrow-key.mjs && node test/spend-scalar-domain.mjs && node test/eighteen-decimal-value.mjs && node test/no-onboarding-exports.mjs && node test/owner-bound-witness-check.mjs",
     "test:output-note": "node test/output-note-encryption.mjs"
   },
   "dependencies": {

package/pkg/client_sdk_wasm.d.ts

@@ -7,10 +7,17 @@
 export function buildWithdrawMerkleWitness(coin_json: string, state_json: string): string;
 
 /**
- * Calculate nullifier hash from nullifier decimal string.
+ * Calculate owner-bound nullifier hash from nullifier and spend-scalar decimal strings.
  * Returns hex string (0x...)
  */
-export function calculateNullifierHash(nullifier_decimal: string): string;
+export function calculateNullifierHash(nullifier_decimal: string, priv_key_scalar_decimal: string): string;
+
+/**
+ * `R = Poseidon255(2)(hi, lo)`; `scalar` is the raw Poseidon hash when it is
+ * already in `(0, BabyJub subgroup order)`. Out-of-range hashes fail so the
+ * caller can rejection-sample a new nonce.
+ */
+export function derivedEscrowKey(nonce_decimal: string, recipient_hi_decimal: string, recipient_lo_decimal: string): any;
 
 /**
  * UTF-8 seed → `SHA256` → scalar → BabyJubJub `BASE8 * r` (circom `ECDHEphemeralKey`).
@@ -29,27 +36,27 @@ export function ecdhEphemeralPublicKeyFromScalarHex(scalar_hex: string): any;
 export function ecdhSharedKey(priv_hex: string, pub_x_hex: string, pub_y_hex: string): any;
 
 /**
- * Generate a new coin with random nullifier, secret, and shared-secret field elements.
- * `amount` is stroops (u64); JS passes `bigint`.
+ * Generate a new coin with random nullifier, secret, and owner public-key field elements.
+ * `amount_decimal` is an arbitrary-precision decimal field element (never JS `number`).
  * `asset_hi_decimal` / `asset_lo_decimal` are decimal Fr strings for the Stellar asset contract id (two limbs).
  * Returns JSON: { coin: { value, nullifier, secret, commitment, asset_hi, asset_lo }, commitment_hex, precommitement_hex }
  */
-export function generateCoin(amount: bigint, asset_hi_decimal: string, asset_lo_decimal: string, application_id_decimal: string): any;
+export function generateCoin(amount_decimal: string, asset_hi_decimal: string, asset_lo_decimal: string, application_id_decimal: string): any;
 
 /**
- * `Poseidon₁(scalar)` secret + fixed ECDH shared coords (hex), matching an aligned deposit witness.
+ * `Poseidon₁(scalar)` secret + recipient owner public key (hex), matching an aligned deposit witness.
  */
-export function generateCoinForDepositWithSharedHex(scalar_hex: string, shared_x_hex: string, shared_y_hex: string, amount: bigint, asset_hi_decimal: string, asset_lo_decimal: string, application_id_decimal: string): any;
+export function generateCoinForDepositWithOwnerPubHex(scalar_hex: string, owner_x_hex: string, owner_y_hex: string, amount_decimal: string, asset_hi_decimal: string, asset_lo_decimal: string, application_id_decimal: string): any;
 
 /**
  * `secret` in coin = `Poseidon255(1)(scalar)` per `deposit.circom`; scalar is 32-byte hex (64 chars, optional `0x`).
  */
-export function generateCoinFromDepositEphemeralScalarHex(scalar_hex: string, amount: bigint, asset_hi_decimal: string, asset_lo_decimal: string, application_id_decimal: string): any;
+export function generateCoinFromDepositEphemeralScalarHex(scalar_hex: string, amount_decimal: string, asset_hi_decimal: string, asset_lo_decimal: string, application_id_decimal: string): any;
 
 /**
- * Same as `generateCoin`, but commitment uses the given ECDH shared key (64-char hex coords from `ecdhSharedKey`); shared coords are not stored in `coin` JSON.
+ * Same as `generateCoin`, but commitment uses the given owner public key (64-char hex coords).
  */
-export function generateCoinWithSharedSecretHex(shared_x_hex: string, shared_y_hex: string, amount: bigint, asset_hi_decimal: string, asset_lo_decimal: string, application_id_decimal: string): any;
+export function generateCoinWithOwnerPubHex(owner_x_hex: string, owner_y_hex: string, amount_decimal: string, asset_hi_decimal: string, asset_lo_decimal: string, application_id_decimal: string): any;
 
 /**
  * Convert snarkjs proof JSON to hex bytes for Soroban contract.
@@ -66,14 +73,15 @@ export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembl
 export interface InitOutput {
     readonly memory: WebAssembly.Memory;
     readonly buildWithdrawMerkleWitness: (a: number, b: number, c: number, d: number, e: number) => void;
-    readonly calculateNullifierHash: (a: number, b: number, c: number) => void;
+    readonly calculateNullifierHash: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly derivedEscrowKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
     readonly ecdhEphemeralPublicKey: (a: number, b: number, c: number) => void;
     readonly ecdhEphemeralPublicKeyFromScalarHex: (a: number, b: number, c: number) => void;
     readonly ecdhSharedKey: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
-    readonly generateCoin: (a: number, b: bigint, c: number, d: number, e: number, f: number, g: number, h: number) => void;
-    readonly generateCoinForDepositWithSharedHex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: bigint, i: number, j: number, k: number, l: number, m: number, n: number) => void;
-    readonly generateCoinFromDepositEphemeralScalarHex: (a: number, b: number, c: number, d: bigint, e: number, f: number, g: number, h: number, i: number, j: number) => void;
-    readonly generateCoinWithSharedSecretHex: (a: number, b: number, c: number, d: number, e: number, f: bigint, g: number, h: number, i: number, j: number, k: number, l: number) => void;
+    readonly generateCoin: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
+    readonly generateCoinForDepositWithOwnerPubHex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number) => void;
+    readonly generateCoinFromDepositEphemeralScalarHex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number) => void;
+    readonly generateCoinWithOwnerPubHex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
     readonly proofToHex: (a: number, b: number, c: number) => void;
     readonly publicToHex: (a: number, b: number, c: number) => void;
     readonly __wbindgen_export: (a: number, b: number) => number;