@auditable/privacy-pool-zk-sdk 0.8.0 → 0.9.1-rc.0

package/dist/kyt-flow.d.ts

@@ -6,6 +6,7 @@ export interface RegisterPassageParams {
     owner: string;
     nonce?: bigint | number;
     publicSignalsBytes: Buffer | string;
+    ciphertextBytes?: Buffer | string;
     publicLegContext: PublicLegContextInput;
     signature: string;
     expiresAtLedger: number;
@@ -19,6 +20,7 @@ export interface SubmitKytTransactParams {
     nonce: bigint | number;
     proofBytes: Buffer;
     publicSignalsBytes: Buffer;
+    ciphertextBytes?: Buffer;
     /** Omit when the pool's own registered passage covers this call (no explicit signed authorization). */
     kytAuthorization?: {
         expirationLedger: number;

package/dist/kyt-passage.d.ts

@@ -1,6 +1,7 @@
 export declare const KYT_PASSAGE_AUTH_DOMAIN = "privacy-pool-kyt-passage-v1";
 export declare const PUBLIC_LEG_CONTEXT_DOMAIN = "privacy-pool-public-leg-context-v1";
-export declare const PASSAGE_ID_DOMAIN = "privacy-pool-passage-id-v2";
+export declare const PASSAGE_ID_DOMAIN = "privacy-pool-passage-id-v3";
+export declare const PASSAGE_ID_DOMAIN_V2 = "privacy-pool-passage-id-v2";
 export declare const PASSAGE_ID_DOMAIN_V1 = "privacy-pool-passage-id-v1";
 export declare const NOTE_AUDIT_LEN = 12;
 export declare const TOTAL_PUBLIC_SIGNALS = 93;
@@ -34,7 +35,8 @@ export declare function zeroAddressSentinelBuffer(): Buffer;
 export declare function addressToCanonicalXdr(address: string): Buffer;
 export declare function hashPublicSignalBytes(publicSignalsBytes: Buffer | string, zkConfigNonce?: bigint): string;
 export declare function hashPublicLegContext(layout: PublicLegLayout, input: PublicLegContextInput): string;
-export declare function derivePassageId(owner: string, nonce: bigint | number, publicSignalHash: string, publicLegContextHash: string): string;
+export declare function derivePassageId(owner: string, nonce: bigint | number, publicSignalHash: string, publicLegContextHash: string, ciphertextHash: string): string;
+export declare function derivePassageIdV2(owner: string, nonce: bigint | number, publicSignalHash: string, publicLegContextHash: string): string;
 export declare function derivePassageIdV1(owner: string, nonce: bigint | number, publicSignalHash: string, publicLegContextHash: string, onboardingHash: string): string;
 export declare function buildKytPassageAuthorization(input: {
     poolContract: string;
@@ -46,9 +48,18 @@ export declare function derivePassageFromTransactContext(input: {
     owner: string;
     nonce?: bigint | number;
     publicSignalsBytes: Buffer | string;
+    ciphertextBytes?: Buffer | string;
     publicLegContext: PublicLegContextInput;
     layout?: PublicLegLayout;
 }): KytPassageDerivation;
+export declare function hashCiphertextBytes(ciphertextBytes: Buffer | string): string;
+export declare function zeroBindingTagsInPublicSignals(publicSignalsBytes: Buffer | string, zkConfigNonce?: bigint): Buffer;
+export declare function spliceBindingTagsIntoPublicSignals(parameters: {
+    publicSignalsBytes: Buffer | string;
+    zkConfigNonce: bigint;
+    auditTags: readonly string[];
+    outputNoteTags: readonly string[];
+}): Buffer;
 export declare function accountIdFromAddress(address: string): Buffer;
 export interface InspectKytPassageRequest {
     owner: string;
@@ -56,8 +67,11 @@ export interface InspectKytPassageRequest {
     kytRegistry: string;
     proofBytes: string;
     publicSignalsBytes: string;
-    applicationIdsPlaintext: [string, string, string, string];
+    applicationIdsPlaintext: string[];
+    ciphertextBytes?: string;
+    outputNoteEphemeralScalars?: string[];
     nonce?: string;
+    zkConfigNonce?: string;
 }
 export interface InspectKytPassageApproved {
     status: 'approved';

package/dist/output-note-encryption.d.ts

@@ -1,9 +1,12 @@
-import type { DepositObject } from './withdrawal-transaction-input.js';
+import { buildPoseidon } from 'circomlibjs';
+import type { DepositObject, TransactionWitnessInput } from './withdrawal-transaction-input.js';
 import type { EcdhSharedKeyFn } from './shared-secret.js';
+import type { ZkLayoutParams } from './zk-layout.js';
 export declare const NOTE_OUTPUT_LEN = 6;
-export declare const OUTPUT_NOTE_TAG_DOMAIN = 3n;
+export declare const NOTE_AUDIT_LEN = 12;
 export declare const STREAM_DOMAIN = 1n;
 export declare const FR_SIZE = 32;
+type Poseidon = Awaited<ReturnType<typeof buildPoseidon>>;
 export type OutputNotePlaintext = {
     value: string;
     assetHi: string;
@@ -28,6 +31,13 @@ export type OutputNoteEventInput = {
     tag: string;
     ownerMode?: bigint;
 };
+export declare function poseidonMacTag(parameters: {
+    poseidon: Poseidon;
+    domain: bigint;
+    key: bigint;
+    nonce: bigint;
+    message: readonly bigint[];
+}): bigint;
 export declare function secretFromDepositEphemeralScalarDecimal(ephemeralKeyScalarDecimal: string): Promise<string>;
 export declare function encryptOutputNoteForDeposit(parameters: {
     deposit: DepositObject;
@@ -41,3 +51,22 @@ export declare function buildOutputNoteEncryptionPublicInputs(parameters: {
     outputNoteTags: [string, string];
 }>;
 export declare function decryptOutputNoteEvent(input: OutputNoteEventInput): Promise<DecryptedOutputNote>;
+export declare function encryptNoteAuditSlot(parameters: {
+    auditPublicKey: readonly [string, string];
+    auditEphemeralScalar: string;
+    plaintext: readonly string[];
+    ecdhShared: EcdhSharedKeyFn;
+}): Promise<{
+    ciphertext: string[];
+    tag: string;
+}>;
+export declare function encryptTransactionCiphertextBlob(parameters: {
+    witness: TransactionWitnessInput;
+    layout: ZkLayoutParams;
+    ecdhShared: EcdhSharedKeyFn;
+}): Promise<{
+    ciphertextHex: string;
+    auditCiphertexts: string[][];
+    outputNoteCiphertexts: string[][];
+}>;
+export {};

package/dist/prover.d.ts

@@ -1,5 +1,5 @@
-export interface ProofResult {
+/** @deprecated Groth16 proving is in the main SDK WASM (`proveGroth16`). */
+export declare function generateProof(_wtns: Uint8Array, _zkey?: BufferSource, _zkeyFileName?: string): Promise<{
     proof: object;
     publicSignals: string[];
-}
-export declare function generateProof(wtns: Uint8Array, zkey?: BufferSource): Promise<ProofResult>;
+}>;

package/dist/sdk.d.ts

@@ -1,24 +1,31 @@
-import { type DecodedDepositorSharedSecretPreimage, type DecodedEphemeralKey, type EncodedDepositorSharedSecretPreimage, type EncodedEphemeralKey } from './ephemeral-key';
-import { type SharedSecret } from './shared-secret';
-import { type SpendScalarDomain } from './stealth-sign-message';
-import type { DecodedRecipientSharedSecretPreimage } from './stealth-address';
-import type { CoinData, GeneratedCoin, SDKOptions, StateFile, WithdrawMerkleWitness, WithdrawResult } from './types';
-import { type DepositSlot, type TransactionPublicLegParams, type WithdrawalProofPublicParams, type WithdrawSlot } from './withdrawal-transaction-input';
-import { type TransactionAuditParams } from './transaction-audit';
+import type { CoinData, GeneratedCoin, SDKOptions, StateFile, WithdrawMerkleWitness, WithdrawResult } from "./types";
+import { type DecodedDepositorSharedSecretPreimage, type DecodedEphemeralKey, type EncodedDepositorSharedSecretPreimage, type EncodedEphemeralKey } from "./ephemeral-key";
+import { type SharedSecret } from "./shared-secret";
+import { type SpendScalarDomain } from "./stealth-sign-message";
+import type { DecodedRecipientSharedSecretPreimage } from "./stealth-address";
+import { type DepositSlot, type TransactionPublicLegParams, type WithdrawalProofPublicParams, type WithdrawSlot } from "./withdrawal-transaction-input";
+import { type TransactionAuditParams } from "./transaction-audit";
+import { type ZkLayoutParams } from "./zk-layout";
 export declare class PrivacyPoolSDK {
     private wasm;
     private options;
+    private zkConfigNonce;
+    private circuitConfig;
+    private layout;
+    private circuitArtifacts;
     private constructor();
+    getZkConfigNonce(): bigint;
+    getLayout(): ZkLayoutParams;
     /**
      * Initialize the SDK by loading WASM modules.
      *
-     * In Node.js, assets are loaded from the filesystem automatically.
-     * In browser, pass pre-loaded buffers via options:
+     * In Node.js, proving artifacts load from `zkArtifactBaseUrl` or
+     * `ZK_ARTIFACT_BASE_URL`, defaulting to this package's GitHub release.
+     * In browser, pass pre-loaded WASM via options:
      * ```ts
      * const sdk = await PrivacyPoolSDK.init({
      *   wasmBinary: await fetch('/pkg/client_sdk_wasm_bg.wasm').then(r => r.arrayBuffer()),
-     *   circuitWasm: await fetch('/assets/main.wasm').then(r => r.arrayBuffer()),
-     *   zkey: await fetch('/assets/main_final.zkey').then(r => r.arrayBuffer()),
+     *   zkArtifactBaseUrl: 'https://github.com/Polynom-Labs/stellar-privacy-layer-contracts/releases/download/v0.8.0',
      * });
      * ```
      */
@@ -97,14 +104,11 @@ export declare class PrivacyPoolSDK {
     /** Circuit `ECDH`: scalar (32-byte hex) × recipient BabyJub point → shared key hex coords. */
     ecdhSharedKey(scalarHex: string, recipientPubXHex: string, recipientPubYHex: string): SharedSecret;
     /**
-     * `Transaction(20,2,2)` proof from high-level legs: maps to witness input (incl. `"dummy"` ECDH via WASM), then Groth16 → Soroban hex.
-     *
-     * @param publicParams Public inputs: `stateRoot`, `withdrawAddressHi` / `withdrawAddressLo`, `privKeyScalar` (decimal field strings).
-     * @param publicLegs Public token legs (`publicWithdrawnAssets`, `publicDepositedAssets`, `publicDeposits`, `publicWithdrawals`).
-     * @param withdraws Exactly two withdraw slots (`WithdrawObject` or `"dummy"`).
-     * @param deposits Exactly two deposit slots (`DepositObject` or `"dummy"`).
+     * `Transaction(20,nIns,nOuts)` proof from high-level legs: maps to witness input (incl. `"dummy"` ECDH via WASM), then Groth16 → Soroban hex.
+     * Slots are padded to the selected ZK config layout (bundled 2×2 or 6×6).
      */
-    proveTransaction(publicParams: WithdrawalProofPublicParams, publicLegs: TransactionPublicLegParams, withdraws: [WithdrawSlot, WithdrawSlot], deposits: [DepositSlot, DepositSlot], audit: TransactionAuditParams): Promise<WithdrawResult>;
+    proveTransaction(publicParams: WithdrawalProofPublicParams, publicLegs: TransactionPublicLegParams, withdraws: WithdrawSlot[], deposits: DepositSlot[], audit: TransactionAuditParams): Promise<WithdrawResult>;
+    proveTransactionSlots(publicParams: WithdrawalProofPublicParams, publicLegs: TransactionPublicLegParams, withdraws: WithdrawSlot[], deposits: DepositSlot[], audit: TransactionAuditParams): Promise<WithdrawResult>;
     /**
      * Calculate owner-bound nullifier hash: Poseidon(DOM_NULLIFIER, nullifier, privKeyScalar)
      * @param nullifier Nullifier decimal string from coin data

package/dist/transaction-audit.d.ts

@@ -1,25 +1,21 @@
 import { type DepositObject, type DepositSlot, type WithdrawObject, type WithdrawSlot } from './withdrawal-transaction-input';
 export declare const TRANSACTION_N_AUDIT_SLOTS = 4;
+export declare const SIX_BY_SIX_N_AUDIT_SLOTS = 12;
 export declare const DEFAULT_APPLICATION_ID = "101";
 /** BabyJub audit public key (decimal Fr) used in BDD / local demo when env is unset. */
 export declare const DEMO_AUDIT_PUBLIC_KEY: AuditPublicKey;
 export type AuditPublicKey = [string, string];
 export interface TransactionAuditParams {
     applicationId: string;
-    noteAuditPublicKeys: [
-        AuditPublicKey,
-        AuditPublicKey,
-        AuditPublicKey,
-        AuditPublicKey
-    ];
-    auditEphemeralScalars: [string, string, string, string];
+    noteAuditPublicKey: AuditPublicKey;
+    auditEphemeralScalar: string;
 }
 export interface TransactionSlotApplicationIds {
-    inputApplicationIds: [string, string];
-    outputApplicationIds: [string, string];
+    inputApplicationIds: string[];
+    outputApplicationIds: string[];
 }
-export declare function buildUniformAuditParams(applicationId: string | undefined, auditPublicKey: AuditPublicKey): TransactionAuditParams;
-export declare function resolveSlotApplicationIds(audit: TransactionAuditParams, withdrawSlots: [WithdrawSlot, WithdrawSlot], depositSlots: [DepositSlot, DepositSlot]): TransactionSlotApplicationIds;
+export declare function buildUniformAuditParams(applicationId: string | undefined, auditPublicKey: AuditPublicKey, _nAuditSlots?: number): TransactionAuditParams;
+export declare function resolveSlotApplicationIds(audit: TransactionAuditParams, withdrawSlots: WithdrawSlot[], depositSlots: DepositSlot[]): TransactionSlotApplicationIds;
 export declare function withApplicationIdOnDeposit(deposit: DepositObject, applicationId: string): DepositObject;
 export declare function withApplicationIdOnWithdraw(withdraw: WithdrawObject, applicationId: string): WithdrawObject;
 /**
@@ -27,4 +23,4 @@ export declare function withApplicationIdOnWithdraw(withdraw: WithdrawObject, ap
  * then the built-in demo key. Used by CLI/`demo.sh` for per-app audit pubkeys.
  */
 export declare function resolveAuditPublicKeyFromEnv(auditPublicKey?: AuditPublicKey): AuditPublicKey;
-export declare function resolveTransactionAuditParams(applicationId: string, auditPublicKey?: AuditPublicKey): TransactionAuditParams;
+export declare function resolveTransactionAuditParams(applicationId: string, auditPublicKey?: AuditPublicKey, nAuditSlots?: number): TransactionAuditParams;

package/dist/types.d.ts

@@ -45,12 +45,20 @@ export interface StateFile {
 export interface WithdrawResult {
     proof_hex: string;
     public_hex: string;
+    ciphertext_hex: string;
+    output_note_ephemeral_scalars: string[];
 }
 export interface SDKOptions {
     /** Pre-loaded Rust WASM binary (ArrayBuffer). Required in browser. */
     wasmBinary?: BufferSource;
-    /** Pre-loaded circuit WASM binary for witness generation. Required in browser. */
-    circuitWasm?: BufferSource;
-    /** Pre-loaded zkey binary for proof generation. Required in browser. */
-    zkey?: BufferSource;
+    /** Nonce-keyed circuit map. Defaults to {@link DEFAULT_ZK_CIRCUITS}. */
+    zkCircuits?: Record<string, import('./zk-layout').ZkCircuitConfig>;
+    /** Selected pool `ZkConfig` nonce. Defaults to {@link DEFAULT_ZK_CONFIG_NONCE}. */
+    zkConfigNonce?: bigint;
+    /**
+     * Directory or URL prefix for graph/r1cs/proving-key files.
+     * Defaults to the GitHub release for this SDK version. Node also reads
+     * `ZK_ARTIFACT_BASE_URL`.
+     */
+    zkArtifactBaseUrl?: string;
 }

package/dist/withdrawal-transaction-input.d.ts

@@ -43,7 +43,8 @@ export interface TransactionPublicLegParams {
     publicWithdrawals: string[];
 }
 /** All-zero public legs (private-only pool moves). */
-export declare function zeroPublicLegs(): TransactionPublicLegParams;
+export declare function zeroPublicLegs(publicNInputs?: number, publicNOutputs?: number): TransactionPublicLegParams;
+export declare function padPublicLegs(legs: TransactionPublicLegParams, publicNInputs: number, publicNOutputs: number): TransactionPublicLegParams;
 /** Real withdraw leg; coordinates are decimal field strings (same as `CoinData`). */
 export interface WithdrawObject {
     value: string;
@@ -78,7 +79,7 @@ export interface DepositObject {
 }
 export type WithdrawSlot = WithdrawObject | 'dummy';
 export type DepositSlot = DepositObject | 'dummy';
-/** Witness calculator input for `circuits/main.circom` `Transaction(20,2,2,publicNInputs,publicNOutputs)`. */
+/** Witness calculator input for a `Transaction(20, nIns, nOuts, …)` instantiation. */
 export interface TransactionWitnessInput {
     stateRoot: string;
     withdrawAddressHi: string;
@@ -87,49 +88,32 @@ export interface TransactionWitnessInput {
     escrowRecipientLo: string;
     sweepOutputOwnerPubX: string;
     sweepOutputOwnerPubY: string;
-    privKeyScalars: [string, string];
-    ownerPubs: [[string, string], [string, string]];
-    paddingRandoms: [string, string];
-    withdrawnValues: [string, string];
-    withdrawnNullifiers: [string, string];
-    withdrawnSecrets: [string, string];
-    withdrawnAssets: [[string, string], [string, string]];
-    withdrawnEscrowNonces: [string, string];
-    inputRecipientStellar: [[string, string], [string, string]];
-    stateSiblings: [string[], string[]];
-    stateIndex: [string, string];
-    depositedValues: [string, string];
-    depositedNullifiers: [string, string];
-    depositedAssets: [[string, string], [string, string]];
-    depositedEphemeralKeyScalars: [string, string];
-    depositedRecipientPublicKeys: [[string, string], [string, string]];
-    depositedEscrowNonces: [string, string];
-    outputRecipientStellar: [[string, string], [string, string]];
+    privKeyScalars: string[];
+    ownerPubs: Array<[string, string]>;
+    paddingRandoms: string[];
+    withdrawnValues: string[];
+    withdrawnNullifiers: string[];
+    withdrawnSecrets: string[];
+    withdrawnAssets: Array<[string, string]>;
+    withdrawnEscrowNonces: string[];
+    inputRecipientStellar: Array<[string, string]>;
+    stateSiblings: string[][];
+    stateIndex: string[];
+    depositedValues: string[];
+    depositedNullifiers: string[];
+    depositedAssets: Array<[string, string]>;
+    depositedEphemeralKeyScalars: string[];
+    depositedRecipientPublicKeys: Array<[string, string]>;
+    depositedEscrowNonces: string[];
+    outputRecipientStellar: Array<[string, string]>;
     publicWithdrawnAssets: Array<[string, string]>;
     publicDepositedAssets: Array<[string, string]>;
     publicDeposits: string[];
     publicWithdrawals: string[];
-    inputApplicationIds: [string, string];
-    outputApplicationIds: [string, string];
-    auditEphemeralScalars: [string, string, string, string];
-    noteAuditPublicKeys: [
-        [
-            string,
-            string
-        ],
-        [
-            string,
-            string
-        ],
-        [
-            string,
-            string
-        ],
-        [
-            string,
-            string
-        ]
-    ];
+    inputApplicationIds: string[];
+    outputApplicationIds: string[];
+    auditEphemeralScalar: string;
+    noteAuditPublicKey: [string, string];
 }
 export interface WasmEcdhPointFns {
     ecdhEphemeralPublicKeyFromScalarHex(scalarHex: string): {
@@ -161,7 +145,14 @@ export declare function randomFrDecimal(): string;
 /** Random scalar < 2^253 for BabyJub ECDH / `Num2Bits(253)` (uses {@link generateRandomScalarHex32}). */
 export declare function randomFrDecimal253(): string;
 export declare function resolveDepositsForWitness(depositSlots: [DepositSlot, DepositSlot], wasm: WasmEcdhPointFns): [DepositObject, DepositObject];
-export declare function buildTransactionWitnessInput(publicParams: WithdrawalProofPublicParams, publicLegs: TransactionPublicLegParams, withdrawSlots: [WithdrawSlot, WithdrawSlot], depositSlots: [DepositSlot, DepositSlot], audit: TransactionAuditParams, wasm: WasmEcdhPointFns): TransactionWitnessInput;
+export declare function padWithdrawSlots(slots: WithdrawSlot[], nIns: number): WithdrawSlot[];
+export declare function padDepositSlots(slots: DepositSlot[], nOuts: number): DepositSlot[];
+export declare function buildTransactionWitnessInput(publicParams: WithdrawalProofPublicParams, publicLegs: TransactionPublicLegParams, withdrawSlots: WithdrawSlot[], depositSlots: DepositSlot[], audit: TransactionAuditParams, wasm: WasmEcdhPointFns, dims?: {
+    nIns?: number;
+    nOuts?: number;
+    publicNInputs?: number;
+    publicNOutputs?: number;
+}): TransactionWitnessInput;
 /** `stpl1…` stealth address → `[x, y]` as decimal field strings for `depositedRecipientPublicKeys`. */
 export declare function recipientPublicKeysDecimalFromStealthAddress(stealthAddress: string): [string, string];
 /** First withdraw leg: Merkle witness + owner public key (hex) and matching scalar. */

package/dist/witness.d.ts

@@ -1,2 +1,3 @@
 import type { TransactionWitnessInput } from './withdrawal-transaction-input';
-export declare function generateWitness(input: TransactionWitnessInput, circuitWasm?: BufferSource): Promise<Uint8Array>;
+/** @deprecated Witness generation is in the main SDK WASM (`proveGroth16`). */
+export declare function generateWitness(_input: TransactionWitnessInput, _circuitWasm?: BufferSource, _wasmFileName?: string): Promise<Uint8Array>;

package/dist/zk-artifact-url.d.ts

@@ -0,0 +1,4 @@
+export declare const ZK_ARTIFACT_GITHUB_REPO = "Polynom-Labs/stellar-privacy-layer-contracts";
+export declare const ZK_SDK_PACKAGE_VERSION = "__ZK_SDK_PACKAGE_VERSION__";
+export declare function defaultZkArtifactBaseUrl(version?: string): string;
+export declare function trimArtifactBaseUrl(value: string): string;

package/dist/zk-layout.d.ts

@@ -0,0 +1,84 @@
+/** Off-chain ZK layout table. Must stay byte-identical to `libs/zk::ZkLayoutParams`. */
+export declare const LEGACY_ZK_NONCE = 0n;
+export declare const COMMITMENT_V2_ZK_NONCE = 2n;
+export declare const BINDING_ZK_NONCE = 3n;
+export declare const SIX_BY_SIX_ZK_NONCE = 6n;
+export declare const SIX_BY_SIX_BINDING_ZK_NONCE = 7n;
+export declare const LEGACY_PUBLIC_INPUT_PREFIX_LEN = 5;
+export declare const V2_PUBLIC_INPUT_PREFIX_LEN = 7;
+export declare const NOTE_AUDIT_LEN = 12;
+export declare const NOTE_OUTPUT_LEN = 6;
+export type CircuitProfileName = '2x2' | '6x6';
+export declare enum BundledZkCircuit {
+    TwoByTwo = "2x2",
+    SixBySix = "6x6"
+}
+export interface ZkCircuitLayoutFields {
+    nIns: number;
+    nOuts: number;
+    publicNInputs: number;
+    publicNOutputs: number;
+}
+export type BundledZkCircuitConfig = ZkCircuitLayoutFields & {
+    circuit: BundledZkCircuit;
+};
+export type DevZkCircuitConfig = ZkCircuitLayoutFields & {
+    circuitGraph: BufferSource;
+    r1cs: BufferSource;
+    provingKey: BufferSource;
+    zkey?: BufferSource;
+};
+export type ZkCircuitConfig = BundledZkCircuitConfig | DevZkCircuitConfig;
+export declare function isDevZkCircuitConfig(config: ZkCircuitConfig): config is DevZkCircuitConfig;
+export declare const DEFAULT_ZK_CONFIG_NONCE = 3n;
+export declare const DEFAULT_ZK_CIRCUITS: Record<string, BundledZkCircuitConfig>;
+export declare function layoutFromCircuitConfig(config: ZkCircuitConfig): ZkLayoutParams;
+export declare function resolveZkCircuitConfig(zkCircuits: Record<string, ZkCircuitConfig> | undefined, zkConfigNonce: bigint | undefined): {
+    nonce: bigint;
+    config: ZkCircuitConfig;
+};
+export declare function bundledCircuitFileNames(circuit: BundledZkCircuit): {
+    graphFileName: string;
+    r1csFileName: string;
+    provingKeyFileName: string;
+    verificationKeyFileName: string;
+    zkeyFileName: string;
+};
+export interface ZkLayoutParams {
+    nIns: number;
+    nOuts: number;
+    publicNInputs: number;
+    publicNOutputs: number;
+    nAuditSlots: number;
+    noteAuditLen: number;
+    noteOutputLen: number;
+    publicInputPrefixLen: number;
+    auditOffset: number;
+    outputNoteOffset: number;
+}
+export interface CircuitProfile {
+    name: CircuitProfileName;
+    nonce: bigint;
+    layout: ZkLayoutParams;
+    wasmFileName: string;
+    zkeyFileName: string;
+}
+export declare function zkLayoutFromShape(nIns: number, nOuts: number, publicNInputs: number, publicNOutputs: number, nAuditSlots: number, noteAuditLen: number, noteOutputLen: number, publicInputPrefixLen?: number): ZkLayoutParams;
+export declare function zkLayoutFromShapeBinding(nIns: number, nOuts: number, publicNInputs: number, publicNOutputs: number, nAuditSlots: number, noteAuditLen: number, noteOutputLen: number): ZkLayoutParams;
+export declare function ciphertextsInPublicSignals(layout: ZkLayoutParams): boolean;
+export declare function ciphertextFieldCount(layout: ZkLayoutParams): number;
+export declare function auditEphemeralPublicKeyCount(layout: ZkLayoutParams): number;
+export declare function indexAuditEphemeralPublicKeys(layout: ZkLayoutParams): number;
+export declare function indexAuditTags(layout: ZkLayoutParams): number;
+export declare function indexOutputNoteTags(layout: ZkLayoutParams): number;
+export declare function publicOutputsLen(layout: ZkLayoutParams): number;
+export declare function totalPublicSignals(layout: ZkLayoutParams): number;
+export declare function stateRootIndex(layout: ZkLayoutParams): number;
+export declare function legacyOwnerBoundLayout(): ZkLayoutParams;
+export declare function standardLayout(): ZkLayoutParams;
+export declare function sixBySixLayout(): ZkLayoutParams;
+export declare function standardBindingLayout(): ZkLayoutParams;
+export declare function sixBySixBindingLayout(): ZkLayoutParams;
+export declare function layoutForKnownNonce(nonce: bigint): ZkLayoutParams;
+export declare function circuitProfileFromName(name: string): CircuitProfile;
+export declare function circuitProfileFromNonce(nonce: bigint): CircuitProfile;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auditable/privacy-pool-zk-sdk",
-  "version": "0.8.0",
+  "version": "0.9.1-rc.0",
   "description": "Client SDK for Soroban Privacy Pools - coin generation, withdrawal proofs, and proof serialization",
   "main": "dist/index.mjs",
   "module": "dist/index.mjs",
@@ -10,10 +10,7 @@
       "import": "./dist/index.mjs",
       "types": "./dist/index.d.ts"
     },
-    "./main.zkey": "./assets/main_final.zkey",
-    "./witness.wasm": "./assets/main.wasm",
     "./sdk.wasm": "./pkg/client_sdk_wasm_bg.wasm",
-    "./assets/witness_calculator.js": "./assets/witness_calculator.js",
     "./pkg/client_sdk_wasm.js": "./pkg/client_sdk_wasm.js"
   },
   "bin": {
@@ -28,15 +25,14 @@
   },
   "files": [
     "dist/",
-    "pkg/",
-    "assets/"
+    "pkg/"
   ],
   "scripts": {
     "build:wasm": "cd crate && wasm-pack build --target web --out-dir ../pkg",
     "build:ts": "rollup -c",
     "build": "rollup -c",
     "cli": "node dist/cli.js",
-    "test:kyt": "node test/kyt-flow-atomic.mjs && node test/kyt-public-leg-context.mjs && node test/kyt-passage-id-auth.mjs && node test/derived-escrow-key.mjs && node test/spend-scalar-domain.mjs && node test/eighteen-decimal-value.mjs && node test/no-onboarding-exports.mjs && node test/owner-bound-witness-check.mjs",
+    "test:kyt": "node test/kyt-flow-atomic.mjs && node test/kyt-public-leg-context.mjs && node test/kyt-passage-id-auth.mjs && node test/derived-escrow-key.mjs && node test/spend-scalar-domain.mjs && node test/eighteen-decimal-value.mjs && node test/zk-artifact-url.mjs && node test/no-onboarding-exports.mjs && node test/owner-bound-witness-check.mjs && node test/six-by-six-layout.mjs && node test/six-by-six-witness-proof.mjs",
     "test:output-note": "node test/output-note-encryption.mjs"
   },
   "dependencies": {
@@ -44,8 +40,7 @@
     "@stellar/stellar-sdk": "^16.0.1",
     "bech32": "^2.0.0",
     "circomlibjs": "^0.1.7",
-    "ffjavascript": "^0.3.0",
-    "snarkjs": "^0.7.0"
+    "ffjavascript": "^0.3.0"
   },
   "devDependencies": {
     "@rollup/plugin-alias": "^5.0.0",

package/pkg/client_sdk_wasm.d.ts

@@ -63,6 +63,11 @@ export function generateCoinWithOwnerPubHex(owner_x_hex: string, owner_y_hex: st
  */
 export function proofToHex(proof_json: string): string;
 
+/**
+ * Graph witness + arkworks Groth16 prove. Returns `{ proof_hex, public_hex }`.
+ */
+export function proveGroth16(graph: Uint8Array, proving_key: Uint8Array, r1cs: Uint8Array, inputs_json: string): any;
+
 /**
  * Convert snarkjs public signals JSON to hex bytes for Soroban contract.
  */
@@ -83,6 +88,7 @@ export interface InitOutput {
     readonly generateCoinFromDepositEphemeralScalarHex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number) => void;
     readonly generateCoinWithOwnerPubHex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
     readonly proofToHex: (a: number, b: number, c: number) => void;
+    readonly proveGroth16: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
     readonly publicToHex: (a: number, b: number, c: number) => void;
     readonly __wbindgen_export: (a: number, b: number) => number;
     readonly __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;

package/pkg/client_sdk_wasm.js

@@ -351,6 +351,38 @@ export function proofToHex(proof_json) {
     }
 }
 
+/**
+ * Graph witness + arkworks Groth16 prove. Returns `{ proof_hex, public_hex }`.
+ * @param {Uint8Array} graph
+ * @param {Uint8Array} proving_key
+ * @param {Uint8Array} r1cs
+ * @param {string} inputs_json
+ * @returns {any}
+ */
+export function proveGroth16(graph, proving_key, r1cs, inputs_json) {
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passArray8ToWasm0(graph, wasm.__wbindgen_export);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passArray8ToWasm0(proving_key, wasm.__wbindgen_export);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passArray8ToWasm0(r1cs, wasm.__wbindgen_export);
+        const len2 = WASM_VECTOR_LEN;
+        const ptr3 = passStringToWasm0(inputs_json, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len3 = WASM_VECTOR_LEN;
+        wasm.proveGroth16(retptr, ptr0, len0, ptr1, len1, ptr2, len2, ptr3, len3);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        var r2 = getDataViewMemory0().getInt32(retptr + 4 * 2, true);
+        if (r2) {
+            throw takeObject(r1);
+        }
+        return takeObject(r0);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+    }
+}
+
 /**
  * Convert snarkjs public signals JSON to hex bytes for Soroban contract.
  * @param {string} public_json
@@ -561,6 +593,13 @@ function isLikeNone(x) {
     return x === undefined || x === null;
 }
 
+function passArray8ToWasm0(arg, malloc) {
+    const ptr = malloc(arg.length * 1, 1) >>> 0;
+    getUint8ArrayMemory0().set(arg, ptr / 1);
+    WASM_VECTOR_LEN = arg.length;
+    return ptr;
+}
+
 function passStringToWasm0(arg, malloc, realloc) {
     if (realloc === undefined) {
         const buf = cachedTextEncoder.encode(arg);

package/pkg/client_sdk_wasm_bg.wasm.d.ts

@@ -12,6 +12,7 @@ export const generateCoinForDepositWithOwnerPubHex: (a: number, b: number, c: nu
 export const generateCoinFromDepositEphemeralScalarHex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number) => void;
 export const generateCoinWithOwnerPubHex: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => void;
 export const proofToHex: (a: number, b: number, c: number) => void;
+export const proveGroth16: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => void;
 export const publicToHex: (a: number, b: number, c: number) => void;
 export const __wbindgen_export: (a: number, b: number) => number;
 export const __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;