@cloak.dev/sdk 0.2.3-staging.16d1078 → 0.2.3-staging.4f641ea

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { PublicKey, Transaction, AddressLookupTableAccount, Connection, TransactionInstruction, Keypair, SendOptions, VersionedTransaction } from '@solana/web3.js';
+import { PublicKey, Transaction, Keypair, AddressLookupTableAccount, Connection, TransactionInstruction, SendOptions, VersionedTransaction } from '@solana/web3.js';
 
 /**
  * The deployed Cloak program.
@@ -781,6 +781,199 @@ declare class LocalStorageAdapter implements StorageAdapter {
     deleteKeys(): void;
 }
 
+/**
+ * How long the relay accepts a signed request after its `auth_issued_at`
+ * (`REQUEST_AUTH_MAX_AGE_SECONDS`, `api/request_auth.rs`).
+ *
+ * A FIRST-USE request past this window is rejected outright. The expiry exception the relay grants
+ * applies only to an exact replay of a request whose durable row already exists, which by
+ * definition never happens for a request that has not been accepted once.
+ */
+declare const REQUEST_AUTH_MAX_AGE_SECONDS = 300;
+/**
+ * How far ahead of the relay's clock a request may be stamped
+ * (`REQUEST_AUTH_MAX_FUTURE_SKEW_SECONDS`, `api/request_auth.rs`).
+ *
+ * `auth_issued_at` comes from `Date.now()`. On a server that is NTP-disciplined; in a browser it
+ * is the user's own machine clock, and a laptop more than 30 seconds fast cannot authenticate at
+ * all until its clock is corrected.
+ */
+declare const REQUEST_AUTH_MAX_FUTURE_SKEW_SECONDS = 30;
+/**
+ * The exact fields each endpoint signs. Both lists mirror the relay's `*_auth_request` builders and
+ * must stay in lockstep with them: adding a field on one side alone silently invalidates every
+ * signature, and the failure surfaces as a bare 401 with nothing pointing here.
+ */
+declare const TRANSACT_AUTH_FIELDS: readonly ["encrypted_notes", "max_fee", "mint", "proof_bytes", "public_inputs", "recipient", "recipient_delivery_notes", "risk_quote", "sender"];
+declare const TRANSACT_SWAP_AUTH_FIELDS: readonly ["close_timed_out", "dexes", "encrypted_notes", "exclude_dexes", "max_fee", "min_output_amount", "output_mint", "proof_bytes", "public_inputs", "recipient", "recipient_ata", "refund_blinding", "refund_pubkey", "retry_request_id", "risk_quote", "route_retry_attempts", "sender", "slippage_bps", "swap_max_retries"];
+/**
+ * Serialize exactly like the relay's `canonical_json`: keys sorted bytewise, no whitespace.
+ *
+ * SCOPE. This is the SDK's half of a byte-for-byte agreement with one specific Rust function over
+ * one specific schema: the values reachable through {@link TRANSACT_AUTH_FIELDS} and
+ * {@link TRANSACT_SWAP_AUTH_FIELDS}, which are ASCII keys over strings, small unsigned integers,
+ * booleans, nulls, arrays and plain objects. Inside that schema the two implementations agree.
+ *
+ * Outside it they need not, so anything that could serialize differently on the two sides is
+ * REFUSED here rather than signed into a digest that silently fails to match:
+ *
+ *  - Non-integer, non-finite and beyond-safe-integer numbers. `serde_json` renders an f64 as Rust
+ *    does (`1e21`) where JavaScript renders `1e+21`, and `0.1 + 0.2` has no single spelling. Every
+ *    number in both field lists is a small unsigned integer (`slippage_bps`, `route_retry_attempts`,
+ *    `swap_max_retries`); u64 amounts already travel as decimal STRINGS for exactly this reason.
+ *  - Functions and symbols as object VALUES. `JSON.stringify` drops such a key from the wire body
+ *    while it stays in the signed view, so the two digests can never agree.
+ *
+ * `undefined` is NOT refused: it serializes as `null` here, `JSON.stringify` omits the key on the
+ * wire, and every optional field on the relay side is `Option<T>` with `#[serde(default)]`, so the
+ * relay sees `null` too. That is the same agreement {@link buildAuthRequest} relies on. The one
+ * field where it does not hold is `slippage_bps`, which is why that field is checked by name.
+ *
+ * `bigint` is accepted and rendered as a bare decimal integer, matching serde's u64/i64 output.
+ * Note that such a value cannot also go on the wire: `JSON.stringify` throws on a bigint. Use a
+ * decimal string in the body, as every SDK-built body does.
+ */
+declare function canonicalJson(value: unknown): string;
+interface RelayAuthFields {
+    sender: string;
+    auth_issued_at: string;
+    auth_nonce: string;
+    auth_signature: string;
+    /**
+     * How `auth_signature` was produced. Absent means an off-chain message, today's wire. Set to
+     * `"transaction"` when the wallet signed the no-op transaction envelope instead
+     * (`signRelayAuthPayload`). Not part of the signed view, so it never enters the digest.
+     */
+    auth_mode?: RelayAuthMode;
+}
+/**
+ * Everything an authenticated request needs EXCEPT the signature: the three fields that go on the
+ * wire alongside it, plus the exact bytes to sign.
+ *
+ * This exists because the holder of the pen is not always a `Keypair`. A browser wallet adapter
+ * exposes `signMessage(bytes): Promise<Uint8Array>` and no secret key at all, so the scheme has to
+ * be reachable in two halves: build the preimage here, sign it wherever the key actually lives,
+ * then put `sender` / `auth_issued_at` / `auth_nonce` and the base64 signature on the body.
+ *
+ * `message` is a plain ed25519 detached-signature preimage — nothing about the scheme changes
+ * between a local keypair and a wallet, only who signs it.
+ */
+interface RelayAuthPreimage {
+    sender: string;
+    auth_issued_at: string;
+    auth_nonce: string;
+    message: Uint8Array;
+}
+/**
+ * Build the signed view and its preimage for one request, WITHOUT signing.
+ *
+ * `sender` is bound into the signed view and returned for the body — the relay rejects a request
+ * whose authenticated sender is not also present inside the signed payload. It must be the end
+ * user's own wallet: `sender` is the key screened for sanctions on a shield-to-shield send, so
+ * substituting an ephemeral or service key here moves the screening off the actual user.
+ *
+ * `nonce` and `issued_at` are generated here, once per call. Callers that re-POST a request must
+ * reuse the same preimage rather than rebuilding it, or the relay sees a brand-new request.
+ */
+declare function buildRelayAuthPreimage(endpoint: string, programId: PublicKey, body: Record<string, unknown>, sender: PublicKey, nowSeconds?: number, fields?: readonly string[]): RelayAuthPreimage;
+/**
+ * An async message signer standing in for a `Keypair`.
+ *
+ * A browser wallet adapter has no secret key to hand over — it exposes `signMessage`, and what
+ * this scheme needs signed is a plain ed25519 detached signature, which is exactly what that
+ * produces. Only the holder of the pen changes.
+ *
+ * COMPLIANCE — `walletPublicKey` becomes the request's authenticated `sender`, and `sender` is the
+ * key screened for sanctions on a shield-to-shield send. It MUST be the end user's own wallet.
+ * Putting an ephemeral, service-held or otherwise substituted key here moves the screening onto a
+ * key that is not the user: a compliance regression, not a shortcut.
+ */
+interface RelayMessageSigner {
+    /** The end user's real wallet. Becomes the authenticated `sender`. Never an ephemeral key. */
+    walletPublicKey: PublicKey;
+    /** Wallet-adapter `signMessage`; must return the 64-byte ed25519 detached signature. */
+    signMessage: (message: Uint8Array) => Promise<Uint8Array>;
+    signAuthTransaction?: undefined;
+}
+/**
+ * A wallet that cannot sign messages at all (Ledger, Trezor) but can sign a transaction. It signs
+ * the deterministic no-op transaction from `buildAuthTransactionMessage` instead; the relay rebuilds
+ * the same bytes and verifies against them. See `signRelayAuthPayload`.
+ */
+interface RelayTransactionSigner {
+    walletPublicKey: PublicKey;
+    /** Wallet-adapter `signTransaction`. Receives a legacy `Transaction` and returns it signed. */
+    signAuthTransaction: <T extends Transaction>(transaction: T) => Promise<T>;
+    signMessage?: undefined;
+}
+type RelayAuthSigner = RelayMessageSigner | RelayTransactionSigner;
+/** How a relay-auth payload was signed. Mirrors `RelayAuthMode` in the relay's `auth_envelope.rs`. */
+type RelayAuthMode = "message" | "transaction";
+/**
+ * The transaction a message-less wallet signs to authenticate a relay payload.
+ *
+ * Legacy message, one instruction: `sender -> sender`, 0 lamports, System program. The 32-byte
+ * `recent_blockhash` slot carries `sha256(payload)`, so the signature binds the payload exactly as
+ * a message signature would, through a shape every hardware wallet can sign. It cannot land on
+ * chain: the network does not know that "blockhash". It names no Cloak program, endpoint or domain,
+ * so it leaks nothing if published. Byte-identical to the relay's `build_auth_transaction_message`;
+ * the vector is pinned on both sides.
+ */
+declare function buildAuthTransactionMessage(sender: PublicKey, digest: Uint8Array): Transaction;
+/** The exact bytes the wallet signs for `buildAuthTransactionMessage(sender, digest)`. */
+declare function serializeAuthTransactionMessage(sender: PublicKey, digest: Uint8Array): Uint8Array;
+/**
+ * Sign a relay-auth payload with whatever the caller holds: a local `Keypair` or a message signer
+ * signs the payload bytes; a transaction-only signer signs the no-op transaction carrying the
+ * payload's digest. Returns the 64-byte detached signature and the mode the relay must be told.
+ */
+declare function signRelayAuthPayload(signer: RelayAuthSigner | Keypair, payload: Uint8Array): Promise<{
+    signature: Uint8Array;
+    mode: RelayAuthMode;
+}>;
+/**
+ * Turn a relay rejection into something the person in front of the screen can act on.
+ *
+ * Every string matched here is an `Error::Unauthorized` from `api/request_auth.rs`, and all of them
+ * arrive as the same bare 401. Two of them are not the caller's mistake at all: an approval that
+ * sat too long, and a machine clock that is simply wrong. Returns `null` for anything that is not
+ * an authentication rejection, so callers can append it only when there is something to add.
+ */
+declare function explainRelayAuthRejection(responseText: string): string | null;
+declare const REQUEST_AUTH_BATCH_DOMAIN = "CLOAK_RELAY_BATCH_AUTH_V1";
+/**
+ * How long the relay accepts an item that arrives under a batch signature
+ * (`REQUEST_AUTH_BATCH_MAX_AGE_SECONDS`, `api/request_auth.rs`).
+ *
+ * Longer than the single-request window because one approval now stands in front of N
+ * submissions, each confirmed on chain in turn. Every digest is a specific proof over specific
+ * nullifiers and every item still burns its own nonce, so the extra time widens nothing except how
+ * long the SAME already-approved requests stay submittable.
+ */
+declare const REQUEST_AUTH_BATCH_MAX_AGE_SECONDS = 600;
+/**
+ * Most items one batch signature may cover (`REQUEST_AUTH_BATCH_MAX_ITEMS`, `api/request_auth.rs`).
+ *
+ * The practical bound is lower and comes from the chain, not the relay: every spend appends two
+ * roots to the on-chain ring of 100, so N items proved against one root push that root out of the
+ * ring by themselves before N reaches 50, and sooner with other traffic. Size a batch as
+ * `(100 - expected foreign inserts while it submits) / 2`, and chunk above that.
+ */
+declare const RELAY_BATCH_AUTH_MAX_ITEMS = 64;
+/** The batch envelope an item carries next to its per-request auth fields. Not part of the digest. */
+interface RelayBatchAuthEnvelope {
+    /** Lowercase hex sha256 of every item's request-auth message, in the order the wallet signed. */
+    digests: string[];
+}
+/** Per-item wire fields under a batch signature: the single-request fields plus the envelope. */
+interface RelayBatchAuthFields extends RelayAuthFields {
+    auth_batch: RelayBatchAuthEnvelope;
+}
+/** The digest an item contributes to a batch: sha256 of its request-auth message bytes, hex. */
+declare function relayRequestDigestHex(preimage: RelayAuthPreimage): string;
+/** Build the batch message the wallet signs. Byte-identical to `build_batch_auth_message`. */
+declare function buildRelayBatchAuthMessage(programId: PublicKey, issuedAt: string, digests: readonly string[]): Uint8Array;
+
 interface ViewingKeyPair {
     privateKey: Uint8Array;
     publicKey: Uint8Array;
@@ -858,7 +1051,7 @@ declare const SIGN_IN_MESSAGE = "Cloak: Sign in\n\nSign this message to securely
  * Relay stores nk and derives sk_d per note when exporting.
  * Registration is authenticated via one-time nonce challenge.
  */
-declare function registerViewingKey(relayUrl: string, userPubkey: PublicKey, nk: Uint8Array, signMessage: (message: Uint8Array) => Promise<Uint8Array>): Promise<void>;
+declare function registerViewingKey(relayUrl: string, userPubkey: PublicKey, nk: Uint8Array, signMessage: ((message: Uint8Array) => Promise<Uint8Array>) | RelayAuthSigner): Promise<void>;
 
 interface EncryptMetadataContext {
     userPubkey?: PublicKey | string;
@@ -2081,7 +2274,7 @@ declare class RelayService {
      * );
      * ```
      */
-    registerViewingKey(userPubkey: string, viewingKey: string, signMessage: (message: Uint8Array) => Promise<Uint8Array>): Promise<boolean>;
+    registerViewingKey(userPubkey: string, viewingKey: string, signMessage: ((message: Uint8Array) => Promise<Uint8Array>) | RelayAuthSigner): Promise<boolean>;
     /**
      * Fetch relay compliance master public key.
      * DEPRECATED: This endpoint is no longer used
@@ -2633,156 +2826,6 @@ declare function isBrowser(): boolean;
  */
 declare function isBrowserLike(): boolean;
 
-/**
- * How long the relay accepts a signed request after its `auth_issued_at`
- * (`REQUEST_AUTH_MAX_AGE_SECONDS`, `api/request_auth.rs`).
- *
- * A FIRST-USE request past this window is rejected outright. The expiry exception the relay grants
- * applies only to an exact replay of a request whose durable row already exists, which by
- * definition never happens for a request that has not been accepted once.
- */
-declare const REQUEST_AUTH_MAX_AGE_SECONDS = 300;
-/**
- * How far ahead of the relay's clock a request may be stamped
- * (`REQUEST_AUTH_MAX_FUTURE_SKEW_SECONDS`, `api/request_auth.rs`).
- *
- * `auth_issued_at` comes from `Date.now()`. On a server that is NTP-disciplined; in a browser it
- * is the user's own machine clock, and a laptop more than 30 seconds fast cannot authenticate at
- * all until its clock is corrected.
- */
-declare const REQUEST_AUTH_MAX_FUTURE_SKEW_SECONDS = 30;
-/**
- * The exact fields each endpoint signs. Both lists mirror the relay's `*_auth_request` builders and
- * must stay in lockstep with them: adding a field on one side alone silently invalidates every
- * signature, and the failure surfaces as a bare 401 with nothing pointing here.
- */
-declare const TRANSACT_AUTH_FIELDS: readonly ["encrypted_notes", "max_fee", "mint", "proof_bytes", "public_inputs", "recipient", "recipient_delivery_notes", "risk_quote", "sender"];
-declare const TRANSACT_SWAP_AUTH_FIELDS: readonly ["close_timed_out", "dexes", "encrypted_notes", "exclude_dexes", "max_fee", "min_output_amount", "output_mint", "proof_bytes", "public_inputs", "recipient", "recipient_ata", "refund_blinding", "refund_pubkey", "retry_request_id", "risk_quote", "route_retry_attempts", "sender", "slippage_bps", "swap_max_retries"];
-/**
- * Serialize exactly like the relay's `canonical_json`: keys sorted bytewise, no whitespace.
- *
- * SCOPE. This is the SDK's half of a byte-for-byte agreement with one specific Rust function over
- * one specific schema: the values reachable through {@link TRANSACT_AUTH_FIELDS} and
- * {@link TRANSACT_SWAP_AUTH_FIELDS}, which are ASCII keys over strings, small unsigned integers,
- * booleans, nulls, arrays and plain objects. Inside that schema the two implementations agree.
- *
- * Outside it they need not, so anything that could serialize differently on the two sides is
- * REFUSED here rather than signed into a digest that silently fails to match:
- *
- *  - Non-integer, non-finite and beyond-safe-integer numbers. `serde_json` renders an f64 as Rust
- *    does (`1e21`) where JavaScript renders `1e+21`, and `0.1 + 0.2` has no single spelling. Every
- *    number in both field lists is a small unsigned integer (`slippage_bps`, `route_retry_attempts`,
- *    `swap_max_retries`); u64 amounts already travel as decimal STRINGS for exactly this reason.
- *  - Functions and symbols as object VALUES. `JSON.stringify` drops such a key from the wire body
- *    while it stays in the signed view, so the two digests can never agree.
- *
- * `undefined` is NOT refused: it serializes as `null` here, `JSON.stringify` omits the key on the
- * wire, and every optional field on the relay side is `Option<T>` with `#[serde(default)]`, so the
- * relay sees `null` too. That is the same agreement {@link buildAuthRequest} relies on. The one
- * field where it does not hold is `slippage_bps`, which is why that field is checked by name.
- *
- * `bigint` is accepted and rendered as a bare decimal integer, matching serde's u64/i64 output.
- * Note that such a value cannot also go on the wire: `JSON.stringify` throws on a bigint. Use a
- * decimal string in the body, as every SDK-built body does.
- */
-declare function canonicalJson(value: unknown): string;
-interface RelayAuthFields {
-    sender: string;
-    auth_issued_at: string;
-    auth_nonce: string;
-    auth_signature: string;
-}
-/**
- * Everything an authenticated request needs EXCEPT the signature: the three fields that go on the
- * wire alongside it, plus the exact bytes to sign.
- *
- * This exists because the holder of the pen is not always a `Keypair`. A browser wallet adapter
- * exposes `signMessage(bytes): Promise<Uint8Array>` and no secret key at all, so the scheme has to
- * be reachable in two halves: build the preimage here, sign it wherever the key actually lives,
- * then put `sender` / `auth_issued_at` / `auth_nonce` and the base64 signature on the body.
- *
- * `message` is a plain ed25519 detached-signature preimage — nothing about the scheme changes
- * between a local keypair and a wallet, only who signs it.
- */
-interface RelayAuthPreimage {
-    sender: string;
-    auth_issued_at: string;
-    auth_nonce: string;
-    message: Uint8Array;
-}
-/**
- * Build the signed view and its preimage for one request, WITHOUT signing.
- *
- * `sender` is bound into the signed view and returned for the body — the relay rejects a request
- * whose authenticated sender is not also present inside the signed payload. It must be the end
- * user's own wallet: `sender` is the key screened for sanctions on a shield-to-shield send, so
- * substituting an ephemeral or service key here moves the screening off the actual user.
- *
- * `nonce` and `issued_at` are generated here, once per call. Callers that re-POST a request must
- * reuse the same preimage rather than rebuilding it, or the relay sees a brand-new request.
- */
-declare function buildRelayAuthPreimage(endpoint: string, programId: PublicKey, body: Record<string, unknown>, sender: PublicKey, nowSeconds?: number, fields?: readonly string[]): RelayAuthPreimage;
-/**
- * An async message signer standing in for a `Keypair`.
- *
- * A browser wallet adapter has no secret key to hand over — it exposes `signMessage`, and what
- * this scheme needs signed is a plain ed25519 detached signature, which is exactly what that
- * produces. Only the holder of the pen changes.
- *
- * COMPLIANCE — `walletPublicKey` becomes the request's authenticated `sender`, and `sender` is the
- * key screened for sanctions on a shield-to-shield send. It MUST be the end user's own wallet.
- * Putting an ephemeral, service-held or otherwise substituted key here moves the screening onto a
- * key that is not the user: a compliance regression, not a shortcut.
- */
-interface RelayAuthSigner {
-    /** The end user's real wallet. Becomes the authenticated `sender`. Never an ephemeral key. */
-    walletPublicKey: PublicKey;
-    /** Wallet-adapter `signMessage`; must return the 64-byte ed25519 detached signature. */
-    signMessage: (message: Uint8Array) => Promise<Uint8Array>;
-}
-/**
- * Turn a relay rejection into something the person in front of the screen can act on.
- *
- * Every string matched here is an `Error::Unauthorized` from `api/request_auth.rs`, and all of them
- * arrive as the same bare 401. Two of them are not the caller's mistake at all: an approval that
- * sat too long, and a machine clock that is simply wrong. Returns `null` for anything that is not
- * an authentication rejection, so callers can append it only when there is something to add.
- */
-declare function explainRelayAuthRejection(responseText: string): string | null;
-declare const REQUEST_AUTH_BATCH_DOMAIN = "CLOAK_RELAY_BATCH_AUTH_V1";
-/**
- * How long the relay accepts an item that arrives under a batch signature
- * (`REQUEST_AUTH_BATCH_MAX_AGE_SECONDS`, `api/request_auth.rs`).
- *
- * Longer than the single-request window because one approval now stands in front of N
- * submissions, each confirmed on chain in turn. Every digest is a specific proof over specific
- * nullifiers and every item still burns its own nonce, so the extra time widens nothing except how
- * long the SAME already-approved requests stay submittable.
- */
-declare const REQUEST_AUTH_BATCH_MAX_AGE_SECONDS = 600;
-/**
- * Most items one batch signature may cover (`REQUEST_AUTH_BATCH_MAX_ITEMS`, `api/request_auth.rs`).
- *
- * The practical bound is lower and comes from the chain, not the relay: every spend appends two
- * roots to the on-chain ring of 100, so N items proved against one root push that root out of the
- * ring by themselves before N reaches 50, and sooner with other traffic. Size a batch as
- * `(100 - expected foreign inserts while it submits) / 2`, and chunk above that.
- */
-declare const RELAY_BATCH_AUTH_MAX_ITEMS = 64;
-/** The batch envelope an item carries next to its per-request auth fields. Not part of the digest. */
-interface RelayBatchAuthEnvelope {
-    /** Lowercase hex sha256 of every item's request-auth message, in the order the wallet signed. */
-    digests: string[];
-}
-/** Per-item wire fields under a batch signature: the single-request fields plus the envelope. */
-interface RelayBatchAuthFields extends RelayAuthFields {
-    auth_batch: RelayBatchAuthEnvelope;
-}
-/** The digest an item contributes to a batch: sha256 of its request-auth message bytes, hex. */
-declare function relayRequestDigestHex(preimage: RelayAuthPreimage): string;
-/** Build the batch message the wallet signs. Byte-identical to `build_batch_auth_message`. */
-declare function buildRelayBatchAuthMessage(programId: PublicKey, issuedAt: string, digests: readonly string[]): Uint8Array;
-
 /**
  * One wallet approval for a batch of relay requests (CLOAK_RELAY_BATCH_AUTH_V1).
  *
@@ -3148,6 +3191,14 @@ interface TransactOptions {
     signTransaction?: <T extends Transaction | VersionedTransaction>(transaction: T) => Promise<T>;
     /** Wallet adapter signMessage for viewing-key registration auth. */
     signMessage?: (message: Uint8Array) => Promise<Uint8Array>;
+    /**
+     * Relay authentication for a wallet that cannot sign messages at all (Ledger, Trezor): the
+     * wallet-adapter `signTransaction`, used to sign a deterministic no-op transaction that carries
+     * the request digest in its blockhash slot instead of signing the text (`relay/payload.ts`,
+     * `buildAuthTransactionMessage`). Also used for viewing-key registration. Requires
+     * `walletPublicKey` (or `depositorPublicKey`). `signMessage` wins when both are present.
+     */
+    signAuthTransaction?: <T extends Transaction>(transaction: T) => Promise<T>;
     /** Public key of the depositor when using signTransaction */
     depositorPublicKey?: PublicKey;
     /** Wallet public key for relay submissions when depositor keypair isn't used. */
@@ -5595,4 +5646,4 @@ declare const VERSION = "0.2.3";
 /** True when scanner supports TransactSwap (tag 1). Check this to verify the correct SDK bundle is loaded. */
 declare const SCANNER_SUPPORTS_TRANSACT_SWAP = true;
 
-export { BRIDGE_ESCROW_LABEL, BUILD_ALLOWS_LOCAL_ENDPOINTS, type BridgeDeliveryState, type BridgeDeposit, type BridgeDepositState, type BridgeQuoteAssessment, type BridgeQuoteInput, type BridgeRail, type BridgeRailAttestation, type BridgeRailProblem, type BridgeRailQuoteOption, type BridgeRailQuoteRequest, type BridgeRailQuoteResponse, type BridgeRailStatusResult, type BuildRecipientDeliveryNotesParams, CHAIN_NOTE_SALT_BITS, CLEANUP_FEE_BUDGET, CLOAK_PRODUCTION_RELAY_URL, CLOAK_PROGRAM_ID, type ChainNoteTxType, type CircuitVerificationResult, type CleanupResult, type CloakConfig, CloakError, type CloakKeyPair, type CloakNote, type CommitmentEntry, type CommitmentsResponse, type CompactChainNote, type ComplianceReport, type ComplianceTxType, type ConfirmSettlementParams, DEFAULT_CIRCUITS_URL, DEFAULT_TRANSACTION_CIRCUITS_URL, DELIVERY_MEMO_TAG, DELIVERY_REGISTRY_SEED, type DeliveredNote, DepositError, type DepositInstructionParams, type DepositNoteSecrets, type DepositOptions, type DepositOutcome, type DepositRef, type DepositResult, type DepositStatus, type DiscoverOptions, type DiscoverSwapRefundsOptions, type DiscoveredSwapRefund, DoNotRetry, ECONOMIC_MINIMUM, EXPECTED_CIRCUIT_HASHES, type EncryptedMetadataBundle, type EncryptedNote$1 as EncryptedNote, type ErrorCategory, type ExpandedSpendKey, type ExternalFeePayerAdapter, FEE_BUDGET, FIXED_FEE_LAMPORTS, type FundingPlan, type Groth16Proof, InsecureRandomnessError, LAMPORTS_PER_SOL, LocalStorageAdapter, type LogLevel, type Logger, MAINNET_RENT_0, MAINNET_RENT_1, MAX_RECEIVER_INDEX, MERKLE_TREE_HEIGHT, MIN_DEPOSIT_LAMPORTS, MIN_DEPOSIT_SPL_BASE_UNITS, type MasterKey, type MatchChangeNoteParams, type MatchDepositNoteParams, type MatchSwapRefundLeafParams, type MaxLengthArray, MemoryStorageAdapter, type MerkleProof, type MerkleRootResponse, MerkleTree, NATIVE_SOL_MINT, type Network, type NoteData, ONECLICK_PUBKEY_B58, type OnchainMerkleProof, type ParsedDeliveryCarrier, type PaymasterTopUpExpectation, type PaymasterTopUpResult, type PendingDeposit, type PendingWithdrawal, type PostFailureVerdict, RECIPIENT_DELIVERY_CIPHERTEXT_LEN, RECIPIENT_DELIVERY_EPHEMERAL_PK_LEN, RECIPIENT_DELIVERY_NONCE_LEN, RECIPIENT_DELIVERY_NOTE_BYTES, RECIPIENT_DELIVERY_PLAINTEXT_LEN, RECIPIENT_DELIVERY_TAG_LEN, RELAY_BATCH_AUTH_MAX_ITEMS, RELAY_ORIGIN_ALLOWLIST, REQUEST_AUTH_BATCH_DOMAIN, REQUEST_AUTH_BATCH_MAX_AGE_SECONDS, REQUEST_AUTH_MAX_AGE_SECONDS, REQUEST_AUTH_MAX_FUTURE_SKEW_SECONDS, type RecipientDeliveryNote, type RecoveredChangeNote, type RecoveredChangeNoteRecord, type RecoveredDepositNote, type RecoveredDepositNoteRecord, type RecoveredSwapRefund, type RelayAuthPreimage, type RelayAuthSigner, RelayBatchAuthCoordinator, type RelayBatchAuthCoordinatorOptions, type RelayBatchAuthEnvelope, type RelayBatchAuthFields, type RelayBatchAuthItemHandle, RelayInternalError, RelayService, type RelaySubmissionResult, type RentRates, type RetryHooks, type RiskQuoteInstructionResponse, RootNotFoundError, SCANNER_SUPPORTS_TRANSACT_SWAP, SIGN_IN_MESSAGE, SanctionsQuoteError, type ScanOptions, type ScanRecipientDeliveryOptions, type ScanResult, type ScanSummary, type ScannedTransaction, type SettlementConnection, type SettlementContext, type SettlementStatus, type SettlementVerdict, SettlementVerificationError, ShieldPoolErrors, type ShieldPoolPDAs, SimpleWallet, type SpendKey, type StorageAdapter, type SubmitTransactToRelayArgs, type SwapOptions, type SwapParams, type SwapRefundAuthorization, type SwapResult, TERMINAL_FAILURE, TRANSACTION_CIRCUITS_VERSION, TRANSACT_AUTH_FIELDS, TRANSACT_SWAP_AUTH_FIELDS, type TransactBatchItem, type TransactBatchItemOutcome, type TransactBatchOptions, type TransactBatchResult, type TransactOptions, type TransactParams, type TransactRequestBodyParams, type TransactResult, type TransactionMetadata, type Transfer, type TransferOptions, type TransferResult, type TxStatus, type UserFriendlyError, type Utxo, UtxoAlreadySpentError, type EncryptedNote as UtxoEncryptedNote, type UtxoKeypair, type UtxoSwapParams, type UtxoSwapResult, UtxoWallet, VARIABLE_FEE_DENOMINATOR, VARIABLE_FEE_NUMERATOR, VARIABLE_FEE_RATE, VERSION, type VerifyUtxosResult, type ViewKey, type ViewingKeyPair, WITHDRAW_FEE_BPS, WITHDRAW_FIXED_FEE, type WalletAdapter, type WalletUtxo, type WithdrawOptions, type WithdrawSubmissionResult, assertDirectSubmissionLanded, assertInputMints, assertTransactionCircuitIntegrity, assessBridgeQuote, bigintToBytes32$1 as bigintToBytes32, bigintToHex, buildMerkleTree, buildMerkleTreeFromChain, buildMerkleTreeFromRelay, buildRecipientDeliveryNotes, buildRelayAuthPreimage, buildRelayBatchAuthMessage, buildTransactRequestBody, bytesToHex, calculateFee, calculateFeeBigint, calculateRelayFee, canRebuildMerkleTreeFromChain, canonicalJson, canonicalPayloadString, chainNoteFromBase64, chainNoteToBase64, classifyPostFailure, classifyRelayError, cleanupReceivingAddress, cleanupStalePendingOperations, clearPendingDeposits, clearPendingWithdrawals, cloakBridgeRail, computeChainNoteHash, computeExtDataHash, computeMerkleRoot, computeProofForLatestDeposit, computeProofFromChain, computeSignature, computeSwapRefundCommitment, computeCommitment as computeUtxoCommitment, computeNullifier as computeUtxoNullifier, confirmTransactSettlement, copyNoteToClipboard, createCloakError, createDepositInstruction, createLogger, createRecoverableChangeUtxo, createRecoverableDepositUtxo, createRelayBatchAuthCoordinator, createUtxo, createZeroUtxo, decryptCompactChainNote, decryptComplianceMetadataWithMasterKey, decryptTransactionMetadata, depositFromDerivedKey, deriveBridgeReceiver, deriveChangeNoteBlinding, deriveDepositNoteSecrets, deriveDiversifiedViewingKey, deriveDiversifier, deriveFundingTargets, deriveInputNullifierPdas, derivePublicKey, deriveSpendKey, deriveSwapRefundAuthorization, deriveUserCompliancePublicKey, deriveUserComplianceScalar, deriveUtxoKeypairFromSpendKey, deriveViewKey, deriveViewingKeyFromNk, deriveViewingKeyFromSpendKey, deriveViewingKeyFromUtxoPrivateKey, deserializeUtxo, detectNetworkFromRpcUrl, discoverSwapRefunds, downloadNote, encodeDeliveryCarrierMemo, encodeNoteSimple, encodeRecipientDeliveryNote, encryptCompactChainNote, encryptNoteForRecipient, encryptTransactionMetadata, encryptTransactionMetadataBundle, expandSpendKey, explainRelayAuthRejection, exportKeys, exportNote, exportWalletKeys, fetchCommitments, fetchRiskQuoteInstruction, fetchRiskQuoteIx, filterNotesByNetwork, filterWithdrawableNotes, findNoteByCommitment, formatAmount, formatComplianceCsv, formatErrorForLogging, formatSol, fullWithdraw, fundReceiverViaPaymaster, generateCloakKeys, generateCommitmentAsync, generateMasterSeed, generateNoteFromWallet, generateUtxoKeypair, generateViewingKeyPair, getAddressExplorerUrl, getChainNoteRegistryPDA, getCircuitsPath, getDeliveryRegistryPDA, getDistributableAmount, getExplorerUrl, getNkFromUtxoPrivateKey, getNullifierPDA, getPendingOperationsSummary, getPoolAuthorityConfigPDA, getPublicKey, getPublicViewKey, getRecipientAmount, getRpcUrlForNetwork, getShieldPoolPDAs, getSwapStatePDA, getViewKey, hasPendingOperations, hexToBigint$1 as hexToBigint, hexToBytes, importKeys, importWalletKeys, isBrowser, isBrowserLike, isDebugEnabled, isPlausibleSignature, isReactNative, isRootNotFoundError, isSubmissionOutcomeUnknownResponse, isTerminalFailure, isValidHex, isValidRpcUrl, isValidSolanaAddress, isWithdrawAmountSufficient, isWithdrawable, keypairToAdapter, listBridgeDeposits, loadPendingDeposits, loadPendingWithdrawals, loadVerifiedCircuitArtifacts, matchChangeNote, matchDepositNote, matchSwapRefundLeaf, mayRetry, openRecipientDeliveryNote, parseAmount, parseDeliveryCarrierMemo, parseError, parseNote, parseRelayErrorResponse, parseRelayErrorSignature, parseTransactionError, partialWithdraw, poseidonHash, preflightCheck, preflightNullifiers, prepareEncryptedOutput, prepareEncryptedOutputForRecipient, proofToBytes, pubkeyToFieldElement, pubkeyToLimbs, randomBytes, randomChangeNoteSalt, randomDepositNoteSalt, randomFieldElement, readMerkleTreeState, readRent, recipientDeliveryNoteToBase64, registerViewingKey, relayRequestDigestHex, removePendingDeposit, removePendingWithdrawal, renderAssessment, resolveCircuitsBase, retryDelayMs, savePendingDeposit, savePendingWithdrawal, scanNotesForWallet, scanRecipientDeliveryNotes, scanTransactions, sdkLogger, selectUtxos, sendTransaction, serializeNote, serializeUtxo, setCircuitsPath, setDebugMode, signTransaction, splitTo2Limbs, submitTransactToRelay, sumUtxoAmounts, swapUtxo, swapWithChange, toComplianceReport, transact, transactBatch, transfer, truncate, tryDecryptNote, updateNoteWithDeposit, updatePendingDeposit, updatePendingWithdrawal, bigintToBytes32 as utxoBigintToBytes32, utxoEquals, hexToBigint as utxoHexToBigint, validateDepositParams, validateNote, validateOutputsSum, validatePaymasterTopUpTransaction, validateRoot, validateTransfers, validateWalletConnected, validateWithdrawableNote, verifyAllCircuits, verifyCircuitIntegrity, verifyQuoteSignature, verifyUtxos, waitForRoot, withShieldRetries, withTiming, withdrawFeeFor };
+export { BRIDGE_ESCROW_LABEL, BUILD_ALLOWS_LOCAL_ENDPOINTS, type BridgeDeliveryState, type BridgeDeposit, type BridgeDepositState, type BridgeQuoteAssessment, type BridgeQuoteInput, type BridgeRail, type BridgeRailAttestation, type BridgeRailProblem, type BridgeRailQuoteOption, type BridgeRailQuoteRequest, type BridgeRailQuoteResponse, type BridgeRailStatusResult, type BuildRecipientDeliveryNotesParams, CHAIN_NOTE_SALT_BITS, CLEANUP_FEE_BUDGET, CLOAK_PRODUCTION_RELAY_URL, CLOAK_PROGRAM_ID, type ChainNoteTxType, type CircuitVerificationResult, type CleanupResult, type CloakConfig, CloakError, type CloakKeyPair, type CloakNote, type CommitmentEntry, type CommitmentsResponse, type CompactChainNote, type ComplianceReport, type ComplianceTxType, type ConfirmSettlementParams, DEFAULT_CIRCUITS_URL, DEFAULT_TRANSACTION_CIRCUITS_URL, DELIVERY_MEMO_TAG, DELIVERY_REGISTRY_SEED, type DeliveredNote, DepositError, type DepositInstructionParams, type DepositNoteSecrets, type DepositOptions, type DepositOutcome, type DepositRef, type DepositResult, type DepositStatus, type DiscoverOptions, type DiscoverSwapRefundsOptions, type DiscoveredSwapRefund, DoNotRetry, ECONOMIC_MINIMUM, EXPECTED_CIRCUIT_HASHES, type EncryptedMetadataBundle, type EncryptedNote$1 as EncryptedNote, type ErrorCategory, type ExpandedSpendKey, type ExternalFeePayerAdapter, FEE_BUDGET, FIXED_FEE_LAMPORTS, type FundingPlan, type Groth16Proof, InsecureRandomnessError, LAMPORTS_PER_SOL, LocalStorageAdapter, type LogLevel, type Logger, MAINNET_RENT_0, MAINNET_RENT_1, MAX_RECEIVER_INDEX, MERKLE_TREE_HEIGHT, MIN_DEPOSIT_LAMPORTS, MIN_DEPOSIT_SPL_BASE_UNITS, type MasterKey, type MatchChangeNoteParams, type MatchDepositNoteParams, type MatchSwapRefundLeafParams, type MaxLengthArray, MemoryStorageAdapter, type MerkleProof, type MerkleRootResponse, MerkleTree, NATIVE_SOL_MINT, type Network, type NoteData, ONECLICK_PUBKEY_B58, type OnchainMerkleProof, type ParsedDeliveryCarrier, type PaymasterTopUpExpectation, type PaymasterTopUpResult, type PendingDeposit, type PendingWithdrawal, type PostFailureVerdict, RECIPIENT_DELIVERY_CIPHERTEXT_LEN, RECIPIENT_DELIVERY_EPHEMERAL_PK_LEN, RECIPIENT_DELIVERY_NONCE_LEN, RECIPIENT_DELIVERY_NOTE_BYTES, RECIPIENT_DELIVERY_PLAINTEXT_LEN, RECIPIENT_DELIVERY_TAG_LEN, RELAY_BATCH_AUTH_MAX_ITEMS, RELAY_ORIGIN_ALLOWLIST, REQUEST_AUTH_BATCH_DOMAIN, REQUEST_AUTH_BATCH_MAX_AGE_SECONDS, REQUEST_AUTH_MAX_AGE_SECONDS, REQUEST_AUTH_MAX_FUTURE_SKEW_SECONDS, type RecipientDeliveryNote, type RecoveredChangeNote, type RecoveredChangeNoteRecord, type RecoveredDepositNote, type RecoveredDepositNoteRecord, type RecoveredSwapRefund, type RelayAuthMode, type RelayAuthPreimage, type RelayAuthSigner, RelayBatchAuthCoordinator, type RelayBatchAuthCoordinatorOptions, type RelayBatchAuthEnvelope, type RelayBatchAuthFields, type RelayBatchAuthItemHandle, RelayInternalError, type RelayMessageSigner, RelayService, type RelaySubmissionResult, type RelayTransactionSigner, type RentRates, type RetryHooks, type RiskQuoteInstructionResponse, RootNotFoundError, SCANNER_SUPPORTS_TRANSACT_SWAP, SIGN_IN_MESSAGE, SanctionsQuoteError, type ScanOptions, type ScanRecipientDeliveryOptions, type ScanResult, type ScanSummary, type ScannedTransaction, type SettlementConnection, type SettlementContext, type SettlementStatus, type SettlementVerdict, SettlementVerificationError, ShieldPoolErrors, type ShieldPoolPDAs, SimpleWallet, type SpendKey, type StorageAdapter, type SubmitTransactToRelayArgs, type SwapOptions, type SwapParams, type SwapRefundAuthorization, type SwapResult, TERMINAL_FAILURE, TRANSACTION_CIRCUITS_VERSION, TRANSACT_AUTH_FIELDS, TRANSACT_SWAP_AUTH_FIELDS, type TransactBatchItem, type TransactBatchItemOutcome, type TransactBatchOptions, type TransactBatchResult, type TransactOptions, type TransactParams, type TransactRequestBodyParams, type TransactResult, type TransactionMetadata, type Transfer, type TransferOptions, type TransferResult, type TxStatus, type UserFriendlyError, type Utxo, UtxoAlreadySpentError, type EncryptedNote as UtxoEncryptedNote, type UtxoKeypair, type UtxoSwapParams, type UtxoSwapResult, UtxoWallet, VARIABLE_FEE_DENOMINATOR, VARIABLE_FEE_NUMERATOR, VARIABLE_FEE_RATE, VERSION, type VerifyUtxosResult, type ViewKey, type ViewingKeyPair, WITHDRAW_FEE_BPS, WITHDRAW_FIXED_FEE, type WalletAdapter, type WalletUtxo, type WithdrawOptions, type WithdrawSubmissionResult, assertDirectSubmissionLanded, assertInputMints, assertTransactionCircuitIntegrity, assessBridgeQuote, bigintToBytes32$1 as bigintToBytes32, bigintToHex, buildAuthTransactionMessage, buildMerkleTree, buildMerkleTreeFromChain, buildMerkleTreeFromRelay, buildRecipientDeliveryNotes, buildRelayAuthPreimage, buildRelayBatchAuthMessage, buildTransactRequestBody, bytesToHex, calculateFee, calculateFeeBigint, calculateRelayFee, canRebuildMerkleTreeFromChain, canonicalJson, canonicalPayloadString, chainNoteFromBase64, chainNoteToBase64, classifyPostFailure, classifyRelayError, cleanupReceivingAddress, cleanupStalePendingOperations, clearPendingDeposits, clearPendingWithdrawals, cloakBridgeRail, computeChainNoteHash, computeExtDataHash, computeMerkleRoot, computeProofForLatestDeposit, computeProofFromChain, computeSignature, computeSwapRefundCommitment, computeCommitment as computeUtxoCommitment, computeNullifier as computeUtxoNullifier, confirmTransactSettlement, copyNoteToClipboard, createCloakError, createDepositInstruction, createLogger, createRecoverableChangeUtxo, createRecoverableDepositUtxo, createRelayBatchAuthCoordinator, createUtxo, createZeroUtxo, decryptCompactChainNote, decryptComplianceMetadataWithMasterKey, decryptTransactionMetadata, depositFromDerivedKey, deriveBridgeReceiver, deriveChangeNoteBlinding, deriveDepositNoteSecrets, deriveDiversifiedViewingKey, deriveDiversifier, deriveFundingTargets, deriveInputNullifierPdas, derivePublicKey, deriveSpendKey, deriveSwapRefundAuthorization, deriveUserCompliancePublicKey, deriveUserComplianceScalar, deriveUtxoKeypairFromSpendKey, deriveViewKey, deriveViewingKeyFromNk, deriveViewingKeyFromSpendKey, deriveViewingKeyFromUtxoPrivateKey, deserializeUtxo, detectNetworkFromRpcUrl, discoverSwapRefunds, downloadNote, encodeDeliveryCarrierMemo, encodeNoteSimple, encodeRecipientDeliveryNote, encryptCompactChainNote, encryptNoteForRecipient, encryptTransactionMetadata, encryptTransactionMetadataBundle, expandSpendKey, explainRelayAuthRejection, exportKeys, exportNote, exportWalletKeys, fetchCommitments, fetchRiskQuoteInstruction, fetchRiskQuoteIx, filterNotesByNetwork, filterWithdrawableNotes, findNoteByCommitment, formatAmount, formatComplianceCsv, formatErrorForLogging, formatSol, fullWithdraw, fundReceiverViaPaymaster, generateCloakKeys, generateCommitmentAsync, generateMasterSeed, generateNoteFromWallet, generateUtxoKeypair, generateViewingKeyPair, getAddressExplorerUrl, getChainNoteRegistryPDA, getCircuitsPath, getDeliveryRegistryPDA, getDistributableAmount, getExplorerUrl, getNkFromUtxoPrivateKey, getNullifierPDA, getPendingOperationsSummary, getPoolAuthorityConfigPDA, getPublicKey, getPublicViewKey, getRecipientAmount, getRpcUrlForNetwork, getShieldPoolPDAs, getSwapStatePDA, getViewKey, hasPendingOperations, hexToBigint$1 as hexToBigint, hexToBytes, importKeys, importWalletKeys, isBrowser, isBrowserLike, isDebugEnabled, isPlausibleSignature, isReactNative, isRootNotFoundError, isSubmissionOutcomeUnknownResponse, isTerminalFailure, isValidHex, isValidRpcUrl, isValidSolanaAddress, isWithdrawAmountSufficient, isWithdrawable, keypairToAdapter, listBridgeDeposits, loadPendingDeposits, loadPendingWithdrawals, loadVerifiedCircuitArtifacts, matchChangeNote, matchDepositNote, matchSwapRefundLeaf, mayRetry, openRecipientDeliveryNote, parseAmount, parseDeliveryCarrierMemo, parseError, parseNote, parseRelayErrorResponse, parseRelayErrorSignature, parseTransactionError, partialWithdraw, poseidonHash, preflightCheck, preflightNullifiers, prepareEncryptedOutput, prepareEncryptedOutputForRecipient, proofToBytes, pubkeyToFieldElement, pubkeyToLimbs, randomBytes, randomChangeNoteSalt, randomDepositNoteSalt, randomFieldElement, readMerkleTreeState, readRent, recipientDeliveryNoteToBase64, registerViewingKey, relayRequestDigestHex, removePendingDeposit, removePendingWithdrawal, renderAssessment, resolveCircuitsBase, retryDelayMs, savePendingDeposit, savePendingWithdrawal, scanNotesForWallet, scanRecipientDeliveryNotes, scanTransactions, sdkLogger, selectUtxos, sendTransaction, serializeAuthTransactionMessage, serializeNote, serializeUtxo, setCircuitsPath, setDebugMode, signRelayAuthPayload, signTransaction, splitTo2Limbs, submitTransactToRelay, sumUtxoAmounts, swapUtxo, swapWithChange, toComplianceReport, transact, transactBatch, transfer, truncate, tryDecryptNote, updateNoteWithDeposit, updatePendingDeposit, updatePendingWithdrawal, bigintToBytes32 as utxoBigintToBytes32, utxoEquals, hexToBigint as utxoHexToBigint, validateDepositParams, validateNote, validateOutputsSum, validatePaymasterTopUpTransaction, validateRoot, validateTransfers, validateWalletConnected, validateWithdrawableNote, verifyAllCircuits, verifyCircuitIntegrity, verifyQuoteSignature, verifyUtxos, waitForRoot, withShieldRetries, withTiming, withdrawFeeFor };