@hinkal/react-native 0.3.1

package/common/src/data-structures/crypto-keys/decodeUTXO.mjs

@@ -0,0 +1,78 @@
+import { isSolanaLike as e } from "../../constants/chains.constants.mjs";
+import { poseidonHash as t } from "../../crypto/poseidon.mjs";
+import "./keys.mjs";
+import { Utxo as n } from "../utxo/Utxo.mjs";
+import { extractHighestBit as r, takeOffHighestBit as i } from "../../functions/utils/bit.operations.mjs";
+import { ethers as a } from "ethers";
+import { PublicKey as o } from "@solana/web3.js";
+//#region common/src/data-structures/crypto-keys/decodeUTXO.ts
+var s = "solana-on-chain-utxo:", c = 8, l = (e) => {
+	if (e.length !== c) throw Error(`Expected ${c} on-chain fields, received ${e.length}`);
+	let t = e.map((e, t) => {
+		let n = e instanceof Uint8Array ? e : Uint8Array.from(e);
+		if (n.length !== 32) throw Error(`Expected bytes32 length 32 at position ${t}, got ${n.length}`);
+		return `0x${Buffer.from(n).toString("hex")}`;
+	});
+	return `${s}${a.AbiCoder.defaultAbiCoder().encode(["bytes32[8]"], [t])}`;
+}, u = (e) => e.startsWith(s), d = (e) => {
+	if (!u(e)) throw Error("Invalid encoded Solana UTXO payload");
+	let [n] = a.AbiCoder.defaultAbiCoder().decode(["bytes32[8]"], e.slice(21)), s = n;
+	if (!Array.isArray(s) || s.length !== c) throw Error("Malformed encoded Solana UTXO payload");
+	let [l, d, f, p, m, h, g, _] = s, v = BigInt(l), y = BigInt(p), b = r(y) === 1n, x = i(y), S = a.toBeHex(BigInt(m)), C = BigInt(h), w = BigInt(g), T = BigInt(_).toString(), E = Array.from(a.getBytes(d)), D = Array.from(a.getBytes(f)), O = new o(Uint8Array.from([...E.slice(16), ...D.slice(16)])).toBase58();
+	return {
+		amount: v,
+		erc20TokenAddress: t(BigInt(d), BigInt(f)),
+		mintAddress: O,
+		randomization: x,
+		stealthAddress: S,
+		H0: C,
+		H1: w,
+		timeStamp: T,
+		isNewStyle: b
+	};
+}, f = (e) => {
+	let t = a.AbiCoder.defaultAbiCoder().decode([
+		"uint256",
+		"address",
+		"tuple(uint256, uint256, uint256, uint256)",
+		"uint256",
+		"uint256"
+	], e), n = BigInt(t[0]), o = t[1], s = BigInt(t[2][0]), c = r(s), l = i(s), u = a.toBeHex(BigInt(t[2][1])), d = BigInt(t[2][2]), f = BigInt(t[2][3]), p = BigInt(t[3]).toString(), m = Number(t[4]);
+	return {
+		amount: n,
+		erc20TokenAddress: o,
+		randomization: l,
+		isNewStyle: c === 1n,
+		stealthAddress: u,
+		H0: d,
+		H1: f,
+		timeStamp: p,
+		tokenId: m
+	};
+}, p = (t, n, r) => {
+	if (e(r)) {
+		let { amount: e, erc20TokenAddress: r, mintAddress: i, randomization: a, stealthAddress: o, timeStamp: s, isNewStyle: c, H0: l } = d(t);
+		return {
+			amount: e,
+			erc20TokenAddress: r,
+			mintAddress: i,
+			timeStamp: s,
+			nullifyingKey: n,
+			stealthAddress: o,
+			isNewStyle: c,
+			...c ? { H0: [a, l] } : { randomization: a }
+		};
+	}
+	let { amount: i, erc20TokenAddress: a, timeStamp: o, randomization: s, isNewStyle: c, stealthAddress: l, H0: u } = f(t);
+	return {
+		amount: i,
+		erc20TokenAddress: a,
+		timeStamp: o,
+		nullifyingKey: n,
+		stealthAddress: l,
+		isNewStyle: c,
+		...c ? { H0: [s, u] } : { randomization: s }
+	};
+}, m = (e, t, r) => new n(p(e, t, r));
+//#endregion
+export { f as decodeEvmUtxo, d as decodeSolanaUtxo, m as decodeUtxo, p as decodeUtxoConstructorArgs, l as encodeSolanaOnChainUtxo, u as isSolanaOnChainUtxo };

package/common/src/data-structures/crypto-keys/encryptDecryptUtxo.cjs

@@ -0,0 +1 @@
+require("../../../../_virtual/_rolldown/runtime.cjs"),require(`./keys.cjs`),require(`../utxo/Utxo.cjs`);const e=require(`../../crypto/ecdh-sealed-keys.cjs`);require(`../../crypto/ecdh.cjs`);let t=require(`ethers`),n=require(`@solana/web3.js`);var r=e=>e.startsWith(`0x`)?e:`0x${e}`,i=54912,a=e=>Uint8Array.from([Math.floor(e/256),e%256]),o=o=>{let s=[Buffer.from(t.ethers.toBeHex(o.amount)),Buffer.from(r(o.erc20TokenAddress)),Buffer.from(t.ethers.toBeHex(o.randomization??0n)),Buffer.from(r(o.getStealthAddress())),Buffer.from(t.ethers.toBeHex(BigInt(o.timeStamp))),Buffer.from(t.ethers.toBeHex(o.isNewStyle?1n:0n)),Buffer.from(t.ethers.toBeHex(o.H0?.[0]??0n)),Buffer.from(t.ethers.toBeHex(o.H0?.[1]??0n))];if(o.mintAddress){let e=new n.PublicKey(o.mintAddress),r=t.ethers.hexlify(e.toBytes());s.push(Buffer.from(r))}let c=e.encryptSealedKeys(Buffer.concat(s),[o.getEncryptionKey()]);return Buffer.concat([Buffer.from(a(i)),Buffer.from(c)])};exports.encryptUtxo=o;

package/common/src/data-structures/crypto-keys/encryptDecryptUtxo.d.ts

@@ -0,0 +1,18 @@
+import { IUtxoConstructor, Utxo } from '../utxo/Utxo';
+import { UserKeys } from './keys';
+/**
+ * encrypt data for the UTXO
+ * @param amount UTXO amount
+ * @param blinding UTXO blinding
+ * @param publicKey sender's encryption public key
+ * @returns returns encrypted data {Uint8Array}
+ */
+export declare const encryptUtxo: (utxo: Utxo) => Uint8Array;
+export declare const decryptUtxoConstructorArgs: (encryptedData: Uint8Array, userKeys: UserKeys) => IUtxoConstructor;
+/**
+ * decrypt UTXO data from events
+ * @param encryptedData encrypted UTXO data {Uint8Array}
+ * @param publicKey/privateKey sender's encryption keys
+ * @returns decrypted UTXO data Object {amount, blinding}
+ */
+export declare const decryptUtxo: (encryptedData: Uint8Array, userKeys: UserKeys) => Utxo;

package/common/src/data-structures/crypto-keys/encryptDecryptUtxo.mjs

@@ -0,0 +1,27 @@
+import "./keys.mjs";
+import "../utxo/Utxo.mjs";
+import { encryptSealedKeys as e } from "../../crypto/ecdh-sealed-keys.mjs";
+import "../../crypto/ecdh.mjs";
+import { ethers as t } from "ethers";
+import { PublicKey as n } from "@solana/web3.js";
+//#region common/src/data-structures/crypto-keys/encryptDecryptUtxo.ts
+var r = (e) => e.startsWith("0x") ? e : `0x${e}`, i = 54912, a = (e) => Uint8Array.from([Math.floor(e / 256), e % 256]), o = (o) => {
+	let s = [
+		Buffer.from(t.toBeHex(o.amount)),
+		Buffer.from(r(o.erc20TokenAddress)),
+		Buffer.from(t.toBeHex(o.randomization ?? 0n)),
+		Buffer.from(r(o.getStealthAddress())),
+		Buffer.from(t.toBeHex(BigInt(o.timeStamp))),
+		Buffer.from(t.toBeHex(o.isNewStyle ? 1n : 0n)),
+		Buffer.from(t.toBeHex(o.H0?.[0] ?? 0n)),
+		Buffer.from(t.toBeHex(o.H0?.[1] ?? 0n))
+	];
+	if (o.mintAddress) {
+		let e = new n(o.mintAddress), r = t.hexlify(e.toBytes());
+		s.push(Buffer.from(r));
+	}
+	let c = e(Buffer.concat(s), [o.getEncryptionKey()]);
+	return Buffer.concat([Buffer.from(a(i)), Buffer.from(c)]);
+};
+//#endregion
+export { o as encryptUtxo };

package/common/src/data-structures/crypto-keys/index.cjs

@@ -0,0 +1 @@
+require(`./keyUtils.cjs`),require(`./keys.cjs`),require(`./encryptDecryptUtxo.cjs`),require(`./decodeUTXO.cjs`);

package/common/src/data-structures/crypto-keys/index.d.ts

@@ -0,0 +1,4 @@
+export * from './decodeUTXO';
+export * from './encryptDecryptUtxo';
+export * from './keys';
+export * from './keyUtils';

package/common/src/data-structures/crypto-keys/index.mjs

@@ -0,0 +1,4 @@
+import "./keyUtils.mjs";
+import "./keys.mjs";
+import "./encryptDecryptUtxo.mjs";
+import "./decodeUTXO.mjs";

package/common/src/data-structures/crypto-keys/keyUtils.cjs

@@ -0,0 +1 @@
+const e=require(`../../constants/protocol.constants.cjs`);var t=t=>{if(t<0n||t>=21888242871839275222246405745257275088548364400416034343698204186575808495617n)throw RangeError();return t>e.CIRCOM_P_HALF},n=e=>t(e)?1n:0n;exports.getCircomSign=n,exports.isCircomNegative=t;

package/common/src/data-structures/crypto-keys/keyUtils.d.ts

@@ -0,0 +1,2 @@
+export declare const isCircomNegative: (n: bigint) => boolean;
+export declare const getCircomSign: (n: bigint) => 0n | 1n;

package/common/src/data-structures/crypto-keys/keyUtils.mjs

@@ -0,0 +1,8 @@
+import { CIRCOM_P_HALF as e } from "../../constants/protocol.constants.mjs";
+//#region common/src/data-structures/crypto-keys/keyUtils.ts
+var t = (t) => {
+	if (t < 0n || t >= 21888242871839275222246405745257275088548364400416034343698204186575808495617n) throw RangeError();
+	return t > e;
+}, n = (e) => t(e) ? 1n : 0n;
+//#endregion
+export { n as getCircomSign, t as isCircomNegative };

package/common/src/data-structures/crypto-keys/keys.cjs

@@ -0,0 +1 @@
+const e=require("../../../../_virtual/_rolldown/runtime.cjs"),t=require(`../../constants/protocol.constants.cjs`),n=require(`../../crypto/poseidon.cjs`),r=require(`../../../../shims/libsodium-wrappers.cjs`),i=require(`../../crypto/babyJub.cjs`),a=require(`../../crypto/eddsa.cjs`),o=require(`../cacheDevices/AttachableMemoryCacheDevice.cjs`),s=require(`./keyUtils.cjs`);let c=require(`ethers`),l=require(`@solana/web3.js`),u=require(`bs58`);u=e.__toESM(u);let d=require(`tweetnacl`);d=e.__toESM(d);let f=require(`tronweb`);var p=e.__toESM(r.default),m=new o.AttachableMemoryCacheDevice,h=new o.AttachableMemoryCacheDevice,g=new o.AttachableMemoryCacheDevice,_=class{signature;nullifyingKey;PREFIX_FOR_SPENDING_PAIR=`1`;PREFIX_FOR_NULLIFYING_PAIR=`2`;constructor(e,t){this.signature=e,this.nullifyingKey=t}getSignature(){return this.requireSignature(),this.signature}setSignature(e){this.signature=e}requireSignature(){if(!this.signature)throw Error(`No signature provided`)}requireKeyMaterial(){if(!this.signature&&!this.nullifyingKey)throw Error(`No signature or private key provided`)}verifyTronMessage(e,t){return this.requireSignature(),t===f.Trx.verifyMessageV2(e,this.signature)}getShieldedPrivateKey=()=>(this.requireKeyMaterial(),this.nullifyingKey||=c.ethers.keccak256(this.signature),this.nullifyingKey);getShieldedPublicKey=()=>(this.requireKeyMaterial(),n.poseidonHash(this.getShieldedPrivateKey()));getSpendingKeyPair=()=>{this.requireSignature();let e=a.eddsaInstance(),t=i.babyJubInstance(),r=n.poseidonHash(this.PREFIX_FOR_SPENDING_PAIR,this.getSignature()),o=Buffer.from(c.ethers.getBytes(r)),s=e.prv2pub(o);return{privSpendingKey:r,pubSpendingBJJPoint:[BigInt(t.F.toString(s[0])),BigInt(t.F.toString(s[1]))]}};signEddsa=e=>{this.requireSignature();let t=i.babyJubInstance(),n=a.eddsaInstance(),r=Buffer.from(c.ethers.getBytes(this.getSpendingKeyPair().privSpendingKey)),o=t.F.e(e),s=n.signPoseidon(r,o);return{R8:[BigInt(t.F.toString(s.R8[0])),BigInt(t.F.toString(s.R8[1]))],S:BigInt(s.S)}};getShieldedPrivateKeyFromNonce=e=>{this.requireKeyMaterial();let t=n.poseidonHash(e,this.getShieldedPrivateKey(),this.getShieldedPublicKey());return c.ethers.keccak256(c.ethers.toUtf8Bytes(`hinkal-offchain-shielded-key:${t}`))};getClaimableSignatureFromNonce=e=>{this.requireKeyMaterial();let t=n.poseidonHash(e,this.getShieldedPrivateKey(),this.getShieldedPublicKey());return c.ethers.keccak256(c.ethers.toUtf8Bytes(`hinkal-claimable-utxo-signature:${t}`))};getDerivedEthereumAddress=()=>(this.requireKeyMaterial(),new c.ethers.Wallet(this.getShieldedPrivateKey()).address);getDerivedSolanaPublicKey=()=>(this.requireKeyMaterial(),l.Keypair.fromSeed(c.ethers.getBytes(this.getShieldedPrivateKey())).publicKey.toBase58());getNearIntentsAccountId=()=>{this.requireKeyMaterial();let e=l.Keypair.fromSeed(c.ethers.getBytes(this.getShieldedPrivateKey()));return c.ethers.hexlify(e.publicKey.toBytes()).slice(2)};getNearIntentsKeyPairString=()=>{this.requireKeyMaterial();let e=l.Keypair.fromSeed(c.ethers.getBytes(this.getShieldedPrivateKey()));return`ed25519:${u.default.encode(e.secretKey)}`};getSignerPrivateKeyFromNonce=e=>{this.requireKeyMaterial();let t=n.poseidonHash(e,this.getShieldedPrivateKey(),this.getShieldedPublicKey());return c.ethers.keccak256(c.ethers.toUtf8Bytes(t))};getSignerSolanaPrivateKeyFromNonce=e=>{let t=this.getSignerPrivateKeyFromNonce(e),n=c.ethers.getBytes(t),r=l.Keypair.fromSeed(n);return u.default.encode(r.secretKey)};verifyMessage(e){return this.requireSignature(),c.ethers.verifyMessage(e,this.signature)}verifySolanaMessage(e,t){this.requireSignature();let n=new TextEncoder().encode(e),r=c.ethers.getBytes(this.signature),i=new l.PublicKey(t).toBytes();return d.default.sign.detached.verify(n,r,i)}static getRandomizedStealthPairOld=h.attach((e,n)=>{let r=i.babyJubInstance(),a=e*(BigInt(n)%t.CIRCOM_P)%t.CIRCOM_P,o=r.mulPointEscalar(r.Base8,e),s=r.mulPointEscalar(r.Base8,a);return{H0:[BigInt(r.F.toString(o[0])),BigInt(r.F.toString(o[1]))],H1:[BigInt(r.F.toString(s[0])),BigInt(r.F.toString(s[1]))]}});static getRandomizedStealthPair=m.attach((e,n)=>{let r=i.babyJubInstance(),a=BigInt(n)%t.CIRCOM_P,o=r.mulPointEscalar(r.Base8,e),s=r.mulPointEscalar(o,a);return{H0:[BigInt(r.F.toString(o[0])),BigInt(r.F.toString(o[1]))],H1:[BigInt(r.F.toString(s[0])),BigInt(r.F.toString(s[1]))]}});static getStealthAddressCompressedPoints=(e,t)=>{let{H0:n,H1:r}=this.getRandomizedStealthPairOld(e,t),[i,a]=[n,r].map(e=>BigInt(e[1])+2n**255n*s.getCircomSign(e[0]));return{h0:i,h1:a}};static checkSignature=(e,t,n,r)=>{let{h0:i,h1:a}=this.getStealthAddressCompressedPoints(e,r);return t===i&&n===a};static getStealthAddress=g.attach((e,t)=>{let{H0:r,H1:i}=this.getRandomizedStealthPairOld(e,t);return n.poseidonHash(2n*s.getCircomSign(r[0])+s.getCircomSign(i[0]),r[1],i[1])});static getH1FromH0=(e,n)=>{let r=i.babyJubInstance(),a=BigInt(n)%t.CIRCOM_P,o=[r.F.e(e[0]),r.F.e(e[1])],s=r.mulPointEscalar(o,a);return[BigInt(r.F.toString(s[0])),BigInt(r.F.toString(s[1]))]};static verifyStealthPair=(e,t,n,r=!0)=>{let i=this.getH1FromH0(e,n);return r?i[1]===t[1]:i===t};static getStealthAddressNewStyle=(e,t,r)=>{if(r?.length!==2)throw Error(`Spending public key must be an array of 2 elements`);let i=this.getH1FromH0(e,t);return n.poseidonHash(2n*s.getCircomSign(e[0])+s.getCircomSign(i[0]),e[1],i[1],r[0],r[1],t)};static findCorrectRandomization(e,n){if(!n)throw Error(`No Private Shielded Key Provided`);let r=BigInt(n)%t.CIRCOM_P,i,a,o=0n;do i=e*10n**o%t.CIRCOM_P,a=i*r%t.CIRCOM_P,o+=1n;while(a>=2n**253n||i>=2n**253n);return i}static getH0FromRandomization=e=>{let t=i.babyJubInstance(),n=t.mulPointEscalar(t.Base8,e);return[BigInt(t.F.toString(n[0])),BigInt(t.F.toString(n[1]))]};static findH0(e,t){if(!t)return;let{H0:n}=this.getRandomizedStealthPair(e,t);return n}static getEncryptionKeyPair=e=>{let t=p.default.crypto_box_seed_keypair(c.ethers.getBytes(e));return{privateKey:c.ethers.hexlify(t.privateKey),publicKey:c.ethers.hexlify(t.publicKey)}};getAccessKey=()=>(this.requireKeyMaterial(),n.poseidonHash(this.getShieldedPrivateKey(),this.getShieldedPublicKey()));getBackendToken=()=>(this.requireKeyMaterial(),n.poseidonHash(this.getAccessKey(),this.getShieldedPublicKey()))};exports.UserKeys=_,exports.stealthAddressCacheDevice=g,exports.stealthPairCacheDevice=m,exports.stealthPairOldCacheDevice=h;

package/common/src/data-structures/crypto-keys/keys.d.ts

@@ -0,0 +1,131 @@
+import { JubPoint } from '../../crypto/babyJub';
+import { AttachableMemoryCacheDevice } from '../cacheDevices/AttachableMemoryCacheDevice';
+export declare const stealthPairCacheDevice: AttachableMemoryCacheDevice<{
+    H0: [bigint, bigint];
+    H1: [bigint, bigint];
+}>;
+export declare const stealthPairOldCacheDevice: AttachableMemoryCacheDevice<{
+    H0: [bigint, bigint];
+    H1: [bigint, bigint];
+}>;
+export declare const stealthAddressCacheDevice: AttachableMemoryCacheDevice<string>;
+export interface EncryptionKeyPair {
+    privateKey: string;
+    publicKey: string;
+}
+export declare const EncryptionKeyPairDefaultValue: EncryptionKeyPair;
+export declare class UserKeys {
+    private signature;
+    private nullifyingKey;
+    private readonly PREFIX_FOR_SPENDING_PAIR;
+    private readonly PREFIX_FOR_NULLIFYING_PAIR;
+    constructor(_signature?: string, _nullifyingKey?: string);
+    getSignature(): string;
+    setSignature(_signature: string): void;
+    private requireSignature;
+    private requireKeyMaterial;
+    verifyTronMessage(signingMessage: string, signerAddress: string): boolean;
+    /**
+     * get shielded private key from message signature used to login to the application,
+     * this private key is used to generate encryption keypairs as well as public key
+     * @retuns 0x-prefixed shielded private key
+     */
+    getShieldedPrivateKey: () => string;
+    /**
+     * generate shielded public key from private key
+     * @param privateKey the key used to generate the shielded public key, this should be the signature
+     * that the user provided
+     * @retuns shielded public key in hexstring with 0x prefixed
+     */
+    getShieldedPublicKey: () => string;
+    /**
+     * derive the EdDSA-Poseidon BabyJubJub public key for the spending private key. This must match
+     * the key that `signEddsa` (circomlib's signPoseidon) signs with, i.e. the scalar is derived from
+     * blake512(prv) + clamping, not from privSpendingKey directly.
+     */
+    getSpendingKeyPair: () => {
+        privSpendingKey: string;
+        pubSpendingBJJPoint: JubPoint;
+    };
+    /**
+     * EdDSA-Poseidon sign a message (a circom field element as bigint) using the shielded private key
+     * as the EdDSA secret. Returns { R8, S } with R8 as a JubPoint and S as a bigint scalar.
+     */
+    signEddsa: (message: bigint) => {
+        R8: JubPoint;
+        S: bigint;
+    };
+    /**
+     * Currently used for creating shielded private keys for deposit UTXOs, which are encrypted and sent to enclave for private send
+     * @param nonce Used to deterministically generate new shielded private key
+     * @returns new shielded private key in hexstring with 0x prefixed
+     */
+    getShieldedPrivateKeyFromNonce: (nonce: bigint) => string;
+    getClaimableSignatureFromNonce: (nonce: bigint) => string;
+    /**
+     * deterministically derive an EVM address from the shielded private key
+     */
+    getDerivedEthereumAddress: () => string;
+    /**
+     * deterministically derive a Solana public key from the shielded private key
+     */
+    getDerivedSolanaPublicKey: () => string;
+    /**
+     * deterministically derive the user's NEAR Intents account id from the shielded private key.
+     * The account id is the NEAR implicit account (lowercase hex of the ed25519 public key) of the
+     * same keypair returned by getDerivedSolanaPublicKey. Used as a private cross-chain refund
+     * destination so refunds never expose the user's public main wallet.
+     */
+    getNearIntentsAccountId: () => string;
+    /**
+     * deterministically derive the NEAR Intents signing key from the shielded private key,
+     * formatted as a near-api-js KeyPair string ("ed25519:<base58 secret>"). Pairs with
+     * getNearIntentsAccountId() and is used client-side to authorize claiming cross-chain
+     * bridge refunds back out of the user's Intents account.
+     */
+    getNearIntentsKeyPairString: () => string;
+    /**
+     * generate access token, this accessKey is what should be sent to the server for signing
+     * @returns accessKey in hexstring with 0x prefixed
+     */
+    getSignerPrivateKeyFromNonce: (walletNonce: bigint) => string;
+    getSignerSolanaPrivateKeyFromNonce: (walletNonce: bigint) => string;
+    verifyMessage(signingMessage: string): string;
+    verifySolanaMessage(signingMessage: string, signerPublicKey: string): boolean;
+    static getRandomizedStealthPairOld: (s: bigint, privateKey: string) => {
+        H0: [bigint, bigint];
+        H1: [bigint, bigint];
+    };
+    static getRandomizedStealthPair: (s: bigint, privateKey: string) => {
+        H0: [bigint, bigint];
+        H1: [bigint, bigint];
+    };
+    static getStealthAddressCompressedPoints: (s: bigint, privateKey: string) => {
+        h0: bigint;
+        h1: bigint;
+    };
+    static checkSignature: (s: bigint, stealthAddressH0: bigint, stealthAddressH1: bigint, privateKey: string) => boolean;
+    static getStealthAddress: (s: bigint, privateKey: string) => string;
+    static getH1FromH0: (H0: JubPoint, privateKey: string) => JubPoint;
+    static verifyStealthPair: (H0: JubPoint, H1: JubPoint, privateKey: string, onlyYCheck?: boolean) => boolean;
+    static getStealthAddressNewStyle: (H0: JubPoint, nullifyingPrivateKey: string, spendingPublicKey?: bigint[]) => string;
+    static findCorrectRandomization(initialRandomization: bigint, privateKey?: string): bigint;
+    static getH0FromRandomization: (randomization: bigint) => JubPoint;
+    static findH0(randomization: bigint, privateKey: string | undefined): JubPoint | undefined;
+    /**
+     * generate private and public keypair
+     * @param seed seed to use to deterministically generate key, must be in DataHexString format
+     * and must correspond to 32 bytes
+     */
+    static getEncryptionKeyPair: (privateKey: string) => EncryptionKeyPair;
+    /**
+     * generate access token, this accessKey is what should be sent to the server for signing
+     * @returns accessKey in hexstring with 0x prefixed
+     */
+    getAccessKey: () => string;
+    /**
+     * generate backend token, which is used for access control on backend
+     * @returns accessKey in hexstring with 0x prefixed
+     */
+    getBackendToken: () => string;
+}

package/common/src/data-structures/crypto-keys/keys.mjs

@@ -0,0 +1,165 @@
+import { __toESM as e } from "../../../../_virtual/_rolldown/runtime.mjs";
+import { CIRCOM_P as t } from "../../constants/protocol.constants.mjs";
+import { poseidonHash as n } from "../../crypto/poseidon.mjs";
+import { require_libsodium_wrappers as r } from "../../../../shims/libsodium-wrappers.mjs";
+import { babyJubInstance as i } from "../../crypto/babyJub.mjs";
+import { eddsaInstance as a } from "../../crypto/eddsa.mjs";
+import { AttachableMemoryCacheDevice as o } from "../cacheDevices/AttachableMemoryCacheDevice.mjs";
+import { getCircomSign as s } from "./keyUtils.mjs";
+import { ethers as c } from "ethers";
+import { Keypair as l, PublicKey as u } from "@solana/web3.js";
+import d from "bs58";
+import f from "tweetnacl";
+import { Trx as p } from "tronweb";
+//#region common/src/data-structures/crypto-keys/keys.ts
+var m = /* @__PURE__ */ e(r()), h = new o(), g = new o(), _ = new o(), v = class {
+	signature;
+	nullifyingKey;
+	PREFIX_FOR_SPENDING_PAIR = "1";
+	PREFIX_FOR_NULLIFYING_PAIR = "2";
+	constructor(e, t) {
+		this.signature = e, this.nullifyingKey = t;
+	}
+	getSignature() {
+		return this.requireSignature(), this.signature;
+	}
+	setSignature(e) {
+		this.signature = e;
+	}
+	requireSignature() {
+		if (!this.signature) throw Error("No signature provided");
+	}
+	requireKeyMaterial() {
+		if (!this.signature && !this.nullifyingKey) throw Error("No signature or private key provided");
+	}
+	verifyTronMessage(e, t) {
+		return this.requireSignature(), t === p.verifyMessageV2(e, this.signature);
+	}
+	getShieldedPrivateKey = () => (this.requireKeyMaterial(), this.nullifyingKey ||= c.keccak256(this.signature), this.nullifyingKey);
+	getShieldedPublicKey = () => (this.requireKeyMaterial(), n(this.getShieldedPrivateKey()));
+	getSpendingKeyPair = () => {
+		this.requireSignature();
+		let e = a(), t = i(), r = n(this.PREFIX_FOR_SPENDING_PAIR, this.getSignature()), o = Buffer.from(c.getBytes(r)), s = e.prv2pub(o);
+		return {
+			privSpendingKey: r,
+			pubSpendingBJJPoint: [BigInt(t.F.toString(s[0])), BigInt(t.F.toString(s[1]))]
+		};
+	};
+	signEddsa = (e) => {
+		this.requireSignature();
+		let t = i(), n = a(), r = Buffer.from(c.getBytes(this.getSpendingKeyPair().privSpendingKey)), o = t.F.e(e), s = n.signPoseidon(r, o);
+		return {
+			R8: [BigInt(t.F.toString(s.R8[0])), BigInt(t.F.toString(s.R8[1]))],
+			S: BigInt(s.S)
+		};
+	};
+	getShieldedPrivateKeyFromNonce = (e) => {
+		this.requireKeyMaterial();
+		let t = n(e, this.getShieldedPrivateKey(), this.getShieldedPublicKey());
+		return c.keccak256(c.toUtf8Bytes(`hinkal-offchain-shielded-key:${t}`));
+	};
+	getClaimableSignatureFromNonce = (e) => {
+		this.requireKeyMaterial();
+		let t = n(e, this.getShieldedPrivateKey(), this.getShieldedPublicKey());
+		return c.keccak256(c.toUtf8Bytes(`hinkal-claimable-utxo-signature:${t}`));
+	};
+	getDerivedEthereumAddress = () => (this.requireKeyMaterial(), new c.Wallet(this.getShieldedPrivateKey()).address);
+	getDerivedSolanaPublicKey = () => (this.requireKeyMaterial(), l.fromSeed(c.getBytes(this.getShieldedPrivateKey())).publicKey.toBase58());
+	getNearIntentsAccountId = () => {
+		this.requireKeyMaterial();
+		let e = l.fromSeed(c.getBytes(this.getShieldedPrivateKey()));
+		return c.hexlify(e.publicKey.toBytes()).slice(2);
+	};
+	getNearIntentsKeyPairString = () => {
+		this.requireKeyMaterial();
+		let e = l.fromSeed(c.getBytes(this.getShieldedPrivateKey()));
+		return `ed25519:${d.encode(e.secretKey)}`;
+	};
+	getSignerPrivateKeyFromNonce = (e) => {
+		this.requireKeyMaterial();
+		let t = n(e, this.getShieldedPrivateKey(), this.getShieldedPublicKey());
+		return c.keccak256(c.toUtf8Bytes(t));
+	};
+	getSignerSolanaPrivateKeyFromNonce = (e) => {
+		let t = this.getSignerPrivateKeyFromNonce(e), n = c.getBytes(t), r = l.fromSeed(n);
+		return d.encode(r.secretKey);
+	};
+	verifyMessage(e) {
+		return this.requireSignature(), c.verifyMessage(e, this.signature);
+	}
+	verifySolanaMessage(e, t) {
+		this.requireSignature();
+		let n = new TextEncoder().encode(e), r = c.getBytes(this.signature), i = new u(t).toBytes();
+		return f.sign.detached.verify(n, r, i);
+	}
+	static getRandomizedStealthPairOld = g.attach((e, n) => {
+		let r = i(), a = e * (BigInt(n) % t) % t, o = r.mulPointEscalar(r.Base8, e), s = r.mulPointEscalar(r.Base8, a);
+		return {
+			H0: [BigInt(r.F.toString(o[0])), BigInt(r.F.toString(o[1]))],
+			H1: [BigInt(r.F.toString(s[0])), BigInt(r.F.toString(s[1]))]
+		};
+	});
+	static getRandomizedStealthPair = h.attach((e, n) => {
+		let r = i(), a = BigInt(n) % t, o = r.mulPointEscalar(r.Base8, e), s = r.mulPointEscalar(o, a);
+		return {
+			H0: [BigInt(r.F.toString(o[0])), BigInt(r.F.toString(o[1]))],
+			H1: [BigInt(r.F.toString(s[0])), BigInt(r.F.toString(s[1]))]
+		};
+	});
+	static getStealthAddressCompressedPoints = (e, t) => {
+		let { H0: n, H1: r } = this.getRandomizedStealthPairOld(e, t), [i, a] = [n, r].map((e) => BigInt(e[1]) + 2n ** 255n * s(e[0]));
+		return {
+			h0: i,
+			h1: a
+		};
+	};
+	static checkSignature = (e, t, n, r) => {
+		let { h0: i, h1: a } = this.getStealthAddressCompressedPoints(e, r);
+		return t === i && n === a;
+	};
+	static getStealthAddress = _.attach((e, t) => {
+		let { H0: r, H1: i } = this.getRandomizedStealthPairOld(e, t);
+		return n(2n * s(r[0]) + s(i[0]), r[1], i[1]);
+	});
+	static getH1FromH0 = (e, n) => {
+		let r = i(), a = BigInt(n) % t, o = [r.F.e(e[0]), r.F.e(e[1])], s = r.mulPointEscalar(o, a);
+		return [BigInt(r.F.toString(s[0])), BigInt(r.F.toString(s[1]))];
+	};
+	static verifyStealthPair = (e, t, n, r = !0) => {
+		let i = this.getH1FromH0(e, n);
+		return r ? i[1] === t[1] : i === t;
+	};
+	static getStealthAddressNewStyle = (e, t, r) => {
+		if (r?.length !== 2) throw Error("Spending public key must be an array of 2 elements");
+		let i = this.getH1FromH0(e, t);
+		return n(2n * s(e[0]) + s(i[0]), e[1], i[1], r[0], r[1], t);
+	};
+	static findCorrectRandomization(e, n) {
+		if (!n) throw Error("No Private Shielded Key Provided");
+		let r = BigInt(n) % t, i, a, o = 0n;
+		do
+			i = e * 10n ** o % t, a = i * r % t, o += 1n;
+		while (a >= 2n ** 253n || i >= 2n ** 253n);
+		return i;
+	}
+	static getH0FromRandomization = (e) => {
+		let t = i(), n = t.mulPointEscalar(t.Base8, e);
+		return [BigInt(t.F.toString(n[0])), BigInt(t.F.toString(n[1]))];
+	};
+	static findH0(e, t) {
+		if (!t) return;
+		let { H0: n } = this.getRandomizedStealthPair(e, t);
+		return n;
+	}
+	static getEncryptionKeyPair = (e) => {
+		let t = m.default.crypto_box_seed_keypair(c.getBytes(e));
+		return {
+			privateKey: c.hexlify(t.privateKey),
+			publicKey: c.hexlify(t.publicKey)
+		};
+	};
+	getAccessKey = () => (this.requireKeyMaterial(), n(this.getShieldedPrivateKey(), this.getShieldedPublicKey()));
+	getBackendToken = () => (this.requireKeyMaterial(), n(this.getAccessKey(), this.getShieldedPublicKey()));
+};
+//#endregion
+export { v as UserKeys, _ as stealthAddressCacheDevice, h as stealthPairCacheDevice, g as stealthPairOldCacheDevice };

package/common/src/data-structures/custom-token-registry/CustomTokenRegistry.d.ts

@@ -0,0 +1,12 @@
+import { ERC20Token } from '../../types';
+declare class CustomTokenRegistry {
+    tokenRegistry: ERC20Token[];
+    constructor();
+    setTokensFromCache(newTokenRegistries: ERC20Token[]): void;
+    getCustomTokens(chainId: number): ERC20Token[];
+    tokenExists(registry: ERC20Token[], tokenToCheck: ERC20Token): ERC20Token | undefined;
+    addCustomToken(token: ERC20Token): void;
+    removeCustomToken(tokenToRemove: ERC20Token): void;
+}
+export declare const customTokenRegistry: CustomTokenRegistry;
+export {};

package/common/src/data-structures/event-service/evm/AbstractCommitmentsSnapshotService.cjs

@@ -0,0 +1 @@
+const e=require(`../../../functions/utils/amounts.utils.cjs`),t=require(`../../../crypto/poseidon.cjs`);require(`../../../crypto/index.cjs`);const n=require(`../../merkle-tree/MerkleTree.cjs`);require(`../../merkle-tree/index.cjs`);const r=require(`./AbstractSnapshotService.cjs`),i=require(`../../../functions/utils/merkleTree.utils.cjs`);var a=class extends r.AbstractSnapshotService{constructor(e){super(e,`NewCommitment`)}_merkleTree;_encryptedOutputs;_encryptedOutputsByCommitment=new Map;get merkleTree(){return this._merkleTree}get encryptedOutputs(){return this._encryptedOutputs}serializeSnapshot(e){return{merkleTree:e.payload.merkleTree.toJSON(),latestBlockNumber:e.latestBlockNumber,encryptedOutputs:e.payload.encryptedOutputs.map(e=>({value:e.value,isPositive:String(e.isPositive),isBlocked:e.isBlocked??!1})),encryptedOutputsByCommitment:Array.from(e.payload.encryptedOutputsByCommitment.entries()).map(([e,t])=>({commitment:e.toString(),encryptedOutput:t}))}}deserializeSnapshot(r){let a;a=r.latestBlockNumber&&r.merkleTree?i.contructMerkleTreeFromSerialized(r.merkleTree):n.MerkleTree.create(t.poseidonFunction,0n);let o=r.encryptedOutputs?.map(e=>({value:e.value,isPositive:JSON.parse(e.isPositive),isBlocked:e.isBlocked??!1})),s=new Map;return r.encryptedOutputsByCommitment?.forEach(({commitment:t,encryptedOutput:n})=>{s.set(e.toBigInt(t),n)}),{latestBlockNumber:r.latestBlockNumber??0,payload:{merkleTree:a,encryptedOutputs:o||[],encryptedOutputsByCommitment:s}}}getSnapshotPayload(){return{merkleTree:this._merkleTree,encryptedOutputs:this._encryptedOutputs,encryptedOutputsByCommitment:this._encryptedOutputsByCommitment}}populateSnapshot({payload:{merkleTree:e,encryptedOutputs:t,encryptedOutputsByCommitment:n}}){this._merkleTree=e,this._encryptedOutputs=t,this._encryptedOutputsByCommitment=n}mapEvent(t){let n=t.getArg(`commitment`),r=t.getArg(`index`),i=t.getArg(`encryptedOutput`);return{commitment:e.toBigInt(n),index:e.toBigInt(r),encryptedOutput:i}}acceptEvent(e,t,n,r){let i=e.index>=0n?e.index:-1n*e.index,a=this._merkleTree.getValue(i);if(a===e.commitment)return!1;this._merkleTree.insert(e.commitment,i);let o=a===void 0?void 0:this._encryptedOutputsByCommitment.get(a);if(a!==void 0&&o!==void 0){let e=this.encryptedOutputs.findIndex(e=>e.value===o);e!==-1&&this.encryptedOutputs.splice(e,1),this._encryptedOutputsByCommitment.delete(a)}if(this._encryptedOutputsByCommitment.set(e.commitment,e.encryptedOutput),this.encryptedOutputs.map(e=>e.value).includes(e.encryptedOutput))return!0;let s={value:e.encryptedOutput,isPositive:e.index>=0n,isBlocked:r??!1};return this._encryptedOutputs.push(s),!0}};exports.AbstractCommitmentsSnapshotService=a;

package/common/src/data-structures/event-service/evm/AbstractCommitmentsSnapshotService.d.ts

@@ -0,0 +1,34 @@
+import { MerkleTree, MerkleTreeJson } from '../../merkle-tree';
+import { CommitmentEvent, EncryptedOutputWithCommitment, EncryptedOutputWithSign } from '../../../types';
+import { AbstractSnapshotService, Snapshot } from './AbstractSnapshotService';
+import { BlockchainEventEmitter } from './BlockchainEventEmitter';
+import { BlockchainEvent } from '../../BlockchainEvent/BlockchainEvent';
+export type CommitmentsSnapshotPayload = {
+    readonly merkleTree: MerkleTree<bigint>;
+    readonly encryptedOutputs: EncryptedOutputWithSign[];
+    readonly encryptedOutputsByCommitment: Map<bigint, string>;
+};
+export type CommitmentsSerializedSnapshot = {
+    latestBlockNumber?: number;
+    merkleTree?: MerkleTreeJson;
+    encryptedOutputs?: EncryptedOutputWithSign<string>[];
+    encryptedOutputsByCommitment?: EncryptedOutputWithCommitment[];
+};
+export declare abstract class AbstractCommitmentsSnapshotService extends AbstractSnapshotService<CommitmentEvent<bigint>, CommitmentsSnapshotPayload, CommitmentsSerializedSnapshot> {
+    constructor(hinkalEventEmitter: BlockchainEventEmitter);
+    private _merkleTree;
+    private _encryptedOutputs;
+    private _encryptedOutputsByCommitment;
+    get merkleTree(): MerkleTree<bigint>;
+    get encryptedOutputs(): EncryptedOutputWithSign<boolean>[];
+    protected serializeSnapshot(snapshot: Snapshot<CommitmentsSnapshotPayload>): CommitmentsSerializedSnapshot;
+    protected deserializeSnapshot(serializedSnapshot: CommitmentsSerializedSnapshot): Snapshot<CommitmentsSnapshotPayload>;
+    protected getSnapshotPayload(): {
+        merkleTree: MerkleTree<bigint>;
+        encryptedOutputs: EncryptedOutputWithSign<boolean>[];
+        encryptedOutputsByCommitment: Map<bigint, string>;
+    };
+    protected populateSnapshot({ payload: { merkleTree, encryptedOutputs, encryptedOutputsByCommitment }, }: Snapshot<CommitmentsSnapshotPayload>): void;
+    protected mapEvent(event: BlockchainEvent): CommitmentEvent<bigint>;
+    protected acceptEvent(event: CommitmentEvent<bigint>, _blockNumber: number, _txHash?: string, isBlocked?: boolean): boolean;
+}

package/common/src/data-structures/event-service/evm/AbstractCommitmentsSnapshotService.mjs

@@ -0,0 +1,93 @@
+import { toBigInt as e } from "../../../functions/utils/amounts.utils.mjs";
+import { poseidonFunction as t } from "../../../crypto/poseidon.mjs";
+import "../../../crypto/index.mjs";
+import { MerkleTree as n } from "../../merkle-tree/MerkleTree.mjs";
+import "../../merkle-tree/index.mjs";
+import { AbstractSnapshotService as r } from "./AbstractSnapshotService.mjs";
+import { contructMerkleTreeFromSerialized as i } from "../../../functions/utils/merkleTree.utils.mjs";
+//#region common/src/data-structures/event-service/evm/AbstractCommitmentsSnapshotService.ts
+var a = class extends r {
+	constructor(e) {
+		super(e, "NewCommitment");
+	}
+	_merkleTree;
+	_encryptedOutputs;
+	_encryptedOutputsByCommitment = /* @__PURE__ */ new Map();
+	get merkleTree() {
+		return this._merkleTree;
+	}
+	get encryptedOutputs() {
+		return this._encryptedOutputs;
+	}
+	serializeSnapshot(e) {
+		return {
+			merkleTree: e.payload.merkleTree.toJSON(),
+			latestBlockNumber: e.latestBlockNumber,
+			encryptedOutputs: e.payload.encryptedOutputs.map((e) => ({
+				value: e.value,
+				isPositive: String(e.isPositive),
+				isBlocked: e.isBlocked ?? !1
+			})),
+			encryptedOutputsByCommitment: Array.from(e.payload.encryptedOutputsByCommitment.entries()).map(([e, t]) => ({
+				commitment: e.toString(),
+				encryptedOutput: t
+			}))
+		};
+	}
+	deserializeSnapshot(r) {
+		let a;
+		a = r.latestBlockNumber && r.merkleTree ? i(r.merkleTree) : n.create(t, 0n);
+		let o = r.encryptedOutputs?.map((e) => ({
+			value: e.value,
+			isPositive: JSON.parse(e.isPositive),
+			isBlocked: e.isBlocked ?? !1
+		})), s = /* @__PURE__ */ new Map();
+		return r.encryptedOutputsByCommitment?.forEach(({ commitment: t, encryptedOutput: n }) => {
+			s.set(e(t), n);
+		}), {
+			latestBlockNumber: r.latestBlockNumber ?? 0,
+			payload: {
+				merkleTree: a,
+				encryptedOutputs: o || [],
+				encryptedOutputsByCommitment: s
+			}
+		};
+	}
+	getSnapshotPayload() {
+		return {
+			merkleTree: this._merkleTree,
+			encryptedOutputs: this._encryptedOutputs,
+			encryptedOutputsByCommitment: this._encryptedOutputsByCommitment
+		};
+	}
+	populateSnapshot({ payload: { merkleTree: e, encryptedOutputs: t, encryptedOutputsByCommitment: n } }) {
+		this._merkleTree = e, this._encryptedOutputs = t, this._encryptedOutputsByCommitment = n;
+	}
+	mapEvent(t) {
+		let n = t.getArg("commitment"), r = t.getArg("index"), i = t.getArg("encryptedOutput");
+		return {
+			commitment: e(n),
+			index: e(r),
+			encryptedOutput: i
+		};
+	}
+	acceptEvent(e, t, n, r) {
+		let i = e.index >= 0n ? e.index : -1n * e.index, a = this._merkleTree.getValue(i);
+		if (a === e.commitment) return !1;
+		this._merkleTree.insert(e.commitment, i);
+		let o = a === void 0 ? void 0 : this._encryptedOutputsByCommitment.get(a);
+		if (a !== void 0 && o !== void 0) {
+			let e = this.encryptedOutputs.findIndex((e) => e.value === o);
+			e !== -1 && this.encryptedOutputs.splice(e, 1), this._encryptedOutputsByCommitment.delete(a);
+		}
+		if (this._encryptedOutputsByCommitment.set(e.commitment, e.encryptedOutput), this.encryptedOutputs.map((e) => e.value).includes(e.encryptedOutput)) return !0;
+		let s = {
+			value: e.encryptedOutput,
+			isPositive: e.index >= 0n,
+			isBlocked: r ?? !1
+		};
+		return this._encryptedOutputs.push(s), !0;
+	}
+};
+//#endregion
+export { a as AbstractCommitmentsSnapshotService };

package/common/src/data-structures/event-service/evm/AbstractEventService.cjs

@@ -0,0 +1 @@
+const e=require(`../../../functions/utils/resolve-sync.utils.cjs`);var t=class{blockchainEventEmitter;eventName;constructor(e,t){this.blockchainEventEmitter=e,this.eventName=t,e.addEventProcessorFunction(this.processEventsPage.bind(this))}get latestBlockNumber(){return this.blockchainEventEmitter.latestBlockNumber}get chainId(){return this.blockchainEventEmitter.chainId}intervalClear(){this.blockchainEventEmitter.intervalClear()}async processEventsPage(t){let n=new Set;t.forEach(({eventName:e,transactionHash:t})=>{e===`BlockedUtxosCreated`&&n.add(t)});let r=[];await e.resolveSync(t.map(e=>async()=>{if(e.eventName!==this.eventName)return;let{blockNumber:t,transactionHash:i}=e,a=this.mapEvent(e),o=n.has(i);await this.acceptEvent(a,t,i,o)&&r.push(a)}));let i=r.length;return await this.afterEventsAccepted(i),r.length}};exports.AbstractEventService=t;

package/common/src/data-structures/event-service/evm/AbstractEventService.d.ts

@@ -0,0 +1,14 @@
+import { BlockchainEvent } from '../../BlockchainEvent/BlockchainEvent';
+import { BlockchainEventEmitter } from './BlockchainEventEmitter';
+export declare abstract class AbstractEventService<EventType> {
+    protected blockchainEventEmitter: BlockchainEventEmitter;
+    protected readonly eventName: string;
+    protected constructor(blockchainEventEmitter: BlockchainEventEmitter, eventName: string);
+    get latestBlockNumber(): number;
+    get chainId(): number;
+    intervalClear(): void;
+    private processEventsPage;
+    protected abstract acceptEvent(event: EventType, blockNumber: number, txHash?: string, isBlocked?: boolean): boolean | Promise<boolean>;
+    protected abstract mapEvent(event: BlockchainEvent): EventType;
+    protected abstract afterEventsAccepted(eventsCount: number): Promise<void>;
+}