@interest-protocol/vortex-sdk 12.0.3 → 12.0.4

package/dist/utils/decrypt.d.ts

@@ -18,7 +18,7 @@ interface GetUnspentUtxosWithApiArgs {
     vortexPool: string | VortexPool;
 }
 interface GetUnspentUtxosWithApiAndCommitmentsArgs {
-    commitments: Pick<Commitment, 'coinType' | 'encryptedOutput'>[];
+    commitments: Pick<Commitment, 'coinType' | 'encryptedOutput' | 'index'>[];
     vortexKeypair: VortexKeypair;
     vortexSdk: Vortex;
     vortexPool: string | VortexPool;
@@ -26,7 +26,7 @@ interface GetUnspentUtxosWithApiAndCommitmentsArgs {
 export declare const getUnspentUtxosWithApi: ({ commitments, vortexKeypair, vortexSdk, vortexPool, }: GetUnspentUtxosWithApiArgs) => Promise<Utxo[]>;
 export declare const getUnspentUtxosWithApiAndCommitments: ({ commitments, vortexKeypair, vortexSdk, vortexPool, }: GetUnspentUtxosWithApiAndCommitmentsArgs) => Promise<{
     unspentUtxos: Utxo[];
-    userCommitments: Pick<Commitment, "coinType" | "encryptedOutput">[];
+    userCommitments: Pick<Commitment, "index" | "coinType" | "encryptedOutput">[];
 }>;
 export {};
 //# sourceMappingURL=decrypt.d.ts.map

package/dist/utils/decrypt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decrypt.d.ts","sourceRoot":"","sources":["../../src/utils/decrypt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAe,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAIxC,UAAU,mBAAmB;IAC3B,gBAAgB,EAAE,eAAe,CAAC;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,UAAU,CAAC;CACjC;AAED,eAAO,MAAM,eAAe,GAAU,6DAKnC,mBAAmB,oBAkCrB,CAAC;AAEF,UAAU,0BAA0B;IAClC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,UAAU,CAAC;CACjC;AAED,UAAU,wCAAwC;IAChD,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,GAAG,iBAAiB,CAAC,EAAE,CAAC;IAChE,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,UAAU,CAAC;CACjC;AAED,eAAO,MAAM,sBAAsB,GAAU,wDAK1C,0BAA0B,oBA2C5B,CAAC;AAEF,eAAO,MAAM,oCAAoC,GAAU,wDAKxD,wCAAwC;;;EAgD1C,CAAC"}
+{"version":3,"file":"decrypt.d.ts","sourceRoot":"","sources":["../../src/utils/decrypt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAe,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAGlD,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAIxC,UAAU,mBAAmB;IAC3B,gBAAgB,EAAE,eAAe,CAAC;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,UAAU,CAAC;CACjC;AAED,eAAO,MAAM,eAAe,GAAU,6DAKnC,mBAAmB,oBAyCrB,CAAC;AAEF,UAAU,0BAA0B;IAClC,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,UAAU,CAAC;CACjC;AAED,UAAU,wCAAwC;IAChD,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,GAAG,iBAAiB,GAAG,OAAO,CAAC,EAAE,CAAC;IAC1E,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,UAAU,CAAC;CACjC;AAED,eAAO,MAAM,sBAAsB,GAAU,wDAK1C,0BAA0B,oBA8C5B,CAAC;AAEF,eAAO,MAAM,oCAAoC,GAAU,wDAKxD,wCAAwC;;;EAoD1C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@interest-protocol/vortex-sdk",
-  "version": "12.0.3",
+  "version": "12.0.4",
   "description": "",
   "main": "index.js",
   "module": "./dist/index.mjs",
@@ -37,8 +37,8 @@
     "rimraf": "^6.1.2",
     "ts-jest": "^29.4.6",
     "tsup": "^8.5.1",
-    "@interest-protocol/typescript-config": "1.0.0",
-    "@interest-protocol/prettier-config": "1.0.0"
+    "@interest-protocol/prettier-config": "1.0.0",
+    "@interest-protocol/typescript-config": "1.0.0"
   },
   "publishConfig": {
     "access": "public",

package/src/__tests__/entities/keypair.spec.ts

@@ -270,6 +270,108 @@ describe(VortexKeypair.name, () => {
     });
   });
 
+  describe('BigInt encryption/decryption', () => {
+    it('should encrypt and decrypt a BigInt value', () => {
+      const keypair = VortexKeypair.generate();
+      const originalValue = 123456n;
+
+      const encrypted = VortexKeypair.encryptBigIntFor(
+        originalValue,
+        keypair.encryptionKey
+      );
+      const decrypted = keypair.decryptBigInt(encrypted);
+
+      expect(decrypted).toBe(originalValue);
+    });
+
+    it('should handle zero', () => {
+      const keypair = VortexKeypair.generate();
+      const originalValue = 0n;
+
+      const encrypted = VortexKeypair.encryptBigIntFor(
+        originalValue,
+        keypair.encryptionKey
+      );
+      const decrypted = keypair.decryptBigInt(encrypted);
+
+      expect(decrypted).toBe(originalValue);
+    });
+
+    it('should handle large BigInt values', () => {
+      const keypair = VortexKeypair.generate();
+      const originalValue = BigInt(
+        '21888242871839275222246405745257275088548364400416034343698204186575808495616'
+      );
+
+      const encrypted = VortexKeypair.encryptBigIntFor(
+        originalValue,
+        keypair.encryptionKey
+      );
+      const decrypted = keypair.decryptBigInt(encrypted);
+
+      expect(decrypted).toBe(originalValue);
+    });
+
+    it('should fail to decrypt with wrong keypair', () => {
+      const keypair1 = VortexKeypair.generate();
+      const keypair2 = VortexKeypair.generate();
+      const originalValue = 123456n;
+
+      const encrypted = VortexKeypair.encryptBigIntFor(
+        originalValue,
+        keypair1.encryptionKey
+      );
+
+      expect(() => keypair2.decryptBigInt(encrypted)).toThrow(
+        'Decryption failed: HMAC verification failed'
+      );
+    });
+
+    it('should produce different ciphertexts for same value (random nonce)', () => {
+      const keypair = VortexKeypair.generate();
+      const value = 999999n;
+
+      const encrypted1 = VortexKeypair.encryptBigIntFor(
+        value,
+        keypair.encryptionKey
+      );
+      const encrypted2 = VortexKeypair.encryptBigIntFor(
+        value,
+        keypair.encryptionKey
+      );
+
+      expect(encrypted1).not.toBe(encrypted2);
+
+      // But both decrypt to the same value
+      expect(keypair.decryptBigInt(encrypted1)).toBe(value);
+      expect(keypair.decryptBigInt(encrypted2)).toBe(value);
+    });
+
+    it('should ALWAYS fail with wrong keypair - 100 iterations', () => {
+      const correctKeypair = VortexKeypair.generate();
+      const value = BigInt('12345678901234567890');
+
+      const encrypted = VortexKeypair.encryptBigIntFor(
+        value,
+        correctKeypair.encryptionKey
+      );
+
+      let failureCount = 0;
+      const iterations = 100;
+
+      for (let i = 0; i < iterations; i++) {
+        const wrongKeypair = VortexKeypair.generate();
+        try {
+          wrongKeypair.decryptBigInt(encrypted);
+        } catch {
+          failureCount++;
+        }
+      }
+
+      expect(failureCount).toBe(iterations);
+    });
+  });
+
   describe('toString/address', () => {
     it('should produce consistent string representation', () => {
       const keypair = VortexKeypair.generate();

package/src/utils/decrypt.ts

@@ -24,23 +24,30 @@ export const getUnspentUtxos = async ({
 }: GetUnspentUtxosArgs) => {
   const commitments = parseNewCommitmentEvent(commitmentEvents);
 
-  const allUtxos = [] as UtxoPayload[];
-
   const vortexObjectId =
     typeof vortexPool === 'string' ? vortexPool : vortexPool.objectId;
 
+  const decryptedWithIndex: { utxo: UtxoPayload; chainIndex: bigint }[] = [];
+
   commitments.forEach((commitment) => {
     try {
       const utxo = vortexKeypair.decryptUtxo(commitment.encryptedOutput);
-      allUtxos.push(utxo);
+      // Use index from chain (commitment.index) instead of decrypted index
+      // to avoid concurrency/latency issues where encrypted index can be stale
+      decryptedWithIndex.push({ utxo, chainIndex: commitment.index });
     } catch {
       // HMAC verification failed - wrong keypair
     }
   });
 
-  const utxos = allUtxos.map(
-    (utxo) =>
-      new Utxo({ ...utxo, keypair: vortexKeypair, vortexPool: vortexObjectId })
+  const utxos = decryptedWithIndex.map(
+    ({ utxo, chainIndex }) =>
+      new Utxo({
+        ...utxo,
+        index: chainIndex, // Override with on-chain index
+        keypair: vortexKeypair,
+        vortexPool: vortexObjectId,
+      })
   );
 
   const nullifiers = utxos.map((utxo) => utxo.nullifier());
@@ -65,7 +72,7 @@ interface GetUnspentUtxosWithApiArgs {
 }
 
 interface GetUnspentUtxosWithApiAndCommitmentsArgs {
-  commitments: Pick<Commitment, 'coinType' | 'encryptedOutput'>[];
+  commitments: Pick<Commitment, 'coinType' | 'encryptedOutput' | 'index'>[];
   vortexKeypair: VortexKeypair;
   vortexSdk: Vortex;
   vortexPool: string | VortexPool;
@@ -77,7 +84,7 @@ export const getUnspentUtxosWithApi = async ({
   vortexSdk,
   vortexPool,
 }: GetUnspentUtxosWithApiArgs) => {
-  const allUtxos = [] as UtxoPayload[];
+  const decryptedWithIndex: { utxo: UtxoPayload; chainIndex: bigint }[] = [];
 
   const vortexObject = await vortexSdk.resolveVortexPool(vortexPool);
 
@@ -92,16 +99,19 @@ export const getUnspentUtxosWithApi = async ({
         Uint8Array.from(commitment.encryptedOutput)
       );
       const utxo = vortexKeypair.decryptUtxo(encryptedOutputHex);
-      allUtxos.push(utxo);
+      // Use index from chain (commitment.index) instead of decrypted index
+      // to avoid concurrency/latency issues where encrypted index can be stale
+      decryptedWithIndex.push({ utxo, chainIndex: BigInt(commitment.index) });
     } catch {
       // HMAC verification failed - wrong keypair
     }
   });
 
-  const utxos = allUtxos.map(
-    (utxo) =>
+  const utxos = decryptedWithIndex.map(
+    ({ utxo, chainIndex }) =>
       new Utxo({
         ...utxo,
+        index: chainIndex, // Override with on-chain index
         keypair: vortexKeypair,
         vortexPool: vortexObject.objectId,
       })
@@ -127,8 +137,8 @@ export const getUnspentUtxosWithApiAndCommitments = async ({
   vortexSdk,
   vortexPool,
 }: GetUnspentUtxosWithApiAndCommitmentsArgs) => {
-  const allUtxos = [] as UtxoPayload[];
-  const userCommitments = [] as Pick<Commitment, 'coinType' | 'encryptedOutput'>[];
+  const decryptedWithIndex: { utxo: UtxoPayload; chainIndex: bigint }[] = [];
+  const userCommitments = [] as Pick<Commitment, 'coinType' | 'encryptedOutput' | 'index'>[];
 
   const vortexObject = await vortexSdk.resolveVortexPool(vortexPool);
 
@@ -146,17 +156,21 @@ export const getUnspentUtxosWithApiAndCommitments = async ({
       userCommitments.push({
         coinType: commitment.coinType,
         encryptedOutput: commitment.encryptedOutput,
+        index: commitment.index,
       });
-      allUtxos.push(utxo);
+      // Use index from chain (commitment.index) instead of decrypted index
+      // to avoid concurrency/latency issues where encrypted index can be stale
+      decryptedWithIndex.push({ utxo, chainIndex: BigInt(commitment.index) });
     } catch {
       // HMAC verification failed - wrong keypair
     }
   });
 
-  const utxos = allUtxos.map(
-    (utxo) =>
+  const utxos = decryptedWithIndex.map(
+    ({ utxo, chainIndex }) =>
       new Utxo({
         ...utxo,
+        index: chainIndex, // Override with on-chain index
         keypair: vortexKeypair,
         vortexPool: vortexObject.objectId,
       })