@metoncash/sdk-v1 0.1.0

package/README.md

@@ -0,0 +1,76 @@
+# Meton SDK
+
+SDK to build **Groth16 proofs** for the Meton `deposit` / `withdraw` / `transfer`
+circuits, plus the curve/commitment/encrypted-note helpers needed to construct
+inputs and manage wallet state off-chain.
+
+## Install
+
+```bash
+npm install @metoncash/sdk-v1
+# peer runtime dep used for proving:
+npm install snarkjs
+```
+
+## Usage
+
+```ts
+import { MetonSDK, deriveViewKey, randomScalar } from "meton-cash/sdk-v1";
+
+// Point at a build directory laid out as <dir>/<c>/<c>_js/<c>.wasm + <dir>/<c>/<c>_final.zkey
+const sdk = MetonSDK.fromBuildDir("./build");
+
+// …or pass artifacts explicitly (paths or Uint8Array buffers):
+// const sdk = new MetonSDK({
+//   deposit:  { wasm, zkey },
+//   withdraw: { wasm, zkey },
+//   transfer: { wasm, zkey },
+// });
+
+// DEPOSIT — commit a public amount
+const dep = await sdk.deposit({ amount: 1000n, accountId: 7n, seqNo: 1n });
+// → { proof, publicSignals, commitment: [x,y], blinding }   (persist `blinding`)
+
+// WITHDRAW — prove balance ≥ amount
+const w = await sdk.withdraw({
+  amount: 400n, balance: 1000n, oldBlind, accountId: 7n, seqNo: 2n,
+});
+// → { proof, publicSignals, newCommitment, remainder, newBlind }
+
+// TRANSFER — hidden amount, encrypted to the receiver's VIEWING key
+const recv = deriveViewKey(receiverSpendSecret);   // recipient side
+const t = await sdk.transfer({
+  amount: 300n, senderBalance: 1000n, senderOldBlind,
+  receiverViewPk: recv.pkView, accountId: 7n, seqNo: 3n,
+});
+// → { proof, publicSignals, newSenderCommitment, amountCommitment, note,
+//     remainder, senderNewBlind, amountBlind, ephScalar }
+```
+
+`proof` + `publicSignals` are the snarkjs Groth16 outputs. Every result also returns the **secrets you must persist** (blindings,
+note) to keep your local opening of the commitment spendable.
+
+## Receiving / auditing
+
+```ts
+import { viewNote } from "meton-cash/sdk-v1";
+
+// recipient (or a granted auditor) holding sk_view:
+const seen = viewNote(recv.skView, note, amountCommitment[0], amountCommitment[1]);
+// → { amount, amountBlind, valid }   (valid: the note opens the on-chain amount_commit)
+```
+
+## What's exported
+
+- **Prover:** `MetonSDK` (`deposit`, `withdraw`, `transfer`, `fromBuildDir`).
+- **Keys / notes:** `deriveViewKey`, `derivePub`, `encryptNote`, `decryptNote`, `viewNote`.
+- **Curve / commitments:** `commit`, `add`, `mul`, `mod`, `randomScalar`, `Point`, `Gx/Gy/Hx/Hy`, `r`, `d`, `L`.
+- **Hash:** `mimc5perm`. **Constants:** `CONSTANTS`.
+
+## Notes
+
+- **Defaults:** `blinding`, `newBlind`, `senderNewBlind`, `ephScalar` default to fresh
+  randomness; `amountBlind` defaults to `oldBlind − newBlind (mod L)` (the homomorphic
+  relation the contract checks). The **ephemeral scalar must be fresh per transfer** —
+  reuse leaks amounts.
+- Proving is CPU-heavy (transfer ≈ 30k constraints); run it off the UI thread / in a worker.

package/dist/constants.d.ts

@@ -0,0 +1,13 @@
+export declare const CONSTANTS: {
+    readonly FIELD_ORDER: "52435875175126190479447740508185965837690552500527637822603658699938581184513";
+    readonly JUBJUB_A: "52435875175126190479447740508185965837690552500527637822603658699938581184512";
+    readonly JUBJUB_D: "19257038036680949359750312669786877991949435402254120286184196891950884077233";
+    readonly JUBJUB_L: "6554484396890773809930967563523245729705921265872317281365359162392183254199";
+    readonly JUBJUB_L_BITS: 252;
+    readonly GEN_Gx: "16883835295067924718820241258397066391974467372332466726257127763991993272033";
+    readonly GEN_Gy: "42588447725152514407835596888173212178050306123689774451881833705261369545076";
+    readonly GEN_Hx: "14653722800943284758809485580286192618140384108416844868180380591159549741996";
+    readonly GEN_Hy: "22457361691483092920063600365440163482248783119914970769616716996937239949217";
+    readonly MIMC_ROUNDS: 110;
+    readonly MIMC_C: readonly ["0", "21072141750850087383663205409324278169844061365381575277611939071655182312455", "37622882036515677186449363082300624937657621062639280655379771297919884650023", "15274812097476656601136231014142015644668649458816783056809062451554247021020", "8767595931832129140147118748525835374199314854827702346538260492390950457201", "4666328043292326148114258582552468160554388178179366325468263407968972958200", "32559525316041739305460488115858218089905460800305028902197049366621228533371", "40325229684193320545431924344472337434126627729542819419037149349591381066975", "32837126112535126653963378199414514687321665091148426554918645077447949264843", "25421044687323875993473836814276494183067960383591603411014344454297885111633", "47717453806610648745520960930109699696470303124994706835216839555665389322730", "26273160625355459716641178145747978492973118741650702001202299386543591382160", "51460907207940715536869034184790928747327283375411007478344425353940827988545", "20096566792041177016428803963893334487212473370749424653585896608141130797579", "12076038830969381723084035519204527200224283865445802734565783625529930892835", "43890258778541307158755992185589404868205618258791128432763388556403256488855", "30297775381552183772234027371224571299918809188945310102690843661296796809655", "42537817672679666417941047343589240146910212716724844414964302852458230400852", "7527690332948012001751125751348110559012301183562238619168746093580590881361", "20191892666322136807951749167805679040306511226473426101597742424070271809103", "20977549590821093825768184700982586624107298235112227977114198879891743122684", "27890398268344615765107421761578739390835511668219337021773480140254073952782", "25524611405167645437174955531627921539349561981626625092702865154703459942446", "46879565033944728664281252227796265246354633758405172383313206835958010079659", "29205522828954086221363799831503912468991941214893853374450247328999564862801", "18718289953542843490683728915889554109377225123061665821735001583922677053015", "16320180651169456710988600541447803729294211141032696453371327447578320977489", "41171902673930589445837112785377053206493106205839418656965923237609162674764", "7946925350257198829775701615740950146267379536757616212043819192604061264428", "43587172058556699925935837985002885772023354530445989610137665089264259776284", "6469041355578756418094425615737266068772593930438450669712604713741935959182", "20593052106517556803098698564178490768159984069383534632983137308152528377357", "32123614898978859885120496341913470252073538600549827408662421738168314313964", "31508168695690752201822527354303769756615415990417045839472411935372392906211", "9306137552982927830220469663874278004459737415064559687923659428553055147050", "22397225597038491362874618575991101248973382901759815572691355831766617844988", "1178806490892022673833323090308976985596364396566711554750713815758254072690", "41927892285248061432363306955866255305838715628751805028746018006777951603377", "33124782985539413353799984773013910198397627902540972607011609852332985782102", "8264242537959347912165349178037568181867260615047113060972229127549228548365", "30628513715208261973855213255594272164912399943824159064666852998516296199387", "36908760150162183065207198566931506093928926026865456431761710558483243139604", "38405966666827270644729081931103681823557909419620379125173841996270713894525", "48476804552735549433941266089354751638790676556988613986538565158153239239164", "25350178771977046624443438180419724789118651615276799792389214652654255594131", "7134321572191178094579535155557295338852752569276281817179291880310773996379", "44554968635275678940447084180516112940809564137965796587040405539413990634816", "6445862442836628135267244685092848004135769189115032325842639554004961639734", "8303085748935709685422419391867704987907830342668229962821502683082373019919", "9151182633953276628376259900907986711086966332220100784036778204432503911651", "3440877658974229701217515779898385791551793765029800816839378146726230681188", "9131399402386182529267153876830222412275604449939694975394353997182664760962", "29035099552731456390519691974029757503021957713327870969948615305607578130877", "51627100534146822121045598435538747837725002493105620408909127852556949189896", "39335306147391331211842927876952029339548702088679723228841089825203776118570", "23743804129565257267386139474966663581237278890712216590630104321275211212372", "287032936835344599096863063546577768987925419582549568237847424894140467071", "37228936729074779233573714335126141520843047140506021979041605513273035838991", "10309098046018929704151741131983202841869679900765782846924383953058749844821", "45221828053507162707077016391981032487491462903930916761611934183941302317208", "38948866739514671616686537718096956388124650811292354877353174029988293688888", "48932870416327357053546916204214452305460730360130423785696034930235152375139", "16921376837838649018345480077350907211734975869029201951648879778142456936643", "17379396587915935165324112901033406641837424684473773001672990719900168268228", "22876592527433053016044340473864694210094836262754087904683480558957464389035", "21913117512778578678692561447492001661339944596874676506003852226929205970227", "38681481997858898697298306595460439818766750768737856334925237334229489859132", "12025238718346321337090744037083621632450830949716157582041569775023334854094", "31039294197406004726040657094695059147166322590015814910670960581595031988542", "19498556691018005785990511495439695809176328244448954091084338751994675250715", "12843807018578951234069877954029510022541316494402221453774850778562820539037", "15943327644549331765413369573782149260002298189284846926844288935065608710030", "9803947623303216374576640831042570035406680134739084598498568665695989682522", "25741333210784506563755470514365803312623529539722910741093554747224178907168", "44798558478513255601218617071715797254097233317052669792998303897345110209061", "4715457658190842275913699504032331049234413297593889353294005839185180542274", "5810658147356805670312254787219449046883304193212330483208080425390564564068", "36061165646477692255810287754940448907185852426895462324333832220576208332290", "34669877101513817478578140283442517871553990921288039157434172997483881329246", "44951065949768072491385055264862256221991481983018844425917700835730640825877", "23267683346749599263840005271334624278779745307433939275931735649725462300424", "26789411971772149354013982304902937636914102562371517574370328720384182807415", "12096673427569632088402074700270493458661462998061021902156348555471897867931", "46273758524225398472816348123353967333474499677328295599186750176351194789613", "15532830437883878134485498025231323510127608765739530484981986710312225046972", "12348690817411982313891040676912426924358904180842701925104038695880882113204", "47075915545391480708996226682628403780963850012493155355762607172633829777412", "28904327600523304502824964276159846922591882400770038177356843808592521418290", "33663142465530376455407022891062827739033678427293776104705503868743332591997", "9161059607145599762195711292081516181727515715227708040556676925030837703685", "4904765645705232933226495667779443488792761822775881277363753251422411842968", "41599336890579004576517051409400238448212496621451231144538949957805417437112", "2251847377043924878247367391307443412902105898065907402853256639102490095641", "25394854752082723964587362578348727903795781589199087317305361689633750563471", "28784862225153357012161560797779066623166084910404928717145702053861513405269", "50139192946965239604786292644254651010489172995792159838065418700559357162075", "5430896141745505833372661383693947564449992570213083751165245573866706485359", "10028456652100503452315420116708682186940093356447395508204070080884896222269", "17201936194017332515668961485838523458115651063826087206019203062722657888001", "37710995439744348615031191450777582030826783739138996638870205607251527118221", "1409284232735744832092429647844153330266649735273273672334207947696665112375", "5837115092429472174539101355695313141042889507846268627869141583970641609342", "41926464152109552409408565187783234533392898906119526814448992008144737393386", "5227627551549322495316810249612662122620516724964106115518213687188720376589", "4696470924279142087658252792560081637393075998860534126204964030159623056928", "16870065764572024172355103150722558610428047686963550174636535910634732158210", "30634608983506388586852792328702713100553806060980967596791994556869004140861", "49410797512173516450548223976129742679725497892932837598338170674445689707469", "12076099973235753864246427644659675831412326682106139561081021455713042786464", "44386335335795300787517526291724124002557870724134250747000149200359903230213"];
+};

package/dist/constants.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CONSTANTS = void 0;
+// AUTO-GENERATED by scripts/generate_constants.ts - DO NOT EDIT (mirror of test/helpers/constants.json)
+exports.CONSTANTS = {
+    "FIELD_ORDER": "52435875175126190479447740508185965837690552500527637822603658699938581184513",
+    "JUBJUB_A": "52435875175126190479447740508185965837690552500527637822603658699938581184512",
+    "JUBJUB_D": "19257038036680949359750312669786877991949435402254120286184196891950884077233",
+    "JUBJUB_L": "6554484396890773809930967563523245729705921265872317281365359162392183254199",
+    "JUBJUB_L_BITS": 252,
+    "GEN_Gx": "16883835295067924718820241258397066391974467372332466726257127763991993272033",
+    "GEN_Gy": "42588447725152514407835596888173212178050306123689774451881833705261369545076",
+    "GEN_Hx": "14653722800943284758809485580286192618140384108416844868180380591159549741996",
+    "GEN_Hy": "22457361691483092920063600365440163482248783119914970769616716996937239949217",
+    "MIMC_ROUNDS": 110,
+    "MIMC_C": [
+        "0",
+        "21072141750850087383663205409324278169844061365381575277611939071655182312455",
+        "37622882036515677186449363082300624937657621062639280655379771297919884650023",
+        "15274812097476656601136231014142015644668649458816783056809062451554247021020",
+        "8767595931832129140147118748525835374199314854827702346538260492390950457201",
+        "4666328043292326148114258582552468160554388178179366325468263407968972958200",
+        "32559525316041739305460488115858218089905460800305028902197049366621228533371",
+        "40325229684193320545431924344472337434126627729542819419037149349591381066975",
+        "32837126112535126653963378199414514687321665091148426554918645077447949264843",
+        "25421044687323875993473836814276494183067960383591603411014344454297885111633",
+        "47717453806610648745520960930109699696470303124994706835216839555665389322730",
+        "26273160625355459716641178145747978492973118741650702001202299386543591382160",
+        "51460907207940715536869034184790928747327283375411007478344425353940827988545",
+        "20096566792041177016428803963893334487212473370749424653585896608141130797579",
+        "12076038830969381723084035519204527200224283865445802734565783625529930892835",
+        "43890258778541307158755992185589404868205618258791128432763388556403256488855",
+        "30297775381552183772234027371224571299918809188945310102690843661296796809655",
+        "42537817672679666417941047343589240146910212716724844414964302852458230400852",
+        "7527690332948012001751125751348110559012301183562238619168746093580590881361",
+        "20191892666322136807951749167805679040306511226473426101597742424070271809103",
+        "20977549590821093825768184700982586624107298235112227977114198879891743122684",
+        "27890398268344615765107421761578739390835511668219337021773480140254073952782",
+        "25524611405167645437174955531627921539349561981626625092702865154703459942446",
+        "46879565033944728664281252227796265246354633758405172383313206835958010079659",
+        "29205522828954086221363799831503912468991941214893853374450247328999564862801",
+        "18718289953542843490683728915889554109377225123061665821735001583922677053015",
+        "16320180651169456710988600541447803729294211141032696453371327447578320977489",
+        "41171902673930589445837112785377053206493106205839418656965923237609162674764",
+        "7946925350257198829775701615740950146267379536757616212043819192604061264428",
+        "43587172058556699925935837985002885772023354530445989610137665089264259776284",
+        "6469041355578756418094425615737266068772593930438450669712604713741935959182",
+        "20593052106517556803098698564178490768159984069383534632983137308152528377357",
+        "32123614898978859885120496341913470252073538600549827408662421738168314313964",
+        "31508168695690752201822527354303769756615415990417045839472411935372392906211",
+        "9306137552982927830220469663874278004459737415064559687923659428553055147050",
+        "22397225597038491362874618575991101248973382901759815572691355831766617844988",
+        "1178806490892022673833323090308976985596364396566711554750713815758254072690",
+        "41927892285248061432363306955866255305838715628751805028746018006777951603377",
+        "33124782985539413353799984773013910198397627902540972607011609852332985782102",
+        "8264242537959347912165349178037568181867260615047113060972229127549228548365",
+        "30628513715208261973855213255594272164912399943824159064666852998516296199387",
+        "36908760150162183065207198566931506093928926026865456431761710558483243139604",
+        "38405966666827270644729081931103681823557909419620379125173841996270713894525",
+        "48476804552735549433941266089354751638790676556988613986538565158153239239164",
+        "25350178771977046624443438180419724789118651615276799792389214652654255594131",
+        "7134321572191178094579535155557295338852752569276281817179291880310773996379",
+        "44554968635275678940447084180516112940809564137965796587040405539413990634816",
+        "6445862442836628135267244685092848004135769189115032325842639554004961639734",
+        "8303085748935709685422419391867704987907830342668229962821502683082373019919",
+        "9151182633953276628376259900907986711086966332220100784036778204432503911651",
+        "3440877658974229701217515779898385791551793765029800816839378146726230681188",
+        "9131399402386182529267153876830222412275604449939694975394353997182664760962",
+        "29035099552731456390519691974029757503021957713327870969948615305607578130877",
+        "51627100534146822121045598435538747837725002493105620408909127852556949189896",
+        "39335306147391331211842927876952029339548702088679723228841089825203776118570",
+        "23743804129565257267386139474966663581237278890712216590630104321275211212372",
+        "287032936835344599096863063546577768987925419582549568237847424894140467071",
+        "37228936729074779233573714335126141520843047140506021979041605513273035838991",
+        "10309098046018929704151741131983202841869679900765782846924383953058749844821",
+        "45221828053507162707077016391981032487491462903930916761611934183941302317208",
+        "38948866739514671616686537718096956388124650811292354877353174029988293688888",
+        "48932870416327357053546916204214452305460730360130423785696034930235152375139",
+        "16921376837838649018345480077350907211734975869029201951648879778142456936643",
+        "17379396587915935165324112901033406641837424684473773001672990719900168268228",
+        "22876592527433053016044340473864694210094836262754087904683480558957464389035",
+        "21913117512778578678692561447492001661339944596874676506003852226929205970227",
+        "38681481997858898697298306595460439818766750768737856334925237334229489859132",
+        "12025238718346321337090744037083621632450830949716157582041569775023334854094",
+        "31039294197406004726040657094695059147166322590015814910670960581595031988542",
+        "19498556691018005785990511495439695809176328244448954091084338751994675250715",
+        "12843807018578951234069877954029510022541316494402221453774850778562820539037",
+        "15943327644549331765413369573782149260002298189284846926844288935065608710030",
+        "9803947623303216374576640831042570035406680134739084598498568665695989682522",
+        "25741333210784506563755470514365803312623529539722910741093554747224178907168",
+        "44798558478513255601218617071715797254097233317052669792998303897345110209061",
+        "4715457658190842275913699504032331049234413297593889353294005839185180542274",
+        "5810658147356805670312254787219449046883304193212330483208080425390564564068",
+        "36061165646477692255810287754940448907185852426895462324333832220576208332290",
+        "34669877101513817478578140283442517871553990921288039157434172997483881329246",
+        "44951065949768072491385055264862256221991481983018844425917700835730640825877",
+        "23267683346749599263840005271334624278779745307433939275931735649725462300424",
+        "26789411971772149354013982304902937636914102562371517574370328720384182807415",
+        "12096673427569632088402074700270493458661462998061021902156348555471897867931",
+        "46273758524225398472816348123353967333474499677328295599186750176351194789613",
+        "15532830437883878134485498025231323510127608765739530484981986710312225046972",
+        "12348690817411982313891040676912426924358904180842701925104038695880882113204",
+        "47075915545391480708996226682628403780963850012493155355762607172633829777412",
+        "28904327600523304502824964276159846922591882400770038177356843808592521418290",
+        "33663142465530376455407022891062827739033678427293776104705503868743332591997",
+        "9161059607145599762195711292081516181727515715227708040556676925030837703685",
+        "4904765645705232933226495667779443488792761822775881277363753251422411842968",
+        "41599336890579004576517051409400238448212496621451231144538949957805417437112",
+        "2251847377043924878247367391307443412902105898065907402853256639102490095641",
+        "25394854752082723964587362578348727903795781589199087317305361689633750563471",
+        "28784862225153357012161560797779066623166084910404928717145702053861513405269",
+        "50139192946965239604786292644254651010489172995792159838065418700559357162075",
+        "5430896141745505833372661383693947564449992570213083751165245573866706485359",
+        "10028456652100503452315420116708682186940093356447395508204070080884896222269",
+        "17201936194017332515668961485838523458115651063826087206019203062722657888001",
+        "37710995439744348615031191450777582030826783739138996638870205607251527118221",
+        "1409284232735744832092429647844153330266649735273273672334207947696665112375",
+        "5837115092429472174539101355695313141042889507846268627869141583970641609342",
+        "41926464152109552409408565187783234533392898906119526814448992008144737393386",
+        "5227627551549322495316810249612662122620516724964106115518213687188720376589",
+        "4696470924279142087658252792560081637393075998860534126204964030159623056928",
+        "16870065764572024172355103150722558610428047686963550174636535910634732158210",
+        "30634608983506388586852792328702713100553806060980967596791994556869004140861",
+        "49410797512173516450548223976129742679725497892932837598338170674445689707469",
+        "12076099973235753864246427644659675831412326682106139561081021455713042786464",
+        "44386335335795300787517526291724124002557870724134250747000149200359903230213"
+    ]
+};

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { CONSTANTS } from "./constants";
+export { Point, r, d, L, Gx, Gy, Hx, Hy, mod, modpow, modinv, add, mul, commit, derivePub, randomScalar, } from "./jubjub";
+export { mimc5perm } from "./mimc";
+export { Note, deriveViewKey, encryptNote, decryptNote, viewNote } from "./note";
+export { MetonSDK, CircuitArtifacts, MetonConfig, Proof, DepositArgs, WithdrawArgs, TransferArgs, DepositResult, WithdrawResult, TransferResult, } from "./prover";
+export { WalletKeys, generateWalletKeys, walletKeysFromSpend, viewKeyFromSpend, SealNoteArgs, SealedNote, sealNote, openNote, } from "./utils";
+export { Wallet, Minter, Factory } from "./wrappers";

package/dist/index.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Factory = exports.Minter = exports.Wallet = exports.openNote = exports.sealNote = exports.viewKeyFromSpend = exports.walletKeysFromSpend = exports.generateWalletKeys = exports.MetonSDK = exports.viewNote = exports.decryptNote = exports.encryptNote = exports.deriveViewKey = exports.mimc5perm = exports.randomScalar = exports.derivePub = exports.commit = exports.mul = exports.add = exports.modinv = exports.modpow = exports.mod = exports.Hy = exports.Hx = exports.Gy = exports.Gx = exports.L = exports.d = exports.r = exports.CONSTANTS = void 0;
+var constants_1 = require("./constants");
+Object.defineProperty(exports, "CONSTANTS", { enumerable: true, get: function () { return constants_1.CONSTANTS; } });
+var jubjub_1 = require("./jubjub");
+Object.defineProperty(exports, "r", { enumerable: true, get: function () { return jubjub_1.r; } });
+Object.defineProperty(exports, "d", { enumerable: true, get: function () { return jubjub_1.d; } });
+Object.defineProperty(exports, "L", { enumerable: true, get: function () { return jubjub_1.L; } });
+Object.defineProperty(exports, "Gx", { enumerable: true, get: function () { return jubjub_1.Gx; } });
+Object.defineProperty(exports, "Gy", { enumerable: true, get: function () { return jubjub_1.Gy; } });
+Object.defineProperty(exports, "Hx", { enumerable: true, get: function () { return jubjub_1.Hx; } });
+Object.defineProperty(exports, "Hy", { enumerable: true, get: function () { return jubjub_1.Hy; } });
+Object.defineProperty(exports, "mod", { enumerable: true, get: function () { return jubjub_1.mod; } });
+Object.defineProperty(exports, "modpow", { enumerable: true, get: function () { return jubjub_1.modpow; } });
+Object.defineProperty(exports, "modinv", { enumerable: true, get: function () { return jubjub_1.modinv; } });
+Object.defineProperty(exports, "add", { enumerable: true, get: function () { return jubjub_1.add; } });
+Object.defineProperty(exports, "mul", { enumerable: true, get: function () { return jubjub_1.mul; } });
+Object.defineProperty(exports, "commit", { enumerable: true, get: function () { return jubjub_1.commit; } });
+Object.defineProperty(exports, "derivePub", { enumerable: true, get: function () { return jubjub_1.derivePub; } });
+Object.defineProperty(exports, "randomScalar", { enumerable: true, get: function () { return jubjub_1.randomScalar; } });
+var mimc_1 = require("./mimc");
+Object.defineProperty(exports, "mimc5perm", { enumerable: true, get: function () { return mimc_1.mimc5perm; } });
+var note_1 = require("./note");
+Object.defineProperty(exports, "deriveViewKey", { enumerable: true, get: function () { return note_1.deriveViewKey; } });
+Object.defineProperty(exports, "encryptNote", { enumerable: true, get: function () { return note_1.encryptNote; } });
+Object.defineProperty(exports, "decryptNote", { enumerable: true, get: function () { return note_1.decryptNote; } });
+Object.defineProperty(exports, "viewNote", { enumerable: true, get: function () { return note_1.viewNote; } });
+var prover_1 = require("./prover");
+Object.defineProperty(exports, "MetonSDK", { enumerable: true, get: function () { return prover_1.MetonSDK; } });
+var utils_1 = require("./utils");
+Object.defineProperty(exports, "generateWalletKeys", { enumerable: true, get: function () { return utils_1.generateWalletKeys; } });
+Object.defineProperty(exports, "walletKeysFromSpend", { enumerable: true, get: function () { return utils_1.walletKeysFromSpend; } });
+Object.defineProperty(exports, "viewKeyFromSpend", { enumerable: true, get: function () { return utils_1.viewKeyFromSpend; } });
+Object.defineProperty(exports, "sealNote", { enumerable: true, get: function () { return utils_1.sealNote; } });
+Object.defineProperty(exports, "openNote", { enumerable: true, get: function () { return utils_1.openNote; } });
+// Contract wrappers — deploy/init Wallet, Minter, Factory through the SDK.
+var wrappers_1 = require("./wrappers");
+Object.defineProperty(exports, "Wallet", { enumerable: true, get: function () { return wrappers_1.Wallet; } });
+Object.defineProperty(exports, "Minter", { enumerable: true, get: function () { return wrappers_1.Minter; } });
+Object.defineProperty(exports, "Factory", { enumerable: true, get: function () { return wrappers_1.Factory; } });

package/dist/jubjub.d.ts

@@ -0,0 +1,25 @@
+/**
+ * jubjub.ts — Jubjub twisted-Edwards curve arithmetic (a = -1) over the
+ * BLS12-381 scalar field. Mirrors circuits/lib for off-chain input building.
+ */
+export type Point = [bigint, bigint];
+export declare const r: bigint;
+export declare const d: bigint;
+export declare const L: bigint;
+export declare const Gx: bigint;
+export declare const Gy: bigint;
+export declare const Hx: bigint;
+export declare const Hy: bigint;
+export declare const mod: (a: bigint, m?: bigint) => bigint;
+export declare function modpow(base: bigint, exp: bigint, m?: bigint): bigint;
+export declare const modinv: (a: bigint, m?: bigint) => bigint;
+/** Complete twisted-Edwards addition (a = -1). */
+export declare function add(x1: bigint, y1: bigint, x2: bigint, y2: bigint): Point;
+/** Scalar multiplication: out = scalar · (x, y). */
+export declare function mul(x: bigint, y: bigint, s: bigint): Point;
+/** Pedersen commitment: value·G + blinding·H. */
+export declare function commit(value: bigint, blinding: bigint): Point;
+/** Public key for a secret scalar: pk = sk · G. */
+export declare function derivePub(sk: bigint): Point;
+/** Uniform random scalar in [1, 2^maxBits) reduced into the subgroup. */
+export declare function randomScalar(maxBits?: number): bigint;

package/dist/jubjub.js

@@ -0,0 +1,121 @@
+"use strict";
+/**
+ * jubjub.ts — Jubjub twisted-Edwards curve arithmetic (a = -1) over the
+ * BLS12-381 scalar field. Mirrors circuits/lib for off-chain input building.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.modinv = exports.mod = exports.Hy = exports.Hx = exports.Gy = exports.Gx = exports.L = exports.d = exports.r = void 0;
+exports.modpow = modpow;
+exports.add = add;
+exports.mul = mul;
+exports.commit = commit;
+exports.derivePub = derivePub;
+exports.randomScalar = randomScalar;
+const crypto = __importStar(require("crypto"));
+const constants_1 = require("./constants");
+exports.r = BigInt(constants_1.CONSTANTS.FIELD_ORDER);
+exports.d = BigInt(constants_1.CONSTANTS.JUBJUB_D);
+exports.L = BigInt(constants_1.CONSTANTS.JUBJUB_L);
+exports.Gx = BigInt(constants_1.CONSTANTS.GEN_Gx);
+exports.Gy = BigInt(constants_1.CONSTANTS.GEN_Gy);
+exports.Hx = BigInt(constants_1.CONSTANTS.GEN_Hx);
+exports.Hy = BigInt(constants_1.CONSTANTS.GEN_Hy);
+const mod = (a, m = exports.r) => ((a % m) + m) % m;
+exports.mod = mod;
+function modpow(base, exp, m = exports.r) {
+    base = (0, exports.mod)(base, m);
+    let result = 1n;
+    while (exp > 0n) {
+        if (exp & 1n)
+            result = (0, exports.mod)(result * base, m);
+        base = (0, exports.mod)(base * base, m);
+        exp >>= 1n;
+    }
+    return result;
+}
+const modinv = (a, m = exports.r) => modpow((0, exports.mod)(a, m), m - 2n, m);
+exports.modinv = modinv;
+/** Complete twisted-Edwards addition (a = -1). */
+function add(x1, y1, x2, y2) {
+    const x1x2 = (0, exports.mod)(x1 * x2);
+    const y1y2 = (0, exports.mod)(y1 * y2);
+    const x1y2 = (0, exports.mod)(x1 * y2);
+    const y1x2 = (0, exports.mod)(y1 * x2);
+    const dx = (0, exports.mod)(exports.d * (0, exports.mod)(x1x2 * y1y2));
+    const xnum = (0, exports.mod)(x1y2 + y1x2);
+    const ynum = (0, exports.mod)(y1y2 + x1x2);
+    const xden = (0, exports.mod)(1n + dx);
+    const yden = (0, exports.mod)(1n + exports.r - dx);
+    return [(0, exports.mod)(xnum * (0, exports.modinv)(xden)), (0, exports.mod)(ynum * (0, exports.modinv)(yden))];
+}
+/** Scalar multiplication: out = scalar · (x, y). */
+function mul(x, y, s) {
+    s = (0, exports.mod)(s, exports.L);
+    let rx = 0n;
+    let ry = 1n;
+    let tx = x;
+    let ty = y;
+    while (s > 0n) {
+        if (s & 1n)
+            [rx, ry] = add(rx, ry, tx, ty);
+        [tx, ty] = add(tx, ty, tx, ty);
+        s >>= 1n;
+    }
+    return [rx, ry];
+}
+/** Pedersen commitment: value·G + blinding·H. */
+function commit(value, blinding) {
+    const [ax, ay] = mul(exports.Gx, exports.Gy, value);
+    const [bx, by] = mul(exports.Hx, exports.Hy, blinding);
+    return add(ax, ay, bx, by);
+}
+/** Public key for a secret scalar: pk = sk · G. */
+function derivePub(sk) {
+    return mul(exports.Gx, exports.Gy, sk);
+}
+/** Uniform random scalar in [1, 2^maxBits) reduced into the subgroup. */
+function randomScalar(maxBits = 252) {
+    const bytes = crypto.randomBytes(32);
+    let s = 0n;
+    for (let i = 0; i < 32; i++)
+        s = (s << 8n) | BigInt(bytes[i]);
+    s = (0, exports.mod)(s, exports.L);
+    const mask = (1n << BigInt(maxBits)) - 1n;
+    s = s & mask;
+    if (s === 0n)
+        s = 1n;
+    return s;
+}

package/dist/mimc.d.ts

@@ -0,0 +1,4 @@
+/**
+ * mimc.ts — MiMC-5 permutation over the BLS12-381 scalar field.
+ */
+export declare function mimc5perm(input: bigint, key: bigint): bigint;

package/dist/mimc.js

@@ -0,0 +1,21 @@
+"use strict";
+/**
+ * mimc.ts — MiMC-5 permutation over the BLS12-381 scalar field.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mimc5perm = mimc5perm;
+const constants_1 = require("./constants");
+const jubjub_1 = require("./jubjub");
+const ROUNDS = constants_1.CONSTANTS.MIMC_ROUNDS;
+const RC = constants_1.CONSTANTS.MIMC_C.map((c) => BigInt(c));
+function mimc5perm(input, key) {
+    let st = (0, jubjub_1.mod)(input);
+    key = (0, jubjub_1.mod)(key);
+    for (let i = 0; i < ROUNDS; i++) {
+        const t = (0, jubjub_1.mod)(st + key + RC[i]);
+        const t2 = (0, jubjub_1.mod)(t * t);
+        const t4 = (0, jubjub_1.mod)(t2 * t2);
+        st = (0, jubjub_1.mod)(t4 * t);
+    }
+    return (0, jubjub_1.mod)(st + key);
+}

package/dist/note.d.ts

@@ -0,0 +1,38 @@
+/**
+ * note.ts — ECDH encrypted note + view/spend key derivation.
+ *
+ * Notes are encrypted to the receiver's VIEWING key (`pk_view`). Holding
+ * `sk_view` lets the receiver (or a granted auditor) read amounts but not spend.
+ */
+import { Point } from "./jubjub";
+export interface Note {
+    Rx: bigint;
+    Ry: bigint;
+    enc_amount: bigint;
+    enc_blind: bigint;
+    eph_scalar: bigint;
+    shared_x: bigint;
+}
+/** Derive a viewing keypair one-way from the spend secret. */
+export declare function deriveViewKey(spendSk: bigint): {
+    skView: bigint;
+    pkView: Point;
+};
+/** Encrypt (amount, amount_blind) to a receiver viewing key with ephemeral k. */
+export declare function encryptNote(amount: bigint, amountBlind: bigint, receiverViewPkX: bigint, receiverViewPkY: bigint, ephScalar: bigint): Note;
+/** Decrypt a note with a viewing secret (sk_view). */
+export declare function decryptNote(skView: bigint, Rx: bigint, Ry: bigint, encAmount: bigint, encBlind: bigint): {
+    amount: bigint;
+    amountBlind: bigint;
+};
+/** Decrypt AND verify the note opens the on-chain amount_commit point. */
+export declare function viewNote(skView: bigint, note: {
+    Rx: bigint;
+    Ry: bigint;
+    enc_amount: bigint;
+    enc_blind: bigint;
+}, amountCommitX: bigint, amountCommitY: bigint): {
+    amount: bigint;
+    amountBlind: bigint;
+    valid: boolean;
+};

package/dist/note.js

@@ -0,0 +1,55 @@
+"use strict";
+/**
+ * note.ts — ECDH encrypted note + view/spend key derivation.
+ *
+ * Notes are encrypted to the receiver's VIEWING key (`pk_view`). Holding
+ * `sk_view` lets the receiver (or a granted auditor) read amounts but not spend.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveViewKey = deriveViewKey;
+exports.encryptNote = encryptNote;
+exports.decryptNote = decryptNote;
+exports.viewNote = viewNote;
+const jubjub_1 = require("./jubjub");
+const mimc_1 = require("./mimc");
+const DOMAIN_AMOUNT = 1n; // keystream block for amount
+const DOMAIN_BLIND = 2n; // keystream block for amount_blind
+const DOMAIN_VIEW = 7n; // viewing-key derivation tag
+/** Derive a viewing keypair one-way from the spend secret. */
+function deriveViewKey(spendSk) {
+    let skView = (0, jubjub_1.mod)((0, mimc_1.mimc5perm)(DOMAIN_VIEW, (0, jubjub_1.mod)(spendSk)), jubjub_1.L);
+    if (skView === 0n)
+        skView = 1n;
+    return { skView, pkView: (0, jubjub_1.mul)(jubjub_1.Gx, jubjub_1.Gy, skView) };
+}
+/** Encrypt (amount, amount_blind) to a receiver viewing key with ephemeral k. */
+function encryptNote(amount, amountBlind, receiverViewPkX, receiverViewPkY, ephScalar) {
+    const [Rx, Ry] = (0, jubjub_1.mul)(jubjub_1.Gx, jubjub_1.Gy, ephScalar); // R = k·G
+    const [sx] = (0, jubjub_1.mul)(receiverViewPkX, receiverViewPkY, ephScalar); // shared = k·pk_view
+    const maskAmount = (0, mimc_1.mimc5perm)(DOMAIN_AMOUNT, sx);
+    const maskBlind = (0, mimc_1.mimc5perm)(DOMAIN_BLIND, sx);
+    return {
+        Rx,
+        Ry,
+        enc_amount: (0, jubjub_1.mod)(amount + maskAmount),
+        enc_blind: (0, jubjub_1.mod)(amountBlind + maskBlind),
+        eph_scalar: ephScalar,
+        shared_x: sx,
+    };
+}
+/** Decrypt a note with a viewing secret (sk_view). */
+function decryptNote(skView, Rx, Ry, encAmount, encBlind) {
+    const [sx] = (0, jubjub_1.mul)(Rx, Ry, skView); // shared = sk_view·R
+    const maskAmount = (0, mimc_1.mimc5perm)(DOMAIN_AMOUNT, sx);
+    const maskBlind = (0, mimc_1.mimc5perm)(DOMAIN_BLIND, sx);
+    return {
+        amount: (0, jubjub_1.mod)(encAmount + jubjub_1.r - maskAmount),
+        amountBlind: (0, jubjub_1.mod)(encBlind + jubjub_1.r - maskBlind),
+    };
+}
+/** Decrypt AND verify the note opens the on-chain amount_commit point. */
+function viewNote(skView, note, amountCommitX, amountCommitY) {
+    const { amount, amountBlind } = decryptNote(skView, note.Rx, note.Ry, note.enc_amount, note.enc_blind);
+    const [cx, cy] = (0, jubjub_1.commit)(amount, amountBlind);
+    return { amount, amountBlind, valid: cx === amountCommitX && cy === amountCommitY };
+}

package/dist/prover.d.ts

@@ -0,0 +1,79 @@
+/**
+ * prover.ts — Build Groth16 proofs for the deposit / withdraw / transfer circuits.
+ */
+import { Point } from "./jubjub";
+import { Note } from "./note";
+/** A compiled circuit's artifacts: a wasm witness-calculator and a proving key. */
+export interface CircuitArtifacts {
+    wasm: string | Uint8Array;
+    zkey: string | Uint8Array;
+}
+export interface MetonConfig {
+    deposit: CircuitArtifacts;
+    withdraw: CircuitArtifacts;
+    transfer: CircuitArtifacts;
+}
+export interface Proof {
+    proof: unknown;
+    publicSignals: string[];
+}
+export interface DepositArgs {
+    amount: bigint;
+    accountId: bigint;
+    seqNo: bigint;
+    blinding?: bigint;
+}
+export interface WithdrawArgs {
+    amount: bigint;
+    balance: bigint;
+    oldBlind: bigint;
+    accountId: bigint;
+    seqNo: bigint;
+    newBlind?: bigint;
+}
+export interface TransferArgs {
+    amount: bigint;
+    senderBalance: bigint;
+    senderOldBlind: bigint;
+    receiverViewPk: Point;
+    accountId: bigint;
+    seqNo: bigint;
+    senderNewBlind?: bigint;
+    amountBlind?: bigint;
+    ephScalar?: bigint;
+}
+export interface DepositResult extends Proof {
+    commitment: Point;
+    blinding: bigint;
+}
+export interface WithdrawResult extends Proof {
+    newCommitment: Point;
+    remainder: bigint;
+    newBlind: bigint;
+}
+export interface TransferResult extends Proof {
+    newSenderCommitment: Point;
+    amountCommitment: Point;
+    note: Note;
+    remainder: bigint;
+    senderNewBlind: bigint;
+    amountBlind: bigint;
+    ephScalar: bigint;
+}
+export declare class MetonSDK {
+    private readonly cfg;
+    constructor(cfg: MetonConfig);
+    /**
+     * Convenience: derive artifact paths from a build directory laid out as this
+     * repo's `npm run build` / `npm run setup` produce:
+     *   <dir>/<c>/<c>_js/<c>.wasm  and  <dir>/<c>/<c>_final.zkey
+     */
+    static fromBuildDir(dir: string): MetonSDK;
+    private prove;
+    /** Deposit a public `amount`, producing a commitment to it. */
+    deposit(args: DepositArgs): Promise<DepositResult>;
+    /** Withdraw a public `amount`, proving `balance ≥ amount`. */
+    withdraw(args: WithdrawArgs): Promise<WithdrawResult>;
+    /** Private transfer of a hidden `amount` to a receiver's viewing key. */
+    transfer(args: TransferArgs): Promise<TransferResult>;
+}