@opaquecash/opaque 0.1.0

package/dist/chains.d.ts

@@ -0,0 +1,30 @@
+import type { Address } from "viem";
+import type { TrackedToken } from "@opaquecash/stealth-balance";
+/** Sentinel for native ETH in balance aggregation (not a contract). */
+export declare const NATIVE_TOKEN_ADDRESS: Address;
+/**
+ * Contract bundle for one chain (Opaque deployments).
+ */
+export interface OpaqueChainDeployment {
+    chainId: number;
+    name: string;
+    stealthMetaAddressRegistry: Address;
+    stealthAddressAnnouncer: Address;
+    /** Optional PSR verifier; omitted if not deployed. */
+    opaqueReputationVerifier?: Address;
+    /** Default tokens merged with `OpaqueClientConfig.trackedTokens`. */
+    defaultTrackedTokens: TrackedToken[];
+}
+/**
+ * Chain IDs with bundled Opaque contract addresses.
+ */
+export declare function getSupportedChainIds(): number[];
+/**
+ * Resolve deployment metadata for a chain, or `undefined` if unknown.
+ */
+export declare function getChainDeployment(chainId: number): OpaqueChainDeployment | undefined;
+/**
+ * Require a known deployment or throw.
+ */
+export declare function requireChainDeployment(chainId: number): OpaqueChainDeployment;
+//# sourceMappingURL=chains.d.ts.map

package/dist/chains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chains.d.ts","sourceRoot":"","sources":["../src/chains.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE,uEAAuE;AACvE,eAAO,MAAM,oBAAoB,EACiB,OAAO,CAAC;AAE1D;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,0BAA0B,EAAE,OAAO,CAAC;IACpC,uBAAuB,EAAE,OAAO,CAAC;IACjC,sDAAsD;IACtD,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,qEAAqE;IACrE,oBAAoB,EAAE,YAAY,EAAE,CAAC;CACtC;AAkCD;;GAEG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAE/C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,GACd,qBAAqB,GAAG,SAAS,CAEnC;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,qBAAqB,CAQ7E"}

package/dist/chains.js

@@ -0,0 +1,52 @@
+/** Sentinel for native ETH in balance aggregation (not a contract). */
+export const NATIVE_TOKEN_ADDRESS = "0x0000000000000000000000000000000000000000";
+const sepolia = {
+    chainId: 11155111,
+    name: "Sepolia",
+    stealthMetaAddressRegistry: "0x77425e04163d608B876c7f50E34A378624A12067",
+    stealthAddressAnnouncer: "0x840f72249A8bF6F10b0eB64412E315efBD730865",
+    opaqueReputationVerifier: "0x30B750Ae9851e104F8dbB4B8082b1a07a34885B0",
+    defaultTrackedTokens: [
+        {
+            address: NATIVE_TOKEN_ADDRESS,
+            symbol: "ETH",
+            decimals: 18,
+        },
+        {
+            address: "0x73197e8303904862d543f9706E8422F634D713cb",
+            symbol: "USDC",
+            decimals: 6,
+        },
+        {
+            address: "0x6Ff8Afb2aA9eB5A89Ce86c44DD460bD17C92f644",
+            symbol: "USDT",
+            decimals: 6,
+        },
+    ],
+};
+const DEPLOYMENTS = {
+    11155111: sepolia,
+};
+/**
+ * Chain IDs with bundled Opaque contract addresses.
+ */
+export function getSupportedChainIds() {
+    return Object.keys(DEPLOYMENTS).map(Number);
+}
+/**
+ * Resolve deployment metadata for a chain, or `undefined` if unknown.
+ */
+export function getChainDeployment(chainId) {
+    return DEPLOYMENTS[chainId];
+}
+/**
+ * Require a known deployment or throw.
+ */
+export function requireChainDeployment(chainId) {
+    const d = DEPLOYMENTS[chainId];
+    if (!d) {
+        throw new Error(`Opaque: unsupported chainId ${chainId}. Supported: ${getSupportedChainIds().join(", ")}`);
+    }
+    return d;
+}
+//# sourceMappingURL=chains.js.map

package/dist/chains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chains.js","sourceRoot":"","sources":["../src/chains.ts"],"names":[],"mappings":"AAGA,uEAAuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAC/B,4CAAuD,CAAC;AAgB1D,MAAM,OAAO,GAA0B;IACrC,OAAO,EAAE,QAAQ;IACjB,IAAI,EAAE,SAAS;IACf,0BAA0B,EACxB,4CAAuD;IACzD,uBAAuB,EACrB,4CAAuD;IACzD,wBAAwB,EACtB,4CAAuD;IACzD,oBAAoB,EAAE;QACpB;YACE,OAAO,EAAE,oBAAoB;YAC7B,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,EAAE;SACb;QACD;YACE,OAAO,EAAE,4CAAuD;YAChE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,CAAC;SACZ;QACD;YACE,OAAO,EAAE,4CAAuD;YAChE,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,CAAC;SACZ;KACF;CACF,CAAC;AAEF,MAAM,WAAW,GAA0C;IACzD,QAAQ,EAAE,OAAO;CAClB,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe;IAEf,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CACb,+BAA+B,OAAO,gBAAgB,oBAAoB,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC1F,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,267 @@
+import { type Account, type Address, type Chain, type Hex, type Transport, type WalletClient } from "viem";
+import { buildActionScope, externalNullifierFromScope, type ProofData } from "@opaquecash/psr-core";
+import type { DiscoveredTrait } from "@opaquecash/psr-core";
+import { type VerifyReputationArgs } from "@opaquecash/psr-chain";
+import { type ArtifactPaths, type ProofProgressCallback } from "@opaquecash/psr-prover";
+import { type TrackedToken } from "@opaquecash/stealth-balance";
+import { type OpaqueChainDeployment } from "./chains.js";
+import type { IndexerAnnouncement, OwnedStealthOutput, TokenBalanceSummary } from "./types/indexer.js";
+/**
+ * Configuration for {@link OpaqueClient.create}.
+ */
+export interface OpaqueClientConfig {
+    /** EVM chain id (must be in {@link getSupportedChainIds} unless you override all contracts). */
+    chainId: number;
+    /** HTTP(S) RPC URL for reads (balances, optional registry view). */
+    rpcUrl: string;
+    /**
+     * Wallet signature used as HKDF entropy (`opaque-cash-v1`) for viewing + spending keys.
+     * Never sent on-chain by the SDK.
+     */
+    walletSignature: Hex;
+    /**
+     * The externally owned account that signs / registers (used as registrant context in docs;
+     * you still pass the same address to your wallet when sending txs).
+     */
+    ethereumAddress: Address;
+    /** Dynamic import URL for wasm-pack `cryptography.js`. */
+    wasmModuleSpecifier: string;
+    /**
+     * Extra ERC-20s (and native) to aggregate. Merged with chain defaults; native uses
+     * {@link NATIVE_TOKEN_ADDRESS}.
+     */
+    trackedTokens?: TrackedToken[];
+    /** Override registry / announcer / verifier for custom deployments. */
+    contracts?: Partial<{
+        stealthMetaAddressRegistry: Address;
+        stealthAddressAnnouncer: Address;
+        opaqueReputationVerifier: Address;
+    }>;
+}
+/**
+ * Result of preparing a stealth send (ephemeral material + announce fields).
+ */
+export interface PrepareStealthSendResult {
+    schemeId: bigint;
+    stealthAddress: Address;
+    viewTag: number;
+    /** 33-byte compressed ephemeral public key. */
+    ephemeralPublicKey: Uint8Array;
+    /** 32-byte ephemeral private key — store securely if you need ghost / later announce. */
+    ephemeralPrivateKey: Uint8Array;
+    /** Metadata bytes for `announce` (view tag byte; extend with WASM for PSR). */
+    metadata: Uint8Array;
+}
+/**
+ * Result of {@link OpaqueClient.prepareGhostReceive} — same shape as {@link PrepareStealthSendResult},
+ * keyed to your own meta-address for receive-without-prior-announcement flows.
+ */
+export type PrepareGhostReceiveResult = PrepareStealthSendResult;
+/**
+ * Calldata-ready request for `StealthAddressAnnouncer.announce` (developer submits via wallet).
+ */
+export interface AnnounceTransactionRequest {
+    to: Address;
+    data: Hex;
+    chainId: number;
+    summary: {
+        schemeId: bigint;
+        stealthAddress: Address;
+        ephemeralPublicKey: Hex;
+        metadata: Hex;
+    };
+}
+/**
+ * Calldata-ready request for `StealthMetaAddressRegistry.registerKeys`.
+ */
+export interface RegisterMetaAddressTransactionRequest {
+    to: Address;
+    data: Hex;
+    chainId: number;
+    metaAddressHex: Hex;
+}
+/**
+ * Result of {@link OpaqueClient.resolveRecipientMetaAddress}: registry lookup for a normal EOA.
+ */
+export interface ResolveRecipientMetaResult {
+    /**
+     * Checksummed address you looked up (the would-be recipient).
+     * When `registered` is false, use this as the plain receiver identity — there is no meta-address yet.
+     */
+    recipientAddress: Address;
+    /** True when `stealthMetaAddressOf` returned a 66-byte meta-address for EIP-5564 scheme 1. */
+    registered: boolean;
+    /**
+     * 66-byte stealth meta-address (`0x` + 132 hex) for {@link prepareStealthSend}.
+     * Omitted when `registered` is false.
+     */
+    metaAddressHex?: Hex;
+}
+export declare class OpaqueClient {
+    private readonly config;
+    private readonly deployment;
+    private readonly registry;
+    private readonly announcer;
+    private readonly reputationVerifier?;
+    private readonly tokens;
+    private readonly viewingKey;
+    private readonly spendingKey;
+    private readonly spendPubKey;
+    private readonly metaAddressHex;
+    private readonly publicClient;
+    private readonly wasm;
+    private constructor();
+    /**
+     * Construct a client: loads WASM, derives keys from `walletSignature`, wires RPC + addresses.
+     */
+    static create(config: OpaqueClientConfig): Promise<OpaqueClient>;
+    /** Chain id from configuration. */
+    getChainId(): number;
+    /** Connected Ethereum address (from config). */
+    getEthereumAddress(): Address;
+    /** 66-byte meta-address hex for registry / sharing. */
+    getMetaAddressHex(): Hex;
+    /** Resolved contract addresses for the active chain. */
+    getContracts(): {
+        stealthMetaAddressRegistry: Address;
+        stealthAddressAnnouncer: Address;
+        opaqueReputationVerifier?: Address;
+    };
+    /**
+     * Look up a recipient’s stealth meta-address on `StealthMetaAddressRegistry` using this client’s
+     * `rpcUrl` and configured registry (scheme id {@link EIP5564_SCHEME_SECP256K1}).
+     *
+     * When the account has not registered, `registered` is false and `metaAddressHex` is omitted —
+     * `recipientAddress` is still the checksummed address you passed in so you can show “not on Opaque yet”.
+     *
+     * @param recipientAddress - Normal Ethereum address of the intended recipient.
+     */
+    resolveRecipientMetaAddress(recipientAddress: Address): Promise<ResolveRecipientMetaResult>;
+    /**
+     * Encode `registerKeys` for the user's meta-address (they submit with `ethereumAddress`).
+     */
+    buildRegisterMetaAddressTransaction(): RegisterMetaAddressTransactionRequest;
+    /**
+     * Derive a one-time stealth address for sending to a recipient meta-address.
+     */
+    prepareStealthSend(recipientMetaAddressHex: Hex): PrepareStealthSendResult;
+    /**
+     * Manual “ghost” receive: derive a one-time stealth address for **this** wallet’s meta-address
+     * without any on-chain announcement yet. Cryptographically this is {@link prepareStealthSend}
+     * with {@link getMetaAddressHex}; you must persist `ephemeralPrivateKey` (and optionally the
+     * full prep) securely to sweep funds or to announce later.
+     */
+    prepareGhostReceive(): PrepareGhostReceiveResult;
+    /**
+     * Build `announce` calldata after you only have the stored 32-byte ephemeral secret from
+     * {@link prepareGhostReceive} (or any prior {@link prepareStealthSend} to your meta-address).
+     * Recomputes stealth address and pubkey material deterministically. If you still have the full
+     * {@link PrepareStealthSendResult} object, {@link buildAnnounceTransactionRequest} is enough.
+     */
+    buildAnnounceTransactionRequestForGhost(ephemeralPrivateKey: Uint8Array): AnnounceTransactionRequest;
+    /**
+     * Build calldata for `announce` so the developer can prompt the user to broadcast.
+     */
+    buildAnnounceTransactionRequest(send: PrepareStealthSendResult): AnnounceTransactionRequest;
+    /**
+     * Filter indexer announcements down to outputs owned by this user (WASM scan).
+     */
+    filterOwnedAnnouncements(rows: IndexerAnnouncement[]): Promise<OwnedStealthOutput[]>;
+    /**
+     * Reconstruct the 32-byte secp256k1 private key that controls `output`’s one-time stealth address.
+     * Uses the same WASM path as the on-chain scanner (`reconstruct_signing_key_wasm`).
+     *
+     * You supply gas, nonce, and broadcast: build a viem `PrivateKeyAccount` (or ethers wallet) from
+     * the returned bytes and sign a transfer **from** `output.stealthAddress`. Never log or persist
+     * the result beyond what your threat model allows.
+     */
+    getStealthSignerPrivateKey(output: Pick<OwnedStealthOutput, "ephemeralPublicKey">): Uint8Array;
+    /**
+     * Same as {@link getStealthSignerPrivateKey} when you only have the 32-byte ephemeral **private**
+     * key from {@link prepareGhostReceive} / {@link prepareStealthSend} (e.g. ghost storage) instead
+     * of an indexer row with `ephemeralPublicKey`.
+     */
+    getStealthSignerPrivateKeyFromEphemeralPrivateKey(ephemeralPrivateKey: Uint8Array): Uint8Array;
+    /**
+     * Owned outputs + balances summed per tracked token (uses `rpcUrl` from config).
+     */
+    getBalancesFromAnnouncements(rows: IndexerAnnouncement[]): Promise<TokenBalanceSummary[]>;
+    /**
+     * PSR: map owned attestation markers to {@link DiscoveredTrait} list.
+     */
+    discoverTraits(rows: IndexerAnnouncement[]): Promise<DiscoveredTrait[]>;
+    /**
+     * PSR: same as {@link discoverTraits} — alias for reputation-focused call sites.
+     */
+    getReputationTraitsFromAnnouncements(rows: IndexerAnnouncement[]): Promise<DiscoveredTrait[]>;
+    /**
+     * Encode `announce` metadata for a PSR attestation (view tag byte + `0xA7` + u64 `attestationId`).
+     * Canonical encoding matches WASM/Rust; use with {@link prepareReputationAssignment}.
+     */
+    encodeReputationMetadata(viewTag: number, attestationId: bigint): Uint8Array;
+    /**
+     * Issuer flow: derive one-time stealth material for the recipient and embed `attestationId` in metadata.
+     */
+    prepareReputationAssignment(recipientMetaAddressHex: Hex, attestationId: bigint): PrepareStealthSendResult;
+    /**
+     * Issuer flow: calldata for `StealthAddressAnnouncer.announce` with PSR metadata (no asset transfer).
+     */
+    buildAssignReputationTransaction(recipientMetaAddressHex: Hex, attestationId: bigint): AnnounceTransactionRequest;
+    /**
+     * JSON array string for {@link generateReputationProof} when passing `attestationsJson` (WASM Merkle witness).
+     */
+    announcementsJsonForReputationWitness(rows: IndexerAnnouncement[]): string;
+    /**
+     * One-time stealth signing key for a {@link DiscoveredTrait} (requires `ephemeralPubkey` from the scan).
+     */
+    getStealthSignerPrivateKeyForReputationTrait(trait: DiscoveredTrait): Uint8Array;
+    /**
+     * Groth16 proof bundle for `OpaqueReputationVerifier` (requires `snarkjs`).
+     * When `artifacts` is omitted, wasm/zkey are loaded from the default hosted paths on opaque.cash
+     * (same as the Opaque frontend `/circuits/...` assets).
+     */
+    generateReputationProof(params: {
+        trait: DiscoveredTrait;
+        stealthPrivKeyBytes: Uint8Array;
+        externalNullifier: string;
+        attestationsJson?: string;
+        artifacts?: ArtifactPaths;
+        onProgress?: ProofProgressCallback;
+    }): Promise<ProofData>;
+    /** Latest non-expired Merkle root from `OpaqueReputationVerifier.rootHistory`. */
+    fetchLatestValidReputationRoot(): Promise<Hex>;
+    /** Whether the verifier currently accepts this root (exists and not past expiry). */
+    isReputationRootValid(root: Hex): Promise<boolean>;
+    /** Full root history with per-entry validity (newest index last). */
+    fetchReputationRootHistory(): Promise<Array<{
+        index: number;
+        root: Hex;
+        valid: boolean;
+    }>>;
+    /** On-chain view helper: verify proof without spending nullifier. */
+    verifyReputationProofView(args: VerifyReputationArgs): Promise<boolean>;
+    /** Simulate `verifyReputation` for gas / revert checks. */
+    simulateReputationVerification<TTransport extends Transport, TChain extends Chain, TAccount extends Account | undefined>(wallet: WalletClient<TTransport, TChain, TAccount>, args: VerifyReputationArgs): Promise<void>;
+    /** Broadcast `verifyReputation` (consumes nullifier when successful). */
+    submitReputationVerification<TTransport extends Transport, TChain extends Chain, TAccount extends Account | undefined>(wallet: WalletClient<TTransport, TChain, TAccount>, args: VerifyReputationArgs): Promise<Hex>;
+    private getReputationVerifierAddress;
+    /**
+     * Deterministic scope string for reputation actions (`chainId:module:actionId`).
+     * Same as {@link buildActionScope} in `@opaquecash/psr-core`.
+     */
+    static buildReputationActionScope: typeof buildActionScope;
+    /**
+     * Map a scope string to the circuit `externalNullifier` scalar (keccak, uint256).
+     * Same as {@link externalNullifierFromScope} in `@opaquecash/psr-core`.
+     */
+    static reputationExternalNullifierFromScope: typeof externalNullifierFromScope;
+    /**
+     * Chain IDs that ship with bundled contract addresses in this SDK version.
+     */
+    static supportedChainIds(): number[];
+    /**
+     * Read bundled deployment metadata (contracts, default tokens) for a chain.
+     */
+    static chainDeployment(chainId: number): OpaqueChainDeployment | undefined;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,KAAK,EACV,KAAK,GAAG,EAER,KAAK,SAAS,EACd,KAAK,YAAY,EAMlB,MAAM,MAAM,CAAC;AAcd,OAAO,EAEL,gBAAgB,EAChB,0BAA0B,EAC1B,KAAK,SAAS,EACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAOL,KAAK,oBAAoB,EAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAEL,KAAK,YAAY,EAClB,MAAM,6BAA6B,CAAC;AAUrC,OAAO,EAKL,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAC;AAKrB,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAY5B;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,gGAAgG;IAChG,OAAO,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,eAAe,EAAE,GAAG,CAAC;IACrB;;;OAGG;IACH,eAAe,EAAE,OAAO,CAAC;IACzB,0DAA0D;IAC1D,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;QAClB,0BAA0B,EAAE,OAAO,CAAC;QACpC,uBAAuB,EAAE,OAAO,CAAC;QACjC,wBAAwB,EAAE,OAAO,CAAC;KACnC,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,kBAAkB,EAAE,UAAU,CAAC;IAC/B,yFAAyF;IACzF,mBAAmB,EAAE,UAAU,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,EAAE,UAAU,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,wBAAwB,CAAC;AAEjE;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,OAAO,CAAC;QACxB,kBAAkB,EAAE,GAAG,CAAC;QACxB,QAAQ,EAAE,GAAG,CAAC;KACf,CAAC;CACH;AAED;;GAEG;AACH,MAAM,WAAW,qCAAqC;IACpD,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,GAAG,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B,8FAA8F;IAC9F,UAAU,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,cAAc,CAAC,EAAE,GAAG,CAAC;CACtB;AAUD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwB;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAU;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAM;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IAEzC,OAAO;IAmCP;;OAEG;WACU,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC;IA0BtE,mCAAmC;IACnC,UAAU,IAAI,MAAM;IAIpB,gDAAgD;IAChD,kBAAkB,IAAI,OAAO;IAI7B,uDAAuD;IACvD,iBAAiB,IAAI,GAAG;IAIxB,wDAAwD;IACxD,YAAY,IAAI;QACd,0BAA0B,EAAE,OAAO,CAAC;QACpC,uBAAuB,EAAE,OAAO,CAAC;QACjC,wBAAwB,CAAC,EAAE,OAAO,CAAC;KACpC;IAQD;;;;;;;;OAQG;IACG,2BAA2B,CAC/B,gBAAgB,EAAE,OAAO,GACxB,OAAO,CAAC,0BAA0B,CAAC;IAsBtC;;OAEG;IACH,mCAAmC,IAAI,qCAAqC;IAe5E;;OAEG;IACH,kBAAkB,CAAC,uBAAuB,EAAE,GAAG,GAAG,wBAAwB;IAY1E;;;;;OAKG;IACH,mBAAmB,IAAI,yBAAyB;IAIhD;;;;;OAKG;IACH,uCAAuC,CACrC,mBAAmB,EAAE,UAAU,GAC9B,0BAA0B;IAe7B;;OAEG;IACH,+BAA+B,CAC7B,IAAI,EAAE,wBAAwB,GAC7B,0BAA0B;IAqB7B;;OAEG;IACG,wBAAwB,CAC5B,IAAI,EAAE,mBAAmB,EAAE,GAC1B,OAAO,CAAC,kBAAkB,EAAE,CAAC;IA+BhC;;;;;;;OAOG;IACH,0BAA0B,CACxB,MAAM,EAAE,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,GACrD,UAAU;IAeb;;;;OAIG;IACH,iDAAiD,CAC/C,mBAAmB,EAAE,UAAU,GAC9B,UAAU;IAWb;;OAEG;IACG,4BAA4B,CAChC,IAAI,EAAE,mBAAmB,EAAE,GAC1B,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAmCjC;;OAEG;IACG,cAAc,CAClB,IAAI,EAAE,mBAAmB,EAAE,GAC1B,OAAO,CAAC,eAAe,EAAE,CAAC;IAa7B;;OAEG;IACG,oCAAoC,CACxC,IAAI,EAAE,mBAAmB,EAAE,GAC1B,OAAO,CAAC,eAAe,EAAE,CAAC;IAI7B;;;OAGG;IACH,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,UAAU;IAS5E;;OAEG;IACH,2BAA2B,CACzB,uBAAuB,EAAE,GAAG,EAC5B,aAAa,EAAE,MAAM,GACpB,wBAAwB;IAM3B;;OAEG;IACH,gCAAgC,CAC9B,uBAAuB,EAAE,GAAG,EAC5B,aAAa,EAAE,MAAM,GACpB,0BAA0B;IAM7B;;OAEG;IACH,qCAAqC,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,MAAM;IAI1E;;OAEG;IACH,4CAA4C,CAAC,KAAK,EAAE,eAAe,GAAG,UAAU;IAYhF;;;;OAIG;IACG,uBAAuB,CAAC,MAAM,EAAE;QACpC,KAAK,EAAE,eAAe,CAAC;QACvB,mBAAmB,EAAE,UAAU,CAAC;QAChC,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,SAAS,CAAC,EAAE,aAAa,CAAC;QAC1B,UAAU,CAAC,EAAE,qBAAqB,CAAC;KACpC,GAAG,OAAO,CAAC,SAAS,CAAC;IAatB,kFAAkF;IAC5E,8BAA8B,IAAI,OAAO,CAAC,GAAG,CAAC;IAOpD,qFAAqF;IAC/E,qBAAqB,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;IAQxD,qEAAqE;IAC/D,0BAA0B,IAAI,OAAO,CACzC,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,GAAG,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CACpD;IAOD,qEAAqE;IAC/D,yBAAyB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ7E,2DAA2D;IACrD,8BAA8B,CAClC,UAAU,SAAS,SAAS,EAC5B,MAAM,SAAS,KAAK,EACpB,QAAQ,SAAS,OAAO,GAAG,SAAS,EAEpC,MAAM,EAAE,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAClD,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,IAAI,CAAC;IAShB,yEAAyE;IACnE,4BAA4B,CAChC,UAAU,SAAS,SAAS,EAC5B,MAAM,SAAS,KAAK,EACpB,QAAQ,SAAS,OAAO,GAAG,SAAS,EAEpC,MAAM,EAAE,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,EAClD,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,GAAG,CAAC;IASf,OAAO,CAAC,4BAA4B;IASpC;;;OAGG;IACH,MAAM,CAAC,0BAA0B,0BAAoB;IAErD;;;OAGG;IACH,MAAM,CAAC,oCAAoC,oCAA8B;IAEzE;;OAEG;IACH,MAAM,CAAC,iBAAiB,IAAI,MAAM,EAAE;IAIpC;;OAEG;IACH,MAAM,CAAC,eAAe,CACpB,OAAO,EAAE,MAAM,GACd,qBAAqB,GAAG,SAAS;CAGrC"}

package/dist/client.js

@@ -0,0 +1,438 @@
+import { createPublicClient, http, encodeFunctionData, getAddress, hexToBytes, } from "viem";
+import { EIP5564_SCHEME_SECP256K1 } from "@opaquecash/stealth-core";
+import { stealthMetaAddressRegistryAbi, stealthAddressAnnouncerAbi, getStealthMetaAddress as readRegistryMetaAddress, } from "@opaquecash/stealth-chain";
+import { encodeAttestationMetadata, initStealthWasm, reconstructSigningKey, scanAttestationsJson, } from "@opaquecash/stealth-wasm";
+import { attestationsToDiscoveredTraits, buildActionScope, externalNullifierFromScope, } from "@opaquecash/psr-core";
+import { fetchLatestValidRoot, fetchRootHistory, isRootValid, simulateVerifyReputation, submitVerifyReputation, verifyReputationView, } from "@opaquecash/psr-chain";
+import { ensureBufferPolyfill, generateReputationProof as runGenerateReputationProof, } from "@opaquecash/psr-prover";
+import { aggregateBalancesByToken, } from "@opaquecash/stealth-balance";
+import { deriveKeysFromSignature, keysToStealthMetaAddress, stealthMetaAddressToHex, computeStealthAddressAndViewTag, recomputeStealthSendFromEphemeralPrivateKey, ephemeralPrivateKeyToCompressedPublicKey, } from "./crypto/dksap.js";
+import { getChainDeployment as getChainDeploymentInfo, getSupportedChainIds, requireChainDeployment, NATIVE_TOKEN_ADDRESS, } from "./chains.js";
+import { indexerAnnouncementsToScannerJson, } from "./indexer/normalize.js";
+const ERC20_BALANCE_ABI = [
+    {
+        type: "function",
+        name: "balanceOf",
+        stateMutability: "view",
+        inputs: [{ name: "account", type: "address" }],
+        outputs: [{ type: "uint256" }],
+    },
+];
+export class OpaqueClient {
+    config;
+    deployment;
+    registry;
+    announcer;
+    reputationVerifier;
+    tokens;
+    viewingKey;
+    spendingKey;
+    spendPubKey;
+    metaAddressHex;
+    publicClient;
+    wasm;
+    constructor(config, deployment, wasm, keys) {
+        this.config = config;
+        this.deployment = deployment;
+        this.registry =
+            config.contracts?.stealthMetaAddressRegistry ??
+                deployment.stealthMetaAddressRegistry;
+        this.announcer =
+            config.contracts?.stealthAddressAnnouncer ??
+                deployment.stealthAddressAnnouncer;
+        this.reputationVerifier =
+            config.contracts?.opaqueReputationVerifier ??
+                deployment.opaqueReputationVerifier;
+        const baseTokens = deployment.defaultTrackedTokens;
+        const extra = config.trackedTokens ?? [];
+        this.tokens = mergeTrackedTokens(baseTokens, extra);
+        this.viewingKey = keys.viewingKey;
+        this.spendingKey = keys.spendingKey;
+        this.spendPubKey = keys.spendPubKey;
+        this.metaAddressHex = keys.metaAddressHex;
+        this.publicClient = createPublicClient({
+            transport: http(config.rpcUrl),
+        });
+        this.wasm = wasm;
+    }
+    /**
+     * Construct a client: loads WASM, derives keys from `walletSignature`, wires RPC + addresses.
+     */
+    static async create(config) {
+        const deployment = requireChainDeployment(config.chainId);
+        const wasm = await initStealthWasm({
+            moduleSpecifier: config.wasmModuleSpecifier,
+        });
+        const { viewingKey, spendingKey } = deriveKeysFromSignature(config.walletSignature);
+        const { S, metaAddress } = keysToStealthMetaAddress(viewingKey, spendingKey);
+        const metaAddressHex = stealthMetaAddressToHex(metaAddress);
+        return new OpaqueClient(config, deployment, wasm, {
+            viewingKey,
+            spendingKey,
+            spendPubKey: S,
+            metaAddressHex,
+        });
+    }
+    /** Chain id from configuration. */
+    getChainId() {
+        return this.config.chainId;
+    }
+    /** Connected Ethereum address (from config). */
+    getEthereumAddress() {
+        return this.config.ethereumAddress;
+    }
+    /** 66-byte meta-address hex for registry / sharing. */
+    getMetaAddressHex() {
+        return this.metaAddressHex;
+    }
+    /** Resolved contract addresses for the active chain. */
+    getContracts() {
+        return {
+            stealthMetaAddressRegistry: this.registry,
+            stealthAddressAnnouncer: this.announcer,
+            opaqueReputationVerifier: this.reputationVerifier,
+        };
+    }
+    /**
+     * Look up a recipient’s stealth meta-address on `StealthMetaAddressRegistry` using this client’s
+     * `rpcUrl` and configured registry (scheme id {@link EIP5564_SCHEME_SECP256K1}).
+     *
+     * When the account has not registered, `registered` is false and `metaAddressHex` is omitted —
+     * `recipientAddress` is still the checksummed address you passed in so you can show “not on Opaque yet”.
+     *
+     * @param recipientAddress - Normal Ethereum address of the intended recipient.
+     */
+    async resolveRecipientMetaAddress(recipientAddress) {
+        const recipient = getAddress(recipientAddress);
+        const schemeId = BigInt(EIP5564_SCHEME_SECP256K1);
+        const bytes = await readRegistryMetaAddress(this.publicClient, {
+            registryAddress: this.registry,
+            registrant: recipient,
+            schemeId,
+        });
+        const byteLen = hexPayloadByteLength(bytes);
+        if (byteLen < 66) {
+            return {
+                recipientAddress: recipient,
+                registered: false,
+            };
+        }
+        return {
+            recipientAddress: recipient,
+            registered: true,
+            metaAddressHex: bytes,
+        };
+    }
+    /**
+     * Encode `registerKeys` for the user's meta-address (they submit with `ethereumAddress`).
+     */
+    buildRegisterMetaAddressTransaction() {
+        const schemeId = BigInt(EIP5564_SCHEME_SECP256K1);
+        const data = encodeFunctionData({
+            abi: stealthMetaAddressRegistryAbi,
+            functionName: "registerKeys",
+            args: [schemeId, this.metaAddressHex],
+        });
+        return {
+            to: this.registry,
+            data,
+            chainId: this.config.chainId,
+            metaAddressHex: this.metaAddressHex,
+        };
+    }
+    /**
+     * Derive a one-time stealth address for sending to a recipient meta-address.
+     */
+    prepareStealthSend(recipientMetaAddressHex) {
+        const r = computeStealthAddressAndViewTag(recipientMetaAddressHex);
+        return {
+            schemeId: BigInt(EIP5564_SCHEME_SECP256K1),
+            stealthAddress: r.stealthAddress,
+            viewTag: r.viewTag,
+            ephemeralPublicKey: r.ephemeralPubKey,
+            ephemeralPrivateKey: r.ephemeralPriv,
+            metadata: r.metadata,
+        };
+    }
+    /**
+     * Manual “ghost” receive: derive a one-time stealth address for **this** wallet’s meta-address
+     * without any on-chain announcement yet. Cryptographically this is {@link prepareStealthSend}
+     * with {@link getMetaAddressHex}; you must persist `ephemeralPrivateKey` (and optionally the
+     * full prep) securely to sweep funds or to announce later.
+     */
+    prepareGhostReceive() {
+        return this.prepareStealthSend(this.metaAddressHex);
+    }
+    /**
+     * Build `announce` calldata after you only have the stored 32-byte ephemeral secret from
+     * {@link prepareGhostReceive} (or any prior {@link prepareStealthSend} to your meta-address).
+     * Recomputes stealth address and pubkey material deterministically. If you still have the full
+     * {@link PrepareStealthSendResult} object, {@link buildAnnounceTransactionRequest} is enough.
+     */
+    buildAnnounceTransactionRequestForGhost(ephemeralPrivateKey) {
+        const r = recomputeStealthSendFromEphemeralPrivateKey(this.metaAddressHex, ephemeralPrivateKey);
+        return this.buildAnnounceTransactionRequest({
+            schemeId: BigInt(EIP5564_SCHEME_SECP256K1),
+            stealthAddress: r.stealthAddress,
+            viewTag: r.viewTag,
+            ephemeralPublicKey: r.ephemeralPubKey,
+            ephemeralPrivateKey: r.ephemeralPriv,
+            metadata: r.metadata,
+        });
+    }
+    /**
+     * Build calldata for `announce` so the developer can prompt the user to broadcast.
+     */
+    buildAnnounceTransactionRequest(send) {
+        const ephemeralHex = (`0x${bytesToHex(send.ephemeralPublicKey)}`);
+        const metadataHex = (`0x${bytesToHex(send.metadata)}`);
+        const data = encodeFunctionData({
+            abi: stealthAddressAnnouncerAbi,
+            functionName: "announce",
+            args: [send.schemeId, send.stealthAddress, ephemeralHex, metadataHex],
+        });
+        return {
+            to: this.announcer,
+            data,
+            chainId: this.config.chainId,
+            summary: {
+                schemeId: send.schemeId,
+                stealthAddress: send.stealthAddress,
+                ephemeralPublicKey: ephemeralHex,
+                metadata: metadataHex,
+            },
+        };
+    }
+    /**
+     * Filter indexer announcements down to outputs owned by this user (WASM scan).
+     */
+    async filterOwnedAnnouncements(rows) {
+        if (rows.length === 0)
+            return [];
+        const json = indexerAnnouncementsToScannerJson(rows);
+        const out = scanAttestationsJson(this.wasm, json, this.viewingKey, this.spendPubKey);
+        const list = JSON.parse(out);
+        const owned = [];
+        for (const att of list) {
+            const row = rows.find((r) => r.transactionHash.toLowerCase() === att.tx_hash.toLowerCase() &&
+                r.stealthAddress.toLowerCase() === att.stealth_address.toLowerCase());
+            const epk = (`0x${att.ephemeral_pubkey.map((b) => b.toString(16).padStart(2, "0")).join("")}`);
+            owned.push({
+                stealthAddress: getAddress(att.stealth_address),
+                transactionHash: att.tx_hash,
+                blockNumber: att.block_number,
+                logIndex: row?.logIndex ?? 0,
+                viewTag: row?.viewTag ?? 0,
+                ephemeralPublicKey: epk,
+                attestationId: att.attestation_id,
+            });
+        }
+        return owned;
+    }
+    /**
+     * Reconstruct the 32-byte secp256k1 private key that controls `output`’s one-time stealth address.
+     * Uses the same WASM path as the on-chain scanner (`reconstruct_signing_key_wasm`).
+     *
+     * You supply gas, nonce, and broadcast: build a viem `PrivateKeyAccount` (or ethers wallet) from
+     * the returned bytes and sign a transfer **from** `output.stealthAddress`. Never log or persist
+     * the result beyond what your threat model allows.
+     */
+    getStealthSignerPrivateKey(output) {
+        const ephemeralPubkeyBytes = hexToBytes(output.ephemeralPublicKey);
+        if (ephemeralPubkeyBytes.length !== 33) {
+            throw new Error("Opaque: ephemeralPublicKey must be 33-byte compressed secp256k1 hex");
+        }
+        return reconstructSigningKey(this.wasm, this.spendingKey, this.viewingKey, ephemeralPubkeyBytes);
+    }
+    /**
+     * Same as {@link getStealthSignerPrivateKey} when you only have the 32-byte ephemeral **private**
+     * key from {@link prepareGhostReceive} / {@link prepareStealthSend} (e.g. ghost storage) instead
+     * of an indexer row with `ephemeralPublicKey`.
+     */
+    getStealthSignerPrivateKeyFromEphemeralPrivateKey(ephemeralPrivateKey) {
+        const ephemeralPubkeyBytes = ephemeralPrivateKeyToCompressedPublicKey(ephemeralPrivateKey);
+        return reconstructSigningKey(this.wasm, this.spendingKey, this.viewingKey, ephemeralPubkeyBytes);
+    }
+    /**
+     * Owned outputs + balances summed per tracked token (uses `rpcUrl` from config).
+     */
+    async getBalancesFromAnnouncements(rows) {
+        const owned = await this.filterOwnedAnnouncements(rows);
+        const unique = [...new Map(owned.map((o) => [o.stealthAddress, o])).values()];
+        const outputs = [];
+        for (const o of unique) {
+            const balances = {};
+            for (const t of this.tokens) {
+                if (t.address.toLowerCase() === NATIVE_TOKEN_ADDRESS.toLowerCase()) {
+                    const wei = await this.publicClient.getBalance({
+                        address: o.stealthAddress,
+                    });
+                    balances[NATIVE_TOKEN_ADDRESS] = wei;
+                }
+                else {
+                    const bal = await this.publicClient.readContract({
+                        address: t.address,
+                        abi: ERC20_BALANCE_ABI,
+                        functionName: "balanceOf",
+                        args: [o.stealthAddress],
+                    });
+                    balances[t.address] = bal;
+                }
+            }
+            outputs.push({ stealthAddress: o.stealthAddress, balances });
+        }
+        const totals = aggregateBalancesByToken(outputs);
+        return this.tokens.map((t) => ({
+            tokenAddress: t.address,
+            symbol: t.symbol,
+            decimals: t.decimals,
+            totalRaw: totals.get(t.address.toLowerCase()) ?? 0n,
+        }));
+    }
+    /**
+     * PSR: map owned attestation markers to {@link DiscoveredTrait} list.
+     */
+    async discoverTraits(rows) {
+        if (rows.length === 0)
+            return [];
+        const json = indexerAnnouncementsToScannerJson(rows);
+        const out = scanAttestationsJson(this.wasm, json, this.viewingKey, this.spendPubKey);
+        const list = JSON.parse(out);
+        return attestationsToDiscoveredTraits(list);
+    }
+    /**
+     * PSR: same as {@link discoverTraits} — alias for reputation-focused call sites.
+     */
+    async getReputationTraitsFromAnnouncements(rows) {
+        return this.discoverTraits(rows);
+    }
+    /**
+     * Encode `announce` metadata for a PSR attestation (view tag byte + `0xA7` + u64 `attestationId`).
+     * Canonical encoding matches WASM/Rust; use with {@link prepareReputationAssignment}.
+     */
+    encodeReputationMetadata(viewTag, attestationId) {
+        const hex = encodeAttestationMetadata(this.wasm, viewTag, attestationId);
+        return hexToBytes(hex);
+    }
+    /**
+     * Issuer flow: derive one-time stealth material for the recipient and embed `attestationId` in metadata.
+     */
+    prepareReputationAssignment(recipientMetaAddressHex, attestationId) {
+        const prep = this.prepareStealthSend(recipientMetaAddressHex);
+        const metadata = this.encodeReputationMetadata(prep.viewTag, attestationId);
+        return { ...prep, metadata };
+    }
+    /**
+     * Issuer flow: calldata for `StealthAddressAnnouncer.announce` with PSR metadata (no asset transfer).
+     */
+    buildAssignReputationTransaction(recipientMetaAddressHex, attestationId) {
+        return this.buildAnnounceTransactionRequest(this.prepareReputationAssignment(recipientMetaAddressHex, attestationId));
+    }
+    /**
+     * JSON array string for {@link generateReputationProof} when passing `attestationsJson` (WASM Merkle witness).
+     */
+    announcementsJsonForReputationWitness(rows) {
+        return indexerAnnouncementsToScannerJson(rows);
+    }
+    /**
+     * One-time stealth signing key for a {@link DiscoveredTrait} (requires `ephemeralPubkey` from the scan).
+     */
+    getStealthSignerPrivateKeyForReputationTrait(trait) {
+        if (!trait.ephemeralPubkey?.length) {
+            throw new Error("Opaque: DiscoveredTrait.ephemeralPubkey is required (use discoverTraits / getReputationTraitsFromAnnouncements)");
+        }
+        const ephemeralPublicKey = (`0x${trait.ephemeralPubkey
+            .map((b) => b.toString(16).padStart(2, "0"))
+            .join("")}`);
+        return this.getStealthSignerPrivateKey({ ephemeralPublicKey });
+    }
+    /**
+     * Groth16 proof bundle for `OpaqueReputationVerifier` (requires `snarkjs`).
+     * When `artifacts` is omitted, wasm/zkey are loaded from the default hosted paths on opaque.cash
+     * (same as the Opaque frontend `/circuits/...` assets).
+     */
+    async generateReputationProof(params) {
+        await ensureBufferPolyfill();
+        return runGenerateReputationProof({
+            wasm: this.wasm,
+            trait: params.trait,
+            stealthPrivKeyBytes: params.stealthPrivKeyBytes,
+            externalNullifier: params.externalNullifier,
+            attestationsJson: params.attestationsJson,
+            artifacts: params.artifacts,
+            onProgress: params.onProgress,
+        });
+    }
+    /** Latest non-expired Merkle root from `OpaqueReputationVerifier.rootHistory`. */
+    async fetchLatestValidReputationRoot() {
+        return fetchLatestValidRoot(this.publicClient, this.getReputationVerifierAddress());
+    }
+    /** Whether the verifier currently accepts this root (exists and not past expiry). */
+    async isReputationRootValid(root) {
+        return isRootValid(this.publicClient, this.getReputationVerifierAddress(), root);
+    }
+    /** Full root history with per-entry validity (newest index last). */
+    async fetchReputationRootHistory() {
+        return fetchRootHistory(this.publicClient, this.getReputationVerifierAddress());
+    }
+    /** On-chain view helper: verify proof without spending nullifier. */
+    async verifyReputationProofView(args) {
+        return verifyReputationView(this.publicClient, this.getReputationVerifierAddress(), args);
+    }
+    /** Simulate `verifyReputation` for gas / revert checks. */
+    async simulateReputationVerification(wallet, args) {
+        return simulateVerifyReputation(this.publicClient, wallet, this.getReputationVerifierAddress(), args);
+    }
+    /** Broadcast `verifyReputation` (consumes nullifier when successful). */
+    async submitReputationVerification(wallet, args) {
+        return submitVerifyReputation(this.publicClient, wallet, this.getReputationVerifierAddress(), args);
+    }
+    getReputationVerifierAddress() {
+        if (!this.reputationVerifier) {
+            throw new Error("Opaque: opaqueReputationVerifier is not configured for this chain. Set contracts.opaqueReputationVerifier in OpaqueClient.create or use a bundled deployment.");
+        }
+        return this.reputationVerifier;
+    }
+    /**
+     * Deterministic scope string for reputation actions (`chainId:module:actionId`).
+     * Same as {@link buildActionScope} in `@opaquecash/psr-core`.
+     */
+    static buildReputationActionScope = buildActionScope;
+    /**
+     * Map a scope string to the circuit `externalNullifier` scalar (keccak, uint256).
+     * Same as {@link externalNullifierFromScope} in `@opaquecash/psr-core`.
+     */
+    static reputationExternalNullifierFromScope = externalNullifierFromScope;
+    /**
+     * Chain IDs that ship with bundled contract addresses in this SDK version.
+     */
+    static supportedChainIds() {
+        return getSupportedChainIds();
+    }
+    /**
+     * Read bundled deployment metadata (contracts, default tokens) for a chain.
+     */
+    static chainDeployment(chainId) {
+        return getChainDeploymentInfo(chainId);
+    }
+}
+function bytesToHex(b) {
+    return Array.from(b)
+        .map((x) => x.toString(16).padStart(2, "0"))
+        .join("");
+}
+function hexPayloadByteLength(h) {
+    const s = h.startsWith("0x") ? h.slice(2) : h;
+    return s.length / 2;
+}
+function mergeTrackedTokens(base, extra) {
+    const map = new Map();
+    for (const t of base) {
+        map.set(t.address.toLowerCase(), t);
+    }
+    for (const t of extra) {
+        map.set(t.address.toLowerCase(), t);
+    }
+    return [...map.values()];
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAQL,kBAAkB,EAClB,IAAI,EACJ,kBAAkB,EAClB,UAAU,EACV,UAAU,GACX,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACL,6BAA6B,EAC7B,0BAA0B,EAC1B,qBAAqB,IAAI,uBAAuB,GACjD,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,yBAAyB,EACzB,eAAe,EACf,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,8BAA8B,EAC9B,gBAAgB,EAChB,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,IAAI,0BAA0B,GAGtD,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,GAEzB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,EAC/B,2CAA2C,EAC3C,wCAAwC,GACzC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,IAAI,sBAAsB,EAC5C,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,iCAAiC,GAElC,MAAM,wBAAwB,CAAC;AAOhC,MAAM,iBAAiB,GAAG;IACxB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,WAAW;QACjB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC9C,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;KAC/B;CACO,CAAC;AA2GX,MAAM,OAAO,YAAY;IACN,MAAM,CAAqB;IAC3B,UAAU,CAAwB;IAClC,QAAQ,CAAU;IAClB,SAAS,CAAU;IACnB,kBAAkB,CAAW;IAC7B,MAAM,CAAiB;IACvB,UAAU,CAAa;IACvB,WAAW,CAAa;IACxB,WAAW,CAAa;IACxB,cAAc,CAAM;IACpB,YAAY,CAAe;IAC3B,IAAI,CAAoB;IAEzC,YACE,MAA0B,EAC1B,UAAiC,EACjC,IAAuB,EACvB,IAKC;QAED,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ;YACX,MAAM,CAAC,SAAS,EAAE,0BAA0B;gBAC5C,UAAU,CAAC,0BAA0B,CAAC;QACxC,IAAI,CAAC,SAAS;YACZ,MAAM,CAAC,SAAS,EAAE,uBAAuB;gBACzC,UAAU,CAAC,uBAAuB,CAAC;QACrC,IAAI,CAAC,kBAAkB;YACrB,MAAM,CAAC,SAAS,EAAE,wBAAwB;gBAC1C,UAAU,CAAC,wBAAwB,CAAC;QACtC,MAAM,UAAU,GAAG,UAAU,CAAC,oBAAoB,CAAC;QACnD,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAC;QAC1C,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC;YACrC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;SAC/B,CAAiB,CAAC;QACnB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAA0B;QAC5C,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC;YACjC,eAAe,EAAE,MAAM,CAAC,mBAAmB;SAC5C,CAAC,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,uBAAuB,CACzD,MAAM,CAAC,eAAe,CACvB,CAAC;QACF,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,wBAAwB,CACjD,UAAU,EACV,WAAW,CACZ,CAAC;QACF,MAAM,cAAc,GAAG,uBAAuB,CAAC,WAAW,CAAC,CAAC;QAC5D,OAAO,IAAI,YAAY,CACrB,MAAM,EACN,UAAU,EACV,IAAI,EACJ;YACE,UAAU;YACV,WAAW;YACX,WAAW,EAAE,CAAC;YACd,cAAc;SACf,CACF,CAAC;IACJ,CAAC;IAED,mCAAmC;IACnC,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,gDAAgD;IAChD,kBAAkB;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;IACrC,CAAC;IAED,uDAAuD;IACvD,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,wDAAwD;IACxD,YAAY;QAKV,OAAO;YACL,0BAA0B,EAAE,IAAI,CAAC,QAAQ;YACzC,uBAAuB,EAAE,IAAI,CAAC,SAAS;YACvC,wBAAwB,EAAE,IAAI,CAAC,kBAAkB;SAClD,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,2BAA2B,CAC/B,gBAAyB;QAEzB,MAAM,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,YAAY,EAAE;YAC7D,eAAe,EAAE,IAAI,CAAC,QAAQ;YAC9B,UAAU,EAAE,SAAS;YACrB,QAAQ;SACT,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,OAAO,GAAG,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,gBAAgB,EAAE,SAAS;gBAC3B,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QACD,OAAO;YACL,gBAAgB,EAAE,SAAS;YAC3B,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,KAAK;SACtB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mCAAmC;QACjC,MAAM,QAAQ,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAC9B,GAAG,EAAE,6BAA6B;YAClC,YAAY,EAAE,cAAc;YAC5B,IAAI,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC;SACtC,CAAQ,CAAC;QACV,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,QAAQ;YACjB,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,kBAAkB,CAAC,uBAA4B;QAC7C,MAAM,CAAC,GAAG,+BAA+B,CAAC,uBAAuB,CAAC,CAAC;QACnE,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,wBAAwB,CAAC;YAC1C,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,kBAAkB,EAAE,CAAC,CAAC,eAAe;YACrC,mBAAmB,EAAE,CAAC,CAAC,aAAa;YACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtD,CAAC;IAED;;;;;OAKG;IACH,uCAAuC,CACrC,mBAA+B;QAE/B,MAAM,CAAC,GAAG,2CAA2C,CACnD,IAAI,CAAC,cAAc,EACnB,mBAAmB,CACpB,CAAC;QACF,OAAO,IAAI,CAAC,+BAA+B,CAAC;YAC1C,QAAQ,EAAE,MAAM,CAAC,wBAAwB,CAAC;YAC1C,cAAc,EAAE,CAAC,CAAC,cAAc;YAChC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,kBAAkB,EAAE,CAAC,CAAC,eAAe;YACrC,mBAAmB,EAAE,CAAC,CAAC,aAAa;YACpC,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,+BAA+B,CAC7B,IAA8B;QAE9B,MAAM,YAAY,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAQ,CAAC;QACzE,MAAM,WAAW,GAAG,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAQ,CAAC;QAC9D,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAC9B,GAAG,EAAE,0BAA0B;YAC/B,YAAY,EAAE,UAAU;YACxB,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,WAAW,CAAC;SACtE,CAAQ,CAAC;QACV,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO;YAC5B,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE,IAAI,CAAC,cAAc;gBACnC,kBAAkB,EAAE,YAAY;gBAChC,QAAQ,EAAE,WAAW;aACtB;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,wBAAwB,CAC5B,IAA2B;QAE3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,iCAAiC,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,oBAAoB,CAC9B,IAAI,CAAC,IAAI,EACT,IAAI,EACJ,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACrD,MAAM,KAAK,GAAyB,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CACnB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE;gBAC7D,CAAC,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,eAAe,CAAC,WAAW,EAAE,CACvE,CAAC;YACF,MAAM,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAQ,CAAC;YACtG,KAAK,CAAC,IAAI,CAAC;gBACT,cAAc,EAAE,UAAU,CAAC,GAAG,CAAC,eAA0B,CAAC;gBAC1D,eAAe,EAAE,GAAG,CAAC,OAAc;gBACnC,WAAW,EAAE,GAAG,CAAC,YAAY;gBAC7B,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,CAAC;gBAC5B,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,CAAC;gBAC1B,kBAAkB,EAAE,GAAG;gBACvB,aAAa,EAAE,GAAG,CAAC,cAAc;aAClC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;OAOG;IACH,0BAA0B,CACxB,MAAsD;QAEtD,MAAM,oBAAoB,GAAG,UAAU,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnE,IAAI,oBAAoB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,qEAAqE,CACtE,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,CAC1B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,UAAU,EACf,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,iDAAiD,CAC/C,mBAA+B;QAE/B,MAAM,oBAAoB,GACxB,wCAAwC,CAAC,mBAAmB,CAAC,CAAC;QAChE,OAAO,qBAAqB,CAC1B,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,UAAU,EACf,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,4BAA4B,CAChC,IAA2B;QAE3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAwB,EAAE,CAAC;YACzC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,oBAAoB,CAAC,WAAW,EAAE,EAAE,CAAC;oBACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC;wBAC7C,OAAO,EAAE,CAAC,CAAC,cAAc;qBAC1B,CAAC,CAAC;oBACH,QAAQ,CAAC,oBAAoB,CAAC,GAAG,GAAG,CAAC;gBACvC,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;wBAC/C,OAAO,EAAE,CAAC,CAAC,OAAO;wBAClB,GAAG,EAAE,iBAAiB;wBACtB,YAAY,EAAE,WAAW;wBACzB,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;qBACzB,CAAC,CAAC;oBACH,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC;gBAC5B,CAAC;YACH,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,YAAY,EAAE,CAAC,CAAC,OAAO;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE;SACpD,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,IAA2B;QAE3B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,iCAAiC,CAAC,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,oBAAoB,CAC9B,IAAI,CAAC,IAAI,EACT,IAAI,EACJ,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,WAAW,CACjB,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACrD,OAAO,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oCAAoC,CACxC,IAA2B;QAE3B,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED;;;OAGG;IACH,wBAAwB,CAAC,OAAe,EAAE,aAAqB;QAC7D,MAAM,GAAG,GAAG,yBAAyB,CACnC,IAAI,CAAC,IAAI,EACT,OAAO,EACP,aAAa,CACP,CAAC;QACT,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,2BAA2B,CACzB,uBAA4B,EAC5B,aAAqB;QAErB,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC5E,OAAO,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,gCAAgC,CAC9B,uBAA4B,EAC5B,aAAqB;QAErB,OAAO,IAAI,CAAC,+BAA+B,CACzC,IAAI,CAAC,2BAA2B,CAAC,uBAAuB,EAAE,aAAa,CAAC,CACzE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,qCAAqC,CAAC,IAA2B;QAC/D,OAAO,iCAAiC,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,4CAA4C,CAAC,KAAsB;QACjE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,iHAAiH,CAClH,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,GAAG,CAAC,KAAK,KAAK,CAAC,eAAe;aACnD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aAC3C,IAAI,CAAC,EAAE,CAAC,EAAE,CAAQ,CAAC;QACtB,OAAO,IAAI,CAAC,0BAA0B,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACjE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,uBAAuB,CAAC,MAO7B;QACC,MAAM,oBAAoB,EAAE,CAAC;QAC7B,OAAO,0BAA0B,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC,CAAC;IACL,CAAC;IAED,kFAAkF;IAClF,KAAK,CAAC,8BAA8B;QAClC,OAAO,oBAAoB,CACzB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,4BAA4B,EAAE,CACpC,CAAC;IACJ,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,qBAAqB,CAAC,IAAS;QACnC,OAAO,WAAW,CAChB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,4BAA4B,EAAE,EACnC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,0BAA0B;QAG9B,OAAO,gBAAgB,CACrB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,4BAA4B,EAAE,CACpC,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,KAAK,CAAC,yBAAyB,CAAC,IAA0B;QACxD,OAAO,oBAAoB,CACzB,IAAI,CAAC,YAAY,EACjB,IAAI,CAAC,4BAA4B,EAAE,EACnC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,8BAA8B,CAKlC,MAAkD,EAClD,IAA0B;QAE1B,OAAO,wBAAwB,CAC7B,IAAI,CAAC,YAAY,EACjB,MAAM,EACN,IAAI,CAAC,4BAA4B,EAAE,EACnC,IAAI,CACL,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,4BAA4B,CAKhC,MAAkD,EAClD,IAA0B;QAE1B,OAAO,sBAAsB,CAC3B,IAAI,CAAC,YAAY,EACjB,MAAM,EACN,IAAI,CAAC,4BAA4B,EAAE,EACnC,IAAI,CACL,CAAC;IACJ,CAAC;IAEO,4BAA4B;QAClC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,+JAA+J,CAChK,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,0BAA0B,GAAG,gBAAgB,CAAC;IAErD;;;OAGG;IACH,MAAM,CAAC,oCAAoC,GAAG,0BAA0B,CAAC;IAEzE;;OAEG;IACH,MAAM,CAAC,iBAAiB;QACtB,OAAO,oBAAoB,EAAE,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,eAAe,CACpB,OAAe;QAEf,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;;AAGH,SAAS,UAAU,CAAC,CAAa;IAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAM;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAoB,EACpB,KAAqB;IAErB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/crypto/dksap.d.ts

@@ -0,0 +1,40 @@
+/**
+ * EIP-5564 sender/receiver key material — matches Opaque wallet derivation (`opaque-cash-v1` HKDF).
+ */
+import type { Hex } from "viem";
+import { type Address } from "viem";
+export declare function deriveKeysFromSignature(signatureHex: Hex): {
+    viewingKey: Uint8Array;
+    spendingKey: Uint8Array;
+};
+export declare function keysToStealthMetaAddress(viewingKey: Uint8Array, spendingKey: Uint8Array): {
+    V: Uint8Array;
+    S: Uint8Array;
+    metaAddress: Uint8Array;
+};
+export declare function stealthMetaAddressToHex(metaAddress: Uint8Array): Hex;
+export declare function parseStealthMetaAddress(metaHex: Hex): {
+    viewPubKey: Uint8Array;
+    spendPubKey: Uint8Array;
+};
+export declare function computeStealthAddressAndViewTag(recipientMetaAddressHex: Hex): {
+    ephemeralPriv: Uint8Array;
+    ephemeralPubKey: Uint8Array;
+    stealthAddress: Address;
+    viewTag: number;
+    metadata: Uint8Array;
+};
+/**
+ * Re-derive stealth material from a fixed 32-byte ephemeral secret (manual “ghost” receive).
+ * Must match {@link computeStealthAddressAndViewTag} for the same meta-address and scalar.
+ */
+/** 33-byte compressed secp256k1 pubkey for a 32-byte ephemeral secret (sender ghost material). */
+export declare function ephemeralPrivateKeyToCompressedPublicKey(ephemeralPrivateKey: Uint8Array): Uint8Array;
+export declare function recomputeStealthSendFromEphemeralPrivateKey(recipientMetaAddressHex: Hex, ephemeralPrivateKey: Uint8Array): {
+    ephemeralPriv: Uint8Array;
+    ephemeralPubKey: Uint8Array;
+    stealthAddress: Address;
+    viewTag: number;
+    metadata: Uint8Array;
+};
+//# sourceMappingURL=dksap.d.ts.map

package/dist/crypto/dksap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dksap.d.ts","sourceRoot":"","sources":["../../src/crypto/dksap.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAc,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAKhD,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,GAAG,GAAG;IAC1D,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;CACzB,CAWA;AAED,wBAAgB,wBAAwB,CACtC,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,UAAU,GACtB;IAAE,CAAC,EAAE,UAAU,CAAC;IAAC,CAAC,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,UAAU,CAAA;CAAE,CAO3D;AAED,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,UAAU,GAAG,GAAG,CAEpE;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,GAAG,GAAG;IACrD,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC;CACzB,CAaA;AAuCD,wBAAgB,+BAA+B,CAAC,uBAAuB,EAAE,GAAG,GAAG;IAC7E,aAAa,EAAE,UAAU,CAAC;IAC1B,eAAe,EAAE,UAAU,CAAC;IAC5B,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,CAAC;CACtB,CAiBA;AAED;;;GAGG;AACH,kGAAkG;AAClG,wBAAgB,wCAAwC,CACtD,mBAAmB,EAAE,UAAU,GAC9B,UAAU,CAKZ;AAED,wBAAgB,2CAA2C,CACzD,uBAAuB,EAAE,GAAG,EAC5B,mBAAmB,EAAE,UAAU,GAC9B;IACD,aAAa,EAAE,UAAU,CAAC;IAC1B,eAAe,EAAE,UAAU,CAAC;IAC5B,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,UAAU,CAAC;CACtB,CAoBA"}

package/dist/crypto/dksap.js

@@ -0,0 +1,139 @@
+/**
+ * EIP-5564 sender/receiver key material — matches Opaque wallet derivation (`opaque-cash-v1` HKDF).
+ */
+import { secp256k1 } from "@noble/curves/secp256k1";
+import { keccak_256 } from "@noble/hashes/sha3";
+import { hkdf } from "@noble/hashes/hkdf";
+import { sha256 } from "@noble/hashes/sha2";
+import { getAddress } from "viem";
+const CURVE = secp256k1;
+const DOMAIN = "opaque-cash-v1";
+export function deriveKeysFromSignature(signatureHex) {
+    const sigBytes = typeof signatureHex === "string"
+        ? signatureHex.startsWith("0x")
+            ? signatureHex.slice(2)
+            : signatureHex
+        : signatureHex;
+    const sig = typeof sigBytes === "string" ? hexToBytes(sigBytes) : sigBytes;
+    const okm = hkdf(sha256, sig, undefined, DOMAIN, 64);
+    return { viewingKey: okm.slice(0, 32), spendingKey: okm.slice(32, 64) };
+}
+export function keysToStealthMetaAddress(viewingKey, spendingKey) {
+    const V = CURVE.getPublicKey(viewingKey, true);
+    const S = CURVE.getPublicKey(spendingKey, true);
+    const metaAddress = new Uint8Array(V.length + S.length);
+    metaAddress.set(V, 0);
+    metaAddress.set(S, V.length);
+    return { V, S, metaAddress };
+}
+export function stealthMetaAddressToHex(metaAddress) {
+    return (`0x${bytesToHex(metaAddress)}`);
+}
+export function parseStealthMetaAddress(metaHex) {
+    const raw = typeof metaHex === "string" && metaHex.startsWith("0x")
+        ? metaHex.slice(2)
+        : metaHex;
+    const bytes = hexToBytes(raw);
+    if (bytes.length < 66) {
+        throw new Error("Invalid stealth meta-address: expected 66 bytes");
+    }
+    return {
+        viewPubKey: bytes.slice(0, 33),
+        spendPubKey: bytes.slice(33, 66),
+    };
+}
+function sharedSecretSender(ephemeralPriv, viewPubKey) {
+    const P = CURVE.ProjectivePoint.fromHex(viewPubKey);
+    const scalar = bytesToBigInt(ephemeralPriv) % CURVE.CURVE.n;
+    if (scalar === 0n)
+        throw new Error("Invalid ephemeral key");
+    return P.multiply(scalar).toRawBytes(true);
+}
+function hashSharedSecret(sharedSecret) {
+    const sH = keccak_256(sharedSecret);
+    return { sH, viewTag: sH[0] };
+}
+function stealthPointAndAddress(spendPubKey, sH) {
+    const n = CURVE.CURVE.n;
+    const sHBig = bytesToBigInt(sH);
+    const sHMod = sHBig % n;
+    if (sHMod === 0n)
+        throw new Error("Invalid scalar from hash");
+    const S_h = CURVE.ProjectivePoint.BASE.multiply(sHMod);
+    const P_spend = CURVE.ProjectivePoint.fromHex(spendPubKey);
+    const P_stealth = P_spend.add(S_h);
+    const uncompressed = P_stealth.toRawBytes(false);
+    const hash = keccak_256(uncompressed.slice(1));
+    const addr = getAddress((`0x${bytesToHex(hash.slice(12))}`));
+    return { stealthAddress: addr };
+}
+export function computeStealthAddressAndViewTag(recipientMetaAddressHex) {
+    const { viewPubKey, spendPubKey } = parseStealthMetaAddress(recipientMetaAddressHex);
+    const ephemeralPriv = CURVE.utils.randomPrivateKey();
+    const ephemeralPubKey = CURVE.getPublicKey(ephemeralPriv, true);
+    const shared = sharedSecretSender(ephemeralPriv, viewPubKey);
+    const { sH, viewTag } = hashSharedSecret(shared);
+    const { stealthAddress } = stealthPointAndAddress(spendPubKey, sH);
+    const metadata = new Uint8Array(1);
+    metadata[0] = viewTag;
+    return {
+        ephemeralPriv,
+        ephemeralPubKey,
+        stealthAddress,
+        viewTag,
+        metadata,
+    };
+}
+/**
+ * Re-derive stealth material from a fixed 32-byte ephemeral secret (manual “ghost” receive).
+ * Must match {@link computeStealthAddressAndViewTag} for the same meta-address and scalar.
+ */
+/** 33-byte compressed secp256k1 pubkey for a 32-byte ephemeral secret (sender ghost material). */
+export function ephemeralPrivateKeyToCompressedPublicKey(ephemeralPrivateKey) {
+    if (ephemeralPrivateKey.length !== 32) {
+        throw new Error("Ephemeral private key must be 32 bytes.");
+    }
+    return CURVE.getPublicKey(ephemeralPrivateKey, true);
+}
+export function recomputeStealthSendFromEphemeralPrivateKey(recipientMetaAddressHex, ephemeralPrivateKey) {
+    if (ephemeralPrivateKey.length !== 32) {
+        throw new Error("Ephemeral private key must be 32 bytes.");
+    }
+    const { viewPubKey, spendPubKey } = parseStealthMetaAddress(recipientMetaAddressHex);
+    const ephemeralPriv = ephemeralPrivateKey;
+    const ephemeralPubKey = CURVE.getPublicKey(ephemeralPriv, true);
+    const shared = sharedSecretSender(ephemeralPriv, viewPubKey);
+    const { sH, viewTag } = hashSharedSecret(shared);
+    const { stealthAddress } = stealthPointAndAddress(spendPubKey, sH);
+    const metadata = new Uint8Array(1);
+    metadata[0] = viewTag;
+    return {
+        ephemeralPriv,
+        ephemeralPubKey,
+        stealthAddress,
+        viewTag,
+        metadata,
+    };
+}
+function hexToBytes(hex) {
+    const h = hex.startsWith("0x") ? hex.slice(2) : hex;
+    if (h.length % 2)
+        throw new Error("Invalid hex length");
+    const out = new Uint8Array(h.length / 2);
+    for (let i = 0; i < out.length; i++) {
+        out[i] = Number.parseInt(h.slice(i * 2, i * 2 + 2), 16);
+    }
+    return out;
+}
+function bytesToHex(b) {
+    return Array.from(b)
+        .map((x) => x.toString(16).padStart(2, "0"))
+        .join("");
+}
+function bytesToBigInt(b) {
+    let x = 0n;
+    for (let i = 0; i < b.length; i++)
+        x = (x << 8n) | BigInt(b[i]);
+    return x;
+}
+//# sourceMappingURL=dksap.js.map

package/dist/crypto/dksap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dksap.js","sourceRoot":"","sources":["../../src/crypto/dksap.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,UAAU,EAAgB,MAAM,MAAM,CAAC;AAEhD,MAAM,KAAK,GAAG,SAAS,CAAC;AACxB,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAEhC,MAAM,UAAU,uBAAuB,CAAC,YAAiB;IAIvD,MAAM,QAAQ,GACZ,OAAO,YAAY,KAAK,QAAQ;QAC9B,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC;YAC7B,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,CAAC,CAAC,YAAY;QAChB,CAAC,CAAC,YAAY,CAAC;IACnB,MAAM,GAAG,GACP,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,UAAsB,EACtB,WAAuB;IAEvB,MAAM,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC/C,MAAM,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtB,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,WAAuB;IAC7D,OAAO,CAAC,KAAK,UAAU,CAAC,WAAW,CAAC,EAAE,CAAQ,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAY;IAIlD,MAAM,GAAG,GACP,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC;QACrD,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC,OAAO,CAAC;IACd,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9B,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,aAAyB,EACzB,UAAsB;IAEtB,MAAM,CAAC,GAAG,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,IAAI,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAwB;IAIhD,MAAM,EAAE,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACpC,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAAuB,EACvB,EAAc;IAEd,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,UAAU,CACrB,CAAC,KAAK,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,CAAQ,CAC3C,CAAC;IACF,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,uBAA4B;IAO1E,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAC/B,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACrD,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,EAAE,cAAc,EAAE,GAAG,sBAAsB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;IACtB,OAAO;QACL,aAAa;QACb,eAAe;QACf,cAAc;QACd,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,kGAAkG;AAClG,MAAM,UAAU,wCAAwC,CACtD,mBAA+B;IAE/B,IAAI,mBAAmB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC,YAAY,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,2CAA2C,CACzD,uBAA4B,EAC5B,mBAA+B;IAQ/B,IAAI,mBAAmB,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAC/B,uBAAuB,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,aAAa,GAAG,mBAAmB,CAAC;IAC1C,MAAM,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,kBAAkB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC7D,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,EAAE,cAAc,EAAE,GAAG,sBAAsB,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;IACtB,OAAO;QACL,aAAa;QACb,eAAe;QACf,cAAc;QACd,OAAO;QACP,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,CAAa;IAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CAAC,CAAa;IAClC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `@opaquecash/opaque` — unified Opaque SDK client.
+ *
+ * Initialize once with chain, RPC, wallet signature, and WASM URL; then prepare txs,
+ * filter indexer announcements, aggregate balances, reconstruct one-time spend keys, and discover PSR traits.
+ *
+ * @packageDocumentation
+ */
+export { OpaqueClient, type OpaqueClientConfig, type PrepareStealthSendResult, type PrepareGhostReceiveResult, type AnnounceTransactionRequest, type RegisterMetaAddressTransactionRequest, type ResolveRecipientMetaResult, } from "./client.js";
+export type { VerifyReputationArgs } from "@opaquecash/psr-chain";
+export type { ArtifactPaths, ProofProgressCallback, } from "@opaquecash/psr-prover";
+export { DEFAULT_REPUTATION_ARTIFACT_PATHS, DEFAULT_REPUTATION_ARTIFACTS_ORIGIN, } from "@opaquecash/psr-prover";
+export type { ProofData } from "@opaquecash/psr-core";
+export { buildActionScope, externalNullifierFromScope } from "@opaquecash/psr-core";
+export type { IndexerAnnouncement, OwnedStealthOutput, TokenBalanceSummary, } from "./types/indexer.js";
+export { getSupportedChainIds, getChainDeployment, requireChainDeployment, NATIVE_TOKEN_ADDRESS, type OpaqueChainDeployment, } from "./chains.js";
+export { indexerAnnouncementToScannerRecord, indexerAnnouncementsToScannerJson, } from "./indexer/normalize.js";
+export { deriveKeysFromSignature, computeStealthAddressAndViewTag, recomputeStealthSendFromEphemeralPrivateKey, ephemeralPrivateKeyToCompressedPublicKey, stealthMetaAddressToHex, keysToStealthMetaAddress, parseStealthMetaAddress, } from "./crypto/dksap.js";
+export { EIP5564_SCHEME_SECP256K1 } from "@opaquecash/stealth-core";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,EAC/B,KAAK,qCAAqC,EAC1C,KAAK,0BAA0B,GAChC,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,YAAY,EACV,aAAa,EACb,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,iCAAiC,EACjC,mCAAmC,GACpC,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAEpF,YAAY,EACV,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,uBAAuB,EACvB,+BAA+B,EAC/B,2CAA2C,EAC3C,wCAAwC,EACxC,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/index.js

@@ -0,0 +1,16 @@
+/**
+ * `@opaquecash/opaque` — unified Opaque SDK client.
+ *
+ * Initialize once with chain, RPC, wallet signature, and WASM URL; then prepare txs,
+ * filter indexer announcements, aggregate balances, reconstruct one-time spend keys, and discover PSR traits.
+ *
+ * @packageDocumentation
+ */
+export { OpaqueClient, } from "./client.js";
+export { DEFAULT_REPUTATION_ARTIFACT_PATHS, DEFAULT_REPUTATION_ARTIFACTS_ORIGIN, } from "@opaquecash/psr-prover";
+export { buildActionScope, externalNullifierFromScope } from "@opaquecash/psr-core";
+export { getSupportedChainIds, getChainDeployment, requireChainDeployment, NATIVE_TOKEN_ADDRESS, } from "./chains.js";
+export { indexerAnnouncementToScannerRecord, indexerAnnouncementsToScannerJson, } from "./indexer/normalize.js";
+export { deriveKeysFromSignature, computeStealthAddressAndViewTag, recomputeStealthSendFromEphemeralPrivateKey, ephemeralPrivateKeyToCompressedPublicKey, stealthMetaAddressToHex, keysToStealthMetaAddress, parseStealthMetaAddress, } from "./crypto/dksap.js";
+export { EIP5564_SCHEME_SECP256K1 } from "@opaquecash/stealth-core";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,YAAY,GAOb,MAAM,aAAa,CAAC;AAOrB,OAAO,EACL,iCAAiC,EACjC,mCAAmC,GACpC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAQpF,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,EACtB,oBAAoB,GAErB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kCAAkC,EAClC,iCAAiC,GAClC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,uBAAuB,EACvB,+BAA+B,EAC/B,2CAA2C,EAC3C,wCAAwC,EACxC,uBAAuB,EACvB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/indexer/normalize.d.ts

@@ -0,0 +1,11 @@
+import type { AnnouncementJsonRecord } from "@opaquecash/stealth-core";
+import type { IndexerAnnouncement } from "../types/indexer.js";
+/**
+ * Map a subgraph/indexer row into the JSON record expected by `scan_attestations_wasm`.
+ */
+export declare function indexerAnnouncementToScannerRecord(row: IndexerAnnouncement): AnnouncementJsonRecord;
+/**
+ * Batch-normalize indexer rows for WASM or playground inspection.
+ */
+export declare function indexerAnnouncementsToScannerJson(rows: IndexerAnnouncement[]): string;
+//# sourceMappingURL=normalize.d.ts.map

package/dist/indexer/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../src/indexer/normalize.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAW/D;;GAEG;AACH,wBAAgB,kCAAkC,CAChD,GAAG,EAAE,mBAAmB,GACvB,sBAAsB,CAexB;AAED;;GAEG;AACH,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,mBAAmB,EAAE,GAC1B,MAAM,CAER"}

package/dist/indexer/normalize.js

@@ -0,0 +1,32 @@
+function hexToBytes(h) {
+    const s = h.startsWith("0x") ? h.slice(2) : h;
+    const out = [];
+    for (let i = 0; i < s.length; i += 2) {
+        out.push(Number.parseInt(s.slice(i, i + 2), 16));
+    }
+    return out;
+}
+/**
+ * Map a subgraph/indexer row into the JSON record expected by `scan_attestations_wasm`.
+ */
+export function indexerAnnouncementToScannerRecord(row) {
+    const bn = Number.parseInt(row.blockNumber, 10);
+    if (!Number.isFinite(bn)) {
+        throw new Error(`Invalid blockNumber on announcement ${row.transactionHash}: ${row.blockNumber}`);
+    }
+    return {
+        stealthAddress: row.stealthAddress,
+        viewTag: row.viewTag,
+        ephemeralPubKey: hexToBytes(row.etherealPublicKey),
+        metadata: hexToBytes(row.metadata),
+        txHash: row.transactionHash,
+        blockNumber: bn,
+    };
+}
+/**
+ * Batch-normalize indexer rows for WASM or playground inspection.
+ */
+export function indexerAnnouncementsToScannerJson(rows) {
+    return JSON.stringify(rows.map(indexerAnnouncementToScannerRecord));
+}
+//# sourceMappingURL=normalize.js.map

package/dist/indexer/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../src/indexer/normalize.ts"],"names":[],"mappings":"AAIA,SAAS,UAAU,CAAC,CAAM;IACxB,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kCAAkC,CAChD,GAAwB;IAExB,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,uCAAuC,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC,WAAW,EAAE,CACjF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,eAAe,EAAE,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC;QAClD,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,MAAM,EAAE,GAAG,CAAC,eAAe;QAC3B,WAAW,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iCAAiC,CAC/C,IAA2B;IAE3B,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/types/indexer.d.ts

@@ -0,0 +1,43 @@
+import type { Address, Hex } from "viem";
+/**
+ * Announcement row shape from a typical Graph subgraph (field names preserved).
+ *
+ * `etherealPublicKey` is the **ephemeral** secp256k1 public key (33-byte compressed hex),
+ * as commonly returned by indexers despite the name.
+ */
+export interface IndexerAnnouncement {
+    __typename?: string;
+    id?: string;
+    blockNumber: string;
+    etherealPublicKey: Hex;
+    logIndex: number;
+    metadata: Hex;
+    stealthAddress: Address;
+    transactionHash: Hex;
+    viewTag: number;
+}
+/**
+ * One output the recipient owns (from WASM `scan_attestations` + normalized context).
+ */
+export interface OwnedStealthOutput {
+    stealthAddress: Address;
+    transactionHash: Hex;
+    blockNumber: number;
+    logIndex: number;
+    viewTag: number;
+    ephemeralPublicKey: Hex;
+    /** Present when announcement carried PSR attestation metadata. */
+    attestationId?: number;
+}
+/**
+ * Aggregated balance for a single tracked asset across all owned stealth addresses.
+ */
+export interface TokenBalanceSummary {
+    /** `0x0000…0000` denotes native ETH when using {@link NATIVE_TOKEN_ADDRESS}. */
+    tokenAddress: Address;
+    symbol: string;
+    decimals: number;
+    /** Sum of raw units (wei for ETH, base units for ERC-20). */
+    totalRaw: bigint;
+}
+//# sourceMappingURL=indexer.d.ts.map

package/dist/types/indexer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.d.ts","sourceRoot":"","sources":["../../src/types/indexer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,GAAG,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,GAAG,CAAC;IACd,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,GAAG,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,OAAO,CAAC;IACxB,eAAe,EAAE,GAAG,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,GAAG,CAAC;IACxB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/types/indexer.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=indexer.js.map

package/dist/types/indexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.js","sourceRoot":"","sources":["../../src/types/indexer.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@opaquecash/opaque",
+  "version": "0.1.0",
+  "description": "Unified Opaque SDK client: config, indexer announcements, announce payloads, balances, traits",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": ["dist", "API.md", "README.md"],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@noble/curves": "^1.6.0",
+    "@noble/hashes": "^1.5.0",
+    "@opaquecash/psr-chain": "0.1.0",
+    "@opaquecash/psr-core": "0.1.0",
+    "@opaquecash/psr-prover": "0.1.0",
+    "@opaquecash/stealth-balance": "0.1.0",
+    "@opaquecash/stealth-chain": "0.1.0",
+    "@opaquecash/stealth-core": "0.1.0",
+    "@opaquecash/stealth-wasm": "0.1.0",
+    "viem": "^2.21.0"
+  },
+  "sideEffects": false
+}