@opaquecash/relayer-client 0.2.0

package/dist/client.d.ts

@@ -0,0 +1,66 @@
+/**
+ * `submitGasPrivate` and the building blocks behind it (spec/relayer-market.md). The
+ * flow: commit the payload, fund the escrow, advertise, collect + verify bids, pick a
+ * stake-weighted winner, and deliver the payload sealed to the winner's key. The
+ * relayer then accepts and submits on-chain; gas and submitter identity are theirs,
+ * not the user's.
+ */
+import { PublicKey } from "@solana/web3.js";
+import type { Hex } from "viem";
+import { type Advert, type Bid, type JobPayload, type PayloadEnvelope } from "./job.js";
+import { type EvmTxRequest } from "./escrow.js";
+import { type GatewayOptions } from "./gateway.js";
+import { type RegistryReaders, type VerifiedBid } from "./select.js";
+import type { TransactionInstruction } from "@solana/web3.js";
+export interface PreparedJob {
+    jobId: Hex;
+    payloadHash: Hex;
+    deadline: number;
+    fee: bigint;
+    advert: Advert;
+    /** Funding artifact for the user's wallet (one of these, by chain). */
+    evmCreateJob?: EvmTxRequest;
+    solanaCreateJob?: TransactionInstruction;
+}
+/** Options shared by the prepare + submit flow. */
+export interface PrepareOptions {
+    fee: bigint;
+    /** Absolute unix-seconds deadline; relayers must submit before it. */
+    deadline: number;
+    /** EVM `RelayerRegistry` address, or Solana `relayer-registry` program id. */
+    registry: string;
+    /** Solana only: the funding (creator) pubkey for the create_job instruction. */
+    creator?: PublicKey;
+    /** 32-byte job id; random if omitted. */
+    jobId?: Hex;
+    randomBytes?: (n: number) => Uint8Array;
+}
+/** Commit the payload and produce the advert + escrow funding artifact. */
+export declare function prepareJob(payload: JobPayload, opts: PrepareOptions): PreparedJob;
+/** Seal the payload to the winner's advertised x25519 key into a delivery envelope. */
+export declare function buildPayloadEnvelope(winner: Bid, payload: JobPayload, rand?: (n: number) => Uint8Array): PayloadEnvelope;
+/** End-to-end orchestration over an injected funding step and registry readers. */
+export interface SubmitGasPrivateOptions extends PrepareOptions {
+    payload: JobPayload;
+    gateway: GatewayOptions;
+    readers: RegistryReaders;
+    /** Submit + confirm the escrow funding tx (the user's wallet). */
+    fundEscrow: (job: PreparedJob) => Promise<void>;
+    /** Per-chain bid signature verifier (default EVM). */
+    verifySig?: (bid: Bid) => Promise<boolean>;
+    minBids?: number;
+    timeoutMs?: number;
+    random?: () => number;
+}
+export interface SubmitGasPrivateResult {
+    jobId: Hex;
+    payloadHash: Hex;
+    winner: VerifiedBid;
+}
+/**
+ * Run the whole flow. Throws if the escrow is not funded, no valid bid arrives, or
+ * the gateway is unreachable. On success the winning relayer will accept + submit;
+ * watch the escrow's `JobSubmitted` event (or poll `jobs(jobId).submitted`) to confirm.
+ */
+export declare function submitGasPrivate(opts: SubmitGasPrivateOptions): Promise<SubmitGasPrivateResult>;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,EAAW,GAAG,EAAE,MAAM,MAAM,CAAC;AAGzC,OAAO,EAKL,KAAK,MAAM,EACX,KAAK,GAAG,EACR,KAAK,UAAU,EACf,KAAK,eAAe,EACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAE9D,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,GAAG,CAAC;IACX,WAAW,EAAE,GAAG,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAED,mDAAmD;AACnD,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,sEAAsE;IACtE,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,yCAAyC;IACzC,KAAK,CAAC,EAAE,GAAG,CAAC;IACZ,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,UAAU,CAAC;CACzC;AAED,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,GAAG,WAAW,CAwCjF;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,GAAG,EACX,OAAO,EAAE,UAAU,EACnB,IAAI,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,UAAwB,GAC5C,eAAe,CAUjB;AAED,mFAAmF;AACnF,MAAM,WAAW,uBAAwB,SAAQ,cAAc;IAC7D,OAAO,EAAE,UAAU,CAAC;IACpB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,eAAe,CAAC;IACzB,kEAAkE;IAClE,UAAU,EAAE,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,sDAAsD;IACtD,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,GAAG,CAAC;IACX,WAAW,EAAE,GAAG,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,sBAAsB,CAAC,CAoBjC"}

package/dist/client.js

@@ -0,0 +1,101 @@
+/**
+ * `submitGasPrivate` and the building blocks behind it (spec/relayer-market.md). The
+ * flow: commit the payload, fund the escrow, advertise, collect + verify bids, pick a
+ * stake-weighted winner, and deliver the payload sealed to the winner's key. The
+ * relayer then accepts and submits on-chain; gas and submitter identity are theirs,
+ * not the user's.
+ */
+import { randomBytes } from "@noble/hashes/utils";
+import { PublicKey } from "@solana/web3.js";
+import { sealBox } from "./crypto.js";
+import { bytesToHex, hexToBytes, payloadBytes, payloadHash, } from "./job.js";
+import { buildEvmCreateJob, buildSolanaCreateJob, } from "./escrow.js";
+import { collectBids, postAdvert, postPayload, } from "./gateway.js";
+import { selectWinner, verifyBids, } from "./select.js";
+/** Commit the payload and produce the advert + escrow funding artifact. */
+export function prepareJob(payload, opts) {
+    const rand = opts.randomBytes ?? randomBytes;
+    const jobId = opts.jobId ?? bytesToHex(rand(32));
+    const hash = payloadHash(payload);
+    const advert = {
+        t: "advert",
+        v: 1,
+        jobId,
+        chain: payload.chain,
+        fee: opts.fee.toString(),
+        deadline: opts.deadline,
+        payloadHash: hash,
+    };
+    const prepared = {
+        jobId,
+        payloadHash: hash,
+        deadline: opts.deadline,
+        fee: opts.fee,
+        advert,
+    };
+    if (payload.chain === 2) {
+        prepared.evmCreateJob = buildEvmCreateJob({
+            registry: opts.registry,
+            jobId,
+            payloadHash: hash,
+            deadline: opts.deadline,
+            fee: opts.fee,
+        });
+    }
+    else {
+        if (!opts.creator)
+            throw new Error("Opaque relayer: Solana jobs need opts.creator");
+        prepared.solanaCreateJob = buildSolanaCreateJob({
+            program: new PublicKey(opts.registry),
+            creator: opts.creator,
+            jobId,
+            payloadHash: hash,
+            deadline: opts.deadline,
+            fee: opts.fee,
+        });
+    }
+    return prepared;
+}
+/** Seal the payload to the winner's advertised x25519 key into a delivery envelope. */
+export function buildPayloadEnvelope(winner, payload, rand = randomBytes) {
+    const recipient = hexToBytes(winner.x25519Pk);
+    const sealed = sealBox(recipient, payloadBytes(payload), rand);
+    return {
+        t: "payload",
+        v: 1,
+        jobId: winner.jobId,
+        to: winner.x25519Pk,
+        box: bytesToHexBase64(sealed),
+    };
+}
+/**
+ * Run the whole flow. Throws if the escrow is not funded, no valid bid arrives, or
+ * the gateway is unreachable. On success the winning relayer will accept + submit;
+ * watch the escrow's `JobSubmitted` event (or poll `jobs(jobId).submitted`) to confirm.
+ */
+export async function submitGasPrivate(opts) {
+    const prepared = prepareJob(opts.payload, opts);
+    await opts.fundEscrow(prepared);
+    await postAdvert(opts.gateway, prepared.advert);
+    const bids = await collectBids(opts.gateway, prepared.jobId, {
+        minBids: opts.minBids ?? 1,
+        timeoutMs: opts.timeoutMs ?? 15_000,
+    });
+    const verified = await verifyBids(bids, opts.fee, opts.readers, opts.verifySig);
+    const winner = selectWinner(verified, opts.random);
+    if (!winner) {
+        throw new Error(`Opaque relayer: no valid bid for job ${prepared.jobId} (${bids.length} raw bid(s))`);
+    }
+    const envelope = buildPayloadEnvelope(winner.bid, opts.payload, opts.randomBytes);
+    await postPayload(opts.gateway, envelope);
+    return { jobId: prepared.jobId, payloadHash: prepared.payloadHash, winner };
+}
+function bytesToHexBase64(b) {
+    // base64 without a Buffer dependency (works in browser + node).
+    let bin = "";
+    for (const x of b)
+        bin += String.fromCharCode(x);
+    // eslint-disable-next-line no-undef
+    return typeof btoa === "function" ? btoa(bin) : Buffer.from(b).toString("base64");
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,UAAU,EACV,UAAU,EACV,YAAY,EACZ,WAAW,GAKZ,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GAErB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,GAEZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,YAAY,EACZ,UAAU,GAGX,MAAM,aAAa,CAAC;AA4BrB,2EAA2E;AAC3E,MAAM,UAAU,UAAU,CAAC,OAAmB,EAAE,IAAoB;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,MAAM,GAAW;QACrB,CAAC,EAAE,QAAQ;QACX,CAAC,EAAE,CAAC;QACJ,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,WAAW,EAAE,IAAI;KAClB,CAAC;IACF,MAAM,QAAQ,GAAgB;QAC5B,KAAK;QACL,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM;KACP,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;QACxB,QAAQ,CAAC,YAAY,GAAG,iBAAiB,CAAC;YACxC,QAAQ,EAAE,IAAI,CAAC,QAAmB;YAClC,KAAK;YACL,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACpF,QAAQ,CAAC,eAAe,GAAG,oBAAoB,CAAC;YAC9C,OAAO,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK;YACL,WAAW,EAAE,IAAI;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,oBAAoB,CAClC,MAAW,EACX,OAAmB,EACnB,OAAkC,WAAW;IAE7C,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/D,OAAO;QACL,CAAC,EAAE,SAAS;QACZ,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,EAAE,EAAE,MAAM,CAAC,QAAQ;QACnB,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC;KAC9B,CAAC;AACJ,CAAC;AAsBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA6B;IAE7B,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAEhD,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE;QAC3D,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC;QAC1B,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM;KACpC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,wCAAwC,QAAQ,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,cAAc,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAClF,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAa;IACrC,gEAAgE;IAChE,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjD,oCAAoC;IACpC,OAAO,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACpF,CAAC"}

package/dist/crypto.d.ts

@@ -0,0 +1,21 @@
+/**
+ * NaCl crypto_box (x25519-xsalsa20-poly1305) sealing, matching the relayer node's
+ * `crypto_box` Rust side (spec/relayer-market.md §3.3). The box wire format is
+ * `epk(32) ‖ nonce(24) ‖ ciphertext`; the user seals to the winning relayer's
+ * advertised x25519 public key.
+ */
+/**
+ * Seal `plaintext` to `recipientX25519Pub`, returning `epk ‖ nonce(24) ‖ ct`.
+ * Interoperable with the relayer node's `crypto_box::SalsaBox`.
+ */
+export declare function sealBox(recipientX25519Pub: Uint8Array, plaintext: Uint8Array, randomBytes: (n: number) => Uint8Array): Uint8Array;
+/** Open a box addressed to `ourX25519Secret` (used in tests / read paths). */
+export declare function openBox(ourX25519Secret: Uint8Array, boxed: Uint8Array): Uint8Array;
+declare function hsalsa(dh: Uint8Array): Uint8Array;
+/**
+ * Derive the box identity the relayer node advertises, from its operator seed
+ * (`x25519_secret = keccak256("opaque-relayer-box-v1" ‖ seed)`). Exposed for tests
+ * that simulate a relayer; users only ever consume the advertised public key.
+ */
+export { hsalsa as _hsalsaForTests };
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH;;;GAGG;AACH,wBAAgB,OAAO,CACrB,kBAAkB,EAAE,UAAU,EAC9B,SAAS,EAAE,UAAU,EACrB,WAAW,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,UAAU,GACrC,UAAU,CAYZ;AAED,8EAA8E;AAC9E,wBAAgB,OAAO,CAAC,eAAe,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAOlF;AAoBD,iBAAS,MAAM,CAAC,EAAE,EAAE,UAAU,GAAG,UAAU,CAqE1C;AAED;;;;GAIG;AACH,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,CAAC"}

package/dist/crypto.js

@@ -0,0 +1,125 @@
+/**
+ * NaCl crypto_box (x25519-xsalsa20-poly1305) sealing, matching the relayer node's
+ * `crypto_box` Rust side (spec/relayer-market.md §3.3). The box wire format is
+ * `epk(32) ‖ nonce(24) ‖ ciphertext`; the user seals to the winning relayer's
+ * advertised x25519 public key.
+ */
+import { x25519 } from "@noble/curves/ed25519";
+import { xsalsa20poly1305 } from "@noble/ciphers/salsa";
+/**
+ * Seal `plaintext` to `recipientX25519Pub`, returning `epk ‖ nonce(24) ‖ ct`.
+ * Interoperable with the relayer node's `crypto_box::SalsaBox`.
+ */
+export function sealBox(recipientX25519Pub, plaintext, randomBytes) {
+    const ephSecret = randomBytes(32);
+    const ephPublic = x25519.getPublicKey(ephSecret);
+    const shared = naclBoxKey(ephSecret, recipientX25519Pub);
+    const nonce = randomBytes(24);
+    const cipher = xsalsa20poly1305(shared, nonce);
+    const ct = cipher.encrypt(plaintext);
+    const out = new Uint8Array(32 + 24 + ct.length);
+    out.set(ephPublic, 0);
+    out.set(nonce, 32);
+    out.set(ct, 56);
+    return out;
+}
+/** Open a box addressed to `ourX25519Secret` (used in tests / read paths). */
+export function openBox(ourX25519Secret, boxed) {
+    const epk = boxed.subarray(0, 32);
+    const nonce = boxed.subarray(32, 56);
+    const ct = boxed.subarray(56);
+    const shared = naclBoxKey(ourX25519Secret, epk);
+    const cipher = xsalsa20poly1305(shared, nonce);
+    return cipher.decrypt(ct);
+}
+/**
+ * NaCl `crypto_box_beforenm`: `HSalsa20(0^16, X25519(sk, pk))`. xsalsa20poly1305 takes
+ * a 32-byte key; NaCl's box derives that key by hashing the DH output with HSalsa20
+ * under a zero nonce. @noble/ciphers ships `hsalsa` via the salsa module.
+ */
+function naclBoxKey(secret, peerPublic) {
+    const dh = x25519.getSharedSecret(secret, peerPublic);
+    return hsalsa(dh);
+}
+// HSalsa20 core with a 16-byte zero nonce and the NaCl "sigma" constant, applied to
+// the 32-byte DH output to produce the box key (RFC: NaCl crypto_box_beforenm).
+const SIGMA = new TextEncoder().encode("expand 32-byte k");
+function rotl(x, b) {
+    return ((x << b) | (x >>> (32 - b))) >>> 0;
+}
+function hsalsa(dh) {
+    // Input: key = dh (32 bytes), nonce = 16 zero bytes.
+    const x = new Uint32Array(16);
+    const le = (b, i) => (b[i] | (b[i + 1] << 8) | (b[i + 2] << 16) | (b[i + 3] << 24)) >>> 0;
+    x[0] = le(SIGMA, 0);
+    x[5] = le(SIGMA, 4);
+    x[10] = le(SIGMA, 8);
+    x[15] = le(SIGMA, 12);
+    x[1] = le(dh, 0);
+    x[2] = le(dh, 4);
+    x[3] = le(dh, 8);
+    x[4] = le(dh, 12);
+    x[11] = le(dh, 16);
+    x[12] = le(dh, 20);
+    x[13] = le(dh, 24);
+    x[14] = le(dh, 28);
+    // nonce x[6..10] stay zero.
+    for (let i = 0; i < 20; i += 2) {
+        x[4] ^= rotl((x[0] + x[12]) >>> 0, 7);
+        x[8] ^= rotl((x[4] + x[0]) >>> 0, 9);
+        x[12] ^= rotl((x[8] + x[4]) >>> 0, 13);
+        x[0] ^= rotl((x[12] + x[8]) >>> 0, 18);
+        x[9] ^= rotl((x[5] + x[1]) >>> 0, 7);
+        x[13] ^= rotl((x[9] + x[5]) >>> 0, 9);
+        x[1] ^= rotl((x[13] + x[9]) >>> 0, 13);
+        x[5] ^= rotl((x[1] + x[13]) >>> 0, 18);
+        x[14] ^= rotl((x[10] + x[6]) >>> 0, 7);
+        x[2] ^= rotl((x[14] + x[10]) >>> 0, 9);
+        x[6] ^= rotl((x[2] + x[14]) >>> 0, 13);
+        x[10] ^= rotl((x[6] + x[2]) >>> 0, 18);
+        x[3] ^= rotl((x[15] + x[11]) >>> 0, 7);
+        x[7] ^= rotl((x[3] + x[15]) >>> 0, 9);
+        x[11] ^= rotl((x[7] + x[3]) >>> 0, 13);
+        x[15] ^= rotl((x[11] + x[7]) >>> 0, 18);
+        x[1] ^= rotl((x[0] + x[3]) >>> 0, 7);
+        x[2] ^= rotl((x[1] + x[0]) >>> 0, 9);
+        x[3] ^= rotl((x[2] + x[1]) >>> 0, 13);
+        x[0] ^= rotl((x[3] + x[2]) >>> 0, 18);
+        x[6] ^= rotl((x[5] + x[4]) >>> 0, 7);
+        x[7] ^= rotl((x[6] + x[5]) >>> 0, 9);
+        x[4] ^= rotl((x[7] + x[6]) >>> 0, 13);
+        x[5] ^= rotl((x[4] + x[7]) >>> 0, 18);
+        x[11] ^= rotl((x[10] + x[9]) >>> 0, 7);
+        x[8] ^= rotl((x[11] + x[10]) >>> 0, 9);
+        x[9] ^= rotl((x[8] + x[11]) >>> 0, 13);
+        x[10] ^= rotl((x[9] + x[8]) >>> 0, 18);
+        x[12] ^= rotl((x[15] + x[14]) >>> 0, 7);
+        x[13] ^= rotl((x[12] + x[15]) >>> 0, 9);
+        x[14] ^= rotl((x[13] + x[12]) >>> 0, 13);
+        x[15] ^= rotl((x[14] + x[13]) >>> 0, 18);
+    }
+    const out = new Uint8Array(32);
+    const wr = (v, i) => {
+        out[i] = v & 0xff;
+        out[i + 1] = (v >>> 8) & 0xff;
+        out[i + 2] = (v >>> 16) & 0xff;
+        out[i + 3] = (v >>> 24) & 0xff;
+    };
+    // HSalsa20 output words: 0,5,10,15,6,7,8,9.
+    wr(x[0], 0);
+    wr(x[5], 4);
+    wr(x[10], 8);
+    wr(x[15], 12);
+    wr(x[6], 16);
+    wr(x[7], 20);
+    wr(x[8], 24);
+    wr(x[9], 28);
+    return out;
+}
+/**
+ * Derive the box identity the relayer node advertises, from its operator seed
+ * (`x25519_secret = keccak256("opaque-relayer-box-v1" ‖ seed)`). Exposed for tests
+ * that simulate a relayer; users only ever consume the advertised public key.
+ */
+export { hsalsa as _hsalsaForTests };
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD;;;GAGG;AACH,MAAM,UAAU,OAAO,CACrB,kBAA8B,EAC9B,SAAqB,EACrB,WAAsC;IAEtC,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAChD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnB,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,OAAO,CAAC,eAA2B,EAAE,KAAiB;IACpE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,UAAU,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAAC,MAAkB,EAAE,UAAsB;IAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,oFAAoF;AACpF,gFAAgF;AAChF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAE3D,SAAS,IAAI,CAAC,CAAS,EAAE,CAAS;IAChC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,MAAM,CAAC,EAAc;IAC5B,qDAAqD;IACrD,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,EAAE,GAAG,CAAC,CAAa,EAAE,CAAS,EAAE,EAAE,CACtC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnB,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnB,4BAA4B;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE;QAClC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAClB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;QAC9B,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QAC/B,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IACjC,CAAC,CAAC;IACF,4CAA4C;IAC5C,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACZ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACZ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACb,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACd,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACb,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACb,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACb,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,CAAC"}

package/dist/escrow.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Escrow funding: build the `createJob` transaction the user submits to lock the fee
+ * against the payload commitment (spec/relayer-market.md §2.2). The user funds this
+ * from an address ideally unlinked to their primary identity (§8).
+ */
+import { type Address, type Hex } from "viem";
+import { PublicKey, TransactionInstruction } from "@solana/web3.js";
+/** Minimal `createJob` ABI for the EVM `RelayerRegistry`. */
+export declare const relayerRegistryCreateJobAbi: readonly [{
+    readonly type: "function";
+    readonly name: "createJob";
+    readonly stateMutability: "payable";
+    readonly inputs: readonly [{
+        readonly name: "jobId";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "payloadHash";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "deadline";
+        readonly type: "uint64";
+    }];
+    readonly outputs: readonly [];
+}];
+/** An EVM transaction request the caller signs and sends with their funding wallet. */
+export interface EvmTxRequest {
+    to: Address;
+    data: Hex;
+    value: bigint;
+}
+/** Build the EVM `createJob` call (value = fee). */
+export declare function buildEvmCreateJob(params: {
+    registry: Address;
+    jobId: Hex;
+    payloadHash: Hex;
+    deadline: number;
+    fee: bigint;
+}): EvmTxRequest;
+/** Derive the job escrow PDA: `["job", jobId]`. */
+export declare function solanaJobPda(program: PublicKey, jobId: Hex): PublicKey;
+/** Build the Solana `create_job` instruction (creator signs and pays the fee). */
+export declare function buildSolanaCreateJob(params: {
+    program: PublicKey;
+    creator: PublicKey;
+    jobId: Hex;
+    payloadHash: Hex;
+    deadline: number;
+    fee: bigint;
+}): TransactionInstruction;
+//# sourceMappingURL=escrow.d.ts.map

package/dist/escrow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escrow.d.ts","sourceRoot":"","sources":["../src/escrow.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAsB,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAClE,OAAO,EACL,SAAS,EAET,sBAAsB,EACvB,MAAM,iBAAiB,CAAC;AAIzB,6DAA6D;AAC7D,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;EAY9B,CAAC;AAEX,uFAAuF;AACvF,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;CACf;AAED,oDAAoD;AACpD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,GAAG,CAAC;IACX,WAAW,EAAE,GAAG,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,YAAY,CAUf;AAOD,mDAAmD;AACnD,wBAAgB,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,GAAG,SAAS,CAKtE;AAED,kFAAkF;AAClF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,SAAS,CAAC;IACnB,KAAK,EAAE,GAAG,CAAC;IACX,WAAW,EAAE,GAAG,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACb,GAAG,sBAAsB,CAiBzB"}

package/dist/escrow.js

@@ -0,0 +1,83 @@
+/**
+ * Escrow funding: build the `createJob` transaction the user submits to lock the fee
+ * against the payload commitment (spec/relayer-market.md §2.2). The user funds this
+ * from an address ideally unlinked to their primary identity (§8).
+ */
+import { encodeFunctionData } from "viem";
+import { PublicKey, SystemProgram, TransactionInstruction, } from "@solana/web3.js";
+import { sha256 } from "@noble/hashes/sha256";
+import { hexToBytes } from "./job.js";
+/** Minimal `createJob` ABI for the EVM `RelayerRegistry`. */
+export const relayerRegistryCreateJobAbi = [
+    {
+        type: "function",
+        name: "createJob",
+        stateMutability: "payable",
+        inputs: [
+            { name: "jobId", type: "bytes32" },
+            { name: "payloadHash", type: "bytes32" },
+            { name: "deadline", type: "uint64" },
+        ],
+        outputs: [],
+    },
+];
+/** Build the EVM `createJob` call (value = fee). */
+export function buildEvmCreateJob(params) {
+    return {
+        to: params.registry,
+        data: encodeFunctionData({
+            abi: relayerRegistryCreateJobAbi,
+            functionName: "createJob",
+            args: [params.jobId, params.payloadHash, BigInt(params.deadline)],
+        }),
+        value: params.fee,
+    };
+}
+/** Anchor global instruction discriminator: `sha256("global:<name>")[..8]`. */
+function disc(name) {
+    return sha256(new TextEncoder().encode(`global:${name}`)).subarray(0, 8);
+}
+/** Derive the job escrow PDA: `["job", jobId]`. */
+export function solanaJobPda(program, jobId) {
+    return PublicKey.findProgramAddressSync([new TextEncoder().encode("job"), hexToBytes(jobId)], program)[0];
+}
+/** Build the Solana `create_job` instruction (creator signs and pays the fee). */
+export function buildSolanaCreateJob(params) {
+    const data = concat([
+        disc("create_job"),
+        hexToBytes(params.jobId),
+        hexToBytes(params.payloadHash),
+        i64le(BigInt(params.deadline)),
+        u64le(params.fee),
+    ]);
+    return new TransactionInstruction({
+        programId: params.program,
+        keys: [
+            { pubkey: solanaJobPda(params.program, params.jobId), isSigner: false, isWritable: true },
+            { pubkey: params.creator, isSigner: true, isWritable: true },
+            { pubkey: SystemProgram.programId, isSigner: false, isWritable: false },
+        ],
+        data: Buffer.from(data),
+    });
+}
+function u64le(n) {
+    const b = new Uint8Array(8);
+    new DataView(b.buffer).setBigUint64(0, n, true);
+    return b;
+}
+function i64le(n) {
+    const b = new Uint8Array(8);
+    new DataView(b.buffer).setBigInt64(0, n, true);
+    return b;
+}
+function concat(parts) {
+    const len = parts.reduce((a, p) => a + p.length, 0);
+    const out = new Uint8Array(len);
+    let off = 0;
+    for (const p of parts) {
+        out.set(p, off);
+        off += p.length;
+    }
+    return out;
+}
+//# sourceMappingURL=escrow.js.map

package/dist/escrow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escrow.js","sourceRoot":"","sources":["../src/escrow.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAA0B,MAAM,MAAM,CAAC;AAClE,OAAO,EACL,SAAS,EACT,aAAa,EACb,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,WAAW;QACjB,eAAe,EAAE,SAAS;QAC1B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE;YAClC,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,EAAE;YACxC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE;SACrC;QACD,OAAO,EAAE,EAAE;KACZ;CACO,CAAC;AASX,oDAAoD;AACpD,MAAM,UAAU,iBAAiB,CAAC,MAMjC;IACC,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,QAAQ;QACnB,IAAI,EAAE,kBAAkB,CAAC;YACvB,GAAG,EAAE,2BAA2B;YAChC,YAAY,EAAE,WAAW;YACzB,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;SAClE,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,GAAG;KAClB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,YAAY,CAAC,OAAkB,EAAE,KAAU;IACzD,OAAO,SAAS,CAAC,sBAAsB,CACrC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EACpD,OAAO,CACR,CAAC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,MAOpC;IACC,MAAM,IAAI,GAAG,MAAM,CAAC;QAClB,IAAI,CAAC,YAAY,CAAC;QAClB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QACxB,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC;QAC9B,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;KAClB,CAAC,CAAC;IACH,OAAO,IAAI,sBAAsB,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC,OAAO;QACzB,IAAI,EAAE;YACJ,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;YACzF,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;YAC5D,EAAE,MAAM,EAAE,aAAa,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;SACxE;QACD,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;KACxB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAChD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,KAAmB;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/gateway.d.ts

@@ -0,0 +1,26 @@
+/**
+ * HTTP gateway client (spec/relayer-market.md §3.4). Any relayer node exposes this
+ * intake; a censoring gateway is bypassed by pointing at another node. The gateway
+ * re-gossips adverts/payloads and serves the bids it has seen.
+ */
+import type { Advert, Bid, PayloadEnvelope } from "./job.js";
+export interface GatewayOptions {
+    /** Base URL of a relayer node's gateway, e.g. `http://localhost:8787`. */
+    baseUrl: string;
+    /** Fetch implementation (default `globalThis.fetch`). */
+    fetchFn?: typeof fetch;
+}
+/** Advertise a funded job to the mesh. */
+export declare function postAdvert(o: GatewayOptions, advert: Advert): Promise<void>;
+/** Fetch the bids the gateway has seen for a job. */
+export declare function getBids(o: GatewayOptions, jobId: string): Promise<Bid[]>;
+/** Deliver the encrypted payload envelope to the winner via the gateway. */
+export declare function postPayload(o: GatewayOptions, env: PayloadEnvelope): Promise<void>;
+/** Poll for bids until `minBids` arrive or `timeoutMs` elapses. */
+export declare function collectBids(o: GatewayOptions, jobId: string, opts?: {
+    minBids?: number;
+    timeoutMs?: number;
+    intervalMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}): Promise<Bid[]>;
+//# sourceMappingURL=gateway.d.ts.map

package/dist/gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE7D,MAAM,WAAW,cAAc;IAC7B,0EAA0E;IAC1E,OAAO,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAQD,0CAA0C;AAC1C,wBAAsB,UAAU,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOjF;AAED,qDAAqD;AACrD,wBAAsB,OAAO,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAM9E;AAED,4EAA4E;AAC5E,wBAAsB,WAAW,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAUxF;AAED,mEAAmE;AACnE,wBAAsB,WAAW,CAC/B,CAAC,EAAE,cAAc,EACjB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAO,GAC9G,OAAO,CAAC,GAAG,EAAE,CAAC,CAYhB"}

package/dist/gateway.js

@@ -0,0 +1,54 @@
+/**
+ * HTTP gateway client (spec/relayer-market.md §3.4). Any relayer node exposes this
+ * intake; a censoring gateway is bypassed by pointing at another node. The gateway
+ * re-gossips adverts/payloads and serves the bids it has seen.
+ */
+function fetchOf(o) {
+    const f = o.fetchFn ?? globalThis.fetch;
+    if (!f)
+        throw new Error("Opaque relayer: no fetch available; pass fetchFn.");
+    return f;
+}
+/** Advertise a funded job to the mesh. */
+export async function postAdvert(o, advert) {
+    const res = await fetchOf(o)(`${o.baseUrl.replace(/\/$/, "")}/v1/jobs`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(advert),
+    });
+    if (!res.ok)
+        throw new Error(`gateway POST /v1/jobs -> ${res.status}`);
+}
+/** Fetch the bids the gateway has seen for a job. */
+export async function getBids(o, jobId) {
+    const res = await fetchOf(o)(`${o.baseUrl.replace(/\/$/, "")}/v1/jobs/${jobId}/bids`);
+    if (!res.ok)
+        throw new Error(`gateway GET bids -> ${res.status}`);
+    return (await res.json());
+}
+/** Deliver the encrypted payload envelope to the winner via the gateway. */
+export async function postPayload(o, env) {
+    const res = await fetchOf(o)(`${o.baseUrl.replace(/\/$/, "")}/v1/jobs/${env.jobId}/payload`, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify(env),
+    });
+    if (!res.ok)
+        throw new Error(`gateway POST payload -> ${res.status}`);
+}
+/** Poll for bids until `minBids` arrive or `timeoutMs` elapses. */
+export async function collectBids(o, jobId, opts = {}) {
+    const minBids = opts.minBids ?? 1;
+    const timeoutMs = opts.timeoutMs ?? 15_000;
+    const intervalMs = opts.intervalMs ?? 1_000;
+    const sleep = opts.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    const deadline = Date.now() + timeoutMs;
+    let bids = [];
+    for (;;) {
+        bids = await getBids(o, jobId);
+        if (bids.length >= minBids || Date.now() > deadline)
+            return bids;
+        await sleep(intervalMs);
+    }
+}
+//# sourceMappingURL=gateway.js.map

package/dist/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAWH,SAAS,OAAO,CAAC,CAAiB;IAChC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC;IACxC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,CAAiB,EAAE,MAAc;IAChE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,EAAE;QACtE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,CAAiB,EAAE,KAAa;IAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAC1B,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,KAAK,OAAO,CACxD,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAU,CAAC;AACrC,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAiB,EAAE,GAAoB;IACvE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAC1B,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,GAAG,CAAC,KAAK,UAAU,EAC9D;QACE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;KAC1B,CACF,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,CAAiB,EACjB,KAAa,EACb,OAA6G,EAAE;IAE/G,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,IAAI,GAAU,EAAE,CAAC;IACrB,SAAS,CAAC;QACR,IAAI,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * `@opaquecash/relayer-client` — client for the Opaque gas-private submission market
+ * (spec/relayer-market.md). Build a job and its payload commitment, fund the escrow,
+ * advertise to relayer nodes, verify + select a stake-weighted winner, and deliver the
+ * payload sealed to the winner's key. Used by PSR verify and (later) pool withdrawals
+ * to submit without linking the user's gas wallet to the action.
+ *
+ * @packageDocumentation
+ */
+export { CHAIN_ETHEREUM, CHAIN_SOLANA, BID_DOMAIN, evmPayloadBytes, evmPayloadHash, solanaPayloadBytes, solanaPayloadHash, payloadBytes, payloadHash, bidSigningHash, hexToBytes, bytesToHex, type Advert, type Bid, type PayloadEnvelope, type MessageTag, type JobPayload, type EvmJobPayload, type SolanaJobPayload, } from "./job.js";
+export { sealBox, openBox } from "./crypto.js";
+export { relayerRegistryCreateJobAbi, buildEvmCreateJob, buildSolanaCreateJob, solanaJobPda, type EvmTxRequest, } from "./escrow.js";
+export { postAdvert, getBids, postPayload, collectBids, type GatewayOptions, } from "./gateway.js";
+export { verifyEvmBidSignature, verifyBids, selectWinner, type RegistryReaders, type VerifiedBid, } from "./select.js";
+export { prepareJob, buildPayloadEnvelope, submitGasPrivate, type PreparedJob, type PrepareOptions, type SubmitGasPrivateOptions, type SubmitGasPrivateResult, } from "./client.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,cAAc,EACd,YAAY,EACZ,UAAU,EACV,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,UAAU,EACV,UAAU,EACV,KAAK,MAAM,EACX,KAAK,GAAG,EACR,KAAK,eAAe,EACpB,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,gBAAgB,GACtB,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,EACZ,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,UAAU,EACV,OAAO,EACP,WAAW,EACX,WAAW,EACX,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,YAAY,EACZ,KAAK,eAAe,EACpB,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,16 @@
+/**
+ * `@opaquecash/relayer-client` — client for the Opaque gas-private submission market
+ * (spec/relayer-market.md). Build a job and its payload commitment, fund the escrow,
+ * advertise to relayer nodes, verify + select a stake-weighted winner, and deliver the
+ * payload sealed to the winner's key. Used by PSR verify and (later) pool withdrawals
+ * to submit without linking the user's gas wallet to the action.
+ *
+ * @packageDocumentation
+ */
+export { CHAIN_ETHEREUM, CHAIN_SOLANA, BID_DOMAIN, evmPayloadBytes, evmPayloadHash, solanaPayloadBytes, solanaPayloadHash, payloadBytes, payloadHash, bidSigningHash, hexToBytes, bytesToHex, } from "./job.js";
+export { sealBox, openBox } from "./crypto.js";
+export { relayerRegistryCreateJobAbi, buildEvmCreateJob, buildSolanaCreateJob, solanaJobPda, } from "./escrow.js";
+export { postAdvert, getBids, postPayload, collectBids, } from "./gateway.js";
+export { verifyEvmBidSignature, verifyBids, selectWinner, } from "./select.js";
+export { prepareJob, buildPayloadEnvelope, submitGasPrivate, } from "./client.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,cAAc,EACd,YAAY,EACZ,UAAU,EACV,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,cAAc,EACd,UAAU,EACV,UAAU,GAQX,MAAM,UAAU,CAAC;AAElB,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE/C,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,oBAAoB,EACpB,YAAY,GAEb,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,UAAU,EACV,OAAO,EACP,WAAW,EACX,WAAW,GAEZ,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,YAAY,GAGb,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,gBAAgB,GAKjB,MAAM,aAAa,CAAC"}

package/dist/job.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Job construction and payload commitments (spec/relayer-market.md §2.3, §3). A job
+ * hides its payload behind a hash; the EVM payload is `abi.encode(target, calldata)`
+ * and the Solana payload is an instruction descriptor. These helpers compute the
+ * commitment the user passes to `createJob` and the box plaintext the winning relayer
+ * decodes.
+ */
+import { type Address, type Hex } from "viem";
+import { PublicKey, type TransactionInstruction } from "@solana/web3.js";
+/** Wormhole-convention chain ids, matching spec/UAB.md and the contracts. */
+export declare const CHAIN_ETHEREUM = 2;
+export declare const CHAIN_SOLANA = 1;
+/** Domain tag a bid signs (spec §3.2). */
+export declare const BID_DOMAIN = "opaque-relayer-bid-v1";
+/** A market message tag. */
+export type MessageTag = "advert" | "bid" | "payload";
+export interface Advert {
+    t: "advert";
+    v: 1;
+    jobId: Hex;
+    chain: number;
+    /** decimal string, base units (wei / lamports). */
+    fee: string;
+    deadline: number;
+    payloadHash: Hex;
+}
+export interface Bid {
+    t: "bid";
+    v: 1;
+    jobId: Hex;
+    chain: number;
+    operator: string;
+    x25519Pk: Hex;
+    sig: string;
+}
+export interface PayloadEnvelope {
+    t: "payload";
+    v: 1;
+    jobId: Hex;
+    to: Hex;
+    /** base64 of `epk ‖ nonce ‖ ct`. */
+    box: string;
+}
+/** An EVM job: the relayer will `target.call(calldata)` from the escrow. */
+export interface EvmJobPayload {
+    chain: typeof CHAIN_ETHEREUM;
+    target: Address;
+    calldata: Hex;
+}
+/** A Solana job: the relayer will CPI this instruction (no inner signers allowed). */
+export interface SolanaJobPayload {
+    chain: typeof CHAIN_SOLANA;
+    instruction: TransactionInstruction;
+}
+export type JobPayload = EvmJobPayload | SolanaJobPayload;
+/** The box plaintext for an EVM job: `abi.encode(address target, bytes data)`. */
+export declare function evmPayloadBytes(p: EvmJobPayload): Uint8Array;
+/** The EVM payload commitment: `keccak256(abi.encode(target, data))`. */
+export declare function evmPayloadHash(p: EvmJobPayload): Hex;
+/**
+ * The box plaintext for a Solana job: the self-describing instruction descriptor
+ * `program_id(32) ‖ u32_le(n) ‖ [pubkey(32) ‖ is_writable(1)]×n ‖ u32_le(len) ‖ data`
+ * that the relayer node decodes (see solana.rs `decode_descriptor`).
+ */
+export declare function solanaPayloadBytes(p: SolanaJobPayload): Uint8Array;
+/** The Solana payload commitment (spec §2.3): is_signer is committed false. */
+export declare function solanaPayloadHash(p: SolanaJobPayload): Hex;
+/** Payload commitment for any job. */
+export declare function payloadHash(p: JobPayload): Hex;
+/** Box plaintext for any job. */
+export declare function payloadBytes(p: JobPayload): Uint8Array;
+/** The 32-byte message a bid signs (spec §3.2). */
+export declare function bidSigningHash(jobId: Hex, x25519Pk: Hex): Hex;
+export declare function hexToBytes(hex: string): Uint8Array;
+export declare function bytesToHex(b: Uint8Array): Hex;
+export { PublicKey };
+//# sourceMappingURL=job.d.ts.map

package/dist/job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job.d.ts","sourceRoot":"","sources":["../src/job.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAkC,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,KAAK,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzE,6EAA6E;AAC7E,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,YAAY,IAAI,CAAC;AAE9B,0CAA0C;AAC1C,eAAO,MAAM,UAAU,0BAA0B,CAAC;AAElD,4BAA4B;AAC5B,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,KAAK,GAAG,SAAS,CAAC;AAEtD,MAAM,WAAW,MAAM;IACrB,CAAC,EAAE,QAAQ,CAAC;IACZ,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,GAAG,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,GAAG,CAAC;CAClB;AAED,MAAM,WAAW,GAAG;IAClB,CAAC,EAAE,KAAK,CAAC;IACT,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,GAAG,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,GAAG,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,EAAE,SAAS,CAAC;IACb,CAAC,EAAE,CAAC,CAAC;IACL,KAAK,EAAE,GAAG,CAAC;IACX,EAAE,EAAE,GAAG,CAAC;IACR,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,4EAA4E;AAC5E,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,OAAO,cAAc,CAAC;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,GAAG,CAAC;CACf;AAED,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,YAAY,CAAC;IAC3B,WAAW,EAAE,sBAAsB,CAAC;CACrC;AAED,MAAM,MAAM,UAAU,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAE1D,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,CAAC,EAAE,aAAa,GAAG,UAAU,CAM5D;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,CAAC,EAAE,aAAa,GAAG,GAAG,CAIpD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAYlE;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,gBAAgB,GAAG,GAAG,CAQ1D;AAED,sCAAsC;AACtC,wBAAgB,WAAW,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,CAE9C;AAED,iCAAiC;AACjC,wBAAgB,YAAY,CAAC,CAAC,EAAE,UAAU,GAAG,UAAU,CAEtD;AAED,mDAAmD;AACnD,wBAAgB,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,GAAG,GAAG,CAM7D;AAID,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAKlD;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,CAE7C;AAmBD,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/job.js

@@ -0,0 +1,95 @@
+/**
+ * Job construction and payload commitments (spec/relayer-market.md §2.3, §3). A job
+ * hides its payload behind a hash; the EVM payload is `abi.encode(target, calldata)`
+ * and the Solana payload is an instruction descriptor. These helpers compute the
+ * commitment the user passes to `createJob` and the box plaintext the winning relayer
+ * decodes.
+ */
+import { encodeAbiParameters, keccak256 } from "viem";
+import { PublicKey } from "@solana/web3.js";
+/** Wormhole-convention chain ids, matching spec/UAB.md and the contracts. */
+export const CHAIN_ETHEREUM = 2;
+export const CHAIN_SOLANA = 1;
+/** Domain tag a bid signs (spec §3.2). */
+export const BID_DOMAIN = "opaque-relayer-bid-v1";
+/** The box plaintext for an EVM job: `abi.encode(address target, bytes data)`. */
+export function evmPayloadBytes(p) {
+    const encoded = encodeAbiParameters([{ type: "address" }, { type: "bytes" }], [p.target, p.calldata]);
+    return hexToBytes(encoded);
+}
+/** The EVM payload commitment: `keccak256(abi.encode(target, data))`. */
+export function evmPayloadHash(p) {
+    return keccak256(encodeAbiParameters([{ type: "address" }, { type: "bytes" }], [p.target, p.calldata]));
+}
+/**
+ * The box plaintext for a Solana job: the self-describing instruction descriptor
+ * `program_id(32) ‖ u32_le(n) ‖ [pubkey(32) ‖ is_writable(1)]×n ‖ u32_le(len) ‖ data`
+ * that the relayer node decodes (see solana.rs `decode_descriptor`).
+ */
+export function solanaPayloadBytes(p) {
+    const ix = p.instruction;
+    if (ix.keys.some((k) => k.isSigner)) {
+        throw new Error("Opaque relayer: inner instruction accounts must not be signers (spec §2.3)");
+    }
+    const parts = [ix.programId.toBytes(), u32le(ix.keys.length)];
+    for (const k of ix.keys) {
+        parts.push(k.pubkey.toBytes(), Uint8Array.from([k.isWritable ? 1 : 0]));
+    }
+    const data = Uint8Array.from(ix.data);
+    parts.push(u32le(data.length), data);
+    return concat(parts);
+}
+/** The Solana payload commitment (spec §2.3): is_signer is committed false. */
+export function solanaPayloadHash(p) {
+    const ix = p.instruction;
+    const parts = [ix.programId.toBytes(), u32le(ix.keys.length)];
+    for (const k of ix.keys) {
+        parts.push(k.pubkey.toBytes(), Uint8Array.from([0]), Uint8Array.from([k.isWritable ? 1 : 0]));
+    }
+    parts.push(Uint8Array.from(ix.data));
+    return keccak256(concat(parts));
+}
+/** Payload commitment for any job. */
+export function payloadHash(p) {
+    return p.chain === CHAIN_ETHEREUM ? evmPayloadHash(p) : solanaPayloadHash(p);
+}
+/** Box plaintext for any job. */
+export function payloadBytes(p) {
+    return p.chain === CHAIN_ETHEREUM ? evmPayloadBytes(p) : solanaPayloadBytes(p);
+}
+/** The 32-byte message a bid signs (spec §3.2). */
+export function bidSigningHash(jobId, x25519Pk) {
+    return keccak256(concat([
+        new TextEncoder().encode(BID_DOMAIN),
+        hexToBytes(jobId),
+        hexToBytes(x25519Pk),
+    ]));
+}
+// --- small byte helpers (kept local; no extra deps) ---
+export function hexToBytes(hex) {
+    const h = hex.startsWith("0x") ? hex.slice(2) : hex;
+    const out = new Uint8Array(h.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = parseInt(h.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+export function bytesToHex(b) {
+    return `0x${Array.from(b).map((x) => x.toString(16).padStart(2, "0")).join("")}`;
+}
+function u32le(n) {
+    const b = new Uint8Array(4);
+    new DataView(b.buffer).setUint32(0, n, true);
+    return b;
+}
+function concat(parts) {
+    const len = parts.reduce((a, p) => a + p.length, 0);
+    const out = new Uint8Array(len);
+    let off = 0;
+    for (const p of parts) {
+        out.set(p, off);
+        off += p.length;
+    }
+    return out;
+}
+export { PublicKey };
+//# sourceMappingURL=job.js.map

package/dist/job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job.js","sourceRoot":"","sources":["../src/job.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,mBAAmB,EAAE,SAAS,EAA0B,MAAM,MAAM,CAAC;AAC9E,OAAO,EAAE,SAAS,EAA+B,MAAM,iBAAiB,CAAC;AAEzE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAE9B,0CAA0C;AAC1C,MAAM,CAAC,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAkDlD,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,CAAgB;IAC9C,MAAM,OAAO,GAAG,mBAAmB,CACjC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EACxC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CACvB,CAAC;IACF,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,cAAc,CAAC,CAAgB;IAC7C,OAAO,SAAS,CACd,mBAAmB,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CACtF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,CAAmB;IACpD,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC;IACzB,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,KAAK,GAAiB,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IACrC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,CAAmB;IACnD,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC;IACzB,MAAM,KAAK,GAAiB,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,WAAW,CAAC,CAAa;IACvC,OAAO,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,iCAAiC;AACjC,MAAM,UAAU,YAAY,CAAC,CAAa;IACxC,OAAO,CAAC,CAAC,KAAK,KAAK,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,cAAc,CAAC,KAAU,EAAE,QAAa;IACtD,OAAO,SAAS,CAAC,MAAM,CAAC;QACtB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC;QACpC,UAAU,CAAC,KAAK,CAAC;QACjB,UAAU,CAAC,QAAQ,CAAC;KACrB,CAAC,CAAC,CAAC;AACN,CAAC;AAED,yDAAyD;AAEzD,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAa;IACtC,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAS,CAAC;AAC1F,CAAC;AAED,SAAS,KAAK,CAAC,CAAS;IACtB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,KAAmB;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAChB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,CAAC"}

package/dist/select.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Bid verification and stake-weighted winner selection (spec/relayer-market.md §3.2,
+ * §6). A user MUST verify, before delivering the payload, that each candidate bid is
+ * signed by the registered operator, that the operator's free stake covers the fee,
+ * and that the advertised x25519 key matches the registry. Selection among the valid
+ * bids is client policy; the default weights uniformly at random by free stake.
+ */
+import { type Hex } from "viem";
+import { type Bid } from "./job.js";
+/** A verified bid plus the operator's free stake (base units). */
+export interface VerifiedBid {
+    bid: Bid;
+    freeStake: bigint;
+}
+/**
+ * Readers the user injects so selection can check on-chain truth without this package
+ * owning RPC. `freeStakeOf` returns the operator's unbonded stake; `registeredKey`
+ * returns the operator's registered x25519 key (0x…) or null if unregistered.
+ */
+export interface RegistryReaders {
+    freeStakeOf(operator: string): Promise<bigint>;
+    registeredKey(operator: string): Promise<Hex | null>;
+}
+/** Verify an EVM bid signature recovers the claimed operator address. */
+export declare function verifyEvmBidSignature(bid: Bid): Promise<boolean>;
+/**
+ * Filter bids to those that are well-formed, signed by the registered operator, whose
+ * registered key matches the advertised key, and whose free stake covers `fee`.
+ * `verifySig` defaults to the EVM verifier; pass a Solana ed25519 verifier for `.sol`.
+ */
+export declare function verifyBids(bids: Bid[], fee: bigint, readers: RegistryReaders, verifySig?: (bid: Bid) => Promise<boolean>): Promise<VerifiedBid[]>;
+/**
+ * Pick a winner among verified bids, weighted by free stake (spec §6 deters Sybil
+ * bidding). `random` returns a float in [0, 1); injectable for determinism in tests.
+ */
+export declare function selectWinner(verified: VerifiedBid[], random?: () => number): VerifiedBid | null;
+//# sourceMappingURL=select.d.ts.map

package/dist/select.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.d.ts","sourceRoot":"","sources":["../src/select.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAA+B,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAC7D,OAAO,EAAkC,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC;AAEpE,kEAAkE;AAClE,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,GAAG,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;CACtD;AAED,yEAAyE;AACzE,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAatE;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,GAAG,EAAE,EACX,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,eAAe,EACxB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,OAAO,CAAC,GACzC,OAAO,CAAC,WAAW,EAAE,CAAC,CAYxB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,WAAW,EAAE,EACvB,MAAM,GAAE,MAAM,MAAoB,GACjC,WAAW,GAAG,IAAI,CAWpB"}

package/dist/select.js

@@ -0,0 +1,67 @@
+/**
+ * Bid verification and stake-weighted winner selection (spec/relayer-market.md §3.2,
+ * §6). A user MUST verify, before delivering the payload, that each candidate bid is
+ * signed by the registered operator, that the operator's free stake covers the fee,
+ * and that the advertised x25519 key matches the registry. Selection among the valid
+ * bids is client policy; the default weights uniformly at random by free stake.
+ */
+import { hashMessage, recoverAddress } from "viem";
+import { bidSigningHash, CHAIN_ETHEREUM } from "./job.js";
+/** Verify an EVM bid signature recovers the claimed operator address. */
+export async function verifyEvmBidSignature(bid) {
+    if (bid.chain !== CHAIN_ETHEREUM)
+        return false;
+    try {
+        // The operator signs the personal_sign of the bid hash; recover and compare.
+        const digest = bidSigningHash(bid.jobId, bid.x25519Pk);
+        const recovered = await recoverAddress({
+            hash: hashMessage({ raw: digest }),
+            signature: bid.sig,
+        });
+        return recovered.toLowerCase() === bid.operator.toLowerCase();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Filter bids to those that are well-formed, signed by the registered operator, whose
+ * registered key matches the advertised key, and whose free stake covers `fee`.
+ * `verifySig` defaults to the EVM verifier; pass a Solana ed25519 verifier for `.sol`.
+ */
+export async function verifyBids(bids, fee, readers, verifySig) {
+    const out = [];
+    for (const bid of bids) {
+        const sigOk = verifySig ? await verifySig(bid) : await verifyEvmBidSignature(bid);
+        if (!sigOk)
+            continue;
+        const registered = await readers.registeredKey(bid.operator);
+        if (!registered || registered.toLowerCase() !== bid.x25519Pk.toLowerCase())
+            continue;
+        const freeStake = await readers.freeStakeOf(bid.operator);
+        if (freeStake < fee)
+            continue;
+        out.push({ bid, freeStake });
+    }
+    return out;
+}
+/**
+ * Pick a winner among verified bids, weighted by free stake (spec §6 deters Sybil
+ * bidding). `random` returns a float in [0, 1); injectable for determinism in tests.
+ */
+export function selectWinner(verified, random = Math.random) {
+    if (verified.length === 0)
+        return null;
+    const total = verified.reduce((a, v) => a + v.freeStake, 0n);
+    if (total === 0n)
+        return verified[0];
+    // Weighted pick: scale the random draw into the cumulative stake range.
+    let target = BigInt(Math.floor(random() * 1e9)) * total / 1000000000n;
+    for (const v of verified) {
+        if (target < v.freeStake)
+            return v;
+        target -= v.freeStake;
+    }
+    return verified[verified.length - 1];
+}
+//# sourceMappingURL=select.js.map

package/dist/select.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"select.js","sourceRoot":"","sources":["../src/select.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAY,MAAM,MAAM,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAY,MAAM,UAAU,CAAC;AAkBpE,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAQ;IAClD,IAAI,GAAG,CAAC,KAAK,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC;QACH,6EAA6E;QAC7E,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC;YACrC,IAAI,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;YAClC,SAAS,EAAE,GAAG,CAAC,GAAU;SAC1B,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAW,EACX,GAAW,EACX,OAAwB,EACxB,SAA0C;IAE1C,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE;YAAE,SAAS;QACrF,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,SAAS,GAAG,GAAG;YAAE,SAAS;QAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAuB,EACvB,SAAuB,IAAI,CAAC,MAAM;IAElC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrC,wEAAwE;IACxE,IAAI,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,WAAc,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,MAAM,GAAG,CAAC,CAAC,SAAS;YAAE,OAAO,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC;IACxB,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@opaquecash/relayer-client",
+  "version": "0.2.0",
+  "description": "Client for the Opaque gas-private submission market: build jobs, fund the escrow, collect relayer bids, encrypt the payload to the winner, and track settlement (spec/relayer-market.md)",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "rm -rf dist"
+  },
+  "dependencies": {
+    "@noble/ciphers": "^1.0.0",
+    "@noble/curves": "^1.6.0",
+    "@noble/hashes": "^1.5.0",
+    "@opaquecash/deployments": "0.2.0",
+    "@solana/web3.js": "^1.98.4",
+    "viem": "^2.21.0"
+  },
+  "sideEffects": false,
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/opaquecash/sdk.git",
+    "directory": "packages/relayer-client"
+  },
+  "homepage": "https://docs.opaque.cash",
+  "publishConfig": {
+    "access": "public"
+  }
+}