@orbinum/sdk 0.23.0 → 0.25.0

package/dist/index.d.mts

@@ -124,7 +124,7 @@ declare class SubstrateClient {
     static connect(wsUrl: string, timeoutMs?: number): Promise<SubstrateClient>;
     /**
      * Performs a raw JSON-RPC request. Use this for custom Orbinum RPCs
-     * (shieldedPool_*, privacy_*, etc.).
+     * (`privacy_*`, `zkVerifier_*`, `relayer_*`, etc.).
      */
     request<T>(method: string, params?: unknown[]): Promise<T>;
     /**
@@ -1718,6 +1718,46 @@ interface SelfEphWindowEntry {
  */
 declare function selfEphWindow(spendingKey: bigint, ivkPacked: Uint8Array, from: number, count: number): SelfEphWindowEntry[];
 
+/**
+ * The secret shared by a sender/receiver pair: ECDH between one side's viewing
+ * SECRET key and the other side's viewing PUBLIC key. Symmetric — both parties
+ * compute the same 32 bytes from opposite inputs, which is what lets the
+ * sender choose an ephemeral the receiver can predict.
+ *
+ * @param myViewingSk  32-byte viewing secret key (from `deriveViewingSecretKey`).
+ * @param theirIvkPacked 32-byte LE packed viewing public key of the other party.
+ */
+declare function derivePairwiseSharedSecret(myViewingSk: Uint8Array, theirIvkPacked: Uint8Array): Uint8Array;
+/**
+ * The ephemeral secret for the `index`-th note between this pair. Feed it to
+ * `EncryptedMemo.encrypt` / `NoteBuilder.build` as `ephSkOverride`.
+ */
+declare function derivePairwiseEphSk(pairSecret: Uint8Array, index: number): Uint8Array;
+/** One precomputed pairwise window entry — same shape as `SelfEphWindowEntry`. */
+interface PairwiseEphWindowEntry {
+    index: number;
+    /** 0x-prefixed LE-packed ephPk — byte-identical to the memo's last 32 bytes. */
+    ephPkHex: string;
+    /** ECDH shared secret vs the RECEIVER's ivk — feeds decryptWithSharedSecret. */
+    sharedSecret: Uint8Array;
+}
+/**
+ * Precomputes the discovery window [from, from+count) for one counterparty:
+ * for each index, the ephPk that party would publish and the secret needed to
+ * open the memo. One EC pass per sender up front; the scan then matches by hex
+ * equality with no per-hint EC work.
+ *
+ * The cost is paid once per sender and reused across every page of the scan,
+ * which is what makes it worth building — unlike a per-hint precompute, which
+ * measured 26× SLOWER than just doing the multiplication.
+ *
+ * @param pairSecret       From `derivePairwiseSharedSecret`.
+ * @param receiverIvkPacked The RECEIVER's packed viewing public key — the memo
+ *                          is encrypted to it, so the shared secret is against
+ *                          that key regardless of which side is precomputing.
+ */
+declare function pairwiseEphWindow(pairSecret: Uint8Array, receiverIvkPacked: Uint8Array, from: number, count: number): PairwiseEphWindowEntry[];
+
 /**
  * NoteDecryptor
  *
@@ -2203,7 +2243,7 @@ declare function deriveViewingSecretKey(spendingKey: bigint): Uint8Array;
  * Derive the packed BabyJubJub viewing public key (ivk) from ivsk bytes.
  *
  *   ivsk_scalar = BigInt(ivsk_bytes_BE) % BABYJUB_SUBORDER  (clamped to [1, ∞))
- *   ivk_point   = mulPointEscalar(Base8, ivsk_scalar)       → [Ax, Ay]
+ *   ivk_point   = fastMulBase(ivsk_scalar)                  → [Ax, Ay]
  *   result      = bigintTo32Le(packPoint([Ax, Ay]))          → 32-byte Uint8Array (LE)
  *
  * The packed bigint is stored in little-endian so it is consistent with the
@@ -3564,4 +3604,4 @@ interface ExtrinsicFailedData {
     dispatch_info: DispatchInfo;
 }
 
-export { type ActiveVersionSetEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type Bytes32, CURRENT_CIRCUIT_VERSION, type ChainInfo, CircuitId, CircuitId as CircuitIdType, CircuitVersionResolver, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedBatchArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedRemarkArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, KNOWN_PRECOMPILES, type KnownPrecompileInfo, MIN_SIGNATURE_BYTES, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, NoteBuilder, type NoteDisclosure, type NoteInput, type NoteStatusUpdate, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAssetArgs, type RegisterVerificationKeyArgs, type RelayerInfo, RelayerStatusModule, type RemoveVerificationKeyArgs, type ReservedEventData, type ResolvedSpendVersion, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SPENDING_KEY_VERIFYING_CONTRACT, SPENDING_KEY_WARNING, type ScanCommitment, type SelfEphWindowEntry, type SetActiveVersionArgs, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, type SpendingKeyTypedData, type StatusChangeEvent, type StatusListener, SubstrateClient, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TryDecryptOptions, type TxResult, type UnsafeTxOptions, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, blindTag, buildDummyTransferInput, bytesToBigintLE, canonicalAccountId, computeNoteCommitment, computeNullifier, computePathIndices, createNoteDisclosureKey, decodeNoteDisclosureKey, decodePrecompileCalldata, decryptJson, decryptNoteRecord, deriveMasterKeyBytes, deriveOwnerPk, deriveSelfEphSk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessageV2, deriveSpendingKeyTypedData, deriveStealthOwnerPk, deriveStealthSk, deriveVaultBlindKey, deriveVaultKey, deriveViewTag, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, noteBlindTag, randomBlinding, recoverOwnerPkPoint, selectNotes, selfEphWindow, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, treeIdOf, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };
+export { type ActiveVersionSetEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type Bytes32, CURRENT_CIRCUIT_VERSION, type ChainInfo, CircuitId, CircuitId as CircuitIdType, CircuitVersionResolver, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedBatchArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedRemarkArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, KNOWN_PRECOMPILES, type KnownPrecompileInfo, MIN_SIGNATURE_BYTES, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, NoteBuilder, type NoteDisclosure, type NoteInput, type NoteStatusUpdate, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, type PairwiseEphWindowEntry, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAssetArgs, type RegisterVerificationKeyArgs, type RelayerInfo, RelayerStatusModule, type RemoveVerificationKeyArgs, type ReservedEventData, type ResolvedSpendVersion, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SPENDING_KEY_VERIFYING_CONTRACT, SPENDING_KEY_WARNING, type ScanCommitment, type SelfEphWindowEntry, type SetActiveVersionArgs, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, type SpendingKeyTypedData, type StatusChangeEvent, type StatusListener, SubstrateClient, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TryDecryptOptions, type TxResult, type UnsafeTxOptions, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, blindTag, buildDummyTransferInput, bytesToBigintLE, canonicalAccountId, computeNoteCommitment, computeNullifier, computePathIndices, createNoteDisclosureKey, decodeNoteDisclosureKey, decodePrecompileCalldata, decryptJson, decryptNoteRecord, deriveMasterKeyBytes, deriveOwnerPk, derivePairwiseEphSk, derivePairwiseSharedSecret, deriveSelfEphSk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessageV2, deriveSpendingKeyTypedData, deriveStealthOwnerPk, deriveStealthSk, deriveVaultBlindKey, deriveVaultKey, deriveViewTag, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, noteBlindTag, pairwiseEphWindow, randomBlinding, recoverOwnerPkPoint, selectNotes, selfEphWindow, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, treeIdOf, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };

package/dist/index.d.ts

@@ -124,7 +124,7 @@ declare class SubstrateClient {
     static connect(wsUrl: string, timeoutMs?: number): Promise<SubstrateClient>;
     /**
      * Performs a raw JSON-RPC request. Use this for custom Orbinum RPCs
-     * (shieldedPool_*, privacy_*, etc.).
+     * (`privacy_*`, `zkVerifier_*`, `relayer_*`, etc.).
      */
     request<T>(method: string, params?: unknown[]): Promise<T>;
     /**
@@ -1718,6 +1718,46 @@ interface SelfEphWindowEntry {
  */
 declare function selfEphWindow(spendingKey: bigint, ivkPacked: Uint8Array, from: number, count: number): SelfEphWindowEntry[];
 
+/**
+ * The secret shared by a sender/receiver pair: ECDH between one side's viewing
+ * SECRET key and the other side's viewing PUBLIC key. Symmetric — both parties
+ * compute the same 32 bytes from opposite inputs, which is what lets the
+ * sender choose an ephemeral the receiver can predict.
+ *
+ * @param myViewingSk  32-byte viewing secret key (from `deriveViewingSecretKey`).
+ * @param theirIvkPacked 32-byte LE packed viewing public key of the other party.
+ */
+declare function derivePairwiseSharedSecret(myViewingSk: Uint8Array, theirIvkPacked: Uint8Array): Uint8Array;
+/**
+ * The ephemeral secret for the `index`-th note between this pair. Feed it to
+ * `EncryptedMemo.encrypt` / `NoteBuilder.build` as `ephSkOverride`.
+ */
+declare function derivePairwiseEphSk(pairSecret: Uint8Array, index: number): Uint8Array;
+/** One precomputed pairwise window entry — same shape as `SelfEphWindowEntry`. */
+interface PairwiseEphWindowEntry {
+    index: number;
+    /** 0x-prefixed LE-packed ephPk — byte-identical to the memo's last 32 bytes. */
+    ephPkHex: string;
+    /** ECDH shared secret vs the RECEIVER's ivk — feeds decryptWithSharedSecret. */
+    sharedSecret: Uint8Array;
+}
+/**
+ * Precomputes the discovery window [from, from+count) for one counterparty:
+ * for each index, the ephPk that party would publish and the secret needed to
+ * open the memo. One EC pass per sender up front; the scan then matches by hex
+ * equality with no per-hint EC work.
+ *
+ * The cost is paid once per sender and reused across every page of the scan,
+ * which is what makes it worth building — unlike a per-hint precompute, which
+ * measured 26× SLOWER than just doing the multiplication.
+ *
+ * @param pairSecret       From `derivePairwiseSharedSecret`.
+ * @param receiverIvkPacked The RECEIVER's packed viewing public key — the memo
+ *                          is encrypted to it, so the shared secret is against
+ *                          that key regardless of which side is precomputing.
+ */
+declare function pairwiseEphWindow(pairSecret: Uint8Array, receiverIvkPacked: Uint8Array, from: number, count: number): PairwiseEphWindowEntry[];
+
 /**
  * NoteDecryptor
  *
@@ -2203,7 +2243,7 @@ declare function deriveViewingSecretKey(spendingKey: bigint): Uint8Array;
  * Derive the packed BabyJubJub viewing public key (ivk) from ivsk bytes.
  *
  *   ivsk_scalar = BigInt(ivsk_bytes_BE) % BABYJUB_SUBORDER  (clamped to [1, ∞))
- *   ivk_point   = mulPointEscalar(Base8, ivsk_scalar)       → [Ax, Ay]
+ *   ivk_point   = fastMulBase(ivsk_scalar)                  → [Ax, Ay]
  *   result      = bigintTo32Le(packPoint([Ax, Ay]))          → 32-byte Uint8Array (LE)
  *
  * The packed bigint is stored in little-endian so it is consistent with the
@@ -3564,4 +3604,4 @@ interface ExtrinsicFailedData {
     dispatch_info: DispatchInfo;
 }
 
-export { type ActiveVersionSetEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type Bytes32, CURRENT_CIRCUIT_VERSION, type ChainInfo, CircuitId, CircuitId as CircuitIdType, CircuitVersionResolver, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedBatchArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedRemarkArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, KNOWN_PRECOMPILES, type KnownPrecompileInfo, MIN_SIGNATURE_BYTES, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, NoteBuilder, type NoteDisclosure, type NoteInput, type NoteStatusUpdate, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAssetArgs, type RegisterVerificationKeyArgs, type RelayerInfo, RelayerStatusModule, type RemoveVerificationKeyArgs, type ReservedEventData, type ResolvedSpendVersion, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SPENDING_KEY_VERIFYING_CONTRACT, SPENDING_KEY_WARNING, type ScanCommitment, type SelfEphWindowEntry, type SetActiveVersionArgs, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, type SpendingKeyTypedData, type StatusChangeEvent, type StatusListener, SubstrateClient, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TryDecryptOptions, type TxResult, type UnsafeTxOptions, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, blindTag, buildDummyTransferInput, bytesToBigintLE, canonicalAccountId, computeNoteCommitment, computeNullifier, computePathIndices, createNoteDisclosureKey, decodeNoteDisclosureKey, decodePrecompileCalldata, decryptJson, decryptNoteRecord, deriveMasterKeyBytes, deriveOwnerPk, deriveSelfEphSk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessageV2, deriveSpendingKeyTypedData, deriveStealthOwnerPk, deriveStealthSk, deriveVaultBlindKey, deriveVaultKey, deriveViewTag, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, noteBlindTag, randomBlinding, recoverOwnerPkPoint, selectNotes, selfEphWindow, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, treeIdOf, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };
+export { type ActiveVersionSetEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type Bytes32, CURRENT_CIRCUIT_VERSION, type ChainInfo, CircuitId, CircuitId as CircuitIdType, CircuitVersionResolver, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedBatchArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedRemarkArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, KNOWN_PRECOMPILES, type KnownPrecompileInfo, MIN_SIGNATURE_BYTES, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, NoteBuilder, type NoteDisclosure, type NoteInput, type NoteStatusUpdate, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, type PairwiseEphWindowEntry, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAssetArgs, type RegisterVerificationKeyArgs, type RelayerInfo, RelayerStatusModule, type RemoveVerificationKeyArgs, type ReservedEventData, type ResolvedSpendVersion, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SPENDING_KEY_VERIFYING_CONTRACT, SPENDING_KEY_WARNING, type ScanCommitment, type SelfEphWindowEntry, type SetActiveVersionArgs, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, type SpendingKeyTypedData, type StatusChangeEvent, type StatusListener, SubstrateClient, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TryDecryptOptions, type TxResult, type UnsafeTxOptions, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, blindTag, buildDummyTransferInput, bytesToBigintLE, canonicalAccountId, computeNoteCommitment, computeNullifier, computePathIndices, createNoteDisclosureKey, decodeNoteDisclosureKey, decodePrecompileCalldata, decryptJson, decryptNoteRecord, deriveMasterKeyBytes, deriveOwnerPk, derivePairwiseEphSk, derivePairwiseSharedSecret, deriveSelfEphSk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessageV2, deriveSpendingKeyTypedData, deriveStealthOwnerPk, deriveStealthSk, deriveVaultBlindKey, deriveVaultKey, deriveViewTag, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, noteBlindTag, pairwiseEphWindow, randomBlinding, recoverOwnerPkPoint, selectNotes, selfEphWindow, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, treeIdOf, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };

package/dist/index.js

@@ -74,6 +74,8 @@ __export(index_exports, {
   decryptNoteRecord: () => decryptNoteRecord,
   deriveMasterKeyBytes: () => deriveMasterKeyBytes,
   deriveOwnerPk: () => deriveOwnerPk,
+  derivePairwiseEphSk: () => derivePairwiseEphSk,
+  derivePairwiseSharedSecret: () => derivePairwiseSharedSecret,
   deriveSelfEphSk: () => deriveSelfEphSk,
   deriveSpendingKeyFromSignature: () => deriveSpendingKeyFromSignature,
   deriveSpendingKeyMessageV2: () => deriveSpendingKeyMessageV2,
@@ -117,6 +119,7 @@ __export(index_exports, {
   mapZkEventData: () => mapZkEventData,
   normalizeEvmAddress: () => normalizeEvmAddress,
   noteBlindTag: () => noteBlindTag,
+  pairwiseEphWindow: () => pairwiseEphWindow,
   randomBlinding: () => randomBlinding,
   recoverOwnerPkPoint: () => recoverOwnerPkPoint,
   selectNotes: () => selectNotes,
@@ -279,7 +282,7 @@ var SubstrateClient = class _SubstrateClient {
   }
   /**
    * Performs a raw JSON-RPC request. Use this for custom Orbinum RPCs
-   * (shieldedPool_*, privacy_*, etc.).
+   * (`privacy_*`, `zkVerifier_*`, `relayer_*`, etc.).
    */
   async request(method, params = []) {
     return this._papi._request(method, params);
@@ -3307,6 +3310,42 @@ function selfEphWindow(spendingKey, ivkPacked, from, count) {
   return entries;
 }
 
+// src/shielded-pool/protocol/pairwiseEph.ts
+var import_sha24 = require("@noble/hashes/sha2.js");
+var import_baby_jubjub6 = require("@zk-kit/baby-jubjub");
+var PAIRWISE_EPH_DOMAIN = new TextEncoder().encode("orbinum-pairwise-eph-v1");
+function derivePairwiseSharedSecret(myViewingSk, theirIvkPacked) {
+  const theirPoint = (0, import_baby_jubjub6.unpackPoint)(bytesToBigintLE(theirIvkPacked));
+  if (!theirPoint) throw new Error("derivePairwiseSharedSecret: invalid viewing public key");
+  const shared = fastMulPoint(theirPoint, bytesToBjjScalar(myViewingSk));
+  return bigintTo32Le(shared[0]);
+}
+function derivePairwiseEphSk(pairSecret, index) {
+  const h = import_sha24.sha256.create();
+  h.update(PAIRWISE_EPH_DOMAIN);
+  h.update(pairSecret);
+  const idx = new Uint8Array(4);
+  new DataView(idx.buffer).setUint32(0, index >>> 0, true);
+  h.update(idx);
+  return h.digest();
+}
+function pairwiseEphWindow(pairSecret, receiverIvkPacked, from, count) {
+  const ivkPoint = (0, import_baby_jubjub6.unpackPoint)(bytesToBigintLE(receiverIvkPacked));
+  if (!ivkPoint) throw new Error("pairwiseEphWindow: invalid viewing public key");
+  const entries = [];
+  for (let i = from; i < from + count; i++) {
+    const scalar = bytesToBjjScalar(derivePairwiseEphSk(pairSecret, i));
+    const ephPk = fastMulBase(scalar);
+    const sharedPoint = fastMulPoint(ivkPoint, scalar);
+    entries.push({
+      index: i,
+      ephPkHex: toHex(bigintTo32Le((0, import_baby_jubjub6.packPoint)(ephPk))),
+      sharedSecret: bigintTo32Le(sharedPoint[0])
+    });
+  }
+  return entries;
+}
+
 // src/shielded-pool/protocol/NoteDecryptor.ts
 var import_poseidon_lite2 = require("poseidon-lite");
 function computeNullifier(commitment, spendingKey) {
@@ -3539,8 +3578,8 @@ ${canonicalAccountId(address)}`;
 
 // src/privacy-keys/PrivacyKeys.ts
 var import_hkdf2 = require("@noble/hashes/hkdf.js");
-var import_sha24 = require("@noble/hashes/sha2.js");
-var import_baby_jubjub6 = require("@zk-kit/baby-jubjub");
+var import_sha25 = require("@noble/hashes/sha2.js");
+var import_baby_jubjub7 = require("@zk-kit/baby-jubjub");
 var IVK_DOMAIN = new TextEncoder().encode("orbinum-ivk-v1");
 var KEY_VERSION = "v2";
 var MIN_SIGNATURE_BYTES = 32;
@@ -3557,7 +3596,7 @@ async function deriveMasterKeyBytes(signatureHex, chainId, address) {
   const info = new TextEncoder().encode(
     `orbinum-sk-${KEY_VERSION}:${chainId}:${canonicalAccountId(address)}`
   );
-  return (0, import_hkdf2.hkdf)(import_sha24.sha256, sigBytes, new Uint8Array(0), info, 32);
+  return (0, import_hkdf2.hkdf)(import_sha25.sha256, sigBytes, new Uint8Array(0), info, 32);
 }
 async function deriveSpendingKeyFromSignature(signatureHex, chainId, address) {
   const masterBytes = await deriveMasterKeyBytes(signatureHex, chainId, address);
@@ -3566,17 +3605,17 @@ async function deriveSpendingKeyFromSignature(signatureHex, chainId, address) {
 }
 function deriveViewingSecretKey(spendingKey) {
   const ikm = bigintTo32Le(spendingKey);
-  return (0, import_hkdf2.hkdf)(import_sha24.sha256, ikm, void 0, IVK_DOMAIN, 32);
+  return (0, import_hkdf2.hkdf)(import_sha25.sha256, ikm, void 0, IVK_DOMAIN, 32);
 }
 function deriveViewingPublicKey(ivsk) {
   const ivskScalar = BigInt(toHex(ivsk)) % BABYJUB_SUBORDER || 1n;
-  const ivkPoint = (0, import_baby_jubjub6.mulPointEscalar)(import_baby_jubjub6.Base8, ivskScalar);
-  const packed = (0, import_baby_jubjub6.packPoint)(ivkPoint);
+  const ivkPoint = fastMulBase(ivskScalar);
+  const packed = (0, import_baby_jubjub7.packPoint)(ivkPoint);
   return bigintTo32Le(packed);
 }
 function deriveOwnerPk(spendingKey) {
   try {
-    const pubPoint = (0, import_baby_jubjub6.mulPointEscalar)(import_baby_jubjub6.Base8, spendingKey);
+    const pubPoint = fastMulBase(spendingKey);
     return pubPoint[0];
   } catch {
     return 0n;
@@ -3885,7 +3924,7 @@ async function noteBlindTag(blindKey, hex) {
 // src/proof-generator/unshield.ts
 var import_proof_generator2 = require("@orbinum/proof-generator");
 var import_utils3 = require("@noble/ciphers/utils.js");
-var import_baby_jubjub7 = require("@zk-kit/baby-jubjub");
+var import_baby_jubjub8 = require("@zk-kit/baby-jubjub");
 var import_poseidon_lite4 = require("poseidon-lite");
 
 // src/proof-generator/merkle.ts
@@ -3908,7 +3947,7 @@ async function generateUnshieldProof(inputs, options = {}) {
   if (changeValue < 0n) {
     throw new Error("changeValue must be >= 0.");
   }
-  const changeOwnerPubkey = inputs.changeOwnerPubkey ?? (0, import_baby_jubjub7.mulPointEscalar)(import_baby_jubjub7.Base8, inputs.spendingKey)[0];
+  const changeOwnerPubkey = inputs.changeOwnerPubkey ?? (0, import_baby_jubjub8.mulPointEscalar)(import_baby_jubjub8.Base8, inputs.spendingKey)[0];
   const changeBlinding = inputs.changeBlinding ?? (changeValue > 0n ? bytesToBigintLE((0, import_utils3.randomBytes)(32)) : 0n);
   const changeCommitment = changeValue > 0n ? (0, import_poseidon_lite4.poseidon4)([changeValue, inputs.assetId, changeOwnerPubkey, changeBlinding]) : 0n;
   const circuitInputs = {
@@ -4619,6 +4658,8 @@ var import_polkadot_api4 = require("polkadot-api");
   decryptNoteRecord,
   deriveMasterKeyBytes,
   deriveOwnerPk,
+  derivePairwiseEphSk,
+  derivePairwiseSharedSecret,
   deriveSelfEphSk,
   deriveSpendingKeyFromSignature,
   deriveSpendingKeyMessageV2,
@@ -4662,6 +4703,7 @@ var import_polkadot_api4 = require("polkadot-api");
   mapZkEventData,
   normalizeEvmAddress,
   noteBlindTag,
+  pairwiseEphWindow,
   randomBlinding,
   recoverOwnerPkPoint,
   selectNotes,

package/dist/index.mjs

@@ -142,7 +142,7 @@ var SubstrateClient = class _SubstrateClient {
   }
   /**
    * Performs a raw JSON-RPC request. Use this for custom Orbinum RPCs
-   * (shieldedPool_*, privacy_*, etc.).
+   * (`privacy_*`, `zkVerifier_*`, `relayer_*`, etc.).
    */
   async request(method, params = []) {
     return this._papi._request(method, params);
@@ -3173,6 +3173,42 @@ function selfEphWindow(spendingKey, ivkPacked, from, count) {
   return entries;
 }
 
+// src/shielded-pool/protocol/pairwiseEph.ts
+import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
+import { packPoint as packPoint3, unpackPoint as unpackPoint4 } from "@zk-kit/baby-jubjub";
+var PAIRWISE_EPH_DOMAIN = new TextEncoder().encode("orbinum-pairwise-eph-v1");
+function derivePairwiseSharedSecret(myViewingSk, theirIvkPacked) {
+  const theirPoint = unpackPoint4(bytesToBigintLE(theirIvkPacked));
+  if (!theirPoint) throw new Error("derivePairwiseSharedSecret: invalid viewing public key");
+  const shared = fastMulPoint(theirPoint, bytesToBjjScalar(myViewingSk));
+  return bigintTo32Le(shared[0]);
+}
+function derivePairwiseEphSk(pairSecret, index) {
+  const h = sha2564.create();
+  h.update(PAIRWISE_EPH_DOMAIN);
+  h.update(pairSecret);
+  const idx = new Uint8Array(4);
+  new DataView(idx.buffer).setUint32(0, index >>> 0, true);
+  h.update(idx);
+  return h.digest();
+}
+function pairwiseEphWindow(pairSecret, receiverIvkPacked, from, count) {
+  const ivkPoint = unpackPoint4(bytesToBigintLE(receiverIvkPacked));
+  if (!ivkPoint) throw new Error("pairwiseEphWindow: invalid viewing public key");
+  const entries = [];
+  for (let i = from; i < from + count; i++) {
+    const scalar = bytesToBjjScalar(derivePairwiseEphSk(pairSecret, i));
+    const ephPk = fastMulBase(scalar);
+    const sharedPoint = fastMulPoint(ivkPoint, scalar);
+    entries.push({
+      index: i,
+      ephPkHex: toHex(bigintTo32Le(packPoint3(ephPk))),
+      sharedSecret: bigintTo32Le(sharedPoint[0])
+    });
+  }
+  return entries;
+}
+
 // src/shielded-pool/protocol/NoteDecryptor.ts
 import { poseidon2 as poseidon22, poseidon4 as poseidon42 } from "poseidon-lite";
 function computeNullifier(commitment, spendingKey) {
@@ -3405,8 +3441,8 @@ ${canonicalAccountId(address)}`;
 
 // src/privacy-keys/PrivacyKeys.ts
 import { hkdf as hkdf2 } from "@noble/hashes/hkdf.js";
-import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
-import { mulPointEscalar as mulPointEscalar4, Base8 as Base82, packPoint as packPoint3 } from "@zk-kit/baby-jubjub";
+import { sha256 as sha2565 } from "@noble/hashes/sha2.js";
+import { packPoint as packPoint4 } from "@zk-kit/baby-jubjub";
 var IVK_DOMAIN = new TextEncoder().encode("orbinum-ivk-v1");
 var KEY_VERSION = "v2";
 var MIN_SIGNATURE_BYTES = 32;
@@ -3423,7 +3459,7 @@ async function deriveMasterKeyBytes(signatureHex, chainId, address) {
   const info = new TextEncoder().encode(
     `orbinum-sk-${KEY_VERSION}:${chainId}:${canonicalAccountId(address)}`
   );
-  return hkdf2(sha2564, sigBytes, new Uint8Array(0), info, 32);
+  return hkdf2(sha2565, sigBytes, new Uint8Array(0), info, 32);
 }
 async function deriveSpendingKeyFromSignature(signatureHex, chainId, address) {
   const masterBytes = await deriveMasterKeyBytes(signatureHex, chainId, address);
@@ -3432,17 +3468,17 @@ async function deriveSpendingKeyFromSignature(signatureHex, chainId, address) {
 }
 function deriveViewingSecretKey(spendingKey) {
   const ikm = bigintTo32Le(spendingKey);
-  return hkdf2(sha2564, ikm, void 0, IVK_DOMAIN, 32);
+  return hkdf2(sha2565, ikm, void 0, IVK_DOMAIN, 32);
 }
 function deriveViewingPublicKey(ivsk) {
   const ivskScalar = BigInt(toHex(ivsk)) % BABYJUB_SUBORDER || 1n;
-  const ivkPoint = mulPointEscalar4(Base82, ivskScalar);
-  const packed = packPoint3(ivkPoint);
+  const ivkPoint = fastMulBase(ivskScalar);
+  const packed = packPoint4(ivkPoint);
   return bigintTo32Le(packed);
 }
 function deriveOwnerPk(spendingKey) {
   try {
-    const pubPoint = mulPointEscalar4(Base82, spendingKey);
+    const pubPoint = fastMulBase(spendingKey);
     return pubPoint[0];
   } catch {
     return 0n;
@@ -3755,7 +3791,7 @@ import {
   WebArtifactProvider as WebArtifactProvider2
 } from "@orbinum/proof-generator";
 import { randomBytes as randomBytes3 } from "@noble/ciphers/utils.js";
-import { mulPointEscalar as mulPointEscalar5, Base8 as Base83 } from "@zk-kit/baby-jubjub";
+import { mulPointEscalar as mulPointEscalar4, Base8 as Base82 } from "@zk-kit/baby-jubjub";
 import { poseidon4 as poseidon44 } from "poseidon-lite";
 
 // src/proof-generator/merkle.ts
@@ -3778,7 +3814,7 @@ async function generateUnshieldProof(inputs, options = {}) {
   if (changeValue < 0n) {
     throw new Error("changeValue must be >= 0.");
   }
-  const changeOwnerPubkey = inputs.changeOwnerPubkey ?? mulPointEscalar5(Base83, inputs.spendingKey)[0];
+  const changeOwnerPubkey = inputs.changeOwnerPubkey ?? mulPointEscalar4(Base82, inputs.spendingKey)[0];
   const changeBlinding = inputs.changeBlinding ?? (changeValue > 0n ? bytesToBigintLE(randomBytes3(32)) : 0n);
   const changeCommitment = changeValue > 0n ? poseidon44([changeValue, inputs.assetId, changeOwnerPubkey, changeBlinding]) : 0n;
   const circuitInputs = {
@@ -4507,6 +4543,8 @@ export {
   decryptNoteRecord,
   deriveMasterKeyBytes,
   deriveOwnerPk,
+  derivePairwiseEphSk,
+  derivePairwiseSharedSecret,
   deriveSelfEphSk,
   deriveSpendingKeyFromSignature,
   deriveSpendingKeyMessageV2,
@@ -4550,6 +4588,7 @@ export {
   mapZkEventData,
   normalizeEvmAddress,
   noteBlindTag,
+  pairwiseEphWindow,
   randomBlinding,
   recoverOwnerPkPoint,
   selectNotes,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orbinum/sdk",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "Official TypeScript SDK for Orbinum.",
   "author": "Orbinum",
   "license": "MIT",