@orbinum/sdk 0.24.0 → 0.25.1

package/dist/index.d.mts

@@ -4,7 +4,7 @@ export { PolkadotSigner, getSs58AddressInfo } from 'polkadot-api';
 import { getDynamicBuilder } from '@polkadot-api/metadata-builders';
 import { getExtrinsicDecoder } from '@polkadot-api/tx-utils';
 import { CircuitType, ArtifactProvider, ProofResult } from '@orbinum/proof-generator';
-export { ArtifactProvider, CircuitType, ProofResult, WebArtifactProvider } from '@orbinum/proof-generator';
+export { ArtifactProvider, CircuitType, ProofResult, WebArtifactProvider, shouldProveSingleThreaded } from '@orbinum/proof-generator';
 export { AccountId, Blake2256, Keccak256, Storage, u128, u64 } from '@polkadot-api/substrate-bindings';
 export { base58 } from '@scure/base';
 export { getPolkadotSigner } from 'polkadot-api/signer';
@@ -1718,6 +1718,46 @@ interface SelfEphWindowEntry {
  */
 declare function selfEphWindow(spendingKey: bigint, ivkPacked: Uint8Array, from: number, count: number): SelfEphWindowEntry[];
 
+/**
+ * The secret shared by a sender/receiver pair: ECDH between one side's viewing
+ * SECRET key and the other side's viewing PUBLIC key. Symmetric — both parties
+ * compute the same 32 bytes from opposite inputs, which is what lets the
+ * sender choose an ephemeral the receiver can predict.
+ *
+ * @param myViewingSk  32-byte viewing secret key (from `deriveViewingSecretKey`).
+ * @param theirIvkPacked 32-byte LE packed viewing public key of the other party.
+ */
+declare function derivePairwiseSharedSecret(myViewingSk: Uint8Array, theirIvkPacked: Uint8Array): Uint8Array;
+/**
+ * The ephemeral secret for the `index`-th note between this pair. Feed it to
+ * `EncryptedMemo.encrypt` / `NoteBuilder.build` as `ephSkOverride`.
+ */
+declare function derivePairwiseEphSk(pairSecret: Uint8Array, index: number): Uint8Array;
+/** One precomputed pairwise window entry — same shape as `SelfEphWindowEntry`. */
+interface PairwiseEphWindowEntry {
+    index: number;
+    /** 0x-prefixed LE-packed ephPk — byte-identical to the memo's last 32 bytes. */
+    ephPkHex: string;
+    /** ECDH shared secret vs the RECEIVER's ivk — feeds decryptWithSharedSecret. */
+    sharedSecret: Uint8Array;
+}
+/**
+ * Precomputes the discovery window [from, from+count) for one counterparty:
+ * for each index, the ephPk that party would publish and the secret needed to
+ * open the memo. One EC pass per sender up front; the scan then matches by hex
+ * equality with no per-hint EC work.
+ *
+ * The cost is paid once per sender and reused across every page of the scan,
+ * which is what makes it worth building — unlike a per-hint precompute, which
+ * measured 26× SLOWER than just doing the multiplication.
+ *
+ * @param pairSecret       From `derivePairwiseSharedSecret`.
+ * @param receiverIvkPacked The RECEIVER's packed viewing public key — the memo
+ *                          is encrypted to it, so the shared secret is against
+ *                          that key regardless of which side is precomputing.
+ */
+declare function pairwiseEphWindow(pairSecret: Uint8Array, receiverIvkPacked: Uint8Array, from: number, count: number): PairwiseEphWindowEntry[];
+
 /**
  * NoteDecryptor
  *
@@ -1857,6 +1897,35 @@ declare function createNoteDisclosureKey(note: ZkNote): string;
  */
 declare function decodeNoteDisclosureKey(key: string): NoteDisclosure | null;
 
+/**
+ * The options every proof entry point accepts.
+ *
+ * One declaration instead of the same inline object repeated per circuit: the
+ * three generators differ in their INPUTS, never in how a caller configures
+ * proving, and a shape written three times drifts on the fourth.
+ */
+
+interface ProofOptions {
+    /** Where circuit artifacts come from. Defaults to the web provider. */
+    provider?: ArtifactProvider;
+    verbose?: boolean;
+    /**
+     * Prove on ONE thread instead of a Web Worker per logical core.
+     *
+     * Omit this. Left absent, `@orbinum/proof-generator` decides from the
+     * device — and getting it wrong on a phone is not a slow proof but no proof
+     * at all: `ffjavascript` spawns one worker per core, each with its own
+     * `WebAssembly.Memory`, and a mobile browser's per-tab budget cannot hold
+     * them. The transfer of the WASM buffer then fails with
+     * `Data cannot be cloned, out of memory`.
+     *
+     * Pass it only when the host knows better than the heuristic — a desktop
+     * app certain of its environment, or a benchmark pinning one mode. The
+     * proof is byte-identical either way; only the wall-clock changes.
+     */
+    singleThread?: boolean;
+}
+
 /** A single input note for a private transfer. */
 interface TransferInputNote {
     nullifier: bigint;
@@ -1894,10 +1963,7 @@ interface PrivateTransferProofInputs {
 /**
  * Generate a Groth16 proof for a PrivateTransfer operation.
  */
-declare function generateTransferProof(params: PrivateTransferProofInputs, options?: {
-    provider?: ArtifactProvider;
-    verbose?: boolean;
-}): Promise<ProofResult>;
+declare function generateTransferProof(params: PrivateTransferProofInputs, options?: ProofOptions): Promise<ProofResult>;
 
 /**
  * Forest tree a note belongs to.
@@ -2550,10 +2616,7 @@ interface UnshieldProofResult extends ProofResult {
  * @param options.provider - Override the artifact provider (default: CDN).
  * @param options.verbose - Log proof generation steps to console.
  */
-declare function generateUnshieldProof(inputs: UnshieldProofInputs, options?: {
-    provider?: ArtifactProvider;
-    verbose?: boolean;
-}): Promise<UnshieldProofResult>;
+declare function generateUnshieldProof(inputs: UnshieldProofInputs, options?: ProofOptions): Promise<UnshieldProofResult>;
 
 /**
  * Inputs required to generate a fee-claim proof.
@@ -2603,10 +2666,7 @@ interface FeeClaimProofOutput {
  * @param options.provider - Override the artifact provider (default: CDN).
  * @param options.verbose  - Log proof generation steps to console.
  */
-declare function generateFeeClaimProof(inputs: FeeClaimProofInputs, options?: {
-    provider?: ArtifactProvider;
-    verbose?: boolean;
-}): Promise<FeeClaimProofOutput>;
+declare function generateFeeClaimProof(inputs: FeeClaimProofInputs, options?: ProofOptions): Promise<FeeClaimProofOutput>;
 
 /**
  * Contract addresses and function selectors for all Orbinum EVM precompiles.
@@ -3564,4 +3624,4 @@ interface ExtrinsicFailedData {
     dispatch_info: DispatchInfo;
 }
 
-export { type ActiveVersionSetEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type Bytes32, CURRENT_CIRCUIT_VERSION, type ChainInfo, CircuitId, CircuitId as CircuitIdType, CircuitVersionResolver, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedBatchArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedRemarkArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, KNOWN_PRECOMPILES, type KnownPrecompileInfo, MIN_SIGNATURE_BYTES, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, NoteBuilder, type NoteDisclosure, type NoteInput, type NoteStatusUpdate, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAssetArgs, type RegisterVerificationKeyArgs, type RelayerInfo, RelayerStatusModule, type RemoveVerificationKeyArgs, type ReservedEventData, type ResolvedSpendVersion, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SPENDING_KEY_VERIFYING_CONTRACT, SPENDING_KEY_WARNING, type ScanCommitment, type SelfEphWindowEntry, type SetActiveVersionArgs, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, type SpendingKeyTypedData, type StatusChangeEvent, type StatusListener, SubstrateClient, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TryDecryptOptions, type TxResult, type UnsafeTxOptions, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, blindTag, buildDummyTransferInput, bytesToBigintLE, canonicalAccountId, computeNoteCommitment, computeNullifier, computePathIndices, createNoteDisclosureKey, decodeNoteDisclosureKey, decodePrecompileCalldata, decryptJson, decryptNoteRecord, deriveMasterKeyBytes, deriveOwnerPk, deriveSelfEphSk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessageV2, deriveSpendingKeyTypedData, deriveStealthOwnerPk, deriveStealthSk, deriveVaultBlindKey, deriveVaultKey, deriveViewTag, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, noteBlindTag, randomBlinding, recoverOwnerPkPoint, selectNotes, selfEphWindow, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, treeIdOf, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };
+export { type ActiveVersionSetEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type Bytes32, CURRENT_CIRCUIT_VERSION, type ChainInfo, CircuitId, CircuitId as CircuitIdType, CircuitVersionResolver, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedBatchArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedRemarkArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, KNOWN_PRECOMPILES, type KnownPrecompileInfo, MIN_SIGNATURE_BYTES, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, NoteBuilder, type NoteDisclosure, type NoteInput, type NoteStatusUpdate, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, type PairwiseEphWindowEntry, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type ProofOptions, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAssetArgs, type RegisterVerificationKeyArgs, type RelayerInfo, RelayerStatusModule, type RemoveVerificationKeyArgs, type ReservedEventData, type ResolvedSpendVersion, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SPENDING_KEY_VERIFYING_CONTRACT, SPENDING_KEY_WARNING, type ScanCommitment, type SelfEphWindowEntry, type SetActiveVersionArgs, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, type SpendingKeyTypedData, type StatusChangeEvent, type StatusListener, SubstrateClient, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TryDecryptOptions, type TxResult, type UnsafeTxOptions, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, blindTag, buildDummyTransferInput, bytesToBigintLE, canonicalAccountId, computeNoteCommitment, computeNullifier, computePathIndices, createNoteDisclosureKey, decodeNoteDisclosureKey, decodePrecompileCalldata, decryptJson, decryptNoteRecord, deriveMasterKeyBytes, deriveOwnerPk, derivePairwiseEphSk, derivePairwiseSharedSecret, deriveSelfEphSk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessageV2, deriveSpendingKeyTypedData, deriveStealthOwnerPk, deriveStealthSk, deriveVaultBlindKey, deriveVaultKey, deriveViewTag, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, noteBlindTag, pairwiseEphWindow, randomBlinding, recoverOwnerPkPoint, selectNotes, selfEphWindow, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, treeIdOf, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };

package/dist/index.d.ts

@@ -4,7 +4,7 @@ export { PolkadotSigner, getSs58AddressInfo } from 'polkadot-api';
 import { getDynamicBuilder } from '@polkadot-api/metadata-builders';
 import { getExtrinsicDecoder } from '@polkadot-api/tx-utils';
 import { CircuitType, ArtifactProvider, ProofResult } from '@orbinum/proof-generator';
-export { ArtifactProvider, CircuitType, ProofResult, WebArtifactProvider } from '@orbinum/proof-generator';
+export { ArtifactProvider, CircuitType, ProofResult, WebArtifactProvider, shouldProveSingleThreaded } from '@orbinum/proof-generator';
 export { AccountId, Blake2256, Keccak256, Storage, u128, u64 } from '@polkadot-api/substrate-bindings';
 export { base58 } from '@scure/base';
 export { getPolkadotSigner } from 'polkadot-api/signer';
@@ -1718,6 +1718,46 @@ interface SelfEphWindowEntry {
  */
 declare function selfEphWindow(spendingKey: bigint, ivkPacked: Uint8Array, from: number, count: number): SelfEphWindowEntry[];
 
+/**
+ * The secret shared by a sender/receiver pair: ECDH between one side's viewing
+ * SECRET key and the other side's viewing PUBLIC key. Symmetric — both parties
+ * compute the same 32 bytes from opposite inputs, which is what lets the
+ * sender choose an ephemeral the receiver can predict.
+ *
+ * @param myViewingSk  32-byte viewing secret key (from `deriveViewingSecretKey`).
+ * @param theirIvkPacked 32-byte LE packed viewing public key of the other party.
+ */
+declare function derivePairwiseSharedSecret(myViewingSk: Uint8Array, theirIvkPacked: Uint8Array): Uint8Array;
+/**
+ * The ephemeral secret for the `index`-th note between this pair. Feed it to
+ * `EncryptedMemo.encrypt` / `NoteBuilder.build` as `ephSkOverride`.
+ */
+declare function derivePairwiseEphSk(pairSecret: Uint8Array, index: number): Uint8Array;
+/** One precomputed pairwise window entry — same shape as `SelfEphWindowEntry`. */
+interface PairwiseEphWindowEntry {
+    index: number;
+    /** 0x-prefixed LE-packed ephPk — byte-identical to the memo's last 32 bytes. */
+    ephPkHex: string;
+    /** ECDH shared secret vs the RECEIVER's ivk — feeds decryptWithSharedSecret. */
+    sharedSecret: Uint8Array;
+}
+/**
+ * Precomputes the discovery window [from, from+count) for one counterparty:
+ * for each index, the ephPk that party would publish and the secret needed to
+ * open the memo. One EC pass per sender up front; the scan then matches by hex
+ * equality with no per-hint EC work.
+ *
+ * The cost is paid once per sender and reused across every page of the scan,
+ * which is what makes it worth building — unlike a per-hint precompute, which
+ * measured 26× SLOWER than just doing the multiplication.
+ *
+ * @param pairSecret       From `derivePairwiseSharedSecret`.
+ * @param receiverIvkPacked The RECEIVER's packed viewing public key — the memo
+ *                          is encrypted to it, so the shared secret is against
+ *                          that key regardless of which side is precomputing.
+ */
+declare function pairwiseEphWindow(pairSecret: Uint8Array, receiverIvkPacked: Uint8Array, from: number, count: number): PairwiseEphWindowEntry[];
+
 /**
  * NoteDecryptor
  *
@@ -1857,6 +1897,35 @@ declare function createNoteDisclosureKey(note: ZkNote): string;
  */
 declare function decodeNoteDisclosureKey(key: string): NoteDisclosure | null;
 
+/**
+ * The options every proof entry point accepts.
+ *
+ * One declaration instead of the same inline object repeated per circuit: the
+ * three generators differ in their INPUTS, never in how a caller configures
+ * proving, and a shape written three times drifts on the fourth.
+ */
+
+interface ProofOptions {
+    /** Where circuit artifacts come from. Defaults to the web provider. */
+    provider?: ArtifactProvider;
+    verbose?: boolean;
+    /**
+     * Prove on ONE thread instead of a Web Worker per logical core.
+     *
+     * Omit this. Left absent, `@orbinum/proof-generator` decides from the
+     * device — and getting it wrong on a phone is not a slow proof but no proof
+     * at all: `ffjavascript` spawns one worker per core, each with its own
+     * `WebAssembly.Memory`, and a mobile browser's per-tab budget cannot hold
+     * them. The transfer of the WASM buffer then fails with
+     * `Data cannot be cloned, out of memory`.
+     *
+     * Pass it only when the host knows better than the heuristic — a desktop
+     * app certain of its environment, or a benchmark pinning one mode. The
+     * proof is byte-identical either way; only the wall-clock changes.
+     */
+    singleThread?: boolean;
+}
+
 /** A single input note for a private transfer. */
 interface TransferInputNote {
     nullifier: bigint;
@@ -1894,10 +1963,7 @@ interface PrivateTransferProofInputs {
 /**
  * Generate a Groth16 proof for a PrivateTransfer operation.
  */
-declare function generateTransferProof(params: PrivateTransferProofInputs, options?: {
-    provider?: ArtifactProvider;
-    verbose?: boolean;
-}): Promise<ProofResult>;
+declare function generateTransferProof(params: PrivateTransferProofInputs, options?: ProofOptions): Promise<ProofResult>;
 
 /**
  * Forest tree a note belongs to.
@@ -2550,10 +2616,7 @@ interface UnshieldProofResult extends ProofResult {
  * @param options.provider - Override the artifact provider (default: CDN).
  * @param options.verbose - Log proof generation steps to console.
  */
-declare function generateUnshieldProof(inputs: UnshieldProofInputs, options?: {
-    provider?: ArtifactProvider;
-    verbose?: boolean;
-}): Promise<UnshieldProofResult>;
+declare function generateUnshieldProof(inputs: UnshieldProofInputs, options?: ProofOptions): Promise<UnshieldProofResult>;
 
 /**
  * Inputs required to generate a fee-claim proof.
@@ -2603,10 +2666,7 @@ interface FeeClaimProofOutput {
  * @param options.provider - Override the artifact provider (default: CDN).
  * @param options.verbose  - Log proof generation steps to console.
  */
-declare function generateFeeClaimProof(inputs: FeeClaimProofInputs, options?: {
-    provider?: ArtifactProvider;
-    verbose?: boolean;
-}): Promise<FeeClaimProofOutput>;
+declare function generateFeeClaimProof(inputs: FeeClaimProofInputs, options?: ProofOptions): Promise<FeeClaimProofOutput>;
 
 /**
  * Contract addresses and function selectors for all Orbinum EVM precompiles.
@@ -3564,4 +3624,4 @@ interface ExtrinsicFailedData {
     dispatch_info: DispatchInfo;
 }
 
-export { type ActiveVersionSetEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type Bytes32, CURRENT_CIRCUIT_VERSION, type ChainInfo, CircuitId, CircuitId as CircuitIdType, CircuitVersionResolver, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedBatchArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedRemarkArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, KNOWN_PRECOMPILES, type KnownPrecompileInfo, MIN_SIGNATURE_BYTES, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, NoteBuilder, type NoteDisclosure, type NoteInput, type NoteStatusUpdate, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAssetArgs, type RegisterVerificationKeyArgs, type RelayerInfo, RelayerStatusModule, type RemoveVerificationKeyArgs, type ReservedEventData, type ResolvedSpendVersion, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SPENDING_KEY_VERIFYING_CONTRACT, SPENDING_KEY_WARNING, type ScanCommitment, type SelfEphWindowEntry, type SetActiveVersionArgs, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, type SpendingKeyTypedData, type StatusChangeEvent, type StatusListener, SubstrateClient, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TryDecryptOptions, type TxResult, type UnsafeTxOptions, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, blindTag, buildDummyTransferInput, bytesToBigintLE, canonicalAccountId, computeNoteCommitment, computeNullifier, computePathIndices, createNoteDisclosureKey, decodeNoteDisclosureKey, decodePrecompileCalldata, decryptJson, decryptNoteRecord, deriveMasterKeyBytes, deriveOwnerPk, deriveSelfEphSk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessageV2, deriveSpendingKeyTypedData, deriveStealthOwnerPk, deriveStealthSk, deriveVaultBlindKey, deriveVaultKey, deriveViewTag, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, noteBlindTag, randomBlinding, recoverOwnerPkPoint, selectNotes, selfEphWindow, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, treeIdOf, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };
+export { type ActiveVersionSetEvent, type AssetRegisteredEvent, type AssetUnverifiedEvent, type AssetVerifiedEvent, BABYJUB_SUBORDER, BN254_R, type BatchRegisterVerificationKeysArgs, type BatchVerificationKeysRegisteredEvent, type BlockInfo, type Bytes32, CURRENT_CIRCUIT_VERSION, type ChainInfo, CircuitId, CircuitId as CircuitIdType, CircuitVersionResolver, type ClaimShieldedFeesParams, type ClientProviderConfig, type CommitmentsInsertedEvent, type CommitmentsInsertedEventData, type ConnectionStatus, CryptoPrecompiles, type DecodedBatchArgs, type DecodedEthereumTransactArgs, type DecodedEvmCallArgs, type DecodedPrecompile, type DecodedPrivateTransferArgs, type DecodedRemarkArgs, type DecodedShieldArgs, type DecodedShieldBatchArgs, type DecodedShieldBatchOperation, type DecodedSudoArgs, type DecodedTransferAllArgs, type DecodedTransferArgs, type DecodedTransferKeepAliveArgs, type DecodedUnshieldArgs, type DecryptedMemo, type DispatchError, type DispatchInfo, type DynamicBuilder, ENCRYPTED_MEMO_SIZE, EncryptedMemo, type EncryptedNoteRecord, type EndowedEventData, type EthereumExecutedData, type EventData, type EventPhase, type EventRecord, type EvmAddressInfo, type EvmBlock, EvmClient, type EvmExecutedData, type EvmExitReason, EvmExplorer, type EvmLog, type EvmSigner, type EvmTransaction, type EvmTxRequest, type EvmTxSummary, type ExtrinsicDecoder, type ExtrinsicFailedData, type ExtrinsicSuccessData, type FeeClaimProofInputs, type FormatOptions, KNOWN_PRECOMPILES, type KnownPrecompileInfo, MIN_SIGNATURE_BYTES, type MerkleRootUpdatedData, type MerkleRootUpdatedEvent, type MerkleTreeInfo, NoteBuilder, type NoteDisclosure, type NoteInput, type NoteStatusUpdate, type NullifiersSpentEvent, type NullifiersSpentEventData, OrbinumClient, type OrbinumClientConfig, OrbinumClientProvider, PRECOMPILE_ADDR, type PairwiseEphWindowEntry, PrivacyKeyManager, type PrivacyMerkleProof, PrivacyModule, type PrivateTransferArgs, type PrivateTransferInput, type PrivateTransferOutput, type PrivateTransferParams, type PrivateTransferProofInputs, type ProofOptions, type ProofVerificationFailedEvent, type ProofVerifiedEvent, type RawBlock, type RawBlockHeader, type RawTransferInput, type RawTransferOutput, type RegisterAssetArgs, type RegisterVerificationKeyArgs, type RelayerInfo, RelayerStatusModule, type RemoveVerificationKeyArgs, type ReservedEventData, type ResolvedSpendVersion, type RpcV2MerkleProof, type RpcV2NullifierStatus, type RpcV2PoolAssetBalance, type RpcV2PoolStats, SPENDING_KEY_VERIFYING_CONTRACT, SPENDING_KEY_WARNING, type ScanCommitment, type SelfEphWindowEntry, type SetActiveVersionArgs, type ShieldArgs, type ShieldBatchArgs, type ShieldBatchItem, type ShieldBatchParams, type ShieldOperation, type ShieldParams, type ShieldedEvent, type ShieldedEventData, type ShieldedPoolCall, type ShieldedPoolEvent, ShieldedPoolModule, ShieldedPoolPrecompile, type SpendingKeyTypedData, type StatusChangeEvent, type StatusListener, SubstrateClient, type SystemHealth, type TokenInfo, type TokenTransfer, type TransferEventData, type TransferInputNote, type TransferOutputNote, type TryDecryptOptions, type TxResult, type UnsafeTxOptions, type UnshieldArgs, type UnshieldParams, type UnshieldProofInputs, type UnshieldedEvent, type UnshieldedEventData, type UnverifyAssetArgs, VaultLockedError, type VerificationKeyRegisteredEvent, type VerificationKeyRemovedEvent, type VerifyAssetArgs, type VerifyProofArgs, type VkEntry, type ZkNote, type ZkVerifierCall, type ZkVerifierCircuitVersionInfo, type ZkVerifierEvent, type ZkVerifierHistoricalVersion, ZkVerifierModule, type ZkVerifierVersionStats, type ZkVerifierVkHash, accountIdHexToSs58, addressToAccountIdHex, applyNoteStatus, bigintTo32Be, bigintTo32Le, bigintTo32LeArr, blindTag, buildDummyTransferInput, bytesToBigintLE, canonicalAccountId, computeNoteCommitment, computeNullifier, computePathIndices, createNoteDisclosureKey, decodeNoteDisclosureKey, decodePrecompileCalldata, decryptJson, decryptNoteRecord, deriveMasterKeyBytes, deriveOwnerPk, derivePairwiseEphSk, derivePairwiseSharedSecret, deriveSelfEphSk, deriveSpendingKeyFromSignature, deriveSpendingKeyMessageV2, deriveSpendingKeyTypedData, deriveStealthOwnerPk, deriveStealthSk, deriveVaultBlindKey, deriveVaultKey, deriveViewTag, deriveViewingPublicKey, deriveViewingSecretKey, encryptJson, encryptNote, ensureHexPrefix, evmAddressToAccountId, evmToImplicitSubstrate, evmToMappedAccountHex, evmToSubstrate, formatBalance, formatORB, fromBase64, fromHex, generateFeeClaimProof, generateTransferProof, generateUnshieldProof, getPrecompileLabel, hexToBigint, hexToNumber, implicitSubstrateToEvm, isEvmAddress, isImplicitEvmAccount, isSs58, isSubstrateAddress, isUnifiedAddress, leHexToBigint, mapExtrinsicArgs, mapZkEventData, normalizeEvmAddress, noteBlindTag, pairwiseEphWindow, randomBlinding, recoverOwnerPkPoint, selectNotes, selfEphWindow, shortHash, substrateSs58ToAccountIdHex, substrateToEvm, toBase64, toHex, toTxResult, treeIdOf, truncateMiddle, tryDecryptNote, tryDecryptNoteVerbose, vaultReplacer, vaultReviver };

package/dist/index.js

@@ -74,6 +74,8 @@ __export(index_exports, {
   decryptNoteRecord: () => decryptNoteRecord,
   deriveMasterKeyBytes: () => deriveMasterKeyBytes,
   deriveOwnerPk: () => deriveOwnerPk,
+  derivePairwiseEphSk: () => derivePairwiseEphSk,
+  derivePairwiseSharedSecret: () => derivePairwiseSharedSecret,
   deriveSelfEphSk: () => deriveSelfEphSk,
   deriveSpendingKeyFromSignature: () => deriveSpendingKeyFromSignature,
   deriveSpendingKeyMessageV2: () => deriveSpendingKeyMessageV2,
@@ -117,11 +119,13 @@ __export(index_exports, {
   mapZkEventData: () => mapZkEventData,
   normalizeEvmAddress: () => normalizeEvmAddress,
   noteBlindTag: () => noteBlindTag,
+  pairwiseEphWindow: () => pairwiseEphWindow,
   randomBlinding: () => randomBlinding,
   recoverOwnerPkPoint: () => recoverOwnerPkPoint,
   selectNotes: () => selectNotes,
   selfEphWindow: () => selfEphWindow,
   shortHash: () => shortHash,
+  shouldProveSingleThreaded: () => import_proof_generator5.shouldProveSingleThreaded,
   substrateSs58ToAccountIdHex: () => substrateSs58ToAccountIdHex,
   substrateToEvm: () => substrateToEvm,
   toBase64: () => toBase64,
@@ -3307,6 +3311,42 @@ function selfEphWindow(spendingKey, ivkPacked, from, count) {
   return entries;
 }
 
+// src/shielded-pool/protocol/pairwiseEph.ts
+var import_sha24 = require("@noble/hashes/sha2.js");
+var import_baby_jubjub6 = require("@zk-kit/baby-jubjub");
+var PAIRWISE_EPH_DOMAIN = new TextEncoder().encode("orbinum-pairwise-eph-v1");
+function derivePairwiseSharedSecret(myViewingSk, theirIvkPacked) {
+  const theirPoint = (0, import_baby_jubjub6.unpackPoint)(bytesToBigintLE(theirIvkPacked));
+  if (!theirPoint) throw new Error("derivePairwiseSharedSecret: invalid viewing public key");
+  const shared = fastMulPoint(theirPoint, bytesToBjjScalar(myViewingSk));
+  return bigintTo32Le(shared[0]);
+}
+function derivePairwiseEphSk(pairSecret, index) {
+  const h = import_sha24.sha256.create();
+  h.update(PAIRWISE_EPH_DOMAIN);
+  h.update(pairSecret);
+  const idx = new Uint8Array(4);
+  new DataView(idx.buffer).setUint32(0, index >>> 0, true);
+  h.update(idx);
+  return h.digest();
+}
+function pairwiseEphWindow(pairSecret, receiverIvkPacked, from, count) {
+  const ivkPoint = (0, import_baby_jubjub6.unpackPoint)(bytesToBigintLE(receiverIvkPacked));
+  if (!ivkPoint) throw new Error("pairwiseEphWindow: invalid viewing public key");
+  const entries = [];
+  for (let i = from; i < from + count; i++) {
+    const scalar = bytesToBjjScalar(derivePairwiseEphSk(pairSecret, i));
+    const ephPk = fastMulBase(scalar);
+    const sharedPoint = fastMulPoint(ivkPoint, scalar);
+    entries.push({
+      index: i,
+      ephPkHex: toHex(bigintTo32Le((0, import_baby_jubjub6.packPoint)(ephPk))),
+      sharedSecret: bigintTo32Le(sharedPoint[0])
+    });
+  }
+  return entries;
+}
+
 // src/shielded-pool/protocol/NoteDecryptor.ts
 var import_poseidon_lite2 = require("poseidon-lite");
 function computeNullifier(commitment, spendingKey) {
@@ -3539,8 +3579,8 @@ ${canonicalAccountId(address)}`;
 
 // src/privacy-keys/PrivacyKeys.ts
 var import_hkdf2 = require("@noble/hashes/hkdf.js");
-var import_sha24 = require("@noble/hashes/sha2.js");
-var import_baby_jubjub6 = require("@zk-kit/baby-jubjub");
+var import_sha25 = require("@noble/hashes/sha2.js");
+var import_baby_jubjub7 = require("@zk-kit/baby-jubjub");
 var IVK_DOMAIN = new TextEncoder().encode("orbinum-ivk-v1");
 var KEY_VERSION = "v2";
 var MIN_SIGNATURE_BYTES = 32;
@@ -3557,7 +3597,7 @@ async function deriveMasterKeyBytes(signatureHex, chainId, address) {
   const info = new TextEncoder().encode(
     `orbinum-sk-${KEY_VERSION}:${chainId}:${canonicalAccountId(address)}`
   );
-  return (0, import_hkdf2.hkdf)(import_sha24.sha256, sigBytes, new Uint8Array(0), info, 32);
+  return (0, import_hkdf2.hkdf)(import_sha25.sha256, sigBytes, new Uint8Array(0), info, 32);
 }
 async function deriveSpendingKeyFromSignature(signatureHex, chainId, address) {
   const masterBytes = await deriveMasterKeyBytes(signatureHex, chainId, address);
@@ -3566,12 +3606,12 @@ async function deriveSpendingKeyFromSignature(signatureHex, chainId, address) {
 }
 function deriveViewingSecretKey(spendingKey) {
   const ikm = bigintTo32Le(spendingKey);
-  return (0, import_hkdf2.hkdf)(import_sha24.sha256, ikm, void 0, IVK_DOMAIN, 32);
+  return (0, import_hkdf2.hkdf)(import_sha25.sha256, ikm, void 0, IVK_DOMAIN, 32);
 }
 function deriveViewingPublicKey(ivsk) {
   const ivskScalar = BigInt(toHex(ivsk)) % BABYJUB_SUBORDER || 1n;
   const ivkPoint = fastMulBase(ivskScalar);
-  const packed = (0, import_baby_jubjub6.packPoint)(ivkPoint);
+  const packed = (0, import_baby_jubjub7.packPoint)(ivkPoint);
   return bigintTo32Le(packed);
 }
 function deriveOwnerPk(spendingKey) {
@@ -3885,7 +3925,7 @@ async function noteBlindTag(blindKey, hex) {
 // src/proof-generator/unshield.ts
 var import_proof_generator2 = require("@orbinum/proof-generator");
 var import_utils3 = require("@noble/ciphers/utils.js");
-var import_baby_jubjub7 = require("@zk-kit/baby-jubjub");
+var import_baby_jubjub8 = require("@zk-kit/baby-jubjub");
 var import_poseidon_lite4 = require("poseidon-lite");
 
 // src/proof-generator/merkle.ts
@@ -3896,6 +3936,15 @@ function merkleProofToCircuit(siblings, leafIndex) {
   return { elements, indices };
 }
 
+// src/proof-generator/options.ts
+function toGenerateOptions(provider, options) {
+  return {
+    provider,
+    ...options.verbose !== void 0 ? { verbose: options.verbose } : {},
+    ...options.singleThread !== void 0 ? { singleThread: options.singleThread } : {}
+  };
+}
+
 // src/proof-generator/unshield.ts
 async function generateUnshieldProof(inputs, options = {}) {
   const { elements, indices } = merkleProofToCircuit(inputs.pathSiblings, inputs.leafIndex);
@@ -3908,7 +3957,7 @@ async function generateUnshieldProof(inputs, options = {}) {
   if (changeValue < 0n) {
     throw new Error("changeValue must be >= 0.");
   }
-  const changeOwnerPubkey = inputs.changeOwnerPubkey ?? (0, import_baby_jubjub7.mulPointEscalar)(import_baby_jubjub7.Base8, inputs.spendingKey)[0];
+  const changeOwnerPubkey = inputs.changeOwnerPubkey ?? (0, import_baby_jubjub8.mulPointEscalar)(import_baby_jubjub8.Base8, inputs.spendingKey)[0];
   const changeBlinding = inputs.changeBlinding ?? (changeValue > 0n ? bytesToBigintLE((0, import_utils3.randomBytes)(32)) : 0n);
   const changeCommitment = changeValue > 0n ? (0, import_poseidon_lite4.poseidon4)([changeValue, inputs.assetId, changeOwnerPubkey, changeBlinding]) : 0n;
   const circuitInputs = {
@@ -3930,8 +3979,7 @@ async function generateUnshieldProof(inputs, options = {}) {
     change_owner_pubkey: changeOwnerPubkey.toString()
   };
   const provider = options.provider ?? new import_proof_generator2.WebArtifactProvider();
-  const opts = { provider };
-  if (options.verbose !== void 0) opts.verbose = options.verbose;
+  const opts = toGenerateOptions(provider, options);
   const proofResult = await (0, import_proof_generator2.generateProof)(import_proof_generator2.CircuitType.Unshield, circuitInputs, opts);
   return { ...proofResult, changeCommitment, changeValue, changeBlinding, changeOwnerPubkey };
 }
@@ -3963,8 +4011,7 @@ async function generateTransferProof(params, options = {}) {
     output_blindings: [o0.blinding.toString(), o1.blinding.toString()]
   };
   const provider = options.provider ?? new import_proof_generator3.WebArtifactProvider();
-  const opts = { provider };
-  if (options.verbose !== void 0) opts.verbose = options.verbose;
+  const opts = toGenerateOptions(provider, options);
   return (0, import_proof_generator3.generateProof)(import_proof_generator3.CircuitType.Transfer, circuitInputs, opts);
 }
 
@@ -3982,8 +4029,7 @@ async function generateFeeClaimProof(inputs, options = {}) {
     blinding: inputs.blinding.toString()
   };
   const provider = options.provider ?? new import_proof_generator4.WebArtifactProvider();
-  const opts = { provider };
-  if (options.verbose !== void 0) opts.verbose = options.verbose;
+  const opts = toGenerateOptions(provider, options);
   const proofResult = await (0, import_proof_generator4.generateProof)(import_proof_generator4.CircuitType.ValueProof, circuitInputs, opts);
   const [sigCommitment, sigValue, sigAssetId, sigOwnerHash] = proofResult.publicSignals.map(BigInt);
   const buf = new Uint8Array(76);
@@ -3997,6 +4043,9 @@ async function generateFeeClaimProof(inputs, options = {}) {
   };
 }
 
+// src/proof-generator/index.ts
+var import_proof_generator5 = require("@orbinum/proof-generator");
+
 // src/precompiles/decode.ts
 function decodePrecompileCalldata(address, input) {
   const info = KNOWN_PRECOMPILES[address.toLowerCase()];
@@ -4619,6 +4668,8 @@ var import_polkadot_api4 = require("polkadot-api");
   decryptNoteRecord,
   deriveMasterKeyBytes,
   deriveOwnerPk,
+  derivePairwiseEphSk,
+  derivePairwiseSharedSecret,
   deriveSelfEphSk,
   deriveSpendingKeyFromSignature,
   deriveSpendingKeyMessageV2,
@@ -4662,11 +4713,13 @@ var import_polkadot_api4 = require("polkadot-api");
   mapZkEventData,
   normalizeEvmAddress,
   noteBlindTag,
+  pairwiseEphWindow,
   randomBlinding,
   recoverOwnerPkPoint,
   selectNotes,
   selfEphWindow,
   shortHash,
+  shouldProveSingleThreaded,
   substrateSs58ToAccountIdHex,
   substrateToEvm,
   toBase64,

package/dist/index.mjs

@@ -3173,6 +3173,42 @@ function selfEphWindow(spendingKey, ivkPacked, from, count) {
   return entries;
 }
 
+// src/shielded-pool/protocol/pairwiseEph.ts
+import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
+import { packPoint as packPoint3, unpackPoint as unpackPoint4 } from "@zk-kit/baby-jubjub";
+var PAIRWISE_EPH_DOMAIN = new TextEncoder().encode("orbinum-pairwise-eph-v1");
+function derivePairwiseSharedSecret(myViewingSk, theirIvkPacked) {
+  const theirPoint = unpackPoint4(bytesToBigintLE(theirIvkPacked));
+  if (!theirPoint) throw new Error("derivePairwiseSharedSecret: invalid viewing public key");
+  const shared = fastMulPoint(theirPoint, bytesToBjjScalar(myViewingSk));
+  return bigintTo32Le(shared[0]);
+}
+function derivePairwiseEphSk(pairSecret, index) {
+  const h = sha2564.create();
+  h.update(PAIRWISE_EPH_DOMAIN);
+  h.update(pairSecret);
+  const idx = new Uint8Array(4);
+  new DataView(idx.buffer).setUint32(0, index >>> 0, true);
+  h.update(idx);
+  return h.digest();
+}
+function pairwiseEphWindow(pairSecret, receiverIvkPacked, from, count) {
+  const ivkPoint = unpackPoint4(bytesToBigintLE(receiverIvkPacked));
+  if (!ivkPoint) throw new Error("pairwiseEphWindow: invalid viewing public key");
+  const entries = [];
+  for (let i = from; i < from + count; i++) {
+    const scalar = bytesToBjjScalar(derivePairwiseEphSk(pairSecret, i));
+    const ephPk = fastMulBase(scalar);
+    const sharedPoint = fastMulPoint(ivkPoint, scalar);
+    entries.push({
+      index: i,
+      ephPkHex: toHex(bigintTo32Le(packPoint3(ephPk))),
+      sharedSecret: bigintTo32Le(sharedPoint[0])
+    });
+  }
+  return entries;
+}
+
 // src/shielded-pool/protocol/NoteDecryptor.ts
 import { poseidon2 as poseidon22, poseidon4 as poseidon42 } from "poseidon-lite";
 function computeNullifier(commitment, spendingKey) {
@@ -3405,8 +3441,8 @@ ${canonicalAccountId(address)}`;
 
 // src/privacy-keys/PrivacyKeys.ts
 import { hkdf as hkdf2 } from "@noble/hashes/hkdf.js";
-import { sha256 as sha2564 } from "@noble/hashes/sha2.js";
-import { packPoint as packPoint3 } from "@zk-kit/baby-jubjub";
+import { sha256 as sha2565 } from "@noble/hashes/sha2.js";
+import { packPoint as packPoint4 } from "@zk-kit/baby-jubjub";
 var IVK_DOMAIN = new TextEncoder().encode("orbinum-ivk-v1");
 var KEY_VERSION = "v2";
 var MIN_SIGNATURE_BYTES = 32;
@@ -3423,7 +3459,7 @@ async function deriveMasterKeyBytes(signatureHex, chainId, address) {
   const info = new TextEncoder().encode(
     `orbinum-sk-${KEY_VERSION}:${chainId}:${canonicalAccountId(address)}`
   );
-  return hkdf2(sha2564, sigBytes, new Uint8Array(0), info, 32);
+  return hkdf2(sha2565, sigBytes, new Uint8Array(0), info, 32);
 }
 async function deriveSpendingKeyFromSignature(signatureHex, chainId, address) {
   const masterBytes = await deriveMasterKeyBytes(signatureHex, chainId, address);
@@ -3432,12 +3468,12 @@ async function deriveSpendingKeyFromSignature(signatureHex, chainId, address) {
 }
 function deriveViewingSecretKey(spendingKey) {
   const ikm = bigintTo32Le(spendingKey);
-  return hkdf2(sha2564, ikm, void 0, IVK_DOMAIN, 32);
+  return hkdf2(sha2565, ikm, void 0, IVK_DOMAIN, 32);
 }
 function deriveViewingPublicKey(ivsk) {
   const ivskScalar = BigInt(toHex(ivsk)) % BABYJUB_SUBORDER || 1n;
   const ivkPoint = fastMulBase(ivskScalar);
-  const packed = packPoint3(ivkPoint);
+  const packed = packPoint4(ivkPoint);
   return bigintTo32Le(packed);
 }
 function deriveOwnerPk(spendingKey) {
@@ -3766,6 +3802,15 @@ function merkleProofToCircuit(siblings, leafIndex) {
   return { elements, indices };
 }
 
+// src/proof-generator/options.ts
+function toGenerateOptions(provider, options) {
+  return {
+    provider,
+    ...options.verbose !== void 0 ? { verbose: options.verbose } : {},
+    ...options.singleThread !== void 0 ? { singleThread: options.singleThread } : {}
+  };
+}
+
 // src/proof-generator/unshield.ts
 async function generateUnshieldProof(inputs, options = {}) {
   const { elements, indices } = merkleProofToCircuit(inputs.pathSiblings, inputs.leafIndex);
@@ -3800,8 +3845,7 @@ async function generateUnshieldProof(inputs, options = {}) {
     change_owner_pubkey: changeOwnerPubkey.toString()
   };
   const provider = options.provider ?? new WebArtifactProvider2();
-  const opts = { provider };
-  if (options.verbose !== void 0) opts.verbose = options.verbose;
+  const opts = toGenerateOptions(provider, options);
   const proofResult = await generateProof(CircuitType2.Unshield, circuitInputs, opts);
   return { ...proofResult, changeCommitment, changeValue, changeBlinding, changeOwnerPubkey };
 }
@@ -3837,8 +3881,7 @@ async function generateTransferProof(params, options = {}) {
     output_blindings: [o0.blinding.toString(), o1.blinding.toString()]
   };
   const provider = options.provider ?? new WebArtifactProvider3();
-  const opts = { provider };
-  if (options.verbose !== void 0) opts.verbose = options.verbose;
+  const opts = toGenerateOptions(provider, options);
   return generateProof2(CircuitType3.Transfer, circuitInputs, opts);
 }
 
@@ -3860,8 +3903,7 @@ async function generateFeeClaimProof(inputs, options = {}) {
     blinding: inputs.blinding.toString()
   };
   const provider = options.provider ?? new WebArtifactProvider4();
-  const opts = { provider };
-  if (options.verbose !== void 0) opts.verbose = options.verbose;
+  const opts = toGenerateOptions(provider, options);
   const proofResult = await generateProof3(CircuitType4.ValueProof, circuitInputs, opts);
   const [sigCommitment, sigValue, sigAssetId, sigOwnerHash] = proofResult.publicSignals.map(BigInt);
   const buf = new Uint8Array(76);
@@ -3875,6 +3917,9 @@ async function generateFeeClaimProof(inputs, options = {}) {
   };
 }
 
+// src/proof-generator/index.ts
+import { shouldProveSingleThreaded } from "@orbinum/proof-generator";
+
 // src/precompiles/decode.ts
 function decodePrecompileCalldata(address, input) {
   const info = KNOWN_PRECOMPILES[address.toLowerCase()];
@@ -4507,6 +4552,8 @@ export {
   decryptNoteRecord,
   deriveMasterKeyBytes,
   deriveOwnerPk,
+  derivePairwiseEphSk,
+  derivePairwiseSharedSecret,
   deriveSelfEphSk,
   deriveSpendingKeyFromSignature,
   deriveSpendingKeyMessageV2,
@@ -4550,11 +4597,13 @@ export {
   mapZkEventData,
   normalizeEvmAddress,
   noteBlindTag,
+  pairwiseEphWindow,
   randomBlinding,
   recoverOwnerPkPoint,
   selectNotes,
   selfEphWindow,
   shortHash,
+  shouldProveSingleThreaded,
   substrateSs58ToAccountIdHex,
   substrateToEvm,
   toBase64,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@orbinum/sdk",
-  "version": "0.24.0",
+  "version": "0.25.1",
   "description": "Official TypeScript SDK for Orbinum.",
   "author": "Orbinum",
   "license": "MIT",
@@ -48,7 +48,7 @@
     "@noble/ciphers": "2.2.0",
     "@noble/curves": "^2.2.0",
     "@noble/hashes": "2.2.0",
-    "@orbinum/proof-generator": "5.0.0",
+    "@orbinum/proof-generator": "5.1.0",
     "@polkadot-api/metadata-builders": "0.14.2",
     "@polkadot-api/substrate-bindings": "0.20.2",
     "@polkadot-api/tx-utils": "0.3.2",