@permissionless-technologies/upp-sdk 0.2.0 → 0.3.0

package/dist/{chunk-KIKBPJXJ.cjs.map → chunk-X4DLTVOG.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/deployments/31337.json","../src/deployments/11155111.json","../src/deployments/index.ts","../src/core/transfer.ts"],"names":["__default","init_poseidon","STATE_TREE_DEPTH","ASP_TREE_DEPTH","buildMerkleTree","poseidon","BABYJUBJUB_SUBORDER","generateASPProof","DEMO_ASP_ID","generateUPPProof","formatProofForContract","toHex"],"mappings":";;;;;;;;;AAAA,IAAA,SAAA,GAAA;AAAA,EACE,oBAAA,EAAwB,4CAAA;AAAA,EACxB,cAAA,EAAkB,4CAAA;AAAA,EAClB,SAAA,EAAa,4CAAA;AAAA,EACb,UAAA,EAAc,4CAAA;AAAA,EACd,SAAA,EAAa;AAAA,IACX,gBAAA,EAAoB,4CAAA;AAAA,IACpB,aAAA,EAAiB,4CAAA;AAAA,IACjB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,iBAAA,EAAqB,4CAAA;AAAA,IACrB,wBAAA,EAA4B,4CAAA;AAAA,IAC5B,wBAAA,EAA4B;AAAA,GAC9B;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,mBAAA,EAAuB;AAAA,GACzB;AAAA,EACA,WAAA,EAAe,CAAA;AAAA,EACf,eAAA,EAAmB;AACrB,CAAA;;;AClBA,IAAAA,UAAAA,GAAA;AAAA,EACE,oBAAA,EAAwB,4CAAA;AAAA,EACxB,cAAA,EAAkB,4CAAA;AAAA,EAClB,SAAA,EAAa,4CAAA;AAAA,EACb,UAAA,EAAc,4CAAA;AAAA,EACd,SAAA,EAAa;AAAA,IACX,gBAAA,EAAoB,4CAAA;AAAA,IACpB,aAAA,EAAiB,4CAAA;AAAA,IACjB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,iBAAA,EAAqB,4CAAA;AAAA,IACrB,wBAAA,EAA4B,4CAAA;AAAA,IAC5B,wBAAA,EAA4B;AAAA,GAC9B;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,mBAAA,EAAuB;AAAA,GACzB;AAAA,EACA,WAAA,EAAe,QAAA;AAAA,EACf,eAAA,EAAmB;AACrB,CAAA;;;AC6DA,SAAS,eAAA,CACP,MACA,OAAA,EACkB;AAClB,EAAA,OAAO;AAAA,IACL,sBAAsB,IAAA,CAAK,oBAAA;AAAA,IAC3B,gBAAgB,IAAA,CAAK,cAAA;AAAA,IACrB,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,SAAA,EAAW;AAAA,MACT,gBAAA,EAAkB,KAAK,SAAA,CAAU,gBAAA;AAAA,MACjC,aAAA,EAAe,KAAK,SAAA,CAAU,aAAA;AAAA,MAC9B,gBAAA,EAAkB,KAAK,SAAA,CAAU,gBAAA;AAAA,MACjC,iBAAA,EAAmB,KAAK,SAAA,CAAU,iBAAA;AAAA,MAClC,wBAAA,EAA0B,KAAK,SAAA,CAC5B,wBAAA;AAAA,MACH,wBAAA,EAA0B,KAAK,SAAA,CAC5B;AAAA,KACL;AAAA,IACA,cAAA,EAAgB,KAAK,cAAA,GACjB;AAAA,MACE,mBAAA,EAAqB,KAAK,cAAA,CACvB;AAAA,KACL,GACA,MAAA;AAAA,IACJ,OAAA;AAAA,IACA,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,iBAAiB,IAAA,CAAK;AAAA,GACxB;AACF;AAOA,IAAM,WAAA,GAAgD;AAAA,EACpD,KAAA,EAAO,eAAA,CAAgB,SAAA,EAAoC,KAAK,CAAA;AAAA,EAChE,QAAA,EAAU,eAAA,CAAgBA,UAAAA,EAAsC,QAAQ;AAC1E,CAAA;AAgBO,SAAS,cAAc,OAAA,EAA0C;AACtE,EAAA,OAAO,WAAA,CAAY,OAAO,CAAA,IAAK,IAAA;AACjC;AASO,SAAS,qBAAqB,OAAA,EAAmC;AACtE,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,8BAAA,EAAiC,OAAO,CAAA,oBAAA,EACjB,MAAA,CAAO,KAAK,WAAW,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAC5D;AAAA,EACF;AACA,EAAA,OAAO,UAAA;AACT;AAKO,SAAS,cAAc,OAAA,EAA0B;AACtD,EAAA,OAAO,OAAA,IAAW,WAAA;AACpB;AAKO,SAAS,oBAAA,GAAiC;AAC/C,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,IAAI,MAAM,CAAA;AAC5C;AAKO,SAAS,gBAAgB,OAAA,EAAiC;AAC/D,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,YAAY,OAAO,IAAA;AACxB,EAAA,OAAO,WAAW,SAAA,IAAa,IAAA;AACjC;AAmBO,SAAS,kBAAA,CAAmB,SAAiB,MAAA,EAAgC;AAClF,EAAA,WAAA,CAAY,OAAO,CAAA,GAAI,EAAE,GAAG,QAAQ,OAAA,EAAQ;AAC9C;;;AC5LAC,+BAAA,EAAA;AAiHA,IAAM,cAAA,GAAiB,KAAA;AAQvB,SAAS,mBAAA,CAAuB,KAAU,QAAA,EAAkB;AAC1D,EAAA,IAAI,GAAA,CAAI,UAAUC,kCAAA,EAAkB;AAClC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAGA,kCAAgB,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAMA,kCAAA,GAAmB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACxE;AAQA,SAAS,iBAAA,CAAqB,KAAU,QAAA,EAAkB;AACxD,EAAA,IAAI,GAAA,CAAI,UAAUC,gCAAA,EAAgB;AAChC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAGA,gCAAc,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAMA,gCAAA,GAAiB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACtE;AAOA,IAAM,yBAAA,GAA4B;AAAA,EAChC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,oBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,YAAA,EAAc,SAAS,IAAA,EAAK;AAAA,IACrD,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA,EAAY;AAAA,IACrC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA;AAAY;AAEzC,CAAA;AAaA,eAAsB,cAAA,CACpB,cACA,eAAA,EACyE;AACzE,EAAA,MAAM,YAAA,GAAe,MAAM,YAAA,CAAa,cAAA,EAAe;AACvD,EAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,EAAW;AAK9C,EAAA,IAAI,iBAAwB,EAAC;AAE7B,EAAA,IAAI,YAAY,KAAA,EAAO;AAErB,IAAA,cAAA,GAAiB,MAAM,aAAa,OAAA,CAAQ;AAAA,MAC1C,OAAA,EAAS,eAAA;AAAA,MACT,KAAA,EAAO,yBAAA;AAAA,MACP,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH,CAAA,MAAO;AAEL,IAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,IAAA,IAAI,YAAY,UAAA,EAAY,WAAA,GAAc,MAAA,CAAO,UAAA,CAAW,WAAW,CAAA,GAAI,EAAA;AAC3E,IAAA,OAAA,CAAQ,IAAI,CAAA,uBAAA,EAA0B,OAAO,yBAAyB,SAAS,CAAA,IAAA,EAAO,YAAY,CAAA,CAAE,CAAA;AAEpG,IAAA,OAAO,aAAa,YAAA,EAAc;AAChC,MAAA,MAAM,OAAA,GACJ,SAAA,GAAY,cAAA,GAAiB,YAAA,GAAe,eAAe,SAAA,GAAY,cAAA;AACzE,MAAA,MAAM,KAAA,GAAQ,MAAM,YAAA,CAAa,OAAA,CAAQ;AAAA,QACvC,OAAA,EAAS,eAAA;AAAA,QACT,KAAA,EAAO,yBAAA;AAAA,QACP,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,cAAA,GAAiB,cAAA,CAAe,OAAO,KAAK,CAAA;AAC5C,MAAA,SAAA,GAAY,OAAA,GAAU,EAAA;AAAA,IACxB;AAAA,EACF;AAGA,EAAA,cAAA,CAAe,IAAA,CAAK,CAAC,CAAA,EAAQ,CAAA,KAAW;AACtC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,OAAO,IAAA,GAAO,IAAA;AAAA,EAChB,CAAC,CAAA;AAGD,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,MAAW,OAAO,cAAA,EAAgB;AAChC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,SAAU,CAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,UAAW,CAAA;AAE9C,IAAA,IAAI,MAAA,CAAO,WAAW,SAAA,EAAW;AAC/B,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,6CAAA,EAAgD,MAAA,CAAO,MAAM,CAAA,eAAA,EAAkB,SAAS,CAAA,2CAAA;AAAA,OAE1F;AAAA,IACF;AACA,IAAA,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,EACxB;AAEA,EAAA,MAAM,IAAA,GAAOC,kCAAgB,MAAM,CAAA;AAGnC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,EAAQ;AACnC,EAAA,MAAM,WAAA,GAAe,MAAM,YAAA,CAAa,YAAA,CAAa;AAAA,IACnD,OAAA,EAAS,eAAA;AAAA,IACT,GAAA,EAAK;AAAA,MACH;AAAA,QACE,IAAA,EAAM,UAAA;AAAA,QACN,IAAA,EAAM,eAAA;AAAA,QACN,QAAQ,EAAC;AAAA,QACT,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,QAC7B,eAAA,EAAiB;AAAA;AACnB,KACF;AAAA,IACA,YAAA,EAAc;AAAA,GACf,CAAA;AAED,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,+BAAA,EAAkC,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAC7D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,6BAAA,EAAgC,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AACxD,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oCAAA,EAAuC,OAAO,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,gCAAA,EAAmC,WAAW,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8BAAA,EAAiC,OAAA,KAAY,WAAW,CAAA,CAAE,CAAA;AAEtE,EAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,IAAA,OAAA,CAAQ,IAAI,CAAA,wCAAA,CAA0C,CAAA;AACtD,IAAA,OAAA,CAAQ,GAAA;AAAA,MACN,CAAA,wBAAA,CAAA;AAAA,MACA,MAAA,CAAO,IAAI,CAAC,CAAA,KAAM,OAAO,CAAA,CAAE,QAAA,CAAS,EAAE,CAAC;AAAA,KACzC;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAM,MAAA,EAAO;AACxB;AAUA,eAAsB,uBAAA,CACpB,KAAA,EACA,MAAA,EACA,IAAA,EACgC;AAChC,EAAA,MAAM,EAAE,iBAAA,EAAkB,GAAI,MAAM,OAAO,uBAAoB,CAAA;AAC/D,EAAA,MAAM,SAAgC,EAAC;AAEvC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC3C,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA,CAAU,CAAC,CAAA,KAAM,MAAM,YAAY,CAAA;AAE5D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,IAAA,CAAK,UAAU,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,qDAAA,EAAwD,YAAY,CAAA,CAAE,CAAA;AAClF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8CAAA,EAAiD,SAAS,CAAA,CAAE,CAAA;AACxE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,mDAAA,EAAsD,IAAA,CAAK,SAAS,CAAA,CAAE,CAAA;AAElF,IAAA,IAAI,cAAc,EAAA,EAAI;AACpB,MAAA,OAAA,CAAQ,GAAA,CAAI,6CAA6C,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AACxF,MAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,IAAA,CAAK,WAAW,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,sBAAA,CAAwB,CAAA;AAAA,IAC9E;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA;AAE3C,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,EAAyC,KAAA,CAAM,IAAI,CAAA,CAAE,CAAA;AACjE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,KAAA,CAAM,SAAS,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,uCAAA,CAAA,EAA2C,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AAClG,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,CAAA,EAA0C,KAAA,CAAM,WAAW,CAAA;AAGvE,IAAA,MAAM,OAAA,GAAU,MAAM,iBAAA,CAAkB,YAAA,EAAc,KAAK,CAAA;AAC3D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oDAAA,EAAuD,OAAO,CAAA,CAAE,CAAA;AAE5E,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAA,CAAQ,MAAM,CAAA,2DAAA,CAA6D,CAAA;AAAA,IAC7E;AAEA,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,KAAA,EAAO,IAAA,EAAM,EAAE,GAAG,IAAA,EAAM,SAAA,EAAU,EAAG,CAAA;AAAA,EACrD;AAEA,EAAA,OAAO,MAAA;AACT;AAgBA,eAAsB,gBAAA,CACpB,WAAA,EACA,SAAA,EACA,UAAA,EACiB;AACjB,EAAA,OAAO,MAAMC,2BAAS,CAAC,WAAA,GAAcC,uCAAqB,MAAA,CAAO,SAAS,CAAA,EAAG,UAAU,CAAC,CAAA;AAC1F;AAkBA,eAAsB,6BAAA,CACpB,SAAA,EACA,QAAA,EACA,aAAA,EACA,UAAA,EACmC;AACnC,EAAA,MAAM,EAAE,KAAA,EAAO,IAAA,EAAK,GAAI,SAAA;AAGxB,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,2BAAwB,CAAA;AACjE,EAAA,MAAM,cAAc,MAAM,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAIlE,EAAA,MAAM,oBAAA,GAAuB,MAAMD,0BAAA,CAAS;AAAA,IAC1C,IAAA,CAAK,MAAA;AAAA,IACL,WAAA,CAAY,CAAA;AAAA,IACZ,WAAA,CAAY,CAAA;AAAA,IACZ,IAAA,CAAK,QAAA;AAAA,IACL,IAAA,CAAK,MAAA;AAAA,IACL,IAAA,CAAK;AAAA,GACN,CAAA;AAED,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC/C,EAAA,IAAI,yBAAyB,gBAAA,EAAkB;AAC7C,IAAA,OAAA,CAAQ,MAAM,CAAA,mDAAA,CAAqD,CAAA;AACnE,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,UAAA,EAAa,IAAA,CAAK,MAAM,CAAA,WAAA,EAAc,YAAY,CAAC,CAAA,WAAA,EAAc,WAAA,CAAY,CAAC,CAAA,CAAE,CAAA;AAC9F,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,YAAA,EAAe,IAAA,CAAK,QAAQ,CAAA,UAAA,EAAa,KAAK,MAAM,CAAA,SAAA,EAAY,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AAC1F,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,QAAA,EAAW,oBAAoB,CAAA,SAAA,EAAY,gBAAgB,CAAA,CAAE,CAAA;AAC3E,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,2JAAA;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,MAAM,YAAY,MAAM,gBAAA;AAAA,IACtB,MAAA,CAAO,KAAK,WAAW,CAAA;AAAA,IACvB,KAAA,CAAM,SAAA;AAAA,IACN,MAAA,CAAO,KAAK,UAAU;AAAA,GACxB;AAEA,EAAA,OAAO;AAAA;AAAA,IAEL,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAAA,IAC5B,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAAA,IAChC,SAAA,EAAW,OAAO,SAAS,CAAA;AAAA,IAC3B,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA;AAAA,IAClD,iBAAA,EAAmB,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA;AAAA,IAC/C,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA;AAAA;AAAA,IAGxB,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,oBAAoB,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,WAAW,IAAIC,qCAAmB,CAAA;AAAA,IACzE,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAAA,IACnC,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,cAAA,EAAgB,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA;AAAA,IACtC,iBAAA,EAAmB,mBAAA,CAAoB,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACpF,kBAAkB,mBAAA,CAAoB,KAAA,CAAM,YAAY,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAGxE,eAAA,EAAiB,iBAAA,CAAkB,QAAA,CAAS,eAAA,CAAgB,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACtF,gBAAgB,iBAAA,CAAkB,QAAA,CAAS,eAAe,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAG1E,aAAA,EAAe,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA;AAAA,IAC1C,cAAA,EAAgB,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IAC5C,cAAA,EAAgB,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IAC5C,eAAA,EAAiB,MAAA,CAAO,aAAA,CAAc,QAAQ,CAAA;AAAA,IAE9C,aAAA,EAAe,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA;AAAA,IACvC,cAAA,EAAgB,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA;AAAA,IACzC,cAAA,EAAgB,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA;AAAA,IACzC,eAAA,EAAiB,MAAA,CAAO,UAAA,CAAW,QAAQ;AAAA,GAC7C;AACF;AAqBA,eAAsB,aAAA,CACpB,GAAA,EACA,YAAA,EACA,aAAA,EACA,YACA,aAAA,EAC8B;AAE9B,EAAA,aAAA,GAAgB,gBAAgB,CAAA;AAChC,EAAA,MAAM,EAAE,MAAM,MAAA,EAAO,GAAI,MAAM,cAAA,CAAe,GAAA,CAAI,YAAA,EAAc,GAAA,CAAI,eAAe,CAAA;AAGnF,EAAA,MAAM,aAAa,MAAM,uBAAA,CAAwB,CAAC,YAAY,CAAA,EAAG,QAAQ,IAAI,CAAA;AAC7E,EAAA,MAAM,SAAA,GAAY,WAAW,CAAC,CAAA;AAG9B,EAAA,MAAM,WAAW,MAAMC,kCAAA;AAAA,IACrB,IAAI,KAAA,IAASC,6BAAA;AAAA,IACb,YAAA,CAAa,MAAA;AAAA,IACb,GAAA,CAAI;AAAA,GACN;AAGA,EAAA,aAAA,GAAgB,kBAAkB,CAAA;AAElC,EAAA,MAAM,gBAAgB,MAAM,6BAAA;AAAA,IAC1B,SAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAMC,kCAAA;AAAA,IACtB,UAAA;AAAA,IACA,aAAA;AAAA,IACA,IAAI,cAAA,IAAkB;AAAA,GACxB;AAEA,EAAA,MAAM,cAAA,GAAiBC,yCAAuB,KAAK,CAAA;AAEnD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,UAAA;AAAA,IACT,KAAA,EAAO,cAAA;AAAA,IACP,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,OAAA,EAAS,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IACrC,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,KAAA,EAAO,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA;AAAA,IACjC,eAAA,EAAiB,aAAA;AAAA,IACjB,YAAA,EAAc,UAAA;AAAA,IACd,UAAA,EAAY,CAAC,YAAY;AAAA,GAC3B;AACF;AAKO,SAAS,wBAAwB,IAAA,EAKtC;AACA,EAAA,OAAO;AAAA,IACL,YAAYC,UAAA,CAAM,IAAA,CAAK,YAAY,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IAC/C,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,eAAe,IAAA,CAAK;AAAA,GACtB;AACF","file":"chunk-KIKBPJXJ.cjs","sourcesContent":["{\n  \"UniversalPrivatePool\": \"0x2279b7a0a67db372996a5fab50d91eaa73d2ebe6\",\n  \"ASPRegistryHub\": \"0xe7f1725e7734ce288f8367e1bb143e90bb3f0512\",\n  \"TestToken\": \"0x610178da211fef7d417bc0e6fed39f05609ad788\",\n  \"TestToken2\": \"0xb7f8bc63bbcad18155201308c8f3540b07f84f5e\",\n  \"verifiers\": {\n    \"TransferVerifier\": \"0x9fe46736679d2d9a65f0992f2272de9f3c7fa6e0\",\n    \"MergeVerifier\": \"0xcf7ed3acca5a467e9e704c703e8d87f634fb0fc9\",\n    \"WithdrawVerifier\": \"0xdc64a140aa3e981100a9beca4e685f962f0cf6c9\",\n    \"JoinSplitVerifier\": \"0x5fc8d32690cc91d4c39d9d3abcbd16989f875707\",\n    \"MergeTransfer2x2Verifier\": \"0x0165878a594ca255338adfa4d48449f69242eb8f\",\n    \"MergeTransfer4x2Verifier\": \"0xa513e6e4b8f2a923d98304ec87f64353c4d5c853\"\n  },\n  \"starkVerifiers\": {\n    \"CircleStarkVerifier\": \"0x0dcd1bf9a1b36ce34237eeafef220932846bcd82\"\n  },\n  \"deployBlock\": 1,\n  \"deployTimestamp\": 1774604726045\n}\n","{\n  \"UniversalPrivatePool\": \"0xb111a861cba83b16b9cab613b31b1f0ca03e1996\",\n  \"ASPRegistryHub\": \"0xfd11c56a23314aa88dfbcc36254f33e5e8b010df\",\n  \"TestToken\": \"0x93d4baee17a99734d88717ead15f98ef803c4e38\",\n  \"TestToken2\": \"0xc9169f12033d020a74c89ae8ab25d580846e0910\",\n  \"verifiers\": {\n    \"TransferVerifier\": \"0xa34bde414650a7cd6dbd2d5a08a09df7b4a5951d\",\n    \"MergeVerifier\": \"0xd016825bc5aa7dd3b1cad100c1ac291581a1e2c5\",\n    \"WithdrawVerifier\": \"0x50c624fc273d8e584e46ba9dce2660f5b8c3d3ac\",\n    \"JoinSplitVerifier\": \"0x6799d8a5d4d8cf82a842270916ba71dbf2d1810f\",\n    \"MergeTransfer2x2Verifier\": \"0x0cb522e58d10b8c86c10a8cc7f208ed625444579\",\n    \"MergeTransfer4x2Verifier\": \"0xc22364ff54c102e54c1f44a43284c932983603b6\"\n  },\n  \"starkVerifiers\": {\n    \"CircleStarkVerifier\": \"0xeb2a0cb5a1c4265dd2acbd46060328b87dc8dcce\"\n  },\n  \"deployBlock\": 10477882,\n  \"deployTimestamp\": 1773936927201\n}\n","/**\n * Deployment Configuration Loader\n *\n * Loads contract addresses based on chain ID.\n * Built-in: Anvil (31337) and Sepolia (11155111).\n * Custom chains can be registered at runtime via registerDeployment().\n */\n\nimport type { Address } from \"viem\";\n\n/**\n * Verifier contract addresses\n */\nexport interface VerifierAddresses {\n  TransferVerifier: Address;\n  MergeVerifier: Address;\n  WithdrawVerifier: Address;\n  JoinSplitVerifier?: Address;\n  MergeTransfer2x2Verifier?: Address;\n  MergeTransfer4x2Verifier?: Address;\n}\n\n/**\n * STARK verifier contract addresses\n */\nexport interface StarkVerifierAddresses {\n  CircleStarkVerifier?: Address;\n}\n\n/**\n * Deployment configuration for a chain\n */\nexport interface DeploymentConfig {\n  /** Universal Private Pool contract address */\n  UniversalPrivatePool: Address;\n  /** ASP Registry Hub contract address */\n  ASPRegistryHub: Address;\n  /** Test token address (local/testnet) */\n  TestToken?: Address;\n  /** Test token 2 address — bonding curve token (local/testnet) */\n  TestToken2?: Address;\n  /** Verifier contract addresses */\n  verifiers: VerifierAddresses;\n  /** STARK verifier contract addresses */\n  starkVerifiers?: StarkVerifierAddresses;\n  /** Chain ID */\n  chainId: number;\n  /** Block number when contracts were deployed (for efficient scanning) */\n  deployBlock: number;\n  /** Timestamp when contracts were deployed */\n  deployTimestamp?: number;\n}\n\n/**\n * Raw JSON file format (without chainId, which is added dynamically)\n */\ninterface DeploymentJSON {\n  UniversalPrivatePool: string;\n  ASPRegistryHub: string;\n  TestToken?: string;\n  TestToken2?: string;\n  verifiers: {\n    TransferVerifier: string;\n    MergeVerifier: string;\n    WithdrawVerifier: string;\n    JoinSplitVerifier?: string;\n    MergeTransfer2x2Verifier?: string;\n    MergeTransfer4x2Verifier?: string;\n  };\n  starkVerifiers?: {\n    CircleStarkVerifier?: string;\n  };\n  deployBlock: number;\n  deployTimestamp?: number;\n}\n\n/**\n * Parse raw deployment JSON into typed config\n */\nfunction parseDeployment(\n  json: DeploymentJSON,\n  chainId: number\n): DeploymentConfig {\n  return {\n    UniversalPrivatePool: json.UniversalPrivatePool as Address,\n    ASPRegistryHub: json.ASPRegistryHub as Address,\n    TestToken: json.TestToken as Address | undefined,\n    TestToken2: json.TestToken2 as Address | undefined,\n    verifiers: {\n      TransferVerifier: json.verifiers.TransferVerifier as Address,\n      MergeVerifier: json.verifiers.MergeVerifier as Address,\n      WithdrawVerifier: json.verifiers.WithdrawVerifier as Address,\n      JoinSplitVerifier: json.verifiers.JoinSplitVerifier as Address | undefined,\n      MergeTransfer2x2Verifier: json.verifiers\n        .MergeTransfer2x2Verifier as Address | undefined,\n      MergeTransfer4x2Verifier: json.verifiers\n        .MergeTransfer4x2Verifier as Address | undefined,\n    },\n    starkVerifiers: json.starkVerifiers\n      ? {\n          CircleStarkVerifier: json.starkVerifiers\n            .CircleStarkVerifier as Address | undefined,\n        }\n      : undefined,\n    chainId,\n    deployBlock: json.deployBlock,\n    deployTimestamp: json.deployTimestamp,\n  };\n}\n\n// Import deployment configs\n// These will be updated by the extract-deployment.js script\nimport anvil from \"./31337.json\" with { type: \"json\" };\nimport sepolia from \"./11155111.json\" with { type: \"json\" };\n\nconst deployments: Record<number, DeploymentConfig> = {\n  31337: parseDeployment(anvil as unknown as DeploymentJSON, 31337),\n  11155111: parseDeployment(sepolia as unknown as DeploymentJSON, 11155111),\n};\n\n/**\n * Get deployment config for a chain\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config or null if not found\n *\n * @example\n * ```ts\n * const deployment = getDeployment(31337)\n * if (deployment) {\n *   console.log('Pool address:', deployment.UniversalPrivatePool)\n * }\n * ```\n */\nexport function getDeployment(chainId: number): DeploymentConfig | null {\n  return deployments[chainId] ?? null;\n}\n\n/**\n * Get deployment config or throw if not found\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config\n * @throws Error if deployment not found\n */\nexport function getDeploymentOrThrow(chainId: number): DeploymentConfig {\n  const deployment = getDeployment(chainId);\n  if (!deployment) {\n    throw new Error(\n      `No deployment found for chain ${chainId}. ` +\n        `Supported chains: ${Object.keys(deployments).join(\", \")}`\n    );\n  }\n  return deployment;\n}\n\n/**\n * Check if a chain has a deployment\n */\nexport function hasDeployment(chainId: number): boolean {\n  return chainId in deployments;\n}\n\n/**\n * Get all supported chain IDs\n */\nexport function getSupportedChainIds(): number[] {\n  return Object.keys(deployments).map(Number);\n}\n\n/**\n * Get the token address for a chain\n */\nexport function getTokenAddress(chainId: number): Address | null {\n  const deployment = getDeployment(chainId);\n  if (!deployment) return null;\n  return deployment.TestToken ?? null;\n}\n\n/**\n * Register a deployment for a custom chain at runtime.\n *\n * Use this when deploying your own pool on a chain not built into the SDK.\n * Overrides any existing deployment for the same chainId.\n *\n * @example\n * ```ts\n * registerDeployment(8453, {\n *   UniversalPrivatePool: '0x...',\n *   ASPRegistryHub: '0x...',\n *   verifiers: { TransferVerifier: '0x...', MergeVerifier: '0x...', WithdrawVerifier: '0x...' },\n *   chainId: 8453,\n *   deployBlock: 12345678,\n * })\n * ```\n */\nexport function registerDeployment(chainId: number, config: DeploymentConfig): void {\n  deployments[chainId] = { ...config, chainId };\n}\n","/**\n * Transfer Module\n *\n * Core logic for building and executing UPP transfers.\n * This module is framework-agnostic (no React).\n */\n\nimport { toHex, type Address, type Hex, type PublicClient } from 'viem'\nimport { getDeployment } from '../deployments/index.js'\nimport { buildMerkleTree, type MerkleProof } from '../utils/merkle.js'\nimport { poseidon, BABYJUBJUB_SUBORDER } from '../utils/poseidon.js'\nimport {\n  generateUPPProof,\n  formatProofForContract,\n  STATE_TREE_DEPTH,\n  ASP_TREE_DEPTH,\n  type UPPCircuitType,\n  type UPPTransferCircuitInputs,\n} from './proof.js'\nimport { generateASPProof, type ASPProof } from './asp.js'\nimport type { NoteCreationResult } from '../react/use-upp-account.js'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Transfer stage for progress tracking\n */\nexport type TransferStage =\n  | 'selecting_notes'\n  | 'syncing_merkle'\n  | 'creating_outputs'\n  | 'generating_proof'\n  | 'submitting_tx'\n  | 'confirming'\n\n/**\n * A shielded note with all data needed for spending\n *\n * Post-quantum: uses ownerSecret/ownerHash instead of BabyJubJub one-time keys.\n * Ownership is proven via hash preimage: Poseidon(ownerSecret) == ownerHash.\n */\nexport interface SpendableNote {\n  amount: bigint\n  blinding: bigint\n  commitment: string\n  /** Owner secret (hash preimage for ownership proof) */\n  ownerSecret: string\n  /** Owner hash = Poseidon(ownerSecret) - committed in the note */\n  ownerHash: string\n  leafIndex: number\n  /** Origin address (depositor) - required for UPP circuits */\n  origin: bigint\n  /** Token address - required for UPP circuits */\n  token: bigint\n}\n\n/**\n * Merkle proof with associated note\n */\nexport interface MerkleProofWithNote {\n  proof: MerkleProof\n  note: SpendableNote\n}\n\n/**\n * Transfer context (dependencies)\n */\nexport interface TransferContext {\n  /** viem PublicClient for RPC calls */\n  publicClient: PublicClient\n  /** Contract address */\n  contractAddress: Address\n  /** Chain ID */\n  chainId: number\n  /** Circuit base URL (default: '/circuits/') */\n  circuitBaseUrl?: string\n  /** ASP ID to use (default: DEMO_ASP_ID) */\n  aspId?: bigint\n  /** All approved origins in the ASP tree (enables multi-origin proofs) */\n  aspApprovedOrigins?: bigint[]\n}\n\n/**\n * Transfer result\n */\nexport interface TransferBuildResult {\n  /** Circuit type used */\n  circuit: UPPCircuitType\n  /** Formatted proof for contract */\n  proof: {\n    a: [bigint, bigint]\n    b: [[bigint, bigint], [bigint, bigint]]\n    c: [bigint, bigint]\n  }\n  /** Public signals from proof */\n  publicSignals: string[]\n  /** State tree root */\n  stateRoot: bigint\n  /** ASP tree root */\n  aspRoot: bigint\n  /** Nullifier hash */\n  nullifier: bigint\n  /** Output commitment 1 */\n  outputCommitment1: bigint\n  /** Output commitment 2 */\n  outputCommitment2: bigint\n  /** Token address */\n  token: bigint\n  /** Recipient output */\n  recipientOutput: NoteCreationResult\n  /** Change output */\n  changeOutput: NoteCreationResult\n  /** Notes that will be spent */\n  spentNotes: SpendableNote[]\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** Chunk size for paginated RPC queries on testnets */\nconst RPC_CHUNK_SIZE = 9000n\n\n/**\n * Pad an array to the state tree depth (32 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length STATE_TREE_DEPTH\n */\nfunction padToStateTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= STATE_TREE_DEPTH) {\n    return arr.slice(0, STATE_TREE_DEPTH)\n  }\n  return [...arr, ...Array(STATE_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * Pad an array to the ASP tree depth (20 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length ASP_TREE_DEPTH\n */\nfunction padToASPTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= ASP_TREE_DEPTH) {\n    return arr.slice(0, ASP_TREE_DEPTH)\n  }\n  return [...arr, ...Array(ASP_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * CommitmentInserted event — emitted by _insertLeaf() for ALL leaf insertions\n * (shield, transfer, merge, swap fill, swap claim, swap cancel).\n * This is the single canonical event for Merkle tree reconstruction.\n */\nconst COMMITMENT_INSERTED_EVENT = {\n  type: 'event' as const,\n  name: 'CommitmentInserted',\n  inputs: [\n    { type: 'bytes32', name: 'commitment', indexed: true },\n    { type: 'uint256', name: 'leafIndex' },\n    { type: 'uint256', name: 'timestamp' },\n  ],\n}\n\n// ============================================================================\n// Merkle Tree Functions\n// ============================================================================\n\n/**\n * Fetch all commitments from the contract and build a Merkle tree\n *\n * @param publicClient - viem PublicClient\n * @param contractAddress - Contract address\n * @returns Object with tree and leaves array\n */\nexport async function syncMerkleTree(\n  publicClient: PublicClient,\n  contractAddress: Address\n): Promise<{ tree: ReturnType<typeof buildMerkleTree>; leaves: bigint[] }> {\n  const currentBlock = await publicClient.getBlockNumber()\n  const chainId = await publicClient.getChainId()\n\n  // Use CommitmentInserted events — the canonical event emitted by _insertLeaf()\n  // for ALL operations (shield, transfer, merge, swap fill/claim/cancel).\n  // Each event has an explicit leafIndex, so ordering is deterministic.\n  let commitmentLogs: any[] = []\n\n  if (chainId === 31337) {\n    // Anvil - single query is fine\n    commitmentLogs = await publicClient.getLogs({\n      address: contractAddress,\n      event: COMMITMENT_INSERTED_EVENT,\n      fromBlock: 0n,\n    })\n  } else {\n    // Testnet/mainnet - paginate to avoid RPC limits\n    const deployment = getDeployment(chainId)\n    let fromBlock = deployment?.deployBlock ? BigInt(deployment.deployBlock) : 0n\n    console.log(`[syncMerkleTree] Chain ${chainId}: scanning from block ${fromBlock} to ${currentBlock}`)\n\n    while (fromBlock <= currentBlock) {\n      const toBlock =\n        fromBlock + RPC_CHUNK_SIZE > currentBlock ? currentBlock : fromBlock + RPC_CHUNK_SIZE\n      const chunk = await publicClient.getLogs({\n        address: contractAddress,\n        event: COMMITMENT_INSERTED_EVENT,\n        fromBlock,\n        toBlock,\n      })\n      commitmentLogs = commitmentLogs.concat(chunk)\n      fromBlock = toBlock + 1n\n    }\n  }\n\n  // Sort by explicit leafIndex (most reliable), falling back to block+logIndex\n  commitmentLogs.sort((a: any, b: any) => {\n    const idxA = Number(a.args.leafIndex!)\n    const idxB = Number(b.args.leafIndex!)\n    return idxA - idxB\n  })\n\n  // Build leaves array using the explicit leafIndex from each event\n  const leaves: bigint[] = []\n  for (const log of commitmentLogs) {\n    const leafIndex = Number(log.args.leafIndex!)\n    const commitment = BigInt(log.args.commitment!)\n\n    if (leaves.length !== leafIndex) {\n      console.warn(\n        `[syncMerkleTree] WARNING: Expected leafIndex ${leaves.length} but event has ${leafIndex}. ` +\n        `This may indicate missed events or reorg.`\n      )\n    }\n    leaves.push(commitment)\n  }\n\n  const tree = buildMerkleTree(leaves)\n\n  // Debug: compare our root with on-chain root\n  const ourRoot = await tree.getRoot()\n  const onChainRoot = (await publicClient.readContract({\n    address: contractAddress,\n    abi: [\n      {\n        type: 'function',\n        name: 'getMerkleRoot',\n        inputs: [],\n        outputs: [{ type: 'uint256' }],\n        stateMutability: 'view',\n      },\n    ],\n    functionName: 'getMerkleRoot',\n  })) as bigint\n\n  console.log(`[syncMerkleTree] Leaves count: ${leaves.length}`)\n  console.log(`[syncMerkleTree] Tree depth: ${tree.depth}`)\n  console.log(`[syncMerkleTree] Our computed root: ${ourRoot}`)\n  console.log(`[syncMerkleTree] On-chain root: ${onChainRoot}`)\n  console.log(`[syncMerkleTree] Roots match: ${ourRoot === onChainRoot}`)\n\n  if (ourRoot !== onChainRoot) {\n    console.log(`[syncMerkleTree] WARNING: Root mismatch!`)\n    console.log(\n      `[syncMerkleTree] Leaves:`,\n      leaves.map((l) => '0x' + l.toString(16))\n    )\n  }\n\n  return { tree, leaves }\n}\n\n/**\n * Get Merkle proofs for a set of notes\n *\n * @param notes - Notes to get proofs for\n * @param leaves - All leaves in the tree\n * @param tree - Merkle tree instance\n * @returns Array of proofs with associated notes\n */\nexport async function getMerkleProofsForNotes(\n  notes: SpendableNote[],\n  leaves: bigint[],\n  tree: ReturnType<typeof buildMerkleTree>\n): Promise<MerkleProofWithNote[]> {\n  const { verifyMerkleProof } = await import('../utils/merkle.js')\n  const proofs: MerkleProofWithNote[] = []\n\n  for (const note of notes) {\n    const commitmentBI = BigInt(note.commitment)\n    const leafIndex = leaves.findIndex((l) => l === commitmentBI)\n\n    console.log(`[getMerkleProofsForNotes] Note commitment: ${note.commitment}`)\n    console.log(`[getMerkleProofsForNotes] Note commitment as BigInt: ${commitmentBI}`)\n    console.log(`[getMerkleProofsForNotes] Found at leafIndex: ${leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] Note's stored leafIndex: ${note.leafIndex}`)\n\n    if (leafIndex === -1) {\n      console.log(`[getMerkleProofsForNotes] Leaves in tree:`, leaves.map((l) => l.toString()))\n      throw new Error(`Note ${note.commitment.slice(0, 10)}... not found on-chain`)\n    }\n\n    const proof = await tree.getProof(leafIndex)\n\n    console.log(`[getMerkleProofsForNotes] Proof root: ${proof.root}`)\n    console.log(`[getMerkleProofsForNotes] Proof leafIndex: ${proof.leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] PathElements:`, proof.pathElements.map((e) => e.toString()))\n    console.log(`[getMerkleProofsForNotes] PathIndices:`, proof.pathIndices)\n\n    // Verify the proof locally before returning\n    const isValid = await verifyMerkleProof(commitmentBI, proof)\n    console.log(`[getMerkleProofsForNotes] Local proof verification: ${isValid}`)\n\n    if (!isValid) {\n      console.error(`[getMerkleProofsForNotes] WARNING: Merkle proof is invalid!`)\n    }\n\n    proofs.push({ proof, note: { ...note, leafIndex } })\n  }\n\n  return proofs\n}\n\n// ============================================================================\n// Circuit Input Building\n// ============================================================================\n\n/**\n * Compute nullifier for a UPP note\n *\n * Post-quantum nullifier: Poseidon(ownerSecret, leafIndex, commitment)\n *\n * @param ownerSecret - Owner secret (hash preimage)\n * @param leafIndex - Leaf index in Merkle tree\n * @param commitment - Note commitment\n * @returns Nullifier as bigint\n */\nexport async function computeNullifier(\n  ownerSecret: bigint,\n  leafIndex: number,\n  commitment: bigint\n): Promise<bigint> {\n  return await poseidon([ownerSecret % BABYJUBJUB_SUBORDER, BigInt(leafIndex), commitment])\n}\n\n/**\n * Note with amount for circuit building\n */\nexport interface NoteWithAmount extends NoteCreationResult {\n  amount: bigint\n}\n\n/**\n * Build circuit inputs for UPP transfer (1-in-2-out)\n *\n * @param noteProof - Merkle proof for input note\n * @param aspProof - ASP membership proof for input note's origin\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @returns UPP transfer circuit inputs\n */\nexport async function buildUPPTransferCircuitInputs(\n  noteProof: MerkleProofWithNote,\n  aspProof: ASPProof,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount\n): Promise<UPPTransferCircuitInputs> {\n  const { proof, note } = noteProof\n\n  // Derive BabyJubJub pubkey from ownerSecret for commitment verification\n  const { privateToPublic } = await import('../utils/babyjubjub.js')\n  const inputPubkey = await privateToPublic(BigInt(note.ownerSecret))\n\n  // Compute input commitment locally to verify\n  // Circuit commitment: Poseidon(amount, pubkeyX, pubkeyY, blinding, origin, token)\n  const localInputCommitment = await poseidon([\n    note.amount,\n    inputPubkey.x,\n    inputPubkey.y,\n    note.blinding,\n    note.origin,\n    note.token,\n  ])\n\n  const storedCommitment = BigInt(note.commitment)\n  if (localInputCommitment !== storedCommitment) {\n    console.error(`[buildUPPTransferCircuitInputs] COMMITMENT MISMATCH`)\n    console.error(`  amount: ${note.amount}, pubkeyX: ${inputPubkey.x}, pubkeyY: ${inputPubkey.y}`)\n    console.error(`  blinding: ${note.blinding}, origin: ${note.origin}, token: ${note.token}`)\n    console.error(`  local=${localInputCommitment}, stored=${storedCommitment}`)\n    throw new Error(\n      `Note commitment mismatch — this note was created with an outdated commitment formula. ` +\n      `Clear your shielded account (localStorage) and re-shield tokens.`\n    )\n  }\n\n  const nullifier = await computeNullifier(\n    BigInt(note.ownerSecret),\n    proof.leafIndex,\n    BigInt(note.commitment)\n  )\n\n  return {\n    // Public inputs\n    stateRoot: String(proof.root),\n    aspRoot: String(aspProof.aspRoot),\n    nullifier: String(nullifier),\n    outputCommitment1: String(recipientNote.commitment),\n    outputCommitment2: String(changeNote.commitment),\n    token: String(note.token),\n\n    // Private inputs - Input Note\n    inputAmount: String(note.amount),\n    inputOneTimeSecret: String(BigInt(note.ownerSecret) % BABYJUBJUB_SUBORDER),\n    inputBlinding: String(note.blinding),\n    inputOrigin: String(note.origin),\n    inputLeafIndex: String(proof.leafIndex),\n    inputPathElements: padToStateTreeDepth(proof.pathElements.map((e) => String(e)), '0'),\n    inputPathIndices: padToStateTreeDepth(proof.pathIndices.map(String), '0'),\n\n    // Private inputs - ASP Membership Proof\n    aspPathElements: padToASPTreeDepth(aspProof.aspPathElements.map((e) => String(e)), '0'),\n    aspPathIndices: padToASPTreeDepth(aspProof.aspPathIndices.map(String), '0'),\n\n    // Private inputs - Output Notes (BabyJubJub pubkey coordinates)\n    outputAmount1: String(recipientNote.amount),\n    outputPubkeyX1: String(recipientNote.pubkeyX),\n    outputPubkeyY1: String(recipientNote.pubkeyY),\n    outputBlinding1: String(recipientNote.blinding),\n\n    outputAmount2: String(changeNote.amount),\n    outputPubkeyX2: String(changeNote.pubkeyX),\n    outputPubkeyY2: String(changeNote.pubkeyY),\n    outputBlinding2: String(changeNote.blinding),\n  }\n}\n\n// ============================================================================\n// Transfer Building\n// ============================================================================\n\nimport { DEMO_ASP_ID } from './asp.js'\n\n/**\n * Build a UPP transfer (proof + outputs)\n *\n * This prepares everything needed to submit the transaction.\n * UPP transfer is 1-in-2-out with ASP membership proof.\n *\n * @param ctx - Transfer context\n * @param selectedNote - Note to spend (UPP transfer uses exactly 1 input)\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @param onStageChange - Optional callback for stage updates\n * @returns Transfer build result with proof and outputs\n */\nexport async function buildTransfer(\n  ctx: TransferContext,\n  selectedNote: SpendableNote,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount,\n  onStageChange?: (stage: TransferStage) => void\n): Promise<TransferBuildResult> {\n  // 1. Sync Merkle tree\n  onStageChange?.('syncing_merkle')\n  const { tree, leaves } = await syncMerkleTree(ctx.publicClient, ctx.contractAddress)\n\n  // 2. Get Merkle proof for note\n  const noteProofs = await getMerkleProofsForNotes([selectedNote], leaves, tree)\n  const noteProof = noteProofs[0]!\n\n  // 3. Generate ASP proof for the note's origin\n  const aspProof = await generateASPProof(\n    ctx.aspId ?? DEMO_ASP_ID,\n    selectedNote.origin,\n    ctx.aspApprovedOrigins\n  )\n\n  // 4. Build circuit inputs and generate proof\n  onStageChange?.('generating_proof')\n\n  const circuitInputs = await buildUPPTransferCircuitInputs(\n    noteProof,\n    aspProof,\n    recipientNote,\n    changeNote\n  )\n\n  const { proof } = await generateUPPProof(\n    'transfer',\n    circuitInputs,\n    ctx.circuitBaseUrl ?? '/circuits/'\n  )\n\n  const formattedProof = formatProofForContract(proof)\n\n  return {\n    circuit: 'transfer',\n    proof: formattedProof,\n    publicSignals: proof.publicSignals,\n    stateRoot: BigInt(circuitInputs.stateRoot),\n    aspRoot: BigInt(circuitInputs.aspRoot),\n    nullifier: BigInt(circuitInputs.nullifier),\n    outputCommitment1: BigInt(circuitInputs.outputCommitment1),\n    outputCommitment2: BigInt(circuitInputs.outputCommitment2),\n    token: BigInt(circuitInputs.token),\n    recipientOutput: recipientNote,\n    changeOutput: changeNote,\n    spentNotes: [selectedNote],\n  }\n}\n\n/**\n * Format output for contract call (post-quantum)\n */\nexport function formatOutputForContract(note: NoteCreationResult): {\n  commitment: Hex\n  searchTag: bigint\n  ownerHash: bigint\n  encryptedNote: Hex\n} {\n  return {\n    commitment: toHex(note.commitment, { size: 32 }),\n    searchTag: note.searchTag,\n    ownerHash: note.ownerHash,\n    encryptedNote: note.encryptedNote as Hex,\n  }\n}\n"]}
+{"version":3,"sources":["../src/deployments/31337.json","../src/deployments/11155111.json","../src/deployments/index.ts","../src/core/transfer.ts"],"names":["__default","init_poseidon","STATE_TREE_DEPTH","ASP_TREE_DEPTH","buildMerkleTree","poseidon","BABYJUBJUB_SUBORDER","generateASPProof","DEMO_ASP_ID","generateUPPProof","formatProofForContract","toHex"],"mappings":";;;;;;;;;AAAA,IAAA,SAAA,GAAA;AAAA,EACE,oBAAA,EAAwB,4CAAA;AAAA,EACxB,cAAA,EAAkB,4CAAA;AAAA,EAClB,SAAA,EAAa,4CAAA;AAAA,EACb,UAAA,EAAc,4CAAA;AAAA,EACd,SAAA,EAAa;AAAA,IACX,gBAAA,EAAoB,4CAAA;AAAA,IACpB,aAAA,EAAiB,4CAAA;AAAA,IACjB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,iBAAA,EAAqB,4CAAA;AAAA,IACrB,wBAAA,EAA4B,4CAAA;AAAA,IAC5B,wBAAA,EAA4B;AAAA,GAC9B;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,mBAAA,EAAuB;AAAA,GACzB;AAAA,EACA,WAAA,EAAe,CAAA;AAAA,EACf,eAAA,EAAmB;AACrB,CAAA;;;AClBA,IAAAA,UAAAA,GAAA;AAAA,EACE,oBAAA,EAAwB,4CAAA;AAAA,EACxB,cAAA,EAAkB,4CAAA;AAAA,EAClB,SAAA,EAAa,4CAAA;AAAA,EACb,UAAA,EAAc,4CAAA;AAAA,EACd,SAAA,EAAa;AAAA,IACX,gBAAA,EAAoB,4CAAA;AAAA,IACpB,aAAA,EAAiB,4CAAA;AAAA,IACjB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,iBAAA,EAAqB,4CAAA;AAAA,IACrB,wBAAA,EAA4B,4CAAA;AAAA,IAC5B,wBAAA,EAA4B;AAAA,GAC9B;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,mBAAA,EAAuB;AAAA,GACzB;AAAA,EACA,WAAA,EAAe,QAAA;AAAA,EACf,eAAA,EAAmB;AACrB,CAAA;;;AC6DA,SAAS,eAAA,CACP,MACA,OAAA,EACkB;AAClB,EAAA,OAAO;AAAA,IACL,sBAAsB,IAAA,CAAK,oBAAA;AAAA,IAC3B,gBAAgB,IAAA,CAAK,cAAA;AAAA,IACrB,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,SAAA,EAAW;AAAA,MACT,gBAAA,EAAkB,KAAK,SAAA,CAAU,gBAAA;AAAA,MACjC,aAAA,EAAe,KAAK,SAAA,CAAU,aAAA;AAAA,MAC9B,gBAAA,EAAkB,KAAK,SAAA,CAAU,gBAAA;AAAA,MACjC,iBAAA,EAAmB,KAAK,SAAA,CAAU,iBAAA;AAAA,MAClC,wBAAA,EAA0B,KAAK,SAAA,CAC5B,wBAAA;AAAA,MACH,wBAAA,EAA0B,KAAK,SAAA,CAC5B;AAAA,KACL;AAAA,IACA,cAAA,EAAgB,KAAK,cAAA,GACjB;AAAA,MACE,mBAAA,EAAqB,KAAK,cAAA,CACvB;AAAA,KACL,GACA,MAAA;AAAA,IACJ,OAAA;AAAA,IACA,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,iBAAiB,IAAA,CAAK;AAAA,GACxB;AACF;AAOA,IAAM,WAAA,GAAgD;AAAA,EACpD,KAAA,EAAO,eAAA,CAAgB,SAAA,EAAoC,KAAK,CAAA;AAAA,EAChE,QAAA,EAAU,eAAA,CAAgBA,UAAAA,EAAsC,QAAQ;AAC1E,CAAA;AAgBO,SAAS,cAAc,OAAA,EAA0C;AACtE,EAAA,OAAO,WAAA,CAAY,OAAO,CAAA,IAAK,IAAA;AACjC;AASO,SAAS,qBAAqB,OAAA,EAAmC;AACtE,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,8BAAA,EAAiC,OAAO,CAAA,oBAAA,EACjB,MAAA,CAAO,KAAK,WAAW,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAC5D;AAAA,EACF;AACA,EAAA,OAAO,UAAA;AACT;AAKO,SAAS,cAAc,OAAA,EAA0B;AACtD,EAAA,OAAO,OAAA,IAAW,WAAA;AACpB;AAKO,SAAS,oBAAA,GAAiC;AAC/C,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,IAAI,MAAM,CAAA;AAC5C;AAKO,SAAS,gBAAgB,OAAA,EAAiC;AAC/D,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,YAAY,OAAO,IAAA;AACxB,EAAA,OAAO,WAAW,SAAA,IAAa,IAAA;AACjC;AAmBO,SAAS,kBAAA,CAAmB,SAAiB,MAAA,EAAgC;AAClF,EAAA,WAAA,CAAY,OAAO,CAAA,GAAI,EAAE,GAAG,QAAQ,OAAA,EAAQ;AAC9C;;;AC5LAC,+BAAA,EAAA;AAiHA,IAAM,cAAA,GAAiB,KAAA;AAQvB,SAAS,mBAAA,CAAuB,KAAU,QAAA,EAAkB;AAC1D,EAAA,IAAI,GAAA,CAAI,UAAUC,kCAAA,EAAkB;AAClC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAGA,kCAAgB,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAMA,kCAAA,GAAmB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACxE;AAQA,SAAS,iBAAA,CAAqB,KAAU,QAAA,EAAkB;AACxD,EAAA,IAAI,GAAA,CAAI,UAAUC,gCAAA,EAAgB;AAChC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAGA,gCAAc,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAMA,gCAAA,GAAiB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACtE;AAOA,IAAM,yBAAA,GAA4B;AAAA,EAChC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,oBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,YAAA,EAAc,SAAS,IAAA,EAAK;AAAA,IACrD,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA,EAAY;AAAA,IACrC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA;AAAY;AAEzC,CAAA;AAaA,eAAsB,cAAA,CACpB,cACA,eAAA,EACyE;AACzE,EAAA,MAAM,YAAA,GAAe,MAAM,YAAA,CAAa,cAAA,EAAe;AACvD,EAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,EAAW;AAK9C,EAAA,IAAI,iBAAwB,EAAC;AAE7B,EAAA,IAAI,YAAY,KAAA,EAAO;AAErB,IAAA,cAAA,GAAiB,MAAM,aAAa,OAAA,CAAQ;AAAA,MAC1C,OAAA,EAAS,eAAA;AAAA,MACT,KAAA,EAAO,yBAAA;AAAA,MACP,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH,CAAA,MAAO;AAEL,IAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,IAAA,IAAI,YAAY,UAAA,EAAY,WAAA,GAAc,MAAA,CAAO,UAAA,CAAW,WAAW,CAAA,GAAI,EAAA;AAC3E,IAAA,OAAA,CAAQ,IAAI,CAAA,uBAAA,EAA0B,OAAO,yBAAyB,SAAS,CAAA,IAAA,EAAO,YAAY,CAAA,CAAE,CAAA;AAEpG,IAAA,OAAO,aAAa,YAAA,EAAc;AAChC,MAAA,MAAM,OAAA,GACJ,SAAA,GAAY,cAAA,GAAiB,YAAA,GAAe,eAAe,SAAA,GAAY,cAAA;AACzE,MAAA,MAAM,KAAA,GAAQ,MAAM,YAAA,CAAa,OAAA,CAAQ;AAAA,QACvC,OAAA,EAAS,eAAA;AAAA,QACT,KAAA,EAAO,yBAAA;AAAA,QACP,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,cAAA,GAAiB,cAAA,CAAe,OAAO,KAAK,CAAA;AAC5C,MAAA,SAAA,GAAY,OAAA,GAAU,EAAA;AAAA,IACxB;AAAA,EACF;AAGA,EAAA,cAAA,CAAe,IAAA,CAAK,CAAC,CAAA,EAAQ,CAAA,KAAW;AACtC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,OAAO,IAAA,GAAO,IAAA;AAAA,EAChB,CAAC,CAAA;AAGD,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,MAAW,OAAO,cAAA,EAAgB;AAChC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,SAAU,CAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,UAAW,CAAA;AAE9C,IAAA,IAAI,MAAA,CAAO,WAAW,SAAA,EAAW;AAC/B,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,6CAAA,EAAgD,MAAA,CAAO,MAAM,CAAA,eAAA,EAAkB,SAAS,CAAA,2CAAA;AAAA,OAE1F;AAAA,IACF;AACA,IAAA,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,EACxB;AAEA,EAAA,MAAM,IAAA,GAAOC,kCAAgB,MAAM,CAAA;AAGnC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,EAAQ;AACnC,EAAA,MAAM,WAAA,GAAe,MAAM,YAAA,CAAa,YAAA,CAAa;AAAA,IACnD,OAAA,EAAS,eAAA;AAAA,IACT,GAAA,EAAK;AAAA,MACH;AAAA,QACE,IAAA,EAAM,UAAA;AAAA,QACN,IAAA,EAAM,eAAA;AAAA,QACN,QAAQ,EAAC;AAAA,QACT,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,QAC7B,eAAA,EAAiB;AAAA;AACnB,KACF;AAAA,IACA,YAAA,EAAc;AAAA,GACf,CAAA;AAED,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,+BAAA,EAAkC,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAC7D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,6BAAA,EAAgC,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AACxD,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oCAAA,EAAuC,OAAO,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,gCAAA,EAAmC,WAAW,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8BAAA,EAAiC,OAAA,KAAY,WAAW,CAAA,CAAE,CAAA;AAEtE,EAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,IAAA,OAAA,CAAQ,IAAI,CAAA,wCAAA,CAA0C,CAAA;AACtD,IAAA,OAAA,CAAQ,GAAA;AAAA,MACN,CAAA,wBAAA,CAAA;AAAA,MACA,MAAA,CAAO,IAAI,CAAC,CAAA,KAAM,OAAO,CAAA,CAAE,QAAA,CAAS,EAAE,CAAC;AAAA,KACzC;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAM,MAAA,EAAO;AACxB;AAUA,eAAsB,uBAAA,CACpB,KAAA,EACA,MAAA,EACA,IAAA,EACgC;AAChC,EAAA,MAAM,EAAE,iBAAA,EAAkB,GAAI,MAAM,OAAO,uBAAoB,CAAA;AAC/D,EAAA,MAAM,SAAgC,EAAC;AAEvC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC3C,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA,CAAU,CAAC,CAAA,KAAM,MAAM,YAAY,CAAA;AAE5D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,IAAA,CAAK,UAAU,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,qDAAA,EAAwD,YAAY,CAAA,CAAE,CAAA;AAClF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8CAAA,EAAiD,SAAS,CAAA,CAAE,CAAA;AACxE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,mDAAA,EAAsD,IAAA,CAAK,SAAS,CAAA,CAAE,CAAA;AAElF,IAAA,IAAI,cAAc,EAAA,EAAI;AACpB,MAAA,OAAA,CAAQ,GAAA,CAAI,6CAA6C,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AACxF,MAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,IAAA,CAAK,WAAW,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,sBAAA,CAAwB,CAAA;AAAA,IAC9E;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA;AAE3C,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,EAAyC,KAAA,CAAM,IAAI,CAAA,CAAE,CAAA;AACjE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,KAAA,CAAM,SAAS,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,uCAAA,CAAA,EAA2C,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AAClG,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,CAAA,EAA0C,KAAA,CAAM,WAAW,CAAA;AAGvE,IAAA,MAAM,OAAA,GAAU,MAAM,iBAAA,CAAkB,YAAA,EAAc,KAAK,CAAA;AAC3D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oDAAA,EAAuD,OAAO,CAAA,CAAE,CAAA;AAE5E,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAA,CAAQ,MAAM,CAAA,2DAAA,CAA6D,CAAA;AAAA,IAC7E;AAEA,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,KAAA,EAAO,IAAA,EAAM,EAAE,GAAG,IAAA,EAAM,SAAA,EAAU,EAAG,CAAA;AAAA,EACrD;AAEA,EAAA,OAAO,MAAA;AACT;AAgBA,eAAsB,gBAAA,CACpB,WAAA,EACA,SAAA,EACA,UAAA,EACiB;AACjB,EAAA,OAAO,MAAMC,2BAAS,CAAC,WAAA,GAAcC,uCAAqB,MAAA,CAAO,SAAS,CAAA,EAAG,UAAU,CAAC,CAAA;AAC1F;AAkBA,eAAsB,6BAAA,CACpB,SAAA,EACA,QAAA,EACA,aAAA,EACA,UAAA,EACmC;AACnC,EAAA,MAAM,EAAE,KAAA,EAAO,IAAA,EAAK,GAAI,SAAA;AAGxB,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,2BAAwB,CAAA;AACjE,EAAA,MAAM,cAAc,MAAM,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAIlE,EAAA,MAAM,oBAAA,GAAuB,MAAMD,0BAAA,CAAS;AAAA,IAC1C,IAAA,CAAK,MAAA;AAAA,IACL,WAAA,CAAY,CAAA;AAAA,IACZ,WAAA,CAAY,CAAA;AAAA,IACZ,IAAA,CAAK,QAAA;AAAA,IACL,IAAA,CAAK,MAAA;AAAA,IACL,IAAA,CAAK;AAAA,GACN,CAAA;AAED,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC/C,EAAA,IAAI,yBAAyB,gBAAA,EAAkB;AAC7C,IAAA,OAAA,CAAQ,MAAM,CAAA,mDAAA,CAAqD,CAAA;AACnE,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,UAAA,EAAa,IAAA,CAAK,MAAM,CAAA,WAAA,EAAc,YAAY,CAAC,CAAA,WAAA,EAAc,WAAA,CAAY,CAAC,CAAA,CAAE,CAAA;AAC9F,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,YAAA,EAAe,IAAA,CAAK,QAAQ,CAAA,UAAA,EAAa,KAAK,MAAM,CAAA,SAAA,EAAY,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AAC1F,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,QAAA,EAAW,oBAAoB,CAAA,SAAA,EAAY,gBAAgB,CAAA,CAAE,CAAA;AAC3E,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,2JAAA;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,MAAM,YAAY,MAAM,gBAAA;AAAA,IACtB,MAAA,CAAO,KAAK,WAAW,CAAA;AAAA,IACvB,KAAA,CAAM,SAAA;AAAA,IACN,MAAA,CAAO,KAAK,UAAU;AAAA,GACxB;AAEA,EAAA,OAAO;AAAA;AAAA,IAEL,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAAA,IAC5B,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAAA,IAChC,SAAA,EAAW,OAAO,SAAS,CAAA;AAAA,IAC3B,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA;AAAA,IAClD,iBAAA,EAAmB,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA;AAAA,IAC/C,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA;AAAA;AAAA,IAGxB,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,oBAAoB,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,WAAW,IAAIC,qCAAmB,CAAA;AAAA,IACzE,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAAA,IACnC,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,cAAA,EAAgB,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA;AAAA,IACtC,iBAAA,EAAmB,mBAAA,CAAoB,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACpF,kBAAkB,mBAAA,CAAoB,KAAA,CAAM,YAAY,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAGxE,eAAA,EAAiB,iBAAA,CAAkB,QAAA,CAAS,eAAA,CAAgB,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACtF,gBAAgB,iBAAA,CAAkB,QAAA,CAAS,eAAe,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAG1E,aAAA,EAAe,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA;AAAA,IAC1C,cAAA,EAAgB,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IAC5C,cAAA,EAAgB,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IAC5C,eAAA,EAAiB,MAAA,CAAO,aAAA,CAAc,QAAQ,CAAA;AAAA,IAE9C,aAAA,EAAe,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA;AAAA,IACvC,cAAA,EAAgB,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA;AAAA,IACzC,cAAA,EAAgB,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA;AAAA,IACzC,eAAA,EAAiB,MAAA,CAAO,UAAA,CAAW,QAAQ;AAAA,GAC7C;AACF;AAqBA,eAAsB,aAAA,CACpB,GAAA,EACA,YAAA,EACA,aAAA,EACA,YACA,aAAA,EAC8B;AAE9B,EAAA,aAAA,GAAgB,gBAAgB,CAAA;AAChC,EAAA,MAAM,EAAE,MAAM,MAAA,EAAO,GAAI,MAAM,cAAA,CAAe,GAAA,CAAI,YAAA,EAAc,GAAA,CAAI,eAAe,CAAA;AAGnF,EAAA,MAAM,aAAa,MAAM,uBAAA,CAAwB,CAAC,YAAY,CAAA,EAAG,QAAQ,IAAI,CAAA;AAC7E,EAAA,MAAM,SAAA,GAAY,WAAW,CAAC,CAAA;AAG9B,EAAA,MAAM,WAAW,MAAMC,kCAAA;AAAA,IACrB,IAAI,KAAA,IAASC,6BAAA;AAAA,IACb,YAAA,CAAa,MAAA;AAAA,IACb,GAAA,CAAI;AAAA,GACN;AAGA,EAAA,aAAA,GAAgB,kBAAkB,CAAA;AAElC,EAAA,MAAM,gBAAgB,MAAM,6BAAA;AAAA,IAC1B,SAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAMC,kCAAA;AAAA,IACtB,UAAA;AAAA,IACA,aAAA;AAAA,IACA,IAAI,cAAA,IAAkB;AAAA,GACxB;AAEA,EAAA,MAAM,cAAA,GAAiBC,yCAAuB,KAAK,CAAA;AAEnD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,UAAA;AAAA,IACT,KAAA,EAAO,cAAA;AAAA,IACP,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,OAAA,EAAS,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IACrC,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,KAAA,EAAO,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA;AAAA,IACjC,eAAA,EAAiB,aAAA;AAAA,IACjB,YAAA,EAAc,UAAA;AAAA,IACd,UAAA,EAAY,CAAC,YAAY;AAAA,GAC3B;AACF;AAKO,SAAS,wBAAwB,IAAA,EAKtC;AACA,EAAA,OAAO;AAAA,IACL,YAAYC,UAAA,CAAM,IAAA,CAAK,YAAY,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IAC/C,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,eAAe,IAAA,CAAK;AAAA,GACtB;AACF","file":"chunk-X4DLTVOG.cjs","sourcesContent":["{\n  \"UniversalPrivatePool\": \"0x2279b7a0a67db372996a5fab50d91eaa73d2ebe6\",\n  \"ASPRegistryHub\": \"0xe7f1725e7734ce288f8367e1bb143e90bb3f0512\",\n  \"TestToken\": \"0x610178da211fef7d417bc0e6fed39f05609ad788\",\n  \"TestToken2\": \"0xb7f8bc63bbcad18155201308c8f3540b07f84f5e\",\n  \"verifiers\": {\n    \"TransferVerifier\": \"0x9fe46736679d2d9a65f0992f2272de9f3c7fa6e0\",\n    \"MergeVerifier\": \"0xcf7ed3acca5a467e9e704c703e8d87f634fb0fc9\",\n    \"WithdrawVerifier\": \"0xdc64a140aa3e981100a9beca4e685f962f0cf6c9\",\n    \"JoinSplitVerifier\": \"0x5fc8d32690cc91d4c39d9d3abcbd16989f875707\",\n    \"MergeTransfer2x2Verifier\": \"0x0165878a594ca255338adfa4d48449f69242eb8f\",\n    \"MergeTransfer4x2Verifier\": \"0xa513e6e4b8f2a923d98304ec87f64353c4d5c853\"\n  },\n  \"starkVerifiers\": {\n    \"CircleStarkVerifier\": \"0x0dcd1bf9a1b36ce34237eeafef220932846bcd82\"\n  },\n  \"deployBlock\": 1,\n  \"deployTimestamp\": 1774617727738\n}\n","{\n  \"UniversalPrivatePool\": \"0x2a725ec54232981f60574a6b9b7d25d202f6b862\",\n  \"ASPRegistryHub\": \"0xbfb30e842412a96463b81b7a68b49116c90aa023\",\n  \"TestToken\": \"0xe5dd1b81dfca6ff1a9893d7aa194b3fcd8b5b54a\",\n  \"TestToken2\": \"0x34564fbc2e13488d462d152714043375ab419479\",\n  \"verifiers\": {\n    \"TransferVerifier\": \"0x936cd5213de3cefb3d8f7f0747ec01dbd4c0d33d\",\n    \"MergeVerifier\": \"0x21c02ed7e61af9e629aef34b070121c8502c80ad\",\n    \"WithdrawVerifier\": \"0x38d8b4240d3ef456de63bfb4c8be35712fd503aa\",\n    \"JoinSplitVerifier\": \"0x474f482858cc66292356f9acbcc984ccf482b196\",\n    \"MergeTransfer2x2Verifier\": \"0xd0aaa7b28a4240a979df42a2949332405c6964f9\",\n    \"MergeTransfer4x2Verifier\": \"0xc5e04a3e865d095145ca92a842b389cf9ea96b30\"\n  },\n  \"starkVerifiers\": {\n    \"CircleStarkVerifier\": \"0xb6af7c846f4ace44b8e8bb06e923acf07a3fcb7f\"\n  },\n  \"deployBlock\": 10532693,\n  \"deployTimestamp\": 1774615681231\n}\n","/**\n * Deployment Configuration Loader\n *\n * Loads contract addresses based on chain ID.\n * Built-in: Anvil (31337) and Sepolia (11155111).\n * Custom chains can be registered at runtime via registerDeployment().\n */\n\nimport type { Address } from \"viem\";\n\n/**\n * Verifier contract addresses\n */\nexport interface VerifierAddresses {\n  TransferVerifier: Address;\n  MergeVerifier: Address;\n  WithdrawVerifier: Address;\n  JoinSplitVerifier?: Address;\n  MergeTransfer2x2Verifier?: Address;\n  MergeTransfer4x2Verifier?: Address;\n}\n\n/**\n * STARK verifier contract addresses\n */\nexport interface StarkVerifierAddresses {\n  CircleStarkVerifier?: Address;\n}\n\n/**\n * Deployment configuration for a chain\n */\nexport interface DeploymentConfig {\n  /** Universal Private Pool contract address */\n  UniversalPrivatePool: Address;\n  /** ASP Registry Hub contract address */\n  ASPRegistryHub: Address;\n  /** Test token address (local/testnet) */\n  TestToken?: Address;\n  /** Test token 2 address — bonding curve token (local/testnet) */\n  TestToken2?: Address;\n  /** Verifier contract addresses */\n  verifiers: VerifierAddresses;\n  /** STARK verifier contract addresses */\n  starkVerifiers?: StarkVerifierAddresses;\n  /** Chain ID */\n  chainId: number;\n  /** Block number when contracts were deployed (for efficient scanning) */\n  deployBlock: number;\n  /** Timestamp when contracts were deployed */\n  deployTimestamp?: number;\n}\n\n/**\n * Raw JSON file format (without chainId, which is added dynamically)\n */\ninterface DeploymentJSON {\n  UniversalPrivatePool: string;\n  ASPRegistryHub: string;\n  TestToken?: string;\n  TestToken2?: string;\n  verifiers: {\n    TransferVerifier: string;\n    MergeVerifier: string;\n    WithdrawVerifier: string;\n    JoinSplitVerifier?: string;\n    MergeTransfer2x2Verifier?: string;\n    MergeTransfer4x2Verifier?: string;\n  };\n  starkVerifiers?: {\n    CircleStarkVerifier?: string;\n  };\n  deployBlock: number;\n  deployTimestamp?: number;\n}\n\n/**\n * Parse raw deployment JSON into typed config\n */\nfunction parseDeployment(\n  json: DeploymentJSON,\n  chainId: number\n): DeploymentConfig {\n  return {\n    UniversalPrivatePool: json.UniversalPrivatePool as Address,\n    ASPRegistryHub: json.ASPRegistryHub as Address,\n    TestToken: json.TestToken as Address | undefined,\n    TestToken2: json.TestToken2 as Address | undefined,\n    verifiers: {\n      TransferVerifier: json.verifiers.TransferVerifier as Address,\n      MergeVerifier: json.verifiers.MergeVerifier as Address,\n      WithdrawVerifier: json.verifiers.WithdrawVerifier as Address,\n      JoinSplitVerifier: json.verifiers.JoinSplitVerifier as Address | undefined,\n      MergeTransfer2x2Verifier: json.verifiers\n        .MergeTransfer2x2Verifier as Address | undefined,\n      MergeTransfer4x2Verifier: json.verifiers\n        .MergeTransfer4x2Verifier as Address | undefined,\n    },\n    starkVerifiers: json.starkVerifiers\n      ? {\n          CircleStarkVerifier: json.starkVerifiers\n            .CircleStarkVerifier as Address | undefined,\n        }\n      : undefined,\n    chainId,\n    deployBlock: json.deployBlock,\n    deployTimestamp: json.deployTimestamp,\n  };\n}\n\n// Import deployment configs\n// These will be updated by the extract-deployment.js script\nimport anvil from \"./31337.json\" with { type: \"json\" };\nimport sepolia from \"./11155111.json\" with { type: \"json\" };\n\nconst deployments: Record<number, DeploymentConfig> = {\n  31337: parseDeployment(anvil as unknown as DeploymentJSON, 31337),\n  11155111: parseDeployment(sepolia as unknown as DeploymentJSON, 11155111),\n};\n\n/**\n * Get deployment config for a chain\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config or null if not found\n *\n * @example\n * ```ts\n * const deployment = getDeployment(31337)\n * if (deployment) {\n *   console.log('Pool address:', deployment.UniversalPrivatePool)\n * }\n * ```\n */\nexport function getDeployment(chainId: number): DeploymentConfig | null {\n  return deployments[chainId] ?? null;\n}\n\n/**\n * Get deployment config or throw if not found\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config\n * @throws Error if deployment not found\n */\nexport function getDeploymentOrThrow(chainId: number): DeploymentConfig {\n  const deployment = getDeployment(chainId);\n  if (!deployment) {\n    throw new Error(\n      `No deployment found for chain ${chainId}. ` +\n        `Supported chains: ${Object.keys(deployments).join(\", \")}`\n    );\n  }\n  return deployment;\n}\n\n/**\n * Check if a chain has a deployment\n */\nexport function hasDeployment(chainId: number): boolean {\n  return chainId in deployments;\n}\n\n/**\n * Get all supported chain IDs\n */\nexport function getSupportedChainIds(): number[] {\n  return Object.keys(deployments).map(Number);\n}\n\n/**\n * Get the token address for a chain\n */\nexport function getTokenAddress(chainId: number): Address | null {\n  const deployment = getDeployment(chainId);\n  if (!deployment) return null;\n  return deployment.TestToken ?? null;\n}\n\n/**\n * Register a deployment for a custom chain at runtime.\n *\n * Use this when deploying your own pool on a chain not built into the SDK.\n * Overrides any existing deployment for the same chainId.\n *\n * @example\n * ```ts\n * registerDeployment(8453, {\n *   UniversalPrivatePool: '0x...',\n *   ASPRegistryHub: '0x...',\n *   verifiers: { TransferVerifier: '0x...', MergeVerifier: '0x...', WithdrawVerifier: '0x...' },\n *   chainId: 8453,\n *   deployBlock: 12345678,\n * })\n * ```\n */\nexport function registerDeployment(chainId: number, config: DeploymentConfig): void {\n  deployments[chainId] = { ...config, chainId };\n}\n","/**\n * Transfer Module\n *\n * Core logic for building and executing UPP transfers.\n * This module is framework-agnostic (no React).\n */\n\nimport { toHex, type Address, type Hex, type PublicClient } from 'viem'\nimport { getDeployment } from '../deployments/index.js'\nimport { buildMerkleTree, type MerkleProof } from '../utils/merkle.js'\nimport { poseidon, BABYJUBJUB_SUBORDER } from '../utils/poseidon.js'\nimport {\n  generateUPPProof,\n  formatProofForContract,\n  STATE_TREE_DEPTH,\n  ASP_TREE_DEPTH,\n  type UPPCircuitType,\n  type UPPTransferCircuitInputs,\n} from './proof.js'\nimport { generateASPProof, type ASPProof } from './asp.js'\nimport type { NoteCreationResult } from '../react/use-upp-account.js'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Transfer stage for progress tracking\n */\nexport type TransferStage =\n  | 'selecting_notes'\n  | 'syncing_merkle'\n  | 'creating_outputs'\n  | 'generating_proof'\n  | 'submitting_tx'\n  | 'confirming'\n\n/**\n * A shielded note with all data needed for spending\n *\n * Post-quantum: uses ownerSecret/ownerHash instead of BabyJubJub one-time keys.\n * Ownership is proven via hash preimage: Poseidon(ownerSecret) == ownerHash.\n */\nexport interface SpendableNote {\n  amount: bigint\n  blinding: bigint\n  commitment: string\n  /** Owner secret (hash preimage for ownership proof) */\n  ownerSecret: string\n  /** Owner hash = Poseidon(ownerSecret) - committed in the note */\n  ownerHash: string\n  leafIndex: number\n  /** Origin address (depositor) - required for UPP circuits */\n  origin: bigint\n  /** Token address - required for UPP circuits */\n  token: bigint\n}\n\n/**\n * Merkle proof with associated note\n */\nexport interface MerkleProofWithNote {\n  proof: MerkleProof\n  note: SpendableNote\n}\n\n/**\n * Transfer context (dependencies)\n */\nexport interface TransferContext {\n  /** viem PublicClient for RPC calls */\n  publicClient: PublicClient\n  /** Contract address */\n  contractAddress: Address\n  /** Chain ID */\n  chainId: number\n  /** Circuit base URL (default: '/circuits/') */\n  circuitBaseUrl?: string\n  /** ASP ID to use (default: DEMO_ASP_ID) */\n  aspId?: bigint\n  /** All approved origins in the ASP tree (enables multi-origin proofs) */\n  aspApprovedOrigins?: bigint[]\n}\n\n/**\n * Transfer result\n */\nexport interface TransferBuildResult {\n  /** Circuit type used */\n  circuit: UPPCircuitType\n  /** Formatted proof for contract */\n  proof: {\n    a: [bigint, bigint]\n    b: [[bigint, bigint], [bigint, bigint]]\n    c: [bigint, bigint]\n  }\n  /** Public signals from proof */\n  publicSignals: string[]\n  /** State tree root */\n  stateRoot: bigint\n  /** ASP tree root */\n  aspRoot: bigint\n  /** Nullifier hash */\n  nullifier: bigint\n  /** Output commitment 1 */\n  outputCommitment1: bigint\n  /** Output commitment 2 */\n  outputCommitment2: bigint\n  /** Token address */\n  token: bigint\n  /** Recipient output */\n  recipientOutput: NoteCreationResult\n  /** Change output */\n  changeOutput: NoteCreationResult\n  /** Notes that will be spent */\n  spentNotes: SpendableNote[]\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** Chunk size for paginated RPC queries on testnets */\nconst RPC_CHUNK_SIZE = 9000n\n\n/**\n * Pad an array to the state tree depth (32 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length STATE_TREE_DEPTH\n */\nfunction padToStateTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= STATE_TREE_DEPTH) {\n    return arr.slice(0, STATE_TREE_DEPTH)\n  }\n  return [...arr, ...Array(STATE_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * Pad an array to the ASP tree depth (20 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length ASP_TREE_DEPTH\n */\nfunction padToASPTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= ASP_TREE_DEPTH) {\n    return arr.slice(0, ASP_TREE_DEPTH)\n  }\n  return [...arr, ...Array(ASP_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * CommitmentInserted event — emitted by _insertLeaf() for ALL leaf insertions\n * (shield, transfer, merge, swap fill, swap claim, swap cancel).\n * This is the single canonical event for Merkle tree reconstruction.\n */\nconst COMMITMENT_INSERTED_EVENT = {\n  type: 'event' as const,\n  name: 'CommitmentInserted',\n  inputs: [\n    { type: 'bytes32', name: 'commitment', indexed: true },\n    { type: 'uint256', name: 'leafIndex' },\n    { type: 'uint256', name: 'timestamp' },\n  ],\n}\n\n// ============================================================================\n// Merkle Tree Functions\n// ============================================================================\n\n/**\n * Fetch all commitments from the contract and build a Merkle tree\n *\n * @param publicClient - viem PublicClient\n * @param contractAddress - Contract address\n * @returns Object with tree and leaves array\n */\nexport async function syncMerkleTree(\n  publicClient: PublicClient,\n  contractAddress: Address\n): Promise<{ tree: ReturnType<typeof buildMerkleTree>; leaves: bigint[] }> {\n  const currentBlock = await publicClient.getBlockNumber()\n  const chainId = await publicClient.getChainId()\n\n  // Use CommitmentInserted events — the canonical event emitted by _insertLeaf()\n  // for ALL operations (shield, transfer, merge, swap fill/claim/cancel).\n  // Each event has an explicit leafIndex, so ordering is deterministic.\n  let commitmentLogs: any[] = []\n\n  if (chainId === 31337) {\n    // Anvil - single query is fine\n    commitmentLogs = await publicClient.getLogs({\n      address: contractAddress,\n      event: COMMITMENT_INSERTED_EVENT,\n      fromBlock: 0n,\n    })\n  } else {\n    // Testnet/mainnet - paginate to avoid RPC limits\n    const deployment = getDeployment(chainId)\n    let fromBlock = deployment?.deployBlock ? BigInt(deployment.deployBlock) : 0n\n    console.log(`[syncMerkleTree] Chain ${chainId}: scanning from block ${fromBlock} to ${currentBlock}`)\n\n    while (fromBlock <= currentBlock) {\n      const toBlock =\n        fromBlock + RPC_CHUNK_SIZE > currentBlock ? currentBlock : fromBlock + RPC_CHUNK_SIZE\n      const chunk = await publicClient.getLogs({\n        address: contractAddress,\n        event: COMMITMENT_INSERTED_EVENT,\n        fromBlock,\n        toBlock,\n      })\n      commitmentLogs = commitmentLogs.concat(chunk)\n      fromBlock = toBlock + 1n\n    }\n  }\n\n  // Sort by explicit leafIndex (most reliable), falling back to block+logIndex\n  commitmentLogs.sort((a: any, b: any) => {\n    const idxA = Number(a.args.leafIndex!)\n    const idxB = Number(b.args.leafIndex!)\n    return idxA - idxB\n  })\n\n  // Build leaves array using the explicit leafIndex from each event\n  const leaves: bigint[] = []\n  for (const log of commitmentLogs) {\n    const leafIndex = Number(log.args.leafIndex!)\n    const commitment = BigInt(log.args.commitment!)\n\n    if (leaves.length !== leafIndex) {\n      console.warn(\n        `[syncMerkleTree] WARNING: Expected leafIndex ${leaves.length} but event has ${leafIndex}. ` +\n        `This may indicate missed events or reorg.`\n      )\n    }\n    leaves.push(commitment)\n  }\n\n  const tree = buildMerkleTree(leaves)\n\n  // Debug: compare our root with on-chain root\n  const ourRoot = await tree.getRoot()\n  const onChainRoot = (await publicClient.readContract({\n    address: contractAddress,\n    abi: [\n      {\n        type: 'function',\n        name: 'getMerkleRoot',\n        inputs: [],\n        outputs: [{ type: 'uint256' }],\n        stateMutability: 'view',\n      },\n    ],\n    functionName: 'getMerkleRoot',\n  })) as bigint\n\n  console.log(`[syncMerkleTree] Leaves count: ${leaves.length}`)\n  console.log(`[syncMerkleTree] Tree depth: ${tree.depth}`)\n  console.log(`[syncMerkleTree] Our computed root: ${ourRoot}`)\n  console.log(`[syncMerkleTree] On-chain root: ${onChainRoot}`)\n  console.log(`[syncMerkleTree] Roots match: ${ourRoot === onChainRoot}`)\n\n  if (ourRoot !== onChainRoot) {\n    console.log(`[syncMerkleTree] WARNING: Root mismatch!`)\n    console.log(\n      `[syncMerkleTree] Leaves:`,\n      leaves.map((l) => '0x' + l.toString(16))\n    )\n  }\n\n  return { tree, leaves }\n}\n\n/**\n * Get Merkle proofs for a set of notes\n *\n * @param notes - Notes to get proofs for\n * @param leaves - All leaves in the tree\n * @param tree - Merkle tree instance\n * @returns Array of proofs with associated notes\n */\nexport async function getMerkleProofsForNotes(\n  notes: SpendableNote[],\n  leaves: bigint[],\n  tree: ReturnType<typeof buildMerkleTree>\n): Promise<MerkleProofWithNote[]> {\n  const { verifyMerkleProof } = await import('../utils/merkle.js')\n  const proofs: MerkleProofWithNote[] = []\n\n  for (const note of notes) {\n    const commitmentBI = BigInt(note.commitment)\n    const leafIndex = leaves.findIndex((l) => l === commitmentBI)\n\n    console.log(`[getMerkleProofsForNotes] Note commitment: ${note.commitment}`)\n    console.log(`[getMerkleProofsForNotes] Note commitment as BigInt: ${commitmentBI}`)\n    console.log(`[getMerkleProofsForNotes] Found at leafIndex: ${leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] Note's stored leafIndex: ${note.leafIndex}`)\n\n    if (leafIndex === -1) {\n      console.log(`[getMerkleProofsForNotes] Leaves in tree:`, leaves.map((l) => l.toString()))\n      throw new Error(`Note ${note.commitment.slice(0, 10)}... not found on-chain`)\n    }\n\n    const proof = await tree.getProof(leafIndex)\n\n    console.log(`[getMerkleProofsForNotes] Proof root: ${proof.root}`)\n    console.log(`[getMerkleProofsForNotes] Proof leafIndex: ${proof.leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] PathElements:`, proof.pathElements.map((e) => e.toString()))\n    console.log(`[getMerkleProofsForNotes] PathIndices:`, proof.pathIndices)\n\n    // Verify the proof locally before returning\n    const isValid = await verifyMerkleProof(commitmentBI, proof)\n    console.log(`[getMerkleProofsForNotes] Local proof verification: ${isValid}`)\n\n    if (!isValid) {\n      console.error(`[getMerkleProofsForNotes] WARNING: Merkle proof is invalid!`)\n    }\n\n    proofs.push({ proof, note: { ...note, leafIndex } })\n  }\n\n  return proofs\n}\n\n// ============================================================================\n// Circuit Input Building\n// ============================================================================\n\n/**\n * Compute nullifier for a UPP note\n *\n * Post-quantum nullifier: Poseidon(ownerSecret, leafIndex, commitment)\n *\n * @param ownerSecret - Owner secret (hash preimage)\n * @param leafIndex - Leaf index in Merkle tree\n * @param commitment - Note commitment\n * @returns Nullifier as bigint\n */\nexport async function computeNullifier(\n  ownerSecret: bigint,\n  leafIndex: number,\n  commitment: bigint\n): Promise<bigint> {\n  return await poseidon([ownerSecret % BABYJUBJUB_SUBORDER, BigInt(leafIndex), commitment])\n}\n\n/**\n * Note with amount for circuit building\n */\nexport interface NoteWithAmount extends NoteCreationResult {\n  amount: bigint\n}\n\n/**\n * Build circuit inputs for UPP transfer (1-in-2-out)\n *\n * @param noteProof - Merkle proof for input note\n * @param aspProof - ASP membership proof for input note's origin\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @returns UPP transfer circuit inputs\n */\nexport async function buildUPPTransferCircuitInputs(\n  noteProof: MerkleProofWithNote,\n  aspProof: ASPProof,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount\n): Promise<UPPTransferCircuitInputs> {\n  const { proof, note } = noteProof\n\n  // Derive BabyJubJub pubkey from ownerSecret for commitment verification\n  const { privateToPublic } = await import('../utils/babyjubjub.js')\n  const inputPubkey = await privateToPublic(BigInt(note.ownerSecret))\n\n  // Compute input commitment locally to verify\n  // Circuit commitment: Poseidon(amount, pubkeyX, pubkeyY, blinding, origin, token)\n  const localInputCommitment = await poseidon([\n    note.amount,\n    inputPubkey.x,\n    inputPubkey.y,\n    note.blinding,\n    note.origin,\n    note.token,\n  ])\n\n  const storedCommitment = BigInt(note.commitment)\n  if (localInputCommitment !== storedCommitment) {\n    console.error(`[buildUPPTransferCircuitInputs] COMMITMENT MISMATCH`)\n    console.error(`  amount: ${note.amount}, pubkeyX: ${inputPubkey.x}, pubkeyY: ${inputPubkey.y}`)\n    console.error(`  blinding: ${note.blinding}, origin: ${note.origin}, token: ${note.token}`)\n    console.error(`  local=${localInputCommitment}, stored=${storedCommitment}`)\n    throw new Error(\n      `Note commitment mismatch — this note was created with an outdated commitment formula. ` +\n      `Clear your shielded account (localStorage) and re-shield tokens.`\n    )\n  }\n\n  const nullifier = await computeNullifier(\n    BigInt(note.ownerSecret),\n    proof.leafIndex,\n    BigInt(note.commitment)\n  )\n\n  return {\n    // Public inputs\n    stateRoot: String(proof.root),\n    aspRoot: String(aspProof.aspRoot),\n    nullifier: String(nullifier),\n    outputCommitment1: String(recipientNote.commitment),\n    outputCommitment2: String(changeNote.commitment),\n    token: String(note.token),\n\n    // Private inputs - Input Note\n    inputAmount: String(note.amount),\n    inputOneTimeSecret: String(BigInt(note.ownerSecret) % BABYJUBJUB_SUBORDER),\n    inputBlinding: String(note.blinding),\n    inputOrigin: String(note.origin),\n    inputLeafIndex: String(proof.leafIndex),\n    inputPathElements: padToStateTreeDepth(proof.pathElements.map((e) => String(e)), '0'),\n    inputPathIndices: padToStateTreeDepth(proof.pathIndices.map(String), '0'),\n\n    // Private inputs - ASP Membership Proof\n    aspPathElements: padToASPTreeDepth(aspProof.aspPathElements.map((e) => String(e)), '0'),\n    aspPathIndices: padToASPTreeDepth(aspProof.aspPathIndices.map(String), '0'),\n\n    // Private inputs - Output Notes (BabyJubJub pubkey coordinates)\n    outputAmount1: String(recipientNote.amount),\n    outputPubkeyX1: String(recipientNote.pubkeyX),\n    outputPubkeyY1: String(recipientNote.pubkeyY),\n    outputBlinding1: String(recipientNote.blinding),\n\n    outputAmount2: String(changeNote.amount),\n    outputPubkeyX2: String(changeNote.pubkeyX),\n    outputPubkeyY2: String(changeNote.pubkeyY),\n    outputBlinding2: String(changeNote.blinding),\n  }\n}\n\n// ============================================================================\n// Transfer Building\n// ============================================================================\n\nimport { DEMO_ASP_ID } from './asp.js'\n\n/**\n * Build a UPP transfer (proof + outputs)\n *\n * This prepares everything needed to submit the transaction.\n * UPP transfer is 1-in-2-out with ASP membership proof.\n *\n * @param ctx - Transfer context\n * @param selectedNote - Note to spend (UPP transfer uses exactly 1 input)\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @param onStageChange - Optional callback for stage updates\n * @returns Transfer build result with proof and outputs\n */\nexport async function buildTransfer(\n  ctx: TransferContext,\n  selectedNote: SpendableNote,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount,\n  onStageChange?: (stage: TransferStage) => void\n): Promise<TransferBuildResult> {\n  // 1. Sync Merkle tree\n  onStageChange?.('syncing_merkle')\n  const { tree, leaves } = await syncMerkleTree(ctx.publicClient, ctx.contractAddress)\n\n  // 2. Get Merkle proof for note\n  const noteProofs = await getMerkleProofsForNotes([selectedNote], leaves, tree)\n  const noteProof = noteProofs[0]!\n\n  // 3. Generate ASP proof for the note's origin\n  const aspProof = await generateASPProof(\n    ctx.aspId ?? DEMO_ASP_ID,\n    selectedNote.origin,\n    ctx.aspApprovedOrigins\n  )\n\n  // 4. Build circuit inputs and generate proof\n  onStageChange?.('generating_proof')\n\n  const circuitInputs = await buildUPPTransferCircuitInputs(\n    noteProof,\n    aspProof,\n    recipientNote,\n    changeNote\n  )\n\n  const { proof } = await generateUPPProof(\n    'transfer',\n    circuitInputs,\n    ctx.circuitBaseUrl ?? '/circuits/'\n  )\n\n  const formattedProof = formatProofForContract(proof)\n\n  return {\n    circuit: 'transfer',\n    proof: formattedProof,\n    publicSignals: proof.publicSignals,\n    stateRoot: BigInt(circuitInputs.stateRoot),\n    aspRoot: BigInt(circuitInputs.aspRoot),\n    nullifier: BigInt(circuitInputs.nullifier),\n    outputCommitment1: BigInt(circuitInputs.outputCommitment1),\n    outputCommitment2: BigInt(circuitInputs.outputCommitment2),\n    token: BigInt(circuitInputs.token),\n    recipientOutput: recipientNote,\n    changeOutput: changeNote,\n    spentNotes: [selectedNote],\n  }\n}\n\n/**\n * Format output for contract call (post-quantum)\n */\nexport function formatOutputForContract(note: NoteCreationResult): {\n  commitment: Hex\n  searchTag: bigint\n  ownerHash: bigint\n  encryptedNote: Hex\n} {\n  return {\n    commitment: toHex(note.commitment, { size: 32 }),\n    searchTag: note.searchTag,\n    ownerHash: note.ownerHash,\n    encryptedNote: note.encryptedNote as Hex,\n  }\n}\n"]}

package/dist/chunk-XBNYAAMU.js

@@ -0,0 +1,140 @@
+import { M31_P, SECRET_LIMBS } from './chunk-5V5HSN6Y.js';
+import { keccak256, encodePacked, pad, numberToHex } from 'viem';
+
+var STARK_AMOUNT_SCALE = 10n ** 15n;
+var STARK_STATE_TREE_DEPTH = 32;
+var STARK_ASP_TREE_DEPTH = 20;
+function isStarkAligned(amount) {
+  if (amount <= 0n) return false;
+  const scaled = amount / STARK_AMOUNT_SCALE;
+  return scaled * STARK_AMOUNT_SCALE === amount && scaled < M31_P;
+}
+function scaleAmountForStark(weiAmount) {
+  const scaled = weiAmount / STARK_AMOUNT_SCALE;
+  if (scaled * STARK_AMOUNT_SCALE !== weiAmount) {
+    throw new Error(`Amount ${weiAmount} not aligned to STARK scale (${STARK_AMOUNT_SCALE})`);
+  }
+  if (scaled >= M31_P) {
+    throw new Error(`Scaled amount ${scaled} exceeds M31 max (${M31_P})`);
+  }
+  return Number(scaled);
+}
+function truncateToM31(value) {
+  return Number(value % M31_P);
+}
+function addressToM31(addr) {
+  return Number(BigInt(addr) % M31_P);
+}
+function splitSecretToM31Limbs(secret) {
+  const limbs = [];
+  let remaining = secret;
+  for (let i = 0; i < SECRET_LIMBS; i++) {
+    limbs.push(Number(remaining % M31_P));
+    remaining = remaining / M31_P;
+  }
+  return limbs;
+}
+function packM31Digest(digest) {
+  return BigInt(digest[0]) | BigInt(digest[1]) << 32n | BigInt(digest[2]) << 64n | BigInt(digest[3]) << 96n;
+}
+function computeWithdrawPublicInputsSeed(params) {
+  return keccak256(
+    encodePacked(
+      ["bytes32", "uint256", "uint256", "uint256", "address", "uint256", "address", "bool"],
+      [
+        params.nullifier,
+        params.stateRoot,
+        params.aspRoot,
+        params.aspId,
+        params.token,
+        params.amount,
+        params.recipient,
+        params.isRagequit
+      ]
+    )
+  );
+}
+function computeTransferPublicInputsSeed(params) {
+  return keccak256(
+    encodePacked(
+      ["bytes32", "uint256", "uint256", "address", "bytes32", "bytes32"],
+      [
+        params.nullifier,
+        params.stateRoot,
+        params.aspRoot,
+        params.token,
+        params.outputCommitment1,
+        params.outputCommitment2
+      ]
+    )
+  );
+}
+function toBytes32Hex(value) {
+  if (typeof value === "bigint") {
+    return pad(numberToHex(value), { size: 32 });
+  }
+  return value;
+}
+function toAddress20Hex(addr) {
+  return addr.toLowerCase();
+}
+function buildStarkWithdrawWitness(params) {
+  return {
+    owner_secret: params.ownerSecret,
+    input_amount: params.inputAmount,
+    input_blinding: params.inputBlinding,
+    input_origin: params.inputOrigin,
+    token: params.token,
+    leaf_index: params.leafIndex,
+    state_path_elements: new Array(STARK_STATE_TREE_DEPTH).fill(0),
+    state_path_indices: new Array(STARK_STATE_TREE_DEPTH).fill(0),
+    asp_path_elements: new Array(STARK_ASP_TREE_DEPTH).fill(0),
+    asp_path_indices: new Array(STARK_ASP_TREE_DEPTH).fill(0),
+    withdraw_amount: params.withdrawAmount,
+    change_amount: params.changeAmount,
+    change_blinding: params.changeBlinding,
+    recipient: params.recipient,
+    is_ragequit: params.isRagequit,
+    nullifier_hex: params.nullifierHex,
+    state_root_hex: toBytes32Hex(params.stateRootBigInt),
+    asp_root_hex: toBytes32Hex(params.aspRootBigInt),
+    asp_id_hex: toBytes32Hex(params.aspIdBigInt),
+    token_address_hex: toAddress20Hex(params.tokenAddress),
+    amount_hex: toBytes32Hex(params.amountWei),
+    recipient_address_hex: toAddress20Hex(params.recipientAddress),
+    is_ragequit_bool: params.isRagequitBool
+  };
+}
+function buildStarkTransferWitness(params) {
+  return {
+    owner_secret: params.ownerSecret,
+    input_amount: params.inputAmount,
+    input_blinding: params.inputBlinding,
+    input_origin: params.inputOrigin,
+    token: params.token,
+    leaf_index: params.leafIndex,
+    state_path_elements: new Array(STARK_STATE_TREE_DEPTH).fill(0),
+    state_path_indices: new Array(STARK_STATE_TREE_DEPTH).fill(0),
+    asp_path_elements: new Array(STARK_ASP_TREE_DEPTH).fill(0),
+    asp_path_indices: new Array(STARK_ASP_TREE_DEPTH).fill(0),
+    output1_amount: params.output1Amount,
+    output1_owner_hash: params.output1OwnerHash,
+    output1_blinding: params.output1Blinding,
+    output1_origin: params.output1Origin,
+    output2_amount: params.output2Amount,
+    output2_owner_hash: params.output2OwnerHash,
+    output2_blinding: params.output2Blinding,
+    output2_origin: params.output2Origin,
+    is_ragequit: params.isRagequit,
+    nullifier_hex: params.nullifierHex,
+    state_root_hex: toBytes32Hex(params.stateRootBigInt),
+    asp_root_hex: toBytes32Hex(params.aspRootBigInt),
+    token_address_hex: toAddress20Hex(params.tokenAddress),
+    output_commitment_1_hex: params.outputCommitment1Hex,
+    output_commitment_2_hex: params.outputCommitment2Hex
+  };
+}
+
+export { STARK_AMOUNT_SCALE, STARK_ASP_TREE_DEPTH, STARK_STATE_TREE_DEPTH, addressToM31, buildStarkTransferWitness, buildStarkWithdrawWitness, computeTransferPublicInputsSeed, computeWithdrawPublicInputsSeed, isStarkAligned, packM31Digest, scaleAmountForStark, splitSecretToM31Limbs, truncateToM31 };
+//# sourceMappingURL=chunk-XBNYAAMU.js.map
+//# sourceMappingURL=chunk-XBNYAAMU.js.map

package/dist/chunk-XBNYAAMU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/utils/stark.ts"],"names":[],"mappings":";;;AAmBO,IAAM,qBAAqB,GAAA,IAAO;AAGlC,IAAM,sBAAA,GAAyB;AAG/B,IAAM,oBAAA,GAAuB;AAO7B,SAAS,eAAe,MAAA,EAAyB;AACtD,EAAA,IAAI,MAAA,IAAU,IAAI,OAAO,KAAA;AACzB,EAAA,MAAM,SAAS,MAAA,GAAS,kBAAA;AACxB,EAAA,OAAO,MAAA,GAAS,kBAAA,KAAuB,MAAA,IAAU,MAAA,GAAS,KAAA;AAC5D;AASO,SAAS,oBAAoB,SAAA,EAA2B;AAC7D,EAAA,MAAM,SAAS,SAAA,GAAY,kBAAA;AAC3B,EAAA,IAAI,MAAA,GAAS,uBAAuB,SAAA,EAAW;AAC7C,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,OAAA,EAAU,SAAS,CAAA,6BAAA,EAAgC,kBAAkB,CAAA,CAAA,CAAG,CAAA;AAAA,EAC1F;AACA,EAAA,IAAI,UAAU,KAAA,EAAO;AACnB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,MAAM,CAAA,kBAAA,EAAqB,KAAK,CAAA,CAAA,CAAG,CAAA;AAAA,EACtE;AACA,EAAA,OAAO,OAAO,MAAM,CAAA;AACtB;AAGO,SAAS,cAAc,KAAA,EAAuB;AACnD,EAAA,OAAO,MAAA,CAAO,QAAQ,KAAK,CAAA;AAC7B;AAOO,SAAS,aAAa,IAAA,EAAuB;AAClD,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA,GAAI,KAAK,CAAA;AACpC;AAUO,SAAS,sBAAsB,MAAA,EAA0B;AAC9D,EAAA,MAAM,QAAkB,EAAC;AACzB,EAAA,IAAI,SAAA,GAAY,MAAA;AAChB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,YAAA,EAAc,CAAA,EAAA,EAAK;AACrC,IAAA,KAAA,CAAM,IAAA,CAAK,MAAA,CAAO,SAAA,GAAY,KAAK,CAAC,CAAA;AACpC,IAAA,SAAA,GAAY,SAAA,GAAY,KAAA;AAAA,EAC1B;AACA,EAAA,OAAO,KAAA;AACT;AAMO,SAAS,cAAc,MAAA,EAAkD;AAC9E,EAAA,OAAO,MAAA,CAAO,OAAO,CAAC,CAAC,IAClB,MAAA,CAAO,MAAA,CAAO,CAAC,CAAC,CAAA,IAAK,MACrB,MAAA,CAAO,MAAA,CAAO,CAAC,CAAC,CAAA,IAAK,MACrB,MAAA,CAAO,MAAA,CAAO,CAAC,CAAC,CAAA,IAAK,GAAA;AAC5B;AAUO,SAAS,gCAAgC,MAAA,EASxC;AACN,EAAA,OAAO,SAAA;AAAA,IACL,YAAA;AAAA,MACE,CAAC,WAAW,SAAA,EAAW,SAAA,EAAW,WAAW,SAAA,EAAW,SAAA,EAAW,WAAW,MAAM,CAAA;AAAA,MACpF;AAAA,QACE,MAAA,CAAO,SAAA;AAAA,QACP,MAAA,CAAO,SAAA;AAAA,QACP,MAAA,CAAO,OAAA;AAAA,QACP,MAAA,CAAO,KAAA;AAAA,QACP,MAAA,CAAO,KAAA;AAAA,QACP,MAAA,CAAO,MAAA;AAAA,QACP,MAAA,CAAO,SAAA;AAAA,QACP,MAAA,CAAO;AAAA;AACT;AACF,GACF;AACF;AAMO,SAAS,gCAAgC,MAAA,EAOxC;AACN,EAAA,OAAO,SAAA;AAAA,IACL,YAAA;AAAA,MACE,CAAC,SAAA,EAAW,SAAA,EAAW,SAAA,EAAW,SAAA,EAAW,WAAW,SAAS,CAAA;AAAA,MACjE;AAAA,QACE,MAAA,CAAO,SAAA;AAAA,QACP,MAAA,CAAO,SAAA;AAAA,QACP,MAAA,CAAO,OAAA;AAAA,QACP,MAAA,CAAO,KAAA;AAAA,QACP,MAAA,CAAO,iBAAA;AAAA,QACP,MAAA,CAAO;AAAA;AACT;AACF,GACF;AACF;AA8EA,SAAS,aAAa,KAAA,EAA6B;AACjD,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,OAAO,IAAI,WAAA,CAAY,KAAK,GAAG,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,EAC7C;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,eAAe,IAAA,EAAuB;AAC7C,EAAA,OAAO,KAAK,WAAA,EAAY;AAC1B;AAKO,SAAS,0BAA0B,MAAA,EAqBjB;AACvB,EAAA,OAAO;AAAA,IACL,cAAc,MAAA,CAAO,WAAA;AAAA,IACrB,cAAc,MAAA,CAAO,WAAA;AAAA,IACrB,gBAAgB,MAAA,CAAO,aAAA;AAAA,IACvB,cAAc,MAAA,CAAO,WAAA;AAAA,IACrB,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,YAAY,MAAA,CAAO,SAAA;AAAA,IACnB,qBAAqB,IAAI,KAAA,CAAM,sBAAsB,CAAA,CAAE,KAAK,CAAC,CAAA;AAAA,IAC7D,oBAAoB,IAAI,KAAA,CAAM,sBAAsB,CAAA,CAAE,KAAK,CAAC,CAAA;AAAA,IAC5D,mBAAmB,IAAI,KAAA,CAAM,oBAAoB,CAAA,CAAE,KAAK,CAAC,CAAA;AAAA,IACzD,kBAAkB,IAAI,KAAA,CAAM,oBAAoB,CAAA,CAAE,KAAK,CAAC,CAAA;AAAA,IACxD,iBAAiB,MAAA,CAAO,cAAA;AAAA,IACxB,eAAe,MAAA,CAAO,YAAA;AAAA,IACtB,iBAAiB,MAAA,CAAO,cAAA;AAAA,IACxB,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,aAAa,MAAA,CAAO,UAAA;AAAA,IACpB,eAAe,MAAA,CAAO,YAAA;AAAA,IACtB,cAAA,EAAgB,YAAA,CAAa,MAAA,CAAO,eAAe,CAAA;AAAA,IACnD,YAAA,EAAc,YAAA,CAAa,MAAA,CAAO,aAAa,CAAA;AAAA,IAC/C,UAAA,EAAY,YAAA,CAAa,MAAA,CAAO,WAAW,CAAA;AAAA,IAC3C,iBAAA,EAAmB,cAAA,CAAe,MAAA,CAAO,YAAY,CAAA;AAAA,IACrD,UAAA,EAAY,YAAA,CAAa,MAAA,CAAO,SAAS,CAAA;AAAA,IACzC,qBAAA,EAAuB,cAAA,CAAe,MAAA,CAAO,gBAAgB,CAAA;AAAA,IAC7D,kBAAkB,MAAA,CAAO;AAAA,GAC3B;AACF;AAKO,SAAS,0BAA0B,MAAA,EAuBjB;AACvB,EAAA,OAAO;AAAA,IACL,cAAc,MAAA,CAAO,WAAA;AAAA,IACrB,cAAc,MAAA,CAAO,WAAA;AAAA,IACrB,gBAAgB,MAAA,CAAO,aAAA;AAAA,IACvB,cAAc,MAAA,CAAO,WAAA;AAAA,IACrB,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,YAAY,MAAA,CAAO,SAAA;AAAA,IACnB,qBAAqB,IAAI,KAAA,CAAM,sBAAsB,CAAA,CAAE,KAAK,CAAC,CAAA;AAAA,IAC7D,oBAAoB,IAAI,KAAA,CAAM,sBAAsB,CAAA,CAAE,KAAK,CAAC,CAAA;AAAA,IAC5D,mBAAmB,IAAI,KAAA,CAAM,oBAAoB,CAAA,CAAE,KAAK,CAAC,CAAA;AAAA,IACzD,kBAAkB,IAAI,KAAA,CAAM,oBAAoB,CAAA,CAAE,KAAK,CAAC,CAAA;AAAA,IACxD,gBAAgB,MAAA,CAAO,aAAA;AAAA,IACvB,oBAAoB,MAAA,CAAO,gBAAA;AAAA,IAC3B,kBAAkB,MAAA,CAAO,eAAA;AAAA,IACzB,gBAAgB,MAAA,CAAO,aAAA;AAAA,IACvB,gBAAgB,MAAA,CAAO,aAAA;AAAA,IACvB,oBAAoB,MAAA,CAAO,gBAAA;AAAA,IAC3B,kBAAkB,MAAA,CAAO,eAAA;AAAA,IACzB,gBAAgB,MAAA,CAAO,aAAA;AAAA,IACvB,aAAa,MAAA,CAAO,UAAA;AAAA,IACpB,eAAe,MAAA,CAAO,YAAA;AAAA,IACtB,cAAA,EAAgB,YAAA,CAAa,MAAA,CAAO,eAAe,CAAA;AAAA,IACnD,YAAA,EAAc,YAAA,CAAa,MAAA,CAAO,aAAa,CAAA;AAAA,IAC/C,iBAAA,EAAmB,cAAA,CAAe,MAAA,CAAO,YAAY,CAAA;AAAA,IACrD,yBAAyB,MAAA,CAAO,oBAAA;AAAA,IAChC,yBAAyB,MAAA,CAAO;AAAA,GAClC;AACF","file":"chunk-XBNYAAMU.js","sourcesContent":["/**\n * STARK Utilities — Amount scaling, witness building, Fiat-Shamir\n *\n * These functions must produce identical outputs to the Rust Stwo prover\n * (stwo-prover/src/) and the Solidity verifier.\n *\n * M31 field: p = 2^31 - 1 = 2,147,483,647\n * Amount precision: 0.001 tokens (1e15 wei scale factor)\n */\n\nimport type { Address, Hex } from 'viem'\nimport { keccak256, encodePacked, pad, numberToHex } from 'viem'\nimport { M31_P, SECRET_LIMBS } from './keccak-m31.js'\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** Matches Solidity STARK_AMOUNT_SCALE = 1e15 */\nexport const STARK_AMOUNT_SCALE = 10n ** 15n\n\n/** State tree depth (Merkle tree for commitments) */\nexport const STARK_STATE_TREE_DEPTH = 32\n\n/** ASP tree depth */\nexport const STARK_ASP_TREE_DEPTH = 20\n\n// ============================================================================\n// Amount Scaling\n// ============================================================================\n\n/** Check if a wei amount is STARK-scale aligned and fits in M31. */\nexport function isStarkAligned(amount: bigint): boolean {\n  if (amount <= 0n) return false\n  const scaled = amount / STARK_AMOUNT_SCALE\n  return scaled * STARK_AMOUNT_SCALE === amount && scaled < M31_P\n}\n\n/**\n * Scale a wei amount down for the STARK circuit.\n * Precision: 0.001 tokens (1e15 wei). Max: ~2.1M tokens.\n *\n * @returns The scaled amount as a number (fits in M31)\n * @throws If not aligned to STARK_AMOUNT_SCALE or exceeds M31\n */\nexport function scaleAmountForStark(weiAmount: bigint): number {\n  const scaled = weiAmount / STARK_AMOUNT_SCALE\n  if (scaled * STARK_AMOUNT_SCALE !== weiAmount) {\n    throw new Error(`Amount ${weiAmount} not aligned to STARK scale (${STARK_AMOUNT_SCALE})`)\n  }\n  if (scaled >= M31_P) {\n    throw new Error(`Scaled amount ${scaled} exceeds M31 max (${M31_P})`)\n  }\n  return Number(scaled)\n}\n\n/** Truncate a bigint to fit in M31 (modular reduction). */\nexport function truncateToM31(value: bigint): number {\n  return Number(value % M31_P)\n}\n\n// ============================================================================\n// Field Conversions\n// ============================================================================\n\n/** Convert an Ethereum address to an M31 field element (truncated). */\nexport function addressToM31(addr: Address): number {\n  return Number(BigInt(addr) % M31_P)\n}\n\n/**\n * Split a 254-bit spending secret into 8 M31 limbs (248 bits of entropy).\n *\n * Each limb holds 31 bits (reduced mod M31_P). The secret is split\n * little-endian: limb[0] = lowest 31 bits, limb[7] = highest bits.\n *\n * This matches the Rust prover's expectation of `[M31; 8]` for owner_secret.\n */\nexport function splitSecretToM31Limbs(secret: bigint): number[] {\n  const limbs: number[] = []\n  let remaining = secret\n  for (let i = 0; i < SECRET_LIMBS; i++) {\n    limbs.push(Number(remaining % M31_P))\n    remaining = remaining / M31_P\n  }\n  return limbs\n}\n\n/**\n * Pack an M31 digest (4 M31 elements) into a uint128 for Solidity.\n * Each element occupies 32 bits (little-endian packing).\n */\nexport function packM31Digest(digest: [number, number, number, number]): bigint {\n  return BigInt(digest[0])\n    | (BigInt(digest[1]) << 32n)\n    | (BigInt(digest[2]) << 64n)\n    | (BigInt(digest[3]) << 96n)\n}\n\n// ============================================================================\n// Fiat-Shamir Public Input Seeds\n// ============================================================================\n\n/**\n * Compute the Fiat-Shamir public inputs seed for a STARK withdrawal.\n * Must produce the same hash as Solidity and Rust.\n */\nexport function computeWithdrawPublicInputsSeed(params: {\n  nullifier: Hex\n  stateRoot: bigint\n  aspRoot: bigint\n  aspId: bigint\n  token: Address\n  amount: bigint\n  recipient: Address\n  isRagequit: boolean\n}): Hex {\n  return keccak256(\n    encodePacked(\n      ['bytes32', 'uint256', 'uint256', 'uint256', 'address', 'uint256', 'address', 'bool'],\n      [\n        params.nullifier,\n        params.stateRoot,\n        params.aspRoot,\n        params.aspId,\n        params.token,\n        params.amount,\n        params.recipient,\n        params.isRagequit,\n      ],\n    ),\n  )\n}\n\n/**\n * Compute the Fiat-Shamir public inputs seed for a STARK transfer.\n * Must produce the same hash as Solidity and Rust.\n */\nexport function computeTransferPublicInputsSeed(params: {\n  nullifier: Hex\n  stateRoot: bigint\n  aspRoot: bigint\n  token: Address\n  outputCommitment1: Hex\n  outputCommitment2: Hex\n}): Hex {\n  return keccak256(\n    encodePacked(\n      ['bytes32', 'uint256', 'uint256', 'address', 'bytes32', 'bytes32'],\n      [\n        params.nullifier,\n        params.stateRoot,\n        params.aspRoot,\n        params.token,\n        params.outputCommitment1,\n        params.outputCommitment2,\n      ],\n    ),\n  )\n}\n\n// ============================================================================\n// Witness Types\n// ============================================================================\n\n/**\n * Witness inputs for the STARK withdrawal prover.\n * All numeric values are u32 (must fit in M31 field, i.e. < 2^31 - 1).\n * Hex string fields are for Fiat-Shamir seed binding.\n */\nexport interface StarkWithdrawWitness {\n  owner_secret: number[]\n  input_amount: number\n  input_blinding: number\n  input_origin: number\n  token: number\n  leaf_index: number\n  state_path_elements: number[]\n  state_path_indices: number[]\n  asp_path_elements: number[]\n  asp_path_indices: number[]\n  withdraw_amount: number\n  change_amount: number\n  change_blinding: number\n  recipient: number\n  is_ragequit: number\n  // Ethereum-native hex values for Fiat-Shamir seed binding\n  nullifier_hex: string\n  state_root_hex: string\n  asp_root_hex: string\n  asp_id_hex: string\n  token_address_hex: string\n  amount_hex: string\n  recipient_address_hex: string\n  is_ragequit_bool: boolean\n}\n\n/**\n * Witness inputs for the STARK transfer prover (1-in-2-out).\n * All numeric values are u32 (must fit in M31 field).\n */\nexport interface StarkTransferWitness {\n  owner_secret: number[]\n  input_amount: number\n  input_blinding: number\n  input_origin: number\n  token: number\n  leaf_index: number\n  state_path_elements: number[]\n  state_path_indices: number[]\n  asp_path_elements: number[]\n  asp_path_indices: number[]\n  // Output 1\n  output1_amount: number\n  output1_owner_hash: [number, number, number, number]\n  output1_blinding: number\n  output1_origin: number\n  // Output 2\n  output2_amount: number\n  output2_owner_hash: [number, number, number, number]\n  output2_blinding: number\n  output2_origin: number\n  // Ragequit flag\n  is_ragequit: number\n  // Ethereum-native hex values for Fiat-Shamir seed binding\n  nullifier_hex: string\n  state_root_hex: string\n  asp_root_hex: string\n  token_address_hex: string\n  output_commitment_1_hex: string\n  output_commitment_2_hex: string\n}\n\n// ============================================================================\n// Witness Builders\n// ============================================================================\n\nfunction toBytes32Hex(value: bigint | Hex): string {\n  if (typeof value === 'bigint') {\n    return pad(numberToHex(value), { size: 32 })\n  }\n  return value as string\n}\n\nfunction toAddress20Hex(addr: Address): string {\n  return addr.toLowerCase()\n}\n\n/**\n * Build a complete STARK withdrawal witness from note data.\n */\nexport function buildStarkWithdrawWitness(params: {\n  ownerSecret: number[]\n  inputAmount: number\n  inputBlinding: number\n  inputOrigin: number\n  token: number\n  leafIndex: number\n  withdrawAmount: number\n  changeAmount: number\n  changeBlinding: number\n  recipient: number\n  isRagequit: number\n  // Full Ethereum values for seed binding\n  nullifierHex: Hex\n  stateRootBigInt: bigint\n  aspRootBigInt: bigint\n  aspIdBigInt: bigint\n  tokenAddress: Address\n  amountWei: bigint\n  recipientAddress: Address\n  isRagequitBool: boolean\n}): StarkWithdrawWitness {\n  return {\n    owner_secret: params.ownerSecret,\n    input_amount: params.inputAmount,\n    input_blinding: params.inputBlinding,\n    input_origin: params.inputOrigin,\n    token: params.token,\n    leaf_index: params.leafIndex,\n    state_path_elements: new Array(STARK_STATE_TREE_DEPTH).fill(0),\n    state_path_indices: new Array(STARK_STATE_TREE_DEPTH).fill(0),\n    asp_path_elements: new Array(STARK_ASP_TREE_DEPTH).fill(0),\n    asp_path_indices: new Array(STARK_ASP_TREE_DEPTH).fill(0),\n    withdraw_amount: params.withdrawAmount,\n    change_amount: params.changeAmount,\n    change_blinding: params.changeBlinding,\n    recipient: params.recipient,\n    is_ragequit: params.isRagequit,\n    nullifier_hex: params.nullifierHex,\n    state_root_hex: toBytes32Hex(params.stateRootBigInt),\n    asp_root_hex: toBytes32Hex(params.aspRootBigInt),\n    asp_id_hex: toBytes32Hex(params.aspIdBigInt),\n    token_address_hex: toAddress20Hex(params.tokenAddress),\n    amount_hex: toBytes32Hex(params.amountWei),\n    recipient_address_hex: toAddress20Hex(params.recipientAddress),\n    is_ragequit_bool: params.isRagequitBool,\n  }\n}\n\n/**\n * Build a complete STARK transfer witness (1-in-2-out).\n */\nexport function buildStarkTransferWitness(params: {\n  ownerSecret: number[]\n  inputAmount: number\n  inputBlinding: number\n  inputOrigin: number\n  token: number\n  leafIndex: number\n  output1Amount: number\n  output1OwnerHash: [number, number, number, number]\n  output1Blinding: number\n  output1Origin: number\n  output2Amount: number\n  output2OwnerHash: [number, number, number, number]\n  output2Blinding: number\n  output2Origin: number\n  isRagequit: number\n  // Full Ethereum values for seed binding\n  nullifierHex: Hex\n  stateRootBigInt: bigint\n  aspRootBigInt: bigint\n  tokenAddress: Address\n  outputCommitment1Hex: Hex\n  outputCommitment2Hex: Hex\n}): StarkTransferWitness {\n  return {\n    owner_secret: params.ownerSecret,\n    input_amount: params.inputAmount,\n    input_blinding: params.inputBlinding,\n    input_origin: params.inputOrigin,\n    token: params.token,\n    leaf_index: params.leafIndex,\n    state_path_elements: new Array(STARK_STATE_TREE_DEPTH).fill(0),\n    state_path_indices: new Array(STARK_STATE_TREE_DEPTH).fill(0),\n    asp_path_elements: new Array(STARK_ASP_TREE_DEPTH).fill(0),\n    asp_path_indices: new Array(STARK_ASP_TREE_DEPTH).fill(0),\n    output1_amount: params.output1Amount,\n    output1_owner_hash: params.output1OwnerHash,\n    output1_blinding: params.output1Blinding,\n    output1_origin: params.output1Origin,\n    output2_amount: params.output2Amount,\n    output2_owner_hash: params.output2OwnerHash,\n    output2_blinding: params.output2Blinding,\n    output2_origin: params.output2Origin,\n    is_ragequit: params.isRagequit,\n    nullifier_hex: params.nullifierHex,\n    state_root_hex: toBytes32Hex(params.stateRootBigInt),\n    asp_root_hex: toBytes32Hex(params.aspRootBigInt),\n    token_address_hex: toAddress20Hex(params.tokenAddress),\n    output_commitment_1_hex: params.outputCommitment1Hex,\n    output_commitment_2_hex: params.outputCommitment2Hex,\n  }\n}\n"]}