@permissionless-technologies/upp-sdk 0.3.6 → 0.4.0

package/src/contracts/interfaces/IVerifiers.sol

@@ -1,59 +1,23 @@
 // SPDX-License-Identifier: MIT
 pragma solidity ^0.8.20;
 
-/// @notice Verifier interface for shield proofs
-interface IShieldVerifier {
+import "../src/PlonkVerifierBLS12381.sol";
+
+/**
+ * UPP Verifier Interfaces (BLS12-381 PLONK)
+ *
+ * All SNARK verifiers use PlonkVerifierBLS12381 from UPC.
+ * Each circuit gets its own PlonkVerifierBLS12381 instance with a circuit-specific
+ * verification key. The pool contract passes the Proof struct directly.
+ */
+
+/// @notice Universal PLONK verifier interface for UPP circuits
+/// @dev Each circuit deploys a PlonkVerifierBLS12381 with its own verification key.
+///      The pool contract passes the Proof struct and public signals to verify.
+interface IUPPVerifier {
     function verifyProof(
-        uint256[8] calldata proof,
-        uint256[4] calldata pubSignals // [commitment, amount, origin, token]
-    ) external view returns (bool);
-}
-
-/// @notice Verifier interface for transfer proofs
-interface ITransferVerifier {
-    function verifyProof(
-        uint256[8] calldata proof,
-        uint256[6] calldata pubSignals // [stateRoot, aspRoot, nullifier, outCommitment1, outCommitment2, token]
-    ) external view returns (bool);
-}
-
-/// @notice Verifier interface for merge proofs (2-in-1-out)
-interface IMergeVerifier {
-    function verifyProof(
-        uint256[8] calldata proof,
-        uint256[6] calldata pubSignals // [stateRoot, nullifier1, nullifier2, outCommitment, merger, token]
-    ) external view returns (bool);
-}
-
-/// @notice Verifier interface for withdrawal proofs
-interface IWithdrawVerifier {
-    function verifyProof(
-        uint256[8] calldata proof,
-        uint256[7] calldata pubSignals // [stateRoot, aspRoot, nullifier, amount, recipient, token, isRagequit]
-    ) external view returns (bool);
-}
-
-/// @notice Verifier interface for JoinSplit proofs (4-in-2-out, same origin)
-interface IJoinSplitVerifier {
-    function verifyProof(
-        uint256[8] calldata proof,
-        uint256[9] calldata pubSignals // [stateRoot, aspRoot, nullifier1-4, outCommitment1-2, token]
-    ) external view returns (bool);
-}
-
-/// @notice Verifier interface for MergeTransfer 2x2 proofs (2-in-2-out, origin changes)
-interface IMergeTransfer2x2Verifier {
-    function verifyProof(
-        uint256[8] calldata proof,
-        uint256[7] calldata pubSignals // [stateRoot, nullifier1-2, outCommitment1-2, merger, token]
-    ) external view returns (bool);
-}
-
-/// @notice Verifier interface for MergeTransfer 4x2 proofs (4-in-2-out, origin changes)
-interface IMergeTransfer4x2Verifier {
-    function verifyProof(
-        uint256[8] calldata proof,
-        uint256[9] calldata pubSignals // [stateRoot, nullifier1-4, outCommitment1-2, merger, token]
+        PlonkVerifierBLS12381.Proof calldata proof,
+        uint256[] calldata pubSignals
     ) external view returns (bool);
 }
 

package/src/deployments/11155111.json

@@ -1,19 +1,22 @@
 {
-  "UniversalPrivatePool": "0x95c800a58ff37c85a15f435cf7bca2af288cb5c7",
+  "UniversalPrivatePool": "0x0eef76d20a5e4c2fc6b16bf3dc8924f209527803",
   "ASPRegistryHub": "0xfd11c56a23314aa88dfbcc36254f33e5e8b010df",
-  "TestToken": "0xf68645ce430256917ca434a4063c81db59dda611",
-  "TestToken2": "0xe159f88d97ba9663b0c586fc720ec637783db1d4",
+  "TestToken": "0x0c476ce024f92bfc10fc063dda5eb5cd41c3154e",
+  "TestToken2": "0x869860fa6230ec023ecd48e45082e3cffa73808a",
   "verifiers": {
-    "TransferVerifier": "0x465261fd85c80e8278a30f04ad4f4558710d6cd3",
-    "MergeVerifier": "0x219e26676e6a72a00ede08e4ebf7d6aa27005676",
-    "WithdrawVerifier": "0x7405f0e1e44d5355d4913543125961790e8b52c0",
-    "JoinSplitVerifier": "0x18e3daed50ca37a1acdea4a26c71ae39ff9b0fb1",
-    "MergeTransfer2x2Verifier": "0x365f5c0ac64f07bc779cdbbcf695ad5024971e06",
-    "MergeTransfer4x2Verifier": "0xbab9f475bcf9377675d01a640b1b70d5a27a8af4"
+    "TransferVerifier": "0x570ddbaf864fdc934ab7e0288f552a4bc7affd9a",
+    "MergeVerifier": "0x99d0e8388e2d087c1da918c6c1677927b8aaa513",
+    "WithdrawVerifier": "0xe1dabb06aa4e6aa7ca2c333c6b06b180378df0bb",
+    "JoinSplitVerifier": "0xbd277477d7db0dfe30f54209755fb92fcaa13d23",
+    "MergeTransfer2x2Verifier": "0xa060c9572c7bef7f780cf3021ae2385a9fe6a48e",
+    "MergeTransfer4x2Verifier": "0x2da8578f82e06c25748e6f2c796813c7c43b8896"
   },
   "starkVerifiers": {
-    "CircleStarkVerifier": "0x4a911db5b613b399a2622da296c5163c059714ec"
+    "CircleStarkVerifier": "0xcb8eb6ac91bff0f46cc3d4767255d80e25dee65e"
   },
-  "deployBlock": 10534869,
-  "deployTimestamp": 1774642370446
+  "deployBlock": 10547005,
+  "deployTimestamp": 1774792296955,
+  "proofSystem": "PLONK",
+  "curve": "BLS12-381",
+  "verifierType": "PlonkVerifierBLS12381"
 }

package/dist/asp-TXSAFFD3.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"asp-TXSAFFD3.cjs"}

package/dist/asp-ZA3RGN7G.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"asp-ZA3RGN7G.js"}

package/dist/babyjubjub-2MGQVCKB.js

@@ -1,5 +0,0 @@
-export { addPoints, computeSharedSecret, deriveDecryptionViewingKey, deriveEncryptionViewingKey, getBasePoint, getSubOrder, isOnCurve, mulPointScalar, packPoint, pointToTuple, privateToPublic, reconstructPointFromX, reconstructPointFromXWithParity, tupleToPoint } from './chunk-YOWDERVC.js';
-import './chunk-V23OSL25.js';
-import './chunk-Z6ZWNWWR.js';
-//# sourceMappingURL=babyjubjub-2MGQVCKB.js.map
-//# sourceMappingURL=babyjubjub-2MGQVCKB.js.map

package/dist/babyjubjub-2MGQVCKB.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"babyjubjub-2MGQVCKB.js"}

package/dist/babyjubjub-MWZLJOVZ.cjs

@@ -1,66 +0,0 @@
-'use strict';
-
-var chunkTSF6HEVS_cjs = require('./chunk-TSF6HEVS.cjs');
-require('./chunk-JWNXBALH.cjs');
-require('./chunk-G7VZBCD6.cjs');
-
-
-
-Object.defineProperty(exports, "addPoints", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.addPoints; }
-});
-Object.defineProperty(exports, "computeSharedSecret", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.computeSharedSecret; }
-});
-Object.defineProperty(exports, "deriveDecryptionViewingKey", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.deriveDecryptionViewingKey; }
-});
-Object.defineProperty(exports, "deriveEncryptionViewingKey", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.deriveEncryptionViewingKey; }
-});
-Object.defineProperty(exports, "getBasePoint", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.getBasePoint; }
-});
-Object.defineProperty(exports, "getSubOrder", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.getSubOrder; }
-});
-Object.defineProperty(exports, "isOnCurve", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.isOnCurve; }
-});
-Object.defineProperty(exports, "mulPointScalar", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.mulPointScalar; }
-});
-Object.defineProperty(exports, "packPoint", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.packPoint; }
-});
-Object.defineProperty(exports, "pointToTuple", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.pointToTuple; }
-});
-Object.defineProperty(exports, "privateToPublic", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.privateToPublic; }
-});
-Object.defineProperty(exports, "reconstructPointFromX", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.reconstructPointFromX; }
-});
-Object.defineProperty(exports, "reconstructPointFromXWithParity", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.reconstructPointFromXWithParity; }
-});
-Object.defineProperty(exports, "tupleToPoint", {
-  enumerable: true,
-  get: function () { return chunkTSF6HEVS_cjs.tupleToPoint; }
-});
-//# sourceMappingURL=babyjubjub-MWZLJOVZ.cjs.map
-//# sourceMappingURL=babyjubjub-MWZLJOVZ.cjs.map

package/dist/babyjubjub-MWZLJOVZ.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"babyjubjub-MWZLJOVZ.cjs"}

package/dist/chunk-CWSUBAV3.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/deployments/31337.json","../src/deployments/11155111.json","../src/deployments/index.ts","../src/core/transfer.ts"],"names":["__default"],"mappings":";;;;;;;AAAA,IAAA,SAAA,GAAA;AAAA,EACE,oBAAA,EAAwB,4CAAA;AAAA,EACxB,cAAA,EAAkB,4CAAA;AAAA,EAClB,SAAA,EAAa,4CAAA;AAAA,EACb,UAAA,EAAc,4CAAA;AAAA,EACd,SAAA,EAAa;AAAA,IACX,gBAAA,EAAoB,4CAAA;AAAA,IACpB,aAAA,EAAiB,4CAAA;AAAA,IACjB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,iBAAA,EAAqB,4CAAA;AAAA,IACrB,wBAAA,EAA4B,4CAAA;AAAA,IAC5B,wBAAA,EAA4B;AAAA,GAC9B;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,mBAAA,EAAuB;AAAA,GACzB;AAAA,EACA,WAAA,EAAe,CAAA;AAAA,EACf,eAAA,EAAmB;AACrB,CAAA;;;AClBA,IAAAA,UAAAA,GAAA;AAAA,EACE,oBAAA,EAAwB,4CAAA;AAAA,EACxB,cAAA,EAAkB,4CAAA;AAAA,EAClB,SAAA,EAAa,4CAAA;AAAA,EACb,UAAA,EAAc,4CAAA;AAAA,EACd,SAAA,EAAa;AAAA,IACX,gBAAA,EAAoB,4CAAA;AAAA,IACpB,aAAA,EAAiB,4CAAA;AAAA,IACjB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,iBAAA,EAAqB,4CAAA;AAAA,IACrB,wBAAA,EAA4B,4CAAA;AAAA,IAC5B,wBAAA,EAA4B;AAAA,GAC9B;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,mBAAA,EAAuB;AAAA,GACzB;AAAA,EACA,WAAA,EAAe,QAAA;AAAA,EACf,eAAA,EAAmB;AACrB,CAAA;;;AC6DA,SAAS,eAAA,CACP,MACA,OAAA,EACkB;AAClB,EAAA,OAAO;AAAA,IACL,sBAAsB,IAAA,CAAK,oBAAA;AAAA,IAC3B,gBAAgB,IAAA,CAAK,cAAA;AAAA,IACrB,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,SAAA,EAAW;AAAA,MACT,gBAAA,EAAkB,KAAK,SAAA,CAAU,gBAAA;AAAA,MACjC,aAAA,EAAe,KAAK,SAAA,CAAU,aAAA;AAAA,MAC9B,gBAAA,EAAkB,KAAK,SAAA,CAAU,gBAAA;AAAA,MACjC,iBAAA,EAAmB,KAAK,SAAA,CAAU,iBAAA;AAAA,MAClC,wBAAA,EAA0B,KAAK,SAAA,CAC5B,wBAAA;AAAA,MACH,wBAAA,EAA0B,KAAK,SAAA,CAC5B;AAAA,KACL;AAAA,IACA,cAAA,EAAgB,KAAK,cAAA,GACjB;AAAA,MACE,mBAAA,EAAqB,KAAK,cAAA,CACvB;AAAA,KACL,GACA,MAAA;AAAA,IACJ,OAAA;AAAA,IACA,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,iBAAiB,IAAA,CAAK;AAAA,GACxB;AACF;AAOA,IAAM,WAAA,GAAgD;AAAA,EACpD,KAAA,EAAO,eAAA,CAAgB,SAAA,EAAoC,KAAK,CAAA;AAAA,EAChE,QAAA,EAAU,eAAA,CAAgBA,UAAAA,EAAsC,QAAQ;AAC1E,CAAA;AAgBO,SAAS,cAAc,OAAA,EAA0C;AACtE,EAAA,OAAO,WAAA,CAAY,OAAO,CAAA,IAAK,IAAA;AACjC;AASO,SAAS,qBAAqB,OAAA,EAAmC;AACtE,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,8BAAA,EAAiC,OAAO,CAAA,oBAAA,EACjB,MAAA,CAAO,KAAK,WAAW,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAC5D;AAAA,EACF;AACA,EAAA,OAAO,UAAA;AACT;AAKO,SAAS,cAAc,OAAA,EAA0B;AACtD,EAAA,OAAO,OAAA,IAAW,WAAA;AACpB;AAKO,SAAS,oBAAA,GAAiC;AAC/C,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,IAAI,MAAM,CAAA;AAC5C;AAKO,SAAS,gBAAgB,OAAA,EAAiC;AAC/D,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,YAAY,OAAO,IAAA;AACxB,EAAA,OAAO,WAAW,SAAA,IAAa,IAAA;AACjC;AAmBO,SAAS,kBAAA,CAAmB,SAAiB,MAAA,EAAgC;AAClF,EAAA,WAAA,CAAY,OAAO,CAAA,GAAI,EAAE,GAAG,QAAQ,OAAA,EAAQ;AAC9C;;;AC5LA,aAAA,EAAA;AAiHA,IAAM,cAAA,GAAiB,KAAA;AAQvB,SAAS,mBAAA,CAAuB,KAAU,QAAA,EAAkB;AAC1D,EAAA,IAAI,GAAA,CAAI,UAAU,gBAAA,EAAkB;AAClC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,gBAAgB,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAM,gBAAA,GAAmB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACxE;AAQA,SAAS,iBAAA,CAAqB,KAAU,QAAA,EAAkB;AACxD,EAAA,IAAI,GAAA,CAAI,UAAU,cAAA,EAAgB;AAChC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,cAAc,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAM,cAAA,GAAiB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACtE;AAOA,IAAM,yBAAA,GAA4B;AAAA,EAChC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,oBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,YAAA,EAAc,SAAS,IAAA,EAAK;AAAA,IACrD,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA,EAAY;AAAA,IACrC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA;AAAY;AAEzC,CAAA;AAaA,eAAsB,cAAA,CACpB,cACA,eAAA,EACyE;AACzE,EAAA,MAAM,YAAA,GAAe,MAAM,YAAA,CAAa,cAAA,EAAe;AACvD,EAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,EAAW;AAK9C,EAAA,IAAI,iBAAwB,EAAC;AAE7B,EAAA,IAAI,YAAY,KAAA,EAAO;AAErB,IAAA,cAAA,GAAiB,MAAM,aAAa,OAAA,CAAQ;AAAA,MAC1C,OAAA,EAAS,eAAA;AAAA,MACT,KAAA,EAAO,yBAAA;AAAA,MACP,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH,CAAA,MAAO;AAEL,IAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,IAAA,IAAI,YAAY,UAAA,EAAY,WAAA,GAAc,MAAA,CAAO,UAAA,CAAW,WAAW,CAAA,GAAI,EAAA;AAC3E,IAAA,OAAA,CAAQ,IAAI,CAAA,uBAAA,EAA0B,OAAO,yBAAyB,SAAS,CAAA,IAAA,EAAO,YAAY,CAAA,CAAE,CAAA;AAEpG,IAAA,OAAO,aAAa,YAAA,EAAc;AAChC,MAAA,MAAM,OAAA,GACJ,SAAA,GAAY,cAAA,GAAiB,YAAA,GAAe,eAAe,SAAA,GAAY,cAAA;AACzE,MAAA,MAAM,KAAA,GAAQ,MAAM,YAAA,CAAa,OAAA,CAAQ;AAAA,QACvC,OAAA,EAAS,eAAA;AAAA,QACT,KAAA,EAAO,yBAAA;AAAA,QACP,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,cAAA,GAAiB,cAAA,CAAe,OAAO,KAAK,CAAA;AAC5C,MAAA,SAAA,GAAY,OAAA,GAAU,EAAA;AAAA,IACxB;AAAA,EACF;AAGA,EAAA,cAAA,CAAe,IAAA,CAAK,CAAC,CAAA,EAAQ,CAAA,KAAW;AACtC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,OAAO,IAAA,GAAO,IAAA;AAAA,EAChB,CAAC,CAAA;AAGD,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,MAAW,OAAO,cAAA,EAAgB;AAChC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,SAAU,CAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,UAAW,CAAA;AAE9C,IAAA,IAAI,MAAA,CAAO,WAAW,SAAA,EAAW;AAC/B,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,6CAAA,EAAgD,MAAA,CAAO,MAAM,CAAA,eAAA,EAAkB,SAAS,CAAA,2CAAA;AAAA,OAE1F;AAAA,IACF;AACA,IAAA,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,EACxB;AAEA,EAAA,MAAM,IAAA,GAAO,gBAAgB,MAAM,CAAA;AAGnC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,EAAQ;AACnC,EAAA,MAAM,WAAA,GAAe,MAAM,YAAA,CAAa,YAAA,CAAa;AAAA,IACnD,OAAA,EAAS,eAAA;AAAA,IACT,GAAA,EAAK;AAAA,MACH;AAAA,QACE,IAAA,EAAM,UAAA;AAAA,QACN,IAAA,EAAM,eAAA;AAAA,QACN,QAAQ,EAAC;AAAA,QACT,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,QAC7B,eAAA,EAAiB;AAAA;AACnB,KACF;AAAA,IACA,YAAA,EAAc;AAAA,GACf,CAAA;AAED,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,+BAAA,EAAkC,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAC7D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,6BAAA,EAAgC,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AACxD,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oCAAA,EAAuC,OAAO,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,gCAAA,EAAmC,WAAW,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8BAAA,EAAiC,OAAA,KAAY,WAAW,CAAA,CAAE,CAAA;AAEtE,EAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,IAAA,OAAA,CAAQ,IAAI,CAAA,wCAAA,CAA0C,CAAA;AACtD,IAAA,OAAA,CAAQ,GAAA;AAAA,MACN,CAAA,wBAAA,CAAA;AAAA,MACA,MAAA,CAAO,IAAI,CAAC,CAAA,KAAM,OAAO,CAAA,CAAE,QAAA,CAAS,EAAE,CAAC;AAAA,KACzC;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAM,MAAA,EAAO;AACxB;AAUA,eAAsB,uBAAA,CACpB,KAAA,EACA,MAAA,EACA,IAAA,EACgC;AAChC,EAAA,MAAM,EAAE,iBAAA,EAAkB,GAAI,MAAM,OAAO,sBAAoB,CAAA;AAC/D,EAAA,MAAM,SAAgC,EAAC;AAEvC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC3C,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA,CAAU,CAAC,CAAA,KAAM,MAAM,YAAY,CAAA;AAE5D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,IAAA,CAAK,UAAU,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,qDAAA,EAAwD,YAAY,CAAA,CAAE,CAAA;AAClF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8CAAA,EAAiD,SAAS,CAAA,CAAE,CAAA;AACxE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,mDAAA,EAAsD,IAAA,CAAK,SAAS,CAAA,CAAE,CAAA;AAElF,IAAA,IAAI,cAAc,EAAA,EAAI;AACpB,MAAA,OAAA,CAAQ,GAAA,CAAI,6CAA6C,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AACxF,MAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,IAAA,CAAK,WAAW,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,sBAAA,CAAwB,CAAA;AAAA,IAC9E;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA;AAE3C,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,EAAyC,KAAA,CAAM,IAAI,CAAA,CAAE,CAAA;AACjE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,KAAA,CAAM,SAAS,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,uCAAA,CAAA,EAA2C,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AAClG,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,CAAA,EAA0C,KAAA,CAAM,WAAW,CAAA;AAGvE,IAAA,MAAM,OAAA,GAAU,MAAM,iBAAA,CAAkB,YAAA,EAAc,KAAK,CAAA;AAC3D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oDAAA,EAAuD,OAAO,CAAA,CAAE,CAAA;AAE5E,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAA,CAAQ,MAAM,CAAA,2DAAA,CAA6D,CAAA;AAAA,IAC7E;AAEA,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,KAAA,EAAO,IAAA,EAAM,EAAE,GAAG,IAAA,EAAM,SAAA,EAAU,EAAG,CAAA;AAAA,EACrD;AAEA,EAAA,OAAO,MAAA;AACT;AAgBA,eAAsB,gBAAA,CACpB,WAAA,EACA,SAAA,EACA,UAAA,EACiB;AACjB,EAAA,OAAO,MAAM,SAAS,CAAC,WAAA,GAAc,qBAAqB,MAAA,CAAO,SAAS,CAAA,EAAG,UAAU,CAAC,CAAA;AAC1F;AAkBA,eAAsB,6BAAA,CACpB,SAAA,EACA,QAAA,EACA,aAAA,EACA,UAAA,EACmC;AACnC,EAAA,MAAM,EAAE,KAAA,EAAO,IAAA,EAAK,GAAI,SAAA;AAGxB,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,0BAAwB,CAAA;AACjE,EAAA,MAAM,cAAc,MAAM,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAIlE,EAAA,MAAM,oBAAA,GAAuB,MAAM,QAAA,CAAS;AAAA,IAC1C,IAAA,CAAK,MAAA;AAAA,IACL,WAAA,CAAY,CAAA;AAAA,IACZ,WAAA,CAAY,CAAA;AAAA,IACZ,IAAA,CAAK,QAAA;AAAA,IACL,IAAA,CAAK,MAAA;AAAA,IACL,IAAA,CAAK;AAAA,GACN,CAAA;AAED,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC/C,EAAA,IAAI,yBAAyB,gBAAA,EAAkB;AAC7C,IAAA,OAAA,CAAQ,MAAM,CAAA,mDAAA,CAAqD,CAAA;AACnE,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,UAAA,EAAa,IAAA,CAAK,MAAM,CAAA,WAAA,EAAc,YAAY,CAAC,CAAA,WAAA,EAAc,WAAA,CAAY,CAAC,CAAA,CAAE,CAAA;AAC9F,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,YAAA,EAAe,IAAA,CAAK,QAAQ,CAAA,UAAA,EAAa,KAAK,MAAM,CAAA,SAAA,EAAY,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AAC1F,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,QAAA,EAAW,oBAAoB,CAAA,SAAA,EAAY,gBAAgB,CAAA,CAAE,CAAA;AAC3E,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,2JAAA;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,MAAM,YAAY,MAAM,gBAAA;AAAA,IACtB,MAAA,CAAO,KAAK,WAAW,CAAA;AAAA,IACvB,KAAA,CAAM,SAAA;AAAA,IACN,MAAA,CAAO,KAAK,UAAU;AAAA,GACxB;AAEA,EAAA,OAAO;AAAA;AAAA,IAEL,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAAA,IAC5B,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAAA,IAChC,SAAA,EAAW,OAAO,SAAS,CAAA;AAAA,IAC3B,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA;AAAA,IAClD,iBAAA,EAAmB,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA;AAAA,IAC/C,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA;AAAA;AAAA,IAGxB,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,oBAAoB,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,WAAW,IAAI,mBAAmB,CAAA;AAAA,IACzE,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAAA,IACnC,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,cAAA,EAAgB,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA;AAAA,IACtC,iBAAA,EAAmB,mBAAA,CAAoB,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACpF,kBAAkB,mBAAA,CAAoB,KAAA,CAAM,YAAY,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAGxE,eAAA,EAAiB,iBAAA,CAAkB,QAAA,CAAS,eAAA,CAAgB,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACtF,gBAAgB,iBAAA,CAAkB,QAAA,CAAS,eAAe,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAG1E,aAAA,EAAe,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA;AAAA,IAC1C,cAAA,EAAgB,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IAC5C,cAAA,EAAgB,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IAC5C,eAAA,EAAiB,MAAA,CAAO,aAAA,CAAc,QAAQ,CAAA;AAAA,IAE9C,aAAA,EAAe,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA;AAAA,IACvC,cAAA,EAAgB,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA;AAAA,IACzC,cAAA,EAAgB,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA;AAAA,IACzC,eAAA,EAAiB,MAAA,CAAO,UAAA,CAAW,QAAQ;AAAA,GAC7C;AACF;AAqBA,eAAsB,aAAA,CACpB,GAAA,EACA,YAAA,EACA,aAAA,EACA,YACA,aAAA,EAC8B;AAE9B,EAAA,aAAA,GAAgB,gBAAgB,CAAA;AAChC,EAAA,MAAM,EAAE,MAAM,MAAA,EAAO,GAAI,MAAM,cAAA,CAAe,GAAA,CAAI,YAAA,EAAc,GAAA,CAAI,eAAe,CAAA;AAGnF,EAAA,MAAM,aAAa,MAAM,uBAAA,CAAwB,CAAC,YAAY,CAAA,EAAG,QAAQ,IAAI,CAAA;AAC7E,EAAA,MAAM,SAAA,GAAY,WAAW,CAAC,CAAA;AAG9B,EAAA,MAAM,WAAW,MAAM,gBAAA;AAAA,IACrB,IAAI,KAAA,IAAS,WAAA;AAAA,IACb,YAAA,CAAa,MAAA;AAAA,IACb,GAAA,CAAI;AAAA,GACN;AAGA,EAAA,aAAA,GAAgB,kBAAkB,CAAA;AAElC,EAAA,MAAM,gBAAgB,MAAM,6BAAA;AAAA,IAC1B,SAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,gBAAA;AAAA,IACtB,UAAA;AAAA,IACA,aAAA;AAAA,IACA,IAAI,cAAA,IAAkB;AAAA,GACxB;AAEA,EAAA,MAAM,cAAA,GAAiB,uBAAuB,KAAK,CAAA;AAEnD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,UAAA;AAAA,IACT,KAAA,EAAO,cAAA;AAAA,IACP,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,OAAA,EAAS,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IACrC,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,KAAA,EAAO,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA;AAAA,IACjC,eAAA,EAAiB,aAAA;AAAA,IACjB,YAAA,EAAc,UAAA;AAAA,IACd,UAAA,EAAY,CAAC,YAAY;AAAA,GAC3B;AACF;AAKO,SAAS,wBAAwB,IAAA,EAKtC;AACA,EAAA,OAAO;AAAA,IACL,YAAY,KAAA,CAAM,IAAA,CAAK,YAAY,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IAC/C,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,eAAe,IAAA,CAAK;AAAA,GACtB;AACF","file":"chunk-CWSUBAV3.js","sourcesContent":["{\n  \"UniversalPrivatePool\": \"0x2279b7a0a67db372996a5fab50d91eaa73d2ebe6\",\n  \"ASPRegistryHub\": \"0xe7f1725e7734ce288f8367e1bb143e90bb3f0512\",\n  \"TestToken\": \"0x610178da211fef7d417bc0e6fed39f05609ad788\",\n  \"TestToken2\": \"0xb7f8bc63bbcad18155201308c8f3540b07f84f5e\",\n  \"verifiers\": {\n    \"TransferVerifier\": \"0x9fe46736679d2d9a65f0992f2272de9f3c7fa6e0\",\n    \"MergeVerifier\": \"0xcf7ed3acca5a467e9e704c703e8d87f634fb0fc9\",\n    \"WithdrawVerifier\": \"0xdc64a140aa3e981100a9beca4e685f962f0cf6c9\",\n    \"JoinSplitVerifier\": \"0x5fc8d32690cc91d4c39d9d3abcbd16989f875707\",\n    \"MergeTransfer2x2Verifier\": \"0x0165878a594ca255338adfa4d48449f69242eb8f\",\n    \"MergeTransfer4x2Verifier\": \"0xa513e6e4b8f2a923d98304ec87f64353c4d5c853\"\n  },\n  \"starkVerifiers\": {\n    \"CircleStarkVerifier\": \"0x0dcd1bf9a1b36ce34237eeafef220932846bcd82\"\n  },\n  \"deployBlock\": 1,\n  \"deployTimestamp\": 1774728354492\n}\n","{\n  \"UniversalPrivatePool\": \"0x95c800a58ff37c85a15f435cf7bca2af288cb5c7\",\n  \"ASPRegistryHub\": \"0xfd11c56a23314aa88dfbcc36254f33e5e8b010df\",\n  \"TestToken\": \"0xf68645ce430256917ca434a4063c81db59dda611\",\n  \"TestToken2\": \"0xe159f88d97ba9663b0c586fc720ec637783db1d4\",\n  \"verifiers\": {\n    \"TransferVerifier\": \"0x465261fd85c80e8278a30f04ad4f4558710d6cd3\",\n    \"MergeVerifier\": \"0x219e26676e6a72a00ede08e4ebf7d6aa27005676\",\n    \"WithdrawVerifier\": \"0x7405f0e1e44d5355d4913543125961790e8b52c0\",\n    \"JoinSplitVerifier\": \"0x18e3daed50ca37a1acdea4a26c71ae39ff9b0fb1\",\n    \"MergeTransfer2x2Verifier\": \"0x365f5c0ac64f07bc779cdbbcf695ad5024971e06\",\n    \"MergeTransfer4x2Verifier\": \"0xbab9f475bcf9377675d01a640b1b70d5a27a8af4\"\n  },\n  \"starkVerifiers\": {\n    \"CircleStarkVerifier\": \"0x4a911db5b613b399a2622da296c5163c059714ec\"\n  },\n  \"deployBlock\": 10534869,\n  \"deployTimestamp\": 1774642370446\n}\n","/**\n * Deployment Configuration Loader\n *\n * Loads contract addresses based on chain ID.\n * Built-in: Anvil (31337) and Sepolia (11155111).\n * Custom chains can be registered at runtime via registerDeployment().\n */\n\nimport type { Address } from \"viem\";\n\n/**\n * Verifier contract addresses\n */\nexport interface VerifierAddresses {\n  TransferVerifier: Address;\n  MergeVerifier: Address;\n  WithdrawVerifier: Address;\n  JoinSplitVerifier?: Address;\n  MergeTransfer2x2Verifier?: Address;\n  MergeTransfer4x2Verifier?: Address;\n}\n\n/**\n * STARK verifier contract addresses\n */\nexport interface StarkVerifierAddresses {\n  CircleStarkVerifier?: Address;\n}\n\n/**\n * Deployment configuration for a chain\n */\nexport interface DeploymentConfig {\n  /** Universal Private Pool contract address */\n  UniversalPrivatePool: Address;\n  /** ASP Registry Hub contract address */\n  ASPRegistryHub: Address;\n  /** Test token address (local/testnet) */\n  TestToken?: Address;\n  /** Test token 2 address — bonding curve token (local/testnet) */\n  TestToken2?: Address;\n  /** Verifier contract addresses */\n  verifiers: VerifierAddresses;\n  /** STARK verifier contract addresses */\n  starkVerifiers?: StarkVerifierAddresses;\n  /** Chain ID */\n  chainId: number;\n  /** Block number when contracts were deployed (for efficient scanning) */\n  deployBlock: number;\n  /** Timestamp when contracts were deployed */\n  deployTimestamp?: number;\n}\n\n/**\n * Raw JSON file format (without chainId, which is added dynamically)\n */\ninterface DeploymentJSON {\n  UniversalPrivatePool: string;\n  ASPRegistryHub: string;\n  TestToken?: string;\n  TestToken2?: string;\n  verifiers: {\n    TransferVerifier: string;\n    MergeVerifier: string;\n    WithdrawVerifier: string;\n    JoinSplitVerifier?: string;\n    MergeTransfer2x2Verifier?: string;\n    MergeTransfer4x2Verifier?: string;\n  };\n  starkVerifiers?: {\n    CircleStarkVerifier?: string;\n  };\n  deployBlock: number;\n  deployTimestamp?: number;\n}\n\n/**\n * Parse raw deployment JSON into typed config\n */\nfunction parseDeployment(\n  json: DeploymentJSON,\n  chainId: number\n): DeploymentConfig {\n  return {\n    UniversalPrivatePool: json.UniversalPrivatePool as Address,\n    ASPRegistryHub: json.ASPRegistryHub as Address,\n    TestToken: json.TestToken as Address | undefined,\n    TestToken2: json.TestToken2 as Address | undefined,\n    verifiers: {\n      TransferVerifier: json.verifiers.TransferVerifier as Address,\n      MergeVerifier: json.verifiers.MergeVerifier as Address,\n      WithdrawVerifier: json.verifiers.WithdrawVerifier as Address,\n      JoinSplitVerifier: json.verifiers.JoinSplitVerifier as Address | undefined,\n      MergeTransfer2x2Verifier: json.verifiers\n        .MergeTransfer2x2Verifier as Address | undefined,\n      MergeTransfer4x2Verifier: json.verifiers\n        .MergeTransfer4x2Verifier as Address | undefined,\n    },\n    starkVerifiers: json.starkVerifiers\n      ? {\n          CircleStarkVerifier: json.starkVerifiers\n            .CircleStarkVerifier as Address | undefined,\n        }\n      : undefined,\n    chainId,\n    deployBlock: json.deployBlock,\n    deployTimestamp: json.deployTimestamp,\n  };\n}\n\n// Import deployment configs\n// These will be updated by the extract-deployment.js script\nimport anvil from \"./31337.json\" with { type: \"json\" };\nimport sepolia from \"./11155111.json\" with { type: \"json\" };\n\nconst deployments: Record<number, DeploymentConfig> = {\n  31337: parseDeployment(anvil as unknown as DeploymentJSON, 31337),\n  11155111: parseDeployment(sepolia as unknown as DeploymentJSON, 11155111),\n};\n\n/**\n * Get deployment config for a chain\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config or null if not found\n *\n * @example\n * ```ts\n * const deployment = getDeployment(31337)\n * if (deployment) {\n *   console.log('Pool address:', deployment.UniversalPrivatePool)\n * }\n * ```\n */\nexport function getDeployment(chainId: number): DeploymentConfig | null {\n  return deployments[chainId] ?? null;\n}\n\n/**\n * Get deployment config or throw if not found\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config\n * @throws Error if deployment not found\n */\nexport function getDeploymentOrThrow(chainId: number): DeploymentConfig {\n  const deployment = getDeployment(chainId);\n  if (!deployment) {\n    throw new Error(\n      `No deployment found for chain ${chainId}. ` +\n        `Supported chains: ${Object.keys(deployments).join(\", \")}`\n    );\n  }\n  return deployment;\n}\n\n/**\n * Check if a chain has a deployment\n */\nexport function hasDeployment(chainId: number): boolean {\n  return chainId in deployments;\n}\n\n/**\n * Get all supported chain IDs\n */\nexport function getSupportedChainIds(): number[] {\n  return Object.keys(deployments).map(Number);\n}\n\n/**\n * Get the token address for a chain\n */\nexport function getTokenAddress(chainId: number): Address | null {\n  const deployment = getDeployment(chainId);\n  if (!deployment) return null;\n  return deployment.TestToken ?? null;\n}\n\n/**\n * Register a deployment for a custom chain at runtime.\n *\n * Use this when deploying your own pool on a chain not built into the SDK.\n * Overrides any existing deployment for the same chainId.\n *\n * @example\n * ```ts\n * registerDeployment(8453, {\n *   UniversalPrivatePool: '0x...',\n *   ASPRegistryHub: '0x...',\n *   verifiers: { TransferVerifier: '0x...', MergeVerifier: '0x...', WithdrawVerifier: '0x...' },\n *   chainId: 8453,\n *   deployBlock: 12345678,\n * })\n * ```\n */\nexport function registerDeployment(chainId: number, config: DeploymentConfig): void {\n  deployments[chainId] = { ...config, chainId };\n}\n","/**\n * Transfer Module\n *\n * Core logic for building and executing UPP transfers.\n * This module is framework-agnostic (no React).\n */\n\nimport { toHex, type Address, type Hex, type PublicClient } from 'viem'\nimport { getDeployment } from '../deployments/index.js'\nimport { buildMerkleTree, type MerkleProof } from '../utils/merkle.js'\nimport { poseidon, BABYJUBJUB_SUBORDER } from '../utils/poseidon.js'\nimport {\n  generateUPPProof,\n  formatProofForContract,\n  STATE_TREE_DEPTH,\n  ASP_TREE_DEPTH,\n  type UPPCircuitType,\n  type UPPTransferCircuitInputs,\n} from './proof.js'\nimport { generateASPProof, type ASPProof } from './asp.js'\nimport type { NoteCreationResult } from '../react/use-upp-account.js'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Transfer stage for progress tracking\n */\nexport type TransferStage =\n  | 'selecting_notes'\n  | 'syncing_merkle'\n  | 'creating_outputs'\n  | 'generating_proof'\n  | 'submitting_tx'\n  | 'confirming'\n\n/**\n * A shielded note with all data needed for spending\n *\n * Post-quantum: uses ownerSecret/ownerHash instead of BabyJubJub one-time keys.\n * Ownership is proven via hash preimage: Poseidon(ownerSecret) == ownerHash.\n */\nexport interface SpendableNote {\n  amount: bigint\n  blinding: bigint\n  commitment: string\n  /** Owner secret (hash preimage for ownership proof) */\n  ownerSecret: string\n  /** Owner hash = Poseidon(ownerSecret) - committed in the note */\n  ownerHash: string\n  leafIndex: number\n  /** Origin address (depositor) - required for UPP circuits */\n  origin: bigint\n  /** Token address - required for UPP circuits */\n  token: bigint\n}\n\n/**\n * Merkle proof with associated note\n */\nexport interface MerkleProofWithNote {\n  proof: MerkleProof\n  note: SpendableNote\n}\n\n/**\n * Transfer context (dependencies)\n */\nexport interface TransferContext {\n  /** viem PublicClient for RPC calls */\n  publicClient: PublicClient\n  /** Contract address */\n  contractAddress: Address\n  /** Chain ID */\n  chainId: number\n  /** Circuit base URL (default: '/circuits/') */\n  circuitBaseUrl?: string\n  /** ASP ID to use (default: DEMO_ASP_ID) */\n  aspId?: bigint\n  /** All approved origins in the ASP tree (enables multi-origin proofs) */\n  aspApprovedOrigins?: bigint[]\n}\n\n/**\n * Transfer result\n */\nexport interface TransferBuildResult {\n  /** Circuit type used */\n  circuit: UPPCircuitType\n  /** Formatted proof for contract */\n  proof: {\n    a: [bigint, bigint]\n    b: [[bigint, bigint], [bigint, bigint]]\n    c: [bigint, bigint]\n  }\n  /** Public signals from proof */\n  publicSignals: string[]\n  /** State tree root */\n  stateRoot: bigint\n  /** ASP tree root */\n  aspRoot: bigint\n  /** Nullifier hash */\n  nullifier: bigint\n  /** Output commitment 1 */\n  outputCommitment1: bigint\n  /** Output commitment 2 */\n  outputCommitment2: bigint\n  /** Token address */\n  token: bigint\n  /** Recipient output */\n  recipientOutput: NoteCreationResult\n  /** Change output */\n  changeOutput: NoteCreationResult\n  /** Notes that will be spent */\n  spentNotes: SpendableNote[]\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** Chunk size for paginated RPC queries on testnets */\nconst RPC_CHUNK_SIZE = 9000n\n\n/**\n * Pad an array to the state tree depth (32 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length STATE_TREE_DEPTH\n */\nfunction padToStateTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= STATE_TREE_DEPTH) {\n    return arr.slice(0, STATE_TREE_DEPTH)\n  }\n  return [...arr, ...Array(STATE_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * Pad an array to the ASP tree depth (20 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length ASP_TREE_DEPTH\n */\nfunction padToASPTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= ASP_TREE_DEPTH) {\n    return arr.slice(0, ASP_TREE_DEPTH)\n  }\n  return [...arr, ...Array(ASP_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * CommitmentInserted event — emitted by _insertLeaf() for ALL leaf insertions\n * (shield, transfer, merge, swap fill, swap claim, swap cancel).\n * This is the single canonical event for Merkle tree reconstruction.\n */\nconst COMMITMENT_INSERTED_EVENT = {\n  type: 'event' as const,\n  name: 'CommitmentInserted',\n  inputs: [\n    { type: 'bytes32', name: 'commitment', indexed: true },\n    { type: 'uint256', name: 'leafIndex' },\n    { type: 'uint256', name: 'timestamp' },\n  ],\n}\n\n// ============================================================================\n// Merkle Tree Functions\n// ============================================================================\n\n/**\n * Fetch all commitments from the contract and build a Merkle tree\n *\n * @param publicClient - viem PublicClient\n * @param contractAddress - Contract address\n * @returns Object with tree and leaves array\n */\nexport async function syncMerkleTree(\n  publicClient: PublicClient,\n  contractAddress: Address\n): Promise<{ tree: ReturnType<typeof buildMerkleTree>; leaves: bigint[] }> {\n  const currentBlock = await publicClient.getBlockNumber()\n  const chainId = await publicClient.getChainId()\n\n  // Use CommitmentInserted events — the canonical event emitted by _insertLeaf()\n  // for ALL operations (shield, transfer, merge, swap fill/claim/cancel).\n  // Each event has an explicit leafIndex, so ordering is deterministic.\n  let commitmentLogs: any[] = []\n\n  if (chainId === 31337) {\n    // Anvil - single query is fine\n    commitmentLogs = await publicClient.getLogs({\n      address: contractAddress,\n      event: COMMITMENT_INSERTED_EVENT,\n      fromBlock: 0n,\n    })\n  } else {\n    // Testnet/mainnet - paginate to avoid RPC limits\n    const deployment = getDeployment(chainId)\n    let fromBlock = deployment?.deployBlock ? BigInt(deployment.deployBlock) : 0n\n    console.log(`[syncMerkleTree] Chain ${chainId}: scanning from block ${fromBlock} to ${currentBlock}`)\n\n    while (fromBlock <= currentBlock) {\n      const toBlock =\n        fromBlock + RPC_CHUNK_SIZE > currentBlock ? currentBlock : fromBlock + RPC_CHUNK_SIZE\n      const chunk = await publicClient.getLogs({\n        address: contractAddress,\n        event: COMMITMENT_INSERTED_EVENT,\n        fromBlock,\n        toBlock,\n      })\n      commitmentLogs = commitmentLogs.concat(chunk)\n      fromBlock = toBlock + 1n\n    }\n  }\n\n  // Sort by explicit leafIndex (most reliable), falling back to block+logIndex\n  commitmentLogs.sort((a: any, b: any) => {\n    const idxA = Number(a.args.leafIndex!)\n    const idxB = Number(b.args.leafIndex!)\n    return idxA - idxB\n  })\n\n  // Build leaves array using the explicit leafIndex from each event\n  const leaves: bigint[] = []\n  for (const log of commitmentLogs) {\n    const leafIndex = Number(log.args.leafIndex!)\n    const commitment = BigInt(log.args.commitment!)\n\n    if (leaves.length !== leafIndex) {\n      console.warn(\n        `[syncMerkleTree] WARNING: Expected leafIndex ${leaves.length} but event has ${leafIndex}. ` +\n        `This may indicate missed events or reorg.`\n      )\n    }\n    leaves.push(commitment)\n  }\n\n  const tree = buildMerkleTree(leaves)\n\n  // Debug: compare our root with on-chain root\n  const ourRoot = await tree.getRoot()\n  const onChainRoot = (await publicClient.readContract({\n    address: contractAddress,\n    abi: [\n      {\n        type: 'function',\n        name: 'getMerkleRoot',\n        inputs: [],\n        outputs: [{ type: 'uint256' }],\n        stateMutability: 'view',\n      },\n    ],\n    functionName: 'getMerkleRoot',\n  })) as bigint\n\n  console.log(`[syncMerkleTree] Leaves count: ${leaves.length}`)\n  console.log(`[syncMerkleTree] Tree depth: ${tree.depth}`)\n  console.log(`[syncMerkleTree] Our computed root: ${ourRoot}`)\n  console.log(`[syncMerkleTree] On-chain root: ${onChainRoot}`)\n  console.log(`[syncMerkleTree] Roots match: ${ourRoot === onChainRoot}`)\n\n  if (ourRoot !== onChainRoot) {\n    console.log(`[syncMerkleTree] WARNING: Root mismatch!`)\n    console.log(\n      `[syncMerkleTree] Leaves:`,\n      leaves.map((l) => '0x' + l.toString(16))\n    )\n  }\n\n  return { tree, leaves }\n}\n\n/**\n * Get Merkle proofs for a set of notes\n *\n * @param notes - Notes to get proofs for\n * @param leaves - All leaves in the tree\n * @param tree - Merkle tree instance\n * @returns Array of proofs with associated notes\n */\nexport async function getMerkleProofsForNotes(\n  notes: SpendableNote[],\n  leaves: bigint[],\n  tree: ReturnType<typeof buildMerkleTree>\n): Promise<MerkleProofWithNote[]> {\n  const { verifyMerkleProof } = await import('../utils/merkle.js')\n  const proofs: MerkleProofWithNote[] = []\n\n  for (const note of notes) {\n    const commitmentBI = BigInt(note.commitment)\n    const leafIndex = leaves.findIndex((l) => l === commitmentBI)\n\n    console.log(`[getMerkleProofsForNotes] Note commitment: ${note.commitment}`)\n    console.log(`[getMerkleProofsForNotes] Note commitment as BigInt: ${commitmentBI}`)\n    console.log(`[getMerkleProofsForNotes] Found at leafIndex: ${leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] Note's stored leafIndex: ${note.leafIndex}`)\n\n    if (leafIndex === -1) {\n      console.log(`[getMerkleProofsForNotes] Leaves in tree:`, leaves.map((l) => l.toString()))\n      throw new Error(`Note ${note.commitment.slice(0, 10)}... not found on-chain`)\n    }\n\n    const proof = await tree.getProof(leafIndex)\n\n    console.log(`[getMerkleProofsForNotes] Proof root: ${proof.root}`)\n    console.log(`[getMerkleProofsForNotes] Proof leafIndex: ${proof.leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] PathElements:`, proof.pathElements.map((e) => e.toString()))\n    console.log(`[getMerkleProofsForNotes] PathIndices:`, proof.pathIndices)\n\n    // Verify the proof locally before returning\n    const isValid = await verifyMerkleProof(commitmentBI, proof)\n    console.log(`[getMerkleProofsForNotes] Local proof verification: ${isValid}`)\n\n    if (!isValid) {\n      console.error(`[getMerkleProofsForNotes] WARNING: Merkle proof is invalid!`)\n    }\n\n    proofs.push({ proof, note: { ...note, leafIndex } })\n  }\n\n  return proofs\n}\n\n// ============================================================================\n// Circuit Input Building\n// ============================================================================\n\n/**\n * Compute nullifier for a UPP note\n *\n * Post-quantum nullifier: Poseidon(ownerSecret, leafIndex, commitment)\n *\n * @param ownerSecret - Owner secret (hash preimage)\n * @param leafIndex - Leaf index in Merkle tree\n * @param commitment - Note commitment\n * @returns Nullifier as bigint\n */\nexport async function computeNullifier(\n  ownerSecret: bigint,\n  leafIndex: number,\n  commitment: bigint\n): Promise<bigint> {\n  return await poseidon([ownerSecret % BABYJUBJUB_SUBORDER, BigInt(leafIndex), commitment])\n}\n\n/**\n * Note with amount for circuit building\n */\nexport interface NoteWithAmount extends NoteCreationResult {\n  amount: bigint\n}\n\n/**\n * Build circuit inputs for UPP transfer (1-in-2-out)\n *\n * @param noteProof - Merkle proof for input note\n * @param aspProof - ASP membership proof for input note's origin\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @returns UPP transfer circuit inputs\n */\nexport async function buildUPPTransferCircuitInputs(\n  noteProof: MerkleProofWithNote,\n  aspProof: ASPProof,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount\n): Promise<UPPTransferCircuitInputs> {\n  const { proof, note } = noteProof\n\n  // Derive BabyJubJub pubkey from ownerSecret for commitment verification\n  const { privateToPublic } = await import('../utils/babyjubjub.js')\n  const inputPubkey = await privateToPublic(BigInt(note.ownerSecret))\n\n  // Compute input commitment locally to verify\n  // Circuit commitment: Poseidon(amount, pubkeyX, pubkeyY, blinding, origin, token)\n  const localInputCommitment = await poseidon([\n    note.amount,\n    inputPubkey.x,\n    inputPubkey.y,\n    note.blinding,\n    note.origin,\n    note.token,\n  ])\n\n  const storedCommitment = BigInt(note.commitment)\n  if (localInputCommitment !== storedCommitment) {\n    console.error(`[buildUPPTransferCircuitInputs] COMMITMENT MISMATCH`)\n    console.error(`  amount: ${note.amount}, pubkeyX: ${inputPubkey.x}, pubkeyY: ${inputPubkey.y}`)\n    console.error(`  blinding: ${note.blinding}, origin: ${note.origin}, token: ${note.token}`)\n    console.error(`  local=${localInputCommitment}, stored=${storedCommitment}`)\n    throw new Error(\n      `Note commitment mismatch — this note was created with an outdated commitment formula. ` +\n      `Clear your shielded account (localStorage) and re-shield tokens.`\n    )\n  }\n\n  const nullifier = await computeNullifier(\n    BigInt(note.ownerSecret),\n    proof.leafIndex,\n    BigInt(note.commitment)\n  )\n\n  return {\n    // Public inputs\n    stateRoot: String(proof.root),\n    aspRoot: String(aspProof.aspRoot),\n    nullifier: String(nullifier),\n    outputCommitment1: String(recipientNote.commitment),\n    outputCommitment2: String(changeNote.commitment),\n    token: String(note.token),\n\n    // Private inputs - Input Note\n    inputAmount: String(note.amount),\n    inputOneTimeSecret: String(BigInt(note.ownerSecret) % BABYJUBJUB_SUBORDER),\n    inputBlinding: String(note.blinding),\n    inputOrigin: String(note.origin),\n    inputLeafIndex: String(proof.leafIndex),\n    inputPathElements: padToStateTreeDepth(proof.pathElements.map((e) => String(e)), '0'),\n    inputPathIndices: padToStateTreeDepth(proof.pathIndices.map(String), '0'),\n\n    // Private inputs - ASP Membership Proof\n    aspPathElements: padToASPTreeDepth(aspProof.aspPathElements.map((e) => String(e)), '0'),\n    aspPathIndices: padToASPTreeDepth(aspProof.aspPathIndices.map(String), '0'),\n\n    // Private inputs - Output Notes (BabyJubJub pubkey coordinates)\n    outputAmount1: String(recipientNote.amount),\n    outputPubkeyX1: String(recipientNote.pubkeyX),\n    outputPubkeyY1: String(recipientNote.pubkeyY),\n    outputBlinding1: String(recipientNote.blinding),\n\n    outputAmount2: String(changeNote.amount),\n    outputPubkeyX2: String(changeNote.pubkeyX),\n    outputPubkeyY2: String(changeNote.pubkeyY),\n    outputBlinding2: String(changeNote.blinding),\n  }\n}\n\n// ============================================================================\n// Transfer Building\n// ============================================================================\n\nimport { DEMO_ASP_ID } from './asp.js'\n\n/**\n * Build a UPP transfer (proof + outputs)\n *\n * This prepares everything needed to submit the transaction.\n * UPP transfer is 1-in-2-out with ASP membership proof.\n *\n * @param ctx - Transfer context\n * @param selectedNote - Note to spend (UPP transfer uses exactly 1 input)\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @param onStageChange - Optional callback for stage updates\n * @returns Transfer build result with proof and outputs\n */\nexport async function buildTransfer(\n  ctx: TransferContext,\n  selectedNote: SpendableNote,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount,\n  onStageChange?: (stage: TransferStage) => void\n): Promise<TransferBuildResult> {\n  // 1. Sync Merkle tree\n  onStageChange?.('syncing_merkle')\n  const { tree, leaves } = await syncMerkleTree(ctx.publicClient, ctx.contractAddress)\n\n  // 2. Get Merkle proof for note\n  const noteProofs = await getMerkleProofsForNotes([selectedNote], leaves, tree)\n  const noteProof = noteProofs[0]!\n\n  // 3. Generate ASP proof for the note's origin\n  const aspProof = await generateASPProof(\n    ctx.aspId ?? DEMO_ASP_ID,\n    selectedNote.origin,\n    ctx.aspApprovedOrigins\n  )\n\n  // 4. Build circuit inputs and generate proof\n  onStageChange?.('generating_proof')\n\n  const circuitInputs = await buildUPPTransferCircuitInputs(\n    noteProof,\n    aspProof,\n    recipientNote,\n    changeNote\n  )\n\n  const { proof } = await generateUPPProof(\n    'transfer',\n    circuitInputs,\n    ctx.circuitBaseUrl ?? '/circuits/'\n  )\n\n  const formattedProof = formatProofForContract(proof)\n\n  return {\n    circuit: 'transfer',\n    proof: formattedProof,\n    publicSignals: proof.publicSignals,\n    stateRoot: BigInt(circuitInputs.stateRoot),\n    aspRoot: BigInt(circuitInputs.aspRoot),\n    nullifier: BigInt(circuitInputs.nullifier),\n    outputCommitment1: BigInt(circuitInputs.outputCommitment1),\n    outputCommitment2: BigInt(circuitInputs.outputCommitment2),\n    token: BigInt(circuitInputs.token),\n    recipientOutput: recipientNote,\n    changeOutput: changeNote,\n    spentNotes: [selectedNote],\n  }\n}\n\n/**\n * Format output for contract call (post-quantum)\n */\nexport function formatOutputForContract(note: NoteCreationResult): {\n  commitment: Hex\n  searchTag: bigint\n  ownerHash: bigint\n  encryptedNote: Hex\n} {\n  return {\n    commitment: toHex(note.commitment, { size: 32 }),\n    searchTag: note.searchTag,\n    ownerHash: note.ownerHash,\n    encryptedNote: note.encryptedNote as Hex,\n  }\n}\n"]}

package/dist/chunk-FVT2XRRL.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/deployments/31337.json","../src/deployments/11155111.json","../src/deployments/index.ts","../src/core/transfer.ts"],"names":["__default","init_poseidon","STATE_TREE_DEPTH","ASP_TREE_DEPTH","buildMerkleTree","poseidon","BABYJUBJUB_SUBORDER","generateASPProof","DEMO_ASP_ID","generateUPPProof","formatProofForContract","toHex"],"mappings":";;;;;;;;;AAAA,IAAA,SAAA,GAAA;AAAA,EACE,oBAAA,EAAwB,4CAAA;AAAA,EACxB,cAAA,EAAkB,4CAAA;AAAA,EAClB,SAAA,EAAa,4CAAA;AAAA,EACb,UAAA,EAAc,4CAAA;AAAA,EACd,SAAA,EAAa;AAAA,IACX,gBAAA,EAAoB,4CAAA;AAAA,IACpB,aAAA,EAAiB,4CAAA;AAAA,IACjB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,iBAAA,EAAqB,4CAAA;AAAA,IACrB,wBAAA,EAA4B,4CAAA;AAAA,IAC5B,wBAAA,EAA4B;AAAA,GAC9B;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,mBAAA,EAAuB;AAAA,GACzB;AAAA,EACA,WAAA,EAAe,CAAA;AAAA,EACf,eAAA,EAAmB;AACrB,CAAA;;;AClBA,IAAAA,UAAAA,GAAA;AAAA,EACE,oBAAA,EAAwB,4CAAA;AAAA,EACxB,cAAA,EAAkB,4CAAA;AAAA,EAClB,SAAA,EAAa,4CAAA;AAAA,EACb,UAAA,EAAc,4CAAA;AAAA,EACd,SAAA,EAAa;AAAA,IACX,gBAAA,EAAoB,4CAAA;AAAA,IACpB,aAAA,EAAiB,4CAAA;AAAA,IACjB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,iBAAA,EAAqB,4CAAA;AAAA,IACrB,wBAAA,EAA4B,4CAAA;AAAA,IAC5B,wBAAA,EAA4B;AAAA,GAC9B;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,mBAAA,EAAuB;AAAA,GACzB;AAAA,EACA,WAAA,EAAe,QAAA;AAAA,EACf,eAAA,EAAmB;AACrB,CAAA;;;AC6DA,SAAS,eAAA,CACP,MACA,OAAA,EACkB;AAClB,EAAA,OAAO;AAAA,IACL,sBAAsB,IAAA,CAAK,oBAAA;AAAA,IAC3B,gBAAgB,IAAA,CAAK,cAAA;AAAA,IACrB,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,YAAY,IAAA,CAAK,UAAA;AAAA,IACjB,SAAA,EAAW;AAAA,MACT,gBAAA,EAAkB,KAAK,SAAA,CAAU,gBAAA;AAAA,MACjC,aAAA,EAAe,KAAK,SAAA,CAAU,aAAA;AAAA,MAC9B,gBAAA,EAAkB,KAAK,SAAA,CAAU,gBAAA;AAAA,MACjC,iBAAA,EAAmB,KAAK,SAAA,CAAU,iBAAA;AAAA,MAClC,wBAAA,EAA0B,KAAK,SAAA,CAC5B,wBAAA;AAAA,MACH,wBAAA,EAA0B,KAAK,SAAA,CAC5B;AAAA,KACL;AAAA,IACA,cAAA,EAAgB,KAAK,cAAA,GACjB;AAAA,MACE,mBAAA,EAAqB,KAAK,cAAA,CACvB;AAAA,KACL,GACA,MAAA;AAAA,IACJ,OAAA;AAAA,IACA,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,iBAAiB,IAAA,CAAK;AAAA,GACxB;AACF;AAOA,IAAM,WAAA,GAAgD;AAAA,EACpD,KAAA,EAAO,eAAA,CAAgB,SAAA,EAAoC,KAAK,CAAA;AAAA,EAChE,QAAA,EAAU,eAAA,CAAgBA,UAAAA,EAAsC,QAAQ;AAC1E,CAAA;AAgBO,SAAS,cAAc,OAAA,EAA0C;AACtE,EAAA,OAAO,WAAA,CAAY,OAAO,CAAA,IAAK,IAAA;AACjC;AASO,SAAS,qBAAqB,OAAA,EAAmC;AACtE,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,8BAAA,EAAiC,OAAO,CAAA,oBAAA,EACjB,MAAA,CAAO,KAAK,WAAW,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAC5D;AAAA,EACF;AACA,EAAA,OAAO,UAAA;AACT;AAKO,SAAS,cAAc,OAAA,EAA0B;AACtD,EAAA,OAAO,OAAA,IAAW,WAAA;AACpB;AAKO,SAAS,oBAAA,GAAiC;AAC/C,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,IAAI,MAAM,CAAA;AAC5C;AAKO,SAAS,gBAAgB,OAAA,EAAiC;AAC/D,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,YAAY,OAAO,IAAA;AACxB,EAAA,OAAO,WAAW,SAAA,IAAa,IAAA;AACjC;AAmBO,SAAS,kBAAA,CAAmB,SAAiB,MAAA,EAAgC;AAClF,EAAA,WAAA,CAAY,OAAO,CAAA,GAAI,EAAE,GAAG,QAAQ,OAAA,EAAQ;AAC9C;;;AC5LAC,+BAAA,EAAA;AAiHA,IAAM,cAAA,GAAiB,KAAA;AAQvB,SAAS,mBAAA,CAAuB,KAAU,QAAA,EAAkB;AAC1D,EAAA,IAAI,GAAA,CAAI,UAAUC,kCAAA,EAAkB;AAClC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAGA,kCAAgB,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAMA,kCAAA,GAAmB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACxE;AAQA,SAAS,iBAAA,CAAqB,KAAU,QAAA,EAAkB;AACxD,EAAA,IAAI,GAAA,CAAI,UAAUC,gCAAA,EAAgB;AAChC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAGA,gCAAc,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAMA,gCAAA,GAAiB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACtE;AAOA,IAAM,yBAAA,GAA4B;AAAA,EAChC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,oBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,YAAA,EAAc,SAAS,IAAA,EAAK;AAAA,IACrD,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA,EAAY;AAAA,IACrC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA;AAAY;AAEzC,CAAA;AAaA,eAAsB,cAAA,CACpB,cACA,eAAA,EACyE;AACzE,EAAA,MAAM,YAAA,GAAe,MAAM,YAAA,CAAa,cAAA,EAAe;AACvD,EAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,EAAW;AAK9C,EAAA,IAAI,iBAAwB,EAAC;AAE7B,EAAA,IAAI,YAAY,KAAA,EAAO;AAErB,IAAA,cAAA,GAAiB,MAAM,aAAa,OAAA,CAAQ;AAAA,MAC1C,OAAA,EAAS,eAAA;AAAA,MACT,KAAA,EAAO,yBAAA;AAAA,MACP,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH,CAAA,MAAO;AAEL,IAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,IAAA,IAAI,YAAY,UAAA,EAAY,WAAA,GAAc,MAAA,CAAO,UAAA,CAAW,WAAW,CAAA,GAAI,EAAA;AAC3E,IAAA,OAAA,CAAQ,IAAI,CAAA,uBAAA,EAA0B,OAAO,yBAAyB,SAAS,CAAA,IAAA,EAAO,YAAY,CAAA,CAAE,CAAA;AAEpG,IAAA,OAAO,aAAa,YAAA,EAAc;AAChC,MAAA,MAAM,OAAA,GACJ,SAAA,GAAY,cAAA,GAAiB,YAAA,GAAe,eAAe,SAAA,GAAY,cAAA;AACzE,MAAA,MAAM,KAAA,GAAQ,MAAM,YAAA,CAAa,OAAA,CAAQ;AAAA,QACvC,OAAA,EAAS,eAAA;AAAA,QACT,KAAA,EAAO,yBAAA;AAAA,QACP,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,cAAA,GAAiB,cAAA,CAAe,OAAO,KAAK,CAAA;AAC5C,MAAA,SAAA,GAAY,OAAA,GAAU,EAAA;AAAA,IACxB;AAAA,EACF;AAGA,EAAA,cAAA,CAAe,IAAA,CAAK,CAAC,CAAA,EAAQ,CAAA,KAAW;AACtC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,OAAO,IAAA,GAAO,IAAA;AAAA,EAChB,CAAC,CAAA;AAGD,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,MAAW,OAAO,cAAA,EAAgB;AAChC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,SAAU,CAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,UAAW,CAAA;AAE9C,IAAA,IAAI,MAAA,CAAO,WAAW,SAAA,EAAW;AAC/B,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,6CAAA,EAAgD,MAAA,CAAO,MAAM,CAAA,eAAA,EAAkB,SAAS,CAAA,2CAAA;AAAA,OAE1F;AAAA,IACF;AACA,IAAA,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,EACxB;AAEA,EAAA,MAAM,IAAA,GAAOC,kCAAgB,MAAM,CAAA;AAGnC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,EAAQ;AACnC,EAAA,MAAM,WAAA,GAAe,MAAM,YAAA,CAAa,YAAA,CAAa;AAAA,IACnD,OAAA,EAAS,eAAA;AAAA,IACT,GAAA,EAAK;AAAA,MACH;AAAA,QACE,IAAA,EAAM,UAAA;AAAA,QACN,IAAA,EAAM,eAAA;AAAA,QACN,QAAQ,EAAC;AAAA,QACT,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,QAC7B,eAAA,EAAiB;AAAA;AACnB,KACF;AAAA,IACA,YAAA,EAAc;AAAA,GACf,CAAA;AAED,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,+BAAA,EAAkC,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAC7D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,6BAAA,EAAgC,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AACxD,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oCAAA,EAAuC,OAAO,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,gCAAA,EAAmC,WAAW,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8BAAA,EAAiC,OAAA,KAAY,WAAW,CAAA,CAAE,CAAA;AAEtE,EAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,IAAA,OAAA,CAAQ,IAAI,CAAA,wCAAA,CAA0C,CAAA;AACtD,IAAA,OAAA,CAAQ,GAAA;AAAA,MACN,CAAA,wBAAA,CAAA;AAAA,MACA,MAAA,CAAO,IAAI,CAAC,CAAA,KAAM,OAAO,CAAA,CAAE,QAAA,CAAS,EAAE,CAAC;AAAA,KACzC;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAM,MAAA,EAAO;AACxB;AAUA,eAAsB,uBAAA,CACpB,KAAA,EACA,MAAA,EACA,IAAA,EACgC;AAChC,EAAA,MAAM,EAAE,iBAAA,EAAkB,GAAI,MAAM,OAAO,uBAAoB,CAAA;AAC/D,EAAA,MAAM,SAAgC,EAAC;AAEvC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC3C,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA,CAAU,CAAC,CAAA,KAAM,MAAM,YAAY,CAAA;AAE5D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,IAAA,CAAK,UAAU,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,qDAAA,EAAwD,YAAY,CAAA,CAAE,CAAA;AAClF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8CAAA,EAAiD,SAAS,CAAA,CAAE,CAAA;AACxE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,mDAAA,EAAsD,IAAA,CAAK,SAAS,CAAA,CAAE,CAAA;AAElF,IAAA,IAAI,cAAc,EAAA,EAAI;AACpB,MAAA,OAAA,CAAQ,GAAA,CAAI,6CAA6C,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AACxF,MAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,IAAA,CAAK,WAAW,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,sBAAA,CAAwB,CAAA;AAAA,IAC9E;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA;AAE3C,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,EAAyC,KAAA,CAAM,IAAI,CAAA,CAAE,CAAA;AACjE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,KAAA,CAAM,SAAS,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,uCAAA,CAAA,EAA2C,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AAClG,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,CAAA,EAA0C,KAAA,CAAM,WAAW,CAAA;AAGvE,IAAA,MAAM,OAAA,GAAU,MAAM,iBAAA,CAAkB,YAAA,EAAc,KAAK,CAAA;AAC3D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oDAAA,EAAuD,OAAO,CAAA,CAAE,CAAA;AAE5E,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAA,CAAQ,MAAM,CAAA,2DAAA,CAA6D,CAAA;AAAA,IAC7E;AAEA,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,KAAA,EAAO,IAAA,EAAM,EAAE,GAAG,IAAA,EAAM,SAAA,EAAU,EAAG,CAAA;AAAA,EACrD;AAEA,EAAA,OAAO,MAAA;AACT;AAgBA,eAAsB,gBAAA,CACpB,WAAA,EACA,SAAA,EACA,UAAA,EACiB;AACjB,EAAA,OAAO,MAAMC,2BAAS,CAAC,WAAA,GAAcC,uCAAqB,MAAA,CAAO,SAAS,CAAA,EAAG,UAAU,CAAC,CAAA;AAC1F;AAkBA,eAAsB,6BAAA,CACpB,SAAA,EACA,QAAA,EACA,aAAA,EACA,UAAA,EACmC;AACnC,EAAA,MAAM,EAAE,KAAA,EAAO,IAAA,EAAK,GAAI,SAAA;AAGxB,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,MAAM,OAAO,2BAAwB,CAAA;AACjE,EAAA,MAAM,cAAc,MAAM,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAIlE,EAAA,MAAM,oBAAA,GAAuB,MAAMD,0BAAA,CAAS;AAAA,IAC1C,IAAA,CAAK,MAAA;AAAA,IACL,WAAA,CAAY,CAAA;AAAA,IACZ,WAAA,CAAY,CAAA;AAAA,IACZ,IAAA,CAAK,QAAA;AAAA,IACL,IAAA,CAAK,MAAA;AAAA,IACL,IAAA,CAAK;AAAA,GACN,CAAA;AAED,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC/C,EAAA,IAAI,yBAAyB,gBAAA,EAAkB;AAC7C,IAAA,OAAA,CAAQ,MAAM,CAAA,mDAAA,CAAqD,CAAA;AACnE,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,UAAA,EAAa,IAAA,CAAK,MAAM,CAAA,WAAA,EAAc,YAAY,CAAC,CAAA,WAAA,EAAc,WAAA,CAAY,CAAC,CAAA,CAAE,CAAA;AAC9F,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,YAAA,EAAe,IAAA,CAAK,QAAQ,CAAA,UAAA,EAAa,KAAK,MAAM,CAAA,SAAA,EAAY,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AAC1F,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,QAAA,EAAW,oBAAoB,CAAA,SAAA,EAAY,gBAAgB,CAAA,CAAE,CAAA;AAC3E,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,2JAAA;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,MAAM,YAAY,MAAM,gBAAA;AAAA,IACtB,MAAA,CAAO,KAAK,WAAW,CAAA;AAAA,IACvB,KAAA,CAAM,SAAA;AAAA,IACN,MAAA,CAAO,KAAK,UAAU;AAAA,GACxB;AAEA,EAAA,OAAO;AAAA;AAAA,IAEL,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAAA,IAC5B,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAAA,IAChC,SAAA,EAAW,OAAO,SAAS,CAAA;AAAA,IAC3B,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA;AAAA,IAClD,iBAAA,EAAmB,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA;AAAA,IAC/C,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA;AAAA;AAAA,IAGxB,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,oBAAoB,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,WAAW,IAAIC,qCAAmB,CAAA;AAAA,IACzE,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAAA,IACnC,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,cAAA,EAAgB,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA;AAAA,IACtC,iBAAA,EAAmB,mBAAA,CAAoB,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACpF,kBAAkB,mBAAA,CAAoB,KAAA,CAAM,YAAY,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAGxE,eAAA,EAAiB,iBAAA,CAAkB,QAAA,CAAS,eAAA,CAAgB,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACtF,gBAAgB,iBAAA,CAAkB,QAAA,CAAS,eAAe,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAG1E,aAAA,EAAe,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA;AAAA,IAC1C,cAAA,EAAgB,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IAC5C,cAAA,EAAgB,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IAC5C,eAAA,EAAiB,MAAA,CAAO,aAAA,CAAc,QAAQ,CAAA;AAAA,IAE9C,aAAA,EAAe,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA;AAAA,IACvC,cAAA,EAAgB,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA;AAAA,IACzC,cAAA,EAAgB,MAAA,CAAO,UAAA,CAAW,OAAO,CAAA;AAAA,IACzC,eAAA,EAAiB,MAAA,CAAO,UAAA,CAAW,QAAQ;AAAA,GAC7C;AACF;AAqBA,eAAsB,aAAA,CACpB,GAAA,EACA,YAAA,EACA,aAAA,EACA,YACA,aAAA,EAC8B;AAE9B,EAAA,aAAA,GAAgB,gBAAgB,CAAA;AAChC,EAAA,MAAM,EAAE,MAAM,MAAA,EAAO,GAAI,MAAM,cAAA,CAAe,GAAA,CAAI,YAAA,EAAc,GAAA,CAAI,eAAe,CAAA;AAGnF,EAAA,MAAM,aAAa,MAAM,uBAAA,CAAwB,CAAC,YAAY,CAAA,EAAG,QAAQ,IAAI,CAAA;AAC7E,EAAA,MAAM,SAAA,GAAY,WAAW,CAAC,CAAA;AAG9B,EAAA,MAAM,WAAW,MAAMC,kCAAA;AAAA,IACrB,IAAI,KAAA,IAASC,6BAAA;AAAA,IACb,YAAA,CAAa,MAAA;AAAA,IACb,GAAA,CAAI;AAAA,GACN;AAGA,EAAA,aAAA,GAAgB,kBAAkB,CAAA;AAElC,EAAA,MAAM,gBAAgB,MAAM,6BAAA;AAAA,IAC1B,SAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAMC,kCAAA;AAAA,IACtB,UAAA;AAAA,IACA,aAAA;AAAA,IACA,IAAI,cAAA,IAAkB;AAAA,GACxB;AAEA,EAAA,MAAM,cAAA,GAAiBC,yCAAuB,KAAK,CAAA;AAEnD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,UAAA;AAAA,IACT,KAAA,EAAO,cAAA;AAAA,IACP,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,OAAA,EAAS,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IACrC,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,KAAA,EAAO,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA;AAAA,IACjC,eAAA,EAAiB,aAAA;AAAA,IACjB,YAAA,EAAc,UAAA;AAAA,IACd,UAAA,EAAY,CAAC,YAAY;AAAA,GAC3B;AACF;AAKO,SAAS,wBAAwB,IAAA,EAKtC;AACA,EAAA,OAAO;AAAA,IACL,YAAYC,UAAA,CAAM,IAAA,CAAK,YAAY,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IAC/C,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,eAAe,IAAA,CAAK;AAAA,GACtB;AACF","file":"chunk-FVT2XRRL.cjs","sourcesContent":["{\n  \"UniversalPrivatePool\": \"0x2279b7a0a67db372996a5fab50d91eaa73d2ebe6\",\n  \"ASPRegistryHub\": \"0xe7f1725e7734ce288f8367e1bb143e90bb3f0512\",\n  \"TestToken\": \"0x610178da211fef7d417bc0e6fed39f05609ad788\",\n  \"TestToken2\": \"0xb7f8bc63bbcad18155201308c8f3540b07f84f5e\",\n  \"verifiers\": {\n    \"TransferVerifier\": \"0x9fe46736679d2d9a65f0992f2272de9f3c7fa6e0\",\n    \"MergeVerifier\": \"0xcf7ed3acca5a467e9e704c703e8d87f634fb0fc9\",\n    \"WithdrawVerifier\": \"0xdc64a140aa3e981100a9beca4e685f962f0cf6c9\",\n    \"JoinSplitVerifier\": \"0x5fc8d32690cc91d4c39d9d3abcbd16989f875707\",\n    \"MergeTransfer2x2Verifier\": \"0x0165878a594ca255338adfa4d48449f69242eb8f\",\n    \"MergeTransfer4x2Verifier\": \"0xa513e6e4b8f2a923d98304ec87f64353c4d5c853\"\n  },\n  \"starkVerifiers\": {\n    \"CircleStarkVerifier\": \"0x0dcd1bf9a1b36ce34237eeafef220932846bcd82\"\n  },\n  \"deployBlock\": 1,\n  \"deployTimestamp\": 1774728354492\n}\n","{\n  \"UniversalPrivatePool\": \"0x95c800a58ff37c85a15f435cf7bca2af288cb5c7\",\n  \"ASPRegistryHub\": \"0xfd11c56a23314aa88dfbcc36254f33e5e8b010df\",\n  \"TestToken\": \"0xf68645ce430256917ca434a4063c81db59dda611\",\n  \"TestToken2\": \"0xe159f88d97ba9663b0c586fc720ec637783db1d4\",\n  \"verifiers\": {\n    \"TransferVerifier\": \"0x465261fd85c80e8278a30f04ad4f4558710d6cd3\",\n    \"MergeVerifier\": \"0x219e26676e6a72a00ede08e4ebf7d6aa27005676\",\n    \"WithdrawVerifier\": \"0x7405f0e1e44d5355d4913543125961790e8b52c0\",\n    \"JoinSplitVerifier\": \"0x18e3daed50ca37a1acdea4a26c71ae39ff9b0fb1\",\n    \"MergeTransfer2x2Verifier\": \"0x365f5c0ac64f07bc779cdbbcf695ad5024971e06\",\n    \"MergeTransfer4x2Verifier\": \"0xbab9f475bcf9377675d01a640b1b70d5a27a8af4\"\n  },\n  \"starkVerifiers\": {\n    \"CircleStarkVerifier\": \"0x4a911db5b613b399a2622da296c5163c059714ec\"\n  },\n  \"deployBlock\": 10534869,\n  \"deployTimestamp\": 1774642370446\n}\n","/**\n * Deployment Configuration Loader\n *\n * Loads contract addresses based on chain ID.\n * Built-in: Anvil (31337) and Sepolia (11155111).\n * Custom chains can be registered at runtime via registerDeployment().\n */\n\nimport type { Address } from \"viem\";\n\n/**\n * Verifier contract addresses\n */\nexport interface VerifierAddresses {\n  TransferVerifier: Address;\n  MergeVerifier: Address;\n  WithdrawVerifier: Address;\n  JoinSplitVerifier?: Address;\n  MergeTransfer2x2Verifier?: Address;\n  MergeTransfer4x2Verifier?: Address;\n}\n\n/**\n * STARK verifier contract addresses\n */\nexport interface StarkVerifierAddresses {\n  CircleStarkVerifier?: Address;\n}\n\n/**\n * Deployment configuration for a chain\n */\nexport interface DeploymentConfig {\n  /** Universal Private Pool contract address */\n  UniversalPrivatePool: Address;\n  /** ASP Registry Hub contract address */\n  ASPRegistryHub: Address;\n  /** Test token address (local/testnet) */\n  TestToken?: Address;\n  /** Test token 2 address — bonding curve token (local/testnet) */\n  TestToken2?: Address;\n  /** Verifier contract addresses */\n  verifiers: VerifierAddresses;\n  /** STARK verifier contract addresses */\n  starkVerifiers?: StarkVerifierAddresses;\n  /** Chain ID */\n  chainId: number;\n  /** Block number when contracts were deployed (for efficient scanning) */\n  deployBlock: number;\n  /** Timestamp when contracts were deployed */\n  deployTimestamp?: number;\n}\n\n/**\n * Raw JSON file format (without chainId, which is added dynamically)\n */\ninterface DeploymentJSON {\n  UniversalPrivatePool: string;\n  ASPRegistryHub: string;\n  TestToken?: string;\n  TestToken2?: string;\n  verifiers: {\n    TransferVerifier: string;\n    MergeVerifier: string;\n    WithdrawVerifier: string;\n    JoinSplitVerifier?: string;\n    MergeTransfer2x2Verifier?: string;\n    MergeTransfer4x2Verifier?: string;\n  };\n  starkVerifiers?: {\n    CircleStarkVerifier?: string;\n  };\n  deployBlock: number;\n  deployTimestamp?: number;\n}\n\n/**\n * Parse raw deployment JSON into typed config\n */\nfunction parseDeployment(\n  json: DeploymentJSON,\n  chainId: number\n): DeploymentConfig {\n  return {\n    UniversalPrivatePool: json.UniversalPrivatePool as Address,\n    ASPRegistryHub: json.ASPRegistryHub as Address,\n    TestToken: json.TestToken as Address | undefined,\n    TestToken2: json.TestToken2 as Address | undefined,\n    verifiers: {\n      TransferVerifier: json.verifiers.TransferVerifier as Address,\n      MergeVerifier: json.verifiers.MergeVerifier as Address,\n      WithdrawVerifier: json.verifiers.WithdrawVerifier as Address,\n      JoinSplitVerifier: json.verifiers.JoinSplitVerifier as Address | undefined,\n      MergeTransfer2x2Verifier: json.verifiers\n        .MergeTransfer2x2Verifier as Address | undefined,\n      MergeTransfer4x2Verifier: json.verifiers\n        .MergeTransfer4x2Verifier as Address | undefined,\n    },\n    starkVerifiers: json.starkVerifiers\n      ? {\n          CircleStarkVerifier: json.starkVerifiers\n            .CircleStarkVerifier as Address | undefined,\n        }\n      : undefined,\n    chainId,\n    deployBlock: json.deployBlock,\n    deployTimestamp: json.deployTimestamp,\n  };\n}\n\n// Import deployment configs\n// These will be updated by the extract-deployment.js script\nimport anvil from \"./31337.json\" with { type: \"json\" };\nimport sepolia from \"./11155111.json\" with { type: \"json\" };\n\nconst deployments: Record<number, DeploymentConfig> = {\n  31337: parseDeployment(anvil as unknown as DeploymentJSON, 31337),\n  11155111: parseDeployment(sepolia as unknown as DeploymentJSON, 11155111),\n};\n\n/**\n * Get deployment config for a chain\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config or null if not found\n *\n * @example\n * ```ts\n * const deployment = getDeployment(31337)\n * if (deployment) {\n *   console.log('Pool address:', deployment.UniversalPrivatePool)\n * }\n * ```\n */\nexport function getDeployment(chainId: number): DeploymentConfig | null {\n  return deployments[chainId] ?? null;\n}\n\n/**\n * Get deployment config or throw if not found\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config\n * @throws Error if deployment not found\n */\nexport function getDeploymentOrThrow(chainId: number): DeploymentConfig {\n  const deployment = getDeployment(chainId);\n  if (!deployment) {\n    throw new Error(\n      `No deployment found for chain ${chainId}. ` +\n        `Supported chains: ${Object.keys(deployments).join(\", \")}`\n    );\n  }\n  return deployment;\n}\n\n/**\n * Check if a chain has a deployment\n */\nexport function hasDeployment(chainId: number): boolean {\n  return chainId in deployments;\n}\n\n/**\n * Get all supported chain IDs\n */\nexport function getSupportedChainIds(): number[] {\n  return Object.keys(deployments).map(Number);\n}\n\n/**\n * Get the token address for a chain\n */\nexport function getTokenAddress(chainId: number): Address | null {\n  const deployment = getDeployment(chainId);\n  if (!deployment) return null;\n  return deployment.TestToken ?? null;\n}\n\n/**\n * Register a deployment for a custom chain at runtime.\n *\n * Use this when deploying your own pool on a chain not built into the SDK.\n * Overrides any existing deployment for the same chainId.\n *\n * @example\n * ```ts\n * registerDeployment(8453, {\n *   UniversalPrivatePool: '0x...',\n *   ASPRegistryHub: '0x...',\n *   verifiers: { TransferVerifier: '0x...', MergeVerifier: '0x...', WithdrawVerifier: '0x...' },\n *   chainId: 8453,\n *   deployBlock: 12345678,\n * })\n * ```\n */\nexport function registerDeployment(chainId: number, config: DeploymentConfig): void {\n  deployments[chainId] = { ...config, chainId };\n}\n","/**\n * Transfer Module\n *\n * Core logic for building and executing UPP transfers.\n * This module is framework-agnostic (no React).\n */\n\nimport { toHex, type Address, type Hex, type PublicClient } from 'viem'\nimport { getDeployment } from '../deployments/index.js'\nimport { buildMerkleTree, type MerkleProof } from '../utils/merkle.js'\nimport { poseidon, BABYJUBJUB_SUBORDER } from '../utils/poseidon.js'\nimport {\n  generateUPPProof,\n  formatProofForContract,\n  STATE_TREE_DEPTH,\n  ASP_TREE_DEPTH,\n  type UPPCircuitType,\n  type UPPTransferCircuitInputs,\n} from './proof.js'\nimport { generateASPProof, type ASPProof } from './asp.js'\nimport type { NoteCreationResult } from '../react/use-upp-account.js'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Transfer stage for progress tracking\n */\nexport type TransferStage =\n  | 'selecting_notes'\n  | 'syncing_merkle'\n  | 'creating_outputs'\n  | 'generating_proof'\n  | 'submitting_tx'\n  | 'confirming'\n\n/**\n * A shielded note with all data needed for spending\n *\n * Post-quantum: uses ownerSecret/ownerHash instead of BabyJubJub one-time keys.\n * Ownership is proven via hash preimage: Poseidon(ownerSecret) == ownerHash.\n */\nexport interface SpendableNote {\n  amount: bigint\n  blinding: bigint\n  commitment: string\n  /** Owner secret (hash preimage for ownership proof) */\n  ownerSecret: string\n  /** Owner hash = Poseidon(ownerSecret) - committed in the note */\n  ownerHash: string\n  leafIndex: number\n  /** Origin address (depositor) - required for UPP circuits */\n  origin: bigint\n  /** Token address - required for UPP circuits */\n  token: bigint\n}\n\n/**\n * Merkle proof with associated note\n */\nexport interface MerkleProofWithNote {\n  proof: MerkleProof\n  note: SpendableNote\n}\n\n/**\n * Transfer context (dependencies)\n */\nexport interface TransferContext {\n  /** viem PublicClient for RPC calls */\n  publicClient: PublicClient\n  /** Contract address */\n  contractAddress: Address\n  /** Chain ID */\n  chainId: number\n  /** Circuit base URL (default: '/circuits/') */\n  circuitBaseUrl?: string\n  /** ASP ID to use (default: DEMO_ASP_ID) */\n  aspId?: bigint\n  /** All approved origins in the ASP tree (enables multi-origin proofs) */\n  aspApprovedOrigins?: bigint[]\n}\n\n/**\n * Transfer result\n */\nexport interface TransferBuildResult {\n  /** Circuit type used */\n  circuit: UPPCircuitType\n  /** Formatted proof for contract */\n  proof: {\n    a: [bigint, bigint]\n    b: [[bigint, bigint], [bigint, bigint]]\n    c: [bigint, bigint]\n  }\n  /** Public signals from proof */\n  publicSignals: string[]\n  /** State tree root */\n  stateRoot: bigint\n  /** ASP tree root */\n  aspRoot: bigint\n  /** Nullifier hash */\n  nullifier: bigint\n  /** Output commitment 1 */\n  outputCommitment1: bigint\n  /** Output commitment 2 */\n  outputCommitment2: bigint\n  /** Token address */\n  token: bigint\n  /** Recipient output */\n  recipientOutput: NoteCreationResult\n  /** Change output */\n  changeOutput: NoteCreationResult\n  /** Notes that will be spent */\n  spentNotes: SpendableNote[]\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** Chunk size for paginated RPC queries on testnets */\nconst RPC_CHUNK_SIZE = 9000n\n\n/**\n * Pad an array to the state tree depth (32 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length STATE_TREE_DEPTH\n */\nfunction padToStateTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= STATE_TREE_DEPTH) {\n    return arr.slice(0, STATE_TREE_DEPTH)\n  }\n  return [...arr, ...Array(STATE_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * Pad an array to the ASP tree depth (20 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length ASP_TREE_DEPTH\n */\nfunction padToASPTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= ASP_TREE_DEPTH) {\n    return arr.slice(0, ASP_TREE_DEPTH)\n  }\n  return [...arr, ...Array(ASP_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * CommitmentInserted event — emitted by _insertLeaf() for ALL leaf insertions\n * (shield, transfer, merge, swap fill, swap claim, swap cancel).\n * This is the single canonical event for Merkle tree reconstruction.\n */\nconst COMMITMENT_INSERTED_EVENT = {\n  type: 'event' as const,\n  name: 'CommitmentInserted',\n  inputs: [\n    { type: 'bytes32', name: 'commitment', indexed: true },\n    { type: 'uint256', name: 'leafIndex' },\n    { type: 'uint256', name: 'timestamp' },\n  ],\n}\n\n// ============================================================================\n// Merkle Tree Functions\n// ============================================================================\n\n/**\n * Fetch all commitments from the contract and build a Merkle tree\n *\n * @param publicClient - viem PublicClient\n * @param contractAddress - Contract address\n * @returns Object with tree and leaves array\n */\nexport async function syncMerkleTree(\n  publicClient: PublicClient,\n  contractAddress: Address\n): Promise<{ tree: ReturnType<typeof buildMerkleTree>; leaves: bigint[] }> {\n  const currentBlock = await publicClient.getBlockNumber()\n  const chainId = await publicClient.getChainId()\n\n  // Use CommitmentInserted events — the canonical event emitted by _insertLeaf()\n  // for ALL operations (shield, transfer, merge, swap fill/claim/cancel).\n  // Each event has an explicit leafIndex, so ordering is deterministic.\n  let commitmentLogs: any[] = []\n\n  if (chainId === 31337) {\n    // Anvil - single query is fine\n    commitmentLogs = await publicClient.getLogs({\n      address: contractAddress,\n      event: COMMITMENT_INSERTED_EVENT,\n      fromBlock: 0n,\n    })\n  } else {\n    // Testnet/mainnet - paginate to avoid RPC limits\n    const deployment = getDeployment(chainId)\n    let fromBlock = deployment?.deployBlock ? BigInt(deployment.deployBlock) : 0n\n    console.log(`[syncMerkleTree] Chain ${chainId}: scanning from block ${fromBlock} to ${currentBlock}`)\n\n    while (fromBlock <= currentBlock) {\n      const toBlock =\n        fromBlock + RPC_CHUNK_SIZE > currentBlock ? currentBlock : fromBlock + RPC_CHUNK_SIZE\n      const chunk = await publicClient.getLogs({\n        address: contractAddress,\n        event: COMMITMENT_INSERTED_EVENT,\n        fromBlock,\n        toBlock,\n      })\n      commitmentLogs = commitmentLogs.concat(chunk)\n      fromBlock = toBlock + 1n\n    }\n  }\n\n  // Sort by explicit leafIndex (most reliable), falling back to block+logIndex\n  commitmentLogs.sort((a: any, b: any) => {\n    const idxA = Number(a.args.leafIndex!)\n    const idxB = Number(b.args.leafIndex!)\n    return idxA - idxB\n  })\n\n  // Build leaves array using the explicit leafIndex from each event\n  const leaves: bigint[] = []\n  for (const log of commitmentLogs) {\n    const leafIndex = Number(log.args.leafIndex!)\n    const commitment = BigInt(log.args.commitment!)\n\n    if (leaves.length !== leafIndex) {\n      console.warn(\n        `[syncMerkleTree] WARNING: Expected leafIndex ${leaves.length} but event has ${leafIndex}. ` +\n        `This may indicate missed events or reorg.`\n      )\n    }\n    leaves.push(commitment)\n  }\n\n  const tree = buildMerkleTree(leaves)\n\n  // Debug: compare our root with on-chain root\n  const ourRoot = await tree.getRoot()\n  const onChainRoot = (await publicClient.readContract({\n    address: contractAddress,\n    abi: [\n      {\n        type: 'function',\n        name: 'getMerkleRoot',\n        inputs: [],\n        outputs: [{ type: 'uint256' }],\n        stateMutability: 'view',\n      },\n    ],\n    functionName: 'getMerkleRoot',\n  })) as bigint\n\n  console.log(`[syncMerkleTree] Leaves count: ${leaves.length}`)\n  console.log(`[syncMerkleTree] Tree depth: ${tree.depth}`)\n  console.log(`[syncMerkleTree] Our computed root: ${ourRoot}`)\n  console.log(`[syncMerkleTree] On-chain root: ${onChainRoot}`)\n  console.log(`[syncMerkleTree] Roots match: ${ourRoot === onChainRoot}`)\n\n  if (ourRoot !== onChainRoot) {\n    console.log(`[syncMerkleTree] WARNING: Root mismatch!`)\n    console.log(\n      `[syncMerkleTree] Leaves:`,\n      leaves.map((l) => '0x' + l.toString(16))\n    )\n  }\n\n  return { tree, leaves }\n}\n\n/**\n * Get Merkle proofs for a set of notes\n *\n * @param notes - Notes to get proofs for\n * @param leaves - All leaves in the tree\n * @param tree - Merkle tree instance\n * @returns Array of proofs with associated notes\n */\nexport async function getMerkleProofsForNotes(\n  notes: SpendableNote[],\n  leaves: bigint[],\n  tree: ReturnType<typeof buildMerkleTree>\n): Promise<MerkleProofWithNote[]> {\n  const { verifyMerkleProof } = await import('../utils/merkle.js')\n  const proofs: MerkleProofWithNote[] = []\n\n  for (const note of notes) {\n    const commitmentBI = BigInt(note.commitment)\n    const leafIndex = leaves.findIndex((l) => l === commitmentBI)\n\n    console.log(`[getMerkleProofsForNotes] Note commitment: ${note.commitment}`)\n    console.log(`[getMerkleProofsForNotes] Note commitment as BigInt: ${commitmentBI}`)\n    console.log(`[getMerkleProofsForNotes] Found at leafIndex: ${leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] Note's stored leafIndex: ${note.leafIndex}`)\n\n    if (leafIndex === -1) {\n      console.log(`[getMerkleProofsForNotes] Leaves in tree:`, leaves.map((l) => l.toString()))\n      throw new Error(`Note ${note.commitment.slice(0, 10)}... not found on-chain`)\n    }\n\n    const proof = await tree.getProof(leafIndex)\n\n    console.log(`[getMerkleProofsForNotes] Proof root: ${proof.root}`)\n    console.log(`[getMerkleProofsForNotes] Proof leafIndex: ${proof.leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] PathElements:`, proof.pathElements.map((e) => e.toString()))\n    console.log(`[getMerkleProofsForNotes] PathIndices:`, proof.pathIndices)\n\n    // Verify the proof locally before returning\n    const isValid = await verifyMerkleProof(commitmentBI, proof)\n    console.log(`[getMerkleProofsForNotes] Local proof verification: ${isValid}`)\n\n    if (!isValid) {\n      console.error(`[getMerkleProofsForNotes] WARNING: Merkle proof is invalid!`)\n    }\n\n    proofs.push({ proof, note: { ...note, leafIndex } })\n  }\n\n  return proofs\n}\n\n// ============================================================================\n// Circuit Input Building\n// ============================================================================\n\n/**\n * Compute nullifier for a UPP note\n *\n * Post-quantum nullifier: Poseidon(ownerSecret, leafIndex, commitment)\n *\n * @param ownerSecret - Owner secret (hash preimage)\n * @param leafIndex - Leaf index in Merkle tree\n * @param commitment - Note commitment\n * @returns Nullifier as bigint\n */\nexport async function computeNullifier(\n  ownerSecret: bigint,\n  leafIndex: number,\n  commitment: bigint\n): Promise<bigint> {\n  return await poseidon([ownerSecret % BABYJUBJUB_SUBORDER, BigInt(leafIndex), commitment])\n}\n\n/**\n * Note with amount for circuit building\n */\nexport interface NoteWithAmount extends NoteCreationResult {\n  amount: bigint\n}\n\n/**\n * Build circuit inputs for UPP transfer (1-in-2-out)\n *\n * @param noteProof - Merkle proof for input note\n * @param aspProof - ASP membership proof for input note's origin\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @returns UPP transfer circuit inputs\n */\nexport async function buildUPPTransferCircuitInputs(\n  noteProof: MerkleProofWithNote,\n  aspProof: ASPProof,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount\n): Promise<UPPTransferCircuitInputs> {\n  const { proof, note } = noteProof\n\n  // Derive BabyJubJub pubkey from ownerSecret for commitment verification\n  const { privateToPublic } = await import('../utils/babyjubjub.js')\n  const inputPubkey = await privateToPublic(BigInt(note.ownerSecret))\n\n  // Compute input commitment locally to verify\n  // Circuit commitment: Poseidon(amount, pubkeyX, pubkeyY, blinding, origin, token)\n  const localInputCommitment = await poseidon([\n    note.amount,\n    inputPubkey.x,\n    inputPubkey.y,\n    note.blinding,\n    note.origin,\n    note.token,\n  ])\n\n  const storedCommitment = BigInt(note.commitment)\n  if (localInputCommitment !== storedCommitment) {\n    console.error(`[buildUPPTransferCircuitInputs] COMMITMENT MISMATCH`)\n    console.error(`  amount: ${note.amount}, pubkeyX: ${inputPubkey.x}, pubkeyY: ${inputPubkey.y}`)\n    console.error(`  blinding: ${note.blinding}, origin: ${note.origin}, token: ${note.token}`)\n    console.error(`  local=${localInputCommitment}, stored=${storedCommitment}`)\n    throw new Error(\n      `Note commitment mismatch — this note was created with an outdated commitment formula. ` +\n      `Clear your shielded account (localStorage) and re-shield tokens.`\n    )\n  }\n\n  const nullifier = await computeNullifier(\n    BigInt(note.ownerSecret),\n    proof.leafIndex,\n    BigInt(note.commitment)\n  )\n\n  return {\n    // Public inputs\n    stateRoot: String(proof.root),\n    aspRoot: String(aspProof.aspRoot),\n    nullifier: String(nullifier),\n    outputCommitment1: String(recipientNote.commitment),\n    outputCommitment2: String(changeNote.commitment),\n    token: String(note.token),\n\n    // Private inputs - Input Note\n    inputAmount: String(note.amount),\n    inputOneTimeSecret: String(BigInt(note.ownerSecret) % BABYJUBJUB_SUBORDER),\n    inputBlinding: String(note.blinding),\n    inputOrigin: String(note.origin),\n    inputLeafIndex: String(proof.leafIndex),\n    inputPathElements: padToStateTreeDepth(proof.pathElements.map((e) => String(e)), '0'),\n    inputPathIndices: padToStateTreeDepth(proof.pathIndices.map(String), '0'),\n\n    // Private inputs - ASP Membership Proof\n    aspPathElements: padToASPTreeDepth(aspProof.aspPathElements.map((e) => String(e)), '0'),\n    aspPathIndices: padToASPTreeDepth(aspProof.aspPathIndices.map(String), '0'),\n\n    // Private inputs - Output Notes (BabyJubJub pubkey coordinates)\n    outputAmount1: String(recipientNote.amount),\n    outputPubkeyX1: String(recipientNote.pubkeyX),\n    outputPubkeyY1: String(recipientNote.pubkeyY),\n    outputBlinding1: String(recipientNote.blinding),\n\n    outputAmount2: String(changeNote.amount),\n    outputPubkeyX2: String(changeNote.pubkeyX),\n    outputPubkeyY2: String(changeNote.pubkeyY),\n    outputBlinding2: String(changeNote.blinding),\n  }\n}\n\n// ============================================================================\n// Transfer Building\n// ============================================================================\n\nimport { DEMO_ASP_ID } from './asp.js'\n\n/**\n * Build a UPP transfer (proof + outputs)\n *\n * This prepares everything needed to submit the transaction.\n * UPP transfer is 1-in-2-out with ASP membership proof.\n *\n * @param ctx - Transfer context\n * @param selectedNote - Note to spend (UPP transfer uses exactly 1 input)\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @param onStageChange - Optional callback for stage updates\n * @returns Transfer build result with proof and outputs\n */\nexport async function buildTransfer(\n  ctx: TransferContext,\n  selectedNote: SpendableNote,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount,\n  onStageChange?: (stage: TransferStage) => void\n): Promise<TransferBuildResult> {\n  // 1. Sync Merkle tree\n  onStageChange?.('syncing_merkle')\n  const { tree, leaves } = await syncMerkleTree(ctx.publicClient, ctx.contractAddress)\n\n  // 2. Get Merkle proof for note\n  const noteProofs = await getMerkleProofsForNotes([selectedNote], leaves, tree)\n  const noteProof = noteProofs[0]!\n\n  // 3. Generate ASP proof for the note's origin\n  const aspProof = await generateASPProof(\n    ctx.aspId ?? DEMO_ASP_ID,\n    selectedNote.origin,\n    ctx.aspApprovedOrigins\n  )\n\n  // 4. Build circuit inputs and generate proof\n  onStageChange?.('generating_proof')\n\n  const circuitInputs = await buildUPPTransferCircuitInputs(\n    noteProof,\n    aspProof,\n    recipientNote,\n    changeNote\n  )\n\n  const { proof } = await generateUPPProof(\n    'transfer',\n    circuitInputs,\n    ctx.circuitBaseUrl ?? '/circuits/'\n  )\n\n  const formattedProof = formatProofForContract(proof)\n\n  return {\n    circuit: 'transfer',\n    proof: formattedProof,\n    publicSignals: proof.publicSignals,\n    stateRoot: BigInt(circuitInputs.stateRoot),\n    aspRoot: BigInt(circuitInputs.aspRoot),\n    nullifier: BigInt(circuitInputs.nullifier),\n    outputCommitment1: BigInt(circuitInputs.outputCommitment1),\n    outputCommitment2: BigInt(circuitInputs.outputCommitment2),\n    token: BigInt(circuitInputs.token),\n    recipientOutput: recipientNote,\n    changeOutput: changeNote,\n    spentNotes: [selectedNote],\n  }\n}\n\n/**\n * Format output for contract call (post-quantum)\n */\nexport function formatOutputForContract(note: NoteCreationResult): {\n  commitment: Hex\n  searchTag: bigint\n  ownerHash: bigint\n  encryptedNote: Hex\n} {\n  return {\n    commitment: toHex(note.commitment, { size: 32 }),\n    searchTag: note.searchTag,\n    ownerHash: note.ownerHash,\n    encryptedNote: note.encryptedNote as Hex,\n  }\n}\n"]}

package/dist/chunk-JWNXBALH.cjs

@@ -1,57 +0,0 @@
-'use strict';
-
-var chunkG7VZBCD6_cjs = require('./chunk-G7VZBCD6.cjs');
-
-// src/utils/poseidon.ts
-async function initPoseidon() {
-  if (!poseidonInstance) {
-    const { buildPoseidon } = await import('circomlibjs');
-    poseidonInstance = await buildPoseidon();
-  }
-  return poseidonInstance;
-}
-async function poseidon(inputs) {
-  const poseidonFn = await initPoseidon();
-  const hash = poseidonFn(inputs);
-  return poseidonFn.F.toObject(hash);
-}
-async function poseidonHash(inputs) {
-  const hash = await poseidon(inputs);
-  return `0x${hash.toString(16).padStart(64, "0")}`;
-}
-async function poseidonScalar(inputs) {
-  const hash = await poseidon(inputs);
-  return hash % exports.BABYJUBJUB_SUBORDER;
-}
-function addressToField(address) {
-  return BigInt(address);
-}
-function fieldToAddress(field) {
-  const masked = field & (1n << 160n) - 1n;
-  return `0x${masked.toString(16).padStart(40, "0")}`;
-}
-function isValidFieldElement(value) {
-  return value >= 0n && value < exports.FIELD_PRIME;
-}
-function toFieldElement(value) {
-  return (value % exports.FIELD_PRIME + exports.FIELD_PRIME) % exports.FIELD_PRIME;
-}
-var poseidonInstance; exports.FIELD_PRIME = void 0; exports.BABYJUBJUB_SUBORDER = void 0;
-var init_poseidon = chunkG7VZBCD6_cjs.__esm({
-  "src/utils/poseidon.ts"() {
-    poseidonInstance = null;
-    exports.FIELD_PRIME = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
-    exports.BABYJUBJUB_SUBORDER = 2736030358979909402780800718157159386076813972158567259200215660948447373041n;
-  }
-});
-
-exports.addressToField = addressToField;
-exports.fieldToAddress = fieldToAddress;
-exports.init_poseidon = init_poseidon;
-exports.isValidFieldElement = isValidFieldElement;
-exports.poseidon = poseidon;
-exports.poseidonHash = poseidonHash;
-exports.poseidonScalar = poseidonScalar;
-exports.toFieldElement = toFieldElement;
-//# sourceMappingURL=chunk-JWNXBALH.cjs.map
-//# sourceMappingURL=chunk-JWNXBALH.cjs.map

package/dist/chunk-JWNXBALH.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/poseidon.ts"],"names":["BABYJUBJUB_SUBORDER","FIELD_PRIME","__esm"],"mappings":";;;;;AAgCA,eAAe,YAAA,GAAoC;AACjD,EAAA,IAAI,CAAC,gBAAA,EAAkB;AACrB,IAAA,MAAM,EAAE,aAAA,EAAc,GAAI,MAAM,OAAO,aAAa,CAAA;AACpD,IAAA,gBAAA,GAAmB,MAAM,aAAA,EAAc;AAAA,EACzC;AACA,EAAA,OAAO,gBAAA;AACT;AAaA,eAAsB,SAAS,MAAA,EAAmC;AAChE,EAAA,MAAM,UAAA,GAAa,MAAM,YAAA,EAAa;AACtC,EAAA,MAAM,IAAA,GAAO,WAAW,MAAM,CAAA;AAC9B,EAAA,OAAO,UAAA,CAAW,CAAA,CAAE,QAAA,CAAS,IAAI,CAAA;AACnC;AAKA,eAAsB,aAAa,MAAA,EAA0C;AAC3E,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,MAAM,CAAA;AAClC,EAAA,OAAO,CAAA,EAAA,EAAK,KAAK,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AACjD;AAMA,eAAsB,eAAe,MAAA,EAAmC;AACtE,EAAA,MAAM,IAAA,GAAO,MAAM,QAAA,CAAS,MAAM,CAAA;AAClC,EAAA,OAAO,IAAA,GAAOA,2BAAA;AAChB;AAKO,SAAS,eAAe,OAAA,EAAgC;AAC7D,EAAA,OAAO,OAAO,OAAO,CAAA;AACvB;AAKO,SAAS,eAAe,KAAA,EAA8B;AAE3D,EAAA,MAAM,MAAA,GAAS,KAAA,GAAA,CAAU,EAAA,IAAM,IAAA,IAAQ,EAAA;AACvC,EAAA,OAAO,CAAA,EAAA,EAAK,OAAO,QAAA,CAAS,EAAE,EAAE,QAAA,CAAS,EAAA,EAAI,GAAG,CAAC,CAAA,CAAA;AACnD;AAKO,SAAS,oBAAoB,KAAA,EAAwB;AAC1D,EAAA,OAAO,KAAA,IAAS,MAAM,KAAA,GAAQC,mBAAA;AAChC;AAKO,SAAS,eAAe,KAAA,EAAuB;AACpD,EAAA,OAAA,CAAS,KAAA,GAAQA,sBAAeA,mBAAA,IAAeA,mBAAA;AACjD;AAtGA,IAiBI,kBAKSA,4BAAA,CAAA,CAKAD;AA3Bb,IAAA,aAAA,GAAAE,uBAAA,CAAA;AAAA,EAAA,uBAAA,GAAA;AAiBA,IAAI,gBAAA,GAAsC,IAAA;AAKnC,IAAMD,mBAAA,GAAc,8EAAA;AAKpB,IAAMD,2BAAA,GAAsB,6EAAA;AAAA,EAAA;AAAA,CAAA","file":"chunk-JWNXBALH.cjs","sourcesContent":["/**\n * Poseidon Hash Utilities\n *\n * Wrapper around circomlibjs Poseidon hash implementation.\n * Used for commitments, nullifiers, and key derivation.\n */\n\n// circomlibjs types (not exported by the library)\ntype PoseidonFn = {\n  (inputs: bigint[]): Uint8Array\n  F: {\n    toObject: (val: Uint8Array) => bigint\n    e: (val: bigint) => unknown\n  }\n}\n\n// Lazily initialized Poseidon instance\nlet poseidonInstance: PoseidonFn | null = null\n\n/**\n * BN254 field prime (same as used in Circom/snarkjs)\n */\nexport const FIELD_PRIME = 21888242871839275222246405745257275088548364400416034343698204186575808495617n\n\n/**\n * BabyJubJub subgroup order\n */\nexport const BABYJUBJUB_SUBORDER = 2736030358979909402780800718157159386076813972158567259200215660948447373041n\n\n/**\n * Initialize Poseidon hash function (lazy loading)\n */\nasync function initPoseidon(): Promise<PoseidonFn> {\n  if (!poseidonInstance) {\n    const { buildPoseidon } = await import('circomlibjs')\n    poseidonInstance = await buildPoseidon()\n  }\n  return poseidonInstance\n}\n\n/**\n * Compute Poseidon hash of inputs\n *\n * @param inputs - Array of field elements to hash (up to 16 elements)\n * @returns Hash as bigint\n *\n * @example\n * ```ts\n * const commitment = await poseidon([amount, blinding, origin, token])\n * ```\n */\nexport async function poseidon(inputs: bigint[]): Promise<bigint> {\n  const poseidonFn = await initPoseidon()\n  const hash = poseidonFn(inputs)\n  return poseidonFn.F.toObject(hash)\n}\n\n/**\n * Compute Poseidon hash and return as hex string\n */\nexport async function poseidonHash(inputs: bigint[]): Promise<`0x${string}`> {\n  const hash = await poseidon(inputs)\n  return `0x${hash.toString(16).padStart(64, '0')}`\n}\n\n/**\n * Compute Poseidon hash modulo BabyJubJub suborder\n * Used for deriving scalars for curve operations\n */\nexport async function poseidonScalar(inputs: bigint[]): Promise<bigint> {\n  const hash = await poseidon(inputs)\n  return hash % BABYJUBJUB_SUBORDER\n}\n\n/**\n * Convert an address to a field element\n */\nexport function addressToField(address: `0x${string}`): bigint {\n  return BigInt(address)\n}\n\n/**\n * Convert a field element to an address (20 bytes)\n */\nexport function fieldToAddress(field: bigint): `0x${string}` {\n  // Mask to 160 bits (20 bytes) for address\n  const masked = field & ((1n << 160n) - 1n)\n  return `0x${masked.toString(16).padStart(40, '0')}`\n}\n\n/**\n * Check if a value is within the field\n */\nexport function isValidFieldElement(value: bigint): boolean {\n  return value >= 0n && value < FIELD_PRIME\n}\n\n/**\n * Reduce a value modulo field prime\n */\nexport function toFieldElement(value: bigint): bigint {\n  return ((value % FIELD_PRIME) + FIELD_PRIME) % FIELD_PRIME\n}\n"]}

package/dist/chunk-NDM5EJEV.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/asp.ts"],"names":["DEFAULT_TREE_DEPTH","PoseidonBN254","generateSingleMemberProof","verifyMembershipProof","__require","computeMerkleRoot","generateMembershipProof"],"mappings":";;;;;AAoBO,IAAM,cAAA,GAAiBA;AAI9B,IAAM,KAAA,GAAQ,IAAIC,oBAAA,EAAc;AAmBhC,eAAsB,2BAA2B,MAAA,EAAiC;AAChF,EAAA,OAAO,MAAA;AACT;AAKA,eAAsB,4BAAA,CACpB,OACA,MAAA,EACmB;AACnB,EAAA,MAAM,KAAA,GAAQC,gCAAA,CAA0B,MAAA,EAAQ,cAAc,CAAA;AAC9D,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,SAAS,KAAA,CAAM,IAAA;AAAA,IACf,iBAAiB,KAAA,CAAM,YAAA;AAAA,IACvB,gBAAgB,KAAA,CAAM;AAAA,GACxB;AACF;AAKA,eAAsB,cAAA,CAAe,QAAgB,KAAA,EAAmC;AACtF,EAAA,OAAOC,4BAAA;AAAA,IACL,MAAA;AAAA,IACA,EAAE,MAAM,KAAA,CAAM,OAAA,EAAS,cAAc,KAAA,CAAM,eAAA,EAAiB,WAAA,EAAa,KAAA,CAAM,cAAA,EAAe;AAAA,IAC9F;AAAA,GACF;AACF;AAKO,IAAM,WAAA,GAAc;AACpB,IAAM,aAAA,GAAgB;AAK7B,eAAsB,kBAAkB,MAAA,EAAiC;AACvE,EAAA,OAAO,2BAA2B,MAAM,CAAA;AAC1C;AAKO,SAAS,aAAa,OAAA,EAAmB;AAC9C,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAIC,2BAAA,CAAQ,sCAAsC,CAAA;AAC1E,EAAA,OAAO,eAAA,CAAgB,OAAA,EAAS,cAAA,EAAgB,KAAK,CAAA;AACvD;AAKA,eAAsB,0BAA0B,OAAA,EAAoC;AAClF,EAAA,OAAOC,wBAAA,CAAkB,OAAA,EAAS,cAAA,EAAgB,KAAK,CAAA;AACzD;AAKA,eAAsB,2BAAA,CACpB,KAAA,EACA,MAAA,EACA,UAAA,EACmB;AACnB,EAAA,IAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC1B,IAAA,OAAO,4BAAA,CAA6B,OAAO,MAAM,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,QAAQ,MAAMC,8BAAA,CAAwB,MAAA,EAAQ,UAAA,EAAY,gBAAgB,KAAK,CAAA;AAErF,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,SAAS,KAAA,CAAM,IAAA;AAAA,IACf,iBAAiB,KAAA,CAAM,YAAA;AAAA,IACvB,gBAAgB,KAAA,CAAM;AAAA,GACxB;AACF;AAKA,eAAsB,gBAAA,CACpB,KAAA,EACA,MAAA,EACA,eAAA,EACmB;AACnB,EAAA,IAAI,eAAA,IAAmB,eAAA,CAAgB,MAAA,GAAS,CAAA,EAAG;AACjD,IAAA,OAAO,2BAAA,CAA4B,KAAA,EAAO,MAAA,EAAQ,eAAe,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,4BAAA,CAA6B,OAAO,MAAM,CAAA;AACnD","file":"chunk-NDM5EJEV.cjs","sourcesContent":["/**\n * ASP (Association Set Provider) Utilities\n *\n * Thin wrapper around @permissionless-technologies/upc-sdk.\n * Provides pool-specific types (ASPProof with aspId) while delegating\n * Merkle tree operations to the compliance SDK.\n *\n * In UPP, every transfer must prove the origin is in an approved ASP's allowlist.\n */\n\nimport {\n  generateMembershipProof,\n  generateSingleMemberProof,\n  computeMerkleRoot,\n  verifyMembershipProof,\n  DEFAULT_TREE_DEPTH,\n  PoseidonBN254,\n} from '@permissionless-technologies/upc-sdk'\n\n// Re-export tree depth from UPC\nexport const ASP_TREE_DEPTH = DEFAULT_TREE_DEPTH\n\n// Use BN254 for backward compat with existing deployed circuits\n// (circuits were compiled for BN254; new deployments should use BLS12-381)\nconst bn254 = new PoseidonBN254()\n\n/**\n * ASP Merkle proof structure (pool-specific: includes aspId)\n */\nexport interface ASPProof {\n  /** ASP ID */\n  aspId: bigint\n  /** ASP's published root */\n  aspRoot: bigint\n  /** Path elements (siblings) - 20 levels */\n  aspPathElements: bigint[]\n  /** Path indices - 20 levels */\n  aspPathIndices: number[]\n}\n\n/**\n * Compute the ASP root for a single-leaf tree\n */\nexport async function computeSingleOriginASPRoot(origin: bigint): Promise<bigint> {\n  return origin // LeanIMT single-leaf optimization: root = leaf\n}\n\n/**\n * Generate ASP proof for a single-origin tree\n */\nexport async function generateSingleOriginASPProof(\n  aspId: bigint,\n  origin: bigint\n): Promise<ASPProof> {\n  const proof = generateSingleMemberProof(origin, ASP_TREE_DEPTH)\n  return {\n    aspId,\n    aspRoot: proof.root,\n    aspPathElements: proof.pathElements,\n    aspPathIndices: proof.pathIndices,\n  }\n}\n\n/**\n * Verify an ASP proof locally (for debugging)\n */\nexport async function verifyASPProof(origin: bigint, proof: ASPProof): Promise<boolean> {\n  return verifyMembershipProof(\n    origin,\n    { root: proof.aspRoot, pathElements: proof.aspPathElements, pathIndices: proof.aspPathIndices },\n    bn254\n  )\n}\n\n/**\n * Demo ASP configuration\n */\nexport const DEMO_ASP_ID = 1n\nexport const DEMO_ASP_NAME = 'Demo ASP (Single-Origin)'\n\n/**\n * Create a \"universal approval\" ASP root\n */\nexport async function createDemoASPRoot(origin: bigint): Promise<bigint> {\n  return computeSingleOriginASPRoot(origin)\n}\n\n/**\n * Build an ASP Merkle tree from multiple origin addresses\n */\nexport function buildASPTree(origins: bigint[]) {\n  const { buildMerkleTree } = require('@permissionless-technologies/upc-sdk') as typeof import('@permissionless-technologies/upc-sdk')\n  return buildMerkleTree(origins, ASP_TREE_DEPTH, bn254)\n}\n\n/**\n * Compute the Merkle root for a set of approved origins\n */\nexport async function computeMultiOriginASPRoot(origins: bigint[]): Promise<bigint> {\n  return computeMerkleRoot(origins, ASP_TREE_DEPTH, bn254)\n}\n\n/**\n * Generate an ASP membership proof for one origin within a multi-origin tree\n */\nexport async function generateMultiOriginASPProof(\n  aspId: bigint,\n  origin: bigint,\n  allOrigins: bigint[]\n): Promise<ASPProof> {\n  if (allOrigins.length <= 1) {\n    return generateSingleOriginASPProof(aspId, origin)\n  }\n\n  const proof = await generateMembershipProof(origin, allOrigins, ASP_TREE_DEPTH, bn254)\n\n  return {\n    aspId,\n    aspRoot: proof.root,\n    aspPathElements: proof.pathElements,\n    aspPathIndices: proof.pathIndices,\n  }\n}\n\n/**\n * Generate an ASP proof, automatically choosing single-origin or multi-origin\n */\nexport async function generateASPProof(\n  aspId: bigint,\n  origin: bigint,\n  approvedOrigins?: bigint[]\n): Promise<ASPProof> {\n  if (approvedOrigins && approvedOrigins.length > 0) {\n    return generateMultiOriginASPProof(aspId, origin, approvedOrigins)\n  }\n  return generateSingleOriginASPProof(aspId, origin)\n}\n"]}

package/dist/chunk-P37MRZ73.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/asp.ts"],"names":[],"mappings":";;;AAoBO,IAAM,cAAA,GAAiB;AAI9B,IAAM,KAAA,GAAQ,IAAI,aAAA,EAAc;AAmBhC,eAAsB,2BAA2B,MAAA,EAAiC;AAChF,EAAA,OAAO,MAAA;AACT;AAKA,eAAsB,4BAAA,CACpB,OACA,MAAA,EACmB;AACnB,EAAA,MAAM,KAAA,GAAQ,yBAAA,CAA0B,MAAA,EAAQ,cAAc,CAAA;AAC9D,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,SAAS,KAAA,CAAM,IAAA;AAAA,IACf,iBAAiB,KAAA,CAAM,YAAA;AAAA,IACvB,gBAAgB,KAAA,CAAM;AAAA,GACxB;AACF;AAKA,eAAsB,cAAA,CAAe,QAAgB,KAAA,EAAmC;AACtF,EAAA,OAAO,qBAAA;AAAA,IACL,MAAA;AAAA,IACA,EAAE,MAAM,KAAA,CAAM,OAAA,EAAS,cAAc,KAAA,CAAM,eAAA,EAAiB,WAAA,EAAa,KAAA,CAAM,cAAA,EAAe;AAAA,IAC9F;AAAA,GACF;AACF;AAKO,IAAM,WAAA,GAAc;AACpB,IAAM,aAAA,GAAgB;AAK7B,eAAsB,kBAAkB,MAAA,EAAiC;AACvE,EAAA,OAAO,2BAA2B,MAAM,CAAA;AAC1C;AAKO,SAAS,aAAa,OAAA,EAAmB;AAC9C,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAI,SAAA,CAAQ,sCAAsC,CAAA;AAC1E,EAAA,OAAO,eAAA,CAAgB,OAAA,EAAS,cAAA,EAAgB,KAAK,CAAA;AACvD;AAKA,eAAsB,0BAA0B,OAAA,EAAoC;AAClF,EAAA,OAAO,iBAAA,CAAkB,OAAA,EAAS,cAAA,EAAgB,KAAK,CAAA;AACzD;AAKA,eAAsB,2BAAA,CACpB,KAAA,EACA,MAAA,EACA,UAAA,EACmB;AACnB,EAAA,IAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC1B,IAAA,OAAO,4BAAA,CAA6B,OAAO,MAAM,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,QAAQ,MAAM,uBAAA,CAAwB,MAAA,EAAQ,UAAA,EAAY,gBAAgB,KAAK,CAAA;AAErF,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,SAAS,KAAA,CAAM,IAAA;AAAA,IACf,iBAAiB,KAAA,CAAM,YAAA;AAAA,IACvB,gBAAgB,KAAA,CAAM;AAAA,GACxB;AACF;AAKA,eAAsB,gBAAA,CACpB,KAAA,EACA,MAAA,EACA,eAAA,EACmB;AACnB,EAAA,IAAI,eAAA,IAAmB,eAAA,CAAgB,MAAA,GAAS,CAAA,EAAG;AACjD,IAAA,OAAO,2BAAA,CAA4B,KAAA,EAAO,MAAA,EAAQ,eAAe,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,4BAAA,CAA6B,OAAO,MAAM,CAAA;AACnD","file":"chunk-P37MRZ73.js","sourcesContent":["/**\n * ASP (Association Set Provider) Utilities\n *\n * Thin wrapper around @permissionless-technologies/upc-sdk.\n * Provides pool-specific types (ASPProof with aspId) while delegating\n * Merkle tree operations to the compliance SDK.\n *\n * In UPP, every transfer must prove the origin is in an approved ASP's allowlist.\n */\n\nimport {\n  generateMembershipProof,\n  generateSingleMemberProof,\n  computeMerkleRoot,\n  verifyMembershipProof,\n  DEFAULT_TREE_DEPTH,\n  PoseidonBN254,\n} from '@permissionless-technologies/upc-sdk'\n\n// Re-export tree depth from UPC\nexport const ASP_TREE_DEPTH = DEFAULT_TREE_DEPTH\n\n// Use BN254 for backward compat with existing deployed circuits\n// (circuits were compiled for BN254; new deployments should use BLS12-381)\nconst bn254 = new PoseidonBN254()\n\n/**\n * ASP Merkle proof structure (pool-specific: includes aspId)\n */\nexport interface ASPProof {\n  /** ASP ID */\n  aspId: bigint\n  /** ASP's published root */\n  aspRoot: bigint\n  /** Path elements (siblings) - 20 levels */\n  aspPathElements: bigint[]\n  /** Path indices - 20 levels */\n  aspPathIndices: number[]\n}\n\n/**\n * Compute the ASP root for a single-leaf tree\n */\nexport async function computeSingleOriginASPRoot(origin: bigint): Promise<bigint> {\n  return origin // LeanIMT single-leaf optimization: root = leaf\n}\n\n/**\n * Generate ASP proof for a single-origin tree\n */\nexport async function generateSingleOriginASPProof(\n  aspId: bigint,\n  origin: bigint\n): Promise<ASPProof> {\n  const proof = generateSingleMemberProof(origin, ASP_TREE_DEPTH)\n  return {\n    aspId,\n    aspRoot: proof.root,\n    aspPathElements: proof.pathElements,\n    aspPathIndices: proof.pathIndices,\n  }\n}\n\n/**\n * Verify an ASP proof locally (for debugging)\n */\nexport async function verifyASPProof(origin: bigint, proof: ASPProof): Promise<boolean> {\n  return verifyMembershipProof(\n    origin,\n    { root: proof.aspRoot, pathElements: proof.aspPathElements, pathIndices: proof.aspPathIndices },\n    bn254\n  )\n}\n\n/**\n * Demo ASP configuration\n */\nexport const DEMO_ASP_ID = 1n\nexport const DEMO_ASP_NAME = 'Demo ASP (Single-Origin)'\n\n/**\n * Create a \"universal approval\" ASP root\n */\nexport async function createDemoASPRoot(origin: bigint): Promise<bigint> {\n  return computeSingleOriginASPRoot(origin)\n}\n\n/**\n * Build an ASP Merkle tree from multiple origin addresses\n */\nexport function buildASPTree(origins: bigint[]) {\n  const { buildMerkleTree } = require('@permissionless-technologies/upc-sdk') as typeof import('@permissionless-technologies/upc-sdk')\n  return buildMerkleTree(origins, ASP_TREE_DEPTH, bn254)\n}\n\n/**\n * Compute the Merkle root for a set of approved origins\n */\nexport async function computeMultiOriginASPRoot(origins: bigint[]): Promise<bigint> {\n  return computeMerkleRoot(origins, ASP_TREE_DEPTH, bn254)\n}\n\n/**\n * Generate an ASP membership proof for one origin within a multi-origin tree\n */\nexport async function generateMultiOriginASPProof(\n  aspId: bigint,\n  origin: bigint,\n  allOrigins: bigint[]\n): Promise<ASPProof> {\n  if (allOrigins.length <= 1) {\n    return generateSingleOriginASPProof(aspId, origin)\n  }\n\n  const proof = await generateMembershipProof(origin, allOrigins, ASP_TREE_DEPTH, bn254)\n\n  return {\n    aspId,\n    aspRoot: proof.root,\n    aspPathElements: proof.pathElements,\n    aspPathIndices: proof.pathIndices,\n  }\n}\n\n/**\n * Generate an ASP proof, automatically choosing single-origin or multi-origin\n */\nexport async function generateASPProof(\n  aspId: bigint,\n  origin: bigint,\n  approvedOrigins?: bigint[]\n): Promise<ASPProof> {\n  if (approvedOrigins && approvedOrigins.length > 0) {\n    return generateMultiOriginASPProof(aspId, origin, approvedOrigins)\n  }\n  return generateSingleOriginASPProof(aspId, origin)\n}\n"]}

package/dist/chunk-PTDVGWHU.cjs

@@ -1,10 +0,0 @@
-'use strict';
-
-var chunk3HQ7A6ZM_cjs = require('./chunk-3HQ7A6ZM.cjs');
-var chunkJWNXBALH_cjs = require('./chunk-JWNXBALH.cjs');
-
-// src/utils/index.ts
-chunkJWNXBALH_cjs.init_poseidon();
-chunk3HQ7A6ZM_cjs.init_crypto();
-//# sourceMappingURL=chunk-PTDVGWHU.cjs.map
-//# sourceMappingURL=chunk-PTDVGWHU.cjs.map

package/dist/chunk-PTDVGWHU.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/index.ts"],"names":["init_poseidon","init_crypto"],"mappings":";;;;;;AAKAA,+BAAA,EAAA;AAwCAC,6BAAA,EAAA","file":"chunk-PTDVGWHU.cjs","sourcesContent":["/**\n * Utility functions for UPP SDK\n */\n\n// Poseidon hash\nexport {\n  poseidon,\n  poseidonHash,\n  poseidonScalar,\n  FIELD_PRIME,\n  BABYJUBJUB_SUBORDER,\n  addressToField,\n  fieldToAddress,\n  isValidFieldElement,\n  toFieldElement,\n} from './poseidon.js'\n\n// BabyJubJub curve operations\nexport {\n  type Point,\n  getSubOrder,\n  getBasePoint,\n  isOnCurve,\n  mulPointScalar,\n  addPoints,\n  privateToPublic,\n  computeSharedSecret,\n  packPoint,\n  pointToTuple,\n  tupleToPoint,\n  deriveEncryptionViewingKey,\n  deriveDecryptionViewingKey,\n} from './babyjubjub.js'\n\n// Merkle tree\nexport {\n  MerkleTree,\n  buildMerkleTree,\n  getMerkleProof,\n  verifyMerkleProof,\n  type MerkleProof,\n  MAX_TREE_DEPTH,\n} from './merkle.js'\n\n// Crypto utilities\nexport {\n  randomBytes,\n  randomFieldElement,\n  bytesToHex,\n  hexToBytes,\n  bigintToBytes,\n  bytesToBigint,\n} from './crypto.js'\n\n// STARK utilities (amount scaling, witness building, Fiat-Shamir)\nexport {\n  STARK_AMOUNT_SCALE,\n  STARK_STATE_TREE_DEPTH,\n  STARK_ASP_TREE_DEPTH,\n  isStarkAligned,\n  scaleAmountForStark,\n  truncateToM31,\n  addressToM31,\n  splitSecretToM31Limbs,\n  packM31Digest,\n  computeWithdrawPublicInputsSeed,\n  computeTransferPublicInputsSeed,\n  buildStarkWithdrawWitness,\n  buildStarkTransferWitness,\n  type StarkWithdrawWitness,\n  type StarkTransferWitness,\n} from './stark.js'\n\n// Keccak-M31 hashing (STARK)\nexport {\n  keccakM31,\n  keccakHashTwo,\n  computeStarkOwnerHash,\n  computeStarkCommitment,\n  computeStarkNullifier,\n  splitToM31Limbs,\n  M31_P,\n  DIGEST_SIZE,\n  SECRET_LIMBS,\n  type M31Digest,\n  type M31Secret,\n} from './keccak-m31.js'\n"]}

package/dist/chunk-S4B7GYLN.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/proof.ts"],"names":["snarkjs"],"mappings":";AASA,IAAI,OAAA,GAAe,IAAA;AAKnB,eAAe,WAAA,GAA4B;AACzC,EAAA,IAAI,SAAS,OAAO,OAAA;AACpB,EAAA,OAAA,GAAU,MAAM,OAAO,SAAS,CAAA;AAChC,EAAA,OAAO,OAAA;AACT;AAOO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,cAAA,GAAiB;AAwRvB,SAAS,sBAAA,CACd,OAAA,EACA,OAAA,GAAkB,YAAA,EACA;AAElB,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,GAAI,OAAA,GAAU,GAAG,OAAO,CAAA,CAAA,CAAA;AAEzD,EAAA,MAAM,UAAA,GAAuD;AAAA,IAC3D,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA;AAAA,KACf;AAAA,IACA,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,UAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,UAAA;AAAA,KACf;AAAA,IACA,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA;AAAA,KACf;AAAA,IACA,SAAA,EAAW;AAAA,MACT,IAAA,EAAM,GAAG,IAAI,CAAA,cAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,cAAA;AAAA,KACf;AAAA,IACA,kBAAA,EAAoB;AAAA,MAClB,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA;AAAA,KACf;AAAA,IACA,kBAAA,EAAoB;AAAA,MAClB,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA;AAAA;AACf,GACF;AAEA,EAAA,OAAO,WAAW,OAAO,CAAA;AAC3B;AASO,SAAS,0BAAA,CACd,OAAA,EACA,OAAA,GAAkB,YAAA,EACA;AAElB,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,GAAI,OAAA,GAAU,GAAG,OAAO,CAAA,CAAA,CAAA;AAEzD,EAAA,MAAM,UAAA,GAA2D;AAAA,IAC/D,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,qBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,2BAAA;AAAA,KACf;AAAA,IACA,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,gBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,sBAAA;AAAA;AACf,GACF;AAEA,EAAA,OAAO,WAAW,OAAO,CAAA;AAC3B;AAwBA,eAAsB,gBAAA,CACpB,WAAA,EACA,MAAA,EACA,OAAA,GAAkB,YAAA,EACI;AACtB,EAAA,MAAMA,QAAAA,GAAU,MAAM,WAAA,EAAY;AAClC,EAAA,MAAM,SAAA,GAAY,sBAAA,CAAuB,WAAA,EAAa,OAAO,CAAA;AAG7D,EAAA,IAAI,gBAAgB,UAAA,EAAY;AAC9B,IAAA,MAAM,CAAA,GAAI,MAAA;AACV,IAAA,OAAA,CAAQ,IAAI,2CAA2C,CAAA;AACvD,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,eAAA,EAAkB,WAAW,CAAA,CAAE,CAAA;AAC3C,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,aAAA,EAAgB,CAAA,CAAE,SAAS,CAAA,CAAE,CAAA;AACzC,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACrC,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,eAAA,EAAkB,CAAA,CAAE,WAAW,CAAA,CAAE,CAAA;AAC7C,IAAA,OAAA,CAAQ,IAAI,CAAA,2BAAA,EAA8B,CAAA,CAAE,OAAA,KAAY,CAAA,CAAE,WAAW,CAAA,CAAE,CAAA;AACvE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,yBAAA,EAA4B,CAAA,CAAE,eAAA,EAAiB,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACnF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,wBAAA,EAA2B,CAAA,CAAE,cAAA,EAAgB,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACjF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,kBAAA,EAAqB,SAAA,CAAU,IAAI,CAAA,CAAE,CAAA;AACjD,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,kBAAA,EAAqB,SAAA,CAAU,IAAI,CAAA,CAAE,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,MAAA,GAAS,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,UAAU,MAAA,EAAQ,SAAA,CAAU,IAAA,EAAM,SAAA,CAAU,IAAI,CAAA;AAErF,EAAA,OAAO;AAAA,IACL,KAAA,EAAO;AAAA,MACL,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,eAAe,MAAA,CAAO;AAAA,KACxB;AAAA,IACA,eAAe,MAAA,CAAO;AAAA,GACxB;AACF;AAMA,eAAsB,aAAA,CACpB,cACA,OAAA,EACgB;AAChB,EAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAC5D;AA2BA,eAAsB,oBAAA,CACpB,OAAA,EACA,MAAA,EACA,OAAA,GAAkB,YAAA,EACI;AACtB,EAAA,MAAMA,QAAAA,GAAU,MAAM,WAAA,EAAY;AAClC,EAAA,MAAM,SAAA,GAAY,0BAAA,CAA2B,OAAA,EAAS,OAAO,CAAA;AAE7D,EAAA,MAAM,MAAA,GAAS,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,UAAU,MAAA,EAAQ,SAAA,CAAU,IAAA,EAAM,SAAA,CAAU,IAAI,CAAA;AAErF,EAAA,OAAO;AAAA,IACL,KAAA,EAAO;AAAA,MACL,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,eAAe,MAAA,CAAO;AAAA,KACxB;AAAA,IACA,eAAe,MAAA,CAAO;AAAA,GACxB;AACF;AASA,eAAsB,WAAA,CACpB,cACA,MAAA,EACkB;AAElB,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AAOO,SAAS,uBAAuB,KAAA,EAIrC;AACA,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,KAAS,KAAA,CAAM,KAAA;AAEnC,EAAA,OAAO;AAAA,IACL,CAAA,EAAG,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC,CAAA;AAAA,IACpC,CAAA,EAAG;AAAA,MACD,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,EAAE,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,CAAC,CAAC,CAAC,CAAA;AAAA;AAAA,MACvC,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,EAAE,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,CAAC,CAAC,CAAC;AAAA,KACzC;AAAA,IACA,CAAA,EAAG,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC;AAAA,GACtC;AACF","file":"chunk-S4B7GYLN.js","sourcesContent":["/**\n * ZK Proof Generation and Verification\n *\n * Uses snarkjs for Groth16 proof generation in the browser.\n */\n\nimport type { Proof } from './types.js'\n\n// Lazy-loaded snarkjs reference\nlet snarkjs: any = null\n\n/**\n * Load snarkjs dynamically\n */\nasync function loadSnarkjs(): Promise<any> {\n  if (snarkjs) return snarkjs\n  snarkjs = await import('snarkjs')\n  return snarkjs\n}\n\n// ============================================================================\n// UPP Circuit Constants\n// ============================================================================\n\n/** State tree depth (32 levels = ~4B notes) */\nexport const STATE_TREE_DEPTH = 32\n\n/** ASP tree depth (20 levels = ~1M addresses) */\nexport const ASP_TREE_DEPTH = 20\n\n// ============================================================================\n// UPP Circuit Types\n// ============================================================================\n\n/**\n * Circuit types available in UPP (full protocol)\n */\nexport type UPPCircuitType = 'transfer' | 'merge' | 'withdraw' | 'joinsplit' | 'merge_transfer_2x2' | 'merge_transfer_4x2'\n\n/**\n * @deprecated Use UPPCircuitType instead\n */\nexport type CircuitType = 'shield' | 'transfer' | 'merge' | 'withdraw'\n\n/**\n * @deprecated Stealth circuits are being replaced by UPP circuits\n */\nexport type StealthCircuitType = '1x2' | '2x2'\n\n/**\n * Input signals for UPP transfer circuit (1-in-2-out)\n *\n * Matches transfer.circom: Transfer(32, 20)\n * Public: stateRoot, aspRoot, nullifier, outputCommitment1, outputCommitment2, token\n */\nexport interface UPPTransferCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier: string\n  outputCommitment1: string\n  outputCommitment2: string\n  token: string\n\n  // Private inputs - Input Note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputOrigin: string\n  inputLeafIndex: string\n  inputPathElements: string[]  // 32 elements\n  inputPathIndices: string[]   // 32 elements\n\n  // Private inputs - ASP Membership Proof\n  aspPathElements: string[]    // 20 elements\n  aspPathIndices: string[]     // 20 elements\n\n  // Private inputs - Output Notes (BabyJubJub pubkey coordinates)\n  outputAmount1: string\n  outputPubkeyX1: string\n  outputPubkeyY1: string\n  outputBlinding1: string\n\n  outputAmount2: string\n  outputPubkeyX2: string\n  outputPubkeyY2: string\n  outputBlinding2: string\n}\n\n/**\n * Input signals for UPP withdraw circuit\n *\n * Matches withdraw.circom with optional ASP check (ragequit support)\n */\nexport interface UPPWithdrawCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier: string\n  amount: string\n  recipient: string\n  token: string\n  isRagequit: string  // '0' or '1'\n\n  // Private inputs - Input Note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputOrigin: string\n  inputLeafIndex: string\n  inputPathElements: string[]  // 32 elements\n  inputPathIndices: string[]   // 32 elements\n\n  // Private inputs - ASP Membership Proof (can be zeros if ragequit)\n  aspPathElements: string[]    // 20 elements\n  aspPathIndices: string[]     // 20 elements\n}\n\n/**\n * @deprecated Use UPPTransferCircuitInputs instead\n */\nexport interface TransferCircuitInputs {\n  stateRoot: bigint\n  aspRoot: bigint\n  nullifier: bigint\n  outputCommitment1: bigint\n  outputCommitment2: bigint\n  token: bigint\n  // Private inputs\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n  statePathElements: bigint[]\n  statePathIndices: bigint\n  aspPathElements: bigint[]\n  outAmount1: bigint\n  outBlinding1: bigint\n  outOrigin1: bigint\n  outAmount2: bigint\n  outBlinding2: bigint\n  outOrigin2: bigint\n}\n\n/**\n * Input signals for shield circuit\n */\nexport interface ShieldCircuitInputs {\n  commitment: bigint\n  token: bigint\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n}\n\n/**\n * Input signals for merge circuit\n */\nexport interface MergeCircuitInputs {\n  stateRoot: bigint\n  nullifier1: bigint\n  nullifier2: bigint\n  outputCommitment: bigint\n  newOrigin: bigint\n  token: bigint\n  // Private inputs for note 1\n  amount1: bigint\n  blinding1: bigint\n  origin1: bigint\n  token1: bigint\n  pathElements1: bigint[]\n  pathIndices1: bigint\n  // Private inputs for note 2\n  amount2: bigint\n  blinding2: bigint\n  origin2: bigint\n  token2: bigint\n  pathElements2: bigint[]\n  pathIndices2: bigint\n  // Output\n  outputAmount: bigint\n  outputBlinding: bigint\n}\n\n/**\n * Input signals for withdraw circuit\n */\nexport interface WithdrawCircuitInputs {\n  stateRoot: bigint\n  aspRoot: bigint\n  nullifier: bigint\n  withdrawAmount: bigint\n  recipient: bigint\n  token: bigint\n  isRagequit: bigint // 0 or 1\n  // Private inputs\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n  statePathElements: bigint[]\n  statePathIndices: bigint\n  aspPathElements: bigint[]\n}\n\n/**\n * Circuit inputs union type\n */\nexport type CircuitInputs =\n  | ShieldCircuitInputs\n  | TransferCircuitInputs\n  | MergeCircuitInputs\n  | WithdrawCircuitInputs\n\n// ============================================================================\n// Stealth Circuit Types (current zkdemo-app implementation)\n// ============================================================================\n\n/**\n * Circuit input for 1x2 stealth transfer (1-in-2-out)\n */\nexport interface Stealth1x2CircuitInputs {\n  // Public inputs\n  root: string\n  nullifierHash: string\n  publicAmount: string\n  recipient: string\n  extDataHash: string\n\n  // Input note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputLeafIndex: string\n  inputPathElements: string[]\n  inputPathIndices: string[]\n\n  // Output 1 (recipient)\n  outputAmount1: string\n  outputPubkeyX1: string\n  outputPubkeyY1: string\n  outputBlinding1: string\n\n  // Output 2 (change)\n  outputAmount2: string\n  outputPubkeyX2: string\n  outputPubkeyY2: string\n  outputBlinding2: string\n}\n\n/**\n * Circuit input for 2x2 stealth transfer (2-in-2-out)\n */\nexport interface Stealth2x2CircuitInputs {\n  // Public inputs\n  root: string\n  nullifierHash1: string\n  nullifierHash2: string\n  publicAmount: string\n  recipient: string\n  extDataHash: string\n\n  // Input note 1\n  inputAmount1: string\n  inputOneTimeSecret1: string\n  inputBlinding1: string\n  inputLeafIndex1: string\n  inputPathElements1: string[]\n  inputPathIndices1: string[]\n\n  // Input note 2\n  inputAmount2: string\n  inputOneTimeSecret2: string\n  inputBlinding2: string\n  inputLeafIndex2: string\n  inputPathElements2: string[]\n  inputPathIndices2: string[]\n\n  // Output 1 (recipient)\n  outputAmount1: string\n  outputPubkeyX1: string\n  outputPubkeyY1: string\n  outputBlinding1: string\n\n  // Output 2 (change)\n  outputAmount2: string\n  outputPubkeyX2: string\n  outputPubkeyY2: string\n  outputBlinding2: string\n}\n\n/**\n * Stealth circuit inputs union\n */\nexport type StealthCircuitInputs = Stealth1x2CircuitInputs | Stealth2x2CircuitInputs\n\n/**\n * Circuit artifact paths\n */\nexport interface CircuitArtifacts {\n  wasm: string\n  zkey: string\n}\n\n/**\n * Get circuit artifacts for a UPP circuit\n *\n * @param circuit - UPP circuit type\n * @param baseUrl - Base URL for circuit files (default: '/circuits/')\n */\nexport function getUPPCircuitArtifacts(\n  circuit: UPPCircuitType,\n  baseUrl: string = '/circuits/'\n): CircuitArtifacts {\n  // Ensure baseUrl ends with /\n  const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`\n\n  const circuitMap: Record<UPPCircuitType, CircuitArtifacts> = {\n    transfer: {\n      wasm: `${base}transfer.wasm`,\n      zkey: `${base}transfer.zkey`,\n    },\n    merge: {\n      wasm: `${base}merge.wasm`,\n      zkey: `${base}merge.zkey`,\n    },\n    withdraw: {\n      wasm: `${base}withdraw.wasm`,\n      zkey: `${base}withdraw.zkey`,\n    },\n    joinsplit: {\n      wasm: `${base}joinsplit.wasm`,\n      zkey: `${base}joinsplit.zkey`,\n    },\n    merge_transfer_2x2: {\n      wasm: `${base}merge_transfer_2x2.wasm`,\n      zkey: `${base}merge_transfer_2x2.zkey`,\n    },\n    merge_transfer_4x2: {\n      wasm: `${base}merge_transfer_4x2.wasm`,\n      zkey: `${base}merge_transfer_4x2.zkey`,\n    },\n  }\n\n  return circuitMap[circuit]\n}\n\n/**\n * @deprecated Use getUPPCircuitArtifacts instead\n * Get circuit artifacts for a stealth circuit\n *\n * @param circuit - Circuit type ('1x2' or '2x2')\n * @param baseUrl - Base URL for circuit files (default: '/circuits/')\n */\nexport function getStealthCircuitArtifacts(\n  circuit: StealthCircuitType,\n  baseUrl: string = '/circuits/'\n): CircuitArtifacts {\n  // Ensure baseUrl ends with /\n  const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`\n\n  const circuitMap: Record<StealthCircuitType, CircuitArtifacts> = {\n    '1x2': {\n      wasm: `${base}shielded_stealth.wasm`,\n      zkey: `${base}shielded_stealth_final.zkey`,\n    },\n    '2x2': {\n      wasm: `${base}stealth_2x2.wasm`,\n      zkey: `${base}stealth_2x2_final.zkey`,\n    },\n  }\n\n  return circuitMap[circuit]\n}\n\n/**\n * UPP circuit inputs union type\n */\nexport type UPPCircuitInputs = UPPTransferCircuitInputs | UPPWithdrawCircuitInputs\n\n/**\n * Generate a ZK proof for a UPP circuit\n *\n * @param circuitType - Which UPP circuit to use\n * @param inputs - Circuit input signals\n * @param baseUrl - Base URL for circuit artifacts (default: '/circuits/')\n * @returns Generated proof and public signals\n *\n * @example\n * ```ts\n * const { proof, publicSignals } = await generateUPPProof('transfer', {\n *   stateRoot: String(currentRoot),\n *   aspRoot: String(aspRoot),\n *   // ... other inputs\n * })\n * ```\n */\nexport async function generateUPPProof(\n  circuitType: UPPCircuitType,\n  inputs: UPPCircuitInputs,\n  baseUrl: string = '/circuits/'\n): Promise<ProofResult> {\n  const snarkjs = await loadSnarkjs()\n  const artifacts = getUPPCircuitArtifacts(circuitType, baseUrl)\n\n  // Debug: log key circuit inputs\n  if (circuitType === 'transfer') {\n    const i = inputs as UPPTransferCircuitInputs\n    console.log('[generateUPPProof] === CIRCUIT INPUTS ===')\n    console.log(`  circuitType: ${circuitType}`)\n    console.log(`  stateRoot: ${i.stateRoot}`)\n    console.log(`  aspRoot: ${i.aspRoot}`)\n    console.log(`  inputOrigin: ${i.inputOrigin}`)\n    console.log(`  aspRoot === inputOrigin: ${i.aspRoot === i.inputOrigin}`)\n    console.log(`  aspPathElements[0..2]: ${i.aspPathElements?.slice(0, 3).join(', ')}`)\n    console.log(`  aspPathIndices[0..2]: ${i.aspPathIndices?.slice(0, 3).join(', ')}`)\n    console.log(`  artifacts.wasm: ${artifacts.wasm}`)\n    console.log(`  artifacts.zkey: ${artifacts.zkey}`)\n  }\n\n  const result = await snarkjs.groth16.fullProve(inputs, artifacts.wasm, artifacts.zkey)\n\n  return {\n    proof: {\n      proof: result.proof,\n      publicSignals: result.publicSignals,\n    },\n    publicSignals: result.publicSignals,\n  }\n}\n\n/**\n * @deprecated Use generateUPPProof instead\n * Generate a ZK proof for a circuit (UPP protocol circuits)\n */\nexport async function generateProof(\n  _circuitType: CircuitType,\n  _inputs: CircuitInputs\n): Promise<Proof> {\n  throw new Error('Deprecated: Use generateUPPProof instead')\n}\n\n/**\n * Result from proof generation\n */\nexport interface ProofResult {\n  proof: Proof\n  publicSignals: string[]\n}\n\n/**\n * Generate a ZK proof for stealth circuit (1x2 or 2x2)\n *\n * @param circuit - Circuit type ('1x2' or '2x2')\n * @param inputs - Circuit input signals\n * @param baseUrl - Base URL for circuit artifacts (default: '/circuits/')\n * @returns Generated proof and public signals\n *\n * @example\n * ```ts\n * const { proof, publicSignals } = await generateStealthProof('1x2', {\n *   root: String(merkleRoot),\n *   nullifierHash: String(nullifier),\n *   // ... other inputs\n * })\n * ```\n */\nexport async function generateStealthProof(\n  circuit: StealthCircuitType,\n  inputs: StealthCircuitInputs,\n  baseUrl: string = '/circuits/'\n): Promise<ProofResult> {\n  const snarkjs = await loadSnarkjs()\n  const artifacts = getStealthCircuitArtifacts(circuit, baseUrl)\n\n  const result = await snarkjs.groth16.fullProve(inputs, artifacts.wasm, artifacts.zkey)\n\n  return {\n    proof: {\n      proof: result.proof,\n      publicSignals: result.publicSignals,\n    },\n    publicSignals: result.publicSignals,\n  }\n}\n\n/**\n * Verify a ZK proof\n *\n * @param circuitType - Which circuit was used\n * @param proof - The proof to verify\n * @returns True if proof is valid\n */\nexport async function verifyProof(\n  _circuitType: CircuitType,\n  _proof: Proof\n): Promise<boolean> {\n  // TODO: Implement proof verification using snarkjs\n  throw new Error('Not implemented')\n}\n\n/**\n * Format proof for on-chain verification\n *\n * Converts snarkjs proof format to Solidity verifier format\n */\nexport function formatProofForContract(proof: Proof): {\n  a: [bigint, bigint]\n  b: [[bigint, bigint], [bigint, bigint]]\n  c: [bigint, bigint]\n} {\n  const { pi_a, pi_b, pi_c } = proof.proof\n\n  return {\n    a: [BigInt(pi_a[0]), BigInt(pi_a[1])],\n    b: [\n      [BigInt(pi_b[0][1]), BigInt(pi_b[0][0])], // Note: reversed for Solidity\n      [BigInt(pi_b[1][1]), BigInt(pi_b[1][0])],\n    ],\n    c: [BigInt(pi_c[0]), BigInt(pi_c[1])],\n  }\n}\n"]}

package/dist/chunk-SQKBT2SH.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/core/proof.ts"],"names":["snarkjs"],"mappings":";;;AASA,IAAI,OAAA,GAAe,IAAA;AAKnB,eAAe,WAAA,GAA4B;AACzC,EAAA,IAAI,SAAS,OAAO,OAAA;AACpB,EAAA,OAAA,GAAU,MAAM,OAAO,SAAS,CAAA;AAChC,EAAA,OAAO,OAAA;AACT;AAOO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,cAAA,GAAiB;AAwRvB,SAAS,sBAAA,CACd,OAAA,EACA,OAAA,GAAkB,YAAA,EACA;AAElB,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,GAAI,OAAA,GAAU,GAAG,OAAO,CAAA,CAAA,CAAA;AAEzD,EAAA,MAAM,UAAA,GAAuD;AAAA,IAC3D,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA;AAAA,KACf;AAAA,IACA,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,UAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,UAAA;AAAA,KACf;AAAA,IACA,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA;AAAA,KACf;AAAA,IACA,SAAA,EAAW;AAAA,MACT,IAAA,EAAM,GAAG,IAAI,CAAA,cAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,cAAA;AAAA,KACf;AAAA,IACA,kBAAA,EAAoB;AAAA,MAClB,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA;AAAA,KACf;AAAA,IACA,kBAAA,EAAoB;AAAA,MAClB,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA;AAAA;AACf,GACF;AAEA,EAAA,OAAO,WAAW,OAAO,CAAA;AAC3B;AASO,SAAS,0BAAA,CACd,OAAA,EACA,OAAA,GAAkB,YAAA,EACA;AAElB,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,GAAI,OAAA,GAAU,GAAG,OAAO,CAAA,CAAA,CAAA;AAEzD,EAAA,MAAM,UAAA,GAA2D;AAAA,IAC/D,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,qBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,2BAAA;AAAA,KACf;AAAA,IACA,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,gBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,sBAAA;AAAA;AACf,GACF;AAEA,EAAA,OAAO,WAAW,OAAO,CAAA;AAC3B;AAwBA,eAAsB,gBAAA,CACpB,WAAA,EACA,MAAA,EACA,OAAA,GAAkB,YAAA,EACI;AACtB,EAAA,MAAMA,QAAAA,GAAU,MAAM,WAAA,EAAY;AAClC,EAAA,MAAM,SAAA,GAAY,sBAAA,CAAuB,WAAA,EAAa,OAAO,CAAA;AAG7D,EAAA,IAAI,gBAAgB,UAAA,EAAY;AAC9B,IAAA,MAAM,CAAA,GAAI,MAAA;AACV,IAAA,OAAA,CAAQ,IAAI,2CAA2C,CAAA;AACvD,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,eAAA,EAAkB,WAAW,CAAA,CAAE,CAAA;AAC3C,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,aAAA,EAAgB,CAAA,CAAE,SAAS,CAAA,CAAE,CAAA;AACzC,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACrC,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,eAAA,EAAkB,CAAA,CAAE,WAAW,CAAA,CAAE,CAAA;AAC7C,IAAA,OAAA,CAAQ,IAAI,CAAA,2BAAA,EAA8B,CAAA,CAAE,OAAA,KAAY,CAAA,CAAE,WAAW,CAAA,CAAE,CAAA;AACvE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,yBAAA,EAA4B,CAAA,CAAE,eAAA,EAAiB,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACnF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,wBAAA,EAA2B,CAAA,CAAE,cAAA,EAAgB,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACjF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,kBAAA,EAAqB,SAAA,CAAU,IAAI,CAAA,CAAE,CAAA;AACjD,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,kBAAA,EAAqB,SAAA,CAAU,IAAI,CAAA,CAAE,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,MAAA,GAAS,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,UAAU,MAAA,EAAQ,SAAA,CAAU,IAAA,EAAM,SAAA,CAAU,IAAI,CAAA;AAErF,EAAA,OAAO;AAAA,IACL,KAAA,EAAO;AAAA,MACL,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,eAAe,MAAA,CAAO;AAAA,KACxB;AAAA,IACA,eAAe,MAAA,CAAO;AAAA,GACxB;AACF;AAMA,eAAsB,aAAA,CACpB,cACA,OAAA,EACgB;AAChB,EAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAC5D;AA2BA,eAAsB,oBAAA,CACpB,OAAA,EACA,MAAA,EACA,OAAA,GAAkB,YAAA,EACI;AACtB,EAAA,MAAMA,QAAAA,GAAU,MAAM,WAAA,EAAY;AAClC,EAAA,MAAM,SAAA,GAAY,0BAAA,CAA2B,OAAA,EAAS,OAAO,CAAA;AAE7D,EAAA,MAAM,MAAA,GAAS,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,UAAU,MAAA,EAAQ,SAAA,CAAU,IAAA,EAAM,SAAA,CAAU,IAAI,CAAA;AAErF,EAAA,OAAO;AAAA,IACL,KAAA,EAAO;AAAA,MACL,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,eAAe,MAAA,CAAO;AAAA,KACxB;AAAA,IACA,eAAe,MAAA,CAAO;AAAA,GACxB;AACF;AASA,eAAsB,WAAA,CACpB,cACA,MAAA,EACkB;AAElB,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AAOO,SAAS,uBAAuB,KAAA,EAIrC;AACA,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,KAAS,KAAA,CAAM,KAAA;AAEnC,EAAA,OAAO;AAAA,IACL,CAAA,EAAG,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC,CAAA;AAAA,IACpC,CAAA,EAAG;AAAA,MACD,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,EAAE,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,CAAC,CAAC,CAAC,CAAA;AAAA;AAAA,MACvC,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,EAAE,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,CAAC,CAAC,CAAC;AAAA,KACzC;AAAA,IACA,CAAA,EAAG,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC;AAAA,GACtC;AACF","file":"chunk-SQKBT2SH.cjs","sourcesContent":["/**\n * ZK Proof Generation and Verification\n *\n * Uses snarkjs for Groth16 proof generation in the browser.\n */\n\nimport type { Proof } from './types.js'\n\n// Lazy-loaded snarkjs reference\nlet snarkjs: any = null\n\n/**\n * Load snarkjs dynamically\n */\nasync function loadSnarkjs(): Promise<any> {\n  if (snarkjs) return snarkjs\n  snarkjs = await import('snarkjs')\n  return snarkjs\n}\n\n// ============================================================================\n// UPP Circuit Constants\n// ============================================================================\n\n/** State tree depth (32 levels = ~4B notes) */\nexport const STATE_TREE_DEPTH = 32\n\n/** ASP tree depth (20 levels = ~1M addresses) */\nexport const ASP_TREE_DEPTH = 20\n\n// ============================================================================\n// UPP Circuit Types\n// ============================================================================\n\n/**\n * Circuit types available in UPP (full protocol)\n */\nexport type UPPCircuitType = 'transfer' | 'merge' | 'withdraw' | 'joinsplit' | 'merge_transfer_2x2' | 'merge_transfer_4x2'\n\n/**\n * @deprecated Use UPPCircuitType instead\n */\nexport type CircuitType = 'shield' | 'transfer' | 'merge' | 'withdraw'\n\n/**\n * @deprecated Stealth circuits are being replaced by UPP circuits\n */\nexport type StealthCircuitType = '1x2' | '2x2'\n\n/**\n * Input signals for UPP transfer circuit (1-in-2-out)\n *\n * Matches transfer.circom: Transfer(32, 20)\n * Public: stateRoot, aspRoot, nullifier, outputCommitment1, outputCommitment2, token\n */\nexport interface UPPTransferCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier: string\n  outputCommitment1: string\n  outputCommitment2: string\n  token: string\n\n  // Private inputs - Input Note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputOrigin: string\n  inputLeafIndex: string\n  inputPathElements: string[]  // 32 elements\n  inputPathIndices: string[]   // 32 elements\n\n  // Private inputs - ASP Membership Proof\n  aspPathElements: string[]    // 20 elements\n  aspPathIndices: string[]     // 20 elements\n\n  // Private inputs - Output Notes (BabyJubJub pubkey coordinates)\n  outputAmount1: string\n  outputPubkeyX1: string\n  outputPubkeyY1: string\n  outputBlinding1: string\n\n  outputAmount2: string\n  outputPubkeyX2: string\n  outputPubkeyY2: string\n  outputBlinding2: string\n}\n\n/**\n * Input signals for UPP withdraw circuit\n *\n * Matches withdraw.circom with optional ASP check (ragequit support)\n */\nexport interface UPPWithdrawCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier: string\n  amount: string\n  recipient: string\n  token: string\n  isRagequit: string  // '0' or '1'\n\n  // Private inputs - Input Note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputOrigin: string\n  inputLeafIndex: string\n  inputPathElements: string[]  // 32 elements\n  inputPathIndices: string[]   // 32 elements\n\n  // Private inputs - ASP Membership Proof (can be zeros if ragequit)\n  aspPathElements: string[]    // 20 elements\n  aspPathIndices: string[]     // 20 elements\n}\n\n/**\n * @deprecated Use UPPTransferCircuitInputs instead\n */\nexport interface TransferCircuitInputs {\n  stateRoot: bigint\n  aspRoot: bigint\n  nullifier: bigint\n  outputCommitment1: bigint\n  outputCommitment2: bigint\n  token: bigint\n  // Private inputs\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n  statePathElements: bigint[]\n  statePathIndices: bigint\n  aspPathElements: bigint[]\n  outAmount1: bigint\n  outBlinding1: bigint\n  outOrigin1: bigint\n  outAmount2: bigint\n  outBlinding2: bigint\n  outOrigin2: bigint\n}\n\n/**\n * Input signals for shield circuit\n */\nexport interface ShieldCircuitInputs {\n  commitment: bigint\n  token: bigint\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n}\n\n/**\n * Input signals for merge circuit\n */\nexport interface MergeCircuitInputs {\n  stateRoot: bigint\n  nullifier1: bigint\n  nullifier2: bigint\n  outputCommitment: bigint\n  newOrigin: bigint\n  token: bigint\n  // Private inputs for note 1\n  amount1: bigint\n  blinding1: bigint\n  origin1: bigint\n  token1: bigint\n  pathElements1: bigint[]\n  pathIndices1: bigint\n  // Private inputs for note 2\n  amount2: bigint\n  blinding2: bigint\n  origin2: bigint\n  token2: bigint\n  pathElements2: bigint[]\n  pathIndices2: bigint\n  // Output\n  outputAmount: bigint\n  outputBlinding: bigint\n}\n\n/**\n * Input signals for withdraw circuit\n */\nexport interface WithdrawCircuitInputs {\n  stateRoot: bigint\n  aspRoot: bigint\n  nullifier: bigint\n  withdrawAmount: bigint\n  recipient: bigint\n  token: bigint\n  isRagequit: bigint // 0 or 1\n  // Private inputs\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n  statePathElements: bigint[]\n  statePathIndices: bigint\n  aspPathElements: bigint[]\n}\n\n/**\n * Circuit inputs union type\n */\nexport type CircuitInputs =\n  | ShieldCircuitInputs\n  | TransferCircuitInputs\n  | MergeCircuitInputs\n  | WithdrawCircuitInputs\n\n// ============================================================================\n// Stealth Circuit Types (current zkdemo-app implementation)\n// ============================================================================\n\n/**\n * Circuit input for 1x2 stealth transfer (1-in-2-out)\n */\nexport interface Stealth1x2CircuitInputs {\n  // Public inputs\n  root: string\n  nullifierHash: string\n  publicAmount: string\n  recipient: string\n  extDataHash: string\n\n  // Input note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputLeafIndex: string\n  inputPathElements: string[]\n  inputPathIndices: string[]\n\n  // Output 1 (recipient)\n  outputAmount1: string\n  outputPubkeyX1: string\n  outputPubkeyY1: string\n  outputBlinding1: string\n\n  // Output 2 (change)\n  outputAmount2: string\n  outputPubkeyX2: string\n  outputPubkeyY2: string\n  outputBlinding2: string\n}\n\n/**\n * Circuit input for 2x2 stealth transfer (2-in-2-out)\n */\nexport interface Stealth2x2CircuitInputs {\n  // Public inputs\n  root: string\n  nullifierHash1: string\n  nullifierHash2: string\n  publicAmount: string\n  recipient: string\n  extDataHash: string\n\n  // Input note 1\n  inputAmount1: string\n  inputOneTimeSecret1: string\n  inputBlinding1: string\n  inputLeafIndex1: string\n  inputPathElements1: string[]\n  inputPathIndices1: string[]\n\n  // Input note 2\n  inputAmount2: string\n  inputOneTimeSecret2: string\n  inputBlinding2: string\n  inputLeafIndex2: string\n  inputPathElements2: string[]\n  inputPathIndices2: string[]\n\n  // Output 1 (recipient)\n  outputAmount1: string\n  outputPubkeyX1: string\n  outputPubkeyY1: string\n  outputBlinding1: string\n\n  // Output 2 (change)\n  outputAmount2: string\n  outputPubkeyX2: string\n  outputPubkeyY2: string\n  outputBlinding2: string\n}\n\n/**\n * Stealth circuit inputs union\n */\nexport type StealthCircuitInputs = Stealth1x2CircuitInputs | Stealth2x2CircuitInputs\n\n/**\n * Circuit artifact paths\n */\nexport interface CircuitArtifacts {\n  wasm: string\n  zkey: string\n}\n\n/**\n * Get circuit artifacts for a UPP circuit\n *\n * @param circuit - UPP circuit type\n * @param baseUrl - Base URL for circuit files (default: '/circuits/')\n */\nexport function getUPPCircuitArtifacts(\n  circuit: UPPCircuitType,\n  baseUrl: string = '/circuits/'\n): CircuitArtifacts {\n  // Ensure baseUrl ends with /\n  const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`\n\n  const circuitMap: Record<UPPCircuitType, CircuitArtifacts> = {\n    transfer: {\n      wasm: `${base}transfer.wasm`,\n      zkey: `${base}transfer.zkey`,\n    },\n    merge: {\n      wasm: `${base}merge.wasm`,\n      zkey: `${base}merge.zkey`,\n    },\n    withdraw: {\n      wasm: `${base}withdraw.wasm`,\n      zkey: `${base}withdraw.zkey`,\n    },\n    joinsplit: {\n      wasm: `${base}joinsplit.wasm`,\n      zkey: `${base}joinsplit.zkey`,\n    },\n    merge_transfer_2x2: {\n      wasm: `${base}merge_transfer_2x2.wasm`,\n      zkey: `${base}merge_transfer_2x2.zkey`,\n    },\n    merge_transfer_4x2: {\n      wasm: `${base}merge_transfer_4x2.wasm`,\n      zkey: `${base}merge_transfer_4x2.zkey`,\n    },\n  }\n\n  return circuitMap[circuit]\n}\n\n/**\n * @deprecated Use getUPPCircuitArtifacts instead\n * Get circuit artifacts for a stealth circuit\n *\n * @param circuit - Circuit type ('1x2' or '2x2')\n * @param baseUrl - Base URL for circuit files (default: '/circuits/')\n */\nexport function getStealthCircuitArtifacts(\n  circuit: StealthCircuitType,\n  baseUrl: string = '/circuits/'\n): CircuitArtifacts {\n  // Ensure baseUrl ends with /\n  const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`\n\n  const circuitMap: Record<StealthCircuitType, CircuitArtifacts> = {\n    '1x2': {\n      wasm: `${base}shielded_stealth.wasm`,\n      zkey: `${base}shielded_stealth_final.zkey`,\n    },\n    '2x2': {\n      wasm: `${base}stealth_2x2.wasm`,\n      zkey: `${base}stealth_2x2_final.zkey`,\n    },\n  }\n\n  return circuitMap[circuit]\n}\n\n/**\n * UPP circuit inputs union type\n */\nexport type UPPCircuitInputs = UPPTransferCircuitInputs | UPPWithdrawCircuitInputs\n\n/**\n * Generate a ZK proof for a UPP circuit\n *\n * @param circuitType - Which UPP circuit to use\n * @param inputs - Circuit input signals\n * @param baseUrl - Base URL for circuit artifacts (default: '/circuits/')\n * @returns Generated proof and public signals\n *\n * @example\n * ```ts\n * const { proof, publicSignals } = await generateUPPProof('transfer', {\n *   stateRoot: String(currentRoot),\n *   aspRoot: String(aspRoot),\n *   // ... other inputs\n * })\n * ```\n */\nexport async function generateUPPProof(\n  circuitType: UPPCircuitType,\n  inputs: UPPCircuitInputs,\n  baseUrl: string = '/circuits/'\n): Promise<ProofResult> {\n  const snarkjs = await loadSnarkjs()\n  const artifacts = getUPPCircuitArtifacts(circuitType, baseUrl)\n\n  // Debug: log key circuit inputs\n  if (circuitType === 'transfer') {\n    const i = inputs as UPPTransferCircuitInputs\n    console.log('[generateUPPProof] === CIRCUIT INPUTS ===')\n    console.log(`  circuitType: ${circuitType}`)\n    console.log(`  stateRoot: ${i.stateRoot}`)\n    console.log(`  aspRoot: ${i.aspRoot}`)\n    console.log(`  inputOrigin: ${i.inputOrigin}`)\n    console.log(`  aspRoot === inputOrigin: ${i.aspRoot === i.inputOrigin}`)\n    console.log(`  aspPathElements[0..2]: ${i.aspPathElements?.slice(0, 3).join(', ')}`)\n    console.log(`  aspPathIndices[0..2]: ${i.aspPathIndices?.slice(0, 3).join(', ')}`)\n    console.log(`  artifacts.wasm: ${artifacts.wasm}`)\n    console.log(`  artifacts.zkey: ${artifacts.zkey}`)\n  }\n\n  const result = await snarkjs.groth16.fullProve(inputs, artifacts.wasm, artifacts.zkey)\n\n  return {\n    proof: {\n      proof: result.proof,\n      publicSignals: result.publicSignals,\n    },\n    publicSignals: result.publicSignals,\n  }\n}\n\n/**\n * @deprecated Use generateUPPProof instead\n * Generate a ZK proof for a circuit (UPP protocol circuits)\n */\nexport async function generateProof(\n  _circuitType: CircuitType,\n  _inputs: CircuitInputs\n): Promise<Proof> {\n  throw new Error('Deprecated: Use generateUPPProof instead')\n}\n\n/**\n * Result from proof generation\n */\nexport interface ProofResult {\n  proof: Proof\n  publicSignals: string[]\n}\n\n/**\n * Generate a ZK proof for stealth circuit (1x2 or 2x2)\n *\n * @param circuit - Circuit type ('1x2' or '2x2')\n * @param inputs - Circuit input signals\n * @param baseUrl - Base URL for circuit artifacts (default: '/circuits/')\n * @returns Generated proof and public signals\n *\n * @example\n * ```ts\n * const { proof, publicSignals } = await generateStealthProof('1x2', {\n *   root: String(merkleRoot),\n *   nullifierHash: String(nullifier),\n *   // ... other inputs\n * })\n * ```\n */\nexport async function generateStealthProof(\n  circuit: StealthCircuitType,\n  inputs: StealthCircuitInputs,\n  baseUrl: string = '/circuits/'\n): Promise<ProofResult> {\n  const snarkjs = await loadSnarkjs()\n  const artifacts = getStealthCircuitArtifacts(circuit, baseUrl)\n\n  const result = await snarkjs.groth16.fullProve(inputs, artifacts.wasm, artifacts.zkey)\n\n  return {\n    proof: {\n      proof: result.proof,\n      publicSignals: result.publicSignals,\n    },\n    publicSignals: result.publicSignals,\n  }\n}\n\n/**\n * Verify a ZK proof\n *\n * @param circuitType - Which circuit was used\n * @param proof - The proof to verify\n * @returns True if proof is valid\n */\nexport async function verifyProof(\n  _circuitType: CircuitType,\n  _proof: Proof\n): Promise<boolean> {\n  // TODO: Implement proof verification using snarkjs\n  throw new Error('Not implemented')\n}\n\n/**\n * Format proof for on-chain verification\n *\n * Converts snarkjs proof format to Solidity verifier format\n */\nexport function formatProofForContract(proof: Proof): {\n  a: [bigint, bigint]\n  b: [[bigint, bigint], [bigint, bigint]]\n  c: [bigint, bigint]\n} {\n  const { pi_a, pi_b, pi_c } = proof.proof\n\n  return {\n    a: [BigInt(pi_a[0]), BigInt(pi_a[1])],\n    b: [\n      [BigInt(pi_b[0][1]), BigInt(pi_b[0][0])], // Note: reversed for Solidity\n      [BigInt(pi_b[1][1]), BigInt(pi_b[1][0])],\n    ],\n    c: [BigInt(pi_c[0]), BigInt(pi_c[1])],\n  }\n}\n"]}