@permissionless-technologies/upp-sdk 0.3.6 → 0.4.0

package/dist/{chunk-S4B7GYLN.js → chunk-W3HLIKC2.js}

@@ -56,18 +56,16 @@ async function generateUPPProof(circuitType, inputs, baseUrl = "/circuits/") {
   const artifacts = getUPPCircuitArtifacts(circuitType, baseUrl);
   if (circuitType === "transfer") {
     const i = inputs;
-    console.log("[generateUPPProof] === CIRCUIT INPUTS ===");
+    console.log("[generateUPPProof] === PLONK CIRCUIT INPUTS ===");
     console.log(`  circuitType: ${circuitType}`);
     console.log(`  stateRoot: ${i.stateRoot}`);
     console.log(`  aspRoot: ${i.aspRoot}`);
     console.log(`  inputOrigin: ${i.inputOrigin}`);
-    console.log(`  aspRoot === inputOrigin: ${i.aspRoot === i.inputOrigin}`);
     console.log(`  aspPathElements[0..2]: ${i.aspPathElements?.slice(0, 3).join(", ")}`);
-    console.log(`  aspPathIndices[0..2]: ${i.aspPathIndices?.slice(0, 3).join(", ")}`);
     console.log(`  artifacts.wasm: ${artifacts.wasm}`);
     console.log(`  artifacts.zkey: ${artifacts.zkey}`);
   }
-  const result = await snarkjs2.groth16.fullProve(inputs, artifacts.wasm, artifacts.zkey);
+  const result = await snarkjs2.plonk.fullProve(inputs, artifacts.wasm, artifacts.zkey);
   return {
     proof: {
       proof: result.proof,
@@ -94,19 +92,31 @@ async function generateStealthProof(circuit, inputs, baseUrl = "/circuits/") {
 async function verifyProof(_circuitType, _proof) {
   throw new Error("Not implemented");
 }
+async function formatPlonkProofForContract(proof) {
+  const snarkjs2 = await loadSnarkjs();
+  const calldata = await snarkjs2.plonk.exportSolidityCallData(
+    proof.proof,
+    proof.publicSignals
+  );
+  const [proofHex, signalsStr] = calldata.split(',["');
+  const signals = signalsStr ? signalsStr.replace('"]', "").split('","').map((s) => BigInt(s)) : proof.publicSignals.map((s) => BigInt(s));
+  return {
+    proofBytes: proofHex,
+    publicSignals: signals
+  };
+}
 function formatProofForContract(proof) {
   const { pi_a, pi_b, pi_c } = proof.proof;
   return {
     a: [BigInt(pi_a[0]), BigInt(pi_a[1])],
     b: [
       [BigInt(pi_b[0][1]), BigInt(pi_b[0][0])],
-      // Note: reversed for Solidity
       [BigInt(pi_b[1][1]), BigInt(pi_b[1][0])]
     ],
     c: [BigInt(pi_c[0]), BigInt(pi_c[1])]
   };
 }
 
-export { ASP_TREE_DEPTH, STATE_TREE_DEPTH, formatProofForContract, generateProof, generateStealthProof, generateUPPProof, getStealthCircuitArtifacts, getUPPCircuitArtifacts, verifyProof };
-//# sourceMappingURL=chunk-S4B7GYLN.js.map
-//# sourceMappingURL=chunk-S4B7GYLN.js.map
+export { ASP_TREE_DEPTH, STATE_TREE_DEPTH, formatPlonkProofForContract, formatProofForContract, generateProof, generateStealthProof, generateUPPProof, getStealthCircuitArtifacts, getUPPCircuitArtifacts, verifyProof };
+//# sourceMappingURL=chunk-W3HLIKC2.js.map
+//# sourceMappingURL=chunk-W3HLIKC2.js.map

package/dist/chunk-W3HLIKC2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/proof.ts"],"names":["snarkjs"],"mappings":";AAUA,IAAI,OAAA,GAAe,IAAA;AAKnB,eAAe,WAAA,GAA4B;AACzC,EAAA,IAAI,SAAS,OAAO,OAAA;AACpB,EAAA,OAAA,GAAU,MAAM,OAAO,SAAS,CAAA;AAChC,EAAA,OAAO,OAAA;AACT;AAOO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,cAAA,GAAiB;AA+SvB,SAAS,sBAAA,CACd,OAAA,EACA,OAAA,GAAkB,YAAA,EACA;AAClB,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,GAAI,OAAA,GAAU,GAAG,OAAO,CAAA,CAAA,CAAA;AAEzD,EAAA,MAAM,UAAA,GAAuD;AAAA,IAC3D,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA;AAAA,KACf;AAAA,IACA,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,UAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,UAAA;AAAA,KACf;AAAA,IACA,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA;AAAA,KACf;AAAA,IACA,SAAA,EAAW;AAAA,MACT,IAAA,EAAM,GAAG,IAAI,CAAA,cAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,cAAA;AAAA,KACf;AAAA,IACA,kBAAA,EAAoB;AAAA,MAClB,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA;AAAA,KACf;AAAA,IACA,kBAAA,EAAoB;AAAA,MAClB,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA;AAAA;AACf,GACF;AAEA,EAAA,OAAO,WAAW,OAAO,CAAA;AAC3B;AAKO,SAAS,0BAAA,CACd,OAAA,EACA,OAAA,GAAkB,YAAA,EACA;AAClB,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,GAAI,OAAA,GAAU,GAAG,OAAO,CAAA,CAAA,CAAA;AAEzD,EAAA,MAAM,UAAA,GAA2D;AAAA,IAC/D,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,qBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,2BAAA;AAAA,KACf;AAAA,IACA,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,gBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,sBAAA;AAAA;AACf,GACF;AAEA,EAAA,OAAO,WAAW,OAAO,CAAA;AAC3B;AA4BA,eAAsB,gBAAA,CACpB,WAAA,EACA,MAAA,EACA,OAAA,GAAkB,YAAA,EACI;AACtB,EAAA,MAAMA,QAAAA,GAAU,MAAM,WAAA,EAAY;AAClC,EAAA,MAAM,SAAA,GAAY,sBAAA,CAAuB,WAAA,EAAa,OAAO,CAAA;AAG7D,EAAA,IAAI,gBAAgB,UAAA,EAAY;AAC9B,IAAA,MAAM,CAAA,GAAI,MAAA;AACV,IAAA,OAAA,CAAQ,IAAI,iDAAiD,CAAA;AAC7D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,eAAA,EAAkB,WAAW,CAAA,CAAE,CAAA;AAC3C,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,aAAA,EAAgB,CAAA,CAAE,SAAS,CAAA,CAAE,CAAA;AACzC,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,WAAA,EAAc,CAAA,CAAE,OAAO,CAAA,CAAE,CAAA;AACrC,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,eAAA,EAAkB,CAAA,CAAE,WAAW,CAAA,CAAE,CAAA;AAC7C,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,yBAAA,EAA4B,CAAA,CAAE,eAAA,EAAiB,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAE,CAAA;AACnF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,kBAAA,EAAqB,SAAA,CAAU,IAAI,CAAA,CAAE,CAAA;AACjD,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,kBAAA,EAAqB,SAAA,CAAU,IAAI,CAAA,CAAE,CAAA;AAAA,EACnD;AAGA,EAAA,MAAM,MAAA,GAAS,MAAMA,QAAAA,CAAQ,KAAA,CAAM,UAAU,MAAA,EAAQ,SAAA,CAAU,IAAA,EAAM,SAAA,CAAU,IAAI,CAAA;AAEnF,EAAA,OAAO;AAAA,IACL,KAAA,EAAO;AAAA,MACL,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,eAAe,MAAA,CAAO;AAAA,KACxB;AAAA,IACA,eAAe,MAAA,CAAO;AAAA,GACxB;AACF;AAKA,eAAsB,aAAA,CACpB,cACA,OAAA,EACgB;AAChB,EAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAC5D;AAaA,eAAsB,oBAAA,CACpB,OAAA,EACA,MAAA,EACA,OAAA,GAAkB,YAAA,EACI;AACtB,EAAA,MAAMA,QAAAA,GAAU,MAAM,WAAA,EAAY;AAClC,EAAA,MAAM,SAAA,GAAY,0BAAA,CAA2B,OAAA,EAAS,OAAO,CAAA;AAE7D,EAAA,MAAM,MAAA,GAAS,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,UAAU,MAAA,EAAQ,SAAA,CAAU,IAAA,EAAM,SAAA,CAAU,IAAI,CAAA;AAErF,EAAA,OAAO;AAAA,IACL,KAAA,EAAO;AAAA,MACL,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,eAAe,MAAA,CAAO;AAAA,KACxB;AAAA,IACA,eAAe,MAAA,CAAO;AAAA,GACxB;AACF;AAKA,eAAsB,WAAA,CACpB,cACA,MAAA,EACkB;AAClB,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AAWA,eAAsB,4BAA4B,KAAA,EAG/C;AACD,EAAA,MAAMA,QAAAA,GAAU,MAAM,WAAA,EAAY;AAClC,EAAA,MAAM,QAAA,GAAW,MAAMA,QAAAA,CAAQ,KAAA,CAAM,sBAAA;AAAA,IACnC,KAAA,CAAM,KAAA;AAAA,IACN,KAAA,CAAM;AAAA,GACR;AAGA,EAAA,MAAM,CAAC,QAAA,EAAU,UAAU,CAAA,GAAI,QAAA,CAAS,MAAM,KAAK,CAAA;AACnD,EAAA,MAAM,OAAA,GAAU,UAAA,GACZ,UAAA,CAAW,OAAA,CAAQ,IAAA,EAAM,EAAE,CAAA,CAAE,KAAA,CAAM,KAAK,CAAA,CAAE,GAAA,CAAI,CAAC,MAAc,MAAA,CAAO,CAAC,CAAC,CAAA,GACtE,KAAA,CAAM,aAAA,CAAc,IAAI,CAAC,CAAA,KAAc,MAAA,CAAO,CAAC,CAAC,CAAA;AAEpD,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,QAAA;AAAA,IACZ,aAAA,EAAe;AAAA,GACjB;AACF;AAOO,SAAS,uBAAuB,KAAA,EAIrC;AACA,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,KAAS,KAAA,CAAM,KAAA;AAEnC,EAAA,OAAO;AAAA,IACL,CAAA,EAAG,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC,CAAA;AAAA,IACpC,CAAA,EAAG;AAAA,MACD,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,EAAE,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,CAAC,CAAC,CAAC,CAAA;AAAA,MACvC,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,EAAE,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,CAAC,CAAC,CAAC;AAAA,KACzC;AAAA,IACA,CAAA,EAAG,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC;AAAA,GACtC;AACF","file":"chunk-W3HLIKC2.js","sourcesContent":["/**\n * ZK Proof Generation and Verification (BLS12-381 PLONK)\n *\n * Uses snarkjs for PLONK proof generation over the BLS12-381 curve.\n * PLONK provides a universal trusted setup (no per-circuit ceremony).\n */\n\nimport type { Proof } from './types.js'\n\n// Lazy-loaded snarkjs reference\nlet snarkjs: any = null\n\n/**\n * Load snarkjs dynamically\n */\nasync function loadSnarkjs(): Promise<any> {\n  if (snarkjs) return snarkjs\n  snarkjs = await import('snarkjs')\n  return snarkjs\n}\n\n// ============================================================================\n// UPP Circuit Constants\n// ============================================================================\n\n/** State tree depth (32 levels = ~4B notes) */\nexport const STATE_TREE_DEPTH = 32\n\n/** ASP tree depth (20 levels = ~1M addresses) */\nexport const ASP_TREE_DEPTH = 20\n\n// ============================================================================\n// UPP Circuit Types\n// ============================================================================\n\n/**\n * Circuit types available in UPP (full protocol)\n */\nexport type UPPCircuitType = 'transfer' | 'merge' | 'withdraw' | 'joinsplit' | 'merge_transfer_2x2' | 'merge_transfer_4x2'\n\n/**\n * @deprecated Use UPPCircuitType instead\n */\nexport type CircuitType = 'shield' | 'transfer' | 'merge' | 'withdraw'\n\n/**\n * @deprecated Stealth circuits are being replaced by UPP circuits\n */\nexport type StealthCircuitType = '1x2' | '2x2'\n\n/**\n * Input signals for UPP transfer circuit (1-in-2-out, BLS12-381 PLONK)\n *\n * Matches transfer.circom: Transfer(32, 20)\n * Public: stateRoot, aspRoot, nullifier, outputCommitment1, outputCommitment2, token\n *\n * Note: Uses hash-based ownership (ownerHash) instead of BabyJubJub pubkeys.\n */\nexport interface UPPTransferCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier: string\n  outputCommitment1: string\n  outputCommitment2: string\n  token: string\n\n  // Private inputs - Input Note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputOrigin: string\n  inputLeafIndex: string\n  inputPathElements: string[]  // 32 elements\n  inputPathIndices: string[]   // 32 elements\n\n  // Private inputs - ASP Membership Proof\n  aspPathElements: string[]    // 20 elements\n  aspPathIndices: string[]     // 20 elements\n\n  // Private inputs - Output Notes (hash-based ownership)\n  outputAmount1: string\n  outputOwnerHash1: string\n  outputBlinding1: string\n\n  outputAmount2: string\n  outputOwnerHash2: string\n  outputBlinding2: string\n}\n\n/**\n * Input signals for UPP withdraw circuit (BLS12-381 PLONK)\n *\n * Matches withdraw.circom with optional ASP check (ragequit support)\n */\nexport interface UPPWithdrawCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier: string\n  amount: string\n  recipient: string\n  token: string\n  isRagequit: string  // '0' or '1'\n\n  // Private inputs - Input Note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputOrigin: string\n  inputLeafIndex: string\n  inputPathElements: string[]  // 32 elements\n  inputPathIndices: string[]   // 32 elements\n\n  // Private inputs - ASP Membership Proof (can be zeros if ragequit)\n  aspPathElements: string[]    // 20 elements\n  aspPathIndices: string[]     // 20 elements\n}\n\n/**\n * Input signals for UPP merge circuit (2-in-1-out, BLS12-381 PLONK)\n */\nexport interface UPPMergeCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  nullifier1: string\n  nullifier2: string\n  outputCommitment: string\n  merger: string\n  token: string\n\n  // Private inputs - Input Note 1\n  inputAmount1: string\n  inputOneTimeSecret1: string\n  inputBlinding1: string\n  inputOrigin1: string\n  inputLeafIndex1: string\n  inputPathElements1: string[]\n  inputPathIndices1: string[]\n\n  // Private inputs - Input Note 2\n  inputAmount2: string\n  inputOneTimeSecret2: string\n  inputBlinding2: string\n  inputOrigin2: string\n  inputLeafIndex2: string\n  inputPathElements2: string[]\n  inputPathIndices2: string[]\n\n  // Private inputs - Output Note\n  outputAmount: string\n  outputOwnerHash: string\n  outputBlinding: string\n}\n\n/**\n * Input signals for UPP joinsplit circuit (4-in-2-out, BLS12-381 PLONK)\n */\nexport interface UPPJoinSplitCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier1: string\n  nullifier2: string\n  nullifier3: string\n  nullifier4: string\n  outputCommitment1: string\n  outputCommitment2: string\n  token: string\n\n  // Private inputs - 4 Input Notes\n  inputAmount1: string; inputOneTimeSecret1: string; inputBlinding1: string\n  inputOrigin1: string; inputLeafIndex1: string\n  inputPathElements1: string[]; inputPathIndices1: string[]\n\n  inputAmount2: string; inputOneTimeSecret2: string; inputBlinding2: string\n  inputOrigin2: string; inputLeafIndex2: string\n  inputPathElements2: string[]; inputPathIndices2: string[]\n\n  inputAmount3: string; inputOneTimeSecret3: string; inputBlinding3: string\n  inputOrigin3: string; inputLeafIndex3: string\n  inputPathElements3: string[]; inputPathIndices3: string[]\n\n  inputAmount4: string; inputOneTimeSecret4: string; inputBlinding4: string\n  inputOrigin4: string; inputLeafIndex4: string\n  inputPathElements4: string[]; inputPathIndices4: string[]\n\n  // Private inputs - ASP Membership Proof\n  aspPathElements: string[]\n  aspPathIndices: string[]\n\n  // Private inputs - Output Notes\n  outputAmount1: string; outputOwnerHash1: string; outputBlinding1: string\n  outputAmount2: string; outputOwnerHash2: string; outputBlinding2: string\n}\n\n/**\n * @deprecated Use UPPTransferCircuitInputs instead\n */\nexport interface TransferCircuitInputs {\n  stateRoot: bigint\n  aspRoot: bigint\n  nullifier: bigint\n  outputCommitment1: bigint\n  outputCommitment2: bigint\n  token: bigint\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n  statePathElements: bigint[]\n  statePathIndices: bigint\n  aspPathElements: bigint[]\n  outAmount1: bigint\n  outBlinding1: bigint\n  outOrigin1: bigint\n  outAmount2: bigint\n  outBlinding2: bigint\n  outOrigin2: bigint\n}\n\n/**\n * Input signals for shield circuit\n */\nexport interface ShieldCircuitInputs {\n  commitment: bigint\n  token: bigint\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n}\n\n/**\n * Input signals for merge circuit\n */\nexport interface MergeCircuitInputs {\n  stateRoot: bigint\n  nullifier1: bigint\n  nullifier2: bigint\n  outputCommitment: bigint\n  newOrigin: bigint\n  token: bigint\n  amount1: bigint\n  blinding1: bigint\n  origin1: bigint\n  token1: bigint\n  pathElements1: bigint[]\n  pathIndices1: bigint\n  amount2: bigint\n  blinding2: bigint\n  origin2: bigint\n  token2: bigint\n  pathElements2: bigint[]\n  pathIndices2: bigint\n  outputAmount: bigint\n  outputBlinding: bigint\n}\n\n/**\n * Input signals for withdraw circuit\n */\nexport interface WithdrawCircuitInputs {\n  stateRoot: bigint\n  aspRoot: bigint\n  nullifier: bigint\n  withdrawAmount: bigint\n  recipient: bigint\n  token: bigint\n  isRagequit: bigint\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n  statePathElements: bigint[]\n  statePathIndices: bigint\n  aspPathElements: bigint[]\n}\n\n/**\n * Circuit inputs union type\n */\nexport type CircuitInputs =\n  | ShieldCircuitInputs\n  | TransferCircuitInputs\n  | MergeCircuitInputs\n  | WithdrawCircuitInputs\n\n// ============================================================================\n// Stealth Circuit Types (deprecated)\n// ============================================================================\n\n/**\n * @deprecated\n */\nexport interface Stealth1x2CircuitInputs {\n  root: string; nullifierHash: string; publicAmount: string\n  recipient: string; extDataHash: string\n  inputAmount: string; inputOneTimeSecret: string; inputBlinding: string\n  inputLeafIndex: string; inputPathElements: string[]; inputPathIndices: string[]\n  outputAmount1: string; outputPubkeyX1: string; outputPubkeyY1: string; outputBlinding1: string\n  outputAmount2: string; outputPubkeyX2: string; outputPubkeyY2: string; outputBlinding2: string\n}\n\n/**\n * @deprecated\n */\nexport interface Stealth2x2CircuitInputs {\n  root: string; nullifierHash1: string; nullifierHash2: string\n  publicAmount: string; recipient: string; extDataHash: string\n  inputAmount1: string; inputOneTimeSecret1: string; inputBlinding1: string\n  inputLeafIndex1: string; inputPathElements1: string[]; inputPathIndices1: string[]\n  inputAmount2: string; inputOneTimeSecret2: string; inputBlinding2: string\n  inputLeafIndex2: string; inputPathElements2: string[]; inputPathIndices2: string[]\n  outputAmount1: string; outputPubkeyX1: string; outputPubkeyY1: string; outputBlinding1: string\n  outputAmount2: string; outputPubkeyX2: string; outputPubkeyY2: string; outputBlinding2: string\n}\n\n/** @deprecated */\nexport type StealthCircuitInputs = Stealth1x2CircuitInputs | Stealth2x2CircuitInputs\n\n/**\n * Circuit artifact paths\n */\nexport interface CircuitArtifacts {\n  wasm: string\n  zkey: string\n}\n\n/**\n * Get circuit artifacts for a UPP circuit\n *\n * @param circuit - UPP circuit type\n * @param baseUrl - Base URL for circuit files (default: '/circuits/')\n */\nexport function getUPPCircuitArtifacts(\n  circuit: UPPCircuitType,\n  baseUrl: string = '/circuits/'\n): CircuitArtifacts {\n  const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`\n\n  const circuitMap: Record<UPPCircuitType, CircuitArtifacts> = {\n    transfer: {\n      wasm: `${base}transfer.wasm`,\n      zkey: `${base}transfer.zkey`,\n    },\n    merge: {\n      wasm: `${base}merge.wasm`,\n      zkey: `${base}merge.zkey`,\n    },\n    withdraw: {\n      wasm: `${base}withdraw.wasm`,\n      zkey: `${base}withdraw.zkey`,\n    },\n    joinsplit: {\n      wasm: `${base}joinsplit.wasm`,\n      zkey: `${base}joinsplit.zkey`,\n    },\n    merge_transfer_2x2: {\n      wasm: `${base}merge_transfer_2x2.wasm`,\n      zkey: `${base}merge_transfer_2x2.zkey`,\n    },\n    merge_transfer_4x2: {\n      wasm: `${base}merge_transfer_4x2.wasm`,\n      zkey: `${base}merge_transfer_4x2.zkey`,\n    },\n  }\n\n  return circuitMap[circuit]\n}\n\n/**\n * @deprecated Use getUPPCircuitArtifacts instead\n */\nexport function getStealthCircuitArtifacts(\n  circuit: StealthCircuitType,\n  baseUrl: string = '/circuits/'\n): CircuitArtifacts {\n  const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`\n\n  const circuitMap: Record<StealthCircuitType, CircuitArtifacts> = {\n    '1x2': {\n      wasm: `${base}shielded_stealth.wasm`,\n      zkey: `${base}shielded_stealth_final.zkey`,\n    },\n    '2x2': {\n      wasm: `${base}stealth_2x2.wasm`,\n      zkey: `${base}stealth_2x2_final.zkey`,\n    },\n  }\n\n  return circuitMap[circuit]\n}\n\n/**\n * UPP circuit inputs union type\n */\nexport type UPPCircuitInputs =\n  | UPPTransferCircuitInputs\n  | UPPWithdrawCircuitInputs\n  | UPPMergeCircuitInputs\n  | UPPJoinSplitCircuitInputs\n\n/**\n * Generate a ZK proof for a UPP circuit (BLS12-381 PLONK)\n *\n * @param circuitType - Which UPP circuit to use\n * @param inputs - Circuit input signals\n * @param baseUrl - Base URL for circuit artifacts (default: '/circuits/')\n * @returns Generated proof and public signals\n *\n * @example\n * ```ts\n * const { proof, publicSignals } = await generateUPPProof('transfer', {\n *   stateRoot: String(currentRoot),\n *   aspRoot: String(aspRoot),\n *   // ... other inputs\n * })\n * ```\n */\nexport async function generateUPPProof(\n  circuitType: UPPCircuitType,\n  inputs: UPPCircuitInputs,\n  baseUrl: string = '/circuits/'\n): Promise<ProofResult> {\n  const snarkjs = await loadSnarkjs()\n  const artifacts = getUPPCircuitArtifacts(circuitType, baseUrl)\n\n  // Debug: log key circuit inputs\n  if (circuitType === 'transfer') {\n    const i = inputs as UPPTransferCircuitInputs\n    console.log('[generateUPPProof] === PLONK CIRCUIT INPUTS ===')\n    console.log(`  circuitType: ${circuitType}`)\n    console.log(`  stateRoot: ${i.stateRoot}`)\n    console.log(`  aspRoot: ${i.aspRoot}`)\n    console.log(`  inputOrigin: ${i.inputOrigin}`)\n    console.log(`  aspPathElements[0..2]: ${i.aspPathElements?.slice(0, 3).join(', ')}`)\n    console.log(`  artifacts.wasm: ${artifacts.wasm}`)\n    console.log(`  artifacts.zkey: ${artifacts.zkey}`)\n  }\n\n  // Use PLONK prover (not Groth16)\n  const result = await snarkjs.plonk.fullProve(inputs, artifacts.wasm, artifacts.zkey)\n\n  return {\n    proof: {\n      proof: result.proof,\n      publicSignals: result.publicSignals,\n    },\n    publicSignals: result.publicSignals,\n  }\n}\n\n/**\n * @deprecated Use generateUPPProof instead\n */\nexport async function generateProof(\n  _circuitType: CircuitType,\n  _inputs: CircuitInputs\n): Promise<Proof> {\n  throw new Error('Deprecated: Use generateUPPProof instead')\n}\n\n/**\n * Result from proof generation\n */\nexport interface ProofResult {\n  proof: Proof\n  publicSignals: string[]\n}\n\n/**\n * @deprecated Stealth circuits use old Groth16 format\n */\nexport async function generateStealthProof(\n  circuit: StealthCircuitType,\n  inputs: StealthCircuitInputs,\n  baseUrl: string = '/circuits/'\n): Promise<ProofResult> {\n  const snarkjs = await loadSnarkjs()\n  const artifacts = getStealthCircuitArtifacts(circuit, baseUrl)\n\n  const result = await snarkjs.groth16.fullProve(inputs, artifacts.wasm, artifacts.zkey)\n\n  return {\n    proof: {\n      proof: result.proof,\n      publicSignals: result.publicSignals,\n    },\n    publicSignals: result.publicSignals,\n  }\n}\n\n/**\n * Verify a ZK proof\n */\nexport async function verifyProof(\n  _circuitType: CircuitType,\n  _proof: Proof\n): Promise<boolean> {\n  throw new Error('Not implemented')\n}\n\n/**\n * Format PLONK proof for on-chain verification\n *\n * PLONK proofs use a different format than Groth16:\n * - Groth16: uint256[8] (pi_a, pi_b, pi_c)\n * - PLONK: bytes (encoded proof with commitments and evaluations)\n *\n * Use snarkjs.plonk.exportSolidityCallData() for the exact encoding.\n */\nexport async function formatPlonkProofForContract(proof: Proof): Promise<{\n  proofBytes: `0x${string}`\n  publicSignals: bigint[]\n}> {\n  const snarkjs = await loadSnarkjs()\n  const calldata = await snarkjs.plonk.exportSolidityCallData(\n    proof.proof,\n    proof.publicSignals\n  )\n\n  // snarkjs returns a comma-separated string: \"0xproof,[sig1,sig2,...]\"\n  const [proofHex, signalsStr] = calldata.split(',[\"')\n  const signals = signalsStr\n    ? signalsStr.replace('\"]', '').split('\",\"').map((s: string) => BigInt(s))\n    : proof.publicSignals.map((s: string) => BigInt(s))\n\n  return {\n    proofBytes: proofHex as `0x${string}`,\n    publicSignals: signals,\n  }\n}\n\n/**\n * @deprecated Use formatPlonkProofForContract for PLONK proofs.\n *\n * Format Groth16 proof for on-chain verification (old format).\n */\nexport function formatProofForContract(proof: Proof): {\n  a: [bigint, bigint]\n  b: [[bigint, bigint], [bigint, bigint]]\n  c: [bigint, bigint]\n} {\n  const { pi_a, pi_b, pi_c } = proof.proof\n\n  return {\n    a: [BigInt(pi_a[0]), BigInt(pi_a[1])],\n    b: [\n      [BigInt(pi_b[0][1]), BigInt(pi_b[0][0])],\n      [BigInt(pi_b[1][1]), BigInt(pi_b[1][0])],\n    ],\n    c: [BigInt(pi_c[0]), BigInt(pi_c[1])],\n  }\n}\n"]}

package/dist/{chunk-NDM5EJEV.cjs → chunk-XVIICZKW.cjs}

@@ -4,7 +4,7 @@ var chunkG7VZBCD6_cjs = require('./chunk-G7VZBCD6.cjs');
 var upcSdk = require('@permissionless-technologies/upc-sdk');
 
 var ASP_TREE_DEPTH = upcSdk.DEFAULT_TREE_DEPTH;
-var bn254 = new upcSdk.PoseidonBN254();
+var bls12381 = new upcSdk.PoseidonBLS12381();
 async function computeSingleOriginASPRoot(origin) {
   return origin;
 }
@@ -21,7 +21,7 @@ async function verifyASPProof(origin, proof) {
   return upcSdk.verifyMembershipProof(
     origin,
     { root: proof.aspRoot, pathElements: proof.aspPathElements, pathIndices: proof.aspPathIndices },
-    bn254
+    bls12381
   );
 }
 var DEMO_ASP_ID = 1n;
@@ -31,16 +31,16 @@ async function createDemoASPRoot(origin) {
 }
 function buildASPTree(origins) {
   const { buildMerkleTree } = chunkG7VZBCD6_cjs.__require("@permissionless-technologies/upc-sdk");
-  return buildMerkleTree(origins, ASP_TREE_DEPTH, bn254);
+  return buildMerkleTree(origins, ASP_TREE_DEPTH, bls12381);
 }
 async function computeMultiOriginASPRoot(origins) {
-  return upcSdk.computeMerkleRoot(origins, ASP_TREE_DEPTH, bn254);
+  return upcSdk.computeMerkleRoot(origins, ASP_TREE_DEPTH, bls12381);
 }
 async function generateMultiOriginASPProof(aspId, origin, allOrigins) {
   if (allOrigins.length <= 1) {
     return generateSingleOriginASPProof(aspId, origin);
   }
-  const proof = await upcSdk.generateMembershipProof(origin, allOrigins, ASP_TREE_DEPTH, bn254);
+  const proof = await upcSdk.generateMembershipProof(origin, allOrigins, ASP_TREE_DEPTH, bls12381);
   return {
     aspId,
     aspRoot: proof.root,
@@ -66,5 +66,5 @@ exports.generateASPProof = generateASPProof;
 exports.generateMultiOriginASPProof = generateMultiOriginASPProof;
 exports.generateSingleOriginASPProof = generateSingleOriginASPProof;
 exports.verifyASPProof = verifyASPProof;
-//# sourceMappingURL=chunk-NDM5EJEV.cjs.map
-//# sourceMappingURL=chunk-NDM5EJEV.cjs.map
+//# sourceMappingURL=chunk-XVIICZKW.cjs.map
+//# sourceMappingURL=chunk-XVIICZKW.cjs.map

package/dist/chunk-XVIICZKW.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/asp.ts"],"names":["DEFAULT_TREE_DEPTH","PoseidonBLS12381","generateSingleMemberProof","verifyMembershipProof","__require","computeMerkleRoot","generateMembershipProof"],"mappings":";;;;;AAuBO,IAAM,cAAA,GAAiBA;AAG9B,IAAM,QAAA,GAAW,IAAIC,uBAAA,EAAiB;AAmBtC,eAAsB,2BAA2B,MAAA,EAAiC;AAChF,EAAA,OAAO,MAAA;AACT;AAKA,eAAsB,4BAAA,CACpB,OACA,MAAA,EACmB;AACnB,EAAA,MAAM,KAAA,GAAQC,gCAAA,CAA0B,MAAA,EAAQ,cAAc,CAAA;AAC9D,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,SAAS,KAAA,CAAM,IAAA;AAAA,IACf,iBAAiB,KAAA,CAAM,YAAA;AAAA,IACvB,gBAAgB,KAAA,CAAM;AAAA,GACxB;AACF;AAKA,eAAsB,cAAA,CAAe,QAAgB,KAAA,EAAmC;AACtF,EAAA,OAAOC,4BAAA;AAAA,IACL,MAAA;AAAA,IACA,EAAE,MAAM,KAAA,CAAM,OAAA,EAAS,cAAc,KAAA,CAAM,eAAA,EAAiB,WAAA,EAAa,KAAA,CAAM,cAAA,EAAe;AAAA,IAC9F;AAAA,GACF;AACF;AAKO,IAAM,WAAA,GAAc;AACpB,IAAM,aAAA,GAAgB;AAK7B,eAAsB,kBAAkB,MAAA,EAAiC;AACvE,EAAA,OAAO,2BAA2B,MAAM,CAAA;AAC1C;AAKO,SAAS,aAAa,OAAA,EAAmB;AAC9C,EAAA,MAAM,EAAE,eAAA,EAAgB,GAAIC,2BAAA,CAAQ,sCAAsC,CAAA;AAC1E,EAAA,OAAO,eAAA,CAAgB,OAAA,EAAS,cAAA,EAAgB,QAAQ,CAAA;AAC1D;AAKA,eAAsB,0BAA0B,OAAA,EAAoC;AAClF,EAAA,OAAOC,wBAAA,CAAkB,OAAA,EAAS,cAAA,EAAgB,QAAQ,CAAA;AAC5D;AAKA,eAAsB,2BAAA,CACpB,KAAA,EACA,MAAA,EACA,UAAA,EACmB;AACnB,EAAA,IAAI,UAAA,CAAW,UAAU,CAAA,EAAG;AAC1B,IAAA,OAAO,4BAAA,CAA6B,OAAO,MAAM,CAAA;AAAA,EACnD;AAEA,EAAA,MAAM,QAAQ,MAAMC,8BAAA,CAAwB,MAAA,EAAQ,UAAA,EAAY,gBAAgB,QAAQ,CAAA;AAExF,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,SAAS,KAAA,CAAM,IAAA;AAAA,IACf,iBAAiB,KAAA,CAAM,YAAA;AAAA,IACvB,gBAAgB,KAAA,CAAM;AAAA,GACxB;AACF;AAKA,eAAsB,gBAAA,CACpB,KAAA,EACA,MAAA,EACA,eAAA,EACmB;AACnB,EAAA,IAAI,eAAA,IAAmB,eAAA,CAAgB,MAAA,GAAS,CAAA,EAAG;AACjD,IAAA,OAAO,2BAAA,CAA4B,KAAA,EAAO,MAAA,EAAQ,eAAe,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,4BAAA,CAA6B,OAAO,MAAM,CAAA;AACnD","file":"chunk-XVIICZKW.cjs","sourcesContent":["/**\n * ASP (Association Set Provider) Utilities\n *\n * Thin wrapper around @permissionless-technologies/upc-sdk.\n * Provides pool-specific types (ASPProof with aspId) while delegating\n * Merkle tree operations to the compliance SDK.\n *\n * In UPP, every transfer must prove the origin is in an approved ASP's allowlist.\n *\n * Uses BLS12-381 Poseidon (128-bit security) for Merkle tree operations,\n * matching the circuit hash function.\n */\n\nimport {\n  generateMembershipProof,\n  generateSingleMemberProof,\n  computeMerkleRoot,\n  verifyMembershipProof,\n  DEFAULT_TREE_DEPTH,\n  PoseidonBLS12381,\n} from '@permissionless-technologies/upc-sdk'\n\n// Re-export tree depth from UPC\nexport const ASP_TREE_DEPTH = DEFAULT_TREE_DEPTH\n\n// Use BLS12-381 Poseidon (128-bit security) — matches circuit hash function\nconst bls12381 = new PoseidonBLS12381()\n\n/**\n * ASP Merkle proof structure (pool-specific: includes aspId)\n */\nexport interface ASPProof {\n  /** ASP ID */\n  aspId: bigint\n  /** ASP's published root */\n  aspRoot: bigint\n  /** Path elements (siblings) - 20 levels */\n  aspPathElements: bigint[]\n  /** Path indices - 20 levels */\n  aspPathIndices: number[]\n}\n\n/**\n * Compute the ASP root for a single-leaf tree\n */\nexport async function computeSingleOriginASPRoot(origin: bigint): Promise<bigint> {\n  return origin // LeanIMT single-leaf optimization: root = leaf\n}\n\n/**\n * Generate ASP proof for a single-origin tree\n */\nexport async function generateSingleOriginASPProof(\n  aspId: bigint,\n  origin: bigint\n): Promise<ASPProof> {\n  const proof = generateSingleMemberProof(origin, ASP_TREE_DEPTH)\n  return {\n    aspId,\n    aspRoot: proof.root,\n    aspPathElements: proof.pathElements,\n    aspPathIndices: proof.pathIndices,\n  }\n}\n\n/**\n * Verify an ASP proof locally (for debugging)\n */\nexport async function verifyASPProof(origin: bigint, proof: ASPProof): Promise<boolean> {\n  return verifyMembershipProof(\n    origin,\n    { root: proof.aspRoot, pathElements: proof.aspPathElements, pathIndices: proof.aspPathIndices },\n    bls12381\n  )\n}\n\n/**\n * Demo ASP configuration\n */\nexport const DEMO_ASP_ID = 1n\nexport const DEMO_ASP_NAME = 'Demo ASP (Single-Origin)'\n\n/**\n * Create a \"universal approval\" ASP root\n */\nexport async function createDemoASPRoot(origin: bigint): Promise<bigint> {\n  return computeSingleOriginASPRoot(origin)\n}\n\n/**\n * Build an ASP Merkle tree from multiple origin addresses\n */\nexport function buildASPTree(origins: bigint[]) {\n  const { buildMerkleTree } = require('@permissionless-technologies/upc-sdk') as typeof import('@permissionless-technologies/upc-sdk')\n  return buildMerkleTree(origins, ASP_TREE_DEPTH, bls12381)\n}\n\n/**\n * Compute the Merkle root for a set of approved origins\n */\nexport async function computeMultiOriginASPRoot(origins: bigint[]): Promise<bigint> {\n  return computeMerkleRoot(origins, ASP_TREE_DEPTH, bls12381)\n}\n\n/**\n * Generate an ASP membership proof for one origin within a multi-origin tree\n */\nexport async function generateMultiOriginASPProof(\n  aspId: bigint,\n  origin: bigint,\n  allOrigins: bigint[]\n): Promise<ASPProof> {\n  if (allOrigins.length <= 1) {\n    return generateSingleOriginASPProof(aspId, origin)\n  }\n\n  const proof = await generateMembershipProof(origin, allOrigins, ASP_TREE_DEPTH, bls12381)\n\n  return {\n    aspId,\n    aspRoot: proof.root,\n    aspPathElements: proof.pathElements,\n    aspPathIndices: proof.pathIndices,\n  }\n}\n\n/**\n * Generate an ASP proof, automatically choosing single-origin or multi-origin\n */\nexport async function generateASPProof(\n  aspId: bigint,\n  origin: bigint,\n  approvedOrigins?: bigint[]\n): Promise<ASPProof> {\n  if (approvedOrigins && approvedOrigins.length > 0) {\n    return generateMultiOriginASPProof(aspId, origin, approvedOrigins)\n  }\n  return generateSingleOriginASPProof(aspId, origin)\n}\n"]}

package/dist/{chunk-7Q4RSSHM.js → chunk-ZTVXII74.js}

@@ -998,5 +998,5 @@ function sleep(ms) {
 }
 
 export { computeSearchTag, makeRpcIndexer, matchesSearchTag, tryDecryptNote, unpackNoteData };
-//# sourceMappingURL=chunk-7Q4RSSHM.js.map
-//# sourceMappingURL=chunk-7Q4RSSHM.js.map
+//# sourceMappingURL=chunk-ZTVXII74.js.map
+//# sourceMappingURL=chunk-ZTVXII74.js.map