@permissionless-technologies/upp-sdk 0.4.21 → 0.4.22

package/README.md

@@ -10,7 +10,8 @@ Privacy-preserving token operations for any ERC20 token.
 - **Large anonymity set** — All token users share one Merkle tree
 - **Compliance-ready** — Pluggable ASP (Association Set Provider) with ragequit fallback
 - **Pluggable architecture** — Bring your own account adapter, ASP provider, storage backend
-- **SNARK + STARK** — Dual proof system support (BN254 + Circle STARK)
+- **SNARK + STARK** — Dual proof system: PLONK/BLS12-381 (128-bit, EIP-2537 precompiles) + Circle STARK (post-quantum)
+- **Web Worker proving** — Off-main-thread proof generation keeps UI responsive
 - **Modern stack** — Built on viem, TypeScript strict mode, ESM-first
 
 ## Installation
@@ -37,8 +38,11 @@ import { ... } from '@permissionless-technologies/upp-sdk/react'
 // Indexer: note scanning, storage adapters
 import { ... } from '@permissionless-technologies/upp-sdk/indexer'
 
-// Utilities: poseidon, babyjubjub, merkle trees
+// Utilities: poseidon (BLS12-381), merkle trees
 import { ... } from '@permissionless-technologies/upp-sdk/utils'
+
+// Web Worker for off-main-thread proof generation
+import '@permissionless-technologies/upp-sdk/worker'
 ```
 
 ## Quick Start
@@ -97,7 +101,7 @@ await noteStore.load()
 ├── keys/         # Key derivation (signature, direct, custom)
 ├── react/        # React hooks (useUPPAccount, useShield, etc.)
 ├── indexer/      # Note scanning + pluggable storage
-├── utils/        # Poseidon, BabyJubJub, Merkle trees
+├── utils/        # Poseidon (BLS12-381), Merkle trees
 ├── contracts/    # ABIs + Solidity interfaces
 └── deployments/  # Per-chain contract addresses
 ```

package/dist/chunk-2BSIUEPO.js

@@ -0,0 +1,343 @@
+// src/core/circuit-cache.ts
+var CIRCUIT_VERSION = "20260330";
+var CIRCUIT_CDN_BASE = `https://circuits.upd.io/${CIRCUIT_VERSION}/`;
+var DB_NAME = "upp-circuit-cache";
+var DB_VERSION = 1;
+var STORE_NAME = "artifacts";
+function openDB() {
+  return new Promise((resolve, reject) => {
+    const request = indexedDB.open(DB_NAME, DB_VERSION);
+    request.onupgradeneeded = () => {
+      const db = request.result;
+      if (!db.objectStoreNames.contains(STORE_NAME)) {
+        db.createObjectStore(STORE_NAME, { keyPath: "key" });
+      }
+    };
+    request.onsuccess = () => resolve(request.result);
+    request.onerror = () => reject(request.error);
+  });
+}
+async function idbGet(key) {
+  const db = await openDB();
+  return new Promise((resolve, reject) => {
+    const tx = db.transaction(STORE_NAME, "readonly");
+    const store = tx.objectStore(STORE_NAME);
+    const req = store.get(key);
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+    tx.oncomplete = () => db.close();
+  });
+}
+async function idbPut(entry) {
+  const db = await openDB();
+  return new Promise((resolve, reject) => {
+    const tx = db.transaction(STORE_NAME, "readwrite");
+    const store = tx.objectStore(STORE_NAME);
+    store.put(entry);
+    tx.oncomplete = () => {
+      db.close();
+      resolve();
+    };
+    tx.onerror = () => {
+      db.close();
+      reject(tx.error);
+    };
+  });
+}
+async function idbDelete(key) {
+  const db = await openDB();
+  return new Promise((resolve, reject) => {
+    const tx = db.transaction(STORE_NAME, "readwrite");
+    const store = tx.objectStore(STORE_NAME);
+    store.delete(key);
+    tx.oncomplete = () => {
+      db.close();
+      resolve();
+    };
+    tx.onerror = () => {
+      db.close();
+      reject(tx.error);
+    };
+  });
+}
+async function idbGetAllKeys() {
+  const db = await openDB();
+  return new Promise((resolve, reject) => {
+    const tx = db.transaction(STORE_NAME, "readonly");
+    const store = tx.objectStore(STORE_NAME);
+    const req = store.getAllKeys();
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+    tx.oncomplete = () => db.close();
+  });
+}
+async function idbGetAll() {
+  const db = await openDB();
+  return new Promise((resolve, reject) => {
+    const tx = db.transaction(STORE_NAME, "readonly");
+    const store = tx.objectStore(STORE_NAME);
+    const req = store.getAll();
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+    tx.oncomplete = () => db.close();
+  });
+}
+async function idbClear() {
+  const db = await openDB();
+  return new Promise((resolve, reject) => {
+    const tx = db.transaction(STORE_NAME, "readwrite");
+    const store = tx.objectStore(STORE_NAME);
+    store.clear();
+    tx.oncomplete = () => {
+      db.close();
+      resolve();
+    };
+    tx.onerror = () => {
+      db.close();
+      reject(tx.error);
+    };
+  });
+}
+async function downloadWithProgress(url, circuitType, artifact, onProgress, signal) {
+  const response = await fetch(url, { signal });
+  if (!response.ok) {
+    throw new Error(`Failed to download ${artifact} for ${circuitType}: ${response.status} ${response.statusText}`);
+  }
+  const contentLength = parseInt(response.headers.get("Content-Length") ?? "0", 10);
+  if (response.body && contentLength > 0 && onProgress) {
+    const reader = response.body.getReader();
+    const chunks = [];
+    let bytesDownloaded = 0;
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      chunks.push(value);
+      bytesDownloaded += value.length;
+      onProgress({
+        circuitType,
+        artifact,
+        bytesDownloaded,
+        totalBytes: contentLength,
+        percent: Math.round(bytesDownloaded / contentLength * 100)
+      });
+    }
+    const result = new Uint8Array(bytesDownloaded);
+    let offset = 0;
+    for (const chunk of chunks) {
+      result.set(chunk, offset);
+      offset += chunk.length;
+    }
+    return result;
+  }
+  const buffer = await response.arrayBuffer();
+  return new Uint8Array(buffer);
+}
+var ALL_CIRCUITS = [
+  "transfer",
+  "withdraw",
+  "merge",
+  "merge_transfer_2x2",
+  "merge_transfer_4x2",
+  "joinsplit"
+];
+var CircuitArtifactCache = class _CircuitArtifactCache {
+  // Lazy singleton per JS context (main thread and workers get their own)
+  static _instance = null;
+  static shared() {
+    if (!_CircuitArtifactCache._instance) {
+      _CircuitArtifactCache._instance = new _CircuitArtifactCache();
+    }
+    return _CircuitArtifactCache._instance;
+  }
+  /** In-flight download deduplication */
+  inflight = /* @__PURE__ */ new Map();
+  constructor() {
+  }
+  // --------------------------------------------------------------------------
+  // Key helpers
+  // --------------------------------------------------------------------------
+  key(circuit, artifact, version = CIRCUIT_VERSION) {
+    return `${version}_${circuit}_${artifact}`;
+  }
+  resolveBaseUrl(baseUrl) {
+    const url = baseUrl ?? CIRCUIT_CDN_BASE;
+    return url.endsWith("/") ? url : `${url}/`;
+  }
+  // --------------------------------------------------------------------------
+  // Public API
+  // --------------------------------------------------------------------------
+  /**
+   * Check if both wasm + zkey are cached for a circuit (current CIRCUIT_VERSION).
+   */
+  async isCached(circuit) {
+    const [wasm, zkey] = await Promise.all([
+      idbGet(this.key(circuit, "wasm")),
+      idbGet(this.key(circuit, "zkey"))
+    ]);
+    return wasm !== void 0 && zkey !== void 0;
+  }
+  /**
+   * Download and cache a circuit's artifacts. No-ops if already cached.
+   *
+   * @param circuit - Which circuit to preload
+   * @param baseUrl - CDN base URL (defaults to `https://circuits.upd.io/${CIRCUIT_VERSION}/`)
+   * @param onProgress - Byte-level download progress callback
+   * @param signal - AbortSignal for cancellation
+   */
+  async preload(circuit, baseUrl, onProgress, signal) {
+    await this.getArtifacts(circuit, baseUrl, onProgress, signal);
+  }
+  /**
+   * Get artifacts from cache, downloading if needed.
+   * Returns Uint8Array data ready to pass to snarkjs.plonk.fullProve().
+   */
+  async getArtifacts(circuit, baseUrl, onProgress, signal) {
+    const [wasm, zkey] = await Promise.all([
+      this.getOrDownload(circuit, "wasm", baseUrl, onProgress, signal),
+      this.getOrDownload(circuit, "zkey", baseUrl, onProgress, signal)
+    ]);
+    return { wasm, zkey };
+  }
+  /**
+   * List all cached circuit types (current version only).
+   */
+  async getCachedCircuits() {
+    const keys = await idbGetAllKeys();
+    const prefix = `${CIRCUIT_VERSION}_`;
+    const cached = /* @__PURE__ */ new Set();
+    for (const k of keys) {
+      if (!k.startsWith(prefix)) continue;
+      const rest = k.slice(prefix.length);
+      const lastUnderscore = rest.lastIndexOf("_");
+      if (lastUnderscore > 0) {
+        cached.add(rest.slice(0, lastUnderscore));
+      }
+    }
+    return ALL_CIRCUITS.filter((c) => cached.has(c));
+  }
+  /**
+   * Get cache size information.
+   */
+  async getCacheSize() {
+    const entries = await idbGetAll();
+    let total = 0;
+    const circuits = {};
+    for (const entry of entries) {
+      total += entry.size;
+      const parts = entry.key.split("_");
+      if (parts.length >= 3) {
+        const circuit = parts.slice(1, -1).join("_");
+        circuits[circuit] = (circuits[circuit] ?? 0) + entry.size;
+      }
+    }
+    return { total, circuits };
+  }
+  /**
+   * Get cache status for all circuit types.
+   */
+  async getStatus() {
+    const entries = await idbGetAll();
+    const result = /* @__PURE__ */ new Map();
+    const prefix = `${CIRCUIT_VERSION}_`;
+    for (const c of ALL_CIRCUITS) {
+      result.set(c, { cached: false });
+    }
+    const wasmMap = /* @__PURE__ */ new Map();
+    const zkeyMap = /* @__PURE__ */ new Map();
+    for (const entry of entries) {
+      if (!entry.key.startsWith(prefix)) continue;
+      const rest = entry.key.slice(prefix.length);
+      const lastUnderscore = rest.lastIndexOf("_");
+      const circuit = rest.slice(0, lastUnderscore);
+      const artifact = rest.slice(lastUnderscore + 1);
+      if (artifact === "wasm") wasmMap.set(circuit, entry.size);
+      else if (artifact === "zkey") zkeyMap.set(circuit, entry.size);
+    }
+    for (const c of ALL_CIRCUITS) {
+      const hasWasm = wasmMap.has(c);
+      const hasZkey = zkeyMap.has(c);
+      result.set(c, {
+        cached: hasWasm && hasZkey,
+        wasmSize: wasmMap.get(c),
+        zkeySize: zkeyMap.get(c)
+      });
+    }
+    return result;
+  }
+  /**
+   * Evict a specific circuit from cache (current version).
+   */
+  async evict(circuit) {
+    await Promise.all([
+      idbDelete(this.key(circuit, "wasm")),
+      idbDelete(this.key(circuit, "zkey"))
+    ]);
+  }
+  /**
+   * Evict all cached circuit artifacts (all versions).
+   */
+  async evictAll() {
+    await idbClear();
+  }
+  /**
+   * Evict all artifacts for a specific version (for cleaning up after SDK updates).
+   */
+  async evictVersion(version) {
+    const keys = await idbGetAllKeys();
+    const prefix = `${version}_`;
+    const toDelete = keys.filter((k) => k.startsWith(prefix));
+    for (const k of toDelete) {
+      await idbDelete(k);
+    }
+  }
+  /**
+   * Request persistent storage to prevent browser from evicting the cache.
+   * Returns true if granted, false if denied or unavailable.
+   */
+  async requestPersistence() {
+    if (typeof navigator !== "undefined" && navigator.storage?.persist) {
+      return navigator.storage.persist();
+    }
+    return false;
+  }
+  // --------------------------------------------------------------------------
+  // Internal
+  // --------------------------------------------------------------------------
+  async getOrDownload(circuit, artifact, baseUrl, onProgress, signal) {
+    const cacheKey = this.key(circuit, artifact);
+    const cached = await idbGet(cacheKey);
+    if (cached) {
+      return cached.data;
+    }
+    const inflightKey = `${cacheKey}_${this.resolveBaseUrl(baseUrl)}`;
+    const existing = this.inflight.get(inflightKey);
+    if (existing) {
+      return existing;
+    }
+    const downloadPromise = this.downloadAndStore(circuit, artifact, baseUrl, onProgress, signal);
+    this.inflight.set(inflightKey, downloadPromise);
+    try {
+      const data = await downloadPromise;
+      return data;
+    } finally {
+      this.inflight.delete(inflightKey);
+    }
+  }
+  async downloadAndStore(circuit, artifact, baseUrl, onProgress, signal) {
+    const base = this.resolveBaseUrl(baseUrl);
+    const url = `${base}${circuit}.${artifact}`;
+    const data = await downloadWithProgress(url, circuit, artifact, onProgress, signal);
+    await idbPut({
+      key: this.key(circuit, artifact),
+      data,
+      size: data.byteLength,
+      cachedAt: Date.now(),
+      version: CIRCUIT_VERSION
+    });
+    return data;
+  }
+};
+
+export { CIRCUIT_CDN_BASE, CIRCUIT_VERSION, CircuitArtifactCache };
+//# sourceMappingURL=chunk-2BSIUEPO.js.map
+//# sourceMappingURL=chunk-2BSIUEPO.js.map

package/dist/chunk-2BSIUEPO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/circuit-cache.ts"],"names":[],"mappings":";AAqBO,IAAM,eAAA,GAAkB;AAGxB,IAAM,gBAAA,GAAmB,2BAA2B,eAAe,CAAA,CAAA;AAE1E,IAAM,OAAA,GAAU,mBAAA;AAChB,IAAM,UAAA,GAAa,CAAA;AACnB,IAAM,UAAA,GAAa,WAAA;AA0CnB,SAAS,MAAA,GAA+B;AACtC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,OAAA,GAAU,SAAA,CAAU,IAAA,CAAK,OAAA,EAAS,UAAU,CAAA;AAElD,IAAA,OAAA,CAAQ,kBAAkB,MAAM;AAC9B,MAAA,MAAM,KAAK,OAAA,CAAQ,MAAA;AACnB,MAAA,IAAI,CAAC,EAAA,CAAG,gBAAA,CAAiB,QAAA,CAAS,UAAU,CAAA,EAAG;AAC7C,QAAA,EAAA,CAAG,iBAAA,CAAkB,UAAA,EAAY,EAAE,OAAA,EAAS,OAAO,CAAA;AAAA,MACrD;AAAA,IACF,CAAA;AAEA,IAAA,OAAA,CAAQ,SAAA,GAAY,MAAM,OAAA,CAAQ,OAAA,CAAQ,MAAM,CAAA;AAChD,IAAA,OAAA,CAAQ,OAAA,GAAU,MAAM,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA;AAAA,EAC9C,CAAC,CAAA;AACH;AAEA,eAAe,OAAO,GAAA,EAA8C;AAClE,EAAA,MAAM,EAAA,GAAK,MAAM,MAAA,EAAO;AACxB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,EAAA,GAAK,EAAA,CAAG,WAAA,CAAY,UAAA,EAAY,UAAU,CAAA;AAChD,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,WAAA,CAAY,UAAU,CAAA;AACvC,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AACzB,IAAA,GAAA,CAAI,SAAA,GAAY,MAAM,OAAA,CAAQ,GAAA,CAAI,MAAgC,CAAA;AAClE,IAAA,GAAA,CAAI,OAAA,GAAU,MAAM,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA;AACpC,IAAA,EAAA,CAAG,UAAA,GAAa,MAAM,EAAA,CAAG,KAAA,EAAM;AAAA,EACjC,CAAC,CAAA;AACH;AAEA,eAAe,OAAO,KAAA,EAAkC;AACtD,EAAA,MAAM,EAAA,GAAK,MAAM,MAAA,EAAO;AACxB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,EAAA,GAAK,EAAA,CAAG,WAAA,CAAY,UAAA,EAAY,WAAW,CAAA;AACjD,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,WAAA,CAAY,UAAU,CAAA;AACvC,IAAA,KAAA,CAAM,IAAI,KAAK,CAAA;AACf,IAAA,EAAA,CAAG,aAAa,MAAM;AAAE,MAAA,EAAA,CAAG,KAAA,EAAM;AAAG,MAAA,OAAA,EAAQ;AAAA,IAAE,CAAA;AAC9C,IAAA,EAAA,CAAG,UAAU,MAAM;AAAE,MAAA,EAAA,CAAG,KAAA,EAAM;AAAG,MAAA,MAAA,CAAO,GAAG,KAAK,CAAA;AAAA,IAAE,CAAA;AAAA,EACpD,CAAC,CAAA;AACH;AAEA,eAAe,UAAU,GAAA,EAA4B;AACnD,EAAA,MAAM,EAAA,GAAK,MAAM,MAAA,EAAO;AACxB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,EAAA,GAAK,EAAA,CAAG,WAAA,CAAY,UAAA,EAAY,WAAW,CAAA;AACjD,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,WAAA,CAAY,UAAU,CAAA;AACvC,IAAA,KAAA,CAAM,OAAO,GAAG,CAAA;AAChB,IAAA,EAAA,CAAG,aAAa,MAAM;AAAE,MAAA,EAAA,CAAG,KAAA,EAAM;AAAG,MAAA,OAAA,EAAQ;AAAA,IAAE,CAAA;AAC9C,IAAA,EAAA,CAAG,UAAU,MAAM;AAAE,MAAA,EAAA,CAAG,KAAA,EAAM;AAAG,MAAA,MAAA,CAAO,GAAG,KAAK,CAAA;AAAA,IAAE,CAAA;AAAA,EACpD,CAAC,CAAA;AACH;AAEA,eAAe,aAAA,GAAmC;AAChD,EAAA,MAAM,EAAA,GAAK,MAAM,MAAA,EAAO;AACxB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,EAAA,GAAK,EAAA,CAAG,WAAA,CAAY,UAAA,EAAY,UAAU,CAAA;AAChD,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,WAAA,CAAY,UAAU,CAAA;AACvC,IAAA,MAAM,GAAA,GAAM,MAAM,UAAA,EAAW;AAC7B,IAAA,GAAA,CAAI,SAAA,GAAY,MAAM,OAAA,CAAQ,GAAA,CAAI,MAAkB,CAAA;AACpD,IAAA,GAAA,CAAI,OAAA,GAAU,MAAM,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA;AACpC,IAAA,EAAA,CAAG,UAAA,GAAa,MAAM,EAAA,CAAG,KAAA,EAAM;AAAA,EACjC,CAAC,CAAA;AACH;AAEA,eAAe,SAAA,GAAmC;AAChD,EAAA,MAAM,EAAA,GAAK,MAAM,MAAA,EAAO;AACxB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,EAAA,GAAK,EAAA,CAAG,WAAA,CAAY,UAAA,EAAY,UAAU,CAAA;AAChD,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,WAAA,CAAY,UAAU,CAAA;AACvC,IAAA,MAAM,GAAA,GAAM,MAAM,MAAA,EAAO;AACzB,IAAA,GAAA,CAAI,SAAA,GAAY,MAAM,OAAA,CAAQ,GAAA,CAAI,MAAsB,CAAA;AACxD,IAAA,GAAA,CAAI,OAAA,GAAU,MAAM,MAAA,CAAO,GAAA,CAAI,KAAK,CAAA;AACpC,IAAA,EAAA,CAAG,UAAA,GAAa,MAAM,EAAA,CAAG,KAAA,EAAM;AAAA,EACjC,CAAC,CAAA;AACH;AAEA,eAAe,QAAA,GAA0B;AACvC,EAAA,MAAM,EAAA,GAAK,MAAM,MAAA,EAAO;AACxB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,EAAA,GAAK,EAAA,CAAG,WAAA,CAAY,UAAA,EAAY,WAAW,CAAA;AACjD,IAAA,MAAM,KAAA,GAAQ,EAAA,CAAG,WAAA,CAAY,UAAU,CAAA;AACvC,IAAA,KAAA,CAAM,KAAA,EAAM;AACZ,IAAA,EAAA,CAAG,aAAa,MAAM;AAAE,MAAA,EAAA,CAAG,KAAA,EAAM;AAAG,MAAA,OAAA,EAAQ;AAAA,IAAE,CAAA;AAC9C,IAAA,EAAA,CAAG,UAAU,MAAM;AAAE,MAAA,EAAA,CAAG,KAAA,EAAM;AAAG,MAAA,MAAA,CAAO,GAAG,KAAK,CAAA;AAAA,IAAE,CAAA;AAAA,EACpD,CAAC,CAAA;AACH;AAMA,eAAe,oBAAA,CACb,GAAA,EACA,WAAA,EACA,QAAA,EACA,YACA,MAAA,EACqB;AACrB,EAAA,MAAM,WAAW,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,QAAQ,CAAA;AAE5C,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,QAAQ,CAAA,KAAA,EAAQ,WAAW,CAAA,EAAA,EAAK,QAAA,CAAS,MAAM,CAAA,CAAA,EAAI,QAAA,CAAS,UAAU,CAAA,CAAE,CAAA;AAAA,EAChH;AAEA,EAAA,MAAM,aAAA,GAAgB,SAAS,QAAA,CAAS,OAAA,CAAQ,IAAI,gBAAgB,CAAA,IAAK,KAAK,EAAE,CAAA;AAGhF,EAAA,IAAI,QAAA,CAAS,IAAA,IAAQ,aAAA,GAAgB,CAAA,IAAK,UAAA,EAAY;AACpD,IAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,CAAK,SAAA,EAAU;AACvC,IAAA,MAAM,SAAuB,EAAC;AAC9B,IAAA,IAAI,eAAA,GAAkB,CAAA;AAEtB,IAAA,OAAO,IAAA,EAAM;AACX,MAAA,MAAM,EAAE,IAAA,EAAM,KAAA,EAAM,GAAI,MAAM,OAAO,IAAA,EAAK;AAC1C,MAAA,IAAI,IAAA,EAAM;AAEV,MAAA,MAAA,CAAO,KAAK,KAAK,CAAA;AACjB,MAAA,eAAA,IAAmB,KAAA,CAAM,MAAA;AAEzB,MAAA,UAAA,CAAW;AAAA,QACT,WAAA;AAAA,QACA,QAAA;AAAA,QACA,eAAA;AAAA,QACA,UAAA,EAAY,aAAA;AAAA,QACZ,OAAA,EAAS,IAAA,CAAK,KAAA,CAAO,eAAA,GAAkB,gBAAiB,GAAG;AAAA,OAC5D,CAAA;AAAA,IACH;AAGA,IAAA,MAAM,MAAA,GAAS,IAAI,UAAA,CAAW,eAAe,CAAA;AAC7C,IAAA,IAAI,MAAA,GAAS,CAAA;AACb,IAAA,KAAA,MAAW,SAAS,MAAA,EAAQ;AAC1B,MAAA,MAAA,CAAO,GAAA,CAAI,OAAO,MAAM,CAAA;AACxB,MAAA,MAAA,IAAU,KAAA,CAAM,MAAA;AAAA,IAClB;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,WAAA,EAAY;AAC1C,EAAA,OAAO,IAAI,WAAW,MAAM,CAAA;AAC9B;AAOA,IAAM,YAAA,GAAiC;AAAA,EACrC,UAAA;AAAA,EAAY,UAAA;AAAA,EAAY,OAAA;AAAA,EACxB,oBAAA;AAAA,EAAsB,oBAAA;AAAA,EAAsB;AAC9C,CAAA;AAEO,IAAM,oBAAA,GAAN,MAAM,qBAAA,CAAqB;AAAA;AAAA,EAEhC,OAAe,SAAA,GAAyC,IAAA;AAAA,EAExD,OAAO,MAAA,GAA+B;AACpC,IAAA,IAAI,CAAC,sBAAqB,SAAA,EAAW;AACnC,MAAA,qBAAA,CAAqB,SAAA,GAAY,IAAI,qBAAA,EAAqB;AAAA,IAC5D;AACA,IAAA,OAAO,qBAAA,CAAqB,SAAA;AAAA,EAC9B;AAAA;AAAA,EAGQ,QAAA,uBAAe,GAAA,EAAiC;AAAA,EAEhD,WAAA,GAAc;AAAA,EAAC;AAAA;AAAA;AAAA;AAAA,EAMf,GAAA,CAAI,OAAA,EAAyB,QAAA,EAA2B,OAAA,GAAU,eAAA,EAAyB;AACjG,IAAA,OAAO,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,OAAO,IAAI,QAAQ,CAAA,CAAA;AAAA,EAC1C;AAAA,EAEQ,eAAe,OAAA,EAA0B;AAC/C,IAAA,MAAM,MAAM,OAAA,IAAW,gBAAA;AACvB,IAAA,OAAO,IAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,GAAM,GAAG,GAAG,CAAA,CAAA,CAAA;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,SAAS,OAAA,EAA2C;AACxD,IAAA,MAAM,CAAC,IAAA,EAAM,IAAI,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MACrC,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,MAAM,CAAC,CAAA;AAAA,MAChC,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,MAAM,CAAC;AAAA,KACjC,CAAA;AACD,IAAA,OAAO,IAAA,KAAS,UAAa,IAAA,KAAS,MAAA;AAAA,EACxC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,OAAA,CACJ,OAAA,EACA,OAAA,EACA,YACA,MAAA,EACe;AACf,IAAA,MAAM,IAAA,CAAK,YAAA,CAAa,OAAA,EAAS,OAAA,EAAS,YAAY,MAAM,CAAA;AAAA,EAC9D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,YAAA,CACJ,OAAA,EACA,OAAA,EACA,YACA,MAAA,EACmC;AACnC,IAAA,MAAM,CAAC,IAAA,EAAM,IAAI,CAAA,GAAI,MAAM,QAAQ,GAAA,CAAI;AAAA,MACrC,KAAK,aAAA,CAAc,OAAA,EAAS,MAAA,EAAQ,OAAA,EAAS,YAAY,MAAM,CAAA;AAAA,MAC/D,KAAK,aAAA,CAAc,OAAA,EAAS,MAAA,EAAQ,OAAA,EAAS,YAAY,MAAM;AAAA,KAChE,CAAA;AACD,IAAA,OAAO,EAAE,MAAM,IAAA,EAAK;AAAA,EACtB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,iBAAA,GAA+C;AACnD,IAAA,MAAM,IAAA,GAAO,MAAM,aAAA,EAAc;AACjC,IAAA,MAAM,MAAA,GAAS,GAAG,eAAe,CAAA,CAAA,CAAA;AACjC,IAAA,MAAM,MAAA,uBAAa,GAAA,EAAY;AAE/B,IAAA,KAAA,MAAW,KAAK,IAAA,EAAM;AACpB,MAAA,IAAI,CAAC,CAAA,CAAE,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAA,GAAO,CAAA,CAAE,KAAA,CAAM,MAAA,CAAO,MAAM,CAAA;AAElC,MAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,WAAA,CAAY,GAAG,CAAA;AAC3C,MAAA,IAAI,iBAAiB,CAAA,EAAG;AACtB,QAAA,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,cAAc,CAAC,CAAA;AAAA,MAC1C;AAAA,IACF;AAEA,IAAA,OAAO,aAAa,MAAA,CAAO,CAAA,CAAA,KAAK,MAAA,CAAO,GAAA,CAAI,CAAC,CAAC,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,YAAA,GAA6E;AACjF,IAAA,MAAM,OAAA,GAAU,MAAM,SAAA,EAAU;AAChC,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,MAAM,WAAmC,EAAC;AAE1C,IAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,MAAA,KAAA,IAAS,KAAA,CAAM,IAAA;AAEf,MAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA;AAEjC,MAAA,IAAI,KAAA,CAAM,UAAU,CAAA,EAAG;AACrB,QAAA,MAAM,UAAU,KAAA,CAAM,KAAA,CAAM,GAAG,EAAE,CAAA,CAAE,KAAK,GAAG,CAAA;AAC3C,QAAA,QAAA,CAAS,OAAO,CAAA,GAAA,CAAK,QAAA,CAAS,OAAO,CAAA,IAAK,KAAK,KAAA,CAAM,IAAA;AAAA,MACvD;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,OAAO,QAAA,EAAS;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAA,GAA8D;AAClE,IAAA,MAAM,OAAA,GAAU,MAAM,SAAA,EAAU;AAChC,IAAA,MAAM,MAAA,uBAAa,GAAA,EAAwC;AAC3D,IAAA,MAAM,MAAA,GAAS,GAAG,eAAe,CAAA,CAAA,CAAA;AAGjC,IAAA,KAAA,MAAW,KAAK,YAAA,EAAc;AAC5B,MAAA,MAAA,CAAO,GAAA,CAAI,CAAA,EAAG,EAAE,MAAA,EAAQ,OAAO,CAAA;AAAA,IACjC;AAGA,IAAA,MAAM,OAAA,uBAAc,GAAA,EAAoB;AACxC,IAAA,MAAM,OAAA,uBAAc,GAAA,EAAoB;AAExC,IAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,MAAA,IAAI,CAAC,KAAA,CAAM,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AACnC,MAAA,MAAM,IAAA,GAAO,KAAA,CAAM,GAAA,CAAI,KAAA,CAAM,OAAO,MAAM,CAAA;AAC1C,MAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,WAAA,CAAY,GAAG,CAAA;AAC3C,MAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,cAAc,CAAA;AAC5C,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,cAAA,GAAiB,CAAC,CAAA;AAE9C,MAAA,IAAI,aAAa,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,OAAA,EAAS,MAAM,IAAI,CAAA;AAAA,WAAA,IAC/C,aAAa,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,OAAA,EAAS,MAAM,IAAI,CAAA;AAAA,IAC/D;AAEA,IAAA,KAAA,MAAW,KAAK,YAAA,EAAc;AAC5B,MAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA;AAC7B,MAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA;AAC7B,MAAA,MAAA,CAAO,IAAI,CAAA,EAAG;AAAA,QACZ,QAAQ,OAAA,IAAW,OAAA;AAAA,QACnB,QAAA,EAAU,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA;AAAA,QACvB,QAAA,EAAU,OAAA,CAAQ,GAAA,CAAI,CAAC;AAAA,OACxB,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,MAAM,OAAA,EAAwC;AAClD,IAAA,MAAM,QAAQ,GAAA,CAAI;AAAA,MAChB,SAAA,CAAU,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,MAAM,CAAC,CAAA;AAAA,MACnC,SAAA,CAAU,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,MAAM,CAAC;AAAA,KACpC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAA,GAA0B;AAC9B,IAAA,MAAM,QAAA,EAAS;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,aAAa,OAAA,EAAgC;AACjD,IAAA,MAAM,IAAA,GAAO,MAAM,aAAA,EAAc;AACjC,IAAA,MAAM,MAAA,GAAS,GAAG,OAAO,CAAA,CAAA,CAAA;AACzB,IAAA,MAAM,WAAW,IAAA,CAAK,MAAA,CAAO,OAAK,CAAA,CAAE,UAAA,CAAW,MAAM,CAAC,CAAA;AACtD,IAAA,KAAA,MAAW,KAAK,QAAA,EAAU;AACxB,MAAA,MAAM,UAAU,CAAC,CAAA;AAAA,IACnB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,kBAAA,GAAuC;AAC3C,IAAA,IAAI,OAAO,SAAA,KAAc,WAAA,IAAe,SAAA,CAAU,SAAS,OAAA,EAAS;AAClE,MAAA,OAAO,SAAA,CAAU,QAAQ,OAAA,EAAQ;AAAA,IACnC;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,aAAA,CACZ,OAAA,EACA,QAAA,EACA,OAAA,EACA,YACA,MAAA,EACqB;AACrB,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,QAAQ,CAAA;AAG3C,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,QAAQ,CAAA;AACpC,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,OAAO,MAAA,CAAO,IAAA;AAAA,IAChB;AAGA,IAAA,MAAM,cAAc,CAAA,EAAG,QAAQ,IAAI,IAAA,CAAK,cAAA,CAAe,OAAO,CAAC,CAAA,CAAA;AAC/D,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,WAAW,CAAA;AAC9C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,OAAO,QAAA;AAAA,IACT;AAEA,IAAA,MAAM,kBAAkB,IAAA,CAAK,gBAAA,CAAiB,SAAS,QAAA,EAAU,OAAA,EAAS,YAAY,MAAM,CAAA;AAE5F,IAAA,IAAA,CAAK,QAAA,CAAS,GAAA,CAAI,WAAA,EAAa,eAAe,CAAA;AAC9C,IAAA,IAAI;AACF,MAAA,MAAM,OAAO,MAAM,eAAA;AACnB,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,QAAA,CAAS,OAAO,WAAW,CAAA;AAAA,IAClC;AAAA,EACF;AAAA,EAEA,MAAc,gBAAA,CACZ,OAAA,EACA,QAAA,EACA,OAAA,EACA,YACA,MAAA,EACqB;AACrB,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,cAAA,CAAe,OAAO,CAAA;AACxC,IAAA,MAAM,MAAM,CAAA,EAAG,IAAI,CAAA,EAAG,OAAO,IAAI,QAAQ,CAAA,CAAA;AAEzC,IAAA,MAAM,OAAO,MAAM,oBAAA,CAAqB,KAAK,OAAA,EAAS,QAAA,EAAU,YAAY,MAAM,CAAA;AAGlF,IAAA,MAAM,MAAA,CAAO;AAAA,MACX,GAAA,EAAK,IAAA,CAAK,GAAA,CAAI,OAAA,EAAS,QAAQ,CAAA;AAAA,MAC/B,IAAA;AAAA,MACA,MAAM,IAAA,CAAK,UAAA;AAAA,MACX,QAAA,EAAU,KAAK,GAAA,EAAI;AAAA,MACnB,OAAA,EAAS;AAAA,KACV,CAAA;AAED,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"chunk-2BSIUEPO.js","sourcesContent":["/**\n * Circuit Artifact Cache — IndexedDB-based caching for PLONK circuit files.\n *\n * Downloads circuit artifacts (wasm + zkey) with progress reporting via\n * ReadableStream, caches them in IndexedDB, and returns Uint8Array data\n * that can be passed directly to snarkjs.plonk.fullProve().\n *\n * Works in both main thread and Web Worker contexts.\n */\n\nimport type { UPPCircuitType } from './proof.js'\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/**\n * Current circuit artifact version (date-based).\n * Bump this when circuits are recompiled (new trusted setup, circuit changes).\n * Old cached artifacts are ignored (different key prefix in IndexedDB).\n */\nexport const CIRCUIT_VERSION = '20260330'\n\n/** Default CDN base URL for circuit artifacts */\nexport const CIRCUIT_CDN_BASE = `https://circuits.upd.io/${CIRCUIT_VERSION}/`\n\nconst DB_NAME = 'upp-circuit-cache'\nconst DB_VERSION = 1\nconst STORE_NAME = 'artifacts'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/** Progress report during circuit artifact download */\nexport interface DownloadProgress {\n  circuitType: UPPCircuitType\n  artifact: 'wasm' | 'zkey'\n  bytesDownloaded: number\n  totalBytes: number\n  /** 0-100 */\n  percent: number\n}\n\n/** Resolved (binary) circuit artifacts ready for snarkjs */\nexport interface ResolvedCircuitArtifacts {\n  wasm: Uint8Array\n  zkey: Uint8Array\n}\n\n/** Cache entry stored in IndexedDB */\ninterface CacheEntry {\n  key: string\n  data: Uint8Array\n  size: number\n  cachedAt: number\n  version: string\n}\n\n/** Per-circuit cache status */\nexport interface CircuitCacheStatus {\n  cached: boolean\n  wasmSize?: number\n  zkeySize?: number\n}\n\n// ============================================================================\n// IndexedDB Helpers (thin promise wrapper, no external deps)\n// ============================================================================\n\nfunction openDB(): Promise<IDBDatabase> {\n  return new Promise((resolve, reject) => {\n    const request = indexedDB.open(DB_NAME, DB_VERSION)\n\n    request.onupgradeneeded = () => {\n      const db = request.result\n      if (!db.objectStoreNames.contains(STORE_NAME)) {\n        db.createObjectStore(STORE_NAME, { keyPath: 'key' })\n      }\n    }\n\n    request.onsuccess = () => resolve(request.result)\n    request.onerror = () => reject(request.error)\n  })\n}\n\nasync function idbGet(key: string): Promise<CacheEntry | undefined> {\n  const db = await openDB()\n  return new Promise((resolve, reject) => {\n    const tx = db.transaction(STORE_NAME, 'readonly')\n    const store = tx.objectStore(STORE_NAME)\n    const req = store.get(key)\n    req.onsuccess = () => resolve(req.result as CacheEntry | undefined)\n    req.onerror = () => reject(req.error)\n    tx.oncomplete = () => db.close()\n  })\n}\n\nasync function idbPut(entry: CacheEntry): Promise<void> {\n  const db = await openDB()\n  return new Promise((resolve, reject) => {\n    const tx = db.transaction(STORE_NAME, 'readwrite')\n    const store = tx.objectStore(STORE_NAME)\n    store.put(entry)\n    tx.oncomplete = () => { db.close(); resolve() }\n    tx.onerror = () => { db.close(); reject(tx.error) }\n  })\n}\n\nasync function idbDelete(key: string): Promise<void> {\n  const db = await openDB()\n  return new Promise((resolve, reject) => {\n    const tx = db.transaction(STORE_NAME, 'readwrite')\n    const store = tx.objectStore(STORE_NAME)\n    store.delete(key)\n    tx.oncomplete = () => { db.close(); resolve() }\n    tx.onerror = () => { db.close(); reject(tx.error) }\n  })\n}\n\nasync function idbGetAllKeys(): Promise<string[]> {\n  const db = await openDB()\n  return new Promise((resolve, reject) => {\n    const tx = db.transaction(STORE_NAME, 'readonly')\n    const store = tx.objectStore(STORE_NAME)\n    const req = store.getAllKeys()\n    req.onsuccess = () => resolve(req.result as string[])\n    req.onerror = () => reject(req.error)\n    tx.oncomplete = () => db.close()\n  })\n}\n\nasync function idbGetAll(): Promise<CacheEntry[]> {\n  const db = await openDB()\n  return new Promise((resolve, reject) => {\n    const tx = db.transaction(STORE_NAME, 'readonly')\n    const store = tx.objectStore(STORE_NAME)\n    const req = store.getAll()\n    req.onsuccess = () => resolve(req.result as CacheEntry[])\n    req.onerror = () => reject(req.error)\n    tx.oncomplete = () => db.close()\n  })\n}\n\nasync function idbClear(): Promise<void> {\n  const db = await openDB()\n  return new Promise((resolve, reject) => {\n    const tx = db.transaction(STORE_NAME, 'readwrite')\n    const store = tx.objectStore(STORE_NAME)\n    store.clear()\n    tx.oncomplete = () => { db.close(); resolve() }\n    tx.onerror = () => { db.close(); reject(tx.error) }\n  })\n}\n\n// ============================================================================\n// Download with progress\n// ============================================================================\n\nasync function downloadWithProgress(\n  url: string,\n  circuitType: UPPCircuitType,\n  artifact: 'wasm' | 'zkey',\n  onProgress?: (p: DownloadProgress) => void,\n  signal?: AbortSignal,\n): Promise<Uint8Array> {\n  const response = await fetch(url, { signal })\n\n  if (!response.ok) {\n    throw new Error(`Failed to download ${artifact} for ${circuitType}: ${response.status} ${response.statusText}`)\n  }\n\n  const contentLength = parseInt(response.headers.get('Content-Length') ?? '0', 10)\n\n  // If ReadableStream is available and we have Content-Length, stream with progress\n  if (response.body && contentLength > 0 && onProgress) {\n    const reader = response.body.getReader()\n    const chunks: Uint8Array[] = []\n    let bytesDownloaded = 0\n\n    while (true) {\n      const { done, value } = await reader.read()\n      if (done) break\n\n      chunks.push(value)\n      bytesDownloaded += value.length\n\n      onProgress({\n        circuitType,\n        artifact,\n        bytesDownloaded,\n        totalBytes: contentLength,\n        percent: Math.round((bytesDownloaded / contentLength) * 100),\n      })\n    }\n\n    // Combine chunks into single Uint8Array\n    const result = new Uint8Array(bytesDownloaded)\n    let offset = 0\n    for (const chunk of chunks) {\n      result.set(chunk, offset)\n      offset += chunk.length\n    }\n    return result\n  }\n\n  // Fallback: no progress (ReadableStream unavailable or no Content-Length)\n  const buffer = await response.arrayBuffer()\n  return new Uint8Array(buffer)\n}\n\n// ============================================================================\n// CircuitArtifactCache\n// ============================================================================\n\n/** All UPP circuit types */\nconst ALL_CIRCUITS: UPPCircuitType[] = [\n  'transfer', 'withdraw', 'merge',\n  'merge_transfer_2x2', 'merge_transfer_4x2', 'joinsplit',\n]\n\nexport class CircuitArtifactCache {\n  // Lazy singleton per JS context (main thread and workers get their own)\n  private static _instance: CircuitArtifactCache | null = null\n\n  static shared(): CircuitArtifactCache {\n    if (!CircuitArtifactCache._instance) {\n      CircuitArtifactCache._instance = new CircuitArtifactCache()\n    }\n    return CircuitArtifactCache._instance\n  }\n\n  /** In-flight download deduplication */\n  private inflight = new Map<string, Promise<Uint8Array>>()\n\n  private constructor() {}\n\n  // --------------------------------------------------------------------------\n  // Key helpers\n  // --------------------------------------------------------------------------\n\n  private key(circuit: UPPCircuitType, artifact: 'wasm' | 'zkey', version = CIRCUIT_VERSION): string {\n    return `${version}_${circuit}_${artifact}`\n  }\n\n  private resolveBaseUrl(baseUrl?: string): string {\n    const url = baseUrl ?? CIRCUIT_CDN_BASE\n    return url.endsWith('/') ? url : `${url}/`\n  }\n\n  // --------------------------------------------------------------------------\n  // Public API\n  // --------------------------------------------------------------------------\n\n  /**\n   * Check if both wasm + zkey are cached for a circuit (current CIRCUIT_VERSION).\n   */\n  async isCached(circuit: UPPCircuitType): Promise<boolean> {\n    const [wasm, zkey] = await Promise.all([\n      idbGet(this.key(circuit, 'wasm')),\n      idbGet(this.key(circuit, 'zkey')),\n    ])\n    return wasm !== undefined && zkey !== undefined\n  }\n\n  /**\n   * Download and cache a circuit's artifacts. No-ops if already cached.\n   *\n   * @param circuit - Which circuit to preload\n   * @param baseUrl - CDN base URL (defaults to `https://circuits.upd.io/${CIRCUIT_VERSION}/`)\n   * @param onProgress - Byte-level download progress callback\n   * @param signal - AbortSignal for cancellation\n   */\n  async preload(\n    circuit: UPPCircuitType,\n    baseUrl?: string,\n    onProgress?: (p: DownloadProgress) => void,\n    signal?: AbortSignal,\n  ): Promise<void> {\n    await this.getArtifacts(circuit, baseUrl, onProgress, signal)\n  }\n\n  /**\n   * Get artifacts from cache, downloading if needed.\n   * Returns Uint8Array data ready to pass to snarkjs.plonk.fullProve().\n   */\n  async getArtifacts(\n    circuit: UPPCircuitType,\n    baseUrl?: string,\n    onProgress?: (p: DownloadProgress) => void,\n    signal?: AbortSignal,\n  ): Promise<ResolvedCircuitArtifacts> {\n    const [wasm, zkey] = await Promise.all([\n      this.getOrDownload(circuit, 'wasm', baseUrl, onProgress, signal),\n      this.getOrDownload(circuit, 'zkey', baseUrl, onProgress, signal),\n    ])\n    return { wasm, zkey }\n  }\n\n  /**\n   * List all cached circuit types (current version only).\n   */\n  async getCachedCircuits(): Promise<UPPCircuitType[]> {\n    const keys = await idbGetAllKeys()\n    const prefix = `${CIRCUIT_VERSION}_`\n    const cached = new Set<string>()\n\n    for (const k of keys) {\n      if (!k.startsWith(prefix)) continue\n      const rest = k.slice(prefix.length)\n      // rest = \"transfer_zkey\" or \"transfer_wasm\"\n      const lastUnderscore = rest.lastIndexOf('_')\n      if (lastUnderscore > 0) {\n        cached.add(rest.slice(0, lastUnderscore))\n      }\n    }\n\n    return ALL_CIRCUITS.filter(c => cached.has(c))\n  }\n\n  /**\n   * Get cache size information.\n   */\n  async getCacheSize(): Promise<{ total: number; circuits: Record<string, number> }> {\n    const entries = await idbGetAll()\n    let total = 0\n    const circuits: Record<string, number> = {}\n\n    for (const entry of entries) {\n      total += entry.size\n      // Extract circuit name from key: \"{version}_{circuit}_{artifact}\"\n      const parts = entry.key.split('_')\n      // Reconstruct circuit name (may contain underscores like merge_transfer_2x2)\n      if (parts.length >= 3) {\n        const circuit = parts.slice(1, -1).join('_')\n        circuits[circuit] = (circuits[circuit] ?? 0) + entry.size\n      }\n    }\n\n    return { total, circuits }\n  }\n\n  /**\n   * Get cache status for all circuit types.\n   */\n  async getStatus(): Promise<Map<UPPCircuitType, CircuitCacheStatus>> {\n    const entries = await idbGetAll()\n    const result = new Map<UPPCircuitType, CircuitCacheStatus>()\n    const prefix = `${CIRCUIT_VERSION}_`\n\n    // Initialize all circuits as not cached\n    for (const c of ALL_CIRCUITS) {\n      result.set(c, { cached: false })\n    }\n\n    // Check what's actually cached\n    const wasmMap = new Map<string, number>()\n    const zkeyMap = new Map<string, number>()\n\n    for (const entry of entries) {\n      if (!entry.key.startsWith(prefix)) continue\n      const rest = entry.key.slice(prefix.length)\n      const lastUnderscore = rest.lastIndexOf('_')\n      const circuit = rest.slice(0, lastUnderscore)\n      const artifact = rest.slice(lastUnderscore + 1)\n\n      if (artifact === 'wasm') wasmMap.set(circuit, entry.size)\n      else if (artifact === 'zkey') zkeyMap.set(circuit, entry.size)\n    }\n\n    for (const c of ALL_CIRCUITS) {\n      const hasWasm = wasmMap.has(c)\n      const hasZkey = zkeyMap.has(c)\n      result.set(c, {\n        cached: hasWasm && hasZkey,\n        wasmSize: wasmMap.get(c),\n        zkeySize: zkeyMap.get(c),\n      })\n    }\n\n    return result\n  }\n\n  /**\n   * Evict a specific circuit from cache (current version).\n   */\n  async evict(circuit: UPPCircuitType): Promise<void> {\n    await Promise.all([\n      idbDelete(this.key(circuit, 'wasm')),\n      idbDelete(this.key(circuit, 'zkey')),\n    ])\n  }\n\n  /**\n   * Evict all cached circuit artifacts (all versions).\n   */\n  async evictAll(): Promise<void> {\n    await idbClear()\n  }\n\n  /**\n   * Evict all artifacts for a specific version (for cleaning up after SDK updates).\n   */\n  async evictVersion(version: string): Promise<void> {\n    const keys = await idbGetAllKeys()\n    const prefix = `${version}_`\n    const toDelete = keys.filter(k => k.startsWith(prefix))\n    for (const k of toDelete) {\n      await idbDelete(k)\n    }\n  }\n\n  /**\n   * Request persistent storage to prevent browser from evicting the cache.\n   * Returns true if granted, false if denied or unavailable.\n   */\n  async requestPersistence(): Promise<boolean> {\n    if (typeof navigator !== 'undefined' && navigator.storage?.persist) {\n      return navigator.storage.persist()\n    }\n    return false\n  }\n\n  // --------------------------------------------------------------------------\n  // Internal\n  // --------------------------------------------------------------------------\n\n  private async getOrDownload(\n    circuit: UPPCircuitType,\n    artifact: 'wasm' | 'zkey',\n    baseUrl?: string,\n    onProgress?: (p: DownloadProgress) => void,\n    signal?: AbortSignal,\n  ): Promise<Uint8Array> {\n    const cacheKey = this.key(circuit, artifact)\n\n    // Check cache first\n    const cached = await idbGet(cacheKey)\n    if (cached) {\n      return cached.data\n    }\n\n    // Deduplicate in-flight downloads\n    const inflightKey = `${cacheKey}_${this.resolveBaseUrl(baseUrl)}`\n    const existing = this.inflight.get(inflightKey)\n    if (existing) {\n      return existing\n    }\n\n    const downloadPromise = this.downloadAndStore(circuit, artifact, baseUrl, onProgress, signal)\n\n    this.inflight.set(inflightKey, downloadPromise)\n    try {\n      const data = await downloadPromise\n      return data\n    } finally {\n      this.inflight.delete(inflightKey)\n    }\n  }\n\n  private async downloadAndStore(\n    circuit: UPPCircuitType,\n    artifact: 'wasm' | 'zkey',\n    baseUrl?: string,\n    onProgress?: (p: DownloadProgress) => void,\n    signal?: AbortSignal,\n  ): Promise<Uint8Array> {\n    const base = this.resolveBaseUrl(baseUrl)\n    const url = `${base}${circuit}.${artifact}`\n\n    const data = await downloadWithProgress(url, circuit, artifact, onProgress, signal)\n\n    // Store in IndexedDB\n    await idbPut({\n      key: this.key(circuit, artifact),\n      data,\n      size: data.byteLength,\n      cachedAt: Date.now(),\n      version: CIRCUIT_VERSION,\n    })\n\n    return data\n  }\n}\n"]}

package/dist/{chunk-V6MW5VOF.cjs → chunk-632LPXPX.cjs}

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunk5H27F6W6_cjs = require('./chunk-5H27F6W6.cjs');
+var chunkIYRCJAME_cjs = require('./chunk-IYRCJAME.cjs');
 
 // src/core/client.ts
 function createUPPClient(_config) {
@@ -38,12 +38,12 @@ function generateRandomBlinding() {
 }
 
 // src/core/index.ts
-chunk5H27F6W6_cjs.init_stealth();
+chunkIYRCJAME_cjs.init_stealth();
 
 exports.NOTE_VERSION = NOTE_VERSION;
 exports.createNote = createNote;
 exports.createUPPClient = createUPPClient;
 exports.decryptNote = decryptNote;
 exports.encryptNote = encryptNote;
-//# sourceMappingURL=chunk-V6MW5VOF.cjs.map
-//# sourceMappingURL=chunk-V6MW5VOF.cjs.map
+//# sourceMappingURL=chunk-632LPXPX.cjs.map
+//# sourceMappingURL=chunk-632LPXPX.cjs.map

package/dist/{chunk-V6MW5VOF.cjs.map → chunk-632LPXPX.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/client.ts","../src/core/types.ts","../src/core/note.ts","../src/core/index.ts"],"names":["init_stealth"],"mappings":";;;;;AAoFO,SAAS,gBAAgB,OAAA,EAAqC;AAEnE,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;;;AC9EO,IAAM,YAAA,GAAe;;;ACiCrB,SAAS,WAAW,MAAA,EAAgC;AACzD,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,QAAQ,MAAA,EAAQ,IAAA,EAAM,UAAS,GAAI,MAAA;AAG1D,EAAA,MAAM,YAAA,GAAe,YAAY,sBAAA,EAAuB;AAExD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,YAAA;AAAA,IACT,MAAA;AAAA,IACA,QAAA,EAAU,YAAA;AAAA,IACV,MAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA;AAAA,IACA,IAAA;AAAA,IACA,WAAW,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI;AAAA,GACzC;AACF;AASO,SAAS,WAAA,CAAY,OAAa,aAAA,EAA0C;AAEjF,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AASO,SAAS,WAAA,CAAY,YAA2B,aAAA,EAAwC;AAE7F,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AAyBA,SAAS,sBAAA,GAAiC;AAExC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,OAAO,IAAA,GAAO,KAAA,CAAM,KAAK,KAAK,CAAA,CAAE,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC,CAAA;AAC3F;;;ACtGAA,8BAAA,EAAA","file":"chunk-V6MW5VOF.cjs","sourcesContent":["/**\n * Main UPP Client\n *\n * Provides high-level API for interacting with the Universal Private Pool.\n */\n\nimport type { Address, PublicClient, WalletClient } from 'viem'\nimport type {\n  ShieldParams,\n  TransferParams,\n  MergeParams,\n  WithdrawParams,\n  Note,\n} from './types.js'\n\n/**\n * UPP Client configuration\n */\nexport interface UPPClientConfig {\n  /** Viem public client for reading chain state */\n  publicClient: PublicClient\n  /** Viem wallet client for sending transactions */\n  walletClient: WalletClient\n  /** Universal Private Pool contract address */\n  poolAddress: Address\n  /** ASP Registry Hub contract address */\n  aspHubAddress: Address\n  /** Chain ID (optional, derived from clients if not provided) */\n  chainId?: number\n}\n\n/**\n * UPP Client interface\n */\nexport interface UPPClient {\n  /** Shield tokens into the private pool */\n  shield(params: ShieldParams): Promise<{ commitment: `0x${string}`; note: Note }>\n\n  /** Transfer tokens privately */\n  transfer(params: TransferParams): Promise<{ nullifier: `0x${string}`; changeNote?: Note }>\n\n  /** Merge multiple notes into one */\n  merge(params: MergeParams): Promise<{ commitment: `0x${string}`; note: Note }>\n\n  /** Withdraw tokens from the private pool */\n  withdraw(params: WithdrawParams): Promise<{ txHash: `0x${string}` }>\n\n  /** Scan for notes belonging to a viewing key */\n  scanNotes(viewingKey: `0x${string}`): Promise<Note[]>\n\n  /** Get the current state root */\n  getStateRoot(): Promise<bigint>\n\n  /** Check if a nullifier has been spent */\n  isNullifierSpent(nullifier: `0x${string}`): Promise<boolean>\n}\n\n/**\n * Create a UPP client instance\n *\n * @example\n * ```ts\n * import { createUPPClient } from '@upp/sdk'\n * import { createPublicClient, createWalletClient, http } from 'viem'\n * import { sepolia } from 'viem/chains'\n *\n * const publicClient = createPublicClient({\n *   chain: sepolia,\n *   transport: http(),\n * })\n *\n * const walletClient = createWalletClient({\n *   chain: sepolia,\n *   transport: http(),\n * })\n *\n * const client = createUPPClient({\n *   publicClient,\n *   walletClient,\n *   poolAddress: '0x...',\n *   aspHubAddress: '0x...',\n * })\n * ```\n */\nexport function createUPPClient(_config: UPPClientConfig): UPPClient {\n  // TODO: Implement client\n  throw new Error('Not implemented')\n}\n","/**\n * Core type definitions for UPP SDK\n */\n\nimport type { Address, Hex } from 'viem'\n\n/**\n * Note version - increment when note structure changes\n */\nexport const NOTE_VERSION = 5\n\n/**\n * A private note in the Universal Private Pool\n */\nexport interface Note {\n  /** Note format version */\n  version: number\n  /** Token amount (in wei) */\n  amount: bigint\n  /** Random blinding factor */\n  blinding: bigint\n  /** Current origin - who is responsible for these funds (updated on merge) */\n  origin: Address\n  /** Sender - who sent this specific note (for payment attribution) */\n  sender: Address\n  /** ERC20 token address */\n  token: Address\n  /** Optional memo/message */\n  memo?: string\n  /** Timestamp when note was created */\n  timestamp?: number\n}\n\n/**\n * Encrypted note data stored on-chain (post-quantum, hash-based)\n */\nexport interface EncryptedNote {\n  /** AES-GCM encrypted note data */\n  ciphertext: Hex\n  /** AES-GCM nonce */\n  nonce: Hex\n}\n\n/**\n * Stealth meta-address (hash-based, post-quantum)\n * Published once, used by senders to encrypt notes to the recipient\n */\nexport interface StealthMetaAddress {\n  /** Owner hash = Poseidon(spendingSecret) */\n  ownerHash: bigint\n  /** Viewing hash = Poseidon(viewingSecret) */\n  viewingHash: bigint\n}\n\n/**\n * One-time address for a specific transaction (simplified for hash-based system)\n */\nexport interface StealthAddress {\n  /** Owner hash for this note */\n  ownerHash: bigint\n  /** Search tag for efficient scanning */\n  searchTag?: bigint\n}\n\n/**\n * On-chain merge record for audit trail\n */\nexport interface MergeRecord {\n  /** Output commitment (the merged note) */\n  outputCommitment: Hex\n  /** First input nullifier */\n  nullifier1: Hex\n  /** Second input nullifier */\n  nullifier2: Hex\n  /** Who performed the merge (new origin) */\n  merger: Address\n  /** Token that was merged */\n  token: Address\n  /** Block timestamp */\n  timestamp: number\n}\n\n/**\n * ASP (Association Set Provider) root\n */\nexport interface ASPRoot {\n  /** Merkle root of approved addresses */\n  root: bigint\n  /** IPFS hash for off-chain data */\n  ipfsHash: Hex\n  /** When this root was published */\n  timestamp: number\n  /** Number of addresses in the set */\n  leafCount: number\n}\n\n/**\n * Shield operation parameters\n */\nexport interface ShieldParams {\n  /** ERC20 token to shield */\n  token: Address\n  /** Amount to shield (in wei) */\n  amount: bigint\n  /** Optional: recipient owner hash (defaults to self) */\n  recipientOwnerHash?: bigint\n  /** Optional: memo to include in note */\n  memo?: string\n}\n\n/**\n * Transfer operation parameters\n */\nexport interface TransferParams {\n  /** Note to spend */\n  note: Note\n  /** Recipient stealth address */\n  recipient: StealthAddress\n  /** Amount to send (remainder goes back to sender as change) */\n  amount: bigint\n  /** Optional: memo to include */\n  memo?: string\n}\n\n/**\n * Merge operation parameters\n */\nexport interface MergeParams {\n  /** Notes to merge (must be same token) */\n  notes: [Note, Note]\n  /** Optional: memo for the merged note */\n  memo?: string\n}\n\n/**\n * Withdraw operation parameters\n */\nexport interface WithdrawParams {\n  /** Note to withdraw */\n  note: Note\n  /** Amount to withdraw */\n  amount: bigint\n  /** Recipient address for the tokens */\n  recipient: Address\n  /** ASP ID to use for compliance check */\n  aspId?: number\n  /** Use ragequit (origin withdrawing own funds) */\n  ragequit?: boolean\n}\n\n/**\n * Proof for ZK operations\n */\nexport interface Proof {\n  /** Proof data (format depends on proof system: Groth16 has pi_a/pi_b/pi_c, PLONK has A/B/C/Z/T1-T3/evals/Wxi/Wxiw) */\n  proof: Record<string, any>\n  /** Public signals */\n  publicSignals: string[]\n}\n\n/**\n * Note commitment (hash)\n */\nexport type Commitment = Hex\n\n/**\n * Nullifier (spent note identifier)\n */\nexport type Nullifier = Hex\n\n// =========================================================================\n// STARK Note Types (M31/Keccak-based, post-quantum)\n// =========================================================================\n\nimport type { M31Digest } from '../utils/keccak-m31.js'\n\n// STARK_AMOUNT_SCALE moved to utils/stark.ts\nexport { STARK_AMOUNT_SCALE } from '../utils/stark.js'\n\n/**\n * A private STARK note in the Universal Private Pool.\n *\n * All field values are M31 elements (< 2^31 - 1).\n * Commitment = keccak_m31(amount, ownerHash[0..4], blinding, origin, token).\n */\nexport interface StarkNote {\n  /** Amount in STARK units (actual wei = amount * STARK_AMOUNT_SCALE) */\n  amount: bigint\n  /** Owner hash = keccak_m31(starkSecret) — 4 M31 elements */\n  ownerHash: M31Digest\n  /** Random blinding factor (M31) */\n  blinding: bigint\n  /** Origin address encoded as M31 (lower 31 bits of address) */\n  origin: bigint\n  /** Token address encoded as M31 (lower 31 bits of address) */\n  token: bigint\n  /** The leaf index in the STARK Keccak Merkle tree (set after shielding) */\n  leafIndex?: number\n  /** The commitment digest (set after computation) */\n  commitment?: M31Digest\n  /** Optional memo */\n  memo?: string\n  /** Timestamp when note was created */\n  timestamp?: number\n}\n\n/**\n * STARK stealth meta-address (M31/Keccak-based)\n * Published once, used by senders to encrypt notes to the recipient\n */\nexport interface StarkStealthMetaAddress {\n  /** Owner hash = keccak_m31(starkSecret) — 4 M31 elements */\n  ownerHash: M31Digest\n  /** Viewing hash = keccak_m31(starkViewingSecret) — 4 M31 elements */\n  viewingHash: M31Digest\n}\n\n/**\n * STARK proof for ZK operations (serialized Circle STARK proof)\n */\nexport interface StarkProof {\n  /** Raw serialized Stwo Circle STARK proof bytes */\n  proofBytes: Hex\n  /** Public inputs seed (keccak256 of public parameters) */\n  publicInputsSeed: Hex\n}\n","/**\n * Note management utilities\n *\n * Create, encrypt, and decrypt private notes.\n */\n\nimport type { Address, Hex } from 'viem'\nimport type { Note, EncryptedNote } from './types.js'\nimport { NOTE_VERSION } from './types.js'\n\n/**\n * Parameters for creating a new note\n */\nexport interface CreateNoteParams {\n  /** Token amount */\n  amount: bigint\n  /** ERC20 token address */\n  token: Address\n  /** Origin address (who is responsible) */\n  origin: Address\n  /** Sender address */\n  sender: Address\n  /** Optional memo */\n  memo?: string\n  /** Optional blinding factor (generated if not provided) */\n  blinding?: bigint\n}\n\n/**\n * Create a new private note\n *\n * @example\n * ```ts\n * const note = createNote({\n *   amount: 1000n * 10n ** 18n,\n *   token: '0x...',\n *   origin: '0xMyAddress...',\n *   sender: '0xMyAddress...',\n *   memo: 'Payment for services',\n * })\n * ```\n */\nexport function createNote(params: CreateNoteParams): Note {\n  const { amount, token, origin, sender, memo, blinding } = params\n\n  // Generate random blinding factor if not provided\n  const noteBlinding = blinding ?? generateRandomBlinding()\n\n  return {\n    version: NOTE_VERSION,\n    amount,\n    blinding: noteBlinding,\n    origin,\n    sender,\n    token,\n    memo,\n    timestamp: Math.floor(Date.now() / 1000),\n  }\n}\n\n/**\n * Encrypt a note for a recipient\n *\n * @param note - The note to encrypt\n * @param sharedSecret - ECDH shared secret with recipient\n * @returns Encrypted note data\n */\nexport function encryptNote(_note: Note, _sharedSecret: Uint8Array): EncryptedNote {\n  // TODO: Implement AES-GCM encryption\n  throw new Error('Not implemented')\n}\n\n/**\n * Decrypt a received note\n *\n * @param encrypted - The encrypted note data\n * @param sharedSecret - ECDH shared secret\n * @returns Decrypted note or null if decryption fails\n */\nexport function decryptNote(_encrypted: EncryptedNote, _sharedSecret: Uint8Array): Note | null {\n  // TODO: Implement AES-GCM decryption\n  throw new Error('Not implemented')\n}\n\n/**\n * Compute the commitment hash for a note\n *\n * commitment = Poseidon(amount, blinding, origin, token)\n */\nexport function computeCommitment(_note: Note): Hex {\n  // TODO: Implement Poseidon hash\n  throw new Error('Not implemented')\n}\n\n/**\n * Compute the nullifier for spending a note\n *\n * nullifier = Poseidon(blinding, leafIndex)\n */\nexport function computeNullifier(_note: Note, _leafIndex: bigint): Hex {\n  // TODO: Implement nullifier computation\n  throw new Error('Not implemented')\n}\n\n/**\n * Generate a random blinding factor\n */\nfunction generateRandomBlinding(): bigint {\n  // TODO: Use crypto.getRandomValues for secure randomness\n  const bytes = new Uint8Array(31) // 31 bytes to stay in field\n  crypto.getRandomValues(bytes)\n  return BigInt('0x' + Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join(''))\n}\n","/**\n * Core UPP SDK functionality\n */\n\nexport { createUPPClient } from './client.js'\nexport type { UPPClient, UPPClientConfig } from './client.js'\n\nexport { createNote, encryptNote, decryptNote } from './note.js'\n\n// Stealth address utilities (post-quantum, hash-based)\nexport {\n  STEALTH_ADDRESS_PREFIX,\n  ADDRESS_VERSION,\n  encodeStealthAddress,\n  decodeStealthAddress,\n  isValidStealthAddress,\n  generateStealthAddress,\n  createOneTimeKeys,\n  verifyOwnership,\n  computeNoteEncryptionKey,\n  // STARK stealth addresses (0zs prefix)\n  STARK_STEALTH_ADDRESS_PREFIX,\n  STARK_ADDRESS_VERSION,\n  encodeStarkStealthAddress,\n  decodeStarkStealthAddress,\n  isValidStarkStealthAddress,\n  generateStarkStealthAddress,\n  detectAddressType,\n} from './stealth.js'\n\n// Proof generation (UPP circuits)\nexport {\n  generateUPPProof,\n  formatProofForContract,\n  getUPPCircuitArtifacts,\n  STATE_TREE_DEPTH,\n  ASP_TREE_DEPTH,\n} from './proof.js'\n\n// Proof worker (off-main-thread proving)\nexport {\n  ProofWorkerManager,\n  generateUPPProofAsync,\n} from './proof-worker.js'\nexport type {\n  ProofWorkerRequest,\n  ProofWorkerResponse,\n} from './proof-worker.js'\nexport type {\n  UPPCircuitType,\n  UPPTransferCircuitInputs,\n  UPPWithdrawCircuitInputs,\n  UPPCircuitInputs,\n  CircuitArtifacts,\n  ProofResult,\n  PlonkProvingStage,\n} from './proof.js'\n\n// Legacy stealth proof exports (deprecated)\nexport {\n  generateProof,\n  verifyProof,\n  generateStealthProof,\n  getStealthCircuitArtifacts,\n} from './proof.js'\nexport type {\n  CircuitType,\n  StealthCircuitType,\n  StealthCircuitInputs,\n  Stealth1x2CircuitInputs,\n  Stealth2x2CircuitInputs,\n} from './proof.js'\n\nexport * from './types.js'\n\n// Swap order book module\nexport {\n  computeGiveAmount,\n  computeTakeAmount,\n  computeRate,\n  formatRate,\n  computeCancelKeyHash,\n  generateCancelSecret,\n  filterOrdersByASP,\n  filterOrdersByTokenPair,\n  isFillerASPAccepted,\n  isOrderActive,\n  computeTotalBuyAmount,\n  computeFillPercentage,\n  storeCancelSecret,\n  getCancelSecret,\n  removeCancelSecret,\n  getOwnOrderIds,\n  RATE_PRECISION,\n  SWAP_EVENTS_ABI,\n  SWAP_ORDER_PLACED_EVENT,\n  SWAP_ORDER_FILLED_EVENT,\n  SWAP_ORDER_CLAIMED_EVENT,\n  SWAP_ORDER_CANCELLED_EVENT,\n} from './swap.js'\nexport type {\n  SwapOrder,\n  SwapOrderParams,\n  SwapFillParams,\n  SwapOrderEvent,\n  SwapFillEvent,\n} from './swap.js'\n\n// Account adapter (pluggable key source + persistence)\nexport { DirectAccountAdapter, StorableAccountAdapter } from './account.js'\nexport type { IAccountAdapter } from './account.js'\n\n// ASP provider (pluggable compliance)\nexport type { IASPProvider, ASPMembershipProof } from './asp-provider.js'\n\n// Note store (single source of truth for note state)\nexport { NoteStore } from './note-store.js'\nexport type { INoteStore, ShieldedNote, NoteStatus, ProofSystem } from './note-store.js'\n\n// ASP (Association Set Provider) module\nexport {\n  computeSingleOriginASPRoot,\n  generateSingleOriginASPProof,\n  verifyASPProof,\n  DEMO_ASP_ID,\n  DEMO_ASP_NAME,\n  createDemoASPRoot,\n  // Multi-origin ASP tree\n  buildASPTree,\n  computeMultiOriginASPRoot,\n  generateMultiOriginASPProof,\n  generateASPProof,\n} from './asp.js'\nexport type { ASPProof } from './asp.js'\n\n// Transfer module\nexport {\n  syncMerkleTree,\n  getMerkleProofsForNotes,\n  computeNullifier,\n  buildUPPTransferCircuitInputs,\n  buildTransfer,\n  formatOutputForContract,\n} from './transfer.js'\nexport type {\n  TransferStage,\n  SpendableNote,\n  MerkleProofWithNote,\n  TransferContext,\n  TransferBuildResult,\n  NoteWithAmount,\n} from './transfer.js'\n"]}
+{"version":3,"sources":["../src/core/client.ts","../src/core/types.ts","../src/core/note.ts","../src/core/index.ts"],"names":["init_stealth"],"mappings":";;;;;AAoFO,SAAS,gBAAgB,OAAA,EAAqC;AAEnE,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;;;AC9EO,IAAM,YAAA,GAAe;;;ACiCrB,SAAS,WAAW,MAAA,EAAgC;AACzD,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,QAAQ,MAAA,EAAQ,IAAA,EAAM,UAAS,GAAI,MAAA;AAG1D,EAAA,MAAM,YAAA,GAAe,YAAY,sBAAA,EAAuB;AAExD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,YAAA;AAAA,IACT,MAAA;AAAA,IACA,QAAA,EAAU,YAAA;AAAA,IACV,MAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA;AAAA,IACA,IAAA;AAAA,IACA,WAAW,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI;AAAA,GACzC;AACF;AASO,SAAS,WAAA,CAAY,OAAa,aAAA,EAA0C;AAEjF,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AASO,SAAS,WAAA,CAAY,YAA2B,aAAA,EAAwC;AAE7F,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AAyBA,SAAS,sBAAA,GAAiC;AAExC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,OAAO,IAAA,GAAO,KAAA,CAAM,KAAK,KAAK,CAAA,CAAE,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC,CAAA;AAC3F;;;ACtGAA,8BAAA,EAAA","file":"chunk-632LPXPX.cjs","sourcesContent":["/**\n * Main UPP Client\n *\n * Provides high-level API for interacting with the Universal Private Pool.\n */\n\nimport type { Address, PublicClient, WalletClient } from 'viem'\nimport type {\n  ShieldParams,\n  TransferParams,\n  MergeParams,\n  WithdrawParams,\n  Note,\n} from './types.js'\n\n/**\n * UPP Client configuration\n */\nexport interface UPPClientConfig {\n  /** Viem public client for reading chain state */\n  publicClient: PublicClient\n  /** Viem wallet client for sending transactions */\n  walletClient: WalletClient\n  /** Universal Private Pool contract address */\n  poolAddress: Address\n  /** ASP Registry Hub contract address */\n  aspHubAddress: Address\n  /** Chain ID (optional, derived from clients if not provided) */\n  chainId?: number\n}\n\n/**\n * UPP Client interface\n */\nexport interface UPPClient {\n  /** Shield tokens into the private pool */\n  shield(params: ShieldParams): Promise<{ commitment: `0x${string}`; note: Note }>\n\n  /** Transfer tokens privately */\n  transfer(params: TransferParams): Promise<{ nullifier: `0x${string}`; changeNote?: Note }>\n\n  /** Merge multiple notes into one */\n  merge(params: MergeParams): Promise<{ commitment: `0x${string}`; note: Note }>\n\n  /** Withdraw tokens from the private pool */\n  withdraw(params: WithdrawParams): Promise<{ txHash: `0x${string}` }>\n\n  /** Scan for notes belonging to a viewing key */\n  scanNotes(viewingKey: `0x${string}`): Promise<Note[]>\n\n  /** Get the current state root */\n  getStateRoot(): Promise<bigint>\n\n  /** Check if a nullifier has been spent */\n  isNullifierSpent(nullifier: `0x${string}`): Promise<boolean>\n}\n\n/**\n * Create a UPP client instance\n *\n * @example\n * ```ts\n * import { createUPPClient } from '@upp/sdk'\n * import { createPublicClient, createWalletClient, http } from 'viem'\n * import { sepolia } from 'viem/chains'\n *\n * const publicClient = createPublicClient({\n *   chain: sepolia,\n *   transport: http(),\n * })\n *\n * const walletClient = createWalletClient({\n *   chain: sepolia,\n *   transport: http(),\n * })\n *\n * const client = createUPPClient({\n *   publicClient,\n *   walletClient,\n *   poolAddress: '0x...',\n *   aspHubAddress: '0x...',\n * })\n * ```\n */\nexport function createUPPClient(_config: UPPClientConfig): UPPClient {\n  // TODO: Implement client\n  throw new Error('Not implemented')\n}\n","/**\n * Core type definitions for UPP SDK\n */\n\nimport type { Address, Hex } from 'viem'\n\n/**\n * Note version - increment when note structure changes\n */\nexport const NOTE_VERSION = 5\n\n/**\n * A private note in the Universal Private Pool\n */\nexport interface Note {\n  /** Note format version */\n  version: number\n  /** Token amount (in wei) */\n  amount: bigint\n  /** Random blinding factor */\n  blinding: bigint\n  /** Current origin - who is responsible for these funds (updated on merge) */\n  origin: Address\n  /** Sender - who sent this specific note (for payment attribution) */\n  sender: Address\n  /** ERC20 token address */\n  token: Address\n  /** Optional memo/message */\n  memo?: string\n  /** Timestamp when note was created */\n  timestamp?: number\n}\n\n/**\n * Encrypted note data stored on-chain (post-quantum, hash-based)\n */\nexport interface EncryptedNote {\n  /** AES-GCM encrypted note data */\n  ciphertext: Hex\n  /** AES-GCM nonce */\n  nonce: Hex\n}\n\n/**\n * Stealth meta-address (hash-based, post-quantum)\n * Published once, used by senders to encrypt notes to the recipient\n */\nexport interface StealthMetaAddress {\n  /** Owner hash = Poseidon(spendingSecret) */\n  ownerHash: bigint\n  /** Viewing hash = Poseidon(viewingSecret) */\n  viewingHash: bigint\n}\n\n/**\n * One-time address for a specific transaction (simplified for hash-based system)\n */\nexport interface StealthAddress {\n  /** Owner hash for this note */\n  ownerHash: bigint\n  /** Search tag for efficient scanning */\n  searchTag?: bigint\n}\n\n/**\n * On-chain merge record for audit trail\n */\nexport interface MergeRecord {\n  /** Output commitment (the merged note) */\n  outputCommitment: Hex\n  /** First input nullifier */\n  nullifier1: Hex\n  /** Second input nullifier */\n  nullifier2: Hex\n  /** Who performed the merge (new origin) */\n  merger: Address\n  /** Token that was merged */\n  token: Address\n  /** Block timestamp */\n  timestamp: number\n}\n\n/**\n * ASP (Association Set Provider) root\n */\nexport interface ASPRoot {\n  /** Merkle root of approved addresses */\n  root: bigint\n  /** IPFS hash for off-chain data */\n  ipfsHash: Hex\n  /** When this root was published */\n  timestamp: number\n  /** Number of addresses in the set */\n  leafCount: number\n}\n\n/**\n * Shield operation parameters\n */\nexport interface ShieldParams {\n  /** ERC20 token to shield */\n  token: Address\n  /** Amount to shield (in wei) */\n  amount: bigint\n  /** Optional: recipient owner hash (defaults to self) */\n  recipientOwnerHash?: bigint\n  /** Optional: memo to include in note */\n  memo?: string\n}\n\n/**\n * Transfer operation parameters\n */\nexport interface TransferParams {\n  /** Note to spend */\n  note: Note\n  /** Recipient stealth address */\n  recipient: StealthAddress\n  /** Amount to send (remainder goes back to sender as change) */\n  amount: bigint\n  /** Optional: memo to include */\n  memo?: string\n}\n\n/**\n * Merge operation parameters\n */\nexport interface MergeParams {\n  /** Notes to merge (must be same token) */\n  notes: [Note, Note]\n  /** Optional: memo for the merged note */\n  memo?: string\n}\n\n/**\n * Withdraw operation parameters\n */\nexport interface WithdrawParams {\n  /** Note to withdraw */\n  note: Note\n  /** Amount to withdraw */\n  amount: bigint\n  /** Recipient address for the tokens */\n  recipient: Address\n  /** ASP ID to use for compliance check */\n  aspId?: number\n  /** Use ragequit (origin withdrawing own funds) */\n  ragequit?: boolean\n}\n\n/**\n * Proof for ZK operations\n */\nexport interface Proof {\n  /** Proof data (format depends on proof system: Groth16 has pi_a/pi_b/pi_c, PLONK has A/B/C/Z/T1-T3/evals/Wxi/Wxiw) */\n  proof: Record<string, any>\n  /** Public signals */\n  publicSignals: string[]\n}\n\n/**\n * Note commitment (hash)\n */\nexport type Commitment = Hex\n\n/**\n * Nullifier (spent note identifier)\n */\nexport type Nullifier = Hex\n\n// =========================================================================\n// STARK Note Types (M31/Keccak-based, post-quantum)\n// =========================================================================\n\nimport type { M31Digest } from '../utils/keccak-m31.js'\n\n// STARK_AMOUNT_SCALE moved to utils/stark.ts\nexport { STARK_AMOUNT_SCALE } from '../utils/stark.js'\n\n/**\n * A private STARK note in the Universal Private Pool.\n *\n * All field values are M31 elements (< 2^31 - 1).\n * Commitment = keccak_m31(amount, ownerHash[0..4], blinding, origin, token).\n */\nexport interface StarkNote {\n  /** Amount in STARK units (actual wei = amount * STARK_AMOUNT_SCALE) */\n  amount: bigint\n  /** Owner hash = keccak_m31(starkSecret) — 4 M31 elements */\n  ownerHash: M31Digest\n  /** Random blinding factor (M31) */\n  blinding: bigint\n  /** Origin address encoded as M31 (lower 31 bits of address) */\n  origin: bigint\n  /** Token address encoded as M31 (lower 31 bits of address) */\n  token: bigint\n  /** The leaf index in the STARK Keccak Merkle tree (set after shielding) */\n  leafIndex?: number\n  /** The commitment digest (set after computation) */\n  commitment?: M31Digest\n  /** Optional memo */\n  memo?: string\n  /** Timestamp when note was created */\n  timestamp?: number\n}\n\n/**\n * STARK stealth meta-address (M31/Keccak-based)\n * Published once, used by senders to encrypt notes to the recipient\n */\nexport interface StarkStealthMetaAddress {\n  /** Owner hash = keccak_m31(starkSecret) — 4 M31 elements */\n  ownerHash: M31Digest\n  /** Viewing hash = keccak_m31(starkViewingSecret) — 4 M31 elements */\n  viewingHash: M31Digest\n}\n\n/**\n * STARK proof for ZK operations (serialized Circle STARK proof)\n */\nexport interface StarkProof {\n  /** Raw serialized Stwo Circle STARK proof bytes */\n  proofBytes: Hex\n  /** Public inputs seed (keccak256 of public parameters) */\n  publicInputsSeed: Hex\n}\n","/**\n * Note management utilities\n *\n * Create, encrypt, and decrypt private notes.\n */\n\nimport type { Address, Hex } from 'viem'\nimport type { Note, EncryptedNote } from './types.js'\nimport { NOTE_VERSION } from './types.js'\n\n/**\n * Parameters for creating a new note\n */\nexport interface CreateNoteParams {\n  /** Token amount */\n  amount: bigint\n  /** ERC20 token address */\n  token: Address\n  /** Origin address (who is responsible) */\n  origin: Address\n  /** Sender address */\n  sender: Address\n  /** Optional memo */\n  memo?: string\n  /** Optional blinding factor (generated if not provided) */\n  blinding?: bigint\n}\n\n/**\n * Create a new private note\n *\n * @example\n * ```ts\n * const note = createNote({\n *   amount: 1000n * 10n ** 18n,\n *   token: '0x...',\n *   origin: '0xMyAddress...',\n *   sender: '0xMyAddress...',\n *   memo: 'Payment for services',\n * })\n * ```\n */\nexport function createNote(params: CreateNoteParams): Note {\n  const { amount, token, origin, sender, memo, blinding } = params\n\n  // Generate random blinding factor if not provided\n  const noteBlinding = blinding ?? generateRandomBlinding()\n\n  return {\n    version: NOTE_VERSION,\n    amount,\n    blinding: noteBlinding,\n    origin,\n    sender,\n    token,\n    memo,\n    timestamp: Math.floor(Date.now() / 1000),\n  }\n}\n\n/**\n * Encrypt a note for a recipient\n *\n * @param note - The note to encrypt\n * @param sharedSecret - ECDH shared secret with recipient\n * @returns Encrypted note data\n */\nexport function encryptNote(_note: Note, _sharedSecret: Uint8Array): EncryptedNote {\n  // TODO: Implement AES-GCM encryption\n  throw new Error('Not implemented')\n}\n\n/**\n * Decrypt a received note\n *\n * @param encrypted - The encrypted note data\n * @param sharedSecret - ECDH shared secret\n * @returns Decrypted note or null if decryption fails\n */\nexport function decryptNote(_encrypted: EncryptedNote, _sharedSecret: Uint8Array): Note | null {\n  // TODO: Implement AES-GCM decryption\n  throw new Error('Not implemented')\n}\n\n/**\n * Compute the commitment hash for a note\n *\n * commitment = Poseidon(amount, blinding, origin, token)\n */\nexport function computeCommitment(_note: Note): Hex {\n  // TODO: Implement Poseidon hash\n  throw new Error('Not implemented')\n}\n\n/**\n * Compute the nullifier for spending a note\n *\n * nullifier = Poseidon(blinding, leafIndex)\n */\nexport function computeNullifier(_note: Note, _leafIndex: bigint): Hex {\n  // TODO: Implement nullifier computation\n  throw new Error('Not implemented')\n}\n\n/**\n * Generate a random blinding factor\n */\nfunction generateRandomBlinding(): bigint {\n  // TODO: Use crypto.getRandomValues for secure randomness\n  const bytes = new Uint8Array(31) // 31 bytes to stay in field\n  crypto.getRandomValues(bytes)\n  return BigInt('0x' + Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join(''))\n}\n","/**\n * Core UPP SDK functionality\n */\n\nexport { createUPPClient } from './client.js'\nexport type { UPPClient, UPPClientConfig } from './client.js'\n\nexport { createNote, encryptNote, decryptNote } from './note.js'\n\n// Stealth address utilities (post-quantum, hash-based)\nexport {\n  STEALTH_ADDRESS_PREFIX,\n  ADDRESS_VERSION,\n  encodeStealthAddress,\n  decodeStealthAddress,\n  isValidStealthAddress,\n  generateStealthAddress,\n  createOneTimeKeys,\n  verifyOwnership,\n  computeNoteEncryptionKey,\n  // STARK stealth addresses (0zs prefix)\n  STARK_STEALTH_ADDRESS_PREFIX,\n  STARK_ADDRESS_VERSION,\n  encodeStarkStealthAddress,\n  decodeStarkStealthAddress,\n  isValidStarkStealthAddress,\n  generateStarkStealthAddress,\n  detectAddressType,\n} from './stealth.js'\n\n// Proof generation (UPP circuits)\nexport {\n  generateUPPProof,\n  formatProofForContract,\n  getUPPCircuitArtifacts,\n  STATE_TREE_DEPTH,\n  ASP_TREE_DEPTH,\n} from './proof.js'\n\n// Proof worker (off-main-thread proving)\nexport {\n  ProofWorkerManager,\n  generateUPPProofAsync,\n} from './proof-worker.js'\nexport type {\n  ProofWorkerRequest,\n  ProofWorkerResponse,\n} from './proof-worker.js'\n\n// Circuit artifact cache (IndexedDB-based, with download progress)\nexport {\n  CircuitArtifactCache,\n  CIRCUIT_VERSION,\n  CIRCUIT_CDN_BASE,\n} from './circuit-cache.js'\nexport type {\n  DownloadProgress,\n  ResolvedCircuitArtifacts,\n  CircuitCacheStatus,\n} from './circuit-cache.js'\nexport type {\n  UPPCircuitType,\n  UPPTransferCircuitInputs,\n  UPPWithdrawCircuitInputs,\n  UPPCircuitInputs,\n  CircuitArtifacts,\n  ProofResult,\n  PlonkProvingStage,\n} from './proof.js'\n\n// Legacy stealth proof exports (deprecated)\nexport {\n  generateProof,\n  verifyProof,\n  generateStealthProof,\n  getStealthCircuitArtifacts,\n} from './proof.js'\nexport type {\n  CircuitType,\n  StealthCircuitType,\n  StealthCircuitInputs,\n  Stealth1x2CircuitInputs,\n  Stealth2x2CircuitInputs,\n} from './proof.js'\n\nexport * from './types.js'\n\n// Swap order book module\nexport {\n  computeGiveAmount,\n  computeTakeAmount,\n  computeRate,\n  formatRate,\n  computeCancelKeyHash,\n  generateCancelSecret,\n  filterOrdersByASP,\n  filterOrdersByTokenPair,\n  isFillerASPAccepted,\n  isOrderActive,\n  computeTotalBuyAmount,\n  computeFillPercentage,\n  storeCancelSecret,\n  getCancelSecret,\n  removeCancelSecret,\n  getOwnOrderIds,\n  RATE_PRECISION,\n  SWAP_EVENTS_ABI,\n  SWAP_ORDER_PLACED_EVENT,\n  SWAP_ORDER_FILLED_EVENT,\n  SWAP_ORDER_CLAIMED_EVENT,\n  SWAP_ORDER_CANCELLED_EVENT,\n} from './swap.js'\nexport type {\n  SwapOrder,\n  SwapOrderParams,\n  SwapFillParams,\n  SwapOrderEvent,\n  SwapFillEvent,\n} from './swap.js'\n\n// Account adapter (pluggable key source + persistence)\nexport { DirectAccountAdapter, StorableAccountAdapter } from './account.js'\nexport type { IAccountAdapter } from './account.js'\n\n// ASP provider (pluggable compliance)\nexport type { IASPProvider, ASPMembershipProof } from './asp-provider.js'\n\n// Note store (single source of truth for note state)\nexport { NoteStore } from './note-store.js'\nexport type { INoteStore, ShieldedNote, NoteStatus, ProofSystem } from './note-store.js'\n\n// ASP (Association Set Provider) module\nexport {\n  computeSingleOriginASPRoot,\n  generateSingleOriginASPProof,\n  verifyASPProof,\n  DEMO_ASP_ID,\n  DEMO_ASP_NAME,\n  createDemoASPRoot,\n  // Multi-origin ASP tree\n  buildASPTree,\n  computeMultiOriginASPRoot,\n  generateMultiOriginASPProof,\n  generateASPProof,\n} from './asp.js'\nexport type { ASPProof } from './asp.js'\n\n// Transfer module\nexport {\n  syncMerkleTree,\n  getMerkleProofsForNotes,\n  computeNullifier,\n  buildUPPTransferCircuitInputs,\n  buildTransfer,\n  formatOutputForContract,\n} from './transfer.js'\nexport type {\n  TransferStage,\n  SpendableNote,\n  MerkleProofWithNote,\n  TransferContext,\n  TransferBuildResult,\n  NoteWithAmount,\n} from './transfer.js'\n"]}

package/dist/{chunk-ND56VNCF.js → chunk-D4VCRPKS.js}

@@ -988,5 +988,5 @@ function sleep(ms) {
 }
 
 export { computeSearchTag, makeRpcIndexer, matchesSearchTag, tryDecryptNote, unpackNoteData };
-//# sourceMappingURL=chunk-ND56VNCF.js.map
-//# sourceMappingURL=chunk-ND56VNCF.js.map
+//# sourceMappingURL=chunk-D4VCRPKS.js.map
+//# sourceMappingURL=chunk-D4VCRPKS.js.map