@permissionless-technologies/upp-sdk 0.4.21 → 0.4.22

package/dist/chunk-KR4GB6VC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/proof.ts"],"names":["snarkjs"],"mappings":";;;AAWA,IAAI,OAAA,GAAe,IAAA;AAKnB,eAAe,WAAA,GAA4B;AACzC,EAAA,IAAI,SAAS,OAAO,OAAA;AACpB,EAAA,OAAA,GAAU,MAAM,OAAO,SAAS,CAAA;AAChC,EAAA,OAAO,OAAA;AACT;AAOO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,cAAA,GAAiB;AA+SvB,SAAS,sBAAA,CACd,OAAA,EACA,OAAA,GAAkB,YAAA,EACA;AAClB,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,GAAI,OAAA,GAAU,GAAG,OAAO,CAAA,CAAA,CAAA;AAEzD,EAAA,MAAM,UAAA,GAAuD;AAAA,IAC3D,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA;AAAA,KACf;AAAA,IACA,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,UAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,UAAA;AAAA,KACf;AAAA,IACA,QAAA,EAAU;AAAA,MACR,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,aAAA;AAAA,KACf;AAAA,IACA,SAAA,EAAW;AAAA,MACT,IAAA,EAAM,GAAG,IAAI,CAAA,cAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,cAAA;AAAA,KACf;AAAA,IACA,kBAAA,EAAoB;AAAA,MAClB,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA;AAAA,KACf;AAAA,IACA,kBAAA,EAAoB;AAAA,MAClB,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,uBAAA;AAAA;AACf,GACF;AAEA,EAAA,OAAO,WAAW,OAAO,CAAA;AAC3B;AAKO,SAAS,0BAAA,CACd,OAAA,EACA,OAAA,GAAkB,YAAA,EACA;AAClB,EAAA,MAAM,OAAO,OAAA,CAAQ,QAAA,CAAS,GAAG,CAAA,GAAI,OAAA,GAAU,GAAG,OAAO,CAAA,CAAA,CAAA;AAEzD,EAAA,MAAM,UAAA,GAA2D;AAAA,IAC/D,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,qBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,2BAAA;AAAA,KACf;AAAA,IACA,KAAA,EAAO;AAAA,MACL,IAAA,EAAM,GAAG,IAAI,CAAA,gBAAA,CAAA;AAAA,MACb,IAAA,EAAM,GAAG,IAAI,CAAA,sBAAA;AAAA;AACf,GACF;AAEA,EAAA,OAAO,WAAW,OAAO,CAAA;AAC3B;AAsCA,eAAsB,gBAAA,CACpB,WAAA,EACA,MAAA,EACA,OAAA,EACA,YACA,OAAA,EAMsB;AACtB,EAAA,MAAMA,QAAAA,GAAU,MAAM,WAAA,EAAY;AAGlC,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI,QAAA;AAEJ,EAAA,IAAI,SAAS,SAAA,EAAW;AACtB,IAAA,QAAA,GAAW,QAAQ,SAAA,CAAU,IAAA;AAC7B,IAAA,QAAA,GAAW,QAAQ,SAAA,CAAU,IAAA;AAAA,EAC/B,CAAA,MAAO;AACL,IAAA,UAAA,GAAa,aAAA,EAAe,CAAA,SAAA,EAAY,WAAW,CAAA,iBAAA,CAAmB,CAAA;AACtE,IAAA,MAAM,KAAA,GAAQ,qBAAqB,MAAA,EAAO;AAC1C,IAAA,MAAM,WAAW,MAAM,KAAA,CAAM,aAAa,WAAA,EAAa,OAAA,EAAS,SAAS,kBAAkB,CAAA;AAC3F,IAAA,QAAA,GAAW,QAAA,CAAS,IAAA;AACpB,IAAA,QAAA,GAAW,QAAA,CAAS,IAAA;AAAA,EACtB;AAEA,EAAA,UAAA,GAAa,WAAW,8BAA8B,CAAA;AAGtD,EAAA,MAAM,SAAS,UAAA,GAAa;AAAA,IAC1B,KAAA,EAAO,CAAC,GAAA,KAAgB;AACtB,MAAA,IAAI,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG,UAAA,CAAW,UAAU,+BAA+B,CAAA;AAAA,WAAA,IACxE,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG,UAAA,CAAW,UAAU,qCAAqC,CAAA;AAAA,WAAA,IACnF,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG,UAAA,CAAW,UAAU,kCAAkC,CAAA;AAAA,WAAA,IAChF,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG,UAAA,CAAW,UAAU,0BAA0B,CAAA;AAAA,WAAA,IACxE,IAAI,QAAA,CAAS,SAAS,CAAA,EAAG,UAAA,CAAW,UAAU,6BAA6B,CAAA;AAAA,WAAA,IAC3E,IAAI,QAAA,CAAS,iBAAiB,CAAA,EAAG,UAAA,CAAW,QAAQ,gBAAgB,CAAA;AAAA,IAC/E,CAAA;AAAA,IACA,MAAM,MAAM;AAAA,IAAC,CAAA;AAAA,IACb,MAAM,MAAM;AAAA,IAAC,CAAA;AAAA,IACb,OAAO,MAAM;AAAA,IAAC;AAAA,GAChB,GAAI,MAAA;AAEJ,EAAA,UAAA,GAAa,WAAW,sBAAsB,CAAA;AAG9C,EAAA,MAAM,MAAA,GAAS,MAAMA,QAAAA,CAAQ,KAAA,CAAM,UAAU,MAAA,EAAQ,QAAA,EAAU,UAAU,MAAM,CAAA;AAE/E,EAAA,OAAO;AAAA,IACL,KAAA,EAAO;AAAA,MACL,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,eAAe,MAAA,CAAO;AAAA,KACxB;AAAA,IACA,eAAe,MAAA,CAAO;AAAA,GACxB;AACF;AAKA,eAAsB,aAAA,CACpB,cACA,OAAA,EACgB;AAChB,EAAA,MAAM,IAAI,MAAM,0CAA0C,CAAA;AAC5D;AAaA,eAAsB,oBAAA,CACpB,OAAA,EACA,MAAA,EACA,OAAA,GAAkB,YAAA,EACI;AACtB,EAAA,MAAMA,QAAAA,GAAU,MAAM,WAAA,EAAY;AAClC,EAAA,MAAM,SAAA,GAAY,0BAAA,CAA2B,OAAA,EAAS,OAAO,CAAA;AAE7D,EAAA,MAAM,MAAA,GAAS,MAAMA,QAAAA,CAAQ,OAAA,CAAQ,UAAU,MAAA,EAAQ,SAAA,CAAU,IAAA,EAAM,SAAA,CAAU,IAAI,CAAA;AAErF,EAAA,OAAO;AAAA,IACL,KAAA,EAAO;AAAA,MACL,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,eAAe,MAAA,CAAO;AAAA,KACxB;AAAA,IACA,eAAe,MAAA,CAAO;AAAA,GACxB;AACF;AAKA,eAAsB,WAAA,CACpB,cACA,MAAA,EACkB;AAClB,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AA2BA,SAAS,cAAc,KAAA,EAAgC;AACrD,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,KAAA,CAAM,CAAC,CAAE,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAA,EAAK,GAAG,CAAA;AAC1D,EAAA,MAAM,CAAA,GAAI,MAAA,CAAO,KAAA,CAAM,CAAC,CAAE,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAA,EAAK,GAAG,CAAA;AAC1D,EAAA,OAAO,CAAA,EAAA,EAAK,CAAC,CAAA,EAAG,CAAC,CAAA,CAAA;AACnB;AAQA,eAAsB,4BAA4B,KAAA,EAG/C;AACD,EAAA,MAAM,IAAI,KAAA,CAAM,KAAA;AAEhB,EAAA,OAAO;AAAA,IACL,WAAA,EAAa;AAAA,MACX,CAAA,EAAG,aAAA,CAAc,CAAA,CAAE,CAAC,CAAA;AAAA,MACpB,CAAA,EAAG,aAAA,CAAc,CAAA,CAAE,CAAC,CAAA;AAAA,MACpB,CAAA,EAAG,aAAA,CAAc,CAAA,CAAE,CAAC,CAAA;AAAA,MACpB,CAAA,EAAG,aAAA,CAAc,CAAA,CAAE,CAAC,CAAA;AAAA,MACpB,EAAA,EAAI,aAAA,CAAc,CAAA,CAAE,EAAE,CAAA;AAAA,MACtB,EAAA,EAAI,aAAA,CAAc,CAAA,CAAE,EAAE,CAAA;AAAA,MACtB,EAAA,EAAI,aAAA,CAAc,CAAA,CAAE,EAAE,CAAA;AAAA,MACtB,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,MACvB,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,MACvB,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,MACvB,OAAA,EAAS,MAAA,CAAO,CAAA,CAAE,OAAO,CAAA;AAAA,MACzB,OAAA,EAAS,MAAA,CAAO,CAAA,CAAE,OAAO,CAAA;AAAA,MACzB,OAAA,EAAS,MAAA,CAAO,CAAA,CAAE,OAAO,CAAA;AAAA,MACzB,GAAA,EAAK,aAAA,CAAc,CAAA,CAAE,GAAG,CAAA;AAAA,MACxB,IAAA,EAAM,aAAA,CAAc,CAAA,CAAE,IAAI;AAAA,KAC5B;AAAA,IACA,aAAA,EAAe,MAAM,aAAA,CAAc,GAAA,CAAI,CAAC,CAAA,KAAc,MAAA,CAAO,CAAC,CAAC;AAAA,GACjE;AACF;AAOO,SAAS,uBAAuB,KAAA,EAIrC;AACA,EAAA,MAAM,EAAE,IAAA,EAAM,IAAA,EAAM,IAAA,KAAS,KAAA,CAAM,KAAA;AAEnC,EAAA,OAAO;AAAA,IACL,CAAA,EAAG,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC,CAAA;AAAA,IACpC,CAAA,EAAG;AAAA,MACD,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,EAAE,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,CAAC,CAAC,CAAC,CAAA;AAAA,MACvC,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,EAAE,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,CAAE,CAAC,CAAC,CAAC;AAAA,KACzC;AAAA,IACA,CAAA,EAAG,CAAC,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG,MAAA,CAAO,IAAA,CAAK,CAAC,CAAC,CAAC;AAAA,GACtC;AACF","file":"chunk-KR4GB6VC.js","sourcesContent":["/**\n * ZK Proof Generation and Verification (BLS12-381 PLONK)\n *\n * Uses snarkjs for PLONK proof generation over the BLS12-381 curve.\n * PLONK provides a universal trusted setup (no per-circuit ceremony).\n */\n\nimport type { Proof } from './types.js'\nimport { CircuitArtifactCache, type DownloadProgress } from './circuit-cache.js'\n\n// Lazy-loaded snarkjs reference\nlet snarkjs: any = null\n\n/**\n * Load snarkjs dynamically\n */\nasync function loadSnarkjs(): Promise<any> {\n  if (snarkjs) return snarkjs\n  snarkjs = await import('snarkjs')\n  return snarkjs\n}\n\n// ============================================================================\n// UPP Circuit Constants\n// ============================================================================\n\n/** State tree depth (32 levels = ~4B notes) */\nexport const STATE_TREE_DEPTH = 32\n\n/** ASP tree depth (20 levels = ~1M addresses) */\nexport const ASP_TREE_DEPTH = 20\n\n// ============================================================================\n// UPP Circuit Types\n// ============================================================================\n\n/**\n * Circuit types available in UPP (full protocol)\n */\nexport type UPPCircuitType = 'transfer' | 'merge' | 'withdraw' | 'joinsplit' | 'merge_transfer_2x2' | 'merge_transfer_4x2'\n\n/**\n * @deprecated Use UPPCircuitType instead\n */\nexport type CircuitType = 'shield' | 'transfer' | 'merge' | 'withdraw'\n\n/**\n * @deprecated Stealth circuits are being replaced by UPP circuits\n */\nexport type StealthCircuitType = '1x2' | '2x2'\n\n/**\n * Input signals for UPP transfer circuit (1-in-2-out, BLS12-381 PLONK)\n *\n * Matches transfer.circom: Transfer(32, 20)\n * Public: stateRoot, aspRoot, nullifier, outputCommitment1, outputCommitment2, token\n *\n * Note: Uses hash-based ownership (ownerHash) instead of BabyJubJub pubkeys.\n */\nexport interface UPPTransferCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier: string\n  outputCommitment1: string\n  outputCommitment2: string\n  token: string\n\n  // Private inputs - Input Note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputOrigin: string\n  inputLeafIndex: string\n  inputPathElements: string[]  // 32 elements\n  inputPathIndices: string[]   // 32 elements\n\n  // Private inputs - ASP Membership Proof\n  aspPathElements: string[]    // 20 elements\n  aspPathIndices: string[]     // 20 elements\n\n  // Private inputs - Output Notes (hash-based ownership)\n  outputAmount1: string\n  outputOwnerHash1: string\n  outputBlinding1: string\n\n  outputAmount2: string\n  outputOwnerHash2: string\n  outputBlinding2: string\n}\n\n/**\n * Input signals for UPP withdraw circuit (BLS12-381 PLONK)\n *\n * Matches withdraw.circom with optional ASP check (ragequit support)\n */\nexport interface UPPWithdrawCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier: string\n  amount: string\n  recipient: string\n  token: string\n  isRagequit: string  // '0' or '1'\n\n  // Private inputs - Input Note\n  inputAmount: string\n  inputOneTimeSecret: string\n  inputBlinding: string\n  inputOrigin: string\n  inputLeafIndex: string\n  inputPathElements: string[]  // 32 elements\n  inputPathIndices: string[]   // 32 elements\n\n  // Private inputs - ASP Membership Proof (can be zeros if ragequit)\n  aspPathElements: string[]    // 20 elements\n  aspPathIndices: string[]     // 20 elements\n}\n\n/**\n * Input signals for UPP merge circuit (2-in-1-out, BLS12-381 PLONK)\n */\nexport interface UPPMergeCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  nullifier1: string\n  nullifier2: string\n  outputCommitment: string\n  merger: string\n  token: string\n\n  // Private inputs - Input Note 1\n  inputAmount1: string\n  inputOneTimeSecret1: string\n  inputBlinding1: string\n  inputOrigin1: string\n  inputLeafIndex1: string\n  inputPathElements1: string[]\n  inputPathIndices1: string[]\n\n  // Private inputs - Input Note 2\n  inputAmount2: string\n  inputOneTimeSecret2: string\n  inputBlinding2: string\n  inputOrigin2: string\n  inputLeafIndex2: string\n  inputPathElements2: string[]\n  inputPathIndices2: string[]\n\n  // Private inputs - Output Note\n  outputAmount: string\n  outputOwnerHash: string\n  outputBlinding: string\n}\n\n/**\n * Input signals for UPP joinsplit circuit (4-in-2-out, BLS12-381 PLONK)\n */\nexport interface UPPJoinSplitCircuitInputs {\n  // Public inputs\n  stateRoot: string\n  aspRoot: string\n  nullifier1: string\n  nullifier2: string\n  nullifier3: string\n  nullifier4: string\n  outputCommitment1: string\n  outputCommitment2: string\n  token: string\n\n  // Private inputs - 4 Input Notes\n  inputAmount1: string; inputOneTimeSecret1: string; inputBlinding1: string\n  inputOrigin1: string; inputLeafIndex1: string\n  inputPathElements1: string[]; inputPathIndices1: string[]\n\n  inputAmount2: string; inputOneTimeSecret2: string; inputBlinding2: string\n  inputOrigin2: string; inputLeafIndex2: string\n  inputPathElements2: string[]; inputPathIndices2: string[]\n\n  inputAmount3: string; inputOneTimeSecret3: string; inputBlinding3: string\n  inputOrigin3: string; inputLeafIndex3: string\n  inputPathElements3: string[]; inputPathIndices3: string[]\n\n  inputAmount4: string; inputOneTimeSecret4: string; inputBlinding4: string\n  inputOrigin4: string; inputLeafIndex4: string\n  inputPathElements4: string[]; inputPathIndices4: string[]\n\n  // Private inputs - ASP Membership Proof\n  aspPathElements: string[]\n  aspPathIndices: string[]\n\n  // Private inputs - Output Notes\n  outputAmount1: string; outputOwnerHash1: string; outputBlinding1: string\n  outputAmount2: string; outputOwnerHash2: string; outputBlinding2: string\n}\n\n/**\n * @deprecated Use UPPTransferCircuitInputs instead\n */\nexport interface TransferCircuitInputs {\n  stateRoot: bigint\n  aspRoot: bigint\n  nullifier: bigint\n  outputCommitment1: bigint\n  outputCommitment2: bigint\n  token: bigint\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n  statePathElements: bigint[]\n  statePathIndices: bigint\n  aspPathElements: bigint[]\n  outAmount1: bigint\n  outBlinding1: bigint\n  outOrigin1: bigint\n  outAmount2: bigint\n  outBlinding2: bigint\n  outOrigin2: bigint\n}\n\n/**\n * Input signals for shield circuit\n */\nexport interface ShieldCircuitInputs {\n  commitment: bigint\n  token: bigint\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n}\n\n/**\n * Input signals for merge circuit\n */\nexport interface MergeCircuitInputs {\n  stateRoot: bigint\n  nullifier1: bigint\n  nullifier2: bigint\n  outputCommitment: bigint\n  newOrigin: bigint\n  token: bigint\n  amount1: bigint\n  blinding1: bigint\n  origin1: bigint\n  token1: bigint\n  pathElements1: bigint[]\n  pathIndices1: bigint\n  amount2: bigint\n  blinding2: bigint\n  origin2: bigint\n  token2: bigint\n  pathElements2: bigint[]\n  pathIndices2: bigint\n  outputAmount: bigint\n  outputBlinding: bigint\n}\n\n/**\n * Input signals for withdraw circuit\n */\nexport interface WithdrawCircuitInputs {\n  stateRoot: bigint\n  aspRoot: bigint\n  nullifier: bigint\n  withdrawAmount: bigint\n  recipient: bigint\n  token: bigint\n  isRagequit: bigint\n  amount: bigint\n  blinding: bigint\n  origin: bigint\n  statePathElements: bigint[]\n  statePathIndices: bigint\n  aspPathElements: bigint[]\n}\n\n/**\n * Circuit inputs union type\n */\nexport type CircuitInputs =\n  | ShieldCircuitInputs\n  | TransferCircuitInputs\n  | MergeCircuitInputs\n  | WithdrawCircuitInputs\n\n// ============================================================================\n// Stealth Circuit Types (deprecated)\n// ============================================================================\n\n/**\n * @deprecated\n */\nexport interface Stealth1x2CircuitInputs {\n  root: string; nullifierHash: string; publicAmount: string\n  recipient: string; extDataHash: string\n  inputAmount: string; inputOneTimeSecret: string; inputBlinding: string\n  inputLeafIndex: string; inputPathElements: string[]; inputPathIndices: string[]\n  outputAmount1: string; outputPubkeyX1: string; outputPubkeyY1: string; outputBlinding1: string\n  outputAmount2: string; outputPubkeyX2: string; outputPubkeyY2: string; outputBlinding2: string\n}\n\n/**\n * @deprecated\n */\nexport interface Stealth2x2CircuitInputs {\n  root: string; nullifierHash1: string; nullifierHash2: string\n  publicAmount: string; recipient: string; extDataHash: string\n  inputAmount1: string; inputOneTimeSecret1: string; inputBlinding1: string\n  inputLeafIndex1: string; inputPathElements1: string[]; inputPathIndices1: string[]\n  inputAmount2: string; inputOneTimeSecret2: string; inputBlinding2: string\n  inputLeafIndex2: string; inputPathElements2: string[]; inputPathIndices2: string[]\n  outputAmount1: string; outputPubkeyX1: string; outputPubkeyY1: string; outputBlinding1: string\n  outputAmount2: string; outputPubkeyX2: string; outputPubkeyY2: string; outputBlinding2: string\n}\n\n/** @deprecated */\nexport type StealthCircuitInputs = Stealth1x2CircuitInputs | Stealth2x2CircuitInputs\n\n/**\n * Circuit artifact paths\n */\nexport interface CircuitArtifacts {\n  wasm: string\n  zkey: string\n}\n\n/**\n * Get circuit artifacts for a UPP circuit\n *\n * @param circuit - UPP circuit type\n * @param baseUrl - Base URL for circuit files (default: '/circuits/')\n */\nexport function getUPPCircuitArtifacts(\n  circuit: UPPCircuitType,\n  baseUrl: string = '/circuits/'\n): CircuitArtifacts {\n  const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`\n\n  const circuitMap: Record<UPPCircuitType, CircuitArtifacts> = {\n    transfer: {\n      wasm: `${base}transfer.wasm`,\n      zkey: `${base}transfer.zkey`,\n    },\n    merge: {\n      wasm: `${base}merge.wasm`,\n      zkey: `${base}merge.zkey`,\n    },\n    withdraw: {\n      wasm: `${base}withdraw.wasm`,\n      zkey: `${base}withdraw.zkey`,\n    },\n    joinsplit: {\n      wasm: `${base}joinsplit.wasm`,\n      zkey: `${base}joinsplit.zkey`,\n    },\n    merge_transfer_2x2: {\n      wasm: `${base}merge_transfer_2x2.wasm`,\n      zkey: `${base}merge_transfer_2x2.zkey`,\n    },\n    merge_transfer_4x2: {\n      wasm: `${base}merge_transfer_4x2.wasm`,\n      zkey: `${base}merge_transfer_4x2.zkey`,\n    },\n  }\n\n  return circuitMap[circuit]\n}\n\n/**\n * @deprecated Use getUPPCircuitArtifacts instead\n */\nexport function getStealthCircuitArtifacts(\n  circuit: StealthCircuitType,\n  baseUrl: string = '/circuits/'\n): CircuitArtifacts {\n  const base = baseUrl.endsWith('/') ? baseUrl : `${baseUrl}/`\n\n  const circuitMap: Record<StealthCircuitType, CircuitArtifacts> = {\n    '1x2': {\n      wasm: `${base}shielded_stealth.wasm`,\n      zkey: `${base}shielded_stealth_final.zkey`,\n    },\n    '2x2': {\n      wasm: `${base}stealth_2x2.wasm`,\n      zkey: `${base}stealth_2x2_final.zkey`,\n    },\n  }\n\n  return circuitMap[circuit]\n}\n\n/**\n * UPP circuit inputs union type\n */\nexport type UPPCircuitInputs =\n  | UPPTransferCircuitInputs\n  | UPPWithdrawCircuitInputs\n  | UPPMergeCircuitInputs\n  | UPPJoinSplitCircuitInputs\n\n/**\n * PLONK proving stage for progress reporting\n */\nexport type PlonkProvingStage =\n  | 'downloading'\n  | 'loading'\n  | 'witness'\n  | 'round1'\n  | 'round2'\n  | 'round3'\n  | 'round4'\n  | 'round5'\n  | 'done'\n\n/**\n * Generate a ZK proof for a UPP circuit (BLS12-381 PLONK)\n *\n * Downloads circuit artifacts (with caching) and generates a PLONK proof.\n * Artifacts are cached in IndexedDB after first download.\n *\n * @param circuitType - Which UPP circuit to use\n * @param inputs - Circuit input signals\n * @param baseUrl - Base URL for circuit artifacts (defaults to CDN)\n * @param onProgress - Optional callback for proving progress\n * @param options - Optional pre-loaded artifacts or download progress callback\n * @returns Generated proof and public signals\n */\nexport async function generateUPPProof(\n  circuitType: UPPCircuitType,\n  inputs: UPPCircuitInputs,\n  baseUrl?: string,\n  onProgress?: (stage: PlonkProvingStage, message: string) => void,\n  options?: {\n    /** Pre-loaded artifacts (bypasses download + cache entirely) */\n    artifacts?: { wasm: Uint8Array; zkey: Uint8Array }\n    /** Download progress callback (bytes downloaded / total) */\n    onDownloadProgress?: (p: DownloadProgress) => void\n  }\n): Promise<ProofResult> {\n  const snarkjs = await loadSnarkjs()\n\n  // Resolve circuit artifacts: pre-loaded > cache > download\n  let wasmData: Uint8Array | string\n  let zkeyData: Uint8Array | string\n\n  if (options?.artifacts) {\n    wasmData = options.artifacts.wasm\n    zkeyData = options.artifacts.zkey\n  } else {\n    onProgress?.('downloading', `Checking ${circuitType} circuit cache...`)\n    const cache = CircuitArtifactCache.shared()\n    const resolved = await cache.getArtifacts(circuitType, baseUrl, options?.onDownloadProgress)\n    wasmData = resolved.wasm\n    zkeyData = resolved.zkey\n  }\n\n  onProgress?.('loading', 'Loading circuit artifacts...')\n\n  // Create a logger that maps snarkjs debug messages to progress stages\n  const logger = onProgress ? {\n    debug: (msg: string) => {\n      if (msg.includes('ROUND 1')) onProgress('round1', 'Computing wire polynomials...')\n      else if (msg.includes('ROUND 2')) onProgress('round2', 'Computing permutation polynomial...')\n      else if (msg.includes('ROUND 3')) onProgress('round3', 'Computing quotient polynomial...')\n      else if (msg.includes('ROUND 4')) onProgress('round4', 'Computing evaluations...')\n      else if (msg.includes('ROUND 5')) onProgress('round5', 'Computing opening proofs...')\n      else if (msg.includes('PROVER FINISHED')) onProgress('done', 'Proof complete')\n    },\n    info: () => {},\n    warn: () => {},\n    error: () => {},\n  } : undefined\n\n  onProgress?.('witness', 'Computing witness...')\n\n  // Use PLONK prover — pass Uint8Array directly (snarkjs/fastfile accepts it)\n  const result = await snarkjs.plonk.fullProve(inputs, wasmData, zkeyData, logger)\n\n  return {\n    proof: {\n      proof: result.proof,\n      publicSignals: result.publicSignals,\n    },\n    publicSignals: result.publicSignals,\n  }\n}\n\n/**\n * @deprecated Use generateUPPProof instead\n */\nexport async function generateProof(\n  _circuitType: CircuitType,\n  _inputs: CircuitInputs\n): Promise<Proof> {\n  throw new Error('Deprecated: Use generateUPPProof instead')\n}\n\n/**\n * Result from proof generation\n */\nexport interface ProofResult {\n  proof: Proof\n  publicSignals: string[]\n}\n\n/**\n * @deprecated Stealth circuits use old Groth16 format\n */\nexport async function generateStealthProof(\n  circuit: StealthCircuitType,\n  inputs: StealthCircuitInputs,\n  baseUrl: string = '/circuits/'\n): Promise<ProofResult> {\n  const snarkjs = await loadSnarkjs()\n  const artifacts = getStealthCircuitArtifacts(circuit, baseUrl)\n\n  const result = await snarkjs.groth16.fullProve(inputs, artifacts.wasm, artifacts.zkey)\n\n  return {\n    proof: {\n      proof: result.proof,\n      publicSignals: result.publicSignals,\n    },\n    publicSignals: result.publicSignals,\n  }\n}\n\n/**\n * Verify a ZK proof\n */\nexport async function verifyProof(\n  _circuitType: CircuitType,\n  _proof: Proof\n): Promise<boolean> {\n  throw new Error('Not implemented')\n}\n\n/**\n * PLONK proof struct matching PlonkVerifierBLS12381.Proof ABI\n */\nexport interface PlonkProofStruct {\n  A: `0x${string}`\n  B: `0x${string}`\n  C: `0x${string}`\n  Z: `0x${string}`\n  T1: `0x${string}`\n  T2: `0x${string}`\n  T3: `0x${string}`\n  eval_a: bigint\n  eval_b: bigint\n  eval_c: bigint\n  eval_s1: bigint\n  eval_s2: bigint\n  eval_zw: bigint\n  Wxi: `0x${string}`\n  Wxiw: `0x${string}`\n}\n\n/**\n * Encode a BLS12-381 G1 point from snarkjs format [x, y, \"1\"] to 128-byte hex\n * (EIP-2537: 64 bytes x + 64 bytes y, big-endian, zero-padded)\n */\nfunction encodeG1Point(point: string[]): `0x${string}` {\n  const x = BigInt(point[0]!).toString(16).padStart(128, '0')\n  const y = BigInt(point[1]!).toString(16).padStart(128, '0')\n  return `0x${x}${y}`\n}\n\n/**\n * Format PLONK proof for on-chain verification\n *\n * Converts snarkjs PLONK proof to the PlonkVerifierBLS12381.Proof struct\n * that the pool contract expects as a tuple parameter.\n */\nexport async function formatPlonkProofForContract(proof: Proof): Promise<{\n  proofStruct: PlonkProofStruct\n  publicSignals: bigint[]\n}> {\n  const p = proof.proof\n\n  return {\n    proofStruct: {\n      A: encodeG1Point(p.A),\n      B: encodeG1Point(p.B),\n      C: encodeG1Point(p.C),\n      Z: encodeG1Point(p.Z),\n      T1: encodeG1Point(p.T1),\n      T2: encodeG1Point(p.T2),\n      T3: encodeG1Point(p.T3),\n      eval_a: BigInt(p.eval_a),\n      eval_b: BigInt(p.eval_b),\n      eval_c: BigInt(p.eval_c),\n      eval_s1: BigInt(p.eval_s1),\n      eval_s2: BigInt(p.eval_s2),\n      eval_zw: BigInt(p.eval_zw),\n      Wxi: encodeG1Point(p.Wxi),\n      Wxiw: encodeG1Point(p.Wxiw),\n    },\n    publicSignals: proof.publicSignals.map((s: string) => BigInt(s)),\n  }\n}\n\n/**\n * @deprecated Use formatPlonkProofForContract for PLONK proofs.\n *\n * Format Groth16 proof for on-chain verification (old format).\n */\nexport function formatProofForContract(proof: Proof): {\n  a: [bigint, bigint]\n  b: [[bigint, bigint], [bigint, bigint]]\n  c: [bigint, bigint]\n} {\n  const { pi_a, pi_b, pi_c } = proof.proof\n\n  return {\n    a: [BigInt(pi_a[0]), BigInt(pi_a[1])],\n    b: [\n      [BigInt(pi_b[0][1]), BigInt(pi_b[0][0])],\n      [BigInt(pi_b[1][1]), BigInt(pi_b[1][0])],\n    ],\n    c: [BigInt(pi_c[0]), BigInt(pi_c[1])],\n  }\n}\n"]}

package/dist/{chunk-C7DUABSG.js → chunk-Q6BLTPWV.js}

@@ -199,6 +199,7 @@ var ProofWorkerManager = class {
       this.handleMessage(e.data);
     };
     this.worker.onerror = (e) => {
+      console.error("[ProofWorkerManager] Worker error:", e.message, e);
       for (const [, p] of this.pending) {
         p.reject(new Error(`Worker error: ${e.message}`));
       }
@@ -212,6 +213,9 @@ var ProofWorkerManager = class {
       case "progress":
         entry.onProgress?.(data.stage, data.message);
         break;
+      case "download-progress":
+        entry.onDownloadProgress?.(data.progress);
+        break;
       case "result":
         this.pending.delete(data.id);
         entry.resolve(data.proof);
@@ -228,7 +232,7 @@ var ProofWorkerManager = class {
    * @param signal - AbortSignal for cancellation. When aborted, the promise
    *   rejects with AbortError. Call terminate() for hard cancellation.
    */
-  async prove(circuitType, inputs, baseUrl, onProgress, signal) {
+  async prove(circuitType, inputs, baseUrl, onProgress, signal, onDownloadProgress) {
     if (this.terminated) {
       throw new Error("Worker has been terminated");
     }
@@ -238,7 +242,7 @@ var ProofWorkerManager = class {
         reject(new DOMException("Proof generation aborted", "AbortError"));
         return;
       }
-      this.pending.set(id, { resolve, reject, onProgress });
+      this.pending.set(id, { resolve, reject, onProgress, onDownloadProgress });
       const onAbort = () => {
         this.pending.delete(id);
         reject(new DOMException("Proof generation aborted", "AbortError"));
@@ -266,13 +270,13 @@ var ProofWorkerManager = class {
     this.pending.clear();
   }
 };
-async function generateUPPProofAsync(circuitType, inputs, baseUrl = "/circuits/", options) {
-  const { onProgress, signal, worker } = options ?? {};
+async function generateUPPProofAsync(circuitType, inputs, baseUrl, options) {
+  const { onProgress, onDownloadProgress, signal, worker } = options ?? {};
   if (worker) {
-    return worker.prove(circuitType, inputs, baseUrl, onProgress, signal);
+    return worker.prove(circuitType, inputs, baseUrl ?? "", onProgress, signal, onDownloadProgress);
   }
-  const { generateUPPProof } = await import('./proof-XQG5DN5N.js');
-  return generateUPPProof(circuitType, inputs, baseUrl, onProgress);
+  const { generateUPPProof } = await import('./proof-YMXBL4D5.js');
+  return generateUPPProof(circuitType, inputs, baseUrl, onProgress, { onDownloadProgress });
 }
 var RATE_PRECISION = 10n ** 18n;
 var SWAP_ORDER_PLACED_EVENT = {
@@ -667,5 +671,5 @@ function safeGetAddress(addr) {
 }
 
 export { ADDRESS_VERSION, DirectAccountAdapter, NoteStore, ProofWorkerManager, RATE_PRECISION, STARK_ADDRESS_VERSION, STARK_STEALTH_ADDRESS_PREFIX, STEALTH_ADDRESS_PREFIX, SWAP_EVENTS_ABI, SWAP_ORDER_CANCELLED_EVENT, SWAP_ORDER_CLAIMED_EVENT, SWAP_ORDER_FILLED_EVENT, SWAP_ORDER_PLACED_EVENT, StorableAccountAdapter, computeCancelKeyHash, computeFillPercentage, computeGiveAmount, computeNoteEncryptionKey, computeRate, computeTakeAmount, computeTotalBuyAmount, createOneTimeKeys, decodeStarkStealthAddress, decodeStealthAddress, detectAddressType, encodeStarkStealthAddress, encodeStealthAddress, filterOrdersByASP, filterOrdersByTokenPair, formatRate, generateCancelSecret, generateStarkStealthAddress, generateStealthAddress, generateUPPProofAsync, getCancelSecret, getOwnOrderIds, init_stealth, isFillerASPAccepted, isOrderActive, isValidStarkStealthAddress, isValidStealthAddress, removeCancelSecret, stealth_exports, storeCancelSecret, verifyOwnership };
-//# sourceMappingURL=chunk-C7DUABSG.js.map
-//# sourceMappingURL=chunk-C7DUABSG.js.map
+//# sourceMappingURL=chunk-Q6BLTPWV.js.map
+//# sourceMappingURL=chunk-Q6BLTPWV.js.map

package/dist/chunk-Q6BLTPWV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/stealth.ts","../src/core/proof-worker.ts","../src/core/swap.ts","../src/core/account.ts","../src/core/note-store.ts"],"names":["ownerHash","toHex"],"mappings":";;;;;;AAAA,IAAA,eAAA,GAAA;AAAA,QAAA,CAAA,eAAA,EAAA;AAAA,EAAA,eAAA,EAAA,MAAA,eAAA;AAAA,EAAA,qBAAA,EAAA,MAAA,qBAAA;AAAA,EAAA,4BAAA,EAAA,MAAA,4BAAA;AAAA,EAAA,sBAAA,EAAA,MAAA,sBAAA;AAAA,EAAA,wBAAA,EAAA,MAAA,wBAAA;AAAA,EAAA,iBAAA,EAAA,MAAA,iBAAA;AAAA,EAAA,yBAAA,EAAA,MAAA,yBAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,iBAAA,EAAA,MAAA,iBAAA;AAAA,EAAA,yBAAA,EAAA,MAAA,yBAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,2BAAA,EAAA,MAAA,2BAAA;AAAA,EAAA,sBAAA,EAAA,MAAA,sBAAA;AAAA,EAAA,0BAAA,EAAA,MAAA,0BAAA;AAAA,EAAA,qBAAA,EAAA,MAAA,qBAAA;AAAA,EAAA,eAAA,EAAA,MAAA;AAAA,CAAA,CAAA;AAsDO,SAAS,oBAAA,CACd,SAAA,EACA,WAAA,EACA,OAAA,GAAkB,CAAA,EACV;AAER,EAAA,MAAM,OAAO,IAAI,UAAA,CAAW,CAAA,GAAI,CAAA,GAAI,KAAK,CAAC,CAAA;AAC1C,EAAA,IAAI,MAAA,GAAS,CAAA;AAGb,EAAA,IAAA,CAAK,QAAQ,CAAA,GAAI,eAAA;AAGjB,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,CAAA,GAAK,GAAA;AAClC,EAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,OAAA,GAAU,GAAA;AAG3B,EAAA,MAAM,UAAA,GAAa,aAAA,CAAc,SAAA,EAAW,EAAE,CAAA;AAC9C,EAAA,IAAA,CAAK,GAAA,CAAI,YAAY,MAAM,CAAA;AAC3B,EAAA,MAAA,IAAU,EAAA;AAGV,EAAA,MAAM,YAAA,GAAe,aAAA,CAAc,WAAA,EAAa,EAAE,CAAA;AAClD,EAAA,IAAA,CAAK,GAAA,CAAI,cAAc,MAAM,CAAA;AAG7B,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AAGlC,EAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,sBAAA,EAAwB,KAAA,EAAO,aAAa,CAAA;AACpE;AAQO,SAAS,qBAAqB,OAAA,EAKnC;AAEA,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,OAAA,EAAS,aAAa,CAAA;AAGrD,EAAA,IAAI,OAAA,CAAQ,WAAW,sBAAA,EAAwB;AAC7C,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0CAAA,EAA6C,sBAAsB,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EACjH;AAGA,EAAA,MAAM,OAAO,IAAI,UAAA,CAAW,QAAQ,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AAG5D,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,MAAM,OAAA,GAAU,KAAK,MAAA,EAAQ,CAAA;AAE7B,EAAA,IAAI,YAAY,eAAA,EAAiB;AAC/B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,OAAO,CAAA,YAAA,EAAe,eAAe,CAAA,cAAA,CAAgB,CAAA;AAAA,EACvG;AAGA,EAAA,MAAM,OAAA,GACH,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,KACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,EAAA,GACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,CAAA,GACpB,KAAK,MAAA,EAAQ,CAAA;AAGf,EAAA,MAAM,YAAY,aAAA,CAAc,IAAA,CAAK,MAAM,MAAA,EAAQ,MAAA,GAAS,EAAE,CAAC,CAAA;AAC/D,EAAA,MAAA,IAAU,EAAA;AAGV,EAAA,MAAM,cAAc,aAAA,CAAc,IAAA,CAAK,MAAM,MAAA,EAAQ,MAAA,GAAS,EAAE,CAAC,CAAA;AAEjE,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF;AAKO,SAAS,sBAAsB,OAAA,EAA0B;AAC9D,EAAA,IAAI;AACF,IAAA,oBAAA,CAAqB,OAAO,CAAA;AAC5B,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAKO,SAAS,sBAAA,CAAuB,IAAA,EAAkB,OAAA,GAAkB,CAAA,EAAW;AACpF,EAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,aAAa,OAAO,CAAA;AACvE;AAeA,eAAsB,iBAAA,CACpB,qBACA,UAAA,EACsB;AACtB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,wBAAsB,CAAA;AAExD,EAAA,IAAI,eAAe,MAAA,EAAW;AAE5B,IAAA,MAAMA,UAAAA,GAAY,MAAM,QAAA,CAAS,CAAC,UAAU,CAAC,CAAA;AAC7C,IAAA,OAAO;AAAA,MACL,aAAA,EAAe,UAAA;AAAA,MACf,SAAA,EAAAA;AAAA,KACF;AAAA,EACF;AAGA,EAAA,MAAM,gBAAgB,kBAAA,EAAmB;AACzC,EAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,CAAC,aAAa,CAAC,CAAA;AAEhD,EAAA,OAAO;AAAA,IACL,aAAA;AAAA,IACA;AAAA,GACF;AACF;AASA,eAAsB,eAAA,CACpB,QACA,iBAAA,EACkB;AAClB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,wBAAsB,CAAA;AACxD,EAAA,MAAM,YAAA,GAAe,MAAM,QAAA,CAAS,CAAC,MAAM,CAAC,CAAA;AAC5C,EAAA,OAAO,YAAA,KAAiB,iBAAA;AAC1B;AAYA,eAAsB,wBAAA,CACpB,eACA,KAAA,EACiB;AACjB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,wBAAsB,CAAA;AACxD,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,OAAO,QAAA,CAAS,CAAC,aAAA,EAAe,KAAK,CAAC,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,QAAA,CAAS,CAAC,aAAa,CAAC,CAAA;AACjC;AA4BO,SAAS,yBAAA,CACd,SAAA,EACA,WAAA,EACA,OAAA,GAAkB,CAAA,EACV;AACR,EAAA,MAAM,OAAO,IAAI,UAAA,CAAW,CAAA,GAAI,CAAA,GAAI,KAAK,EAAE,CAAA;AAC3C,EAAA,IAAI,MAAA,GAAS,CAAA;AAGb,EAAA,IAAA,CAAK,QAAQ,CAAA,GAAI,qBAAA;AAGjB,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,CAAA,GAAK,GAAA;AAClC,EAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,OAAA,GAAU,GAAA;AAG3B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,SAAA,CAAU,CAAC,CAAE,CAAA;AAChC,IAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,GAAA,GAAM,GAAA;AACvB,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,CAAA,GAAK,GAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAC/B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAAA,EACjC;AAGA,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,WAAA,CAAY,CAAC,CAAE,CAAA;AAClC,IAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,GAAA,GAAM,GAAA;AACvB,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,CAAA,GAAK,GAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAC/B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAAA,EACjC;AAEA,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AAClC,EAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,4BAAA,EAA8B,KAAA,EAAO,aAAa,CAAA;AAC1E;AAKO,SAAS,0BAA0B,OAAA,EAKxC;AACA,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,CAAO,OAAA,EAAS,aAAa,CAAA;AAErD,EAAA,IAAI,OAAA,CAAQ,WAAW,4BAAA,EAA8B;AACnD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,gDAAA,EAAmD,4BAA4B,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,CAAA;AAAA,KAC1G;AAAA,EACF;AAEA,EAAA,MAAM,OAAO,IAAI,UAAA,CAAW,QAAQ,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AAC5D,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,MAAM,OAAA,GAAU,KAAK,MAAA,EAAQ,CAAA;AAC7B,EAAA,IAAI,YAAY,qBAAA,EAAuB;AACrC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,mCAAA,EAAsC,OAAO,CAAA,YAAA,EAAe,qBAAqB,CAAA,CAAA;AAAA,KACnF;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GACH,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,KACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,EAAA,GACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,CAAA,GACpB,KAAK,MAAA,EAAQ,CAAA;AAGf,EAAA,MAAM,YAAsB,EAAC;AAC7B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,MACJ,IAAA,CAAK,MAAM,CAAA,GACV,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,CAAA,GACrB,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,KACrB,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA,IAAM,EAAA;AACxB,IAAA,SAAA,CAAU,IAAA,CAAK,MAAA,CAAO,GAAA,KAAQ,CAAC,CAAC,CAAA;AAChC,IAAA,MAAA,IAAU,CAAA;AAAA,EACZ;AAGA,EAAA,MAAM,cAAwB,EAAC;AAC/B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,MACJ,IAAA,CAAK,MAAM,CAAA,GACV,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,CAAA,GACrB,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,KACrB,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA,IAAM,EAAA;AACxB,IAAA,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,GAAA,KAAQ,CAAC,CAAC,CAAA;AAClC,IAAA,MAAA,IAAU,CAAA;AAAA,EACZ;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF;AAKO,SAAS,2BAA2B,OAAA,EAA0B;AACnE,EAAA,IAAI;AACF,IAAA,yBAAA,CAA0B,OAAO,CAAA;AACjC,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAKO,SAAS,2BAAA,CACd,IAAA,EACA,OAAA,GAAkB,CAAA,EACV;AACR,EAAA,OAAO,yBAAA,CAA0B,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,kBAAkB,OAAO,CAAA;AACtF;AAKO,SAAS,kBAAkB,OAAA,EAAgD;AAChF,EAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,sBAAA,GAAyB,GAAG,GAAG,OAAO,OAAA;AAC7D,EAAA,IAAI,OAAA,CAAQ,UAAA,CAAW,4BAAA,GAA+B,GAAG,GAAG,OAAO,OAAA;AACnE,EAAA,OAAO,SAAA;AACT;AA3YA,IAgCa,sBAAA,CAAA,CAKA,eAAA,CAAA,CAKP,aAAA,CAAA,CAwMO,4BAAA,CAAA,CAKA;AAvPb,IAAA,YAAA,GAAA,KAAA,CAAA;AAAA,EAAA,qBAAA,GAAA;AAqBA,IAAA,WAAA,EAAA;AAWO,IAAM,sBAAA,GAAyB,KAAA;AAK/B,IAAM,eAAA,GAAkB,CAAA;AAK/B,IAAM,aAAA,GAAgB,IAAA;AAwMf,IAAM,4BAAA,GAA+B,KAAA;AAKrC,IAAM,qBAAA,GAAwB,CAAA;AAAA,EAAA;AAAA,CAAA;;;AChM9B,IAAM,qBAAN,MAAyB;AAAA,EACtB,MAAA;AAAA,EACA,OAAA,uBAAc,GAAA,EAA0B;AAAA,EACxC,UAAA,GAAa,KAAA;AAAA,EAErB,YAAY,MAAA,EAAgB;AAC1B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,IAAA,CAAK,MAAA,CAAO,SAAA,GAAY,CAAC,CAAA,KAAyC;AAChE,MAAA,IAAA,CAAK,aAAA,CAAc,EAAE,IAAI,CAAA;AAAA,IAC3B,CAAA;AAEA,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,GAAU,CAAC,CAAA,KAAkB;AACvC,MAAA,OAAA,CAAQ,KAAA,CAAM,oCAAA,EAAsC,CAAA,CAAE,OAAA,EAAS,CAAC,CAAA;AAChE,MAAA,KAAA,MAAW,GAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AAChC,QAAA,CAAA,CAAE,OAAO,IAAI,KAAA,CAAM,iBAAiB,CAAA,CAAE,OAAO,EAAE,CAAC,CAAA;AAAA,MAClD;AACA,MAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,IACrB,CAAA;AAAA,EACF;AAAA,EAEQ,cAAc,IAAA,EAA2B;AAC/C,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAK,EAAE,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,EAAO;AAEZ,IAAA,QAAQ,KAAK,IAAA;AAAM,MACjB,KAAK,UAAA;AACH,QAAA,KAAA,CAAM,UAAA,GAAa,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,OAAO,CAAA;AAC3C,QAAA;AAAA,MACF,KAAK,mBAAA;AACH,QAAA,KAAA,CAAM,kBAAA,GAAqB,KAAK,QAAQ,CAAA;AACxC,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAC3B,QAAA,KAAA,CAAM,OAAA,CAAQ,KAAK,KAAK,CAAA;AACxB,QAAA;AAAA,MACF,KAAK,OAAA;AACH,QAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAC3B,QAAA,KAAA,CAAM,MAAA,CAAO,IAAI,KAAA,CAAM,IAAA,CAAK,OAAO,CAAC,CAAA;AACpC,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAA,CACJ,WAAA,EACA,QACA,OAAA,EACA,UAAA,EACA,QACA,kBAAA,EACsB;AACtB,IAAA,IAAI,KAAK,UAAA,EAAY;AACnB,MAAA,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAAA,IAC9C;AAEA,IAAA,OAAO,IAAI,OAAA,CAAqB,CAAC,OAAA,EAAS,MAAA,KAAW;AACnD,MAAA,MAAM,EAAA,GAAK,OAAO,UAAA,EAAW;AAE7B,MAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,QAAA,MAAA,CAAO,IAAI,YAAA,CAAa,0BAAA,EAA4B,YAAY,CAAC,CAAA;AACjE,QAAA;AAAA,MACF;AAEA,MAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,EAAA,EAAI,EAAE,SAAS,MAAA,EAAQ,UAAA,EAAY,oBAAoB,CAAA;AAExE,MAAA,MAAM,UAAU,MAAM;AACpB,QAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,EAAE,CAAA;AACtB,QAAA,MAAA,CAAO,IAAI,YAAA,CAAa,0BAAA,EAA4B,YAAY,CAAC,CAAA;AAAA,MACnE,CAAA;AAEA,MAAA,MAAA,EAAQ,iBAAiB,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AAIzD,MAAA,MAAM,eAAA,GAAkB,OAAO,MAAA,KAAW,WAAA,GACtC,IAAI,GAAA,CAAI,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAE,IAAA,GACvC,OAAA;AAEJ,MAAA,IAAA,CAAK,OAAO,WAAA,CAAY;AAAA,QACtB,IAAA,EAAM,OAAA;AAAA,QACN,EAAA;AAAA,QACA,WAAA;AAAA,QACA,MAAA;AAAA,QACA,OAAA,EAAS;AAAA,OACmB,CAAA;AAAA,IAChC,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAY;AACV,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,IAAA,IAAA,CAAK,OAAO,SAAA,EAAU;AACtB,IAAA,KAAA,MAAW,GAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AAChC,MAAA,CAAA,CAAE,MAAA,CAAO,IAAI,YAAA,CAAa,mBAAA,EAAqB,YAAY,CAAC,CAAA;AAAA,IAC9D;AACA,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;AAcA,eAAsB,qBAAA,CACpB,WAAA,EACA,MAAA,EACA,OAAA,EACA,OAAA,EAMsB;AACtB,EAAA,MAAM,EAAE,UAAA,EAAY,kBAAA,EAAoB,QAAQ,MAAA,EAAO,GAAI,WAAW,EAAC;AAEvE,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,OAAO,MAAA,CAAO,MAAM,WAAA,EAAa,MAAA,EAAQ,WAAW,EAAA,EAAI,UAAA,EAAY,QAAQ,kBAAkB,CAAA;AAAA,EAChG;AAGA,EAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,qBAAY,CAAA;AACtD,EAAA,OAAO,iBAAiB,WAAA,EAAa,MAAA,EAAQ,SAAS,UAAA,EAAY,EAAE,oBAAoB,CAAA;AAC1F;ACpFO,IAAM,iBAAiB,GAAA,IAAO;AAM9B,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,iBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IACpD,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IACnD,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAChD,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC/D,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA;AAAM;AAEtD;AAEO,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,iBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,iBAAA,EAAmB,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAC1D,EAAE,IAAA,EAAM,wBAAA,EAA0B,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IACjE,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACvD,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC/D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA;AAAM;AAEjE;AAEO,IAAM,wBAAA,GAA2B;AAAA,EACtC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,kBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,sBAAA,EAAwB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAChE,EAAE,IAAA,EAAM,oBAAA,EAAsB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC9D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC/D,EAAE,IAAA,EAAM,kBAAA,EAAoB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA,EAAM;AAAA,IAC1D,EAAE,IAAA,EAAM,kBAAA,EAAoB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC5D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA;AAAM;AAEjE;AAEO,IAAM,0BAAA,GAA6B;AAAA,EACxC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,oBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,oBAAA,EAAsB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC9D,EAAE,IAAA,EAAM,kBAAA,EAAoB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC5D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA;AAAM;AAEjE;AAEO,IAAM,eAAA,GAAkB;AAAA,EAC7B,uBAAA;AAAA,EACA,uBAAA;AAAA,EACA,wBAAA;AAAA,EACA;AACF;AAUO,SAAS,iBAAA,CAAkB,YAAoB,IAAA,EAAsB;AAC1E,EAAA,OAAQ,aAAa,IAAA,GAAQ,cAAA;AAC/B;AAMO,SAAS,iBAAA,CAAkB,YAAoB,IAAA,EAAsB;AAC1E,EAAA,IAAI,IAAA,KAAS,EAAA,EAAI,MAAM,IAAI,MAAM,qBAAqB,CAAA;AACtD,EAAA,OAAQ,aAAa,cAAA,GAAkB,IAAA;AACzC;AAMO,SAAS,WAAA,CAAY,YAAoB,SAAA,EAA2B;AACzE,EAAA,IAAI,UAAA,KAAe,EAAA,EAAI,MAAM,IAAI,MAAM,4BAA4B,CAAA;AACnE,EAAA,OAAQ,YAAY,cAAA,GAAkB,UAAA;AACxC;AAMO,SAAS,UAAA,CAAW,IAAA,EAAc,QAAA,GAAmB,CAAA,EAAW;AACrE,EAAA,MAAM,QAAQ,IAAA,GAAO,cAAA;AACrB,EAAA,MAAM,OAAO,IAAA,GAAO,cAAA;AACpB,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,QAAA,EAAS,CAAE,QAAA,CAAS,IAAI,GAAG,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA;AACnE,EAAA,OAAO,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAC5B;AAUO,SAAS,qBAAqB,YAAA,EAAwB;AAC3D,EAAA,OAAO,SAAA,CAAU,mBAAA;AAAA,IACf,mBAAmB,SAAS,CAAA;AAAA,IAC5B,CAAC,YAAY;AAAA,GACd,CAAA;AACH;AAKO,SAAS,oBAAA,GAA4B;AAC1C,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,MAAM,KAAK,CAAA;AACpB;AASO,SAAS,iBAAA,CACd,QACA,gBAAA,EACkB;AAClB,EAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,gBAAA,CAAiB,IAAI,CAAA,EAAA,KAAM,EAAA,CAAG,QAAA,EAAU,CAAC,CAAA;AAChE,EAAA,OAAO,MAAA,CAAO,OAAO,CAAA,CAAA,KAAK,MAAA,CAAO,IAAI,CAAA,CAAE,UAAA,CAAW,QAAA,EAAU,CAAC,CAAA;AAC/D;AAKO,SAAS,uBAAA,CACd,MAAA,EACA,SAAA,EACA,QAAA,EACkB;AAClB,EAAA,MAAM,IAAA,GAAO,UAAU,WAAA,EAAY;AACnC,EAAA,MAAM,GAAA,GAAM,SAAS,WAAA,EAAY;AACjC,EAAA,OAAO,MAAA,CAAO,MAAA;AAAA,IACZ,CAAA,CAAA,KAAK,EAAE,SAAA,CAAU,WAAA,OAAkB,IAAA,IAAQ,CAAA,CAAE,QAAA,CAAS,WAAA,EAAY,KAAM;AAAA,GAC1E;AACF;AAKO,SAAS,mBAAA,CAAoB,OAAmC,WAAA,EAA8B;AACnG,EAAA,MAAM,QAAA,GAAW,qBAAA,IAAyB,KAAA,GAAQ,KAAA,CAAM,mBAAA,GAAsB,EAAA;AAC9E,EAAA,OAAO,QAAA,KAAa,MAAM,QAAA,KAAa,WAAA;AACzC;AAMA,IAAM,oBAAA,GAAuB,kBAAA;AAE7B,SAAS,SAAA,CAAU,SAAiB,OAAA,EAAsB;AACxD,EAAA,OAAO,GAAG,oBAAoB,CAAA,EAAG,QAAQ,WAAA,EAAa,IAAI,OAAO,CAAA,CAAA;AACnE;AAMO,SAAS,iBAAA,CAAkB,OAAA,EAAc,YAAA,EAAmB,OAAA,EAAwB;AACzF,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACzC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,YAAA,CAAa,OAAA,CAAQ,SAAA,CAAU,OAAA,EAAS,OAAO,GAAG,YAAY,CAAA;AAAA,EAChE;AAEA,EAAA,YAAA,CAAa,QAAQ,CAAA,EAAG,oBAAoB,CAAA,EAAG,OAAO,IAAI,YAAY,CAAA;AACxE;AAMO,SAAS,eAAA,CAAgB,SAAc,OAAA,EAA8B;AAC1E,EAAA,IAAI,OAAO,YAAA,KAAiB,WAAA,EAAa,OAAO,IAAA;AAChD,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAM,SAAS,YAAA,CAAa,OAAA,CAAQ,SAAA,CAAU,OAAA,EAAS,OAAO,CAAC,CAAA;AAC/D,IAAA,IAAI,QAAQ,OAAO,MAAA;AAAA,EACrB;AAEA,EAAA,OAAO,aAAa,OAAA,CAAQ,CAAA,EAAG,oBAAoB,CAAA,EAAG,OAAO,CAAA,CAAE,CAAA;AACjE;AAKO,SAAS,kBAAA,CAAmB,SAAc,OAAA,EAAwB;AACvE,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACzC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,YAAA,CAAa,UAAA,CAAW,SAAA,CAAU,OAAA,EAAS,OAAO,CAAC,CAAA;AAAA,EACrD;AACA,EAAA,YAAA,CAAa,UAAA,CAAW,CAAA,EAAG,oBAAoB,CAAA,EAAG,OAAO,CAAA,CAAE,CAAA;AAC7D;AAMO,SAAS,eAAe,OAAA,EAAyB;AACtD,EAAA,IAAI,OAAO,YAAA,KAAiB,WAAA,EAAa,OAAO,EAAC;AACjD,EAAA,MAAM,MAAA,GAAS,UACX,CAAA,EAAG,oBAAoB,GAAG,OAAA,CAAQ,WAAA,EAAa,CAAA,CAAA,CAAA,GAC/C,oBAAA;AACJ,EAAA,MAAM,MAAa,EAAC;AACpB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,YAAA,CAAa,QAAQ,CAAA,EAAA,EAAK;AAC5C,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA;AAC9B,IAAA,IAAI,GAAA,EAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,MAAA,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAM,CAAQ,CAAA;AAAA,IAC1C;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AASO,SAAS,aAAA,CAAc,OAAkB,YAAA,EAA+B;AAC7E,EAAA,OAAO,CAAC,KAAA,CAAM,OAAA,IAAW,CAAC,KAAA,CAAM,aAAa,YAAA,IAAgB,KAAA,CAAM,MAAA,IAAU,KAAA,CAAM,mBAAA,GAAsB,EAAA;AAC3G;AAKO,SAAS,qBAAA,CAAsB,YAAoB,IAAA,EAAsB;AAC9E,EAAA,OAAO,iBAAA,CAAkB,YAAY,IAAI,CAAA;AAC3C;AAKO,SAAS,sBAAsB,KAAA,EAA0B;AAC9D,EAAA,IAAI,KAAA,CAAM,UAAA,KAAe,EAAA,EAAI,OAAO,CAAA;AACpC,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,UAAA,GAAa,KAAA,CAAM,mBAAA;AACxC,EAAA,OAAO,MAAA,CAAQ,MAAA,GAAS,MAAA,GAAU,KAAA,CAAM,UAAU,CAAA,GAAI,GAAA;AACxD;AClUA,SAAS,gBAAA,CAAiB,MAAkB,SAAA,EAAgD;AAC1F,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAA;AAAA,IACT,gBAAgBC,KAAAA,CAAM,IAAA,CAAK,gBAAgB,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IACvD,WAAWA,KAAAA,CAAM,IAAA,CAAK,WAAW,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IAC7C,eAAeA,KAAAA,CAAM,IAAA,CAAK,eAAe,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IACrD,aAAaA,KAAAA,CAAM,IAAA,CAAK,aAAa,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IACjD,GAAI,SAAA,GAAY;AAAA,MACd,aAAa,SAAA,CAAU,WAAA,CAAY,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,MACxD,gBAAgB,SAAA,CAAU,cAAA,CAAe,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,MAC9D,oBAAoB,SAAA,CAAU,kBAAA,CAAmB,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,MACtE,kBAAkB,SAAA,CAAU,gBAAA,CAAiB,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU;AAAA,QAChE;AAAC,GACP;AACF;AAEA,SAAS,mBAAmB,IAAA,EAA4E;AACtG,EAAA,IAAI,IAAA,CAAK,OAAA,KAAY,CAAA,IAAK,CAAC,KAAK,cAAA,EAAgB;AAC9C,IAAA,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAAA,EACpD;AAEA,EAAA,MAAM,IAAA,GAAmB;AAAA,IACvB,cAAA,EAAgB,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA;AAAA,IAC1C,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA;AAAA,IAChC,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,aAAa,CAAA;AAAA,IACxC,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,WAAW;AAAA,GACtC;AAEA,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,SAAA,GAAY;AAAA,MACV,aAAa,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAChD,gBAAgB,IAAA,CAAK,cAAA,CAAgB,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MACvD,oBAAoB,IAAA,CAAK,kBAAA,CAAoB,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAC/D,kBAAkB,IAAA,CAAK,gBAAA,CAAkB,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAM,SAAA,EAAU;AAC3B;AAuBO,IAAM,yBAAN,MAAwD;AAAA,EAG7D,WAAA,CACU,SACR,UAAA,EACA;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGR,IAAA,IAAA,CAAK,UAAA,GAAa,CAAA,QAAA,EAAW,UAAA,CAAW,WAAA,EAAa,CAAA,CAAA;AAAA,EACvD;AAAA,EAPQ,UAAA;AAAA,EASR,MAAM,IAAA,GAA0E;AAC9E,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAuB,KAAK,UAAU,CAAA;AACtE,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,IAAA,IAAI;AACF,MAAA,OAAO,mBAAmB,IAAI,CAAA;AAAA,IAChC,CAAA,CAAA,MAAQ;AAEN,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AACzC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,IAAA,CAAK,IAAA,EAAkB,SAAA,EAA4C;AACvE,IAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,IAAA,EAAM,SAAS,CAAA;AACnD,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,YAAY,UAAU,CAAA;AAAA,EACpD;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAAA,EAC3C;AACF;AAcO,IAAM,uBAAN,MAAsD;AAAA,EAC3D,WAAA,CACU,MACA,SAAA,EACR;AAFQ,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EACP;AAAA,EAEH,MAAM,IAAA,GAAO;AACX,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,SAAA,EAAW,KAAK,SAAA,EAAU;AAAA,EACtD;AAAA,EAEA,MAAM,IAAA,GAAsB;AAAA,EAE5B;AAAA,EAEA,MAAM,KAAA,GAAuB;AAAA,EAE7B;AACF;ACrGO,IAAM,YAAN,MAAsC;AAAA,EAM3C,WAAA,CACU,OAAA,EACA,UAAA,GAAqB,OAAA,EAC7B;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EACP;AAAA,EARK,QAAwB,EAAC;AAAA,EACzB,aAAA,uBAAoB,GAAA,EAAY;AAAA,EAChC,SAAA,uBAAgB,GAAA,EAAgB;AAAA,EAChC,KAAA,GAAQ,KAAA;AAAA;AAAA,EAShB,QAAA,GAA2B;AACzB,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,KAAK,CAAA;AAAA,EACvB;AAAA,EAEA,gBAAgB,WAAA,EAA2C;AACzD,IAAA,IAAI,SAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAA,GAAS,OAAO,MAAA,CAAO,CAAA,CAAA,KAAA,CAAM,CAAA,CAAE,WAAA,IAAe,aAAa,WAAW,CAAA;AAAA,IACxE;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,UAAA,CAAW,OAAgB,WAAA,EAAmC;AAC5D,IAAA,IAAI,KAAA,GAAQ,IAAA,CAAK,eAAA,CAAgB,WAAW,CAAA;AAC5C,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAM,UAAA,GAAa,MAAM,WAAA,EAAY;AACrC,MAAA,KAAA,GAAQ,MAAM,MAAA,CAAO,CAAA,CAAA,KAAK,EAAE,KAAA,CAAM,WAAA,OAAkB,UAAU,CAAA;AAAA,IAChE;AACA,IAAA,OAAO,KAAA,CAAM,OAAO,CAAC,GAAA,EAAK,MAAM,GAAA,GAAM,CAAA,CAAE,QAAQ,EAAE,CAAA;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,QAAQ,IAAA,EAA6B;AACnC,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AACxC,IAAA,IAAI,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAG,GAAG,OAAO,KAAA;AAGxC,IAAA,MAAM,UAAA,GAA2B;AAAA,MAC/B,GAAG,IAAA;AAAA,MACH,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AAAA,MACxC,MAAA,EAAQ,cAAA,CAAe,IAAA,CAAK,MAAM,CAAA;AAAA,MAClC,KAAA,EAAO,cAAA,CAAe,IAAA,CAAK,KAAK;AAAA,KAClC;AAEA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,UAAU,CAAA;AAC1B,IAAA,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,CAAA;AAC1B,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,MAAA,EAAO;AACZ,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,KAAA,EAA+B;AACtC,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAG,KAAA,EAAA;AAAA,IAC1B;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,UAAU,UAAA,EAA0B;AAClC,IAAA,MAAM,GAAA,GAAM,WAAW,WAAA,EAAY;AACnC,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,UAAA,CAAW,WAAA,EAAY,KAAM,GAAG,CAAA;AACpE,IAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,MAAA,KAAW,OAAA,EAAS;AACnC,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AACd,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,UAAA,EAA0B;AACpC,IAAA,MAAM,GAAA,GAAM,WAAW,WAAA,EAAY;AACnC,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,UAAA,CAAW,WAAA,EAAY,KAAM,GAAG,CAAA;AACpE,IAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,MAAA,KAAW,OAAA,EAAS;AACnC,MAAA,IAAA,CAAK,MAAA,GAAS,WAAA;AACd,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,eAAA,CAAgB,YAAoB,SAAA,EAAyB;AAC3D,IAAA,MAAM,GAAA,GAAM,WAAW,WAAA,EAAY;AACnC,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,UAAA,CAAW,WAAA,EAAY,KAAM,GAAG,CAAA;AACpE,IAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,SAAA,KAAc,SAAA,EAAW;AACxC,MAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,IAAA,GAAsB;AAC1B,IAAA,MAAM,aAAa,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAsB,KAAK,UAAU,CAAA;AAC3E,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA,EAAG;AAC7C,MAAA,IAAA,CAAK,QAAQ,EAAC;AACd,MAAA,IAAA,CAAK,cAAc,KAAA,EAAM;AACzB,MAAA;AAAA,IACF;AAGA,IAAA,IAAA,CAAK,QAAQ,EAAC;AACd,IAAA,IAAA,CAAK,cAAc,KAAA,EAAM;AACzB,IAAA,IAAI,OAAA,GAAU,CAAA;AACd,IAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,MAAA,MAAM,IAAA,GAAO,gBAAgB,CAAC,CAAA;AAC9B,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AACxC,MAAA,IAAI,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAG,CAAA,EAAG;AAAE,QAAA,OAAA,EAAA;AAAW,QAAA;AAAA,MAAS;AACvD,MAAA,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,CAAA;AAC1B,MAAA,IAAA,CAAK,KAAA,CAAM,KAAK,IAAI,CAAA;AAAA,IACtB;AACA,IAAA,IAAI,UAAU,CAAA,EAAG;AACf,MAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oBAAA,EAAuB,OAAO,CAAA,wBAAA,CAA0B,CAAA;AACpE,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AAAA,IACf,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,IACf;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAI,CAAC,KAAK,KAAA,EAAO;AACjB,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,aAAa,CAAA;AAC/C,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,YAAY,UAAU,CAAA;AAClD,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAA,CAAK,QAAQ,EAAC;AACd,IAAA,IAAA,CAAK,cAAc,KAAA,EAAM;AACzB,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AACzC,IAAA,IAAA,CAAK,MAAA,EAAO;AAAA,EACd;AAAA;AAAA,EAIA,SAAS,QAAA,EAAkC;AACzC,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC7C;AAAA,EAEQ,MAAA,GAAe;AACrB,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,SAAA,EAAW;AACrC,MAAA,QAAA,EAAS;AAAA,IACX;AAAA,EACF;AACF;AAMA,SAAS,cAAc,IAAA,EAAoC;AACzD,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,QAAA,EAAS;AAAA,IAC7B,QAAA,EAAU,IAAA,CAAK,QAAA,CAAS,QAAA;AAAS,GACnC;AACF;AAEA,SAAS,gBAAgB,CAAA,EAAiC;AACxD,EAAA,OAAO;AAAA,IACL,GAAG,CAAA;AAAA,IACH,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,IACvB,QAAA,EAAU,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAA;AAAA,IAC3B,WAAA,EAAa,EAAE,WAAA,IAAe;AAAA,GAChC;AACF;AAEA,SAAS,eAAe,IAAA,EAAsB;AAC5C,EAAA,IAAI;AACF,IAAA,OAAO,WAAW,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"chunk-Q6BLTPWV.js","sourcesContent":["/**\n * Stealth Address Utilities (Post-Quantum, Hash-Based)\n *\n * Implements stealth addresses using Poseidon hashes with bech32m encoding.\n * No BabyJubJub curve operations — ownership is proven via hash preimage.\n *\n * Address Format (bech32m):\n *   0zk1<version><chainId><ownerHash><viewingHash>\n *\n * Key Flow (self-shield):\n *   1. User derives ownerHash = Poseidon(spendingSecret)\n *   2. Commitment = Poseidon(amount, ownerHash, blinding, origin, token)\n *   3. Encrypt note with key derived from viewingSecret\n *\n * Key Flow (send to others, future):\n *   1. Decode recipient's stealth address (ownerHash, viewingHash)\n *   2. Generate per-note secret and derive ownerHash for the note\n *   3. Encrypt note so recipient's viewingSecret can decrypt\n */\n\nimport { bech32m } from 'bech32'\nimport {\n  randomFieldElement,\n  bigintToBytes,\n  bytesToBigint,\n} from '../utils/crypto.js'\nimport type { MasterKeys, StarkMasterKeys, OneTimeKeys } from '../keys/types.js'\nimport type { M31Digest } from '../utils/keccak-m31.js'\n\n/**\n * Stealth address prefix\n */\nexport const STEALTH_ADDRESS_PREFIX = '0zk'\n\n/**\n * Address version (v2 = hash-based, post-quantum)\n */\nexport const ADDRESS_VERSION = 2\n\n/**\n * Maximum length for bech32m encoding\n */\nconst BECH32M_LIMIT = 1023\n\n/**\n * Encode a stealth address in bech32m format\n *\n * Format: 0zk1<version><chainId><ownerHash><viewingHash>\n *\n * @param ownerHash - Owner hash = Poseidon(spendingSecret)\n * @param viewingHash - Viewing hash = Poseidon(viewingSecret)\n * @param chainId - Optional chain ID (0 = any chain)\n * @returns bech32m encoded stealth address\n */\nexport function encodeStealthAddress(\n  ownerHash: bigint,\n  viewingHash: bigint,\n  chainId: number = 0\n): string {\n  // Build data buffer: version (1 byte) + chainId (4 bytes) + 2 * 32 bytes = 69 bytes\n  const data = new Uint8Array(1 + 4 + 32 * 2)\n  let offset = 0\n\n  // Version\n  data[offset++] = ADDRESS_VERSION\n\n  // Chain ID (4 bytes, big-endian)\n  data[offset++] = (chainId >> 24) & 0xff\n  data[offset++] = (chainId >> 16) & 0xff\n  data[offset++] = (chainId >> 8) & 0xff\n  data[offset++] = chainId & 0xff\n\n  // Owner hash (32 bytes)\n  const ownerBytes = bigintToBytes(ownerHash, 32)\n  data.set(ownerBytes, offset)\n  offset += 32\n\n  // Viewing hash (32 bytes)\n  const viewingBytes = bigintToBytes(viewingHash, 32)\n  data.set(viewingBytes, offset)\n\n  // Convert to 5-bit words for bech32m\n  const words = bech32m.toWords(data)\n\n  // Encode with prefix\n  return bech32m.encode(STEALTH_ADDRESS_PREFIX, words, BECH32M_LIMIT)\n}\n\n/**\n * Decode a bech32m stealth address\n *\n * @param address - bech32m encoded stealth address\n * @returns Decoded hash values\n */\nexport function decodeStealthAddress(address: string): {\n  version: number\n  chainId: number\n  ownerHash: bigint\n  viewingHash: bigint\n} {\n  // Decode bech32m\n  const decoded = bech32m.decode(address, BECH32M_LIMIT)\n\n  // Verify prefix\n  if (decoded.prefix !== STEALTH_ADDRESS_PREFIX) {\n    throw new Error(`Invalid stealth address prefix: expected '${STEALTH_ADDRESS_PREFIX}', got '${decoded.prefix}'`)\n  }\n\n  // Convert from 5-bit words back to bytes\n  const data = new Uint8Array(bech32m.fromWords(decoded.words))\n\n  // Parse version\n  let offset = 0\n  const version = data[offset++]!\n\n  if (version !== ADDRESS_VERSION) {\n    throw new Error(`Unsupported address version: ${version}. Expected v${ADDRESS_VERSION} (hash-based).`)\n  }\n\n  // Parse chain ID\n  const chainId =\n    (data[offset++]! << 24) |\n    (data[offset++]! << 16) |\n    (data[offset++]! << 8) |\n    data[offset++]!\n\n  // Parse owner hash (32 bytes)\n  const ownerHash = bytesToBigint(data.slice(offset, offset + 32))\n  offset += 32\n\n  // Parse viewing hash (32 bytes)\n  const viewingHash = bytesToBigint(data.slice(offset, offset + 32))\n\n  return {\n    version,\n    chainId,\n    ownerHash,\n    viewingHash,\n  }\n}\n\n/**\n * Validate a stealth address format\n */\nexport function isValidStealthAddress(address: string): boolean {\n  try {\n    decodeStealthAddress(address)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Generate stealth address from master keys\n */\nexport function generateStealthAddress(keys: MasterKeys, chainId: number = 0): string {\n  return encodeStealthAddress(keys.ownerHash, keys.viewingHash, chainId)\n}\n\n/**\n * Create one-time keys for a transaction (hash-based)\n *\n * For self-shield: the user uses their own spendingSecret directly\n * as the ownerSecret, producing ownerHash = Poseidon(spendingSecret).\n *\n * For sending to others (future): generate a random oneTimeSecret\n * and derive ownerHash = Poseidon(oneTimeSecret).\n *\n * @param recipientOwnerHash - Recipient's owner hash (for verification)\n * @param selfSecret - If self-shield, the user's spending secret\n * @returns One-time keys for the note\n */\nexport async function createOneTimeKeys(\n  _recipientOwnerHash?: bigint,\n  selfSecret?: bigint,\n): Promise<OneTimeKeys> {\n  const { poseidon } = await import('../utils/poseidon.js')\n\n  if (selfSecret !== undefined) {\n    // Self-shield: use own spending secret\n    const ownerHash = await poseidon([selfSecret])\n    return {\n      oneTimeSecret: selfSecret,\n      ownerHash,\n    }\n  }\n\n  // Generate random one-time secret for the note\n  const oneTimeSecret = randomFieldElement()\n  const ownerHash = await poseidon([oneTimeSecret])\n\n  return {\n    oneTimeSecret,\n    ownerHash,\n  }\n}\n\n/**\n * Verify ownership of a note by checking hash preimage\n *\n * @param secret - Claimed spending secret\n * @param expectedOwnerHash - Owner hash from the note commitment\n * @returns True if the secret hashes to the expected owner hash\n */\nexport async function verifyOwnership(\n  secret: bigint,\n  expectedOwnerHash: bigint\n): Promise<boolean> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  const computedHash = await poseidon([secret])\n  return computedHash === expectedOwnerHash\n}\n\n/**\n * Compute shared secret for note encryption/decryption (hash-based)\n *\n * For self-shield: just uses the viewing secret directly.\n * For sending to others (future): use Poseidon(viewingSecret, recipientViewingHash)\n *\n * @param viewingSecret - Sender's or recipient's viewing secret\n * @param nonce - Optional nonce for key derivation\n * @returns Encryption key as bigint\n */\nexport async function computeNoteEncryptionKey(\n  viewingSecret: bigint,\n  nonce?: bigint\n): Promise<bigint> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  if (nonce !== undefined) {\n    return poseidon([viewingSecret, nonce])\n  }\n  return poseidon([viewingSecret])\n}\n\n// =========================================================================\n// STARK Stealth Addresses (0zs prefix, M31/Keccak-based)\n// =========================================================================\n\n/**\n * STARK stealth address prefix\n */\nexport const STARK_STEALTH_ADDRESS_PREFIX = '0zs'\n\n/**\n * STARK address version (v1 = M31/Keccak)\n */\nexport const STARK_ADDRESS_VERSION = 1\n\n/**\n * Encode a STARK stealth address in bech32m format\n *\n * Format: 0zs1<version><chainId><ownerHash[0..3]><viewingHash[0..3]>\n *\n * Each M31 element is encoded as 4 bytes (little-endian).\n * Total data: 1 (version) + 4 (chainId) + 16 (ownerHash) + 16 (viewingHash) = 37 bytes.\n *\n * @param ownerHash - 4 M31 elements: keccak_m31(starkSecret)\n * @param viewingHash - 4 M31 elements: keccak_m31(starkViewingSecret)\n * @param chainId - Optional chain ID (0 = any chain)\n */\nexport function encodeStarkStealthAddress(\n  ownerHash: M31Digest,\n  viewingHash: M31Digest,\n  chainId: number = 0\n): string {\n  const data = new Uint8Array(1 + 4 + 16 + 16) // 37 bytes\n  let offset = 0\n\n  // Version\n  data[offset++] = STARK_ADDRESS_VERSION\n\n  // Chain ID (4 bytes, big-endian)\n  data[offset++] = (chainId >> 24) & 0xff\n  data[offset++] = (chainId >> 16) & 0xff\n  data[offset++] = (chainId >> 8) & 0xff\n  data[offset++] = chainId & 0xff\n\n  // Owner hash: 4 M31 elements, each 4 bytes LE\n  for (let i = 0; i < 4; i++) {\n    const val = Number(ownerHash[i]!)\n    data[offset++] = val & 0xff\n    data[offset++] = (val >> 8) & 0xff\n    data[offset++] = (val >> 16) & 0xff\n    data[offset++] = (val >> 24) & 0xff\n  }\n\n  // Viewing hash: 4 M31 elements, each 4 bytes LE\n  for (let i = 0; i < 4; i++) {\n    const val = Number(viewingHash[i]!)\n    data[offset++] = val & 0xff\n    data[offset++] = (val >> 8) & 0xff\n    data[offset++] = (val >> 16) & 0xff\n    data[offset++] = (val >> 24) & 0xff\n  }\n\n  const words = bech32m.toWords(data)\n  return bech32m.encode(STARK_STEALTH_ADDRESS_PREFIX, words, BECH32M_LIMIT)\n}\n\n/**\n * Decode a STARK stealth address (0zs prefix)\n */\nexport function decodeStarkStealthAddress(address: string): {\n  version: number\n  chainId: number\n  ownerHash: M31Digest\n  viewingHash: M31Digest\n} {\n  const decoded = bech32m.decode(address, BECH32M_LIMIT)\n\n  if (decoded.prefix !== STARK_STEALTH_ADDRESS_PREFIX) {\n    throw new Error(\n      `Invalid STARK stealth address prefix: expected '${STARK_STEALTH_ADDRESS_PREFIX}', got '${decoded.prefix}'`\n    )\n  }\n\n  const data = new Uint8Array(bech32m.fromWords(decoded.words))\n  let offset = 0\n\n  const version = data[offset++]!\n  if (version !== STARK_ADDRESS_VERSION) {\n    throw new Error(\n      `Unsupported STARK address version: ${version}. Expected v${STARK_ADDRESS_VERSION}.`\n    )\n  }\n\n  // Chain ID\n  const chainId =\n    (data[offset++]! << 24) |\n    (data[offset++]! << 16) |\n    (data[offset++]! << 8) |\n    data[offset++]!\n\n  // Owner hash: 4 M31 LE uint32s\n  const ownerHash: bigint[] = []\n  for (let i = 0; i < 4; i++) {\n    const val =\n      data[offset]! |\n      (data[offset + 1]! << 8) |\n      (data[offset + 2]! << 16) |\n      (data[offset + 3]! << 24)\n    ownerHash.push(BigInt(val >>> 0))\n    offset += 4\n  }\n\n  // Viewing hash: 4 M31 LE uint32s\n  const viewingHash: bigint[] = []\n  for (let i = 0; i < 4; i++) {\n    const val =\n      data[offset]! |\n      (data[offset + 1]! << 8) |\n      (data[offset + 2]! << 16) |\n      (data[offset + 3]! << 24)\n    viewingHash.push(BigInt(val >>> 0))\n    offset += 4\n  }\n\n  return {\n    version,\n    chainId,\n    ownerHash: ownerHash as unknown as M31Digest,\n    viewingHash: viewingHash as unknown as M31Digest,\n  }\n}\n\n/**\n * Validate a STARK stealth address format\n */\nexport function isValidStarkStealthAddress(address: string): boolean {\n  try {\n    decodeStarkStealthAddress(address)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Generate a STARK stealth address from STARK master keys\n */\nexport function generateStarkStealthAddress(\n  keys: StarkMasterKeys,\n  chainId: number = 0\n): string {\n  return encodeStarkStealthAddress(keys.starkOwnerHash, keys.starkViewingHash, chainId)\n}\n\n/**\n * Detect whether an address is SNARK (0zk) or STARK (0zs)\n */\nexport function detectAddressType(address: string): 'snark' | 'stark' | 'unknown' {\n  if (address.startsWith(STEALTH_ADDRESS_PREFIX + '1')) return 'snark'\n  if (address.startsWith(STARK_STEALTH_ADDRESS_PREFIX + '1')) return 'stark'\n  return 'unknown'\n}\n","/**\n * Proof Worker Manager — off-main-thread PLONK proof generation.\n *\n * Manages a Web Worker that runs snarkjs proof generation, keeping the\n * main thread (and UI) responsive during the 10-30s proving time.\n *\n * @example\n * ```ts\n * // Create worker (consumer handles bundler integration)\n * const worker = new Worker(\n *   new URL('@permissionless-technologies/upp-sdk/worker', import.meta.url)\n * )\n * const manager = new ProofWorkerManager(worker)\n *\n * const result = await manager.prove('transfer', circuitInputs, '/circuits/',\n *   (stage, msg) => console.log(stage, msg)\n * )\n *\n * // Cleanup\n * manager.terminate()\n * ```\n */\n\nimport type { UPPCircuitType, UPPCircuitInputs, ProofResult, PlonkProvingStage } from './proof.js'\nimport type { DownloadProgress } from './circuit-cache.js'\n\n// ============================================================================\n// Worker Message Types\n// ============================================================================\n\nexport interface ProofWorkerRequest {\n  type: 'prove'\n  id: string\n  circuitType: string\n  inputs: Record<string, any>\n  baseUrl: string\n}\n\nexport type ProofWorkerResponse =\n  | { type: 'progress'; id: string; stage: PlonkProvingStage; message: string }\n  | { type: 'download-progress'; id: string; progress: DownloadProgress }\n  | { type: 'result'; id: string; proof: ProofResult }\n  | { type: 'error'; id: string; message: string }\n\n// ============================================================================\n// ProofWorkerManager\n// ============================================================================\n\ninterface PendingProof {\n  resolve: (result: ProofResult) => void\n  reject: (error: Error) => void\n  onProgress?: (stage: PlonkProvingStage, message: string) => void\n  onDownloadProgress?: (progress: DownloadProgress) => void\n}\n\nexport class ProofWorkerManager {\n  private worker: Worker\n  private pending = new Map<string, PendingProof>()\n  private terminated = false\n\n  constructor(worker: Worker) {\n    this.worker = worker\n\n    this.worker.onmessage = (e: MessageEvent<ProofWorkerResponse>) => {\n      this.handleMessage(e.data)\n    }\n\n    this.worker.onerror = (e: ErrorEvent) => {\n      console.error('[ProofWorkerManager] Worker error:', e.message, e)\n      for (const [, p] of this.pending) {\n        p.reject(new Error(`Worker error: ${e.message}`))\n      }\n      this.pending.clear()\n    }\n  }\n\n  private handleMessage(data: ProofWorkerResponse) {\n    const entry = this.pending.get(data.id)\n    if (!entry) return\n\n    switch (data.type) {\n      case 'progress':\n        entry.onProgress?.(data.stage, data.message)\n        break\n      case 'download-progress':\n        entry.onDownloadProgress?.(data.progress)\n        break\n      case 'result':\n        this.pending.delete(data.id)\n        entry.resolve(data.proof)\n        break\n      case 'error':\n        this.pending.delete(data.id)\n        entry.reject(new Error(data.message))\n        break\n    }\n  }\n\n  /**\n   * Generate a proof in the worker.\n   *\n   * @param signal - AbortSignal for cancellation. When aborted, the promise\n   *   rejects with AbortError. Call terminate() for hard cancellation.\n   */\n  async prove(\n    circuitType: UPPCircuitType,\n    inputs: UPPCircuitInputs,\n    baseUrl: string,\n    onProgress?: (stage: PlonkProvingStage, message: string) => void,\n    signal?: AbortSignal,\n    onDownloadProgress?: (progress: DownloadProgress) => void,\n  ): Promise<ProofResult> {\n    if (this.terminated) {\n      throw new Error('Worker has been terminated')\n    }\n\n    return new Promise<ProofResult>((resolve, reject) => {\n      const id = crypto.randomUUID()\n\n      if (signal?.aborted) {\n        reject(new DOMException('Proof generation aborted', 'AbortError'))\n        return\n      }\n\n      this.pending.set(id, { resolve, reject, onProgress, onDownloadProgress })\n\n      const onAbort = () => {\n        this.pending.delete(id)\n        reject(new DOMException('Proof generation aborted', 'AbortError'))\n      }\n\n      signal?.addEventListener('abort', onAbort, { once: true })\n\n      // Resolve baseUrl to absolute — workers resolve relative URLs against\n      // their own script URL (a webpack chunk), not the page origin.\n      const absoluteBaseUrl = typeof window !== 'undefined'\n        ? new URL(baseUrl, window.location.href).href\n        : baseUrl\n\n      this.worker.postMessage({\n        type: 'prove',\n        id,\n        circuitType,\n        inputs,\n        baseUrl: absoluteBaseUrl,\n      } satisfies ProofWorkerRequest)\n    })\n  }\n\n  /**\n   * Hard-terminate the worker. All pending proofs are rejected.\n   */\n  terminate() {\n    this.terminated = true\n    this.worker.terminate()\n    for (const [, p] of this.pending) {\n      p.reject(new DOMException('Worker terminated', 'AbortError'))\n    }\n    this.pending.clear()\n  }\n}\n\n// ============================================================================\n// Convenience Function\n// ============================================================================\n\n/**\n * Generate a UPP proof — uses a worker if provided, otherwise main-thread.\n *\n * This is the recommended entry point for proof generation. It provides a\n * unified API regardless of whether a worker is available.\n *\n * Circuit artifacts are automatically cached in IndexedDB after first download.\n */\nexport async function generateUPPProofAsync(\n  circuitType: UPPCircuitType,\n  inputs: UPPCircuitInputs,\n  baseUrl?: string,\n  options?: {\n    onProgress?: (stage: PlonkProvingStage, message: string) => void\n    onDownloadProgress?: (progress: DownloadProgress) => void\n    signal?: AbortSignal\n    worker?: ProofWorkerManager | null\n  },\n): Promise<ProofResult> {\n  const { onProgress, onDownloadProgress, signal, worker } = options ?? {}\n\n  if (worker) {\n    return worker.prove(circuitType, inputs, baseUrl ?? '', onProgress, signal, onDownloadProgress)\n  }\n\n  // Fallback: main-thread proving (with cache)\n  const { generateUPPProof } = await import('./proof.js')\n  return generateUPPProof(circuitType, inputs, baseUrl, onProgress, { onDownloadProgress })\n}\n","/**\n * Swap Module\n *\n * Core logic for building and interacting with the UPP in-pool swap order book.\n * Framework-agnostic (no React). Reuses withdraw verifier for proofs.\n */\n\nimport { type Address, type Hex, encodeAbiParameters, keccak256, parseAbiParameters, toHex } from 'viem'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Swap order as stored on-chain\n */\nexport interface SwapOrder {\n  /** Order ID (= maker's nullifier) */\n  orderId: Hex\n  /** Token being sold */\n  sellToken: Address\n  /** Original total sell amount */\n  sellAmount: bigint\n  /** Remaining sell amount (decremented on each fill) */\n  remainingSellAmount: bigint\n  /** Token the maker wants to receive */\n  buyToken: Address\n  /** Price: buyToken per sellToken (1e18 fixed-point) */\n  rate: bigint\n  /** Accumulated buy token amount from fills */\n  accumulatedBuyAmount: bigint\n  /** Maker's ASP ID (public, filterable by takers) */\n  makerAspId: bigint\n  /** Required filler ASP (0 = any) */\n  requiredFillerAspId: bigint\n  /** Block number after which order expires */\n  expiry: bigint\n  /** Whether the maker has claimed */\n  claimed: boolean\n  /** Whether the order was cancelled */\n  cancelled: boolean\n}\n\n/**\n * Parameters to place a swap order\n */\nexport interface SwapOrderParams {\n  /** Token to sell */\n  sellToken: Address\n  /** Amount to sell */\n  sellAmount: bigint\n  /** Token to buy */\n  buyToken: Address\n  /** Price: buyToken per sellToken (1e18 fixed-point) */\n  rate: bigint\n  /** Required filler ASP (0n = accept any) */\n  requiredFillerAspId?: bigint\n  /** Number of blocks until expiry (from current block) */\n  expiryBlocks: bigint\n}\n\n/**\n * Parameters to fill a swap order\n */\nexport interface SwapFillParams {\n  /** The order to fill */\n  orderId: Hex\n  /** How much sellToken the filler wants (≤ remaining) */\n  takeAmount: bigint\n}\n\n/**\n * Swap order from event log\n */\nexport interface SwapOrderEvent {\n  orderId: Hex\n  sellToken: Address\n  buyToken: Address\n  sellAmount: bigint\n  rate: bigint\n  makerAspId: bigint\n  requiredFillerAspId: bigint\n  expiry: bigint\n  blockNumber: bigint\n  /** On-chain remaining sell amount (populated by useSwapOrderBook) */\n  remainingSellAmount?: bigint\n  /** Whether the order has been claimed */\n  claimed?: boolean\n  /** Whether the order has been cancelled */\n  cancelled?: boolean\n}\n\n/**\n * Swap fill from event log\n */\nexport interface SwapFillEvent {\n  orderId: Hex\n  fillerNullifier: Hex\n  takeAmount: bigint\n  giveAmount: bigint\n  fillerAspId: bigint\n  remainingSellAmount: bigint\n  blockNumber: bigint\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** 1e18 fixed-point precision for swap rates */\nexport const RATE_PRECISION = 10n ** 18n\n\n// ============================================================================\n// Event ABIs (for indexing swap events)\n// ============================================================================\n\nexport const SWAP_ORDER_PLACED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderPlaced',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'sellToken', type: 'address', indexed: true },\n    { name: 'buyToken', type: 'address', indexed: true },\n    { name: 'sellAmount', type: 'uint256', indexed: false },\n    { name: 'rate', type: 'uint256', indexed: false },\n    { name: 'makerAspId', type: 'uint256', indexed: false },\n    { name: 'requiredFillerAspId', type: 'uint256', indexed: false },\n    { name: 'expiry', type: 'uint256', indexed: false },\n  ],\n} as const\n\nexport const SWAP_ORDER_FILLED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderFilled',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'fillerNullifier', type: 'bytes32', indexed: true },\n    { name: 'fillerOutputCommitment', type: 'bytes32', indexed: true },\n    { name: 'takeAmount', type: 'uint256', indexed: false },\n    { name: 'giveAmount', type: 'uint256', indexed: false },\n    { name: 'fillerAspId', type: 'uint256', indexed: false },\n    { name: 'remainingSellAmount', type: 'uint256', indexed: false },\n    { name: 'encryptedFillerNote', type: 'bytes', indexed: false },\n  ],\n} as const\n\nexport const SWAP_ORDER_CLAIMED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderClaimed',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'accumulatedBuyAmount', type: 'uint256', indexed: false },\n    { name: 'refundedSellAmount', type: 'uint256', indexed: false },\n    { name: 'buyOutputCommitment', type: 'bytes32', indexed: false },\n    { name: 'encryptedBuyNote', type: 'bytes', indexed: false },\n    { name: 'refundCommitment', type: 'bytes32', indexed: false },\n    { name: 'encryptedRefundNote', type: 'bytes', indexed: false },\n  ],\n} as const\n\nexport const SWAP_ORDER_CANCELLED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderCancelled',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'refundedSellAmount', type: 'uint256', indexed: false },\n    { name: 'refundCommitment', type: 'bytes32', indexed: false },\n    { name: 'encryptedRefundNote', type: 'bytes', indexed: false },\n  ],\n} as const\n\nexport const SWAP_EVENTS_ABI = [\n  SWAP_ORDER_PLACED_EVENT,\n  SWAP_ORDER_FILLED_EVENT,\n  SWAP_ORDER_CLAIMED_EVENT,\n  SWAP_ORDER_CANCELLED_EVENT,\n] as const\n\n// ============================================================================\n// Rate Calculations\n// ============================================================================\n\n/**\n * Compute the giveAmount (buyToken) for a given takeAmount (sellToken) at a rate.\n * giveAmount = (takeAmount * rate) / 1e18\n */\nexport function computeGiveAmount(takeAmount: bigint, rate: bigint): bigint {\n  return (takeAmount * rate) / RATE_PRECISION\n}\n\n/**\n * Compute the maximum takeAmount for a given giveAmount and rate.\n * takeAmount = (giveAmount * 1e18) / rate\n */\nexport function computeTakeAmount(giveAmount: bigint, rate: bigint): bigint {\n  if (rate === 0n) throw new Error('Rate cannot be zero')\n  return (giveAmount * RATE_PRECISION) / rate\n}\n\n/**\n * Compute rate from a desired trade: I want `buyAmount` of buyToken for `sellAmount` of sellToken.\n * rate = (buyAmount * 1e18) / sellAmount\n */\nexport function computeRate(sellAmount: bigint, buyAmount: bigint): bigint {\n  if (sellAmount === 0n) throw new Error('Sell amount cannot be zero')\n  return (buyAmount * RATE_PRECISION) / sellAmount\n}\n\n/**\n * Format a rate for human display.\n * Returns a string like \"0.0005\" for rate = 500000000000000n (0.0005e18)\n */\nexport function formatRate(rate: bigint, decimals: number = 6): string {\n  const whole = rate / RATE_PRECISION\n  const frac = rate % RATE_PRECISION\n  const fracStr = frac.toString().padStart(18, '0').slice(0, decimals)\n  return `${whole}.${fracStr}`\n}\n\n// ============================================================================\n// Cancel Key Management\n// ============================================================================\n\n/**\n * Generate a cancel key hash from a secret.\n * The secret should be a random 32-byte value stored by the maker.\n */\nexport function computeCancelKeyHash(cancelSecret: Hex): Hex {\n  return keccak256(encodeAbiParameters(\n    parseAbiParameters('bytes32'),\n    [cancelSecret]\n  ))\n}\n\n/**\n * Generate a random cancel secret.\n */\nexport function generateCancelSecret(): Hex {\n  const bytes = new Uint8Array(32)\n  crypto.getRandomValues(bytes)\n  return toHex(bytes)\n}\n\n// ============================================================================\n// Order Filtering\n// ============================================================================\n\n/**\n * Filter orders by ASP: only show orders from makers on acceptable ASPs.\n */\nexport function filterOrdersByASP(\n  orders: SwapOrderEvent[],\n  acceptableAspIds: bigint[]\n): SwapOrderEvent[] {\n  const aspSet = new Set(acceptableAspIds.map(id => id.toString()))\n  return orders.filter(o => aspSet.has(o.makerAspId.toString()))\n}\n\n/**\n * Filter orders by token pair.\n */\nexport function filterOrdersByTokenPair(\n  orders: SwapOrderEvent[],\n  sellToken: Address,\n  buyToken: Address\n): SwapOrderEvent[] {\n  const sell = sellToken.toLowerCase()\n  const buy = buyToken.toLowerCase()\n  return orders.filter(\n    o => o.sellToken.toLowerCase() === sell && o.buyToken.toLowerCase() === buy\n  )\n}\n\n/**\n * Check if a filler's ASP is accepted by an order.\n */\nexport function isFillerASPAccepted(order: SwapOrder | SwapOrderEvent, fillerAspId: bigint): boolean {\n  const required = 'requiredFillerAspId' in order ? order.requiredFillerAspId : 0n\n  return required === 0n || required === fillerAspId\n}\n\n// ============================================================================\n// Cancel Secret Persistence (localStorage)\n// ============================================================================\n\nconst CANCEL_SECRET_PREFIX = 'upp_swap_cancel_'\n\nfunction cancelKey(account: string, orderId: Hex): string {\n  return `${CANCEL_SECRET_PREFIX}${account.toLowerCase()}_${orderId}`\n}\n\n/**\n * Store a cancel secret in localStorage, scoped by wallet address.\n * Must be called after placing a swap order.\n */\nexport function storeCancelSecret(orderId: Hex, cancelSecret: Hex, account?: string): void {\n  if (typeof localStorage === 'undefined') return\n  if (account) {\n    localStorage.setItem(cancelKey(account, orderId), cancelSecret)\n  }\n  // Also store unscoped for backward compat\n  localStorage.setItem(`${CANCEL_SECRET_PREFIX}${orderId}`, cancelSecret)\n}\n\n/**\n * Retrieve a cancel secret from localStorage.\n * Returns null if not found (e.g. order was placed by someone else).\n */\nexport function getCancelSecret(orderId: Hex, account?: string): Hex | null {\n  if (typeof localStorage === 'undefined') return null\n  if (account) {\n    const scoped = localStorage.getItem(cancelKey(account, orderId))\n    if (scoped) return scoped as Hex\n  }\n  // Fall back to unscoped key\n  return localStorage.getItem(`${CANCEL_SECRET_PREFIX}${orderId}`) as Hex | null\n}\n\n/**\n * Remove a cancel secret from localStorage (after claim or cancel).\n */\nexport function removeCancelSecret(orderId: Hex, account?: string): void {\n  if (typeof localStorage === 'undefined') return\n  if (account) {\n    localStorage.removeItem(cancelKey(account, orderId))\n  }\n  localStorage.removeItem(`${CANCEL_SECRET_PREFIX}${orderId}`)\n}\n\n/**\n * Get all order IDs for a specific wallet address.\n * Falls back to all cancel secrets if no account provided (backward compat).\n */\nexport function getOwnOrderIds(account?: string): Hex[] {\n  if (typeof localStorage === 'undefined') return []\n  const prefix = account\n    ? `${CANCEL_SECRET_PREFIX}${account.toLowerCase()}_`\n    : CANCEL_SECRET_PREFIX\n  const ids: Hex[] = []\n  for (let i = 0; i < localStorage.length; i++) {\n    const key = localStorage.key(i)\n    if (key?.startsWith(prefix)) {\n      ids.push(key.slice(prefix.length) as Hex)\n    }\n  }\n  return ids\n}\n\n// ============================================================================\n// Order Status Helpers\n// ============================================================================\n\n/**\n * Check if an order is still active (not claimed, not cancelled, not expired).\n */\nexport function isOrderActive(order: SwapOrder, currentBlock: bigint): boolean {\n  return !order.claimed && !order.cancelled && currentBlock <= order.expiry && order.remainingSellAmount > 0n\n}\n\n/**\n * Compute the total buyToken amount the maker would receive for a full fill.\n */\nexport function computeTotalBuyAmount(sellAmount: bigint, rate: bigint): bigint {\n  return computeGiveAmount(sellAmount, rate)\n}\n\n/**\n * Compute fill percentage (0-100) for display.\n */\nexport function computeFillPercentage(order: SwapOrder): number {\n  if (order.sellAmount === 0n) return 0\n  const filled = order.sellAmount - order.remainingSellAmount\n  return Number((filled * 10000n) / order.sellAmount) / 100\n}\n","/**\n * Account Adapter — Pluggable account creation and persistence\n *\n * Abstracts how master keys are derived/loaded/stored.\n * The SDK doesn't care if keys come from a wallet signature,\n * seed phrase, hardware wallet, or external KMS.\n *\n * Persistence is handled via StorageAdapter (IndexedDB, localStorage, etc.)\n */\n\nimport type { MasterKeys, StarkMasterKeys } from '../keys/types.js'\nimport type { StorageAdapter } from '../indexer/types.js'\nimport { toHex } from 'viem'\n\n// ============================================================================\n// Interface\n// ============================================================================\n\n/**\n * Account adapter interface — pluggable key source.\n *\n * Implement this to bring your own key derivation:\n * - StorableAccountAdapter: persists keys via StorageAdapter (built-in)\n * - DirectAccountAdapter: pre-derived keys, no persistence (built-in, for testing)\n * - Custom: seed phrase, hardware wallet, external KMS\n */\nexport interface IAccountAdapter {\n  /** Load persisted keys (returns null if no saved account) */\n  load(): Promise<{ keys: MasterKeys; starkKeys?: StarkMasterKeys } | null>\n  /** Save keys to storage */\n  save(keys: MasterKeys, starkKeys?: StarkMasterKeys): Promise<void>\n  /** Clear persisted keys */\n  clear(): Promise<void>\n}\n\n// ============================================================================\n// Serialization\n// ============================================================================\n\ninterface SerializedAccount {\n  version: 3\n  spendingSecret: string\n  ownerHash: string\n  viewingSecret: string\n  viewingHash: string\n  starkSecret?: string[]\n  starkOwnerHash?: string[]\n  starkViewingSecret?: string[]\n  starkViewingHash?: string[]\n}\n\nfunction serializeAccount(keys: MasterKeys, starkKeys?: StarkMasterKeys): SerializedAccount {\n  return {\n    version: 3,\n    spendingSecret: toHex(keys.spendingSecret, { size: 32 }),\n    ownerHash: toHex(keys.ownerHash, { size: 32 }),\n    viewingSecret: toHex(keys.viewingSecret, { size: 32 }),\n    viewingHash: toHex(keys.viewingHash, { size: 32 }),\n    ...(starkKeys ? {\n      starkSecret: starkKeys.starkSecret.map(v => v.toString()),\n      starkOwnerHash: starkKeys.starkOwnerHash.map(v => v.toString()),\n      starkViewingSecret: starkKeys.starkViewingSecret.map(v => v.toString()),\n      starkViewingHash: starkKeys.starkViewingHash.map(v => v.toString()),\n    } : {}),\n  }\n}\n\nfunction deserializeAccount(data: SerializedAccount): { keys: MasterKeys; starkKeys?: StarkMasterKeys } {\n  if (data.version !== 3 || !data.spendingSecret) {\n    throw new Error('Invalid or outdated account data')\n  }\n\n  const keys: MasterKeys = {\n    spendingSecret: BigInt(data.spendingSecret),\n    ownerHash: BigInt(data.ownerHash),\n    viewingSecret: BigInt(data.viewingSecret),\n    viewingHash: BigInt(data.viewingHash),\n  }\n\n  let starkKeys: StarkMasterKeys | undefined\n  if (data.starkSecret) {\n    starkKeys = {\n      starkSecret: data.starkSecret.map(s => BigInt(s)) as any,\n      starkOwnerHash: data.starkOwnerHash!.map(s => BigInt(s)) as any,\n      starkViewingSecret: data.starkViewingSecret!.map(s => BigInt(s)) as any,\n      starkViewingHash: data.starkViewingHash!.map(s => BigInt(s)) as any,\n    }\n  }\n\n  return { keys, starkKeys }\n}\n\n// ============================================================================\n// StorableAccountAdapter — persists via StorageAdapter\n// ============================================================================\n\n/**\n * Account adapter that persists keys via a pluggable StorageAdapter.\n *\n * Works with IndexedDB, localStorage, memory, Redis, Postgres — anything\n * that implements StorageAdapter.\n *\n * @example\n * ```ts\n * const storage = createAutoAdapter('upp_account')\n * const adapter = new StorableAccountAdapter(storage, ethAddress)\n * const saved = await adapter.load()\n * if (!saved) {\n *   const keys = await deriveKeysFromSignature(sig)\n *   await adapter.save(keys, starkKeys)\n * }\n * ```\n */\nexport class StorableAccountAdapter implements IAccountAdapter {\n  private storageKey: string\n\n  constructor(\n    private storage: StorageAdapter,\n    ethAddress: string,\n  ) {\n    this.storageKey = `account_${ethAddress.toLowerCase()}`\n  }\n\n  async load(): Promise<{ keys: MasterKeys; starkKeys?: StarkMasterKeys } | null> {\n    const data = await this.storage.get<SerializedAccount>(this.storageKey)\n    if (!data) return null\n    try {\n      return deserializeAccount(data)\n    } catch {\n      // Corrupt or outdated — clear it\n      await this.storage.delete(this.storageKey)\n      return null\n    }\n  }\n\n  async save(keys: MasterKeys, starkKeys?: StarkMasterKeys): Promise<void> {\n    const serialized = serializeAccount(keys, starkKeys)\n    await this.storage.set(this.storageKey, serialized)\n  }\n\n  async clear(): Promise<void> {\n    await this.storage.delete(this.storageKey)\n  }\n}\n\n// ============================================================================\n// DirectAccountAdapter — no persistence (testing, KMS)\n// ============================================================================\n\n/**\n * Direct account adapter — accepts pre-derived keys, no persistence.\n *\n * @example\n * ```ts\n * const adapter = new DirectAccountAdapter(masterKeys, starkKeys)\n * ```\n */\nexport class DirectAccountAdapter implements IAccountAdapter {\n  constructor(\n    private keys: MasterKeys,\n    private starkKeys?: StarkMasterKeys,\n  ) {}\n\n  async load() {\n    return { keys: this.keys, starkKeys: this.starkKeys }\n  }\n\n  async save(): Promise<void> {\n    // No-op — keys are in memory only\n  }\n\n  async clear(): Promise<void> {\n    // No-op\n  }\n}\n","/**\n * NoteStore — Single source of truth for note state\n *\n * Framework-agnostic. Uses StorageAdapter for persistence.\n * Handles deduplication, status management, balance calculation.\n *\n * Usage:\n *   const store = new NoteStore(createMemoryAdapter())\n *   await store.load()\n *   store.addNote(note)  // returns false if duplicate\n *   store.getBalance()   // sum of unspent notes\n */\n\nimport type { StorageAdapter } from '../indexer/types.js'\nimport { getAddress } from 'viem'\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport type NoteStatus = 'pending' | 'confirmed' | 'spent'\nexport type ProofSystem = 'snark' | 'stark'\n\nexport interface ShieldedNote {\n  amount: bigint\n  blinding: bigint\n  commitment: string\n  ownerSecret: string\n  ownerHash: string\n  leafIndex: number\n  origin: string\n  token: string\n  txHash?: string\n  status: NoteStatus\n  timestamp: number\n  proofSystem?: ProofSystem\n}\n\n/** Serialized format for storage (bigints as strings) */\ninterface SerializedNote {\n  amount: string\n  blinding: string\n  commitment: string\n  ownerSecret: string\n  ownerHash: string\n  leafIndex: number\n  origin: string\n  token: string\n  txHash?: string\n  status: NoteStatus\n  timestamp: number\n  proofSystem?: ProofSystem\n}\n\nexport interface INoteStore {\n  getNotes(): ShieldedNote[]\n  getUnspentNotes(proofSystem?: ProofSystem): ShieldedNote[]\n  getBalance(token?: string, proofSystem?: ProofSystem): bigint\n  addNote(note: ShieldedNote): boolean\n  addNotes(notes: ShieldedNote[]): number\n  markSpent(commitment: string): void\n  unmarkSpent(commitment: string): void\n  updateLeafIndex(commitment: string, leafIndex: number): void\n  load(): Promise<void>\n  persist(): Promise<void>\n  clear(): Promise<void>\n  onChange(callback: () => void): () => void\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\nexport class NoteStore implements INoteStore {\n  private notes: ShieldedNote[] = []\n  private commitmentSet = new Set<string>()\n  private listeners = new Set<() => void>()\n  private dirty = false\n\n  constructor(\n    private storage: StorageAdapter,\n    private storageKey: string = 'notes',\n  ) {}\n\n  // ---------- Queries ----------\n\n  getNotes(): ShieldedNote[] {\n    return [...this.notes]\n  }\n\n  getUnspentNotes(proofSystem?: ProofSystem): ShieldedNote[] {\n    let result = this.notes.filter(n => n.status !== 'spent')\n    if (proofSystem) {\n      result = result.filter(n => (n.proofSystem ?? 'snark') === proofSystem)\n    }\n    return result\n  }\n\n  getBalance(token?: string, proofSystem?: ProofSystem): bigint {\n    let notes = this.getUnspentNotes(proofSystem)\n    if (token) {\n      const normalized = token.toLowerCase()\n      notes = notes.filter(n => n.token.toLowerCase() === normalized)\n    }\n    return notes.reduce((sum, n) => sum + n.amount, 0n)\n  }\n\n  // ---------- Mutations ----------\n\n  /**\n   * Add a note. Returns false if duplicate (by commitment).\n   * Normalizes token and origin addresses.\n   */\n  addNote(note: ShieldedNote): boolean {\n    const key = note.commitment.toLowerCase()\n    if (this.commitmentSet.has(key)) return false\n\n    // Normalize addresses\n    const normalized: ShieldedNote = {\n      ...note,\n      commitment: note.commitment.toLowerCase(),\n      origin: safeGetAddress(note.origin),\n      token: safeGetAddress(note.token),\n    }\n\n    this.notes.push(normalized)\n    this.commitmentSet.add(key)\n    this.dirty = true\n    this.notify()\n    return true\n  }\n\n  /**\n   * Add multiple notes. Returns count of actually added (non-duplicate).\n   */\n  addNotes(notes: ShieldedNote[]): number {\n    let added = 0\n    for (const note of notes) {\n      if (this.addNote(note)) added++\n    }\n    return added\n  }\n\n  /**\n   * Mark a note as spent (optimistic — syncNotes reconciles via nullifier check).\n   */\n  markSpent(commitment: string): void {\n    const key = commitment.toLowerCase()\n    const note = this.notes.find(n => n.commitment.toLowerCase() === key)\n    if (note && note.status !== 'spent') {\n      note.status = 'spent'\n      this.dirty = true\n      this.notify()\n    }\n  }\n\n  /**\n   * Un-mark a note as spent (reconciliation: nullifier not found on-chain).\n   */\n  unmarkSpent(commitment: string): void {\n    const key = commitment.toLowerCase()\n    const note = this.notes.find(n => n.commitment.toLowerCase() === key)\n    if (note && note.status === 'spent') {\n      note.status = 'confirmed'\n      this.dirty = true\n      this.notify()\n    }\n  }\n\n  /**\n   * Update the leafIndex for a note (e.g., after confirming on-chain).\n   */\n  updateLeafIndex(commitment: string, leafIndex: number): void {\n    const key = commitment.toLowerCase()\n    const note = this.notes.find(n => n.commitment.toLowerCase() === key)\n    if (note && note.leafIndex !== leafIndex) {\n      note.leafIndex = leafIndex\n      this.dirty = true\n      this.notify()\n    }\n  }\n\n  // ---------- Persistence ----------\n\n  async load(): Promise<void> {\n    const serialized = await this.storage.get<SerializedNote[]>(this.storageKey)\n    if (!serialized || !Array.isArray(serialized)) {\n      this.notes = []\n      this.commitmentSet.clear()\n      return\n    }\n\n    // Deduplicate on load — prevents persisted duplicates from propagating\n    this.notes = []\n    this.commitmentSet.clear()\n    let deduped = 0\n    for (const s of serialized) {\n      const note = deserializeNote(s)\n      const key = note.commitment.toLowerCase()\n      if (this.commitmentSet.has(key)) { deduped++; continue }\n      this.commitmentSet.add(key)\n      this.notes.push(note)\n    }\n    if (deduped > 0) {\n      console.log(`[NoteStore] Removed ${deduped} duplicate notes on load`)\n      this.dirty = true // will persist the cleaned version\n    } else {\n      this.dirty = false\n    }\n  }\n\n  async persist(): Promise<void> {\n    if (!this.dirty) return\n    const serialized = this.notes.map(serializeNote)\n    await this.storage.set(this.storageKey, serialized)\n    this.dirty = false\n  }\n\n  async clear(): Promise<void> {\n    this.notes = []\n    this.commitmentSet.clear()\n    this.dirty = false\n    await this.storage.delete(this.storageKey)\n    this.notify()\n  }\n\n  // ---------- Events ----------\n\n  onChange(callback: () => void): () => void {\n    this.listeners.add(callback)\n    return () => this.listeners.delete(callback)\n  }\n\n  private notify(): void {\n    for (const listener of this.listeners) {\n      listener()\n    }\n  }\n}\n\n// ============================================================================\n// Serialization\n// ============================================================================\n\nfunction serializeNote(note: ShieldedNote): SerializedNote {\n  return {\n    ...note,\n    amount: note.amount.toString(),\n    blinding: note.blinding.toString(),\n  }\n}\n\nfunction deserializeNote(s: SerializedNote): ShieldedNote {\n  return {\n    ...s,\n    amount: BigInt(s.amount),\n    blinding: BigInt(s.blinding),\n    proofSystem: s.proofSystem ?? 'snark',\n  }\n}\n\nfunction safeGetAddress(addr: string): string {\n  try {\n    return getAddress(addr)\n  } catch {\n    return addr // return as-is if not a valid address (e.g., bigint-encoded origin)\n  }\n}\n"]}

package/dist/{chunk-7VPW5T5R.js → chunk-UMWY4ICQ.js}

@@ -1,4 +1,4 @@
-import { init_stealth } from './chunk-C7DUABSG.js';
+import { init_stealth } from './chunk-Q6BLTPWV.js';
 
 // src/core/client.ts
 function createUPPClient(_config) {
@@ -39,5 +39,5 @@ function generateRandomBlinding() {
 init_stealth();
 
 export { NOTE_VERSION, createNote, createUPPClient, decryptNote, encryptNote };
-//# sourceMappingURL=chunk-7VPW5T5R.js.map
-//# sourceMappingURL=chunk-7VPW5T5R.js.map
+//# sourceMappingURL=chunk-UMWY4ICQ.js.map
+//# sourceMappingURL=chunk-UMWY4ICQ.js.map

package/dist/{chunk-7VPW5T5R.js.map → chunk-UMWY4ICQ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/client.ts","../src/core/types.ts","../src/core/note.ts","../src/core/index.ts"],"names":[],"mappings":";;;AAoFO,SAAS,gBAAgB,OAAA,EAAqC;AAEnE,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;;;AC9EO,IAAM,YAAA,GAAe;;;ACiCrB,SAAS,WAAW,MAAA,EAAgC;AACzD,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,QAAQ,MAAA,EAAQ,IAAA,EAAM,UAAS,GAAI,MAAA;AAG1D,EAAA,MAAM,YAAA,GAAe,YAAY,sBAAA,EAAuB;AAExD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,YAAA;AAAA,IACT,MAAA;AAAA,IACA,QAAA,EAAU,YAAA;AAAA,IACV,MAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA;AAAA,IACA,IAAA;AAAA,IACA,WAAW,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI;AAAA,GACzC;AACF;AASO,SAAS,WAAA,CAAY,OAAa,aAAA,EAA0C;AAEjF,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AASO,SAAS,WAAA,CAAY,YAA2B,aAAA,EAAwC;AAE7F,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AAyBA,SAAS,sBAAA,GAAiC;AAExC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,OAAO,IAAA,GAAO,KAAA,CAAM,KAAK,KAAK,CAAA,CAAE,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC,CAAA;AAC3F;;;ACtGA,YAAA,EAAA","file":"chunk-7VPW5T5R.js","sourcesContent":["/**\n * Main UPP Client\n *\n * Provides high-level API for interacting with the Universal Private Pool.\n */\n\nimport type { Address, PublicClient, WalletClient } from 'viem'\nimport type {\n  ShieldParams,\n  TransferParams,\n  MergeParams,\n  WithdrawParams,\n  Note,\n} from './types.js'\n\n/**\n * UPP Client configuration\n */\nexport interface UPPClientConfig {\n  /** Viem public client for reading chain state */\n  publicClient: PublicClient\n  /** Viem wallet client for sending transactions */\n  walletClient: WalletClient\n  /** Universal Private Pool contract address */\n  poolAddress: Address\n  /** ASP Registry Hub contract address */\n  aspHubAddress: Address\n  /** Chain ID (optional, derived from clients if not provided) */\n  chainId?: number\n}\n\n/**\n * UPP Client interface\n */\nexport interface UPPClient {\n  /** Shield tokens into the private pool */\n  shield(params: ShieldParams): Promise<{ commitment: `0x${string}`; note: Note }>\n\n  /** Transfer tokens privately */\n  transfer(params: TransferParams): Promise<{ nullifier: `0x${string}`; changeNote?: Note }>\n\n  /** Merge multiple notes into one */\n  merge(params: MergeParams): Promise<{ commitment: `0x${string}`; note: Note }>\n\n  /** Withdraw tokens from the private pool */\n  withdraw(params: WithdrawParams): Promise<{ txHash: `0x${string}` }>\n\n  /** Scan for notes belonging to a viewing key */\n  scanNotes(viewingKey: `0x${string}`): Promise<Note[]>\n\n  /** Get the current state root */\n  getStateRoot(): Promise<bigint>\n\n  /** Check if a nullifier has been spent */\n  isNullifierSpent(nullifier: `0x${string}`): Promise<boolean>\n}\n\n/**\n * Create a UPP client instance\n *\n * @example\n * ```ts\n * import { createUPPClient } from '@upp/sdk'\n * import { createPublicClient, createWalletClient, http } from 'viem'\n * import { sepolia } from 'viem/chains'\n *\n * const publicClient = createPublicClient({\n *   chain: sepolia,\n *   transport: http(),\n * })\n *\n * const walletClient = createWalletClient({\n *   chain: sepolia,\n *   transport: http(),\n * })\n *\n * const client = createUPPClient({\n *   publicClient,\n *   walletClient,\n *   poolAddress: '0x...',\n *   aspHubAddress: '0x...',\n * })\n * ```\n */\nexport function createUPPClient(_config: UPPClientConfig): UPPClient {\n  // TODO: Implement client\n  throw new Error('Not implemented')\n}\n","/**\n * Core type definitions for UPP SDK\n */\n\nimport type { Address, Hex } from 'viem'\n\n/**\n * Note version - increment when note structure changes\n */\nexport const NOTE_VERSION = 5\n\n/**\n * A private note in the Universal Private Pool\n */\nexport interface Note {\n  /** Note format version */\n  version: number\n  /** Token amount (in wei) */\n  amount: bigint\n  /** Random blinding factor */\n  blinding: bigint\n  /** Current origin - who is responsible for these funds (updated on merge) */\n  origin: Address\n  /** Sender - who sent this specific note (for payment attribution) */\n  sender: Address\n  /** ERC20 token address */\n  token: Address\n  /** Optional memo/message */\n  memo?: string\n  /** Timestamp when note was created */\n  timestamp?: number\n}\n\n/**\n * Encrypted note data stored on-chain (post-quantum, hash-based)\n */\nexport interface EncryptedNote {\n  /** AES-GCM encrypted note data */\n  ciphertext: Hex\n  /** AES-GCM nonce */\n  nonce: Hex\n}\n\n/**\n * Stealth meta-address (hash-based, post-quantum)\n * Published once, used by senders to encrypt notes to the recipient\n */\nexport interface StealthMetaAddress {\n  /** Owner hash = Poseidon(spendingSecret) */\n  ownerHash: bigint\n  /** Viewing hash = Poseidon(viewingSecret) */\n  viewingHash: bigint\n}\n\n/**\n * One-time address for a specific transaction (simplified for hash-based system)\n */\nexport interface StealthAddress {\n  /** Owner hash for this note */\n  ownerHash: bigint\n  /** Search tag for efficient scanning */\n  searchTag?: bigint\n}\n\n/**\n * On-chain merge record for audit trail\n */\nexport interface MergeRecord {\n  /** Output commitment (the merged note) */\n  outputCommitment: Hex\n  /** First input nullifier */\n  nullifier1: Hex\n  /** Second input nullifier */\n  nullifier2: Hex\n  /** Who performed the merge (new origin) */\n  merger: Address\n  /** Token that was merged */\n  token: Address\n  /** Block timestamp */\n  timestamp: number\n}\n\n/**\n * ASP (Association Set Provider) root\n */\nexport interface ASPRoot {\n  /** Merkle root of approved addresses */\n  root: bigint\n  /** IPFS hash for off-chain data */\n  ipfsHash: Hex\n  /** When this root was published */\n  timestamp: number\n  /** Number of addresses in the set */\n  leafCount: number\n}\n\n/**\n * Shield operation parameters\n */\nexport interface ShieldParams {\n  /** ERC20 token to shield */\n  token: Address\n  /** Amount to shield (in wei) */\n  amount: bigint\n  /** Optional: recipient owner hash (defaults to self) */\n  recipientOwnerHash?: bigint\n  /** Optional: memo to include in note */\n  memo?: string\n}\n\n/**\n * Transfer operation parameters\n */\nexport interface TransferParams {\n  /** Note to spend */\n  note: Note\n  /** Recipient stealth address */\n  recipient: StealthAddress\n  /** Amount to send (remainder goes back to sender as change) */\n  amount: bigint\n  /** Optional: memo to include */\n  memo?: string\n}\n\n/**\n * Merge operation parameters\n */\nexport interface MergeParams {\n  /** Notes to merge (must be same token) */\n  notes: [Note, Note]\n  /** Optional: memo for the merged note */\n  memo?: string\n}\n\n/**\n * Withdraw operation parameters\n */\nexport interface WithdrawParams {\n  /** Note to withdraw */\n  note: Note\n  /** Amount to withdraw */\n  amount: bigint\n  /** Recipient address for the tokens */\n  recipient: Address\n  /** ASP ID to use for compliance check */\n  aspId?: number\n  /** Use ragequit (origin withdrawing own funds) */\n  ragequit?: boolean\n}\n\n/**\n * Proof for ZK operations\n */\nexport interface Proof {\n  /** Proof data (format depends on proof system: Groth16 has pi_a/pi_b/pi_c, PLONK has A/B/C/Z/T1-T3/evals/Wxi/Wxiw) */\n  proof: Record<string, any>\n  /** Public signals */\n  publicSignals: string[]\n}\n\n/**\n * Note commitment (hash)\n */\nexport type Commitment = Hex\n\n/**\n * Nullifier (spent note identifier)\n */\nexport type Nullifier = Hex\n\n// =========================================================================\n// STARK Note Types (M31/Keccak-based, post-quantum)\n// =========================================================================\n\nimport type { M31Digest } from '../utils/keccak-m31.js'\n\n// STARK_AMOUNT_SCALE moved to utils/stark.ts\nexport { STARK_AMOUNT_SCALE } from '../utils/stark.js'\n\n/**\n * A private STARK note in the Universal Private Pool.\n *\n * All field values are M31 elements (< 2^31 - 1).\n * Commitment = keccak_m31(amount, ownerHash[0..4], blinding, origin, token).\n */\nexport interface StarkNote {\n  /** Amount in STARK units (actual wei = amount * STARK_AMOUNT_SCALE) */\n  amount: bigint\n  /** Owner hash = keccak_m31(starkSecret) — 4 M31 elements */\n  ownerHash: M31Digest\n  /** Random blinding factor (M31) */\n  blinding: bigint\n  /** Origin address encoded as M31 (lower 31 bits of address) */\n  origin: bigint\n  /** Token address encoded as M31 (lower 31 bits of address) */\n  token: bigint\n  /** The leaf index in the STARK Keccak Merkle tree (set after shielding) */\n  leafIndex?: number\n  /** The commitment digest (set after computation) */\n  commitment?: M31Digest\n  /** Optional memo */\n  memo?: string\n  /** Timestamp when note was created */\n  timestamp?: number\n}\n\n/**\n * STARK stealth meta-address (M31/Keccak-based)\n * Published once, used by senders to encrypt notes to the recipient\n */\nexport interface StarkStealthMetaAddress {\n  /** Owner hash = keccak_m31(starkSecret) — 4 M31 elements */\n  ownerHash: M31Digest\n  /** Viewing hash = keccak_m31(starkViewingSecret) — 4 M31 elements */\n  viewingHash: M31Digest\n}\n\n/**\n * STARK proof for ZK operations (serialized Circle STARK proof)\n */\nexport interface StarkProof {\n  /** Raw serialized Stwo Circle STARK proof bytes */\n  proofBytes: Hex\n  /** Public inputs seed (keccak256 of public parameters) */\n  publicInputsSeed: Hex\n}\n","/**\n * Note management utilities\n *\n * Create, encrypt, and decrypt private notes.\n */\n\nimport type { Address, Hex } from 'viem'\nimport type { Note, EncryptedNote } from './types.js'\nimport { NOTE_VERSION } from './types.js'\n\n/**\n * Parameters for creating a new note\n */\nexport interface CreateNoteParams {\n  /** Token amount */\n  amount: bigint\n  /** ERC20 token address */\n  token: Address\n  /** Origin address (who is responsible) */\n  origin: Address\n  /** Sender address */\n  sender: Address\n  /** Optional memo */\n  memo?: string\n  /** Optional blinding factor (generated if not provided) */\n  blinding?: bigint\n}\n\n/**\n * Create a new private note\n *\n * @example\n * ```ts\n * const note = createNote({\n *   amount: 1000n * 10n ** 18n,\n *   token: '0x...',\n *   origin: '0xMyAddress...',\n *   sender: '0xMyAddress...',\n *   memo: 'Payment for services',\n * })\n * ```\n */\nexport function createNote(params: CreateNoteParams): Note {\n  const { amount, token, origin, sender, memo, blinding } = params\n\n  // Generate random blinding factor if not provided\n  const noteBlinding = blinding ?? generateRandomBlinding()\n\n  return {\n    version: NOTE_VERSION,\n    amount,\n    blinding: noteBlinding,\n    origin,\n    sender,\n    token,\n    memo,\n    timestamp: Math.floor(Date.now() / 1000),\n  }\n}\n\n/**\n * Encrypt a note for a recipient\n *\n * @param note - The note to encrypt\n * @param sharedSecret - ECDH shared secret with recipient\n * @returns Encrypted note data\n */\nexport function encryptNote(_note: Note, _sharedSecret: Uint8Array): EncryptedNote {\n  // TODO: Implement AES-GCM encryption\n  throw new Error('Not implemented')\n}\n\n/**\n * Decrypt a received note\n *\n * @param encrypted - The encrypted note data\n * @param sharedSecret - ECDH shared secret\n * @returns Decrypted note or null if decryption fails\n */\nexport function decryptNote(_encrypted: EncryptedNote, _sharedSecret: Uint8Array): Note | null {\n  // TODO: Implement AES-GCM decryption\n  throw new Error('Not implemented')\n}\n\n/**\n * Compute the commitment hash for a note\n *\n * commitment = Poseidon(amount, blinding, origin, token)\n */\nexport function computeCommitment(_note: Note): Hex {\n  // TODO: Implement Poseidon hash\n  throw new Error('Not implemented')\n}\n\n/**\n * Compute the nullifier for spending a note\n *\n * nullifier = Poseidon(blinding, leafIndex)\n */\nexport function computeNullifier(_note: Note, _leafIndex: bigint): Hex {\n  // TODO: Implement nullifier computation\n  throw new Error('Not implemented')\n}\n\n/**\n * Generate a random blinding factor\n */\nfunction generateRandomBlinding(): bigint {\n  // TODO: Use crypto.getRandomValues for secure randomness\n  const bytes = new Uint8Array(31) // 31 bytes to stay in field\n  crypto.getRandomValues(bytes)\n  return BigInt('0x' + Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join(''))\n}\n","/**\n * Core UPP SDK functionality\n */\n\nexport { createUPPClient } from './client.js'\nexport type { UPPClient, UPPClientConfig } from './client.js'\n\nexport { createNote, encryptNote, decryptNote } from './note.js'\n\n// Stealth address utilities (post-quantum, hash-based)\nexport {\n  STEALTH_ADDRESS_PREFIX,\n  ADDRESS_VERSION,\n  encodeStealthAddress,\n  decodeStealthAddress,\n  isValidStealthAddress,\n  generateStealthAddress,\n  createOneTimeKeys,\n  verifyOwnership,\n  computeNoteEncryptionKey,\n  // STARK stealth addresses (0zs prefix)\n  STARK_STEALTH_ADDRESS_PREFIX,\n  STARK_ADDRESS_VERSION,\n  encodeStarkStealthAddress,\n  decodeStarkStealthAddress,\n  isValidStarkStealthAddress,\n  generateStarkStealthAddress,\n  detectAddressType,\n} from './stealth.js'\n\n// Proof generation (UPP circuits)\nexport {\n  generateUPPProof,\n  formatProofForContract,\n  getUPPCircuitArtifacts,\n  STATE_TREE_DEPTH,\n  ASP_TREE_DEPTH,\n} from './proof.js'\n\n// Proof worker (off-main-thread proving)\nexport {\n  ProofWorkerManager,\n  generateUPPProofAsync,\n} from './proof-worker.js'\nexport type {\n  ProofWorkerRequest,\n  ProofWorkerResponse,\n} from './proof-worker.js'\nexport type {\n  UPPCircuitType,\n  UPPTransferCircuitInputs,\n  UPPWithdrawCircuitInputs,\n  UPPCircuitInputs,\n  CircuitArtifacts,\n  ProofResult,\n  PlonkProvingStage,\n} from './proof.js'\n\n// Legacy stealth proof exports (deprecated)\nexport {\n  generateProof,\n  verifyProof,\n  generateStealthProof,\n  getStealthCircuitArtifacts,\n} from './proof.js'\nexport type {\n  CircuitType,\n  StealthCircuitType,\n  StealthCircuitInputs,\n  Stealth1x2CircuitInputs,\n  Stealth2x2CircuitInputs,\n} from './proof.js'\n\nexport * from './types.js'\n\n// Swap order book module\nexport {\n  computeGiveAmount,\n  computeTakeAmount,\n  computeRate,\n  formatRate,\n  computeCancelKeyHash,\n  generateCancelSecret,\n  filterOrdersByASP,\n  filterOrdersByTokenPair,\n  isFillerASPAccepted,\n  isOrderActive,\n  computeTotalBuyAmount,\n  computeFillPercentage,\n  storeCancelSecret,\n  getCancelSecret,\n  removeCancelSecret,\n  getOwnOrderIds,\n  RATE_PRECISION,\n  SWAP_EVENTS_ABI,\n  SWAP_ORDER_PLACED_EVENT,\n  SWAP_ORDER_FILLED_EVENT,\n  SWAP_ORDER_CLAIMED_EVENT,\n  SWAP_ORDER_CANCELLED_EVENT,\n} from './swap.js'\nexport type {\n  SwapOrder,\n  SwapOrderParams,\n  SwapFillParams,\n  SwapOrderEvent,\n  SwapFillEvent,\n} from './swap.js'\n\n// Account adapter (pluggable key source + persistence)\nexport { DirectAccountAdapter, StorableAccountAdapter } from './account.js'\nexport type { IAccountAdapter } from './account.js'\n\n// ASP provider (pluggable compliance)\nexport type { IASPProvider, ASPMembershipProof } from './asp-provider.js'\n\n// Note store (single source of truth for note state)\nexport { NoteStore } from './note-store.js'\nexport type { INoteStore, ShieldedNote, NoteStatus, ProofSystem } from './note-store.js'\n\n// ASP (Association Set Provider) module\nexport {\n  computeSingleOriginASPRoot,\n  generateSingleOriginASPProof,\n  verifyASPProof,\n  DEMO_ASP_ID,\n  DEMO_ASP_NAME,\n  createDemoASPRoot,\n  // Multi-origin ASP tree\n  buildASPTree,\n  computeMultiOriginASPRoot,\n  generateMultiOriginASPProof,\n  generateASPProof,\n} from './asp.js'\nexport type { ASPProof } from './asp.js'\n\n// Transfer module\nexport {\n  syncMerkleTree,\n  getMerkleProofsForNotes,\n  computeNullifier,\n  buildUPPTransferCircuitInputs,\n  buildTransfer,\n  formatOutputForContract,\n} from './transfer.js'\nexport type {\n  TransferStage,\n  SpendableNote,\n  MerkleProofWithNote,\n  TransferContext,\n  TransferBuildResult,\n  NoteWithAmount,\n} from './transfer.js'\n"]}
+{"version":3,"sources":["../src/core/client.ts","../src/core/types.ts","../src/core/note.ts","../src/core/index.ts"],"names":[],"mappings":";;;AAoFO,SAAS,gBAAgB,OAAA,EAAqC;AAEnE,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;;;AC9EO,IAAM,YAAA,GAAe;;;ACiCrB,SAAS,WAAW,MAAA,EAAgC;AACzD,EAAA,MAAM,EAAE,MAAA,EAAQ,KAAA,EAAO,QAAQ,MAAA,EAAQ,IAAA,EAAM,UAAS,GAAI,MAAA;AAG1D,EAAA,MAAM,YAAA,GAAe,YAAY,sBAAA,EAAuB;AAExD,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,YAAA;AAAA,IACT,MAAA;AAAA,IACA,QAAA,EAAU,YAAA;AAAA,IACV,MAAA;AAAA,IACA,MAAA;AAAA,IACA,KAAA;AAAA,IACA,IAAA;AAAA,IACA,WAAW,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,GAAA,KAAQ,GAAI;AAAA,GACzC;AACF;AASO,SAAS,WAAA,CAAY,OAAa,aAAA,EAA0C;AAEjF,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AASO,SAAS,WAAA,CAAY,YAA2B,aAAA,EAAwC;AAE7F,EAAA,MAAM,IAAI,MAAM,iBAAiB,CAAA;AACnC;AAyBA,SAAS,sBAAA,GAAiC;AAExC,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAO,OAAO,IAAA,GAAO,KAAA,CAAM,KAAK,KAAK,CAAA,CAAE,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,SAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,IAAA,CAAK,EAAE,CAAC,CAAA;AAC3F;;;ACtGA,YAAA,EAAA","file":"chunk-UMWY4ICQ.js","sourcesContent":["/**\n * Main UPP Client\n *\n * Provides high-level API for interacting with the Universal Private Pool.\n */\n\nimport type { Address, PublicClient, WalletClient } from 'viem'\nimport type {\n  ShieldParams,\n  TransferParams,\n  MergeParams,\n  WithdrawParams,\n  Note,\n} from './types.js'\n\n/**\n * UPP Client configuration\n */\nexport interface UPPClientConfig {\n  /** Viem public client for reading chain state */\n  publicClient: PublicClient\n  /** Viem wallet client for sending transactions */\n  walletClient: WalletClient\n  /** Universal Private Pool contract address */\n  poolAddress: Address\n  /** ASP Registry Hub contract address */\n  aspHubAddress: Address\n  /** Chain ID (optional, derived from clients if not provided) */\n  chainId?: number\n}\n\n/**\n * UPP Client interface\n */\nexport interface UPPClient {\n  /** Shield tokens into the private pool */\n  shield(params: ShieldParams): Promise<{ commitment: `0x${string}`; note: Note }>\n\n  /** Transfer tokens privately */\n  transfer(params: TransferParams): Promise<{ nullifier: `0x${string}`; changeNote?: Note }>\n\n  /** Merge multiple notes into one */\n  merge(params: MergeParams): Promise<{ commitment: `0x${string}`; note: Note }>\n\n  /** Withdraw tokens from the private pool */\n  withdraw(params: WithdrawParams): Promise<{ txHash: `0x${string}` }>\n\n  /** Scan for notes belonging to a viewing key */\n  scanNotes(viewingKey: `0x${string}`): Promise<Note[]>\n\n  /** Get the current state root */\n  getStateRoot(): Promise<bigint>\n\n  /** Check if a nullifier has been spent */\n  isNullifierSpent(nullifier: `0x${string}`): Promise<boolean>\n}\n\n/**\n * Create a UPP client instance\n *\n * @example\n * ```ts\n * import { createUPPClient } from '@upp/sdk'\n * import { createPublicClient, createWalletClient, http } from 'viem'\n * import { sepolia } from 'viem/chains'\n *\n * const publicClient = createPublicClient({\n *   chain: sepolia,\n *   transport: http(),\n * })\n *\n * const walletClient = createWalletClient({\n *   chain: sepolia,\n *   transport: http(),\n * })\n *\n * const client = createUPPClient({\n *   publicClient,\n *   walletClient,\n *   poolAddress: '0x...',\n *   aspHubAddress: '0x...',\n * })\n * ```\n */\nexport function createUPPClient(_config: UPPClientConfig): UPPClient {\n  // TODO: Implement client\n  throw new Error('Not implemented')\n}\n","/**\n * Core type definitions for UPP SDK\n */\n\nimport type { Address, Hex } from 'viem'\n\n/**\n * Note version - increment when note structure changes\n */\nexport const NOTE_VERSION = 5\n\n/**\n * A private note in the Universal Private Pool\n */\nexport interface Note {\n  /** Note format version */\n  version: number\n  /** Token amount (in wei) */\n  amount: bigint\n  /** Random blinding factor */\n  blinding: bigint\n  /** Current origin - who is responsible for these funds (updated on merge) */\n  origin: Address\n  /** Sender - who sent this specific note (for payment attribution) */\n  sender: Address\n  /** ERC20 token address */\n  token: Address\n  /** Optional memo/message */\n  memo?: string\n  /** Timestamp when note was created */\n  timestamp?: number\n}\n\n/**\n * Encrypted note data stored on-chain (post-quantum, hash-based)\n */\nexport interface EncryptedNote {\n  /** AES-GCM encrypted note data */\n  ciphertext: Hex\n  /** AES-GCM nonce */\n  nonce: Hex\n}\n\n/**\n * Stealth meta-address (hash-based, post-quantum)\n * Published once, used by senders to encrypt notes to the recipient\n */\nexport interface StealthMetaAddress {\n  /** Owner hash = Poseidon(spendingSecret) */\n  ownerHash: bigint\n  /** Viewing hash = Poseidon(viewingSecret) */\n  viewingHash: bigint\n}\n\n/**\n * One-time address for a specific transaction (simplified for hash-based system)\n */\nexport interface StealthAddress {\n  /** Owner hash for this note */\n  ownerHash: bigint\n  /** Search tag for efficient scanning */\n  searchTag?: bigint\n}\n\n/**\n * On-chain merge record for audit trail\n */\nexport interface MergeRecord {\n  /** Output commitment (the merged note) */\n  outputCommitment: Hex\n  /** First input nullifier */\n  nullifier1: Hex\n  /** Second input nullifier */\n  nullifier2: Hex\n  /** Who performed the merge (new origin) */\n  merger: Address\n  /** Token that was merged */\n  token: Address\n  /** Block timestamp */\n  timestamp: number\n}\n\n/**\n * ASP (Association Set Provider) root\n */\nexport interface ASPRoot {\n  /** Merkle root of approved addresses */\n  root: bigint\n  /** IPFS hash for off-chain data */\n  ipfsHash: Hex\n  /** When this root was published */\n  timestamp: number\n  /** Number of addresses in the set */\n  leafCount: number\n}\n\n/**\n * Shield operation parameters\n */\nexport interface ShieldParams {\n  /** ERC20 token to shield */\n  token: Address\n  /** Amount to shield (in wei) */\n  amount: bigint\n  /** Optional: recipient owner hash (defaults to self) */\n  recipientOwnerHash?: bigint\n  /** Optional: memo to include in note */\n  memo?: string\n}\n\n/**\n * Transfer operation parameters\n */\nexport interface TransferParams {\n  /** Note to spend */\n  note: Note\n  /** Recipient stealth address */\n  recipient: StealthAddress\n  /** Amount to send (remainder goes back to sender as change) */\n  amount: bigint\n  /** Optional: memo to include */\n  memo?: string\n}\n\n/**\n * Merge operation parameters\n */\nexport interface MergeParams {\n  /** Notes to merge (must be same token) */\n  notes: [Note, Note]\n  /** Optional: memo for the merged note */\n  memo?: string\n}\n\n/**\n * Withdraw operation parameters\n */\nexport interface WithdrawParams {\n  /** Note to withdraw */\n  note: Note\n  /** Amount to withdraw */\n  amount: bigint\n  /** Recipient address for the tokens */\n  recipient: Address\n  /** ASP ID to use for compliance check */\n  aspId?: number\n  /** Use ragequit (origin withdrawing own funds) */\n  ragequit?: boolean\n}\n\n/**\n * Proof for ZK operations\n */\nexport interface Proof {\n  /** Proof data (format depends on proof system: Groth16 has pi_a/pi_b/pi_c, PLONK has A/B/C/Z/T1-T3/evals/Wxi/Wxiw) */\n  proof: Record<string, any>\n  /** Public signals */\n  publicSignals: string[]\n}\n\n/**\n * Note commitment (hash)\n */\nexport type Commitment = Hex\n\n/**\n * Nullifier (spent note identifier)\n */\nexport type Nullifier = Hex\n\n// =========================================================================\n// STARK Note Types (M31/Keccak-based, post-quantum)\n// =========================================================================\n\nimport type { M31Digest } from '../utils/keccak-m31.js'\n\n// STARK_AMOUNT_SCALE moved to utils/stark.ts\nexport { STARK_AMOUNT_SCALE } from '../utils/stark.js'\n\n/**\n * A private STARK note in the Universal Private Pool.\n *\n * All field values are M31 elements (< 2^31 - 1).\n * Commitment = keccak_m31(amount, ownerHash[0..4], blinding, origin, token).\n */\nexport interface StarkNote {\n  /** Amount in STARK units (actual wei = amount * STARK_AMOUNT_SCALE) */\n  amount: bigint\n  /** Owner hash = keccak_m31(starkSecret) — 4 M31 elements */\n  ownerHash: M31Digest\n  /** Random blinding factor (M31) */\n  blinding: bigint\n  /** Origin address encoded as M31 (lower 31 bits of address) */\n  origin: bigint\n  /** Token address encoded as M31 (lower 31 bits of address) */\n  token: bigint\n  /** The leaf index in the STARK Keccak Merkle tree (set after shielding) */\n  leafIndex?: number\n  /** The commitment digest (set after computation) */\n  commitment?: M31Digest\n  /** Optional memo */\n  memo?: string\n  /** Timestamp when note was created */\n  timestamp?: number\n}\n\n/**\n * STARK stealth meta-address (M31/Keccak-based)\n * Published once, used by senders to encrypt notes to the recipient\n */\nexport interface StarkStealthMetaAddress {\n  /** Owner hash = keccak_m31(starkSecret) — 4 M31 elements */\n  ownerHash: M31Digest\n  /** Viewing hash = keccak_m31(starkViewingSecret) — 4 M31 elements */\n  viewingHash: M31Digest\n}\n\n/**\n * STARK proof for ZK operations (serialized Circle STARK proof)\n */\nexport interface StarkProof {\n  /** Raw serialized Stwo Circle STARK proof bytes */\n  proofBytes: Hex\n  /** Public inputs seed (keccak256 of public parameters) */\n  publicInputsSeed: Hex\n}\n","/**\n * Note management utilities\n *\n * Create, encrypt, and decrypt private notes.\n */\n\nimport type { Address, Hex } from 'viem'\nimport type { Note, EncryptedNote } from './types.js'\nimport { NOTE_VERSION } from './types.js'\n\n/**\n * Parameters for creating a new note\n */\nexport interface CreateNoteParams {\n  /** Token amount */\n  amount: bigint\n  /** ERC20 token address */\n  token: Address\n  /** Origin address (who is responsible) */\n  origin: Address\n  /** Sender address */\n  sender: Address\n  /** Optional memo */\n  memo?: string\n  /** Optional blinding factor (generated if not provided) */\n  blinding?: bigint\n}\n\n/**\n * Create a new private note\n *\n * @example\n * ```ts\n * const note = createNote({\n *   amount: 1000n * 10n ** 18n,\n *   token: '0x...',\n *   origin: '0xMyAddress...',\n *   sender: '0xMyAddress...',\n *   memo: 'Payment for services',\n * })\n * ```\n */\nexport function createNote(params: CreateNoteParams): Note {\n  const { amount, token, origin, sender, memo, blinding } = params\n\n  // Generate random blinding factor if not provided\n  const noteBlinding = blinding ?? generateRandomBlinding()\n\n  return {\n    version: NOTE_VERSION,\n    amount,\n    blinding: noteBlinding,\n    origin,\n    sender,\n    token,\n    memo,\n    timestamp: Math.floor(Date.now() / 1000),\n  }\n}\n\n/**\n * Encrypt a note for a recipient\n *\n * @param note - The note to encrypt\n * @param sharedSecret - ECDH shared secret with recipient\n * @returns Encrypted note data\n */\nexport function encryptNote(_note: Note, _sharedSecret: Uint8Array): EncryptedNote {\n  // TODO: Implement AES-GCM encryption\n  throw new Error('Not implemented')\n}\n\n/**\n * Decrypt a received note\n *\n * @param encrypted - The encrypted note data\n * @param sharedSecret - ECDH shared secret\n * @returns Decrypted note or null if decryption fails\n */\nexport function decryptNote(_encrypted: EncryptedNote, _sharedSecret: Uint8Array): Note | null {\n  // TODO: Implement AES-GCM decryption\n  throw new Error('Not implemented')\n}\n\n/**\n * Compute the commitment hash for a note\n *\n * commitment = Poseidon(amount, blinding, origin, token)\n */\nexport function computeCommitment(_note: Note): Hex {\n  // TODO: Implement Poseidon hash\n  throw new Error('Not implemented')\n}\n\n/**\n * Compute the nullifier for spending a note\n *\n * nullifier = Poseidon(blinding, leafIndex)\n */\nexport function computeNullifier(_note: Note, _leafIndex: bigint): Hex {\n  // TODO: Implement nullifier computation\n  throw new Error('Not implemented')\n}\n\n/**\n * Generate a random blinding factor\n */\nfunction generateRandomBlinding(): bigint {\n  // TODO: Use crypto.getRandomValues for secure randomness\n  const bytes = new Uint8Array(31) // 31 bytes to stay in field\n  crypto.getRandomValues(bytes)\n  return BigInt('0x' + Array.from(bytes).map(b => b.toString(16).padStart(2, '0')).join(''))\n}\n","/**\n * Core UPP SDK functionality\n */\n\nexport { createUPPClient } from './client.js'\nexport type { UPPClient, UPPClientConfig } from './client.js'\n\nexport { createNote, encryptNote, decryptNote } from './note.js'\n\n// Stealth address utilities (post-quantum, hash-based)\nexport {\n  STEALTH_ADDRESS_PREFIX,\n  ADDRESS_VERSION,\n  encodeStealthAddress,\n  decodeStealthAddress,\n  isValidStealthAddress,\n  generateStealthAddress,\n  createOneTimeKeys,\n  verifyOwnership,\n  computeNoteEncryptionKey,\n  // STARK stealth addresses (0zs prefix)\n  STARK_STEALTH_ADDRESS_PREFIX,\n  STARK_ADDRESS_VERSION,\n  encodeStarkStealthAddress,\n  decodeStarkStealthAddress,\n  isValidStarkStealthAddress,\n  generateStarkStealthAddress,\n  detectAddressType,\n} from './stealth.js'\n\n// Proof generation (UPP circuits)\nexport {\n  generateUPPProof,\n  formatProofForContract,\n  getUPPCircuitArtifacts,\n  STATE_TREE_DEPTH,\n  ASP_TREE_DEPTH,\n} from './proof.js'\n\n// Proof worker (off-main-thread proving)\nexport {\n  ProofWorkerManager,\n  generateUPPProofAsync,\n} from './proof-worker.js'\nexport type {\n  ProofWorkerRequest,\n  ProofWorkerResponse,\n} from './proof-worker.js'\n\n// Circuit artifact cache (IndexedDB-based, with download progress)\nexport {\n  CircuitArtifactCache,\n  CIRCUIT_VERSION,\n  CIRCUIT_CDN_BASE,\n} from './circuit-cache.js'\nexport type {\n  DownloadProgress,\n  ResolvedCircuitArtifacts,\n  CircuitCacheStatus,\n} from './circuit-cache.js'\nexport type {\n  UPPCircuitType,\n  UPPTransferCircuitInputs,\n  UPPWithdrawCircuitInputs,\n  UPPCircuitInputs,\n  CircuitArtifacts,\n  ProofResult,\n  PlonkProvingStage,\n} from './proof.js'\n\n// Legacy stealth proof exports (deprecated)\nexport {\n  generateProof,\n  verifyProof,\n  generateStealthProof,\n  getStealthCircuitArtifacts,\n} from './proof.js'\nexport type {\n  CircuitType,\n  StealthCircuitType,\n  StealthCircuitInputs,\n  Stealth1x2CircuitInputs,\n  Stealth2x2CircuitInputs,\n} from './proof.js'\n\nexport * from './types.js'\n\n// Swap order book module\nexport {\n  computeGiveAmount,\n  computeTakeAmount,\n  computeRate,\n  formatRate,\n  computeCancelKeyHash,\n  generateCancelSecret,\n  filterOrdersByASP,\n  filterOrdersByTokenPair,\n  isFillerASPAccepted,\n  isOrderActive,\n  computeTotalBuyAmount,\n  computeFillPercentage,\n  storeCancelSecret,\n  getCancelSecret,\n  removeCancelSecret,\n  getOwnOrderIds,\n  RATE_PRECISION,\n  SWAP_EVENTS_ABI,\n  SWAP_ORDER_PLACED_EVENT,\n  SWAP_ORDER_FILLED_EVENT,\n  SWAP_ORDER_CLAIMED_EVENT,\n  SWAP_ORDER_CANCELLED_EVENT,\n} from './swap.js'\nexport type {\n  SwapOrder,\n  SwapOrderParams,\n  SwapFillParams,\n  SwapOrderEvent,\n  SwapFillEvent,\n} from './swap.js'\n\n// Account adapter (pluggable key source + persistence)\nexport { DirectAccountAdapter, StorableAccountAdapter } from './account.js'\nexport type { IAccountAdapter } from './account.js'\n\n// ASP provider (pluggable compliance)\nexport type { IASPProvider, ASPMembershipProof } from './asp-provider.js'\n\n// Note store (single source of truth for note state)\nexport { NoteStore } from './note-store.js'\nexport type { INoteStore, ShieldedNote, NoteStatus, ProofSystem } from './note-store.js'\n\n// ASP (Association Set Provider) module\nexport {\n  computeSingleOriginASPRoot,\n  generateSingleOriginASPProof,\n  verifyASPProof,\n  DEMO_ASP_ID,\n  DEMO_ASP_NAME,\n  createDemoASPRoot,\n  // Multi-origin ASP tree\n  buildASPTree,\n  computeMultiOriginASPRoot,\n  generateMultiOriginASPProof,\n  generateASPProof,\n} from './asp.js'\nexport type { ASPProof } from './asp.js'\n\n// Transfer module\nexport {\n  syncMerkleTree,\n  getMerkleProofsForNotes,\n  computeNullifier,\n  buildUPPTransferCircuitInputs,\n  buildTransfer,\n  formatOutputForContract,\n} from './transfer.js'\nexport type {\n  TransferStage,\n  SpendableNote,\n  MerkleProofWithNote,\n  TransferContext,\n  TransferBuildResult,\n  NoteWithAmount,\n} from './transfer.js'\n"]}

package/dist/{chunk-PZAV2S5E.cjs → chunk-UYPIWBKM.cjs}

@@ -994,5 +994,5 @@ exports.makeRpcIndexer = makeRpcIndexer;
 exports.matchesSearchTag = matchesSearchTag;
 exports.tryDecryptNote = tryDecryptNote;
 exports.unpackNoteData = unpackNoteData;
-//# sourceMappingURL=chunk-PZAV2S5E.cjs.map
-//# sourceMappingURL=chunk-PZAV2S5E.cjs.map
+//# sourceMappingURL=chunk-UYPIWBKM.cjs.map
+//# sourceMappingURL=chunk-UYPIWBKM.cjs.map