@permissionless-technologies/upp-sdk 0.5.4 → 0.5.6

package/dist/utils/index.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
-var chunkI5EKGD4P_cjs = require('../chunk-I5EKGD4P.cjs');
-var chunkSWTNJPK5_cjs = require('../chunk-SWTNJPK5.cjs');
+var chunkXNSMPNY6_cjs = require('../chunk-XNSMPNY6.cjs');
+var chunkY6WCXYOC_cjs = require('../chunk-Y6WCXYOC.cjs');
 var chunkIIUKM5VE_cjs = require('../chunk-IIUKM5VE.cjs');
-var chunkU3YFYMWF_cjs = require('../chunk-U3YFYMWF.cjs');
-var chunkUFEDJJSH_cjs = require('../chunk-UFEDJJSH.cjs');
+var chunkXSJ5VVH4_cjs = require('../chunk-XSJ5VVH4.cjs');
+var chunkBCSMUH4L_cjs = require('../chunk-BCSMUH4L.cjs');
 var chunkHEHXSV47_cjs = require('../chunk-HEHXSV47.cjs');
 require('../chunk-G7VZBCD6.cjs');
 
@@ -12,103 +12,103 @@ require('../chunk-G7VZBCD6.cjs');
 
 Object.defineProperty(exports, "addPoints", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.addPoints; }
+  get: function () { return chunkXNSMPNY6_cjs.addPoints; }
 });
 Object.defineProperty(exports, "computeSharedSecret", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.computeSharedSecret; }
+  get: function () { return chunkXNSMPNY6_cjs.computeSharedSecret; }
 });
 Object.defineProperty(exports, "deriveDecryptionViewingKey", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.deriveDecryptionViewingKey; }
+  get: function () { return chunkXNSMPNY6_cjs.deriveDecryptionViewingKey; }
 });
 Object.defineProperty(exports, "deriveEncryptionViewingKey", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.deriveEncryptionViewingKey; }
+  get: function () { return chunkXNSMPNY6_cjs.deriveEncryptionViewingKey; }
 });
 Object.defineProperty(exports, "getBasePoint", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.getBasePoint; }
+  get: function () { return chunkXNSMPNY6_cjs.getBasePoint; }
 });
 Object.defineProperty(exports, "getSubOrder", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.getSubOrder; }
+  get: function () { return chunkXNSMPNY6_cjs.getSubOrder; }
 });
 Object.defineProperty(exports, "isOnCurve", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.isOnCurve; }
+  get: function () { return chunkXNSMPNY6_cjs.isOnCurve; }
 });
 Object.defineProperty(exports, "mulPointScalar", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.mulPointScalar; }
+  get: function () { return chunkXNSMPNY6_cjs.mulPointScalar; }
 });
 Object.defineProperty(exports, "packPoint", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.packPoint; }
+  get: function () { return chunkXNSMPNY6_cjs.packPoint; }
 });
 Object.defineProperty(exports, "pointToTuple", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.pointToTuple; }
+  get: function () { return chunkXNSMPNY6_cjs.pointToTuple; }
 });
 Object.defineProperty(exports, "privateToPublic", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.privateToPublic; }
+  get: function () { return chunkXNSMPNY6_cjs.privateToPublic; }
 });
 Object.defineProperty(exports, "tupleToPoint", {
   enumerable: true,
-  get: function () { return chunkI5EKGD4P_cjs.tupleToPoint; }
+  get: function () { return chunkXNSMPNY6_cjs.tupleToPoint; }
 });
 Object.defineProperty(exports, "STARK_AMOUNT_SCALE", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.STARK_AMOUNT_SCALE; }
+  get: function () { return chunkY6WCXYOC_cjs.STARK_AMOUNT_SCALE; }
 });
 Object.defineProperty(exports, "STARK_ASP_TREE_DEPTH", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.STARK_ASP_TREE_DEPTH; }
+  get: function () { return chunkY6WCXYOC_cjs.STARK_ASP_TREE_DEPTH; }
 });
 Object.defineProperty(exports, "STARK_STATE_TREE_DEPTH", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.STARK_STATE_TREE_DEPTH; }
+  get: function () { return chunkY6WCXYOC_cjs.STARK_STATE_TREE_DEPTH; }
 });
 Object.defineProperty(exports, "addressToM31", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.addressToM31; }
+  get: function () { return chunkY6WCXYOC_cjs.addressToM31; }
 });
 Object.defineProperty(exports, "buildStarkTransferWitness", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.buildStarkTransferWitness; }
+  get: function () { return chunkY6WCXYOC_cjs.buildStarkTransferWitness; }
 });
 Object.defineProperty(exports, "buildStarkWithdrawWitness", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.buildStarkWithdrawWitness; }
+  get: function () { return chunkY6WCXYOC_cjs.buildStarkWithdrawWitness; }
 });
 Object.defineProperty(exports, "computeTransferPublicInputsSeed", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.computeTransferPublicInputsSeed; }
+  get: function () { return chunkY6WCXYOC_cjs.computeTransferPublicInputsSeed; }
 });
 Object.defineProperty(exports, "computeWithdrawPublicInputsSeed", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.computeWithdrawPublicInputsSeed; }
+  get: function () { return chunkY6WCXYOC_cjs.computeWithdrawPublicInputsSeed; }
 });
 Object.defineProperty(exports, "isStarkAligned", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.isStarkAligned; }
+  get: function () { return chunkY6WCXYOC_cjs.isStarkAligned; }
 });
 Object.defineProperty(exports, "packM31Digest", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.packM31Digest; }
+  get: function () { return chunkY6WCXYOC_cjs.packM31Digest; }
 });
 Object.defineProperty(exports, "scaleAmountForStark", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.scaleAmountForStark; }
+  get: function () { return chunkY6WCXYOC_cjs.scaleAmountForStark; }
 });
 Object.defineProperty(exports, "splitSecretToM31Limbs", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.splitSecretToM31Limbs; }
+  get: function () { return chunkY6WCXYOC_cjs.splitSecretToM31Limbs; }
 });
 Object.defineProperty(exports, "truncateToM31", {
   enumerable: true,
-  get: function () { return chunkSWTNJPK5_cjs.truncateToM31; }
+  get: function () { return chunkY6WCXYOC_cjs.truncateToM31; }
 });
 Object.defineProperty(exports, "MAX_TREE_DEPTH", {
   enumerable: true,
@@ -132,63 +132,63 @@ Object.defineProperty(exports, "verifyMerkleProof", {
 });
 Object.defineProperty(exports, "DIGEST_SIZE", {
   enumerable: true,
-  get: function () { return chunkU3YFYMWF_cjs.DIGEST_SIZE; }
+  get: function () { return chunkXSJ5VVH4_cjs.DIGEST_SIZE; }
 });
 Object.defineProperty(exports, "M31_P", {
   enumerable: true,
-  get: function () { return chunkU3YFYMWF_cjs.M31_P; }
+  get: function () { return chunkXSJ5VVH4_cjs.M31_P; }
 });
 Object.defineProperty(exports, "SECRET_LIMBS", {
   enumerable: true,
-  get: function () { return chunkU3YFYMWF_cjs.SECRET_LIMBS; }
+  get: function () { return chunkXSJ5VVH4_cjs.SECRET_LIMBS; }
 });
 Object.defineProperty(exports, "computeStarkCommitment", {
   enumerable: true,
-  get: function () { return chunkU3YFYMWF_cjs.computeStarkCommitment; }
+  get: function () { return chunkXSJ5VVH4_cjs.computeStarkCommitment; }
 });
 Object.defineProperty(exports, "computeStarkNullifier", {
   enumerable: true,
-  get: function () { return chunkU3YFYMWF_cjs.computeStarkNullifier; }
+  get: function () { return chunkXSJ5VVH4_cjs.computeStarkNullifier; }
 });
 Object.defineProperty(exports, "computeStarkOwnerHash", {
   enumerable: true,
-  get: function () { return chunkU3YFYMWF_cjs.computeStarkOwnerHash; }
+  get: function () { return chunkXSJ5VVH4_cjs.computeStarkOwnerHash; }
 });
 Object.defineProperty(exports, "keccakHashTwo", {
   enumerable: true,
-  get: function () { return chunkU3YFYMWF_cjs.keccakHashTwo; }
+  get: function () { return chunkXSJ5VVH4_cjs.keccakHashTwo; }
 });
 Object.defineProperty(exports, "keccakM31", {
   enumerable: true,
-  get: function () { return chunkU3YFYMWF_cjs.keccakM31; }
+  get: function () { return chunkXSJ5VVH4_cjs.keccakM31; }
 });
 Object.defineProperty(exports, "splitToM31Limbs", {
   enumerable: true,
-  get: function () { return chunkU3YFYMWF_cjs.splitToM31Limbs; }
+  get: function () { return chunkXSJ5VVH4_cjs.splitToM31Limbs; }
 });
 Object.defineProperty(exports, "bigintToBytes", {
   enumerable: true,
-  get: function () { return chunkUFEDJJSH_cjs.bigintToBytes; }
+  get: function () { return chunkBCSMUH4L_cjs.bigintToBytes; }
 });
 Object.defineProperty(exports, "bytesToBigint", {
   enumerable: true,
-  get: function () { return chunkUFEDJJSH_cjs.bytesToBigint; }
+  get: function () { return chunkBCSMUH4L_cjs.bytesToBigint; }
 });
 Object.defineProperty(exports, "bytesToHex", {
   enumerable: true,
-  get: function () { return chunkUFEDJJSH_cjs.bytesToHex; }
+  get: function () { return chunkBCSMUH4L_cjs.bytesToHex; }
 });
 Object.defineProperty(exports, "hexToBytes", {
   enumerable: true,
-  get: function () { return chunkUFEDJJSH_cjs.hexToBytes; }
+  get: function () { return chunkBCSMUH4L_cjs.hexToBytes; }
 });
 Object.defineProperty(exports, "randomBytes", {
   enumerable: true,
-  get: function () { return chunkUFEDJJSH_cjs.randomBytes; }
+  get: function () { return chunkBCSMUH4L_cjs.randomBytes; }
 });
 Object.defineProperty(exports, "randomFieldElement", {
   enumerable: true,
-  get: function () { return chunkUFEDJJSH_cjs.randomFieldElement; }
+  get: function () { return chunkBCSMUH4L_cjs.randomFieldElement; }
 });
 Object.defineProperty(exports, "BABYJUBJUB_SUBORDER", {
   enumerable: true,

package/dist/utils/index.d.cts

@@ -1,7 +1,188 @@
 export { M as MAX_TREE_DEPTH, a as MerkleProof, b as MerkleTree, P as Point, c as addPoints, d as buildMerkleTree, e as computeSharedSecret, f as deriveDecryptionViewingKey, g as deriveEncryptionViewingKey, h as getBasePoint, i as getMerkleProof, j as getSubOrder, k as isOnCurve, m as mulPointScalar, p as packPoint, l as pointToTuple, n as privateToPublic, t as tupleToPoint, v as verifyMerkleProof } from '../merkle-mteVOlDf.cjs';
-export { S as STARK_AMOUNT_SCALE, a as STARK_ASP_TREE_DEPTH, b as STARK_STATE_TREE_DEPTH, c as StarkTransferWitness, d as StarkWithdrawWitness, e as addressToM31, f as buildStarkTransferWitness, g as buildStarkWithdrawWitness, h as computeTransferPublicInputsSeed, i as computeWithdrawPublicInputsSeed, j as isStarkAligned, p as packM31Digest, s as scaleAmountForStark, k as splitSecretToM31Limbs, t as truncateToM31 } from '../stark-BcTD1OaJ.cjs';
+import { Address, Hex } from 'viem';
 export { D as DIGEST_SIZE, a as M31Digest, M as M31Secret, b as M31_P, S as SECRET_LIMBS, c as computeStarkCommitment, d as computeStarkNullifier, e as computeStarkOwnerHash, k as keccakHashTwo, f as keccakM31, s as splitToM31Limbs } from '../keccak-m31-B_AqBbRF.cjs';
-import 'viem';
+
+/**
+ * STARK Utilities — Amount scaling, witness building, Fiat-Shamir
+ *
+ * These functions must produce identical outputs to the Rust Stwo prover
+ * (stwo-prover/src/) and the Solidity verifier.
+ *
+ * M31 field: p = 2^31 - 1 = 2,147,483,647
+ * Amount precision: 0.001 tokens (1e15 wei scale factor)
+ */
+
+/** Matches Solidity STARK_AMOUNT_SCALE = 1e15 */
+declare const STARK_AMOUNT_SCALE: bigint;
+/** State tree depth (Merkle tree for commitments) */
+declare const STARK_STATE_TREE_DEPTH = 32;
+/** ASP tree depth */
+declare const STARK_ASP_TREE_DEPTH = 20;
+/** Check if a wei amount is STARK-scale aligned and fits in M31. */
+declare function isStarkAligned(amount: bigint): boolean;
+/**
+ * Scale a wei amount down for the STARK circuit.
+ * Precision: 0.001 tokens (1e15 wei). Max: ~2.1M tokens.
+ *
+ * @returns The scaled amount as a number (fits in M31)
+ * @throws If not aligned to STARK_AMOUNT_SCALE or exceeds M31
+ */
+declare function scaleAmountForStark(weiAmount: bigint): number;
+/** Truncate a bigint to fit in M31 (modular reduction). */
+declare function truncateToM31(value: bigint): number;
+/** Convert an Ethereum address to an M31 field element (truncated). */
+declare function addressToM31(addr: Address): number;
+/**
+ * Split a 254-bit spending secret into 8 M31 limbs (248 bits of entropy).
+ *
+ * Each limb holds 31 bits (reduced mod M31_P). The secret is split
+ * little-endian: limb[0] = lowest 31 bits, limb[7] = highest bits.
+ *
+ * This matches the Rust prover's expectation of `[M31; 8]` for owner_secret.
+ */
+declare function splitSecretToM31Limbs(secret: bigint): number[];
+/**
+ * Pack an M31 digest (4 M31 elements) into a uint128 for Solidity.
+ * Each element occupies 32 bits (little-endian packing).
+ */
+declare function packM31Digest(digest: [number, number, number, number]): bigint;
+/**
+ * Compute the Fiat-Shamir public inputs seed for a STARK withdrawal.
+ * Must produce the same hash as Solidity and Rust.
+ */
+declare function computeWithdrawPublicInputsSeed(params: {
+    nullifier: Hex;
+    stateRoot: bigint;
+    aspRoot: bigint;
+    aspId: bigint;
+    token: Address;
+    amount: bigint;
+    recipient: Address;
+    isRagequit: boolean;
+}): Hex;
+/**
+ * Compute the Fiat-Shamir public inputs seed for a STARK transfer.
+ * Must produce the same hash as Solidity and Rust.
+ */
+declare function computeTransferPublicInputsSeed(params: {
+    nullifier: Hex;
+    stateRoot: bigint;
+    aspRoot: bigint;
+    token: Address;
+    outputCommitment1: Hex;
+    outputCommitment2: Hex;
+}): Hex;
+/**
+ * Witness inputs for the STARK withdrawal prover.
+ * All numeric values are u32 (must fit in M31 field, i.e. < 2^31 - 1).
+ * Hex string fields are for Fiat-Shamir seed binding.
+ */
+interface StarkWithdrawWitness {
+    owner_secret: number[];
+    input_amount: number;
+    input_blinding: number;
+    input_origin: number;
+    token: number;
+    leaf_index: number;
+    state_path_elements: number[];
+    state_path_indices: number[];
+    asp_path_elements: number[];
+    asp_path_indices: number[];
+    withdraw_amount: number;
+    change_amount: number;
+    change_blinding: number;
+    recipient: number;
+    is_ragequit: number;
+    nullifier_hex: string;
+    state_root_hex: string;
+    asp_root_hex: string;
+    asp_id_hex: string;
+    token_address_hex: string;
+    amount_hex: string;
+    recipient_address_hex: string;
+    is_ragequit_bool: boolean;
+}
+/**
+ * Witness inputs for the STARK transfer prover (1-in-2-out).
+ * All numeric values are u32 (must fit in M31 field).
+ */
+interface StarkTransferWitness {
+    owner_secret: number[];
+    input_amount: number;
+    input_blinding: number;
+    input_origin: number;
+    token: number;
+    leaf_index: number;
+    state_path_elements: number[];
+    state_path_indices: number[];
+    asp_path_elements: number[];
+    asp_path_indices: number[];
+    output1_amount: number;
+    output1_owner_hash: [number, number, number, number];
+    output1_blinding: number;
+    output1_origin: number;
+    output2_amount: number;
+    output2_owner_hash: [number, number, number, number];
+    output2_blinding: number;
+    output2_origin: number;
+    is_ragequit: number;
+    nullifier_hex: string;
+    state_root_hex: string;
+    asp_root_hex: string;
+    token_address_hex: string;
+    output_commitment_1_hex: string;
+    output_commitment_2_hex: string;
+}
+/**
+ * Build a complete STARK withdrawal witness from note data.
+ */
+declare function buildStarkWithdrawWitness(params: {
+    ownerSecret: number[];
+    inputAmount: number;
+    inputBlinding: number;
+    inputOrigin: number;
+    token: number;
+    leafIndex: number;
+    withdrawAmount: number;
+    changeAmount: number;
+    changeBlinding: number;
+    recipient: number;
+    isRagequit: number;
+    nullifierHex: Hex;
+    stateRootBigInt: bigint;
+    aspRootBigInt: bigint;
+    aspIdBigInt: bigint;
+    tokenAddress: Address;
+    amountWei: bigint;
+    recipientAddress: Address;
+    isRagequitBool: boolean;
+}): StarkWithdrawWitness;
+/**
+ * Build a complete STARK transfer witness (1-in-2-out).
+ */
+declare function buildStarkTransferWitness(params: {
+    ownerSecret: number[];
+    inputAmount: number;
+    inputBlinding: number;
+    inputOrigin: number;
+    token: number;
+    leafIndex: number;
+    output1Amount: number;
+    output1OwnerHash: [number, number, number, number];
+    output1Blinding: number;
+    output1Origin: number;
+    output2Amount: number;
+    output2OwnerHash: [number, number, number, number];
+    output2Blinding: number;
+    output2Origin: number;
+    isRagequit: number;
+    nullifierHex: Hex;
+    stateRootBigInt: bigint;
+    aspRootBigInt: bigint;
+    tokenAddress: Address;
+    outputCommitment1Hex: Hex;
+    outputCommitment2Hex: Hex;
+}): StarkTransferWitness;
 
 /**
  * Poseidon Hash Utilities (BLS12-381)
@@ -98,9 +279,9 @@ declare function randomFieldElement(): bigint;
  */
 declare function bytesToHex(bytes: Uint8Array): `0x${string}`;
 /**
- * Convert hex string to bytes
+ * Convert hex string to bytes (handles with or without 0x prefix)
  */
-declare function hexToBytes(hex: `0x${string}`): Uint8Array;
+declare function hexToBytes(hex: string): Uint8Array;
 /**
  * Convert bigint to bytes (big-endian)
  */
@@ -110,4 +291,4 @@ declare function bigintToBytes(value: bigint, length: number): Uint8Array;
  */
 declare function bytesToBigint(bytes: Uint8Array): bigint;
 
-export { BABYJUBJUB_SUBORDER, FIELD_PRIME, addressToField, bigintToBytes, bytesToBigint, bytesToHex, fieldToAddress, hexToBytes, isValidFieldElement, poseidon, poseidonHash, poseidonScalar, randomBytes, randomFieldElement, toFieldElement };
+export { BABYJUBJUB_SUBORDER, FIELD_PRIME, STARK_AMOUNT_SCALE, STARK_ASP_TREE_DEPTH, STARK_STATE_TREE_DEPTH, type StarkTransferWitness, type StarkWithdrawWitness, addressToField, addressToM31, bigintToBytes, buildStarkTransferWitness, buildStarkWithdrawWitness, bytesToBigint, bytesToHex, computeTransferPublicInputsSeed, computeWithdrawPublicInputsSeed, fieldToAddress, hexToBytes, isStarkAligned, isValidFieldElement, packM31Digest, poseidon, poseidonHash, poseidonScalar, randomBytes, randomFieldElement, scaleAmountForStark, splitSecretToM31Limbs, toFieldElement, truncateToM31 };

package/dist/utils/index.d.ts

@@ -1,7 +1,188 @@
 export { M as MAX_TREE_DEPTH, a as MerkleProof, b as MerkleTree, P as Point, c as addPoints, d as buildMerkleTree, e as computeSharedSecret, f as deriveDecryptionViewingKey, g as deriveEncryptionViewingKey, h as getBasePoint, i as getMerkleProof, j as getSubOrder, k as isOnCurve, m as mulPointScalar, p as packPoint, l as pointToTuple, n as privateToPublic, t as tupleToPoint, v as verifyMerkleProof } from '../merkle-mteVOlDf.js';
-export { S as STARK_AMOUNT_SCALE, a as STARK_ASP_TREE_DEPTH, b as STARK_STATE_TREE_DEPTH, c as StarkTransferWitness, d as StarkWithdrawWitness, e as addressToM31, f as buildStarkTransferWitness, g as buildStarkWithdrawWitness, h as computeTransferPublicInputsSeed, i as computeWithdrawPublicInputsSeed, j as isStarkAligned, p as packM31Digest, s as scaleAmountForStark, k as splitSecretToM31Limbs, t as truncateToM31 } from '../stark-BcTD1OaJ.js';
+import { Address, Hex } from 'viem';
 export { D as DIGEST_SIZE, a as M31Digest, M as M31Secret, b as M31_P, S as SECRET_LIMBS, c as computeStarkCommitment, d as computeStarkNullifier, e as computeStarkOwnerHash, k as keccakHashTwo, f as keccakM31, s as splitToM31Limbs } from '../keccak-m31-B_AqBbRF.js';
-import 'viem';
+
+/**
+ * STARK Utilities — Amount scaling, witness building, Fiat-Shamir
+ *
+ * These functions must produce identical outputs to the Rust Stwo prover
+ * (stwo-prover/src/) and the Solidity verifier.
+ *
+ * M31 field: p = 2^31 - 1 = 2,147,483,647
+ * Amount precision: 0.001 tokens (1e15 wei scale factor)
+ */
+
+/** Matches Solidity STARK_AMOUNT_SCALE = 1e15 */
+declare const STARK_AMOUNT_SCALE: bigint;
+/** State tree depth (Merkle tree for commitments) */
+declare const STARK_STATE_TREE_DEPTH = 32;
+/** ASP tree depth */
+declare const STARK_ASP_TREE_DEPTH = 20;
+/** Check if a wei amount is STARK-scale aligned and fits in M31. */
+declare function isStarkAligned(amount: bigint): boolean;
+/**
+ * Scale a wei amount down for the STARK circuit.
+ * Precision: 0.001 tokens (1e15 wei). Max: ~2.1M tokens.
+ *
+ * @returns The scaled amount as a number (fits in M31)
+ * @throws If not aligned to STARK_AMOUNT_SCALE or exceeds M31
+ */
+declare function scaleAmountForStark(weiAmount: bigint): number;
+/** Truncate a bigint to fit in M31 (modular reduction). */
+declare function truncateToM31(value: bigint): number;
+/** Convert an Ethereum address to an M31 field element (truncated). */
+declare function addressToM31(addr: Address): number;
+/**
+ * Split a 254-bit spending secret into 8 M31 limbs (248 bits of entropy).
+ *
+ * Each limb holds 31 bits (reduced mod M31_P). The secret is split
+ * little-endian: limb[0] = lowest 31 bits, limb[7] = highest bits.
+ *
+ * This matches the Rust prover's expectation of `[M31; 8]` for owner_secret.
+ */
+declare function splitSecretToM31Limbs(secret: bigint): number[];
+/**
+ * Pack an M31 digest (4 M31 elements) into a uint128 for Solidity.
+ * Each element occupies 32 bits (little-endian packing).
+ */
+declare function packM31Digest(digest: [number, number, number, number]): bigint;
+/**
+ * Compute the Fiat-Shamir public inputs seed for a STARK withdrawal.
+ * Must produce the same hash as Solidity and Rust.
+ */
+declare function computeWithdrawPublicInputsSeed(params: {
+    nullifier: Hex;
+    stateRoot: bigint;
+    aspRoot: bigint;
+    aspId: bigint;
+    token: Address;
+    amount: bigint;
+    recipient: Address;
+    isRagequit: boolean;
+}): Hex;
+/**
+ * Compute the Fiat-Shamir public inputs seed for a STARK transfer.
+ * Must produce the same hash as Solidity and Rust.
+ */
+declare function computeTransferPublicInputsSeed(params: {
+    nullifier: Hex;
+    stateRoot: bigint;
+    aspRoot: bigint;
+    token: Address;
+    outputCommitment1: Hex;
+    outputCommitment2: Hex;
+}): Hex;
+/**
+ * Witness inputs for the STARK withdrawal prover.
+ * All numeric values are u32 (must fit in M31 field, i.e. < 2^31 - 1).
+ * Hex string fields are for Fiat-Shamir seed binding.
+ */
+interface StarkWithdrawWitness {
+    owner_secret: number[];
+    input_amount: number;
+    input_blinding: number;
+    input_origin: number;
+    token: number;
+    leaf_index: number;
+    state_path_elements: number[];
+    state_path_indices: number[];
+    asp_path_elements: number[];
+    asp_path_indices: number[];
+    withdraw_amount: number;
+    change_amount: number;
+    change_blinding: number;
+    recipient: number;
+    is_ragequit: number;
+    nullifier_hex: string;
+    state_root_hex: string;
+    asp_root_hex: string;
+    asp_id_hex: string;
+    token_address_hex: string;
+    amount_hex: string;
+    recipient_address_hex: string;
+    is_ragequit_bool: boolean;
+}
+/**
+ * Witness inputs for the STARK transfer prover (1-in-2-out).
+ * All numeric values are u32 (must fit in M31 field).
+ */
+interface StarkTransferWitness {
+    owner_secret: number[];
+    input_amount: number;
+    input_blinding: number;
+    input_origin: number;
+    token: number;
+    leaf_index: number;
+    state_path_elements: number[];
+    state_path_indices: number[];
+    asp_path_elements: number[];
+    asp_path_indices: number[];
+    output1_amount: number;
+    output1_owner_hash: [number, number, number, number];
+    output1_blinding: number;
+    output1_origin: number;
+    output2_amount: number;
+    output2_owner_hash: [number, number, number, number];
+    output2_blinding: number;
+    output2_origin: number;
+    is_ragequit: number;
+    nullifier_hex: string;
+    state_root_hex: string;
+    asp_root_hex: string;
+    token_address_hex: string;
+    output_commitment_1_hex: string;
+    output_commitment_2_hex: string;
+}
+/**
+ * Build a complete STARK withdrawal witness from note data.
+ */
+declare function buildStarkWithdrawWitness(params: {
+    ownerSecret: number[];
+    inputAmount: number;
+    inputBlinding: number;
+    inputOrigin: number;
+    token: number;
+    leafIndex: number;
+    withdrawAmount: number;
+    changeAmount: number;
+    changeBlinding: number;
+    recipient: number;
+    isRagequit: number;
+    nullifierHex: Hex;
+    stateRootBigInt: bigint;
+    aspRootBigInt: bigint;
+    aspIdBigInt: bigint;
+    tokenAddress: Address;
+    amountWei: bigint;
+    recipientAddress: Address;
+    isRagequitBool: boolean;
+}): StarkWithdrawWitness;
+/**
+ * Build a complete STARK transfer witness (1-in-2-out).
+ */
+declare function buildStarkTransferWitness(params: {
+    ownerSecret: number[];
+    inputAmount: number;
+    inputBlinding: number;
+    inputOrigin: number;
+    token: number;
+    leafIndex: number;
+    output1Amount: number;
+    output1OwnerHash: [number, number, number, number];
+    output1Blinding: number;
+    output1Origin: number;
+    output2Amount: number;
+    output2OwnerHash: [number, number, number, number];
+    output2Blinding: number;
+    output2Origin: number;
+    isRagequit: number;
+    nullifierHex: Hex;
+    stateRootBigInt: bigint;
+    aspRootBigInt: bigint;
+    tokenAddress: Address;
+    outputCommitment1Hex: Hex;
+    outputCommitment2Hex: Hex;
+}): StarkTransferWitness;
 
 /**
  * Poseidon Hash Utilities (BLS12-381)
@@ -98,9 +279,9 @@ declare function randomFieldElement(): bigint;
  */
 declare function bytesToHex(bytes: Uint8Array): `0x${string}`;
 /**
- * Convert hex string to bytes
+ * Convert hex string to bytes (handles with or without 0x prefix)
  */
-declare function hexToBytes(hex: `0x${string}`): Uint8Array;
+declare function hexToBytes(hex: string): Uint8Array;
 /**
  * Convert bigint to bytes (big-endian)
  */
@@ -110,4 +291,4 @@ declare function bigintToBytes(value: bigint, length: number): Uint8Array;
  */
 declare function bytesToBigint(bytes: Uint8Array): bigint;
 
-export { BABYJUBJUB_SUBORDER, FIELD_PRIME, addressToField, bigintToBytes, bytesToBigint, bytesToHex, fieldToAddress, hexToBytes, isValidFieldElement, poseidon, poseidonHash, poseidonScalar, randomBytes, randomFieldElement, toFieldElement };
+export { BABYJUBJUB_SUBORDER, FIELD_PRIME, STARK_AMOUNT_SCALE, STARK_ASP_TREE_DEPTH, STARK_STATE_TREE_DEPTH, type StarkTransferWitness, type StarkWithdrawWitness, addressToField, addressToM31, bigintToBytes, buildStarkTransferWitness, buildStarkWithdrawWitness, bytesToBigint, bytesToHex, computeTransferPublicInputsSeed, computeWithdrawPublicInputsSeed, fieldToAddress, hexToBytes, isStarkAligned, isValidFieldElement, packM31Digest, poseidon, poseidonHash, poseidonScalar, randomBytes, randomFieldElement, scaleAmountForStark, splitSecretToM31Limbs, toFieldElement, truncateToM31 };

package/dist/utils/index.js

@@ -1,8 +1,8 @@
-export { addPoints, computeSharedSecret, deriveDecryptionViewingKey, deriveEncryptionViewingKey, getBasePoint, getSubOrder, isOnCurve, mulPointScalar, packPoint, pointToTuple, privateToPublic, tupleToPoint } from '../chunk-EHGH6TAW.js';
-export { STARK_AMOUNT_SCALE, STARK_ASP_TREE_DEPTH, STARK_STATE_TREE_DEPTH, addressToM31, buildStarkTransferWitness, buildStarkWithdrawWitness, computeTransferPublicInputsSeed, computeWithdrawPublicInputsSeed, isStarkAligned, packM31Digest, scaleAmountForStark, splitSecretToM31Limbs, truncateToM31 } from '../chunk-7T4CUE6E.js';
+export { addPoints, computeSharedSecret, deriveDecryptionViewingKey, deriveEncryptionViewingKey, getBasePoint, getSubOrder, isOnCurve, mulPointScalar, packPoint, pointToTuple, privateToPublic, tupleToPoint } from '../chunk-37RFFZU2.js';
+export { STARK_AMOUNT_SCALE, STARK_ASP_TREE_DEPTH, STARK_STATE_TREE_DEPTH, addressToM31, buildStarkTransferWitness, buildStarkWithdrawWitness, computeTransferPublicInputsSeed, computeWithdrawPublicInputsSeed, isStarkAligned, packM31Digest, scaleAmountForStark, splitSecretToM31Limbs, truncateToM31 } from '../chunk-AVSR443A.js';
 export { MAX_TREE_DEPTH, MerkleTree, buildMerkleTree, getMerkleProof, verifyMerkleProof } from '../chunk-GPF72JFR.js';
-export { DIGEST_SIZE, M31_P, SECRET_LIMBS, computeStarkCommitment, computeStarkNullifier, computeStarkOwnerHash, keccakHashTwo, keccakM31, splitToM31Limbs } from '../chunk-6TFDBBAQ.js';
-export { bigintToBytes, bytesToBigint, bytesToHex, hexToBytes, randomBytes, randomFieldElement } from '../chunk-UQIM2KT3.js';
+export { DIGEST_SIZE, M31_P, SECRET_LIMBS, computeStarkCommitment, computeStarkNullifier, computeStarkOwnerHash, keccakHashTwo, keccakM31, splitToM31Limbs } from '../chunk-H4NDMIPF.js';
+export { bigintToBytes, bytesToBigint, bytesToHex, hexToBytes, randomBytes, randomFieldElement } from '../chunk-4E23V3AT.js';
 export { BABYJUBJUB_SUBORDER, FIELD_PRIME, addressToField, fieldToAddress, isValidFieldElement, poseidon, poseidonHash, poseidonScalar, toFieldElement } from '../chunk-5QSSX3KR.js';
 import '../chunk-Z6ZWNWWR.js';
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@permissionless-technologies/upp-sdk",
-  "version": "0.5.4",
+  "version": "0.5.6",
   "description": "Universal Private Pool SDK - Privacy-preserving token operations for any ERC20",
   "type": "module",
   "main": "./dist/index.cjs",

package/src/deployments/31337.json

@@ -27,7 +27,8 @@
   },
   "metadata": {
     "chainId": 31337,
-    "deployTimestamp": 1774959216,
+    "deployBlock": 10562475,
+    "deployTimestamp": 1774983913,
     "deployer": "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266"
   }
 }