@permissionless-technologies/upp-sdk 0.5.4 → 0.5.6

package/dist/{chunk-IYRCJAME.cjs.map → chunk-C3HXJ5A6.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/stealth.ts","../src/core/proof-worker.ts","../src/core/swap.ts","../src/core/account.ts","../src/core/note-store.ts"],"names":["__export","ADDRESS_VERSION","STARK_ADDRESS_VERSION","STARK_STEALTH_ADDRESS_PREFIX","STEALTH_ADDRESS_PREFIX","bigintToBytes","bech32m","bytesToBigint","ownerHash","randomFieldElement","__esm","init_crypto","keccak256","encodeAbiParameters","parseAbiParameters","toHex","getAddress"],"mappings":";;;;;;;;AAAA,IAAA,eAAA,GAAA;AAAAA,0BAAA,CAAA,eAAA,EAAA;AAAA,EAAA,eAAA,EAAA,MAAAC,uBAAA;AAAA,EAAA,qBAAA,EAAA,MAAAC,6BAAA;AAAA,EAAA,4BAAA,EAAA,MAAAC,oCAAA;AAAA,EAAA,sBAAA,EAAA,MAAAC,8BAAA;AAAA,EAAA,wBAAA,EAAA,MAAA,wBAAA;AAAA,EAAA,iBAAA,EAAA,MAAA,iBAAA;AAAA,EAAA,yBAAA,EAAA,MAAA,yBAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,iBAAA,EAAA,MAAA,iBAAA;AAAA,EAAA,yBAAA,EAAA,MAAA,yBAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,2BAAA,EAAA,MAAA,2BAAA;AAAA,EAAA,sBAAA,EAAA,MAAA,sBAAA;AAAA,EAAA,0BAAA,EAAA,MAAA,0BAAA;AAAA,EAAA,qBAAA,EAAA,MAAA,qBAAA;AAAA,EAAA,eAAA,EAAA,MAAA;AAAA,CAAA,CAAA;AAsDO,SAAS,oBAAA,CACd,SAAA,EACA,WAAA,EACA,OAAA,GAAkB,CAAA,EACV;AAER,EAAA,MAAM,OAAO,IAAI,UAAA,CAAW,CAAA,GAAI,CAAA,GAAI,KAAK,CAAC,CAAA;AAC1C,EAAA,IAAI,MAAA,GAAS,CAAA;AAGb,EAAA,IAAA,CAAK,QAAQ,CAAA,GAAIH,uBAAA;AAGjB,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,CAAA,GAAK,GAAA;AAClC,EAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,OAAA,GAAU,GAAA;AAG3B,EAAA,MAAM,UAAA,GAAaI,+BAAA,CAAc,SAAA,EAAW,EAAE,CAAA;AAC9C,EAAA,IAAA,CAAK,GAAA,CAAI,YAAY,MAAM,CAAA;AAC3B,EAAA,MAAA,IAAU,EAAA;AAGV,EAAA,MAAM,YAAA,GAAeA,+BAAA,CAAc,WAAA,EAAa,EAAE,CAAA;AAClD,EAAA,IAAA,CAAK,GAAA,CAAI,cAAc,MAAM,CAAA;AAG7B,EAAA,MAAM,KAAA,GAAQC,cAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AAGlC,EAAA,OAAOA,cAAA,CAAQ,MAAA,CAAOF,8BAAA,EAAwB,KAAA,EAAO,aAAa,CAAA;AACpE;AAQO,SAAS,qBAAqB,OAAA,EAKnC;AAEA,EAAA,MAAM,OAAA,GAAUE,cAAA,CAAQ,MAAA,CAAO,OAAA,EAAS,aAAa,CAAA;AAGrD,EAAA,IAAI,OAAA,CAAQ,WAAWF,8BAAA,EAAwB;AAC7C,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0CAAA,EAA6CA,8BAAsB,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EACjH;AAGA,EAAA,MAAM,OAAO,IAAI,UAAA,CAAWE,eAAQ,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AAG5D,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,MAAM,OAAA,GAAU,KAAK,MAAA,EAAQ,CAAA;AAE7B,EAAA,IAAI,YAAYL,uBAAA,EAAiB;AAC/B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,OAAO,CAAA,YAAA,EAAeA,uBAAe,CAAA,cAAA,CAAgB,CAAA;AAAA,EACvG;AAGA,EAAA,MAAM,OAAA,GACH,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,KACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,EAAA,GACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,CAAA,GACpB,KAAK,MAAA,EAAQ,CAAA;AAGf,EAAA,MAAM,YAAYM,+BAAA,CAAc,IAAA,CAAK,MAAM,MAAA,EAAQ,MAAA,GAAS,EAAE,CAAC,CAAA;AAC/D,EAAA,MAAA,IAAU,EAAA;AAGV,EAAA,MAAM,cAAcA,+BAAA,CAAc,IAAA,CAAK,MAAM,MAAA,EAAQ,MAAA,GAAS,EAAE,CAAC,CAAA;AAEjE,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF;AAKO,SAAS,sBAAsB,OAAA,EAA0B;AAC9D,EAAA,IAAI;AACF,IAAA,oBAAA,CAAqB,OAAO,CAAA;AAC5B,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAKO,SAAS,sBAAA,CAAuB,IAAA,EAAkB,OAAA,GAAkB,CAAA,EAAW;AACpF,EAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,aAAa,OAAO,CAAA;AACvE;AAeA,eAAsB,iBAAA,CACpB,qBACA,UAAA,EACsB;AACtB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,yBAAsB,CAAA;AAExD,EAAA,IAAI,eAAe,MAAA,EAAW;AAE5B,IAAA,MAAMC,UAAAA,GAAY,MAAM,QAAA,CAAS,CAAC,UAAU,CAAC,CAAA;AAC7C,IAAA,OAAO;AAAA,MACL,aAAA,EAAe,UAAA;AAAA,MACf,SAAA,EAAAA;AAAA,KACF;AAAA,EACF;AAGA,EAAA,MAAM,gBAAgBC,oCAAA,EAAmB;AACzC,EAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,CAAC,aAAa,CAAC,CAAA;AAEhD,EAAA,OAAO;AAAA,IACL,aAAA;AAAA,IACA;AAAA,GACF;AACF;AASA,eAAsB,eAAA,CACpB,QACA,iBAAA,EACkB;AAClB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,yBAAsB,CAAA;AACxD,EAAA,MAAM,YAAA,GAAe,MAAM,QAAA,CAAS,CAAC,MAAM,CAAC,CAAA;AAC5C,EAAA,OAAO,YAAA,KAAiB,iBAAA;AAC1B;AAYA,eAAsB,wBAAA,CACpB,eACA,KAAA,EACiB;AACjB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,yBAAsB,CAAA;AACxD,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,OAAO,QAAA,CAAS,CAAC,aAAA,EAAe,KAAK,CAAC,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,QAAA,CAAS,CAAC,aAAa,CAAC,CAAA;AACjC;AA4BO,SAAS,yBAAA,CACd,SAAA,EACA,WAAA,EACA,OAAA,GAAkB,CAAA,EACV;AACR,EAAA,MAAM,OAAO,IAAI,UAAA,CAAW,CAAA,GAAI,CAAA,GAAI,KAAK,EAAE,CAAA;AAC3C,EAAA,IAAI,MAAA,GAAS,CAAA;AAGb,EAAA,IAAA,CAAK,QAAQ,CAAA,GAAIP,6BAAA;AAGjB,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,CAAA,GAAK,GAAA;AAClC,EAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,OAAA,GAAU,GAAA;AAG3B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,SAAA,CAAU,CAAC,CAAE,CAAA;AAChC,IAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,GAAA,GAAM,GAAA;AACvB,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,CAAA,GAAK,GAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAC/B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAAA,EACjC;AAGA,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,WAAA,CAAY,CAAC,CAAE,CAAA;AAClC,IAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,GAAA,GAAM,GAAA;AACvB,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,CAAA,GAAK,GAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAC/B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAAA,EACjC;AAEA,EAAA,MAAM,KAAA,GAAQI,cAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AAClC,EAAA,OAAOA,cAAA,CAAQ,MAAA,CAAOH,oCAAA,EAA8B,KAAA,EAAO,aAAa,CAAA;AAC1E;AAKO,SAAS,0BAA0B,OAAA,EAKxC;AACA,EAAA,MAAM,OAAA,GAAUG,cAAA,CAAQ,MAAA,CAAO,OAAA,EAAS,aAAa,CAAA;AAErD,EAAA,IAAI,OAAA,CAAQ,WAAWH,oCAAA,EAA8B;AACnD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,gDAAA,EAAmDA,oCAA4B,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,CAAA;AAAA,KAC1G;AAAA,EACF;AAEA,EAAA,MAAM,OAAO,IAAI,UAAA,CAAWG,eAAQ,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AAC5D,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,MAAM,OAAA,GAAU,KAAK,MAAA,EAAQ,CAAA;AAC7B,EAAA,IAAI,YAAYJ,6BAAA,EAAuB;AACrC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,mCAAA,EAAsC,OAAO,CAAA,YAAA,EAAeA,6BAAqB,CAAA,CAAA;AAAA,KACnF;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GACH,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,KACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,EAAA,GACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,CAAA,GACpB,KAAK,MAAA,EAAQ,CAAA;AAGf,EAAA,MAAM,YAAsB,EAAC;AAC7B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,MACJ,IAAA,CAAK,MAAM,CAAA,GACV,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,CAAA,GACrB,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,KACrB,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA,IAAM,EAAA;AACxB,IAAA,SAAA,CAAU,IAAA,CAAK,MAAA,CAAO,GAAA,KAAQ,CAAC,CAAC,CAAA;AAChC,IAAA,MAAA,IAAU,CAAA;AAAA,EACZ;AAGA,EAAA,MAAM,cAAwB,EAAC;AAC/B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,MACJ,IAAA,CAAK,MAAM,CAAA,GACV,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,CAAA,GACrB,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,KACrB,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA,IAAM,EAAA;AACxB,IAAA,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,GAAA,KAAQ,CAAC,CAAC,CAAA;AAClC,IAAA,MAAA,IAAU,CAAA;AAAA,EACZ;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF;AAKO,SAAS,2BAA2B,OAAA,EAA0B;AACnE,EAAA,IAAI;AACF,IAAA,yBAAA,CAA0B,OAAO,CAAA;AACjC,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAKO,SAAS,2BAAA,CACd,IAAA,EACA,OAAA,GAAkB,CAAA,EACV;AACR,EAAA,OAAO,yBAAA,CAA0B,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,kBAAkB,OAAO,CAAA;AACtF;AAKO,SAAS,kBAAkB,OAAA,EAAgD;AAChF,EAAA,IAAI,OAAA,CAAQ,UAAA,CAAWE,8BAAA,GAAyB,GAAG,GAAG,OAAO,OAAA;AAC7D,EAAA,IAAI,OAAA,CAAQ,UAAA,CAAWD,oCAAA,GAA+B,GAAG,GAAG,OAAO,OAAA;AACnE,EAAA,OAAO,SAAA;AACT;AA3WaC,uCAAA,CAAA,CAKAH,gCAAA,CAAA,KAKP,aAAA,CAAA,CAwMOE,6CAAA,CAAA,CAKAD;AAvPb,IAAA,YAAA,GAAAQ,uBAAA,CAAA;AAAA,EAAA,qBAAA,GAAA;AAqBA,IAAAC,6BAAA,EAAA;AAWO,IAAMP,8BAAA,GAAyB,KAAA;AAK/B,IAAMH,uBAAA,GAAkB,CAAA;AAK/B,IAAM,aAAA,GAAgB,IAAA;AAwMf,IAAME,oCAAA,GAA+B,KAAA;AAKrC,IAAMD,6BAAA,GAAwB,CAAA;AAAA,EAAA;AAAA,CAAA;;;AChM9B,IAAM,qBAAN,MAAyB;AAAA,EACtB,MAAA;AAAA,EACA,OAAA,uBAAc,GAAA,EAA0B;AAAA,EACxC,UAAA,GAAa,KAAA;AAAA,EAErB,YAAY,MAAA,EAAgB;AAC1B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,IAAA,CAAK,MAAA,CAAO,SAAA,GAAY,CAAC,CAAA,KAAyC;AAChE,MAAA,IAAA,CAAK,aAAA,CAAc,EAAE,IAAI,CAAA;AAAA,IAC3B,CAAA;AAEA,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,GAAU,CAAC,CAAA,KAAkB;AACvC,MAAA,OAAA,CAAQ,KAAA,CAAM,oCAAA,EAAsC,CAAA,CAAE,OAAA,EAAS,CAAC,CAAA;AAChE,MAAA,KAAA,MAAW,GAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AAChC,QAAA,CAAA,CAAE,OAAO,IAAI,KAAA,CAAM,iBAAiB,CAAA,CAAE,OAAO,EAAE,CAAC,CAAA;AAAA,MAClD;AACA,MAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,IACrB,CAAA;AAAA,EACF;AAAA,EAEQ,cAAc,IAAA,EAA2B;AAC/C,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAK,EAAE,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,EAAO;AAEZ,IAAA,QAAQ,KAAK,IAAA;AAAM,MACjB,KAAK,UAAA;AACH,QAAA,KAAA,CAAM,UAAA,GAAa,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,OAAO,CAAA;AAC3C,QAAA;AAAA,MACF,KAAK,mBAAA;AACH,QAAA,KAAA,CAAM,kBAAA,GAAqB,KAAK,QAAQ,CAAA;AACxC,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAC3B,QAAA,KAAA,CAAM,OAAA,CAAQ,KAAK,KAAK,CAAA;AACxB,QAAA;AAAA,MACF,KAAK,OAAA;AACH,QAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAC3B,QAAA,KAAA,CAAM,MAAA,CAAO,IAAI,KAAA,CAAM,IAAA,CAAK,OAAO,CAAC,CAAA;AACpC,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAA,CACJ,WAAA,EACA,QACA,OAAA,EACA,UAAA,EACA,QACA,kBAAA,EACsB;AACtB,IAAA,IAAI,KAAK,UAAA,EAAY;AACnB,MAAA,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAAA,IAC9C;AAEA,IAAA,OAAO,IAAI,OAAA,CAAqB,CAAC,OAAA,EAAS,MAAA,KAAW;AACnD,MAAA,MAAM,EAAA,GAAK,OAAO,UAAA,EAAW;AAE7B,MAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,QAAA,MAAA,CAAO,IAAI,YAAA,CAAa,0BAAA,EAA4B,YAAY,CAAC,CAAA;AACjE,QAAA;AAAA,MACF;AAEA,MAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,EAAA,EAAI,EAAE,SAAS,MAAA,EAAQ,UAAA,EAAY,oBAAoB,CAAA;AAExE,MAAA,MAAM,UAAU,MAAM;AACpB,QAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,EAAE,CAAA;AACtB,QAAA,MAAA,CAAO,IAAI,YAAA,CAAa,0BAAA,EAA4B,YAAY,CAAC,CAAA;AAAA,MACnE,CAAA;AAEA,MAAA,MAAA,EAAQ,iBAAiB,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AAIzD,MAAA,MAAM,eAAA,GAAkB,OAAO,MAAA,KAAW,WAAA,GACtC,IAAI,GAAA,CAAI,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAE,IAAA,GACvC,OAAA;AAEJ,MAAA,IAAA,CAAK,OAAO,WAAA,CAAY;AAAA,QACtB,IAAA,EAAM,OAAA;AAAA,QACN,EAAA;AAAA,QACA,WAAA;AAAA,QACA,MAAA;AAAA,QACA,OAAA,EAAS;AAAA,OACmB,CAAA;AAAA,IAChC,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAY;AACV,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,IAAA,IAAA,CAAK,OAAO,SAAA,EAAU;AACtB,IAAA,KAAA,MAAW,GAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AAChC,MAAA,CAAA,CAAE,MAAA,CAAO,IAAI,YAAA,CAAa,mBAAA,EAAqB,YAAY,CAAC,CAAA;AAAA,IAC9D;AACA,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;AAcA,eAAsB,qBAAA,CACpB,WAAA,EACA,MAAA,EACA,OAAA,EACA,OAAA,EAMsB;AACtB,EAAA,MAAM,EAAE,UAAA,EAAY,kBAAA,EAAoB,QAAQ,MAAA,EAAO,GAAI,WAAW,EAAC;AAEvE,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,OAAO,MAAA,CAAO,MAAM,WAAA,EAAa,MAAA,EAAQ,WAAW,EAAA,EAAI,UAAA,EAAY,QAAQ,kBAAkB,CAAA;AAAA,EAChG;AAGA,EAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,sBAAY,CAAA;AACtD,EAAA,OAAO,iBAAiB,WAAA,EAAa,MAAA,EAAQ,SAAS,UAAA,EAAY,EAAE,oBAAoB,CAAA;AAC1F;ACpFO,IAAM,iBAAiB,GAAA,IAAO;AAM9B,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,iBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IACpD,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IACnD,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAChD,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC/D,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA;AAAM;AAEtD;AAEO,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,iBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,iBAAA,EAAmB,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAC1D,EAAE,IAAA,EAAM,wBAAA,EAA0B,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IACjE,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACvD,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC/D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA;AAAM;AAEjE;AAEO,IAAM,wBAAA,GAA2B;AAAA,EACtC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,kBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,sBAAA,EAAwB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAChE,EAAE,IAAA,EAAM,oBAAA,EAAsB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC9D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC/D,EAAE,IAAA,EAAM,kBAAA,EAAoB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA,EAAM;AAAA,IAC1D,EAAE,IAAA,EAAM,kBAAA,EAAoB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC5D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA;AAAM;AAEjE;AAEO,IAAM,0BAAA,GAA6B;AAAA,EACxC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,oBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,oBAAA,EAAsB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC9D,EAAE,IAAA,EAAM,kBAAA,EAAoB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC5D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA;AAAM;AAEjE;AAEO,IAAM,eAAA,GAAkB;AAAA,EAC7B,uBAAA;AAAA,EACA,uBAAA;AAAA,EACA,wBAAA;AAAA,EACA;AACF;AAUO,SAAS,iBAAA,CAAkB,YAAoB,IAAA,EAAsB;AAC1E,EAAA,OAAQ,aAAa,IAAA,GAAQ,cAAA;AAC/B;AAMO,SAAS,iBAAA,CAAkB,YAAoB,IAAA,EAAsB;AAC1E,EAAA,IAAI,IAAA,KAAS,EAAA,EAAI,MAAM,IAAI,MAAM,qBAAqB,CAAA;AACtD,EAAA,OAAQ,aAAa,cAAA,GAAkB,IAAA;AACzC;AAMO,SAAS,WAAA,CAAY,YAAoB,SAAA,EAA2B;AACzE,EAAA,IAAI,UAAA,KAAe,EAAA,EAAI,MAAM,IAAI,MAAM,4BAA4B,CAAA;AACnE,EAAA,OAAQ,YAAY,cAAA,GAAkB,UAAA;AACxC;AAMO,SAAS,UAAA,CAAW,IAAA,EAAc,QAAA,GAAmB,CAAA,EAAW;AACrE,EAAA,MAAM,QAAQ,IAAA,GAAO,cAAA;AACrB,EAAA,MAAM,OAAO,IAAA,GAAO,cAAA;AACpB,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,QAAA,EAAS,CAAE,QAAA,CAAS,IAAI,GAAG,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA;AACnE,EAAA,OAAO,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAC5B;AAUO,SAAS,qBAAqB,YAAA,EAAwB;AAC3D,EAAA,OAAOU,cAAA,CAAUC,wBAAA;AAAA,IACfC,wBAAmB,SAAS,CAAA;AAAA,IAC5B,CAAC,YAAY;AAAA,GACd,CAAA;AACH;AAKO,SAAS,oBAAA,GAA4B;AAC1C,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAOC,WAAM,KAAK,CAAA;AACpB;AASO,SAAS,iBAAA,CACd,QACA,gBAAA,EACkB;AAClB,EAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,gBAAA,CAAiB,IAAI,CAAA,EAAA,KAAM,EAAA,CAAG,QAAA,EAAU,CAAC,CAAA;AAChE,EAAA,OAAO,MAAA,CAAO,OAAO,CAAA,CAAA,KAAK,MAAA,CAAO,IAAI,CAAA,CAAE,UAAA,CAAW,QAAA,EAAU,CAAC,CAAA;AAC/D;AAKO,SAAS,uBAAA,CACd,MAAA,EACA,SAAA,EACA,QAAA,EACkB;AAClB,EAAA,MAAM,IAAA,GAAO,UAAU,WAAA,EAAY;AACnC,EAAA,MAAM,GAAA,GAAM,SAAS,WAAA,EAAY;AACjC,EAAA,OAAO,MAAA,CAAO,MAAA;AAAA,IACZ,CAAA,CAAA,KAAK,EAAE,SAAA,CAAU,WAAA,OAAkB,IAAA,IAAQ,CAAA,CAAE,QAAA,CAAS,WAAA,EAAY,KAAM;AAAA,GAC1E;AACF;AAKO,SAAS,mBAAA,CAAoB,OAAmC,WAAA,EAA8B;AACnG,EAAA,MAAM,QAAA,GAAW,qBAAA,IAAyB,KAAA,GAAQ,KAAA,CAAM,mBAAA,GAAsB,EAAA;AAC9E,EAAA,OAAO,QAAA,KAAa,MAAM,QAAA,KAAa,WAAA;AACzC;AAMA,IAAM,oBAAA,GAAuB,kBAAA;AAE7B,SAAS,SAAA,CAAU,SAAiB,OAAA,EAAsB;AACxD,EAAA,OAAO,GAAG,oBAAoB,CAAA,EAAG,QAAQ,WAAA,EAAa,IAAI,OAAO,CAAA,CAAA;AACnE;AAMO,SAAS,iBAAA,CAAkB,OAAA,EAAc,YAAA,EAAmB,OAAA,EAAwB;AACzF,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACzC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,YAAA,CAAa,OAAA,CAAQ,SAAA,CAAU,OAAA,EAAS,OAAO,GAAG,YAAY,CAAA;AAAA,EAChE;AAEA,EAAA,YAAA,CAAa,QAAQ,CAAA,EAAG,oBAAoB,CAAA,EAAG,OAAO,IAAI,YAAY,CAAA;AACxE;AAMO,SAAS,eAAA,CAAgB,SAAc,OAAA,EAA8B;AAC1E,EAAA,IAAI,OAAO,YAAA,KAAiB,WAAA,EAAa,OAAO,IAAA;AAChD,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAM,SAAS,YAAA,CAAa,OAAA,CAAQ,SAAA,CAAU,OAAA,EAAS,OAAO,CAAC,CAAA;AAC/D,IAAA,IAAI,QAAQ,OAAO,MAAA;AAAA,EACrB;AAEA,EAAA,OAAO,aAAa,OAAA,CAAQ,CAAA,EAAG,oBAAoB,CAAA,EAAG,OAAO,CAAA,CAAE,CAAA;AACjE;AAKO,SAAS,kBAAA,CAAmB,SAAc,OAAA,EAAwB;AACvE,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACzC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,YAAA,CAAa,UAAA,CAAW,SAAA,CAAU,OAAA,EAAS,OAAO,CAAC,CAAA;AAAA,EACrD;AACA,EAAA,YAAA,CAAa,UAAA,CAAW,CAAA,EAAG,oBAAoB,CAAA,EAAG,OAAO,CAAA,CAAE,CAAA;AAC7D;AAMO,SAAS,eAAe,OAAA,EAAyB;AACtD,EAAA,IAAI,OAAO,YAAA,KAAiB,WAAA,EAAa,OAAO,EAAC;AACjD,EAAA,MAAM,MAAA,GAAS,UACX,CAAA,EAAG,oBAAoB,GAAG,OAAA,CAAQ,WAAA,EAAa,CAAA,CAAA,CAAA,GAC/C,oBAAA;AACJ,EAAA,MAAM,MAAa,EAAC;AACpB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,YAAA,CAAa,QAAQ,CAAA,EAAA,EAAK;AAC5C,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA;AAC9B,IAAA,IAAI,GAAA,EAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,MAAA,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAM,CAAQ,CAAA;AAAA,IAC1C;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AASO,SAAS,aAAA,CAAc,OAAkB,YAAA,EAA+B;AAC7E,EAAA,OAAO,CAAC,KAAA,CAAM,OAAA,IAAW,CAAC,KAAA,CAAM,aAAa,YAAA,IAAgB,KAAA,CAAM,MAAA,IAAU,KAAA,CAAM,mBAAA,GAAsB,EAAA;AAC3G;AAKO,SAAS,qBAAA,CAAsB,YAAoB,IAAA,EAAsB;AAC9E,EAAA,OAAO,iBAAA,CAAkB,YAAY,IAAI,CAAA;AAC3C;AAKO,SAAS,sBAAsB,KAAA,EAA0B;AAC9D,EAAA,IAAI,KAAA,CAAM,UAAA,KAAe,EAAA,EAAI,OAAO,CAAA;AACpC,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,UAAA,GAAa,KAAA,CAAM,mBAAA;AACxC,EAAA,OAAO,MAAA,CAAQ,MAAA,GAAS,MAAA,GAAU,KAAA,CAAM,UAAU,CAAA,GAAI,GAAA;AACxD;AClUA,SAAS,gBAAA,CAAiB,MAAkB,SAAA,EAAgD;AAC1F,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAA;AAAA,IACT,gBAAgBA,UAAAA,CAAM,IAAA,CAAK,gBAAgB,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IACvD,WAAWA,UAAAA,CAAM,IAAA,CAAK,WAAW,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IAC7C,eAAeA,UAAAA,CAAM,IAAA,CAAK,eAAe,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IACrD,aAAaA,UAAAA,CAAM,IAAA,CAAK,aAAa,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IACjD,GAAI,SAAA,GAAY;AAAA,MACd,aAAa,SAAA,CAAU,WAAA,CAAY,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,MACxD,gBAAgB,SAAA,CAAU,cAAA,CAAe,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,MAC9D,oBAAoB,SAAA,CAAU,kBAAA,CAAmB,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,MACtE,kBAAkB,SAAA,CAAU,gBAAA,CAAiB,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU;AAAA,QAChE;AAAC,GACP;AACF;AAEA,SAAS,mBAAmB,IAAA,EAA4E;AACtG,EAAA,IAAI,IAAA,CAAK,OAAA,KAAY,CAAA,IAAK,CAAC,KAAK,cAAA,EAAgB;AAC9C,IAAA,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAAA,EACpD;AAEA,EAAA,MAAM,IAAA,GAAmB;AAAA,IACvB,cAAA,EAAgB,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA;AAAA,IAC1C,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA;AAAA,IAChC,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,aAAa,CAAA;AAAA,IACxC,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,WAAW;AAAA,GACtC;AAEA,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,SAAA,GAAY;AAAA,MACV,aAAa,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAChD,gBAAgB,IAAA,CAAK,cAAA,CAAgB,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MACvD,oBAAoB,IAAA,CAAK,kBAAA,CAAoB,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAC/D,kBAAkB,IAAA,CAAK,gBAAA,CAAkB,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAM,SAAA,EAAU;AAC3B;AAuBO,IAAM,yBAAN,MAAwD;AAAA,EAG7D,WAAA,CACU,SACR,UAAA,EACA;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGR,IAAA,IAAA,CAAK,UAAA,GAAa,CAAA,QAAA,EAAW,UAAA,CAAW,WAAA,EAAa,CAAA,CAAA;AAAA,EACvD;AAAA,EAPQ,UAAA;AAAA,EASR,MAAM,IAAA,GAA0E;AAC9E,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAuB,KAAK,UAAU,CAAA;AACtE,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,IAAA,IAAI;AACF,MAAA,OAAO,mBAAmB,IAAI,CAAA;AAAA,IAChC,CAAA,CAAA,MAAQ;AAEN,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AACzC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,IAAA,CAAK,IAAA,EAAkB,SAAA,EAA4C;AACvE,IAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,IAAA,EAAM,SAAS,CAAA;AACnD,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,YAAY,UAAU,CAAA;AAAA,EACpD;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAAA,EAC3C;AACF;AAcO,IAAM,uBAAN,MAAsD;AAAA,EAC3D,WAAA,CACU,MACA,SAAA,EACR;AAFQ,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EACP;AAAA,EAEH,MAAM,IAAA,GAAO;AACX,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,SAAA,EAAW,KAAK,SAAA,EAAU;AAAA,EACtD;AAAA,EAEA,MAAM,IAAA,GAAsB;AAAA,EAE5B;AAAA,EAEA,MAAM,KAAA,GAAuB;AAAA,EAE7B;AACF;ACrGO,IAAM,YAAN,MAAsC;AAAA,EAM3C,WAAA,CACU,OAAA,EACA,UAAA,GAAqB,OAAA,EAC7B;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EACP;AAAA,EARK,QAAwB,EAAC;AAAA,EACzB,aAAA,uBAAoB,GAAA,EAAY;AAAA,EAChC,SAAA,uBAAgB,GAAA,EAAgB;AAAA,EAChC,KAAA,GAAQ,KAAA;AAAA;AAAA,EAShB,QAAA,GAA2B;AACzB,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,KAAK,CAAA;AAAA,EACvB;AAAA,EAEA,gBAAgB,WAAA,EAA2C;AACzD,IAAA,IAAI,SAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAA,GAAS,OAAO,MAAA,CAAO,CAAA,CAAA,KAAA,CAAM,CAAA,CAAE,WAAA,IAAe,aAAa,WAAW,CAAA;AAAA,IACxE;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,UAAA,CAAW,OAAgB,WAAA,EAAmC;AAC5D,IAAA,IAAI,KAAA,GAAQ,IAAA,CAAK,eAAA,CAAgB,WAAW,CAAA;AAC5C,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAM,UAAA,GAAa,MAAM,WAAA,EAAY;AACrC,MAAA,KAAA,GAAQ,MAAM,MAAA,CAAO,CAAA,CAAA,KAAK,EAAE,KAAA,CAAM,WAAA,OAAkB,UAAU,CAAA;AAAA,IAChE;AACA,IAAA,OAAO,KAAA,CAAM,OAAO,CAAC,GAAA,EAAK,MAAM,GAAA,GAAM,CAAA,CAAE,QAAQ,EAAE,CAAA;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,QAAQ,IAAA,EAA6B;AACnC,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AACxC,IAAA,IAAI,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAG,GAAG,OAAO,KAAA;AAGxC,IAAA,MAAM,UAAA,GAA2B;AAAA,MAC/B,GAAG,IAAA;AAAA,MACH,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AAAA,MACxC,MAAA,EAAQ,cAAA,CAAe,IAAA,CAAK,MAAM,CAAA;AAAA,MAClC,KAAA,EAAO,cAAA,CAAe,IAAA,CAAK,KAAK;AAAA,KAClC;AAEA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,UAAU,CAAA;AAC1B,IAAA,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,CAAA;AAC1B,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,MAAA,EAAO;AACZ,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,KAAA,EAA+B;AACtC,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAG,KAAA,EAAA;AAAA,IAC1B;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,UAAU,UAAA,EAA0B;AAClC,IAAA,MAAM,GAAA,GAAM,WAAW,WAAA,EAAY;AACnC,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,UAAA,CAAW,WAAA,EAAY,KAAM,GAAG,CAAA;AACpE,IAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,MAAA,KAAW,OAAA,EAAS;AACnC,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AACd,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,UAAA,EAA0B;AACpC,IAAA,MAAM,GAAA,GAAM,WAAW,WAAA,EAAY;AACnC,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,UAAA,CAAW,WAAA,EAAY,KAAM,GAAG,CAAA;AACpE,IAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,MAAA,KAAW,OAAA,EAAS;AACnC,MAAA,IAAA,CAAK,MAAA,GAAS,WAAA;AACd,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,eAAA,CAAgB,YAAoB,SAAA,EAAyB;AAC3D,IAAA,MAAM,GAAA,GAAM,WAAW,WAAA,EAAY;AACnC,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,UAAA,CAAW,WAAA,EAAY,KAAM,GAAG,CAAA;AACpE,IAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,SAAA,KAAc,SAAA,EAAW;AACxC,MAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,IAAA,GAAsB;AAC1B,IAAA,MAAM,aAAa,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAsB,KAAK,UAAU,CAAA;AAC3E,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA,EAAG;AAC7C,MAAA,IAAA,CAAK,QAAQ,EAAC;AACd,MAAA,IAAA,CAAK,cAAc,KAAA,EAAM;AACzB,MAAA;AAAA,IACF;AAGA,IAAA,IAAA,CAAK,QAAQ,EAAC;AACd,IAAA,IAAA,CAAK,cAAc,KAAA,EAAM;AACzB,IAAA,IAAI,OAAA,GAAU,CAAA;AACd,IAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,MAAA,MAAM,IAAA,GAAO,gBAAgB,CAAC,CAAA;AAC9B,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AACxC,MAAA,IAAI,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAG,CAAA,EAAG;AAAE,QAAA,OAAA,EAAA;AAAW,QAAA;AAAA,MAAS;AACvD,MAAA,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,CAAA;AAC1B,MAAA,IAAA,CAAK,KAAA,CAAM,KAAK,IAAI,CAAA;AAAA,IACtB;AACA,IAAA,IAAI,UAAU,CAAA,EAAG;AACf,MAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oBAAA,EAAuB,OAAO,CAAA,wBAAA,CAA0B,CAAA;AACpE,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AAAA,IACf,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,IACf;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAI,CAAC,KAAK,KAAA,EAAO;AACjB,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,aAAa,CAAA;AAC/C,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,YAAY,UAAU,CAAA;AAClD,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAA,CAAK,QAAQ,EAAC;AACd,IAAA,IAAA,CAAK,cAAc,KAAA,EAAM;AACzB,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AACzC,IAAA,IAAA,CAAK,MAAA,EAAO;AAAA,EACd;AAAA;AAAA,EAIA,SAAS,QAAA,EAAkC;AACzC,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC7C;AAAA,EAEQ,MAAA,GAAe;AACrB,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,SAAA,EAAW;AACrC,MAAA,QAAA,EAAS;AAAA,IACX;AAAA,EACF;AACF;AAMA,SAAS,cAAc,IAAA,EAAoC;AACzD,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,QAAA,EAAS;AAAA,IAC7B,QAAA,EAAU,IAAA,CAAK,QAAA,CAAS,QAAA;AAAS,GACnC;AACF;AAEA,SAAS,gBAAgB,CAAA,EAAiC;AACxD,EAAA,OAAO;AAAA,IACL,GAAG,CAAA;AAAA,IACH,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,IACvB,QAAA,EAAU,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAA;AAAA,IAC3B,WAAA,EAAa,EAAE,WAAA,IAAe;AAAA,GAChC;AACF;AAEA,SAAS,eAAe,IAAA,EAAsB;AAC5C,EAAA,IAAI;AACF,IAAA,OAAOC,gBAAW,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"chunk-IYRCJAME.cjs","sourcesContent":["/**\n * Stealth Address Utilities (Post-Quantum, Hash-Based)\n *\n * Implements stealth addresses using Poseidon hashes with bech32m encoding.\n * No BabyJubJub curve operations — ownership is proven via hash preimage.\n *\n * Address Format (bech32m):\n *   0zk1<version><chainId><ownerHash><viewingHash>\n *\n * Key Flow (self-shield):\n *   1. User derives ownerHash = Poseidon(spendingSecret)\n *   2. Commitment = Poseidon(amount, ownerHash, blinding, origin, token)\n *   3. Encrypt note with key derived from viewingSecret\n *\n * Key Flow (send to others, future):\n *   1. Decode recipient's stealth address (ownerHash, viewingHash)\n *   2. Generate per-note secret and derive ownerHash for the note\n *   3. Encrypt note so recipient's viewingSecret can decrypt\n */\n\nimport { bech32m } from 'bech32'\nimport {\n  randomFieldElement,\n  bigintToBytes,\n  bytesToBigint,\n} from '../utils/crypto.js'\nimport type { MasterKeys, StarkMasterKeys, OneTimeKeys } from '../keys/types.js'\nimport type { M31Digest } from '../utils/keccak-m31.js'\n\n/**\n * Stealth address prefix\n */\nexport const STEALTH_ADDRESS_PREFIX = '0zk'\n\n/**\n * Address version (v2 = hash-based, post-quantum)\n */\nexport const ADDRESS_VERSION = 2\n\n/**\n * Maximum length for bech32m encoding\n */\nconst BECH32M_LIMIT = 1023\n\n/**\n * Encode a stealth address in bech32m format\n *\n * Format: 0zk1<version><chainId><ownerHash><viewingHash>\n *\n * @param ownerHash - Owner hash = Poseidon(spendingSecret)\n * @param viewingHash - Viewing hash = Poseidon(viewingSecret)\n * @param chainId - Optional chain ID (0 = any chain)\n * @returns bech32m encoded stealth address\n */\nexport function encodeStealthAddress(\n  ownerHash: bigint,\n  viewingHash: bigint,\n  chainId: number = 0\n): string {\n  // Build data buffer: version (1 byte) + chainId (4 bytes) + 2 * 32 bytes = 69 bytes\n  const data = new Uint8Array(1 + 4 + 32 * 2)\n  let offset = 0\n\n  // Version\n  data[offset++] = ADDRESS_VERSION\n\n  // Chain ID (4 bytes, big-endian)\n  data[offset++] = (chainId >> 24) & 0xff\n  data[offset++] = (chainId >> 16) & 0xff\n  data[offset++] = (chainId >> 8) & 0xff\n  data[offset++] = chainId & 0xff\n\n  // Owner hash (32 bytes)\n  const ownerBytes = bigintToBytes(ownerHash, 32)\n  data.set(ownerBytes, offset)\n  offset += 32\n\n  // Viewing hash (32 bytes)\n  const viewingBytes = bigintToBytes(viewingHash, 32)\n  data.set(viewingBytes, offset)\n\n  // Convert to 5-bit words for bech32m\n  const words = bech32m.toWords(data)\n\n  // Encode with prefix\n  return bech32m.encode(STEALTH_ADDRESS_PREFIX, words, BECH32M_LIMIT)\n}\n\n/**\n * Decode a bech32m stealth address\n *\n * @param address - bech32m encoded stealth address\n * @returns Decoded hash values\n */\nexport function decodeStealthAddress(address: string): {\n  version: number\n  chainId: number\n  ownerHash: bigint\n  viewingHash: bigint\n} {\n  // Decode bech32m\n  const decoded = bech32m.decode(address, BECH32M_LIMIT)\n\n  // Verify prefix\n  if (decoded.prefix !== STEALTH_ADDRESS_PREFIX) {\n    throw new Error(`Invalid stealth address prefix: expected '${STEALTH_ADDRESS_PREFIX}', got '${decoded.prefix}'`)\n  }\n\n  // Convert from 5-bit words back to bytes\n  const data = new Uint8Array(bech32m.fromWords(decoded.words))\n\n  // Parse version\n  let offset = 0\n  const version = data[offset++]!\n\n  if (version !== ADDRESS_VERSION) {\n    throw new Error(`Unsupported address version: ${version}. Expected v${ADDRESS_VERSION} (hash-based).`)\n  }\n\n  // Parse chain ID\n  const chainId =\n    (data[offset++]! << 24) |\n    (data[offset++]! << 16) |\n    (data[offset++]! << 8) |\n    data[offset++]!\n\n  // Parse owner hash (32 bytes)\n  const ownerHash = bytesToBigint(data.slice(offset, offset + 32))\n  offset += 32\n\n  // Parse viewing hash (32 bytes)\n  const viewingHash = bytesToBigint(data.slice(offset, offset + 32))\n\n  return {\n    version,\n    chainId,\n    ownerHash,\n    viewingHash,\n  }\n}\n\n/**\n * Validate a stealth address format\n */\nexport function isValidStealthAddress(address: string): boolean {\n  try {\n    decodeStealthAddress(address)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Generate stealth address from master keys\n */\nexport function generateStealthAddress(keys: MasterKeys, chainId: number = 0): string {\n  return encodeStealthAddress(keys.ownerHash, keys.viewingHash, chainId)\n}\n\n/**\n * Create one-time keys for a transaction (hash-based)\n *\n * For self-shield: the user uses their own spendingSecret directly\n * as the ownerSecret, producing ownerHash = Poseidon(spendingSecret).\n *\n * For sending to others (future): generate a random oneTimeSecret\n * and derive ownerHash = Poseidon(oneTimeSecret).\n *\n * @param recipientOwnerHash - Recipient's owner hash (for verification)\n * @param selfSecret - If self-shield, the user's spending secret\n * @returns One-time keys for the note\n */\nexport async function createOneTimeKeys(\n  _recipientOwnerHash?: bigint,\n  selfSecret?: bigint,\n): Promise<OneTimeKeys> {\n  const { poseidon } = await import('../utils/poseidon.js')\n\n  if (selfSecret !== undefined) {\n    // Self-shield: use own spending secret\n    const ownerHash = await poseidon([selfSecret])\n    return {\n      oneTimeSecret: selfSecret,\n      ownerHash,\n    }\n  }\n\n  // Generate random one-time secret for the note\n  const oneTimeSecret = randomFieldElement()\n  const ownerHash = await poseidon([oneTimeSecret])\n\n  return {\n    oneTimeSecret,\n    ownerHash,\n  }\n}\n\n/**\n * Verify ownership of a note by checking hash preimage\n *\n * @param secret - Claimed spending secret\n * @param expectedOwnerHash - Owner hash from the note commitment\n * @returns True if the secret hashes to the expected owner hash\n */\nexport async function verifyOwnership(\n  secret: bigint,\n  expectedOwnerHash: bigint\n): Promise<boolean> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  const computedHash = await poseidon([secret])\n  return computedHash === expectedOwnerHash\n}\n\n/**\n * Compute shared secret for note encryption/decryption (hash-based)\n *\n * For self-shield: just uses the viewing secret directly.\n * For sending to others (future): use Poseidon(viewingSecret, recipientViewingHash)\n *\n * @param viewingSecret - Sender's or recipient's viewing secret\n * @param nonce - Optional nonce for key derivation\n * @returns Encryption key as bigint\n */\nexport async function computeNoteEncryptionKey(\n  viewingSecret: bigint,\n  nonce?: bigint\n): Promise<bigint> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  if (nonce !== undefined) {\n    return poseidon([viewingSecret, nonce])\n  }\n  return poseidon([viewingSecret])\n}\n\n// =========================================================================\n// STARK Stealth Addresses (0zs prefix, M31/Keccak-based)\n// =========================================================================\n\n/**\n * STARK stealth address prefix\n */\nexport const STARK_STEALTH_ADDRESS_PREFIX = '0zs'\n\n/**\n * STARK address version (v1 = M31/Keccak)\n */\nexport const STARK_ADDRESS_VERSION = 1\n\n/**\n * Encode a STARK stealth address in bech32m format\n *\n * Format: 0zs1<version><chainId><ownerHash[0..3]><viewingHash[0..3]>\n *\n * Each M31 element is encoded as 4 bytes (little-endian).\n * Total data: 1 (version) + 4 (chainId) + 16 (ownerHash) + 16 (viewingHash) = 37 bytes.\n *\n * @param ownerHash - 4 M31 elements: keccak_m31(starkSecret)\n * @param viewingHash - 4 M31 elements: keccak_m31(starkViewingSecret)\n * @param chainId - Optional chain ID (0 = any chain)\n */\nexport function encodeStarkStealthAddress(\n  ownerHash: M31Digest,\n  viewingHash: M31Digest,\n  chainId: number = 0\n): string {\n  const data = new Uint8Array(1 + 4 + 16 + 16) // 37 bytes\n  let offset = 0\n\n  // Version\n  data[offset++] = STARK_ADDRESS_VERSION\n\n  // Chain ID (4 bytes, big-endian)\n  data[offset++] = (chainId >> 24) & 0xff\n  data[offset++] = (chainId >> 16) & 0xff\n  data[offset++] = (chainId >> 8) & 0xff\n  data[offset++] = chainId & 0xff\n\n  // Owner hash: 4 M31 elements, each 4 bytes LE\n  for (let i = 0; i < 4; i++) {\n    const val = Number(ownerHash[i]!)\n    data[offset++] = val & 0xff\n    data[offset++] = (val >> 8) & 0xff\n    data[offset++] = (val >> 16) & 0xff\n    data[offset++] = (val >> 24) & 0xff\n  }\n\n  // Viewing hash: 4 M31 elements, each 4 bytes LE\n  for (let i = 0; i < 4; i++) {\n    const val = Number(viewingHash[i]!)\n    data[offset++] = val & 0xff\n    data[offset++] = (val >> 8) & 0xff\n    data[offset++] = (val >> 16) & 0xff\n    data[offset++] = (val >> 24) & 0xff\n  }\n\n  const words = bech32m.toWords(data)\n  return bech32m.encode(STARK_STEALTH_ADDRESS_PREFIX, words, BECH32M_LIMIT)\n}\n\n/**\n * Decode a STARK stealth address (0zs prefix)\n */\nexport function decodeStarkStealthAddress(address: string): {\n  version: number\n  chainId: number\n  ownerHash: M31Digest\n  viewingHash: M31Digest\n} {\n  const decoded = bech32m.decode(address, BECH32M_LIMIT)\n\n  if (decoded.prefix !== STARK_STEALTH_ADDRESS_PREFIX) {\n    throw new Error(\n      `Invalid STARK stealth address prefix: expected '${STARK_STEALTH_ADDRESS_PREFIX}', got '${decoded.prefix}'`\n    )\n  }\n\n  const data = new Uint8Array(bech32m.fromWords(decoded.words))\n  let offset = 0\n\n  const version = data[offset++]!\n  if (version !== STARK_ADDRESS_VERSION) {\n    throw new Error(\n      `Unsupported STARK address version: ${version}. Expected v${STARK_ADDRESS_VERSION}.`\n    )\n  }\n\n  // Chain ID\n  const chainId =\n    (data[offset++]! << 24) |\n    (data[offset++]! << 16) |\n    (data[offset++]! << 8) |\n    data[offset++]!\n\n  // Owner hash: 4 M31 LE uint32s\n  const ownerHash: bigint[] = []\n  for (let i = 0; i < 4; i++) {\n    const val =\n      data[offset]! |\n      (data[offset + 1]! << 8) |\n      (data[offset + 2]! << 16) |\n      (data[offset + 3]! << 24)\n    ownerHash.push(BigInt(val >>> 0))\n    offset += 4\n  }\n\n  // Viewing hash: 4 M31 LE uint32s\n  const viewingHash: bigint[] = []\n  for (let i = 0; i < 4; i++) {\n    const val =\n      data[offset]! |\n      (data[offset + 1]! << 8) |\n      (data[offset + 2]! << 16) |\n      (data[offset + 3]! << 24)\n    viewingHash.push(BigInt(val >>> 0))\n    offset += 4\n  }\n\n  return {\n    version,\n    chainId,\n    ownerHash: ownerHash as unknown as M31Digest,\n    viewingHash: viewingHash as unknown as M31Digest,\n  }\n}\n\n/**\n * Validate a STARK stealth address format\n */\nexport function isValidStarkStealthAddress(address: string): boolean {\n  try {\n    decodeStarkStealthAddress(address)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Generate a STARK stealth address from STARK master keys\n */\nexport function generateStarkStealthAddress(\n  keys: StarkMasterKeys,\n  chainId: number = 0\n): string {\n  return encodeStarkStealthAddress(keys.starkOwnerHash, keys.starkViewingHash, chainId)\n}\n\n/**\n * Detect whether an address is SNARK (0zk) or STARK (0zs)\n */\nexport function detectAddressType(address: string): 'snark' | 'stark' | 'unknown' {\n  if (address.startsWith(STEALTH_ADDRESS_PREFIX + '1')) return 'snark'\n  if (address.startsWith(STARK_STEALTH_ADDRESS_PREFIX + '1')) return 'stark'\n  return 'unknown'\n}\n","/**\n * Proof Worker Manager — off-main-thread PLONK proof generation.\n *\n * Manages a Web Worker that runs snarkjs proof generation, keeping the\n * main thread (and UI) responsive during the 10-30s proving time.\n *\n * @example\n * ```ts\n * // Create worker (consumer handles bundler integration)\n * const worker = new Worker(\n *   new URL('@permissionless-technologies/upp-sdk/worker', import.meta.url)\n * )\n * const manager = new ProofWorkerManager(worker)\n *\n * const result = await manager.prove('transfer', circuitInputs, '/circuits/',\n *   (stage, msg) => console.log(stage, msg)\n * )\n *\n * // Cleanup\n * manager.terminate()\n * ```\n */\n\nimport type { UPPCircuitType, UPPCircuitInputs, ProofResult, PlonkProvingStage } from './proof.js'\nimport type { DownloadProgress } from './circuit-cache.js'\n\n// ============================================================================\n// Worker Message Types\n// ============================================================================\n\nexport interface ProofWorkerRequest {\n  type: 'prove'\n  id: string\n  circuitType: string\n  inputs: Record<string, any>\n  baseUrl: string\n}\n\nexport type ProofWorkerResponse =\n  | { type: 'progress'; id: string; stage: PlonkProvingStage; message: string }\n  | { type: 'download-progress'; id: string; progress: DownloadProgress }\n  | { type: 'result'; id: string; proof: ProofResult }\n  | { type: 'error'; id: string; message: string }\n\n// ============================================================================\n// ProofWorkerManager\n// ============================================================================\n\ninterface PendingProof {\n  resolve: (result: ProofResult) => void\n  reject: (error: Error) => void\n  onProgress?: (stage: PlonkProvingStage, message: string) => void\n  onDownloadProgress?: (progress: DownloadProgress) => void\n}\n\nexport class ProofWorkerManager {\n  private worker: Worker\n  private pending = new Map<string, PendingProof>()\n  private terminated = false\n\n  constructor(worker: Worker) {\n    this.worker = worker\n\n    this.worker.onmessage = (e: MessageEvent<ProofWorkerResponse>) => {\n      this.handleMessage(e.data)\n    }\n\n    this.worker.onerror = (e: ErrorEvent) => {\n      console.error('[ProofWorkerManager] Worker error:', e.message, e)\n      for (const [, p] of this.pending) {\n        p.reject(new Error(`Worker error: ${e.message}`))\n      }\n      this.pending.clear()\n    }\n  }\n\n  private handleMessage(data: ProofWorkerResponse) {\n    const entry = this.pending.get(data.id)\n    if (!entry) return\n\n    switch (data.type) {\n      case 'progress':\n        entry.onProgress?.(data.stage, data.message)\n        break\n      case 'download-progress':\n        entry.onDownloadProgress?.(data.progress)\n        break\n      case 'result':\n        this.pending.delete(data.id)\n        entry.resolve(data.proof)\n        break\n      case 'error':\n        this.pending.delete(data.id)\n        entry.reject(new Error(data.message))\n        break\n    }\n  }\n\n  /**\n   * Generate a proof in the worker.\n   *\n   * @param signal - AbortSignal for cancellation. When aborted, the promise\n   *   rejects with AbortError. Call terminate() for hard cancellation.\n   */\n  async prove(\n    circuitType: UPPCircuitType,\n    inputs: UPPCircuitInputs,\n    baseUrl: string,\n    onProgress?: (stage: PlonkProvingStage, message: string) => void,\n    signal?: AbortSignal,\n    onDownloadProgress?: (progress: DownloadProgress) => void,\n  ): Promise<ProofResult> {\n    if (this.terminated) {\n      throw new Error('Worker has been terminated')\n    }\n\n    return new Promise<ProofResult>((resolve, reject) => {\n      const id = crypto.randomUUID()\n\n      if (signal?.aborted) {\n        reject(new DOMException('Proof generation aborted', 'AbortError'))\n        return\n      }\n\n      this.pending.set(id, { resolve, reject, onProgress, onDownloadProgress })\n\n      const onAbort = () => {\n        this.pending.delete(id)\n        reject(new DOMException('Proof generation aborted', 'AbortError'))\n      }\n\n      signal?.addEventListener('abort', onAbort, { once: true })\n\n      // Resolve baseUrl to absolute — workers resolve relative URLs against\n      // their own script URL (a webpack chunk), not the page origin.\n      const absoluteBaseUrl = typeof window !== 'undefined'\n        ? new URL(baseUrl, window.location.href).href\n        : baseUrl\n\n      this.worker.postMessage({\n        type: 'prove',\n        id,\n        circuitType,\n        inputs,\n        baseUrl: absoluteBaseUrl,\n      } satisfies ProofWorkerRequest)\n    })\n  }\n\n  /**\n   * Hard-terminate the worker. All pending proofs are rejected.\n   */\n  terminate() {\n    this.terminated = true\n    this.worker.terminate()\n    for (const [, p] of this.pending) {\n      p.reject(new DOMException('Worker terminated', 'AbortError'))\n    }\n    this.pending.clear()\n  }\n}\n\n// ============================================================================\n// Convenience Function\n// ============================================================================\n\n/**\n * Generate a UPP proof — uses a worker if provided, otherwise main-thread.\n *\n * This is the recommended entry point for proof generation. It provides a\n * unified API regardless of whether a worker is available.\n *\n * Circuit artifacts are automatically cached in IndexedDB after first download.\n */\nexport async function generateUPPProofAsync(\n  circuitType: UPPCircuitType,\n  inputs: UPPCircuitInputs,\n  baseUrl?: string,\n  options?: {\n    onProgress?: (stage: PlonkProvingStage, message: string) => void\n    onDownloadProgress?: (progress: DownloadProgress) => void\n    signal?: AbortSignal\n    worker?: ProofWorkerManager | null\n  },\n): Promise<ProofResult> {\n  const { onProgress, onDownloadProgress, signal, worker } = options ?? {}\n\n  if (worker) {\n    return worker.prove(circuitType, inputs, baseUrl ?? '', onProgress, signal, onDownloadProgress)\n  }\n\n  // Fallback: main-thread proving (with cache)\n  const { generateUPPProof } = await import('./proof.js')\n  return generateUPPProof(circuitType, inputs, baseUrl, onProgress, { onDownloadProgress })\n}\n","/**\n * Swap Module\n *\n * Core logic for building and interacting with the UPP in-pool swap order book.\n * Framework-agnostic (no React). Reuses withdraw verifier for proofs.\n */\n\nimport { type Address, type Hex, encodeAbiParameters, keccak256, parseAbiParameters, toHex } from 'viem'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Swap order as stored on-chain\n */\nexport interface SwapOrder {\n  /** Order ID (= maker's nullifier) */\n  orderId: Hex\n  /** Token being sold */\n  sellToken: Address\n  /** Original total sell amount */\n  sellAmount: bigint\n  /** Remaining sell amount (decremented on each fill) */\n  remainingSellAmount: bigint\n  /** Token the maker wants to receive */\n  buyToken: Address\n  /** Price: buyToken per sellToken (1e18 fixed-point) */\n  rate: bigint\n  /** Accumulated buy token amount from fills */\n  accumulatedBuyAmount: bigint\n  /** Maker's ASP ID (public, filterable by takers) */\n  makerAspId: bigint\n  /** Required filler ASP (0 = any) */\n  requiredFillerAspId: bigint\n  /** Block number after which order expires */\n  expiry: bigint\n  /** Whether the maker has claimed */\n  claimed: boolean\n  /** Whether the order was cancelled */\n  cancelled: boolean\n}\n\n/**\n * Parameters to place a swap order\n */\nexport interface SwapOrderParams {\n  /** Token to sell */\n  sellToken: Address\n  /** Amount to sell */\n  sellAmount: bigint\n  /** Token to buy */\n  buyToken: Address\n  /** Price: buyToken per sellToken (1e18 fixed-point) */\n  rate: bigint\n  /** Required filler ASP (0n = accept any) */\n  requiredFillerAspId?: bigint\n  /** Number of blocks until expiry (from current block) */\n  expiryBlocks: bigint\n}\n\n/**\n * Parameters to fill a swap order\n */\nexport interface SwapFillParams {\n  /** The order to fill */\n  orderId: Hex\n  /** How much sellToken the filler wants (≤ remaining) */\n  takeAmount: bigint\n}\n\n/**\n * Swap order from event log\n */\nexport interface SwapOrderEvent {\n  orderId: Hex\n  sellToken: Address\n  buyToken: Address\n  sellAmount: bigint\n  rate: bigint\n  makerAspId: bigint\n  requiredFillerAspId: bigint\n  expiry: bigint\n  blockNumber: bigint\n  /** On-chain remaining sell amount (populated by useSwapOrderBook) */\n  remainingSellAmount?: bigint\n  /** Whether the order has been claimed */\n  claimed?: boolean\n  /** Whether the order has been cancelled */\n  cancelled?: boolean\n}\n\n/**\n * Swap fill from event log\n */\nexport interface SwapFillEvent {\n  orderId: Hex\n  fillerNullifier: Hex\n  takeAmount: bigint\n  giveAmount: bigint\n  fillerAspId: bigint\n  remainingSellAmount: bigint\n  blockNumber: bigint\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** 1e18 fixed-point precision for swap rates */\nexport const RATE_PRECISION = 10n ** 18n\n\n// ============================================================================\n// Event ABIs (for indexing swap events)\n// ============================================================================\n\nexport const SWAP_ORDER_PLACED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderPlaced',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'sellToken', type: 'address', indexed: true },\n    { name: 'buyToken', type: 'address', indexed: true },\n    { name: 'sellAmount', type: 'uint256', indexed: false },\n    { name: 'rate', type: 'uint256', indexed: false },\n    { name: 'makerAspId', type: 'uint256', indexed: false },\n    { name: 'requiredFillerAspId', type: 'uint256', indexed: false },\n    { name: 'expiry', type: 'uint256', indexed: false },\n  ],\n} as const\n\nexport const SWAP_ORDER_FILLED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderFilled',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'fillerNullifier', type: 'bytes32', indexed: true },\n    { name: 'fillerOutputCommitment', type: 'bytes32', indexed: true },\n    { name: 'takeAmount', type: 'uint256', indexed: false },\n    { name: 'giveAmount', type: 'uint256', indexed: false },\n    { name: 'fillerAspId', type: 'uint256', indexed: false },\n    { name: 'remainingSellAmount', type: 'uint256', indexed: false },\n    { name: 'encryptedFillerNote', type: 'bytes', indexed: false },\n  ],\n} as const\n\nexport const SWAP_ORDER_CLAIMED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderClaimed',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'accumulatedBuyAmount', type: 'uint256', indexed: false },\n    { name: 'refundedSellAmount', type: 'uint256', indexed: false },\n    { name: 'buyOutputCommitment', type: 'bytes32', indexed: false },\n    { name: 'encryptedBuyNote', type: 'bytes', indexed: false },\n    { name: 'refundCommitment', type: 'bytes32', indexed: false },\n    { name: 'encryptedRefundNote', type: 'bytes', indexed: false },\n  ],\n} as const\n\nexport const SWAP_ORDER_CANCELLED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderCancelled',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'refundedSellAmount', type: 'uint256', indexed: false },\n    { name: 'refundCommitment', type: 'bytes32', indexed: false },\n    { name: 'encryptedRefundNote', type: 'bytes', indexed: false },\n  ],\n} as const\n\nexport const SWAP_EVENTS_ABI = [\n  SWAP_ORDER_PLACED_EVENT,\n  SWAP_ORDER_FILLED_EVENT,\n  SWAP_ORDER_CLAIMED_EVENT,\n  SWAP_ORDER_CANCELLED_EVENT,\n] as const\n\n// ============================================================================\n// Rate Calculations\n// ============================================================================\n\n/**\n * Compute the giveAmount (buyToken) for a given takeAmount (sellToken) at a rate.\n * giveAmount = (takeAmount * rate) / 1e18\n */\nexport function computeGiveAmount(takeAmount: bigint, rate: bigint): bigint {\n  return (takeAmount * rate) / RATE_PRECISION\n}\n\n/**\n * Compute the maximum takeAmount for a given giveAmount and rate.\n * takeAmount = (giveAmount * 1e18) / rate\n */\nexport function computeTakeAmount(giveAmount: bigint, rate: bigint): bigint {\n  if (rate === 0n) throw new Error('Rate cannot be zero')\n  return (giveAmount * RATE_PRECISION) / rate\n}\n\n/**\n * Compute rate from a desired trade: I want `buyAmount` of buyToken for `sellAmount` of sellToken.\n * rate = (buyAmount * 1e18) / sellAmount\n */\nexport function computeRate(sellAmount: bigint, buyAmount: bigint): bigint {\n  if (sellAmount === 0n) throw new Error('Sell amount cannot be zero')\n  return (buyAmount * RATE_PRECISION) / sellAmount\n}\n\n/**\n * Format a rate for human display.\n * Returns a string like \"0.0005\" for rate = 500000000000000n (0.0005e18)\n */\nexport function formatRate(rate: bigint, decimals: number = 6): string {\n  const whole = rate / RATE_PRECISION\n  const frac = rate % RATE_PRECISION\n  const fracStr = frac.toString().padStart(18, '0').slice(0, decimals)\n  return `${whole}.${fracStr}`\n}\n\n// ============================================================================\n// Cancel Key Management\n// ============================================================================\n\n/**\n * Generate a cancel key hash from a secret.\n * The secret should be a random 32-byte value stored by the maker.\n */\nexport function computeCancelKeyHash(cancelSecret: Hex): Hex {\n  return keccak256(encodeAbiParameters(\n    parseAbiParameters('bytes32'),\n    [cancelSecret]\n  ))\n}\n\n/**\n * Generate a random cancel secret.\n */\nexport function generateCancelSecret(): Hex {\n  const bytes = new Uint8Array(32)\n  crypto.getRandomValues(bytes)\n  return toHex(bytes)\n}\n\n// ============================================================================\n// Order Filtering\n// ============================================================================\n\n/**\n * Filter orders by ASP: only show orders from makers on acceptable ASPs.\n */\nexport function filterOrdersByASP(\n  orders: SwapOrderEvent[],\n  acceptableAspIds: bigint[]\n): SwapOrderEvent[] {\n  const aspSet = new Set(acceptableAspIds.map(id => id.toString()))\n  return orders.filter(o => aspSet.has(o.makerAspId.toString()))\n}\n\n/**\n * Filter orders by token pair.\n */\nexport function filterOrdersByTokenPair(\n  orders: SwapOrderEvent[],\n  sellToken: Address,\n  buyToken: Address\n): SwapOrderEvent[] {\n  const sell = sellToken.toLowerCase()\n  const buy = buyToken.toLowerCase()\n  return orders.filter(\n    o => o.sellToken.toLowerCase() === sell && o.buyToken.toLowerCase() === buy\n  )\n}\n\n/**\n * Check if a filler's ASP is accepted by an order.\n */\nexport function isFillerASPAccepted(order: SwapOrder | SwapOrderEvent, fillerAspId: bigint): boolean {\n  const required = 'requiredFillerAspId' in order ? order.requiredFillerAspId : 0n\n  return required === 0n || required === fillerAspId\n}\n\n// ============================================================================\n// Cancel Secret Persistence (localStorage)\n// ============================================================================\n\nconst CANCEL_SECRET_PREFIX = 'upp_swap_cancel_'\n\nfunction cancelKey(account: string, orderId: Hex): string {\n  return `${CANCEL_SECRET_PREFIX}${account.toLowerCase()}_${orderId}`\n}\n\n/**\n * Store a cancel secret in localStorage, scoped by wallet address.\n * Must be called after placing a swap order.\n */\nexport function storeCancelSecret(orderId: Hex, cancelSecret: Hex, account?: string): void {\n  if (typeof localStorage === 'undefined') return\n  if (account) {\n    localStorage.setItem(cancelKey(account, orderId), cancelSecret)\n  }\n  // Also store unscoped for backward compat\n  localStorage.setItem(`${CANCEL_SECRET_PREFIX}${orderId}`, cancelSecret)\n}\n\n/**\n * Retrieve a cancel secret from localStorage.\n * Returns null if not found (e.g. order was placed by someone else).\n */\nexport function getCancelSecret(orderId: Hex, account?: string): Hex | null {\n  if (typeof localStorage === 'undefined') return null\n  if (account) {\n    const scoped = localStorage.getItem(cancelKey(account, orderId))\n    if (scoped) return scoped as Hex\n  }\n  // Fall back to unscoped key\n  return localStorage.getItem(`${CANCEL_SECRET_PREFIX}${orderId}`) as Hex | null\n}\n\n/**\n * Remove a cancel secret from localStorage (after claim or cancel).\n */\nexport function removeCancelSecret(orderId: Hex, account?: string): void {\n  if (typeof localStorage === 'undefined') return\n  if (account) {\n    localStorage.removeItem(cancelKey(account, orderId))\n  }\n  localStorage.removeItem(`${CANCEL_SECRET_PREFIX}${orderId}`)\n}\n\n/**\n * Get all order IDs for a specific wallet address.\n * Falls back to all cancel secrets if no account provided (backward compat).\n */\nexport function getOwnOrderIds(account?: string): Hex[] {\n  if (typeof localStorage === 'undefined') return []\n  const prefix = account\n    ? `${CANCEL_SECRET_PREFIX}${account.toLowerCase()}_`\n    : CANCEL_SECRET_PREFIX\n  const ids: Hex[] = []\n  for (let i = 0; i < localStorage.length; i++) {\n    const key = localStorage.key(i)\n    if (key?.startsWith(prefix)) {\n      ids.push(key.slice(prefix.length) as Hex)\n    }\n  }\n  return ids\n}\n\n// ============================================================================\n// Order Status Helpers\n// ============================================================================\n\n/**\n * Check if an order is still active (not claimed, not cancelled, not expired).\n */\nexport function isOrderActive(order: SwapOrder, currentBlock: bigint): boolean {\n  return !order.claimed && !order.cancelled && currentBlock <= order.expiry && order.remainingSellAmount > 0n\n}\n\n/**\n * Compute the total buyToken amount the maker would receive for a full fill.\n */\nexport function computeTotalBuyAmount(sellAmount: bigint, rate: bigint): bigint {\n  return computeGiveAmount(sellAmount, rate)\n}\n\n/**\n * Compute fill percentage (0-100) for display.\n */\nexport function computeFillPercentage(order: SwapOrder): number {\n  if (order.sellAmount === 0n) return 0\n  const filled = order.sellAmount - order.remainingSellAmount\n  return Number((filled * 10000n) / order.sellAmount) / 100\n}\n","/**\n * Account Adapter — Pluggable account creation and persistence\n *\n * Abstracts how master keys are derived/loaded/stored.\n * The SDK doesn't care if keys come from a wallet signature,\n * seed phrase, hardware wallet, or external KMS.\n *\n * Persistence is handled via StorageAdapter (IndexedDB, localStorage, etc.)\n */\n\nimport type { MasterKeys, StarkMasterKeys } from '../keys/types.js'\nimport type { StorageAdapter } from '../indexer/types.js'\nimport { toHex } from 'viem'\n\n// ============================================================================\n// Interface\n// ============================================================================\n\n/**\n * Account adapter interface — pluggable key source.\n *\n * Implement this to bring your own key derivation:\n * - StorableAccountAdapter: persists keys via StorageAdapter (built-in)\n * - DirectAccountAdapter: pre-derived keys, no persistence (built-in, for testing)\n * - Custom: seed phrase, hardware wallet, external KMS\n */\nexport interface IAccountAdapter {\n  /** Load persisted keys (returns null if no saved account) */\n  load(): Promise<{ keys: MasterKeys; starkKeys?: StarkMasterKeys } | null>\n  /** Save keys to storage */\n  save(keys: MasterKeys, starkKeys?: StarkMasterKeys): Promise<void>\n  /** Clear persisted keys */\n  clear(): Promise<void>\n}\n\n// ============================================================================\n// Serialization\n// ============================================================================\n\ninterface SerializedAccount {\n  version: 3\n  spendingSecret: string\n  ownerHash: string\n  viewingSecret: string\n  viewingHash: string\n  starkSecret?: string[]\n  starkOwnerHash?: string[]\n  starkViewingSecret?: string[]\n  starkViewingHash?: string[]\n}\n\nfunction serializeAccount(keys: MasterKeys, starkKeys?: StarkMasterKeys): SerializedAccount {\n  return {\n    version: 3,\n    spendingSecret: toHex(keys.spendingSecret, { size: 32 }),\n    ownerHash: toHex(keys.ownerHash, { size: 32 }),\n    viewingSecret: toHex(keys.viewingSecret, { size: 32 }),\n    viewingHash: toHex(keys.viewingHash, { size: 32 }),\n    ...(starkKeys ? {\n      starkSecret: starkKeys.starkSecret.map(v => v.toString()),\n      starkOwnerHash: starkKeys.starkOwnerHash.map(v => v.toString()),\n      starkViewingSecret: starkKeys.starkViewingSecret.map(v => v.toString()),\n      starkViewingHash: starkKeys.starkViewingHash.map(v => v.toString()),\n    } : {}),\n  }\n}\n\nfunction deserializeAccount(data: SerializedAccount): { keys: MasterKeys; starkKeys?: StarkMasterKeys } {\n  if (data.version !== 3 || !data.spendingSecret) {\n    throw new Error('Invalid or outdated account data')\n  }\n\n  const keys: MasterKeys = {\n    spendingSecret: BigInt(data.spendingSecret),\n    ownerHash: BigInt(data.ownerHash),\n    viewingSecret: BigInt(data.viewingSecret),\n    viewingHash: BigInt(data.viewingHash),\n  }\n\n  let starkKeys: StarkMasterKeys | undefined\n  if (data.starkSecret) {\n    starkKeys = {\n      starkSecret: data.starkSecret.map(s => BigInt(s)) as any,\n      starkOwnerHash: data.starkOwnerHash!.map(s => BigInt(s)) as any,\n      starkViewingSecret: data.starkViewingSecret!.map(s => BigInt(s)) as any,\n      starkViewingHash: data.starkViewingHash!.map(s => BigInt(s)) as any,\n    }\n  }\n\n  return { keys, starkKeys }\n}\n\n// ============================================================================\n// StorableAccountAdapter — persists via StorageAdapter\n// ============================================================================\n\n/**\n * Account adapter that persists keys via a pluggable StorageAdapter.\n *\n * Works with IndexedDB, localStorage, memory, Redis, Postgres — anything\n * that implements StorageAdapter.\n *\n * @example\n * ```ts\n * const storage = createAutoAdapter('upp_account')\n * const adapter = new StorableAccountAdapter(storage, ethAddress)\n * const saved = await adapter.load()\n * if (!saved) {\n *   const keys = await deriveKeysFromSignature(sig)\n *   await adapter.save(keys, starkKeys)\n * }\n * ```\n */\nexport class StorableAccountAdapter implements IAccountAdapter {\n  private storageKey: string\n\n  constructor(\n    private storage: StorageAdapter,\n    ethAddress: string,\n  ) {\n    this.storageKey = `account_${ethAddress.toLowerCase()}`\n  }\n\n  async load(): Promise<{ keys: MasterKeys; starkKeys?: StarkMasterKeys } | null> {\n    const data = await this.storage.get<SerializedAccount>(this.storageKey)\n    if (!data) return null\n    try {\n      return deserializeAccount(data)\n    } catch {\n      // Corrupt or outdated — clear it\n      await this.storage.delete(this.storageKey)\n      return null\n    }\n  }\n\n  async save(keys: MasterKeys, starkKeys?: StarkMasterKeys): Promise<void> {\n    const serialized = serializeAccount(keys, starkKeys)\n    await this.storage.set(this.storageKey, serialized)\n  }\n\n  async clear(): Promise<void> {\n    await this.storage.delete(this.storageKey)\n  }\n}\n\n// ============================================================================\n// DirectAccountAdapter — no persistence (testing, KMS)\n// ============================================================================\n\n/**\n * Direct account adapter — accepts pre-derived keys, no persistence.\n *\n * @example\n * ```ts\n * const adapter = new DirectAccountAdapter(masterKeys, starkKeys)\n * ```\n */\nexport class DirectAccountAdapter implements IAccountAdapter {\n  constructor(\n    private keys: MasterKeys,\n    private starkKeys?: StarkMasterKeys,\n  ) {}\n\n  async load() {\n    return { keys: this.keys, starkKeys: this.starkKeys }\n  }\n\n  async save(): Promise<void> {\n    // No-op — keys are in memory only\n  }\n\n  async clear(): Promise<void> {\n    // No-op\n  }\n}\n","/**\n * NoteStore — Single source of truth for note state\n *\n * Framework-agnostic. Uses StorageAdapter for persistence.\n * Handles deduplication, status management, balance calculation.\n *\n * Usage:\n *   const store = new NoteStore(createMemoryAdapter())\n *   await store.load()\n *   store.addNote(note)  // returns false if duplicate\n *   store.getBalance()   // sum of unspent notes\n */\n\nimport type { StorageAdapter } from '../indexer/types.js'\nimport { getAddress } from 'viem'\n\n// ============================================================================\n// Types\n// ============================================================================\n\nexport type NoteStatus = 'pending' | 'confirmed' | 'spent'\nexport type ProofSystem = 'snark' | 'stark'\n\nexport interface ShieldedNote {\n  amount: bigint\n  blinding: bigint\n  commitment: string\n  ownerSecret: string\n  ownerHash: string\n  leafIndex: number\n  origin: string\n  token: string\n  txHash?: string\n  status: NoteStatus\n  timestamp: number\n  proofSystem?: ProofSystem\n}\n\n/** Serialized format for storage (bigints as strings) */\ninterface SerializedNote {\n  amount: string\n  blinding: string\n  commitment: string\n  ownerSecret: string\n  ownerHash: string\n  leafIndex: number\n  origin: string\n  token: string\n  txHash?: string\n  status: NoteStatus\n  timestamp: number\n  proofSystem?: ProofSystem\n}\n\nexport interface INoteStore {\n  getNotes(): ShieldedNote[]\n  getUnspentNotes(proofSystem?: ProofSystem): ShieldedNote[]\n  getBalance(token?: string, proofSystem?: ProofSystem): bigint\n  addNote(note: ShieldedNote): boolean\n  addNotes(notes: ShieldedNote[]): number\n  markSpent(commitment: string): void\n  unmarkSpent(commitment: string): void\n  updateLeafIndex(commitment: string, leafIndex: number): void\n  load(): Promise<void>\n  persist(): Promise<void>\n  clear(): Promise<void>\n  onChange(callback: () => void): () => void\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\nexport class NoteStore implements INoteStore {\n  private notes: ShieldedNote[] = []\n  private commitmentSet = new Set<string>()\n  private listeners = new Set<() => void>()\n  private dirty = false\n\n  constructor(\n    private storage: StorageAdapter,\n    private storageKey: string = 'notes',\n  ) {}\n\n  // ---------- Queries ----------\n\n  getNotes(): ShieldedNote[] {\n    return [...this.notes]\n  }\n\n  getUnspentNotes(proofSystem?: ProofSystem): ShieldedNote[] {\n    let result = this.notes.filter(n => n.status !== 'spent')\n    if (proofSystem) {\n      result = result.filter(n => (n.proofSystem ?? 'snark') === proofSystem)\n    }\n    return result\n  }\n\n  getBalance(token?: string, proofSystem?: ProofSystem): bigint {\n    let notes = this.getUnspentNotes(proofSystem)\n    if (token) {\n      const normalized = token.toLowerCase()\n      notes = notes.filter(n => n.token.toLowerCase() === normalized)\n    }\n    return notes.reduce((sum, n) => sum + n.amount, 0n)\n  }\n\n  // ---------- Mutations ----------\n\n  /**\n   * Add a note. Returns false if duplicate (by commitment).\n   * Normalizes token and origin addresses.\n   */\n  addNote(note: ShieldedNote): boolean {\n    const key = note.commitment.toLowerCase()\n    if (this.commitmentSet.has(key)) return false\n\n    // Normalize addresses\n    const normalized: ShieldedNote = {\n      ...note,\n      commitment: note.commitment.toLowerCase(),\n      origin: safeGetAddress(note.origin),\n      token: safeGetAddress(note.token),\n    }\n\n    this.notes.push(normalized)\n    this.commitmentSet.add(key)\n    this.dirty = true\n    this.notify()\n    return true\n  }\n\n  /**\n   * Add multiple notes. Returns count of actually added (non-duplicate).\n   */\n  addNotes(notes: ShieldedNote[]): number {\n    let added = 0\n    for (const note of notes) {\n      if (this.addNote(note)) added++\n    }\n    return added\n  }\n\n  /**\n   * Mark a note as spent (optimistic — syncNotes reconciles via nullifier check).\n   */\n  markSpent(commitment: string): void {\n    const key = commitment.toLowerCase()\n    const note = this.notes.find(n => n.commitment.toLowerCase() === key)\n    if (note && note.status !== 'spent') {\n      note.status = 'spent'\n      this.dirty = true\n      this.notify()\n    }\n  }\n\n  /**\n   * Un-mark a note as spent (reconciliation: nullifier not found on-chain).\n   */\n  unmarkSpent(commitment: string): void {\n    const key = commitment.toLowerCase()\n    const note = this.notes.find(n => n.commitment.toLowerCase() === key)\n    if (note && note.status === 'spent') {\n      note.status = 'confirmed'\n      this.dirty = true\n      this.notify()\n    }\n  }\n\n  /**\n   * Update the leafIndex for a note (e.g., after confirming on-chain).\n   */\n  updateLeafIndex(commitment: string, leafIndex: number): void {\n    const key = commitment.toLowerCase()\n    const note = this.notes.find(n => n.commitment.toLowerCase() === key)\n    if (note && note.leafIndex !== leafIndex) {\n      note.leafIndex = leafIndex\n      this.dirty = true\n      this.notify()\n    }\n  }\n\n  // ---------- Persistence ----------\n\n  async load(): Promise<void> {\n    const serialized = await this.storage.get<SerializedNote[]>(this.storageKey)\n    if (!serialized || !Array.isArray(serialized)) {\n      this.notes = []\n      this.commitmentSet.clear()\n      return\n    }\n\n    // Deduplicate on load — prevents persisted duplicates from propagating\n    this.notes = []\n    this.commitmentSet.clear()\n    let deduped = 0\n    for (const s of serialized) {\n      const note = deserializeNote(s)\n      const key = note.commitment.toLowerCase()\n      if (this.commitmentSet.has(key)) { deduped++; continue }\n      this.commitmentSet.add(key)\n      this.notes.push(note)\n    }\n    if (deduped > 0) {\n      console.log(`[NoteStore] Removed ${deduped} duplicate notes on load`)\n      this.dirty = true // will persist the cleaned version\n    } else {\n      this.dirty = false\n    }\n  }\n\n  async persist(): Promise<void> {\n    if (!this.dirty) return\n    const serialized = this.notes.map(serializeNote)\n    await this.storage.set(this.storageKey, serialized)\n    this.dirty = false\n  }\n\n  async clear(): Promise<void> {\n    this.notes = []\n    this.commitmentSet.clear()\n    this.dirty = false\n    await this.storage.delete(this.storageKey)\n    this.notify()\n  }\n\n  // ---------- Events ----------\n\n  onChange(callback: () => void): () => void {\n    this.listeners.add(callback)\n    return () => this.listeners.delete(callback)\n  }\n\n  private notify(): void {\n    for (const listener of this.listeners) {\n      listener()\n    }\n  }\n}\n\n// ============================================================================\n// Serialization\n// ============================================================================\n\nfunction serializeNote(note: ShieldedNote): SerializedNote {\n  return {\n    ...note,\n    amount: note.amount.toString(),\n    blinding: note.blinding.toString(),\n  }\n}\n\nfunction deserializeNote(s: SerializedNote): ShieldedNote {\n  return {\n    ...s,\n    amount: BigInt(s.amount),\n    blinding: BigInt(s.blinding),\n    proofSystem: s.proofSystem ?? 'snark',\n  }\n}\n\nfunction safeGetAddress(addr: string): string {\n  try {\n    return getAddress(addr)\n  } catch {\n    return addr // return as-is if not a valid address (e.g., bigint-encoded origin)\n  }\n}\n"]}
+{"version":3,"sources":["../src/core/stealth.ts","../src/core/proof-worker.ts","../src/core/swap.ts","../src/core/account.ts","../src/core/note-store.ts"],"names":["__export","ADDRESS_VERSION","STARK_ADDRESS_VERSION","STARK_STEALTH_ADDRESS_PREFIX","STEALTH_ADDRESS_PREFIX","bigintToBytes","bech32m","bytesToBigint","ownerHash","randomFieldElement","__esm","init_crypto","keccak256","encodeAbiParameters","parseAbiParameters","toHex","getAddress"],"mappings":";;;;;;;;AAAA,IAAA,eAAA,GAAA;AAAAA,0BAAA,CAAA,eAAA,EAAA;AAAA,EAAA,eAAA,EAAA,MAAAC,uBAAA;AAAA,EAAA,qBAAA,EAAA,MAAAC,6BAAA;AAAA,EAAA,4BAAA,EAAA,MAAAC,oCAAA;AAAA,EAAA,sBAAA,EAAA,MAAAC,8BAAA;AAAA,EAAA,wBAAA,EAAA,MAAA,wBAAA;AAAA,EAAA,iBAAA,EAAA,MAAA,iBAAA;AAAA,EAAA,yBAAA,EAAA,MAAA,yBAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,iBAAA,EAAA,MAAA,iBAAA;AAAA,EAAA,yBAAA,EAAA,MAAA,yBAAA;AAAA,EAAA,oBAAA,EAAA,MAAA,oBAAA;AAAA,EAAA,2BAAA,EAAA,MAAA,2BAAA;AAAA,EAAA,sBAAA,EAAA,MAAA,sBAAA;AAAA,EAAA,0BAAA,EAAA,MAAA,0BAAA;AAAA,EAAA,qBAAA,EAAA,MAAA,qBAAA;AAAA,EAAA,eAAA,EAAA,MAAA;AAAA,CAAA,CAAA;AAsDO,SAAS,oBAAA,CACd,SAAA,EACA,WAAA,EACA,OAAA,GAAkB,CAAA,EACV;AAER,EAAA,MAAM,OAAO,IAAI,UAAA,CAAW,CAAA,GAAI,CAAA,GAAI,KAAK,CAAC,CAAA;AAC1C,EAAA,IAAI,MAAA,GAAS,CAAA;AAGb,EAAA,IAAA,CAAK,QAAQ,CAAA,GAAIH,uBAAA;AAGjB,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,CAAA,GAAK,GAAA;AAClC,EAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,OAAA,GAAU,GAAA;AAG3B,EAAA,MAAM,UAAA,GAAaI,+BAAA,CAAc,SAAA,EAAW,EAAE,CAAA;AAC9C,EAAA,IAAA,CAAK,GAAA,CAAI,YAAY,MAAM,CAAA;AAC3B,EAAA,MAAA,IAAU,EAAA;AAGV,EAAA,MAAM,YAAA,GAAeA,+BAAA,CAAc,WAAA,EAAa,EAAE,CAAA;AAClD,EAAA,IAAA,CAAK,GAAA,CAAI,cAAc,MAAM,CAAA;AAG7B,EAAA,MAAM,KAAA,GAAQC,cAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AAGlC,EAAA,OAAOA,cAAA,CAAQ,MAAA,CAAOF,8BAAA,EAAwB,KAAA,EAAO,aAAa,CAAA;AACpE;AAQO,SAAS,qBAAqB,OAAA,EAKnC;AAEA,EAAA,MAAM,OAAA,GAAUE,cAAA,CAAQ,MAAA,CAAO,OAAA,EAAS,aAAa,CAAA;AAGrD,EAAA,IAAI,OAAA,CAAQ,WAAWF,8BAAA,EAAwB;AAC7C,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,0CAAA,EAA6CA,8BAAsB,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,EACjH;AAGA,EAAA,MAAM,OAAO,IAAI,UAAA,CAAWE,eAAQ,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AAG5D,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,MAAM,OAAA,GAAU,KAAK,MAAA,EAAQ,CAAA;AAE7B,EAAA,IAAI,YAAYL,uBAAA,EAAiB;AAC/B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,6BAAA,EAAgC,OAAO,CAAA,YAAA,EAAeA,uBAAe,CAAA,cAAA,CAAgB,CAAA;AAAA,EACvG;AAGA,EAAA,MAAM,OAAA,GACH,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,KACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,EAAA,GACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,CAAA,GACpB,KAAK,MAAA,EAAQ,CAAA;AAGf,EAAA,MAAM,YAAYM,+BAAA,CAAc,IAAA,CAAK,MAAM,MAAA,EAAQ,MAAA,GAAS,EAAE,CAAC,CAAA;AAC/D,EAAA,MAAA,IAAU,EAAA;AAGV,EAAA,MAAM,cAAcA,+BAAA,CAAc,IAAA,CAAK,MAAM,MAAA,EAAQ,MAAA,GAAS,EAAE,CAAC,CAAA;AAEjE,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF;AAKO,SAAS,sBAAsB,OAAA,EAA0B;AAC9D,EAAA,IAAI;AACF,IAAA,oBAAA,CAAqB,OAAO,CAAA;AAC5B,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAKO,SAAS,sBAAA,CAAuB,IAAA,EAAkB,OAAA,GAAkB,CAAA,EAAW;AACpF,EAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,aAAa,OAAO,CAAA;AACvE;AAeA,eAAsB,iBAAA,CACpB,qBACA,UAAA,EACsB;AACtB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,yBAAsB,CAAA;AAExD,EAAA,IAAI,eAAe,MAAA,EAAW;AAE5B,IAAA,MAAMC,UAAAA,GAAY,MAAM,QAAA,CAAS,CAAC,UAAU,CAAC,CAAA;AAC7C,IAAA,OAAO;AAAA,MACL,aAAA,EAAe,UAAA;AAAA,MACf,SAAA,EAAAA;AAAA,KACF;AAAA,EACF;AAGA,EAAA,MAAM,gBAAgBC,oCAAA,EAAmB;AACzC,EAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,CAAC,aAAa,CAAC,CAAA;AAEhD,EAAA,OAAO;AAAA,IACL,aAAA;AAAA,IACA;AAAA,GACF;AACF;AASA,eAAsB,eAAA,CACpB,QACA,iBAAA,EACkB;AAClB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,yBAAsB,CAAA;AACxD,EAAA,MAAM,YAAA,GAAe,MAAM,QAAA,CAAS,CAAC,MAAM,CAAC,CAAA;AAC5C,EAAA,OAAO,YAAA,KAAiB,iBAAA;AAC1B;AAYA,eAAsB,wBAAA,CACpB,eACA,KAAA,EACiB;AACjB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,yBAAsB,CAAA;AACxD,EAAA,IAAI,UAAU,MAAA,EAAW;AACvB,IAAA,OAAO,QAAA,CAAS,CAAC,aAAA,EAAe,KAAK,CAAC,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,QAAA,CAAS,CAAC,aAAa,CAAC,CAAA;AACjC;AA4BO,SAAS,yBAAA,CACd,SAAA,EACA,WAAA,EACA,OAAA,GAAkB,CAAA,EACV;AACR,EAAA,MAAM,OAAO,IAAI,UAAA,CAAW,CAAA,GAAI,CAAA,GAAI,KAAK,EAAE,CAAA;AAC3C,EAAA,IAAI,MAAA,GAAS,CAAA;AAGb,EAAA,IAAA,CAAK,QAAQ,CAAA,GAAIP,6BAAA;AAGjB,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,EAAA,GAAM,GAAA;AACnC,EAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,OAAA,IAAW,CAAA,GAAK,GAAA;AAClC,EAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,OAAA,GAAU,GAAA;AAG3B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,SAAA,CAAU,CAAC,CAAE,CAAA;AAChC,IAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,GAAA,GAAM,GAAA;AACvB,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,CAAA,GAAK,GAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAC/B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAAA,EACjC;AAGA,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,WAAA,CAAY,CAAC,CAAE,CAAA;AAClC,IAAA,IAAA,CAAK,MAAA,EAAQ,IAAI,GAAA,GAAM,GAAA;AACvB,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,CAAA,GAAK,GAAA;AAC9B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAC/B,IAAA,IAAA,CAAK,MAAA,EAAQ,CAAA,GAAK,GAAA,IAAO,EAAA,GAAM,GAAA;AAAA,EACjC;AAEA,EAAA,MAAM,KAAA,GAAQI,cAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AAClC,EAAA,OAAOA,cAAA,CAAQ,MAAA,CAAOH,oCAAA,EAA8B,KAAA,EAAO,aAAa,CAAA;AAC1E;AAKO,SAAS,0BAA0B,OAAA,EAKxC;AACA,EAAA,MAAM,OAAA,GAAUG,cAAA,CAAQ,MAAA,CAAO,OAAA,EAAS,aAAa,CAAA;AAErD,EAAA,IAAI,OAAA,CAAQ,WAAWH,oCAAA,EAA8B;AACnD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,gDAAA,EAAmDA,oCAA4B,CAAA,QAAA,EAAW,OAAA,CAAQ,MAAM,CAAA,CAAA;AAAA,KAC1G;AAAA,EACF;AAEA,EAAA,MAAM,OAAO,IAAI,UAAA,CAAWG,eAAQ,SAAA,CAAU,OAAA,CAAQ,KAAK,CAAC,CAAA;AAC5D,EAAA,IAAI,MAAA,GAAS,CAAA;AAEb,EAAA,MAAM,OAAA,GAAU,KAAK,MAAA,EAAQ,CAAA;AAC7B,EAAA,IAAI,YAAYJ,6BAAA,EAAuB;AACrC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,mCAAA,EAAsC,OAAO,CAAA,YAAA,EAAeA,6BAAqB,CAAA,CAAA;AAAA,KACnF;AAAA,EACF;AAGA,EAAA,MAAM,OAAA,GACH,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,KACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,EAAA,GACnB,IAAA,CAAK,MAAA,EAAQ,CAAA,IAAM,CAAA,GACpB,KAAK,MAAA,EAAQ,CAAA;AAGf,EAAA,MAAM,YAAsB,EAAC;AAC7B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,MACJ,IAAA,CAAK,MAAM,CAAA,GACV,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,CAAA,GACrB,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,KACrB,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA,IAAM,EAAA;AACxB,IAAA,SAAA,CAAU,IAAA,CAAK,MAAA,CAAO,GAAA,KAAQ,CAAC,CAAC,CAAA;AAChC,IAAA,MAAA,IAAU,CAAA;AAAA,EACZ;AAGA,EAAA,MAAM,cAAwB,EAAC;AAC/B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,MACJ,IAAA,CAAK,MAAM,CAAA,GACV,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,CAAA,GACrB,IAAA,CAAK,SAAS,CAAC,CAAA,IAAM,KACrB,IAAA,CAAK,MAAA,GAAS,CAAC,CAAA,IAAM,EAAA;AACxB,IAAA,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,GAAA,KAAQ,CAAC,CAAC,CAAA;AAClC,IAAA,MAAA,IAAU,CAAA;AAAA,EACZ;AAEA,EAAA,OAAO;AAAA,IACL,OAAA;AAAA,IACA,OAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,GACF;AACF;AAKO,SAAS,2BAA2B,OAAA,EAA0B;AACnE,EAAA,IAAI;AACF,IAAA,yBAAA,CAA0B,OAAO,CAAA;AACjC,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAKO,SAAS,2BAAA,CACd,IAAA,EACA,OAAA,GAAkB,CAAA,EACV;AACR,EAAA,OAAO,yBAAA,CAA0B,IAAA,CAAK,cAAA,EAAgB,IAAA,CAAK,kBAAkB,OAAO,CAAA;AACtF;AAKO,SAAS,kBAAkB,OAAA,EAAgD;AAChF,EAAA,IAAI,OAAA,CAAQ,UAAA,CAAWE,8BAAA,GAAyB,GAAG,GAAG,OAAO,OAAA;AAC7D,EAAA,IAAI,OAAA,CAAQ,UAAA,CAAWD,oCAAA,GAA+B,GAAG,GAAG,OAAO,OAAA;AACnE,EAAA,OAAO,SAAA;AACT;AA3WaC,uCAAA,CAAA,CAKAH,gCAAA,CAAA,KAKP,aAAA,CAAA,CAwMOE,6CAAA,CAAA,CAKAD;AAvPb,IAAA,YAAA,GAAAQ,uBAAA,CAAA;AAAA,EAAA,qBAAA,GAAA;AAqBA,IAAAC,6BAAA,EAAA;AAWO,IAAMP,8BAAA,GAAyB,KAAA;AAK/B,IAAMH,uBAAA,GAAkB,CAAA;AAK/B,IAAM,aAAA,GAAgB,IAAA;AAwMf,IAAME,oCAAA,GAA+B,KAAA;AAKrC,IAAMD,6BAAA,GAAwB,CAAA;AAAA,EAAA;AAAA,CAAA;;;AChM9B,IAAM,qBAAN,MAAyB;AAAA,EACtB,MAAA;AAAA,EACA,OAAA,uBAAc,GAAA,EAA0B;AAAA,EACxC,UAAA,GAAa,KAAA;AAAA,EAErB,YAAY,MAAA,EAAgB;AAC1B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAEd,IAAA,IAAA,CAAK,MAAA,CAAO,SAAA,GAAY,CAAC,CAAA,KAAyC;AAChE,MAAA,IAAA,CAAK,aAAA,CAAc,EAAE,IAAI,CAAA;AAAA,IAC3B,CAAA;AAEA,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,GAAU,CAAC,CAAA,KAAkB;AACvC,MAAA,OAAA,CAAQ,KAAA,CAAM,oCAAA,EAAsC,CAAA,CAAE,OAAA,EAAS,CAAC,CAAA;AAChE,MAAA,KAAA,MAAW,GAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AAChC,QAAA,CAAA,CAAE,OAAO,IAAI,KAAA,CAAM,iBAAiB,CAAA,CAAE,OAAO,EAAE,CAAC,CAAA;AAAA,MAClD;AACA,MAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,IACrB,CAAA;AAAA,EACF;AAAA,EAEQ,cAAc,IAAA,EAA2B;AAC/C,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,KAAK,EAAE,CAAA;AACtC,IAAA,IAAI,CAAC,KAAA,EAAO;AAEZ,IAAA,QAAQ,KAAK,IAAA;AAAM,MACjB,KAAK,UAAA;AACH,QAAA,KAAA,CAAM,UAAA,GAAa,IAAA,CAAK,KAAA,EAAO,IAAA,CAAK,OAAO,CAAA;AAC3C,QAAA;AAAA,MACF,KAAK,mBAAA;AACH,QAAA,KAAA,CAAM,kBAAA,GAAqB,KAAK,QAAQ,CAAA;AACxC,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAC3B,QAAA,KAAA,CAAM,OAAA,CAAQ,KAAK,KAAK,CAAA;AACxB,QAAA;AAAA,MACF,KAAK,OAAA;AACH,QAAA,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,EAAE,CAAA;AAC3B,QAAA,KAAA,CAAM,MAAA,CAAO,IAAI,KAAA,CAAM,IAAA,CAAK,OAAO,CAAC,CAAA;AACpC,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,KAAA,CACJ,WAAA,EACA,QACA,OAAA,EACA,UAAA,EACA,QACA,kBAAA,EACsB;AACtB,IAAA,IAAI,KAAK,UAAA,EAAY;AACnB,MAAA,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAAA,IAC9C;AAEA,IAAA,OAAO,IAAI,OAAA,CAAqB,CAAC,OAAA,EAAS,MAAA,KAAW;AACnD,MAAA,MAAM,EAAA,GAAK,OAAO,UAAA,EAAW;AAE7B,MAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,QAAA,MAAA,CAAO,IAAI,YAAA,CAAa,0BAAA,EAA4B,YAAY,CAAC,CAAA;AACjE,QAAA;AAAA,MACF;AAEA,MAAA,IAAA,CAAK,OAAA,CAAQ,IAAI,EAAA,EAAI,EAAE,SAAS,MAAA,EAAQ,UAAA,EAAY,oBAAoB,CAAA;AAExE,MAAA,MAAM,UAAU,MAAM;AACpB,QAAA,IAAA,CAAK,OAAA,CAAQ,OAAO,EAAE,CAAA;AACtB,QAAA,MAAA,CAAO,IAAI,YAAA,CAAa,0BAAA,EAA4B,YAAY,CAAC,CAAA;AAAA,MACnE,CAAA;AAEA,MAAA,MAAA,EAAQ,iBAAiB,OAAA,EAAS,OAAA,EAAS,EAAE,IAAA,EAAM,MAAM,CAAA;AAIzD,MAAA,MAAM,eAAA,GAAkB,OAAO,MAAA,KAAW,WAAA,GACtC,IAAI,GAAA,CAAI,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAE,IAAA,GACvC,OAAA;AAEJ,MAAA,IAAA,CAAK,OAAO,WAAA,CAAY;AAAA,QACtB,IAAA,EAAM,OAAA;AAAA,QACN,EAAA;AAAA,QACA,WAAA;AAAA,QACA,MAAA;AAAA,QACA,OAAA,EAAS;AAAA,OACmB,CAAA;AAAA,IAChC,CAAC,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,SAAA,GAAY;AACV,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAClB,IAAA,IAAA,CAAK,OAAO,SAAA,EAAU;AACtB,IAAA,KAAA,MAAW,GAAG,CAAC,CAAA,IAAK,KAAK,OAAA,EAAS;AAChC,MAAA,CAAA,CAAE,MAAA,CAAO,IAAI,YAAA,CAAa,mBAAA,EAAqB,YAAY,CAAC,CAAA;AAAA,IAC9D;AACA,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;AAcA,eAAsB,qBAAA,CACpB,WAAA,EACA,MAAA,EACA,OAAA,EACA,OAAA,EAMsB;AACtB,EAAA,MAAM,EAAE,UAAA,EAAY,kBAAA,EAAoB,QAAQ,MAAA,EAAO,GAAI,WAAW,EAAC;AAEvE,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,OAAO,MAAA,CAAO,MAAM,WAAA,EAAa,MAAA,EAAQ,WAAW,EAAA,EAAI,UAAA,EAAY,QAAQ,kBAAkB,CAAA;AAAA,EAChG;AAGA,EAAA,MAAM,EAAE,gBAAA,EAAiB,GAAI,MAAM,OAAO,sBAAY,CAAA;AACtD,EAAA,OAAO,iBAAiB,WAAA,EAAa,MAAA,EAAQ,SAAS,UAAA,EAAY,EAAE,oBAAoB,CAAA;AAC1F;ACpFO,IAAM,iBAAiB,GAAA,IAAO;AAM9B,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,iBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,WAAA,EAAa,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IACpD,EAAE,IAAA,EAAM,UAAA,EAAY,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IACnD,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAChD,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC/D,EAAE,IAAA,EAAM,QAAA,EAAU,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA;AAAM;AAEtD;AAEO,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,iBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,iBAAA,EAAmB,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAC1D,EAAE,IAAA,EAAM,wBAAA,EAA0B,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IACjE,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,YAAA,EAAc,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACtD,EAAE,IAAA,EAAM,aAAA,EAAe,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IACvD,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC/D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA;AAAM;AAEjE;AAEO,IAAM,wBAAA,GAA2B;AAAA,EACtC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,kBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,sBAAA,EAAwB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAChE,EAAE,IAAA,EAAM,oBAAA,EAAsB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC9D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC/D,EAAE,IAAA,EAAM,kBAAA,EAAoB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA,EAAM;AAAA,IAC1D,EAAE,IAAA,EAAM,kBAAA,EAAoB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC5D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA;AAAM;AAEjE;AAEO,IAAM,0BAAA,GAA6B;AAAA,EACxC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,oBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,SAAS,IAAA,EAAK;AAAA,IAClD,EAAE,IAAA,EAAM,oBAAA,EAAsB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC9D,EAAE,IAAA,EAAM,kBAAA,EAAoB,IAAA,EAAM,SAAA,EAAW,SAAS,KAAA,EAAM;AAAA,IAC5D,EAAE,IAAA,EAAM,qBAAA,EAAuB,IAAA,EAAM,OAAA,EAAS,SAAS,KAAA;AAAM;AAEjE;AAEO,IAAM,eAAA,GAAkB;AAAA,EAC7B,uBAAA;AAAA,EACA,uBAAA;AAAA,EACA,wBAAA;AAAA,EACA;AACF;AAUO,SAAS,iBAAA,CAAkB,YAAoB,IAAA,EAAsB;AAC1E,EAAA,OAAQ,aAAa,IAAA,GAAQ,cAAA;AAC/B;AAMO,SAAS,iBAAA,CAAkB,YAAoB,IAAA,EAAsB;AAC1E,EAAA,IAAI,IAAA,KAAS,EAAA,EAAI,MAAM,IAAI,MAAM,qBAAqB,CAAA;AACtD,EAAA,OAAQ,aAAa,cAAA,GAAkB,IAAA;AACzC;AAMO,SAAS,WAAA,CAAY,YAAoB,SAAA,EAA2B;AACzE,EAAA,IAAI,UAAA,KAAe,EAAA,EAAI,MAAM,IAAI,MAAM,4BAA4B,CAAA;AACnE,EAAA,OAAQ,YAAY,cAAA,GAAkB,UAAA;AACxC;AAMO,SAAS,UAAA,CAAW,IAAA,EAAc,QAAA,GAAmB,CAAA,EAAW;AACrE,EAAA,MAAM,QAAQ,IAAA,GAAO,cAAA;AACrB,EAAA,MAAM,OAAO,IAAA,GAAO,cAAA;AACpB,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,QAAA,EAAS,CAAE,QAAA,CAAS,IAAI,GAAG,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA;AACnE,EAAA,OAAO,CAAA,EAAG,KAAK,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AAC5B;AAUO,SAAS,qBAAqB,YAAA,EAAwB;AAC3D,EAAA,OAAOU,cAAA,CAAUC,wBAAA;AAAA,IACfC,wBAAmB,SAAS,CAAA;AAAA,IAC5B,CAAC,YAAY;AAAA,GACd,CAAA;AACH;AAKO,SAAS,oBAAA,GAA4B;AAC1C,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,MAAA,CAAO,gBAAgB,KAAK,CAAA;AAC5B,EAAA,OAAOC,WAAM,KAAK,CAAA;AACpB;AASO,SAAS,iBAAA,CACd,QACA,gBAAA,EACkB;AAClB,EAAA,MAAM,MAAA,GAAS,IAAI,GAAA,CAAI,gBAAA,CAAiB,IAAI,CAAA,EAAA,KAAM,EAAA,CAAG,QAAA,EAAU,CAAC,CAAA;AAChE,EAAA,OAAO,MAAA,CAAO,OAAO,CAAA,CAAA,KAAK,MAAA,CAAO,IAAI,CAAA,CAAE,UAAA,CAAW,QAAA,EAAU,CAAC,CAAA;AAC/D;AAKO,SAAS,uBAAA,CACd,MAAA,EACA,SAAA,EACA,QAAA,EACkB;AAClB,EAAA,MAAM,IAAA,GAAO,UAAU,WAAA,EAAY;AACnC,EAAA,MAAM,GAAA,GAAM,SAAS,WAAA,EAAY;AACjC,EAAA,OAAO,MAAA,CAAO,MAAA;AAAA,IACZ,CAAA,CAAA,KAAK,EAAE,SAAA,CAAU,WAAA,OAAkB,IAAA,IAAQ,CAAA,CAAE,QAAA,CAAS,WAAA,EAAY,KAAM;AAAA,GAC1E;AACF;AAKO,SAAS,mBAAA,CAAoB,OAAmC,WAAA,EAA8B;AACnG,EAAA,MAAM,QAAA,GAAW,qBAAA,IAAyB,KAAA,GAAQ,KAAA,CAAM,mBAAA,GAAsB,EAAA;AAC9E,EAAA,OAAO,QAAA,KAAa,MAAM,QAAA,KAAa,WAAA;AACzC;AAMA,IAAM,oBAAA,GAAuB,kBAAA;AAE7B,SAAS,SAAA,CAAU,SAAiB,OAAA,EAAsB;AACxD,EAAA,OAAO,GAAG,oBAAoB,CAAA,EAAG,QAAQ,WAAA,EAAa,IAAI,OAAO,CAAA,CAAA;AACnE;AAMO,SAAS,iBAAA,CAAkB,OAAA,EAAc,YAAA,EAAmB,OAAA,EAAwB;AACzF,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACzC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,YAAA,CAAa,OAAA,CAAQ,SAAA,CAAU,OAAA,EAAS,OAAO,GAAG,YAAY,CAAA;AAAA,EAChE;AAEA,EAAA,YAAA,CAAa,QAAQ,CAAA,EAAG,oBAAoB,CAAA,EAAG,OAAO,IAAI,YAAY,CAAA;AACxE;AAMO,SAAS,eAAA,CAAgB,SAAc,OAAA,EAA8B;AAC1E,EAAA,IAAI,OAAO,YAAA,KAAiB,WAAA,EAAa,OAAO,IAAA;AAChD,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,MAAM,SAAS,YAAA,CAAa,OAAA,CAAQ,SAAA,CAAU,OAAA,EAAS,OAAO,CAAC,CAAA;AAC/D,IAAA,IAAI,QAAQ,OAAO,MAAA;AAAA,EACrB;AAEA,EAAA,OAAO,aAAa,OAAA,CAAQ,CAAA,EAAG,oBAAoB,CAAA,EAAG,OAAO,CAAA,CAAE,CAAA;AACjE;AAKO,SAAS,kBAAA,CAAmB,SAAc,OAAA,EAAwB;AACvE,EAAA,IAAI,OAAO,iBAAiB,WAAA,EAAa;AACzC,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,YAAA,CAAa,UAAA,CAAW,SAAA,CAAU,OAAA,EAAS,OAAO,CAAC,CAAA;AAAA,EACrD;AACA,EAAA,YAAA,CAAa,UAAA,CAAW,CAAA,EAAG,oBAAoB,CAAA,EAAG,OAAO,CAAA,CAAE,CAAA;AAC7D;AAMO,SAAS,eAAe,OAAA,EAAyB;AACtD,EAAA,IAAI,OAAO,YAAA,KAAiB,WAAA,EAAa,OAAO,EAAC;AACjD,EAAA,MAAM,MAAA,GAAS,UACX,CAAA,EAAG,oBAAoB,GAAG,OAAA,CAAQ,WAAA,EAAa,CAAA,CAAA,CAAA,GAC/C,oBAAA;AACJ,EAAA,MAAM,MAAa,EAAC;AACpB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,YAAA,CAAa,QAAQ,CAAA,EAAA,EAAK;AAC5C,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA;AAC9B,IAAA,IAAI,GAAA,EAAK,UAAA,CAAW,MAAM,CAAA,EAAG;AAC3B,MAAA,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,KAAA,CAAM,MAAA,CAAO,MAAM,CAAQ,CAAA;AAAA,IAC1C;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AASO,SAAS,aAAA,CAAc,OAAkB,YAAA,EAA+B;AAC7E,EAAA,OAAO,CAAC,KAAA,CAAM,OAAA,IAAW,CAAC,KAAA,CAAM,aAAa,YAAA,IAAgB,KAAA,CAAM,MAAA,IAAU,KAAA,CAAM,mBAAA,GAAsB,EAAA;AAC3G;AAKO,SAAS,qBAAA,CAAsB,YAAoB,IAAA,EAAsB;AAC9E,EAAA,OAAO,iBAAA,CAAkB,YAAY,IAAI,CAAA;AAC3C;AAKO,SAAS,sBAAsB,KAAA,EAA0B;AAC9D,EAAA,IAAI,KAAA,CAAM,UAAA,KAAe,EAAA,EAAI,OAAO,CAAA;AACpC,EAAA,MAAM,MAAA,GAAS,KAAA,CAAM,UAAA,GAAa,KAAA,CAAM,mBAAA;AACxC,EAAA,OAAO,MAAA,CAAQ,MAAA,GAAS,MAAA,GAAU,KAAA,CAAM,UAAU,CAAA,GAAI,GAAA;AACxD;AClUA,SAAS,gBAAA,CAAiB,MAAkB,SAAA,EAAgD;AAC1F,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAA;AAAA,IACT,gBAAgBA,UAAAA,CAAM,IAAA,CAAK,gBAAgB,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IACvD,WAAWA,UAAAA,CAAM,IAAA,CAAK,WAAW,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IAC7C,eAAeA,UAAAA,CAAM,IAAA,CAAK,eAAe,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IACrD,aAAaA,UAAAA,CAAM,IAAA,CAAK,aAAa,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IACjD,GAAI,SAAA,GAAY;AAAA,MACd,aAAa,SAAA,CAAU,WAAA,CAAY,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,MACxD,gBAAgB,SAAA,CAAU,cAAA,CAAe,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,MAC9D,oBAAoB,SAAA,CAAU,kBAAA,CAAmB,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU,CAAA;AAAA,MACtE,kBAAkB,SAAA,CAAU,gBAAA,CAAiB,IAAI,CAAA,CAAA,KAAK,CAAA,CAAE,UAAU;AAAA,QAChE;AAAC,GACP;AACF;AAEA,SAAS,mBAAmB,IAAA,EAA4E;AACtG,EAAA,IAAI,IAAA,CAAK,OAAA,KAAY,CAAA,IAAK,CAAC,KAAK,cAAA,EAAgB;AAC9C,IAAA,MAAM,IAAI,MAAM,kCAAkC,CAAA;AAAA,EACpD;AAEA,EAAA,MAAM,IAAA,GAAmB;AAAA,IACvB,cAAA,EAAgB,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA;AAAA,IAC1C,SAAA,EAAW,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA;AAAA,IAChC,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,aAAa,CAAA;AAAA,IACxC,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,WAAW;AAAA,GACtC;AAEA,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI,KAAK,WAAA,EAAa;AACpB,IAAA,SAAA,GAAY;AAAA,MACV,aAAa,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAChD,gBAAgB,IAAA,CAAK,cAAA,CAAgB,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MACvD,oBAAoB,IAAA,CAAK,kBAAA,CAAoB,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,MAC/D,kBAAkB,IAAA,CAAK,gBAAA,CAAkB,IAAI,CAAA,CAAA,KAAK,MAAA,CAAO,CAAC,CAAC;AAAA,KAC7D;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAM,SAAA,EAAU;AAC3B;AAuBO,IAAM,yBAAN,MAAwD;AAAA,EAG7D,WAAA,CACU,SACR,UAAA,EACA;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGR,IAAA,IAAA,CAAK,UAAA,GAAa,CAAA,QAAA,EAAW,UAAA,CAAW,WAAA,EAAa,CAAA,CAAA;AAAA,EACvD;AAAA,EAPQ,UAAA;AAAA,EASR,MAAM,IAAA,GAA0E;AAC9E,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAuB,KAAK,UAAU,CAAA;AACtE,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,IAAA,IAAI;AACF,MAAA,OAAO,mBAAmB,IAAI,CAAA;AAAA,IAChC,CAAA,CAAA,MAAQ;AAEN,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AACzC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,IAAA,CAAK,IAAA,EAAkB,SAAA,EAA4C;AACvE,IAAA,MAAM,UAAA,GAAa,gBAAA,CAAiB,IAAA,EAAM,SAAS,CAAA;AACnD,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,YAAY,UAAU,CAAA;AAAA,EACpD;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAAA,EAC3C;AACF;AAcO,IAAM,uBAAN,MAAsD;AAAA,EAC3D,WAAA,CACU,MACA,SAAA,EACR;AAFQ,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AACA,IAAA,IAAA,CAAA,SAAA,GAAA,SAAA;AAAA,EACP;AAAA,EAEH,MAAM,IAAA,GAAO;AACX,IAAA,OAAO,EAAE,IAAA,EAAM,IAAA,CAAK,IAAA,EAAM,SAAA,EAAW,KAAK,SAAA,EAAU;AAAA,EACtD;AAAA,EAEA,MAAM,IAAA,GAAsB;AAAA,EAE5B;AAAA,EAEA,MAAM,KAAA,GAAuB;AAAA,EAE7B;AACF;ACvHO,IAAM,YAAN,MAAsC;AAAA,EAM3C,WAAA,CACU,OAAA,EACA,UAAA,GAAqB,OAAA,EAC7B;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AACA,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAAA,EACP;AAAA,EARK,QAAwB,EAAC;AAAA,EACzB,aAAA,uBAAoB,GAAA,EAAY;AAAA,EAChC,SAAA,uBAAgB,GAAA,EAAgB;AAAA,EAChC,KAAA,GAAQ,KAAA;AAAA;AAAA,EAShB,QAAA,GAA2B;AACzB,IAAA,OAAO,CAAC,GAAG,IAAA,CAAK,KAAK,CAAA;AAAA,EACvB;AAAA,EAEA,gBAAgB,WAAA,EAA2C;AACzD,IAAA,IAAI,SAAS,IAAA,CAAK,KAAA,CAAM,OAAO,CAAA,CAAA,KAAK,CAAA,CAAE,WAAW,OAAO,CAAA;AACxD,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAA,GAAS,OAAO,MAAA,CAAO,CAAA,CAAA,KAAA,CAAM,CAAA,CAAE,WAAA,IAAe,aAAa,WAAW,CAAA;AAAA,IACxE;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAAA,EAEA,UAAA,CAAW,OAAgB,WAAA,EAAmC;AAC5D,IAAA,IAAI,KAAA,GAAQ,IAAA,CAAK,eAAA,CAAgB,WAAW,CAAA;AAC5C,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAM,UAAA,GAAa,MAAM,WAAA,EAAY;AACrC,MAAA,KAAA,GAAQ,MAAM,MAAA,CAAO,CAAA,CAAA,KAAK,EAAE,KAAA,CAAM,WAAA,OAAkB,UAAU,CAAA;AAAA,IAChE;AACA,IAAA,OAAO,KAAA,CAAM,OAAO,CAAC,GAAA,EAAK,MAAM,GAAA,GAAM,CAAA,CAAE,QAAQ,EAAE,CAAA;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,QAAQ,IAAA,EAA6B;AACnC,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AACxC,IAAA,IAAI,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAG,GAAG,OAAO,KAAA;AAGxC,IAAA,MAAM,UAAA,GAA2B;AAAA,MAC/B,GAAG,IAAA;AAAA,MACH,UAAA,EAAY,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AAAA,MACxC,MAAA,EAAQ,cAAA,CAAe,IAAA,CAAK,MAAM,CAAA;AAAA,MAClC,KAAA,EAAO,cAAA,CAAe,IAAA,CAAK,KAAK;AAAA,KAClC;AAEA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,UAAU,CAAA;AAC1B,IAAA,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,CAAA;AAC1B,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,MAAA,EAAO;AACZ,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,SAAS,KAAA,EAA+B;AACtC,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,MAAA,IAAI,IAAA,CAAK,OAAA,CAAQ,IAAI,CAAA,EAAG,KAAA,EAAA;AAAA,IAC1B;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,UAAU,UAAA,EAA0B;AAClC,IAAA,MAAM,GAAA,GAAM,WAAW,WAAA,EAAY;AACnC,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,UAAA,CAAW,WAAA,EAAY,KAAM,GAAG,CAAA;AACpE,IAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,MAAA,KAAW,OAAA,EAAS;AACnC,MAAA,IAAA,CAAK,MAAA,GAAS,OAAA;AACd,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,YAAY,UAAA,EAA0B;AACpC,IAAA,MAAM,GAAA,GAAM,WAAW,WAAA,EAAY;AACnC,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,UAAA,CAAW,WAAA,EAAY,KAAM,GAAG,CAAA;AACpE,IAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,MAAA,KAAW,OAAA,EAAS;AACnC,MAAA,IAAA,CAAK,MAAA,GAAS,WAAA;AACd,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,eAAA,CAAgB,YAAoB,SAAA,EAAyB;AAC3D,IAAA,MAAM,GAAA,GAAM,WAAW,WAAA,EAAY;AACnC,IAAA,MAAM,IAAA,GAAO,KAAK,KAAA,CAAM,IAAA,CAAK,OAAK,CAAA,CAAE,UAAA,CAAW,WAAA,EAAY,KAAM,GAAG,CAAA;AACpE,IAAA,IAAI,IAAA,IAAQ,IAAA,CAAK,SAAA,KAAc,SAAA,EAAW;AACxC,MAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,MAAA,IAAA,CAAK,MAAA,EAAO;AAAA,IACd;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,IAAA,GAAsB;AAC1B,IAAA,MAAM,aAAa,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAsB,KAAK,UAAU,CAAA;AAC3E,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,KAAA,CAAM,OAAA,CAAQ,UAAU,CAAA,EAAG;AAC7C,MAAA,IAAA,CAAK,QAAQ,EAAC;AACd,MAAA,IAAA,CAAK,cAAc,KAAA,EAAM;AACzB,MAAA;AAAA,IACF;AAGA,IAAA,IAAA,CAAK,QAAQ,EAAC;AACd,IAAA,IAAA,CAAK,cAAc,KAAA,EAAM;AACzB,IAAA,IAAI,OAAA,GAAU,CAAA;AACd,IAAA,KAAA,MAAW,KAAK,UAAA,EAAY;AAC1B,MAAA,MAAM,IAAA,GAAO,gBAAgB,CAAC,CAAA;AAC9B,MAAA,MAAM,GAAA,GAAM,IAAA,CAAK,UAAA,CAAW,WAAA,EAAY;AACxC,MAAA,IAAI,IAAA,CAAK,aAAA,CAAc,GAAA,CAAI,GAAG,CAAA,EAAG;AAAE,QAAA,OAAA,EAAA;AAAW,QAAA;AAAA,MAAS;AACvD,MAAA,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,CAAA;AAC1B,MAAA,IAAA,CAAK,KAAA,CAAM,KAAK,IAAI,CAAA;AAAA,IACtB;AACA,IAAA,IAAI,UAAU,CAAA,EAAG;AACf,MAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oBAAA,EAAuB,OAAO,CAAA,wBAAA,CAA0B,CAAA;AACpE,MAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AAAA,IACf,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,IACf;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAI,CAAC,KAAK,KAAA,EAAO;AACjB,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,aAAa,CAAA;AAC/C,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,GAAA,CAAI,IAAA,CAAK,YAAY,UAAU,CAAA;AAClD,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAA,CAAK,QAAQ,EAAC;AACd,IAAA,IAAA,CAAK,cAAc,KAAA,EAAM;AACzB,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AACb,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AACzC,IAAA,IAAA,CAAK,MAAA,EAAO;AAAA,EACd;AAAA;AAAA,EAIA,SAAS,QAAA,EAAkC;AACzC,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,QAAQ,CAAA;AAC3B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,QAAQ,CAAA;AAAA,EAC7C;AAAA,EAEQ,MAAA,GAAe;AACrB,IAAA,KAAA,MAAW,QAAA,IAAY,KAAK,SAAA,EAAW;AACrC,MAAA,QAAA,EAAS;AAAA,IACX;AAAA,EACF;AACF;AAMA,SAAS,cAAc,IAAA,EAAoC;AACzD,EAAA,OAAO;AAAA,IACL,GAAG,IAAA;AAAA,IACH,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,QAAA,EAAS;AAAA,IAC7B,QAAA,EAAU,IAAA,CAAK,QAAA,CAAS,QAAA;AAAS,GACnC;AACF;AAEA,SAAS,gBAAgB,CAAA,EAAiC;AACxD,EAAA,OAAO;AAAA,IACL,GAAG,CAAA;AAAA,IACH,MAAA,EAAQ,MAAA,CAAO,CAAA,CAAE,MAAM,CAAA;AAAA,IACvB,QAAA,EAAU,MAAA,CAAO,CAAA,CAAE,QAAQ,CAAA;AAAA,IAC3B,WAAA,EAAa,EAAE,WAAA,IAAe;AAAA,GAChC;AACF;AAEA,SAAS,eAAe,IAAA,EAAsB;AAC5C,EAAA,IAAI;AACF,IAAA,OAAOC,gBAAW,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"chunk-C3HXJ5A6.cjs","sourcesContent":["/**\n * Stealth Address Utilities (Post-Quantum, Hash-Based)\n *\n * Implements stealth addresses using Poseidon hashes with bech32m encoding.\n * No BabyJubJub curve operations — ownership is proven via hash preimage.\n *\n * Address Format (bech32m):\n *   0zk1<version><chainId><ownerHash><viewingHash>\n *\n * Key Flow (self-shield):\n *   1. User derives ownerHash = Poseidon(spendingSecret)\n *   2. Commitment = Poseidon(amount, ownerHash, blinding, origin, token)\n *   3. Encrypt note with key derived from viewingSecret\n *\n * Key Flow (send to others, future):\n *   1. Decode recipient's stealth address (ownerHash, viewingHash)\n *   2. Generate per-note secret and derive ownerHash for the note\n *   3. Encrypt note so recipient's viewingSecret can decrypt\n */\n\nimport { bech32m } from 'bech32'\nimport {\n  randomFieldElement,\n  bigintToBytes,\n  bytesToBigint,\n} from '../utils/crypto.js'\nimport type { MasterKeys, StarkMasterKeys, OneTimeKeys } from '../keys/types.js'\nimport type { M31Digest } from '../utils/keccak-m31.js'\n\n/**\n * Stealth address prefix\n */\nexport const STEALTH_ADDRESS_PREFIX = '0zk'\n\n/**\n * Address version (v2 = hash-based, post-quantum)\n */\nexport const ADDRESS_VERSION = 2\n\n/**\n * Maximum length for bech32m encoding\n */\nconst BECH32M_LIMIT = 1023\n\n/**\n * Encode a stealth address in bech32m format\n *\n * Format: 0zk1<version><chainId><ownerHash><viewingHash>\n *\n * @param ownerHash - Owner hash = Poseidon(spendingSecret)\n * @param viewingHash - Viewing hash = Poseidon(viewingSecret)\n * @param chainId - Optional chain ID (0 = any chain)\n * @returns bech32m encoded stealth address\n */\nexport function encodeStealthAddress(\n  ownerHash: bigint,\n  viewingHash: bigint,\n  chainId: number = 0\n): string {\n  // Build data buffer: version (1 byte) + chainId (4 bytes) + 2 * 32 bytes = 69 bytes\n  const data = new Uint8Array(1 + 4 + 32 * 2)\n  let offset = 0\n\n  // Version\n  data[offset++] = ADDRESS_VERSION\n\n  // Chain ID (4 bytes, big-endian)\n  data[offset++] = (chainId >> 24) & 0xff\n  data[offset++] = (chainId >> 16) & 0xff\n  data[offset++] = (chainId >> 8) & 0xff\n  data[offset++] = chainId & 0xff\n\n  // Owner hash (32 bytes)\n  const ownerBytes = bigintToBytes(ownerHash, 32)\n  data.set(ownerBytes, offset)\n  offset += 32\n\n  // Viewing hash (32 bytes)\n  const viewingBytes = bigintToBytes(viewingHash, 32)\n  data.set(viewingBytes, offset)\n\n  // Convert to 5-bit words for bech32m\n  const words = bech32m.toWords(data)\n\n  // Encode with prefix\n  return bech32m.encode(STEALTH_ADDRESS_PREFIX, words, BECH32M_LIMIT)\n}\n\n/**\n * Decode a bech32m stealth address\n *\n * @param address - bech32m encoded stealth address\n * @returns Decoded hash values\n */\nexport function decodeStealthAddress(address: string): {\n  version: number\n  chainId: number\n  ownerHash: bigint\n  viewingHash: bigint\n} {\n  // Decode bech32m\n  const decoded = bech32m.decode(address, BECH32M_LIMIT)\n\n  // Verify prefix\n  if (decoded.prefix !== STEALTH_ADDRESS_PREFIX) {\n    throw new Error(`Invalid stealth address prefix: expected '${STEALTH_ADDRESS_PREFIX}', got '${decoded.prefix}'`)\n  }\n\n  // Convert from 5-bit words back to bytes\n  const data = new Uint8Array(bech32m.fromWords(decoded.words))\n\n  // Parse version\n  let offset = 0\n  const version = data[offset++]!\n\n  if (version !== ADDRESS_VERSION) {\n    throw new Error(`Unsupported address version: ${version}. Expected v${ADDRESS_VERSION} (hash-based).`)\n  }\n\n  // Parse chain ID\n  const chainId =\n    (data[offset++]! << 24) |\n    (data[offset++]! << 16) |\n    (data[offset++]! << 8) |\n    data[offset++]!\n\n  // Parse owner hash (32 bytes)\n  const ownerHash = bytesToBigint(data.slice(offset, offset + 32))\n  offset += 32\n\n  // Parse viewing hash (32 bytes)\n  const viewingHash = bytesToBigint(data.slice(offset, offset + 32))\n\n  return {\n    version,\n    chainId,\n    ownerHash,\n    viewingHash,\n  }\n}\n\n/**\n * Validate a stealth address format\n */\nexport function isValidStealthAddress(address: string): boolean {\n  try {\n    decodeStealthAddress(address)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Generate stealth address from master keys\n */\nexport function generateStealthAddress(keys: MasterKeys, chainId: number = 0): string {\n  return encodeStealthAddress(keys.ownerHash, keys.viewingHash, chainId)\n}\n\n/**\n * Create one-time keys for a transaction (hash-based)\n *\n * For self-shield: the user uses their own spendingSecret directly\n * as the ownerSecret, producing ownerHash = Poseidon(spendingSecret).\n *\n * For sending to others (future): generate a random oneTimeSecret\n * and derive ownerHash = Poseidon(oneTimeSecret).\n *\n * @param recipientOwnerHash - Recipient's owner hash (for verification)\n * @param selfSecret - If self-shield, the user's spending secret\n * @returns One-time keys for the note\n */\nexport async function createOneTimeKeys(\n  _recipientOwnerHash?: bigint,\n  selfSecret?: bigint,\n): Promise<OneTimeKeys> {\n  const { poseidon } = await import('../utils/poseidon.js')\n\n  if (selfSecret !== undefined) {\n    // Self-shield: use own spending secret\n    const ownerHash = await poseidon([selfSecret])\n    return {\n      oneTimeSecret: selfSecret,\n      ownerHash,\n    }\n  }\n\n  // Generate random one-time secret for the note\n  const oneTimeSecret = randomFieldElement()\n  const ownerHash = await poseidon([oneTimeSecret])\n\n  return {\n    oneTimeSecret,\n    ownerHash,\n  }\n}\n\n/**\n * Verify ownership of a note by checking hash preimage\n *\n * @param secret - Claimed spending secret\n * @param expectedOwnerHash - Owner hash from the note commitment\n * @returns True if the secret hashes to the expected owner hash\n */\nexport async function verifyOwnership(\n  secret: bigint,\n  expectedOwnerHash: bigint\n): Promise<boolean> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  const computedHash = await poseidon([secret])\n  return computedHash === expectedOwnerHash\n}\n\n/**\n * Compute shared secret for note encryption/decryption (hash-based)\n *\n * For self-shield: just uses the viewing secret directly.\n * For sending to others (future): use Poseidon(viewingSecret, recipientViewingHash)\n *\n * @param viewingSecret - Sender's or recipient's viewing secret\n * @param nonce - Optional nonce for key derivation\n * @returns Encryption key as bigint\n */\nexport async function computeNoteEncryptionKey(\n  viewingSecret: bigint,\n  nonce?: bigint\n): Promise<bigint> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  if (nonce !== undefined) {\n    return poseidon([viewingSecret, nonce])\n  }\n  return poseidon([viewingSecret])\n}\n\n// =========================================================================\n// STARK Stealth Addresses (0zs prefix, M31/Keccak-based)\n// =========================================================================\n\n/**\n * STARK stealth address prefix\n */\nexport const STARK_STEALTH_ADDRESS_PREFIX = '0zs'\n\n/**\n * STARK address version (v1 = M31/Keccak)\n */\nexport const STARK_ADDRESS_VERSION = 1\n\n/**\n * Encode a STARK stealth address in bech32m format\n *\n * Format: 0zs1<version><chainId><ownerHash[0..3]><viewingHash[0..3]>\n *\n * Each M31 element is encoded as 4 bytes (little-endian).\n * Total data: 1 (version) + 4 (chainId) + 16 (ownerHash) + 16 (viewingHash) = 37 bytes.\n *\n * @param ownerHash - 4 M31 elements: keccak_m31(starkSecret)\n * @param viewingHash - 4 M31 elements: keccak_m31(starkViewingSecret)\n * @param chainId - Optional chain ID (0 = any chain)\n */\nexport function encodeStarkStealthAddress(\n  ownerHash: M31Digest,\n  viewingHash: M31Digest,\n  chainId: number = 0\n): string {\n  const data = new Uint8Array(1 + 4 + 16 + 16) // 37 bytes\n  let offset = 0\n\n  // Version\n  data[offset++] = STARK_ADDRESS_VERSION\n\n  // Chain ID (4 bytes, big-endian)\n  data[offset++] = (chainId >> 24) & 0xff\n  data[offset++] = (chainId >> 16) & 0xff\n  data[offset++] = (chainId >> 8) & 0xff\n  data[offset++] = chainId & 0xff\n\n  // Owner hash: 4 M31 elements, each 4 bytes LE\n  for (let i = 0; i < 4; i++) {\n    const val = Number(ownerHash[i]!)\n    data[offset++] = val & 0xff\n    data[offset++] = (val >> 8) & 0xff\n    data[offset++] = (val >> 16) & 0xff\n    data[offset++] = (val >> 24) & 0xff\n  }\n\n  // Viewing hash: 4 M31 elements, each 4 bytes LE\n  for (let i = 0; i < 4; i++) {\n    const val = Number(viewingHash[i]!)\n    data[offset++] = val & 0xff\n    data[offset++] = (val >> 8) & 0xff\n    data[offset++] = (val >> 16) & 0xff\n    data[offset++] = (val >> 24) & 0xff\n  }\n\n  const words = bech32m.toWords(data)\n  return bech32m.encode(STARK_STEALTH_ADDRESS_PREFIX, words, BECH32M_LIMIT)\n}\n\n/**\n * Decode a STARK stealth address (0zs prefix)\n */\nexport function decodeStarkStealthAddress(address: string): {\n  version: number\n  chainId: number\n  ownerHash: M31Digest\n  viewingHash: M31Digest\n} {\n  const decoded = bech32m.decode(address, BECH32M_LIMIT)\n\n  if (decoded.prefix !== STARK_STEALTH_ADDRESS_PREFIX) {\n    throw new Error(\n      `Invalid STARK stealth address prefix: expected '${STARK_STEALTH_ADDRESS_PREFIX}', got '${decoded.prefix}'`\n    )\n  }\n\n  const data = new Uint8Array(bech32m.fromWords(decoded.words))\n  let offset = 0\n\n  const version = data[offset++]!\n  if (version !== STARK_ADDRESS_VERSION) {\n    throw new Error(\n      `Unsupported STARK address version: ${version}. Expected v${STARK_ADDRESS_VERSION}.`\n    )\n  }\n\n  // Chain ID\n  const chainId =\n    (data[offset++]! << 24) |\n    (data[offset++]! << 16) |\n    (data[offset++]! << 8) |\n    data[offset++]!\n\n  // Owner hash: 4 M31 LE uint32s\n  const ownerHash: bigint[] = []\n  for (let i = 0; i < 4; i++) {\n    const val =\n      data[offset]! |\n      (data[offset + 1]! << 8) |\n      (data[offset + 2]! << 16) |\n      (data[offset + 3]! << 24)\n    ownerHash.push(BigInt(val >>> 0))\n    offset += 4\n  }\n\n  // Viewing hash: 4 M31 LE uint32s\n  const viewingHash: bigint[] = []\n  for (let i = 0; i < 4; i++) {\n    const val =\n      data[offset]! |\n      (data[offset + 1]! << 8) |\n      (data[offset + 2]! << 16) |\n      (data[offset + 3]! << 24)\n    viewingHash.push(BigInt(val >>> 0))\n    offset += 4\n  }\n\n  return {\n    version,\n    chainId,\n    ownerHash: ownerHash as unknown as M31Digest,\n    viewingHash: viewingHash as unknown as M31Digest,\n  }\n}\n\n/**\n * Validate a STARK stealth address format\n */\nexport function isValidStarkStealthAddress(address: string): boolean {\n  try {\n    decodeStarkStealthAddress(address)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/**\n * Generate a STARK stealth address from STARK master keys\n */\nexport function generateStarkStealthAddress(\n  keys: StarkMasterKeys,\n  chainId: number = 0\n): string {\n  return encodeStarkStealthAddress(keys.starkOwnerHash, keys.starkViewingHash, chainId)\n}\n\n/**\n * Detect whether an address is SNARK (0zk) or STARK (0zs)\n */\nexport function detectAddressType(address: string): 'snark' | 'stark' | 'unknown' {\n  if (address.startsWith(STEALTH_ADDRESS_PREFIX + '1')) return 'snark'\n  if (address.startsWith(STARK_STEALTH_ADDRESS_PREFIX + '1')) return 'stark'\n  return 'unknown'\n}\n","/**\n * Proof Worker Manager — off-main-thread PLONK proof generation.\n *\n * Manages a Web Worker that runs snarkjs proof generation, keeping the\n * main thread (and UI) responsive during the 10-30s proving time.\n *\n * @example\n * ```ts\n * // Create worker (consumer handles bundler integration)\n * const worker = new Worker(\n *   new URL('@permissionless-technologies/upp-sdk/worker', import.meta.url)\n * )\n * const manager = new ProofWorkerManager(worker)\n *\n * const result = await manager.prove('transfer', circuitInputs, '/circuits/',\n *   (stage, msg) => console.log(stage, msg)\n * )\n *\n * // Cleanup\n * manager.terminate()\n * ```\n */\n\nimport type { UPPCircuitType, UPPCircuitInputs, ProofResult, PlonkProvingStage } from './proof.js'\nimport type { DownloadProgress } from './circuit-cache.js'\n\n// ============================================================================\n// Worker Message Types\n// ============================================================================\n\nexport interface ProofWorkerRequest {\n  type: 'prove'\n  id: string\n  circuitType: string\n  inputs: Record<string, any>\n  baseUrl: string\n}\n\nexport type ProofWorkerResponse =\n  | { type: 'progress'; id: string; stage: PlonkProvingStage; message: string }\n  | { type: 'download-progress'; id: string; progress: DownloadProgress }\n  | { type: 'result'; id: string; proof: ProofResult }\n  | { type: 'error'; id: string; message: string }\n\n// ============================================================================\n// ProofWorkerManager\n// ============================================================================\n\ninterface PendingProof {\n  resolve: (result: ProofResult) => void\n  reject: (error: Error) => void\n  onProgress?: (stage: PlonkProvingStage, message: string) => void\n  onDownloadProgress?: (progress: DownloadProgress) => void\n}\n\nexport class ProofWorkerManager {\n  private worker: Worker\n  private pending = new Map<string, PendingProof>()\n  private terminated = false\n\n  constructor(worker: Worker) {\n    this.worker = worker\n\n    this.worker.onmessage = (e: MessageEvent<ProofWorkerResponse>) => {\n      this.handleMessage(e.data)\n    }\n\n    this.worker.onerror = (e: ErrorEvent) => {\n      console.error('[ProofWorkerManager] Worker error:', e.message, e)\n      for (const [, p] of this.pending) {\n        p.reject(new Error(`Worker error: ${e.message}`))\n      }\n      this.pending.clear()\n    }\n  }\n\n  private handleMessage(data: ProofWorkerResponse) {\n    const entry = this.pending.get(data.id)\n    if (!entry) return\n\n    switch (data.type) {\n      case 'progress':\n        entry.onProgress?.(data.stage, data.message)\n        break\n      case 'download-progress':\n        entry.onDownloadProgress?.(data.progress)\n        break\n      case 'result':\n        this.pending.delete(data.id)\n        entry.resolve(data.proof)\n        break\n      case 'error':\n        this.pending.delete(data.id)\n        entry.reject(new Error(data.message))\n        break\n    }\n  }\n\n  /**\n   * Generate a proof in the worker.\n   *\n   * @param signal - AbortSignal for cancellation. When aborted, the promise\n   *   rejects with AbortError. Call terminate() for hard cancellation.\n   */\n  async prove(\n    circuitType: UPPCircuitType,\n    inputs: UPPCircuitInputs,\n    baseUrl: string,\n    onProgress?: (stage: PlonkProvingStage, message: string) => void,\n    signal?: AbortSignal,\n    onDownloadProgress?: (progress: DownloadProgress) => void,\n  ): Promise<ProofResult> {\n    if (this.terminated) {\n      throw new Error('Worker has been terminated')\n    }\n\n    return new Promise<ProofResult>((resolve, reject) => {\n      const id = crypto.randomUUID()\n\n      if (signal?.aborted) {\n        reject(new DOMException('Proof generation aborted', 'AbortError'))\n        return\n      }\n\n      this.pending.set(id, { resolve, reject, onProgress, onDownloadProgress })\n\n      const onAbort = () => {\n        this.pending.delete(id)\n        reject(new DOMException('Proof generation aborted', 'AbortError'))\n      }\n\n      signal?.addEventListener('abort', onAbort, { once: true })\n\n      // Resolve baseUrl to absolute — workers resolve relative URLs against\n      // their own script URL (a webpack chunk), not the page origin.\n      const absoluteBaseUrl = typeof window !== 'undefined'\n        ? new URL(baseUrl, window.location.href).href\n        : baseUrl\n\n      this.worker.postMessage({\n        type: 'prove',\n        id,\n        circuitType,\n        inputs,\n        baseUrl: absoluteBaseUrl,\n      } satisfies ProofWorkerRequest)\n    })\n  }\n\n  /**\n   * Hard-terminate the worker. All pending proofs are rejected.\n   */\n  terminate() {\n    this.terminated = true\n    this.worker.terminate()\n    for (const [, p] of this.pending) {\n      p.reject(new DOMException('Worker terminated', 'AbortError'))\n    }\n    this.pending.clear()\n  }\n}\n\n// ============================================================================\n// Convenience Function\n// ============================================================================\n\n/**\n * Generate a UPP proof — uses a worker if provided, otherwise main-thread.\n *\n * This is the recommended entry point for proof generation. It provides a\n * unified API regardless of whether a worker is available.\n *\n * Circuit artifacts are automatically cached in IndexedDB after first download.\n */\nexport async function generateUPPProofAsync(\n  circuitType: UPPCircuitType,\n  inputs: UPPCircuitInputs,\n  baseUrl?: string,\n  options?: {\n    onProgress?: (stage: PlonkProvingStage, message: string) => void\n    onDownloadProgress?: (progress: DownloadProgress) => void\n    signal?: AbortSignal\n    worker?: ProofWorkerManager | null\n  },\n): Promise<ProofResult> {\n  const { onProgress, onDownloadProgress, signal, worker } = options ?? {}\n\n  if (worker) {\n    return worker.prove(circuitType, inputs, baseUrl ?? '', onProgress, signal, onDownloadProgress)\n  }\n\n  // Fallback: main-thread proving (with cache)\n  const { generateUPPProof } = await import('./proof.js')\n  return generateUPPProof(circuitType, inputs, baseUrl, onProgress, { onDownloadProgress })\n}\n","/**\n * Swap Module\n *\n * Core logic for building and interacting with the UPP in-pool swap order book.\n * Framework-agnostic (no React). Reuses withdraw verifier for proofs.\n */\n\nimport { type Address, type Hex, encodeAbiParameters, keccak256, parseAbiParameters, toHex } from 'viem'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Swap order as stored on-chain\n */\nexport interface SwapOrder {\n  /** Order ID (= maker's nullifier) */\n  orderId: Hex\n  /** Token being sold */\n  sellToken: Address\n  /** Original total sell amount */\n  sellAmount: bigint\n  /** Remaining sell amount (decremented on each fill) */\n  remainingSellAmount: bigint\n  /** Token the maker wants to receive */\n  buyToken: Address\n  /** Price: buyToken per sellToken (1e18 fixed-point) */\n  rate: bigint\n  /** Accumulated buy token amount from fills */\n  accumulatedBuyAmount: bigint\n  /** Maker's ASP ID (public, filterable by takers) */\n  makerAspId: bigint\n  /** Required filler ASP (0 = any) */\n  requiredFillerAspId: bigint\n  /** Block number after which order expires */\n  expiry: bigint\n  /** Whether the maker has claimed */\n  claimed: boolean\n  /** Whether the order was cancelled */\n  cancelled: boolean\n}\n\n/**\n * Parameters to place a swap order\n */\nexport interface SwapOrderParams {\n  /** Token to sell */\n  sellToken: Address\n  /** Amount to sell */\n  sellAmount: bigint\n  /** Token to buy */\n  buyToken: Address\n  /** Price: buyToken per sellToken (1e18 fixed-point) */\n  rate: bigint\n  /** Required filler ASP (0n = accept any) */\n  requiredFillerAspId?: bigint\n  /** Number of blocks until expiry (from current block) */\n  expiryBlocks: bigint\n}\n\n/**\n * Parameters to fill a swap order\n */\nexport interface SwapFillParams {\n  /** The order to fill */\n  orderId: Hex\n  /** How much sellToken the filler wants (≤ remaining) */\n  takeAmount: bigint\n}\n\n/**\n * Swap order from event log\n */\nexport interface SwapOrderEvent {\n  orderId: Hex\n  sellToken: Address\n  buyToken: Address\n  sellAmount: bigint\n  rate: bigint\n  makerAspId: bigint\n  requiredFillerAspId: bigint\n  expiry: bigint\n  blockNumber: bigint\n  /** On-chain remaining sell amount (populated by useSwapOrderBook) */\n  remainingSellAmount?: bigint\n  /** Whether the order has been claimed */\n  claimed?: boolean\n  /** Whether the order has been cancelled */\n  cancelled?: boolean\n}\n\n/**\n * Swap fill from event log\n */\nexport interface SwapFillEvent {\n  orderId: Hex\n  fillerNullifier: Hex\n  takeAmount: bigint\n  giveAmount: bigint\n  fillerAspId: bigint\n  remainingSellAmount: bigint\n  blockNumber: bigint\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** 1e18 fixed-point precision for swap rates */\nexport const RATE_PRECISION = 10n ** 18n\n\n// ============================================================================\n// Event ABIs (for indexing swap events)\n// ============================================================================\n\nexport const SWAP_ORDER_PLACED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderPlaced',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'sellToken', type: 'address', indexed: true },\n    { name: 'buyToken', type: 'address', indexed: true },\n    { name: 'sellAmount', type: 'uint256', indexed: false },\n    { name: 'rate', type: 'uint256', indexed: false },\n    { name: 'makerAspId', type: 'uint256', indexed: false },\n    { name: 'requiredFillerAspId', type: 'uint256', indexed: false },\n    { name: 'expiry', type: 'uint256', indexed: false },\n  ],\n} as const\n\nexport const SWAP_ORDER_FILLED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderFilled',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'fillerNullifier', type: 'bytes32', indexed: true },\n    { name: 'fillerOutputCommitment', type: 'bytes32', indexed: true },\n    { name: 'takeAmount', type: 'uint256', indexed: false },\n    { name: 'giveAmount', type: 'uint256', indexed: false },\n    { name: 'fillerAspId', type: 'uint256', indexed: false },\n    { name: 'remainingSellAmount', type: 'uint256', indexed: false },\n    { name: 'encryptedFillerNote', type: 'bytes', indexed: false },\n  ],\n} as const\n\nexport const SWAP_ORDER_CLAIMED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderClaimed',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'accumulatedBuyAmount', type: 'uint256', indexed: false },\n    { name: 'refundedSellAmount', type: 'uint256', indexed: false },\n    { name: 'buyOutputCommitment', type: 'bytes32', indexed: false },\n    { name: 'encryptedBuyNote', type: 'bytes', indexed: false },\n    { name: 'refundCommitment', type: 'bytes32', indexed: false },\n    { name: 'encryptedRefundNote', type: 'bytes', indexed: false },\n  ],\n} as const\n\nexport const SWAP_ORDER_CANCELLED_EVENT = {\n  type: 'event',\n  name: 'SwapOrderCancelled',\n  inputs: [\n    { name: 'orderId', type: 'bytes32', indexed: true },\n    { name: 'refundedSellAmount', type: 'uint256', indexed: false },\n    { name: 'refundCommitment', type: 'bytes32', indexed: false },\n    { name: 'encryptedRefundNote', type: 'bytes', indexed: false },\n  ],\n} as const\n\nexport const SWAP_EVENTS_ABI = [\n  SWAP_ORDER_PLACED_EVENT,\n  SWAP_ORDER_FILLED_EVENT,\n  SWAP_ORDER_CLAIMED_EVENT,\n  SWAP_ORDER_CANCELLED_EVENT,\n] as const\n\n// ============================================================================\n// Rate Calculations\n// ============================================================================\n\n/**\n * Compute the giveAmount (buyToken) for a given takeAmount (sellToken) at a rate.\n * giveAmount = (takeAmount * rate) / 1e18\n */\nexport function computeGiveAmount(takeAmount: bigint, rate: bigint): bigint {\n  return (takeAmount * rate) / RATE_PRECISION\n}\n\n/**\n * Compute the maximum takeAmount for a given giveAmount and rate.\n * takeAmount = (giveAmount * 1e18) / rate\n */\nexport function computeTakeAmount(giveAmount: bigint, rate: bigint): bigint {\n  if (rate === 0n) throw new Error('Rate cannot be zero')\n  return (giveAmount * RATE_PRECISION) / rate\n}\n\n/**\n * Compute rate from a desired trade: I want `buyAmount` of buyToken for `sellAmount` of sellToken.\n * rate = (buyAmount * 1e18) / sellAmount\n */\nexport function computeRate(sellAmount: bigint, buyAmount: bigint): bigint {\n  if (sellAmount === 0n) throw new Error('Sell amount cannot be zero')\n  return (buyAmount * RATE_PRECISION) / sellAmount\n}\n\n/**\n * Format a rate for human display.\n * Returns a string like \"0.0005\" for rate = 500000000000000n (0.0005e18)\n */\nexport function formatRate(rate: bigint, decimals: number = 6): string {\n  const whole = rate / RATE_PRECISION\n  const frac = rate % RATE_PRECISION\n  const fracStr = frac.toString().padStart(18, '0').slice(0, decimals)\n  return `${whole}.${fracStr}`\n}\n\n// ============================================================================\n// Cancel Key Management\n// ============================================================================\n\n/**\n * Generate a cancel key hash from a secret.\n * The secret should be a random 32-byte value stored by the maker.\n */\nexport function computeCancelKeyHash(cancelSecret: Hex): Hex {\n  return keccak256(encodeAbiParameters(\n    parseAbiParameters('bytes32'),\n    [cancelSecret]\n  ))\n}\n\n/**\n * Generate a random cancel secret.\n */\nexport function generateCancelSecret(): Hex {\n  const bytes = new Uint8Array(32)\n  crypto.getRandomValues(bytes)\n  return toHex(bytes)\n}\n\n// ============================================================================\n// Order Filtering\n// ============================================================================\n\n/**\n * Filter orders by ASP: only show orders from makers on acceptable ASPs.\n */\nexport function filterOrdersByASP(\n  orders: SwapOrderEvent[],\n  acceptableAspIds: bigint[]\n): SwapOrderEvent[] {\n  const aspSet = new Set(acceptableAspIds.map(id => id.toString()))\n  return orders.filter(o => aspSet.has(o.makerAspId.toString()))\n}\n\n/**\n * Filter orders by token pair.\n */\nexport function filterOrdersByTokenPair(\n  orders: SwapOrderEvent[],\n  sellToken: Address,\n  buyToken: Address\n): SwapOrderEvent[] {\n  const sell = sellToken.toLowerCase()\n  const buy = buyToken.toLowerCase()\n  return orders.filter(\n    o => o.sellToken.toLowerCase() === sell && o.buyToken.toLowerCase() === buy\n  )\n}\n\n/**\n * Check if a filler's ASP is accepted by an order.\n */\nexport function isFillerASPAccepted(order: SwapOrder | SwapOrderEvent, fillerAspId: bigint): boolean {\n  const required = 'requiredFillerAspId' in order ? order.requiredFillerAspId : 0n\n  return required === 0n || required === fillerAspId\n}\n\n// ============================================================================\n// Cancel Secret Persistence (localStorage)\n// ============================================================================\n\nconst CANCEL_SECRET_PREFIX = 'upp_swap_cancel_'\n\nfunction cancelKey(account: string, orderId: Hex): string {\n  return `${CANCEL_SECRET_PREFIX}${account.toLowerCase()}_${orderId}`\n}\n\n/**\n * Store a cancel secret in localStorage, scoped by wallet address.\n * Must be called after placing a swap order.\n */\nexport function storeCancelSecret(orderId: Hex, cancelSecret: Hex, account?: string): void {\n  if (typeof localStorage === 'undefined') return\n  if (account) {\n    localStorage.setItem(cancelKey(account, orderId), cancelSecret)\n  }\n  // Also store unscoped for backward compat\n  localStorage.setItem(`${CANCEL_SECRET_PREFIX}${orderId}`, cancelSecret)\n}\n\n/**\n * Retrieve a cancel secret from localStorage.\n * Returns null if not found (e.g. order was placed by someone else).\n */\nexport function getCancelSecret(orderId: Hex, account?: string): Hex | null {\n  if (typeof localStorage === 'undefined') return null\n  if (account) {\n    const scoped = localStorage.getItem(cancelKey(account, orderId))\n    if (scoped) return scoped as Hex\n  }\n  // Fall back to unscoped key\n  return localStorage.getItem(`${CANCEL_SECRET_PREFIX}${orderId}`) as Hex | null\n}\n\n/**\n * Remove a cancel secret from localStorage (after claim or cancel).\n */\nexport function removeCancelSecret(orderId: Hex, account?: string): void {\n  if (typeof localStorage === 'undefined') return\n  if (account) {\n    localStorage.removeItem(cancelKey(account, orderId))\n  }\n  localStorage.removeItem(`${CANCEL_SECRET_PREFIX}${orderId}`)\n}\n\n/**\n * Get all order IDs for a specific wallet address.\n * Falls back to all cancel secrets if no account provided (backward compat).\n */\nexport function getOwnOrderIds(account?: string): Hex[] {\n  if (typeof localStorage === 'undefined') return []\n  const prefix = account\n    ? `${CANCEL_SECRET_PREFIX}${account.toLowerCase()}_`\n    : CANCEL_SECRET_PREFIX\n  const ids: Hex[] = []\n  for (let i = 0; i < localStorage.length; i++) {\n    const key = localStorage.key(i)\n    if (key?.startsWith(prefix)) {\n      ids.push(key.slice(prefix.length) as Hex)\n    }\n  }\n  return ids\n}\n\n// ============================================================================\n// Order Status Helpers\n// ============================================================================\n\n/**\n * Check if an order is still active (not claimed, not cancelled, not expired).\n */\nexport function isOrderActive(order: SwapOrder, currentBlock: bigint): boolean {\n  return !order.claimed && !order.cancelled && currentBlock <= order.expiry && order.remainingSellAmount > 0n\n}\n\n/**\n * Compute the total buyToken amount the maker would receive for a full fill.\n */\nexport function computeTotalBuyAmount(sellAmount: bigint, rate: bigint): bigint {\n  return computeGiveAmount(sellAmount, rate)\n}\n\n/**\n * Compute fill percentage (0-100) for display.\n */\nexport function computeFillPercentage(order: SwapOrder): number {\n  if (order.sellAmount === 0n) return 0\n  const filled = order.sellAmount - order.remainingSellAmount\n  return Number((filled * 10000n) / order.sellAmount) / 100\n}\n","/**\n * Account Adapter — Pluggable account creation and persistence\n *\n * Abstracts how master keys are derived/loaded/stored.\n * The SDK doesn't care if keys come from a wallet signature,\n * seed phrase, hardware wallet, or external KMS.\n *\n * Persistence is handled via StorageAdapter (IndexedDB, localStorage, etc.)\n */\n\nimport type { MasterKeys, StarkMasterKeys } from '../keys/types.js'\nimport type { StorageAdapter } from '../indexer/types.js'\nimport { toHex } from 'viem'\n\n// ============================================================================\n// Interface\n// ============================================================================\n\n/**\n * Account adapter interface — pluggable key source.\n *\n * Implement this to bring your own key derivation:\n * - StorableAccountAdapter: persists keys via StorageAdapter (built-in)\n * - DirectAccountAdapter: pre-derived keys, no persistence (built-in, for testing)\n * - Custom: seed phrase, hardware wallet, external KMS\n */\nexport interface IAccountAdapter {\n  /** Load persisted keys (returns null if no saved account) */\n  load(): Promise<{ keys: MasterKeys; starkKeys?: StarkMasterKeys } | null>\n  /** Save keys to storage */\n  save(keys: MasterKeys, starkKeys?: StarkMasterKeys): Promise<void>\n  /** Clear persisted keys */\n  clear(): Promise<void>\n}\n\n// ============================================================================\n// Serialization\n// ============================================================================\n\ninterface SerializedAccount {\n  version: 3\n  spendingSecret: string\n  ownerHash: string\n  viewingSecret: string\n  viewingHash: string\n  starkSecret?: string[]\n  starkOwnerHash?: string[]\n  starkViewingSecret?: string[]\n  starkViewingHash?: string[]\n}\n\nfunction serializeAccount(keys: MasterKeys, starkKeys?: StarkMasterKeys): SerializedAccount {\n  return {\n    version: 3,\n    spendingSecret: toHex(keys.spendingSecret, { size: 32 }),\n    ownerHash: toHex(keys.ownerHash, { size: 32 }),\n    viewingSecret: toHex(keys.viewingSecret, { size: 32 }),\n    viewingHash: toHex(keys.viewingHash, { size: 32 }),\n    ...(starkKeys ? {\n      starkSecret: starkKeys.starkSecret.map(v => v.toString()),\n      starkOwnerHash: starkKeys.starkOwnerHash.map(v => v.toString()),\n      starkViewingSecret: starkKeys.starkViewingSecret.map(v => v.toString()),\n      starkViewingHash: starkKeys.starkViewingHash.map(v => v.toString()),\n    } : {}),\n  }\n}\n\nfunction deserializeAccount(data: SerializedAccount): { keys: MasterKeys; starkKeys?: StarkMasterKeys } {\n  if (data.version !== 3 || !data.spendingSecret) {\n    throw new Error('Invalid or outdated account data')\n  }\n\n  const keys: MasterKeys = {\n    spendingSecret: BigInt(data.spendingSecret),\n    ownerHash: BigInt(data.ownerHash),\n    viewingSecret: BigInt(data.viewingSecret),\n    viewingHash: BigInt(data.viewingHash),\n  }\n\n  let starkKeys: StarkMasterKeys | undefined\n  if (data.starkSecret) {\n    starkKeys = {\n      starkSecret: data.starkSecret.map(s => BigInt(s)) as any,\n      starkOwnerHash: data.starkOwnerHash!.map(s => BigInt(s)) as any,\n      starkViewingSecret: data.starkViewingSecret!.map(s => BigInt(s)) as any,\n      starkViewingHash: data.starkViewingHash!.map(s => BigInt(s)) as any,\n    }\n  }\n\n  return { keys, starkKeys }\n}\n\n// ============================================================================\n// StorableAccountAdapter — persists via StorageAdapter\n// ============================================================================\n\n/**\n * Account adapter that persists keys via a pluggable StorageAdapter.\n *\n * Works with IndexedDB, localStorage, memory, Redis, Postgres — anything\n * that implements StorageAdapter.\n *\n * @example\n * ```ts\n * const storage = createAutoAdapter('upp_account')\n * const adapter = new StorableAccountAdapter(storage, ethAddress)\n * const saved = await adapter.load()\n * if (!saved) {\n *   const keys = await deriveKeysFromSignature(sig)\n *   await adapter.save(keys, starkKeys)\n * }\n * ```\n */\nexport class StorableAccountAdapter implements IAccountAdapter {\n  private storageKey: string\n\n  constructor(\n    private storage: StorageAdapter,\n    ethAddress: string,\n  ) {\n    this.storageKey = `account_${ethAddress.toLowerCase()}`\n  }\n\n  async load(): Promise<{ keys: MasterKeys; starkKeys?: StarkMasterKeys } | null> {\n    const data = await this.storage.get<SerializedAccount>(this.storageKey)\n    if (!data) return null\n    try {\n      return deserializeAccount(data)\n    } catch {\n      // Corrupt or outdated — clear it\n      await this.storage.delete(this.storageKey)\n      return null\n    }\n  }\n\n  async save(keys: MasterKeys, starkKeys?: StarkMasterKeys): Promise<void> {\n    const serialized = serializeAccount(keys, starkKeys)\n    await this.storage.set(this.storageKey, serialized)\n  }\n\n  async clear(): Promise<void> {\n    await this.storage.delete(this.storageKey)\n  }\n}\n\n// ============================================================================\n// DirectAccountAdapter — no persistence (testing, KMS)\n// ============================================================================\n\n/**\n * Direct account adapter — accepts pre-derived keys, no persistence.\n *\n * @example\n * ```ts\n * const adapter = new DirectAccountAdapter(masterKeys, starkKeys)\n * ```\n */\nexport class DirectAccountAdapter implements IAccountAdapter {\n  constructor(\n    private keys: MasterKeys,\n    private starkKeys?: StarkMasterKeys,\n  ) {}\n\n  async load() {\n    return { keys: this.keys, starkKeys: this.starkKeys }\n  }\n\n  async save(): Promise<void> {\n    // No-op — keys are in memory only\n  }\n\n  async clear(): Promise<void> {\n    // No-op\n  }\n}\n","/**\n * NoteStore — Single source of truth for note state\n *\n * Framework-agnostic. Uses StorageAdapter for persistence.\n * Handles deduplication, status management, balance calculation.\n *\n * Usage:\n *   const store = new NoteStore(createMemoryAdapter())\n *   await store.load()\n *   store.addNote(note)  // returns false if duplicate\n *   store.getBalance()   // sum of unspent notes\n */\n\nimport type { StorageAdapter } from '../indexer/types.js'\nimport { getAddress } from 'viem'\nimport type { ShieldedNote, NoteStatus, ProofSystem } from './types.js'\n\n// Note: ShieldedNote, NoteStatus, ProofSystem are exported from core/index.ts\n// via `export * from './types.js'`. No re-export here to avoid DTS duplication.\n\n/** Serialized format for storage (bigints as strings) */\ninterface SerializedNote {\n  amount: string\n  blinding: string\n  commitment: string\n  ownerSecret: string\n  ownerHash: string\n  leafIndex: number\n  origin: string\n  token: string\n  txHash?: string\n  status: NoteStatus\n  timestamp: number\n  proofSystem?: ProofSystem\n}\n\nexport interface INoteStore {\n  getNotes(): ShieldedNote[]\n  getUnspentNotes(proofSystem?: ProofSystem): ShieldedNote[]\n  getBalance(token?: string, proofSystem?: ProofSystem): bigint\n  addNote(note: ShieldedNote): boolean\n  addNotes(notes: ShieldedNote[]): number\n  markSpent(commitment: string): void\n  unmarkSpent(commitment: string): void\n  updateLeafIndex(commitment: string, leafIndex: number): void\n  load(): Promise<void>\n  persist(): Promise<void>\n  clear(): Promise<void>\n  onChange(callback: () => void): () => void\n}\n\n// ============================================================================\n// Implementation\n// ============================================================================\n\nexport class NoteStore implements INoteStore {\n  private notes: ShieldedNote[] = []\n  private commitmentSet = new Set<string>()\n  private listeners = new Set<() => void>()\n  private dirty = false\n\n  constructor(\n    private storage: StorageAdapter,\n    private storageKey: string = 'notes',\n  ) {}\n\n  // ---------- Queries ----------\n\n  getNotes(): ShieldedNote[] {\n    return [...this.notes]\n  }\n\n  getUnspentNotes(proofSystem?: ProofSystem): ShieldedNote[] {\n    let result = this.notes.filter(n => n.status !== 'spent')\n    if (proofSystem) {\n      result = result.filter(n => (n.proofSystem ?? 'snark') === proofSystem)\n    }\n    return result\n  }\n\n  getBalance(token?: string, proofSystem?: ProofSystem): bigint {\n    let notes = this.getUnspentNotes(proofSystem)\n    if (token) {\n      const normalized = token.toLowerCase()\n      notes = notes.filter(n => n.token.toLowerCase() === normalized)\n    }\n    return notes.reduce((sum, n) => sum + n.amount, 0n)\n  }\n\n  // ---------- Mutations ----------\n\n  /**\n   * Add a note. Returns false if duplicate (by commitment).\n   * Normalizes token and origin addresses.\n   */\n  addNote(note: ShieldedNote): boolean {\n    const key = note.commitment.toLowerCase()\n    if (this.commitmentSet.has(key)) return false\n\n    // Normalize addresses\n    const normalized: ShieldedNote = {\n      ...note,\n      commitment: note.commitment.toLowerCase(),\n      origin: safeGetAddress(note.origin),\n      token: safeGetAddress(note.token),\n    }\n\n    this.notes.push(normalized)\n    this.commitmentSet.add(key)\n    this.dirty = true\n    this.notify()\n    return true\n  }\n\n  /**\n   * Add multiple notes. Returns count of actually added (non-duplicate).\n   */\n  addNotes(notes: ShieldedNote[]): number {\n    let added = 0\n    for (const note of notes) {\n      if (this.addNote(note)) added++\n    }\n    return added\n  }\n\n  /**\n   * Mark a note as spent (optimistic — syncNotes reconciles via nullifier check).\n   */\n  markSpent(commitment: string): void {\n    const key = commitment.toLowerCase()\n    const note = this.notes.find(n => n.commitment.toLowerCase() === key)\n    if (note && note.status !== 'spent') {\n      note.status = 'spent'\n      this.dirty = true\n      this.notify()\n    }\n  }\n\n  /**\n   * Un-mark a note as spent (reconciliation: nullifier not found on-chain).\n   */\n  unmarkSpent(commitment: string): void {\n    const key = commitment.toLowerCase()\n    const note = this.notes.find(n => n.commitment.toLowerCase() === key)\n    if (note && note.status === 'spent') {\n      note.status = 'confirmed'\n      this.dirty = true\n      this.notify()\n    }\n  }\n\n  /**\n   * Update the leafIndex for a note (e.g., after confirming on-chain).\n   */\n  updateLeafIndex(commitment: string, leafIndex: number): void {\n    const key = commitment.toLowerCase()\n    const note = this.notes.find(n => n.commitment.toLowerCase() === key)\n    if (note && note.leafIndex !== leafIndex) {\n      note.leafIndex = leafIndex\n      this.dirty = true\n      this.notify()\n    }\n  }\n\n  // ---------- Persistence ----------\n\n  async load(): Promise<void> {\n    const serialized = await this.storage.get<SerializedNote[]>(this.storageKey)\n    if (!serialized || !Array.isArray(serialized)) {\n      this.notes = []\n      this.commitmentSet.clear()\n      return\n    }\n\n    // Deduplicate on load — prevents persisted duplicates from propagating\n    this.notes = []\n    this.commitmentSet.clear()\n    let deduped = 0\n    for (const s of serialized) {\n      const note = deserializeNote(s)\n      const key = note.commitment.toLowerCase()\n      if (this.commitmentSet.has(key)) { deduped++; continue }\n      this.commitmentSet.add(key)\n      this.notes.push(note)\n    }\n    if (deduped > 0) {\n      console.log(`[NoteStore] Removed ${deduped} duplicate notes on load`)\n      this.dirty = true // will persist the cleaned version\n    } else {\n      this.dirty = false\n    }\n  }\n\n  async persist(): Promise<void> {\n    if (!this.dirty) return\n    const serialized = this.notes.map(serializeNote)\n    await this.storage.set(this.storageKey, serialized)\n    this.dirty = false\n  }\n\n  async clear(): Promise<void> {\n    this.notes = []\n    this.commitmentSet.clear()\n    this.dirty = false\n    await this.storage.delete(this.storageKey)\n    this.notify()\n  }\n\n  // ---------- Events ----------\n\n  onChange(callback: () => void): () => void {\n    this.listeners.add(callback)\n    return () => this.listeners.delete(callback)\n  }\n\n  private notify(): void {\n    for (const listener of this.listeners) {\n      listener()\n    }\n  }\n}\n\n// ============================================================================\n// Serialization\n// ============================================================================\n\nfunction serializeNote(note: ShieldedNote): SerializedNote {\n  return {\n    ...note,\n    amount: note.amount.toString(),\n    blinding: note.blinding.toString(),\n  }\n}\n\nfunction deserializeNote(s: SerializedNote): ShieldedNote {\n  return {\n    ...s,\n    amount: BigInt(s.amount),\n    blinding: BigInt(s.blinding),\n    proofSystem: s.proofSystem ?? 'snark',\n  }\n}\n\nfunction safeGetAddress(addr: string): string {\n  try {\n    return getAddress(addr)\n  } catch {\n    return addr // return as-is if not a valid address (e.g., bigint-encoded origin)\n  }\n}\n"]}

package/dist/{chunk-DD4NT4D7.js → chunk-CRUJLZV7.js}

@@ -34,7 +34,8 @@ var __default = {
   },
   metadata: {
     chainId: 31337,
-    deployTimestamp: 1774959216,
+    deployBlock: 10562475,
+    deployTimestamp: 1774983913,
     deployer: "0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266"
   }
 };
@@ -365,5 +366,5 @@ function formatOutputForContract(note) {
 }
 
 export { buildTransfer, buildUPPTransferCircuitInputs, computeNullifier, formatOutputForContract, getDeployment, getDeploymentOrThrow, getMerkleProofsForNotes, getSupportedChainIds, getTokenAddress, hasDeployment, registerDeployment, syncMerkleTree };
-//# sourceMappingURL=chunk-DD4NT4D7.js.map
-//# sourceMappingURL=chunk-DD4NT4D7.js.map
+//# sourceMappingURL=chunk-CRUJLZV7.js.map
+//# sourceMappingURL=chunk-CRUJLZV7.js.map

package/dist/chunk-CRUJLZV7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/deployments/31337.json","../src/deployments/11155111.json","../src/deployments/index.ts","../src/core/transfer.ts"],"names":["__default"],"mappings":";;;;;;;AAAA,IAAA,SAAA,GAAA;AAAA,EACE,SAAA,EAAa;AAAA,IACX,cAAA,EAAkB,4CAAA;AAAA,IAClB,oBAAA,EAAwB,4CAAA;AAAA,IACxB,aAAA,EAAiB;AAAA,GACnB;AAAA,EACA,eAAA,EAAmB;AAAA,IACjB,cAAA,EAAkB,4CAAA;AAAA,IAClB,oBAAA,EAAwB,4CAAA;AAAA,IACxB,aAAA,EAAiB;AAAA,GACnB;AAAA,EACA,SAAA,EAAa;AAAA,IACX,QAAA,EAAY,4CAAA;AAAA,IACZ,KAAA,EAAS,4CAAA;AAAA,IACT,QAAA,EAAY,4CAAA;AAAA,IACZ,SAAA,EAAa,4CAAA;AAAA,IACb,gBAAA,EAAoB,4CAAA;AAAA,IACpB,gBAAA,EAAoB;AAAA,GACtB;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,gBAAA,EAAoB;AAAA,GACtB;AAAA,EACA,UAAA,EAAc;AAAA,IACZ,eAAA,EAAmB,4CAAA;AAAA,IACnB,gBAAA,EAAoB;AAAA,GACtB;AAAA,EACA,QAAA,EAAY;AAAA,IACV,OAAA,EAAW,KAAA;AAAA,IACX,WAAA,EAAe,QAAA;AAAA,IACf,eAAA,EAAmB,UAAA;AAAA,IACnB,QAAA,EAAY;AAAA;AAEhB,CAAA;;;ACjCA,IAAAA,UAAAA,GAAA;AAAA,EACE,SAAA,EAAa;AAAA,IACX,cAAA,EAAkB,4CAAA;AAAA,IAClB,oBAAA,EAAwB,4CAAA;AAAA,IACxB,aAAA,EAAiB;AAAA,GACnB;AAAA,EACA,eAAA,EAAmB;AAAA,IACjB,cAAA,EAAkB,4CAAA;AAAA,IAClB,oBAAA,EAAwB,4CAAA;AAAA,IACxB,aAAA,EAAiB;AAAA,GACnB;AAAA,EACA,SAAA,EAAa;AAAA,IACX,QAAA,EAAY,4CAAA;AAAA,IACZ,KAAA,EAAS,4CAAA;AAAA,IACT,QAAA,EAAY,4CAAA;AAAA,IACZ,SAAA,EAAa,4CAAA;AAAA,IACb,gBAAA,EAAoB,4CAAA;AAAA,IACpB,gBAAA,EAAoB;AAAA,GACtB;AAAA,EACA,cAAA,EAAkB;AAAA,IAChB,gBAAA,EAAoB,4CAAA;AAAA,IACpB,gBAAA,EAAoB;AAAA,GACtB;AAAA,EACA,UAAA,EAAc;AAAA,IACZ,eAAA,EAAmB,4CAAA;AAAA,IACnB,gBAAA,EAAoB;AAAA,GACtB;AAAA,EACA,QAAA,EAAY;AAAA,IACV,OAAA,EAAW,QAAA;AAAA,IACX,WAAA,EAAe,QAAA;AAAA,IACf,eAAA,EAAmB,UAAA;AAAA,IACnB,QAAA,EAAY;AAAA;AAEhB,CAAA;;;ACsFA,SAAS,eAAA,CACP,MACA,OAAA,EACkB;AAClB,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,SAAA,IAAa,EAAC;AACrC,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,SAAA,IAAa,EAAC;AAClC,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,UAAA,IAAc,EAAC;AAEvC,EAAA,OAAO;AAAA,IACL,sBAAsB,SAAA,CAAU,oBAAA;AAAA,IAChC,gBAAgB,SAAA,CAAU,cAAA;AAAA,IAC1B,eAAe,SAAA,CAAU,aAAA;AAAA,IACzB,eAAA,EAAiB,KAAK,eAAA,GAClB;AAAA,MACE,oBAAA,EAAsB,KAAK,eAAA,CAAgB,oBAAA;AAAA,MAC3C,cAAA,EAAgB,KAAK,eAAA,CAAgB,cAAA;AAAA,MACrC,aAAA,EAAe,KAAK,eAAA,CAAgB;AAAA,KACtC,GACA,MAAA;AAAA,IACJ,WAAW,UAAA,CAAW,eAAA;AAAA,IACtB,YAAY,UAAA,CAAW,gBAAA;AAAA,IACvB,SAAA,EAAW;AAAA,MACT,QAAA,EAAW,MAAA,CAAO,QAAA,IAAY,MAAA,CAAO,gBAAA;AAAA,MACrC,KAAA,EAAQ,MAAA,CAAO,KAAA,IAAS,MAAA,CAAO,aAAA;AAAA,MAC/B,QAAA,EAAW,MAAA,CAAO,QAAA,IAAY,MAAA,CAAO,gBAAA;AAAA,MACrC,SAAA,EAAY,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,iBAAA;AAAA,MACvC,gBAAA,EAAmB,MAAA,CAAO,gBAAA,IAAoB,MAAA,CAAO,wBAAA;AAAA,MACrD,gBAAA,EAAmB,MAAA,CAAO,gBAAA,IAAoB,MAAA,CAAO;AAAA,KACvD;AAAA,IACA,cAAA,EAAgB,KAAK,cAAA,GACjB;AAAA,MACE,mBAAA,EAAqB,KAAK,cAAA,CAAe;AAAA,KAC3C,GACA,MAAA;AAAA,IACJ,OAAA;AAAA,IACA,WAAA,EAAa,IAAA,CAAK,QAAA,EAAU,WAAA,IAAe,CAAA;AAAA,IAC3C,eAAA,EAAiB,KAAK,QAAA,EAAU;AAAA,GAClC;AACF;AAOA,IAAM,WAAA,GAAgD;AAAA,EACpD,KAAA,EAAO,eAAA,CAAgB,SAAA,EAAoC,KAAK,CAAA;AAAA,EAChE,QAAA,EAAU,eAAA,CAAgBA,UAAAA,EAAsC,QAAQ;AAC1E,CAAA;AAgBO,SAAS,cAAc,OAAA,EAA0C;AACtE,EAAA,OAAO,WAAA,CAAY,OAAO,CAAA,IAAK,IAAA;AACjC;AASO,SAAS,qBAAqB,OAAA,EAAmC;AACtE,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,UAAA,EAAY;AACf,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,8BAAA,EAAiC,OAAO,CAAA,oBAAA,EACjB,MAAA,CAAO,KAAK,WAAW,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAC5D;AAAA,EACF;AACA,EAAA,OAAO,UAAA;AACT;AAKO,SAAS,cAAc,OAAA,EAA0B;AACtD,EAAA,OAAO,OAAA,IAAW,WAAA;AACpB;AAKO,SAAS,oBAAA,GAAiC;AAC/C,EAAA,OAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAA,CAAE,IAAI,MAAM,CAAA;AAC5C;AAKO,SAAS,gBAAgB,OAAA,EAAiC;AAC/D,EAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,EAAA,IAAI,CAAC,YAAY,OAAO,IAAA;AACxB,EAAA,OAAO,WAAW,SAAA,IAAa,IAAA;AACjC;AAmBO,SAAS,kBAAA,CAAmB,SAAiB,MAAA,EAAgC;AAClF,EAAA,WAAA,CAAY,OAAO,CAAA,GAAI,EAAE,GAAG,QAAQ,OAAA,EAAQ;AAC9C;;;AC7OA,aAAA,EAAA;AAiHA,IAAM,cAAA,GAAiB,KAAA;AAQvB,SAAS,mBAAA,CAAuB,KAAU,QAAA,EAAkB;AAC1D,EAAA,IAAI,GAAA,CAAI,UAAU,gBAAA,EAAkB;AAClC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,gBAAgB,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAM,gBAAA,GAAmB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACxE;AAQA,SAAS,iBAAA,CAAqB,KAAU,QAAA,EAAkB;AACxD,EAAA,IAAI,GAAA,CAAI,UAAU,cAAA,EAAgB;AAChC,IAAA,OAAO,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,cAAc,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,CAAC,GAAG,GAAA,EAAK,GAAG,KAAA,CAAM,cAAA,GAAiB,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAC,CAAA;AACtE;AAOA,IAAM,yBAAA,GAA4B;AAAA,EAChC,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,oBAAA;AAAA,EACN,MAAA,EAAQ;AAAA,IACN,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,YAAA,EAAc,SAAS,IAAA,EAAK;AAAA,IACrD,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA,EAAY;AAAA,IACrC,EAAE,IAAA,EAAM,SAAA,EAAW,IAAA,EAAM,WAAA;AAAY;AAEzC,CAAA;AAaA,eAAsB,cAAA,CACpB,cACA,eAAA,EACyE;AACzE,EAAA,MAAM,YAAA,GAAe,MAAM,YAAA,CAAa,cAAA,EAAe;AACvD,EAAA,MAAM,OAAA,GAAU,MAAM,YAAA,CAAa,UAAA,EAAW;AAK9C,EAAA,IAAI,iBAAwB,EAAC;AAE7B,EAAA,IAAI,YAAY,KAAA,EAAO;AAErB,IAAA,cAAA,GAAiB,MAAM,aAAa,OAAA,CAAQ;AAAA,MAC1C,OAAA,EAAS,eAAA;AAAA,MACT,KAAA,EAAO,yBAAA;AAAA,MACP,SAAA,EAAW;AAAA,KACZ,CAAA;AAAA,EACH,CAAA,MAAO;AAEL,IAAA,MAAM,UAAA,GAAa,cAAc,OAAO,CAAA;AACxC,IAAA,IAAI,YAAY,UAAA,EAAY,WAAA,GAAc,MAAA,CAAO,UAAA,CAAW,WAAW,CAAA,GAAI,EAAA;AAC3E,IAAA,OAAA,CAAQ,IAAI,CAAA,uBAAA,EAA0B,OAAO,yBAAyB,SAAS,CAAA,IAAA,EAAO,YAAY,CAAA,CAAE,CAAA;AAEpG,IAAA,OAAO,aAAa,YAAA,EAAc;AAChC,MAAA,MAAM,OAAA,GACJ,SAAA,GAAY,cAAA,GAAiB,YAAA,GAAe,eAAe,SAAA,GAAY,cAAA;AACzE,MAAA,MAAM,KAAA,GAAQ,MAAM,YAAA,CAAa,OAAA,CAAQ;AAAA,QACvC,OAAA,EAAS,eAAA;AAAA,QACT,KAAA,EAAO,yBAAA;AAAA,QACP,SAAA;AAAA,QACA;AAAA,OACD,CAAA;AACD,MAAA,cAAA,GAAiB,cAAA,CAAe,OAAO,KAAK,CAAA;AAC5C,MAAA,SAAA,GAAY,OAAA,GAAU,EAAA;AAAA,IACxB;AAAA,EACF;AAGA,EAAA,cAAA,CAAe,IAAA,CAAK,CAAC,CAAA,EAAQ,CAAA,KAAW;AACtC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,MAAM,IAAA,GAAO,MAAA,CAAO,CAAA,CAAE,IAAA,CAAK,SAAU,CAAA;AACrC,IAAA,OAAO,IAAA,GAAO,IAAA;AAAA,EAChB,CAAC,CAAA;AAGD,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,KAAA,MAAW,OAAO,cAAA,EAAgB;AAChC,IAAA,MAAM,SAAA,GAAY,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,SAAU,CAAA;AAC5C,IAAA,MAAM,UAAA,GAAa,MAAA,CAAO,GAAA,CAAI,IAAA,CAAK,UAAW,CAAA;AAE9C,IAAA,IAAI,MAAA,CAAO,WAAW,SAAA,EAAW;AAC/B,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN,CAAA,6CAAA,EAAgD,MAAA,CAAO,MAAM,CAAA,eAAA,EAAkB,SAAS,CAAA,2CAAA;AAAA,OAE1F;AAAA,IACF;AACA,IAAA,MAAA,CAAO,KAAK,UAAU,CAAA;AAAA,EACxB;AAEA,EAAA,MAAM,IAAA,GAAO,gBAAgB,MAAM,CAAA;AAGnC,EAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,OAAA,EAAQ;AACnC,EAAA,MAAM,WAAA,GAAe,MAAM,YAAA,CAAa,YAAA,CAAa;AAAA,IACnD,OAAA,EAAS,eAAA;AAAA,IACT,GAAA,EAAK;AAAA,MACH;AAAA,QACE,IAAA,EAAM,UAAA;AAAA,QACN,IAAA,EAAM,eAAA;AAAA,QACN,QAAQ,EAAC;AAAA,QACT,OAAA,EAAS,CAAC,EAAE,IAAA,EAAM,WAAW,CAAA;AAAA,QAC7B,eAAA,EAAiB;AAAA;AACnB,KACF;AAAA,IACA,YAAA,EAAc;AAAA,GACf,CAAA;AAED,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,+BAAA,EAAkC,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAC7D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,6BAAA,EAAgC,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AACxD,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oCAAA,EAAuC,OAAO,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,gCAAA,EAAmC,WAAW,CAAA,CAAE,CAAA;AAC5D,EAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8BAAA,EAAiC,OAAA,KAAY,WAAW,CAAA,CAAE,CAAA;AAEtE,EAAA,IAAI,YAAY,WAAA,EAAa;AAC3B,IAAA,OAAA,CAAQ,IAAI,CAAA,wCAAA,CAA0C,CAAA;AACtD,IAAA,OAAA,CAAQ,GAAA;AAAA,MACN,CAAA,wBAAA,CAAA;AAAA,MACA,MAAA,CAAO,IAAI,CAAC,CAAA,KAAM,OAAO,CAAA,CAAE,QAAA,CAAS,EAAE,CAAC;AAAA,KACzC;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,MAAM,MAAA,EAAO;AACxB;AAUA,eAAsB,uBAAA,CACpB,KAAA,EACA,MAAA,EACA,IAAA,EACgC;AAChC,EAAA,MAAM,EAAE,iBAAA,EAAkB,GAAI,MAAM,OAAO,sBAAoB,CAAA;AAC/D,EAAA,MAAM,SAAgC,EAAC;AAEvC,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,MAAM,YAAA,GAAe,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC3C,IAAA,MAAM,YAAY,MAAA,CAAO,SAAA,CAAU,CAAC,CAAA,KAAM,MAAM,YAAY,CAAA;AAE5D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,IAAA,CAAK,UAAU,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,qDAAA,EAAwD,YAAY,CAAA,CAAE,CAAA;AAClF,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,8CAAA,EAAiD,SAAS,CAAA,CAAE,CAAA;AACxE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,mDAAA,EAAsD,IAAA,CAAK,SAAS,CAAA,CAAE,CAAA;AAElF,IAAA,IAAI,cAAc,EAAA,EAAI;AACpB,MAAA,OAAA,CAAQ,GAAA,CAAI,6CAA6C,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AACxF,MAAA,MAAM,IAAI,MAAM,CAAA,KAAA,EAAQ,IAAA,CAAK,WAAW,KAAA,CAAM,CAAA,EAAG,EAAE,CAAC,CAAA,sBAAA,CAAwB,CAAA;AAAA,IAC9E;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA;AAE3C,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,EAAyC,KAAA,CAAM,IAAI,CAAA,CAAE,CAAA;AACjE,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,2CAAA,EAA8C,KAAA,CAAM,SAAS,CAAA,CAAE,CAAA;AAC3E,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,uCAAA,CAAA,EAA2C,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,EAAU,CAAC,CAAA;AAClG,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,CAAA,EAA0C,KAAA,CAAM,WAAW,CAAA;AAGvE,IAAA,MAAM,OAAA,GAAU,MAAM,iBAAA,CAAkB,YAAA,EAAc,KAAK,CAAA;AAC3D,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oDAAA,EAAuD,OAAO,CAAA,CAAE,CAAA;AAE5E,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAA,CAAQ,MAAM,CAAA,2DAAA,CAA6D,CAAA;AAAA,IAC7E;AAEA,IAAA,MAAA,CAAO,IAAA,CAAK,EAAE,KAAA,EAAO,IAAA,EAAM,EAAE,GAAG,IAAA,EAAM,SAAA,EAAU,EAAG,CAAA;AAAA,EACrD;AAEA,EAAA,OAAO,MAAA;AACT;AAgBA,eAAsB,gBAAA,CACpB,WAAA,EACA,SAAA,EACA,UAAA,EACiB;AACjB,EAAA,OAAO,MAAM,SAAS,CAAC,WAAA,EAAa,OAAO,SAAS,CAAA,EAAG,UAAU,CAAC,CAAA;AACpE;AAkBA,eAAsB,6BAAA,CACpB,SAAA,EACA,QAAA,EACA,aAAA,EACA,UAAA,EACmC;AACnC,EAAA,MAAM,EAAE,KAAA,EAAO,IAAA,EAAK,GAAI,SAAA;AAGxB,EAAA,MAAM,cAAA,GAAiB,gBAAA,CAAkB,MAAA,CAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAIjE,EAAA,MAAM,oBAAA,GAAuB,qBAAA;AAAA,IAC3B,IAAA,CAAK,MAAA;AAAA,IACL,cAAA;AAAA,IACA,IAAA,CAAK,QAAA;AAAA,IACL,IAAA,CAAK,MAAA;AAAA,IACL,IAAA,CAAK;AAAA,GACP;AAEA,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,IAAA,CAAK,UAAU,CAAA;AAC/C,EAAA,IAAI,yBAAyB,gBAAA,EAAkB;AAC7C,IAAA,OAAA,CAAQ,MAAM,CAAA,mDAAA,CAAqD,CAAA;AACnE,IAAA,OAAA,CAAQ,MAAM,CAAA,UAAA,EAAa,IAAA,CAAK,MAAM,CAAA,aAAA,EAAgB,cAAc,CAAA,CAAE,CAAA;AACtE,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,YAAA,EAAe,IAAA,CAAK,QAAQ,CAAA,UAAA,EAAa,KAAK,MAAM,CAAA,SAAA,EAAY,IAAA,CAAK,KAAK,CAAA,CAAE,CAAA;AAC1F,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,QAAA,EAAW,oBAAoB,CAAA,SAAA,EAAY,gBAAgB,CAAA,CAAE,CAAA;AAC3E,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,2JAAA;AAAA,KAEF;AAAA,EACF;AAEA,EAAA,MAAM,YAAY,MAAM,gBAAA;AAAA,IACtB,MAAA,CAAO,KAAK,WAAW,CAAA;AAAA,IACvB,KAAA,CAAM,SAAA;AAAA,IACN,MAAA,CAAO,KAAK,UAAU;AAAA,GACxB;AAEA,EAAA,OAAO;AAAA;AAAA,IAEL,SAAA,EAAW,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAAA,IAC5B,OAAA,EAAS,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA;AAAA,IAChC,SAAA,EAAW,OAAO,SAAS,CAAA;AAAA,IAC3B,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,UAAU,CAAA;AAAA,IAClD,iBAAA,EAAmB,MAAA,CAAO,UAAA,CAAW,UAAU,CAAA;AAAA,IAC/C,KAAA,EAAO,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA;AAAA;AAAA,IAGxB,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,kBAAA,EAAoB,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,WAAW,CAAC,CAAA;AAAA,IACnD,aAAA,EAAe,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAA;AAAA,IACnC,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA;AAAA,IAC/B,cAAA,EAAgB,MAAA,CAAO,KAAA,CAAM,SAAS,CAAA;AAAA,IACtC,iBAAA,EAAmB,mBAAA,CAAoB,KAAA,CAAM,YAAA,CAAa,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACpF,kBAAkB,mBAAA,CAAoB,KAAA,CAAM,YAAY,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAGxE,eAAA,EAAiB,iBAAA,CAAkB,QAAA,CAAS,eAAA,CAAgB,GAAA,CAAI,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAC,CAAA,EAAG,GAAG,CAAA;AAAA,IACtF,gBAAgB,iBAAA,CAAkB,QAAA,CAAS,eAAe,GAAA,CAAI,MAAM,GAAG,GAAG,CAAA;AAAA;AAAA,IAG1E,aAAA,EAAe,MAAA,CAAO,aAAA,CAAc,MAAM,CAAA;AAAA,IAC1C,gBAAA,EAAkB,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IAChD,eAAA,EAAiB,MAAA,CAAO,aAAA,CAAc,QAAQ,CAAA;AAAA,IAE9C,aAAA,EAAe,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA;AAAA,IACvC,gBAAA,EAAkB,MAAA,CAAO,UAAA,CAAW,SAAS,CAAA;AAAA,IAC7C,eAAA,EAAiB,MAAA,CAAO,UAAA,CAAW,QAAQ;AAAA,GAC7C;AACF;AAqBA,eAAsB,aAAA,CACpB,GAAA,EACA,YAAA,EACA,aAAA,EACA,YACA,aAAA,EAC8B;AAE9B,EAAA,aAAA,GAAgB,gBAAgB,CAAA;AAChC,EAAA,MAAM,EAAE,MAAM,MAAA,EAAO,GAAI,MAAM,cAAA,CAAe,GAAA,CAAI,YAAA,EAAc,GAAA,CAAI,eAAe,CAAA;AAGnF,EAAA,MAAM,aAAa,MAAM,uBAAA,CAAwB,CAAC,YAAY,CAAA,EAAG,QAAQ,IAAI,CAAA;AAC7E,EAAA,MAAM,SAAA,GAAY,WAAW,CAAC,CAAA;AAG9B,EAAA,MAAM,WAAW,MAAM,gBAAA;AAAA,IACrB,IAAI,KAAA,IAAS,WAAA;AAAA,IACb,YAAA,CAAa,MAAA;AAAA,IACb,GAAA,CAAI;AAAA,GACN;AAGA,EAAA,aAAA,GAAgB,kBAAkB,CAAA;AAElC,EAAA,MAAM,gBAAgB,MAAM,6BAAA;AAAA,IAC1B,SAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,EAAE,KAAA,EAAM,GAAI,MAAM,gBAAA;AAAA,IACtB,UAAA;AAAA,IACA,aAAA;AAAA,IACA,IAAI,cAAA,IAAkB;AAAA,GACxB;AAEA,EAAA,MAAM,cAAA,GAAiB,MAAM,2BAAA,CAA4B,KAAK,CAAA;AAE9D,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,UAAA;AAAA,IACT,KAAA,EAAO,cAAA;AAAA,IACP,eAAe,KAAA,CAAM,aAAA;AAAA,IACrB,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,OAAA,EAAS,MAAA,CAAO,aAAA,CAAc,OAAO,CAAA;AAAA,IACrC,SAAA,EAAW,MAAA,CAAO,aAAA,CAAc,SAAS,CAAA;AAAA,IACzC,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,iBAAA,EAAmB,MAAA,CAAO,aAAA,CAAc,iBAAiB,CAAA;AAAA,IACzD,KAAA,EAAO,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA;AAAA,IACjC,eAAA,EAAiB,aAAA;AAAA,IACjB,YAAA,EAAc,UAAA;AAAA,IACd,UAAA,EAAY,CAAC,YAAY;AAAA,GAC3B;AACF;AAKO,SAAS,wBAAwB,IAAA,EAKtC;AACA,EAAA,OAAO;AAAA,IACL,YAAY,KAAA,CAAM,IAAA,CAAK,YAAY,EAAE,IAAA,EAAM,IAAI,CAAA;AAAA,IAC/C,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,WAAW,IAAA,CAAK,SAAA;AAAA,IAChB,eAAe,IAAA,CAAK;AAAA,GACtB;AACF","file":"chunk-CRUJLZV7.js","sourcesContent":["{\n  \"contracts\": {\n    \"ASPRegistryHub\": \"0x9708CfDCa7AA4d282888B43f70ff11Fc869431f1\",\n    \"UniversalPrivatePool\": \"0x4bC6d44f8a706276216AA2d2F5F726939B945690\",\n    \"UPPSwapModule\": \"0x3289135f1e5990BA93932924090BA9F6354EeBe0\"\n  },\n  \"implementations\": {\n    \"ASPRegistryHub\": \"0xdcD8A9D39E4305187A45Bf9208A83233D2654e87\",\n    \"UniversalPrivatePool\": \"0xB99A51eFb2fdF83243C383a5CDdF803D8dDFc5ea\",\n    \"UPPSwapModule\": \"0xd81a856940FaC8B24875855F26087c532B80BABc\"\n  },\n  \"verifiers\": {\n    \"Transfer\": \"0xFF1574526DC526c0ca271cFF6541e0e28f1547cB\",\n    \"Merge\": \"0x9E111a0d8c99b86738bCeBf5aFC0Db159244C7b7\",\n    \"Withdraw\": \"0x4D8397464bF23B3b38E31636f94FC4C1A7139a44\",\n    \"JoinSplit\": \"0x311788765A9C37AbBe2522EE7dE25Da41724aD75\",\n    \"MergeTransfer2x2\": \"0x6bC3217Cc933c55EFf5951f4022c8a9dDB4F4023\",\n    \"MergeTransfer4x2\": \"0xD4aA8Dc4B38673142C9b082b57c193eBB3690C37\"\n  },\n  \"starkVerifiers\": {\n    \"WithdrawVerifier\": \"0xa131A62B7AF5C81BfbdbA708750Fc378e3353B42\",\n    \"TransferVerifier\": \"0x6aB434B061D3EaAfF7d704DCcd2d137966212daC\"\n  },\n  \"testTokens\": {\n    \"TestStableToken\": \"0x10a1a550AC27b94dD9aEA65f097177de02f67cAf\",\n    \"TestStableToken2\": \"0x2Fe988cea5E2683EBCFF0Ba1861002FBB265b695\"\n  },\n  \"metadata\": {\n    \"chainId\": 31337,\n    \"deployBlock\": 10562475,\n    \"deployTimestamp\": 1774983913,\n    \"deployer\": \"0xf39Fd6e51aad88F6F4ce6aB8827279cffFb92266\"\n  }\n}","{\n  \"contracts\": {\n    \"ASPRegistryHub\": \"0xA85d9766C794B97d1463Ba6D5734a27C65A958Da\",\n    \"UniversalPrivatePool\": \"0xD493b0651C285a60cae3c45035D0Fd58AC274BC9\",\n    \"UPPSwapModule\": \"0x5a626e9b119A6f8DF1Dcc161F5b95Da9F93dB963\"\n  },\n  \"implementations\": {\n    \"ASPRegistryHub\": \"0xdcD8A9D39E4305187A45Bf9208A83233D2654e87\",\n    \"UniversalPrivatePool\": \"0xB99A51eFb2fdF83243C383a5CDdF803D8dDFc5ea\",\n    \"UPPSwapModule\": \"0xd81a856940FaC8B24875855F26087c532B80BABc\"\n  },\n  \"verifiers\": {\n    \"Transfer\": \"0x3755b4fA8Ee882311aB8FaB8Fd5BFecc355fF35B\",\n    \"Merge\": \"0xE115B76eAff5Ba63F8018c182BF7824af7fC7431\",\n    \"Withdraw\": \"0xB7FC84975066493fD3962c3c79e4c073BeaD090a\",\n    \"JoinSplit\": \"0xFF2c3c620C6047da8d53e137C573E4738D2005e0\",\n    \"MergeTransfer2x2\": \"0x347301A2DC42Cbf1386509f716a24d677D8599c8\",\n    \"MergeTransfer4x2\": \"0x7F5cc8a714Ae9461B95EFDcaA85494F4251ebc0F\"\n  },\n  \"starkVerifiers\": {\n    \"WithdrawVerifier\": \"0xB8C307D74dAeBe816839BB891b16aCfc01253241\",\n    \"TransferVerifier\": \"0x172960000Eed4A280Ac6cAecD318aBF2E0517734\"\n  },\n  \"testTokens\": {\n    \"TestStableToken\": \"0x8369F7dBdd1835410d421D1dD732346106ebc872\",\n    \"TestStableToken2\": \"0xE721b1746be10C5D751a6cc44748F00654630Cb7\"\n  },\n  \"metadata\": {\n    \"chainId\": 11155111,\n    \"deployBlock\": 10560423,\n    \"deployTimestamp\": 1774958844,\n    \"deployer\": \"0xdEadDEADb916b00D02f4f2db062Fb2C47fe0689b\"\n  }\n}","/**\n * Deployment Configuration Loader\n *\n * Loads contract addresses based on chain ID.\n * Built-in: Anvil (31337) and Sepolia (11155111).\n * Custom chains can be registered at runtime via registerDeployment().\n */\n\nimport type { Address } from \"viem\";\n\n/**\n * Verifier contract addresses\n */\nexport interface VerifierAddresses {\n  Transfer: Address;\n  Merge: Address;\n  Withdraw: Address;\n  JoinSplit?: Address;\n  MergeTransfer2x2?: Address;\n  MergeTransfer4x2?: Address;\n  /** @deprecated Use `Transfer` */\n  TransferVerifier?: Address;\n  /** @deprecated Use `Merge` */\n  MergeVerifier?: Address;\n  /** @deprecated Use `Withdraw` */\n  WithdrawVerifier?: Address;\n}\n\n/**\n * STARK verifier contract addresses\n */\nexport interface StarkVerifierAddresses {\n  CircleStarkVerifier?: Address;\n}\n\n/**\n * Implementation addresses for UUPS proxies (for upgrade verification)\n */\nexport interface ImplementationAddresses {\n  UniversalPrivatePool?: Address;\n  ASPRegistryHub?: Address;\n  UPPSwapModule?: Address;\n}\n\n/**\n * Deployment configuration for a chain\n */\nexport interface DeploymentConfig {\n  /** Universal Private Pool contract address (proxy) */\n  UniversalPrivatePool: Address;\n  /** ASP Registry Hub contract address (proxy) */\n  ASPRegistryHub: Address;\n  /** UPP Swap Module contract address (proxy) */\n  UPPSwapModule?: Address;\n  /** Implementation addresses for UUPS proxies */\n  implementations?: ImplementationAddresses;\n  /** Test token address (local/testnet) */\n  TestToken?: Address;\n  /** Test token 2 address — bonding curve token (local/testnet) */\n  TestToken2?: Address;\n  /** Verifier contract addresses */\n  verifiers: VerifierAddresses;\n  /** STARK verifier contract addresses */\n  starkVerifiers?: StarkVerifierAddresses;\n  /** Chain ID */\n  chainId: number;\n  /** Block number when contracts were deployed (for efficient scanning) */\n  deployBlock: number;\n  /** Timestamp when contracts were deployed */\n  deployTimestamp?: number;\n}\n\n/**\n * Raw JSON file format (without chainId, which is added dynamically)\n */\ninterface DeploymentJSON {\n  contracts?: {\n    UniversalPrivatePool?: string;\n    ASPRegistryHub?: string;\n    UPPSwapModule?: string;\n  };\n  implementations?: {\n    UniversalPrivatePool?: string;\n    ASPRegistryHub?: string;\n    UPPSwapModule?: string;\n  };\n  testTokens?: {\n    TestStableToken?: string;\n    TestStableToken2?: string;\n  };\n  verifiers?: {\n    Transfer?: string;\n    Merge?: string;\n    Withdraw?: string;\n    JoinSplit?: string;\n    MergeTransfer2x2?: string;\n    MergeTransfer4x2?: string;\n    TransferVerifier?: string;\n    MergeVerifier?: string;\n    WithdrawVerifier?: string;\n    JoinSplitVerifier?: string;\n    MergeTransfer2x2Verifier?: string;\n    MergeTransfer4x2Verifier?: string;\n  };\n  starkVerifiers?: {\n    CircleStarkVerifier?: string;\n    WithdrawVerifier?: string;\n    TransferVerifier?: string;\n  };\n  metadata?: {\n    chainId?: number;\n    deployBlock?: number;\n    deployTimestamp?: number;\n  };\n}\n\n/**\n * Parse raw deployment JSON into typed config\n */\nfunction parseDeployment(\n  json: DeploymentJSON,\n  chainId: number\n): DeploymentConfig {\n  const contracts = json.contracts || {};\n  const verifs = json.verifiers || {};\n  const testTokens = json.testTokens || {};\n\n  return {\n    UniversalPrivatePool: contracts.UniversalPrivatePool as Address,\n    ASPRegistryHub: contracts.ASPRegistryHub as Address,\n    UPPSwapModule: contracts.UPPSwapModule as Address | undefined,\n    implementations: json.implementations\n      ? {\n          UniversalPrivatePool: json.implementations.UniversalPrivatePool as Address | undefined,\n          ASPRegistryHub: json.implementations.ASPRegistryHub as Address | undefined,\n          UPPSwapModule: json.implementations.UPPSwapModule as Address | undefined,\n        }\n      : undefined,\n    TestToken: testTokens.TestStableToken as Address | undefined,\n    TestToken2: testTokens.TestStableToken2 as Address | undefined,\n    verifiers: {\n      Transfer: (verifs.Transfer || verifs.TransferVerifier) as Address,\n      Merge: (verifs.Merge || verifs.MergeVerifier) as Address,\n      Withdraw: (verifs.Withdraw || verifs.WithdrawVerifier) as Address,\n      JoinSplit: (verifs.JoinSplit || verifs.JoinSplitVerifier) as Address | undefined,\n      MergeTransfer2x2: (verifs.MergeTransfer2x2 || verifs.MergeTransfer2x2Verifier) as Address | undefined,\n      MergeTransfer4x2: (verifs.MergeTransfer4x2 || verifs.MergeTransfer4x2Verifier) as Address | undefined,\n    },\n    starkVerifiers: json.starkVerifiers\n      ? {\n          CircleStarkVerifier: json.starkVerifiers.CircleStarkVerifier as Address | undefined,\n        }\n      : undefined,\n    chainId,\n    deployBlock: json.metadata?.deployBlock ?? 0,\n    deployTimestamp: json.metadata?.deployTimestamp,\n  };\n}\n\n// Import deployment configs\n// These will be updated by the extract-deployment.js script\nimport anvil from \"./31337.json\" with { type: \"json\" };\nimport sepolia from \"./11155111.json\" with { type: \"json\" };\n\nconst deployments: Record<number, DeploymentConfig> = {\n  31337: parseDeployment(anvil as unknown as DeploymentJSON, 31337),\n  11155111: parseDeployment(sepolia as unknown as DeploymentJSON, 11155111),\n};\n\n/**\n * Get deployment config for a chain\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config or null if not found\n *\n * @example\n * ```ts\n * const deployment = getDeployment(31337)\n * if (deployment) {\n *   console.log('Pool address:', deployment.UniversalPrivatePool)\n * }\n * ```\n */\nexport function getDeployment(chainId: number): DeploymentConfig | null {\n  return deployments[chainId] ?? null;\n}\n\n/**\n * Get deployment config or throw if not found\n *\n * @param chainId - Chain ID to get deployment for\n * @returns Deployment config\n * @throws Error if deployment not found\n */\nexport function getDeploymentOrThrow(chainId: number): DeploymentConfig {\n  const deployment = getDeployment(chainId);\n  if (!deployment) {\n    throw new Error(\n      `No deployment found for chain ${chainId}. ` +\n        `Supported chains: ${Object.keys(deployments).join(\", \")}`\n    );\n  }\n  return deployment;\n}\n\n/**\n * Check if a chain has a deployment\n */\nexport function hasDeployment(chainId: number): boolean {\n  return chainId in deployments;\n}\n\n/**\n * Get all supported chain IDs\n */\nexport function getSupportedChainIds(): number[] {\n  return Object.keys(deployments).map(Number);\n}\n\n/**\n * Get the token address for a chain\n */\nexport function getTokenAddress(chainId: number): Address | null {\n  const deployment = getDeployment(chainId);\n  if (!deployment) return null;\n  return deployment.TestToken ?? null;\n}\n\n/**\n * Register a deployment for a custom chain at runtime.\n *\n * Use this when deploying your own pool on a chain not built into the SDK.\n * Overrides any existing deployment for the same chainId.\n *\n * @example\n * ```ts\n * registerDeployment(8453, {\n *   UniversalPrivatePool: '0x...',\n *   ASPRegistryHub: '0x...',\n *   verifiers: { Transfer: '0x...', Merge: '0x...', Withdraw: '0x...' },\n *   chainId: 8453,\n *   deployBlock: 12345678,\n * })\n * ```\n */\nexport function registerDeployment(chainId: number, config: DeploymentConfig): void {\n  deployments[chainId] = { ...config, chainId };\n}\n","/**\n * Transfer Module\n *\n * Core logic for building and executing UPP transfers.\n * This module is framework-agnostic (no React).\n */\n\nimport { toHex, type Address, type Hex, type PublicClient } from 'viem'\nimport { getDeployment } from '../deployments/index.js'\nimport { buildMerkleTree, type MerkleProof } from '../utils/merkle.js'\nimport { poseidon, computeOwnerHash as poseidonOwnerHash, computeNoteCommitment } from '../utils/poseidon.js'\nimport {\n  generateUPPProof,\n  formatPlonkProofForContract,\n  STATE_TREE_DEPTH,\n  ASP_TREE_DEPTH,\n  type UPPCircuitType,\n  type UPPTransferCircuitInputs,\n  type PlonkProofStruct,\n} from './proof.js'\nimport { generateASPProof, type ASPProof } from './asp.js'\nimport type { NoteCreationResult } from '../react/use-upp-account.js'\n\n// ============================================================================\n// Types\n// ============================================================================\n\n/**\n * Transfer stage for progress tracking\n */\nexport type TransferStage =\n  | 'selecting_notes'\n  | 'syncing_merkle'\n  | 'creating_outputs'\n  | 'generating_proof'\n  | 'submitting_tx'\n  | 'confirming'\n\n/**\n * A shielded note with all data needed for spending\n *\n * Post-quantum: uses ownerSecret/ownerHash instead of BabyJubJub one-time keys.\n * Ownership is proven via hash preimage: Poseidon(ownerSecret) == ownerHash.\n */\nexport interface SpendableNote {\n  amount: bigint\n  blinding: bigint\n  commitment: string\n  /** Owner secret (hash preimage for ownership proof) */\n  ownerSecret: string\n  /** Owner hash = Poseidon(ownerSecret) - committed in the note */\n  ownerHash: string\n  leafIndex: number\n  /** Origin address (depositor) - required for UPP circuits */\n  origin: bigint\n  /** Token address - required for UPP circuits */\n  token: bigint\n}\n\n/**\n * Merkle proof with associated note\n */\nexport interface MerkleProofWithNote {\n  proof: MerkleProof\n  note: SpendableNote\n}\n\n/**\n * Transfer context (dependencies)\n */\nexport interface TransferContext {\n  /** viem PublicClient for RPC calls */\n  publicClient: PublicClient\n  /** Contract address */\n  contractAddress: Address\n  /** Chain ID */\n  chainId: number\n  /** Circuit base URL (default: '/circuits/') */\n  circuitBaseUrl?: string\n  /** ASP ID to use (default: DEMO_ASP_ID) */\n  aspId?: bigint\n  /** All approved origins in the ASP tree (enables multi-origin proofs) */\n  aspApprovedOrigins?: bigint[]\n}\n\n/**\n * Transfer result\n */\nexport interface TransferBuildResult {\n  /** Circuit type used */\n  circuit: UPPCircuitType\n  /** Formatted PLONK proof for contract */\n  proof: {\n    proofStruct: PlonkProofStruct\n    publicSignals: bigint[]\n  }\n  /** Public signals from proof */\n  publicSignals: string[]\n  /** State tree root */\n  stateRoot: bigint\n  /** ASP tree root */\n  aspRoot: bigint\n  /** Nullifier hash */\n  nullifier: bigint\n  /** Output commitment 1 */\n  outputCommitment1: bigint\n  /** Output commitment 2 */\n  outputCommitment2: bigint\n  /** Token address */\n  token: bigint\n  /** Recipient output */\n  recipientOutput: NoteCreationResult\n  /** Change output */\n  changeOutput: NoteCreationResult\n  /** Notes that will be spent */\n  spentNotes: SpendableNote[]\n}\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/** Chunk size for paginated RPC queries on testnets */\nconst RPC_CHUNK_SIZE = 9000n\n\n/**\n * Pad an array to the state tree depth (32 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length STATE_TREE_DEPTH\n */\nfunction padToStateTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= STATE_TREE_DEPTH) {\n    return arr.slice(0, STATE_TREE_DEPTH)\n  }\n  return [...arr, ...Array(STATE_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * Pad an array to the ASP tree depth (20 levels)\n * @param arr - Array to pad\n * @param padValue - Value to use for padding (default: '0')\n * @returns Padded array of length ASP_TREE_DEPTH\n */\nfunction padToASPTreeDepth<T>(arr: T[], padValue: T): T[] {\n  if (arr.length >= ASP_TREE_DEPTH) {\n    return arr.slice(0, ASP_TREE_DEPTH)\n  }\n  return [...arr, ...Array(ASP_TREE_DEPTH - arr.length).fill(padValue)]\n}\n\n/**\n * CommitmentInserted event — emitted by _insertLeaf() for ALL leaf insertions\n * (shield, transfer, merge, swap fill, swap claim, swap cancel).\n * This is the single canonical event for Merkle tree reconstruction.\n */\nconst COMMITMENT_INSERTED_EVENT = {\n  type: 'event' as const,\n  name: 'CommitmentInserted',\n  inputs: [\n    { type: 'bytes32', name: 'commitment', indexed: true },\n    { type: 'uint256', name: 'leafIndex' },\n    { type: 'uint256', name: 'timestamp' },\n  ],\n}\n\n// ============================================================================\n// Merkle Tree Functions\n// ============================================================================\n\n/**\n * Fetch all commitments from the contract and build a Merkle tree\n *\n * @param publicClient - viem PublicClient\n * @param contractAddress - Contract address\n * @returns Object with tree and leaves array\n */\nexport async function syncMerkleTree(\n  publicClient: PublicClient,\n  contractAddress: Address\n): Promise<{ tree: ReturnType<typeof buildMerkleTree>; leaves: bigint[] }> {\n  const currentBlock = await publicClient.getBlockNumber()\n  const chainId = await publicClient.getChainId()\n\n  // Use CommitmentInserted events — the canonical event emitted by _insertLeaf()\n  // for ALL operations (shield, transfer, merge, swap fill/claim/cancel).\n  // Each event has an explicit leafIndex, so ordering is deterministic.\n  let commitmentLogs: any[] = []\n\n  if (chainId === 31337) {\n    // Anvil - single query is fine\n    commitmentLogs = await publicClient.getLogs({\n      address: contractAddress,\n      event: COMMITMENT_INSERTED_EVENT,\n      fromBlock: 0n,\n    })\n  } else {\n    // Testnet/mainnet - paginate to avoid RPC limits\n    const deployment = getDeployment(chainId)\n    let fromBlock = deployment?.deployBlock ? BigInt(deployment.deployBlock) : 0n\n    console.log(`[syncMerkleTree] Chain ${chainId}: scanning from block ${fromBlock} to ${currentBlock}`)\n\n    while (fromBlock <= currentBlock) {\n      const toBlock =\n        fromBlock + RPC_CHUNK_SIZE > currentBlock ? currentBlock : fromBlock + RPC_CHUNK_SIZE\n      const chunk = await publicClient.getLogs({\n        address: contractAddress,\n        event: COMMITMENT_INSERTED_EVENT,\n        fromBlock,\n        toBlock,\n      })\n      commitmentLogs = commitmentLogs.concat(chunk)\n      fromBlock = toBlock + 1n\n    }\n  }\n\n  // Sort by explicit leafIndex (most reliable), falling back to block+logIndex\n  commitmentLogs.sort((a: any, b: any) => {\n    const idxA = Number(a.args.leafIndex!)\n    const idxB = Number(b.args.leafIndex!)\n    return idxA - idxB\n  })\n\n  // Build leaves array using the explicit leafIndex from each event\n  const leaves: bigint[] = []\n  for (const log of commitmentLogs) {\n    const leafIndex = Number(log.args.leafIndex!)\n    const commitment = BigInt(log.args.commitment!)\n\n    if (leaves.length !== leafIndex) {\n      console.warn(\n        `[syncMerkleTree] WARNING: Expected leafIndex ${leaves.length} but event has ${leafIndex}. ` +\n        `This may indicate missed events or reorg.`\n      )\n    }\n    leaves.push(commitment)\n  }\n\n  const tree = buildMerkleTree(leaves)\n\n  // Debug: compare our root with on-chain root\n  const ourRoot = await tree.getRoot()\n  const onChainRoot = (await publicClient.readContract({\n    address: contractAddress,\n    abi: [\n      {\n        type: 'function',\n        name: 'getMerkleRoot',\n        inputs: [],\n        outputs: [{ type: 'uint256' }],\n        stateMutability: 'view',\n      },\n    ],\n    functionName: 'getMerkleRoot',\n  })) as bigint\n\n  console.log(`[syncMerkleTree] Leaves count: ${leaves.length}`)\n  console.log(`[syncMerkleTree] Tree depth: ${tree.depth}`)\n  console.log(`[syncMerkleTree] Our computed root: ${ourRoot}`)\n  console.log(`[syncMerkleTree] On-chain root: ${onChainRoot}`)\n  console.log(`[syncMerkleTree] Roots match: ${ourRoot === onChainRoot}`)\n\n  if (ourRoot !== onChainRoot) {\n    console.log(`[syncMerkleTree] WARNING: Root mismatch!`)\n    console.log(\n      `[syncMerkleTree] Leaves:`,\n      leaves.map((l) => '0x' + l.toString(16))\n    )\n  }\n\n  return { tree, leaves }\n}\n\n/**\n * Get Merkle proofs for a set of notes\n *\n * @param notes - Notes to get proofs for\n * @param leaves - All leaves in the tree\n * @param tree - Merkle tree instance\n * @returns Array of proofs with associated notes\n */\nexport async function getMerkleProofsForNotes(\n  notes: SpendableNote[],\n  leaves: bigint[],\n  tree: ReturnType<typeof buildMerkleTree>\n): Promise<MerkleProofWithNote[]> {\n  const { verifyMerkleProof } = await import('../utils/merkle.js')\n  const proofs: MerkleProofWithNote[] = []\n\n  for (const note of notes) {\n    const commitmentBI = BigInt(note.commitment)\n    const leafIndex = leaves.findIndex((l) => l === commitmentBI)\n\n    console.log(`[getMerkleProofsForNotes] Note commitment: ${note.commitment}`)\n    console.log(`[getMerkleProofsForNotes] Note commitment as BigInt: ${commitmentBI}`)\n    console.log(`[getMerkleProofsForNotes] Found at leafIndex: ${leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] Note's stored leafIndex: ${note.leafIndex}`)\n\n    if (leafIndex === -1) {\n      console.log(`[getMerkleProofsForNotes] Leaves in tree:`, leaves.map((l) => l.toString()))\n      throw new Error(`Note ${note.commitment.slice(0, 10)}... not found on-chain`)\n    }\n\n    const proof = await tree.getProof(leafIndex)\n\n    console.log(`[getMerkleProofsForNotes] Proof root: ${proof.root}`)\n    console.log(`[getMerkleProofsForNotes] Proof leafIndex: ${proof.leafIndex}`)\n    console.log(`[getMerkleProofsForNotes] PathElements:`, proof.pathElements.map((e) => e.toString()))\n    console.log(`[getMerkleProofsForNotes] PathIndices:`, proof.pathIndices)\n\n    // Verify the proof locally before returning\n    const isValid = await verifyMerkleProof(commitmentBI, proof)\n    console.log(`[getMerkleProofsForNotes] Local proof verification: ${isValid}`)\n\n    if (!isValid) {\n      console.error(`[getMerkleProofsForNotes] WARNING: Merkle proof is invalid!`)\n    }\n\n    proofs.push({ proof, note: { ...note, leafIndex } })\n  }\n\n  return proofs\n}\n\n// ============================================================================\n// Circuit Input Building\n// ============================================================================\n\n/**\n * Compute nullifier for a UPP note (BLS12-381)\n *\n * nullifier = Poseidon(ownerSecret, leafIndex, commitment)\n *\n * @param ownerSecret - Owner secret (hash preimage)\n * @param leafIndex - Leaf index in Merkle tree\n * @param commitment - Note commitment\n * @returns Nullifier as bigint\n */\nexport async function computeNullifier(\n  ownerSecret: bigint,\n  leafIndex: number,\n  commitment: bigint\n): Promise<bigint> {\n  return await poseidon([ownerSecret, BigInt(leafIndex), commitment])\n}\n\n/**\n * Note with amount for circuit building\n */\nexport interface NoteWithAmount extends NoteCreationResult {\n  amount: bigint\n}\n\n/**\n * Build circuit inputs for UPP transfer (1-in-2-out)\n *\n * @param noteProof - Merkle proof for input note\n * @param aspProof - ASP membership proof for input note's origin\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @returns UPP transfer circuit inputs\n */\nexport async function buildUPPTransferCircuitInputs(\n  noteProof: MerkleProofWithNote,\n  aspProof: ASPProof,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount\n): Promise<UPPTransferCircuitInputs> {\n  const { proof, note } = noteProof\n\n  // Compute owner hash from secret (hash-based ownership)\n  const inputOwnerHash = poseidonOwnerHash(BigInt(note.ownerSecret))\n\n  // Verify input commitment locally\n  // BLS12-381 commitment: Poseidon(amount, ownerHash, blinding, origin, token)\n  const localInputCommitment = computeNoteCommitment(\n    note.amount,\n    inputOwnerHash,\n    note.blinding,\n    note.origin,\n    note.token,\n  )\n\n  const storedCommitment = BigInt(note.commitment)\n  if (localInputCommitment !== storedCommitment) {\n    console.error(`[buildUPPTransferCircuitInputs] COMMITMENT MISMATCH`)\n    console.error(`  amount: ${note.amount}, ownerHash: ${inputOwnerHash}`)\n    console.error(`  blinding: ${note.blinding}, origin: ${note.origin}, token: ${note.token}`)\n    console.error(`  local=${localInputCommitment}, stored=${storedCommitment}`)\n    throw new Error(\n      `Note commitment mismatch — this note was created with an outdated commitment formula. ` +\n      `Clear your shielded account (localStorage) and re-shield tokens.`\n    )\n  }\n\n  const nullifier = await computeNullifier(\n    BigInt(note.ownerSecret),\n    proof.leafIndex,\n    BigInt(note.commitment)\n  )\n\n  return {\n    // Public inputs\n    stateRoot: String(proof.root),\n    aspRoot: String(aspProof.aspRoot),\n    nullifier: String(nullifier),\n    outputCommitment1: String(recipientNote.commitment),\n    outputCommitment2: String(changeNote.commitment),\n    token: String(note.token),\n\n    // Private inputs - Input Note\n    inputAmount: String(note.amount),\n    inputOneTimeSecret: String(BigInt(note.ownerSecret)),\n    inputBlinding: String(note.blinding),\n    inputOrigin: String(note.origin),\n    inputLeafIndex: String(proof.leafIndex),\n    inputPathElements: padToStateTreeDepth(proof.pathElements.map((e) => String(e)), '0'),\n    inputPathIndices: padToStateTreeDepth(proof.pathIndices.map(String), '0'),\n\n    // Private inputs - ASP Membership Proof\n    aspPathElements: padToASPTreeDepth(aspProof.aspPathElements.map((e) => String(e)), '0'),\n    aspPathIndices: padToASPTreeDepth(aspProof.aspPathIndices.map(String), '0'),\n\n    // Private inputs - Output Notes (hash-based ownership)\n    outputAmount1: String(recipientNote.amount),\n    outputOwnerHash1: String(recipientNote.ownerHash),\n    outputBlinding1: String(recipientNote.blinding),\n\n    outputAmount2: String(changeNote.amount),\n    outputOwnerHash2: String(changeNote.ownerHash),\n    outputBlinding2: String(changeNote.blinding),\n  }\n}\n\n// ============================================================================\n// Transfer Building\n// ============================================================================\n\nimport { DEMO_ASP_ID } from './asp.js'\n\n/**\n * Build a UPP transfer (proof + outputs)\n *\n * This prepares everything needed to submit the transaction.\n * UPP transfer is 1-in-2-out with ASP membership proof.\n *\n * @param ctx - Transfer context\n * @param selectedNote - Note to spend (UPP transfer uses exactly 1 input)\n * @param recipientNote - Output note for recipient\n * @param changeNote - Output note for change\n * @param onStageChange - Optional callback for stage updates\n * @returns Transfer build result with proof and outputs\n */\nexport async function buildTransfer(\n  ctx: TransferContext,\n  selectedNote: SpendableNote,\n  recipientNote: NoteWithAmount,\n  changeNote: NoteWithAmount,\n  onStageChange?: (stage: TransferStage) => void\n): Promise<TransferBuildResult> {\n  // 1. Sync Merkle tree\n  onStageChange?.('syncing_merkle')\n  const { tree, leaves } = await syncMerkleTree(ctx.publicClient, ctx.contractAddress)\n\n  // 2. Get Merkle proof for note\n  const noteProofs = await getMerkleProofsForNotes([selectedNote], leaves, tree)\n  const noteProof = noteProofs[0]!\n\n  // 3. Generate ASP proof for the note's origin\n  const aspProof = await generateASPProof(\n    ctx.aspId ?? DEMO_ASP_ID,\n    selectedNote.origin,\n    ctx.aspApprovedOrigins\n  )\n\n  // 4. Build circuit inputs and generate proof\n  onStageChange?.('generating_proof')\n\n  const circuitInputs = await buildUPPTransferCircuitInputs(\n    noteProof,\n    aspProof,\n    recipientNote,\n    changeNote\n  )\n\n  const { proof } = await generateUPPProof(\n    'transfer',\n    circuitInputs,\n    ctx.circuitBaseUrl ?? '/circuits/'\n  )\n\n  const formattedProof = await formatPlonkProofForContract(proof)\n\n  return {\n    circuit: 'transfer',\n    proof: formattedProof,\n    publicSignals: proof.publicSignals,\n    stateRoot: BigInt(circuitInputs.stateRoot),\n    aspRoot: BigInt(circuitInputs.aspRoot),\n    nullifier: BigInt(circuitInputs.nullifier),\n    outputCommitment1: BigInt(circuitInputs.outputCommitment1),\n    outputCommitment2: BigInt(circuitInputs.outputCommitment2),\n    token: BigInt(circuitInputs.token),\n    recipientOutput: recipientNote,\n    changeOutput: changeNote,\n    spentNotes: [selectedNote],\n  }\n}\n\n/**\n * Format output for contract call (post-quantum)\n */\nexport function formatOutputForContract(note: NoteCreationResult): {\n  commitment: Hex\n  searchTag: bigint\n  ownerHash: bigint\n  encryptedNote: Hex\n} {\n  return {\n    commitment: toHex(note.commitment, { size: 32 }),\n    searchTag: note.searchTag,\n    ownerHash: note.ownerHash,\n    encryptedNote: note.encryptedNote as Hex,\n  }\n}\n"]}

package/dist/{chunk-DTEAFJG7.js → chunk-FTEXUSHR.js}

@@ -1,5 +1,5 @@
-import { splitToM31Limbs, computeStarkOwnerHash, keccakM31 } from './chunk-6TFDBBAQ.js';
-import { init_crypto, bytesToBigint, hexToBytes, bytesToHex } from './chunk-UQIM2KT3.js';
+import { splitToM31Limbs, computeStarkOwnerHash, keccakM31 } from './chunk-H4NDMIPF.js';
+import { init_crypto, bytesToBigint, hexToBytes, bytesToHex } from './chunk-4E23V3AT.js';
 import { init_poseidon, FIELD_PRIME } from './chunk-5QSSX3KR.js';
 import { keccak256, toHex } from 'viem';
 
@@ -146,5 +146,5 @@ function deriveStarkPerNoteKeyFromKeys(keys, nonce) {
 }
 
 export { DEFAULT_KEY_DERIVATION_CONFIG, deriveDualKeysFromSignature, deriveKeysFromSignature, deriveNullifierKey, derivePerNoteKey, derivePerNoteKeyFromKeys, deriveStarkKeysFromSignature, deriveStarkPerNoteKey, deriveStarkPerNoteKeyFromKeys, exportViewingKeysForAudit, getKeyDerivationMessage, getViewingKeyFromExport, validateAuditKeyExport, verifyKeysMatchSignature };
-//# sourceMappingURL=chunk-DTEAFJG7.js.map
-//# sourceMappingURL=chunk-DTEAFJG7.js.map
+//# sourceMappingURL=chunk-FTEXUSHR.js.map
+//# sourceMappingURL=chunk-FTEXUSHR.js.map

package/dist/{chunk-DTEAFJG7.js.map → chunk-FTEXUSHR.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/keys/types.ts","../src/keys/derive.ts","../src/keys/viewing.ts"],"names":["toHex","keccak256"],"mappings":";;;;;;AA8FO,IAAM,6BAAA,GAAqD;AAAA,EAChE,OAAA,EAAS,+BAAA;AAAA,EACT,OAAA,EAAS;AACX;;;ACnFA,aAAA,EAAA;AACA,WAAA,EAAA;AAwBA,eAAsB,uBAAA,CACpB,SAAA,EACA,MAAA,GAA8B,6BAAA,EACT;AACrB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,wBAAsB,CAAA;AAGxD,EAAA,MAAM,IAAA,GAAO,UAAU,SAAS,CAAA;AAGhC,EAAA,MAAM,kBAAA,GAAqB,SAAA;AAAA,IACzB,KAAA,CAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,WAAA,EAAc,MAAA,CAAO,OAAO,CAAA,CAAE,CAAC;AAAA,GACvE;AACA,EAAA,MAAM,iBAAA,GAAoB,aAAA,CAAc,UAAA,CAAW,kBAAkB,CAAC,CAAA;AACtE,EAAA,MAAM,iBAAiB,iBAAA,GAAoB,WAAA;AAI3C,EAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,CAAC,cAAc,CAAC,CAAA;AAGjD,EAAA,MAAM,iBAAA,GAAoB,SAAA;AAAA,IACxB,KAAA,CAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,UAAA,EAAa,MAAA,CAAO,OAAO,CAAA,CAAE,CAAC;AAAA,GACtE;AACA,EAAA,MAAM,gBAAA,GAAmB,aAAA,CAAc,UAAA,CAAW,iBAAiB,CAAC,CAAA;AACpE,EAAA,MAAM,gBAAgB,gBAAA,GAAmB,WAAA;AAGzC,EAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,CAAC,aAAa,CAAC,CAAA;AAElD,EAAA,OAAO;AAAA,IACL,cAAA;AAAA,IACA,SAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACF;AACF;AAKO,SAAS,uBAAA,CACd,SAA8B,6BAAA,EACtB;AACR,EAAA,OAAO,MAAA,CAAO,OAAA;AAChB;AAKA,eAAsB,wBAAA,CACpB,IAAA,EACA,SAAA,EACA,MAAA,GAA8B,6BAAA,EACZ;AAClB,EAAA,MAAM,WAAA,GAAc,MAAM,uBAAA,CAAwB,SAAA,EAAW,MAAM,CAAA;AAEnE,EAAA,OACE,IAAA,CAAK,cAAA,KAAmB,WAAA,CAAY,cAAA,IACpC,KAAK,SAAA,KAAc,WAAA,CAAY,SAAA,IAC/B,IAAA,CAAK,aAAA,KAAkB,WAAA,CAAY,aAAA,IACnC,IAAA,CAAK,gBAAgB,WAAA,CAAY,WAAA;AAErC;AAYO,SAAS,4BAAA,CACd,SAAA,EACA,MAAA,GAA8B,6BAAA,EACb;AACjB,EAAA,MAAM,IAAA,GAAO,UAAU,SAAS,CAAA;AAGhC,EAAA,MAAM,iBAAA,GAAoB,SAAA;AAAA,IACxB,KAAA,CAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,iBAAA,EAAoB,MAAA,CAAO,OAAO,CAAA,CAAE,CAAC;AAAA,GAC7E;AACA,EAAA,MAAM,WAAA,GAAc,gBAAgB,iBAAiB,CAAA;AACrD,EAAA,MAAM,cAAA,GAAiB,sBAAsB,WAAW,CAAA;AAGxD,EAAA,MAAM,gBAAA,GAAmB,SAAA;AAAA,IACvB,KAAA,CAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,gBAAA,EAAmB,MAAA,CAAO,OAAO,CAAA,CAAE,CAAC;AAAA,GAC5E;AACA,EAAA,MAAM,kBAAA,GAAqB,gBAAgB,gBAAgB,CAAA;AAC3D,EAAA,MAAM,sBAAA,GAAyB,sBAAsB,kBAAkB,CAAA;AAEvE,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,cAAA;AAAA,IACA,kBAAA;AAAA,IACA,gBAAA,EAAkB;AAAA,GACpB;AACF;AAQA,eAAsB,2BAAA,CACpB,SAAA,EACA,MAAA,GAA8B,6BAAA,EACL;AACzB,EAAA,MAAM,KAAA,GAAQ,MAAM,uBAAA,CAAwB,SAAA,EAAW,MAAM,CAAA;AAC7D,EAAA,MAAM,KAAA,GAAQ,4BAAA,CAA6B,SAAA,EAAW,MAAM,CAAA;AAC5D,EAAA,OAAO,EAAE,OAAO,KAAA,EAAM;AACxB;AAOA,eAAsB,mBAAmB,cAAA,EAAyC;AAChF,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,wBAAsB,CAAA;AACxD,EAAA,OAAO,MAAM,QAAA,CAAS,CAAC,cAAA,EAAgB,EAAE,CAAC,CAAA;AAC5C;ACzIA,WAAA,EAAA;AASA,eAAsB,gBAAA,CACpB,eACA,KAAA,EACc;AACd,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,wBAAsB,CAAA;AACxD,EAAA,MAAM,aAAa,MAAM,QAAA,CAAS,CAAC,aAAA,EAAe,KAAK,CAAC,CAAA;AACxD,EAAA,OAAOA,KAAAA,CAAM,UAAA,EAAY,EAAE,IAAA,EAAM,IAAI,CAAA;AACvC;AAKA,eAAsB,wBAAA,CACpB,MACA,KAAA,EACc;AACd,EAAA,OAAO,gBAAA,CAAiB,IAAA,CAAK,aAAA,EAAe,KAAK,CAAA;AACnD;AAwBA,eAAsB,yBAAA,CACpB,IAAA,EACA,aAAA,EACA,KAAA,EACyB;AACzB,EAAA,MAAM,cAAuC,EAAC;AAE9C,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AAExB,IAAA,MAAM,gBAAgB,MAAM,gBAAA,CAAiB,IAAA,CAAK,aAAA,EAAe,KAAK,KAAK,CAAA;AAE3E,IAAA,WAAA,CAAY,IAAA,CAAK;AAAA,MACf,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAA;AAAA,IACT,aAAA;AAAA,IACA,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,WAAA;AAAA,IACA,YAAA,EAAc;AAAA,kDAAA,EACkC,YAAY,MAAM,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA,CAahE,IAAA;AAAK,GACT;AACF;AAKO,SAAS,uBACd,UAAA,EACoC;AACpC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,OAAO,CAAA,qBAAA,EAAwB,UAAA,CAAW,OAAO,CAAA,qBAAA,CAAA,EAAwB;AAAA,EAClG;AAEA,EAAA,IAAI,CAAC,WAAW,aAAA,IAAiB,CAAC,WAAW,aAAA,CAAc,UAAA,CAAW,IAAI,CAAA,EAAG;AAC3E,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,wBAAA,EAAyB;AAAA,EACzD;AAEA,EAAA,IAAI,UAAA,CAAW,WAAA,KAAgB,MAAA,IAAa,UAAA,CAAW,gBAAgB,IAAA,EAAM;AAC3E,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,sBAAA,EAAuB;AAAA,EACvD;AAEA,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,UAAA,CAAW,WAAW,CAAA,IAAK,UAAA,CAAW,WAAA,CAAY,MAAA,KAAW,CAAA,EAAG;AACjF,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,2BAAA,EAA4B;AAAA,EAC5D;AAEA,EAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AACvB;AAQO,SAAS,uBAAA,CACd,YACA,SAAA,EACY;AACZ,EAAA,MAAM,MAAM,UAAA,CAAW,WAAA,CAAY,KAAK,CAAA,CAAA,KAAK,CAAA,CAAE,cAAc,SAAS,CAAA;AACtE,EAAA,OAAO,GAAA,GAAM,IAAI,aAAA,GAAgB,IAAA;AACnC;AAmBO,SAAS,qBAAA,CACd,oBACA,KAAA,EACK;AAEL,EAAA,MAAM,SAAS,SAAA,CAAU,CAAC,GAAG,kBAAA,EAAoB,KAAK,CAAC,CAAA;AAGvD,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,CAAO,CAAC,CAAE,CAAA;AAC7B,IAAA,KAAA,CAAM,CAAA,GAAI,CAAC,CAAA,GAAI,GAAA,GAAM,GAAA;AACrB,IAAA,KAAA,CAAM,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,GAAK,OAAO,CAAA,GAAK,GAAA;AAChC,IAAA,KAAA,CAAM,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,GAAK,OAAO,EAAA,GAAM,GAAA;AACjC,IAAA,KAAA,CAAM,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,GAAK,OAAO,EAAA,GAAM,GAAA;AAAA,EACnC;AAGA,EAAA,OAAOC,SAAAA,CAAU,UAAA,CAAW,KAAK,CAAC,CAAA;AACpC;AAKO,SAAS,6BAAA,CACd,MACA,KAAA,EACK;AACL,EAAA,OAAO,qBAAA,CAAsB,IAAA,CAAK,kBAAA,EAAoB,KAAK,CAAA;AAC7D","file":"chunk-DTEAFJG7.js","sourcesContent":["/**\n * Key Type Definitions for UPP SDK\n *\n * Post-quantum key structure (hash-based, no elliptic curves):\n *\n * Wallet Signature → Seed\n *     ├── Spending Secret → Owner Hash = Poseidon(spendingSecret)\n *     └── Viewing Secret (for note encryption, derived from seed)\n *\n * Ownership is proven via hash preimage: \"I know secret such that Poseidon(secret) == ownerHash\"\n * This replaces the previous BabyJubJub ECDLP-based ownership proof.\n */\n\nimport type { Hex, Address } from 'viem'\n\n/**\n * Master keys derived from wallet signature\n *\n * Post-quantum: uses hash-based ownership instead of BabyJubJub curve.\n * ownerHash = Poseidon(spendingSecret) replaces spendingPubKey (curve point).\n */\nexport interface MasterKeys {\n  /** Spending secret - for note ownership proofs (hash preimage) */\n  spendingSecret: bigint\n  /** Owner hash = Poseidon(spendingSecret) - publicly committed in notes */\n  ownerHash: bigint\n  /** Viewing secret - for note encryption/decryption (symmetric key derivation) */\n  viewingSecret: bigint\n  /** Viewing hash = Poseidon(viewingSecret) - for search tags and indexing */\n  viewingHash: bigint\n}\n\n/**\n * Per-transaction viewing key (for decryption)\n *\n * Can be shared with auditors to reveal specific transactions\n * without compromising the master viewing secret.\n *\n * Post-quantum: uses hash-based key derivation instead of ECDH.\n */\nexport interface TransactionViewingKey {\n  /** The Merkle leaf index (for locating the on-chain event) */\n  leafIndex: number\n  /** The per-note nonce (used in key derivation) */\n  nonce: bigint\n  /** The per-note decryption key (derived from viewingSecret + nonce) */\n  decryptionKey: Hex\n}\n\n/**\n * Exported viewing keys for audit\n *\n * Contains the minimum information needed for an auditor\n * to decrypt specific transactions.\n */\nexport interface AuditKeyExport {\n  /** Version for forward compatibility (v4 = post-quantum hash-based) */\n  version: 4\n  /** Ethereum address that signed to derive keys (for identification) */\n  signerAddress: Address\n  /** The viewing hash (for verification) */\n  viewingHash: bigint\n  /** Per-transaction viewing keys */\n  viewingKeys: TransactionViewingKey[]\n  /** Instructions for auditor */\n  instructions: string\n}\n\n/**\n * Stealth address components (simplified for hash-based system)\n * Published once, used by senders to encrypt notes\n */\nexport interface StealthAddressComponents {\n  /** Owner hash = Poseidon(spendingSecret) */\n  ownerHash: bigint\n  /** Viewing hash = Poseidon(viewingSecret) - for encryption */\n  viewingHash: bigint\n  /** Optional chain ID (for multi-chain support) */\n  chainId?: number\n}\n\n/**\n * Configuration for key derivation\n */\nexport interface KeyDerivationConfig {\n  /** The message to sign for key derivation */\n  message: string\n  /** Version number for the key derivation scheme */\n  version: 1\n}\n\n/**\n * Default key derivation configuration\n */\nexport const DEFAULT_KEY_DERIVATION_CONFIG: KeyDerivationConfig = {\n  message: 'UPP Stealth Key Derivation v1',\n  version: 1,\n}\n\n/**\n * Result of deriving one-time keys for a transaction (hash-based)\n */\nexport interface OneTimeKeys {\n  /** One-time secret (for the owner to spend the note) */\n  oneTimeSecret: bigint\n  /** One-time owner hash = Poseidon(oneTimeSecret) - in the commitment */\n  ownerHash: bigint\n}\n\n/**\n * Serialized key format for storage\n */\nexport interface SerializedKeys {\n  version: 1\n  /** Hex-encoded encrypted key data */\n  encryptedData: Hex\n  /** Salt for key derivation (if password protected) */\n  salt?: Hex\n  /** Nonce for encryption */\n  nonce: Hex\n}\n\n// =========================================================================\n// STARK Key Types (M31/Keccak-based, post-quantum)\n// =========================================================================\n\nimport type { M31Digest, M31Secret } from '../utils/keccak-m31.js'\n\n/** Which proving system to use */\nexport type ProvingSystem = 'snark' | 'stark'\n\n/**\n * STARK master keys derived from wallet signature.\n *\n * Uses M31 field and keccak-256 hashing — no elliptic curves.\n * ownerHash = keccak_m31(starkSecret) — 4 M31 elements.\n */\nexport interface StarkMasterKeys {\n  /** 8 M31 limbs (248 bits of entropy) — for ownership proofs */\n  starkSecret: M31Secret\n  /** keccak_m31(starkSecret) — publicly committed in STARK notes */\n  starkOwnerHash: M31Digest\n  /** 8 M31 limbs — for note encryption/decryption */\n  starkViewingSecret: M31Secret\n  /** keccak_m31(starkViewingSecret) — for search tags and indexing */\n  starkViewingHash: M31Digest\n}\n\n/**\n * Dual master keys: both SNARK (BN254/Poseidon) and STARK (M31/Keccak).\n *\n * Derived from the same wallet signature via domain-separated keccak256.\n * Breaking BJJ (quantum) does NOT compromise STARK keys (keccak preimage resistance).\n */\nexport interface DualMasterKeys {\n  snark: MasterKeys\n  stark: StarkMasterKeys\n}\n","/**\n * Key Derivation from Wallet Signature (Post-Quantum / Hash-Based)\n *\n * Derives keys from an Ethereum wallet signature using only hash functions.\n * No elliptic curve operations — quantum-resistant by design.\n *\n * Security Model:\n * - Keys are derived deterministically from the signature\n * - No seed phrase management required\n * - Same signature always produces same keys\n * - Ownership proven via hash preimage (Poseidon), not discrete log\n */\n\nimport { keccak256, toHex, type Hex } from 'viem'\nimport { FIELD_PRIME } from '../utils/poseidon.js'\nimport { hexToBytes, bytesToBigint } from '../utils/crypto.js'\nimport { splitToM31Limbs, computeStarkOwnerHash } from '../utils/keccak-m31.js'\nimport type { MasterKeys, StarkMasterKeys, DualMasterKeys, KeyDerivationConfig } from './types.js'\nimport { DEFAULT_KEY_DERIVATION_CONFIG } from './types.js'\n\n/**\n * Derive master keys from a wallet signature (hash-based, post-quantum)\n *\n * This replaces the previous BabyJubJub-based derivation.\n * Instead of curve points, we use Poseidon hashes for ownership proofs.\n *\n * @param signature - The wallet signature (from personal_sign or EIP-712)\n * @param config - Optional key derivation configuration\n * @returns Master keys for stealth operations\n *\n * @example\n * ```ts\n * const signature = await walletClient.signMessage({\n *   message: 'UPP Stealth Key Derivation v1'\n * })\n * const keys = await deriveKeysFromSignature(signature)\n * // keys.ownerHash is Poseidon(spendingSecret) — used in note commitments\n * ```\n */\nexport async function deriveKeysFromSignature(\n  signature: Hex,\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): Promise<MasterKeys> {\n  const { poseidon } = await import('../utils/poseidon.js')\n\n  // Create a seed from the signature using keccak256\n  const seed = keccak256(signature)\n\n  // Derive spending secret from seed\n  const spendingSecretHash = keccak256(\n    toHex(new TextEncoder().encode(`${seed}:spending:v${config.version}`))\n  )\n  const spendingSecretRaw = bytesToBigint(hexToBytes(spendingSecretHash))\n  const spendingSecret = spendingSecretRaw % FIELD_PRIME\n\n  // Derive owner hash: Poseidon(spendingSecret)\n  // This replaces BabyJubJub public key derivation\n  const ownerHash = await poseidon([spendingSecret])\n\n  // Derive viewing secret from seed\n  const viewingSecretHash = keccak256(\n    toHex(new TextEncoder().encode(`${seed}:viewing:v${config.version}`))\n  )\n  const viewingSecretRaw = bytesToBigint(hexToBytes(viewingSecretHash))\n  const viewingSecret = viewingSecretRaw % FIELD_PRIME\n\n  // Derive viewing hash: Poseidon(viewingSecret)\n  const viewingHash = await poseidon([viewingSecret])\n\n  return {\n    spendingSecret,\n    ownerHash,\n    viewingSecret,\n    viewingHash,\n  }\n}\n\n/**\n * Get the message to sign for key derivation\n */\nexport function getKeyDerivationMessage(\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): string {\n  return config.message\n}\n\n/**\n * Verify that keys match a given signature\n */\nexport async function verifyKeysMatchSignature(\n  keys: MasterKeys,\n  signature: Hex,\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): Promise<boolean> {\n  const derivedKeys = await deriveKeysFromSignature(signature, config)\n\n  return (\n    keys.spendingSecret === derivedKeys.spendingSecret &&\n    keys.ownerHash === derivedKeys.ownerHash &&\n    keys.viewingSecret === derivedKeys.viewingSecret &&\n    keys.viewingHash === derivedKeys.viewingHash\n  )\n}\n\n/**\n * Derive STARK master keys from a wallet signature (M31/Keccak, post-quantum)\n *\n * Uses domain-separated keccak256 to derive M31 secrets, then keccak_m31\n * for owner/viewing hashes. No elliptic curve operations.\n *\n * @param signature - The wallet signature (same one used for SNARK keys)\n * @param config - Optional key derivation configuration\n * @returns STARK master keys for stealth operations\n */\nexport function deriveStarkKeysFromSignature(\n  signature: Hex,\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): StarkMasterKeys {\n  const seed = keccak256(signature)\n\n  // Derive STARK spending secret: 8 M31 limbs from a single keccak256\n  const starkSpendingHash = keccak256(\n    toHex(new TextEncoder().encode(`${seed}:stark:spending:v${config.version}`))\n  )\n  const starkSecret = splitToM31Limbs(starkSpendingHash)\n  const starkOwnerHash = computeStarkOwnerHash(starkSecret)\n\n  // Derive STARK viewing secret: 8 M31 limbs from a separate keccak256\n  const starkViewingHash = keccak256(\n    toHex(new TextEncoder().encode(`${seed}:stark:viewing:v${config.version}`))\n  )\n  const starkViewingSecret = splitToM31Limbs(starkViewingHash)\n  const starkViewingHashDigest = computeStarkOwnerHash(starkViewingSecret)\n\n  return {\n    starkSecret,\n    starkOwnerHash,\n    starkViewingSecret,\n    starkViewingHash: starkViewingHashDigest,\n  }\n}\n\n/**\n * Derive both SNARK and STARK keys from a single wallet signature.\n *\n * Same seed, domain-separated derivation. Breaking BJJ (quantum) does NOT\n * compromise STARK keys — keccak preimage resistance provides 2^128 quantum security.\n */\nexport async function deriveDualKeysFromSignature(\n  signature: Hex,\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): Promise<DualMasterKeys> {\n  const snark = await deriveKeysFromSignature(signature, config)\n  const stark = deriveStarkKeysFromSignature(signature, config)\n  return { snark, stark }\n}\n\n/**\n * Derive a nullifier key from the spending secret\n *\n * nullifier = Poseidon(nullifierKey, leafIndex, commitment)\n */\nexport async function deriveNullifierKey(spendingSecret: bigint): Promise<bigint> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  return await poseidon([spendingSecret, 0n]) // 0n = nullifier domain\n}\n","/**\n * Per-Transaction Viewing Key Derivation (Post-Quantum, Hash-Based)\n *\n * Implements hierarchical viewing keys using Poseidon hash instead of ECDH.\n *\n * Key Properties:\n * - Per-note decryption key: Poseidon(viewingSecret, nonce)\n * - AES key: keccak256(perNoteKey) for symmetric encryption\n *\n * Derivation:\n *   perNoteKey = Poseidon(viewingSecret, nonce)\n *   aesKey = keccak256(perNoteKey)\n *\n * SECURITY (v4):\n * Audit exports contain per-note decryption keys derived from viewingSecret + nonce.\n * This prevents master key recovery: knowing Poseidon(viewingSecret, nonce) doesn't\n * reveal viewingSecret due to the one-wayness of Poseidon.\n */\n\nimport type { Address, Hex } from 'viem'\nimport { keccak256, toHex } from 'viem'\nimport type {\n  MasterKeys,\n  StarkMasterKeys,\n  TransactionViewingKey,\n  AuditKeyExport,\n} from './types.js'\nimport { keccakM31, type M31Secret } from '../utils/keccak-m31.js'\nimport { bytesToHex } from '../utils/crypto.js'\n\n/**\n * Derive a per-note decryption key from master viewing secret and nonce\n *\n * @param viewingSecret - Master viewing secret\n * @param nonce - Unique per-note nonce\n * @returns Per-note decryption key as hex\n */\nexport async function derivePerNoteKey(\n  viewingSecret: bigint,\n  nonce: bigint\n): Promise<Hex> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  const perNoteKey = await poseidon([viewingSecret, nonce])\n  return toHex(perNoteKey, { size: 32 })\n}\n\n/**\n * Derive per-note key from MasterKeys convenience wrapper\n */\nexport async function derivePerNoteKeyFromKeys(\n  keys: MasterKeys,\n  nonce: bigint\n): Promise<Hex> {\n  return derivePerNoteKey(keys.viewingSecret, nonce)\n}\n\n/**\n * Note reference for audit export\n */\nexport interface NoteReference {\n  /** The Merkle leaf index (for locating the on-chain event) */\n  leafIndex: number\n  /** The nonce used in per-note key derivation */\n  nonce: bigint\n}\n\n/**\n * Export viewing keys for specific notes\n *\n * Creates an export package that can be shared with an auditor.\n * The auditor can use these keys to decrypt the specified notes,\n * but cannot derive keys for other notes.\n *\n * @param keys - Master keys\n * @param signerAddress - The Ethereum address that signed to derive keys\n * @param notes - Array of note references (leafIndex + nonce) to export\n * @returns Audit key export package\n */\nexport async function exportViewingKeysForAudit(\n  keys: MasterKeys,\n  signerAddress: Address,\n  notes: NoteReference[]\n): Promise<AuditKeyExport> {\n  const viewingKeys: TransactionViewingKey[] = []\n\n  for (const note of notes) {\n    // Derive the per-note decryption key\n    const decryptionKey = await derivePerNoteKey(keys.viewingSecret, note.nonce)\n\n    viewingKeys.push({\n      leafIndex: note.leafIndex,\n      nonce: note.nonce,\n      decryptionKey,\n    })\n  }\n\n  return {\n    version: 4,\n    signerAddress,\n    viewingHash: keys.viewingHash,\n    viewingKeys,\n    instructions: `\nThis export contains per-note decryption keys for ${viewingKeys.length} UPP note(s).\n\nTo decrypt a note:\n1. Find the viewingKey entry for the desired leafIndex\n2. Retrieve the encrypted note from the blockchain (Shielded event at that leaf index)\n3. Derive AES key: key = keccak256(decryptionKey)\n4. Decrypt the note ciphertext with AES-GCM\n\nThese per-note keys ONLY allow decryption of the specified notes.\nThey do NOT reveal:\n- The master viewing secret (protected by Poseidon one-wayness)\n- Keys for any other notes\n- The spending secret (cannot spend funds)\n    `.trim(),\n  }\n}\n\n/**\n * Validate an audit key export\n */\nexport function validateAuditKeyExport(\n  exportData: AuditKeyExport\n): { valid: boolean; error?: string } {\n  if (exportData.version !== 4) {\n    return { valid: false, error: `Unsupported version: ${exportData.version}. Expected version 4.` }\n  }\n\n  if (!exportData.signerAddress || !exportData.signerAddress.startsWith('0x')) {\n    return { valid: false, error: 'Invalid signer address' }\n  }\n\n  if (exportData.viewingHash === undefined || exportData.viewingHash === null) {\n    return { valid: false, error: 'Missing viewing hash' }\n  }\n\n  if (!Array.isArray(exportData.viewingKeys) || exportData.viewingKeys.length === 0) {\n    return { valid: false, error: 'No viewing keys in export' }\n  }\n\n  return { valid: true }\n}\n\n/**\n * Look up a decryption key from an audit export by leaf index\n *\n * Returns the per-note decryption key for direct use in AES-GCM decryption.\n * Derive AES key: keccak256(decryptionKey)\n */\nexport function getViewingKeyFromExport(\n  exportData: AuditKeyExport,\n  leafIndex: number\n): Hex | null {\n  const key = exportData.viewingKeys.find(k => k.leafIndex === leafIndex)\n  return key ? key.decryptionKey : null\n}\n\n// =========================================================================\n// STARK Per-Note Viewing Key Derivation (Keccak-based, no elliptic curves)\n// =========================================================================\n\n/**\n * Derive a STARK per-note decryption key from viewing secret and nonce.\n *\n * Uses keccak_m31 instead of Poseidon — purely symmetric, post-quantum safe.\n * The nonce is encoded as a single M31 element appended to the viewing secret.\n *\n * perNoteDigest = keccak_m31(viewingSecret[0..8], nonce)\n * aesKey = keccak256(perNoteDigest_packed_as_16_LE_bytes)\n *\n * @param starkViewingSecret - 8 M31 limbs (the master STARK viewing secret)\n * @param nonce - Per-note nonce (M31 range)\n * @returns 32-byte AES key as hex\n */\nexport function deriveStarkPerNoteKey(\n  starkViewingSecret: M31Secret,\n  nonce: bigint\n): Hex {\n  // keccak_m31(viewingSecret[0..8], nonce) → 4 M31 elements\n  const digest = keccakM31([...starkViewingSecret, nonce])\n\n  // Pack digest as 16 bytes LE for AES key derivation\n  const bytes = new Uint8Array(16)\n  for (let i = 0; i < 4; i++) {\n    const val = Number(digest[i]!)\n    bytes[i * 4] = val & 0xff\n    bytes[i * 4 + 1] = (val >> 8) & 0xff\n    bytes[i * 4 + 2] = (val >> 16) & 0xff\n    bytes[i * 4 + 3] = (val >> 24) & 0xff\n  }\n\n  // Derive 32-byte AES key via keccak256\n  return keccak256(bytesToHex(bytes))\n}\n\n/**\n * Derive STARK per-note key from StarkMasterKeys convenience wrapper\n */\nexport function deriveStarkPerNoteKeyFromKeys(\n  keys: StarkMasterKeys,\n  nonce: bigint\n): Hex {\n  return deriveStarkPerNoteKey(keys.starkViewingSecret, nonce)\n}\n"]}
+{"version":3,"sources":["../src/keys/types.ts","../src/keys/derive.ts","../src/keys/viewing.ts"],"names":["toHex","keccak256"],"mappings":";;;;;;AA8FO,IAAM,6BAAA,GAAqD;AAAA,EAChE,OAAA,EAAS,+BAAA;AAAA,EACT,OAAA,EAAS;AACX;;;ACnFA,aAAA,EAAA;AACA,WAAA,EAAA;AAwBA,eAAsB,uBAAA,CACpB,SAAA,EACA,MAAA,GAA8B,6BAAA,EACT;AACrB,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,wBAAsB,CAAA;AAGxD,EAAA,MAAM,IAAA,GAAO,UAAU,SAAS,CAAA;AAGhC,EAAA,MAAM,kBAAA,GAAqB,SAAA;AAAA,IACzB,KAAA,CAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,WAAA,EAAc,MAAA,CAAO,OAAO,CAAA,CAAE,CAAC;AAAA,GACvE;AACA,EAAA,MAAM,iBAAA,GAAoB,aAAA,CAAc,UAAA,CAAW,kBAAkB,CAAC,CAAA;AACtE,EAAA,MAAM,iBAAiB,iBAAA,GAAoB,WAAA;AAI3C,EAAA,MAAM,SAAA,GAAY,MAAM,QAAA,CAAS,CAAC,cAAc,CAAC,CAAA;AAGjD,EAAA,MAAM,iBAAA,GAAoB,SAAA;AAAA,IACxB,KAAA,CAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,UAAA,EAAa,MAAA,CAAO,OAAO,CAAA,CAAE,CAAC;AAAA,GACtE;AACA,EAAA,MAAM,gBAAA,GAAmB,aAAA,CAAc,UAAA,CAAW,iBAAiB,CAAC,CAAA;AACpE,EAAA,MAAM,gBAAgB,gBAAA,GAAmB,WAAA;AAGzC,EAAA,MAAM,WAAA,GAAc,MAAM,QAAA,CAAS,CAAC,aAAa,CAAC,CAAA;AAElD,EAAA,OAAO;AAAA,IACL,cAAA;AAAA,IACA,SAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACF;AACF;AAKO,SAAS,uBAAA,CACd,SAA8B,6BAAA,EACtB;AACR,EAAA,OAAO,MAAA,CAAO,OAAA;AAChB;AAKA,eAAsB,wBAAA,CACpB,IAAA,EACA,SAAA,EACA,MAAA,GAA8B,6BAAA,EACZ;AAClB,EAAA,MAAM,WAAA,GAAc,MAAM,uBAAA,CAAwB,SAAA,EAAW,MAAM,CAAA;AAEnE,EAAA,OACE,IAAA,CAAK,cAAA,KAAmB,WAAA,CAAY,cAAA,IACpC,KAAK,SAAA,KAAc,WAAA,CAAY,SAAA,IAC/B,IAAA,CAAK,aAAA,KAAkB,WAAA,CAAY,aAAA,IACnC,IAAA,CAAK,gBAAgB,WAAA,CAAY,WAAA;AAErC;AAYO,SAAS,4BAAA,CACd,SAAA,EACA,MAAA,GAA8B,6BAAA,EACb;AACjB,EAAA,MAAM,IAAA,GAAO,UAAU,SAAS,CAAA;AAGhC,EAAA,MAAM,iBAAA,GAAoB,SAAA;AAAA,IACxB,KAAA,CAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,iBAAA,EAAoB,MAAA,CAAO,OAAO,CAAA,CAAE,CAAC;AAAA,GAC7E;AACA,EAAA,MAAM,WAAA,GAAc,gBAAgB,iBAAiB,CAAA;AACrD,EAAA,MAAM,cAAA,GAAiB,sBAAsB,WAAW,CAAA;AAGxD,EAAA,MAAM,gBAAA,GAAmB,SAAA;AAAA,IACvB,KAAA,CAAM,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,CAAA,EAAG,IAAI,CAAA,gBAAA,EAAmB,MAAA,CAAO,OAAO,CAAA,CAAE,CAAC;AAAA,GAC5E;AACA,EAAA,MAAM,kBAAA,GAAqB,gBAAgB,gBAAgB,CAAA;AAC3D,EAAA,MAAM,sBAAA,GAAyB,sBAAsB,kBAAkB,CAAA;AAEvE,EAAA,OAAO;AAAA,IACL,WAAA;AAAA,IACA,cAAA;AAAA,IACA,kBAAA;AAAA,IACA,gBAAA,EAAkB;AAAA,GACpB;AACF;AAQA,eAAsB,2BAAA,CACpB,SAAA,EACA,MAAA,GAA8B,6BAAA,EACL;AACzB,EAAA,MAAM,KAAA,GAAQ,MAAM,uBAAA,CAAwB,SAAA,EAAW,MAAM,CAAA;AAC7D,EAAA,MAAM,KAAA,GAAQ,4BAAA,CAA6B,SAAA,EAAW,MAAM,CAAA;AAC5D,EAAA,OAAO,EAAE,OAAO,KAAA,EAAM;AACxB;AAOA,eAAsB,mBAAmB,cAAA,EAAyC;AAChF,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,wBAAsB,CAAA;AACxD,EAAA,OAAO,MAAM,QAAA,CAAS,CAAC,cAAA,EAAgB,EAAE,CAAC,CAAA;AAC5C;ACzIA,WAAA,EAAA;AASA,eAAsB,gBAAA,CACpB,eACA,KAAA,EACc;AACd,EAAA,MAAM,EAAE,QAAA,EAAS,GAAI,MAAM,OAAO,wBAAsB,CAAA;AACxD,EAAA,MAAM,aAAa,MAAM,QAAA,CAAS,CAAC,aAAA,EAAe,KAAK,CAAC,CAAA;AACxD,EAAA,OAAOA,KAAAA,CAAM,UAAA,EAAY,EAAE,IAAA,EAAM,IAAI,CAAA;AACvC;AAKA,eAAsB,wBAAA,CACpB,MACA,KAAA,EACc;AACd,EAAA,OAAO,gBAAA,CAAiB,IAAA,CAAK,aAAA,EAAe,KAAK,CAAA;AACnD;AAwBA,eAAsB,yBAAA,CACpB,IAAA,EACA,aAAA,EACA,KAAA,EACyB;AACzB,EAAA,MAAM,cAAuC,EAAC;AAE9C,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AAExB,IAAA,MAAM,gBAAgB,MAAM,gBAAA,CAAiB,IAAA,CAAK,aAAA,EAAe,KAAK,KAAK,CAAA;AAE3E,IAAA,WAAA,CAAY,IAAA,CAAK;AAAA,MACf,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ;AAAA,KACD,CAAA;AAAA,EACH;AAEA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,CAAA;AAAA,IACT,aAAA;AAAA,IACA,aAAa,IAAA,CAAK,WAAA;AAAA,IAClB,WAAA;AAAA,IACA,YAAA,EAAc;AAAA,kDAAA,EACkC,YAAY,MAAM,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA,CAahE,IAAA;AAAK,GACT;AACF;AAKO,SAAS,uBACd,UAAA,EACoC;AACpC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,OAAO,CAAA,qBAAA,EAAwB,UAAA,CAAW,OAAO,CAAA,qBAAA,CAAA,EAAwB;AAAA,EAClG;AAEA,EAAA,IAAI,CAAC,WAAW,aAAA,IAAiB,CAAC,WAAW,aAAA,CAAc,UAAA,CAAW,IAAI,CAAA,EAAG;AAC3E,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,wBAAA,EAAyB;AAAA,EACzD;AAEA,EAAA,IAAI,UAAA,CAAW,WAAA,KAAgB,MAAA,IAAa,UAAA,CAAW,gBAAgB,IAAA,EAAM;AAC3E,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,sBAAA,EAAuB;AAAA,EACvD;AAEA,EAAA,IAAI,CAAC,MAAM,OAAA,CAAQ,UAAA,CAAW,WAAW,CAAA,IAAK,UAAA,CAAW,WAAA,CAAY,MAAA,KAAW,CAAA,EAAG;AACjF,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,KAAA,EAAO,2BAAA,EAA4B;AAAA,EAC5D;AAEA,EAAA,OAAO,EAAE,OAAO,IAAA,EAAK;AACvB;AAQO,SAAS,uBAAA,CACd,YACA,SAAA,EACY;AACZ,EAAA,MAAM,MAAM,UAAA,CAAW,WAAA,CAAY,KAAK,CAAA,CAAA,KAAK,CAAA,CAAE,cAAc,SAAS,CAAA;AACtE,EAAA,OAAO,GAAA,GAAM,IAAI,aAAA,GAAgB,IAAA;AACnC;AAmBO,SAAS,qBAAA,CACd,oBACA,KAAA,EACK;AAEL,EAAA,MAAM,SAAS,SAAA,CAAU,CAAC,GAAG,kBAAA,EAAoB,KAAK,CAAC,CAAA;AAGvD,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,EAAE,CAAA;AAC/B,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,EAAG,CAAA,EAAA,EAAK;AAC1B,IAAA,MAAM,GAAA,GAAM,MAAA,CAAO,MAAA,CAAO,CAAC,CAAE,CAAA;AAC7B,IAAA,KAAA,CAAM,CAAA,GAAI,CAAC,CAAA,GAAI,GAAA,GAAM,GAAA;AACrB,IAAA,KAAA,CAAM,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,GAAK,OAAO,CAAA,GAAK,GAAA;AAChC,IAAA,KAAA,CAAM,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,GAAK,OAAO,EAAA,GAAM,GAAA;AACjC,IAAA,KAAA,CAAM,CAAA,GAAI,CAAA,GAAI,CAAC,CAAA,GAAK,OAAO,EAAA,GAAM,GAAA;AAAA,EACnC;AAGA,EAAA,OAAOC,SAAAA,CAAU,UAAA,CAAW,KAAK,CAAC,CAAA;AACpC;AAKO,SAAS,6BAAA,CACd,MACA,KAAA,EACK;AACL,EAAA,OAAO,qBAAA,CAAsB,IAAA,CAAK,kBAAA,EAAoB,KAAK,CAAA;AAC7D","file":"chunk-FTEXUSHR.js","sourcesContent":["/**\n * Key Type Definitions for UPP SDK\n *\n * Post-quantum key structure (hash-based, no elliptic curves):\n *\n * Wallet Signature → Seed\n *     ├── Spending Secret → Owner Hash = Poseidon(spendingSecret)\n *     └── Viewing Secret (for note encryption, derived from seed)\n *\n * Ownership is proven via hash preimage: \"I know secret such that Poseidon(secret) == ownerHash\"\n * This replaces the previous BabyJubJub ECDLP-based ownership proof.\n */\n\nimport type { Hex, Address } from 'viem'\n\n/**\n * Master keys derived from wallet signature\n *\n * Post-quantum: uses hash-based ownership instead of BabyJubJub curve.\n * ownerHash = Poseidon(spendingSecret) replaces spendingPubKey (curve point).\n */\nexport interface MasterKeys {\n  /** Spending secret - for note ownership proofs (hash preimage) */\n  spendingSecret: bigint\n  /** Owner hash = Poseidon(spendingSecret) - publicly committed in notes */\n  ownerHash: bigint\n  /** Viewing secret - for note encryption/decryption (symmetric key derivation) */\n  viewingSecret: bigint\n  /** Viewing hash = Poseidon(viewingSecret) - for search tags and indexing */\n  viewingHash: bigint\n}\n\n/**\n * Per-transaction viewing key (for decryption)\n *\n * Can be shared with auditors to reveal specific transactions\n * without compromising the master viewing secret.\n *\n * Post-quantum: uses hash-based key derivation instead of ECDH.\n */\nexport interface TransactionViewingKey {\n  /** The Merkle leaf index (for locating the on-chain event) */\n  leafIndex: number\n  /** The per-note nonce (used in key derivation) */\n  nonce: bigint\n  /** The per-note decryption key (derived from viewingSecret + nonce) */\n  decryptionKey: Hex\n}\n\n/**\n * Exported viewing keys for audit\n *\n * Contains the minimum information needed for an auditor\n * to decrypt specific transactions.\n */\nexport interface AuditKeyExport {\n  /** Version for forward compatibility (v4 = post-quantum hash-based) */\n  version: 4\n  /** Ethereum address that signed to derive keys (for identification) */\n  signerAddress: Address\n  /** The viewing hash (for verification) */\n  viewingHash: bigint\n  /** Per-transaction viewing keys */\n  viewingKeys: TransactionViewingKey[]\n  /** Instructions for auditor */\n  instructions: string\n}\n\n/**\n * Stealth address components (simplified for hash-based system)\n * Published once, used by senders to encrypt notes\n */\nexport interface StealthAddressComponents {\n  /** Owner hash = Poseidon(spendingSecret) */\n  ownerHash: bigint\n  /** Viewing hash = Poseidon(viewingSecret) - for encryption */\n  viewingHash: bigint\n  /** Optional chain ID (for multi-chain support) */\n  chainId?: number\n}\n\n/**\n * Configuration for key derivation\n */\nexport interface KeyDerivationConfig {\n  /** The message to sign for key derivation */\n  message: string\n  /** Version number for the key derivation scheme */\n  version: 1\n}\n\n/**\n * Default key derivation configuration\n */\nexport const DEFAULT_KEY_DERIVATION_CONFIG: KeyDerivationConfig = {\n  message: 'UPP Stealth Key Derivation v1',\n  version: 1,\n}\n\n/**\n * Result of deriving one-time keys for a transaction (hash-based)\n */\nexport interface OneTimeKeys {\n  /** One-time secret (for the owner to spend the note) */\n  oneTimeSecret: bigint\n  /** One-time owner hash = Poseidon(oneTimeSecret) - in the commitment */\n  ownerHash: bigint\n}\n\n/**\n * Serialized key format for storage\n */\nexport interface SerializedKeys {\n  version: 1\n  /** Hex-encoded encrypted key data */\n  encryptedData: Hex\n  /** Salt for key derivation (if password protected) */\n  salt?: Hex\n  /** Nonce for encryption */\n  nonce: Hex\n}\n\n// =========================================================================\n// STARK Key Types (M31/Keccak-based, post-quantum)\n// =========================================================================\n\nimport type { M31Digest, M31Secret } from '../utils/keccak-m31.js'\n\n/** Which proving system to use */\nexport type ProvingSystem = 'snark' | 'stark'\n\n/**\n * STARK master keys derived from wallet signature.\n *\n * Uses M31 field and keccak-256 hashing — no elliptic curves.\n * ownerHash = keccak_m31(starkSecret) — 4 M31 elements.\n */\nexport interface StarkMasterKeys {\n  /** 8 M31 limbs (248 bits of entropy) — for ownership proofs */\n  starkSecret: M31Secret\n  /** keccak_m31(starkSecret) — publicly committed in STARK notes */\n  starkOwnerHash: M31Digest\n  /** 8 M31 limbs — for note encryption/decryption */\n  starkViewingSecret: M31Secret\n  /** keccak_m31(starkViewingSecret) — for search tags and indexing */\n  starkViewingHash: M31Digest\n}\n\n/**\n * Dual master keys: both SNARK (BN254/Poseidon) and STARK (M31/Keccak).\n *\n * Derived from the same wallet signature via domain-separated keccak256.\n * Breaking BJJ (quantum) does NOT compromise STARK keys (keccak preimage resistance).\n */\nexport interface DualMasterKeys {\n  snark: MasterKeys\n  stark: StarkMasterKeys\n}\n","/**\n * Key Derivation from Wallet Signature (Post-Quantum / Hash-Based)\n *\n * Derives keys from an Ethereum wallet signature using only hash functions.\n * No elliptic curve operations — quantum-resistant by design.\n *\n * Security Model:\n * - Keys are derived deterministically from the signature\n * - No seed phrase management required\n * - Same signature always produces same keys\n * - Ownership proven via hash preimage (Poseidon), not discrete log\n */\n\nimport { keccak256, toHex, type Hex } from 'viem'\nimport { FIELD_PRIME } from '../utils/poseidon.js'\nimport { hexToBytes, bytesToBigint } from '../utils/crypto.js'\nimport { splitToM31Limbs, computeStarkOwnerHash } from '../utils/keccak-m31.js'\nimport type { MasterKeys, StarkMasterKeys, DualMasterKeys, KeyDerivationConfig } from './types.js'\nimport { DEFAULT_KEY_DERIVATION_CONFIG } from './types.js'\n\n/**\n * Derive master keys from a wallet signature (hash-based, post-quantum)\n *\n * This replaces the previous BabyJubJub-based derivation.\n * Instead of curve points, we use Poseidon hashes for ownership proofs.\n *\n * @param signature - The wallet signature (from personal_sign or EIP-712)\n * @param config - Optional key derivation configuration\n * @returns Master keys for stealth operations\n *\n * @example\n * ```ts\n * const signature = await walletClient.signMessage({\n *   message: 'UPP Stealth Key Derivation v1'\n * })\n * const keys = await deriveKeysFromSignature(signature)\n * // keys.ownerHash is Poseidon(spendingSecret) — used in note commitments\n * ```\n */\nexport async function deriveKeysFromSignature(\n  signature: Hex,\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): Promise<MasterKeys> {\n  const { poseidon } = await import('../utils/poseidon.js')\n\n  // Create a seed from the signature using keccak256\n  const seed = keccak256(signature)\n\n  // Derive spending secret from seed\n  const spendingSecretHash = keccak256(\n    toHex(new TextEncoder().encode(`${seed}:spending:v${config.version}`))\n  )\n  const spendingSecretRaw = bytesToBigint(hexToBytes(spendingSecretHash))\n  const spendingSecret = spendingSecretRaw % FIELD_PRIME\n\n  // Derive owner hash: Poseidon(spendingSecret)\n  // This replaces BabyJubJub public key derivation\n  const ownerHash = await poseidon([spendingSecret])\n\n  // Derive viewing secret from seed\n  const viewingSecretHash = keccak256(\n    toHex(new TextEncoder().encode(`${seed}:viewing:v${config.version}`))\n  )\n  const viewingSecretRaw = bytesToBigint(hexToBytes(viewingSecretHash))\n  const viewingSecret = viewingSecretRaw % FIELD_PRIME\n\n  // Derive viewing hash: Poseidon(viewingSecret)\n  const viewingHash = await poseidon([viewingSecret])\n\n  return {\n    spendingSecret,\n    ownerHash,\n    viewingSecret,\n    viewingHash,\n  }\n}\n\n/**\n * Get the message to sign for key derivation\n */\nexport function getKeyDerivationMessage(\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): string {\n  return config.message\n}\n\n/**\n * Verify that keys match a given signature\n */\nexport async function verifyKeysMatchSignature(\n  keys: MasterKeys,\n  signature: Hex,\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): Promise<boolean> {\n  const derivedKeys = await deriveKeysFromSignature(signature, config)\n\n  return (\n    keys.spendingSecret === derivedKeys.spendingSecret &&\n    keys.ownerHash === derivedKeys.ownerHash &&\n    keys.viewingSecret === derivedKeys.viewingSecret &&\n    keys.viewingHash === derivedKeys.viewingHash\n  )\n}\n\n/**\n * Derive STARK master keys from a wallet signature (M31/Keccak, post-quantum)\n *\n * Uses domain-separated keccak256 to derive M31 secrets, then keccak_m31\n * for owner/viewing hashes. No elliptic curve operations.\n *\n * @param signature - The wallet signature (same one used for SNARK keys)\n * @param config - Optional key derivation configuration\n * @returns STARK master keys for stealth operations\n */\nexport function deriveStarkKeysFromSignature(\n  signature: Hex,\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): StarkMasterKeys {\n  const seed = keccak256(signature)\n\n  // Derive STARK spending secret: 8 M31 limbs from a single keccak256\n  const starkSpendingHash = keccak256(\n    toHex(new TextEncoder().encode(`${seed}:stark:spending:v${config.version}`))\n  )\n  const starkSecret = splitToM31Limbs(starkSpendingHash)\n  const starkOwnerHash = computeStarkOwnerHash(starkSecret)\n\n  // Derive STARK viewing secret: 8 M31 limbs from a separate keccak256\n  const starkViewingHash = keccak256(\n    toHex(new TextEncoder().encode(`${seed}:stark:viewing:v${config.version}`))\n  )\n  const starkViewingSecret = splitToM31Limbs(starkViewingHash)\n  const starkViewingHashDigest = computeStarkOwnerHash(starkViewingSecret)\n\n  return {\n    starkSecret,\n    starkOwnerHash,\n    starkViewingSecret,\n    starkViewingHash: starkViewingHashDigest,\n  }\n}\n\n/**\n * Derive both SNARK and STARK keys from a single wallet signature.\n *\n * Same seed, domain-separated derivation. Breaking BJJ (quantum) does NOT\n * compromise STARK keys — keccak preimage resistance provides 2^128 quantum security.\n */\nexport async function deriveDualKeysFromSignature(\n  signature: Hex,\n  config: KeyDerivationConfig = DEFAULT_KEY_DERIVATION_CONFIG\n): Promise<DualMasterKeys> {\n  const snark = await deriveKeysFromSignature(signature, config)\n  const stark = deriveStarkKeysFromSignature(signature, config)\n  return { snark, stark }\n}\n\n/**\n * Derive a nullifier key from the spending secret\n *\n * nullifier = Poseidon(nullifierKey, leafIndex, commitment)\n */\nexport async function deriveNullifierKey(spendingSecret: bigint): Promise<bigint> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  return await poseidon([spendingSecret, 0n]) // 0n = nullifier domain\n}\n","/**\n * Per-Transaction Viewing Key Derivation (Post-Quantum, Hash-Based)\n *\n * Implements hierarchical viewing keys using Poseidon hash instead of ECDH.\n *\n * Key Properties:\n * - Per-note decryption key: Poseidon(viewingSecret, nonce)\n * - AES key: keccak256(perNoteKey) for symmetric encryption\n *\n * Derivation:\n *   perNoteKey = Poseidon(viewingSecret, nonce)\n *   aesKey = keccak256(perNoteKey)\n *\n * SECURITY (v4):\n * Audit exports contain per-note decryption keys derived from viewingSecret + nonce.\n * This prevents master key recovery: knowing Poseidon(viewingSecret, nonce) doesn't\n * reveal viewingSecret due to the one-wayness of Poseidon.\n */\n\nimport type { Address, Hex } from 'viem'\nimport { keccak256, toHex } from 'viem'\nimport type {\n  MasterKeys,\n  StarkMasterKeys,\n  TransactionViewingKey,\n  AuditKeyExport,\n} from './types.js'\nimport { keccakM31, type M31Secret } from '../utils/keccak-m31.js'\nimport { bytesToHex } from '../utils/crypto.js'\n\n/**\n * Derive a per-note decryption key from master viewing secret and nonce\n *\n * @param viewingSecret - Master viewing secret\n * @param nonce - Unique per-note nonce\n * @returns Per-note decryption key as hex\n */\nexport async function derivePerNoteKey(\n  viewingSecret: bigint,\n  nonce: bigint\n): Promise<Hex> {\n  const { poseidon } = await import('../utils/poseidon.js')\n  const perNoteKey = await poseidon([viewingSecret, nonce])\n  return toHex(perNoteKey, { size: 32 })\n}\n\n/**\n * Derive per-note key from MasterKeys convenience wrapper\n */\nexport async function derivePerNoteKeyFromKeys(\n  keys: MasterKeys,\n  nonce: bigint\n): Promise<Hex> {\n  return derivePerNoteKey(keys.viewingSecret, nonce)\n}\n\n/**\n * Note reference for audit export\n */\nexport interface NoteReference {\n  /** The Merkle leaf index (for locating the on-chain event) */\n  leafIndex: number\n  /** The nonce used in per-note key derivation */\n  nonce: bigint\n}\n\n/**\n * Export viewing keys for specific notes\n *\n * Creates an export package that can be shared with an auditor.\n * The auditor can use these keys to decrypt the specified notes,\n * but cannot derive keys for other notes.\n *\n * @param keys - Master keys\n * @param signerAddress - The Ethereum address that signed to derive keys\n * @param notes - Array of note references (leafIndex + nonce) to export\n * @returns Audit key export package\n */\nexport async function exportViewingKeysForAudit(\n  keys: MasterKeys,\n  signerAddress: Address,\n  notes: NoteReference[]\n): Promise<AuditKeyExport> {\n  const viewingKeys: TransactionViewingKey[] = []\n\n  for (const note of notes) {\n    // Derive the per-note decryption key\n    const decryptionKey = await derivePerNoteKey(keys.viewingSecret, note.nonce)\n\n    viewingKeys.push({\n      leafIndex: note.leafIndex,\n      nonce: note.nonce,\n      decryptionKey,\n    })\n  }\n\n  return {\n    version: 4,\n    signerAddress,\n    viewingHash: keys.viewingHash,\n    viewingKeys,\n    instructions: `\nThis export contains per-note decryption keys for ${viewingKeys.length} UPP note(s).\n\nTo decrypt a note:\n1. Find the viewingKey entry for the desired leafIndex\n2. Retrieve the encrypted note from the blockchain (Shielded event at that leaf index)\n3. Derive AES key: key = keccak256(decryptionKey)\n4. Decrypt the note ciphertext with AES-GCM\n\nThese per-note keys ONLY allow decryption of the specified notes.\nThey do NOT reveal:\n- The master viewing secret (protected by Poseidon one-wayness)\n- Keys for any other notes\n- The spending secret (cannot spend funds)\n    `.trim(),\n  }\n}\n\n/**\n * Validate an audit key export\n */\nexport function validateAuditKeyExport(\n  exportData: AuditKeyExport\n): { valid: boolean; error?: string } {\n  if (exportData.version !== 4) {\n    return { valid: false, error: `Unsupported version: ${exportData.version}. Expected version 4.` }\n  }\n\n  if (!exportData.signerAddress || !exportData.signerAddress.startsWith('0x')) {\n    return { valid: false, error: 'Invalid signer address' }\n  }\n\n  if (exportData.viewingHash === undefined || exportData.viewingHash === null) {\n    return { valid: false, error: 'Missing viewing hash' }\n  }\n\n  if (!Array.isArray(exportData.viewingKeys) || exportData.viewingKeys.length === 0) {\n    return { valid: false, error: 'No viewing keys in export' }\n  }\n\n  return { valid: true }\n}\n\n/**\n * Look up a decryption key from an audit export by leaf index\n *\n * Returns the per-note decryption key for direct use in AES-GCM decryption.\n * Derive AES key: keccak256(decryptionKey)\n */\nexport function getViewingKeyFromExport(\n  exportData: AuditKeyExport,\n  leafIndex: number\n): Hex | null {\n  const key = exportData.viewingKeys.find(k => k.leafIndex === leafIndex)\n  return key ? key.decryptionKey : null\n}\n\n// =========================================================================\n// STARK Per-Note Viewing Key Derivation (Keccak-based, no elliptic curves)\n// =========================================================================\n\n/**\n * Derive a STARK per-note decryption key from viewing secret and nonce.\n *\n * Uses keccak_m31 instead of Poseidon — purely symmetric, post-quantum safe.\n * The nonce is encoded as a single M31 element appended to the viewing secret.\n *\n * perNoteDigest = keccak_m31(viewingSecret[0..8], nonce)\n * aesKey = keccak256(perNoteDigest_packed_as_16_LE_bytes)\n *\n * @param starkViewingSecret - 8 M31 limbs (the master STARK viewing secret)\n * @param nonce - Per-note nonce (M31 range)\n * @returns 32-byte AES key as hex\n */\nexport function deriveStarkPerNoteKey(\n  starkViewingSecret: M31Secret,\n  nonce: bigint\n): Hex {\n  // keccak_m31(viewingSecret[0..8], nonce) → 4 M31 elements\n  const digest = keccakM31([...starkViewingSecret, nonce])\n\n  // Pack digest as 16 bytes LE for AES key derivation\n  const bytes = new Uint8Array(16)\n  for (let i = 0; i < 4; i++) {\n    const val = Number(digest[i]!)\n    bytes[i * 4] = val & 0xff\n    bytes[i * 4 + 1] = (val >> 8) & 0xff\n    bytes[i * 4 + 2] = (val >> 16) & 0xff\n    bytes[i * 4 + 3] = (val >> 24) & 0xff\n  }\n\n  // Derive 32-byte AES key via keccak256\n  return keccak256(bytesToHex(bytes))\n}\n\n/**\n * Derive STARK per-note key from StarkMasterKeys convenience wrapper\n */\nexport function deriveStarkPerNoteKeyFromKeys(\n  keys: StarkMasterKeys,\n  nonce: bigint\n): Hex {\n  return deriveStarkPerNoteKey(keys.starkViewingSecret, nonce)\n}\n"]}