@shielded-x402/client 0.1.1

package/dist/client.d.ts

@@ -0,0 +1,24 @@
+import { type Hex, type PaymentRequirement, type ShieldedNote, type ShieldedPaymentResponse } from '@shielded-x402/shared-types';
+import { type MerkleWitness } from './merkle.js';
+import type { Parsed402, ShieldedClientConfig, SpendBuildParams, SpendProofBundle } from './types.js';
+export declare class ShieldedClientSDK {
+    private readonly config;
+    constructor(config: ShieldedClientConfig);
+    deposit(amount: bigint, ownerPkHash: Hex): Promise<{
+        note: ShieldedNote;
+        txHash?: Hex;
+        leafIndex: number;
+    }>;
+    buildSpendProof(params: SpendBuildParams): SpendProofBundle;
+    buildSpendProofWithProvider(params: SpendBuildParams): Promise<SpendProofBundle>;
+    private attachRealProof;
+    pay402(paymentResponse: ShieldedPaymentResponse): Promise<{
+        payload: string;
+        signature: string;
+    }>;
+    parse402Response(response: Response): Parsed402;
+    complete402Payment(input: string, init: RequestInit, requirement: PaymentRequirement, note: ShieldedNote, witness: MerkleWitness, payerPkHash: Hex, fetchFn?: typeof fetch): Promise<Response>;
+    fetchWithShieldedPayment(input: string, init: RequestInit, note: ShieldedNote, witness: MerkleWitness, payerPkHash: Hex): Promise<Response>;
+}
+export declare function buildWitnessFromCommitments(commitments: Hex[], targetIndex: number): MerkleWitness;
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,GAAG,EAAE,KAAK,kBAAkB,EAAE,KAAK,YAAY,EAAE,KAAK,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAG/I,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,KAAK,EAAE,SAAS,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAMtG,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,oBAAoB;IAEnD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAqBjH,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB;IA8CrD,2BAA2B,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAKxE,eAAe;IA8BvB,MAAM,CAAC,eAAe,EAAE,uBAAuB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAMvG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS;IAMzC,kBAAkB,CACtB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,WAAW,EACjB,WAAW,EAAE,kBAAkB,EAC/B,IAAI,EAAE,YAAY,EAClB,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE,GAAG,EAChB,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,QAAQ,CAAC;IAkCd,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;CAOlJ;AAED,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,CAElG"}

package/dist/client.js

@@ -0,0 +1,155 @@
+import { X402_HEADERS } from '@shielded-x402/shared-types';
+import { randomBytes } from 'node:crypto';
+import { deriveChallengeHash, deriveCommitment, deriveNullifier } from './crypto.js';
+import { deriveWitness } from './merkle.js';
+function randomHex32() {
+    return (`0x${randomBytes(32).toString('hex')}`);
+}
+export class ShieldedClientSDK {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async deposit(amount, ownerPkHash) {
+        const rho = randomHex32();
+        const commitment = deriveCommitment(amount, rho, ownerPkHash);
+        const tx = this.config.depositFn ? await this.config.depositFn(amount, commitment) : undefined;
+        const result = {
+            note: {
+                amount,
+                rho,
+                pkHash: ownerPkHash,
+                commitment,
+                leafIndex: tx?.leafIndex ?? -1
+            },
+            leafIndex: tx?.leafIndex ?? -1
+        };
+        if (tx?.txHash) {
+            result.txHash = tx.txHash;
+        }
+        return result;
+    }
+    buildSpendProof(params) {
+        if (params.amount > params.note.amount) {
+            throw new Error('insufficient note amount');
+        }
+        const nullifier = deriveNullifier(params.nullifierSecret, params.note.commitment);
+        const merchantRho = params.merchantRho ?? randomHex32();
+        const merchantCommitment = deriveCommitment(params.amount, merchantRho, params.merchantPubKey);
+        const changeAmount = params.note.amount - params.amount;
+        const changeRho = params.changeRho ?? randomHex32();
+        const changeCommitment = deriveCommitment(changeAmount, changeRho, params.note.pkHash);
+        const challengeHash = deriveChallengeHash(params.challengeNonce, params.amount, params.merchantAddress);
+        const amountHex = `0x${params.amount.toString(16).padStart(64, '0')}`;
+        const response = {
+            proof: '0x00',
+            publicInputs: [
+                nullifier,
+                params.witness.root,
+                merchantCommitment,
+                changeCommitment,
+                challengeHash,
+                amountHex
+            ],
+            nullifier,
+            root: params.witness.root,
+            merchantCommitment,
+            changeCommitment,
+            challengeHash,
+            encryptedReceipt: params.encryptedReceipt,
+            txHint: `leaf:${params.note.leafIndex}`
+        };
+        return {
+            merchantRho,
+            response,
+            changeNote: {
+                amount: changeAmount,
+                rho: changeRho,
+                pkHash: params.note.pkHash,
+                commitment: changeCommitment,
+                leafIndex: -1
+            }
+        };
+    }
+    async buildSpendProofWithProvider(params) {
+        const bundle = this.buildSpendProof(params);
+        return this.attachRealProof(bundle, params);
+    }
+    async attachRealProof(bundle, params) {
+        if (!this.config.proofProvider) {
+            return bundle;
+        }
+        const proofResult = await this.config.proofProvider.generateProof({
+            note: params.note,
+            witness: params.witness,
+            nullifierSecret: params.nullifierSecret,
+            merchantPubKey: params.merchantPubKey,
+            merchantRho: bundle.merchantRho,
+            changePkHash: params.note.pkHash,
+            changeRho: bundle.changeNote.rho,
+            amount: params.amount,
+            challengeNonce: params.challengeNonce,
+            merchantAddress: params.merchantAddress,
+            expectedPublicInputs: bundle.response.publicInputs
+        });
+        const publicInputs = proofResult.publicInputs ?? bundle.response.publicInputs;
+        return {
+            ...bundle,
+            response: {
+                ...bundle.response,
+                proof: proofResult.proof,
+                publicInputs
+            }
+        };
+    }
+    async pay402(paymentResponse) {
+        const payload = JSON.stringify(paymentResponse);
+        const signature = await this.config.signer(payload);
+        return { payload, signature };
+    }
+    parse402Response(response) {
+        const header = response.headers.get(X402_HEADERS.paymentRequirement);
+        if (!header)
+            throw new Error(`missing ${X402_HEADERS.paymentRequirement} header`);
+        return { requirement: JSON.parse(header) };
+    }
+    async complete402Payment(input, init, requirement, note, witness, payerPkHash, fetchFn = fetch) {
+        if (requirement.rail !== 'shielded-usdc') {
+            throw new Error(`unsupported rail: ${requirement.rail}`);
+        }
+        const nonce = requirement.challengeNonce;
+        const merchant = requirement.verifyingContract;
+        const amount = BigInt(requirement.amount);
+        const spendParams = {
+            note,
+            witness,
+            nullifierSecret: payerPkHash,
+            merchantPubKey: requirement.merchantPubKey,
+            merchantAddress: merchant,
+            amount,
+            challengeNonce: nonce,
+            encryptedReceipt: '0x'
+        };
+        const bundleWithProof = await this.buildSpendProofWithProvider(spendParams);
+        const signed = await this.pay402(bundleWithProof.response);
+        const headers = new Headers(init.headers);
+        headers.set(X402_HEADERS.paymentResponse, signed.payload);
+        headers.set(X402_HEADERS.paymentSignature, signed.signature);
+        headers.set(X402_HEADERS.challengeNonce, requirement.challengeNonce);
+        return fetchFn(input, {
+            ...init,
+            headers
+        });
+    }
+    async fetchWithShieldedPayment(input, init, note, witness, payerPkHash) {
+        const first = await fetch(input, init);
+        if (first.status !== 402)
+            return first;
+        const parsed = this.parse402Response(first);
+        return this.complete402Payment(input, init, parsed.requirement, note, witness, payerPkHash);
+    }
+}
+export function buildWitnessFromCommitments(commitments, targetIndex) {
+    return deriveWitness(commitments, targetIndex);
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAsF,MAAM,6BAA6B,CAAC;AAC/I,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,aAAa,EAAsB,MAAM,aAAa,CAAC;AAGhE,SAAS,WAAW;IAClB,OAAO,CAAC,KAAK,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAQ,CAAC;AACzD,CAAC;AAED,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,MAA4B;QAA5B,WAAM,GAAN,MAAM,CAAsB;IAAG,CAAC;IAE7D,KAAK,CAAC,OAAO,CAAC,MAAc,EAAE,WAAgB;QAC5C,MAAM,GAAG,GAAG,WAAW,EAAE,CAAC;QAC1B,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAE/F,MAAM,MAAM,GAA4D;YACtE,IAAI,EAAE;gBACJ,MAAM;gBACN,GAAG;gBACH,MAAM,EAAE,WAAW;gBACnB,UAAU;gBACV,SAAS,EAAE,EAAE,EAAE,SAAS,IAAI,CAAC,CAAC;aAC/B;YACD,SAAS,EAAE,EAAE,EAAE,SAAS,IAAI,CAAC,CAAC;SAC/B,CAAC;QACF,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC;QAC5B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,eAAe,CAAC,MAAwB;QACtC,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClF,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,WAAW,EAAE,CAAC;QACxD,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;QAC/F,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC;QACpD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;QACxG,MAAM,SAAS,GAAI,KAAK,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAU,CAAC;QAE/E,MAAM,QAAQ,GAA4B;YACxC,KAAK,EAAE,MAAM;YACb,YAAY,EAAE;gBACZ,SAAS;gBACT,MAAM,CAAC,OAAO,CAAC,IAAI;gBACnB,kBAAkB;gBAClB,gBAAgB;gBAChB,aAAa;gBACb,SAAS;aACV;YACD,SAAS;YACT,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;YACzB,kBAAkB;YAClB,gBAAgB;YAChB,aAAa;YACb,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE,QAAQ,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;SACxC,CAAC;QAEF,OAAO;YACL,WAAW;YACX,QAAQ;YACR,UAAU,EAAE;gBACV,MAAM,EAAE,YAAY;gBACpB,GAAG,EAAE,SAAS;gBACd,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;gBAC1B,UAAU,EAAE,gBAAgB;gBAC5B,SAAS,EAAE,CAAC,CAAC;aACd;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,2BAA2B,CAAC,MAAwB;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,MAAwB,EAAE,MAAwB;QAC9E,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC;YAChE,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM;YAChC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,GAAG;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,eAAe,EAAE,MAAM,CAAC,eAAe;YACvC,oBAAoB,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY;SACnD,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,WAAW,CAAC,YAAY,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC9E,OAAO;YACL,GAAG,MAAM;YACT,QAAQ,EAAE;gBACR,GAAG,MAAM,CAAC,QAAQ;gBAClB,KAAK,EAAE,WAAW,CAAC,KAAK;gBACxB,YAAY;aACb;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,eAAwC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChC,CAAC;IAED,gBAAgB,CAAC,QAAkB;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,YAAY,CAAC,kBAAkB,SAAS,CAAC,CAAC;QAClF,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAuB,EAAE,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,KAAa,EACb,IAAiB,EACjB,WAA+B,EAC/B,IAAkB,EAClB,OAAsB,EACtB,WAAgB,EAChB,UAAwB,KAAK;QAE7B,IAAI,WAAW,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CAAC,qBAAqB,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,cAAqB,CAAC;QAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,iBAAiB,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAE1C,MAAM,WAAW,GAAqB;YACpC,IAAI;YACJ,OAAO;YACP,eAAe,EAAE,WAAW;YAC5B,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,eAAe,EAAE,QAAQ;YACzB,MAAM;YACN,cAAc,EAAE,KAAK;YACrB,gBAAgB,EAAE,IAAI;SACvB,CAAC;QAEF,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,2BAA2B,CAAC,WAAW,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC;QAErE,OAAO,OAAO,CAAC,KAAK,EAAE;YACpB,GAAG,IAAI;YACP,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,KAAa,EAAE,IAAiB,EAAE,IAAkB,EAAE,OAAsB,EAAE,WAAgB;QAC3H,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QAEvC,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC9F,CAAC;CACF;AAED,MAAM,UAAU,2BAA2B,CAAC,WAAkB,EAAE,WAAmB;IACjF,OAAO,aAAa,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AACjD,CAAC"}

package/dist/crypto.d.ts

@@ -0,0 +1,5 @@
+import { type Hex } from 'viem';
+export declare function deriveCommitment(amount: bigint, rho: Hex, pkHash: Hex): Hex;
+export declare function deriveNullifier(nullifierSecret: Hex, commitment: Hex): Hex;
+export declare function deriveChallengeHash(challengeNonce: Hex, amount: bigint, merchant: Hex): Hex;
+//# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAG3D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,CAG3E;AAED,wBAAgB,eAAe,CAAC,eAAe,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,GAAG,GAAG,CAE1E;AAED,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,GAAG,CAI3F"}

package/dist/crypto.js

@@ -0,0 +1,15 @@
+import { concatHex, keccak256, pad } from 'viem';
+const CHALLENGE_DOMAIN_HASH = '0xe32e24a51c351093d339c0035177dc2da5c1b8b9563e414393edd75506dcc055';
+export function deriveCommitment(amount, rho, pkHash) {
+    const amountWord = `0x${amount.toString(16).padStart(64, '0')}`;
+    return keccak256(concatHex([amountWord, rho, pkHash]));
+}
+export function deriveNullifier(nullifierSecret, commitment) {
+    return keccak256(concatHex([nullifierSecret, commitment]));
+}
+export function deriveChallengeHash(challengeNonce, amount, merchant) {
+    const amountWord = `0x${amount.toString(16).padStart(64, '0')}`;
+    const merchantWord = pad(merchant, { size: 32 });
+    return keccak256(concatHex([CHALLENGE_DOMAIN_HASH, challengeNonce, amountWord, merchantWord]));
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAY,MAAM,MAAM,CAAC;AAC3D,MAAM,qBAAqB,GAAG,oEAA2E,CAAC;AAE1G,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,GAAQ,EAAE,MAAW;IACpE,MAAM,UAAU,GAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAU,CAAC;IACzE,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,eAAoB,EAAE,UAAe;IACnE,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,cAAmB,EAAE,MAAc,EAAE,QAAa;IACpF,MAAM,UAAU,GAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAU,CAAC;IACzE,MAAM,YAAY,GAAG,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,qBAAqB,EAAE,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export * from './client.js';
+export * from './crypto.js';
+export * from './indexer.js';
+export * from './merkle.js';
+export * from './notes.js';
+export * from './proofProvider.js';
+export * from './shieldedFetch.js';
+export * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+export * from './client.js';
+export * from './crypto.js';
+export * from './indexer.js';
+export * from './merkle.js';
+export * from './notes.js';
+export * from './proofProvider.js';
+export * from './shieldedFetch.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,YAAY,CAAC"}

package/dist/indexer.d.ts

@@ -0,0 +1,22 @@
+import type { Hex, ShieldedNote } from '@shielded-x402/shared-types';
+export interface DepositEvent {
+    commitment: Hex;
+    leafIndex: number;
+    amount: bigint;
+}
+export interface SpendEvent {
+    merchantCommitment: Hex;
+    changeCommitment: Hex;
+}
+export interface NoteState {
+    commitments: Hex[];
+    notes: ShieldedNote[];
+}
+export declare class LocalNoteIndexer {
+    private readonly state;
+    ingestDeposit(event: DepositEvent, note: ShieldedNote): void;
+    ingestSpend(event: SpendEvent): void;
+    getCommitments(): Hex[];
+    getNotes(): ShieldedNote[];
+}
+//# sourceMappingURL=indexer.d.ts.map

package/dist/indexer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.d.ts","sourceRoot":"","sources":["../src/indexer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,UAAU;IACzB,kBAAkB,EAAE,GAAG,CAAC;IACxB,gBAAgB,EAAE,GAAG,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,GAAG,EAAE,CAAC;IACnB,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAGpB;IAEF,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI;IAK5D,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAIpC,cAAc,IAAI,GAAG,EAAE;IAIvB,QAAQ,IAAI,YAAY,EAAE;CAG3B"}

package/dist/indexer.js

@@ -0,0 +1,20 @@
+export class LocalNoteIndexer {
+    state = {
+        commitments: [],
+        notes: []
+    };
+    ingestDeposit(event, note) {
+        this.state.commitments[event.leafIndex] = event.commitment;
+        this.state.notes.push(note);
+    }
+    ingestSpend(event) {
+        this.state.commitments.push(event.merchantCommitment, event.changeCommitment);
+    }
+    getCommitments() {
+        return [...this.state.commitments];
+    }
+    getNotes() {
+        return [...this.state.notes];
+    }
+}
+//# sourceMappingURL=indexer.js.map

package/dist/indexer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexer.js","sourceRoot":"","sources":["../src/indexer.ts"],"names":[],"mappings":"AAkBA,MAAM,OAAO,gBAAgB;IACV,KAAK,GAAc;QAClC,WAAW,EAAE,EAAE;QACf,KAAK,EAAE,EAAE;KACV,CAAC;IAEF,aAAa,CAAC,KAAmB,EAAE,IAAkB;QACnD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QAC3D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,WAAW,CAAC,KAAiB;QAC3B,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChF,CAAC;IAED,cAAc;QACZ,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/merkle.d.ts

@@ -0,0 +1,11 @@
+import { type Hex } from 'viem';
+export interface MerkleWitness {
+    root: Hex;
+    path: Hex[];
+    indexBits: number[];
+}
+export declare function buildZeroes(depth: number): Hex[];
+export declare function emptyRoot(depth?: number): Hex;
+export declare function deriveWitness(commitments: Hex[], targetIndex: number): MerkleWitness;
+export declare function deriveRootFromCommitments(commitments: Hex[]): Hex;
+//# sourceMappingURL=merkle.d.ts.map

package/dist/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAKtD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,GAAG,CAAC;IACV,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAMD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,EAAE,CAOhD;AAED,wBAAgB,SAAS,CAAC,KAAK,GAAE,MAAoC,GAAG,GAAG,CAM1E;AAED,wBAAgB,aAAa,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,CA2CpF;AAED,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,GAAG,CAKjE"}

package/dist/merkle.js

@@ -0,0 +1,63 @@
+import { concatHex, keccak256 } from 'viem';
+import { CRYPTO_SPEC } from '@shielded-x402/shared-types';
+const ZERO_BYTES32 = '0x0000000000000000000000000000000000000000000000000000000000000000';
+function hashPair(left, right) {
+    return keccak256(concatHex([left, right]));
+}
+export function buildZeroes(depth) {
+    const zeroes = [ZERO_BYTES32];
+    for (let i = 1; i < depth; i += 1) {
+        const prev = zeroes[i - 1] ?? ZERO_BYTES32;
+        zeroes.push(hashPair(prev, prev));
+    }
+    return zeroes;
+}
+export function emptyRoot(depth = CRYPTO_SPEC.merkleTreeDepth) {
+    let current = ZERO_BYTES32;
+    for (let i = 0; i < depth; i += 1) {
+        current = hashPair(current, current);
+    }
+    return current;
+}
+export function deriveWitness(commitments, targetIndex) {
+    const depth = CRYPTO_SPEC.merkleTreeDepth;
+    if (targetIndex < 0 || targetIndex >= commitments.length) {
+        throw new Error('targetIndex out of range');
+    }
+    if (commitments.length >= 2 ** depth) {
+        throw new Error('commitment set exceeds tree capacity');
+    }
+    const zeroes = buildZeroes(depth);
+    const path = [];
+    const indexBits = [];
+    let levelNodes = [...commitments];
+    let idx = targetIndex;
+    for (let level = 0; level < depth; level += 1) {
+        const bit = idx & 1;
+        indexBits.push(bit);
+        const siblingIndex = bit === 0 ? idx + 1 : idx - 1;
+        const sibling = siblingIndex < levelNodes.length
+            ? (levelNodes[siblingIndex] ?? zeroes[level] ?? ZERO_BYTES32)
+            : (zeroes[level] ?? ZERO_BYTES32);
+        path.push(sibling);
+        const nextLevel = [];
+        for (let i = 0; i < levelNodes.length; i += 2) {
+            const left = levelNodes[i] ?? ZERO_BYTES32;
+            const right = i + 1 < levelNodes.length
+                ? (levelNodes[i + 1] ?? zeroes[level] ?? ZERO_BYTES32)
+                : (zeroes[level] ?? ZERO_BYTES32);
+            nextLevel.push(hashPair(left, right));
+        }
+        levelNodes = nextLevel;
+        idx = idx >> 1;
+    }
+    const root = levelNodes[0] ?? emptyRoot(depth);
+    return { root, path, indexBits };
+}
+export function deriveRootFromCommitments(commitments) {
+    if (commitments.length === 0) {
+        return emptyRoot(CRYPTO_SPEC.merkleTreeDepth);
+    }
+    return deriveWitness(commitments, 0).root;
+}
+//# sourceMappingURL=merkle.js.map

package/dist/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,SAAS,EAAY,MAAM,MAAM,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,MAAM,YAAY,GAAG,oEAA2E,CAAC;AAQjG,SAAS,QAAQ,CAAC,IAAS,EAAE,KAAU;IACrC,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,MAAM,GAAU,CAAC,YAAY,CAAC,CAAC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAgB,WAAW,CAAC,eAAe;IACnE,IAAI,OAAO,GAAG,YAAY,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,WAAkB,EAAE,WAAmB;IACnE,MAAM,KAAK,GAAG,WAAW,CAAC,eAAe,CAAC;IAC1C,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,IAAI,UAAU,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,WAAW,CAAC;IAEtB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;QACpB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpB,MAAM,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACnD,MAAM,OAAO,GACX,YAAY,GAAG,UAAU,CAAC,MAAM;YAC9B,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC;YAC7D,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEnB,MAAM,SAAS,GAAU,EAAE,CAAC;QAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC;YAC3C,MAAM,KAAK,GACT,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM;gBACvB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC;gBACtD,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,CAAC;YACtC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,UAAU,GAAG,SAAS,CAAC;QACvB,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,WAAkB;IAC1D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,aAAa,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC"}

package/dist/notes.d.ts

@@ -0,0 +1,19 @@
+import type { Hex, ShieldedNote } from '@shielded-x402/shared-types';
+export interface StoredNote {
+    note: ShieldedNote;
+    ciphertext?: Hex;
+}
+export interface NoteEncryptionKeyPair {
+    privateKey: Hex;
+    publicKey: Hex;
+}
+export declare function generateNoteEncryptionKeyPair(): NoteEncryptionKeyPair;
+export declare function serializeNote(note: ShieldedNote): string;
+export declare function deserializeNote(value: string): ShieldedNote;
+export declare function encryptNoteSymmetric(note: ShieldedNote, key: Buffer): Hex;
+export declare function decryptNoteSymmetric(ciphertext: Hex, key: Buffer): ShieldedNote;
+export declare function encryptNoteForPublicKey(note: ShieldedNote, recipientPublicKey: Hex, aad?: Uint8Array): Hex;
+export declare function decryptNoteWithPrivateKey(envelopeCiphertext: Hex, recipientPrivateKey: Hex, aad?: Uint8Array): ShieldedNote;
+export declare const encryptNote: typeof encryptNoteSymmetric;
+export declare const decryptNote: typeof decryptNoteSymmetric;
+//# sourceMappingURL=notes.d.ts.map

package/dist/notes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notes.d.ts","sourceRoot":"","sources":["../src/notes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAYrE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,YAAY,CAAC;IACnB,UAAU,CAAC,EAAE,GAAG,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,GAAG,CAAC;IAChB,SAAS,EAAE,GAAG,CAAC;CAChB;AAED,wBAAgB,6BAA6B,IAAI,qBAAqB,CAOrE;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAQxD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,YAAY,CAgB3D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,GAAG,CAOzE;AAED,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,GAAG,YAAY,CAU/E;AAOD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,YAAY,EAClB,kBAAkB,EAAE,GAAG,EACvB,GAAG,CAAC,EAAE,UAAU,GACf,GAAG,CA4BL;AAED,wBAAgB,yBAAyB,CACvC,kBAAkB,EAAE,GAAG,EACvB,mBAAmB,EAAE,GAAG,EACxB,GAAG,CAAC,EAAE,UAAU,GACf,YAAY,CA6Bd;AAGD,eAAO,MAAM,WAAW,6BAAuB,CAAC;AAChD,eAAO,MAAM,WAAW,6BAAuB,CAAC"}

package/dist/notes.js

@@ -0,0 +1,105 @@
+import { createCipheriv, createDecipheriv, createECDH, hkdfSync, randomBytes } from 'node:crypto';
+const NOTE_ENC_VERSION = 1;
+const INFO_LABEL = Buffer.from('shielded-x402:note-ecdh:v1', 'utf8');
+export function generateNoteEncryptionKeyPair() {
+    const ecdh = createECDH('secp256k1');
+    ecdh.generateKeys();
+    return {
+        privateKey: (`0x${ecdh.getPrivateKey().toString('hex')}`),
+        publicKey: (`0x${ecdh.getPublicKey(undefined, 'uncompressed').toString('hex')}`)
+    };
+}
+export function serializeNote(note) {
+    return JSON.stringify({
+        amount: note.amount.toString(),
+        rho: note.rho,
+        pkHash: note.pkHash,
+        commitment: note.commitment,
+        leafIndex: note.leafIndex
+    });
+}
+export function deserializeNote(value) {
+    const parsed = JSON.parse(value);
+    return {
+        amount: BigInt(parsed.amount),
+        rho: parsed.rho,
+        pkHash: parsed.pkHash,
+        commitment: parsed.commitment,
+        leafIndex: parsed.leafIndex
+    };
+}
+export function encryptNoteSymmetric(note, key) {
+    const iv = randomBytes(12);
+    const cipher = createCipheriv('aes-256-gcm', key, iv);
+    const payload = Buffer.from(serializeNote(note), 'utf8');
+    const encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return (`0x${Buffer.concat([iv, tag, encrypted]).toString('hex')}`);
+}
+export function decryptNoteSymmetric(ciphertext, key) {
+    const bytes = Buffer.from(ciphertext.slice(2), 'hex');
+    const iv = bytes.subarray(0, 12);
+    const tag = bytes.subarray(12, 28);
+    const encrypted = bytes.subarray(28);
+    const decipher = createDecipheriv('aes-256-gcm', key, iv);
+    decipher.setAuthTag(tag);
+    const plaintext = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+    return deserializeNote(plaintext.toString('utf8'));
+}
+function deriveAesKey(sharedSecret) {
+    const key = hkdfSync('sha256', sharedSecret, Buffer.alloc(0), INFO_LABEL, 32);
+    return Buffer.from(key);
+}
+export function encryptNoteForPublicKey(note, recipientPublicKey, aad) {
+    const recipientPub = Buffer.from(recipientPublicKey.slice(2), 'hex');
+    const eph = createECDH('secp256k1');
+    eph.generateKeys();
+    const sharedSecret = eph.computeSecret(recipientPub);
+    const aesKey = deriveAesKey(sharedSecret);
+    const iv = randomBytes(12);
+    const cipher = createCipheriv('aes-256-gcm', aesKey, iv);
+    if (aad) {
+        cipher.setAAD(Buffer.from(aad));
+    }
+    const payload = Buffer.from(serializeNote(note), 'utf8');
+    const encrypted = Buffer.concat([cipher.update(payload), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    const ephPub = eph.getPublicKey(undefined, 'uncompressed');
+    const envelope = Buffer.concat([
+        Buffer.from([NOTE_ENC_VERSION]),
+        ephPub,
+        iv,
+        tag,
+        encrypted
+    ]);
+    return (`0x${envelope.toString('hex')}`);
+}
+export function decryptNoteWithPrivateKey(envelopeCiphertext, recipientPrivateKey, aad) {
+    const bytes = Buffer.from(envelopeCiphertext.slice(2), 'hex');
+    if (bytes.length < 1 + 65 + 12 + 16) {
+        throw new Error('invalid envelope length');
+    }
+    const version = bytes[0];
+    if (version !== NOTE_ENC_VERSION) {
+        throw new Error(`unsupported note envelope version: ${version}`);
+    }
+    const ephPub = bytes.subarray(1, 66);
+    const iv = bytes.subarray(66, 78);
+    const tag = bytes.subarray(78, 94);
+    const encrypted = bytes.subarray(94);
+    const recipient = createECDH('secp256k1');
+    recipient.setPrivateKey(Buffer.from(recipientPrivateKey.slice(2), 'hex'));
+    const sharedSecret = recipient.computeSecret(ephPub);
+    const aesKey = deriveAesKey(sharedSecret);
+    const decipher = createDecipheriv('aes-256-gcm', aesKey, iv);
+    if (aad) {
+        decipher.setAAD(Buffer.from(aad));
+    }
+    decipher.setAuthTag(tag);
+    const plaintext = Buffer.concat([decipher.update(encrypted), decipher.final()]);
+    return deserializeNote(plaintext.toString('utf8'));
+}
+// Backward-compatible aliases.
+export const encryptNote = encryptNoteSymmetric;
+export const decryptNote = decryptNoteSymmetric;
+//# sourceMappingURL=notes.js.map

package/dist/notes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notes.js","sourceRoot":"","sources":["../src/notes.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,QAAQ,EACR,WAAW,EACZ,MAAM,aAAa,CAAC;AAErB,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;AAYrE,MAAM,UAAU,6BAA6B;IAC3C,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACrC,IAAI,CAAC,YAAY,EAAE,CAAC;IACpB,OAAO;QACL,UAAU,EAAE,CAAC,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAQ;QAChE,SAAS,EAAE,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAQ;KACxF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAkB;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC9B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAM9B,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QAC7B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAkB,EAAE,GAAW;IAClE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAQ,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAe,EAAE,GAAW;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC1D,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,YAAY,CAAC,YAAoB;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAkB,EAClB,kBAAuB,EACvB,GAAgB;IAEhB,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACpC,GAAG,CAAC,YAAY,EAAE,CAAC;IAEnB,MAAM,YAAY,GAAG,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAEzD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC/B,MAAM;QACN,EAAE;QACF,GAAG;QACH,SAAS;KACV,CAAC,CAAC;IAEH,OAAO,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAQ,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,kBAAuB,EACvB,mBAAwB,EACxB,GAAgB;IAEhB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,gBAAgB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAErC,MAAM,SAAS,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAC1C,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IAE1C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7D,IAAI,GAAG,EAAE,CAAC;QACR,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAEzB,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAChF,OAAO,eAAe,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,+BAA+B;AAC/B,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAChD,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC"}

package/dist/proofProvider.d.ts

@@ -0,0 +1,33 @@
+import type { ProofProvider } from './types.js';
+export interface NoirJsProgramExecutor {
+    execute: (input: Record<string, unknown>) => Promise<{
+        witness: unknown;
+    }>;
+}
+export interface NoirJsBackend {
+    generateProof: (witness: unknown) => Promise<{
+        proof: unknown;
+        publicInputs?: unknown;
+    }>;
+}
+export interface NoirJsProofProviderConfig {
+    noir: NoirJsProgramExecutor;
+    backend: NoirJsBackend;
+    enforcePublicInputsMatch?: boolean;
+}
+export interface NoirCircuitArtifact {
+    bytecode: string;
+    [key: string]: unknown;
+}
+export declare function createNoirJsProofProvider(config: NoirJsProofProviderConfig): ProofProvider;
+/**
+ * Convenience factory for Node agent apps:
+ * instantiates Noir + UltraHonkBackend from a compiled Noir circuit artifact.
+ */
+export declare function createNoirJsProofProviderFromCircuit(circuit: NoirCircuitArtifact, config?: Omit<NoirJsProofProviderConfig, 'noir' | 'backend'>): Promise<ProofProvider>;
+/**
+ * Highest-level convenience for agent apps:
+ * loads the bundled spend_change artifact from this package.
+ */
+export declare function createNoirJsProofProviderFromDefaultCircuit(config?: Omit<NoirJsProofProviderConfig, 'noir' | 'backend'>): Promise<ProofProvider>;
+//# sourceMappingURL=proofProvider.d.ts.map

package/dist/proofProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proofProvider.d.ts","sourceRoot":"","sources":["../src/proofProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAA6C,MAAM,YAAY,CAAC;AAuI3F,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5E;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC1F;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,OAAO,EAAE,aAAa,CAAC;IACvB,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,yBAAyB,GAAG,aAAa,CAsB1F;AAED;;;GAGG;AACH,wBAAsB,oCAAoC,CACxD,OAAO,EAAE,mBAAmB,EAC5B,MAAM,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,GAAG,SAAS,CAAC,GAC3D,OAAO,CAAC,aAAa,CAAC,CAoBxB;AAED;;;GAGG;AACH,wBAAsB,2CAA2C,CAC/D,MAAM,CAAC,EAAE,IAAI,CAAC,yBAAyB,EAAE,MAAM,GAAG,SAAS,CAAC,GAC3D,OAAO,CAAC,aAAa,CAAC,CAKxB"}