@unlink-xyz/core 0.1.2 → 0.1.3-canary.0877bfe

package/dist/tsup.browser.config.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Browser build configuration.
+ * Bundles all dependencies with Node.js polyfills for browser compatibility.
+ */
+declare const _default: import("tsup").Options | import("tsup").Options[] | ((overrideOptions: import("tsup").Options) => import("tsup").Options | import("tsup").Options[] | Promise<import("tsup").Options | import("tsup").Options[]>);
+export default _default;
+//# sourceMappingURL=tsup.browser.config.d.ts.map

package/dist/tsup.browser.config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tsup.browser.config.d.ts","sourceRoot":"","sources":["../tsup.browser.config.ts"],"names":[],"mappings":"AAIA;;;GAGG;;AACH,wBA0BG"}

package/dist/tsup.browser.config.js

@@ -0,0 +1,34 @@
+import { NodeGlobalsPolyfillPlugin } from "@esbuild-plugins/node-globals-polyfill";
+import { NodeModulesPolyfillPlugin } from "@esbuild-plugins/node-modules-polyfill";
+import { defineConfig } from "tsup";
+/**
+ * Browser build configuration.
+ * Bundles all dependencies with Node.js polyfills for browser compatibility.
+ */
+export default defineConfig({
+    entry: ["index.ts"],
+    format: ["esm"],
+    dts: false, // Types are generated by the main tsc build
+    clean: false, // Don't clean dist/ to preserve tsc output
+    splitting: false,
+    sourcemap: true,
+    minify: false,
+    // Bundle everything including dependencies for browser compatibility
+    noExternal: [/.*/],
+    esbuildPlugins: [
+        NodeModulesPolyfillPlugin(),
+        NodeGlobalsPolyfillPlugin({
+            buffer: true,
+            process: true,
+        }),
+    ],
+    esbuildOptions(options) {
+        options.supported = {
+            ...options.supported,
+            "top-level-await": true,
+        };
+    },
+    platform: "browser",
+    target: "es2022",
+    outDir: "dist/browser",
+});

package/dist/utils/amounts.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Parse a decimal string to bigint with specified decimals.
+ *
+ * @param value - Decimal string (e.g., "10.5", "42")
+ * @param decimals - Number of decimal
+ * @returns Amount as bigint in atomic units
+ * @throws ValidationError if value is invalid or has too many decimal places
+ *
+ * @example
+ * parseAmount("10.5", 18) // Returns 10500000000000000000n
+ * parseAmount("0.001", 6) // Returns 1000n
+ */
+export declare function parseAmount(value: string, decimals: number): bigint;
+/**
+ * Format a bigint amount to a decimal string.
+ *
+ * @param amount - Amount in atomic units as bigint
+ * @param decimals - Number of decimal places
+ * @returns Human-readable decimal string
+ *
+ * @example
+ * formatAmount(10500000000000000000n, 18) // Returns "10.5"
+ * formatAmount(1000n, 6) // Returns "0.001"
+ */
+export declare function formatAmount(amount: bigint, decimals: number): string;
+/**
+ * Split a total amount into N equal parts, distributing remainder evenly.
+ *
+ * @param total - Total amount to split
+ * @param parts - Number of parts to split into
+ * @returns Array of amounts that sum to total
+ * @throws ValidationError if parts is invalid or amount is too small to split
+ *
+ * @example
+ * splitAmount(100n, 3) // Returns [34n, 33n, 33n] (remainder goes to first outputs)
+ * splitAmount(10n, 2) // Returns [5n, 5n]
+ */
+export declare function splitAmount(total: bigint, parts: number): bigint[];
+//# sourceMappingURL=amounts.d.ts.map

package/dist/utils/amounts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"amounts.d.ts","sourceRoot":"","sources":["../../utils/amounts.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CA8BnE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAcrE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAgClE"}

package/dist/utils/amounts.js

@@ -0,0 +1,89 @@
+import { ValidationError } from "../errors.js";
+/**
+ * Parse a decimal string to bigint with specified decimals.
+ *
+ * @param value - Decimal string (e.g., "10.5", "42")
+ * @param decimals - Number of decimal
+ * @returns Amount as bigint in atomic units
+ * @throws ValidationError if value is invalid or has too many decimal places
+ *
+ * @example
+ * parseAmount("10.5", 18) // Returns 10500000000000000000n
+ * parseAmount("0.001", 6) // Returns 1000n
+ */
+export function parseAmount(value, decimals) {
+    const trimmed = value.trim();
+    if (!trimmed) {
+        throw new ValidationError("Amount cannot be empty");
+    }
+    if (!/^\d*(\.\d*)?$/.test(trimmed)) {
+        throw new ValidationError("Amount must be numeric and can include decimals (e.g., '10.5')");
+    }
+    const [rawWhole = "0", rawFraction = ""] = trimmed.split(".");
+    const whole = rawWhole === "" ? "0" : rawWhole;
+    if (rawFraction.length > decimals) {
+        throw new ValidationError(`Amount supports up to ${decimals} decimal places; trim the fractional part`);
+    }
+    // Pad fraction to full decimal places
+    const fraction = rawFraction.padEnd(decimals, "0");
+    const combined = `${whole}${fraction}`;
+    // Remove leading zeros
+    const normalized = combined.replace(/^0+(?=\d)/, "");
+    return normalized ? BigInt(normalized) : 0n;
+}
+/**
+ * Format a bigint amount to a decimal string.
+ *
+ * @param amount - Amount in atomic units as bigint
+ * @param decimals - Number of decimal places
+ * @returns Human-readable decimal string
+ *
+ * @example
+ * formatAmount(10500000000000000000n, 18) // Returns "10.5"
+ * formatAmount(1000n, 6) // Returns "0.001"
+ */
+export function formatAmount(amount, decimals) {
+    if (amount < 0n) {
+        throw new ValidationError("Amount must be non-negative");
+    }
+    const amountStr = amount.toString().padStart(decimals + 1, "0");
+    const wholePartEnd = amountStr.length - decimals;
+    const wholePart = amountStr.slice(0, wholePartEnd) || "0";
+    const fractionPart = amountStr.slice(wholePartEnd);
+    // Remove trailing zeros from fraction
+    const trimmedFraction = fractionPart.replace(/0+$/, "");
+    return trimmedFraction ? `${wholePart}.${trimmedFraction}` : wholePart;
+}
+/**
+ * Split a total amount into N equal parts, distributing remainder evenly.
+ *
+ * @param total - Total amount to split
+ * @param parts - Number of parts to split into
+ * @returns Array of amounts that sum to total
+ * @throws ValidationError if parts is invalid or amount is too small to split
+ *
+ * @example
+ * splitAmount(100n, 3) // Returns [34n, 33n, 33n] (remainder goes to first outputs)
+ * splitAmount(10n, 2) // Returns [5n, 5n]
+ */
+export function splitAmount(total, parts) {
+    if (parts === 0) {
+        return [];
+    }
+    if (parts < 0) {
+        throw new ValidationError("Number of parts must be non-negative");
+    }
+    if (!Number.isInteger(parts)) {
+        throw new ValidationError("Number of parts must be an integer");
+    }
+    if (total < BigInt(parts)) {
+        throw new ValidationError(`Amount (${total}) is too small to distribute across ${parts} outputs (minimum 1 per output)`);
+    }
+    const base = total / BigInt(parts);
+    if (base <= 0n) {
+        throw new ValidationError("Output share must be positive");
+    }
+    const remainder = Number(total - base * BigInt(parts));
+    // Distribute remainder across first N outputs
+    return Array.from({ length: parts }, (_, idx) => base + (idx < remainder ? 1n : 0n));
+}

package/dist/utils/async.d.ts

@@ -7,4 +7,13 @@ export declare function sleep(ms: number): Promise<void>;
  * Type guard for HTTP 404 errors.
  */
 export declare function isNotFoundError(err: unknown): err is HttpError;
+/**
+ * Race a promise against a timeout, rejecting if the timeout fires first.
+ * Properly cleans up the timeout to avoid memory leaks.
+ *
+ * @param promise - The promise to race against the timeout
+ * @param ms - Timeout in milliseconds
+ * @param error - Error to throw on timeout (string message or Error instance)
+ */
+export declare function withTimeout<T>(promise: Promise<T>, ms: number, error?: string | Error): Promise<T>;
 //# sourceMappingURL=async.d.ts.map

package/dist/utils/async.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"async.d.ts","sourceRoot":"","sources":["../../utils/async.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;GAEG;AACH,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE9D"}
+{"version":3,"file":"async.d.ts","sourceRoot":"","sources":["../../utils/async.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;GAEG;AACH,wBAAgB,KAAK,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE9D;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,CAAC,EACjC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EACnB,EAAE,EAAE,MAAM,EACV,KAAK,CAAC,EAAE,MAAM,GAAG,KAAK,GACrB,OAAO,CAAC,CAAC,CAAC,CAgBZ"}

package/dist/utils/async.js

@@ -11,3 +11,27 @@ export function sleep(ms) {
 export function isNotFoundError(err) {
     return err instanceof HttpError && err.status === 404;
 }
+/**
+ * Race a promise against a timeout, rejecting if the timeout fires first.
+ * Properly cleans up the timeout to avoid memory leaks.
+ *
+ * @param promise - The promise to race against the timeout
+ * @param ms - Timeout in milliseconds
+ * @param error - Error to throw on timeout (string message or Error instance)
+ */
+export async function withTimeout(promise, ms, error) {
+    let timeoutId;
+    return Promise.race([
+        promise,
+        new Promise((_, reject) => {
+            timeoutId = setTimeout(() => {
+                reject(error instanceof Error
+                    ? error
+                    : new Error(error ?? `Operation timed out after ${ms}ms`));
+            }, ms);
+        }),
+    ]).finally(() => {
+        if (timeoutId !== undefined)
+            clearTimeout(timeoutId);
+    });
+}

package/dist/utils/bigint.js

@@ -1,29 +1,29 @@
-import { CoreError } from "../errors.js";
-import { ByteLength, ByteUtils } from "../key-derivation/bytes.js";
+import { ValidationError } from "../errors.js";
+import { FieldSize, Hex } from "../keys/hex.js";
 /**
  * BigInt helpers shared across transaction builders to keep formatting consistent.
  */
 export function formatUint256(value) {
     assertNonNegative("uint256", value);
-    return ByteUtils.nToHex(value, ByteLength.UINT_256, true);
+    return Hex.fromBigInt(value, FieldSize.SCALAR, true);
 }
 export function parseHexToBigInt(value) {
-    return ByteUtils.hexToBigInt(value);
+    return Hex.toBigInt(value);
 }
 export function parseNumToBigInt(value) {
     if (value === undefined) {
-        throw new CoreError("Value is undefined");
+        throw new ValidationError("Value is undefined");
     }
     return BigInt(value);
 }
 export function assertNonNegative(label, value) {
     if (value < 0n) {
-        throw new CoreError(`${label} must be non-negative`);
+        throw new ValidationError(`${label} must be non-negative`);
     }
 }
 export function ensureBigint(label, value) {
     if (typeof value !== "bigint") {
-        throw new CoreError(`${label} must be provided as a bigint`);
+        throw new ValidationError(`${label} must be provided as a bigint`);
     }
     return value;
 }

package/dist/utils/crypto.d.ts

@@ -1,12 +1,18 @@
-import { Ciphertext, DepositNoteInput, DepositRequest, OutputNoteInput } from "../transactions/types.js";
-export declare function encryptNote(note: OutputNoteInput | DepositNoteInput): Ciphertext;
+import { Ciphertext, NoteInput } from "../transactions/types/index.js";
+export declare function encryptNote(note: NoteInput): Ciphertext;
 export declare function encrypt(data: bigint, key: bigint): bigint;
-export declare function decryptNote(c: Ciphertext, key: bigint): OutputNoteInput;
+export declare function decryptNote(c: Ciphertext, key: bigint): NoteInput;
 export declare function deriveCommitment(note: {
     npk: bigint;
     amount: bigint;
     token: string;
 }): bigint;
-export declare function deriveNpk(request: DepositRequest): bigint;
-export declare function computeCommitment(request: DepositRequest, npk: bigint): bigint;
+/**
+ * Derive the nullifier public key (npk) from a note.
+ */
+export declare function deriveNpk(note: NoteInput): bigint;
+/**
+ * Compute the commitment for a note given its npk.
+ */
+export declare function computeCommitment(note: NoteInput, npk: bigint): bigint;
 //# sourceMappingURL=crypto.d.ts.map

package/dist/utils/crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../utils/crypto.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,eAAe,EAChB,MAAM,0BAA0B,CAAC;AAGlC,wBAAgB,WAAW,CACzB,IAAI,EAAE,eAAe,GAAG,gBAAgB,GACvC,UAAU,CAQZ;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,eAAe,CAYvE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,UAGA;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,cAAc,UAEhD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,UAGrE"}
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../utils/crypto.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAGvE,wBAAgB,WAAW,CAAC,IAAI,EAAE,SAAS,GAAG,UAAU,CAQvD;AAED,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAYjE;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,UAGA;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,UAExC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,UAG7D"}

package/dist/utils/crypto.js

@@ -1,4 +1,4 @@
-import { poseidon } from "@railgun-community/circomlibjs";
+import { poseidon } from "../crypto-adapters/index.js";
 import { CoreError } from "../errors.js";
 import { parseHexToBigInt } from "./bigint.js";
 export function encryptNote(note) {
@@ -30,10 +30,16 @@ export function deriveCommitment(note) {
     const tokenScalar = BigInt(note.token);
     return poseidon([note.npk, tokenScalar, note.amount]);
 }
-export function deriveNpk(request) {
-    return poseidon([request.note.mpk, request.note.random]);
+/**
+ * Derive the nullifier public key (npk) from a note.
+ */
+export function deriveNpk(note) {
+    return poseidon([note.mpk, note.random]);
 }
-export function computeCommitment(request, npk) {
-    const tokenScalar = BigInt(request.note.token);
-    return poseidon([npk, tokenScalar, request.note.amount]);
+/**
+ * Compute the commitment for a note given its npk.
+ */
+export function computeCommitment(note, npk) {
+    const tokenScalar = BigInt(note.token);
+    return poseidon([npk, tokenScalar, note.amount]);
 }

package/dist/utils/format.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Normalize and validate an Ethereum address.
+ *
+ * @param value - Address string to normalize
+ * @returns Normalized lowercase address
+ * @throws CoreError if the address is invalid
+ *
+ * @example
+ * normalizeAddress("0xABC123...") // Returns "0xabc123..."
+ */
+export declare function normalizeAddress(value: string): `0x${string}`;
+/**
+ * Shorten a hex string for display.
+ *
+ * @param value - Hex string to shorten
+ * @param chars - Number of characters to show at start/end (default: 4)
+ * @returns Shortened string like "0x1234…abcd"
+ *
+ * @example
+ * shortenHex("0x1234567890abcdef1234567890abcdef12345678") // "0x1234…5678"
+ * shortenHex("0x1234567890abcdef1234567890abcdef12345678", 6) // "0x123456…345678"
+ */
+export declare function shortenHex(value: string, chars?: number): string;
+export { randomHex, randomBigint } from "./random.js";
+//# sourceMappingURL=format.d.ts.map

package/dist/utils/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../utils/format.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,MAAM,EAAE,CAE7D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,SAAI,GAAG,MAAM,CAK3D;AAGD,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/utils/format.js

@@ -0,0 +1,33 @@
+import { ensureAddress } from "./validators.js";
+/**
+ * Normalize and validate an Ethereum address.
+ *
+ * @param value - Address string to normalize
+ * @returns Normalized lowercase address
+ * @throws CoreError if the address is invalid
+ *
+ * @example
+ * normalizeAddress("0xABC123...") // Returns "0xabc123..."
+ */
+export function normalizeAddress(value) {
+    return ensureAddress("address", value);
+}
+/**
+ * Shorten a hex string for display.
+ *
+ * @param value - Hex string to shorten
+ * @param chars - Number of characters to show at start/end (default: 4)
+ * @returns Shortened string like "0x1234…abcd"
+ *
+ * @example
+ * shortenHex("0x1234567890abcdef1234567890abcdef12345678") // "0x1234…5678"
+ * shortenHex("0x1234567890abcdef1234567890abcdef12345678", 6) // "0x123456…345678"
+ */
+export function shortenHex(value, chars = 4) {
+    if (!value.startsWith("0x") || value.length <= chars * 2 + 2) {
+        return value;
+    }
+    return `${value.slice(0, chars + 2)}…${value.slice(-chars)}`;
+}
+// Re-export random utilities from dedicated module
+export { randomHex, randomBigint } from "./random.js";

package/dist/utils/json-codec.js

@@ -9,7 +9,7 @@ export function decodeJson(payload) {
     try {
         return JSON.parse(decoder.decode(payload));
     }
-    catch (err) {
+    catch {
         throw new CoreError("failed to decode stored state payload");
     }
 }

package/dist/utils/notes.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Minimal note shape required for balance computation.
+ */
+export type BalanceableNote = {
+    token: string;
+    value: bigint | string;
+};
+/**
+ * Computes token balances from a list of notes.
+ *
+ * @param notes - Array of notes to compute balances from
+ * @returns Record mapping token address to total balance
+ */
+export declare function computeBalances(notes: BalanceableNote[]): Record<string, bigint>;
+//# sourceMappingURL=notes.d.ts.map

package/dist/utils/notes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notes.d.ts","sourceRoot":"","sources":["../../utils/notes.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CACxB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,eAAe,EAAE,GACvB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQxB"}

package/dist/utils/notes.js

@@ -0,0 +1,14 @@
+/**
+ * Computes token balances from a list of notes.
+ *
+ * @param notes - Array of notes to compute balances from
+ * @returns Record mapping token address to total balance
+ */
+export function computeBalances(notes) {
+    const totals = {};
+    for (const note of notes) {
+        const value = typeof note.value === "bigint" ? note.value : BigInt(note.value);
+        totals[note.token] = (totals[note.token] ?? 0n) + value;
+    }
+    return totals;
+}

package/dist/utils/polling.d.ts

@@ -4,4 +4,9 @@
 export declare const DEFAULT_POLL_INTERVAL_MS = 500;
 export declare const DEFAULT_POLL_TIMEOUT_MS = 30000;
 export declare const MAX_POLL_INTERVAL_MS = 5000;
+/**
+ * Initial delay before first poll for fresh deposits.
+ * Reduces wasted 404 requests while commitment is being indexed.
+ */
+export declare const DEFAULT_INITIAL_POLL_DELAY_MS = 2000;
 //# sourceMappingURL=polling.d.ts.map

package/dist/utils/polling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"polling.d.ts","sourceRoot":"","sources":["../../utils/polling.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,oBAAoB,OAAQ,CAAC"}
+{"version":3,"file":"polling.d.ts","sourceRoot":"","sources":["../../utils/polling.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAC9C,eAAO,MAAM,oBAAoB,OAAQ,CAAC;AAC1C;;;GAGG;AACH,eAAO,MAAM,6BAA6B,OAAQ,CAAC"}

package/dist/utils/polling.js

@@ -4,3 +4,8 @@
 export const DEFAULT_POLL_INTERVAL_MS = 500;
 export const DEFAULT_POLL_TIMEOUT_MS = 30_000;
 export const MAX_POLL_INTERVAL_MS = 5_000;
+/**
+ * Initial delay before first poll for fresh deposits.
+ * Reduces wasted 404 requests while commitment is being indexed.
+ */
+export const DEFAULT_INITIAL_POLL_DELAY_MS = 2_000;

package/dist/utils/random.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Generate a cryptographically secure random bigint.
+ * @param bytes - Number of bytes of randomness (default: 32 for 256-bit)
+ * @returns Random bigint
+ */
+export declare function randomBigint(bytes?: number): bigint;
+/**
+ * Generate a cryptographically secure random hex string.
+ * @param bytes - Number of bytes of randomness
+ * @returns Random hex string with 0x prefix
+ */
+export declare function randomHex(bytes: number): `0x${string}`;
+//# sourceMappingURL=random.d.ts.map

package/dist/utils/random.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"random.d.ts","sourceRoot":"","sources":["../../utils/random.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,SAAK,GAAG,MAAM,CAY/C;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,MAAM,EAAE,CAItD"}

package/dist/utils/random.js

@@ -0,0 +1,27 @@
+import { CoreError } from "../errors.js";
+/**
+ * Generate a cryptographically secure random bigint.
+ * @param bytes - Number of bytes of randomness (default: 32 for 256-bit)
+ * @returns Random bigint
+ */
+export function randomBigint(bytes = 32) {
+    if (typeof globalThis.crypto?.getRandomValues !== "function") {
+        throw new CoreError("crypto.getRandomValues is not available");
+    }
+    const buffer = new Uint8Array(bytes);
+    globalThis.crypto.getRandomValues(buffer);
+    return BigInt("0x" +
+        Array.from(buffer)
+            .map((b) => b.toString(16).padStart(2, "0"))
+            .join(""));
+}
+/**
+ * Generate a cryptographically secure random hex string.
+ * @param bytes - Number of bytes of randomness
+ * @returns Random hex string with 0x prefix
+ */
+export function randomHex(bytes) {
+    return `0x${randomBigint(bytes)
+        .toString(16)
+        .padStart(bytes * 2, "0")}`;
+}

package/dist/utils/secure-memory.d.ts

@@ -0,0 +1,25 @@
+/**
+ * IMPORTANT limitations:
+ * - Garbage collection timing is unpredictable
+ * - Strings are immutable
+ * - No compiler enforcement to prevent copies
+ */
+/**
+ * Securely zeros out a Uint8Array's contents by overwriting with zeros.
+ * This should be called on all sensitive cryptographic material after use
+ *
+ * @param bytes - The Uint8Array to zeroize (will be mutated in place)
+ *
+ * @example
+ * ```typescript
+ * const privateKey = derivePrivateKey(seed);
+ * try {
+ *   const signature = sign(message, privateKey);
+ *   return signature;
+ * } finally {
+ *   zeroize(privateKey); // Clear sensitive data
+ * }
+ * ```
+ */
+export declare function zeroize(bytes: Uint8Array): void;
+//# sourceMappingURL=secure-memory.d.ts.map

package/dist/utils/secure-memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-memory.d.ts","sourceRoot":"","sources":["../../utils/secure-memory.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAI/C"}

package/dist/utils/secure-memory.js

@@ -0,0 +1,28 @@
+/**
+ * IMPORTANT limitations:
+ * - Garbage collection timing is unpredictable
+ * - Strings are immutable
+ * - No compiler enforcement to prevent copies
+ */
+/**
+ * Securely zeros out a Uint8Array's contents by overwriting with zeros.
+ * This should be called on all sensitive cryptographic material after use
+ *
+ * @param bytes - The Uint8Array to zeroize (will be mutated in place)
+ *
+ * @example
+ * ```typescript
+ * const privateKey = derivePrivateKey(seed);
+ * try {
+ *   const signature = sign(message, privateKey);
+ *   return signature;
+ * } finally {
+ *   zeroize(privateKey); // Clear sensitive data
+ * }
+ * ```
+ */
+export function zeroize(bytes) {
+    if (!bytes || bytes.length === 0)
+        return;
+    bytes.fill(0);
+}

package/dist/utils/signature.d.ts

@@ -1,6 +1,12 @@
 /**
  * Generates an EdDSA signature over a poseidon-hashed message using the spending private key.
  * Used for transact public signal signing.
+ *
+ * The spendingPrivateKey parameter should be zeroized by the caller after use.
+ *
+ * @param spendingPrivateKey - The 32-byte spending private key (will not be mutated)
+ * @param message - The bigint message to sign
+ * @returns The EdDSA signature
  */
 export declare function signTransactMessage(spendingPrivateKey: Uint8Array, message: bigint): {
     R8: [bigint, bigint];

package/dist/utils/signature.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../utils/signature.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,kBAAkB,EAAE,UAAU,EAC9B,OAAO,EAAE,MAAM,GACd;IAAE,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,CAKrC"}
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../utils/signature.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CACjC,kBAAkB,EAAE,UAAU,EAC9B,OAAO,EAAE,MAAM,GACd;IAAE,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,CAErC"}

package/dist/utils/signature.js

@@ -1,12 +1,14 @@
-import { Buffer } from "buffer";
-import { eddsa } from "@railgun-community/circomlibjs";
+import { signMessage } from "../crypto-adapters/index.js";
 /**
  * Generates an EdDSA signature over a poseidon-hashed message using the spending private key.
  * Used for transact public signal signing.
+ *
+ * The spendingPrivateKey parameter should be zeroized by the caller after use.
+ *
+ * @param spendingPrivateKey - The 32-byte spending private key (will not be mutated)
+ * @param message - The bigint message to sign
+ * @returns The EdDSA signature
  */
 export function signTransactMessage(spendingPrivateKey, message) {
-    const key = Buffer.isBuffer(spendingPrivateKey)
-        ? spendingPrivateKey
-        : Buffer.from(spendingPrivateKey);
-    return eddsa.signPoseidon(key, message);
+    return signMessage(spendingPrivateKey, message);
 }