@utxopia/sdk 0.1.0-alpha.3 → 0.1.0-alpha.5

package/dist/bitcoin/ika.d.ts

@@ -6,6 +6,7 @@
  * key that Ika can sign for. Ika pre-alpha signs for the raw x-only key; it
  * does not currently produce signatures for UTXOpia's per-deposit tweaked keys.
  */
+import { type BitcoinNetwork } from "../taproot";
 /**
  * Reference to an Ika dWallet for address derivation.
  *
@@ -33,10 +34,10 @@ export type IkaDWalletRef = {
  *   address = bech32m(hrp, [witness_version=1, ...words(output_key)])
  *
  * @param ref       The Ika dWallet reference (literal pubkey, or future async id).
- * @param network   "mainnet" | "testnet" | "regtest"
+ * @param network   BitcoinNetwork
  * @returns         The P2TR address (`bc1p…` / `tb1p…` / `bcrt1p…`)
  */
-export declare function deriveCustodyAddressFromIkaDWallet(ref: IkaDWalletRef, network: "mainnet" | "testnet" | "regtest"): string;
+export declare function deriveCustodyAddressFromIkaDWallet(ref: IkaDWalletRef, network: BitcoinNetwork): string;
 /**
  * Encode a raw x-only public key as a P2TR witness program.
  *
@@ -44,4 +45,4 @@ export declare function deriveCustodyAddressFromIkaDWallet(ref: IkaDWalletRef, n
  * direct-vault address used by the current Ika pre-alpha mock signer, because
  * the signer returns Schnorr signatures for the dWallet's raw x-only key.
  */
-export declare function deriveRawXOnlyP2TRAddress(xonlyPubkey: Uint8Array, network: "mainnet" | "testnet" | "regtest"): string;
+export declare function deriveRawXOnlyP2TRAddress(xonlyPubkey: Uint8Array, network: BitcoinNetwork): string;

package/dist/bitcoin/ika.js

@@ -7,7 +7,7 @@
  * does not currently produce signatures for UTXOpia's per-deposit tweaked keys.
  */
 import { taggedHash, hexToBytes, bytesToHex } from "../crypto";
-import { bech32m } from "bech32";
+import { p2trAddress } from "../taproot";
 import { secp256k1 } from "@noble/curves/secp256k1.js";
 /**
  * Derive the BIP-341 P2TR (key-path-only) address controlled by an Ika dWallet.
@@ -19,7 +19,7 @@ import { secp256k1 } from "@noble/curves/secp256k1.js";
  *   address = bech32m(hrp, [witness_version=1, ...words(output_key)])
  *
  * @param ref       The Ika dWallet reference (literal pubkey, or future async id).
- * @param network   "mainnet" | "testnet" | "regtest"
+ * @param network   BitcoinNetwork
  * @returns         The P2TR address (`bc1p…` / `tb1p…` / `bcrt1p…`)
  */
 export function deriveCustodyAddressFromIkaDWallet(ref, network) {
@@ -32,9 +32,7 @@ export function deriveCustodyAddressFromIkaDWallet(ref, network) {
     const outputPoint = internalPoint.add(tweakPoint);
     // Drop the 1-byte parity prefix to get the x-only output key.
     const outputKey = hexToBytes(outputPoint.toHex(true).slice(2));
-    const hrp = network === "mainnet" ? "bc" : network === "regtest" ? "bcrt" : "tb";
-    const words = bech32m.toWords(outputKey);
-    return bech32m.encode(hrp, [1, ...words]);
+    return p2trAddress(outputKey, network);
 }
 /**
  * Encode a raw x-only public key as a P2TR witness program.
@@ -47,8 +45,7 @@ export function deriveRawXOnlyP2TRAddress(xonlyPubkey, network) {
     if (xonlyPubkey.length !== 32) {
         throw new Error("xonlyPubkey must be 32 bytes");
     }
-    const hrp = network === "mainnet" ? "bc" : network === "regtest" ? "bcrt" : "tb";
-    return bech32m.encode(hrp, [1, ...bech32m.toWords(xonlyPubkey)]);
+    return p2trAddress(xonlyPubkey, network);
 }
 function extractXOnly(ref) {
     if (ref.type === "literal-xonly") {

package/dist/client.d.ts

@@ -20,7 +20,7 @@ import { type NetworkConfig, type NetworkId } from "./config";
 import { type AuthSignatureKeyDerivationOptions, type UTXOpiaKeys, type StealthMetaAddress, type WalletSignerAdapter, type KeySetupResult } from "./keys";
 import { type ViewOnlyKeys, type StealthOutputWithKeys, type NonInteractiveDepositResult, type TweakDepositResult } from "./stealth";
 import { type UtxoDescriptor } from "./psbt";
-import { type DepositOpReturnContext } from "./taproot";
+import { type DepositOpReturnContext, type BitcoinNetwork } from "./taproot";
 export interface UTXOpiaClientConfig {
     network?: NetworkId;
     /** Override backend URL (default: from network config) */
@@ -159,7 +159,7 @@ export declare class UTXOpiaClient {
         depositIndex: number;
         ikaXOnlyPubkey: Uint8Array;
         recipient?: StealthMetaAddress;
-        network?: "mainnet" | "testnet" | "regtest";
+        network?: BitcoinNetwork;
     }): Promise<TweakDepositResult>;
     /**
      * Prepare a BTC deposit: generate stealth deposit address + OP_RETURN.
@@ -167,7 +167,7 @@ export declare class UTXOpiaClient {
      */
     prepareDeposit(opts: {
         recipient?: StealthMetaAddress;
-        network?: "mainnet" | "testnet" | "regtest";
+        network?: BitcoinNetwork;
         opReturnContext: DepositOpReturnContext;
     }): Promise<NonInteractiveDepositResult>;
     /**

package/dist/crypto-babyjub.d.ts

@@ -22,10 +22,6 @@ export declare const BABYJUB_D = 168696n;
  * = field_prime / 8 (cofactor 8)
  */
 export declare const BABYJUB_ORDER = 2736030358979909402780800718157159386076813972158567259200215660948447373041n;
-/**
- * Baby Jubjub cofactor
- */
-export declare const BABYJUB_COFACTOR = 8n;
 /**
  * Generator point (BASE8) - matches circomlib's BabyPbk() generator
  * This is the base point of the prime-order subgroup (cofactor-cleared).

package/dist/crypto-babyjub.js

@@ -26,10 +26,6 @@ export const BABYJUB_D = 168696n;
  * = field_prime / 8 (cofactor 8)
  */
 export const BABYJUB_ORDER = 2736030358979909402780800718157159386076813972158567259200215660948447373041n;
-/**
- * Baby Jubjub cofactor
- */
-export const BABYJUB_COFACTOR = 8n;
 /**
  * Generator point (BASE8) - matches circomlib's BabyPbk() generator
  * This is the base point of the prime-order subgroup (cofactor-cleared).

package/dist/crypto.d.ts

@@ -12,6 +12,7 @@
  *
  * @module crypto
  */
+import { bytesToHex as nobleBytesToHex } from "@noble/hashes/utils.js";
 /** BN254 field prime (used by circom/snarkjs, also Baby Jubjub base field) */
 export declare const BN254_FIELD_PRIME = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
 export { BABYJUB_FIELD_PRIME, BABYJUB_A, BABYJUB_D, BABYJUB_ORDER, BABYJUB_BASE8, BABYJUB_IDENTITY, babyJubAdd, babyJubDouble, babyJubMul, babyJubNegate, isOnBabyJubCurve, isIdentity, babyJubCompress, babyJubDecompress, generateBabyJubKeyPair, deriveBabyJubKeyFromSeed, babyJubScalarFromBytes, babyJubScalarToBytes, type BabyJubPoint, } from "./crypto-babyjub";
@@ -35,7 +36,7 @@ export declare function hexToBytes(hex: string): Uint8Array;
 /**
  * Convert Uint8Array to hex string
  */
-export declare function bytesToHex(bytes: Uint8Array): string;
+export declare const bytesToHex: typeof nobleBytesToHex;
 /**
  * SHA-256 hash using @noble/hashes
  */
@@ -53,7 +54,3 @@ export declare function taggedHash(tag: string, data: Uint8Array): Uint8Array;
  * Derive a scalar from bytes (reduces modulo Baby Jubjub subgroup order)
  */
 export declare function scalarFromBytes(bytes: Uint8Array): bigint;
-/**
- * Convert a bigint scalar to 32 bytes (big-endian)
- */
-export declare function scalarToBytes(scalar: bigint): Uint8Array;

package/dist/crypto.js

@@ -13,6 +13,7 @@
  * @module crypto
  */
 import { sha256 } from "@noble/hashes/sha2.js";
+import { bytesToHex as nobleBytesToHex, hexToBytes as nobleHexToBytes } from "@noble/hashes/utils.js";
 // =============================================================================
 // Field Constants
 // =============================================================================
@@ -63,21 +64,14 @@ export function bytesToBigint(bytes) {
  * Convert hex string to Uint8Array
  */
 export function hexToBytes(hex) {
-    const cleanHex = hex.startsWith("0x") ? hex.slice(2) : hex;
-    const bytes = new Uint8Array(cleanHex.length / 2);
-    for (let i = 0; i < cleanHex.length; i += 2) {
-        bytes[i / 2] = parseInt(cleanHex.substr(i, 2), 16);
-    }
-    return bytes;
+    // The 0x prefix is ours; noble rejects it. Everything after is noble's, which
+    // also means malformed hex now throws instead of decoding to zero bytes.
+    return nobleHexToBytes(hex.startsWith("0x") ? hex.slice(2) : hex);
 }
 /**
  * Convert Uint8Array to hex string
  */
-export function bytesToHex(bytes) {
-    return Array.from(bytes)
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-}
+export const bytesToHex = nobleBytesToHex;
 // =============================================================================
 // Hashing Utilities
 // =============================================================================
@@ -126,15 +120,3 @@ export function scalarFromBytes(bytes) {
     }
     return mod(result, BABYJUB_ORDER);
 }
-/**
- * Convert a bigint scalar to 32 bytes (big-endian)
- */
-export function scalarToBytes(scalar) {
-    const bytes = new Uint8Array(32);
-    let temp = mod(scalar, BABYJUB_ORDER);
-    for (let i = 31; i >= 0; i--) {
-        bytes[i] = Number(temp & 0xffn);
-        temp = temp >> 8n;
-    }
-    return bytes;
-}

package/dist/index.d.ts

@@ -34,7 +34,7 @@ export { fetchTokenConfig, getTokenId, fetchSupportedTokens, fetchEnabledTokens,
 export { MAGICBLOCK_DELEGATION_PROGRAM_ID, MAGICBLOCK_DEVNET_ROUTER_URL, MAGICBLOCK_DEVNET_ROUTER_WS_URL, MAGICBLOCK_EPHEMERAL_VAULT_ID, MAGICBLOCK_MAGIC_CONTEXT_ID, MAGICBLOCK_MAGIC_PROGRAM_ID, MAGICBLOCK_MAX_PER_MEMBERS, MAGICBLOCK_PERMISSION_PROGRAM_ID, MAGICBLOCK_PER_MEMBER_FLAGS, MAGICBLOCK_VALIDATOR_IDENTITIES, buildDefaultPrivacyDomain, buildMagicBlockPerMemberFlags, deriveMagicBlockCommitRecordPDA, deriveMagicBlockCommitStatePDA, deriveMagicBlockDelegateBufferPDA, deriveMagicBlockDelegationMetadataPDA, deriveMagicBlockDelegationRecordPDA, deriveMagicBlockPermissionPDA, deriveMagicBlockUndelegateBufferPDA, requiresMagicBlockEndpoint, getMagicBlockEndpoint, getMagicBlockValidatorIdentity, createMagicBlockRouterConnection, type BuildPrivacyDomainOptions, type MagicBlockEndpointConfig, type MagicBlockExecutionMode, type MagicBlockPolicyMode, type MagicBlockPerMemberFlagName, type MagicBlockValidatorRegion, type PrivacyDomainConfig, type PrivacyDomainKind, } from "./magicblock";
 export { generateNote, createNoteFromSecrets, serializeNote, deserializeNote, noteHasComputedHashes, getNotePublicKeyX, computeNoteCommitment, computeNoteNullifier, formatBtc, parseBtc, deriveNote, deriveNotes, deriveMasterKey, deriveNoteFromMaster, estimateSeedStrength, createNote, prepareWithdrawal, createStealthNote, serializeStealthNote, deserializeStealthNote, type Note, type SerializedNote, type NoteData, type StealthNote, type SerializedStealthNote, createJoinSplitNote, computeJoinSplitNoteNullifier, serializeJoinSplitNote, deserializeJoinSplitNote, type JoinSplitNote, type SerializedJoinSplitNote, } from "./note";
 export { createMerkleProof, createMerkleProofFromBigints, proofToCircomFormat, proofToOnChainFormat, createEmptyMerkleProof, leafIndexToPathIndices, pathIndicesToLeafIndex, validateMerkleProofStructure, parseMerkleProofResponse, TREE_DEPTH, ROOT_HISTORY_SIZE, MAX_LEAVES, ZERO_VALUE, type MerkleProof, } from "./merkle";
-export { deriveTaprootAddress, deriveTaprootAddressWithRefund, depositTweakCommitment, deriveDepositAddress, depositLeafScript, DEPOSIT_NUMS_INTERNAL_KEY, buildRefundScript, computeTapLeafHash, verifyTaprootAddress, createP2TRScriptPubkey, parseP2TRScriptPubkey, isValidBitcoinAddress, getInternalKey, createCustomInternalKey, createOpReturnScriptFromPayload, buildDepositOpReturn, parseDepositOpReturn, encodeDepositOpReturnHeader, decodeDepositOpReturnHeader, validateDepositOpReturnContext, computeDepositPoolTag, DEPOSIT_DESTINATION_CHAIN, DEPOSIT_BITCOIN_NETWORK, DEPOSIT_OP_RETURN_VERSION, DEPOSIT_POOL_TAG_SIZE, DEPOSIT_OP_RETURN_SIZE, type DepositDestinationChain, type DepositBitcoinNetwork, type DepositOpReturnContext, type ParsedDepositOpReturn, } from "./taproot";
+export { deriveTaprootAddress, deriveTaprootAddressWithRefund, depositTweakCommitment, deriveDepositAddress, depositLeafScript, DEPOSIT_NUMS_INTERNAL_KEY, buildRefundScript, computeTapLeafHash, verifyTaprootAddress, createP2TRScriptPubkey, parseP2TRScriptPubkey, isValidBitcoinAddress, getInternalKey, createCustomInternalKey, createOpReturnScriptFromPayload, buildDepositOpReturn, parseDepositOpReturn, encodeDepositOpReturnHeader, decodeDepositOpReturnHeader, validateDepositOpReturnContext, computeDepositPoolTag, DEPOSIT_DESTINATION_CHAIN, DEPOSIT_BITCOIN_NETWORK, DEPOSIT_OP_RETURN_VERSION, DEPOSIT_POOL_TAG_SIZE, DEPOSIT_OP_RETURN_SIZE, bech32Hrp, networkForHrp, p2trAddress, type BitcoinNetwork, type DepositDestinationChain, type DepositBitcoinNetwork, type DepositOpReturnContext, type ParsedDepositOpReturn, } from "./taproot";
 export { encodeClaimLink, decodeClaimLink, parseClaimUrl, } from "./claim-link";
 export type { ProofData, MerkleProofInput, CircuitType, JoinSplitProofInputs, } from "./prover/web";
 export { uploadTransactionToBuffer, uploadProofToBuffer, closeBuffer, readBufferData, fetchRawTransaction, fetchMerkleProof, prepareVerifyDeposit, buildMerkleProof, needsBuffer as bufferNeedsBuffer, getProofSource, calculateUploadTransactions, CHADBUFFER_PROGRAM_ID, AUTHORITY_SIZE, MAX_DATA_PER_WRITE, SOLANA_TX_SIZE_LIMIT, type ProofUploadResult, } from "./chadbuffer";

package/dist/index.js

@@ -94,7 +94,7 @@ export { createMerkleProof, createMerkleProofFromBigints, proofToCircomFormat, p
 // ==========================================================================
 // Taproot address utilities
 // ==========================================================================
-export { deriveTaprootAddress, deriveTaprootAddressWithRefund, depositTweakCommitment, deriveDepositAddress, depositLeafScript, DEPOSIT_NUMS_INTERNAL_KEY, buildRefundScript, computeTapLeafHash, verifyTaprootAddress, createP2TRScriptPubkey, parseP2TRScriptPubkey, isValidBitcoinAddress, getInternalKey, createCustomInternalKey, createOpReturnScriptFromPayload, buildDepositOpReturn, parseDepositOpReturn, encodeDepositOpReturnHeader, decodeDepositOpReturnHeader, validateDepositOpReturnContext, computeDepositPoolTag, DEPOSIT_DESTINATION_CHAIN, DEPOSIT_BITCOIN_NETWORK, DEPOSIT_OP_RETURN_VERSION, DEPOSIT_POOL_TAG_SIZE, DEPOSIT_OP_RETURN_SIZE, } from "./taproot";
+export { deriveTaprootAddress, deriveTaprootAddressWithRefund, depositTweakCommitment, deriveDepositAddress, depositLeafScript, DEPOSIT_NUMS_INTERNAL_KEY, buildRefundScript, computeTapLeafHash, verifyTaprootAddress, createP2TRScriptPubkey, parseP2TRScriptPubkey, isValidBitcoinAddress, getInternalKey, createCustomInternalKey, createOpReturnScriptFromPayload, buildDepositOpReturn, parseDepositOpReturn, encodeDepositOpReturnHeader, decodeDepositOpReturnHeader, validateDepositOpReturnContext, computeDepositPoolTag, DEPOSIT_DESTINATION_CHAIN, DEPOSIT_BITCOIN_NETWORK, DEPOSIT_OP_RETURN_VERSION, DEPOSIT_POOL_TAG_SIZE, DEPOSIT_OP_RETURN_SIZE, bech32Hrp, networkForHrp, p2trAddress, } from "./taproot";
 // ==========================================================================
 // Claim link utilities
 // ==========================================================================

package/dist/instructions.d.ts

@@ -858,69 +858,6 @@ export declare function bigintTo32Bytes(value: bigint): Uint8Array;
  */
 export declare function bytes32ToBigint(bytes: Uint8Array): bigint;
 export { hexToBytes, bytesToHex } from "./crypto";
-/** initializePermissioned instruction options */
-export interface InitializePermissionedOptions {
-    /** PDA bump for pool state */
-    poolBump: number;
-    /** PDA bump for commitment tree */
-    treeBump: number;
-    /** Deposit fee in basis points (u16 LE) */
-    depositFeeBps: number;
-    /** Withdrawal fee in basis points (u16 LE) */
-    withdrawalFeeBps: number;
-    /** Auditor's Solana pubkey (32 bytes) */
-    auditor: Uint8Array;
-    /** Auditor's viewing public key (32 bytes) */
-    auditorViewingPubkey: Uint8Array;
-    /** Account addresses — same layout as initialize (disc=0) */
-    accounts: {
-        /** 0. pool_state (writable) */
-        poolState: Address;
-        /** 1. commitment_tree (writable) */
-        commitmentTree: Address;
-        /** 2. zkbtc_mint (writable) */
-        zkbtcMint: Address;
-        /** 3. pool_vault (writable) */
-        poolVault: Address;
-        /** 4. deposit_vault (writable) */
-        depositVault: Address;
-        /** 5. authority (signer, writable — pays for storage) */
-        authority: Address;
-        /** 6. system_program (readonly) */
-        systemProgram: Address;
-    };
-}
-/**
- * Build initializePermissioned instruction data (disc=21).
- *
- * Layout (after disc byte — same as initialize plus two 32-byte fields):
- *   pool_bump(1) + tree_bump(1) + deposit_fee_bps(2 LE) + withdrawal_fee_bps(2 LE)
- *   + auditor(32) + auditor_viewing_pubkey(32)
- *   = 70 bytes of payload; 71 bytes total with disc.
- */
-export declare function buildInitializePermissionedInstructionData(options: {
-    poolBump: number;
-    treeBump: number;
-    depositFeeBps: number;
-    withdrawalFeeBps: number;
-    auditor: Uint8Array;
-    auditorViewingPubkey: Uint8Array;
-}): Uint8Array;
-/**
- * Build a complete initializePermissioned instruction (disc=21).
- *
- * Initializes a pool in permissioned mode; deposits/shields require auditor co-signing.
- *
- * Accounts (identical to initialize, disc=0):
- * 0. pool_state          (writable)
- * 1. commitment_tree     (writable)
- * 2. zkbtc_mint          (writable)
- * 3. pool_vault          (writable)
- * 4. deposit_vault       (writable)
- * 5. authority           (writable signer)
- * 6. system_program      (readonly)
- */
-export declare function buildInitializePermissionedInstruction(options: InitializePermissionedOptions): Instruction;
 /** completeDepositPermissioned instruction options */
 export interface CompleteDepositPermissionedOptions {
     /** SPV-proven sweep txid (32 bytes, internal byte order) */
@@ -1150,56 +1087,6 @@ export declare function buildRegisterExitDestinationInstruction(options: {
         exitDestination: Address;
     };
 }): Instruction;
-/** setAuditorFrozen instruction options */
-export interface SetAuditorFrozenOptions {
-    /** true = freeze the auditor role; false = un-freeze */
-    frozen: boolean;
-    accounts: {
-        /** 0. pool_state (writable) */
-        poolState: Address;
-        /** 1. auditor (signer) */
-        auditor: Address;
-    };
-}
-/**
- * Build setAuditorFrozen instruction data (disc=28).
- *
- * Layout: disc(1) + frozen(1)  — frozen byte: 0 = not frozen, 1 = frozen.
- */
-export declare function buildSetAuditorFrozenInstructionData(frozen: boolean): Uint8Array;
-/**
- * Build a complete setAuditorFrozen instruction (disc=28).
- *
- * Accounts:
- * 0. pool_state (writable)
- * 1. auditor    (signer)
- */
-export declare function buildSetAuditorFrozenInstruction(options: SetAuditorFrozenOptions): Instruction;
-/** setAuditorViewingPubkey instruction options */
-export interface SetAuditorViewingPubkeyOptions {
-    /** New 32-byte viewing pubkey for the auditor */
-    viewingPubkey: Uint8Array;
-    accounts: {
-        /** 0. pool_state (writable) */
-        poolState: Address;
-        /** 1. auditor (signer) */
-        auditor: Address;
-    };
-}
-/**
- * Build setAuditorViewingPubkey instruction data (disc=29).
- *
- * Layout: disc(1) + viewing_pubkey(32) = 33 bytes.
- */
-export declare function buildSetAuditorViewingPubkeyInstructionData(viewingPubkey: Uint8Array): Uint8Array;
-/**
- * Build a complete setAuditorViewingPubkey instruction (disc=29).
- *
- * Accounts:
- * 0. pool_state (writable)
- * 1. auditor    (signer)
- */
-export declare function buildSetAuditorViewingPubkeyInstruction(options: SetAuditorViewingPubkeyOptions): Instruction;
 export interface RotateAuditorOptions {
     auditor: Uint8Array;
     viewingPubkey: Uint8Array;

package/dist/instructions.js

@@ -1498,75 +1498,6 @@ export function bytes32ToBigint(bytes) {
 // hexToBytes / bytesToHex live in ./crypto (single source); re-exported here
 // to preserve this module's public surface.
 export { hexToBytes, bytesToHex } from "./crypto";
-/**
- * Build initializePermissioned instruction data (disc=21).
- *
- * Layout (after disc byte — same as initialize plus two 32-byte fields):
- *   pool_bump(1) + tree_bump(1) + deposit_fee_bps(2 LE) + withdrawal_fee_bps(2 LE)
- *   + auditor(32) + auditor_viewing_pubkey(32)
- *   = 70 bytes of payload; 71 bytes total with disc.
- */
-export function buildInitializePermissionedInstructionData(options) {
-    if (options.auditor.length !== 32) {
-        throw new Error(`auditor must be 32 bytes, got ${options.auditor.length}`);
-    }
-    if (options.auditorViewingPubkey.length !== 32) {
-        throw new Error(`auditorViewingPubkey must be 32 bytes, got ${options.auditorViewingPubkey.length}`);
-    }
-    // disc(1) + pool_bump(1) + tree_bump(1) + deposit_fee_bps(2) + withdrawal_fee_bps(2) + auditor(32) + auditor_viewing_pubkey(32) = 71
-    const data = new Uint8Array(71);
-    const view = new DataView(data.buffer);
-    let offset = 0;
-    data[offset++] = PERMISSIONED_DISC.INITIALIZE_PERMISSIONED; // disc = 21
-    data[offset++] = options.poolBump;
-    data[offset++] = options.treeBump;
-    view.setUint16(offset, options.depositFeeBps, true);
-    offset += 2;
-    view.setUint16(offset, options.withdrawalFeeBps, true);
-    offset += 2;
-    data.set(options.auditor, offset);
-    offset += 32;
-    data.set(options.auditorViewingPubkey, offset);
-    return data;
-}
-/**
- * Build a complete initializePermissioned instruction (disc=21).
- *
- * Initializes a pool in permissioned mode; deposits/shields require auditor co-signing.
- *
- * Accounts (identical to initialize, disc=0):
- * 0. pool_state          (writable)
- * 1. commitment_tree     (writable)
- * 2. zkbtc_mint          (writable)
- * 3. pool_vault          (writable)
- * 4. deposit_vault       (writable)
- * 5. authority           (writable signer)
- * 6. system_program      (readonly)
- */
-export function buildInitializePermissionedInstruction(options) {
-    const config = getConfig();
-    const data = buildInitializePermissionedInstructionData({
-        poolBump: options.poolBump,
-        treeBump: options.treeBump,
-        depositFeeBps: options.depositFeeBps,
-        withdrawalFeeBps: options.withdrawalFeeBps,
-        auditor: options.auditor,
-        auditorViewingPubkey: options.auditorViewingPubkey,
-    });
-    return {
-        programAddress: config.utxopiaProgramId,
-        accounts: [
-            { address: options.accounts.poolState, role: AccountRole.WRITABLE },
-            { address: options.accounts.commitmentTree, role: AccountRole.WRITABLE },
-            { address: options.accounts.zkbtcMint, role: AccountRole.WRITABLE },
-            { address: options.accounts.poolVault, role: AccountRole.WRITABLE },
-            { address: options.accounts.depositVault, role: AccountRole.WRITABLE },
-            { address: options.accounts.authority, role: AccountRole.WRITABLE_SIGNER },
-            { address: options.accounts.systemProgram, role: AccountRole.READONLY },
-        ],
-        data,
-    };
-}
 /**
  * Build completeDepositPermissioned instruction data (disc=22).
  *
@@ -1777,64 +1708,6 @@ export function buildRegisterExitDestinationInstruction(options) {
         data,
     };
 }
-/**
- * Build setAuditorFrozen instruction data (disc=28).
- *
- * Layout: disc(1) + frozen(1)  — frozen byte: 0 = not frozen, 1 = frozen.
- */
-export function buildSetAuditorFrozenInstructionData(frozen) {
-    return new Uint8Array([INSTRUCTION.SET_AUDITOR_FROZEN, frozen ? 1 : 0]);
-}
-/**
- * Build a complete setAuditorFrozen instruction (disc=28).
- *
- * Accounts:
- * 0. pool_state (writable)
- * 1. auditor    (signer)
- */
-export function buildSetAuditorFrozenInstruction(options) {
-    const config = getConfig();
-    return {
-        programAddress: config.utxopiaProgramId,
-        accounts: [
-            { address: options.accounts.poolState, role: AccountRole.WRITABLE },
-            { address: options.accounts.auditor, role: AccountRole.READONLY_SIGNER },
-        ],
-        data: buildSetAuditorFrozenInstructionData(options.frozen),
-    };
-}
-/**
- * Build setAuditorViewingPubkey instruction data (disc=29).
- *
- * Layout: disc(1) + viewing_pubkey(32) = 33 bytes.
- */
-export function buildSetAuditorViewingPubkeyInstructionData(viewingPubkey) {
-    if (viewingPubkey.length !== 32) {
-        throw new Error(`viewingPubkey must be 32 bytes, got ${viewingPubkey.length}`);
-    }
-    const data = new Uint8Array(33);
-    data[0] = INSTRUCTION.SET_AUDITOR_VIEWING_PUBKEY;
-    data.set(viewingPubkey, 1);
-    return data;
-}
-/**
- * Build a complete setAuditorViewingPubkey instruction (disc=29).
- *
- * Accounts:
- * 0. pool_state (writable)
- * 1. auditor    (signer)
- */
-export function buildSetAuditorViewingPubkeyInstruction(options) {
-    const config = getConfig();
-    return {
-        programAddress: config.utxopiaProgramId,
-        accounts: [
-            { address: options.accounts.poolState, role: AccountRole.WRITABLE },
-            { address: options.accounts.auditor, role: AccountRole.READONLY_SIGNER },
-        ],
-        data: buildSetAuditorViewingPubkeyInstructionData(options.viewingPubkey),
-    };
-}
 export function buildRotateAuditorInstructionData(auditor, viewingPubkey) {
     if (auditor.length !== 32 || auditor.every((byte) => byte === 0)) {
         throw new Error("auditor must be a nonzero 32-byte public key");

package/dist/poseidon.d.ts

@@ -47,7 +47,3 @@ export declare function reduceToField(bytes: Uint8Array): bigint;
  * poseidon2_hash(reduce_to_field_exact(mint), [0u8; 32]).
  */
 export declare function computeTokenId(mintBytes: Uint8Array): bigint;
-/**
- * Convenience: compute token_id from a Solana address string
- */
-export declare function computeTokenIdFromAddress(mintAddress: string): bigint;

package/dist/poseidon.js

@@ -126,11 +126,3 @@ export function computeTokenId(mintBytes) {
     const reduced = reduceToField(mintBytes);
     return poseidonHashSync([reduced, 0n]);
 }
-/**
- * Convenience: compute token_id from a Solana address string
- */
-export function computeTokenIdFromAddress(mintAddress) {
-    // Base58 decode — import from @solana/kit if available, otherwise use raw bytes
-    // For now, caller should pass raw bytes via computeTokenId
-    throw new Error("Use computeTokenId(mintBytes) with raw pubkey bytes");
-}

package/dist/prover/index.d.ts

@@ -7,4 +7,3 @@
  * - @utxopia/sdk/prover/mobile for React Native Groth16 prover
  */
 export * from "./web";
-export type { MerkleProofInput, ProofData, CircuitType, JoinSplitProofInputs, } from "./web";

package/dist/prover/web.d.ts

@@ -9,7 +9,6 @@
  * - Nullifier = Poseidon(nullifyingKey, leafIndex)
  * - Signature = EdDSA-Poseidon over (merkleRoot, boundParamsHash, nullifiers..., commitmentsOut...)
  */
-import type { Address } from "@solana/kit";
 export interface MerkleProofInput {
     siblings: bigint[];
     indices: number[];
@@ -20,16 +19,10 @@ export interface ProofData {
     verificationKey?: Uint8Array;
 }
 export type CircuitType = `joinsplit_${number}x${number}`;
-/** Names of non-JoinSplit auxiliary circuits (selective disclosure). */
-export type AuxCircuitName = "ownership" | "range_sum" | "range_sum_4" | "range_sum_16";
 /**
  * Set the base path for circuit artifacts
  */
 export declare function setCircuitPath(path: string): void;
-/**
- * Get the current circuit base path
- */
-export declare function getCircuitPath(): string;
 /**
  * Pin the circuit artifacts this app is willing to prove with.
  *
@@ -126,11 +119,3 @@ export declare function proofToBytes(proof: ProofData): Uint8Array;
  * Cleanup all cached resources
  */
 export declare function cleanup(): Promise<void>;
-/**
- * Groth16 verifier program ID (from current config)
- */
-export declare function getGroth16VerifierProgramId(): Address;
-/**
- * Build instruction data for Groth16 verification
- */
-export declare function buildVerifyInstructionData(proof: Uint8Array, publicSignals: string[], vkHash: string): Uint8Array;

package/dist/prover/web.js

@@ -10,9 +10,8 @@
  * - Signature = EdDSA-Poseidon over (merkleRoot, boundParamsHash, nullifiers..., commitmentsOut...)
  */
 import { poseidonHashSync, computeJoinSplitCommitmentSync, computeJoinSplitNullifierSync, } from "../poseidon";
-import { BN254_FIELD_PRIME } from "../crypto";
+import { BN254_FIELD_PRIME, bytesToHex } from "../crypto";
 import { TREE_DEPTH } from "../merkle";
-import { getConfig } from "../config";
 import { MAX_SAFE_JOINSPLIT_SIZE } from "../vk-registry";
 /** Maximum satoshis (total BTC supply) */
 const MAX_SATOSHIS = 21000000n * 100000000n;
@@ -53,12 +52,6 @@ export function setCircuitPath(path) {
     artifactBytesCache.clear();
     artifactDownloadCache.clear();
 }
-/**
- * Get the current circuit base path
- */
-export function getCircuitPath() {
-    return circuitBasePath;
-}
 // Lazy-loaded snarkjs module
 let snarkjs = null;
 const circuitCache = new Map();
@@ -115,7 +108,6 @@ export function setCircuitArtifactDigests(digests) {
     // Anything admitted under the old policy must be re-checked under the new one.
     artifactBytesCache.clear();
 }
-const toHex = (buf) => Array.from(new Uint8Array(buf), (b) => b.toString(16).padStart(2, "0")).join("");
 async function verifyArtifactBytes(url, bytes) {
     if (!artifactDigests)
         return;
@@ -125,7 +117,7 @@ async function verifyArtifactBytes(url, bytes) {
         throw new Error(`No integrity digest recorded for circuit artifact ${url} — refusing to prove. ` +
             `Regenerate the artifact manifest so it covers every shape this origin serves.`);
     }
-    const actual = toHex(await crypto.subtle.digest("SHA-256", bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength)));
+    const actual = bytesToHex(new Uint8Array(await crypto.subtle.digest("SHA-256", bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength))));
     if (actual !== artifactDigests[key]) {
         throw new Error(`Circuit artifact ${key} failed its integrity check (expected ${artifactDigests[key]}, ` +
             `got ${actual}). Refusing to prove against an artifact this build does not recognise.`);
@@ -556,42 +548,3 @@ export async function cleanup() {
 // ==========================================================================
 // Solana Instruction Building (for Groth16 on-chain verification)
 // ==========================================================================
-/**
- * Groth16 verifier program ID (from current config)
- */
-export function getGroth16VerifierProgramId() {
-    const config = getConfig();
-    return config.groth16VerifierProgramId;
-}
-/**
- * Build instruction data for Groth16 verification
- */
-export function buildVerifyInstructionData(proof, publicSignals, vkHash) {
-    const piBytes = publicSignals.flatMap((pi) => {
-        const bytes = new Array(32).fill(0);
-        const bigint = BigInt(pi);
-        for (let i = 31; i >= 0; i--) {
-            bytes[i] = Number((bigint >> BigInt((31 - i) * 8)) & 0xffn);
-        }
-        return bytes;
-    });
-    const cleanHex = vkHash.startsWith("0x") ? vkHash.slice(2) : vkHash;
-    const vkHashBytes = new Uint8Array(cleanHex.length / 2);
-    for (let i = 0; i < vkHashBytes.length; i++) {
-        vkHashBytes[i] = parseInt(cleanHex.substr(i * 2, 2), 16);
-    }
-    const totalSize = proof.length + 4 + piBytes.length + 32;
-    const data = new Uint8Array(totalSize);
-    let offset = 0;
-    data.set(proof, offset);
-    offset += proof.length;
-    const piCount = publicSignals.length;
-    data[offset++] = piCount & 0xff;
-    data[offset++] = (piCount >> 8) & 0xff;
-    data[offset++] = (piCount >> 16) & 0xff;
-    data[offset++] = (piCount >> 24) & 0xff;
-    data.set(new Uint8Array(piBytes), offset);
-    offset += piBytes.length;
-    data.set(vkHashBytes, offset);
-    return data;
-}