@utxopia/sdk 0.1.0-alpha.4 → 0.1.0-alpha.6

package/dist/bitcoin/ika.d.ts

@@ -6,6 +6,7 @@
  * key that Ika can sign for. Ika pre-alpha signs for the raw x-only key; it
  * does not currently produce signatures for UTXOpia's per-deposit tweaked keys.
  */
+import { type BitcoinNetwork } from "../taproot";
 /**
  * Reference to an Ika dWallet for address derivation.
  *
@@ -33,10 +34,10 @@ export type IkaDWalletRef = {
  *   address = bech32m(hrp, [witness_version=1, ...words(output_key)])
  *
  * @param ref       The Ika dWallet reference (literal pubkey, or future async id).
- * @param network   "mainnet" | "testnet" | "regtest"
+ * @param network   BitcoinNetwork
  * @returns         The P2TR address (`bc1p…` / `tb1p…` / `bcrt1p…`)
  */
-export declare function deriveCustodyAddressFromIkaDWallet(ref: IkaDWalletRef, network: "mainnet" | "testnet" | "regtest"): string;
+export declare function deriveCustodyAddressFromIkaDWallet(ref: IkaDWalletRef, network: BitcoinNetwork): string;
 /**
  * Encode a raw x-only public key as a P2TR witness program.
  *
@@ -44,4 +45,4 @@ export declare function deriveCustodyAddressFromIkaDWallet(ref: IkaDWalletRef, n
  * direct-vault address used by the current Ika pre-alpha mock signer, because
  * the signer returns Schnorr signatures for the dWallet's raw x-only key.
  */
-export declare function deriveRawXOnlyP2TRAddress(xonlyPubkey: Uint8Array, network: "mainnet" | "testnet" | "regtest"): string;
+export declare function deriveRawXOnlyP2TRAddress(xonlyPubkey: Uint8Array, network: BitcoinNetwork): string;

package/dist/bitcoin/ika.js

@@ -7,7 +7,7 @@
  * does not currently produce signatures for UTXOpia's per-deposit tweaked keys.
  */
 import { taggedHash, hexToBytes, bytesToHex } from "../crypto";
-import { bech32m } from "bech32";
+import { p2trAddress } from "../taproot";
 import { secp256k1 } from "@noble/curves/secp256k1.js";
 /**
  * Derive the BIP-341 P2TR (key-path-only) address controlled by an Ika dWallet.
@@ -19,7 +19,7 @@ import { secp256k1 } from "@noble/curves/secp256k1.js";
  *   address = bech32m(hrp, [witness_version=1, ...words(output_key)])
  *
  * @param ref       The Ika dWallet reference (literal pubkey, or future async id).
- * @param network   "mainnet" | "testnet" | "regtest"
+ * @param network   BitcoinNetwork
  * @returns         The P2TR address (`bc1p…` / `tb1p…` / `bcrt1p…`)
  */
 export function deriveCustodyAddressFromIkaDWallet(ref, network) {
@@ -32,9 +32,7 @@ export function deriveCustodyAddressFromIkaDWallet(ref, network) {
     const outputPoint = internalPoint.add(tweakPoint);
     // Drop the 1-byte parity prefix to get the x-only output key.
     const outputKey = hexToBytes(outputPoint.toHex(true).slice(2));
-    const hrp = network === "mainnet" ? "bc" : network === "regtest" ? "bcrt" : "tb";
-    const words = bech32m.toWords(outputKey);
-    return bech32m.encode(hrp, [1, ...words]);
+    return p2trAddress(outputKey, network);
 }
 /**
  * Encode a raw x-only public key as a P2TR witness program.
@@ -47,8 +45,7 @@ export function deriveRawXOnlyP2TRAddress(xonlyPubkey, network) {
     if (xonlyPubkey.length !== 32) {
         throw new Error("xonlyPubkey must be 32 bytes");
     }
-    const hrp = network === "mainnet" ? "bc" : network === "regtest" ? "bcrt" : "tb";
-    return bech32m.encode(hrp, [1, ...bech32m.toWords(xonlyPubkey)]);
+    return p2trAddress(xonlyPubkey, network);
 }
 function extractXOnly(ref) {
     if (ref.type === "literal-xonly") {

package/dist/client.d.ts

@@ -20,7 +20,7 @@ import { type NetworkConfig, type NetworkId } from "./config";
 import { type AuthSignatureKeyDerivationOptions, type UTXOpiaKeys, type StealthMetaAddress, type WalletSignerAdapter, type KeySetupResult } from "./keys";
 import { type ViewOnlyKeys, type StealthOutputWithKeys, type NonInteractiveDepositResult, type TweakDepositResult } from "./stealth";
 import { type UtxoDescriptor } from "./psbt";
-import { type DepositOpReturnContext } from "./taproot";
+import { type DepositOpReturnContext, type BitcoinNetwork } from "./taproot";
 export interface UTXOpiaClientConfig {
     network?: NetworkId;
     /** Override backend URL (default: from network config) */
@@ -159,7 +159,7 @@ export declare class UTXOpiaClient {
         depositIndex: number;
         ikaXOnlyPubkey: Uint8Array;
         recipient?: StealthMetaAddress;
-        network?: "mainnet" | "testnet" | "regtest";
+        network?: BitcoinNetwork;
     }): Promise<TweakDepositResult>;
     /**
      * Prepare a BTC deposit: generate stealth deposit address + OP_RETURN.
@@ -167,7 +167,7 @@ export declare class UTXOpiaClient {
      */
     prepareDeposit(opts: {
         recipient?: StealthMetaAddress;
-        network?: "mainnet" | "testnet" | "regtest";
+        network?: BitcoinNetwork;
         opReturnContext: DepositOpReturnContext;
     }): Promise<NonInteractiveDepositResult>;
     /**

package/dist/client.js

@@ -183,8 +183,6 @@ export class UTXOpiaClient {
         const cached = this._tokenIdCache.get(mintAddress);
         if (cached !== undefined)
             return cached;
-        // Requires PublicKey — import dynamically to avoid hard dep
-        const mintBytes = hexToBytes(mintAddress.padStart(64, "0"));
         // If it's a base58 address, convert via PublicKey
         let bytes;
         try {
@@ -200,7 +198,9 @@ export class UTXOpiaClient {
             }
         }
         catch {
-            bytes = mintBytes;
+            // Lazy on purpose: a base58 mint padded to 64 is not hex, so computing
+            // this eagerly threw before the branch above ever ran.
+            bytes = hexToBytes(mintAddress.padStart(64, "0"));
         }
         const tokenId = computeTokenId(bytes);
         this._tokenIdCache.set(mintAddress, tokenId);

package/dist/config.js

@@ -175,8 +175,11 @@ export const MAINNET_CONFIG = {
     // Bitcoin Network
     bitcoinNetwork: "mainnet",
     esploraUrl: "https://mempool.space/api",
-    // Circuit CDN
-    circuitCdnUrl: "https://circuit.utxopia.com",
+    // Circuit CDN. Must carry the full versioned path: `resolveCircuitPath` turns a bare host
+    // into `<host>/circuits/groth16`, which is a DIFFERENT, stale build that still serves 200s
+    // for every shape with a different delta. Proofs built from it verify locally and are
+    // rejected on chain as "proof invalid".
+    circuitCdnUrl: "https://circuit.utxopia.com/circuits/v2/groth16",
     // Groth16 Verifier (placeholder)
     groth16VerifierProgramId: address("11111111111111111111111111111111"),
     // VK Hashes (placeholder - update when deployed)

package/dist/crypto-babyjub.d.ts

@@ -22,10 +22,6 @@ export declare const BABYJUB_D = 168696n;
  * = field_prime / 8 (cofactor 8)
  */
 export declare const BABYJUB_ORDER = 2736030358979909402780800718157159386076813972158567259200215660948447373041n;
-/**
- * Baby Jubjub cofactor
- */
-export declare const BABYJUB_COFACTOR = 8n;
 /**
  * Generator point (BASE8) - matches circomlib's BabyPbk() generator
  * This is the base point of the prime-order subgroup (cofactor-cleared).

package/dist/crypto-babyjub.js

@@ -26,10 +26,6 @@ export const BABYJUB_D = 168696n;
  * = field_prime / 8 (cofactor 8)
  */
 export const BABYJUB_ORDER = 2736030358979909402780800718157159386076813972158567259200215660948447373041n;
-/**
- * Baby Jubjub cofactor
- */
-export const BABYJUB_COFACTOR = 8n;
 /**
  * Generator point (BASE8) - matches circomlib's BabyPbk() generator
  * This is the base point of the prime-order subgroup (cofactor-cleared).

package/dist/crypto.d.ts

@@ -12,6 +12,7 @@
  *
  * @module crypto
  */
+import { bytesToHex as nobleBytesToHex } from "@noble/hashes/utils.js";
 /** BN254 field prime (used by circom/snarkjs, also Baby Jubjub base field) */
 export declare const BN254_FIELD_PRIME = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
 export { BABYJUB_FIELD_PRIME, BABYJUB_A, BABYJUB_D, BABYJUB_ORDER, BABYJUB_BASE8, BABYJUB_IDENTITY, babyJubAdd, babyJubDouble, babyJubMul, babyJubNegate, isOnBabyJubCurve, isIdentity, babyJubCompress, babyJubDecompress, generateBabyJubKeyPair, deriveBabyJubKeyFromSeed, babyJubScalarFromBytes, babyJubScalarToBytes, type BabyJubPoint, } from "./crypto-babyjub";
@@ -35,7 +36,7 @@ export declare function hexToBytes(hex: string): Uint8Array;
 /**
  * Convert Uint8Array to hex string
  */
-export declare function bytesToHex(bytes: Uint8Array): string;
+export declare const bytesToHex: typeof nobleBytesToHex;
 /**
  * SHA-256 hash using @noble/hashes
  */
@@ -53,7 +54,3 @@ export declare function taggedHash(tag: string, data: Uint8Array): Uint8Array;
  * Derive a scalar from bytes (reduces modulo Baby Jubjub subgroup order)
  */
 export declare function scalarFromBytes(bytes: Uint8Array): bigint;
-/**
- * Convert a bigint scalar to 32 bytes (big-endian)
- */
-export declare function scalarToBytes(scalar: bigint): Uint8Array;

package/dist/crypto.js

@@ -13,6 +13,7 @@
  * @module crypto
  */
 import { sha256 } from "@noble/hashes/sha2.js";
+import { bytesToHex as nobleBytesToHex, hexToBytes as nobleHexToBytes } from "@noble/hashes/utils.js";
 // =============================================================================
 // Field Constants
 // =============================================================================
@@ -63,21 +64,14 @@ export function bytesToBigint(bytes) {
  * Convert hex string to Uint8Array
  */
 export function hexToBytes(hex) {
-    const cleanHex = hex.startsWith("0x") ? hex.slice(2) : hex;
-    const bytes = new Uint8Array(cleanHex.length / 2);
-    for (let i = 0; i < cleanHex.length; i += 2) {
-        bytes[i / 2] = parseInt(cleanHex.substr(i, 2), 16);
-    }
-    return bytes;
+    // The 0x prefix is ours; noble rejects it. Everything after is noble's, which
+    // also means malformed hex now throws instead of decoding to zero bytes.
+    return nobleHexToBytes(hex.startsWith("0x") ? hex.slice(2) : hex);
 }
 /**
  * Convert Uint8Array to hex string
  */
-export function bytesToHex(bytes) {
-    return Array.from(bytes)
-        .map((b) => b.toString(16).padStart(2, "0"))
-        .join("");
-}
+export const bytesToHex = nobleBytesToHex;
 // =============================================================================
 // Hashing Utilities
 // =============================================================================
@@ -126,15 +120,3 @@ export function scalarFromBytes(bytes) {
     }
     return mod(result, BABYJUB_ORDER);
 }
-/**
- * Convert a bigint scalar to 32 bytes (big-endian)
- */
-export function scalarToBytes(scalar) {
-    const bytes = new Uint8Array(32);
-    let temp = mod(scalar, BABYJUB_ORDER);
-    for (let i = 31; i >= 0; i--) {
-        bytes[i] = Number(temp & 0xffn);
-        temp = temp >> 8n;
-    }
-    return bytes;
-}

package/dist/index.d.ts

@@ -34,7 +34,7 @@ export { fetchTokenConfig, getTokenId, fetchSupportedTokens, fetchEnabledTokens,
 export { MAGICBLOCK_DELEGATION_PROGRAM_ID, MAGICBLOCK_DEVNET_ROUTER_URL, MAGICBLOCK_DEVNET_ROUTER_WS_URL, MAGICBLOCK_EPHEMERAL_VAULT_ID, MAGICBLOCK_MAGIC_CONTEXT_ID, MAGICBLOCK_MAGIC_PROGRAM_ID, MAGICBLOCK_MAX_PER_MEMBERS, MAGICBLOCK_PERMISSION_PROGRAM_ID, MAGICBLOCK_PER_MEMBER_FLAGS, MAGICBLOCK_VALIDATOR_IDENTITIES, buildDefaultPrivacyDomain, buildMagicBlockPerMemberFlags, deriveMagicBlockCommitRecordPDA, deriveMagicBlockCommitStatePDA, deriveMagicBlockDelegateBufferPDA, deriveMagicBlockDelegationMetadataPDA, deriveMagicBlockDelegationRecordPDA, deriveMagicBlockPermissionPDA, deriveMagicBlockUndelegateBufferPDA, requiresMagicBlockEndpoint, getMagicBlockEndpoint, getMagicBlockValidatorIdentity, createMagicBlockRouterConnection, type BuildPrivacyDomainOptions, type MagicBlockEndpointConfig, type MagicBlockExecutionMode, type MagicBlockPolicyMode, type MagicBlockPerMemberFlagName, type MagicBlockValidatorRegion, type PrivacyDomainConfig, type PrivacyDomainKind, } from "./magicblock";
 export { generateNote, createNoteFromSecrets, serializeNote, deserializeNote, noteHasComputedHashes, getNotePublicKeyX, computeNoteCommitment, computeNoteNullifier, formatBtc, parseBtc, deriveNote, deriveNotes, deriveMasterKey, deriveNoteFromMaster, estimateSeedStrength, createNote, prepareWithdrawal, createStealthNote, serializeStealthNote, deserializeStealthNote, type Note, type SerializedNote, type NoteData, type StealthNote, type SerializedStealthNote, createJoinSplitNote, computeJoinSplitNoteNullifier, serializeJoinSplitNote, deserializeJoinSplitNote, type JoinSplitNote, type SerializedJoinSplitNote, } from "./note";
 export { createMerkleProof, createMerkleProofFromBigints, proofToCircomFormat, proofToOnChainFormat, createEmptyMerkleProof, leafIndexToPathIndices, pathIndicesToLeafIndex, validateMerkleProofStructure, parseMerkleProofResponse, TREE_DEPTH, ROOT_HISTORY_SIZE, MAX_LEAVES, ZERO_VALUE, type MerkleProof, } from "./merkle";
-export { deriveTaprootAddress, deriveTaprootAddressWithRefund, depositTweakCommitment, deriveDepositAddress, depositLeafScript, DEPOSIT_NUMS_INTERNAL_KEY, buildRefundScript, computeTapLeafHash, verifyTaprootAddress, createP2TRScriptPubkey, parseP2TRScriptPubkey, isValidBitcoinAddress, getInternalKey, createCustomInternalKey, createOpReturnScriptFromPayload, buildDepositOpReturn, parseDepositOpReturn, encodeDepositOpReturnHeader, decodeDepositOpReturnHeader, validateDepositOpReturnContext, computeDepositPoolTag, DEPOSIT_DESTINATION_CHAIN, DEPOSIT_BITCOIN_NETWORK, DEPOSIT_OP_RETURN_VERSION, DEPOSIT_POOL_TAG_SIZE, DEPOSIT_OP_RETURN_SIZE, type DepositDestinationChain, type DepositBitcoinNetwork, type DepositOpReturnContext, type ParsedDepositOpReturn, } from "./taproot";
+export { deriveTaprootAddress, deriveTaprootAddressWithRefund, depositTweakCommitment, deriveDepositAddress, depositLeafScript, DEPOSIT_NUMS_INTERNAL_KEY, buildRefundScript, computeTapLeafHash, verifyTaprootAddress, createP2TRScriptPubkey, parseP2TRScriptPubkey, isValidBitcoinAddress, getInternalKey, createCustomInternalKey, createOpReturnScriptFromPayload, buildDepositOpReturn, parseDepositOpReturn, encodeDepositOpReturnHeader, decodeDepositOpReturnHeader, validateDepositOpReturnContext, computeDepositPoolTag, DEPOSIT_DESTINATION_CHAIN, DEPOSIT_BITCOIN_NETWORK, DEPOSIT_OP_RETURN_VERSION, DEPOSIT_POOL_TAG_SIZE, DEPOSIT_OP_RETURN_SIZE, bech32Hrp, networkForHrp, p2trAddress, type BitcoinNetwork, type DepositDestinationChain, type DepositBitcoinNetwork, type DepositOpReturnContext, type ParsedDepositOpReturn, } from "./taproot";
 export { encodeClaimLink, decodeClaimLink, parseClaimUrl, } from "./claim-link";
 export type { ProofData, MerkleProofInput, CircuitType, JoinSplitProofInputs, } from "./prover/web";
 export { uploadTransactionToBuffer, uploadProofToBuffer, closeBuffer, readBufferData, fetchRawTransaction, fetchMerkleProof, prepareVerifyDeposit, buildMerkleProof, needsBuffer as bufferNeedsBuffer, getProofSource, calculateUploadTransactions, CHADBUFFER_PROGRAM_ID, AUTHORITY_SIZE, MAX_DATA_PER_WRITE, SOLANA_TX_SIZE_LIMIT, type ProofUploadResult, } from "./chadbuffer";
@@ -54,7 +54,7 @@ export { createFetchConnectionAdapter, createConnectionAdapterFromWeb3, createCo
 export { resolveSnsName, resolveStealthName, parseSnsStealthData, isSnsStealthAddress, isAuditorDisclosable, SnsComplianceFlags, SNS_COMPLIANCE_AUDITOR_OFFSET, SNS_COMPLIANCE_AUDITOR_BYTES, deriveParentDomainKey, SNS_STEALTH_DATA_SIZE, type SnsStealthAddress, } from "./sns-resolver";
 export { COMMITMENT_TREE_DISCRIMINATOR, parseCommitmentTreeData, isValidRoot, fetchCommitmentTree, getCommitmentIndex, saveCommitmentIndex, CommitmentTreeIndex, buildCommitmentTreeFromChain, fetchLeafIndexForCommitment, fetchMerkleProofForCommitment, getMerkleProofFromTree, type CommitmentTreeState, type RpcClient, type OnChainMerkleProof, } from "./commitment-tree";
 export { INSTRUCTION_DISCRIMINATORS, buildShieldInstructionData, buildShieldInstruction, type ShieldInstructionOptions, buildApproveRedemptionSigningInstructionData, buildApproveRedemptionSigningInstruction, buildCancelRedemptionInstructionData, buildCancelRedemptionInstruction, type CancelRedemptionInstructionOptions, bigintTo32Bytes, bytes32ToBigint, buildTransactInstructionData, buildTransactInstruction, buildRedeemInstructionData, buildUnshieldInstructionData, buildUnshieldInstruction, buildProposePoolUpdateInstructionData, buildProposePoolUpdateInstruction, buildExecutePoolUpdateInstructionData, buildExecutePoolUpdateInstruction, buildCancelPoolUpdateInstructionData, buildCancelPoolUpdateInstruction, buildRotateTreeInstructionData, buildRotateTreeInstruction, type RotateTreeOptions, buildMagicBlockDelegateInstructionData, buildMagicBlockDelegateInstruction, buildMagicBlockCommitInstructionData, buildMagicBlockCommitInstruction, buildMagicBlockPerPermissionInstructionData, buildMagicBlockPerPermissionInstruction, buildPolicyRequestHash, buildPolicyIntentParts, buildRegisterExitDestinationInstruction, buildRegisterExitDestinationInstructionData, MAX_POLICY_INTENT_PARTS, buildInitializePolicyApprovalInstructionData, buildInitializePolicyApprovalInstruction, buildPolicyApprovalDecisionInstruction, buildPolicyApprovalCommitInstruction, buildCompleteDepositPermissionedInstructionData, buildCompleteDepositPermissionedInstruction, buildShieldPermissionedInstructionData, buildShieldPermissionedInstruction, buildRotateAuditorInstructionData, buildRotateAuditorInstruction, type MagicBlockDelegateTarget, type MagicBlockDelegateInstructionOptions, type MagicBlockCommitInstructionOptions, type MagicBlockPerPermissionOperation, type MagicBlockPerPermissionMember, type MagicBlockPerPermissionInstructionOptions, type PolicyApprovalDecision, type InitializePolicyApprovalOptions, type CompleteDepositPermissionedOptions, type ShieldPermissionedInstructionOptions, type RotateAuditorOptions, buildVerifyTransactionInstructionData, buildCompleteDepositInstructionData, buildVerifyDepositInstructionData, buildVerifyDepositPermissionedInstructionData, buildSetPoolConfigInstructionData, parsePoolConfig, type ParsedPoolConfig, POOL_CONFIG_DISCRIMINATOR, POOL_CONFIG_LEN, POOL_SCRIPT_MAX_LEN, type Instruction, type ApproveRedemptionSigningInstructionOptions, type TransactInstructionOptions, type UnshieldInstructionOptions, type ProposePoolUpdateOptions, type ExecutePoolUpdateOptions, type CancelPoolUpdateOptions, } from "./instructions";
-export { VK_REGISTRY_DISCRIMINATOR, VK_REGISTRY_LEN, MAX_IC_POINTS, MAX_SAFE_JOINSPLIT_SIZE, INIT_VK_REGISTRY_DISCRIMINATOR, UPDATE_VK_REGISTRY_DISCRIMINATOR, joinSplitNumPublicInputs, computeVkHash, vkeyJsonToVkMaterial, buildVkRegistryData, parseVkRegistry, assertVkRegistryForShape, isVkRegistryReady, type JoinSplitVkMaterial, type SnarkjsVkeyJson, type ParsedVkRegistry, } from "./vk-registry";
+export { VK_REGISTRY_DISCRIMINATOR, VK_REGISTRY_LEN, MAX_IC_POINTS, MAX_SAFE_JOINSPLIT_SIZE, INIT_VK_REGISTRY_DISCRIMINATOR, UPDATE_VK_REGISTRY_DISCRIMINATOR, joinSplitNumPublicInputs, computeVkHash, vkeyJsonToVkMaterial, buildVkRegistryData, parseVkRegistry, assertVkRegistryForShape, assertVkeyMatchesRegistry, isVkRegistryReady, type JoinSplitVkMaterial, type SnarkjsVkeyJson, type ParsedVkRegistry, } from "./vk-registry";
 export { fetchExplorerDeposits, fetchExplorerTransfers, fetchExplorerRedemptions, parseNullifierRecord, parseRedemptionRequest, NULLIFIER_RECORD_SIZE, REDEMPTION_REQUEST_SIZE, NULLIFIER_RECORD_DISCRIMINATOR, REDEMPTION_REQUEST_DISCRIMINATOR, OPERATION_TYPE_LABELS, type ExplorerDeposit, type ExplorerTransferEvent, type ExplorerRedemption, type IndexerLeaf, } from "./explorer";
 export { parseProgramEvents, parseNullifierSpentEvent, parseStealthAnnouncementEvent, parseSenderMemoEvent, parseBtcOriginAttestationEvent, parseAuditorCiphertextEvent, EVENT_NULLIFIER_SPENT, EVENT_STEALTH_ANNOUNCEMENT, EVENT_NULLIFIERS_BATCH, EVENT_ANNOUNCEMENTS_BATCH, EVENT_SENDER_MEMO, EVENT_BTC_ORIGIN_ATTESTATION, EVENT_AUDITOR_CIPHERTEXT, type NullifierSpentEvent, type StealthAnnouncementEvent, type SenderMemoEvent, type BtcOriginAttestationEvent, type AuditorCiphertextEvent, type ProgramEvent, } from "./events";
 export { AnnouncementClient, type AnnouncementClientConfig, type AnnouncementListener, } from "./announcement-client";

package/dist/index.js

@@ -94,7 +94,7 @@ export { createMerkleProof, createMerkleProofFromBigints, proofToCircomFormat, p
 // ==========================================================================
 // Taproot address utilities
 // ==========================================================================
-export { deriveTaprootAddress, deriveTaprootAddressWithRefund, depositTweakCommitment, deriveDepositAddress, depositLeafScript, DEPOSIT_NUMS_INTERNAL_KEY, buildRefundScript, computeTapLeafHash, verifyTaprootAddress, createP2TRScriptPubkey, parseP2TRScriptPubkey, isValidBitcoinAddress, getInternalKey, createCustomInternalKey, createOpReturnScriptFromPayload, buildDepositOpReturn, parseDepositOpReturn, encodeDepositOpReturnHeader, decodeDepositOpReturnHeader, validateDepositOpReturnContext, computeDepositPoolTag, DEPOSIT_DESTINATION_CHAIN, DEPOSIT_BITCOIN_NETWORK, DEPOSIT_OP_RETURN_VERSION, DEPOSIT_POOL_TAG_SIZE, DEPOSIT_OP_RETURN_SIZE, } from "./taproot";
+export { deriveTaprootAddress, deriveTaprootAddressWithRefund, depositTweakCommitment, deriveDepositAddress, depositLeafScript, DEPOSIT_NUMS_INTERNAL_KEY, buildRefundScript, computeTapLeafHash, verifyTaprootAddress, createP2TRScriptPubkey, parseP2TRScriptPubkey, isValidBitcoinAddress, getInternalKey, createCustomInternalKey, createOpReturnScriptFromPayload, buildDepositOpReturn, parseDepositOpReturn, encodeDepositOpReturnHeader, decodeDepositOpReturnHeader, validateDepositOpReturnContext, computeDepositPoolTag, DEPOSIT_DESTINATION_CHAIN, DEPOSIT_BITCOIN_NETWORK, DEPOSIT_OP_RETURN_VERSION, DEPOSIT_POOL_TAG_SIZE, DEPOSIT_OP_RETURN_SIZE, bech32Hrp, networkForHrp, p2trAddress, } from "./taproot";
 // ==========================================================================
 // Claim link utilities
 // ==========================================================================
@@ -187,7 +187,7 @@ buildSetPoolConfigInstructionData, parsePoolConfig, POOL_CONFIG_DISCRIMINATOR, P
 // ==========================================================================
 // VK Registry (JoinSplit Groth16 on-chain verification keys)
 // ==========================================================================
-export { VK_REGISTRY_DISCRIMINATOR, VK_REGISTRY_LEN, MAX_IC_POINTS, MAX_SAFE_JOINSPLIT_SIZE, INIT_VK_REGISTRY_DISCRIMINATOR, UPDATE_VK_REGISTRY_DISCRIMINATOR, joinSplitNumPublicInputs, computeVkHash, vkeyJsonToVkMaterial, buildVkRegistryData, parseVkRegistry, assertVkRegistryForShape, isVkRegistryReady, } from "./vk-registry";
+export { VK_REGISTRY_DISCRIMINATOR, VK_REGISTRY_LEN, MAX_IC_POINTS, MAX_SAFE_JOINSPLIT_SIZE, INIT_VK_REGISTRY_DISCRIMINATOR, UPDATE_VK_REGISTRY_DISCRIMINATOR, joinSplitNumPublicInputs, computeVkHash, vkeyJsonToVkMaterial, buildVkRegistryData, parseVkRegistry, assertVkRegistryForShape, assertVkeyMatchesRegistry, isVkRegistryReady, } from "./vk-registry";
 // ==========================================================================
 // ChadBuffer Relay
 // ==========================================================================

package/dist/instructions.d.ts

@@ -858,69 +858,6 @@ export declare function bigintTo32Bytes(value: bigint): Uint8Array;
  */
 export declare function bytes32ToBigint(bytes: Uint8Array): bigint;
 export { hexToBytes, bytesToHex } from "./crypto";
-/** initializePermissioned instruction options */
-export interface InitializePermissionedOptions {
-    /** PDA bump for pool state */
-    poolBump: number;
-    /** PDA bump for commitment tree */
-    treeBump: number;
-    /** Deposit fee in basis points (u16 LE) */
-    depositFeeBps: number;
-    /** Withdrawal fee in basis points (u16 LE) */
-    withdrawalFeeBps: number;
-    /** Auditor's Solana pubkey (32 bytes) */
-    auditor: Uint8Array;
-    /** Auditor's viewing public key (32 bytes) */
-    auditorViewingPubkey: Uint8Array;
-    /** Account addresses — same layout as initialize (disc=0) */
-    accounts: {
-        /** 0. pool_state (writable) */
-        poolState: Address;
-        /** 1. commitment_tree (writable) */
-        commitmentTree: Address;
-        /** 2. zkbtc_mint (writable) */
-        zkbtcMint: Address;
-        /** 3. pool_vault (writable) */
-        poolVault: Address;
-        /** 4. deposit_vault (writable) */
-        depositVault: Address;
-        /** 5. authority (signer, writable — pays for storage) */
-        authority: Address;
-        /** 6. system_program (readonly) */
-        systemProgram: Address;
-    };
-}
-/**
- * Build initializePermissioned instruction data (disc=21).
- *
- * Layout (after disc byte — same as initialize plus two 32-byte fields):
- *   pool_bump(1) + tree_bump(1) + deposit_fee_bps(2 LE) + withdrawal_fee_bps(2 LE)
- *   + auditor(32) + auditor_viewing_pubkey(32)
- *   = 70 bytes of payload; 71 bytes total with disc.
- */
-export declare function buildInitializePermissionedInstructionData(options: {
-    poolBump: number;
-    treeBump: number;
-    depositFeeBps: number;
-    withdrawalFeeBps: number;
-    auditor: Uint8Array;
-    auditorViewingPubkey: Uint8Array;
-}): Uint8Array;
-/**
- * Build a complete initializePermissioned instruction (disc=21).
- *
- * Initializes a pool in permissioned mode; deposits/shields require auditor co-signing.
- *
- * Accounts (identical to initialize, disc=0):
- * 0. pool_state          (writable)
- * 1. commitment_tree     (writable)
- * 2. zkbtc_mint          (writable)
- * 3. pool_vault          (writable)
- * 4. deposit_vault       (writable)
- * 5. authority           (writable signer)
- * 6. system_program      (readonly)
- */
-export declare function buildInitializePermissionedInstruction(options: InitializePermissionedOptions): Instruction;
 /** completeDepositPermissioned instruction options */
 export interface CompleteDepositPermissionedOptions {
     /** SPV-proven sweep txid (32 bytes, internal byte order) */
@@ -1150,56 +1087,6 @@ export declare function buildRegisterExitDestinationInstruction(options: {
         exitDestination: Address;
     };
 }): Instruction;
-/** setAuditorFrozen instruction options */
-export interface SetAuditorFrozenOptions {
-    /** true = freeze the auditor role; false = un-freeze */
-    frozen: boolean;
-    accounts: {
-        /** 0. pool_state (writable) */
-        poolState: Address;
-        /** 1. auditor (signer) */
-        auditor: Address;
-    };
-}
-/**
- * Build setAuditorFrozen instruction data (disc=28).
- *
- * Layout: disc(1) + frozen(1)  — frozen byte: 0 = not frozen, 1 = frozen.
- */
-export declare function buildSetAuditorFrozenInstructionData(frozen: boolean): Uint8Array;
-/**
- * Build a complete setAuditorFrozen instruction (disc=28).
- *
- * Accounts:
- * 0. pool_state (writable)
- * 1. auditor    (signer)
- */
-export declare function buildSetAuditorFrozenInstruction(options: SetAuditorFrozenOptions): Instruction;
-/** setAuditorViewingPubkey instruction options */
-export interface SetAuditorViewingPubkeyOptions {
-    /** New 32-byte viewing pubkey for the auditor */
-    viewingPubkey: Uint8Array;
-    accounts: {
-        /** 0. pool_state (writable) */
-        poolState: Address;
-        /** 1. auditor (signer) */
-        auditor: Address;
-    };
-}
-/**
- * Build setAuditorViewingPubkey instruction data (disc=29).
- *
- * Layout: disc(1) + viewing_pubkey(32) = 33 bytes.
- */
-export declare function buildSetAuditorViewingPubkeyInstructionData(viewingPubkey: Uint8Array): Uint8Array;
-/**
- * Build a complete setAuditorViewingPubkey instruction (disc=29).
- *
- * Accounts:
- * 0. pool_state (writable)
- * 1. auditor    (signer)
- */
-export declare function buildSetAuditorViewingPubkeyInstruction(options: SetAuditorViewingPubkeyOptions): Instruction;
 export interface RotateAuditorOptions {
     auditor: Uint8Array;
     viewingPubkey: Uint8Array;

package/dist/instructions.js

@@ -1498,75 +1498,6 @@ export function bytes32ToBigint(bytes) {
 // hexToBytes / bytesToHex live in ./crypto (single source); re-exported here
 // to preserve this module's public surface.
 export { hexToBytes, bytesToHex } from "./crypto";
-/**
- * Build initializePermissioned instruction data (disc=21).
- *
- * Layout (after disc byte — same as initialize plus two 32-byte fields):
- *   pool_bump(1) + tree_bump(1) + deposit_fee_bps(2 LE) + withdrawal_fee_bps(2 LE)
- *   + auditor(32) + auditor_viewing_pubkey(32)
- *   = 70 bytes of payload; 71 bytes total with disc.
- */
-export function buildInitializePermissionedInstructionData(options) {
-    if (options.auditor.length !== 32) {
-        throw new Error(`auditor must be 32 bytes, got ${options.auditor.length}`);
-    }
-    if (options.auditorViewingPubkey.length !== 32) {
-        throw new Error(`auditorViewingPubkey must be 32 bytes, got ${options.auditorViewingPubkey.length}`);
-    }
-    // disc(1) + pool_bump(1) + tree_bump(1) + deposit_fee_bps(2) + withdrawal_fee_bps(2) + auditor(32) + auditor_viewing_pubkey(32) = 71
-    const data = new Uint8Array(71);
-    const view = new DataView(data.buffer);
-    let offset = 0;
-    data[offset++] = PERMISSIONED_DISC.INITIALIZE_PERMISSIONED; // disc = 21
-    data[offset++] = options.poolBump;
-    data[offset++] = options.treeBump;
-    view.setUint16(offset, options.depositFeeBps, true);
-    offset += 2;
-    view.setUint16(offset, options.withdrawalFeeBps, true);
-    offset += 2;
-    data.set(options.auditor, offset);
-    offset += 32;
-    data.set(options.auditorViewingPubkey, offset);
-    return data;
-}
-/**
- * Build a complete initializePermissioned instruction (disc=21).
- *
- * Initializes a pool in permissioned mode; deposits/shields require auditor co-signing.
- *
- * Accounts (identical to initialize, disc=0):
- * 0. pool_state          (writable)
- * 1. commitment_tree     (writable)
- * 2. zkbtc_mint          (writable)
- * 3. pool_vault          (writable)
- * 4. deposit_vault       (writable)
- * 5. authority           (writable signer)
- * 6. system_program      (readonly)
- */
-export function buildInitializePermissionedInstruction(options) {
-    const config = getConfig();
-    const data = buildInitializePermissionedInstructionData({
-        poolBump: options.poolBump,
-        treeBump: options.treeBump,
-        depositFeeBps: options.depositFeeBps,
-        withdrawalFeeBps: options.withdrawalFeeBps,
-        auditor: options.auditor,
-        auditorViewingPubkey: options.auditorViewingPubkey,
-    });
-    return {
-        programAddress: config.utxopiaProgramId,
-        accounts: [
-            { address: options.accounts.poolState, role: AccountRole.WRITABLE },
-            { address: options.accounts.commitmentTree, role: AccountRole.WRITABLE },
-            { address: options.accounts.zkbtcMint, role: AccountRole.WRITABLE },
-            { address: options.accounts.poolVault, role: AccountRole.WRITABLE },
-            { address: options.accounts.depositVault, role: AccountRole.WRITABLE },
-            { address: options.accounts.authority, role: AccountRole.WRITABLE_SIGNER },
-            { address: options.accounts.systemProgram, role: AccountRole.READONLY },
-        ],
-        data,
-    };
-}
 /**
  * Build completeDepositPermissioned instruction data (disc=22).
  *
@@ -1777,64 +1708,6 @@ export function buildRegisterExitDestinationInstruction(options) {
         data,
     };
 }
-/**
- * Build setAuditorFrozen instruction data (disc=28).
- *
- * Layout: disc(1) + frozen(1)  — frozen byte: 0 = not frozen, 1 = frozen.
- */
-export function buildSetAuditorFrozenInstructionData(frozen) {
-    return new Uint8Array([INSTRUCTION.SET_AUDITOR_FROZEN, frozen ? 1 : 0]);
-}
-/**
- * Build a complete setAuditorFrozen instruction (disc=28).
- *
- * Accounts:
- * 0. pool_state (writable)
- * 1. auditor    (signer)
- */
-export function buildSetAuditorFrozenInstruction(options) {
-    const config = getConfig();
-    return {
-        programAddress: config.utxopiaProgramId,
-        accounts: [
-            { address: options.accounts.poolState, role: AccountRole.WRITABLE },
-            { address: options.accounts.auditor, role: AccountRole.READONLY_SIGNER },
-        ],
-        data: buildSetAuditorFrozenInstructionData(options.frozen),
-    };
-}
-/**
- * Build setAuditorViewingPubkey instruction data (disc=29).
- *
- * Layout: disc(1) + viewing_pubkey(32) = 33 bytes.
- */
-export function buildSetAuditorViewingPubkeyInstructionData(viewingPubkey) {
-    if (viewingPubkey.length !== 32) {
-        throw new Error(`viewingPubkey must be 32 bytes, got ${viewingPubkey.length}`);
-    }
-    const data = new Uint8Array(33);
-    data[0] = INSTRUCTION.SET_AUDITOR_VIEWING_PUBKEY;
-    data.set(viewingPubkey, 1);
-    return data;
-}
-/**
- * Build a complete setAuditorViewingPubkey instruction (disc=29).
- *
- * Accounts:
- * 0. pool_state (writable)
- * 1. auditor    (signer)
- */
-export function buildSetAuditorViewingPubkeyInstruction(options) {
-    const config = getConfig();
-    return {
-        programAddress: config.utxopiaProgramId,
-        accounts: [
-            { address: options.accounts.poolState, role: AccountRole.WRITABLE },
-            { address: options.accounts.auditor, role: AccountRole.READONLY_SIGNER },
-        ],
-        data: buildSetAuditorViewingPubkeyInstructionData(options.viewingPubkey),
-    };
-}
 export function buildRotateAuditorInstructionData(auditor, viewingPubkey) {
     if (auditor.length !== 32 || auditor.every((byte) => byte === 0)) {
         throw new Error("auditor must be a nonzero 32-byte public key");

package/dist/poseidon.d.ts

@@ -47,7 +47,3 @@ export declare function reduceToField(bytes: Uint8Array): bigint;
  * poseidon2_hash(reduce_to_field_exact(mint), [0u8; 32]).
  */
 export declare function computeTokenId(mintBytes: Uint8Array): bigint;
-/**
- * Convenience: compute token_id from a Solana address string
- */
-export declare function computeTokenIdFromAddress(mintAddress: string): bigint;

package/dist/poseidon.js

@@ -126,11 +126,3 @@ export function computeTokenId(mintBytes) {
     const reduced = reduceToField(mintBytes);
     return poseidonHashSync([reduced, 0n]);
 }
-/**
- * Convenience: compute token_id from a Solana address string
- */
-export function computeTokenIdFromAddress(mintAddress) {
-    // Base58 decode — import from @solana/kit if available, otherwise use raw bytes
-    // For now, caller should pass raw bytes via computeTokenId
-    throw new Error("Use computeTokenId(mintBytes) with raw pubkey bytes");
-}

package/dist/prover/index.d.ts

@@ -7,4 +7,3 @@
  * - @utxopia/sdk/prover/mobile for React Native Groth16 prover
  */
 export * from "./web";
-export type { MerkleProofInput, ProofData, CircuitType, JoinSplitProofInputs, } from "./web";

package/dist/prover/web.d.ts

@@ -9,7 +9,6 @@
  * - Nullifier = Poseidon(nullifyingKey, leafIndex)
  * - Signature = EdDSA-Poseidon over (merkleRoot, boundParamsHash, nullifiers..., commitmentsOut...)
  */
-import type { Address } from "@solana/kit";
 export interface MerkleProofInput {
     siblings: bigint[];
     indices: number[];
@@ -20,16 +19,18 @@ export interface ProofData {
     verificationKey?: Uint8Array;
 }
 export type CircuitType = `joinsplit_${number}x${number}`;
-/** Names of non-JoinSplit auxiliary circuits (selective disclosure). */
-export type AuxCircuitName = "ownership" | "range_sum" | "range_sum_4" | "range_sum_16";
 /**
- * Set the base path for circuit artifacts
+ * Fetch a circuit's `*.vkey.json` from the same base path its zkey comes from.
+ *
+ * Deliberately reads `circuitBasePath` rather than taking a URL: the point of the check this
+ * feeds (`assertVkeyMatchesRegistry`) is that the vkey describes the artifacts actually being
+ * proved with, and a caller-supplied URL could describe a different build entirely.
  */
-export declare function setCircuitPath(path: string): void;
+export declare function fetchCircuitVkey(circuitType: CircuitType): Promise<unknown>;
 /**
- * Get the current circuit base path
+ * Set the base path for circuit artifacts
  */
-export declare function getCircuitPath(): string;
+export declare function setCircuitPath(path: string): void;
 /**
  * Pin the circuit artifacts this app is willing to prove with.
  *
@@ -126,11 +127,3 @@ export declare function proofToBytes(proof: ProofData): Uint8Array;
  * Cleanup all cached resources
  */
 export declare function cleanup(): Promise<void>;
-/**
- * Groth16 verifier program ID (from current config)
- */
-export declare function getGroth16VerifierProgramId(): Address;
-/**
- * Build instruction data for Groth16 verification
- */
-export declare function buildVerifyInstructionData(proof: Uint8Array, publicSignals: string[], vkHash: string): Uint8Array;