@veilo/sdk-core 0.3.3 → 0.4.0

package/dist/cjs/index.d.ts

@@ -1,13 +1,16 @@
-export * from "./client";
-export * from "./utxo";
-export * from "./config";
-export * from "./merkle";
-export * from "./proof";
-export * from "./events";
-export { createVeiloProgram, PRIVACY_POOL_IDL, PRIVACY_POOL_PROGRAM_ID, } from "./program";
-export { createTransactionProver, verifyProof } from "./prover";
-export type { CircuitArtifacts } from "./prover";
-export * from "./relayer";
-export { withRpcRetry, DEFAULT_RPC_RETRY } from "./retry";
-export type { RpcRetryPolicy } from "./retry";
-export { initPoseidon, getPoseidon, BN254_FR_MODULUS, bytesToBigIntBE, bigIntToBytesBE, frToBigInt, poseidon1, poseidon2, poseidon3, poseidon4, pubkeyToField, } from "./poseidon";
+export * from "./client.js";
+export * from "./utxo.js";
+export * from "./config.js";
+export * from "./merkle.js";
+export * from "./proof.js";
+export * from "./events.js";
+export { createVeiloProgram, createReadonlyVeiloProgram, PRIVACY_POOL_IDL, PRIVACY_POOL_PROGRAM_ID, } from "./program.js";
+export * from "./shield/index.js";
+export { createTransactionProver, verifyProof } from "./prover.js";
+export type { CircuitArtifacts } from "./prover.js";
+export * from "./compactNote.js";
+export { randomBytes, randomBytes32 } from "./random.js";
+export * from "./relayer.js";
+export { withRpcRetry, DEFAULT_RPC_RETRY } from "./retry.js";
+export type { RpcRetryPolicy } from "./retry.js";
+export { initPoseidon, getPoseidon, BN254_FR_MODULUS, bytesToBigIntBE, bigIntToBytesBE, frToBigInt, poseidon1, poseidon2, poseidon3, poseidon4, pubkeyToField, } from "./poseidon.js";

package/dist/cjs/index.js

@@ -14,44 +14,54 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.pubkeyToField = exports.poseidon4 = exports.poseidon3 = exports.poseidon2 = exports.poseidon1 = exports.frToBigInt = exports.bigIntToBytesBE = exports.bytesToBigIntBE = exports.BN254_FR_MODULUS = exports.getPoseidon = exports.initPoseidon = exports.DEFAULT_RPC_RETRY = exports.withRpcRetry = exports.verifyProof = exports.createTransactionProver = exports.PRIVACY_POOL_PROGRAM_ID = exports.PRIVACY_POOL_IDL = exports.createVeiloProgram = void 0;
+exports.pubkeyToField = exports.poseidon4 = exports.poseidon3 = exports.poseidon2 = exports.poseidon1 = exports.frToBigInt = exports.bigIntToBytesBE = exports.bytesToBigIntBE = exports.BN254_FR_MODULUS = exports.getPoseidon = exports.initPoseidon = exports.DEFAULT_RPC_RETRY = exports.withRpcRetry = exports.randomBytes32 = exports.randomBytes = exports.verifyProof = exports.createTransactionProver = exports.PRIVACY_POOL_PROGRAM_ID = exports.PRIVACY_POOL_IDL = exports.createReadonlyVeiloProgram = exports.createVeiloProgram = void 0;
 // Core client functions
-__exportStar(require("./client"), exports);
+__exportStar(require("./client.js"), exports);
 // UTXO types and functions (replaces note.ts)
-__exportStar(require("./utxo"), exports);
+__exportStar(require("./utxo.js"), exports);
 // Configuration constants and types
-__exportStar(require("./config"), exports);
+__exportStar(require("./config.js"), exports);
 // Merkle tree implementation
-__exportStar(require("./merkle"), exports);
+__exportStar(require("./merkle.js"), exports);
 // Proof types and helpers
-__exportStar(require("./proof"), exports);
+__exportStar(require("./proof.js"), exports);
 // On-chain event scanning and tree reconstruction
-__exportStar(require("./events"), exports);
+__exportStar(require("./events.js"), exports);
 // Program factory and IDL
-var program_1 = require("./program");
-Object.defineProperty(exports, "createVeiloProgram", { enumerable: true, get: function () { return program_1.createVeiloProgram; } });
-Object.defineProperty(exports, "PRIVACY_POOL_IDL", { enumerable: true, get: function () { return program_1.PRIVACY_POOL_IDL; } });
-Object.defineProperty(exports, "PRIVACY_POOL_PROGRAM_ID", { enumerable: true, get: function () { return program_1.PRIVACY_POOL_PROGRAM_ID; } });
+var program_js_1 = require("./program.js");
+Object.defineProperty(exports, "createVeiloProgram", { enumerable: true, get: function () { return program_js_1.createVeiloProgram; } });
+Object.defineProperty(exports, "createReadonlyVeiloProgram", { enumerable: true, get: function () { return program_js_1.createReadonlyVeiloProgram; } });
+Object.defineProperty(exports, "PRIVACY_POOL_IDL", { enumerable: true, get: function () { return program_js_1.PRIVACY_POOL_IDL; } });
+Object.defineProperty(exports, "PRIVACY_POOL_PROGRAM_ID", { enumerable: true, get: function () { return program_js_1.PRIVACY_POOL_PROGRAM_ID; } });
+// Wallet-agnostic shielding — build an unsigned deposit for any external wallet
+__exportStar(require("./shield/index.js"), exports);
 // Proof generation (requires snarkjs peer dependency)
-var prover_1 = require("./prover");
-Object.defineProperty(exports, "createTransactionProver", { enumerable: true, get: function () { return prover_1.createTransactionProver; } });
-Object.defineProperty(exports, "verifyProof", { enumerable: true, get: function () { return prover_1.verifyProof; } });
+var prover_js_1 = require("./prover.js");
+Object.defineProperty(exports, "createTransactionProver", { enumerable: true, get: function () { return prover_js_1.createTransactionProver; } });
+Object.defineProperty(exports, "verifyProof", { enumerable: true, get: function () { return prover_js_1.verifyProof; } });
+// Compact note ciphers — the on-chain payload that makes notes recoverable
+// from chain data alone, without any relayer involvement.
+__exportStar(require("./compactNote.js"), exports);
+// Cross-platform CSPRNG (no node:crypto import — safe in browser bundles)
+var random_js_1 = require("./random.js");
+Object.defineProperty(exports, "randomBytes", { enumerable: true, get: function () { return random_js_1.randomBytes; } });
+Object.defineProperty(exports, "randomBytes32", { enumerable: true, get: function () { return random_js_1.randomBytes32; } });
 // Relayer API client
-__exportStar(require("./relayer"), exports);
+__exportStar(require("./relayer.js"), exports);
 // RPC retry / resilience
-var retry_1 = require("./retry");
-Object.defineProperty(exports, "withRpcRetry", { enumerable: true, get: function () { return retry_1.withRpcRetry; } });
-Object.defineProperty(exports, "DEFAULT_RPC_RETRY", { enumerable: true, get: function () { return retry_1.DEFAULT_RPC_RETRY; } });
+var retry_js_1 = require("./retry.js");
+Object.defineProperty(exports, "withRpcRetry", { enumerable: true, get: function () { return retry_js_1.withRpcRetry; } });
+Object.defineProperty(exports, "DEFAULT_RPC_RETRY", { enumerable: true, get: function () { return retry_js_1.DEFAULT_RPC_RETRY; } });
 // Poseidon hash functions
-var poseidon_1 = require("./poseidon");
-Object.defineProperty(exports, "initPoseidon", { enumerable: true, get: function () { return poseidon_1.initPoseidon; } });
-Object.defineProperty(exports, "getPoseidon", { enumerable: true, get: function () { return poseidon_1.getPoseidon; } });
-Object.defineProperty(exports, "BN254_FR_MODULUS", { enumerable: true, get: function () { return poseidon_1.BN254_FR_MODULUS; } });
-Object.defineProperty(exports, "bytesToBigIntBE", { enumerable: true, get: function () { return poseidon_1.bytesToBigIntBE; } });
-Object.defineProperty(exports, "bigIntToBytesBE", { enumerable: true, get: function () { return poseidon_1.bigIntToBytesBE; } });
-Object.defineProperty(exports, "frToBigInt", { enumerable: true, get: function () { return poseidon_1.frToBigInt; } });
-Object.defineProperty(exports, "poseidon1", { enumerable: true, get: function () { return poseidon_1.poseidon1; } });
-Object.defineProperty(exports, "poseidon2", { enumerable: true, get: function () { return poseidon_1.poseidon2; } });
-Object.defineProperty(exports, "poseidon3", { enumerable: true, get: function () { return poseidon_1.poseidon3; } });
-Object.defineProperty(exports, "poseidon4", { enumerable: true, get: function () { return poseidon_1.poseidon4; } });
-Object.defineProperty(exports, "pubkeyToField", { enumerable: true, get: function () { return poseidon_1.pubkeyToField; } });
+var poseidon_js_1 = require("./poseidon.js");
+Object.defineProperty(exports, "initPoseidon", { enumerable: true, get: function () { return poseidon_js_1.initPoseidon; } });
+Object.defineProperty(exports, "getPoseidon", { enumerable: true, get: function () { return poseidon_js_1.getPoseidon; } });
+Object.defineProperty(exports, "BN254_FR_MODULUS", { enumerable: true, get: function () { return poseidon_js_1.BN254_FR_MODULUS; } });
+Object.defineProperty(exports, "bytesToBigIntBE", { enumerable: true, get: function () { return poseidon_js_1.bytesToBigIntBE; } });
+Object.defineProperty(exports, "bigIntToBytesBE", { enumerable: true, get: function () { return poseidon_js_1.bigIntToBytesBE; } });
+Object.defineProperty(exports, "frToBigInt", { enumerable: true, get: function () { return poseidon_js_1.frToBigInt; } });
+Object.defineProperty(exports, "poseidon1", { enumerable: true, get: function () { return poseidon_js_1.poseidon1; } });
+Object.defineProperty(exports, "poseidon2", { enumerable: true, get: function () { return poseidon_js_1.poseidon2; } });
+Object.defineProperty(exports, "poseidon3", { enumerable: true, get: function () { return poseidon_js_1.poseidon3; } });
+Object.defineProperty(exports, "poseidon4", { enumerable: true, get: function () { return poseidon_js_1.poseidon4; } });
+Object.defineProperty(exports, "pubkeyToField", { enumerable: true, get: function () { return poseidon_js_1.pubkeyToField; } });

package/dist/cjs/merkle.d.ts

@@ -62,3 +62,16 @@ export declare class MerkleTree {
      */
     getCircuitPath(index: number): CircuitMerklePath;
 }
+/**
+ * The Poseidon zero chain: `z[0] = 0`, `z[i+1] = Poseidon(z[i], z[i])`.
+ *
+ * This is the `zeroes` array a `MerkleTree` builds in its constructor, without
+ * the tree. Deposits need a Merkle path for their dummy inputs, but the circuit
+ * disables the path check when a input amount is zero (`enabled <== 1 - IsZero(amount)`
+ * in transaction.circom), so the values are never constrained — only their
+ * count is.
+ *
+ * Allocating a full depth-22 `MerkleTree` for this costs ~130 MB and several
+ * seconds. This costs 22 hashes. Any deposit-shaped transaction should use it.
+ */
+export declare function poseidonZeroChain(depth?: number): Uint8Array[];

package/dist/cjs/merkle.js

@@ -1,18 +1,19 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MerkleTree = void 0;
-const poseidon_1 = require("./poseidon");
+exports.poseidonZeroChain = poseidonZeroChain;
+const poseidon_js_1 = require("./poseidon.js");
 // Poseidon-based hash of two 32-byte field elements.
 function hashPair(left, right) {
     if (left.length !== 32 || right.length !== 32) {
         throw new Error("hashPair expects 32-byte inputs");
     }
-    const poseidon = (0, poseidon_1.getPoseidon)();
-    const lf = (0, poseidon_1.bytesToBigIntBE)(left) % poseidon_1.BN254_FR_MODULUS;
-    const rf = (0, poseidon_1.bytesToBigIntBE)(right) % poseidon_1.BN254_FR_MODULUS;
+    const poseidon = (0, poseidon_js_1.getPoseidon)();
+    const lf = (0, poseidon_js_1.bytesToBigIntBE)(left) % poseidon_js_1.BN254_FR_MODULUS;
+    const rf = (0, poseidon_js_1.bytesToBigIntBE)(right) % poseidon_js_1.BN254_FR_MODULUS;
     const fe = poseidon([lf, rf]);
-    const outBig = (0, poseidon_1.frToBigInt)(fe) % poseidon_1.BN254_FR_MODULUS;
-    return (0, poseidon_1.bigIntToBytesBE)(outBig);
+    const outBig = (0, poseidon_js_1.frToBigInt)(fe) % poseidon_js_1.BN254_FR_MODULUS;
+    return (0, poseidon_js_1.bigIntToBytesBE)(outBig);
 }
 /**
  * Fixed-depth binary Merkle tree over BN254 Fr:
@@ -32,7 +33,7 @@ class MerkleTree {
         this.zeroes = [];
         this.layers = [];
         // zero[0] = 0 (Fr), then zero[i+1] = Poseidon(zero[i], zero[i])
-        let zero = (0, poseidon_1.bigIntToBytesBE)(0n);
+        let zero = (0, poseidon_js_1.bigIntToBytesBE)(0n);
         this.zeroes.push(zero);
         for (let level = 1; level <= depth; level++) {
             zero = hashPair(zero, zero);
@@ -126,8 +127,30 @@ class MerkleTree {
         const merklePath = this.getPath(index);
         return {
             pathIndex: index,
-            pathElements: merklePath.path.map((p) => (0, poseidon_1.bytesToBigIntBE)(p) % poseidon_1.BN254_FR_MODULUS),
+            pathElements: merklePath.path.map((p) => (0, poseidon_js_1.bytesToBigIntBE)(p) % poseidon_js_1.BN254_FR_MODULUS),
         };
     }
 }
 exports.MerkleTree = MerkleTree;
+/**
+ * The Poseidon zero chain: `z[0] = 0`, `z[i+1] = Poseidon(z[i], z[i])`.
+ *
+ * This is the `zeroes` array a `MerkleTree` builds in its constructor, without
+ * the tree. Deposits need a Merkle path for their dummy inputs, but the circuit
+ * disables the path check when a input amount is zero (`enabled <== 1 - IsZero(amount)`
+ * in transaction.circom), so the values are never constrained — only their
+ * count is.
+ *
+ * Allocating a full depth-22 `MerkleTree` for this costs ~130 MB and several
+ * seconds. This costs 22 hashes. Any deposit-shaped transaction should use it.
+ */
+function poseidonZeroChain(depth = 22) {
+    const zeroes = [];
+    let zero = (0, poseidon_js_1.bigIntToBytesBE)(0n);
+    zeroes.push(zero);
+    for (let level = 1; level <= depth; level++) {
+        zero = hashPair(zero, zero);
+        zeroes.push(zero);
+    }
+    return zeroes;
+}

package/dist/cjs/program.d.ts

@@ -24,3 +24,14 @@ export declare const PRIVACY_POOL_PROGRAM_ID: PublicKey;
 export declare function createVeiloProgram(connection: Connection, wallet: Wallet, opts?: {
     commitment?: "processed" | "confirmed" | "finalized";
 }): Program;
+/**
+ * Create a `Program` for reading on-chain accounts, with no wallet.
+ *
+ * The shield path never signs, so requiring a `Wallet` just to decode a
+ * `MerkleTreeAccount` would force integrators to invent a dummy one. This is
+ * safe for `program.account.*.fetch` and the coders; anything that would submit
+ * a transaction will fail, which is the intent.
+ */
+export declare function createReadonlyVeiloProgram(connection: Connection, opts?: {
+    commitment?: "processed" | "confirmed" | "finalized";
+}): Program;

package/dist/cjs/program.js

@@ -5,13 +5,14 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PRIVACY_POOL_PROGRAM_ID = exports.PRIVACY_POOL_IDL = void 0;
 exports.createVeiloProgram = createVeiloProgram;
+exports.createReadonlyVeiloProgram = createReadonlyVeiloProgram;
 const anchor_1 = require("@coral-xyz/anchor");
 const web3_js_1 = require("@solana/web3.js");
-const privacy_pool_json_1 = __importDefault(require("./idl/privacy_pool.json"));
+const privacy_pool_js_1 = __importDefault(require("./idl/privacy_pool.js"));
 // Re-export so consumers can access the raw IDL if needed
-exports.PRIVACY_POOL_IDL = privacy_pool_json_1.default;
+exports.PRIVACY_POOL_IDL = privacy_pool_js_1.default;
 /** Deployed program ID extracted from the bundled IDL. */
-exports.PRIVACY_POOL_PROGRAM_ID = new web3_js_1.PublicKey(privacy_pool_json_1.default.address);
+exports.PRIVACY_POOL_PROGRAM_ID = new web3_js_1.PublicKey(privacy_pool_js_1.default.address);
 /**
  * Create an Anchor `Program` instance for the Veilo Privacy Pool.
  *
@@ -36,3 +37,25 @@ function createVeiloProgram(connection, wallet, opts) {
     });
     return new anchor_1.Program(exports.PRIVACY_POOL_IDL, provider);
 }
+/**
+ * Create a `Program` for reading on-chain accounts, with no wallet.
+ *
+ * The shield path never signs, so requiring a `Wallet` just to decode a
+ * `MerkleTreeAccount` would force integrators to invent a dummy one. This is
+ * safe for `program.account.*.fetch` and the coders; anything that would submit
+ * a transaction will fail, which is the intent.
+ */
+function createReadonlyVeiloProgram(connection, opts) {
+    const provider = new anchor_1.AnchorProvider(connection, 
+    // No signing surface: reads only.
+    {
+        publicKey: web3_js_1.PublicKey.default,
+        signTransaction: () => {
+            throw new Error("createReadonlyVeiloProgram: this program cannot sign");
+        },
+        signAllTransactions: () => {
+            throw new Error("createReadonlyVeiloProgram: this program cannot sign");
+        },
+    }, { commitment: opts?.commitment ?? "confirmed" });
+    return new anchor_1.Program(exports.PRIVACY_POOL_IDL, provider);
+}

package/dist/cjs/proof.d.ts

@@ -1,5 +1,5 @@
 import { PublicKey } from "@solana/web3.js";
-import { SerializedUTXO, InputUTXO } from "./utxo";
+import { SerializedUTXO, InputUTXO } from "./utxo.js";
 /**
  * External data that gets hashed into ext_data_hash.
  * These are public parameters that affect financial flows.

package/dist/cjs/proof.js

@@ -10,8 +10,8 @@ exports.formatSwapInputsForSnarkjs = formatSwapInputsForSnarkjs;
 exports.computeSwapParamsHash = computeSwapParamsHash;
 exports.computeSwapDataHash = computeSwapDataHash;
 const sha256_1 = require("@noble/hashes/sha256");
-const poseidon_1 = require("./poseidon");
-const utxo_1 = require("./utxo");
+const poseidon_js_1 = require("./poseidon.js");
+const utxo_js_1 = require("./utxo.js");
 // -----------------------------------------------------------------------------
 // ExtData Hash Computation
 // -----------------------------------------------------------------------------
@@ -23,15 +23,15 @@ const utxo_1 = require("./utxo");
  *   extDataHash = Poseidon(hash1, hash2, claimant)
  */
 function computeExtDataHash(extData) {
-    const recipientField = (0, poseidon_1.pubkeyToField)(extData.recipient);
-    const relayerField = (0, poseidon_1.pubkeyToField)(extData.relayer);
-    const feeField = extData.fee % poseidon_1.BN254_FR_MODULUS;
-    const refundField = extData.refund % poseidon_1.BN254_FR_MODULUS;
-    const claimantField = (0, poseidon_1.pubkeyToField)(extData.claimant);
-    const hash1 = (0, poseidon_1.poseidon2)(recipientField, relayerField);
-    const hash2 = (0, poseidon_1.poseidon2)(feeField, refundField);
-    const finalHash = (0, poseidon_1.poseidon3)(hash1, hash2, claimantField);
-    return (0, poseidon_1.bigIntToBytesBE)(finalHash);
+    const recipientField = (0, poseidon_js_1.pubkeyToField)(extData.recipient);
+    const relayerField = (0, poseidon_js_1.pubkeyToField)(extData.relayer);
+    const feeField = extData.fee % poseidon_js_1.BN254_FR_MODULUS;
+    const refundField = extData.refund % poseidon_js_1.BN254_FR_MODULUS;
+    const claimantField = (0, poseidon_js_1.pubkeyToField)(extData.claimant);
+    const hash1 = (0, poseidon_js_1.poseidon2)(recipientField, relayerField);
+    const hash2 = (0, poseidon_js_1.poseidon2)(feeField, refundField);
+    const finalHash = (0, poseidon_js_1.poseidon3)(hash1, hash2, claimantField);
+    return (0, poseidon_js_1.bigIntToBytesBE)(finalHash);
 }
 // -----------------------------------------------------------------------------
 // Circuit Input Preparation
@@ -42,9 +42,9 @@ function computeExtDataHash(extData) {
  */
 function i64ToField(value) {
     if (value >= 0n) {
-        return value % poseidon_1.BN254_FR_MODULUS;
+        return value % poseidon_js_1.BN254_FR_MODULUS;
     }
-    return (poseidon_1.BN254_FR_MODULUS + value) % poseidon_1.BN254_FR_MODULUS;
+    return (poseidon_js_1.BN254_FR_MODULUS + value) % poseidon_js_1.BN254_FR_MODULUS;
 }
 /**
  * Prepare transaction circuit inputs from high-level parameters.
@@ -53,7 +53,7 @@ function i64ToField(value) {
 function prepareTransactionInputs(params) {
     const { inputUTXOs, outputUTXOs, root, publicAmount, extData, mintAddress } = params;
     const extDataHash = computeExtDataHash(extData);
-    const mintField = (0, poseidon_1.pubkeyToField)(mintAddress);
+    const mintField = (0, poseidon_js_1.pubkeyToField)(mintAddress);
     // Prepare input UTXO data
     const inAmount = [
         inputUTXOs[0].amount,
@@ -72,8 +72,8 @@ function prepareTransactionInputs(params) {
         inputUTXOs[1].pathIndex,
     ];
     const inPathElements = [
-        inputUTXOs[0].pathElements.map((e) => (0, poseidon_1.bytesToBigIntBE)(e) % poseidon_1.BN254_FR_MODULUS),
-        inputUTXOs[1].pathElements.map((e) => (0, poseidon_1.bytesToBigIntBE)(e) % poseidon_1.BN254_FR_MODULUS),
+        inputUTXOs[0].pathElements.map((e) => (0, poseidon_js_1.bytesToBigIntBE)(e) % poseidon_js_1.BN254_FR_MODULUS),
+        inputUTXOs[1].pathElements.map((e) => (0, poseidon_js_1.bytesToBigIntBE)(e) % poseidon_js_1.BN254_FR_MODULUS),
     ];
     const inPrivateKey = [
         inputUTXOs[0].privateKey,
@@ -94,8 +94,8 @@ function prepareTransactionInputs(params) {
     ];
     // Derive nullifiers for input UTXOs
     const inputNullifiers = [
-        (0, utxo_1.deriveNullifier)(inputUTXOs[0], inputUTXOs[0].pathIndex, inputUTXOs[0].privateKey),
-        (0, utxo_1.deriveNullifier)(inputUTXOs[1], inputUTXOs[1].pathIndex, inputUTXOs[1].privateKey),
+        (0, utxo_js_1.deriveNullifier)(inputUTXOs[0], inputUTXOs[0].pathIndex, inputUTXOs[0].privateKey),
+        (0, utxo_js_1.deriveNullifier)(inputUTXOs[1], inputUTXOs[1].pathIndex, inputUTXOs[1].privateKey),
     ];
     return {
         root,
@@ -193,12 +193,12 @@ function encodeSnarkjsProofToTransactionProof(proof) {
 function formatInputsForSnarkjs(inputs) {
     return {
         // Public inputs
-        root: (0, poseidon_1.bytesToBigIntBE)(inputs.root).toString(),
+        root: (0, poseidon_js_1.bytesToBigIntBE)(inputs.root).toString(),
         publicAmount: i64ToField(inputs.publicAmount).toString(),
-        extDataHash: (0, poseidon_1.bytesToBigIntBE)(inputs.extDataHash).toString(),
-        mintAddress: (0, poseidon_1.pubkeyToField)(inputs.mintAddress).toString(),
-        inputNullifier: inputs.inputNullifiers.map((n) => (0, poseidon_1.bytesToBigIntBE)(n).toString()),
-        outputCommitment: inputs.outputCommitments.map((c) => (0, poseidon_1.bytesToBigIntBE)(c).toString()),
+        extDataHash: (0, poseidon_js_1.bytesToBigIntBE)(inputs.extDataHash).toString(),
+        mintAddress: (0, poseidon_js_1.pubkeyToField)(inputs.mintAddress).toString(),
+        inputNullifier: inputs.inputNullifiers.map((n) => (0, poseidon_js_1.bytesToBigIntBE)(n).toString()),
+        outputCommitment: inputs.outputCommitments.map((c) => (0, poseidon_js_1.bytesToBigIntBE)(c).toString()),
         // Private inputs - Input UTXOs
         inAmount: inputs.inAmount.map((a) => a.toString()),
         inPubkey: inputs.inPubkey.map((p) => p.toString()),
@@ -225,14 +225,14 @@ function formatInputsForSnarkjs(inputs) {
 function formatSwapInputsForSnarkjs(inputs) {
     return {
         // Public inputs
-        sourceRoot: (0, poseidon_1.bytesToBigIntBE)(inputs.sourceRoot).toString(),
-        swapParamsHash: (0, poseidon_1.bytesToBigIntBE)(inputs.swapParamsHash).toString(),
-        extDataHash: (0, poseidon_1.bytesToBigIntBE)(inputs.extDataHash).toString(),
-        sourceMint: (0, poseidon_1.pubkeyToField)(inputs.sourceMint).toString(),
-        destMint: (0, poseidon_1.pubkeyToField)(inputs.destMint).toString(),
-        inputNullifier: inputs.inputNullifiers.map((n) => (0, poseidon_1.bytesToBigIntBE)(n).toString()),
-        changeCommitment: (0, poseidon_1.bytesToBigIntBE)(inputs.changeCommitment).toString(),
-        destCommitment: (0, poseidon_1.bytesToBigIntBE)(inputs.destCommitment).toString(),
+        sourceRoot: (0, poseidon_js_1.bytesToBigIntBE)(inputs.sourceRoot).toString(),
+        swapParamsHash: (0, poseidon_js_1.bytesToBigIntBE)(inputs.swapParamsHash).toString(),
+        extDataHash: (0, poseidon_js_1.bytesToBigIntBE)(inputs.extDataHash).toString(),
+        sourceMint: (0, poseidon_js_1.pubkeyToField)(inputs.sourceMint).toString(),
+        destMint: (0, poseidon_js_1.pubkeyToField)(inputs.destMint).toString(),
+        inputNullifier: inputs.inputNullifiers.map((n) => (0, poseidon_js_1.bytesToBigIntBE)(n).toString()),
+        changeCommitment: (0, poseidon_js_1.bytesToBigIntBE)(inputs.changeCommitment).toString(),
+        destCommitment: (0, poseidon_js_1.bytesToBigIntBE)(inputs.destCommitment).toString(),
         swapAmount: inputs.swapAmount.toString(),
         // Private inputs - Input UTXOs
         inAmount: inputs.inAmount.map((a) => a.toString()),
@@ -274,13 +274,13 @@ function formatSwapInputsForSnarkjs(inputs) {
  *                     relayerFee). If omitted, defaults to minAmountOut.
  */
 function computeSwapParamsHash(sourceMint, destMint, minAmountOut, deadline, destAmount) {
-    const srcField = (0, poseidon_1.pubkeyToField)(sourceMint);
-    const dstField = (0, poseidon_1.pubkeyToField)(destMint);
-    const mintPairHash = (0, poseidon_1.poseidon2)(srcField, dstField);
+    const srcField = (0, poseidon_js_1.pubkeyToField)(sourceMint);
+    const dstField = (0, poseidon_js_1.pubkeyToField)(destMint);
+    const mintPairHash = (0, poseidon_js_1.poseidon2)(srcField, dstField);
     const dest = destAmount ?? minAmountOut;
-    const swapTermsHash = (0, poseidon_1.poseidon3)(minAmountOut, deadline, dest);
-    const paramsHash = (0, poseidon_1.poseidon2)(mintPairHash, swapTermsHash);
-    return (0, poseidon_1.bigIntToBytesBE)(paramsHash);
+    const swapTermsHash = (0, poseidon_js_1.poseidon3)(minAmountOut, deadline, dest);
+    const paramsHash = (0, poseidon_js_1.poseidon2)(mintPairHash, swapTermsHash);
+    return (0, poseidon_js_1.bigIntToBytesBE)(paramsHash);
 }
 /**
  * Compute the swap data hash committed on-chain for Jupiter instruction integrity.

package/dist/cjs/prover.d.ts

@@ -1,4 +1,4 @@
-import { TransactionProofBuilder, RawProof } from "./proof";
+import { TransactionProofBuilder, RawProof } from "./proof.js";
 /**
  * Circuit artifact paths required by snarkjs.
  *

package/dist/cjs/prover.js

@@ -35,7 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.createTransactionProver = createTransactionProver;
 exports.verifyProof = verifyProof;
-const proof_1 = require("./proof");
+const proof_js_1 = require("./proof.js");
 /** Lazy-load snarkjs — works in both CJS and ESM contexts. */
 async function loadSnarkjs() {
     try {
@@ -75,7 +75,7 @@ async function loadSnarkjs() {
 function createTransactionProver(artifacts) {
     return async (inputs) => {
         const snarkjs = await loadSnarkjs();
-        const formattedInputs = (0, proof_1.formatInputsForSnarkjs)(inputs);
+        const formattedInputs = (0, proof_js_1.formatInputsForSnarkjs)(inputs);
         const { proof } = await snarkjs.groth16.fullProve(formattedInputs, artifacts.wasmPath, artifacts.zkeyPath);
         return proof;
     };

package/dist/cjs/random.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Cross-platform CSPRNG.
+ *
+ * Deliberately backed by `nacl.randomBytes` rather than Node's `crypto.randomBytes`:
+ * tweetnacl resolves to `crypto.getRandomValues` in browsers and to Node's CSPRNG
+ * under Node, so this module carries no `node:crypto` import. That matters because
+ * every deposit path reaches this code via `createUTXO`/`generateKeypair`, and a
+ * bare `import { randomBytes } from "crypto"` throws at bundle time in browser
+ * builds that have no Node polyfill.
+ *
+ * tweetnacl is already a hard dependency, so this adds no install weight.
+ */
+/** `length` cryptographically-secure random bytes. */
+export declare function randomBytes(length: number): Uint8Array;
+/** 32 cryptographically-secure random bytes — the common case for blindings and seeds. */
+export declare function randomBytes32(): Uint8Array;

package/dist/cjs/random.js

@@ -0,0 +1,28 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.randomBytes = randomBytes;
+exports.randomBytes32 = randomBytes32;
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+/**
+ * Cross-platform CSPRNG.
+ *
+ * Deliberately backed by `nacl.randomBytes` rather than Node's `crypto.randomBytes`:
+ * tweetnacl resolves to `crypto.getRandomValues` in browsers and to Node's CSPRNG
+ * under Node, so this module carries no `node:crypto` import. That matters because
+ * every deposit path reaches this code via `createUTXO`/`generateKeypair`, and a
+ * bare `import { randomBytes } from "crypto"` throws at bundle time in browser
+ * builds that have no Node polyfill.
+ *
+ * tweetnacl is already a hard dependency, so this adds no install weight.
+ */
+/** `length` cryptographically-secure random bytes. */
+function randomBytes(length) {
+    return tweetnacl_1.default.randomBytes(length);
+}
+/** 32 cryptographically-secure random bytes — the common case for blindings and seeds. */
+function randomBytes32() {
+    return tweetnacl_1.default.randomBytes(32);
+}

package/dist/cjs/relayer.d.ts

@@ -1,6 +1,6 @@
 export interface VeiloRelayerConfig {
-    /** Base URL of the relayer (e.g. "https://relayer.veilo.io") */
-    relayerUrl: string;
+    /** Base URL of the relayer. Defaults to Veilo's production service. */
+    relayerUrl?: string;
     /** API key sent as x-api-key header */
     apiKey: string;
     /** Relayer's NaCl box public key (base64-encoded, 32 bytes) */
@@ -12,7 +12,8 @@ export interface VeiloRelayerConfig {
 export declare class VeiloApiError extends Error {
     code: string;
     status: number;
-    constructor(code: string, message: string, status: number);
+    details?: unknown;
+    constructor(code: string, message: string, status: number, details?: unknown);
 }
 /** Retry configuration for the relayer HTTP client. */
 export interface RetryPolicy {
@@ -35,6 +36,12 @@ export interface RelayerEncryptedNote {
     onchainId?: string;
     spentTx?: string;
     spentAt?: number;
+    compactEphemeralKey?: string | null;
+    compactBlob?: string | null;
+    viewTag?: number | null;
+    leafIndex?: number | null;
+    mintAddress?: string | null;
+    treeId?: number | null;
 }
 export interface QueryNotesRequest {
     lastCheckedTimestamp?: number;
@@ -57,6 +64,14 @@ export interface SaveEncryptedNoteRequest {
     blockHeight?: number;
     txSignature?: string;
     recipientWalletPublicKey?: string;
+    compactEphemeralKey?: string | null;
+    compactBlob?: string | null;
+    viewTag?: number | null;
+    leafIndex?: number;
+    newRoot?: string;
+    mintAddress?: string;
+    treeId?: number;
+    amountRaw?: string;
 }
 export interface SaveEncryptedNoteResponse {
     success: boolean;
@@ -227,6 +242,10 @@ export interface VeiloPublicKeyResponse {
     pubK: string;
     veiloPublicKey: string;
 }
+export interface PreRegisterKeyResponse {
+    success: boolean;
+    veiloPublicKey: string;
+}
 export interface DeleteUserDataResponse {
     success: boolean;
     message: string;
@@ -241,7 +260,6 @@ export interface DeleteUserDataResponse {
  * @example
  * ```ts
  * const client = new VeiloRelayerClient({
- *   relayerUrl: "https://relayer.veilo.io",
  *   apiKey: "your-api-key",
  *   relayerPublicKey: "<base64 NaCl public key>",
  * });
@@ -276,6 +294,11 @@ export declare class VeiloRelayerClient {
         publicKey: string;
         username?: never;
     }): Promise<VeiloPublicKeyResponse>;
+    /**
+     * Provision (or retrieve) the Veilo spend key paired with a Solana address.
+     * Public and idempotent; the response contains public key material only.
+     */
+    preRegisterKey(solanaAddress: string): Promise<PreRegisterKeyResponse>;
     /** Save an encrypted note to the relayer's database. */
     saveEncryptedNote(data: SaveEncryptedNoteRequest): Promise<SaveEncryptedNoteResponse>;
     /** Query encrypted notes for the authenticated user. Requires auth token. */

package/dist/cjs/relayer.js

@@ -5,16 +5,18 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.VeiloRelayerClient = exports.VeiloApiError = void 0;
 const tweetnacl_1 = __importDefault(require("tweetnacl"));
+const DEFAULT_RELAYER_URL = "https://relayer-server.onrender.com";
 // =============================================================================
 // Structured Error
 // =============================================================================
 /** Structured error thrown by VeiloRelayerClient on API failures. */
 class VeiloApiError extends Error {
-    constructor(code, message, status) {
+    constructor(code, message, status, details) {
         super(message);
         this.name = "VeiloApiError";
         this.code = code;
         this.status = status;
+        this.details = details;
     }
 }
 exports.VeiloApiError = VeiloApiError;
@@ -72,7 +74,6 @@ function encryptForRelayer(data, relayerPublicKey) {
  * @example
  * ```ts
  * const client = new VeiloRelayerClient({
- *   relayerUrl: "https://relayer.veilo.io",
  *   apiKey: "your-api-key",
  *   relayerPublicKey: "<base64 NaCl public key>",
  * });
@@ -81,7 +82,7 @@ function encryptForRelayer(data, relayerPublicKey) {
  */
 class VeiloRelayerClient {
     constructor(config, retry) {
-        this.baseUrl = config.relayerUrl.replace(/\/+$/, "");
+        this.baseUrl = (config.relayerUrl?.trim() || DEFAULT_RELAYER_URL).replace(/\/+$/, "");
         this.apiKey = config.apiKey;
         this.relayerPubKey = fromBase64(config.relayerPublicKey);
         this.authToken = config.authToken;
@@ -97,8 +98,9 @@ class VeiloRelayerClient {
     headers(authenticated) {
         const h = {
             "Content-Type": "application/json",
-            "x-api-key": this.apiKey,
         };
+        if (this.apiKey)
+            h["x-api-key"] = this.apiKey;
         if (authenticated && this.authToken) {
             h["Authorization"] = `Bearer ${this.authToken}`;
         }
@@ -131,7 +133,7 @@ class VeiloRelayerClient {
             if (res.ok && data.success !== false) {
                 return data;
             }
-            lastError = new VeiloApiError(data.error || "UNKNOWN", data.message || data.error || `Request failed: ${res.status}`, res.status);
+            lastError = new VeiloApiError(data.error || "UNKNOWN", data.message || data.error || `Request failed: ${res.status}`, res.status, data);
             // Only retry on transient statuses
             if (!this.retry.retryableStatuses.includes(res.status)) {
                 throw lastError;
@@ -174,6 +176,15 @@ class VeiloRelayerClient {
             : `publicKey=${encodeURIComponent(params.publicKey)}`;
         return this.request("GET", `/auth/veiloPublicKey?${query}`);
     }
+    /**
+     * Provision (or retrieve) the Veilo spend key paired with a Solana address.
+     * Public and idempotent; the response contains public key material only.
+     */
+    async preRegisterKey(solanaAddress) {
+        return this.request("POST", "/auth/pre-register-key", {
+            body: { solanaAddress },
+        });
+    }
     // ---------------------------------------------------------------------------
     // Notes
     // ---------------------------------------------------------------------------