@veilo/sdk-core 0.5.0 → 0.6.0

package/dist/esm/predictions/client.js

@@ -0,0 +1,141 @@
+import { VersionedTransaction } from "@solana/web3.js";
+export const JUPITER_PREDICTION_API_URL = "https://api.jup.ag/prediction/v1";
+export const POLYMARKET_CLOB_API_URL = "https://clob.polymarket.com";
+export class JupiterPredictionApiError extends Error {
+    constructor(status, responseBody) {
+        const body = typeof responseBody === "object" && responseBody !== null
+            ? responseBody
+            : undefined;
+        const message = typeof responseBody === "string" && responseBody
+            ? responseBody
+            : typeof body?.message === "string"
+                ? body.message
+                : typeof body?.error === "string"
+                    ? body.error
+                    : `Jupiter Prediction API request failed: ${status}`;
+        super(message);
+        this.name = "JupiterPredictionApiError";
+        this.status = status;
+        this.code = typeof body?.error === "string" ? body.error : undefined;
+        this.responseBody = responseBody;
+    }
+}
+/** Typed client for the unsigned Jupiter Prediction transaction API. */
+export class JupiterPredictionClient {
+    constructor(config) {
+        this.apiKey = config.apiKey;
+        this.baseUrl = normalizeBaseUrl(config.baseUrl ?? JUPITER_PREDICTION_API_URL, "baseUrl");
+        this.polymarketBaseUrl = normalizeBaseUrl(config.polymarketBaseUrl ?? POLYMARKET_CLOB_API_URL, "polymarketBaseUrl");
+        this.fetcher = config.fetch ?? fetch;
+    }
+    async listEvents(params = {}) {
+        const query = new URLSearchParams({ status: params.status ?? "live" });
+        if (params.category)
+            query.set("category", params.category);
+        return (await this.request(`/events?${query}`)).data;
+    }
+    async getEvent(eventId) {
+        return this.request(`/events/${encodeURIComponent(eventId)}`);
+    }
+    async listPositions(ownerPubkey) {
+        return (await this.request(`/positions?ownerPubkey=${encodeURIComponent(ownerPubkey)}`)).data;
+    }
+    async listHistory(ownerPubkey) {
+        return (await this.request(`/history?ownerPubkey=${encodeURIComponent(ownerPubkey)}`)).data;
+    }
+    async getPosition(positionPubkey) {
+        return this.request(`/positions/${encodeURIComponent(positionPubkey)}`);
+    }
+    async placeOrder(request) {
+        return this.request("/orders", { method: "POST", body: request });
+    }
+    async getOrderStatus(orderPubkey) {
+        return this.request(`/orders/status/${encodeURIComponent(orderPubkey)}`);
+    }
+    async closePosition(positionPubkey, ownerPubkey) {
+        return this.request(`/positions/${encodeURIComponent(positionPubkey)}`, {
+            method: "DELETE",
+            body: { ownerPubkey },
+        });
+    }
+    async closeAllPositions(ownerPubkey, minSellPriceSlippageBps = 300) {
+        return this.request("/positions", {
+            method: "DELETE",
+            body: { ownerPubkey, minSellPriceSlippageBps },
+        });
+    }
+    async claimPosition(positionPubkey, ownerPubkey) {
+        return this.request(`/positions/${encodeURIComponent(positionPubkey)}/claim`, { method: "POST", body: { ownerPubkey } });
+    }
+    async getPriceHistory(clobTokenId, interval) {
+        const fidelity = {
+            "1d": 5,
+            "1w": 30,
+            "1m": 180,
+            max: 180,
+        };
+        const query = new URLSearchParams({
+            market: clobTokenId,
+            interval,
+            fidelity: String(fidelity[interval]),
+        });
+        const response = await this.fetcher(`${this.polymarketBaseUrl}/prices-history?${query}`);
+        const body = await readResponseBody(response);
+        if (!response.ok) {
+            throw new JupiterPredictionApiError(response.status, body);
+        }
+        return body.history ?? [];
+    }
+    async request(path, options = {}) {
+        const response = await this.fetcher(`${this.baseUrl}${path}`, {
+            method: options.method ?? "GET",
+            headers: {
+                "x-api-key": this.apiKey,
+                ...(options.body === undefined
+                    ? {}
+                    : { "Content-Type": "application/json" }),
+            },
+            body: options.body === undefined ? undefined : JSON.stringify(options.body),
+        });
+        const body = await readResponseBody(response);
+        if (!response.ok) {
+            throw new JupiterPredictionApiError(response.status, body);
+        }
+        return body;
+    }
+}
+/** Decode an unsigned transaction returned by Jupiter for wallet signing. */
+export function deserializePredictionTransaction(response) {
+    if (!response.transaction) {
+        throw new TypeError("Prediction transaction must not be empty");
+    }
+    return VersionedTransaction.deserialize(decodeBase64(response.transaction));
+}
+function normalizeBaseUrl(value, label) {
+    const normalized = value.trim().replace(/\/+$/, "");
+    if (!normalized)
+        throw new TypeError(`${label} must not be empty`);
+    return normalized;
+}
+async function readResponseBody(response) {
+    const body = await response.text();
+    if (!body)
+        return {};
+    try {
+        return JSON.parse(body);
+    }
+    catch {
+        return body;
+    }
+}
+function decodeBase64(encoded) {
+    if (typeof Buffer !== "undefined") {
+        return new Uint8Array(Buffer.from(encoded, "base64"));
+    }
+    const binary = atob(encoded);
+    const bytes = new Uint8Array(binary.length);
+    for (let index = 0; index < binary.length; index++) {
+        bytes[index] = binary.charCodeAt(index);
+    }
+    return bytes;
+}

package/dist/esm/predictions/index.d.ts

@@ -0,0 +1,5 @@
+export * from "./types.js";
+export * from "./keys.js";
+export * from "./pdas.js";
+export * from "./client.js";
+export * from "./relayer.js";

package/dist/esm/predictions/index.js

@@ -0,0 +1,5 @@
+export * from "./types.js";
+export * from "./keys.js";
+export * from "./pdas.js";
+export * from "./client.js";
+export * from "./relayer.js";

package/dist/esm/predictions/keys.d.ts

@@ -0,0 +1,14 @@
+import { Keypair } from "@solana/web3.js";
+export interface PredictionKeyBundle {
+    withdrawalId: Uint8Array;
+    withdrawalIdHex: string;
+    ephemeral: Keypair;
+    claimantPublicKey: string;
+    claimantSecretKey: string;
+}
+export declare function derivePredictionEphemeralKeypair(spendingKey: Uint8Array, nonce: number): Keypair;
+export declare function derivePredictionWithdrawalId(spendingKey: Uint8Array, nonce: number): Uint8Array;
+export declare function predictionWithdrawalIdToHex(withdrawalId: Uint8Array): string;
+export declare function predictionWithdrawalIdFromHex(value: string): Uint8Array;
+/** Derive every client-held key field needed across a prediction lifecycle. */
+export declare function derivePredictionKeyBundle(spendingKey: Uint8Array, nonce: number): PredictionKeyBundle;

package/dist/esm/predictions/keys.js

@@ -0,0 +1,33 @@
+import { sha256 } from "@noble/hashes/sha256";
+import { Keypair } from "@solana/web3.js";
+import { assertBytes, bytesToHex, concatBytes, encodeBase58, hexToBytes, uint32Le, uint64Le, utf8, } from "../identity/encoding.js";
+export function derivePredictionEphemeralKeypair(spendingKey, nonce) {
+    assertBytes(spendingKey, 32, "spending key");
+    if (!Number.isSafeInteger(nonce) || nonce < 0) {
+        throw new RangeError("prediction nonce must be a non-negative safe integer");
+    }
+    return Keypair.fromSeed(sha256(concatBytes(utf8("prediction_ephemeral"), spendingKey, uint64Le(BigInt(nonce), "prediction nonce"))));
+}
+export function derivePredictionWithdrawalId(spendingKey, nonce) {
+    assertBytes(spendingKey, 32, "spending key");
+    return sha256(concatBytes(utf8("prediction_withdrawal_v1"), spendingKey, uint32Le(nonce, "prediction nonce")));
+}
+export function predictionWithdrawalIdToHex(withdrawalId) {
+    assertBytes(withdrawalId, 32, "prediction withdrawal ID");
+    return bytesToHex(withdrawalId);
+}
+export function predictionWithdrawalIdFromHex(value) {
+    return hexToBytes(value, 32, "prediction withdrawal ID");
+}
+/** Derive every client-held key field needed across a prediction lifecycle. */
+export function derivePredictionKeyBundle(spendingKey, nonce) {
+    const withdrawalId = derivePredictionWithdrawalId(spendingKey, nonce);
+    const ephemeral = derivePredictionEphemeralKeypair(spendingKey, nonce);
+    return {
+        withdrawalId,
+        withdrawalIdHex: predictionWithdrawalIdToHex(withdrawalId),
+        ephemeral,
+        claimantPublicKey: ephemeral.publicKey.toBase58(),
+        claimantSecretKey: encodeBase58(ephemeral.secretKey),
+    };
+}

package/dist/esm/predictions/pdas.d.ts

@@ -0,0 +1,6 @@
+import { PublicKey } from "@solana/web3.js";
+export declare function derivePredictionSlotPda(params: {
+    programId: PublicKey;
+    mint: PublicKey;
+    withdrawalId: Uint8Array;
+}): PublicKey;

package/dist/esm/predictions/pdas.js

@@ -0,0 +1,10 @@
+import { PublicKey } from "@solana/web3.js";
+import { assertBytes, utf8 } from "../identity/encoding.js";
+export function derivePredictionSlotPda(params) {
+    assertBytes(params.withdrawalId, 32, "prediction withdrawal ID");
+    return PublicKey.findProgramAddressSync([
+        utf8("prediction_slot_v1"),
+        params.mint.toBytes(),
+        params.withdrawalId,
+    ], params.programId)[0];
+}

package/dist/esm/predictions/relayer.d.ts

@@ -0,0 +1,3 @@
+import type { PredictionOpenRequest, PredictionOpenResponse, PredictionReissueRequest, PredictionReissueResponse } from "./types.js";
+export declare function submitPredictionOpen(data: PredictionOpenRequest): Promise<PredictionOpenResponse>;
+export declare function submitPredictionReissue(data: PredictionReissueRequest): Promise<PredictionReissueResponse>;

package/dist/esm/predictions/relayer.js

@@ -0,0 +1,7 @@
+import { getInternalRelayerClient } from "../relayer/internal.js";
+export function submitPredictionOpen(data) {
+    return getInternalRelayerClient().submitPredictionOpen(data);
+}
+export function submitPredictionReissue(data) {
+    return getInternalRelayerClient().submitPredictionReissue(data);
+}

package/dist/esm/predictions/types.d.ts

@@ -0,0 +1,178 @@
+import type { TransactNote } from "../relayer/types.js";
+export interface PredictionOpenRequest {
+    notes: TransactNote[];
+    /** USDC stake, raw 6-decimal units. */
+    depositAmount: string;
+    /** 32-byte prediction-slot withdrawal ID, hex. */
+    withdrawalId: string;
+    /** Deterministic ephemeral wallet and open-proof claimant, base58. */
+    claimantPublicKey: string;
+    userPublicKey: string;
+}
+export interface PredictionOpenResponse {
+    success: boolean;
+    message: string;
+    data?: {
+        txSignature: string;
+        ephemeralWallet: string;
+        ephemeralTokenAccount: string;
+        changeAmount: string;
+        fee: string;
+        feeBps: number;
+        totalDebited: string;
+    };
+}
+export interface PredictionReissueRequest {
+    withdrawalId: string;
+    claimantSecretKey: string;
+    /** Kept for API compatibility; the relayer reads the real chain balance. */
+    reissueAmount: string;
+    veiloPublicKey: string;
+    userPublicKey: string;
+}
+export interface PredictionReissueResponse {
+    success: boolean;
+    message: string;
+    data?: {
+        txSignature: string | null;
+        reissueAmount: string;
+        fee?: string;
+        tradeHappened?: boolean;
+    };
+}
+export interface PredictionMarketPricing {
+    buyYesPriceUsd: number;
+    sellYesPriceUsd: number;
+    buyNoPriceUsd: number;
+    sellNoPriceUsd: number;
+    volume: number;
+}
+export interface PredictionMarket {
+    provider: string;
+    marketId: string;
+    status: "open" | "closed" | "cancelled";
+    result: string | null;
+    title: string;
+    openTime: number;
+    closeTime: number;
+    rulesPrimary?: string;
+    imageUrl?: string;
+    clobTokenIds?: string[];
+    pricing: PredictionMarketPricing;
+}
+export interface PredictionEvent {
+    eventId: string;
+    isActive: boolean;
+    isLive: boolean;
+    category: string;
+    subcategory: string;
+    tags: string[];
+    metadata: {
+        title: string;
+        closeTime: string;
+        imageUrl?: string;
+        series?: string;
+        slug?: string;
+    };
+    volumeUsd: string;
+    volume24hr: string;
+    closeCondition?: string;
+    markets: PredictionMarket[];
+}
+export interface PredictionPosition {
+    pubkey: string;
+    owner: string;
+    marketId: string;
+    isYes: boolean;
+    contracts: string;
+    contractsDecimal: string;
+    totalCostUsd: string;
+    sizeUsd: string;
+    valueUsd: string;
+    avgPriceUsd: string;
+    markPriceUsd: string;
+    pnlUsd: string;
+    pnlUsdPercent: number;
+    feesPaidUsd: string;
+    claimed: boolean;
+    claimable: boolean;
+    payoutUsd: string;
+    sellPriceUsd: string;
+    settlementDate: number;
+    eventMetadata: {
+        title: string;
+        category: string;
+        imageUrl?: string;
+    };
+    marketMetadata: {
+        title: string;
+        result: string | null;
+        status: string;
+    };
+}
+export interface PlacePredictionOrderRequest {
+    ownerPubkey: string;
+    marketId: string;
+    isYes: boolean;
+    isBuy: true;
+    depositAmount: string;
+    depositMint: string;
+}
+export interface PredictionTransactionResponse {
+    transaction: string;
+    txMeta: {
+        blockhash: string;
+        lastValidBlockHeight: number;
+    };
+}
+export interface PlacePredictionOrderResponse extends PredictionTransactionResponse {
+    order: {
+        orderPubkey: string;
+        positionPubkey: string;
+        contracts: number;
+    };
+}
+export type PredictionOrderStatus = "pending" | "filled" | "partiallyfilled" | "failed";
+export interface PredictionOrderStatusResponse {
+    orderPubkey: string;
+    status: PredictionOrderStatus;
+    latestEventType: string;
+    latestSignature: string;
+    history: Array<{
+        eventType: string;
+        status: string;
+        rawStatus: string;
+        timestamp: number;
+        signature: string;
+    }>;
+}
+export interface PredictionHistoryEvent {
+    id: number;
+    eventType: string;
+    signature: string;
+    timestamp: number;
+    marketId: string;
+    isYes: boolean;
+    isBuy: boolean;
+    contractsDecimal: string;
+    avgFillPriceUsd?: string;
+    totalCostUsd?: string;
+    netProceedsUsd?: string;
+    realizedPnl?: string;
+    payoutAmountUsd?: string;
+    eventMetadata: {
+        title: string;
+        category?: string;
+        imageUrl?: string;
+    };
+    marketMetadata: {
+        title: string;
+        result: string | null;
+        status: string;
+    };
+}
+export type PredictionPriceInterval = "1d" | "1w" | "1m" | "max";
+export interface PredictionPricePoint {
+    t: number;
+    p: number;
+}

package/dist/esm/predictions/types.js

@@ -0,0 +1 @@
+export {};

package/dist/esm/program.d.ts

@@ -1,6 +1,8 @@
 import { Program, Idl, Wallet } from "@coral-xyz/anchor";
 import { Connection, PublicKey } from "@solana/web3.js";
+import { PRIVACY_POOL_CURRENT_IDL, PRIVACY_POOL_IDLS, PRIVACY_POOL_LEGACY2_IDL, PRIVACY_POOL_LEGACY_IDL } from "./idl/index.js";
 export declare const PRIVACY_POOL_IDL: Idl;
+export { PRIVACY_POOL_CURRENT_IDL, PRIVACY_POOL_IDLS, PRIVACY_POOL_LEGACY_IDL, PRIVACY_POOL_LEGACY2_IDL, };
 /** Deployed program ID extracted from the bundled IDL. */
 export declare const PRIVACY_POOL_PROGRAM_ID: PublicKey;
 /**

package/dist/esm/program.js

@@ -1,10 +1,11 @@
 import { Program, AnchorProvider } from "@coral-xyz/anchor";
 import { PublicKey } from "@solana/web3.js";
-import IDL_JSON from "./idl/privacy_pool.js";
+import { PRIVACY_POOL_CURRENT_IDL, PRIVACY_POOL_IDLS, PRIVACY_POOL_LEGACY2_IDL, PRIVACY_POOL_LEGACY_IDL, } from "./idl/index.js";
 // Re-export so consumers can access the raw IDL if needed
-export const PRIVACY_POOL_IDL = IDL_JSON;
+export const PRIVACY_POOL_IDL = PRIVACY_POOL_CURRENT_IDL;
+export { PRIVACY_POOL_CURRENT_IDL, PRIVACY_POOL_IDLS, PRIVACY_POOL_LEGACY_IDL, PRIVACY_POOL_LEGACY2_IDL, };
 /** Deployed program ID extracted from the bundled IDL. */
-export const PRIVACY_POOL_PROGRAM_ID = new PublicKey(IDL_JSON.address);
+export const PRIVACY_POOL_PROGRAM_ID = new PublicKey(PRIVACY_POOL_CURRENT_IDL.address);
 /**
  * Create an Anchor `Program` instance for the Veilo Privacy Pool.
  *

package/dist/esm/prover.d.ts

@@ -3,8 +3,10 @@ import { type SwapProofBuilder } from "./proofs/swap.js";
 /**
  * Circuit artifact paths required by snarkjs.
  *
- * These files are large (10-100 MB) and should NOT be bundled in npm.
- * Host them on GitHub Releases, IPFS, or a CDN and download at runtime.
+ * These files are large (10-100 MB) and are NOT bundled in the npm package —
+ * `files` ships `dist/` only. Optional: omit them and the prover resolves a
+ * local copy (see `resolveCircuitArtifacts`). Supply them explicitly whenever
+ * the defaults cannot apply, which includes every browser build.
  *
  * For Node.js: pass file system paths (e.g. "./circuits/transaction.wasm").
  * For browsers: pass Uint8Array buffers or URLs that fetch returns as ArrayBuffer.
@@ -15,6 +17,27 @@ export interface CircuitArtifacts {
     /** Path or buffer for the Groth16 proving key (.zkey) */
     zkeyPath: string | Uint8Array;
 }
+/** The circuits this package can resolve artifacts for. */
+export type CircuitName = "transaction" | "swap";
+/**
+ * Resolve circuit artifacts from disk when the caller did not supply them.
+ *
+ * Search order, first hit wins:
+ *
+ *   1. $VEILO_CIRCUITS_DIR                  explicit override
+ *   2. <package>/circuits                   populated by `npm run copy:circuits`
+ *   3. <cwd>/circuits
+ *   4. <cwd>/node_modules/@veilo/sdk-core/circuits
+ *
+ * NODE ONLY, AND DELIBERATELY LAZY. `node:fs` is imported inside the call, not
+ * at module scope: this module is reachable from the package root export, and a
+ * top-level `node:fs` import throws at bundle time in browser builds with no
+ * Node polyfill — the same reason `random.ts` avoids `node:crypto`. Browsers
+ * must pass `CircuitArtifacts` explicitly; there is nothing to resolve there.
+ *
+ * @throws when no candidate directory holds both files, listing what it tried
+ */
+export declare function resolveCircuitArtifacts(circuit: CircuitName): Promise<CircuitArtifacts>;
 /**
  * Create a proof builder function for the transaction circuit.
  *
@@ -41,9 +64,9 @@ export interface CircuitArtifacts {
  * const proof = await prover(circuitInputs);
  * ```
  */
-export declare function createTransactionProver(artifacts: CircuitArtifacts): TransactionProofBuilder;
+export declare function createTransactionProver(artifacts?: CircuitArtifacts): TransactionProofBuilder;
 /** Create a proof builder for the current `swap.circom` witness shape. */
-export declare function createSwapProver(artifacts: CircuitArtifacts): SwapProofBuilder;
+export declare function createSwapProver(artifacts?: CircuitArtifacts): SwapProofBuilder;
 /**
  * Verify a Groth16 proof against public signals and a verification key.
  *

package/dist/esm/prover.js

@@ -1,14 +1,91 @@
 import { formatInputsForSnarkjs } from "./proofs/formatting.js";
 import { formatSwapInputsForSnarkjs, } from "./proofs/swap.js";
-/** Lazy-load snarkjs — works in both CJS and ESM contexts. */
-async function loadSnarkjs() {
+/**
+ * Lazy-load snarkjs — works in both CJS and ESM contexts.
+ *
+ * The import is built through `Function` so TypeScript cannot rewrite it into a
+ * `require()` in the CommonJS build, and bundlers cannot follow it into browser
+ * output. Never call `require("snarkjs")` directly here: `require` is not
+ * defined in the ESM build, so it throws ReferenceError instead of this
+ * message.
+ */
+async function loadSnarkjs(purpose = "proof generation") {
     try {
         // Dynamic import works in both CJS (Node 12+) and ESM
         return await Function('return import("snarkjs")')();
     }
     catch {
-        throw new Error("snarkjs is required for proof generation. Install it: npm install snarkjs");
+        throw new Error(`snarkjs is required for ${purpose}. Install it: npm install snarkjs`);
+    }
+}
+/** Layout produced by `npm run copy:circuits`, relative to a circuits root. */
+const ARTIFACT_LAYOUT = {
+    transaction: {
+        wasm: "transaction/transaction_js/transaction.wasm",
+        zkey: "transaction/transaction_final.zkey",
+    },
+    swap: {
+        wasm: "swap/swap_js/swap.wasm",
+        zkey: "swap/swap_final.zkey",
+    },
+};
+/**
+ * Resolve circuit artifacts from disk when the caller did not supply them.
+ *
+ * Search order, first hit wins:
+ *
+ *   1. $VEILO_CIRCUITS_DIR                  explicit override
+ *   2. <package>/circuits                   populated by `npm run copy:circuits`
+ *   3. <cwd>/circuits
+ *   4. <cwd>/node_modules/@veilo/sdk-core/circuits
+ *
+ * NODE ONLY, AND DELIBERATELY LAZY. `node:fs` is imported inside the call, not
+ * at module scope: this module is reachable from the package root export, and a
+ * top-level `node:fs` import throws at bundle time in browser builds with no
+ * Node polyfill — the same reason `random.ts` avoids `node:crypto`. Browsers
+ * must pass `CircuitArtifacts` explicitly; there is nothing to resolve there.
+ *
+ * @throws when no candidate directory holds both files, listing what it tried
+ */
+export async function resolveCircuitArtifacts(circuit) {
+    let fs;
+    let path;
+    try {
+        fs = await Function('return import("node:fs")')();
+        path = await Function('return import("node:path")')();
+    }
+    catch {
+        throw new Error(`Cannot resolve ${circuit} circuit artifacts: no filesystem available. ` +
+            "Pass CircuitArtifacts explicitly (browsers must supply buffers or URLs).");
+    }
+    const layout = ARTIFACT_LAYOUT[circuit];
+    if (!layout) {
+        throw new Error(`Unknown circuit ${JSON.stringify(circuit)}. Known circuits: ` +
+            `${Object.keys(ARTIFACT_LAYOUT).join(", ")}.`);
     }
+    const cwd = typeof process !== "undefined" ? process.cwd() : ".";
+    // __dirname exists in the CJS build; the ESM build falls back to cwd-relative
+    // candidates. dist/cjs/prover.js → ../../circuits is the package root copy.
+    const packageDir = typeof __dirname !== "undefined"
+        ? path.resolve(__dirname, "..", "..", "circuits")
+        : undefined;
+    const roots = [
+        process.env?.VEILO_CIRCUITS_DIR,
+        packageDir,
+        path.resolve(cwd, "circuits"),
+        path.resolve(cwd, "node_modules", "@veilo", "sdk-core", "circuits"),
+    ].filter((root) => Boolean(root));
+    for (const root of roots) {
+        const wasmPath = path.resolve(root, layout.wasm);
+        const zkeyPath = path.resolve(root, layout.zkey);
+        if (fs.existsSync(wasmPath) && fs.existsSync(zkeyPath)) {
+            return { wasmPath, zkeyPath };
+        }
+    }
+    throw new Error(`Cannot resolve ${circuit} circuit artifacts. Looked for ${layout.wasm} ` +
+        `and ${layout.zkey} under:\n  ${roots.join("\n  ")}\n` +
+        "Run `npm run copy:circuits` in the SDK, set VEILO_CIRCUITS_DIR, or pass " +
+        "CircuitArtifacts explicitly.");
 }
 /**
  * Create a proof builder function for the transaction circuit.
@@ -37,18 +114,30 @@ async function loadSnarkjs() {
  * ```
  */
 export function createTransactionProver(artifacts) {
+    // Resolved on first use, not at factory time: constructing a prover must stay
+    // free of filesystem access so browser bundles can import this module.
+    let resolved;
     return async (inputs) => {
         const snarkjs = await loadSnarkjs();
+        resolved ?? (resolved = artifacts
+            ? Promise.resolve(artifacts)
+            : resolveCircuitArtifacts("transaction"));
+        const { wasmPath, zkeyPath } = await resolved;
         const formattedInputs = formatInputsForSnarkjs(inputs);
-        const { proof } = await snarkjs.groth16.fullProve(formattedInputs, artifacts.wasmPath, artifacts.zkeyPath);
+        const { proof } = await snarkjs.groth16.fullProve(formattedInputs, wasmPath, zkeyPath);
         return proof;
     };
 }
 /** Create a proof builder for the current `swap.circom` witness shape. */
 export function createSwapProver(artifacts) {
+    let resolved;
     return async (inputs) => {
         const snarkjs = await loadSnarkjs();
-        const { proof } = await snarkjs.groth16.fullProve(formatSwapInputsForSnarkjs(inputs), artifacts.wasmPath, artifacts.zkeyPath);
+        resolved ?? (resolved = artifacts
+            ? Promise.resolve(artifacts)
+            : resolveCircuitArtifacts("swap"));
+        const { wasmPath, zkeyPath } = await resolved;
+        const { proof } = await snarkjs.groth16.fullProve(formatSwapInputsForSnarkjs(inputs), wasmPath, zkeyPath);
         return proof;
     };
 }
@@ -63,18 +152,20 @@ export function createSwapProver(artifacts) {
  * @returns true if the proof is valid
  */
 export async function verifyProof(proof, publicSignals, vkey) {
-    // eslint-disable-next-line @typescript-eslint/no-var-requires
-    let snarkjs;
-    try {
-        snarkjs = require("snarkjs");
-    }
-    catch {
-        throw new Error('snarkjs is required for proof verification. Install it: npm install snarkjs');
-    }
+    const snarkjs = await loadSnarkjs("proof verification");
     let vkeyObj;
     if (typeof vkey === "string") {
-        // Node.js file path — read and parse
-        const fs = await import("fs");
+        // Node.js file path — read and parse. Same hidden import as
+        // resolveCircuitArtifacts: a plain `await import("fs")` is followed by
+        // bundlers and breaks browser builds that have no Node polyfill.
+        let fs;
+        try {
+            fs = await Function('return import("node:fs")')();
+        }
+        catch {
+            throw new Error("Reading a verification key from a path requires Node. Pass the parsed " +
+                "verification key object instead.");
+        }
         vkeyObj = JSON.parse(fs.readFileSync(vkey, "utf-8"));
     }
     else {