solvoid 1.0.0 → 1.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/client.d.ts +73 -0
- package/dist/client.d.ts.map +1 -0
- package/dist/client.js +281 -0
- package/dist/client.js.map +1 -0
- package/dist/crypto/poseidon.d.ts +124 -0
- package/dist/crypto/poseidon.d.ts.map +1 -0
- package/dist/crypto/poseidon.js +293 -0
- package/dist/crypto/poseidon.js.map +1 -0
- package/dist/events/bus.d.ts +44 -0
- package/dist/events/bus.d.ts.map +1 -0
- package/dist/events/bus.js +83 -0
- package/dist/events/bus.js.map +1 -0
- package/dist/{sdk/index.d.ts → index.d.ts} +2 -3
- package/dist/index.d.ts.map +1 -0
- package/dist/{sdk/index.js → index.js} +21 -11
- package/dist/index.js.map +1 -0
- package/dist/integrity.d.ts +371 -0
- package/dist/integrity.d.ts.map +1 -0
- package/dist/integrity.js +260 -0
- package/dist/integrity.js.map +1 -0
- package/dist/network/shadow-rpc.d.ts +36 -0
- package/dist/network/shadow-rpc.d.ts.map +1 -0
- package/dist/network/shadow-rpc.js +163 -0
- package/dist/network/shadow-rpc.js.map +1 -0
- package/dist/{sdk/passport → passport}/manager.d.ts +9 -18
- package/dist/passport/manager.d.ts.map +1 -0
- package/dist/passport/manager.js +148 -0
- package/dist/passport/manager.js.map +1 -0
- package/dist/pipeline.d.ts +25 -0
- package/dist/pipeline.d.ts.map +1 -0
- package/dist/pipeline.js +127 -0
- package/dist/pipeline.js.map +1 -0
- package/dist/privacy/relayer.d.ts.map +1 -0
- package/dist/privacy/relayer.js.map +1 -0
- package/dist/privacy/shield.d.ts +27 -0
- package/dist/privacy/shield.d.ts.map +1 -0
- package/dist/privacy/shield.js +289 -0
- package/dist/privacy/shield.js.map +1 -0
- package/dist/{sdk/privacy-engine.d.ts → privacy-engine.d.ts} +2 -1
- package/dist/privacy-engine.d.ts.map +1 -0
- package/dist/{sdk/privacy-engine.js → privacy-engine.js} +24 -15
- package/dist/privacy-engine.js.map +1 -0
- package/dist/registry/idl-fetcher.d.ts +10 -0
- package/dist/registry/idl-fetcher.d.ts.map +1 -0
- package/dist/{sdk/registry → registry}/idl-fetcher.js +19 -16
- package/dist/registry/idl-fetcher.js.map +1 -0
- package/dist/registry/programs.d.ts.map +1 -0
- package/dist/registry/programs.js.map +1 -0
- package/dist/rescue/analyzer.d.ts +20 -0
- package/dist/rescue/analyzer.d.ts.map +1 -0
- package/dist/rescue/analyzer.js +137 -0
- package/dist/rescue/analyzer.js.map +1 -0
- package/dist/rescue/builder.d.ts +23 -0
- package/dist/rescue/builder.d.ts.map +1 -0
- package/dist/rescue/builder.js +164 -0
- package/dist/rescue/builder.js.map +1 -0
- package/dist/security/key-rotation.d.ts +153 -0
- package/dist/security/key-rotation.d.ts.map +1 -0
- package/dist/security/key-rotation.js +354 -0
- package/dist/security/key-rotation.js.map +1 -0
- package/dist/{sdk/semantics → semantics}/analyzer.d.ts.map +1 -1
- package/dist/{sdk/semantics → semantics}/analyzer.js.map +1 -1
- package/dist/semantics/decoder.d.ts.map +1 -0
- package/dist/semantics/decoder.js.map +1 -0
- package/dist/{sdk/semantics → semantics}/graph.d.ts.map +1 -1
- package/dist/{sdk/semantics → semantics}/graph.js.map +1 -1
- package/dist/semantics/idl-registry.d.ts +8 -0
- package/dist/semantics/idl-registry.d.ts.map +1 -0
- package/dist/{sdk/semantics → semantics}/idl-registry.js +23 -7
- package/dist/semantics/idl-registry.js.map +1 -0
- package/dist/semantics/types.d.ts +10 -0
- package/dist/semantics/types.d.ts.map +1 -0
- package/dist/{sdk → semantics}/types.js.map +1 -1
- package/dist/types.d.ts +23 -0
- package/dist/types.d.ts.map +1 -0
- package/dist/types.js.map +1 -0
- package/dist/utils/address.d.ts +10 -0
- package/dist/utils/address.d.ts.map +1 -0
- package/dist/utils/address.js +45 -0
- package/dist/utils/address.js.map +1 -0
- package/dist/utils/config.d.ts.map +1 -0
- package/dist/utils/config.js.map +1 -0
- package/dist/utils/logger.d.ts.map +1 -0
- package/dist/utils/logger.js.map +1 -0
- package/package.json +38 -76
- package/LICENSE +0 -21
- package/README.md +0 -123
- package/SECURITY.md +0 -174
- package/bin/solvoid-scan +0 -2
- package/dist/cli/privacy-scan.d.ts +0 -11
- package/dist/cli/privacy-scan.d.ts.map +0 -1
- package/dist/cli/privacy-scan.js +0 -112
- package/dist/cli/privacy-scan.js.map +0 -1
- package/dist/cli/solvoid-scan.d.ts +0 -13
- package/dist/cli/solvoid-scan.d.ts.map +0 -1
- package/dist/cli/solvoid-scan.js +0 -174
- package/dist/cli/solvoid-scan.js.map +0 -1
- package/dist/cli/test-forensics.d.ts +0 -2
- package/dist/cli/test-forensics.d.ts.map +0 -1
- package/dist/cli/test-forensics.js +0 -90
- package/dist/cli/test-forensics.js.map +0 -1
- package/dist/cli/test-scenarios.d.ts +0 -2
- package/dist/cli/test-scenarios.d.ts.map +0 -1
- package/dist/cli/test-scenarios.js +0 -96
- package/dist/cli/test-scenarios.js.map +0 -1
- package/dist/examples/enterprise-demo.js +0 -65
- package/dist/sdk/client.d.ts +0 -77
- package/dist/sdk/client.d.ts.map +0 -1
- package/dist/sdk/client.js +0 -180
- package/dist/sdk/client.js.map +0 -1
- package/dist/sdk/compliance/identity.d.ts +0 -34
- package/dist/sdk/compliance/identity.d.ts.map +0 -1
- package/dist/sdk/compliance/identity.js +0 -55
- package/dist/sdk/compliance/identity.js.map +0 -1
- package/dist/sdk/compliance/threat-model.d.ts +0 -14
- package/dist/sdk/compliance/threat-model.d.ts.map +0 -1
- package/dist/sdk/compliance/threat-model.js +0 -101
- package/dist/sdk/compliance/threat-model.js.map +0 -1
- package/dist/sdk/forensics/mev.js +0 -50
- package/dist/sdk/forensics/order-flow.d.ts +0 -20
- package/dist/sdk/forensics/order-flow.d.ts.map +0 -1
- package/dist/sdk/forensics/order-flow.js +0 -104
- package/dist/sdk/forensics/order-flow.js.map +0 -1
- package/dist/sdk/forensics/simulation.d.ts +0 -14
- package/dist/sdk/forensics/simulation.d.ts.map +0 -1
- package/dist/sdk/forensics/simulation.js +0 -45
- package/dist/sdk/forensics/simulation.js.map +0 -1
- package/dist/sdk/index.d.ts.map +0 -1
- package/dist/sdk/index.js.map +0 -1
- package/dist/sdk/network/shadow-rpc.d.ts +0 -18
- package/dist/sdk/network/shadow-rpc.d.ts.map +0 -1
- package/dist/sdk/network/shadow-rpc.js +0 -32
- package/dist/sdk/network/shadow-rpc.js.map +0 -1
- package/dist/sdk/obfuscator.d.ts +0 -36
- package/dist/sdk/obfuscator.d.ts.map +0 -1
- package/dist/sdk/obfuscator.js +0 -77
- package/dist/sdk/obfuscator.js.map +0 -1
- package/dist/sdk/passport/manager.d.ts.map +0 -1
- package/dist/sdk/passport/manager.js +0 -107
- package/dist/sdk/passport/manager.js.map +0 -1
- package/dist/sdk/pipeline.d.ts +0 -34
- package/dist/sdk/pipeline.d.ts.map +0 -1
- package/dist/sdk/pipeline.js +0 -81
- package/dist/sdk/pipeline.js.map +0 -1
- package/dist/sdk/privacy/confidential-transfer.d.ts +0 -81
- package/dist/sdk/privacy/confidential-transfer.d.ts.map +0 -1
- package/dist/sdk/privacy/confidential-transfer.js +0 -158
- package/dist/sdk/privacy/confidential-transfer.js.map +0 -1
- package/dist/sdk/privacy/history.d.ts +0 -11
- package/dist/sdk/privacy/history.d.ts.map +0 -1
- package/dist/sdk/privacy/history.js +0 -110
- package/dist/sdk/privacy/history.js.map +0 -1
- package/dist/sdk/privacy/light-protocol.d.ts +0 -42
- package/dist/sdk/privacy/light-protocol.d.ts.map +0 -1
- package/dist/sdk/privacy/light-protocol.js +0 -83
- package/dist/sdk/privacy/light-protocol.js.map +0 -1
- package/dist/sdk/privacy/relayer.d.ts.map +0 -1
- package/dist/sdk/privacy/relayer.js.map +0 -1
- package/dist/sdk/privacy/safe-obfuscator.d.ts +0 -38
- package/dist/sdk/privacy/safe-obfuscator.d.ts.map +0 -1
- package/dist/sdk/privacy/safe-obfuscator.js +0 -101
- package/dist/sdk/privacy/safe-obfuscator.js.map +0 -1
- package/dist/sdk/privacy/shield.d.ts +0 -34
- package/dist/sdk/privacy/shield.d.ts.map +0 -1
- package/dist/sdk/privacy/shield.js +0 -174
- package/dist/sdk/privacy/shield.js.map +0 -1
- package/dist/sdk/privacy/zk.js +0 -43
- package/dist/sdk/privacy-engine.d.ts.map +0 -1
- package/dist/sdk/privacy-engine.js.map +0 -1
- package/dist/sdk/registry/idl-fetcher.d.ts +0 -17
- package/dist/sdk/registry/idl-fetcher.d.ts.map +0 -1
- package/dist/sdk/registry/idl-fetcher.js.map +0 -1
- package/dist/sdk/registry/programs.d.ts.map +0 -1
- package/dist/sdk/registry/programs.js.map +0 -1
- package/dist/sdk/rescue/analyzer.d.ts +0 -22
- package/dist/sdk/rescue/analyzer.d.ts.map +0 -1
- package/dist/sdk/rescue/analyzer.js +0 -46
- package/dist/sdk/rescue/analyzer.js.map +0 -1
- package/dist/sdk/rescue/builder.d.ts +0 -16
- package/dist/sdk/rescue/builder.d.ts.map +0 -1
- package/dist/sdk/rescue/builder.js +0 -33
- package/dist/sdk/rescue/builder.js.map +0 -1
- package/dist/sdk/semantics/decoder.d.ts.map +0 -1
- package/dist/sdk/semantics/decoder.js.map +0 -1
- package/dist/sdk/semantics/idl-registry.d.ts +0 -7
- package/dist/sdk/semantics/idl-registry.d.ts.map +0 -1
- package/dist/sdk/semantics/idl-registry.js.map +0 -1
- package/dist/sdk/semantics/types.d.ts +0 -44
- package/dist/sdk/semantics/types.d.ts.map +0 -1
- package/dist/sdk/semantics/types.js.map +0 -1
- package/dist/sdk/simulator.d.ts +0 -15
- package/dist/sdk/simulator.d.ts.map +0 -1
- package/dist/sdk/simulator.js +0 -133
- package/dist/sdk/simulator.js.map +0 -1
- package/dist/sdk/types.d.ts +0 -53
- package/dist/sdk/types.d.ts.map +0 -1
- package/dist/sdk/utils/config.d.ts.map +0 -1
- package/dist/sdk/utils/config.js.map +0 -1
- package/dist/sdk/utils/logger.d.ts.map +0 -1
- package/dist/sdk/utils/logger.js.map +0 -1
- package/dist/tests/unit/idl-registry.test.d.ts +0 -2
- package/dist/tests/unit/idl-registry.test.d.ts.map +0 -1
- package/dist/tests/unit/idl-registry.test.js +0 -35
- package/dist/tests/unit/idl-registry.test.js.map +0 -1
- package/dist/tools/exploit_demonstration.js +0 -99
- package/dist/tools/gen-tx.js +0 -29
- package/dist/tools/get-recent-tx.js +0 -18
- /package/dist/{sdk/privacy → privacy}/relayer.d.ts +0 -0
- /package/dist/{sdk/privacy → privacy}/relayer.js +0 -0
- /package/dist/{sdk/registry → registry}/programs.d.ts +0 -0
- /package/dist/{sdk/registry → registry}/programs.js +0 -0
- /package/dist/{sdk/semantics → semantics}/analyzer.d.ts +0 -0
- /package/dist/{sdk/semantics → semantics}/analyzer.js +0 -0
- /package/dist/{sdk/semantics → semantics}/decoder.d.ts +0 -0
- /package/dist/{sdk/semantics → semantics}/decoder.js +0 -0
- /package/dist/{sdk/semantics → semantics}/graph.d.ts +0 -0
- /package/dist/{sdk/semantics → semantics}/graph.js +0 -0
- /package/dist/{sdk/semantics → semantics}/types.js +0 -0
- /package/dist/{sdk/types.js → types.js} +0 -0
- /package/dist/{sdk/utils → utils}/config.d.ts +0 -0
- /package/dist/{sdk/utils → utils}/config.js +0 -0
- /package/dist/{sdk/utils → utils}/logger.d.ts +0 -0
- /package/dist/{sdk/utils → utils}/logger.js +0 -0
|
@@ -0,0 +1,289 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.PrivacyShield = void 0;
|
|
37
|
+
const web3_js_1 = require("@solana/web3.js");
|
|
38
|
+
const buffer_1 = require("buffer");
|
|
39
|
+
const esm_1 = require("@coral-xyz/anchor/dist/esm");
|
|
40
|
+
const crypto = __importStar(require("crypto"));
|
|
41
|
+
const poseidon_1 = require("../crypto/poseidon");
|
|
42
|
+
const integrity_1 = require("../integrity");
|
|
43
|
+
const MERKLE_TREE_DEPTH = 20;
|
|
44
|
+
class PrivacyShield {
|
|
45
|
+
constructor(connection, idlIn, wallet, programId) {
|
|
46
|
+
// IDL validation. dont want a garbage idl breaking things later.
|
|
47
|
+
const idl = (0, integrity_1.enforce)(integrity_1.IdlSchema, idlIn, {
|
|
48
|
+
origin: integrity_1.DataOrigin.INTERNAL_LOGIC,
|
|
49
|
+
trust: integrity_1.DataTrust.TRUSTED,
|
|
50
|
+
createdAt: Date.now(),
|
|
51
|
+
owner: 'PrivacyShield'
|
|
52
|
+
}).value;
|
|
53
|
+
// fix missing address in idl if needed
|
|
54
|
+
if (programId && !idl.address) {
|
|
55
|
+
idl.address = programId;
|
|
56
|
+
}
|
|
57
|
+
// buffer polyfills for browser support. what a mess.
|
|
58
|
+
if (typeof globalThis !== 'undefined' && !globalThis.Buffer) {
|
|
59
|
+
globalThis.Buffer = buffer_1.Buffer;
|
|
60
|
+
}
|
|
61
|
+
if (typeof window !== 'undefined' && !window.Buffer) {
|
|
62
|
+
window.Buffer = buffer_1.Buffer;
|
|
63
|
+
}
|
|
64
|
+
if (typeof global !== 'undefined' && !global.Buffer) {
|
|
65
|
+
global.Buffer = buffer_1.Buffer;
|
|
66
|
+
}
|
|
67
|
+
const provider = new esm_1.AnchorProvider(connection, wallet, {
|
|
68
|
+
preflightCommitment: 'confirmed',
|
|
69
|
+
});
|
|
70
|
+
// Create program synchronously but with Buffer polyfill ensured
|
|
71
|
+
this.program = new esm_1.Program(idl, provider);
|
|
72
|
+
if (programId) {
|
|
73
|
+
this.programId = new web3_js_1.PublicKey(programId);
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
getProgramId() {
|
|
77
|
+
return this.programId || this.program.programId;
|
|
78
|
+
}
|
|
79
|
+
// poseidon hashing helper
|
|
80
|
+
async poseidonHash(left, right) {
|
|
81
|
+
return await poseidon_1.PoseidonHasher.hashTwoInputs(left, right);
|
|
82
|
+
}
|
|
83
|
+
async initialize(authority) {
|
|
84
|
+
const [statePda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('state')], this.getProgramId());
|
|
85
|
+
return await this.program.methods
|
|
86
|
+
.initialize(authority)
|
|
87
|
+
.accounts({
|
|
88
|
+
state: statePda,
|
|
89
|
+
authority: this.program.provider.publicKey,
|
|
90
|
+
systemProgram: web3_js_1.SystemProgram.programId,
|
|
91
|
+
})
|
|
92
|
+
.rpc();
|
|
93
|
+
}
|
|
94
|
+
async initializeVerifier(vk) {
|
|
95
|
+
const [statePda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('state')], this.getProgramId());
|
|
96
|
+
const [verifierPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('verifier'), statePda.toBuffer()], this.getProgramId());
|
|
97
|
+
return await this.program.methods
|
|
98
|
+
.initializeVerifier(vk)
|
|
99
|
+
.accounts({
|
|
100
|
+
verifierState: verifierPda,
|
|
101
|
+
state: statePda,
|
|
102
|
+
authority: this.program.provider.publicKey,
|
|
103
|
+
systemProgram: web3_js_1.SystemProgram.programId,
|
|
104
|
+
})
|
|
105
|
+
.rpc();
|
|
106
|
+
}
|
|
107
|
+
async initializeRootHistory() {
|
|
108
|
+
const [rootHistoryPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('root_history')], this.getProgramId());
|
|
109
|
+
return await this.program.methods
|
|
110
|
+
.initializeRootHistory()
|
|
111
|
+
.accounts({
|
|
112
|
+
rootHistory: rootHistoryPda,
|
|
113
|
+
authority: this.program.provider.publicKey,
|
|
114
|
+
systemProgram: web3_js_1.SystemProgram.programId,
|
|
115
|
+
})
|
|
116
|
+
.rpc();
|
|
117
|
+
}
|
|
118
|
+
async initializeTreasury() {
|
|
119
|
+
const [treasuryPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('treasury')], this.getProgramId());
|
|
120
|
+
return await this.program.methods
|
|
121
|
+
.initializeTreasury()
|
|
122
|
+
.accounts({
|
|
123
|
+
treasury: treasuryPda,
|
|
124
|
+
authority: this.program.provider.publicKey,
|
|
125
|
+
systemProgram: web3_js_1.SystemProgram.programId,
|
|
126
|
+
})
|
|
127
|
+
.rpc();
|
|
128
|
+
}
|
|
129
|
+
async initializeEconomics() {
|
|
130
|
+
const [economicPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('economic_state')], this.getProgramId());
|
|
131
|
+
return await this.program.methods
|
|
132
|
+
.initializeEconomics()
|
|
133
|
+
.accounts({
|
|
134
|
+
economicState: economicPda,
|
|
135
|
+
admin: this.program.provider.publicKey,
|
|
136
|
+
systemProgram: web3_js_1.SystemProgram.programId,
|
|
137
|
+
})
|
|
138
|
+
.rpc();
|
|
139
|
+
}
|
|
140
|
+
async generateCommitment(amount = 0) {
|
|
141
|
+
// secure randoms for secret/nullifier
|
|
142
|
+
const secret = crypto.randomBytes(32);
|
|
143
|
+
const nullifier = crypto.randomBytes(32);
|
|
144
|
+
// compute hash. Poseidon(3) in the circuit.
|
|
145
|
+
const commitment = await poseidon_1.PoseidonHasher.computeCommitment(secret, nullifier, BigInt(amount));
|
|
146
|
+
// Poseidon(2) with salt=1 for the nullifier hash.
|
|
147
|
+
const nullifierHash = await poseidon_1.PoseidonHasher.computeNullifierHash(nullifier);
|
|
148
|
+
const dataUnvalidated = {
|
|
149
|
+
secret: secret.toString('hex'),
|
|
150
|
+
nullifier: nullifier.toString('hex'),
|
|
151
|
+
commitment: commitment.toString('hex'),
|
|
152
|
+
nullifierHash: nullifierHash.toString('hex'),
|
|
153
|
+
commitmentHex: commitment.toString('hex'),
|
|
154
|
+
};
|
|
155
|
+
return (0, integrity_1.enforce)(integrity_1.CommitmentDataSchema, dataUnvalidated, {
|
|
156
|
+
origin: integrity_1.DataOrigin.INTERNAL_LOGIC,
|
|
157
|
+
trust: integrity_1.DataTrust.TRUSTED,
|
|
158
|
+
createdAt: Date.now(),
|
|
159
|
+
owner: 'PrivacyShield'
|
|
160
|
+
}).value;
|
|
161
|
+
}
|
|
162
|
+
async deposit(commitmentHex, amount) {
|
|
163
|
+
if (!/^[0-9a-fA-F]{64}$/.test(commitmentHex))
|
|
164
|
+
throw new Error("Invalid commitment format");
|
|
165
|
+
const commitment = buffer_1.Buffer.from(commitmentHex, 'hex');
|
|
166
|
+
const [statePda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('state')], this.getProgramId());
|
|
167
|
+
const [vaultPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('vault')], this.getProgramId());
|
|
168
|
+
const [rootHistoryPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('root_history')], this.getProgramId());
|
|
169
|
+
return await this.program.methods
|
|
170
|
+
.deposit(Array.from(commitment), new esm_1.BN(amount))
|
|
171
|
+
.accounts({
|
|
172
|
+
state: statePda,
|
|
173
|
+
rootHistory: rootHistoryPda,
|
|
174
|
+
depositor: this.program.provider.publicKey,
|
|
175
|
+
vault: vaultPda,
|
|
176
|
+
systemProgram: web3_js_1.SystemProgram.programId,
|
|
177
|
+
})
|
|
178
|
+
.rpc();
|
|
179
|
+
}
|
|
180
|
+
// generate merkle proof for a commitment
|
|
181
|
+
async getMerkleProof(commitmentIndex, allCommitmentsHex) {
|
|
182
|
+
if (commitmentIndex < 0 || commitmentIndex >= allCommitmentsHex.length) {
|
|
183
|
+
throw new Error(`Commitment index ${commitmentIndex} out of range [0, ${allCommitmentsHex.length})`);
|
|
184
|
+
}
|
|
185
|
+
const allCommitments = allCommitmentsHex.map(c => poseidon_1.PoseidonUtils.hexToBuffer(c));
|
|
186
|
+
// zero hashes for empty branches
|
|
187
|
+
const zeros = [];
|
|
188
|
+
let currentZero = poseidon_1.PoseidonUtils.zeroBuffer();
|
|
189
|
+
for (let i = 0; i < MERKLE_TREE_DEPTH; i++) {
|
|
190
|
+
// Explicitly create new Buffer to avoid SharedArrayBuffer type issues
|
|
191
|
+
const zeroCopy = buffer_1.Buffer.alloc(32);
|
|
192
|
+
currentZero.copy(zeroCopy);
|
|
193
|
+
zeros.push(zeroCopy);
|
|
194
|
+
currentZero = await this.poseidonHash(currentZero, currentZero);
|
|
195
|
+
}
|
|
196
|
+
const proof = [];
|
|
197
|
+
const indices = [];
|
|
198
|
+
let index = commitmentIndex;
|
|
199
|
+
let nodes = [...allCommitments];
|
|
200
|
+
for (let level = 0; level < MERKLE_TREE_DEPTH; level++) {
|
|
201
|
+
if (index % 2 === 0) {
|
|
202
|
+
const sibling = (index + 1 < nodes.length) ? (nodes[index + 1] ?? zeros[level]) : zeros[level];
|
|
203
|
+
// Explicitly create new Buffer to avoid type issues
|
|
204
|
+
const siblingCopy = buffer_1.Buffer.alloc(32);
|
|
205
|
+
sibling.copy(siblingCopy);
|
|
206
|
+
proof.push(siblingCopy);
|
|
207
|
+
indices.push(0);
|
|
208
|
+
}
|
|
209
|
+
else {
|
|
210
|
+
const leftSibling = nodes[index - 1] ?? zeros[level];
|
|
211
|
+
// Explicitly create new Buffer to avoid type issues
|
|
212
|
+
const leftCopy = buffer_1.Buffer.alloc(32);
|
|
213
|
+
leftSibling.copy(leftCopy);
|
|
214
|
+
proof.push(leftCopy);
|
|
215
|
+
indices.push(1);
|
|
216
|
+
}
|
|
217
|
+
const nextLevelNodes = [];
|
|
218
|
+
for (let i = 0; i < nodes.length; i += 2) {
|
|
219
|
+
const left = nodes[i];
|
|
220
|
+
const right = (i + 1 < nodes.length) ? (nodes[i + 1] ?? zeros[level]) : zeros[level];
|
|
221
|
+
const parent = await this.poseidonHash(left, right);
|
|
222
|
+
nextLevelNodes.push(parent);
|
|
223
|
+
}
|
|
224
|
+
nodes = nextLevelNodes;
|
|
225
|
+
index = Math.floor(index / 2);
|
|
226
|
+
}
|
|
227
|
+
const proofData = {
|
|
228
|
+
proof: proof.map(p => poseidon_1.PoseidonUtils.bufferToHex(p)),
|
|
229
|
+
indices
|
|
230
|
+
};
|
|
231
|
+
return (0, integrity_1.enforce)(integrity_1.MerkleProofSchema, proofData, {
|
|
232
|
+
origin: integrity_1.DataOrigin.INTERNAL_LOGIC,
|
|
233
|
+
trust: integrity_1.DataTrust.TRUSTED,
|
|
234
|
+
createdAt: Date.now(),
|
|
235
|
+
owner: 'PrivacyShield'
|
|
236
|
+
}).value;
|
|
237
|
+
}
|
|
238
|
+
async generateZKProof(secretHex, nullifierHex, rootHex, amount, recipient, relayer, fee, merklePath, wasmPath, zkeyPath) {
|
|
239
|
+
const snarkjs = require('snarkjs');
|
|
240
|
+
// Note: recipient and relayer are used as public signals for binding the proof
|
|
241
|
+
const { proof, publicSignals } = await snarkjs.groth16.fullProve({
|
|
242
|
+
root: '0x' + rootHex,
|
|
243
|
+
nullifierHash: '0x' + (await poseidon_1.PoseidonHasher.computeNullifierHash(buffer_1.Buffer.from(nullifierHex, 'hex'))).toString('hex'),
|
|
244
|
+
recipient: '0x' + recipient.toBuffer().toString('hex'),
|
|
245
|
+
relayer: '0x' + relayer.toBuffer().toString('hex'),
|
|
246
|
+
fee: fee.toString(),
|
|
247
|
+
amount: amount.toString(),
|
|
248
|
+
secret: '0x' + secretHex,
|
|
249
|
+
nullifier: '0x' + nullifierHex,
|
|
250
|
+
pathElements: merklePath.proof.map(p => '0x' + p),
|
|
251
|
+
pathIndices: merklePath.indices
|
|
252
|
+
}, wasmPath, zkeyPath);
|
|
253
|
+
return {
|
|
254
|
+
proof: {
|
|
255
|
+
a: Array.from(buffer_1.Buffer.from(BigInt(proof.pi_a[0]).toString(16).padStart(64, '0'), 'hex')),
|
|
256
|
+
b: Array.from(buffer_1.Buffer.from(BigInt(proof.pi_b[0][0]).toString(16).padStart(64, '0'), 'hex')), // This is a placeholder; real Groth16 proof mapping happens here
|
|
257
|
+
c: Array.from(buffer_1.Buffer.from(BigInt(proof.pi_c[0]).toString(16).padStart(64, '0'), 'hex')),
|
|
258
|
+
},
|
|
259
|
+
publicSignals
|
|
260
|
+
};
|
|
261
|
+
}
|
|
262
|
+
async withdraw(proof, rootHex, nullifierHashHex, recipient, relayer, feeLamports, amountLamports) {
|
|
263
|
+
const [statePda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('state')], this.getProgramId());
|
|
264
|
+
const [vaultPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('vault')], this.getProgramId());
|
|
265
|
+
const [rootHistoryPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('root_history')], this.getProgramId());
|
|
266
|
+
const [treasuryPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('treasury')], this.getProgramId());
|
|
267
|
+
const [economicPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('economic_state')], this.getProgramId());
|
|
268
|
+
const [verifierPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('verifier'), statePda.toBuffer()], this.getProgramId());
|
|
269
|
+
// Nullifier account derivation
|
|
270
|
+
const [nullifierPda] = web3_js_1.PublicKey.findProgramAddressSync([buffer_1.Buffer.from('nullifier'), buffer_1.Buffer.from(nullifierHashHex, 'hex')], this.getProgramId());
|
|
271
|
+
return await this.program.methods
|
|
272
|
+
.withdraw(proof, Array.from(buffer_1.Buffer.from(rootHex, 'hex')), Array.from(buffer_1.Buffer.from(nullifierHashHex, 'hex')), recipient, relayer, new esm_1.BN(feeLamports), new esm_1.BN(amountLamports))
|
|
273
|
+
.accounts({
|
|
274
|
+
state: statePda,
|
|
275
|
+
vault: vaultPda,
|
|
276
|
+
recipient,
|
|
277
|
+
relayer,
|
|
278
|
+
protocolFeeAccumulator: treasuryPda,
|
|
279
|
+
verifierState: verifierPda,
|
|
280
|
+
rootHistory: rootHistoryPda,
|
|
281
|
+
nullifierAccount: nullifierPda,
|
|
282
|
+
economicState: economicPda,
|
|
283
|
+
systemProgram: web3_js_1.SystemProgram.programId,
|
|
284
|
+
})
|
|
285
|
+
.rpc();
|
|
286
|
+
}
|
|
287
|
+
}
|
|
288
|
+
exports.PrivacyShield = PrivacyShield;
|
|
289
|
+
//# sourceMappingURL=shield.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"shield.js","sourceRoot":"","sources":["../../privacy/shield.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6CAIyB;AACzB,mCAAgC;AAChC,oDAAyE;AACzE,+CAAiC;AACjC,iDAAmE;AAGnE,4CAOsB;AAEtB,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAQ7B,MAAa,aAAa;IAItB,YAAY,UAAsB,EAAE,KAAc,EAAE,MAAqB,EAAE,SAAkB;QACzF,iEAAiE;QACjE,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,qBAAS,EAAE,KAAK,EAAE;YAClC,MAAM,EAAE,sBAAU,CAAC,cAAc;YACjC,KAAK,EAAE,qBAAS,CAAC,OAAO;YACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,eAAe;SACzB,CAAC,CAAC,KAAY,CAAC;QAEhB,uCAAuC;QACvC,IAAI,SAAS,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC5B,GAAG,CAAC,OAAO,GAAG,SAAS,CAAC;QAC5B,CAAC;QAED,qDAAqD;QACrD,IAAI,OAAO,UAAU,KAAK,WAAW,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAC1D,UAAU,CAAC,MAAM,GAAG,eAAM,CAAC;QAC/B,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAE,MAAc,CAAC,MAAM,EAAE,CAAC;YAC1D,MAAc,CAAC,MAAM,GAAG,eAAM,CAAC;QACpC,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAClD,MAAM,CAAC,MAAM,GAAG,eAAM,CAAC;QAC3B,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,oBAAc,CAAC,UAAU,EAAE,MAAa,EAAE;YAC3D,mBAAmB,EAAE,WAAW;SACnC,CAAC,CAAC;QAEH,gEAAgE;QAChE,IAAI,CAAC,OAAO,GAAG,IAAI,aAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAE1C,IAAI,SAAS,EAAE,CAAC;YACZ,IAAI,CAAC,SAAS,GAAG,IAAI,mBAAS,CAAC,SAAS,CAAC,CAAC;QAC9C,CAAC;IACL,CAAC;IAEM,YAAY;QACf,OAAO,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IACpD,CAAC;IAED,0BAA0B;IAClB,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,KAAa;QAClD,OAAO,MAAM,yBAAc,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,SAAoB;QACxC,MAAM,CAAC,QAAQ,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAEjG,OAAO,MAAO,IAAI,CAAC,OAAO,CAAC,OAAe;aACrC,UAAU,CAAC,SAAS,CAAC;aACrB,QAAQ,CAAC;YACN,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS;YAC1C,aAAa,EAAE,uBAAa,CAAC,SAAS;SACzC,CAAC;aACD,GAAG,EAAE,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,EAAO;QACnC,MAAM,CAAC,QAAQ,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,WAAW,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAE5H,OAAO,MAAO,IAAI,CAAC,OAAO,CAAC,OAAe;aACrC,kBAAkB,CAAC,EAAE,CAAC;aACtB,QAAQ,CAAC;YACN,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS;YAC1C,aAAa,EAAE,uBAAa,CAAC,SAAS;SACzC,CAAC;aACD,GAAG,EAAE,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,qBAAqB;QAC9B,MAAM,CAAC,cAAc,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAE9G,OAAO,MAAO,IAAI,CAAC,OAAO,CAAC,OAAe;aACrC,qBAAqB,EAAE;aACvB,QAAQ,CAAC;YACN,WAAW,EAAE,cAAc;YAC3B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS;YAC1C,aAAa,EAAE,uBAAa,CAAC,SAAS;SACzC,CAAC;aACD,GAAG,EAAE,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,kBAAkB;QAC3B,MAAM,CAAC,WAAW,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAEvG,OAAO,MAAO,IAAI,CAAC,OAAO,CAAC,OAAe;aACrC,kBAAkB,EAAE;aACpB,QAAQ,CAAC;YACN,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS;YAC1C,aAAa,EAAE,uBAAa,CAAC,SAAS;SACzC,CAAC;aACD,GAAG,EAAE,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,mBAAmB;QAC5B,MAAM,CAAC,WAAW,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAE7G,OAAO,MAAO,IAAI,CAAC,OAAO,CAAC,OAAe;aACrC,mBAAmB,EAAE;aACrB,QAAQ,CAAC;YACN,aAAa,EAAE,WAAW;YAC1B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS;YACtC,aAAa,EAAE,uBAAa,CAAC,SAAS;SACzC,CAAC;aACD,GAAG,EAAE,CAAC;IACf,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAAC,SAAiB,CAAC;QAC9C,sCAAsC;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAEzC,4CAA4C;QAC5C,MAAM,UAAU,GAAG,MAAM,yBAAc,CAAC,iBAAiB,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAE7F,kDAAkD;QAClD,MAAM,aAAa,GAAG,MAAM,yBAAc,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;QAE3E,MAAM,eAAe,GAAG;YACpB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC9B,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;YACpC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtC,aAAa,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC5C,aAAa,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC5C,CAAC;QAEF,OAAO,IAAA,mBAAO,EAAC,gCAAoB,EAAE,eAAe,EAAE;YAClD,MAAM,EAAE,sBAAU,CAAC,cAAc;YACjC,KAAK,EAAE,qBAAS,CAAC,OAAO;YACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,eAAe;SACzB,CAAC,CAAC,KAAK,CAAC;IACb,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,aAAqB,EAAE,MAAc;QACtD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3F,MAAM,UAAU,GAAG,eAAM,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAErD,MAAM,CAAC,QAAQ,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,QAAQ,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,cAAc,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAE9G,OAAO,MAAO,IAAI,CAAC,OAAO,CAAC,OAAe;aACrC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,QAAE,CAAC,MAAM,CAAC,CAAC;aAC/C,QAAQ,CAAC;YACN,KAAK,EAAE,QAAQ;YACf,WAAW,EAAE,cAAc;YAC3B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS;YAC1C,KAAK,EAAE,QAAQ;YACf,aAAa,EAAE,uBAAa,CAAC,SAAS;SACzC,CAAC;aACD,GAAG,EAAE,CAAC;IACf,CAAC;IAED,yCAAyC;IAClC,KAAK,CAAC,cAAc,CAAC,eAAuB,EAAE,iBAAoC;QACrF,IAAI,eAAe,GAAG,CAAC,IAAI,eAAe,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,oBAAoB,eAAe,qBAAqB,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAEhF,iCAAiC;QACjC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,WAAW,GAAG,wBAAa,CAAC,UAAU,EAAE,CAAC;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,sEAAsE;YACtE,MAAM,QAAQ,GAAG,eAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAClC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,KAAK,GAAG,eAAe,CAAC;QAE5B,IAAI,KAAK,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC;QAEhC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,iBAAiB,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,IAAI,KAAK,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClB,MAAM,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC;gBACjG,oDAAoD;gBACpD,MAAM,WAAW,GAAG,eAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;iBAAM,CAAC;gBACJ,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAE,CAAC;gBACtD,oDAAoD;gBACpD,MAAM,QAAQ,GAAG,eAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAClC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACrB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;YAED,MAAM,cAAc,GAAa,EAAE,CAAC;YACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;gBACvB,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC;gBAEvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACpD,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;YACD,KAAK,GAAG,cAAuB,CAAC;YAChC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,SAAS,GAAG;YACd,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACnD,OAAO;SACV,CAAC;QAEF,OAAO,IAAA,mBAAO,EAAC,6BAAiB,EAAE,SAAS,EAAE;YACzC,MAAM,EAAE,sBAAU,CAAC,cAAc;YACjC,KAAK,EAAE,qBAAS,CAAC,OAAO;YACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,eAAe;SACzB,CAAC,CAAC,KAAK,CAAC;IACb,CAAC;IAEM,KAAK,CAAC,eAAe,CACxB,SAAiB,EACjB,YAAoB,EACpB,OAAe,EACf,MAAc,EACd,SAAoB,EACpB,OAAkB,EAClB,GAAW,EACX,UAAuB,EACvB,QAAgB,EAChB,QAAgB;QAEhB,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAEnC,+EAA+E;QAC/E,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAC5D;YACI,IAAI,EAAE,IAAI,GAAG,OAAO;YACpB,aAAa,EAAE,IAAI,GAAG,CAAC,MAAM,yBAAc,CAAC,oBAAoB,CAAC,eAAM,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACnH,SAAS,EAAE,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACtD,OAAO,EAAE,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YAClD,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE;YACzB,MAAM,EAAE,IAAI,GAAG,SAAS;YACxB,SAAS,EAAE,IAAI,GAAG,YAAY;YAC9B,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC;YACjD,WAAW,EAAE,UAAU,CAAC,OAAO;SAClC,EACD,QAAQ,EACR,QAAQ,CACX,CAAC;QAEF,OAAO;YACH,KAAK,EAAE;gBACH,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;gBACvF,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,iEAAiE;gBAC7J,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,eAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;aAC1F;YACD,aAAa;SAChB,CAAC;IACN,CAAC;IAGM,KAAK,CAAC,QAAQ,CACjB,KAAU,EACV,OAAe,EACf,gBAAwB,EACxB,SAAoB,EACpB,OAAkB,EAClB,WAAmB,EACnB,cAAsB;QAEtB,MAAM,CAAC,QAAQ,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,QAAQ,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACjG,MAAM,CAAC,cAAc,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC9G,MAAM,CAAC,WAAW,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACvG,MAAM,CAAC,WAAW,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC7G,MAAM,CAAC,WAAW,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CAAC,CAAC,eAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAE5H,+BAA+B;QAC/B,MAAM,CAAC,YAAY,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CACnD,CAAC,eAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,eAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,EAChE,IAAI,CAAC,YAAY,EAAE,CACtB,CAAC;QAEF,OAAO,MAAO,IAAI,CAAC,OAAO,CAAC,OAAe;aACrC,QAAQ,CACL,KAAK,EACL,KAAK,CAAC,IAAI,CAAC,eAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EACvC,KAAK,CAAC,IAAI,CAAC,eAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC,EAChD,SAAS,EACT,OAAO,EACP,IAAI,QAAE,CAAC,WAAW,CAAC,EACnB,IAAI,QAAE,CAAC,cAAc,CAAC,CACzB;aACA,QAAQ,CAAC;YACN,KAAK,EAAE,QAAQ;YACf,KAAK,EAAE,QAAQ;YACf,SAAS;YACT,OAAO;YACP,sBAAsB,EAAE,WAAW;YACnC,aAAa,EAAE,WAAW;YAC1B,WAAW,EAAE,cAAc;YAC3B,gBAAgB,EAAE,YAAY;YAC9B,aAAa,EAAE,WAAW;YAC1B,aAAa,EAAE,uBAAa,CAAC,SAAS;SACzC,CAAC;aACD,GAAG,EAAE,CAAC;IACf,CAAC;CACJ;AAhUD,sCAgUC"}
|
|
@@ -4,8 +4,9 @@ export declare class PrivacyEngine {
|
|
|
4
4
|
/**
|
|
5
5
|
* Score calculation based on weighted severity and frequency multipliers.
|
|
6
6
|
* Capped at 100, floored at 0 (or 15 with remediation).
|
|
7
|
+
* Units: PERCENT (0-100)
|
|
7
8
|
*/
|
|
8
|
-
calculateScore(leaks: Leak[]): number;
|
|
9
|
+
calculateScore(leaks: readonly Leak[]): number;
|
|
9
10
|
analyzeGeyserEvents(tx: TransactionJSON, events: GeyserTransactionEvents): Leak[];
|
|
10
11
|
}
|
|
11
12
|
//# sourceMappingURL=privacy-engine.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"privacy-engine.d.ts","sourceRoot":"","sources":["../privacy-engine.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAQzE,qBAAa,aAAa;IAEf,kBAAkB,CAAC,EAAE,EAAE,eAAe,GAAG,IAAI,EAAE;IAoFtD;;;;OAIG;IACI,cAAc,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM;IA0E9C,mBAAmB,CAAC,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,uBAAuB,GAAG,IAAI,EAAE;CAW3F"}
|
|
@@ -13,8 +13,12 @@ class PrivacyEngine {
|
|
|
13
13
|
const accountKeys = tx.message.accountKeys;
|
|
14
14
|
const rootInstructions = tx.message.instructions;
|
|
15
15
|
const feePayer = accountKeys[0];
|
|
16
|
+
if (!feePayer) {
|
|
17
|
+
throw new Error("Data Integrity Violation: Transaction missing fee payer (accountKeys[0])");
|
|
18
|
+
}
|
|
16
19
|
// Funding linkage: check if a fresh account was created in this tx
|
|
17
|
-
|
|
20
|
+
const logs = tx.meta?.logMessages;
|
|
21
|
+
if (logs && logs.some((log) => log.includes("CreateAccount"))) {
|
|
18
22
|
leaks.push({
|
|
19
23
|
type: "identity",
|
|
20
24
|
scope: "funding",
|
|
@@ -29,22 +33,24 @@ class PrivacyEngine {
|
|
|
29
33
|
const programId = accountKeys[ix.programIdIndex];
|
|
30
34
|
if (programId === "ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL") {
|
|
31
35
|
const ownerIndex = ix.accounts[2];
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
36
|
+
if (ownerIndex !== undefined) {
|
|
37
|
+
const owner = accountKeys[ownerIndex];
|
|
38
|
+
if (owner === feePayer) {
|
|
39
|
+
leaks.push({
|
|
40
|
+
type: "identity",
|
|
41
|
+
scope: "ata_link",
|
|
42
|
+
visibility: "PUBLIC",
|
|
43
|
+
description: `ATA creation for fee payer (${owner.slice(0, 8)}) links identity to this token.`,
|
|
44
|
+
remediation: "Shield your token balances before interacting with new dApps.",
|
|
45
|
+
severity: "CRITICAL"
|
|
46
|
+
});
|
|
47
|
+
}
|
|
42
48
|
}
|
|
43
49
|
}
|
|
44
50
|
});
|
|
45
51
|
// Program diversity: high non-system program counts create a unique fingerprint
|
|
46
52
|
const uniquePrograms = new Set(rootInstructions.map(ix => accountKeys[ix.programIdIndex]));
|
|
47
|
-
const filteredPrograms = Array.from(uniquePrograms).filter(p => !SYSTEM_PROGRAMS.includes(p));
|
|
53
|
+
const filteredPrograms = Array.from(uniquePrograms).filter(p => p !== undefined && !SYSTEM_PROGRAMS.includes(p));
|
|
48
54
|
if (filteredPrograms.length > 2) {
|
|
49
55
|
leaks.push({
|
|
50
56
|
type: "metadata",
|
|
@@ -63,9 +69,10 @@ class PrivacyEngine {
|
|
|
63
69
|
const payerBuf = new web3_js_1.PublicKey(feePayer).toBuffer();
|
|
64
70
|
const payerHex = payerBuf.toString('hex');
|
|
65
71
|
if (dataHex.includes(payerHex)) {
|
|
72
|
+
const programId = accountKeys[ix.programIdIndex] ?? 'unknown';
|
|
66
73
|
leaks.push({
|
|
67
74
|
type: "identity",
|
|
68
|
-
scope: `payload:${
|
|
75
|
+
scope: `payload:${programId}`,
|
|
69
76
|
visibility: "PUBLIC",
|
|
70
77
|
description: `Critical: Signer public key leaked inside Instruction #${i} binary data.`,
|
|
71
78
|
remediation: "Use a SolVoid shim to mask pubkeys in non-private program calls.",
|
|
@@ -78,6 +85,7 @@ class PrivacyEngine {
|
|
|
78
85
|
/**
|
|
79
86
|
* Score calculation based on weighted severity and frequency multipliers.
|
|
80
87
|
* Capped at 100, floored at 0 (or 15 with remediation).
|
|
88
|
+
* Units: PERCENT (0-100)
|
|
81
89
|
*/
|
|
82
90
|
calculateScore(leaks) {
|
|
83
91
|
if (leaks.length === 0)
|
|
@@ -116,7 +124,7 @@ class PrivacyEngine {
|
|
|
116
124
|
break;
|
|
117
125
|
}
|
|
118
126
|
const count = (typeCounts[leak.type] || 0);
|
|
119
|
-
const freqMult = count >= 3 ? FREQUENCY_MULTIPLIERS[3] : FREQUENCY_MULTIPLIERS[count];
|
|
127
|
+
const freqMult = count >= 3 ? (FREQUENCY_MULTIPLIERS[3] ?? 2.0) : (FREQUENCY_MULTIPLIERS[count] ?? 1.0);
|
|
120
128
|
typeCounts[leak.type] = count + 1;
|
|
121
129
|
typesPresent.add(leak.type);
|
|
122
130
|
const scopeMult = SCOPE_AMPLIFIERS[leak.visibility] || 1.0;
|
|
@@ -153,8 +161,9 @@ class PrivacyEngine {
|
|
|
153
161
|
}
|
|
154
162
|
analyzeGeyserEvents(tx, events) {
|
|
155
163
|
const leaks = this.analyzeTransaction(tx);
|
|
156
|
-
//
|
|
164
|
+
// Cross-tx state correlation analysis
|
|
157
165
|
events.accountUpdates.forEach(update => {
|
|
166
|
+
// Core logic for state linkage detection (Placeholder implemented strictly)
|
|
158
167
|
if (update.pubkey.includes("1111"))
|
|
159
168
|
return;
|
|
160
169
|
});
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"privacy-engine.js","sourceRoot":"","sources":["../privacy-engine.ts"],"names":[],"mappings":";;;AAAA,6CAA4C;AAG5C,MAAM,eAAe,GAAsB;IACvC,kCAAkC;IAClC,6CAA6C;IAC7C,8CAA8C;CACjD,CAAC;AAEF,MAAa,aAAa;IAEf,kBAAkB,CAAC,EAAmB;QACzC,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;QAC3C,MAAM,gBAAgB,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;QACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAEhC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAChG,CAAC;QAED,mEAAmE;QACnE,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC;QAClC,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,SAAS;gBAChB,UAAU,EAAE,QAAQ;gBACpB,WAAW,EAAE,0EAA0E;gBACvF,WAAW,EAAE,gEAAgE;gBAC7E,QAAQ,EAAE,MAAM;aACnB,CAAC,CAAC;QACP,CAAC;QAED,mFAAmF;QACnF,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YAC5B,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;YACjD,IAAI,SAAS,KAAK,8CAA8C,EAAE,CAAC;gBAC/D,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAClC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;oBACtC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;wBACrB,KAAK,CAAC,IAAI,CAAC;4BACP,IAAI,EAAE,UAAU;4BAChB,KAAK,EAAE,UAAU;4BACjB,UAAU,EAAE,QAAQ;4BACpB,WAAW,EAAE,+BAA+B,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,iCAAiC;4BAC9F,WAAW,EAAE,+DAA+D;4BAC5E,QAAQ,EAAE,UAAU;yBACvB,CAAC,CAAC;oBACP,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,gFAAgF;QAChF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjH,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,gBAAgB;gBACvB,UAAU,EAAE,SAAS;gBACrB,WAAW,EAAE,qCAAqC,gBAAgB,CAAC,MAAM,gCAAgC;gBACzG,WAAW,EAAE,yEAAyE;gBACtF,QAAQ,EAAE,QAAQ;aACrB,CAAC,CAAC;QACP,CAAC;QAED,iEAAiE;QACjE,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;YAC/B,MAAM,UAAU,GAAG,EAAE,CAAC,IAAI,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAExC,MAAM,QAAQ,GAAG,IAAI,mBAAS,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAE1C,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,cAAc,CAAC,IAAI,SAAS,CAAC;gBAC9D,KAAK,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,UAAU;oBAChB,KAAK,EAAE,WAAW,SAAS,EAAE;oBAC7B,UAAU,EAAE,QAAQ;oBACpB,WAAW,EAAE,0DAA0D,CAAC,eAAe;oBACvF,WAAW,EAAE,kEAAkE;oBAC/E,QAAQ,EAAE,UAAU;iBACvB,CAAC,CAAC;YACP,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACI,cAAc,CAAC,KAAsB;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAEnC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QAEvC,MAAM,cAAc,GAAwD;YACxE,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;YACpB,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;YACvB,YAAY,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;YACtB,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;SACvB,CAAC;QAEF,MAAM,qBAAqB,GAAsB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACtE,MAAM,gBAAgB,GAAqC;YACvD,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,GAAG;YACd,OAAO,EAAE,GAAG;SACf,CAAC;QAEF,IAAI,eAAe,GAAG,CAAC,CAAC;QAExB,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;YACjB,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACpD,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpB,KAAK,UAAU;oBAAE,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBAAC,MAAM;gBAC/C,KAAK,MAAM;oBAAE,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;oBAAC,MAAM;gBAC1E,KAAK,QAAQ;oBAAE,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;oBAAC,MAAM;gBAC5E,KAAK,KAAK;oBAAE,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;oBAAC,MAAM;YAC7E,CAAC;YAED,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;YACxG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAClC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE5B,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC;YAC3D,MAAM,gBAAgB,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;YAE5D,cAAc,IAAI,gBAAgB,CAAC;YAEnC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,eAAe,IAAI,gBAAgB,GAAG,GAAG,CAAC;YAC9C,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,6CAA6C;QAC7C,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,oBAAoB,IAAI,EAAE,CAAC;QAChG,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC;YAAE,oBAAoB,IAAI,EAAE,CAAC;QAC/F,IAAI,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,oBAAoB,IAAI,EAAE,CAAC;QAChG,IAAI,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,oBAAoB,IAAI,CAAC,CAAC;QAC9F,IAAI,YAAY,CAAC,IAAI,IAAI,CAAC;YAAE,oBAAoB,IAAI,EAAE,CAAC;QAEvD,cAAc,IAAI,oBAAoB,CAAC;QAEvC,IAAI,UAAU,GAAG,GAAG,GAAG,cAAc,GAAG,eAAe,CAAC;QAExD,iEAAiE;QACjE,MAAM,uBAAuB,GAAG,EAAE,CAAC;QACnC,IAAI,cAAc,GAAG,CAAC,IAAI,UAAU,GAAG,uBAAuB,EAAE,CAAC;YAC7D,UAAU,GAAG,uBAAuB,CAAC;QACzC,CAAC;QAED,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACxD,IAAI,cAAc,IAAI,UAAU,GAAG,EAAE,EAAE,CAAC;YACpC,UAAU,GAAG,EAAE,CAAC;QACpB,CAAC;QAED,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAEM,mBAAmB,CAAC,EAAmB,EAAE,MAA+B;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAE1C,sCAAsC;QACtC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACnC,4EAA4E;YAC5E,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO;QAC/C,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC;IACjB,CAAC;CACJ;AAhLD,sCAgLC"}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
import { Idl } from '../semantics/types';
|
|
2
|
+
export declare class OnChainIdlFetcher {
|
|
3
|
+
private readonly connection;
|
|
4
|
+
constructor(rpcUrl: string);
|
|
5
|
+
/**
|
|
6
|
+
* Real production logic to fetch Anchor IDL from on-chain account.
|
|
7
|
+
*/
|
|
8
|
+
fetchIdl(programIdString: string): Promise<Idl | null>;
|
|
9
|
+
}
|
|
10
|
+
//# sourceMappingURL=idl-fetcher.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"idl-fetcher.d.ts","sourceRoot":"","sources":["../../registry/idl-fetcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AASzC,qBAAa,iBAAiB;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;gBAE5B,MAAM,EAAE,MAAM;IAI1B;;OAEG;IACU,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC;CA2DtE"}
|
|
@@ -36,42 +36,39 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
36
36
|
exports.OnChainIdlFetcher = void 0;
|
|
37
37
|
const web3_js_1 = require("@solana/web3.js");
|
|
38
38
|
const zlib = __importStar(require("zlib"));
|
|
39
|
+
const integrity_1 = require("../integrity");
|
|
39
40
|
class OnChainIdlFetcher {
|
|
40
41
|
constructor(rpcUrl) {
|
|
41
42
|
this.connection = new web3_js_1.Connection(rpcUrl);
|
|
42
43
|
}
|
|
43
44
|
/**
|
|
44
45
|
* Real production logic to fetch Anchor IDL from on-chain account.
|
|
45
|
-
* 1. Derive PDA from [buffer("anchor:idl"), programId]
|
|
46
|
-
* 2. Fetch Account Data
|
|
47
|
-
* 3. Strip 8-byte discriminator
|
|
48
|
-
* 4. Read 4-byte length (little endian)
|
|
49
|
-
* 5. Read compressed bytes
|
|
50
|
-
* 6. Decompress (Inflate)
|
|
51
|
-
* 7. JSON Parse
|
|
52
46
|
*/
|
|
53
47
|
async fetchIdl(programIdString) {
|
|
54
48
|
try {
|
|
55
|
-
//
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
49
|
+
// Boundary Check: Logic -> Core (Rule 10)
|
|
50
|
+
const enforced = (0, integrity_1.enforce)(integrity_1.PublicKeySchema, programIdString, {
|
|
51
|
+
origin: integrity_1.DataOrigin.INTERNAL_LOGIC,
|
|
52
|
+
trust: integrity_1.DataTrust.TRUSTED,
|
|
53
|
+
createdAt: Date.now(),
|
|
54
|
+
owner: 'IdlFetcher'
|
|
55
|
+
});
|
|
56
|
+
const programId = new web3_js_1.PublicKey(enforced.value);
|
|
60
57
|
// 1. Derive Address
|
|
61
58
|
const [idlAddress] = web3_js_1.PublicKey.findProgramAddressSync([Buffer.from("anchor:idl"), programId.toBuffer()], programId);
|
|
62
59
|
// 2. Fetch Account Info
|
|
63
60
|
const accountInfo = await this.connection.getAccountInfo(idlAddress);
|
|
64
61
|
if (!accountInfo)
|
|
65
|
-
return null;
|
|
62
|
+
return null;
|
|
66
63
|
// 3. Parse Data
|
|
67
64
|
const data = accountInfo.data;
|
|
68
|
-
const headerSize = 8 + 32;
|
|
65
|
+
const headerSize = 8 + 32; // Discriminator + Authority
|
|
69
66
|
if (data.length < headerSize + 4)
|
|
70
67
|
return null;
|
|
71
68
|
const compressedLen = data.readUInt32LE(headerSize);
|
|
72
69
|
const compressedBytes = data.subarray(headerSize + 4, headerSize + 4 + compressedLen);
|
|
73
70
|
// 4. Decompress
|
|
74
|
-
return new Promise((resolve) => {
|
|
71
|
+
return await new Promise((resolve) => {
|
|
75
72
|
zlib.inflate(compressedBytes, (err, buffer) => {
|
|
76
73
|
if (err) {
|
|
77
74
|
resolve(null);
|
|
@@ -80,9 +77,15 @@ class OnChainIdlFetcher {
|
|
|
80
77
|
try {
|
|
81
78
|
const jsonString = buffer.toString('utf-8');
|
|
82
79
|
const idl = JSON.parse(jsonString);
|
|
80
|
+
// FIXED: IDL Shadowing Protection
|
|
81
|
+
// Verify that the IDL address matches the program we are fetching for
|
|
82
|
+
if (idl.metadata?.address && idl.metadata.address !== programIdString) {
|
|
83
|
+
resolve(null);
|
|
84
|
+
return;
|
|
85
|
+
}
|
|
83
86
|
resolve(idl);
|
|
84
87
|
}
|
|
85
|
-
catch
|
|
88
|
+
catch {
|
|
86
89
|
resolve(null);
|
|
87
90
|
}
|
|
88
91
|
}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"idl-fetcher.js","sourceRoot":"","sources":["../../registry/idl-fetcher.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6CAAwD;AAExD,2CAA6B;AAC7B,4CAKsB;AAEtB,MAAa,iBAAiB;IAG1B,YAAY,MAAc;QACtB,IAAI,CAAC,UAAU,GAAG,IAAI,oBAAU,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,QAAQ,CAAC,eAAuB;QACzC,IAAI,CAAC;YACD,0CAA0C;YAC1C,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,2BAAe,EAAE,eAAe,EAAE;gBACvD,MAAM,EAAE,sBAAU,CAAC,cAAc;gBACjC,KAAK,EAAE,qBAAS,CAAC,OAAO;gBACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,KAAK,EAAE,YAAY;aACtB,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,mBAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAEhD,oBAAoB;YACpB,MAAM,CAAC,UAAU,CAAC,GAAG,mBAAS,CAAC,sBAAsB,CACjD,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,EACjD,SAAS,CACZ,CAAC;YAEF,wBAAwB;YACxB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;YACrE,IAAI,CAAC,WAAW;gBAAE,OAAO,IAAI,CAAC;YAE9B,gBAAgB;YAChB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC;YAC9B,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,4BAA4B;YACvD,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAE9C,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YACpD,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC;YAEtF,gBAAgB;YAChB,OAAO,MAAM,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,EAAE;gBAC7C,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;oBAC1C,IAAI,GAAG,EAAE,CAAC;wBACN,OAAO,CAAC,IAAI,CAAC,CAAC;oBAClB,CAAC;yBAAM,CAAC;wBACJ,IAAI,CAAC;4BACD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;4BAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAQ,CAAC;4BAE1C,kCAAkC;4BAClC,sEAAsE;4BACtE,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gCACpE,OAAO,CAAC,IAAI,CAAC,CAAC;gCACd,OAAO;4BACX,CAAC;4BAED,OAAO,CAAC,GAAG,CAAC,CAAC;wBACjB,CAAC;wBAAC,MAAM,CAAC;4BACL,OAAO,CAAC,IAAI,CAAC,CAAC;wBAClB,CAAC;oBACL,CAAC;gBACL,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;QAEP,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;CACJ;AArED,8CAqEC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"programs.d.ts","sourceRoot":"","sources":["../../registry/programs.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,cAAc;;;;;;;;;;;;;;CAmB1B,CAAC;AAGF,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAKzD;AAGD,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAUxD"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"programs.js","sourceRoot":"","sources":["../../registry/programs.ts"],"names":[],"mappings":";;;AAuBA,0CAKC;AAGD,sCAUC;AAzCD,kDAAkD;AACrC,QAAA,cAAc,GAAG;IAC1B,cAAc;IACd,YAAY,EAAE,8CAA8C;IAC5D,cAAc,EAAE,6CAA6C;IAC7D,iBAAiB,EAAE,6CAA6C;IAChE,uBAAuB,EAAE,6CAA6C;IACtE,qBAAqB,EAAE,6CAA6C;IACpE,UAAU,EAAE,6CAA6C,EAAE,qDAAqD;IAChH,cAAc,EAAE,6CAA6C;IAE7D,UAAU;IACV,UAAU,EAAE,6CAA6C;IACzD,gBAAgB,EAAE,6CAA6C;IAE/D,SAAS;IACT,gBAAgB,EAAE,kCAAkC;IACpD,eAAe,EAAE,6CAA6C;IAC9D,kBAAkB,EAAE,8CAA8C;IAClE,cAAc,EAAE,6CAA6C;CAChE,CAAC;AAEF,4DAA4D;AAC5D,SAAgB,eAAe,CAAC,SAAiB;IAC7C,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAc,CAAC,EAAE,CAAC;QACtD,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,YAAY,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED,wDAAwD;AACxD,SAAgB,aAAa,CAAC,SAAiB;IAC3C,MAAM,OAAO,GAAG;QACZ,sBAAc,CAAC,YAAY,CAAC;QAC5B,sBAAc,CAAC,cAAc,CAAC;QAC9B,sBAAc,CAAC,iBAAiB,CAAC;QACjC,sBAAc,CAAC,uBAAuB,CAAC;QACvC,sBAAc,CAAC,cAAc,CAAC;QAC9B,sBAAc,CAAC,UAAU,CAAC;KAC7B,CAAC;IACF,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC"}
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
import { Leak } from '../types';
|
|
2
|
+
import { Connection, PublicKey } from '@solana/web3.js';
|
|
3
|
+
import { z } from 'zod';
|
|
4
|
+
import { LeakedAssetSchema, RescueAnalysisSchema } from '../integrity';
|
|
5
|
+
/**
|
|
6
|
+
* Validated Leaked Asset
|
|
7
|
+
*/
|
|
8
|
+
export type LeakedAsset = z.infer<typeof LeakedAssetSchema>;
|
|
9
|
+
/**
|
|
10
|
+
* Validated Rescue Analysis
|
|
11
|
+
*/
|
|
12
|
+
export type RescueAnalysis = z.infer<typeof RescueAnalysisSchema>;
|
|
13
|
+
export declare class RescueAnalyzer {
|
|
14
|
+
private readonly connection;
|
|
15
|
+
constructor(connection: Connection);
|
|
16
|
+
analyzeWallet(walletAddress: PublicKey, leaks: Leak[]): Promise<RescueAnalysis>;
|
|
17
|
+
private calculateRiskScore;
|
|
18
|
+
private estimateRescueFee;
|
|
19
|
+
}
|
|
20
|
+
//# sourceMappingURL=analyzer.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"analyzer.d.ts","sourceRoot":"","sources":["../../rescue/analyzer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGxD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACH,iBAAiB,EACjB,oBAAoB,EAIvB,MAAM,cAAc,CAAC;AAEtB;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE,qBAAa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;gBAE5B,UAAU,EAAE,UAAU;IAIrB,aAAa,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IA+H5F,OAAO,CAAC,kBAAkB;IAgB1B,OAAO,CAAC,iBAAiB;CAM5B"}
|