veilix-sdk 0.2.0 → 0.2.1

package/dist/circuits/paths.cjs

@@ -14,8 +14,8 @@ var WITHDRAW_CIRCUIT_SHA256 = {
   zkey: "73e0d2328eca8f48024b69b42d659b68d7dd2f067d762079e859ffff34360a1a"
 };
 var SELF_HOSTED_CIRCUIT_BASE = "/circuits/";
-var CIRCUIT_CDN_PACKAGE = "veilix-sdk-test";
-var CIRCUIT_CDN_VERSION = "0.1.0";
+var CIRCUIT_CDN_PACKAGE = "veilix-sdk";
+var CIRCUIT_CDN_VERSION = "0.2.0";
 function resolveCircuitPathsFromBase(base) {
   const root = base.endsWith("/") ? base : `${base}/`;
   return {

package/dist/circuits/paths.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../package.json","../../src/circuits/constants.ts","../../src/circuits/paths.ts"],"names":[],"mappings":";;;;AAAA,IAAA,eAAA,GAAA;AAAA,EACE,IAAA,EAAQ,YAmGV,CAAA;;;ACjGO,IAAM,eAAe,eAAA,CAAY;AAMjC,IAAM,qBAAA,GAAwB;AAC9B,IAAM,qBAAA,GAAwB;AAK9B,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,kEAAA;AAAA,EACN,IAAA,EAAM;AACR;AAGO,IAAM,wBAAA,GAA2B;AAUjC,IAAM,mBAAA,GAAsB,iBAAA;AAC5B,IAAM,mBAAA,GAAsB,OAAA;AAQ5B,SAAS,4BAA4B,IAAA,EAA4B;AACtE,EAAA,MAAM,OAAO,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,GAAI,IAAA,GAAO,GAAG,IAAI,CAAA,CAAA,CAAA;AAChD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,qBAAqB,CAAA,CAAA;AAAA,IAC9C,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,qBAAqB,CAAA;AAAA,GAChD;AACF;AASO,SAAS,wBAAA,GAAmC;AACjD,EAAA,OAAO,CAAA,6BAAA,EAAgC,mBAAmB,CAAA,CAAA,EAAI,mBAAmB,CAAA,eAAA,CAAA;AACnF;AAGO,SAAS,yBAAA,GAA0C;AACxD,EAAA,MAAM,OAAO,wBAAA,EAAyB;AACtC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA,CAAA;AAAA,IACrC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA;AAAA,GACvC;AACF;AAEA,SAAS,eAAe,QAAA,EAA2B;AACjD,EAAA,OACE,QAAA,KAAa,WAAA,IACb,QAAA,KAAa,WAAA,IACb,QAAA,KAAa,OAAA;AAEjB;AAcO,SAAS,2BACd,YAAA,EACqB;AACrB,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,MAAA,EAAW;AAC9B,IAAA,OAAO,4BAA4B,YAAY,CAAA;AAAA,EACjD;AAEA,EAAA,IAAI,cAAA,CAAe,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC5C,IAAA,MAAM,IAAA,GAAO,iBAAiB,YAAY,CAAA,eAAA,CAAA;AAC1C,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA,CAAA;AAAA,MACrC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA;AAAA,KACvC;AAAA,EACF;AAEA,EAAA,OAAO,yBAAA,EAA0B;AACnC;;;AC5EO,SAAS,oBAAoB,IAAA,EAA6B;AAC/D,EAAA,IAAI,SAAS,MAAA,EAAW;AACtB,IAAA,OAAO,4BAA4B,IAAI,CAAA;AAAA,EACzC;AAEA,EAAA,MAAM,UAAU,0BAAA,EAA2B;AAC3C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,OAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAI,GAAA,CAAI,CAAA,EAAA,EAAK,qBAAqB,CAAA,CAAA,EAAI,2PAAe,CAAA,CAAE,IAAA;AAAA,IAC7D,IAAA,EAAM,IAAI,GAAA,CAAI,CAAA,EAAA,EAAK,qBAAqB,CAAA,CAAA,EAAI,2PAAe,CAAA,CAAE;AAAA,GAC/D;AACF","file":"paths.cjs","sourcesContent":["{\n  \"name\": \"veilix-sdk\",\n  \"version\": \"0.2.0\",\n  \"description\": \"Veilix Privacy SDK\",\n  \"type\": \"module\",\n  \"main\": \"./dist/index.cjs\",\n  \"module\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"sideEffects\": false,\n  \"exports\": {\n    \".\": {\n      \"import\": {\n        \"types\": \"./dist/index.d.ts\",\n        \"default\": \"./dist/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/index.d.cts\",\n        \"default\": \"./dist/index.cjs\"\n      }\n    },\n    \"./circuits/paths\": {\n      \"import\": \"./dist/circuits/paths.js\",\n      \"require\": \"./dist/circuits/paths.cjs\",\n      \"default\": \"./dist/circuits/paths.js\"\n    },\n    \"./circuits/*\": \"./dist/circuits/*\",\n    \"./vite\": {\n      \"import\": {\n        \"types\": \"./dist/vite/index.d.ts\",\n        \"default\": \"./dist/vite/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/vite/index.d.cts\",\n        \"default\": \"./dist/vite/index.cjs\"\n      }\n    },\n    \"./react\": {\n      \"import\": {\n        \"types\": \"./dist/react/index.d.ts\",\n        \"default\": \"./dist/react/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/react/index.d.cts\",\n        \"default\": \"./dist/react/index.cjs\"\n      }\n    },\n    \"./package.json\": \"./package.json\"\n  },\n  \"peerDependencies\": {\n    \"@solana/wallet-adapter-react\": \">=0.15.0\",\n    \"react\": \">=18\"\n  },\n  \"peerDependenciesMeta\": {\n    \"@solana/wallet-adapter-react\": {\n      \"optional\": true\n    },\n    \"react\": {\n      \"optional\": true\n    }\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"scripts\": {\n    \"prepare:snarkjs\": \"node scripts/prepare-snarkjs.mjs\",\n    \"build\": \"npm run prepare:snarkjs && tsup\",\n    \"dev\": \"npm run prepare:snarkjs && tsup --watch\",\n    \"typecheck\": \"npm run prepare:snarkjs && tsc --noEmit\",\n    \"prepublishOnly\": \"npm run build\"\n  },\n  \"keywords\": [\n    \"veilix-sdk\",\n    \"sdk\"\n  ],\n  \"license\": \"MIT\",\n  \"devDependencies\": {\n    \"@solana/wallet-adapter-react\": \"^0.15.39\",\n    \"@types/bn.js\": \"^5.2.0\",\n    \"@types/node\": \"^26.0.0\",\n    \"@types/react\": \"^19.1.8\",\n    \"react\": \"^19.1.0\",\n    \"tsup\": \"^8.5.0\",\n    \"typescript\": \"^5.8.3\"\n  },\n  \"engines\": {\n    \"node\": \">=18\"\n  },\n  \"dependencies\": {\n    \"@coral-xyz/anchor\": \"^0.31.1\",\n    \"@solana/spl-token\": \"^0.4.14\",\n    \"@solana/web3.js\": \"^1.98.4\",\n    \"@switchboard-xyz/common\": \"^5.8.1\",\n    \"@switchboard-xyz/on-demand\": \"^3.10.1\",\n    \"bn.js\": \"^5.2.5\",\n    \"buffer\": \"^6.0.3\",\n    \"ffjavascript\": \"^0.3.1\",\n    \"fixed-merkle-tree\": \"^0.7.3\",\n    \"poseidon-hash\": \"^1.0.1\",\n    \"tweetnacl\": \"^1.0.3\"\n  }\n}\n","import packageJson from \"../../package.json\";\n\n/** npm package name (used to load the standalone circuits module). */\nexport const PACKAGE_NAME = packageJson.name;\n\n/** Published npm version (pins CDN circuit URLs in production). */\nexport const PACKAGE_VERSION = packageJson.version;\n\n/** Withdraw circuit artifact filenames (published under `veilix-sdk/circuits/`). */\nexport const WITHDRAW_CIRCUIT_WASM = \"withdraw.wasm\";\nexport const WITHDRAW_CIRCUIT_ZKEY = \"withdraw.zkey\";\n/**\n * Pinned SHA-256 hashes for the published withdraw circuit artifacts.\n * These are verified in-browser before passing artifacts to snarkjs.\n */\nexport const WITHDRAW_CIRCUIT_SHA256 = {\n  wasm: \"5f9eb88bcbc1b3dd5669dad6fdd3b91d59dd2d617ad0b34827af8a498d13fa60\",\n  zkey: \"73e0d2328eca8f48024b69b42d659b68d7dd2f067d762079e859ffff34360a1a\",\n} as const;\n\n/** Optional self-hosted path convention (opt-in via `circuitPathsBase`). */\nexport const SELF_HOSTED_CIRCUIT_BASE = \"/circuits/\";\n\n/**\n * Stable published source for the pinned circuit artifacts.\n *\n * Decoupled from {@link PACKAGE_VERSION} on purpose: the withdraw circuit is a\n * fixed cryptographic artifact, so SDK code releases must not change where the\n * verified circuits are fetched from. Bump these together with\n * {@link WITHDRAW_CIRCUIT_SHA256} only when the circuit itself changes.\n */\nexport const CIRCUIT_CDN_PACKAGE = \"veilix-sdk-test\";\nexport const CIRCUIT_CDN_VERSION = \"0.1.0\";\n\nexport type CircuitPaths = {\n  wasm: string;\n  zkey: string;\n};\n\n/** Resolve circuit URLs when the caller knows the package `dist/` root. */\nexport function resolveCircuitPathsFromBase(base: string): CircuitPaths {\n  const root = base.endsWith(\"/\") ? base : `${base}/`;\n  return {\n    wasm: `${root}circuits/${WITHDRAW_CIRCUIT_WASM}`,\n    zkey: `${root}circuits/${WITHDRAW_CIRCUIT_ZKEY}`,\n  };\n}\n\n/**\n * Base URL for circuit files on jsDelivr.\n *\n * Pinned to {@link CIRCUIT_CDN_PACKAGE}@{@link CIRCUIT_CDN_VERSION} (not the\n * current SDK version) so the bytes always match {@link WITHDRAW_CIRCUIT_SHA256}.\n * This URL is independent of the consuming app's origin/domain.\n */\nexport function resolveNpmCdnCircuitBase(): string {\n  return `https://cdn.jsdelivr.net/npm/${CIRCUIT_CDN_PACKAGE}@${CIRCUIT_CDN_VERSION}/dist/circuits/`;\n}\n\n/** Trusted jsDelivr fallback paths for pinned withdraw circuit artifacts. */\nexport function resolveNpmCdnCircuitPaths(): CircuitPaths {\n  const base = resolveNpmCdnCircuitBase();\n  return {\n    wasm: `${base}${WITHDRAW_CIRCUIT_WASM}`,\n    zkey: `${base}${WITHDRAW_CIRCUIT_ZKEY}`,\n  };\n}\n\nfunction isLocalDevHost(hostname: string): boolean {\n  return (\n    hostname === \"localhost\" ||\n    hostname === \"127.0.0.1\" ||\n    hostname === \"[::1]\"\n  );\n}\n\n/**\n * Browser circuit URLs.\n *\n * - Local dev (Vite): `/node_modules/<pkg>/dist/circuits/` — Vite serves node_modules.\n * - Production: pinned, domain-independent jsDelivr CDN (verified by SHA-256 before use).\n *\n * The production default does not depend on the app's own origin/domain, so it\n * works on any deployed host with no copy step. Artifacts are always integrity\n * checked before proving (see {@link WITHDRAW_CIRCUIT_SHA256}). To self-host\n * instead, pass {@link VeilixSdkInitOptions.circuitPathsBase} (e.g. `\"/circuits/\"`);\n * it is verified too and falls back to the CDN if unavailable.\n */\nexport function resolveBrowserCircuitPaths(\n  baseOverride?: string\n): CircuitPaths | null {\n  if (typeof window === \"undefined\") {\n    return null;\n  }\n\n  if (baseOverride !== undefined) {\n    return resolveCircuitPathsFromBase(baseOverride);\n  }\n\n  if (isLocalDevHost(window.location.hostname)) {\n    const base = `/node_modules/${PACKAGE_NAME}/dist/circuits/`;\n    return {\n      wasm: `${base}${WITHDRAW_CIRCUIT_WASM}`,\n      zkey: `${base}${WITHDRAW_CIRCUIT_ZKEY}`,\n    };\n  }\n\n  return resolveNpmCdnCircuitPaths();\n}\n","import {\n  WITHDRAW_CIRCUIT_WASM,\n  WITHDRAW_CIRCUIT_ZKEY,\n  resolveBrowserCircuitPaths,\n  resolveCircuitPathsFromBase,\n  type CircuitPaths,\n} from \"./constants\";\n\nexport {\n  PACKAGE_NAME,\n  SELF_HOSTED_CIRCUIT_BASE,\n  WITHDRAW_CIRCUIT_SHA256,\n  WITHDRAW_CIRCUIT_WASM,\n  WITHDRAW_CIRCUIT_ZKEY,\n  resolveBrowserCircuitPaths,\n  resolveCircuitPathsFromBase,\n  resolveNpmCdnCircuitPaths,\n  resolveNpmCdnCircuitBase,\n  type CircuitPaths,\n} from \"./constants\";\n\n/**\n * Resolve default Groth16 circuit URLs.\n *\n * Published as `veilix-sdk/circuits/paths` so `import.meta.url` stays next to\n * `withdraw.wasm` and `withdraw.zkey` in `dist/circuits/` (Node / unbundled ESM).\n *\n * In the browser, defaults to `/node_modules/<pkg>/dist/circuits/` on localhost\n * and the pinned, SHA-256-verified jsDelivr CDN in production (domain-independent).\n * Override via {@link VeilixSdkInitOptions.circuitPathsBase},\n * {@link resolveCircuitPathsFromBase}, or {@link GenerateWithdrawProofOptions}.\n */\nexport function resolveCircuitPaths(base?: string): CircuitPaths {\n  if (base !== undefined) {\n    return resolveCircuitPathsFromBase(base);\n  }\n\n  const browser = resolveBrowserCircuitPaths();\n  if (browser) {\n    return browser;\n  }\n\n  return {\n    wasm: new URL(`./${WITHDRAW_CIRCUIT_WASM}`, import.meta.url).href,\n    zkey: new URL(`./${WITHDRAW_CIRCUIT_ZKEY}`, import.meta.url).href,\n  };\n}\n"]}
+{"version":3,"sources":["../../package.json","../../src/circuits/constants.ts","../../src/circuits/paths.ts"],"names":[],"mappings":";;;;AAAA,IAAA,eAAA,GAAA;AAAA,EACE,IAAA,EAAQ,YAmGV,CAAA;;;ACjGO,IAAM,eAAe,eAAA,CAAY;AAMjC,IAAM,qBAAA,GAAwB;AAC9B,IAAM,qBAAA,GAAwB;AAK9B,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,kEAAA;AAAA,EACN,IAAA,EAAM;AACR;AAGO,IAAM,wBAAA,GAA2B;AAUjC,IAAM,mBAAA,GAAsB,YAAA;AAC5B,IAAM,mBAAA,GAAsB,OAAA;AAQ5B,SAAS,4BAA4B,IAAA,EAA4B;AACtE,EAAA,MAAM,OAAO,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,GAAI,IAAA,GAAO,GAAG,IAAI,CAAA,CAAA,CAAA;AAChD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,qBAAqB,CAAA,CAAA;AAAA,IAC9C,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,qBAAqB,CAAA;AAAA,GAChD;AACF;AASO,SAAS,wBAAA,GAAmC;AACjD,EAAA,OAAO,CAAA,6BAAA,EAAgC,mBAAmB,CAAA,CAAA,EAAI,mBAAmB,CAAA,eAAA,CAAA;AACnF;AAGO,SAAS,yBAAA,GAA0C;AACxD,EAAA,MAAM,OAAO,wBAAA,EAAyB;AACtC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA,CAAA;AAAA,IACrC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA;AAAA,GACvC;AACF;AAEA,SAAS,eAAe,QAAA,EAA2B;AACjD,EAAA,OACE,QAAA,KAAa,WAAA,IACb,QAAA,KAAa,WAAA,IACb,QAAA,KAAa,OAAA;AAEjB;AAcO,SAAS,2BACd,YAAA,EACqB;AACrB,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,MAAA,EAAW;AAC9B,IAAA,OAAO,4BAA4B,YAAY,CAAA;AAAA,EACjD;AAEA,EAAA,IAAI,cAAA,CAAe,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC5C,IAAA,MAAM,IAAA,GAAO,iBAAiB,YAAY,CAAA,eAAA,CAAA;AAC1C,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA,CAAA;AAAA,MACrC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA;AAAA,KACvC;AAAA,EACF;AAEA,EAAA,OAAO,yBAAA,EAA0B;AACnC;;;AC5EO,SAAS,oBAAoB,IAAA,EAA6B;AAC/D,EAAA,IAAI,SAAS,MAAA,EAAW;AACtB,IAAA,OAAO,4BAA4B,IAAI,CAAA;AAAA,EACzC;AAEA,EAAA,MAAM,UAAU,0BAAA,EAA2B;AAC3C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,OAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAI,GAAA,CAAI,CAAA,EAAA,EAAK,qBAAqB,CAAA,CAAA,EAAI,2PAAe,CAAA,CAAE,IAAA;AAAA,IAC7D,IAAA,EAAM,IAAI,GAAA,CAAI,CAAA,EAAA,EAAK,qBAAqB,CAAA,CAAA,EAAI,2PAAe,CAAA,CAAE;AAAA,GAC/D;AACF","file":"paths.cjs","sourcesContent":["{\n  \"name\": \"veilix-sdk\",\n  \"version\": \"0.2.1\",\n  \"description\": \"Veilix Privacy SDK\",\n  \"type\": \"module\",\n  \"main\": \"./dist/index.cjs\",\n  \"module\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"sideEffects\": false,\n  \"exports\": {\n    \".\": {\n      \"import\": {\n        \"types\": \"./dist/index.d.ts\",\n        \"default\": \"./dist/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/index.d.cts\",\n        \"default\": \"./dist/index.cjs\"\n      }\n    },\n    \"./circuits/paths\": {\n      \"import\": \"./dist/circuits/paths.js\",\n      \"require\": \"./dist/circuits/paths.cjs\",\n      \"default\": \"./dist/circuits/paths.js\"\n    },\n    \"./circuits/*\": \"./dist/circuits/*\",\n    \"./vite\": {\n      \"import\": {\n        \"types\": \"./dist/vite/index.d.ts\",\n        \"default\": \"./dist/vite/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/vite/index.d.cts\",\n        \"default\": \"./dist/vite/index.cjs\"\n      }\n    },\n    \"./react\": {\n      \"import\": {\n        \"types\": \"./dist/react/index.d.ts\",\n        \"default\": \"./dist/react/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/react/index.d.cts\",\n        \"default\": \"./dist/react/index.cjs\"\n      }\n    },\n    \"./package.json\": \"./package.json\"\n  },\n  \"peerDependencies\": {\n    \"@solana/wallet-adapter-react\": \">=0.15.0\",\n    \"react\": \">=18\"\n  },\n  \"peerDependenciesMeta\": {\n    \"@solana/wallet-adapter-react\": {\n      \"optional\": true\n    },\n    \"react\": {\n      \"optional\": true\n    }\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"scripts\": {\n    \"prepare:snarkjs\": \"node scripts/prepare-snarkjs.mjs\",\n    \"build\": \"npm run prepare:snarkjs && tsup\",\n    \"dev\": \"npm run prepare:snarkjs && tsup --watch\",\n    \"typecheck\": \"npm run prepare:snarkjs && tsc --noEmit\",\n    \"prepublishOnly\": \"npm run build\"\n  },\n  \"keywords\": [\n    \"veilix-sdk\",\n    \"sdk\"\n  ],\n  \"license\": \"MIT\",\n  \"devDependencies\": {\n    \"@solana/wallet-adapter-react\": \"^0.15.39\",\n    \"@types/bn.js\": \"^5.2.0\",\n    \"@types/node\": \"^26.0.0\",\n    \"@types/react\": \"^19.1.8\",\n    \"react\": \"^19.1.0\",\n    \"tsup\": \"^8.5.0\",\n    \"typescript\": \"^5.8.3\"\n  },\n  \"engines\": {\n    \"node\": \">=18\"\n  },\n  \"dependencies\": {\n    \"@coral-xyz/anchor\": \"^0.31.1\",\n    \"@solana/spl-token\": \"^0.4.14\",\n    \"@solana/web3.js\": \"^1.98.4\",\n    \"@switchboard-xyz/common\": \"^5.8.1\",\n    \"@switchboard-xyz/on-demand\": \"^3.10.1\",\n    \"bn.js\": \"^5.2.5\",\n    \"buffer\": \"^6.0.3\",\n    \"ffjavascript\": \"^0.3.1\",\n    \"fixed-merkle-tree\": \"^0.7.3\",\n    \"poseidon-hash\": \"^1.0.1\",\n    \"tweetnacl\": \"^1.0.3\"\n  }\n}\n","import packageJson from \"../../package.json\";\n\n/** npm package name (used to load the standalone circuits module). */\nexport const PACKAGE_NAME = packageJson.name;\n\n/** Published npm version (pins CDN circuit URLs in production). */\nexport const PACKAGE_VERSION = packageJson.version;\n\n/** Withdraw circuit artifact filenames (published under `veilix-sdk/circuits/`). */\nexport const WITHDRAW_CIRCUIT_WASM = \"withdraw.wasm\";\nexport const WITHDRAW_CIRCUIT_ZKEY = \"withdraw.zkey\";\n/**\n * Pinned SHA-256 hashes for the published withdraw circuit artifacts.\n * These are verified in-browser before passing artifacts to snarkjs.\n */\nexport const WITHDRAW_CIRCUIT_SHA256 = {\n  wasm: \"5f9eb88bcbc1b3dd5669dad6fdd3b91d59dd2d617ad0b34827af8a498d13fa60\",\n  zkey: \"73e0d2328eca8f48024b69b42d659b68d7dd2f067d762079e859ffff34360a1a\",\n} as const;\n\n/** Optional self-hosted path convention (opt-in via `circuitPathsBase`). */\nexport const SELF_HOSTED_CIRCUIT_BASE = \"/circuits/\";\n\n/**\n * Stable published source for the pinned circuit artifacts.\n *\n * Decoupled from {@link PACKAGE_VERSION} on purpose: the withdraw circuit is a\n * fixed cryptographic artifact, so SDK code releases must not change where the\n * verified circuits are fetched from. Bump these together with\n * {@link WITHDRAW_CIRCUIT_SHA256} only when the circuit itself changes.\n */\nexport const CIRCUIT_CDN_PACKAGE = \"veilix-sdk\";\nexport const CIRCUIT_CDN_VERSION = \"0.2.0\";\n\nexport type CircuitPaths = {\n  wasm: string;\n  zkey: string;\n};\n\n/** Resolve circuit URLs when the caller knows the package `dist/` root. */\nexport function resolveCircuitPathsFromBase(base: string): CircuitPaths {\n  const root = base.endsWith(\"/\") ? base : `${base}/`;\n  return {\n    wasm: `${root}circuits/${WITHDRAW_CIRCUIT_WASM}`,\n    zkey: `${root}circuits/${WITHDRAW_CIRCUIT_ZKEY}`,\n  };\n}\n\n/**\n * Base URL for circuit files on jsDelivr.\n *\n * Pinned to {@link CIRCUIT_CDN_PACKAGE}@{@link CIRCUIT_CDN_VERSION} (not the\n * current SDK version) so the bytes always match {@link WITHDRAW_CIRCUIT_SHA256}.\n * This URL is independent of the consuming app's origin/domain.\n */\nexport function resolveNpmCdnCircuitBase(): string {\n  return `https://cdn.jsdelivr.net/npm/${CIRCUIT_CDN_PACKAGE}@${CIRCUIT_CDN_VERSION}/dist/circuits/`;\n}\n\n/** Trusted jsDelivr fallback paths for pinned withdraw circuit artifacts. */\nexport function resolveNpmCdnCircuitPaths(): CircuitPaths {\n  const base = resolveNpmCdnCircuitBase();\n  return {\n    wasm: `${base}${WITHDRAW_CIRCUIT_WASM}`,\n    zkey: `${base}${WITHDRAW_CIRCUIT_ZKEY}`,\n  };\n}\n\nfunction isLocalDevHost(hostname: string): boolean {\n  return (\n    hostname === \"localhost\" ||\n    hostname === \"127.0.0.1\" ||\n    hostname === \"[::1]\"\n  );\n}\n\n/**\n * Browser circuit URLs.\n *\n * - Local dev (Vite): `/node_modules/<pkg>/dist/circuits/` — Vite serves node_modules.\n * - Production: pinned, domain-independent jsDelivr CDN (verified by SHA-256 before use).\n *\n * The production default does not depend on the app's own origin/domain, so it\n * works on any deployed host with no copy step. Artifacts are always integrity\n * checked before proving (see {@link WITHDRAW_CIRCUIT_SHA256}). To self-host\n * instead, pass {@link VeilixSdkInitOptions.circuitPathsBase} (e.g. `\"/circuits/\"`);\n * it is verified too and falls back to the CDN if unavailable.\n */\nexport function resolveBrowserCircuitPaths(\n  baseOverride?: string\n): CircuitPaths | null {\n  if (typeof window === \"undefined\") {\n    return null;\n  }\n\n  if (baseOverride !== undefined) {\n    return resolveCircuitPathsFromBase(baseOverride);\n  }\n\n  if (isLocalDevHost(window.location.hostname)) {\n    const base = `/node_modules/${PACKAGE_NAME}/dist/circuits/`;\n    return {\n      wasm: `${base}${WITHDRAW_CIRCUIT_WASM}`,\n      zkey: `${base}${WITHDRAW_CIRCUIT_ZKEY}`,\n    };\n  }\n\n  return resolveNpmCdnCircuitPaths();\n}\n","import {\n  WITHDRAW_CIRCUIT_WASM,\n  WITHDRAW_CIRCUIT_ZKEY,\n  resolveBrowserCircuitPaths,\n  resolveCircuitPathsFromBase,\n  type CircuitPaths,\n} from \"./constants\";\n\nexport {\n  PACKAGE_NAME,\n  SELF_HOSTED_CIRCUIT_BASE,\n  WITHDRAW_CIRCUIT_SHA256,\n  WITHDRAW_CIRCUIT_WASM,\n  WITHDRAW_CIRCUIT_ZKEY,\n  resolveBrowserCircuitPaths,\n  resolveCircuitPathsFromBase,\n  resolveNpmCdnCircuitPaths,\n  resolveNpmCdnCircuitBase,\n  type CircuitPaths,\n} from \"./constants\";\n\n/**\n * Resolve default Groth16 circuit URLs.\n *\n * Published as `veilix-sdk/circuits/paths` so `import.meta.url` stays next to\n * `withdraw.wasm` and `withdraw.zkey` in `dist/circuits/` (Node / unbundled ESM).\n *\n * In the browser, defaults to `/node_modules/<pkg>/dist/circuits/` on localhost\n * and the pinned, SHA-256-verified jsDelivr CDN in production (domain-independent).\n * Override via {@link VeilixSdkInitOptions.circuitPathsBase},\n * {@link resolveCircuitPathsFromBase}, or {@link GenerateWithdrawProofOptions}.\n */\nexport function resolveCircuitPaths(base?: string): CircuitPaths {\n  if (base !== undefined) {\n    return resolveCircuitPathsFromBase(base);\n  }\n\n  const browser = resolveBrowserCircuitPaths();\n  if (browser) {\n    return browser;\n  }\n\n  return {\n    wasm: new URL(`./${WITHDRAW_CIRCUIT_WASM}`, import.meta.url).href,\n    zkey: new URL(`./${WITHDRAW_CIRCUIT_ZKEY}`, import.meta.url).href,\n  };\n}\n"]}

package/dist/circuits/paths.js

@@ -11,8 +11,8 @@ var WITHDRAW_CIRCUIT_SHA256 = {
   zkey: "73e0d2328eca8f48024b69b42d659b68d7dd2f067d762079e859ffff34360a1a"
 };
 var SELF_HOSTED_CIRCUIT_BASE = "/circuits/";
-var CIRCUIT_CDN_PACKAGE = "veilix-sdk-test";
-var CIRCUIT_CDN_VERSION = "0.1.0";
+var CIRCUIT_CDN_PACKAGE = "veilix-sdk";
+var CIRCUIT_CDN_VERSION = "0.2.0";
 function resolveCircuitPathsFromBase(base) {
   const root = base.endsWith("/") ? base : `${base}/`;
   return {

package/dist/circuits/paths.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../package.json","../../src/circuits/constants.ts","../../src/circuits/paths.ts"],"names":[],"mappings":";AAAA,IAAA,eAAA,GAAA;AAAA,EACE,IAAA,EAAQ,YAmGV,CAAA;;;ACjGO,IAAM,eAAe,eAAA,CAAY;AAMjC,IAAM,qBAAA,GAAwB;AAC9B,IAAM,qBAAA,GAAwB;AAK9B,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,kEAAA;AAAA,EACN,IAAA,EAAM;AACR;AAGO,IAAM,wBAAA,GAA2B;AAUjC,IAAM,mBAAA,GAAsB,iBAAA;AAC5B,IAAM,mBAAA,GAAsB,OAAA;AAQ5B,SAAS,4BAA4B,IAAA,EAA4B;AACtE,EAAA,MAAM,OAAO,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,GAAI,IAAA,GAAO,GAAG,IAAI,CAAA,CAAA,CAAA;AAChD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,qBAAqB,CAAA,CAAA;AAAA,IAC9C,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,qBAAqB,CAAA;AAAA,GAChD;AACF;AASO,SAAS,wBAAA,GAAmC;AACjD,EAAA,OAAO,CAAA,6BAAA,EAAgC,mBAAmB,CAAA,CAAA,EAAI,mBAAmB,CAAA,eAAA,CAAA;AACnF;AAGO,SAAS,yBAAA,GAA0C;AACxD,EAAA,MAAM,OAAO,wBAAA,EAAyB;AACtC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA,CAAA;AAAA,IACrC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA;AAAA,GACvC;AACF;AAEA,SAAS,eAAe,QAAA,EAA2B;AACjD,EAAA,OACE,QAAA,KAAa,WAAA,IACb,QAAA,KAAa,WAAA,IACb,QAAA,KAAa,OAAA;AAEjB;AAcO,SAAS,2BACd,YAAA,EACqB;AACrB,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,MAAA,EAAW;AAC9B,IAAA,OAAO,4BAA4B,YAAY,CAAA;AAAA,EACjD;AAEA,EAAA,IAAI,cAAA,CAAe,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC5C,IAAA,MAAM,IAAA,GAAO,iBAAiB,YAAY,CAAA,eAAA,CAAA;AAC1C,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA,CAAA;AAAA,MACrC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA;AAAA,KACvC;AAAA,EACF;AAEA,EAAA,OAAO,yBAAA,EAA0B;AACnC;;;AC5EO,SAAS,oBAAoB,IAAA,EAA6B;AAC/D,EAAA,IAAI,SAAS,MAAA,EAAW;AACtB,IAAA,OAAO,4BAA4B,IAAI,CAAA;AAAA,EACzC;AAEA,EAAA,MAAM,UAAU,0BAAA,EAA2B;AAC3C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,OAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAI,GAAA,CAAI,CAAA,EAAA,EAAK,qBAAqB,CAAA,CAAA,EAAI,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA,CAAE,IAAA;AAAA,IAC7D,IAAA,EAAM,IAAI,GAAA,CAAI,CAAA,EAAA,EAAK,qBAAqB,CAAA,CAAA,EAAI,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA,CAAE;AAAA,GAC/D;AACF","file":"paths.js","sourcesContent":["{\n  \"name\": \"veilix-sdk\",\n  \"version\": \"0.2.0\",\n  \"description\": \"Veilix Privacy SDK\",\n  \"type\": \"module\",\n  \"main\": \"./dist/index.cjs\",\n  \"module\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"sideEffects\": false,\n  \"exports\": {\n    \".\": {\n      \"import\": {\n        \"types\": \"./dist/index.d.ts\",\n        \"default\": \"./dist/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/index.d.cts\",\n        \"default\": \"./dist/index.cjs\"\n      }\n    },\n    \"./circuits/paths\": {\n      \"import\": \"./dist/circuits/paths.js\",\n      \"require\": \"./dist/circuits/paths.cjs\",\n      \"default\": \"./dist/circuits/paths.js\"\n    },\n    \"./circuits/*\": \"./dist/circuits/*\",\n    \"./vite\": {\n      \"import\": {\n        \"types\": \"./dist/vite/index.d.ts\",\n        \"default\": \"./dist/vite/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/vite/index.d.cts\",\n        \"default\": \"./dist/vite/index.cjs\"\n      }\n    },\n    \"./react\": {\n      \"import\": {\n        \"types\": \"./dist/react/index.d.ts\",\n        \"default\": \"./dist/react/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/react/index.d.cts\",\n        \"default\": \"./dist/react/index.cjs\"\n      }\n    },\n    \"./package.json\": \"./package.json\"\n  },\n  \"peerDependencies\": {\n    \"@solana/wallet-adapter-react\": \">=0.15.0\",\n    \"react\": \">=18\"\n  },\n  \"peerDependenciesMeta\": {\n    \"@solana/wallet-adapter-react\": {\n      \"optional\": true\n    },\n    \"react\": {\n      \"optional\": true\n    }\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"scripts\": {\n    \"prepare:snarkjs\": \"node scripts/prepare-snarkjs.mjs\",\n    \"build\": \"npm run prepare:snarkjs && tsup\",\n    \"dev\": \"npm run prepare:snarkjs && tsup --watch\",\n    \"typecheck\": \"npm run prepare:snarkjs && tsc --noEmit\",\n    \"prepublishOnly\": \"npm run build\"\n  },\n  \"keywords\": [\n    \"veilix-sdk\",\n    \"sdk\"\n  ],\n  \"license\": \"MIT\",\n  \"devDependencies\": {\n    \"@solana/wallet-adapter-react\": \"^0.15.39\",\n    \"@types/bn.js\": \"^5.2.0\",\n    \"@types/node\": \"^26.0.0\",\n    \"@types/react\": \"^19.1.8\",\n    \"react\": \"^19.1.0\",\n    \"tsup\": \"^8.5.0\",\n    \"typescript\": \"^5.8.3\"\n  },\n  \"engines\": {\n    \"node\": \">=18\"\n  },\n  \"dependencies\": {\n    \"@coral-xyz/anchor\": \"^0.31.1\",\n    \"@solana/spl-token\": \"^0.4.14\",\n    \"@solana/web3.js\": \"^1.98.4\",\n    \"@switchboard-xyz/common\": \"^5.8.1\",\n    \"@switchboard-xyz/on-demand\": \"^3.10.1\",\n    \"bn.js\": \"^5.2.5\",\n    \"buffer\": \"^6.0.3\",\n    \"ffjavascript\": \"^0.3.1\",\n    \"fixed-merkle-tree\": \"^0.7.3\",\n    \"poseidon-hash\": \"^1.0.1\",\n    \"tweetnacl\": \"^1.0.3\"\n  }\n}\n","import packageJson from \"../../package.json\";\n\n/** npm package name (used to load the standalone circuits module). */\nexport const PACKAGE_NAME = packageJson.name;\n\n/** Published npm version (pins CDN circuit URLs in production). */\nexport const PACKAGE_VERSION = packageJson.version;\n\n/** Withdraw circuit artifact filenames (published under `veilix-sdk/circuits/`). */\nexport const WITHDRAW_CIRCUIT_WASM = \"withdraw.wasm\";\nexport const WITHDRAW_CIRCUIT_ZKEY = \"withdraw.zkey\";\n/**\n * Pinned SHA-256 hashes for the published withdraw circuit artifacts.\n * These are verified in-browser before passing artifacts to snarkjs.\n */\nexport const WITHDRAW_CIRCUIT_SHA256 = {\n  wasm: \"5f9eb88bcbc1b3dd5669dad6fdd3b91d59dd2d617ad0b34827af8a498d13fa60\",\n  zkey: \"73e0d2328eca8f48024b69b42d659b68d7dd2f067d762079e859ffff34360a1a\",\n} as const;\n\n/** Optional self-hosted path convention (opt-in via `circuitPathsBase`). */\nexport const SELF_HOSTED_CIRCUIT_BASE = \"/circuits/\";\n\n/**\n * Stable published source for the pinned circuit artifacts.\n *\n * Decoupled from {@link PACKAGE_VERSION} on purpose: the withdraw circuit is a\n * fixed cryptographic artifact, so SDK code releases must not change where the\n * verified circuits are fetched from. Bump these together with\n * {@link WITHDRAW_CIRCUIT_SHA256} only when the circuit itself changes.\n */\nexport const CIRCUIT_CDN_PACKAGE = \"veilix-sdk-test\";\nexport const CIRCUIT_CDN_VERSION = \"0.1.0\";\n\nexport type CircuitPaths = {\n  wasm: string;\n  zkey: string;\n};\n\n/** Resolve circuit URLs when the caller knows the package `dist/` root. */\nexport function resolveCircuitPathsFromBase(base: string): CircuitPaths {\n  const root = base.endsWith(\"/\") ? base : `${base}/`;\n  return {\n    wasm: `${root}circuits/${WITHDRAW_CIRCUIT_WASM}`,\n    zkey: `${root}circuits/${WITHDRAW_CIRCUIT_ZKEY}`,\n  };\n}\n\n/**\n * Base URL for circuit files on jsDelivr.\n *\n * Pinned to {@link CIRCUIT_CDN_PACKAGE}@{@link CIRCUIT_CDN_VERSION} (not the\n * current SDK version) so the bytes always match {@link WITHDRAW_CIRCUIT_SHA256}.\n * This URL is independent of the consuming app's origin/domain.\n */\nexport function resolveNpmCdnCircuitBase(): string {\n  return `https://cdn.jsdelivr.net/npm/${CIRCUIT_CDN_PACKAGE}@${CIRCUIT_CDN_VERSION}/dist/circuits/`;\n}\n\n/** Trusted jsDelivr fallback paths for pinned withdraw circuit artifacts. */\nexport function resolveNpmCdnCircuitPaths(): CircuitPaths {\n  const base = resolveNpmCdnCircuitBase();\n  return {\n    wasm: `${base}${WITHDRAW_CIRCUIT_WASM}`,\n    zkey: `${base}${WITHDRAW_CIRCUIT_ZKEY}`,\n  };\n}\n\nfunction isLocalDevHost(hostname: string): boolean {\n  return (\n    hostname === \"localhost\" ||\n    hostname === \"127.0.0.1\" ||\n    hostname === \"[::1]\"\n  );\n}\n\n/**\n * Browser circuit URLs.\n *\n * - Local dev (Vite): `/node_modules/<pkg>/dist/circuits/` — Vite serves node_modules.\n * - Production: pinned, domain-independent jsDelivr CDN (verified by SHA-256 before use).\n *\n * The production default does not depend on the app's own origin/domain, so it\n * works on any deployed host with no copy step. Artifacts are always integrity\n * checked before proving (see {@link WITHDRAW_CIRCUIT_SHA256}). To self-host\n * instead, pass {@link VeilixSdkInitOptions.circuitPathsBase} (e.g. `\"/circuits/\"`);\n * it is verified too and falls back to the CDN if unavailable.\n */\nexport function resolveBrowserCircuitPaths(\n  baseOverride?: string\n): CircuitPaths | null {\n  if (typeof window === \"undefined\") {\n    return null;\n  }\n\n  if (baseOverride !== undefined) {\n    return resolveCircuitPathsFromBase(baseOverride);\n  }\n\n  if (isLocalDevHost(window.location.hostname)) {\n    const base = `/node_modules/${PACKAGE_NAME}/dist/circuits/`;\n    return {\n      wasm: `${base}${WITHDRAW_CIRCUIT_WASM}`,\n      zkey: `${base}${WITHDRAW_CIRCUIT_ZKEY}`,\n    };\n  }\n\n  return resolveNpmCdnCircuitPaths();\n}\n","import {\n  WITHDRAW_CIRCUIT_WASM,\n  WITHDRAW_CIRCUIT_ZKEY,\n  resolveBrowserCircuitPaths,\n  resolveCircuitPathsFromBase,\n  type CircuitPaths,\n} from \"./constants\";\n\nexport {\n  PACKAGE_NAME,\n  SELF_HOSTED_CIRCUIT_BASE,\n  WITHDRAW_CIRCUIT_SHA256,\n  WITHDRAW_CIRCUIT_WASM,\n  WITHDRAW_CIRCUIT_ZKEY,\n  resolveBrowserCircuitPaths,\n  resolveCircuitPathsFromBase,\n  resolveNpmCdnCircuitPaths,\n  resolveNpmCdnCircuitBase,\n  type CircuitPaths,\n} from \"./constants\";\n\n/**\n * Resolve default Groth16 circuit URLs.\n *\n * Published as `veilix-sdk/circuits/paths` so `import.meta.url` stays next to\n * `withdraw.wasm` and `withdraw.zkey` in `dist/circuits/` (Node / unbundled ESM).\n *\n * In the browser, defaults to `/node_modules/<pkg>/dist/circuits/` on localhost\n * and the pinned, SHA-256-verified jsDelivr CDN in production (domain-independent).\n * Override via {@link VeilixSdkInitOptions.circuitPathsBase},\n * {@link resolveCircuitPathsFromBase}, or {@link GenerateWithdrawProofOptions}.\n */\nexport function resolveCircuitPaths(base?: string): CircuitPaths {\n  if (base !== undefined) {\n    return resolveCircuitPathsFromBase(base);\n  }\n\n  const browser = resolveBrowserCircuitPaths();\n  if (browser) {\n    return browser;\n  }\n\n  return {\n    wasm: new URL(`./${WITHDRAW_CIRCUIT_WASM}`, import.meta.url).href,\n    zkey: new URL(`./${WITHDRAW_CIRCUIT_ZKEY}`, import.meta.url).href,\n  };\n}\n"]}
+{"version":3,"sources":["../../package.json","../../src/circuits/constants.ts","../../src/circuits/paths.ts"],"names":[],"mappings":";AAAA,IAAA,eAAA,GAAA;AAAA,EACE,IAAA,EAAQ,YAmGV,CAAA;;;ACjGO,IAAM,eAAe,eAAA,CAAY;AAMjC,IAAM,qBAAA,GAAwB;AAC9B,IAAM,qBAAA,GAAwB;AAK9B,IAAM,uBAAA,GAA0B;AAAA,EACrC,IAAA,EAAM,kEAAA;AAAA,EACN,IAAA,EAAM;AACR;AAGO,IAAM,wBAAA,GAA2B;AAUjC,IAAM,mBAAA,GAAsB,YAAA;AAC5B,IAAM,mBAAA,GAAsB,OAAA;AAQ5B,SAAS,4BAA4B,IAAA,EAA4B;AACtE,EAAA,MAAM,OAAO,IAAA,CAAK,QAAA,CAAS,GAAG,CAAA,GAAI,IAAA,GAAO,GAAG,IAAI,CAAA,CAAA,CAAA;AAChD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,qBAAqB,CAAA,CAAA;AAAA,IAC9C,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,SAAA,EAAY,qBAAqB,CAAA;AAAA,GAChD;AACF;AASO,SAAS,wBAAA,GAAmC;AACjD,EAAA,OAAO,CAAA,6BAAA,EAAgC,mBAAmB,CAAA,CAAA,EAAI,mBAAmB,CAAA,eAAA,CAAA;AACnF;AAGO,SAAS,yBAAA,GAA0C;AACxD,EAAA,MAAM,OAAO,wBAAA,EAAyB;AACtC,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA,CAAA;AAAA,IACrC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA;AAAA,GACvC;AACF;AAEA,SAAS,eAAe,QAAA,EAA2B;AACjD,EAAA,OACE,QAAA,KAAa,WAAA,IACb,QAAA,KAAa,WAAA,IACb,QAAA,KAAa,OAAA;AAEjB;AAcO,SAAS,2BACd,YAAA,EACqB;AACrB,EAAA,IAAI,OAAO,WAAW,WAAA,EAAa;AACjC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,iBAAiB,MAAA,EAAW;AAC9B,IAAA,OAAO,4BAA4B,YAAY,CAAA;AAAA,EACjD;AAEA,EAAA,IAAI,cAAA,CAAe,MAAA,CAAO,QAAA,CAAS,QAAQ,CAAA,EAAG;AAC5C,IAAA,MAAM,IAAA,GAAO,iBAAiB,YAAY,CAAA,eAAA,CAAA;AAC1C,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA,CAAA;AAAA,MACrC,IAAA,EAAM,CAAA,EAAG,IAAI,CAAA,EAAG,qBAAqB,CAAA;AAAA,KACvC;AAAA,EACF;AAEA,EAAA,OAAO,yBAAA,EAA0B;AACnC;;;AC5EO,SAAS,oBAAoB,IAAA,EAA6B;AAC/D,EAAA,IAAI,SAAS,MAAA,EAAW;AACtB,IAAA,OAAO,4BAA4B,IAAI,CAAA;AAAA,EACzC;AAEA,EAAA,MAAM,UAAU,0BAAA,EAA2B;AAC3C,EAAA,IAAI,OAAA,EAAS;AACX,IAAA,OAAO,OAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,IAAI,GAAA,CAAI,CAAA,EAAA,EAAK,qBAAqB,CAAA,CAAA,EAAI,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA,CAAE,IAAA;AAAA,IAC7D,IAAA,EAAM,IAAI,GAAA,CAAI,CAAA,EAAA,EAAK,qBAAqB,CAAA,CAAA,EAAI,MAAA,CAAA,IAAA,CAAY,GAAG,CAAA,CAAE;AAAA,GAC/D;AACF","file":"paths.js","sourcesContent":["{\n  \"name\": \"veilix-sdk\",\n  \"version\": \"0.2.1\",\n  \"description\": \"Veilix Privacy SDK\",\n  \"type\": \"module\",\n  \"main\": \"./dist/index.cjs\",\n  \"module\": \"./dist/index.js\",\n  \"types\": \"./dist/index.d.ts\",\n  \"sideEffects\": false,\n  \"exports\": {\n    \".\": {\n      \"import\": {\n        \"types\": \"./dist/index.d.ts\",\n        \"default\": \"./dist/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/index.d.cts\",\n        \"default\": \"./dist/index.cjs\"\n      }\n    },\n    \"./circuits/paths\": {\n      \"import\": \"./dist/circuits/paths.js\",\n      \"require\": \"./dist/circuits/paths.cjs\",\n      \"default\": \"./dist/circuits/paths.js\"\n    },\n    \"./circuits/*\": \"./dist/circuits/*\",\n    \"./vite\": {\n      \"import\": {\n        \"types\": \"./dist/vite/index.d.ts\",\n        \"default\": \"./dist/vite/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/vite/index.d.cts\",\n        \"default\": \"./dist/vite/index.cjs\"\n      }\n    },\n    \"./react\": {\n      \"import\": {\n        \"types\": \"./dist/react/index.d.ts\",\n        \"default\": \"./dist/react/index.js\"\n      },\n      \"require\": {\n        \"types\": \"./dist/react/index.d.cts\",\n        \"default\": \"./dist/react/index.cjs\"\n      }\n    },\n    \"./package.json\": \"./package.json\"\n  },\n  \"peerDependencies\": {\n    \"@solana/wallet-adapter-react\": \">=0.15.0\",\n    \"react\": \">=18\"\n  },\n  \"peerDependenciesMeta\": {\n    \"@solana/wallet-adapter-react\": {\n      \"optional\": true\n    },\n    \"react\": {\n      \"optional\": true\n    }\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"scripts\": {\n    \"prepare:snarkjs\": \"node scripts/prepare-snarkjs.mjs\",\n    \"build\": \"npm run prepare:snarkjs && tsup\",\n    \"dev\": \"npm run prepare:snarkjs && tsup --watch\",\n    \"typecheck\": \"npm run prepare:snarkjs && tsc --noEmit\",\n    \"prepublishOnly\": \"npm run build\"\n  },\n  \"keywords\": [\n    \"veilix-sdk\",\n    \"sdk\"\n  ],\n  \"license\": \"MIT\",\n  \"devDependencies\": {\n    \"@solana/wallet-adapter-react\": \"^0.15.39\",\n    \"@types/bn.js\": \"^5.2.0\",\n    \"@types/node\": \"^26.0.0\",\n    \"@types/react\": \"^19.1.8\",\n    \"react\": \"^19.1.0\",\n    \"tsup\": \"^8.5.0\",\n    \"typescript\": \"^5.8.3\"\n  },\n  \"engines\": {\n    \"node\": \">=18\"\n  },\n  \"dependencies\": {\n    \"@coral-xyz/anchor\": \"^0.31.1\",\n    \"@solana/spl-token\": \"^0.4.14\",\n    \"@solana/web3.js\": \"^1.98.4\",\n    \"@switchboard-xyz/common\": \"^5.8.1\",\n    \"@switchboard-xyz/on-demand\": \"^3.10.1\",\n    \"bn.js\": \"^5.2.5\",\n    \"buffer\": \"^6.0.3\",\n    \"ffjavascript\": \"^0.3.1\",\n    \"fixed-merkle-tree\": \"^0.7.3\",\n    \"poseidon-hash\": \"^1.0.1\",\n    \"tweetnacl\": \"^1.0.3\"\n  }\n}\n","import packageJson from \"../../package.json\";\n\n/** npm package name (used to load the standalone circuits module). */\nexport const PACKAGE_NAME = packageJson.name;\n\n/** Published npm version (pins CDN circuit URLs in production). */\nexport const PACKAGE_VERSION = packageJson.version;\n\n/** Withdraw circuit artifact filenames (published under `veilix-sdk/circuits/`). */\nexport const WITHDRAW_CIRCUIT_WASM = \"withdraw.wasm\";\nexport const WITHDRAW_CIRCUIT_ZKEY = \"withdraw.zkey\";\n/**\n * Pinned SHA-256 hashes for the published withdraw circuit artifacts.\n * These are verified in-browser before passing artifacts to snarkjs.\n */\nexport const WITHDRAW_CIRCUIT_SHA256 = {\n  wasm: \"5f9eb88bcbc1b3dd5669dad6fdd3b91d59dd2d617ad0b34827af8a498d13fa60\",\n  zkey: \"73e0d2328eca8f48024b69b42d659b68d7dd2f067d762079e859ffff34360a1a\",\n} as const;\n\n/** Optional self-hosted path convention (opt-in via `circuitPathsBase`). */\nexport const SELF_HOSTED_CIRCUIT_BASE = \"/circuits/\";\n\n/**\n * Stable published source for the pinned circuit artifacts.\n *\n * Decoupled from {@link PACKAGE_VERSION} on purpose: the withdraw circuit is a\n * fixed cryptographic artifact, so SDK code releases must not change where the\n * verified circuits are fetched from. Bump these together with\n * {@link WITHDRAW_CIRCUIT_SHA256} only when the circuit itself changes.\n */\nexport const CIRCUIT_CDN_PACKAGE = \"veilix-sdk\";\nexport const CIRCUIT_CDN_VERSION = \"0.2.0\";\n\nexport type CircuitPaths = {\n  wasm: string;\n  zkey: string;\n};\n\n/** Resolve circuit URLs when the caller knows the package `dist/` root. */\nexport function resolveCircuitPathsFromBase(base: string): CircuitPaths {\n  const root = base.endsWith(\"/\") ? base : `${base}/`;\n  return {\n    wasm: `${root}circuits/${WITHDRAW_CIRCUIT_WASM}`,\n    zkey: `${root}circuits/${WITHDRAW_CIRCUIT_ZKEY}`,\n  };\n}\n\n/**\n * Base URL for circuit files on jsDelivr.\n *\n * Pinned to {@link CIRCUIT_CDN_PACKAGE}@{@link CIRCUIT_CDN_VERSION} (not the\n * current SDK version) so the bytes always match {@link WITHDRAW_CIRCUIT_SHA256}.\n * This URL is independent of the consuming app's origin/domain.\n */\nexport function resolveNpmCdnCircuitBase(): string {\n  return `https://cdn.jsdelivr.net/npm/${CIRCUIT_CDN_PACKAGE}@${CIRCUIT_CDN_VERSION}/dist/circuits/`;\n}\n\n/** Trusted jsDelivr fallback paths for pinned withdraw circuit artifacts. */\nexport function resolveNpmCdnCircuitPaths(): CircuitPaths {\n  const base = resolveNpmCdnCircuitBase();\n  return {\n    wasm: `${base}${WITHDRAW_CIRCUIT_WASM}`,\n    zkey: `${base}${WITHDRAW_CIRCUIT_ZKEY}`,\n  };\n}\n\nfunction isLocalDevHost(hostname: string): boolean {\n  return (\n    hostname === \"localhost\" ||\n    hostname === \"127.0.0.1\" ||\n    hostname === \"[::1]\"\n  );\n}\n\n/**\n * Browser circuit URLs.\n *\n * - Local dev (Vite): `/node_modules/<pkg>/dist/circuits/` — Vite serves node_modules.\n * - Production: pinned, domain-independent jsDelivr CDN (verified by SHA-256 before use).\n *\n * The production default does not depend on the app's own origin/domain, so it\n * works on any deployed host with no copy step. Artifacts are always integrity\n * checked before proving (see {@link WITHDRAW_CIRCUIT_SHA256}). To self-host\n * instead, pass {@link VeilixSdkInitOptions.circuitPathsBase} (e.g. `\"/circuits/\"`);\n * it is verified too and falls back to the CDN if unavailable.\n */\nexport function resolveBrowserCircuitPaths(\n  baseOverride?: string\n): CircuitPaths | null {\n  if (typeof window === \"undefined\") {\n    return null;\n  }\n\n  if (baseOverride !== undefined) {\n    return resolveCircuitPathsFromBase(baseOverride);\n  }\n\n  if (isLocalDevHost(window.location.hostname)) {\n    const base = `/node_modules/${PACKAGE_NAME}/dist/circuits/`;\n    return {\n      wasm: `${base}${WITHDRAW_CIRCUIT_WASM}`,\n      zkey: `${base}${WITHDRAW_CIRCUIT_ZKEY}`,\n    };\n  }\n\n  return resolveNpmCdnCircuitPaths();\n}\n","import {\n  WITHDRAW_CIRCUIT_WASM,\n  WITHDRAW_CIRCUIT_ZKEY,\n  resolveBrowserCircuitPaths,\n  resolveCircuitPathsFromBase,\n  type CircuitPaths,\n} from \"./constants\";\n\nexport {\n  PACKAGE_NAME,\n  SELF_HOSTED_CIRCUIT_BASE,\n  WITHDRAW_CIRCUIT_SHA256,\n  WITHDRAW_CIRCUIT_WASM,\n  WITHDRAW_CIRCUIT_ZKEY,\n  resolveBrowserCircuitPaths,\n  resolveCircuitPathsFromBase,\n  resolveNpmCdnCircuitPaths,\n  resolveNpmCdnCircuitBase,\n  type CircuitPaths,\n} from \"./constants\";\n\n/**\n * Resolve default Groth16 circuit URLs.\n *\n * Published as `veilix-sdk/circuits/paths` so `import.meta.url` stays next to\n * `withdraw.wasm` and `withdraw.zkey` in `dist/circuits/` (Node / unbundled ESM).\n *\n * In the browser, defaults to `/node_modules/<pkg>/dist/circuits/` on localhost\n * and the pinned, SHA-256-verified jsDelivr CDN in production (domain-independent).\n * Override via {@link VeilixSdkInitOptions.circuitPathsBase},\n * {@link resolveCircuitPathsFromBase}, or {@link GenerateWithdrawProofOptions}.\n */\nexport function resolveCircuitPaths(base?: string): CircuitPaths {\n  if (base !== undefined) {\n    return resolveCircuitPathsFromBase(base);\n  }\n\n  const browser = resolveBrowserCircuitPaths();\n  if (browser) {\n    return browser;\n  }\n\n  return {\n    wasm: new URL(`./${WITHDRAW_CIRCUIT_WASM}`, import.meta.url).href,\n    zkey: new URL(`./${WITHDRAW_CIRCUIT_ZKEY}`, import.meta.url).href,\n  };\n}\n"]}

package/dist/index.cjs

@@ -4133,7 +4133,7 @@ function getDepositQueueForNetwork(network) {
 // package.json
 var package_default = {
   name: "veilix-sdk",
-  version: "0.2.0"};
+  version: "0.2.1"};
 
 // src/circuits/constants.ts
 var PACKAGE_NAME = package_default.name;
@@ -4144,8 +4144,8 @@ var WITHDRAW_CIRCUIT_SHA256 = {
   wasm: "5f9eb88bcbc1b3dd5669dad6fdd3b91d59dd2d617ad0b34827af8a498d13fa60",
   zkey: "73e0d2328eca8f48024b69b42d659b68d7dd2f067d762079e859ffff34360a1a"
 };
-var CIRCUIT_CDN_PACKAGE = "veilix-sdk-test";
-var CIRCUIT_CDN_VERSION = "0.1.0";
+var CIRCUIT_CDN_PACKAGE = "veilix-sdk";
+var CIRCUIT_CDN_VERSION = "0.2.0";
 function resolveCircuitPathsFromBase(base) {
   const root = base.endsWith("/") ? base : `${base}/`;
   return {