@p15/blind-mode

Protocol15's amount-privacy engine + orchestration. Sits on top of @p15/stealth (recipient privacy and discovery) and hides transfer amounts behind a pluggable proof backend.

• Backend seam (backend.ts): TransferProofBackend is the line between orchestration (stealth/announce/tx-grouping) and HOW amounts are hidden. The orchestration calls a backend only for proof generation + value-movement instructions, so engines are swappable without touching the UX.
• NoirBackend (noir/backend.ts): current engine. Noir circuits + Groth16 verification on Solana. Note model (commitments + nullifiers), no separate claim step.
• Note vault (note-vault.ts): non-revocable one-time custody for stealth outputs.
• pSOL (psol.ts): SOL <-> private-balance funding path constants + instruction builders.

Install

npm install @p15/blind-mode @p15/stealth

Backends

| Backend | Status | Role | |---------|--------|------| | NoirBackend | active | Noir/Groth16 amount privacy | | NativeCtBackend | stub | Token-2022 CT, if/when SF re-enables the ZK ElGamal program |

Local development

Not published yet — consumed locally via file: (see docs/local-dev.md). Depends on @p15/stealth; build that first.

npm install --legacy-peer-deps
npm test            # unit (offline)
npm run build
npm run example     # examples/private-swap-plan.ts (offline plan inspection)

Private swap details: docs/private-swap.md. Prover/ops: docs/prover.md.

Devnet only. Not for real funds.