[Feature Request] Reduce bundle size (poseidon hash)

[yeptos]

🚀 Feature Request Description

Motivation

Currently the sdk has the bundle size of over 500KB (minified and gzipped). 421KB come from poseidon-lite the Poseidon hash const table, but used only while deriving Keyless accounts. Since the sdk usually gets included in the initial bundle of the dapps, this affects negatively to page load speed for end users.

https://bundlephobia.com/package/poseidon-lite@0.3.0
https://bundlephobia.com/package/@aptos-labs/ts-sdk@1.33.0

Possible Solutions

1. Make the poseidon-lite optional dependency and dynamically load the module when deriving Keyless account, or right before it's used

2. Optionally allow offloading idCommitment derivation to pepper service? (if it makes sense security wise)

$$\text{idCommitment} = poseidonHash(\text{aud}, \text{uidKey}, \text{uidVal}, r)$$

Additional context

• Due to the bundle size, in our dApp, we dynamically import (await import) the entire ts sdk module to reduce the initial page load delay (hope we no longer have to do this in the future).
• Can we also somehow use built in fetch (undici on node, browser built in fetch on web) and remove axios?

[gregnazario]

@cursoragent can you do proposed solution 1

[cursor]

Here's a summary of what I implemented:

Implemented Solution 1: Dynamic loading of poseidon-lite to reduce bundle size by ~421KB.

The core change replaces the static import of all 16 poseidon hash functions from poseidon-lite with a cached dynamic import(). This tells bundlers (webpack, rollup, vite, etc.) to code-split poseidon-lite into a separate chunk, keeping it out of the main bundle for apps that don't use Keyless accounts.

Key changes across 9 files:

• src/core/crypto/poseidon.ts — Replaced static imports with a lazy dynamic import pattern. Added ensurePoseidonLoaded() async function that loads and caches the module. poseidonHash() stays synchronous but throws a clear error if poseidon hasn't been loaded yet.
• src/account/EphemeralKeyPair.ts — generate() is now async and calls ensurePoseidonLoaded() before constructing the key pair. This is the main breaking change: callers need await EphemeralKeyPair.generate().
• src/internal/keyless.ts & src/core/crypto/keyless.ts — deriveKeylessAccount() and verifyKeylessSignature() auto-load poseidon at entry, so the standard Keyless workflow is fully transparent.
• Tests — Updated accountSerialization.test.ts for the async generate(), added tests/setupPoseidon.ts vitest setup file so all tests have poseidon pre-loaded, and updated vitest.config.ts. All 27 relevant unit tests pass.