@arcanetech/privacy-sdk-stellar 0.2.3 → 0.4.1

package/generated/contract/README.md

@@ -6,9 +6,9 @@ This library was automatically generated by Soroban CLI using a command similar
 
 ```bash
 soroban contract bindings ts \
-  --rpc-url https://soroban-testnet.stellar.org \
-  --network-passphrase "Test SDF Network ; September 2015" \
-  --contract-id CBVQTSTSIJ4UZMN5FQBFHPUIYSW3ATGSP57BZDJNKTOBNQODQTRGE4K5 \
+  --rpc-url INSERT_RPC_URL_HERE \
+  --network-passphrase "INSERT_NETWORK_PASSPHRASE_HERE" \
+  --contract-id INSERT_CONTRACT_ID_HERE \
   --output-dir ./path/to/contract
 ```
 
@@ -30,7 +30,7 @@ However, we've actually encountered [frustration](https://github.com/stellar/sor
 
 ```json
 "scripts": {
-  "postinstall": "soroban contract bindings ts --rpc-url https://soroban-testnet.stellar.org --network-passphrase \"Test SDF Network ; September 2015\" --id CBVQTSTSIJ4UZMN5FQBFHPUIYSW3ATGSP57BZDJNKTOBNQODQTRGE4K5 --name contract"
+  "postinstall": "soroban contract bindings ts --rpc-url INSERT_RPC_URL_HERE --network-passphrase \"INSERT_NETWORK_PASSPHRASE_HERE\" --id INSERT_CONTRACT_ID_HERE --name contract"
 }
 ```
 

package/generated/contract/dist/index.d.ts

@@ -1,63 +1,9 @@
 import { Buffer } from "buffer";
 import { AssembledTransaction, Client as ContractClient, ClientOptions as ContractClientOptions, MethodOptions, Result } from "@stellar/stellar-sdk/contract";
-import type { u32, i128, Option } from "@stellar/stellar-sdk/contract";
+import type { u32, u64, i128, Option } from "@stellar/stellar-sdk/contract";
 export * from "@stellar/stellar-sdk";
 export * as contract from "@stellar/stellar-sdk/contract";
 export * as rpc from "@stellar/stellar-sdk/rpc";
-export declare const networks: {
-    readonly testnet: {
-        readonly networkPassphrase: "Test SDF Network ; September 2015";
-        readonly contractId: "CBVQTSTSIJ4UZMN5FQBFHPUIYSW3ATGSP57BZDJNKTOBNQODQTRGE4K5";
-    };
-};
-/**
- * Per-application audit public key allowlist entry (runtime/config state).
- */
-export interface AppAuditState {
-    audit_public_key_x: Buffer;
-    audit_public_key_y: Buffer;
-    enabled: boolean;
-}
-/**
- * Ephemeral BabyJubJub / ECDH point (not hashed into the Merkle tree).
- */
-export interface EphemeralKeyCoords {
-    x: Buffer;
-    y: Buffer;
-}
-/**
- * Storage key for tree leaves — each leaf stored by index for O(1) write on deposit.
- */
-export type TreeDataKey = {
-    tag: "Leaf";
-    values: readonly [u32];
-} | {
-    tag: "LeafCount";
-    values: void;
-} | {
-    tag: "LeafEphemeral";
-    values: readonly [u32];
-} | {
-    tag: "PairwiseFrontier";
-    values: void;
-};
-/**
- * Storage key for nullifiers — each nullifier hash maps to bool (consumed or not).
- */
-export type NulifierDataKey = {
-    tag: "Nulifier";
-    values: readonly [Buffer];
-};
-/**
- * Ring buffer of historical Merkle roots (for proofs generated against recent states).
- */
-export type RootHistoryKey = {
-    tag: "CurrentRootIndex";
-    values: void;
-} | {
-    tag: "Root";
-    values: readonly [u32];
-};
 export declare const Errors: {
     1: {
         message: string;
@@ -108,66 +54,149 @@ export declare const Errors: {
         message: string;
     };
     /**
-     * Public note audit key is not registered for any enabled application.
+     * Reserved (H1): on-chain application audit-key allowlist removed. Do not reuse.
      */
     13: {
         message: string;
     };
     /**
-     * Public note audit key coordinates are not a valid BabyJubJub point.
+     * Reserved (H1): on-chain application audit-key allowlist removed. Do not reuse.
      */
     14: {
         message: string;
     };
-};
-export interface OutputNoteEventPayload {
-    ciphertext: Buffer;
-    ephemeral_x: Buffer;
-    ephemeral_y: Buffer;
-    output_index: u32;
-    tag: Buffer;
-}
-export declare const Groth16Error: {
-    0: {
+    /**
+     * No `ZkConfig` is registered for the requested nonce.
+     */
+    15: {
+        message: string;
+    };
+    /**
+     * The `ZkConfig` for the requested nonce has been deprecated by the admin.
+     */
+    16: {
+        message: string;
+    };
+    /**
+     * `add_zk_config` was called with a `nonce` that already has a config registered.
+     */
+    17: {
+        message: string;
+    };
+    /**
+     * `add_zk_config` shape parameters are inconsistent (odd `n_outs`, insufficient
+     * `n_audit_slots`, an `audit_offset`/`output_note_offset` that doesn't match the
+     * formula-derived value, or a VK whose `ic` length doesn't match the shape).
+     */
+    18: {
+        message: string;
+    };
+    /**
+     * `__constructor` was called with `tree_depth > MAX_TREE_DEPTH`.
+     */
+    19: {
+        message: string;
+    };
+    /**
+     * Duplicate nullifier hashes appear in a single `transact` public-signal vector (C3).
+     */
+    20: {
+        message: string;
+    };
+    /**
+     * Calldata escrow recipient does not match the public-signal escrow limbs.
+     */
+    21: {
+        message: string;
+    };
+    /**
+     * A sweep (non-zero public escrow recipient) requires a registry record for that account.
+     */
+    22: {
         message: string;
     };
 };
 /**
- * Plaintext note fields stored in registry for onboarding claim.
+ * Admin-managed, nonce-keyed ZK circuit configuration: verification key plus every dynamic
+ * shape parameter of the `Transaction(...)` circuit instantiation used to verify a `transact`
+ * call for that nonce (see `circuits/main.circom` / `libs/zk::ZkLayoutParams`).
  */
-export interface PlaintextNote {
-    asset_hi: Buffer;
-    asset_lo: Buffer;
-    /**
-   * Must remain `None`; registry rejects payloads that expose the sender ephemeral scalar.
-   */
-    deposited_ephemeral_scalar: Option<Buffer>;
-    nullifier: Buffer;
-    secret: Buffer;
-    value: i128;
-}
-export interface PendingNotePayload {
-    notes: Array<PlaintextNote>;
+export interface ZkConfig {
+    audit_offset: u32;
+    deprecated: boolean;
+    n_audit_slots: u32;
+    n_ins: u32;
+    n_outs: u32;
+    note_audit_len: u32;
+    note_output_len: u32;
+    output_note_offset: u32;
+    public_n_inputs: u32;
+    public_n_outputs: u32;
+    vk_bytes: Buffer;
 }
-export interface PrivateAddressRegistration {
-    owner: string;
-    public_key_x: Buffer;
-    public_key_y: Buffer;
-}
-export type OptionalPrivateAddressRegistration = {
-    tag: "None";
+/**
+ * Storage key for tree leaves — each leaf stored by index for O(1) write on deposit.
+ */
+export type TreeDataKey = {
+    tag: "Leaf";
+    values: readonly [u32];
+} | {
+    tag: "LeafCount";
     values: void;
 } | {
-    tag: "Some";
-    values: readonly [PrivateAddressRegistration];
+    tag: "LeafEphemeral";
+    values: readonly [u32];
+} | {
+    tag: "PairwiseFrontier";
+    values: void;
 };
-export interface OnboardingPayload {
-    encrypted_private_key: Buffer;
-    notes: PendingNotePayload;
-    owner: string;
-    private_address_registration: OptionalPrivateAddressRegistration;
-    temp_public_key_x: Buffer;
-    temp_public_key_y: Buffer;
+/**
+ * Persistent storage key for the per-nonce [`ZkConfig`] registry.
+ */
+export type ZkConfigKey = {
+    tag: "Config";
+    values: readonly [u64];
+};
+/**
+ * Ring buffer of historical Merkle roots (for proofs generated against recent states).
+ */
+export type RootHistoryKey = {
+    tag: "CurrentRootIndex";
+    values: void;
+} | {
+    tag: "Root";
+    values: readonly [u32];
+};
+/**
+ * Storage key for nullifiers — each nullifier hash maps to bool (consumed or not).
+ */
+export type NulifierDataKey = {
+    tag: "Nulifier";
+    values: readonly [Buffer];
+};
+/**
+ * Ephemeral BabyJubJub / ECDH point (not hashed into the Merkle tree).
+ */
+export interface EphemeralKeyCoords {
+    x: Buffer;
+    y: Buffer;
+}
+export interface AuditSlotEventPayload {
+    ciphertext: Buffer;
+    ephemeral_x: Buffer;
+    ephemeral_y: Buffer;
+    tag: Buffer;
+}
+export interface OutputNoteEventPayload {
+    ciphertext: Buffer;
+    ephemeral_x: Buffer;
+    ephemeral_y: Buffer;
+    output_index: u32;
+    tag: Buffer;
+}
+export interface KytPassageRecord {
+    consumed: boolean;
+    expires_at_ledger: u32;
 }
 export interface PrivateAddressRecord {
     owner: string;
@@ -175,105 +204,155 @@ export interface PrivateAddressRecord {
     public_key_y: Buffer;
     updated_at_ledger: u32;
 }
-export interface PendingNullifierRecord {
-    created_at_ledger: u32;
-    created_by: string;
-    encrypted_private_key: Buffer;
-    note: PlaintextNote;
-    owner: string;
-    temp_public_key_x: Buffer;
-    temp_public_key_y: Buffer;
-}
-export interface KytPassageRecord {
-    expires_at_ledger: u32;
-}
 export interface KytPassageAuthorization {
     expiration_ledger: u32;
     signature: Buffer;
 }
+export interface PrivateAddressRegistration {
+    owner: string;
+    public_key_x: Buffer;
+    public_key_y: Buffer;
+}
+export declare const Groth16Error: {
+    0: {
+        message: string;
+    };
+    /**
+     * `Proof::from_bytes` received a `proof_bytes` argument that is too short (or otherwise
+     * fails to parse as `a || b || c`) for the fixed G1/G2 encoding lengths.
+     */
+    1: {
+        message: string;
+    };
+    /**
+     * `PublicSignals::from_bytes` received a length prefix that does not match the remaining
+     * payload (too short, truncated Fr limbs, or a claimed length that overflows).
+     */
+    2: {
+        message: string;
+    };
+};
 export interface Client {
     /**
      * Construct and simulate a transact transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
      * Single entrypoint: verifies `circuits/main.circom` Groth16 proof and public signals, checks
      * tree root and nullifiers, appends new output commitments (with ephemeral keys, not in Merkle),
-     * optionally forwards onboarding payload to the registry, then applies public token deposits /
-     * withdrawals: `publicDepositedAssets` + `publicDeposits` pull from `from`, and
-     * `publicWithdrawnAssets` + `publicWithdrawals` send to the Stellar account from
-     * `withdrawAddressHi` / `withdrawAddressLo`.
+     * then applies public token deposits / withdrawals: `publicDepositedAssets` + `publicDeposits`
+     * pull from `from`, and `publicWithdrawnAssets` + `publicWithdrawals` send to the Stellar
+     * account from `withdrawAddressHi` / `withdrawAddressLo`.
      *
-     * Asset ids: Stellar **contract** token `C...` addresses encoded as two field elements (same 32-byte
-     * split as account keys — see `circuits/main.circom`).
+     * The proof-bound escrow recipient reconstructed from public signals is the only
+     * authorization subject. Both limbs zero means a non-sweep: both sweep output owner
+     * coordinates must also be zero. A nonzero pair is a sweep: that account must
+     * `require_auth()` (host account credentials, so multisig and rotated signers work; a
+     * revoked key cannot), must already have a private address in the registry, and both
+     * sweep output owner coordinates must equal that registry key.
      *
-     * Withdraw destination account: Stellar **account** Ed25519 key (G-address strkey payload) split into two
-     * public field elements `withdrawAddressHi` / `withdrawAddressLo` — big-endian `u128` chunks
-     * `bytes[0..16]` and `bytes[16..32]` (see `circuits/main.circom`). Avoids mod-`r` loss from a single `Fr`.
+     * Asset ids: Stellar **contract** token `C...` addresses encoded as two field elements (same 32-byte
+     * split as account keys — see `cir
      */
-    transact: ({ from, proof_bytes, pub_signals_bytes, onboarding, kyt_authorization }: {
+    transact: ({ from, nonce, proof_bytes, pub_signals_bytes, ciphertext_bytes, kyt_authorization }: {
         from: string;
+        nonce: u64;
         proof_bytes: Buffer;
         pub_signals_bytes: Buffer;
-        onboarding: Option<OnboardingPayload>;
+        ciphertext_bytes: Buffer;
         kyt_authorization: Option<KytPassageAuthorization>;
     }, options?: MethodOptions) => Promise<AssembledTransaction<Result<void>>>;
     /**
-     * Construct and simulate a set_kyt_registry transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Construct and simulate a get_admin transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Gets the admin address (the contract deployer)
      */
-    set_kyt_registry: ({ admin, kyt_registry }: {
-        admin: string;
-        kyt_registry: string;
-    }, options?: MethodOptions) => Promise<AssembledTransaction<null>>;
+    get_admin: (options?: MethodOptions) => Promise<AssembledTransaction<string>>;
     /**
-     * Construct and simulate a get_kyt_registry transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Construct and simulate a get_registry transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
      */
-    get_kyt_registry: (options?: MethodOptions) => Promise<AssembledTransaction<Option<string>>>;
+    get_registry: (options?: MethodOptions) => Promise<AssembledTransaction<Option<string>>>;
     /**
-     * Construct and simulate a require_kyt_passage transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Construct and simulate a set_registry transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
      */
-    require_kyt_passage: ({ passage_id }: {
-        passage_id: Buffer;
-    }, options?: MethodOptions) => Promise<AssembledTransaction<Result<void>>>;
+    set_registry: ({ registry }: {
+        registry: string;
+    }, options?: MethodOptions) => Promise<AssembledTransaction<null>>;
     /**
-     * Construct and simulate a set_app_audit_key transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Construct and simulate a add_zk_config transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Registers a new per-nonce ZK circuit configuration (VK + full circuit shape). Admin-only;
+     * fails if `nonce` already has a config. Validates `n_outs` is even (leaves are inserted
+     * pairwise via `PairwiseLeanIMT::insert_two`), `n_audit_slots >= n_ins + n_outs`, that
+     * `audit_offset`/`output_note_offset` match the formula-derived layout, and that the VK's
+     * `ic` length matches the resulting total public-signal count.
      */
-    set_app_audit_key: ({ admin, application_id, audit_public_key_x, audit_public_key_y, enabled }: {
-        admin: string;
-        application_id: Buffer;
-        audit_public_key_x: Buffer;
-        audit_public_key_y: Buffer;
-        enabled: boolean;
-    }, options?: MethodOptions) => Promise<AssembledTransaction<null>>;
+    add_zk_config: ({ nonce, vk_bytes, n_ins, n_outs, public_n_inputs, public_n_outputs, n_audit_slots, note_audit_len, audit_offset, note_output_len, output_note_offset }: {
+        nonce: u64;
+        vk_bytes: Buffer;
+        n_ins: u32;
+        n_outs: u32;
+        public_n_inputs: u32;
+        public_n_outputs: u32;
+        n_audit_slots: u32;
+        note_audit_len: u32;
+        audit_offset: u32;
+        note_output_len: u32;
+        output_note_offset: u32;
+    }, options?: MethodOptions) => Promise<AssembledTransaction<Result<void>>>;
     /**
-     * Construct and simulate a get_app_audit_state transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Construct and simulate a get_zk_config transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Reads a registered ZK config (extending its persistent TTL), or `None` if absent.
      */
-    get_app_audit_state: ({ application_id }: {
-        application_id: Buffer;
-    }, options?: MethodOptions) => Promise<AssembledTransaction<Option<AppAuditState>>>;
+    get_zk_config: ({ nonce }: {
+        nonce: u64;
+    }, options?: MethodOptions) => Promise<AssembledTransaction<Option<ZkConfig>>>;
     /**
-     * Construct and simulate a set_registry transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Construct and simulate a is_known_root transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Returns true if `root` appears in the recent root history (ring buffer).
+     * All-zero bytes are never accepted.
      */
-    set_registry: ({ admin, registry }: {
-        admin: string;
-        registry: string;
-    }, options?: MethodOptions) => Promise<AssembledTransaction<null>>;
+    is_known_root: ({ root }: {
+        root: Buffer;
+    }, options?: MethodOptions) => Promise<AssembledTransaction<boolean>>;
     /**
-     * Construct and simulate a get_registry transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Construct and simulate a get_commitments transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Gets all commitments (leaves) in the merkle tree. Read-only view helper (not called from
+     * `transact`/`add_zk_config` or any other state-mutating entrypoint) intended for off-chain
+     * simulation/queries; its cost scales with `count`, which grows with real pool usage rather
+     * than with a single caller-controlled input, so it does not let one transaction consume a
+     * disproportionate share of a block's resources the way an admin/user-controlled shape
+     * parameter would. Acknowledged `dos-unbounded-operation` finding.
+     *
+     * `leaves` is a local in-memory `Vec` (`vec![&env]`), not persistent contract storage, so
+     * there is no storage-side access-control concern in the `push_back` below either;
+     * acknowledged `dos-unexpected-revert-with-storage` false positive. Both acknowledgments are
+     * function-level because neither detector respects a `#[allow]` placed on the loop/statement
+     * itself.
      */
-    get_registry: (options?: MethodOptions) => Promise<AssembledTransaction<Option<string>>>;
+    get_commitments: (options?: MethodOptions) => Promise<AssembledTransaction<Array<Buffer>>>;
     /**
      * Construct and simulate a get_merkle_root transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
      * Gets the current merkle root of the commitment tree.
      */
     get_merkle_root: (options?: MethodOptions) => Promise<AssembledTransaction<Buffer>>;
+    /**
+     * Construct and simulate a get_kyt_registry transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     */
+    get_kyt_registry: (options?: MethodOptions) => Promise<AssembledTransaction<Option<string>>>;
     /**
      * Construct and simulate a get_merkle_depth transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
      * Gets the current depth of the merkle tree
      */
     get_merkle_depth: (options?: MethodOptions) => Promise<AssembledTransaction<u32>>;
     /**
-     * Construct and simulate a get_commitment_count transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
-     * Gets the number of commitments (leaves) in the merkle tree
+     * Construct and simulate a set_kyt_registry transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
      */
-    get_commitment_count: (options?: MethodOptions) => Promise<AssembledTransaction<u32>>;
+    set_kyt_registry: ({ kyt_registry }: {
+        kyt_registry: string;
+    }, options?: MethodOptions) => Promise<AssembledTransaction<null>>;
+    /**
+     * Construct and simulate a get_token_balance transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Token balance held by this contract for a Stellar asset contract (`C...`).
+     */
+    get_token_balance: ({ token }: {
+        token: string;
+    }, options?: MethodOptions) => Promise<AssembledTransaction<i128>>;
     /**
      * Construct and simulate a get_leaf_ephemeral transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
      * Ephemeral key (x, y) for a leaf index, if present.
@@ -282,57 +361,50 @@ export interface Client {
         leaf_index: u32;
     }, options?: MethodOptions) => Promise<AssembledTransaction<Option<EphemeralKeyCoords>>>;
     /**
-     * Construct and simulate a get_pairwise_frontier transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
-     * Filled-subtree frontier after the last pairwise insert (reload on the next deposit).
+     * Construct and simulate a deprecate_zk_config transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Marks a registered ZK config as deprecated; subsequent `transact` calls referencing this
+     * `nonce` fail with [`Error::ZkConfigDeprecated`]. Admin-only.
      */
-    get_pairwise_frontier: (options?: MethodOptions) => Promise<AssembledTransaction<Array<Buffer>>>;
-    /**
-     * Construct and simulate a get_commitments transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
-     * Gets all commitments (leaves) in the merkle tree
-     */
-    get_commitments: (options?: MethodOptions) => Promise<AssembledTransaction<Array<Buffer>>>;
+    deprecate_zk_config: ({ nonce }: {
+        nonce: u64;
+    }, options?: MethodOptions) => Promise<AssembledTransaction<Result<void>>>;
     /**
-     * Construct and simulate a is_nulifier_hash_consumed transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
-     * Returns true if the given nullifier hash has already been consumed (used in a withdrawal).
+     * Construct and simulate a require_kyt_passage transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
      */
-    is_nulifier_hash_consumed: ({ hash }: {
-        hash: Buffer;
-    }, options?: MethodOptions) => Promise<AssembledTransaction<boolean>>;
+    require_kyt_passage: ({ passage_id }: {
+        passage_id: Buffer;
+    }, options?: MethodOptions) => Promise<AssembledTransaction<Result<void>>>;
     /**
-     * Construct and simulate a is_known_root transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
-     * Returns true if `root` appears in the recent root history (ring buffer).
-     * All-zero bytes are never accepted.
+     * Construct and simulate a get_commitment_count transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Gets the number of commitments (leaves) in the merkle tree
      */
-    is_known_root: ({ root }: {
-        root: Buffer;
-    }, options?: MethodOptions) => Promise<AssembledTransaction<boolean>>;
+    get_commitment_count: (options?: MethodOptions) => Promise<AssembledTransaction<u32>>;
     /**
-     * Construct and simulate a get_token_balance transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
-     * Token balance held by this contract for a Stellar asset contract (`C...`).
+     * Construct and simulate a get_pairwise_frontier transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Filled-subtree frontier after the last pairwise insert (reload on the next deposit).
      */
-    get_token_balance: ({ token }: {
-        token: string;
-    }, options?: MethodOptions) => Promise<AssembledTransaction<i128>>;
+    get_pairwise_frontier: (options?: MethodOptions) => Promise<AssembledTransaction<Array<Buffer>>>;
     /**
      * Construct and simulate a get_public_slot_config transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
-     * `publicNInputs` / `publicNOutputs` configured at deploy (must match the verification key circuit).
+     * `publicNInputs` / `publicNOutputs` for the nonce-`0` ("standard") ZK config.
+     * Panics with [`Error::ZkConfigNotFound`] when nonce `0` is unregistered. Prefer
+     * [`Self::get_zk_config`] for a specific nonce.
      */
     get_public_slot_config: (options?: MethodOptions) => Promise<AssembledTransaction<readonly [u32, u32]>>;
     /**
-     * Construct and simulate a get_admin transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
-     * Gets the admin address (the contract deployer)
+     * Construct and simulate a is_nulifier_hash_consumed transaction. Returns an `AssembledTransaction` object which will have a `result` field containing the result of the simulation. If this transaction changes contract state, you will need to call `signAndSend()` on the returned object.
+     * Returns true if the given nullifier hash has already been consumed (used in a withdrawal).
      */
-    get_admin: (options?: MethodOptions) => Promise<AssembledTransaction<string>>;
+    is_nulifier_hash_consumed: ({ hash }: {
+        hash: Buffer;
+    }, options?: MethodOptions) => Promise<AssembledTransaction<boolean>>;
 }
 export declare class Client extends ContractClient {
     readonly options: ContractClientOptions;
     static deploy<T = Client>(
     /** Constructor/Initialization Args for the contract's `__constructor` method */
-    { tree_depth, vk_bytes, public_n_inputs, public_n_outputs, admin }: {
+    { tree_depth, admin }: {
         tree_depth: u32;
-        vk_bytes: Buffer;
-        public_n_inputs: u32;
-        public_n_outputs: u32;
         admin: string;
     }, 
     /** Options for initializing a Client as well as for calling a method, with extras specific to deploying. */
@@ -347,23 +419,24 @@ export declare class Client extends ContractClient {
     constructor(options: ContractClientOptions);
     readonly fromJSON: {
         transact: (json: string) => AssembledTransaction<Result<void, import("@stellar/stellar-sdk/contract").ErrorMessage>>;
-        set_kyt_registry: (json: string) => AssembledTransaction<null>;
-        get_kyt_registry: (json: string) => AssembledTransaction<Option<string>>;
-        require_kyt_passage: (json: string) => AssembledTransaction<Result<void, import("@stellar/stellar-sdk/contract").ErrorMessage>>;
-        set_app_audit_key: (json: string) => AssembledTransaction<null>;
-        get_app_audit_state: (json: string) => AssembledTransaction<Option<AppAuditState>>;
-        set_registry: (json: string) => AssembledTransaction<null>;
+        get_admin: (json: string) => AssembledTransaction<string>;
         get_registry: (json: string) => AssembledTransaction<Option<string>>;
+        set_registry: (json: string) => AssembledTransaction<null>;
+        add_zk_config: (json: string) => AssembledTransaction<Result<void, import("@stellar/stellar-sdk/contract").ErrorMessage>>;
+        get_zk_config: (json: string) => AssembledTransaction<Option<ZkConfig>>;
+        is_known_root: (json: string) => AssembledTransaction<boolean>;
+        get_commitments: (json: string) => AssembledTransaction<Buffer<ArrayBufferLike>[]>;
         get_merkle_root: (json: string) => AssembledTransaction<Buffer<ArrayBufferLike>>;
+        get_kyt_registry: (json: string) => AssembledTransaction<Option<string>>;
         get_merkle_depth: (json: string) => AssembledTransaction<number>;
-        get_commitment_count: (json: string) => AssembledTransaction<number>;
+        set_kyt_registry: (json: string) => AssembledTransaction<null>;
+        get_token_balance: (json: string) => AssembledTransaction<bigint>;
         get_leaf_ephemeral: (json: string) => AssembledTransaction<Option<EphemeralKeyCoords>>;
+        deprecate_zk_config: (json: string) => AssembledTransaction<Result<void, import("@stellar/stellar-sdk/contract").ErrorMessage>>;
+        require_kyt_passage: (json: string) => AssembledTransaction<Result<void, import("@stellar/stellar-sdk/contract").ErrorMessage>>;
+        get_commitment_count: (json: string) => AssembledTransaction<number>;
         get_pairwise_frontier: (json: string) => AssembledTransaction<Buffer<ArrayBufferLike>[]>;
-        get_commitments: (json: string) => AssembledTransaction<Buffer<ArrayBufferLike>[]>;
-        is_nulifier_hash_consumed: (json: string) => AssembledTransaction<boolean>;
-        is_known_root: (json: string) => AssembledTransaction<boolean>;
-        get_token_balance: (json: string) => AssembledTransaction<bigint>;
         get_public_slot_config: (json: string) => AssembledTransaction<readonly [number, number]>;
-        get_admin: (json: string) => AssembledTransaction<string>;
+        is_nulifier_hash_consumed: (json: string) => AssembledTransaction<boolean>;
     };
 }