@cloak.dev/sdk 0.1.3 → 0.1.5

package/dist/index.js

@@ -877,6 +877,71 @@ function parseRelayErrorResponse(responseText) {
     return { isRootNotFound: false };
   }
 }
+var UtxoAlreadySpentError = class extends Error {
+  constructor(message, spentUtxoCommitments = []) {
+    super(message);
+    this.spentUtxoCommitments = spentUtxoCommitments;
+    this.name = "UtxoAlreadySpentError";
+  }
+};
+var SanctionsQuoteError = class extends Error {
+  constructor(message, onChainCode, subKind) {
+    super(message);
+    this.onChainCode = onChainCode;
+    this.subKind = subKind;
+    this.name = "SanctionsQuoteError";
+  }
+};
+var RelayInternalError = class extends Error {
+  constructor(message, relayMessage, httpStatus, cachedTreeFromChain) {
+    super(message);
+    this.relayMessage = relayMessage;
+    this.httpStatus = httpStatus;
+    this.cachedTreeFromChain = cachedTreeFromChain;
+    this.name = "RelayInternalError";
+  }
+};
+function classifyRelayError(responseText, httpStatus) {
+  let inner = "";
+  try {
+    const parsed = JSON.parse(responseText);
+    inner = parsed?.message ?? "";
+  } catch {
+    inner = responseText;
+  }
+  const haystack = inner.toLowerCase();
+  if (haystack.includes("0x1020") || haystack.includes("doublespend")) {
+    return new UtxoAlreadySpentError(
+      "This shielded balance was already spent. The UTXO's nullifier is registered on-chain \u2014 typically means you spent it via another session or device. Run verifyUtxos() to reconcile local state."
+    );
+  }
+  if (haystack.includes("0x10b0") || haystack.includes("rangequoteexpired")) {
+    return new SanctionsQuoteError(
+      "Range sanctions quote expired before the on-chain program processed the transaction. The relay's quote-expiry window is too short relative to proof-gen + confirmation latency, or on-chain clock drifted. Retry the send; the relay will issue a fresh quote.",
+      4272,
+      "expired"
+    );
+  }
+  if (haystack.includes("0x10b2") || haystack.includes("rangequotewalletmismatch")) {
+    return new SanctionsQuoteError(
+      "Range sanctions quote's wallet doesn't match the on-chain expected wallet. Indicates a relay config drift \u2014 the sender used for quote signing doesn't match the program's pool.range_signer / fee payer. Relay operators must fix; caller retry will not help.",
+      4274,
+      "wallet_mismatch"
+    );
+  }
+  if (haystack.includes("0x10b3") || haystack.includes("rangequotemissinged25519")) {
+    return new SanctionsQuoteError(
+      "Transaction reached the on-chain program without the required Ed25519 sanctions quote instruction. This is a relay bug \u2014 the relay constructed the tx without attaching the signed quote. Caller retry will not help.",
+      4275,
+      "missing_ix"
+    );
+  }
+  return new RelayInternalError(
+    `Relay returned ${httpStatus ?? "an error"}: ${inner || responseText}`,
+    inner || responseText,
+    httpStatus
+  );
+}
 var ShieldPoolErrors = {
   // Root management errors
   4096: "Invalid Merkle root",
@@ -4173,6 +4238,63 @@ async function decryptComplianceMetadataWithMasterKey(encrypted, masterComplianc
   return decryptWithSharedSecret(payload, sharedSecret);
 }
 
+// src/utils/verify-utxos.ts
+async function verifyUtxos(utxos, connection, programId, commitment = "confirmed") {
+  const checkable = [];
+  const skipped = [];
+  for (const utxo of utxos) {
+    if (utxo.commitment === void 0 || utxo.mintAddress === void 0 || utxo.keypair === void 0 || utxo.keypair.privateKey === void 0) {
+      skipped.push(utxo);
+      continue;
+    }
+    try {
+      const nullifierBig = await computeNullifier(utxo);
+      const nullifierHex = nullifierBig.toString(16).padStart(64, "0");
+      const nullifierBytes = Buffer.from(nullifierHex, "hex");
+      const { pool } = getShieldPoolPDAs(programId, utxo.mintAddress);
+      const [pda] = getNullifierPDA(pool, nullifierBytes, programId);
+      checkable.push({ utxo, pda });
+    } catch {
+      skipped.push(utxo);
+    }
+  }
+  if (checkable.length === 0) {
+    return { spent: [], unspent: [], skipped };
+  }
+  const CHUNK = 100;
+  const infos = [];
+  for (let i = 0; i < checkable.length; i += CHUNK) {
+    const page = checkable.slice(i, i + CHUNK).map((e) => e.pda);
+    const pageInfos = await connection.getMultipleAccountsInfo(page, commitment);
+    infos.push(...pageInfos);
+  }
+  const spent = [];
+  const unspent = [];
+  for (let i = 0; i < checkable.length; i++) {
+    if (infos[i] !== null) {
+      spent.push(checkable[i].utxo);
+    } else {
+      unspent.push(checkable[i].utxo);
+    }
+  }
+  return { spent, unspent, skipped };
+}
+async function preflightNullifiers(utxos, connection, programId, commitment = "confirmed") {
+  if (utxos.length === 0) return;
+  const result = await verifyUtxos(utxos, connection, programId, commitment);
+  if (result.spent.length > 0) {
+    const allCommitments = result.spent.map(
+      (u) => u.commitment !== void 0 ? u.commitment.toString(16).padStart(64, "0") : "<unknown>"
+    );
+    const preview = allCommitments.slice(0, 5);
+    const extra = allCommitments.length > preview.length ? ` (+${allCommitments.length - preview.length} more)` : "";
+    throw new UtxoAlreadySpentError(
+      `Pre-flight detected ${allCommitments.length} already-spent UTXO(s). First spent commitment(s): ${preview.join(", ")}${extra}. Call verifyUtxos() and remove these from local state before retrying.`,
+      allCommitments
+    );
+  }
+}
+
 // src/services/risk-oracle.ts
 function buildRangeRiskScoreJob(OracleJob, walletAddress) {
   return OracleJob.fromObject({
@@ -4517,13 +4639,19 @@ async function buildMerkleTree(commitments, height = MERKLE_TREE_HEIGHT2) {
 }
 
 // src/utils/relay-client.ts
-import bs58 from "bs58";
+import _bs58 from "bs58";
+var bs58 = _bs58.default || _bs58;
 var TRANSACT_TAG = 0;
 var TRANSACT_SWAP_TAG = 1;
-var DEPOSIT_TAG = 1;
 var PROOF_LEN = 256;
 var PUBLIC_INPUTS_LEN = 264;
 var COMMITMENTS_OFFSET = 168;
+function isAllZero(b) {
+  for (let i = 0; i < b.length; i++) {
+    if (b[i] !== 0) return false;
+  }
+  return true;
+}
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_MAX_RETRIES = 3;
 async function fetchWithRetry(url, options = {}) {
@@ -4661,24 +4789,20 @@ async function buildMerkleTreeFromRelay(relayUrl, options) {
 function extractCommitmentsFromInstruction(data) {
   if (data.length === 0) return [];
   const tag = data[0];
-  if (tag === TRANSACT_TAG || tag === TRANSACT_SWAP_TAG) {
-    const publicInputsStart = 1 + PROOF_LEN;
-    const publicInputsEnd = publicInputsStart + PUBLIC_INPUTS_LEN;
-    if (data.length < publicInputsEnd) return [];
-    const publicInputs = data.slice(publicInputsStart, publicInputsEnd);
-    const commitments = [];
-    const c0 = publicInputs.slice(COMMITMENTS_OFFSET, COMMITMENTS_OFFSET + 32);
-    const c1 = publicInputs.slice(COMMITMENTS_OFFSET + 32, COMMITMENTS_OFFSET + 64);
-    commitments.push(c0);
-    commitments.push(c1);
-    return commitments;
-  }
-  if (tag === DEPOSIT_TAG) {
-    if (data.length < 1 + 8 + 32) return [];
-    const commitment = data.slice(1 + 8, 1 + 8 + 32);
-    return [commitment];
-  }
-  return [];
+  if (tag !== TRANSACT_TAG && tag !== TRANSACT_SWAP_TAG) return [];
+  const publicInputsStart = 1 + PROOF_LEN;
+  const publicInputsEnd = publicInputsStart + PUBLIC_INPUTS_LEN;
+  if (data.length < publicInputsEnd) return [];
+  const publicInputs = data.slice(publicInputsStart, publicInputsEnd);
+  const c0 = publicInputs.slice(COMMITMENTS_OFFSET, COMMITMENTS_OFFSET + 32);
+  const c1 = publicInputs.slice(
+    COMMITMENTS_OFFSET + 32,
+    COMMITMENTS_OFFSET + 64
+  );
+  const out = [];
+  if (!isAllZero(c0)) out.push(c0);
+  if (!isAllZero(c1)) out.push(c1);
+  return out;
 }
 function isBrowser() {
   return typeof globalThis !== "undefined" && typeof globalThis.window !== "undefined";
@@ -6298,6 +6422,7 @@ async function transact(params, options) {
   if (outputUtxos.length > 2) {
     throw new Error("Maximum 2 output UTXOs allowed");
   }
+  await preflightNullifiers(inputUtxos, connection, programId);
   const mint = inputUtxos.find((u) => u.amount > 0)?.mintAddress ?? outputUtxos.find((u) => u.amount > 0)?.mintAddress ?? NATIVE_SOL_MINT;
   const paddedInputs = [...inputUtxos];
   while (paddedInputs.length < 2) {
@@ -6368,7 +6493,7 @@ async function transact(params, options) {
       }
       merkleTree = null;
     }
-    if (needsTreeForProof && relayUrl && !relayTreeDisabledForMint && !forceChainIndexing && (forceRefresh || !merkleTree)) {
+    if (needsTreeForProof && relayUrl && !relayTreeDisabledForMint && !forceChainIndexing && (forceRefresh || !merkleTree) && !hasCachedTree) {
       try {
         const shouldRequestRelaySync = forceSync || requiredRelayIndex >= 0;
         const syncTimeoutMs = shouldRequestRelaySync ? Math.min(3e4, relayRequestTimeoutMs()) : 3500;
@@ -6393,7 +6518,7 @@ async function transact(params, options) {
         merkleTree = null;
       }
     }
-    if (merkleTree && treeState) {
+    if (merkleTree && treeState && !hasCachedTree) {
       const relayRoot = merkleTree.root().toString(16).padStart(64, "0");
       const lengthDiff = treeState.nextIndex - merkleTree.length;
       if (merkleTree.length === 0) {
@@ -6524,7 +6649,7 @@ async function transact(params, options) {
         const disableNearTipFallbackEnv = typeof process !== "undefined" && !!process.env && (process.env.CLOAK_DISABLE_NEAR_TIP_ONCHAIN_PROOF === "1" || process.env.CLOAK_DISABLE_NEAR_TIP_ONCHAIN_PROOF === "true");
         const hasSiblingHints = !!utxo.siblingCommitment || !!utxo.leftSiblingCommitment;
         const baseNearTipEligible = chainDistanceFromTip !== null && chainDistanceFromTip >= 0 && chainDistanceFromTip <= nearTipMaxDistance;
-        const allowNearTipOnChainFallback = relayTreeDisabledForMint && !disableNearTipFallbackEnv && baseNearTipEligible && (forceEnableNearTipFallbackEnv || useSiblingInfo && hasSiblingHints);
+        let allowNearTipOnChainFallback = relayTreeDisabledForMint && !disableNearTipFallbackEnv && baseNearTipEligible && (forceEnableNearTipFallbackEnv || useSiblingInfo && hasSiblingHints);
         if (!relayTreeDisabledForMint && !useSiblingInfo) {
           onProgress?.(`Relay tree missing index ${utxo.index} (length: ${treeLength}) with sibling cache disabled; proof may require retry after relay sync.`);
         } else if (!relayTreeDisabledForMint && relayUrl && !forceChainIndexing && utxo.index >= treeLength && !allowNearTipOnChainFallback) {
@@ -6535,9 +6660,10 @@ async function transact(params, options) {
           onProgress?.(`Relay tree is lagging (missing index ${utxo.index}, length: ${treeLength}); using guarded on-chain proof fallback.`);
         }
         if (relayUrl && !relayTreeDisabledForMint && !forceChainIndexing && utxo.index >= treeLength && !allowNearTipOnChainFallback) {
-          throw new Error(
-            `Relay tree missing required commitment index ${utxo.index} (tree length: ${treeLength}); waiting for relay sync is required.`
+          onProgress?.(
+            `Relay tree missing index ${utxo.index} (tree length: ${treeLength}) \u2014 falling through to on-chain proof.`
           );
+          allowNearTipOnChainFallback = true;
         }
         if (allowNearTipOnChainFallback && relayTreeDisabledForMint) {
           onProgress?.(
@@ -6771,11 +6897,19 @@ async function transact(params, options) {
         onProgress?.(`Merkle proof error (stale sibling data), will regenerate with fresh tree...`);
         lastError = new Error(`Circuit assertion failed: ${errorMsg}`);
         if (forceChainIndexing) {
-          onProgress?.("On-chain fallback proof failed; returning to relay-sync mode.");
-          forceChainIndexing = false;
+          onProgress?.("On-chain frontier proof failed; escalating to full chain tree rebuild...");
+          try {
+            merkleTree = await buildMerkleTreeFromChain(connection, programId, pdas.merkleTree, onProgress);
+            onProgress?.(`Chain tree rebuilt with ${merkleTree.length} leaves.`);
+          } catch (chainBuildErr) {
+            onProgress?.(`Chain tree rebuild failed (${chainBuildErr?.message?.slice(0, 80)}); returning to relay-sync mode.`);
+            forceChainIndexing = false;
+            merkleTree = null;
+          }
+        } else {
+          merkleTree = null;
         }
         treeState = null;
-        merkleTree = null;
         useSiblingInfo = false;
         const waitMs = Math.min(retryDelayMs * Math.pow(2, Math.min(submissionAttempts, 4)), 5e3);
         if (waitMs > 0) {
@@ -7116,25 +7250,68 @@ async function transact(params, options) {
     }
   }
   if (lastError) {
+    const classified = classifyRelayError(lastError.message);
+    const isMerkleClass = !(classified instanceof UtxoAlreadySpentError) && !(classified instanceof SanctionsQuoteError) && !isRootNotFoundError2(lastError);
+    if (!IS_BROWSER2 && isMerkleClass && relayUrl) {
+      onProgress?.(
+        "All relay-tree attempts failed. Rebuilding merkle tree from chain as last resort..."
+      );
+      try {
+        const [merkleTreePda] = PublicKey6.findProgramAddressSync(
+          [Buffer.from("merkle_tree"), mint.toBuffer()],
+          programId
+        );
+        const chainTree = await buildMerkleTreeFromChain(
+          connection,
+          programId,
+          merkleTreePda,
+          onProgress
+        );
+        const chainRootHex = chainTree.root().toString(16).padStart(64, "0");
+        onProgress?.(
+          `Chain-rebuilt tree root: ${chainRootHex.substring(0, 16)}... \u2014 attached to error for caller retry`
+        );
+        throw new RelayInternalError(
+          `All relay-tree attempts failed. Chain-rebuilt tree available (root ${chainRootHex.substring(0, 16)}...). Retry this call with options.cachedMerkleTree = err.cachedTreeFromChain. Original error: ${lastError.message}`,
+          lastError.message,
+          void 0,
+          chainTree
+        );
+      } catch (e) {
+        if (e instanceof RelayInternalError) throw e;
+        onProgress?.(
+          `Chain-replay fallback failed: ${e instanceof Error ? e.message : String(e)}`
+        );
+      }
+    }
     if (isRootNotFoundError2(lastError)) {
-      throw new Error(`Transaction failed after ${maxRootRetries + 1} retries: ${lastError.message}`);
+      throw new Error(
+        `Transaction failed after ${maxRootRetries + 1} retries: ${lastError.message}`
+      );
     }
-    throw new Error(`Transaction failed: ${lastError.message}`);
+    throw classified;
   }
   if (relayUrl && outputCommitments.length >= 2) {
-    const reconcileSeedIndices = commitmentIndices[0] >= 0 && commitmentIndices[1] >= 0 ? commitmentIndices : lastObservedNextIndexForOutputs !== null ? [lastObservedNextIndexForOutputs, lastObservedNextIndexForOutputs + 1] : commitmentIndices;
-    const reconciledIndices = await reconcileCommitmentIndicesWithRelay(
-      relayUrl,
-      mint,
-      reconcileSeedIndices,
-      [outputCommitments[0], outputCommitments[1]],
-      onProgress
-    );
-    if (reconciledIndices[0] !== commitmentIndices[0] || reconciledIndices[1] !== commitmentIndices[1]) {
+    const hasOnChainIndices = commitmentIndices[0] >= 0 && commitmentIndices[1] >= 0;
+    if (!hasOnChainIndices) {
+      const reconcileSeedIndices = lastObservedNextIndexForOutputs !== null ? [lastObservedNextIndexForOutputs, lastObservedNextIndexForOutputs + 1] : commitmentIndices;
+      const reconciledIndices = await reconcileCommitmentIndicesWithRelay(
+        relayUrl,
+        mint,
+        reconcileSeedIndices,
+        [outputCommitments[0], outputCommitments[1]],
+        onProgress
+      );
+      if (reconciledIndices[0] !== commitmentIndices[0] || reconciledIndices[1] !== commitmentIndices[1]) {
+        onProgress?.(
+          `Adjusted commitment indices after relay reconciliation: [${commitmentIndices[0]}, ${commitmentIndices[1]}] -> [${reconciledIndices[0]}, ${reconciledIndices[1]}]`
+        );
+        commitmentIndices = reconciledIndices;
+      }
+    } else {
       onProgress?.(
-        `Adjusted commitment indices after relay reconciliation: [${commitmentIndices[0]}, ${commitmentIndices[1]}] -> [${reconciledIndices[0]}, ${reconciledIndices[1]}]`
+        `Using on-chain commitment indices [${commitmentIndices[0]}, ${commitmentIndices[1]}] (skipping relay reconciliation).`
       );
-      commitmentIndices = reconciledIndices;
     }
   }
   const siblingCommitments = [
@@ -7416,6 +7593,7 @@ async function swapUtxo(params, options) {
   if (inputUtxos.length > 2) {
     throw new Error("Maximum 2 input UTXOs allowed");
   }
+  await preflightNullifiers(inputUtxos, connection, programId);
   const outputMintAccount = await connection.getAccountInfo(outputMint, {
     commitment: "confirmed"
   });
@@ -7487,7 +7665,7 @@ async function swapUtxo(params, options) {
       }
       merkleTree = null;
     }
-    if (needsTreeForProof && relayUrl && !relayTreeDisabledForMint && !forceChainIndexing && (forceRefresh || !merkleTree)) {
+    if (needsTreeForProof && relayUrl && !relayTreeDisabledForMint && !forceChainIndexing && (forceRefresh || !merkleTree) && !hasCachedTree) {
       try {
         const shouldRequestRelaySync = forceSync || requiredRelayIndex >= 0;
         const syncTimeoutMs = shouldRequestRelaySync ? Math.min(3e4, relayRequestTimeoutMs()) : 3500;
@@ -7512,7 +7690,7 @@ async function swapUtxo(params, options) {
         merkleTree = null;
       }
     }
-    if (merkleTree && merkleState) {
+    if (merkleTree && merkleState && !hasCachedTree) {
       const relayRoot = merkleTree.root().toString(16).padStart(64, "0");
       const lengthDiff = merkleState.nextIndex - merkleTree.length;
       if (merkleTree.length === 0) {
@@ -7640,7 +7818,7 @@ async function swapUtxo(params, options) {
         const disableNearTipFallbackEnv = typeof process !== "undefined" && !!process.env && (process.env.CLOAK_DISABLE_NEAR_TIP_ONCHAIN_PROOF === "1" || process.env.CLOAK_DISABLE_NEAR_TIP_ONCHAIN_PROOF === "true");
         const hasSiblingHints = !!utxo.siblingCommitment || !!utxo.leftSiblingCommitment;
         const baseNearTipEligible = chainDistanceFromTip !== null && chainDistanceFromTip >= 0 && chainDistanceFromTip <= nearTipMaxDistance;
-        const allowNearTipOnChainFallback = relayTreeDisabledForMint && !disableNearTipFallbackEnv && baseNearTipEligible && (forceEnableNearTipFallbackEnv || useSiblingInfo && hasSiblingHints);
+        let allowNearTipOnChainFallback = relayTreeDisabledForMint && !disableNearTipFallbackEnv && baseNearTipEligible && (forceEnableNearTipFallbackEnv || useSiblingInfo && hasSiblingHints);
         if (!relayTreeDisabledForMint && !useSiblingInfo) {
           onProgress?.(`Relay tree missing index ${utxo.index} (length: ${treeLength}) with sibling cache disabled; proof may require retry after relay sync.`);
         } else if (!relayTreeDisabledForMint && relayUrl && !forceChainIndexing && utxo.index >= treeLength && !allowNearTipOnChainFallback) {
@@ -7651,9 +7829,10 @@ async function swapUtxo(params, options) {
           onProgress?.(`Relay tree is lagging (missing index ${utxo.index}, length: ${treeLength}); using guarded on-chain proof fallback.`);
         }
         if (relayUrl && !relayTreeDisabledForMint && !forceChainIndexing && utxo.index >= treeLength && !allowNearTipOnChainFallback) {
-          throw new Error(
-            `Relay tree missing required commitment index ${utxo.index} (tree length: ${treeLength}); waiting for relay sync is required.`
+          onProgress?.(
+            `Relay tree missing index ${utxo.index} (tree length: ${treeLength}) \u2014 falling through to on-chain proof.`
           );
+          allowNearTipOnChainFallback = true;
         }
         if (allowNearTipOnChainFallback && relayTreeDisabledForMint) {
           onProgress?.(
@@ -7857,10 +8036,18 @@ async function swapUtxo(params, options) {
         onProgress?.(`Merkle proof error (stale sibling data), will regenerate with fresh tree...`);
         lastError = new Error(`Circuit assertion failed: ${errorMsg}`);
         if (forceChainIndexing) {
-          onProgress?.("On-chain fallback proof failed; returning to relay-sync mode.");
-          forceChainIndexing = false;
+          onProgress?.("On-chain frontier proof failed; escalating to full chain tree rebuild...");
+          try {
+            merkleTree = await buildMerkleTreeFromChain(connection, programId, pdas.merkleTree, onProgress);
+            onProgress?.(`Chain tree rebuilt with ${merkleTree.length} leaves.`);
+          } catch (chainBuildErr) {
+            onProgress?.(`Chain tree rebuild failed (${chainBuildErr?.message?.slice(0, 80)}); returning to relay-sync mode.`);
+            forceChainIndexing = false;
+            merkleTree = null;
+          }
+        } else {
+          merkleTree = null;
         }
-        merkleTree = null;
         merkleState = null;
         useSiblingInfo = false;
         const waitMs = Math.min(retryDelayMs * Math.pow(2, Math.min(attempt, 4)), 5e3);
@@ -8055,19 +8242,26 @@ async function swapUtxo(params, options) {
     throw new Error(`Swap transaction failed: ${lastError.message}`);
   }
   if (relayUrl && outputCommitments.length >= 2) {
-    const reconcileSeedIndices = commitmentIndices[0] >= 0 && commitmentIndices[1] >= 0 ? commitmentIndices : lastObservedNextIndexForOutputs !== null ? [lastObservedNextIndexForOutputs, lastObservedNextIndexForOutputs + 1] : commitmentIndices;
-    const reconciledIndices = await reconcileCommitmentIndicesWithRelay(
-      relayUrl,
-      swapPoolMint,
-      reconcileSeedIndices,
-      [outputCommitments[0], outputCommitments[1]],
-      onProgress
-    );
-    if (reconciledIndices[0] !== commitmentIndices[0] || reconciledIndices[1] !== commitmentIndices[1]) {
+    const hasOnChainIndices = commitmentIndices[0] >= 0 && commitmentIndices[1] >= 0;
+    if (!hasOnChainIndices) {
+      const reconcileSeedIndices = lastObservedNextIndexForOutputs !== null ? [lastObservedNextIndexForOutputs, lastObservedNextIndexForOutputs + 1] : commitmentIndices;
+      const reconciledIndices = await reconcileCommitmentIndicesWithRelay(
+        relayUrl,
+        swapPoolMint,
+        reconcileSeedIndices,
+        [outputCommitments[0], outputCommitments[1]],
+        onProgress
+      );
+      if (reconciledIndices[0] !== commitmentIndices[0] || reconciledIndices[1] !== commitmentIndices[1]) {
+        onProgress?.(
+          `Adjusted swap commitment indices after relay reconciliation: [${commitmentIndices[0]}, ${commitmentIndices[1]}] -> [${reconciledIndices[0]}, ${reconciledIndices[1]}]`
+        );
+        commitmentIndices = reconciledIndices;
+      }
+    } else {
       onProgress?.(
-        `Adjusted swap commitment indices after relay reconciliation: [${commitmentIndices[0]}, ${commitmentIndices[1]}] -> [${reconciledIndices[0]}, ${reconciledIndices[1]}]`
+        `Using on-chain swap commitment indices [${commitmentIndices[0]}, ${commitmentIndices[1]}] (skipping relay reconciliation).`
       );
-      commitmentIndices = reconciledIndices;
     }
   }
   const siblingCommitments = [
@@ -8130,11 +8324,12 @@ async function swapWithChange(inputUtxos, swapAmount, outputMint, recipientAta,
 }
 
 // src/core/scanner.ts
-import bs582 from "bs58";
+import _bs582 from "bs58";
 import {
   PublicKey as PublicKey7
 } from "@solana/web3.js";
 import { getAssociatedTokenAddressSync as getAssociatedTokenAddressSync2 } from "@solana/spl-token";
+var bs582 = _bs582.default || _bs582;
 var TRANSACT_TAG2 = 0;
 var TRANSACT_SWAP_TAG2 = 1;
 var PROOF_LEN2 = 256;
@@ -9223,7 +9418,7 @@ var SimpleWallet = class {
 };
 
 // src/index.ts
-var VERSION = "1.0.0";
+var VERSION = "0.1.5";
 var SCANNER_SUPPORTS_TRANSACT_SWAP = true;
 export {
   CLOAK_PROGRAM_ID,
@@ -9240,12 +9435,15 @@ export {
   MemoryStorageAdapter,
   MerkleTree,
   NATIVE_SOL_MINT,
+  RelayInternalError,
   RelayService,
   RootNotFoundError,
   SCANNER_SUPPORTS_TRANSACT_SWAP,
   SIGN_IN_MESSAGE,
+  SanctionsQuoteError,
   ShieldPoolErrors,
   SimpleWallet,
+  UtxoAlreadySpentError,
   UtxoWallet,
   VARIABLE_FEE_DENOMINATOR,
   VARIABLE_FEE_NUMERATOR,
@@ -9264,6 +9462,7 @@ export {
   calculateRelayFee,
   chainNoteFromBase64,
   chainNoteToBase64,
+  classifyRelayError,
   cleanupStalePendingOperations,
   clearPendingDeposits,
   clearPendingWithdrawals,
@@ -9376,6 +9575,7 @@ export {
   partialWithdraw,
   poseidonHash,
   preflightCheck,
+  preflightNullifiers,
   prepareEncryptedOutput,
   prepareEncryptedOutputForRecipient,
   proofToBytes,
@@ -9423,6 +9623,7 @@ export {
   validateWithdrawableNote,
   verifyAllCircuits,
   verifyCircuitIntegrity,
+  verifyUtxos,
   waitForRoot,
   withTiming
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cloak.dev/sdk",
   "description": "Shield, send, and swap on Solana privately — TypeScript SDK with UTXO-based zero-knowledge transactions",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",
@@ -47,7 +47,7 @@
     "web3",
     "blockchain"
   ],
-  "author": "Cloak Labs",
+  "author": "Cloak",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -61,15 +61,15 @@
     "@jup-ag/api": "^6.0.48",
     "@lightprotocol/hasher.rs": "^0.2.1",
     "@noble/hashes": "^1.8.0",
-    "@solana/spl-token": "^0.4.0",
-    "@solana/web3.js": "^1.0.0",
+    "@solana/spl-token": "0.4.14",
+    "@solana/web3.js": "^1.98.0",
     "bs58": "^6.0.0",
-    "circomlibjs": "^0.1.7",
+    "circomlibjs": "0.1.7",
     "ffjavascript": "^0.3.0",
-    "snarkjs": "^0.7.4",
+    "snarkjs": "0.7.6",
     "tweetnacl": "^1.0.3",
     "tweetnacl-util": "^0.15.1",
-    "yaml": "^2.8.2"
+    "yaml": "^2.8.3"
   },
   "devDependencies": {
     "@coral-xyz/anchor": "^0.32.1",
@@ -86,8 +86,8 @@
   "peerDependencies": {
     "@switchboard-xyz/common": "^5.6.1",
     "@switchboard-xyz/on-demand": "^3.8.2",
-    "@solana/spl-token": "^0.4.0",
-    "@solana/web3.js": "^1.0.0"
+    "@solana/spl-token": ">=0.4.9",
+    "@solana/web3.js": ">=1.98.0"
   },
   "peerDependenciesMeta": {
     "@switchboard-xyz/common": {