@cloak.dev/sdk 0.1.4 → 0.1.5

package/dist/index.js

@@ -877,6 +877,71 @@ function parseRelayErrorResponse(responseText) {
     return { isRootNotFound: false };
   }
 }
+var UtxoAlreadySpentError = class extends Error {
+  constructor(message, spentUtxoCommitments = []) {
+    super(message);
+    this.spentUtxoCommitments = spentUtxoCommitments;
+    this.name = "UtxoAlreadySpentError";
+  }
+};
+var SanctionsQuoteError = class extends Error {
+  constructor(message, onChainCode, subKind) {
+    super(message);
+    this.onChainCode = onChainCode;
+    this.subKind = subKind;
+    this.name = "SanctionsQuoteError";
+  }
+};
+var RelayInternalError = class extends Error {
+  constructor(message, relayMessage, httpStatus, cachedTreeFromChain) {
+    super(message);
+    this.relayMessage = relayMessage;
+    this.httpStatus = httpStatus;
+    this.cachedTreeFromChain = cachedTreeFromChain;
+    this.name = "RelayInternalError";
+  }
+};
+function classifyRelayError(responseText, httpStatus) {
+  let inner = "";
+  try {
+    const parsed = JSON.parse(responseText);
+    inner = parsed?.message ?? "";
+  } catch {
+    inner = responseText;
+  }
+  const haystack = inner.toLowerCase();
+  if (haystack.includes("0x1020") || haystack.includes("doublespend")) {
+    return new UtxoAlreadySpentError(
+      "This shielded balance was already spent. The UTXO's nullifier is registered on-chain \u2014 typically means you spent it via another session or device. Run verifyUtxos() to reconcile local state."
+    );
+  }
+  if (haystack.includes("0x10b0") || haystack.includes("rangequoteexpired")) {
+    return new SanctionsQuoteError(
+      "Range sanctions quote expired before the on-chain program processed the transaction. The relay's quote-expiry window is too short relative to proof-gen + confirmation latency, or on-chain clock drifted. Retry the send; the relay will issue a fresh quote.",
+      4272,
+      "expired"
+    );
+  }
+  if (haystack.includes("0x10b2") || haystack.includes("rangequotewalletmismatch")) {
+    return new SanctionsQuoteError(
+      "Range sanctions quote's wallet doesn't match the on-chain expected wallet. Indicates a relay config drift \u2014 the sender used for quote signing doesn't match the program's pool.range_signer / fee payer. Relay operators must fix; caller retry will not help.",
+      4274,
+      "wallet_mismatch"
+    );
+  }
+  if (haystack.includes("0x10b3") || haystack.includes("rangequotemissinged25519")) {
+    return new SanctionsQuoteError(
+      "Transaction reached the on-chain program without the required Ed25519 sanctions quote instruction. This is a relay bug \u2014 the relay constructed the tx without attaching the signed quote. Caller retry will not help.",
+      4275,
+      "missing_ix"
+    );
+  }
+  return new RelayInternalError(
+    `Relay returned ${httpStatus ?? "an error"}: ${inner || responseText}`,
+    inner || responseText,
+    httpStatus
+  );
+}
 var ShieldPoolErrors = {
   // Root management errors
   4096: "Invalid Merkle root",
@@ -4173,6 +4238,63 @@ async function decryptComplianceMetadataWithMasterKey(encrypted, masterComplianc
   return decryptWithSharedSecret(payload, sharedSecret);
 }
 
+// src/utils/verify-utxos.ts
+async function verifyUtxos(utxos, connection, programId, commitment = "confirmed") {
+  const checkable = [];
+  const skipped = [];
+  for (const utxo of utxos) {
+    if (utxo.commitment === void 0 || utxo.mintAddress === void 0 || utxo.keypair === void 0 || utxo.keypair.privateKey === void 0) {
+      skipped.push(utxo);
+      continue;
+    }
+    try {
+      const nullifierBig = await computeNullifier(utxo);
+      const nullifierHex = nullifierBig.toString(16).padStart(64, "0");
+      const nullifierBytes = Buffer.from(nullifierHex, "hex");
+      const { pool } = getShieldPoolPDAs(programId, utxo.mintAddress);
+      const [pda] = getNullifierPDA(pool, nullifierBytes, programId);
+      checkable.push({ utxo, pda });
+    } catch {
+      skipped.push(utxo);
+    }
+  }
+  if (checkable.length === 0) {
+    return { spent: [], unspent: [], skipped };
+  }
+  const CHUNK = 100;
+  const infos = [];
+  for (let i = 0; i < checkable.length; i += CHUNK) {
+    const page = checkable.slice(i, i + CHUNK).map((e) => e.pda);
+    const pageInfos = await connection.getMultipleAccountsInfo(page, commitment);
+    infos.push(...pageInfos);
+  }
+  const spent = [];
+  const unspent = [];
+  for (let i = 0; i < checkable.length; i++) {
+    if (infos[i] !== null) {
+      spent.push(checkable[i].utxo);
+    } else {
+      unspent.push(checkable[i].utxo);
+    }
+  }
+  return { spent, unspent, skipped };
+}
+async function preflightNullifiers(utxos, connection, programId, commitment = "confirmed") {
+  if (utxos.length === 0) return;
+  const result = await verifyUtxos(utxos, connection, programId, commitment);
+  if (result.spent.length > 0) {
+    const allCommitments = result.spent.map(
+      (u) => u.commitment !== void 0 ? u.commitment.toString(16).padStart(64, "0") : "<unknown>"
+    );
+    const preview = allCommitments.slice(0, 5);
+    const extra = allCommitments.length > preview.length ? ` (+${allCommitments.length - preview.length} more)` : "";
+    throw new UtxoAlreadySpentError(
+      `Pre-flight detected ${allCommitments.length} already-spent UTXO(s). First spent commitment(s): ${preview.join(", ")}${extra}. Call verifyUtxos() and remove these from local state before retrying.`,
+      allCommitments
+    );
+  }
+}
+
 // src/services/risk-oracle.ts
 function buildRangeRiskScoreJob(OracleJob, walletAddress) {
   return OracleJob.fromObject({
@@ -4521,10 +4643,15 @@ import _bs58 from "bs58";
 var bs58 = _bs58.default || _bs58;
 var TRANSACT_TAG = 0;
 var TRANSACT_SWAP_TAG = 1;
-var DEPOSIT_TAG = 1;
 var PROOF_LEN = 256;
 var PUBLIC_INPUTS_LEN = 264;
 var COMMITMENTS_OFFSET = 168;
+function isAllZero(b) {
+  for (let i = 0; i < b.length; i++) {
+    if (b[i] !== 0) return false;
+  }
+  return true;
+}
 var DEFAULT_TIMEOUT_MS = 3e4;
 var DEFAULT_MAX_RETRIES = 3;
 async function fetchWithRetry(url, options = {}) {
@@ -4662,24 +4789,20 @@ async function buildMerkleTreeFromRelay(relayUrl, options) {
 function extractCommitmentsFromInstruction(data) {
   if (data.length === 0) return [];
   const tag = data[0];
-  if (tag === TRANSACT_TAG || tag === TRANSACT_SWAP_TAG) {
-    const publicInputsStart = 1 + PROOF_LEN;
-    const publicInputsEnd = publicInputsStart + PUBLIC_INPUTS_LEN;
-    if (data.length < publicInputsEnd) return [];
-    const publicInputs = data.slice(publicInputsStart, publicInputsEnd);
-    const commitments = [];
-    const c0 = publicInputs.slice(COMMITMENTS_OFFSET, COMMITMENTS_OFFSET + 32);
-    const c1 = publicInputs.slice(COMMITMENTS_OFFSET + 32, COMMITMENTS_OFFSET + 64);
-    commitments.push(c0);
-    commitments.push(c1);
-    return commitments;
-  }
-  if (tag === DEPOSIT_TAG) {
-    if (data.length < 1 + 8 + 32) return [];
-    const commitment = data.slice(1 + 8, 1 + 8 + 32);
-    return [commitment];
-  }
-  return [];
+  if (tag !== TRANSACT_TAG && tag !== TRANSACT_SWAP_TAG) return [];
+  const publicInputsStart = 1 + PROOF_LEN;
+  const publicInputsEnd = publicInputsStart + PUBLIC_INPUTS_LEN;
+  if (data.length < publicInputsEnd) return [];
+  const publicInputs = data.slice(publicInputsStart, publicInputsEnd);
+  const c0 = publicInputs.slice(COMMITMENTS_OFFSET, COMMITMENTS_OFFSET + 32);
+  const c1 = publicInputs.slice(
+    COMMITMENTS_OFFSET + 32,
+    COMMITMENTS_OFFSET + 64
+  );
+  const out = [];
+  if (!isAllZero(c0)) out.push(c0);
+  if (!isAllZero(c1)) out.push(c1);
+  return out;
 }
 function isBrowser() {
   return typeof globalThis !== "undefined" && typeof globalThis.window !== "undefined";
@@ -6299,6 +6422,7 @@ async function transact(params, options) {
   if (outputUtxos.length > 2) {
     throw new Error("Maximum 2 output UTXOs allowed");
   }
+  await preflightNullifiers(inputUtxos, connection, programId);
   const mint = inputUtxos.find((u) => u.amount > 0)?.mintAddress ?? outputUtxos.find((u) => u.amount > 0)?.mintAddress ?? NATIVE_SOL_MINT;
   const paddedInputs = [...inputUtxos];
   while (paddedInputs.length < 2) {
@@ -7126,10 +7250,46 @@ async function transact(params, options) {
     }
   }
   if (lastError) {
+    const classified = classifyRelayError(lastError.message);
+    const isMerkleClass = !(classified instanceof UtxoAlreadySpentError) && !(classified instanceof SanctionsQuoteError) && !isRootNotFoundError2(lastError);
+    if (!IS_BROWSER2 && isMerkleClass && relayUrl) {
+      onProgress?.(
+        "All relay-tree attempts failed. Rebuilding merkle tree from chain as last resort..."
+      );
+      try {
+        const [merkleTreePda] = PublicKey6.findProgramAddressSync(
+          [Buffer.from("merkle_tree"), mint.toBuffer()],
+          programId
+        );
+        const chainTree = await buildMerkleTreeFromChain(
+          connection,
+          programId,
+          merkleTreePda,
+          onProgress
+        );
+        const chainRootHex = chainTree.root().toString(16).padStart(64, "0");
+        onProgress?.(
+          `Chain-rebuilt tree root: ${chainRootHex.substring(0, 16)}... \u2014 attached to error for caller retry`
+        );
+        throw new RelayInternalError(
+          `All relay-tree attempts failed. Chain-rebuilt tree available (root ${chainRootHex.substring(0, 16)}...). Retry this call with options.cachedMerkleTree = err.cachedTreeFromChain. Original error: ${lastError.message}`,
+          lastError.message,
+          void 0,
+          chainTree
+        );
+      } catch (e) {
+        if (e instanceof RelayInternalError) throw e;
+        onProgress?.(
+          `Chain-replay fallback failed: ${e instanceof Error ? e.message : String(e)}`
+        );
+      }
+    }
     if (isRootNotFoundError2(lastError)) {
-      throw new Error(`Transaction failed after ${maxRootRetries + 1} retries: ${lastError.message}`);
+      throw new Error(
+        `Transaction failed after ${maxRootRetries + 1} retries: ${lastError.message}`
+      );
     }
-    throw new Error(`Transaction failed: ${lastError.message}`);
+    throw classified;
   }
   if (relayUrl && outputCommitments.length >= 2) {
     const hasOnChainIndices = commitmentIndices[0] >= 0 && commitmentIndices[1] >= 0;
@@ -7433,6 +7593,7 @@ async function swapUtxo(params, options) {
   if (inputUtxos.length > 2) {
     throw new Error("Maximum 2 input UTXOs allowed");
   }
+  await preflightNullifiers(inputUtxos, connection, programId);
   const outputMintAccount = await connection.getAccountInfo(outputMint, {
     commitment: "confirmed"
   });
@@ -9257,7 +9418,7 @@ var SimpleWallet = class {
 };
 
 // src/index.ts
-var VERSION = "1.0.0";
+var VERSION = "0.1.5";
 var SCANNER_SUPPORTS_TRANSACT_SWAP = true;
 export {
   CLOAK_PROGRAM_ID,
@@ -9274,12 +9435,15 @@ export {
   MemoryStorageAdapter,
   MerkleTree,
   NATIVE_SOL_MINT,
+  RelayInternalError,
   RelayService,
   RootNotFoundError,
   SCANNER_SUPPORTS_TRANSACT_SWAP,
   SIGN_IN_MESSAGE,
+  SanctionsQuoteError,
   ShieldPoolErrors,
   SimpleWallet,
+  UtxoAlreadySpentError,
   UtxoWallet,
   VARIABLE_FEE_DENOMINATOR,
   VARIABLE_FEE_NUMERATOR,
@@ -9298,6 +9462,7 @@ export {
   calculateRelayFee,
   chainNoteFromBase64,
   chainNoteToBase64,
+  classifyRelayError,
   cleanupStalePendingOperations,
   clearPendingDeposits,
   clearPendingWithdrawals,
@@ -9410,6 +9575,7 @@ export {
   partialWithdraw,
   poseidonHash,
   preflightCheck,
+  preflightNullifiers,
   prepareEncryptedOutput,
   prepareEncryptedOutputForRecipient,
   proofToBytes,
@@ -9457,6 +9623,7 @@ export {
   validateWithdrawableNote,
   verifyAllCircuits,
   verifyCircuitIntegrity,
+  verifyUtxos,
   waitForRoot,
   withTiming
 };

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cloak.dev/sdk",
   "description": "Shield, send, and swap on Solana privately — TypeScript SDK with UTXO-based zero-knowledge transactions",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",