@cloak.dev/sdk 0.1.7 → 0.2.0

package/dist/{utxo-LSTVI4HH.js → utxo-PFJT3ETR.js}

@@ -1,9 +1,9 @@
 import {
   NATIVE_SOL_MINT,
-  bigintToBytes32,
+  bigintToBytes322 as bigintToBytes32,
   bigintToHex,
-  computeCommitment,
-  computeNullifier,
+  computeCommitment2 as computeCommitment,
+  computeNullifier2 as computeNullifier,
   computeSignature,
   createUtxo,
   createZeroUtxo,
@@ -11,14 +11,15 @@ import {
   deriveUtxoKeypairFromSpendKey,
   deserializeUtxo,
   generateUtxoKeypair,
-  hexToBigint,
+  hexToBigint2 as hexToBigint,
   pubkeyToFieldElement,
+  pubkeyToFieldLimbs,
   randomFieldElement,
   selectUtxos,
   serializeUtxo,
   sumUtxoAmounts,
   utxoEquals
-} from "./chunk-2SOX3JNO.js";
+} from "./chunk-YX5SCAMR.js";
 export {
   NATIVE_SOL_MINT,
   bigintToBytes32,
@@ -34,6 +35,7 @@ export {
   generateUtxoKeypair,
   hexToBigint,
   pubkeyToFieldElement,
+  pubkeyToFieldLimbs,
   randomFieldElement,
   selectUtxos,
   serializeUtxo,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cloak.dev/sdk",
-  "description": "Shield, send, and swap on Solana privately — TypeScript SDK with UTXO-based zero-knowledge transactions",
-  "version": "0.1.7",
+  "description": "Shield, send, and swap on Solana privately \u2014 TypeScript SDK with UTXO-based zero-knowledge transactions",
+  "version": "0.2.0",
   "type": "module",
   "main": "dist/index.cjs",
   "module": "dist/index.js",
@@ -22,7 +22,8 @@
     "test:coverage": "NODE_OPTIONS=--experimental-vm-modules jest --coverage",
     "test:verbose": "NODE_OPTIONS=--experimental-vm-modules jest --verbose",
     "prepare": "npm run build",
-    "prepublishOnly": "npm run build",
+    "prepublishOnly": "npm run build && node scripts/verify-dist-matches-src.mjs",
+    "verify:dist": "node scripts/verify-dist-matches-src.mjs",
     "example:fast-send": "tsx examples/fast-send.ts",
     "example:fast-usdc-send": "tsx examples/fast-usdc-send.ts",
     "example:usdc-pool-transfer": "tsx examples/usdc-pool-transfer.ts",
@@ -103,7 +104,6 @@
   "files": [
     "dist",
     "README.md",
-    "CHANGELOG.md",
     "LICENSE"
   ],
   "publishConfig": {

package/CHANGELOG.md

@@ -1,173 +0,0 @@
-# Changelog
-
-All notable changes to `@cloak.dev/sdk` are documented here. The format
-follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
-project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-## [0.1.6] — 2026-04-27
-
-### Removed (BREAKING)
-
-- **`CloakSDK.deposit / privateTransfer / withdraw / send / swap`** —
-  these methods built a legacy `[discriminator: 1, amount: u64,
-  commitment: 32]` deposit instruction. The deployed shield-pool program
-  has repurposed discriminator `1` to `TransactSwap` (which requires
-  `>= 8` accounts), so every external invocation hit `0x1063
-  MissingAccounts` at ~112 CU. Reported by the cloak-squads hackathon
-  team on 2026-04-26.
-- **`createDepositInstruction` / `validateDepositParams` /
-  `DepositInstructionParams`** — the disc-1 instruction builder and its
-  validators.
-- **`CloakNote` model and helpers** — `generateNote`, `parseNote`,
-  `exportNote`, `findNoteByCommitment`, `filterNotesByNetwork`,
-  `filterWithdrawableNotes`, `isWithdrawable`, `updateNoteWithDeposit`,
-  `getRecipientAmount`, `generateNoteFromWallet`. The OLD
-  `withdraw_regular.circom` model used a 3-input
-  `Poseidon(amount, r0, r1, pk_spend)` commitment that is incompatible
-  with the deployed `transaction.circom` UTXO circuit (4-input
-  `Poseidon(amount, pubkey, blinding, mintAddress)`).
-- **`CloakSDK.loadNotes / saveNote / findNote / getTransactionMetadata`**
-  and the `StorageAdapter.notes*` methods. The adapter is now keys-only.
-- **Encrypted-note helpers** — `prepareEncryptedOutput`,
-  `prepareEncryptedOutputForRecipient`, `encodeNoteSimple` (legacy
-  `CloakNote`-based variants).
-- **Pending-operations helpers** — `savePendingDeposit`/`Withdrawal`
-  and friends, plus `PendingDeposit` / `PendingWithdrawal` types.
-- **Legacy proof generation** — `src/utils/proof-generation.ts`
-  (`generateWithdrawRegularProof`, `generateWithdrawSwapProof`,
-  `verifyCircuitIntegrity`, `verifyAllCircuits`,
-  `areCircuitsAvailable`, `getDefaultCircuitsPath`,
-  `EXPECTED_CIRCUIT_HASHES`, `DEFAULT_CIRCUITS_URL`).
-- **Legacy bigint hash helpers** in `src/utils/crypto.ts` —
-  `computeCommitment` (3-arg), `generateCommitmentAsync`,
-  `computeNullifier{,Async,Sync}`, `computeOutputsHash{,Async,Sync,FromLimbs}`,
-  `computeSwapOutputsHash{,Async,Sync}`. The UTXO-model
-  `computeCommitment(utxo)` / `computeNullifier(utxo)` live in
-  `core/utxo` and are re-exported as `computeUtxoCommitment` /
-  `computeUtxoNullifier`.
-- **OLD types** in `src/core/types.ts` — `CloakNote`, `Transfer`,
-  `MaxLengthArray`, `TransferResult`, `DepositResult`, `DepositOptions`,
-  `TransferOptions`, `WithdrawOptions`, `DepositStatus`, `SwapOptions`,
-  `SwapParams`, `SwapResult`. Plus `proofTimeout` (was unused on the
-  snapshot).
-- **`withdraw_regular_final.zkey`** — the ~10 MB legacy circuit asset.
-
-### Changed (BREAKING)
-
-- **`CloakConfig` is now a snapshot-only type.** It is the structurally
-  narrow value returned by `CloakSDK.getConfig()`: exactly seven
-  fields — `network`, `cloakKeys`, `programId`, `poolAddress`,
-  `merkleTreeAddress`, `treasuryAddress`, `debug`. The constructor
-  input is the new exported `CloakSDKOptions` interface (which still
-  accepts `keypairBytes`, `wallet`, and `storage` — they are consumed
-  into private SDK state and are *never* persisted on the snapshot).
-  `sdk.getConfig().keypairBytes` is now a `TS2339` compile-time error.
-- `CloakConfig.cloakKeys` is now typed as `CloakKeyPair | undefined`
-  (was `any`).
-- `LocalStorageAdapter` constructor signature is `(keysKey?: string)`;
-  the second `notesKey` parameter is gone.
-- `CloakSDK` constructor now throws `CloakError(_, "validation", false)`
-  instead of plain `Error` when no signer is provided; `getPublicKey()`
-  throws `CloakError(_, "wallet", false)` when neither keypair nor
-  wallet adapter is configured. Consumers' `parseError()` /
-  `classifyRelayError()` flows now handle these uniformly.
-
-### Added
-
-- **`LocalStorageAdapter` auto-purges legacy plaintext secrets.** On
-  the first construction in any browser origin, the adapter removes the
-  pre-0.1.6 `cloak_notes` localStorage entry (which contained `r`
-  randomness and `sk_spend` hex in plaintext) and writes a sentinel at
-  `cloak_purged_v0_1_5` so subsequent constructions skip the work.
-  Closes the upgrade-time security gap without requiring consumers to
-  call any helper. Consumers using a non-default legacy key can still
-  call `LocalStorageAdapter.purgeLegacyNoteStorage(customKey)`
-  explicitly.
-- `LocalStorageAdapter.LEGACY_PURGE_SENTINEL_KEY` and
-  `LocalStorageAdapter.LEGACY_NOTES_KEY` static constants for callers
-  that want to inspect / reset the purge state.
-- `LocalStorageAdapter.runLegacyPurgeOnce()` static helper for callers
-  that want to force the auto-purge before the first adapter
-  instantiation (e.g. during an upgrade boot sequence).
-
-### Security
-
-- `getConfig()` no longer leaks `keypairBytes`. The constructor
-  consumed the secret bytes into a `Keypair` and used to spread the
-  whole input onto `this.config`; `getConfig()`'s shallow-copy return
-  exposed the original `Uint8Array` by reference. `this.config` is now
-  built explicitly without `keypairBytes`/`wallet`/`storage`, and the
-  type system enforces the asymmetry (see "Changed" above).
-- `LocalStorageAdapter` upgrade-time auto-purge (see "Added") removes
-  the now-unredeemable plaintext secrets that pre-0.1.6 versions left
-  in browser localStorage.
-
-### Migration guide
-
-The supported flow for transaction emission is the functional UTXO API.
-
-```ts
-import {
-  transact,
-  fullWithdraw,
-  partialWithdraw,
-  transfer,
-  swapUtxo,
-  createUtxo,
-  createZeroUtxo,
-  generateUtxoKeypair,
-  CLOAK_PROGRAM_ID,
-  NATIVE_SOL_MINT,
-} from "@cloak.dev/sdk";
-import { Connection, Keypair } from "@solana/web3.js";
-
-const connection = new Connection("https://api.mainnet-beta.solana.com");
-const signer = Keypair.fromSecretKey(/* ... */);
-
-// Deposit (positive externalAmount).
-const owner = await generateUtxoKeypair();
-const output = await createUtxo(10_000_000n, owner, NATIVE_SOL_MINT);
-const deposited = await transact(
-  {
-    inputUtxos: [
-      await createZeroUtxo(NATIVE_SOL_MINT),
-      await createZeroUtxo(NATIVE_SOL_MINT),
-    ],
-    outputUtxos: [output, await createZeroUtxo(NATIVE_SOL_MINT)],
-    externalAmount: 10_000_000n,
-    depositor: signer.publicKey,
-  },
-  {
-    connection,
-    programId: CLOAK_PROGRAM_ID,
-    relayUrl: "https://api.cloak.ag",
-    depositorKeypair: signer,
-  },
-);
-
-// Reclaim to a public address.
-await fullWithdraw(deposited.outputUtxos, signer.publicKey, {
-  connection,
-  programId: CLOAK_PROGRAM_ID,
-  relayUrl: "https://api.cloak.ag",
-  depositorKeypair: signer,
-  cachedMerkleTree: deposited.merkleTree,
-});
-```
-
-The `CloakSDK` class is retained as a thin config + read-only helper
-(`getPublicKey`, `getCurrentRoot`, `getMerkleProof`,
-`getTransactionStatus`, `importWalletKeys`, `exportWalletKeys`,
-`getConfig`). Construction is unchanged for new fields.
-
-### Verification
-
-- Mainnet end-to-end smoke (deposit + withdraw cycle) on the patched
-  SDK: deposit signature
-  `5iGmrMYoSucYJ5PzEo5BCWioqTof4KNfjowq14ZYrbQACicaP2tJdJfRUy2CctsQLyNu6xpYXn8gYBg3EefsmXrv`
-  (slot 416038846, leaf 318); withdraw signature
-  `37A4T1KNiZLkmRvLAtui5ZN2VCmzjsZMzzGNwMosFA2UM1NGn7kP28p5APTvKRb51rNaLmWF42TJqK9GSZM5xCxn`
-  (slot 416055377). Net delta on the test wallet matches the expected
-  fee schedule (0.005 fixed + 0.3% var).
-
-[0.1.6]: https://github.com/cloak-ag/sdk/pull/11

package/dist/chunk-2SOX3JNO.js

@@ -1,255 +0,0 @@
-var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
-  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
-}) : x)(function(x) {
-  if (typeof require !== "undefined") return require.apply(this, arguments);
-  throw Error('Dynamic require of "' + x + '" is not supported');
-});
-
-// src/core/utxo.ts
-import { PublicKey } from "@solana/web3.js";
-import { buildPoseidon } from "circomlibjs";
-import { blake3 } from "@noble/hashes/blake3";
-var FIELD_MODULUS = BigInt("21888242871839275222246405745257275088548364400416034343698204186575808495617");
-var UTXO_KEY_DOMAIN = new TextEncoder().encode("cloak_utxo_priv_v1");
-var NATIVE_SOL_MINT = new PublicKey("So11111111111111111111111111111111111111112");
-var poseidonInstance = null;
-async function getPoseidon() {
-  if (!poseidonInstance) {
-    poseidonInstance = await buildPoseidon();
-  }
-  return poseidonInstance;
-}
-function randomFieldElement() {
-  const bytes = new Uint8Array(32);
-  if (typeof crypto !== "undefined" && crypto.getRandomValues) {
-    crypto.getRandomValues(bytes);
-  } else {
-    const { randomBytes } = __require("crypto");
-    const nodeBytes = randomBytes(32);
-    for (let i = 0; i < 32; i++) {
-      bytes[i] = nodeBytes[i];
-    }
-  }
-  let value = BigInt(0);
-  for (let i = 0; i < 32; i++) {
-    value = value << BigInt(8) | BigInt(bytes[i]);
-  }
-  return value % (FIELD_MODULUS >> BigInt(4));
-}
-async function generateUtxoKeypair() {
-  const poseidon = await getPoseidon();
-  const privateKey = randomFieldElement();
-  const publicKeyHash = poseidon([privateKey, BigInt(0)]);
-  const publicKey = poseidon.F.toObject(publicKeyHash);
-  return { privateKey, publicKey };
-}
-async function deriveUtxoKeypairFromSpendKey(skSpend) {
-  if (!skSpend || !(skSpend instanceof Uint8Array) || skSpend.length !== 32) {
-    throw new Error("skSpend must be 32 bytes");
-  }
-  const preimage = new Uint8Array(UTXO_KEY_DOMAIN.length + skSpend.length);
-  preimage.set(UTXO_KEY_DOMAIN, 0);
-  preimage.set(skSpend, UTXO_KEY_DOMAIN.length);
-  const hash = blake3(preimage);
-  let value = BigInt(0);
-  for (let i = 0; i < 32; i++) {
-    value = value << BigInt(8) | BigInt(hash[i]);
-  }
-  const privateKey = value % (FIELD_MODULUS >> BigInt(4));
-  const publicKey = await derivePublicKey(privateKey);
-  return { privateKey, publicKey };
-}
-async function derivePublicKey(privateKey) {
-  const poseidon = await getPoseidon();
-  const hash = poseidon([privateKey, BigInt(0)]);
-  return poseidon.F.toObject(hash);
-}
-async function createUtxo(amount, keypair, mintAddress = NATIVE_SOL_MINT) {
-  const blinding = randomFieldElement();
-  const utxo = {
-    amount,
-    keypair,
-    blinding,
-    mintAddress
-  };
-  utxo.commitment = await computeCommitment(utxo);
-  return utxo;
-}
-async function createZeroUtxo(mintAddress = NATIVE_SOL_MINT, salt) {
-  const poseidon = await getPoseidon();
-  const effectiveSalt = salt ?? randomFieldElement();
-  const publicKeyHash = poseidon([effectiveSalt, BigInt(0)]);
-  const publicKey = poseidon.F.toObject(publicKeyHash);
-  const keypair = { privateKey: effectiveSalt, publicKey };
-  const utxo = {
-    amount: BigInt(0),
-    keypair,
-    blinding: BigInt(0),
-    mintAddress
-  };
-  utxo.commitment = await computeCommitment(utxo);
-  utxo.index = 0;
-  return utxo;
-}
-function pubkeyToFieldElement(pubkey) {
-  const bytes = pubkey.toBytes();
-  let value = BigInt(0);
-  for (let i = 0; i < 32; i++) {
-    value = value << BigInt(8) | BigInt(bytes[i]);
-  }
-  return value % FIELD_MODULUS;
-}
-async function computeCommitment(utxo) {
-  const poseidon = await getPoseidon();
-  const mintField = pubkeyToFieldElement(utxo.mintAddress);
-  const hash = poseidon([
-    utxo.amount,
-    utxo.keypair.publicKey,
-    utxo.blinding,
-    mintField
-  ]);
-  return poseidon.F.toObject(hash);
-}
-async function computeSignature(privateKey, commitment, pathIndex) {
-  const poseidon = await getPoseidon();
-  const hash = poseidon([privateKey, commitment, pathIndex]);
-  return poseidon.F.toObject(hash);
-}
-async function computeNullifier(utxo) {
-  if (utxo.index === void 0) {
-    throw new Error("UTXO must have an index to compute nullifier");
-  }
-  const poseidon = await getPoseidon();
-  const commitment = utxo.commitment ?? await computeCommitment(utxo);
-  const pathIndex = BigInt(utxo.index);
-  const signature = await computeSignature(
-    utxo.keypair.privateKey,
-    commitment,
-    pathIndex
-  );
-  const hash = poseidon([commitment, pathIndex, signature]);
-  return poseidon.F.toObject(hash);
-}
-function serializeUtxo(utxo) {
-  const buffer = new ArrayBuffer(128);
-  const view = new DataView(buffer);
-  const amountBytes = bigintToBytes(utxo.amount, 8);
-  for (let i = 0; i < 8; i++) {
-    view.setUint8(i, amountBytes[i]);
-  }
-  const privkeyBytes = bigintToBytes(utxo.keypair.privateKey, 32);
-  for (let i = 0; i < 32; i++) {
-    view.setUint8(8 + i, privkeyBytes[i]);
-  }
-  const blindingBytes = bigintToBytes(utxo.blinding, 32);
-  for (let i = 0; i < 32; i++) {
-    view.setUint8(40 + i, blindingBytes[i]);
-  }
-  const mintBytes = utxo.mintAddress.toBytes();
-  for (let i = 0; i < 32; i++) {
-    view.setUint8(72 + i, mintBytes[i]);
-  }
-  view.setUint32(104, utxo.index ?? 0, true);
-  return new Uint8Array(buffer);
-}
-async function deserializeUtxo(bytes) {
-  const view = new DataView(bytes.buffer, bytes.byteOffset);
-  const amountBytes = bytes.slice(0, 8);
-  const amount = bytesToBigint(amountBytes);
-  const privkeyBytes = bytes.slice(8, 40);
-  const privateKey = bytesToBigint(privkeyBytes);
-  const publicKey = await derivePublicKey(privateKey);
-  const blindingBytes = bytes.slice(40, 72);
-  const blinding = bytesToBigint(blindingBytes);
-  const mintBytes = bytes.slice(72, 104);
-  const mintAddress = new PublicKey(mintBytes);
-  const index = view.getUint32(104, true);
-  const utxo = {
-    amount,
-    keypair: { privateKey, publicKey },
-    blinding,
-    mintAddress,
-    index: index > 0 ? index : void 0
-  };
-  utxo.commitment = await computeCommitment(utxo);
-  return utxo;
-}
-function bigintToBytes(value, length) {
-  const result = new Uint8Array(length);
-  let remaining = value;
-  for (let i = 0; i < length; i++) {
-    result[i] = Number(remaining & BigInt(255));
-    remaining >>= BigInt(8);
-  }
-  return result;
-}
-function bytesToBigint(bytes) {
-  let result = BigInt(0);
-  for (let i = bytes.length - 1; i >= 0; i--) {
-    result = result << BigInt(8) | BigInt(bytes[i]);
-  }
-  return result;
-}
-function bigintToHex(value) {
-  return value.toString(16).padStart(64, "0");
-}
-function hexToBigint(hex) {
-  const cleanHex = hex.startsWith("0x") ? hex.slice(2) : hex;
-  return BigInt("0x" + cleanHex);
-}
-function bigintToBytes32(value) {
-  const result = new Uint8Array(32);
-  let remaining = value;
-  for (let i = 31; i >= 0; i--) {
-    result[i] = Number(remaining & BigInt(255));
-    remaining >>= BigInt(8);
-  }
-  return result;
-}
-async function utxoEquals(a, b) {
-  const commitmentA = a.commitment ?? await computeCommitment(a);
-  const commitmentB = b.commitment ?? await computeCommitment(b);
-  return commitmentA === commitmentB;
-}
-function sumUtxoAmounts(utxos) {
-  return utxos.reduce((sum, utxo) => sum + utxo.amount, BigInt(0));
-}
-function selectUtxos(available, targetAmount) {
-  const sorted = [...available].sort(
-    (a, b) => Number(b.amount - a.amount)
-  );
-  const selected = [];
-  let total = BigInt(0);
-  for (const utxo of sorted) {
-    if (total >= targetAmount) break;
-    selected.push(utxo);
-    total += utxo.amount;
-  }
-  if (total < targetAmount) {
-    return null;
-  }
-  return selected;
-}
-
-export {
-  __require,
-  NATIVE_SOL_MINT,
-  randomFieldElement,
-  generateUtxoKeypair,
-  deriveUtxoKeypairFromSpendKey,
-  derivePublicKey,
-  createUtxo,
-  createZeroUtxo,
-  pubkeyToFieldElement,
-  computeCommitment,
-  computeSignature,
-  computeNullifier,
-  serializeUtxo,
-  deserializeUtxo,
-  bigintToHex,
-  hexToBigint,
-  bigintToBytes32,
-  utxoEquals,
-  sumUtxoAmounts,
-  selectUtxos
-};