@enclave-e3/contracts 0.1.11 → 0.1.13

package/dist/hardhat.config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hardhat.config.d.ts","sourceRoot":"","sources":["../hardhat.config.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAqExD,QAAA,MAAM,MAAM,EAAE,iBA+Gb,CAAC;AAEF,eAAe,MAAM,CAAC"}
+{"version":3,"file":"hardhat.config.d.ts","sourceRoot":"","sources":["../hardhat.config.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAoExD,QAAA,MAAM,MAAM,EAAE,iBA8Gb,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/dist/hardhat.config.js

@@ -11,7 +11,8 @@ import hardhatTypechainPlugin from "@nomicfoundation/hardhat-typechain";
 import hardhatVerify from "@nomicfoundation/hardhat-verify";
 import dotenv from "dotenv";
 import { ciphernodeAdd, ciphernodeAdminAdd, ciphernodeMintTokens, ciphernodeRemove, ciphernodeSiblings, updateSubmissionWindow, } from "./tasks/ciphernode";
-import { activateE3, enableE3, publishCiphertext, publishCommittee, publishInput, publishPlaintext, requestCommittee, } from "./tasks/enclave";
+import { enableE3, publishCiphertext, publishCommittee, publishPlaintext, requestCommittee, } from "./tasks/enclave";
+import { publishInput } from "./tasks/program";
 import { cleanDeploymentsTask } from "./tasks/utils";
 dotenv.config();
 const mnemonic = process.env.MNEMONIC ??
@@ -74,9 +75,8 @@ const config = {
         requestCommittee,
         publishPlaintext,
         publishCiphertext,
-        publishInput,
-        activateE3,
         publishCommittee,
+        publishInput,
         enableE3,
         cleanDeploymentsTask,
         updateSubmissionWindow,
@@ -146,7 +146,7 @@ const config = {
                 settings: {
                     optimizer: {
                         enabled: true,
-                        runs: 800,
+                        runs: 100,
                     },
                     metadata: {
                         bytecodeHash: "none",

package/dist/ignition/modules/dkgPkVerifier.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=dkgPkVerifier.d.ts.map

package/dist/ignition/modules/dkgPkVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dkgPkVerifier.d.ts","sourceRoot":"","sources":["../../../ignition/modules/dkgPkVerifier.ts"],"names":[],"mappings":"wBAWM,GAAG;AAJT,wBAIU"}

package/dist/ignition/modules/dkgPkVerifier.js

@@ -0,0 +1,10 @@
+// SPDX-License-Identifier: LGPL-3.0-only
+//
+// This file is provided WITHOUT ANY WARRANTY;
+// without even the implied warranty of MERCHANTABILITY
+// or FITNESS FOR A PARTICULAR PURPOSE.
+import { buildModule } from "@nomicfoundation/hardhat-ignition/modules";
+export default buildModule("DkgPkVerifier", (m) => {
+    const dkgPkVerifier = m.contract("DkgPkVerifier");
+    return { dkgPkVerifier };
+});

package/dist/ignition/modules/e3RefundManager.d.ts

@@ -0,0 +1,3 @@
+declare const _default: any;
+export default _default;
+//# sourceMappingURL=e3RefundManager.d.ts.map

package/dist/ignition/modules/e3RefundManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"e3RefundManager.d.ts","sourceRoot":"","sources":["../../../ignition/modules/e3RefundManager.ts"],"names":[],"mappings":"wBA2BM,GAAG;AApBT,wBAoBU"}

package/dist/ignition/modules/e3RefundManager.js

@@ -0,0 +1,23 @@
+// SPDX-License-Identifier: LGPL-3.0-only
+//
+// This file is provided WITHOUT ANY WARRANTY;
+// without even the implied warranty of MERCHANTABILITY
+// or FITNESS FOR A PARTICULAR PURPOSE.
+import { buildModule } from "@nomicfoundation/hardhat-ignition/modules";
+export default buildModule("E3RefundManager", (m) => {
+    const owner = m.getParameter("owner");
+    const enclave = m.getParameter("enclave");
+    const treasury = m.getParameter("treasury");
+    const e3RefundManagerImpl = m.contract("E3RefundManager", []);
+    const initData = m.encodeFunctionCall(e3RefundManagerImpl, "initialize", [
+        owner,
+        enclave,
+        treasury,
+    ]);
+    const e3RefundManager = m.contract("TransparentUpgradeableProxy", [
+        e3RefundManagerImpl,
+        owner,
+        initData,
+    ]);
+    return { e3RefundManager };
+});

package/dist/ignition/modules/enclave.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enclave.d.ts","sourceRoot":"","sources":["../../../ignition/modules/enclave.ts"],"names":[],"mappings":"wBAiCM,GAAG;AA1BT,wBA0BU"}
+{"version":3,"file":"enclave.d.ts","sourceRoot":"","sources":["../../../ignition/modules/enclave.ts"],"names":[],"mappings":"wBA2CM,GAAG;AApCT,wBAoCU"}

package/dist/ignition/modules/enclave.js

@@ -10,14 +10,24 @@ export default buildModule("Enclave", (m) => {
     const maxDuration = m.getParameter("maxDuration");
     const registry = m.getParameter("registry");
     const bondingRegistry = m.getParameter("bondingRegistry");
+    const e3RefundManager = m.getParameter("e3RefundManager");
     const feeToken = m.getParameter("feeToken");
+    const timeoutConfig = m.getParameter("timeoutConfig", {
+        committeeFormationWindow: 3600,
+        dkgWindow: 7200,
+        computeWindow: 86400,
+        decryptionWindow: 3600,
+        gracePeriod: 600,
+    });
     const enclaveImpl = m.contract("Enclave", []);
     const initData = m.encodeFunctionCall(enclaveImpl, "initialize", [
         owner,
         registry,
         bondingRegistry,
+        e3RefundManager,
         feeToken,
         maxDuration,
+        timeoutConfig,
         [params],
     ]);
     const enclave = m.contract("TransparentUpgradeableProxy", [

package/dist/scripts/deployAndSave/e3RefundManager.d.ts

@@ -0,0 +1,20 @@
+import type { HardhatRuntimeEnvironment } from "hardhat/types/hre";
+import { E3RefundManager } from "../../types";
+/**
+ * The arguments for the deployAndSaveE3RefundManager function
+ */
+export interface E3RefundManagerArgs {
+    owner?: string;
+    enclave?: string;
+    treasury?: string;
+    hre: HardhatRuntimeEnvironment;
+}
+/**
+ * Deploys the E3RefundManager contract and saves the deployment arguments
+ * @param param0 - The deployment arguments
+ * @returns The deployed E3RefundManager contract
+ */
+export declare const deployAndSaveE3RefundManager: ({ owner, enclave, treasury, hre, }: E3RefundManagerArgs) => Promise<{
+    e3RefundManager: E3RefundManager;
+}>;
+//# sourceMappingURL=e3RefundManager.d.ts.map

package/dist/scripts/deployAndSave/e3RefundManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"e3RefundManager.d.ts","sourceRoot":"","sources":["../../../scripts/deployAndSave/e3RefundManager.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EACL,eAAe,EAEhB,MAAM,aAAa,CAAC;AAIrB;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,yBAAyB,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,GAAU,oCAKhD,mBAAmB,KAAG,OAAO,CAAC;IAAE,eAAe,EAAE,eAAe,CAAA;CAAE,CA+EpE,CAAC"}

package/dist/scripts/deployAndSave/e3RefundManager.js

@@ -0,0 +1,55 @@
+import { E3RefundManager__factory as E3RefundManagerFactory, } from "../../types";
+import { getProxyAdmin } from "../proxy";
+import { readDeploymentArgs, storeDeploymentArgs } from "../utils";
+/**
+ * Deploys the E3RefundManager contract and saves the deployment arguments
+ * @param param0 - The deployment arguments
+ * @returns The deployed E3RefundManager contract
+ */
+export const deployAndSaveE3RefundManager = async ({ owner, enclave, treasury, hre, }) => {
+    const { ethers } = await hre.network.connect();
+    const [signer] = await ethers.getSigners();
+    const chain = hre.globalOptions.network;
+    const preDeployedArgs = readDeploymentArgs("E3RefundManager", chain);
+    if (!owner ||
+        !enclave ||
+        !treasury ||
+        (preDeployedArgs?.constructorArgs?.owner === owner &&
+            preDeployedArgs?.constructorArgs?.enclave === enclave &&
+            preDeployedArgs?.constructorArgs?.treasury === treasury)) {
+        if (!preDeployedArgs?.address) {
+            throw new Error("E3RefundManager address not found, it must be deployed first");
+        }
+        const e3RefundManagerContract = E3RefundManagerFactory.connect(preDeployedArgs.address, signer);
+        return { e3RefundManager: e3RefundManagerContract };
+    }
+    const e3RefundManagerFactory = await ethers.getContractFactory(E3RefundManagerFactory.abi, E3RefundManagerFactory.bytecode, signer);
+    const e3RefundManager = await e3RefundManagerFactory.deploy();
+    await e3RefundManager.waitForDeployment();
+    const blockNumber = await ethers.provider.getBlockNumber();
+    const e3RefundManagerAddress = await e3RefundManager.getAddress();
+    const initData = e3RefundManagerFactory.interface.encodeFunctionData("initialize", [owner, enclave, treasury]);
+    const ProxyCF = await ethers.getContractFactory("TransparentUpgradeableProxy");
+    const proxy = await ProxyCF.deploy(e3RefundManagerAddress, owner, initData);
+    await proxy.waitForDeployment();
+    const proxyAddress = await proxy.getAddress();
+    const proxyAdminAddress = await getProxyAdmin(ethers.provider, proxyAddress);
+    storeDeploymentArgs({
+        constructorArgs: {
+            owner,
+            enclave,
+            treasury,
+        },
+        proxyRecords: {
+            initData,
+            initialOwner: owner,
+            proxyAddress,
+            proxyAdminAddress,
+            implementationAddress: e3RefundManagerAddress,
+        },
+        blockNumber,
+        address: proxyAddress,
+    }, "E3RefundManager", chain);
+    const e3RefundManagerContract = E3RefundManagerFactory.connect(proxyAddress, signer);
+    return { e3RefundManager: e3RefundManagerContract };
+};

package/dist/scripts/deployAndSave/enclave.d.ts

@@ -1,5 +1,15 @@
 import type { HardhatRuntimeEnvironment } from "hardhat/types/hre";
 import { Enclave } from "../../types";
+/**
+ * Timeout configuration for E3 stages
+ */
+export interface E3TimeoutConfig {
+    committeeFormationWindow: number;
+    dkgWindow: number;
+    computeWindow: number;
+    decryptionWindow: number;
+    gracePeriod: number;
+}
 /**
  * The arguments for the deployAndSaveEnclave function
  */
@@ -9,7 +19,9 @@ export interface EnclaveArgs {
     maxDuration?: string;
     registry?: string;
     bondingRegistry?: string;
+    e3RefundManager?: string;
     feeToken?: string;
+    timeoutConfig?: E3TimeoutConfig;
     hre: HardhatRuntimeEnvironment;
 }
 /**
@@ -17,7 +29,7 @@ export interface EnclaveArgs {
  * @param param0 - The deployment arguments
  * @returns The deployed Enclave contract
  */
-export declare const deployAndSaveEnclave: ({ params, owner, maxDuration, registry, bondingRegistry, feeToken, hre, }: EnclaveArgs) => Promise<{
+export declare const deployAndSaveEnclave: ({ params, owner, maxDuration, registry, bondingRegistry, e3RefundManager, feeToken, timeoutConfig, hre, }: EnclaveArgs) => Promise<{
     enclave: Enclave;
 }>;
 /**

package/dist/scripts/deployAndSave/enclave.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enclave.d.ts","sourceRoot":"","sources":["../../../scripts/deployAndSave/enclave.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,OAAO,EAAsC,MAAM,aAAa,CAAC;AAQ1E;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,yBAAyB,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAAU,2EAQxC,WAAW,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAuF5C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAU,wBAGzC;IACD,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,yBAAyB,CAAC;CAChC,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAA;CAAE,CAiE9D,CAAC"}
+{"version":3,"file":"enclave.d.ts","sourceRoot":"","sources":["../../../scripts/deployAndSave/enclave.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,OAAO,EAAsC,MAAM,aAAa,CAAC;AAQ1E;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,wBAAwB,EAAE,MAAM,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC,GAAG,EAAE,yBAAyB,CAAC;CAChC;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAAU,2GAUxC,WAAW,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CA8F5C,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAU,wBAGzC;IACD,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,yBAAyB,CAAC;CAChC,KAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,qBAAqB,EAAE,MAAM,CAAA;CAAE,CAiE9D,CAAC"}

package/dist/scripts/deployAndSave/enclave.js

@@ -6,7 +6,7 @@ import { areArraysEqual, readDeploymentArgs, storeDeploymentArgs, } from "../uti
  * @param param0 - The deployment arguments
  * @returns The deployed Enclave contract
  */
-export const deployAndSaveEnclave = async ({ params, owner, maxDuration, registry, bondingRegistry, feeToken, hre, }) => {
+export const deployAndSaveEnclave = async ({ params, owner, maxDuration, registry, bondingRegistry, e3RefundManager, feeToken, timeoutConfig, hre, }) => {
     const { ethers } = await hre.network.connect();
     const [signer] = await ethers.getSigners();
     const chain = hre.globalOptions.network;
@@ -16,11 +16,14 @@ export const deployAndSaveEnclave = async ({ params, owner, maxDuration, registr
         !maxDuration ||
         !registry ||
         !bondingRegistry ||
+        !e3RefundManager ||
         !feeToken ||
+        !timeoutConfig ||
         (preDeployedArgs?.constructorArgs?.owner === owner &&
             preDeployedArgs?.constructorArgs?.maxDuration === maxDuration &&
             preDeployedArgs?.constructorArgs?.registry === registry &&
             preDeployedArgs?.constructorArgs?.bondingRegistry === bondingRegistry &&
+            preDeployedArgs?.constructorArgs?.e3RefundManager === e3RefundManager &&
             preDeployedArgs?.constructorArgs?.feeToken === feeToken &&
             areArraysEqual(preDeployedArgs?.constructorArgs?.params, params))) {
         if (!preDeployedArgs?.address) {
@@ -38,8 +41,10 @@ export const deployAndSaveEnclave = async ({ params, owner, maxDuration, registr
         owner,
         registry,
         bondingRegistry,
+        e3RefundManager,
         feeToken,
         maxDuration,
+        timeoutConfig,
         params,
     ]);
     const ProxyCF = await ethers.getContractFactory("TransparentUpgradeableProxy");
@@ -52,8 +57,10 @@ export const deployAndSaveEnclave = async ({ params, owner, maxDuration, registr
             owner,
             registry,
             bondingRegistry,
+            e3RefundManager,
             feeToken,
             maxDuration,
+            timeoutConfig: JSON.stringify(timeoutConfig),
             params,
         },
         proxyRecords: {

package/dist/scripts/deployAndSave/verifiers.d.ts

@@ -0,0 +1,29 @@
+import type { HardhatRuntimeEnvironment } from "hardhat/types/hre";
+/**
+ * Discovers all Solidity verifier contracts in contracts/verifier/ directory.
+ * Returns an array of contract names (without .sol extension).
+ */
+export declare const discoverVerifierContracts: () => string[];
+/**
+ * Deploys a single verifier contract and saves the deployment record.
+ * BB-generated verifiers require ZKTranscriptLib to be linked.
+ * Skips deployment if the contract is already deployed on the target chain.
+ *
+ * Note: The library FQN (fully-qualified name) uses the pattern:
+ * "contracts/verifier/<ContractName>.sol:ZKTranscriptLib"
+ * If you get linking errors, check the contract's compiled artifact for the exact FQN.
+ */
+export declare const deployAndSaveVerifier: (contractName: string, hre: HardhatRuntimeEnvironment, zkTranscriptLibAddress: string) => Promise<{
+    address: string;
+}>;
+export interface VerifierDeployments {
+    [contractName: string]: string;
+}
+/**
+ * Deploys all verifier contracts found in contracts/verifier/.
+ * Skips any that are already deployed on the target chain.
+ *
+ * @returns A mapping of contract names to their deployed addresses.
+ */
+export declare const deployAndSaveAllVerifiers: (hre: HardhatRuntimeEnvironment) => Promise<VerifierDeployments>;
+//# sourceMappingURL=verifiers.d.ts.map

package/dist/scripts/deployAndSave/verifiers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifiers.d.ts","sourceRoot":"","sources":["../../../scripts/deployAndSave/verifiers.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAKnE;;;GAGG;AACH,eAAO,MAAM,yBAAyB,QAAO,MAAM,EAUlD,CAAC;AAmCF;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB,GAChC,cAAc,MAAM,EACpB,KAAK,yBAAyB,EAC9B,wBAAwB,MAAM,KAC7B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAqC7B,CAAC;AAEF,MAAM,WAAW,mBAAmB;IAClC,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC;AAED;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,GACpC,KAAK,yBAAyB,KAC7B,OAAO,CAAC,mBAAmB,CA+B7B,CAAC"}

package/dist/scripts/deployAndSave/verifiers.js

@@ -0,0 +1,109 @@
+// SPDX-License-Identifier: LGPL-3.0-only
+//
+// This file is provided WITHOUT ANY WARRANTY;
+// without even the implied warranty of MERCHANTABILITY
+// or FITNESS FOR A PARTICULAR PURPOSE.
+import fs from "fs";
+import path from "path";
+import { readDeploymentArgs, storeDeploymentArgs } from "../utils";
+/**
+ * Discovers all Solidity verifier contracts in contracts/verifier/ directory.
+ * Returns an array of contract names (without .sol extension).
+ */
+export const discoverVerifierContracts = () => {
+    const verifierDir = path.join(process.cwd(), "contracts/verifier");
+    if (!fs.existsSync(verifierDir)) {
+        return [];
+    }
+    return fs
+        .readdirSync(verifierDir)
+        .filter((f) => f.endsWith(".sol"))
+        .map((f) => f.replace(".sol", ""));
+};
+/**
+ * Deploys ZKTranscriptLib library required by BB-generated verifiers.
+ * Reuses existing deployment if already deployed on the chain.
+ */
+const deployZKTranscriptLib = async (hre, chain) => {
+    const libName = "ZKTranscriptLib";
+    // Check if library is already deployed
+    const existing = readDeploymentArgs(libName, chain);
+    if (existing?.address) {
+        console.log(`   ${libName} already deployed at ${existing.address}`);
+        return existing.address;
+    }
+    // Deploy the library
+    console.log(`   Deploying ${libName}...`);
+    const { ethers } = await hre.network.connect();
+    const factory = await ethers.getContractFactory(libName);
+    const contract = await factory.deploy();
+    await contract.waitForDeployment();
+    const address = await contract.getAddress();
+    const blockNumber = await ethers.provider.getBlockNumber();
+    storeDeploymentArgs({ blockNumber, address }, libName, chain);
+    console.log(`   ${libName} deployed to: ${address}`);
+    return address;
+};
+/**
+ * Deploys a single verifier contract and saves the deployment record.
+ * BB-generated verifiers require ZKTranscriptLib to be linked.
+ * Skips deployment if the contract is already deployed on the target chain.
+ *
+ * Note: The library FQN (fully-qualified name) uses the pattern:
+ * "contracts/verifier/<ContractName>.sol:ZKTranscriptLib"
+ * If you get linking errors, check the contract's compiled artifact for the exact FQN.
+ */
+export const deployAndSaveVerifier = async (contractName, hre, zkTranscriptLibAddress) => {
+    const { ethers } = await hre.network.connect();
+    const [signer] = await ethers.getSigners();
+    const chain = (await signer.provider?.getNetwork())?.name ?? "localhost";
+    // Check if already deployed
+    const existing = readDeploymentArgs(contractName, chain);
+    if (existing?.address) {
+        console.log(`   ${contractName} already deployed at ${existing.address}`);
+        return { address: existing.address };
+    }
+    // Link ZKTranscriptLib - FQN pattern: "contracts/verifier/<ContractName>.sol:ZKTranscriptLib"
+    const libraryFQN = `project/contracts/verifier/${contractName}.sol:ZKTranscriptLib`;
+    const libraries = {
+        [libraryFQN]: zkTranscriptLibAddress,
+    };
+    // Deploy the verifier contract with linked library
+    const factory = await ethers.getContractFactory(contractName, { libraries });
+    const contract = await factory.deploy();
+    await contract.waitForDeployment();
+    const address = await contract.getAddress();
+    const blockNumber = await ethers.provider.getBlockNumber();
+    storeDeploymentArgs({
+        blockNumber,
+        address,
+    }, contractName, chain);
+    console.log(`   ${contractName} deployed to: ${address}`);
+    return { address };
+};
+/**
+ * Deploys all verifier contracts found in contracts/verifier/.
+ * Skips any that are already deployed on the target chain.
+ *
+ * @returns A mapping of contract names to their deployed addresses.
+ */
+export const deployAndSaveAllVerifiers = async (hre) => {
+    const contractNames = discoverVerifierContracts();
+    const { ethers } = await hre.network.connect();
+    const [signer] = await ethers.getSigners();
+    const chain = (await signer.provider?.getNetwork())?.name ?? "localhost";
+    console.log(`   Deploying to network: ${chain}`);
+    if (contractNames.length === 0) {
+        console.log("   No verifier contracts found in contracts/verifier/. Skipping.");
+        return {};
+    }
+    console.log(`   Found ${contractNames.length} verifier contract(s)`);
+    // Deploy ZKTranscriptLib once, reused by all verifiers
+    const zkTranscriptLibAddress = await deployZKTranscriptLib(hre, chain);
+    const deployments = {};
+    for (const name of contractNames) {
+        const { address } = await deployAndSaveVerifier(name, hre, zkTranscriptLibAddress);
+        deployments[name] = address;
+    }
+    return deployments;
+};

package/dist/scripts/deployEnclave.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deployEnclave.d.ts","sourceRoot":"","sources":["../../scripts/deployEnclave.ts"],"names":[],"mappings":"AAkBA;;GAEG;AACH,eAAO,MAAM,aAAa,GAAU,YAAY,OAAO,kBA8LtD,CAAC"}
+{"version":3,"file":"deployEnclave.d.ts","sourceRoot":"","sources":["../../scripts/deployEnclave.ts"],"names":[],"mappings":"AA+BA;;GAEG;AACH,eAAO,MAAM,aAAa,GAAU,YAAY,OAAO,kBA4NtD,CAAC"}

package/dist/scripts/deployEnclave.js

@@ -7,13 +7,25 @@ import hre from "hardhat";
 import { autoCleanForLocalhost } from "./cleanIgnitionState";
 import { deployAndSaveBondingRegistry } from "./deployAndSave/bondingRegistry";
 import { deployAndSaveCiphernodeRegistryOwnable } from "./deployAndSave/ciphernodeRegistryOwnable";
+import { deployAndSaveE3RefundManager } from "./deployAndSave/e3RefundManager";
 import { deployAndSaveEnclave } from "./deployAndSave/enclave";
 import { deployAndSaveEnclaveTicketToken } from "./deployAndSave/enclaveTicketToken";
 import { deployAndSaveEnclaveToken } from "./deployAndSave/enclaveToken";
 import { deployAndSaveMockStableToken } from "./deployAndSave/mockStableToken";
 import { deployAndSavePoseidonT3 } from "./deployAndSave/poseidonT3";
 import { deployAndSaveSlashingManager } from "./deployAndSave/slashingManager";
+import { deployAndSaveAllVerifiers } from "./deployAndSave/verifiers";
 import { deployMocks } from "./deployMocks";
+/**
+ * Default timeout configuration (in seconds)
+ */
+const DEFAULT_TIMEOUT_CONFIG = {
+    committeeFormationWindow: 3600,
+    dkgWindow: 7200,
+    computeWindow: 86400,
+    decryptionWindow: 3600,
+    gracePeriod: 600,
+};
 /**
  * Deploys the Enclave contracts
  */
@@ -108,11 +120,24 @@ export const deployEnclave = async (withMocks) => {
         maxDuration: THIRTY_DAYS_IN_SECONDS.toString(),
         registry: ciphernodeRegistryAddress,
         bondingRegistry: bondingRegistryAddress,
+        e3RefundManager: addressOne, // placeholder, will be updated
         feeToken: feeTokenAddress,
+        timeoutConfig: DEFAULT_TIMEOUT_CONFIG,
         hre,
     });
     const enclaveAddress = await enclave.getAddress();
     console.log("Enclave deployed to:", enclaveAddress);
+    console.log("Deploying E3RefundManager...");
+    const { e3RefundManager } = await deployAndSaveE3RefundManager({
+        owner: ownerAddress,
+        enclave: enclaveAddress,
+        treasury: ownerAddress, // Protocol treasury
+        hre,
+    });
+    const e3RefundManagerAddress = await e3RefundManager.getAddress();
+    console.log("E3RefundManager deployed to:", e3RefundManagerAddress);
+    console.log("Setting E3RefundManager in Enclave...");
+    await enclave.setE3RefundManager(e3RefundManagerAddress);
     ///////////////////////////////////////////
     // Configure cross-contract dependencies
     ///////////////////////////////////////////
@@ -134,6 +159,7 @@ export const deployEnclave = async (withMocks) => {
     await bondingRegistry.setSlashingManager(slashingManagerAddress);
     console.log("Setting Enclave as reward distributor in BondingRegistry...");
     await bondingRegistry.setRewardDistributor(enclaveAddress);
+    // E3RefundManager already has correct enclave from deployment
     if (shouldDeployMocks) {
         const { decryptionVerifierAddress, e3ProgramAddress } = await deployMocks();
         const encryptionSchemeId = ethers.keccak256(ethers.toUtf8Bytes("fhe.rs:BFV"));
@@ -151,6 +177,13 @@ export const deployEnclave = async (withMocks) => {
         await tx.wait();
         console.log(`Successfully enabled E3 Program in Enclave contract`);
     }
+    // Deploy circuit verifiers (if any exist in contracts/verifier/)
+    console.log("Deploying circuit verifiers...");
+    const verifierDeployments = await deployAndSaveAllVerifiers(hre);
+    const verifierEntries = Object.entries(verifierDeployments);
+    const verifierLines = verifierEntries.length > 0
+        ? verifierEntries.map(([name, addr]) => `    ${name}: ${addr}`).join("\n")
+        : "    (none)";
     console.log(`
     ============================================
     Deployment Complete!
@@ -161,7 +194,10 @@ export const deployEnclave = async (withMocks) => {
     SlashingManager: ${slashingManagerAddress}
     BondingRegistry: ${bondingRegistryAddress}
     CiphernodeRegistry: ${ciphernodeRegistryAddress}
+    E3RefundManager: ${e3RefundManagerAddress}
     Enclave: ${enclaveAddress}
+    Circuit Verifiers:
+${verifierLines}
     ============================================
   `);
 };

package/dist/scripts/deployVerifiers.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=deployVerifiers.d.ts.map

package/dist/scripts/deployVerifiers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployVerifiers.d.ts","sourceRoot":"","sources":["../../scripts/deployVerifiers.ts"],"names":[],"mappings":""}

package/dist/scripts/deployVerifiers.js

@@ -0,0 +1,33 @@
+// SPDX-License-Identifier: LGPL-3.0-only
+//
+// This file is provided WITHOUT ANY WARRANTY;
+// without even the implied warranty of MERCHANTABILITY
+// or FITNESS FOR A PARTICULAR PURPOSE.
+import hre from "hardhat";
+import { deployAndSaveAllVerifiers } from "./deployAndSave/verifiers";
+/**
+ * Standalone script to deploy only the circuit verifier contracts.
+ * Usage: hardhat run scripts/deployVerifiers.ts --network <network>
+ */
+const main = async () => {
+    console.log("Deploying circuit verifier contracts...\n");
+    const verifierDeployments = await deployAndSaveAllVerifiers(hre);
+    const entries = Object.entries(verifierDeployments);
+    if (entries.length === 0) {
+        console.log("No verifier contracts found in contracts/verifier/.");
+        return;
+    }
+    console.log(`
+    ============================================
+    Verifier Deployment Complete!
+    ============================================`);
+    for (const [name, address] of entries) {
+        console.log(`    ${name}: ${address}`);
+    }
+    console.log(`    ============================================
+  `);
+};
+main().catch((error) => {
+    console.error(error);
+    process.exit(1);
+});

package/dist/scripts/index.d.ts

@@ -12,5 +12,6 @@ export * from "./deployAndSave/slashingManager";
 export * from "./deployAndSave/mockComputeProvider";
 export * from "./deployAndSave/mockDecryptionVerifier";
 export * from "./deployAndSave/mockProgram";
+export * from "./deployAndSave/verifiers";
 export * from "./verify";
 //# sourceMappingURL=index.d.ts.map

package/dist/scripts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../scripts/index.ts"],"names":[],"mappings":"AAMA,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../scripts/index.ts"],"names":[],"mappings":"AAMA,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,sBAAsB,CAAC;AACrC,cAAc,iCAAiC,CAAC;AAChD,cAAc,2CAA2C,CAAC;AAC1D,cAAc,yBAAyB,CAAC;AACxC,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iCAAiC,CAAC;AAChD,cAAc,iCAAiC,CAAC;AAChD,cAAc,qCAAqC,CAAC;AACpD,cAAc,wCAAwC,CAAC;AACvD,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,UAAU,CAAC"}

package/dist/scripts/index.js

@@ -17,4 +17,5 @@ export * from "./deployAndSave/slashingManager";
 export * from "./deployAndSave/mockComputeProvider";
 export * from "./deployAndSave/mockDecryptionVerifier";
 export * from "./deployAndSave/mockProgram";
+export * from "./deployAndSave/verifiers";
 export * from "./verify";

package/dist/tasks/enclave.d.ts

@@ -1,8 +1,6 @@
 export declare const requestCommittee: import("hardhat/types/tasks").NewTaskDefinition;
 export declare const enableE3: import("hardhat/types/tasks").NewTaskDefinition;
 export declare const publishCommittee: import("hardhat/types/tasks").NewTaskDefinition;
-export declare const activateE3: import("hardhat/types/tasks").NewTaskDefinition;
-export declare const publishInput: import("hardhat/types/tasks").NewTaskDefinition;
 export declare const publishCiphertext: import("hardhat/types/tasks").NewTaskDefinition;
 export declare const publishPlaintext: import("hardhat/types/tasks").NewTaskDefinition;
 //# sourceMappingURL=enclave.d.ts.map

package/dist/tasks/enclave.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"enclave.d.ts","sourceRoot":"","sources":["../../tasks/enclave.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,gBAAgB,iDAkMnB,CAAC;AAEX,eAAO,MAAM,QAAQ,iDAyBX,CAAC;AAEX,eAAO,MAAM,gBAAgB,iDAsEnB,CAAC;AAEX,eAAO,MAAM,UAAU,iDAyBb,CAAC;AAEX,eAAO,MAAM,YAAY,iDA+Cf,CAAC;AAEX,eAAO,MAAM,iBAAiB,iDAsEpB,CAAC;AAEX,eAAO,MAAM,gBAAgB,iDAsEnB,CAAC"}
+{"version":3,"file":"enclave.d.ts","sourceRoot":"","sources":["../../tasks/enclave.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,gBAAgB,iDA6LnB,CAAC;AAEX,eAAO,MAAM,QAAQ,iDAyBX,CAAC;AAEX,eAAO,MAAM,gBAAgB,iDAsEnB,CAAC;AAEX,eAAO,MAAM,iBAAiB,iDAsEpB,CAAC;AAEX,eAAO,MAAM,gBAAgB,iDAsEnB,CAAC"}