zkenclave-sdk 0.1.18 → 0.1.21

package/dist/index.d.mts

@@ -113,6 +113,8 @@ declare class PrivacyVaultSDK {
     connect(signer: ethers.Signer): Promise<void>;
     deposit(amount: bigint): Promise<DepositResult>;
     withdraw(note: DepositNote, recipient: string, complianceProof?: Uint8Array): Promise<WithdrawalResult>;
+    withdrawViaTEE(note: DepositNote, recipient: string, teeEndpoint?: string): Promise<WithdrawalResult>;
+    private serializeTEEAttestation;
     getLatestRoot(): Promise<Uint8Array>;
     getNextLeafIndex(): Promise<number>;
     isNullifierUsed(nullifier: Uint8Array): Promise<boolean>;
@@ -150,7 +152,7 @@ declare class MerkleTree {
 
 declare const MERKLE_TREE_DEPTH = 20;
 declare const FIELD_SIZE: bigint;
-declare const DEFAULT_GAS_LIMIT = 500000n;
+declare const DEFAULT_GAS_LIMIT = 3000000n;
 declare const DEFAULT_BATCH_SIZE = 10;
 declare const PROOF_EXPIRY_MS = 300000;
 declare const CONTRACT_ADDRESSES: {

package/dist/index.d.ts

@@ -113,6 +113,8 @@ declare class PrivacyVaultSDK {
     connect(signer: ethers.Signer): Promise<void>;
     deposit(amount: bigint): Promise<DepositResult>;
     withdraw(note: DepositNote, recipient: string, complianceProof?: Uint8Array): Promise<WithdrawalResult>;
+    withdrawViaTEE(note: DepositNote, recipient: string, teeEndpoint?: string): Promise<WithdrawalResult>;
+    private serializeTEEAttestation;
     getLatestRoot(): Promise<Uint8Array>;
     getNextLeafIndex(): Promise<number>;
     isNullifierUsed(nullifier: Uint8Array): Promise<boolean>;
@@ -150,7 +152,7 @@ declare class MerkleTree {
 
 declare const MERKLE_TREE_DEPTH = 20;
 declare const FIELD_SIZE: bigint;
-declare const DEFAULT_GAS_LIMIT = 500000n;
+declare const DEFAULT_GAS_LIMIT = 3000000n;
 declare const DEFAULT_BATCH_SIZE = 10;
 declare const PROOF_EXPIRY_MS = 300000;
 declare const CONTRACT_ADDRESSES: {

package/dist/index.js

@@ -61,7 +61,7 @@ var MERKLE_TREE_DEPTH = 20;
 var FIELD_SIZE = BigInt(
   "21888242871839275222246405745257275088548364400416034343698204186575808495617"
 );
-var DEFAULT_GAS_LIMIT = 500000n;
+var DEFAULT_GAS_LIMIT = 3000000n;
 var DEFAULT_BATCH_SIZE = 10;
 var PROOF_EXPIRY_MS = 3e5;
 var CONTRACT_ADDRESSES = {
@@ -659,6 +659,71 @@ var PrivacyVaultSDK = class {
       timestamp: Date.now()
     };
   }
+  async withdrawViaTEE(note, recipient, teeEndpoint = "/api/tee-withdraw") {
+    if (!this.signer) {
+      throw new Error("Signer required for withdrawals");
+    }
+    const root = await this.getLatestRoot();
+    const merklePath = this._merkleTree.generateProof(note.leafIndex);
+    const response = await fetch(teeEndpoint, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        commitment: Array.from(note.commitment),
+        nullifierSeed: Array.from(note.nullifierSeed),
+        secret: Array.from(note.secret),
+        amount: note.amount.toString(),
+        leafIndex: note.leafIndex,
+        recipient,
+        merklePath: merklePath.path.map((p) => Array.from(p)),
+        pathIndices: merklePath.indices,
+        merkleRoot: Array.from(root)
+      })
+    });
+    if (!response.ok) {
+      const error = await response.json();
+      throw new Error(error.error || "TEE withdrawal failed");
+    }
+    const result = await response.json();
+    if (!result.success) {
+      throw new Error(result.error || "TEE withdrawal failed");
+    }
+    const tx = await this.vault.withdraw(
+      result.nullifierHash,
+      bytesToHex(root),
+      recipient,
+      note.amount,
+      hexToBytes(result.zkProof),
+      this.serializeTEEAttestation(result.teeAttestation),
+      { gasLimit: DEFAULT_GAS_LIMIT }
+    );
+    const receipt = await tx.wait();
+    return {
+      success: true,
+      txHash: receipt.hash,
+      zkProof: hexToBytes(result.zkProof),
+      nullifierHash: hexToBytes(result.nullifierHash),
+      merkleRoot: root,
+      timestamp: Date.now()
+    };
+  }
+  serializeTEEAttestation(attestation) {
+    const enclaveId = hexToBytes(attestation.enclaveId);
+    const dataHash = hexToBytes(attestation.dataHash);
+    const signature = hexToBytes(attestation.signature);
+    const timestampBytes = new Uint8Array(8);
+    new DataView(timestampBytes.buffer).setBigUint64(
+      0,
+      BigInt(attestation.timestamp),
+      false
+    );
+    return new Uint8Array([
+      ...enclaveId,
+      ...timestampBytes,
+      ...dataHash,
+      ...signature
+    ]);
+  }
   async getLatestRoot() {
     const root = await this.readVault.getLatestRoot();
     return hexToBytes(root);

package/dist/index.mjs

@@ -7,7 +7,7 @@ var MERKLE_TREE_DEPTH = 20;
 var FIELD_SIZE = BigInt(
   "21888242871839275222246405745257275088548364400416034343698204186575808495617"
 );
-var DEFAULT_GAS_LIMIT = 500000n;
+var DEFAULT_GAS_LIMIT = 3000000n;
 var DEFAULT_BATCH_SIZE = 10;
 var PROOF_EXPIRY_MS = 3e5;
 var CONTRACT_ADDRESSES = {
@@ -605,6 +605,71 @@ var PrivacyVaultSDK = class {
       timestamp: Date.now()
     };
   }
+  async withdrawViaTEE(note, recipient, teeEndpoint = "/api/tee-withdraw") {
+    if (!this.signer) {
+      throw new Error("Signer required for withdrawals");
+    }
+    const root = await this.getLatestRoot();
+    const merklePath = this._merkleTree.generateProof(note.leafIndex);
+    const response = await fetch(teeEndpoint, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        commitment: Array.from(note.commitment),
+        nullifierSeed: Array.from(note.nullifierSeed),
+        secret: Array.from(note.secret),
+        amount: note.amount.toString(),
+        leafIndex: note.leafIndex,
+        recipient,
+        merklePath: merklePath.path.map((p) => Array.from(p)),
+        pathIndices: merklePath.indices,
+        merkleRoot: Array.from(root)
+      })
+    });
+    if (!response.ok) {
+      const error = await response.json();
+      throw new Error(error.error || "TEE withdrawal failed");
+    }
+    const result = await response.json();
+    if (!result.success) {
+      throw new Error(result.error || "TEE withdrawal failed");
+    }
+    const tx = await this.vault.withdraw(
+      result.nullifierHash,
+      bytesToHex(root),
+      recipient,
+      note.amount,
+      hexToBytes(result.zkProof),
+      this.serializeTEEAttestation(result.teeAttestation),
+      { gasLimit: DEFAULT_GAS_LIMIT }
+    );
+    const receipt = await tx.wait();
+    return {
+      success: true,
+      txHash: receipt.hash,
+      zkProof: hexToBytes(result.zkProof),
+      nullifierHash: hexToBytes(result.nullifierHash),
+      merkleRoot: root,
+      timestamp: Date.now()
+    };
+  }
+  serializeTEEAttestation(attestation) {
+    const enclaveId = hexToBytes(attestation.enclaveId);
+    const dataHash = hexToBytes(attestation.dataHash);
+    const signature = hexToBytes(attestation.signature);
+    const timestampBytes = new Uint8Array(8);
+    new DataView(timestampBytes.buffer).setBigUint64(
+      0,
+      BigInt(attestation.timestamp),
+      false
+    );
+    return new Uint8Array([
+      ...enclaveId,
+      ...timestampBytes,
+      ...dataHash,
+      ...signature
+    ]);
+  }
   async getLatestRoot() {
     const root = await this.readVault.getLatestRoot();
     return hexToBytes(root);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zkenclave-sdk",
-  "version": "0.1.18",
+  "version": "0.1.21",
   "description": "TypeScript SDK for privacy-preserving vault withdrawals with ZK proofs",
   "main": "dist/index.js",
   "module": "dist/index.mjs",