zkenclave-sdk 0.1.6 → 0.1.17

package/dist/index.d.mts

@@ -17,6 +17,7 @@ interface WithdrawalRequest {
     merkleRoot?: Uint8Array;
     merklePath: Uint8Array[];
     pathIndices: boolean[];
+    secret?: Uint8Array;
 }
 interface WithdrawalResult {
     success: boolean;
@@ -92,11 +93,9 @@ declare class ZKProofClient {
     private loadWasm;
     generateWithdrawalProof(request: WithdrawalRequest): Promise<WithdrawalResult>;
     private generateRealProof;
-    private generateFallbackProof;
-    generateComplianceProof(commitment: Uint8Array, associationRoot: Uint8Array): Promise<ComplianceProof>;
+    generateComplianceProof(commitment: Uint8Array, associationPath: Uint8Array[], pathIndices: boolean[], associationRoot: Uint8Array): Promise<ComplianceProof>;
     verifyProof(proofResult: WithdrawalResult): Promise<boolean>;
     isWasmReady(): boolean;
-    private computeNullifierHash;
     private addressToBytes;
     private hexToBytes;
 }
@@ -113,7 +112,7 @@ declare class PrivacyVaultSDK {
     constructor(config: VaultConfig, signer?: ethers.Signer, zkClient?: ZKProofClient);
     connect(signer: ethers.Signer): Promise<void>;
     deposit(amount: bigint): Promise<DepositResult>;
-    withdraw(note: DepositNote, recipient: string): Promise<WithdrawalResult>;
+    withdraw(note: DepositNote, recipient: string, complianceProof?: Uint8Array): Promise<WithdrawalResult>;
     getLatestRoot(): Promise<Uint8Array>;
     getNextLeafIndex(): Promise<number>;
     isNullifierUsed(nullifier: Uint8Array): Promise<boolean>;

package/dist/index.d.ts

@@ -17,6 +17,7 @@ interface WithdrawalRequest {
     merkleRoot?: Uint8Array;
     merklePath: Uint8Array[];
     pathIndices: boolean[];
+    secret?: Uint8Array;
 }
 interface WithdrawalResult {
     success: boolean;
@@ -92,11 +93,9 @@ declare class ZKProofClient {
     private loadWasm;
     generateWithdrawalProof(request: WithdrawalRequest): Promise<WithdrawalResult>;
     private generateRealProof;
-    private generateFallbackProof;
-    generateComplianceProof(commitment: Uint8Array, associationRoot: Uint8Array): Promise<ComplianceProof>;
+    generateComplianceProof(commitment: Uint8Array, associationPath: Uint8Array[], pathIndices: boolean[], associationRoot: Uint8Array): Promise<ComplianceProof>;
     verifyProof(proofResult: WithdrawalResult): Promise<boolean>;
     isWasmReady(): boolean;
-    private computeNullifierHash;
     private addressToBytes;
     private hexToBytes;
 }
@@ -113,7 +112,7 @@ declare class PrivacyVaultSDK {
     constructor(config: VaultConfig, signer?: ethers.Signer, zkClient?: ZKProofClient);
     connect(signer: ethers.Signer): Promise<void>;
     deposit(amount: bigint): Promise<DepositResult>;
-    withdraw(note: DepositNote, recipient: string): Promise<WithdrawalResult>;
+    withdraw(note: DepositNote, recipient: string, complianceProof?: Uint8Array): Promise<WithdrawalResult>;
     getLatestRoot(): Promise<Uint8Array>;
     getNextLeafIndex(): Promise<number>;
     isNullifierUsed(nullifier: Uint8Array): Promise<boolean>;

package/dist/index.js

@@ -426,33 +426,28 @@ var ZKProofClient = class {
   wasmReady = false;
   constructor(config) {
     this.config = config ?? { useRealProofs: true };
-    if (this.config.useRealProofs) {
-      this.loadWasm();
-    }
+    this.loadWasm();
   }
   async loadWasm() {
     if (wasmModule) {
       this.wasmReady = true;
       return;
     }
-    try {
-      const wasmPath = this.config.wasmPath ?? "zkenclave-circuits";
-      const module2 = await import(
-        /* webpackIgnore: true */
-        wasmPath
-      );
-      wasmModule = module2;
-      this.wasmReady = true;
-    } catch {
-      console.warn("WASM module not available, falling back to mock proofs");
-      this.wasmReady = false;
-    }
+    const wasmPath = this.config.wasmPath ?? "zkenclave-circuits";
+    const module2 = await import(
+      /* webpackIgnore: true */
+      wasmPath
+    );
+    wasmModule = module2;
+    this.wasmReady = true;
   }
   async generateWithdrawalProof(request) {
-    if (this.config.useRealProofs && this.wasmReady && wasmModule) {
-      return this.generateRealProof(request);
+    if (!this.wasmReady || !wasmModule) {
+      throw new Error(
+        "WASM module not loaded. Make sure zkenclave-circuits is properly installed and configured."
+      );
     }
-    return this.generateFallbackProof(request);
+    return this.generateRealProof(request);
   }
   async generateRealProof(request) {
     const wasmRequest = {
@@ -480,62 +475,51 @@ var ZKProofClient = class {
       timestamp: Date.now()
     };
   }
-  async generateFallbackProof(request) {
-    const nullifierHash = this.computeNullifierHash(
-      request.nullifier,
-      request.leafIndex
-    );
-    const merkleRoot = request.merkleRoot ?? new Uint8Array(32);
-    const proof = new Uint8Array(256);
-    proof[0] = 1;
-    const amountHex = (0, import_ethers2.toBeHex)(request.amount, 32);
-    const amountBytes = this.hexToBytes(amountHex);
-    proof.set(amountBytes.slice(0, 32), 1);
-    proof.set(request.commitment.slice(0, 32), 33);
-    proof[250] = 90;
-    proof[251] = 75;
-    return {
-      success: true,
-      zkProof: proof,
-      nullifierHash,
-      merkleRoot,
-      timestamp: Date.now()
+  async generateComplianceProof(commitment, associationPath, pathIndices, associationRoot) {
+    if (!this.wasmReady || !wasmModule) {
+      throw new Error(
+        "WASM module not loaded. Make sure zkenclave-circuits is properly installed and configured."
+      );
+    }
+    const request = {
+      commitment: Array.from(commitment),
+      association_path: associationPath.map((p) => Array.from(p)),
+      path_indices: pathIndices,
+      association_root: Array.from(associationRoot)
     };
-  }
-  async generateComplianceProof(commitment, associationRoot) {
-    const proofId = (0, import_ethers2.keccak256)(
-      new Uint8Array([...commitment, ...associationRoot])
+    const resultJson = wasmModule.generate_compliance_proof(
+      JSON.stringify(request)
     );
+    const result = JSON.parse(resultJson);
+    if (!result.success) {
+      throw new Error(`Compliance proof generation failed: ${result.error}`);
+    }
     return {
-      id: proofId,
+      id: (0, import_ethers2.keccak256)(new Uint8Array(result.proof)),
       associationRoot,
       timestamp: Date.now(),
       valid: true,
-      proof: new Uint8Array(256)
+      proof: new Uint8Array(result.proof)
     };
   }
   async verifyProof(proofResult) {
-    if (this.wasmReady && wasmModule) {
-      const proofJson = JSON.stringify({
-        success: proofResult.success,
-        proof: Array.from(proofResult.zkProof),
-        nullifier_hash: Array.from(proofResult.nullifierHash),
-        public_inputs: [],
-        error: null
-      });
-      return wasmModule.verify_withdrawal_proof(proofJson);
+    if (!this.wasmReady || !wasmModule) {
+      throw new Error(
+        "WASM module not loaded. Make sure zkenclave-circuits is properly installed and configured."
+      );
     }
-    return proofResult.success && proofResult.zkProof.length > 0 && proofResult.zkProof[250] === 90 && proofResult.zkProof[251] === 75;
+    const proofJson = JSON.stringify({
+      success: proofResult.success,
+      proof: Array.from(proofResult.zkProof),
+      nullifier_hash: Array.from(proofResult.nullifierHash),
+      public_inputs: [],
+      error: null
+    });
+    return wasmModule.verify_withdrawal_proof(proofJson);
   }
   isWasmReady() {
     return this.wasmReady;
   }
-  computeNullifierHash(nullifier, leafIndex) {
-    const indexBytes = new TextEncoder().encode(leafIndex.toString());
-    const combined = new Uint8Array([...nullifier, ...indexBytes]);
-    const hash = (0, import_ethers2.keccak256)(combined);
-    return this.hexToBytes(hash);
-  }
   addressToBytes(address) {
     const clean = address.startsWith("0x") ? address.slice(2) : address;
     const bytes = [];
@@ -632,7 +616,7 @@ var PrivacyVaultSDK = class {
       note
     };
   }
-  async withdraw(note, recipient) {
+  async withdraw(note, recipient, complianceProof) {
     if (!this.signer) {
       throw new Error("Signer required for withdrawals");
     }
@@ -651,7 +635,8 @@ var PrivacyVaultSDK = class {
       leafIndex: note.leafIndex,
       merkleRoot: root,
       merklePath: [],
-      pathIndices: []
+      pathIndices: [],
+      secret: note.secret
     });
     const tx = await this.vault.withdraw(
       bytesToHex(nullifierHash),
@@ -659,7 +644,7 @@ var PrivacyVaultSDK = class {
       recipient,
       note.amount,
       zkProofResult.zkProof,
-      new Uint8Array(64),
+      complianceProof || new Uint8Array(64),
       { gasLimit: DEFAULT_GAS_LIMIT }
     );
     const receipt = await tx.wait();

package/dist/index.mjs

@@ -365,40 +365,35 @@ var MerkleTree = class {
 };
 
 // src/zk-client.ts
-import { keccak256 as keccak2562, toBeHex } from "ethers";
+import { keccak256 as keccak2562 } from "ethers";
 var wasmModule = null;
 var ZKProofClient = class {
   config;
   wasmReady = false;
   constructor(config) {
     this.config = config ?? { useRealProofs: true };
-    if (this.config.useRealProofs) {
-      this.loadWasm();
-    }
+    this.loadWasm();
   }
   async loadWasm() {
     if (wasmModule) {
       this.wasmReady = true;
       return;
     }
-    try {
-      const wasmPath = this.config.wasmPath ?? "zkenclave-circuits";
-      const module = await import(
-        /* webpackIgnore: true */
-        wasmPath
-      );
-      wasmModule = module;
-      this.wasmReady = true;
-    } catch {
-      console.warn("WASM module not available, falling back to mock proofs");
-      this.wasmReady = false;
-    }
+    const wasmPath = this.config.wasmPath ?? "zkenclave-circuits";
+    const module = await import(
+      /* webpackIgnore: true */
+      wasmPath
+    );
+    wasmModule = module;
+    this.wasmReady = true;
   }
   async generateWithdrawalProof(request) {
-    if (this.config.useRealProofs && this.wasmReady && wasmModule) {
-      return this.generateRealProof(request);
+    if (!this.wasmReady || !wasmModule) {
+      throw new Error(
+        "WASM module not loaded. Make sure zkenclave-circuits is properly installed and configured."
+      );
     }
-    return this.generateFallbackProof(request);
+    return this.generateRealProof(request);
   }
   async generateRealProof(request) {
     const wasmRequest = {
@@ -426,62 +421,51 @@ var ZKProofClient = class {
       timestamp: Date.now()
     };
   }
-  async generateFallbackProof(request) {
-    const nullifierHash = this.computeNullifierHash(
-      request.nullifier,
-      request.leafIndex
-    );
-    const merkleRoot = request.merkleRoot ?? new Uint8Array(32);
-    const proof = new Uint8Array(256);
-    proof[0] = 1;
-    const amountHex = toBeHex(request.amount, 32);
-    const amountBytes = this.hexToBytes(amountHex);
-    proof.set(amountBytes.slice(0, 32), 1);
-    proof.set(request.commitment.slice(0, 32), 33);
-    proof[250] = 90;
-    proof[251] = 75;
-    return {
-      success: true,
-      zkProof: proof,
-      nullifierHash,
-      merkleRoot,
-      timestamp: Date.now()
+  async generateComplianceProof(commitment, associationPath, pathIndices, associationRoot) {
+    if (!this.wasmReady || !wasmModule) {
+      throw new Error(
+        "WASM module not loaded. Make sure zkenclave-circuits is properly installed and configured."
+      );
+    }
+    const request = {
+      commitment: Array.from(commitment),
+      association_path: associationPath.map((p) => Array.from(p)),
+      path_indices: pathIndices,
+      association_root: Array.from(associationRoot)
     };
-  }
-  async generateComplianceProof(commitment, associationRoot) {
-    const proofId = keccak2562(
-      new Uint8Array([...commitment, ...associationRoot])
+    const resultJson = wasmModule.generate_compliance_proof(
+      JSON.stringify(request)
     );
+    const result = JSON.parse(resultJson);
+    if (!result.success) {
+      throw new Error(`Compliance proof generation failed: ${result.error}`);
+    }
     return {
-      id: proofId,
+      id: keccak2562(new Uint8Array(result.proof)),
       associationRoot,
       timestamp: Date.now(),
       valid: true,
-      proof: new Uint8Array(256)
+      proof: new Uint8Array(result.proof)
     };
   }
   async verifyProof(proofResult) {
-    if (this.wasmReady && wasmModule) {
-      const proofJson = JSON.stringify({
-        success: proofResult.success,
-        proof: Array.from(proofResult.zkProof),
-        nullifier_hash: Array.from(proofResult.nullifierHash),
-        public_inputs: [],
-        error: null
-      });
-      return wasmModule.verify_withdrawal_proof(proofJson);
+    if (!this.wasmReady || !wasmModule) {
+      throw new Error(
+        "WASM module not loaded. Make sure zkenclave-circuits is properly installed and configured."
+      );
     }
-    return proofResult.success && proofResult.zkProof.length > 0 && proofResult.zkProof[250] === 90 && proofResult.zkProof[251] === 75;
+    const proofJson = JSON.stringify({
+      success: proofResult.success,
+      proof: Array.from(proofResult.zkProof),
+      nullifier_hash: Array.from(proofResult.nullifierHash),
+      public_inputs: [],
+      error: null
+    });
+    return wasmModule.verify_withdrawal_proof(proofJson);
   }
   isWasmReady() {
     return this.wasmReady;
   }
-  computeNullifierHash(nullifier, leafIndex) {
-    const indexBytes = new TextEncoder().encode(leafIndex.toString());
-    const combined = new Uint8Array([...nullifier, ...indexBytes]);
-    const hash = keccak2562(combined);
-    return this.hexToBytes(hash);
-  }
   addressToBytes(address) {
     const clean = address.startsWith("0x") ? address.slice(2) : address;
     const bytes = [];
@@ -578,7 +562,7 @@ var PrivacyVaultSDK = class {
       note
     };
   }
-  async withdraw(note, recipient) {
+  async withdraw(note, recipient, complianceProof) {
     if (!this.signer) {
       throw new Error("Signer required for withdrawals");
     }
@@ -597,7 +581,8 @@ var PrivacyVaultSDK = class {
       leafIndex: note.leafIndex,
       merkleRoot: root,
       merklePath: [],
-      pathIndices: []
+      pathIndices: [],
+      secret: note.secret
     });
     const tx = await this.vault.withdraw(
       bytesToHex(nullifierHash),
@@ -605,7 +590,7 @@ var PrivacyVaultSDK = class {
       recipient,
       note.amount,
       zkProofResult.zkProof,
-      new Uint8Array(64),
+      complianceProof || new Uint8Array(64),
       { gasLimit: DEFAULT_GAS_LIMIT }
     );
     const receipt = await tx.wait();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zkenclave-sdk",
-  "version": "0.1.6",
+  "version": "0.1.17",
   "description": "TypeScript SDK for privacy-preserving vault withdrawals with ZK proofs",
   "main": "dist/index.js",
   "module": "dist/index.mjs",