Deploy, fund and claim a vesting

import { createPublicClient, createWalletClient, http, parseEventLogs, toHex } from "viem";
import { sepolia } from "viem/chains";
import { privateKeyToAccount } from "viem/accounts";
import { createSepoliaEncryptor } from "@tokenops/sdk/fhe";
import {
  createConfidentialVestingFactoryClient,
  createConfidentialVestingManagerClient,
  confidentialVestingManagerAbi,
  setOperator,
  FeeType,
} from "@tokenops/sdk/fhe-vesting";

const account = privateKeyToAccount(process.env.PRIVATE_KEY as `0x${string}`);
const publicClient = createPublicClient({ chain: sepolia, transport: http(process.env.RPC_URL) });
const walletClient = createWalletClient({ account, chain: sepolia, transport: http(process.env.RPC_URL) });

// A ZamaSDK over the Sepolia preset. Call terminate() before the process exits.
const encryptor = await createSepoliaEncryptor({ rpcUrl: process.env.RPC_URL! });

// 1. Deploy a manager clone. The factory address resolves from DEPLOYED_ADDRESSES.
const token = process.env.ERC7984_TOKEN_ADDRESS as `0x${string}`;
const factory = createConfidentialVestingFactoryClient({ publicClient, walletClient });
const { manager: managerAddress } = await factory.createManagerAndGetAddress({
  token,
  userSalt: toHex(crypto.getRandomValues(new Uint8Array(32))), // fresh per deploy
});

// 2. Let the clone pull from your confidential balance. Waits for the receipt.
await setOperator({ publicClient, walletClient, token, spender: managerAddress });

// 3. Open a schedule. Pass plaintext; the SDK encrypts it.
const manager = createConfidentialVestingManagerClient({
  publicClient,
  walletClient,
  address: managerAddress,
  encryptor,
});
const recipientWalletClient = createWalletClient({
  account: privateKeyToAccount(process.env.RECIPIENT_PRIVATE_KEY as `0x${string}`),
  chain: sepolia,
  transport: http(process.env.RPC_URL),
});
const recipient = recipientWalletClient.account.address;
const now = Math.floor(Date.now() / 1000);
const params = {
  recipient,
  startTimestamp: now,
  endTimestamp: now + 365 * 86400,
  cliffSeconds: 90 * 86400,
  releaseIntervalSecs: 86400,
  timelockSeconds: 0,
  initialUnlockBps: 0,
  cliffAmountBps: 0,
  isRevocable: true,
};

// Optional: the same checks the write would fail on, collected as typed errors.
const report = await manager.preflightCreateVesting({ params, creator: account.address });
if (!report.ready) throw report.blockerErrors[0];

const hash = await manager.createVesting({ params, amount: 1_000_000n }); // 1 token at 6 decimals
const receipt = await publicClient.waitForTransactionReceipt({ hash });
const [created] = parseEventLogs({
  abi: confidentialVestingManagerAbi,
  eventName: "VestingCreated",
  logs: receipt.logs,
});
const vestingId = created!.args.vestingId;

// 4. The recipient claims from a client over their own wallet. Before the 90-day
// cliff this claims an encrypted zero; run it after the cliff, or set cliffSeconds: 0 for a demo.
const recipientManager = createConfidentialVestingManagerClient({
  publicClient,
  walletClient: recipientWalletClient,
  address: managerAddress,
});
// ClaimArgs is discriminated by the clone's fee model; read it, do not assume it.
const { feeType, fee } = await recipientManager.getFeeInfo();
await recipientManager.claim(
  feeType === FeeType.Gas ? { vestingId, feeType, value: fee } : { vestingId, feeType },
);

encryptor.terminate();