SuiBian is a decentralised platform for creating, deploying, and subscribing to autonomous trading agents on the Sui blockchain. It features a modern Next.js frontend, robust backend services, and secure on-chain smart contracts with TEE (Trusted Execution Environment) integration.

• SuiBian
  • Table of Contents
  • Project Structure
  • Frontend
    • zkLogin Integration
    • Walrus Integration
    • Setup
      • Prerequisites
      • Installation
      • Running Locally
      • Environment Variables
  • Backend & Smart Contracts
    • Architecture
    • Key Modules
      • Agent Registry
      • Subscription Management
      • Slashing & Insurance
      • Validation Tasks
  • Devnet Deployment Information
    • Marketplace
    • Dex

.
├── avs/                  # Directory for Actively Validated Services (AVS)
│   └── avs_on_chain/
├── backend/              # Off-chain backend services and marketplace logic
├── frontend/             # Next.js frontend (React, TailwindCSS)
├── nautilus-trading-agent/ # TEE-based trading agent with AWS Nitro Enclave
│   ├── move/             # Move smart contracts for enclave verification
│   ├── src/              # Rust enclave implementation
│   └── dex/              # DEX integration contracts

• Integrates Sui zkLogin for passwordless, privacy-preserving user authentication.
• Users can sign in with supported OAuth providers (e.g., Google) without exposing private keys.
• Authentication state is managed globally and used for secure agent interactions.
• See implementation in frontend/components/auth/ and related hooks.

• Integrates Walrus for storing user's salt to generate their zkLogin proof for their login
• Because of the nature of zkLogin, the SUI address generated will always be different if a different salt value is used. Thus, the user's salt value is stored in Walrus to ensure the same salt value used for every login.
• This allows the user to always have the same SUI address while using the same OAuth login.

• Node.js (v18+ recommended)
• npm or yarn

cd frontend
npm install
# or
yarn install

npm run dev
# or
yarn dev

The app will be available at http://localhost:3000.

• Copy .env.example to .env and fill in required values (see frontend/.env) for Firebase

• Smart Contracts: Written in Move, deployed on Sui. Located in avs/avs_on_chain.
• Backend Services: Off-chain services for agent management, TEE communication, and marketplace logic. Located in backend/.
• TEE Integration: Integrates with Trusted Execution Environments for secure, verifiable computation via AWS Nitro Enclaves.

• Manages agent creation, metadata, and ownership.
• Supports agent subscription and fee logic.

• Allows users to subscribe to agents, enforcing fee payments and access control.
• Tracks subscriber lists and agent performance.

• Implements validator slashing for misbehavior.
• Maintains an insurance fund to reward correct validators and compensate for slashing events.
• See slashing.move for logic:
  • reward_validator: Rewards correct votes.
  • slash_validator_with_insurance: Slashes incorrect validators, adds to insurance fund.
  • Getters for insurance fund balance, slash rate, rewards, etc.

• Assigns and tracks validation tasks for agents and validators.
• Handles consensus and voting logic.

The Nautilus Trading Agent represents a production-ready implementation of a TEE-based autonomous trading system running in AWS Nitro Enclaves with full blockchain integration.

• AWS EC2 Instance: 47.129.86.96 (m5.xlarge with Nitro Enclaves enabled)
• Enclave CID: 18
• Memory Allocation: 512 MiB
• CPU Allocation: 2 cores (CPU IDs: 1, 3)
• Port Exposure: 3000 (globally accessible)

• Reproducible Builds: Identical PCR values across different build environments
• Isolated Execution: Private keys never leave the secure enclave
• VSOCK Communication: Secure host-enclave communication protocol
• Attestation Document: Cryptographic proof of enclave integrity

Enclave Framework Package

• Package ID: 0x9a9061d46c3fd8a08df5f31c09ef32867d8f4f51dac7cf23b36381fcecdcef82
• Module: enclave::enclave
• Purpose: Core enclave verification infrastructure, PCR management, signature validation

Trading Agent Package

• Package ID: 0xb66ee07ed5037f71b209a9d068a84d73520bd92837924e065f9d02b537950eab
• Module: app::trading_agent
• Purpose: Trading logic, wallet management, DEX integration, onchain verification

Administrative Objects

• Cap Object: 0xfb58b7ea48ac298c3669116a49f692dd0d482bbdad4485518af065c601363b6e (Admin control capability)
• Enclave Config: 0x7afdb87c0421b3e44b18300c64ee322349705ca9815461f41fc06933c536ae5d (PCR storage & verification)
• Enclave Instance: 0x2287e4a6fa3bd8b33ca734dc78ced5a5a2958e127b1bc4b0816b9bee1b8d5a97 (Public key verification)

PCRs provide cryptographic measurement of the enclave's integrity:

PCR0: 33bd0d71ef8fa2a1308f5f2f26004f3b045316de37f30c62da9d8faf0a5a9bda7056622b5dc23332699e4ef0c7974926
PCR1: 33bd0d71ef8fa2a1308f5f2f26004f3b045316de37f30c62da9d8faf0a5a9bda7056622b5dc23332699e4ef0c7974926  
PCR2: 21b9efbc184807662e966d34f390821309eeac6802309798826296bf3e8bec7c10edb30948c90ba67310f7b964fc500a

What Each PCR Represents:

• PCR0: Enclave image file hash (varies by build environment)
• PCR1: Enclave kernel hash (varies by build environment)
• PCR2: Application code hash (identical across builds = reproducible)

Security Guarantees:

• Code Integrity: PCR2 matching confirms identical application logic
• Attestation Chain: AWS root certificate validates enclave authenticity
• Signature Verification: All trading responses cryptographically signed by enclave
• Owner Authorization: Only designated owner can withdraw funds

1. Deployment: PCR values registered onchain during deployment
2. Attestation: Enclave provides cryptographic attestation document
3. Registration: Public key extracted and verified against PCRs
4. Operation: All trading signatures verified against registered public key

http://47.129.86.96:3000

# Health check
curl http://47.129.86.96:3000/ping
# Response: "Trading Agent TEE v1.0 - Ready!"

# System status
curl http://47.129.86.96:3000/health

# Cryptographic attestation document
curl http://47.129.86.96:3000/attestation

# Initialize trading wallet
curl -X POST http://47.129.86.96:3000/init_wallet \
  -H "Content-Type: application/json" \
  -d '{"payload": {"owner_address": "0x91d6de6ad4363ec6947bd621aedd2e0ded77cbd1b8607a46e237ebfd082697f5"}}'

# Check wallet status and balances
curl -X POST http://47.129.86.96:3000/wallet_status \
  -H "Content-Type: application/json" \
  -d '{"payload": {}}'

# Execute DEX trades
curl -X POST http://47.129.86.96:3000/execute_trade \
  -H "Content-Type: application/json" \
  -d '{"payload": {"action": "sell_sui", "amount": 90000000, "min_output": 500000}}'

# Withdraw funds (owner only)
curl -X POST http://47.129.86.96:3000/withdraw \
  -H "Content-Type: application/json" \
  -d '{"payload": {"recipient": "0x91d6de6ad4363ec6947bd621aedd2e0ded77cbd1b8607a46e237ebfd082697f5", "amount": 500000000, "coin_type": "sui"}}'

# Simple SUI transfer
curl -X POST http://47.129.86.96:3000/simple_transfer \
  -H "Content-Type: application/json" \
  -d '{"payload": {"recipient": "0x91d6de6ad4363ec6947bd621aedd2e0ded77cbd1b8607a46e237ebfd082697f5", "amount": 100000000}}'

# Subscription-based withdrawal
curl -X POST http://47.129.86.96:3000/subscription_withdraw \
  -H "Content-Type: application/json" \
  -d '{"payload": {"recipient": "0x91d6de6ad4363ec6947bd621aedd2e0ded77cbd1b8607a46e237ebfd082697f5", "amount": 100000000, "coin_type": "sui"}}'

All trading endpoints return cryptographically signed responses:

{
  "response": {
    "data": {
      "transaction_digest": "0x...",
      "action": "sell_sui",
      "input_amount": 90000000,
      "output_amount": 550000
    },
    "timestamp_ms": 1703001234567,
    "intent": "ProcessData"
  },
  "signature": "0xabc123..." // Ed25519 signature verifiable onchain
}

Sui DEX Constants:

• Pool ID: 0xc5f6cc6b19acbfab90f17b1e5b0c2a7bd18e0b0a1a5a3b3c5d5e7f8a9b0c1d2e
• DEX Package: 0x742d35cc6ba1c4bf0bb4d8c7d3c4b0ce15c4c51eb8b6e7e1a1d4b5c3b4f6a7b8
• USDC Token: 0x742d35cc6ba1c4bf0bb4d8c7d3c4b0ce15c4c51eb8b6e7e1a1d4b5c3b4f6a7b8::usdc::USDC

Amount Units:

• SUI: 1 SUI = 1,000,000,000 MIST (9 decimals)
• USDC: 1 USDC = 1,000,000 µUSDC (6 decimals)

• Package ID: 0x705da1cf5e87858f32787d79745381f2f523c8006794ef209169c7472afb09fa
• Subscription Manager ID: 0xc212a5ecf3febcc7e534e2f4cbcb722388bd7dd5974c78c12142612b63cae12a
• DEPLOYER_CAP: 0x5bbdc2609e23cd3e82f07d9a0c0be2191e1343728d8234d3f55da4d8d09e679a

Enclave Framework:

• Package ID: 0x9a9061d46c3fd8a08df5f31c09ef32867d8f4f51dac7cf23b36381fcecdcef82
• Module: enclave::enclave

Trading Agent:

• Package ID: 0xb66ee07ed5037f71b209a9d068a84d73520bd92837924e065f9d02b537950eab
• Module: app::trading_agent
• Cap Object: 0xfb58b7ea48ac298c3669116a49f692dd0d482bbdad4485518af065c601363b6e
• Enclave Config: 0x7afdb87c0421b3e44b18300c64ee322349705ca9815461f41fc06933c536ae5d
• Enclave Instance: 0x2287e4a6fa3bd8b33ca734dc78ced5a5a2958e127b1bc4b0816b9bee1b8d5a97

• Package ID: 0x58148fa87d972dd4f2c6110dce24d2320486d7cf56143024c3fae7e3c968961f
• Pool ID: 0xa6a1b60fe6d3c94dcd7533002c46ed122140ade275e8fca1be835a7bdb525aa0
• Admin Cap ID: 0x6f0d09a193b2ecc8a873f753aa56fce4629e72eb66ae0c47df553767ff788f18
• Treasury Cap ID: 0xd058176e995cd09c255a07ef0b6a63ba812f1eb72eeb8eabd991e885d2e9cf0e

• Package ID: 0xc61c053b1df7e80fd60e04896609d5631f93616d894411d22f5ee37cba50e981
• Registry ID: 0x523aa5391590c7eb28c87c2d4112d2bd40262467c37d04a523ba6cfbb0cf6e9f
• Slashing Manager ID: 0x148da6bf784488077b97fb90f5e28a45f548d55759076f59487e73c3a6316fb0

Key Modules:

• validator_registry::register_validator - Register validators with stake
• validator_registry::deactivate_validator - Deactivate validator status
• validation_task::create_validation_task - Create validation tasks for trading transactions
• validation_task::submit_vote_with_proof - Submit votes with cryptographic proofs
• consensus::check_consensus - Check consensus on validation tasks
• slashing::execute_slashing - Execute slashing for incorrect validators
• slashing::initialize_insurance_fund - Initialize insurance fund for validator rewards

Live Endpoints:

• Base URL: http://47.129.86.96:3000
• Status: ✅ Active (24/7 global access)