Pinata

┌─────────────┐      ┌─────────────┐      ┌─────────────┐
│   Client    │      │   zkTerm    │      │   Pinata    │
│  (Browser)  │      │   Server    │      │    IPFS     │
├─────────────┤      ├─────────────┤      ├─────────────┤
│ 1. Encrypt  │ ───> │ 2. Upload   │ ───> │ 3. Pin      │
│    file     │      │    to API   │      │    to IPFS  │
│             │ <─── │ 4. Return   │ <─── │ 5. Return   │
│             │      │    CID      │      │    CID      │
└─────────────┘      └─────────────┘      └─────────────┘

zk storage upload              # Upload → Pinata → IPFS
zk storage download <file-id>  # Pinata Gateway → Decrypt
zk storage list                # List files (metadata from DB)

const response = await fetch('https://api.pinata.cloud/pinning/pinFileToIPFS', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${PINATA_JWT}`,
  },
  body: formData,
});

const { IpfsHash } = await response.json();
// IpfsHash is the CID, e.g., "QmXyz123..."

const gateways = [
  'https://gateway.pinata.cloud/ipfs',
  'https://cloudflare-ipfs.com/ipfs',
  'https://ipfs.io/ipfs',
];

const response = await fetch(`${gateway}/${cid}`);

{
  "originalName": "document.pdf",
  "originalSize": 1234567,
  "iv": "base64...",
  "salt": "base64...",
  "iterations": 100000,
  "zkEnabled": true,
  "commitment": "poseidon-hash..."
}

for (let attempt = 1; attempt <= 3; attempt++) {
  try {
    return await uploadToPinata(buffer, filename);
  } catch (error) {
    await sleep(1000 * attempt); // 1s, 2s, 3s
  }
}