@bolyra/sdk 0.2.0 → 0.3.0

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,WAAY,SAAQ,KAAK;IAG3B,IAAI,EAAE,MAAM;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAK3C;AAED,qBAAa,oBAAqB,SAAQ,WAAW;gBACvC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAO5C;AAED,qBAAa,iBAAkB,SAAQ,WAAW;gBACpC,MAAM,EAAE,MAAM;CAO3B;AAED,qBAAa,sBAAuB,SAAQ,WAAW;gBACzC,OAAO,EAAE,MAAM;CAG5B;AAED,qBAAa,sBAAuB,SAAQ,WAAW;gBACzC,eAAe,EAAE,MAAM;CAOpC;AAED,qBAAa,oBAAqB,SAAQ,WAAW;gBACvC,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;CAU3D;AAED,qBAAa,eAAgB,SAAQ,WAAW;gBAClC,QAAQ,EAAE,OAAO,GAAG,OAAO;CAOxC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,WAAY,SAAQ,KAAK;IAG3B,IAAI,EAAE,MAAM;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAFxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAK3C;AAED,qBAAa,oBAAqB,SAAQ,WAAW;gBACvC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAO5C;AAED,qBAAa,iBAAkB,SAAQ,WAAW;gBACpC,MAAM,EAAE,MAAM;CAO3B;AAED,qBAAa,sBAAuB,SAAQ,WAAW;gBACzC,OAAO,EAAE,MAAM;CAG5B;AAED,qBAAa,sBAAuB,SAAQ,WAAW;gBACzC,eAAe,EAAE,MAAM;CAOpC;AAED,qBAAa,oBAAqB,SAAQ,WAAW;gBACvC,cAAc,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM;CAU3D;AAED,qBAAa,eAAgB,SAAQ,WAAW;gBAClC,QAAQ,EAAE,OAAO,GAAG,OAAO;CAOxC;AAED,qBAAa,kBAAmB,SAAQ,WAAW;gBACrC,MAAM,EAAE,MAAM;CAO3B;AAED,qBAAa,4BAA6B,SAAQ,oBAAoB;gBACxD,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM;CAWzE;AAED,qBAAa,eAAgB,SAAQ,WAAW;gBAClC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAQ9D;AAED,qBAAa,kBAAmB,SAAQ,WAAW;gBACrC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAQ1C"}

package/dist/errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.StaleProofError = exports.ScopeEscalationError = exports.ExpiredCredentialError = exports.InvalidPermissionError = exports.VerificationError = exports.ProofGenerationError = exports.BolyraError = void 0;
+exports.ConfigurationError = exports.MerkleTreeError = exports.CircuitArtifactNotFoundError = exports.InvalidSecretError = exports.StaleProofError = exports.ScopeEscalationError = exports.ExpiredCredentialError = exports.InvalidPermissionError = exports.VerificationError = exports.ProofGenerationError = exports.BolyraError = void 0;
 class BolyraError extends Error {
     code;
     details;
@@ -51,4 +51,35 @@ class StaleProofError extends BolyraError {
     }
 }
 exports.StaleProofError = StaleProofError;
+class InvalidSecretError extends BolyraError {
+    constructor(reason) {
+        super(`Invalid secret: ${reason}. Provide a non-zero bigint less than the BN254 scalar field order (approx 2^254).`, 'INVALID_SECRET', { reason });
+    }
+}
+exports.InvalidSecretError = InvalidSecretError;
+class CircuitArtifactNotFoundError extends ProofGenerationError {
+    constructor(artifactPath, artifactType) {
+        super(artifactType === 'vkey' ? 'verification' : 'proof generation', `Circuit artifact not found: ${artifactPath}. ` +
+            `Ensure the ${artifactType} file exists at this path. ` +
+            `If using a custom circuitDir, verify it contains the compiled circuit outputs. ` +
+            `Run the circuit build script or download trusted artifacts from the Bolyra release.`);
+        this.code = 'CIRCUIT_ARTIFACT_NOT_FOUND';
+        this.details = { ...this.details, artifactPath, artifactType };
+    }
+}
+exports.CircuitArtifactNotFoundError = CircuitArtifactNotFoundError;
+class MerkleTreeError extends BolyraError {
+    constructor(reason, details) {
+        super(`Merkle tree operation failed: ${reason}. ` +
+            `Check that the tree is properly initialized and the leaf index is within bounds.`, 'MERKLE_TREE_ERROR', { reason, ...details });
+    }
+}
+exports.MerkleTreeError = MerkleTreeError;
+class ConfigurationError extends BolyraError {
+    constructor(field, reason) {
+        super(`Invalid SDK configuration for "${field}": ${reason}. ` +
+            `Review the BolyraConfig interface and ensure all required fields are set correctly.`, 'CONFIGURATION_ERROR', { field, reason });
+    }
+}
+exports.ConfigurationError = ConfigurationError;
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAAA,MAAa,WAAY,SAAQ,KAAK;IAG3B;IACA;IAHT,YACE,OAAe,EACR,IAAY,EACZ,OAAiC;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAA0B;QAGxC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AATD,kCASC;AAED,MAAa,oBAAqB,SAAQ,WAAW;IACnD,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CACH,sBAAsB,OAAO,WAAW,MAAM,EAAE,EAChD,yBAAyB,EACzB,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;IACJ,CAAC;CACF;AARD,oDAQC;AAED,MAAa,iBAAkB,SAAQ,WAAW;IAChD,YAAY,MAAc;QACxB,KAAK,CACH,iCAAiC,MAAM,EAAE,EACzC,qBAAqB,EACrB,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,CAAC;CACF;AARD,8CAQC;AAED,MAAa,sBAAuB,SAAQ,WAAW;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACvC,CAAC;CACF;AAJD,wDAIC;AAED,MAAa,sBAAuB,SAAQ,WAAW;IACrD,YAAY,eAAuB;QACjC,KAAK,CACH,+BAA+B,eAAe,EAAE,EAChD,oBAAoB,EACpB,EAAE,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE,EAAE,CAChD,CAAC;IACJ,CAAC;CACF;AARD,wDAQC;AAED,MAAa,oBAAqB,SAAQ,WAAW;IACnD,YAAY,cAAsB,EAAE,cAAsB;QACxD,KAAK,CACH,iDAAiD,cAAc,yCAAyC,cAAc,GAAG,EACzH,kBAAkB,EAClB;YACE,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;YACzC,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;SAC1C,CACF,CAAC;IACJ,CAAC;CACF;AAXD,oDAWC;AAED,MAAa,eAAgB,SAAQ,WAAW;IAC9C,YAAY,QAA2B;QACrC,KAAK,CACH,GAAG,QAAQ,4FAA4F,EACvG,mBAAmB,EACnB,EAAE,QAAQ,EAAE,CACb,CAAC;IACJ,CAAC;CACF;AARD,0CAQC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";;;AAAA,MAAa,WAAY,SAAQ,KAAK;IAG3B;IACA;IAHT,YACE,OAAe,EACR,IAAY,EACZ,OAAiC;QAExC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAA0B;QAGxC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AATD,kCASC;AAED,MAAa,oBAAqB,SAAQ,WAAW;IACnD,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CACH,sBAAsB,OAAO,WAAW,MAAM,EAAE,EAChD,yBAAyB,EACzB,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CAAC;IACJ,CAAC;CACF;AARD,oDAQC;AAED,MAAa,iBAAkB,SAAQ,WAAW;IAChD,YAAY,MAAc;QACxB,KAAK,CACH,iCAAiC,MAAM,EAAE,EACzC,qBAAqB,EACrB,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,CAAC;CACF;AARD,8CAQC;AAED,MAAa,sBAAuB,SAAQ,WAAW;IACrD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACvC,CAAC;CACF;AAJD,wDAIC;AAED,MAAa,sBAAuB,SAAQ,WAAW;IACrD,YAAY,eAAuB;QACjC,KAAK,CACH,+BAA+B,eAAe,EAAE,EAChD,oBAAoB,EACpB,EAAE,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE,EAAE,CAChD,CAAC;IACJ,CAAC;CACF;AARD,wDAQC;AAED,MAAa,oBAAqB,SAAQ,WAAW;IACnD,YAAY,cAAsB,EAAE,cAAsB;QACxD,KAAK,CACH,iDAAiD,cAAc,yCAAyC,cAAc,GAAG,EACzH,kBAAkB,EAClB;YACE,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;YACzC,cAAc,EAAE,cAAc,CAAC,QAAQ,EAAE;SAC1C,CACF,CAAC;IACJ,CAAC;CACF;AAXD,oDAWC;AAED,MAAa,eAAgB,SAAQ,WAAW;IAC9C,YAAY,QAA2B;QACrC,KAAK,CACH,GAAG,QAAQ,4FAA4F,EACvG,mBAAmB,EACnB,EAAE,QAAQ,EAAE,CACb,CAAC;IACJ,CAAC;CACF;AARD,0CAQC;AAED,MAAa,kBAAmB,SAAQ,WAAW;IACjD,YAAY,MAAc;QACxB,KAAK,CACH,mBAAmB,MAAM,oFAAoF,EAC7G,gBAAgB,EAChB,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,CAAC;CACF;AARD,gDAQC;AAED,MAAa,4BAA6B,SAAQ,oBAAoB;IACpE,YAAY,YAAoB,EAAE,YAAsC;QACtE,KAAK,CACH,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,kBAAkB,EAC7D,+BAA+B,YAAY,IAAI;YAC7C,cAAc,YAAY,6BAA6B;YACvD,iFAAiF;YACjF,qFAAqF,CACxF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;IACjE,CAAC;CACF;AAZD,oEAYC;AAED,MAAa,eAAgB,SAAQ,WAAW;IAC9C,YAAY,MAAc,EAAE,OAAiC;QAC3D,KAAK,CACH,iCAAiC,MAAM,IAAI;YACzC,kFAAkF,EACpF,mBAAmB,EACnB,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CACvB,CAAC;IACJ,CAAC;CACF;AATD,0CASC;AAED,MAAa,kBAAmB,SAAQ,WAAW;IACjD,YAAY,KAAa,EAAE,MAAc;QACvC,KAAK,CACH,kCAAkC,KAAK,MAAM,MAAM,IAAI;YACrD,qFAAqF,EACvF,qBAAqB,EACrB,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB,CAAC;IACJ,CAAC;CACF;AATD,gDASC"}

package/dist/handshake.d.ts

@@ -1,4 +1,5 @@
 import { HumanIdentity, AgentCredential, HandshakeResult, Proof, BolyraConfig } from './types';
+import { ProverBackend } from './prover';
 /**
  * Generate a mutual handshake proof (human + agent).
  * Both proofs can be generated in parallel for wall-clock optimization.
@@ -22,6 +23,7 @@ export declare function proveHandshake(human: HumanIdentity, agent: AgentCredent
     scope?: bigint;
     nonce?: bigint;
     config?: BolyraConfig;
+    backend?: ProverBackend;
 }): Promise<{
     humanProof: Proof;
     agentProof: Proof;

package/dist/handshake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,aAAa,EACb,eAAe,EACf,eAAe,EACf,KAAK,EACL,YAAY,EACb,MAAM,SAAS,CAAC;AAMjB;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,eAAe,EACtB,OAAO,CAAC,EAAE;IACR,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,GACA,OAAO,CAAC;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAYlE;AAyFD;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,KAAK,EACjB,UAAU,EAAE,KAAK,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC,CA4B1B"}
+{"version":3,"file":"handshake.d.ts","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,aAAa,EACb,eAAe,EACf,eAAe,EACf,KAAK,EACL,YAAY,EACb,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAgB,aAAa,EAAE,MAAM,UAAU,CAAC;AAKvD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,aAAa,EACpB,KAAK,EAAE,eAAe,EACtB,OAAO,CAAC,EAAE;IACR,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,GACA,OAAO,CAAC;IAAE,UAAU,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAgClE;AAiFD;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,UAAU,EAAE,KAAK,EACjB,UAAU,EAAE,KAAK,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,eAAe,CAAC,CA8D1B"}

package/dist/handshake.js

@@ -37,7 +37,9 @@ exports.proveHandshake = proveHandshake;
 exports.verifyHandshake = verifyHandshake;
 const snarkjs = __importStar(require("snarkjs"));
 const path = __importStar(require("path"));
+const fs = __importStar(require("fs"));
 const errors_1 = require("./errors");
+const prover_1 = require("./prover");
 // Default paths to circuit artifacts (relative to package root)
 const DEFAULT_CIRCUIT_DIR = path.join(__dirname, '../../circuits/build');
 /**
@@ -63,14 +65,32 @@ async function proveHandshake(human, agent, options) {
     const scope = options?.scope ?? 1n;
     const nonce = options?.nonce ?? BigInt(Date.now());
     const circuitDir = options?.config?.circuitDir ?? DEFAULT_CIRCUIT_DIR;
+    const backend = options?.backend ?? 'auto';
+    // Validate circuit artifacts exist before attempting proof generation
+    const humanWasm = path.join(circuitDir, 'HumanUniqueness_js/HumanUniqueness.wasm');
+    const humanZkey = path.join(circuitDir, 'HumanUniqueness_final.zkey');
+    const agentWasm = path.join(circuitDir, 'AgentPolicy_js/AgentPolicy.wasm');
+    const agentZkey = path.join(circuitDir, 'AgentPolicy_final.zkey');
+    if (!fs.existsSync(humanWasm)) {
+        throw new errors_1.CircuitArtifactNotFoundError(humanWasm, 'wasm');
+    }
+    if (!fs.existsSync(humanZkey)) {
+        throw new errors_1.CircuitArtifactNotFoundError(humanZkey, 'zkey');
+    }
+    if (!fs.existsSync(agentWasm)) {
+        throw new errors_1.CircuitArtifactNotFoundError(agentWasm, 'wasm');
+    }
+    if (!fs.existsSync(agentZkey)) {
+        throw new errors_1.CircuitArtifactNotFoundError(agentZkey, 'zkey');
+    }
     // Generate both proofs in parallel
     const [humanProof, agentProof] = await Promise.all([
-        generateHumanProof(human, scope, nonce, circuitDir),
-        generateAgentProof(agent, nonce, circuitDir),
+        generateHumanProof(human, scope, nonce, circuitDir, backend),
+        generateAgentProof(agent, nonce, circuitDir, backend),
     ]);
     return { humanProof, agentProof, nonce };
 }
-async function generateHumanProof(human, scope, nonce, circuitDir) {
+async function generateHumanProof(human, scope, nonce, circuitDir, backend) {
     const wasmPath = path.join(circuitDir, 'HumanUniqueness_js/HumanUniqueness.wasm');
     const zkeyPath = path.join(circuitDir, 'HumanUniqueness_final.zkey');
     // Build Merkle proof inputs (single leaf: depth 0, padded to 20)
@@ -84,16 +104,15 @@ async function generateHumanProof(human, scope, nonce, circuitDir) {
         sessionNonce: nonce.toString(),
     };
     try {
-        const { proof, publicSignals } = await snarkjs.groth16.fullProve(input, wasmPath, zkeyPath);
-        return { proof, publicSignals };
+        return await (0, prover_1.proveGroth16)(input, wasmPath, zkeyPath, backend);
     }
     catch (err) {
         throw new errors_1.ProofGenerationError('HumanUniqueness', err.message ?? String(err));
     }
 }
-async function generateAgentProof(agent, nonce, circuitDir) {
+async function generateAgentProof(agent, nonce, circuitDir, backend) {
     const wasmPath = path.join(circuitDir, 'AgentPolicy_js/AgentPolicy.wasm');
-    const zkeyPath = path.join(circuitDir, 'AgentPolicy_plonk.zkey');
+    const zkeyPath = path.join(circuitDir, 'AgentPolicy_final.zkey');
     const currentTimestamp = BigInt(Math.floor(Date.now() / 1000));
     const requiredScopeMask = 0n; // no required scope for basic handshake
     const siblings = new Array(20).fill('0');
@@ -114,8 +133,7 @@ async function generateAgentProof(agent, nonce, circuitDir) {
         sessionNonce: nonce.toString(),
     };
     try {
-        const { proof, publicSignals } = await snarkjs.plonk.fullProve(input, wasmPath, zkeyPath);
-        return { proof, publicSignals };
+        return await (0, prover_1.proveGroth16)(input, wasmPath, zkeyPath, backend);
     }
     catch (err) {
         throw new errors_1.ProofGenerationError('AgentPolicy', err.message ?? String(err));
@@ -133,14 +151,38 @@ async function generateAgentProof(agent, nonce, circuitDir) {
  */
 async function verifyHandshake(humanProof, agentProof, nonce, config) {
     const circuitDir = config?.circuitDir ?? DEFAULT_CIRCUIT_DIR;
-    // Verify human proof (Groth16)
+    // Validate proof structure before verification
+    if (!humanProof || !humanProof.proof || !Array.isArray(humanProof.publicSignals)) {
+        throw new errors_1.VerificationError('Invalid humanProof structure: expected { proof: object, publicSignals: string[] }. ' +
+            'Ensure you are passing the proof object returned by proveHandshake().');
+    }
+    if (!agentProof || !agentProof.proof || !Array.isArray(agentProof.publicSignals)) {
+        throw new errors_1.VerificationError('Invalid agentProof structure: expected { proof: object, publicSignals: string[] }. ' +
+            'Ensure you are passing the proof object returned by proveHandshake().');
+    }
+    if (humanProof.publicSignals.length < 2) {
+        throw new errors_1.VerificationError(`humanProof has ${humanProof.publicSignals.length} public signals, expected at least 2. ` +
+            'The proof may have been generated with an incompatible circuit version.');
+    }
+    if (agentProof.publicSignals.length < 3) {
+        throw new errors_1.VerificationError(`agentProof has ${agentProof.publicSignals.length} public signals, expected at least 3. ` +
+            'The proof may have been generated with an incompatible circuit version.');
+    }
+    // Verify vkey files exist
     const humanVkeyPath = path.join(circuitDir, 'HumanUniqueness_vkey.json');
+    if (!fs.existsSync(humanVkeyPath)) {
+        throw new errors_1.CircuitArtifactNotFoundError(humanVkeyPath, 'vkey');
+    }
+    const agentVkeyPath = path.join(circuitDir, 'AgentPolicy_groth16_vkey.json');
+    if (!fs.existsSync(agentVkeyPath)) {
+        throw new errors_1.CircuitArtifactNotFoundError(agentVkeyPath, 'vkey');
+    }
+    // Verify human proof (Groth16)
     const humanVkey = require(humanVkeyPath);
     const humanValid = await snarkjs.groth16.verify(humanVkey, humanProof.publicSignals, humanProof.proof);
-    // Verify agent proof (PLONK)
-    const agentVkeyPath = path.join(circuitDir, 'AgentPolicy_vkey.json');
+    // Verify agent proof (Groth16)
     const agentVkey = require(agentVkeyPath);
-    const agentValid = await snarkjs.plonk.verify(agentVkey, agentProof.publicSignals, agentProof.proof);
+    const agentValid = await snarkjs.groth16.verify(agentVkey, agentProof.publicSignals, agentProof.proof);
     return {
         humanNullifier: BigInt(humanProof.publicSignals[1]),
         agentNullifier: BigInt(agentProof.publicSignals[1]),

package/dist/handshake.js.map

@@ -1 +1 @@
-{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,wCAoBC;AAmGD,0CAiCC;AAzLD,iDAAmC;AACnC,2CAA6B;AAQ7B,qCAAgD;AAEhD,gEAAgE;AAChE,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;AAEzE;;;;;;;;;;;;;;;;;;GAkBG;AACI,KAAK,UAAU,cAAc,CAClC,KAAoB,EACpB,KAAsB,EACtB,OAIC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,IAAI,mBAAmB,CAAC;IAEtE,mCAAmC;IACnC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC;QACnD,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC;KAC7C,CAAC,CAAC;IAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAoB,EACpB,KAAa,EACb,KAAa,EACb,UAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,UAAU,EACV,yCAAyC,CAC1C,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IAErE,iEAAiE;IACjE,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEzC,MAAM,KAAK,GAAG;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC/B,iBAAiB,EAAE,GAAG,EAAE,+BAA+B;QACvD,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,QAAQ;QAC7B,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;QACvB,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE;KAC/B,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAC9D,KAAK,EACL,QAAQ,EACR,QAAQ,CACT,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,6BAAoB,CAC5B,iBAAiB,EACjB,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAsB,EACtB,KAAa,EACb,UAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,UAAU,EACV,iCAAiC,CAClC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAEjE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,iBAAiB,GAAG,EAAE,CAAC,CAAC,wCAAwC;IAEtE,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEzC,MAAM,KAAK,GAAG;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE;QACrC,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;QACtD,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;QACtD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE;QACrD,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE;QACjD,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClC,iBAAiB,EAAE,GAAG;QACtB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,QAAQ;QAC7B,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QAC/C,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;QAC7C,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE;KAC/B,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,CAC5D,KAAK,EACL,QAAQ,EACR,QAAQ,CACT,CAAC;QACF,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,6BAAoB,CAC5B,aAAa,EACb,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,eAAe,CACnC,UAAiB,EACjB,UAAiB,EACjB,KAAa,EACb,MAAqB;IAErB,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,mBAAmB,CAAC;IAE7D,+BAA+B;IAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAC7C,SAAS,EACT,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,KAAK,CACjB,CAAC;IAEF,6BAA6B;IAC7B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAC3C,SAAS,EACT,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,KAAK,CACjB,CAAC;IAEF,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACnD,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACnD,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACpD,QAAQ,EAAE,UAAU,IAAI,UAAU;KACnC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"handshake.js","sourceRoot":"","sources":["../src/handshake.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,wCAyCC;AA2FD,0CAmEC;AA1OD,iDAAmC;AACnC,2CAA6B;AAC7B,uCAAyB;AAQzB,qCAAiG;AACjG,qCAAuD;AAEvD,gEAAgE;AAChE,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;AAEzE;;;;;;;;;;;;;;;;;;GAkBG;AACI,KAAK,UAAU,cAAc,CAClC,KAAoB,EACpB,KAAsB,EACtB,OAKC;IAED,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,EAAE,MAAM,EAAE,UAAU,IAAI,mBAAmB,CAAC;IACtE,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,MAAM,CAAC;IAE3C,sEAAsE;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,yCAAyC,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAElE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,qCAA4B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,qCAA4B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,qCAA4B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,qCAA4B,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC5D,CAAC;IAED,mCAAmC;IACnC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;QAC5D,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC;KACtD,CAAC,CAAC;IAEH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAoB,EACpB,KAAa,EACb,KAAa,EACb,UAAkB,EAClB,OAAsB;IAEtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,UAAU,EACV,yCAAyC,CAC1C,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IAErE,iEAAiE;IACjE,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEzC,MAAM,KAAK,GAAG;QACZ,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE;QAC/B,iBAAiB,EAAE,GAAG,EAAE,+BAA+B;QACvD,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,QAAQ;QAC7B,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;QACvB,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE;KAC/B,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,qBAAY,EAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,6BAAoB,CAC5B,iBAAiB,EACjB,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAAsB,EACtB,KAAa,EACb,UAAkB,EAClB,OAAsB;IAEtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,UAAU,EACV,iCAAiC,CAClC,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,wBAAwB,CAAC,CAAC;IAEjE,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,iBAAiB,GAAG,EAAE,CAAC,CAAC,wCAAwC;IAEtE,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEzC,MAAM,KAAK,GAAG;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE;QACrC,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;QACtD,gBAAgB,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,EAAE;QACtD,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE;QACrD,eAAe,EAAE,KAAK,CAAC,eAAe,CAAC,QAAQ,EAAE;QACjD,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;QACvC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClC,iBAAiB,EAAE,GAAG;QACtB,gBAAgB,EAAE,GAAG;QACrB,mBAAmB,EAAE,QAAQ;QAC7B,iBAAiB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;QAC/C,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ,EAAE;QAC7C,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE;KAC/B,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,qBAAY,EAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,MAAM,IAAI,6BAAoB,CAC5B,aAAa,EACb,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,CAC3B,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,eAAe,CACnC,UAAiB,EACjB,UAAiB,EACjB,KAAa,EACb,MAAqB;IAErB,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,mBAAmB,CAAC;IAE7D,+CAA+C;IAC/C,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,0BAAiB,CACzB,qFAAqF;YACnF,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,0BAAiB,CACzB,qFAAqF;YACnF,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,0BAAiB,CACzB,kBAAkB,UAAU,CAAC,aAAa,CAAC,MAAM,wCAAwC;YACvF,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,0BAAiB,CACzB,kBAAkB,UAAU,CAAC,aAAa,CAAC,MAAM,wCAAwC;YACvF,yEAAyE,CAC5E,CAAC;IACJ,CAAC;IAED,0BAA0B;IAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;IACzE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,qCAA4B,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;IAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,qCAA4B,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,+BAA+B;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAC7C,SAAS,EACT,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,KAAK,CACjB,CAAC;IAEF,+BAA+B;IAC/B,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAC7C,SAAS,EACT,UAAU,CAAC,aAAa,EACxB,UAAU,CAAC,KAAK,CACjB,CAAC;IAEF,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACnD,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACnD,YAAY,EAAE,KAAK;QACnB,eAAe,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACpD,QAAQ,EAAE,UAAU,IAAI,UAAU;KACnC,CAAC;AACJ,CAAC"}

package/dist/identity.d.ts

@@ -1,4 +1,28 @@
 import { HumanIdentity, AgentCredential, Permission } from './types';
+export declare const BN254_FIELD_ORDER = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
+/**
+ * Validate a secret value for use with createHumanIdentity.
+ * Throws InvalidSecretError if the secret is zero, negative, or exceeds BN254 field.
+ *
+ * Call this before createHumanIdentity() for strict input validation.
+ * createHumanIdentity itself is permissive (the crypto layer handles reduction),
+ * but using an invalid secret will produce an identity that fails proof generation.
+ *
+ * @param secret - The secret to validate
+ * @throws InvalidSecretError if validation fails
+ */
+export declare function validateHumanSecret(secret: bigint): void;
+/**
+ * Validate an expiry timestamp for use with createAgentCredential.
+ * Throws InvalidPermissionError if the timestamp is in the past.
+ *
+ * Call this before createAgentCredential() to catch expired timestamps early.
+ * The circuit enforces expiry at verification time, but this provides an early check.
+ *
+ * @param expiryTimestamp - Unix timestamp to validate
+ * @throws InvalidPermissionError if timestamp is not in the future
+ */
+export declare function validateAgentExpiry(expiryTimestamp: bigint): void;
 /**
  * Create a human identity (EdDSA keypair + commitment).
  * Compatible with Semaphore v4 identity scheme.

package/dist/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAIrE;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,aAAa,CAAC,CAMxB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,kBAAkB,EAAE,MAAM,GAAG,MAAM,EACnC,WAAW,EAAE,UAAU,EAAE,EACzB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,eAAe,CAAC,CA4B1B;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,CAMtE;AAED,2EAA2E;AAC3E,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAoBnE"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAKrE,eAAO,MAAM,iBAAiB,iFAAiF,CAAC;AAEhH;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAgBxD;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAQjE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,aAAa,CAAC,CAOxB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,kBAAkB,EAAE,MAAM,GAAG,MAAM,EACnC,WAAW,EAAE,UAAU,EAAE,EACzB,eAAe,EAAE,MAAM,GACtB,OAAO,CAAC,eAAe,CAAC,CA6B1B;AAED,+DAA+D;AAC/D,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,MAAM,CAMtE;AAED,2EAA2E;AAC3E,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAoBnE"}

package/dist/identity.js

@@ -1,11 +1,55 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.BN254_FIELD_ORDER = void 0;
+exports.validateHumanSecret = validateHumanSecret;
+exports.validateAgentExpiry = validateAgentExpiry;
 exports.createHumanIdentity = createHumanIdentity;
 exports.createAgentCredential = createAgentCredential;
 exports.permissionsToBitmask = permissionsToBitmask;
 exports.validateCumulativeBitEncoding = validateCumulativeBitEncoding;
 const utils_1 = require("./utils");
 const errors_1 = require("./errors");
+// BN254 scalar field order (Baby Jubjub subgroup order)
+exports.BN254_FIELD_ORDER = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
+/**
+ * Validate a secret value for use with createHumanIdentity.
+ * Throws InvalidSecretError if the secret is zero, negative, or exceeds BN254 field.
+ *
+ * Call this before createHumanIdentity() for strict input validation.
+ * createHumanIdentity itself is permissive (the crypto layer handles reduction),
+ * but using an invalid secret will produce an identity that fails proof generation.
+ *
+ * @param secret - The secret to validate
+ * @throws InvalidSecretError if validation fails
+ */
+function validateHumanSecret(secret) {
+    if (secret === 0n) {
+        throw new errors_1.InvalidSecretError('secret must be non-zero — a zero secret produces a trivial identity that cannot generate valid proofs');
+    }
+    if (secret < 0n) {
+        throw new errors_1.InvalidSecretError('secret must be positive — negative values are not valid field elements');
+    }
+    if (secret >= exports.BN254_FIELD_ORDER) {
+        throw new errors_1.InvalidSecretError(`secret exceeds BN254 scalar field order (got ${secret.toString().slice(0, 20)}..., max is ~2^254). Use a value less than ${exports.BN254_FIELD_ORDER}`);
+    }
+}
+/**
+ * Validate an expiry timestamp for use with createAgentCredential.
+ * Throws InvalidPermissionError if the timestamp is in the past.
+ *
+ * Call this before createAgentCredential() to catch expired timestamps early.
+ * The circuit enforces expiry at verification time, but this provides an early check.
+ *
+ * @param expiryTimestamp - Unix timestamp to validate
+ * @throws InvalidPermissionError if timestamp is not in the future
+ */
+function validateAgentExpiry(expiryTimestamp) {
+    const nowSeconds = BigInt(Math.floor(Date.now() / 1000));
+    if (expiryTimestamp <= nowSeconds) {
+        throw new errors_1.InvalidPermissionError(`expiryTimestamp (${expiryTimestamp}) is not in the future (current time: ${nowSeconds}). ` +
+            `Set expiryTimestamp to a Unix timestamp after the current time, e.g. BigInt(Math.floor(Date.now() / 1000) + 86400) for +1 day.`);
+    }
+}
 /**
  * Create a human identity (EdDSA keypair + commitment).
  * Compatible with Semaphore v4 identity scheme.
@@ -21,6 +65,7 @@ const errors_1 = require("./errors");
  * ```
  */
 async function createHumanIdentity(secret) {
+    validateHumanSecret(secret);
     // HumanUniqueness circuit uses BabyPbk (direct scalar multiply),
     // NOT EdDSA prv2pub. Use derivePublicKeyScalar here.
     const publicKey = await (0, utils_1.derivePublicKeyScalar)(secret);
@@ -48,6 +93,7 @@ async function createHumanIdentity(secret) {
  * ```
  */
 async function createAgentCredential(modelHash, operatorPrivateKey, permissions, expiryTimestamp) {
+    validateAgentExpiry(expiryTimestamp);
     const bitmask = permissionsToBitmask(permissions);
     validateCumulativeBitEncoding(bitmask);
     const operatorPublicKey = await (0, utils_1.derivePublicKey)(typeof operatorPrivateKey === 'bigint'

package/dist/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":";;AAkBA,kDAQC;AAsBD,sDAiCC;AAGD,oDAMC;AAGD,sEAoBC;AAhHD,mCAAkG;AAClG,qCAAkD;AAElD;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,mBAAmB,CACvC,MAAc;IAEd,iEAAiE;IACjE,qDAAqD;IACrD,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAqB,EAAC,MAAM,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,IAAA,iBAAS,EAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACI,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,kBAAmC,EACnC,WAAyB,EACzB,eAAuB;IAEvB,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAClD,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAEvC,MAAM,iBAAiB,GAAG,MAAM,IAAA,uBAAe,EAC7C,OAAO,kBAAkB,KAAK,QAAQ;QACpC,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CACtD,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,IAAA,iBAAS,EAChC,SAAS,EACT,iBAAiB,CAAC,CAAC,EACnB,iBAAiB,CAAC,CAAC,EACnB,OAAO,EACP,eAAe,CAChB,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,IAAA,iBAAS,EAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;IAElE,OAAO;QACL,SAAS;QACT,iBAAiB;QACjB,iBAAiB,EAAE,OAAO;QAC1B,eAAe;QACf,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,SAAgB,oBAAoB,CAAC,WAAyB;IAC5D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,OAAO,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2EAA2E;AAC3E,SAAgB,6BAA6B,CAAC,OAAe;IAC3D,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;IAElC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,+BAAsB,CAC9B,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,+BAAsB,CAC9B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,+BAAsB,CAC9B,2DAA2D,CAC5D,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":";;;AAkBA,kDAgBC;AAYD,kDAQC;AAgBD,kDASC;AAsBD,sDAkCC;AAGD,oDAMC;AAGD,sEAoBC;AAtKD,mCAAkG;AAClG,qCAAsE;AAEtE,wDAAwD;AAC3C,QAAA,iBAAiB,GAAG,8EAA8E,CAAC;AAEhH;;;;;;;;;;GAUG;AACH,SAAgB,mBAAmB,CAAC,MAAc;IAChD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,2BAAkB,CAC1B,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,2BAAkB,CAC1B,wEAAwE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,IAAI,yBAAiB,EAAE,CAAC;QAChC,MAAM,IAAI,2BAAkB,CAC1B,gDAAgD,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,8CAA8C,yBAAiB,EAAE,CAChJ,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,mBAAmB,CAAC,eAAuB;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACzD,IAAI,eAAe,IAAI,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,+BAAsB,CAC9B,oBAAoB,eAAe,yCAAyC,UAAU,KAAK;YACzF,gIAAgI,CACnI,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,mBAAmB,CACvC,MAAc;IAEd,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,iEAAiE;IACjE,qDAAqD;IACrD,MAAM,SAAS,GAAG,MAAM,IAAA,6BAAqB,EAAC,MAAM,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,MAAM,IAAA,iBAAS,EAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACI,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,kBAAmC,EACnC,WAAyB,EACzB,eAAuB;IAEvB,mBAAmB,CAAC,eAAe,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAClD,6BAA6B,CAAC,OAAO,CAAC,CAAC;IAEvC,MAAM,iBAAiB,GAAG,MAAM,IAAA,uBAAe,EAC7C,OAAO,kBAAkB,KAAK,QAAQ;QACpC,CAAC,CAAC,kBAAkB;QACpB,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CACtD,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,IAAA,iBAAS,EAChC,SAAS,EACT,iBAAiB,CAAC,CAAC,EACnB,iBAAiB,CAAC,CAAC,EACnB,OAAO,EACP,eAAe,CAChB,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,IAAA,iBAAS,EAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;IAElE,OAAO;QACL,SAAS;QACT,iBAAiB;QACjB,iBAAiB,EAAE,OAAO;QAC1B,eAAe;QACf,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,SAAgB,oBAAoB,CAAC,WAAyB;IAC5D,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,OAAO,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2EAA2E;AAC3E,SAAgB,6BAA6B,CAAC,OAAe;IAC3D,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;IAElC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,+BAAsB,CAC9B,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,+BAAsB,CAC9B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,+BAAsB,CAC9B,2DAA2D,CAC5D,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,7 +1,12 @@
-export type { HumanIdentity, AgentCredential, HandshakeResult, DelegationResult, Proof, BolyraConfig, } from './types';
+export type { HumanIdentity, AgentCredential, HandshakeResult, DelegationResult, DelegateeMerkleProof, Proof, BolyraConfig, OffchainVerificationResult, BatchCheckpoint, } from './types';
 export { Permission } from './types';
-export { createHumanIdentity, createAgentCredential, permissionsToBitmask, validateCumulativeBitEncoding, } from './identity';
+export { createHumanIdentity, createAgentCredential, permissionsToBitmask, validateCumulativeBitEncoding, validateHumanSecret, validateAgentExpiry, BN254_FIELD_ORDER, } from './identity';
 export { proveHandshake, verifyHandshake } from './handshake';
+export { proveGroth16, activeProverBackend } from './prover';
+export type { ProverBackend } from './prover';
+export { verifyHandshakeOffchain, OffchainVerificationBatch, postBatchRoot, computeSessionCommitment, verifyMerkleInclusion, } from './offchain';
 export { delegate, verifyDelegation } from './delegation';
-export { BolyraError, ProofGenerationError, VerificationError, InvalidPermissionError, ExpiredCredentialError, ScopeEscalationError, StaleProofError, } from './errors';
+export type { DelegateInput } from './delegation';
+export { poseidon2, poseidon3, poseidon4 } from './utils';
+export { BolyraError, ProofGenerationError, VerificationError, InvalidPermissionError, ExpiredCredentialError, ScopeEscalationError, StaleProofError, InvalidSecretError, CircuitArtifactNotFoundError, MerkleTreeError, ConfigurationError, } from './errors';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,aAAa,EACb,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,KAAK,EACL,YAAY,GACb,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,6BAA6B,GAC9B,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9D,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAG1D,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,GAChB,MAAM,UAAU,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,aAAa,EACb,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,oBAAoB,EACpB,KAAK,EACL,YAAY,EACZ,0BAA0B,EAC1B,eAAe,GAChB,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGrC,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,6BAA6B,EAC7B,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9D,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAC7D,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAG9C,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,aAAa,EACb,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAGlD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAG1D,OAAO,EACL,WAAW,EACX,oBAAoB,EACpB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,4BAA4B,EAC5B,eAAe,EACf,kBAAkB,GACnB,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.StaleProofError = exports.ScopeEscalationError = exports.ExpiredCredentialError = exports.InvalidPermissionError = exports.VerificationError = exports.ProofGenerationError = exports.BolyraError = exports.verifyDelegation = exports.delegate = exports.verifyHandshake = exports.proveHandshake = exports.validateCumulativeBitEncoding = exports.permissionsToBitmask = exports.createAgentCredential = exports.createHumanIdentity = exports.Permission = void 0;
+exports.ConfigurationError = exports.MerkleTreeError = exports.CircuitArtifactNotFoundError = exports.InvalidSecretError = exports.StaleProofError = exports.ScopeEscalationError = exports.ExpiredCredentialError = exports.InvalidPermissionError = exports.VerificationError = exports.ProofGenerationError = exports.BolyraError = exports.poseidon4 = exports.poseidon3 = exports.poseidon2 = exports.verifyDelegation = exports.delegate = exports.verifyMerkleInclusion = exports.computeSessionCommitment = exports.postBatchRoot = exports.OffchainVerificationBatch = exports.verifyHandshakeOffchain = exports.activeProverBackend = exports.proveGroth16 = exports.verifyHandshake = exports.proveHandshake = exports.BN254_FIELD_ORDER = exports.validateAgentExpiry = exports.validateHumanSecret = exports.validateCumulativeBitEncoding = exports.permissionsToBitmask = exports.createAgentCredential = exports.createHumanIdentity = exports.Permission = void 0;
 // Permission enum
 var types_1 = require("./types");
 Object.defineProperty(exports, "Permission", { enumerable: true, get: function () { return types_1.Permission; } });
@@ -10,14 +10,33 @@ Object.defineProperty(exports, "createHumanIdentity", { enumerable: true, get: f
 Object.defineProperty(exports, "createAgentCredential", { enumerable: true, get: function () { return identity_1.createAgentCredential; } });
 Object.defineProperty(exports, "permissionsToBitmask", { enumerable: true, get: function () { return identity_1.permissionsToBitmask; } });
 Object.defineProperty(exports, "validateCumulativeBitEncoding", { enumerable: true, get: function () { return identity_1.validateCumulativeBitEncoding; } });
-// Handshake (v0.2 — real proof generation via snarkjs)
+Object.defineProperty(exports, "validateHumanSecret", { enumerable: true, get: function () { return identity_1.validateHumanSecret; } });
+Object.defineProperty(exports, "validateAgentExpiry", { enumerable: true, get: function () { return identity_1.validateAgentExpiry; } });
+Object.defineProperty(exports, "BN254_FIELD_ORDER", { enumerable: true, get: function () { return identity_1.BN254_FIELD_ORDER; } });
+// Handshake (v0.2 — real proof generation via snarkjs / rapidsnark)
 var handshake_1 = require("./handshake");
 Object.defineProperty(exports, "proveHandshake", { enumerable: true, get: function () { return handshake_1.proveHandshake; } });
 Object.defineProperty(exports, "verifyHandshake", { enumerable: true, get: function () { return handshake_1.verifyHandshake; } });
-// Delegation (stubs — coming in v0.3)
+// Prover backend (v0.4 — rapidsnark for sub-200ms proofs)
+var prover_1 = require("./prover");
+Object.defineProperty(exports, "proveGroth16", { enumerable: true, get: function () { return prover_1.proveGroth16; } });
+Object.defineProperty(exports, "activeProverBackend", { enumerable: true, get: function () { return prover_1.activeProverBackend; } });
+// Off-chain verification (v0.3 — batch mode, ~100x gas reduction)
+var offchain_1 = require("./offchain");
+Object.defineProperty(exports, "verifyHandshakeOffchain", { enumerable: true, get: function () { return offchain_1.verifyHandshakeOffchain; } });
+Object.defineProperty(exports, "OffchainVerificationBatch", { enumerable: true, get: function () { return offchain_1.OffchainVerificationBatch; } });
+Object.defineProperty(exports, "postBatchRoot", { enumerable: true, get: function () { return offchain_1.postBatchRoot; } });
+Object.defineProperty(exports, "computeSessionCommitment", { enumerable: true, get: function () { return offchain_1.computeSessionCommitment; } });
+Object.defineProperty(exports, "verifyMerkleInclusion", { enumerable: true, get: function () { return offchain_1.verifyMerkleInclusion; } });
+// Delegation (v0.3 — scope-narrowing one-way delegation, chain-linked on-chain)
 var delegation_1 = require("./delegation");
 Object.defineProperty(exports, "delegate", { enumerable: true, get: function () { return delegation_1.delegate; } });
 Object.defineProperty(exports, "verifyDelegation", { enumerable: true, get: function () { return delegation_1.verifyDelegation; } });
+// Poseidon hashes (exposed for chain-link verification in integrations)
+var utils_1 = require("./utils");
+Object.defineProperty(exports, "poseidon2", { enumerable: true, get: function () { return utils_1.poseidon2; } });
+Object.defineProperty(exports, "poseidon3", { enumerable: true, get: function () { return utils_1.poseidon3; } });
+Object.defineProperty(exports, "poseidon4", { enumerable: true, get: function () { return utils_1.poseidon4; } });
 // Errors
 var errors_1 = require("./errors");
 Object.defineProperty(exports, "BolyraError", { enumerable: true, get: function () { return errors_1.BolyraError; } });
@@ -27,4 +46,8 @@ Object.defineProperty(exports, "InvalidPermissionError", { enumerable: true, get
 Object.defineProperty(exports, "ExpiredCredentialError", { enumerable: true, get: function () { return errors_1.ExpiredCredentialError; } });
 Object.defineProperty(exports, "ScopeEscalationError", { enumerable: true, get: function () { return errors_1.ScopeEscalationError; } });
 Object.defineProperty(exports, "StaleProofError", { enumerable: true, get: function () { return errors_1.StaleProofError; } });
+Object.defineProperty(exports, "InvalidSecretError", { enumerable: true, get: function () { return errors_1.InvalidSecretError; } });
+Object.defineProperty(exports, "CircuitArtifactNotFoundError", { enumerable: true, get: function () { return errors_1.CircuitArtifactNotFoundError; } });
+Object.defineProperty(exports, "MerkleTreeError", { enumerable: true, get: function () { return errors_1.MerkleTreeError; } });
+Object.defineProperty(exports, "ConfigurationError", { enumerable: true, get: function () { return errors_1.ConfigurationError; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAUA,kBAAkB;AAClB,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAEnB,oBAAoB;AACpB,uCAKoB;AAJlB,+GAAA,mBAAmB,OAAA;AACnB,iHAAA,qBAAqB,OAAA;AACrB,gHAAA,oBAAoB,OAAA;AACpB,yHAAA,6BAA6B,OAAA;AAG/B,uDAAuD;AACvD,yCAA8D;AAArD,2GAAA,cAAc,OAAA;AAAE,4GAAA,eAAe,OAAA;AAExC,sCAAsC;AACtC,2CAA0D;AAAjD,sGAAA,QAAQ,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AAEnC,SAAS;AACT,mCAQkB;AAPhB,qGAAA,WAAW,OAAA;AACX,8GAAA,oBAAoB,OAAA;AACpB,2GAAA,iBAAiB,OAAA;AACjB,gHAAA,sBAAsB,OAAA;AACtB,gHAAA,sBAAsB,OAAA;AACtB,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAaA,kBAAkB;AAClB,iCAAqC;AAA5B,mGAAA,UAAU,OAAA;AAEnB,oBAAoB;AACpB,uCAQoB;AAPlB,+GAAA,mBAAmB,OAAA;AACnB,iHAAA,qBAAqB,OAAA;AACrB,gHAAA,oBAAoB,OAAA;AACpB,yHAAA,6BAA6B,OAAA;AAC7B,+GAAA,mBAAmB,OAAA;AACnB,+GAAA,mBAAmB,OAAA;AACnB,6GAAA,iBAAiB,OAAA;AAGnB,oEAAoE;AACpE,yCAA8D;AAArD,2GAAA,cAAc,OAAA;AAAE,4GAAA,eAAe,OAAA;AAExC,0DAA0D;AAC1D,mCAA6D;AAApD,sGAAA,YAAY,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAG1C,kEAAkE;AAClE,uCAMoB;AALlB,mHAAA,uBAAuB,OAAA;AACvB,qHAAA,yBAAyB,OAAA;AACzB,yGAAA,aAAa,OAAA;AACb,oHAAA,wBAAwB,OAAA;AACxB,iHAAA,qBAAqB,OAAA;AAGvB,gFAAgF;AAChF,2CAA0D;AAAjD,sGAAA,QAAQ,OAAA;AAAE,8GAAA,gBAAgB,OAAA;AAGnC,wEAAwE;AACxE,iCAA0D;AAAjD,kGAAA,SAAS,OAAA;AAAE,kGAAA,SAAS,OAAA;AAAE,kGAAA,SAAS,OAAA;AAExC,SAAS;AACT,mCAYkB;AAXhB,qGAAA,WAAW,OAAA;AACX,8GAAA,oBAAoB,OAAA;AACpB,2GAAA,iBAAiB,OAAA;AACjB,gHAAA,sBAAsB,OAAA;AACtB,gHAAA,sBAAsB,OAAA;AACtB,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,4GAAA,kBAAkB,OAAA;AAClB,sHAAA,4BAA4B,OAAA;AAC5B,yGAAA,eAAe,OAAA;AACf,4GAAA,kBAAkB,OAAA"}

package/dist/model-binding.d.ts

@@ -0,0 +1,113 @@
+import { AgentCredential, Proof, BolyraConfig } from './types';
+import { ProverBackend } from './prover';
+/** Provider attestation produced by a model provider's deployment-signing service.
+ *  In dev/test this is minted by `examples/provider-mock/`. */
+export interface ProviderAttestation {
+    /** Provider's Baby Jubjub public key (must match a leaf in the on-chain provider tree) */
+    providerPublicKey: {
+        x: bigint;
+        y: bigint;
+    };
+    /** EdDSA signature of providerPrivateKey over the credentialCommitment
+     *  (= Poseidon5(modelHash, opPkAx, opPkAy, permissionBitmask, expiryTimestamp)).
+     *  Post Phase 2 hardening — earlier shape was Poseidon3(modelHash, opPkAx, opPkAy)
+     *  which let the operator self-grant permissions/expiry the provider never saw. */
+    signature: {
+        R8: {
+            x: bigint;
+            y: bigint;
+        };
+        S: bigint;
+    };
+}
+/** Merkle proof of provider key inclusion in the on-chain providerRegistryRoot. */
+export interface ProviderMerkleProof {
+    /** Actual depth used (0..PROVIDER_TREE_DEPTH); siblings beyond are zero-padded */
+    length: number;
+    /** Leaf index */
+    index: number;
+    /** Sibling hashes, padded with zeros to PROVIDER_TREE_DEPTH */
+    siblings: bigint[];
+    /** The provider tree root that this proof must reproduce */
+    root: bigint;
+}
+/** Merkle proof of agent credential inclusion in the on-chain agentTree root. */
+export interface AgentMerkleProof {
+    length: number;
+    index: number;
+    siblings: bigint[];
+}
+export interface BindModelInstanceInput {
+    /** Agent credential signed by the operator (output of createAgentCredential). */
+    credential: AgentCredential;
+    /** Provider attestation binding the operator to this model. */
+    providerAttestation: ProviderAttestation;
+    /** Provider Merkle proof. */
+    providerMerkleProof: ProviderMerkleProof;
+    /** Agent Merkle proof. Defaults to an empty single-leaf proof. */
+    agentMerkleProof?: AgentMerkleProof;
+    /** Tool-call payload digest (BN254-reduced). Caller pre-hashes off-circuit. */
+    message: bigint;
+    /** Verifier-provided session nonce (replay protection). */
+    sessionNonce: bigint;
+    /** Required permission bitmask (0n means no required scope). */
+    requiredScopeMask?: bigint;
+    /** Verifier-provided current time (defaults to now). */
+    currentTimestamp?: bigint;
+    /** SDK config + prover backend overrides. */
+    config?: BolyraConfig;
+    backend?: ProverBackend;
+}
+export interface BindModelInstanceResult {
+    proof: Proof;
+    /** Circuit public outputs, parsed for caller convenience. Order matches publicSignals[0..9]. */
+    publicOutputs: {
+        agentMerkleRoot: bigint;
+        nullifierHash: bigint;
+        scopeCommitment: bigint;
+        messageHash: bigint;
+        modelOperatorFingerprint: bigint;
+        /** Poseidon2(provPkAx, provPkAy) — exposes WHICH enrolled provider signed
+         *  (Phase 2 hardening; closes the provider-anonymity attack). */
+        providerKeyCommitment: bigint;
+        requiredScopeMask: bigint;
+        currentTimestamp: bigint;
+        sessionNonce: bigint;
+        providerRegistryRoot: bigint;
+    };
+}
+/**
+ * Generate a ModelInstanceBinding ZK proof.
+ *
+ * The proof attests (in zero knowledge):
+ *   - The agent credential is enrolled in the on-chain agent tree.
+ *   - An enrolled provider signed the FULL `credentialCommitment`
+ *     (= Poseidon5(modelHash, opPkAx, opPkAy, permissionBitmask, expiry)),
+ *     which binds permissions and expiry — not just (model, operator).
+ *   - The operator signed the same `credentialCommitment`.
+ *   - The credential satisfies `requiredScopeMask` and is unexpired.
+ *   - The tool-call message digest is bound to this proof.
+ *   - `publicOutputs.providerKeyCommitment` identifies WHICH enrolled provider
+ *     signed (closes the provider-anonymity attack found in codex challenge).
+ *
+ * @example
+ * ```ts
+ * const result = await bindModelInstance({
+ *   credential,
+ *   providerAttestation,
+ *   providerMerkleProof,
+ *   message: BigInt('0x' + sha256(payload).slice(0, 62)), // mod p
+ *   sessionNonce: BigInt(Date.now()),
+ *   requiredScopeMask: 0b101n, // READ_DATA | FINANCIAL_SMALL
+ * });
+ * // Submit result.proof to IdentityRegistry.verifyModelInstanceBinding(...)
+ * ```
+ */
+export declare function bindModelInstance(input: BindModelInstanceInput): Promise<BindModelInstanceResult>;
+/**
+ * Verify a ModelInstanceBinding proof off-chain (snarkjs-side).
+ * For on-chain verification, submit the proof to
+ * IdentityRegistry.verifyModelInstanceBinding(...).
+ */
+export declare function verifyModelInstanceBinding(proof: Proof, config?: BolyraConfig): Promise<boolean>;
+//# sourceMappingURL=model-binding.d.ts.map

package/dist/model-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-binding.d.ts","sourceRoot":"","sources":["../src/model-binding.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAM/D,OAAO,EAAgB,aAAa,EAAE,MAAM,UAAU,CAAC;AAQvD;+DAC+D;AAC/D,MAAM,WAAW,mBAAmB;IAClC,0FAA0F;IAC1F,iBAAiB,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5C;;;uFAGmF;IACnF,SAAS,EAAE;QAAE,EAAE,EAAE;YAAE,CAAC,EAAE,MAAM,CAAC;YAAC,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACxD;AAED,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IAClC,kFAAkF;IAClF,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,4DAA4D;IAC5D,IAAI,EAAE,MAAM,CAAC;CACd;AAED,iFAAiF;AACjF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,iFAAiF;IACjF,UAAU,EAAE,eAAe,CAAC;IAC5B,+DAA+D;IAC/D,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,6BAA6B;IAC7B,mBAAmB,EAAE,mBAAmB,CAAC;IACzC,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,YAAY,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wDAAwD;IACxD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,6CAA6C;IAC7C,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,KAAK,CAAC;IACb,gGAAgG;IAChG,aAAa,EAAE;QACb,eAAe,EAAE,MAAM,CAAC;QACxB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,wBAAwB,EAAE,MAAM,CAAC;QACjC;yEACiE;QACjE,qBAAqB,EAAE,MAAM,CAAC;QAC9B,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,EAAE,MAAM,CAAC;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AAaD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,uBAAuB,CAAC,CAoHlC;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,KAAK,EACZ,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,OAAO,CAAC,CAQlB"}