@entros/pulse-sdk 1.0.0 → 1.0.1

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 IAM Protocol
+Copyright (c) 2026 Entros Protocol
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -38,8 +38,8 @@ import { PulseSDK } from '@entros/pulse-sdk';
 const pulse = new PulseSDK({
   cluster: 'devnet',
   relayerUrl: 'https://api.entros.io/relay',
-  wasmUrl: '/circuits/iam_hamming.wasm',
-  zkeyUrl: '/circuits/iam_hamming_final.zkey',
+  wasmUrl: '/circuits/entros_hamming.wasm',
+  zkeyUrl: '/circuits/entros_hamming_final.zkey',
 });
 
 const result = await pulse.verify(touchElement);

package/dist/index.d.mts

@@ -402,8 +402,8 @@ declare function prepareCircuitInput(current: TBH, previous: TBH, threshold?: nu
  * Generate a Groth16 proof for the Hamming distance circuit.
  *
  * @param input - Circuit input (fingerprints, salts, commitments, threshold)
- * @param wasmPath - Path or URL to iam_hamming.wasm
- * @param zkeyPath - Path or URL to iam_hamming_final.zkey
+ * @param wasmPath - Path or URL to entros_hamming.wasm
+ * @param zkeyPath - Path or URL to entros_hamming_final.zkey
  */
 declare function generateProof(input: CircuitInput, wasmPath: string, zkeyPath: string): Promise<ProofResult>;
 /**
@@ -562,8 +562,13 @@ declare function storeVerificationData(data: StoredVerificationData): Promise<vo
 declare function loadVerificationData(): Promise<StoredVerificationData | null>;
 
 /**
- * Generate a random phonetically-balanced phrase for the voice challenge.
- * Each phrase is 5-6 syllable pairs, forming nonsensical but speakable words.
+ * FALLBACK challenge-phrase generator. Used only when the executor's
+ * `/challenge` endpoint is unreachable; the authoritative phrase comes from
+ * the server (5 real words drawn from a curated English-word dictionary). On
+ * this fallback path, validation skips server-side phrase content binding —
+ * Tier 1 acoustic + Tier 2 cross-modal still run.
+ *
+ * Output is 5-6 syllable pairs, forming nonsensical but speakable words.
  * Uses crypto.getRandomValues for unpredictable challenge generation.
  */
 declare function generatePhrase(wordCount?: number): string;
@@ -610,11 +615,12 @@ declare function generateLissajousSequence(count?: number): {
 /**
  * Fetch the server-issued challenge from the executor.
  *
- * The executor's `/challenge` endpoint returns a fresh nonce + nonsense phrase
- * bound to the wallet for a short TTL (default 60s). The phrase is shown to
- * the user as the voice challenge and is looked up server-side at
- * `/validate-features` to run phoneme-distance matching against the submitted
- * audio (master-list #89, phrase content binding via STT).
+ * The executor's `/challenge` endpoint returns a fresh nonce + 5-word phrase
+ * bound to the wallet for a short TTL (default 60s). The phrase is drawn from
+ * a curated English-word dictionary (source of truth at
+ * `iam-validation/src/word_dict.rs`); shown to the user as the voice challenge
+ * and looked up server-side at `/validate-features` to verify the audio
+ * matches the issued phrase (master-list #89, phrase content binding).
  *
  * Server-issued phrases are the only safe design for content binding: if the
  * client generated the phrase and sent it to the server alongside the audio,
@@ -628,7 +634,7 @@ declare function generateLissajousSequence(count?: number): {
 interface ChallengeResponse {
     /** 32-byte nonce used for on-chain `create_challenge` and the `/attest` handshake. */
     nonce: Uint8Array;
-    /** Nonsense phrase (5 space-separated words of 2-3 syllables each) the user must speak aloud. */
+    /** Server-issued 5-word challenge phrase (drawn from a curated English-word dictionary) the user must speak aloud. */
     phrase: string;
     /** Nonce TTL in seconds (default 60). */
     expiresIn: number;

package/dist/index.d.ts

@@ -402,8 +402,8 @@ declare function prepareCircuitInput(current: TBH, previous: TBH, threshold?: nu
  * Generate a Groth16 proof for the Hamming distance circuit.
  *
  * @param input - Circuit input (fingerprints, salts, commitments, threshold)
- * @param wasmPath - Path or URL to iam_hamming.wasm
- * @param zkeyPath - Path or URL to iam_hamming_final.zkey
+ * @param wasmPath - Path or URL to entros_hamming.wasm
+ * @param zkeyPath - Path or URL to entros_hamming_final.zkey
  */
 declare function generateProof(input: CircuitInput, wasmPath: string, zkeyPath: string): Promise<ProofResult>;
 /**
@@ -562,8 +562,13 @@ declare function storeVerificationData(data: StoredVerificationData): Promise<vo
 declare function loadVerificationData(): Promise<StoredVerificationData | null>;
 
 /**
- * Generate a random phonetically-balanced phrase for the voice challenge.
- * Each phrase is 5-6 syllable pairs, forming nonsensical but speakable words.
+ * FALLBACK challenge-phrase generator. Used only when the executor's
+ * `/challenge` endpoint is unreachable; the authoritative phrase comes from
+ * the server (5 real words drawn from a curated English-word dictionary). On
+ * this fallback path, validation skips server-side phrase content binding —
+ * Tier 1 acoustic + Tier 2 cross-modal still run.
+ *
+ * Output is 5-6 syllable pairs, forming nonsensical but speakable words.
  * Uses crypto.getRandomValues for unpredictable challenge generation.
  */
 declare function generatePhrase(wordCount?: number): string;
@@ -610,11 +615,12 @@ declare function generateLissajousSequence(count?: number): {
 /**
  * Fetch the server-issued challenge from the executor.
  *
- * The executor's `/challenge` endpoint returns a fresh nonce + nonsense phrase
- * bound to the wallet for a short TTL (default 60s). The phrase is shown to
- * the user as the voice challenge and is looked up server-side at
- * `/validate-features` to run phoneme-distance matching against the submitted
- * audio (master-list #89, phrase content binding via STT).
+ * The executor's `/challenge` endpoint returns a fresh nonce + 5-word phrase
+ * bound to the wallet for a short TTL (default 60s). The phrase is drawn from
+ * a curated English-word dictionary (source of truth at
+ * `iam-validation/src/word_dict.rs`); shown to the user as the voice challenge
+ * and looked up server-side at `/validate-features` to verify the audio
+ * matches the issued phrase (master-list #89, phrase content binding).
  *
  * Server-issued phrases are the only safe design for content binding: if the
  * client generated the phrase and sent it to the server alongside the audio,
@@ -628,7 +634,7 @@ declare function generateLissajousSequence(count?: number): {
 interface ChallengeResponse {
     /** 32-byte nonce used for on-chain `create_challenge` and the `/attest` handshake. */
     nonce: Uint8Array;
-    /** Nonsense phrase (5 space-separated words of 2-3 syllables each) the user must speak aloud. */
+    /** Server-issued 5-word challenge phrase (drawn from a curated English-word dictionary) the user must speak aloud. */
     phrase: string;
     /** Nonce TTL in seconds (default 60). */
     expiresIn: number;

package/dist/index.js

@@ -2115,7 +2115,7 @@ async function processSensorData(sensorData, config, wallet, connection, onProgr
         success: false,
         commitment: tbh.commitmentBytes,
         isFirstVerification: false,
-        error: "Re-verification requires wasmUrl and zkeyUrl in PulseConfig. Host the iam_hamming.wasm and iam_hamming_final.zkey circuit artifacts at public URLs."
+        error: "Re-verification requires wasmUrl and zkeyUrl in PulseConfig. Host the entros_hamming.wasm and entros_hamming_final.zkey circuit artifacts at public URLs."
       };
     }
     try {