@kynesyslabs/demosdk 2.7.0 → 2.7.2

package/build/index.d.ts

@@ -15,3 +15,4 @@ export * as instantMessaging from "./instant_messaging";
 export * as storage from "./storage";
 export * as escrow from "./escrow";
 export * as ipfs from "./ipfs";
+export * as tlsnotary from "./tlsnotary";

package/build/index.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ipfs = exports.escrow = exports.storage = exports.instantMessaging = exports.bridge = exports.web2 = exports.abstraction = exports.websdk = exports.l2ps = exports.demoswork = exports.wallet = exports.xmcore = exports.xmwebsdk = exports.xmlocalsdk = exports.utils = exports.encryption = exports.types = void 0;
+exports.tlsnotary = exports.ipfs = exports.escrow = exports.storage = exports.instantMessaging = exports.bridge = exports.web2 = exports.abstraction = exports.websdk = exports.l2ps = exports.demoswork = exports.wallet = exports.xmcore = exports.xmwebsdk = exports.xmlocalsdk = exports.utils = exports.encryption = exports.types = void 0;
 // Common types and constants
 exports.types = __importStar(require("./types"));
 // Basic cryptographic and data manipulation functions
@@ -55,4 +55,5 @@ exports.instantMessaging = __importStar(require("./instant_messaging"));
 exports.storage = __importStar(require("./storage"));
 exports.escrow = __importStar(require("./escrow"));
 exports.ipfs = __importStar(require("./ipfs"));
+exports.tlsnotary = __importStar(require("./tlsnotary"));
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6BAA6B;AAC7B,iDAAgC;AAChC,sDAAsD;AACtD,2DAA0C;AAC1C,iDAAgC;AAEhC,gCAAgC;AAChC,oEAAmD;AACnD,gEAA+C;AAC/C,4DAA2C,CAAC,gCAAgC;AAE5E,mDAAkC;AAClC,yDAAwC;AAExC,+CAA8B;AAE9B,mDAAkC;AAClC,6DAA4C;AAC5C,2DAA0C;AAE1C,qCAAqC;AACrC,mDAAkC;AAElC,wEAAuD;AAEvD,qDAAoC;AAEpC,mDAAkC;AAElC,+CAA8B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6BAA6B;AAC7B,iDAAgC;AAChC,sDAAsD;AACtD,2DAA0C;AAC1C,iDAAgC;AAEhC,gCAAgC;AAChC,oEAAmD;AACnD,gEAA+C;AAC/C,4DAA2C,CAAC,gCAAgC;AAE5E,mDAAkC;AAClC,yDAAwC;AAExC,+CAA8B;AAE9B,mDAAkC;AAClC,6DAA4C;AAC5C,2DAA0C;AAE1C,qCAAqC;AACrC,mDAAkC;AAElC,wEAAuD;AAEvD,qDAAoC;AAEpC,mDAAkC;AAElC,+CAA8B;AAE9B,yDAAwC"}

package/build/keyserver/KeyServerClient.d.ts

@@ -5,10 +5,11 @@
  * Enables dApps to verify user ownership of GitHub/Discord accounts
  * with DAHR attestation.
  */
-import type { KeyServerClientConfig, OAuthService, OAuthInitOptions, OAuthInitResult, OAuthPollResult, OAuthVerifyOptions, OAuthVerificationResult } from "./types";
+import type { KeyServerClientConfig, OAuthService, OAuthInitOptions, OAuthInitResult, OAuthPollResult, OAuthVerifyOptions, OAuthVerificationResult, WalletBinding } from "./types";
 export declare class KeyServerClient {
     private readonly endpoint;
     private readonly nodePubKey;
+    private readonly defaultWalletAddress?;
     constructor(config: KeyServerClientConfig);
     /**
      * Get list of available OAuth providers
@@ -30,18 +31,20 @@ export declare class KeyServerClient {
      * Poll for OAuth verification result
      *
      * @param state - State identifier from initiateOAuth
+     * @param walletBinding - Optional wallet binding with signature proving ownership
      * @returns Current status of the OAuth flow
      * @throws OAuthError if polling fails
      */
-    pollOAuth(state: string): Promise<OAuthPollResult>;
+    pollOAuth(state: string, walletBinding?: WalletBinding): Promise<OAuthPollResult>;
     /**
      * Convenience method: initiate OAuth and wait for completion
      *
      * This method handles the full OAuth flow:
      * 1. Initiates the OAuth flow
      * 2. Calls onAuthUrl callback for dApp to display the URL
-     * 3. Polls until completion, timeout, or failure
-     * 4. Returns the verified user info and attestation
+     * 3. Resolves wallet binding (if provided as function, calls with state)
+     * 4. Polls until completion, timeout, or failure
+     * 5. Returns the verified user info and attestation
      *
      * @param service - OAuth provider ("github" or "discord")
      * @param options - Configuration including callbacks

package/build/keyserver/KeyServerClient.js

@@ -16,6 +16,7 @@ class KeyServerClient {
         // Normalize endpoint (remove trailing slash)
         this.endpoint = config.endpoint.replace(/\/$/, "");
         this.nodePubKey = config.nodePubKey;
+        this.defaultWalletAddress = config.defaultWalletAddress;
     }
     /**
      * Get list of available OAuth providers
@@ -61,15 +62,17 @@ class KeyServerClient {
      * Poll for OAuth verification result
      *
      * @param state - State identifier from initiateOAuth
+     * @param walletBinding - Optional wallet binding with signature proving ownership
      * @returns Current status of the OAuth flow
      * @throws OAuthError if polling fails
      */
-    async pollOAuth(state) {
+    async pollOAuth(state, walletBinding) {
         const response = await this.fetch("/oauth/poll", {
             method: "POST",
             body: JSON.stringify({
                 state,
                 nodePubKey: this.nodePubKey,
+                walletBinding,
             }),
         });
         return response;
@@ -80,8 +83,9 @@ class KeyServerClient {
      * This method handles the full OAuth flow:
      * 1. Initiates the OAuth flow
      * 2. Calls onAuthUrl callback for dApp to display the URL
-     * 3. Polls until completion, timeout, or failure
-     * 4. Returns the verified user info and attestation
+     * 3. Resolves wallet binding (if provided as function, calls with state)
+     * 4. Polls until completion, timeout, or failure
+     * 5. Returns the verified user info and attestation
      *
      * @param service - OAuth provider ("github" or "discord")
      * @param options - Configuration including callbacks
@@ -100,7 +104,18 @@ class KeyServerClient {
         if (options?.onAuthUrl) {
             options.onAuthUrl(initResult.authUrl, initResult.state);
         }
-        // Step 3: Poll for result
+        // Step 3: Resolve wallet binding
+        let walletBinding;
+        if (options?.walletBinding) {
+            if (typeof options.walletBinding === "function") {
+                // Call the async function with state to get wallet binding
+                walletBinding = await options.walletBinding(initResult.state);
+            }
+            else {
+                walletBinding = options.walletBinding;
+            }
+        }
+        // Step 4: Poll for result
         const startTime = Date.now();
         let attempt = 0;
         while (Date.now() - startTime < timeout) {
@@ -109,7 +124,7 @@ class KeyServerClient {
             if (attempt > 1) {
                 await this.sleep(pollInterval);
             }
-            const pollResult = await this.pollOAuth(initResult.state);
+            const pollResult = await this.pollOAuth(initResult.state, walletBinding);
             // Notify dApp of poll status
             if (options?.onPoll) {
                 options.onPoll(attempt, pollResult.status);

package/build/keyserver/KeyServerClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"KeyServerClient.js","sourceRoot":"","sources":["../../../src/keyserver/KeyServerClient.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAaH,qCAAsC;AAEtC,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,aAAa;AAC7C,MAAM,qBAAqB,GAAG,IAAI,CAAC,CAAC,YAAY;AAEhD,MAAa,eAAe;IAIxB,YAAY,MAA6B;QACrC,6CAA6C;QAC7C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACxC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY;QACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,kBAAkB,EAClB,EAAE,MAAM,EAAE,KAAK,EAAE,CACpB,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,mBAAU,CAChB,qBAAqB,EACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,yBAAyB,CACvD,CAAC;QACN,CAAC;QAED,OAAO,QAAQ,CAAC,SAAS,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CACf,OAAqB,EACrB,OAA0B;QAE1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,aAAa,EACb;YACI,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,OAAO,EAAE,MAAM;aAC1B,CAAC;SACL,CACJ,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,mBAAU,CAAC,YAAY,CACzB,QAAQ,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,CACzE,CAAC;QACN,CAAC;QAED,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAChC,CAAC;IACN,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,aAAa,EACb;YACI,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,KAAK;gBACL,UAAU,EAAE,IAAI,CAAC,UAAU;aAC9B,CAAC;SACL,CACJ,CAAC;QAEF,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,WAAW,CACb,OAAqB,EACrB,OAA4B;QAE5B,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,eAAe,CAAC;QACpD,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,qBAAqB,CAAC;QAEpE,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE;YACjD,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,OAAO;SACV,CAAC,CAAC;QAEH,kCAAkC;QAClC,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;YACtC,OAAO,EAAE,CAAC;YAEV,6CAA6C;YAC7C,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAE1D,6BAA6B;YAC7B,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/C,CAAC;YAED,4BAA4B;YAC5B,QAAQ,UAAU,CAAC,MAAM,EAAE,CAAC;gBACxB,KAAK,WAAW;oBACZ,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;wBAChD,MAAM,IAAI,mBAAU,CAChB,gBAAgB,EAChB,6CAA6C,CAChD,CAAC;oBACN,CAAC;oBACD,OAAO;wBACH,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,UAAU,CAAC,MAAM;wBACvB,WAAW,EAAE,UAAU,CAAC,WAAW;qBACtC,CAAC;gBAEN,KAAK,QAAQ;oBACT,MAAM,mBAAU,CAAC,YAAY,CACzB,UAAU,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACvF,CAAC;gBAEN,KAAK,SAAS;oBACV,MAAM,IAAI,mBAAU,CAChB,eAAe,EACf,oBAAoB,CACvB,CAAC;gBAEN,KAAK,SAAS;oBACV,mBAAmB;oBACnB,MAAM;YACd,CAAC;QACL,CAAC;QAED,kBAAkB;QAClB,MAAM,IAAI,mBAAU,CAChB,eAAe,EACf,sCAAsC,OAAO,IAAI,CACpD,CAAC;IACN,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,KAAK,CACf,IAAY,EACZ,OAAoB;QAEpB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC;QAEtC,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC9B,GAAG,OAAO;gBACV,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,GAAG,OAAO,CAAC,OAAO;iBACrB;aACJ,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,IAAS,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,mBAAU,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,MAAM,IAAI,mBAAU,CAChB,eAAe,EACf,oCAAqC,KAAe,CAAC,OAAO,EAAE,EAC9D,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CACxC,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,EAAU;QACpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;CACJ;AA7ND,0CA6NC"}
+{"version":3,"file":"KeyServerClient.js","sourceRoot":"","sources":["../../../src/keyserver/KeyServerClient.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAcH,qCAAsC;AAEtC,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,aAAa;AAC7C,MAAM,qBAAqB,GAAG,IAAI,CAAC,CAAC,YAAY;AAEhD,MAAa,eAAe;IAKxB,YAAY,MAA6B;QACrC,6CAA6C;QAC7C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,CAAC;IAC5D,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY;QACd,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,kBAAkB,EAClB,EAAE,MAAM,EAAE,KAAK,EAAE,CACpB,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,IAAI,mBAAU,CAChB,qBAAqB,EACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,yBAAyB,CACvD,CAAC;QACN,CAAC;QAED,OAAO,QAAQ,CAAC,SAAS,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CACf,OAAqB,EACrB,OAA0B;QAE1B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,aAAa,EACb;YACI,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,OAAO;gBACP,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,OAAO,EAAE,MAAM;aAC1B,CAAC;SACL,CACJ,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,mBAAU,CAAC,YAAY,CACzB,QAAQ,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,CACzE,CAAC;QACN,CAAC;QAED,OAAO;YACH,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;SAChC,CAAC;IACN,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,aAA6B;QACxD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,aAAa,EACb;YACI,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACjB,KAAK;gBACL,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,aAAa;aAChB,CAAC;SACL,CACJ,CAAC;QAEF,OAAO,QAAQ,CAAC;IACpB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,WAAW,CACb,OAAqB,EACrB,OAA4B;QAE5B,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,eAAe,CAAC;QACpD,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,IAAI,qBAAqB,CAAC;QAEpE,8BAA8B;QAC9B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE;YACjD,MAAM,EAAE,OAAO,EAAE,MAAM;YACvB,OAAO;SACV,CAAC,CAAC;QAEH,kCAAkC;QAClC,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QAED,iCAAiC;QACjC,IAAI,aAAwC,CAAC;QAC7C,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;YACzB,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;gBAC9C,2DAA2D;gBAC3D,aAAa,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACJ,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;YAC1C,CAAC;QACL,CAAC;QAED,0BAA0B;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;YACtC,OAAO,EAAE,CAAC;YAEV,6CAA6C;YAC7C,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;YAEzE,6BAA6B;YAC7B,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YAC/C,CAAC;YAED,4BAA4B;YAC5B,QAAQ,UAAU,CAAC,MAAM,EAAE,CAAC;gBACxB,KAAK,WAAW;oBACZ,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;wBAChD,MAAM,IAAI,mBAAU,CAChB,gBAAgB,EAChB,6CAA6C,CAChD,CAAC;oBACN,CAAC;oBACD,OAAO;wBACH,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,UAAU,CAAC,MAAM;wBACvB,WAAW,EAAE,UAAU,CAAC,WAAW;qBACtC,CAAC;gBAEN,KAAK,QAAQ;oBACT,MAAM,mBAAU,CAAC,YAAY,CACzB,UAAU,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CACvF,CAAC;gBAEN,KAAK,SAAS;oBACV,MAAM,IAAI,mBAAU,CAChB,eAAe,EACf,oBAAoB,CACvB,CAAC;gBAEN,KAAK,SAAS;oBACV,mBAAmB;oBACnB,MAAM;YACd,CAAC;QACL,CAAC;QAED,kBAAkB;QAClB,MAAM,IAAI,mBAAU,CAChB,eAAe,EACf,sCAAsC,OAAO,IAAI,CACpD,CAAC;IACN,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,KAAK,CACf,IAAY,EACZ,OAAoB;QAEpB,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC;QAEtC,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC9B,GAAG,OAAO;gBACV,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,GAAG,OAAO,CAAC,OAAO;iBACrB;aACJ,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,OAAO,IAAS,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,mBAAU,EAAE,CAAC;gBAC9B,MAAM,KAAK,CAAC;YAChB,CAAC;YAED,MAAM,IAAI,mBAAU,CAChB,eAAe,EACf,oCAAqC,KAAe,CAAC,OAAO,EAAE,EAC9D,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CACxC,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,EAAU;QACpB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;CACJ;AA7OD,0CA6OC"}

package/build/keyserver/index.d.ts

@@ -28,4 +28,4 @@ export { OAuthError } from "./errors";
 export { verifyAttestation, verifyOAuthAttestation } from "./verification";
 export type { OAuthErrorCode } from "./errors";
 export type { VerifyAttestationOptions, AttestationVerificationResult, } from "./verification";
-export type { KeyServerClientConfig, OAuthService, OAuthInitOptions, OAuthInitResult, OAuthPollResult, OAuthVerifyOptions, OAuthVerificationResult, OAuthStatus, OAuthUserInfo, DAHRAttestation, OAuthProvidersResponse, } from "./types";
+export type { KeyServerClientConfig, OAuthService, OAuthInitOptions, OAuthInitResult, OAuthPollResult, OAuthVerifyOptions, OAuthVerificationResult, OAuthStatus, OAuthUserInfo, DAHRAttestation, OAuthProvidersResponse, WalletBinding, } from "./types";

package/build/keyserver/types.d.ts

@@ -8,6 +8,23 @@
  * Supported OAuth providers
  */
 export type OAuthService = "github" | "discord";
+/**
+ * Wallet binding for OAuth verification.
+ * Proves ownership of a wallet address during OAuth flow.
+ */
+export interface WalletBinding {
+    /** The wallet address to bind to this OAuth verification */
+    address: string;
+    /**
+     * Signature proving ownership of the wallet address.
+     * The message signed should be: "demos-oauth-bind:{state}" where state is from initiateOAuth.
+     * For EVM: personal_sign or eth_sign
+     * For Solana: signMessage
+     */
+    signature: string;
+    /** Signature scheme used (for verification on receiving end) */
+    signatureType: "evm" | "solana" | "ed25519";
+}
 /**
  * Options for initiating an OAuth flow
  */
@@ -16,6 +33,13 @@ export interface OAuthInitOptions {
     scopes?: string[];
     /** Flow timeout in milliseconds (default: 600000 = 10min) */
     timeout?: number;
+    /**
+     * Wallet address to associate with this OAuth verification.
+     * This address will be included in the DAHR attestation metadata.
+     * Overrides defaultWalletAddress from KeyServerClientConfig if both are set.
+     * @deprecated Use walletBinding for signed wallet proof instead
+     */
+    walletAddress?: string;
 }
 /**
  * Result from initiating an OAuth flow
@@ -77,6 +101,12 @@ export interface DAHRAttestation {
         nodePubKey: string;
         /** Key Server version */
         version: string;
+        /**
+         * Wallet binding included in the attestation.
+         * Contains the wallet address and signature proving ownership.
+         * The Key Server verifies this signature before including it.
+         */
+        walletBinding?: WalletBinding;
     };
 }
 /**
@@ -102,7 +132,8 @@ export interface OAuthPollResult {
  */
 export interface OAuthVerifyOptions extends OAuthInitOptions {
     /**
-     * Called when auth URL is ready - dApp should display this to user
+     * Called when auth URL is ready - dApp should display this to user.
+     * The state is needed for wallet binding signature.
      */
     onAuthUrl?: (authUrl: string, state: string) => void;
     /**
@@ -113,6 +144,24 @@ export interface OAuthVerifyOptions extends OAuthInitOptions {
      * Called on each poll attempt (for UI feedback)
      */
     onPoll?: (attempt: number, status: OAuthStatus) => void;
+    /**
+     * Wallet binding with signature proving ownership.
+     * The signature message format is: "demos-oauth-bind:{state}"
+     * This is called after initiateOAuth to get the state for signing.
+     *
+     * @example
+     * ```typescript
+     * const result = await client.verifyOAuth("github", {
+     *     onAuthUrl: async (authUrl, state) => {
+     *         // Sign with user's wallet
+     *         const message = `demos-oauth-bind:${state}`;
+     *         const signature = await wallet.signMessage(message);
+     *         return { address: wallet.address, signature, signatureType: "evm" };
+     *     },
+     * });
+     * ```
+     */
+    walletBinding?: WalletBinding | ((state: string) => Promise<WalletBinding>);
 }
 /**
  * Result from the convenience verifyOAuth method
@@ -133,6 +182,11 @@ export interface KeyServerClientConfig {
     endpoint: string;
     /** Node's public key (hex-encoded Ed25519) */
     nodePubKey: string;
+    /**
+     * Default wallet address to associate with OAuth verifications.
+     * Can be overridden per-request via OAuthInitOptions.walletAddress.
+     */
+    defaultWalletAddress?: string;
 }
 /**
  * Response from GET /oauth/providers

package/build/keyserver/verification.d.ts

@@ -5,7 +5,7 @@
  * Allows consuming apps to independently verify that the Key Server
  * actually performed the OAuth verification.
  */
-import type { DAHRAttestation, OAuthVerificationResult } from "./types";
+import type { DAHRAttestation, OAuthVerificationResult, WalletBinding } from "./types";
 /**
  * Options for attestation verification
  */
@@ -35,6 +35,8 @@ export interface AttestationVerificationResult {
         keyServerPubKey: string;
         nodePubKey: string;
         version: string;
+        /** Wallet binding if present in attestation */
+        walletBinding?: WalletBinding;
     };
 }
 /**

package/build/keyserver/verification.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../../src/keyserver/verification.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAqEH,8CAmFC;AAYD,wDAaC;AA/KD,6CAA4C;AAuC5C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,iBAAiB,CAC7B,WAA4B,EAC5B,eAAuB,EACvB,OAAkC;IAElC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,CAAC,iBAAiB;IAE5D,iCAAiC;IACjC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAClE,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,+BAA+B;SAC1C,CAAC;IACN,CAAC;IAED,uBAAuB;IACvB,IAAI,WAAW,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,+BAA+B,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE;SACtE,CAAC;IACN,CAAC;IAED,sCAAsC;IACtC,IAAI,WAAW,CAAC,QAAQ,CAAC,eAAe,KAAK,eAAe,EAAE,CAAC;QAC3D,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,gCAAgC;YACxC,QAAQ,EAAE,WAAW,CAAC,QAAQ;SACjC,CAAC;IACN,CAAC;IAED,oCAAoC;IACpC,IACI,OAAO,EAAE,kBAAkB;QAC3B,WAAW,CAAC,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,kBAAkB,EAChE,CAAC;QACC,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,WAAW,CAAC,QAAQ;SACjC,CAAC;IACN,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;QACxD,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;YACf,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,6BAA6B,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI;gBACnG,QAAQ,EAAE,WAAW,CAAC,QAAQ;aACjC,CAAC;QACN,CAAC;IACL,CAAC;IAED,6CAA6C;IAC7C,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,yBAAY,CAAC,OAAO,CAAC,MAAM,CACvC,WAAW,CAAC,YAAY,EACxB,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EACvC,WAAW,CAAC,eAAe,CAAC,CAC/B,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,+BAA+B;gBACvC,QAAQ,EAAE,WAAW,CAAC,QAAQ;aACjC,CAAC;QACN,CAAC;QAED,OAAO;YACH,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,WAAW,CAAC,QAAQ;SACjC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,iCAAkC,KAAe,CAAC,OAAO,EAAE;YACnE,QAAQ,EAAE,WAAW,CAAC,QAAQ;SACjC,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,sBAAsB,CAClC,MAA+B,EAC/B,eAAuB,EACvB,OAAkC;IAElC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,0BAA0B;SACrC,CAAC;IACN,CAAC;IAED,OAAO,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,GAAW;IAC5B,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC"}
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../../src/keyserver/verification.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AAuEH,8CAmFC;AAYD,wDAaC;AAjLD,6CAA4C;AAyC5C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,iBAAiB,CAC7B,WAA4B,EAC5B,eAAuB,EACvB,OAAkC;IAElC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,CAAC,iBAAiB;IAE5D,iCAAiC;IACjC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,SAAS,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAClE,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,+BAA+B;SAC1C,CAAC;IACN,CAAC;IAED,uBAAuB;IACvB,IAAI,WAAW,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,+BAA+B,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE;SACtE,CAAC;IACN,CAAC;IAED,sCAAsC;IACtC,IAAI,WAAW,CAAC,QAAQ,CAAC,eAAe,KAAK,eAAe,EAAE,CAAC;QAC3D,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,gCAAgC;YACxC,QAAQ,EAAE,WAAW,CAAC,QAAQ;SACjC,CAAC;IACN,CAAC;IAED,oCAAoC;IACpC,IACI,OAAO,EAAE,kBAAkB;QAC3B,WAAW,CAAC,QAAQ,CAAC,UAAU,KAAK,OAAO,CAAC,kBAAkB,EAChE,CAAC;QACC,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,WAAW,CAAC,QAAQ;SACjC,CAAC;IACN,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC;QACxD,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;YACf,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,6BAA6B,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI;gBACnG,QAAQ,EAAE,WAAW,CAAC,QAAQ;aACjC,CAAC;QACN,CAAC;IACL,CAAC;IAED,6CAA6C;IAC7C,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,yBAAY,CAAC,OAAO,CAAC,MAAM,CACvC,WAAW,CAAC,YAAY,EACxB,WAAW,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,EACvC,WAAW,CAAC,eAAe,CAAC,CAC/B,CAAC;QAEF,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,MAAM,EAAE,+BAA+B;gBACvC,QAAQ,EAAE,WAAW,CAAC,QAAQ;aACjC,CAAC;QACN,CAAC;QAED,OAAO;YACH,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,WAAW,CAAC,QAAQ;SACjC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,iCAAkC,KAAe,CAAC,OAAO,EAAE;YACnE,QAAQ,EAAE,WAAW,CAAC,QAAQ;SACjC,CAAC;IACN,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,sBAAsB,CAClC,MAA+B,EAC/B,eAAuB,EACvB,OAAkC;IAElC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO;YACH,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,0BAA0B;SACrC,CAAC;IACN,CAAC;IAED,OAAO,iBAAiB,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,GAAW;IAC5B,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC"}

package/build/tlsnotary/TLSNotary.d.ts

@@ -0,0 +1,161 @@
+/**
+ * TLSNotary - Browser-based HTTPS Attestation
+ *
+ * This module provides TLSNotary attestation capabilities for the Demos SDK.
+ * It runs the TLSNotary Prover in a Web Worker using WASM, communicates with
+ * a Notary server, and produces cryptographic proofs of HTTPS requests.
+ *
+ * NOTE: This module is browser-only. It requires Web Workers and WASM support.
+ *
+ * @example
+ * ```typescript
+ * import { TLSNotary } from '@kynesyslabs/demosdk/tlsnotary';
+ *
+ * // Option 1: Explicit configuration
+ * const tlsn = new TLSNotary({
+ *   notaryUrl: 'wss://node.demos.sh:7047',
+ *   websocketProxyUrl: 'wss://node.demos.sh:55688',
+ * });
+ *
+ * // Option 2: Discovery via Demos instance (preferred)
+ * const demos = new Demos({ rpc: 'https://node.demos.sh' });
+ * const tlsn = await demos.tlsnotary();
+ *
+ * await tlsn.initialize();
+ *
+ * const result = await tlsn.attest({
+ *   url: 'https://api.github.com/users/octocat',
+ *   headers: { 'User-Agent': 'DemosSDK' },
+ * });
+ *
+ * console.log('Verified server:', result.verification.serverName);
+ * console.log('Response:', result.verification.recv);
+ * ```
+ */
+import type { PresentationJSON } from "tlsn-js/build/types";
+import type { TLSNotaryConfig, AttestRequest, AttestResult, CommitRanges, VerificationResult, AttestOptions, StatusCallback, TranscriptInfo } from "./types";
+/**
+ * TLSNotary class for browser-based HTTPS attestation
+ *
+ * This class handles:
+ * - Running the Prover (MPC-TLS client) in the browser via WASM
+ * - Communicating with the Demos Node's Notary server
+ * - Attesting HTTPS requests with cryptographic proofs
+ * - Verifying attestations offline
+ */
+export declare class TLSNotary {
+    private config;
+    private worker;
+    private wasm;
+    private initialized;
+    private initializingPromise;
+    /**
+     * Create a new TLSNotary instance
+     *
+     * @param config - Configuration with notary and proxy URLs
+     */
+    constructor(config: TLSNotaryConfig);
+    /**
+     * Initialize the WASM module
+     *
+     * Must be called before any attestation operations.
+     * Only needs to be called once per page load.
+     *
+     * @throws Error if WASM initialization fails
+     */
+    initialize(): Promise<void>;
+    /**
+     * Attest an HTTPS request using the step-by-step method
+     *
+     * This provides full control over the attestation process including
+     * custom commit ranges for selective disclosure.
+     *
+     * @param request - Request configuration (URL, method, headers, body)
+     * @param commit - Optional commit ranges for selective disclosure
+     * @param onStatus - Optional status callback for progress updates
+     * @returns Attestation result with proof and verification
+     *
+     * @example
+     * ```typescript
+     * const result = await tlsn.attest({
+     *   url: 'https://api.example.com/user',
+     *   method: 'GET',
+     *   headers: { 'Authorization': 'Bearer token' },
+     * }, {
+     *   // Hide authorization header in the proof
+     *   sent: [{ start: 0, end: 50 }, { start: 100, end: 200 }],
+     *   recv: [{ start: 0, end: 500 }],
+     * });
+     * ```
+     */
+    attest(request: AttestRequest, commit?: CommitRanges, onStatus?: StatusCallback): Promise<AttestResult>;
+    /**
+     * Quick attestation using the helper method
+     *
+     * Simpler API with less control over the process.
+     * Good for straightforward use cases.
+     *
+     * @param options - Attestation options including request and commit config
+     * @returns Attestation result with proof and verification
+     *
+     * @example
+     * ```typescript
+     * const result = await tlsn.attestQuick({
+     *   url: 'https://api.coingecko.com/api/v3/simple/price?ids=bitcoin&vs_currencies=usd',
+     * });
+     * ```
+     */
+    attestQuick(options: AttestOptions): Promise<AttestResult>;
+    /**
+     * Verify a presentation/proof
+     *
+     * Can be used to verify proofs from other sources.
+     * This operation can be done offline.
+     *
+     * @param presentationJSON - The presentation to verify
+     * @returns Verification result with extracted data
+     *
+     * @example
+     * ```typescript
+     * // Load a saved proof
+     * const savedProof = JSON.parse(localStorage.getItem('proof'));
+     * const result = await tlsn.verify(savedProof);
+     *
+     * console.log('Server:', result.serverName);
+     * console.log('Time:', new Date(result.time * 1000));
+     * console.log('Response:', result.recv);
+     * ```
+     */
+    verify(presentationJSON: PresentationJSON): Promise<VerificationResult>;
+    /**
+     * Get the transcript from an attestation for inspection
+     *
+     * Useful for determining commit ranges for selective disclosure.
+     *
+     * @param request - Request to send (without creating attestation)
+     * @returns Transcript with sent and received bytes
+     */
+    getTranscript(request: AttestRequest): Promise<TranscriptInfo>;
+    /**
+     * Cleanup resources
+     *
+     * Call when done with TLSNotary to release the Web Worker.
+     */
+    destroy(): void;
+    /**
+     * Check if WASM is initialized
+     */
+    isInitialized(): boolean;
+    /**
+     * Get current configuration
+     */
+    getConfig(): TLSNotaryConfig;
+    /**
+     * Update configuration
+     *
+     * Note: Changes take effect on next attestation.
+     * If changing notary URL, you may want to re-initialize.
+     */
+    updateConfig(config: Partial<TLSNotaryConfig>): void;
+}
+export default TLSNotary;