@midnight-ntwrk/midnight-did-api 0.5.0-rc1 → 0.5.0-rc2

package/dist/verification-method-operations.js

@@ -1,34 +1,45 @@
 import { DIDContract } from "@midnight-ntwrk/midnight-did-contract";
+import { asSchnorrJubjubDigest, createControllerAuthorization, } from "./controller-authorization.js";
 import { normalizeBoundFragmentId } from "./did-subject.js";
 import { LedgerVerificationMethodRelationMap, schnorrJubjubVerificationMethodToLedger, verificationMethodToLedger, } from "./ledger-mappers.js";
 import { requireDeployedMidnightDIDLedgerState } from "./ledger-state.js";
 import { assertVerificationMethodRelationAbsent, assertVerificationMethodRelationPresent, purgeVerificationMethodFromAllRelations, } from "./verification-method-relations.js";
-export const addVerificationMethod = async (didContract, verificationMethod) => {
-    const result = await didContract.callTx.setVerificationMethod(verificationMethodToLedger(didContract, verificationMethod), DIDContract.MapMutation.Insert);
+export const addVerificationMethod = async (didContract, providers, verificationMethod) => {
+    const ledgerVerificationMethod = verificationMethodToLedger(didContract, verificationMethod);
+    const [signature, expectedVersion] = await createControllerAuthorization(didContract, providers, (ledgerState) => asSchnorrJubjubDigest(DIDContract.pureCircuits.setVerificationMethodAuthorizationDigest(ledgerState.id, ledgerState.version, ledgerVerificationMethod, DIDContract.MapMutation.Insert)));
+    const result = await didContract.callTx.setVerificationMethod(ledgerVerificationMethod, DIDContract.MapMutation.Insert, signature, expectedVersion);
     return result.public;
 };
-export const updateVerificationMethod = async (didContract, verificationMethod) => {
-    const result = await didContract.callTx.setVerificationMethod(verificationMethodToLedger(didContract, verificationMethod), DIDContract.MapMutation.Update);
+export const updateVerificationMethod = async (didContract, providers, verificationMethod) => {
+    const ledgerVerificationMethod = verificationMethodToLedger(didContract, verificationMethod);
+    const [signature, expectedVersion] = await createControllerAuthorization(didContract, providers, (ledgerState) => asSchnorrJubjubDigest(DIDContract.pureCircuits.setVerificationMethodAuthorizationDigest(ledgerState.id, ledgerState.version, ledgerVerificationMethod, DIDContract.MapMutation.Update)));
+    const result = await didContract.callTx.setVerificationMethod(ledgerVerificationMethod, DIDContract.MapMutation.Update, signature, expectedVersion);
     return result.public;
 };
 export const removeVerificationMethod = async (didContract, providers, methodId) => {
     const normalizedMethodId = normalizeBoundFragmentId(didContract, methodId, "methodId");
     await purgeVerificationMethodFromAllRelations(didContract, providers, normalizedMethodId);
-    const result = await didContract.callTx.removeVerificationMethod(normalizedMethodId);
+    const [signature, expectedVersion] = await createControllerAuthorization(didContract, providers, (ledgerState) => asSchnorrJubjubDigest(DIDContract.pureCircuits.removeVerificationMethodAuthorizationDigest(ledgerState.id, ledgerState.version, normalizedMethodId)));
+    const result = await didContract.callTx.removeVerificationMethod(normalizedMethodId, signature, expectedVersion);
     return result.public;
 };
-export const addSchnorrJubjubVerificationMethod = async (didContract, verificationMethod) => {
-    const result = await didContract.callTx.setSchnorrJubjubVerificationMethod(schnorrJubjubVerificationMethodToLedger(didContract, verificationMethod), DIDContract.MapMutation.Insert);
+export const addSchnorrJubjubVerificationMethod = async (didContract, providers, verificationMethod) => {
+    const ledgerVerificationMethod = schnorrJubjubVerificationMethodToLedger(didContract, verificationMethod);
+    const [signature, expectedVersion] = await createControllerAuthorization(didContract, providers, (ledgerState) => asSchnorrJubjubDigest(DIDContract.pureCircuits.setSchnorrJubjubVerificationMethodAuthorizationDigest(ledgerState.id, ledgerState.version, ledgerVerificationMethod, DIDContract.MapMutation.Insert)));
+    const result = await didContract.callTx.setSchnorrJubjubVerificationMethod(ledgerVerificationMethod, DIDContract.MapMutation.Insert, signature, expectedVersion);
     return result.public;
 };
-export const updateSchnorrJubjubVerificationMethod = async (didContract, verificationMethod) => {
-    const result = await didContract.callTx.setSchnorrJubjubVerificationMethod(schnorrJubjubVerificationMethodToLedger(didContract, verificationMethod), DIDContract.MapMutation.Update);
+export const updateSchnorrJubjubVerificationMethod = async (didContract, providers, verificationMethod) => {
+    const ledgerVerificationMethod = schnorrJubjubVerificationMethodToLedger(didContract, verificationMethod);
+    const [signature, expectedVersion] = await createControllerAuthorization(didContract, providers, (ledgerState) => asSchnorrJubjubDigest(DIDContract.pureCircuits.setSchnorrJubjubVerificationMethodAuthorizationDigest(ledgerState.id, ledgerState.version, ledgerVerificationMethod, DIDContract.MapMutation.Update)));
+    const result = await didContract.callTx.setSchnorrJubjubVerificationMethod(ledgerVerificationMethod, DIDContract.MapMutation.Update, signature, expectedVersion);
     return result.public;
 };
 export const removeSchnorrJubjubVerificationMethod = async (didContract, providers, methodId) => {
     const normalizedMethodId = normalizeBoundFragmentId(didContract, methodId, "methodId");
     await purgeVerificationMethodFromAllRelations(didContract, providers, normalizedMethodId);
-    const result = await didContract.callTx.removeSchnorrJubjubVerificationMethod(normalizedMethodId);
+    const [signature, expectedVersion] = await createControllerAuthorization(didContract, providers, (ledgerState) => asSchnorrJubjubDigest(DIDContract.pureCircuits.removeSchnorrJubjubVerificationMethodAuthorizationDigest(ledgerState.id, ledgerState.version, normalizedMethodId)));
+    const result = await didContract.callTx.removeSchnorrJubjubVerificationMethod(normalizedMethodId, signature, expectedVersion);
     return result.public;
 };
 /**
@@ -47,14 +58,18 @@ export const addVerificationMethodRelation = async (didContract, providers, rela
     const normalizedMethodId = normalizeBoundFragmentId(didContract, methodId, "methodId");
     const didState = await requireDeployedMidnightDIDLedgerState(providers, didContract);
     assertVerificationMethodRelationAbsent(didState, relation, normalizedMethodId);
-    const result = await didContract.callTx.setVerificationMethodRelation(LedgerVerificationMethodRelationMap[relation], normalizedMethodId, DIDContract.SetMutation.Insert);
+    const ledgerRelation = LedgerVerificationMethodRelationMap[relation];
+    const [signature, expectedVersion] = await createControllerAuthorization(didContract, providers, (ledgerState) => asSchnorrJubjubDigest(DIDContract.pureCircuits.setVerificationMethodRelationAuthorizationDigest(ledgerState.id, ledgerState.version, ledgerRelation, normalizedMethodId, DIDContract.SetMutation.Insert)));
+    const result = await didContract.callTx.setVerificationMethodRelation(ledgerRelation, normalizedMethodId, DIDContract.SetMutation.Insert, signature, expectedVersion);
     return result.public;
 };
 export const removeVerificationMethodRelation = async (didContract, providers, relation, methodId) => {
     const normalizedMethodId = normalizeBoundFragmentId(didContract, methodId, "methodId");
     const didState = await requireDeployedMidnightDIDLedgerState(providers, didContract);
     assertVerificationMethodRelationPresent(didState, relation, normalizedMethodId);
-    const result = await didContract.callTx.setVerificationMethodRelation(LedgerVerificationMethodRelationMap[relation], normalizedMethodId, DIDContract.SetMutation.Remove);
+    const ledgerRelation = LedgerVerificationMethodRelationMap[relation];
+    const [signature, expectedVersion] = await createControllerAuthorization(didContract, providers, (ledgerState) => asSchnorrJubjubDigest(DIDContract.pureCircuits.setVerificationMethodRelationAuthorizationDigest(ledgerState.id, ledgerState.version, ledgerRelation, normalizedMethodId, DIDContract.SetMutation.Remove)));
+    const result = await didContract.callTx.setVerificationMethodRelation(ledgerRelation, normalizedMethodId, DIDContract.SetMutation.Remove, signature, expectedVersion);
     return result.public;
 };
 //# sourceMappingURL=verification-method-operations.js.map

package/dist/verification-method-operations.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification-method-operations.js","sourceRoot":"","sources":["../src/verification-method-operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AAOpE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EACL,mCAAmC,EACnC,uCAAuC,EACvC,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qCAAqC,EAAE,MAAM,mBAAmB,CAAC;AAQ1E,OAAO,EACL,sCAAsC,EACtC,uCAAuC,EACvC,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAE5C,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,WAAwC,EACxC,kBAAsC,EACZ,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,qBAAqB,CAC3D,0BAA0B,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAC3D,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,WAAwC,EACxC,kBAAsC,EACZ,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,qBAAqB,CAC3D,0BAA0B,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAC3D,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,WAAwC,EACxC,SAA+B,EAC/B,QAAgB,EACU,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,uCAAuC,CAC3C,WAAW,EACX,SAAS,EACT,kBAAkB,CACnB,CAAC;IAEF,MAAM,MAAM,GACV,MAAM,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IACxE,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,EACrD,WAAwC,EACxC,kBAAmD,EACzB,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,kCAAkC,CACxE,uCAAuC,CAAC,WAAW,EAAE,kBAAkB,CAAC,EACxE,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,EACxD,WAAwC,EACxC,kBAAmD,EACzB,EAAE;IAC5B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,kCAAkC,CACxE,uCAAuC,CAAC,WAAW,EAAE,kBAAkB,CAAC,EACxE,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,EACxD,WAAwC,EACxC,SAA+B,EAC/B,QAAgB,EACU,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,uCAAuC,CAC3C,WAAW,EACX,SAAS,EACT,kBAAkB,CACnB,CAAC;IAEF,MAAM,MAAM,GACV,MAAM,WAAW,CAAC,MAAM,CAAC,qCAAqC,CAC5D,kBAAkB,CACnB,CAAC;IACJ,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,EACrD,WAAwC,EACxC,QAAgB,EAChB,MAA2B,EAC3B,SAAiC,EACP,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,kCAAkC,CACxE,kBAAkB,EAClB,MAAM,EACN,SAAS,CACV,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,EAChD,WAAwC,EACxC,SAA+B,EAC/B,QAAwC,EACxC,QAAgB,EACU,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D,SAAS,EACT,WAAW,CACZ,CAAC;IACF,sCAAsC,CACpC,QAAQ,EACR,QAAQ,EACR,kBAAkB,CACnB,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,6BAA6B,CACnE,mCAAmC,CAAC,QAAQ,CAAC,EAC7C,kBAAkB,EAClB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,EACnD,WAAwC,EACxC,SAA+B,EAC/B,QAAwC,EACxC,QAAgB,EACU,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D,SAAS,EACT,WAAW,CACZ,CAAC;IACF,uCAAuC,CACrC,QAAQ,EACR,QAAQ,EACR,kBAAkB,CACnB,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,6BAA6B,CACnE,mCAAmC,CAAC,QAAQ,CAAC,EAC7C,kBAAkB,EAClB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC"}
+{"version":3,"file":"verification-method-operations.js","sourceRoot":"","sources":["../src/verification-method-operations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AAOpE,OAAO,EACL,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EACL,mCAAmC,EACnC,uCAAuC,EACvC,0BAA0B,GAC3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qCAAqC,EAAE,MAAM,mBAAmB,CAAC;AAQ1E,OAAO,EACL,sCAAsC,EACtC,uCAAuC,EACvC,uCAAuC,GACxC,MAAM,oCAAoC,CAAC;AAE5C,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,WAAwC,EACxC,SAA+B,EAC/B,kBAAsC,EACZ,EAAE;IAC5B,MAAM,wBAAwB,GAAG,0BAA0B,CACzD,WAAW,EACX,kBAAkB,CACnB,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,6BAA6B,CACtE,WAAW,EACX,SAAS,EACT,CAAC,WAAW,EAAE,EAAE,CACd,qBAAqB,CACnB,WAAW,CAAC,YAAY,CAAC,wCAAwC,CAC/D,WAAW,CAAC,EAAE,EACd,WAAW,CAAC,OAAO,EACnB,wBAAwB,EACxB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CACF,CACJ,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,qBAAqB,CAC3D,wBAAwB,EACxB,WAAW,CAAC,WAAW,CAAC,MAAM,EAC9B,SAAS,EACT,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,WAAwC,EACxC,SAA+B,EAC/B,kBAAsC,EACZ,EAAE;IAC5B,MAAM,wBAAwB,GAAG,0BAA0B,CACzD,WAAW,EACX,kBAAkB,CACnB,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,6BAA6B,CACtE,WAAW,EACX,SAAS,EACT,CAAC,WAAW,EAAE,EAAE,CACd,qBAAqB,CACnB,WAAW,CAAC,YAAY,CAAC,wCAAwC,CAC/D,WAAW,CAAC,EAAE,EACd,WAAW,CAAC,OAAO,EACnB,wBAAwB,EACxB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CACF,CACJ,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,qBAAqB,CAC3D,wBAAwB,EACxB,WAAW,CAAC,WAAW,CAAC,MAAM,EAC9B,SAAS,EACT,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,WAAwC,EACxC,SAA+B,EAC/B,QAAgB,EACU,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,uCAAuC,CAC3C,WAAW,EACX,SAAS,EACT,kBAAkB,CACnB,CAAC;IAEF,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,6BAA6B,CACtE,WAAW,EACX,SAAS,EACT,CAAC,WAAW,EAAE,EAAE,CACd,qBAAqB,CACnB,WAAW,CAAC,YAAY,CAAC,2CAA2C,CAClE,WAAW,CAAC,EAAE,EACd,WAAW,CAAC,OAAO,EACnB,kBAAkB,CACnB,CACF,CACJ,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,wBAAwB,CAC9D,kBAAkB,EAClB,SAAS,EACT,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,EACrD,WAAwC,EACxC,SAA+B,EAC/B,kBAAmD,EACzB,EAAE;IAC5B,MAAM,wBAAwB,GAAG,uCAAuC,CACtE,WAAW,EACX,kBAAkB,CACnB,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,6BAA6B,CACtE,WAAW,EACX,SAAS,EACT,CAAC,WAAW,EAAE,EAAE,CACd,qBAAqB,CACnB,WAAW,CAAC,YAAY,CAAC,qDAAqD,CAC5E,WAAW,CAAC,EAAE,EACd,WAAW,CAAC,OAAO,EACnB,wBAAwB,EACxB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CACF,CACJ,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,kCAAkC,CACxE,wBAAwB,EACxB,WAAW,CAAC,WAAW,CAAC,MAAM,EAC9B,SAAS,EACT,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,EACxD,WAAwC,EACxC,SAA+B,EAC/B,kBAAmD,EACzB,EAAE;IAC5B,MAAM,wBAAwB,GAAG,uCAAuC,CACtE,WAAW,EACX,kBAAkB,CACnB,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,6BAA6B,CACtE,WAAW,EACX,SAAS,EACT,CAAC,WAAW,EAAE,EAAE,CACd,qBAAqB,CACnB,WAAW,CAAC,YAAY,CAAC,qDAAqD,CAC5E,WAAW,CAAC,EAAE,EACd,WAAW,CAAC,OAAO,EACnB,wBAAwB,EACxB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CACF,CACJ,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,kCAAkC,CACxE,wBAAwB,EACxB,WAAW,CAAC,WAAW,CAAC,MAAM,EAC9B,SAAS,EACT,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,EACxD,WAAwC,EACxC,SAA+B,EAC/B,QAAgB,EACU,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,uCAAuC,CAC3C,WAAW,EACX,SAAS,EACT,kBAAkB,CACnB,CAAC;IAEF,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,6BAA6B,CACtE,WAAW,EACX,SAAS,EACT,CAAC,WAAW,EAAE,EAAE,CACd,qBAAqB,CACnB,WAAW,CAAC,YAAY,CAAC,wDAAwD,CAC/E,WAAW,CAAC,EAAE,EACd,WAAW,CAAC,OAAO,EACnB,kBAAkB,CACnB,CACF,CACJ,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,qCAAqC,CAC3E,kBAAkB,EAClB,SAAS,EACT,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,KAAK,EACrD,WAAwC,EACxC,QAAgB,EAChB,MAA2B,EAC3B,SAAiC,EACP,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,kCAAkC,CACxE,kBAAkB,EAClB,MAAM,EACN,SAAS,CACV,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,EAChD,WAAwC,EACxC,SAA+B,EAC/B,QAAwC,EACxC,QAAgB,EACU,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D,SAAS,EACT,WAAW,CACZ,CAAC;IACF,sCAAsC,CACpC,QAAQ,EACR,QAAQ,EACR,kBAAkB,CACnB,CAAC;IACF,MAAM,cAAc,GAAG,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,6BAA6B,CACtE,WAAW,EACX,SAAS,EACT,CAAC,WAAW,EAAE,EAAE,CACd,qBAAqB,CACnB,WAAW,CAAC,YAAY,CAAC,gDAAgD,CACvE,WAAW,CAAC,EAAE,EACd,WAAW,CAAC,OAAO,EACnB,cAAc,EACd,kBAAkB,EAClB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CACF,CACJ,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,6BAA6B,CACnE,cAAc,EACd,kBAAkB,EAClB,WAAW,CAAC,WAAW,CAAC,MAAM,EAC9B,SAAS,EACT,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,EACnD,WAAwC,EACxC,SAA+B,EAC/B,QAAwC,EACxC,QAAgB,EACU,EAAE;IAC5B,MAAM,kBAAkB,GAAG,wBAAwB,CACjD,WAAW,EACX,QAAQ,EACR,UAAU,CACX,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D,SAAS,EACT,WAAW,CACZ,CAAC;IACF,uCAAuC,CACrC,QAAQ,EACR,QAAQ,EACR,kBAAkB,CACnB,CAAC;IACF,MAAM,cAAc,GAAG,mCAAmC,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,6BAA6B,CACtE,WAAW,EACX,SAAS,EACT,CAAC,WAAW,EAAE,EAAE,CACd,qBAAqB,CACnB,WAAW,CAAC,YAAY,CAAC,gDAAgD,CACvE,WAAW,CAAC,EAAE,EACd,WAAW,CAAC,OAAO,EACnB,cAAc,EACd,kBAAkB,EAClB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CACF,CACJ,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,6BAA6B,CACnE,cAAc,EACd,kBAAkB,EAClB,WAAW,CAAC,WAAW,CAAC,MAAM,EAC9B,SAAS,EACT,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC,CAAC"}

package/dist/verification-method-relations.d.ts

@@ -9,5 +9,5 @@ export type VerificationMethodRelationMembership = {
 export declare const verificationMethodRelationMemberships: (didState: DIDContract.Ledger, normalizedMethodId: string) => readonly VerificationMethodRelationMembership[];
 export declare const assertVerificationMethodRelationAbsent: (didState: DIDContract.Ledger, relation: VerificationMethodRelationType, normalizedMethodId: string) => void;
 export declare const assertVerificationMethodRelationPresent: (didState: DIDContract.Ledger, relation: VerificationMethodRelationType, normalizedMethodId: string) => void;
-export declare const removePresentVerificationMethodRelations: (didContract: DeployedMidnightDIDContract, memberships: readonly VerificationMethodRelationMembership[], normalizedMethodId: string) => Promise<void>;
+export declare const removePresentVerificationMethodRelations: (didContract: DeployedMidnightDIDContract, providers: MidnightDIDProviders, memberships: readonly VerificationMethodRelationMembership[], normalizedMethodId: string) => Promise<void>;
 export declare const purgeVerificationMethodFromAllRelations: (didContract: DeployedMidnightDIDContract, providers: MidnightDIDProviders, normalizedMethodId: string) => Promise<void>;

package/dist/verification-method-relations.js

@@ -1,5 +1,6 @@
 import { DIDContract } from "@midnight-ntwrk/midnight-did-contract";
 import { VerificationMethodRelationType } from "@midnight-ntwrk/midnight-did-domain";
+import { asSchnorrJubjubDigest, createControllerAuthorization, } from "./controller-authorization.js";
 import { LedgerVerificationMethodRelationMap, relationSetFromState, } from "./ledger-mappers.js";
 import { requireDeployedMidnightDIDLedgerState } from "./ledger-state.js";
 export const VerificationMethodRelations = Object.freeze([
@@ -25,16 +26,18 @@ export const assertVerificationMethodRelationPresent = (didState, relation, norm
         throw new Error(`relation ${relation} does not contain verification method ${normalizedMethodId}`);
     }
 };
-export const removePresentVerificationMethodRelations = async (didContract, memberships, normalizedMethodId) => {
+export const removePresentVerificationMethodRelations = async (didContract, providers, memberships, normalizedMethodId) => {
     for (const { relation, member } of memberships) {
         if (!member)
             continue;
-        await didContract.callTx.setVerificationMethodRelation(LedgerVerificationMethodRelationMap[relation], normalizedMethodId, DIDContract.SetMutation.Remove);
+        const ledgerRelation = LedgerVerificationMethodRelationMap[relation];
+        const [signature, expectedVersion] = await createControllerAuthorization(didContract, providers, (ledgerState) => asSchnorrJubjubDigest(DIDContract.pureCircuits.setVerificationMethodRelationAuthorizationDigest(ledgerState.id, ledgerState.version, ledgerRelation, normalizedMethodId, DIDContract.SetMutation.Remove)));
+        await didContract.callTx.setVerificationMethodRelation(ledgerRelation, normalizedMethodId, DIDContract.SetMutation.Remove, signature, expectedVersion);
     }
 };
 export const purgeVerificationMethodFromAllRelations = async (didContract, providers, normalizedMethodId) => {
     const didState = await requireDeployedMidnightDIDLedgerState(providers, didContract);
     const memberships = verificationMethodRelationMemberships(didState, normalizedMethodId);
-    await removePresentVerificationMethodRelations(didContract, memberships, normalizedMethodId);
+    await removePresentVerificationMethodRelations(didContract, providers, memberships, normalizedMethodId);
 };
 //# sourceMappingURL=verification-method-relations.js.map

package/dist/verification-method-relations.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification-method-relations.js","sourceRoot":"","sources":["../src/verification-method-relations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,EACL,mCAAmC,EACnC,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qCAAqC,EAAE,MAAM,mBAAmB,CAAC;AAM1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,8BAA8B,CAAC,cAAc;IAC7C,8BAA8B,CAAC,eAAe;IAC9C,8BAA8B,CAAC,YAAY;IAC3C,8BAA8B,CAAC,oBAAoB;IACnD,8BAA8B,CAAC,oBAAoB;CACS,CAAC,CAAC;AAOhE,MAAM,CAAC,MAAM,qCAAqC,GAAG,CACnD,QAA4B,EAC5B,kBAA0B,EACuB,EAAE,CACnD,2BAA2B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7C,QAAQ;IACR,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC;CAC5E,CAAC,CAAC,CAAC;AAEN,MAAM,CAAC,MAAM,sCAAsC,GAAG,CACpD,QAA4B,EAC5B,QAAwC,EACxC,kBAA0B,EACpB,EAAE;IACR,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,YAAY,QAAQ,yCAAyC,kBAAkB,EAAE,CAClF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CACrD,QAA4B,EAC5B,QAAwC,EACxC,kBAA0B,EACpB,EAAE;IACR,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,YAAY,QAAQ,yCAAyC,kBAAkB,EAAE,CAClF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG,KAAK,EAC3D,WAAwC,EACxC,WAA4D,EAC5D,kBAA0B,EACX,EAAE;IACjB,KAAK,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,WAAW,CAAC,MAAM,CAAC,6BAA6B,CACpD,mCAAmC,CAAC,QAAQ,CAAC,EAC7C,kBAAkB,EAClB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uCAAuC,GAAG,KAAK,EAC1D,WAAwC,EACxC,SAA+B,EAC/B,kBAA0B,EACX,EAAE;IACjB,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D,SAAS,EACT,WAAW,CACZ,CAAC;IACF,MAAM,WAAW,GAAG,qCAAqC,CACvD,QAAQ,EACR,kBAAkB,CACnB,CAAC;IAEF,MAAM,wCAAwC,CAC5C,WAAW,EACX,WAAW,EACX,kBAAkB,CACnB,CAAC;AACJ,CAAC,CAAC"}
+{"version":3,"file":"verification-method-relations.js","sourceRoot":"","sources":["../src/verification-method-relations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,uCAAuC,CAAC;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,EACL,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,mCAAmC,EACnC,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qCAAqC,EAAE,MAAM,mBAAmB,CAAC;AAM1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACvD,8BAA8B,CAAC,cAAc;IAC7C,8BAA8B,CAAC,eAAe;IAC9C,8BAA8B,CAAC,YAAY;IAC3C,8BAA8B,CAAC,oBAAoB;IACnD,8BAA8B,CAAC,oBAAoB;CACS,CAAC,CAAC;AAOhE,MAAM,CAAC,MAAM,qCAAqC,GAAG,CACnD,QAA4B,EAC5B,kBAA0B,EACuB,EAAE,CACnD,2BAA2B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7C,QAAQ;IACR,MAAM,EAAE,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC;CAC5E,CAAC,CAAC,CAAC;AAEN,MAAM,CAAC,MAAM,sCAAsC,GAAG,CACpD,QAA4B,EAC5B,QAAwC,EACxC,kBAA0B,EACpB,EAAE;IACR,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,YAAY,QAAQ,yCAAyC,kBAAkB,EAAE,CAClF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CACrD,QAA4B,EAC5B,QAAwC,EACxC,kBAA0B,EACpB,EAAE;IACR,MAAM,WAAW,GAAG,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,YAAY,QAAQ,yCAAyC,kBAAkB,EAAE,CAClF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG,KAAK,EAC3D,WAAwC,EACxC,SAA+B,EAC/B,WAA4D,EAC5D,kBAA0B,EACX,EAAE;IACjB,KAAK,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,cAAc,GAAG,mCAAmC,CAAC,QAAQ,CAAC,CAAC;QACrE,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,6BAA6B,CACtE,WAAW,EACX,SAAS,EACT,CAAC,WAAW,EAAE,EAAE,CACd,qBAAqB,CACnB,WAAW,CAAC,YAAY,CAAC,gDAAgD,CACvE,WAAW,CAAC,EAAE,EACd,WAAW,CAAC,OAAO,EACnB,cAAc,EACd,kBAAkB,EAClB,WAAW,CAAC,WAAW,CAAC,MAAM,CAC/B,CACF,CACJ,CAAC;QACF,MAAM,WAAW,CAAC,MAAM,CAAC,6BAA6B,CACpD,cAAc,EACd,kBAAkB,EAClB,WAAW,CAAC,WAAW,CAAC,MAAM,EAC9B,SAAS,EACT,eAAe,CAChB,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uCAAuC,GAAG,KAAK,EAC1D,WAAwC,EACxC,SAA+B,EAC/B,kBAA0B,EACX,EAAE;IACjB,MAAM,QAAQ,GAAG,MAAM,qCAAqC,CAC1D,SAAS,EACT,WAAW,CACZ,CAAC;IACF,MAAM,WAAW,GAAG,qCAAqC,CACvD,QAAQ,EACR,kBAAkB,CACnB,CAAC;IAEF,MAAM,wCAAwC,CAC5C,WAAW,EACX,SAAS,EACT,WAAW,EACX,kBAAkB,CACnB,CAAC;AACJ,CAAC,CAAC"}

package/dist/zk-artifacts.d.ts

@@ -0,0 +1,91 @@
+import { type MidnightDidGhcrArtifactLocation, type MidnightDidGithubReleaseArtifactLocation, type MidnightDidZkArtifactProviderLayout } from "./release-artifacts.js";
+export type MidnightDidZkArtifactErrorCode = "checksum_mismatch" | "download_failed" | "ghcr_pull_failed" | "manifest_mismatch" | "missing_archive" | "missing_checksum" | "provider_path_mismatch" | "unsafe_archive";
+export declare class MidnightDidZkArtifactError extends Error {
+    readonly code: MidnightDidZkArtifactErrorCode;
+    constructor(code: MidnightDidZkArtifactErrorCode, message: string);
+}
+export interface MidnightDidZkArtifactCircuitManifest {
+    readonly id: string;
+    readonly files: {
+        readonly prover: string;
+        readonly verifier: string;
+        readonly zkir: string;
+    };
+    readonly sha256: {
+        readonly prover: string;
+        readonly verifier: string;
+        readonly zkir: string;
+    };
+    readonly bytes: {
+        readonly prover: number;
+        readonly verifier: number;
+        readonly zkir: number;
+    };
+}
+export interface MidnightDidZkArtifactManifest {
+    readonly schema: "midnight-did-zk-artifacts";
+    readonly schemaVersion: 1;
+    readonly version: string;
+    readonly packageName: string;
+    readonly providerLayout: MidnightDidZkArtifactProviderLayout;
+    readonly circuits: readonly MidnightDidZkArtifactCircuitManifest[];
+}
+export interface MidnightDidZkArtifactProviderRoots {
+    readonly zkConfigPath: string;
+    readonly fetchBaseUrl?: string;
+    readonly providerLayout: MidnightDidZkArtifactProviderLayout;
+}
+export interface MidnightDidZkArtifactBundle {
+    readonly archivePath: string;
+    readonly manifest: MidnightDidZkArtifactManifest;
+    readonly providers: MidnightDidZkArtifactProviderRoots;
+    readonly zkConfigPath: string;
+}
+export interface MidnightDidUnpackZkArtifactArchiveOptions {
+    readonly archivePath: string;
+    readonly expectedManifest?: MidnightDidZkArtifactManifest;
+    readonly expectedManifestJson?: unknown;
+    readonly outputDir?: string;
+    readonly version?: string;
+    readonly fetchBaseUrl?: string;
+}
+export interface MidnightDidDownloadGithubReleaseZkArtifactsOptions {
+    readonly fetch?: MidnightDidArtifactFetch;
+    readonly location?: MidnightDidGithubReleaseArtifactLocation;
+    readonly outputDir?: string;
+    readonly tempDir?: string;
+    readonly version?: string;
+    readonly fetchBaseUrl?: string;
+}
+export interface MidnightDidPullGhcrZkArtifactsOptions {
+    readonly location?: MidnightDidGhcrArtifactLocation;
+    readonly orasCommand?: string;
+    readonly outputDir?: string;
+    readonly pullDir?: string;
+    readonly version?: string;
+    readonly fetchBaseUrl?: string;
+}
+export interface MidnightDidArtifactFetchResponse {
+    readonly ok: boolean;
+    readonly status: number;
+    readonly statusText: string;
+    readonly arrayBuffer: () => Promise<ArrayBuffer>;
+    readonly text: () => Promise<string>;
+}
+export type MidnightDidArtifactFetch = (input: string) => Promise<MidnightDidArtifactFetchResponse>;
+export declare const createMidnightDidZkArtifactFetchBaseUrl: (baseUrl: string) => string;
+export declare const createMidnightDidZkArtifactFetchUrls: (baseUrl: string, circuitId: string) => {
+    readonly proverKey: string;
+    readonly verifierKey: string;
+    readonly zkir: string;
+};
+export declare const verifyMidnightDidZkArtifactManifest: ({ expectedManifest, expectedManifestJson, manifestPath, version, zkConfigPath, }: {
+    readonly expectedManifest?: MidnightDidZkArtifactManifest;
+    readonly expectedManifestJson?: unknown;
+    readonly manifestPath: string;
+    readonly version?: string;
+    readonly zkConfigPath: string;
+}) => MidnightDidZkArtifactManifest;
+export declare const unpackMidnightDidZkArtifactArchive: (options: MidnightDidUnpackZkArtifactArchiveOptions) => MidnightDidZkArtifactBundle;
+export declare const downloadMidnightDidGithubReleaseZkArtifacts: (options?: MidnightDidDownloadGithubReleaseZkArtifactsOptions) => Promise<MidnightDidZkArtifactBundle>;
+export declare const pullMidnightDidGhcrZkArtifacts: (options?: MidnightDidPullGhcrZkArtifactsOptions) => MidnightDidZkArtifactBundle;

package/dist/zk-artifacts.js

@@ -0,0 +1,402 @@
+import { spawnSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { createMidnightDidZkArtifactLocations, MIDNIGHT_DID_API_VERSION, } from "./release-artifacts.js";
+export class MidnightDidZkArtifactError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "MidnightDidZkArtifactError";
+    }
+}
+const expectedProviderLayout = {
+    proverKey: "keys/{circuitId}.prover",
+    verifierKey: "keys/{circuitId}.verifier",
+    zkir: "zkir/{circuitId}.bzkir",
+};
+const artifactKinds = ["prover", "verifier", "zkir"];
+const expectedPackageName = "@midnight-ntwrk/midnight-did-contract";
+const sha256File = (filePath) => createHash("sha256").update(fs.readFileSync(filePath)).digest("hex");
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const parseJsonText = (contents, label) => {
+    try {
+        return JSON.parse(contents);
+    }
+    catch (error) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", `${label} must be valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+};
+const readJsonFile = (filePath, label) => parseJsonText(fs.readFileSync(filePath, "utf8"), label);
+const normalizeSha256Digest = (value, label) => {
+    if (!/^[0-9a-f]{64}$/iu.test(value)) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", `${label} must be a SHA-256 hex digest`);
+    }
+    return value.toLowerCase();
+};
+const requireString = (value, label, code = "manifest_mismatch") => {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new MidnightDidZkArtifactError(code, `${label} must be a string`);
+    }
+    return value;
+};
+const requireNumber = (value, label) => {
+    if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", `${label} must be a non-negative integer`);
+    }
+    return value;
+};
+const readManifest = (manifestPath) => parseManifest(readJsonFile(manifestPath, "ZK artifact manifest"));
+const parseManifest = (value) => {
+    if (!isRecord(value)) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", "ZK artifact manifest must be an object");
+    }
+    if (value.schema !== "midnight-did-zk-artifacts") {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", `Unexpected ZK artifact manifest schema: ${String(value.schema)}`);
+    }
+    if (value.schemaVersion !== 1) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", `Unexpected ZK artifact manifest schemaVersion: ${String(value.schemaVersion)}`);
+    }
+    if (!isRecord(value.providerLayout)) {
+        throw new MidnightDidZkArtifactError("provider_path_mismatch", "ZK artifact manifest is missing providerLayout");
+    }
+    const providerLayout = {
+        proverKey: requireString(value.providerLayout.proverKey, "providerLayout.proverKey", "provider_path_mismatch"),
+        verifierKey: requireString(value.providerLayout.verifierKey, "providerLayout.verifierKey", "provider_path_mismatch"),
+        zkir: requireString(value.providerLayout.zkir, "providerLayout.zkir", "provider_path_mismatch"),
+    };
+    if (JSON.stringify(providerLayout) !== JSON.stringify(expectedProviderLayout)) {
+        throw new MidnightDidZkArtifactError("provider_path_mismatch", "ZK artifact providerLayout does not match Midnight JS provider roots");
+    }
+    if (!Array.isArray(value.circuits) || value.circuits.length === 0) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", "ZK artifact manifest must include at least one circuit");
+    }
+    const packageName = requireString(value.packageName, "packageName");
+    if (packageName !== expectedPackageName) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", `ZK artifact packageName ${packageName} did not match ${expectedPackageName}`);
+    }
+    return {
+        schema: "midnight-did-zk-artifacts",
+        schemaVersion: 1,
+        version: requireString(value.version, "version"),
+        packageName,
+        providerLayout: expectedProviderLayout,
+        circuits: value.circuits.map((circuit, index) => parseCircuitManifest(circuit, index)),
+    };
+};
+const parseCircuitManifest = (value, index) => {
+    if (!isRecord(value)) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", `circuits[${index}] must be an object`);
+    }
+    if (!isRecord(value.files) ||
+        !isRecord(value.sha256) ||
+        !isRecord(value.bytes)) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", `circuits[${index}] must include files, sha256, and bytes`);
+    }
+    const id = requireString(value.id, `circuits[${index}].id`);
+    const files = {
+        prover: requireString(value.files.prover, `${id}.files.prover`),
+        verifier: requireString(value.files.verifier, `${id}.files.verifier`),
+        zkir: requireString(value.files.zkir, `${id}.files.zkir`),
+    };
+    assertProviderPath(id, "prover", files.prover);
+    assertProviderPath(id, "verifier", files.verifier);
+    assertProviderPath(id, "zkir", files.zkir);
+    return {
+        id,
+        files,
+        sha256: {
+            prover: normalizeSha256Digest(requireString(value.sha256.prover, `${id}.sha256.prover`), `${id}.sha256.prover`),
+            verifier: normalizeSha256Digest(requireString(value.sha256.verifier, `${id}.sha256.verifier`), `${id}.sha256.verifier`),
+            zkir: normalizeSha256Digest(requireString(value.sha256.zkir, `${id}.sha256.zkir`), `${id}.sha256.zkir`),
+        },
+        bytes: {
+            prover: requireNumber(value.bytes.prover, `${id}.bytes.prover`),
+            verifier: requireNumber(value.bytes.verifier, `${id}.bytes.verifier`),
+            zkir: requireNumber(value.bytes.zkir, `${id}.bytes.zkir`),
+        },
+    };
+};
+const expectedProviderPath = (circuitId, kind) => {
+    switch (kind) {
+        case "prover":
+            return `keys/${circuitId}.prover`;
+        case "verifier":
+            return `keys/${circuitId}.verifier`;
+        case "zkir":
+            return `zkir/${circuitId}.bzkir`;
+    }
+};
+const assertProviderPath = (circuitId, kind, relativePath) => {
+    const expected = expectedProviderPath(circuitId, kind);
+    if (relativePath !== expected) {
+        throw new MidnightDidZkArtifactError("provider_path_mismatch", `${circuitId}: ${kind} path ${relativePath} must be ${expected}`);
+    }
+};
+const assertSafeArchiveEntry = (entry) => {
+    if (path.isAbsolute(entry) ||
+        entry.includes("\\") ||
+        entry.split("/").includes("..")) {
+        throw new MidnightDidZkArtifactError("unsafe_archive", `Unsafe ZK artifact archive entry: ${entry}`);
+    }
+};
+const assertAllowedArchiveEntry = (entry) => {
+    if (entry === "manifest.json" ||
+        /^keys\/[^/]+\.(prover|verifier)$/u.test(entry) ||
+        /^zkir\/[^/]+\.bzkir$/u.test(entry)) {
+        return;
+    }
+    throw new MidnightDidZkArtifactError("provider_path_mismatch", `Unexpected ZK artifact archive entry: ${entry}`);
+};
+const listArchiveEntries = (archivePath) => {
+    const typedResult = spawnSync("tar", ["-tvzf", archivePath], {
+        encoding: "utf8",
+    });
+    if (typedResult.status !== 0) {
+        throw new MidnightDidZkArtifactError("unsafe_archive", `Could not inspect ZK artifact archive ${archivePath}:\n${typedResult.stdout}${typedResult.stderr}`);
+    }
+    for (const line of typedResult.stdout.split(/\r?\n/u)) {
+        if (line.length === 0) {
+            continue;
+        }
+        const entryType = line[0];
+        if (entryType !== "-" && entryType !== "d") {
+            throw new MidnightDidZkArtifactError("unsafe_archive", `Unsafe ZK artifact archive entry type: ${line}`);
+        }
+    }
+    const result = spawnSync("tar", ["-tzf", archivePath], { encoding: "utf8" });
+    if (result.status !== 0) {
+        throw new MidnightDidZkArtifactError("unsafe_archive", `Could not list ZK artifact archive ${archivePath}:\n${result.stdout}${result.stderr}`);
+    }
+    const entries = result.stdout
+        .split(/\r?\n/u)
+        .map((entry) => entry.replace(/^\.\//u, ""))
+        .filter((entry) => entry.length > 0);
+    if (!entries.includes("manifest.json")) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", "ZK artifact archive is missing manifest.json");
+    }
+    for (const entry of entries) {
+        assertSafeArchiveEntry(entry);
+        if (!entry.endsWith("/")) {
+            assertAllowedArchiveEntry(entry);
+        }
+    }
+    return entries;
+};
+const extractArchive = (archivePath, outputDir) => {
+    fs.mkdirSync(outputDir, { recursive: true });
+    const result = spawnSync("tar", ["-xzf", archivePath, "-C", outputDir], {
+        encoding: "utf8",
+    });
+    if (result.status !== 0) {
+        throw new MidnightDidZkArtifactError("unsafe_archive", `Could not extract ZK artifact archive ${archivePath}:\n${result.stdout}${result.stderr}`);
+    }
+};
+const assertRegularFile = (filePath, label) => {
+    const stat = fs.lstatSync(filePath);
+    if (!stat.isFile()) {
+        throw new MidnightDidZkArtifactError("unsafe_archive", `${label} must be a regular file`);
+    }
+};
+const verifyManifestFiles = (manifest, zkConfigPath) => {
+    for (const circuit of manifest.circuits) {
+        for (const kind of artifactKinds) {
+            const relativePath = circuit.files[kind];
+            assertProviderPath(circuit.id, kind, relativePath);
+            const artifactPath = path.join(zkConfigPath, ...relativePath.split("/"));
+            if (!fs.existsSync(artifactPath)) {
+                throw new MidnightDidZkArtifactError("provider_path_mismatch", `${circuit.id}: missing ${kind} artifact at ${relativePath}`);
+            }
+            assertRegularFile(artifactPath, `${circuit.id}: ${kind} artifact`);
+            const actualHash = sha256File(artifactPath);
+            if (actualHash !== circuit.sha256[kind]) {
+                throw new MidnightDidZkArtifactError("checksum_mismatch", `${circuit.id}: ${kind} sha256 mismatch`);
+            }
+            const actualBytes = fs.statSync(artifactPath).size;
+            if (actualBytes !== circuit.bytes[kind]) {
+                throw new MidnightDidZkArtifactError("manifest_mismatch", `${circuit.id}: ${kind} byte size mismatch`);
+            }
+        }
+    }
+};
+const assertManifestMatches = (actual, expected) => {
+    if (JSON.stringify(actual) !== JSON.stringify(expected)) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", "Downloaded ZK artifact manifest does not match the archive manifest");
+    }
+};
+const assertManifestJsonMatches = (actual, expected) => {
+    assertManifestMatches(parseManifest(actual), parseManifest(expected));
+};
+const parseSha256File = (contents) => {
+    const hash = contents.trim().split(/\s+/u)[0];
+    return normalizeSha256Digest(hash, "ZK artifact sha256 file");
+};
+const verifyArchiveSha256 = (archivePath, sha256Contents) => {
+    const expected = parseSha256File(sha256Contents);
+    const actual = sha256File(archivePath);
+    if (actual !== expected) {
+        throw new MidnightDidZkArtifactError("checksum_mismatch", `ZK artifact archive sha256 mismatch for ${path.basename(archivePath)}: expected ${expected}, got ${actual}`);
+    }
+};
+const defaultFetch = async (input) => {
+    const fetchImplementation = globalThis.fetch;
+    if (typeof fetchImplementation !== "function") {
+        throw new MidnightDidZkArtifactError("download_failed", "global fetch is not available; pass a fetch implementation");
+    }
+    return fetchImplementation(input);
+};
+const fetchBinary = async (fetchImplementation, url) => {
+    const response = await fetchImplementation(url);
+    if (!response.ok) {
+        throw new MidnightDidZkArtifactError("download_failed", `Could not download ZK artifact ${url}: ${response.status} ${response.statusText}`);
+    }
+    return Buffer.from(await response.arrayBuffer());
+};
+const fetchText = async (fetchImplementation, url) => {
+    const response = await fetchImplementation(url);
+    if (!response.ok) {
+        throw new MidnightDidZkArtifactError("download_failed", `Could not download ZK artifact metadata ${url}: ${response.status} ${response.statusText}`);
+    }
+    return response.text();
+};
+const writeDownloadedFile = (directory, fileName, contents) => {
+    fs.mkdirSync(directory, { recursive: true });
+    const filePath = path.join(directory, fileName);
+    fs.writeFileSync(filePath, contents);
+    return filePath;
+};
+const selectGhcrArchive = (directory, version) => {
+    const locations = createMidnightDidZkArtifactLocations(version);
+    const expectedArchive = path.join(directory, locations.archiveName);
+    const fallbackArchive = fs
+        .readdirSync(directory)
+        .find((fileName) => /^midnight-did-zk-artifacts-.+\.tar\.gz$/u.test(fileName));
+    const archivePath = fs.existsSync(expectedArchive)
+        ? expectedArchive
+        : fallbackArchive === undefined
+            ? undefined
+            : path.join(directory, fallbackArchive);
+    if (archivePath === undefined || !fs.existsSync(archivePath)) {
+        throw new MidnightDidZkArtifactError("missing_archive", `GHCR pull did not produce ${locations.archiveName}`);
+    }
+    const manifestPath = path.join(directory, locations.manifestName);
+    const sha256Path = path.join(directory, locations.sha256Name);
+    return {
+        archivePath,
+        manifestPath: fs.existsSync(manifestPath) ? manifestPath : undefined,
+        sha256Path: fs.existsSync(sha256Path) ? sha256Path : undefined,
+    };
+};
+export const createMidnightDidZkArtifactFetchBaseUrl = (baseUrl) => baseUrl.replace(/\/+$/u, "");
+export const createMidnightDidZkArtifactFetchUrls = (baseUrl, circuitId) => {
+    const root = createMidnightDidZkArtifactFetchBaseUrl(baseUrl);
+    return {
+        proverKey: `${root}/keys/${encodeURIComponent(circuitId)}.prover`,
+        verifierKey: `${root}/keys/${encodeURIComponent(circuitId)}.verifier`,
+        zkir: `${root}/zkir/${encodeURIComponent(circuitId)}.bzkir`,
+    };
+};
+export const verifyMidnightDidZkArtifactManifest = ({ expectedManifest, expectedManifestJson, manifestPath, version, zkConfigPath, }) => {
+    assertRegularFile(manifestPath, "ZK artifact manifest");
+    const manifestJson = readJsonFile(manifestPath, "ZK artifact manifest");
+    const manifest = parseManifest(manifestJson);
+    if (version && manifest.version !== version) {
+        throw new MidnightDidZkArtifactError("manifest_mismatch", `ZK artifact manifest version ${manifest.version} did not match ${version}`);
+    }
+    if (expectedManifest) {
+        assertManifestMatches(manifest, expectedManifest);
+    }
+    if (expectedManifestJson !== undefined) {
+        assertManifestJsonMatches(manifestJson, expectedManifestJson);
+    }
+    verifyManifestFiles(manifest, zkConfigPath);
+    return manifest;
+};
+export const unpackMidnightDidZkArtifactArchive = (options) => {
+    const archivePath = path.resolve(options.archivePath);
+    if (!fs.existsSync(archivePath)) {
+        throw new MidnightDidZkArtifactError("missing_archive", `ZK artifact archive does not exist: ${archivePath}`);
+    }
+    listArchiveEntries(archivePath);
+    const outputDir = options.outputDir === undefined
+        ? fs.mkdtempSync(path.join(os.tmpdir(), "midnight-did-zk-"))
+        : path.resolve(options.outputDir);
+    extractArchive(archivePath, outputDir);
+    const manifest = verifyMidnightDidZkArtifactManifest({
+        expectedManifest: options.expectedManifest,
+        expectedManifestJson: options.expectedManifestJson,
+        manifestPath: path.join(outputDir, "manifest.json"),
+        version: options.version,
+        zkConfigPath: outputDir,
+    });
+    return {
+        archivePath,
+        manifest,
+        providers: {
+            zkConfigPath: outputDir,
+            fetchBaseUrl: options.fetchBaseUrl === undefined
+                ? undefined
+                : createMidnightDidZkArtifactFetchBaseUrl(options.fetchBaseUrl),
+            providerLayout: manifest.providerLayout,
+        },
+        zkConfigPath: outputDir,
+    };
+};
+export const downloadMidnightDidGithubReleaseZkArtifacts = async (options = {}) => {
+    const version = options.version ?? MIDNIGHT_DID_API_VERSION;
+    const locations = createMidnightDidZkArtifactLocations(version);
+    const location = options.location ?? locations.githubRelease;
+    if (!location) {
+        throw new MidnightDidZkArtifactError("missing_archive", `GitHub Release ZK artifacts are not published for ${locations.channel} version ${version}`);
+    }
+    const fetchImplementation = options.fetch ?? defaultFetch;
+    const tempDir = options.tempDir === undefined
+        ? fs.mkdtempSync(path.join(os.tmpdir(), "midnight-did-zk-download-"))
+        : path.resolve(options.tempDir);
+    const archivePath = writeDownloadedFile(tempDir, locations.archiveName, await fetchBinary(fetchImplementation, location.archiveUrl));
+    const sha256Contents = await fetchText(fetchImplementation, location.sha256Url);
+    writeDownloadedFile(tempDir, locations.sha256Name, sha256Contents);
+    verifyArchiveSha256(archivePath, sha256Contents);
+    const expectedManifestJson = parseJsonText(await fetchText(fetchImplementation, location.manifestUrl), `ZK artifact manifest ${location.manifestUrl}`);
+    const expectedManifest = parseManifest(expectedManifestJson);
+    writeDownloadedFile(tempDir, locations.manifestName, `${JSON.stringify(expectedManifest, null, 2)}\n`);
+    return unpackMidnightDidZkArtifactArchive({
+        archivePath,
+        expectedManifest,
+        expectedManifestJson,
+        fetchBaseUrl: options.fetchBaseUrl,
+        outputDir: options.outputDir,
+        version,
+    });
+};
+export const pullMidnightDidGhcrZkArtifacts = (options = {}) => {
+    const version = options.version ?? MIDNIGHT_DID_API_VERSION;
+    const locations = createMidnightDidZkArtifactLocations(version);
+    const location = options.location ?? locations.ghcr;
+    const pullDir = options.pullDir === undefined
+        ? fs.mkdtempSync(path.join(os.tmpdir(), "midnight-did-zk-ghcr-"))
+        : path.resolve(options.pullDir);
+    fs.mkdirSync(pullDir, { recursive: true });
+    const result = spawnSync(options.orasCommand ?? "oras", ["pull", location.reference, "--output", pullDir], { encoding: "utf8" });
+    if (result.status !== 0) {
+        throw new MidnightDidZkArtifactError("ghcr_pull_failed", `Could not pull ${location.reference} with ORAS:\n${result.stdout}${result.stderr}`);
+    }
+    const { archivePath, manifestPath, sha256Path } = selectGhcrArchive(pullDir, version);
+    if (sha256Path === undefined) {
+        throw new MidnightDidZkArtifactError("missing_checksum", `GHCR pull did not produce ${locations.sha256Name}`);
+    }
+    verifyArchiveSha256(archivePath, fs.readFileSync(sha256Path, "utf8"));
+    return unpackMidnightDidZkArtifactArchive({
+        archivePath,
+        expectedManifest: manifestPath === undefined ? undefined : readManifest(manifestPath),
+        expectedManifestJson: manifestPath === undefined
+            ? undefined
+            : readJsonFile(manifestPath, "ZK artifact manifest"),
+        fetchBaseUrl: options.fetchBaseUrl,
+        outputDir: options.outputDir,
+        version,
+    });
+};
+//# sourceMappingURL=zk-artifacts.js.map