@neus/sdk 1.0.10 → 1.1.0

package/cjs/index.cjs

@@ -1081,6 +1081,11 @@ function normalizeBrowserSignerString(raw) {
   }
   return null;
 }
+function isPlaceholderNeusSignature(signature) {
+  const s = typeof signature === "string" ? signature.trim() : "";
+  if (!s) return true;
+  return /^0x0+$/i.test(s);
+}
 var FALLBACK_PUBLIC_VERIFIER_CATALOG, EVM_ADDRESS_RE, WALLET_LINK_RELATIONSHIP_TYPES, validateVerifierData, NeusClient;
 var init_client = __esm({
   "client.js"() {
@@ -1278,6 +1283,17 @@ var init_client = __esm({
           if (data.agentType && !["ai", "bot", "service", "automation", "agent"].includes(data.agentType)) {
             return { valid: false, error: "agentType must be one of: ai, bot, service, automation, agent" };
           }
+          if (data.defaultRuntime && typeof data.defaultRuntime === "object") {
+            if (data.defaultRuntime.provider && typeof data.defaultRuntime.provider === "string" && data.defaultRuntime.provider.length > 64) {
+              return { valid: false, error: "defaultRuntime.provider must be 64 chars or less" };
+            }
+            if (data.defaultRuntime.model && typeof data.defaultRuntime.model === "string" && data.defaultRuntime.model.length > 128) {
+              return { valid: false, error: "defaultRuntime.model must be 128 chars or less" };
+            }
+            if (data.defaultRuntime.mode && typeof data.defaultRuntime.mode === "string" && data.defaultRuntime.mode.length > 64) {
+              return { valid: false, error: "defaultRuntime.mode must be 64 chars or less" };
+            }
+          }
           break;
         case "agent-delegation":
           if (!data.controllerWallet || !validateWalletAddress(data.controllerWallet)) {
@@ -1292,6 +1308,18 @@ var init_client = __esm({
           if (data.expiresAt && (typeof data.expiresAt !== "number" || data.expiresAt < Date.now())) {
             return { valid: false, error: "expiresAt must be a future timestamp" };
           }
+          if (data.model && typeof data.model === "string" && data.model.length > 128) {
+            return { valid: false, error: "model must be 128 chars or less" };
+          }
+          if (data.provider && typeof data.provider === "string" && data.provider.length > 64) {
+            return { valid: false, error: "provider must be 64 chars or less" };
+          }
+          if (data.allowedActions && Array.isArray(data.allowedActions) && data.allowedActions.length > 32) {
+            return { valid: false, error: "allowedActions must have 32 items or less" };
+          }
+          if (data.deniedActions && Array.isArray(data.deniedActions) && data.deniedActions.length > 32) {
+            return { valid: false, error: "deniedActions must have 32 items or less" };
+          }
           break;
         case "ai-content-moderation":
           if (!data.content || typeof data.content !== "string") {
@@ -1481,7 +1509,7 @@ var init_client = __esm({
       }
       _getDefaultBrowserWallet() {
         if (typeof window === "undefined") return null;
-        return window.ethereum || window.solana || window.phantom && window.phantom.solana || null;
+        return window.ethereum || null;
       }
       async _buildPrivateGateAuth({ address, wallet, chain, signatureMethod } = {}) {
         const providerWallet = wallet || this._getDefaultBrowserWallet();
@@ -1606,8 +1634,57 @@ var init_client = __esm({
           ...label ? { label } : {}
         };
       }
+      async verifyFromApp(params) {
+        if (!params || typeof params !== "object") {
+          throw new ValidationError("verifyFromApp requires a params object");
+        }
+        const {
+          user,
+          verifier = "ownership-basic",
+          content,
+          data: explicitData = null,
+          options = {}
+        } = params;
+        if (!user || typeof user !== "object") {
+          throw new ValidationError("verifyFromApp requires user object");
+        }
+        const walletAddress = user.walletAddress || user.address || user.identity;
+        if (!walletAddress || typeof walletAddress !== "string") {
+          throw new ValidationError("verifyFromApp requires user.walletAddress");
+        }
+        const delegationQHash = this.config.appLinkQHash || typeof process !== "undefined" && process.env && process.env.NEUS_APP_LINK_QHASH || null;
+        let data;
+        if (explicitData && typeof explicitData === "object") {
+          data = { owner: walletAddress, ...explicitData };
+        } else if (content && typeof content === "object") {
+          data = {
+            owner: walletAddress,
+            content: JSON.stringify(content),
+            contentType: typeof content.contentType === "string" ? content.contentType : "application/json",
+            reference: content.reference || { type: "other" }
+          };
+        } else if (typeof content === "string") {
+          data = {
+            owner: walletAddress,
+            content,
+            reference: { type: "other" }
+          };
+        } else {
+          data = { owner: walletAddress, reference: { type: "other" } };
+        }
+        const signedTimestamp = Date.now();
+        const verifierIds = [verifier];
+        return this.verify({
+          verifierIds,
+          data,
+          walletAddress,
+          signedTimestamp,
+          ...delegationQHash ? { delegationQHash } : {},
+          options
+        });
+      }
       async verify(params) {
-        if ((!params?.signature || !params?.walletAddress) && (params?.verifier || params?.content || params?.data)) {
+        if ((isPlaceholderNeusSignature(params?.signature) || !params?.signature || !params?.walletAddress) && (params?.verifier || params?.content || params?.data)) {
           const { content, verifier = "ownership-basic", data: data2 = null, wallet = null, options: options2 = {} } = params;
           if (verifier === "ownership-basic" && !data2 && (!content || typeof content !== "string")) {
             throw new ValidationError("content is required and must be a string (or use data param with owner + reference)");
@@ -1660,7 +1737,7 @@ var init_client = __esm({
             }
           } else {
             if (typeof window === "undefined" || !window.ethereum) {
-              throw new ConfigurationError("No Web3 wallet detected. Please install MetaMask or provide wallet parameter.");
+              throw new ConfigurationError("No EVM browser wallet detected. Provide wallet explicitly for non-EVM flows and include chain as a CAIP-2 value.");
             }
             await window.ethereum.request({ method: "eth_requestAccounts" });
             provider = window.ethereum;
@@ -1776,9 +1853,13 @@ var init_client = __esm({
             verificationData = {
               agentId: data2.agentId,
               agentWallet: data2?.agentWallet || walletAddress2,
+              ...data2?.agentChainRef && { agentChainRef: data2.agentChainRef },
+              ...data2?.agentAccountId && { agentAccountId: data2.agentAccountId },
               ...data2?.agentLabel && { agentLabel: data2.agentLabel },
               ...data2?.agentType && { agentType: data2.agentType },
+              ...data2?.avatar && { avatar: data2.avatar },
               ...data2?.description && { description: data2.description },
+              ...data2?.defaultRuntime && { defaultRuntime: data2.defaultRuntime },
               ...data2?.capabilities && { capabilities: data2.capabilities },
               ...data2?.instructions && { instructions: data2.instructions },
               ...data2?.skills && { skills: data2.skills },
@@ -1790,7 +1871,11 @@ var init_client = __esm({
             }
             verificationData = {
               controllerWallet: data2?.controllerWallet || walletAddress2,
+              ...data2?.controllerChainRef && { controllerChainRef: data2.controllerChainRef },
               agentWallet: data2.agentWallet,
+              ...data2?.agentChainRef && { agentChainRef: data2.agentChainRef },
+              ...data2?.controllerAccountId && { controllerAccountId: data2.controllerAccountId },
+              ...data2?.agentAccountId && { agentAccountId: data2.agentAccountId },
               ...data2?.agentId && { agentId: data2.agentId },
               ...data2?.scope && { scope: data2.scope },
               ...data2?.permissions && { permissions: data2.permissions },
@@ -1799,7 +1884,13 @@ var init_client = __esm({
               ...data2?.receiptDisclosure && { receiptDisclosure: data2.receiptDisclosure },
               ...data2?.expiresAt && { expiresAt: data2.expiresAt },
               ...data2?.instructions && { instructions: data2.instructions },
-              ...data2?.skills && { skills: data2.skills }
+              ...data2?.skills && { skills: data2.skills },
+              ...data2?.model && { model: data2.model },
+              ...data2?.provider && { provider: data2.provider },
+              ...data2?.runtimePolicy && { runtimePolicy: data2.runtimePolicy },
+              ...data2?.allowedActions && { allowedActions: data2.allowedActions },
+              ...data2?.deniedActions && { deniedActions: data2.deniedActions },
+              ...data2?.approvalPolicy && { approvalPolicy: data2.approvalPolicy }
             };
           } else if (verifier === "ai-content-moderation") {
             if (!data2?.content) {
@@ -1948,13 +2039,15 @@ ${bytes.length}`;
           verifierIds,
           data,
           walletAddress,
-          signature,
+          signature: rawSignature,
           signedTimestamp,
           chainId,
           chain,
           signatureMethod,
+          delegationQHash,
           options = {}
         } = params;
+        const signature = isPlaceholderNeusSignature(rawSignature) ? void 0 : rawSignature;
         const resolvedChainId = chainId || (chain ? null : NEUS_CONSTANTS.HUB_CHAIN_ID);
         const normalizeVerifierId = (id) => {
           if (typeof id !== "string") return id;
@@ -1971,8 +2064,11 @@ ${bytes.length}`;
         if (!walletAddress || typeof walletAddress !== "string") {
           throw new ValidationError("walletAddress is required");
         }
-        if (!signature) {
-          throw new ValidationError("signature is required");
+        const hasAppAttribution = typeof this.config.appId === "string" && this.config.appId.trim().length > 0;
+        if (!signature && !delegationQHash && !hasAppAttribution) {
+          throw new ValidationError(
+            "signature, delegationQHash, or NeusClient config appId (sent as X-Neus-App) is required"
+          );
         }
         if (!signedTimestamp || typeof signedTimestamp !== "number") {
           throw new ValidationError("signedTimestamp is required");
@@ -1998,11 +2094,12 @@ ${bytes.length}`;
           verifierIds: normalizedVerifierIds,
           data,
           walletAddress,
-          signature,
+          ...signature ? { signature } : {},
           signedTimestamp,
           ...resolvedChainId !== null && { chainId: resolvedChainId },
           ...chain && { chain },
           ...signatureMethod && { signatureMethod },
+          ...delegationQHash && { delegationQHash },
           options: optionsPayload
         };
         const response = await this._makeRequest("POST", "/api/v1/verification", requestData);
@@ -2012,19 +2109,17 @@ ${bytes.length}`;
         return this._formatResponse(response);
       }
       async getProof(qHash) {
-        const resolvedQHash = qHash;
-        if (!resolvedQHash || typeof resolvedQHash !== "string") {
+        if (!qHash || typeof qHash !== "string") {
           throw new ValidationError("qHash is required");
         }
-        const response = await this._makeRequest("GET", `/api/v1/proofs/${resolvedQHash}`);
+        const response = await this._makeRequest("GET", `/api/v1/proofs/${qHash}`);
         if (!response.success) {
           throw new ApiError(`Failed to get proof: ${response.error?.message || "Unknown error"}`, response.error);
         }
         return this._formatResponse(response);
       }
       async getPrivateProof(qHash, wallet = null) {
-        const resolvedQHash = qHash;
-        if (!resolvedQHash || typeof resolvedQHash !== "string") {
+        if (!qHash || typeof qHash !== "string") {
           throw new ValidationError("qHash is required");
         }
         const isPreSignedAuth = wallet && typeof wallet === "object" && typeof wallet.walletAddress === "string" && typeof wallet.signature === "string" && typeof wallet.signedTimestamp === "number";
@@ -2037,7 +2132,7 @@ ${bytes.length}`;
             ...typeof auth.chain === "string" && auth.chain.trim() ? { "x-chain": auth.chain.trim() } : {},
             ...typeof auth.signatureMethod === "string" && auth.signatureMethod.trim() ? { "x-signature-method": auth.signatureMethod.trim() } : {}
           };
-          const response2 = await this._makeRequest("GET", `/api/v1/proofs/${resolvedQHash}`, null, headers);
+          const response2 = await this._makeRequest("GET", `/api/v1/proofs/${qHash}`, null, headers);
           if (!response2.success) {
             throw new ApiError(
               `Failed to access private proof: ${response2.error?.message || "Unauthorized"}`,
@@ -2058,7 +2153,7 @@ ${bytes.length}`;
         const message = constructVerificationMessage({
           walletAddress,
           signedTimestamp,
-          data: { action: "access_private_proof", qHash: resolvedQHash },
+          data: { action: "access_private_proof", qHash },
           verifierIds: ["ownership-basic"],
           ...signerIsEvm ? { chainId: this._getHubChainId() } : { chain }
         });
@@ -2076,7 +2171,7 @@ ${bytes.length}`;
           }
           throw new ValidationError(`Failed to sign message: ${error.message}`);
         }
-        const response = await this._makeRequest("GET", `/api/v1/proofs/${resolvedQHash}`, null, {
+        const response = await this._makeRequest("GET", `/api/v1/proofs/${qHash}`, null, {
           "x-wallet-address": walletAddress,
           "x-signature": signature,
           "x-signed-timestamp": signedTimestamp.toString(),
@@ -2114,20 +2209,19 @@ ${bytes.length}`;
         };
       }
       async pollProofStatus(qHash, options = {}) {
-        const resolvedQHash = qHash;
         const {
           interval = 5e3,
           timeout = 12e4,
           onProgress
         } = options;
-        if (!resolvedQHash || typeof resolvedQHash !== "string") {
+        if (!qHash || typeof qHash !== "string") {
           throw new ValidationError("qHash is required");
         }
         const startTime = Date.now();
         let consecutiveRateLimits = 0;
         while (Date.now() - startTime < timeout) {
           try {
-            const status = await this.getProof(resolvedQHash);
+            const status = await this.getProof(qHash);
             consecutiveRateLimits = 0;
             if (onProgress && typeof onProgress === "function") {
               onProgress(status.data || status);
@@ -2170,8 +2264,7 @@ ${bytes.length}`;
         }
       }
       async revokeOwnProof(qHash, wallet) {
-        const resolvedQHash = qHash;
-        if (!resolvedQHash || typeof resolvedQHash !== "string") {
+        if (!qHash || typeof qHash !== "string") {
           throw new ValidationError("qHash is required");
         }
         const providerWallet = wallet || this._getDefaultBrowserWallet();
@@ -2186,7 +2279,7 @@ ${bytes.length}`;
         const message = constructVerificationMessage({
           walletAddress: address,
           signedTimestamp,
-          data: { action: "revoke_proof", qHash: resolvedQHash },
+          data: { action: "revoke_proof", qHash },
           verifierIds: ["ownership-basic"],
           ...signerIsEvm ? { chainId: this._getHubChainId() } : { chain }
         });
@@ -2204,7 +2297,7 @@ ${bytes.length}`;
           }
           throw new ValidationError(`Failed to sign revocation: ${error.message}`);
         }
-        const res = await this._makeRequest("POST", `/api/v1/proofs/revoke-self/${resolvedQHash}`, {
+        const res = await this._makeRequest("POST", `/api/v1/proofs/revoke-self/${qHash}`, {
           walletAddress: address,
           signature,
           signedTimestamp,
@@ -2611,10 +2704,7 @@ ${bytes.length}`;
         }
       }
       _formatResponse(response) {
-        const qHash = response?.data?.qHash || response?.qHash || response?.data?.resource?.qHash || response?.data?.proofId || // Legacy input compatibility only. Do not expose or store proofId.
-        response?.proofId || // Legacy input compatibility only. Do not expose or store proofId.
-        response?.data?.resource?.proofId || // Legacy input compatibility only. Do not expose or store proofId.
-        response?.data?.id;
+        const qHash = response?.data?.qHash || response?.qHash || response?.data?.resource?.qHash || response?.data?.id;
         const status = response?.data?.status || response?.status || response?.data?.resource?.status || (response?.success ? "completed" : "unknown");
         return {
           success: response.success,