@oleary-labs/signet-sdk 0.1.0 → 0.2.0

package/dist/generate-inputs.d.ts

@@ -0,0 +1,26 @@
+type GenerateInputsParams = {
+    jwt: string;
+    pubkey: JsonWebKey;
+    shaPrecomputeTillKeys?: string[];
+    maxSignedDataLength: number;
+};
+type JWTCircuitInputs = {
+    data?: {
+        storage: number[];
+        len: number;
+    };
+    base64_decode_offset: number;
+    pubkey_modulus_limbs: string[];
+    redc_params_limbs: string[];
+    signature_limbs: string[];
+    partial_data?: {
+        storage: number[];
+        len: number;
+    };
+    partial_hash?: number[];
+    full_data_length?: number;
+};
+export declare function generateInputs({ jwt, pubkey, shaPrecomputeTillKeys, maxSignedDataLength, }: GenerateInputsParams): Promise<JWTCircuitInputs>;
+export declare function splitBigIntToChunks(bigInt: bigint, chunkSize: number, numChunks: number): bigint[];
+export {};
+//# sourceMappingURL=generate-inputs.d.ts.map

package/dist/generate-inputs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-inputs.d.ts","sourceRoot":"","sources":["../src/generate-inputs.ts"],"names":[],"mappings":"AAEA,KAAK,oBAAoB,GAAG;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,UAAU,CAAC;IACnB,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAA;AAED,KAAK,gBAAgB,GAAG;IACtB,IAAI,CAAC,EAAE;QACL,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE;QACb,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;KACb,CAAC;IACF,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAA;AAUD,wBAAsB,cAAc,CAAC,EACnC,GAAG,EACH,MAAM,EACN,qBAAqB,EACrB,mBAAmB,GACpB,EAAE,oBAAoB,6BAgGtB;AAUD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,YASlB"}

package/dist/generate-inputs.js

@@ -0,0 +1,106 @@
+import { generatePartialSHA256 } from './partial-sha';
+/*
+* Generates circuit inputs required for the jwt lib
+* @param {Object} params - The input parameters
+* @param {string} params.jwt - The JWT token to process (string)
+* @param {JsonWebKey} params.pubkey - The public key to verify the signature (JsonWebKey)
+* @param {string[]} params.shaPrecomputeTillKeys - (optional) Key(s) in the payload until which SHA should be precomputed
+* @param {number} params.maxSignedDataLength - Maximum length of signed data (with or without partial hash) allowed by the circuit
+*/
+export async function generateInputs({ jwt, pubkey, shaPrecomputeTillKeys, maxSignedDataLength, // when using partial hash, this will be the length of data after partial hash
+ }) {
+    // Parse token
+    const [headerB64, payloadB64] = jwt.split(".");
+    // Extract signed data as byte array
+    const signedDataString = jwt.split(".").slice(0, 2).join("."); // $header.$payload
+    const signedData = new TextEncoder().encode(signedDataString);
+    // Extract signature as bigint
+    const signatureBase64Url = jwt.split(".")[2];
+    const signatureBase64 = signatureBase64Url
+        .replace(/-/g, "+")
+        .replace(/_/g, "/");
+    const signature = new Uint8Array(atob(signatureBase64)
+        .split("")
+        .map((c) => c.charCodeAt(0)));
+    const signatureBigInt = BigInt("0x" + Array.from(signature).map(b => b.toString(16).padStart(2, '0')).join(''));
+    // Extract pubkey modulus as bigint
+    const pubkeyBigInt = BigInt("0x" + atob(pubkey.n.replace(/-/g, "+").replace(/_/g, "/"))
+        .split("")
+        .map(c => c.charCodeAt(0).toString(16).padStart(2, "0"))
+        .join(""));
+    const redcParam = (1n << (2n * 2048n + 4n)) / pubkeyBigInt; // something needed by the noir big-num lib 
+    const inputs = {
+        pubkey_modulus_limbs: splitBigIntToChunks(pubkeyBigInt, 120, 18).map(s => s.toString()),
+        redc_params_limbs: splitBigIntToChunks(redcParam, 120, 18).map(s => s.toString()),
+        signature_limbs: splitBigIntToChunks(signatureBigInt, 120, 18).map(s => s.toString()),
+    };
+    if (!shaPrecomputeTillKeys || shaPrecomputeTillKeys.length === 0) {
+        // No precompute selector - no need to precompute SHA256
+        if (signedData.length > maxSignedDataLength) {
+            throw new Error("Signed data length exceeds maxSignedDataLength");
+        }
+        const signedDataPadded = new Uint8Array(maxSignedDataLength);
+        signedDataPadded.set(signedData);
+        inputs.data = {
+            storage: Array.from(signedDataPadded),
+            len: signedData.length,
+        };
+        // entire payload is base64 decode-able when not using partial hash
+        // offset in signed data is the index of payload start
+        // this can be any multiple of 4 from payload start, if you want to skip some bytes from start
+        inputs.base64_decode_offset = headerB64.length + 1;
+    }
+    else {
+        // Precompute SHA256 of the signed data
+        // SHA256 is done in 64 byte chunks, so we can hash upto certain portion outside of circuit to save constraints
+        // Signed data is $headerB64.$payloadB64
+        // We need to find the index in B64 payload corresponding to min(hdIndex, nonceIndex) when decoded
+        // Then we find the 64 byte boundary before this index and precompute the SHA256 upto that
+        const payloadString = atob(payloadB64);
+        const indicesOfPrecomputeKeys = shaPrecomputeTillKeys.map((key) => payloadString.indexOf(`"${key}":`));
+        const smallerIndex = Math.min(...indicesOfPrecomputeKeys);
+        const smallerIndexInB64 = Math.floor((smallerIndex * 4) / 3); // 4 B64 chars = 3 bytes
+        const sliceStart = headerB64.length + smallerIndexInB64 + 1; // +1 for the '.'
+        // Precompute the SHA256 hash
+        const { partialHash, remainingData } = await generatePartialSHA256(signedData, sliceStart);
+        // Pad to the max length configured in the circuit
+        if (remainingData.length > maxSignedDataLength) {
+            throw new Error("remainingData after partial hash exceeds maxSignedDataLength");
+        }
+        const remainingDataPadded = new Uint8Array(maxSignedDataLength);
+        remainingDataPadded.set(remainingData);
+        inputs.partial_data = {
+            storage: Array.from(remainingDataPadded),
+            len: remainingData.length,
+        };
+        inputs.partial_hash = Array.from(partialHash);
+        inputs.full_data_length = signedData.length;
+        // when using partial hash, the data after the partial hash might not be a valid base64
+        // we need to find an offset (1, 2, or 3) such that the remaining payload is base64 decode-able
+        // this is the number that should be added to the "payload chunk that was included in SHA precompute"
+        // to make it a multiple of 4
+        // in other words, if you trim offset number of bytes from the remaining payload, it will be base64 decode-able
+        const shaCutoffIndex = signedData.length - remainingData.length;
+        const payloadBytesInShaPrecompute = shaCutoffIndex - (headerB64.length + 1);
+        const offsetToMakeIt4x = 4 - (payloadBytesInShaPrecompute % 4);
+        inputs.base64_decode_offset = offsetToMakeIt4x;
+    }
+    return inputs;
+}
+/*
+* Splits a BigInt into fixed-size chunks
+* @param {bigint} bigInt - The BigInt to split
+* @param {number} chunkSize - Size of each chunk in bits
+* @param {number} numChunks - Number of chunks to split into
+* @returns {bigint[]} Array of BigInt chunks
+*/
+export function splitBigIntToChunks(bigInt, chunkSize, numChunks) {
+    const chunks = [];
+    const mask = (1n << BigInt(chunkSize)) - 1n;
+    for (let i = 0; i < numChunks; i++) {
+        const chunk = (bigInt / (1n << (BigInt(i) * BigInt(chunkSize)))) & mask;
+        chunks.push(chunk);
+    }
+    return chunks;
+}
+//# sourceMappingURL=generate-inputs.js.map

package/dist/generate-inputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-inputs.js","sourceRoot":"","sources":["../src/generate-inputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AA0BtD;;;;;;;EAOE;AACF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,GAAG,EACH,MAAM,EACN,qBAAqB,EACrB,mBAAmB,EAAE,8EAA8E;EAC9E;IACrB,cAAc;IACd,MAAM,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE/C,oCAAoC;IACpC,MAAM,gBAAgB,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB;IAClF,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAe,CAAC;IAE5E,8BAA8B;IAC9B,MAAM,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,eAAe,GAAG,kBAAkB;SACvC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEtB,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,IAAI,CAAC,eAAe,CAAC;SAClB,KAAK,CAAC,EAAE,CAAC;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAC/B,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAEhH,mCAAmC;IACnC,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;SACrF,KAAK,CAAC,EAAE,CAAC;SACT,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACvD,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACb,MAAM,SAAS,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,GAAG,EAAE,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,4CAA4C;IAExG,MAAM,MAAM,GAA8B;QACxC,oBAAoB,EAAE,mBAAmB,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACvF,iBAAiB,EAAE,mBAAmB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjF,eAAe,EAAE,mBAAmB,CAAC,eAAe,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;KACtF,CAAC;IAEF,IAAI,CAAC,qBAAqB,IAAI,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,wDAAwD;QACxD,IAAI,UAAU,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,gBAAgB,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAC7D,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,GAAG;YACZ,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACrC,GAAG,EAAE,UAAU,CAAC,MAAM;SACvB,CAAA;QACD,mEAAmE;QACnE,sDAAsD;QACtD,8FAA8F;QAC9F,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,CAAC;SAAM,CAAC;QACN,uCAAuC;QACvC,+GAA+G;QAC/G,wCAAwC;QACxC,kGAAkG;QAClG,0FAA0F;QAC1F,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChE,aAAa,CAAC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CACnC,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,uBAAuB,CAAC,CAAC;QAC1D,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,wBAAwB;QAEtF,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,GAAG,iBAAiB,GAAG,CAAC,CAAC,CAAC,iBAAiB;QAE9E,6BAA6B;QAC7B,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAClC,MAAM,qBAAqB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAEtD,kDAAkD;QAClD,IAAI,aAAa,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAChE,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAEvC,MAAM,CAAC,YAAY,GAAG;YACpB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC;YACxC,GAAG,EAAE,aAAa,CAAC,MAAM;SAC1B,CAAC;QACF,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,CAAC,gBAAgB,GAAG,UAAU,CAAC,MAAM,CAAC;QAE5C,uFAAuF;QACvF,+FAA+F;QAC/F,qGAAqG;QACrG,6BAA6B;QAC7B,+GAA+G;QAC/G,MAAM,cAAc,GAAG,UAAU,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;QAChE,MAAM,2BAA2B,GAAG,cAAc,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5E,MAAM,gBAAgB,GAAG,CAAC,GAAG,CAAC,2BAA2B,GAAG,CAAC,CAAC,CAAC;QAC/D,MAAM,CAAC,oBAAoB,GAAG,gBAAgB,CAAC;IACjD,CAAC;IAED,OAAO,MAA0B,CAAC;AACpC,CAAC;AAGD;;;;;;EAME;AACF,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,SAAiB,EACjB,SAAiB;IAEjB,MAAM,MAAM,GAAG,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/partial-sha.d.ts

@@ -0,0 +1,5 @@
+export declare function generatePartialSHA256(data: Uint8Array, hashUntilIndex: number): Promise<{
+    partialHash: Uint32Array<ArrayBuffer>;
+    remainingData: Uint8Array<ArrayBuffer>;
+}>;
+//# sourceMappingURL=partial-sha.d.ts.map

package/dist/partial-sha.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"partial-sha.d.ts","sourceRoot":"","sources":["../src/partial-sha.ts"],"names":[],"mappings":"AACA,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM;;;GA4BnF"}

package/dist/partial-sha.js

@@ -0,0 +1,89 @@
+// Returns the intermediate SHA256 hash of the data
+export async function generatePartialSHA256(data, hashUntilIndex) {
+    if (typeof data === 'string') {
+        const encoder = new TextEncoder();
+        data = encoder.encode(data); // Convert string to Uint8Array
+    }
+    const blockSize = 64; // 512 bits
+    const blockIndex = Math.floor(hashUntilIndex / blockSize);
+    const H = new Uint32Array([
+        0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a,
+        0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19
+    ]);
+    for (let i = 0; i < blockIndex; i++) {
+        if (i * blockSize >= data.length) {
+            throw new Error('Block index out of range.');
+        }
+        const block = new Uint8Array(blockSize);
+        block.set(data.slice(i * blockSize, (i + 1) * blockSize));
+        sha256Block(H, block);
+    }
+    // Get the intermediate digest (this is **not** the final hash)
+    return {
+        partialHash: H,
+        remainingData: data.slice(blockIndex * blockSize)
+    };
+}
+/**
+ * SHA-256 constants (first 32 bits of fractional parts of cube roots of primes)
+ */
+const K = [
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2
+];
+/**
+* Rotate right function (SHA-256 bitwise operations)
+*/
+function rotr(n, x) {
+    return (x >>> n) | (x << (32 - n));
+}
+/**
+* SHA-256 Compression Function (Processes 64-byte blocks)
+*/
+function sha256Block(H, block) {
+    let w = new Uint32Array(64);
+    let a = H[0], b = H[1], c = H[2], d = H[3];
+    let e = H[4], f = H[5], g = H[6], h = H[7];
+    // Convert block into 32-bit words
+    for (let i = 0; i < 16; i++) {
+        w[i] = (block[i * 4] << 24) | (block[i * 4 + 1] << 16) | (block[i * 4 + 2] << 8) | block[i * 4 + 3];
+    }
+    for (let i = 16; i < 64; i++) {
+        const s0 = rotr(7, w[i - 15]) ^ rotr(18, w[i - 15]) ^ (w[i - 15] >>> 3);
+        const s1 = rotr(17, w[i - 2]) ^ rotr(19, w[i - 2]) ^ (w[i - 2] >>> 10);
+        w[i] = (w[i - 16] + s0 + w[i - 7] + s1) >>> 0;
+    }
+    // Main compression loop
+    for (let i = 0; i < 64; i++) {
+        const S1 = rotr(6, e) ^ rotr(11, e) ^ rotr(25, e);
+        const ch = (e & f) ^ (~e & g);
+        const temp1 = (h + S1 + ch + K[i] + w[i]) >>> 0;
+        const S0 = rotr(2, a) ^ rotr(13, a) ^ rotr(22, a);
+        const maj = (a & b) ^ (a & c) ^ (b & c);
+        const temp2 = (S0 + maj) >>> 0;
+        h = g;
+        g = f;
+        f = e;
+        e = (d + temp1) >>> 0;
+        d = c;
+        c = b;
+        b = a;
+        a = (temp1 + temp2) >>> 0;
+    }
+    // Update intermediate hash values
+    H[0] = (H[0] + a) >>> 0;
+    H[1] = (H[1] + b) >>> 0;
+    H[2] = (H[2] + c) >>> 0;
+    H[3] = (H[3] + d) >>> 0;
+    H[4] = (H[4] + e) >>> 0;
+    H[5] = (H[5] + f) >>> 0;
+    H[6] = (H[6] + g) >>> 0;
+    H[7] = (H[7] + h) >>> 0;
+}
+//# sourceMappingURL=partial-sha.js.map

package/dist/partial-sha.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"partial-sha.js","sourceRoot":"","sources":["../src/partial-sha.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAgB,EAAE,cAAsB;IAClF,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,+BAA+B;IAC9D,CAAC;IAED,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,WAAW;IACjC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC1D,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;QACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;QAC9C,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;KAC/C,CAAC,CAAC;IAEH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,GAAG,SAAS,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACxC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;QAC1D,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,+DAA+D;IAC/D,OAAO;QACL,WAAW,EAAE,CAAC;QACd,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC;KAClD,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,GAAG;IACR,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/F,CAAC;AAEF;;EAEE;AACF,SAAS,IAAI,CAAC,CAAS,EAAE,CAAS;IAChC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;EAEE;AACF,SAAS,WAAW,CAAC,CAAc,EAAE,KAAiB;IACpD,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3C,kCAAkC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtG,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACxE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,wBAAwB;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAE/B,CAAC,GAAG,CAAC,CAAC;QACN,CAAC,GAAG,CAAC,CAAC;QACN,CAAC,GAAG,CAAC,CAAC;QACN,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,GAAG,CAAC,CAAC;QACN,CAAC,GAAG,CAAC,CAAC;QACN,CAAC,GAAG,CAAC,CAAC;QACN,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,kCAAkC;IAClC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC"}

package/dist/proof.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Client-side ZK proof generation for JWT authentication.
+ *
+ * Runs entirely in the browser:
+ * 1. Parse JWT + fetch JWKS → build circuit witness
+ * 2. @noir-lang/noir_js → generate ACIR witness from compiled circuit
+ * 3. @aztec/bb.js → generate UltraHonk proof via WASM
+ *
+ * Expected time: ~2-7 seconds in a modern browser.
+ */
+import type { IdTokenClaims } from "./types";
+/** Proof generation result. */
+export interface ProofResult {
+    proof: Uint8Array;
+    publicInputs: string[];
+    claims: IdTokenClaims;
+}
+/**
+ * Generate a ZK proof that a JWT is valid — entirely client-side.
+ *
+ * @param jwt — raw JWT string (header.payload.signature)
+ * @param sessionPubHex — 33-byte compressed secp256k1 session public key (hex)
+ * @returns proof bytes, public inputs, and decoded claims
+ */
+export declare function generateJWTProof(jwt: string, sessionPubHex: string): Promise<ProofResult>;
+/**
+ * Get the RSA modulus bytes for a JWT (for the node auth request).
+ */
+export declare function getJWTModulusBytes(jwt: string): Promise<Uint8Array>;
+//# sourceMappingURL=proof.d.ts.map

package/dist/proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../src/proof.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,+BAA+B;AAC/B,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,UAAU,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;CACvB;AAKD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,WAAW,CAAC,CA2CtB;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAUzE"}

package/dist/proof.js

@@ -0,0 +1,72 @@
+/**
+ * Client-side ZK proof generation for JWT authentication.
+ *
+ * Runs entirely in the browser:
+ * 1. Parse JWT + fetch JWKS → build circuit witness
+ * 2. @noir-lang/noir_js → generate ACIR witness from compiled circuit
+ * 3. @aztec/bb.js → generate UltraHonk proof via WASM
+ *
+ * Expected time: ~2-7 seconds in a modern browser.
+ */
+import { Noir } from "@noir-lang/noir_js";
+import { UltraHonkBackend } from "@aztec/bb.js";
+import { jwt as jwtArtifacts, assertBbJsVersion } from "@oleary-labs/signet-circuits";
+import { decodeIdToken } from "./oauth";
+import { getJWKSKeyForKid, decodeModulusBytes } from "./jwks";
+import { buildFullWitness } from "./witness";
+import { hexToBytes } from "./session";
+// Circuit artifact from @signet/circuits — embedded at build time.
+const circuit = jwtArtifacts.circuit;
+/**
+ * Generate a ZK proof that a JWT is valid — entirely client-side.
+ *
+ * @param jwt — raw JWT string (header.payload.signature)
+ * @param sessionPubHex — 33-byte compressed secp256k1 session public key (hex)
+ * @returns proof bytes, public inputs, and decoded claims
+ */
+export async function generateJWTProof(jwt, sessionPubHex) {
+    // 1. Parse JWT and decode claims
+    const parts = jwt.split(".");
+    const headerB64 = parts[0];
+    const header = JSON.parse(atob(headerB64.replace(/-/g, "+").replace(/_/g, "/")));
+    const claims = decodeIdToken(jwt);
+    // 2. Fetch the RSA key from the issuer's JWKS
+    const jwksKey = await getJWKSKeyForKid(header.kid, claims.iss);
+    const jsonWebKey = {
+        kty: jwksKey.kty,
+        n: jwksKey.n,
+        e: jwksKey.e,
+        alg: jwksKey.alg,
+    };
+    // 3. Build full circuit witness
+    const sessionPubBytes = Array.from(hexToBytes(sessionPubHex));
+    const witness = await buildFullWitness(jwt, jsonWebKey, claims, sessionPubBytes);
+    // 4. Version check — fail fast if bb.js doesn't match the circuit artifacts.
+    await assertBbJsVersion();
+    // 5. Generate ACIR witness from compiled circuit
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const noir = new Noir(circuit);
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const { witness: acirWitness } = await noir.execute(witness);
+    // 6. Generate UltraHonk proof via bb.js WASM
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const backend = new UltraHonkBackend(circuit.bytecode);
+    const proofData = await backend.generateProof(acirWitness);
+    await backend.destroy();
+    return {
+        proof: proofData.proof,
+        publicInputs: proofData.publicInputs,
+        claims,
+    };
+}
+/**
+ * Get the RSA modulus bytes for a JWT (for the node auth request).
+ */
+export async function getJWTModulusBytes(jwt) {
+    const parts = jwt.split(".");
+    const header = JSON.parse(atob(parts[0].replace(/-/g, "+").replace(/_/g, "/")));
+    const claims = JSON.parse(atob(parts[1].replace(/-/g, "+").replace(/_/g, "/")));
+    const jwksKey = await getJWKSKeyForKid(header.kid, claims.iss);
+    return decodeModulusBytes(jwksKey.n);
+}
+//# sourceMappingURL=proof.js.map

package/dist/proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.js","sourceRoot":"","sources":["../src/proof.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,GAAG,IAAI,YAAY,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACtF,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAUvC,mEAAmE;AACnE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,aAAqB;IAErB,iCAAiC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACtD,CAAC;IACF,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAElC,8CAA8C;IAC9C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,UAAU,GAAe;QAC7B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,CAAC,EAAE,OAAO,CAAC,CAAC;QACZ,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC;IAEF,gCAAgC;IAChC,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAEjF,6EAA6E;IAC7E,MAAM,iBAAiB,EAAE,CAAC;IAE1B,iDAAiD;IACjD,8DAA8D;IAC9D,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAc,CAAC,CAAC;IACtC,8DAA8D;IAC9D,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAc,CAAC,CAAC;IAEpE,6CAA6C;IAC7C,8DAA8D;IAC9D,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAE,OAAe,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;IAE3D,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAExB,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACrD,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CACrD,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/D,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/witness.d.ts

@@ -0,0 +1,51 @@
+/**
+ * ZK proof witness construction for the jwt_auth noir circuit.
+ *
+ * Uses generateInputs from noir-jwt for the core RSA/JWT witness,
+ * then adds the claim assertions and session_pub binding that our
+ * circuit requires.
+ */
+import type { IdTokenClaims } from "./types";
+/** Full witness for the jwt_auth circuit (Prover.toml format). */
+export interface FullCircuitWitness {
+    data: {
+        storage: number[];
+        len: number;
+    };
+    base64_decode_offset: number;
+    pubkey_modulus_limbs: string[];
+    redc_params_limbs: string[];
+    signature_limbs: string[];
+    expected_iss: {
+        storage: number[];
+        len: number;
+    };
+    expected_sub: {
+        storage: number[];
+        len: number;
+    };
+    expected_exp: number;
+    expected_aud: {
+        storage: number[];
+        len: number;
+    };
+    expected_azp: {
+        storage: number[];
+        len: number;
+    };
+    _session_pub: number[];
+}
+/**
+ * Build full circuit witness from a JWT, JWKS key, and session public key.
+ *
+ * @param jwt — raw JWT string
+ * @param jwksKey — the RSA public key from Google JWKS (as JsonWebKey)
+ * @param claims — decoded JWT claims
+ * @param sessionPubBytes — 33-byte compressed secp256k1 session public key
+ */
+export declare function buildFullWitness(jwt: string, jwksKey: JsonWebKey, claims: IdTokenClaims, sessionPubBytes: number[]): Promise<FullCircuitWitness>;
+/**
+ * Serialize a FullCircuitWitness to Prover.toml format for nargo.
+ */
+export declare function witnessToProverToml(w: FullCircuitWitness): string;
+//# sourceMappingURL=witness.d.ts.map

package/dist/witness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness.d.ts","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7C,kEAAkE;AAClE,MAAM,WAAW,kBAAkB;IAEjC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACzC,oBAAoB,EAAE,MAAM,CAAC;IAC7B,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,eAAe,EAAE,MAAM,EAAE,CAAC;IAG1B,YAAY,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,YAAY,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD,YAAY,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAGjD,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,aAAa,EACrB,eAAe,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,kBAAkB,CAAC,CA8B7B;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,kBAAkB,GAAG,MAAM,CA8BjE"}

package/dist/witness.js

@@ -0,0 +1,81 @@
+/**
+ * ZK proof witness construction for the jwt_auth noir circuit.
+ *
+ * Uses generateInputs from noir-jwt for the core RSA/JWT witness,
+ * then adds the claim assertions and session_pub binding that our
+ * circuit requires.
+ */
+import { generateInputs } from "./generate-inputs";
+/**
+ * Build full circuit witness from a JWT, JWKS key, and session public key.
+ *
+ * @param jwt — raw JWT string
+ * @param jwksKey — the RSA public key from Google JWKS (as JsonWebKey)
+ * @param claims — decoded JWT claims
+ * @param sessionPubBytes — 33-byte compressed secp256k1 session public key
+ */
+export async function buildFullWitness(jwt, jwksKey, claims, sessionPubBytes) {
+    // Generate core JWT/RSA inputs using noir-jwt library
+    const inputs = await generateInputs({
+        jwt,
+        pubkey: jwksKey,
+        maxSignedDataLength: 1024,
+    });
+    if (!inputs.data) {
+        throw new Error("Expected full data mode (no partial SHA)");
+    }
+    return {
+        // Core JWT/RSA witness
+        data: inputs.data,
+        base64_decode_offset: inputs.base64_decode_offset,
+        pubkey_modulus_limbs: inputs.pubkey_modulus_limbs,
+        redc_params_limbs: inputs.redc_params_limbs,
+        signature_limbs: inputs.signature_limbs,
+        // Claim assertions
+        expected_iss: toBoundedVec(claims.iss, 128),
+        expected_sub: toBoundedVec(claims.sub, 128),
+        expected_exp: claims.exp,
+        expected_aud: toBoundedVec(claims.aud, 128),
+        expected_azp: toBoundedVec(claims.azp, 128),
+        // Session binding
+        _session_pub: sessionPubBytes,
+    };
+}
+/**
+ * Serialize a FullCircuitWitness to Prover.toml format for nargo.
+ */
+export function witnessToProverToml(w) {
+    const lines = [];
+    // Bare keys must come before [table] sections in TOML
+    lines.push(`base64_decode_offset = ${w.base64_decode_offset}`);
+    lines.push(`expected_exp = ${w.expected_exp}`);
+    lines.push(`redc_params_limbs = [${w.redc_params_limbs.map((l) => `"${l}"`).join(", ")}]`);
+    lines.push(`signature_limbs = [${w.signature_limbs.map((l) => `"${l}"`).join(", ")}]`);
+    lines.push(`pubkey_modulus_limbs = [${w.pubkey_modulus_limbs.map((l) => `"${l}"`).join(", ")}]`);
+    lines.push(`_session_pub = [${w._session_pub.join(", ")}]`);
+    lines.push("");
+    // BoundedVec tables
+    lines.push("[data]");
+    lines.push(`storage = [${w.data.storage.join(", ")}]`);
+    lines.push(`len = ${w.data.len}`);
+    lines.push("");
+    writeBoundedVecToml(lines, "expected_iss", w.expected_iss);
+    writeBoundedVecToml(lines, "expected_sub", w.expected_sub);
+    writeBoundedVecToml(lines, "expected_aud", w.expected_aud);
+    writeBoundedVecToml(lines, "expected_azp", w.expected_azp);
+    return lines.join("\n");
+}
+function toBoundedVec(value, maxLen) {
+    const storage = new Array(maxLen).fill(0);
+    for (let i = 0; i < value.length; i++) {
+        storage[i] = value.charCodeAt(i);
+    }
+    return { storage, len: value.length };
+}
+function writeBoundedVecToml(lines, name, vec) {
+    lines.push(`[${name}]`);
+    lines.push(`storage = [${vec.storage.join(", ")}]`);
+    lines.push(`len = ${vec.len}`);
+    lines.push("");
+}
+//# sourceMappingURL=witness.js.map

package/dist/witness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness.js","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAuBnD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,OAAmB,EACnB,MAAqB,EACrB,eAAyB;IAEzB,sDAAsD;IACtD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,GAAG;QACH,MAAM,EAAE,OAAO;QACf,mBAAmB,EAAE,IAAI;KAC1B,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO;QACL,uBAAuB;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,eAAe,EAAE,MAAM,CAAC,eAAe;QAEvC,mBAAmB;QACnB,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;QAC3C,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;QAC3C,YAAY,EAAE,MAAM,CAAC,GAAG;QACxB,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;QAC3C,YAAY,EAAE,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC;QAE3C,kBAAkB;QAClB,YAAY,EAAE,eAAe;KAC9B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAqB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,sDAAsD;IACtD,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CACR,wBAAwB,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/E,CAAC;IACF,KAAK,CAAC,IAAI,CACR,sBAAsB,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3E,CAAC;IACF,KAAK,CAAC,IAAI,CACR,2BAA2B,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,oBAAoB;IACpB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3D,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3D,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAC3D,mBAAmB,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IAE3D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,YAAY,CACnB,KAAa,EACb,MAAc;IAEd,MAAM,OAAO,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,mBAAmB,CAC1B,KAAe,EACf,IAAY,EACZ,GAAuC;IAEvC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjB,CAAC"}

package/package.json

@@ -1,31 +1,91 @@
 {
   "name": "@oleary-labs/signet-sdk",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Signet DKMS SDK — threshold signing, key management, delegation, and x402 payments",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
-    ".": { "import": "./dist/index.js", "types": "./dist/index.d.ts" },
-    "./session": { "import": "./dist/session.js", "types": "./dist/session.d.ts" },
-    "./request": { "import": "./dist/request.js", "types": "./dist/request.d.ts" },
-    "./keygen": { "import": "./dist/keygen.js", "types": "./dist/keygen.d.ts" },
-    "./types": { "import": "./dist/types.js", "types": "./dist/types.d.ts" },
-    "./jwks": { "import": "./dist/jwks.js", "types": "./dist/jwks.d.ts" },
-    "./oauth": { "import": "./dist/oauth.js", "types": "./dist/oauth.d.ts" },
-    "./bootstrap": { "import": "./dist/bootstrap.js", "types": "./dist/bootstrap.d.ts" },
-    "./authkey-session": { "import": "./dist/authkey-session.js", "types": "./dist/authkey-session.d.ts" },
-    "./proof": { "import": "./dist/proof.js", "types": "./dist/proof.d.ts" },
-    "./server-prover": { "import": "./dist/server-prover.js", "types": "./dist/server-prover.d.ts" },
-    "./witness": { "import": "./dist/witness.js", "types": "./dist/witness.d.ts" },
-    "./jwt": { "import": "./dist/jwt.js", "types": "./dist/jwt.d.ts" },
-    "./admin": { "import": "./dist/admin.js", "types": "./dist/admin.d.ts" },
-    "./delegate": { "import": "./dist/delegate.js", "types": "./dist/delegate.d.ts" },
-    "./scopedSign": { "import": "./dist/scopedSign.js", "types": "./dist/scopedSign.d.ts" },
-    "./frostVerify": { "import": "./dist/frostVerify.js", "types": "./dist/frostVerify.d.ts" },
-    "./x402": { "import": "./dist/x402.js", "types": "./dist/x402.d.ts" },
-    "./userop": { "import": "./dist/userop.js", "types": "./dist/userop.d.ts" },
-    "./bundler": { "import": "./dist/bundler.js", "types": "./dist/bundler.d.ts" }
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./session": {
+      "import": "./dist/session.js",
+      "types": "./dist/session.d.ts"
+    },
+    "./request": {
+      "import": "./dist/request.js",
+      "types": "./dist/request.d.ts"
+    },
+    "./keygen": {
+      "import": "./dist/keygen.js",
+      "types": "./dist/keygen.d.ts"
+    },
+    "./types": {
+      "import": "./dist/types.js",
+      "types": "./dist/types.d.ts"
+    },
+    "./jwks": {
+      "import": "./dist/jwks.js",
+      "types": "./dist/jwks.d.ts"
+    },
+    "./oauth": {
+      "import": "./dist/oauth.js",
+      "types": "./dist/oauth.d.ts"
+    },
+    "./bootstrap": {
+      "import": "./dist/bootstrap.js",
+      "types": "./dist/bootstrap.d.ts"
+    },
+    "./authkey-session": {
+      "import": "./dist/authkey-session.js",
+      "types": "./dist/authkey-session.d.ts"
+    },
+    "./proof": {
+      "import": "./dist/proof.js",
+      "types": "./dist/proof.d.ts"
+    },
+    "./server-prover": {
+      "import": "./dist/server-prover.js",
+      "types": "./dist/server-prover.d.ts"
+    },
+    "./witness": {
+      "import": "./dist/witness.js",
+      "types": "./dist/witness.d.ts"
+    },
+    "./jwt": {
+      "import": "./dist/jwt.js",
+      "types": "./dist/jwt.d.ts"
+    },
+    "./admin": {
+      "import": "./dist/admin.js",
+      "types": "./dist/admin.d.ts"
+    },
+    "./delegate": {
+      "import": "./dist/delegate.js",
+      "types": "./dist/delegate.d.ts"
+    },
+    "./scopedSign": {
+      "import": "./dist/scopedSign.js",
+      "types": "./dist/scopedSign.d.ts"
+    },
+    "./frostVerify": {
+      "import": "./dist/frostVerify.js",
+      "types": "./dist/frostVerify.d.ts"
+    },
+    "./x402": {
+      "import": "./dist/x402.js",
+      "types": "./dist/x402.d.ts"
+    },
+    "./userop": {
+      "import": "./dist/userop.js",
+      "types": "./dist/userop.d.ts"
+    },
+    "./bundler": {
+      "import": "./dist/bundler.js",
+      "types": "./dist/bundler.d.ts"
+    }
   },
   "files": [
     "dist",
@@ -38,14 +98,20 @@
   },
   "peerDependencies": {
     "viem": ">=2.0.0",
-    "@noir-lang/noir_js": ">=1.0.0-beta.0",
-    "@aztec/bb.js": ">=0.80.0",
-    "@oleary-labs/signet-circuits": ">=0.1.0"
+    "@noir-lang/noir_js": "1.0.0-beta.11",
+    "@aztec/bb.js": "0.82.2",
+    "@oleary-labs/signet-circuits": "0.1.0"
   },
   "peerDependenciesMeta": {
-    "@noir-lang/noir_js": { "optional": true },
-    "@aztec/bb.js": { "optional": true },
-    "@oleary-labs/signet-circuits": { "optional": true }
+    "@noir-lang/noir_js": {
+      "optional": true
+    },
+    "@aztec/bb.js": {
+      "optional": true
+    },
+    "@oleary-labs/signet-circuits": {
+      "optional": true
+    }
   },
   "dependencies": {
     "@noble/curves": "^1.9.0",