@p2pdotme/sdk 1.2.11 → 1.2.13

package/dist/zkkyc.d.cts

@@ -13,7 +13,7 @@ declare class SdkError<TCode extends string = string> extends Error {
     });
 }
 
-type ZkkycErrorCode = "VALIDATION_ERROR" | "CONTRACT_READ_ERROR" | "ENCODE_ERROR" | "RECLAIM_INIT_FAILED" | "RECLAIM_SESSION_NOT_FOUND" | "RECLAIM_PROOF_GENERATION_FAILED" | "RECLAIM_PROOF_INVALID" | "RECLAIM_POLLING_ABORTED" | "ZK_PASSPORT_INIT_FAILED" | "ZK_PASSPORT_REJECTED" | "ZK_PASSPORT_VERIFICATION_FAILED" | "ZK_PASSPORT_ABORTED" | "SIMPLE_KYC_SESSION_FAILED" | "SIMPLE_KYC_REDEEM_FAILED" | "BVN_ONBOARD_FAILED" | "BVN_SUBMIT_FAILED" | "BVN_OTP_SEND_FAILED" | "BVN_OTP_CONFIRM_FAILED" | "BVN_ATTESTATION_FAILED" | "BVN_SESSION_EXPIRED" | "PEER_DEPENDENCY_MISSING";
+type ZkkycErrorCode = "VALIDATION_ERROR" | "CONTRACT_READ_ERROR" | "ENCODE_ERROR" | "RECLAIM_INIT_FAILED" | "RECLAIM_SESSION_NOT_FOUND" | "RECLAIM_PROOF_GENERATION_FAILED" | "RECLAIM_PROOF_INVALID" | "RECLAIM_POLLING_ABORTED" | "ZK_PASSPORT_INIT_FAILED" | "ZK_PASSPORT_REJECTED" | "ZK_PASSPORT_VERIFICATION_FAILED" | "ZK_PASSPORT_ABORTED" | "SIMPLE_KYC_SESSION_FAILED" | "SIMPLE_KYC_REDEEM_FAILED" | "LIVENESS_SESSION_FAILED" | "LIVENESS_REDEEM_FAILED" | "BVN_ONBOARD_FAILED" | "BVN_SUBMIT_FAILED" | "BVN_OTP_SEND_FAILED" | "BVN_OTP_CONFIRM_FAILED" | "BVN_ATTESTATION_FAILED" | "BVN_SESSION_EXPIRED" | "PEER_DEPENDENCY_MISSING";
 declare class ZkkycError extends SdkError<ZkkycErrorCode> {
     constructor(message: string, options: {
         code: ZkkycErrorCode;
@@ -104,6 +104,13 @@ declare const ZodBvnSubmitParamsSchema: z.ZodObject<{
     signature: z.ZodString;
 }, z.core.$strip>;
 type BvnSubmitParams = z.infer<typeof ZodBvnSubmitParamsSchema>;
+declare const ZodLivenessSubmitParamsSchema: z.ZodObject<{
+    nullifier: z.ZodString;
+    limit: z.ZodBigInt;
+    expiry: z.ZodBigInt;
+    signature: z.ZodString;
+}, z.core.$strip>;
+type LivenessSubmitParams = z.infer<typeof ZodLivenessSubmitParamsSchema>;
 
 interface Zkkyc {
     prepareSocialVerify(params: SocialVerifyParams): Result<{
@@ -126,6 +133,10 @@ interface Zkkyc {
         to: Address;
         data: `0x${string}`;
     }, ZkkycError>;
+    prepareSubmitLivenessAttestation(params: LivenessSubmitParams): Result<{
+        to: Address;
+        data: `0x${string}`;
+    }, ZkkycError>;
 }
 /**
  * Creates a Zkkyc client that binds a reputation manager address,
@@ -298,6 +309,58 @@ interface SimpleKycAttestation {
     /** The opaque unique-human handle (no PII), for app-side bookkeeping. */
     readonly identityHash?: string;
 }
+/**
+ * Params for `createLivenessFlow`. The app opens the hosted liveness wizard,
+ * which runs onboard → active liveness challenge → face embed → 1:N dedup and,
+ * on approval, redirects back to `redirectUrl` with `?code=<code>&state=<state>`.
+ * The app then calls `resumeLivenessFlow` to redeem the code for the EIP-712
+ * attestation.
+ *
+ * Identical to `SimpleKycFlowParams` minus `country`: liveness reads no
+ * document, so there is no issuing market to prebind.
+ */
+interface LivenessFlowParams {
+    /**
+     * Base URL exposing the browser-facing `/v1/widget/public-sessions` and
+     * `/v1/widget/attestation` endpoints — the liveness proxy in a client-only
+     * setup (e.g. https://liveness-proxy.p2p.cool). The proxy holds the
+     * X-API-Key and forwards to the liveness service's key-gated endpoints.
+     * This is **not** the same host as the passport (`simple-kyc`) proxy.
+     */
+    readonly baseUrl: string;
+    /** The user's EVM wallet — bound into the attestation and credited on-chain. */
+    readonly walletAddress: Address;
+    /** Tenant slug (one per consuming contract), e.g. "p2p-reputation-liveness". */
+    readonly tenant: string;
+    /** Return URL — pass `${window.location.origin}<route>` so each app self-routes. */
+    readonly redirectUrl: string;
+    /** Opaque state round-tripped back to the app (CSRF/nonce + page to restore). */
+    readonly state?: string;
+    /** Status callback. */
+    readonly onStatus?: (status: LivenessStatus) => void;
+}
+type LivenessStatus = {
+    type: "session_created";
+    widgetUrl: string;
+} | {
+    type: "redirecting";
+    widgetUrl: string;
+};
+interface LivenessSession {
+    /** The hosted wizard URL to navigate to. */
+    readonly widgetUrl: string;
+    /** Convenience: navigate the browser to the wizard (no-op outside the browser). */
+    readonly redirect: () => void;
+}
+/** The on-chain-ready attestation, shaped for `prepareSubmitLivenessAttestation`. */
+interface LivenessAttestation {
+    readonly nullifier: `0x${string}`;
+    readonly limit: bigint;
+    readonly expiry: bigint;
+    readonly signature: `0x${string}`;
+    /** The opaque unique-human handle (no PII), for app-side bookkeeping. */
+    readonly identityHash?: string;
+}
 /** OTP delivery channels the BVN backend exposes. `alternate_phone` needs a number. */
 type BvnOtpMethod = "email" | "phone" | "phone_1" | "alternate_phone";
 /** BVN identity scope requested during onboard. */
@@ -368,6 +431,19 @@ interface BvnFlow {
     }, ZkkycError>;
 }
 
+/**
+ * Drives the BVN (Nigerian Bank Verification Number) on-chain attestation flow.
+ *
+ * The SDK talks only to a backend proxy — the single party that holds the Mono
+ * secret + the EIP-712 attestor key. Every response uses the `{ ok, data }`
+ * envelope. On approval, `getAttestation` returns a signed attestation shaped
+ * for `zkkyc.prepareSubmitBvnAttestation`, which the app submits on-chain from
+ * the same wallet.
+ *
+ * Flow: onboard → submitBvn → sendOtp → confirmOtp → getAttestation.
+ */
+declare function createBvnFlow(config: BvnFlowConfig): BvnFlow;
+
 /** Default Reclaim provider IDs for each social platform. */
 declare const DEFAULT_RECLAIM_PROVIDER_IDS: Record<SocialPlatform, string>;
 /** ZK Passport app store links. */
@@ -381,21 +457,42 @@ declare const RECLAIM_APP_LINKS: {
 };
 /** Default tenant slug for the P2P reputation contract on the simple-kyc service. */
 declare const SIMPLE_KYC_DEFAULT_TENANT = "p2p-reputation";
+/**
+ * Default tenant slug for the P2P reputation contract on the **liveness**
+ * service. Distinct registry from simple-kyc's — the two services keep separate
+ * databases, so a slug existing on one says nothing about the other.
+ */
+declare const LIVENESS_DEFAULT_TENANT = "p2p-reputation-liveness";
 /** OTP delivery channels the BVN backend (Mono) exposes. */
 declare const BVN_OTP_METHODS: readonly ["email", "phone", "phone_1", "alternate_phone"];
 
 /**
- * Drives the BVN (Nigerian Bank Verification Number) on-chain attestation flow.
+ * Starts the hosted liveness wizard flow. Creates a browser-initiable widget
+ * session (no API key in the browser — `baseUrl` points at the liveness proxy,
+ * which injects the key and whose tenant allowlist validates the redirect_uri),
+ * then returns the wizard URL to navigate to.
  *
- * The SDK talks only to a backend proxy — the single party that holds the Mono
- * secret + the EIP-712 attestor key. Every response uses the `{ ok, data }`
- * envelope. On approval, `getAttestation` returns a signed attestation shaped
- * for `zkkyc.prepareSubmitBvnAttestation`, which the app submits on-chain from
- * the same wallet.
+ * The wizard runs onboard → active liveness challenge → face embed → 1:N dedup
+ * and, on approval, redirects back to `redirectUrl` with `?code=<code>&state=<state>`.
+ * Call `resumeLivenessFlow({ baseUrl, code })` on return to fetch the attestation.
  *
- * Flow: onboard → submitBvn → sendOtp → confirmOtp → getAttestation.
+ * Deliberately separate from `createSimpleKycFlow`: the liveness verifier is a
+ * different service with its own database, its own attestor key and its own
+ * EIP-712 domain (`LivenessVerifier`, vs the passport wizard's `KycVerifier`).
+ * Pointing one flow at the other's base URL yields a signature the contract
+ * rejects. The one API-shape difference is that liveness takes **no `country`** —
+ * it reads no document, so there is no issuing market to prebind.
  */
-declare function createBvnFlow(config: BvnFlowConfig): BvnFlow;
+declare function createLivenessFlow(params: LivenessFlowParams): ResultAsync<LivenessSession, ZkkycError>;
+/**
+ * Redeems the one-time `code` from the wizard's redirect for the EIP-712
+ * attestation. The result feeds straight into `zkkyc.prepareSubmitLivenessAttestation`.
+ * The endpoint returns only the (non-PII, self-verifying) attestation.
+ */
+declare function resumeLivenessFlow(args: {
+    baseUrl: string;
+    code: string;
+}): ResultAsync<LivenessAttestation, ZkkycError>;
 
 /**
  * Initializes a Reclaim social verification flow and returns a session. `init()`
@@ -428,4 +525,4 @@ declare function resumeSimpleKycFlow(args: {
 /** Initializes a ZK Passport verification flow and returns a session. */
 declare function createZkPassportFlow(params: ZkPassportFlowParams): ResultAsync<ZkPassportSession, ZkkycError>;
 
-export { type AnonAadharProofParams, BVN_OTP_METHODS, type BvnAttestation, type BvnDecision, type BvnFlow, type BvnFlowConfig, type BvnMethod, type BvnOnboardParams, type BvnOtpMethod, type BvnScope, type BvnSendOtpParams, type BvnSession, type BvnSubmitParams, DEFAULT_RECLAIM_PROVIDER_IDS, RECLAIM_APP_LINKS, type ReclaimFlowParams, type ReclaimProofResult, type ReclaimSession, type ReclaimStatus, SIMPLE_KYC_DEFAULT_TENANT, SOCIAL_PLATFORM_NAMES, type SimpleKycAttestation, type SimpleKycFlowParams, type SimpleKycSession, type SimpleKycStatus, type SimpleKycSubmitParams, type SocialPlatform, type SocialVerifyParams, ZK_PASSPORT_APP_LINKS, type ZkPassportFlowParams, type ZkPassportProofResult, type ZkPassportRegisterParams, type ZkPassportSession, type ZkPassportStatus, type Zkkyc, type ZkkycConfig, ZkkycError, type ZkkycErrorCode, createBvnFlow, createReclaimFlow, createSimpleKycFlow, createZkPassportFlow, createZkkyc, resumeSimpleKycFlow };
+export { type AnonAadharProofParams, BVN_OTP_METHODS, type BvnAttestation, type BvnDecision, type BvnFlow, type BvnFlowConfig, type BvnMethod, type BvnOnboardParams, type BvnOtpMethod, type BvnScope, type BvnSendOtpParams, type BvnSession, type BvnSubmitParams, DEFAULT_RECLAIM_PROVIDER_IDS, LIVENESS_DEFAULT_TENANT, type LivenessAttestation, type LivenessFlowParams, type LivenessSession, type LivenessStatus, type LivenessSubmitParams, RECLAIM_APP_LINKS, type ReclaimFlowParams, type ReclaimProofResult, type ReclaimSession, type ReclaimStatus, SIMPLE_KYC_DEFAULT_TENANT, SOCIAL_PLATFORM_NAMES, type SimpleKycAttestation, type SimpleKycFlowParams, type SimpleKycSession, type SimpleKycStatus, type SimpleKycSubmitParams, type SocialPlatform, type SocialVerifyParams, ZK_PASSPORT_APP_LINKS, type ZkPassportFlowParams, type ZkPassportProofResult, type ZkPassportRegisterParams, type ZkPassportSession, type ZkPassportStatus, type Zkkyc, type ZkkycConfig, ZkkycError, type ZkkycErrorCode, createBvnFlow, createLivenessFlow, createReclaimFlow, createSimpleKycFlow, createZkPassportFlow, createZkkyc, resumeLivenessFlow, resumeSimpleKycFlow };

package/dist/zkkyc.d.ts

@@ -13,7 +13,7 @@ declare class SdkError<TCode extends string = string> extends Error {
     });
 }
 
-type ZkkycErrorCode = "VALIDATION_ERROR" | "CONTRACT_READ_ERROR" | "ENCODE_ERROR" | "RECLAIM_INIT_FAILED" | "RECLAIM_SESSION_NOT_FOUND" | "RECLAIM_PROOF_GENERATION_FAILED" | "RECLAIM_PROOF_INVALID" | "RECLAIM_POLLING_ABORTED" | "ZK_PASSPORT_INIT_FAILED" | "ZK_PASSPORT_REJECTED" | "ZK_PASSPORT_VERIFICATION_FAILED" | "ZK_PASSPORT_ABORTED" | "SIMPLE_KYC_SESSION_FAILED" | "SIMPLE_KYC_REDEEM_FAILED" | "BVN_ONBOARD_FAILED" | "BVN_SUBMIT_FAILED" | "BVN_OTP_SEND_FAILED" | "BVN_OTP_CONFIRM_FAILED" | "BVN_ATTESTATION_FAILED" | "BVN_SESSION_EXPIRED" | "PEER_DEPENDENCY_MISSING";
+type ZkkycErrorCode = "VALIDATION_ERROR" | "CONTRACT_READ_ERROR" | "ENCODE_ERROR" | "RECLAIM_INIT_FAILED" | "RECLAIM_SESSION_NOT_FOUND" | "RECLAIM_PROOF_GENERATION_FAILED" | "RECLAIM_PROOF_INVALID" | "RECLAIM_POLLING_ABORTED" | "ZK_PASSPORT_INIT_FAILED" | "ZK_PASSPORT_REJECTED" | "ZK_PASSPORT_VERIFICATION_FAILED" | "ZK_PASSPORT_ABORTED" | "SIMPLE_KYC_SESSION_FAILED" | "SIMPLE_KYC_REDEEM_FAILED" | "LIVENESS_SESSION_FAILED" | "LIVENESS_REDEEM_FAILED" | "BVN_ONBOARD_FAILED" | "BVN_SUBMIT_FAILED" | "BVN_OTP_SEND_FAILED" | "BVN_OTP_CONFIRM_FAILED" | "BVN_ATTESTATION_FAILED" | "BVN_SESSION_EXPIRED" | "PEER_DEPENDENCY_MISSING";
 declare class ZkkycError extends SdkError<ZkkycErrorCode> {
     constructor(message: string, options: {
         code: ZkkycErrorCode;
@@ -104,6 +104,13 @@ declare const ZodBvnSubmitParamsSchema: z.ZodObject<{
     signature: z.ZodString;
 }, z.core.$strip>;
 type BvnSubmitParams = z.infer<typeof ZodBvnSubmitParamsSchema>;
+declare const ZodLivenessSubmitParamsSchema: z.ZodObject<{
+    nullifier: z.ZodString;
+    limit: z.ZodBigInt;
+    expiry: z.ZodBigInt;
+    signature: z.ZodString;
+}, z.core.$strip>;
+type LivenessSubmitParams = z.infer<typeof ZodLivenessSubmitParamsSchema>;
 
 interface Zkkyc {
     prepareSocialVerify(params: SocialVerifyParams): Result<{
@@ -126,6 +133,10 @@ interface Zkkyc {
         to: Address;
         data: `0x${string}`;
     }, ZkkycError>;
+    prepareSubmitLivenessAttestation(params: LivenessSubmitParams): Result<{
+        to: Address;
+        data: `0x${string}`;
+    }, ZkkycError>;
 }
 /**
  * Creates a Zkkyc client that binds a reputation manager address,
@@ -298,6 +309,58 @@ interface SimpleKycAttestation {
     /** The opaque unique-human handle (no PII), for app-side bookkeeping. */
     readonly identityHash?: string;
 }
+/**
+ * Params for `createLivenessFlow`. The app opens the hosted liveness wizard,
+ * which runs onboard → active liveness challenge → face embed → 1:N dedup and,
+ * on approval, redirects back to `redirectUrl` with `?code=<code>&state=<state>`.
+ * The app then calls `resumeLivenessFlow` to redeem the code for the EIP-712
+ * attestation.
+ *
+ * Identical to `SimpleKycFlowParams` minus `country`: liveness reads no
+ * document, so there is no issuing market to prebind.
+ */
+interface LivenessFlowParams {
+    /**
+     * Base URL exposing the browser-facing `/v1/widget/public-sessions` and
+     * `/v1/widget/attestation` endpoints — the liveness proxy in a client-only
+     * setup (e.g. https://liveness-proxy.p2p.cool). The proxy holds the
+     * X-API-Key and forwards to the liveness service's key-gated endpoints.
+     * This is **not** the same host as the passport (`simple-kyc`) proxy.
+     */
+    readonly baseUrl: string;
+    /** The user's EVM wallet — bound into the attestation and credited on-chain. */
+    readonly walletAddress: Address;
+    /** Tenant slug (one per consuming contract), e.g. "p2p-reputation-liveness". */
+    readonly tenant: string;
+    /** Return URL — pass `${window.location.origin}<route>` so each app self-routes. */
+    readonly redirectUrl: string;
+    /** Opaque state round-tripped back to the app (CSRF/nonce + page to restore). */
+    readonly state?: string;
+    /** Status callback. */
+    readonly onStatus?: (status: LivenessStatus) => void;
+}
+type LivenessStatus = {
+    type: "session_created";
+    widgetUrl: string;
+} | {
+    type: "redirecting";
+    widgetUrl: string;
+};
+interface LivenessSession {
+    /** The hosted wizard URL to navigate to. */
+    readonly widgetUrl: string;
+    /** Convenience: navigate the browser to the wizard (no-op outside the browser). */
+    readonly redirect: () => void;
+}
+/** The on-chain-ready attestation, shaped for `prepareSubmitLivenessAttestation`. */
+interface LivenessAttestation {
+    readonly nullifier: `0x${string}`;
+    readonly limit: bigint;
+    readonly expiry: bigint;
+    readonly signature: `0x${string}`;
+    /** The opaque unique-human handle (no PII), for app-side bookkeeping. */
+    readonly identityHash?: string;
+}
 /** OTP delivery channels the BVN backend exposes. `alternate_phone` needs a number. */
 type BvnOtpMethod = "email" | "phone" | "phone_1" | "alternate_phone";
 /** BVN identity scope requested during onboard. */
@@ -368,6 +431,19 @@ interface BvnFlow {
     }, ZkkycError>;
 }
 
+/**
+ * Drives the BVN (Nigerian Bank Verification Number) on-chain attestation flow.
+ *
+ * The SDK talks only to a backend proxy — the single party that holds the Mono
+ * secret + the EIP-712 attestor key. Every response uses the `{ ok, data }`
+ * envelope. On approval, `getAttestation` returns a signed attestation shaped
+ * for `zkkyc.prepareSubmitBvnAttestation`, which the app submits on-chain from
+ * the same wallet.
+ *
+ * Flow: onboard → submitBvn → sendOtp → confirmOtp → getAttestation.
+ */
+declare function createBvnFlow(config: BvnFlowConfig): BvnFlow;
+
 /** Default Reclaim provider IDs for each social platform. */
 declare const DEFAULT_RECLAIM_PROVIDER_IDS: Record<SocialPlatform, string>;
 /** ZK Passport app store links. */
@@ -381,21 +457,42 @@ declare const RECLAIM_APP_LINKS: {
 };
 /** Default tenant slug for the P2P reputation contract on the simple-kyc service. */
 declare const SIMPLE_KYC_DEFAULT_TENANT = "p2p-reputation";
+/**
+ * Default tenant slug for the P2P reputation contract on the **liveness**
+ * service. Distinct registry from simple-kyc's — the two services keep separate
+ * databases, so a slug existing on one says nothing about the other.
+ */
+declare const LIVENESS_DEFAULT_TENANT = "p2p-reputation-liveness";
 /** OTP delivery channels the BVN backend (Mono) exposes. */
 declare const BVN_OTP_METHODS: readonly ["email", "phone", "phone_1", "alternate_phone"];
 
 /**
- * Drives the BVN (Nigerian Bank Verification Number) on-chain attestation flow.
+ * Starts the hosted liveness wizard flow. Creates a browser-initiable widget
+ * session (no API key in the browser — `baseUrl` points at the liveness proxy,
+ * which injects the key and whose tenant allowlist validates the redirect_uri),
+ * then returns the wizard URL to navigate to.
  *
- * The SDK talks only to a backend proxy — the single party that holds the Mono
- * secret + the EIP-712 attestor key. Every response uses the `{ ok, data }`
- * envelope. On approval, `getAttestation` returns a signed attestation shaped
- * for `zkkyc.prepareSubmitBvnAttestation`, which the app submits on-chain from
- * the same wallet.
+ * The wizard runs onboard → active liveness challenge → face embed → 1:N dedup
+ * and, on approval, redirects back to `redirectUrl` with `?code=<code>&state=<state>`.
+ * Call `resumeLivenessFlow({ baseUrl, code })` on return to fetch the attestation.
  *
- * Flow: onboard → submitBvn → sendOtp → confirmOtp → getAttestation.
+ * Deliberately separate from `createSimpleKycFlow`: the liveness verifier is a
+ * different service with its own database, its own attestor key and its own
+ * EIP-712 domain (`LivenessVerifier`, vs the passport wizard's `KycVerifier`).
+ * Pointing one flow at the other's base URL yields a signature the contract
+ * rejects. The one API-shape difference is that liveness takes **no `country`** —
+ * it reads no document, so there is no issuing market to prebind.
  */
-declare function createBvnFlow(config: BvnFlowConfig): BvnFlow;
+declare function createLivenessFlow(params: LivenessFlowParams): ResultAsync<LivenessSession, ZkkycError>;
+/**
+ * Redeems the one-time `code` from the wizard's redirect for the EIP-712
+ * attestation. The result feeds straight into `zkkyc.prepareSubmitLivenessAttestation`.
+ * The endpoint returns only the (non-PII, self-verifying) attestation.
+ */
+declare function resumeLivenessFlow(args: {
+    baseUrl: string;
+    code: string;
+}): ResultAsync<LivenessAttestation, ZkkycError>;
 
 /**
  * Initializes a Reclaim social verification flow and returns a session. `init()`
@@ -428,4 +525,4 @@ declare function resumeSimpleKycFlow(args: {
 /** Initializes a ZK Passport verification flow and returns a session. */
 declare function createZkPassportFlow(params: ZkPassportFlowParams): ResultAsync<ZkPassportSession, ZkkycError>;
 
-export { type AnonAadharProofParams, BVN_OTP_METHODS, type BvnAttestation, type BvnDecision, type BvnFlow, type BvnFlowConfig, type BvnMethod, type BvnOnboardParams, type BvnOtpMethod, type BvnScope, type BvnSendOtpParams, type BvnSession, type BvnSubmitParams, DEFAULT_RECLAIM_PROVIDER_IDS, RECLAIM_APP_LINKS, type ReclaimFlowParams, type ReclaimProofResult, type ReclaimSession, type ReclaimStatus, SIMPLE_KYC_DEFAULT_TENANT, SOCIAL_PLATFORM_NAMES, type SimpleKycAttestation, type SimpleKycFlowParams, type SimpleKycSession, type SimpleKycStatus, type SimpleKycSubmitParams, type SocialPlatform, type SocialVerifyParams, ZK_PASSPORT_APP_LINKS, type ZkPassportFlowParams, type ZkPassportProofResult, type ZkPassportRegisterParams, type ZkPassportSession, type ZkPassportStatus, type Zkkyc, type ZkkycConfig, ZkkycError, type ZkkycErrorCode, createBvnFlow, createReclaimFlow, createSimpleKycFlow, createZkPassportFlow, createZkkyc, resumeSimpleKycFlow };
+export { type AnonAadharProofParams, BVN_OTP_METHODS, type BvnAttestation, type BvnDecision, type BvnFlow, type BvnFlowConfig, type BvnMethod, type BvnOnboardParams, type BvnOtpMethod, type BvnScope, type BvnSendOtpParams, type BvnSession, type BvnSubmitParams, DEFAULT_RECLAIM_PROVIDER_IDS, LIVENESS_DEFAULT_TENANT, type LivenessAttestation, type LivenessFlowParams, type LivenessSession, type LivenessStatus, type LivenessSubmitParams, RECLAIM_APP_LINKS, type ReclaimFlowParams, type ReclaimProofResult, type ReclaimSession, type ReclaimStatus, SIMPLE_KYC_DEFAULT_TENANT, SOCIAL_PLATFORM_NAMES, type SimpleKycAttestation, type SimpleKycFlowParams, type SimpleKycSession, type SimpleKycStatus, type SimpleKycSubmitParams, type SocialPlatform, type SocialVerifyParams, ZK_PASSPORT_APP_LINKS, type ZkPassportFlowParams, type ZkPassportProofResult, type ZkPassportRegisterParams, type ZkPassportSession, type ZkPassportStatus, type Zkkyc, type ZkkycConfig, ZkkycError, type ZkkycErrorCode, createBvnFlow, createLivenessFlow, createReclaimFlow, createSimpleKycFlow, createZkPassportFlow, createZkkyc, resumeLivenessFlow, resumeSimpleKycFlow };

package/dist/zkkyc.mjs

@@ -158,6 +158,20 @@ var ZodBvnSubmitParamsSchema = z2.object({
     message: "signature must be a hex string"
   })
 });
+var ZodLivenessSubmitParamsSchema = z2.object({
+  /** Per-(tenant, identity) Sybil nullifier (bytes32 hex). */
+  nullifier: z2.string().refine((v) => /^0x[a-fA-F0-9]{64}$/.test(v), {
+    message: "nullifier must be a bytes32 hex string"
+  }),
+  /** Remaining limit in micro-USDC (part of the signed struct). */
+  limit: z2.bigint(),
+  /** Attestation expiry (unix seconds). */
+  expiry: z2.bigint(),
+  /** 65-byte secp256k1 signature (hex). */
+  signature: z2.string().refine((v) => /^0x[a-fA-F0-9]+$/.test(v), {
+    message: "signature must be a hex string"
+  })
+});
 
 // src/contracts/abis/index.ts
 import { erc20Abi } from "viem";
@@ -994,6 +1008,39 @@ var reputationManagerAbi = [
     outputs: [{ internalType: "bool", name: "", type: "bool" }],
     stateMutability: "view",
     type: "function"
+  },
+  // ── Liveness (face-only, no document) attestation ───────────────────────
+  { inputs: [], name: "LivenessSignerNotSet", type: "error" },
+  { inputs: [], name: "LivenessAttestationExpired", type: "error" },
+  { inputs: [], name: "LivenessNullifierZero", type: "error" },
+  { inputs: [], name: "LivenessNullifierAlreadySpent", type: "error" },
+  { inputs: [], name: "LivenessAlreadyVerified", type: "error" },
+  { inputs: [], name: "LivenessInvalidSignature", type: "error" },
+  {
+    inputs: [
+      { internalType: "bytes32", name: "nullifier", type: "bytes32" },
+      { internalType: "uint256", name: "limit", type: "uint256" },
+      { internalType: "uint256", name: "expiry", type: "uint256" },
+      { internalType: "bytes", name: "signature", type: "bytes" }
+    ],
+    name: "submitLivenessAttestation",
+    outputs: [],
+    stateMutability: "nonpayable",
+    type: "function"
+  },
+  {
+    inputs: [],
+    name: "livenessRp",
+    outputs: [{ internalType: "uint256", name: "", type: "uint256" }],
+    stateMutability: "view",
+    type: "function"
+  },
+  {
+    inputs: [{ internalType: "address", name: "", type: "address" }],
+    name: "livenessVerified",
+    outputs: [{ internalType: "bool", name: "", type: "bool" }],
+    stateMutability: "view",
+    type: "function"
   }
 ];
 
@@ -1137,6 +1184,33 @@ function prepareSubmitBvnAttestation(reputationManagerAddress, params) {
     )()
   );
 }
+function prepareSubmitLivenessAttestation(reputationManagerAddress, params) {
+  return validate(
+    ZodLivenessSubmitParamsSchema,
+    params,
+    (message, cause, data) => new ZkkycError(message, { code: "VALIDATION_ERROR", cause, context: { params: data } })
+  ).andThen(
+    (validated) => Result.fromThrowable(
+      () => ({
+        to: reputationManagerAddress,
+        data: encodeFunctionData({
+          abi: ABIS.EXTERNAL.REPUTATION_MANAGER,
+          functionName: "submitLivenessAttestation",
+          args: [
+            validated.nullifier,
+            validated.limit,
+            validated.expiry,
+            validated.signature
+          ]
+        })
+      }),
+      (error) => new ZkkycError("Failed to encode submitLivenessAttestation", {
+        code: "ENCODE_ERROR",
+        cause: error
+      })
+    )()
+  );
+}
 function prepareZkPassportRegister(reputationManagerAddress, params) {
   return validate(
     ZodZkPassportRegisterParamsSchema,
@@ -1186,29 +1260,11 @@ function createZkkyc(config) {
     prepareSubmitAnonAadharProof: (params) => prepareSubmitAnonAadharProof(reputationManagerAddress, params),
     prepareZkPassportRegister: (params) => prepareZkPassportRegister(reputationManagerAddress, params),
     prepareSubmitKycAttestation: (params) => prepareSubmitKycAttestation(reputationManagerAddress, params),
-    prepareSubmitBvnAttestation: (params) => prepareSubmitBvnAttestation(reputationManagerAddress, params)
+    prepareSubmitBvnAttestation: (params) => prepareSubmitBvnAttestation(reputationManagerAddress, params),
+    prepareSubmitLivenessAttestation: (params) => prepareSubmitLivenessAttestation(reputationManagerAddress, params)
   };
 }
 
-// src/zkkyc/orchestrators/constants.ts
-var DEFAULT_RECLAIM_PROVIDER_IDS = {
-  linkedin: "6a86edbe-a0fe-420b-8db2-3155220cc949",
-  github: "033f0c06-2eb3-48c8-894c-5599c3356d1c",
-  x: "aad95818-f726-4a34-be97-8d1f47631b03",
-  instagram: "7e5b59a9-56c5-490c-a169-82a443f9b507",
-  facebook: "2701510b-c835-4820-84f0-d9e74569656b",
-  binance: "7e40c007-f432-4d47-ac00-3e0762f8a7a0"
-};
-var ZK_PASSPORT_APP_LINKS = {
-  IOS: "https://apps.apple.com/us/app/zkpassport/id6477371975",
-  ANDROID: "https://play.google.com/store/apps/details?id=app.zkpassport.zkpassport"
-};
-var RECLAIM_APP_LINKS = {
-  ANDROID: "https://play.google.com/store/apps/details?id=org.reclaimprotocol.app"
-};
-var SIMPLE_KYC_DEFAULT_TENANT = "p2p-reputation";
-var BVN_OTP_METHODS = ["email", "phone", "phone_1", "alternate_phone"];
-
 // src/zkkyc/orchestrators/bvn.ts
 import { ResultAsync } from "neverthrow";
 function createBvnFlow(config) {
@@ -1348,8 +1404,107 @@ function createBvnFlow(config) {
   };
 }
 
-// src/zkkyc/orchestrators/reclaim.ts
+// src/zkkyc/orchestrators/constants.ts
+var DEFAULT_RECLAIM_PROVIDER_IDS = {
+  linkedin: "6a86edbe-a0fe-420b-8db2-3155220cc949",
+  github: "033f0c06-2eb3-48c8-894c-5599c3356d1c",
+  x: "aad95818-f726-4a34-be97-8d1f47631b03",
+  instagram: "7e5b59a9-56c5-490c-a169-82a443f9b507",
+  facebook: "2701510b-c835-4820-84f0-d9e74569656b",
+  binance: "7e40c007-f432-4d47-ac00-3e0762f8a7a0"
+};
+var ZK_PASSPORT_APP_LINKS = {
+  IOS: "https://apps.apple.com/us/app/zkpassport/id6477371975",
+  ANDROID: "https://play.google.com/store/apps/details?id=app.zkpassport.zkpassport"
+};
+var RECLAIM_APP_LINKS = {
+  ANDROID: "https://play.google.com/store/apps/details?id=org.reclaimprotocol.app"
+};
+var SIMPLE_KYC_DEFAULT_TENANT = "p2p-reputation";
+var LIVENESS_DEFAULT_TENANT = "p2p-reputation-liveness";
+var BVN_OTP_METHODS = ["email", "phone", "phone_1", "alternate_phone"];
+
+// src/zkkyc/orchestrators/liveness.ts
 import { ResultAsync as ResultAsync2 } from "neverthrow";
+function createLivenessFlow(params) {
+  const { baseUrl, walletAddress, tenant, redirectUrl, state, onStatus } = params;
+  return ResultAsync2.fromPromise(
+    (async () => {
+      const res = await fetch(`${baseUrl}/v1/widget/public-sessions`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          wallet_pubkey: walletAddress,
+          redirect_uri: redirectUrl,
+          tenant,
+          state
+        })
+      });
+      if (!res.ok) {
+        const body = await res.text();
+        throw new ZkkycError(`liveness session creation failed: ${res.status} ${body}`, {
+          code: "LIVENESS_SESSION_FAILED",
+          context: { status: res.status }
+        });
+      }
+      const data = await res.json();
+      const widgetUrl = data.widget_url;
+      onStatus?.({ type: "session_created", widgetUrl });
+      return {
+        widgetUrl,
+        redirect: () => {
+          if (typeof window !== "undefined") {
+            onStatus?.({ type: "redirecting", widgetUrl });
+            window.location.href = widgetUrl;
+          }
+        }
+      };
+    })(),
+    (error) => {
+      if (error instanceof ZkkycError) return error;
+      return new ZkkycError("liveness flow failed to start", {
+        code: "LIVENESS_SESSION_FAILED",
+        cause: error
+      });
+    }
+  );
+}
+function resumeLivenessFlow(args) {
+  return ResultAsync2.fromPromise(
+    (async () => {
+      const res = await fetch(`${args.baseUrl}/v1/widget/attestation`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ code: args.code })
+      });
+      if (!res.ok) {
+        const body = await res.text();
+        throw new ZkkycError(`liveness attestation redemption failed: ${res.status} ${body}`, {
+          code: "LIVENESS_REDEEM_FAILED",
+          context: { status: res.status }
+        });
+      }
+      const d = await res.json();
+      return {
+        nullifier: d.nullifier,
+        limit: BigInt(d.limit),
+        expiry: BigInt(d.expiry),
+        signature: d.signature,
+        identityHash: d.identity_hash
+      };
+    })(),
+    (error) => {
+      if (error instanceof ZkkycError) return error;
+      return new ZkkycError("liveness attestation redemption failed", {
+        code: "LIVENESS_REDEEM_FAILED",
+        cause: error
+      });
+    }
+  );
+}
+
+// src/zkkyc/orchestrators/reclaim.ts
+import { ResultAsync as ResultAsync3 } from "neverthrow";
 
 // src/zkkyc/orchestrators/types.ts
 var SOCIAL_PLATFORM_NAMES = {
@@ -1364,7 +1519,7 @@ var SOCIAL_PLATFORM_NAMES = {
 // src/zkkyc/orchestrators/reclaim.ts
 var RECLAIM_SESSION_API = "https://api.reclaimprotocol.org/api/sdk/session";
 function createReclaimFlow(params) {
-  return ResultAsync2.fromPromise(
+  return ResultAsync3.fromPromise(
     (async () => {
       const mod = await import("@reclaimprotocol/js-sdk").catch(() => {
         throw new ZkkycError(
@@ -1468,7 +1623,7 @@ function createReclaimFlow(params) {
       const session = {
         sessionId,
         requestUrl,
-        start: () => ResultAsync2.fromPromise(pollForProof(), (error) => {
+        start: () => ResultAsync3.fromPromise(pollForProof(), (error) => {
           if (error instanceof ZkkycError) return error;
           return new ZkkycError("Reclaim verification flow failed", {
             code: "RECLAIM_INIT_FAILED",
@@ -1492,10 +1647,10 @@ function createReclaimFlow(params) {
 }
 
 // src/zkkyc/orchestrators/simple-kyc.ts
-import { ResultAsync as ResultAsync3 } from "neverthrow";
+import { ResultAsync as ResultAsync4 } from "neverthrow";
 function createSimpleKycFlow(params) {
   const { baseUrl, walletAddress, tenant, redirectUrl, country, state, onStatus } = params;
-  return ResultAsync3.fromPromise(
+  return ResultAsync4.fromPromise(
     (async () => {
       const res = await fetch(`${baseUrl}/v1/widget/public-sessions`, {
         method: "POST",
@@ -1538,7 +1693,7 @@ function createSimpleKycFlow(params) {
   );
 }
 function resumeSimpleKycFlow(args) {
-  return ResultAsync3.fromPromise(
+  return ResultAsync4.fromPromise(
     (async () => {
       const res = await fetch(`${args.baseUrl}/v1/widget/attestation`, {
         method: "POST",
@@ -1572,9 +1727,9 @@ function resumeSimpleKycFlow(args) {
 }
 
 // src/zkkyc/orchestrators/zk-passport.ts
-import { ResultAsync as ResultAsync4 } from "neverthrow";
+import { ResultAsync as ResultAsync5 } from "neverthrow";
 function createZkPassportFlow(params) {
-  return ResultAsync4.fromPromise(
+  return ResultAsync5.fromPromise(
     (async () => {
       const mod = await import("@zkpassport/sdk").catch(() => {
         throw new ZkkycError(
@@ -1670,7 +1825,7 @@ function createZkPassportFlow(params) {
       });
       const session = {
         url,
-        result: ResultAsync4.fromPromise(resultPromise, (error) => {
+        result: ResultAsync5.fromPromise(resultPromise, (error) => {
           if (error instanceof ZkkycError) return error;
           return new ZkkycError("ZK Passport flow failed", {
             code: "ZK_PASSPORT_VERIFICATION_FAILED",
@@ -1695,16 +1850,19 @@ function createZkPassportFlow(params) {
 export {
   BVN_OTP_METHODS,
   DEFAULT_RECLAIM_PROVIDER_IDS,
+  LIVENESS_DEFAULT_TENANT,
   RECLAIM_APP_LINKS,
   SIMPLE_KYC_DEFAULT_TENANT,
   SOCIAL_PLATFORM_NAMES,
   ZK_PASSPORT_APP_LINKS,
   ZkkycError,
   createBvnFlow,
+  createLivenessFlow,
   createReclaimFlow,
   createSimpleKycFlow,
   createZkPassportFlow,
   createZkkyc,
+  resumeLivenessFlow,
   resumeSimpleKycFlow
 };
 //# sourceMappingURL=zkkyc.mjs.map