@p2pdotme/sdk 1.2.6 → 1.2.7

package/dist/zkkyc.d.cts

@@ -13,7 +13,7 @@ declare class SdkError<TCode extends string = string> extends Error {
     });
 }
 
-type ZkkycErrorCode = "VALIDATION_ERROR" | "CONTRACT_READ_ERROR" | "ENCODE_ERROR" | "RECLAIM_INIT_FAILED" | "RECLAIM_SESSION_NOT_FOUND" | "RECLAIM_PROOF_GENERATION_FAILED" | "RECLAIM_PROOF_INVALID" | "RECLAIM_POLLING_ABORTED" | "ZK_PASSPORT_INIT_FAILED" | "ZK_PASSPORT_REJECTED" | "ZK_PASSPORT_VERIFICATION_FAILED" | "ZK_PASSPORT_ABORTED" | "SIMPLE_KYC_SESSION_FAILED" | "SIMPLE_KYC_REDEEM_FAILED" | "PEER_DEPENDENCY_MISSING";
+type ZkkycErrorCode = "VALIDATION_ERROR" | "CONTRACT_READ_ERROR" | "ENCODE_ERROR" | "RECLAIM_INIT_FAILED" | "RECLAIM_SESSION_NOT_FOUND" | "RECLAIM_PROOF_GENERATION_FAILED" | "RECLAIM_PROOF_INVALID" | "RECLAIM_POLLING_ABORTED" | "ZK_PASSPORT_INIT_FAILED" | "ZK_PASSPORT_REJECTED" | "ZK_PASSPORT_VERIFICATION_FAILED" | "ZK_PASSPORT_ABORTED" | "SIMPLE_KYC_SESSION_FAILED" | "SIMPLE_KYC_REDEEM_FAILED" | "BVN_ONBOARD_FAILED" | "BVN_SUBMIT_FAILED" | "BVN_OTP_SEND_FAILED" | "BVN_OTP_CONFIRM_FAILED" | "BVN_ATTESTATION_FAILED" | "BVN_SESSION_EXPIRED" | "PEER_DEPENDENCY_MISSING";
 declare class ZkkycError extends SdkError<ZkkycErrorCode> {
     constructor(message: string, options: {
         code: ZkkycErrorCode;
@@ -97,6 +97,13 @@ declare const ZodSimpleKycSubmitParamsSchema: z.ZodObject<{
     signature: z.ZodString;
 }, z.core.$strip>;
 type SimpleKycSubmitParams = z.infer<typeof ZodSimpleKycSubmitParamsSchema>;
+declare const ZodBvnSubmitParamsSchema: z.ZodObject<{
+    nullifier: z.ZodString;
+    limit: z.ZodBigInt;
+    expiry: z.ZodBigInt;
+    signature: z.ZodString;
+}, z.core.$strip>;
+type BvnSubmitParams = z.infer<typeof ZodBvnSubmitParamsSchema>;
 
 interface Zkkyc {
     prepareSocialVerify(params: SocialVerifyParams): Result<{
@@ -115,6 +122,10 @@ interface Zkkyc {
         to: Address;
         data: `0x${string}`;
     }, ZkkycError>;
+    prepareSubmitBvnAttestation(params: BvnSubmitParams): Result<{
+        to: Address;
+        data: `0x${string}`;
+    }, ZkkycError>;
 }
 /**
  * Creates a Zkkyc client that binds a reputation manager address,
@@ -287,6 +298,75 @@ interface SimpleKycAttestation {
     /** The opaque unique-human handle (no PII), for app-side bookkeeping. */
     readonly identityHash?: string;
 }
+/** OTP delivery channels the BVN backend exposes. `alternate_phone` needs a number. */
+type BvnOtpMethod = "email" | "phone" | "phone_1" | "alternate_phone";
+/** BVN identity scope requested during onboard. */
+type BvnScope = "identity" | "bank_accounts";
+/**
+ * Shared config for every BVN step. `baseUrl` points at the backend proxy — the
+ * only party holding the Mono secret + the EIP-712 attestor key — using the
+ * `{ ok, data }` envelope.
+ */
+interface BvnFlowConfig {
+    /** Backend proxy base URL (e.g. https://ngn-bvn-verify-production.up.railway.app). */
+    readonly baseUrl: string;
+    /** Tenant slug registered on the backend, mapping to one on-chain contract. */
+    readonly tenant: string;
+}
+/** An active BVN backend session. Carry this between steps. */
+interface BvnSession {
+    readonly sessionId: number;
+    readonly sessionToken: string;
+}
+/** An available OTP delivery method returned after submitting the BVN. */
+interface BvnMethod {
+    readonly method: string;
+    readonly hint?: string;
+}
+/** The confirm-OTP decision. `reject` may carry a reason (e.g. "bvn_reused"). */
+interface BvnDecision {
+    readonly decision: "approve" | "reject";
+    readonly reason?: string;
+}
+/** The on-chain-ready attestation, shaped for `prepareSubmitBvnAttestation`. */
+interface BvnAttestation {
+    readonly nullifier: `0x${string}`;
+    readonly limit: bigint;
+    readonly expiry: bigint;
+    readonly signature: `0x${string}`;
+    /** The wallet the attestation is bound to. */
+    readonly wallet?: string;
+}
+/** Params for `bvnOnboard`. */
+interface BvnOnboardParams {
+    /** The user's EVM wallet — bound into the attestation and credited on-chain. */
+    readonly walletAddress: Address;
+    /** Identity scope. Defaults to "identity". */
+    readonly scope?: BvnScope;
+}
+/** Params for `bvnSendOtp`. */
+interface BvnSendOtpParams {
+    readonly method: BvnOtpMethod;
+    /** Required only when `method` is "alternate_phone". */
+    readonly phoneNumber?: string;
+}
+/** The full BVN flow bound to a config — mirrors the `Zkkyc` client shape. */
+interface BvnFlow {
+    /** Step 1 — start a session bound to the wallet + tenant. */
+    onboard(params: BvnOnboardParams): ResultAsync<BvnSession, ZkkycError>;
+    /** Step 2 — submit the 11-digit BVN, get available OTP methods. */
+    submitBvn(session: BvnSession, bvn: string): ResultAsync<BvnMethod[], ZkkycError>;
+    /** Step 3 — request an OTP over the chosen channel. */
+    sendOtp(session: BvnSession, params: BvnSendOtpParams): ResultAsync<boolean, ZkkycError>;
+    /** Step 4 — confirm the OTP; returns approve/reject (never any PII). */
+    confirmOtp(session: BvnSession, otp: string): ResultAsync<BvnDecision, ZkkycError>;
+    /** Step 5 — mint the signed EIP-712 attestation for an approved session. */
+    getAttestation(session: BvnSession): ResultAsync<BvnAttestation, ZkkycError>;
+    /** Optional — the address the tenant contract must trust as its signer. */
+    getAttestor(): ResultAsync<{
+        address: string;
+    }, ZkkycError>;
+}
 
 /** Default Reclaim provider IDs for each social platform. */
 declare const DEFAULT_RECLAIM_PROVIDER_IDS: Record<SocialPlatform, string>;
@@ -301,6 +381,21 @@ declare const RECLAIM_APP_LINKS: {
 };
 /** Default tenant slug for the P2P reputation contract on the simple-kyc service. */
 declare const SIMPLE_KYC_DEFAULT_TENANT = "p2p-reputation";
+/** OTP delivery channels the BVN backend (Mono) exposes. */
+declare const BVN_OTP_METHODS: readonly ["email", "phone", "phone_1", "alternate_phone"];
+
+/**
+ * Drives the BVN (Nigerian Bank Verification Number) on-chain attestation flow.
+ *
+ * The SDK talks only to a backend proxy — the single party that holds the Mono
+ * secret + the EIP-712 attestor key. Every response uses the `{ ok, data }`
+ * envelope. On approval, `getAttestation` returns a signed attestation shaped
+ * for `zkkyc.prepareSubmitBvnAttestation`, which the app submits on-chain from
+ * the same wallet.
+ *
+ * Flow: onboard → submitBvn → sendOtp → confirmOtp → getAttestation.
+ */
+declare function createBvnFlow(config: BvnFlowConfig): BvnFlow;
 
 /**
  * Initializes a Reclaim social verification flow and returns a session. `init()`
@@ -333,4 +428,4 @@ declare function resumeSimpleKycFlow(args: {
 /** Initializes a ZK Passport verification flow and returns a session. */
 declare function createZkPassportFlow(params: ZkPassportFlowParams): ResultAsync<ZkPassportSession, ZkkycError>;
 
-export { type AnonAadharProofParams, DEFAULT_RECLAIM_PROVIDER_IDS, RECLAIM_APP_LINKS, type ReclaimFlowParams, type ReclaimProofResult, type ReclaimSession, type ReclaimStatus, SIMPLE_KYC_DEFAULT_TENANT, SOCIAL_PLATFORM_NAMES, type SimpleKycAttestation, type SimpleKycFlowParams, type SimpleKycSession, type SimpleKycStatus, type SimpleKycSubmitParams, type SocialPlatform, type SocialVerifyParams, ZK_PASSPORT_APP_LINKS, type ZkPassportFlowParams, type ZkPassportProofResult, type ZkPassportRegisterParams, type ZkPassportSession, type ZkPassportStatus, type Zkkyc, type ZkkycConfig, ZkkycError, type ZkkycErrorCode, createReclaimFlow, createSimpleKycFlow, createZkPassportFlow, createZkkyc, resumeSimpleKycFlow };
+export { type AnonAadharProofParams, BVN_OTP_METHODS, type BvnAttestation, type BvnDecision, type BvnFlow, type BvnFlowConfig, type BvnMethod, type BvnOnboardParams, type BvnOtpMethod, type BvnScope, type BvnSendOtpParams, type BvnSession, type BvnSubmitParams, DEFAULT_RECLAIM_PROVIDER_IDS, RECLAIM_APP_LINKS, type ReclaimFlowParams, type ReclaimProofResult, type ReclaimSession, type ReclaimStatus, SIMPLE_KYC_DEFAULT_TENANT, SOCIAL_PLATFORM_NAMES, type SimpleKycAttestation, type SimpleKycFlowParams, type SimpleKycSession, type SimpleKycStatus, type SimpleKycSubmitParams, type SocialPlatform, type SocialVerifyParams, ZK_PASSPORT_APP_LINKS, type ZkPassportFlowParams, type ZkPassportProofResult, type ZkPassportRegisterParams, type ZkPassportSession, type ZkPassportStatus, type Zkkyc, type ZkkycConfig, ZkkycError, type ZkkycErrorCode, createBvnFlow, createReclaimFlow, createSimpleKycFlow, createZkPassportFlow, createZkkyc, resumeSimpleKycFlow };

package/dist/zkkyc.d.ts

@@ -13,7 +13,7 @@ declare class SdkError<TCode extends string = string> extends Error {
     });
 }
 
-type ZkkycErrorCode = "VALIDATION_ERROR" | "CONTRACT_READ_ERROR" | "ENCODE_ERROR" | "RECLAIM_INIT_FAILED" | "RECLAIM_SESSION_NOT_FOUND" | "RECLAIM_PROOF_GENERATION_FAILED" | "RECLAIM_PROOF_INVALID" | "RECLAIM_POLLING_ABORTED" | "ZK_PASSPORT_INIT_FAILED" | "ZK_PASSPORT_REJECTED" | "ZK_PASSPORT_VERIFICATION_FAILED" | "ZK_PASSPORT_ABORTED" | "SIMPLE_KYC_SESSION_FAILED" | "SIMPLE_KYC_REDEEM_FAILED" | "PEER_DEPENDENCY_MISSING";
+type ZkkycErrorCode = "VALIDATION_ERROR" | "CONTRACT_READ_ERROR" | "ENCODE_ERROR" | "RECLAIM_INIT_FAILED" | "RECLAIM_SESSION_NOT_FOUND" | "RECLAIM_PROOF_GENERATION_FAILED" | "RECLAIM_PROOF_INVALID" | "RECLAIM_POLLING_ABORTED" | "ZK_PASSPORT_INIT_FAILED" | "ZK_PASSPORT_REJECTED" | "ZK_PASSPORT_VERIFICATION_FAILED" | "ZK_PASSPORT_ABORTED" | "SIMPLE_KYC_SESSION_FAILED" | "SIMPLE_KYC_REDEEM_FAILED" | "BVN_ONBOARD_FAILED" | "BVN_SUBMIT_FAILED" | "BVN_OTP_SEND_FAILED" | "BVN_OTP_CONFIRM_FAILED" | "BVN_ATTESTATION_FAILED" | "BVN_SESSION_EXPIRED" | "PEER_DEPENDENCY_MISSING";
 declare class ZkkycError extends SdkError<ZkkycErrorCode> {
     constructor(message: string, options: {
         code: ZkkycErrorCode;
@@ -97,6 +97,13 @@ declare const ZodSimpleKycSubmitParamsSchema: z.ZodObject<{
     signature: z.ZodString;
 }, z.core.$strip>;
 type SimpleKycSubmitParams = z.infer<typeof ZodSimpleKycSubmitParamsSchema>;
+declare const ZodBvnSubmitParamsSchema: z.ZodObject<{
+    nullifier: z.ZodString;
+    limit: z.ZodBigInt;
+    expiry: z.ZodBigInt;
+    signature: z.ZodString;
+}, z.core.$strip>;
+type BvnSubmitParams = z.infer<typeof ZodBvnSubmitParamsSchema>;
 
 interface Zkkyc {
     prepareSocialVerify(params: SocialVerifyParams): Result<{
@@ -115,6 +122,10 @@ interface Zkkyc {
         to: Address;
         data: `0x${string}`;
     }, ZkkycError>;
+    prepareSubmitBvnAttestation(params: BvnSubmitParams): Result<{
+        to: Address;
+        data: `0x${string}`;
+    }, ZkkycError>;
 }
 /**
  * Creates a Zkkyc client that binds a reputation manager address,
@@ -287,6 +298,75 @@ interface SimpleKycAttestation {
     /** The opaque unique-human handle (no PII), for app-side bookkeeping. */
     readonly identityHash?: string;
 }
+/** OTP delivery channels the BVN backend exposes. `alternate_phone` needs a number. */
+type BvnOtpMethod = "email" | "phone" | "phone_1" | "alternate_phone";
+/** BVN identity scope requested during onboard. */
+type BvnScope = "identity" | "bank_accounts";
+/**
+ * Shared config for every BVN step. `baseUrl` points at the backend proxy — the
+ * only party holding the Mono secret + the EIP-712 attestor key — using the
+ * `{ ok, data }` envelope.
+ */
+interface BvnFlowConfig {
+    /** Backend proxy base URL (e.g. https://ngn-bvn-verify-production.up.railway.app). */
+    readonly baseUrl: string;
+    /** Tenant slug registered on the backend, mapping to one on-chain contract. */
+    readonly tenant: string;
+}
+/** An active BVN backend session. Carry this between steps. */
+interface BvnSession {
+    readonly sessionId: number;
+    readonly sessionToken: string;
+}
+/** An available OTP delivery method returned after submitting the BVN. */
+interface BvnMethod {
+    readonly method: string;
+    readonly hint?: string;
+}
+/** The confirm-OTP decision. `reject` may carry a reason (e.g. "bvn_reused"). */
+interface BvnDecision {
+    readonly decision: "approve" | "reject";
+    readonly reason?: string;
+}
+/** The on-chain-ready attestation, shaped for `prepareSubmitBvnAttestation`. */
+interface BvnAttestation {
+    readonly nullifier: `0x${string}`;
+    readonly limit: bigint;
+    readonly expiry: bigint;
+    readonly signature: `0x${string}`;
+    /** The wallet the attestation is bound to. */
+    readonly wallet?: string;
+}
+/** Params for `bvnOnboard`. */
+interface BvnOnboardParams {
+    /** The user's EVM wallet — bound into the attestation and credited on-chain. */
+    readonly walletAddress: Address;
+    /** Identity scope. Defaults to "identity". */
+    readonly scope?: BvnScope;
+}
+/** Params for `bvnSendOtp`. */
+interface BvnSendOtpParams {
+    readonly method: BvnOtpMethod;
+    /** Required only when `method` is "alternate_phone". */
+    readonly phoneNumber?: string;
+}
+/** The full BVN flow bound to a config — mirrors the `Zkkyc` client shape. */
+interface BvnFlow {
+    /** Step 1 — start a session bound to the wallet + tenant. */
+    onboard(params: BvnOnboardParams): ResultAsync<BvnSession, ZkkycError>;
+    /** Step 2 — submit the 11-digit BVN, get available OTP methods. */
+    submitBvn(session: BvnSession, bvn: string): ResultAsync<BvnMethod[], ZkkycError>;
+    /** Step 3 — request an OTP over the chosen channel. */
+    sendOtp(session: BvnSession, params: BvnSendOtpParams): ResultAsync<boolean, ZkkycError>;
+    /** Step 4 — confirm the OTP; returns approve/reject (never any PII). */
+    confirmOtp(session: BvnSession, otp: string): ResultAsync<BvnDecision, ZkkycError>;
+    /** Step 5 — mint the signed EIP-712 attestation for an approved session. */
+    getAttestation(session: BvnSession): ResultAsync<BvnAttestation, ZkkycError>;
+    /** Optional — the address the tenant contract must trust as its signer. */
+    getAttestor(): ResultAsync<{
+        address: string;
+    }, ZkkycError>;
+}
 
 /** Default Reclaim provider IDs for each social platform. */
 declare const DEFAULT_RECLAIM_PROVIDER_IDS: Record<SocialPlatform, string>;
@@ -301,6 +381,21 @@ declare const RECLAIM_APP_LINKS: {
 };
 /** Default tenant slug for the P2P reputation contract on the simple-kyc service. */
 declare const SIMPLE_KYC_DEFAULT_TENANT = "p2p-reputation";
+/** OTP delivery channels the BVN backend (Mono) exposes. */
+declare const BVN_OTP_METHODS: readonly ["email", "phone", "phone_1", "alternate_phone"];
+
+/**
+ * Drives the BVN (Nigerian Bank Verification Number) on-chain attestation flow.
+ *
+ * The SDK talks only to a backend proxy — the single party that holds the Mono
+ * secret + the EIP-712 attestor key. Every response uses the `{ ok, data }`
+ * envelope. On approval, `getAttestation` returns a signed attestation shaped
+ * for `zkkyc.prepareSubmitBvnAttestation`, which the app submits on-chain from
+ * the same wallet.
+ *
+ * Flow: onboard → submitBvn → sendOtp → confirmOtp → getAttestation.
+ */
+declare function createBvnFlow(config: BvnFlowConfig): BvnFlow;
 
 /**
  * Initializes a Reclaim social verification flow and returns a session. `init()`
@@ -333,4 +428,4 @@ declare function resumeSimpleKycFlow(args: {
 /** Initializes a ZK Passport verification flow and returns a session. */
 declare function createZkPassportFlow(params: ZkPassportFlowParams): ResultAsync<ZkPassportSession, ZkkycError>;
 
-export { type AnonAadharProofParams, DEFAULT_RECLAIM_PROVIDER_IDS, RECLAIM_APP_LINKS, type ReclaimFlowParams, type ReclaimProofResult, type ReclaimSession, type ReclaimStatus, SIMPLE_KYC_DEFAULT_TENANT, SOCIAL_PLATFORM_NAMES, type SimpleKycAttestation, type SimpleKycFlowParams, type SimpleKycSession, type SimpleKycStatus, type SimpleKycSubmitParams, type SocialPlatform, type SocialVerifyParams, ZK_PASSPORT_APP_LINKS, type ZkPassportFlowParams, type ZkPassportProofResult, type ZkPassportRegisterParams, type ZkPassportSession, type ZkPassportStatus, type Zkkyc, type ZkkycConfig, ZkkycError, type ZkkycErrorCode, createReclaimFlow, createSimpleKycFlow, createZkPassportFlow, createZkkyc, resumeSimpleKycFlow };
+export { type AnonAadharProofParams, BVN_OTP_METHODS, type BvnAttestation, type BvnDecision, type BvnFlow, type BvnFlowConfig, type BvnMethod, type BvnOnboardParams, type BvnOtpMethod, type BvnScope, type BvnSendOtpParams, type BvnSession, type BvnSubmitParams, DEFAULT_RECLAIM_PROVIDER_IDS, RECLAIM_APP_LINKS, type ReclaimFlowParams, type ReclaimProofResult, type ReclaimSession, type ReclaimStatus, SIMPLE_KYC_DEFAULT_TENANT, SOCIAL_PLATFORM_NAMES, type SimpleKycAttestation, type SimpleKycFlowParams, type SimpleKycSession, type SimpleKycStatus, type SimpleKycSubmitParams, type SocialPlatform, type SocialVerifyParams, ZK_PASSPORT_APP_LINKS, type ZkPassportFlowParams, type ZkPassportProofResult, type ZkPassportRegisterParams, type ZkPassportSession, type ZkPassportStatus, type Zkkyc, type ZkkycConfig, ZkkycError, type ZkkycErrorCode, createBvnFlow, createReclaimFlow, createSimpleKycFlow, createZkPassportFlow, createZkkyc, resumeSimpleKycFlow };

package/dist/zkkyc.mjs

@@ -142,6 +142,20 @@ var ZodSimpleKycSubmitParamsSchema = z2.object({
     message: "signature must be a hex string"
   })
 });
+var ZodBvnSubmitParamsSchema = z2.object({
+  /** Per-(tenant, identity) Sybil nullifier (bytes32 hex). */
+  nullifier: z2.string().refine((v) => /^0x[a-fA-F0-9]{64}$/.test(v), {
+    message: "nullifier must be a bytes32 hex string"
+  }),
+  /** Remaining limit in micro-USDC (part of the signed struct). */
+  limit: z2.bigint(),
+  /** Attestation expiry (unix seconds). */
+  expiry: z2.bigint(),
+  /** 65-byte secp256k1 signature (hex). */
+  signature: z2.string().refine((v) => /^0x[a-fA-F0-9]+$/.test(v), {
+    message: "signature must be a hex string"
+  })
+});
 
 // src/contracts/abis/index.ts
 import { erc20Abi } from "viem";
@@ -946,6 +960,38 @@ var reputationManagerAbi = [
     outputs: [{ internalType: "bool", name: "", type: "bool" }],
     stateMutability: "view",
     type: "function"
+  },
+  // ── BVN (Nigerian Bank Verification Number) attestation ─────────────────
+  { inputs: [], name: "BvnSignerNotSet", type: "error" },
+  { inputs: [], name: "BvnAttestationExpired", type: "error" },
+  { inputs: [], name: "BvnNullifierAlreadySpent", type: "error" },
+  { inputs: [], name: "BvnAlreadyVerified", type: "error" },
+  { inputs: [], name: "BvnInvalidSignature", type: "error" },
+  {
+    inputs: [
+      { internalType: "bytes32", name: "nullifier", type: "bytes32" },
+      { internalType: "uint256", name: "limit", type: "uint256" },
+      { internalType: "uint256", name: "expiry", type: "uint256" },
+      { internalType: "bytes", name: "signature", type: "bytes" }
+    ],
+    name: "submitBvnAttestation",
+    outputs: [],
+    stateMutability: "nonpayable",
+    type: "function"
+  },
+  {
+    inputs: [],
+    name: "bvnRp",
+    outputs: [{ internalType: "uint256", name: "", type: "uint256" }],
+    stateMutability: "view",
+    type: "function"
+  },
+  {
+    inputs: [{ internalType: "address", name: "", type: "address" }],
+    name: "bvnVerified",
+    outputs: [{ internalType: "bool", name: "", type: "bool" }],
+    stateMutability: "view",
+    type: "function"
   }
 ];
 
@@ -1062,6 +1108,33 @@ function prepareSubmitKycAttestation(reputationManagerAddress, params) {
     )()
   );
 }
+function prepareSubmitBvnAttestation(reputationManagerAddress, params) {
+  return validate(
+    ZodBvnSubmitParamsSchema,
+    params,
+    (message, cause, data) => new ZkkycError(message, { code: "VALIDATION_ERROR", cause, context: { params: data } })
+  ).andThen(
+    (validated) => Result.fromThrowable(
+      () => ({
+        to: reputationManagerAddress,
+        data: encodeFunctionData({
+          abi: ABIS.EXTERNAL.REPUTATION_MANAGER,
+          functionName: "submitBvnAttestation",
+          args: [
+            validated.nullifier,
+            validated.limit,
+            validated.expiry,
+            validated.signature
+          ]
+        })
+      }),
+      (error) => new ZkkycError("Failed to encode submitBvnAttestation", {
+        code: "ENCODE_ERROR",
+        cause: error
+      })
+    )()
+  );
+}
 function prepareZkPassportRegister(reputationManagerAddress, params) {
   return validate(
     ZodZkPassportRegisterParamsSchema,
@@ -1110,7 +1183,8 @@ function createZkkyc(config) {
     prepareSocialVerify: (params) => prepareSocialVerify(reputationManagerAddress, params),
     prepareSubmitAnonAadharProof: (params) => prepareSubmitAnonAadharProof(reputationManagerAddress, params),
     prepareZkPassportRegister: (params) => prepareZkPassportRegister(reputationManagerAddress, params),
-    prepareSubmitKycAttestation: (params) => prepareSubmitKycAttestation(reputationManagerAddress, params)
+    prepareSubmitKycAttestation: (params) => prepareSubmitKycAttestation(reputationManagerAddress, params),
+    prepareSubmitBvnAttestation: (params) => prepareSubmitBvnAttestation(reputationManagerAddress, params)
   };
 }
 
@@ -1131,9 +1205,149 @@ var RECLAIM_APP_LINKS = {
   ANDROID: "https://play.google.com/store/apps/details?id=org.reclaimprotocol.app"
 };
 var SIMPLE_KYC_DEFAULT_TENANT = "p2p-reputation";
+var BVN_OTP_METHODS = ["email", "phone", "phone_1", "alternate_phone"];
 
-// src/zkkyc/orchestrators/reclaim.ts
+// src/zkkyc/orchestrators/bvn.ts
 import { ResultAsync } from "neverthrow";
+function createBvnFlow(config) {
+  const { baseUrl, tenant } = config;
+  async function request(path, failureCode, init, parse) {
+    const response = await fetch(`${baseUrl}${path}`, init);
+    const body = await response.json().catch(() => null);
+    const envelope = body && typeof body === "object" ? body : {};
+    if (!response.ok || envelope.ok === false) {
+      const code = typeof envelope.error === "string" ? envelope.error : "request_failed";
+      const message = typeof envelope.message === "string" ? envelope.message : `BVN request failed (${response.status})`;
+      const isSessionExpired = response.status === 401 || code === "unauthorized";
+      throw new ZkkycError(message, {
+        code: isSessionExpired ? "BVN_SESSION_EXPIRED" : failureCode,
+        context: { status: response.status, backendError: code, path }
+      });
+    }
+    return parse(envelope.data);
+  }
+  function run(failureCode, fn) {
+    return ResultAsync.fromPromise(fn(), (error) => {
+      if (error instanceof ZkkycError) return error;
+      return new ZkkycError("BVN request failed", { code: failureCode, cause: error });
+    });
+  }
+  function authHeaders(token) {
+    return { "content-type": "application/json", "x-session-token": token };
+  }
+  return {
+    onboard(params) {
+      return run(
+        "BVN_ONBOARD_FAILED",
+        () => request(
+          "/v1/onboard",
+          "BVN_ONBOARD_FAILED",
+          {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({
+              tenant,
+              wallet: params.walletAddress,
+              scope: params.scope ?? "identity"
+            })
+          },
+          (data) => {
+            const d = data;
+            return { sessionId: d.session_id, sessionToken: d.session_token };
+          }
+        )
+      );
+    },
+    submitBvn(session, bvn) {
+      return run(
+        "BVN_SUBMIT_FAILED",
+        () => request(
+          `/v1/sessions/${session.sessionId}/bvn`,
+          "BVN_SUBMIT_FAILED",
+          {
+            method: "POST",
+            headers: authHeaders(session.sessionToken),
+            body: JSON.stringify({ bvn })
+          },
+          (data) => data.methods
+        )
+      );
+    },
+    sendOtp(session, params) {
+      return run(
+        "BVN_OTP_SEND_FAILED",
+        () => request(
+          `/v1/sessions/${session.sessionId}/otp`,
+          "BVN_OTP_SEND_FAILED",
+          {
+            method: "POST",
+            headers: authHeaders(session.sessionToken),
+            body: JSON.stringify({
+              method: params.method,
+              ...params.method === "alternate_phone" && params.phoneNumber ? { phone_number: params.phoneNumber } : {}
+            })
+          },
+          (data) => data.sent
+        )
+      );
+    },
+    confirmOtp(session, otp) {
+      return run(
+        "BVN_OTP_CONFIRM_FAILED",
+        () => request(
+          `/v1/sessions/${session.sessionId}/otp/confirm`,
+          "BVN_OTP_CONFIRM_FAILED",
+          {
+            method: "POST",
+            headers: authHeaders(session.sessionToken),
+            body: JSON.stringify({ otp })
+          },
+          (data) => {
+            const d = data;
+            return { decision: d.decision, reason: d.reason };
+          }
+        )
+      );
+    },
+    getAttestation(session) {
+      return run(
+        "BVN_ATTESTATION_FAILED",
+        () => request(
+          `/v1/sessions/${session.sessionId}/attestation`,
+          "BVN_ATTESTATION_FAILED",
+          {
+            method: "POST",
+            headers: { "x-session-token": session.sessionToken }
+          },
+          (data) => {
+            const d = data;
+            return {
+              nullifier: d.message.nullifier,
+              limit: BigInt(d.message.limit),
+              expiry: BigInt(d.message.expiry),
+              signature: d.signature,
+              wallet: d.message.wallet
+            };
+          }
+        )
+      );
+    },
+    getAttestor() {
+      return run(
+        "BVN_ATTESTATION_FAILED",
+        () => request(
+          "/v1/attestor",
+          "BVN_ATTESTATION_FAILED",
+          void 0,
+          (data) => data
+        )
+      );
+    }
+  };
+}
+
+// src/zkkyc/orchestrators/reclaim.ts
+import { ResultAsync as ResultAsync2 } from "neverthrow";
 
 // src/zkkyc/orchestrators/types.ts
 var SOCIAL_PLATFORM_NAMES = {
@@ -1148,7 +1362,7 @@ var SOCIAL_PLATFORM_NAMES = {
 // src/zkkyc/orchestrators/reclaim.ts
 var RECLAIM_SESSION_API = "https://api.reclaimprotocol.org/api/sdk/session";
 function createReclaimFlow(params) {
-  return ResultAsync.fromPromise(
+  return ResultAsync2.fromPromise(
     (async () => {
       const mod = await import("@reclaimprotocol/js-sdk").catch(() => {
         throw new ZkkycError(
@@ -1252,7 +1466,7 @@ function createReclaimFlow(params) {
       const session = {
         sessionId,
         requestUrl,
-        start: () => ResultAsync.fromPromise(pollForProof(), (error) => {
+        start: () => ResultAsync2.fromPromise(pollForProof(), (error) => {
           if (error instanceof ZkkycError) return error;
           return new ZkkycError("Reclaim verification flow failed", {
             code: "RECLAIM_INIT_FAILED",
@@ -1276,10 +1490,10 @@ function createReclaimFlow(params) {
 }
 
 // src/zkkyc/orchestrators/simple-kyc.ts
-import { ResultAsync as ResultAsync2 } from "neverthrow";
+import { ResultAsync as ResultAsync3 } from "neverthrow";
 function createSimpleKycFlow(params) {
   const { baseUrl, walletAddress, tenant, redirectUrl, country, state, onStatus } = params;
-  return ResultAsync2.fromPromise(
+  return ResultAsync3.fromPromise(
     (async () => {
       const res = await fetch(`${baseUrl}/v1/widget/public-sessions`, {
         method: "POST",
@@ -1322,7 +1536,7 @@ function createSimpleKycFlow(params) {
   );
 }
 function resumeSimpleKycFlow(args) {
-  return ResultAsync2.fromPromise(
+  return ResultAsync3.fromPromise(
     (async () => {
       const res = await fetch(`${args.baseUrl}/v1/widget/attestation`, {
         method: "POST",
@@ -1356,9 +1570,9 @@ function resumeSimpleKycFlow(args) {
 }
 
 // src/zkkyc/orchestrators/zk-passport.ts
-import { ResultAsync as ResultAsync3 } from "neverthrow";
+import { ResultAsync as ResultAsync4 } from "neverthrow";
 function createZkPassportFlow(params) {
-  return ResultAsync3.fromPromise(
+  return ResultAsync4.fromPromise(
     (async () => {
       const mod = await import("@zkpassport/sdk").catch(() => {
         throw new ZkkycError(
@@ -1454,7 +1668,7 @@ function createZkPassportFlow(params) {
       });
       const session = {
         url,
-        result: ResultAsync3.fromPromise(resultPromise, (error) => {
+        result: ResultAsync4.fromPromise(resultPromise, (error) => {
           if (error instanceof ZkkycError) return error;
           return new ZkkycError("ZK Passport flow failed", {
             code: "ZK_PASSPORT_VERIFICATION_FAILED",
@@ -1477,12 +1691,14 @@ function createZkPassportFlow(params) {
   );
 }
 export {
+  BVN_OTP_METHODS,
   DEFAULT_RECLAIM_PROVIDER_IDS,
   RECLAIM_APP_LINKS,
   SIMPLE_KYC_DEFAULT_TENANT,
   SOCIAL_PLATFORM_NAMES,
   ZK_PASSPORT_APP_LINKS,
   ZkkycError,
+  createBvnFlow,
   createReclaimFlow,
   createSimpleKycFlow,
   createZkPassportFlow,