@provex/proving 1.8.0 → 1.9.0

package/dist/index.d.cts

@@ -1,9 +1,82 @@
-export { b as BuyerTeeIntent, B as BuyerTeeProof, E as ExtensionEnclaveAdapterConfig, P as PeerClient, R as RequestBuyerTeeAttestationArgs, a as asBuyerTeeProof, c as createExtensionEnclaveAdapter, r as requestBuyerTeeAttestation } from './extensionEnclave-BjxXsuaj.cjs';
-export { c as CaptureAdapter, C as CaptureCandidate, b as CaptureHandle, a as CaptureRequest, E as EnclaveCaptureUnavailable, M as ManualSelectionRequired, P as ProvingIntent, d as ProvingRequest, e as ProvingState, S as SelectTransaction, V as VerifiedAttestation } from './types-ByiBb7AN.cjs';
+import { Hex } from 'viem';
 import { V3AttestationResponseObject } from '@provex/utils';
+import { S as SelectTransaction, C as CaptureCandidate, a as CaptureRequest } from './useProving-h4RtlSEU.cjs';
+export { c as CaptureAdapter, b as CaptureHandle, E as EnclaveCaptureUnavailable, M as ManualSelectionRequired, f as ProvingClient, P as ProvingIntent, d as ProvingRequest, e as ProvingState, U as UseProvingOptions, g as UseProvingReturn, V as VerifiedAttestation, u as useProving } from './useProving-h4RtlSEU.cjs';
 import { TokenInfo } from '@provex/utils/tokens';
-export { ProvingClient, UseProvingOptions, UseProvingReturn, useProving } from './useProving.cjs';
-import 'viem';
+import { SubProviderKey, ProviderKey } from '@provex/utils/payment';
+
+/**
+ * @fileoverview Buyer trusted-execution attestation client.
+ *
+ * In PeerAuth extension 0.5.2+, capture produces a buyerTee proof —
+ * `{ proofType: 'buyerTee', encryptedSessionMaterial, params }` — where the
+ * bank session is already encrypted toward the enclave (cookies never reach
+ * our page in plaintext). Instead of re-signing a Reclaim proof through our
+ * gate, we hand that material to zkp2p's trusted-execution attestation
+ * service, which verifies the payment inside an Amazon Web Services Nitro
+ * enclave and signs the attestation directly.
+ *
+ * The response `responseObject` is the same `V3AttestationResponseObject`
+ * shape our gate returns, so it flows through the existing
+ * `encodeV3PaymentProof` path unchanged.
+ *
+ * Moved verbatim from `@provex/ui` (packages/ui/src/lib/buyerTeeAttestation.ts)
+ * with the base URL changed from a `@provex/ui` config import to an injected
+ * `attestationBaseUrl` argument so this package carries no `@provex/ui` dep.
+ */
+
+/**
+ * Runtime shape of a buyerTee proof emitted by the PeerAuth extension.
+ * Narrow with {@link asBuyerTeeProof} before use.
+ */
+interface BuyerTeeProof {
+    proofType: 'buyerTee';
+    /** Session material already encrypted toward the enclave (opaque to us). */
+    encryptedSessionMaterial: string;
+    /** Platform-specific params, e.g. Revolut `{ index }`, Chase `{ index }`. */
+    params: unknown;
+    actionType?: string;
+    actionPlatform?: string;
+}
+/**
+ * Narrow an extension proof to a buyerTee proof, or null when it is the
+ * legacy Reclaim shape (or malformed).
+ */
+declare function asBuyerTeeProof(proof: unknown): BuyerTeeProof | null;
+/** Intent details the enclave binds the attestation to. */
+interface BuyerTeeIntent {
+    intentHash: Hex;
+    amount: string;
+    timestampMs: string;
+    paymentMethod: Hex;
+    fiatCurrency: Hex;
+    conversionRate: string;
+    payeeDetails: Hex;
+    timestampBufferMs?: string;
+}
+interface RequestBuyerTeeAttestationArgs {
+    /** Gate/attestation origin (was `gateForwarderBaseUrl` in @provex/ui). */
+    attestationBaseUrl: string;
+    /** Extension platform / bank key, e.g. `revolut`, `chase`. */
+    platform: string;
+    /** Action type, e.g. `transfer_revolut`, `transfer_zelle`. */
+    actionType: string;
+    /** Encrypted session material from the buyerTee capture. */
+    encryptedSessionMaterial: string;
+    /** Platform params from the capture (e.g. `{ index }`). */
+    params: unknown;
+    /** PulseChain UnifiedPaymentVerifier the gate re-signs the attestation for. */
+    verifyingContract: string;
+    intent: BuyerTeeIntent;
+}
+/**
+ * Verify a buyer payment via the gate. The gate proxies the encrypted capture
+ * to zkp2p's enclave, then re-signs the resulting attestation for PulseChain
+ * with our witness key — the enclave itself refuses to sign for 369.
+ *
+ * Throws with the gate's error text on a non-2xx response.
+ */
+declare function requestBuyerTeeAttestation(args: RequestBuyerTeeAttestationArgs): Promise<V3AttestationResponseObject>;
 
 /**
  * @fileoverview Pure proving derivations moved from @provex/ui
@@ -46,4 +119,83 @@ declare function computePartialFulfillment({ attestation, intentAmount, conversi
     feeBps: bigint | null | undefined;
 }): PartialFulfillment | null;
 
-export { type PartialFulfillment, computePartialFulfillment };
+interface ManualTransactionSelect {
+    /**
+     * Resolver injected into useProving — the enclave adapter calls this when
+     * auto-match of the bank transaction fails (extensionEnclave.ts:189-190).
+     */
+    selectTransaction: SelectTransaction;
+    /**
+     * Non-null while the adapter is awaiting a pick; drives the
+     * TransactionSelector rendered inside GenerateProofStep.
+     */
+    candidates: CaptureCandidate[] | null;
+    /**
+     * Called by TransactionSelector with the chosen candidate's originalIndex.
+     * Resolves the pending promise and resets candidates to null.
+     */
+    pick: (originalIndex: number) => void;
+}
+/**
+ * Bridge the framework-agnostic {@link SelectTransaction} resolver the enclave
+ * adapter expects (extensionEnclave.ts:189-190) to React state the
+ * GenerateProofStep TransactionSelector can render.
+ *
+ * The adapter awaits the promise returned by `selectTransaction`; the user's
+ * call to `pick` resolves it with the chosen `originalIndex`.
+ *
+ * `useRef` is justified here exclusively for holding the pending promise
+ * resolver across renders without triggering a re-render cycle — the single
+ * sanctioned use per the react-state-preferences memory.
+ */
+declare function useManualTransactionSelect(): ManualTransactionSelect;
+
+/**
+ * @fileoverview Pure builder that assembles a {@link CaptureRequest} from
+ * resolved order data.
+ *
+ * Hoisted verbatim from the intent-assembly block in SubmitStep.tsx:312-342
+ * so the mapping is unit-tested in isolation and reusable by the proving shell.
+ *
+ * Monetary values stay bigint in base units through the entire call stack;
+ * this is the single boundary where they are stringified for the attestor
+ * wire format.
+ */
+
+/** All resolved order fields required to build a {@link CaptureRequest}. */
+interface BuildCaptureRequestInput {
+    /** On-chain intent hash. */
+    intentHash: Hex;
+    /** Chain the intent lives on. */
+    chainId: number;
+    /** Bank-level sub-provider, e.g. `'zelle-chase'`, or `null` for top-level providers. */
+    subProvider: SubProviderKey | null;
+    /** Provider key from the deposit. May itself be a sub-provider key (contains a dash). */
+    providerKey: ProviderKey | SubProviderKey;
+    /** Address of the UnifiedPaymentVerifier contract for this chain. */
+    verifyingContract: Hex;
+    /** payeeDetailsHash from the matched verifier record. */
+    payeeDetailsHash: Hex;
+    /** Settlement token for this intent (used by the adapter for amount conversion). */
+    token: TokenInfo;
+    /** Resolved intent fields, monetary values in bigint base units. */
+    intent: {
+        amount: bigint;
+        timestamp: bigint;
+        paymentMethod: Hex | undefined;
+        fiatCurrency: Hex;
+        conversionRate: bigint;
+    };
+}
+/**
+ * Build the {@link CaptureRequest} from resolved order data.
+ *
+ * Pure hoist of the intent-assembly block in SubmitStep.tsx:312-342.
+ * No side effects, no I/O, no React. Safe to call in any environment.
+ *
+ * @param input - All resolved order fields needed to build the request.
+ * @returns A fully-formed {@link CaptureRequest} ready for a {@link CaptureAdapter}.
+ */
+declare function buildCaptureRequest(input: BuildCaptureRequestInput): CaptureRequest;
+
+export { type BuildCaptureRequestInput, type BuyerTeeIntent, type BuyerTeeProof, CaptureCandidate, CaptureRequest, type ManualTransactionSelect, type PartialFulfillment, type RequestBuyerTeeAttestationArgs, SelectTransaction, asBuyerTeeProof, buildCaptureRequest, computePartialFulfillment, requestBuyerTeeAttestation, useManualTransactionSelect };

package/dist/index.d.ts

@@ -1,9 +1,82 @@
-export { b as BuyerTeeIntent, B as BuyerTeeProof, E as ExtensionEnclaveAdapterConfig, P as PeerClient, R as RequestBuyerTeeAttestationArgs, a as asBuyerTeeProof, c as createExtensionEnclaveAdapter, r as requestBuyerTeeAttestation } from './extensionEnclave-DLCjCWxT.js';
-export { c as CaptureAdapter, C as CaptureCandidate, b as CaptureHandle, a as CaptureRequest, E as EnclaveCaptureUnavailable, M as ManualSelectionRequired, P as ProvingIntent, d as ProvingRequest, e as ProvingState, S as SelectTransaction, V as VerifiedAttestation } from './types-ByiBb7AN.js';
+import { Hex } from 'viem';
 import { V3AttestationResponseObject } from '@provex/utils';
+import { S as SelectTransaction, C as CaptureCandidate, a as CaptureRequest } from './useProving-h4RtlSEU.js';
+export { c as CaptureAdapter, b as CaptureHandle, E as EnclaveCaptureUnavailable, M as ManualSelectionRequired, f as ProvingClient, P as ProvingIntent, d as ProvingRequest, e as ProvingState, U as UseProvingOptions, g as UseProvingReturn, V as VerifiedAttestation, u as useProving } from './useProving-h4RtlSEU.js';
 import { TokenInfo } from '@provex/utils/tokens';
-export { ProvingClient, UseProvingOptions, UseProvingReturn, useProving } from './useProving.js';
-import 'viem';
+import { SubProviderKey, ProviderKey } from '@provex/utils/payment';
+
+/**
+ * @fileoverview Buyer trusted-execution attestation client.
+ *
+ * In PeerAuth extension 0.5.2+, capture produces a buyerTee proof —
+ * `{ proofType: 'buyerTee', encryptedSessionMaterial, params }` — where the
+ * bank session is already encrypted toward the enclave (cookies never reach
+ * our page in plaintext). Instead of re-signing a Reclaim proof through our
+ * gate, we hand that material to zkp2p's trusted-execution attestation
+ * service, which verifies the payment inside an Amazon Web Services Nitro
+ * enclave and signs the attestation directly.
+ *
+ * The response `responseObject` is the same `V3AttestationResponseObject`
+ * shape our gate returns, so it flows through the existing
+ * `encodeV3PaymentProof` path unchanged.
+ *
+ * Moved verbatim from `@provex/ui` (packages/ui/src/lib/buyerTeeAttestation.ts)
+ * with the base URL changed from a `@provex/ui` config import to an injected
+ * `attestationBaseUrl` argument so this package carries no `@provex/ui` dep.
+ */
+
+/**
+ * Runtime shape of a buyerTee proof emitted by the PeerAuth extension.
+ * Narrow with {@link asBuyerTeeProof} before use.
+ */
+interface BuyerTeeProof {
+    proofType: 'buyerTee';
+    /** Session material already encrypted toward the enclave (opaque to us). */
+    encryptedSessionMaterial: string;
+    /** Platform-specific params, e.g. Revolut `{ index }`, Chase `{ index }`. */
+    params: unknown;
+    actionType?: string;
+    actionPlatform?: string;
+}
+/**
+ * Narrow an extension proof to a buyerTee proof, or null when it is the
+ * legacy Reclaim shape (or malformed).
+ */
+declare function asBuyerTeeProof(proof: unknown): BuyerTeeProof | null;
+/** Intent details the enclave binds the attestation to. */
+interface BuyerTeeIntent {
+    intentHash: Hex;
+    amount: string;
+    timestampMs: string;
+    paymentMethod: Hex;
+    fiatCurrency: Hex;
+    conversionRate: string;
+    payeeDetails: Hex;
+    timestampBufferMs?: string;
+}
+interface RequestBuyerTeeAttestationArgs {
+    /** Gate/attestation origin (was `gateForwarderBaseUrl` in @provex/ui). */
+    attestationBaseUrl: string;
+    /** Extension platform / bank key, e.g. `revolut`, `chase`. */
+    platform: string;
+    /** Action type, e.g. `transfer_revolut`, `transfer_zelle`. */
+    actionType: string;
+    /** Encrypted session material from the buyerTee capture. */
+    encryptedSessionMaterial: string;
+    /** Platform params from the capture (e.g. `{ index }`). */
+    params: unknown;
+    /** PulseChain UnifiedPaymentVerifier the gate re-signs the attestation for. */
+    verifyingContract: string;
+    intent: BuyerTeeIntent;
+}
+/**
+ * Verify a buyer payment via the gate. The gate proxies the encrypted capture
+ * to zkp2p's enclave, then re-signs the resulting attestation for PulseChain
+ * with our witness key — the enclave itself refuses to sign for 369.
+ *
+ * Throws with the gate's error text on a non-2xx response.
+ */
+declare function requestBuyerTeeAttestation(args: RequestBuyerTeeAttestationArgs): Promise<V3AttestationResponseObject>;
 
 /**
  * @fileoverview Pure proving derivations moved from @provex/ui
@@ -46,4 +119,83 @@ declare function computePartialFulfillment({ attestation, intentAmount, conversi
     feeBps: bigint | null | undefined;
 }): PartialFulfillment | null;
 
-export { type PartialFulfillment, computePartialFulfillment };
+interface ManualTransactionSelect {
+    /**
+     * Resolver injected into useProving — the enclave adapter calls this when
+     * auto-match of the bank transaction fails (extensionEnclave.ts:189-190).
+     */
+    selectTransaction: SelectTransaction;
+    /**
+     * Non-null while the adapter is awaiting a pick; drives the
+     * TransactionSelector rendered inside GenerateProofStep.
+     */
+    candidates: CaptureCandidate[] | null;
+    /**
+     * Called by TransactionSelector with the chosen candidate's originalIndex.
+     * Resolves the pending promise and resets candidates to null.
+     */
+    pick: (originalIndex: number) => void;
+}
+/**
+ * Bridge the framework-agnostic {@link SelectTransaction} resolver the enclave
+ * adapter expects (extensionEnclave.ts:189-190) to React state the
+ * GenerateProofStep TransactionSelector can render.
+ *
+ * The adapter awaits the promise returned by `selectTransaction`; the user's
+ * call to `pick` resolves it with the chosen `originalIndex`.
+ *
+ * `useRef` is justified here exclusively for holding the pending promise
+ * resolver across renders without triggering a re-render cycle — the single
+ * sanctioned use per the react-state-preferences memory.
+ */
+declare function useManualTransactionSelect(): ManualTransactionSelect;
+
+/**
+ * @fileoverview Pure builder that assembles a {@link CaptureRequest} from
+ * resolved order data.
+ *
+ * Hoisted verbatim from the intent-assembly block in SubmitStep.tsx:312-342
+ * so the mapping is unit-tested in isolation and reusable by the proving shell.
+ *
+ * Monetary values stay bigint in base units through the entire call stack;
+ * this is the single boundary where they are stringified for the attestor
+ * wire format.
+ */
+
+/** All resolved order fields required to build a {@link CaptureRequest}. */
+interface BuildCaptureRequestInput {
+    /** On-chain intent hash. */
+    intentHash: Hex;
+    /** Chain the intent lives on. */
+    chainId: number;
+    /** Bank-level sub-provider, e.g. `'zelle-chase'`, or `null` for top-level providers. */
+    subProvider: SubProviderKey | null;
+    /** Provider key from the deposit. May itself be a sub-provider key (contains a dash). */
+    providerKey: ProviderKey | SubProviderKey;
+    /** Address of the UnifiedPaymentVerifier contract for this chain. */
+    verifyingContract: Hex;
+    /** payeeDetailsHash from the matched verifier record. */
+    payeeDetailsHash: Hex;
+    /** Settlement token for this intent (used by the adapter for amount conversion). */
+    token: TokenInfo;
+    /** Resolved intent fields, monetary values in bigint base units. */
+    intent: {
+        amount: bigint;
+        timestamp: bigint;
+        paymentMethod: Hex | undefined;
+        fiatCurrency: Hex;
+        conversionRate: bigint;
+    };
+}
+/**
+ * Build the {@link CaptureRequest} from resolved order data.
+ *
+ * Pure hoist of the intent-assembly block in SubmitStep.tsx:312-342.
+ * No side effects, no I/O, no React. Safe to call in any environment.
+ *
+ * @param input - All resolved order fields needed to build the request.
+ * @returns A fully-formed {@link CaptureRequest} ready for a {@link CaptureAdapter}.
+ */
+declare function buildCaptureRequest(input: BuildCaptureRequestInput): CaptureRequest;
+
+export { type BuildCaptureRequestInput, type BuyerTeeIntent, type BuyerTeeProof, CaptureCandidate, CaptureRequest, type ManualTransactionSelect, type PartialFulfillment, type RequestBuyerTeeAttestationArgs, SelectTransaction, asBuyerTeeProof, buildCaptureRequest, computePartialFulfillment, requestBuyerTeeAttestation, useManualTransactionSelect };

package/dist/index.js

@@ -1,9 +1,43 @@
-export { useProving } from './chunk-LFDS3XGK.js';
-export { EnclaveCaptureUnavailable, ManualSelectionRequired, asBuyerTeeProof, createExtensionEnclaveAdapter, requestBuyerTeeAttestation } from './chunk-QLPNUQDA.js';
+export { EnclaveCaptureUnavailable, ManualSelectionRequired, useProving } from './chunk-OSBIXUFA.js';
 import { formatUnits } from '@provex/utils/units';
 import { convertTokenInputToCurrency } from '@provex/utils/conversionRates';
 import { calculateNetAmount, calculateFeeAmount } from '@provex/utils/fees';
+import { useState, useRef, useCallback } from 'react';
+import { getExtensionPlatform } from '@provex/utils/payment';
 
+// src/buyerTeeAttestation.ts
+function asBuyerTeeProof(proof) {
+  if (!proof || typeof proof !== "object") return null;
+  const candidate = proof;
+  if (candidate.proofType !== "buyerTee") return null;
+  if (typeof candidate.encryptedSessionMaterial !== "string") return null;
+  return candidate;
+}
+async function requestBuyerTeeAttestation(args) {
+  const url = `${args.attestationBaseUrl}/api/v0/attestation/buyer-verify/${encodeURIComponent(args.platform)}/${encodeURIComponent(args.actionType)}`;
+  const response = await fetch(url, {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: JSON.stringify({
+      encryptedSessionMaterial: args.encryptedSessionMaterial,
+      params: args.params,
+      verifyingContract: args.verifyingContract,
+      intent: args.intent
+    })
+  });
+  if (!response.ok) {
+    const detail = await response.text().catch(() => "");
+    throw new Error(
+      `Trusted-execution attestation failed (${response.status}): ${detail || response.statusText}`
+    );
+  }
+  const json = await response.json();
+  const responseObject = json.responseObject ?? json;
+  if (!responseObject?.typedDataValue || !responseObject?.signature) {
+    throw new Error("Trusted-execution attestation response missing typedDataValue/signature");
+  }
+  return responseObject;
+}
 function computePartialFulfillment({
   attestation,
   intentAmount,
@@ -45,7 +79,45 @@ function computePartialFulfillment({
     protocolFeeDisplay: protocolFee > 0n ? formatTokenDisplay(protocolFee) : null
   };
 }
+function useManualTransactionSelect() {
+  const [candidates, setCandidates] = useState(null);
+  const resolveRef = useRef(null);
+  const selectTransaction = useCallback((next) => {
+    return new Promise((resolve) => {
+      resolveRef.current = resolve;
+      setCandidates(next);
+    });
+  }, []);
+  const pick = useCallback((originalIndex) => {
+    resolveRef.current?.(originalIndex);
+    resolveRef.current = null;
+    setCandidates(null);
+  }, []);
+  return { selectTransaction, candidates, pick };
+}
+function buildCaptureRequest(input) {
+  const parentProvider = input.providerKey.includes("-") ? input.providerKey.split("-")[0] : input.providerKey;
+  const platform = getExtensionPlatform(input.subProvider ?? input.providerKey);
+  return {
+    provider: input.providerKey,
+    platform,
+    actionType: `transfer_${parentProvider}`,
+    verifyingContract: input.verifyingContract,
+    chainId: input.chainId,
+    token: input.token,
+    intent: {
+      intentHash: input.intentHash,
+      amount: input.intent.amount.toString(),
+      timestampMs: (input.intent.timestamp * 1000n).toString(),
+      paymentMethod: input.intent.paymentMethod ?? "0x",
+      fiatCurrency: input.intent.fiatCurrency,
+      conversionRate: input.intent.conversionRate.toString(),
+      payeeDetails: input.payeeDetailsHash,
+      timestampBufferMs: "300000"
+    }
+  };
+}
 
-export { computePartialFulfillment };
+export { asBuyerTeeProof, buildCaptureRequest, computePartialFulfillment, requestBuyerTeeAttestation, useManualTransactionSelect };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/derivations.ts"],"names":[],"mappings":";;;;;;AAwCO,SAAS,yBAAA,CAA0B;AAAA,EACxC,WAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,EAM8B;AAC5B,EAAA,IAAI,CAAC,eAAe,CAAC,YAAA,IAAgB,CAAC,cAAA,IAAkB,CAAC,WAAW,OAAO,IAAA;AAC3E,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,WAAA,CAAY,cAAA,CAAe,aAAa,CAAA;AACrE,EAAA,IAAI,aAAA,IAAiB,cAAc,OAAO,IAAA;AAE1C,EAAA,MAAM,kBAAkB,YAAA,GAAe,aAAA;AACvC,EAAA,MAAM,kBAAkB,MAAA,IAAU,EAAA;AAClC,EAAA,MAAM,UAAA,GACJ,eAAA,GAAkB,EAAA,GACd,kBAAA,CAAmB,EAAE,aAAa,aAAA,EAAe,MAAA,EAAQ,eAAA,EAAiB,CAAA,GAC1E,aAAA;AACN,EAAA,MAAM,WAAA,GACJ,eAAA,GAAkB,EAAA,GACd,kBAAA,CAAmB,EAAE,QAAQ,aAAA,EAAe,MAAA,EAAQ,eAAA,EAAiB,CAAA,GACrE,EAAA;AAEN,EAAA,MAAM,oBAAoB,2BAAA,CAA4B;AAAA,IACpD,KAAA,EAAO,SAAA;AAAA,IACP,YAAA,EAAc,YAAA;AAAA,IACd,IAAA,EAAM;AAAA,GACP,CAAA;AACD,EAAA,MAAM,kBAAkB,2BAAA,CAA4B;AAAA,IAClD,KAAA,EAAO,SAAA;AAAA,IACP,YAAA,EAAc,aAAA;AAAA,IACd,IAAA,EAAM;AAAA,GACP,CAAA;AAED,EAAA,MAAM,kBAAA,GAAqB,CAAC,KAAA,KAC1B,WAAA,CAAY,KAAA,EAAO;AAAA,IACjB,UAAU,SAAA,CAAU,QAAA;AAAA,IACpB,gBAAA,EAAkB,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACd,CAAA;AAEH,EAAA,OAAO;AAAA,IACL,aAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA,eAAA;AAAA,IACA,qBAAA,EAAuB,mBAAmB,iBAAiB,CAAA;AAAA,IAC3D,mBAAA,EAAqB,mBAAmB,eAAe,CAAA;AAAA,IACvD,iBAAA,EAAmB,mBAAmB,UAAU,CAAA;AAAA,IAChD,sBAAA,EAAwB,mBAAmB,eAAe,CAAA;AAAA,IAC1D,kBAAA,EAAoB,WAAA,GAAc,EAAA,GAAK,kBAAA,CAAmB,WAAW,CAAA,GAAI;AAAA,GAC3E;AACF","file":"index.js","sourcesContent":["/**\n * @fileoverview Pure proving derivations moved from @provex/ui\n * (packages/ui/src/components/UnifiedBuy/ProofPanel/submitStepDerivations.ts).\n *\n * Bigint throughout — see the `money-values-stay-bigint-until-display` rule.\n * The only string conversions happen at the formatter boundary (formatUnits),\n * which is the display layer.\n */\n\nimport type { V3AttestationResponseObject } from '@provex/utils'\nimport type { TokenInfo } from '@provex/utils/tokens'\nimport { formatUnits } from '@provex/utils/units'\nimport { convertTokenInputToCurrency } from '@provex/utils/conversionRates'\nimport { calculateFeeAmount, calculateNetAmount } from '@provex/utils/fees'\n\nexport interface PartialFulfillment {\n  /** Gross USDC the gate authorized for release (typedData.releaseAmount). */\n  grossReleased: bigint\n  /** Net USDC the buyer actually receives (grossReleased − fee). */\n  netToBuyer: bigint\n  /** Protocol fee in USDC base units. 0n when no fee applies. */\n  protocolFee: bigint\n  /** Locked USDC returned to the maker (intent.amount − grossReleased). */\n  returnedToMaker: bigint\n  contractedFiatDisplay: string\n  attestedFiatDisplay: string\n  netToBuyerDisplay: string\n  returnedToMakerDisplay: string\n  /** null when protocolFee === 0n so the caller can skip rendering the row. */\n  protocolFeeDisplay: string | null\n}\n\n/**\n * Partial-fulfilment breakdown derived from the verified attestation.\n *\n * Returns `null` when:\n *   - attestation isn't present (nothing to compare)\n *   - releaseAmount >= intent.amount (full settlement, no partial story)\n *   - intent/tokenInfo missing (defensive)\n */\nexport function computePartialFulfillment({\n  attestation,\n  intentAmount,\n  conversionRate,\n  tokenInfo,\n  feeBps,\n}: {\n  attestation: V3AttestationResponseObject | null\n  intentAmount: bigint | null | undefined\n  conversionRate: bigint | null | undefined\n  tokenInfo: TokenInfo | null\n  feeBps: bigint | null | undefined\n}): PartialFulfillment | null {\n  if (!attestation || !intentAmount || !conversionRate || !tokenInfo) return null\n  const grossReleased = BigInt(attestation.typedDataValue.releaseAmount)\n  if (grossReleased >= intentAmount) return null\n\n  const returnedToMaker = intentAmount - grossReleased\n  const effectiveFeeBps = feeBps ?? 0n\n  const netToBuyer =\n    effectiveFeeBps > 0n\n      ? calculateNetAmount({ grossAmount: grossReleased, feeBps: effectiveFeeBps })\n      : grossReleased\n  const protocolFee =\n    effectiveFeeBps > 0n\n      ? calculateFeeAmount({ amount: grossReleased, feeBps: effectiveFeeBps })\n      : 0n\n\n  const contractedFiatRaw = convertTokenInputToCurrency({\n    token: tokenInfo,\n    amountOutInt: intentAmount,\n    rate: conversionRate,\n  })\n  const attestedFiatRaw = convertTokenInputToCurrency({\n    token: tokenInfo,\n    amountOutInt: grossReleased,\n    rate: conversionRate,\n  })\n\n  const formatTokenDisplay = (value: bigint): string =>\n    formatUnits(value, {\n      decimals: tokenInfo.decimals,\n      truncateDecimals: 2,\n      padDecimals: 2,\n    })\n\n  return {\n    grossReleased,\n    netToBuyer,\n    protocolFee,\n    returnedToMaker,\n    contractedFiatDisplay: formatTokenDisplay(contractedFiatRaw),\n    attestedFiatDisplay: formatTokenDisplay(attestedFiatRaw),\n    netToBuyerDisplay: formatTokenDisplay(netToBuyer),\n    returnedToMakerDisplay: formatTokenDisplay(returnedToMaker),\n    protocolFeeDisplay: protocolFee > 0n ? formatTokenDisplay(protocolFee) : null,\n  }\n}\n"]}
+{"version":3,"sources":["../src/buyerTeeAttestation.ts","../src/derivations.ts","../src/useManualTransactionSelect.ts","../src/buildCaptureRequest.ts"],"names":[],"mappings":";;;;;;;;AAyCO,SAAS,gBAAgB,KAAA,EAAsC;AACpE,EAAA,IAAI,CAAC,KAAA,IAAS,OAAO,KAAA,KAAU,UAAU,OAAO,IAAA;AAChD,EAAA,MAAM,SAAA,GAAY,KAAA;AAClB,EAAA,IAAI,SAAA,CAAU,SAAA,KAAc,UAAA,EAAY,OAAO,IAAA;AAC/C,EAAA,IAAI,OAAO,SAAA,CAAU,wBAAA,KAA6B,QAAA,EAAU,OAAO,IAAA;AACnE,EAAA,OAAO,SAAA;AACT;AAqCA,eAAsB,2BACpB,IAAA,EACsC;AACtC,EAAA,MAAM,GAAA,GAAM,CAAA,EAAG,IAAA,CAAK,kBAAkB,CAAA,iCAAA,EAAoC,kBAAA,CAAmB,IAAA,CAAK,QAAQ,CAAC,CAAA,CAAA,EAAI,kBAAA,CAAmB,IAAA,CAAK,UAAU,CAAC,CAAA,CAAA;AAElJ,EAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK;AAAA,IAChC,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAmB;AAAA,IAC9C,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,MACnB,0BAA0B,IAAA,CAAK,wBAAA;AAAA,MAC/B,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,mBAAmB,IAAA,CAAK,iBAAA;AAAA,MACxB,QAAQ,IAAA,CAAK;AAAA,KACd;AAAA,GACF,CAAA;AAED,EAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,IAAA,MAAM,SAAS,MAAM,QAAA,CAAS,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AACnD,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,yCAAyC,QAAA,CAAS,MAAM,CAAA,GAAA,EAAM,MAAA,IAAU,SAAS,UAAU,CAAA;AAAA,KAC7F;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAQ,MAAM,QAAA,CAAS,IAAA,EAAK;AAGlC,EAAA,MAAM,cAAA,GACH,KAA0D,cAAA,IAC1D,IAAA;AAEH,EAAA,IAAI,CAAC,cAAA,EAAgB,cAAA,IAAkB,CAAC,gBAAgB,SAAA,EAAW;AACjE,IAAA,MAAM,IAAI,MAAM,yEAAyE,CAAA;AAAA,EAC3F;AACA,EAAA,OAAO,cAAA;AACT;AC9EO,SAAS,yBAAA,CAA0B;AAAA,EACxC,WAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,EAM8B;AAC5B,EAAA,IAAI,CAAC,eAAe,CAAC,YAAA,IAAgB,CAAC,cAAA,IAAkB,CAAC,WAAW,OAAO,IAAA;AAC3E,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,WAAA,CAAY,cAAA,CAAe,aAAa,CAAA;AACrE,EAAA,IAAI,aAAA,IAAiB,cAAc,OAAO,IAAA;AAE1C,EAAA,MAAM,kBAAkB,YAAA,GAAe,aAAA;AACvC,EAAA,MAAM,kBAAkB,MAAA,IAAU,EAAA;AAClC,EAAA,MAAM,UAAA,GACJ,eAAA,GAAkB,EAAA,GACd,kBAAA,CAAmB,EAAE,aAAa,aAAA,EAAe,MAAA,EAAQ,eAAA,EAAiB,CAAA,GAC1E,aAAA;AACN,EAAA,MAAM,WAAA,GACJ,eAAA,GAAkB,EAAA,GACd,kBAAA,CAAmB,EAAE,QAAQ,aAAA,EAAe,MAAA,EAAQ,eAAA,EAAiB,CAAA,GACrE,EAAA;AAEN,EAAA,MAAM,oBAAoB,2BAAA,CAA4B;AAAA,IACpD,KAAA,EAAO,SAAA;AAAA,IACP,YAAA,EAAc,YAAA;AAAA,IACd,IAAA,EAAM;AAAA,GACP,CAAA;AACD,EAAA,MAAM,kBAAkB,2BAAA,CAA4B;AAAA,IAClD,KAAA,EAAO,SAAA;AAAA,IACP,YAAA,EAAc,aAAA;AAAA,IACd,IAAA,EAAM;AAAA,GACP,CAAA;AAED,EAAA,MAAM,kBAAA,GAAqB,CAAC,KAAA,KAC1B,WAAA,CAAY,KAAA,EAAO;AAAA,IACjB,UAAU,SAAA,CAAU,QAAA;AAAA,IACpB,gBAAA,EAAkB,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACd,CAAA;AAEH,EAAA,OAAO;AAAA,IACL,aAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA,eAAA;AAAA,IACA,qBAAA,EAAuB,mBAAmB,iBAAiB,CAAA;AAAA,IAC3D,mBAAA,EAAqB,mBAAmB,eAAe,CAAA;AAAA,IACvD,iBAAA,EAAmB,mBAAmB,UAAU,CAAA;AAAA,IAChD,sBAAA,EAAwB,mBAAmB,eAAe,CAAA;AAAA,IAC1D,kBAAA,EAAoB,WAAA,GAAc,EAAA,GAAK,kBAAA,CAAmB,WAAW,CAAA,GAAI;AAAA,GAC3E;AACF;AChEO,SAAS,0BAAA,GAAsD;AACpE,EAAA,MAAM,CAAC,UAAA,EAAY,aAAa,CAAA,GAAI,SAAoC,IAAI,CAAA;AAC5E,EAAA,MAAM,UAAA,GAAa,OAAiD,IAAI,CAAA;AAExE,EAAA,MAAM,iBAAA,GAAoB,WAAA,CAA+B,CAAC,IAAA,KAAS;AACjE,IAAA,OAAO,IAAI,OAAA,CAAgB,CAAC,OAAA,KAAY;AACtC,MAAA,UAAA,CAAW,OAAA,GAAU,OAAA;AACrB,MAAA,aAAA,CAAc,IAAI,CAAA;AAAA,IACpB,CAAC,CAAA;AAAA,EACH,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,IAAA,GAAO,WAAA,CAAY,CAAC,aAAA,KAA0B;AAClD,IAAA,UAAA,CAAW,UAAU,aAAa,CAAA;AAClC,IAAA,UAAA,CAAW,OAAA,GAAU,IAAA;AACrB,IAAA,aAAA,CAAc,IAAI,CAAA;AAAA,EACpB,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,OAAO,EAAE,iBAAA,EAAmB,UAAA,EAAY,IAAA,EAAK;AAC/C;ACEO,SAAS,oBAAoB,KAAA,EAAiD;AACnF,EAAA,MAAM,cAAA,GAAiB,KAAA,CAAM,WAAA,CAAY,QAAA,CAAS,GAAG,CAAA,GACjD,KAAA,CAAM,WAAA,CAAY,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,IAC9B,KAAA,CAAM,WAAA;AAEV,EAAA,MAAM,QAAA,GAAW,oBAAA,CAAqB,KAAA,CAAM,WAAA,IAAe,MAAM,WAAW,CAAA;AAE5E,EAAA,OAAO;AAAA,IACL,UAAU,KAAA,CAAM,WAAA;AAAA,IAChB,QAAA;AAAA,IACA,UAAA,EAAY,YAAY,cAAc,CAAA,CAAA;AAAA,IACtC,mBAAmB,KAAA,CAAM,iBAAA;AAAA,IACzB,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,MAAA,EAAQ;AAAA,MACN,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB,MAAA,EAAQ,KAAA,CAAM,MAAA,CAAO,MAAA,CAAO,QAAA,EAAS;AAAA,MACrC,WAAA,EAAA,CAAc,KAAA,CAAM,MAAA,CAAO,SAAA,GAAY,OAAO,QAAA,EAAS;AAAA,MACvD,aAAA,EAAe,KAAA,CAAM,MAAA,CAAO,aAAA,IAAkB,IAAA;AAAA,MAC9C,YAAA,EAAc,MAAM,MAAA,CAAO,YAAA;AAAA,MAC3B,cAAA,EAAgB,KAAA,CAAM,MAAA,CAAO,cAAA,CAAe,QAAA,EAAS;AAAA,MACrD,cAAc,KAAA,CAAM,gBAAA;AAAA,MACpB,iBAAA,EAAmB;AAAA;AACrB,GACF;AACF","file":"index.js","sourcesContent":["/**\n * @fileoverview Buyer trusted-execution attestation client.\n *\n * In PeerAuth extension 0.5.2+, capture produces a buyerTee proof —\n * `{ proofType: 'buyerTee', encryptedSessionMaterial, params }` — where the\n * bank session is already encrypted toward the enclave (cookies never reach\n * our page in plaintext). Instead of re-signing a Reclaim proof through our\n * gate, we hand that material to zkp2p's trusted-execution attestation\n * service, which verifies the payment inside an Amazon Web Services Nitro\n * enclave and signs the attestation directly.\n *\n * The response `responseObject` is the same `V3AttestationResponseObject`\n * shape our gate returns, so it flows through the existing\n * `encodeV3PaymentProof` path unchanged.\n *\n * Moved verbatim from `@provex/ui` (packages/ui/src/lib/buyerTeeAttestation.ts)\n * with the base URL changed from a `@provex/ui` config import to an injected\n * `attestationBaseUrl` argument so this package carries no `@provex/ui` dep.\n */\n\nimport type { Hex } from 'viem'\nimport type { V3AttestationResponseObject } from '@provex/utils'\n\n/**\n * Runtime shape of a buyerTee proof emitted by the PeerAuth extension.\n * Narrow with {@link asBuyerTeeProof} before use.\n */\nexport interface BuyerTeeProof {\n  proofType: 'buyerTee'\n  /** Session material already encrypted toward the enclave (opaque to us). */\n  encryptedSessionMaterial: string\n  /** Platform-specific params, e.g. Revolut `{ index }`, Chase `{ index }`. */\n  params: unknown\n  actionType?: string\n  actionPlatform?: string\n}\n\n/**\n * Narrow an extension proof to a buyerTee proof, or null when it is the\n * legacy Reclaim shape (or malformed).\n */\nexport function asBuyerTeeProof(proof: unknown): BuyerTeeProof | null {\n  if (!proof || typeof proof !== 'object') return null\n  const candidate = proof as Record<string, unknown>\n  if (candidate.proofType !== 'buyerTee') return null\n  if (typeof candidate.encryptedSessionMaterial !== 'string') return null\n  return candidate as unknown as BuyerTeeProof\n}\n\n/** Intent details the enclave binds the attestation to. */\nexport interface BuyerTeeIntent {\n  intentHash: Hex\n  amount: string\n  timestampMs: string\n  paymentMethod: Hex\n  fiatCurrency: Hex\n  conversionRate: string\n  payeeDetails: Hex\n  timestampBufferMs?: string\n}\n\nexport interface RequestBuyerTeeAttestationArgs {\n  /** Gate/attestation origin (was `gateForwarderBaseUrl` in @provex/ui). */\n  attestationBaseUrl: string\n  /** Extension platform / bank key, e.g. `revolut`, `chase`. */\n  platform: string\n  /** Action type, e.g. `transfer_revolut`, `transfer_zelle`. */\n  actionType: string\n  /** Encrypted session material from the buyerTee capture. */\n  encryptedSessionMaterial: string\n  /** Platform params from the capture (e.g. `{ index }`). */\n  params: unknown\n  /** PulseChain UnifiedPaymentVerifier the gate re-signs the attestation for. */\n  verifyingContract: string\n  intent: BuyerTeeIntent\n}\n\n/**\n * Verify a buyer payment via the gate. The gate proxies the encrypted capture\n * to zkp2p's enclave, then re-signs the resulting attestation for PulseChain\n * with our witness key — the enclave itself refuses to sign for 369.\n *\n * Throws with the gate's error text on a non-2xx response.\n */\nexport async function requestBuyerTeeAttestation(\n  args: RequestBuyerTeeAttestationArgs,\n): Promise<V3AttestationResponseObject> {\n  const url = `${args.attestationBaseUrl}/api/v0/attestation/buyer-verify/${encodeURIComponent(args.platform)}/${encodeURIComponent(args.actionType)}`\n\n  const response = await fetch(url, {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body: JSON.stringify({\n      encryptedSessionMaterial: args.encryptedSessionMaterial,\n      params: args.params,\n      verifyingContract: args.verifyingContract,\n      intent: args.intent,\n    }),\n  })\n\n  if (!response.ok) {\n    const detail = await response.text().catch(() => '')\n    throw new Error(\n      `Trusted-execution attestation failed (${response.status}): ${detail || response.statusText}`,\n    )\n  }\n\n  const json = (await response.json()) as\n    | { responseObject?: V3AttestationResponseObject }\n    | V3AttestationResponseObject\n  const responseObject =\n    (json as { responseObject?: V3AttestationResponseObject }).responseObject ??\n    (json as V3AttestationResponseObject)\n\n  if (!responseObject?.typedDataValue || !responseObject?.signature) {\n    throw new Error('Trusted-execution attestation response missing typedDataValue/signature')\n  }\n  return responseObject\n}\n","/**\n * @fileoverview Pure proving derivations moved from @provex/ui\n * (packages/ui/src/components/UnifiedBuy/ProofPanel/submitStepDerivations.ts).\n *\n * Bigint throughout — see the `money-values-stay-bigint-until-display` rule.\n * The only string conversions happen at the formatter boundary (formatUnits),\n * which is the display layer.\n */\n\nimport type { V3AttestationResponseObject } from '@provex/utils'\nimport type { TokenInfo } from '@provex/utils/tokens'\nimport { formatUnits } from '@provex/utils/units'\nimport { convertTokenInputToCurrency } from '@provex/utils/conversionRates'\nimport { calculateFeeAmount, calculateNetAmount } from '@provex/utils/fees'\n\nexport interface PartialFulfillment {\n  /** Gross USDC the gate authorized for release (typedData.releaseAmount). */\n  grossReleased: bigint\n  /** Net USDC the buyer actually receives (grossReleased − fee). */\n  netToBuyer: bigint\n  /** Protocol fee in USDC base units. 0n when no fee applies. */\n  protocolFee: bigint\n  /** Locked USDC returned to the maker (intent.amount − grossReleased). */\n  returnedToMaker: bigint\n  contractedFiatDisplay: string\n  attestedFiatDisplay: string\n  netToBuyerDisplay: string\n  returnedToMakerDisplay: string\n  /** null when protocolFee === 0n so the caller can skip rendering the row. */\n  protocolFeeDisplay: string | null\n}\n\n/**\n * Partial-fulfilment breakdown derived from the verified attestation.\n *\n * Returns `null` when:\n *   - attestation isn't present (nothing to compare)\n *   - releaseAmount >= intent.amount (full settlement, no partial story)\n *   - intent/tokenInfo missing (defensive)\n */\nexport function computePartialFulfillment({\n  attestation,\n  intentAmount,\n  conversionRate,\n  tokenInfo,\n  feeBps,\n}: {\n  attestation: V3AttestationResponseObject | null\n  intentAmount: bigint | null | undefined\n  conversionRate: bigint | null | undefined\n  tokenInfo: TokenInfo | null\n  feeBps: bigint | null | undefined\n}): PartialFulfillment | null {\n  if (!attestation || !intentAmount || !conversionRate || !tokenInfo) return null\n  const grossReleased = BigInt(attestation.typedDataValue.releaseAmount)\n  if (grossReleased >= intentAmount) return null\n\n  const returnedToMaker = intentAmount - grossReleased\n  const effectiveFeeBps = feeBps ?? 0n\n  const netToBuyer =\n    effectiveFeeBps > 0n\n      ? calculateNetAmount({ grossAmount: grossReleased, feeBps: effectiveFeeBps })\n      : grossReleased\n  const protocolFee =\n    effectiveFeeBps > 0n\n      ? calculateFeeAmount({ amount: grossReleased, feeBps: effectiveFeeBps })\n      : 0n\n\n  const contractedFiatRaw = convertTokenInputToCurrency({\n    token: tokenInfo,\n    amountOutInt: intentAmount,\n    rate: conversionRate,\n  })\n  const attestedFiatRaw = convertTokenInputToCurrency({\n    token: tokenInfo,\n    amountOutInt: grossReleased,\n    rate: conversionRate,\n  })\n\n  const formatTokenDisplay = (value: bigint): string =>\n    formatUnits(value, {\n      decimals: tokenInfo.decimals,\n      truncateDecimals: 2,\n      padDecimals: 2,\n    })\n\n  return {\n    grossReleased,\n    netToBuyer,\n    protocolFee,\n    returnedToMaker,\n    contractedFiatDisplay: formatTokenDisplay(contractedFiatRaw),\n    attestedFiatDisplay: formatTokenDisplay(attestedFiatRaw),\n    netToBuyerDisplay: formatTokenDisplay(netToBuyer),\n    returnedToMakerDisplay: formatTokenDisplay(returnedToMaker),\n    protocolFeeDisplay: protocolFee > 0n ? formatTokenDisplay(protocolFee) : null,\n  }\n}\n","import { useCallback, useRef, useState } from 'react'\nimport type { CaptureCandidate, SelectTransaction } from './types'\n\nexport interface ManualTransactionSelect {\n  /**\n   * Resolver injected into useProving — the enclave adapter calls this when\n   * auto-match of the bank transaction fails (extensionEnclave.ts:189-190).\n   */\n  selectTransaction: SelectTransaction\n  /**\n   * Non-null while the adapter is awaiting a pick; drives the\n   * TransactionSelector rendered inside GenerateProofStep.\n   */\n  candidates: CaptureCandidate[] | null\n  /**\n   * Called by TransactionSelector with the chosen candidate's originalIndex.\n   * Resolves the pending promise and resets candidates to null.\n   */\n  pick: (originalIndex: number) => void\n}\n\n/**\n * Bridge the framework-agnostic {@link SelectTransaction} resolver the enclave\n * adapter expects (extensionEnclave.ts:189-190) to React state the\n * GenerateProofStep TransactionSelector can render.\n *\n * The adapter awaits the promise returned by `selectTransaction`; the user's\n * call to `pick` resolves it with the chosen `originalIndex`.\n *\n * `useRef` is justified here exclusively for holding the pending promise\n * resolver across renders without triggering a re-render cycle — the single\n * sanctioned use per the react-state-preferences memory.\n */\nexport function useManualTransactionSelect(): ManualTransactionSelect {\n  const [candidates, setCandidates] = useState<CaptureCandidate[] | null>(null)\n  const resolveRef = useRef<((originalIndex: number) => void) | null>(null)\n\n  const selectTransaction = useCallback<SelectTransaction>((next) => {\n    return new Promise<number>((resolve) => {\n      resolveRef.current = resolve\n      setCandidates(next)\n    })\n  }, [])\n\n  const pick = useCallback((originalIndex: number) => {\n    resolveRef.current?.(originalIndex)\n    resolveRef.current = null\n    setCandidates(null)\n  }, [])\n\n  return { selectTransaction, candidates, pick }\n}\n","/**\n * @fileoverview Pure builder that assembles a {@link CaptureRequest} from\n * resolved order data.\n *\n * Hoisted verbatim from the intent-assembly block in SubmitStep.tsx:312-342\n * so the mapping is unit-tested in isolation and reusable by the proving shell.\n *\n * Monetary values stay bigint in base units through the entire call stack;\n * this is the single boundary where they are stringified for the attestor\n * wire format.\n */\n\nimport type { Hex } from 'viem'\nimport type { CaptureRequest } from './types'\nimport { getExtensionPlatform } from '@provex/utils/payment'\nimport type { ProviderKey, SubProviderKey } from '@provex/utils/payment'\nimport type { TokenInfo } from '@provex/utils/tokens'\n\n/** All resolved order fields required to build a {@link CaptureRequest}. */\nexport interface BuildCaptureRequestInput {\n  /** On-chain intent hash. */\n  intentHash: Hex\n  /** Chain the intent lives on. */\n  chainId: number\n  /** Bank-level sub-provider, e.g. `'zelle-chase'`, or `null` for top-level providers. */\n  subProvider: SubProviderKey | null\n  /** Provider key from the deposit. May itself be a sub-provider key (contains a dash). */\n  providerKey: ProviderKey | SubProviderKey\n  /** Address of the UnifiedPaymentVerifier contract for this chain. */\n  verifyingContract: Hex\n  /** payeeDetailsHash from the matched verifier record. */\n  payeeDetailsHash: Hex\n  /** Settlement token for this intent (used by the adapter for amount conversion). */\n  token: TokenInfo\n  /** Resolved intent fields, monetary values in bigint base units. */\n  intent: {\n    amount: bigint\n    timestamp: bigint\n    paymentMethod: Hex | undefined\n    fiatCurrency: Hex\n    conversionRate: bigint\n  }\n}\n\n/**\n * Build the {@link CaptureRequest} from resolved order data.\n *\n * Pure hoist of the intent-assembly block in SubmitStep.tsx:312-342.\n * No side effects, no I/O, no React. Safe to call in any environment.\n *\n * @param input - All resolved order fields needed to build the request.\n * @returns A fully-formed {@link CaptureRequest} ready for a {@link CaptureAdapter}.\n */\nexport function buildCaptureRequest(input: BuildCaptureRequestInput): CaptureRequest {\n  const parentProvider = input.providerKey.includes('-')\n    ? input.providerKey.split('-')[0]\n    : input.providerKey\n\n  const platform = getExtensionPlatform(input.subProvider ?? input.providerKey)\n\n  return {\n    provider: input.providerKey,\n    platform,\n    actionType: `transfer_${parentProvider}`,\n    verifyingContract: input.verifyingContract,\n    chainId: input.chainId,\n    token: input.token,\n    intent: {\n      intentHash: input.intentHash,\n      amount: input.intent.amount.toString(),\n      timestampMs: (input.intent.timestamp * 1000n).toString(),\n      paymentMethod: input.intent.paymentMethod ?? ('0x' as Hex),\n      fiatCurrency: input.intent.fiatCurrency,\n      conversionRate: input.intent.conversionRate.toString(),\n      payeeDetails: input.payeeDetailsHash,\n      timestampBufferMs: '300000',\n    },\n  }\n}\n"]}

package/dist/{types-ByiBb7AN.d.ts → useProving-h4RtlSEU.d.cts}

@@ -120,6 +120,11 @@ type ProvingState = {
     /** true ⇒ failure occurred during/after on-chain submission. */
     isSubmissionError: boolean;
     attestation?: VerifiedAttestation;
+    /** Typed reason, set for cases the consumer must branch on. Currently
+     *  'enclave-unavailable' (non-migrated provider → caller falls back to
+     *  Reclaim) and 'manual-selection-required' (auto-match failed, no
+     *  resolver supplied). Absent for ordinary verification/submission errors. */
+    code?: 'enclave-unavailable' | 'manual-selection-required';
 };
 /**
  * Thrown by a capture adapter when the provider returned no buyerTee capture
@@ -141,4 +146,96 @@ declare class ManualSelectionRequired extends Error {
     constructor(candidates: CaptureCandidate[]);
 }
 
-export { type CaptureCandidate as C, EnclaveCaptureUnavailable as E, ManualSelectionRequired as M, type ProvingIntent as P, type SelectTransaction as S, type VerifiedAttestation as V, type CaptureRequest as a, type CaptureHandle as b, type CaptureAdapter as c, type ProvingRequest as d, type ProvingState as e };
+/**
+ * @fileoverview useProving — headless orchestrator for the enclave proving
+ * pipeline. Replicates the live AuthenticateStep/GenerateProofStep/SubmitStep
+ * state machine (ProofPanel) with no presentation. Renders nothing; returns
+ * state + actions for a UI (UnifiedBuy ProofPanel or a wallet) to bind to.
+ *
+ * Owns: the ProvingState machine, the nullifier double-spend check
+ * (SubmitStep.tsx:419-426), the attest→fulfil sequencing, retry routing
+ * (SubmitStep.tsx:931-955), and the minimum-visible-state timings
+ * (SubmitStep.tsx:404-417). Delegates capture to the injected CaptureAdapter,
+ * the on-chain write (+ receipt + indexer sync) to ProveXClient.fulfillIntent.
+ */
+
+/**
+ * Minimal context object that buildWritableMethod passes to the per-call hooks.
+ * Kept structural so @provex/proving does not depend on @valve-tech/wallet-adapter.
+ * Only `hash` is consumed by this hook — the rest is opaque context.
+ */
+interface TxCallbackContext {
+    chainId: number;
+    request: unknown;
+}
+/** Structural params for the fulfillIntent call. Mirrors FulfillIntentParams +
+ *  WriteHookParams from @provex/react but declared here to keep @provex/proving
+ *  from depending on the React package's built dist (which the test environment
+ *  doesn't require). The real ProveXClient.fulfillIntent satisfies this shape.
+ *
+ *  IMPORTANT: onAwaitingSignature and onTransactionHash match the exact call
+ *  shapes in buildWritableMethod (ProveXClient.ts ~890, ~903):
+ *    params.onAwaitingSignature?.(ctx)              → (info: TxCallbackContext) => void
+ *    params.onTransactionHash?.({ ...ctx, hash })   → (info: TxCallbackContext & { hash: Hex }) => void
+ */
+interface FulfillParams {
+    intentHash: Hex;
+    attestation: V3AttestationResponseObject;
+    verificationData: Hex;
+    postIntentHookData?: Hex;
+    onAwaitingSignature?: (info: TxCallbackContext) => void;
+    onTransactionHash?: (info: TxCallbackContext & {
+        hash: Hex;
+    }) => void;
+}
+/** The structural slice of ProveXClient the orchestrator depends on. Keeping
+ *  it structural lets tests pass a light fake and avoids importing the class. */
+interface ProvingClient {
+    /**
+     * The chain this rail operates on. Must equal request.chainId — useProving
+     * refuses to check the nullifier or submit on any other chain. A nullifier is
+     * only meaningful on its intended chain; checking it on (or submitting it to)
+     * a different chain is a cross-chain double-spend / replay vector.
+     */
+    readonly chainId: number;
+    fulfillIntent: (params: FulfillParams) => Promise<{
+        hash: Hex;
+        receipt: unknown;
+    }>;
+    checkNullifierUsed: (params: {
+        paymentMethodId: Hex;
+        nullifier: Hex;
+    }) => Promise<boolean | null>;
+}
+interface UseProvingOptions {
+    client: ProvingClient;
+    captureAdapter: CaptureAdapter;
+    request: CaptureRequest;
+    /** Payment method id for the nullifier registry lookup. */
+    paymentMethodId: Hex;
+    /** Manual-select resolver forwarded to the adapter. */
+    selectTransaction?: SelectTransaction;
+    /**
+     * Forwarded to ProveXClient.fulfillIntent for the consumer's tx-flight strip.
+     * Receives the raw TxContext — the hook does not inspect the argument.
+     */
+    onAwaitingSignature?: () => void;
+    /** Receives the raw tx hash extracted from the TxContext+hash payload. */
+    onTransactionHash?: (hash: Hex) => void;
+    /** Called once when the flow reaches `complete`. */
+    onComplete?: (attestation: V3AttestationResponseObject) => void;
+}
+interface UseProvingReturn {
+    state: ProvingState;
+    /** Phase 1+2: authenticate, capture, attest, nullifier-check → readyToFulfill. */
+    authenticate: () => Promise<void>;
+    /** Phase 3: submit fulfillIntent → confirm → sync → complete. */
+    fulfill: () => Promise<void>;
+    /** Re-run attestation after a pre-fulfilment error. */
+    retryVerification: () => Promise<void>;
+    /** Re-run submission after a post-fulfilment error. */
+    retrySubmission: () => Promise<void>;
+}
+declare function useProving(options: UseProvingOptions): UseProvingReturn;
+
+export { type CaptureCandidate as C, EnclaveCaptureUnavailable as E, ManualSelectionRequired as M, type ProvingIntent as P, type SelectTransaction as S, type UseProvingOptions as U, type VerifiedAttestation as V, type CaptureRequest as a, type CaptureHandle as b, type CaptureAdapter as c, type ProvingRequest as d, type ProvingState as e, type ProvingClient as f, type UseProvingReturn as g, useProving as u };