@provex/proving 1.8.0 → 1.9.0

package/dist/{types-ByiBb7AN.d.cts → useProving-h4RtlSEU.d.ts}

@@ -120,6 +120,11 @@ type ProvingState = {
     /** true ⇒ failure occurred during/after on-chain submission. */
     isSubmissionError: boolean;
     attestation?: VerifiedAttestation;
+    /** Typed reason, set for cases the consumer must branch on. Currently
+     *  'enclave-unavailable' (non-migrated provider → caller falls back to
+     *  Reclaim) and 'manual-selection-required' (auto-match failed, no
+     *  resolver supplied). Absent for ordinary verification/submission errors. */
+    code?: 'enclave-unavailable' | 'manual-selection-required';
 };
 /**
  * Thrown by a capture adapter when the provider returned no buyerTee capture
@@ -141,4 +146,96 @@ declare class ManualSelectionRequired extends Error {
     constructor(candidates: CaptureCandidate[]);
 }
 
-export { type CaptureCandidate as C, EnclaveCaptureUnavailable as E, ManualSelectionRequired as M, type ProvingIntent as P, type SelectTransaction as S, type VerifiedAttestation as V, type CaptureRequest as a, type CaptureHandle as b, type CaptureAdapter as c, type ProvingRequest as d, type ProvingState as e };
+/**
+ * @fileoverview useProving — headless orchestrator for the enclave proving
+ * pipeline. Replicates the live AuthenticateStep/GenerateProofStep/SubmitStep
+ * state machine (ProofPanel) with no presentation. Renders nothing; returns
+ * state + actions for a UI (UnifiedBuy ProofPanel or a wallet) to bind to.
+ *
+ * Owns: the ProvingState machine, the nullifier double-spend check
+ * (SubmitStep.tsx:419-426), the attest→fulfil sequencing, retry routing
+ * (SubmitStep.tsx:931-955), and the minimum-visible-state timings
+ * (SubmitStep.tsx:404-417). Delegates capture to the injected CaptureAdapter,
+ * the on-chain write (+ receipt + indexer sync) to ProveXClient.fulfillIntent.
+ */
+
+/**
+ * Minimal context object that buildWritableMethod passes to the per-call hooks.
+ * Kept structural so @provex/proving does not depend on @valve-tech/wallet-adapter.
+ * Only `hash` is consumed by this hook — the rest is opaque context.
+ */
+interface TxCallbackContext {
+    chainId: number;
+    request: unknown;
+}
+/** Structural params for the fulfillIntent call. Mirrors FulfillIntentParams +
+ *  WriteHookParams from @provex/react but declared here to keep @provex/proving
+ *  from depending on the React package's built dist (which the test environment
+ *  doesn't require). The real ProveXClient.fulfillIntent satisfies this shape.
+ *
+ *  IMPORTANT: onAwaitingSignature and onTransactionHash match the exact call
+ *  shapes in buildWritableMethod (ProveXClient.ts ~890, ~903):
+ *    params.onAwaitingSignature?.(ctx)              → (info: TxCallbackContext) => void
+ *    params.onTransactionHash?.({ ...ctx, hash })   → (info: TxCallbackContext & { hash: Hex }) => void
+ */
+interface FulfillParams {
+    intentHash: Hex;
+    attestation: V3AttestationResponseObject;
+    verificationData: Hex;
+    postIntentHookData?: Hex;
+    onAwaitingSignature?: (info: TxCallbackContext) => void;
+    onTransactionHash?: (info: TxCallbackContext & {
+        hash: Hex;
+    }) => void;
+}
+/** The structural slice of ProveXClient the orchestrator depends on. Keeping
+ *  it structural lets tests pass a light fake and avoids importing the class. */
+interface ProvingClient {
+    /**
+     * The chain this rail operates on. Must equal request.chainId — useProving
+     * refuses to check the nullifier or submit on any other chain. A nullifier is
+     * only meaningful on its intended chain; checking it on (or submitting it to)
+     * a different chain is a cross-chain double-spend / replay vector.
+     */
+    readonly chainId: number;
+    fulfillIntent: (params: FulfillParams) => Promise<{
+        hash: Hex;
+        receipt: unknown;
+    }>;
+    checkNullifierUsed: (params: {
+        paymentMethodId: Hex;
+        nullifier: Hex;
+    }) => Promise<boolean | null>;
+}
+interface UseProvingOptions {
+    client: ProvingClient;
+    captureAdapter: CaptureAdapter;
+    request: CaptureRequest;
+    /** Payment method id for the nullifier registry lookup. */
+    paymentMethodId: Hex;
+    /** Manual-select resolver forwarded to the adapter. */
+    selectTransaction?: SelectTransaction;
+    /**
+     * Forwarded to ProveXClient.fulfillIntent for the consumer's tx-flight strip.
+     * Receives the raw TxContext — the hook does not inspect the argument.
+     */
+    onAwaitingSignature?: () => void;
+    /** Receives the raw tx hash extracted from the TxContext+hash payload. */
+    onTransactionHash?: (hash: Hex) => void;
+    /** Called once when the flow reaches `complete`. */
+    onComplete?: (attestation: V3AttestationResponseObject) => void;
+}
+interface UseProvingReturn {
+    state: ProvingState;
+    /** Phase 1+2: authenticate, capture, attest, nullifier-check → readyToFulfill. */
+    authenticate: () => Promise<void>;
+    /** Phase 3: submit fulfillIntent → confirm → sync → complete. */
+    fulfill: () => Promise<void>;
+    /** Re-run attestation after a pre-fulfilment error. */
+    retryVerification: () => Promise<void>;
+    /** Re-run submission after a post-fulfilment error. */
+    retrySubmission: () => Promise<void>;
+}
+declare function useProving(options: UseProvingOptions): UseProvingReturn;
+
+export { type CaptureCandidate as C, EnclaveCaptureUnavailable as E, ManualSelectionRequired as M, type ProvingIntent as P, type SelectTransaction as S, type UseProvingOptions as U, type VerifiedAttestation as V, type CaptureRequest as a, type CaptureHandle as b, type CaptureAdapter as c, type ProvingRequest as d, type ProvingState as e, type ProvingClient as f, type UseProvingReturn as g, useProving as u };

package/dist/useProving.cjs

@@ -4,6 +4,26 @@ var react = require('react');
 var utils = require('@provex/utils');
 var time = require('@provex/utils/time');
 
+// src/useProving.ts
+
+// src/types.ts
+var EnclaveCaptureUnavailable = class extends Error {
+  platform;
+  constructor(platform) {
+    super(`No enclave (buyerTee) capture available for platform "${platform}".`);
+    this.name = "EnclaveCaptureUnavailable";
+    this.platform = platform;
+  }
+};
+var ManualSelectionRequired = class extends Error {
+  candidates;
+  constructor(candidates) {
+    super("Manual transaction selection is required but no resolver was provided.");
+    this.name = "ManualSelectionRequired";
+    this.candidates = candidates;
+  }
+};
+
 // src/useProving.ts
 async function withMinimumVisible(floorMs, started) {
   const elapsed = Date.now() - started;
@@ -30,6 +50,11 @@ function useProving(options) {
     if (inFlightRef.current) return;
     inFlightRef.current = true;
     try {
+      if (client.chainId !== request.chainId) {
+        throw new Error(
+          `Refusing to proceed: proving client is on chain ${client.chainId} but the intent targets chain ${request.chainId}. A nullifier must only be verified and fulfilled on its intended chain.`
+        );
+      }
       setState({ status: "capture" });
       const handle = await captureAdapter.authenticateAndCapture(request, { selectTransaction });
       const attestStarted = Date.now();
@@ -37,20 +62,25 @@ function useProving(options) {
       const verified = await captureAdapter.attest(handle, request);
       await withMinimumVisible(1e3, attestStarted);
       const nullifier = utils.extractNullifier(verified.attestation);
-      if (nullifier) {
-        const isUsed = await client.checkNullifierUsed({ paymentMethodId, nullifier });
-        if (isUsed === true) {
-          throw new Error(
-            "This payment has already been verified. The nullifier has already been used onchain."
-          );
-        }
+      if (!nullifier) {
+        throw new Error(
+          "Could not extract a nullifier from the attestation; cannot confirm it is unused. Refusing to proceed."
+        );
+      }
+      const isUsed = await client.checkNullifierUsed({ paymentMethodId, nullifier });
+      if (isUsed !== false) {
+        throw new Error(
+          isUsed === true ? "This payment has already been verified. The nullifier has already been used onchain." : "Could not verify the nullifier is unused (registry unreachable). Refusing to proceed \u2014 please retry."
+        );
       }
       setState({ status: "readyToFulfill", attestation: verified });
     } catch (error) {
+      const code = error instanceof EnclaveCaptureUnavailable ? "enclave-unavailable" : error instanceof ManualSelectionRequired ? "manual-selection-required" : void 0;
       setState({
         status: "error",
         message: error instanceof Error ? error.message : "Verification failed",
-        isSubmissionError: false
+        isSubmissionError: false,
+        code
       });
     } finally {
       inFlightRef.current = false;
@@ -63,6 +93,11 @@ function useProving(options) {
       const submitStarted = Date.now();
       setState({ status: "fulfillIntent", attestation: verified });
       try {
+        if (client.chainId !== request.chainId) {
+          throw new Error(
+            `Refusing to proceed: proving client is on chain ${client.chainId} but the intent targets chain ${request.chainId}. A nullifier must only be verified and fulfilled on its intended chain.`
+          );
+        }
         await client.fulfillIntent({
           intentHash: request.intent.intentHash,
           attestation: verified.attestation,

package/dist/useProving.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/useProving.ts"],"names":["sleep","useState","useRef","useCallback","extractNullifier"],"mappings":";;;;;;;AA8FA,eAAe,kBAAA,CAAmB,SAAiB,OAAA,EAAgC;AACjF,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,GAAA,EAAI,GAAI,OAAA;AAC7B,EAAA,IAAI,OAAA,GAAU,OAAA,EAAS,MAAMA,UAAA,CAAM,UAAU,OAAO,CAAA;AACtD;AAOA,SAAS,kBAAkB,KAAA,EAAyB;AAClD,EAAA,OACE,OAAO,UAAU,QAAA,IACjB,KAAA,KAAU,QACV,MAAA,IAAU,KAAA,IACT,MAA4B,IAAA,KAAS,iBAAA;AAE1C;AAEO,SAAS,WAAW,OAAA,EAA8C;AACvE,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,cAAA;AAAA,IACA,OAAA;AAAA,IACA,eAAA;AAAA,IACA,iBAAA;AAAA,IACA,mBAAA;AAAA,IACA,iBAAA;AAAA,IACA;AAAA,GACF,GAAI,OAAA;AAEJ,EAAA,MAAM,CAAC,OAAO,QAAQ,CAAA,GAAIC,eAAuB,EAAE,MAAA,EAAQ,gBAAgB,CAAA;AAE3E,EAAA,MAAM,WAAA,GAAcC,aAAO,KAAK,CAAA;AAGhC,EAAA,MAAM,iBAAA,GAAoBA,aAAO,KAAK,CAAA;AAEtC,EAAA,MAAM,mBAAA,GAAsBC,kBAAY,YAA2B;AACjE,IAAA,IAAI,YAAY,OAAA,EAAS;AACzB,IAAA,WAAA,CAAY,OAAA,GAAU,IAAA;AACtB,IAAA,IAAI;AACF,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,SAAA,EAAW,CAAA;AAC9B,MAAA,MAAM,SAAS,MAAM,cAAA,CAAe,uBAAuB,OAAA,EAAS,EAAE,mBAAmB,CAAA;AAEzF,MAAA,MAAM,aAAA,GAAgB,KAAK,GAAA,EAAI;AAC/B,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,QAAA,EAAU,CAAA;AAC7B,MAAA,MAAM,QAAA,GAAW,MAAM,cAAA,CAAe,MAAA,CAAO,QAAQ,OAAO,CAAA;AAE5D,MAAA,MAAM,kBAAA,CAAmB,KAAM,aAAa,CAAA;AAG5C,MAAA,MAAM,SAAA,GAAYC,sBAAA,CAAiB,QAAA,CAAS,WAAW,CAAA;AACvD,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,MAAM,SAAS,MAAM,MAAA,CAAO,mBAAmB,EAAE,eAAA,EAAiB,WAAW,CAAA;AAC7E,QAAA,IAAI,WAAW,IAAA,EAAM;AACnB,UAAA,MAAM,IAAI,KAAA;AAAA,YACR;AAAA,WACF;AAAA,QACF;AAAA,MACF;AAEA,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,gBAAA,EAAkB,WAAA,EAAa,UAAU,CAAA;AAAA,IAC9D,SAAS,KAAA,EAAO;AACd,MAAA,QAAA,CAAS;AAAA,QACP,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,qBAAA;AAAA,QAClD,iBAAA,EAAmB;AAAA,OACpB,CAAA;AAAA,IACH,CAAA,SAAE;AACA,MAAA,WAAA,CAAY,OAAA,GAAU,KAAA;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,cAAA,EAAgB,QAAQ,OAAA,EAAS,eAAA,EAAiB,iBAAiB,CAAC,CAAA;AAExE,EAAA,MAAM,MAAA,GAASD,iBAAA;AAAA,IACb,OAAO,QAAA,KAAiD;AAGtD,MAAA,IAAI,kBAAkB,OAAA,EAAS;AAC/B,MAAA,iBAAA,CAAkB,OAAA,GAAU,IAAA;AAE5B,MAAA,MAAM,aAAA,GAAgB,KAAK,GAAA,EAAI;AAC/B,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,eAAA,EAAiB,WAAA,EAAa,UAAU,CAAA;AAC3D,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,aAAA,CAAc;AAAA,UACzB,UAAA,EAAY,QAAQ,MAAA,CAAO,UAAA;AAAA,UAC3B,aAAa,QAAA,CAAS,WAAA;AAAA,UACtB,kBAAkB,QAAA,CAAS,gBAAA;AAAA;AAAA;AAAA,UAG3B,mBAAA,EAAqB,mBAAA,GACjB,CAAC,KAAA,KAA6B;AAAE,YAAA,mBAAA,EAAoB;AAAA,UAAE,CAAA,GACtD,KAAA,CAAA;AAAA;AAAA;AAAA;AAAA,UAIJ,iBAAA,EAAmB,iBAAA,GACf,CAAC,IAAA,KAA4C;AAI3C,YAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,SAAA,EAAW,WAAA,EAAa,UAAU,CAAA;AACrD,YAAA,iBAAA,CAAkB,KAAK,IAAI,CAAA;AAAA,UAC7B,CAAA,GACC,CAAC,KAAA,KAA6C;AAC7C,YAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,SAAA,EAAW,WAAA,EAAa,UAAU,CAAA;AAAA,UACvD;AAAA,SACL,CAAA;AACD,QAAA,MAAM,kBAAA,CAAmB,KAAK,aAAa,CAAA;AAM3C,QAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,MAAA,EAAQ,WAAA,EAAa,UAAU,CAAA;AAClD,QAAA,MAAMH,WAAM,GAAG,CAAA;AACf,QAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,UAAA,EAAY,WAAA,EAAa,UAAU,CAAA;AACtD,QAAA,UAAA,GAAa,SAAS,WAAW,CAAA;AAAA,MACnC,SAAS,KAAA,EAAO;AAGd,QAAA,IAAI,iBAAA,CAAkB,KAAK,CAAA,EAAG;AAC5B,UAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,gBAAA,EAAkB,WAAA,EAAa,UAAU,CAAA;AAC5D,UAAA;AAAA,QACF;AACA,QAAA,QAAA,CAAS;AAAA,UACP,MAAA,EAAQ,OAAA;AAAA,UACR,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,mBAAA;AAAA,UAClD,iBAAA,EAAmB,IAAA;AAAA,UACnB,WAAA,EAAa;AAAA,SACd,CAAA;AAAA,MACH,CAAA,SAAE;AACA,QAAA,iBAAA,CAAkB,OAAA,GAAU,KAAA;AAAA,MAC9B;AAAA,IACF,CAAA;AAAA,IACA,CAAC,MAAA,EAAQ,OAAA,CAAQ,OAAO,UAAA,EAAY,mBAAA,EAAqB,mBAAmB,UAAU;AAAA,GACxF;AAEA,EAAA,MAAM,eAAeG,iBAAA,CAAY,MAAM,qBAAoB,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAEnF,EAAA,MAAM,OAAA,GAAUA,kBAAY,YAAY;AACtC,IAAA,IAAI,KAAA,CAAM,WAAW,gBAAA,EAAkB;AACvC,IAAA,MAAM,MAAA,CAAO,MAAM,WAAW,CAAA;AAAA,EAChC,CAAA,EAAG,CAAC,KAAA,EAAO,MAAM,CAAC,CAAA;AAElB,EAAA,MAAM,iBAAA,GAAoBA,kBAAY,YAAY;AAChD,IAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,cAAA,EAAgB,CAAA;AACnC,IAAA,MAAM,mBAAA,EAAoB;AAAA,EAC5B,CAAA,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAExB,EAAA,MAAM,eAAA,GAAkBA,kBAAY,YAAY;AAC9C,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,OAAA,IAAW,CAAC,MAAM,WAAA,EAAa;AACpD,IAAA,MAAM,MAAA,CAAO,MAAM,WAAW,CAAA;AAAA,EAChC,CAAA,EAAG,CAAC,KAAA,EAAO,MAAM,CAAC,CAAA;AAElB,EAAA,OAAO,EAAE,KAAA,EAAO,YAAA,EAAc,OAAA,EAAS,mBAAmB,eAAA,EAAgB;AAC5E","file":"useProving.cjs","sourcesContent":["/**\n * @fileoverview useProving — headless orchestrator for the enclave proving\n * pipeline. Replicates the live AuthenticateStep/GenerateProofStep/SubmitStep\n * state machine (ProofPanel) with no presentation. Renders nothing; returns\n * state + actions for a UI (UnifiedBuy ProofPanel or a wallet) to bind to.\n *\n * Owns: the ProvingState machine, the nullifier double-spend check\n * (SubmitStep.tsx:419-426), the attest→fulfil sequencing, retry routing\n * (SubmitStep.tsx:931-955), and the minimum-visible-state timings\n * (SubmitStep.tsx:404-417). Delegates capture to the injected CaptureAdapter,\n * the on-chain write (+ receipt + indexer sync) to ProveXClient.fulfillIntent.\n */\n\nimport { useCallback, useRef, useState } from 'react'\nimport type { Hex } from 'viem'\nimport { extractNullifier, type V3AttestationResponseObject } from '@provex/utils'\nimport { sleep } from '@provex/utils/time'\nimport type {\n  CaptureAdapter,\n  CaptureRequest,\n  SelectTransaction,\n  ProvingState,\n  VerifiedAttestation,\n} from './types'\n\n/**\n * Minimal context object that buildWritableMethod passes to the per-call hooks.\n * Kept structural so @provex/proving does not depend on @valve-tech/wallet-adapter.\n * Only `hash` is consumed by this hook — the rest is opaque context.\n */\ninterface TxCallbackContext {\n  chainId: number\n  request: unknown\n}\n\n/** Structural params for the fulfillIntent call. Mirrors FulfillIntentParams +\n *  WriteHookParams from @provex/react but declared here to keep @provex/proving\n *  from depending on the React package's built dist (which the test environment\n *  doesn't require). The real ProveXClient.fulfillIntent satisfies this shape.\n *\n *  IMPORTANT: onAwaitingSignature and onTransactionHash match the exact call\n *  shapes in buildWritableMethod (ProveXClient.ts ~890, ~903):\n *    params.onAwaitingSignature?.(ctx)              → (info: TxCallbackContext) => void\n *    params.onTransactionHash?.({ ...ctx, hash })   → (info: TxCallbackContext & { hash: Hex }) => void\n */\ninterface FulfillParams {\n  intentHash: Hex\n  attestation: V3AttestationResponseObject\n  verificationData: Hex\n  postIntentHookData?: Hex\n  onAwaitingSignature?: (info: TxCallbackContext) => void\n  onTransactionHash?: (info: TxCallbackContext & { hash: Hex }) => void\n}\n\n/** The structural slice of ProveXClient the orchestrator depends on. Keeping\n *  it structural lets tests pass a light fake and avoids importing the class. */\nexport interface ProvingClient {\n  fulfillIntent: (params: FulfillParams) => Promise<{ hash: Hex; receipt: unknown }>\n  checkNullifierUsed: (params: { paymentMethodId: Hex; nullifier: Hex }) => Promise<boolean | null>\n}\n\nexport interface UseProvingOptions {\n  client: ProvingClient\n  captureAdapter: CaptureAdapter\n  request: CaptureRequest\n  /** Payment method id for the nullifier registry lookup. */\n  paymentMethodId: Hex\n  /** Manual-select resolver forwarded to the adapter. */\n  selectTransaction?: SelectTransaction\n  /**\n   * Forwarded to ProveXClient.fulfillIntent for the consumer's tx-flight strip.\n   * Receives the raw TxContext — the hook does not inspect the argument.\n   */\n  onAwaitingSignature?: () => void\n  /** Receives the raw tx hash extracted from the TxContext+hash payload. */\n  onTransactionHash?: (hash: Hex) => void\n  /** Called once when the flow reaches `complete`. */\n  onComplete?: (attestation: V3AttestationResponseObject) => void\n}\n\nexport interface UseProvingReturn {\n  state: ProvingState\n  /** Phase 1+2: authenticate, capture, attest, nullifier-check → readyToFulfill. */\n  authenticate: () => Promise<void>\n  /** Phase 3: submit fulfillIntent → confirm → sync → complete. */\n  fulfill: () => Promise<void>\n  /** Re-run attestation after a pre-fulfilment error. */\n  retryVerification: () => Promise<void>\n  /** Re-run submission after a post-fulfilment error. */\n  retrySubmission: () => Promise<void>\n}\n\n/** Minimum visible-state pacing from SubmitStep.tsx:404-417 — keep a state\n *  on screen at least `floorMs` so the user perceives the step. */\nasync function withMinimumVisible(floorMs: number, started: number): Promise<void> {\n  const elapsed = Date.now() - started\n  if (elapsed < floorMs) await sleep(floorMs - elapsed)\n}\n\n/**\n * Detect a wallet-rejection error structurally (without importing ProveXError).\n * ProveXClient always re-wraps user rejections as ProveXError with\n * code === 'WALLET_REJECTED' before the error escapes fulfillIntent.\n */\nfunction isWalletRejection(error: unknown): boolean {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    'code' in error &&\n    (error as { code: unknown }).code === 'WALLET_REJECTED'\n  )\n}\n\nexport function useProving(options: UseProvingOptions): UseProvingReturn {\n  const {\n    client,\n    captureAdapter,\n    request,\n    paymentMethodId,\n    selectTransaction,\n    onAwaitingSignature,\n    onTransactionHash,\n    onComplete,\n  } = options\n\n  const [state, setState] = useState<ProvingState>({ status: 'authenticate' })\n  // Re-entry guard mirroring isRequestingAttestationRef (SubmitStep.tsx:199).\n  const inFlightRef = useRef(false)\n  // Separate in-flight guard for submit — prevents double on-chain spend from\n  // two rapid fulfill() calls before a re-render.\n  const submitInFlightRef = useRef(false)\n\n  const runCaptureAndAttest = useCallback(async (): Promise<void> => {\n    if (inFlightRef.current) return\n    inFlightRef.current = true\n    try {\n      setState({ status: 'capture' })\n      const handle = await captureAdapter.authenticateAndCapture(request, { selectTransaction })\n\n      const attestStarted = Date.now()\n      setState({ status: 'attest' })\n      const verified = await captureAdapter.attest(handle, request)\n      // SubmitStep.tsx:414-417: verifying state must be visible for ≥1000ms.\n      await withMinimumVisible(1000, attestStarted)\n\n      // Nullifier double-spend check (SubmitStep.tsx:419-426).\n      const nullifier = extractNullifier(verified.attestation)\n      if (nullifier) {\n        const isUsed = await client.checkNullifierUsed({ paymentMethodId, nullifier })\n        if (isUsed === true) {\n          throw new Error(\n            'This payment has already been verified. The nullifier has already been used onchain.',\n          )\n        }\n      }\n\n      setState({ status: 'readyToFulfill', attestation: verified })\n    } catch (error) {\n      setState({\n        status: 'error',\n        message: error instanceof Error ? error.message : 'Verification failed',\n        isSubmissionError: false,\n      })\n    } finally {\n      inFlightRef.current = false\n    }\n  }, [captureAdapter, client, request, paymentMethodId, selectTransaction])\n\n  const submit = useCallback(\n    async (verified: VerifiedAttestation): Promise<void> => {\n      // Re-entry guard: prevent two rapid submit calls from both calling\n      // fulfillIntent (double on-chain spend). Mirrors inFlightRef pattern.\n      if (submitInFlightRef.current) return\n      submitInFlightRef.current = true\n\n      const submitStarted = Date.now()\n      setState({ status: 'fulfillIntent', attestation: verified })\n      try {\n        await client.fulfillIntent({\n          intentHash: request.intent.intentHash,\n          attestation: verified.attestation,\n          verificationData: verified.verificationData,\n          // Wrap consumer callbacks to match the real buildWritableMethod\n          // call shapes (ProveXClient.ts ~890, ~903).\n          onAwaitingSignature: onAwaitingSignature\n            ? (_info: TxCallbackContext) => { onAwaitingSignature() }\n            : undefined,\n          // buildWritableMethod fires onTransactionHash with { ...ctx, hash }\n          // (ProveXClient.ts ~903). Extract hash and forward to the consumer's\n          // simpler (hash: Hex) => void API.\n          onTransactionHash: onTransactionHash\n            ? (info: TxCallbackContext & { hash: Hex }) => {\n                // After the tx is broadcast (a separate async tick before the\n                // receipt arrives), surface the confirm state so it is\n                // observable by consumers.\n                setState({ status: 'confirm', attestation: verified })\n                onTransactionHash(info.hash)\n              }\n            : ((_info: TxCallbackContext & { hash: Hex }) => {\n                setState({ status: 'confirm', attestation: verified })\n              }),\n        })\n        await withMinimumVisible(500, submitStarted)\n\n        // fulfillIntent already awaited receipt + indexer sync internally\n        // (ProveXClient.ts:906-915). Surface sync as a real visible state\n        // (confirm was set in onTransactionHash above); then await a\n        // minimum-visible window before complete so sync is not batched away.\n        setState({ status: 'sync', attestation: verified })\n        await sleep(600)\n        setState({ status: 'complete', attestation: verified })\n        onComplete?.(verified.attestation)\n      } catch (error) {\n        // Wallet rejection: return to readyToFulfill so the user can retry\n        // without losing the attestation (mirrors SubmitStep.tsx:571-573).\n        if (isWalletRejection(error)) {\n          setState({ status: 'readyToFulfill', attestation: verified })\n          return\n        }\n        setState({\n          status: 'error',\n          message: error instanceof Error ? error.message : 'Submission failed',\n          isSubmissionError: true,\n          attestation: verified,\n        })\n      } finally {\n        submitInFlightRef.current = false\n      }\n    },\n    [client, request.intent.intentHash, onAwaitingSignature, onTransactionHash, onComplete],\n  )\n\n  const authenticate = useCallback(() => runCaptureAndAttest(), [runCaptureAndAttest])\n\n  const fulfill = useCallback(async () => {\n    if (state.status !== 'readyToFulfill') return\n    await submit(state.attestation)\n  }, [state, submit])\n\n  const retryVerification = useCallback(async () => {\n    setState({ status: 'authenticate' })\n    await runCaptureAndAttest()\n  }, [runCaptureAndAttest])\n\n  const retrySubmission = useCallback(async () => {\n    if (state.status !== 'error' || !state.attestation) return\n    await submit(state.attestation)\n  }, [state, submit])\n\n  return { state, authenticate, fulfill, retryVerification, retrySubmission }\n}\n"]}
+{"version":3,"sources":["../src/types.ts","../src/useProving.ts"],"names":["sleep","useState","useRef","useCallback","extractNullifier"],"mappings":";;;;;;;;;AAoIO,IAAM,yBAAA,GAAN,cAAwC,KAAA,CAAM;AAAA,EAC1C,QAAA;AAAA,EACT,YAAY,QAAA,EAAkB;AAC5B,IAAA,KAAA,CAAM,CAAA,sDAAA,EAAyD,QAAQ,CAAA,EAAA,CAAI,CAAA;AAC3E,IAAA,IAAA,CAAK,IAAA,GAAO,2BAAA;AACZ,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AACF,CAAA;AAOO,IAAM,uBAAA,GAAN,cAAsC,KAAA,CAAM;AAAA,EACxC,UAAA;AAAA,EACT,YAAY,UAAA,EAAgC;AAC1C,IAAA,KAAA,CAAM,wEAAwE,CAAA;AAC9E,IAAA,IAAA,CAAK,IAAA,GAAO,yBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAAA,EACpB;AACF,CAAA;;;ACnDA,eAAe,kBAAA,CAAmB,SAAiB,OAAA,EAAgC;AACjF,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,GAAA,EAAI,GAAI,OAAA;AAC7B,EAAA,IAAI,OAAA,GAAU,OAAA,EAAS,MAAMA,UAAA,CAAM,UAAU,OAAO,CAAA;AACtD;AAOA,SAAS,kBAAkB,KAAA,EAAyB;AAClD,EAAA,OACE,OAAO,UAAU,QAAA,IACjB,KAAA,KAAU,QACV,MAAA,IAAU,KAAA,IACT,MAA4B,IAAA,KAAS,iBAAA;AAE1C;AAEO,SAAS,WAAW,OAAA,EAA8C;AACvE,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,cAAA;AAAA,IACA,OAAA;AAAA,IACA,eAAA;AAAA,IACA,iBAAA;AAAA,IACA,mBAAA;AAAA,IACA,iBAAA;AAAA,IACA;AAAA,GACF,GAAI,OAAA;AAEJ,EAAA,MAAM,CAAC,OAAO,QAAQ,CAAA,GAAIC,eAAuB,EAAE,MAAA,EAAQ,gBAAgB,CAAA;AAE3E,EAAA,MAAM,WAAA,GAAcC,aAAO,KAAK,CAAA;AAGhC,EAAA,MAAM,iBAAA,GAAoBA,aAAO,KAAK,CAAA;AAEtC,EAAA,MAAM,mBAAA,GAAsBC,kBAAY,YAA2B;AACjE,IAAA,IAAI,YAAY,OAAA,EAAS;AACzB,IAAA,WAAA,CAAY,OAAA,GAAU,IAAA;AACtB,IAAA,IAAI;AAIF,MAAA,IAAI,MAAA,CAAO,OAAA,KAAY,OAAA,CAAQ,OAAA,EAAS;AACtC,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,gDAAA,EAAmD,MAAA,CAAO,OAAO,CAAA,8BAAA,EAAiC,QAAQ,OAAO,CAAA,wEAAA;AAAA,SACnH;AAAA,MACF;AAEA,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,SAAA,EAAW,CAAA;AAC9B,MAAA,MAAM,SAAS,MAAM,cAAA,CAAe,uBAAuB,OAAA,EAAS,EAAE,mBAAmB,CAAA;AAEzF,MAAA,MAAM,aAAA,GAAgB,KAAK,GAAA,EAAI;AAC/B,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,QAAA,EAAU,CAAA;AAC7B,MAAA,MAAM,QAAA,GAAW,MAAM,cAAA,CAAe,MAAA,CAAO,QAAQ,OAAO,CAAA;AAE5D,MAAA,MAAM,kBAAA,CAAmB,KAAM,aAAa,CAAA;AAO5C,MAAA,MAAM,SAAA,GAAYC,sBAAA,CAAiB,QAAA,CAAS,WAAW,CAAA;AACvD,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,SAAS,MAAM,MAAA,CAAO,mBAAmB,EAAE,eAAA,EAAiB,WAAW,CAAA;AAC7E,MAAA,IAAI,WAAW,KAAA,EAAO;AACpB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,MAAA,KAAW,OACP,sFAAA,GACA;AAAA,SACN;AAAA,MACF;AAGA,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,gBAAA,EAAkB,WAAA,EAAa,UAAU,CAAA;AAAA,IAC9D,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,OACJ,KAAA,YAAiB,yBAAA,GACZ,qBAAA,GACD,KAAA,YAAiB,0BACd,2BAAA,GACD,MAAA;AACR,MAAA,QAAA,CAAS;AAAA,QACP,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,qBAAA;AAAA,QAClD,iBAAA,EAAmB,KAAA;AAAA,QACnB;AAAA,OACD,CAAA;AAAA,IACH,CAAA,SAAE;AACA,MAAA,WAAA,CAAY,OAAA,GAAU,KAAA;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,cAAA,EAAgB,QAAQ,OAAA,EAAS,eAAA,EAAiB,iBAAiB,CAAC,CAAA;AAExE,EAAA,MAAM,MAAA,GAASD,iBAAA;AAAA,IACb,OAAO,QAAA,KAAiD;AAGtD,MAAA,IAAI,kBAAkB,OAAA,EAAS;AAC/B,MAAA,iBAAA,CAAkB,OAAA,GAAU,IAAA;AAE5B,MAAA,MAAM,aAAA,GAAgB,KAAK,GAAA,EAAI;AAC/B,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,eAAA,EAAiB,WAAA,EAAa,UAAU,CAAA;AAC3D,MAAA,IAAI;AAGF,QAAA,IAAI,MAAA,CAAO,OAAA,KAAY,OAAA,CAAQ,OAAA,EAAS;AACtC,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,CAAA,gDAAA,EAAmD,MAAA,CAAO,OAAO,CAAA,8BAAA,EAAiC,QAAQ,OAAO,CAAA,wEAAA;AAAA,WACnH;AAAA,QACF;AACA,QAAA,MAAM,OAAO,aAAA,CAAc;AAAA,UACzB,UAAA,EAAY,QAAQ,MAAA,CAAO,UAAA;AAAA,UAC3B,aAAa,QAAA,CAAS,WAAA;AAAA,UACtB,kBAAkB,QAAA,CAAS,gBAAA;AAAA;AAAA;AAAA,UAG3B,mBAAA,EAAqB,mBAAA,GACjB,CAAC,KAAA,KAA6B;AAAE,YAAA,mBAAA,EAAoB;AAAA,UAAE,CAAA,GACtD,KAAA,CAAA;AAAA;AAAA;AAAA;AAAA,UAIJ,iBAAA,EAAmB,iBAAA,GACf,CAAC,IAAA,KAA4C;AAI3C,YAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,SAAA,EAAW,WAAA,EAAa,UAAU,CAAA;AACrD,YAAA,iBAAA,CAAkB,KAAK,IAAI,CAAA;AAAA,UAC7B,CAAA,GACC,CAAC,KAAA,KAA6C;AAC7C,YAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,SAAA,EAAW,WAAA,EAAa,UAAU,CAAA;AAAA,UACvD;AAAA,SACL,CAAA;AACD,QAAA,MAAM,kBAAA,CAAmB,KAAK,aAAa,CAAA;AAM3C,QAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,MAAA,EAAQ,WAAA,EAAa,UAAU,CAAA;AAClD,QAAA,MAAMH,WAAM,GAAG,CAAA;AACf,QAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,UAAA,EAAY,WAAA,EAAa,UAAU,CAAA;AACtD,QAAA,UAAA,GAAa,SAAS,WAAW,CAAA;AAAA,MACnC,SAAS,KAAA,EAAO;AAGd,QAAA,IAAI,iBAAA,CAAkB,KAAK,CAAA,EAAG;AAC5B,UAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,gBAAA,EAAkB,WAAA,EAAa,UAAU,CAAA;AAC5D,UAAA;AAAA,QACF;AACA,QAAA,QAAA,CAAS;AAAA,UACP,MAAA,EAAQ,OAAA;AAAA,UACR,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,mBAAA;AAAA,UAClD,iBAAA,EAAmB,IAAA;AAAA,UACnB,WAAA,EAAa;AAAA,SACd,CAAA;AAAA,MACH,CAAA,SAAE;AACA,QAAA,iBAAA,CAAkB,OAAA,GAAU,KAAA;AAAA,MAC9B;AAAA,IACF,CAAA;AAAA,IACA,CAAC,MAAA,EAAQ,OAAA,CAAQ,OAAO,UAAA,EAAY,mBAAA,EAAqB,mBAAmB,UAAU;AAAA,GACxF;AAEA,EAAA,MAAM,eAAeG,iBAAA,CAAY,MAAM,qBAAoB,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAEnF,EAAA,MAAM,OAAA,GAAUA,kBAAY,YAAY;AACtC,IAAA,IAAI,KAAA,CAAM,WAAW,gBAAA,EAAkB;AACvC,IAAA,MAAM,MAAA,CAAO,MAAM,WAAW,CAAA;AAAA,EAChC,CAAA,EAAG,CAAC,KAAA,EAAO,MAAM,CAAC,CAAA;AAElB,EAAA,MAAM,iBAAA,GAAoBA,kBAAY,YAAY;AAChD,IAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,cAAA,EAAgB,CAAA;AACnC,IAAA,MAAM,mBAAA,EAAoB;AAAA,EAC5B,CAAA,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAExB,EAAA,MAAM,eAAA,GAAkBA,kBAAY,YAAY;AAC9C,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,OAAA,IAAW,CAAC,MAAM,WAAA,EAAa;AACpD,IAAA,MAAM,MAAA,CAAO,MAAM,WAAW,CAAA;AAAA,EAChC,CAAA,EAAG,CAAC,KAAA,EAAO,MAAM,CAAC,CAAA;AAElB,EAAA,OAAO,EAAE,KAAA,EAAO,YAAA,EAAc,OAAA,EAAS,mBAAmB,eAAA,EAAgB;AAC5E","file":"useProving.cjs","sourcesContent":["/**\n * @fileoverview Seam contract + state types for the proving orchestrator.\n *\n * `CaptureAdapter` is the swappable capture backend (extension+enclave today,\n * TLSNotary tomorrow). `ProvingState` is the single discriminated-union\n * machine that subsumes the live proof-substep machine (ProofPanel) and the\n * attestation lifecycle (submitStepDerivations). Monetary values stay bigint\n * in base units; the only stringified amount is `ProvingIntent.amount`, which\n * mirrors the existing on-the-wire BuyerTeeIntent shape (buyerTeeAttestation).\n */\n\nimport type { Hex } from 'viem'\nimport type { V3AttestationResponseObject } from '@provex/utils'\nimport type { TokenInfo } from '@provex/utils/tokens'\n\n/** Transaction candidate the adapter surfaces for manual selection. Mirrors\n *  the `MetadataMessage` fields the live TransactionSelector consumes; kept\n *  structural so the package needs no @provex/extension-react import. */\nexport interface CaptureCandidate {\n  amount: number | string\n  currency?: string\n  date?: string | number | Date\n  originalIndex: number\n}\n\n/** Identity the attestor binds the attestation to. Mirrors the live\n *  attestationIntent built in SubmitStep.tsx:333-342 / BuyerTeeIntent. */\nexport interface ProvingIntent {\n  intentHash: Hex\n  /** bigint base units, stringified (matches BuyerTeeIntent.amount). */\n  amount: string\n  timestampMs: string\n  paymentMethod: Hex\n  fiatCurrency: Hex\n  conversionRate: string\n  /** payeeDetailsHash */\n  payeeDetails: Hex\n  timestampBufferMs?: string\n}\n\n/** What the orchestrator hands a capture adapter. */\nexport interface CaptureRequest {\n  /** Parent provider key, e.g. 'zelle', 'revolut'. */\n  provider: string\n  /** Extension platform slug, e.g. 'chase'. */\n  platform: string\n  /** Action type, e.g. 'transfer_zelle'. */\n  actionType: string\n  intent: ProvingIntent\n  /** UnifiedPaymentVerifier the attestation is re-signed for. */\n  verifyingContract: Hex\n  chainId: number\n  /**\n   * Settlement token for this intent (e.g. USDC on the target chain).\n   * Used by the adapter to compute the fiat currency amount via\n   * convertTokenInputToCurrency so auto-match works correctly for non-1:1 rates.\n   */\n  token: TokenInfo\n}\n\n/** Opaque per-backend capture state; the orchestrator passes it back unmodified. */\nexport interface CaptureHandle {\n  readonly kind: string\n  readonly material: unknown\n}\n\n/** Uniform capture output. `verificationData` names the signing witness to\n *  the on-chain verifier (enclave signer for buyerTee — SubmitStep.tsx:473-475). */\nexport interface VerifiedAttestation {\n  attestation: V3AttestationResponseObject\n  verificationData: Hex\n}\n\n/** Resolver the UI provides so the adapter can collect a manual transaction\n *  pick when auto-match fails (GenerateProofStep.tsx:391-404). */\nexport type SelectTransaction = (candidates: CaptureCandidate[]) => Promise<number>\n\n/** A pluggable capture backend. One per capture mechanism. */\nexport interface CaptureAdapter {\n  /** Stable id for telemetry, e.g. 'extension-enclave'. */\n  readonly kind: string\n  /** Phase 1: authenticate + capture, returning opaque material to attest. */\n  authenticateAndCapture(\n    request: CaptureRequest,\n    options?: { selectTransaction?: SelectTransaction },\n  ): Promise<CaptureHandle>\n  /** Phase 2: produce a verified attestation from the captured material. */\n  attest(handle: CaptureHandle, request: CaptureRequest): Promise<VerifiedAttestation>\n}\n\n/** Inputs the orchestrator hook needs to drive the machine. */\nexport interface ProvingRequest {\n  request: CaptureRequest\n  /** Optional manual-select resolver forwarded to the adapter. */\n  selectTransaction?: SelectTransaction\n}\n\n/**\n * The proving state machine (spec lines 141-151). `attest` auto-runs on\n * entry; `readyToFulfill` waits for the user's explicit Complete Order\n * action; `error.isSubmissionError` routes retry to Retry Submission\n * (post-fulfilment) vs Retry Verification (pre-fulfilment) — exactly the\n * live SubmitStep.tsx:931-955 routing.\n */\nexport type ProvingState =\n  | { status: 'authenticate' }\n  | { status: 'capture' }\n  | { status: 'attest' }\n  | { status: 'readyToFulfill'; attestation: VerifiedAttestation }\n  | { status: 'fulfillIntent'; attestation: VerifiedAttestation }\n  | { status: 'confirm'; attestation: VerifiedAttestation }\n  | { status: 'sync'; attestation: VerifiedAttestation }\n  | { status: 'complete'; attestation: VerifiedAttestation }\n  | {\n      status: 'error'\n      message: string\n      /** true ⇒ failure occurred during/after on-chain submission. */\n      isSubmissionError: boolean\n      attestation?: VerifiedAttestation\n      /** Typed reason, set for cases the consumer must branch on. Currently\n       *  'enclave-unavailable' (non-migrated provider → caller falls back to\n       *  Reclaim) and 'manual-selection-required' (auto-match failed, no\n       *  resolver supplied). Absent for ordinary verification/submission errors. */\n      code?: 'enclave-unavailable' | 'manual-selection-required'\n    }\n\n/**\n * Thrown by a capture adapter when the provider returned no buyerTee capture\n * (a non-migrated / Reclaim-only provider). The caller (UnifiedBuy) catches\n * this to fall back to its retained Reclaim branch — the package itself does\n * not implement Reclaim (decision (a), spec line 256).\n */\nexport class EnclaveCaptureUnavailable extends Error {\n  readonly platform: string\n  constructor(platform: string) {\n    super(`No enclave (buyerTee) capture available for platform \"${platform}\".`)\n    this.name = 'EnclaveCaptureUnavailable'\n    this.platform = platform\n  }\n}\n\n/**\n * Thrown by a capture adapter when auto-match failed and no `selectTransaction`\n * resolver was provided (e.g. a headless wallet). Carries the candidates so a\n * UI caller can render the manual selector and retry (spec lines 263-267).\n */\nexport class ManualSelectionRequired extends Error {\n  readonly candidates: CaptureCandidate[]\n  constructor(candidates: CaptureCandidate[]) {\n    super('Manual transaction selection is required but no resolver was provided.')\n    this.name = 'ManualSelectionRequired'\n    this.candidates = candidates\n  }\n}\n","/**\n * @fileoverview useProving — headless orchestrator for the enclave proving\n * pipeline. Replicates the live AuthenticateStep/GenerateProofStep/SubmitStep\n * state machine (ProofPanel) with no presentation. Renders nothing; returns\n * state + actions for a UI (UnifiedBuy ProofPanel or a wallet) to bind to.\n *\n * Owns: the ProvingState machine, the nullifier double-spend check\n * (SubmitStep.tsx:419-426), the attest→fulfil sequencing, retry routing\n * (SubmitStep.tsx:931-955), and the minimum-visible-state timings\n * (SubmitStep.tsx:404-417). Delegates capture to the injected CaptureAdapter,\n * the on-chain write (+ receipt + indexer sync) to ProveXClient.fulfillIntent.\n */\n\nimport { useCallback, useRef, useState } from 'react'\nimport type { Hex } from 'viem'\nimport { extractNullifier, type V3AttestationResponseObject } from '@provex/utils'\nimport { sleep } from '@provex/utils/time'\nimport { EnclaveCaptureUnavailable, ManualSelectionRequired } from './types'\nimport type {\n  CaptureAdapter,\n  CaptureRequest,\n  SelectTransaction,\n  ProvingState,\n  VerifiedAttestation,\n} from './types'\n\n/**\n * Minimal context object that buildWritableMethod passes to the per-call hooks.\n * Kept structural so @provex/proving does not depend on @valve-tech/wallet-adapter.\n * Only `hash` is consumed by this hook — the rest is opaque context.\n */\ninterface TxCallbackContext {\n  chainId: number\n  request: unknown\n}\n\n/** Structural params for the fulfillIntent call. Mirrors FulfillIntentParams +\n *  WriteHookParams from @provex/react but declared here to keep @provex/proving\n *  from depending on the React package's built dist (which the test environment\n *  doesn't require). The real ProveXClient.fulfillIntent satisfies this shape.\n *\n *  IMPORTANT: onAwaitingSignature and onTransactionHash match the exact call\n *  shapes in buildWritableMethod (ProveXClient.ts ~890, ~903):\n *    params.onAwaitingSignature?.(ctx)              → (info: TxCallbackContext) => void\n *    params.onTransactionHash?.({ ...ctx, hash })   → (info: TxCallbackContext & { hash: Hex }) => void\n */\ninterface FulfillParams {\n  intentHash: Hex\n  attestation: V3AttestationResponseObject\n  verificationData: Hex\n  postIntentHookData?: Hex\n  onAwaitingSignature?: (info: TxCallbackContext) => void\n  onTransactionHash?: (info: TxCallbackContext & { hash: Hex }) => void\n}\n\n/** The structural slice of ProveXClient the orchestrator depends on. Keeping\n *  it structural lets tests pass a light fake and avoids importing the class. */\nexport interface ProvingClient {\n  /**\n   * The chain this rail operates on. Must equal request.chainId — useProving\n   * refuses to check the nullifier or submit on any other chain. A nullifier is\n   * only meaningful on its intended chain; checking it on (or submitting it to)\n   * a different chain is a cross-chain double-spend / replay vector.\n   */\n  readonly chainId: number\n  fulfillIntent: (params: FulfillParams) => Promise<{ hash: Hex; receipt: unknown }>\n  checkNullifierUsed: (params: { paymentMethodId: Hex; nullifier: Hex }) => Promise<boolean | null>\n}\n\nexport interface UseProvingOptions {\n  client: ProvingClient\n  captureAdapter: CaptureAdapter\n  request: CaptureRequest\n  /** Payment method id for the nullifier registry lookup. */\n  paymentMethodId: Hex\n  /** Manual-select resolver forwarded to the adapter. */\n  selectTransaction?: SelectTransaction\n  /**\n   * Forwarded to ProveXClient.fulfillIntent for the consumer's tx-flight strip.\n   * Receives the raw TxContext — the hook does not inspect the argument.\n   */\n  onAwaitingSignature?: () => void\n  /** Receives the raw tx hash extracted from the TxContext+hash payload. */\n  onTransactionHash?: (hash: Hex) => void\n  /** Called once when the flow reaches `complete`. */\n  onComplete?: (attestation: V3AttestationResponseObject) => void\n}\n\nexport interface UseProvingReturn {\n  state: ProvingState\n  /** Phase 1+2: authenticate, capture, attest, nullifier-check → readyToFulfill. */\n  authenticate: () => Promise<void>\n  /** Phase 3: submit fulfillIntent → confirm → sync → complete. */\n  fulfill: () => Promise<void>\n  /** Re-run attestation after a pre-fulfilment error. */\n  retryVerification: () => Promise<void>\n  /** Re-run submission after a post-fulfilment error. */\n  retrySubmission: () => Promise<void>\n}\n\n/** Minimum visible-state pacing from SubmitStep.tsx:404-417 — keep a state\n *  on screen at least `floorMs` so the user perceives the step. */\nasync function withMinimumVisible(floorMs: number, started: number): Promise<void> {\n  const elapsed = Date.now() - started\n  if (elapsed < floorMs) await sleep(floorMs - elapsed)\n}\n\n/**\n * Detect a wallet-rejection error structurally (without importing ProveXError).\n * ProveXClient always re-wraps user rejections as ProveXError with\n * code === 'WALLET_REJECTED' before the error escapes fulfillIntent.\n */\nfunction isWalletRejection(error: unknown): boolean {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    'code' in error &&\n    (error as { code: unknown }).code === 'WALLET_REJECTED'\n  )\n}\n\nexport function useProving(options: UseProvingOptions): UseProvingReturn {\n  const {\n    client,\n    captureAdapter,\n    request,\n    paymentMethodId,\n    selectTransaction,\n    onAwaitingSignature,\n    onTransactionHash,\n    onComplete,\n  } = options\n\n  const [state, setState] = useState<ProvingState>({ status: 'authenticate' })\n  // Re-entry guard mirroring isRequestingAttestationRef (SubmitStep.tsx:199).\n  const inFlightRef = useRef(false)\n  // Separate in-flight guard for submit — prevents double on-chain spend from\n  // two rapid fulfill() calls before a re-render.\n  const submitInFlightRef = useRef(false)\n\n  const runCaptureAndAttest = useCallback(async (): Promise<void> => {\n    if (inFlightRef.current) return\n    inFlightRef.current = true\n    try {\n      // Chain pinning: the nullifier must only ever be checked on the chain the\n      // intent targets. A client wired to any other chain is refused before we\n      // touch capture/attest/registry — never verify on the wrong chain.\n      if (client.chainId !== request.chainId) {\n        throw new Error(\n          `Refusing to proceed: proving client is on chain ${client.chainId} but the intent targets chain ${request.chainId}. A nullifier must only be verified and fulfilled on its intended chain.`,\n        )\n      }\n\n      setState({ status: 'capture' })\n      const handle = await captureAdapter.authenticateAndCapture(request, { selectTransaction })\n\n      const attestStarted = Date.now()\n      setState({ status: 'attest' })\n      const verified = await captureAdapter.attest(handle, request)\n      // SubmitStep.tsx:414-417: verifying state must be visible for ≥1000ms.\n      await withMinimumVisible(1000, attestStarted)\n\n      // Nullifier double-spend pre-check — FAIL CLOSED. We must positively\n      // confirm the nullifier is unused on the target chain before allowing\n      // fulfillment. Any inability to verify (cannot extract, registry\n      // unreachable/errored) blocks. \"If we can't verify the nullifier has not\n      // been used, we cannot use it.\"\n      const nullifier = extractNullifier(verified.attestation)\n      if (!nullifier) {\n        throw new Error(\n          'Could not extract a nullifier from the attestation; cannot confirm it is unused. Refusing to proceed.',\n        )\n      }\n      const isUsed = await client.checkNullifierUsed({ paymentMethodId, nullifier })\n      if (isUsed !== false) {\n        throw new Error(\n          isUsed === true\n            ? 'This payment has already been verified. The nullifier has already been used onchain.'\n            : 'Could not verify the nullifier is unused (registry unreachable). Refusing to proceed — please retry.',\n        )\n      }\n\n      // only an explicit `false` reaches here\n      setState({ status: 'readyToFulfill', attestation: verified })\n    } catch (error) {\n      const code =\n        error instanceof EnclaveCaptureUnavailable\n          ? ('enclave-unavailable' as const)\n          : error instanceof ManualSelectionRequired\n            ? ('manual-selection-required' as const)\n            : undefined\n      setState({\n        status: 'error',\n        message: error instanceof Error ? error.message : 'Verification failed',\n        isSubmissionError: false,\n        code,\n      })\n    } finally {\n      inFlightRef.current = false\n    }\n  }, [captureAdapter, client, request, paymentMethodId, selectTransaction])\n\n  const submit = useCallback(\n    async (verified: VerifiedAttestation): Promise<void> => {\n      // Re-entry guard: prevent two rapid submit calls from both calling\n      // fulfillIntent (double on-chain spend). Mirrors inFlightRef pattern.\n      if (submitInFlightRef.current) return\n      submitInFlightRef.current = true\n\n      const submitStarted = Date.now()\n      setState({ status: 'fulfillIntent', attestation: verified })\n      try {\n        // Chain pinning (re-asserted at submit): the nullifier was verified on\n        // request.chainId; it must only ever be submitted to that same chain.\n        if (client.chainId !== request.chainId) {\n          throw new Error(\n            `Refusing to proceed: proving client is on chain ${client.chainId} but the intent targets chain ${request.chainId}. A nullifier must only be verified and fulfilled on its intended chain.`,\n          )\n        }\n        await client.fulfillIntent({\n          intentHash: request.intent.intentHash,\n          attestation: verified.attestation,\n          verificationData: verified.verificationData,\n          // Wrap consumer callbacks to match the real buildWritableMethod\n          // call shapes (ProveXClient.ts ~890, ~903).\n          onAwaitingSignature: onAwaitingSignature\n            ? (_info: TxCallbackContext) => { onAwaitingSignature() }\n            : undefined,\n          // buildWritableMethod fires onTransactionHash with { ...ctx, hash }\n          // (ProveXClient.ts ~903). Extract hash and forward to the consumer's\n          // simpler (hash: Hex) => void API.\n          onTransactionHash: onTransactionHash\n            ? (info: TxCallbackContext & { hash: Hex }) => {\n                // After the tx is broadcast (a separate async tick before the\n                // receipt arrives), surface the confirm state so it is\n                // observable by consumers.\n                setState({ status: 'confirm', attestation: verified })\n                onTransactionHash(info.hash)\n              }\n            : ((_info: TxCallbackContext & { hash: Hex }) => {\n                setState({ status: 'confirm', attestation: verified })\n              }),\n        })\n        await withMinimumVisible(500, submitStarted)\n\n        // fulfillIntent already awaited receipt + indexer sync internally\n        // (ProveXClient.ts:906-915). Surface sync as a real visible state\n        // (confirm was set in onTransactionHash above); then await a\n        // minimum-visible window before complete so sync is not batched away.\n        setState({ status: 'sync', attestation: verified })\n        await sleep(600)\n        setState({ status: 'complete', attestation: verified })\n        onComplete?.(verified.attestation)\n      } catch (error) {\n        // Wallet rejection: return to readyToFulfill so the user can retry\n        // without losing the attestation (mirrors SubmitStep.tsx:571-573).\n        if (isWalletRejection(error)) {\n          setState({ status: 'readyToFulfill', attestation: verified })\n          return\n        }\n        setState({\n          status: 'error',\n          message: error instanceof Error ? error.message : 'Submission failed',\n          isSubmissionError: true,\n          attestation: verified,\n        })\n      } finally {\n        submitInFlightRef.current = false\n      }\n    },\n    [client, request.intent.intentHash, onAwaitingSignature, onTransactionHash, onComplete],\n  )\n\n  const authenticate = useCallback(() => runCaptureAndAttest(), [runCaptureAndAttest])\n\n  const fulfill = useCallback(async () => {\n    if (state.status !== 'readyToFulfill') return\n    await submit(state.attestation)\n  }, [state, submit])\n\n  const retryVerification = useCallback(async () => {\n    setState({ status: 'authenticate' })\n    await runCaptureAndAttest()\n  }, [runCaptureAndAttest])\n\n  const retrySubmission = useCallback(async () => {\n    if (state.status !== 'error' || !state.attestation) return\n    await submit(state.attestation)\n  }, [state, submit])\n\n  return { state, authenticate, fulfill, retryVerification, retrySubmission }\n}\n"]}

package/dist/useProving.d.cts

@@ -1,91 +1,4 @@
-import { Hex } from 'viem';
-import { V3AttestationResponseObject } from '@provex/utils';
-import { c as CaptureAdapter, a as CaptureRequest, S as SelectTransaction, e as ProvingState } from './types-ByiBb7AN.cjs';
+import 'viem';
+import '@provex/utils';
+export { f as ProvingClient, U as UseProvingOptions, g as UseProvingReturn, u as useProving } from './useProving-h4RtlSEU.cjs';
 import '@provex/utils/tokens';
-
-/**
- * @fileoverview useProving — headless orchestrator for the enclave proving
- * pipeline. Replicates the live AuthenticateStep/GenerateProofStep/SubmitStep
- * state machine (ProofPanel) with no presentation. Renders nothing; returns
- * state + actions for a UI (UnifiedBuy ProofPanel or a wallet) to bind to.
- *
- * Owns: the ProvingState machine, the nullifier double-spend check
- * (SubmitStep.tsx:419-426), the attest→fulfil sequencing, retry routing
- * (SubmitStep.tsx:931-955), and the minimum-visible-state timings
- * (SubmitStep.tsx:404-417). Delegates capture to the injected CaptureAdapter,
- * the on-chain write (+ receipt + indexer sync) to ProveXClient.fulfillIntent.
- */
-
-/**
- * Minimal context object that buildWritableMethod passes to the per-call hooks.
- * Kept structural so @provex/proving does not depend on @valve-tech/wallet-adapter.
- * Only `hash` is consumed by this hook — the rest is opaque context.
- */
-interface TxCallbackContext {
-    chainId: number;
-    request: unknown;
-}
-/** Structural params for the fulfillIntent call. Mirrors FulfillIntentParams +
- *  WriteHookParams from @provex/react but declared here to keep @provex/proving
- *  from depending on the React package's built dist (which the test environment
- *  doesn't require). The real ProveXClient.fulfillIntent satisfies this shape.
- *
- *  IMPORTANT: onAwaitingSignature and onTransactionHash match the exact call
- *  shapes in buildWritableMethod (ProveXClient.ts ~890, ~903):
- *    params.onAwaitingSignature?.(ctx)              → (info: TxCallbackContext) => void
- *    params.onTransactionHash?.({ ...ctx, hash })   → (info: TxCallbackContext & { hash: Hex }) => void
- */
-interface FulfillParams {
-    intentHash: Hex;
-    attestation: V3AttestationResponseObject;
-    verificationData: Hex;
-    postIntentHookData?: Hex;
-    onAwaitingSignature?: (info: TxCallbackContext) => void;
-    onTransactionHash?: (info: TxCallbackContext & {
-        hash: Hex;
-    }) => void;
-}
-/** The structural slice of ProveXClient the orchestrator depends on. Keeping
- *  it structural lets tests pass a light fake and avoids importing the class. */
-interface ProvingClient {
-    fulfillIntent: (params: FulfillParams) => Promise<{
-        hash: Hex;
-        receipt: unknown;
-    }>;
-    checkNullifierUsed: (params: {
-        paymentMethodId: Hex;
-        nullifier: Hex;
-    }) => Promise<boolean | null>;
-}
-interface UseProvingOptions {
-    client: ProvingClient;
-    captureAdapter: CaptureAdapter;
-    request: CaptureRequest;
-    /** Payment method id for the nullifier registry lookup. */
-    paymentMethodId: Hex;
-    /** Manual-select resolver forwarded to the adapter. */
-    selectTransaction?: SelectTransaction;
-    /**
-     * Forwarded to ProveXClient.fulfillIntent for the consumer's tx-flight strip.
-     * Receives the raw TxContext — the hook does not inspect the argument.
-     */
-    onAwaitingSignature?: () => void;
-    /** Receives the raw tx hash extracted from the TxContext+hash payload. */
-    onTransactionHash?: (hash: Hex) => void;
-    /** Called once when the flow reaches `complete`. */
-    onComplete?: (attestation: V3AttestationResponseObject) => void;
-}
-interface UseProvingReturn {
-    state: ProvingState;
-    /** Phase 1+2: authenticate, capture, attest, nullifier-check → readyToFulfill. */
-    authenticate: () => Promise<void>;
-    /** Phase 3: submit fulfillIntent → confirm → sync → complete. */
-    fulfill: () => Promise<void>;
-    /** Re-run attestation after a pre-fulfilment error. */
-    retryVerification: () => Promise<void>;
-    /** Re-run submission after a post-fulfilment error. */
-    retrySubmission: () => Promise<void>;
-}
-declare function useProving(options: UseProvingOptions): UseProvingReturn;
-
-export { type ProvingClient, type UseProvingOptions, type UseProvingReturn, useProving };

package/dist/useProving.d.ts

@@ -1,91 +1,4 @@
-import { Hex } from 'viem';
-import { V3AttestationResponseObject } from '@provex/utils';
-import { c as CaptureAdapter, a as CaptureRequest, S as SelectTransaction, e as ProvingState } from './types-ByiBb7AN.js';
+import 'viem';
+import '@provex/utils';
+export { f as ProvingClient, U as UseProvingOptions, g as UseProvingReturn, u as useProving } from './useProving-h4RtlSEU.js';
 import '@provex/utils/tokens';
-
-/**
- * @fileoverview useProving — headless orchestrator for the enclave proving
- * pipeline. Replicates the live AuthenticateStep/GenerateProofStep/SubmitStep
- * state machine (ProofPanel) with no presentation. Renders nothing; returns
- * state + actions for a UI (UnifiedBuy ProofPanel or a wallet) to bind to.
- *
- * Owns: the ProvingState machine, the nullifier double-spend check
- * (SubmitStep.tsx:419-426), the attest→fulfil sequencing, retry routing
- * (SubmitStep.tsx:931-955), and the minimum-visible-state timings
- * (SubmitStep.tsx:404-417). Delegates capture to the injected CaptureAdapter,
- * the on-chain write (+ receipt + indexer sync) to ProveXClient.fulfillIntent.
- */
-
-/**
- * Minimal context object that buildWritableMethod passes to the per-call hooks.
- * Kept structural so @provex/proving does not depend on @valve-tech/wallet-adapter.
- * Only `hash` is consumed by this hook — the rest is opaque context.
- */
-interface TxCallbackContext {
-    chainId: number;
-    request: unknown;
-}
-/** Structural params for the fulfillIntent call. Mirrors FulfillIntentParams +
- *  WriteHookParams from @provex/react but declared here to keep @provex/proving
- *  from depending on the React package's built dist (which the test environment
- *  doesn't require). The real ProveXClient.fulfillIntent satisfies this shape.
- *
- *  IMPORTANT: onAwaitingSignature and onTransactionHash match the exact call
- *  shapes in buildWritableMethod (ProveXClient.ts ~890, ~903):
- *    params.onAwaitingSignature?.(ctx)              → (info: TxCallbackContext) => void
- *    params.onTransactionHash?.({ ...ctx, hash })   → (info: TxCallbackContext & { hash: Hex }) => void
- */
-interface FulfillParams {
-    intentHash: Hex;
-    attestation: V3AttestationResponseObject;
-    verificationData: Hex;
-    postIntentHookData?: Hex;
-    onAwaitingSignature?: (info: TxCallbackContext) => void;
-    onTransactionHash?: (info: TxCallbackContext & {
-        hash: Hex;
-    }) => void;
-}
-/** The structural slice of ProveXClient the orchestrator depends on. Keeping
- *  it structural lets tests pass a light fake and avoids importing the class. */
-interface ProvingClient {
-    fulfillIntent: (params: FulfillParams) => Promise<{
-        hash: Hex;
-        receipt: unknown;
-    }>;
-    checkNullifierUsed: (params: {
-        paymentMethodId: Hex;
-        nullifier: Hex;
-    }) => Promise<boolean | null>;
-}
-interface UseProvingOptions {
-    client: ProvingClient;
-    captureAdapter: CaptureAdapter;
-    request: CaptureRequest;
-    /** Payment method id for the nullifier registry lookup. */
-    paymentMethodId: Hex;
-    /** Manual-select resolver forwarded to the adapter. */
-    selectTransaction?: SelectTransaction;
-    /**
-     * Forwarded to ProveXClient.fulfillIntent for the consumer's tx-flight strip.
-     * Receives the raw TxContext — the hook does not inspect the argument.
-     */
-    onAwaitingSignature?: () => void;
-    /** Receives the raw tx hash extracted from the TxContext+hash payload. */
-    onTransactionHash?: (hash: Hex) => void;
-    /** Called once when the flow reaches `complete`. */
-    onComplete?: (attestation: V3AttestationResponseObject) => void;
-}
-interface UseProvingReturn {
-    state: ProvingState;
-    /** Phase 1+2: authenticate, capture, attest, nullifier-check → readyToFulfill. */
-    authenticate: () => Promise<void>;
-    /** Phase 3: submit fulfillIntent → confirm → sync → complete. */
-    fulfill: () => Promise<void>;
-    /** Re-run attestation after a pre-fulfilment error. */
-    retryVerification: () => Promise<void>;
-    /** Re-run submission after a post-fulfilment error. */
-    retrySubmission: () => Promise<void>;
-}
-declare function useProving(options: UseProvingOptions): UseProvingReturn;
-
-export { type ProvingClient, type UseProvingOptions, type UseProvingReturn, useProving };

package/dist/useProving.js

@@ -1,3 +1,3 @@
-export { useProving } from './chunk-LFDS3XGK.js';
+export { useProving } from './chunk-OSBIXUFA.js';
 //# sourceMappingURL=useProving.js.map
 //# sourceMappingURL=useProving.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@provex/proving",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "Headless enclave proving orchestrator for the Provex buy flow",
   "type": "module",
   "repository": {
@@ -21,11 +21,6 @@
       "types": "./dist/useProving.d.ts",
       "import": "./dist/useProving.js",
       "require": "./dist/useProving.cjs"
-    },
-    "./adapters/extensionEnclave": {
-      "types": "./dist/adapters/extensionEnclave.d.ts",
-      "import": "./dist/adapters/extensionEnclave.js",
-      "require": "./dist/adapters/extensionEnclave.cjs"
     }
   },
   "publishConfig": {
@@ -44,8 +39,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@provex/react": "1.8.0",
-    "@provex/utils": "1.8.0"
+    "@provex/utils": "1.9.0"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0",