@provex/proving 1.8.0 → 1.9.0

package/dist/extensionEnclave-DLCjCWxT.d.ts

@@ -1,119 +0,0 @@
-import { C as CaptureCandidate, c as CaptureAdapter } from './types-ByiBb7AN.js';
-import { Hex } from 'viem';
-import { V3AttestationResponseObject } from '@provex/utils';
-
-/**
- * @fileoverview Buyer trusted-execution attestation client.
- *
- * In PeerAuth extension 0.5.2+, capture produces a buyerTee proof —
- * `{ proofType: 'buyerTee', encryptedSessionMaterial, params }` — where the
- * bank session is already encrypted toward the enclave (cookies never reach
- * our page in plaintext). Instead of re-signing a Reclaim proof through our
- * gate, we hand that material to zkp2p's trusted-execution attestation
- * service, which verifies the payment inside an Amazon Web Services Nitro
- * enclave and signs the attestation directly.
- *
- * The response `responseObject` is the same `V3AttestationResponseObject`
- * shape our gate returns, so it flows through the existing
- * `encodeV3PaymentProof` path unchanged.
- *
- * Moved verbatim from `@provex/ui` (packages/ui/src/lib/buyerTeeAttestation.ts)
- * with the base URL changed from a `@provex/ui` config import to an injected
- * `attestationBaseUrl` argument so this package carries no `@provex/ui` dep.
- */
-
-/**
- * Runtime shape of a buyerTee proof emitted by the PeerAuth extension.
- * Narrow with {@link asBuyerTeeProof} before use.
- */
-interface BuyerTeeProof {
-    proofType: 'buyerTee';
-    /** Session material already encrypted toward the enclave (opaque to us). */
-    encryptedSessionMaterial: string;
-    /** Platform-specific params, e.g. Revolut `{ index }`, Chase `{ index }`. */
-    params: unknown;
-    actionType?: string;
-    actionPlatform?: string;
-}
-/**
- * Narrow an extension proof to a buyerTee proof, or null when it is the
- * legacy Reclaim shape (or malformed).
- */
-declare function asBuyerTeeProof(proof: unknown): BuyerTeeProof | null;
-/** Intent details the enclave binds the attestation to. */
-interface BuyerTeeIntent {
-    intentHash: Hex;
-    amount: string;
-    timestampMs: string;
-    paymentMethod: Hex;
-    fiatCurrency: Hex;
-    conversionRate: string;
-    payeeDetails: Hex;
-    timestampBufferMs?: string;
-}
-interface RequestBuyerTeeAttestationArgs {
-    /** Gate/attestation origin (was `gateForwarderBaseUrl` in @provex/ui). */
-    attestationBaseUrl: string;
-    /** Extension platform / bank key, e.g. `revolut`, `chase`. */
-    platform: string;
-    /** Action type, e.g. `transfer_revolut`, `transfer_zelle`. */
-    actionType: string;
-    /** Encrypted session material from the buyerTee capture. */
-    encryptedSessionMaterial: string;
-    /** Platform params from the capture (e.g. `{ index }`). */
-    params: unknown;
-    /** PulseChain UnifiedPaymentVerifier the gate re-signs the attestation for. */
-    verifyingContract: string;
-    intent: BuyerTeeIntent;
-}
-/**
- * Verify a buyer payment via the gate. The gate proxies the encrypted capture
- * to zkp2p's enclave, then re-signs the resulting attestation for PulseChain
- * with our witness key — the enclave itself refuses to sign for 369.
- *
- * Throws with the gate's error text on a non-2xx response.
- */
-declare function requestBuyerTeeAttestation(args: RequestBuyerTeeAttestationArgs): Promise<V3AttestationResponseObject>;
-
-/**
- * @fileoverview Extension + enclave CaptureAdapter (the v1 capture backend).
- *
- * Mirrors the live AuthenticateStep + GenerateProofStep enclave path
- * (AuthenticateStep.tsx:224-281, GenerateProofStep.tsx:237-251) reduced to
- * the buyerTee branch. Talks to an injected `window.peer`-shaped client so
- * @provex/proving stays framework-agnostic and needs no @provex/extension-react
- * import (spec dependency-direction, lines 103-110).
- */
-
-/** Minimal shape of the metadata response the extension posts back. */
-interface MetadataResponse {
-    platform: string;
-    metadata: CaptureCandidate[];
-    buyerTeeCapture?: {
-        encryptedSessionMaterial: string;
-    };
-}
-/** Minimal slice of `window.peer` this adapter depends on. */
-interface PeerClient {
-    authenticate(inputs: {
-        actionType: string;
-        platform: string;
-        captureMode: 'buyerTee';
-    }): Promise<void>;
-    onMetadataMessage(fn: (data: MetadataResponse) => void): () => void;
-}
-interface ExtensionEnclaveAdapterConfig {
-    /** Resolve the live peer client (e.g. `() => window.peer`). */
-    getPeer: () => PeerClient | undefined;
-    /** Gate/attestation origin handed to requestBuyerTeeAttestation. */
-    attestationBaseUrl: string;
-    /**
-     * Milliseconds before awaitMetadata rejects if the extension never posts a
-     * matching metadata message. Mirrors the 60-second timeout in
-     * AuthenticateStep.tsx:232-236. Defaults to 60000.
-     */
-    timeoutMs?: number;
-}
-declare function createExtensionEnclaveAdapter(config: ExtensionEnclaveAdapterConfig): CaptureAdapter;
-
-export { type BuyerTeeProof as B, type ExtensionEnclaveAdapterConfig as E, type PeerClient as P, type RequestBuyerTeeAttestationArgs as R, asBuyerTeeProof as a, type BuyerTeeIntent as b, createExtensionEnclaveAdapter as c, requestBuyerTeeAttestation as r };