@provex/proving 1.8.0

package/dist/index.d.cts

@@ -0,0 +1,49 @@
+export { b as BuyerTeeIntent, B as BuyerTeeProof, E as ExtensionEnclaveAdapterConfig, P as PeerClient, R as RequestBuyerTeeAttestationArgs, a as asBuyerTeeProof, c as createExtensionEnclaveAdapter, r as requestBuyerTeeAttestation } from './extensionEnclave-BjxXsuaj.cjs';
+export { c as CaptureAdapter, C as CaptureCandidate, b as CaptureHandle, a as CaptureRequest, E as EnclaveCaptureUnavailable, M as ManualSelectionRequired, P as ProvingIntent, d as ProvingRequest, e as ProvingState, S as SelectTransaction, V as VerifiedAttestation } from './types-ByiBb7AN.cjs';
+import { V3AttestationResponseObject } from '@provex/utils';
+import { TokenInfo } from '@provex/utils/tokens';
+export { ProvingClient, UseProvingOptions, UseProvingReturn, useProving } from './useProving.cjs';
+import 'viem';
+
+/**
+ * @fileoverview Pure proving derivations moved from @provex/ui
+ * (packages/ui/src/components/UnifiedBuy/ProofPanel/submitStepDerivations.ts).
+ *
+ * Bigint throughout — see the `money-values-stay-bigint-until-display` rule.
+ * The only string conversions happen at the formatter boundary (formatUnits),
+ * which is the display layer.
+ */
+
+interface PartialFulfillment {
+    /** Gross USDC the gate authorized for release (typedData.releaseAmount). */
+    grossReleased: bigint;
+    /** Net USDC the buyer actually receives (grossReleased − fee). */
+    netToBuyer: bigint;
+    /** Protocol fee in USDC base units. 0n when no fee applies. */
+    protocolFee: bigint;
+    /** Locked USDC returned to the maker (intent.amount − grossReleased). */
+    returnedToMaker: bigint;
+    contractedFiatDisplay: string;
+    attestedFiatDisplay: string;
+    netToBuyerDisplay: string;
+    returnedToMakerDisplay: string;
+    /** null when protocolFee === 0n so the caller can skip rendering the row. */
+    protocolFeeDisplay: string | null;
+}
+/**
+ * Partial-fulfilment breakdown derived from the verified attestation.
+ *
+ * Returns `null` when:
+ *   - attestation isn't present (nothing to compare)
+ *   - releaseAmount >= intent.amount (full settlement, no partial story)
+ *   - intent/tokenInfo missing (defensive)
+ */
+declare function computePartialFulfillment({ attestation, intentAmount, conversionRate, tokenInfo, feeBps, }: {
+    attestation: V3AttestationResponseObject | null;
+    intentAmount: bigint | null | undefined;
+    conversionRate: bigint | null | undefined;
+    tokenInfo: TokenInfo | null;
+    feeBps: bigint | null | undefined;
+}): PartialFulfillment | null;
+
+export { type PartialFulfillment, computePartialFulfillment };

package/dist/index.d.ts

@@ -0,0 +1,49 @@
+export { b as BuyerTeeIntent, B as BuyerTeeProof, E as ExtensionEnclaveAdapterConfig, P as PeerClient, R as RequestBuyerTeeAttestationArgs, a as asBuyerTeeProof, c as createExtensionEnclaveAdapter, r as requestBuyerTeeAttestation } from './extensionEnclave-DLCjCWxT.js';
+export { c as CaptureAdapter, C as CaptureCandidate, b as CaptureHandle, a as CaptureRequest, E as EnclaveCaptureUnavailable, M as ManualSelectionRequired, P as ProvingIntent, d as ProvingRequest, e as ProvingState, S as SelectTransaction, V as VerifiedAttestation } from './types-ByiBb7AN.js';
+import { V3AttestationResponseObject } from '@provex/utils';
+import { TokenInfo } from '@provex/utils/tokens';
+export { ProvingClient, UseProvingOptions, UseProvingReturn, useProving } from './useProving.js';
+import 'viem';
+
+/**
+ * @fileoverview Pure proving derivations moved from @provex/ui
+ * (packages/ui/src/components/UnifiedBuy/ProofPanel/submitStepDerivations.ts).
+ *
+ * Bigint throughout — see the `money-values-stay-bigint-until-display` rule.
+ * The only string conversions happen at the formatter boundary (formatUnits),
+ * which is the display layer.
+ */
+
+interface PartialFulfillment {
+    /** Gross USDC the gate authorized for release (typedData.releaseAmount). */
+    grossReleased: bigint;
+    /** Net USDC the buyer actually receives (grossReleased − fee). */
+    netToBuyer: bigint;
+    /** Protocol fee in USDC base units. 0n when no fee applies. */
+    protocolFee: bigint;
+    /** Locked USDC returned to the maker (intent.amount − grossReleased). */
+    returnedToMaker: bigint;
+    contractedFiatDisplay: string;
+    attestedFiatDisplay: string;
+    netToBuyerDisplay: string;
+    returnedToMakerDisplay: string;
+    /** null when protocolFee === 0n so the caller can skip rendering the row. */
+    protocolFeeDisplay: string | null;
+}
+/**
+ * Partial-fulfilment breakdown derived from the verified attestation.
+ *
+ * Returns `null` when:
+ *   - attestation isn't present (nothing to compare)
+ *   - releaseAmount >= intent.amount (full settlement, no partial story)
+ *   - intent/tokenInfo missing (defensive)
+ */
+declare function computePartialFulfillment({ attestation, intentAmount, conversionRate, tokenInfo, feeBps, }: {
+    attestation: V3AttestationResponseObject | null;
+    intentAmount: bigint | null | undefined;
+    conversionRate: bigint | null | undefined;
+    tokenInfo: TokenInfo | null;
+    feeBps: bigint | null | undefined;
+}): PartialFulfillment | null;
+
+export { type PartialFulfillment, computePartialFulfillment };

package/dist/index.js

@@ -0,0 +1,51 @@
+export { useProving } from './chunk-LFDS3XGK.js';
+export { EnclaveCaptureUnavailable, ManualSelectionRequired, asBuyerTeeProof, createExtensionEnclaveAdapter, requestBuyerTeeAttestation } from './chunk-QLPNUQDA.js';
+import { formatUnits } from '@provex/utils/units';
+import { convertTokenInputToCurrency } from '@provex/utils/conversionRates';
+import { calculateNetAmount, calculateFeeAmount } from '@provex/utils/fees';
+
+function computePartialFulfillment({
+  attestation,
+  intentAmount,
+  conversionRate,
+  tokenInfo,
+  feeBps
+}) {
+  if (!attestation || !intentAmount || !conversionRate || !tokenInfo) return null;
+  const grossReleased = BigInt(attestation.typedDataValue.releaseAmount);
+  if (grossReleased >= intentAmount) return null;
+  const returnedToMaker = intentAmount - grossReleased;
+  const effectiveFeeBps = feeBps ?? 0n;
+  const netToBuyer = effectiveFeeBps > 0n ? calculateNetAmount({ grossAmount: grossReleased, feeBps: effectiveFeeBps }) : grossReleased;
+  const protocolFee = effectiveFeeBps > 0n ? calculateFeeAmount({ amount: grossReleased, feeBps: effectiveFeeBps }) : 0n;
+  const contractedFiatRaw = convertTokenInputToCurrency({
+    token: tokenInfo,
+    amountOutInt: intentAmount,
+    rate: conversionRate
+  });
+  const attestedFiatRaw = convertTokenInputToCurrency({
+    token: tokenInfo,
+    amountOutInt: grossReleased,
+    rate: conversionRate
+  });
+  const formatTokenDisplay = (value) => formatUnits(value, {
+    decimals: tokenInfo.decimals,
+    truncateDecimals: 2,
+    padDecimals: 2
+  });
+  return {
+    grossReleased,
+    netToBuyer,
+    protocolFee,
+    returnedToMaker,
+    contractedFiatDisplay: formatTokenDisplay(contractedFiatRaw),
+    attestedFiatDisplay: formatTokenDisplay(attestedFiatRaw),
+    netToBuyerDisplay: formatTokenDisplay(netToBuyer),
+    returnedToMakerDisplay: formatTokenDisplay(returnedToMaker),
+    protocolFeeDisplay: protocolFee > 0n ? formatTokenDisplay(protocolFee) : null
+  };
+}
+
+export { computePartialFulfillment };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/derivations.ts"],"names":[],"mappings":";;;;;;AAwCO,SAAS,yBAAA,CAA0B;AAAA,EACxC,WAAA;AAAA,EACA,YAAA;AAAA,EACA,cAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA,EAM8B;AAC5B,EAAA,IAAI,CAAC,eAAe,CAAC,YAAA,IAAgB,CAAC,cAAA,IAAkB,CAAC,WAAW,OAAO,IAAA;AAC3E,EAAA,MAAM,aAAA,GAAgB,MAAA,CAAO,WAAA,CAAY,cAAA,CAAe,aAAa,CAAA;AACrE,EAAA,IAAI,aAAA,IAAiB,cAAc,OAAO,IAAA;AAE1C,EAAA,MAAM,kBAAkB,YAAA,GAAe,aAAA;AACvC,EAAA,MAAM,kBAAkB,MAAA,IAAU,EAAA;AAClC,EAAA,MAAM,UAAA,GACJ,eAAA,GAAkB,EAAA,GACd,kBAAA,CAAmB,EAAE,aAAa,aAAA,EAAe,MAAA,EAAQ,eAAA,EAAiB,CAAA,GAC1E,aAAA;AACN,EAAA,MAAM,WAAA,GACJ,eAAA,GAAkB,EAAA,GACd,kBAAA,CAAmB,EAAE,QAAQ,aAAA,EAAe,MAAA,EAAQ,eAAA,EAAiB,CAAA,GACrE,EAAA;AAEN,EAAA,MAAM,oBAAoB,2BAAA,CAA4B;AAAA,IACpD,KAAA,EAAO,SAAA;AAAA,IACP,YAAA,EAAc,YAAA;AAAA,IACd,IAAA,EAAM;AAAA,GACP,CAAA;AACD,EAAA,MAAM,kBAAkB,2BAAA,CAA4B;AAAA,IAClD,KAAA,EAAO,SAAA;AAAA,IACP,YAAA,EAAc,aAAA;AAAA,IACd,IAAA,EAAM;AAAA,GACP,CAAA;AAED,EAAA,MAAM,kBAAA,GAAqB,CAAC,KAAA,KAC1B,WAAA,CAAY,KAAA,EAAO;AAAA,IACjB,UAAU,SAAA,CAAU,QAAA;AAAA,IACpB,gBAAA,EAAkB,CAAA;AAAA,IAClB,WAAA,EAAa;AAAA,GACd,CAAA;AAEH,EAAA,OAAO;AAAA,IACL,aAAA;AAAA,IACA,UAAA;AAAA,IACA,WAAA;AAAA,IACA,eAAA;AAAA,IACA,qBAAA,EAAuB,mBAAmB,iBAAiB,CAAA;AAAA,IAC3D,mBAAA,EAAqB,mBAAmB,eAAe,CAAA;AAAA,IACvD,iBAAA,EAAmB,mBAAmB,UAAU,CAAA;AAAA,IAChD,sBAAA,EAAwB,mBAAmB,eAAe,CAAA;AAAA,IAC1D,kBAAA,EAAoB,WAAA,GAAc,EAAA,GAAK,kBAAA,CAAmB,WAAW,CAAA,GAAI;AAAA,GAC3E;AACF","file":"index.js","sourcesContent":["/**\n * @fileoverview Pure proving derivations moved from @provex/ui\n * (packages/ui/src/components/UnifiedBuy/ProofPanel/submitStepDerivations.ts).\n *\n * Bigint throughout — see the `money-values-stay-bigint-until-display` rule.\n * The only string conversions happen at the formatter boundary (formatUnits),\n * which is the display layer.\n */\n\nimport type { V3AttestationResponseObject } from '@provex/utils'\nimport type { TokenInfo } from '@provex/utils/tokens'\nimport { formatUnits } from '@provex/utils/units'\nimport { convertTokenInputToCurrency } from '@provex/utils/conversionRates'\nimport { calculateFeeAmount, calculateNetAmount } from '@provex/utils/fees'\n\nexport interface PartialFulfillment {\n  /** Gross USDC the gate authorized for release (typedData.releaseAmount). */\n  grossReleased: bigint\n  /** Net USDC the buyer actually receives (grossReleased − fee). */\n  netToBuyer: bigint\n  /** Protocol fee in USDC base units. 0n when no fee applies. */\n  protocolFee: bigint\n  /** Locked USDC returned to the maker (intent.amount − grossReleased). */\n  returnedToMaker: bigint\n  contractedFiatDisplay: string\n  attestedFiatDisplay: string\n  netToBuyerDisplay: string\n  returnedToMakerDisplay: string\n  /** null when protocolFee === 0n so the caller can skip rendering the row. */\n  protocolFeeDisplay: string | null\n}\n\n/**\n * Partial-fulfilment breakdown derived from the verified attestation.\n *\n * Returns `null` when:\n *   - attestation isn't present (nothing to compare)\n *   - releaseAmount >= intent.amount (full settlement, no partial story)\n *   - intent/tokenInfo missing (defensive)\n */\nexport function computePartialFulfillment({\n  attestation,\n  intentAmount,\n  conversionRate,\n  tokenInfo,\n  feeBps,\n}: {\n  attestation: V3AttestationResponseObject | null\n  intentAmount: bigint | null | undefined\n  conversionRate: bigint | null | undefined\n  tokenInfo: TokenInfo | null\n  feeBps: bigint | null | undefined\n}): PartialFulfillment | null {\n  if (!attestation || !intentAmount || !conversionRate || !tokenInfo) return null\n  const grossReleased = BigInt(attestation.typedDataValue.releaseAmount)\n  if (grossReleased >= intentAmount) return null\n\n  const returnedToMaker = intentAmount - grossReleased\n  const effectiveFeeBps = feeBps ?? 0n\n  const netToBuyer =\n    effectiveFeeBps > 0n\n      ? calculateNetAmount({ grossAmount: grossReleased, feeBps: effectiveFeeBps })\n      : grossReleased\n  const protocolFee =\n    effectiveFeeBps > 0n\n      ? calculateFeeAmount({ amount: grossReleased, feeBps: effectiveFeeBps })\n      : 0n\n\n  const contractedFiatRaw = convertTokenInputToCurrency({\n    token: tokenInfo,\n    amountOutInt: intentAmount,\n    rate: conversionRate,\n  })\n  const attestedFiatRaw = convertTokenInputToCurrency({\n    token: tokenInfo,\n    amountOutInt: grossReleased,\n    rate: conversionRate,\n  })\n\n  const formatTokenDisplay = (value: bigint): string =>\n    formatUnits(value, {\n      decimals: tokenInfo.decimals,\n      truncateDecimals: 2,\n      padDecimals: 2,\n    })\n\n  return {\n    grossReleased,\n    netToBuyer,\n    protocolFee,\n    returnedToMaker,\n    contractedFiatDisplay: formatTokenDisplay(contractedFiatRaw),\n    attestedFiatDisplay: formatTokenDisplay(attestedFiatRaw),\n    netToBuyerDisplay: formatTokenDisplay(netToBuyer),\n    returnedToMakerDisplay: formatTokenDisplay(returnedToMaker),\n    protocolFeeDisplay: protocolFee > 0n ? formatTokenDisplay(protocolFee) : null,\n  }\n}\n"]}

package/dist/types-ByiBb7AN.d.cts

@@ -0,0 +1,144 @@
+import { Hex } from 'viem';
+import { V3AttestationResponseObject } from '@provex/utils';
+import { TokenInfo } from '@provex/utils/tokens';
+
+/**
+ * @fileoverview Seam contract + state types for the proving orchestrator.
+ *
+ * `CaptureAdapter` is the swappable capture backend (extension+enclave today,
+ * TLSNotary tomorrow). `ProvingState` is the single discriminated-union
+ * machine that subsumes the live proof-substep machine (ProofPanel) and the
+ * attestation lifecycle (submitStepDerivations). Monetary values stay bigint
+ * in base units; the only stringified amount is `ProvingIntent.amount`, which
+ * mirrors the existing on-the-wire BuyerTeeIntent shape (buyerTeeAttestation).
+ */
+
+/** Transaction candidate the adapter surfaces for manual selection. Mirrors
+ *  the `MetadataMessage` fields the live TransactionSelector consumes; kept
+ *  structural so the package needs no @provex/extension-react import. */
+interface CaptureCandidate {
+    amount: number | string;
+    currency?: string;
+    date?: string | number | Date;
+    originalIndex: number;
+}
+/** Identity the attestor binds the attestation to. Mirrors the live
+ *  attestationIntent built in SubmitStep.tsx:333-342 / BuyerTeeIntent. */
+interface ProvingIntent {
+    intentHash: Hex;
+    /** bigint base units, stringified (matches BuyerTeeIntent.amount). */
+    amount: string;
+    timestampMs: string;
+    paymentMethod: Hex;
+    fiatCurrency: Hex;
+    conversionRate: string;
+    /** payeeDetailsHash */
+    payeeDetails: Hex;
+    timestampBufferMs?: string;
+}
+/** What the orchestrator hands a capture adapter. */
+interface CaptureRequest {
+    /** Parent provider key, e.g. 'zelle', 'revolut'. */
+    provider: string;
+    /** Extension platform slug, e.g. 'chase'. */
+    platform: string;
+    /** Action type, e.g. 'transfer_zelle'. */
+    actionType: string;
+    intent: ProvingIntent;
+    /** UnifiedPaymentVerifier the attestation is re-signed for. */
+    verifyingContract: Hex;
+    chainId: number;
+    /**
+     * Settlement token for this intent (e.g. USDC on the target chain).
+     * Used by the adapter to compute the fiat currency amount via
+     * convertTokenInputToCurrency so auto-match works correctly for non-1:1 rates.
+     */
+    token: TokenInfo;
+}
+/** Opaque per-backend capture state; the orchestrator passes it back unmodified. */
+interface CaptureHandle {
+    readonly kind: string;
+    readonly material: unknown;
+}
+/** Uniform capture output. `verificationData` names the signing witness to
+ *  the on-chain verifier (enclave signer for buyerTee — SubmitStep.tsx:473-475). */
+interface VerifiedAttestation {
+    attestation: V3AttestationResponseObject;
+    verificationData: Hex;
+}
+/** Resolver the UI provides so the adapter can collect a manual transaction
+ *  pick when auto-match fails (GenerateProofStep.tsx:391-404). */
+type SelectTransaction = (candidates: CaptureCandidate[]) => Promise<number>;
+/** A pluggable capture backend. One per capture mechanism. */
+interface CaptureAdapter {
+    /** Stable id for telemetry, e.g. 'extension-enclave'. */
+    readonly kind: string;
+    /** Phase 1: authenticate + capture, returning opaque material to attest. */
+    authenticateAndCapture(request: CaptureRequest, options?: {
+        selectTransaction?: SelectTransaction;
+    }): Promise<CaptureHandle>;
+    /** Phase 2: produce a verified attestation from the captured material. */
+    attest(handle: CaptureHandle, request: CaptureRequest): Promise<VerifiedAttestation>;
+}
+/** Inputs the orchestrator hook needs to drive the machine. */
+interface ProvingRequest {
+    request: CaptureRequest;
+    /** Optional manual-select resolver forwarded to the adapter. */
+    selectTransaction?: SelectTransaction;
+}
+/**
+ * The proving state machine (spec lines 141-151). `attest` auto-runs on
+ * entry; `readyToFulfill` waits for the user's explicit Complete Order
+ * action; `error.isSubmissionError` routes retry to Retry Submission
+ * (post-fulfilment) vs Retry Verification (pre-fulfilment) — exactly the
+ * live SubmitStep.tsx:931-955 routing.
+ */
+type ProvingState = {
+    status: 'authenticate';
+} | {
+    status: 'capture';
+} | {
+    status: 'attest';
+} | {
+    status: 'readyToFulfill';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'fulfillIntent';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'confirm';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'sync';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'complete';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'error';
+    message: string;
+    /** true ⇒ failure occurred during/after on-chain submission. */
+    isSubmissionError: boolean;
+    attestation?: VerifiedAttestation;
+};
+/**
+ * Thrown by a capture adapter when the provider returned no buyerTee capture
+ * (a non-migrated / Reclaim-only provider). The caller (UnifiedBuy) catches
+ * this to fall back to its retained Reclaim branch — the package itself does
+ * not implement Reclaim (decision (a), spec line 256).
+ */
+declare class EnclaveCaptureUnavailable extends Error {
+    readonly platform: string;
+    constructor(platform: string);
+}
+/**
+ * Thrown by a capture adapter when auto-match failed and no `selectTransaction`
+ * resolver was provided (e.g. a headless wallet). Carries the candidates so a
+ * UI caller can render the manual selector and retry (spec lines 263-267).
+ */
+declare class ManualSelectionRequired extends Error {
+    readonly candidates: CaptureCandidate[];
+    constructor(candidates: CaptureCandidate[]);
+}
+
+export { type CaptureCandidate as C, EnclaveCaptureUnavailable as E, ManualSelectionRequired as M, type ProvingIntent as P, type SelectTransaction as S, type VerifiedAttestation as V, type CaptureRequest as a, type CaptureHandle as b, type CaptureAdapter as c, type ProvingRequest as d, type ProvingState as e };

package/dist/types-ByiBb7AN.d.ts

@@ -0,0 +1,144 @@
+import { Hex } from 'viem';
+import { V3AttestationResponseObject } from '@provex/utils';
+import { TokenInfo } from '@provex/utils/tokens';
+
+/**
+ * @fileoverview Seam contract + state types for the proving orchestrator.
+ *
+ * `CaptureAdapter` is the swappable capture backend (extension+enclave today,
+ * TLSNotary tomorrow). `ProvingState` is the single discriminated-union
+ * machine that subsumes the live proof-substep machine (ProofPanel) and the
+ * attestation lifecycle (submitStepDerivations). Monetary values stay bigint
+ * in base units; the only stringified amount is `ProvingIntent.amount`, which
+ * mirrors the existing on-the-wire BuyerTeeIntent shape (buyerTeeAttestation).
+ */
+
+/** Transaction candidate the adapter surfaces for manual selection. Mirrors
+ *  the `MetadataMessage` fields the live TransactionSelector consumes; kept
+ *  structural so the package needs no @provex/extension-react import. */
+interface CaptureCandidate {
+    amount: number | string;
+    currency?: string;
+    date?: string | number | Date;
+    originalIndex: number;
+}
+/** Identity the attestor binds the attestation to. Mirrors the live
+ *  attestationIntent built in SubmitStep.tsx:333-342 / BuyerTeeIntent. */
+interface ProvingIntent {
+    intentHash: Hex;
+    /** bigint base units, stringified (matches BuyerTeeIntent.amount). */
+    amount: string;
+    timestampMs: string;
+    paymentMethod: Hex;
+    fiatCurrency: Hex;
+    conversionRate: string;
+    /** payeeDetailsHash */
+    payeeDetails: Hex;
+    timestampBufferMs?: string;
+}
+/** What the orchestrator hands a capture adapter. */
+interface CaptureRequest {
+    /** Parent provider key, e.g. 'zelle', 'revolut'. */
+    provider: string;
+    /** Extension platform slug, e.g. 'chase'. */
+    platform: string;
+    /** Action type, e.g. 'transfer_zelle'. */
+    actionType: string;
+    intent: ProvingIntent;
+    /** UnifiedPaymentVerifier the attestation is re-signed for. */
+    verifyingContract: Hex;
+    chainId: number;
+    /**
+     * Settlement token for this intent (e.g. USDC on the target chain).
+     * Used by the adapter to compute the fiat currency amount via
+     * convertTokenInputToCurrency so auto-match works correctly for non-1:1 rates.
+     */
+    token: TokenInfo;
+}
+/** Opaque per-backend capture state; the orchestrator passes it back unmodified. */
+interface CaptureHandle {
+    readonly kind: string;
+    readonly material: unknown;
+}
+/** Uniform capture output. `verificationData` names the signing witness to
+ *  the on-chain verifier (enclave signer for buyerTee — SubmitStep.tsx:473-475). */
+interface VerifiedAttestation {
+    attestation: V3AttestationResponseObject;
+    verificationData: Hex;
+}
+/** Resolver the UI provides so the adapter can collect a manual transaction
+ *  pick when auto-match fails (GenerateProofStep.tsx:391-404). */
+type SelectTransaction = (candidates: CaptureCandidate[]) => Promise<number>;
+/** A pluggable capture backend. One per capture mechanism. */
+interface CaptureAdapter {
+    /** Stable id for telemetry, e.g. 'extension-enclave'. */
+    readonly kind: string;
+    /** Phase 1: authenticate + capture, returning opaque material to attest. */
+    authenticateAndCapture(request: CaptureRequest, options?: {
+        selectTransaction?: SelectTransaction;
+    }): Promise<CaptureHandle>;
+    /** Phase 2: produce a verified attestation from the captured material. */
+    attest(handle: CaptureHandle, request: CaptureRequest): Promise<VerifiedAttestation>;
+}
+/** Inputs the orchestrator hook needs to drive the machine. */
+interface ProvingRequest {
+    request: CaptureRequest;
+    /** Optional manual-select resolver forwarded to the adapter. */
+    selectTransaction?: SelectTransaction;
+}
+/**
+ * The proving state machine (spec lines 141-151). `attest` auto-runs on
+ * entry; `readyToFulfill` waits for the user's explicit Complete Order
+ * action; `error.isSubmissionError` routes retry to Retry Submission
+ * (post-fulfilment) vs Retry Verification (pre-fulfilment) — exactly the
+ * live SubmitStep.tsx:931-955 routing.
+ */
+type ProvingState = {
+    status: 'authenticate';
+} | {
+    status: 'capture';
+} | {
+    status: 'attest';
+} | {
+    status: 'readyToFulfill';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'fulfillIntent';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'confirm';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'sync';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'complete';
+    attestation: VerifiedAttestation;
+} | {
+    status: 'error';
+    message: string;
+    /** true ⇒ failure occurred during/after on-chain submission. */
+    isSubmissionError: boolean;
+    attestation?: VerifiedAttestation;
+};
+/**
+ * Thrown by a capture adapter when the provider returned no buyerTee capture
+ * (a non-migrated / Reclaim-only provider). The caller (UnifiedBuy) catches
+ * this to fall back to its retained Reclaim branch — the package itself does
+ * not implement Reclaim (decision (a), spec line 256).
+ */
+declare class EnclaveCaptureUnavailable extends Error {
+    readonly platform: string;
+    constructor(platform: string);
+}
+/**
+ * Thrown by a capture adapter when auto-match failed and no `selectTransaction`
+ * resolver was provided (e.g. a headless wallet). Carries the candidates so a
+ * UI caller can render the manual selector and retry (spec lines 263-267).
+ */
+declare class ManualSelectionRequired extends Error {
+    readonly candidates: CaptureCandidate[];
+    constructor(candidates: CaptureCandidate[]);
+}
+
+export { type CaptureCandidate as C, EnclaveCaptureUnavailable as E, ManualSelectionRequired as M, type ProvingIntent as P, type SelectTransaction as S, type VerifiedAttestation as V, type CaptureRequest as a, type CaptureHandle as b, type CaptureAdapter as c, type ProvingRequest as d, type ProvingState as e };

package/dist/useProving.cjs

@@ -0,0 +1,125 @@
+'use strict';
+
+var react = require('react');
+var utils = require('@provex/utils');
+var time = require('@provex/utils/time');
+
+// src/useProving.ts
+async function withMinimumVisible(floorMs, started) {
+  const elapsed = Date.now() - started;
+  if (elapsed < floorMs) await time.sleep(floorMs - elapsed);
+}
+function isWalletRejection(error) {
+  return typeof error === "object" && error !== null && "code" in error && error.code === "WALLET_REJECTED";
+}
+function useProving(options) {
+  const {
+    client,
+    captureAdapter,
+    request,
+    paymentMethodId,
+    selectTransaction,
+    onAwaitingSignature,
+    onTransactionHash,
+    onComplete
+  } = options;
+  const [state, setState] = react.useState({ status: "authenticate" });
+  const inFlightRef = react.useRef(false);
+  const submitInFlightRef = react.useRef(false);
+  const runCaptureAndAttest = react.useCallback(async () => {
+    if (inFlightRef.current) return;
+    inFlightRef.current = true;
+    try {
+      setState({ status: "capture" });
+      const handle = await captureAdapter.authenticateAndCapture(request, { selectTransaction });
+      const attestStarted = Date.now();
+      setState({ status: "attest" });
+      const verified = await captureAdapter.attest(handle, request);
+      await withMinimumVisible(1e3, attestStarted);
+      const nullifier = utils.extractNullifier(verified.attestation);
+      if (nullifier) {
+        const isUsed = await client.checkNullifierUsed({ paymentMethodId, nullifier });
+        if (isUsed === true) {
+          throw new Error(
+            "This payment has already been verified. The nullifier has already been used onchain."
+          );
+        }
+      }
+      setState({ status: "readyToFulfill", attestation: verified });
+    } catch (error) {
+      setState({
+        status: "error",
+        message: error instanceof Error ? error.message : "Verification failed",
+        isSubmissionError: false
+      });
+    } finally {
+      inFlightRef.current = false;
+    }
+  }, [captureAdapter, client, request, paymentMethodId, selectTransaction]);
+  const submit = react.useCallback(
+    async (verified) => {
+      if (submitInFlightRef.current) return;
+      submitInFlightRef.current = true;
+      const submitStarted = Date.now();
+      setState({ status: "fulfillIntent", attestation: verified });
+      try {
+        await client.fulfillIntent({
+          intentHash: request.intent.intentHash,
+          attestation: verified.attestation,
+          verificationData: verified.verificationData,
+          // Wrap consumer callbacks to match the real buildWritableMethod
+          // call shapes (ProveXClient.ts ~890, ~903).
+          onAwaitingSignature: onAwaitingSignature ? (_info) => {
+            onAwaitingSignature();
+          } : void 0,
+          // buildWritableMethod fires onTransactionHash with { ...ctx, hash }
+          // (ProveXClient.ts ~903). Extract hash and forward to the consumer's
+          // simpler (hash: Hex) => void API.
+          onTransactionHash: onTransactionHash ? (info) => {
+            setState({ status: "confirm", attestation: verified });
+            onTransactionHash(info.hash);
+          } : (_info) => {
+            setState({ status: "confirm", attestation: verified });
+          }
+        });
+        await withMinimumVisible(500, submitStarted);
+        setState({ status: "sync", attestation: verified });
+        await time.sleep(600);
+        setState({ status: "complete", attestation: verified });
+        onComplete?.(verified.attestation);
+      } catch (error) {
+        if (isWalletRejection(error)) {
+          setState({ status: "readyToFulfill", attestation: verified });
+          return;
+        }
+        setState({
+          status: "error",
+          message: error instanceof Error ? error.message : "Submission failed",
+          isSubmissionError: true,
+          attestation: verified
+        });
+      } finally {
+        submitInFlightRef.current = false;
+      }
+    },
+    [client, request.intent.intentHash, onAwaitingSignature, onTransactionHash, onComplete]
+  );
+  const authenticate = react.useCallback(() => runCaptureAndAttest(), [runCaptureAndAttest]);
+  const fulfill = react.useCallback(async () => {
+    if (state.status !== "readyToFulfill") return;
+    await submit(state.attestation);
+  }, [state, submit]);
+  const retryVerification = react.useCallback(async () => {
+    setState({ status: "authenticate" });
+    await runCaptureAndAttest();
+  }, [runCaptureAndAttest]);
+  const retrySubmission = react.useCallback(async () => {
+    if (state.status !== "error" || !state.attestation) return;
+    await submit(state.attestation);
+  }, [state, submit]);
+  return { state, authenticate, fulfill, retryVerification, retrySubmission };
+}
+
+exports.useProving = useProving;
+//# sourceMappingURL=useProving.cjs.map
+//# sourceMappingURL=useProving.cjs.map

package/dist/useProving.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/useProving.ts"],"names":["sleep","useState","useRef","useCallback","extractNullifier"],"mappings":";;;;;;;AA8FA,eAAe,kBAAA,CAAmB,SAAiB,OAAA,EAAgC;AACjF,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,GAAA,EAAI,GAAI,OAAA;AAC7B,EAAA,IAAI,OAAA,GAAU,OAAA,EAAS,MAAMA,UAAA,CAAM,UAAU,OAAO,CAAA;AACtD;AAOA,SAAS,kBAAkB,KAAA,EAAyB;AAClD,EAAA,OACE,OAAO,UAAU,QAAA,IACjB,KAAA,KAAU,QACV,MAAA,IAAU,KAAA,IACT,MAA4B,IAAA,KAAS,iBAAA;AAE1C;AAEO,SAAS,WAAW,OAAA,EAA8C;AACvE,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,cAAA;AAAA,IACA,OAAA;AAAA,IACA,eAAA;AAAA,IACA,iBAAA;AAAA,IACA,mBAAA;AAAA,IACA,iBAAA;AAAA,IACA;AAAA,GACF,GAAI,OAAA;AAEJ,EAAA,MAAM,CAAC,OAAO,QAAQ,CAAA,GAAIC,eAAuB,EAAE,MAAA,EAAQ,gBAAgB,CAAA;AAE3E,EAAA,MAAM,WAAA,GAAcC,aAAO,KAAK,CAAA;AAGhC,EAAA,MAAM,iBAAA,GAAoBA,aAAO,KAAK,CAAA;AAEtC,EAAA,MAAM,mBAAA,GAAsBC,kBAAY,YAA2B;AACjE,IAAA,IAAI,YAAY,OAAA,EAAS;AACzB,IAAA,WAAA,CAAY,OAAA,GAAU,IAAA;AACtB,IAAA,IAAI;AACF,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,SAAA,EAAW,CAAA;AAC9B,MAAA,MAAM,SAAS,MAAM,cAAA,CAAe,uBAAuB,OAAA,EAAS,EAAE,mBAAmB,CAAA;AAEzF,MAAA,MAAM,aAAA,GAAgB,KAAK,GAAA,EAAI;AAC/B,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,QAAA,EAAU,CAAA;AAC7B,MAAA,MAAM,QAAA,GAAW,MAAM,cAAA,CAAe,MAAA,CAAO,QAAQ,OAAO,CAAA;AAE5D,MAAA,MAAM,kBAAA,CAAmB,KAAM,aAAa,CAAA;AAG5C,MAAA,MAAM,SAAA,GAAYC,sBAAA,CAAiB,QAAA,CAAS,WAAW,CAAA;AACvD,MAAA,IAAI,SAAA,EAAW;AACb,QAAA,MAAM,SAAS,MAAM,MAAA,CAAO,mBAAmB,EAAE,eAAA,EAAiB,WAAW,CAAA;AAC7E,QAAA,IAAI,WAAW,IAAA,EAAM;AACnB,UAAA,MAAM,IAAI,KAAA;AAAA,YACR;AAAA,WACF;AAAA,QACF;AAAA,MACF;AAEA,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,gBAAA,EAAkB,WAAA,EAAa,UAAU,CAAA;AAAA,IAC9D,SAAS,KAAA,EAAO;AACd,MAAA,QAAA,CAAS;AAAA,QACP,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,qBAAA;AAAA,QAClD,iBAAA,EAAmB;AAAA,OACpB,CAAA;AAAA,IACH,CAAA,SAAE;AACA,MAAA,WAAA,CAAY,OAAA,GAAU,KAAA;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,cAAA,EAAgB,QAAQ,OAAA,EAAS,eAAA,EAAiB,iBAAiB,CAAC,CAAA;AAExE,EAAA,MAAM,MAAA,GAASD,iBAAA;AAAA,IACb,OAAO,QAAA,KAAiD;AAGtD,MAAA,IAAI,kBAAkB,OAAA,EAAS;AAC/B,MAAA,iBAAA,CAAkB,OAAA,GAAU,IAAA;AAE5B,MAAA,MAAM,aAAA,GAAgB,KAAK,GAAA,EAAI;AAC/B,MAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,eAAA,EAAiB,WAAA,EAAa,UAAU,CAAA;AAC3D,MAAA,IAAI;AACF,QAAA,MAAM,OAAO,aAAA,CAAc;AAAA,UACzB,UAAA,EAAY,QAAQ,MAAA,CAAO,UAAA;AAAA,UAC3B,aAAa,QAAA,CAAS,WAAA;AAAA,UACtB,kBAAkB,QAAA,CAAS,gBAAA;AAAA;AAAA;AAAA,UAG3B,mBAAA,EAAqB,mBAAA,GACjB,CAAC,KAAA,KAA6B;AAAE,YAAA,mBAAA,EAAoB;AAAA,UAAE,CAAA,GACtD,KAAA,CAAA;AAAA;AAAA;AAAA;AAAA,UAIJ,iBAAA,EAAmB,iBAAA,GACf,CAAC,IAAA,KAA4C;AAI3C,YAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,SAAA,EAAW,WAAA,EAAa,UAAU,CAAA;AACrD,YAAA,iBAAA,CAAkB,KAAK,IAAI,CAAA;AAAA,UAC7B,CAAA,GACC,CAAC,KAAA,KAA6C;AAC7C,YAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,SAAA,EAAW,WAAA,EAAa,UAAU,CAAA;AAAA,UACvD;AAAA,SACL,CAAA;AACD,QAAA,MAAM,kBAAA,CAAmB,KAAK,aAAa,CAAA;AAM3C,QAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,MAAA,EAAQ,WAAA,EAAa,UAAU,CAAA;AAClD,QAAA,MAAMH,WAAM,GAAG,CAAA;AACf,QAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,UAAA,EAAY,WAAA,EAAa,UAAU,CAAA;AACtD,QAAA,UAAA,GAAa,SAAS,WAAW,CAAA;AAAA,MACnC,SAAS,KAAA,EAAO;AAGd,QAAA,IAAI,iBAAA,CAAkB,KAAK,CAAA,EAAG;AAC5B,UAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,gBAAA,EAAkB,WAAA,EAAa,UAAU,CAAA;AAC5D,UAAA;AAAA,QACF;AACA,QAAA,QAAA,CAAS;AAAA,UACP,MAAA,EAAQ,OAAA;AAAA,UACR,OAAA,EAAS,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,mBAAA;AAAA,UAClD,iBAAA,EAAmB,IAAA;AAAA,UACnB,WAAA,EAAa;AAAA,SACd,CAAA;AAAA,MACH,CAAA,SAAE;AACA,QAAA,iBAAA,CAAkB,OAAA,GAAU,KAAA;AAAA,MAC9B;AAAA,IACF,CAAA;AAAA,IACA,CAAC,MAAA,EAAQ,OAAA,CAAQ,OAAO,UAAA,EAAY,mBAAA,EAAqB,mBAAmB,UAAU;AAAA,GACxF;AAEA,EAAA,MAAM,eAAeG,iBAAA,CAAY,MAAM,qBAAoB,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAEnF,EAAA,MAAM,OAAA,GAAUA,kBAAY,YAAY;AACtC,IAAA,IAAI,KAAA,CAAM,WAAW,gBAAA,EAAkB;AACvC,IAAA,MAAM,MAAA,CAAO,MAAM,WAAW,CAAA;AAAA,EAChC,CAAA,EAAG,CAAC,KAAA,EAAO,MAAM,CAAC,CAAA;AAElB,EAAA,MAAM,iBAAA,GAAoBA,kBAAY,YAAY;AAChD,IAAA,QAAA,CAAS,EAAE,MAAA,EAAQ,cAAA,EAAgB,CAAA;AACnC,IAAA,MAAM,mBAAA,EAAoB;AAAA,EAC5B,CAAA,EAAG,CAAC,mBAAmB,CAAC,CAAA;AAExB,EAAA,MAAM,eAAA,GAAkBA,kBAAY,YAAY;AAC9C,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,OAAA,IAAW,CAAC,MAAM,WAAA,EAAa;AACpD,IAAA,MAAM,MAAA,CAAO,MAAM,WAAW,CAAA;AAAA,EAChC,CAAA,EAAG,CAAC,KAAA,EAAO,MAAM,CAAC,CAAA;AAElB,EAAA,OAAO,EAAE,KAAA,EAAO,YAAA,EAAc,OAAA,EAAS,mBAAmB,eAAA,EAAgB;AAC5E","file":"useProving.cjs","sourcesContent":["/**\n * @fileoverview useProving — headless orchestrator for the enclave proving\n * pipeline. Replicates the live AuthenticateStep/GenerateProofStep/SubmitStep\n * state machine (ProofPanel) with no presentation. Renders nothing; returns\n * state + actions for a UI (UnifiedBuy ProofPanel or a wallet) to bind to.\n *\n * Owns: the ProvingState machine, the nullifier double-spend check\n * (SubmitStep.tsx:419-426), the attest→fulfil sequencing, retry routing\n * (SubmitStep.tsx:931-955), and the minimum-visible-state timings\n * (SubmitStep.tsx:404-417). Delegates capture to the injected CaptureAdapter,\n * the on-chain write (+ receipt + indexer sync) to ProveXClient.fulfillIntent.\n */\n\nimport { useCallback, useRef, useState } from 'react'\nimport type { Hex } from 'viem'\nimport { extractNullifier, type V3AttestationResponseObject } from '@provex/utils'\nimport { sleep } from '@provex/utils/time'\nimport type {\n  CaptureAdapter,\n  CaptureRequest,\n  SelectTransaction,\n  ProvingState,\n  VerifiedAttestation,\n} from './types'\n\n/**\n * Minimal context object that buildWritableMethod passes to the per-call hooks.\n * Kept structural so @provex/proving does not depend on @valve-tech/wallet-adapter.\n * Only `hash` is consumed by this hook — the rest is opaque context.\n */\ninterface TxCallbackContext {\n  chainId: number\n  request: unknown\n}\n\n/** Structural params for the fulfillIntent call. Mirrors FulfillIntentParams +\n *  WriteHookParams from @provex/react but declared here to keep @provex/proving\n *  from depending on the React package's built dist (which the test environment\n *  doesn't require). The real ProveXClient.fulfillIntent satisfies this shape.\n *\n *  IMPORTANT: onAwaitingSignature and onTransactionHash match the exact call\n *  shapes in buildWritableMethod (ProveXClient.ts ~890, ~903):\n *    params.onAwaitingSignature?.(ctx)              → (info: TxCallbackContext) => void\n *    params.onTransactionHash?.({ ...ctx, hash })   → (info: TxCallbackContext & { hash: Hex }) => void\n */\ninterface FulfillParams {\n  intentHash: Hex\n  attestation: V3AttestationResponseObject\n  verificationData: Hex\n  postIntentHookData?: Hex\n  onAwaitingSignature?: (info: TxCallbackContext) => void\n  onTransactionHash?: (info: TxCallbackContext & { hash: Hex }) => void\n}\n\n/** The structural slice of ProveXClient the orchestrator depends on. Keeping\n *  it structural lets tests pass a light fake and avoids importing the class. */\nexport interface ProvingClient {\n  fulfillIntent: (params: FulfillParams) => Promise<{ hash: Hex; receipt: unknown }>\n  checkNullifierUsed: (params: { paymentMethodId: Hex; nullifier: Hex }) => Promise<boolean | null>\n}\n\nexport interface UseProvingOptions {\n  client: ProvingClient\n  captureAdapter: CaptureAdapter\n  request: CaptureRequest\n  /** Payment method id for the nullifier registry lookup. */\n  paymentMethodId: Hex\n  /** Manual-select resolver forwarded to the adapter. */\n  selectTransaction?: SelectTransaction\n  /**\n   * Forwarded to ProveXClient.fulfillIntent for the consumer's tx-flight strip.\n   * Receives the raw TxContext — the hook does not inspect the argument.\n   */\n  onAwaitingSignature?: () => void\n  /** Receives the raw tx hash extracted from the TxContext+hash payload. */\n  onTransactionHash?: (hash: Hex) => void\n  /** Called once when the flow reaches `complete`. */\n  onComplete?: (attestation: V3AttestationResponseObject) => void\n}\n\nexport interface UseProvingReturn {\n  state: ProvingState\n  /** Phase 1+2: authenticate, capture, attest, nullifier-check → readyToFulfill. */\n  authenticate: () => Promise<void>\n  /** Phase 3: submit fulfillIntent → confirm → sync → complete. */\n  fulfill: () => Promise<void>\n  /** Re-run attestation after a pre-fulfilment error. */\n  retryVerification: () => Promise<void>\n  /** Re-run submission after a post-fulfilment error. */\n  retrySubmission: () => Promise<void>\n}\n\n/** Minimum visible-state pacing from SubmitStep.tsx:404-417 — keep a state\n *  on screen at least `floorMs` so the user perceives the step. */\nasync function withMinimumVisible(floorMs: number, started: number): Promise<void> {\n  const elapsed = Date.now() - started\n  if (elapsed < floorMs) await sleep(floorMs - elapsed)\n}\n\n/**\n * Detect a wallet-rejection error structurally (without importing ProveXError).\n * ProveXClient always re-wraps user rejections as ProveXError with\n * code === 'WALLET_REJECTED' before the error escapes fulfillIntent.\n */\nfunction isWalletRejection(error: unknown): boolean {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    'code' in error &&\n    (error as { code: unknown }).code === 'WALLET_REJECTED'\n  )\n}\n\nexport function useProving(options: UseProvingOptions): UseProvingReturn {\n  const {\n    client,\n    captureAdapter,\n    request,\n    paymentMethodId,\n    selectTransaction,\n    onAwaitingSignature,\n    onTransactionHash,\n    onComplete,\n  } = options\n\n  const [state, setState] = useState<ProvingState>({ status: 'authenticate' })\n  // Re-entry guard mirroring isRequestingAttestationRef (SubmitStep.tsx:199).\n  const inFlightRef = useRef(false)\n  // Separate in-flight guard for submit — prevents double on-chain spend from\n  // two rapid fulfill() calls before a re-render.\n  const submitInFlightRef = useRef(false)\n\n  const runCaptureAndAttest = useCallback(async (): Promise<void> => {\n    if (inFlightRef.current) return\n    inFlightRef.current = true\n    try {\n      setState({ status: 'capture' })\n      const handle = await captureAdapter.authenticateAndCapture(request, { selectTransaction })\n\n      const attestStarted = Date.now()\n      setState({ status: 'attest' })\n      const verified = await captureAdapter.attest(handle, request)\n      // SubmitStep.tsx:414-417: verifying state must be visible for ≥1000ms.\n      await withMinimumVisible(1000, attestStarted)\n\n      // Nullifier double-spend check (SubmitStep.tsx:419-426).\n      const nullifier = extractNullifier(verified.attestation)\n      if (nullifier) {\n        const isUsed = await client.checkNullifierUsed({ paymentMethodId, nullifier })\n        if (isUsed === true) {\n          throw new Error(\n            'This payment has already been verified. The nullifier has already been used onchain.',\n          )\n        }\n      }\n\n      setState({ status: 'readyToFulfill', attestation: verified })\n    } catch (error) {\n      setState({\n        status: 'error',\n        message: error instanceof Error ? error.message : 'Verification failed',\n        isSubmissionError: false,\n      })\n    } finally {\n      inFlightRef.current = false\n    }\n  }, [captureAdapter, client, request, paymentMethodId, selectTransaction])\n\n  const submit = useCallback(\n    async (verified: VerifiedAttestation): Promise<void> => {\n      // Re-entry guard: prevent two rapid submit calls from both calling\n      // fulfillIntent (double on-chain spend). Mirrors inFlightRef pattern.\n      if (submitInFlightRef.current) return\n      submitInFlightRef.current = true\n\n      const submitStarted = Date.now()\n      setState({ status: 'fulfillIntent', attestation: verified })\n      try {\n        await client.fulfillIntent({\n          intentHash: request.intent.intentHash,\n          attestation: verified.attestation,\n          verificationData: verified.verificationData,\n          // Wrap consumer callbacks to match the real buildWritableMethod\n          // call shapes (ProveXClient.ts ~890, ~903).\n          onAwaitingSignature: onAwaitingSignature\n            ? (_info: TxCallbackContext) => { onAwaitingSignature() }\n            : undefined,\n          // buildWritableMethod fires onTransactionHash with { ...ctx, hash }\n          // (ProveXClient.ts ~903). Extract hash and forward to the consumer's\n          // simpler (hash: Hex) => void API.\n          onTransactionHash: onTransactionHash\n            ? (info: TxCallbackContext & { hash: Hex }) => {\n                // After the tx is broadcast (a separate async tick before the\n                // receipt arrives), surface the confirm state so it is\n                // observable by consumers.\n                setState({ status: 'confirm', attestation: verified })\n                onTransactionHash(info.hash)\n              }\n            : ((_info: TxCallbackContext & { hash: Hex }) => {\n                setState({ status: 'confirm', attestation: verified })\n              }),\n        })\n        await withMinimumVisible(500, submitStarted)\n\n        // fulfillIntent already awaited receipt + indexer sync internally\n        // (ProveXClient.ts:906-915). Surface sync as a real visible state\n        // (confirm was set in onTransactionHash above); then await a\n        // minimum-visible window before complete so sync is not batched away.\n        setState({ status: 'sync', attestation: verified })\n        await sleep(600)\n        setState({ status: 'complete', attestation: verified })\n        onComplete?.(verified.attestation)\n      } catch (error) {\n        // Wallet rejection: return to readyToFulfill so the user can retry\n        // without losing the attestation (mirrors SubmitStep.tsx:571-573).\n        if (isWalletRejection(error)) {\n          setState({ status: 'readyToFulfill', attestation: verified })\n          return\n        }\n        setState({\n          status: 'error',\n          message: error instanceof Error ? error.message : 'Submission failed',\n          isSubmissionError: true,\n          attestation: verified,\n        })\n      } finally {\n        submitInFlightRef.current = false\n      }\n    },\n    [client, request.intent.intentHash, onAwaitingSignature, onTransactionHash, onComplete],\n  )\n\n  const authenticate = useCallback(() => runCaptureAndAttest(), [runCaptureAndAttest])\n\n  const fulfill = useCallback(async () => {\n    if (state.status !== 'readyToFulfill') return\n    await submit(state.attestation)\n  }, [state, submit])\n\n  const retryVerification = useCallback(async () => {\n    setState({ status: 'authenticate' })\n    await runCaptureAndAttest()\n  }, [runCaptureAndAttest])\n\n  const retrySubmission = useCallback(async () => {\n    if (state.status !== 'error' || !state.attestation) return\n    await submit(state.attestation)\n  }, [state, submit])\n\n  return { state, authenticate, fulfill, retryVerification, retrySubmission }\n}\n"]}