@vauban/glacis-sdk 1.0.0

package/README.md

@@ -0,0 +1,124 @@
+# @vauban/glacis-sdk
+
+TypeScript SDK for [Glacis Protocol](https://github.com/vauban-org/glacis-protocol) -- post-quantum Proof of Humanity on Starknet.
+
+## Installation
+
+```bash
+npm install @vauban/glacis-sdk
+```
+
+## Quick Start
+
+```typescript
+import { GlacisClient } from '@vauban/glacis-sdk';
+
+const glacis = new GlacisClient({ network: 'starknet-sepolia' });
+
+// Check if a wallet is a verified human (free on-chain read)
+const isHuman = await glacis.isVerifiedHuman('0x03C31f...');
+console.log(isHuman); // true or false
+```
+
+## API Reference
+
+### `GlacisClient`
+
+#### Constructor
+
+```typescript
+const glacis = new GlacisClient({
+  network: 'starknet-sepolia',      // or 'starknet-mainnet'
+  providerUrl: '...',                // optional: custom RPC endpoint
+  contractAddress: '0x...',          // optional: custom verifier address
+  attestationTokenAddress: '0x...',  // optional: custom attestation address
+});
+```
+
+#### `isVerifiedHuman(wallet: string): Promise<boolean>`
+
+Check if a wallet has a valid, non-expired, non-revoked human attestation. Free on-chain read.
+
+```typescript
+const isHuman = await glacis.isVerifiedHuman('0x03C31f...');
+```
+
+#### `getScopedIdentity(wallet: string, appDomain: string): Promise<string>`
+
+Get the scoped pseudonym for a wallet in your application domain. Different apps see different pseudonyms for the same user, preventing cross-app tracking.
+
+```typescript
+const pseudonym = await glacis.getScopedIdentity('0x03C31f...', 'my-dapp');
+```
+
+#### `getAttestationExpiry(wallet: string): Promise<Date | null>`
+
+Get the attestation expiration date. Returns `null` if no attestation exists.
+
+```typescript
+const expiry = await glacis.getAttestationExpiry('0x03C31f...');
+if (expiry && expiry > new Date()) {
+  console.log(`Verified until ${expiry.toISOString()}`);
+}
+```
+
+#### `getAttestationInfo(wallet: string): Promise<AttestationInfo>`
+
+Get full attestation details in a single call.
+
+```typescript
+const info = await glacis.getAttestationInfo('0x03C31f...');
+// { verified: true, expired: false, revoked: false, expiry: Date }
+```
+
+#### `submitProof(account: Account, submission: ProofSubmission): Promise<TransactionResult>`
+
+Submit a STARK proof to the GlacisVerifier contract. Requires a starknet.js `Account` for signing.
+
+```typescript
+import { Account, RpcProvider } from 'starknet';
+
+const provider = new RpcProvider({ nodeUrl: '...' });
+const account = new Account(provider, address, privateKey);
+
+const result = await glacis.submitProof(account, {
+  proof: [...],        // STARK proof felts
+  nullifier: '0x...',  // deterministic nullifier
+  pseudonym: '0x...',  // scoped pseudonym
+  caKeyHash: '0x...',  // CA key identifier
+});
+console.log(result.transactionHash);
+```
+
+## Network Configuration
+
+The SDK ships with built-in configurations for Sepolia and mainnet:
+
+| Network | Contracts | RPC |
+|---------|-----------|-----|
+| `starknet-sepolia` | Pre-configured | `sepolia.rpc.vauban.tech` |
+| `starknet-mainnet` | Set via constructor | `mainnet.rpc.vauban.tech` |
+
+Override any default with constructor options.
+
+## Error Handling
+
+```typescript
+import { GlacisError, NetworkError, ContractError, TransactionError } from '@vauban/glacis-sdk';
+
+try {
+  await glacis.isVerifiedHuman(wallet);
+} catch (err) {
+  if (err instanceof NetworkError) {
+    // RPC connection failed
+  } else if (err instanceof ContractError) {
+    // Contract call failed
+  } else if (err instanceof TransactionError) {
+    // Transaction submission failed
+  }
+}
+```
+
+## License
+
+[MIT](https://github.com/vauban-org/glacis-protocol/blob/master/LICENSE)

package/dist/GlacisClient.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Glacis SDK — Main client for interacting with Glacis Protocol on Starknet.
+ *
+ * Supports two modes:
+ * - Read-only (provider only): query verification status, pseudonyms, expiry
+ * - Read-write (with Account): submit proofs via verify_and_attest
+ */
+import { RpcProvider, Account } from 'starknet';
+import type { GlacisConfig, AttestationInfo, TransactionResult, ProofSubmission } from './types.js';
+export declare class GlacisClient {
+    private readonly provider;
+    private readonly verifier;
+    private readonly attestation;
+    private readonly network;
+    constructor(config: GlacisConfig);
+    /**
+     * Check if a wallet has a valid (non-expired, non-revoked) human attestation.
+     * Free on-chain read — no transaction fee.
+     */
+    isVerifiedHuman(wallet: string): Promise<boolean>;
+    /**
+     * Get the scoped pseudonym for a wallet in a given application domain.
+     * Returns '0x0' if the wallet has no attestation.
+     */
+    getScopedIdentity(wallet: string, appDomain: string): Promise<string>;
+    /**
+     * Get the attestation expiration date for a wallet.
+     * Returns null if no attestation exists.
+     */
+    getAttestationExpiry(wallet: string): Promise<Date | null>;
+    /**
+     * Get full attestation info for a wallet.
+     * Combines verification status, expiry, and revocation in a single call.
+     */
+    getAttestationInfo(wallet: string): Promise<AttestationInfo>;
+    /**
+     * Submit a proof to the GlacisVerifier contract.
+     * Requires a starknet.js Account instance for transaction signing.
+     *
+     * Flow: verify STARK proof -> check CA trust -> register nullifier -> mint SBT -> collect fee
+     */
+    submitProof(account: Account, submission: ProofSubmission): Promise<TransactionResult>;
+    /** Get the current network. */
+    getNetwork(): 'starknet-mainnet' | 'starknet-sepolia';
+    /** Get the RPC provider instance. */
+    getProvider(): RpcProvider;
+}
+//# sourceMappingURL=GlacisClient.d.ts.map

package/dist/GlacisClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"GlacisClient.d.ts","sourceRoot":"","sources":["../src/GlacisClient.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAE,OAAO,EAAyC,MAAM,UAAU,CAAC;AACvF,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA+EpG,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAc;IACvC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAW;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAW;IACvC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA0C;gBAEtD,MAAM,EAAE,YAAY;IAiChC;;;OAGG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASvD;;;OAGG;IACG,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAY3E;;;OAGG;IACG,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAWhE;;;OAGG;IACG,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAoBlE;;;;;OAKG;IACG,WAAW,CACf,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,eAAe,GAC1B,OAAO,CAAC,iBAAiB,CAAC;IAmB7B,+BAA+B;IAC/B,UAAU,IAAI,kBAAkB,GAAG,kBAAkB;IAIrD,qCAAqC;IACrC,WAAW,IAAI,WAAW;CAG3B"}

package/dist/GlacisClient.js

@@ -0,0 +1,201 @@
+/**
+ * Glacis SDK — Main client for interacting with Glacis Protocol on Starknet.
+ *
+ * Supports two modes:
+ * - Read-only (provider only): query verification status, pseudonyms, expiry
+ * - Read-write (with Account): submit proofs via verify_and_attest
+ */
+import { RpcProvider, Contract } from 'starknet';
+import { ContractError, NetworkError, TransactionError } from './errors.js';
+import { getNetworkConfig } from './constants.js';
+/** ABI for GlacisVerifier — functions used by the SDK. */
+const VERIFIER_ABI = [
+    {
+        type: 'function',
+        name: 'verify_and_attest',
+        inputs: [
+            { name: 'proof', type: 'core::array::Span::<core::felt252>' },
+            { name: 'nullifier', type: 'core::felt252' },
+            { name: 'pseudonym', type: 'core::felt252' },
+            { name: 'ca_key_hash', type: 'core::felt252' },
+        ],
+        outputs: [],
+        state_mutability: 'external',
+    },
+    {
+        type: 'function',
+        name: 'is_verified_human',
+        inputs: [
+            { name: 'wallet', type: 'core::starknet::contract_address::ContractAddress' },
+        ],
+        outputs: [{ type: 'core::bool' }],
+        state_mutability: 'view',
+    },
+    {
+        type: 'function',
+        name: 'get_scoped_pseudonym',
+        inputs: [
+            { name: 'wallet', type: 'core::starknet::contract_address::ContractAddress' },
+            { name: 'app_domain', type: 'core::felt252' },
+        ],
+        outputs: [{ type: 'core::felt252' }],
+        state_mutability: 'view',
+    },
+];
+/** ABI for HumanAttestationToken — expiry and revocation queries. */
+const ATTESTATION_ABI = [
+    {
+        type: 'function',
+        name: 'is_expired',
+        inputs: [
+            { name: 'wallet', type: 'core::starknet::contract_address::ContractAddress' },
+        ],
+        outputs: [{ type: 'core::bool' }],
+        state_mutability: 'view',
+    },
+    {
+        type: 'function',
+        name: 'is_revoked',
+        inputs: [
+            { name: 'wallet', type: 'core::starknet::contract_address::ContractAddress' },
+        ],
+        outputs: [{ type: 'core::bool' }],
+        state_mutability: 'view',
+    },
+    {
+        type: 'function',
+        name: 'get_expiration',
+        inputs: [
+            { name: 'wallet', type: 'core::starknet::contract_address::ContractAddress' },
+        ],
+        outputs: [{ type: 'core::integer::u64' }],
+        state_mutability: 'view',
+    },
+    {
+        type: 'function',
+        name: 'is_verified',
+        inputs: [
+            { name: 'wallet', type: 'core::starknet::contract_address::ContractAddress' },
+        ],
+        outputs: [{ type: 'core::bool' }],
+        state_mutability: 'view',
+    },
+];
+export class GlacisClient {
+    provider;
+    verifier;
+    attestation;
+    network;
+    constructor(config) {
+        const networkConfig = getNetworkConfig(config.network);
+        const verifierAddr = config.contractAddress ?? networkConfig.verifierAddress;
+        if (!verifierAddr) {
+            throw new NetworkError('No verifier contract address configured. ' +
+                'Set contractAddress in GlacisConfig or update MAINNET_CONFIG in constants.ts after deployment.');
+        }
+        this.network = config.network;
+        this.provider = new RpcProvider({
+            nodeUrl: config.providerUrl ?? networkConfig.rpcUrl,
+        });
+        this.verifier = new Contract(VERIFIER_ABI, verifierAddr, this.provider);
+        const attestationAddr = config.attestationTokenAddress ?? networkConfig.attestationTokenAddress;
+        if (!attestationAddr) {
+            throw new NetworkError('No attestation token address configured. ' +
+                'Set attestationTokenAddress in GlacisConfig or update MAINNET_CONFIG in constants.ts after deployment.');
+        }
+        this.attestation = new Contract(ATTESTATION_ABI, attestationAddr, this.provider);
+    }
+    /**
+     * Check if a wallet has a valid (non-expired, non-revoked) human attestation.
+     * Free on-chain read — no transaction fee.
+     */
+    async isVerifiedHuman(wallet) {
+        try {
+            const result = await this.verifier.call('is_verified_human', [wallet]);
+            return Boolean(result);
+        }
+        catch (err) {
+            throw new ContractError('Failed to query verification status', err);
+        }
+    }
+    /**
+     * Get the scoped pseudonym for a wallet in a given application domain.
+     * Returns '0x0' if the wallet has no attestation.
+     */
+    async getScopedIdentity(wallet, appDomain) {
+        try {
+            const result = await this.verifier.call('get_scoped_pseudonym', [
+                wallet,
+                appDomain,
+            ]);
+            return String(result);
+        }
+        catch (err) {
+            throw new ContractError('Failed to query scoped pseudonym', err);
+        }
+    }
+    /**
+     * Get the attestation expiration date for a wallet.
+     * Returns null if no attestation exists.
+     */
+    async getAttestationExpiry(wallet) {
+        try {
+            const result = await this.attestation.call('get_expiration', [wallet]);
+            const timestamp = Number(result);
+            if (timestamp === 0)
+                return null;
+            return new Date(timestamp * 1000);
+        }
+        catch (err) {
+            throw new ContractError('Failed to query attestation expiry', err);
+        }
+    }
+    /**
+     * Get full attestation info for a wallet.
+     * Combines verification status, expiry, and revocation in a single call.
+     */
+    async getAttestationInfo(wallet) {
+        try {
+            const [verified, expired, revoked, expiration] = await Promise.all([
+                this.attestation.call('is_verified', [wallet]).then(Boolean),
+                this.attestation.call('is_expired', [wallet]).then(Boolean),
+                this.attestation.call('is_revoked', [wallet]).then(Boolean),
+                this.attestation.call('get_expiration', [wallet]).then(Number),
+            ]);
+            return {
+                verified,
+                expired,
+                revoked,
+                expiry: expiration === 0 ? null : new Date(expiration * 1000),
+            };
+        }
+        catch (err) {
+            throw new ContractError('Failed to query attestation info', err);
+        }
+    }
+    /**
+     * Submit a proof to the GlacisVerifier contract.
+     * Requires a starknet.js Account instance for transaction signing.
+     *
+     * Flow: verify STARK proof -> check CA trust -> register nullifier -> mint SBT -> collect fee
+     */
+    async submitProof(account, submission) {
+        try {
+            const connectedVerifier = new Contract(VERIFIER_ABI, this.verifier.address, account);
+            const result = await connectedVerifier.invoke('verify_and_attest', [submission.proof, submission.nullifier, submission.pseudonym, submission.caKeyHash]);
+            return { transactionHash: result.transaction_hash };
+        }
+        catch (err) {
+            throw new TransactionError('Proof submission failed', err);
+        }
+    }
+    /** Get the current network. */
+    getNetwork() {
+        return this.network;
+    }
+    /** Get the RPC provider instance. */
+    getProvider() {
+        return this.provider;
+    }
+}
+//# sourceMappingURL=GlacisClient.js.map

package/dist/GlacisClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GlacisClient.js","sourceRoot":"","sources":["../src/GlacisClient.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,WAAW,EAAW,QAAQ,EAA+B,MAAM,UAAU,CAAC;AAEvF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,0DAA0D;AAC1D,MAAM,YAAY,GAAG;IACnB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,oCAAoC,EAAE;YAC7D,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE;YAC5C,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,eAAe,EAAE;YAC5C,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE;SAC/C;QACD,OAAO,EAAE,EAAE;QACX,gBAAgB,EAAE,UAAU;KAC7B;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,mBAAmB;QACzB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mDAAmD,EAAE;SAC9E;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACjC,gBAAgB,EAAE,MAAM;KACzB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mDAAmD,EAAE;YAC7E,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE;SAC9C;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACpC,gBAAgB,EAAE,MAAM;KACzB;CACO,CAAC;AAEX,qEAAqE;AACrE,MAAM,eAAe,GAAG;IACtB;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mDAAmD,EAAE;SAC9E;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACjC,gBAAgB,EAAE,MAAM;KACzB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mDAAmD,EAAE;SAC9E;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACjC,gBAAgB,EAAE,MAAM;KACzB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mDAAmD,EAAE;SAC9E;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;QACzC,gBAAgB,EAAE,MAAM;KACzB;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE;YACN,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,mDAAmD,EAAE;SAC9E;QACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACjC,gBAAgB,EAAE,MAAM;KACzB;CACO,CAAC;AAEX,MAAM,OAAO,YAAY;IACN,QAAQ,CAAc;IACtB,QAAQ,CAAW;IACnB,WAAW,CAAW;IACtB,OAAO,CAA0C;IAElE,YAAY,MAAoB;QAC9B,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAEvD,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,IAAI,aAAa,CAAC,eAAe,CAAC;QAC7E,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,YAAY,CACpB,2CAA2C;gBAC3C,gGAAgG,CACjG,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAE9B,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,CAAC;YAC9B,OAAO,EAAE,MAAM,CAAC,WAAW,IAAI,aAAa,CAAC,MAAM;SACpD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAExE,MAAM,eAAe,GAAG,MAAM,CAAC,uBAAuB,IAAI,aAAa,CAAC,uBAAuB,CAAC;QAChG,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,MAAM,IAAI,YAAY,CACpB,2CAA2C;gBAC3C,wGAAwG,CACzG,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,QAAQ,CAC7B,eAAe,EACf,eAAe,EACf,IAAI,CAAC,QAAQ,CACd,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,SAAiB;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,EAAE;gBAC9D,MAAM;gBACN,SAAS;aACV,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,SAAS,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YACjC,OAAO,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,oCAAoC,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACjE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC5D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC3D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBAC3D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;aAC/D,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ;gBACR,OAAO;gBACP,OAAO;gBACP,MAAM,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;aAC9D,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,aAAa,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,WAAW,CACf,OAAgB,EAChB,UAA2B;QAE3B,IAAI,CAAC;YACH,MAAM,iBAAiB,GAAG,IAAI,QAAQ,CACpC,YAAY,EACZ,IAAI,CAAC,QAAQ,CAAC,OAAO,EACrB,OAAO,CACR,CAAC;YAEF,MAAM,MAAM,GAA2B,MAAM,iBAAiB,CAAC,MAAM,CACnE,mBAAmB,EACnB,CAAC,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC,CACrF,CAAC;YAEF,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,EAAE,GAAG,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,qCAAqC;IACrC,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF"}

package/dist/constants.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Glacis SDK — Network configurations and contract addresses.
+ */
+export interface NetworkConfig {
+    rpcUrl: string;
+    verifierAddress: string;
+    attestationTokenAddress: string;
+    explorerBaseUrl: string;
+}
+/** Starknet Sepolia testnet deployment. */
+export declare const SEPOLIA_CONFIG: NetworkConfig;
+/**
+ * Starknet mainnet deployment.
+ *
+ * Addresses are placeholders until deploy-mainnet.sh is run.
+ * After deployment, update these with real addresses from deployments/mainnet.json.
+ */
+export declare const MAINNET_CONFIG: NetworkConfig;
+/** Resolve a network name to its configuration. */
+export declare function getNetworkConfig(network: 'starknet-mainnet' | 'starknet-sepolia'): NetworkConfig;
+/** Build a Starkscan URL for a transaction. */
+export declare function explorerTxUrl(network: 'starknet-mainnet' | 'starknet-sepolia', txHash: string): string;
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,2CAA2C;AAC3C,eAAO,MAAM,cAAc,EAAE,aAO5B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,cAAc,EAAE,aAK5B,CAAC;AAEF,mDAAmD;AACnD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,kBAAkB,GAAG,kBAAkB,GAC/C,aAAa,CAEf;AAED,+CAA+C;AAC/C,wBAAgB,aAAa,CAC3B,OAAO,EAAE,kBAAkB,GAAG,kBAAkB,EAChD,MAAM,EAAE,MAAM,GACb,MAAM,CAGR"}

package/dist/constants.js

@@ -0,0 +1,32 @@
+/**
+ * Glacis SDK — Network configurations and contract addresses.
+ */
+/** Starknet Sepolia testnet deployment. */
+export const SEPOLIA_CONFIG = {
+    rpcUrl: 'https://sepolia.rpc.vauban.tech/rpc/v0_7',
+    verifierAddress: '0x051814c8a17ace1491a7203d9fac2525a32c0813fe44d78bb96ba8bd8737cf9c',
+    attestationTokenAddress: '0x0082d381f17ac9490c0de35f95f86916bececebb2a472398f64514982a5bf54c',
+    explorerBaseUrl: 'https://sepolia.starkscan.co',
+};
+/**
+ * Starknet mainnet deployment.
+ *
+ * Addresses are placeholders until deploy-mainnet.sh is run.
+ * After deployment, update these with real addresses from deployments/mainnet.json.
+ */
+export const MAINNET_CONFIG = {
+    rpcUrl: 'https://mainnet.rpc.vauban.tech/rpc/v0_7',
+    verifierAddress: '',
+    attestationTokenAddress: '',
+    explorerBaseUrl: 'https://voyager.online',
+};
+/** Resolve a network name to its configuration. */
+export function getNetworkConfig(network) {
+    return network === 'starknet-mainnet' ? MAINNET_CONFIG : SEPOLIA_CONFIG;
+}
+/** Build a Starkscan URL for a transaction. */
+export function explorerTxUrl(network, txHash) {
+    const config = getNetworkConfig(network);
+    return `${config.explorerBaseUrl}/tx/${txHash}`;
+}
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AASH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,MAAM,EAAE,0CAA0C;IAClD,eAAe,EACb,oEAAoE;IACtE,uBAAuB,EACrB,oEAAoE;IACtE,eAAe,EAAE,8BAA8B;CAChD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,MAAM,EAAE,0CAA0C;IAClD,eAAe,EAAE,EAAE;IACnB,uBAAuB,EAAE,EAAE;IAC3B,eAAe,EAAE,wBAAwB;CAC1C,CAAC;AAEF,mDAAmD;AACnD,MAAM,UAAU,gBAAgB,CAC9B,OAAgD;IAEhD,OAAO,OAAO,KAAK,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC;AAC1E,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,aAAa,CAC3B,OAAgD,EAChD,MAAc;IAEd,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,GAAG,MAAM,CAAC,eAAe,OAAO,MAAM,EAAE,CAAC;AAClD,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Glacis SDK — Error hierarchy.
+ */
+/** Base error for all Glacis SDK errors. */
+export declare class GlacisError extends Error {
+    constructor(message: string);
+}
+/** Thrown when network configuration is invalid. */
+export declare class NetworkError extends GlacisError {
+    constructor(message: string);
+}
+/** Thrown when a contract call fails. */
+export declare class ContractError extends GlacisError {
+    /** The underlying RPC error, if available. */
+    readonly cause: unknown;
+    constructor(message: string, cause?: unknown);
+}
+/** Thrown when a proof submission transaction fails. */
+export declare class TransactionError extends GlacisError {
+    /** The underlying RPC error, if available. */
+    readonly cause: unknown;
+    constructor(message: string, cause?: unknown);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,4CAA4C;AAC5C,qBAAa,WAAY,SAAQ,KAAK;gBACxB,OAAO,EAAE,MAAM;CAI5B;AAED,oDAAoD;AACpD,qBAAa,YAAa,SAAQ,WAAW;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,yCAAyC;AACzC,qBAAa,aAAc,SAAQ,WAAW;IAC5C,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;gBAEZ,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAK7C;AAED,wDAAwD;AACxD,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,8CAA8C;IAC9C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;gBAEZ,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAK7C"}

package/dist/errors.js

@@ -0,0 +1,38 @@
+/**
+ * Glacis SDK — Error hierarchy.
+ */
+/** Base error for all Glacis SDK errors. */
+export class GlacisError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'GlacisError';
+    }
+}
+/** Thrown when network configuration is invalid. */
+export class NetworkError extends GlacisError {
+    constructor(message) {
+        super(message);
+        this.name = 'NetworkError';
+    }
+}
+/** Thrown when a contract call fails. */
+export class ContractError extends GlacisError {
+    /** The underlying RPC error, if available. */
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.name = 'ContractError';
+        this.cause = cause;
+    }
+}
+/** Thrown when a proof submission transaction fails. */
+export class TransactionError extends GlacisError {
+    /** The underlying RPC error, if available. */
+    cause;
+    constructor(message, cause) {
+        super(message);
+        this.name = 'TransactionError';
+        this.cause = cause;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,4CAA4C;AAC5C,MAAM,OAAO,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAED,oDAAoD;AACpD,MAAM,OAAO,YAAa,SAAQ,WAAW;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;IAC7B,CAAC;CACF;AAED,yCAAyC;AACzC,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,8CAA8C;IACrC,KAAK,CAAU;IAExB,YAAY,OAAe,EAAE,KAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,wDAAwD;AACxD,MAAM,OAAO,gBAAiB,SAAQ,WAAW;IAC/C,8CAA8C;IACrC,KAAK,CAAU;IAExB,YAAY,OAAe,EAAE,KAAe;QAC1C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @vauban/glacis-sdk — Glacis Protocol SDK for Starknet.
+ *
+ * Query human verification status, scoped pseudonyms, and submit proofs.
+ *
+ * @example
+ * ```typescript
+ * import { GlacisClient } from '@vauban/glacis-sdk';
+ *
+ * const client = new GlacisClient({ network: 'starknet-sepolia' });
+ * const isHuman = await client.isVerifiedHuman('0x123...');
+ * ```
+ */
+export { GlacisClient } from './GlacisClient.js';
+export { GlacisError, NetworkError, ContractError, TransactionError } from './errors.js';
+export { getNetworkConfig, explorerTxUrl, SEPOLIA_CONFIG, MAINNET_CONFIG } from './constants.js';
+export type { GlacisConfig, AttestationInfo, TransactionResult, ProofSubmission, } from './types.js';
+export type { NetworkConfig } from './constants.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACjG,YAAY,EACV,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,17 @@
+/**
+ * @vauban/glacis-sdk — Glacis Protocol SDK for Starknet.
+ *
+ * Query human verification status, scoped pseudonyms, and submit proofs.
+ *
+ * @example
+ * ```typescript
+ * import { GlacisClient } from '@vauban/glacis-sdk';
+ *
+ * const client = new GlacisClient({ network: 'starknet-sepolia' });
+ * const isHuman = await client.isVerifiedHuman('0x123...');
+ * ```
+ */
+export { GlacisClient } from './GlacisClient.js';
+export { GlacisError, NetworkError, ContractError, TransactionError } from './errors.js';
+export { getNetworkConfig, explorerTxUrl, SEPOLIA_CONFIG, MAINNET_CONFIG } from './constants.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Glacis SDK — Type definitions.
+ */
+/** SDK configuration. */
+export interface GlacisConfig {
+    /** Target network. */
+    network: 'starknet-mainnet' | 'starknet-sepolia';
+    /** Custom RPC endpoint URL. Overrides the default for the selected network. */
+    providerUrl?: string;
+    /** Custom GlacisVerifier contract address. Overrides the default deployment. */
+    contractAddress?: string;
+    /** Custom HumanAttestationToken contract address. Overrides the default deployment. */
+    attestationTokenAddress?: string;
+}
+/** Human attestation status for a wallet. */
+export interface AttestationInfo {
+    /** Whether the wallet has a valid (non-expired, non-revoked) attestation. */
+    verified: boolean;
+    /** Expiration timestamp (Date), or null if no attestation exists. */
+    expiry: Date | null;
+    /** Whether the attestation has been revoked. */
+    revoked: boolean;
+    /** Whether the attestation has expired. */
+    expired: boolean;
+}
+/** Result of a proof submission transaction. */
+export interface TransactionResult {
+    /** Transaction hash on Starknet. */
+    transactionHash: string;
+}
+/** Proof submission parameters. */
+export interface ProofSubmission {
+    /** STARK proof elements (felt252 hex strings). */
+    proof: string[];
+    /** Deterministic nullifier (felt252 hex). */
+    nullifier: string;
+    /** Scoped pseudonym (felt252 hex). */
+    pseudonym: string;
+    /** CA public key hash (felt252 hex). */
+    caKeyHash: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,yBAAyB;AACzB,MAAM,WAAW,YAAY;IAC3B,sBAAsB;IACtB,OAAO,EAAE,kBAAkB,GAAG,kBAAkB,CAAC;IACjD,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uFAAuF;IACvF,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IACpB,gDAAgD;IAChD,OAAO,EAAE,OAAO,CAAC;IACjB,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,oCAAoC;IACpC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,mCAAmC;AACnC,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,6CAA6C;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/types.js

@@ -0,0 +1,5 @@
+/**
+ * Glacis SDK — Type definitions.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@vauban/glacis-sdk",
+  "version": "1.0.0",
+  "description": "TypeScript SDK for Glacis Protocol — Proof of Humanity on Starknet",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "tsc --noEmit"
+  },
+  "keywords": [
+    "starknet",
+    "proof-of-humanity",
+    "stark",
+    "zk",
+    "glacis",
+    "vauban"
+  ],
+  "author": "Vauban",
+  "license": "MIT",
+  "dependencies": {
+    "starknet": "^6.24.1"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  }
+}