@worldcoin/idkit-core 4.0.1-dev.fe98789 → 4.0.2

package/README.md

@@ -10,12 +10,10 @@ npm install @worldcoin/idkit-core
 
 ## Backend: Generate RP Signature
 
-The RP signature authenticates your verification requests. Generate it server-side:
+The RP signature authenticates your verification requests. Generate it server-side using the `/signing` subpath (pure JS, no WASM init needed):
 
 ```typescript
-import { IDKit, signRequest } from "@worldcoin/idkit-core";
-
-await IDKit.initServer();
+import { signRequest } from "@worldcoin/idkit-core/signing";
 
 // Never expose RP_SIGNING_KEY to clients
 const sig = signRequest("my-action", process.env.RP_SIGNING_KEY);
@@ -24,8 +22,8 @@ const sig = signRequest("my-action", process.env.RP_SIGNING_KEY);
 res.json({
   sig: sig.sig,
   nonce: sig.nonce,
-  created_at: Number(sig.createdAt),
-  expires_at: Number(sig.expiresAt),
+  created_at: sig.createdAt,
+  expires_at: sig.expiresAt,
 });
 ```
 
@@ -38,8 +36,6 @@ For common verification scenarios with World ID 3.0 backward compatibility:
 ```typescript
 import { IDKit, orbLegacy } from "@worldcoin/idkit-core";
 
-await IDKit.init();
-
 // Fetch signature from your backend
 const rpSig = await fetch("/api/rp-signature").then((r) => r.json());
 
@@ -100,3 +96,17 @@ const response = await fetch(
 
 const { success } = await response.json();
 ```
+
+## Subpath Exports
+
+Pure JS subpath exports are available for server-side use without WASM initialization:
+
+| Subpath    | Exports                                                          |
+| ---------- | ---------------------------------------------------------------- |
+| `/signing` | `signRequest`, `computeRpSignatureMessage`, `RpSignature` (type) |
+| `/hashing` | `hashSignal`                                                     |
+
+```typescript
+import { signRequest } from "@worldcoin/idkit-core/signing";
+import { hashSignal } from "@worldcoin/idkit-core/hashing";
+```

package/dist/hashing.cjs

@@ -0,0 +1,28 @@
+'use strict';
+
+var sha3 = require('@noble/hashes/sha3');
+var utils = require('@noble/hashes/utils');
+
+// src/lib/hashing.ts
+function hashToField(input) {
+  const hash = BigInt("0x" + utils.bytesToHex(sha3.keccak_256(input))) >> 8n;
+  return utils.hexToBytes(hash.toString(16).padStart(64, "0"));
+}
+function hashSignal(signal) {
+  let input;
+  if (signal instanceof Uint8Array) {
+    input = signal;
+  } else if (signal.startsWith("0x") && isValidHex(signal.slice(2))) {
+    input = utils.hexToBytes(signal.slice(2));
+  } else {
+    input = new TextEncoder().encode(signal);
+  }
+  return "0x" + utils.bytesToHex(hashToField(input));
+}
+function isValidHex(s) {
+  if (s.length === 0) return false;
+  if (s.length % 2 !== 0) return false;
+  return /^[0-9a-fA-F]+$/.test(s);
+}
+
+exports.hashSignal = hashSignal;

package/dist/hashing.d.cts

@@ -0,0 +1,9 @@
+/**
+ * Hashes a signal to its field element hex representation.
+ *
+ * @param signal - The signal to hash (string or Uint8Array)
+ * @returns 0x-prefixed hex string representing the signal hash
+ */
+declare function hashSignal(signal: string | Uint8Array): string;
+
+export { hashSignal };

package/dist/hashing.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Hashes a signal to its field element hex representation.
+ *
+ * @param signal - The signal to hash (string or Uint8Array)
+ * @returns 0x-prefixed hex string representing the signal hash
+ */
+declare function hashSignal(signal: string | Uint8Array): string;
+
+export { hashSignal };

package/dist/hashing.js

@@ -0,0 +1,26 @@
+import { keccak_256 } from '@noble/hashes/sha3';
+import { hexToBytes, bytesToHex } from '@noble/hashes/utils';
+
+// src/lib/hashing.ts
+function hashToField(input) {
+  const hash = BigInt("0x" + bytesToHex(keccak_256(input))) >> 8n;
+  return hexToBytes(hash.toString(16).padStart(64, "0"));
+}
+function hashSignal(signal) {
+  let input;
+  if (signal instanceof Uint8Array) {
+    input = signal;
+  } else if (signal.startsWith("0x") && isValidHex(signal.slice(2))) {
+    input = hexToBytes(signal.slice(2));
+  } else {
+    input = new TextEncoder().encode(signal);
+  }
+  return "0x" + bytesToHex(hashToField(input));
+}
+function isValidHex(s) {
+  if (s.length === 0) return false;
+  if (s.length % 2 !== 0) return false;
+  return /^[0-9a-fA-F]+$/.test(s);
+}
+
+export { hashSignal };