@zkproofport-ai/sdk 0.2.1 → 0.2.2

package/README.md

@@ -390,6 +390,52 @@ const result = await generateProof(
 
 > **Note:** For OIDC circuits, the `attestation` signer field is only used as a payment fallback. Pass your payment wallet — no EAS-attested wallet needed.
 
+## Extracting Data from Proofs
+
+For OIDC domain proofs, use helper functions to extract the domain and nullifier from public inputs:
+
+```typescript
+import { generateProof, createConfig, fromPrivateKey, extractDomainFromPublicInputs, extractNullifierFromPublicInputs } from '@zkproofport-ai/sdk';
+
+const config = createConfig();
+const paymentSigner = fromPrivateKey(process.env.PAYMENT_KEY);
+
+const result = await generateProof(
+  config,
+  { attestation: paymentSigner },
+  {
+    circuit: 'oidc_domain',
+    jwt: googleIdToken,
+    scope: 'myapp:verify-domain',
+  },
+);
+
+// Extract domain and nullifier from proof
+const domain = extractDomainFromPublicInputs(result.publicInputs);
+const nullifier = extractNullifierFromPublicInputs(result.publicInputs);
+
+console.log('Verified domain:', domain);
+console.log('Nullifier:', nullifier);
+```
+
+**Public Input Layout (oidc_domain_attestation):**
+
+The proof contains 148 public input fields (32 bytes each):
+
+| Fields | Description |
+|--------|-------------|
+| 0-17 | RSA pubkey modulus limbs (18 x u128) |
+| 18-81 | Domain storage (BoundedVec<u8, 64>) |
+| 82 | Domain length |
+| 83-114 | Scope (32 bytes) |
+| 115-146 | Nullifier (32 bytes) |
+| 147 | Provider identifier (u8) |
+
+**Functions:**
+
+- `extractDomainFromPublicInputs(publicInputs: string): string | null` — Extracts the email domain (e.g., "google.com") from public inputs. Returns null if extraction fails.
+- `extractNullifierFromPublicInputs(publicInputs: string): string | null` — Extracts the 32-byte nullifier as a 0x-prefixed hex string. Returns null if extraction fails.
+
 ## Types Reference
 
 **Circuit Types:**

package/dist/extract.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Extract structured data from oidc_domain_attestation proof publicInputs.
+ *
+ * Layout (148 fields, each 32 bytes):
+ *   Index 0-17:    pubkey_modulus_limbs (18 x u128)
+ *   Index 18-81:   domain storage (BoundedVec<u8, 64> storage, 64 bytes)
+ *   Index 82:      domain len (BoundedVec len field)
+ *   Index 83-114:  scope (32 bytes)
+ *   Index 115-146: nullifier (32 bytes)
+ *   Index 147:     provider (u8)
+ */
+/**
+ * Extract domain from oidc_domain_attestation proof publicInputs.
+ *
+ * Noir BoundedVec<u8, 64> layout: storage[0..64] at field indices 18-81, len at field index 82.
+ * Each field's lower byte is the ASCII character.
+ *
+ * @param publicInputs - Single hex string (0x prefixed) of concatenated public inputs
+ * @returns The domain string, or null if extraction fails
+ */
+export declare function extractDomainFromPublicInputs(publicInputs: string): string | null;
+/**
+ * Extract nullifier from oidc_domain_attestation proof publicInputs.
+ *
+ * Nullifier is stored at field indices 115-146 (32 bytes).
+ * The result is a hex string representing the 32-byte nullifier.
+ *
+ * @param publicInputs - Single hex string (0x prefixed) of concatenated public inputs
+ * @returns The nullifier as a 0x-prefixed hex string, or null if extraction fails
+ */
+export declare function extractNullifierFromPublicInputs(publicInputs: string): string | null;
+//# sourceMappingURL=extract.d.ts.map

package/dist/extract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../src/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAcH;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0BjF;AAED;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoBpF"}

package/dist/extract.js

@@ -0,0 +1,84 @@
+/**
+ * Extract structured data from oidc_domain_attestation proof publicInputs.
+ *
+ * Layout (148 fields, each 32 bytes):
+ *   Index 0-17:    pubkey_modulus_limbs (18 x u128)
+ *   Index 18-81:   domain storage (BoundedVec<u8, 64> storage, 64 bytes)
+ *   Index 82:      domain len (BoundedVec len field)
+ *   Index 83-114:  scope (32 bytes)
+ *   Index 115-146: nullifier (32 bytes)
+ *   Index 147:     provider (u8)
+ */
+/**
+ * Split a concatenated hex string into 32-byte (64 hex char) fields.
+ */
+function splitFields(publicInputsHex) {
+    const hex = publicInputsHex.startsWith('0x') ? publicInputsHex.slice(2) : publicInputsHex;
+    const fields = [];
+    for (let i = 0; i < hex.length; i += 64) {
+        fields.push('0x' + hex.slice(i, i + 64));
+    }
+    return fields;
+}
+/**
+ * Extract domain from oidc_domain_attestation proof publicInputs.
+ *
+ * Noir BoundedVec<u8, 64> layout: storage[0..64] at field indices 18-81, len at field index 82.
+ * Each field's lower byte is the ASCII character.
+ *
+ * @param publicInputs - Single hex string (0x prefixed) of concatenated public inputs
+ * @returns The domain string, or null if extraction fails
+ */
+export function extractDomainFromPublicInputs(publicInputs) {
+    try {
+        const fields = splitFields(publicInputs);
+        // Need at least 83 fields (indices 0-82)
+        if (fields.length < 83) {
+            return null;
+        }
+        // Read domain length from field index 82
+        const domainLen = Number(BigInt(fields[82]));
+        if (domainLen <= 0 || domainLen > 64) {
+            return null;
+        }
+        // Read domain bytes from field indices 18..18+domainLen
+        const chars = [];
+        for (let i = 0; i < domainLen; i++) {
+            const byte = Number(BigInt(fields[18 + i]) & 0xffn);
+            chars.push(String.fromCharCode(byte));
+        }
+        return chars.join('');
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Extract nullifier from oidc_domain_attestation proof publicInputs.
+ *
+ * Nullifier is stored at field indices 115-146 (32 bytes).
+ * The result is a hex string representing the 32-byte nullifier.
+ *
+ * @param publicInputs - Single hex string (0x prefixed) of concatenated public inputs
+ * @returns The nullifier as a 0x-prefixed hex string, or null if extraction fails
+ */
+export function extractNullifierFromPublicInputs(publicInputs) {
+    try {
+        const fields = splitFields(publicInputs);
+        // Need at least 147 fields (indices 0-146)
+        if (fields.length < 147) {
+            return null;
+        }
+        // Read nullifier bytes from field indices 115..147
+        const bytes = [];
+        for (let i = 115; i < 147; i++) {
+            const byte = (BigInt(fields[i]) & 0xffn).toString(16).padStart(2, '0');
+            bytes.push(byte);
+        }
+        return '0x' + bytes.join('');
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=extract.js.map

package/dist/extract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../src/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;GAEG;AACH,SAAS,WAAW,CAAC,eAAuB;IAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IAC1F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,6BAA6B,CAAC,YAAoB;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QAEzC,yCAAyC;QACzC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,yCAAyC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wDAAwD;QACxD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gCAAgC,CAAC,YAAoB;IACnE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QAEzC,2CAA2C;QAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,mDAAmD;QACnD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAED,OAAO,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -15,5 +15,6 @@ export type { ProofportSigner } from './signer.js';
 export { EthersWalletSigner, fromEthersWallet, fromPrivateKey } from './signer.js';
 export { CdpWalletSigner, fromExternalWallet } from './cdp.js';
 export type { ExternalWallet } from './cdp.js';
+export { extractDomainFromPublicInputs, extractNullifierFromPublicInputs, } from './extract.js';
 export { fetchAttestation, getSignerAddress, } from './attestation.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,YAAY,EACZ,WAAW,EACX,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG9D,OAAO,EACL,QAAQ,EACR,0BAA0B,EAC1B,kBAAkB,EAClB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG/C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACzE,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG/F,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGnF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG/C,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,YAAY,EACV,YAAY,EACZ,WAAW,EACX,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,EACX,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,cAAc,EACd,eAAe,EACf,WAAW,EACX,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG9D,OAAO,EACL,QAAQ,EACR,0BAA0B,EAC1B,kBAAkB,EAClB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG/C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACzE,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAG/F,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGnF,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAC/D,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAG/C,OAAO,EACL,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,cAAc,CAAC;AAGtB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -17,6 +17,8 @@ export { prepareOidcInputs, prepareOidcPayload } from './oidc-inputs.js';
 export { EthersWalletSigner, fromEthersWallet, fromPrivateKey } from './signer.js';
 // CDP (Coinbase Developer Platform) signer
 export { CdpWalletSigner, fromExternalWallet } from './cdp.js';
+// Extraction helpers (parse publicInputs from proof results)
+export { extractDomainFromPublicInputs, extractNullifierFromPublicInputs, } from './extract.js';
 // Attestation (customer-facing helpers)
 export { fetchAttestation, getSignerAddress, } from './attestation.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE9D,YAAY;AACZ,OAAO,EACL,QAAQ,EACR,0BAA0B,EAC1B,kBAAkB,EAClB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,gBAAgB;AAChB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,0BAA0B;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,4CAA4C;AAC5C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,8CAA8C;AAC9C,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,oEAAoE;AACpE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAKzE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEnF,2CAA2C;AAC3C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAG/D,wCAAwC;AACxC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE9D,YAAY;AACZ,OAAO,EACL,QAAQ,EACR,0BAA0B,EAC1B,kBAAkB,EAClB,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,gBAAgB;AAChB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,0BAA0B;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAG1C,4CAA4C;AAC5C,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,8CAA8C;AAC9C,OAAO,EACL,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAErB,oEAAoE;AACpE,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAKzE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEnF,2CAA2C;AAC3C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAG/D,6DAA6D;AAC7D,OAAO,EACL,6BAA6B,EAC7B,gCAAgC,GACjC,MAAM,cAAc,CAAC;AAEtB,wCAAwC;AACxC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zkproofport-ai/sdk",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Client SDK for ZKProofport proof generation",
   "type": "module",
   "main": "dist/index.js",