@zkproofport-ai/sdk 0.2.10 → 0.2.11

package/dist/delegation.d.ts

@@ -0,0 +1,102 @@
+/**
+ * Delegating a credential from one wallet to another.
+ *
+ * ## The problem this solves
+ *
+ * A wallet holds a Coinbase KYC attestation — call it A. A service wants proof
+ * of that KYC before it will let anyone stake. But A is the wallet whose
+ * on-chain history is worth hiding: revealing it links the KYC to everything
+ * else A has ever done.
+ *
+ * So A never appears. A signs a statement naming a second wallet, B, and the
+ * proof carries the hash of that statement. The service checks the proof, reads
+ * B out of the statement, and lets B act — while A stays behind the proof.
+ *
+ * ## Why this is an ordinary action and not a new mechanism
+ *
+ * `arc_eligibility` already proves "the wallet holding this KYC authorised ONE
+ * EIP-712 action". A delegation IS such an action: its fields name who is being
+ * delegated to, what they may do, and until when. Nothing in the circuit
+ * changes — only the structure being signed.
+ *
+ * That also means the delegation is bound to the proof: a proof made for one
+ * delegation verifies for no other, because the action's hash is a public
+ * input. Lifting the proof onto a different B is not possible.
+ *
+ * ## What the verifier must do
+ *
+ * Reading B out of the action is not enough. The service MUST rebuild the
+ * action's hash from the delegation it was shown and compare it with the
+ * proof's public input — otherwise anyone could present a valid proof
+ * alongside a delegation naming a wallet of their choosing.
+ * `delegationMatchesProof` is that check.
+ */
+import type { TypedAction } from './types.js';
+/** What a delegation says. Every field is signed and none may be inferred. */
+export interface Delegation {
+    /** The wallet being given the credential's benefit. */
+    delegate: string;
+    /** What the delegate may do, e.g. 'stake'. Free text the service defines. */
+    action: string;
+    /** Unix seconds. A delegation without an end is not offered. */
+    expiresAt: number;
+    /** Makes this delegation single-use, so it cannot be replayed. */
+    nonce: string;
+}
+/** The EIP-712 type of a delegation, and the name its wallet renders. */
+export declare const DELEGATION_PRIMARY_TYPE = "CredentialDelegation";
+export declare const DELEGATION_TYPES: {
+    readonly CredentialDelegation: readonly [{
+        readonly name: "delegate";
+        readonly type: "address";
+    }, {
+        readonly name: "action";
+        readonly type: "string";
+    }, {
+        readonly name: "expiresAt";
+        readonly type: "uint256";
+    }, {
+        readonly name: "nonce";
+        readonly type: "string";
+    }];
+};
+/**
+ * Build the action that A signs to delegate to B.
+ *
+ * `domain` names the service the delegation is for, so a delegation issued to
+ * one service cannot be presented at another: the domain separator is part of
+ * what the proof binds.
+ */
+export declare function buildDelegationAction(params: {
+    delegation: Delegation;
+    domain: {
+        name: string;
+        version: string;
+        chainId: number;
+        verifyingContract: string;
+    };
+}): TypedAction;
+/** The 32 bytes a proof carries for this action: EIP-712's hashStruct. */
+export declare function delegationActionHash(action: TypedAction): string;
+/** The 32 bytes a proof carries for the service this delegation is for. */
+export declare function delegationDomainSeparator(action: TypedAction): string;
+/**
+ * Whether a proof was made for exactly this delegation.
+ *
+ * The reason to call this rather than trust the delegation shown alongside the
+ * proof: a proof is public once presented, and anything that reads the
+ * delegate out of an unverified structure can be handed a proof plus a
+ * delegation naming somebody else.
+ */
+export declare function delegationMatchesProof(params: {
+    action: TypedAction;
+    /** The proof's `domain_separator` public input. */
+    domainSeparator: string;
+    /** The proof's `action_hash` public input. */
+    actionHash: string;
+    /** Unix seconds. An expired delegation is refused even when the proof is sound. */
+    now?: number;
+}): string | null;
+/** The wallet a checked delegation names. Throws rather than return a guess. */
+export declare function delegateOf(action: TypedAction): string;
+//# sourceMappingURL=delegation.d.ts.map

package/dist/delegation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,uDAAuD;IACvD,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;CACf;AAID,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAC9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;CAOnB,CAAC;AAEX;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC;CACvF,GAAG,WAAW,CAyBd;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAEhE;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAErE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,MAAM,EAAE,WAAW,CAAC;IACpB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,MAAM,GAAG,IAAI,CAkBhB;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAMtD"}

package/dist/delegation.js

@@ -0,0 +1,121 @@
+/**
+ * Delegating a credential from one wallet to another.
+ *
+ * ## The problem this solves
+ *
+ * A wallet holds a Coinbase KYC attestation — call it A. A service wants proof
+ * of that KYC before it will let anyone stake. But A is the wallet whose
+ * on-chain history is worth hiding: revealing it links the KYC to everything
+ * else A has ever done.
+ *
+ * So A never appears. A signs a statement naming a second wallet, B, and the
+ * proof carries the hash of that statement. The service checks the proof, reads
+ * B out of the statement, and lets B act — while A stays behind the proof.
+ *
+ * ## Why this is an ordinary action and not a new mechanism
+ *
+ * `arc_eligibility` already proves "the wallet holding this KYC authorised ONE
+ * EIP-712 action". A delegation IS such an action: its fields name who is being
+ * delegated to, what they may do, and until when. Nothing in the circuit
+ * changes — only the structure being signed.
+ *
+ * That also means the delegation is bound to the proof: a proof made for one
+ * delegation verifies for no other, because the action's hash is a public
+ * input. Lifting the proof onto a different B is not possible.
+ *
+ * ## What the verifier must do
+ *
+ * Reading B out of the action is not enough. The service MUST rebuild the
+ * action's hash from the delegation it was shown and compare it with the
+ * proof's public input — otherwise anyone could present a valid proof
+ * alongside a delegation naming a wallet of their choosing.
+ * `delegationMatchesProof` is that check.
+ */
+import { ethers } from 'ethers';
+const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+/** The EIP-712 type of a delegation, and the name its wallet renders. */
+export const DELEGATION_PRIMARY_TYPE = 'CredentialDelegation';
+export const DELEGATION_TYPES = {
+    [DELEGATION_PRIMARY_TYPE]: [
+        { name: 'delegate', type: 'address' },
+        { name: 'action', type: 'string' },
+        { name: 'expiresAt', type: 'uint256' },
+        { name: 'nonce', type: 'string' },
+    ],
+};
+/**
+ * Build the action that A signs to delegate to B.
+ *
+ * `domain` names the service the delegation is for, so a delegation issued to
+ * one service cannot be presented at another: the domain separator is part of
+ * what the proof binds.
+ */
+export function buildDelegationAction(params) {
+    const { delegation, domain } = params;
+    if (!ADDRESS.test(delegation.delegate)) {
+        throw new Error(`delegate must be an address, got '${delegation.delegate}'.`);
+    }
+    if (!delegation.action.trim()) {
+        throw new Error('A delegation must say what the delegate may do; `action` was empty.');
+    }
+    if (!Number.isInteger(delegation.expiresAt) || delegation.expiresAt <= 0) {
+        throw new Error('expiresAt must be a Unix time in seconds. A delegation without an end is not offered.');
+    }
+    if (!delegation.nonce.trim()) {
+        throw new Error('A delegation needs a nonce, or the same signature can be replayed.');
+    }
+    return {
+        domain,
+        types: DELEGATION_TYPES,
+        primaryType: DELEGATION_PRIMARY_TYPE,
+        message: {
+            delegate: delegation.delegate,
+            action: delegation.action,
+            expiresAt: delegation.expiresAt,
+            nonce: delegation.nonce,
+        },
+    };
+}
+/** The 32 bytes a proof carries for this action: EIP-712's hashStruct. */
+export function delegationActionHash(action) {
+    return ethers.TypedDataEncoder.hashStruct(action.primaryType, action.types, action.message);
+}
+/** The 32 bytes a proof carries for the service this delegation is for. */
+export function delegationDomainSeparator(action) {
+    return ethers.TypedDataEncoder.hashDomain(action.domain);
+}
+/**
+ * Whether a proof was made for exactly this delegation.
+ *
+ * The reason to call this rather than trust the delegation shown alongside the
+ * proof: a proof is public once presented, and anything that reads the
+ * delegate out of an unverified structure can be handed a proof plus a
+ * delegation naming somebody else.
+ */
+export function delegationMatchesProof(params) {
+    const { action, domainSeparator, actionHash } = params;
+    const now = params.now ?? Math.floor(Date.now() / 1000);
+    if (action.primaryType !== DELEGATION_PRIMARY_TYPE) {
+        return `This action is a '${action.primaryType}', not a ${DELEGATION_PRIMARY_TYPE}. It authorises something, but not a delegation.`;
+    }
+    if (delegationDomainSeparator(action).toLowerCase() !== domainSeparator.toLowerCase()) {
+        return 'The proof was made for a different service: its domain separator does not match this delegation.';
+    }
+    if (delegationActionHash(action).toLowerCase() !== actionHash.toLowerCase()) {
+        return 'The proof was made for a different delegation: its action hash does not match the one shown.';
+    }
+    const expiresAt = Number(action.message.expiresAt);
+    if (!Number.isFinite(expiresAt) || expiresAt <= now) {
+        return `This delegation expired at ${expiresAt}, and it is now ${now}.`;
+    }
+    return null;
+}
+/** The wallet a checked delegation names. Throws rather than return a guess. */
+export function delegateOf(action) {
+    const delegate = action.message.delegate;
+    if (typeof delegate !== 'string' || !ADDRESS.test(delegate)) {
+        return (() => { throw new Error(`This action names no delegate address: got '${String(delegate)}'.`); })();
+    }
+    return delegate;
+}
+//# sourceMappingURL=delegation.js.map

package/dist/delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAehC,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC,yEAAyE;AACzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAC9D,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,CAAC,uBAAuB,CAAC,EAAE;QACzB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;KAClC;CACO,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAGrC;IACC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO;QACL,MAAM;QACN,KAAK,EAAE,gBAAmD;QAC1D,WAAW,EAAE,uBAAuB;QACpC,OAAO,EAAE;YACP,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,OAAO,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,MAAmB;IAC3D,OAAO,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAQtC;IACC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAExD,IAAI,MAAM,CAAC,WAAW,KAAK,uBAAuB,EAAE,CAAC;QACnD,OAAO,qBAAqB,MAAM,CAAC,WAAW,YAAY,uBAAuB,kDAAkD,CAAC;IACtI,CAAC;IACD,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;QACtF,OAAO,kGAAkG,CAAC;IAC5G,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5E,OAAO,8FAA8F,CAAC;IACxG,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACpD,OAAO,8BAA8B,SAAS,mBAAmB,GAAG,GAAG,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7G,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/extract.d.ts

@@ -1,7 +1,26 @@
 /**
  * Extract structured data from ZK proof publicInputs.
  *
- * Supports all circuit types:
+ * ## The caller says which circuit; this module never guesses
+ *
+ * Every function here takes the circuit id explicitly. There used to be a
+ * `detectCircuit(fieldCount)` that inferred the circuit from the *number* of
+ * public inputs (128 → coinbase, 150 → country, 148 → oidc, anything else →
+ * coinbase). It is gone. Field count is a size, not an identity: nothing
+ * guarantees two circuits have different counts, and when they collide the
+ * inference returns whichever branch is written first, silently, with no error.
+ * A wrong answer here is a wrong nullifier, which is a correctness bug in
+ * uniqueness and double-spend checks rather than a cosmetic one.
+ *
+ * The circuit is always available at the call site — it is in the prove request
+ * and comes back in the prove response — so requiring it costs nothing and a
+ * missing one now returns `null` ("I don't know") instead of a confident guess.
+ *
+ * ## Public-input layouts are this repo's knowledge
+ *
+ * The index ranges below are per-circuit facts that proofport-ai owns; the
+ * customer SDK has no layout data. Only the *identifiers* come from
+ * `./circuits.js` (mirroring `@zkproofport-app/sdk/circuits`).
  *
  * coinbase_attestation (128 fields):
  *   Index 0-31:   signal_hash (32 bytes)
@@ -25,29 +44,44 @@
  *   Index 115-146: nullifier (32 bytes)
  *   Index 147:     provider (u8)
  */
+import type { CircuitId } from './types.js';
 /**
  * Extract scope from proof publicInputs.
- * Auto-detects circuit from field count.
  *
  * @param publicInputs - Single hex string of concatenated public inputs
- * @param circuit - Optional circuit type override
- * @returns The scope as a 0x-prefixed hex string, or null if extraction fails
+ * @param circuit - Canonical circuit id the proof was generated for. Required:
+ *   the layout cannot be inferred from the data, and this function will not
+ *   guess. JavaScript callers that omit it get `null`.
+ * @returns The scope as a 0x-prefixed hex string, or `null` when the circuit is
+ *   unknown or the input is too short for its layout.
  */
-export declare function extractScopeFromPublicInputs(publicInputs: string, circuit?: string): string | null;
+export declare function extractScopeFromPublicInputs(publicInputs: string, circuit: CircuitId): string | null;
 /**
  * Extract nullifier from proof publicInputs.
- * Auto-detects circuit from field count.
  *
  * @param publicInputs - Single hex string of concatenated public inputs
- * @param circuit - Optional circuit type override
- * @returns The nullifier as a 0x-prefixed hex string, or null if extraction fails
+ * @param circuit - Canonical circuit id the proof was generated for. Required:
+ *   the layout cannot be inferred from the data, and this function will not
+ *   guess. JavaScript callers that omit it get `null`.
+ * @returns The nullifier as a 0x-prefixed hex string, or `null` when the circuit
+ *   is unknown or the input is too short for its layout.
  */
-export declare function extractNullifierFromPublicInputs(publicInputs: string, circuit?: string): string | null;
+export declare function extractNullifierFromPublicInputs(publicInputs: string, circuit: CircuitId): string | null;
 /**
- * Extract domain from oidc_domain_attestation proof publicInputs.
+ * Extract the email domain from proof publicInputs.
+ *
+ * Only `oidc_domain_attestation` carries a domain. The circuit is a parameter
+ * for the same reason as above: this function used to assume OIDC and read
+ * indices 18..81 out of whatever it was handed, so a 128-field coinbase proof
+ * (length 128, comfortably past its `< 83` guard) produced a plausible-looking
+ * string built from unrelated attestation bytes.
  *
  * @param publicInputs - Single hex string of concatenated public inputs
- * @returns The domain string, or null if not OIDC circuit or extraction fails
+ * @param circuit - Canonical circuit id the proof was generated for. Required
+ *   for the same reason as the other extractors: a default would be a guess,
+ *   and the compiler catching a wrong call site beats a wrong domain at runtime.
+ * @returns The domain string, or `null` when the circuit carries no domain or
+ *   extraction fails.
  */
-export declare function extractDomainFromPublicInputs(publicInputs: string): string | null;
+export declare function extractDomainFromPublicInputs(publicInputs: string, circuit: CircuitId): string | null;
 //# sourceMappingURL=extract.d.ts.map

package/dist/extract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../src/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AA4CH;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWlG;AAED;;;;;;;GAOG;AACH,wBAAgB,gCAAgC,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWtG;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiBjF"}
+{"version":3,"file":"extract.d.ts","sourceRoot":"","sources":["../src/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAyE5C;;;;;;;;;GASG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,SAAS,GACjB,MAAM,GAAG,IAAI,CAWf;AAED;;;;;;;;;GASG;AACH,wBAAgB,gCAAgC,CAC9C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,SAAS,GACjB,MAAM,GAAG,IAAI,CAWf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,6BAA6B,CAC3C,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,SAAS,GACjB,MAAM,GAAG,IAAI,CAwBf"}

package/dist/extract.js

@@ -1,7 +1,26 @@
 /**
  * Extract structured data from ZK proof publicInputs.
  *
- * Supports all circuit types:
+ * ## The caller says which circuit; this module never guesses
+ *
+ * Every function here takes the circuit id explicitly. There used to be a
+ * `detectCircuit(fieldCount)` that inferred the circuit from the *number* of
+ * public inputs (128 → coinbase, 150 → country, 148 → oidc, anything else →
+ * coinbase). It is gone. Field count is a size, not an identity: nothing
+ * guarantees two circuits have different counts, and when they collide the
+ * inference returns whichever branch is written first, silently, with no error.
+ * A wrong answer here is a wrong nullifier, which is a correctness bug in
+ * uniqueness and double-spend checks rather than a cosmetic one.
+ *
+ * The circuit is always available at the call site — it is in the prove request
+ * and comes back in the prove response — so requiring it costs nothing and a
+ * missing one now returns `null` ("I don't know") instead of a confident guess.
+ *
+ * ## Public-input layouts are this repo's knowledge
+ *
+ * The index ranges below are per-circuit facts that proofport-ai owns; the
+ * customer SDK has no layout data. Only the *identifiers* come from
+ * `./circuits.js` (mirroring `@zkproofport-app/sdk/circuits`).
  *
  * coinbase_attestation (128 fields):
  *   Index 0-31:   signal_hash (32 bytes)
@@ -25,21 +44,40 @@
  *   Index 115-146: nullifier (32 bytes)
  *   Index 147:     provider (u8)
  */
-// Circuit layouts
+import { CIRCUIT_IDS } from './circuits.js';
+/**
+ * Public-input layout for every circuit proofport-ai can prove.
+ *
+ * Keyed by the canonical identifiers, so a rename in the customer SDK is a
+ * compile error here rather than a lookup that quietly misses.
+ */
 const LAYOUTS = {
-    coinbase_attestation: { scope: [64, 95], nullifier: [96, 127] },
-    coinbase_country_attestation: { scope: [86, 117], nullifier: [118, 149] },
-    oidc_domain_attestation: { scope: [83, 114], nullifier: [115, 146], domainStorage: 18, domainLen: 82 },
+    [CIRCUIT_IDS.COINBASE_ATTESTATION]: { scope: [64, 95], nullifier: [96, 127] },
+    [CIRCUIT_IDS.COINBASE_COUNTRY_ATTESTATION]: { scope: [86, 117], nullifier: [118, 149] },
+    [CIRCUIT_IDS.OIDC_DOMAIN_ATTESTATION]: {
+        scope: [83, 114],
+        nullifier: [115, 146],
+        domainStorage: 18,
+        domainLen: 82,
+    },
+    // Read off the compiled ABI, not counted by hand:
+    //   signal_hash 0-31, domain_separator 32-63, action_hash 64-95,
+    //   signer_list_merkle_root 96-127, scope 128-159, nullifier 160-191.
+    // The two extra 32-byte fields before the Merkle root are what pushes scope
+    // and nullifier 64 fields past where they sit in coinbase_attestation.
+    [CIRCUIT_IDS.ARC_ELIGIBILITY]: { scope: [128, 159], nullifier: [160, 191] },
 };
 /**
- * Detect circuit type from field count.
+ * Look up the public-input layout for a circuit.
+ *
+ * Returns `null` for anything without a known layout — including a canonical
+ * identifier this server cannot prove, such as `mdl_kr_age`. It never falls
+ * back to another circuit's byte ranges.
  */
-function detectCircuit(fieldCount) {
-    if (fieldCount === 148)
-        return 'oidc_domain_attestation';
-    if (fieldCount === 150)
-        return 'coinbase_country_attestation';
-    return 'coinbase_attestation';
+function getLayout(circuit) {
+    if (typeof circuit !== 'string')
+        return null;
+    return LAYOUTS[circuit] ?? null;
 }
 /**
  * Split a concatenated hex string into 32-byte (64 hex char) fields.
@@ -65,17 +103,20 @@ function extractBytes32(fields, start, end) {
 }
 /**
  * Extract scope from proof publicInputs.
- * Auto-detects circuit from field count.
  *
  * @param publicInputs - Single hex string of concatenated public inputs
- * @param circuit - Optional circuit type override
- * @returns The scope as a 0x-prefixed hex string, or null if extraction fails
+ * @param circuit - Canonical circuit id the proof was generated for. Required:
+ *   the layout cannot be inferred from the data, and this function will not
+ *   guess. JavaScript callers that omit it get `null`.
+ * @returns The scope as a 0x-prefixed hex string, or `null` when the circuit is
+ *   unknown or the input is too short for its layout.
  */
 export function extractScopeFromPublicInputs(publicInputs, circuit) {
     try {
+        const layout = getLayout(circuit);
+        if (!layout)
+            return null;
         const fields = splitFields(publicInputs);
-        const ct = circuit || detectCircuit(fields.length);
-        const layout = LAYOUTS[ct] || LAYOUTS.coinbase_attestation;
         const [start, end] = layout.scope;
         if (fields.length <= end)
             return null;
@@ -87,17 +128,20 @@ export function extractScopeFromPublicInputs(publicInputs, circuit) {
 }
 /**
  * Extract nullifier from proof publicInputs.
- * Auto-detects circuit from field count.
  *
  * @param publicInputs - Single hex string of concatenated public inputs
- * @param circuit - Optional circuit type override
- * @returns The nullifier as a 0x-prefixed hex string, or null if extraction fails
+ * @param circuit - Canonical circuit id the proof was generated for. Required:
+ *   the layout cannot be inferred from the data, and this function will not
+ *   guess. JavaScript callers that omit it get `null`.
+ * @returns The nullifier as a 0x-prefixed hex string, or `null` when the circuit
+ *   is unknown or the input is too short for its layout.
  */
 export function extractNullifierFromPublicInputs(publicInputs, circuit) {
     try {
+        const layout = getLayout(circuit);
+        if (!layout)
+            return null;
         const fields = splitFields(publicInputs);
-        const ct = circuit || detectCircuit(fields.length);
-        const layout = LAYOUTS[ct] || LAYOUTS.coinbase_attestation;
         const [start, end] = layout.nullifier;
         if (fields.length <= end)
             return null;
@@ -108,22 +152,40 @@ export function extractNullifierFromPublicInputs(publicInputs, circuit) {
     }
 }
 /**
- * Extract domain from oidc_domain_attestation proof publicInputs.
+ * Extract the email domain from proof publicInputs.
+ *
+ * Only `oidc_domain_attestation` carries a domain. The circuit is a parameter
+ * for the same reason as above: this function used to assume OIDC and read
+ * indices 18..81 out of whatever it was handed, so a 128-field coinbase proof
+ * (length 128, comfortably past its `< 83` guard) produced a plausible-looking
+ * string built from unrelated attestation bytes.
  *
  * @param publicInputs - Single hex string of concatenated public inputs
- * @returns The domain string, or null if not OIDC circuit or extraction fails
+ * @param circuit - Canonical circuit id the proof was generated for. Required
+ *   for the same reason as the other extractors: a default would be a guess,
+ *   and the compiler catching a wrong call site beats a wrong domain at runtime.
+ * @returns The domain string, or `null` when the circuit carries no domain or
+ *   extraction fails.
  */
-export function extractDomainFromPublicInputs(publicInputs) {
+export function extractDomainFromPublicInputs(publicInputs, circuit) {
     try {
+        const layout = getLayout(circuit);
+        if (!layout)
+            return null;
+        const { domainStorage, domainLen } = layout;
+        if (domainStorage === undefined || domainLen === undefined)
+            return null;
         const fields = splitFields(publicInputs);
-        if (fields.length < 83)
+        if (fields.length <= domainLen)
+            return null;
+        const length = Number(BigInt(fields[domainLen]));
+        if (length <= 0 || length > 64)
             return null;
-        const domainLen = Number(BigInt(fields[82]));
-        if (domainLen <= 0 || domainLen > 64)
+        if (fields.length < domainStorage + length)
             return null;
         const chars = [];
-        for (let i = 0; i < domainLen; i++) {
-            const byte = Number(BigInt(fields[18 + i]) & 0xffn);
+        for (let i = 0; i < length; i++) {
+            const byte = Number(BigInt(fields[domainStorage + i]) & 0xffn);
             chars.push(String.fromCharCode(byte));
         }
         return chars.join('');

package/dist/extract.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract.js","sourceRoot":"","sources":["../src/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,kBAAkB;AAClB,MAAM,OAAO,GAAG;IACd,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;IAC/D,4BAA4B,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE;IACzE,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;CAC9F,CAAC;AAIX;;GAEG;AACH,SAAS,aAAa,CAAC,UAAkB;IACvC,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,yBAAyB,CAAC;IACzD,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,8BAA8B,CAAC;IAC9D,OAAO,sBAAsB,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,eAAuB;IAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IAC1F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,MAAgB,EAAE,KAAa,EAAE,GAAW;IAClE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,YAAoB,EAAE,OAAgB;IACjF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,EAAE,GAAI,OAAuB,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC;QAC3D,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gCAAgC,CAAC,YAAoB,EAAE,OAAgB;IACrF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,EAAE,GAAI,OAAuB,IAAI,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,oBAAoB,CAAC;QAC3D,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAAC,YAAoB;IAChE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAEpC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAElD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"extract.js","sourceRoot":"","sources":["../src/extract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAe5C;;;;;GAKG;AACH,MAAM,OAAO,GAAyC;IACpD,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE;IAC7E,CAAC,WAAW,CAAC,4BAA4B,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE;IACvF,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE;QACrC,KAAK,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC;QAChB,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;QACrB,aAAa,EAAE,EAAE;QACjB,SAAS,EAAE,EAAE;KACd;IACD,kDAAkD;IAClD,iEAAiE;IACjE,sEAAsE;IACtE,4EAA4E;IAC5E,uEAAuE;IACvE,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE;CAC5E,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,SAAS,CAAC,OAAgB;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAQ,OAAyD,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;AACrF,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAAC,eAAuB;IAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;IAC1F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,MAAgB,EAAE,KAAa,EAAE,GAAW;IAClE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAC1C,YAAoB,EACpB,OAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;QAClC,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gCAAgC,CAC9C,YAAoB,EACpB,OAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC;QACtC,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,6BAA6B,CAC3C,YAAoB,EACpB,OAAkB;IAElB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;QAC5C,IAAI,aAAa,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAExE,MAAM,MAAM,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS;YAAE,OAAO,IAAI,CAAC;QAE5C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5C,IAAI,MAAM,CAAC,MAAM,GAAG,aAAa,GAAG,MAAM;YAAE,OAAO,IAAI,CAAC;QAExD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/flow.d.ts

@@ -1,5 +1,6 @@
 import type { ClientConfig, ProofParams, ProofResult, StepResult } from './types.js';
 import type { ProofportSigner } from './signer.js';
+import type { PaymentWallet } from './types.js';
 export interface FlowCallbacks {
     onStep?: (step: StepResult) => void;
 }
@@ -19,5 +20,17 @@ export interface FlowCallbacks {
  */
 export declare function generateProof(config: ClientConfig, signers: {
     attestation: ProofportSigner;
+    /**
+     * The wallet that pays, when the service charges. A different wallet from
+     * `attestation` and deliberately so: the attestation wallet is fixed by
+     * the EAS attestation bound to it, while the paying wallet is whichever
+     * one holds USDC. Forcing them to be the same would mean the wallet that
+     * passed KYC also has to be funded on the paying chain.
+     *
+     * Omitting it is fine against a service with payment disabled. Against one
+     * that charges, the 402 is returned as an error naming the chains offered,
+     * rather than a proof request that hangs.
+     */
+    payment?: PaymentWallet;
 }, params: ProofParams, callbacks?: FlowCallbacks): Promise<ProofResult>;
 //# sourceMappingURL=flow.d.ts.map

package/dist/flow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../src/flow.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EAEZ,WAAW,EACX,WAAW,EACX,UAAU,EACX,MAAM,YAAY,CAAC;AAOpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAInD,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE;IAAE,WAAW,EAAE,eAAe,CAAA;CAAE,EACzC,MAAM,EAAE,WAAW,EACnB,SAAS,CAAC,EAAE,aAAa,GACxB,OAAO,CAAC,WAAW,CAAC,CAqGtB"}
+{"version":3,"file":"flow.d.ts","sourceRoot":"","sources":["../src/flow.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EAEZ,WAAW,EACX,WAAW,EACX,UAAU,EACX,MAAM,YAAY,CAAC;AAQpB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAKhD,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,CAAC;CACrC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE;IACP,WAAW,EAAE,eAAe,CAAC;IAC7B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,EACD,MAAM,EAAE,WAAW,EACnB,SAAS,CAAC,EAAE,aAAa,GACxB,OAAO,CAAC,WAAW,CAAC,CAgMtB"}