@zkproofport-ai/sdk 0.2.9 → 0.2.11

package/dist/cdp.d.ts

@@ -0,0 +1,162 @@
+/**
+ * Pay from a wallet this SDK does not own: CDP, viem, a browser provider.
+ *
+ * ## Deleted 2026-04-03, restored 2026-09-09
+ *
+ * This file and `payment.ts` were removed together in `ee1c09d`, whose reason
+ * was written into the commit before it: "Remove CDP wallet support (no longer
+ * needed with payment disabled)". Payment had been switched off two hours
+ * earlier as a configuration change; 491 lines were then deleted because a
+ * setting was off. Turning the setting back on left nothing to turn on with.
+ *
+ * The same night produced `isTestnet = ... || chainRpcUrl.includes('sepolia')`,
+ * for the same reason -- with payment disabled the chain was no longer known,
+ * so it was guessed. That guess resolved every unrecognised configuration to
+ * Base mainnet and is why there was no place to put Arc.
+ *
+ * Restored as it was. The interface is deliberately structural rather than a
+ * CDP dependency: anything with these methods works, which is how an Arc agent
+ * wallet or a viem account plugs in without this SDK importing either.
+ */
+import type { ProofportSigner } from './signer.js';
+/**
+ * Adapter interface for CDP wallet-like objects (or any external wallet).
+ *
+ * Pass any object that satisfies these method signatures — CDP MPC wallets,
+ * viem wallets, Privy embedded wallets, etc. — and wrap it with
+ * `CdpWalletSigner` or `fromExternalWallet()` to get a `ProofportSigner`.
+ *
+ * @example
+ * ```typescript
+ * // With @coinbase/cdp-sdk
+ * import { CdpClient } from '@coinbase/cdp-sdk';
+ * import { CdpWalletSigner } from '@zkproofport-ai/sdk';
+ *
+ * const cdp = new CdpClient();
+ * const wallet = await cdp.evm.getOrCreateWallet({ networkId: 'base' });
+ * const account = await wallet.getDefaultAddress();
+ *
+ * const signer = new CdpWalletSigner({
+ *   getAddress: () => account.getId(),
+ *   signMessage: (msg) => account.signPayload({ payload: Buffer.from(msg).toString('hex') }).then(r => r.signature),
+ *   signTypedData: (domain, types, message) => account.signTypedData({ domain, types, message }),
+ *   sendTransaction: async (tx) => {
+ *     const result = await account.sendTransaction(tx);
+ *     return { hash: result.transactionHash, wait: async () => ({ status: 1 }) };
+ *   },
+ * });
+ * ```
+ */
+export interface ExternalWallet {
+    /**
+     * Returns the wallet's Ethereum address.
+     * May be synchronous or asynchronous depending on the provider.
+     */
+    getAddress(): string | Promise<string>;
+    /**
+     * Signs a raw message (personal_sign style).
+     * Accepts either a Uint8Array of raw bytes or a pre-encoded string.
+     */
+    signMessage(message: Uint8Array | string): Promise<string>;
+    /**
+     * Signs EIP-712 typed data.
+     * Compatible with ethers v6 `signTypedData` and viem `signTypedData` call shapes.
+     */
+    signTypedData(domain: Record<string, unknown>, types: Record<string, Array<{
+        name: string;
+        type: string;
+    }>>, message: Record<string, unknown>): Promise<string>;
+    /**
+     * Sends a transaction and returns the hash plus a `wait()` helper.
+     * Optional — omit if the wallet is used only for signing (e.g., attestation signer).
+     * If omitted and `sendTransaction` is called on the signer, an error is thrown at runtime.
+     */
+    sendTransaction?(tx: {
+        to: string;
+        data: string;
+        value?: bigint;
+    }): Promise<{
+        hash: string;
+        wait(): Promise<{
+            status: number | null;
+        }>;
+    }>;
+}
+/**
+ * Adapter that bridges any `ExternalWallet`-compatible object to the
+ * `ProofportSigner` interface. No additional npm dependencies required —
+ * the caller brings their own wallet implementation.
+ *
+ * @example
+ * ```typescript
+ * import { CdpWalletSigner } from '@zkproofport-ai/sdk';
+ *
+ * // Wrap any CDP / external wallet
+ * const signer = new CdpWalletSigner(myExternalWallet);
+ *
+ * // Use as attestation signer
+ * const client = new ProofportClient({ ... }, { attestation: signer });
+ * ```
+ */
+export declare class CdpWalletSigner implements ProofportSigner {
+    private readonly wallet;
+    constructor(wallet: ExternalWallet);
+    /** Returns the wallet address, resolving async providers transparently. */
+    getAddress(): string | Promise<string>;
+    /**
+     * Signs a raw byte message.
+     * Passes the Uint8Array directly to the underlying wallet; the wallet is
+     * responsible for any encoding (e.g., personal_sign prefix).
+     */
+    signMessage(message: Uint8Array): Promise<string>;
+    /**
+     * Signs EIP-712 typed data.
+     * The strict `ProofportSigner` domain shape is widened to
+     * `Record<string, unknown>` when forwarded so any external wallet
+     * implementation can accept it without type conflicts.
+     */
+    signTypedData(domain: {
+        name: string;
+        version: string;
+        chainId: number;
+        verifyingContract: string;
+    }, types: Record<string, Array<{
+        name: string;
+        type: string;
+    }>>, message: Record<string, unknown>): Promise<string>;
+    /**
+     * Sends a transaction via the underlying wallet.
+     * Throws a descriptive error if the wrapped wallet did not provide
+     * a `sendTransaction` method (e.g., signing-only attestation wallets).
+     */
+    sendTransaction(tx: {
+        to: string;
+        data: string;
+        value?: bigint;
+    }): Promise<{
+        hash: string;
+        wait(): Promise<{
+            status: number | null;
+        }>;
+    }>;
+}
+/**
+ * Convenience factory — equivalent to `new CdpWalletSigner(wallet)`.
+ *
+ * Useful for returning a `ProofportSigner` without exposing the concrete
+ * `CdpWalletSigner` class to callers.
+ *
+ * @example
+ * ```typescript
+ * import { fromExternalWallet } from '@zkproofport-ai/sdk';
+ *
+ * const signer = fromExternalWallet({
+ *   getAddress: () => '0xYourAddress',
+ *   signMessage: (msg) => myWallet.sign(msg),
+ *   signTypedData: (domain, types, message) =>
+ *     myWallet.signTypedData({ domain, types, message }),
+ * });
+ * ```
+ */
+export declare function fromExternalWallet(wallet: ExternalWallet): ProofportSigner;
+//# sourceMappingURL=cdp.d.ts.map

package/dist/cdp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp.d.ts","sourceRoot":"","sources":["../src/cdp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,UAAU,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvC;;;OAGG;IACH,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE3D;;;OAGG;IACH,aAAa,CACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,EAC5D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnB;;;;OAIG;IACH,eAAe,CAAC,CAAC,EAAE,EAAE;QACnB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,IAAI,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC,CAAC;CAC3E;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,eAAgB,YAAW,eAAe;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;gBAE5B,MAAM,EAAE,cAAc;IAIlC,2EAA2E;IAC3E,UAAU,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAItC;;;;OAIG;IACG,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvD;;;;;OAKG;IACG,aAAa,CACjB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,iBAAiB,EAAE,MAAM,CAAC;KAC3B,EACD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,EAC5D,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC;IAIlB;;;;OAIG;IACG,eAAe,CAAC,EAAE,EAAE;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,IAAI,OAAO,CAAC;YAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CAU1E;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,GAAG,eAAe,CAE1E"}

package/dist/cdp.js

@@ -0,0 +1,78 @@
+/**
+ * Adapter that bridges any `ExternalWallet`-compatible object to the
+ * `ProofportSigner` interface. No additional npm dependencies required —
+ * the caller brings their own wallet implementation.
+ *
+ * @example
+ * ```typescript
+ * import { CdpWalletSigner } from '@zkproofport-ai/sdk';
+ *
+ * // Wrap any CDP / external wallet
+ * const signer = new CdpWalletSigner(myExternalWallet);
+ *
+ * // Use as attestation signer
+ * const client = new ProofportClient({ ... }, { attestation: signer });
+ * ```
+ */
+export class CdpWalletSigner {
+    wallet;
+    constructor(wallet) {
+        this.wallet = wallet;
+    }
+    /** Returns the wallet address, resolving async providers transparently. */
+    getAddress() {
+        return this.wallet.getAddress();
+    }
+    /**
+     * Signs a raw byte message.
+     * Passes the Uint8Array directly to the underlying wallet; the wallet is
+     * responsible for any encoding (e.g., personal_sign prefix).
+     */
+    async signMessage(message) {
+        return this.wallet.signMessage(message);
+    }
+    /**
+     * Signs EIP-712 typed data.
+     * The strict `ProofportSigner` domain shape is widened to
+     * `Record<string, unknown>` when forwarded so any external wallet
+     * implementation can accept it without type conflicts.
+     */
+    async signTypedData(domain, types, message) {
+        return this.wallet.signTypedData(domain, types, message);
+    }
+    /**
+     * Sends a transaction via the underlying wallet.
+     * Throws a descriptive error if the wrapped wallet did not provide
+     * a `sendTransaction` method (e.g., signing-only attestation wallets).
+     */
+    async sendTransaction(tx) {
+        if (typeof this.wallet.sendTransaction !== 'function') {
+            throw new Error('CdpWalletSigner: the wrapped wallet does not implement sendTransaction. ' +
+                'Provide a sendTransaction method on the ExternalWallet object, or use a ' +
+                'different signer for payment transactions.');
+        }
+        return this.wallet.sendTransaction(tx);
+    }
+}
+/**
+ * Convenience factory — equivalent to `new CdpWalletSigner(wallet)`.
+ *
+ * Useful for returning a `ProofportSigner` without exposing the concrete
+ * `CdpWalletSigner` class to callers.
+ *
+ * @example
+ * ```typescript
+ * import { fromExternalWallet } from '@zkproofport-ai/sdk';
+ *
+ * const signer = fromExternalWallet({
+ *   getAddress: () => '0xYourAddress',
+ *   signMessage: (msg) => myWallet.sign(msg),
+ *   signTypedData: (domain, types, message) =>
+ *     myWallet.signTypedData({ domain, types, message }),
+ * });
+ * ```
+ */
+export function fromExternalWallet(wallet) {
+    return new CdpWalletSigner(wallet);
+}
+//# sourceMappingURL=cdp.js.map

package/dist/cdp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cdp.js","sourceRoot":"","sources":["../src/cdp.ts"],"names":[],"mappings":"AAqFA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,eAAe;IACT,MAAM,CAAiB;IAExC,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,2EAA2E;IAC3E,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAClC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,OAAmB;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,MAKC,EACD,KAA4D,EAC5D,OAAgC;QAEhC,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAiC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACtF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,EAIrB;QACC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,0EAA0E;gBACxE,0EAA0E;gBAC1E,4CAA4C,CAC/C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IACvD,OAAO,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/dist/circuits.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Canonical ZKProofport circuit identifiers, for `@zkproofport-ai/sdk`.
+ *
+ * ## The customer SDK owns this list
+ *
+ * `@zkproofport-app/sdk/circuits` (repo `zkproofport/proofport-app-sdk`,
+ * `src/circuits.ts`) is the single source of truth for circuit identifiers
+ * across every layer: the mobile app, the relay, the demo, and proofport-ai.
+ * The names below are that module's values, verbatim — the same eight ids in
+ * the same order with the same support statuses.
+ *
+ * This file is a **mirror, not a second source of truth**. Nothing here may be
+ * edited on its own judgement: change the SDK first, then bring the change over.
+ *
+ * ## Why this package keeps a copy
+ *
+ * There are two reasons, and only the first is temporary:
+ *
+ 1. ~~The published customer SDK does not ship the module.~~ **No longer true**
+ *    as of 0.2.16, whose `exports` map carries `./circuits` and whose tarball
+ *    has `dist/circuits.{js,esm.js,mjs,d.ts}` — verified with `npm pack`
+ *    2026-09-11. Reason 2 is now the only one holding this mirror up.
+ * 2. This package is published to npm, and `@zkproofport-app/sdk` carries
+ *    `qrcode` and `socket.io-client` (38 transitive packages, measured). The
+ *    `./circuits` subpath is dependency-free at *import* time, but npm still
+ *    installs the whole dependency tree. Paying that on every
+ *    `npx zkproofport-mcp` for seven strings is a poor trade, so even after the
+ *    SDK publishes the subpath this mirror may be worth keeping.
+ *
+ * The root server tree keeps its own mirror at `src/config/circuitIds.ts` — the
+ * two trees are compiled and shipped separately (`rootDir: src` in each,
+ * different npm packages / Docker images), so neither can import the other.
+ *
+ * ## What stops the mirrors drifting
+ *
+ * `tests/circuitIds.test.ts` at the repo root reads the real customer SDK — the
+ * installed package if present, otherwise the sibling checkout at
+ * `../proofport-app-sdk` — and fails when either mirror disagrees with it, or
+ * with the other. It fails, rather than skips, when it can find neither.
+ *
+ * ## Identifiers are canonical and case-sensitive
+ *
+ * Each id is the circuit's `name` in its `Nargo.toml`, verbatim: lowercase with
+ * underscores. Hyphenated spellings (`coinbase-kyc`) are directory or UI route
+ * names elsewhere and are not circuit ids; passing one produces a nullifier
+ * mismatch or a failed on-chain lookup rather than a clear error.
+ */
+/**
+ * Whether a circuit is officially supported today or still on the roadmap.
+ *
+ * - `supported` — generally available.
+ * - `planned` — the identifier is reserved, but availability, inputs and
+ *   public-input layout may still change.
+ */
+export type CircuitSupportStatus = 'supported' | 'experimental' | 'planned';
+/**
+ * Every canonical circuit identifier ZKProofport has assigned, keyed by a stable
+ * constant name. Mirrors `CIRCUIT_IDS` in `@zkproofport-app/sdk/circuits`.
+ *
+ * This is the full ZKProofport catalogue, which is wider than what the
+ * proofport-ai server can prove — see {@link PROVABLE_CIRCUIT_IDS} for that.
+ */
+export declare const CIRCUIT_IDS: Readonly<{
+    /** Coinbase KYC attestation. Officially supported. */
+    readonly COINBASE_ATTESTATION: "coinbase_attestation";
+    /** Coinbase country attestation (inclusion / exclusion). Officially supported. */
+    readonly COINBASE_COUNTRY_ATTESTATION: "coinbase_country_attestation";
+    /** OIDC email-domain attestation. Officially supported. */
+    readonly OIDC_DOMAIN_ATTESTATION: "oidc_domain_attestation";
+    /** Arc eligibility: one EIP-712 action, authorized. Officially supported. */
+    readonly ARC_ELIGIBILITY: "arc_eligibility";
+    /** GIWA attestation. Planned — not officially supported yet. */
+    readonly GIWA_ATTESTATION: "giwa_attestation";
+    /** Korea Mobile ID ownership. Planned — not officially supported yet. */
+    readonly MDL_KR_OWNERSHIP: "mdl_kr_ownership";
+    /** Korea Mobile ID age threshold. Planned — not officially supported yet. */
+    readonly MDL_KR_AGE: "mdl_kr_age";
+    /** Korea Mobile ID si/do region. Planned — not officially supported yet. */
+    readonly MDL_KR_REGION: "mdl_kr_region";
+}>;
+/**
+ * Union of every canonical circuit identifier.
+ *
+ * The customer SDK calls this type `CircuitId`. It is named
+ * `CanonicalCircuitId` here because {@link CircuitId} is already this package's
+ * public name for the narrower set proofport-ai can prove; widening it would be
+ * a silent breaking change for anyone writing `Record<CircuitId, …>`, and would
+ * let `circuit: 'mdl_kr_age'` typecheck against an endpoint that cannot serve it.
+ */
+export type CanonicalCircuitId = (typeof CIRCUIT_IDS)[keyof typeof CIRCUIT_IDS];
+/**
+ * Support status for every canonical circuit. Exhaustive over
+ * {@link CanonicalCircuitId}, so an identifier without a status is a compile
+ * error.
+ */
+export declare const CIRCUIT_SUPPORT_STATUS: Readonly<Record<CanonicalCircuitId, CircuitSupportStatus>>;
+/** Every canonical circuit identifier, in declaration order. */
+export declare const ALL_CIRCUIT_IDS: readonly CanonicalCircuitId[];
+/** Circuits ZKProofport officially supports today. Derived, so it cannot desync. */
+export declare const SUPPORTED_CIRCUIT_IDS: readonly CanonicalCircuitId[];
+/** Circuits whose identifiers are reserved but not officially supported yet. */
+export declare const PLANNED_CIRCUIT_IDS: readonly CanonicalCircuitId[];
+/**
+ * Narrows an unknown value to a canonical circuit identifier. Returns `false`
+ * for hyphenated route names such as `'coinbase-kyc'`.
+ */
+export declare function isCanonicalCircuitId(value: unknown): value is CanonicalCircuitId;
+/** Returns the support status of a canonical circuit. */
+export declare function getCircuitSupportStatus(circuit: CanonicalCircuitId): CircuitSupportStatus;
+/**
+ * The circuits the proofport-ai server can prove: the ones it has compiled
+ * artifacts, an input builder and a deployed verifier for.
+ *
+ * A strict subset of {@link ALL_CIRCUIT_IDS} — `satisfies` makes an id that is
+ * no longer canonical a compile error here, and the entries are the canonical
+ * constants rather than repeated string literals.
+ */
+export declare const PROVABLE_CIRCUIT_IDS: readonly ["coinbase_attestation", "coinbase_country_attestation", "oidc_domain_attestation", "arc_eligibility"];
+/** Narrows an unknown value to a circuit the proofport-ai server can prove. */
+export declare function isProvableCircuitId(value: unknown): value is CanonicalCircuitId;
+//# sourceMappingURL=circuits.d.ts.map

package/dist/circuits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuits.d.ts","sourceRoot":"","sources":["../src/circuits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,cAAc,GAAG,SAAS,CAAC;AAE5E;;;;;;GAMG;AACH,eAAO,MAAM,WAAW;IACtB,sDAAsD;;IAEtD,kFAAkF;;IAElF,2DAA2D;;IAE3D,6EAA6E;;IAE7E,gEAAgE;;IAEhE,yEAAyE;;IAEzE,6EAA6E;;IAE7E,4EAA4E;;EAEnE,CAAC;AAEZ;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAUjF,CAAC;AAEd,gEAAgE;AAChE,eAAO,MAAM,eAAe,EAAE,SAAS,kBAAkB,EAExD,CAAC;AAEF,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,EAAE,SAAS,kBAAkB,EAE9D,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,mBAAmB,EAAE,SAAS,kBAAkB,EAE5D,CAAC;AAEF;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAEhF;AAED,yDAAyD;AACzD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,kBAAkB,GAAG,oBAAoB,CAOzF;AAMD;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,iHAKiB,CAAC;AAEnD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CAE/E"}

package/dist/circuits.js

@@ -0,0 +1,129 @@
+/**
+ * Canonical ZKProofport circuit identifiers, for `@zkproofport-ai/sdk`.
+ *
+ * ## The customer SDK owns this list
+ *
+ * `@zkproofport-app/sdk/circuits` (repo `zkproofport/proofport-app-sdk`,
+ * `src/circuits.ts`) is the single source of truth for circuit identifiers
+ * across every layer: the mobile app, the relay, the demo, and proofport-ai.
+ * The names below are that module's values, verbatim — the same eight ids in
+ * the same order with the same support statuses.
+ *
+ * This file is a **mirror, not a second source of truth**. Nothing here may be
+ * edited on its own judgement: change the SDK first, then bring the change over.
+ *
+ * ## Why this package keeps a copy
+ *
+ * There are two reasons, and only the first is temporary:
+ *
+ 1. ~~The published customer SDK does not ship the module.~~ **No longer true**
+ *    as of 0.2.16, whose `exports` map carries `./circuits` and whose tarball
+ *    has `dist/circuits.{js,esm.js,mjs,d.ts}` — verified with `npm pack`
+ *    2026-09-11. Reason 2 is now the only one holding this mirror up.
+ * 2. This package is published to npm, and `@zkproofport-app/sdk` carries
+ *    `qrcode` and `socket.io-client` (38 transitive packages, measured). The
+ *    `./circuits` subpath is dependency-free at *import* time, but npm still
+ *    installs the whole dependency tree. Paying that on every
+ *    `npx zkproofport-mcp` for seven strings is a poor trade, so even after the
+ *    SDK publishes the subpath this mirror may be worth keeping.
+ *
+ * The root server tree keeps its own mirror at `src/config/circuitIds.ts` — the
+ * two trees are compiled and shipped separately (`rootDir: src` in each,
+ * different npm packages / Docker images), so neither can import the other.
+ *
+ * ## What stops the mirrors drifting
+ *
+ * `tests/circuitIds.test.ts` at the repo root reads the real customer SDK — the
+ * installed package if present, otherwise the sibling checkout at
+ * `../proofport-app-sdk` — and fails when either mirror disagrees with it, or
+ * with the other. It fails, rather than skips, when it can find neither.
+ *
+ * ## Identifiers are canonical and case-sensitive
+ *
+ * Each id is the circuit's `name` in its `Nargo.toml`, verbatim: lowercase with
+ * underscores. Hyphenated spellings (`coinbase-kyc`) are directory or UI route
+ * names elsewhere and are not circuit ids; passing one produces a nullifier
+ * mismatch or a failed on-chain lookup rather than a clear error.
+ */
+/**
+ * Every canonical circuit identifier ZKProofport has assigned, keyed by a stable
+ * constant name. Mirrors `CIRCUIT_IDS` in `@zkproofport-app/sdk/circuits`.
+ *
+ * This is the full ZKProofport catalogue, which is wider than what the
+ * proofport-ai server can prove — see {@link PROVABLE_CIRCUIT_IDS} for that.
+ */
+export const CIRCUIT_IDS = Object.freeze({
+    /** Coinbase KYC attestation. Officially supported. */
+    COINBASE_ATTESTATION: 'coinbase_attestation',
+    /** Coinbase country attestation (inclusion / exclusion). Officially supported. */
+    COINBASE_COUNTRY_ATTESTATION: 'coinbase_country_attestation',
+    /** OIDC email-domain attestation. Officially supported. */
+    OIDC_DOMAIN_ATTESTATION: 'oidc_domain_attestation',
+    /** Arc eligibility: one EIP-712 action, authorized. Officially supported. */
+    ARC_ELIGIBILITY: 'arc_eligibility',
+    /** GIWA attestation. Planned — not officially supported yet. */
+    GIWA_ATTESTATION: 'giwa_attestation',
+    /** Korea Mobile ID ownership. Planned — not officially supported yet. */
+    MDL_KR_OWNERSHIP: 'mdl_kr_ownership',
+    /** Korea Mobile ID age threshold. Planned — not officially supported yet. */
+    MDL_KR_AGE: 'mdl_kr_age',
+    /** Korea Mobile ID si/do region. Planned — not officially supported yet. */
+    MDL_KR_REGION: 'mdl_kr_region',
+});
+/**
+ * Support status for every canonical circuit. Exhaustive over
+ * {@link CanonicalCircuitId}, so an identifier without a status is a compile
+ * error.
+ */
+export const CIRCUIT_SUPPORT_STATUS = Object.freeze({
+    coinbase_attestation: 'supported',
+    coinbase_country_attestation: 'supported',
+    oidc_domain_attestation: 'supported',
+    arc_eligibility: 'experimental',
+    giwa_attestation: 'planned',
+    mdl_kr_ownership: 'planned',
+    mdl_kr_age: 'planned',
+    mdl_kr_region: 'planned',
+});
+/** Every canonical circuit identifier, in declaration order. */
+export const ALL_CIRCUIT_IDS = Object.freeze(Object.values(CIRCUIT_IDS));
+/** Circuits ZKProofport officially supports today. Derived, so it cannot desync. */
+export const SUPPORTED_CIRCUIT_IDS = Object.freeze(ALL_CIRCUIT_IDS.filter((id) => CIRCUIT_SUPPORT_STATUS[id] === 'supported'));
+/** Circuits whose identifiers are reserved but not officially supported yet. */
+export const PLANNED_CIRCUIT_IDS = Object.freeze(ALL_CIRCUIT_IDS.filter((id) => CIRCUIT_SUPPORT_STATUS[id] === 'planned'));
+/**
+ * Narrows an unknown value to a canonical circuit identifier. Returns `false`
+ * for hyphenated route names such as `'coinbase-kyc'`.
+ */
+export function isCanonicalCircuitId(value) {
+    return typeof value === 'string' && ALL_CIRCUIT_IDS.includes(value);
+}
+/** Returns the support status of a canonical circuit. */
+export function getCircuitSupportStatus(circuit) {
+    if (!isCanonicalCircuitId(circuit)) {
+        throw new Error(`Unknown circuit '${String(circuit)}'. Expected one of: ${ALL_CIRCUIT_IDS.join(', ')}`);
+    }
+    return CIRCUIT_SUPPORT_STATUS[circuit];
+}
+// ── proofport-ai's own subset ───────────────────────────────────────────────
+// Everything above mirrors the customer SDK. Everything below is this repo's,
+// and the SDK has no opinion on it.
+/**
+ * The circuits the proofport-ai server can prove: the ones it has compiled
+ * artifacts, an input builder and a deployed verifier for.
+ *
+ * A strict subset of {@link ALL_CIRCUIT_IDS} — `satisfies` makes an id that is
+ * no longer canonical a compile error here, and the entries are the canonical
+ * constants rather than repeated string literals.
+ */
+export const PROVABLE_CIRCUIT_IDS = [
+    CIRCUIT_IDS.COINBASE_ATTESTATION,
+    CIRCUIT_IDS.COINBASE_COUNTRY_ATTESTATION,
+    CIRCUIT_IDS.OIDC_DOMAIN_ATTESTATION,
+    CIRCUIT_IDS.ARC_ELIGIBILITY,
+];
+/** Narrows an unknown value to a circuit the proofport-ai server can prove. */
+export function isProvableCircuitId(value) {
+    return typeof value === 'string' && PROVABLE_CIRCUIT_IDS.includes(value);
+}
+//# sourceMappingURL=circuits.js.map

package/dist/circuits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuits.js","sourceRoot":"","sources":["../src/circuits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AAWH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,sDAAsD;IACtD,oBAAoB,EAAE,sBAAsB;IAC5C,kFAAkF;IAClF,4BAA4B,EAAE,8BAA8B;IAC5D,2DAA2D;IAC3D,uBAAuB,EAAE,yBAAyB;IAClD,6EAA6E;IAC7E,eAAe,EAAE,iBAAiB;IAClC,gEAAgE;IAChE,gBAAgB,EAAE,kBAAkB;IACpC,yEAAyE;IACzE,gBAAgB,EAAE,kBAAkB;IACpC,6EAA6E;IAC7E,UAAU,EAAE,YAAY;IACxB,4EAA4E;IAC5E,aAAa,EAAE,eAAe;CACtB,CAAC,CAAC;AAaZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC,MAAM,CAAC,MAAM,CAAC;IACZ,oBAAoB,EAAE,WAAW;IACjC,4BAA4B,EAAE,WAAW;IACzC,uBAAuB,EAAE,WAAW;IACpC,eAAe,EAAE,cAAc;IAC/B,gBAAgB,EAAE,SAAS;IAC3B,gBAAgB,EAAE,SAAS;IAC3B,UAAU,EAAE,SAAS;IACrB,aAAa,EAAE,SAAS;CAChB,CAAC,CAAC;AAEd,gEAAgE;AAChE,MAAM,CAAC,MAAM,eAAe,GAAkC,MAAM,CAAC,MAAM,CACzE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAyB,CACnD,CAAC;AAEF,oFAAoF;AACpF,MAAM,CAAC,MAAM,qBAAqB,GAAkC,MAAM,CAAC,MAAM,CAC/E,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC,KAAK,WAAW,CAAC,CAC3E,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,mBAAmB,GAAkC,MAAM,CAAC,MAAM,CAC7E,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC,CACzE,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,eAAqC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7F,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,uBAAuB,CAAC,OAA2B;IACjE,IAAI,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,oBAAoB,MAAM,CAAC,OAAO,CAAC,uBAAuB,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,+EAA+E;AAC/E,8EAA8E;AAC9E,oCAAoC;AAEpC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,WAAW,CAAC,oBAAoB;IAChC,WAAW,CAAC,4BAA4B;IACxC,WAAW,CAAC,uBAAuB;IACnC,WAAW,CAAC,eAAe;CACqB,CAAC;AAEnD,+EAA+E;AAC/E,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClG,CAAC"}

package/dist/constants.d.ts

@@ -1,4 +1,10 @@
-export declare const CIRCUITS: Record<string, {
+import type { CircuitId } from './types.js';
+/**
+ * Per-circuit metadata. Keyed by the canonical identifiers from `./circuits.js`
+ * and typed `Record<CircuitId, …>`, so adding a provable circuit without an
+ * entry — or keeping an entry for one that no longer exists — is a compile error.
+ */
+export declare const CIRCUITS: Record<CircuitId, {
     displayName: string;
     easSchemaId?: string;
     functionSelector?: string;
@@ -7,7 +13,7 @@ export declare const CIRCUITS: Record<string, {
 export declare const COINBASE_ATTESTER_CONTRACT = "0x357458739F90461b99789350868CD7CF330Dd7EE";
 export declare const AUTHORIZED_SIGNERS: string[];
 export declare const DEFAULT_EAS_GRAPHQL = "https://base.easscan.org/graphql";
-export declare const DEFAULT_EAS_RPC = "https://mainnet.base.org";
+export declare const DEFAULT_EAS_RPC = "https://base.drpc.org";
 export declare const RAW_TX_PADDED_LENGTH = 300;
 export declare const MERKLE_PROOF_MAX_DEPTH = 8;
 export declare const COUNTRY_LIST_MAX_LENGTH = 10;

package/dist/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAeA,CAAC;AAEF,eAAO,MAAM,0BAA0B,+CAA+C,CAAC;AAEvF,eAAO,MAAM,kBAAkB,UAK9B,CAAC;AAEF,eAAO,MAAM,mBAAmB,qCAAqC,CAAC;AACtE,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAE1D,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,uBAAuB,KAAK,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAoBA,CAAC;AAEF,eAAO,MAAM,0BAA0B,+CAA+C,CAAC;AAEvF,eAAO,MAAM,kBAAkB,UAK9B,CAAC;AAEF,eAAO,MAAM,mBAAmB,qCAAqC,CAAC;AAKtE,eAAO,MAAM,eAAe,0BAA0B,CAAC;AAEvD,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,uBAAuB,KAAK,CAAC"}

package/dist/constants.js

@@ -1,18 +1,29 @@
+import { CIRCUIT_IDS } from './circuits.js';
+/**
+ * Per-circuit metadata. Keyed by the canonical identifiers from `./circuits.js`
+ * and typed `Record<CircuitId, …>`, so adding a provable circuit without an
+ * entry — or keeping an entry for one that no longer exists — is a compile error.
+ */
 export const CIRCUITS = {
-    coinbase_attestation: {
+    [CIRCUIT_IDS.COINBASE_ATTESTATION]: {
         displayName: 'Coinbase KYC',
         easSchemaId: '0xf8b05c79f090979bf4a80270aba232dff11a10d9ca55c4f88de95317970f0de9',
         functionSelector: '0x56feed5e',
     },
-    coinbase_country_attestation: {
+    [CIRCUIT_IDS.COINBASE_COUNTRY_ATTESTATION]: {
         displayName: 'Coinbase Country',
         easSchemaId: '0x1801901fabd0e6189356b4fb52bb0ab855276d84f7ec140839fbd1f6801ca065',
         functionSelector: '0x0a225248',
     },
-    oidc_domain_attestation: {
+    [CIRCUIT_IDS.OIDC_DOMAIN_ATTESTATION]: {
         displayName: 'OIDC Domain',
         inputType: 'oidc',
     },
+    [CIRCUIT_IDS.ARC_ELIGIBILITY]: {
+        displayName: 'Arc Eligibility',
+        easSchemaId: '0xf8b05c79f090979bf4a80270aba232dff11a10d9ca55c4f88de95317970f0de9',
+        functionSelector: '0x56feed5e',
+    },
 };
 export const COINBASE_ATTESTER_CONTRACT = '0x357458739F90461b99789350868CD7CF330Dd7EE';
 export const AUTHORIZED_SIGNERS = [
@@ -22,7 +33,11 @@ export const AUTHORIZED_SIGNERS = [
     '0x44ace9abb148e8412ac4492e9a1ae6bd88226803',
 ];
 export const DEFAULT_EAS_GRAPHQL = 'https://base.easscan.org/graphql';
-export const DEFAULT_EAS_RPC = 'https://mainnet.base.org';
+// Use drpc.org instead of mainnet.base.org: the latter prunes transactions
+// older than ~30 days, so eth_getTransactionByHash returns null for any
+// attestation made earlier (mainnet.base.org returned null for txs from 2025).
+// drpc.org retains full history at no cost and no API key.
+export const DEFAULT_EAS_RPC = 'https://base.drpc.org';
 export const RAW_TX_PADDED_LENGTH = 300;
 export const MERKLE_PROOF_MAX_DEPTH = 8;
 export const COUNTRY_LIST_MAX_LENGTH = 10;

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,QAAQ,GAKhB;IACH,oBAAoB,EAAE;QACpB,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,oEAAoE;QACjF,gBAAgB,EAAE,YAAY;KAC/B;IACD,4BAA4B,EAAE;QAC5B,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE,oEAAoE;QACjF,gBAAgB,EAAE,YAAY;KAC/B;IACD,uBAAuB,EAAE;QACvB,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KAClB;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,4CAA4C,CAAC;AAEvF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAE1D,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAG5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAKhB;IACH,CAAC,WAAW,CAAC,oBAAoB,CAAC,EAAE;QAClC,WAAW,EAAE,cAAc;QAC3B,WAAW,EAAE,oEAAoE;QACjF,gBAAgB,EAAE,YAAY;KAC/B;IACD,CAAC,WAAW,CAAC,4BAA4B,CAAC,EAAE;QAC1C,WAAW,EAAE,kBAAkB;QAC/B,WAAW,EAAE,oEAAoE;QACjF,gBAAgB,EAAE,YAAY;KAC/B;IACD,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE;QACrC,WAAW,EAAE,aAAa;QAC1B,SAAS,EAAE,MAAM;KAClB;IACD,CAAC,WAAW,CAAC,eAAe,CAAC,EAAE;QAC7B,WAAW,EAAE,iBAAiB;QAC9B,WAAW,EAAE,oEAAoE;QACjF,gBAAgB,EAAE,YAAY;KAC/B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,4CAA4C,CAAC;AAEvF,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;IAC5C,4CAA4C;CAC7C,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AACtE,2EAA2E;AAC3E,wEAAwE;AACxE,+EAA+E;AAC/E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAEvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC"}