@zkproofport-ai/sdk 0.3.0 → 0.4.0

package/dist/wallets.js.map

@@ -1 +1 @@
-{"version":3,"file":"wallets.js","sourceRoot":"","sources":["../src/wallets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAGH,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAoB,CAAC,CAAC;IAC1D,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,OAAgB,CAAC;QACnE,QAAQ,EAAE,GAAG,EAAE,CAAC,eAAe,OAAO,CAAC,OAAO,EAAE;KACjD,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAKnC;IACC,IAAI,SAEH,CAAC;IACF,IAAI,iBAAsG,CAAC;IAC3G,IAAI,CAAC;QACH,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAU,CAAC,CAAC;QAC/D,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAU,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,yDAAyD;QACzD,MAAM,IAAI,KAAK,CACb,iFAAiF;YACjF,iEAAiE;YACjE,qBAAsB,CAAW,CAAC,OAAO,EAAE,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,mBAAmB,EAAE,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAwB;QACxC,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAA2B;QACnF,QAAQ,EAAE,GAAG,EAAE,CAAC,cAAc,IAAI,CAAC,UAAU,IAAI,mBAAmB,KAAK,MAAM,CAAC,OAAO,GAAG;KAC3F,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAMtC;IACC,IAAI,wCAGH,CAAC;IACF,IAAI,CAAC;QACH,CAAC,EAAE,wCAAwC,EAAE,GAAG,CAAC,MAAM,MAAM,CAC3D,0CAA0C,CAC3C,CAAU,CAAC,CAAC;IACf,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,wFAAwF;YACxF,mDAAoD,CAAW,CAAC,OAAO,GAAG,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,wCAAwC,CAAC;QACtD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IAEH,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1D,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;QACpC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,QAAQ,sDAAsD,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAwB;QACjC,KAAK,CAAC,aAAa,CAAC,OAAO;YACzB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;gBACrC,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,IAAI,EAAE,kCAAkC;aACzC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;YACtC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,CAAC,QAAQ,mEAAmE;oBACjG,4EAA4E,CAC7E,CAAC;YACJ,CAAC;YACD,OAAO,SAA0B,CAAC;QACpC,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,iBAAiB,IAAI,CAAC,QAAQ,KAAK,OAAO,GAAG;KAC9D,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAA0C,OAAO,CAAC,GAAG;IACvF,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,GAAG,CAAC,mBAAmB;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,cAAc;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,GAAG,CAAC,cAAc;QAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAElD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,6CAA6C;YAC7C,yBAAyB;YACzB,6DAA6D;YAC7D,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,+CAA+C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACzE,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,KAAK;YACR,OAAO,oBAAoB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC3D,KAAK,KAAK;YACR,OAAO,aAAa,CAAC;gBACnB,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC;gBAChC,YAAY,EAAE,IAAI,CAAC,oBAAoB,CAAC;gBACxC,YAAY,EAAE,IAAI,CAAC,mBAAmB,CAAC;gBACvC,UAAU,EAAE,GAAG,CAAC,eAAe;aAChC,CAAC,CAAC;QACL,KAAK,KAAK;YACR,uEAAuE;YACvE,yEAAyE;YACzE,mCAAmC;YACnC,OAAO,kBAAkB,CAAC;gBACxB,OAAO,EAAE,GAAG,CAAC,gBAAgB;gBAC7B,KAAK,EAAG,GAAG,CAAC,aAAuB,IAAI,SAAS;aACjD,CAAC,CAAC;QACL,KAAK,QAAQ;YACX,OAAO,gBAAgB,CAAC;gBACtB,MAAM,EAAE,IAAI,CAAC,gBAAgB,CAAC;gBAC9B,YAAY,EAAE,IAAI,CAAC,sBAAsB,CAAC;gBAC1C,QAAQ,EAAE,IAAI,CAAC,kBAAkB,CAAC;gBAClC,OAAO,EAAE,GAAG,CAAC,qBAAqB;aACnC,CAAC,CAAC;QACL;YACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,yCAAyC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC"}
+{"version":3,"file":"wallets.js","sourceRoot":"","sources":["../src/wallets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAIH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB;IAC3D,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;IACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAoB,CAAC,CAAC;IAC1D,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,OAAgB,CAAC;QACnE,QAAQ,EAAE,GAAG,EAAE,CAAC,eAAe,OAAO,CAAC,OAAO,EAAE;KACjD,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAKnC;IACC,IAAI,SAEH,CAAC;IACF,IAAI,iBAAsG,CAAC;IAC3G,IAAI,CAAC;QACH,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAU,CAAC,CAAC;QAC/D,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAU,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,yEAAyE;QACzE,wEAAwE;QACxE,uEAAuE;QACvE,yDAAyD;QACzD,MAAM,IAAI,KAAK,CACb,iFAAiF;YACjF,iEAAiE;YACjE,qBAAsB,CAAW,CAAC,OAAO,EAAE,CAC5C,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,IAAI,mBAAmB,EAAE,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,OAAwB;QACxC,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAA2B;QACnF,QAAQ,EAAE,GAAG,EAAE,CAAC,cAAc,IAAI,CAAC,UAAU,IAAI,mBAAmB,KAAK,MAAM,CAAC,OAAO,GAAG;KAC3F,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAA0C,OAAO,CAAC,GAAG;IACvF,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,GAAG,CAAC,mBAAmB;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,GAAG,CAAC,cAAc;QAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE/C,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,6CAA6C;YAC7C,yBAAyB;YACzB,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,+CAA+C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACzE,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,qDAAqD;AACrD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAa,EACb,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACpB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,KAAK,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,KAAK;YACR,OAAO,oBAAoB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC3D,KAAK,KAAK;YACR,OAAO,aAAa,CAAC;gBACnB,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC;gBAChC,YAAY,EAAE,IAAI,CAAC,oBAAoB,CAAC;gBACxC,YAAY,EAAE,IAAI,CAAC,mBAAmB,CAAC;gBACvC,UAAU,EAAE,GAAG,CAAC,eAAe;aAChC,CAAC,CAAC;QACL;YACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,4BAA4B,CAAC,CAAC;IAClF,CAAC;AACH,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zkproofport-ai/sdk",
-  "version": "0.3.0",
-  "description": "TypeScript SDK for ZKProofport Coinbase KYC, country, OIDC, Arc eligibility and GIWA attestation proofs. Optional EIP-712 action binding for Arc/GIWA; x402 USDC and Circle Gateway payments.",
+  "version": "0.4.0",
+  "description": "TypeScript SDK for ZKProofport Coinbase KYC, country, OIDC and GIWA attestation proofs. Optional EIP-712 action binding for GIWA; x402 USDC payments.",
   "keywords": [
     "sdk",
     "typescript",
@@ -18,11 +18,6 @@
     "noir-lang",
     "base-chain",
     "ethers",
-    "arc-testnet",
-    "experimental-arc",
-    "circle-agent-wallet",
-    "circle-gateway",
-    "gateway-nanopayments",
     "action-authorization",
     "eip-712"
   ],
@@ -40,7 +35,6 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@circle-fin/x402-batching": "^3.4.0",
     "@x402/core": "^2.25.0",
     "@x402/evm": "^2.25.0",
     "ethers": "^6.13.0",
@@ -60,7 +54,6 @@
     "directory": "packages/sdk"
   },
   "peerDependencies": {
-    "@circle-fin/developer-controlled-wallets": ">=10.0.0",
     "@coinbase/cdp-sdk": ">=1.55.0",
     "@x402/extensions": ">=2.25.0"
   },
@@ -68,9 +61,6 @@
     "@coinbase/cdp-sdk": {
       "optional": true
     },
-    "@circle-fin/developer-controlled-wallets": {
-      "optional": true
-    },
     "@x402/extensions": {
       "optional": true
     }

package/dist/arcWallet.d.ts

@@ -1,50 +0,0 @@
-/**
- * Paying from an Arc agent wallet, through Circle's CLI.
- *
- * ## Why the CLI and not an API
- *
- * An Arc agent wallet is not a key this process can hold. Circle keeps it, and
- * everything that touches it — creating it, reading its balance, signing with
- * it — goes through `@circle-fin/cli`, which authenticates with a login that a
- * person does once. So the integration is a wrapper around that command, and
- * the alternative would be reimplementing Circle's auth, which is both work and
- * a second thing to get wrong.
- *
- * ## What this buys over a private key
- *
- * The wallet carries policies Circle enforces: spending limits per period,
- * recipient allowlists, contract blocklists. A raw key has none of that — it
- * signs whatever it is handed. That is the whole point of an agent holding
- * money: the agent acts on its own, and the limits are not the agent's to
- * ignore.
- *
- * ## What it costs
- *
- * A subprocess per signature, and the CLI must be installed and logged in. Both
- * are checked before signing rather than discovered as a cryptic failure, and
- * the errors here say which of the two is missing and what command fixes it.
- */
-import type { PaymentWallet } from './types.js';
-/** How Circle names Arc's chains. Not ours to choose. */
-export declare const ARC_CLI_CHAINS: {
-    readonly testnet: "ARC-TESTNET";
-    readonly mainnet: "ARC";
-};
-export type ArcCliChain = (typeof ARC_CLI_CHAINS)[keyof typeof ARC_CLI_CHAINS];
-/** The agent wallets Circle holds for this login on one chain. */
-export declare function listArcAgentWallets(chain?: ArcCliChain): Promise<string[]>;
-/** Create one. Circle caps an account at five. */
-export declare function createArcAgentWallet(): Promise<string>;
-/**
- * A payment wallet backed by an Arc agent wallet.
- *
- * `address` may be omitted, in which case the single agent wallet on that chain
- * is used — and having none, or several, is an error rather than a guess:
- * paying from a wallet the caller did not name spends somebody's money
- * somewhere they did not choose.
- */
-export declare function walletFromArcAgent(opts?: {
-    address?: string;
-    chain?: ArcCliChain;
-}): Promise<PaymentWallet>;
-//# sourceMappingURL=arcWallet.d.ts.map

package/dist/arcWallet.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"arcWallet.d.ts","sourceRoot":"","sources":["../src/arcWallet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD,yDAAyD;AACzD,eAAO,MAAM,cAAc;;;CAAsD,CAAC;AAClF,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AA+C/E,kEAAkE;AAClE,wBAAsB,mBAAmB,CAAC,KAAK,GAAE,WAAoC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAKxG;AAED,kDAAkD;AAClD,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAK5D;AAiBD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,GAAE;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,WAAW,CAAC;CAChB,GAAG,OAAO,CAAC,aAAa,CAAC,CAkE9B"}

package/dist/arcWallet.js

@@ -1,161 +0,0 @@
-/**
- * Paying from an Arc agent wallet, through Circle's CLI.
- *
- * ## Why the CLI and not an API
- *
- * An Arc agent wallet is not a key this process can hold. Circle keeps it, and
- * everything that touches it — creating it, reading its balance, signing with
- * it — goes through `@circle-fin/cli`, which authenticates with a login that a
- * person does once. So the integration is a wrapper around that command, and
- * the alternative would be reimplementing Circle's auth, which is both work and
- * a second thing to get wrong.
- *
- * ## What this buys over a private key
- *
- * The wallet carries policies Circle enforces: spending limits per period,
- * recipient allowlists, contract blocklists. A raw key has none of that — it
- * signs whatever it is handed. That is the whole point of an agent holding
- * money: the agent acts on its own, and the limits are not the agent's to
- * ignore.
- *
- * ## What it costs
- *
- * A subprocess per signature, and the CLI must be installed and logged in. Both
- * are checked before signing rather than discovered as a cryptic failure, and
- * the errors here say which of the two is missing and what command fixes it.
- */
-import { execFile } from 'node:child_process';
-import { promisify } from 'node:util';
-const run = promisify(execFile);
-/** How Circle names Arc's chains. Not ours to choose. */
-export const ARC_CLI_CHAINS = { testnet: 'ARC-TESTNET', mainnet: 'ARC' };
-async function circle(args) {
-    try {
-        const { stdout } = await run('circle', [...args, '--output', 'json'], {
-            // Non-interactive: a script has no way to answer the terms prompt, and
-            // Circle documents this variable for exactly that.
-            env: { ...process.env, CIRCLE_ACCEPT_TERMS: '1' },
-            maxBuffer: 8 * 1024 * 1024,
-        });
-        return JSON.parse(stdout);
-    }
-    catch (error) {
-        const err = error;
-        if (err.code === 'ENOENT') {
-            throw new Error('Circle CLI is not installed, so an Arc agent wallet cannot sign. Install it with ' +
-                '`npm install -g @circle-fin/cli@>=1.1.4`, then `circle wallet login <email> --testnet`.');
-        }
-        // The CLI prints a JSON error on stdout even when it exits non-zero.
-        let reason = err.stderr?.trim() || err.message || 'unknown error';
-        try {
-            const parsed = JSON.parse(err.stdout ?? '');
-            if (parsed.error?.message) {
-                reason = parsed.error.hint ? `${parsed.error.message} (${parsed.error.hint})` : parsed.error.message;
-            }
-        }
-        catch {
-            // stdout was not JSON; the stderr text above is the best there is.
-        }
-        if (/no longer supported/i.test(reason)) {
-            throw new Error(`Circle CLI is too old: ${reason} Update it with \`circle update\` or ` +
-                '`npm install -g @circle-fin/cli@latest`. Circle disables wallet operations on ' +
-                'versions it has retired, so the pin cannot be held here — 1.0.0 stopped working ' +
-                'for wallet commands and 1.1.4 was current on 2026-09-22.');
-        }
-        if (/AUTH_REQUIRED|Not logged in/i.test(reason)) {
-            throw new Error(`Circle CLI is not logged in for this environment: ${reason}. ` +
-                'Testnet and mainnet are separate logins — `circle wallet login <email> --testnet` for Arc Testnet.');
-        }
-        throw new Error(`Circle CLI failed: ${reason}`);
-    }
-}
-/** The agent wallets Circle holds for this login on one chain. */
-export async function listArcAgentWallets(chain = ARC_CLI_CHAINS.testnet) {
-    const answer = (await circle(['wallet', 'list', '--chain', chain, '--type', 'agent']));
-    return (answer.data?.wallets ?? []).map((w) => String(w.address)).filter(Boolean);
-}
-/** Create one. Circle caps an account at five. */
-export async function createArcAgentWallet() {
-    const answer = (await circle(['wallet', 'create']));
-    const address = answer.data?.wallet?.address;
-    if (!address)
-        throw new Error('Circle CLI created a wallet but reported no address.');
-    return address;
-}
-/** The address that actually signs for an agent wallet, per Circle. */
-async function backingEoa(wallet, chain) {
-    const answer = (await circle(['gateway', 'balance', '--address', wallet, '--chain', chain]));
-    const backer = answer.data?.backingEOA;
-    if (!backer) {
-        throw new Error(`Circle did not say which address signs for agent wallet ${wallet}. ` +
-            'Gateway holds the balance under that address, so paying without it would sign as nobody.');
-    }
-    return backer;
-}
-/**
- * A payment wallet backed by an Arc agent wallet.
- *
- * `address` may be omitted, in which case the single agent wallet on that chain
- * is used — and having none, or several, is an error rather than a guess:
- * paying from a wallet the caller did not name spends somebody's money
- * somewhere they did not choose.
- */
-export async function walletFromArcAgent(opts = {}) {
-    const chain = opts.chain ?? ARC_CLI_CHAINS.testnet;
-    let address = opts.address;
-    if (!address) {
-        const wallets = await listArcAgentWallets(chain);
-        if (wallets.length === 0) {
-            throw new Error(`No Arc agent wallet exists on ${chain}. Create one with \`circle wallet create\`, ` +
-                'or pass the address of one that does.');
-        }
-        if (wallets.length > 1) {
-            throw new Error(`${wallets.length} agent wallets exist on ${chain} (${wallets.join(', ')}). ` +
-                'Name the one to pay from — picking for you would spend from a wallet nobody chose.');
-        }
-        address = wallets[0];
-    }
-    // Circle uses the smart wallet for direct USDC authorizations (ERC-1271),
-    // but its backing EOA owns the Gateway deposit. Signing always goes through
-    // the same Circle agent wallet; signPayment chooses the authorization owner
-    // for the selected offer without changing this wallet's identity.
-    const signer = await backingEoa(address, chain);
-    return {
-        address: address,
-        gatewayAddress: signer,
-        signTypedData: async (message) => {
-            // EIP-712 amounts arrive as BigInt and `JSON.stringify` refuses them
-            // outright — "Do not know how to serialize a BigInt". They go over as
-            // decimal strings, which is what EIP-712 encoders take for a uint256
-            // anyway, so nothing is lost and nothing is rounded.
-            // `EIP712Domain` spelled out.
-            //
-            // viem infers it from the domain's own fields and most libraries follow,
-            // but Circle's CLI validates the typed data strictly and refuses a
-            // request whose `types` does not declare it: "there is extra data
-            // provided in the message (0 < 4)". Declared here to match the domain
-            // actually given, field for field.
-            const typed = message;
-            const domainFields = [
-                ['name', 'string'],
-                ['version', 'string'],
-                ['chainId', 'uint256'],
-                ['verifyingContract', 'address'],
-            ].filter(([field]) => typed.domain && typed.domain[field] !== undefined)
-                .map(([name, type]) => ({ name, type }));
-            const asJson = JSON.stringify({ ...typed, types: { EIP712Domain: domainFields, ...(typed.types ?? {}) } }, (_key, value) => (typeof value === 'bigint' ? value.toString() : value));
-            if (process.env.ARC_WALLET_DEBUG)
-                console.error('[arc-wallet] 서명 요청 =', asJson);
-            const answer = (await circle([
-                'wallet', 'sign', 'typed-data', asJson,
-                '--address', address, '--chain', chain,
-            ]));
-            const signature = answer.data?.signature;
-            if (!signature)
-                throw new Error('Circle CLI signed nothing: no signature in its answer.');
-            return signature;
-        },
-        describe: () => `Arc agent wallet ${address} on ${chain}, Gateway depositor ${signer}`,
-    };
-}
-//# sourceMappingURL=arcWallet.js.map

package/dist/arcWallet.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"arcWallet.js","sourceRoot":"","sources":["../src/arcWallet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEhC,yDAAyD;AACzD,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAW,CAAC;AAGlF,KAAK,UAAU,MAAM,CAAC,IAAc;IAClC,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;YACpE,uEAAuE;YACvE,mDAAmD;YACnD,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE;YACjD,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;SAC3B,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,GAAG,GAAG,KAA8E,CAAC;QAC3F,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,mFAAmF;gBACnF,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,IAAI,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAoD,CAAC;YAC/F,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;gBAC1B,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;YACvG,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;QACrE,CAAC;QACD,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,0BAA0B,MAAM,uCAAuC;gBACvE,gFAAgF;gBAChF,kFAAkF;gBAClF,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,qDAAqD,MAAM,IAAI;gBAC/D,oGAAoG,CACrG,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,QAAqB,cAAc,CAAC,OAAO;IACnF,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAEpF,CAAC;IACF,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACpF,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAiD,CAAC;IACpG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC;IAC7C,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,KAAkB;IAC1D,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAE1F,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,2DAA2D,MAAM,IAAI;YACrE,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,MAAuB,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAGrC,EAAE;IACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,cAAc,CAAC,OAAO,CAAC;IAEnD,IAAI,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,iCAAiC,KAAK,8CAA8C;gBACpF,uCAAuC,CACxC,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,MAAM,2BAA2B,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;gBAC7E,oFAAoF,CACrF,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEhD,OAAO;QACL,OAAO,EAAE,OAAwB;QACjC,cAAc,EAAE,MAAM;QACtB,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC/B,qEAAqE;YACrE,sEAAsE;YACtE,qEAAqE;YACrE,qDAAqD;YACrD,8BAA8B;YAC9B,EAAE;YACF,yEAAyE;YACzE,mEAAmE;YACnE,kEAAkE;YAClE,sEAAsE;YACtE,mCAAmC;YACnC,MAAM,KAAK,GAAG,OAAgF,CAAC;YAC/F,MAAM,YAAY,GAAG;gBACnB,CAAC,MAAM,EAAE,QAAQ,CAAC;gBAClB,CAAC,SAAS,EAAE,QAAQ,CAAC;gBACrB,CAAC,SAAS,EAAE,SAAS,CAAC;gBACtB,CAAC,mBAAmB,EAAE,SAAS,CAAC;aACjC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;iBACrE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAE3C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAC3B,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,EAAE,EAC3E,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CACxE,CAAC;YACF,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB;gBAAE,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;YAChF,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC;gBAC3B,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;gBACtC,WAAW,EAAE,OAAQ,EAAE,SAAS,EAAE,KAAK;aACxC,CAAC,CAAsC,CAAC;YACzC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;YACzC,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;YAC1F,OAAO,SAA0B,CAAC;QACpC,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,oBAAoB,OAAO,OAAO,KAAK,uBAAuB,MAAM,EAAE;KACvF,CAAC;AACJ,CAAC"}

package/dist/delegation.d.ts

@@ -1,107 +0,0 @@
-/**
- * Authorizing an action by another wallet without transferring KYC or identity.
- *
- * ## The problem this solves
- *
- * A wallet holds a Coinbase KYC attestation — call it A. A service wants proof
- * of that KYC before it will let anyone stake. But A is the wallet whose
- * on-chain history is worth hiding: revealing it links the KYC to everything
- * else A has ever done.
- *
- * So A never appears. A signs a statement naming a second wallet, B, and the
- * proof carries the hash of that statement. The service checks the proof, reads
- * B out of the statement, and lets B act — while A stays behind the proof.
- *
- * ## Why this is an ordinary action and not a new mechanism
- *
- * `arc_eligibility` already proves "the wallet holding this KYC authorised ONE
- * EIP-712 action". A delegation IS such an action: its fields name who is being
- * delegated to, what they may do, and until when. Nothing in the circuit
- * changes — only the structure being signed.
- *
- * That also means the delegation is bound to the proof: a proof made for one
- * delegation verifies for no other, because the action's hash is a public
- * input. Lifting the proof onto a different B is not possible.
- *
- * ## What the verifier must do
- *
- * Reading B out of the action is not enough. The service MUST rebuild the
- * action's hash from the delegation it was shown and compare it with the
- * proof's public input — otherwise anyone could present a valid proof
- * alongside a delegation naming a wallet of their choosing.
- * `delegationMatchesProof` is that check.
- */
-import type { TypedAction } from './types.js';
-/** What a delegation says. Every field is signed and none may be inferred. */
-export interface Delegation {
-    /** The operational wallet authorized by this action; it does not acquire KYC. */
-    delegate: string;
-    /** What the delegate may do, e.g. 'stake'. Free text the service defines. */
-    action: string;
-    /** Unix seconds. A delegation without an end is not offered. */
-    expiresAt: number;
-    /** Makes this delegation single-use, so it cannot be replayed. */
-    nonce: string;
-}
-/** The EIP-712 type of a delegation, and the name its wallet renders. */
-export declare const DELEGATION_PRIMARY_TYPE = "CredentialDelegation";
-export declare const DELEGATION_TYPES: {
-    readonly CredentialDelegation: readonly [{
-        readonly name: "delegate";
-        readonly type: "address";
-    }, {
-        readonly name: "action";
-        readonly type: "string";
-    }, {
-        readonly name: "expiresAt";
-        readonly type: "uint256";
-    }, {
-        readonly name: "nonce";
-        readonly type: "string";
-    }];
-};
-/**
- * Build the legacy generic action that A signs to authorize B.
- *
- * This four-field wire schema has no amount and is not compatible with the
- * Ledger House staking Gate's five-field CredentialDelegation type. For that
- * Gate, supply its exact TypedAction including amount; do not change this
- * helper's established type hash or treat this as a transfer of identity.
- *
- * `domain` names the service the delegation is for, so a delegation issued to
- * one service cannot be presented at another: the domain separator is part of
- * what the proof binds.
- */
-export declare function buildDelegationAction(params: {
-    delegation: Delegation;
-    domain: {
-        name: string;
-        version: string;
-        chainId: number;
-        verifyingContract: string;
-    };
-}): TypedAction;
-/** The 32 bytes a proof carries for this action: EIP-712's hashStruct. */
-export declare function delegationActionHash(action: TypedAction): string;
-/** The 32 bytes a proof carries for the service this delegation is for. */
-export declare function delegationDomainSeparator(action: TypedAction): string;
-/**
- * Whether a proof was made for exactly this delegation.
- *
- * The reason to call this rather than trust the delegation shown alongside the
- * proof: a proof is public once presented, and anything that reads the
- * delegate out of an unverified structure can be handed a proof plus a
- * delegation naming somebody else.
- */
-export declare function delegationMatchesProof(params: {
-    action: TypedAction;
-    /** The proof's `domain_separator` public input. */
-    domainSeparator: string;
-    /** The proof's `action_hash` public input. */
-    actionHash: string;
-    /** Unix seconds. An expired delegation is refused even when the proof is sound. */
-    now?: number;
-}): string | null;
-/** The wallet a checked delegation names. Throws rather than return a guess. */
-export declare function delegateOf(action: TypedAction): string;
-//# sourceMappingURL=delegation.d.ts.map

package/dist/delegation.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"delegation.d.ts","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,8EAA8E;AAC9E,MAAM,WAAW,UAAU;IACzB,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;CACf;AAID,yEAAyE;AACzE,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAC9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;CAOnB,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,UAAU,EAAE,UAAU,CAAC;IACvB,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC;CACvF,GAAG,WAAW,CAyBd;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAEhE;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAErE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,MAAM,EAAE,WAAW,CAAC;IACpB,mDAAmD;IACnD,eAAe,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,UAAU,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,MAAM,GAAG,IAAI,CAkBhB;AAED,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAMtD"}

package/dist/delegation.js

@@ -1,126 +0,0 @@
-/**
- * Authorizing an action by another wallet without transferring KYC or identity.
- *
- * ## The problem this solves
- *
- * A wallet holds a Coinbase KYC attestation — call it A. A service wants proof
- * of that KYC before it will let anyone stake. But A is the wallet whose
- * on-chain history is worth hiding: revealing it links the KYC to everything
- * else A has ever done.
- *
- * So A never appears. A signs a statement naming a second wallet, B, and the
- * proof carries the hash of that statement. The service checks the proof, reads
- * B out of the statement, and lets B act — while A stays behind the proof.
- *
- * ## Why this is an ordinary action and not a new mechanism
- *
- * `arc_eligibility` already proves "the wallet holding this KYC authorised ONE
- * EIP-712 action". A delegation IS such an action: its fields name who is being
- * delegated to, what they may do, and until when. Nothing in the circuit
- * changes — only the structure being signed.
- *
- * That also means the delegation is bound to the proof: a proof made for one
- * delegation verifies for no other, because the action's hash is a public
- * input. Lifting the proof onto a different B is not possible.
- *
- * ## What the verifier must do
- *
- * Reading B out of the action is not enough. The service MUST rebuild the
- * action's hash from the delegation it was shown and compare it with the
- * proof's public input — otherwise anyone could present a valid proof
- * alongside a delegation naming a wallet of their choosing.
- * `delegationMatchesProof` is that check.
- */
-import { ethers } from 'ethers';
-const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
-/** The EIP-712 type of a delegation, and the name its wallet renders. */
-export const DELEGATION_PRIMARY_TYPE = 'CredentialDelegation';
-export const DELEGATION_TYPES = {
-    [DELEGATION_PRIMARY_TYPE]: [
-        { name: 'delegate', type: 'address' },
-        { name: 'action', type: 'string' },
-        { name: 'expiresAt', type: 'uint256' },
-        { name: 'nonce', type: 'string' },
-    ],
-};
-/**
- * Build the legacy generic action that A signs to authorize B.
- *
- * This four-field wire schema has no amount and is not compatible with the
- * Ledger House staking Gate's five-field CredentialDelegation type. For that
- * Gate, supply its exact TypedAction including amount; do not change this
- * helper's established type hash or treat this as a transfer of identity.
- *
- * `domain` names the service the delegation is for, so a delegation issued to
- * one service cannot be presented at another: the domain separator is part of
- * what the proof binds.
- */
-export function buildDelegationAction(params) {
-    const { delegation, domain } = params;
-    if (!ADDRESS.test(delegation.delegate)) {
-        throw new Error(`delegate must be an address, got '${delegation.delegate}'.`);
-    }
-    if (!delegation.action.trim()) {
-        throw new Error('A delegation must say what the delegate may do; `action` was empty.');
-    }
-    if (!Number.isInteger(delegation.expiresAt) || delegation.expiresAt <= 0) {
-        throw new Error('expiresAt must be a Unix time in seconds. A delegation without an end is not offered.');
-    }
-    if (!delegation.nonce.trim()) {
-        throw new Error('A delegation needs a nonce, or the same signature can be replayed.');
-    }
-    return {
-        domain,
-        types: DELEGATION_TYPES,
-        primaryType: DELEGATION_PRIMARY_TYPE,
-        message: {
-            delegate: delegation.delegate,
-            action: delegation.action,
-            expiresAt: delegation.expiresAt,
-            nonce: delegation.nonce,
-        },
-    };
-}
-/** The 32 bytes a proof carries for this action: EIP-712's hashStruct. */
-export function delegationActionHash(action) {
-    return ethers.TypedDataEncoder.hashStruct(action.primaryType, action.types, action.message);
-}
-/** The 32 bytes a proof carries for the service this delegation is for. */
-export function delegationDomainSeparator(action) {
-    return ethers.TypedDataEncoder.hashDomain(action.domain);
-}
-/**
- * Whether a proof was made for exactly this delegation.
- *
- * The reason to call this rather than trust the delegation shown alongside the
- * proof: a proof is public once presented, and anything that reads the
- * delegate out of an unverified structure can be handed a proof plus a
- * delegation naming somebody else.
- */
-export function delegationMatchesProof(params) {
-    const { action, domainSeparator, actionHash } = params;
-    const now = params.now ?? Math.floor(Date.now() / 1000);
-    if (action.primaryType !== DELEGATION_PRIMARY_TYPE) {
-        return `This action is a '${action.primaryType}', not a ${DELEGATION_PRIMARY_TYPE}. It authorises something, but not a delegation.`;
-    }
-    if (delegationDomainSeparator(action).toLowerCase() !== domainSeparator.toLowerCase()) {
-        return 'The proof was made for a different service: its domain separator does not match this delegation.';
-    }
-    if (delegationActionHash(action).toLowerCase() !== actionHash.toLowerCase()) {
-        return 'The proof was made for a different delegation: its action hash does not match the one shown.';
-    }
-    const expiresAt = Number(action.message.expiresAt);
-    if (!Number.isFinite(expiresAt) || expiresAt <= now) {
-        return `This delegation expired at ${expiresAt}, and it is now ${now}.`;
-    }
-    return null;
-}
-/** The wallet a checked delegation names. Throws rather than return a guess. */
-export function delegateOf(action) {
-    const delegate = action.message.delegate;
-    if (typeof delegate !== 'string' || !ADDRESS.test(delegate)) {
-        return (() => { throw new Error(`This action names no delegate address: got '${String(delegate)}'.`); })();
-    }
-    return delegate;
-}
-//# sourceMappingURL=delegation.js.map

package/dist/delegation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAehC,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC,yEAAyE;AACzE,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAC9D,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,CAAC,uBAAuB,CAAC,EAAE;QACzB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE;QACrC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;KAClC;CACO,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAGrC;IACC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,UAAU,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO;QACL,MAAM;QACN,KAAK,EAAE,gBAAmD;QAC1D,WAAW,EAAE,uBAAuB;QACpC,OAAO,EAAE;YACP,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,KAAK,EAAE,UAAU,CAAC,KAAK;SACxB;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,OAAO,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,MAAmB;IAC3D,OAAO,MAAM,CAAC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAQtC;IACC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IACvD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAExD,IAAI,MAAM,CAAC,WAAW,KAAK,uBAAuB,EAAE,CAAC;QACnD,OAAO,qBAAqB,MAAM,CAAC,WAAW,YAAY,uBAAuB,kDAAkD,CAAC;IACtI,CAAC;IACD,IAAI,yBAAyB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;QACtF,OAAO,kGAAkG,CAAC;IAC5G,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5E,OAAO,8FAA8F,CAAC;IACxG,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;QACpD,OAAO,8BAA8B,SAAS,mBAAmB,GAAG,GAAG,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,+CAA+C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7G,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/nanopayment.d.ts

@@ -1,71 +0,0 @@
-/**
- * Paying with Arc nanopayments: deposit once, then pay many times for free.
- *
- * ## What is different from the ordinary path
- *
- * An ordinary x402 payment puts one authorization on chain per purchase, and
- * on Arc that costs gas in USDC — measured 2026-09-12 at 0.0035 USDC to settle
- * a payment of 0.001, which is four times the price of the thing being bought.
- * That is fine for a one-off and absurd for an agent buying thousands of
- * proofs.
- *
- * Circle Gateway takes the same EIP-3009 authorization, verifies it off chain
- * in under a second, and settles thousands of them in one transaction. The
- * buyer's money moves into Gateway once, by depositing; after that each
- * payment is a signature and nothing more.
- *
- * ## What the buyer has to do
- *
- * Deposit first. A signature drawn against a Gateway balance that is not there
- * is refused, and the refusal names the balance rather than the signature, so
- * `ensureGatewayBalance` checks before paying rather than after failing.
- */
-/** Arc Testnet, as `@circle-fin/x402-batching` names it. */
-export declare const ARC_GATEWAY_CHAIN: "arcTestnet";
-export interface NanopaymentWallet {
-    /** The buyer's key. Gateway signs authorizations with it and never sends a transaction per payment. */
-    privateKey: `0x${string}`;
-    /** Arc's RPC. Required — the package's default is for Arc mainnet. */
-    rpcUrl: string;
-}
-/** What a buyer holds inside Gateway, in USDC's smallest units. */
-export interface GatewayBalances {
-    /** Spendable right now. */
-    available: bigint;
-    /** On the way out, not spendable. */
-    withdrawing: bigint;
-}
-/** What the buyer currently has inside Gateway. */
-export declare function gatewayBalance(wallet: NanopaymentWallet): Promise<GatewayBalances>;
-/**
- * Make sure the buyer can pay `atLeast`, depositing `topUp` if not.
- *
- * Deposits are the one on-chain step in this flow and they cost gas, so this
- * is deliberately not called before every payment — an agent deposits once and
- * spends against it.
- */
-export declare function ensureGatewayBalance(wallet: NanopaymentWallet, 
-/** In USDC's smallest units. Undefined requests an unconditional deposit. */
-atLeast: bigint | undefined, 
-/** In whole USDC, like everything the deposit call takes. */
-topUp: string): Promise<{
-    deposited: boolean;
-    balance: GatewayBalances;
-    depositTxHash?: string;
-}>;
-/**
- * Buy something priced in x402, paying through Gateway.
- *
- * The 402 answer must carry a batched offer; a service that offers only the
- * ordinary on-chain options is not reachable this way, and saying so is better
- * than silently paying the expensive way.
- */
-export declare function payWithNanopayments<T = unknown>(wallet: NanopaymentWallet, url: string, options?: {
-    method?: string;
-    body?: unknown;
-    headers?: Record<string, string>;
-}): Promise<{
-    data: T;
-    amount: string;
-}>;
-//# sourceMappingURL=nanopayment.d.ts.map

package/dist/nanopayment.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"nanopayment.d.ts","sourceRoot":"","sources":["../src/nanopayment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,4DAA4D;AAC5D,eAAO,MAAM,iBAAiB,EAAG,YAAqB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,uGAAuG;IACvG,UAAU,EAAE,KAAK,MAAM,EAAE,CAAC;IAC1B,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,mEAAmE;AACnE,MAAM,WAAW,eAAe;IAC9B,2BAA2B;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;CACrB;AAUD,mDAAmD;AACnD,wBAAsB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,CAGxF;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,iBAAiB;AACzB,6EAA6E;AAC7E,OAAO,EAAE,MAAM,GAAG,SAAS;AAC3B,6DAA6D;AAC7D,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,eAAe,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAUnF;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,GAAG,OAAO,EACnD,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC9E,OAAO,CAAC;IAAE,IAAI,EAAE,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAWtC"}