@zkproofport-app/sdk 0.2.15 → 0.3.0

package/dist/typedAction.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Checking the EIP-712 action an `arc_eligibility` proof binds to.
+ *
+ * Three places need this answer and they have to agree: a dapp building the
+ * request, this SDK validating a deep link, and the mobile app before it asks
+ * a wallet to sign. The check lived in the mobile app's demo screen and
+ * nowhere else, so an action arriving from a dapp reached the prover
+ * unexamined — and that is the path that ships.
+ *
+ * The circuit hashes the domain and the struct and proves the wallet signed
+ * them. It never learns what the action says, so a malformed one does not
+ * fail: it produces a valid proof of the wrong thing.
+ */
+import type { TypedAction } from './types';
+export type { TypedAction };
+/**
+ * The reason the value is not a usable action, or `null` when it is one.
+ *
+ * A string rather than a boolean because every caller shows it to somebody —
+ * a dapp developer reading a validation error, or a person looking at the
+ * mobile app's demo screen.
+ */
+export declare function validateTypedAction(value: unknown): string | null;
+/** The action, or the reason it is not one. For text a person typed. */
+export declare function parseTypedAction(text: string): {
+    action: TypedAction;
+} | {
+    error: string;
+};

package/dist/typedAction.esm.js

@@ -0,0 +1,72 @@
+const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+/**
+ * The reason the value is not a usable action, or `null` when it is one.
+ *
+ * A string rather than a boolean because every caller shows it to somebody —
+ * a dapp developer reading a validation error, or a person looking at the
+ * mobile app's demo screen.
+ */
+function validateTypedAction(value) {
+    if (value === undefined || value === null) {
+        return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';
+    }
+    if (typeof value !== 'object' || Array.isArray(value)) {
+        return 'action must be an object.';
+    }
+    const a = value;
+    const d = a.domain;
+    if (!d || typeof d !== 'object') {
+        return 'action.domain is required.';
+    }
+    for (const k of ['name', 'version', 'verifyingContract']) {
+        if (typeof d[k] !== 'string' || !d[k]) {
+            return `action.domain.${k} must be a non-empty string.`;
+        }
+    }
+    if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {
+        return 'action.domain.chainId must be an integer.';
+    }
+    if (!ADDRESS.test(d.verifyingContract)) {
+        return 'action.domain.verifyingContract must be a 20-byte hex address.';
+    }
+    if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {
+        return 'action.types is required.';
+    }
+    if (typeof a.primaryType !== 'string' || !a.primaryType) {
+        return 'action.primaryType is required.';
+    }
+    if (!(a.primaryType in a.types)) {
+        return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;
+    }
+    if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {
+        return 'action.message is required.';
+    }
+    // Every field the struct declares must be present, or the wallet signs a
+    // different message than the one the caller described.
+    const fields = a.types[a.primaryType];
+    if (!Array.isArray(fields) || fields.length === 0) {
+        return `action.types.${a.primaryType} declares no fields.`;
+    }
+    const missing = fields
+        .map(f => f?.name)
+        .filter(n => typeof n === 'string' && !(n in a.message));
+    if (missing.length) {
+        return `action.message is missing: ${missing.join(', ')}`;
+    }
+    return null;
+}
+/** The action, or the reason it is not one. For text a person typed. */
+function parseTypedAction(text) {
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch (e) {
+        return { error: `Not valid JSON: ${e.message}` };
+    }
+    const error = validateTypedAction(raw);
+    return error ? { error } : { action: raw };
+}
+
+export { parseTypedAction, validateTypedAction };
+//# sourceMappingURL=typedAction.esm.js.map

package/dist/typedAction.esm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typedAction.esm.js","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action an `arc_eligibility` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":"AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;AAMG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,+IAA+I;IACxJ;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;"}

package/dist/typedAction.js

@@ -0,0 +1,75 @@
+'use strict';
+
+const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+/**
+ * The reason the value is not a usable action, or `null` when it is one.
+ *
+ * A string rather than a boolean because every caller shows it to somebody —
+ * a dapp developer reading a validation error, or a person looking at the
+ * mobile app's demo screen.
+ */
+function validateTypedAction(value) {
+    if (value === undefined || value === null) {
+        return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';
+    }
+    if (typeof value !== 'object' || Array.isArray(value)) {
+        return 'action must be an object.';
+    }
+    const a = value;
+    const d = a.domain;
+    if (!d || typeof d !== 'object') {
+        return 'action.domain is required.';
+    }
+    for (const k of ['name', 'version', 'verifyingContract']) {
+        if (typeof d[k] !== 'string' || !d[k]) {
+            return `action.domain.${k} must be a non-empty string.`;
+        }
+    }
+    if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {
+        return 'action.domain.chainId must be an integer.';
+    }
+    if (!ADDRESS.test(d.verifyingContract)) {
+        return 'action.domain.verifyingContract must be a 20-byte hex address.';
+    }
+    if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {
+        return 'action.types is required.';
+    }
+    if (typeof a.primaryType !== 'string' || !a.primaryType) {
+        return 'action.primaryType is required.';
+    }
+    if (!(a.primaryType in a.types)) {
+        return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;
+    }
+    if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {
+        return 'action.message is required.';
+    }
+    // Every field the struct declares must be present, or the wallet signs a
+    // different message than the one the caller described.
+    const fields = a.types[a.primaryType];
+    if (!Array.isArray(fields) || fields.length === 0) {
+        return `action.types.${a.primaryType} declares no fields.`;
+    }
+    const missing = fields
+        .map(f => f?.name)
+        .filter(n => typeof n === 'string' && !(n in a.message));
+    if (missing.length) {
+        return `action.message is missing: ${missing.join(', ')}`;
+    }
+    return null;
+}
+/** The action, or the reason it is not one. For text a person typed. */
+function parseTypedAction(text) {
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch (e) {
+        return { error: `Not valid JSON: ${e.message}` };
+    }
+    const error = validateTypedAction(raw);
+    return error ? { error } : { action: raw };
+}
+
+exports.parseTypedAction = parseTypedAction;
+exports.validateTypedAction = validateTypedAction;
+//# sourceMappingURL=typedAction.js.map

package/dist/typedAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typedAction.js","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action an `arc_eligibility` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":";;AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;AAMG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,+IAA+I;IACxJ;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;;"}

package/dist/typedAction.mjs

@@ -0,0 +1,72 @@
+const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
+/**
+ * The reason the value is not a usable action, or `null` when it is one.
+ *
+ * A string rather than a boolean because every caller shows it to somebody —
+ * a dapp developer reading a validation error, or a person looking at the
+ * mobile app's demo screen.
+ */
+function validateTypedAction(value) {
+    if (value === undefined || value === null) {
+        return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';
+    }
+    if (typeof value !== 'object' || Array.isArray(value)) {
+        return 'action must be an object.';
+    }
+    const a = value;
+    const d = a.domain;
+    if (!d || typeof d !== 'object') {
+        return 'action.domain is required.';
+    }
+    for (const k of ['name', 'version', 'verifyingContract']) {
+        if (typeof d[k] !== 'string' || !d[k]) {
+            return `action.domain.${k} must be a non-empty string.`;
+        }
+    }
+    if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {
+        return 'action.domain.chainId must be an integer.';
+    }
+    if (!ADDRESS.test(d.verifyingContract)) {
+        return 'action.domain.verifyingContract must be a 20-byte hex address.';
+    }
+    if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {
+        return 'action.types is required.';
+    }
+    if (typeof a.primaryType !== 'string' || !a.primaryType) {
+        return 'action.primaryType is required.';
+    }
+    if (!(a.primaryType in a.types)) {
+        return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;
+    }
+    if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {
+        return 'action.message is required.';
+    }
+    // Every field the struct declares must be present, or the wallet signs a
+    // different message than the one the caller described.
+    const fields = a.types[a.primaryType];
+    if (!Array.isArray(fields) || fields.length === 0) {
+        return `action.types.${a.primaryType} declares no fields.`;
+    }
+    const missing = fields
+        .map(f => f?.name)
+        .filter(n => typeof n === 'string' && !(n in a.message));
+    if (missing.length) {
+        return `action.message is missing: ${missing.join(', ')}`;
+    }
+    return null;
+}
+/** The action, or the reason it is not one. For text a person typed. */
+function parseTypedAction(text) {
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch (e) {
+        return { error: `Not valid JSON: ${e.message}` };
+    }
+    const error = validateTypedAction(raw);
+    return error ? { error } : { action: raw };
+}
+
+export { parseTypedAction, validateTypedAction };
+//# sourceMappingURL=typedAction.mjs.map

package/dist/typedAction.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"typedAction.mjs","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action an `arc_eligibility` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":"AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;AAMG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,+IAA+I;IACxJ;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;"}

package/dist/types.d.ts

@@ -167,11 +167,72 @@ export interface MdlKrRegionInputs {
  */
 export interface EmptyInputs {
 }
+/**
+ * The EIP-712 action an `arc_eligibility` proof binds the wallet's signature to.
+ *
+ * Exactly what `eth_signTypedData_v4` takes, because that is what the wallet is
+ * shown and what it signs. The app does not build this — the dapp does — so the
+ * user reads the dapp's own field names and values in their wallet instead of
+ * an opaque hash.
+ *
+ * @example
+ * ```typescript
+ * const action: TypedAction = {
+ *   domain: { name: 'MyVault', version: '1', chainId: 5042002,
+ *             verifyingContract: '0x…' },
+ *   types: { Deposit: [ { name: 'amount', type: 'uint256' },
+ *                       { name: 'nonce',  type: 'uint256' } ] },
+ *   primaryType: 'Deposit',
+ *   message: { amount: '1000000', nonce: '7' },
+ * };
+ * ```
+ */
+export interface TypedAction {
+    domain: {
+        name: string;
+        version: string;
+        chainId: number;
+        /** The contract that will verify this signature. */
+        verifyingContract: string;
+    };
+    /** EIP-712 struct definitions. `EIP712Domain` is added by the wallet. */
+    types: Record<string, Array<{
+        name: string;
+        type: string;
+    }>>;
+    /** Which struct in `types` the message is. */
+    primaryType: string;
+    message: Record<string, unknown>;
+}
+/**
+ * Input parameters for the Arc eligibility circuit.
+ *
+ * Proves the same Coinbase attestation as `coinbase_attestation`, with the
+ * wallet signing a typed action instead of an opaque signal hash. The proof's
+ * public inputs then carry the action's domain separator and struct hash, so a
+ * verifier checks WHICH action was authorised — not merely that somebody
+ * eligible signed something.
+ *
+ * `action` is REQUIRED. There is no version of this circuit without one: its
+ * public inputs have the two slots and nothing else can fill them. Ask for
+ * `coinbase_attestation` when there is no action to bind.
+ *
+ * @property scope - Scope string for nullifier derivation
+ * @property action - The EIP-712 action the wallet signs
+ * @property userAddress - Ethereum address to prove ownership of (optional)
+ * @property rawTransaction - Raw attestation transaction data (optional)
+ */
+export interface ArcEligibilityInputs {
+    scope: string;
+    action: TypedAction;
+    userAddress?: string;
+    rawTransaction?: string;
+}
 /**
  * Union type of all circuit-specific input types.
  * Each circuit type has a corresponding input interface.
  */
-export type CircuitInputs = CoinbaseKycInputs | CoinbaseCountryInputs | OidcDomainInputs | MdlKrOwnershipInputs | MdlKrAgeInputs | MdlKrRegionInputs | EmptyInputs;
+export type CircuitInputs = CoinbaseKycInputs | ArcEligibilityInputs | CoinbaseCountryInputs | OidcDomainInputs | MdlKrOwnershipInputs | MdlKrAgeInputs | MdlKrRegionInputs | EmptyInputs;
 /**
  * Zero-knowledge proof request sent to mobile app via deep link.
  *

package/dist/verifier.d.ts

@@ -42,7 +42,7 @@ export declare function getDefaultProvider(chainId: number): any;
  * This function resolves the verifier contract from SDK config or proof response,
  * connects to the blockchain, and calls the verify() method with the proof and public inputs.
  *
- * @param circuit - The canonical circuit identifier (e.g., "coinbase_attestation")
+ * @param circuit - The canonical circuit identifier. REQUIRED.
  * @param parsedProof - Parsed proof object containing proofHex and publicInputsHex
  * @param providerOrSigner - Optional ethers.js Provider or Signer instance. If not provided, uses default RPC for the chain
  * @param customVerifier - Optional custom verifier contract config (takes priority over responseVerifier)
@@ -101,7 +101,7 @@ export declare function parseProofForOnChain(proof: string, publicInputs: string
 /**
  * Get verifier contract address for a circuit.
  *
- * @param circuit - The canonical circuit identifier (e.g., "coinbase_attestation")
+ * @param circuit - The canonical circuit identifier. REQUIRED.
  * @param customVerifier - Optional custom verifier contract config
  * @returns Verifier contract address as hex string
  * @throws Error if no verifier is configured for the circuit
@@ -116,7 +116,7 @@ export declare function getVerifierAddress(circuit: CircuitType, customVerifier?
 /**
  * Get chain ID for a circuit's verifier contract.
  *
- * @param circuit - The canonical circuit identifier (e.g., "coinbase_attestation")
+ * @param circuit - The canonical circuit identifier. REQUIRED.
  * @param customVerifier - Optional custom verifier contract config
  * @returns Chain ID number (e.g., 11155111 for Sepolia, 84532 for Base Sepolia)
  * @throws Error if no verifier is configured for the circuit
@@ -144,7 +144,7 @@ export declare function getVerifierChainId(circuit: CircuitType, customVerifier?
  * console.log(scope); // '0x7a6b70726f6f66706f72742e636f6d...'
  * ```
  */
-export declare function extractScopeFromPublicInputs(publicInputsHex: string[], circuit?: string): string | null;
+export declare function extractScopeFromPublicInputs(publicInputsHex: string[], circuit: string): string | null;
 /**
  * Extracts the nullifier (bytes32) from public inputs based on circuit type.
  *
@@ -154,7 +154,10 @@ export declare function extractScopeFromPublicInputs(publicInputsHex: string[],
  * detection without revealing the wallet address.
  *
  * @param publicInputsHex - Array of hex-encoded field elements
- * @param circuit - Circuit type (defaults to coinbase_attestation)
+ * @param circuit - Circuit id. REQUIRED: the layout differs per circuit and
+ *   cannot be inferred from the proof. It used to default to
+ *   `coinbase_attestation`, which returned the right-shaped bytes read from
+ *   the wrong place for every other circuit.
  * @returns Nullifier as hex string (bytes32), or null if publicInputs too short
  *
  * @example
@@ -163,7 +166,7 @@ export declare function extractScopeFromPublicInputs(publicInputsHex: string[],
  * console.log(nullifier); // '0xabc123...'
  * ```
  */
-export declare function extractNullifierFromPublicInputs(publicInputsHex: string[], circuit?: string): string | null;
+export declare function extractNullifierFromPublicInputs(publicInputsHex: string[], circuit: string): string | null;
 /**
  * Extract domain string from OIDC Domain Attestation public inputs.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zkproofport-app/sdk",
-  "version": "0.2.15",
+  "version": "0.3.0",
   "description": "ZKProofport SDK for requesting zero-knowledge proofs from the ZKProofport mobile app and verifying them on-chain",
   "main": "dist/index.js",
   "module": "dist/index.esm.js",
@@ -16,6 +16,11 @@
       "import": "./dist/circuits.esm.js",
       "require": "./dist/circuits.js"
     },
+    "./typedAction": {
+      "types": "./dist/typedAction.d.ts",
+      "import": "./dist/typedAction.esm.js",
+      "require": "./dist/typedAction.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [
@@ -29,7 +34,8 @@
     "test": "vitest run",
     "demo": "cd demo && node server.js",
     "docs": "typedoc",
-    "prepublishOnly": "npm run build"
+    "prepublishOnly": "npm run build",
+    "test:vk-live": "vitest run --config vitest.live.config.ts"
   },
   "dependencies": {
     "@aztec/bb.js": "1.0.0-nightly.20250723",