@zkproofport-app/sdk 0.2.7 → 0.2.8

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 ZKProofport
+Copyright (c) 2026 Masse Labs Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -163,6 +163,56 @@ const relay = await sdk.createRelayRequest('oidc_domain_attestation', {
 
 > When `provider` is set, the mobile app verifies the user's account is managed by the specified workspace provider (e.g., Google Workspace `hd` claim, Microsoft 365 `tid` claim). Without `provider`, only the email domain is verified.
 
+### `mdl_kr_ownership`
+
+Proves the user holds a valid Korean mobile driver's license (모바일 신분증). The license data stays on-device; only the attributes selected by `discloseFlags` are revealed. No wallet signature is required.
+
+| Field | Type | Required | Description |
+|-------|------|----------|-------------|
+| `scope` | `string` | Yes | Application-specific identifier for proof uniqueness |
+| `discloseFlags` | `number` | No | Attribute disclosure bitmask `0x00`–`0x0F` (`0x01` name, `0x02` birth, `0x04` sex, `0x08` phone). Omit or `0` for a fully anonymous ownership proof. |
+
+```typescript
+// Anonymous "holds a valid Korean mobile ID" proof
+const relay = await sdk.createRelayRequest('mdl_kr_ownership', {
+  scope: 'myapp.com',
+});
+```
+
+### `mdl_kr_age`
+
+Proves the user is at least `ageThreshold` years old according to their Korean mobile driver's license, without revealing the birth date.
+
+| Field | Type | Required | Description |
+|-------|------|----------|-------------|
+| `scope` | `string` | Yes | Application-specific identifier |
+| `ageThreshold` | `number` | Yes | Minimum age to prove (integer 1–150, e.g. `19` for Korean adult verification) |
+
+```typescript
+const relay = await sdk.createRelayRequest('mdl_kr_age', {
+  scope: 'myapp.com',
+  ageThreshold: 19,
+});
+```
+
+### `mdl_kr_region`
+
+Proves the user's registered address is in the specified si/do region without revealing the full address.
+
+| Field | Type | Required | Description |
+|-------|------|----------|-------------|
+| `scope` | `string` | Yes | Application-specific identifier |
+| `targetRegion` | `string` | Yes | Region (si/do) to prove residency in, in Korean (e.g. `'경기도'`, `'서울특별시'`) |
+
+```typescript
+const relay = await sdk.createRelayRequest('mdl_kr_region', {
+  scope: 'myapp.com',
+  targetRegion: '경기도',
+});
+```
+
+> The mDL circuits do not require `setSigner()` — the proof is bound to the license via an on-device nullifier (`nullifier_value` public input), not a wallet address. Use `sdk.extractNullifier(result.publicInputs, result.circuit)` for sybil-resistant user identification.
+
 ## Integration Guide
 
 ### Step 1: Initialize
@@ -418,7 +468,7 @@ import {
   extractDomainFromPublicInputs,
 } from '@zkproofport-app/sdk';
 
-// Works with all circuits: coinbase_attestation, coinbase_country_attestation, oidc_domain_attestation
+// Works with all circuits: coinbase_attestation, coinbase_country_attestation, oidc_domain_attestation, mdl_kr_ownership, mdl_kr_age, mdl_kr_region
 const scope = extractScopeFromPublicInputs(publicInputs, 'coinbase_attestation');
 const nullifier = extractNullifierFromPublicInputs(publicInputs, 'coinbase_attestation');
 

package/dist/ProofportSDK.d.ts

@@ -168,6 +168,22 @@ export declare class ProofportSDK {
      * ```
      */
     private createProofRequest;
+    /**
+     * @internal
+     * Creates a Korea Mobile ID (mDL) proof request for any of the three
+     * mDL predicate circuits (ownership / age / region).
+     *
+     * The mobile app collects the license data on-device; the dapp only
+     * supplies the predicate parameters validated here. No wallet signature
+     * is required for mDL circuits.
+     *
+     * @param circuit - 'mdl_kr_ownership' | 'mdl_kr_age' | 'mdl_kr_region'
+     * @param inputs - Predicate inputs (see MdlKr*Inputs types)
+     * @param options - Request configuration options
+     *
+     * @throws Error if the predicate inputs fail validation
+     */
+    private createMdlKrRequest;
     /**
      * @internal
      * Generates a deep link URL for a proof request.

package/dist/constants.d.ts

@@ -183,6 +183,36 @@ export declare const COINBASE_COUNTRY_PUBLIC_INPUT_LAYOUT: {
     readonly NULLIFIER_START: 118;
     readonly NULLIFIER_END: 149;
 };
+/**
+ * Korea Mobile ID (mDL) circuit public input layout (field offsets).
+ * All three mDL circuits share the same prefix: scope [0..31] and
+ * nullifier_value [32..63], each stored one byte per field element.
+ * The suffix differs per predicate circuit:
+ * - mdl_kr_ownership (97 inputs): disclose_flags [64], owner_commit [65..96]
+ * - mdl_kr_age (66 inputs): age_threshold [64], current_year [65]
+ * - mdl_kr_region (96 inputs): region_code [64..95]
+ *
+ * @example
+ * ```typescript
+ * const nullifier = publicInputs.slice(
+ *   MDL_KR_PUBLIC_INPUT_LAYOUT.NULLIFIER_START,
+ *   MDL_KR_PUBLIC_INPUT_LAYOUT.NULLIFIER_END + 1
+ * );
+ * ```
+ */
+export declare const MDL_KR_PUBLIC_INPUT_LAYOUT: {
+    readonly SCOPE_START: 0;
+    readonly SCOPE_END: 31;
+    readonly NULLIFIER_START: 32;
+    readonly NULLIFIER_END: 63;
+    readonly OWNERSHIP_DISCLOSE_FLAGS: 64;
+    readonly OWNERSHIP_OWNER_COMMIT_START: 65;
+    readonly OWNERSHIP_OWNER_COMMIT_END: 96;
+    readonly AGE_THRESHOLD: 64;
+    readonly AGE_CURRENT_YEAR: 65;
+    readonly REGION_CODE_START: 64;
+    readonly REGION_CODE_END: 95;
+};
 /**
  * OIDC Domain Attestation circuit public input layout (field offsets).
  * Defines the field positions in the flattened public inputs array (148 fields total).

package/dist/deeplink.d.ts

@@ -1,7 +1,7 @@
 /**
  * Deep Link utilities for ZKProofport SDK
  */
-import type { ProofRequest, ProofResponse, DeepLinkComponents } from './types';
+import type { ProofRequest, ProofResponse, CircuitInputs, DeepLinkComponents } from './types';
 /**
  * Generates a unique request ID for proof requests.
  *
@@ -171,21 +171,22 @@ export declare function parseDeepLink(url: string): DeepLinkComponents | null;
  */
 export declare function isProofportDeepLink(url: string, scheme?: string): boolean;
 /**
- * @internal
- * Validates a proof request for completeness and correctness.
- *
- * Performs comprehensive validation including:
- * - Required fields (requestId, circuit, callbackUrl)
- * - Circuit type validity (must be a supported circuit)
- * - Circuit-specific input validation (e.g., userAddress format, countryList structure)
- * - Expiration check (if expiresAt is provided)
- *
- * Note: userAddress is optional for both circuits - the mobile app will prompt
- * for wallet connection if not provided.
- *
- * @param request - Proof request to validate
- * @returns Validation result with `valid` flag and optional `error` message
+ * Validates dapp-supplied inputs for the Korea Mobile ID (mDL) circuits.
+ * Shared by deep-link request validation and relay request creation so the
+ * same guards apply on every request path.
+ *
+ * Rules:
+ * - `scope` — required non-empty string, ≤256 chars, no control characters
+ * - `mdl_kr_ownership.discloseFlags` — optional integer 0–15 (0x0F bitmask)
+ * - `mdl_kr_age.ageThreshold` — required integer 1–150
+ * - `mdl_kr_region.targetRegion` — required non-empty string (Korean si/do),
+ *   ≤256 chars, no control characters
+ *
+ * @param circuit - One of the three mDL circuit identifiers
+ * @param inputs - Dapp-supplied circuit inputs
+ * @returns Error message string, or null when the inputs are valid
  */
+export declare function validateMdlInputs(circuit: 'mdl_kr_ownership' | 'mdl_kr_age' | 'mdl_kr_region', inputs: CircuitInputs): string | null;
 export declare function validateProofRequest(request: ProofRequest): {
     valid: boolean;
     error?: string;

package/dist/index.d.ts

@@ -27,5 +27,5 @@
  */
 export { ProofportSDK, default } from './ProofportSDK';
 export { extractScopeFromPublicInputs, extractNullifierFromPublicInputs, extractDomainFromPublicInputs, } from './verifier';
-export { COINBASE_ATTESTATION_PUBLIC_INPUT_LAYOUT, COINBASE_COUNTRY_PUBLIC_INPUT_LAYOUT, OIDC_DOMAIN_ATTESTATION_PUBLIC_INPUT_LAYOUT, } from './constants';
-export type { CircuitType, ProofRequestStatus, CoinbaseKycInputs, CoinbaseCountryInputs, OidcDomainInputs, CircuitInputs, ProofRequest, ProofResponse, QRCodeOptions, VerifierContract, ProofportConfig, ChallengeResponse, WalletSigner, RelayProofRequest, RelayProofResult, SDKEnvironment, } from './types';
+export { COINBASE_ATTESTATION_PUBLIC_INPUT_LAYOUT, COINBASE_COUNTRY_PUBLIC_INPUT_LAYOUT, OIDC_DOMAIN_ATTESTATION_PUBLIC_INPUT_LAYOUT, MDL_KR_PUBLIC_INPUT_LAYOUT, } from './constants';
+export type { CircuitType, ProofRequestStatus, CoinbaseKycInputs, CoinbaseCountryInputs, OidcDomainInputs, MdlKrOwnershipInputs, MdlKrAgeInputs, MdlKrRegionInputs, CircuitInputs, ProofRequest, ProofResponse, QRCodeOptions, VerifierContract, ProofportConfig, ChallengeResponse, WalletSigner, RelayProofRequest, RelayProofResult, SDKEnvironment, } from './types';

package/dist/index.esm.js

@@ -73,6 +73,26 @@ const CIRCUIT_METADATA = {
         publicInputsCount: 148,
         publicInputNames: ['pubkey_modulus_limbs', 'domain', 'scope', 'nullifier', 'provider'],
     },
+    // Korea Mobile ID (mDL) circuits. Counts are byte-flattened field totals
+    // from the compiled circuit ABIs: [u8; 32] arrays contribute 32 inputs each.
+    mdl_kr_ownership: {
+        name: 'Korea Mobile ID — Ownership',
+        description: "Prove valid Korean mobile driver's license ownership with selective disclosure",
+        publicInputsCount: 97,
+        publicInputNames: ['scope', 'nullifier_value', 'disclose_flags', 'owner_commit'],
+    },
+    mdl_kr_age: {
+        name: 'Korea Mobile ID — Age',
+        description: "Prove minimum age from Korean mobile driver's license without revealing birth date",
+        publicInputsCount: 66,
+        publicInputNames: ['scope', 'nullifier_value', 'age_threshold', 'current_year'],
+    },
+    mdl_kr_region: {
+        name: 'Korea Mobile ID — Region',
+        description: "Prove si/do residency from Korean mobile driver's license without revealing address",
+        publicInputsCount: 96,
+        publicInputNames: ['scope', 'nullifier_value', 'region_code'],
+    },
 };
 /**
  * Standard verifier contract ABI shared across all Barretenberg-generated verifiers.
@@ -204,6 +224,36 @@ const COINBASE_COUNTRY_PUBLIC_INPUT_LAYOUT = {
     NULLIFIER_START: 118,
     NULLIFIER_END: 149,
 };
+/**
+ * Korea Mobile ID (mDL) circuit public input layout (field offsets).
+ * All three mDL circuits share the same prefix: scope [0..31] and
+ * nullifier_value [32..63], each stored one byte per field element.
+ * The suffix differs per predicate circuit:
+ * - mdl_kr_ownership (97 inputs): disclose_flags [64], owner_commit [65..96]
+ * - mdl_kr_age (66 inputs): age_threshold [64], current_year [65]
+ * - mdl_kr_region (96 inputs): region_code [64..95]
+ *
+ * @example
+ * ```typescript
+ * const nullifier = publicInputs.slice(
+ *   MDL_KR_PUBLIC_INPUT_LAYOUT.NULLIFIER_START,
+ *   MDL_KR_PUBLIC_INPUT_LAYOUT.NULLIFIER_END + 1
+ * );
+ * ```
+ */
+const MDL_KR_PUBLIC_INPUT_LAYOUT = {
+    SCOPE_START: 0,
+    SCOPE_END: 31,
+    NULLIFIER_START: 32,
+    NULLIFIER_END: 63,
+    OWNERSHIP_DISCLOSE_FLAGS: 64,
+    OWNERSHIP_OWNER_COMMIT_START: 65,
+    OWNERSHIP_OWNER_COMMIT_END: 96,
+    AGE_THRESHOLD: 64,
+    AGE_CURRENT_YEAR: 65,
+    REGION_CODE_START: 64,
+    REGION_CODE_END: 95,
+};
 /**
  * OIDC Domain Attestation circuit public input layout (field offsets).
  * Defines the field positions in the flattened public inputs array (148 fields total).
@@ -484,6 +534,78 @@ function isProofportDeepLink(url, scheme = DEFAULT_SCHEME) {
  * @param request - Proof request to validate
  * @returns Validation result with `valid` flag and optional `error` message
  */
+/**
+ * Validates a free-text mDL input (scope / targetRegion).
+ * Rejects empty or whitespace-only values, control characters (which break
+ * deep-link query encoding and downstream logging), and values over 256 chars
+ * (server-side length cap mirror). UTF-8 text such as Korean region names is
+ * allowed.
+ *
+ * @returns Error message string, or null when valid.
+ */
+function validateMdlTextInput(value, fieldName) {
+    if (typeof value !== 'string' || value.trim() === '') {
+        return `${fieldName} is required and must be a non-empty string`;
+    }
+    if (value.length > 256) {
+        return `${fieldName} must be 256 characters or fewer`;
+    }
+    // eslint-disable-next-line no-control-regex
+    if (/[\u0000-\u001F\u007F]/.test(value)) {
+        return `${fieldName} must not contain control characters`;
+    }
+    return null;
+}
+/**
+ * Validates dapp-supplied inputs for the Korea Mobile ID (mDL) circuits.
+ * Shared by deep-link request validation and relay request creation so the
+ * same guards apply on every request path.
+ *
+ * Rules:
+ * - `scope` — required non-empty string, ≤256 chars, no control characters
+ * - `mdl_kr_ownership.discloseFlags` — optional integer 0–15 (0x0F bitmask)
+ * - `mdl_kr_age.ageThreshold` — required integer 1–150
+ * - `mdl_kr_region.targetRegion` — required non-empty string (Korean si/do),
+ *   ≤256 chars, no control characters
+ *
+ * @param circuit - One of the three mDL circuit identifiers
+ * @param inputs - Dapp-supplied circuit inputs
+ * @returns Error message string, or null when the inputs are valid
+ */
+function validateMdlInputs(circuit, inputs) {
+    const scopeError = validateMdlTextInput(inputs.scope, 'scope');
+    if (scopeError) {
+        return scopeError;
+    }
+    if (circuit === 'mdl_kr_ownership') {
+        const { discloseFlags } = inputs;
+        if (discloseFlags !== undefined) {
+            if (typeof discloseFlags !== 'number' ||
+                !Number.isInteger(discloseFlags) ||
+                discloseFlags < 0 ||
+                discloseFlags > 0x0f) {
+                return 'discloseFlags must be an integer between 0 and 15';
+            }
+        }
+    }
+    else if (circuit === 'mdl_kr_age') {
+        const { ageThreshold } = inputs;
+        if (typeof ageThreshold !== 'number' ||
+            !Number.isInteger(ageThreshold) ||
+            ageThreshold < 1 ||
+            ageThreshold > 150) {
+            return 'ageThreshold is required and must be an integer between 1 and 150';
+        }
+    }
+    else {
+        const { targetRegion } = inputs;
+        const regionError = validateMdlTextInput(targetRegion, 'targetRegion');
+        if (regionError) {
+            return regionError;
+        }
+    }
+    return null;
+}
 function validateProofRequest(request) {
     if (!request.requestId) {
         return { valid: false, error: 'Missing requestId' };
@@ -491,7 +613,14 @@ function validateProofRequest(request) {
     if (!request.circuit) {
         return { valid: false, error: 'Missing circuit type' };
     }
-    if (!['coinbase_attestation', 'coinbase_country_attestation', 'oidc_domain_attestation'].includes(request.circuit)) {
+    if (![
+        'coinbase_attestation',
+        'coinbase_country_attestation',
+        'oidc_domain_attestation',
+        'mdl_kr_ownership',
+        'mdl_kr_age',
+        'mdl_kr_region',
+    ].includes(request.circuit)) {
         return { valid: false, error: `Invalid circuit type: ${request.circuit}` };
     }
     if (!request.callbackUrl) {
@@ -533,6 +662,14 @@ function validateProofRequest(request) {
             return { valid: false, error: 'provider must be a non-empty string when specified' };
         }
     }
+    else if (request.circuit === 'mdl_kr_ownership' ||
+        request.circuit === 'mdl_kr_age' ||
+        request.circuit === 'mdl_kr_region') {
+        const mdlError = validateMdlInputs(request.circuit, request.inputs);
+        if (mdlError) {
+            return { valid: false, error: mdlError };
+        }
+    }
     // Check expiry
     if (request.expiresAt && Date.now() > request.expiresAt) {
         return { valid: false, error: 'Request has expired' };
@@ -3838,6 +3975,11 @@ function extractScopeFromPublicInputs(publicInputsHex, circuit) {
         start = 83;
         end = 114;
     }
+    else if (circuit !== undefined && circuit.startsWith('mdl_kr_')) {
+        // All Korea mDL circuits: scope [0..31], nullifier_value [32..63]
+        start = 0;
+        end = 31;
+    }
     else {
         start = 64;
         end = 95;
@@ -3875,6 +4017,11 @@ function extractNullifierFromPublicInputs(publicInputsHex, circuit) {
         start = 115;
         end = 146;
     }
+    else if (circuit !== undefined && circuit.startsWith('mdl_kr_')) {
+        // All Korea mDL circuits: scope [0..31], nullifier_value [32..63]
+        start = 32;
+        end = 63;
+    }
     else {
         start = 96;
         end = 127;
@@ -4142,10 +4289,48 @@ class ProofportSDK {
         if (circuit === 'coinbase_country_attestation') {
             return this.createCoinbaseCountryRequest(inputs, options);
         }
+        else if (circuit === 'mdl_kr_ownership' ||
+            circuit === 'mdl_kr_age' ||
+            circuit === 'mdl_kr_region') {
+            return this.createMdlKrRequest(circuit, inputs, options);
+        }
         else {
             return this.createCoinbaseKycRequest(inputs, options);
         }
     }
+    /**
+     * @internal
+     * Creates a Korea Mobile ID (mDL) proof request for any of the three
+     * mDL predicate circuits (ownership / age / region).
+     *
+     * The mobile app collects the license data on-device; the dapp only
+     * supplies the predicate parameters validated here. No wallet signature
+     * is required for mDL circuits.
+     *
+     * @param circuit - 'mdl_kr_ownership' | 'mdl_kr_age' | 'mdl_kr_region'
+     * @param inputs - Predicate inputs (see MdlKr*Inputs types)
+     * @param options - Request configuration options
+     *
+     * @throws Error if the predicate inputs fail validation
+     */
+    createMdlKrRequest(circuit, inputs, options = {}) {
+        const mdlError = validateMdlInputs(circuit, inputs);
+        if (mdlError) {
+            throw new Error(`${mdlError} (circuit: ${circuit})`);
+        }
+        const request = {
+            requestId: generateRequestId(),
+            circuit,
+            inputs,
+            message: options.message,
+            dappName: options.dappName,
+            dappIcon: options.dappIcon,
+            createdAt: Date.now(),
+            expiresAt: Date.now() + (options.expiresInMs || DEFAULT_REQUEST_EXPIRY_MS),
+        };
+        this.pendingRequests.set(request.requestId, request);
+        return request;
+    }
     // ============ Deep Link Generation ============
     /**
      * @internal
@@ -4806,6 +4991,14 @@ class ProofportSDK {
         if (needsSignature && !this.signer) {
             throw new Error('Signer not set. Call setSigner() first. Wallet signature is required for this circuit.');
         }
+        // mDL circuits: validate predicate inputs client-side before hitting the
+        // relay, so a bad ageThreshold / targetRegion fails fast with a clear error.
+        if (circuit === 'mdl_kr_ownership' || circuit === 'mdl_kr_age' || circuit === 'mdl_kr_region') {
+            const mdlError = validateMdlInputs(circuit, inputs);
+            if (mdlError) {
+                throw new Error(`${mdlError} (circuit: ${circuit})`);
+            }
+        }
         // Get challenge + requestId from relay
         const { requestId, challenge } = await this.getChallenge();
         const body = {
@@ -5152,5 +5345,5 @@ ProofportSDK.WALLET_SIGNATURE_CIRCUITS = [
     'coinbase_country_attestation',
 ];
 
-export { COINBASE_ATTESTATION_PUBLIC_INPUT_LAYOUT, COINBASE_COUNTRY_PUBLIC_INPUT_LAYOUT, OIDC_DOMAIN_ATTESTATION_PUBLIC_INPUT_LAYOUT, ProofportSDK, ProofportSDK as default, extractDomainFromPublicInputs, extractNullifierFromPublicInputs, extractScopeFromPublicInputs };
+export { COINBASE_ATTESTATION_PUBLIC_INPUT_LAYOUT, COINBASE_COUNTRY_PUBLIC_INPUT_LAYOUT, MDL_KR_PUBLIC_INPUT_LAYOUT, OIDC_DOMAIN_ATTESTATION_PUBLIC_INPUT_LAYOUT, ProofportSDK, ProofportSDK as default, extractDomainFromPublicInputs, extractNullifierFromPublicInputs, extractScopeFromPublicInputs };
 //# sourceMappingURL=index.esm.js.map