@zkproofport-app/sdk 0.3.1 → 0.3.3

package/dist/typedAction.d.ts

@@ -16,6 +16,11 @@ export type { TypedAction };
 /**
  * The reason the value is not a usable action, or `null` when it is one.
  *
+ * Structural validation only, not application authorization policy. Consumers
+ * (e.g. EligibilityGate) must independently enforce the expected chain, verifying
+ * contract, actor, action parameters, nonce and deadline as applicable.
+ * EIP-712 signs only fields declared in types, not extra message properties.
+ *
  * A string rather than a boolean because every caller shows it to somebody —
  * a dapp developer reading a validation error, or a person looking at the
  * mobile app's demo screen.

package/dist/typedAction.esm.js

@@ -2,6 +2,11 @@ const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
 /**
  * The reason the value is not a usable action, or `null` when it is one.
  *
+ * Structural validation only, not application authorization policy. Consumers
+ * (e.g. EligibilityGate) must independently enforce the expected chain, verifying
+ * contract, actor, action parameters, nonce and deadline as applicable.
+ * EIP-712 signs only fields declared in types, not extra message properties.
+ *
  * A string rather than a boolean because every caller shows it to somebody —
  * a dapp developer reading a validation error, or a person looking at the
  * mobile app's demo screen.

package/dist/typedAction.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"typedAction.esm.js","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action an `arc_eligibility` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":"AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;AAMG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,+IAA+I;IACxJ;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;"}
+{"version":3,"file":"typedAction.esm.js","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action an `arc_eligibility` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * Structural validation only, not application authorization policy. Consumers\n * (e.g. EligibilityGate) must independently enforce the expected chain, verifying\n * contract, actor, action parameters, nonce and deadline as applicable.\n * EIP-712 signs only fields declared in types, not extra message properties.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":"AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;;;;;;AAWG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,+IAA+I;IACxJ;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;"}

package/dist/typedAction.js

@@ -4,6 +4,11 @@ const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
 /**
  * The reason the value is not a usable action, or `null` when it is one.
  *
+ * Structural validation only, not application authorization policy. Consumers
+ * (e.g. EligibilityGate) must independently enforce the expected chain, verifying
+ * contract, actor, action parameters, nonce and deadline as applicable.
+ * EIP-712 signs only fields declared in types, not extra message properties.
+ *
  * A string rather than a boolean because every caller shows it to somebody —
  * a dapp developer reading a validation error, or a person looking at the
  * mobile app's demo screen.

package/dist/typedAction.js.map

@@ -1 +1 @@
-{"version":3,"file":"typedAction.js","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action an `arc_eligibility` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":";;AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;AAMG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,+IAA+I;IACxJ;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;;"}
+{"version":3,"file":"typedAction.js","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action an `arc_eligibility` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * Structural validation only, not application authorization policy. Consumers\n * (e.g. EligibilityGate) must independently enforce the expected chain, verifying\n * contract, actor, action parameters, nonce and deadline as applicable.\n * EIP-712 signs only fields declared in types, not extra message properties.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":";;AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;;;;;;AAWG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,+IAA+I;IACxJ;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;;"}

package/dist/typedAction.mjs

@@ -2,6 +2,11 @@ const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
 /**
  * The reason the value is not a usable action, or `null` when it is one.
  *
+ * Structural validation only, not application authorization policy. Consumers
+ * (e.g. EligibilityGate) must independently enforce the expected chain, verifying
+ * contract, actor, action parameters, nonce and deadline as applicable.
+ * EIP-712 signs only fields declared in types, not extra message properties.
+ *
  * A string rather than a boolean because every caller shows it to somebody —
  * a dapp developer reading a validation error, or a person looking at the
  * mobile app's demo screen.

package/dist/typedAction.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"typedAction.mjs","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action an `arc_eligibility` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":"AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;AAMG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,+IAA+I;IACxJ;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;"}
+{"version":3,"file":"typedAction.mjs","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action an `arc_eligibility` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * Structural validation only, not application authorization policy. Consumers\n * (e.g. EligibilityGate) must independently enforce the expected chain, verifying\n * contract, actor, action parameters, nonce and deadline as applicable.\n * EIP-712 signs only fields declared in types, not extra message properties.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":"AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;;;;;;AAWG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,+IAA+I;IACxJ;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;"}

package/dist/types.d.ts

@@ -222,17 +222,38 @@ export interface TypedAction {
  * @property userAddress - Ethereum address to prove ownership of (optional)
  * @property rawTransaction - Raw attestation transaction data (optional)
  */
-export interface ArcEligibilityInputs {
+export interface ActionBoundInputs {
     scope: string;
-    action: TypedAction;
     userAddress?: string;
     rawTransaction?: string;
+    /**
+     * The EIP-712 action this proof authorizes.
+     *
+     * Optional in the TYPE and not in every circuit: `arc_eligibility` proves
+     * nothing without one, `giwa_attestation` signs its signal hash instead when
+     * none is given. That difference lives in `CIRCUIT_ACTION_BINDING` and is
+     * enforced by `createRelayRequest` and the deep-link validator, so it is not
+     * written a second time here -- two copies of one rule drift, and the copy
+     * that drifts is the one nobody is looking at.
+     */
+    action?: TypedAction;
 }
+/**
+ * @deprecated Use {@link ActionBoundInputs}. Kept because it is published API.
+ *
+ * It declared `action` as REQUIRED, which was true of the circuit and not of
+ * the shape: `giwa_attestation` takes the same fields and may omit the action.
+ * The requirement moved to `CIRCUIT_ACTION_BINDING`, which both doors into the
+ * SDK consult.
+ */
+export type ArcEligibilityInputs = ActionBoundInputs;
+/** The same shape, for the circuit whose action is optional. */
+export type GiwaAttestationInputs = ActionBoundInputs;
 /**
  * Union type of all circuit-specific input types.
  * Each circuit type has a corresponding input interface.
  */
-export type CircuitInputs = CoinbaseKycInputs | ArcEligibilityInputs | CoinbaseCountryInputs | OidcDomainInputs | MdlKrOwnershipInputs | MdlKrAgeInputs | MdlKrRegionInputs | EmptyInputs;
+export type CircuitInputs = CoinbaseKycInputs | ActionBoundInputs | CoinbaseCountryInputs | OidcDomainInputs | MdlKrOwnershipInputs | MdlKrAgeInputs | MdlKrRegionInputs | EmptyInputs;
 /**
  * Zero-knowledge proof request sent to mobile app via deep link.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zkproofport-app/sdk",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "description": "ZKProofport SDK for requesting zero-knowledge proofs from the ZKProofport mobile app and verifying them on-chain",
   "main": "dist/index.js",
   "module": "dist/index.esm.js",