@zkproofport-app/sdk 0.3.3 → 0.4.1

package/dist/index.mjs

@@ -79,16 +79,6 @@ const CIRCUIT_METADATA = {
         publicInputsCount: 148,
         publicInputNames: ['pubkey_modulus_limbs', 'domain', 'scope', 'nullifier', 'provider'],
     },
-    arc_eligibility: {
-        name: 'Arc Eligibility',
-        description: 'Prove eligibility and authorize one EIP-712 action, for an Arc gate',
-        // 6 x `pub [u8; 32]` in arc-eligibility/src/main.nr, flattened to bytes.
-        // Read off the compiled ABI rather than counted: signal_hash 0-31,
-        // domain_separator 32-63, action_hash 64-95, signer_list_merkle_root
-        // 96-127, scope 128-159, nullifier 160-191.
-        publicInputsCount: 192,
-        publicInputNames: ['signal_hash', 'domain_separator', 'action_hash', 'signer_list_merkle_root'],
-    },
     // Planned circuit — the identifier is reserved and the circuit exists, but it
     // is not officially supported yet. See CIRCUIT_SUPPORT_STATUS in ./circuits.
     // Forked from coinbase_attestation, then given the EIP-712 pair and a
@@ -96,18 +86,30 @@ const CIRCUIT_METADATA = {
     // zero; without one it signs signal_hash and the pair is zero. Read off the
     // compiled ABI (6 x [u8; 32] = 192): signal_hash 0-31, domain_separator
     // 32-63, action_hash 64-95, signer_list_merkle_root 96-127, scope 128-159,
-    // nullifier 160-191 -- the same order as arc_eligibility.
+    // nullifier 160-191.
     //
-    // Unlike Arc, signal_hash is NOT part of this circuit's nullifier. That one
-    // derives its nullifier from a public input nobody signs and nothing
-    // constrains, so one wallet can mint as many nullifiers as it likes; here
-    // the secret is the address plus a constant compiled into the circuit.
+    // signal_hash is NOT part of this circuit's nullifier: a nullifier derived
+    // from a public input nobody signs and nothing constrains would let one
+    // wallet mint as many nullifiers as it likes; here the secret is the address
+    // plus a constant compiled into the circuit.
     giwa_attestation: {
         name: 'GIWA Attestation',
         description: 'Prove GIWA identity verification, optionally authorizing one EIP-712 action (planned — not officially supported yet)',
         publicInputsCount: 192,
         publicInputNames: ['signal_hash', 'domain_separator', 'action_hash', 'signer_list_merkle_root', 'scope', 'nullifier'],
     },
+    // Experimental, GIWA Sepolia only. The wallet signs the request (an EIP-712
+    // action, or signal_hash when none is given -- the same branch as GIWA), and
+    // the same key must have signed a payAndIssueEAS() call to the Playground
+    // faucet. No issuer list, so no merkle root: 5 x [u8; 32] = 160, read off the
+    // compiled ABI -- signal_hash 0-31, domain_separator 32-63, action_hash
+    // 64-95, scope 96-127, nullifier 128-159.
+    dojang_playground: {
+        name: 'Dojang Playground',
+        description: 'Prove this wallet issued itself a Dojang through the GIWA Playground, optionally authorizing one EIP-712 action',
+        publicInputsCount: 160,
+        publicInputNames: ['signal_hash', 'domain_separator', 'action_hash', 'scope', 'nullifier'],
+    },
     // Korea Mobile ID (mDL) circuits. Planned — not officially supported yet.
     // Counts are byte-flattened field totals from the compiled circuit ABIs:
     // [u8; 32] arrays contribute 32 inputs each.
@@ -173,11 +175,6 @@ const RPC_ENDPOINTS = {
     84532: 'https://sepolia.base.org', // Base Sepolia
     8453: 'https://mainnet.base.org', // Base Mainnet
     91342: 'https://sepolia-rpc.giwa.io', // GIWA Sepolia
-    // Arc Testnet. The arc_eligibility verifier is deployed here and nowhere
-    // else, and this line was missing on 2026-09-12 — the circuit shipped, a
-    // phone produced a valid proof, and on-chain verification answered "No RPC
-    // endpoint configured for chain 5042002", which reads like the proof's fault.
-    5042002: 'https://rpc.testnet.arc.io', // Arc Testnet
 };
 /**
  * Default proof request expiration time in milliseconds.
@@ -385,10 +382,10 @@ const CIRCUIT_IDS = Object.freeze({
     COINBASE_COUNTRY_ATTESTATION: 'coinbase_country_attestation',
     /** OIDC email-domain attestation. Officially supported. */
     OIDC_DOMAIN_ATTESTATION: 'oidc_domain_attestation',
-    /** Arc eligibility: exact EIP-712 action authorization. Experimental on Arc Testnet. */
-    ARC_ELIGIBILITY: 'arc_eligibility',
     /** GIWA attestation. Planned — not officially supported yet. */
     GIWA_ATTESTATION: 'giwa_attestation',
+    /** Dojang Playground on GIWA Sepolia. Experimental — testnet only. */
+    DOJANG_PLAYGROUND: 'dojang_playground',
     /** Korea Mobile ID ownership. Planned — not officially supported yet. */
     MDL_KR_OWNERSHIP: 'mdl_kr_ownership',
     /** Korea Mobile ID age threshold. Planned — not officially supported yet. */
@@ -415,12 +412,14 @@ const CIRCUIT_SUPPORT_STATUS = Object.freeze({
     coinbase_attestation: 'supported',
     coinbase_country_attestation: 'supported',
     oidc_domain_attestation: 'supported',
-    arc_eligibility: 'experimental',
     // Experimental, not planned: the circuit is built, its verifier is
     // deployed on GIWA Sepolia and the demo requests it. What keeps it out of
     // 'supported' is that it is testnet-only, so the app offers it behind
     // Developer Mode and reads its files from main rather than a release tag.
     giwa_attestation: 'experimental',
+    // Same footing as GIWA: built, verifier deployed on GIWA Sepolia, a real
+    // proof verifies there. Testnet only.
+    dojang_playground: 'experimental',
     mdl_kr_ownership: 'planned',
     mdl_kr_age: 'planned',
     mdl_kr_region: 'planned',
@@ -449,8 +448,8 @@ const CIRCUIT_VK_PATHS = Object.freeze({
     coinbase_attestation: 'coinbase-attestation/target/vk/vk',
     coinbase_country_attestation: 'coinbase-country-attestation/target/vk/vk',
     oidc_domain_attestation: 'oidc-domain-attestation/target/vk/vk',
-    arc_eligibility: 'arc-eligibility/target/vk/vk',
     giwa_attestation: 'giwa-attestation/target/vk/vk',
+    dojang_playground: 'dojang-playground/target/vk/vk',
     mdl_kr_ownership: 'mdl/kr-ownership/target/vk/vk',
     mdl_kr_age: 'mdl/kr-age/target/vk/vk',
     mdl_kr_region: 'mdl/kr-region/target/vk/vk',
@@ -478,12 +477,11 @@ const SUPPORTED_CIRCUIT_IDS = Object.freeze(ALL_CIRCUIT_IDS.filter((id) => CIRCU
 /**
  * Circuits you can prove today, on a testnet, with everything subject to change.
  *
- * `arc_eligibility` is the reason this status exists. Calling it `planned`
- * would be wrong — the circuit compiles, the verifier is deployed and a proof
- * verifies against it — and calling it `supported` would be worse, because the
- * only deployment is Arc Testnet, Circle has not published a mainnet chain id,
- * and the public-input layout is still open. Neither existing word was true, so
- * the honest move was a third word rather than picking the closer lie.
+ * `giwa_attestation` is in this state. Calling it `planned` would be wrong —
+ * the circuit compiles, the verifier is deployed and a proof verifies against
+ * it — and calling it `supported` would be worse, because the only deployment
+ * is a testnet (GIWA Sepolia). Neither existing word was true, so the honest
+ * move was a third word rather than picking the closer lie.
  */
 const EXPERIMENTAL_CIRCUIT_IDS = Object.freeze(ALL_CIRCUIT_IDS.filter(id => CIRCUIT_SUPPORT_STATUS[id] === 'experimental'));
 const PLANNED_CIRCUIT_IDS = Object.freeze(ALL_CIRCUIT_IDS.filter((id) => CIRCUIT_SUPPORT_STATUS[id] === 'planned'));
@@ -537,13 +535,11 @@ const CIRCUIT_ACTION_BINDING = {
     coinbase_country_attestation: 'none',
     // The signature lives inside the identity token; no wallet, no action.
     oidc_domain_attestation: 'none',
-    // Both branch in-circuit: with an action the wallet signs the typed data,
-    // without one it personal_signs the request's signal hash. Arc read
-    // 'required' until 2026-09-22 because its circuit had no second path -- a
-    // request without an action built a vector 64 bytes short and died inside
-    // the prover. The circuit gained the branch; the table follows it.
-    arc_eligibility: 'optional',
+    // Branches in-circuit: with an action the wallet signs the typed data,
+    // without one it personal_signs the request's signal hash.
     giwa_attestation: 'optional',
+    // Same branch as GIWA; see dojang-playground/src/main.nr.
+    dojang_playground: 'optional',
     mdl_kr_ownership: 'none',
     mdl_kr_age: 'none',
     mdl_kr_region: 'none',
@@ -573,20 +569,20 @@ function circuitActionBinding(circuit) {
 const CIRCUIT_NEEDS_WALLET_SIGNATURE = {
     coinbase_attestation: true,
     coinbase_country_attestation: true,
-    // Same Coinbase-attested wallet as above; what changes is that it signs an
-    // EIP-712 action rather than signal_hash.
-    arc_eligibility: true,
     // The signature is inside the OIDC identity token, checked by the prover.
     oidc_domain_attestation: false,
     // Web2 (OmniOne CX) flows with no wallet binding at all.
     mdl_kr_ownership: false,
     mdl_kr_age: false,
     mdl_kr_region: false,
-    // A GIWA-attested wallet signing an EIP-712 action, the same shape as Arc.
+    // A GIWA-attested wallet signing an EIP-712 action (or its signal hash).
     // This read `false` while the circuit had always verified a wallet signature
     // -- it sat under the Web2 comment above and was never revisited. A request
     // for it would have reached the relay with no signer.
     giwa_attestation: true,
+    // The wallet signs the request, and the same key must have signed its
+    // Playground faucet transaction.
+    dojang_playground: true,
 };
 
 const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
@@ -604,7 +600,7 @@ const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
  */
 function validateTypedAction(value) {
     if (value === undefined || value === null) {
-        return 'action is required for arc_eligibility. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';
+        return 'action is required. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';
     }
     if (typeof value !== 'object' || Array.isArray(value)) {
         return 'action must be an object.';
@@ -1160,8 +1156,7 @@ function validateProofRequest(request) {
         return { valid: false, error: 'Missing circuit type' };
     }
     // The list is the SDK's own, not a copy. The copy that used to sit here
-    // named six circuits and had missed two — `giwa_attestation` and
-    // `arc_eligibility` — so a link for either was refused as an invalid type
+    // had missed circuits, so a link for one was refused as an invalid type
     // while every other layer accepted it.
     if (!isCircuitId(request.circuit)) {
         return {
@@ -1216,15 +1211,8 @@ function validateProofRequest(request) {
             return { valid: false, error: mdlError };
         }
     }
-    else if (request.circuit === 'arc_eligibility') {
-        const inputs = request.inputs;
-        if (inputs.userAddress && !/^0x[a-fA-F0-9]{40}$/.test(inputs.userAddress)) {
-            return { valid: false, error: 'Invalid userAddress format' };
-        }
-    }
     // The action, decided by the circuit's own entry rather than by naming a
-    // circuit here. This used to be part of the arc_eligibility branch above,
-    // which is why a second action-capable circuit had nowhere to be checked.
+    // circuit here, so every action-capable circuit is checked the same way.
     {
         const action = request.inputs?.action;
         const binding = circuitActionBinding(request.circuit);
@@ -4383,7 +4371,7 @@ function getVerifierContract(providerOrSigner, verifier) {
 function getDefaultProvider(chainId) {
     const rpcUrl = RPC_ENDPOINTS[chainId];
     if (!rpcUrl) {
-        throw new Error(`No RPC endpoint configured for chain ${chainId}`);
+        throw new Error(`No RPC endpoint configured for chain ${chainId}. Known chains: ${Object.keys(RPC_ENDPOINTS).join(', ')}`);
     }
     return createJsonRpcProvider(rpcUrl);
 }
@@ -4532,7 +4520,7 @@ function getVerifierChainId(circuit, customVerifier) {
  *
  * It replaced an `if / else if / else` chain whose final `else` handed every
  * unrecognised circuit — and every call that named no circuit at all —
- * Coinbase's offsets. For `arc_eligibility` that is not a near miss: its
+ * Coinbase's offsets. For `giwa_attestation` that is not a near miss: its
  * public inputs are signal_hash, domain_separator, action_hash, merkle root,
  * scope, nullifier, so the nullifier slot under Coinbase's offsets holds the
  * MERKLE ROOT, a value identical for every user. Duplicate detection built on
@@ -4542,15 +4530,16 @@ const PUBLIC_INPUT_OFFSETS = Object.freeze({
     // signal_hash, signer_list_merkle_root, scope, nullifier
     coinbase_attestation: { scope: [64, 95], nullifier: [96, 127] },
     // No longer Coinbase's layout. The GIWA circuit gained the EIP-712 pair, so
-    // it reads like Arc: signal_hash, domain_separator, action_hash, merkle
-    // root, then scope and nullifier 64 bytes further along than Coinbase.
+    // it reads: signal_hash, domain_separator, action_hash, merkle root, then
+    // scope and nullifier 64 bytes further along than Coinbase.
     giwa_attestation: { scope: [128, 159], nullifier: [160, 191] },
+    // signal_hash, domain_separator, action_hash, scope, nullifier: GIWA's
+    // order without the merkle root, since there is no issuer list.
+    dojang_playground: { scope: [96, 127], nullifier: [128, 159] },
     // country_list, country_list_length and is_included sit before scope.
     coinbase_country_attestation: { scope: [86, 117], nullifier: [118, 149] },
     // pubkey_modulus_limbs and the bounded domain sit before scope.
     oidc_domain_attestation: { scope: [83, 114], nullifier: [115, 146] },
-    // signal_hash, domain_separator, action_hash, merkle root, then the pair.
-    arc_eligibility: { scope: [128, 159], nullifier: [160, 191] },
     // The Korea mDL circuits open with the pair; signal_hash is commented out.
     mdl_kr_ownership: { scope: [0, 31], nullifier: [32, 63] },
     mdl_kr_age: { scope: [0, 31], nullifier: [32, 63] },
@@ -5931,9 +5920,9 @@ class ProofportSDK {
      * ```
      */
     // Which circuits need a wallet signature, from the one record in
-    // src/circuits.ts. The typed-out pair that used to sit here had missed
-    // arc_eligibility, so a dapp calling createRelayRequest() for it with no
-    // signer got no local error and a relay 401 two round trips later.
+    // src/circuits.ts. A typed-out list here once missed a circuit, so a dapp
+    // calling createRelayRequest() for it with no signer got no local error and
+    // a relay 401 two round trips later.
     static needsWalletSignature(circuit) {
         return CIRCUIT_NEEDS_WALLET_SIGNATURE[circuit] === true;
     }
@@ -5958,9 +5947,7 @@ class ProofportSDK {
         // from inside the mobile app -- a screen the dapp developer never sees,
         // reached after the person has already scanned a QR code.
         //
-        // This named arc_eligibility directly until giwa_attestation became the
-        // second circuit that can carry an action; the id belongs in the table,
-        // not in the check.
+        // The circuit id belongs in the table, not in the check.
         {
             const action = inputs.action;
             const binding = circuitActionBinding(circuit);