@zkproofport-app/sdk 0.4.2 → 0.5.0-beta.0

package/dist/offChainVerifier.d.ts

@@ -11,27 +11,28 @@
  * (through mopro's native Barretenberg); it was only the JavaScript side that
  * had no such thing.
  *
- * HOW IT WORKS. Proofs here are made with `--oracle_hash keccak` and ZK on, so
- * the matching check is `acirVerifyUltraKeccakZkHonk(proof, vk)`. Two things
- * have to line up:
+ * HOW IT WORKS. Proofs here are made for the EVM target (`bb prove -t evm`:
+ * keccak transcript, ZK on), so the matching check is bb.js's
+ * `UltraHonkVerifierBackend.verifyProof(..., { verifierTarget: 'evm' })`. Two
+ * things have to line up:
  *
- *   The version. `@aztec/bb.js@1.0.0-nightly.20250723` is the WASM build of the
- *   same bb the circuits are compiled with. Versions are not interchangeable:
- *   measured on the Korea Mobile ID age circuit, the pinned bb writes a 16256-
- *   byte proof where bb 1.2.0 writes 16224 for the identical circuit and
- *   witness — and the verification key comes out the SAME either way, so the
- *   key cannot warn you. A mismatch shows up only as verification failing.
+ *   The version. `@aztec/bb.js` must be the WASM build of the same bb the
+ *   circuits are compiled with -- `BB_VERSION` in circuits/toolchain.env,
+ *   4.2.0-aztecnr-rc.2 since the beta.19 toolchain. Versions are not
+ *   interchangeable: on the Korea Mobile ID age circuit the 2025 nightly wrote
+ *   a 16256-byte proof where bb 1.2.0 wrote 16224 for the identical circuit and
+ *   witness, with the SAME verification key, so the key cannot warn you. A
+ *   mismatch shows up only as verification failing.
  *
- *   The flavour. There are four verify entry points and picking the wrong one
- *   is not a polite false. `acirVerifyUltraZKHonk` (poseidon) answers false for
- *   a perfectly good proof, and `acirVerifyUltraKeccakHonk` — keccak without ZK
- *   — TRAPS the WebAssembly with a bare "unreachable", which looks exactly like
- *   a corrupt proof, a mismatched key, or a missing SRS.
+ *   The target. Verifying an EVM proof as any other target is not a polite
+ *   false. With the 2025 nightly, keccak-without-ZK trapped the WebAssembly
+ *   with a bare "unreachable" and the poseidon flavour answered false for a
+ *   good proof.
  *
  * THE PROOF ARRIVES IN TWO PIECES. The mobile app splits what Barretenberg
  * produced into `proof` and `publicInputs` before sending it, because the
- * Solidity verifier takes them separately. Verifying needs them joined back, in
- * that order, which is what `reconstructHonkProof` does.
+ * Solidity verifier takes them separately. bb.js 4.x's verifier takes the same
+ * two pieces, so nothing is joined back here.
  */
 import { type CircuitId } from './circuits';
 export interface OffChainVerifyResult {

package/dist/typedAction.d.ts

@@ -1,34 +1 @@
-/**
- * Checking the EIP-712 action a `giwa_attestation` proof binds to.
- *
- * Three places need this answer and they have to agree: a dapp building the
- * request, this SDK validating a deep link, and the mobile app before it asks
- * a wallet to sign. The check lived in the mobile app's demo screen and
- * nowhere else, so an action arriving from a dapp reached the prover
- * unexamined — and that is the path that ships.
- *
- * The circuit hashes the domain and the struct and proves the wallet signed
- * them. It never learns what the action says, so a malformed one does not
- * fail: it produces a valid proof of the wrong thing.
- */
-import type { TypedAction } from './types';
-export type { TypedAction };
-/**
- * The reason the value is not a usable action, or `null` when it is one.
- *
- * Structural validation only, not application authorization policy. Consumers
- * (e.g. EligibilityGate) must independently enforce the expected chain, verifying
- * contract, actor, action parameters, nonce and deadline as applicable.
- * EIP-712 signs only fields declared in types, not extra message properties.
- *
- * A string rather than a boolean because every caller shows it to somebody —
- * a dapp developer reading a validation error, or a person looking at the
- * mobile app's demo screen.
- */
-export declare function validateTypedAction(value: unknown): string | null;
-/** The action, or the reason it is not one. For text a person typed. */
-export declare function parseTypedAction(text: string): {
-    action: TypedAction;
-} | {
-    error: string;
-};
+export * from '@zkproofport-app/core/typedAction';

package/dist/typedAction.esm.js

@@ -1,77 +1,2 @@
-const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
-/**
- * The reason the value is not a usable action, or `null` when it is one.
- *
- * Structural validation only, not application authorization policy. Consumers
- * (e.g. EligibilityGate) must independently enforce the expected chain, verifying
- * contract, actor, action parameters, nonce and deadline as applicable.
- * EIP-712 signs only fields declared in types, not extra message properties.
- *
- * A string rather than a boolean because every caller shows it to somebody —
- * a dapp developer reading a validation error, or a person looking at the
- * mobile app's demo screen.
- */
-function validateTypedAction(value) {
-    if (value === undefined || value === null) {
-        return 'action is required. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';
-    }
-    if (typeof value !== 'object' || Array.isArray(value)) {
-        return 'action must be an object.';
-    }
-    const a = value;
-    const d = a.domain;
-    if (!d || typeof d !== 'object') {
-        return 'action.domain is required.';
-    }
-    for (const k of ['name', 'version', 'verifyingContract']) {
-        if (typeof d[k] !== 'string' || !d[k]) {
-            return `action.domain.${k} must be a non-empty string.`;
-        }
-    }
-    if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {
-        return 'action.domain.chainId must be an integer.';
-    }
-    if (!ADDRESS.test(d.verifyingContract)) {
-        return 'action.domain.verifyingContract must be a 20-byte hex address.';
-    }
-    if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {
-        return 'action.types is required.';
-    }
-    if (typeof a.primaryType !== 'string' || !a.primaryType) {
-        return 'action.primaryType is required.';
-    }
-    if (!(a.primaryType in a.types)) {
-        return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;
-    }
-    if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {
-        return 'action.message is required.';
-    }
-    // Every field the struct declares must be present, or the wallet signs a
-    // different message than the one the caller described.
-    const fields = a.types[a.primaryType];
-    if (!Array.isArray(fields) || fields.length === 0) {
-        return `action.types.${a.primaryType} declares no fields.`;
-    }
-    const missing = fields
-        .map(f => f?.name)
-        .filter(n => typeof n === 'string' && !(n in a.message));
-    if (missing.length) {
-        return `action.message is missing: ${missing.join(', ')}`;
-    }
-    return null;
-}
-/** The action, or the reason it is not one. For text a person typed. */
-function parseTypedAction(text) {
-    let raw;
-    try {
-        raw = JSON.parse(text);
-    }
-    catch (e) {
-        return { error: `Not valid JSON: ${e.message}` };
-    }
-    const error = validateTypedAction(raw);
-    return error ? { error } : { action: raw };
-}
-
-export { parseTypedAction, validateTypedAction };
+export * from '@zkproofport-app/core/typedAction';
 //# sourceMappingURL=typedAction.esm.js.map

package/dist/typedAction.esm.js.map

@@ -1 +1 @@
-{"version":3,"file":"typedAction.esm.js","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action a `giwa_attestation` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * Structural validation only, not application authorization policy. Consumers\n * (e.g. EligibilityGate) must independently enforce the expected chain, verifying\n * contract, actor, action parameters, nonce and deadline as applicable.\n * EIP-712 signs only fields declared in types, not extra message properties.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":"AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;;;;;;AAWG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,2HAA2H;IACpI;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;"}
+{"version":3,"file":"typedAction.esm.js","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/typedAction.js

@@ -1,80 +1,13 @@
 'use strict';
 
-const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
-/**
- * The reason the value is not a usable action, or `null` when it is one.
- *
- * Structural validation only, not application authorization policy. Consumers
- * (e.g. EligibilityGate) must independently enforce the expected chain, verifying
- * contract, actor, action parameters, nonce and deadline as applicable.
- * EIP-712 signs only fields declared in types, not extra message properties.
- *
- * A string rather than a boolean because every caller shows it to somebody —
- * a dapp developer reading a validation error, or a person looking at the
- * mobile app's demo screen.
- */
-function validateTypedAction(value) {
-    if (value === undefined || value === null) {
-        return 'action is required. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';
-    }
-    if (typeof value !== 'object' || Array.isArray(value)) {
-        return 'action must be an object.';
-    }
-    const a = value;
-    const d = a.domain;
-    if (!d || typeof d !== 'object') {
-        return 'action.domain is required.';
-    }
-    for (const k of ['name', 'version', 'verifyingContract']) {
-        if (typeof d[k] !== 'string' || !d[k]) {
-            return `action.domain.${k} must be a non-empty string.`;
-        }
-    }
-    if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {
-        return 'action.domain.chainId must be an integer.';
-    }
-    if (!ADDRESS.test(d.verifyingContract)) {
-        return 'action.domain.verifyingContract must be a 20-byte hex address.';
-    }
-    if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {
-        return 'action.types is required.';
-    }
-    if (typeof a.primaryType !== 'string' || !a.primaryType) {
-        return 'action.primaryType is required.';
-    }
-    if (!(a.primaryType in a.types)) {
-        return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;
-    }
-    if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {
-        return 'action.message is required.';
-    }
-    // Every field the struct declares must be present, or the wallet signs a
-    // different message than the one the caller described.
-    const fields = a.types[a.primaryType];
-    if (!Array.isArray(fields) || fields.length === 0) {
-        return `action.types.${a.primaryType} declares no fields.`;
-    }
-    const missing = fields
-        .map(f => f?.name)
-        .filter(n => typeof n === 'string' && !(n in a.message));
-    if (missing.length) {
-        return `action.message is missing: ${missing.join(', ')}`;
-    }
-    return null;
-}
-/** The action, or the reason it is not one. For text a person typed. */
-function parseTypedAction(text) {
-    let raw;
-    try {
-        raw = JSON.parse(text);
-    }
-    catch (e) {
-        return { error: `Not valid JSON: ${e.message}` };
-    }
-    const error = validateTypedAction(raw);
-    return error ? { error } : { action: raw };
-}
+var typedAction = require('@zkproofport-app/core/typedAction');
 
-exports.parseTypedAction = parseTypedAction;
-exports.validateTypedAction = validateTypedAction;
+
+
+Object.keys(typedAction).forEach(function (k) {
+	if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+		enumerable: true,
+		get: function () { return typedAction[k]; }
+	});
+});
 //# sourceMappingURL=typedAction.js.map

package/dist/typedAction.js.map

@@ -1 +1 @@
-{"version":3,"file":"typedAction.js","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action a `giwa_attestation` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * Structural validation only, not application authorization policy. Consumers\n * (e.g. EligibilityGate) must independently enforce the expected chain, verifying\n * contract, actor, action parameters, nonce and deadline as applicable.\n * EIP-712 signs only fields declared in types, not extra message properties.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":";;AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;;;;;;AAWG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,2HAA2H;IACpI;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;;"}
+{"version":3,"file":"typedAction.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;"}

package/dist/typedAction.mjs

@@ -1,77 +1,2 @@
-const ADDRESS = /^0x[0-9a-fA-F]{40}$/;
-/**
- * The reason the value is not a usable action, or `null` when it is one.
- *
- * Structural validation only, not application authorization policy. Consumers
- * (e.g. EligibilityGate) must independently enforce the expected chain, verifying
- * contract, actor, action parameters, nonce and deadline as applicable.
- * EIP-712 signs only fields declared in types, not extra message properties.
- *
- * A string rather than a boolean because every caller shows it to somebody —
- * a dapp developer reading a validation error, or a person looking at the
- * mobile app's demo screen.
- */
-function validateTypedAction(value) {
-    if (value === undefined || value === null) {
-        return 'action is required. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';
-    }
-    if (typeof value !== 'object' || Array.isArray(value)) {
-        return 'action must be an object.';
-    }
-    const a = value;
-    const d = a.domain;
-    if (!d || typeof d !== 'object') {
-        return 'action.domain is required.';
-    }
-    for (const k of ['name', 'version', 'verifyingContract']) {
-        if (typeof d[k] !== 'string' || !d[k]) {
-            return `action.domain.${k} must be a non-empty string.`;
-        }
-    }
-    if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {
-        return 'action.domain.chainId must be an integer.';
-    }
-    if (!ADDRESS.test(d.verifyingContract)) {
-        return 'action.domain.verifyingContract must be a 20-byte hex address.';
-    }
-    if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {
-        return 'action.types is required.';
-    }
-    if (typeof a.primaryType !== 'string' || !a.primaryType) {
-        return 'action.primaryType is required.';
-    }
-    if (!(a.primaryType in a.types)) {
-        return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;
-    }
-    if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {
-        return 'action.message is required.';
-    }
-    // Every field the struct declares must be present, or the wallet signs a
-    // different message than the one the caller described.
-    const fields = a.types[a.primaryType];
-    if (!Array.isArray(fields) || fields.length === 0) {
-        return `action.types.${a.primaryType} declares no fields.`;
-    }
-    const missing = fields
-        .map(f => f?.name)
-        .filter(n => typeof n === 'string' && !(n in a.message));
-    if (missing.length) {
-        return `action.message is missing: ${missing.join(', ')}`;
-    }
-    return null;
-}
-/** The action, or the reason it is not one. For text a person typed. */
-function parseTypedAction(text) {
-    let raw;
-    try {
-        raw = JSON.parse(text);
-    }
-    catch (e) {
-        return { error: `Not valid JSON: ${e.message}` };
-    }
-    const error = validateTypedAction(raw);
-    return error ? { error } : { action: raw };
-}
-
-export { parseTypedAction, validateTypedAction };
+export * from '@zkproofport-app/core/typedAction';
 //# sourceMappingURL=typedAction.mjs.map

package/dist/typedAction.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"typedAction.mjs","sources":["../src/typedAction.ts"],"sourcesContent":["/**\n * Checking the EIP-712 action a `giwa_attestation` proof binds to.\n *\n * Three places need this answer and they have to agree: a dapp building the\n * request, this SDK validating a deep link, and the mobile app before it asks\n * a wallet to sign. The check lived in the mobile app's demo screen and\n * nowhere else, so an action arriving from a dapp reached the prover\n * unexamined — and that is the path that ships.\n *\n * The circuit hashes the domain and the struct and proves the wallet signed\n * them. It never learns what the action says, so a malformed one does not\n * fail: it produces a valid proof of the wrong thing.\n */\nimport type { TypedAction } from './types';\n\nexport type { TypedAction };\n\nconst ADDRESS = /^0x[0-9a-fA-F]{40}$/;\n\n/**\n * The reason the value is not a usable action, or `null` when it is one.\n *\n * Structural validation only, not application authorization policy. Consumers\n * (e.g. EligibilityGate) must independently enforce the expected chain, verifying\n * contract, actor, action parameters, nonce and deadline as applicable.\n * EIP-712 signs only fields declared in types, not extra message properties.\n *\n * A string rather than a boolean because every caller shows it to somebody —\n * a dapp developer reading a validation error, or a person looking at the\n * mobile app's demo screen.\n */\nexport function validateTypedAction(value: unknown): string | null {\n  if (value === undefined || value === null) {\n    return 'action is required. The circuit proves that a wallet authorised ONE EIP-712 action; there is nothing to prove without it.';\n  }\n  if (typeof value !== 'object' || Array.isArray(value)) {\n    return 'action must be an object.';\n  }\n  const a = value as Partial<TypedAction>;\n\n  const d = a.domain;\n  if (!d || typeof d !== 'object') {\n    return 'action.domain is required.';\n  }\n  for (const k of ['name', 'version', 'verifyingContract'] as const) {\n    if (typeof d[k] !== 'string' || !d[k]) {\n      return `action.domain.${k} must be a non-empty string.`;\n    }\n  }\n  if (typeof d.chainId !== 'number' || !Number.isInteger(d.chainId)) {\n    return 'action.domain.chainId must be an integer.';\n  }\n  if (!ADDRESS.test(d.verifyingContract)) {\n    return 'action.domain.verifyingContract must be a 20-byte hex address.';\n  }\n\n  if (!a.types || typeof a.types !== 'object' || Array.isArray(a.types)) {\n    return 'action.types is required.';\n  }\n  if (typeof a.primaryType !== 'string' || !a.primaryType) {\n    return 'action.primaryType is required.';\n  }\n  if (!(a.primaryType in a.types)) {\n    return `action.primaryType '${a.primaryType}' is not one of the structs in action.types.`;\n  }\n  if (!a.message || typeof a.message !== 'object' || Array.isArray(a.message)) {\n    return 'action.message is required.';\n  }\n\n  // Every field the struct declares must be present, or the wallet signs a\n  // different message than the one the caller described.\n  const fields = a.types[a.primaryType];\n  if (!Array.isArray(fields) || fields.length === 0) {\n    return `action.types.${a.primaryType} declares no fields.`;\n  }\n  const missing = fields\n    .map(f => f?.name)\n    .filter(n => typeof n === 'string' && !(n in (a.message as object)));\n  if (missing.length) {\n    return `action.message is missing: ${missing.join(', ')}`;\n  }\n\n  return null;\n}\n\n/** The action, or the reason it is not one. For text a person typed. */\nexport function parseTypedAction(text: string): { action: TypedAction } | { error: string } {\n  let raw: unknown;\n  try {\n    raw = JSON.parse(text);\n  } catch (e) {\n    return { error: `Not valid JSON: ${(e as Error).message}` };\n  }\n  const error = validateTypedAction(raw);\n  return error ? { error } : { action: raw as TypedAction };\n}\n"],"names":[],"mappings":"AAiBA,MAAM,OAAO,GAAG,qBAAqB;AAErC;;;;;;;;;;;AAWG;AACG,SAAU,mBAAmB,CAAC,KAAc,EAAA;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE;AACzC,QAAA,OAAO,2HAA2H;IACpI;AACA,IAAA,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;AACrD,QAAA,OAAO,2BAA2B;IACpC;IACA,MAAM,CAAC,GAAG,KAA6B;AAEvC,IAAA,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM;IAClB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,4BAA4B;IACrC;IACA,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,mBAAmB,CAAU,EAAE;AACjE,QAAA,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;YACrC,OAAO,CAAA,cAAA,EAAiB,CAAC,CAAA,4BAAA,CAA8B;QACzD;IACF;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACjE,QAAA,OAAO,2CAA2C;IACpD;IACA,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE;AACtC,QAAA,OAAO,gEAAgE;IACzE;IAEA,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;AACrE,QAAA,OAAO,2BAA2B;IACpC;AACA,IAAA,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE;AACvD,QAAA,OAAO,iCAAiC;IAC1C;IACA,IAAI,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE;AAC/B,QAAA,OAAO,CAAA,oBAAA,EAAuB,CAAC,CAAC,WAAW,8CAA8C;IAC3F;IACA,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AAC3E,QAAA,OAAO,6BAA6B;IACtC;;;IAIA,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;AACrC,IAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE;AACjD,QAAA,OAAO,CAAA,aAAA,EAAgB,CAAC,CAAC,WAAW,sBAAsB;IAC5D;IACA,MAAM,OAAO,GAAG;SACb,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI;AAChB,SAAA,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAK,CAAC,CAAC,OAAkB,CAAC,CAAC;AACtE,IAAA,IAAI,OAAO,CAAC,MAAM,EAAE;QAClB,OAAO,CAAA,2BAAA,EAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;IAC3D;AAEA,IAAA,OAAO,IAAI;AACb;AAEA;AACM,SAAU,gBAAgB,CAAC,IAAY,EAAA;AAC3C,IAAA,IAAI,GAAY;AAChB,IAAA,IAAI;AACF,QAAA,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACxB;IAAE,OAAO,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,CAAA,gBAAA,EAAoB,CAAW,CAAC,OAAO,CAAA,CAAE,EAAE;IAC7D;AACA,IAAA,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC;AACtC,IAAA,OAAO,KAAK,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAkB,EAAE;AAC3D;;;;"}
+{"version":3,"file":"typedAction.mjs","sources":[],"sourcesContent":[],"names":[],"mappings":""}

package/dist/types.d.ts

@@ -1,24 +1,8 @@
 /**
  * ZKProofport SDK Types
  */
-import type { CircuitId } from './circuits';
-/**
- * Zero-knowledge circuit identifiers.
- * Uses canonical circuit names matching Nargo.toml circuit definitions.
- *
- * Alias of {@link CircuitId}, which is defined in `./circuits` — the single
- * source of truth for circuit identifiers. Adding a circuit there widens this
- * type automatically, so the two can never disagree.
- *
- * Note that this union includes circuits marked `planned` in
- * `CIRCUIT_SUPPORT_STATUS`; being assignable is not a support guarantee.
- *
- * @example
- * ```typescript
- * const circuit: CircuitType = 'coinbase_attestation';
- * ```
- */
-export type CircuitType = CircuitId;
+import type { CircuitType, TypedAction, ParsedProof, VerifierContract } from '@zkproofport-app/core';
+export type { CircuitType, TypedAction, ParsedProof, VerifierContract };
 /**
  * Proof request lifecycle status.
  *
@@ -167,43 +151,6 @@ export interface MdlKrRegionInputs {
  */
 export interface EmptyInputs {
 }
-/**
- * The EIP-712 action a `giwa_attestation` proof binds the wallet's signature to.
- *
- * Exactly what `eth_signTypedData_v4` takes, because that is what the wallet is
- * shown and what it signs. The app does not build this — the dapp does — so the
- * user reads the dapp's own field names and values in their wallet instead of
- * an opaque hash.
- *
- * @example
- * ```typescript
- * const action: TypedAction = {
- *   domain: { name: 'MyVault', version: '1', chainId: 91342,
- *             verifyingContract: '0x…' },
- *   types: { Deposit: [ { name: 'amount', type: 'uint256' },
- *                       { name: 'nonce',  type: 'uint256' } ] },
- *   primaryType: 'Deposit',
- *   message: { amount: '1000000', nonce: '7' },
- * };
- * ```
- */
-export interface TypedAction {
-    domain: {
-        name: string;
-        version: string;
-        chainId: number;
-        /** The contract that will verify this signature. */
-        verifyingContract: string;
-    };
-    /** EIP-712 struct definitions. `EIP712Domain` is added by the wallet. */
-    types: Record<string, Array<{
-        name: string;
-        type: string;
-    }>>;
-    /** Which struct in `types` the message is. */
-    primaryType: string;
-    message: Record<string, unknown>;
-}
 /**
  * Input parameters for circuits that can bind an EIP-712 action
  * (`giwa_attestation`).
@@ -334,20 +281,6 @@ export interface ProofResponse {
     /** Chain ID where verifier contract is deployed (provided by mobile app) */
     chainId?: number;
 }
-/**
- * Parsed and formatted proof data ready for on-chain verification.
- *
- * Internal representation used by the SDK to prepare proof data
- * for smart contract verification calls.
- */
-export interface ParsedProof {
-    /** Proof bytes as hex string with 0x prefix */
-    proofHex: string;
-    /** Public inputs as array of hex strings with 0x prefix */
-    publicInputsHex: string[];
-    /** Number of public inputs (must match circuit specification) */
-    numPublicInputs: number;
-}
 /**
  * QR code generation options for deep link encoding.
  *
@@ -376,20 +309,6 @@ export interface QRCodeOptions {
     /** Background color as hex string (default: #ffffff) */
     lightColor?: string;
 }
-/**
- * Verifier smart contract configuration.
- *
- * Contains the address and ABI for a circuit's verifier contract on a specific chain.
- * Each circuit has its own verifier contract that validates proofs on-chain.
- */
-export interface VerifierContract {
-    /** Verifier contract address (checksummed) */
-    address: string;
-    /** Chain ID where contract is deployed (e.g., 84532 for Base Sepolia) */
-    chainId: number;
-    /** Contract ABI for verify function (ethers v6 format) */
-    abi: string[];
-}
 /**
  * ZKProofport SDK configuration options.
  *