anymal-protocol 1.0.59 → 1.0.61

package/dist/cli/index.js

@@ -0,0 +1,165 @@
+#!/usr/bin/env node
+"use strict";
+
+// src/cli/index.ts
+var import_commander = require("commander");
+
+// src/helpers/CryptoUtils.tsx
+var import_elliptic = require("elliptic");
+var ec = new import_elliptic.ec("secp256k1");
+var NETWORK_HOSTS = {
+  ["testnet" /* Testnet */]: "dev-db.petastic.com",
+  ["localnet" /* Localnet */]: "host.docker.internal:9181"
+};
+var AUTH_API_ENDPOINTS = {
+  ["testnet" /* Testnet */]: "https://dev-auth-api.petastic.com",
+  ["localnet" /* Localnet */]: "http://localhost:3005"
+};
+function loadExistingSecp256k1PrivateKey(hexKey) {
+  if (!hexKey) {
+    throw new Error("Private key hex must be provided");
+  }
+  return ec.keyFromPrivate(hexKey, "hex");
+}
+function serializePublicKeyCompressed(keyPair) {
+  return keyPair.getPublic(true, "hex");
+}
+function base64url(input) {
+  let buf;
+  if (typeof input === "string") buf = Buffer.from(input);
+  else if (input instanceof ArrayBuffer) buf = Buffer.from(input);
+  else buf = input;
+  return buf.toString("base64").replace(/=/g, "").replace(/\+/g, "-").replace(/\//g, "_");
+}
+function sha256HashNode(data) {
+  const { createHash } = require("crypto");
+  return createHash("sha256").update(data).digest();
+}
+async function hashInput(data) {
+  if (typeof window !== "undefined" && window.crypto?.subtle) {
+    const encoder = new TextEncoder();
+    const encoded = encoder.encode(data);
+    const hashBuffer = await window.crypto.subtle.digest("SHA-256", encoded);
+    return Buffer.from(hashBuffer);
+  } else {
+    return sha256HashNode(data);
+  }
+}
+async function generateJWT(sub, aud, keyPair, expiresInSeconds = 24 * 60 * 60) {
+  const iat = Math.floor(Date.now() / 1e3);
+  const exp = iat + expiresInSeconds;
+  const header = { alg: "ES256", typ: "JWT" };
+  const payload = { sub, aud, iat, exp };
+  const encodedHeader = base64url(JSON.stringify(header));
+  const encodedPayload = base64url(JSON.stringify(payload));
+  const signingInput = `${encodedHeader}.${encodedPayload}`;
+  const hash = await hashInput(signingInput);
+  const signature = keyPair.sign(hash, { canonical: true });
+  const rBuf = signature.r.toArrayLike(Buffer, "be", 32);
+  const sBuf = signature.s.toArrayLike(Buffer, "be", 32);
+  const rawSig = Buffer.concat([rBuf, sBuf]);
+  const encodedSig = base64url(rawSig);
+  return `${signingInput}.${encodedSig}`;
+}
+async function createAuthEnvelope(privateKeyHex, network = "testnet" /* Testnet */, options) {
+  const keyPair = loadExistingSecp256k1PrivateKey(privateKeyHex);
+  const publicKey = serializePublicKeyCompressed(keyPair);
+  const host = NETWORK_HOSTS[network];
+  if (!host) {
+    throw new Error(`Unsupported network: ${network}`);
+  }
+  const token = await generateJWT(publicKey, host, keyPair, options?.expiresInSeconds);
+  return { publicKey, token };
+}
+
+// src/helpers/AppHelpers.tsx
+async function createApp(privateKeyHex, name, metadataURI, ownerEmail, network = "testnet" /* Testnet */, options) {
+  const { publicKey, token } = await createAuthEnvelope(
+    privateKeyHex,
+    network,
+    options
+  );
+  const host = AUTH_API_ENDPOINTS[network];
+  if (!host) {
+    throw new Error(`Unsupported network: ${network}`);
+  }
+  const url = `${host}/create-app`;
+  const response = await fetch(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({
+      name,
+      publicKey,
+      metadataURI,
+      ownerEmail
+    })
+  });
+  if (!response.ok) {
+    const text = await response.text();
+    throw new Error(`Error creating app (${response.status}): ${text}`);
+  }
+  return response.json();
+}
+
+// src/cli/index.ts
+var program = new import_commander.Command();
+program.name("anymal").description("Anymal Protocol helper CLI").version("1.0.0");
+program.command("keygen").description("Generate a new secp256k1 private key (hex)").action(() => {
+  const { ec: EC2 } = require("elliptic");
+  const ec2 = new EC2("secp256k1");
+  const keyPair = ec2.genKeyPair();
+  const privateKeyHex = keyPair.getPrivate("hex");
+  console.log(privateKeyHex);
+});
+program.command("auth").description("Print publicKey and JWT for your APP_PRIV_HEX").option("-n, --network <net>", "network to target", "testnet").action(async (opts) => {
+  const hex = process.env.APP_PRIV_HEX;
+  if (!hex) {
+    console.error("\u274C  Set APP_PRIV_HEX first");
+    process.exit(1);
+  }
+  let net;
+  switch (opts.network.toLowerCase()) {
+    case "localnet":
+      net = "localnet" /* Localnet */;
+      break;
+    case "testnet":
+      net = "testnet" /* Testnet */;
+      break;
+    default:
+      console.error(`\u274C  Unsupported network: ${opts.network}`);
+      process.exit(1);
+  }
+  const { publicKey, token } = await createAuthEnvelope(hex, net);
+  console.log("publicKey:", publicKey);
+  console.log("token:", token);
+});
+program.command("create-app").description("Register a new application on-chain").requiredOption("--name <name>", "application name").requiredOption("--email <ownerEmail>", "owner email").option("--metadata <uri>", "metadata URI", "").option("-n, --network <net>", "network", "testnet").action(async (opts) => {
+  const hex = process.env.APP_PRIV_HEX;
+  if (!hex) {
+    console.error("\u274C  Set APP_PRIV_HEX first");
+    process.exit(1);
+  }
+  let net;
+  switch (opts.network.toLowerCase()) {
+    case "localnet":
+      net = "localnet" /* Localnet */;
+      break;
+    case "testnet":
+      net = "testnet" /* Testnet */;
+      break;
+    default:
+      console.error(`\u274C  Unsupported network: ${opts.network}`);
+      process.exit(1);
+  }
+  try {
+    const res = await createApp(hex, opts.name, opts.metadata, opts.email, net);
+    console.log(JSON.stringify(res, null, 2));
+  } catch (e) {
+    console.error("\u274C  create-app failed:", e.message);
+    process.exit(1);
+  }
+});
+program.parse();

package/dist/cli/index.mjs

@@ -0,0 +1,101 @@
+#!/usr/bin/env node
+import {
+  AUTH_API_ENDPOINTS,
+  __require,
+  createAuthEnvelope
+} from "../chunk-F72KTNHS.mjs";
+
+// src/cli/index.ts
+import { Command } from "commander";
+
+// src/helpers/AppHelpers.tsx
+async function createApp(privateKeyHex, name, metadataURI, ownerEmail, network = "testnet" /* Testnet */, options) {
+  const { publicKey, token } = await createAuthEnvelope(
+    privateKeyHex,
+    network,
+    options
+  );
+  const host = AUTH_API_ENDPOINTS[network];
+  if (!host) {
+    throw new Error(`Unsupported network: ${network}`);
+  }
+  const url = `${host}/create-app`;
+  const response = await fetch(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Bearer ${token}`
+    },
+    body: JSON.stringify({
+      name,
+      publicKey,
+      metadataURI,
+      ownerEmail
+    })
+  });
+  if (!response.ok) {
+    const text = await response.text();
+    throw new Error(`Error creating app (${response.status}): ${text}`);
+  }
+  return response.json();
+}
+
+// src/cli/index.ts
+var program = new Command();
+program.name("anymal").description("Anymal Protocol helper CLI").version("1.0.0");
+program.command("keygen").description("Generate a new secp256k1 private key (hex)").action(() => {
+  const { ec: EC } = __require("elliptic");
+  const ec = new EC("secp256k1");
+  const keyPair = ec.genKeyPair();
+  const privateKeyHex = keyPair.getPrivate("hex");
+  console.log(privateKeyHex);
+});
+program.command("auth").description("Print publicKey and JWT for your APP_PRIV_HEX").option("-n, --network <net>", "network to target", "testnet").action(async (opts) => {
+  const hex = process.env.APP_PRIV_HEX;
+  if (!hex) {
+    console.error("\u274C  Set APP_PRIV_HEX first");
+    process.exit(1);
+  }
+  let net;
+  switch (opts.network.toLowerCase()) {
+    case "localnet":
+      net = "localnet" /* Localnet */;
+      break;
+    case "testnet":
+      net = "testnet" /* Testnet */;
+      break;
+    default:
+      console.error(`\u274C  Unsupported network: ${opts.network}`);
+      process.exit(1);
+  }
+  const { publicKey, token } = await createAuthEnvelope(hex, net);
+  console.log("publicKey:", publicKey);
+  console.log("token:", token);
+});
+program.command("create-app").description("Register a new application on-chain").requiredOption("--name <name>", "application name").requiredOption("--email <ownerEmail>", "owner email").option("--metadata <uri>", "metadata URI", "").option("-n, --network <net>", "network", "testnet").action(async (opts) => {
+  const hex = process.env.APP_PRIV_HEX;
+  if (!hex) {
+    console.error("\u274C  Set APP_PRIV_HEX first");
+    process.exit(1);
+  }
+  let net;
+  switch (opts.network.toLowerCase()) {
+    case "localnet":
+      net = "localnet" /* Localnet */;
+      break;
+    case "testnet":
+      net = "testnet" /* Testnet */;
+      break;
+    default:
+      console.error(`\u274C  Unsupported network: ${opts.network}`);
+      process.exit(1);
+  }
+  try {
+    const res = await createApp(hex, opts.name, opts.metadata, opts.email, net);
+    console.log(JSON.stringify(res, null, 2));
+  } catch (e) {
+    console.error("\u274C  create-app failed:", e.message);
+    process.exit(1);
+  }
+});
+program.parse();

package/dist/index.d.mts

@@ -1,4 +1,5 @@
 import { BundlerClient } from 'viem/account-abstraction';
+import { ec } from 'elliptic';
 
 declare function useVerifyAccount(): (pid: string, campaignId: string, dbAuthToken: string, bundlerClient: any, smartAccount: any, accountRewardsContractAddress: `0x${string}`) => Promise<{
     success: boolean;
@@ -60,6 +61,7 @@ interface AnymalNftMetadataInputData {
 
 declare function useAddAnymalToDatabase(): (dbAuthToken: string, endpoint: string, anymalData: CreateAnymalInputData) => Promise<{
     _docID: string | null;
+    dbCid: string | null;
     success: boolean;
     message: string;
 }>;
@@ -82,6 +84,14 @@ declare function useUploadAnymalImage(): (imageFile: File, type: string, idToken
     type: string;
 }>;
 
+declare function fetchAnymals({ dbAuthToken, endpoint, userPid, }: {
+    dbAuthToken: string;
+    endpoint: string;
+    userPid: string;
+}): Promise<any>;
+
+declare function useFetchAnymals(): typeof fetchAnymals;
+
 declare function useProcessPartialKibblePayment(): (pid: string, nftId: string, orderId: string, dbAuthToken: string, marketplaceContract: string, smartAccount: any, bundlerClient: any, amountInTokens: string, maxTokenPayment: string, nonce: string, deadline: string, backendSignature: string) => Promise<{
     success: boolean;
     message: string;
@@ -137,6 +147,169 @@ declare function useUpdateOrgWalletAddress(): (dbAuthToken: string, docID: strin
 
 declare const generateBytes32Nonce: () => `0x${string}`;
 
+/**
+ * Supported networks
+ */
+declare enum Network {
+    Testnet = "testnet",
+    Localnet = "localnet"
+}
+/**
+ * Mapping from network to audience host
+ */
+declare const NETWORK_HOSTS: Record<Network, string>;
+/**
+ * Mapping from network to audience host
+ */
+declare const AUTH_API_ENDPOINTS: Record<Network, string>;
+/**
+ * Output of authentication envelope
+ */
+interface AuthEnvelope {
+    publicKey: string;
+    token: string;
+}
+/**
+ * Options when creating JWT
+ */
+interface JWTOptions {
+    /**
+     * Time-to-live in seconds (default: 24h)
+     */
+    expiresInSeconds?: number;
+}
+/**
+ * Load a secp256k1 private key from a hex string.
+ * @param hexKey - Hex‑encoded private key
+ */
+declare function loadExistingSecp256k1PrivateKey(hexKey: string): ec.KeyPair;
+/**
+ * Serialize the public key (compressed 02/03 + X) to hex.
+ * @param keyPair - The elliptic KeyPair
+ */
+declare function serializePublicKeyCompressed(keyPair: ec.KeyPair): string;
+/**
+ * Generate a JWT signed with ES256 (ECDSA + SHA-256) directly from a secp256k1 key pair.
+ * Using `ES256` header so it matches PyJWT verification.
+ * @param sub - Subject claim (e.g., compressed public key)
+ * @param aud - Audience claim (e.g., host/domain)
+ * @param keyPair - Elliptic KeyPair for signing
+ * @param expiresInSeconds - TTL in seconds (default: 24h)
+ */
+declare function generateJWT(sub: string, aud: string, keyPair: ec.KeyPair, expiresInSeconds?: number): Promise<string>;
+/**
+ * Convenience wrapper: given a hex private key and host/domain,
+ * returns a compressed public key and a JWT signed with that key.
+ * @param privateKeyHex - Hex‑encoded secp256k1 private key
+ * @param network - testnet/mainnet network identifier
+ * @param options - Optional settings like expiresInSeconds
+ */
+declare function createAuthEnvelope(privateKeyHex: string, network?: Network, options?: JWTOptions): Promise<AuthEnvelope>;
+/**
+ * Generate a hex‑encoded DER signature for the OAuth‑style
+ * verify‑app‑session call.
+ * @param privateKeyHex - Hex‑encoded secp256k1 private key
+ * @param clientId - Your app’s App ID
+ * @param redirectUri - Redirect URI used in the OAuth flow
+ * @param state - CSRF/state parameter used in the flow
+ */
+declare function generateAppSignature(privateKeyHex: string, clientId: string, redirectUri: string, state: string): Promise<string>;
+
+/**
+ * Types of actions you can submit
+ */
+declare enum ActionType {
+    GRAPHQL = "GRAPHQL",
+    CONTRACT = "CONTRACT",
+    EXTERNAL = "EXTERNAL"
+}
+/**
+ * Represents a single action record returned by the backend.
+ */
+interface ActionRecord {
+    id: string;
+    wallet: string;
+    pid: string;
+    action_id: string;
+    metadata: Record<string, any>;
+    version_cid?: string;
+    quantity: number;
+    reward_amount?: number;
+    status: 'PENDING' | 'VALIDATED' | 'CLAIMED';
+    createdAt: string;
+    validatedAt?: string | null;
+    claimedAt?: string | null;
+    claimQuantity?: number | null;
+}
+/**
+ * API response for fetching action records.
+ */
+interface FetchActionsResponse {
+    data: ActionRecord[];
+}
+
+/**
+ * Base fields sent with every action
+ */
+interface BaseActionPayload {
+    actionId: string;
+    timestamp: string;
+    nonce: string;
+    source: ActionType;
+    clientInfo?: {
+        userAgent?: string;
+        locale?: string;
+    };
+}
+/**
+ * Payload for GraphQL-based actions
+ */
+interface GraphQLActionPayload extends BaseActionPayload {
+    versionCid: string;
+    resource: string;
+    resourceId: string;
+    changedFields?: string[];
+    previousValues?: Record<string, any>;
+    mutation?: string;
+    variables?: Record<string, any>;
+}
+/**
+ * Payload for on-chain contract actions
+ */
+interface ContractActionPayload extends BaseActionPayload {
+    txHash: string;
+    chainId: number;
+    contract: string;
+    functionName: string;
+    args: any[];
+    receipt: {
+        blockNumber: number;
+        status: number;
+        gasUsed: string;
+    };
+}
+/**
+ * Payload for external web-service actions
+ */
+interface ExternalActionPayload extends BaseActionPayload {
+    endpoint: string;
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE';
+    requestBody?: Record<string, any>;
+    responseStatus?: number;
+    responseBody?: any;
+}
+type ActionPayload = GraphQLActionPayload | ContractActionPayload | ExternalActionPayload;
+interface SubmitResponse {
+    ok: boolean;
+    id: string;
+}
+/**
+ * Generic submission function
+ */
+declare function submitAction(idToken: string, pid: string, payload: ActionPayload, endpointBaseUrl: string): Promise<SubmitResponse>;
+
+declare function useFetchActions(): (idToken: string, actionsServiceBaseUrl: string, pid: string, status?: string, limit?: number, offset?: number) => Promise<FetchActionsResponse | null>;
+
 declare function useCreateUserAppData(): (appId: string, pid: string, dbAuthToken: string, endpoint: string) => Promise<{
     success: boolean;
     data: any;
@@ -149,4 +322,4 @@ declare function useCreateOrganizationAppData(): (appId: string, pid: string, db
 
 declare function useFetchBalance(): (publicClient: any, walletAddress: string, kibbleTokenAddress: string) => Promise<number | undefined>;
 
-export { type AnymalNftMetadataInputData, type CreateAnymalInputData, generateBytes32Nonce, useAddAnymalToDatabase, useApproveKibbleToken, useApproveOrgPartialPayment, useCreateOrganizationAppData, useCreateOrganizationBase, useCreateUserAppData, useCreateWeb3Account, useDeleteAnymalFromDatabase, useFetchBalance, useFetchNotifications, useFetchUserData, useMintAnymalNFT, useProcessOrgPartialKibblePayment, useProcessPartialKibblePayment, useSaveAnymalMetadata, useUpdateAnymalWithNFT, useUpdateOrgWalletAddress, useUpdateUserAsVerified, useUpdateUserEmail, useUpdateUserName, useUpdateUserPid, useUploadAnymalImage, useVerifyAccount, useVerifyWeb3AuthSession };
+export { AUTH_API_ENDPOINTS, type ActionPayload, ActionType, type AnymalNftMetadataInputData, type AuthEnvelope, type ContractActionPayload, type CreateAnymalInputData, type ExternalActionPayload, type GraphQLActionPayload, type JWTOptions, NETWORK_HOSTS, Network, type SubmitResponse, createAuthEnvelope, fetchAnymals, generateAppSignature, generateBytes32Nonce, generateJWT, loadExistingSecp256k1PrivateKey, serializePublicKeyCompressed, submitAction, useAddAnymalToDatabase, useApproveKibbleToken, useApproveOrgPartialPayment, useCreateOrganizationAppData, useCreateOrganizationBase, useCreateUserAppData, useCreateWeb3Account, useDeleteAnymalFromDatabase, useFetchActions, useFetchAnymals, useFetchBalance, useFetchNotifications, useFetchUserData, useMintAnymalNFT, useProcessOrgPartialKibblePayment, useProcessPartialKibblePayment, useSaveAnymalMetadata, useUpdateAnymalWithNFT, useUpdateOrgWalletAddress, useUpdateUserAsVerified, useUpdateUserEmail, useUpdateUserName, useUpdateUserPid, useUploadAnymalImage, useVerifyAccount, useVerifyWeb3AuthSession };

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 import { BundlerClient } from 'viem/account-abstraction';
+import { ec } from 'elliptic';
 
 declare function useVerifyAccount(): (pid: string, campaignId: string, dbAuthToken: string, bundlerClient: any, smartAccount: any, accountRewardsContractAddress: `0x${string}`) => Promise<{
     success: boolean;
@@ -60,6 +61,7 @@ interface AnymalNftMetadataInputData {
 
 declare function useAddAnymalToDatabase(): (dbAuthToken: string, endpoint: string, anymalData: CreateAnymalInputData) => Promise<{
     _docID: string | null;
+    dbCid: string | null;
     success: boolean;
     message: string;
 }>;
@@ -82,6 +84,14 @@ declare function useUploadAnymalImage(): (imageFile: File, type: string, idToken
     type: string;
 }>;
 
+declare function fetchAnymals({ dbAuthToken, endpoint, userPid, }: {
+    dbAuthToken: string;
+    endpoint: string;
+    userPid: string;
+}): Promise<any>;
+
+declare function useFetchAnymals(): typeof fetchAnymals;
+
 declare function useProcessPartialKibblePayment(): (pid: string, nftId: string, orderId: string, dbAuthToken: string, marketplaceContract: string, smartAccount: any, bundlerClient: any, amountInTokens: string, maxTokenPayment: string, nonce: string, deadline: string, backendSignature: string) => Promise<{
     success: boolean;
     message: string;
@@ -137,6 +147,169 @@ declare function useUpdateOrgWalletAddress(): (dbAuthToken: string, docID: strin
 
 declare const generateBytes32Nonce: () => `0x${string}`;
 
+/**
+ * Supported networks
+ */
+declare enum Network {
+    Testnet = "testnet",
+    Localnet = "localnet"
+}
+/**
+ * Mapping from network to audience host
+ */
+declare const NETWORK_HOSTS: Record<Network, string>;
+/**
+ * Mapping from network to audience host
+ */
+declare const AUTH_API_ENDPOINTS: Record<Network, string>;
+/**
+ * Output of authentication envelope
+ */
+interface AuthEnvelope {
+    publicKey: string;
+    token: string;
+}
+/**
+ * Options when creating JWT
+ */
+interface JWTOptions {
+    /**
+     * Time-to-live in seconds (default: 24h)
+     */
+    expiresInSeconds?: number;
+}
+/**
+ * Load a secp256k1 private key from a hex string.
+ * @param hexKey - Hex‑encoded private key
+ */
+declare function loadExistingSecp256k1PrivateKey(hexKey: string): ec.KeyPair;
+/**
+ * Serialize the public key (compressed 02/03 + X) to hex.
+ * @param keyPair - The elliptic KeyPair
+ */
+declare function serializePublicKeyCompressed(keyPair: ec.KeyPair): string;
+/**
+ * Generate a JWT signed with ES256 (ECDSA + SHA-256) directly from a secp256k1 key pair.
+ * Using `ES256` header so it matches PyJWT verification.
+ * @param sub - Subject claim (e.g., compressed public key)
+ * @param aud - Audience claim (e.g., host/domain)
+ * @param keyPair - Elliptic KeyPair for signing
+ * @param expiresInSeconds - TTL in seconds (default: 24h)
+ */
+declare function generateJWT(sub: string, aud: string, keyPair: ec.KeyPair, expiresInSeconds?: number): Promise<string>;
+/**
+ * Convenience wrapper: given a hex private key and host/domain,
+ * returns a compressed public key and a JWT signed with that key.
+ * @param privateKeyHex - Hex‑encoded secp256k1 private key
+ * @param network - testnet/mainnet network identifier
+ * @param options - Optional settings like expiresInSeconds
+ */
+declare function createAuthEnvelope(privateKeyHex: string, network?: Network, options?: JWTOptions): Promise<AuthEnvelope>;
+/**
+ * Generate a hex‑encoded DER signature for the OAuth‑style
+ * verify‑app‑session call.
+ * @param privateKeyHex - Hex‑encoded secp256k1 private key
+ * @param clientId - Your app’s App ID
+ * @param redirectUri - Redirect URI used in the OAuth flow
+ * @param state - CSRF/state parameter used in the flow
+ */
+declare function generateAppSignature(privateKeyHex: string, clientId: string, redirectUri: string, state: string): Promise<string>;
+
+/**
+ * Types of actions you can submit
+ */
+declare enum ActionType {
+    GRAPHQL = "GRAPHQL",
+    CONTRACT = "CONTRACT",
+    EXTERNAL = "EXTERNAL"
+}
+/**
+ * Represents a single action record returned by the backend.
+ */
+interface ActionRecord {
+    id: string;
+    wallet: string;
+    pid: string;
+    action_id: string;
+    metadata: Record<string, any>;
+    version_cid?: string;
+    quantity: number;
+    reward_amount?: number;
+    status: 'PENDING' | 'VALIDATED' | 'CLAIMED';
+    createdAt: string;
+    validatedAt?: string | null;
+    claimedAt?: string | null;
+    claimQuantity?: number | null;
+}
+/**
+ * API response for fetching action records.
+ */
+interface FetchActionsResponse {
+    data: ActionRecord[];
+}
+
+/**
+ * Base fields sent with every action
+ */
+interface BaseActionPayload {
+    actionId: string;
+    timestamp: string;
+    nonce: string;
+    source: ActionType;
+    clientInfo?: {
+        userAgent?: string;
+        locale?: string;
+    };
+}
+/**
+ * Payload for GraphQL-based actions
+ */
+interface GraphQLActionPayload extends BaseActionPayload {
+    versionCid: string;
+    resource: string;
+    resourceId: string;
+    changedFields?: string[];
+    previousValues?: Record<string, any>;
+    mutation?: string;
+    variables?: Record<string, any>;
+}
+/**
+ * Payload for on-chain contract actions
+ */
+interface ContractActionPayload extends BaseActionPayload {
+    txHash: string;
+    chainId: number;
+    contract: string;
+    functionName: string;
+    args: any[];
+    receipt: {
+        blockNumber: number;
+        status: number;
+        gasUsed: string;
+    };
+}
+/**
+ * Payload for external web-service actions
+ */
+interface ExternalActionPayload extends BaseActionPayload {
+    endpoint: string;
+    method: 'GET' | 'POST' | 'PUT' | 'DELETE';
+    requestBody?: Record<string, any>;
+    responseStatus?: number;
+    responseBody?: any;
+}
+type ActionPayload = GraphQLActionPayload | ContractActionPayload | ExternalActionPayload;
+interface SubmitResponse {
+    ok: boolean;
+    id: string;
+}
+/**
+ * Generic submission function
+ */
+declare function submitAction(idToken: string, pid: string, payload: ActionPayload, endpointBaseUrl: string): Promise<SubmitResponse>;
+
+declare function useFetchActions(): (idToken: string, actionsServiceBaseUrl: string, pid: string, status?: string, limit?: number, offset?: number) => Promise<FetchActionsResponse | null>;
+
 declare function useCreateUserAppData(): (appId: string, pid: string, dbAuthToken: string, endpoint: string) => Promise<{
     success: boolean;
     data: any;
@@ -149,4 +322,4 @@ declare function useCreateOrganizationAppData(): (appId: string, pid: string, db
 
 declare function useFetchBalance(): (publicClient: any, walletAddress: string, kibbleTokenAddress: string) => Promise<number | undefined>;
 
-export { type AnymalNftMetadataInputData, type CreateAnymalInputData, generateBytes32Nonce, useAddAnymalToDatabase, useApproveKibbleToken, useApproveOrgPartialPayment, useCreateOrganizationAppData, useCreateOrganizationBase, useCreateUserAppData, useCreateWeb3Account, useDeleteAnymalFromDatabase, useFetchBalance, useFetchNotifications, useFetchUserData, useMintAnymalNFT, useProcessOrgPartialKibblePayment, useProcessPartialKibblePayment, useSaveAnymalMetadata, useUpdateAnymalWithNFT, useUpdateOrgWalletAddress, useUpdateUserAsVerified, useUpdateUserEmail, useUpdateUserName, useUpdateUserPid, useUploadAnymalImage, useVerifyAccount, useVerifyWeb3AuthSession };
+export { AUTH_API_ENDPOINTS, type ActionPayload, ActionType, type AnymalNftMetadataInputData, type AuthEnvelope, type ContractActionPayload, type CreateAnymalInputData, type ExternalActionPayload, type GraphQLActionPayload, type JWTOptions, NETWORK_HOSTS, Network, type SubmitResponse, createAuthEnvelope, fetchAnymals, generateAppSignature, generateBytes32Nonce, generateJWT, loadExistingSecp256k1PrivateKey, serializePublicKeyCompressed, submitAction, useAddAnymalToDatabase, useApproveKibbleToken, useApproveOrgPartialPayment, useCreateOrganizationAppData, useCreateOrganizationBase, useCreateUserAppData, useCreateWeb3Account, useDeleteAnymalFromDatabase, useFetchActions, useFetchAnymals, useFetchBalance, useFetchNotifications, useFetchUserData, useMintAnymalNFT, useProcessOrgPartialKibblePayment, useProcessPartialKibblePayment, useSaveAnymalMetadata, useUpdateAnymalWithNFT, useUpdateOrgWalletAddress, useUpdateUserAsVerified, useUpdateUserEmail, useUpdateUserName, useUpdateUserPid, useUploadAnymalImage, useVerifyAccount, useVerifyWeb3AuthSession };