noah-clarity 0.3.6 → 0.3.7

package/dist/contract.d.ts

@@ -26,8 +26,7 @@ export declare class KYCContract {
      */
     getRevocationRoot(): Promise<string | null>;
     /**
-     * Check if a commitment is revoked by checking the revocation root
-     * Note: This is a simplified check. For full verification, non-membership proofs are needed.
+     * Check if a commitment is revoked by querying the attester service
      * @param commitment Commitment to check (hex string)
      * @returns true if revoked, false if not revoked or if revocation checking is unavailable
      */

package/dist/contract.js

@@ -325,24 +325,32 @@ export class KYCContract {
         }
     }
     /**
-     * Check if a commitment is revoked by checking the revocation root
-     * Note: This is a simplified check. For full verification, non-membership proofs are needed.
+     * Check if a commitment is revoked by querying the attester service
      * @param commitment Commitment to check (hex string)
      * @returns true if revoked, false if not revoked or if revocation checking is unavailable
      */
     async isCommitmentRevoked(commitment) {
-        const root = await this.getRevocationRoot();
-        // If no revocation registry configured or root is zero (empty tree), nothing is revoked
-        if (!root || root === '0x0000000000000000000000000000000000000000000000000000000000000000') {
+        // If no attester service URL configured, skip revocation check
+        if (!this.config.attesterServiceUrl) {
+            return false;
+        }
+        try {
+            // Query attester service for revocation status
+            const url = `${this.config.attesterServiceUrl}/revocation/check?commitment=${encodeURIComponent(commitment)}`;
+            const response = await fetch(url);
+            if (!response.ok) {
+                // If service unavailable, assume not revoked (fail open)
+                console.warn('Revocation check service unavailable, assuming not revoked');
+                return false;
+            }
+            const data = await response.json();
+            return data.revoked === true;
+        }
+        catch (error) {
+            // On error, assume not revoked (fail open)
+            console.error('Error checking revocation status:', error);
             return false;
         }
-        // TODO: Full revocation checking requires non-membership proof verification
-        // For now, we return false (not revoked) when root exists but we can't verify without proof
-        // In production, you should:
-        // 1. Request a non-membership proof from the attester service
-        // 2. Verify the proof using Merkle tree verification
-        // 3. Return true if proof verification fails or if commitment is in revocation tree
-        return false;
     }
     /**
      * Check if KYC is valid

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "noah-clarity",
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "TypeScript SDK for Noah-v2 KYC system on Stacks",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",