veriq-client 0.1.0 → 0.1.2

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { Transport } from 'viem';
 import { z } from 'zod';
+import { Transport } from 'viem';
 
 /** 32-byte hash (B256). */
 declare const Hex32Schema: z.ZodString;
@@ -7,7 +7,7 @@ declare const VerificationStatusSchema: z.ZodEnum<["verified", "unverified", "un
 declare const RootSourceSchema: z.ZodEnum<["local-light-client", "fixture", "untrusted-rpc"]>;
 declare const VerifierLocationSchema: z.ZodEnum<["local-engine", "remote-engine", "browser"]>;
 declare const MechanismSchema: z.ZodEnum<["account-proof", "storage-proof", "code-hash"]>;
-declare const TransportKindSchema: z.ZodEnum<["direct", "ohttp", "anyone-socks"]>;
+declare const TransportKindSchema: z.ZodEnum<["direct", "ohttp", "anyone-socks", "anon-rpc"]>;
 declare const ComparisonSchema: z.ZodEnum<["not-run", "agree", "divergent"]>;
 declare const IdentitySchema: z.ZodObject<{
     requestId: z.ZodString;
@@ -30,16 +30,20 @@ declare const BlockSchema: z.ZodObject<{
     hash: z.ZodString;
     stateRoot: z.ZodString;
     finalized: z.ZodBoolean;
+    /** S6: the chain this block is on. Absent in receipts from engines before mainnet support. */
+    chainId: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
     number: number;
     hash: string;
     stateRoot: string;
     finalized: boolean;
+    chainId?: number | undefined;
 }, {
     number: number;
     hash: string;
     stateRoot: string;
     finalized: boolean;
+    chainId?: number | undefined;
 }>;
 declare const BootstrapSchema: z.ZodObject<{
     source: z.ZodDefault<z.ZodNullable<z.ZodString>>;
@@ -94,13 +98,13 @@ declare const VerificationSchema: z.ZodObject<{
     };
 }>;
 declare const PrivacySchema: z.ZodObject<{
-    transport: z.ZodEnum<["direct", "ohttp", "anyone-socks"]>;
+    transport: z.ZodEnum<["direct", "ohttp", "anyone-socks", "anon-rpc"]>;
     mechanism: z.ZodDefault<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
-    transport: "direct" | "ohttp" | "anyone-socks";
+    transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
     mechanism: string | null;
 }, {
-    transport: "direct" | "ohttp" | "anyone-socks";
+    transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
     mechanism?: string | null | undefined;
 }>;
 /** `AttemptOutcome` in receipt.rs. */
@@ -209,16 +213,20 @@ declare const TrustReceiptSchema: z.ZodObject<{
         hash: z.ZodString;
         stateRoot: z.ZodString;
         finalized: z.ZodBoolean;
+        /** S6: the chain this block is on. Absent in receipts from engines before mainnet support. */
+        chainId: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
         number: number;
         hash: string;
         stateRoot: string;
         finalized: boolean;
+        chainId?: number | undefined;
     }, {
         number: number;
         hash: string;
         stateRoot: string;
         finalized: boolean;
+        chainId?: number | undefined;
     }>;
     verification: z.ZodObject<{
         status: z.ZodEnum<["verified", "unverified", "unsupported"]>;
@@ -260,13 +268,13 @@ declare const TrustReceiptSchema: z.ZodObject<{
         };
     }>;
     privacy: z.ZodObject<{
-        transport: z.ZodEnum<["direct", "ohttp", "anyone-socks"]>;
+        transport: z.ZodEnum<["direct", "ohttp", "anyone-socks", "anon-rpc"]>;
         mechanism: z.ZodDefault<z.ZodNullable<z.ZodString>>;
     }, "strip", z.ZodTypeAny, {
-        transport: "direct" | "ohttp" | "anyone-socks";
+        transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
         mechanism: string | null;
     }, {
-        transport: "direct" | "ohttp" | "anyone-socks";
+        transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
         mechanism?: string | null | undefined;
     }>;
     routing: z.ZodObject<{
@@ -345,6 +353,7 @@ declare const TrustReceiptSchema: z.ZodObject<{
         hash: string;
         stateRoot: string;
         finalized: boolean;
+        chainId?: number | undefined;
     };
     verification: {
         status: "verified" | "unverified" | "unsupported";
@@ -358,7 +367,7 @@ declare const TrustReceiptSchema: z.ZodObject<{
         };
     };
     privacy: {
-        transport: "direct" | "ohttp" | "anyone-socks";
+        transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
         mechanism: string | null;
     };
     routing: {
@@ -393,6 +402,7 @@ declare const TrustReceiptSchema: z.ZodObject<{
         hash: string;
         stateRoot: string;
         finalized: boolean;
+        chainId?: number | undefined;
     };
     verification: {
         status: "verified" | "unverified" | "unsupported";
@@ -406,7 +416,7 @@ declare const TrustReceiptSchema: z.ZodObject<{
         };
     };
     privacy: {
-        transport: "direct" | "ohttp" | "anyone-socks";
+        transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
         mechanism?: string | null | undefined;
     };
     routing: {
@@ -519,16 +529,20 @@ declare const ReadResultSchema: z.ZodObject<{
             hash: z.ZodString;
             stateRoot: z.ZodString;
             finalized: z.ZodBoolean;
+            /** S6: the chain this block is on. Absent in receipts from engines before mainnet support. */
+            chainId: z.ZodOptional<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
             number: number;
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         }, {
             number: number;
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         }>;
         verification: z.ZodObject<{
             status: z.ZodEnum<["verified", "unverified", "unsupported"]>;
@@ -570,13 +584,13 @@ declare const ReadResultSchema: z.ZodObject<{
             };
         }>;
         privacy: z.ZodObject<{
-            transport: z.ZodEnum<["direct", "ohttp", "anyone-socks"]>;
+            transport: z.ZodEnum<["direct", "ohttp", "anyone-socks", "anon-rpc"]>;
             mechanism: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         }, "strip", z.ZodTypeAny, {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism: string | null;
         }, {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism?: string | null | undefined;
         }>;
         routing: z.ZodObject<{
@@ -655,6 +669,7 @@ declare const ReadResultSchema: z.ZodObject<{
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         };
         verification: {
             status: "verified" | "unverified" | "unsupported";
@@ -668,7 +683,7 @@ declare const ReadResultSchema: z.ZodObject<{
             };
         };
         privacy: {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism: string | null;
         };
         routing: {
@@ -703,6 +718,7 @@ declare const ReadResultSchema: z.ZodObject<{
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         };
         verification: {
             status: "verified" | "unverified" | "unsupported";
@@ -716,7 +732,7 @@ declare const ReadResultSchema: z.ZodObject<{
             };
         };
         privacy: {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism?: string | null | undefined;
         };
         routing: {
@@ -781,6 +797,7 @@ declare const ReadResultSchema: z.ZodObject<{
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         };
         verification: {
             status: "verified" | "unverified" | "unsupported";
@@ -794,7 +811,7 @@ declare const ReadResultSchema: z.ZodObject<{
             };
         };
         privacy: {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism: string | null;
         };
         routing: {
@@ -832,6 +849,7 @@ declare const ReadResultSchema: z.ZodObject<{
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         };
         verification: {
             status: "verified" | "unverified" | "unsupported";
@@ -845,7 +863,7 @@ declare const ReadResultSchema: z.ZodObject<{
             };
         };
         privacy: {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism?: string | null | undefined;
         };
         routing: {
@@ -871,6 +889,30 @@ declare const ReadResultSchema: z.ZodObject<{
     };
     attempts?: unknown[] | undefined;
 }>;
+/** `veriq_getRoot`: the finalized block the engine verifies against right now. */
+declare const RootInfoSchema: z.ZodObject<{
+    number: z.ZodNumber;
+    hash: z.ZodString;
+    stateRoot: z.ZodString;
+    rootSource: z.ZodString;
+    verified: z.ZodBoolean;
+    /** S6: the engine's chain. Absent from older engines. */
+    chainId: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    number: number;
+    verified: boolean;
+    hash: string;
+    stateRoot: string;
+    rootSource: string;
+    chainId?: number | undefined;
+}, {
+    number: number;
+    verified: boolean;
+    hash: string;
+    stateRoot: string;
+    rootSource: string;
+    chainId?: number | undefined;
+}>;
 /** A stored receipt row (GET /receipts, GET /receipts/:id). Failed reads carry `error` instead of `receipt`. */
 declare const ReceiptRecordSchema: z.ZodObject<{
     id: z.ZodString;
@@ -910,16 +952,20 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             hash: z.ZodString;
             stateRoot: z.ZodString;
             finalized: z.ZodBoolean;
+            /** S6: the chain this block is on. Absent in receipts from engines before mainnet support. */
+            chainId: z.ZodOptional<z.ZodNumber>;
         }, "strip", z.ZodTypeAny, {
             number: number;
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         }, {
             number: number;
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         }>;
         verification: z.ZodObject<{
             status: z.ZodEnum<["verified", "unverified", "unsupported"]>;
@@ -961,13 +1007,13 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             };
         }>;
         privacy: z.ZodObject<{
-            transport: z.ZodEnum<["direct", "ohttp", "anyone-socks"]>;
+            transport: z.ZodEnum<["direct", "ohttp", "anyone-socks", "anon-rpc"]>;
             mechanism: z.ZodDefault<z.ZodNullable<z.ZodString>>;
         }, "strip", z.ZodTypeAny, {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism: string | null;
         }, {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism?: string | null | undefined;
         }>;
         routing: z.ZodObject<{
@@ -1046,6 +1092,7 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         };
         verification: {
             status: "verified" | "unverified" | "unsupported";
@@ -1059,7 +1106,7 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             };
         };
         privacy: {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism: string | null;
         };
         routing: {
@@ -1094,6 +1141,7 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         };
         verification: {
             status: "verified" | "unverified" | "unsupported";
@@ -1107,7 +1155,7 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             };
         };
         privacy: {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism?: string | null | undefined;
         };
         routing: {
@@ -1192,6 +1240,7 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         };
         verification: {
             status: "verified" | "unverified" | "unsupported";
@@ -1205,7 +1254,7 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             };
         };
         privacy: {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism: string | null;
         };
         routing: {
@@ -1257,6 +1306,7 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             hash: string;
             stateRoot: string;
             finalized: boolean;
+            chainId?: number | undefined;
         };
         verification: {
             status: "verified" | "unverified" | "unsupported";
@@ -1270,7 +1320,7 @@ declare const ReceiptRecordSchema: z.ZodObject<{
             };
         };
         privacy: {
-            transport: "direct" | "ohttp" | "anyone-socks";
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
             mechanism?: string | null | undefined;
         };
         routing: {
@@ -1340,16 +1390,20 @@ declare const ReceiptListSchema: z.ZodObject<{
                 hash: z.ZodString;
                 stateRoot: z.ZodString;
                 finalized: z.ZodBoolean;
+                /** S6: the chain this block is on. Absent in receipts from engines before mainnet support. */
+                chainId: z.ZodOptional<z.ZodNumber>;
             }, "strip", z.ZodTypeAny, {
                 number: number;
                 hash: string;
                 stateRoot: string;
                 finalized: boolean;
+                chainId?: number | undefined;
             }, {
                 number: number;
                 hash: string;
                 stateRoot: string;
                 finalized: boolean;
+                chainId?: number | undefined;
             }>;
             verification: z.ZodObject<{
                 status: z.ZodEnum<["verified", "unverified", "unsupported"]>;
@@ -1391,13 +1445,13 @@ declare const ReceiptListSchema: z.ZodObject<{
                 };
             }>;
             privacy: z.ZodObject<{
-                transport: z.ZodEnum<["direct", "ohttp", "anyone-socks"]>;
+                transport: z.ZodEnum<["direct", "ohttp", "anyone-socks", "anon-rpc"]>;
                 mechanism: z.ZodDefault<z.ZodNullable<z.ZodString>>;
             }, "strip", z.ZodTypeAny, {
-                transport: "direct" | "ohttp" | "anyone-socks";
+                transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
                 mechanism: string | null;
             }, {
-                transport: "direct" | "ohttp" | "anyone-socks";
+                transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
                 mechanism?: string | null | undefined;
             }>;
             routing: z.ZodObject<{
@@ -1476,6 +1530,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 hash: string;
                 stateRoot: string;
                 finalized: boolean;
+                chainId?: number | undefined;
             };
             verification: {
                 status: "verified" | "unverified" | "unsupported";
@@ -1489,7 +1544,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 };
             };
             privacy: {
-                transport: "direct" | "ohttp" | "anyone-socks";
+                transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
                 mechanism: string | null;
             };
             routing: {
@@ -1524,6 +1579,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 hash: string;
                 stateRoot: string;
                 finalized: boolean;
+                chainId?: number | undefined;
             };
             verification: {
                 status: "verified" | "unverified" | "unsupported";
@@ -1537,7 +1593,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 };
             };
             privacy: {
-                transport: "direct" | "ohttp" | "anyone-socks";
+                transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
                 mechanism?: string | null | undefined;
             };
             routing: {
@@ -1622,6 +1678,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 hash: string;
                 stateRoot: string;
                 finalized: boolean;
+                chainId?: number | undefined;
             };
             verification: {
                 status: "verified" | "unverified" | "unsupported";
@@ -1635,7 +1692,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 };
             };
             privacy: {
-                transport: "direct" | "ohttp" | "anyone-socks";
+                transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
                 mechanism: string | null;
             };
             routing: {
@@ -1687,6 +1744,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 hash: string;
                 stateRoot: string;
                 finalized: boolean;
+                chainId?: number | undefined;
             };
             verification: {
                 status: "verified" | "unverified" | "unsupported";
@@ -1700,7 +1758,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 };
             };
             privacy: {
-                transport: "direct" | "ohttp" | "anyone-socks";
+                transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
                 mechanism?: string | null | undefined;
             };
             routing: {
@@ -1759,6 +1817,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 hash: string;
                 stateRoot: string;
                 finalized: boolean;
+                chainId?: number | undefined;
             };
             verification: {
                 status: "verified" | "unverified" | "unsupported";
@@ -1772,7 +1831,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 };
             };
             privacy: {
-                transport: "direct" | "ohttp" | "anyone-socks";
+                transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
                 mechanism: string | null;
             };
             routing: {
@@ -1826,6 +1885,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 hash: string;
                 stateRoot: string;
                 finalized: boolean;
+                chainId?: number | undefined;
             };
             verification: {
                 status: "verified" | "unverified" | "unsupported";
@@ -1839,7 +1899,7 @@ declare const ReceiptListSchema: z.ZodObject<{
                 };
             };
             privacy: {
-                transport: "direct" | "ohttp" | "anyone-socks";
+                transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
                 mechanism?: string | null | undefined;
             };
             routing: {
@@ -1877,7 +1937,7 @@ declare const ProviderHealthSchema: z.ZodObject<{
     chainOk: z.ZodBoolean;
     proofSupport: z.ZodBoolean;
     eip1898: z.ZodBoolean;
-    transport: z.ZodDefault<z.ZodEnum<["direct", "ohttp", "anyone-socks"]>>;
+    transport: z.ZodDefault<z.ZodEnum<["direct", "ohttp", "anyone-socks", "anon-rpc"]>>;
     breaker: z.ZodObject<{
         state: z.ZodEnum<["closed", "open", "half-open"]>;
         cooldownUntil: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -1895,7 +1955,7 @@ declare const ProviderHealthSchema: z.ZodObject<{
     lastError: z.ZodOptional<z.ZodNullable<z.ZodString>>;
 }, "strip", z.ZodTypeAny, {
     name: string;
-    transport: "direct" | "ohttp" | "anyone-socks";
+    transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
     chainOk: boolean;
     proofSupport: boolean;
     eip1898: boolean;
@@ -1916,7 +1976,7 @@ declare const ProviderHealthSchema: z.ZodObject<{
         reason?: string | null | undefined;
         cooldownUntil?: number | null | undefined;
     };
-    transport?: "direct" | "ohttp" | "anyone-socks" | undefined;
+    transport?: "direct" | "ohttp" | "anyone-socks" | "anon-rpc" | undefined;
     successRate?: number | null | undefined;
     lastError?: string | null | undefined;
 }>;
@@ -1963,7 +2023,7 @@ declare const EngineHealthSchema: z.ZodEffects<z.ZodObject<{
         chainOk: z.ZodBoolean;
         proofSupport: z.ZodBoolean;
         eip1898: z.ZodBoolean;
-        transport: z.ZodDefault<z.ZodEnum<["direct", "ohttp", "anyone-socks"]>>;
+        transport: z.ZodDefault<z.ZodEnum<["direct", "ohttp", "anyone-socks", "anon-rpc"]>>;
         breaker: z.ZodObject<{
             state: z.ZodEnum<["closed", "open", "half-open"]>;
             cooldownUntil: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
@@ -1981,7 +2041,7 @@ declare const EngineHealthSchema: z.ZodEffects<z.ZodObject<{
         lastError: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     }, "strip", z.ZodTypeAny, {
         name: string;
-        transport: "direct" | "ohttp" | "anyone-socks";
+        transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
         chainOk: boolean;
         proofSupport: boolean;
         eip1898: boolean;
@@ -2002,7 +2062,7 @@ declare const EngineHealthSchema: z.ZodEffects<z.ZodObject<{
             reason?: string | null | undefined;
             cooldownUntil?: number | null | undefined;
         };
-        transport?: "direct" | "ohttp" | "anyone-socks" | undefined;
+        transport?: "direct" | "ohttp" | "anyone-socks" | "anon-rpc" | undefined;
         successRate?: number | null | undefined;
         lastError?: string | null | undefined;
     }>, "many">;
@@ -2052,7 +2112,7 @@ declare const EngineHealthSchema: z.ZodEffects<z.ZodObject<{
     devMode: boolean;
     providers: {
         name: string;
-        transport: "direct" | "ohttp" | "anyone-socks";
+        transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
         chainOk: boolean;
         proofSupport: boolean;
         eip1898: boolean;
@@ -2075,11 +2135,11 @@ declare const EngineHealthSchema: z.ZodEffects<z.ZodObject<{
         lastUpdateUnix?: number | null | undefined;
         headNumber?: number | null | undefined;
     };
+    chainId?: number | undefined;
     error?: {
         code: string;
         message: string;
     } | null | undefined;
-    chainId?: number | undefined;
     bind?: string | undefined;
 }, {
     rootSource: "local-light-client" | "fixture" | "untrusted-rpc" | null;
@@ -2093,7 +2153,7 @@ declare const EngineHealthSchema: z.ZodEffects<z.ZodObject<{
             reason?: string | null | undefined;
             cooldownUntil?: number | null | undefined;
         };
-        transport?: "direct" | "ohttp" | "anyone-socks" | undefined;
+        transport?: "direct" | "ohttp" | "anyone-socks" | "anon-rpc" | undefined;
         successRate?: number | null | undefined;
         lastError?: string | null | undefined;
     }[];
@@ -2108,12 +2168,12 @@ declare const EngineHealthSchema: z.ZodEffects<z.ZodObject<{
         lastUpdateUnix?: number | null | undefined;
         headNumber?: number | null | undefined;
     };
+    chainId?: number | undefined;
     ok?: boolean | undefined;
     error?: {
         code: string;
         message: string;
     } | null | undefined;
-    chainId?: number | undefined;
     bind?: string | undefined;
     devMode?: boolean | undefined;
 }>, {
@@ -2122,7 +2182,7 @@ declare const EngineHealthSchema: z.ZodEffects<z.ZodObject<{
     devMode: boolean;
     providers: {
         name: string;
-        transport: "direct" | "ohttp" | "anyone-socks";
+        transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
         chainOk: boolean;
         proofSupport: boolean;
         eip1898: boolean;
@@ -2145,11 +2205,11 @@ declare const EngineHealthSchema: z.ZodEffects<z.ZodObject<{
         lastUpdateUnix?: number | null | undefined;
         headNumber?: number | null | undefined;
     };
+    chainId?: number | undefined;
     error?: {
         code: string;
         message: string;
     } | null | undefined;
-    chainId?: number | undefined;
     bind?: string | undefined;
 }, unknown>;
 /** veriq_getCapabilities */
@@ -2169,6 +2229,428 @@ declare const CapabilitiesSchema: z.ZodObject<{
     blockPolicies: z.ZodDefault<z.ZodArray<z.ZodEnum<["finalized", "latest"]>, "many">>;
     privacy: z.ZodDefault<z.ZodBoolean>;
 }, z.ZodTypeAny, "passthrough">>;
+declare const DelegationStatusSchema: z.ZodUnion<[z.ZodObject<{
+    status: z.ZodEnum<["normal-eoa", "contract", "revoked", "invalid-designator"]>;
+}, "strip", z.ZodTypeAny, {
+    status: "normal-eoa" | "contract" | "revoked" | "invalid-designator";
+}, {
+    status: "normal-eoa" | "contract" | "revoked" | "invalid-designator";
+}>, z.ZodObject<{
+    status: z.ZodLiteral<"delegated">;
+    delegate: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    status: "delegated";
+    delegate: string;
+}, {
+    status: "delegated";
+    delegate: string;
+}>, z.ZodEnum<["normal-eoa", "delegated", "contract", "revoked", "invalid-designator"]>]>;
+declare const DelegationSecurityClassificationSchema: z.ZodEnum<["normal-eoa", "smart-contract", "delegation-detected", "delegation-revoked", "unverified-delegate", "delegate-code-verified", "potential-risk", "security-assessment-unavailable"]>;
+declare const DelegationResultSchema: z.ZodObject<{
+    address: z.ZodString;
+    status: z.ZodUnion<[z.ZodObject<{
+        status: z.ZodEnum<["normal-eoa", "contract", "revoked", "invalid-designator"]>;
+    }, "strip", z.ZodTypeAny, {
+        status: "normal-eoa" | "contract" | "revoked" | "invalid-designator";
+    }, {
+        status: "normal-eoa" | "contract" | "revoked" | "invalid-designator";
+    }>, z.ZodObject<{
+        status: z.ZodLiteral<"delegated">;
+        delegate: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        status: "delegated";
+        delegate: string;
+    }, {
+        status: "delegated";
+        delegate: string;
+    }>, z.ZodEnum<["normal-eoa", "delegated", "contract", "revoked", "invalid-designator"]>]>;
+    isDelegated: z.ZodBoolean;
+    delegateAddress: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    codeHash: z.ZodString;
+    delegateCodeHash: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    securityClassification: z.ZodEnum<["normal-eoa", "smart-contract", "delegation-detected", "delegation-revoked", "unverified-delegate", "delegate-code-verified", "potential-risk", "security-assessment-unavailable"]>;
+    blockNumber: z.ZodOptional<z.ZodNumber>;
+    verified: z.ZodDefault<z.ZodBoolean>;
+    receipt: z.ZodObject<{
+        identity: z.ZodObject<{
+            requestId: z.ZodString;
+            method: z.ZodString;
+            requestBinding: z.ZodString;
+            resultBinding: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            requestId: string;
+            method: string;
+            requestBinding: string;
+            resultBinding: string;
+        }, {
+            requestId: string;
+            method: string;
+            requestBinding: string;
+            resultBinding: string;
+        }>;
+        block: z.ZodObject<{
+            number: z.ZodNumber;
+            hash: z.ZodString;
+            stateRoot: z.ZodString;
+            finalized: z.ZodBoolean;
+            /** S6: the chain this block is on. Absent in receipts from engines before mainnet support. */
+            chainId: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            number: number;
+            hash: string;
+            stateRoot: string;
+            finalized: boolean;
+            chainId?: number | undefined;
+        }, {
+            number: number;
+            hash: string;
+            stateRoot: string;
+            finalized: boolean;
+            chainId?: number | undefined;
+        }>;
+        verification: z.ZodObject<{
+            status: z.ZodEnum<["verified", "unverified", "unsupported"]>;
+            rootSource: z.ZodEnum<["local-light-client", "fixture", "untrusted-rpc"]>;
+            verifierLocation: z.ZodEnum<["local-engine", "remote-engine", "browser"]>;
+            mechanisms: z.ZodArray<z.ZodEnum<["account-proof", "storage-proof", "code-hash"]>, "many">;
+            bootstrap: z.ZodObject<{
+                source: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                checkpoint: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+                checkpointSource: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            }, "strip", z.ZodTypeAny, {
+                source: string | null;
+                checkpoint: string | null;
+                checkpointSource: string | null;
+            }, {
+                source?: string | null | undefined;
+                checkpoint?: string | null | undefined;
+                checkpointSource?: string | null | undefined;
+            }>;
+        }, "strip", z.ZodTypeAny, {
+            status: "verified" | "unverified" | "unsupported";
+            rootSource: "local-light-client" | "fixture" | "untrusted-rpc";
+            verifierLocation: "local-engine" | "remote-engine" | "browser";
+            mechanisms: ("account-proof" | "storage-proof" | "code-hash")[];
+            bootstrap: {
+                source: string | null;
+                checkpoint: string | null;
+                checkpointSource: string | null;
+            };
+        }, {
+            status: "verified" | "unverified" | "unsupported";
+            rootSource: "local-light-client" | "fixture" | "untrusted-rpc";
+            verifierLocation: "local-engine" | "remote-engine" | "browser";
+            mechanisms: ("account-proof" | "storage-proof" | "code-hash")[];
+            bootstrap: {
+                source?: string | null | undefined;
+                checkpoint?: string | null | undefined;
+                checkpointSource?: string | null | undefined;
+            };
+        }>;
+        privacy: z.ZodObject<{
+            transport: z.ZodEnum<["direct", "ohttp", "anyone-socks", "anon-rpc"]>;
+            mechanism: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
+            mechanism: string | null;
+        }, {
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
+            mechanism?: string | null | undefined;
+        }>;
+        routing: z.ZodObject<{
+            comparison: z.ZodEnum<["not-run", "agree", "divergent"]>;
+            providersTried: z.ZodNumber;
+            providerLabel: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+            attempts: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                provider: z.ZodString;
+                outcome: z.ZodEnum<["success", "transport-failure", "provider-error", "invalid-proof"]>;
+                elapsedMs: z.ZodNumber;
+                failureReason: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            }, "strip", z.ZodTypeAny, {
+                provider: string;
+                outcome: "success" | "transport-failure" | "provider-error" | "invalid-proof";
+                elapsedMs: number;
+                failureReason?: string | null | undefined;
+            }, {
+                provider: string;
+                outcome: "success" | "transport-failure" | "provider-error" | "invalid-proof";
+                elapsedMs: number;
+                failureReason?: string | null | undefined;
+            }>, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            comparison: "not-run" | "agree" | "divergent";
+            providersTried: number;
+            providerLabel: string | null;
+            attempts: {
+                provider: string;
+                outcome: "success" | "transport-failure" | "provider-error" | "invalid-proof";
+                elapsedMs: number;
+                failureReason?: string | null | undefined;
+            }[];
+        }, {
+            comparison: "not-run" | "agree" | "divergent";
+            providersTried: number;
+            providerLabel?: string | null | undefined;
+            attempts?: {
+                provider: string;
+                outcome: "success" | "transport-failure" | "provider-error" | "invalid-proof";
+                elapsedMs: number;
+                failureReason?: string | null | undefined;
+            }[] | undefined;
+        }>;
+        freshness: z.ZodObject<{
+            observedAt: z.ZodNumber;
+            ageSeconds: z.ZodNumber;
+            pinned: z.ZodBoolean;
+        }, "strip", z.ZodTypeAny, {
+            observedAt: number;
+            ageSeconds: number;
+            pinned: boolean;
+        }, {
+            observedAt: number;
+            ageSeconds: number;
+            pinned: boolean;
+        }>;
+        warnings: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            code: z.ZodString;
+            message: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            code: string;
+            message: string;
+        }, {
+            code: string;
+            message: string;
+        }>, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        identity: {
+            requestId: string;
+            method: string;
+            requestBinding: string;
+            resultBinding: string;
+        };
+        block: {
+            number: number;
+            hash: string;
+            stateRoot: string;
+            finalized: boolean;
+            chainId?: number | undefined;
+        };
+        verification: {
+            status: "verified" | "unverified" | "unsupported";
+            rootSource: "local-light-client" | "fixture" | "untrusted-rpc";
+            verifierLocation: "local-engine" | "remote-engine" | "browser";
+            mechanisms: ("account-proof" | "storage-proof" | "code-hash")[];
+            bootstrap: {
+                source: string | null;
+                checkpoint: string | null;
+                checkpointSource: string | null;
+            };
+        };
+        privacy: {
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
+            mechanism: string | null;
+        };
+        routing: {
+            comparison: "not-run" | "agree" | "divergent";
+            providersTried: number;
+            providerLabel: string | null;
+            attempts: {
+                provider: string;
+                outcome: "success" | "transport-failure" | "provider-error" | "invalid-proof";
+                elapsedMs: number;
+                failureReason?: string | null | undefined;
+            }[];
+        };
+        freshness: {
+            observedAt: number;
+            ageSeconds: number;
+            pinned: boolean;
+        };
+        warnings: {
+            code: string;
+            message: string;
+        }[];
+    }, {
+        identity: {
+            requestId: string;
+            method: string;
+            requestBinding: string;
+            resultBinding: string;
+        };
+        block: {
+            number: number;
+            hash: string;
+            stateRoot: string;
+            finalized: boolean;
+            chainId?: number | undefined;
+        };
+        verification: {
+            status: "verified" | "unverified" | "unsupported";
+            rootSource: "local-light-client" | "fixture" | "untrusted-rpc";
+            verifierLocation: "local-engine" | "remote-engine" | "browser";
+            mechanisms: ("account-proof" | "storage-proof" | "code-hash")[];
+            bootstrap: {
+                source?: string | null | undefined;
+                checkpoint?: string | null | undefined;
+                checkpointSource?: string | null | undefined;
+            };
+        };
+        privacy: {
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
+            mechanism?: string | null | undefined;
+        };
+        routing: {
+            comparison: "not-run" | "agree" | "divergent";
+            providersTried: number;
+            providerLabel?: string | null | undefined;
+            attempts?: {
+                provider: string;
+                outcome: "success" | "transport-failure" | "provider-error" | "invalid-proof";
+                elapsedMs: number;
+                failureReason?: string | null | undefined;
+            }[] | undefined;
+        };
+        freshness: {
+            observedAt: number;
+            ageSeconds: number;
+            pinned: boolean;
+        };
+        warnings?: {
+            code: string;
+            message: string;
+        }[] | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    verified: boolean;
+    status: "normal-eoa" | "contract" | "revoked" | "invalid-designator" | {
+        status: "normal-eoa" | "contract" | "revoked" | "invalid-designator";
+    } | "delegated" | {
+        status: "delegated";
+        delegate: string;
+    };
+    receipt: {
+        identity: {
+            requestId: string;
+            method: string;
+            requestBinding: string;
+            resultBinding: string;
+        };
+        block: {
+            number: number;
+            hash: string;
+            stateRoot: string;
+            finalized: boolean;
+            chainId?: number | undefined;
+        };
+        verification: {
+            status: "verified" | "unverified" | "unsupported";
+            rootSource: "local-light-client" | "fixture" | "untrusted-rpc";
+            verifierLocation: "local-engine" | "remote-engine" | "browser";
+            mechanisms: ("account-proof" | "storage-proof" | "code-hash")[];
+            bootstrap: {
+                source: string | null;
+                checkpoint: string | null;
+                checkpointSource: string | null;
+            };
+        };
+        privacy: {
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
+            mechanism: string | null;
+        };
+        routing: {
+            comparison: "not-run" | "agree" | "divergent";
+            providersTried: number;
+            providerLabel: string | null;
+            attempts: {
+                provider: string;
+                outcome: "success" | "transport-failure" | "provider-error" | "invalid-proof";
+                elapsedMs: number;
+                failureReason?: string | null | undefined;
+            }[];
+        };
+        freshness: {
+            observedAt: number;
+            ageSeconds: number;
+            pinned: boolean;
+        };
+        warnings: {
+            code: string;
+            message: string;
+        }[];
+    };
+    address: string;
+    isDelegated: boolean;
+    codeHash: string;
+    securityClassification: "normal-eoa" | "smart-contract" | "delegation-detected" | "delegation-revoked" | "unverified-delegate" | "delegate-code-verified" | "potential-risk" | "security-assessment-unavailable";
+    blockNumber?: number | undefined;
+    delegateAddress?: string | null | undefined;
+    delegateCodeHash?: string | null | undefined;
+}, {
+    status: "normal-eoa" | "contract" | "revoked" | "invalid-designator" | {
+        status: "normal-eoa" | "contract" | "revoked" | "invalid-designator";
+    } | "delegated" | {
+        status: "delegated";
+        delegate: string;
+    };
+    receipt: {
+        identity: {
+            requestId: string;
+            method: string;
+            requestBinding: string;
+            resultBinding: string;
+        };
+        block: {
+            number: number;
+            hash: string;
+            stateRoot: string;
+            finalized: boolean;
+            chainId?: number | undefined;
+        };
+        verification: {
+            status: "verified" | "unverified" | "unsupported";
+            rootSource: "local-light-client" | "fixture" | "untrusted-rpc";
+            verifierLocation: "local-engine" | "remote-engine" | "browser";
+            mechanisms: ("account-proof" | "storage-proof" | "code-hash")[];
+            bootstrap: {
+                source?: string | null | undefined;
+                checkpoint?: string | null | undefined;
+                checkpointSource?: string | null | undefined;
+            };
+        };
+        privacy: {
+            transport: "direct" | "ohttp" | "anyone-socks" | "anon-rpc";
+            mechanism?: string | null | undefined;
+        };
+        routing: {
+            comparison: "not-run" | "agree" | "divergent";
+            providersTried: number;
+            providerLabel?: string | null | undefined;
+            attempts?: {
+                provider: string;
+                outcome: "success" | "transport-failure" | "provider-error" | "invalid-proof";
+                elapsedMs: number;
+                failureReason?: string | null | undefined;
+            }[] | undefined;
+        };
+        freshness: {
+            observedAt: number;
+            ageSeconds: number;
+            pinned: boolean;
+        };
+        warnings?: {
+            code: string;
+            message: string;
+        }[] | undefined;
+    };
+    address: string;
+    isDelegated: boolean;
+    codeHash: string;
+    securityClassification: "normal-eoa" | "smart-contract" | "delegation-detected" | "delegation-revoked" | "unverified-delegate" | "delegate-code-verified" | "potential-risk" | "security-assessment-unavailable";
+    verified?: boolean | undefined;
+    blockNumber?: number | undefined;
+    delegateAddress?: string | null | undefined;
+    delegateCodeHash?: string | null | undefined;
+}>;
 /** "receipt.block.stateRoot: expected 0x-hex, got undefined" */
 declare function formatIssues(error: z.ZodError, input: unknown, root: string): string[];
 
@@ -2211,6 +2693,15 @@ interface VerifiedResult<T> {
     /** Every provider attempt, including rejected ones. Empty if the engine didn't report them. */
     attempts: Attempt[];
 }
+/** EIP-7702 delegation detection result from the engine or local private verification. */
+type DelegationStatus = z.infer<typeof DelegationStatusSchema>;
+type DelegationSecurityClassification = z.infer<typeof DelegationSecurityClassificationSchema>;
+type DelegationResult = z.infer<typeof DelegationResultSchema>;
+interface DelegationOptions {
+    address: string;
+    policy?: Policy;
+    signal?: AbortSignal;
+}
 
 interface VeriqTransportOptions {
     /** Policy for verified reads. Default: the client's policy. */
@@ -2220,7 +2711,7 @@ interface VeriqTransportOptions {
      * Default: true when the policy requires verification.
      */
     strict?: boolean;
-    /** Called with every receipt from a verified read. */
+    /** Called with every receipt from a verified read, including eth_getTransactionCount and eth_getCode. */
     onReceipt?: (receipt: TrustReceipt) => void;
 }
 /** A viem Transport that also exposes the latest receipt. */
@@ -2274,6 +2765,13 @@ interface VeriqClient {
         address: string;
         slot: string;
     } & ReadOptions): Promise<VerifiedResult<Hex>>;
+    /**
+     * Proven EIP-7702 delegation detection result and Trust Receipt.
+     * @example const res = await veriq.getDelegation({ address: '0x…' })
+     */
+    getDelegation(args: {
+        address: string;
+    } & ReadOptions): Promise<DelegationResult>;
     /**
      * A stored Trust Receipt by request id (veriq_getReceipt).
      * @example const receipt = await veriq.getReceipt(result.receipt.identity.requestId)
@@ -2305,7 +2803,18 @@ interface VeriqClient {
      */
     capabilities(): Promise<Capabilities>;
     /**
-     * viem transport. eth_getBalance / eth_getStorageAt go through the verified path.
+     * The finalized block the engine verifies against (veriq_getRoot). A client that fetches
+     * its own proofs (Anon-RPC) asks the provider for exactly this block.
+     * @example const { number, hash } = await veriq.getRoot()
+     */
+    getRoot(): Promise<RootInfo>;
+    /**
+     * Verify an eth_getProof result the client fetched itself (veriq_verifyProof). Used by
+     * `createPrivateReader`; the engine checks it against its own pinned root.
+     */
+    verifyProof(input: ClientProofInput, policy?: Policy): Promise<VerifiedResult<Hex>>;
+    /**
+     * viem transport. eth_getBalance / eth_getStorageAt go through the verified path; every receipt lands in lastReceipt.
      * @example createPublicClient({ chain: sepolia, transport: veriq.transport() })
      */
     transport(opts?: VeriqTransportOptions): VeriqTransport;
@@ -2319,6 +2828,53 @@ interface VeriqClient {
      * @example await veriq.request('eth_chainId')
      */
     request(method: string, params?: unknown[]): Promise<unknown>;
+    /**
+     * Raw JSON-RPC call that also returns the Trust Receipt the engine attaches to
+     * verified standard reads (eth_getBalance, eth_getStorageAt, eth_getTransactionCount,
+     * eth_getCode at "finalized"). `receipt` is undefined for methods that carry none.
+     * @example const { result, receipt } = await veriq.requestWithReceipt('eth_getCode', [address, 'finalized'])
+     */
+    requestWithReceipt(method: string, params?: unknown[]): Promise<RawResult>;
+}
+/** veriq_getRoot result. */
+type RootInfo = z.output<typeof RootInfoSchema>;
+/** veriq_verifyProof input: a proof the client fetched (through Anon-RPC) at `blockHash`. */
+interface ClientProofInput {
+    kind: 'balance' | 'nonce' | 'storage' | 'code';
+    address: string;
+    slot?: string;
+    /** The block from `getRoot()` the proof was fetched for. */
+    blockHash: string;
+    /** The raw eth_getProof result. */
+    proof: unknown;
+    /** The raw eth_getCode result (kind `code`). */
+    code?: unknown;
+    /** Provider label (never a URL). */
+    provider: string;
+    /** Anonymizing network, e.g. `nox`. */
+    network: string;
+    elapsedMs?: number;
+    /**
+     * The same finalized block, as a light client in the browser reported it (S4.2). The engine
+     * refuses the proof with ROOT_MISMATCH unless it is exactly its own pinned block.
+     */
+    browserRoot?: BrowserRoot;
+    /**
+     * S5: `browser` when the client checked this proof itself first (the engine checks it again and
+     * marks the receipt `verifierLocation: "browser"`); `unavailable` when its verifier did not load.
+     */
+    verifier?: 'browser' | 'unavailable';
+}
+/** A finalized block from a light client running in the browser (e.g. Helios over Nox). */
+interface BrowserRoot {
+    number: number;
+    hash: string;
+    stateRoot: string;
+}
+/** `requestWithReceipt` result: the JSON-RPC `result` and the validated receipt, if any. */
+interface RawResult {
+    result: unknown;
+    receipt: TrustReceipt | undefined;
 }
 /** Receipt attempts (receipt.rs) in the display form used by VerifiedResult and the components. */
 declare function attemptsFromReceipt(receipt: TrustReceipt): Attempt[];
@@ -2349,6 +2905,7 @@ declare const ERROR_CODES: {
     readonly POLICY_UNSATISFIABLE: -32014;
     readonly PROVIDER_TIMEOUT: -32015;
     readonly ALL_PROVIDERS_FAILED: -32016;
+    readonly ROOT_MISMATCH: -32017;
     readonly INVALID_REQUEST: -32602;
     readonly INTERNAL_ERROR: -32603;
 };
@@ -2356,6 +2913,7 @@ declare const ERROR_CODES: {
 declare const CLIENT_CODES: {
     readonly ENGINE_UNREACHABLE: -1;
     readonly SCHEMA_MISMATCH: -2;
+    readonly CHAIN_MISMATCH: -3;
 };
 type EngineErrorName = keyof typeof ERROR_CODES;
 type VeriqErrorName = EngineErrorName | keyof typeof CLIENT_CODES | 'UNKNOWN';
@@ -2406,10 +2964,16 @@ declare class ProviderTimeoutError extends VeriqError {
 }
 declare class AllProvidersFailedError extends VeriqError {
 }
+/** The browser light client and the engine disagree about the same finalized block. */
+declare class RootMismatchError extends VeriqError {
+}
 declare class InvalidRequestError extends VeriqError {
 }
 declare class InternalError extends VeriqError {
 }
+/** The engine serves another chain than the one this client reads (S6). Nothing was read. */
+declare class ChainMismatchError extends VeriqError {
+}
 /** The engine could not be reached (network failure, nothing listening). */
 declare class EngineUnreachableError extends VeriqError {
 }
@@ -2436,6 +3000,208 @@ declare function errorFromRpc(err: {
  */
 declare function isVeriqError(e: unknown): e is VeriqError;
 
+/**
+ * The Veriq proof verifier compiled to WebAssembly (backend/crates/verifier-wasm), for checking
+ * proofs in the browser (S5). It runs the same Rust code as the engine's own reads.
+ *
+ * The .wasm ships with this package as `veriq-client/verifier.wasm` (~205 KB, ~78 KB gzip).
+ * Load it once, lazily:
+ *
+ * @example
+ * import wasmUrl from 'veriq-client/verifier.wasm?url' // Vite; any URL or bytes work
+ * const verifier = await loadVerifier(wasmUrl)
+ * verifier.verifyRead({ stateRoot, address, kind: 'balance', proof }) // { ok: true, value: '0x…' }
+ */
+
+/** The ABI this SDK speaks (crates/verifier-wasm `ABI_VERSION`). */
+declare const VERIFIER_ABI_VERSION = 2;
+interface VerifyReadInput {
+    /** The trusted state root the proof must chain to. */
+    stateRoot: string;
+    address: string;
+    kind: 'balance' | 'nonce' | 'storage' | 'code';
+    slot?: string;
+    /** The raw `eth_getProof` result. */
+    proof: unknown;
+    /** The raw `eth_getCode` result (kind `code`). */
+    code?: unknown;
+}
+/** `value`: a `0x` quantity (balance, nonce, storage) or the bytecode (code). */
+type VerifyReadOutcome = {
+    ok: true;
+    value: string;
+} | {
+    ok: false;
+    code: 'INVALID_PROOF' | 'INVALID_REQUEST' | 'INTERNAL_ERROR' | string;
+    error: string;
+};
+interface BrowserVerifier {
+    /** Check one read exactly as the engine does. Never throws for a bad proof: see `ok`. */
+    verifyRead(input: VerifyReadInput): VerifyReadOutcome;
+    /** The engine's receipt binding: keccak256(method || canonical JSON), lowercase hex. */
+    binding(method: string, value: unknown): string;
+    readonly abiVersion: number;
+}
+/** Something the verifier can be loaded from. */
+type VerifierSource = string | URL | Response | ArrayBuffer | ArrayBufferView | WebAssembly.Module;
+/** The WebAssembly verifier could not be loaded or does not speak this SDK's ABI. */
+declare class VerifierUnavailableError extends VeriqError {
+    constructor(message: string, cause?: unknown);
+}
+/** Load and check the verifier. Rejects with {@link VerifierUnavailableError}. */
+declare function loadVerifier(source: VerifierSource): Promise<BrowserVerifier>;
+
+/**
+ * Private reads: the provider request goes through a fetch you supply (Anon-RPC), the proof is
+ * verified by the engine against its own Helios root. The engine never contacts the provider
+ * for these reads, so the provider sees the anonymizing network's exit, not your IP.
+ *
+ * @example
+ * import { AnonRpcWorker } from '@anon-rpc/browser-harness'
+ * const nox = new AnonRpcWorker({ address: NOX_SEPOLIA, preExisting: { rpcProvider } })
+ * const reader = createPrivateReader(veriq, {
+ *   fetch: nox.fetch,
+ *   network: 'nox',
+ *   providers: [{ label: 'publicnode', url: 'https://ethereum-sepolia-rpc.publicnode.com' }],
+ * })
+ * const { value, receipt } = await reader.readBalance({ address })
+ * receipt.privacy.transport // 'anon-rpc'
+ */
+
+/** A provider the private reader may ask, through the anonymizing fetch. */
+interface PrivateProvider {
+    /** Shown in receipts and logs (1-64 of letters, digits, `_`, `-`, `.`). Never the URL. */
+    label: string;
+    /** HTTPS JSON-RPC endpoint. It must allow browser requests (CORS) and serve `eth_getProof`. */
+    url: string;
+}
+interface PrivateReaderOptions {
+    /** The anonymizing fetch, e.g. `AnonRpcWorker.fetch` from `@anon-rpc/browser-harness`. */
+    fetch: (input: string, init?: RequestInit) => Promise<Response>;
+    /** Network name recorded in the receipt (`privacy.mechanism`), e.g. `'nox'`. Same rules as a label. */
+    network: string;
+    /** Tried in order; the next one is used when a provider fails or sends a bad proof. */
+    providers: PrivateProvider[];
+    /** Per provider request. Default 30 s (mixnets add per-hop delay). */
+    timeoutMs?: number;
+    /** Tests only: allow `http://` to localhost / 127.0.0.1 / [::1]. Every other URL must be HTTPS. */
+    allowInsecureLoopback?: boolean;
+    /**
+     * A light client in the browser (S4.2, e.g. Helios synced over Nox). When it is synced, the
+     * read uses its finalized block and the engine's `veriq_getRoot` must be the very same block:
+     * a different hash or state root for that number is a ROOT_MISMATCH and nothing is read.
+     * While it is not synced (`null`), the engine's root is used alone and the receipt has no
+     * BROWSER_LIGHT_CLIENT marker.
+     */
+    lightClient?: BrowserLightClient;
+    /**
+     * How long the two light clients may disagree about *which* block is finalized (one is a
+     * few seconds behind at an epoch boundary) before the read gives up. Default 30 s.
+     */
+    alignTimeoutMs?: number;
+    /**
+     * S5: check every proof in the browser first (the WebAssembly build of the engine's verifier,
+     * see `loadVerifier`). A proof that fails here never reaches the engine: the next provider is
+     * asked. The engine still checks what it is sent and marks the receipt
+     * `verifierLocation: "browser"`. A function is called once, on the first read (lazy load); if
+     * it rejects, the engine verifies alone and the receipt carries BROWSER_VERIFIER_UNAVAILABLE.
+     *
+     * With a synced `lightClient` too, a read needs no engine at all: if the engine cannot be
+     * reached, the value comes back with a receipt made in the browser (LOCAL_ONLY warning,
+     * `identity.requestId` starting `local-`), which the engine never stored.
+     */
+    verifier?: BrowserVerifier | (() => Promise<BrowserVerifier>);
+    /**
+     * S6: the chain this reader reads (1 mainnet, 11155111 Sepolia). When set, `network` must be
+     * one that serves it ({@link PRIVATE_NETWORKS}: Nox on Sepolia, Nym or Tor on mainnet),
+     * else createPrivateReader throws PrivacyUnavailableError; and an engine whose
+     * `veriq_getRoot` names another chain fails the read with ChainMismatchError.
+     */
+    chainId?: number;
+}
+/**
+ * Which anonymizing networks may carry private reads for a chain. The network follows the
+ * chain; a reader never falls back to another one (or to a direct request).
+ */
+declare const PRIVATE_NETWORKS: Readonly<Record<number, readonly string[]>>;
+/** Throws PrivacyUnavailableError unless `network` serves `chainId`. */
+declare function assertNetworkForChain(chainId: number, network: string): void;
+/** A light client running in the browser that reports its latest finalized block. */
+interface BrowserLightClient {
+    /** The finalized block, or `null` while not synced (or stale, or failed). */
+    finalized(): Promise<BrowserRoot | null>;
+}
+interface PrivateReader {
+    readBalance(args: {
+        address: string;
+        policy?: Policy;
+    }): Promise<VerifiedResult<bigint>>;
+    readStorage(args: {
+        address: string;
+        slot: string;
+        policy?: Policy;
+    }): Promise<VerifiedResult<Hex>>;
+    readNonce(args: {
+        address: string;
+        policy?: Policy;
+    }): Promise<VerifiedResult<bigint>>;
+    readCode(args: {
+        address: string;
+        policy?: Policy;
+    }): Promise<VerifiedResult<Hex>>;
+    getDelegation(args: {
+        address: string;
+        policy?: Policy;
+    }): Promise<DelegationResult>;
+}
+declare function createPrivateReader(client: VeriqClient, opts: PrivateReaderOptions): PrivateReader;
+
+/** The 3-byte EIP-7702 delegation prefix `0xef0100`. */
+declare const EIP7702_PREFIX = "0xef0100";
+/** Total byte length of a valid EIP-7702 delegation designator: 3 prefix + 20 address = 23 bytes. */
+declare const DESIGNATOR_BYTE_LENGTH = 23;
+/** Total length in hex chars including '0x' prefix: 2 + 46 = 48 chars. */
+declare const DESIGNATOR_HEX_LENGTH = 48;
+declare const ZERO_ADDRESS: Address;
+type DelegationCodeStatus = {
+    status: 'normal-eoa';
+} | {
+    status: 'delegated';
+    delegate: Address;
+} | {
+    status: 'contract';
+} | {
+    status: 'revoked';
+} | {
+    status: 'invalid-designator';
+};
+interface ParsedDesignator {
+    isDesignator: boolean;
+    delegate: Address | null;
+    isRevoked: boolean;
+    isMalformed: boolean;
+}
+/**
+ * Parse an EIP-7702 delegation designator from hex-encoded bytecode.
+ *
+ * Rules:
+ * - Empty code (`0x` or `""`) is not a designator.
+ * - Bytecode starting with `0xef0100`:
+ *   - Exactly 23 bytes (48 hex chars including `0x`): valid designator.
+ *     If delegate is 0x00..00, it is a revoked/cleared delegation.
+ *   - Any other length: malformed designator.
+ * - Any other non-empty bytecode: not a designator (standard contract code).
+ */
+declare function parseDelegationDesignator(code: string): ParsedDesignator;
+/**
+ * Classify account code according to EIP-7702.
+ */
+declare function classifyAccountCode(code: string): {
+    status: DelegationCodeStatus;
+    isDelegated: boolean;
+    delegateAddress: Address | null;
+};
+
 /**
  * Only proven answers, pinned to finalized blocks. The default.
  * @example createVeriq({ policy: verifiedFinalized })
@@ -2562,4 +3328,4 @@ declare function prettyHealth(health: EngineHealth, opts?: PrettyOptions): strin
  */
 declare function prettyError(err: VeriqError, opts?: PrettyOptions): string;
 
-export { type Address, AllProvidersFailedError, type Attempt, type AttemptOutcome, AttemptOutcomeSchema, AttemptSchema, BlockPolicySchema, BlockSchema, BootstrapSchema, type BreakerState, BreakerStateSchema, CLIENT_CODES, type Capabilities, CapabilitiesSchema, type Comparison, ComparisonSchema, DEFAULT_ENGINE_URL, ERROR_CLASSES, ERROR_CODES, ERROR_HINTS, ERROR_MEANINGS, type EngineErrorName, type EngineHealth, EngineHealthSchema, EngineUnreachableError, FreshnessSchema, type Hex, Hex32Schema, IdentitySchema, InternalError, InvalidProofError, InvalidRequestError, type LightClientStatus, LightClientStatusSchema, type Mechanism, MechanismSchema, OUTCOME_LABEL, type Policy, PolicySchema, PolicyUnsatisfiableError, type PresetName, type PrettyOptions, PrivacySchema, PrivacyUnavailableError, type ProviderHealth, ProviderHealthSchema, ProviderTimeoutError, type ReadOptions, ReadResultSchema, type ReceiptInput, ReceiptListSchema, type ReceiptRecord, ReceiptRecordSchema, type ReceiptRow, type RootSource, RootSourceSchema, RootUnavailableError, type RoutingAttempt, RoutingAttemptSchema, RoutingSchema, type RowTone, type RpcErrorObject, RpcErrorSchema, type TransportKind, TransportKindSchema, type TrustReceipt, TrustReceiptSchema, UnsupportedVerificationError, VerificationPolicySchema, VerificationSchema, type VerificationStatus, VerificationStatusSchema, type VerifiedResult, type VerifierLocation, VerifierLocationSchema, type VeriqClient, VeriqError, type VeriqErrorName, type VeriqErrorOptions, type VeriqOptions, VeriqSchemaError, type VeriqTransport, type VeriqTransportOptions, WarningSchema, assertAddress, assertPolicy, assertSlot, attemptsFromReceipt, createTransport, createVeriq, devUnverified, errorFromRpc, errorNameForCode, formatEth, formatIssues, formatNumber, formatReceipt, healthRows, isVeriqError, presets, prettyError, prettyHealth, prettyReceipt, privateVerified, receiptRows, rootSourceLabel, shortHash, statusTone, supportsColor, verifiedCompare, verifiedFinalized };
+export { type Address, AllProvidersFailedError, type Attempt, type AttemptOutcome, AttemptOutcomeSchema, AttemptSchema, BlockPolicySchema, BlockSchema, BootstrapSchema, type BreakerState, BreakerStateSchema, type BrowserLightClient, type BrowserRoot, type BrowserVerifier, CLIENT_CODES, type Capabilities, CapabilitiesSchema, ChainMismatchError, type ClientProofInput, type Comparison, ComparisonSchema, DEFAULT_ENGINE_URL, DESIGNATOR_BYTE_LENGTH, DESIGNATOR_HEX_LENGTH, type DelegationCodeStatus, type DelegationOptions, type DelegationResult, DelegationResultSchema, type DelegationSecurityClassification, DelegationSecurityClassificationSchema, type DelegationStatus, DelegationStatusSchema, EIP7702_PREFIX, ERROR_CLASSES, ERROR_CODES, ERROR_HINTS, ERROR_MEANINGS, type EngineErrorName, type EngineHealth, EngineHealthSchema, EngineUnreachableError, FreshnessSchema, type Hex, Hex32Schema, IdentitySchema, InternalError, InvalidProofError, InvalidRequestError, type LightClientStatus, LightClientStatusSchema, type Mechanism, MechanismSchema, OUTCOME_LABEL, PRIVATE_NETWORKS, type ParsedDesignator, type Policy, PolicySchema, PolicyUnsatisfiableError, type PresetName, type PrettyOptions, PrivacySchema, PrivacyUnavailableError, type PrivateProvider, type PrivateReader, type PrivateReaderOptions, type ProviderHealth, ProviderHealthSchema, ProviderTimeoutError, type RawResult, type ReadOptions, ReadResultSchema, type ReceiptInput, ReceiptListSchema, type ReceiptRecord, ReceiptRecordSchema, type ReceiptRow, type RootInfo, RootInfoSchema, RootMismatchError, type RootSource, RootSourceSchema, RootUnavailableError, type RoutingAttempt, RoutingAttemptSchema, RoutingSchema, type RowTone, type RpcErrorObject, RpcErrorSchema, type TransportKind, TransportKindSchema, type TrustReceipt, TrustReceiptSchema, UnsupportedVerificationError, VERIFIER_ABI_VERSION, VerificationPolicySchema, VerificationSchema, type VerificationStatus, VerificationStatusSchema, type VerifiedResult, type VerifierLocation, VerifierLocationSchema, type VerifierSource, VerifierUnavailableError, type VerifyReadInput, type VerifyReadOutcome, type VeriqClient, VeriqError, type VeriqErrorName, type VeriqErrorOptions, type VeriqOptions, VeriqSchemaError, type VeriqTransport, type VeriqTransportOptions, WarningSchema, ZERO_ADDRESS, assertAddress, assertNetworkForChain, assertPolicy, assertSlot, attemptsFromReceipt, classifyAccountCode, createPrivateReader, createTransport, createVeriq, devUnverified, errorFromRpc, errorNameForCode, formatEth, formatIssues, formatNumber, formatReceipt, healthRows, isVeriqError, loadVerifier, parseDelegationDesignator, presets, prettyError, prettyHealth, prettyReceipt, privateVerified, receiptRows, rootSourceLabel, shortHash, statusTone, supportsColor, verifiedCompare, verifiedFinalized };