zklicensing 0.1.0-beta.2 → 0.1.0-beta.21

package/build/deployClient.js

@@ -1,5 +1,5 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 function baseUrl(url) {
     return url.replace(/\/+$/, '');
 }
@@ -12,13 +12,13 @@ async function readJsonError(resp) {
     catch { /* body wasn't JSON */ }
     return `HTTP ${resp.status}`;
 }
-// POST /prove/deploy — keeper generates the throwaway zkApp keypair, assembles
-// the deploy+initialize tx, proves it, and signs the zkApp AccountUpdate with
-// the throwaway key. The caller forwards `provenTxJson` to the vendor's wallet
-// for the fee-payer signature.
+// POST /prove/deploy — the backend generates the throwaway zkApp keypair,
+// assembles the deploy+initialize tx, proves it, and signs the zkApp
+// AccountUpdate with the throwaway key. The caller forwards `provenTxJson` to
+// the vendor's wallet for the fee-payer signature.
 //
-// At least one of the three prices must be > 0 (enforced by the keeper *and*
-// by the circuit's `initialize()`).
+// At least one of the four tier prices must be > 0 (enforced by the backend
+// *and* by the circuit's `initialize()`).
 export async function proveDeploy(req) {
     const fetcher = req.fetcher ?? fetch;
     const resp = await fetcher(`${baseUrl(req.keeperUrl)}/prove/deploy`, {
@@ -31,14 +31,20 @@ export async function proveDeploy(req) {
             priceMonthlyMina: req.priceMonthlyMina,
             priceYearlyMina: req.priceYearlyMina,
             priceFiveYearMina: req.priceFiveYearMina,
+            pricePerpetualMina: req.pricePerpetualMina,
+            deviceCap: req.deviceCap,
+            ...(req.forkActivationSlot !== undefined ? { forkActivationSlot: req.forkActivationSlot } : {}),
+            ...(req.network ? { network: req.network } : {}),
+            ...(req.website ? { website: req.website } : {}),
+            ...(req.payoutAddress ? { payoutAddress: req.payoutAddress } : {}),
         }),
     });
     if (!resp.ok)
         throw new Error(await readJsonError(resp));
     return await resp.json();
 }
-// Polls GET /deploy/status until it returns a terminal state ('confirmed' or
-// 'failed') or the timeout fires. 'unknown' means the keeper hasn't seen the
+// Polls GET /deploy/status until it returns a terminal state ('landed' or
+// 'timeout') or the timeout fires. 'unknown' means the backend hasn't seen the
 // tx yet (register step not called or watch not armed).
 export async function pollDeployStatus(opts) {
     const fetcher = opts.fetcher ?? fetch;
@@ -57,7 +63,7 @@ export async function pollDeployStatus(opts) {
         }
         catch { /* transient network — try again on next tick */ }
         opts.onTick?.(status);
-        if (status.status === 'confirmed' || status.status === 'failed')
+        if (status.status === 'landed' || status.status === 'timeout')
             return status;
         if (Date.now() >= deadline)
             return status;
@@ -70,34 +76,50 @@ function adminHeaders(token) {
         'Authorization': `Bearer ${token}`,
     };
 }
-// POST /admin/redeploy/:appId — one-shot migration for a single app. Rejects
-// with a descriptive error if any keeper-side guard fails (409) or the deploy
-// itself throws (500). The returned `zkAppAddress` is the *new* v2 address; the
-// old one stays on chain but is no longer referenced by keeper records.
+// POST /admin/redeploy/:appId — the next redeploy step for a single app.
+// Rejects with a descriptive error if any backend guard fails (409) or the
+// transaction itself throws (500). After a deploy step the returned
+// `zkAppAddress` is the successor's; the old one stays on chain, retired.
 export async function redeployApp(req) {
     const fetcher = req.fetcher ?? fetch;
     const resp = await fetcher(`${baseUrl(req.keeperUrl)}/admin/redeploy/${encodeURIComponent(req.appId)}`, {
         method: 'POST',
         headers: adminHeaders(req.adminToken),
         signal: req.signal,
-        body: JSON.stringify(req.force ? { force: true } : {}),
+        body: JSON.stringify({
+            ...(req.network ? { network: req.network } : {}),
+            ...(req.retireSignature ? { retireSignature: req.retireSignature } : {}),
+            ...(req.feePayer ? { feePayer: req.feePayer } : {}),
+            ...(req.force ? { force: true } : {}),
+        }),
+    });
+    if (!resp.ok)
+        throw new Error(await readJsonError(resp));
+    return await resp.json();
+}
+// POST /admin/redeploy/:appId/register — the admin wallet sent the proved
+// step: a retire is marked on the app; a deploy is watched until it lands,
+// then the app moves to its successor.
+export async function registerAdminRedeploy(req) {
+    const resp = await (req.fetcher ?? fetch)(`${baseUrl(req.keeperUrl)}/admin/redeploy/${encodeURIComponent(req.appId)}/register`, {
+        method: 'POST', headers: adminHeaders(req.adminToken), signal: req.signal,
+        body: JSON.stringify({ redeployId: req.redeployId, txHash: req.txHash }),
     });
     if (!resp.ok)
         throw new Error(await readJsonError(resp));
     return await resp.json();
 }
-// POST /admin/redeploy-all — iterate every registered app and attempt migration.
-// Idempotent: apps already migrated surface as ok:false with a clear error, so
-// a rerun after a partial failure retries only the remaining ones. Callers
-// should inspect `results` for per-app outcomes rather than relying on the
-// top-level `ok`, which is always true unless the whole request failed.
+// POST /admin/redeploy-all — raises every eligible app's retirement gate at
+// once (one shared drain) and reports each app's next step; the admin wallet
+// then takes them one app at a time with redeployApp (it signs and pays).
+// Apps that can't be redeployed surface as ok:false with the reason.
 export async function redeployAll(req) {
     const fetcher = req.fetcher ?? fetch;
     const resp = await fetcher(`${baseUrl(req.keeperUrl)}/admin/redeploy-all`, {
         method: 'POST',
         headers: adminHeaders(req.adminToken),
         signal: req.signal,
-        body: JSON.stringify(req.force ? { force: true } : {}),
+        body: JSON.stringify(req.network ? { network: req.network } : {}),
     });
     if (!resp.ok)
         throw new Error(await readJsonError(resp));
@@ -109,7 +131,7 @@ export async function redeployAll(req) {
 // known app failing individual guards).
 export async function fetchVendorRedeployPreflight(opts) {
     const fetcher = opts.fetcher ?? fetch;
-    const resp = await fetcher(`${baseUrl(opts.keeperUrl)}/vendor/redeploy/${encodeURIComponent(opts.appId)}/preflight`, {
+    const resp = await fetcher(`${baseUrl(opts.keeperUrl)}/vendor/redeploy/${encodeURIComponent(opts.appId)}/preflight?network=${opts.network}`, {
         signal: opts.signal,
     });
     if (!resp.ok)
@@ -121,18 +143,16 @@ export async function fetchVendorRedeployPreflight(opts) {
 // consumed on /prove.
 export async function getVendorRedeployChallenge(opts) {
     const fetcher = opts.fetcher ?? fetch;
-    const resp = await fetcher(`${baseUrl(opts.keeperUrl)}/vendor/redeploy/${encodeURIComponent(opts.appId)}/challenge`, {
+    const resp = await fetcher(`${baseUrl(opts.keeperUrl)}/vendor/redeploy/${encodeURIComponent(opts.appId)}/challenge?network=${opts.network}`, {
         signal: opts.signal,
     });
     if (!resp.ok)
         throw new Error(await readJsonError(resp));
     return await resp.json();
 }
-// POST /vendor/redeploy/:appId/prove — keeper verifies the nonce + signature
-// against the on-chain vendor of the app, runs all redeploy guards, generates
-// a throwaway zkApp keypair, builds and proves the deploy+initialize tx, and
-// signs the zkApp AU with the throwaway key. Returns the tx JSON for the
-// vendor's wallet to add the fee-payer signature and broadcast.
+// POST /vendor/redeploy/:appId/prove — the backend verifies the nonce +
+// signature against the on-chain vendor of the app and runs all redeploy
+// guards, then answers with the next step (see the flow above).
 export async function proveVendorRedeploy(req) {
     const fetcher = req.fetcher ?? fetch;
     const resp = await fetcher(`${baseUrl(req.keeperUrl)}/vendor/redeploy/${encodeURIComponent(req.appId)}/prove`, {
@@ -143,20 +163,60 @@ export async function proveVendorRedeploy(req) {
             nonce: req.nonce,
             signature: req.signature,
             senderPublicKey: req.senderPublicKey,
-            ...(req.force ? { force: true } : {}),
+            ...(req.retireSignature ? { retireSignature: req.retireSignature } : {}),
         }),
     });
     if (!resp.ok)
         throw new Error(await readJsonError(resp));
     return await resp.json();
 }
-// POST /vendor/redeploy/:appId/register — arm the keeper's deploy-watcher on
-// the new address. On confirmation the keeper mutates AppRecord to promote
+// POST /vendor/redeploy/:appId/register — arm the backend's deploy-watcher on
+// the new address. On confirmation the backend mutates AppRecord to promote
 // the new deployment (push old to deploymentHistory[], overwrite live fields,
 // clear event-sync cursors). Idempotent to duplicate calls (the watcher
 // checks whether one is already armed for the address). Poll GET
 // /deploy/status?zkAppAddress=<new> — or use pollDeployStatus — for landing
 // progress, same as first-time deploys.
+// POST /vendor/redeploy/:appId/cancel — calls off the vendor's redeploy
+// (gate, drain) before the app is retired on chain. A fresh signed challenge.
+export async function cancelVendorRedeploy(req) {
+    const fetcher = req.fetcher ?? fetch;
+    const resp = await fetcher(`${baseUrl(req.keeperUrl)}/vendor/redeploy/${encodeURIComponent(req.appId)}/cancel`, {
+        method: 'POST', headers: { 'Content-Type': 'application/json' }, signal: req.signal,
+        body: JSON.stringify({ nonce: req.nonce, signature: req.signature }),
+    });
+    if (!resp.ok)
+        throw new Error(await readJsonError(resp));
+    return await resp.json();
+}
+// POST /admin/redeploy/:appId/drain — the platform starts a redeploy of an
+// app with purchases in escrow: new purchases pause until it is empty.
+export async function startRedeployDrain(req) {
+    const resp = await (req.fetcher ?? fetch)(`${baseUrl(req.keeperUrl)}/admin/redeploy/${encodeURIComponent(req.appId)}/drain`, {
+        method: 'POST', headers: adminHeaders(req.adminToken), body: JSON.stringify({ network: req.network }),
+    });
+    if (!resp.ok)
+        throw new Error(await readJsonError(resp));
+    return await resp.json();
+}
+// POST /admin/redeploy/:appId/cancel — calls off a redeploy or drain not yet retired on chain.
+export async function cancelRedeploy(req) {
+    const resp = await (req.fetcher ?? fetch)(`${baseUrl(req.keeperUrl)}/admin/redeploy/${encodeURIComponent(req.appId)}/cancel`, {
+        method: 'POST', headers: adminHeaders(req.adminToken), body: JSON.stringify({ network: req.network }),
+    });
+    if (!resp.ok)
+        throw new Error(await readJsonError(resp));
+    return await resp.json();
+}
+// POST /admin/redeploy-notice — ahead of an announced hard fork, emails the vendors of live apps.
+export async function sendRedeployNotices(req) {
+    const resp = await (req.fetcher ?? fetch)(`${baseUrl(req.keeperUrl)}/admin/redeploy-notice`, {
+        method: 'POST', headers: adminHeaders(req.adminToken), body: JSON.stringify({ network: req.network }),
+    });
+    if (!resp.ok)
+        throw new Error(await readJsonError(resp));
+    return await resp.json();
+}
 export async function registerVendorRedeploy(req) {
     const fetcher = req.fetcher ?? fetch;
     const resp = await fetcher(`${baseUrl(req.keeperUrl)}/vendor/redeploy/${encodeURIComponent(req.appId)}/register`, {

package/build/deployClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployClient.js","sourceRoot":"","sources":["../src/deployClient.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAyEpC,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;QAC1D,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAClC,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,0EAA0E;AAC1E,qEAAqE;AACrE,8EAA8E;AAC9E,mDAAmD;AACnD,EAAE;AACF,4EAA4E;AAC5E,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAuB;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE;QACnE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,eAAe,EAAK,GAAG,CAAC,eAAe;YACvC,aAAa,EAAO,GAAG,CAAC,aAAa;YACrC,gBAAgB,EAAI,GAAG,CAAC,gBAAgB;YACxC,eAAe,EAAK,GAAG,CAAC,eAAe;YACvC,iBAAiB,EAAG,GAAG,CAAC,iBAAiB;YACzC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;YAC1C,SAAS,EAAW,GAAG,CAAC,SAAS;YACjC,GAAG,CAAC,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAyB,CAAC;AAClD,CAAC;AAYD,0EAA0E;AAC1E,+EAA+E;AAC/E,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA6B;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,+BAA+B,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;IAE7G,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtE,IAAI,MAAM,GAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,EAAE;gBAAE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAkB,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAC7E,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC1C,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAoED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO;QACL,cAAc,EAAG,kBAAkB;QACnC,eAAe,EAAE,UAAU,KAAK,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,2EAA2E;AAC3E,oEAAoE;AACpE,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAuB;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE;QACtG,MAAM,EAAG,MAAM;QACf,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;QACrC,MAAM,EAAG,GAAG,CAAC,MAAM;QACnB,IAAI,EAAK,IAAI,CAAC,SAAS,CAAC;YACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAyB,CAAC;AAClD,CAAC;AAED,0EAA0E;AAC1E,2EAA2E;AAC3E,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAA+I;IACzL,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE;QAC9H,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;QACzE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;KACzE,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAA6C,CAAC;AACtE,CAAC;AAED,4EAA4E;AAC5E,6EAA6E;AAC7E,0EAA0E;AAC1E,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAuB;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,EAAE;QACzE,MAAM,EAAG,MAAM;QACf,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC;QACrC,MAAM,EAAG,GAAG,CAAC,MAAM;QACnB,IAAI,EAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAyB,CAAC;AAClD,CAAC;AAoED,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAMlD;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,OAAO,EAAE,EAAE;QAC3I,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;AACtD,CAAC;AAOD,yEAAyE;AACzE,6EAA6E;AAC7E,sBAAsB;AACtB,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAOhD;IACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,OAAO,EAAE,EAAE;QAC3I,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;AACtD,CAAC;AAgDD,wEAAwE;AACxE,yEAAyE;AACzE,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAA+B;IAGvE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC7G,MAAM,EAAG,MAAM;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAG,GAAG,CAAC,MAAM;QACnB,IAAI,EAAK,IAAI,CAAC,SAAS,CAAC;YACtB,KAAK,EAAY,GAAG,CAAC,KAAK;YAC1B,SAAS,EAAQ,GAAG,CAAC,SAAS;YAC9B,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAqF,CAAC;AAC9G,CAAC;AAWD,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,wEAAwE;AACxE,iEAAiE;AACjE,4EAA4E;AAC5E,wCAAwC;AACxC,wEAAwE;AACxE,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAoJ;IAC7L,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE;QAC9G,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM;QACnF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC;KACrE,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAkB,CAAC;AAC3C,CAAC;AAED,2EAA2E;AAC3E,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAoH;IAC3J,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC3H,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;KACtG,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAA0E,CAAC;AACnG,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAoH;IACvJ,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE;QAC5H,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;KACtG,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAkB,CAAC;AAC3C,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAqG;IAC7I,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,EAAE;QAC3F,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;KACtG,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAkE,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAkC;IAC7E,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE;QAChH,MAAM,EAAG,MAAM;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAG,GAAG,CAAC,MAAM;QACnB,IAAI,EAAK,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;KAC5E,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,IAAI,CAAC,IAAI,EAA6C,CAAC;AACtE,CAAC"}

package/build/deviceIdentity.d.ts

@@ -0,0 +1,68 @@
+/**
+ * deviceIdentity.ts
+ *
+ * Per-install Pallas Schnorr keypair used to identify a device to the
+ * non-custodial binding flow. `getOrCreateDeviceIdentity(storageKey)`
+ * returns a stable keypair for the caller's storage key: created on
+ * first call, loaded verbatim on every subsequent call.
+ *
+ * The `deviceCommitment` this module exposes matches the on-chain
+ * `occupied[i]` field shape written by `LicensingApp.bind()` — it's
+ * `Poseidon([pk.x, pk.isOdd.toField()])` over the device's Pallas
+ * pubkey (see `ownerPubKeyHash` in ./licenseLeaf.ts for the identical
+ * shape applied to the ownership pubkey). Callers pass the commitment
+ * to `proveBind` and to the ownership signature; the raw device pubkey
+ * itself never crosses the wire.
+ *
+ * Storage tradeoffs (documented up front — the plan's original
+ * assumption was WebCrypto extractable=false, which only applies to
+ * WebCrypto-native primitives):
+ *
+ *   Browser path — IndexedDB.
+ *     Pallas is not a WebCrypto primitive, so we cannot store the
+ *     private key as a non-extractable CryptoKey. The private key is
+ *     persisted as its Mina canonical base58 encoding. An adversary
+ *     with access to the browser profile (malware running as the user,
+ *     evil browser extension) can read it. This matches the trust
+ *     model of every other browser-persisted secret today (bearer
+ *     cookies, IndexedDB tokens); binding to a fresh device after
+ *     compromise is a keypair regen + one on-chain bind — no funds
+ *     at risk, only slot churn. Users who want stronger storage can
+ *     wipe the storageKey between sessions and re-bind on demand.
+ *
+ *   Node / Electron path — keytar (OS keychain).
+ *     `keytar` is loaded lazily and marked as an optional peer
+ *     dependency in package.json so the browser bundle isn't dragged
+ *     into installing native bindings it can't use. If keytar is
+ *     unavailable at runtime, the SDK throws with a clear message
+ *     rather than falling back to plaintext-on-disk.
+ *
+ * The keypair is Pallas-scalar-random, NOT passphrase-derived — the
+ * device identity is meant to survive a passphrase reset (the user
+ * can re-derive their ownership key from the passphrase, then unbind
+ * / rebind existing device slots without re-installing the app).
+ */
+import { PrivateKey, PublicKey } from 'o1js';
+export type DeviceIdentity = {
+    devicePrivateKey: PrivateKey;
+    devicePubKey: PublicKey;
+    deviceCommitment: string;
+};
+/**
+ * Compute the on-chain-shaped device commitment from a Pallas pubkey.
+ * Exported so tests and downstream tooling can re-derive it without
+ * re-instantiating the whole DeviceIdentity.
+ */
+export declare function computeDeviceCommitment(devicePubKey: PublicKey): string;
+/**
+ * Load an existing device keypair for `storageKey`, or create + persist
+ * a fresh one on first call. Idempotent across every subsequent call
+ * for the same key on the same install.
+ *
+ * The `storageKey` should be per-app (e.g. the vendor's app short
+ * name or its `appId`), so a single browser profile / OS user account
+ * can hold distinct device identities for distinct vendors without
+ * cross-contamination.
+ */
+export declare function getOrCreateDeviceIdentity(storageKey: string): Promise<DeviceIdentity>;
+//# sourceMappingURL=deviceIdentity.d.ts.map

package/build/deviceIdentity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceIdentity.d.ts","sourceRoot":"","sources":["../src/deviceIdentity.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAY,MAAM,MAAM,CAAC;AAgBvD,MAAM,MAAM,cAAc,GAAG;IAC3B,gBAAgB,EAAE,UAAU,CAAC;IAC7B,YAAY,EAAM,SAAS,CAAC;IAK5B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,SAAS,GAAG,MAAM,CAEvE;AAsID;;;;;;;;;GASG;AACH,wBAAsB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CAuB3F"}

package/build/deviceIdentity.js

@@ -0,0 +1,209 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * deviceIdentity.ts
+ *
+ * Per-install Pallas Schnorr keypair used to identify a device to the
+ * non-custodial binding flow. `getOrCreateDeviceIdentity(storageKey)`
+ * returns a stable keypair for the caller's storage key: created on
+ * first call, loaded verbatim on every subsequent call.
+ *
+ * The `deviceCommitment` this module exposes matches the on-chain
+ * `occupied[i]` field shape written by `LicensingApp.bind()` — it's
+ * `Poseidon([pk.x, pk.isOdd.toField()])` over the device's Pallas
+ * pubkey (see `ownerPubKeyHash` in ./licenseLeaf.ts for the identical
+ * shape applied to the ownership pubkey). Callers pass the commitment
+ * to `proveBind` and to the ownership signature; the raw device pubkey
+ * itself never crosses the wire.
+ *
+ * Storage tradeoffs (documented up front — the plan's original
+ * assumption was WebCrypto extractable=false, which only applies to
+ * WebCrypto-native primitives):
+ *
+ *   Browser path — IndexedDB.
+ *     Pallas is not a WebCrypto primitive, so we cannot store the
+ *     private key as a non-extractable CryptoKey. The private key is
+ *     persisted as its Mina canonical base58 encoding. An adversary
+ *     with access to the browser profile (malware running as the user,
+ *     evil browser extension) can read it. This matches the trust
+ *     model of every other browser-persisted secret today (bearer
+ *     cookies, IndexedDB tokens); binding to a fresh device after
+ *     compromise is a keypair regen + one on-chain bind — no funds
+ *     at risk, only slot churn. Users who want stronger storage can
+ *     wipe the storageKey between sessions and re-bind on demand.
+ *
+ *   Node / Electron path — keytar (OS keychain).
+ *     `keytar` is loaded lazily and marked as an optional peer
+ *     dependency in package.json so the browser bundle isn't dragged
+ *     into installing native bindings it can't use. If keytar is
+ *     unavailable at runtime, the SDK throws with a clear message
+ *     rather than falling back to plaintext-on-disk.
+ *
+ * The keypair is Pallas-scalar-random, NOT passphrase-derived — the
+ * device identity is meant to survive a passphrase reset (the user
+ * can re-derive their ownership key from the passphrase, then unbind
+ * / rebind existing device slots without re-installing the app).
+ */
+import { PrivateKey, Poseidon } from 'o1js';
+// ── Storage key namespacing ───────────────────────────────────────
+// All device identities live under this shared prefix in whatever
+// backing store is chosen. Callers pass a per-app / per-installation
+// suffix (e.g. the app's short name) so a single browser profile can
+// hold distinct device identities for distinct vendors' apps.
+const STORAGE_PREFIX = 'zklic_device_';
+function namespaced(storageKey) {
+    return `${STORAGE_PREFIX}${storageKey}`;
+}
+/**
+ * Compute the on-chain-shaped device commitment from a Pallas pubkey.
+ * Exported so tests and downstream tooling can re-derive it without
+ * re-instantiating the whole DeviceIdentity.
+ */
+export function computeDeviceCommitment(devicePubKey) {
+    return Poseidon.hash([devicePubKey.x, devicePubKey.isOdd.toField()]).toString();
+}
+function buildIdentity(privateKey) {
+    const devicePubKey = privateKey.toPublicKey();
+    return {
+        devicePrivateKey: privateKey,
+        devicePubKey,
+        deviceCommitment: computeDeviceCommitment(devicePubKey),
+    };
+}
+// ── Environment detection ─────────────────────────────────────────
+function hasIndexedDB() {
+    return typeof globalThis !== 'undefined'
+        && typeof globalThis.indexedDB !== 'undefined';
+}
+function isNodeLike() {
+    // Node exposes `process.versions.node`; Deno/Bun don't (their
+    // process shims omit this key). Browsers have no `process` global
+    // unless something's polyfilled it, but the indexedDB branch runs
+    // first so that ordering is fine.
+    return typeof globalThis.process !== 'undefined'
+        && typeof globalThis.process?.versions?.node === 'string';
+}
+// ── IndexedDB backing store (browser) ─────────────────────────────
+// Small promisified wrapper — no third-party idb library, to keep the
+// SDK dependency surface minimal. Single key/value store; the whole
+// database is one object store with `storageKey` as the key.
+const IDB_DB_NAME = 'zklicensing';
+const IDB_STORE_NAME = 'device_identities';
+const IDB_VERSION = 1;
+function openIdb() {
+    return new Promise((resolve, reject) => {
+        const req = globalThis.indexedDB.open(IDB_DB_NAME, IDB_VERSION);
+        req.onupgradeneeded = () => {
+            const db = req.result;
+            if (!db.objectStoreNames.contains(IDB_STORE_NAME)) {
+                db.createObjectStore(IDB_STORE_NAME);
+            }
+        };
+        req.onsuccess = () => resolve(req.result);
+        req.onerror = () => reject(req.error ?? new Error('IndexedDB open failed'));
+    });
+}
+async function idbGet(key) {
+    const db = await openIdb();
+    try {
+        return await new Promise((resolve, reject) => {
+            const tx = db.transaction(IDB_STORE_NAME, 'readonly');
+            const store = tx.objectStore(IDB_STORE_NAME);
+            const req = store.get(key);
+            req.onsuccess = () => resolve(req.result ?? null);
+            req.onerror = () => reject(req.error ?? new Error('IndexedDB get failed'));
+        });
+    }
+    finally {
+        db.close();
+    }
+}
+async function idbPut(key, value) {
+    const db = await openIdb();
+    try {
+        await new Promise((resolve, reject) => {
+            const tx = db.transaction(IDB_STORE_NAME, 'readwrite');
+            const store = tx.objectStore(IDB_STORE_NAME);
+            const req = store.put(value, key);
+            req.onsuccess = () => resolve();
+            req.onerror = () => reject(req.error ?? new Error('IndexedDB put failed'));
+        });
+    }
+    finally {
+        db.close();
+    }
+}
+// ── keytar backing store (Node / Electron) ────────────────────────
+// Loaded via dynamic import so a browser bundler doesn't try to
+// resolve the native module. If keytar isn't installed we throw with
+// a message that tells the caller which optional peer dep to add,
+// rather than silently persisting to plaintext.
+async function loadKeytar() {
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        return await Function('return import("keytar")')();
+    }
+    catch {
+        throw new Error('deviceIdentity requires the optional peer dependency `keytar` in Node/Electron. ' +
+            'Install it with `npm i keytar` alongside the zklicensing SDK.');
+    }
+}
+// keytar's shape: getPassword(service, account) / setPassword(service, account, value).
+// We use a single service name and let `storageKey` be the account, so
+// multiple apps under the same node install can coexist under distinct
+// storage keys without stomping each other.
+const KEYTAR_SERVICE = 'zklicensing-device-identity';
+async function keytarGet(key) {
+    const keytar = await loadKeytar();
+    const mod = (keytar.default ?? keytar);
+    return mod.getPassword(KEYTAR_SERVICE, key);
+}
+async function keytarPut(key, value) {
+    const keytar = await loadKeytar();
+    const mod = (keytar.default ?? keytar);
+    await mod.setPassword(KEYTAR_SERVICE, key, value);
+}
+function pickBackend() {
+    if (hasIndexedDB())
+        return { get: idbGet, put: idbPut };
+    if (isNodeLike())
+        return { get: keytarGet, put: keytarPut };
+    throw new Error('deviceIdentity: no suitable storage backend detected. ' +
+        'Expected IndexedDB in the browser or a Node/Electron runtime with `keytar` installed.');
+}
+// ── Public API ────────────────────────────────────────────────────
+/**
+ * Load an existing device keypair for `storageKey`, or create + persist
+ * a fresh one on first call. Idempotent across every subsequent call
+ * for the same key on the same install.
+ *
+ * The `storageKey` should be per-app (e.g. the vendor's app short
+ * name or its `appId`), so a single browser profile / OS user account
+ * can hold distinct device identities for distinct vendors without
+ * cross-contamination.
+ */
+export async function getOrCreateDeviceIdentity(storageKey) {
+    if (!storageKey || typeof storageKey !== 'string') {
+        throw new Error('getOrCreateDeviceIdentity: storageKey must be a non-empty string');
+    }
+    const backend = pickBackend();
+    const key = namespaced(storageKey);
+    const existing = await backend.get(key);
+    if (existing) {
+        try {
+            const privateKey = PrivateKey.fromBase58(existing);
+            return buildIdentity(privateKey);
+        }
+        catch {
+            // Corrupt persisted value — fall through and mint a fresh key,
+            // overwriting the bad blob. Losing a device identity here is
+            // recoverable: the caller re-binds the new keypair and unbinds
+            // the old slot from any other device that still has the
+            // ownership key.
+        }
+    }
+    const privateKey = PrivateKey.random();
+    await backend.put(key, privateKey.toBase58());
+    return buildIdentity(privateKey);
+}
+//# sourceMappingURL=deviceIdentity.js.map

package/build/deviceIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceIdentity.js","sourceRoot":"","sources":["../src/deviceIdentity.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,UAAU,EAAa,QAAQ,EAAE,MAAM,MAAM,CAAC;AAEvD,qEAAqE;AAErE,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,8DAA8D;AAC9D,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC,SAAS,UAAU,CAAC,UAAkB;IACpC,OAAO,GAAG,cAAc,GAAG,UAAU,EAAE,CAAC;AAC1C,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,YAAuB;IAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,UAAsB;IAC3C,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO;QACL,gBAAgB,EAAE,UAAU;QAC5B,YAAY;QACZ,gBAAgB,EAAE,uBAAuB,CAAC,YAAY,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,qEAAqE;AAErE,SAAS,YAAY;IACnB,OAAO,OAAO,UAAU,KAAK,WAAW;WACnC,OAAQ,UAAkB,CAAC,SAAS,KAAK,WAAW,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU;IACjB,8DAA8D;IAC9D,kEAAkE;IAClE,kEAAkE;IAClE,kCAAkC;IAClC,OAAO,OAAQ,UAAkB,CAAC,OAAO,KAAK,WAAW;WACpD,OAAQ,UAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC;AACvE,CAAC;AAED,qEAAqE;AAErE,sEAAsE;AACtE,oEAAoE;AACpE,6DAA6D;AAC7D,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,SAAS,OAAO;IACd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAI,UAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACzE,GAAG,CAAC,eAAe,GAAG,GAAG,EAAE;YACzB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAqB,CAAC;YACrC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClD,EAAE,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAW;IAC/B,MAAM,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1D,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAE,GAAG,CAAC,MAA6B,IAAI,IAAI,CAAC,CAAC;YAC1E,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,KAAa;IAC9C,MAAM,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAClC,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,qEAAqE;AAErE,gEAAgE;AAChE,qEAAqE;AACrE,kEAAkE;AAClE,gDAAgD;AAChD,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,8DAA8D;QAC9D,OAAO,MAAO,QAAQ,CAAC,yBAAyB,CAAC,EAAmB,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,kFAAkF;YAClF,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,uEAAuE;AACvE,uEAAuE;AACvE,4CAA4C;AAC5C,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAErD,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAsE,CAAC;IAC5G,OAAO,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,KAAa;IACjD,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAwE,CAAC;IAC9G,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AASD,SAAS,WAAW;IAClB,IAAI,YAAY,EAAE;QAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACxD,IAAI,UAAU,EAAE;QAAK,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC/D,MAAM,IAAI,KAAK,CACb,wDAAwD;QACxD,uFAAuF,CACxF,CAAC;AACJ,CAAC;AAED,qEAAqE;AAErE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAAkB;IAChE,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACnD,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;YAC/D,6DAA6D;YAC7D,+DAA+D;YAC/D,wDAAwD;YACxD,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;IACvC,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC"}

package/build/freezeClient.d.ts

@@ -1,9 +1,9 @@
 /**
  * freezeClient.ts
  *
- * Client-side view of the keeper's sales-freeze schedule. A freeze is set
+ * Client-side view of the backend's sales-freeze schedule. A freeze is set
  * ahead of a hardfork so every open escrow window can drain (refund or
- * release) before v1 → v2 migration. Once past the freeze slot the keeper
+ * release) before v1 → v2 migration. Once past the freeze slot the backend
  * refuses new buys and renewals; refunds and verify remain open.
  *
  * Resolution order for buy/renew clients that want to know the current
@@ -12,17 +12,36 @@
  *      constant, or pulled from the vendor's own env at boot).
  *   2. `process.env.FREEZE_AFTER_SLOT` when running under Node (server-side
  *      integrators / CLIs).
- *   3. Keeper's own `/health` payload — the authoritative source of truth.
+ *   3. Backend's own `/health` payload — the authoritative source of truth.
  *
  * A `freezeAfterSlot` of 0 / null / undefined means "no freeze scheduled".
  */
-export type KeeperHealth = {
-    status: string;
-    network: string;
+export type NetworkHealth = {
+    graphqlUrl?: string;
+    archiveUrl?: string;
     slot: number;
     salesFrozen: boolean;
     freezeAfterSlot: number | null;
 };
+export type KeeperHealth = {
+    status: string;
+    devnet?: NetworkHealth;
+    mainnet?: NetworkHealth;
+    /** @deprecated legacy flat shape */
+    network?: string;
+    /** @deprecated legacy flat shape */
+    slot?: number;
+    /** @deprecated legacy flat shape */
+    salesFrozen?: boolean;
+    /** @deprecated legacy flat shape */
+    freezeAfterSlot?: number | null;
+};
+/**
+ * The health block for `network`. Without a network: the only configured
+ * one, or null when several are configured (ambiguous). Falls back to the
+ * legacy flat shape.
+ */
+export declare function pickNetworkHealth(health: KeeperHealth, network?: 'devnet' | 'mainnet'): NetworkHealth | null;
 export type FreezeState = {
     salesFrozen: boolean;
     freezeAfterSlot: number | null;
@@ -36,6 +55,7 @@ export type GetKeeperHealthOptions = {
 export declare function getKeeperHealth(opts: GetKeeperHealthOptions): Promise<KeeperHealth>;
 export type ResolveFreezeStateOptions = {
     keeperUrl: string;
+    network?: 'devnet' | 'mainnet';
     freezeAfterSlot?: number | null;
     fetcher?: typeof fetch;
     signal?: AbortSignal;

package/build/freezeClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"freezeClient.d.ts","sourceRoot":"","sources":["../src/freezeClient.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,aAAa,GAAG;IAC1B,UAAU,CAAC,EAAM,MAAM,CAAC;IACxB,UAAU,CAAC,EAAM,MAAM,CAAC;IACxB,IAAI,EAAa,MAAM,CAAC;IACxB,WAAW,EAAM,OAAO,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAOF,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAY,MAAM,CAAC;IACzB,MAAM,CAAC,EAAW,aAAa,CAAC;IAChC,OAAO,CAAC,EAAU,aAAa,CAAC;IAChC,oCAAoC;IACpC,OAAO,CAAC,EAAU,MAAM,CAAC;IACzB,oCAAoC;IACpC,IAAI,CAAC,EAAa,MAAM,CAAC;IACzB,oCAAoC;IACpC,WAAW,CAAC,EAAM,OAAO,CAAC;IAC1B,oCAAoC;IACpC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,aAAa,GAAG,IAAI,CAc5G;AAED,MAAM,MAAM,WAAW,GAAG;IAGxB,WAAW,EAAM,OAAO,CAAC;IAKzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAM/B,WAAW,EAAM,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAgBF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAG,OAAO,KAAK,CAAC;IACxB,MAAM,CAAC,EAAI,WAAW,CAAC;CACxB,CAAC;AAKF,wBAAsB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAKzF;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,EAAS,MAAM,CAAC;IAGzB,OAAO,CAAC,EAAU,QAAQ,GAAG,SAAS,CAAC;IAGvC,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAU,OAAO,KAAK,CAAC;IAC/B,MAAM,CAAC,EAAW,WAAW,CAAC;CAC/B,CAAC;AAOF,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,WAAW,CAAC,CA2B9F"}