zklicensing 0.1.0-beta.2 → 0.1.0-beta.21

package/build/index.js

@@ -1,54 +1,42 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 /**
  * verifyLicense — client SDK.
  *
- * Calls the keeper's GET /verify until the on-chain refund window for the
- * license has closed; from that point on returns from a local anchor and
- * never touches the network again. The refund-window decision is server-
- * side: the keeper returns `refundWindowClosed: boolean` on its /verify
- * response, computed from its own record of `purchaseSlot + REFUND_WINDOW_N`
- * against the on-chain `currentSlot`. The SDK gates anchor writes on that
- * boolean and never trusts a `purchaseSlot` supplied by the local proof
- * file, so a user who forges their proof metadata cannot force the offline
- * branch prematurely.
+ * Calls the licensing service's GET /verify until the on-chain refund
+ * window for the license has closed; from that point on returns from a
+ * local anchor and never touches the network again. The refund-window
+ * decision is server-side: the service returns `refundWindowClosed:
+ * boolean` on its /verify response, computed from its own record of
+ * `purchaseSlot + REFUND_WINDOW_N` against the on-chain `currentSlot`.
+ * The SDK gates anchor writes on that boolean and never trusts a
+ * `purchaseSlot` supplied by the local license file, so a user who forges
+ * their proof metadata cannot force the offline branch prematurely.
  *
  * Anchor purity: every field persisted in the Anchor derives from the
- * keeper's /verify response — `anchoredSlot`, `expirySlot`, `ownership`.
- * The only client-supplied input to the offline branch is
- * `proof.expirySlot`, used solely as the loadAnchor binding key. A
- * tampered proof file therefore never gets a wrong answer; it gets no
- * offline branch at all and falls through to the keeper on every call.
+ * service's /verify response — `anchoredSlot`, `expirySlot`. The only
+ * client-supplied input to the offline branch is `proof.expirySlot`,
+ * used solely as the loadAnchor binding key. A tampered license file
+ * therefore never gets a wrong answer; it gets no offline branch at all
+ * and falls through to the licensing service on every call.
  */
-import { REFUND_WINDOW_N, GRACE_PERIOD_N, MS_PER_SLOT_N, SLOTS_PER_DAY_N, } from './contractInterface.js';
+import { REFUND_WINDOW_N, GRACE_PERIOD_N, MS_PER_SLOT_N, SLOTS_PER_DAY_N, } from './slotConstants.js';
 const MS_PER_SLOT = MS_PER_SLOT_N;
 const SLOTS_PER_DAY = SLOTS_PER_DAY_N;
+// The one and only verify endpoint. Every issued license routes here
+// regardless of network — the platform verifier resolves devnet vs
+// mainnet from the zkAppAddress (each deployment is unique per network).
+// Tests inject a mock via VerifyOptions.fetcher, not by rewriting this URL.
+export const DEFAULT_VERIFIER_URL = 'https://zklicensing.com/api/verify';
+// Anchor records are keyed by (zkAppAddress, licenseHash). zkAppAddress
+// is generation-scoped by construction: each redeploy puts the
+// LicensingApp at a fresh address (see backend's finalizeRedeploy and
+// AppRecord.deploymentHistory[]), so keying on it implicitly captures
+// generation. An anchor for a retired address is orphaned once the license
+// file names the successor, and re-created cleanly on its next verify.
 const ANCHOR_KEY_PREFIX = 'zklic_anchor_';
-const ACTIVATION_KEY_PREFIX = 'zklic_activation_';
-function activationKey(zkAppAddress, licenseHash) {
-    return `${ACTIVATION_KEY_PREFIX}${zkAppAddress}_${licenseHash}`;
-}
-export function loadActivation(storage, zkAppAddress, licenseHash, nowMs = Date.now()) {
-    try {
-        const raw = storage.getItem(activationKey(zkAppAddress, licenseHash));
-        if (!raw)
-            return null;
-        const rec = JSON.parse(raw);
-        if (nowMs > rec.expiresAt)
-            return null;
-        return rec;
-    }
-    catch {
-        return null;
-    }
-}
-export function saveActivation(storage, zkAppAddress, licenseHash, rec) {
-    try {
-        storage.setItem(activationKey(zkAppAddress, licenseHash), JSON.stringify(rec));
-    }
-    catch {
-        /* quota / read-only — non-fatal */
-    }
+function anchorKey(zkAppAddress, licenseHash) {
+    return `${ANCHOR_KEY_PREFIX}${zkAppAddress}_${licenseHash}`;
 }
 function defaultStorage() {
     if (typeof globalThis !== 'undefined' && globalThis.localStorage) {
@@ -56,19 +44,20 @@ function defaultStorage() {
     }
     return null;
 }
-function loadAnchor(storage, licenseHash, expirySlot) {
+function loadAnchor(storage, zkAppAddress, licenseHash, expirySlot) {
     try {
-        const raw = storage.getItem(ANCHOR_KEY_PREFIX + licenseHash);
+        const raw = storage.getItem(anchorKey(zkAppAddress, licenseHash));
         if (!raw)
             return null;
         const a = JSON.parse(raw);
-        // `a.expirySlot` is the KEEPER's value captured at anchor time; the
-        // `expirySlot` argument is the LOCAL proof file's value. Match ⇒ local
-        // file agrees with chain truth as of anchoring ⇒ offline is safe.
-        // Mismatch has two honest meanings:
+        // `a.expirySlot` is the SERVICE's value captured at anchor time;
+        // the `expirySlot` argument is the LOCAL license file's value. Match
+        // ⇒ local file agrees with chain truth as of anchoring ⇒ offline is
+        // safe. Mismatch has two honest meanings:
         //   - renewal: chain moved, local file updated ⇒ re-anchor via chain check
-        //   - forgery: local file edited ⇒ every call falls through to the keeper,
-        //     which reports truth. The forger gets no offline branch at all.
+        //   - forgery: local file edited ⇒ every call falls through to the
+        //     licensing service, which reports truth. The forger gets no
+        //     offline branch at all.
         if (a.expirySlot !== expirySlot)
             return null;
         return a;
@@ -77,9 +66,9 @@ function loadAnchor(storage, licenseHash, expirySlot) {
         return null;
     }
 }
-function saveAnchor(storage, licenseHash, anchor) {
+function saveAnchor(storage, zkAppAddress, licenseHash, anchor) {
     try {
-        storage.setItem(ANCHOR_KEY_PREFIX + licenseHash, JSON.stringify(anchor));
+        storage.setItem(anchorKey(zkAppAddress, licenseHash), JSON.stringify(anchor));
     }
     catch {
         // Storage may be full or read-only; the offline path simply won't activate.
@@ -90,72 +79,38 @@ function computeRemainingDays(expirySlot, currentSlot) {
         return 0;
     return Math.floor((expirySlot - currentSlot) / SLOTS_PER_DAY);
 }
-// Renew the activation token when within this window of expiry. Picked so
-// that a daily verify call has many chances to refresh before the token dies.
-const TOKEN_RENEW_THRESHOLD_MS = 24 * 60 * 60 * 1000;
-async function tryActivate(storage, zkAppAddress, licenseHash, current, bootstrapSecretHash, prover, verifierUrl, fetcher, nowMs) {
-    const secretHash = current?.secretHash ?? bootstrapSecretHash;
-    if (!secretHash)
-        return current;
-    // Existing token still fresh — nothing to do.
-    if (current?.token && current.expiresAt - nowMs > TOKEN_RENEW_THRESHOLD_MS)
-        return current;
-    try {
-        const base = verifierUrl.replace(/\/+$/, '');
-        const challengeResp = await fetcher(`${base}/challenge?licenseHash=${encodeURIComponent(licenseHash)}`);
-        if (!challengeResp.ok)
-            return current;
-        const { nonce } = (await challengeResp.json());
-        const proofJson = await prover({ licenseHash, nonce, secretHash });
-        const respondResp = await fetcher(`${base}/respond`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ zkAppAddress, proof: proofJson }),
-        });
-        if (!respondResp.ok)
-            return current;
-        const { token, expiresAt } = (await respondResp.json());
-        const next = { token, expiresAt, secretHash };
-        saveActivation(storage, zkAppAddress, licenseHash, next);
-        return next;
-    }
-    catch {
-        return current;
-    }
-}
 function offlineCheck(anchor, nowMs) {
     const elapsedSlots = Math.max(0, Math.floor((nowMs - anchor.anchoredAtMs) / MS_PER_SLOT));
     const estCurrentSlot = anchor.anchoredSlot + elapsedSlots;
-    const expired = estCurrentSlot > anchor.expirySlot + GRACE_PERIOD_N;
-    const inGracePeriod = !expired && estCurrentSlot > anchor.expirySlot;
-    const expiresAt = new Date(nowMs + (anchor.expirySlot - estCurrentSlot) * MS_PER_SLOT).toISOString();
+    const until = anchor.effectiveExpirySlot ?? anchor.expirySlot;
+    const expired = estCurrentSlot > until + GRACE_PERIOD_N;
+    const inGracePeriod = !expired && estCurrentSlot > until;
+    const expiresAt = new Date(nowMs + (until - estCurrentSlot) * MS_PER_SLOT).toISOString();
     return {
         valid: !expired,
         expirySlot: anchor.expirySlot,
         expiresAt,
         currentSlot: estCurrentSlot,
         inGracePeriod,
-        remainingDays: computeRemainingDays(anchor.expirySlot, estCurrentSlot),
+        remainingDays: computeRemainingDays(until, estCurrentSlot),
         reason: expired
             ? 'License has expired'
             : inGracePeriod
                 ? 'License is in grace period — renew to avoid interruption'
                 : null,
         source: 'offline',
-        ownership: anchor.ownership,
     };
 }
 export async function verifyLicense(proof, options = {}) {
     const storage = options.storage === null ? null : options.storage ?? defaultStorage();
     const fetcher = options.fetcher ?? (typeof fetch !== 'undefined' ? fetch : undefined);
     const nowFn = options.now ?? (() => Date.now());
-    const verifierUrl = options.verifierUrl ?? proof.verifierUrl;
     if (storage) {
-        const anchor = loadAnchor(storage, proof.licenseHash, proof.expirySlot);
+        const anchor = loadAnchor(storage, proof.zkAppAddress, proof.licenseHash, proof.expirySlot);
         if (anchor)
             return offlineCheck(anchor, nowFn());
     }
-    if (!verifierUrl || !fetcher) {
+    if (!fetcher) {
         return {
             valid: false,
             expirySlot: proof.expirySlot,
@@ -163,24 +118,13 @@ export async function verifyLicense(proof, options = {}) {
             currentSlot: 0,
             inGracePeriod: false,
             remainingDays: 0,
-            reason: 'No verifier URL or fetcher available; cannot verify',
+            reason: 'No fetch implementation available; cannot verify',
             source: 'chain',
-            ownership: 'unverified',
         };
     }
-    let activation = storage
-        ? loadActivation(storage, proof.zkAppAddress, proof.licenseHash, nowFn())
-        : null;
-    if (storage && options.prover && (activation || options.secretHash)) {
-        activation = await tryActivate(storage, proof.zkAppAddress, proof.licenseHash, activation, options.secretHash, options.prover, verifierUrl, fetcher, nowFn());
-    }
-    const tokenParam = activation?.token
-        ? `&token=${encodeURIComponent(activation.token)}`
-        : '';
-    const url = `${verifierUrl.replace(/\/+$/, '')}` +
+    const url = `${DEFAULT_VERIFIER_URL}` +
         `?licenseHash=${encodeURIComponent(proof.licenseHash)}` +
-        `&zkAppAddress=${encodeURIComponent(proof.zkAppAddress)}` +
-        tokenParam;
+        `&zkAppAddress=${encodeURIComponent(proof.zkAppAddress)}`;
     let data;
     try {
         const resp = await fetcher(url);
@@ -194,7 +138,6 @@ export async function verifyLicense(proof, options = {}) {
                 remainingDays: 0,
                 reason: `Verification request failed (HTTP ${resp.status})`,
                 source: 'chain',
-                ownership: 'unverified',
             };
         }
         data = await resp.json();
@@ -209,13 +152,12 @@ export async function verifyLicense(proof, options = {}) {
             remainingDays: 0,
             reason: err?.message ?? 'Verification request errored',
             source: 'chain',
-            ownership: 'unverified',
         };
     }
-    // Keeper's authoritative expiry, or null if the response omits it. Only
-    // the null-safe form may be written into the anchor; the chain-result
-    // display value below falls back to the local proof file for user-facing
-    // fields, which is safe (display only).
+    // Service's authoritative expiry, or null if the response omits it.
+    // Only the null-safe form may be written into the anchor; the
+    // chain-result display value below falls back to the local license file
+    // for user-facing fields, which is safe (display only).
     const respExpirySlotStrict = typeof data.expirySlot === 'number' ? data.expirySlot : null;
     const respExpirySlot = respExpirySlotStrict ?? proof.expirySlot;
     const respCurrentSlot = typeof data.currentSlot === 'number' ? data.currentSlot : 0;
@@ -230,24 +172,24 @@ export async function verifyLicense(proof, options = {}) {
             : computeRemainingDays(respExpirySlot, respCurrentSlot),
         reason: data.reason ?? null,
         source: 'chain',
-        ownership: data.ownership === 'verified' ? 'verified' : 'unverified',
     };
-    // Anchor gate uses the keeper's own refund-window decision. The keeper
-    // knows the true purchaseSlot (stored in its LicenseRecord) and the true
-    // currentSlot; the SDK never trusts a purchaseSlot or expirySlot supplied
-    // by the local proof file, since that file is client-writable and could
-    // be forged. If the keeper omits `expirySlot`, we fail-closed on the
-    // offline path — no anchor written, subsequent calls stay online.
+    // Anchor gate uses the service's own refund-window decision. The
+    // service knows the true purchaseSlot (stored in its LicenseRecord)
+    // and the true currentSlot; the SDK never trusts a purchaseSlot or
+    // expirySlot supplied by the local license file, since that file is
+    // client-writable and could be forged. If the service omits
+    // `expirySlot`, we fail-closed on the offline path — no anchor
+    // written, subsequent calls stay online.
     if (storage &&
         result.valid &&
         data.refundWindowClosed === true &&
         typeof data.currentSlot === 'number' &&
         respExpirySlotStrict !== null) {
-        saveAnchor(storage, proof.licenseHash, {
+        saveAnchor(storage, proof.zkAppAddress, proof.licenseHash, {
             anchoredSlot: data.currentSlot,
             anchoredAtMs: nowFn(),
             expirySlot: respExpirySlotStrict,
-            ownership: result.ownership,
+            ...(typeof data.effectiveExpirySlot === 'number' ? { effectiveExpirySlot: data.effectiveExpirySlot } : {}),
         });
     }
     return result;
@@ -255,4 +197,38 @@ export async function verifyLicense(proof, options = {}) {
 // Re-exported so tests and downstream tooling can reference the same values
 // the SDK uses internally without re-deriving them.
 export { REFUND_WINDOW_N, GRACE_PERIOD_N, MS_PER_SLOT };
+const bindClient = () => import('./bindClient.js');
+const unbindClient = () => import('./unbindClient.js');
+const deviceIdentityModule = () => import('./deviceIdentity.js');
+export async function proveBind(...a) { return (await bindClient()).proveBind(...a); }
+export async function confirmBind(...a) { return (await bindClient()).confirmBind(...a); }
+export async function pollBindStatus(...a) { return (await bindClient()).pollBindStatus(...a); }
+export async function fetchBindingState(...a) { return (await bindClient()).fetchBindingState(...a); }
+export async function proveUnbind(...a) { return (await unbindClient()).proveUnbind(...a); }
+export async function confirmUnbind(...a) { return (await unbindClient()).confirmUnbind(...a); }
+export async function pollUnbindStatus(...a) { return (await unbindClient()).pollUnbindStatus(...a); }
+export async function getOrCreateDeviceIdentity(...a) { return (await deviceIdentityModule()).getOrCreateDeviceIdentity(...a); }
+// Non-custodial trust anchor for `verifyOffline`. Reads the live
+// `licensesRoot` (zkapp.appState[0]) directly from Mina — pair it with
+// `verifyOffline` when you do not want to trust the licensing service's
+// reported root. Also available at the `zklicensing/on-chain-root`
+// subpath. o1js is imported lazily so callers that skip this helper
+// don't pay the o1js dep cost at load time.
+export { fetchOnChainLicensesRoot, DEFAULT_MINA_GRAPHQL_URLS } from './onChainRoot.js';
+// The receipt file a buyer downloads: `license-<appId>.json`. Look for it
+// under this name in your app's data folder. Also available at the
+// `zklicensing/record` subpath.
+export { licenseFileName, platformFeeNano, vendorShareNano } from './licenseRecord.js';
+// Human-readable seat names for the device-binding UI ("Silent Otter",
+// "Curious Panda"). Deterministic in `licenseHash + slotIndex + boundAtSlot`,
+// so every viewer of the same license computes the same name per slot
+// without a naming sidecar. Also available at the `zklicensing/seat-name`
+// subpath.
+export { seatNameFor, SEAT_NAME_COMBINATIONS } from './seatName.js';
+// Vendor-signed escrow release. The licensing service proves the release tx
+// with the vendor's address as fee payer and returns unsigned tx JSON; the
+// vendor's wallet signs the fee-payer AU and broadcasts. Removes the
+// service's own feepayer key from the release critical path — vendors can
+// release even when the auto-release loop is disabled.
+export { proveVendorRelease, confirmVendorRelease } from './releaseClient.js';
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,eAAe,EACf,cAAc,EACd,aAAa,EACb,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,qEAAqE;AACrE,mEAAmE;AACnE,yEAAyE;AACzE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,oCAAoC,CAAC;AAEzE,wEAAwE;AACxE,+DAA+D;AAC/D,sEAAsE;AACtE,sEAAsE;AACtE,2EAA2E;AAC3E,uEAAuE;AACvE,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAE1C,SAAS,SAAS,CAAC,YAAoB,EAAE,WAAmB;IAC1D,OAAO,GAAG,iBAAiB,GAAG,YAAY,IAAI,WAAW,EAAE,CAAC;AAC9D,CAAC;AAgDD,SAAS,cAAc;IACrB,IAAI,OAAO,UAAU,KAAK,WAAW,IAAK,UAAkB,CAAC,YAAY,EAAE,CAAC;QAC1E,OAAQ,UAAkB,CAAC,YAAuB,CAAC;IACrD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,OAAgB,EAChB,YAAoB,EACpB,WAAmB,EACnB,UAAkB;IAElB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC;QACpC,iEAAiE;QACjE,qEAAqE;QACrE,oEAAoE;QACpE,0CAA0C;QAC1C,2EAA2E;QAC3E,mEAAmE;QACnE,iEAAiE;QACjE,6BAA6B;QAC7B,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,OAAgB,EAChB,YAAoB,EACpB,WAAmB,EACnB,MAAc;IAEd,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,WAAmB;IACnE,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,aAAa,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,KAAa;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,UAAU,CAAC;IAC9D,MAAM,OAAO,GAAG,cAAc,GAAG,KAAK,GAAG,cAAc,CAAC;IACxD,MAAM,aAAa,GAAG,CAAC,OAAO,IAAI,cAAc,GAAG,KAAK,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,GAAG,cAAc,CAAC,GAAG,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IACzF,OAAO;QACL,KAAK,EAAE,CAAC,OAAO;QACf,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS;QACT,WAAW,EAAE,cAAc;QAC3B,aAAa;QACb,aAAa,EAAE,oBAAoB,CAAC,KAAK,EAAE,cAAc,CAAC;QAC1D,MAAM,EAAE,OAAO;YACb,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,aAAa;gBACf,CAAC,CAAC,0DAA0D;gBAC5D,CAAC,CAAC,IAAI;QACR,MAAM,EAAE,SAAS;KAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAiB,EACjB,UAAyB,EAAE;IAE3B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,IAAI,cAAc,EAAE,CAAC;IACtF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAEhD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5F,IAAI,MAAM;YAAE,OAAO,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,CAAC;YAChB,MAAM,EAAE,kDAAkD;YAC1D,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GACP,GAAG,oBAAoB,EAAE;QACzB,gBAAgB,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE;QACvD,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;IAE5D,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,SAAS,EAAE,IAAI;gBACf,WAAW,EAAE,CAAC;gBACd,aAAa,EAAE,KAAK;gBACpB,aAAa,EAAE,CAAC;gBAChB,MAAM,EAAE,qCAAqC,IAAI,CAAC,MAAM,GAAG;gBAC3D,MAAM,EAAE,OAAO;aAChB,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,CAAC;YAChB,MAAM,EAAE,GAAG,EAAE,OAAO,IAAI,8BAA8B;YACtD,MAAM,EAAE,OAAO;SAChB,CAAC;IACJ,CAAC;IAED,oEAAoE;IACpE,8DAA8D;IAC9D,wEAAwE;IACxE,wDAAwD;IACxD,MAAM,oBAAoB,GACxB,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,cAAc,GAAW,oBAAoB,IAAI,KAAK,CAAC,UAAU,CAAC;IACxE,MAAM,eAAe,GAAW,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,MAAM,GAAiB;QAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;QACnB,UAAU,EAAE,cAAc;QAC1B,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QACrE,WAAW,EAAE,eAAe;QAC5B,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa;QACnC,aAAa,EAAE,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ;YACnD,CAAC,CAAC,IAAI,CAAC,aAAa;YACpB,CAAC,CAAC,oBAAoB,CAAC,cAAc,EAAE,eAAe,CAAC;QACzD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;QAC3B,MAAM,EAAE,OAAO;KAChB,CAAC;IAEF,iEAAiE;IACjE,oEAAoE;IACpE,mEAAmE;IACnE,oEAAoE;IACpE,4DAA4D;IAC5D,+DAA+D;IAC/D,yCAAyC;IACzC,IACE,OAAO;QACP,MAAM,CAAC,KAAK;QACZ,IAAI,CAAC,kBAAkB,KAAK,IAAI;QAChC,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QACpC,oBAAoB,KAAK,IAAI,EAC7B,CAAC;QACD,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE;YACzD,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,YAAY,EAAE,KAAK,EAAE;YACrB,UAAU,EAAE,oBAAoB;YAChC,GAAG,CAAC,OAAO,IAAI,CAAC,mBAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3G,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4EAA4E;AAC5E,oDAAoD;AACpD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;AAYxD,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;AACnD,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AACvD,MAAM,oBAAoB,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACjE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAG,CAAsC,IAAyC,OAAO,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAChK,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAG,CAAwC,IAA2C,OAAO,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACxK,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAG,CAA2C,IAA8C,OAAO,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACpL,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAG,CAA8C,IAAiD,OAAO,CAAC,MAAM,UAAU,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAChM,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAG,CAA0C,IAA6C,OAAO,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9K,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAG,CAA4C,IAA+C,OAAO,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACtL,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAG,CAA+C,IAAkD,OAAO,CAAC,MAAM,YAAY,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAClM,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,GAAG,CAAgE,IAAmE,OAAO,CAAC,MAAM,oBAAoB,EAAE,CAAC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AA2B9P,iEAAiE;AACjE,uEAAuE;AACvE,wEAAwE;AACxE,mEAAmE;AACnE,oEAAoE;AACpE,4CAA4C;AAC5C,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAGvF,0EAA0E;AAC1E,mEAAmE;AACnE,gCAAgC;AAChC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEvF,uEAAuE;AACvE,8EAA8E;AAC9E,sEAAsE;AACtE,0EAA0E;AAC1E,WAAW;AACX,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAGpE,4EAA4E;AAC5E,2EAA2E;AAC3E,qEAAqE;AACrE,0EAA0E;AAC1E,uDAAuD;AACvD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC"}

package/build/keysClient.d.ts

@@ -0,0 +1,142 @@
+/**
+ * keysClient.ts — key changes on a licensing app, through the keeper.
+ *
+ * - The keys an app holds on chain (vendor, payout address and a pending
+ *   change, platform key and treasury).
+ * - Payout address: the vendor proposes a new one (their wallet sends it);
+ *   it takes effect PAYOUT_DELAY_SLOTS_N slots (48 h) later unless
+ *   cancelled. The keeper applies it then; anyone may (applyPayout).
+ * - Vendor account move: the current and the new wallet both sign a text
+ *   and, for every live deployment, the contract's vendorKeyMessage.
+ * - License transfer (resale): the new owner opens it with the public key
+ *   of their new passphrase (the passphrase never leaves their device), the
+ *   current owner signs, the new owner signs, and the new owner's wallet
+ *   sends it. Only once nothing of the purchase is in escrow.
+ *
+ * Signatures over fields are Mina Schnorr signatures (base58), as an
+ * o1js `Signature` or a wallet's `signFields` gives.
+ */
+import { type PrivateKey } from 'o1js';
+export type KeysClientOptions = {
+    keeperUrl: string;
+    fetcher?: typeof fetch;
+};
+export type AppKeys = {
+    appId: string;
+    network: 'devnet' | 'mainnet';
+    zkAppAddress: string;
+    slot: number;
+    vendor: string;
+    vendorNonce: number;
+    payout: string;
+    pendingPayout: {
+        payout: string;
+        effectiveSlot: number;
+    } | null;
+    platform: {
+        key: string;
+        treasury: string;
+        epoch: number;
+    };
+};
+export type LicenseTransfer = {
+    id: string;
+    network: 'devnet' | 'mainnet';
+    zkAppAddress: string;
+    from: string;
+    to: string;
+    newOwner: string;
+    leafHash: string;
+    validUntil: number;
+    message: string[];
+    oldOwner?: string;
+    status: 'signing' | 'ready' | 'sent' | 'done';
+    createdAt: string;
+    txHash?: string;
+};
+/** A wallet that signs texts and fields (Auro's signMessage / signFields shapes). */
+export type MoveWallet = {
+    address: string;
+    signMessage(message: string): Promise<{
+        field: string;
+        scalar: string;
+    }>;
+    signFields(fields: string[]): Promise<string>;
+};
+export declare class KeysError extends Error {
+    readonly status: number;
+    readonly code?: string | undefined;
+    constructor(message: string, status: number, code?: string | undefined);
+}
+export declare function createKeysClient(opts: KeysClientOptions): {
+    /** The keys the app holds on chain. */
+    getAppKeys: (zkAppAddress: string) => Promise<AppKeys>;
+    /** Proves a payout change for the vendor's wallet to sign and send (its `vendorAddress` must be the app's vendor key). */
+    provePayout: (a: {
+        zkAppAddress: string;
+        vendorAddress: string;
+        payout: string;
+    }) => Promise<{
+        provenTxJson: string;
+        payout: string;
+    }>;
+    /** Proves the cancellation of a pending payout change (vendor's wallet). */
+    provePayoutCancel: (a: {
+        zkAppAddress: string;
+        vendorAddress: string;
+    }) => Promise<{
+        provenTxJson: string;
+        cancelled: string;
+    }>;
+    /** Proves applying a payout change past its delay, with any fee payer (the keeper does it itself). */
+    provePayoutApply: (a: {
+        zkAppAddress: string;
+        feePayer: string;
+    }) => Promise<{
+        provenTxJson: string;
+        payout: string;
+    }>;
+    /**
+     * Moves the vendor account from `from` to `to`: both wallets sign the
+     * move and every live deployment's key change. The keeper's records move
+     * at once; it sends the contract changes (or anyone, with /prove/vendor-key).
+     * `network` is the one the wallets' text signatures are made on.
+     */
+    moveVendorAccount(a: {
+        network: "devnet" | "mainnet";
+        from: MoveWallet;
+        to: MoveWallet;
+    }): Promise<{
+        moved: {
+            from: string;
+            to: string;
+        };
+        changes: unknown[];
+        keeperSends: boolean;
+    }>;
+    /** The new owner opens a transfer with the public key of their new passphrase (deriveOwnershipKeypair). */
+    openTransfer: (a: {
+        zkAppAddress: string;
+        licenseHash: string;
+        newOwnerPubKey: string;
+    }) => Promise<LicenseTransfer>;
+    getTransfer: (id: string) => Promise<LicenseTransfer>;
+    /**
+     * Signs the transfer with an ownership key: the current owner's (`role:
+     * 'old'`; from findOwnershipKeypair, since a license carried over from an
+     * earlier generation is keyed to that one's address) or the new owner's
+     * (`'new'`; deriveOwnershipKeypair with the transfer's zkAppAddress). The message is checked first
+     * against the transfer's details.
+     */
+    signTransfer(id: string, role: "old" | "new", ownerKey: PrivateKey): Promise<LicenseTransfer>;
+    /** Both signed: proves the transfer for `feePayer` (the new owner's wallet) to sign and send. */
+    proveTransfer: (id: string, feePayer: string) => Promise<{
+        provenTxJson: string;
+        transferId: string;
+    }>;
+    confirmTransfer: (id: string, txHash: string) => Promise<{
+        ok: true;
+    }>;
+};
+export type KeysClient = ReturnType<typeof createKeysClient>;
+//# sourceMappingURL=keysClient.d.ts.map

package/build/keysClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keysClient.d.ts","sourceRoot":"","sources":["../src/keysClient.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAuC,KAAK,UAAU,EAAE,MAAM,MAAM,CAAC;AAK5E,MAAM,MAAM,iBAAiB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CAAE,CAAC;AAE9E,MAAM,MAAM,OAAO,GAAG;IACpB,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IACjF,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IACpD,aAAa,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChE,QAAQ,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5D,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAChE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACtG,CAAC;AAEF,qFAAqF;AACrF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/C,CAAC;AAEF,qBAAa,SAAU,SAAQ,KAAK;IACL,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;gBAAhE,OAAO,EAAE,MAAM,EAAW,MAAM,EAAE,MAAM,EAAW,IAAI,CAAC,EAAE,MAAM,YAAA;CAC7E;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB;IAWpD,uCAAuC;+BACZ,MAAM;IAEjC,0HAA0H;qBACzG;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE;sBACzD,MAAM;gBAAU,MAAM;;IAC7C,4EAA4E;2BACrD;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE;sBAC/C,MAAM;mBAAa,MAAM;;IAChD,sGAAsG;0BAChF;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;sBACzC,MAAM;gBAAU,MAAM;;IAE7C;;;;;OAKG;yBACwB;QAAE,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;QAAC,IAAI,EAAE,UAAU,CAAC;QAAC,EAAE,EAAE,UAAU,CAAA;KAAE;eAUvE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,CAAA;SAAE;iBAAW,OAAO,EAAE;qBAAe,OAAO;;IAQ7F,2GAA2G;sBACzF;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE;sBAErE,MAAM;IACxB;;;;;;OAMG;qBACoB,MAAM,QAAQ,KAAK,GAAG,KAAK,YAAY,UAAU;IAgBxE,iGAAiG;wBAC7E,MAAM,YAAY,MAAM;sBAA0B,MAAM;oBAAc,MAAM;;0BAC1E,MAAM,UAAU,MAAM;YAAgB,IAAI;;EAEnE;AAED,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/build/keysClient.js

@@ -0,0 +1,109 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * keysClient.ts — key changes on a licensing app, through the keeper.
+ *
+ * - The keys an app holds on chain (vendor, payout address and a pending
+ *   change, platform key and treasury).
+ * - Payout address: the vendor proposes a new one (their wallet sends it);
+ *   it takes effect PAYOUT_DELAY_SLOTS_N slots (48 h) later unless
+ *   cancelled. The keeper applies it then; anyone may (applyPayout).
+ * - Vendor account move: the current and the new wallet both sign a text
+ *   and, for every live deployment, the contract's vendorKeyMessage.
+ * - License transfer (resale): the new owner opens it with the public key
+ *   of their new passphrase (the passphrase never leaves their device), the
+ *   current owner signs, the new owner signs, and the new owner's wallet
+ *   sends it. Only once nothing of the purchase is in escrow.
+ *
+ * Signatures over fields are Mina Schnorr signatures (base58), as an
+ * o1js `Signature` or a wallet's `signFields` gives.
+ */
+import { Field, PublicKey, Signature, UInt32 } from 'o1js';
+import { licenseTransferMessage, vendorKeyMessage } from './contractInterface.js';
+import { networkField } from './permitMessages.js';
+import { ownerPubKeyHash } from './licenseLeaf.js';
+export class KeysError extends Error {
+    status;
+    code;
+    constructor(message, status, code) {
+        super(message);
+        this.status = status;
+        this.code = code;
+    }
+}
+export function createKeysClient(opts) {
+    const base = opts.keeperUrl.replace(/\/+$/, '');
+    const f = opts.fetcher ?? fetch;
+    async function call(method, path, body) {
+        const r = await f(base + path, { method, headers: { 'content-type': 'application/json' }, ...(body === undefined ? {} : { body: JSON.stringify(body) }) });
+        const json = await r.json().catch(() => null);
+        if (!r.ok)
+            throw new KeysError(json?.error ?? `${method} ${path} failed (${r.status})`, r.status, json?.code);
+        return json;
+    }
+    return {
+        /** The keys the app holds on chain. */
+        getAppKeys: (zkAppAddress) => call('GET', `/app-keys?zkAppAddress=${encodeURIComponent(zkAppAddress)}`),
+        /** Proves a payout change for the vendor's wallet to sign and send (its `vendorAddress` must be the app's vendor key). */
+        provePayout: (a) => call('POST', '/prove/payout', a),
+        /** Proves the cancellation of a pending payout change (vendor's wallet). */
+        provePayoutCancel: (a) => call('POST', '/prove/payout/cancel', a),
+        /** Proves applying a payout change past its delay, with any fee payer (the keeper does it itself). */
+        provePayoutApply: (a) => call('POST', '/prove/payout/apply', a),
+        /**
+         * Moves the vendor account from `from` to `to`: both wallets sign the
+         * move and every live deployment's key change. The keeper's records move
+         * at once; it sends the contract changes (or anyone, with /prove/vendor-key).
+         * `network` is the one the wallets' text signatures are made on.
+         */
+        async moveVendorAccount(a) {
+            const prep = await call('POST', '/vendors/move/prepare', { from: a.from.address, to: a.to.address });
+            // Check each message is the key change it says it is before signing.
+            for (const c of prep.changes) {
+                const expected = vendorKeyMessage({ network: networkField(c.network), app: PublicKey.fromBase58(c.zkAppAddress), nonce: UInt32.from(c.nonce), vendor: PublicKey.fromBase58(a.to.address) }).map(String);
+                if (expected.join() !== c.message.join())
+                    throw new KeysError(`The key change for ${c.zkAppAddress} is not the one asked for: not signing`, 0, 'SIGNATURE_INVALID');
+            }
+            const changes = [];
+            for (const c of prep.changes)
+                changes.push({ zkAppAddress: c.zkAppAddress, oldSignature: await a.from.signFields(c.message), newSignature: await a.to.signFields(c.message) });
+            return call('POST', '/vendors/move', {
+                network: a.network, from: a.from.address, to: a.to.address,
+                oldTextSignature: await a.from.signMessage(prep.text), newTextSignature: await a.to.signMessage(prep.text), changes,
+            });
+        },
+        // ── license transfer ────────────────────────────────────────────────────
+        /** The new owner opens a transfer with the public key of their new passphrase (deriveOwnershipKeypair). */
+        openTransfer: (a) => call('POST', '/transfers', a).then(r => r.transfer),
+        getTransfer: (id) => call('GET', `/transfers/${encodeURIComponent(id)}`).then(r => r.transfer),
+        /**
+         * Signs the transfer with an ownership key: the current owner's (`role:
+         * 'old'`; from findOwnershipKeypair, since a license carried over from an
+         * earlier generation is keyed to that one's address) or the new owner's
+         * (`'new'`; deriveOwnershipKeypair with the transfer's zkAppAddress). The message is checked first
+         * against the transfer's details.
+         */
+        async signTransfer(id, role, ownerKey) {
+            const t = await call('GET', `/transfers/${encodeURIComponent(id)}`).then(r => r.transfer);
+            const pub = ownerKey.toPublicKey();
+            if (role === 'old' && ownerPubKeyHash(pub).toString() !== t.from)
+                throw new KeysError('This passphrase does not own the license', 0, 'FORBIDDEN');
+            if (role === 'new' && pub.toBase58() !== t.newOwner)
+                throw new KeysError('This passphrase is not the one the transfer was opened for', 0, 'FORBIDDEN');
+            const expected = licenseTransferMessage({
+                network: networkField(t.network), app: PublicKey.fromBase58(t.zkAppAddress), leafHash: Field(t.leafHash), to: Field(t.to), validUntil: UInt32.from(t.validUntil),
+            }).map(String);
+            if (expected.join() !== t.message.join() || ownerPubKeyHash(PublicKey.fromBase58(t.newOwner)).toString() !== t.to) {
+                throw new KeysError('The transfer message does not match its details: not signing', 0, 'SIGNATURE_INVALID');
+            }
+            const signature = Signature.create(ownerKey, t.message.map(x => Field(x))).toBase58();
+            return call('POST', `/transfers/${encodeURIComponent(id)}/signatures`, {
+                role, signature, ...(role === 'old' ? { ownerPubKey: pub.toBase58() } : {}),
+            }).then(r => r.transfer);
+        },
+        /** Both signed: proves the transfer for `feePayer` (the new owner's wallet) to sign and send. */
+        proveTransfer: (id, feePayer) => call('POST', '/prove/transfer', { id, feePayer }),
+        confirmTransfer: (id, txHash) => call('POST', '/confirm/transfer', { id, txHash }),
+    };
+}
+//# sourceMappingURL=keysClient.js.map

package/build/keysClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keysClient.js","sourceRoot":"","sources":["../src/keysClient.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAmB,MAAM,MAAM,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAwBnD,MAAM,OAAO,SAAU,SAAQ,KAAK;IACI;IAAyB;IAA/D,YAAY,OAAe,EAAW,MAAc,EAAW,IAAa;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAAzD,WAAM,GAAN,MAAM,CAAQ;QAAW,SAAI,GAAJ,IAAI,CAAS;IAAoB,CAAC;CAClG;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAuB;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IAChC,KAAK,UAAU,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACjE,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3J,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAQ,CAAC;QACrD,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,IAAI,GAAG,MAAM,IAAI,IAAI,YAAY,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9G,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,uCAAuC;QACvC,UAAU,EAAE,CAAC,YAAoB,EAAE,EAAE,CAAC,IAAI,CAAU,KAAK,EAAE,0BAA0B,kBAAkB,CAAC,YAAY,CAAC,EAAE,CAAC;QAExH,0HAA0H;QAC1H,WAAW,EAAE,CAAC,CAAkE,EAAE,EAAE,CAClF,IAAI,CAA2C,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5E,4EAA4E;QAC5E,iBAAiB,EAAE,CAAC,CAAkD,EAAE,EAAE,CACxE,IAAI,CAA8C,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACtF,sGAAsG;QACtG,gBAAgB,EAAE,CAAC,CAA6C,EAAE,EAAE,CAClE,IAAI,CAA2C,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAC;QAElF;;;;;WAKG;QACH,KAAK,CAAC,iBAAiB,CAAC,CAAsE;YAC5F,MAAM,IAAI,GAAG,MAAM,IAAI,CACrB,MAAM,EAAE,uBAAuB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/E,qEAAqE;YACrE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACxM,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE;oBAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC,YAAY,wCAAwC,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;YACtK,CAAC;YACD,MAAM,OAAO,GAAG,EAAE,CAAC;YACnB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO;gBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/K,OAAO,IAAI,CAAoF,MAAM,EAAE,eAAe,EAAE;gBACtH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO;gBAC1D,gBAAgB,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO;aACpH,CAAC,CAAC;QACL,CAAC;QAED,2EAA2E;QAE3E,2GAA2G;QAC3G,YAAY,EAAE,CAAC,CAAwE,EAAE,EAAE,CACzF,IAAI,CAAgC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpF,WAAW,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAAgC,KAAK,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrI;;;;;;WAMG;QACH,KAAK,CAAC,YAAY,CAAC,EAAU,EAAE,IAAmB,EAAE,QAAoB;YACtE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAgC,KAAK,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACzH,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YACnC,IAAI,IAAI,KAAK,KAAK,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI;gBAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;YAClJ,IAAI,IAAI,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ;gBAAE,MAAM,IAAI,SAAS,CAAC,4DAA4D,EAAE,CAAC,EAAE,WAAW,CAAC,CAAC;YACvJ,MAAM,QAAQ,GAAG,sBAAsB,CAAC;gBACtC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;aACjK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACf,IAAI,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAClH,MAAM,IAAI,SAAS,CAAC,8DAA8D,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;YAC9G,CAAC;YACD,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtF,OAAO,IAAI,CAAgC,MAAM,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,aAAa,EAAE;gBACpG,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5E,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,iGAAiG;QACjG,aAAa,EAAE,CAAC,EAAU,EAAE,QAAgB,EAAE,EAAE,CAAC,IAAI,CAA+C,MAAM,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QAChJ,eAAe,EAAE,CAAC,EAAU,EAAE,MAAc,EAAE,EAAE,CAAC,IAAI,CAAe,MAAM,EAAE,mBAAmB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;KACjH,CAAC;AACJ,CAAC"}