zklicensing 0.1.0-beta.2 → 0.1.0-beta.21

package/build/permitCheckFlow.d.ts

@@ -0,0 +1,155 @@
+import { type PermitRecord } from './permitRegistryRebuild.js';
+import { type TreeCache } from './permitTree.js';
+import type { PermitMessageDescription } from './permitDescribe.js';
+export type Network = 'devnet' | 'mainnet';
+export type CheckView = {
+    id: string;
+    network: Network;
+    registry: string;
+    requiredScope: string;
+    label: string;
+    nonce: string;
+    createdAt: string;
+    expiresAt: string;
+    status: 'waiting' | 'proved' | 'expired';
+    event?: {
+        id: string;
+        label: string;
+        expiresAt: string;
+    };
+};
+export type CheckEventView = {
+    id: string;
+    network: Network;
+    registry: string;
+    requiredScope: string;
+    label: string;
+    createdAt: string;
+    expiresAt: string;
+};
+/**
+ * The holder's permit file (from the apply page): no secret in it. `registry`
+ * is where it was issued; `lineage`, that registry's first generation's
+ * address (what its secret is derived against; `registry` when absent).
+ */
+export type PermitFileRef = {
+    registry: string;
+    subject: string;
+    holderKey: string;
+    network?: string;
+    lineage?: string;
+};
+export declare class CheckError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(message: string, code: string, status?: number);
+}
+/** The keeper's check relay. */
+export declare function createCheckRelay(keeperUrl: string, fetcher?: typeof fetch): {
+    /** A single check: its own nonce, so its nullifier never repeats. */
+    openCheck: (a: {
+        registry: string;
+        network?: Network;
+        requiredScope?: string;
+        label?: string;
+    }) => Promise<CheckView>;
+    /** A check in an event (the event's nonce), opened with the event key. */
+    openEventCheck: (eventId: string, eventKey: string) => Promise<CheckView>;
+    getCheck: (id: string) => Promise<{
+        check: CheckView;
+        proof?: unknown;
+        provedAt?: string;
+    }>;
+    submitProof: (id: string, proof: unknown) => Promise<{
+        ok: true;
+    }>;
+    createEvent: (a: {
+        registry: string;
+        network?: Network;
+        requiredScope?: string;
+        label: string;
+        days?: number;
+    }) => Promise<{
+        event: CheckEventView;
+        eventKey: string;
+    }>;
+    getEvent: (id: string) => Promise<CheckEventView>;
+    /** Records a verified nullifier at the event: first use there, or when it was first seen. */
+    markSeen: (eventId: string, eventKey: string, nullifier: string) => Promise<{
+        firstUse: boolean;
+        firstSeenAt: string;
+        count: number;
+    }>;
+    seenCount: (eventId: string, eventKey: string) => Promise<number>;
+    /** The registry's compact tree (zklicensing/permits/tree), or with `since` the changes since that root. */
+    getTree: (registry: string, since?: string) => Promise<any>;
+    getRoots: (registry: string) => Promise<{
+        roots: Array<{
+            root: string;
+            slot: number;
+        }>;
+        current: string;
+        slot: number;
+    }>;
+};
+/** The Merkle witness for `subject`, built locally from all of a registry's permits. */
+export declare function witnessFromPermits(permits: PermitRecord[], subject: string): {
+    root: string;
+    witness: {
+        isLefts: boolean[];
+        siblings: string[];
+    };
+};
+export type ProveStep = 'check' | 'registry' | 'sign-secret' | 'sign-proof' | 'compile-prove' | 'send';
+/**
+ * Holder: proves to a check that this wallet holds an active permit covering
+ * the check's activities, and sends the proof. `origin` is the site the
+ * holder is on (the check's verifier). Two wallet signatures: one re-derives
+ * the permit's secret, one authorises the proof.
+ */
+export declare function proveForCheck(opts: {
+    keeperUrl: string;
+    network: Network;
+    checkId: string;
+    permit: PermitFileRef;
+    wallet: {
+        address: string;
+        signFields(fields: string[]): Promise<string>;
+        signMessage(message: string): Promise<{
+            field: string;
+            scalar: string;
+        }>;
+    };
+    origin: string;
+    graphqlUrl?: string;
+    fetcher?: typeof fetch;
+    /** Where to keep registry copies between checks (IndexedDB in a browser); without one, each check downloads the registry. */
+    treeCache?: TreeCache;
+    onStep?: (step: ProveStep) => void;
+    /** Shown before the proof's field signature (as PermitsClientOptions.confirmSignature); false cancels. */
+    confirmSignature?: (d: PermitMessageDescription) => Promise<boolean | void> | boolean | void;
+}): Promise<{
+    nullifier: string;
+}>;
+/**
+ * Checker: verifies the proof sent to a check, in this process. Roots from
+ * the keeper's recent roots, or with `trustless` only the registry's current
+ * root read from a Mina node. `origin` is the site the check was opened on.
+ */
+export declare function verifyCheck(opts: {
+    keeperUrl: string;
+    network: Network;
+    checkId: string;
+    origin: string;
+    trustless?: boolean;
+    maxSlotSkew?: number;
+    graphqlUrl?: string;
+    fetcher?: typeof fetch;
+}): Promise<{
+    status: CheckView['status'];
+    check: CheckView;
+    valid: boolean;
+    nullifier: string | null;
+    reason: string | null;
+}>;
+//# sourceMappingURL=permitCheckFlow.d.ts.map

package/build/permitCheckFlow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permitCheckFlow.d.ts","sourceRoot":"","sources":["../src/permitCheckFlow.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAgC,KAAK,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC3F,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAEpE,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE3C,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IACpG,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC/E,KAAK,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1D,CAAC;AACF,MAAM,MAAM,cAAc,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5J;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzH,qBAAa,UAAW,SAAQ,KAAK;IACN,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAE,QAAQ,CAAC,MAAM;gBAAvD,OAAO,EAAE,MAAM,EAAW,IAAI,EAAE,MAAM,EAAW,MAAM,SAAI;CACxE;AAED,gCAAgC;AAChC,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,OAAO,KAAa;IAa7E,qEAAqE;mBACtD;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAE9F,0EAA0E;8BAChD,MAAM,YAAY,MAAM;mBAEnC,MAAM;eAAmB,SAAS;gBAAU,OAAO;mBAAa,MAAM;;sBACnE,MAAM,SAAS,OAAO;YAAgB,IAAI;;qBAC3C;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE;eAC9F,cAAc;kBAAY,MAAM;;mBACjC,MAAM;IACrB,6FAA6F;wBACzE,MAAM,YAAY,MAAM,aAAa,MAAM;kBAC5C,OAAO;qBAAe,MAAM;eAAS,MAAM;;yBACzC,MAAM,YAAY,MAAM;IAE7C,2GAA2G;wBACvF,MAAM,UAAU,MAAM;yBAErB,MAAM;eAAmB,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;iBAAW,MAAM;cAAQ,MAAM;;EAErH;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,CAKlJ;AAED,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,aAAa,GAAG,YAAY,GAAG,eAAe,GAAG,MAAM,CAAC;AAEvG;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IACrJ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,6HAA6H;IAC7H,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;IACnC,0GAA0G;IAC1G,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,wBAAwB,KAAK,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC;CAC9F,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAyEjC;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAuB9H"}

package/build/permitCheckFlow.js

@@ -0,0 +1,196 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * permitCheckFlow.ts — `zklicensing/permits/check`
+ *
+ * Anonymous permit checks through the keeper's relay (verify.html's
+ * Anonymous mode and prove.html use this; so can any checker or holder app).
+ *
+ *   checker:  openCheck (or createCheckEvent + openCheck in it) → show the
+ *             check's link → verifyCheck once the holder has proved
+ *   holder:   proveForCheck(checkId, permit file, wallet)
+ *
+ * The challenge is bound to the site both sides are on: context =
+ * verifierContext(origin, check nonce). The holder builds its Merkle witness
+ * from a compact copy of the whole registry (zklicensing/permits/tree), so
+ * the keeper never learns which permit is being proved; the proof itself
+ * reveals nothing about it. The checker verifies the proof itself, against roots from the keeper or, with
+ * `trustless`, from a Mina node.
+ */
+import { Field, MerkleMap, PublicKey } from 'o1js';
+import { permitLeafHash } from './permitMessages.js';
+import { recordToLeaf, permitStatusAt } from './permitRegistryRebuild.js';
+import { syncRegistryTree, witnessFromCompactTree } from './permitTree.js';
+export class CheckError extends Error {
+    code;
+    status;
+    constructor(message, code, status = 0) {
+        super(message);
+        this.code = code;
+        this.status = status;
+        this.name = 'CheckError';
+    }
+}
+/** The keeper's check relay. */
+export function createCheckRelay(keeperUrl, fetcher = fetch) {
+    const base = keeperUrl.replace(/\/+$/, '');
+    async function call(method, path, body, headers = {}) {
+        const r = await fetcher(base + path, {
+            method, cache: 'no-store',
+            headers: { Accept: 'application/json', ...(body === undefined ? {} : { 'Content-Type': 'application/json' }), ...headers },
+            body: body === undefined ? undefined : JSON.stringify(body),
+        });
+        const j = await r.json().catch(() => null);
+        if (!r.ok)
+            throw new CheckError(j?.error ?? `HTTP ${r.status}`, j?.code ?? 'HTTP_ERROR', r.status);
+        return j;
+    }
+    return {
+        /** A single check: its own nonce, so its nullifier never repeats. */
+        openCheck: (a) => call('POST', '/permits/checks', a).then(r => r.check),
+        /** A check in an event (the event's nonce), opened with the event key. */
+        openEventCheck: (eventId, eventKey) => call('POST', '/permits/checks', { eventId }, { 'X-Event-Key': eventKey }).then(r => r.check),
+        getCheck: (id) => call('GET', `/permits/checks/${encodeURIComponent(id)}`),
+        submitProof: (id, proof) => call('POST', `/permits/checks/${encodeURIComponent(id)}/proof`, { proof }),
+        createEvent: (a) => call('POST', '/permits/check-events', a),
+        getEvent: (id) => call('GET', `/permits/check-events/${encodeURIComponent(id)}`).then(r => r.event),
+        /** Records a verified nullifier at the event: first use there, or when it was first seen. */
+        markSeen: (eventId, eventKey, nullifier) => call('POST', `/permits/check-events/${encodeURIComponent(eventId)}/seen`, { nullifier }, { 'X-Event-Key': eventKey }),
+        seenCount: (eventId, eventKey) => call('GET', `/permits/check-events/${encodeURIComponent(eventId)}/seen`, undefined, { 'X-Event-Key': eventKey }).then(r => r.count),
+        /** The registry's compact tree (zklicensing/permits/tree), or with `since` the changes since that root. */
+        getTree: (registry, since) => call('GET', `/permits/registries/${encodeURIComponent(registry)}/tree${since ? `?since=${encodeURIComponent(since)}` : ''}`),
+        getRoots: (registry) => call('GET', `/permits/registries/${encodeURIComponent(registry)}/roots`),
+    };
+}
+/** The Merkle witness for `subject`, built locally from all of a registry's permits. */
+export function witnessFromPermits(permits, subject) {
+    const map = new MerkleMap();
+    for (const p of permits)
+        map.set(Field(p.subject), permitLeafHash(recordToLeaf(p)));
+    const w = map.getWitness(Field(subject));
+    return { root: map.getRoot().toString(), witness: { isLefts: w.isLefts.map(b => b.toBoolean()), siblings: w.siblings.map(s => s.toString()) } };
+}
+/**
+ * Holder: proves to a check that this wallet holds an active permit covering
+ * the check's activities, and sends the proof. `origin` is the site the
+ * holder is on (the check's verifier). Two wallet signatures: one re-derives
+ * the permit's secret, one authorises the proof.
+ */
+export async function proveForCheck(opts) {
+    const step = opts.onStep ?? (() => { });
+    const relay = createCheckRelay(opts.keeperUrl, opts.fetcher);
+    step('check');
+    const { check } = await relay.getCheck(opts.checkId);
+    if (check.status !== 'waiting')
+        throw new CheckError(check.status === 'proved' ? 'This check already has a proof.' : 'This check has expired; ask for a new one.', 'CHECK_CLOSED');
+    if (check.network !== opts.network)
+        throw new CheckError(`This check is on ${check.network}.`, 'WRONG_NETWORK');
+    const p = opts.permit;
+    if (p.network && p.network !== opts.network)
+        throw new CheckError(`Your permit is on ${p.network}; this check is on ${opts.network}.`, 'WRONG_NETWORK');
+    if (opts.wallet.address !== p.holderKey)
+        throw new CheckError(`Connect the permit's holder key ${p.holderKey}.`, 'WRONG_KEY');
+    if (p.registry !== check.registry) {
+        // Issued by an earlier generation: fine when, on chain, its successors lead to the registry checked.
+        const [{ currentOnChain, PERMIT_LINEAGE }, { CANONICAL_PERMIT_VK_HASHES }, { DEFAULT_MINA_GRAPHQL_URLS }] = await Promise.all([
+            import('./successorChain.js'), import('./permitInterface.js'), import('./onChainRoot.js'),
+        ]);
+        const current = await currentOnChain({
+            start: p.registry, layout: PERMIT_LINEAGE, canonicalVks: Object.values(CANONICAL_PERMIT_VK_HASHES),
+            graphqlUrl: opts.graphqlUrl ?? DEFAULT_MINA_GRAPHQL_URLS[opts.network], fetcher: opts.fetcher,
+        }).then(r => r.address, () => null);
+        if (current !== check.registry)
+            throw new CheckError('Your permit is from another registry than the one this check asks for.', 'WRONG_REGISTRY');
+    }
+    step('registry');
+    // The whole registry (a compact copy, kept between checks), so the keeper
+    // can't tell which permit is proved; the root and slot from a Mina node,
+    // so the proof is for the chain's current state.
+    const { readChainHead } = await import('./chainHead.js');
+    const [tree, head] = await Promise.all([
+        syncRegistryTree({ registry: check.registry, fetchTree: since => relay.getTree(check.registry, since), cache: opts.treeCache }),
+        readChainHead({ address: check.registry, network: opts.network, graphqlUrl: opts.graphqlUrl, fetcher: opts.fetcher }),
+    ]);
+    if (tree.root !== head.root)
+        throw new CheckError('zkLicensing\'s copy of the registry is behind the blockchain; try again in a minute.', 'ROOT_BEHIND');
+    let found;
+    try {
+        found = witnessFromCompactTree(tree, p.subject);
+    }
+    catch (e) {
+        throw new CheckError(e?.message ?? String(e), /no such permit/.test(e?.message) ? 'NOT_FOUND' : 'ROOT_MISMATCH');
+    }
+    const { witness, permit: rec } = found;
+    const status = permitStatusAt(rec, head.slot);
+    if (status !== 'active')
+        throw new CheckError(`Your permit is ${status}.`, 'NOT_ACTIVE');
+    const required = BigInt(check.requiredScope);
+    if ((BigInt(rec.scope) & required) !== required)
+        throw new CheckError('Your permit doesn\'t cover the activities this check asks for.', 'SCOPE');
+    step('sign-secret');
+    // Re-derived with the wallet against the permit's lineage: nothing from the keeper.
+    const { findHolderSecret } = await import('./holderSecret.js');
+    let secret;
+    try {
+        ({ secret } = await findHolderSecret(opts.wallet, { lineage: p.lineage ?? p.registry, network: opts.network, subject: p.subject }));
+    }
+    catch (e) {
+        throw new CheckError(e?.message ?? String(e), 'WRONG_SECRET');
+    }
+    step('sign-proof');
+    const { holderProofMessage, verifierContext, proveHolder } = await import('./permitProof.js');
+    const context = verifierContext(opts.origin, check.nonce);
+    const msg = holderProofMessage(PublicKey.fromBase58(check.registry), Field(head.root), Field(context));
+    const fields = msg.map(f => f.toString());
+    if (opts.confirmSignature) {
+        const { fingerprint } = await import('./permitDescribe.js');
+        const d = {
+            kind: 'holderProof', title: `Prove to ${new URL(opts.origin).host} that you hold an active permit, without saying which`,
+            facts: [['Checker', opts.origin], ['Registry', check.registry], ['Network', opts.network], ['Check', check.label || check.id]],
+            network: opts.network, registry: check.registry, verified: true, fingerprint: fingerprint(fields),
+        };
+        if ((await opts.confirmSignature(d)) === false)
+            throw new CheckError('Cancelled', 'CANCELLED');
+    }
+    const holderSignature = await opts.wallet.signFields(fields);
+    step('compile-prove');
+    const { proof, nullifier } = await proveHolder({
+        registry: check.registry, root: head.root, witness, leaf: recordToLeaf(rec), holderSecret: secret,
+        slot: head.slot, requiredScope: required, context, holderSignature,
+    });
+    step('send');
+    await relay.submitProof(check.id, proof);
+    return { nullifier };
+}
+/**
+ * Checker: verifies the proof sent to a check, in this process. Roots from
+ * the keeper's recent roots, or with `trustless` only the registry's current
+ * root read from a Mina node. `origin` is the site the check was opened on.
+ */
+export async function verifyCheck(opts) {
+    const relay = createCheckRelay(opts.keeperUrl, opts.fetcher);
+    const { check, proof } = await relay.getCheck(opts.checkId);
+    if (!proof)
+        return { status: check.status, check, valid: false, nullifier: null, reason: null };
+    let acceptedRoots;
+    let currentSlot;
+    if (opts.trustless) {
+        const { readChainHead } = await import('./chainHead.js');
+        const head = await readChainHead({ address: check.registry, network: opts.network, graphqlUrl: opts.graphqlUrl, fetcher: opts.fetcher });
+        acceptedRoots = [head.root];
+        currentSlot = head.slot;
+    }
+    else {
+        const r = await relay.getRoots(check.registry);
+        const { freshRoots } = await import('./agent.js');
+        acceptedRoots = freshRoots(r.roots, r.current, r.slot, opts.maxSlotSkew ?? 10);
+        currentSlot = r.slot;
+    }
+    const { verifyHolderProof } = await import('./permitProof.js');
+    const res = await verifyHolderProof(proof, {
+        registry: check.registry, acceptedRoots, currentSlot, maxSlotSkew: opts.maxSlotSkew,
+        requiredScope: BigInt(check.requiredScope), verifier: opts.origin, nonce: check.nonce,
+    });
+    return { status: 'proved', check, ...res };
+}
+//# sourceMappingURL=permitCheckFlow.js.map

package/build/permitCheckFlow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permitCheckFlow.js","sourceRoot":"","sources":["../src/permitCheckFlow.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAqB,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAkB,MAAM,iBAAiB,CAAC;AAmB3F,MAAM,OAAO,UAAW,SAAQ,KAAK;IACG;IAAuB;IAA7D,YAAY,OAAe,EAAW,IAAY,EAAW,SAAS,CAAC;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAApD,SAAI,GAAJ,IAAI,CAAQ;QAAW,WAAM,GAAN,MAAM,CAAI;QAAoB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAAC,CAAC;CACvH;AAED,gCAAgC;AAChC,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,UAAwB,KAAK;IAC/E,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,KAAK,UAAU,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc,EAAE,UAAkC,EAAE;QACvG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,GAAG,IAAI,EAAE;YACnC,MAAM,EAAE,KAAK,EAAE,UAAU;YACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE;YAC1H,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,CAAC,GAAQ,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,IAAI,UAAU,CAAC,CAAC,EAAE,KAAK,IAAI,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,IAAI,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACnG,OAAO,CAAM,CAAC;IAChB,CAAC;IACD,OAAO;QACL,qEAAqE;QACrE,SAAS,EAAE,CAAC,CAAkF,EAAE,EAAE,CAChG,IAAI,CAAuB,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7E,0EAA0E;QAC1E,cAAc,EAAE,CAAC,OAAe,EAAE,QAAgB,EAAE,EAAE,CACpD,IAAI,CAAuB,MAAM,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACpH,QAAQ,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAA2D,KAAK,EAAE,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5I,WAAW,EAAE,CAAC,EAAU,EAAE,KAAc,EAAE,EAAE,CAAC,IAAI,CAAe,MAAM,EAAE,mBAAmB,kBAAkB,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC;QACrI,WAAW,EAAE,CAAC,CAAgG,EAAE,EAAE,CAChH,IAAI,CAA8C,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACvF,QAAQ,EAAE,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,CAA4B,KAAK,EAAE,yBAAyB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACtI,6FAA6F;QAC7F,QAAQ,EAAE,CAAC,OAAe,EAAE,QAAgB,EAAE,SAAiB,EAAE,EAAE,CACjE,IAAI,CAA4D,MAAM,EAAE,yBAAyB,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;QAClL,SAAS,EAAE,CAAC,OAAe,EAAE,QAAgB,EAAE,EAAE,CAC/C,IAAI,CAAoB,KAAK,EAAE,yBAAyB,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACxJ,2GAA2G;QAC3G,OAAO,EAAE,CAAC,QAAgB,EAAE,KAAc,EAAE,EAAE,CAC5C,IAAI,CAAM,KAAK,EAAE,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,UAAU,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACnI,QAAQ,EAAE,CAAC,QAAgB,EAAE,EAAE,CAAC,IAAI,CAAkF,KAAK,EAAE,uBAAuB,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC1L,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAC,OAAuB,EAAE,OAAe;IACzE,MAAM,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;AAClJ,CAAC;AAID;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAcnC;IACC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,4CAA4C,EAAE,cAAc,CAAC,CAAC;IACnL,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,KAAK,CAAC,OAAO,GAAG,EAAE,eAAe,CAAC,CAAC;IAChH,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,UAAU,CAAC,qBAAqB,CAAC,CAAC,OAAO,sBAAsB,IAAI,CAAC,OAAO,GAAG,EAAE,eAAe,CAAC,CAAC;IACxJ,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,CAAC,CAAC,SAAS;QAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC,SAAS,GAAG,EAAE,WAAW,CAAC,CAAC;IAC9H,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,qGAAqG;QACrG,MAAM,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,EAAE,EAAE,0BAA0B,EAAE,EAAE,EAAE,yBAAyB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5H,MAAM,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC,kBAAkB,CAAC;SAC1F,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC;YACnC,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC;YAClG,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;SAC9F,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,KAAK,CAAC,QAAQ;YAAE,MAAM,IAAI,UAAU,CAAC,wEAAwE,EAAE,gBAAgB,CAAC,CAAC;IACnJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,CAAC;IACjB,0EAA0E;IAC1E,yEAAyE;IACzE,iDAAiD;IACjD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACzD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACrC,gBAAgB,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/H,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;KACtH,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,UAAU,CAAC,sFAAsF,EAAE,aAAa,CAAC,CAAC;IACzJ,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QAAC,KAAK,GAAG,sBAAsB,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IACxD,OAAO,CAAM,EAAE,CAAC;QAAC,MAAM,IAAI,UAAU,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;IAAC,CAAC;IACpI,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACvC,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,kBAAkB,MAAM,GAAG,EAAE,YAAY,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,gEAAgE,EAAE,OAAO,CAAC,CAAC;IAEjJ,IAAI,CAAC,aAAa,CAAC,CAAC;IACpB,oFAAoF;IACpF,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/D,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAC5I,OAAO,CAAM,EAAE,CAAC;QAAC,MAAM,IAAI,UAAU,CAAC,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAAC,CAAC;IAEjF,IAAI,CAAC,YAAY,CAAC,CAAC;IACnB,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9F,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,kBAAkB,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACvG,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC5D,MAAM,CAAC,GAA6B;YAClC,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,uDAAuD;YACxH,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;YAC9H,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC;SAClG,CAAC;QACF,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACjG,CAAC;IACD,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAE7D,IAAI,CAAC,eAAe,CAAC,CAAC;IACtB,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,WAAW,CAAC;QAC7C,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,MAAM;QACjG,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe;KACnE,CAAC,CAAC;IAEH,IAAI,CAAC,MAAM,CAAC,CAAC;IACb,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IASjC;IACC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAChG,IAAI,aAAuB,CAAC;IAC5B,IAAI,WAAmB,CAAC;IACxB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACzI,aAAa,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAClD,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC/E,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IACvB,CAAC;IACD,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE;QACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW;QACnF,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;KACtF,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,GAAG,EAAE,CAAC;AAC7C,CAAC"}

package/build/permitDescribe.d.ts

@@ -0,0 +1,124 @@
+import { type PermitNetwork } from './permitMessages.js';
+import { type ApplicationRecord, type PermitRecord } from './permitRegistryRebuild.js';
+export type PermitMessageDescription = {
+    kind: string;
+    /** One line: what signing does. */
+    title: string;
+    /** The details, as label/value pairs. */
+    facts: Array<[string, string]>;
+    network: PermitNetwork | null;
+    registry: string | null;
+    /** The details were checked to give exactly these numbers. */
+    verified: boolean;
+    /** Why not, when not verified. */
+    problem?: string;
+    /** For comparing with the wallet: "7 numbers, the last ending …123456". */
+    fingerprint: string;
+};
+export type DescribeContext = {
+    /** Activity names by bit (the registry's scopes). */
+    scopeLabel?: (bit: number) => string;
+    /** A date for a slot. */
+    slotLabel?: (slot: number) => string;
+    /** The registry's configuration, for a deployment request. */
+    registry?: {
+        keys: string[];
+        threshold: number;
+        payout: string;
+        metadataHash: string;
+        policy: {
+            gracePeriod: number;
+            maxTerm: number;
+            singleKeySuspend: boolean;
+            holderSigRequired: boolean;
+        };
+        /** processingFee and minProcessingFee default to DEFAULT_MIN_PROCESSING_FEE, as the keeper does for older drafts. */
+        fees: {
+            grantFee: string;
+            renewalFee: string;
+            minFee: string;
+            processingFee?: string;
+            minProcessingFee?: string;
+        };
+        /** Slots from filing an application to its decision deadline (default DEFAULT_DECISION_WINDOW). */
+        decisionWindow?: number;
+        /** A redeploy: the frozen tree this one starts with and the registry it replaces (the chain checks both). */
+        initialPermitsRoot?: string;
+        forkActivationSlot?: number;
+        predecessor?: string;
+        generation?: number;
+    };
+};
+export declare function fingerprint(fields: string[]): string;
+/**
+ * Describes an authority request (the keeper's RequestView: kind, message
+ * and its details) and checks that the details give exactly `message`.
+ */
+export declare function describeRequest(q: {
+    kind: string;
+    registry: string;
+    message: string[];
+    oldLeaf?: PermitRecord;
+    newLeaf?: PermitRecord;
+    fee?: string;
+    reasonCode?: string;
+    newFeesPacked?: string;
+    newAppTermsPacked?: string;
+    newKeys?: string[];
+    newThreshold?: number;
+    application?: ApplicationRecord;
+    newPayout?: string;
+}, ctx?: DescribeContext): PermitMessageDescription;
+/** The holder accepting a permit and its fee (acceptMessage). */
+export declare function describeAccept(a: {
+    network: PermitNetwork;
+    registry: string;
+    newLeaf: PermitRecord;
+    fee: string;
+    fields: string[];
+}, ctx?: DescribeContext): PermitMessageDescription;
+/**
+ * The holder moving a permit to a new key (rekeyMessage): signed by the
+ * current key and the new one. Same terms, a new subject; the old one closes.
+ */
+export declare function describeRekey(a: {
+    network: PermitNetwork;
+    registry: string;
+    leaf: PermitRecord;
+    newSubject: string;
+    newHolderKey: string;
+    fields: string[];
+}, ctx?: DescribeContext): PermitMessageDescription;
+/** The holder giving up a permit (surrenderMessage). */
+export declare function describeSurrender(a: {
+    network: PermitNetwork;
+    registry: string;
+    leaf: PermitRecord;
+    fields: string[];
+}, ctx?: DescribeContext): PermitMessageDescription;
+/**
+ * The holder's application (applyMessage): the terms and the fee put in
+ * escrow. `application.payer` and `deadline` aren't part of what the holder
+ * signs (the sender pays; the contract sets the deadline).
+ */
+export declare function describeApply(a: {
+    network: PermitNetwork;
+    registry: string;
+    application: ApplicationRecord;
+    fields: string[];
+}, ctx?: DescribeContext): PermitMessageDescription;
+/** The holder withdrawing an application (withdrawMessage). */
+export declare function describeWithdraw(a: {
+    network: PermitNetwork;
+    registry: string;
+    application: ApplicationRecord;
+    fields: string[];
+}, ctx?: DescribeContext): PermitMessageDescription;
+/** What any zkPermits field message is, from the numbers alone (kind, network, registry); details need describeRequest. */
+export declare function identifyPermitMessage(fields: string[]): {
+    kind: string | null;
+    network: PermitNetwork | null;
+    registry: string | null;
+    fingerprint: string;
+};
+//# sourceMappingURL=permitDescribe.d.ts.map

package/build/permitDescribe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permitDescribe.d.ts","sourceRoot":"","sources":["../src/permitDescribe.ts"],"names":[],"mappings":"AAiBA,OAAO,EAGmI,KAAK,aAAa,EAC3J,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAqC,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAI1H,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,yCAAyC;IACzC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/B,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,8DAA8D;IAC9D,QAAQ,EAAE,OAAO,CAAC;IAClB,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,qDAAqD;IACrD,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC;IACrC,yBAAyB;IACzB,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QACxE,MAAM,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,OAAO,CAAC;YAAC,iBAAiB,EAAE,OAAO,CAAA;SAAE,CAAC;QACxG,qHAAqH;QACrH,IAAI,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAC;YAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAClH,mGAAmG;QACnG,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,6GAA6G;QAC7G,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;CACH,CAAC;AAMF,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAGpD;AAiDD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE;IACjC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClD,OAAO,CAAC,EAAE,YAAY,CAAC;IAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC9F,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CACrD,EAAE,GAAG,GAAE,eAAoB,GAAG,wBAAwB,CAmJtD;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,CAAC,EAAE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,GAAG,GAAE,eAAoB,GAAG,wBAAwB,CASzL;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,GAAG,GAAE,eAAoB,GAAG,wBAAwB,CASlN;AAED,wDAAwD;AACxD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,GAAG,GAAE,eAAoB,GAAG,wBAAwB,CAS5K;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,GAAG,GAAE,eAAoB,GAAG,wBAAwB,CAmBpL;AAED,+DAA+D;AAC/D,wBAAgB,gBAAgB,CAAC,CAAC,EAAE;IAAE,OAAO,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,GAAG,GAAE,eAAoB,GAAG,wBAAwB,CAavL;AAED,2HAA2H;AAC3H,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG;IAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAE5J"}