zklicensing 0.1.0-beta.2 → 0.1.0-beta.21

package/build/registryTrustVerify.d.ts

@@ -0,0 +1,78 @@
+/**
+ * registryTrustVerify.ts — `zklicensing/permits/trust`
+ *
+ * Is this address a genuine, unmodifiable zkPermits registry? The permits
+ * counterpart of verifyTrustAnchor, used by `zklicensing-verify-trust
+ * --registry`. Each check is a discrete finding:
+ *
+ *   chain_account_exists              the account exists and is a zkApp
+ *   chain_vk_hash_pinned              its verification key is a published PermitRegistry release
+ *   chain_initialized                 authority keys are set (initialize ran)
+ *   chain_network_bound               the registry is bound to this network
+ *   chain_set_verification_key_locked the circuit can't be replaced
+ *   chain_set_permissions_impossible  permissions are frozen
+ *   chain_send_proof_only             funds move only through the circuit
+ *   chain_edit_state_proof_only       state changes only through the circuit
+ *   chain_set_zkapp_uri_impossible, chain_set_delegate_impossible, chain_set_timing_impossible
+ *   chain_website_bound               the authority's https website is written into zkappUri (set at deploy, frozen)
+ *   website_expected                  (with website) that website is on the host you expected
+ *   website_claims_registry           (with checkWellKnown) the website serves
+ *                                     /.well-known/zkpermits/<address>.json naming this registry and network
+ *   keeper_keys_match                 (with keeperUrl) the keeper's authority keys hash to the on-chain value
+ *   keeper_payout_match               (with keeperUrl) the keeper's payout address is the on-chain one
+ *   keeper_website_match              (with keeperUrl) the keeper lists the same website
+ *
+ * The website pair is the registry's identity: zkappUri says which site the
+ * registry belongs to, and the .well-known file, which only that site's
+ * owner can publish, says the site claims the registry. A copy of a real
+ * authority's registry under another address can't have both.
+ *
+ * Until the circuit is released after its audit, no verification-key hash
+ * is published, and chain_vk_hash_pinned fails by design.
+ */
+import type { Finding } from './trustAnchorVerify.js';
+export { permToString } from './trustAnchorVerify.js';
+export type RegistryChainFacts = {
+    accountFound: boolean;
+    fetchError?: string;
+    vkHash?: string;
+    /** The website written at deploy. */
+    zkappUri?: string;
+    /** appState as decimal strings. */
+    appState?: string[];
+    /** Permission names as permToString gives them ('Impossible', 'Proof', …). */
+    permissions?: Record<'setVerificationKey' | 'setPermissions' | 'send' | 'editState' | 'setZkappUri' | 'setDelegate' | 'setTiming', string | undefined>;
+};
+export type RegistryTrustReport = {
+    ok: boolean;
+    address: string;
+    network: 'devnet' | 'mainnet';
+    findings: Finding[];
+};
+export type VerifyRegistryTrustOpts = {
+    address: string;
+    network: 'devnet' | 'mainnet';
+    /** Mina node GraphQL; default the public node for the network. */
+    minaGraphqlUrl?: string;
+    /** Also compare the keeper's record with the chain. */
+    keeperUrl?: string;
+    fetcher?: typeof fetch;
+    /** Override the chain read (tests, custom nodes). */
+    readChain?: (address: string) => Promise<RegistryChainFacts>;
+    /** The authority's website you expect (from its letters, signage or your own bookmarks); compared by host. */
+    website?: string;
+    /** Fetch the website's /.well-known/zkpermits/<address>.json and check it claims this registry. */
+    checkWellKnown?: boolean;
+    /** Override the published hashes (tests). */
+    canonicalVkHashes?: Readonly<Record<number, string>>;
+};
+/** Where an authority's website claims a registry: one file per registry address. */
+export declare function wellKnownPath(address: string): string;
+/** The file an authority publishes at wellKnownPath(address) on its website. */
+export declare function wellKnownFile(address: string, network: 'devnet' | 'mainnet', name?: string): {
+    registry: string;
+    network: 'devnet' | 'mainnet';
+    name?: string;
+};
+export declare function verifyRegistryTrust(opts: VerifyRegistryTrustOpts): Promise<RegistryTrustReport>;
+//# sourceMappingURL=registryTrustVerify.d.ts.map

package/build/registryTrustVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registryTrustVerify.d.ts","sourceRoot":"","sources":["../src/registryTrustVerify.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC,oBAAoB,GAAG,gBAAgB,GAAG,MAAM,GAAG,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CACxJ,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE,OAAO,EAAE,CAAA;CAAE,CAAC;AAEvH,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAC9B,kEAAkE;IAClE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,qDAAqD;IACrD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC7D,8GAA8G;IAC9G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mGAAmG;IACnG,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,6CAA6C;IAC7C,iBAAiB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtD,CAAC;AAEF,qFAAqF;AACrF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,GAAG,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAE/J;AAiCD,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA+ErG"}

package/build/registryTrustVerify.js

@@ -0,0 +1,129 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+export { permToString } from './trustAnchorVerify.js';
+/** Where an authority's website claims a registry: one file per registry address. */
+export function wellKnownPath(address) {
+    return `/.well-known/zkpermits/${address}.json`;
+}
+/** The file an authority publishes at wellKnownPath(address) on its website. */
+export function wellKnownFile(address, network, name) {
+    return { registry: address, network, ...(name ? { name } : {}) };
+}
+function httpsUrl(v) {
+    if (!v)
+        return null;
+    try {
+        const u = new URL(v);
+        return u.protocol === 'https:' && u.hostname && !u.username && !u.password ? u : null;
+    }
+    catch {
+        return null;
+    }
+}
+async function readRegistryChain(address, graphqlUrl, fetcher) {
+    try {
+        const { readZkappAccount } = await import('./chainHead.js');
+        const a = await readZkappAccount({ address, graphqlUrl, fetcher });
+        if (!a.found)
+            return { accountFound: false, fetchError: 'no account' };
+        const p = a.permissions ?? {};
+        return {
+            accountFound: true,
+            vkHash: a.vkHash,
+            zkappUri: a.zkappUri,
+            appState: a.appState,
+            permissions: {
+                setVerificationKey: p.setVerificationKey?.auth,
+                setPermissions: p.setPermissions,
+                send: p.send,
+                editState: p.editState,
+                setZkappUri: p.setZkappUri,
+                setDelegate: p.setDelegate,
+                setTiming: p.setTiming,
+            },
+        };
+    }
+    catch (e) {
+        return { accountFound: false, fetchError: e?.message ?? String(e) };
+    }
+}
+export async function verifyRegistryTrust(opts) {
+    const { DEFAULT_MINA_GRAPHQL_URLS } = await import('./onChainRoot.js');
+    const { PERMIT_REGISTRY_STATE, CANONICAL_PERMIT_VK_HASHES } = await import('./permitInterface.js');
+    const findings = [];
+    const add = (name, ok, detail) => findings.push({ name, ok, detail });
+    const done = () => ({ ok: findings.every(f => f.ok), address: opts.address, network: opts.network, findings });
+    const read = opts.readChain ?? ((a) => readRegistryChain(a, opts.minaGraphqlUrl ?? DEFAULT_MINA_GRAPHQL_URLS[opts.network], opts.fetcher));
+    const chain = await read(opts.address);
+    add('chain_account_exists', chain.accountFound && !!chain.vkHash, chain.accountFound ? (chain.vkHash ? 'zkApp account found' : 'account has no verification key (not a zkApp)') : `not found: ${chain.fetchError ?? ''}`);
+    if (!chain.accountFound || !chain.vkHash)
+        return done();
+    const pinned = opts.canonicalVkHashes ?? CANONICAL_PERMIT_VK_HASHES;
+    const gen = Object.entries(pinned).find(([, h]) => h === chain.vkHash)?.[0];
+    add('chain_vk_hash_pinned', gen !== undefined, gen !== undefined ? `verification key is PermitRegistry release generation ${gen}`
+        : Object.keys(pinned).length === 0 ? 'no PermitRegistry verification-key hash is published yet (pre-release)'
+            : `verification key ${chain.vkHash} is not a published PermitRegistry release`);
+    const st = (k) => chain.appState?.[PERMIT_REGISTRY_STATE[k]] ?? '0';
+    add('chain_initialized', st('authorityKeysHash') !== '0', st('authorityKeysHash') !== '0' ? 'authority keys set' : 'authority keys not set: initialize has not run');
+    const { PERMIT_NETWORK } = await import('./permitMessages.js');
+    const want = PERMIT_NETWORK[opts.network].toString();
+    add('chain_network_bound', st('networkId') === want, st('networkId') === want ? `bound to ${opts.network}` : `bound to network id ${st('networkId')}, expected ${want} (${opts.network})`);
+    const perm = (name, key, expected) => {
+        const got = chain.permissions?.[key];
+        add(name, got === expected, `${key} is ${got ?? 'unknown'}${got === expected ? '' : `, expected ${expected}`}`);
+    };
+    perm('chain_set_verification_key_locked', 'setVerificationKey', 'Impossible');
+    perm('chain_set_permissions_impossible', 'setPermissions', 'Impossible');
+    perm('chain_send_proof_only', 'send', 'Proof');
+    perm('chain_edit_state_proof_only', 'editState', 'Proof');
+    perm('chain_set_zkapp_uri_impossible', 'setZkappUri', 'Impossible');
+    perm('chain_set_delegate_impossible', 'setDelegate', 'Impossible');
+    perm('chain_set_timing_impossible', 'setTiming', 'Impossible');
+    const site = httpsUrl(chain.zkappUri);
+    add('chain_website_bound', !!site, site ? `belongs to ${chain.zkappUri}` : chain.zkappUri ? `zkappUri "${chain.zkappUri}" is not an https website` : 'no website written at deploy (zkappUri is empty)');
+    if (opts.website !== undefined) {
+        const want = httpsUrl(opts.website) ?? httpsUrl(`https://${opts.website}`);
+        const same = !!site && !!want && site.hostname.toLowerCase() === want.hostname.toLowerCase();
+        add('website_expected', same, same ? `on ${want.hostname}, as expected` : `the registry belongs to ${site?.hostname ?? 'no website'}, not ${want?.hostname ?? opts.website}`);
+    }
+    if (opts.checkWellKnown) {
+        const url = site ? new URL(wellKnownPath(opts.address), site.origin).href : null;
+        if (!url)
+            add('website_claims_registry', false, 'no website to ask');
+        else {
+            try {
+                const r = await (opts.fetcher ?? fetch)(url, { redirect: 'error', headers: { Accept: 'application/json' } });
+                if (!r.ok)
+                    throw new Error(`HTTP ${r.status}`);
+                const j = await r.json();
+                const claims = j?.registry === opts.address && j?.network === opts.network;
+                add('website_claims_registry', claims, claims ? `${url} claims this registry on ${opts.network}`
+                    : `${url} names ${j?.registry ?? 'no registry'} on ${j?.network ?? 'no network'}`);
+            }
+            catch (e) {
+                add('website_claims_registry', false, `${url}: ${e?.message ?? e}`);
+            }
+        }
+    }
+    if (opts.keeperUrl) {
+        try {
+            const r = await (opts.fetcher ?? fetch)(`${opts.keeperUrl.replace(/\/+$/, '')}/permits/registries/${opts.address}`);
+            if (!r.ok)
+                throw new Error(`HTTP ${r.status}`);
+            const { registry } = await r.json();
+            const { PublicKey, Field } = await import('o1js');
+            const { authorityKeys, authorityKeysHash } = await import('./permitMessages.js');
+            const h = authorityKeysHash(authorityKeys(registry.keys.map(k => PublicKey.fromBase58(k)), registry.threshold)).toString();
+            add('keeper_keys_match', h === st('authorityKeysHash'), h === st('authorityKeysHash')
+                ? `keeper lists ${registry.keys.length} keys, threshold ${registry.threshold}, matching the chain` : 'the keeper\'s authority keys do not match the chain (stale or wrong record)');
+            const payout = PublicKey.fromFields([Field(st('payoutX')), Field(st('payoutIsOdd'))]).toBase58();
+            add('keeper_payout_match', payout === registry.payout, payout === registry.payout ? `payout ${payout}` : `chain pays ${payout}, keeper lists ${registry.payout}`);
+            add('keeper_website_match', registry.website === chain.zkappUri, registry.website === chain.zkappUri ? `website ${registry.website}` : `chain says ${chain.zkappUri ?? 'none'}, keeper lists ${registry.website ?? 'none'}`);
+        }
+        catch (e) {
+            add('keeper_keys_match', false, `keeper record unavailable: ${e?.message ?? e}`);
+        }
+    }
+    return done();
+}
+//# sourceMappingURL=registryTrustVerify.js.map

package/build/registryTrustVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registryTrustVerify.js","sourceRoot":"","sources":["../src/registryTrustVerify.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAoCpC,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAkCtD,qFAAqF;AACrF,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,0BAA0B,OAAO,OAAO,CAAC;AAClD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,OAA6B,EAAE,IAAa;IACzF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,CAAqB;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC7I,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAe,EAAE,UAAkB,EAAE,OAAsB;IAC1F,IAAI,CAAC;QACH,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,WAAW,EAAE;gBACX,kBAAkB,EAAE,CAAC,CAAC,kBAAkB,EAAE,IAAI;gBAC9C,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAA6B;IACrE,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACvE,MAAM,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAW,EAAE,MAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,GAAwB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEpI,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,IAAI,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnJ,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1N,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,EAAE,CAAC;IAExD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;IACpE,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,GAAG,CAAC,sBAAsB,EAAE,GAAG,KAAK,SAAS,EAC3C,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,yDAAyD,GAAG,EAAE;QAChF,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,wEAAwE;YAC3G,CAAC,CAAC,oBAAoB,KAAK,CAAC,MAAM,4CAA4C,CAAC,CAAC;IAEtF,MAAM,EAAE,GAAG,CAAC,CAAqC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IACxG,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC;IACrK,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrD,GAAG,CAAC,qBAAqB,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,WAAW,CAAC,cAAc,IAAI,KAAK,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;IAE3L,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,GAAyD,EAAE,QAAgB,EAAE,EAAE;QACzG,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,QAAQ,EAAE,GAAG,GAAG,OAAO,GAAG,IAAI,SAAS,GAAG,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClH,CAAC,CAAC;IACF,IAAI,CAAC,mCAAmC,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAC;IAC9E,IAAI,CAAC,kCAAkC,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACzE,IAAI,CAAC,uBAAuB,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,6BAA6B,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,gCAAgC,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IACpE,IAAI,CAAC,+BAA+B,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;IACnE,IAAI,CAAC,6BAA6B,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAE/D,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtC,GAAG,CAAC,qBAAqB,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,QAAQ,2BAA2B,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;IACzM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC7F,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,IAAK,CAAC,QAAQ,eAAe,CAAC,CAAC,CAAC,2BAA2B,IAAI,EAAE,QAAQ,IAAI,YAAY,SAAS,IAAI,EAAE,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACjL,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACjF,IAAI,CAAC,GAAG;YAAE,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;aAChE,CAAC;YACJ,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;gBAC7G,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/C,MAAM,CAAC,GAAQ,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC9B,MAAM,MAAM,GAAG,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC;gBAC3E,GAAG,CAAC,yBAAyB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,4BAA4B,IAAI,CAAC,OAAO,EAAE;oBAC9F,CAAC,CAAC,GAAG,GAAG,UAAU,CAAC,EAAE,QAAQ,IAAI,aAAa,OAAO,CAAC,EAAE,OAAO,IAAI,YAAY,EAAE,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,GAAG,GAAG,KAAK,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;YACpH,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,CAAC,IAAI,EAA2F,CAAC;YAC7H,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;YACjF,MAAM,CAAC,GAAG,iBAAiB,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3H,GAAG,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,mBAAmB,CAAC;gBACnF,CAAC,CAAC,gBAAgB,QAAQ,CAAC,IAAI,CAAC,MAAM,oBAAoB,QAAQ,CAAC,SAAS,sBAAsB,CAAC,CAAC,CAAC,6EAA6E,CAAC,CAAC;YACtL,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjG,GAAG,CAAC,qBAAqB,EAAE,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,MAAM,kBAAkB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAClK,GAAG,CAAC,sBAAsB,EAAE,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,QAAQ,IAAI,MAAM,kBAAkB,QAAQ,CAAC,OAAO,IAAI,MAAM,EAAE,CAAC,CAAC;QAC/N,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC"}

package/build/releaseClient.d.ts

@@ -0,0 +1,26 @@
+export type ProveVendorReleaseRequest = {
+    keeperUrl: string;
+    licenseHash: string;
+    zkAppAddress: string;
+    senderPublicKey: string;
+    network?: 'devnet' | 'mainnet';
+    fetcher?: typeof fetch;
+    signal?: AbortSignal;
+};
+export type ProveVendorReleaseResponse = {
+    provenTxJson: string;
+};
+export declare function proveVendorRelease(req: ProveVendorReleaseRequest): Promise<ProveVendorReleaseResponse>;
+export type ConfirmVendorReleaseRequest = {
+    keeperUrl: string;
+    licenseHash: string;
+    zkAppAddress: string;
+    txHash: string;
+    fetcher?: typeof fetch;
+    signal?: AbortSignal;
+};
+export type ConfirmVendorReleaseResponse = {
+    ok: true;
+};
+export declare function confirmVendorRelease(req: ConfirmVendorReleaseRequest): Promise<ConfirmVendorReleaseResponse>;
+//# sourceMappingURL=releaseClient.d.ts.map

package/build/releaseClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"releaseClient.d.ts","sourceRoot":"","sources":["../src/releaseClient.ts"],"names":[],"mappings":"AA2BA,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,EAAQ,MAAM,CAAC;IACxB,WAAW,EAAM,MAAM,CAAC;IACxB,YAAY,EAAK,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IAIxB,OAAO,CAAC,EAAS,QAAQ,GAAG,SAAS,CAAC;IACtC,OAAO,CAAC,EAAS,OAAO,KAAK,CAAC;IAC9B,MAAM,CAAC,EAAU,WAAW,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG;IAGvC,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAMF,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,yBAAyB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAkB5G;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,SAAS,EAAK,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IAGrB,MAAM,EAAQ,MAAM,CAAC;IACrB,OAAO,CAAC,EAAM,OAAO,KAAK,CAAC;IAC3B,MAAM,CAAC,EAAO,WAAW,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC;AAExD,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,2BAA2B,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAiBlH"}

package/build/releaseClient.js

@@ -0,0 +1,65 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * releaseClient.ts
+ *
+ * Vendor-signed release path — call POST /prove/release-vendor to get an
+ * unsigned proved tx, then broadcast it through the vendor's wallet
+ * (`provider.sendTransaction`). The vendor pays the transaction fee and
+ * signs the fee-payer AU themselves — the licensing service never needs
+ * its own feepayer key for this path.
+ *
+ * `releaseFunds` is permissionless on-chain, so anyone willing to pay gas
+ * may call this. There is no server-side identity check — the client's
+ * wallet holds full authority via the fee-payer signature.
+ *
+ * On-chain settlement is observed by the licensing service's event-sync
+ * loop. That sweep runs every 30 minutes, so callers who want the
+ * `released` flag to flip within seconds of inclusion should call
+ * `confirmVendorRelease` with the wallet's returned tx hash — the service
+ * then watches bestChain and mirrors the fundsReleased event optimistically.
+ * The event-sync sweep is still authoritative; the confirm/watch path is a
+ * latency shortcut and is idempotent.
+ */
+import { readErrorBody, keeperError } from './proveErrors.js';
+function baseUrl(url) {
+    return url.replace(/\/+$/, '');
+}
+export async function proveVendorRelease(req) {
+    const fetcher = req.fetcher ?? fetch;
+    const resp = await fetcher(`${baseUrl(req.keeperUrl)}/prove/release-vendor`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        signal: req.signal,
+        body: JSON.stringify({
+            licenseHash: req.licenseHash,
+            zkAppAddress: req.zkAppAddress,
+            senderPublicKey: req.senderPublicKey,
+            ...(req.network ? { network: req.network } : {}),
+        }),
+    });
+    if (!resp.ok) {
+        const parsed = await readErrorBody(resp);
+        throw keeperError(parsed);
+    }
+    return await resp.json();
+}
+export async function confirmVendorRelease(req) {
+    const fetcher = req.fetcher ?? fetch;
+    const resp = await fetcher(`${baseUrl(req.keeperUrl)}/confirm/release-vendor`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        signal: req.signal,
+        body: JSON.stringify({
+            zkAppAddress: req.zkAppAddress,
+            licenseHash: req.licenseHash,
+            txHash: req.txHash,
+        }),
+    });
+    if (!resp.ok) {
+        const parsed = await readErrorBody(resp);
+        throw keeperError(parsed);
+    }
+    return await resp.json();
+}
+//# sourceMappingURL=releaseClient.js.map

package/build/releaseClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"releaseClient.js","sourceRoot":"","sources":["../src/releaseClient.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAqB9D,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAA8B;IACrE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE;QAC3E,MAAM,EAAG,MAAM;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAG,GAAG,CAAC,MAAM;QACnB,IAAI,EAAK,IAAI,CAAC,SAAS,CAAC;YACtB,WAAW,EAAM,GAAG,CAAC,WAAW;YAChC,YAAY,EAAK,GAAG,CAAC,YAAY;YACjC,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjD,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAgC,CAAC;AACzD,CAAC;AAeD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAgC;IACzE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE;QAC7E,MAAM,EAAG,MAAM;QACf,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAG,GAAG,CAAC,MAAM;QACnB,IAAI,EAAK,IAAI,CAAC,SAAS,CAAC;YACtB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,WAAW,EAAG,GAAG,CAAC,WAAW;YAC7B,MAAM,EAAQ,GAAG,CAAC,MAAM;SACzB,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAkC,CAAC;AAC3D,CAAC"}

package/build/renewClient.d.ts

@@ -1,9 +1,30 @@
+/**
+ * renewClient.ts
+ *
+ * Browser-safe client for the renew flow. Mirrors `buyClient.ts` in shape:
+ * the caller drives the wallet step between `proveRenew` and `confirmRenew`
+ * so the SDK stays wallet-agnostic.
+ *
+ * Unlike buy, renew carries a legally load-bearing `waiverAccepted` flag —
+ * EU/UK CRD Article 16(m) extinguishes the 14-day right of withdrawal only
+ * on the buyer's express affirmative act (consent to immediate delivery +
+ * acknowledgment of loss of withdrawal). We refuse the /prove/renew call
+ * when the flag is false to keep third-party integrators from silently
+ * shipping a UI that omits the waiver gate.
+ *
+ * Also refused pre-network when the backend's sales-freeze schedule has
+ * fired (salesFrozen === true) — the backend would 423 the request anyway,
+ * so surfacing the specific message client-side avoids a wasted round-trip.
+ */
+import type { PurchaseReceipt } from './receipt.js';
 export type ProveRenewRequest = {
+    agentConsent?: unknown;
     keeperUrl: string;
     licenseHash: string;
     buyerAddress: string;
     zkAppAddress: string;
-    duration: 0 | 1 | 2;
+    network: 'devnet' | 'mainnet';
+    duration: 0 | 1 | 2 | 3;
     waiverAccepted: boolean;
     freezeAfterSlot?: number | null;
     fetcher?: typeof fetch;
@@ -15,6 +36,7 @@ export type ProveRenewResponse = {
     licenseHash: string;
     renewAmount: string;
     generation: number;
+    appKey: string;
 };
 export type ConfirmRenewRequest = {
     keeperUrl: string;
@@ -25,17 +47,21 @@ export type ConfirmRenewRequest = {
     signal?: AbortSignal;
 };
 export declare function proveRenew(req: ProveRenewRequest): Promise<ProveRenewResponse>;
+/** Returns the buyer's receipt for the renewal when the keeper issued one (put it in the license file as `receipt`). */
 export declare function confirmRenew(req: ConfirmRenewRequest): Promise<{
     ok: true;
+    receipt?: PurchaseReceipt;
 }>;
 export type RenewStatus = {
-    status: 'confirmed' | 'pending' | 'unknown';
+    status: 'confirmed' | 'pending' | 'unknown' | 'failed';
+    failureReason?: string;
     expirySlot?: number;
     txHash?: string | null;
     elapsedMs?: number;
 };
 export type PollRenewStatusOptions = {
     keeperUrl: string;
+    network: 'devnet' | 'mainnet';
     zkAppAddress: string;
     licenseHash: string;
     newExpirySlot: number;

package/build/renewClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renewClient.d.ts","sourceRoot":"","sources":["../src/renewClient.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAIpD,MAAM,MAAM,iBAAiB,GAAG;IAG9B,YAAY,CAAC,EAAG,OAAO,CAAC;IACxB,SAAS,EAAQ,MAAM,CAAC;IACxB,WAAW,EAAM,MAAM,CAAC;IACxB,YAAY,EAAK,MAAM,CAAC;IACxB,YAAY,EAAK,MAAM,CAAC;IAGxB,OAAO,EAAU,QAAQ,GAAG,SAAS,CAAC;IACtC,QAAQ,EAAS,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAG/B,cAAc,EAAG,OAAO,CAAC;IAGzB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAS,OAAO,KAAK,CAAC;IAC9B,MAAM,CAAC,EAAU,WAAW,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,YAAY,EAAG,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IAItB,UAAU,EAAK,MAAM,CAAC;IAGtB,MAAM,EAAS,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,SAAS,EAAK,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,MAAM,EAAQ,MAAM,CAAC;IACrB,OAAO,CAAC,EAAM,OAAO,KAAK,CAAC;IAC3B,MAAM,CAAC,EAAO,WAAW,CAAC;CAC3B,CAAC;AAmBF,wBAAsB,UAAU,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAmCpF;AAID,wHAAwH;AACxH,wBAAsB,YAAY,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,CAAC,EAAE,eAAe,CAAA;CAAE,CAAC,CAe7G;AAED,MAAM,MAAM,WAAW,GAAG;IAOxB,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAM,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,CAAC,EAAG,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAM,MAAM,CAAC;IACtB,OAAO,EAAQ,QAAQ,GAAG,SAAS,CAAC;IACpC,YAAY,EAAG,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IAMtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAO,OAAO,KAAK,CAAC;IAG5B,UAAU,CAAC,EAAI,MAAM,CAAC;IACtB,SAAS,CAAC,EAAK,MAAM,CAAC;IACtB,MAAM,CAAC,EAAQ,WAAW,CAAC;IAC3B,MAAM,CAAC,EAAQ,CAAC,MAAM,EAAE,WAAW,KAAK,IAAI,CAAC;CAC9C,CAAC;AAMF,wBAAsB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,WAAW,CAAC,CAkDxF"}

package/build/renewClient.js

@@ -1,24 +1,7 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
-/**
- * renewClient.ts
- *
- * Browser-safe client for the renew flow. Mirrors `buyClient.ts` in shape:
- * the caller drives the wallet step between `proveRenew` and `confirmRenew`
- * so the SDK stays wallet-agnostic.
- *
- * Unlike buy, renew carries a legally load-bearing `waiverAccepted` flag —
- * EU/UK CRD Article 16(m) extinguishes the 14-day right of withdrawal only
- * on the buyer's express affirmative act (consent to immediate delivery +
- * acknowledgment of loss of withdrawal). We refuse the /prove/renew call
- * when the flag is false to keep third-party integrators from silently
- * shipping a UI that omits the waiver gate.
- *
- * Also refused pre-network when the keeper's sales-freeze schedule has
- * fired (salesFrozen === true) — the keeper would 423 the request anyway,
- * so surfacing the specific message client-side avoids a wasted round-trip.
- */
+// SPDX-License-Identifier: BUSL-1.1
 import { resolveFreezeState } from './freezeClient.js';
+import { readErrorBody, tryQueueBusyFromBody, keeperError } from './proveErrors.js';
 function baseUrl(url) {
     return url.replace(/\/+$/, '');
 }
@@ -31,10 +14,10 @@ async function readJsonError(resp) {
     catch { /* body wasn't JSON */ }
     return `HTTP ${resp.status}`;
 }
-// POST /prove/renew — keeper compiles + proves the renew tx.
+// POST /prove/renew — the backend compiles + proves the renew tx.
 // Rejects locally when `waiverAccepted` is false; a network call in that
 // state would be wasted work and would give the caller no signal that the
-// legal precondition was missing. Also rejects when the keeper's freeze
+// legal precondition was missing. Also rejects when the backend's freeze
 // has fired — same reasoning.
 export async function proveRenew(req) {
     if (req.waiverAccepted !== true) {
@@ -43,6 +26,7 @@ export async function proveRenew(req) {
     const fetcher = req.fetcher ?? fetch;
     const freeze = await resolveFreezeState({
         keeperUrl: req.keeperUrl,
+        network: req.network,
         freezeAfterSlot: req.freezeAfterSlot,
         fetcher,
         signal: req.signal,
@@ -58,15 +42,23 @@ export async function proveRenew(req) {
             licenseHash: req.licenseHash,
             buyerAddress: req.buyerAddress,
             zkAppAddress: req.zkAppAddress,
+            network: req.network,
             duration: req.duration,
+            ...(req.agentConsent ? { agentConsent: req.agentConsent } : {}),
         }),
     });
-    if (!resp.ok)
-        throw new Error(await readJsonError(resp));
+    if (!resp.ok) {
+        const parsed = await readErrorBody(resp);
+        const queueBusy = tryQueueBusyFromBody(parsed);
+        if (queueBusy)
+            throw queueBusy;
+        throw keeperError(parsed);
+    }
     return await resp.json();
 }
 // POST /confirm/renew — promotes the in-memory renew intent to a pending
 // LicenseRecord. Call this only after the wallet returns a txHash.
+/** Returns the buyer's receipt for the renewal when the keeper issued one (put it in the license file as `receipt`). */
 export async function confirmRenew(req) {
     const fetcher = req.fetcher ?? fetch;
     const resp = await fetcher(`${baseUrl(req.keeperUrl)}/confirm/renew`, {
@@ -81,19 +73,20 @@ export async function confirmRenew(req) {
     });
     if (!resp.ok)
         throw new Error(await readJsonError(resp));
-    return { ok: true };
+    const body = await resp.json().catch(() => ({}));
+    return { ok: true, ...(body?.receipt ? { receipt: body.receipt } : {}) };
 }
 // Polls GET /license/:zkAppAddress/:licenseHash until the renew has landed
 // on-chain (pending flipped and new expiry recorded) or the timeout fires.
 // Mirrors pollBuyStatus, except the terminal condition is Mina-side rather
-// than keeper-side buy-watch — renew has no dedicated watch map.
+// than a backend-side buy-watch — renew has no dedicated watch map.
 export async function pollRenewStatus(opts) {
     const fetcher = opts.fetcher ?? fetch;
     const interval = opts.intervalMs ?? 10_000;
     const timeout = opts.timeoutMs ?? 20 * 60 * 1000;
     const startedAt = Date.now();
     const deadline = startedAt + timeout;
-    const url = `${baseUrl(opts.keeperUrl)}/license/${encodeURIComponent(opts.zkAppAddress)}/${encodeURIComponent(opts.licenseHash)}`;
+    const url = `${baseUrl(opts.keeperUrl)}/license/${encodeURIComponent(opts.zkAppAddress)}/${encodeURIComponent(opts.licenseHash)}?network=${opts.network}`;
     while (true) {
         if (opts.signal?.aborted)
             throw new Error('pollRenewStatus aborted');
@@ -124,8 +117,19 @@ export async function pollRenewStatus(opts) {
             }
         }
         catch { /* transient network — try again on next tick */ }
+        // Not confirmed yet: the keeper's landing watch says whether the
+        // transaction failed on chain (a keeper without the route: 404, ignored).
+        if (status.status !== 'confirmed') {
+            try {
+                const w = await fetcher(`${baseUrl(opts.keeperUrl)}/renew/status?licenseHash=${encodeURIComponent(opts.licenseHash)}`, { signal: opts.signal });
+                const watch = w.ok ? await w.json() : null;
+                if (watch?.status === 'failed')
+                    status = { ...status, status: 'failed', ...(watch.failureReason ? { failureReason: watch.failureReason } : {}) };
+            }
+            catch { /* transient — try again on next tick */ }
+        }
         opts.onTick?.(status);
-        if (status.status === 'confirmed')
+        if (status.status === 'confirmed' || status.status === 'failed')
             return status;
         if (Date.now() >= deadline)
             return status;

package/build/renewClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renewClient.js","sourceRoot":"","sources":["../src/renewClient.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAsBpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AA+CpF,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;QAC1D,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAClC,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,kEAAkE;AAClE,yEAAyE;AACzE,0EAA0E;AAC1E,yEAAyE;AACzE,8BAA8B;AAC9B,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAsB;IACrD,IAAI,GAAG,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;QACtC,SAAS,EAAQ,GAAG,CAAC,SAAS;QAC9B,OAAO,EAAU,GAAG,CAAC,OAAO;QAC5B,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,OAAO;QACP,MAAM,EAAW,GAAG,CAAC,MAAM;KAC5B,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE;QAClE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAG,GAAG,CAAC,WAAW;YAC7B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,OAAO,EAAO,GAAG,CAAC,OAAO;YACzB,QAAQ,EAAM,GAAG,CAAC,QAAQ;YAC1B,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,SAAS;YAAE,MAAM,SAAS,CAAC;QAC/B,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAwB,CAAC;AACjD,CAAC;AAED,yEAAyE;AACzE,mEAAmE;AACnE,wHAAwH;AACxH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAwB;IACzD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,WAAW,EAAG,GAAG,CAAC,WAAW;YAC7B,MAAM,EAAQ,GAAG,CAAC,MAAM;SACzB,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAkC,CAAC;IAClF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC;AAoCD,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAA4B;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;IAC3C,MAAM,OAAO,GAAI,IAAI,CAAC,SAAS,IAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAI,SAAS,GAAG,OAAO,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;IAE1J,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACrE,IAAI,MAAM,GAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QACnF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAE3B,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;oBAChB,MAAM,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;gBACpE,CAAC;qBAAM,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;oBAClF,MAAM,GAAG;wBACP,MAAM,EAAE,WAAW;wBACnB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;wBAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;qBAClC,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,GAAG;wBACP,MAAM,EAAE,SAAS;wBACjB,UAAU,EAAE,IAAI,CAAC,UAAU;wBAC3B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;wBAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;qBAClC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;QAC5D,iEAAiE;QACjE,0EAA0E;QAC1E,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,6BAA6B,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBAChJ,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAiD,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1F,IAAI,KAAK,EAAE,MAAM,KAAK,QAAQ;oBAAE,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACnJ,CAAC;YAAC,MAAM,CAAC,CAAC,wCAAwC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC/E,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC1C,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/build/seatName.d.ts

@@ -0,0 +1,8 @@
+export declare const SEAT_NAME_COMBINATIONS: number;
+export type SeatNameInput = {
+    licenseHash: string;
+    slotIndex: number;
+    boundAtSlot: number;
+};
+export declare function seatNameFor(input: SeatNameInput): string;
+//# sourceMappingURL=seatName.d.ts.map

package/build/seatName.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seatName.d.ts","sourceRoot":"","sources":["../src/seatName.ts"],"names":[],"mappings":"AAwHA,eAAO,MAAM,sBAAsB,EAAE,MAA2C,CAAC;AAiCjF,MAAM,MAAM,aAAa,GAAG;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAI,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAKxD"}