zklicensing 0.1.0-beta.2 → 0.1.0-beta.21

package/build/taxId.js

@@ -0,0 +1,212 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/** EU member states, by ISO 3166-1 alpha-2 country code, with their VAT prefix and number format. */
+const EU = {
+    AT: { prefix: 'AT', re: /^U\d{8}$/, example: 'ATU12345678' },
+    BE: { prefix: 'BE', re: /^[01]\d{9}$/, example: 'BE0123456789' },
+    BG: { prefix: 'BG', re: /^\d{9,10}$/, example: 'BG123456789' },
+    CY: { prefix: 'CY', re: /^\d{8}[A-Z]$/, example: 'CY12345678X' },
+    CZ: { prefix: 'CZ', re: /^\d{8,10}$/, example: 'CZ12345678' },
+    DE: { prefix: 'DE', re: /^\d{9}$/, example: 'DE123456789' },
+    DK: { prefix: 'DK', re: /^\d{8}$/, example: 'DK12345678' },
+    EE: { prefix: 'EE', re: /^\d{9}$/, example: 'EE123456789' },
+    GR: { prefix: 'EL', re: /^\d{9}$/, example: 'EL123456789' },
+    ES: { prefix: 'ES', re: /^[A-Z0-9]\d{7}[A-Z0-9]$/, example: 'ESX1234567X' },
+    FI: { prefix: 'FI', re: /^\d{8}$/, example: 'FI12345678' },
+    FR: { prefix: 'FR', re: /^[A-HJ-NP-Z0-9]{2}\d{9}$/, example: 'FRXX123456789' },
+    HR: { prefix: 'HR', re: /^\d{11}$/, example: 'HR12345678901' },
+    HU: { prefix: 'HU', re: /^\d{8}$/, example: 'HU12345678' },
+    IE: { prefix: 'IE', re: /^(\d{7}[A-W][A-I]?|\d[A-Z+*]\d{5}[A-W])$/, example: 'IE1234567WA' },
+    IT: { prefix: 'IT', re: /^\d{11}$/, example: 'IT12345678901' },
+    LT: { prefix: 'LT', re: /^(\d{9}|\d{12})$/, example: 'LT123456789' },
+    LU: { prefix: 'LU', re: /^\d{8}$/, example: 'LU12345678' },
+    LV: { prefix: 'LV', re: /^\d{11}$/, example: 'LV12345678901' },
+    MT: { prefix: 'MT', re: /^\d{8}$/, example: 'MT12345678' },
+    NL: { prefix: 'NL', re: /^\d{9}B\d{2}$/, example: 'NL123456789B01' },
+    PL: { prefix: 'PL', re: /^\d{10}$/, example: 'PL1234567890' },
+    PT: { prefix: 'PT', re: /^\d{9}$/, example: 'PT123456789' },
+    RO: { prefix: 'RO', re: /^\d{2,10}$/, example: 'RO1234567890' },
+    SE: { prefix: 'SE', re: /^\d{12}$/, example: 'SE123456789012' },
+    SI: { prefix: 'SI', re: /^\d{8}$/, example: 'SI12345678' },
+    SK: { prefix: 'SK', re: /^\d{10}$/, example: 'SK1234567890' },
+};
+/** True for the 27 EU member states (ISO codes; Greece is GR here). */
+export function isEuCountry(country) {
+    return Object.prototype.hasOwnProperty.call(EU, String(country).toUpperCase());
+}
+/** An example of the expected format for `country`, for form placeholders. */
+export function taxIdExample(country) {
+    const c = String(country).toUpperCase();
+    if (isEuCountry(c))
+        return EU[c].example;
+    return {
+        GB: 'GB123456789', NO: 'NO123456789MVA', CH: 'CHE-123.456.789 MWST', LI: 'CHE-123.456.789 MWST',
+        AU: '12 345 678 901', NZ: '123-456-789', CA: '123456789RT0001', US: '12-3456789',
+        JP: 'T1234567890123', IN: '22AAAAA0000A1Z5', SG: 'M2-1234567-8',
+    }[c] ?? 'Your national tax or VAT number';
+}
+const digits = (s) => [...s].map(Number);
+function gbCheck(n) {
+    const x = digits(n.slice(0, 9));
+    const sum = x.slice(0, 7).reduce((a, v, i) => a + v * (8 - i), 0) + Number(n.slice(7, 9));
+    return sum % 97 === 0 || (sum + 55) % 97 === 0;
+}
+/** Weighted mod-11 check used by Norway (org. number) and Switzerland (UID). */
+function mod11(n, weights) {
+    const x = digits(n);
+    let c = 11 - (weights.reduce((a, w, i) => a + w * x[i], 0) % 11);
+    if (c === 11)
+        c = 0;
+    return c !== 10 && c === x[weights.length];
+}
+function abnCheck(n) {
+    const x = digits(n);
+    x[0] -= 1;
+    return [10, 1, 3, 5, 7, 9, 11, 13, 15, 17, 19].reduce((a, w, i) => a + w * x[i], 0) % 89 === 0;
+}
+function nzCheck(raw) {
+    const n = raw.padStart(9, '0');
+    const v = Number(n);
+    if (v < 10_000_000 || v > 150_000_000)
+        return false;
+    const x = digits(n);
+    const calc = (w) => { const r = w.reduce((a, k, i) => a + k * x[i], 0) % 11; return r === 0 ? 0 : 11 - r; };
+    let c = calc([3, 2, 7, 6, 5, 4, 3, 2]);
+    if (c === 10)
+        c = calc([7, 4, 3, 2, 5, 2, 7, 6]);
+    return c !== 10 && c === x[8];
+}
+function luhn(n) {
+    let s = 0;
+    [...n].reverse().forEach((ch, i) => { let v = Number(ch); if (i % 2) {
+        v *= 2;
+        if (v > 9)
+            v -= 9;
+    } s += v; });
+    return s % 10 === 0;
+}
+const B36 = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ';
+function gstinCheck(g) {
+    let s = 0;
+    for (let i = 0; i < 14; i++) {
+        const p = B36.indexOf(g[i]) * (i % 2 === 0 ? 1 : 2);
+        s += Math.floor(p / 36) + (p % 36);
+    }
+    return B36[(36 - (s % 36)) % 36] === g[14];
+}
+// IRS campus prefixes never issued for an EIN.
+const EIN_INVALID_PREFIXES = new Set(['00', '07', '08', '09', '17', '18', '19', '28', '29', '49', '69', '70', '78', '79', '89', '96', '97']);
+/**
+ * Checks `taxId` for a vendor in `country` (ISO 3166-1 alpha-2): the format
+ * and, where the scheme has one, the check digit. Spaces, dots and dashes
+ * are ignored; letters are upper-cased.
+ */
+export function checkTaxId(country, taxId) {
+    const c = String(country ?? '').trim().toUpperCase();
+    const raw = String(taxId ?? '').trim().toUpperCase();
+    const compact = raw.replace(/[\s.\-]/g, '');
+    const fail = (scheme, error) => ({ ok: false, scheme, error, example: taxIdExample(c) });
+    if (!compact)
+        return fail('other', 'A tax ID is required');
+    if (compact.length > 30)
+        return fail('other', 'The tax ID is too long');
+    if (isEuCountry(c)) {
+        const { prefix, re } = EU[c];
+        // The country prefix is optional on input (some numbers, e.g. Spanish,
+        // may themselves start with a letter, so test the body as given too).
+        const body = compact.startsWith(prefix) && re.test(compact.slice(prefix.length)) ? compact.slice(prefix.length) : compact;
+        if (!re.test(body)) {
+            return fail('eu-vat', /^[A-Z]{2}/.test(compact) && !compact.startsWith(prefix)
+                ? `A VAT number for ${c} starts with ${prefix}` : `Not a valid ${c} VAT number`);
+        }
+        return { ok: true, scheme: 'eu-vat', normalized: prefix + body, vies: { countryCode: prefix, number: body } };
+    }
+    switch (c) {
+        case 'GB': {
+            const b = compact.replace(/^GB/, '');
+            if (/^(GD|HA)\d{3}$/.test(b))
+                return { ok: true, scheme: 'gb-vat', normalized: 'GB' + b };
+            if (!/^(\d{9}|\d{12})$/.test(b))
+                return fail('gb-vat', 'A UK VAT number is GB and 9 or 12 digits');
+            if (!gbCheck(b))
+                return fail('gb-vat', 'The UK VAT number\'s check digits are wrong');
+            return { ok: true, scheme: 'gb-vat', normalized: 'GB' + b };
+        }
+        case 'NO': {
+            const b = compact.replace(/^NO/, '').replace(/MVA$/, '');
+            if (!/^\d{9}$/.test(b))
+                return fail('no-mva', 'A Norwegian VAT number is 9 digits followed by MVA');
+            if (!mod11(b, [3, 2, 7, 6, 5, 4, 3, 2]))
+                return fail('no-mva', 'The organisation number\'s check digit is wrong');
+            return { ok: true, scheme: 'no-mva', normalized: `NO${b}MVA` };
+        }
+        case 'CH':
+        case 'LI': {
+            const m = /^CHE(\d{9})(MWST|TVA|IVA|MVA)?$/.exec(compact);
+            if (!m)
+                return fail('ch-uid', 'A Swiss VAT number is CHE-123.456.789 MWST');
+            if (!mod11(m[1], [5, 4, 3, 2, 7, 6, 5, 4]))
+                return fail('ch-uid', 'The UID\'s check digit is wrong');
+            const d = m[1];
+            return { ok: true, scheme: 'ch-uid', normalized: `CHE-${d.slice(0, 3)}.${d.slice(3, 6)}.${d.slice(6)} ${m[2] ?? 'MWST'}` };
+        }
+        case 'AU': {
+            const b = compact.replace(/^ABN/, '');
+            if (!/^\d{11}$/.test(b))
+                return fail('au-abn', 'An ABN is 11 digits');
+            if (!abnCheck(b))
+                return fail('au-abn', 'The ABN\'s check digits are wrong');
+            return { ok: true, scheme: 'au-abn', normalized: `${b.slice(0, 2)} ${b.slice(2, 5)} ${b.slice(5, 8)} ${b.slice(8)}` };
+        }
+        case 'NZ': {
+            if (!/^\d{8,9}$/.test(compact))
+                return fail('nz-gst', 'A New Zealand GST number is 8 or 9 digits');
+            if (!nzCheck(compact))
+                return fail('nz-gst', 'The GST number\'s check digit is wrong');
+            const n = compact.padStart(9, '0');
+            return { ok: true, scheme: 'nz-gst', normalized: `${n.slice(0, 3)}-${n.slice(3, 6)}-${n.slice(6)}` };
+        }
+        case 'CA': {
+            const m = /^(\d{9})(RT\d{4})?$/.exec(compact);
+            if (!m)
+                return fail('ca-bn', 'A Canadian business number is 9 digits, optionally followed by RT0001');
+            if (!luhn(m[1]))
+                return fail('ca-bn', 'The business number\'s check digit is wrong');
+            return { ok: true, scheme: 'ca-bn', normalized: m[1] + (m[2] ?? '') };
+        }
+        case 'US': {
+            if (!/^\d{9}$/.test(compact))
+                return fail('us-ein', 'An EIN is 9 digits (12-3456789)');
+            if (EIN_INVALID_PREFIXES.has(compact.slice(0, 2)))
+                return fail('us-ein', 'No EIN starts with ' + compact.slice(0, 2));
+            return { ok: true, scheme: 'us-ein', normalized: `${compact.slice(0, 2)}-${compact.slice(2)}` };
+        }
+        case 'JP': {
+            // Format only: T and the 13-digit corporate number.
+            const b = compact.replace(/^T/, '');
+            if (!/^\d{13}$/.test(b))
+                return fail('jp-invoice', 'A Japanese registration number is T and 13 digits');
+            return { ok: true, scheme: 'jp-invoice', normalized: 'T' + b };
+        }
+        case 'IN': {
+            if (!/^\d{2}[A-Z]{5}\d{4}[A-Z][1-9A-Z]Z[0-9A-Z]$/.test(compact))
+                return fail('in-gstin', 'A GSTIN is 15 characters, like 22AAAAA0000A1Z5');
+            if (!gstinCheck(compact))
+                return fail('in-gstin', 'The GSTIN\'s check character is wrong');
+            return { ok: true, scheme: 'in-gstin', normalized: compact };
+        }
+        case 'SG': {
+            if (!/^(M[2-9A-Z]\d{7}[0-9A-Z]|\d{8,9}[A-Z]|[TSR]\d{2}[A-Z]{2}\d{4}[A-Z])$/.test(compact)) {
+                return fail('sg-gst', 'Not a Singapore GST registration number');
+            }
+            return { ok: true, scheme: 'sg-gst', normalized: compact };
+        }
+        default: {
+            // No known format: accept sensible input for an admin to review.
+            if (!/^[A-Z0-9]{4,30}$/.test(compact))
+                return fail('other', 'Use letters and digits only');
+            return { ok: true, scheme: 'other', normalized: raw.replace(/\s+/g, ' '), review: true };
+        }
+    }
+}
+//# sourceMappingURL=taxId.js.map

package/build/taxId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxId.js","sourceRoot":"","sources":["../src/taxId.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAkCpC,qGAAqG;AACrG,MAAM,EAAE,GAAoE;IAC1E,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE;IAC5D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE;IAChE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE;IAC9D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,aAAa,EAAE;IAChE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE;IAC7D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE;IAC3D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE;IAC1D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE;IAC3D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE;IAC3D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,yBAAyB,EAAE,OAAO,EAAE,aAAa,EAAE;IAC3E,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE;IAC1D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,0BAA0B,EAAE,OAAO,EAAE,eAAe,EAAE;IAC9E,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE;IAC9D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE;IAC1D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,0CAA0C,EAAE,OAAO,EAAE,aAAa,EAAE;IAC5F,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE;IAC9D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,kBAAkB,EAAE,OAAO,EAAE,aAAa,EAAE;IACpE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE;IAC1D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,EAAE;IAC9D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE;IAC1D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACpE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE;IAC7D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE;IAC3D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE;IAC/D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,EAAE;IAC/D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE;IAC1D,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE;CAC9D,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,WAAW,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACzC,OAAQ;QACN,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,sBAAsB;QAC/F,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,YAAY;QAChF,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,cAAc;KACrC,CAAC,CAAC,CAAC,IAAI,iCAAiC,CAAC;AACvE,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAEjD,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO,GAAG,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,gFAAgF;AAChF,SAAS,KAAK,CAAC,CAAS,EAAE,OAAiB;IACzC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK,EAAE;QAAE,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACV,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG,UAAU,IAAI,CAAC,GAAG,WAAW;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,IAAI,GAAG,CAAC,CAAW,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtH,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,EAAE;QAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,CAAC,IAAI,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,GAAG,GAAG,sCAAsC,CAAC;AACnD,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,+CAA+C;AAC/C,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7I;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,KAAa;IACvD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC,MAAmB,EAAE,KAAa,EAAe,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3H,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAExE,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC1H,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC5E,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,MAAM,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;IAChH,CAAC;IAED,QAAQ,CAAC,EAAE,CAAC;QACV,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,0CAA0C,CAAC,CAAC;YACnG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,6CAA6C,CAAC,CAAC;YACtF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9D,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,oDAAoD,CAAC,CAAC;YACpG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC;YAClH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACjE,CAAC;QACD,KAAK,IAAI,CAAC;QAAC,KAAK,IAAI,CAAC,CAAC,CAAC;YACrB,MAAM,CAAC,GAAG,iCAAiC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1D,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,4CAA4C,CAAC,CAAC;YAC5E,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAC;YACrG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC;QAC7H,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YACtE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;YAC7E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxH,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAC;YACnG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,wCAAwC,CAAC,CAAC;YACvF,MAAM,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACnC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACvG,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,MAAM,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,OAAO,EAAE,uEAAuE,CAAC,CAAC;YACtG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,OAAO,EAAE,6CAA6C,CAAC,CAAC;YACrF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACxE,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,iCAAiC,CAAC,CAAC;YACvF,IAAI,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACtH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClG,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,oDAAoD;YACpD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC,YAAY,EAAE,mDAAmD,CAAC,CAAC;YACxG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QACjE,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,CAAC,4CAA4C,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,EAAE,gDAAgD,CAAC,CAAC;YAC3I,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,UAAU,EAAE,uCAAuC,CAAC,CAAC;YAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC/D,CAAC;QACD,KAAK,IAAI,CAAC,CAAC,CAAC;YACV,IAAI,CAAC,sEAAsE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1F,OAAO,IAAI,CAAC,QAAQ,EAAE,yCAAyC,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,CAAC,CAAC;YACR,iEAAiE;YACjE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;YAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3F,CAAC;IACH,CAAC;AACH,CAAC"}

package/build/trustAnchorVerify.d.ts

@@ -0,0 +1,49 @@
+export type Finding = {
+    /** Machine-readable check identifier, stable across releases. */
+    name: string;
+    /** True iff the check passed. */
+    ok: boolean;
+    /** Human-readable one-line summary or reason. */
+    detail: string;
+};
+export type TrustAnchorReport = {
+    /** True iff every finding is ok. */
+    ok: boolean;
+    origin: string;
+    /** Address that was checked. Echoed from opts.address. */
+    address: string;
+    /** appId as declared in the signed manifest payload. Undefined if the fetch/signature failed. */
+    appId?: string;
+    /** Generation index the address maps to in the signed manifest (1-based). */
+    generation?: number;
+    findings: Finding[];
+};
+export interface VerifyTrustAnchorOpts {
+    /** Vendor origin, e.g. `https://store.example.com`. HTTPS required. */
+    origin: string;
+    /** zkApp address (base58 PublicKey) — the manifest lives at `/.well-known/zklicensing/<address>.json`. */
+    address: string;
+    /** Platform manifest Ed25519 public keys (base64). Comma-list from `VITE_MANIFEST_PUBKEYS`. */
+    pinnedPublicKeysBase64: readonly string[];
+    /** Mina GraphQL endpoint for on-chain reads. Ignored when `skipChainChecks` is true. */
+    minaGraphqlUrl?: string;
+    /** Optional Mina networkId — 'mainnet' or 'testnet'. Defaults to 'mainnet'. */
+    minaNetworkId?: 'mainnet' | 'testnet' | 'devnet';
+    /** Fetch timeout in ms for the manifest fetch. Default 15000. */
+    fetchTimeoutMs?: number;
+    /** When true, skips all `chain_*` checks. Useful for manifest-only audits. */
+    skipChainChecks?: boolean;
+    /**
+     * When true, runs an extra `manifest_matches_backend` finding: fetch the
+     * same signed payload from `https://zklicensing.com/apps/by-address/{address}`,
+     * verify it against the same pinned keys, then byte-compare canonicalized
+     * payloads (minus `signature`, `publicKey`, `issuedAt`, `app`). Catches a
+     * vendor serving a stale/rolled-back manifest even when its own signature
+     * is still valid. Not on by default — adds a second network fetch and
+     * couples the verifier to zklicensing.com being reachable.
+     */
+    crossCheck?: boolean;
+}
+export declare function permToString(p: any): string | undefined;
+export declare function verifyTrustAnchor(opts: VerifyTrustAnchorOpts): Promise<TrustAnchorReport>;
+//# sourceMappingURL=trustAnchorVerify.d.ts.map

package/build/trustAnchorVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustAnchorVerify.d.ts","sourceRoot":"","sources":["../src/trustAnchorVerify.ts"],"names":[],"mappings":"AA4DA,MAAM,MAAM,OAAO,GAAG;IACpB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,oCAAoC;IACpC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,EAAE,CAAC;CACrB,CAAC;AAEF,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,0GAA0G;IAC1G,OAAO,EAAE,MAAM,CAAC;IAChB,+FAA+F;IAC/F,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,wFAAwF;IACxF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACjD,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;;;;;OAQG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAuLD,wBAAgB,YAAY,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CAWvD;AAyCD,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA+M/F"}