zklicensing 0.1.0-beta.2 → 0.1.0-beta.21

package/build/trustAnchorVerifyCli.js

@@ -0,0 +1,235 @@
+#!/usr/bin/env node
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * trustAnchorVerifyCli.ts
+ *
+ * Command-line front-end for verifyTrustAnchor(). Ships as the `zklicensing-verify-trust`
+ * bin — the sibling of `zklicensing-verify` (which is the verifyService HTTP daemon).
+ *
+ * Usage:
+ *   zklicensing-verify-trust \
+ *     --origin https://store.example.com \
+ *     --address B62q... \
+ *     --pinned-key <base64-ed25519-pubkey> \
+ *     [--mina-graphql https://api.minascan.io/node/mainnet/v1/graphql] \
+ *     [--mina-network-id mainnet|testnet|devnet] \
+ *     [--skip-chain-checks] \
+ *     [--json]
+ *
+ * The manifest lives at `<origin>/.well-known/zklicensing/<address>.json` —
+ * one file per generation address, all signed by the same platform key. The
+ * appId is read out of the signed payload; callers never need to know it
+ * out-of-band, which lets buyers verify from just the address their wallet
+ * shows them (including addresses for retired generations).
+ *
+ * Permit registries:
+ *   zklicensing-verify-trust --registry B62q... [--origin https://authority.example]
+ *     [--mina-network-id mainnet|devnet] [--keeper-url https://zklicensing.com/api/keeper]
+ *     [--no-well-known] [--mina-graphql <url>] [--json]
+ * checks the registry's verification key against the published PermitRegistry
+ * hashes, its locked permissions and network binding, the authority website
+ * written into it at deploy (on the --origin host, when given) and that the
+ * website's /.well-known/zkpermits/<address>.json claims it, and (with
+ * --keeper-url) that the keeper's authority keys, payout and website match.
+ *
+ * Exit codes:
+ *   0 — every finding passed
+ *   1 — one or more findings failed
+ *   2 — invalid arguments
+ *
+ * --pinned-key is required and may be repeated; the CLI ships NO baked-in
+ * pin. Source it from https://zklicensing.com/trustanchor.html (published
+ * next to each generation's VK hash). See the SDK README for details.
+ */
+import { verifyTrustAnchor } from './trustAnchorVerify.js';
+import { verifyRegistryTrust } from './registryTrustVerify.js';
+const DEFAULT_GRAPHQL = {
+    mainnet: 'https://api.minascan.io/node/mainnet/v1/graphql',
+    // O1 Labs' devnet-plain node is the reliable public endpoint for freshly
+    // deployed accounts — public indexers like Minascan lag by several slots
+    // and often return null for a zkApp minutes after landing.
+    devnet: 'https://devnet-plain-1.gcp.o1test.net/graphql',
+};
+function usage() {
+    return [
+        'zklicensing-verify-trust — verify a vendor page + on-chain zkApp mutually bind',
+        '',
+        'Required:',
+        '  --origin <url>        Vendor origin (https://...)',
+        '  --address <B62q...>   zkApp address (the address your wallet shows you)',
+        '  --pinned-key <b64>    Platform manifest pubkey (repeatable during rotation)',
+        '',
+        'Or, for a permit registry:',
+        '  --registry <B62q...>  Registry address; checks VK, permissions, network,',
+        '                        the website bound at deploy and its .well-known claim',
+        '  --origin <url>        The authority website you expect (compared by host)',
+        '  --keeper-url <url>    Also compare the keeper\'s authority keys, payout, website',
+        '  --no-well-known       Skip fetching <website>/.well-known/zkpermits/<registry>.json',
+        '',
+        'Optional:',
+        '  --mina-graphql <url>         Mina GraphQL endpoint (default depends on',
+        '                               --mina-network-id: mainnet →',
+        `                               ${DEFAULT_GRAPHQL.mainnet};`,
+        `                               devnet → ${DEFAULT_GRAPHQL.devnet})`,
+        '  --mina-network-id <id>       mainnet | devnet (default: devnet)',
+        '  --skip-chain-checks          Manifest-only audit — no o1js chain reads',
+        '  --no-cross-check             Skip the platform backend cross-check',
+        '                               (default: on — verifies vendor manifest matches',
+        '                               https://zklicensing.com/apps/by-address/<address>)',
+        '  --json                       Emit TrustAnchorReport as JSON on stdout',
+        '',
+        'Exit: 0 all-ok · 1 any check failed · 2 bad args',
+    ].join('\n');
+}
+function parseArgs(argv) {
+    const args = {
+        pinnedKeys: [],
+        minaNetworkId: 'devnet',
+        skipChainChecks: false,
+        // Default on — the platform backend cross-check is cheap and catches
+        // vendors whose local manifest has drifted from the signed platform
+        // record. Opt out with --no-cross-check for a pure origin+chain audit.
+        crossCheck: true,
+        wellKnown: true,
+        json: false,
+        help: false,
+    };
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        const next = () => {
+            const v = argv[++i];
+            if (v === undefined)
+                throw new Error(`missing value for ${a}`);
+            return v;
+        };
+        switch (a) {
+            case '--origin':
+                args.origin = next();
+                break;
+            case '--address':
+                args.address = next();
+                break;
+            case '--registry':
+                args.registry = next();
+                break;
+            case '--keeper-url':
+                args.keeperUrl = next();
+                break;
+            case '--pinned-key':
+                args.pinnedKeys.push(next());
+                break;
+            case '--mina-graphql':
+                args.minaGraphql = next();
+                break;
+            case '--mina-network-id': {
+                const v = next();
+                if (v !== 'mainnet' && v !== 'devnet') {
+                    throw new Error(`--mina-network-id must be mainnet|devnet, got "${v}"`);
+                }
+                args.minaNetworkId = v;
+                break;
+            }
+            case '--skip-chain-checks':
+                args.skipChainChecks = true;
+                break;
+            case '--no-well-known':
+                args.wellKnown = false;
+                break;
+            // Kept as a no-op flag so any existing invocation that passed
+            // --cross-check keeps working. --no-cross-check opts out.
+            case '--cross-check':
+                args.crossCheck = true;
+                break;
+            case '--no-cross-check':
+                args.crossCheck = false;
+                break;
+            case '--json':
+                args.json = true;
+                break;
+            case '-h':
+            case '--help':
+                args.help = true;
+                break;
+            default: throw new Error(`unknown argument: ${a}`);
+        }
+    }
+    return args;
+}
+function formatHuman(report) {
+    const lines = [];
+    const banner = report.ok ? 'TRUST ANCHOR VERIFIED' : 'TRUST ANCHOR FAILED';
+    lines.push(banner);
+    lines.push(`  origin:     ${report.origin}`);
+    lines.push(`  address:    ${report.address}`);
+    if (report.appId)
+        lines.push(`  appId:      ${report.appId}`);
+    if (report.generation !== undefined)
+        lines.push(`  generation: ${report.generation}`);
+    lines.push('');
+    for (const f of report.findings) {
+        const mark = f.ok ? '[ok]  ' : '[FAIL]';
+        lines.push(`  ${mark} ${f.name} — ${f.detail}`);
+    }
+    return lines.join('\n');
+}
+async function main() {
+    let args;
+    try {
+        args = parseArgs(process.argv.slice(2));
+    }
+    catch (err) {
+        process.stderr.write(`${err.message}\n\n${usage()}\n`);
+        return 2;
+    }
+    if (args.help) {
+        process.stdout.write(`${usage()}\n`);
+        return 0;
+    }
+    if (args.registry) {
+        const report = await verifyRegistryTrust({
+            address: args.registry, network: args.minaNetworkId, minaGraphqlUrl: args.minaGraphql, keeperUrl: args.keeperUrl,
+            website: args.origin, checkWellKnown: args.wellKnown,
+        });
+        if (args.json)
+            process.stdout.write(JSON.stringify(report, null, 2) + '\n');
+        else {
+            process.stdout.write([report.ok ? 'REGISTRY VERIFIED' : 'REGISTRY FAILED', `  registry: ${report.address}`, `  network:  ${report.network}`, '',
+                ...(report.findings.some(f => f.name === 'website_claims_registry' && !f.ok) ? [`  The authority publishes the claim at <website>/.well-known/zkpermits/${report.address}.json`, ''] : []),
+                ...report.findings.map(f => `  ${f.ok ? '[ok]  ' : '[FAIL]'} ${f.name} — ${f.detail}`)].join('\n') + '\n');
+        }
+        return report.ok ? 0 : 1;
+    }
+    const missing = [];
+    if (!args.origin)
+        missing.push('--origin');
+    if (!args.address)
+        missing.push('--address');
+    if (args.pinnedKeys.length === 0)
+        missing.push('--pinned-key');
+    if (missing.length > 0) {
+        process.stderr.write(`missing required argument(s): ${missing.join(', ')}\n\n${usage()}\n`);
+        return 2;
+    }
+    const report = await verifyTrustAnchor({
+        origin: args.origin,
+        address: args.address,
+        pinnedPublicKeysBase64: args.pinnedKeys,
+        minaGraphqlUrl: args.minaGraphql ?? DEFAULT_GRAPHQL[args.minaNetworkId],
+        minaNetworkId: args.minaNetworkId,
+        skipChainChecks: args.skipChainChecks,
+        crossCheck: args.crossCheck,
+    });
+    if (args.json) {
+        process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
+    }
+    else {
+        process.stdout.write(`${formatHuman(report)}\n`);
+    }
+    return report.ok ? 0 : 1;
+}
+main().then((code) => process.exit(code), (err) => {
+    process.stderr.write(`unexpected error: ${err?.stack ?? err}\n`);
+    process.exit(1);
+});
+//# sourceMappingURL=trustAnchorVerifyCli.js.map

package/build/trustAnchorVerifyCli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trustAnchorVerifyCli.js","sourceRoot":"","sources":["../src/trustAnchorVerifyCli.ts"],"names":[],"mappings":";AACA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,iBAAiB,EAAwC,MAAM,wBAAwB,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAoB/D,MAAM,eAAe,GAA0C;IAC7D,OAAO,EAAE,iDAAiD;IAC1D,yEAAyE;IACzE,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,EAAG,+CAA+C;CACzD,CAAC;AAEF,SAAS,KAAK;IACZ,OAAO;QACL,gFAAgF;QAChF,EAAE;QACF,WAAW;QACX,qDAAqD;QACrD,2EAA2E;QAC3E,+EAA+E;QAC/E,EAAE;QACF,4BAA4B;QAC5B,4EAA4E;QAC5E,+EAA+E;QAC/E,6EAA6E;QAC7E,oFAAoF;QACpF,uFAAuF;QACvF,EAAE;QACF,WAAW;QACX,0EAA0E;QAC1E,6DAA6D;QAC7D,kCAAkC,eAAe,CAAC,OAAO,GAAG;QAC5D,2CAA2C,eAAe,CAAC,MAAM,GAAG;QACpE,mEAAmE;QACnE,0EAA0E;QAC1E,sEAAsE;QACtE,gFAAgF;QAChF,mFAAmF;QACnF,yEAAyE;QACzE,EAAE;QACF,kDAAkD;KACnD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,IAAI,GAAS;QACjB,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,QAAQ;QACvB,eAAe,EAAE,KAAK;QACtB,qEAAqE;QACrE,oEAAoE;QACpE,uEAAuE;QACvE,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI;QACf,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,KAAK;KACZ,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,MAAM,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC;QACX,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,CAAC;YACV,KAAK,UAAU;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBAAC,MAAM;YAC7C,KAAK,WAAW;gBAAE,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAC;gBAAC,MAAM;YAC/C,KAAK,YAAY;gBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC;gBAAC,MAAM;YACjD,KAAK,cAAc;gBAAE,IAAI,CAAC,SAAS,GAAG,IAAI,EAAE,CAAC;gBAAC,MAAM;YACpD,KAAK,cAAc;gBAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,MAAM;YACzD,KAAK,gBAAgB;gBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,CAAC;gBAAC,MAAM;YACxD,KAAK,mBAAmB,CAAC,CAAC,CAAC;gBACzB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;gBACjB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACtC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,GAAG,CAAC,CAAC;gBAC1E,CAAC;gBACD,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;gBACvB,MAAM;YACR,CAAC;YACD,KAAK,qBAAqB;gBAAE,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;gBAAC,MAAM;YAC/D,KAAK,iBAAiB;gBAAE,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;gBAAC,MAAM;YACtD,8DAA8D;YAC9D,0DAA0D;YAC1D,KAAK,eAAe;gBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBAAC,MAAM;YACpD,KAAK,kBAAkB;gBAAE,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;gBAAC,MAAM;YACxD,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBAAC,MAAM;YACvC,KAAK,IAAI,CAAC;YACV,KAAK,QAAQ;gBAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBAAC,MAAM;YACvC,OAAO,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,MAAyB;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,qBAAqB,CAAC;IAC3E,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,IAAI,IAAU,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,OAAO,KAAK,EAAE,IAAI,CAAC,CAAC;QACvD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS;YAChH,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS;SACrD,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;aACvE,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,EAAE,eAAe,MAAM,CAAC,OAAO,EAAE,EAAE,eAAe,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE;gBAC7I,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,yBAAyB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,0EAA0E,MAAM,CAAC,OAAO,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1L,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,EAAE,IAAI,CAAC,CAAC;QAC5F,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,MAAM,EAAE,IAAI,CAAC,MAAO;QACpB,OAAO,EAAE,IAAI,CAAC,OAAQ;QACtB,sBAAsB,EAAE,IAAI,CAAC,UAAU;QACvC,cAAc,EAAE,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC;QACvE,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5B,CAAC,GAAG,EAAE,EAAE;IACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF,CAAC"}

package/build/txBroadcastClient.d.ts

@@ -0,0 +1,26 @@
+/**
+ * txBroadcastClient.ts
+ *
+ * Small helper for POST /tx-broadcast. Called by the buy/renew/migrate
+ * flows immediately after the buyer's wallet returns a txHash — signals
+ * the backend to extend the app's in-flight slot from the short signing-TTL
+ * to the longer landing-TTL, so concurrent buyers on the same app don't
+ * think the slot has expired while an honest signed tx is still in the
+ * mempool.
+ *
+ * Fire-and-forget by design: this is a tightening signal, not a
+ * correctness dependency. Land-clear in the buy-watcher and the
+ * signing-TTL both remain live regardless of whether this call succeeds.
+ * Failures are swallowed with an optional log callback so a network blip
+ * doesn't surface as a confusing error mid-checkout.
+ */
+export type NotifyBroadcastRequest = {
+    keeperUrl: string;
+    appId: string;
+    txHash: string;
+    fetcher?: typeof fetch;
+    signal?: AbortSignal;
+    onError?: (err: unknown) => void;
+};
+export declare function notifyBroadcast(req: NotifyBroadcastRequest): Promise<void>;
+//# sourceMappingURL=txBroadcastClient.d.ts.map

package/build/txBroadcastClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"txBroadcastClient.d.ts","sourceRoot":"","sources":["../src/txBroadcastClient.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAM,MAAM,CAAC;IAClB,MAAM,EAAK,MAAM,CAAC;IAClB,OAAO,CAAC,EAAG,OAAO,KAAK,CAAC;IACxB,MAAM,CAAC,EAAI,WAAW,CAAC;IAGvB,OAAO,CAAC,EAAG,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;CACnC,CAAC;AAMF,wBAAsB,eAAe,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhF"}

package/build/txBroadcastClient.js

@@ -0,0 +1,20 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+function baseUrl(url) {
+    return url.replace(/\/+$/, '');
+}
+export async function notifyBroadcast(req) {
+    const fetcher = req.fetcher ?? fetch;
+    try {
+        await fetcher(`${baseUrl(req.keeperUrl)}/tx-broadcast`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            signal: req.signal,
+            body: JSON.stringify({ appId: req.appId, txHash: req.txHash }),
+        });
+    }
+    catch (err) {
+        req.onError?.(err);
+    }
+}
+//# sourceMappingURL=txBroadcastClient.js.map

package/build/txBroadcastClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"txBroadcastClient.js","sourceRoot":"","sources":["../src/txBroadcastClient.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AA8BpC,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAA2B;IAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;SAC/D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC"}

package/build/unbindClient.d.ts

@@ -0,0 +1,77 @@
+/**
+ * unbindClient.ts
+ *
+ * Browser-safe client for the non-custodial device-unbinding flow.
+ * Mirrors `bindClient.ts` in shape: signs the unbind message with
+ * TAG_UNBINDING, POSTs to /prove/unbind, then /confirm/unbind after
+ * the wallet returns a txHash.
+ *
+ * Notable asymmetry with bind: the unbind message shape carries the
+ * deviceCommitment position too, but the backend and circuit both
+ * hard-code it to `Field(0)` (the "not about any specific new
+ * device" sentinel — the message is about freeing a slot, not
+ * introducing a new device). The SDK matches by omitting
+ * deviceCommitment from the request and using "0" when computing
+ * the signature preimage.
+ *
+ * Non-custodial invariant: the signature is re-verified in-circuit
+ * against the leaf's `licenseHash` (which IS the owner-pubkey
+ * commitment — the circuit asserts equality at buy time), so no
+ * backend / vendor can unilaterally kick a device — only the
+ * passphrase holder can.
+ * A user who lost the physical device but still has the passphrase
+ * can unbind the missing device's slot from any device that holds
+ * the ownership key (the "remote log-off" case).
+ */
+import { PrivateKey } from 'o1js';
+export type ProveUnbindRequest = {
+    keeperUrl: string;
+    network: 'devnet' | 'mainnet';
+    zkAppAddress: string;
+    licenseHash: string;
+    ownerPrivateKey: PrivateKey;
+    slotIndex: number;
+    buyerAddress: string;
+    nonce?: string;
+    slotState?: string;
+    expirySlot?: number;
+    fetcher?: typeof fetch;
+    signal?: AbortSignal;
+};
+export type ProveUnbindResponse = {
+    provenTxJson: string;
+    licenseHash: string;
+    slotIndex: number;
+};
+export type ConfirmUnbindRequest = {
+    keeperUrl: string;
+    zkAppAddress: string;
+    licenseHash: string;
+    txHash: string;
+    fetcher?: typeof fetch;
+    signal?: AbortSignal;
+};
+export declare function proveUnbind(req: ProveUnbindRequest): Promise<ProveUnbindResponse>;
+export declare function confirmUnbind(req: ConfirmUnbindRequest): Promise<{
+    ok: true;
+}>;
+export type UnbindStatus = {
+    status: 'confirmed' | 'pending' | 'unknown';
+    slotIndex?: number;
+    deviceCommitment?: string;
+    elapsedMs?: number;
+};
+export type PollUnbindStatusOptions = {
+    keeperUrl: string;
+    network: 'devnet' | 'mainnet';
+    zkAppAddress: string;
+    licenseHash: string;
+    slotIndex: number;
+    fetcher?: typeof fetch;
+    intervalMs?: number;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    onTick?: (status: UnbindStatus) => void;
+};
+export declare function pollUnbindStatus(opts: PollUnbindStatusOptions): Promise<UnbindStatus>;
+//# sourceMappingURL=unbindClient.d.ts.map

package/build/unbindClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbindClient.d.ts","sourceRoot":"","sources":["../src/unbindClient.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAS,UAAU,EAAwB,MAAM,MAAM,CAAC;AAK/D,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAQ,MAAM,CAAC;IACxB,OAAO,EAAU,QAAQ,GAAG,SAAS,CAAC;IACtC,YAAY,EAAK,MAAM,CAAC;IACxB,WAAW,EAAM,MAAM,CAAC;IACxB,eAAe,EAAE,UAAU,CAAC;IAE5B,SAAS,EAAQ,MAAM,CAAC;IACxB,YAAY,EAAK,MAAM,CAAC;IAGxB,KAAK,CAAC,EAAW,MAAM,CAAC;IAGxB,SAAS,CAAC,EAAO,MAAM,CAAC;IACxB,UAAU,CAAC,EAAM,MAAM,CAAC;IACxB,OAAO,CAAC,EAAS,OAAO,KAAK,CAAC;IAC9B,MAAM,CAAC,EAAU,WAAW,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,SAAS,EAAK,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,SAAS,EAAK,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,MAAM,EAAQ,MAAM,CAAC;IACrB,OAAO,CAAC,EAAM,OAAO,KAAK,CAAC;IAC3B,MAAM,CAAC,EAAO,WAAW,CAAC;CAC3B,CAAC;AAgCF,wBAAsB,WAAW,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA2CvF;AAGD,wBAAsB,aAAa,CAAC,GAAG,EAAE,oBAAoB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAcpF;AAED,MAAM,MAAM,YAAY,GAAG;IAKzB,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;IAC5C,SAAS,CAAC,EAAS,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAS,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,SAAS,EAAK,MAAM,CAAC;IACrB,OAAO,EAAO,QAAQ,GAAG,SAAS,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,SAAS,EAAK,MAAM,CAAC;IACrB,OAAO,CAAC,EAAM,OAAO,KAAK,CAAC;IAC3B,UAAU,CAAC,EAAG,MAAM,CAAC;IACrB,SAAS,CAAC,EAAI,MAAM,CAAC;IACrB,MAAM,CAAC,EAAO,WAAW,CAAC;IAC1B,MAAM,CAAC,EAAO,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,CAAC;CAC9C,CAAC;AAKF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,YAAY,CAAC,CA4C3F"}

package/build/unbindClient.js

@@ -0,0 +1,169 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * unbindClient.ts
+ *
+ * Browser-safe client for the non-custodial device-unbinding flow.
+ * Mirrors `bindClient.ts` in shape: signs the unbind message with
+ * TAG_UNBINDING, POSTs to /prove/unbind, then /confirm/unbind after
+ * the wallet returns a txHash.
+ *
+ * Notable asymmetry with bind: the unbind message shape carries the
+ * deviceCommitment position too, but the backend and circuit both
+ * hard-code it to `Field(0)` (the "not about any specific new
+ * device" sentinel — the message is about freeing a slot, not
+ * introducing a new device). The SDK matches by omitting
+ * deviceCommitment from the request and using "0" when computing
+ * the signature preimage.
+ *
+ * Non-custodial invariant: the signature is re-verified in-circuit
+ * against the leaf's `licenseHash` (which IS the owner-pubkey
+ * commitment — the circuit asserts equality at buy time), so no
+ * backend / vendor can unilaterally kick a device — only the
+ * passphrase holder can.
+ * A user who lost the physical device but still has the passphrase
+ * can unbind the missing device's slot from any device that holds
+ * the ownership key (the "remote log-off" case).
+ */
+import { Field } from 'o1js';
+import { readErrorBody, tryQueueBusyFromBody, keeperError } from './proveErrors.js';
+import { encodePublicKey, encodeSignature, signUnbinding } from './ownershipSignature.js';
+import { fetchBindingState } from './bindClient.js';
+function baseUrl(url) {
+    return url.replace(/\/+$/, '');
+}
+async function readJsonError(resp) {
+    try {
+        const body = await resp.json();
+        if (typeof body.error === 'string')
+            return body.error;
+    }
+    catch { /* body wasn't JSON */ }
+    return `HTTP ${resp.status}`;
+}
+function freshNonce() {
+    const crypto = globalThis.crypto;
+    if (!crypto?.getRandomValues) {
+        throw new Error('crypto.getRandomValues unavailable — unbindClient requires Node ≥ 20 or a modern browser');
+    }
+    const bytes = new Uint8Array(16); // 128 bits
+    crypto.getRandomValues(bytes);
+    let n = 0n;
+    for (const b of bytes)
+        n = (n << 8n) | BigInt(b);
+    return Field(n).toString();
+}
+// POST /prove/unbind — same retry contract as /prove/bind. Returns
+// 409 `ProveQueueBusyError` when another root-mutating tx for the
+// same app is in flight; the caller retries with the server-supplied
+// `retryAfterMs` cadence.
+export async function proveUnbind(req) {
+    const fetcher = req.fetcher ?? fetch;
+    const nonce = req.nonce ?? freshNonce();
+    const { slotState, expirySlot } = (req.slotState !== undefined && req.expirySlot !== undefined)
+        ? { slotState: req.slotState, expirySlot: req.expirySlot }
+        : await fetchBindingState({ ...req, fetcher });
+    const ownerPubKey = req.ownerPrivateKey.toPublicKey();
+    // deviceCommitment=0 for the preimage — matches TAG_UNBINDING's
+    // circuit-side check (see verifyUnbinding / bindingLikeFields in
+    // ownershipSignature.ts).
+    const ownerSig = signUnbinding(req.ownerPrivateKey, {
+        licenseHash: req.licenseHash,
+        deviceCommitment: '0',
+        slotIndex: req.slotIndex,
+        nonce,
+        slotState,
+        expirySlot,
+        zkAppAddress: req.zkAppAddress,
+    });
+    const resp = await fetcher(`${baseUrl(req.keeperUrl)}/prove/unbind`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        signal: req.signal,
+        body: JSON.stringify({
+            licenseHash: req.licenseHash,
+            buyerAddress: req.buyerAddress,
+            zkAppAddress: req.zkAppAddress,
+            network: req.network,
+            ownerPubKey: encodePublicKey(ownerPubKey),
+            ownerSig: encodeSignature(ownerSig),
+            slotIndex: req.slotIndex,
+            nonce,
+        }),
+    });
+    if (!resp.ok) {
+        const parsed = await readErrorBody(resp);
+        const queueBusy = tryQueueBusyFromBody(parsed);
+        if (queueBusy)
+            throw queueBusy;
+        throw keeperError(parsed);
+    }
+    return await resp.json();
+}
+// POST /confirm/unbind — pass-through no-op mirror of /confirm/bind.
+export async function confirmUnbind(req) {
+    const fetcher = req.fetcher ?? fetch;
+    const resp = await fetcher(`${baseUrl(req.keeperUrl)}/confirm/unbind`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        signal: req.signal,
+        body: JSON.stringify({
+            zkAppAddress: req.zkAppAddress,
+            licenseHash: req.licenseHash,
+            txHash: req.txHash,
+        }),
+    });
+    if (!resp.ok)
+        throw new Error(await readJsonError(resp));
+    return { ok: true };
+}
+// Polls GET /license/:zkAppAddress/:licenseHash until the unbind has
+// landed on-chain (the target slot's commitment is '0') or the timeout
+// fires. Mirrors pollBindStatus in shape.
+export async function pollUnbindStatus(opts) {
+    const fetcher = opts.fetcher ?? fetch;
+    const interval = opts.intervalMs ?? 10_000;
+    const timeout = opts.timeoutMs ?? 20 * 60 * 1000;
+    const startedAt = Date.now();
+    const deadline = startedAt + timeout;
+    const url = `${baseUrl(opts.keeperUrl)}/license/${encodeURIComponent(opts.zkAppAddress)}/${encodeURIComponent(opts.licenseHash)}?network=${opts.network}`;
+    while (true) {
+        if (opts.signal?.aborted)
+            throw new Error('pollUnbindStatus aborted');
+        let status = { status: 'unknown', elapsedMs: Date.now() - startedAt };
+        try {
+            const resp = await fetcher(url, { signal: opts.signal });
+            if (resp.ok) {
+                const body = await resp.json();
+                if (body.found) {
+                    const slot = (body.devices ?? []).find(d => d.slotIndex === opts.slotIndex);
+                    const commitment = slot?.deviceCommitment ?? '0';
+                    if (commitment === '0') {
+                        status = {
+                            status: 'confirmed',
+                            slotIndex: opts.slotIndex,
+                            deviceCommitment: commitment,
+                            elapsedMs: Date.now() - startedAt,
+                        };
+                    }
+                    else {
+                        status = {
+                            status: 'pending',
+                            slotIndex: opts.slotIndex,
+                            deviceCommitment: commitment,
+                            elapsedMs: Date.now() - startedAt,
+                        };
+                    }
+                }
+            }
+        }
+        catch { /* transient network — try again on next tick */ }
+        opts.onTick?.(status);
+        if (status.status === 'confirmed')
+            return status;
+        if (Date.now() >= deadline)
+            return status;
+        await new Promise((r) => setTimeout(r, interval));
+    }
+}
+//# sourceMappingURL=unbindClient.js.map

package/build/unbindClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unbindClient.js","sourceRoot":"","sources":["../src/unbindClient.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,KAAK,EAAoC,MAAM,MAAM,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAqCpD,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;QAC1D,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAClC,OAAO,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,MAAM,GAAI,UAAkB,CAAC,MAA4B,CAAC;IAChE,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW;IAC7C,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,mEAAmE;AACnE,kEAAkE;AAClE,qEAAqE;AACrE,0BAA0B;AAC1B,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAuB;IACvD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,EAAE,CAAC;IACxC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC;QAC7F,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE;QAC1D,CAAC,CAAC,MAAM,iBAAiB,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAEjD,MAAM,WAAW,GAAc,GAAG,CAAC,eAAe,CAAC,WAAW,EAAE,CAAC;IACjE,gEAAgE;IAChE,iEAAiE;IACjE,0BAA0B;IAC1B,MAAM,QAAQ,GAAc,aAAa,CAAC,GAAG,CAAC,eAAe,EAAE;QAC7D,WAAW,EAAO,GAAG,CAAC,WAAW;QACjC,gBAAgB,EAAE,GAAG;QACrB,SAAS,EAAS,GAAG,CAAC,SAAS;QAC/B,KAAK;QACL,SAAS;QACT,UAAU;QACV,YAAY,EAAM,GAAG,CAAC,YAAY;KACnC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,EAAE;QACnE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,WAAW,EAAG,GAAG,CAAC,WAAW;YAC7B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,OAAO,EAAO,GAAG,CAAC,OAAO;YACzB,WAAW,EAAG,eAAe,CAAC,WAAW,CAAC;YAC1C,QAAQ,EAAM,eAAe,CAAC,QAAQ,CAAC;YACvC,SAAS,EAAK,GAAG,CAAC,SAAS;YAC3B,KAAK;SACN,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,SAAS;YAAE,MAAM,SAAS,CAAC;QAC/B,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAyB,CAAC;AAClD,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAyB;IAC3D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,EAAE;QACrE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,YAAY,EAAE,GAAG,CAAC,YAAY;YAC9B,WAAW,EAAG,GAAG,CAAC,WAAW;YAC7B,MAAM,EAAQ,GAAG,CAAC,MAAM;SACzB,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AA0BD,qEAAqE;AACrE,uEAAuE;AACvE,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAA6B;IAClE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;IAC3C,MAAM,OAAO,GAAI,IAAI,CAAC,SAAS,IAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAI,SAAS,GAAG,OAAO,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,kBAAkB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,YAAY,IAAI,CAAC,OAAO,EAAE,CAAC;IAE1J,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACtE,IAAI,MAAM,GAAiB,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QACpF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAG3B,CAAC;gBACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC5E,MAAM,UAAU,GAAG,IAAI,EAAE,gBAAgB,IAAI,GAAG,CAAC;oBACjD,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;wBACvB,MAAM,GAAG;4BACP,MAAM,EAAE,WAAW;4BACnB,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,gBAAgB,EAAE,UAAU;4BAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;yBAClC,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG;4BACP,MAAM,EAAE,SAAS;4BACjB,SAAS,EAAE,IAAI,CAAC,SAAS;4BACzB,gBAAgB,EAAE,UAAU;4BAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;yBAClC,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,gDAAgD,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACtB,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,MAAM,CAAC;QACjD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC1C,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/build/units.d.ts

@@ -0,0 +1,28 @@
+export type MinaUnit = 'MINA' | 'tMINA';
+/** 'tMINA' on devnet (and any test network), 'MINA' on mainnet. */
+export declare function minaUnit(network: string): MinaUnit;
+/** "12.5 tMINA" / "12.5 MINA" for an amount in MINA (number or decimal string). */
+export declare function formatMina(amountMina: number | string, network: string): string;
+/** "12.5 tMINA" for an amount in nanomina. */
+export declare function formatNanomina(nano: bigint | string | number, network: string): string;
+/**
+ * The words that go with a fiat value. Mainnet: "≈ €2.10". Devnet: the same
+ * amount of real MINA, said as such ("as MINA ≈ €2.10"), plus a note that
+ * tMINA itself has no value.
+ */
+export declare function fiatReference(network: string): {
+    prefix: string;
+    note: string | null;
+};
+export type FiatCurrency = 'eur' | 'usd' | 'gbp';
+/**
+ * Which money a person sees amounts in, by their country: euros in the EU,
+ * pounds and euros in the UK, dollars in the US, euros and dollars elsewhere
+ * (or when the country is unknown).
+ */
+export declare function fiatCurrencies(country?: string | null): FiatCurrency[];
+/** "€2.10", "-€26.78" for an amount of money. */
+export declare function formatFiat(amount: number | string, currency: FiatCurrency, digits?: number): string;
+/** "€2.10 · $2.30" for the given currencies (a currency without a rate is left out). */
+export declare function formatFiatList(values: Partial<Record<FiatCurrency, number | string>>, currencies: FiatCurrency[], digits?: number): string;
+//# sourceMappingURL=units.d.ts.map

package/build/units.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"units.d.ts","sourceRoot":"","sources":["../src/units.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AAExC,mEAAmE;AACnE,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAElD;AAED,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/E;AAED,8CAA8C;AAC9C,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAMtF;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAItF;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAGjD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,YAAY,EAAE,CAMtE;AAED,iDAAiD;AACjD,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAI,GAAG,MAAM,CAG9F;AAED,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,EAAE,MAAM,SAAI,GAAG,MAAM,CAGrI"}