zklicensing 0.1.0-beta.2 → 0.1.0-beta.21

package/build/archiveBootstrap.js

@@ -1,5 +1,5 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 /**
  * archiveBootstrap.ts
  *
@@ -12,19 +12,22 @@
  *   licenseIssued          → applyLicenseIssued
  *   licenseIssuedNoEscrow  → applyLicenseIssued (escrowless: true)
  *   licenseRenewed         → updateExpiry
- *   licenseMigrated        → applyLicenseIssued (escrowless: true, migrated: true)
+ *   appCreated (successor) → carryOverRecords from its predecessor (lazyBootstrap)
+ *   appRetired             → ignored (the app is frozen; its successor carries on)
  *   refundIssued           → recordRefund
  *   fundsReleased          → recordRelease
+ *   deviceBound            → applyDeviceBound (non-custodial binding)
+ *   deviceUnbound          → applyDeviceUnbound (non-custodial binding)
  *   priceUpdated           → ignored (price-history tracking lives in the private
- *                             zklicensing-app keeper alongside vendor-stats)
+ *                             zklicensing-app backend alongside vendor-stats)
  *
  * Uses LicensingAppEventsContract (from contractInterface) for fetchEvents —
  * this lets the public verify service read events without depending on the
  * private LicensingApp circuit source.
  */
-import { PublicKey, UInt32 } from 'o1js';
-import { LicensingAppEventsContract, MONTHLY_SLOTS_N, ONE_YEAR_SLOTS_N, FIVE_YEAR_SLOTS_N, } from './contractInterface.js';
-import { applyLicenseIssued, updateExpiry, recordRefund, recordRelease, } from './licenseStore.js';
+import { PublicKey } from 'o1js';
+import { LicensingAppEventsContract, MONTHLY_SLOTS_N, ONE_YEAR_SLOTS_N, FIVE_YEAR_SLOTS_N, PERPETUAL_SLOTS_N, } from './contractInterface.js';
+import { applyLicenseIssued, applyLicenseRenewed, applyDeviceBound, applyDeviceUnbound, applyLicenseTransferred, recordRefund, recordRelease, readRecords, carryOverRecords, } from './licenseStore.js';
 export const SYNC_CHUNK_SLOTS = 10_000;
 export const MAX_LOOKBACK_SLOTS = 525_600;
 // Back-derive the duration tier from (expirySlot - purchaseSlot). Tolerance
@@ -37,16 +40,36 @@ export function tierFromExpiryDelta(slots) {
         return 'yearly';
     if (within(FIVE_YEAR_SLOTS_N))
         return 'fiveYear';
+    if (within(PERPETUAL_SLOTS_N))
+        return 'perpetual';
     return null;
 }
 export async function bootstrapFromArchive(zkAppAddress, range = {}) {
     const pubKey = PublicKey.fromBase58(zkAppAddress);
     const zkApp = new LicensingAppEventsContract(pubKey);
-    const start = range.from !== undefined ? UInt32.from(range.from) : undefined;
-    const end = range.to !== undefined ? UInt32.from(range.to) : undefined;
-    const allEvents = await zkApp.fetchEvents(start, end);
+    // o1js's fetchEvents(from, to) passes these directly to the archive-node
+    // GraphQL as `from`/`to`, which the reference Mina archive interprets as
+    // BLOCK HEIGHTS, not global slots. We track everything in slots, so the two
+    // never match and every query returned zero events. Fetch all events for
+    // the address and filter by globalSlot client-side — over-fetches per
+    // chunked call, but is the only correct behavior against this archive.
+    const allEvents = await zkApp.fetchEvents();
+    const fromSlot = range.from ?? 0;
+    const toSlot = range.to ?? Number.MAX_SAFE_INTEGER;
+    // Filter out only orphaned events; keep both 'canonical' and 'pending'.
+    // The devnet-archive-node-api.gcp.o1test.net archive returns everything
+    // with chainStatus='pending' (it doesn't finalize the flag), so a strict
+    // `=== 'canonical'` filter drops every event and the mirror stays empty.
+    // Mina's k-block finality means recently-landed events on the best chain
+    // are safe to replay; if one later reorgs out, the next sync sweep will
+    // re-derive state from the new canonical events (a no-op if none of them
+    // touch this record).
     const canonical = [...allEvents]
-        .filter(e => e.chainStatus === 'canonical')
+        .filter(e => e.chainStatus !== 'orphaned')
+        .filter(e => {
+        const slot = Number(e.globalSlot.toString());
+        return slot >= fromSlot && slot <= toSlot;
+    })
         .sort((a, b) => Number(a.globalSlot.toString()) - Number(b.globalSlot.toString()));
     const events = [];
     for (const ev of canonical) {
@@ -60,6 +83,7 @@ export async function bootstrapFromArchive(zkAppAddress, range = {}) {
                     priceMonthly: BigInt(data.priceMonthly.toString()),
                     priceYearly: BigInt(data.priceYearly.toString()),
                     priceFiveYear: BigInt(data.priceFiveYear.toString()),
+                    pricePerpetual: BigInt(data.pricePerpetual.toString()),
                 });
                 break;
             }
@@ -72,6 +96,8 @@ export async function bootstrapFromArchive(zkAppAddress, range = {}) {
                     amount: BigInt(data.amount.toString()),
                     issuedSlot: Number(data.slot.toString()),
                     expirySlot: Number(data.expirySlot.toString()),
+                    buyerAddress: data.buyer.toBase58(),
+                    cap: Number(data.cap.toString()),
                 });
                 break;
             }
@@ -84,6 +110,8 @@ export async function bootstrapFromArchive(zkAppAddress, range = {}) {
                     amount: BigInt(data.amount.toString()),
                     issuedSlot: Number(data.slot.toString()),
                     expirySlot: Number(data.expirySlot.toString()),
+                    buyerAddress: data.buyer.toBase58(),
+                    cap: Number(data.cap.toString()),
                 });
                 break;
             }
@@ -97,23 +125,53 @@ export async function bootstrapFromArchive(zkAppAddress, range = {}) {
                 });
                 break;
             }
-            case 'licenseMigrated': {
+            case 'appCreated': {
                 const data = ev.event.data;
-                events.push({
-                    kind: 'licenseMigrated',
-                    slot,
-                    licenseHash: data.licenseHash.toString(),
-                    expirySlot: Number(data.expirySlot.toString()),
-                    ancestorGen: Number(data.ancestorGen.toString()),
-                });
+                const pred = data.predecessor;
+                events.push({ kind: 'appCreated', slot, predecessor: pred.equals(PublicKey.empty()).toBoolean() ? null : pred.toBase58() });
                 break;
             }
+            case 'appRetired':
+                events.push({ kind: 'appRetired', slot, licensesRoot: ev.event.data.licensesRoot.toString() });
+                break;
             case 'refundIssued':
                 events.push({ kind: 'refundIssued', slot, licenseHash: ev.event.data.toString() });
                 break;
             case 'fundsReleased':
                 events.push({ kind: 'fundsReleased', slot, licenseHash: ev.event.data.toString() });
                 break;
+            case 'deviceBound': {
+                const data = ev.event.data;
+                events.push({
+                    kind: 'deviceBound',
+                    slot,
+                    licenseHash: data.licenseHash.toString(),
+                    slotIndex: Number(data.slotIndex.toString()),
+                    deviceCommitment: data.deviceCommitment.toString(),
+                    // Proof-time slot, NOT the block slot. The circuit packs this into
+                    // the leaf's freedAt field, so the mirror must use the same value
+                    // or the reconstructed leaf hash won't match the on-chain root.
+                    boundAtSlot: Number(data.boundAtSlot.toString()),
+                });
+                break;
+            }
+            case 'licenseTransferred': {
+                const data = ev.event.data;
+                events.push({ kind: 'licenseTransferred', slot, from: data.from.toString(), to: data.to.toString(), wallet: data.wallet.toBase58() });
+                break;
+            }
+            case 'deviceUnbound': {
+                const data = ev.event.data;
+                events.push({
+                    kind: 'deviceUnbound',
+                    slot,
+                    licenseHash: data.licenseHash.toString(),
+                    slotIndex: Number(data.slotIndex.toString()),
+                    // Proof-time slot; see deviceBound comment above.
+                    freedAtSlot: Number(data.freedAtSlot.toString()),
+                });
+                break;
+            }
         }
     }
     const maxSeenSlot = canonical.length === 0
@@ -134,6 +192,8 @@ export async function applyEventsToStore(zkAppAddress, events) {
                     expirySlot: ev.expirySlot,
                     purchaseSlot: ev.issuedSlot,
                     purchaseAmount: ev.amount.toString(),
+                    buyerAddress: ev.buyerAddress,
+                    deviceCap: ev.cap,
                     ...(tier ? { tier } : {}),
                 });
                 count++;
@@ -146,29 +206,24 @@ export async function applyEventsToStore(zkAppAddress, events) {
                     purchaseSlot: ev.issuedSlot,
                     purchaseAmount: ev.amount.toString(),
                     escrowless: true,
+                    buyerAddress: ev.buyerAddress,
+                    deviceCap: ev.cap,
                     ...(tier ? { tier } : {}),
                 });
                 count++;
                 break;
             }
             case 'licenseRenewed': {
-                const ok = await updateExpiry(zkAppAddress, ev.licenseHash, ev.newExpiry, {
-                    markRenewed: true,
-                });
+                const ok = await applyLicenseRenewed(zkAppAddress, ev.licenseHash, { newExpiry: ev.newExpiry });
                 if (!ok)
                     warnings.push(`renew for unknown license ${ev.licenseHash.slice(0, 16)}…`);
                 break;
             }
-            case 'licenseMigrated': {
-                await applyLicenseIssued(zkAppAddress, ev.licenseHash, {
-                    expirySlot: ev.expirySlot,
-                    purchaseSlot: 0,
-                    purchaseAmount: '0',
-                    escrowless: true,
-                });
-                count++;
+            case 'appCreated':
+            case 'appRetired':
+                // A successor's carried-over licenses are copied by lazyBootstrap
+                // (from its predecessor) before its own events apply.
                 break;
-            }
             case 'refundIssued': {
                 const ok = await recordRefund(zkAppAddress, ev.licenseHash);
                 if (!ok)
@@ -181,6 +236,31 @@ export async function applyEventsToStore(zkAppAddress, events) {
                     warnings.push(`release for unknown license ${ev.licenseHash.slice(0, 16)}…`);
                 break;
             }
+            case 'deviceBound': {
+                const ok = await applyDeviceBound(zkAppAddress, ev.licenseHash, {
+                    slotIndex: ev.slotIndex,
+                    deviceCommitment: ev.deviceCommitment,
+                    boundAtSlot: ev.boundAtSlot,
+                });
+                if (!ok)
+                    warnings.push(`bind for unknown license ${ev.licenseHash.slice(0, 16)}…`);
+                break;
+            }
+            case 'licenseTransferred': {
+                const ok = await applyLicenseTransferred(zkAppAddress, ev.from, ev.to, { wallet: ev.wallet });
+                if (!ok)
+                    warnings.push(`transfer of unknown license ${ev.from.slice(0, 16)}…`);
+                break;
+            }
+            case 'deviceUnbound': {
+                const ok = await applyDeviceUnbound(zkAppAddress, ev.licenseHash, {
+                    slotIndex: ev.slotIndex,
+                    freedAtSlot: ev.freedAtSlot,
+                });
+                if (!ok)
+                    warnings.push(`unbind for unknown license ${ev.licenseHash.slice(0, 16)}…`);
+                break;
+            }
         }
     }
     return { count, warnings };
@@ -189,20 +269,21 @@ export async function discoverAppCreatedSlot(zkAppAddress, nowSlot, lookbackSlot
     const pubKey = PublicKey.fromBase58(zkAppAddress);
     const zkApp = new LicensingAppEventsContract(pubKey);
     const floor = Math.max(1, nowSlot - lookbackSlots);
-    let to = nowSlot;
-    while (to >= floor) {
-        const from = Math.max(floor, to - SYNC_CHUNK_SLOTS + 1);
-        const events = await zkApp.fetchEvents(UInt32.from(from), UInt32.from(to));
-        const created = events
-            .filter(e => e.chainStatus === 'canonical' && e.type === 'appCreated')
-            .sort((a, b) => Number(a.globalSlot.toString()) - Number(b.globalSlot.toString()));
-        if (created.length > 0) {
-            return Number(created[0].globalSlot.toString());
-        }
-        if (from <= floor)
-            break;
-        to = from - 1;
-    }
+    // See bootstrapFromArchive: fetchEvents(from, to) filters by BLOCK HEIGHT
+    // in the reference archive, not slot. One full fetch + client-side slot
+    // filter is the only correct approach. Also keeps chainStatus='pending'
+    // events — o1test.net's devnet archive doesn't finalize that flag; strict
+    // 'canonical' filtering leaves discovery empty on freshly-deployed apps.
+    const events = await zkApp.fetchEvents();
+    const created = events
+        .filter(e => e.chainStatus !== 'orphaned' && e.type === 'appCreated')
+        .filter(e => {
+        const slot = Number(e.globalSlot.toString());
+        return slot >= floor && slot <= nowSlot;
+    })
+        .sort((a, b) => Number(a.globalSlot.toString()) - Number(b.globalSlot.toString()));
+    if (created.length > 0)
+        return Number(created[0].globalSlot.toString());
     return null;
 }
 const inFlightBootstraps = new Map();
@@ -212,14 +293,26 @@ export async function lazyBootstrap(zkAppAddress) {
         return existing;
     const short = zkAppAddress.slice(0, 12) + '…';
     const p = (async () => {
+        const started = Date.now();
         try {
             const { events } = await bootstrapFromArchive(zkAppAddress);
+            // A redeployed app's successor starts with its predecessor's licenses:
+            // rebuild those first (recursively), then copy them across.
+            const created = events.find(e => e.kind === 'appCreated');
+            if (created?.kind === 'appCreated' && created.predecessor) {
+                if (!(await readRecords()).some(r => r.zkAppAddress === created.predecessor))
+                    await lazyBootstrap(created.predecessor);
+                await carryOverRecords(created.predecessor, zkAppAddress);
+            }
             const { count, warnings } = await applyEventsToStore(zkAppAddress, events);
             for (const w of warnings)
                 console.warn(`[lazy-bootstrap] ${short}: ${w}`);
-            if (count > 0) {
-                console.log(`[lazy-bootstrap] ${short}: replayed ${count} record(s)`);
-            }
+            // Always log the outcome — count=0 with a mismatch trigger is the
+            // interesting case: it means either the archive is behind Mina's own
+            // best chain (transient) or the local mirror silently drifted and the
+            // replay didn't fix it (a real bug — verify will keep looping through
+            // this until the next mutation event lands). Silence would hide both.
+            console.log(`[lazy-bootstrap] ${short}: replayed ${count} record(s) in ${Date.now() - started}ms`);
         }
         catch (e) {
             console.warn(`[lazy-bootstrap] ${short}: ${e?.message ?? e}`);

package/build/archiveBootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archiveBootstrap.js","sourceRoot":"","sources":["../src/archiveBootstrap.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EACL,0BAA0B,EAO1B,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,EACvB,YAAY,EACZ,aAAa,EACb,WAAW,EACX,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAiB1C,4EAA4E;AAC5E,8DAA8D;AAC9D,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,eAAe,CAAC;QAAI,OAAO,SAAS,CAAC;IAChD,IAAI,MAAM,CAAC,gBAAgB,CAAC;QAAG,OAAO,QAAQ,CAAC;IAC/C,IAAI,MAAM,CAAC,iBAAiB,CAAC;QAAE,OAAO,UAAU,CAAC;IACjD,IAAI,MAAM,CAAC,iBAAiB,CAAC;QAAE,OAAO,WAAW,CAAC;IAClD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,YAAoB,EACpB,QAAoB,EAAE;IAEtB,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,KAAK,GAAI,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAEtD,yEAAyE;IACzE,yEAAyE;IACzE,4EAA4E;IAC5E,yEAAyE;IACzE,sEAAsE;IACtE,uEAAuE;IACvE,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;IAE5C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;IACjC,MAAM,MAAM,GAAK,KAAK,CAAC,EAAE,IAAM,MAAM,CAAC,gBAAgB,CAAC;IAEvD,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,sBAAsB;IACtB,MAAM,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC;SACzC,MAAM,CAAC,CAAC,CAAC,EAAE;QACV,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,OAAO,IAAI,IAAI,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC;IAC5C,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAErF,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9C,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAoC,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,cAAc;oBACpB,IAAI;oBACJ,YAAY,EAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;oBACpD,WAAW,EAAK,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;oBACnD,aAAa,EAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;oBACrD,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;iBACvD,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAqC,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,eAAe;oBACrB,IAAI;oBACJ,WAAW,EAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;oBACzC,MAAM,EAAQ,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAC5C,UAAU,EAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1C,UAAU,EAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;oBAChD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;oBACnC,GAAG,EAAW,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;iBAC1C,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;gBAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAqC,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,uBAAuB;oBAC7B,IAAI;oBACJ,WAAW,EAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;oBACzC,MAAM,EAAQ,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAC5C,UAAU,EAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBAC1C,UAAU,EAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;oBAChD,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE;oBACnC,GAAG,EAAW,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;iBAC1C,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAoC,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,gBAAgB;oBACtB,IAAI;oBACJ,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;oBACxC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;iBAC7C,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAkC,CAAC;gBACzD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAwB,CAAC;gBAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC5H,MAAM;YACR,CAAC;YACD,KAAK,YAAY;gBACf,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAG,EAAE,CAAC,KAAK,CAAC,IAAY,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACxG,MAAM;YACR,KAAK,cAAc;gBACjB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,EAAG,EAAE,CAAC,KAAK,CAAC,IAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC5F,MAAM;YACR,KAAK,eAAe;gBAClB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAG,EAAE,CAAC,KAAK,CAAC,IAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC7F,MAAM;YACR,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAmC,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,aAAa;oBACnB,IAAI;oBACJ,WAAW,EAAO,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;oBAC7C,SAAS,EAAS,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;oBACnD,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE;oBAClD,mEAAmE;oBACnE,kEAAkE;oBAClE,gEAAgE;oBAChE,WAAW,EAAO,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;iBACtD,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;YACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;gBAC1B,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAW,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBACtI,MAAM;YACR,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,IAAqC,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,eAAe;oBACrB,IAAI;oBACJ,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE;oBACxC,SAAS,EAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;oBAC9C,kDAAkD;oBAClD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;iBACjD,CAAC,CAAC;gBACH,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC;QACxC,CAAC,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAElE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,MAAyB;IAEzB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,cAAc;gBACjB,MAAM;YACR,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;gBAC7E,MAAM,kBAAkB,CAAC,YAAY,EAAE,EAAE,CAAC,WAAW,EAAE;oBACrD,UAAU,EAAM,EAAE,CAAC,UAAU;oBAC7B,YAAY,EAAI,EAAE,CAAC,UAAU;oBAC7B,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE;oBACpC,YAAY,EAAI,EAAE,CAAC,YAAY;oBAC/B,SAAS,EAAO,EAAE,CAAC,GAAG;oBACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1B,CAAC,CAAC;gBACH,KAAK,EAAE,CAAC;gBACR,MAAM;YACR,CAAC;YACD,KAAK,uBAAuB,CAAC,CAAC,CAAC;gBAC7B,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;gBAC7E,MAAM,kBAAkB,CAAC,YAAY,EAAE,EAAE,CAAC,WAAW,EAAE;oBACrD,UAAU,EAAM,EAAE,CAAC,UAAU;oBAC7B,YAAY,EAAI,EAAE,CAAC,UAAU;oBAC7B,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE;oBACpC,UAAU,EAAM,IAAI;oBACpB,YAAY,EAAI,EAAE,CAAC,YAAY;oBAC/B,SAAS,EAAO,EAAE,CAAC,GAAG;oBACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC1B,CAAC,CAAC;gBACH,KAAK,EAAE,CAAC;gBACR,MAAM;YACR,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,EAAE,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;gBAChG,IAAI,CAAC,EAAE;oBAAE,QAAQ,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACpF,MAAM;YACR,CAAC;YACD,KAAK,YAAY,CAAC;YAClB,KAAK,YAAY;gBACf,kEAAkE;gBAClE,sDAAsD;gBACtD,MAAM;YACR,KAAK,cAAc,CAAC,CAAC,CAAC;gBACpB,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC;gBAC5D,IAAI,CAAC,EAAE;oBAAE,QAAQ,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACrF,MAAM;YACR,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBACtE,IAAI,CAAC,EAAE;oBAAE,QAAQ,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACtF,MAAM;YACR,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,YAAY,EAAE,EAAE,CAAC,WAAW,EAAE;oBAC9D,SAAS,EAAS,EAAE,CAAC,SAAS;oBAC9B,gBAAgB,EAAE,EAAE,CAAC,gBAAgB;oBACrC,WAAW,EAAO,EAAE,CAAC,WAAW;iBACjC,CAAC,CAAC;gBACH,IAAI,CAAC,EAAE;oBAAE,QAAQ,CAAC,IAAI,CAAC,4BAA4B,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACnF,MAAM;YACR,CAAC;YACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;gBAC1B,MAAM,EAAE,GAAG,MAAM,uBAAuB,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9F,IAAI,CAAC,EAAE;oBAAE,QAAQ,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC/E,MAAM;YACR,CAAC;YACD,KAAK,eAAe,CAAC,CAAC,CAAC;gBACrB,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,YAAY,EAAE,EAAE,CAAC,WAAW,EAAE;oBAChE,SAAS,EAAI,EAAE,CAAC,SAAS;oBACzB,WAAW,EAAE,EAAE,CAAC,WAAW;iBAC5B,CAAC,CAAC;gBACH,IAAI,CAAC,EAAE;oBAAE,QAAQ,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACrF,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAoB,EACpB,OAAe,EACf,gBAAwB,kBAAkB;IAE1C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAClD,MAAM,KAAK,GAAI,IAAI,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,KAAK,GAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,aAAa,CAAC,CAAC;IAEpD,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;SACpE,MAAM,CAAC,CAAC,CAAC,EAAE;QACV,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7C,OAAO,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,CAAC;IAC1C,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAyB,CAAC;AAE5D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,YAAoB;IACtD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACtD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC;IAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAC5D,uEAAuE;YACvE,4DAA4D;YAC5D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;YAC1D,IAAI,OAAO,EAAE,IAAI,KAAK,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC1D,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,OAAO,CAAC,WAAW,CAAC;oBAAE,MAAM,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACvH,MAAM,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAC3E,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1E,kEAAkE;YAClE,qEAAqE;YACrE,sEAAsE;YACtE,sEAAsE;YACtE,sEAAsE;YACtE,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,cAAc,KAAK,iBAAiB,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC;QACrG,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,oBAAoB,KAAK,KAAK,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,EAAE,CAAC;IACL,kBAAkB,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/build/atomicJson.d.ts

@@ -0,0 +1,5 @@
+export declare function readJsonOr<T>(path: string, fallback: T): Promise<T>;
+export declare function writeJsonAtomic(path: string, value: unknown, opts?: {
+    mode?: number;
+}): Promise<void>;
+//# sourceMappingURL=atomicJson.d.ts.map

package/build/atomicJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomicJson.d.ts","sourceRoot":"","sources":["../src/atomicJson.ts"],"names":[],"mappings":"AAmBA,wBAAsB,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAazE;AAED,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,GAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB/G"}

package/build/atomicJson.js

@@ -0,0 +1,55 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * atomicJson.ts — `zklicensing/internal/atomicJson`
+ *
+ * Crash-safe JSON files. A write goes to a temporary file in the same
+ * directory, is flushed to disk, and replaces the target with one rename, so
+ * a crash leaves either the old or the new file — never half of one. A read
+ * returns the fallback only when the file doesn't exist; a file that exists
+ * but doesn't parse is an error, so a damaged store is never mistaken for an
+ * empty one (and then overwritten with nothing).
+ */
+// Only a default import of fs/promises (no named imports from Node modules):
+// browser bundles that reach this file through licenseStore get Vite's empty
+// stub for it instead of a build error.
+import fs from 'fs/promises';
+export async function readJsonOr(path, fallback) {
+    let text;
+    try {
+        text = await fs.readFile(path, 'utf8');
+    }
+    catch (e) {
+        if (e?.code === 'ENOENT')
+            return fallback;
+        throw e;
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch (e) {
+        throw new Error(`${path} exists but is not valid JSON (${e?.message ?? e}); restore it from a backup — refusing to treat it as empty`);
+    }
+}
+export async function writeJsonAtomic(path, value, opts = {}) {
+    // Same directory as the target (rename is only atomic within a file system).
+    const slash = Math.max(path.lastIndexOf('/'), path.lastIndexOf('\\'));
+    const suffix = [...crypto.getRandomValues(new Uint8Array(6))].map(b => b.toString(16).padStart(2, '0')).join('');
+    const tmp = `${path.slice(0, slash + 1)}.${path.slice(slash + 1)}.${suffix}.tmp`;
+    const fh = await fs.open(tmp, 'w', opts.mode ?? 0o600);
+    try {
+        await fh.writeFile(JSON.stringify(value, null, 2), 'utf8');
+        await fh.sync();
+    }
+    finally {
+        await fh.close();
+    }
+    try {
+        await fs.rename(tmp, path);
+    }
+    catch (e) {
+        await fs.rm(tmp, { force: true });
+        throw e;
+    }
+}
+//# sourceMappingURL=atomicJson.js.map

package/build/atomicJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atomicJson.js","sourceRoot":"","sources":["../src/atomicJson.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;GASG;AAEH,6EAA6E;AAC7E,6EAA6E;AAC7E,wCAAwC;AACxC,OAAO,EAAE,MAAM,aAAa,CAAC;AAE7B,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,IAAY,EAAE,QAAW;IAC3D,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC1C,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,kCAAkC,CAAC,EAAE,OAAO,IAAI,CAAC,6DAA6D,CAAC,CAAC;IACzI,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,KAAc,EAAE,OAA0B,EAAE;IAC9F,6EAA6E;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjH,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,MAAM,MAAM,CAAC;IACjF,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC3D,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAClB,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/build/bindClient.d.ts

@@ -0,0 +1,85 @@
+/**
+ * bindClient.ts
+ *
+ * Browser-safe client for the non-custodial device-binding flow.
+ * Mirrors `buyClient.ts` in shape: the caller drives the wallet step
+ * between `proveBind` and `confirmBind`, so the SDK stays
+ * wallet-agnostic.
+ *
+ * Binding is a root-mutating tx on the same per-app in-flight slot
+ * that buy / renew / refund use — a concurrent request
+ * against the same app returns 409 `ProveQueueBusyError`, which the
+ * caller must catch and retry (see the retry loop in
+ * examples/src/bind.ts).
+ *
+ * The signature scheme is Pallas Schnorr and is re-verified INSIDE
+ * the on-chain circuit via `Signature.verify()` — a compromised
+ * backend cannot forge a bind because it can't produce a signature
+ * that satisfies the in-circuit check.
+ */
+import { PrivateKey } from 'o1js';
+export type ProveBindRequest = {
+    keeperUrl: string;
+    network: 'devnet' | 'mainnet';
+    zkAppAddress: string;
+    licenseHash: string;
+    ownerPrivateKey: PrivateKey;
+    deviceCommitment: string;
+    slotIndex: number;
+    buyerAddress: string;
+    nonce?: string;
+    slotState?: string;
+    expirySlot?: number;
+    fetcher?: typeof fetch;
+    signal?: AbortSignal;
+};
+export type ProveBindResponse = {
+    provenTxJson: string;
+    licenseHash: string;
+    slotIndex: number;
+};
+export type ConfirmBindRequest = {
+    keeperUrl: string;
+    zkAppAddress: string;
+    licenseHash: string;
+    txHash: string;
+    fetcher?: typeof fetch;
+    signal?: AbortSignal;
+};
+export declare function fetchBindingState(opts: {
+    keeperUrl: string;
+    network: 'devnet' | 'mainnet';
+    zkAppAddress: string;
+    licenseHash: string;
+    slotIndex: number;
+    fetcher?: typeof fetch;
+    signal?: AbortSignal;
+}): Promise<{
+    slotState: string;
+    expirySlot: number;
+}>;
+export declare function proveBind(req: ProveBindRequest): Promise<ProveBindResponse>;
+export declare function confirmBind(req: ConfirmBindRequest): Promise<{
+    ok: true;
+}>;
+export type BindStatus = {
+    status: 'confirmed' | 'pending' | 'unknown';
+    slotIndex?: number;
+    deviceCommitment?: string;
+    elapsedMs?: number;
+};
+export type PollBindStatusOptions = {
+    keeperUrl: string;
+    network: 'devnet' | 'mainnet';
+    zkAppAddress: string;
+    licenseHash: string;
+    slotIndex: number;
+    deviceCommitment: string;
+    fetcher?: typeof fetch;
+    intervalMs?: number;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+    onTick?: (status: BindStatus) => void;
+};
+export declare function pollBindStatus(opts: PollBindStatusOptions): Promise<BindStatus>;
+//# sourceMappingURL=bindClient.d.ts.map

package/build/bindClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bindClient.d.ts","sourceRoot":"","sources":["../src/bindClient.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAS,UAAU,EAAwB,MAAM,MAAM,CAAC;AAS/D,MAAM,MAAM,gBAAgB,GAAG;IAC7B,SAAS,EAAS,MAAM,CAAC;IAGzB,OAAO,EAAW,QAAQ,GAAG,SAAS,CAAC;IAGvC,YAAY,EAAM,MAAM,CAAC;IAKzB,WAAW,EAAO,MAAM,CAAC;IAIzB,eAAe,EAAG,UAAU,CAAC;IAK7B,gBAAgB,EAAE,MAAM,CAAC;IAEzB,SAAS,EAAS,MAAM,CAAC;IAEzB,YAAY,EAAM,MAAM,CAAC;IAKzB,KAAK,CAAC,EAAY,MAAM,CAAC;IAOzB,SAAS,CAAC,EAAQ,MAAM,CAAC;IACzB,UAAU,CAAC,EAAO,MAAM,CAAC;IACzB,OAAO,CAAC,EAAU,OAAO,KAAK,CAAC;IAC/B,MAAM,CAAC,EAAW,WAAW,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,SAAS,EAAK,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,SAAS,EAAK,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,MAAM,EAAQ,MAAM,CAAC;IACrB,OAAO,CAAC,EAAM,OAAO,KAAK,CAAC;IAC3B,MAAM,CAAC,EAAO,WAAW,CAAC;CAC3B,CAAC;AAmCF,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,SAAS,EAAK,MAAM,CAAC;IACrB,OAAO,EAAO,QAAQ,GAAG,SAAS,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,SAAS,EAAK,MAAM,CAAC;IACrB,OAAO,CAAC,EAAM,OAAO,KAAK,CAAC;IAC3B,MAAM,CAAC,EAAO,WAAW,CAAC;CAC3B,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBrD;AAQD,wBAAsB,SAAS,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAyCjF;AAMD,wBAAsB,WAAW,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAchF;AAED,MAAM,MAAM,UAAU,GAAG;IAKvB,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;IAC5C,SAAS,CAAC,EAAS,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAS,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,SAAS,EAAS,MAAM,CAAC;IACzB,OAAO,EAAW,QAAQ,GAAG,SAAS,CAAC;IACvC,YAAY,EAAM,MAAM,CAAC;IACzB,WAAW,EAAO,MAAM,CAAC;IACzB,SAAS,EAAS,MAAM,CAAC;IAKzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAU,OAAO,KAAK,CAAC;IAG/B,UAAU,CAAC,EAAO,MAAM,CAAC;IACzB,SAAS,CAAC,EAAQ,MAAM,CAAC;IACzB,MAAM,CAAC,EAAW,WAAW,CAAC;IAC9B,MAAM,CAAC,EAAW,CAAC,MAAM,EAAE,UAAU,KAAK,IAAI,CAAC;CAChD,CAAC;AAKF,wBAAsB,cAAc,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CA4CrF"}