zklicensing 0.1.0-beta.2 → 0.1.0-beta.4

package/build/deviceIdentity.js

@@ -0,0 +1,209 @@
+// Copyright (c) 2025-2026 zkLicensing project developers
+// SPDX-License-Identifier: BUSL-1.1
+/**
+ * deviceIdentity.ts
+ *
+ * Per-install Pallas Schnorr keypair used to identify a device to the
+ * non-custodial binding flow. `getOrCreateDeviceIdentity(storageKey)`
+ * returns a stable keypair for the caller's storage key: created on
+ * first call, loaded verbatim on every subsequent call.
+ *
+ * The `deviceCommitment` this module exposes matches the on-chain
+ * `occupied[i]` field shape written by `LicensingApp.bind()` — it's
+ * `Poseidon([pk.x, pk.isOdd.toField()])` over the device's Pallas
+ * pubkey (see `ownerPubKeyHash` in ./licenseLeaf.ts for the identical
+ * shape applied to the ownership pubkey). Callers pass the commitment
+ * to `proveBind` and to the ownership signature; the raw device pubkey
+ * itself never crosses the wire.
+ *
+ * Storage tradeoffs (documented up front — the plan's original
+ * assumption was WebCrypto extractable=false, which only applies to
+ * WebCrypto-native primitives):
+ *
+ *   Browser path — IndexedDB.
+ *     Pallas is not a WebCrypto primitive, so we cannot store the
+ *     private key as a non-extractable CryptoKey. The private key is
+ *     persisted as its Mina canonical base58 encoding. An adversary
+ *     with access to the browser profile (malware running as the user,
+ *     evil browser extension) can read it. This matches the trust
+ *     model of every other browser-persisted secret today (bearer
+ *     cookies, IndexedDB tokens); binding to a fresh device after
+ *     compromise is a keypair regen + one on-chain bind — no funds
+ *     at risk, only slot churn. Users who want stronger storage can
+ *     wipe the storageKey between sessions and re-bind on demand.
+ *
+ *   Node / Electron path — keytar (OS keychain).
+ *     `keytar` is loaded lazily and marked as an optional peer
+ *     dependency in package.json so the browser bundle isn't dragged
+ *     into installing native bindings it can't use. If keytar is
+ *     unavailable at runtime, the SDK throws with a clear message
+ *     rather than falling back to plaintext-on-disk.
+ *
+ * The keypair is Pallas-scalar-random, NOT passphrase-derived — the
+ * device identity is meant to survive a passphrase reset (the user
+ * can re-derive their ownership key from the passphrase, then unbind
+ * / rebind existing device slots without re-installing the app).
+ */
+import { PrivateKey, Poseidon } from 'o1js';
+// ── Storage key namespacing ───────────────────────────────────────
+// All device identities live under this shared prefix in whatever
+// backing store is chosen. Callers pass a per-app / per-installation
+// suffix (e.g. the app's short name) so a single browser profile can
+// hold distinct device identities for distinct vendors' apps.
+const STORAGE_PREFIX = 'zklic_device_';
+function namespaced(storageKey) {
+    return `${STORAGE_PREFIX}${storageKey}`;
+}
+/**
+ * Compute the on-chain-shaped device commitment from a Pallas pubkey.
+ * Exported so tests and downstream tooling can re-derive it without
+ * re-instantiating the whole DeviceIdentity.
+ */
+export function computeDeviceCommitment(devicePubKey) {
+    return Poseidon.hash([devicePubKey.x, devicePubKey.isOdd.toField()]).toString();
+}
+function buildIdentity(privateKey) {
+    const devicePubKey = privateKey.toPublicKey();
+    return {
+        devicePrivateKey: privateKey,
+        devicePubKey,
+        deviceCommitment: computeDeviceCommitment(devicePubKey),
+    };
+}
+// ── Environment detection ─────────────────────────────────────────
+function hasIndexedDB() {
+    return typeof globalThis !== 'undefined'
+        && typeof globalThis.indexedDB !== 'undefined';
+}
+function isNodeLike() {
+    // Node exposes `process.versions.node`; Deno/Bun don't (their
+    // process shims omit this key). Browsers have no `process` global
+    // unless something's polyfilled it, but the indexedDB branch runs
+    // first so that ordering is fine.
+    return typeof globalThis.process !== 'undefined'
+        && typeof globalThis.process?.versions?.node === 'string';
+}
+// ── IndexedDB backing store (browser) ─────────────────────────────
+// Small promisified wrapper — no third-party idb library, to keep the
+// SDK dependency surface minimal. Single key/value store; the whole
+// database is one object store with `storageKey` as the key.
+const IDB_DB_NAME = 'zklicensing';
+const IDB_STORE_NAME = 'device_identities';
+const IDB_VERSION = 1;
+function openIdb() {
+    return new Promise((resolve, reject) => {
+        const req = globalThis.indexedDB.open(IDB_DB_NAME, IDB_VERSION);
+        req.onupgradeneeded = () => {
+            const db = req.result;
+            if (!db.objectStoreNames.contains(IDB_STORE_NAME)) {
+                db.createObjectStore(IDB_STORE_NAME);
+            }
+        };
+        req.onsuccess = () => resolve(req.result);
+        req.onerror = () => reject(req.error ?? new Error('IndexedDB open failed'));
+    });
+}
+async function idbGet(key) {
+    const db = await openIdb();
+    try {
+        return await new Promise((resolve, reject) => {
+            const tx = db.transaction(IDB_STORE_NAME, 'readonly');
+            const store = tx.objectStore(IDB_STORE_NAME);
+            const req = store.get(key);
+            req.onsuccess = () => resolve(req.result ?? null);
+            req.onerror = () => reject(req.error ?? new Error('IndexedDB get failed'));
+        });
+    }
+    finally {
+        db.close();
+    }
+}
+async function idbPut(key, value) {
+    const db = await openIdb();
+    try {
+        await new Promise((resolve, reject) => {
+            const tx = db.transaction(IDB_STORE_NAME, 'readwrite');
+            const store = tx.objectStore(IDB_STORE_NAME);
+            const req = store.put(value, key);
+            req.onsuccess = () => resolve();
+            req.onerror = () => reject(req.error ?? new Error('IndexedDB put failed'));
+        });
+    }
+    finally {
+        db.close();
+    }
+}
+// ── keytar backing store (Node / Electron) ────────────────────────
+// Loaded via dynamic import so a browser bundler doesn't try to
+// resolve the native module. If keytar isn't installed we throw with
+// a message that tells the caller which optional peer dep to add,
+// rather than silently persisting to plaintext.
+async function loadKeytar() {
+    try {
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        return await Function('return import("keytar")')();
+    }
+    catch {
+        throw new Error('deviceIdentity requires the optional peer dependency `keytar` in Node/Electron. ' +
+            'Install it with `npm i keytar` alongside the zklicensing SDK.');
+    }
+}
+// keytar's shape: getPassword(service, account) / setPassword(service, account, value).
+// We use a single service name and let `storageKey` be the account, so
+// multiple apps under the same node install can coexist under distinct
+// storage keys without stomping each other.
+const KEYTAR_SERVICE = 'zklicensing-device-identity';
+async function keytarGet(key) {
+    const keytar = await loadKeytar();
+    const mod = (keytar.default ?? keytar);
+    return mod.getPassword(KEYTAR_SERVICE, key);
+}
+async function keytarPut(key, value) {
+    const keytar = await loadKeytar();
+    const mod = (keytar.default ?? keytar);
+    await mod.setPassword(KEYTAR_SERVICE, key, value);
+}
+function pickBackend() {
+    if (hasIndexedDB())
+        return { get: idbGet, put: idbPut };
+    if (isNodeLike())
+        return { get: keytarGet, put: keytarPut };
+    throw new Error('deviceIdentity: no suitable storage backend detected. ' +
+        'Expected IndexedDB in the browser or a Node/Electron runtime with `keytar` installed.');
+}
+// ── Public API ────────────────────────────────────────────────────
+/**
+ * Load an existing device keypair for `storageKey`, or create + persist
+ * a fresh one on first call. Idempotent across every subsequent call
+ * for the same key on the same install.
+ *
+ * The `storageKey` should be per-app (e.g. the vendor's app short
+ * name or its `appId`), so a single browser profile / OS user account
+ * can hold distinct device identities for distinct vendors without
+ * cross-contamination.
+ */
+export async function getOrCreateDeviceIdentity(storageKey) {
+    if (!storageKey || typeof storageKey !== 'string') {
+        throw new Error('getOrCreateDeviceIdentity: storageKey must be a non-empty string');
+    }
+    const backend = pickBackend();
+    const key = namespaced(storageKey);
+    const existing = await backend.get(key);
+    if (existing) {
+        try {
+            const privateKey = PrivateKey.fromBase58(existing);
+            return buildIdentity(privateKey);
+        }
+        catch {
+            // Corrupt persisted value — fall through and mint a fresh key,
+            // overwriting the bad blob. Losing a device identity here is
+            // recoverable: the caller re-binds the new keypair and unbinds
+            // the old slot from any other device that still has the
+            // ownership key.
+        }
+    }
+    const privateKey = PrivateKey.random();
+    await backend.put(key, privateKey.toBase58());
+    return buildIdentity(privateKey);
+}
+//# sourceMappingURL=deviceIdentity.js.map

package/build/deviceIdentity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deviceIdentity.js","sourceRoot":"","sources":["../src/deviceIdentity.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,UAAU,EAAa,QAAQ,EAAE,MAAM,MAAM,CAAC;AAEvD,qEAAqE;AAErE,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,8DAA8D;AAC9D,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC,SAAS,UAAU,CAAC,UAAkB;IACpC,OAAO,GAAG,cAAc,GAAG,UAAU,EAAE,CAAC;AAC1C,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,YAAuB;IAC7D,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAClF,CAAC;AAED,SAAS,aAAa,CAAC,UAAsB;IAC3C,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO;QACL,gBAAgB,EAAE,UAAU;QAC5B,YAAY;QACZ,gBAAgB,EAAE,uBAAuB,CAAC,YAAY,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,qEAAqE;AAErE,SAAS,YAAY;IACnB,OAAO,OAAO,UAAU,KAAK,WAAW;WACnC,OAAQ,UAAkB,CAAC,SAAS,KAAK,WAAW,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU;IACjB,8DAA8D;IAC9D,kEAAkE;IAClE,kEAAkE;IAClE,kCAAkC;IAClC,OAAO,OAAQ,UAAkB,CAAC,OAAO,KAAK,WAAW;WACpD,OAAQ,UAAkB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC;AACvE,CAAC;AAED,qEAAqE;AAErE,sEAAsE;AACtE,oEAAoE;AACpE,6DAA6D;AAC7D,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,SAAS,OAAO;IACd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAI,UAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACzE,GAAG,CAAC,eAAe,GAAG,GAAG,EAAE;YACzB,MAAM,EAAE,GAAG,GAAG,CAAC,MAAqB,CAAC;YACrC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;gBAClD,EAAE,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;YACvC,CAAC;QACH,CAAC,CAAC;QACF,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAW;IAC/B,MAAM,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1D,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3B,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAE,GAAG,CAAC,MAA6B,IAAI,IAAI,CAAC,CAAC;YAC1E,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,KAAa;IAC9C,MAAM,EAAE,GAAG,MAAM,OAAO,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAClC,GAAG,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,qEAAqE;AAErE,gEAAgE;AAChE,qEAAqE;AACrE,kEAAkE;AAClE,gDAAgD;AAChD,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,8DAA8D;QAC9D,OAAO,MAAO,QAAQ,CAAC,yBAAyB,CAAC,EAAmB,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,kFAAkF;YAClF,+DAA+D,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,uEAAuE;AACvE,uEAAuE;AACvE,4CAA4C;AAC5C,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAErD,KAAK,UAAU,SAAS,CAAC,GAAW;IAClC,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAsE,CAAC;IAC5G,OAAO,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,KAAa;IACjD,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAwE,CAAC;IAC9G,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AASD,SAAS,WAAW;IAClB,IAAI,YAAY,EAAE;QAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACxD,IAAI,UAAU,EAAE;QAAK,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC/D,MAAM,IAAI,KAAK,CACb,wDAAwD;QACxD,uFAAuF,CACxF,CAAC;AACJ,CAAC;AAED,qEAAqE;AAErE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,UAAkB;IAChE,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACnD,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;YAC/D,6DAA6D;YAC7D,+DAA+D;YAC/D,wDAAwD;YACxD,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;IACvC,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,OAAO,aAAa,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC"}

package/build/freezeClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"freezeClient.d.ts","sourceRoot":"","sources":["../src/freezeClient.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAW,MAAM,CAAC;IACxB,OAAO,EAAU,MAAM,CAAC;IACxB,IAAI,EAAa,MAAM,CAAC;IACxB,WAAW,EAAM,OAAO,CAAC;IACzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IAGxB,WAAW,EAAM,OAAO,CAAC;IAKzB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAM/B,WAAW,EAAM,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAgBF,MAAM,MAAM,sBAAsB,GAAG;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAG,OAAO,KAAK,CAAC;IACxB,MAAM,CAAC,EAAI,WAAW,CAAC;CACxB,CAAC;AAKF,wBAAsB,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,YAAY,CAAC,CAKzF;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,SAAS,EAAS,MAAM,CAAC;IAGzB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,EAAU,OAAO,KAAK,CAAC;IAC/B,MAAM,CAAC,EAAW,WAAW,CAAC;CAC/B,CAAC;AAOF,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,yBAAyB,GAAG,OAAO,CAAC,WAAW,CAAC,CAyB9F"}

package/build/freezeClient.js

@@ -1,5 +1,5 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 function baseUrl(url) {
     return url.replace(/\/+$/, '');
 }

package/build/freezeClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"freezeClient.js","sourceRoot":"","sources":["../src/freezeClient.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AA8CpC,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,aAAa;IACpB,yEAAyE;IACzE,sDAAsD;IACtD,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAQD,qEAAqE;AACrE,wEAAwE;AACxE,gDAAgD;AAChD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAA4B;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,MAAM,IAAI,CAAC,IAAI,EAAkB,CAAC;AAC3C,CAAC;AAWD,yEAAyE;AACzE,oEAAoE;AACpE,yEAAyE;AACzE,6EAA6E;AAC7E,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAA+B;IACtE,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ,IAAI,IAAI,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC;YACnC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAI,IAAI,CAAC,OAAO;YACvB,MAAM,EAAK,IAAI,CAAC,MAAM;SACvB,CAAC,CAAC;QACH,OAAO;YACL,WAAW,EAAM,MAAM,CAAC,WAAW,KAAK,IAAI;YAC5C,eAAe,EAAE,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI;YAC3F,WAAW,EAAM,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACtE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;QACvE,qEAAqE;QACrE,mBAAmB;QACnB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC"}

package/build/generationClient.d.ts

@@ -15,6 +15,7 @@ export interface GenerationInfo {
 }
 export interface FetchGenerationRequest {
     keeperUrl: string;
+    network: 'devnet' | 'mainnet';
     appId: string;
     /** Base64-encoded Ed25519 public keys pinned by the caller. Empty ⇒ verified:false. */
     pinnedPublicKeysBase64: readonly string[];

package/build/generationClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generationClient.d.ts","sourceRoot":"","sources":["../src/generationClient.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAW,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAQ,SAAS,GAAG,MAAM,CAAC;IACjC,UAAU,CAAC,EAAG,MAAM,CAAC;IACrB,UAAU,CAAC,EAAG,MAAM,CAAC;IACrB,SAAS,CAAC,EAAI,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,sGAAsG;IACtG,OAAO,EAAM,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,eAAe,EAAE,CAAC;IAC/B,qEAAqE;IACrE,QAAQ,EAAK,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAG,QAAQ,GAAG,SAAS,CAAC;IAC/B,KAAK,EAAK,MAAM,CAAC;IACjB,uFAAuF;IACvF,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,MAAM,CAAC,EAAG,WAAW,CAAC;CACvB;AAED,MAAM,WAAW,+BAA+B;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,YAAY,EAAE,MAAM,CAAC;IACrB,uFAAuF;IACvF,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,MAAM,CAAC,EAAG,WAAW,CAAC;CACvB;AA6CD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,sBAAsB,GAAG,OAAO,CAAC,cAAc,CAAC,CAc9F;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,+BAA+B,GACnC,OAAO,CAAC,cAAc,CAAC,CAmBzB"}

package/build/generationClient.js

@@ -1,5 +1,5 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 /**
  * generationClient.ts
  *
@@ -61,7 +61,7 @@ async function verifyAndProject(parsed, pinnedPublicKeysBase64) {
  */
 export async function fetchGenerationInfo(req) {
     const fetcher = req.fetcher ?? fetch;
-    const resp = await fetcher(`${baseUrl(req.keeperUrl)}/apps/${encodeURIComponent(req.appId)}`, {
+    const resp = await fetcher(`${baseUrl(req.keeperUrl)}/apps/${encodeURIComponent(req.appId)}?network=${req.network}`, {
         method: 'GET',
         signal: req.signal,
     });

package/build/generationClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generationClient.js","sourceRoot":"","sources":["../src/generationClient.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAuC9D,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAUD,SAAS,mBAAmB,CAAC,IAA6B;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,OAAO;QACL,OAAO,EAAM,OAAO,IAAI,CAAC,OAAO,KAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAG,CAAC,CAAC,IAAI;QACvE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAA4B,CAAC,CAAC,CAAC,EAAE;QACvE,SAAS,EAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;QACvE,QAAQ,EAAK,OAAO,IAAI,CAAC,QAAQ,KAAM,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAE,CAAC,CAAC,IAAI;QACvE,KAAK,EAAQ,OAAO,IAAI,CAAC,KAAK,KAAS,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAK,CAAC,CAAC,IAAI;KACxE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,MAA4B,EAC5B,sBAAyC;IAEzC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACpE,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;IACD,iEAAiE;IACjE,6BAA6B;IAC7B,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAC7F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,uEAAuE;QACvE,6EAA6E;QAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAA2B;IACnE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,EAAE;QACnH,MAAM,EAAE,KAAK;QACb,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;IAAC,CAAC;IAC5D,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAAC,CAAC;IAErE,OAAO,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,sBAAsB,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,GAAoC;IAEpC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CACxB,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,oBAAoB,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,EACnF,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CACtC,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAA6B,CAAC;IAAC,CAAC;IAC5D,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAAC,CAAC;IAErE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAChG,IAAI,CAAC,SAAS,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/build/index.d.ts

@@ -1,60 +1,39 @@
 /**
  * verifyLicense — client SDK.
  *
- * Calls the keeper's GET /verify until the on-chain refund window for the
- * license has closed; from that point on returns from a local anchor and
- * never touches the network again. The refund-window decision is server-
- * side: the keeper returns `refundWindowClosed: boolean` on its /verify
- * response, computed from its own record of `purchaseSlot + REFUND_WINDOW_N`
- * against the on-chain `currentSlot`. The SDK gates anchor writes on that
- * boolean and never trusts a `purchaseSlot` supplied by the local proof
- * file, so a user who forges their proof metadata cannot force the offline
- * branch prematurely.
+ * Calls the licensing service's GET /verify until the on-chain refund
+ * window for the license has closed; from that point on returns from a
+ * local anchor and never touches the network again. The refund-window
+ * decision is server-side: the service returns `refundWindowClosed:
+ * boolean` on its /verify response, computed from its own record of
+ * `purchaseSlot + REFUND_WINDOW_N` against the on-chain `currentSlot`.
+ * The SDK gates anchor writes on that boolean and never trusts a
+ * `purchaseSlot` supplied by the local proof file, so a user who forges
+ * their proof metadata cannot force the offline branch prematurely.
  *
  * Anchor purity: every field persisted in the Anchor derives from the
- * keeper's /verify response — `anchoredSlot`, `expirySlot`, `ownership`.
- * The only client-supplied input to the offline branch is
- * `proof.expirySlot`, used solely as the loadAnchor binding key. A
- * tampered proof file therefore never gets a wrong answer; it gets no
- * offline branch at all and falls through to the keeper on every call.
+ * service's /verify response — `anchoredSlot`, `expirySlot`. The only
+ * client-supplied input to the offline branch is `proof.expirySlot`,
+ * used solely as the loadAnchor binding key. A tampered proof file
+ * therefore never gets a wrong answer; it gets no offline branch at all
+ * and falls through to the licensing service on every call.
  */
 import { REFUND_WINDOW_N, GRACE_PERIOD_N } from './contractInterface.js';
 declare const MS_PER_SLOT = 90000;
+export declare const DEFAULT_VERIFIER_URL = "https://zklicensing.com/api/verify";
 export interface Storage {
     getItem(key: string): string | null;
     setItem(key: string, value: string): void;
 }
-export interface ActivationRecord {
-    token: string;
-    expiresAt: number;
-    secretHash?: string;
-}
-export declare function loadActivation(storage: Storage, zkAppAddress: string, licenseHash: string, nowMs?: number): ActivationRecord | null;
-export declare function saveActivation(storage: Storage, zkAppAddress: string, licenseHash: string, rec: ActivationRecord): void;
 export interface ProofInput {
     licenseHash: string;
     zkAppAddress: string;
     expirySlot: number;
-    verifierUrl?: string;
 }
-/**
- * Callback that proves an OwnershipChallenge using a stored secretHash.
- * Callers wire this up with their own o1js + LicenseProof imports so the SDK
- * stays dependency-free for the verify-only path. Return value is the
- * `proof.toJSON()` payload the verifier's POST /respond expects.
- */
-export type TokenProver = (input: {
-    licenseHash: string;
-    nonce: string;
-    secretHash: string;
-}) => Promise<unknown>;
 export interface VerifyOptions {
-    verifierUrl?: string;
     storage?: Storage | null;
     fetcher?: typeof fetch;
     now?: () => number;
-    prover?: TokenProver;
-    secretHash?: string;
 }
 export interface VerifyResult {
     valid: boolean;
@@ -65,8 +44,19 @@ export interface VerifyResult {
     remainingDays: number;
     reason: string | null;
     source: 'offline' | 'chain';
-    ownership: 'verified' | 'unverified';
 }
 export declare function verifyLicense(proof: ProofInput, options?: VerifyOptions): Promise<VerifyResult>;
 export { REFUND_WINDOW_N, GRACE_PERIOD_N, MS_PER_SLOT };
+export { proveBind, confirmBind } from './bindClient.js';
+export type { ProveBindRequest, ProveBindResponse, ConfirmBindRequest, } from './bindClient.js';
+export { proveUnbind, confirmUnbind } from './unbindClient.js';
+export type { ProveUnbindRequest, ProveUnbindResponse, ConfirmUnbindRequest, } from './unbindClient.js';
+export { getOrCreateDeviceIdentity, computeDeviceCommitment, } from './deviceIdentity.js';
+export type { DeviceIdentity } from './deviceIdentity.js';
+export { verifyOffline, deviceCommitmentFromFields } from './verifyOffline.js';
+export type { VerifyOfflineInput, VerifyOfflineResult, DeviceSlotSnapshot, } from './verifyOffline.js';
+export { fetchOnChainLicensesRoot, DEFAULT_MINA_GRAPHQL_URLS } from './onChainRoot.js';
+export type { FetchOnChainLicensesRootInput, NetworkName } from './onChainRoot.js';
+export { seatNameFor, SEAT_NAME_COMBINATIONS } from './seatName.js';
+export type { SeatNameInput } from './seatName.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,eAAe,EACf,cAAc,EAGf,MAAM,wBAAwB,CAAC;AAEhC,QAAA,MAAM,WAAW,QAAgB,CAAC;AAOlC,eAAO,MAAM,oBAAoB,uCAAuC,CAAC;AAezE,MAAM,WAAW,OAAO;IACtB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IAInB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAIzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;IAIvB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;CAC7B;AAgFD,wBAAsB,aAAa,CACjC,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,YAAY,CAAC,CAoGvB;AAID,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;AAQxD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACzD,YAAY,EACV,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC/D,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAO1D,OAAO,EAAE,aAAa,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAC/E,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,EAAE,wBAAwB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AACvF,YAAY,EAAE,6BAA6B,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAOnF,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}