zklicensing 0.1.0-beta.2 → 0.1.0-beta.4

package/build/licenseRecord.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseRecord.d.ts","sourceRoot":"","sources":["../src/licenseRecord.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AAQH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,WAAW,EAAI,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IACtB,WAAW,EAAI,MAAM,CAAC;IACtB,UAAU,EAAK,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,YAAY,EAAI,MAAM,CAAC;IACvB,WAAW,EAAK,MAAM,CAAC;IACvB,UAAU,EAAM,MAAM,CAAC;IACvB,YAAY,EAAI,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAU,MAAM,CAAC;IACvB,SAAS,EAAO,MAAM,CAAC;IAMvB,SAAS,CAAC,EAAQ,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAI3B,OAAO,CAAC,EAAE,KAAK,CAAC;QACd,SAAS,EAAS,MAAM,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;QACzB,WAAW,EAAO,MAAM,CAAC;QACzB,WAAW,EAAO,MAAM,CAAC;KAC1B,CAAC,CAAC;IACH,YAAY,CAAC,EAAG,MAAM,CAAC;IACvB,YAAY,CAAC,EAAG,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAO,MAAM,CAAC;IACvB,OAAO,CAAC,EAAQ,OAAO,CAAC;IACxB,YAAY,CAAC,EAAG,MAAM,CAAC;IAGvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAG3B,IAAI,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;IAGvD,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAG7B,QAAQ,CAAC,EAAE,OAAO,CAAC;IAGnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IAKrB,aAAa,CAAC,EAAE,MAAM,CAAC;IAOvB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,gBAAgB,CAAA;KAAE,CAAC,CAAC;IAKxH,YAAY,CAAC,EAAE,gBAAgB,CAAC;IAMhC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAMhC,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAIF,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC"}

package/build/licenseRecord.js

@@ -1,5 +1,5 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 // Reap pending records this many slots after prove time if no event ever lands.
 // 60 slots ≈ 90 minutes — a generous window for tx inclusion under devnet conditions.
 export const PENDING_REAP_SLOTS = 60;

package/build/licenseRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseRecord.js","sourceRoot":"","sources":["../src/licenseRecord.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAsGpC,gFAAgF;AAChF,sFAAsF;AACtF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC"}

package/build/licenseStore.d.ts

@@ -34,15 +34,30 @@ export declare function updateExpiry(zkAppAddress: string, licenseHash: string,
     };
 }): Promise<boolean>;
 export declare function recordRefund(zkAppAddress: string, licenseHash: string): Promise<boolean>;
-export declare function recordRelease(zkAppAddress: string, licenseHash: string, releaseSlot?: number): Promise<boolean>;
+export declare function recordRelease(zkAppAddress: string, licenseHash: string, releaseSlot?: number, txHash?: string): Promise<boolean>;
 export declare function confirmRecord(zkAppAddress: string, licenseHash: string): Promise<boolean>;
 export declare function applyLicenseIssued(zkAppAddress: string, licenseHash: string, fields: {
     expirySlot: number;
     purchaseSlot: number;
     purchaseAmount: string;
-    tier?: 'monthly' | 'yearly' | 'fiveYear';
+    tier?: 'monthly' | 'yearly' | 'fiveYear' | 'perpetual';
     escrowless?: boolean;
+    deviceCap?: number;
+    deviceSlotsRoot?: string;
+    deviceSlotsFilled?: number;
 }): Promise<void>;
+export declare function applyLicenseRenewed(zkAppAddress: string, licenseHash: string, fields: {
+    newExpiry: number;
+}): Promise<boolean>;
+export declare function applyDeviceBound(zkAppAddress: string, licenseHash: string, fields: {
+    slotIndex: number;
+    deviceCommitment: string;
+    boundAtSlot: number;
+}): Promise<boolean>;
+export declare function applyDeviceUnbound(zkAppAddress: string, licenseHash: string, fields: {
+    slotIndex: number;
+    freedAtSlot: number;
+}): Promise<boolean>;
 export declare function deleteRecord(zkAppAddress: string, licenseHash: string): Promise<boolean>;
 export declare function getStalePendingRecords(currentSlot: number, maxAgeSlots?: number): Promise<LicenseRecord[]>;
 export declare function getReleasableRecords(currentSlot: number): Promise<LicenseRecord[]>;

package/build/licenseStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseStore.d.ts","sourceRoot":"","sources":["../src/licenseStore.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAe,SAAS,EAAE,gBAAgB,EAAuC,MAAM,MAAM,CAAC;AAGrG,OAAO,EAA6C,KAAK,aAAa,IAAI,cAAc,EAAE,KAAK,aAAa,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAM3J,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC;AAC3C,MAAM,MAAM,aAAa,GAAG,cAAc,CAAC;AAC3C,eAAO,MAAM,kBAAkB,KAAsB,CAAC;AAEtD,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC,CAiB5D;AAkCD,wBAAgB,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,CAQlF;AAKD,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,MAAM,GAAG,SAAS,CAexF;AAGD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG;IAC3D,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAKA;AAGD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,OAAO,EAAE,OAAO,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,GAAG,gBAAgB,CAKnB;AAGD,wBAAsB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,UAAU,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CACjD,CAAC,CAWD;AAGD,wBAAsB,UAAU,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAGzG;AAID,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,EAAE,WAAW,EAAE,MAAM,GAAG,aAAa,CAK9F;AAGD,wBAAsB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAuBxE;AAMD,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAO,GACnH,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAGD,wBAAsB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAkB9F;AAKD,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,EACpB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CAWlB;AAGD,wBAAsB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAW/F;AASD,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;IACN,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,WAAW,CAAC;IAGvD,UAAU,CAAC,EAAE,OAAO,CAAC;IASrB,SAAS,CAAC,EAAU,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAI,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B,GACA,OAAO,CAAC,IAAI,CAAC,CAgEf;AAaD,wBAAsB,mBAAmB,CACvC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GAC5B,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAkCD,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAG,MAAM,EACpB,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC3E,OAAO,CAAC,OAAO,CAAC,CAoBlB;AAQD,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAG,MAAM,EACpB,MAAM,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GACjD,OAAO,CAAC,OAAO,CAAC,CAclB;AAGD,wBAAsB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAS9F;AAID,wBAAsB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,SAAqB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAK5H;AAID,wBAAsB,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAUxF"}

package/build/licenseStore.js

@@ -1,5 +1,5 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 /**
  * licenseStore.ts
  *
@@ -13,11 +13,11 @@
  * Used by:
  *   - interact.ts / buyLicense.ts (CLI) — reads/writes directly
  *   - keeperService.ts              — exposes the same logic over HTTP
- *   - proofServer.ts                — reads expirySlot for a given licenseHash
  */
 import fs from 'fs/promises';
 import { Bool, Field, MerkleMap, MerkleMapWitness, Poseidon, PublicKey, UInt32, UInt64 } from 'o1js';
 import { GRACE_PERIOD_N, REFUND_WINDOW_N } from './contractInterface.js';
+import { computeDeviceSlotsRoot, DEVICE_SLOT_CAP_N, leafFromRecord, leafHash } from './licenseLeaf.js';
 import { PENDING_REAP_SLOTS as _PENDING_REAP_SLOTS } from './licenseRecord.js';
 export const PENDING_REAP_SLOTS = _PENDING_REAP_SLOTS;
 export function licenseStorePath() {
@@ -64,12 +64,19 @@ function recordsForApp(records, zkAppAddress) {
     return records.filter(r => r.zkAppAddress === zkAppAddress);
 }
 // Rebuild the license MerkleMap for a single zkApp. Only inserts entries
-// with expirySlot > 0.
+// with expirySlot > 0. The value stored at each key is `leaf.hash()` — the
+// Poseidon commitment over (licenseHash, expirySlot, cap, deviceSlotsRoot,
+// deviceSlotsFilled) — matching what LicensingApp writes. Records that
+// predate device binding rebuild to a leaf with empty slots (see
+// leafFromRecord for the exact defaults); on those records the rebuilt
+// root matches what the old contract wrote, but any mutation call will
+// fail the in-circuit hash check until the missing fields are backfilled
+// from chain events.
 export function buildMap(records, zkAppAddress) {
     const map = new MerkleMap();
     for (const r of recordsForApp(records, zkAppAddress)) {
         if (r.expirySlot !== 0) {
-            map.set(Field(r.licenseHash), Field(r.expirySlot));
+            map.set(Field(r.licenseHash), leafHash(leafFromRecord(r)));
         }
     }
     return map;
@@ -138,6 +145,15 @@ export async function upsertLicense(record) {
     if (!record.zkAppAddress) {
         throw new Error('upsertLicense: record.zkAppAddress is required');
     }
+    // Populate the empty-slot mirror at insert time when the license is capped.
+    // Without this, /confirm/buy writes deviceCap:N but leaves deviceSlotsRoot
+    // and deviceSlotsFilled undefined until the first bind — leafFromRecord's
+    // fallbacks paper over it for hash reconstruction, but every consumer that
+    // reads the mirror directly (preflight logs, /license responses, offline
+    // verify) would see undefined and either misreport or need its own fallback.
+    if ((record.deviceCap ?? 0) > 0 && (record.deviceSlotsRoot === undefined || record.deviceSlotsFilled === undefined)) {
+        refreshSlotMirror(record);
+    }
     return withWriteLock(async () => {
         const records = await readRecords();
         const idx = records.findIndex(r => r.zkAppAddress === record.zkAppAddress && r.licenseHash === record.licenseHash);
@@ -187,6 +203,12 @@ export async function recordRefund(zkAppAddress, licenseHash) {
         record.purchaseSlot = 0;
         record.purchaseAmount = '0';
         record.refunded = true;
+        // Same pending-clear the buy/renew apply* siblings do — /confirm/refund
+        // wrote pending:true optimistically; the on-chain event landing is what
+        // authorizes clearing it. Without this the SDK poller (which requires
+        // pending===false && status==='refunded') hangs forever.
+        delete record.pending;
+        delete record.provedAtSlot;
         await writeRecords(records);
         return true;
     });
@@ -194,7 +216,7 @@ export async function recordRefund(zkAppAddress, licenseHash) {
 // Mark escrow as released. Preserves purchaseAmount/purchaseSlot so stats can
 // compute released revenue. The `released` flag is the truth signal —
 // buildEscrowMap and getReleasableRecords filter on it directly.
-export async function recordRelease(zkAppAddress, licenseHash, releaseSlot) {
+export async function recordRelease(zkAppAddress, licenseHash, releaseSlot, txHash) {
     return withWriteLock(async () => {
         const records = await readRecords();
         const record = records.find(r => r.zkAppAddress === zkAppAddress && r.licenseHash === licenseHash);
@@ -203,6 +225,8 @@ export async function recordRelease(zkAppAddress, licenseHash, releaseSlot) {
         record.released = true;
         if (releaseSlot !== undefined)
             record.releaseSlot = releaseSlot;
+        if (txHash !== undefined)
+            record.releaseTxHash = txHash;
         await writeRecords(records);
         return true;
     });
@@ -252,9 +276,23 @@ export async function applyLicenseIssued(zkAppAddress, licenseHash, fields) {
                 record.escrowless = true;
                 dirty = true;
             }
+            // Backfill leaf fields if the record was created before the event
+            // carried them, or if a prior partial rehydrate is still missing them.
+            if (fields.deviceCap !== undefined && record.deviceCap === undefined) {
+                record.deviceCap = fields.deviceCap;
+                dirty = true;
+            }
+            if (fields.deviceSlotsRoot !== undefined && record.deviceSlotsRoot === undefined) {
+                record.deviceSlotsRoot = fields.deviceSlotsRoot;
+                dirty = true;
+            }
+            if (fields.deviceSlotsFilled !== undefined && record.deviceSlotsFilled === undefined) {
+                record.deviceSlotsFilled = fields.deviceSlotsFilled;
+                dirty = true;
+            }
         }
         else {
-            records.push({
+            const inserted = {
                 zkAppAddress,
                 licenseHash,
                 expirySlot: fields.expirySlot,
@@ -265,13 +303,135 @@ export async function applyLicenseIssued(zkAppAddress, licenseHash, fields) {
                 initialExpirySlot: fields.expirySlot,
                 ...(fields.tier ? { tier: fields.tier } : {}),
                 ...(fields.escrowless === true ? { escrowless: true } : {}),
-            });
+                ...(fields.deviceCap !== undefined ? { deviceCap: fields.deviceCap } : {}),
+                ...(fields.deviceSlotsRoot !== undefined ? { deviceSlotsRoot: fields.deviceSlotsRoot } : {}),
+                ...(fields.deviceSlotsFilled !== undefined ? { deviceSlotsFilled: fields.deviceSlotsFilled } : {}),
+            };
+            // Same rationale as upsertLicense: populate the empty-slot mirror on
+            // first insert so the record is immediately queryable without relying
+            // on leafFromRecord's undefined fallbacks.
+            if ((inserted.deviceCap ?? 0) > 0 && (inserted.deviceSlotsRoot === undefined || inserted.deviceSlotsFilled === undefined)) {
+                refreshSlotMirror(inserted);
+            }
+            records.push(inserted);
             dirty = true;
         }
         if (dirty)
             await writeRecords(records);
     });
 }
+// Apply a licenseRenewed event atomically: clear any pending /confirm/renew
+// write, align expirySlot with the event, and flip renewedAtLeastOnce.
+// Symmetric to applyLicenseIssued — the archive-events path is what closes
+// out a renew that the bestChain sweep missed (tx landed after the sweep's
+// BESTCHAIN_DEPTH window rolled past), and without a pending-clear step here
+// the flag on a landed record could be stuck forever.
+//
+// Does NOT append to renewals[] — that log is populated at /confirm/renew
+// time from the intent (which carries amount + txHash); the archive event
+// carries only newExpiry, so replaying it must not overwrite the richer
+// confirm-time entry.
+export async function applyLicenseRenewed(zkAppAddress, licenseHash, fields) {
+    return withWriteLock(async () => {
+        const records = await readRecords();
+        const record = records.find(r => r.zkAppAddress === zkAppAddress && r.licenseHash === licenseHash);
+        if (!record)
+            return false;
+        let dirty = false;
+        if (record.pending) {
+            delete record.pending;
+            delete record.provedAtSlot;
+            dirty = true;
+        }
+        if (record.expirySlot !== fields.newExpiry) {
+            record.expirySlot = fields.newExpiry;
+            dirty = true;
+        }
+        if (!record.renewedAtLeastOnce) {
+            record.renewedAtLeastOnce = true;
+            dirty = true;
+        }
+        if (dirty)
+            await writeRecords(records);
+        return true;
+    });
+}
+// Recompute deviceSlotsRoot + deviceSlotsFilled from the record's mirror after
+// a bind/unbind mutation. `leafFromRecord` uses those two persisted fields when
+// building the on-chain leaf hash; if they drift from the on-chain state the
+// next mutation call fails the in-circuit leaf-hash assert. Mirror the exact
+// packing the circuit uses (packSlotTimes: freedAt in low 32 bits, boundAt in
+// high 32) so the fold matches the on-chain deviceSlotsRoot bit-for-bit.
+function refreshSlotMirror(record) {
+    const devices = record.devices ?? [];
+    const occupied = [];
+    const freedAt = [];
+    for (let i = 0; i < DEVICE_SLOT_CAP_N; i++) {
+        const entry = devices.find(d => d.slotIndex === i);
+        const occ = entry?.deviceCommitment ?? '0';
+        occupied.push(Field(occ));
+        const boundAt = BigInt(entry?.boundAtSlot ?? 0);
+        const freed = BigInt(entry?.freedAtSlot ?? 0);
+        // packSlotTimes(boundAt, freedAt) in licenseLeaf.ts: freedAt low 32, boundAt high 32.
+        const packed = freed + (boundAt << 32n);
+        freedAt.push(Field(packed));
+    }
+    record.deviceSlotsRoot = computeDeviceSlotsRoot(occupied, freedAt).toString();
+    record.deviceSlotsFilled = devices.filter(d => d.deviceCommitment !== '0').length;
+}
+// Apply a deviceBound event atomically: mirrors the on-chain slot mutation
+// into the record.devices[] array and recomputes deviceSlotsRoot / filled so
+// leafFromRecord reconstructs the exact leaf hash the chain committed.
+//
+// `boundAtSlot` MUST be the circuit's proof-time `globalSlotSinceGenesis` (the
+// value emitted in `DeviceBoundEvent.boundAtSlot`). The block slot when the tx
+// landed is NOT interchangeable: TOLERANCE_WINDOW allows them to differ, and
+// any drift flips the packed `freedAt` field → wrong leaf → root divergence.
+export async function applyDeviceBound(zkAppAddress, licenseHash, fields) {
+    return withWriteLock(async () => {
+        const records = await readRecords();
+        const record = records.find(r => r.zkAppAddress === zkAppAddress && r.licenseHash === licenseHash);
+        if (!record)
+            return false;
+        const devices = (record.devices ??= []);
+        // Ensure the array is long enough — pad with empty slots.
+        while (devices.length <= fields.slotIndex) {
+            devices.push({ slotIndex: devices.length, deviceCommitment: '0', boundAtSlot: 0, freedAtSlot: 0 });
+        }
+        devices[fields.slotIndex] = {
+            slotIndex: fields.slotIndex,
+            deviceCommitment: fields.deviceCommitment,
+            boundAtSlot: fields.boundAtSlot,
+            freedAtSlot: 0, // pristine → fresh bind resets freedAt
+        };
+        refreshSlotMirror(record);
+        await writeRecords(records);
+        return true;
+    });
+}
+// Apply a deviceUnbound event atomically. Preserves boundAtSlot for audit,
+// stamps freedAtSlot for the cooldown timer the circuit's next bind enforces.
+//
+// `freedAtSlot` MUST be the circuit's proof-time `globalSlotSinceGenesis` (the
+// value emitted in `DeviceUnboundEvent.freedAtSlot`). Same reason as
+// `applyDeviceBound.boundAtSlot`.
+export async function applyDeviceUnbound(zkAppAddress, licenseHash, fields) {
+    return withWriteLock(async () => {
+        const records = await readRecords();
+        const record = records.find(r => r.zkAppAddress === zkAppAddress && r.licenseHash === licenseHash);
+        if (!record || !record.devices)
+            return false;
+        const slot = record.devices.find(d => d.slotIndex === fields.slotIndex);
+        if (!slot)
+            return false;
+        slot.deviceCommitment = '0';
+        slot.freedAtSlot = fields.freedAtSlot;
+        // boundAtSlot stays as the last bind time — historical / audit.
+        refreshSlotMirror(record);
+        await writeRecords(records);
+        return true;
+    });
+}
 // Delete a record entirely (used to reap stale pending entries the buyer never submitted).
 export async function deleteRecord(zkAppAddress, licenseHash) {
     return withWriteLock(async () => {

package/build/licenseStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"licenseStore.js","sourceRoot":"","sources":["../src/licenseStore.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,aAAa,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,EAAE,kBAAkB,IAAI,mBAAmB,EAA8E,MAAM,oBAAoB,CAAC;AAQ3J,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAEtD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,eAAe,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,GAAsB,CAAC;IACvC,wEAAwE;IACxE,yEAAyE;IACzE,sDAAsD;IACtD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACtG,IAAI,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,0BAA0B,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,2DAA2D,CAAC,CAAC;IACtI,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAwB;IAClD,MAAM,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,yEAAyE;AACzE,gFAAgF;AAChF,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,gEAAgE;AAChE,IAAI,UAAU,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;AAClD,SAAS,aAAa,CAAI,EAAoB;IAC5C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACvC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,+DAA+D;AAC/D,SAAS,aAAa,CAAC,OAAwB,EAAE,YAAoB;IACnE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,yEAAyE;AACzE,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,iEAAiE;AACjE,uEAAuE;AACvE,uEAAuE;AACvE,yEAAyE;AACzE,qBAAqB;AACrB,MAAM,UAAU,QAAQ,CAAC,OAAwB,EAAE,YAAoB;IACrE,MAAM,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mDAAmD;AACnD,wEAAwE;AACxE,2EAA2E;AAC3E,MAAM,UAAU,cAAc,CAAC,OAAwB,EAAE,YAAoB;IAC3E,MAAM,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK;gBAC3C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,KAAK;gBACjC,QAAQ,CAAC,CAAC;gBACV,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE;aACzB,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,OAAyB;IAIxD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,kBAAkB,CAAC,IAGlC;IACC,OAAO,IAAI,gBAAgB,CACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,YAAoB,EAAE,WAAmB;IAMxE,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC9B,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACrC,OAAO;QACP,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,YAAoB,EAAE,WAAmB;IACxE,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,IAAI,IAAI,CAAC;AACrG,CAAC;AAED,4EAA4E;AAC5E,+DAA+D;AAC/D,MAAM,UAAU,aAAa,CAAC,MAA4B,EAAE,WAAmB;IAC7E,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,MAAM,CAAC,UAAU,GAAG,cAAc,GAAG,WAAW;QAAE,OAAO,SAAS,CAAC;IACvE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAqB;IACvD,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,6EAA6E;IAC7E,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,EAAE,CAAC;QACpH,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC,CAAC;QACnH,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QACD,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,gFAAgF;AAChF,6EAA6E;AAC7E,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,YAAoB,EACpB,WAAmB,EACnB,UAAkB,EAClB,OAAkH,EAAE;IAEpH,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;QAC/B,IAAI,IAAI,CAAC,WAAW;YAAE,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACvD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;YAC1C,uEAAuE;YACvE,sEAAsE;YACtE,+CAA+C;YAC/C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,OAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACjE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,YAAoB,EAAE,WAAmB;IAC1E,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC;QACtB,MAAM,CAAC,YAAY,GAAG,CAAC,CAAC;QACxB,MAAM,CAAC,cAAc,GAAG,GAAG,CAAC;QAC5B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,yDAAyD;QACzD,OAAO,MAAM,CAAC,OAAO,CAAC;QACtB,OAAO,MAAM,CAAC,YAAY,CAAC;QAC3B,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,sEAAsE;AACtE,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,YAAoB,EACpB,WAAmB,EACnB,WAAoB,EACpB,MAAe;IAEf,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,IAAI,WAAW,KAAK,SAAS;YAAE,MAAM,CAAC,WAAW,GAAG,WAAW,CAAC;QAChE,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC;QACxD,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,YAAoB,EAAE,WAAmB;IAC3E,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,MAAM,CAAC,OAAO,CAAC;QACtB,OAAO,MAAM,CAAC,YAAY,CAAC;QAC3B,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,+EAA+E;AAC/E,gFAAgF;AAChF,oEAAoE;AACpE,8EAA8E;AAC9E,qEAAqE;AACrE,wBAAwB;AACxB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,WAAmB,EACnB,MAmBC;IAED,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACnG,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO,MAAM,CAAC,OAAO,CAAC;gBACtB,OAAO,MAAM,CAAC,YAAY,CAAC;gBAC3B,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBAC3C,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,UAAU,CAAC;gBAC7C,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;gBAC1B,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC7D,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;gBACzB,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,kEAAkE;YAClE,uEAAuE;YACvE,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBACpC,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACjF,MAAM,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;gBAChD,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;YACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBACrF,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;gBACpD,KAAK,GAAG,IAAI,CAAC;YACf,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAkB;gBAC9B,YAAY;gBACZ,WAAW;gBACX,UAAU,EAAS,MAAM,CAAC,UAAU;gBACpC,YAAY,EAAO,MAAM,CAAC,YAAY;gBACtC,cAAc,EAAK,MAAM,CAAC,cAAc;gBACxC,MAAM,EAAa,EAAE;gBACrB,SAAS,EAAU,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC3C,iBAAiB,EAAE,MAAM,CAAC,UAAU;gBACpC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAa,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAU,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,GAAG,CAAC,MAAM,CAAC,eAAe,KAAO,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAI,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChG,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnG,CAAC;YACF,qEAAqE;YACrE,sEAAsE;YACtE,2CAA2C;YAC3C,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,iBAAiB,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC1H,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,KAAK;YAAE,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,uEAAuE;AACvE,2EAA2E;AAC3E,2EAA2E;AAC3E,6EAA6E;AAC7E,sDAAsD;AACtD,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,wEAAwE;AACxE,sBAAsB;AACtB,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,YAAoB,EACpB,WAAmB,EACnB,MAA6B;IAE7B,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,MAAM,CAAC,OAAO,CAAC;YACtB,OAAO,MAAM,CAAC,YAAY,CAAC;YAC3B,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;YACrC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC/B,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC;YACjC,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,KAAK;YAAE,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,SAAS,iBAAiB,CAAC,MAAqB;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAY,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,KAAK,EAAE,gBAAgB,IAAI,GAAG,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QAChD,MAAM,KAAK,GAAK,MAAM,CAAC,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,CAAC;QAChD,sFAAsF;QACtF,MAAM,MAAM,GAAI,KAAK,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,CAAC,eAAe,GAAK,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChF,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;AACpF,CAAC;AAED,2EAA2E;AAC3E,6EAA6E;AAC7E,uEAAuE;AACvE,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAC7E,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,YAAoB,EACpB,WAAoB,EACpB,MAA4E;IAE5E,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;QACxC,0DAA0D;QAC1D,OAAO,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG;YAC1B,SAAS,EAAS,MAAM,CAAC,SAAS;YAClC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,WAAW,EAAO,MAAM,CAAC,WAAW;YACpC,WAAW,EAAO,CAAC,EAAG,uCAAuC;SAC9D,CAAC;QACF,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,qEAAqE;AACrE,kCAAkC;AAClC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,WAAoB,EACpB,MAAkD;IAElD,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACnG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,gEAAgE;QAChE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,YAAoB,EAAE,WAAmB;IAC1E,OAAO,aAAa,CAAC,KAAK,IAAI,EAAE;QAC9B,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,IAAI,CAAC,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC;QACrG,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACvB,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mFAAmF;AACnF,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,WAAmB,EAAE,WAAW,GAAG,kBAAkB;IAChG,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,WAAW,GAAG,CAAC,CAAC,YAAY,GAAG,WAAW,CACrG,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;IACpC,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,CAAC,QAAQ;QACX,CAAC,CAAC,CAAC,QAAQ;QACX,CAAC,CAAC,YAAY,GAAG,CAAC;QAClB,CAAC,CAAC,YAAY;QACd,WAAW,GAAG,CAAC,CAAC,YAAY,GAAG,eAAe,CACjD,CAAC;AACJ,CAAC"}

package/build/manifestVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifestVerify.d.ts","sourceRoot":"","sources":["../src/manifestVerify.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;GAmBG;AASH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQnD;AA6BD;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,OAAO,EAChB,eAAe,EAAE,MAAM,EACvB,sBAAsB,EAAE,SAAS,MAAM,EAAE,GACxC,OAAO,CAAC,OAAO,CAAC,CA+BlB"}

package/build/manifestVerify.js

@@ -1,5 +1,5 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 /**
  * manifestVerify.ts
  *
@@ -21,6 +21,10 @@
  * simple and mirrored.
  */
 // Canonical JSON: sorted keys, no whitespace, arrays preserved in order.
+// Undefined values are skipped, mirroring JSON.stringify — otherwise the
+// signed bytes would contain `"key":undefined` for optional fields left
+// unset, while `res.json()` on the wire would strip them, and the signature
+// would never verify.
 // Mirror of src/manifestSign.ts:canonicalize. Divergence here silently
 // breaks verification.
 export function canonicalize(value) {
@@ -28,8 +32,9 @@ export function canonicalize(value) {
         return JSON.stringify(value);
     if (Array.isArray(value))
         return '[' + value.map(canonicalize).join(',') + ']';
-    const keys = Object.keys(value).sort();
-    return '{' + keys.map(k => JSON.stringify(k) + ':' + canonicalize(value[k])).join(',') + '}';
+    const obj = value;
+    const keys = Object.keys(obj).filter(k => obj[k] !== undefined).sort();
+    return '{' + keys.map(k => JSON.stringify(k) + ':' + canonicalize(obj[k])).join(',') + '}';
 }
 function base64ToBytes(b64) {
     // atob is present in every modern JS runtime we target (browser + Node ≥ 16).

package/build/manifestVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifestVerify.js","sourceRoot":"","sources":["../src/manifestVerify.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,4EAA4E;AAC5E,sBAAsB;AACtB,uEAAuE;AACvE,uBAAuB;AACvB,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC/E,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,OAAO,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CACxB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC/C,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACpB,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,8EAA8E;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,4DAA4D;AAC5D,0EAA0E;AAC1E,2DAA2D;AAC3D,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC;IACzC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACvE,CAAC,CAAC;AAEH,SAAS,gBAAgB,CAAC,GAAe;IACvC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAgB,EAChB,eAAuB,EACvB,sBAAyC;IAEzC,IAAI,CAAC,sBAAsB,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,MAAM,GAAI,UAAU,CAAC,MAA6B,EAAE,MAAM,CAAC;IACjE,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,MAAM,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,IAAI,cAA0B,CAAC;IAC/B,IAAI,CAAC;QAAC,cAAc,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IAAC,CAAC;IACxD,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACvB,KAAK,MAAM,MAAM,IAAI,sBAAsB,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,gBAAgB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAChC,MAAM,EACN,IAA8B,EAC9B,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;YACF,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAC5B,EAAE,IAAI,EAAE,SAAS,EAAE,EACnB,GAAG,EACH,cAAwC,EACxC,YAAsC,CACvC,CAAC;YACF,IAAI,EAAE;gBAAE,OAAO,IAAI,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,iEAAiE;YACjE,2CAA2C;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/build/migrateClient.d.ts

@@ -1,22 +1,6 @@
-/**
- * migrateClient.ts
- *
- * Browser-safe client for /prove/migrate. Assembles a single-hop cross-
- * generation proof against the current live map — the keeper walks the
- * deploymentHistory once, gathers all three witnesses (ancestor / pred /
- * live-empty), and returns a signable tx.
- *
- * Failure surfaces:
- *   - 404 "license refunded or unknown": no leaf anywhere in history for
- *     this licenseHash. Caller should not retry — it's terminal.
- *   - 409 "already migrated": leaf is present in the live map. Caller
- *     should refresh their license record and stop.
- *   - 409 "migration in flight": another caller is proving right now.
- *     `retryAfterMs` on the error tells the caller how long to wait
- *     before trying again. See `ProveMigrateError.retryAfterMs`.
- */
 export interface ProveMigrateRequest {
     keeperUrl: string;
+    network: 'devnet' | 'mainnet';
     licenseHash: string;
     appId: string;
     buyerAddress: string;
@@ -29,15 +13,16 @@ export interface ProveMigrateResponse {
     expirySlot: number;
     licenseHash: string;
     zkAppAddress: string;
+    appKey: string;
 }
 /**
- * Extends Error with the retryAfterMs hint the keeper returns on the
- * "migration in flight" 409. Callers ignore it for other 4xx surfaces.
+ * Terminal migrate failures (404 refunded/unknown, 409 already migrated).
+ * The queue-busy 409 is surfaced separately as ProveQueueBusyError so
+ * callers can share one retry helper across buy/renew/migrate.
  */
 export declare class ProveMigrateError extends Error {
     readonly status: number;
-    readonly retryAfterMs?: number;
-    constructor(message: string, status: number, retryAfterMs?: number);
+    constructor(message: string, status: number);
 }
 export declare function proveMigrate(req: ProveMigrateRequest): Promise<ProveMigrateResponse>;
 //# sourceMappingURL=migrateClient.d.ts.map

package/build/migrateClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrateClient.d.ts","sourceRoot":"","sources":["../src/migrateClient.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAK,MAAM,CAAC;IACrB,OAAO,EAAO,QAAQ,GAAG,SAAS,CAAC;IACnC,WAAW,EAAG,MAAM,CAAC;IACrB,KAAK,EAAS,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAM,OAAO,KAAK,CAAC;IAC3B,MAAM,CAAC,EAAO,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,UAAU,EAAI,MAAM,CAAC;IACrB,WAAW,EAAG,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IAGrB,MAAM,EAAQ,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAMD,wBAAsB,YAAY,CAAC,GAAG,EAAE,mBAAmB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAoB1F"}

package/build/migrateClient.js

@@ -1,17 +1,35 @@
 // Copyright (c) 2025-2026 zkLicensing project developers
-// All rights reserved.
+// SPDX-License-Identifier: BUSL-1.1
 /**
- * Extends Error with the retryAfterMs hint the keeper returns on the
- * "migration in flight" 409. Callers ignore it for other 4xx surfaces.
+ * migrateClient.ts
+ *
+ * Browser-safe client for /prove/migrate. Assembles a single-hop cross-
+ * generation proof against the current live map — the keeper walks the
+ * deploymentHistory once, gathers all three witnesses (ancestor / pred /
+ * live-empty), and returns a signable tx.
+ *
+ * Failure surfaces:
+ *   - 404 "license refunded or unknown": no leaf anywhere in history for
+ *     this licenseHash. Caller should not retry — it's terminal.
+ *   - 409 "already migrated": leaf is present in the live map. Caller
+ *     should refresh their license record and stop.
+ *   - 409 "proving queue busy": another root-mutating request (buy, renew,
+ *     migrate) is holding this app's in-flight slot. Thrown as the shared
+ *     ProveQueueBusyError so callers can wait+retry uniformly across the
+ *     three endpoints.
+ */
+import { readErrorBody, tryQueueBusyFromBody } from './proveErrors.js';
+/**
+ * Terminal migrate failures (404 refunded/unknown, 409 already migrated).
+ * The queue-busy 409 is surfaced separately as ProveQueueBusyError so
+ * callers can share one retry helper across buy/renew/migrate.
  */
 export class ProveMigrateError extends Error {
     status;
-    retryAfterMs;
-    constructor(message, status, retryAfterMs) {
+    constructor(message, status) {
         super(message);
         this.name = 'ProveMigrateError';
         this.status = status;
-        this.retryAfterMs = retryAfterMs;
     }
 }
 function baseUrl(url) {
@@ -24,23 +42,18 @@ export async function proveMigrate(req) {
         headers: { 'Content-Type': 'application/json' },
         signal: req.signal,
         body: JSON.stringify({
+            network: req.network,
             licenseHash: req.licenseHash,
             appId: req.appId,
             buyerAddress: req.buyerAddress,
         }),
     });
     if (!resp.ok) {
-        let msg = `HTTP ${resp.status}`;
-        let retryAfterMs;
-        try {
-            const body = await resp.json();
-            if (typeof body.error === 'string')
-                msg = body.error;
-            if (typeof body.retryAfterMs === 'number')
-                retryAfterMs = body.retryAfterMs;
-        }
-        catch { /* body wasn't JSON */ }
-        throw new ProveMigrateError(msg, resp.status, retryAfterMs);
+        const parsed = await readErrorBody(resp);
+        const queueBusy = tryQueueBusyFromBody(parsed);
+        if (queueBusy)
+            throw queueBusy;
+        throw new ProveMigrateError(parsed.message, resp.status);
     }
     return await resp.json();
 }

package/build/migrateClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrateClient.js","sourceRoot":"","sources":["../src/migrateClient.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD,oCAAoC;AAEpC;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAuBvE;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,MAAM,CAAS;IACxB,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAwB;IACzD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE;QACpE,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACnB,OAAO,EAAO,GAAG,CAAC,OAAO;YACzB,WAAW,EAAG,GAAG,CAAC,WAAW;YAC7B,KAAK,EAAS,GAAG,CAAC,KAAK;YACvB,YAAY,EAAE,GAAG,CAAC,YAAY;SAC/B,CAAC;KACH,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,SAAS;YAAE,MAAM,SAAS,CAAC;QAC/B,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,IAAI,CAAC,IAAI,EAA0B,CAAC;AACnD,CAAC"}

package/build/onChainRoot.d.ts

@@ -0,0 +1,67 @@
+/**
+ * onChainRoot.ts
+ *
+ * Non-custodial trust anchor for `verifyOffline`. Reads the live
+ * `licensesRoot` (`zkapp.appState[0]`) directly from Mina — no
+ * licensing-service round-trip, no trust assumption about whoever
+ * served the witness / license record.
+ *
+ * Pair it with `verifyOffline` to close the trust loop:
+ *
+ *   ```ts
+ *   import { fetchOnChainLicensesRoot } from 'zklicensing/on-chain-root';
+ *   import { verifyOffline }            from 'zklicensing/verify-offline';
+ *
+ *   // 1. Ask the licensing service for a witness + slot snapshot.
+ *   const snap = await fetch(`${service}/witness?licenseHash=${h}&zkAppAddress=${a}`).then(r => r.json());
+ *
+ *   // 2. Fetch the on-chain root INDEPENDENTLY, from Mina.
+ *   const onChainRoot = await fetchOnChainLicensesRoot({ zkAppAddress: a, network: 'devnet' });
+ *
+ *   // 3. Cross-check — if they disagree, the service is stale/wrong; bail.
+ *   if (snap.root !== onChainRoot) throw new Error('service root disagrees with chain');
+ *
+ *   // 4. Fold-verify the snapshot against the on-chain root.
+ *   const res = verifyOffline({ licensesRoot: onChainRoot, ...snap });
+ *   ```
+ *
+ * o1js is a peer dep — this file imports it dynamically so callers
+ * that only want `verifyOffline` (pure fold, no chain read) don't
+ * have to install o1js.
+ *
+ * Global-state caveat: o1js `Mina.setActiveInstance` mutates a module-
+ * scoped singleton. Long-lived hosts that talk to multiple Mina
+ * networks in the same process should treat this helper as a
+ * one-shot and re-set their own preferred network after use, or wrap
+ * it in a mutex.
+ */
+export declare const DEFAULT_MINA_GRAPHQL_URLS: {
+    readonly mainnet: "https://api.minascan.io/node/mainnet/v1/graphql";
+    readonly devnet: "https://api.minascan.io/node/devnet/v1/graphql";
+};
+export type NetworkName = 'mainnet' | 'devnet';
+export type FetchOnChainLicensesRootInput = {
+    /** B62q… address of the deployed LicensingApp for this app. */
+    zkAppAddress: string;
+} & ({
+    network: NetworkName;
+    graphqlUrl?: string;
+} | {
+    graphqlUrl: string;
+    network?: NetworkName;
+});
+/**
+ * Read the live `licensesRoot` from the deployed LicensingApp's
+ * on-chain state. Returns the field value as a decimal string,
+ * matching the shape `verifyOffline` and the licensing service both
+ * consume.
+ *
+ * Throws on any of:
+ *   - `o1js` not installed (peer dep missing);
+ *   - `fetchAccount` returned an error (network down, wrong endpoint,
+ *     account doesn't exist on this chain);
+ *   - account exists but has no zkApp state (not a zkApp address, or
+ *     contract deployed but `initialize()` never ran).
+ */
+export declare function fetchOnChainLicensesRoot(input: FetchOnChainLicensesRootInput): Promise<string>;
+//# sourceMappingURL=onChainRoot.d.ts.map

package/build/onChainRoot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onChainRoot.d.ts","sourceRoot":"","sources":["../src/onChainRoot.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAKH,eAAO,MAAM,yBAAyB;;;CAG5B,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE/C,MAAM,MAAM,6BAA6B,GAAG;IAC1C,+DAA+D;IAC/D,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,CACA;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,WAAW,CAAA;CAAE,CAChD,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,MAAM,CAAC,CAgCjB"}