Update package

.eslintrc.cjs

@@ -0,0 +1,30 @@
+module.exports = {
+  root: true,
+  extends: ["eslint:recommended", "plugin:@typescript-eslint/recommended", "prettier"],
+  plugins: ["@typescript-eslint", "prettier"],
+  parser: "@typescript-eslint/parser",
+  parserOptions: {
+    project: true,
+  },
+  env: {
+    browser: true,
+    node: true,
+  },
+  rules: {
+    "prettier/prettier": "error",
+    "semi": ["error", "never"],
+    "no-unused-vars": "off",
+    "@typescript-eslint/no-unused-vars": [
+      "warn",
+      {
+        args: "all",
+        argsIgnorePattern: "^_",
+        caughtErrors: "all",
+        caughtErrorsIgnorePattern: "^_",
+        destructuredArrayIgnorePattern: "^_",
+        varsIgnorePattern: "^_",
+        ignoreRestSiblings: true,
+      },
+    ],
+  },
+}

.github/workflows/check-pr.yml

@@ -24,7 +24,7 @@ jobs:
             build
           requireScope: false
           scopes: |
-            (registry|explorer|registry-sdk|sdk|utils|workspace)(,(registry|explorer|registry-sdk|sdk|utils|workspace))*
+            (contracts|registry|explorer|registry-sdk|sdk|utils|workspace)(,(contracts|registry|explorer|registry-sdk|sdk|utils|workspace))*
           subjectPattern: ^[A-Z].+$
           subjectPatternError: |
             The subject must start with an uppercase letter.
@@ -38,7 +38,7 @@ jobs:
         with:
           requireScope: true
           scopes: |
-            (registry|explorer|registry-sdk|sdk|utils|workspace)(,(registry|explorer|registry-sdk|sdk|utils|workspace))*
+            (contracts|registry|explorer|registry-sdk|sdk|utils|workspace)(,(contracts|registry|explorer|registry-sdk|sdk|utils|workspace))*
           subjectPattern: ^[A-Z].+$
           subjectPatternError: |
             The subject must start with an uppercase letter.

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
       - name: Install Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.3.1
+          bun-version: 1.3.8
 
       - name: Cache Bun dependencies
         uses: actions/cache@v4
@@ -59,6 +59,9 @@ jobs:
       - name: Test
         run: bun run test
 
+      - name: Validate packages
+        run: bun run validate-packages
+
   dependency-sync-check:
     name: Dependency Sync Check
     runs-on: ubuntu-latest
@@ -69,7 +72,7 @@ jobs:
       - name: Install Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.3.1
+          bun-version: 1.3.8
 
       - name: Cache Bun dependencies
         uses: actions/cache@v4

.github/workflows/publish-registry-sdk.yml

@@ -10,14 +10,19 @@ jobs:
   publish:
     name: Publish Registry SDK
     runs-on: ubuntu-latest
+    environment: npm-publish
+    permissions:
+      id-token: write  # Required for OIDC
+      contents: read
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Install Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.3.1
+          bun-version: 1.3.8
 
       - name: Cache Bun dependencies
         uses: actions/cache@v4
@@ -34,22 +39,18 @@ jobs:
         run: bash scripts/sync-workspace-deps.sh check
 
       - name: Install system dependencies
-        if: github.ref == 'refs/heads/main'
         run: sudo apt-get install -y lsof jq zsh
 
       - name: Install Foundry
-        if: github.ref == 'refs/heads/main'
         uses: foundry-rs/foundry-toolchain@v1
         with:
           version: v1.4.4
 
       - name: Install Foundry dependencies
-        if: github.ref == 'refs/heads/main'
         run: forge install
         working-directory: packages/registry-contracts
 
       - name: Setup Turbo cache
-        if: github.ref == 'refs/heads/main'
         uses: actions/cache@v4
         with:
           path: .turbo
@@ -58,27 +59,31 @@ jobs:
             ${{ runner.os }}-turbo-
 
       - name: Build package
-        if: github.ref == 'refs/heads/main'
         run: bun run build --filter=@zkpassport/registry
 
+      - name: Setup Node.js for npm publish
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Check if version is published to npm
-        if: github.ref == 'refs/heads/main'
         id: version_check
         run: |
-          VERSION=$(bun -p "require('./packages/registry-sdk/package.json').version")
-          if ! bun pm view @zkpassport/registry@$VERSION version 2>/dev/null; then
+          VERSION=$(node -p "require('./packages/registry-sdk/package.json').version")
+          if ! npm view @zkpassport/registry@$VERSION version 2>/dev/null; then
             echo "publish=true" >> $GITHUB_OUTPUT
             echo "version=$VERSION" >> $GITHUB_OUTPUT
           fi
 
       - name: Publish new version to npm
-        if: steps.version_check.outputs.publish == 'true' && github.ref == 'refs/heads/main'
+        if: steps.version_check.outputs.publish == 'true'
         run: |
+          ../../scripts/prepublish.sh
+          PKG=$(bun pm pack --quiet | xargs)
           if [[ "${{ steps.version_check.outputs.version }}" =~ [0-9]+\.[0-9]+\.[0-9]+\- ]]; then
-            bun publish --tag beta
+            npm publish "$PKG" --ignore-scripts --provenance --access public --tag beta
           else
-            bun publish
+            npm publish "$PKG" --ignore-scripts --provenance --access public
           fi
         working-directory: packages/registry-sdk
-        env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/publish-zkpassport-sdk.yml

@@ -10,14 +10,19 @@ jobs:
   publish:
     name: Publish SDK
     runs-on: ubuntu-latest
+    environment: npm-publish
+    permissions:
+      id-token: write  # Required for OIDC
+      contents: read
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Install Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.3.1
+          bun-version: 1.3.8
 
       - name: Cache Bun dependencies
         uses: actions/cache@v4
@@ -34,22 +39,18 @@ jobs:
         run: bash scripts/sync-workspace-deps.sh check
 
       - name: Install system dependencies
-        if: github.ref == 'refs/heads/main'
         run: sudo apt-get install -y lsof jq zsh
 
       - name: Install Foundry
-        if: github.ref == 'refs/heads/main'
         uses: foundry-rs/foundry-toolchain@v1
         with:
           version: v1.4.4
 
       - name: Install Foundry dependencies
-        if: github.ref == 'refs/heads/main'
         run: forge install
         working-directory: packages/registry-contracts
 
       - name: Setup Turbo cache
-        if: github.ref == 'refs/heads/main'
         uses: actions/cache@v4
         with:
           path: .turbo
@@ -58,27 +59,31 @@ jobs:
             ${{ runner.os }}-turbo-
 
       - name: Build package
-        if: github.ref == 'refs/heads/main'
         run: bun run build --filter=@zkpassport/sdk
 
+      - name: Setup Node.js for npm publish
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Check if version is published to npm
-        if: github.ref == 'refs/heads/main'
         id: version_check
         run: |
-          VERSION=$(bun -p "require('./packages/zkpassport-sdk/package.json').version")
-          if ! bun pm view @zkpassport/sdk@$VERSION version 2>/dev/null; then
+          VERSION=$(node -p "require('./packages/zkpassport-sdk/package.json').version")
+          if ! npm view @zkpassport/sdk@$VERSION version 2>/dev/null; then
             echo "publish=true" >> $GITHUB_OUTPUT
             echo "version=$VERSION" >> $GITHUB_OUTPUT
           fi
 
       - name: Publish new version to npm
-        if: steps.version_check.outputs.publish == 'true' && github.ref == 'refs/heads/main'
+        if: steps.version_check.outputs.publish == 'true'
         run: |
+          ../../scripts/prepublish.sh
+          PKG=$(bun pm pack --quiet | xargs)
           if [[ "${{ steps.version_check.outputs.version }}" =~ [0-9]+\.[0-9]+\.[0-9]+\- ]]; then
-            bun publish --tag beta
+            npm publish "$PKG" --ignore-scripts --provenance --access public --tag beta
           else
-            bun publish
+            npm publish "$PKG" --ignore-scripts --provenance --access public
           fi
         working-directory: packages/zkpassport-sdk
-        env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}

.github/workflows/publish-zkpassport-utils.yml

@@ -10,14 +10,19 @@ jobs:
   publish:
     name: Publish Utils
     runs-on: ubuntu-latest
+    environment: npm-publish
+    permissions:
+      id-token: write  # Required for OIDC
+      contents: read
+
     steps:
       - name: Checkout repository
         uses: actions/checkout@v4
 
       - name: Install Bun
         uses: oven-sh/setup-bun@v2
         with:
-          bun-version: 1.3.1
+          bun-version: 1.3.8
 
       - name: Cache Bun dependencies
         uses: actions/cache@v4
@@ -34,22 +39,18 @@ jobs:
         run: bash scripts/sync-workspace-deps.sh check
 
       - name: Install system dependencies
-        if: github.ref == 'refs/heads/main'
         run: sudo apt-get install -y lsof jq zsh
 
       - name: Install Foundry
-        if: github.ref == 'refs/heads/main'
         uses: foundry-rs/foundry-toolchain@v1
         with:
           version: v1.4.4
 
       - name: Install Foundry dependencies
-        if: github.ref == 'refs/heads/main'
         run: forge install
         working-directory: packages/registry-contracts
 
       - name: Setup Turbo cache
-        if: github.ref == 'refs/heads/main'
         uses: actions/cache@v4
         with:
           path: .turbo
@@ -58,27 +59,31 @@ jobs:
             ${{ runner.os }}-turbo-
 
       - name: Build package
-        if: github.ref == 'refs/heads/main'
         run: bun run build --filter=@zkpassport/utils
 
+      - name: Setup Node.js for npm publish
+        uses: actions/setup-node@v4
+        with:
+          node-version: '24'
+          registry-url: 'https://registry.npmjs.org'
+
       - name: Check if version is published to npm
-        if: github.ref == 'refs/heads/main'
         id: version_check
         run: |
-          VERSION=$(bun -p "require('./packages/zkpassport-utils/package.json').version")
-          if ! bun pm view @zkpassport/utils@$VERSION version 2>/dev/null; then
+          VERSION=$(node -p "require('./packages/zkpassport-utils/package.json').version")
+          if ! npm view @zkpassport/utils@$VERSION version 2>/dev/null; then
             echo "publish=true" >> $GITHUB_OUTPUT
             echo "version=$VERSION" >> $GITHUB_OUTPUT
           fi
 
       - name: Publish new version to npm
-        if: steps.version_check.outputs.publish == 'true' && github.ref == 'refs/heads/main'
+        if: steps.version_check.outputs.publish == 'true'
         run: |
+          ../../scripts/prepublish.sh
+          PKG=$(bun pm pack --quiet | xargs)
           if [[ "${{ steps.version_check.outputs.version }}" =~ [0-9]+\.[0-9]+\.[0-9]+\- ]]; then
-            bun publish --tag beta
+            npm publish "$PKG" --ignore-scripts --provenance --access public --tag beta
           else
-            bun publish
+            npm publish "$PKG" --ignore-scripts --provenance --access public
           fi
         working-directory: packages/zkpassport-utils
-        env:
-          NPM_CONFIG_TOKEN: ${{ secrets.NPM_TOKEN }}

README.md

@@ -1,17 +1,21 @@
 # ZKPassport Monorepo
 
-This monorepo contains the components of the ZKPassport Registry:
+This monorepo contains the components of the ZKPassport project:
 
- - **Registry Contracts**: Smart contracts for the on-chain registry
+ - **Registry Contracts**: Smart contracts for the onchain registry
  - **Registry SDK**: JavaScript SDK for interacting with the registry
  - **Registry Explorer**: Web app for exploring and verifying registry certificates
+ - **ZKPassport SDK**: SDK for integrating with ZKPassport
+ - **ZKPassport Utils**: Shared utilities used across ZKPassport packages
 
 ## Project Structure
 
 ```
 zkpassport-packages/
 ├── packages/
-│   ├── registry-contracts/     # Registry smart contracts
-│   ├── registry-sdk/           # Registry JS SDK for querying the registry
-│   ├── registry-explorer/      # Registry Explorer web app for exploring the registry
+│   ├── registry-contracts/     # Registry Contracts
+│   ├── registry-sdk/           # Registry SDK
+│   ├── registry-explorer/      # Registry Explorer
+│   ├── zkpassport-sdk/         # ZKPassport SDK
+│   └── zkpassport-utils/       # ZKPassport Utils
 ```