ZK explanation

Would it be possible to explain in specifics where the ZK processes happen in the code. There doesn't seem to be any private user key that is used in the ZK proof. It also seems that the "server" & "client" aren't fully seperated, so the ZK proof doesn't really happen only on the client. 