@affix-io/sdk 2.0.0

package/dist/types.d.ts

@@ -0,0 +1,104 @@
+export type Attestation = {
+    signed_at: string;
+    payload_digest: string;
+    mldsa_signature_b64: string;
+    algorithm: "ML-DSA-65";
+};
+export type AffixCredential = {
+    schema_id: string;
+    issuer_id: string;
+    issuer_pubkey_hash: string;
+    issuer_public_key_hex?: string;
+    credential_id: string;
+    claim_value: string | number;
+    valid_from: number;
+    valid_until: number;
+    fields?: Record<string, unknown>;
+    attestation?: Attestation;
+};
+export type WitnessContext = {
+    secret: string;
+    context_id: string;
+    as_of_timestamp?: number;
+    threshold?: number;
+    region_hash?: string;
+    required_coverage_hash?: string;
+    required_claim_hash?: string;
+    group_hash?: string;
+    min_value?: number;
+    max_value?: number;
+    min_remaining?: number;
+    reference_hash?: string;
+    expected_hash?: string;
+    claim_b?: string | number;
+    claim_c?: string | number;
+    required_a_hash?: string | number;
+    required_b_hash?: string | number;
+    required_c_hash?: string | number;
+    logic_mode?: string | number;
+    decision_hash?: string | number;
+    rules_hash?: string | number;
+    expected_decision_hash?: string | number;
+    expected_rules_hash?: string | number;
+    merkle_leaf?: string;
+    merkle_sibling0?: string;
+    merkle_sibling1?: string;
+    merkle_sibling2?: string;
+    merkle_index?: number;
+    merkle_root?: string;
+};
+export type WitnessPackage = {
+    circuit_id: string;
+    inputs: Record<string, string>;
+};
+export type ProveResult = {
+    proof_id: string;
+    circuit_id: string;
+    proof: string;
+    valid: boolean;
+    verified?: boolean;
+    decision?: "yes" | "no";
+    proof_digest: string;
+    return_value?: string;
+    merkle_root?: string;
+    merkle_leaf_hash?: string;
+    attestation?: Attestation;
+    witness?: WitnessPackage;
+};
+export type VerifyResult = {
+    proof_id: string;
+    valid: boolean;
+    verified: boolean;
+    decision: "yes" | "no";
+    circuit_id: string;
+    proof_digest: string;
+    merkle_root?: string;
+    merkle_leaf_hash?: string;
+    attestation?: Attestation;
+};
+export type SdkConfig = {
+    apiBase: string;
+    apiKey: string;
+    requestAttestation?: boolean;
+    sector?: string;
+    offlineQueuePath?: string;
+    proofStorePath?: string;
+    timeoutMs?: number;
+};
+export type QueuedProveJob = {
+    id: string;
+    circuit_id: string;
+    body: Record<string, unknown>;
+    created_at: string;
+    attempts: number;
+};
+export type StoredProof = {
+    proof_id: string;
+    circuit_id: string;
+    proof: string;
+    proof_digest: string;
+    valid: boolean;
+    created_at: string;
+    synced: boolean;
+    merkle_root?: string;
+};

package/dist/types.js

@@ -0,0 +1 @@
+export {};

package/dist/witness.d.ts

@@ -0,0 +1,6 @@
+import type { AffixCredential, WitnessContext, WitnessPackage } from "./types.js";
+import type { AffixApiClient } from "./client.js";
+export declare function randomFieldHex(): string;
+export declare function defaultContext(overrides?: Partial<WitnessContext>): WitnessContext;
+export declare function prepareWitness(client: AffixApiClient, circuitId: string, credential: AffixCredential, context: WitnessContext): Promise<WitnessPackage>;
+export declare function witnessFromInputs(circuitId: string, inputs: Record<string, string>): WitnessPackage;

package/dist/witness.js

@@ -0,0 +1,36 @@
+import { randomBytes } from "node:crypto";
+import { normalizeCredential } from "./credential-normalize.js";
+const FR_MODULUS = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
+function reduceField(value) {
+    return ((value % FR_MODULUS) + FR_MODULUS) % FR_MODULUS;
+}
+export function randomFieldHex() {
+    const bytes = randomBytes(32);
+    let acc = 0n;
+    for (const byte of bytes) {
+        acc = (acc << 8n) + BigInt(byte);
+    }
+    return `0x${reduceField(acc).toString(16)}`;
+}
+export function defaultContext(overrides = {}) {
+    return {
+        secret: overrides.secret ?? randomFieldHex(),
+        context_id: overrides.context_id ?? randomFieldHex(),
+        ...overrides,
+    };
+}
+export async function prepareWitness(client, circuitId, credential, context) {
+    const response = await client.prepareWitness({
+        circuit_id: circuitId,
+        credential: normalizeCredential(credential),
+        context,
+    });
+    const witness = response.witness;
+    if (!witness?.inputs) {
+        throw new Error("witness_prepare_empty");
+    }
+    return witness;
+}
+export function witnessFromInputs(circuitId, inputs) {
+    return { circuit_id: circuitId, inputs };
+}

package/package.json

@@ -0,0 +1,83 @@
+{
+  "name": "@affix-io/sdk",
+  "version": "2.0.0",
+  "description": "Post-quantum zero-knowledge proof SDK for Node.js. Noir circuits, ML-DSA-65 attestation, Barretenberg UltraHonk proving, verifiable credentials, and privacy-preserving KYC.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "homepage": "https://github.com/AffixIO/SDK",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AffixIO/SDK.git"
+  },
+  "bugs": {
+    "url": "https://github.com/AffixIO/SDK/issues"
+  },
+  "keywords": [
+    "post-quantum-cryptography",
+    "post-quantum",
+    "quantum-safe",
+    "quantum-resistant",
+    "zero-knowledge",
+    "zero-knowledge-proofs",
+    "zkp",
+    "zk-snark",
+    "snark",
+    "noir",
+    "noir-lang",
+    "barretenberg",
+    "ultrahonk",
+    "ml-dsa",
+    "fips-204",
+    "fips-203",
+    "fips-205",
+    "crystals-dilithium",
+    "privacy-preserving",
+    "verifiable-credentials",
+    "attestation",
+    "kyc",
+    "identity",
+    "merkle",
+    "proof",
+    "prove",
+    "verify",
+    "nodejs",
+    "typescript",
+    "affixio"
+  ],
+  "files": [
+    "dist",
+    "certs",
+    ".env.example",
+    "README.md",
+    "LICENSE",
+    "NOTICE",
+    "SECURITY.md",
+    "CONTRIBUTING.md",
+    "AUTHORS",
+    "scripts/postinstall.mjs"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "affix-sdk": "./dist/cli.js",
+    "affix-sdk-web": "./dist/cli.js"
+  },
+  "scripts": {
+    "start": "node dist/cli.js",
+    "postinstall": "node scripts/postinstall.mjs"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "dependencies": {}
+}

package/scripts/postinstall.mjs

@@ -0,0 +1,19 @@
+import { chmodSync, existsSync, readdirSync, statSync } from "node:fs";
+import { join } from "node:path";
+
+const binDir = join(process.cwd(), "node_modules", ".bin");
+if (!existsSync(binDir)) {
+  process.exit(0);
+}
+
+for (const name of readdirSync(binDir)) {
+  const path = join(binDir, name);
+  try {
+    const mode = statSync(path).mode;
+  if ((mode & 0o111) === 0) {
+      chmodSync(path, mode | 0o755);
+    }
+  } catch {
+    // ignore broken symlinks
+  }
+}