@lemmaoracle/seal 0.1.1

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@lemmaoracle/seal",
+  "version": "0.1.1",
+  "description": "Seal — ZK auth circuit for Lemma dashboard Proof-based sign-in. Proves knowledge of an API key pre-image without revealing the key.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./vkey": {
+      "types": "./dist/vkey.d.ts",
+      "import": "./dist/vkey.js"
+    }
+  },
+  "files": [
+    "dist",
+    "circuits/src/seal-identity.circom",
+    "circuits/scripts/build.sh",
+    "scripts/setup-toolchain.sh"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "build:circuit": "cd circuits && npm run build",
+    "type-check": "tsc --noEmit",
+    "test": "vitest run",
+    "test:circuit": "cd circuits && npx vitest run",
+    "register:circuit": "tsx scripts/register-circuit.ts"
+  },
+  "keywords": [
+    "lemma",
+    "seal",
+    "auth",
+    "zk",
+    "circuit",
+    "sign-in"
+  ],
+  "dependencies": {
+    "@lemmaoracle/sdk": "^0.0.23",
+    "@lemmaoracle/spec": "^0.0.23",
+    "snarkjs": "^0.7.6"
+  },
+  "devDependencies": {
+    "@types/snarkjs": "^0.7.9",
+    "dotenv": "16.4.7",
+    "tsx": "^4.19.0",
+    "typescript": "5.8.3",
+    "vitest": "^3.1.1"
+  },
+  "author": "Lemma Oracle",
+  "license": "MIT"
+}

package/scripts/setup-toolchain.sh

@@ -0,0 +1,58 @@
+#!/usr/bin/env bash
+#
+# Install the toolchain needed to compile the seal circuit.
+#
+# Required:
+#   - Rust + Cargo   — circom is built from source via cargo
+#   - circom 2.1.x   — the circuit compiler
+#   - Node.js >= 18  — snarkjs runs on Node
+#
+# snarkjs and circomlib are installed as circuits/ dependencies by
+# `npm install` and need no global install.
+#
+set -euo pipefail
+
+CIRCOM_VERSION="v2.1.9"
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+echo "seal toolchain setup"
+echo "===================="
+
+# 1. Rust / Cargo
+if command -v cargo >/dev/null 2>&1; then
+  echo "✓ cargo present: $(cargo --version)"
+else
+  echo "→ installing Rust via rustup"
+  curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
+  # shellcheck disable=SC1091
+  source "$HOME/.cargo/env"
+fi
+
+# 2. circom 2.1.x
+if command -v circom >/dev/null 2>&1; then
+  echo "✓ circom present: $(circom --version)"
+else
+  echo "→ building circom $CIRCOM_VERSION from source"
+  TMP="$(mktemp -d)"
+  git clone --depth 1 --branch "$CIRCOM_VERSION" \
+    https://github.com/iden3/circom.git "$TMP/circom"
+  cargo install --path "$TMP/circom/circom"
+  rm -rf "$TMP"
+  echo "✓ circom installed: $(circom --version)"
+fi
+
+# 3. Node.js
+if command -v node >/dev/null 2>&1; then
+  echo "✓ node present: $(node --version)"
+else
+  echo "✗ Node.js >= 18 is required — install it, then re-run this script" >&2
+  exit 1
+fi
+
+# 4. circuit JS dependencies (snarkjs, circomlib)
+echo "→ installing circuit dependencies"
+( cd "$SCRIPT_DIR/../circuits" && npm install )
+
+echo ""
+echo "✓ toolchain ready — build the circuit with:"
+echo "    cd packages/seal/circuits && npm run build"