@limboai/verifox-sdk-issuer 0.0.1-rc.4

package/gen/node/index.d.ts

@@ -0,0 +1,161 @@
+/* auto-generated by NAPI-RS */
+/* eslint-disable */
+export declare class AssetSdk {
+  static connect(endpoint: string, options?: ConnectOptions | undefined | null): Promise<AssetSdk>
+  sign(content: Buffer, format: string, manifest: ManifestSpec): Promise<Buffer>
+}
+
+export declare class StreamSdk {
+  static connect(endpoint: string, policy: RotationPolicy, ledger: SessionLedger, vault: SigningVault, options?: ConnectOptions | undefined | null): Promise<StreamSdk>
+  init(id: string, claimAuthority: string, initBody: Buffer, options: InitOptions): Promise<InitOutcome>
+  sign(id: string, body: Buffer): Promise<SignedSegmentOutcome>
+  rotate(id: string, claimAuthority: string, initBody: Buffer, options: InitOptions): Promise<RotationOutcome>
+  stop(id: string): Promise<void>
+}
+export type StreamSdkNapi = StreamSdk
+
+/**
+ * `data` is JSON; converted to CBOR before crossing the wire.
+ *
+ * The TS surface delegates to `@contentauth/c2pa-types`'s `ManifestAssertion`
+ * (auto-generated from c2pa-rs JSON schemas) so consumers get the same shape
+ * the c2pa stack uses everywhere else. Extra fields on `ManifestAssertion`
+ * (`instance`, `kind`, `created`) are c2pa store-level metadata; if a caller
+ * passes them they're harmlessly dropped at the napi boundary.
+ */
+export interface Assertion {
+  label: import('@contentauth/c2pa-types').ManifestAssertion['label']
+  data: import('@contentauth/c2pa-types').ManifestAssertion['data']
+}
+
+export declare function classifySegment(data: Buffer): SegmentKind
+
+/**
+ * Transport tunables applied to the gRPC channel at construction time.
+ *
+ * `connect_timeout_ms` bounds the initial TCP+TLS+HTTP/2 handshake so an
+ * unreachable signer fails fast as a transport error instead of waiting for
+ * the OS-level SYN timeout. `rpc_timeout_ms` is a channel-wide ceiling for
+ * any single RPC; a wedged signer can't block the caller indefinitely.
+ * `None` means no SDK-level timeout — tonic defaults apply.
+ */
+export interface ConnectOptions {
+  connectTimeoutMs?: number
+  rpcTimeoutMs?: number
+}
+
+export declare function embed(asset: Buffer, format: string, sidecar: Buffer): Buffer
+
+/**
+ * Pass `None` to skip the CAWG identity signing path entirely. `identities`
+ * is a JSON array of CAWG `VerifiedIdentity` objects.
+ */
+export interface IdentityOptions {
+  roles: Array<string>
+  identities: any
+}
+
+/**
+ * An ingredient to include in a C2PA manifest. Identity (`instance_id`),
+ * title, and format are derived by c2pa from the asset itself; action wiring
+ * (e.g. `c2pa.opened` → ParentOf) is handled by the signer.
+ */
+export interface Ingredient {
+  data: Buffer
+  relationship?: Relationship
+}
+
+/** `title` defaults to the session's `claim_authority` when omitted. */
+export interface InitOptions {
+  title?: string
+  assertions: Array<Assertion>
+  ingredients: Array<Ingredient>
+  identity?: IdentityOptions
+  validityPeriodSecs: number
+}
+
+/**
+ * `valid_until_epoch_secs` is the UNIX-epoch second at which the active
+ * key's validity elapses.
+ */
+export interface InitOutcome {
+  signedInitBytes: Buffer
+  epoch: number
+  validUntilEpochSecs: number
+}
+
+/**
+ * Consumer-facing manifest spec. Everything not exposed here (instance_id,
+ * format, vendor, claim_generator_info, hash_alg, …) is managed by the SDK
+ * and signer.
+ */
+export interface ManifestSpec {
+  title?: string
+  assertions: Array<Assertion>
+  ingredients: Array<Ingredient>
+  identity?: IdentityOptions
+}
+
+export declare const enum Relationship {
+  ParentOf = 'parentOf',
+  ComponentOf = 'componentOf',
+  InputTo = 'inputTo'
+}
+
+export interface RotationOutcome {
+  signedInitBytes: Buffer
+  epoch: number
+  validUntilEpochSecs: number
+}
+
+/**
+ * `refresh_ratio` — fraction of `validity_period_secs` after which
+ * `rotation_due` flips on `sign`, so the consumer triggers `rotate`
+ * before verifier-side expiry.
+ *
+ * `overlap_segments` — extra segments the retiring key remains valid for
+ * after rotation; maps onto the new key's `min_sequence_number`.
+ */
+export interface RotationPolicy {
+  refreshRatio: number
+  overlapSegments: number
+}
+
+export declare const enum SegmentKind {
+  Init = 0,
+  Media = 1,
+  Unknown = 2
+}
+
+export interface SessionLedger {
+  put: (id: string, bytes: Buffer) => Promise<void>
+  get: (id: string) => Promise<Buffer | null | undefined>
+  forget: (id: string) => Promise<void>
+}
+
+/**
+ * `rotation_due` — `true` once `refresh_ratio` of the active key's
+ * validity has elapsed. Media keeps verifying until the verifier's
+ * skew-tolerance window closes.
+ */
+export interface SignedSegmentOutcome {
+  bytes: Buffer
+  epoch: number
+  rotationDue: boolean
+}
+
+export interface SigningVault {
+  mint: () => Promise<VaultPublicKey>
+  sign: (kid: Buffer, payload: Buffer) => Promise<Buffer>
+  forget: (kid: Buffer) => Promise<void>
+}
+
+/**
+ * `kid` is the vault-derived handle (typically SHA-256 of SEC1 public).
+ * `public_key_sec1` is uncompressed SEC1 (65 bytes starting with `0x04`
+ * for ES256); the SDK rewraps as COSE_Key for §19.4.4.
+ */
+export interface VaultPublicKey {
+  kid: Buffer
+  publicKeySec1: Buffer
+}

package/gen/node/index.js

@@ -0,0 +1,589 @@
+// prettier-ignore
+/* eslint-disable */
+// @ts-nocheck
+/* auto-generated by NAPI-RS */
+
+import { createRequire } from 'node:module'
+const require = createRequire(import.meta.url)
+const __dirname = new URL('.', import.meta.url).pathname
+
+const { readFileSync } = require('node:fs')
+let nativeBinding = null
+const loadErrors = []
+
+const isMusl = () => {
+  let musl = false
+  if (process.platform === 'linux') {
+    musl = isMuslFromFilesystem()
+    if (musl === null) {
+      musl = isMuslFromReport()
+    }
+    if (musl === null) {
+      musl = isMuslFromChildProcess()
+    }
+  }
+  return musl
+}
+
+const isFileMusl = (f) => f.includes('libc.musl-') || f.includes('ld-musl-')
+
+const isMuslFromFilesystem = () => {
+  try {
+    return readFileSync('/usr/bin/ldd', 'utf-8').includes('musl')
+  } catch {
+    return null
+  }
+}
+
+const isMuslFromReport = () => {
+  let report = null
+  if (typeof process.report?.getReport === 'function') {
+    process.report.excludeNetwork = true
+    report = process.report.getReport()
+  }
+  if (!report) {
+    return null
+  }
+  if (report.header && report.header.glibcVersionRuntime) {
+    return false
+  }
+  if (Array.isArray(report.sharedObjects)) {
+    if (report.sharedObjects.some(isFileMusl)) {
+      return true
+    }
+  }
+  return false
+}
+
+const isMuslFromChildProcess = () => {
+  try {
+    return require('child_process').execSync('ldd --version', { encoding: 'utf8' }).includes('musl')
+  } catch (e) {
+    // If we reach this case, we don't know if the system is musl or not, so is better to just fallback to false
+    return false
+  }
+}
+
+function requireNative() {
+  if (process.env.NAPI_RS_NATIVE_LIBRARY_PATH) {
+    try {
+      return require(process.env.NAPI_RS_NATIVE_LIBRARY_PATH);
+    } catch (err) {
+      loadErrors.push(err)
+    }
+  } else if (process.platform === 'android') {
+    if (process.arch === 'arm64') {
+      try {
+        return require('./verifox-sdk-issuer.android-arm64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-android-arm64')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-android-arm64/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm') {
+      try {
+        return require('./verifox-sdk-issuer.android-arm-eabi.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-android-arm-eabi')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-android-arm-eabi/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on Android ${process.arch}`))
+    }
+  } else if (process.platform === 'win32') {
+    if (process.arch === 'x64') {
+      if (process.config?.variables?.shlib_suffix === 'dll.a' || process.config?.variables?.node_target_type === 'shared_library') {
+        try {
+        return require('./verifox-sdk-issuer.win32-x64-gnu.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-win32-x64-gnu')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-win32-x64-gnu/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      } else {
+        try {
+        return require('./verifox-sdk-issuer.win32-x64-msvc.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-win32-x64-msvc')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-win32-x64-msvc/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      }
+    } else if (process.arch === 'ia32') {
+      try {
+        return require('./verifox-sdk-issuer.win32-ia32-msvc.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-win32-ia32-msvc')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-win32-ia32-msvc/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm64') {
+      try {
+        return require('./verifox-sdk-issuer.win32-arm64-msvc.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-win32-arm64-msvc')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-win32-arm64-msvc/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on Windows: ${process.arch}`))
+    }
+  } else if (process.platform === 'darwin') {
+    try {
+      return require('./verifox-sdk-issuer.darwin-universal.node')
+    } catch (e) {
+      loadErrors.push(e)
+    }
+    try {
+      const binding = require('@limboai/verifox-sdk-issuer-darwin-universal')
+      const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-darwin-universal/package.json').version
+      if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      }
+      return binding
+    } catch (e) {
+      loadErrors.push(e)
+    }
+    if (process.arch === 'x64') {
+      try {
+        return require('./verifox-sdk-issuer.darwin-x64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-darwin-x64')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-darwin-x64/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm64') {
+      try {
+        return require('./verifox-sdk-issuer.darwin-arm64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-darwin-arm64')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-darwin-arm64/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on macOS: ${process.arch}`))
+    }
+  } else if (process.platform === 'freebsd') {
+    if (process.arch === 'x64') {
+      try {
+        return require('./verifox-sdk-issuer.freebsd-x64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-freebsd-x64')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-freebsd-x64/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm64') {
+      try {
+        return require('./verifox-sdk-issuer.freebsd-arm64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-freebsd-arm64')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-freebsd-arm64/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on FreeBSD: ${process.arch}`))
+    }
+  } else if (process.platform === 'linux') {
+    if (process.arch === 'x64') {
+      if (isMusl()) {
+        try {
+          return require('./verifox-sdk-issuer.linux-x64-musl.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-x64-musl')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-x64-musl/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./verifox-sdk-issuer.linux-x64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-x64-gnu')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-x64-gnu/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'arm64') {
+      if (isMusl()) {
+        try {
+          return require('./verifox-sdk-issuer.linux-arm64-musl.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-arm64-musl')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-arm64-musl/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./verifox-sdk-issuer.linux-arm64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-arm64-gnu')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-arm64-gnu/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'arm') {
+      if (isMusl()) {
+        try {
+          return require('./verifox-sdk-issuer.linux-arm-musleabihf.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-arm-musleabihf')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-arm-musleabihf/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./verifox-sdk-issuer.linux-arm-gnueabihf.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-arm-gnueabihf')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-arm-gnueabihf/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'loong64') {
+      if (isMusl()) {
+        try {
+          return require('./verifox-sdk-issuer.linux-loong64-musl.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-loong64-musl')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-loong64-musl/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./verifox-sdk-issuer.linux-loong64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-loong64-gnu')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-loong64-gnu/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'riscv64') {
+      if (isMusl()) {
+        try {
+          return require('./verifox-sdk-issuer.linux-riscv64-musl.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-riscv64-musl')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-riscv64-musl/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./verifox-sdk-issuer.linux-riscv64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@limboai/verifox-sdk-issuer-linux-riscv64-gnu')
+          const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-riscv64-gnu/package.json').version
+          if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
+    } else if (process.arch === 'ppc64') {
+      try {
+        return require('./verifox-sdk-issuer.linux-ppc64-gnu.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-linux-ppc64-gnu')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-ppc64-gnu/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 's390x') {
+      try {
+        return require('./verifox-sdk-issuer.linux-s390x-gnu.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-linux-s390x-gnu')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-linux-s390x-gnu/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on Linux: ${process.arch}`))
+    }
+  } else if (process.platform === 'openharmony') {
+    if (process.arch === 'arm64') {
+      try {
+        return require('./verifox-sdk-issuer.openharmony-arm64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-openharmony-arm64')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-openharmony-arm64/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'x64') {
+      try {
+        return require('./verifox-sdk-issuer.openharmony-x64.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-openharmony-x64')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-openharmony-x64/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else if (process.arch === 'arm') {
+      try {
+        return require('./verifox-sdk-issuer.openharmony-arm.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      try {
+        const binding = require('@limboai/verifox-sdk-issuer-openharmony-arm')
+        const bindingPackageVersion = require('@limboai/verifox-sdk-issuer-openharmony-arm/package.json').version
+        if (bindingPackageVersion !== '0.0.1-rc.4' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 0.0.1-rc.4 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+    } else {
+      loadErrors.push(new Error(`Unsupported architecture on OpenHarmony: ${process.arch}`))
+    }
+  } else {
+    loadErrors.push(new Error(`Unsupported OS: ${process.platform}, architecture: ${process.arch}`))
+  }
+}
+
+nativeBinding = requireNative()
+
+if (!nativeBinding || process.env.NAPI_RS_FORCE_WASI) {
+  let wasiBinding = null
+  let wasiBindingError = null
+  try {
+    wasiBinding = require('./verifox-sdk-issuer.wasi.cjs')
+    nativeBinding = wasiBinding
+  } catch (err) {
+    if (process.env.NAPI_RS_FORCE_WASI) {
+      wasiBindingError = err
+    }
+  }
+  if (!nativeBinding || process.env.NAPI_RS_FORCE_WASI) {
+    try {
+      wasiBinding = require('@limboai/verifox-sdk-issuer-wasm32-wasi')
+      nativeBinding = wasiBinding
+    } catch (err) {
+      if (process.env.NAPI_RS_FORCE_WASI) {
+        if (!wasiBindingError) {
+          wasiBindingError = err
+        } else {
+          wasiBindingError.cause = err
+        }
+        loadErrors.push(err)
+      }
+    }
+  }
+  if (process.env.NAPI_RS_FORCE_WASI === 'error' && !wasiBinding) {
+    const error = new Error('WASI binding not found and NAPI_RS_FORCE_WASI is set to error')
+    error.cause = wasiBindingError
+    throw error
+  }
+}
+
+if (!nativeBinding) {
+  if (loadErrors.length > 0) {
+    throw new Error(
+      `Cannot find native binding. ` +
+        `npm has a bug related to optional dependencies (https://github.com/npm/cli/issues/4828). ` +
+        'Please try `npm i` again after removing both package-lock.json and node_modules directory.',
+      {
+        cause: loadErrors.reduce((err, cur) => {
+          cur.cause = err
+          return cur
+        }),
+      },
+    )
+  }
+  throw new Error(`Failed to load native binding`)
+}
+
+const { AssetSdk, StreamSdk, StreamSdkNapi, classifySegment, embed, Relationship, SegmentKind } = nativeBinding
+export { AssetSdk }
+export { StreamSdk }
+export { StreamSdkNapi }
+export { classifySegment }
+export { embed }
+export { Relationship }
+export { SegmentKind }

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@limboai/verifox-sdk-issuer",
+  "version": "0.0.1-rc.4",
+  "license": "UNLICENSED",
+  "type": "module",
+  "main": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs"
+    }
+  },
+  "publishConfig": {
+    "main": "./dist/index.mjs",
+    "types": "./dist/index.d.ts",
+    "exports": {
+      ".": {
+        "types": "./dist/index.d.ts",
+        "import": "./dist/index.mjs"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "gen"
+  ],
+  "napi": {
+    "binaryName": "verifox-sdk-issuer",
+    "targets": [
+      "aarch64-apple-darwin",
+      "x86_64-apple-darwin",
+      "x86_64-unknown-linux-gnu",
+      "aarch64-unknown-linux-gnu"
+    ]
+  },
+  "scripts": {
+    "gen": "napi build --manifest-path ../../api/sdk/issuer/Cargo.toml --release --platform --js index.js --esm --output-dir gen/node --features napi",
+    "gen:debug": "napi build --manifest-path ../../api/sdk/issuer/Cargo.toml --platform --js index.js --esm --output-dir gen/node --features napi",
+    "build": "rolldown -c && tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@contentauth/c2pa-types": "^0.4.4"
+  },
+  "devDependencies": {
+    "@napi-rs/cli": "^3.6.1",
+    "@types/node": "^25.6.0",
+    "rolldown": "^1.0.0-rc.18",
+    "typescript": "^6.0.2"
+  }
+}