@noirstack/hexarchproof-sdk 0.0.1

package/README.md

@@ -0,0 +1,50 @@
+# @hexarchproof/sdk
+
+TypeScript SDK for **Hexarch Deterministic Reproduction Proofs (DRP)**.
+
+> Execution becomes a verifiable artifact. Same input → same hash → same proof — anchored for independent verification.
+
+## Install
+
+```bash
+npm install @hexarchproof/sdk
+```
+
+## Usage
+
+```ts
+import { buildProof, verifyProof, sha256HexString, sha256HexJson } from '@hexarchproof/sdk';
+
+const hash = sha256HexString('my payload');
+const jsonHash = sha256HexJson({ b: 2, a: 1 });
+
+const proof = buildProof(
+  { input: 'my deterministic payload' },
+  { type: 'hexarch.text-proof', version: '1' },
+  { output: 'my deterministic payload' }
+);
+
+const result = verifyProof(
+  proof,
+  { input: 'my deterministic payload' },
+  { type: 'hexarch.text-proof', version: '1' },
+  { output: 'my deterministic payload' }
+);
+// result.valid === true
+```
+
+## API
+
+- `canonicalJsonString(value)` — RFC 8785 canonical JSON string
+- `canonicalJsonBytes(value)` — UTF-8 Buffer of the above
+- `sha256HexBytes(raw)` — SHA-256 hex of raw bytes
+- `sha256HexString(input)` — SHA-256 hex of a UTF-8 string
+- `sha256HexJson(value)` — SHA-256 hex of canonical JSON bytes
+- `buildProof(input, spec, output)` — builds a full `DRPv1Proof`
+- `recomputeProofHash(proof)` — re-derives `proof_hash` for tamper detection
+- `verifyProof(proof, input, spec, output)` — fully verifies a proof document
+
+## Links
+
+- Hexarch Domain: https://hexarch.systems/
+- Discord: https://discord.gg/DZysBQJQ

package/out/canon.d.ts

@@ -0,0 +1,12 @@
+import type { JsonLike } from './types';
+/**
+ * Produces a deterministic, compact canonical JSON string for `value`.
+ * Rules (matching Python canonicaljson / RFC 8785):
+ *  - Object keys are sorted lexicographically.
+ *  - No whitespace around separators.
+ *  - Arrays are order-preserving.
+ */
+export declare function canonicalJsonString(value: JsonLike): string;
+/** Returns UTF-8 bytes of the canonical JSON encoding of `value`. */
+export declare function canonicalJsonBytes(value: JsonLike): Buffer;
+//# sourceMappingURL=canon.d.ts.map

package/out/canon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canon.d.ts","sourceRoot":"","sources":["../src/canon.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAU3D;AAED,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAE1D"}

package/out/canon.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalJsonString = canonicalJsonString;
+exports.canonicalJsonBytes = canonicalJsonBytes;
+/**
+ * Produces a deterministic, compact canonical JSON string for `value`.
+ * Rules (matching Python canonicaljson / RFC 8785):
+ *  - Object keys are sorted lexicographically.
+ *  - No whitespace around separators.
+ *  - Arrays are order-preserving.
+ */
+function canonicalJsonString(value) {
+    if (value === null)
+        return 'null';
+    if (typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value)) {
+        return '[' + value.map(canonicalJsonString).join(',') + ']';
+    }
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    const pairs = keys.map(k => JSON.stringify(k) + ':' + canonicalJsonString(obj[k]));
+    return '{' + pairs.join(',') + '}';
+}
+/** Returns UTF-8 bytes of the canonical JSON encoding of `value`. */
+function canonicalJsonBytes(value) {
+    return Buffer.from(canonicalJsonString(value), 'utf8');
+}
+//# sourceMappingURL=canon.js.map

package/out/canon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canon.js","sourceRoot":"","sources":["../src/canon.ts"],"names":[],"mappings":";;AASA,kDAUC;AAGD,gDAEC;AAtBD;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,KAAe;IACjD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAI,KAAoB,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IAC9E,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAa,CAAC,CAAC,CAAC;IAC/F,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACrC,CAAC;AAED,qEAAqE;AACrE,SAAgB,kBAAkB,CAAC,KAAe;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC"}

package/out/hash.d.ts

@@ -0,0 +1,8 @@
+import type { JsonLike } from './types';
+/** SHA-256 hex digest of raw bytes. Matches Python hashlib.sha256(raw).hexdigest(). */
+export declare function sha256HexBytes(raw: Buffer | Uint8Array): string;
+/** SHA-256 hex digest of a UTF-8 string. */
+export declare function sha256HexString(input: string, encoding?: BufferEncoding): string;
+/** SHA-256 hex digest of canonical JSON bytes. Matches Python sha256_hex_json exactly. */
+export declare function sha256HexJson(value: JsonLike): string;
+//# sourceMappingURL=hash.d.ts.map

package/out/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAExC,uFAAuF;AACvF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAE/D;AAED,4CAA4C;AAC5C,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,cAAuB,GAAG,MAAM,CAExF;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAErD"}

package/out/hash.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sha256HexBytes = sha256HexBytes;
+exports.sha256HexString = sha256HexString;
+exports.sha256HexJson = sha256HexJson;
+const crypto_1 = require("crypto");
+const canon_1 = require("./canon");
+/** SHA-256 hex digest of raw bytes. Matches Python hashlib.sha256(raw).hexdigest(). */
+function sha256HexBytes(raw) {
+    return (0, crypto_1.createHash)('sha256').update(raw).digest('hex');
+}
+/** SHA-256 hex digest of a UTF-8 string. */
+function sha256HexString(input, encoding = 'utf8') {
+    return (0, crypto_1.createHash)('sha256').update(Buffer.from(input, encoding)).digest('hex');
+}
+/** SHA-256 hex digest of canonical JSON bytes. Matches Python sha256_hex_json exactly. */
+function sha256HexJson(value) {
+    return sha256HexBytes((0, canon_1.canonicalJsonBytes)(value));
+}
+//# sourceMappingURL=hash.js.map

package/out/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../src/hash.ts"],"names":[],"mappings":";;AAKA,wCAEC;AAGD,0CAEC;AAGD,sCAEC;AAjBD,mCAAoC;AACpC,mCAA6C;AAG7C,uFAAuF;AACvF,SAAgB,cAAc,CAAC,GAAwB;IACrD,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,4CAA4C;AAC5C,SAAgB,eAAe,CAAC,KAAa,EAAE,WAA2B,MAAM;IAC9E,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjF,CAAC;AAED,0FAA0F;AAC1F,SAAgB,aAAa,CAAC,KAAe;IAC3C,OAAO,cAAc,CAAC,IAAA,0BAAkB,EAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC"}

package/out/index.d.ts

@@ -0,0 +1,6 @@
+export type { DRPv1Proof, DRPv1Anchor, JsonLike, VerificationResult } from './types';
+export { canonicalJsonString, canonicalJsonBytes } from './canon';
+export { sha256HexBytes, sha256HexString, sha256HexJson } from './hash';
+export { buildProof, recomputeProofHash } from './proof';
+export { verifyProof } from './verify';
+//# sourceMappingURL=index.d.ts.map

package/out/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC"}

package/out/index.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyProof = exports.recomputeProofHash = exports.buildProof = exports.sha256HexJson = exports.sha256HexString = exports.sha256HexBytes = exports.canonicalJsonBytes = exports.canonicalJsonString = void 0;
+var canon_1 = require("./canon");
+Object.defineProperty(exports, "canonicalJsonString", { enumerable: true, get: function () { return canon_1.canonicalJsonString; } });
+Object.defineProperty(exports, "canonicalJsonBytes", { enumerable: true, get: function () { return canon_1.canonicalJsonBytes; } });
+var hash_1 = require("./hash");
+Object.defineProperty(exports, "sha256HexBytes", { enumerable: true, get: function () { return hash_1.sha256HexBytes; } });
+Object.defineProperty(exports, "sha256HexString", { enumerable: true, get: function () { return hash_1.sha256HexString; } });
+Object.defineProperty(exports, "sha256HexJson", { enumerable: true, get: function () { return hash_1.sha256HexJson; } });
+var proof_1 = require("./proof");
+Object.defineProperty(exports, "buildProof", { enumerable: true, get: function () { return proof_1.buildProof; } });
+Object.defineProperty(exports, "recomputeProofHash", { enumerable: true, get: function () { return proof_1.recomputeProofHash; } });
+var verify_1 = require("./verify");
+Object.defineProperty(exports, "verifyProof", { enumerable: true, get: function () { return verify_1.verifyProof; } });
+//# sourceMappingURL=index.js.map

package/out/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,iCAAkE;AAAzD,4GAAA,mBAAmB,OAAA;AAAE,2GAAA,kBAAkB,OAAA;AAChD,+BAAwE;AAA/D,sGAAA,cAAc,OAAA;AAAE,uGAAA,eAAe,OAAA;AAAE,qGAAA,aAAa,OAAA;AACvD,iCAAyD;AAAhD,mGAAA,UAAU,OAAA;AAAE,2GAAA,kBAAkB,OAAA;AACvC,mCAAuC;AAA9B,qGAAA,WAAW,OAAA"}

package/out/proof.d.ts

@@ -0,0 +1,6 @@
+import type { DRPv1Proof, JsonLike } from './types';
+/** Re-derives proof_hash from canonical payload fields. */
+export declare function recomputeProofHash(proof: DRPv1Proof): string;
+/** Builds a fully formed DRPv1Proof. Mirrors build_proof in the Python engine. */
+export declare function buildProof(inputPayload: JsonLike, specPayload: JsonLike, outputPayload: JsonLike, network?: 'sepolia'): DRPv1Proof;
+//# sourceMappingURL=proof.d.ts.map

package/out/proof.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.d.ts","sourceRoot":"","sources":["../src/proof.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAapD,2DAA2D;AAC3D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAE5D;AAED,kFAAkF;AAClF,wBAAgB,UAAU,CACxB,YAAY,EAAE,QAAQ,EACtB,WAAW,EAAE,QAAQ,EACrB,aAAa,EAAE,QAAQ,EACvB,OAAO,GAAE,SAAqB,GAC7B,UAAU,CAYZ"}

package/out/proof.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.recomputeProofHash = recomputeProofHash;
+exports.buildProof = buildProof;
+const crypto_1 = require("crypto");
+const canon_1 = require("./canon");
+const hash_1 = require("./hash");
+function proofPayloadForHash(proof) {
+    return {
+        schema_version: proof.schema_version,
+        proof_id: proof.proof_id,
+        input_hash: proof.input_hash,
+        spec_hash: proof.spec_hash,
+        output_hash: proof.output_hash,
+        timestamp: proof.timestamp,
+    };
+}
+/** Re-derives proof_hash from canonical payload fields. */
+function recomputeProofHash(proof) {
+    return (0, hash_1.sha256HexBytes)((0, canon_1.canonicalJsonBytes)(proofPayloadForHash(proof)));
+}
+/** Builds a fully formed DRPv1Proof. Mirrors build_proof in the Python engine. */
+function buildProof(inputPayload, specPayload, outputPayload, network = 'sepolia') {
+    const timestamp = new Date().toISOString();
+    const partial = {
+        schema_version: 'drp.v1',
+        proof_id: (0, crypto_1.randomUUID)(),
+        input_hash: (0, hash_1.sha256HexJson)(inputPayload),
+        spec_hash: (0, hash_1.sha256HexJson)(specPayload),
+        output_hash: (0, hash_1.sha256HexJson)(outputPayload),
+        anchor: { network, tx_hash: null, block_number: null, anchored_at: null },
+        timestamp,
+    };
+    return { ...partial, proof_hash: (0, hash_1.sha256HexBytes)((0, canon_1.canonicalJsonBytes)(proofPayloadForHash(partial))) };
+}
+//# sourceMappingURL=proof.js.map

package/out/proof.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof.js","sourceRoot":"","sources":["../src/proof.ts"],"names":[],"mappings":";;AAiBA,gDAEC;AAGD,gCAiBC;AAvCD,mCAAoC;AACpC,mCAA6C;AAC7C,iCAAuD;AAGvD,SAAS,mBAAmB,CAAC,KAAkD;IAC7E,OAAO;QACL,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,SAAgB,kBAAkB,CAAC,KAAiB;IAClD,OAAO,IAAA,qBAAc,EAAC,IAAA,0BAAkB,EAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,kFAAkF;AAClF,SAAgB,UAAU,CACxB,YAAsB,EACtB,WAAqB,EACrB,aAAuB,EACvB,UAAqB,SAAS;IAE9B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,QAAiB;QACjC,QAAQ,EAAE,IAAA,mBAAU,GAAE;QACtB,UAAU,EAAE,IAAA,oBAAa,EAAC,YAAY,CAAC;QACvC,SAAS,EAAE,IAAA,oBAAa,EAAC,WAAW,CAAC;QACrC,WAAW,EAAE,IAAA,oBAAa,EAAC,aAAa,CAAC;QACzC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;QACzE,SAAS;KAC+B,CAAC;IAC3C,OAAO,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,IAAA,qBAAc,EAAC,IAAA,0BAAkB,EAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACtG,CAAC"}

package/out/types.d.ts

@@ -0,0 +1,37 @@
+/** Any JSON-serialisable value (used as the canonical hash input). */
+export type JsonLike = Record<string, unknown> | unknown[] | string | number | boolean | null;
+/** Blockchain anchor for a proof. Currently scoped to Sepolia testnet. */
+export interface DRPv1Anchor {
+    network: 'sepolia';
+    tx_hash: string | null;
+    block_number: number | null;
+    anchored_at: string | null;
+}
+/**
+ * A Hexarch Deterministic Reproduction Proof (DRP) document.
+ * All hash fields are lowercase hex-encoded SHA-256 digests of canonical JSON.
+ * The canonical form follows RFC 8785 key-sort ordering.
+ */
+export interface DRPv1Proof {
+    schema_version: 'drp.v1';
+    proof_id: string;
+    input_hash: string;
+    spec_hash: string;
+    output_hash: string;
+    proof_hash: string;
+    anchor: DRPv1Anchor;
+    timestamp: string;
+}
+/** Result of verifying a DRPv1Proof against its original payloads. */
+export interface VerificationResult {
+    valid: boolean;
+    checks: {
+        schema_valid: boolean;
+        input_hash_matches: boolean;
+        spec_hash_matches: boolean;
+        output_hash_matches: boolean;
+        proof_hash_matches: boolean;
+    };
+    errors: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/out/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,MAAM,MAAM,QAAQ,GAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvB,OAAO,EAAE,GACT,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,CAAC;AAET,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,SAAS,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,cAAc,EAAE,QAAQ,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,sEAAsE;AACtE,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE;QACN,YAAY,EAAE,OAAO,CAAC;QACtB,kBAAkB,EAAE,OAAO,CAAC;QAC5B,iBAAiB,EAAE,OAAO,CAAC;QAC3B,mBAAmB,EAAE,OAAO,CAAC;QAC7B,kBAAkB,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB"}

package/out/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/out/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/out/verify.d.ts

@@ -0,0 +1,4 @@
+import type { JsonLike, VerificationResult } from './types';
+/** Verifies a DRPv1Proof against original payloads. Mirrors verify_proof in the Python engine. */
+export declare function verifyProof(proof: unknown, inputPayload: JsonLike, specPayload: JsonLike, outputPayload: JsonLike): VerificationResult;
+//# sourceMappingURL=verify.d.ts.map

package/out/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAc,QAAQ,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAoBxE,kGAAkG;AAClG,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,YAAY,EAAE,QAAQ,EACtB,WAAW,EAAE,QAAQ,EACrB,aAAa,EAAE,QAAQ,GACtB,kBAAkB,CAuBpB"}

package/out/verify.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyProof = verifyProof;
+const proof_1 = require("./proof");
+const hash_1 = require("./hash");
+const HEX64_RE = /^[A-Fa-f0-9]{64}$/;
+function isValidDRPShape(candidate) {
+    if (candidate === null || typeof candidate !== 'object' || Array.isArray(candidate))
+        return false;
+    const p = candidate;
+    const anchor = p['anchor'];
+    return (p['schema_version'] === 'drp.v1' &&
+        typeof p['proof_id'] === 'string' && p['proof_id'].length > 0 &&
+        typeof p['input_hash'] === 'string' && HEX64_RE.test(p['input_hash']) &&
+        typeof p['spec_hash'] === 'string' && HEX64_RE.test(p['spec_hash']) &&
+        typeof p['output_hash'] === 'string' && HEX64_RE.test(p['output_hash']) &&
+        typeof p['proof_hash'] === 'string' && HEX64_RE.test(p['proof_hash']) &&
+        typeof p['timestamp'] === 'string' && p['timestamp'].length > 0 &&
+        anchor !== null && typeof anchor === 'object' && !Array.isArray(anchor));
+}
+/** Verifies a DRPv1Proof against original payloads. Mirrors verify_proof in the Python engine. */
+function verifyProof(proof, inputPayload, specPayload, outputPayload) {
+    const checks = {
+        schema_valid: false,
+        input_hash_matches: false,
+        spec_hash_matches: false,
+        output_hash_matches: false,
+        proof_hash_matches: false,
+    };
+    const errors = [];
+    if (!isValidDRPShape(proof)) {
+        errors.push('schema_invalid:proof does not match DRPv1Proof shape');
+        return { valid: false, checks, errors };
+    }
+    checks.schema_valid = true;
+    checks.input_hash_matches = proof.input_hash === (0, hash_1.sha256HexJson)(inputPayload);
+    if (!checks.input_hash_matches)
+        errors.push('input_hash_mismatch');
+    checks.spec_hash_matches = proof.spec_hash === (0, hash_1.sha256HexJson)(specPayload);
+    if (!checks.spec_hash_matches)
+        errors.push('spec_hash_mismatch');
+    checks.output_hash_matches = proof.output_hash === (0, hash_1.sha256HexJson)(outputPayload);
+    if (!checks.output_hash_matches)
+        errors.push('output_hash_mismatch');
+    checks.proof_hash_matches = proof.proof_hash === (0, proof_1.recomputeProofHash)(proof);
+    if (!checks.proof_hash_matches)
+        errors.push('proof_hash_mismatch');
+    return { valid: Object.values(checks).every(Boolean), checks, errors };
+}
+//# sourceMappingURL=verify.js.map

package/out/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":";;AAuBA,kCA4BC;AAnDD,mCAA6C;AAC7C,iCAAuC;AAGvC,MAAM,QAAQ,GAAG,mBAAmB,CAAC;AAErC,SAAS,eAAe,CAAC,SAAkB;IACzC,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,MAAM,CAAC,GAAG,SAAoC,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,CACL,CAAC,CAAC,gBAAgB,CAAC,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;QAC7D,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACvE,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,CAAC;QAC/D,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,SAAgB,WAAW,CACzB,KAAc,EACd,YAAsB,EACtB,WAAqB,EACrB,aAAuB;IAEvB,MAAM,MAAM,GAAG;QACb,YAAY,EAAE,KAAK;QACnB,kBAAkB,EAAE,KAAK;QACzB,iBAAiB,EAAE,KAAK;QACxB,mBAAmB,EAAE,KAAK;QAC1B,kBAAkB,EAAE,KAAK;KAC1B,CAAC;IACF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;QACpE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,kBAAkB,GAAG,KAAK,CAAC,UAAU,KAAK,IAAA,oBAAa,EAAC,YAAY,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,kBAAkB;QAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnE,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC,SAAS,KAAK,IAAA,oBAAa,EAAC,WAAW,CAAC,CAAC;IAC1E,IAAI,CAAC,MAAM,CAAC,iBAAiB;QAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjE,MAAM,CAAC,mBAAmB,GAAG,KAAK,CAAC,WAAW,KAAK,IAAA,oBAAa,EAAC,aAAa,CAAC,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,mBAAmB;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACrE,MAAM,CAAC,kBAAkB,GAAG,KAAK,CAAC,UAAU,KAAK,IAAA,0BAAkB,EAAC,KAAK,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,kBAAkB;QAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACzE,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@noirstack/hexarchproof-sdk",
+  "version": "0.0.1",
+  "description": "TypeScript SDK for Hexarch Deterministic Reproduction Proofs (DRP). Same input → same hash → same proof, anchored for independent verification.",
+  "keywords": [
+    "hexarch",
+    "drp",
+    "deterministic",
+    "reproducibility",
+    "verifiable-compute",
+    "proof",
+    "auditability",
+    "noirstack",
+    "canonical-json",
+    "sha256"
+  ],
+  "license": "BLI",
+  "author": {
+    "name": "Noir Stack LLC",
+    "url": "https://noirstack.com"
+  },
+  "homepage": "https://hexarch.systems/",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/no1rstack/hexarchproof-sdk"
+  },
+  "bugs": {
+    "url": "https://noirstack.com/support"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "./out/index.js",
+  "types": "./out/index.d.ts",
+  "exports": {
+    ".": {
+      "require": "./out/index.js",
+      "types": "./out/index.d.ts"
+    }
+  },
+  "files": [
+    "out/",
+    "LICENSE",
+    "README.md"
+  ],
+  "scripts": {
+    "compile": "tsc -p ./",
+    "watch": "tsc -watch -p ./",
+    "test": "node --test out/test/",
+    "prepublishOnly": "npm run compile"
+  },
+  "devDependencies": {
+    "@types/node": "^20.16.5",
+    "typescript": "^5.6.3"
+  }
+}