@totemsdk/proofgraph 1.0.0 → 1.1.0

package/dist/replicated-evidence.d.ts

@@ -0,0 +1,42 @@
+/**
+ * RFC-057 Phase 4 — replicated proofgraph evidence adapter.
+ *
+ * Keeps the authoritative proofgraph evidence store local while allowing a
+ * replicated index to locate the same digest-verified artifacts on other
+ * peers. The replicated index is never trusted for bytes: every read
+ * re-verifies the artifact digest.
+ */
+import type { ArtifactRef, ArtifactStore } from '@totemsdk/storage/artifacts';
+import type { ProofGraph } from './types.js';
+export interface ReplicatedEvidenceIndexEntry {
+    readonly nodeId: string;
+    readonly ref: ArtifactRef;
+    readonly contentHash: string;
+    readonly storedAt: number;
+}
+export interface ReplicatedEvidenceIndexPort {
+    get(key: string): Promise<unknown | null>;
+    put(key: string, value: unknown): Promise<void>;
+    list?(prefix?: string): AsyncIterable<{
+        key: string;
+        value: unknown;
+    }>;
+}
+export interface ReplicatedEvidenceRead {
+    readonly nodeId: string;
+    readonly status: 'ok' | 'not-found' | 'corrupt' | 'unavailable';
+    readonly ref?: ArtifactRef;
+    readonly bytes?: Uint8Array;
+    readonly message?: string;
+}
+export interface ReplicatedProofGraphEvidenceStore {
+    putEvidence(graph: ProofGraph, bytesFor: (nodeId: string) => Uint8Array | undefined): Promise<ArtifactRef[]>;
+    getEvidence(nodeId: string): Promise<ReplicatedEvidenceRead>;
+    verifyEvidence(nodeId: string): Promise<boolean>;
+    listEvidence(): AsyncIterable<ReplicatedEvidenceIndexEntry>;
+}
+export declare function createReplicatedProofGraphEvidenceStore(options: {
+    artifacts: ArtifactStore;
+    index: ReplicatedEvidenceIndexPort;
+    namespace?: string;
+}): ReplicatedProofGraphEvidenceStore;

package/dist/replicated-evidence.js

@@ -0,0 +1,95 @@
+/**
+ * RFC-057 Phase 4 — replicated proofgraph evidence adapter.
+ *
+ * Keeps the authoritative proofgraph evidence store local while allowing a
+ * replicated index to locate the same digest-verified artifacts on other
+ * peers. The replicated index is never trusted for bytes: every read
+ * re-verifies the artifact digest.
+ */
+import { sha3_256, toHex } from '@totemsdk/core';
+import { StorageError } from '@totemsdk/storage/errors';
+const KEY_PREFIX = 'proofgraph:evidence:';
+const DEFAULT_NAMESPACE = 'totem-proofgraph-evidence';
+function normalizeHash(value) {
+    return value.replace(/^0x/i, '').toLowerCase();
+}
+function evidenceNodes(graph) {
+    return graph.nodes.filter((node) => node.type === 'evidence');
+}
+function contentHashOf(node) {
+    const value = node.data?.contentHash;
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+export function createReplicatedProofGraphEvidenceStore(options) {
+    if (!options.artifacts.capabilities.writable) {
+        throw new Error('replicated evidence store requires a writable artifact store');
+    }
+    const namespace = options.namespace ?? DEFAULT_NAMESPACE;
+    const key = (nodeId) => `${KEY_PREFIX}${nodeId}`;
+    return {
+        async putEvidence(graph, bytesFor) {
+            const refs = [];
+            for (const node of evidenceNodes(graph)) {
+                const bytes = bytesFor(node.id);
+                if (!bytes)
+                    continue;
+                const digest = toHex(sha3_256(bytes));
+                const contentHash = contentHashOf(node);
+                if (contentHash && normalizeHash(contentHash) !== digest) {
+                    throw new StorageError(`evidence commitment mismatch for node "${node.id}"`, 'corrupt', {
+                        key: key(node.id),
+                    });
+                }
+                const receipt = await options.artifacts.put(namespace, bytes);
+                if (contentHash && normalizeHash(contentHash) !== receipt.ref.digest) {
+                    throw new StorageError(`artifact digest mismatch for node "${node.id}"`, 'corrupt', {
+                        key: key(node.id),
+                    });
+                }
+                await options.index.put(key(node.id), {
+                    nodeId: node.id,
+                    ref: receipt.ref,
+                    contentHash: contentHash ?? receipt.ref.digest,
+                    storedAt: Date.now(),
+                });
+                refs.push(receipt.ref);
+            }
+            return refs;
+        },
+        async getEvidence(nodeId) {
+            const raw = await options.index.get(key(nodeId));
+            if (!raw)
+                return { nodeId, status: 'not-found' };
+            const entry = raw;
+            const read = await options.artifacts.get(entry.ref);
+            if (read.status !== 'ok' || !read.bytes) {
+                return {
+                    nodeId,
+                    status: read.status,
+                    ref: entry.ref,
+                    ...(read.message ? { message: read.message } : {}),
+                };
+            }
+            const digest = toHex(sha3_256(read.bytes));
+            if (normalizeHash(entry.contentHash) !== digest) {
+                return {
+                    nodeId,
+                    status: 'corrupt',
+                    ref: entry.ref,
+                    message: `evidence digest mismatch: ${digest} !== ${entry.contentHash}`,
+                };
+            }
+            return { nodeId, status: 'ok', ref: entry.ref, bytes: read.bytes };
+        },
+        async verifyEvidence(nodeId) {
+            return (await this.getEvidence(nodeId)).status === 'ok';
+        },
+        async *listEvidence() {
+            if (!options.index.list)
+                return;
+            for await (const entry of options.index.list(KEY_PREFIX)) {
+                yield entry.value;
+            }
+        },
+    };
+}

package/dist/types.d.ts

@@ -4,7 +4,7 @@
  * Pure schema — no network, no DHT, no blockchain submission, no crypto.
  */
 export type ProofGraphNodeType = 'proof' | 'identity' | 'identity-claim' | 'manifest' | 'address' | 'subject' | 'evidence' | 'anchor' | 'receipt' | 'payment' | 'device' | 'service' | 'policy' | 'custom';
-export type ProofGraphEdgeType = 'proves' | 'issued_by' | 'signed_by' | 'about' | 'references' | 'derived_from' | 'supports' | 'contradicts' | 'supersedes' | 'revokes' | 'anchored_to' | 'delegates_to' | 'controls' | 'depends_on' | 'manifests_as' | 'conflicts_with';
+export type ProofGraphEdgeType = 'proves' | 'issued_by' | 'signed_by' | 'about' | 'references' | 'derived_from' | 'supports' | 'contradicts' | 'supersedes' | 'revokes' | 'anchored_to' | 'delegates_to' | 'controls' | 'depends_on' | 'manifests_as' | 'revision_of' | 'conflicts_with';
 export interface ProofGraphNode {
     id: string;
     type: ProofGraphNodeType;

package/dist/types.js

@@ -1,7 +1,6 @@
-"use strict";
 /**
  * @totemsdk/proofgraph — Type definitions
  *
  * Pure schema — no network, no DHT, no blockchain submission, no crypto.
  */
-Object.defineProperty(exports, "__esModule", { value: true });
+export {};

package/dist/verify.js

@@ -1,4 +1,3 @@
-"use strict";
 /**
  * Graph-level verification.
  *
@@ -8,43 +7,7 @@
  *
  * verifyGraphProofs: same logic, returns the list of invalid proof IDs (string[]).
  */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.verifyProofGraph = verifyProofGraph;
-exports.verifyGraphProofs = verifyGraphProofs;
-const proofModule = __importStar(require("@totemsdk/proof"));
+import * as proofModule from '@totemsdk/proof';
 /**
  * Verify every proof node stored in the graph.
  *
@@ -52,7 +15,7 @@ const proofModule = __importStar(require("@totemsdk/proof"));
  * and calls proofModule.verifyProof() from @totemsdk/proof.
  * Returns { valid: true } if ALL proofs pass; otherwise lists the failing proofIds.
  */
-function verifyProofGraph(graph, _options) {
+export function verifyProofGraph(graph, _options) {
     const invalidProofs = [];
     for (const node of graph.nodes) {
         if (node.type !== 'proof' || !node.data)
@@ -72,6 +35,6 @@ function verifyProofGraph(graph, _options) {
  * Returns the list of invalid proof IDs in the graph.
  * Equivalent to verifyProofGraph(graph).invalidProofs.
  */
-function verifyGraphProofs(graph) {
+export function verifyGraphProofs(graph) {
     return verifyProofGraph(graph).invalidProofs;
 }

package/package.json

@@ -1,14 +1,19 @@
 {
   "name": "@totemsdk/proofgraph",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Local deterministic proof relationship graph for Totem Edge — indexes proofs, identities, manifests, and subjects into a queryable content-addressed DAG",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "main": "dist/cjs/index.js",
+  "types": "dist/cjs/index.d.ts",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "require": "./dist/index.js",
-      "import": "./dist/index.js"
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/cjs/index.d.ts",
+        "default": "./dist/cjs/index.js"
+      }
     }
   },
   "files": [
@@ -16,13 +21,15 @@
     "rust/pkg/",
     "rust/pkg-node/",
     "README.md",
-    "LICENSE"
+    "LICENSE",
+    "NOTICE"
   ],
   "dependencies": {
-    "@totemsdk/core": "^1.2.9",
-    "@totemsdk/proof": "^1.0.0",
-    "@totemsdk/manifest": "^1.0.0",
-    "@totemsdk/identity": "^1.0.0"
+    "@totemsdk/core": "^1.4.2",
+    "@totemsdk/proof": "^1.0.2",
+    "@totemsdk/storage": "^0.2.2",
+    "@totemsdk/identity": "^1.1.0",
+    "@totemsdk/manifest": "^2.1.0"
   },
   "devDependencies": {
     "@types/jest": "^30.0.0",
@@ -37,9 +44,9 @@
   "publishConfig": {
     "access": "public"
   },
-  "license": "MIT",
+  "license": "Apache-2.0",
   "author": "Totem SDK",
-  "homepage": "https://totem.ing",
+  "homepage": "https://docs.totem.ing",
   "bugs": {
     "url": "https://github.com/Totem-Edge/totem-sdk/issues"
   },
@@ -64,8 +71,9 @@
     "verification",
     "content-addressed"
   ],
+  "type": "module",
   "scripts": {
-    "build": "npm run build:wasm && tsc && node ../../scripts/clean-wasm-output-ignores.mjs",
+    "build": "tsc && tsc -p tsconfig.cjs.json && node -e \"require('fs').writeFileSync('dist/cjs/package.json', JSON.stringify({type:'commonjs'})+'\\n')\"",
     "build:wasm": "cd rust && wasm-pack build --target bundler --out-dir pkg && wasm-pack build --target nodejs --out-dir pkg-node",
     "clean": "rm -rf dist rust/pkg rust/pkg-node rust/target",
     "test": "jest"

package/rust/pkg/package.json

@@ -6,7 +6,7 @@
   ],
   "description": "Local deterministic proof relationship graph — content-addressed DAG, node/edge ID computation, graph ID hashing, import/export validation (Rust/WASM)",
   "version": "0.1.0",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/Totem-Edge/totem-sdk"
@@ -24,4 +24,4 @@
     "./proofgraph_wasm.js",
     "./snippets/*"
   ]
-}
+}

package/rust/pkg-node/package.json

@@ -5,7 +5,7 @@
   ],
   "description": "Local deterministic proof relationship graph — content-addressed DAG, node/edge ID computation, graph ID hashing, import/export validation (Rust/WASM)",
   "version": "0.1.0",
-  "license": "MIT",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/Totem-Edge/totem-sdk"
@@ -18,4 +18,4 @@
   "main": "proofgraph_wasm.js",
   "homepage": "https://totem.ing",
   "types": "proofgraph_wasm.d.ts"
-}
+}