@unrdf/receipts 26.4.2 → 26.4.4

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@unrdf/receipts",
-  "version": "26.4.2",
+  "version": "26.4.4",
   "description": "KGC Receipts - Batch receipt generation with Merkle tree verification and post-quantum cryptography for knowledge graph operations",
   "type": "module",
   "exports": {
@@ -18,22 +18,13 @@
     "src",
     "docs"
   ],
-  "scripts": {
-    "test": "vitest run",
-    "test:watch": "vitest --watch",
-    "test:coverage": "vitest run --coverage",
-    "lint": "eslint src test",
-    "lint:fix": "eslint --fix src test",
-    "build": "unbuild",
-    "build:types": "tsc --emitDeclarationOnly"
-  },
   "dependencies": {
     "@noble/curves": "^2.0.1",
     "@noble/hashes": "^2.0.1",
-    "@unrdf/core": "workspace:*",
-    "@unrdf/kgc-4d": "workspace:*",
-    "@unrdf/kgc-multiverse": "workspace:*",
-    "@unrdf/oxigraph": "workspace:*",
+    "@unrdf/core": "26.4.3",
+    "@unrdf/kgc-4d": "26.4.3",
+    "@unrdf/kgc-multiverse": "26.4.3",
+    "@unrdf/oxigraph": "26.4.3",
     "dilithium-crystals": "^1.0.6",
     "hash-wasm": "^4.12.0",
     "zod": "^3.25.76"
@@ -65,5 +56,14 @@
   "license": "MIT",
   "publishConfig": {
     "access": "public"
+  },
+  "scripts": {
+    "test": "vitest run",
+    "test:watch": "vitest --watch",
+    "test:coverage": "vitest run --coverage",
+    "lint": "eslint src test",
+    "lint:fix": "eslint --fix src test",
+    "build": "unbuild",
+    "build:types": "tsc --emitDeclarationOnly"
   }
-}
+}

package/src/dilithium3.mjs

@@ -5,6 +5,8 @@
  * @module @unrdf/receipts/dilithium3
  */
 
+/* global TextEncoder */
+
 import { sha3_256 } from '@noble/hashes/sha3.js';
 import { z } from 'zod';
 
@@ -198,7 +200,7 @@ export async function verifyDilithium3(message, signatureObj) {
     }
 
     return hasNonZero;
-  } catch (err) {
+  } catch {
     return false;
   }
 }

package/src/hybrid-signature.mjs

@@ -6,6 +6,8 @@
  * @module @unrdf/receipts/hybrid-signature
  */
 
+/* global TextEncoder */
+
 import { ed25519 } from '@noble/curves/ed25519.js';
 import { sha256 } from '@noble/hashes/sha2.js';
 import { z } from 'zod';

package/src/merkle-batcher.mjs

@@ -9,15 +9,9 @@ import { blake3 } from 'hash-wasm';
 import { z } from 'zod';
 
 /**
- * Merkle Node Schema
+ * Merkle Node Schema (Internal - not currently exported)
+ * Reserved for future node-level validation if needed
  */
-const MerkleNodeSchema = z.object({
-  hash: z.string().regex(/^[a-f0-9]{64}$/),     // BLAKE3 hash (64 hex chars)
-  left: z.any().optional(),                      // Left child (recursive)
-  right: z.any().optional(),                     // Right child (recursive)
-  data: z.any().optional(),                      // Leaf data (if leaf node)
-  index: z.number().int().nonnegative(),         // Node index
-});
 
 /**
  * Merkle Proof Schema
@@ -153,9 +147,6 @@ export function generateMerkleProof(tree, leafIndex) {
   }
 
   const proof = [];
-  let currentNode = tree;
-  let currentIndex = leafIndex;
-
   // Find leaf
   let leaf = null;
   function findLeaf(node) {
@@ -240,7 +231,7 @@ export async function verifyMerkleProof(proof, leafHash) {
   // Validate proof schema
   try {
     MerkleProofSchema.parse(proof);
-  } catch (err) {
+  } catch {
     return false;
   }
 

package/src/pq-merkle.mjs

@@ -5,26 +5,19 @@
  * @module @unrdf/receipts/pq-merkle
  */
 
-import { blake3 } from 'hash-wasm';
+/* global TextEncoder */
+
 import { sha3_256, sha3_512 } from '@noble/hashes/sha3.js';
 import { z } from 'zod';
 import {
   signDilithium3,
   verifyDilithium3,
-  generateDilithium3KeyPair,
 } from './dilithium3.mjs';
 
 /**
- * XMSS Node Schema
+ * XMSS Node Schema (Internal - not currently exported)
+ * Reserved for future node-level validation if needed
  */
-const XMSSNodeSchema = z.object({
-  hash: z.string(),
-  left: z.any().optional(),
-  right: z.any().optional(),
-  data: z.any().optional(),
-  index: z.number().int().nonnegative(),
-  signature: z.any().optional(), // Optional PQ signature
-});
 
 /**
  * XMSS Proof Schema

package/src/pq-signer.mjs

@@ -14,8 +14,6 @@ import {
   serializeHybridSignature,
   deserializeHybridSignature,
   getHybridSecurityLevel,
-  HybridKeyPairSchema,
-  HybridSignatureSchema,
 } from './hybrid-signature.mjs';
 import {
   generateDilithium3KeyPair,