reputrans 0.1.0

package/dist/sdk/src/identity.js

@@ -0,0 +1,110 @@
+/**
+ * Identity management for REPUTRANS Provars.
+ *
+ * All operations use Poseidon hash (NOT Pedersen) for consistency
+ * with the circuit layer. Generates master identities, derives
+ * platform-specific keys, and computes nullifiers.
+ *
+ * Naming: Provar = credential holder, Arbiter = verifier.
+ */
+import { poseidonHash, BN254_FIELD_ORDER } from './poseidon.js';
+/**
+ * Generate a cryptographically random BN254 field element.
+ */
+function randomFieldElement() {
+    const bytes = new Uint8Array(32);
+    crypto.getRandomValues(bytes);
+    let val = 0n;
+    for (const b of bytes)
+        val = (val << 8n) | BigInt(b);
+    // Reduce mod field order to get a valid 254-bit element
+    return val % BN254_FIELD_ORDER;
+}
+/**
+ * Generate a new Provar master identity.
+ *
+ * The master secret is a random BN254 field element.
+ * The commitment is poseidon(masterSecret, 0) - a binding commitment
+ * that can be registered in an anonymity set without revealing the secret.
+ */
+export function generateIdentity() {
+    const masterSecret = randomFieldElement();
+    const commitment = poseidonHash(masterSecret, 0n);
+    return { masterSecret, commitment };
+}
+/**
+ * Reconstruct identity from an existing master secret.
+ */
+export function identityFromSecret(masterSecret) {
+    if (masterSecret < 0n || masterSecret >= BN254_FIELD_ORDER) {
+        throw new Error('Master secret must be a valid BN254 field element');
+    }
+    const commitment = poseidonHash(masterSecret, 0n);
+    return { masterSecret, commitment };
+}
+/**
+ * Derive a platform-specific key from the master secret.
+ *
+ * key = poseidon(masterSecret, platformId)
+ *
+ * This allows different keys per platform while maintaining
+ * a single master identity. The platform cannot link back to
+ * the master secret or to keys on other platforms.
+ */
+export function derivePlatformKey(masterSecret, platformId) {
+    const key = poseidonHash(masterSecret, platformId);
+    return { platformId, key };
+}
+/**
+ * Compute a nullifier for replay prevention.
+ *
+ * nullifier = poseidon(masterSecret, contextId)
+ *
+ * The context is typically a domain separator (e.g. hash of the
+ * Arbiter's address + session nonce). Same master secret + same context
+ * always produces the same nullifier, preventing double-spending
+ * without revealing the identity.
+ */
+export function computeNullifier(masterSecret, contextId) {
+    return poseidonHash(masterSecret, contextId);
+}
+/**
+ * Convert a string context (e.g. "arbiter:0x1234:session:5") into a
+ * field element suitable for nullifier computation.
+ *
+ * Uses Poseidon hash of packed chunks for collision resistance,
+ * rather than raw byte packing which is vulnerable to collisions
+ * on inputs longer than 31 bytes.
+ */
+export function contextToField(context) {
+    const encoder = new TextEncoder();
+    const bytes = encoder.encode(context);
+    // Pack bytes into 31-byte field elements (BN254 safe)
+    const chunks = [];
+    for (let i = 0; i < bytes.length; i += 31) {
+        let val = 0n;
+        const end = Math.min(i + 31, bytes.length);
+        for (let j = i; j < end; j++) {
+            val = (val << 8n) | BigInt(bytes[j]);
+        }
+        chunks.push(val);
+    }
+    // Hash chunks pairwise with Poseidon for collision resistance
+    if (chunks.length === 0)
+        return poseidonHash(0n, 0n);
+    if (chunks.length === 1)
+        return poseidonHash(chunks[0], 0n);
+    let result = poseidonHash(chunks[0], chunks[1]);
+    for (let i = 2; i < chunks.length; i++) {
+        result = poseidonHash(result, chunks[i]);
+    }
+    return result;
+}
+/**
+ * Compute a Poseidon commitment of the master secret.
+ * This is the value registered in the anonymity set.
+ */
+export function computeCommitment(masterSecret) {
+    return poseidonHash(masterSecret, 0n);
+}
+//# sourceMappingURL=identity.js.map

package/dist/sdk/src/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../sdk/src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAgBhE;;GAEG;AACH,SAAS,kBAAkB;IACzB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrD,wDAAwD;IACxD,OAAO,GAAG,GAAG,iBAAiB,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB;IACrD,IAAI,YAAY,GAAG,EAAE,IAAI,YAAY,IAAI,iBAAiB,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB,EAAE,UAAkB;IACxE,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACnD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB,EAAE,SAAiB;IACtE,OAAO,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtC,sDAAsD;IACtD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,8DAA8D;IAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5D,IAAI,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACpD,OAAO,YAAY,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC"}

package/dist/sdk/src/index.d.ts

@@ -0,0 +1,18 @@
+export { poseidonHash, poseidonHashEdDSA, BN254_FIELD_ORDER } from './poseidon.js';
+export { sign, verify, getPublicKey, BJJ, G, IDENTITY } from './eddsa.js';
+export type { Point, EdDSASignature } from './eddsa.js';
+export { parseVC, extractSubjectFields, getIssuerId, VCParseError } from './vc-parser.js';
+export type { VerifiableCredential, CredentialSubject, CredentialProof } from './vc-parser.js';
+export { encodeCredential, buildMerkleTree, getMerklePath, stringToField, FIELD_TREE_DEPTH, MAX_LEAVES, } from './encoder.js';
+export type { EncodedCredential, MerklePath } from './encoder.js';
+export { validateProofRequest, createDisclosureRequest, createRangeRequest, ProofRequestError, } from './proof-request.js';
+export type { ProofRequest, ProofResponse, Predicate, PredicateOperator, } from './proof-request.js';
+export { generateIdentity, identityFromSecret, derivePlatformKey, computeNullifier, computeCommitment, contextToField, } from './identity.js';
+export type { ProvarIdentity, DerivedKey } from './identity.js';
+export { loadCircuit } from './circuit-loader.js';
+export type { CircuitName } from './circuit-loader.js';
+export { createProver } from './prover.js';
+export type { Prover, CompiledCircuit } from './prover.js';
+export { createVerifier } from './verifier.js';
+export type { Verifier } from './verifier.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/sdk/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../sdk/src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC1E,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGxD,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1F,YAAY,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAG/F,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAGlE,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,YAAY,EACZ,aAAa,EACb,SAAS,EACT,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAGhE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG3D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC"}

package/dist/sdk/src/index.js

@@ -0,0 +1,18 @@
+// -- Cryptographic primitives --
+export { poseidonHash, poseidonHashEdDSA, BN254_FIELD_ORDER } from './poseidon.js';
+export { sign, verify, getPublicKey, BJJ, G, IDENTITY } from './eddsa.js';
+// -- VC parsing --
+export { parseVC, extractSubjectFields, getIssuerId, VCParseError } from './vc-parser.js';
+// -- Encoding --
+export { encodeCredential, buildMerkleTree, getMerklePath, stringToField, FIELD_TREE_DEPTH, MAX_LEAVES, } from './encoder.js';
+// -- Proof request/response protocol --
+export { validateProofRequest, createDisclosureRequest, createRangeRequest, ProofRequestError, } from './proof-request.js';
+// -- Identity --
+export { generateIdentity, identityFromSecret, derivePlatformKey, computeNullifier, computeCommitment, contextToField, } from './identity.js';
+// -- Circuit loader --
+export { loadCircuit } from './circuit-loader.js';
+// -- Prover --
+export { createProver } from './prover.js';
+// -- Verifier --
+export { createVerifier } from './verifier.js';
+//# sourceMappingURL=index.js.map

package/dist/sdk/src/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../sdk/src/index.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG1E,mBAAmB;AACnB,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG1F,iBAAiB;AACjB,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,UAAU,GACX,MAAM,cAAc,CAAC;AAGtB,wCAAwC;AACxC,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAQ5B,iBAAiB;AACjB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,uBAAuB;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,eAAe;AACf,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,iBAAiB;AACjB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/sdk/src/poseidon.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Poseidon hash wrapper - uses poseidon-lite which implements the original
+ * Poseidon hash (circomlib/IAIK BN254 constants).
+ *
+ * This matches Noir's std::hash::poseidon::bn254 exactly because both use
+ * the same parameter set:
+ *   - Field: BN254 scalar field (21888242871839275222246405745257275088548364400416034343698204186575808495617)
+ *   - S-box: x^5 (alpha = 5)
+ *   - Full rounds (RF): 8
+ *   - Partial rounds (RP): varies by width (56 for t=3, 57 for t=4-7)
+ *   - Round constants: IAIK/circomlib BN254 Poseidon constants
+ *   - MDS matrix: Cauchy construction from the Poseidon paper
+ *
+ * WARNING: Do NOT use bb.poseidon2Hash() - that is Poseidon2 (Aztec variant)
+ * which uses different round constants, a different partial round structure,
+ * and produces different outputs. Noir's eddsa_poseidon_verify uses original Poseidon.
+ */
+/** BN254 scalar field modulus */
+export declare const BN254_FIELD_ORDER = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
+/**
+ * Compute Poseidon hash matching Noir's std::hash::poseidon::bn254.
+ *
+ * @param inputs - 2 to 6 field elements (bigints < BN254_FIELD_ORDER)
+ * @returns The Poseidon hash as a bigint
+ * @throws If arity is not 2-6 or inputs are out of range
+ */
+export declare function poseidonHash(...inputs: bigint[]): bigint;
+/**
+ * Poseidon hash for EdDSA verification: H(R8.x, R8.y, A.x, A.y, msg)
+ * This is the exact hash used inside Noir's eddsa_poseidon_verify.
+ */
+export declare function poseidonHashEdDSA(r8x: bigint, r8y: bigint, ax: bigint, ay: bigint, msg: bigint): bigint;
+//# sourceMappingURL=poseidon.d.ts.map

package/dist/sdk/src/poseidon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"poseidon.d.ts","sourceRoot":"","sources":["../../../sdk/src/poseidon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAQH,iCAAiC;AACjC,eAAO,MAAM,iBAAiB,iFAAiF,CAAC;AAUhH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAcxD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,EACX,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,MAAM,GACV,MAAM,CAER"}

package/dist/sdk/src/poseidon.js

@@ -0,0 +1,59 @@
+/**
+ * Poseidon hash wrapper - uses poseidon-lite which implements the original
+ * Poseidon hash (circomlib/IAIK BN254 constants).
+ *
+ * This matches Noir's std::hash::poseidon::bn254 exactly because both use
+ * the same parameter set:
+ *   - Field: BN254 scalar field (21888242871839275222246405745257275088548364400416034343698204186575808495617)
+ *   - S-box: x^5 (alpha = 5)
+ *   - Full rounds (RF): 8
+ *   - Partial rounds (RP): varies by width (56 for t=3, 57 for t=4-7)
+ *   - Round constants: IAIK/circomlib BN254 Poseidon constants
+ *   - MDS matrix: Cauchy construction from the Poseidon paper
+ *
+ * WARNING: Do NOT use bb.poseidon2Hash() - that is Poseidon2 (Aztec variant)
+ * which uses different round constants, a different partial round structure,
+ * and produces different outputs. Noir's eddsa_poseidon_verify uses original Poseidon.
+ */
+import { poseidon2 } from 'poseidon-lite/poseidon2';
+import { poseidon3 } from 'poseidon-lite/poseidon3';
+import { poseidon4 } from 'poseidon-lite/poseidon4';
+import { poseidon5 } from 'poseidon-lite/poseidon5';
+import { poseidon6 } from 'poseidon-lite/poseidon6';
+/** BN254 scalar field modulus */
+export const BN254_FIELD_ORDER = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
+const hashFns = {
+    2: (inputs) => poseidon2(inputs),
+    3: (inputs) => poseidon3(inputs),
+    4: (inputs) => poseidon4(inputs),
+    5: (inputs) => poseidon5(inputs),
+    6: (inputs) => poseidon6(inputs),
+};
+/**
+ * Compute Poseidon hash matching Noir's std::hash::poseidon::bn254.
+ *
+ * @param inputs - 2 to 6 field elements (bigints < BN254_FIELD_ORDER)
+ * @returns The Poseidon hash as a bigint
+ * @throws If arity is not 2-6 or inputs are out of range
+ */
+export function poseidonHash(...inputs) {
+    const arity = inputs.length;
+    if (arity < 2 || arity > 6) {
+        throw new Error(`poseidonHash: unsupported arity ${arity} (must be 2-6)`);
+    }
+    for (let i = 0; i < inputs.length; i++) {
+        if (inputs[i] < 0n || inputs[i] >= BN254_FIELD_ORDER) {
+            throw new Error(`poseidonHash: input[${i}] out of BN254 field range`);
+        }
+    }
+    const fn = hashFns[arity];
+    return fn(inputs);
+}
+/**
+ * Poseidon hash for EdDSA verification: H(R8.x, R8.y, A.x, A.y, msg)
+ * This is the exact hash used inside Noir's eddsa_poseidon_verify.
+ */
+export function poseidonHashEdDSA(r8x, r8y, ax, ay, msg) {
+    return poseidonHash(r8x, r8y, ax, ay, msg);
+}
+//# sourceMappingURL=poseidon.js.map

package/dist/sdk/src/poseidon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poseidon.js","sourceRoot":"","sources":["../../../sdk/src/poseidon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,iCAAiC;AACjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,8EAA8E,CAAC;AAEhH,MAAM,OAAO,GAAiD;IAC5D,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;IAChC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;IAChC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;IAChC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;IAChC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;CACjC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,GAAG,MAAgB;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,gBAAgB,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,iBAAiB,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,GAAW,EACX,EAAU,EACV,EAAU,EACV,GAAW;IAEX,OAAO,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAC7C,CAAC"}

package/dist/sdk/src/proof-request.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Proof request/response protocol for REPUTRANS.
+ *
+ * Defines the types an Arbiter uses to request proofs from a Provar,
+ * and the response format the Provar returns.
+ */
+export type PredicateOperator = 'gte' | 'lte';
+export interface Predicate {
+    /** The credential field name to check. */
+    field: string;
+    /** Comparison operator: gte (>=) or lte (<=). */
+    operator: PredicateOperator;
+    /** The threshold value for comparison. */
+    threshold: bigint;
+}
+export interface ProofRequest {
+    /** Expected credential type (e.g. "ReputationCredential"). */
+    credentialType: string;
+    /** Field names the Provar must disclose (revealed to Arbiter). */
+    disclosedFields: string[];
+    /** Range predicates the Provar must satisfy. */
+    predicates: Predicate[];
+    /** Optional context for nullifier computation (replay prevention). */
+    nullifierContext?: string;
+    /** Optional: issuer public key the Arbiter trusts. */
+    trustedIssuerPubKey?: {
+        x: string;
+        y: string;
+    };
+}
+export interface ProofResponse {
+    /** The ZK proof bytes. */
+    proof: Uint8Array;
+    /** Public inputs to the circuit (hex strings). */
+    publicInputs: string[];
+    /** Values of disclosed fields. */
+    disclosedValues: Record<string, unknown>;
+    /** Nullifier for replay prevention (if requested). */
+    nullifier?: string;
+    /** Proof generation time in milliseconds. */
+    generationTimeMs?: number;
+}
+export declare class ProofRequestError extends Error {
+    constructor(message: string);
+}
+/**
+ * Validate a proof request has well-formed structure.
+ */
+export declare function validateProofRequest(req: ProofRequest): void;
+/**
+ * Create a simple proof request for field disclosure only.
+ */
+export declare function createDisclosureRequest(credentialType: string, fields: string[], nullifierContext?: string): ProofRequest;
+/**
+ * Create a proof request with range predicates.
+ */
+export declare function createRangeRequest(credentialType: string, predicates: Predicate[], disclosedFields?: string[], nullifierContext?: string): ProofRequest;
+//# sourceMappingURL=proof-request.d.ts.map

package/dist/sdk/src/proof-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-request.d.ts","sourceRoot":"","sources":["../../../sdk/src/proof-request.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,CAAC;AAE9C,MAAM,WAAW,SAAS;IACxB,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,iDAAiD;IACjD,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,YAAY;IAC3B,8DAA8D;IAC9D,cAAc,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gDAAgD;IAChD,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,sEAAsE;IACtE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sDAAsD;IACtD,mBAAmB,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAID,MAAM,WAAW,aAAa;IAC5B,0BAA0B;IAC1B,KAAK,EAAE,UAAU,CAAC;IAClB,kDAAkD;IAClD,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,kCAAkC;IAClC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAID,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAkC5D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,MAAM,EACtB,MAAM,EAAE,MAAM,EAAE,EAChB,gBAAgB,CAAC,EAAE,MAAM,GACxB,YAAY,CAOd;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,SAAS,EAAE,EACvB,eAAe,GAAE,MAAM,EAAO,EAC9B,gBAAgB,CAAC,EAAE,MAAM,GACxB,YAAY,CAOd"}

package/dist/sdk/src/proof-request.js

@@ -0,0 +1,68 @@
+/**
+ * Proof request/response protocol for REPUTRANS.
+ *
+ * Defines the types an Arbiter uses to request proofs from a Provar,
+ * and the response format the Provar returns.
+ */
+// -- Validation --
+export class ProofRequestError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ProofRequestError';
+    }
+}
+/**
+ * Validate a proof request has well-formed structure.
+ */
+export function validateProofRequest(req) {
+    if (!req.credentialType || typeof req.credentialType !== 'string') {
+        throw new ProofRequestError('credentialType is required');
+    }
+    if (!Array.isArray(req.disclosedFields)) {
+        throw new ProofRequestError('disclosedFields must be an array');
+    }
+    if (!Array.isArray(req.predicates)) {
+        throw new ProofRequestError('predicates must be an array');
+    }
+    for (const pred of req.predicates) {
+        if (!pred.field || typeof pred.field !== 'string') {
+            throw new ProofRequestError('Each predicate must have a field name');
+        }
+        if (pred.operator !== 'gte' && pred.operator !== 'lte') {
+            throw new ProofRequestError(`Invalid operator: ${pred.operator} (must be gte or lte)`);
+        }
+        if (typeof pred.threshold !== 'bigint') {
+            throw new ProofRequestError(`Predicate threshold must be a bigint`);
+        }
+    }
+    // Disclosed fields and predicate fields should not overlap
+    const disclosed = new Set(req.disclosedFields);
+    for (const pred of req.predicates) {
+        if (disclosed.has(pred.field)) {
+            throw new ProofRequestError(`Field "${pred.field}" is both disclosed and has a predicate - this leaks information`);
+        }
+    }
+}
+/**
+ * Create a simple proof request for field disclosure only.
+ */
+export function createDisclosureRequest(credentialType, fields, nullifierContext) {
+    return {
+        credentialType,
+        disclosedFields: fields,
+        predicates: [],
+        nullifierContext,
+    };
+}
+/**
+ * Create a proof request with range predicates.
+ */
+export function createRangeRequest(credentialType, predicates, disclosedFields = [], nullifierContext) {
+    return {
+        credentialType,
+        disclosedFields,
+        predicates,
+        nullifierContext,
+    };
+}
+//# sourceMappingURL=proof-request.js.map

package/dist/sdk/src/proof-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-request.js","sourceRoot":"","sources":["../../../sdk/src/proof-request.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA6CH,mBAAmB;AAEnB,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAiB;IACpD,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QAClE,MAAM,IAAI,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,iBAAiB,CAAC,kCAAkC,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,iBAAiB,CAAC,6BAA6B,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,IAAI,iBAAiB,CAAC,uCAAuC,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvD,MAAM,IAAI,iBAAiB,CAAC,qBAAqB,IAAI,CAAC,QAAQ,uBAAuB,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,IAAI,iBAAiB,CAAC,sCAAsC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,iBAAiB,CACzB,UAAU,IAAI,CAAC,KAAK,kEAAkE,CACvF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB,CACrC,cAAsB,EACtB,MAAgB,EAChB,gBAAyB;IAEzB,OAAO;QACL,cAAc;QACd,eAAe,EAAE,MAAM;QACvB,UAAU,EAAE,EAAE;QACd,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,cAAsB,EACtB,UAAuB,EACvB,kBAA4B,EAAE,EAC9B,gBAAyB;IAEzB,OAAO;QACL,cAAc;QACd,eAAe;QACf,UAAU;QACV,gBAAgB;KACjB,CAAC;AACJ,CAAC"}

package/dist/sdk/src/prover.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Proof generation for REPUTRANS Provars.
+ *
+ * Supports both browser (WASM) and Node.js environments via
+ * @noir-lang/noir_js and @noir-lang/backend_barretenberg.
+ *
+ * Usage:
+ *   const prover = await createProver(circuitJson);
+ *   const response = await prover.generateProof(credential, privateKey, request);
+ *   await prover.destroy();
+ */
+import { type VerifiableCredential } from './vc-parser.js';
+import type { ProofRequest, ProofResponse } from './proof-request.js';
+export interface CompiledCircuit {
+    bytecode: string;
+    abi: {
+        parameters: Array<{
+            name: string;
+            type: {
+                kind: string;
+            };
+            visibility: string;
+        }>;
+    };
+    [key: string]: unknown;
+}
+export interface Prover {
+    /** Generate a ZK proof for a credential against a proof request. */
+    generateProof(credential: VerifiableCredential, issuerPrivateKey: bigint, request: ProofRequest, masterSecret: bigint): Promise<ProofResponse>;
+    /** Destroy the prover and free WASM resources. */
+    destroy(): Promise<void>;
+}
+/**
+ * Create a prover instance from a compiled circuit JSON.
+ * Auto-detects browser vs Node.js environment.
+ */
+export declare function createProver(circuit: CompiledCircuit): Promise<Prover>;
+//# sourceMappingURL=prover.d.ts.map

package/dist/sdk/src/prover.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prover.d.ts","sourceRoot":"","sources":["../../../sdk/src/prover.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEjF,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGtE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE;QACH,UAAU,EAAE,KAAK,CAAC;YAChB,IAAI,EAAE,MAAM,CAAC;YACb,IAAI,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAA;aAAE,CAAC;YACvB,UAAU,EAAE,MAAM,CAAC;SACpB,CAAC,CAAC;KACJ,CAAC;IACF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,MAAM;IACrB,oEAAoE;IACpE,aAAa,CACX,UAAU,EAAE,oBAAoB,EAChC,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,YAAY,EACrB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,CAAC,CAAC;IAE1B,kDAAkD;IAClD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CA+F5E"}

package/dist/sdk/src/prover.js

@@ -0,0 +1,108 @@
+/**
+ * Proof generation for REPUTRANS Provars.
+ *
+ * Supports both browser (WASM) and Node.js environments via
+ * @noir-lang/noir_js and @noir-lang/backend_barretenberg.
+ *
+ * Usage:
+ *   const prover = await createProver(circuitJson);
+ *   const response = await prover.generateProof(credential, privateKey, request);
+ *   await prover.destroy();
+ */
+import { sign } from './eddsa.js';
+import { encodeCredential } from './encoder.js';
+import { extractSubjectFields } from './vc-parser.js';
+import { computeNullifier, contextToField } from './identity.js';
+/**
+ * Create a prover instance from a compiled circuit JSON.
+ * Auto-detects browser vs Node.js environment.
+ */
+export async function createProver(circuit) {
+    // Dynamic imports for environment compatibility
+    const { Noir } = await import('@noir-lang/noir_js');
+    const { BarretenbergBackend } = await import('@noir-lang/backend_barretenberg');
+    const backend = new BarretenbergBackend(circuit);
+    const noir = new Noir(circuit);
+    return {
+        async generateProof(credential, issuerPrivateKey, request, masterSecret) {
+            const startTime = Date.now();
+            // 1. Encode credential fields into Merkle tree
+            const fields = extractSubjectFields(credential);
+            const encoded = encodeCredential(fields);
+            // 2. Sign the credential root with issuer key
+            const { signature, publicKey } = sign(issuerPrivateKey, encoded.merkleRoot);
+            // 3. Resolve field indices for disclosure and predicates
+            const disclosedIdx = resolveFieldIndex(encoded, request.disclosedFields[0] ?? '');
+            const predicateField = request.predicates[0];
+            const rangeIdx = predicateField
+                ? resolveFieldIndex(encoded, predicateField.field)
+                : 0;
+            // 4. Compute nullifier if requested
+            let nullifier;
+            let nullifierValue = 0n;
+            if (request.nullifierContext) {
+                const ctxField = contextToField(request.nullifierContext);
+                nullifierValue = computeNullifier(masterSecret, ctxField);
+                nullifier = '0x' + nullifierValue.toString(16);
+            }
+            // 5. Build circuit inputs matching composite/src/main.nr
+            const inputs = {
+                // Signature verification
+                pub_key_x: publicKey.x.toString(),
+                pub_key_y: publicKey.y.toString(),
+                signature_r8_x: signature.r8.x.toString(),
+                signature_r8_y: signature.r8.y.toString(),
+                signature_s: signature.s.toString(),
+                msg: encoded.merkleRoot.toString(),
+                // Field disclosure
+                credential_root: encoded.merkleRoot.toString(),
+                disclosed_field_value: encoded.fieldValues[disclosedIdx].toString(),
+                disclosed_field_index: disclosedIdx.toString(),
+                disclosed_merkle_path: encoded.merklePaths[disclosedIdx].siblings.map(String),
+                disclosed_path_indices: encoded.merklePaths[disclosedIdx].indices.map(String),
+                // Range proof
+                range_field_value: predicateField
+                    ? encoded.fieldValues[rangeIdx].toString()
+                    : '0',
+                range_field_index: rangeIdx.toString(),
+                range_merkle_path: encoded.merklePaths[rangeIdx].siblings.map(String),
+                range_path_indices: encoded.merklePaths[rangeIdx].indices.map(String),
+                range_threshold: predicateField
+                    ? predicateField.threshold.toString()
+                    : '0',
+                range_comparison_type: predicateField
+                    ? (predicateField.operator === 'gte' ? '0' : '1')
+                    : '0',
+            };
+            // 6. Generate proof
+            const { witness } = await noir.execute(inputs);
+            const proof = await backend.generateProof(witness);
+            // 7. Build disclosed values
+            const disclosedValues = {};
+            for (const fieldName of request.disclosedFields) {
+                disclosedValues[fieldName] = fields[fieldName];
+            }
+            return {
+                proof: proof.proof,
+                publicInputs: proof.publicInputs,
+                disclosedValues,
+                nullifier,
+                generationTimeMs: Date.now() - startTime,
+            };
+        },
+        async destroy() {
+            await backend.destroy?.();
+        },
+    };
+}
+/**
+ * Resolve a field name to its leaf index in the encoded credential.
+ */
+function resolveFieldIndex(encoded, fieldName) {
+    const idx = encoded.fieldNames.indexOf(fieldName);
+    if (idx < 0) {
+        throw new Error(`Unknown credential field "${fieldName}". Available fields: ${encoded.fieldNames.join(', ')}`);
+    }
+    return idx;
+}
+//# sourceMappingURL=prover.js.map

package/dist/sdk/src/prover.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prover.js","sourceRoot":"","sources":["../../../sdk/src/prover.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,IAAI,EAAgB,MAAM,YAAY,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAA0B,MAAM,cAAc,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAA6B,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AA6BjE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAwB;IACzD,gDAAgD;IAChD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAEhF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,OAAc,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAc,CAAC,CAAC;IAEtC,OAAO;QACL,KAAK,CAAC,aAAa,CACjB,UAAgC,EAChC,gBAAwB,EACxB,OAAqB,EACrB,YAAoB;YAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE7B,+CAA+C;YAC/C,MAAM,MAAM,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAEzC,8CAA8C;YAC9C,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAE5E,yDAAyD;YACzD,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,MAAM,cAAc,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,cAAc;gBAC7B,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC;gBAClD,CAAC,CAAC,CAAC,CAAC;YAEN,oCAAoC;YACpC,IAAI,SAA6B,CAAC;YAClC,IAAI,cAAc,GAAG,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;gBAC1D,cAAc,GAAG,gBAAgB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;gBAC1D,SAAS,GAAG,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACjD,CAAC;YAED,yDAAyD;YACzD,MAAM,MAAM,GAAsC;gBAChD,yBAAyB;gBACzB,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;gBACjC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;gBACjC,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;gBACzC,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;gBACzC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE;gBACnC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAElC,mBAAmB;gBACnB,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC9C,qBAAqB,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE;gBACnE,qBAAqB,EAAE,YAAY,CAAC,QAAQ,EAAE;gBAC9C,qBAAqB,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7E,sBAAsB,EAAE,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAE7E,cAAc;gBACd,iBAAiB,EAAE,cAAc;oBAC/B,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE;oBAC1C,CAAC,CAAC,GAAG;gBACP,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,EAAE;gBACtC,iBAAiB,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBACrE,kBAAkB,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBACrE,eAAe,EAAE,cAAc;oBAC7B,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,QAAQ,EAAE;oBACrC,CAAC,CAAC,GAAG;gBACP,qBAAqB,EAAE,cAAc;oBACnC,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;oBACjD,CAAC,CAAC,GAAG;aACR,CAAC;YAEF,oBAAoB;YACpB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YAEnD,4BAA4B;YAC5B,MAAM,eAAe,GAA4B,EAAE,CAAC;YACpD,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAChD,eAAe,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YACjD,CAAC;YAED,OAAO;gBACL,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,eAAe;gBACf,SAAS;gBACT,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;aACzC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,OAAO;YACX,MAAO,OAAe,CAAC,OAAO,EAAE,EAAE,CAAC;QACrC,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,OAA0B,EAAE,SAAiB;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,6BAA6B,SAAS,wBAAwB,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/sdk/src/vc-parser.d.ts

@@ -0,0 +1,50 @@
+/**
+ * W3C Verifiable Credential parser for REPUTRANS.
+ *
+ * Parses W3C VC JSON-LD into typed objects, validates required fields,
+ * and extracts credentialSubject for downstream encoding.
+ */
+export interface CredentialProof {
+    type: string;
+    created?: string;
+    verificationMethod?: string;
+    proofPurpose?: string;
+    proofValue?: string;
+    [key: string]: unknown;
+}
+export interface CredentialSubject {
+    id?: string;
+    [key: string]: unknown;
+}
+export interface VerifiableCredential {
+    '@context': string | string[];
+    type: string | string[];
+    issuer: string | {
+        id: string;
+        [key: string]: unknown;
+    };
+    issuanceDate?: string;
+    credentialSubject: CredentialSubject;
+    proof: CredentialProof;
+    id?: string;
+    expirationDate?: string;
+    [key: string]: unknown;
+}
+export declare class VCParseError extends Error {
+    constructor(message: string);
+}
+/**
+ * Parse a W3C Verifiable Credential from a JSON string or object.
+ * Validates all required fields are present.
+ */
+export declare function parseVC(input: string | Record<string, unknown>): VerifiableCredential;
+/**
+ * Extract credentialSubject fields as a flat key-value map.
+ * Nested objects are JSON-stringified.
+ */
+export declare function extractSubjectFields(vc: VerifiableCredential): Record<string, string>;
+/**
+ * Get the issuer ID string regardless of issuer format.
+ */
+export declare function getIssuerId(vc: VerifiableCredential): string;
+//# sourceMappingURL=vc-parser.d.ts.map

package/dist/sdk/src/vc-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vc-parser.d.ts","sourceRoot":"","sources":["../../../sdk/src/vc-parser.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC9B,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,iBAAiB,CAAC;IACrC,KAAK,EAAE,eAAe,CAAC;IACvB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,qBAAa,YAAa,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI5B;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,oBAAoB,CA0DrF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAWrF;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,oBAAoB,GAAG,MAAM,CAG5D"}