verdifax 0.2.2 → 0.2.3

package/README.md

@@ -39,7 +39,7 @@ console.log(`Sealed run ${run.run_id}, manifest hash ${run.manifest.ManifestHash
 // Verify the seal recomputes correctly.
 const v = await client.verifyRun(run.run_id);
 if (v.verified) {
-  console.log("✓ Manifest hash recomputes — run is intact.");
+  console.log("✓ Manifest hash recomputes, run is intact.");
 }
 ```
 
@@ -73,7 +73,7 @@ curl -X POST https://api.verdifax.com/admin/keys \
   -d '{"name": "node-sdk-prod"}'
 ```
 
-The response carries the secret **once** — store it immediately.
+The response carries the secret **once**, store it immediately.
 
 ## Error handling
 
@@ -91,18 +91,18 @@ try {
   } else if (err instanceof AuthError) {
     // missing or invalid API key
   } else if (err instanceof APIError) {
-    // every other non-2xx — err.status carries the HTTP code
+    // every other non-2xx, err.status carries the HTTP code
   }
 }
 ```
 
 ## Trust model
 
-This SDK only mediates HTTP I/O — it does NOT verify sealed
+This SDK only mediates HTTP I/O, it does NOT verify sealed
 manifests on its own. For offline verification with no Verdifax
 dependency, use the [`verdifax-pepg-verify`](https://github.com/Verdifax/verdifax-orchestrator/tree/main/cmd/verdifax-pepg-verify)
 CLI (signed binary distributed via GitHub Releases).
 
 ## License
 
-MIT — see [LICENSE](LICENSE).
+MIT, see [LICENSE](LICENSE).

package/dist/index.d.mts

@@ -6,7 +6,7 @@
  * adds a new field, update this file alongside the OpenAPI to
  * keep the SDK's surface in sync.
  */
-/** A 64-character lowercase hex string — the canonical §0
+/** A 64-character lowercase hex string, the canonical §0
  *  SHA-256 encoding. Aliased rather than newtyped so callers
  *  pass plain strings without ceremony. */
 type Hex64 = string;
@@ -59,7 +59,7 @@ interface ExecuteResponse {
  * Sealed manifest. Field names match the orchestrator's Go-default
  * JSON encoding (CapitalCamelCase).
  *
- * Subset of the canonical fields — see the orchestrator's
+ * Subset of the canonical fields, see the orchestrator's
  * `internal/pipeline/types.go` for the full struct. The fields
  * listed here are the ones every Track-2 / Track-3 / Track-5
  * surface depends on.
@@ -136,10 +136,10 @@ interface ClientConfig {
 /** Friendly shape for {@link VerdifaxClient.attest}. Mirrors the
  *  Python SDK's `attest()` signature so polyglot teams have parity. */
 interface AttestRequest {
-    /** Raw bytes — auto-base64-encoded before sending. Mutually
+    /** Raw bytes, auto-base64-encoded before sending. Mutually
      *  exclusive with `payload_text`. */
     payload?: Buffer | Uint8Array;
-    /** Plain-text payload — sent as-is. Mutually exclusive with
+    /** Plain-text payload, sent as-is. Mutually exclusive with
      *  `payload`. */
     payload_text?: string;
     program_id: Hex64;
@@ -211,7 +211,7 @@ interface DCAEVerdict {
     engine_version: string;
 }
 /** Body returned by `POST /admin/keys`. The `secret` field is
- *  shown ONCE — store it immediately. */
+ *  shown ONCE, store it immediately. */
 interface AdminCreateKeyResponse {
     ok: boolean;
     id: number;
@@ -220,7 +220,7 @@ interface AdminCreateKeyResponse {
     hint: string;
 }
 /** Projection returned by {@link VerdifaxClient.adminListKeys}.
- *  Secrets are NEVER surfaced — only metadata. */
+ *  Secrets are NEVER surfaced, only metadata. */
 interface AdminAPIKey {
     id: number;
     name: string;
@@ -261,7 +261,7 @@ interface AdminAPIKey {
  *
  * Idempotent GETs that hit a transient failure (502/503/504/429)
  * are retried with exponential backoff + full jitter. Non-
- * idempotent methods (POST, PUT, DELETE) are NOT retried — replay
+ * idempotent methods (POST, PUT, DELETE) are NOT retried, replay
  * is the caller's responsibility.
  */
 declare class VerdifaxClient {
@@ -276,7 +276,7 @@ declare class VerdifaxClient {
     version(): Promise<VerdifaxVersion>;
     execute(req: ExecuteRequest): Promise<ExecuteResponse>;
     /** High-level convenience wrapper around `execute()`. Accepts
-     *  either a Buffer (for binary payloads — auto-base64) or a
+     *  either a Buffer (for binary payloads, auto-base64) or a
      *  string (for plain text). Validates the hex fields and
      *  routes the call through to the canonical /execute. */
     attest(req: AttestRequest): Promise<ExecuteResponse>;
@@ -325,7 +325,7 @@ declare class VerdifaxClient {
 }
 
 /**
- * Environment-variable constructor — mirrors the Python SDK's
+ * Environment-variable constructor, mirrors the Python SDK's
  * `from_env()` and the Go SDK's `FromEnv()` for polyglot parity.
  *
  * Variables consumed (identical names across SDKs):
@@ -340,14 +340,14 @@ declare class VerdifaxClient {
 declare function fromEnv(): VerdifaxClient;
 
 /**
- * Input-validation helpers — mirrors the Python SDK's
+ * Input-validation helpers, mirrors the Python SDK's
  * `_validation.py` and the Go SDK's `validation.go` for
  * cross-language parity.
  *
  * Every helper throws (rather than returning a boolean) so the
  * SDK's type system surfaces the failure as a typed error.
  */
-/** Throws unless `value` is exactly 64 lowercase hex characters —
+/** Throws unless `value` is exactly 64 lowercase hex characters ,
  *  the §0-canonical SHA-256 encoding the orchestrator expects for
  *  program_id, registry_record_hash, manifest_hash, and
  *  ciphertext_hash. */
@@ -380,14 +380,14 @@ declare function validateRouteId(value: string): void;
 declare class VerdifaxError extends Error {
     readonly name: string;
 }
-/** HTTP 401 — missing or invalid API key. */
+/** HTTP 401, missing or invalid API key. */
 declare class AuthError extends VerdifaxError {
     readonly status: number;
     readonly message: string;
     readonly name: string;
     constructor(status: number, message: string);
 }
-/** HTTP 404 — resource not found. Carries the path that 404'd
+/** HTTP 404, resource not found. Carries the path that 404'd
  *  for easier diagnosis. */
 declare class NotFoundError extends VerdifaxError {
     readonly path: string;

package/dist/index.d.ts

@@ -6,7 +6,7 @@
  * adds a new field, update this file alongside the OpenAPI to
  * keep the SDK's surface in sync.
  */
-/** A 64-character lowercase hex string — the canonical §0
+/** A 64-character lowercase hex string, the canonical §0
  *  SHA-256 encoding. Aliased rather than newtyped so callers
  *  pass plain strings without ceremony. */
 type Hex64 = string;
@@ -59,7 +59,7 @@ interface ExecuteResponse {
  * Sealed manifest. Field names match the orchestrator's Go-default
  * JSON encoding (CapitalCamelCase).
  *
- * Subset of the canonical fields — see the orchestrator's
+ * Subset of the canonical fields, see the orchestrator's
  * `internal/pipeline/types.go` for the full struct. The fields
  * listed here are the ones every Track-2 / Track-3 / Track-5
  * surface depends on.
@@ -136,10 +136,10 @@ interface ClientConfig {
 /** Friendly shape for {@link VerdifaxClient.attest}. Mirrors the
  *  Python SDK's `attest()` signature so polyglot teams have parity. */
 interface AttestRequest {
-    /** Raw bytes — auto-base64-encoded before sending. Mutually
+    /** Raw bytes, auto-base64-encoded before sending. Mutually
      *  exclusive with `payload_text`. */
     payload?: Buffer | Uint8Array;
-    /** Plain-text payload — sent as-is. Mutually exclusive with
+    /** Plain-text payload, sent as-is. Mutually exclusive with
      *  `payload`. */
     payload_text?: string;
     program_id: Hex64;
@@ -211,7 +211,7 @@ interface DCAEVerdict {
     engine_version: string;
 }
 /** Body returned by `POST /admin/keys`. The `secret` field is
- *  shown ONCE — store it immediately. */
+ *  shown ONCE, store it immediately. */
 interface AdminCreateKeyResponse {
     ok: boolean;
     id: number;
@@ -220,7 +220,7 @@ interface AdminCreateKeyResponse {
     hint: string;
 }
 /** Projection returned by {@link VerdifaxClient.adminListKeys}.
- *  Secrets are NEVER surfaced — only metadata. */
+ *  Secrets are NEVER surfaced, only metadata. */
 interface AdminAPIKey {
     id: number;
     name: string;
@@ -261,7 +261,7 @@ interface AdminAPIKey {
  *
  * Idempotent GETs that hit a transient failure (502/503/504/429)
  * are retried with exponential backoff + full jitter. Non-
- * idempotent methods (POST, PUT, DELETE) are NOT retried — replay
+ * idempotent methods (POST, PUT, DELETE) are NOT retried, replay
  * is the caller's responsibility.
  */
 declare class VerdifaxClient {
@@ -276,7 +276,7 @@ declare class VerdifaxClient {
     version(): Promise<VerdifaxVersion>;
     execute(req: ExecuteRequest): Promise<ExecuteResponse>;
     /** High-level convenience wrapper around `execute()`. Accepts
-     *  either a Buffer (for binary payloads — auto-base64) or a
+     *  either a Buffer (for binary payloads, auto-base64) or a
      *  string (for plain text). Validates the hex fields and
      *  routes the call through to the canonical /execute. */
     attest(req: AttestRequest): Promise<ExecuteResponse>;
@@ -325,7 +325,7 @@ declare class VerdifaxClient {
 }
 
 /**
- * Environment-variable constructor — mirrors the Python SDK's
+ * Environment-variable constructor, mirrors the Python SDK's
  * `from_env()` and the Go SDK's `FromEnv()` for polyglot parity.
  *
  * Variables consumed (identical names across SDKs):
@@ -340,14 +340,14 @@ declare class VerdifaxClient {
 declare function fromEnv(): VerdifaxClient;
 
 /**
- * Input-validation helpers — mirrors the Python SDK's
+ * Input-validation helpers, mirrors the Python SDK's
  * `_validation.py` and the Go SDK's `validation.go` for
  * cross-language parity.
  *
  * Every helper throws (rather than returning a boolean) so the
  * SDK's type system surfaces the failure as a typed error.
  */
-/** Throws unless `value` is exactly 64 lowercase hex characters —
+/** Throws unless `value` is exactly 64 lowercase hex characters ,
  *  the §0-canonical SHA-256 encoding the orchestrator expects for
  *  program_id, registry_record_hash, manifest_hash, and
  *  ciphertext_hash. */
@@ -380,14 +380,14 @@ declare function validateRouteId(value: string): void;
 declare class VerdifaxError extends Error {
     readonly name: string;
 }
-/** HTTP 401 — missing or invalid API key. */
+/** HTTP 401, missing or invalid API key. */
 declare class AuthError extends VerdifaxError {
     readonly status: number;
     readonly message: string;
     readonly name: string;
     constructor(status: number, message: string);
 }
-/** HTTP 404 — resource not found. Carries the path that 404'd
+/** HTTP 404, resource not found. Carries the path that 404'd
  *  for easier diagnosis. */
 declare class NotFoundError extends VerdifaxError {
     readonly path: string;

package/dist/index.js

@@ -150,7 +150,7 @@ var VerdifaxClient = class {
     return this.request("POST", "/execute", req);
   }
   /** High-level convenience wrapper around `execute()`. Accepts
-   *  either a Buffer (for binary payloads — auto-base64) or a
+   *  either a Buffer (for binary payloads, auto-base64) or a
    *  string (for plain text). Validates the hex fields and
    *  routes the call through to the canonical /execute. */
   async attest(req) {
@@ -260,7 +260,7 @@ var VerdifaxClient = class {
     const buf = await resp.arrayBuffer();
     return Buffer.from(buf);
   }
-  // ── CRES — deletion receipts (auth) ──────────────────────────
+  // ── CRES, deletion receipts (auth) ──────────────────────────
   async listDeletionReceipts(runId) {
     this.requireAPIKey();
     if (runId <= 0) throw new VerdifaxError("verdifax: runId must be > 0");
@@ -342,7 +342,7 @@ var VerdifaxClient = class {
       }
     });
   }
-  // ── HTTP plumbing — retry-aware ──────────────────────────────
+  // ── HTTP plumbing, retry-aware ──────────────────────────────
   async request(method, path, body) {
     const url = this.baseURL + path;
     const headers = {

package/dist/index.mjs

@@ -116,7 +116,7 @@ var VerdifaxClient = class {
     return this.request("POST", "/execute", req);
   }
   /** High-level convenience wrapper around `execute()`. Accepts
-   *  either a Buffer (for binary payloads — auto-base64) or a
+   *  either a Buffer (for binary payloads, auto-base64) or a
    *  string (for plain text). Validates the hex fields and
    *  routes the call through to the canonical /execute. */
   async attest(req) {
@@ -226,7 +226,7 @@ var VerdifaxClient = class {
     const buf = await resp.arrayBuffer();
     return Buffer.from(buf);
   }
-  // ── CRES — deletion receipts (auth) ──────────────────────────
+  // ── CRES, deletion receipts (auth) ──────────────────────────
   async listDeletionReceipts(runId) {
     this.requireAPIKey();
     if (runId <= 0) throw new VerdifaxError("verdifax: runId must be > 0");
@@ -308,7 +308,7 @@ var VerdifaxClient = class {
       }
     });
   }
-  // ── HTTP plumbing — retry-aware ──────────────────────────────
+  // ── HTTP plumbing, retry-aware ──────────────────────────────
   async request(method, path, body) {
     const url = this.baseURL + path;
     const headers = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdifax",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "description": "Official Node.js / TypeScript SDK for the Verdifax orchestrator REST API.",
   "license": "MIT",
   "author": "Verdifax <team@verdifax.com>",