Node.js SDK

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.events.ingest({
  eventType: "policy.approval",
  eventTime: "2026-09-22T08:14:07Z",
  payload: {
    policy_id: "pol_8472",
    approved_by: "risk_committee",
    decision: "approved",
  },
  idempotencyKey: "policy-approval-pol_8472",
});
console.log(result.event_id, result.ingested_at);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const page = await client.events.list({
  page: 1,
  limit: 50,
  eventType: "policy.approval",
});
console.log(page.total, page.has_more);
for (const event of page.events) {
  console.log(event.event_id, event.ingested_at, event.payload_hash);
}

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const event = await client.events.get("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4");
console.log(event.event_type, event.ingested_at);
console.log(event.payload_hash, event.event_hash, event.request_hash);
console.log(event.payload);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.events.verify("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4", {
  payload: {
    policy_id: "pol_8472",
    approved_by: "risk_committee",
    decision: "approved",
  },
});
console.log(result.match_result, result.matched_field);
console.log(result.anchored_hash, result.submitted_hash, result.anchored_at);

import { readFileSync } from "node:fs";
import { createHash } from "node:crypto";
import { InvoanceClient } from "invoance";

const file = readFileSync("./INV-2026-0917.pdf");
const documentHash = createHash("sha256").update(file).digest("hex");

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.documents.anchor({
  documentHash,
  documentRef: "INV-2026-0917.pdf",
  eventType: "invoice.issued",
  metadata: { invoice_number: "INV-2026-0917", amount: 5230, currency: "USD" },
  idempotencyKey: "anchor-" + documentHash,
});
console.log(result.event_id, result.status);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const page = await client.documents.list({
  limit: 25,
  dateFrom: "2026-09-01T00:00:00Z",
});
console.log(page.total, page.has_more);
for (const d of page.documents) {
  console.log(d.event_id, d.document_ref, d.has_original);
}

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const doc = await client.documents.get("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4");
console.log(doc.document_hash, doc.has_original, doc.created_at);
console.log(doc.organization?.issuer_name, doc.organization?.domain_verified);

import { writeFileSync } from "node:fs";
import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const bytes = await client.documents.getOriginal("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4");
writeFileSync("./INV-2026-0917.pdf", Buffer.from(bytes));
console.log(bytes.byteLength);

import { readFileSync } from "node:fs";
import { createHash } from "node:crypto";
import { InvoanceClient } from "invoance";

const file = readFileSync("./INV-2026-0917.pdf");
const documentHash = createHash("sha256").update(file).digest("hex");

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.documents.verify("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4", {
  documentHash,
});
console.log(result.match_result, result.anchored_hash, result.anchored_at);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.attestations.ingest({
  type: "output",
  input: "Summarize the termination clause in contract CT-8472.",
  output: "Either party may terminate with 30 days written notice. Early termination fees do not apply after month 12.",
  modelProvider: "openai",
  modelName: "gpt-4.1",
  modelVersion: "2026-04-14",
  subject: { userId: "u_4821", sessionId: "sess_9f3a", department: "legal" },
  idempotencyKey: "ct-8472-summary-1",
});
console.log(result.attestation_id, result.payload_hash);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const page = await client.attestations.list({
  limit: 50,
  attestationType: "output",
  modelProvider: "openai",
});
console.log(page.total, page.has_more, page.attestations.length);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const att = await client.attestations.get("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4");
console.log(att.attestation_hash, att.signature_alg, att.public_key);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const raw = await client.attestations.getRaw("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4");
console.log(raw.type, raw.context);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.attestations.verify("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4", {
  contentHash: "c4efe15781214a84046ad7e0592977c634a5cf45f4c1e06160daf760a295a8df",
});
console.log(result.match_result, result.matched_field);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const trace = await client.traces.create({
  label: "Invoice batch 2026-09",
  metadata: { batch_id: "b_4471", region: "eu-west" },
});
console.log(trace.trace_id, trace.status);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const page = await client.traces.list({ status: "open", page: 1, limit: 25 });
for (const trace of page.traces) {
  console.log(trace.trace_id, trace.label, trace.status);
}
console.log(page.total, page.has_more);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const trace = await client.traces.get("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4", {
  event_page: 1,
  event_limit: 50,
});
console.log(trace.status, trace.composite_hash);
for (const event of trace.events) {
  console.log(event.event_id, event.event_type, event.payload_hash);
}

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.traces.delete("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4");
console.log(result.trace_id, result.deleted);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const traceId = "7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4";

const seal = await client.traces.seal(traceId);
console.log(seal.status); // "sealing"

// The seal runs in the background. Poll until the status changes.
let trace = await client.traces.get(traceId);
while (trace.status === "sealing") {
  await new Promise((resolve) => setTimeout(resolve, 1000));
  trace = await client.traces.get(traceId);
}
console.log(trace.status, trace.composite_hash);

import { createHash } from "node:crypto";
import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const bundle = await client.traces.proof("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4");

// The SDK's TraceProofBundle type declares events and seal_event only; the
// JSON also carries documents and attestations, so read them off the raw object.
const raw = bundle as unknown as {
  events: { timestamp: string; content_hash: string }[];
  documents: { timestamp: string; document_hash: string }[];
  attestations: { timestamp: string; payload_hash: string }[];
};

// Recompute the composite hash: SHA-256 over the raw item hashes in
// timestamp order across events, documents and attestations.
const items = [
  ...raw.events.map((e) => ({ at: e.timestamp, hash: e.content_hash })),
  ...raw.documents.map((d) => ({ at: d.timestamp, hash: d.document_hash })),
  ...raw.attestations.map((a) => ({ at: a.timestamp, hash: a.payload_hash })),
].sort((a, b) => a.at.localeCompare(b.at));

const hasher = createHash("sha256");
for (const item of items) hasher.update(Buffer.from(item.hash, "hex"));
const recomputed = hasher.digest("hex");

console.log(bundle.composite_hash);
console.log(recomputed === bundle.composite_hash ? "composite hash matches" : "mismatch");

import { writeFileSync } from "node:fs";
import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const pdf = await client.traces.proofPdf("7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4");
writeFileSync("trace-proof.pdf", Buffer.from(pdf));
console.log("wrote trace-proof.pdf", pdf.byteLength, "bytes");

// No API key: the public proof endpoint is unauthenticated.
const traceId = "7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4";

const res = await fetch("https://api.invoance.com/v1/proof/trace/" + traceId);
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const proof = await res.json();
console.log(proof.issuer_name, proof.composite_hash);
console.log(proof.events.length, "events", proof.documents.length, "documents", proof.attestations.length, "attestations");

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.audit.events.ingest({
  organizationId: "org_8472",
  action: "user.signed_in",
  occurredAt: "2026-09-22T08:14:07Z",
  actor: { type: "user", id: "u_4821", name: "Ada Lovelace" },
  targets: [{ type: "workspace", id: "ws_17" }],
  context: { location: "203.0.113.10", user_agent: "Mozilla/5.0" },
  metadata: { method: "sso", mfa: true },
  idempotencyKey: "signin-u_4821-2026-09-22T08:14:07Z",
});
console.log(result.event_id, result.ingested_at);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const page = await client.audit.events.list({
  organizationId: "org_8472",
  actions: "user.signed_in,user.signed_out",
  rangeStart: "2026-09-01T00:00:00Z",
  limit: 50,
});
for (const event of page.events) {
  console.log(event.seq, event.action, event.actor?.id);
}
console.log(page.next_cursor);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const event = await client.audit.events.get("aevt_01J0Y1Z2A3B4C5D6E7F8G9H0JK");
console.log(event.seq, event.action, event.payload_hash);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.audit.events.verify("aevt_01J0Y1Z2A3B4C5D6E7F8G9H0JK");
console.log(result.valid, result.reason, result.payload_hash);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const org = await client.audit.orgs.create({
  organizationId: "org_8472",
  name: "Acme Robotics",
});
console.log(org.id, org.retention_days);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.audit.orgs.list({ includeArchived: true });
for (const org of result.orgs as Array<Record<string, unknown>>) {
  console.log(org.id, org.organization_id, org.archived_at);
}

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const org = await client.audit.orgs.update("org_8472", { name: "Acme Robotics Ltd" });
console.log(org.name);

// Pass null to clear the name.
await client.audit.orgs.update("org_8472", { name: null });

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.audit.orgs.delete("org_8472");
console.log(result.deleted, result.id);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const org = await client.audit.orgs.archive("org_8472");
console.log(org.archived_at);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const org = await client.audit.orgs.unarchive("org_8472");
console.log(org.archived_at);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const report = await client.audit.orgs.integrity("org_8472");
console.log(report.contiguous, report.count, report.expected, report.gaps);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.audit.orgs.setRetention("org_8472", 365);
console.log(result.retention_days, result.clamped, result.plan_cap_days);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const stream = await client.audit.streams.create("org_8472", {
  url: "https://siem.example.com/hooks/invoance",
});
// Store signing_secret now; it is not returned again.
console.log(stream.id, stream.signing_secret);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.audit.streams.list("org_8472");
for (const stream of result.streams as Array<Record<string, unknown>>) {
  console.log(stream.id, stream.state, stream.cursor_seq, stream.last_error);
}

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.audit.streams.delete("org_8472", "astr_01J0Y3N5P7R9T1V3X5Z7B9D1FG");
console.log(result.deleted, result.id);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const result = await client.audit.streams.test("org_8472", "astr_01J0Y3N5P7R9T1V3X5Z7B9D1FG");
console.log(result.delivered, result.http_status, result.error);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const session = await client.audit.portalSessions.create({
  organizationId: "org_8472",
  intent: "audit_logs",
  sessionDurationSeconds: 3600,
});
console.log(session.url, session.link_expires_in, session.session_expires_in);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const job = await client.audit.exports.create({
  organizationId: "org_8472",
  format: "ndjson",
  filters: {
    actions: "user.signed_in,user.signed_out",
    occurred_after: "2026-09-01T00:00:00Z",
  },
});
console.log(job.id, job.status);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

let job = await client.audit.exports.get("aexp_01J0Y4Q6S8V0X2Z4B6D8F0H2JK");
while (job.status === "pending" || job.status === "running") {
  await new Promise((r) => setTimeout(r, 5000));
  job = await client.audit.exports.get("aexp_01J0Y4Q6S8V0X2Z4B6D8F0H2JK");
}
console.log(job.status, job.row_count, job.download_url ?? job.error);

// No API key: the exchange is public and the link token is the credential.
const linkToken = process.env.PORTAL_LINK_TOKEN;

const res = await fetch("https://api.invoance.com/v1/audit/portal/exchange", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ token: linkToken }),
});
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const session = await res.json();
console.log(session.intent, session.expires_in);
// session.token is the Bearer token for the /v1/audit/portal/* routes.

// Portal reads use the short-lived JWT from POST /v1/audit/portal/exchange,
// not an API key. PORTAL_TOKEN holds that JWT.
const portalToken = process.env.PORTAL_TOKEN;

const url = new URL("https://api.invoance.com/v1/audit/portal/events");
url.searchParams.set("actions", "user.signed_in");
url.searchParams.set("limit", "50");

const res = await fetch(url, { headers: { Authorization: "Bearer " + portalToken } });
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const page = await res.json();
for (const event of page.events) {
  console.log(event.seq, event.action, event.actor.id);
}
console.log(page.next_cursor);

// Portal reads use the short-lived JWT from POST /v1/audit/portal/exchange,
// not an API key. PORTAL_TOKEN holds that JWT.
const portalToken = process.env.PORTAL_TOKEN;

const res = await fetch("https://api.invoance.com/v1/audit/portal/events/aevt_01J0Y1Z2A3B4C5D6E7F8G9H0JK", {
  headers: { Authorization: "Bearer " + portalToken },
});
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const event = await res.json();
console.log(event.seq, event.action, event.payload_hash);

// Portal reads use the short-lived JWT from POST /v1/audit/portal/exchange,
// not an API key. PORTAL_TOKEN holds that JWT.
const portalToken = process.env.PORTAL_TOKEN;

const res = await fetch("https://api.invoance.com/v1/audit/portal/events/aevt_01J0Y1Z2A3B4C5D6E7F8G9H0JK/verify", {
  headers: { Authorization: "Bearer " + portalToken },
});
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const result = await res.json();
console.log(result.valid, result.reason, result.key_source);

// Portal reads use the short-lived JWT from POST /v1/audit/portal/exchange,
// not an API key. PORTAL_TOKEN holds that JWT.
const portalToken = process.env.PORTAL_TOKEN;

const res = await fetch("https://api.invoance.com/v1/audit/portal/org", {
  headers: { Authorization: "Bearer " + portalToken },
});
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const info = await res.json();
console.log(info.issuer.name, info.org.name, info.intent);

// Portal reads use the short-lived JWT from POST /v1/audit/portal/exchange,
// not an API key. PORTAL_TOKEN holds that JWT.
const portalToken = process.env.PORTAL_TOKEN;

const res = await fetch("https://api.invoance.com/v1/audit/portal/streams", {
  headers: { Authorization: "Bearer " + portalToken },
});
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const { streams } = await res.json();
for (const stream of streams) {
  console.log(stream.id, stream.state, stream.endpoint);
}

// Portal reads use the short-lived JWT from POST /v1/audit/portal/exchange,
// not an API key. PORTAL_TOKEN holds that JWT.
const portalToken = process.env.PORTAL_TOKEN;

const res = await fetch("https://api.invoance.com/v1/audit/portal/streams", {
  method: "POST",
  headers: {
    Authorization: "Bearer " + portalToken,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ type: "webhook", url: "https://siem.example.com/hooks/invoance" }),
});
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const stream = await res.json();
// Store signing_secret now; it is not returned again.
console.log(stream.id, stream.signing_secret);

// Portal reads use the short-lived JWT from POST /v1/audit/portal/exchange,
// not an API key. PORTAL_TOKEN holds that JWT.
const portalToken = process.env.PORTAL_TOKEN;

const res = await fetch("https://api.invoance.com/v1/audit/portal/streams/astr_01J0Y3N5P7R9T1V3X5Z7B9D1FG", {
  method: "DELETE",
  headers: { Authorization: "Bearer " + portalToken },
});
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const result = await res.json();
console.log(result.deleted, result.id);

// Portal reads use the short-lived JWT from POST /v1/audit/portal/exchange,
// not an API key. PORTAL_TOKEN holds that JWT.
const portalToken = process.env.PORTAL_TOKEN;

const res = await fetch("https://api.invoance.com/v1/audit/portal/streams/astr_01J0Y3N5P7R9T1V3X5Z7B9D1FG/test", {
  method: "POST",
  headers: { Authorization: "Bearer " + portalToken },
});
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const result = await res.json();
console.log(result.delivered, result.http_status, result.error);

// No API key: the public proof endpoint is unauthenticated.
const eventId = "aevt_01J0Y1Z2A3B4C5D6E7F8G9H0JK";

const res = await fetch("https://api.invoance.com/v1/proof/audit/" + eventId);
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const proof = await res.json();
console.log(proof.organization.issuer_name, proof.event.action, proof.event.seq);
console.log(proof.verification.valid, proof.verification.reason);

import { readFile } from "node:fs/promises";

// No API key: the public verify endpoint is unauthenticated.
// event.json holds the event exactly as get, an export or a stream delivered it.
const event = JSON.parse(await readFile("event.json", "utf8"));

const res = await fetch("https://api.invoance.com/v1/proof/audit/" + event.id + "/verify", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ event }),
});
if (!res.ok) {
  throw new Error(res.status + " " + (await res.text()));
}
const result = await res.json();
console.log(result.match_result, result.signature_valid, result.reason);

import { InvoanceClient } from "invoance";

// Reads INVOANCE_API_KEY from the environment.
const client = new InvoanceClient();

const me = await client.me();
console.log(me.organization.primary_domain, me.organization.plan_tier);
console.log(me.api_key.scopes, me.limits.rate_limit_per_sec);

import { createPublicKey, verify } from "node:crypto";

const domain = "acme.com";
const eventId = "7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4";

// 1. The key for the issuer's verified domain (no API key needed).
const keyRes = await fetch("https://api.invoance.com/keys/" + domain);
if (!keyRes.ok) throw new Error("key lookup failed: " + keyRes.status);
const key = await keyRes.json();

// 2. The signed record, from the public event proof endpoint.
const proofRes = await fetch("https://api.invoance.com/v1/proof/event/" + eventId);
if (!proofRes.ok) throw new Error("proof lookup failed: " + proofRes.status);
const { event } = await proofRes.json();

// 3. Raw 32-byte Ed25519 key to SPKI DER, which node:crypto can load.
const raw = Buffer.from(key.public_key, "base64url");
const spki = Buffer.concat([Buffer.from("302a300506032b6570032100", "hex"), raw]);
const pinned = createPublicKey({ key: spki, format: "der", type: "spki" });

// 4. The record must name the same key, and the signature must verify with it.
const sameKey = Buffer.from(event.public_key, "hex").equals(raw);
const signatureValid = verify(
  null,
  Buffer.from(event.signed_payload, "hex"),
  pinned,
  Buffer.from(event.signature, "hex"),
);
console.log(key.key_id, sameKey, signatureValid);

const eventId = "7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4";

const res = await fetch("https://api.invoance.com/v1/proof/event/" + eventId);
if (!res.ok) throw new Error("proof lookup failed: " + res.status);
const { organization, event } = await res.json();

console.log(organization.primary_domain, organization.domain_verified);
console.log(event.event_type, event.payload_hash, event.signature_alg);

const eventId = "7c1e4b52-9a0f-4d2e-b6f3-2f8a61c0d9e4";

const res = await fetch("https://api.invoance.com/v1/proof/event/" + eventId + "/verify", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({
    payload: {
      policy_id: "pol_8472",
      approved_by: "risk_committee",
      decision: "approved",
    },
  }),
});
if (!res.ok) throw new Error("verify failed: " + res.status);
const result = await res.json();

console.log(result.match_result, result.signature_valid, result.method);

const eventId = "3f9d2a71-5c6e-4b8a-9d1f-8e2c47b0a5d3";

const res = await fetch("https://api.invoance.com/v1/proof/" + eventId + "/organization");
if (!res.ok) throw new Error("proof lookup failed: " + res.status);
const { organization, event } = await res.json();

console.log(organization.issuer_name, organization.domain_verified);
console.log(event.event_id, event.created_at);

import { createHash } from "node:crypto";
import { readFile } from "node:fs/promises";

const eventId = "3f9d2a71-5c6e-4b8a-9d1f-8e2c47b0a5d3";
const documentHash = createHash("sha256").update(await readFile("./contract.pdf")).digest("hex");

const res = await fetch("https://api.invoance.com/v1/proof/" + eventId + "/verify", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ document_hash: documentHash }),
});
if (!res.ok) throw new Error("verify failed: " + res.status);
const result = await res.json();

console.log(result.match_result, result.signature_valid, result.anchored_at);

const attestationId = "a1d4f8c2-7b3e-4e9a-b5c6-0d2e8f4a7c19";

const res = await fetch("https://api.invoance.com/v1/proof/ai/" + attestationId);
if (!res.ok) throw new Error("proof lookup failed: " + res.status);
const { organization, attestation } = await res.json();

console.log(organization.primary_domain, organization.domain_verified);
console.log(attestation.attestation_type, attestation.model_name, attestation.output_hash);

import { createHash } from "node:crypto";

const attestationId = "a1d4f8c2-7b3e-4e9a-b5c6-0d2e8f4a7c19";
const output = "Either party may terminate with 30 days written notice. Early termination fees do not apply after month 12.";
const contentHash = createHash("sha256").update(output).digest("hex");

const res = await fetch("https://api.invoance.com/v1/proof/ai/" + attestationId + "/verify", {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({ content_hash: contentHash }),
});
if (!res.ok) throw new Error("verify failed: " + res.status);
const result = await res.json();

console.log(result.match_result, result.matched_field, result.signature_valid);