Feat zk integration

.beads/.gitignore

@@ -0,0 +1,29 @@
+# SQLite databases
+*.db
+*.db?*
+*.db-journal
+*.db-wal
+*.db-shm
+
+# Daemon runtime files
+daemon.lock
+daemon.log
+daemon.pid
+bd.sock
+
+# Legacy database files
+db.sqlite
+bd.db
+
+# Merge artifacts (temporary files from 3-way merge)
+beads.base.jsonl
+beads.base.meta.json
+beads.left.jsonl
+beads.left.meta.json
+beads.right.jsonl
+beads.right.meta.json
+
+# Keep JSONL exports and config (source of truth for git)
+!issues.jsonl
+!metadata.json
+!config.json

.beads/README.md

@@ -0,0 +1,81 @@
+# Beads - AI-Native Issue Tracking
+
+Welcome to Beads! This repository uses **Beads** for issue tracking - a modern, AI-native tool designed to live directly in your codebase alongside your code.
+
+## What is Beads?
+
+Beads is issue tracking that lives in your repo, making it perfect for AI coding agents and developers who want their issues close to their code. No web UI required - everything works through the CLI and integrates seamlessly with git.
+
+**Learn more:** [github.com/steveyegge/beads](https://github.com/steveyegge/beads)
+
+## Quick Start
+
+### Essential Commands
+
+```bash
+# Create new issues
+bd create "Add user authentication"
+
+# View all issues
+bd list
+
+# View issue details
+bd show <issue-id>
+
+# Update issue status
+bd update <issue-id> --status in_progress
+bd update <issue-id> --status done
+
+# Sync with git remote
+bd sync
+```
+
+### Working with Issues
+
+Issues in Beads are:
+- **Git-native**: Stored in `.beads/issues.jsonl` and synced like code
+- **AI-friendly**: CLI-first design works perfectly with AI coding agents
+- **Branch-aware**: Issues can follow your branch workflow
+- **Always in sync**: Auto-syncs with your commits
+
+## Why Beads?
+
+✨ **AI-Native Design**
+- Built specifically for AI-assisted development workflows
+- CLI-first interface works seamlessly with AI coding agents
+- No context switching to web UIs
+
+🚀 **Developer Focused**
+- Issues live in your repo, right next to your code
+- Works offline, syncs when you push
+- Fast, lightweight, and stays out of your way
+
+🔧 **Git Integration**
+- Automatic sync with git commits
+- Branch-aware issue tracking
+- Intelligent JSONL merge resolution
+
+## Get Started with Beads
+
+Try Beads in your own projects:
+
+```bash
+# Install Beads
+curl -sSL https://raw.githubusercontent.com/steveyegge/beads/main/scripts/install.sh | bash
+
+# Initialize in your repo
+bd init
+
+# Create your first issue
+bd create "Try out Beads"
+```
+
+## Learn More
+
+- **Documentation**: [github.com/steveyegge/beads/docs](https://github.com/steveyegge/beads/tree/main/docs)
+- **Quick Start Guide**: Run `bd quickstart`
+- **Examples**: [github.com/steveyegge/beads/examples](https://github.com/steveyegge/beads/tree/main/examples)
+
+---
+
+*Beads: Issue tracking that moves at the speed of thought* ⚡

.beads/config.yaml

@@ -0,0 +1,62 @@
+# Beads Configuration File
+# This file configures default behavior for all bd commands in this repository
+# All settings can also be set via environment variables (BD_* prefix)
+# or overridden with command-line flags
+sync-branch: beads-sync
+# Issue prefix for this repository (used by bd init)
+# If not set, bd init will auto-detect from directory name
+# Example: issue-prefix: "myproject" creates issues like "myproject-1", "myproject-2", etc.
+# issue-prefix: ""
+
+# Use no-db mode: load from JSONL, no SQLite, write back after each command
+# When true, bd will use .beads/issues.jsonl as the source of truth
+# instead of SQLite database
+# no-db: false
+
+# Disable daemon for RPC communication (forces direct database access)
+# no-daemon: false
+
+# Disable auto-flush of database to JSONL after mutations
+# no-auto-flush: false
+
+# Disable auto-import from JSONL when it's newer than database
+# no-auto-import: false
+
+# Enable JSON output by default
+# json: false
+
+# Default actor for audit trails (overridden by BD_ACTOR or --actor)
+# actor: ""
+
+# Path to database (overridden by BEADS_DB or --db)
+# db: ""
+
+# Auto-start daemon if not running (can also use BEADS_AUTO_START_DAEMON)
+# auto-start-daemon: true
+
+# Debounce interval for auto-flush (can also use BEADS_FLUSH_DEBOUNCE)
+# flush-debounce: "5s"
+
+# Git branch for beads commits (bd sync will commit to this branch)
+# IMPORTANT: Set this for team projects so all clones use the same sync branch.
+# This setting persists across clones (unlike database config which is gitignored).
+# Can also use BEADS_SYNC_BRANCH env var for local override.
+# If not set, bd sync will require you to run 'bd config set sync.branch <branch>'.
+# sync-branch: "beads-sync"
+
+# Multi-repo configuration (experimental - bd-307)
+# Allows hydrating from multiple repositories and routing writes to the correct JSONL
+# repos:
+#   primary: "."  # Primary repo (where this database lives)
+#   additional:   # Additional repos to hydrate from (read-only)
+#     - ~/beads-planning  # Personal planning repo
+#     - ~/work-planning   # Work planning repo
+
+# Integration settings (access with 'bd config get/set')
+# These are stored in the database, not in this file:
+# - jira.url
+# - jira.project
+# - linear.url
+# - linear.api-key
+# - github.org
+# - github.repo

.beads/deletions.jsonl

@@ -0,0 +1,29 @@
+{"id":"node-67f","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-d82","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-w8x","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-bh1","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-aqw","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-cty","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-j7r","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-oa5","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-99g.5","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-99g.6","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-99g.7","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-s48","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-wrd","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-b7d","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-k28","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-636","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-99g","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-99g.1","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-99g.3","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-9gr","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-9ms","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-ecu","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-egh","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-99g.2","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-99g.4","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-99g.8","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-1q8","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-66u","ts":"2025-12-06T09:42:23.171680064+01:00","by":"bd-doctor-hydrate","reason":"Hydrated from git history"}
+{"id":"node-hxv","ts":"2025-12-06T09:21:58.542706946Z","by":"tcsenpai","reason":"manual delete"}

.beads/issues.jsonl

@@ -0,0 +1,6 @@
+{"id":"node-8ka","title":"ZK Identity System - Phase 6-8: Node Integration","description":"ProofVerifier, GCR transaction types (zk_commitment_add, zk_attestation_add), RPC endpoints (/zk/merkle-root, /zk/merkle/proof, /zk/nullifier)","status":"closed","priority":1,"issue_type":"epic","created_at":"2025-12-06T09:43:09.277685498+01:00","updated_at":"2025-12-06T09:43:25.850988068+01:00","closed_at":"2025-12-06T09:43:25.850988068+01:00","labels":["gcr","node","zk"],"dependencies":[{"issue_id":"node-8ka","depends_on_id":"node-94a","type":"blocks","created_at":"2025-12-06T09:43:16.947262666+01:00","created_by":"daemon"}]}
+{"id":"node-94a","title":"ZK Identity System - Phase 1-5: Core Cryptography","description":"Core ZK-SNARK cryptographic foundation using Groth16/Poseidon. Includes circuits, Merkle tree, database entities.","status":"closed","priority":1,"issue_type":"epic","created_at":"2025-12-06T09:43:09.180321179+01:00","updated_at":"2025-12-06T09:43:25.782519636+01:00","closed_at":"2025-12-06T09:43:25.782519636+01:00","labels":["cryptography","groth16","zk"]}
+{"id":"node-9q4","title":"ZK Identity System - Phase 9: SDK Integration","description":"SDK CommitmentService (poseidon-lite), ProofGenerator (snarkjs), ZKIdentity class. Located in ../sdks/src/encryption/zK/","status":"closed","priority":1,"issue_type":"epic","created_at":"2025-12-06T09:43:09.360890667+01:00","updated_at":"2025-12-06T09:43:25.896325192+01:00","closed_at":"2025-12-06T09:43:25.896325192+01:00","labels":["sdk","zk"],"dependencies":[{"issue_id":"node-9q4","depends_on_id":"node-8ka","type":"blocks","created_at":"2025-12-06T09:43:16.997274204+01:00","created_by":"daemon"}]}
+{"id":"node-a95","title":"ZK Identity System - Future: Verify-and-Delete Flow","description":"zk_verified_commitment: OAuth verify + create ZK commitment + skip public record (privacy preservation). See serena memory: zk_verify_and_delete_plan","status":"open","priority":2,"issue_type":"feature","created_at":"2025-12-06T09:43:09.576634316+01:00","updated_at":"2025-12-06T09:43:09.576634316+01:00","labels":["future","privacy","zk"],"dependencies":[{"issue_id":"node-a95","depends_on_id":"node-dj4","type":"blocks","created_at":"2025-12-06T09:43:17.134669302+01:00","created_by":"daemon"}]}
+{"id":"node-bj2","title":"ZK Identity System - Phase 10: Trusted Setup Ceremony","description":"Multi-party ceremony with 40+ nodes. Script: src/features/zk/scripts/ceremony.ts. Generates final proving/verification keys.","notes":"Currently running ceremony with 40+ nodes on separate repo. Script ready at src/features/zk/scripts/ceremony.ts","status":"in_progress","priority":1,"issue_type":"epic","created_at":"2025-12-06T09:43:09.430249817+01:00","updated_at":"2025-12-06T09:43:25.957018289+01:00","labels":["ceremony","security","zk"],"dependencies":[{"issue_id":"node-bj2","depends_on_id":"node-9q4","type":"blocks","created_at":"2025-12-06T09:43:17.036700285+01:00","created_by":"daemon"}]}
+{"id":"node-dj4","title":"ZK Identity System - Phase 11: CDN Deployment","description":"Upload WASM, proving keys to CDN. Update SDK ProofGenerator with CDN URLs. See serena memory: zk_technical_architecture","status":"open","priority":2,"issue_type":"epic","created_at":"2025-12-06T09:43:09.507162284+01:00","updated_at":"2025-12-06T09:43:09.507162284+01:00","labels":["cdn","deployment","zk"],"dependencies":[{"issue_id":"node-dj4","depends_on_id":"node-bj2","type":"blocks","created_at":"2025-12-06T09:43:17.091861452+01:00","created_by":"daemon"}]}

.beads/metadata.json

@@ -0,0 +1,4 @@
+{
+  "database": "beads.db",
+  "jsonl_export": "issues.jsonl"
+}

.env.example

@@ -10,23 +10,39 @@ DISCORD_BOT_TOKEN=
 GITHUB_CLIENT_ID=
 GITHUB_CLIENT_SECRET=
 
-# OmniProtocol TCP Server (optional - disabled by default)
+# ===========================================
+# L2PS (Layer 2 Private System) Configuration
+# ===========================================
+
+# Batch Aggregator Settings
+L2PS_AGGREGATION_INTERVAL_MS=10000
+L2PS_MIN_BATCH_SIZE=1
+L2PS_MAX_BATCH_SIZE=10
+L2PS_CLEANUP_AGE_MS=300000
+
+# ZK Proof Settings
+L2PS_ZK_ENABLED=true
+
+# Hash Service Settings
+L2PS_HASH_INTERVAL_MS=5000
+
+# ===========================================
+# OmniProtocol TCP Server Configuration
+# ===========================================
 OMNI_ENABLED=false
 OMNI_PORT=3001
-# OMNI_MODE: HTTP_ONLY (server only), OMNI_PREFERRED (try OmniProtocol first), OMNI_ONLY (force OmniProtocol)
 OMNI_MODE=OMNI_ONLY
-# OMNI_FATAL: Exit on OmniProtocol errors instead of falling back to HTTP (useful for testing)
 OMNI_FATAL=false
 
-# OmniProtocol TLS Encryption (optional)
+# OmniProtocol TLS Encryption
 OMNI_TLS_ENABLED=false
 OMNI_TLS_MODE=self-signed
 OMNI_CERT_PATH=./certs/node-cert.pem
 OMNI_KEY_PATH=./certs/node-key.pem
 OMNI_CA_PATH=
 OMNI_TLS_MIN_VERSION=TLSv1.3
 
-# OmniProtocol Rate Limiting (recommended for production)
+# OmniProtocol Rate Limiting
 OMNI_RATE_LIMIT_ENABLED=true
 OMNI_MAX_CONNECTIONS_PER_IP=10
 OMNI_MAX_REQUESTS_PER_SECOND_PER_IP=100
@@ -47,15 +63,16 @@ METRICS_ENABLED=true
 METRICS_PORT=9090
 METRICS_HOST=0.0.0.0
 
-# TLSNotary HTTPS Attestation (optional - disabled by default)
-# Enables MPC-TLS attestation for verifiable HTTPS proofs
+# ===========================================
+# TLSNotary HTTPS Attestation Configuration
+# ===========================================
 TLSNOTARY_ENABLED=false
 TLSNOTARY_PORT=7047
-# TLSNOTARY_SIGNING_KEY: 32-byte hex secp256k1 private key (required if enabled)
-# Generate with: openssl rand -hex 32
 TLSNOTARY_SIGNING_KEY=
-# WebSocket proxy port for browser TCP tunneling
 TLSNOTARY_PROXY_PORT=55688
-# Optional: Adjust data limits (bytes)
 TLSNOTARY_MAX_SENT_DATA=16384
 TLSNOTARY_MAX_RECV_DATA=65536
+
+# ZK Identity System Configuration
+# Points awarded for each successful ZK attestation (default: 10)
+ZK_ATTESTATION_POINTS=10