@atrib/verify 0.4.0 → 0.5.0

package/dist/handoff.d.ts

@@ -0,0 +1,94 @@
+import { type AtribRecord, type ProofBundle } from '@atrib/mcp';
+import type { RecordVerificationResult } from './verify-record.js';
+export type HandoffRejectionReason = 'record_missing' | 'record_hash_mismatch' | 'record_invalid' | 'signature_invalid' | 'wrong_signer' | 'wrong_context' | 'stale' | 'body_missing' | 'body_commitment_missing' | 'body_hash_mismatch' | 'proof_missing' | 'proof_invalid';
+export interface HandoffClaimInput {
+    record_hash: string;
+    record?: AtribRecord;
+    body?: unknown;
+    args?: unknown;
+    result?: unknown;
+    proof?: ProofBundle;
+    trusted_creator_keys?: string[];
+    allowed_context_ids?: string[];
+    max_age_ms?: number;
+}
+export interface VerifyHandoffClaimsOptions {
+    trusted_creator_keys?: string[];
+    allowed_context_ids?: string[];
+    require_body?: boolean;
+    require_body_commitment?: boolean;
+    require_log_inclusion?: boolean;
+    log_public_key?: Uint8Array;
+    now_ms?: number;
+    max_age_ms?: number;
+}
+export interface HandoffBodyVerification {
+    args_hash_present: boolean;
+    args_hash_ok: boolean | null;
+    result_hash_present: boolean;
+    result_hash_ok: boolean | null;
+}
+export interface HandoffProofVerification {
+    present: boolean;
+    inclusion_ok: boolean | null;
+    checkpoint_signature_ok: boolean | null;
+    error?: string;
+}
+export interface HandoffClaimVerification {
+    record_hash: string;
+    accepted: boolean;
+    rejection_reasons: HandoffRejectionReason[];
+    warnings: string[];
+    record?: AtribRecord;
+    verification?: RecordVerificationResult;
+    signature_ok: boolean | null;
+    computed_record_hash: string | null;
+    signer_trusted: boolean | null;
+    context_allowed: boolean | null;
+    body?: HandoffBodyVerification;
+    proof?: HandoffProofVerification;
+}
+export interface HandoffVerificationResult {
+    accepted: HandoffClaimVerification[];
+    rejected: HandoffClaimVerification[];
+    accepted_record_hashes: string[];
+    all_accepted: boolean;
+}
+export interface HandoffEvidenceEntry {
+    record_hash?: string;
+    record?: AtribRecord;
+    body?: unknown;
+    args?: unknown;
+    result?: unknown;
+    proof?: ProofBundle | null;
+    _local?: {
+        content?: unknown;
+        body?: unknown;
+        args?: unknown;
+        result?: unknown;
+        producer?: string;
+        [key: string]: unknown;
+    } | null;
+    [key: string]: unknown;
+}
+export interface HandoffEvidencePacket {
+    kind?: string;
+    records?: HandoffEvidenceEntry[];
+    claims?: HandoffEvidenceEntry[];
+    record_hashes?: string[];
+    required_record_hashes?: string[];
+    trusted_creator_keys?: string[];
+    allowed_context_ids?: string[];
+    max_age_ms?: number;
+    archive_refs?: unknown[];
+    [key: string]: unknown;
+}
+export interface HandoffClaimsFromEvidenceOptions {
+    required_record_hashes?: string[];
+    trusted_creator_keys?: string[];
+    allowed_context_ids?: string[];
+    max_age_ms?: number;
+}
+export declare function handoffClaimsFromEvidencePacket(packet: HandoffEvidencePacket | HandoffEvidenceEntry[], options?: HandoffClaimsFromEvidenceOptions): HandoffClaimInput[];
+export declare function verifyHandoffClaims(claims: HandoffClaimInput[], options?: VerifyHandoffClaimsOptions): Promise<HandoffVerificationResult>;
+//# sourceMappingURL=handoff.d.ts.map

package/dist/handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff.d.ts","sourceRoot":"","sources":["../src/handoff.ts"],"names":[],"mappings":"AAKA,OAAO,EAQL,KAAK,WAAW,EAChB,KAAK,WAAW,EACjB,MAAM,YAAY,CAAA;AAEnB,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAA;AAKlE,MAAM,MAAM,sBAAsB,GAC9B,gBAAgB,GAChB,sBAAsB,GACtB,gBAAgB,GAChB,mBAAmB,GACnB,cAAc,GACd,eAAe,GACf,OAAO,GACP,cAAc,GACd,yBAAyB,GACzB,oBAAoB,GACpB,eAAe,GACf,eAAe,CAAA;AAEnB,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,WAAW,CAAA;IACnB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,uBAAuB,CAAC,EAAE,OAAO,CAAA;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,cAAc,CAAC,EAAE,UAAU,CAAA;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,iBAAiB,EAAE,OAAO,CAAA;IAC1B,YAAY,EAAE,OAAO,GAAG,IAAI,CAAA;IAC5B,mBAAmB,EAAE,OAAO,CAAA;IAC5B,cAAc,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/B;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAA;IAChB,YAAY,EAAE,OAAO,GAAG,IAAI,CAAA;IAC5B,uBAAuB,EAAE,OAAO,GAAG,IAAI,CAAA;IACvC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,OAAO,CAAA;IACjB,iBAAiB,EAAE,sBAAsB,EAAE,CAAA;IAC3C,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,YAAY,CAAC,EAAE,wBAAwB,CAAA;IACvC,YAAY,EAAE,OAAO,GAAG,IAAI,CAAA;IAC5B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC,cAAc,EAAE,OAAO,GAAG,IAAI,CAAA;IAC9B,eAAe,EAAE,OAAO,GAAG,IAAI,CAAA;IAC/B,IAAI,CAAC,EAAE,uBAAuB,CAAA;IAC9B,KAAK,CAAC,EAAE,wBAAwB,CAAA;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,wBAAwB,EAAE,CAAA;IACpC,QAAQ,EAAE,wBAAwB,EAAE,CAAA;IACpC,sBAAsB,EAAE,MAAM,EAAE,CAAA;IAChC,YAAY,EAAE,OAAO,CAAA;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,CAAA;IAC1B,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,IAAI,CAAC,EAAE,OAAO,CAAA;QACd,IAAI,CAAC,EAAE,OAAO,CAAA;QACd,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KACvB,GAAG,IAAI,CAAA;IACR,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,oBAAoB,EAAE,CAAA;IAChC,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAA;IAC/B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;IACjC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,OAAO,EAAE,CAAA;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,gCAAgC;IAC/C,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAA;IACjC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAmID,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,qBAAqB,GAAG,oBAAoB,EAAE,EACtD,OAAO,GAAE,gCAAqC,GAC7C,iBAAiB,EAAE,CAarB;AA0RD,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,iBAAiB,EAAE,EAC3B,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAUpC"}

package/dist/handoff.js

@@ -0,0 +1,371 @@
+// SPDX-License-Identifier: Apache-2.0
+import canonicalize from 'canonicalize';
+import * as ed from '@noble/ed25519';
+import { sha512 } from '@noble/hashes/sha2.js';
+import { base64urlDecode, canonicalRecord, hexEncode, leafHash, serializeEntry, sha256, verifyInclusion, } from '@atrib/mcp';
+import { verifyRecord } from './verify-record.js';
+ed.hashes.sha512 = sha512;
+ed.hashes.sha512Async = (message) => Promise.resolve(sha512(message));
+function recordHash(record) {
+    return `sha256:${hexEncode(sha256(canonicalRecord(record)))}`;
+}
+function hashPlainJson(value) {
+    try {
+        const encoded = canonicalize(value);
+        if (encoded === undefined)
+            return null;
+        return `sha256:${hexEncode(sha256(new TextEncoder().encode(encoded)))}`;
+    }
+    catch {
+        return null;
+    }
+}
+function hashSaltedJson(value, salt) {
+    try {
+        const encoded = canonicalize(value);
+        if (encoded === undefined)
+            return null;
+        const saltBytes = base64urlDecode(salt);
+        const bodyBytes = new TextEncoder().encode(encoded);
+        const input = new Uint8Array(saltBytes.length + bodyBytes.length);
+        input.set(saltBytes, 0);
+        input.set(bodyBytes, saltBytes.length);
+        return `sha256:${hexEncode(sha256(input))}`;
+    }
+    catch {
+        return null;
+    }
+}
+function hashMaterial(value, salt) {
+    return salt === undefined ? hashPlainJson(value) : hashSaltedJson(value, salt);
+}
+function hasMaterial(value) {
+    return value !== undefined;
+}
+function isObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function isAtribRecordLike(value) {
+    if (!isObject(value))
+        return false;
+    return (typeof value.spec_version === 'string' &&
+        typeof value.event_type === 'string' &&
+        typeof value.context_id === 'string' &&
+        typeof value.creator_key === 'string' &&
+        typeof value.chain_root === 'string' &&
+        typeof value.content_id === 'string' &&
+        typeof value.signature === 'string');
+}
+function proofOrUndefined(value) {
+    if (value === null || value === undefined)
+        return undefined;
+    return value;
+}
+function localSidecar(value) {
+    return isObject(value) ? value : undefined;
+}
+function evidenceEntries(packet) {
+    if (Array.isArray(packet))
+        return packet;
+    const entries = [];
+    if (Array.isArray(packet.records))
+        entries.push(...packet.records);
+    if (Array.isArray(packet.claims))
+        entries.push(...packet.claims);
+    return entries;
+}
+function requiredHashes(packet, options) {
+    const values = new Set();
+    if (!Array.isArray(packet)) {
+        for (const hash of packet.required_record_hashes ?? [])
+            values.add(hash);
+        for (const hash of packet.record_hashes ?? [])
+            values.add(hash);
+    }
+    for (const hash of options.required_record_hashes ?? [])
+        values.add(hash);
+    return [...values];
+}
+function claimFromEvidenceEntry(entry, packet, options) {
+    const envelope = isObject(entry) ? entry : {};
+    const record = isAtribRecordLike(envelope.record)
+        ? envelope.record
+        : isAtribRecordLike(entry)
+            ? entry
+            : undefined;
+    const local = localSidecar(envelope._local);
+    const claimHash = typeof envelope.record_hash === 'string'
+        ? envelope.record_hash
+        : record
+            ? recordHash(record)
+            : undefined;
+    if (claimHash === undefined)
+        return null;
+    const trustedCreatorKeys = options.trusted_creator_keys ??
+        (!Array.isArray(packet) ? packet.trusted_creator_keys : undefined);
+    const allowedContextIds = options.allowed_context_ids ?? (!Array.isArray(packet) ? packet.allowed_context_ids : undefined);
+    const maxAgeMs = options.max_age_ms ?? (!Array.isArray(packet) ? packet.max_age_ms : undefined);
+    const claim = { record_hash: claimHash };
+    if (record)
+        claim.record = record;
+    const body = envelope.body ?? local?.body ?? local?.content;
+    const args = envelope.args ?? local?.args;
+    const result = envelope.result ?? local?.result;
+    if (body !== undefined)
+        claim.body = body;
+    if (args !== undefined)
+        claim.args = args;
+    if (result !== undefined)
+        claim.result = result;
+    const proof = proofOrUndefined(envelope.proof);
+    if (proof !== undefined)
+        claim.proof = proof;
+    if (trustedCreatorKeys !== undefined)
+        claim.trusted_creator_keys = trustedCreatorKeys;
+    if (allowedContextIds !== undefined)
+        claim.allowed_context_ids = allowedContextIds;
+    if (maxAgeMs !== undefined)
+        claim.max_age_ms = maxAgeMs;
+    return claim;
+}
+export function handoffClaimsFromEvidencePacket(packet, options = {}) {
+    const claims = [];
+    const seen = new Set();
+    for (const entry of evidenceEntries(packet)) {
+        const claim = claimFromEvidenceEntry(entry, packet, options);
+        if (!claim)
+            continue;
+        claims.push(claim);
+        seen.add(claim.record_hash);
+    }
+    for (const hash of requiredHashes(packet, options)) {
+        if (!seen.has(hash))
+            claims.push({ record_hash: hash });
+    }
+    return claims;
+}
+function verifyBody(claim, record, requireBody, requireBodyCommitment, reasons) {
+    const body = {
+        args_hash_present: record.args_hash !== undefined,
+        args_hash_ok: null,
+        result_hash_present: record.result_hash !== undefined,
+        result_hash_ok: null,
+    };
+    const argsMaterial = claim.args ?? claim.body;
+    const resultMaterial = claim.result;
+    const anyMaterial = hasMaterial(argsMaterial) || hasMaterial(resultMaterial);
+    const anyCommitment = record.args_hash !== undefined || record.result_hash !== undefined;
+    if (requireBody && !anyMaterial) {
+        reasons.push('body_missing');
+    }
+    if (requireBodyCommitment && !anyCommitment) {
+        reasons.push('body_commitment_missing');
+    }
+    if (record.args_hash !== undefined && hasMaterial(argsMaterial)) {
+        body.args_hash_ok = hashMaterial(argsMaterial, record.args_salt) === record.args_hash;
+        if (!body.args_hash_ok)
+            reasons.push('body_hash_mismatch');
+    }
+    if (record.result_hash !== undefined && hasMaterial(resultMaterial)) {
+        body.result_hash_ok = hashMaterial(resultMaterial, record.result_salt) === record.result_hash;
+        if (!body.result_hash_ok)
+            reasons.push('body_hash_mismatch');
+    }
+    return body;
+}
+function verifyFreshness(record, nowMs, maxAgeMs, reasons) {
+    if (maxAgeMs === undefined)
+        return;
+    const ageMs = nowMs - record.timestamp;
+    if (ageMs < 0 || ageMs > maxAgeMs)
+        reasons.push('stale');
+}
+async function verifyProofPresence(claim, record, computedRecordHash, requireLogInclusion, logPublicKey, reasons) {
+    if (claim.proof === undefined) {
+        if (requireLogInclusion)
+            reasons.push('proof_missing');
+        return requireLogInclusion
+            ? { present: false, inclusion_ok: null, checkpoint_signature_ok: null }
+            : undefined;
+    }
+    const verification = await verifyProofBundle(record, computedRecordHash, claim.proof, logPublicKey);
+    if (verification.inclusion_ok !== true)
+        reasons.push('proof_invalid');
+    if (logPublicKey !== undefined && verification.checkpoint_signature_ok !== true) {
+        reasons.push('proof_invalid');
+    }
+    return verification;
+}
+function decodeBase64Bytes(value, expectedLength) {
+    const decoded = new Uint8Array(Buffer.from(value, 'base64'));
+    if (decoded.length !== expectedLength) {
+        throw new Error(`expected ${expectedLength} bytes, got ${decoded.length}`);
+    }
+    return decoded;
+}
+function bytesEqual(left, right) {
+    if (left.length !== right.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < left.length; i++) {
+        diff |= left[i] ^ right[i];
+    }
+    return diff === 0;
+}
+function checkpointBody(checkpoint) {
+    const body = checkpoint.split('\n\n')[0];
+    if (body === undefined || body.length === 0)
+        throw new Error('checkpoint body missing');
+    return body.endsWith('\n') ? body : `${body}\n`;
+}
+function parseCheckpointRoot(checkpoint) {
+    const body = checkpointBody(checkpoint);
+    const lines = body.trimEnd().split('\n');
+    if (lines.length !== 3)
+        throw new Error('checkpoint body must have three lines');
+    const treeSize = Number(lines[1]);
+    if (!Number.isSafeInteger(treeSize) || treeSize < 0) {
+        throw new Error('checkpoint tree size is invalid');
+    }
+    return {
+        treeSize,
+        rootHash: decodeBase64Bytes(lines[2], 32),
+    };
+}
+async function verifyCheckpointSignature(checkpoint, logPublicKey) {
+    const parts = checkpoint.split('\n\n');
+    const body = checkpointBody(checkpoint);
+    const sigLine = parts[1]?.trim();
+    if (sigLine === undefined || sigLine.length === 0)
+        return false;
+    const match = sigLine.match(/^\S+ \S+ (\S+)\s*$/);
+    if (match === null)
+        return false;
+    const decoded = decodeBase64Bytes(match[1], 68);
+    const signature = decoded.slice(4);
+    return ed.verifyAsync(signature, new TextEncoder().encode(body), logPublicKey);
+}
+function expectedLeafHash(record, computedRecordHash) {
+    const recordHashHex = computedRecordHash.slice('sha256:'.length);
+    const entry = serializeEntry({
+        record_hash_hex: recordHashHex,
+        creator_key_b64url: record.creator_key,
+        context_id: record.context_id,
+        timestamp: record.timestamp,
+        event_type: record.event_type,
+    });
+    return leafHash(entry);
+}
+async function verifyProofBundle(record, computedRecordHash, proof, logPublicKey) {
+    try {
+        const checkpoint = parseCheckpointRoot(proof.checkpoint);
+        const leaf = decodeBase64Bytes(proof.leaf_hash, 32);
+        const expectedLeaf = expectedLeafHash(record, computedRecordHash);
+        if (!bytesEqual(leaf, expectedLeaf)) {
+            return {
+                present: true,
+                inclusion_ok: false,
+                checkpoint_signature_ok: null,
+                error: 'proof leaf hash does not match record entry',
+            };
+        }
+        const proofHashes = proof.inclusion_proof.map((item) => decodeBase64Bytes(item, 32));
+        const checkpointSignatureOk = logPublicKey === undefined
+            ? null
+            : await verifyCheckpointSignature(proof.checkpoint, logPublicKey);
+        return {
+            present: true,
+            inclusion_ok: verifyInclusion(proof.log_index, checkpoint.treeSize, leaf, proofHashes, checkpoint.rootHash),
+            checkpoint_signature_ok: checkpointSignatureOk,
+        };
+    }
+    catch (error) {
+        return {
+            present: true,
+            inclusion_ok: false,
+            checkpoint_signature_ok: null,
+            error: error instanceof Error ? error.message : 'proof verification failed',
+        };
+    }
+}
+function verifyTrustedSigner(record, trustedCreatorKeys, reasons) {
+    if (trustedCreatorKeys === undefined || trustedCreatorKeys.length === 0)
+        return null;
+    const trusted = trustedCreatorKeys.includes(record.creator_key);
+    if (!trusted)
+        reasons.push('wrong_signer');
+    return trusted;
+}
+function verifyAllowedContext(record, allowedContextIds, reasons) {
+    if (allowedContextIds === undefined || allowedContextIds.length === 0)
+        return null;
+    const allowed = allowedContextIds.includes(record.context_id);
+    if (!allowed)
+        reasons.push('wrong_context');
+    return allowed;
+}
+async function verifyOneClaim(claim, options) {
+    const reasons = [];
+    const warnings = [];
+    const nowMs = options.now_ms ?? Date.now();
+    const trustedCreatorKeys = claim.trusted_creator_keys ?? options.trusted_creator_keys;
+    const allowedContextIds = claim.allowed_context_ids ?? options.allowed_context_ids;
+    const maxAgeMs = claim.max_age_ms ?? options.max_age_ms;
+    if (claim.record === undefined) {
+        reasons.push('record_missing');
+        return {
+            record_hash: claim.record_hash,
+            accepted: false,
+            rejection_reasons: reasons,
+            warnings,
+            signature_ok: null,
+            computed_record_hash: null,
+            signer_trusted: null,
+            context_allowed: null,
+        };
+    }
+    const computed = recordHash(claim.record);
+    if (computed !== claim.record_hash) {
+        reasons.push('record_hash_mismatch');
+    }
+    const verification = await verifyRecord(claim.record);
+    if (!verification.signatureOk)
+        reasons.push('signature_invalid');
+    if (!verification.valid)
+        reasons.push('record_invalid');
+    warnings.push(...verification.warnings);
+    const signerTrusted = verifyTrustedSigner(claim.record, trustedCreatorKeys, reasons);
+    const contextAllowed = verifyAllowedContext(claim.record, allowedContextIds, reasons);
+    verifyFreshness(claim.record, nowMs, maxAgeMs, reasons);
+    const proof = await verifyProofPresence(claim, claim.record, computed, options.require_log_inclusion === true, options.log_public_key, reasons);
+    const body = verifyBody(claim, claim.record, options.require_body === true, options.require_body_commitment === true, reasons);
+    const uniqueReasons = Array.from(new Set(reasons));
+    const result = {
+        record_hash: claim.record_hash,
+        accepted: uniqueReasons.length === 0,
+        rejection_reasons: uniqueReasons,
+        warnings,
+        record: claim.record,
+        verification,
+        signature_ok: verification.signatureOk,
+        computed_record_hash: computed,
+        signer_trusted: signerTrusted,
+        context_allowed: contextAllowed,
+        body,
+    };
+    if (proof !== undefined)
+        result.proof = proof;
+    return result;
+}
+export async function verifyHandoffClaims(claims, options = {}) {
+    const checked = await Promise.all(claims.map((claim) => verifyOneClaim(claim, options)));
+    const accepted = checked.filter((claim) => claim.accepted);
+    const rejected = checked.filter((claim) => !claim.accepted);
+    return {
+        accepted,
+        rejected,
+        accepted_record_hashes: accepted.map((claim) => claim.record_hash),
+        all_accepted: rejected.length === 0,
+    };
+}
+//# sourceMappingURL=handoff.js.map

package/dist/handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handoff.js","sourceRoot":"","sources":["../src/handoff.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,YAAY,MAAM,cAAc,CAAA;AACvC,OAAO,KAAK,EAAE,MAAM,gBAAgB,CAAA;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,EACL,eAAe,EACf,eAAe,EACf,SAAS,EACT,QAAQ,EACR,cAAc,EACd,MAAM,EACN,eAAe,GAGhB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAGjD,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAA;AACzB,EAAE,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;AAiHrE,SAAS,UAAU,CAAC,MAAmB;IACrC,OAAO,UAAU,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAA;AAC/D,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACtC,OAAO,UAAU,SAAS,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAA;QACtC,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;QACjE,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;QACvB,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAA;QACtC,OAAO,UAAU,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAa;IACjD,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,KAAK,SAAS,CAAA;AAC5B,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAClC,OAAO,CACL,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QACrC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CACpC,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3D,OAAO,KAAoB,CAAA;AAC7B,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AAC5C,CAAC;AAED,SAAS,eAAe,CACtB,MAAsD;IAEtD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAA;IACxC,MAAM,OAAO,GAA2B,EAAE,CAAA;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAClE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;IAChE,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,cAAc,CACrB,MAAsD,EACtD,OAAyC;IAEzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAA;IAChC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,sBAAsB,IAAI,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACxE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,aAAa,IAAI,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACjE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,sBAAsB,IAAI,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACzE,OAAO,CAAC,GAAG,MAAM,CAAC,CAAA;AACpB,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAA2B,EAC3B,MAAsD,EACtD,OAAyC;IAEzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;IAC7C,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/C,CAAC,CAAC,QAAQ,CAAC,MAAM;QACjB,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACxB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC3C,MAAM,SAAS,GACb,OAAO,QAAQ,CAAC,WAAW,KAAK,QAAQ;QACtC,CAAC,CAAC,QAAQ,CAAC,WAAW;QACtB,CAAC,CAAC,MAAM;YACN,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;YACpB,CAAC,CAAC,SAAS,CAAA;IACjB,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAA;IAExC,MAAM,kBAAkB,GACtB,OAAO,CAAC,oBAAoB;QAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACpE,MAAM,iBAAiB,GACrB,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAClG,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAE/F,MAAM,KAAK,GAAsB,EAAE,WAAW,EAAE,SAAS,EAAE,CAAA;IAC3D,IAAI,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAA;IACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,OAAO,CAAA;IAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,CAAA;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,KAAK,EAAE,MAAM,CAAA;IAC/C,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAA;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,IAAI,CAAA;IACzC,IAAI,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAA;IAC/C,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9C,IAAI,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAA;IAC5C,IAAI,kBAAkB,KAAK,SAAS;QAAE,KAAK,CAAC,oBAAoB,GAAG,kBAAkB,CAAA;IACrF,IAAI,iBAAiB,KAAK,SAAS;QAAE,KAAK,CAAC,mBAAmB,GAAG,iBAAiB,CAAA;IAClF,IAAI,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAA;IACvD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC7C,MAAsD,EACtD,UAA4C,EAAE;IAE9C,MAAM,MAAM,GAAwB,EAAE,CAAA;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;QAC5D,IAAI,CAAC,KAAK;YAAE,SAAQ;QACpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClB,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC7B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,UAAU,CACjB,KAAwB,EACxB,MAAmB,EACnB,WAAoB,EACpB,qBAA8B,EAC9B,OAAiC;IAEjC,MAAM,IAAI,GAA4B;QACpC,iBAAiB,EAAE,MAAM,CAAC,SAAS,KAAK,SAAS;QACjD,YAAY,EAAE,IAAI;QAClB,mBAAmB,EAAE,MAAM,CAAC,WAAW,KAAK,SAAS;QACrD,cAAc,EAAE,IAAI;KACrB,CAAA;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAA;IAC7C,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAA;IACnC,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,WAAW,CAAC,cAAc,CAAC,CAAA;IAC5E,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,CAAA;IAExF,IAAI,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC9B,CAAC;IACD,IAAI,qBAAqB,IAAI,CAAC,aAAa,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;IACzC,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,SAAS,CAAA;QACrF,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IAC5D,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,cAAc,CAAC,EAAE,CAAC;QACpE,IAAI,CAAC,cAAc,GAAG,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,WAAW,CAAA;QAC7F,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IAC9D,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,eAAe,CACtB,MAAmB,EACnB,KAAa,EACb,QAA4B,EAC5B,OAAiC;IAEjC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAM;IAClC,MAAM,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC,SAAS,CAAA;IACtC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AAC1D,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,KAAwB,EACxB,MAAmB,EACnB,kBAA0B,EAC1B,mBAA4B,EAC5B,YAAoC,EACpC,OAAiC;IAEjC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,IAAI,mBAAmB;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACtD,OAAO,mBAAmB;YACxB,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE;YACvE,CAAC,CAAC,SAAS,CAAA;IACf,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAC1C,MAAM,EACN,kBAAkB,EAClB,KAAK,CAAC,KAAK,EACX,YAAY,CACb,CAAA;IACD,IAAI,YAAY,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IACrE,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,uBAAuB,KAAK,IAAI,EAAE,CAAC;QAChF,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa,EAAE,cAAsB;IAC9D,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAA;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,YAAY,cAAc,eAAe,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,IAAgB,EAAE,KAAiB;IACrD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAK,IAAI,CAAC,CAAC,CAAY,GAAI,KAAK,CAAC,CAAC,CAAY,CAAA;IACpD,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAA;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB;IACxC,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IACxC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAA;IACvF,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAA;AACjD,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IAChF,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACpD,CAAC;IACD,OAAO;QACL,QAAQ;QACR,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC;KAC3C,CAAA;AACH,CAAC;AAED,KAAK,UAAU,yBAAyB,CACtC,UAAkB,EAClB,YAAwB;IAExB,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,CAAC,CAAA;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;IAChC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAA;IACjD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAChC,MAAM,OAAO,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAA;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,OAAO,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAmB,EAAE,kBAA0B;IACvE,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAChE,MAAM,KAAK,GAAG,cAAc,CAAC;QAC3B,eAAe,EAAE,aAAa;QAC9B,kBAAkB,EAAE,MAAM,CAAC,WAAW;QACtC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC,CAAA;IACF,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAmB,EACnB,kBAA0B,EAC1B,KAAkB,EAClB,YAAoC;IAEpC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;QACxD,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;QACnD,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAA;QACjE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,KAAK;gBACnB,uBAAuB,EAAE,IAAI;gBAC7B,KAAK,EAAE,6CAA6C;aACrD,CAAA;QACH,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;QACpF,MAAM,qBAAqB,GACzB,YAAY,KAAK,SAAS;YACxB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,yBAAyB,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QACrE,OAAO;YACL,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,eAAe,CAC3B,KAAK,CAAC,SAAS,EACf,UAAU,CAAC,QAAQ,EACnB,IAAI,EACJ,WAAW,EACX,UAAU,CAAC,QAAQ,CACpB;YACD,uBAAuB,EAAE,qBAAqB;SAC/C,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,YAAY,EAAE,KAAK;YACnB,uBAAuB,EAAE,IAAI;YAC7B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;SAC5E,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAmB,EACnB,kBAAwC,EACxC,OAAiC;IAEjC,IAAI,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACpF,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC/D,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;IAC1C,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAAmB,EACnB,iBAAuC,EACvC,OAAiC;IAEjC,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAClF,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC7D,IAAI,CAAC,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAC3C,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAAwB,EACxB,OAAmC;IAEnC,MAAM,OAAO,GAA6B,EAAE,CAAA;IAC5C,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IAC1C,MAAM,kBAAkB,GAAG,KAAK,CAAC,oBAAoB,IAAI,OAAO,CAAC,oBAAoB,CAAA;IACrF,MAAM,iBAAiB,GAAG,KAAK,CAAC,mBAAmB,IAAI,OAAO,CAAC,mBAAmB,CAAA;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAA;IAEvD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;QAC9B,OAAO;YACL,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,KAAK;YACf,iBAAiB,EAAE,OAAO;YAC1B,QAAQ;YACR,YAAY,EAAE,IAAI;YAClB,oBAAoB,EAAE,IAAI;YAC1B,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,IAAI;SACtB,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,QAAQ,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IACtC,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACrD,IAAI,CAAC,YAAY,CAAC,WAAW;QAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAChE,IAAI,CAAC,YAAY,CAAC,KAAK;QAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IACvD,QAAQ,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAA;IAEvC,MAAM,aAAa,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,kBAAkB,EAAE,OAAO,CAAC,CAAA;IACpF,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAA;IACrF,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CACrC,KAAK,EACL,KAAK,CAAC,MAAM,EACZ,QAAQ,EACR,OAAO,CAAC,qBAAqB,KAAK,IAAI,EACtC,OAAO,CAAC,cAAc,EACtB,OAAO,CACR,CAAA;IACD,MAAM,IAAI,GAAG,UAAU,CACrB,KAAK,EACL,KAAK,CAAC,MAAM,EACZ,OAAO,CAAC,YAAY,KAAK,IAAI,EAC7B,OAAO,CAAC,uBAAuB,KAAK,IAAI,EACxC,OAAO,CACR,CAAA;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA;IAElD,MAAM,MAAM,GAA6B;QACvC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,aAAa,CAAC,MAAM,KAAK,CAAC;QACpC,iBAAiB,EAAE,aAAa;QAChC,QAAQ;QACR,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY;QACZ,YAAY,EAAE,YAAY,CAAC,WAAW;QACtC,oBAAoB,EAAE,QAAQ;QAC9B,cAAc,EAAE,aAAa;QAC7B,eAAe,EAAE,cAAc;QAC/B,IAAI;KACL,CAAA;IACD,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAA;IAC7C,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA2B,EAC3B,UAAsC,EAAE;IAExC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAC3D,OAAO;QACL,QAAQ;QACR,QAAQ;QACR,sBAAsB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;QAClE,YAAY,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;KACpC,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -2,6 +2,8 @@ export { AtribVerifier } from './verifier.js';
 export type { AtribVerifierOptions, CalculateOptions, VerifyRecommendationOptions, } from './verifier.js';
 export { verifyRecord } from './verify-record.js';
 export type { RecordVerificationResult, ProvenanceAnnotation, VerifyRecordOptions, CrossAttestationAnnotation, } from './verify-record.js';
+export { handoffClaimsFromEvidencePacket, verifyHandoffClaims } from './handoff.js';
+export type { HandoffBodyVerification, HandoffClaimsFromEvidenceOptions, HandoffClaimInput, HandoffClaimVerification, HandoffEvidenceEntry, HandoffEvidencePacket, HandoffProofVerification, HandoffRejectionReason, HandoffVerificationResult, VerifyHandoffClaimsOptions, } from './handoff.js';
 export { calculate, DEFAULT_POLICY, isValidPolicy } from './calculate.js';
 export { signRecommendation, verifyRecommendationSignature, recommendationSigningInput, distributionsMatch, } from './recommendation.js';
 export { buildPolicy, policyFrom } from './policy-builder.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,YAAY,EACV,oBAAoB,EACpB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,eAAe,CAAA;AAKtB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAGzE,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAG7D,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAG5F,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAC3E,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGxF,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,wBAAwB,EACxB,mBAAmB,EACnB,6BAA6B,EAC7B,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,yBAAyB,EACzB,8BAA8B,EAC9B,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,cAAc,EACd,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,MAAM,GACP,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,YAAY,EACV,SAAS,EACT,SAAS,EACT,aAAa,EACb,SAAS,EACT,QAAQ,EACR,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAC7C,YAAY,EACV,oBAAoB,EACpB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,eAAe,CAAA;AAKtB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,oBAAoB,CAAA;AAK3B,OAAO,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACnF,YAAY,EACV,uBAAuB,EACvB,gCAAgC,EAChC,iBAAiB,EACjB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,cAAc,CAAA;AAGrB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAGzE,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAG7D,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAG5F,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAC3E,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGxF,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EACV,wBAAwB,EACxB,mBAAmB,EACnB,6BAA6B,EAC7B,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,EAChB,yBAAyB,EACzB,8BAA8B,EAC9B,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,yBAAyB,EACzB,cAAc,EACd,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,MAAM,GACP,MAAM,sBAAsB,CAAA;AAG7B,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,EACb,kBAAkB,GACnB,MAAM,uBAAuB,CAAA;AAG9B,YAAY,EACV,SAAS,EACT,SAAS,EACT,aAAa,EACb,SAAS,EACT,QAAQ,EACR,OAAO,EACP,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,QAAQ,EACR,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -6,6 +6,10 @@ export { AtribVerifier } from './verifier.js';
 // AtribVerifier.verify which operates on a settlement RecommendationDocument.
 // Surfaces the implemented D044, D041, D045, D051, D052, and D094 annotations.
 export { verifyRecord } from './verify-record.js';
+// Cross-agent handoff claim verification. Used when one agent receives a
+// record_hash claim plus private body material from another agent and must
+// decide whether to link its next record through informed_by.
+export { handoffClaimsFromEvidencePacket, verifyHandoffClaims } from './handoff.js';
 // Calculation algorithm (§4.6). pure function, exported for direct use
 export { calculate, DEFAULT_POLICY, isValidPolicy } from './calculate.js';
 // Recommendation document signing/verification (§4.7)

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,+CAA+C;AAE/C,4BAA4B;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAO7C,8DAA8D;AAC9D,8EAA8E;AAC9E,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAQjD,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEzE,sDAAsD;AACtD,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAE5B,mDAAmD;AACnD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAE7D,+BAA+B;AAC/B,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE5F,6BAA6B;AAC7B,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAG3E,6EAA6E;AAC7E,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AA6B7B,0DAA0D;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAgCvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,+CAA+C;AAE/C,4BAA4B;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAO7C,8DAA8D;AAC9D,8EAA8E;AAC9E,+EAA+E;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAQjD,yEAAyE;AACzE,2EAA2E;AAC3E,8DAA8D;AAC9D,OAAO,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAcnF,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEzE,sDAAsD;AACtD,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,qBAAqB,CAAA;AAE5B,mDAAmD;AACnD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAE7D,+BAA+B;AAC/B,OAAO,EAAE,UAAU,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE5F,6BAA6B;AAC7B,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAG3E,6EAA6E;AAC7E,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,sBAAsB,CAAA;AA6B7B,0DAA0D;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAgCvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAA"}

package/dist/verify-record.d.ts

@@ -120,9 +120,10 @@ export interface CrossAttestationAnnotation {
      */
     signers_count: number;
     /**
-     * Number of signers whose Ed25519 signature successfully verifies
-     * against the cross-attestation canonical bytes (JCS form with
-     * `signers: []` and `signature` omitted, per §1.7.6).
+     * Number of distinct creator keys with at least one Ed25519 signature
+     * that successfully verifies against the cross-attestation canonical
+     * bytes (JCS form with `signers: []` and `signature` omitted, per
+     * §1.7.6). Duplicate entries from one key do not inflate this count.
      */
     signers_valid: number;
     /**
@@ -231,8 +232,8 @@ export interface RecordVerificationResult {
      * Cross-attestation annotation per §1.7.6 (D052). Populated ONLY for
      * transaction records (`event_type = https://atrib.dev/v1/types/transaction`).
      * Surfaces signers_count, signers_valid, and missing (true when fewer
-     * than 2 signers verified). Per §1.7.6 verifiers MUST flag missing
-     * cross-attestation; consumers decide policy.
+     * than 2 distinct signer keys verify). Per §1.7.6 verifiers MUST flag
+     * missing cross-attestation; consumers decide policy.
      */
     cross_attestation?: CrossAttestationAnnotation;
     /**
@@ -335,7 +336,8 @@ declare function resolveCapabilityCheck(record: AtribRecord, claim: ResolvedIden
  * For each entry in `record.signers`, verify the Ed25519 signature
  * against the cross-attestation canonical bytes (JCS form with
  * `signers: []` and the top-level `signature` field omitted). Count
- * valid signatures; flag `missing: true` when fewer than 2 verify.
+ * distinct valid signer keys; flag `missing: true` when fewer than 2
+ * independent keys verify.
  *
  * Per §1.7.6 mismatches are SIGNALS, not invalidation: missing
  * cross-attestation does NOT push to `warnings[]` (which would flip

package/dist/verify-record.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-record.d.ts","sourceRoot":"","sources":["../src/verify-record.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACL,eAAe,EAOf,KAAK,WAAW,EAEjB,MAAM,YAAY,CAAA;AAGnB,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,sBAAsB,CAAA;AAU7B;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAA;IACb;;;OAGG;IACH,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAChD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,sEAAsE;IACtE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAA;IACnC;;;;OAIG;IACH,WAAW,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB;;;;;OAKG;IACH,YAAY,EAAE,OAAO,CAAA;CACtB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAA;IACrB;;;;;;OAMG;IACH,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB,EAAE,IAAI,GAAG,GAAG,GAAG,KAAK,GAAG,GAAG,GAAG,GAAG,CAAA;IACrD;;;OAGG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAC7B;;;;OAIG;IACH,8BAA8B,EAAE,OAAO,CAAA;IACvC;;;;OAIG;IACH,oBAAoB,EAAE,cAAc,GAAG,eAAe,CAAA;IACtD;;;OAGG;IACH,sBAAsB,EAAE,cAAc,GAAG,eAAe,CAAA;IACxD;;;;;;OAMG;IACH,cAAc,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAA;CAC1C;AAUD,MAAM,WAAW,wBAAwB;IACvC,kDAAkD;IAClD,KAAK,EAAE,OAAO,CAAA;IACd,iEAAiE;IACjE,WAAW,EAAE,OAAO,CAAA;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,oBAAoB,CAAA;IACjC;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,oBAAoB,CAAA;IAC7C;;;;OAIG;IACH,OAAO,EAAE,iBAAiB,CAAA;IAC1B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,yBAAyB,CAAA;IAC5C;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,0BAA0B,CAAA;IAC9C;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,yBAAyB,CAAA;IAC3C,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,kBAAkB,CAAA;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,WAAW,CAAA;IAC/B;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,WAAW,EAAE,CAAA;IACpC;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAA;IACnC,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,0BAA0B,CAAA;CAClD;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAuFnC;AAoBD,iBAAS,iBAAiB,CACxB,KAAK,EAAE,MAAM,EACb,iBAAiB,EAAE,WAAW,GAAG,SAAS,GACzC,oBAAoB,CAetB;AAED,iBAAS,iBAAiB,CACxB,OAAO,EAAE,MAAM,EAAE,EACjB,UAAU,EAAE,WAAW,EAAE,EACzB,QAAQ,EAAE,MAAM,EAAE,GACjB,oBAAoB,CAuBtB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,iBAAS,sBAAsB,CAC7B,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,qBAAqB,EAC5B,SAAS,EAAE,MAAM,EAAE,GAClB,yBAAyB,CA4D3B;AAED;;;;;;;;;;;;;GAaG;AACH,iBAAe,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAsC/F;AAcD,iBAAS,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAuCjF;AAID,eAAO,MAAM,aAAa;;;;;;;;;;CAUzB,CAAA"}
+{"version":3,"file":"verify-record.d.ts","sourceRoot":"","sources":["../src/verify-record.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACL,eAAe,EAOf,KAAK,WAAW,EAEjB,MAAM,YAAY,CAAA;AAGnB,OAAO,KAAK,EACV,mBAAmB,EACnB,yBAAyB,EACzB,0BAA0B,EAC3B,MAAM,sBAAsB,CAAA;AAU7B;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAA;IACb;;;OAGG;IACH,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,UAAU,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IAChD,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACxC,sEAAsE;IACtE,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAA;IACnC;;;;OAIG;IACH,WAAW,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB;;;;;OAKG;IACH,YAAY,EAAE,OAAO,CAAA;CACtB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAA;IACrB;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAA;IACrB;;;;;;OAMG;IACH,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB,EAAE,IAAI,GAAG,GAAG,GAAG,KAAK,GAAG,GAAG,GAAG,GAAG,CAAA;IACrD;;;OAGG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAC7B;;;;OAIG;IACH,8BAA8B,EAAE,OAAO,CAAA;IACvC;;;;OAIG;IACH,oBAAoB,EAAE,cAAc,GAAG,eAAe,CAAA;IACtD;;;OAGG;IACH,sBAAsB,EAAE,cAAc,GAAG,eAAe,CAAA;IACxD;;;;;;OAMG;IACH,cAAc,EAAE,QAAQ,GAAG,OAAO,GAAG,IAAI,CAAA;CAC1C;AAUD,MAAM,WAAW,wBAAwB;IACvC,kDAAkD;IAClD,KAAK,EAAE,OAAO,CAAA;IACd,iEAAiE;IACjE,WAAW,EAAE,OAAO,CAAA;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,oBAAoB,CAAA;IACjC;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,oBAAoB,CAAA;IAC7C;;;;OAIG;IACH,OAAO,EAAE,iBAAiB,CAAA;IAC1B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,yBAAyB,CAAA;IAC5C;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,0BAA0B,CAAA;IAC9C;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,yBAAyB,CAAA;IAC3C,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,kBAAkB,CAAA;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,WAAW,CAAA;IAC/B;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,WAAW,EAAE,CAAA;IACpC;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,EAAE,qBAAqB,CAAA;IACrC;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAA;IACnC,8DAA8D;IAC9D,oBAAoB,CAAC,EAAE,0BAA0B,CAAA;CAClD;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAuFnC;AAoBD,iBAAS,iBAAiB,CACxB,KAAK,EAAE,MAAM,EACb,iBAAiB,EAAE,WAAW,GAAG,SAAS,GACzC,oBAAoB,CAetB;AAED,iBAAS,iBAAiB,CACxB,OAAO,EAAE,MAAM,EAAE,EACjB,UAAU,EAAE,WAAW,EAAE,EACzB,QAAQ,EAAE,MAAM,EAAE,GACjB,oBAAoB,CAuBtB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,iBAAS,sBAAsB,CAC7B,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,qBAAqB,EAC5B,SAAS,EAAE,MAAM,EAAE,GAClB,yBAAyB,CA4D3B;AAED;;;;;;;;;;;;;;GAcG;AACH,iBAAe,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAuC/F;AAqBD,iBAAS,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAuCjF;AAID,eAAO,MAAM,aAAa;;;;;;;;;;CAUzB,CAAA"}

package/dist/verify-record.js

@@ -257,7 +257,8 @@ function resolveCapabilityCheck(record, claim, _warnings) {
  * For each entry in `record.signers`, verify the Ed25519 signature
  * against the cross-attestation canonical bytes (JCS form with
  * `signers: []` and the top-level `signature` field omitted). Count
- * valid signatures; flag `missing: true` when fewer than 2 verify.
+ * distinct valid signer keys; flag `missing: true` when fewer than 2
+ * independent keys verify.
  *
  * Per §1.7.6 mismatches are SIGNALS, not invalidation: missing
  * cross-attestation does NOT push to `warnings[]` (which would flip
@@ -283,7 +284,7 @@ async function resolveCrossAttestation(record) {
         // if it does, treat all signers as unverifiable.
         return { signers_count, signers_valid: 0, missing: true };
     }
-    let signers_valid = 0;
+    const validSignerKeys = new Set();
     for (const entry of signers) {
         if (typeof entry?.creator_key !== 'string' || typeof entry?.signature !== 'string')
             continue;
@@ -292,12 +293,13 @@ async function resolveCrossAttestation(record) {
             const sig = base64urlDecode(entry.signature);
             const ok = await ed.verifyAsync(sig, canonicalBytes, pubKey);
             if (ok)
-                signers_valid++;
+                validSignerKeys.add(entry.creator_key);
         }
         catch {
             // Malformed key/sig bytes: skip without counting.
         }
     }
+    const signers_valid = validSignerKeys.size;
     return {
         signers_count,
         signers_valid,
@@ -306,14 +308,24 @@ async function resolveCrossAttestation(record) {
 }
 async function verifyCreatorSignerSignature(record) {
     const signers = Array.isArray(record.signers) ? record.signers : [];
-    const creatorSigner = signers.find((entry) => entry.creator_key === record.creator_key);
-    if (!creatorSigner)
+    const creatorSigners = signers.filter((entry) => entry.creator_key === record.creator_key);
+    if (creatorSigners.length === 0)
         return false;
-    const pubKey = base64urlDecode(creatorSigner.creator_key);
-    const sig = base64urlDecode(creatorSigner.signature);
-    if (pubKey.length !== 32 || sig.length !== 64)
-        return false;
-    return ed.verifyAsync(sig, canonicalCrossAttestationInput(record), pubKey);
+    const verifyInput = canonicalCrossAttestationInput(record);
+    for (const creatorSigner of creatorSigners) {
+        try {
+            const pubKey = base64urlDecode(creatorSigner.creator_key);
+            const sig = base64urlDecode(creatorSigner.signature);
+            if (pubKey.length !== 32 || sig.length !== 64)
+                continue;
+            if (await ed.verifyAsync(sig, verifyInput, pubKey))
+                return true;
+        }
+        catch {
+            // Try the next matching signer entry.
+        }
+    }
+    return false;
 }
 function detectPosture(record, warnings) {
     const declared = record.timestamp_granularity;