@atrib/verify 0.7.10 → 0.8.1

package/dist/evidence-envelope.d.ts

@@ -0,0 +1,205 @@
+import type { EvidenceConstraintCheck, EvidenceVerificationBlock } from './authorization-evidence.js';
+/** Tier ladder, ordered by independent reproducibility. Closed at four. */
+export declare const EVIDENCE_TIERS: readonly ["declared", "shape", "attested", "verified"];
+export type EvidenceTier = (typeof EVIDENCE_TIERS)[number];
+/** Where the payload bytes are retrievable. Closed at five. */
+export declare const EVIDENCE_REF_KINDS: readonly ["inline", "mirror", "archive", "external", "withheld"];
+export type EvidenceRefKind = (typeof EVIDENCE_REF_KINDS)[number];
+/** Constraint status, reused unchanged from the §5.5.6 block shape. */
+export declare const EVIDENCE_CONSTRAINT_STATUSES: readonly ["passed", "failed", "unresolved", "not_checked"];
+export type EvidenceConstraintStatus = (typeof EVIDENCE_CONSTRAINT_STATUSES)[number];
+/** `payload.hash` / `ref.record_hash` format: `sha256:` + 64 lowercase hex. */
+export declare const SHA256_REF_PATTERN: RegExp;
+/** atrib-maintained profiles live under this base URI. */
+export declare const ATRIB_PROFILE_BASE = "https://atrib.dev/v1/evidence/";
+/**
+ * The atrib-maintained registry: the eight-name initial set plus
+ * post-initial registrations (continuation-packet, per D142). Profile
+ * identity is the FULL URI; a bare name here is only the trailing path
+ * component under {@link ATRIB_PROFILE_BASE}. Third parties register their
+ * own absolute HTTPS URIs on domains they control and never appear in
+ * this list.
+ */
+export declare const ATRIB_PROFILE_REGISTRY: readonly ["oauth2", "mcp-oauth", "aauth", "x401", "ap2-vi", "human-approval", "counterparty-attestation", "delegation-certificate", "continuation-packet"];
+export type AtribProfileName = (typeof ATRIB_PROFILE_REGISTRY)[number];
+/** Full type URI for an atrib-maintained profile name. */
+export declare function atribProfileUri(name: AtribProfileName): string;
+/** Convenience map from atrib profile name to its full type URI. */
+export declare const ATRIB_PROFILE_URIS: Readonly<Record<AtribProfileName, string>>;
+/**
+ * The pre-envelope §5.5.6 `protocol` string set, frozen at exactly five
+ * values. No new legacy protocol string may be introduced anywhere in the
+ * substrate; every new evidence type registers as an envelope profile.
+ */
+export declare const FROZEN_LEGACY_PROTOCOLS: readonly ["oauth2", "mcp_oauth", "aauth", "x401", "ap2_vi"];
+export type FrozenLegacyProtocol = (typeof FROZEN_LEGACY_PROTOCOLS)[number];
+/** The fixed five-row legacy-protocol → profile-URI table. Complete and final. */
+export declare const LEGACY_PROTOCOL_TO_PROFILE: Readonly<Record<FrozenLegacyProtocol, string>>;
+/** Retrievability reference. `record_hash` is a sibling of `kind`, never a kind value. */
+export interface EvidenceEnvelopeRef {
+    kind: EvidenceRefKind;
+    uri?: string | null;
+    /**
+     * When set, declares the payload is itself a signed atrib record;
+     * `payload.hash` commits to that record's canonical JCS bytes. MAY
+     * accompany any `kind` except `inline`.
+     */
+    record_hash?: string | null;
+}
+export interface EvidenceEnvelopePayload {
+    hash: string;
+    media_type?: string;
+    ref: EvidenceEnvelopeRef;
+    /** Raw payload, local-only, never public. Permitted ONLY under ref.kind 'inline'. */
+    inline?: unknown;
+}
+export interface EvidenceEnvelopeResult {
+    valid: boolean;
+    constraints: EvidenceConstraintCheck[];
+    errors: string[];
+    warnings: string[];
+}
+export interface EvidenceEnvelopeVerifier {
+    name: string;
+    version?: string;
+    checked_at_ms?: number;
+}
+/** The one schema, versioned by the integer `envelope` field. */
+export interface EvidenceEnvelope {
+    envelope: 1;
+    profile: string;
+    profile_version: string;
+    tier: EvidenceTier;
+    payload: EvidenceEnvelopePayload;
+    facts?: Record<string, unknown>;
+    result: EvidenceEnvelopeResult;
+    verifier?: EvidenceEnvelopeVerifier;
+}
+export interface EnvelopeValidation {
+    valid: boolean;
+    /** Machine-readable reject reason codes; empty iff accepted. */
+    reasons: string[];
+}
+/**
+ * Validate an envelope against the normative §5.5.7 shape rules. Returns a
+ * closed set of reason codes; an empty `reasons` array (and `valid: true`)
+ * means the envelope is well-formed. Rejecting an envelope never rejects the
+ * record it attaches to. This function does not throw.
+ *
+ * Reason codes: `envelope_version`, `profile_uri`, `profile_version`, `tier`,
+ * `payload`, `payload_hash`, `ref`, `ref_kind`, `inline_without_inline_kind`,
+ * `record_hash_format`, `record_hash_with_inline_kind`, `result`,
+ * `result_valid`, `result_constraints`, `constraint_status`, `result_errors`,
+ * `result_warnings`, `verifier`.
+ */
+export declare function validateEnvelope(envelope: unknown): EnvelopeValidation;
+/** True iff the envelope is well-formed per {@link validateEnvelope}. */
+export declare function isValidEnvelope(envelope: unknown): envelope is EvidenceEnvelope;
+export interface ProfileClassification {
+    uri_valid: boolean;
+    atrib_maintained: boolean;
+    registered: boolean;
+    treat_as: 'registered' | 'unknown-preserve';
+}
+/**
+ * Classify a profile URI against the atrib registry. Identity is the full
+ * URI: a foreign domain reusing an atrib profile name (e.g.
+ * `https://example.com/v1/evidence/oauth2`) is a valid third-party profile
+ * and MUST NOT be treated as the atrib profile of the same name.
+ *
+ * @param registry trailing-name registry to check against; defaults to the
+ *   atrib-maintained set. Only consulted for URIs under
+ *   {@link ATRIB_PROFILE_BASE}.
+ */
+export declare function classifyProfile(uri: string, registry?: readonly string[]): ProfileClassification;
+export interface OpaqueEnvelopeRender {
+    profile: string;
+    tier: string;
+    payload_hash: string;
+}
+/**
+ * The opaque rendering surface for any envelope (known or unknown profile):
+ * profile URI, tier, and payload hash. Consumers MUST render unknown-profile
+ * envelopes this way; they MUST NOT drop them and MUST NOT let them affect
+ * record validity. Preservation itself is the identity function — this
+ * helper only extracts the safe-to-surface fields.
+ */
+export declare function renderEnvelopeOpaque(envelope: EvidenceEnvelope): OpaqueEnvelopeRender;
+/** `sha256:` + hex(SHA-256(JCS(value))). The JSON-media-type hash rule. */
+export declare function jcsSha256(value: unknown): string;
+/** `sha256:` + hex(SHA-256(UTF-8(text))). The raw-bytes hash rule. */
+export declare function rawSha256(text: string): string;
+/**
+ * The legacy §5.5.6 evidence block shape as consumed by the mapping. This is
+ * structurally the {@link EvidenceVerificationBlock} plus its required
+ * fields; the mapping reads only the fields listed here.
+ */
+export interface LegacyEvidenceBlock {
+    protocol: string;
+    valid: boolean;
+    issuer: string | null;
+    subject: string | null;
+    scope: string[];
+    attenuation_ok: boolean | null;
+    delegation_ok: boolean | null;
+    constraints: EvidenceConstraintCheck[];
+    errors: string[];
+    warnings: string[];
+    details?: unknown;
+}
+/**
+ * Deterministically map a legacy §5.5.6 evidence block into envelope form.
+ * Two implementations given the same block MUST produce identical envelopes.
+ *
+ * - `protocol` maps through the fixed five-row table; any other string throws
+ *   (`unknown legacy evidence protocol '<protocol>'`). The mapping never
+ *   invents a profile URI. Producer-side callers wrap this per §5.8.
+ * - The mapped envelope carries `envelope: 1`, `profile_version: "1.0.0"`,
+ *   and `tier: "attested"` (a legacy block records what a caller-owned path
+ *   accepted; it carries no trust roots, so it never claims `"verified"`).
+ * - `payload.hash` commits to the legacy block itself (JCS), with
+ *   `media_type: "application/json"` and `ref.kind: "withheld"`.
+ * - `issuer` / `subject` / `scope` / `attenuation_ok` / `delegation_ok` copy
+ *   into `facts` unchanged (nulls preserved); `details`, when present, is
+ *   committed as `facts.details_hash` (never inlined).
+ * - `valid` / `constraints` / `errors` / `warnings` copy into `result`.
+ * - No `verifier` block: the mapping is mechanical, not a re-verification.
+ */
+export declare function mapLegacyEvidenceBlock(block: LegacyEvidenceBlock): EvidenceEnvelope;
+/**
+ * Spec-named alias for {@link mapLegacyEvidenceBlock}. §5.5.7 refers to the
+ * mapping as `fromLegacyEvidenceBlock`; both names are the same function.
+ */
+export declare const fromLegacyEvidenceBlock: typeof mapLegacyEvidenceBlock;
+/** Map a verifier {@link EvidenceVerificationBlock} whose protocol is frozen-legacy. */
+export declare function envelopeFromEvidenceBlock(block: EvidenceVerificationBlock): EvidenceEnvelope;
+/** Numeric rank of a tier (higher = more independently reproducible). */
+export declare function tierRank(tier: EvidenceTier): number;
+/** The dedup identity key for an envelope instance: `(profile, payload.hash)`. */
+export declare function envelopeIdentityKey(envelope: EvidenceEnvelope): string;
+/**
+ * Order envelope instances the way consumers MUST: tier descending, then
+ * `verifier.checked_at_ms` descending, then verifier name ascending. Stable;
+ * does not mutate the input.
+ */
+export declare function orderEnvelopeInstances<T extends EvidenceEnvelope>(instances: readonly T[]): T[];
+/**
+ * Relay-swap detector. A consumer MUST NOT relay another party's envelope
+ * with its own identity in `verifier` or with a raised tier; re-verification
+ * produces a new instance with its own checks. An instance that differs from
+ * another ONLY in its `verifier` block — same tier, facts, result, payload —
+ * is a relay under a swapped identity, not a re-verification, and is flagged.
+ */
+export declare function isRelayIdentitySwap(original: Record<string, unknown>, relayed: Record<string, unknown>): boolean;
+/**
+ * Reproducibility of a well-formed envelope. A `tier: "verified"` envelope
+ * whose payload cannot be retrieved (`ref.kind: "withheld"`) is still
+ * well-formed; consumers MUST report it as claimed-but-not-reproducible,
+ * mirroring the §2.12.7 tiered record-verifiability ladder.
+ */
+export interface EnvelopeReproducibility {
+    reproducible: boolean;
+    report: 'reproducible' | 'claimed-not-reproducible';
+}
+export declare function assessReproducibility(envelope: EvidenceEnvelope): EnvelopeReproducibility;
+//# sourceMappingURL=evidence-envelope.d.ts.map

package/dist/evidence-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-envelope.d.ts","sourceRoot":"","sources":["../src/evidence-envelope.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAA;AAIrG,2EAA2E;AAC3E,eAAO,MAAM,cAAc,wDAAyD,CAAA;AACpF,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAA;AAE1D,+DAA+D;AAC/D,eAAO,MAAM,kBAAkB,kEAAmE,CAAA;AAClG,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEjE,uEAAuE;AACvE,eAAO,MAAM,4BAA4B,4DAK/B,CAAA;AACV,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAA;AAEpF,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,QAA0B,CAAA;AAEzD,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,mCAAmC,CAAA;AAIlE;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,4JAUzB,CAAA;AACV,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAA;AAEtE,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,IAAI,EAAE,gBAAgB,GAAG,MAAM,CAE9D;AAED,oEAAoE;AACpE,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAIzE,CAAA;AAID;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,6DAA8D,CAAA;AAClG,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE3E,kFAAkF;AAClF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAOlF,CAAA;AAIJ,0FAA0F;AAC1F,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,eAAe,CAAA;IACrB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,EAAE,mBAAmB,CAAA;IACxB,qFAAqF;IACrF,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAA;IACd,WAAW,EAAE,uBAAuB,EAAE,CAAA;IACtC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,iEAAiE;AACjE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,CAAC,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,MAAM,CAAA;IACvB,IAAI,EAAE,YAAY,CAAA;IAClB,OAAO,EAAE,uBAAuB,CAAA;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,MAAM,EAAE,sBAAsB,CAAA;IAC9B,QAAQ,CAAC,EAAE,wBAAwB,CAAA;CACpC;AAID,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAA;IACd,gEAAgE;IAChE,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAiBD;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,kBAAkB,CAyFtE;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,IAAI,gBAAgB,CAE/E;AAID,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,OAAO,CAAA;IAClB,gBAAgB,EAAE,OAAO,CAAA;IACzB,UAAU,EAAE,OAAO,CAAA;IACnB,QAAQ,EAAE,YAAY,GAAG,kBAAkB,CAAA;CAC5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,MAAM,EACX,QAAQ,GAAE,SAAS,MAAM,EAA2B,GACnD,qBAAqB,CAavB;AAID,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,oBAAoB,CAMrF;AAYD,2EAA2E;AAC3E,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEhD;AAED,sEAAsE;AACtE,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C;AAID;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,cAAc,EAAE,OAAO,GAAG,IAAI,CAAA;IAC9B,aAAa,EAAE,OAAO,GAAG,IAAI,CAAA;IAC7B,WAAW,EAAE,uBAAuB,EAAE,CAAA;IACtC,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,OAAO,CAAC,EAAE,OAAO,CAAA;CAClB;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,GAAG,gBAAgB,CAmCnF;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,+BAAyB,CAAA;AAE7D,wFAAwF;AACxF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,yBAAyB,GAAG,gBAAgB,CAE5F;AAWD,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAEnD;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,SAAS,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CAS/F;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAUT;AAED;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,OAAO,CAAA;IACrB,MAAM,EAAE,cAAc,GAAG,0BAA0B,CAAA;CACpD;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,uBAAuB,CAMzF"}

package/dist/evidence-envelope.js

@@ -0,0 +1,378 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Universal evidence envelope (spec §5.5.7, D137).
+ *
+ * The single protocol-level attachment model for all externally verifiable
+ * material: OAuth / MCP authorization results, AAuth tokens, x401 proofs,
+ * AP2 / Verifiable Intent receipts, human approvals, counterparty
+ * co-signature receipts, delegation certificates, and every future evidence
+ * type. Each evidence type is a *profile* of the envelope, identified by an
+ * absolute HTTPS type URI and versioned independently of the specification.
+ *
+ * Envelopes are verifier-layer objects. They never touch signed bytes, never
+ * enter the 90-byte log entry or a propagation token, and never alter record
+ * signature verification, graph derivation, settlement calculation, or
+ * `verifyRecord().valid`. Consumers apply their own policy over tiers.
+ *
+ * This module is the real library surface that the §5.5.7 conformance corpus
+ * (`spec/conformance/evidence-envelope/`) exercises through the reference
+ * consumer at `packages/verify/test/conformance-evidence-envelope.test.ts`.
+ *
+ * Producer-side writers of these envelopes follow the §5.8 degradation
+ * contract: catch-all, silent-failure, `atrib:`-prefixed logging. A failed
+ * envelope construction drops the envelope, never the record or the primary
+ * tool response. The pure functions here throw only for the one normative
+ * MUST-reject case in the legacy mapping (an unknown legacy protocol string);
+ * callers running producer-side wrap that call per §5.8.
+ */
+import canonicalize from 'canonicalize';
+import { hexEncode, sha256 } from '@atrib/mcp';
+// ─── Closed enums (normative, spec §5.5.7) ─────────────────────────────
+/** Tier ladder, ordered by independent reproducibility. Closed at four. */
+export const EVIDENCE_TIERS = ['declared', 'shape', 'attested', 'verified'];
+/** Where the payload bytes are retrievable. Closed at five. */
+export const EVIDENCE_REF_KINDS = ['inline', 'mirror', 'archive', 'external', 'withheld'];
+/** Constraint status, reused unchanged from the §5.5.6 block shape. */
+export const EVIDENCE_CONSTRAINT_STATUSES = [
+    'passed',
+    'failed',
+    'unresolved',
+    'not_checked',
+];
+/** `payload.hash` / `ref.record_hash` format: `sha256:` + 64 lowercase hex. */
+export const SHA256_REF_PATTERN = /^sha256:[0-9a-f]{64}$/;
+/** atrib-maintained profiles live under this base URI. */
+export const ATRIB_PROFILE_BASE = 'https://atrib.dev/v1/evidence/';
+// ─── atrib-maintained profile registry (spec §5.5.7) ───────────────────
+/**
+ * The atrib-maintained registry: the eight-name initial set plus
+ * post-initial registrations (continuation-packet, per D142). Profile
+ * identity is the FULL URI; a bare name here is only the trailing path
+ * component under {@link ATRIB_PROFILE_BASE}. Third parties register their
+ * own absolute HTTPS URIs on domains they control and never appear in
+ * this list.
+ */
+export const ATRIB_PROFILE_REGISTRY = [
+    'oauth2',
+    'mcp-oauth',
+    'aauth',
+    'x401',
+    'ap2-vi',
+    'human-approval',
+    'counterparty-attestation',
+    'delegation-certificate',
+    'continuation-packet',
+];
+/** Full type URI for an atrib-maintained profile name. */
+export function atribProfileUri(name) {
+    return `${ATRIB_PROFILE_BASE}${name}`;
+}
+/** Convenience map from atrib profile name to its full type URI. */
+export const ATRIB_PROFILE_URIS = Object.freeze(Object.fromEntries(ATRIB_PROFILE_REGISTRY.map((name) => [name, `${ATRIB_PROFILE_BASE}${name}`])));
+// ─── Frozen legacy protocol set (spec §5.5.7) ──────────────────────────
+/**
+ * The pre-envelope §5.5.6 `protocol` string set, frozen at exactly five
+ * values. No new legacy protocol string may be introduced anywhere in the
+ * substrate; every new evidence type registers as an envelope profile.
+ */
+export const FROZEN_LEGACY_PROTOCOLS = ['oauth2', 'mcp_oauth', 'aauth', 'x401', 'ap2_vi'];
+/** The fixed five-row legacy-protocol → profile-URI table. Complete and final. */
+export const LEGACY_PROTOCOL_TO_PROFILE = Object.freeze({
+    oauth2: `${ATRIB_PROFILE_BASE}oauth2`,
+    mcp_oauth: `${ATRIB_PROFILE_BASE}mcp-oauth`,
+    aauth: `${ATRIB_PROFILE_BASE}aauth`,
+    x401: `${ATRIB_PROFILE_BASE}x401`,
+    ap2_vi: `${ATRIB_PROFILE_BASE}ap2-vi`,
+});
+function isHttpsUri(value) {
+    if (typeof value !== 'string')
+        return false;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    return url.protocol === 'https:';
+}
+function isPlainObject(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+/**
+ * Validate an envelope against the normative §5.5.7 shape rules. Returns a
+ * closed set of reason codes; an empty `reasons` array (and `valid: true`)
+ * means the envelope is well-formed. Rejecting an envelope never rejects the
+ * record it attaches to. This function does not throw.
+ *
+ * Reason codes: `envelope_version`, `profile_uri`, `profile_version`, `tier`,
+ * `payload`, `payload_hash`, `ref`, `ref_kind`, `inline_without_inline_kind`,
+ * `record_hash_format`, `record_hash_with_inline_kind`, `result`,
+ * `result_valid`, `result_constraints`, `constraint_status`, `result_errors`,
+ * `result_warnings`, `verifier`.
+ */
+export function validateEnvelope(envelope) {
+    const reasons = [];
+    if (!isPlainObject(envelope)) {
+        return { valid: false, reasons: ['envelope'] };
+    }
+    if (envelope['envelope'] !== 1)
+        reasons.push('envelope_version');
+    if (!isHttpsUri(envelope['profile']))
+        reasons.push('profile_uri');
+    const profileVersion = envelope['profile_version'];
+    if (typeof profileVersion !== 'string' || profileVersion.length === 0) {
+        reasons.push('profile_version');
+    }
+    const tier = envelope['tier'];
+    if (typeof tier !== 'string' || !EVIDENCE_TIERS.includes(tier)) {
+        reasons.push('tier');
+    }
+    const payload = envelope['payload'];
+    if (!isPlainObject(payload)) {
+        reasons.push('payload');
+    }
+    else {
+        const hash = payload['hash'];
+        if (typeof hash !== 'string' || !SHA256_REF_PATTERN.test(hash)) {
+            reasons.push('payload_hash');
+        }
+        const ref = payload['ref'];
+        if (!isPlainObject(ref)) {
+            reasons.push('ref');
+        }
+        else {
+            const kind = ref['kind'];
+            if (typeof kind !== 'string' || !EVIDENCE_REF_KINDS.includes(kind)) {
+                reasons.push('ref_kind');
+            }
+            // inline is permitted ONLY when ref.kind is 'inline'.
+            if (payload['inline'] !== undefined && kind !== 'inline') {
+                reasons.push('inline_without_inline_kind');
+            }
+            const recordHash = ref['record_hash'];
+            if (recordHash !== undefined && recordHash !== null) {
+                if (typeof recordHash !== 'string' || !SHA256_REF_PATTERN.test(recordHash)) {
+                    reasons.push('record_hash_format');
+                }
+                // record_hash is redundant with an inline body.
+                if (kind === 'inline')
+                    reasons.push('record_hash_with_inline_kind');
+            }
+        }
+    }
+    const result = envelope['result'];
+    if (!isPlainObject(result)) {
+        reasons.push('result');
+    }
+    else {
+        if (typeof result['valid'] !== 'boolean')
+            reasons.push('result_valid');
+        const constraints = result['constraints'];
+        if (!Array.isArray(constraints)) {
+            reasons.push('result_constraints');
+        }
+        else {
+            for (const entry of constraints) {
+                const status = isPlainObject(entry) ? entry['status'] : undefined;
+                if (typeof status !== 'string' ||
+                    !EVIDENCE_CONSTRAINT_STATUSES.includes(status)) {
+                    reasons.push('constraint_status');
+                    break;
+                }
+            }
+        }
+        if (!Array.isArray(result['errors']))
+            reasons.push('result_errors');
+        if (!Array.isArray(result['warnings']))
+            reasons.push('result_warnings');
+    }
+    const verifier = envelope['verifier'];
+    if (verifier !== undefined) {
+        if (!isPlainObject(verifier) ||
+            typeof verifier['name'] !== 'string' ||
+            verifier['name'].length === 0) {
+            reasons.push('verifier');
+        }
+    }
+    return { valid: reasons.length === 0, reasons };
+}
+/** True iff the envelope is well-formed per {@link validateEnvelope}. */
+export function isValidEnvelope(envelope) {
+    return validateEnvelope(envelope).valid;
+}
+/**
+ * Classify a profile URI against the atrib registry. Identity is the full
+ * URI: a foreign domain reusing an atrib profile name (e.g.
+ * `https://example.com/v1/evidence/oauth2`) is a valid third-party profile
+ * and MUST NOT be treated as the atrib profile of the same name.
+ *
+ * @param registry trailing-name registry to check against; defaults to the
+ *   atrib-maintained set. Only consulted for URIs under
+ *   {@link ATRIB_PROFILE_BASE}.
+ */
+export function classifyProfile(uri, registry = ATRIB_PROFILE_REGISTRY) {
+    const uriValid = isHttpsUri(uri);
+    const atribMaintained = uriValid && uri.startsWith(ATRIB_PROFILE_BASE);
+    const name = atribMaintained ? uri.slice(ATRIB_PROFILE_BASE.length) : '';
+    // A nested atrib-shaped path (e.g. .../oauth2/extra) is not a bare
+    // registered name; require an exact trailing-name match.
+    const registered = atribMaintained && name.length > 0 && registry.includes(name);
+    return {
+        uri_valid: uriValid,
+        atrib_maintained: atribMaintained,
+        registered,
+        treat_as: registered ? 'registered' : 'unknown-preserve',
+    };
+}
+/**
+ * The opaque rendering surface for any envelope (known or unknown profile):
+ * profile URI, tier, and payload hash. Consumers MUST render unknown-profile
+ * envelopes this way; they MUST NOT drop them and MUST NOT let them affect
+ * record validity. Preservation itself is the identity function — this
+ * helper only extracts the safe-to-surface fields.
+ */
+export function renderEnvelopeOpaque(envelope) {
+    return {
+        profile: envelope.profile,
+        tier: envelope.tier,
+        payload_hash: envelope.payload.hash,
+    };
+}
+// ─── Hashing helpers (spec §5.5.7 payload hash rule) ───────────────────
+const utf8 = new TextEncoder();
+function jcsBytes(value) {
+    const json = canonicalize(value);
+    if (json === undefined)
+        throw new Error('canonicalize returned undefined');
+    return utf8.encode(json);
+}
+/** `sha256:` + hex(SHA-256(JCS(value))). The JSON-media-type hash rule. */
+export function jcsSha256(value) {
+    return 'sha256:' + hexEncode(sha256(jcsBytes(value)));
+}
+/** `sha256:` + hex(SHA-256(UTF-8(text))). The raw-bytes hash rule. */
+export function rawSha256(text) {
+    return 'sha256:' + hexEncode(sha256(utf8.encode(text)));
+}
+function isFrozenLegacyProtocol(value) {
+    return FROZEN_LEGACY_PROTOCOLS.includes(value);
+}
+/**
+ * Deterministically map a legacy §5.5.6 evidence block into envelope form.
+ * Two implementations given the same block MUST produce identical envelopes.
+ *
+ * - `protocol` maps through the fixed five-row table; any other string throws
+ *   (`unknown legacy evidence protocol '<protocol>'`). The mapping never
+ *   invents a profile URI. Producer-side callers wrap this per §5.8.
+ * - The mapped envelope carries `envelope: 1`, `profile_version: "1.0.0"`,
+ *   and `tier: "attested"` (a legacy block records what a caller-owned path
+ *   accepted; it carries no trust roots, so it never claims `"verified"`).
+ * - `payload.hash` commits to the legacy block itself (JCS), with
+ *   `media_type: "application/json"` and `ref.kind: "withheld"`.
+ * - `issuer` / `subject` / `scope` / `attenuation_ok` / `delegation_ok` copy
+ *   into `facts` unchanged (nulls preserved); `details`, when present, is
+ *   committed as `facts.details_hash` (never inlined).
+ * - `valid` / `constraints` / `errors` / `warnings` copy into `result`.
+ * - No `verifier` block: the mapping is mechanical, not a re-verification.
+ */
+export function mapLegacyEvidenceBlock(block) {
+    if (!isFrozenLegacyProtocol(block.protocol)) {
+        throw new Error(`unknown legacy evidence protocol '${block.protocol}'`);
+    }
+    const profile = LEGACY_PROTOCOL_TO_PROFILE[block.protocol];
+    const facts = {
+        issuer: block.issuer,
+        subject: block.subject,
+        scope: block.scope,
+        attenuation_ok: block.attenuation_ok,
+        delegation_ok: block.delegation_ok,
+    };
+    if (block.details !== undefined) {
+        facts['details_hash'] = jcsSha256(block.details);
+    }
+    return {
+        envelope: 1,
+        profile,
+        profile_version: '1.0.0',
+        tier: 'attested',
+        payload: {
+            hash: jcsSha256(block),
+            media_type: 'application/json',
+            ref: { kind: 'withheld' },
+        },
+        facts,
+        result: {
+            valid: block.valid,
+            constraints: block.constraints,
+            errors: block.errors,
+            warnings: block.warnings,
+        },
+    };
+}
+/**
+ * Spec-named alias for {@link mapLegacyEvidenceBlock}. §5.5.7 refers to the
+ * mapping as `fromLegacyEvidenceBlock`; both names are the same function.
+ */
+export const fromLegacyEvidenceBlock = mapLegacyEvidenceBlock;
+/** Map a verifier {@link EvidenceVerificationBlock} whose protocol is frozen-legacy. */
+export function envelopeFromEvidenceBlock(block) {
+    return mapLegacyEvidenceBlock(block);
+}
+// ─── Tier semantics (spec §5.5.7 tier rules) ───────────────────────────
+const TIER_RANK = {
+    declared: 0,
+    shape: 1,
+    attested: 2,
+    verified: 3,
+};
+/** Numeric rank of a tier (higher = more independently reproducible). */
+export function tierRank(tier) {
+    return TIER_RANK[tier];
+}
+/** The dedup identity key for an envelope instance: `(profile, payload.hash)`. */
+export function envelopeIdentityKey(envelope) {
+    return `${envelope.profile} ${envelope.payload.hash}`;
+}
+/**
+ * Order envelope instances the way consumers MUST: tier descending, then
+ * `verifier.checked_at_ms` descending, then verifier name ascending. Stable;
+ * does not mutate the input.
+ */
+export function orderEnvelopeInstances(instances) {
+    return [...instances].sort((a, b) => {
+        const tierDelta = TIER_RANK[b.tier] - TIER_RANK[a.tier];
+        if (tierDelta !== 0)
+            return tierDelta;
+        const aChecked = a.verifier?.checked_at_ms ?? 0;
+        const bChecked = b.verifier?.checked_at_ms ?? 0;
+        if (bChecked !== aChecked)
+            return bChecked - aChecked;
+        return (a.verifier?.name ?? '').localeCompare(b.verifier?.name ?? '');
+    });
+}
+/**
+ * Relay-swap detector. A consumer MUST NOT relay another party's envelope
+ * with its own identity in `verifier` or with a raised tier; re-verification
+ * produces a new instance with its own checks. An instance that differs from
+ * another ONLY in its `verifier` block — same tier, facts, result, payload —
+ * is a relay under a swapped identity, not a re-verification, and is flagged.
+ */
+export function isRelayIdentitySwap(original, relayed) {
+    const strip = (envelope) => {
+        const clone = { ...envelope };
+        delete clone['verifier'];
+        return clone;
+    };
+    const bodiesIdentical = canonicalize(strip(original)) === canonicalize(strip(relayed));
+    const verifierChanged = canonicalize(original['verifier'] ?? null) !== canonicalize(relayed['verifier'] ?? null);
+    return bodiesIdentical && verifierChanged;
+}
+export function assessReproducibility(envelope) {
+    const reproducible = envelope.payload.ref.kind !== 'withheld';
+    return {
+        reproducible,
+        report: reproducible ? 'reproducible' : 'claimed-not-reproducible',
+    };
+}
+//# sourceMappingURL=evidence-envelope.js.map

package/dist/evidence-envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-envelope.js","sourceRoot":"","sources":["../src/evidence-envelope.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,YAAY,MAAM,cAAc,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,YAAY,CAAA;AAG9C,0EAA0E;AAE1E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAU,CAAA;AAGpF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,CAAU,CAAA;AAGlG,uEAAuE;AACvE,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,QAAQ;IACR,QAAQ;IACR,YAAY;IACZ,aAAa;CACL,CAAA;AAGV,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,uBAAuB,CAAA;AAEzD,0DAA0D;AAC1D,MAAM,CAAC,MAAM,kBAAkB,GAAG,gCAAgC,CAAA;AAElE,0EAA0E;AAE1E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,QAAQ;IACR,WAAW;IACX,OAAO;IACP,MAAM;IACN,QAAQ;IACR,gBAAgB;IAChB,0BAA0B;IAC1B,wBAAwB;IACxB,qBAAqB;CACb,CAAA;AAGV,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,IAAsB;IACpD,OAAO,GAAG,kBAAkB,GAAG,IAAI,EAAE,CAAA;AACvC,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,MAAM,kBAAkB,GAA+C,MAAM,CAAC,MAAM,CACzF,MAAM,CAAC,WAAW,CAChB,sBAAsB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,kBAAkB,GAAG,IAAI,EAAE,CAAC,CAAC,CACzC,CACtC,CAAA;AAED,0EAA0E;AAE1E;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAA;AAGlG,kFAAkF;AAClF,MAAM,CAAC,MAAM,0BAA0B,GACrC,MAAM,CAAC,MAAM,CAAC;IACZ,MAAM,EAAE,GAAG,kBAAkB,QAAQ;IACrC,SAAS,EAAE,GAAG,kBAAkB,WAAW;IAC3C,KAAK,EAAE,GAAG,kBAAkB,OAAO;IACnC,IAAI,EAAE,GAAG,kBAAkB,MAAM;IACjC,MAAM,EAAE,GAAG,kBAAkB,QAAQ;CACtC,CAAC,CAAA;AAyDJ,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAA;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAiB;IAChD,MAAM,OAAO,GAAa,EAAE,CAAA;IAE5B,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAA;IAChD,CAAC;IAED,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;IAEhE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAEjE,MAAM,cAAc,GAAG,QAAQ,CAAC,iBAAiB,CAAC,CAAA;IAClD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACjC,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAA;IACnC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACzB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;QAC5B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC9B,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAC1B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAA;YACxB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAE,kBAAwC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1F,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAC1B,CAAC;YACD,sDAAsD;YACtD,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACzD,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;YAC5C,CAAC;YACD,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC,CAAA;YACrC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACpD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3E,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;gBACpC,CAAC;gBACD,gDAAgD;gBAChD,IAAI,IAAI,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACjC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACxB,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACtE,MAAM,WAAW,GAAG,MAAM,CAAC,aAAa,CAAC,CAAA;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QACpC,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBACjE,IACE,OAAO,MAAM,KAAK,QAAQ;oBAC1B,CAAE,4BAAkD,CAAC,QAAQ,CAAC,MAAM,CAAC,EACrE,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;oBACjC,MAAK;gBACP,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IACzE,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;IACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IACE,CAAC,aAAa,CAAC,QAAQ,CAAC;YACxB,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ;YACnC,QAAQ,CAAC,MAAM,CAAY,CAAC,MAAM,KAAK,CAAC,EACzC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAA;AACjD,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,QAAiB;IAC/C,OAAO,gBAAgB,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAA;AACzC,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,WAA8B,sBAAsB;IAEpD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,eAAe,GAAG,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAA;IACtE,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACxE,mEAAmE;IACnE,yDAAyD;IACzD,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAChF,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,gBAAgB,EAAE,eAAe;QACjC,UAAU;QACV,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,kBAAkB;KACzD,CAAA;AACH,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAA0B;IAC7D,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI;KACpC,CAAA;AACH,CAAC;AAED,0EAA0E;AAE1E,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAA;AAE9B,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IAC1E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;AAC1B,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACvD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACzD,CAAC;AAuBD,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAQ,uBAA6C,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AACvE,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAA0B;IAC/D,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IAE1D,MAAM,KAAK,GAA4B;QACrC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAA;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;IAClD,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,OAAO;QACP,eAAe,EAAE,OAAO;QACxB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE;YACP,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC;YACtB,UAAU,EAAE,kBAAkB;YAC9B,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;SAC1B;QACD,KAAK;QACL,MAAM,EAAE;YACN,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;KACF,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAA;AAE7D,wFAAwF;AACxF,MAAM,UAAU,yBAAyB,CAAC,KAAgC;IACxE,OAAO,sBAAsB,CAAC,KAAuC,CAAC,CAAA;AACxE,CAAC;AAED,0EAA0E;AAE1E,MAAM,SAAS,GAAiC;IAC9C,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;IACR,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;CACZ,CAAA;AAED,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,IAAkB;IACzC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAA;AACxB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,QAA0B;IAC5D,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAA6B,SAAuB;IACxF,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QACvD,IAAI,SAAS,KAAK,CAAC;YAAE,OAAO,SAAS,CAAA;QACrC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,IAAI,CAAC,CAAA;QAC/C,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,IAAI,CAAC,CAAA;QAC/C,IAAI,QAAQ,KAAK,QAAQ;YAAE,OAAO,QAAQ,GAAG,QAAQ,CAAA;QACrD,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAiC,EACjC,OAAgC;IAEhC,MAAM,KAAK,GAAG,CAAC,QAAiC,EAA2B,EAAE;QAC3E,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAA;QAC7B,OAAO,KAAK,CAAC,UAAU,CAAC,CAAA;QACxB,OAAO,KAAK,CAAA;IACd,CAAC,CAAA;IACD,MAAM,eAAe,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;IACtF,MAAM,eAAe,GACnB,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,CAAA;IAC1F,OAAO,eAAe,IAAI,eAAe,CAAA;AAC3C,CAAC;AAaD,MAAM,UAAU,qBAAqB,CAAC,QAA0B;IAC9D,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,UAAU,CAAA;IAC7D,OAAO;QACL,YAAY;QACZ,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,0BAA0B;KACnE,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -4,6 +4,8 @@ export { verifyRecord } from './verify-record.js';
 export type { RecordVerificationResult, ProvenanceAnnotation, VerifyRecordOptions, ResolvedCapabilityFacts, CrossAttestationAnnotation, } from './verify-record.js';
 export { verifyAuthorizationEvidence, verifyOAuthAuthorizationEvidence, } from './authorization-evidence.js';
 export type { AuthorizationEvidenceInput, EvidenceCheckStatus, EvidenceConstraintCheck, EvidenceVerificationBlock, OAuthAccessTokenClaims, OAuthAuthorizationDetailConstraint, OAuthAuthorizationEvidenceInput, OAuthAuthorizationEvidenceVerification, OAuthDpopCheck, OAuthDpopProofInput, OAuthEvidenceProtocol, OAuthProtectedResourceMetadata, OAuthSignaturePolicy, OAuthTokenIntrospectionResponse, OAuthTokenCheck, } from './authorization-evidence.js';
+export { decodeX401HeaderObject, encodeX401HeaderObject, verifyX401AuthorizationEvidence, } from './x401-evidence.js';
+export type { X401AuthorizationEvidenceDetails, X401AuthorizationEvidenceInput, X401AuthorizationEvidenceVerification, X401EvidenceProtocol, X401HeaderSet, X401HeaderSource, X401HeaderValue, X401ProofGateStatus, X401ResponseKind, X401VerificationPolicy, } from './x401-evidence.js';
 export { verifyAAuthAuthorizationEvidence } from './aauth-evidence.js';
 export type { AAuthAccessMode, AAuthActClaim, AAuthAuthorizationEvidenceInput, AAuthAuthorizationEvidenceVerification, AAuthEvidenceProtocol, AAuthHttpSignatureCheck, AAuthHttpSignatureEvidence, AAuthMissionClaim, AAuthR3Check, AAuthR3Evidence, AAuthResourceMetadataEvidence, AAuthSignaturePolicy, AAuthTokenCheck, AAuthTokenClaims, AAuthTokenKind, } from './aauth-evidence.js';
 export { FetchDpopReplayCache, MemoryDpopReplayCache, createFetchDpopReplayCache, dpopReplayCacheKeyId, } from './dpop-replay-cache.js';
@@ -12,6 +14,8 @@ export { introspectOAuthToken, oauthEvidenceFromIntrospectionResult, } from './o
 export type { OAuthIntrospectionClientAuthentication, OAuthIntrospectionOptions, OAuthIntrospectionResult, } from './oauth-introspection.js';
 export { handoffClaimsFromEvidencePacket, verifyHandoffClaims } from './handoff.js';
 export type { HandoffBodyVerification, HandoffClaimsFromEvidenceOptions, HandoffClaimInput, HandoffClaimVerification, HandoffEvidenceEntry, HandoffEvidencePacket, HandoffProofVerification, HandoffRejectionReason, HandoffVerificationResult, VerifyHandoffClaimsOptions, } from './handoff.js';
+export { ATRIB_PROFILE_BASE, ATRIB_PROFILE_REGISTRY, ATRIB_PROFILE_URIS, EVIDENCE_CONSTRAINT_STATUSES, EVIDENCE_REF_KINDS, EVIDENCE_TIERS, FROZEN_LEGACY_PROTOCOLS, LEGACY_PROTOCOL_TO_PROFILE, SHA256_REF_PATTERN, assessReproducibility, atribProfileUri, classifyProfile, envelopeFromEvidenceBlock, envelopeIdentityKey, fromLegacyEvidenceBlock, isRelayIdentitySwap, isValidEnvelope, jcsSha256, mapLegacyEvidenceBlock, orderEnvelopeInstances, rawSha256, renderEnvelopeOpaque, tierRank, validateEnvelope, } from './evidence-envelope.js';
+export type { AtribProfileName, EnvelopeReproducibility, EnvelopeValidation, EvidenceEnvelope, EvidenceEnvelopePayload, EvidenceEnvelopeRef, EvidenceEnvelopeResult, EvidenceEnvelopeVerifier, EvidenceConstraintStatus, EvidenceRefKind, EvidenceTier, FrozenLegacyProtocol, LegacyEvidenceBlock, OpaqueEnvelopeRender, ProfileClassification, } from './evidence-envelope.js';
 export { calculate, DEFAULT_POLICY, isValidPolicy } from './calculate.js';
 export { signRecommendation, verifyRecommendationSignature, recommendationSigningInput, distributionsMatch, } from './recommendation.js';
 export { buildPolicy, policyFrom } from './policy-builder.js';
@@ -24,4 +28,10 @@ export { resolveIdentity } from './resolve-identity.js';
 export type { IdentityResolution, IdentityResolutionMethod, KeyRevocationStatus, ResolveIdentityOptions, IdentityClaim, CapabilityEnvelope, } from './resolve-identity.js';
 export type { GraphNode, GraphEdge, GraphResponse, EventType, EdgeType, GapNode, VerificationState, ReferenceStatus, PolicyDocument, PolicyConstraints, EdgeWeights, Modifier, DistributionMethod, CreatorPolicySnapshot, CreatorPolicyEntry, SessionPolicyRecord, Distribution, RecommendationDocument, VerificationResult, } from './types.js';
 export { graphLabelFromEventTypeUri } from './types.js';
+export { checkDelegationScope, delegationCertErrors, delegationCertHash, delegationCertSignatureVerifies, delegationCertSigningInput, evaluateDelegation, evaluateRevokerAuthorization, } from './delegation.js';
+export type { DelegatedRecord, DelegationCandidate, DelegationCertificate, DelegationOutcome, DelegationScope, DelegationScopeCheck, EvaluateDelegationOptions, KeyRevocationRecordLike, RevokerAuthorization, } from './delegation.js';
+export { ANCHOR_CLAIM_PREFIX, REGISTERED_NON_LOG_ANCHOR_TYPES, anchorOperatorGroup, verifyAnchorPlurality, verifyAnchorProofElement, } from './anchor-plurality.js';
+export type { AnchorDisagreeingPair, AnchorElementResult, AnchorElementStatus, AnchorNotFoundResponse, AnchorOperatorGroup, AnchorPluralityAnnotation, AnchorPluralityVerdict, AnchorProofBundle, AnchorProofElement, AnchorTrustConfig, AnchorTrustEntry, } from './anchor-plurality.js';
+export { DEFAULT_SESSION_CHECKPOINT_STALENESS_BOUND_MS, SESSION_CHECKPOINT_EVENT_TYPE_URI, checkConsecutiveSessionCheckpoints, detectSessionCheckpointEquivocation, recomputeSessionRoot, recomputeSessionRootFromLeafBytes, sessionCheckpointArgsHash, sessionCheckpointFreshness, sessionCheckpointRecordHash, sessionLeafBytes, validateSessionCheckpointStructural, verifySessionCheckpointRecord, verifySessionConsistencyProof, verifySessionInclusionProof, } from './session-checkpoint.js';
+export type { CheckConsecutiveSessionCheckpointsOptions, ConsecutiveSessionCheckpointCheck, SessionCheckpointBody, SessionCheckpointEquivocationEvidence, SessionCheckpointFreshness, SessionCheckpointRecord, SessionCheckpointVerification, VerifySessionCheckpointRecordOptions, VerifySessionConsistencyProofOptions, VerifySessionInclusionProofOptions, } from './session-checkpoint.js';
 //# sourceMappingURL=index.d.ts.map