@attested-intelligence/aga-mcp-server 0.1.0

package/dist/core/delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../../src/core/delegation.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AA4BlD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,cAA8B,EAC9B,OAA0B,EAC1B,QAAiB;IAEjB,MAAM,UAAU,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;IAEhD,iCAAiC;IACjC,IAAI,SAAS,CAAC,cAAc,CAAC,gBAAgB,EAAE,cAAc,CAAC,sBAAsB,CAAC,WAAW,CAAC,EAAE,CAAC;QAClG,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC;IACxG,CAAC;IAED,iCAAiC;IACjC,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;IACnE,MAAM,eAAe,GAAG,cAAc,GAAG,CAAC,cAAc,CAAC,sBAAsB,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACpG,MAAM,WAAW,GAAG,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACjD,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC;IAErE,sCAAsC;IACtC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;IAC/E,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IACrG,CAAC;IAED,yCAAyC;IACzC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC;IAC3F,MAAM,eAAe,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,kCAAkC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACpJ,CAAC;IAED,kDAAkD;IAClD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,cAAc,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;IAC7F,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,KAAK,EAAE,2CAA2C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC1J,CAAC;IAED,mCAAmC;IACnC,MAAM,aAAa,GAAG,gBAAgB,CAAC;QACrC,kBAAkB,EAAE,cAAc,CAAC,kBAAkB;QACrD,gBAAgB,EAAE,cAAc,CAAC,gBAAgB;QACjD,cAAc,EAAE,cAAc,CAAC,cAAc;QAC7C,WAAW,EAAE,cAAc,CAAC,WAAW;QACvC,SAAS,EAAE,cAAc,CAAC,SAAS;QACnC,sBAAsB,EAAE;YACtB,sBAAsB,EAAE,cAAc,CAAC,sBAAsB,CAAC,sBAAsB;YACpF,WAAW,EAAE,YAAY;YACzB,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,uBAAuB,EAAE,cAAc,CAAC,sBAAsB,CAAC,uBAAuB;YACtF,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;SAC7C;QACD,iBAAiB,EAAE,cAAc,CAAC,iBAAiB,EAAG,gBAAgB;QACtE,oBAAoB,EAAE,cAAc,CAAC,oBAAoB;QACzD,cAAc,EAAE,QAAQ;KACzB,CAAC,CAAC;IAEH,wBAAwB;IACxB,MAAM,eAAe,GAAG,CAAC,GAAG,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAsB,CAAC,CAAC,CAAC;IACxH,MAAM,YAAY,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAoB,CAAC,CAAC,CAAC;IAE7G,OAAO;QACL,OAAO,EAAE,IAAI;QACb,cAAc,EAAE,aAAa;QAC7B,mBAAmB,EAAE,YAAY,CAAC,aAAa,CAAC;QAChD,oBAAoB,EAAE,UAAU;QAChC,qBAAqB,EAAE,YAAY;QACnC,eAAe,EAAE;YACf,gBAAgB,EAAE,eAAe;YACjC,yBAAyB,EAAE,YAAY;SACxC;KACF,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAsB,EAAE,KAAqB;IAC9E,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,4BAA4B;IAC5B,IAAI,KAAK,CAAC,sBAAsB,CAAC,WAAW,GAAG,MAAM,CAAC,sBAAsB,CAAC,WAAW,EAAE,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,sBAAsB,CAAC,WAAW,sBAAsB,MAAM,CAAC,sBAAsB,CAAC,WAAW,IAAI,CAAC,CAAC;IACzI,CAAC;IAED,0BAA0B;IAC1B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC;IACtF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,oBAAoB,EAAE,CAAC;QAClE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC;IACjF,CAAC;IAED,mCAAmC;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,iBAAiB,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,uBAAuB,CAAC,CAAC;IACvF,CAAC;IAED,qBAAqB;IACrB,IAAI,KAAK,CAAC,kBAAkB,CAAC,UAAU,KAAK,MAAM,CAAC,kBAAkB,CAAC,UAAU,EAAE,CAAC;QACjF,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC"}

package/dist/core/disclosure.d.ts

@@ -0,0 +1,12 @@
+import type { KeyPair } from '../crypto/types.js';
+import type { DisclosureRequest, DisclosurePolicy, SubstitutionReceipt, DisclosureMode } from './types.js';
+export interface DisclosureResult {
+    permitted: boolean;
+    disclosed_claim_id: string | null;
+    disclosed_value: unknown;
+    mode: DisclosureMode;
+    was_substituted: boolean;
+    substitution_receipt: SubstitutionReceipt | null;
+}
+export declare function processDisclosure(req: DisclosureRequest, policy: DisclosurePolicy, values: Record<string, unknown>, policyVersion: number, chainSeq: number, kp: KeyPair): DisclosureResult;
+//# sourceMappingURL=disclosure.d.ts.map

package/dist/core/disclosure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosure.d.ts","sourceRoot":"","sources":["../../src/core/disclosure.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE3G,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,OAAO,CAAC;IAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,eAAe,EAAE,OAAO,CAAC;IAChF,IAAI,EAAE,cAAc,CAAC;IAAC,eAAe,EAAE,OAAO,CAAC;IAAC,oBAAoB,EAAE,mBAAmB,GAAG,IAAI,CAAC;CAClG;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,GAAG,gBAAgB,CAa3L"}

package/dist/core/disclosure.js

@@ -0,0 +1,25 @@
+import { signStr, sigToB64 } from '../crypto/sign.js';
+import { canonicalize } from '../utils/canonical.js';
+import { utcNow } from '../utils/timestamp.js';
+import { uuid } from '../utils/uuid.js';
+export function processDisclosure(req, policy, values, policyVersion, chainSeq, kp) {
+    const claim = policy.claims_taxonomy.find(c => c.claim_id === req.requested_claim_id);
+    if (!claim)
+        return { permitted: false, disclosed_claim_id: null, disclosed_value: null, mode: req.mode, was_substituted: false, substitution_receipt: null };
+    if (claim.permitted_modes.includes(req.mode))
+        return { permitted: true, disclosed_claim_id: claim.claim_id, disclosed_value: fv(values[claim.claim_id], req.mode), mode: req.mode, was_substituted: false, substitution_receipt: null };
+    for (const subId of claim.substitutes) {
+        const sub = policy.claims_taxonomy.find(c => c.claim_id === subId);
+        if (sub?.permitted_modes.includes(req.mode) && !sub.inference_risks.includes(req.requested_claim_id))
+            return { permitted: true, disclosed_claim_id: subId, disclosed_value: fv(values[subId], req.mode), mode: req.mode, was_substituted: true,
+                substitution_receipt: sr(req.requested_claim_id, subId, policyVersion, 'SENSITIVITY_DENIED', chainSeq, kp) };
+    }
+    return { permitted: false, disclosed_claim_id: null, disclosed_value: null, mode: req.mode, was_substituted: false,
+        substitution_receipt: sr(req.requested_claim_id, null, policyVersion, 'NO_PERMITTED_SUBSTITUTE', chainSeq, kp) };
+}
+function fv(v, m) { return m === 'PROOF_ONLY' ? v != null : v; }
+function sr(orig, sub, pv, reason, seq, kp) {
+    const u = { receipt_id: uuid(), original_claim_id: orig, substitute_claim_id: sub, policy_version: pv, reason_code: reason, timestamp: utcNow(), chain_sequence_ref: seq };
+    return { ...u, signature: sigToB64(signStr(canonicalize(u), kp.secretKey)) };
+}
+//# sourceMappingURL=disclosure.js.map

package/dist/core/disclosure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosure.js","sourceRoot":"","sources":["../../src/core/disclosure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AASxC,MAAM,UAAU,iBAAiB,CAAC,GAAsB,EAAE,MAAwB,EAAE,MAA+B,EAAE,aAAqB,EAAE,QAAgB,EAAE,EAAW;IACvK,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAC7J,IAAI,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;QAC1C,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,QAAQ,EAAE,eAAe,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAC5L,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC;QACnE,IAAI,GAAG,EAAE,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAClG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI;gBACtI,oBAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,aAAa,EAAE,oBAAoB,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;IACnH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK;QAChH,oBAAoB,EAAE,EAAE,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,aAAa,EAAE,yBAAyB,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;AACrH,CAAC;AAED,SAAS,EAAE,CAAC,CAAU,EAAE,CAAiB,IAAa,OAAO,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,SAAS,EAAE,CAAC,IAAY,EAAE,GAAkB,EAAE,EAAU,EAAE,MAAc,EAAE,GAAW,EAAE,EAAW;IAChG,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC;IAC3K,OAAO,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,12 @@
+export * from './types.js';
+export * from './subject.js';
+export * from './attestation.js';
+export * from './artifact.js';
+export * from './receipt.js';
+export * from './chain.js';
+export * from './portal.js';
+export * from './quarantine.js';
+export * from './checkpoint.js';
+export * from './bundle.js';
+export * from './disclosure.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,12 @@
+export * from './types.js';
+export * from './subject.js';
+export * from './attestation.js';
+export * from './artifact.js';
+export * from './receipt.js';
+export * from './chain.js';
+export * from './portal.js';
+export * from './quarantine.js';
+export * from './checkpoint.js';
+export * from './bundle.js';
+export * from './disclosure.js';
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC"}

package/dist/core/portal.d.ts

@@ -0,0 +1,28 @@
+import type { PolicyArtifact, PortalState, EnforcementAction, SubjectMetadata } from './types.js';
+import type { HashHex } from '../crypto/types.js';
+export interface MeasurementResult {
+    match: boolean;
+    currentBytesHash: HashHex;
+    currentMetaHash: HashHex;
+    expectedBytesHash: HashHex;
+    expectedMetaHash: HashHex;
+    ttl_ok: boolean;
+    revoked: boolean;
+}
+export declare class Portal {
+    state: PortalState;
+    artifact: PolicyArtifact | null;
+    sequenceCounter: number;
+    lastLeafHash: HashHex | null;
+    revocations: Set<string>;
+    loadArtifact(artifact: PolicyArtifact, pinnedPkHex: string): {
+        ok: boolean;
+        error?: string;
+    };
+    measure(subjectBytes: Uint8Array, meta: SubjectMetadata): MeasurementResult;
+    enforce(action: EnforcementAction): void;
+    revoke(sealedHash: string): void;
+    isRevoked(sealedHash: string): boolean;
+    reset(): void;
+}
+//# sourceMappingURL=portal.d.ts.map

package/dist/core/portal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../src/core/portal.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClG,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,qBAAa,MAAM;IACjB,KAAK,EAAE,WAAW,CAAoB;IACtC,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAQ;IACvC,eAAe,SAAK;IACpB,YAAY,EAAE,OAAO,GAAG,IAAI,CAAQ;IACpC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAa;IAErC,YAAY,CAAC,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE;IAiB5F,OAAO,CAAC,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB;IA4B3E,OAAO,CAAC,MAAM,EAAE,iBAAiB,GAAG,IAAI;IAUxC,MAAM,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAKhC,SAAS,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO;IAEtC,KAAK,IAAI,IAAI;CAId"}

package/dist/core/portal.js

@@ -0,0 +1,95 @@
+/**
+ * Portal (Sentinel) — Runtime Enforcement Boundary. Ref 150, 270-280.
+ * V3: TTL + revocation checked every measurement. Fail-closed semantics.
+ * Aligned with NCCoE filing Sections 3-4 and NIST-2025-0035.
+ */
+import { sha256Bytes, sha256Str } from '../crypto/hash.js';
+import { b64ToSig, hexToPk, verifyStr } from '../crypto/sign.js';
+import { canonicalize } from '../utils/canonical.js';
+import { isWithinPeriod, isExpired, utcNow } from '../utils/timestamp.js';
+export class Portal {
+    state = 'INITIALIZATION';
+    artifact = null;
+    sequenceCounter = 0;
+    lastLeafHash = null;
+    revocations = new Set();
+    loadArtifact(artifact, pinnedPkHex) {
+        this.state = 'ARTIFACT_VERIFICATION';
+        const { signature, ...unsigned } = artifact;
+        if (!verifyStr(b64ToSig(signature), canonicalize(unsigned), hexToPk(pinnedPkHex))) {
+            this.state = 'TERMINATED';
+            return { ok: false, error: 'Signature verification failed' };
+        }
+        if (!isWithinPeriod(utcNow(), artifact.effective_timestamp, artifact.expiration_timestamp)) {
+            this.state = 'TERMINATED';
+            return { ok: false, error: 'Artifact outside effective period' };
+        }
+        if (this.revocations.has(artifact.sealed_hash)) {
+            this.state = 'TERMINATED';
+            return { ok: false, error: 'Artifact has been revoked' };
+        }
+        this.artifact = artifact;
+        this.state = 'ACTIVE_MONITORING';
+        return { ok: true };
+    }
+    measure(subjectBytes, meta) {
+        if (!this.artifact)
+            throw new Error('No artifact loaded');
+        if (this.state === 'TERMINATED')
+            throw new Error('Portal is terminated');
+        const empty = { currentBytesHash: '', currentMetaHash: '',
+            expectedBytesHash: this.artifact.subject_identifier.bytes_hash,
+            expectedMetaHash: this.artifact.subject_identifier.metadata_hash };
+        // Fail-closed: TTL check
+        const ttl_ok = !isExpired(this.artifact.issued_timestamp, this.artifact.enforcement_parameters.ttl_seconds);
+        if (!ttl_ok) {
+            this.state = 'TERMINATED';
+            return { match: false, ttl_ok: false, revoked: false, ...empty };
+        }
+        // Fail-closed: revocation check
+        if (this.revocations.has(this.artifact.sealed_hash)) {
+            this.state = 'TERMINATED';
+            return { match: false, ttl_ok: true, revoked: true, ...empty };
+        }
+        const currentBytesHash = sha256Bytes(subjectBytes);
+        const currentMetaHash = sha256Str(canonicalize(meta));
+        const match = currentBytesHash === this.artifact.subject_identifier.bytes_hash &&
+            currentMetaHash === this.artifact.subject_identifier.metadata_hash;
+        if (!match && this.state === 'ACTIVE_MONITORING')
+            this.state = 'DRIFT_DETECTED';
+        return { match, currentBytesHash, currentMetaHash,
+            expectedBytesHash: this.artifact.subject_identifier.bytes_hash,
+            expectedMetaHash: this.artifact.subject_identifier.metadata_hash,
+            ttl_ok: true, revoked: false };
+    }
+    enforce(action) {
+        if (this.state !== 'DRIFT_DETECTED')
+            throw new Error(`Cannot enforce in state ${this.state}`);
+        switch (action) {
+            case 'TERMINATE':
+            case 'SAFE_STATE':
+                this.state = 'TERMINATED';
+                break;
+            case 'QUARANTINE':
+                this.state = 'PHANTOM_QUARANTINE';
+                break;
+            case 'ALERT_ONLY':
+                this.state = 'ACTIVE_MONITORING';
+                break;
+            default: break;
+        }
+    }
+    revoke(sealedHash) {
+        this.revocations.add(sealedHash);
+        if (this.artifact?.sealed_hash === sealedHash)
+            this.state = 'TERMINATED';
+    }
+    isRevoked(sealedHash) { return this.revocations.has(sealedHash); }
+    reset() {
+        this.state = 'INITIALIZATION';
+        this.artifact = null;
+        this.sequenceCounter = 0;
+        this.lastLeafHash = null;
+    }
+}
+//# sourceMappingURL=portal.js.map

package/dist/core/portal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portal.js","sourceRoot":"","sources":["../../src/core/portal.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAc1E,MAAM,OAAO,MAAM;IACjB,KAAK,GAAgB,gBAAgB,CAAC;IACtC,QAAQ,GAA0B,IAAI,CAAC;IACvC,eAAe,GAAG,CAAC,CAAC;IACpB,YAAY,GAAmB,IAAI,CAAC;IACpC,WAAW,GAAgB,IAAI,GAAG,EAAE,CAAC;IAErC,YAAY,CAAC,QAAwB,EAAE,WAAmB;QACxD,IAAI,CAAC,KAAK,GAAG,uBAAuB,CAAC;QACrC,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAC5C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAClF,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC3F,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QAC9F,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;YAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAAC;QACjC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAED,OAAO,CAAC,YAAwB,EAAE,IAAqB;QACrD,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,KAAK,KAAK,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE;YACvD,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,UAAU;YAC9D,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,aAAa,EAAE,CAAC;QAErE,yBAAyB;QACzB,MAAM,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC5G,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;YAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC;QAAC,CAAC;QAE7G,gCAAgC;QAChC,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpD,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;YAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;QAC5F,CAAC;QAED,MAAM,gBAAgB,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,eAAe,GAAG,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,gBAAgB,KAAK,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,UAAU;YAChE,eAAe,KAAK,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,aAAa,CAAC;QAEjF,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,mBAAmB;YAAE,IAAI,CAAC,KAAK,GAAG,gBAAgB,CAAC;QAChF,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,eAAe;YAC/C,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,UAAU;YAC9D,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,aAAa;YAChE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnC,CAAC;IAED,OAAO,CAAC,MAAyB;QAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9F,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,WAAW,CAAC;YAAC,KAAK,YAAY;gBAAE,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;gBAAC,MAAM;YACtE,KAAK,YAAY;gBAAE,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC;gBAAC,MAAM;YAC5D,KAAK,YAAY;gBAAE,IAAI,CAAC,KAAK,GAAG,mBAAmB,CAAC;gBAAC,MAAM;YAC3D,OAAO,CAAC,CAAC,MAAM;QACjB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,UAAkB;QACvB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ,EAAE,WAAW,KAAK,UAAU;YAAE,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC;IAC3E,CAAC;IAED,SAAS,CAAC,UAAkB,IAAa,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAEnF,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,gBAAgB,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IACrD,CAAC;CACF"}

package/dist/core/quarantine.d.ts

@@ -0,0 +1,8 @@
+import type { QuarantineState } from './types.js';
+export declare function initQuarantine(): QuarantineState;
+export declare function captureInput(q: QuarantineState, inputType: string, data: unknown): void;
+export declare function releaseQuarantine(q: QuarantineState): {
+    duration_ms: number;
+    total_captures: number;
+};
+//# sourceMappingURL=quarantine.d.ts.map

package/dist/core/quarantine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine.d.ts","sourceRoot":"","sources":["../../src/core/quarantine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,wBAAgB,cAAc,IAAI,eAAe,CAEhD;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGvF;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,eAAe,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAGrG"}

package/dist/core/quarantine.js

@@ -0,0 +1,13 @@
+import { utcNow } from '../utils/timestamp.js';
+export function initQuarantine() {
+    return { active: true, started_at: utcNow(), inputs_captured: 0, outputs_severed: true, forensic_buffer: [] };
+}
+export function captureInput(q, inputType, data) {
+    q.forensic_buffer.push({ timestamp: utcNow(), type: inputType, data });
+    q.inputs_captured++;
+}
+export function releaseQuarantine(q) {
+    q.active = false;
+    return { duration_ms: q.started_at ? Date.now() - Date.parse(q.started_at) : 0, total_captures: q.inputs_captured };
+}
+//# sourceMappingURL=quarantine.js.map

package/dist/core/quarantine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine.js","sourceRoot":"","sources":["../../src/core/quarantine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAG/C,MAAM,UAAU,cAAc;IAC5B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;AAChH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAkB,EAAE,SAAiB,EAAE,IAAa;IAC/E,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,eAAe,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,CAAkB;IAClD,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC;IACjB,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC;AACtH,CAAC"}

package/dist/core/receipt.d.ts

@@ -0,0 +1,17 @@
+import type { KeyPair, HashHex } from '../crypto/types.js';
+import type { SignedReceipt, SubjectIdentifier, EnforcementAction } from './types.js';
+export interface ReceiptInput {
+    subjectId: SubjectIdentifier;
+    artifactRef: HashHex;
+    currentHash: string;
+    sealedHash: string;
+    driftDetected: boolean;
+    driftDescription: string | null;
+    action: EnforcementAction | null;
+    measurementType: string;
+    seq: number;
+    prevLeaf: HashHex | null;
+    portalKP: KeyPair;
+}
+export declare function generateReceipt(input: ReceiptInput): SignedReceipt;
+//# sourceMappingURL=receipt.d.ts.map

package/dist/core/receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../../src/core/receipt.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEtF,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,iBAAiB,CAAC;IAC7B,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,OAAO,CAAC;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAUlE"}

package/dist/core/receipt.js

@@ -0,0 +1,17 @@
+/** V3: measurement_type field. Receipts generated for EVERY measurement. */
+import { signStr, sigToB64 } from '../crypto/sign.js';
+import { canonicalize } from '../utils/canonical.js';
+import { utcNow } from '../utils/timestamp.js';
+import { uuid } from '../utils/uuid.js';
+export function generateReceipt(input) {
+    const unsigned = {
+        receipt_id: uuid(), subject_identifier: input.subjectId,
+        artifact_reference: input.artifactRef, current_hash: input.currentHash,
+        sealed_hash: input.sealedHash, drift_detected: input.driftDetected,
+        drift_description: input.driftDescription, enforcement_action: input.action,
+        measurement_type: input.measurementType, timestamp: utcNow(),
+        sequence_number: input.seq, previous_leaf_hash: input.prevLeaf,
+    };
+    return { ...unsigned, portal_signature: sigToB64(signStr(canonicalize(unsigned), input.portalKP.secretKey)) };
+}
+//# sourceMappingURL=receipt.js.map

package/dist/core/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/core/receipt.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAkBxC,MAAM,UAAU,eAAe,CAAC,KAAmB;IACjD,MAAM,QAAQ,GAAG;QACf,UAAU,EAAE,IAAI,EAAE,EAAE,kBAAkB,EAAE,KAAK,CAAC,SAAS;QACvD,kBAAkB,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW;QACtE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,aAAa;QAClE,iBAAiB,EAAE,KAAK,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,KAAK,CAAC,MAAM;QAC3E,gBAAgB,EAAE,KAAK,CAAC,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE;QAC5D,eAAe,EAAE,KAAK,CAAC,GAAG,EAAE,kBAAkB,EAAE,KAAK,CAAC,QAAQ;KAC/D,CAAC;IACF,OAAO,EAAE,GAAG,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;AAChH,CAAC"}

package/dist/core/subject.d.ts

@@ -0,0 +1,4 @@
+import type { SubjectIdentifier, SubjectMetadata } from './types.js';
+export declare function computeSubjectId(bytes: Uint8Array, meta: SubjectMetadata): SubjectIdentifier;
+export declare function computeSubjectIdFromString(content: string, meta: SubjectMetadata): SubjectIdentifier;
+//# sourceMappingURL=subject.d.ts.map

package/dist/core/subject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subject.d.ts","sourceRoot":"","sources":["../../src/core/subject.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAErE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAE5F;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAEpG"}

package/dist/core/subject.js

@@ -0,0 +1,9 @@
+import { sha256Bytes, sha256Str } from '../crypto/hash.js';
+import { canonicalize } from '../utils/canonical.js';
+export function computeSubjectId(bytes, meta) {
+    return { bytes_hash: sha256Bytes(bytes), metadata_hash: sha256Str(canonicalize(meta)) };
+}
+export function computeSubjectIdFromString(content, meta) {
+    return computeSubjectId(new TextEncoder().encode(content), meta);
+}
+//# sourceMappingURL=subject.js.map

package/dist/core/subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subject.js","sourceRoot":"","sources":["../../src/core/subject.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAGrD,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,IAAqB;IACvE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAAE,IAAqB;IAC/E,OAAO,gBAAgB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC"}

package/dist/core/types.d.ts

@@ -0,0 +1,167 @@
+/**
+ * V3: Aligned with NIST-2025-0035 and NCCoE AI Agent Identity filings.
+ * Every interface annotated with patent reference numeral.
+ */
+import type { HashHex, SignatureBase64, SaltHex, MerkleInclusionProof } from '../crypto/types.js';
+export interface SubjectIdentifier {
+    bytes_hash: HashHex;
+    metadata_hash: HashHex;
+}
+export interface SubjectMetadata {
+    filename?: string;
+    creation_timestamp?: string;
+    author?: string;
+    version?: string;
+    content_type?: string;
+    [key: string]: unknown;
+}
+export type EnforcementAction = 'TERMINATE' | 'QUARANTINE' | 'NETWORK_ISOLATE' | 'SAFE_STATE' | 'KEY_REVOKE' | 'TOKEN_INVALIDATE' | 'ACTUATOR_DISCONNECT' | 'ALERT_ONLY';
+export type MeasurementType = 'EXECUTABLE_IMAGE' | 'LOADED_MODULES' | 'CONTAINER_IMAGE' | 'CONFIG_MANIFEST' | 'SBOM' | 'TEE_QUOTE' | 'MEMORY_REGIONS' | 'CONTROL_FLOW' | 'FILE_SYSTEM_STATE' | 'NETWORK_CONFIG';
+export interface EnforcementParams {
+    measurement_cadence_ms: number;
+    ttl_seconds: number;
+    enforcement_triggers: EnforcementAction[];
+    re_attestation_required: boolean;
+    measurement_types: MeasurementType[];
+}
+export type Sensitivity = 'S1_LOW' | 'S2_MODERATE' | 'S3_HIGH' | 'S4_CRITICAL';
+export type DisclosureMode = 'PROOF_ONLY' | 'REVEAL_MIN' | 'REVEAL_FULL';
+export interface ClaimRecord {
+    claim_id: string;
+    sensitivity: Sensitivity;
+    substitutes: string[];
+    inference_risks: string[];
+    permitted_modes: DisclosureMode[];
+}
+export interface SubstitutionRule {
+    original_claim_id: string;
+    substitute_claim_id: string;
+    conditions: Record<string, unknown>;
+}
+export interface DisclosurePolicy {
+    claims_taxonomy: ClaimRecord[];
+    substitution_rules: SubstitutionRule[];
+}
+export interface EvidenceCommitmentRecord {
+    commitment: HashHex;
+    salt: SaltHex;
+    label: string;
+}
+export interface PolicyArtifact {
+    schema_version: string;
+    protocol_version: string;
+    subject_identifier: SubjectIdentifier;
+    policy_reference: HashHex;
+    policy_version: number;
+    sealed_hash: HashHex;
+    seal_salt: SaltHex;
+    issued_timestamp: string;
+    effective_timestamp: string;
+    expiration_timestamp: string | null;
+    issuer_identifier: string;
+    enforcement_parameters: EnforcementParams;
+    disclosure_policy: DisclosurePolicy;
+    evidence_commitments: EvidenceCommitmentRecord[];
+    signature: SignatureBase64;
+}
+export interface SignedReceipt {
+    receipt_id: string;
+    subject_identifier: SubjectIdentifier;
+    artifact_reference: HashHex;
+    current_hash: string;
+    sealed_hash: string;
+    drift_detected: boolean;
+    drift_description: string | null;
+    enforcement_action: EnforcementAction | null;
+    measurement_type: string;
+    timestamp: string;
+    sequence_number: number;
+    previous_leaf_hash: HashHex | null;
+    portal_signature: SignatureBase64;
+}
+export type EventType = 'GENESIS' | 'POLICY_ISSUANCE' | 'INTERACTION_RECEIPT' | 'REVOCATION' | 'ATTESTATION' | 'ANCHOR_BATCH' | 'DISCLOSURE' | 'SUBSTITUTION' | 'KEY_ROTATION';
+export interface GenesisPayload {
+    protocol_version: string;
+    taxonomy_version: string;
+    root_fingerprint: string;
+    specification_hash: HashHex;
+    marker: 'GENESIS';
+}
+export interface ContinuityEvent {
+    schema_version: string;
+    protocol_version: string;
+    event_type: EventType;
+    event_id: string;
+    sequence_number: number;
+    timestamp: string;
+    previous_leaf_hash: HashHex | null;
+    leaf_hash: HashHex;
+    payload: unknown;
+    payload_hash: HashHex;
+    event_signature: SignatureBase64;
+}
+export interface StructuralMetadata {
+    schema_version: string;
+    protocol_version: string;
+    event_type: EventType;
+    event_id: string;
+    sequence_number: number;
+    timestamp: string;
+    previous_leaf_hash: HashHex | null;
+}
+export interface CheckpointReference {
+    merkle_root: HashHex;
+    batch_start_sequence: number;
+    batch_end_sequence: number;
+    anchor_network: string;
+    transaction_id: string;
+    timestamp: string;
+}
+export interface AnchorBatchPayload {
+    checkpoint_reference: CheckpointReference;
+    leaf_count: number;
+}
+export interface EvidenceBundle {
+    artifact: PolicyArtifact;
+    receipts: SignedReceipt[];
+    merkle_proofs: MerkleInclusionProof[];
+    checkpoint_reference: CheckpointReference;
+    public_key: string;
+    bundle_signature: SignatureBase64;
+}
+export interface DisclosureRequest {
+    requested_claim_id: string;
+    requester_id: string;
+    mode: DisclosureMode;
+    timestamp: string;
+}
+export interface SubstitutionReceipt {
+    receipt_id: string;
+    original_claim_id: string;
+    substitute_claim_id: string | null;
+    policy_version: number;
+    reason_code: string;
+    timestamp: string;
+    chain_sequence_ref: number;
+    signature: SignatureBase64;
+}
+export type PortalState = 'INITIALIZATION' | 'ARTIFACT_VERIFICATION' | 'ACTIVE_MONITORING' | 'DRIFT_DETECTED' | 'PHANTOM_QUARANTINE' | 'TERMINATED';
+export type VerificationTier = 'BRONZE' | 'SILVER' | 'GOLD';
+export interface RevocationRecord {
+    artifact_sealed_hash: HashHex;
+    reason: string;
+    revoked_by: string;
+    timestamp: string;
+}
+export interface QuarantineState {
+    active: boolean;
+    started_at: string | null;
+    inputs_captured: number;
+    outputs_severed: boolean;
+    forensic_buffer: Array<{
+        timestamp: string;
+        type: string;
+        data: unknown;
+    }>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAIlG,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,OAAO,CAAC;IACpB,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAID,MAAM,MAAM,iBAAiB,GACzB,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,YAAY,GACZ,YAAY,GACZ,kBAAkB,GAClB,qBAAqB,GACrB,YAAY,CAAC;AAEjB,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAAG,gBAAgB,GAAG,iBAAiB,GACzD,iBAAiB,GAAI,MAAM,GAAa,WAAW,GACnD,gBAAgB,GAAK,cAAc,GAAK,mBAAmB,GAC3D,gBAAgB,CAAC;AAErB,MAAM,WAAW,iBAAiB;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,iBAAiB,EAAE,CAAC;IAC1C,uBAAuB,EAAE,OAAO,CAAC;IACjC,iBAAiB,EAAE,eAAe,EAAE,CAAC;CACtC;AAID,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,aAAa,GAAG,SAAS,GAAG,aAAa,CAAC;AAC/E,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,YAAY,GAAG,aAAa,CAAC;AAEzE,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,gBAAgB;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,eAAe,EAAE,WAAW,EAAE,CAAC;IAC/B,kBAAkB,EAAE,gBAAgB,EAAE,CAAC;CACxC;AAID,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,OAAO,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,cAAc;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,iBAAiB,CAAC;IACtC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,sBAAsB,EAAE,iBAAiB,CAAC;IAC1C,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC;IACjD,SAAS,EAAE,eAAe,CAAC;CAC5B;AAMD,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,iBAAiB,CAAC;IACtC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,OAAO,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,kBAAkB,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC7C,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,gBAAgB,EAAE,eAAe,CAAC;CACnC;AAID,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,iBAAiB,GACjB,qBAAqB,GACrB,YAAY,GACZ,aAAa,GACb,cAAc,GACd,YAAY,GACZ,cAAc,GACd,cAAc,CAAC;AAEnB,MAAM,WAAW,cAAc;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,SAAS,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,SAAS,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAC;CACpC;AAID,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,OAAO,CAAC;IACrB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,oBAAoB,EAAE,mBAAmB,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,aAAa,EAAE,oBAAoB,EAAE,CAAC;IACtC,oBAAoB,EAAE,mBAAmB,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,eAAe,CAAC;CACnC;AAID,MAAM,WAAW,iBAAiB;IAChC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,eAAe,CAAC;CAC5B;AAID,MAAM,MAAM,WAAW,GACnB,gBAAgB,GAChB,uBAAuB,GACvB,mBAAmB,GACnB,gBAAgB,GAChB,oBAAoB,GACpB,YAAY,CAAC;AAEjB,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAM5D,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC5E"}

package/dist/core/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":""}

package/dist/crypto/hash.d.ts

@@ -0,0 +1,9 @@
+import type { HashHex } from './types.js';
+export declare function sha256Bytes(data: Uint8Array): HashHex;
+export declare function sha256Str(data: string): HashHex;
+export declare function blake2b256(data: Uint8Array): HashHex;
+/** Concatenate inputs (NO delimiter) and SHA-256. Patent Section D: "no delimiters." */
+export declare function sha256Cat(...parts: (Uint8Array | string)[]): HashHex;
+/** Concatenate hex strings as text (no decode) and hash. For sealed_hash computation. */
+export declare function sha256HexCat(...hexes: string[]): HashHex;
+//# sourceMappingURL=hash.d.ts.map

package/dist/crypto/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/crypto/hash.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAI1C,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAErD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/C;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAEpD;AAED,wFAAwF;AACxF,wBAAgB,SAAS,CAAC,GAAG,KAAK,EAAE,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,GAAG,OAAO,CAOpE;AAED,yFAAyF;AACzF,wBAAgB,YAAY,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAExD"}

package/dist/crypto/hash.js

@@ -0,0 +1,30 @@
+import { sha256 } from '@noble/hashes/sha256';
+import { blake2b } from '@noble/hashes/blake2b';
+import { bytesToHex } from '@noble/hashes/utils';
+const enc = new TextEncoder();
+export function sha256Bytes(data) {
+    return bytesToHex(sha256(data));
+}
+export function sha256Str(data) {
+    return sha256Bytes(enc.encode(data));
+}
+export function blake2b256(data) {
+    return bytesToHex(blake2b(data, { dkLen: 32 }));
+}
+/** Concatenate inputs (NO delimiter) and SHA-256. Patent Section D: "no delimiters." */
+export function sha256Cat(...parts) {
+    const bufs = parts.map(p => typeof p === 'string' ? enc.encode(p) : p);
+    const total = bufs.reduce((n, b) => n + b.length, 0);
+    const combined = new Uint8Array(total);
+    let off = 0;
+    for (const b of bufs) {
+        combined.set(b, off);
+        off += b.length;
+    }
+    return sha256Bytes(combined);
+}
+/** Concatenate hex strings as text (no decode) and hash. For sealed_hash computation. */
+export function sha256HexCat(...hexes) {
+    return sha256Str(hexes.join(''));
+}
+//# sourceMappingURL=hash.js.map

package/dist/crypto/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../src/crypto/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B,MAAM,UAAU,WAAW,CAAC,IAAgB;IAC1C,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAgB;IACzC,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,SAAS,CAAC,GAAG,KAA8B;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;IAAC,CAAC;IAChE,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,GAAG,KAAe;IAC7C,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/dist/crypto/index.d.ts

@@ -0,0 +1,6 @@
+export * from './types.js';
+export * from './hash.js';
+export * from './sign.js';
+export * from './salt.js';
+export * from './merkle.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/crypto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/crypto/index.js

@@ -0,0 +1,6 @@
+export * from './types.js';
+export * from './hash.js';
+export * from './sign.js';
+export * from './salt.js';
+export * from './merkle.js';
+//# sourceMappingURL=index.js.map

package/dist/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC"}

package/dist/crypto/merkle.d.ts

@@ -0,0 +1,8 @@
+import type { HashHex, MerkleInclusionProof } from './types.js';
+export declare function buildMerkleTree(leaves: HashHex[]): {
+    root: HashHex;
+    layers: HashHex[][];
+};
+export declare function inclusionProof(leaves: HashHex[], idx: number): MerkleInclusionProof;
+export declare function verifyProof(proof: MerkleInclusionProof): boolean;
+//# sourceMappingURL=merkle.d.ts.map

package/dist/crypto/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../../src/crypto/merkle.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAIhE,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,EAAE,CAAA;CAAE,CAczF;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAanF;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAMhE"}