@bsv/dpp-core 0.3.0-beta.1

package/LICENSE

@@ -0,0 +1,58 @@
+Open BSV License Version 6 – granted by BSV Association, Alpenstrasse 15, 6300
+Zug, Switzerland (CHE-427.008.338) ("Licensor"), to you as a user (henceforth
+"You", "User" or "Licensee").
+
+For the purposes of this license, the definitions below have the following
+meanings:
+
+"Bitcoin Protocol" means the protocol implementation, cryptographic rules,
+network protocols, and consensus mechanisms in the Bitcoin White Paper as
+described here https://protocol.bsvblockchain.org.
+
+"Bitcoin White Paper" means the paper entitled 'Bitcoin: A Peer-to-Peer
+Electronic Cash System' published by 'Satoshi Nakamoto' in October 2008.
+
+"BSV Blockchain" means:
+
+  (a) the Bitcoin blockchain containing block height #556767 with the hash
+      "000000000000000001d956714215d96ffc00e0afda4cd0a96c96f8d802b1662b" and
+      that contains the longest honest persistent chain of blocks which has been
+      produced in a manner which is consistent with the rules set forth in the
+      Network Access Rules; and
+  (b) the test blockchains that contain the longest honest persistent chains of
+      blocks which has been produced in a manner which is consistent with the
+      rules set forth in the Network Access Rules.
+
+"Network Access Rules" or "Rules" means the set of rules regulating the
+relationship between BSV Association and the nodes on BSV based on the Bitcoin
+Protocol rules and those set out in the Bitcoin White Paper, and available here
+https://bsvblockchain.org/network-access-rules.
+
+"Software" means the software the subject of this license, including any/all
+intellectual property rights therein and associated documentation files.
+
+BSV Association grants permission, free of charge and on a non-exclusive basis
+to any person obtaining a copy of the Software to deal in the Software, including
+without limitation the rights to use, copy, modify, merge, publish, distribute,
+sublicense, and/or sell copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to and conditioned upon the following
+conditions:
+
+1 - The text "© BSV Association", and this license shall be included in all
+copies or substantial portions of the Software.
+
+2 - The Software, and any software that is derived from the Software or parts
+thereof, may only be used exclusively on the BSV Blockchain.
+
+For the avoidance of doubt, this license is granted subject to and conditioned
+upon your compliance with these terms only and is limited to uses on the BSV
+Blockchain. Any exercise of rights not compliant with these terms including
+use not for the BSV Blockchain is deemed outside the scope of the license.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES REGARDING ENTITLEMENT,
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO
+EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS THEREOF BE LIABLE FOR ANY CLAIM,
+DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,95 @@
+# @bsv/dpp-core
+
+**Experimental prerelease:** For implementation and interoperability testing. APIs may change significantly before a stable release. Pin exact package versions and retain your lockfile. This package is not declared production-ready. Package versions are separate from the specification, wire-format and frozen profile versions they implement.
+
+The DPP standard's reference implementation for record versions 1 and 2, the
+attestation rail and the verification report, and the only place in this
+repository the standard's rules are implemented. Everything else in the
+reference implementation imports it: the overlay topic manager admits outputs
+by asking this package whether a state is valid, and the consuming
+applications build and verify every record through it. An independent
+implementation does not import it; it reproduces the same rules from `spec/`
+and holds itself to the same `fixtures/`.
+
+Standard v1 is v0 plus the JSON field conventions (`spec/record-model.md` §3,
+fields 9 and 10). The 14-field layout and the
+chain invariants are untouched from v0, which is why the suite here was ported
+rather than rewritten.
+
+## Install and consume
+
+This is a pre-1.0 candidate. Once the release is published, install exact versions from npm:
+
+```sh
+npm install --save-exact @bsv/dpp-core@0.3.0-beta.1 @bsv/sdk@2.4.2
+```
+
+Node >=22 and ECMAScript modules are supported. Browser use of the runtime is untested. No source checkout or build of this package is needed after installation.
+
+```js
+import { PrivateKey, ProtoWallet } from '@bsv/sdk'
+import { didKeyFromIdentityKey, signLifecycleClaim, verifyLifecycleClaim } from '@bsv/dpp-core'
+
+const key = PrivateKey.fromRandom()
+const claim = await signLifecycleClaim({
+  claimFormat: 'dpp-lifecycle-v1',
+  passportId: 'https://example.com/01/09521000000018/21/EXAMPLE',
+  recordId: '0'.repeat(64), // Synthetic record identifier for this offline example.
+  eventType: 'Origin',
+  timestamp: new Date().toISOString(),
+  issuer: didKeyFromIdentityKey(key.toPublicKey().toString()),
+  issuerKeyId: 'example',
+  profile: 'general',
+  profile_version: 2,
+}, new ProtoWallet(key))
+console.log(verifyLifecycleClaim(claim))
+```
+
+This offline example creates a temporary key and signs a claim. Production callers supply their authorised signing capability. Signature verification alone does not establish authority, current status or blockchain inclusion.
+
+The `@bsv/dpp-core/schemas/*` export carries the standard's JSON schemas. For example, load `@bsv/dpp-core/schemas/verification-report.schema.json` using a JSON import or Node's `createRequire`. The evidence export schema and its referenced evidence package schema are shipped together. They are data files and may also be used by other runtimes.
+
+## Public API
+
+`src/index.ts` re-exports the whole surface, so `@bsv/dpp-core` is the only
+specifier anything needs:
+
+| Module | What it owns |
+|---|---|
+| `codec.ts` | The 14-field version 1 layout and the 17-field version 2 layout, selected by field count: encode and decode per `spec/record-model.md` §3 and `spec/record-model-v2.md` §3 |
+| `signatures.ts` | The canonical signature preimages: unframed for version 1 (§5), framed and domain-tagged for version 2 (`record-model-v2.md` §5) |
+| `transition.ts` | Which operation may change what, state by state, for both versions: the version 2 control proof, the terminal `RETIRE` and the single upgrade transition |
+| `owner.ts` | The owner and controller key, the linkage scalar, the owner-signed transfer of version 1 and the control proof of version 2 |
+| `acceptance.ts` | The managed acceptance record `dpp-managed-acceptance@1` (`spec/managed-custody.md` §3): inspect, sign, commit and bind to the `TRANSFER` |
+| `verifyChain.ts` | Chain verification from genesis, including SPV inclusion; `inspectChain` is the same loop reported finding by finding |
+| `evidence.ts` | `verifyPassportEvidence`, the one verification contract of `spec/verification.md`: sixteen named checks, four answers each, an expected subject and a latest-state observation, across the token, attestation, anchor and credential rails |
+| `anchor.ts` | The generic complete-representation anchor `bsv-attestation-anchor-v1` (`spec/rules.md` §5): build, strict decode and check-by-check inspection |
+| `attestation.ts` | Native lifecycle claims `dpp-lifecycle-v1` (`spec/rules.md` §3): validate, sign, verify and digest |
+| `blob.ts` | Owner-tier blob hash binding (§7) |
+| `canonical.ts` | The canonical bytes an attestation is signed and hashed over: a refusing subset of JCS (`spec/rules.md` §4) |
+| `constants.ts`, `types.ts` | The shared vocabulary both of the above are written against |
+
+## Working on it
+
+```
+npm run build      # tsc to dist/, which is what the exports map points at
+npm run typecheck  # the same compile, emitting nothing
+npm test           # the whole suite runs offline
+```
+
+The build matters. `main`, `types` and the `exports` map all point into
+`dist/`, and nothing aliases the specifier back to `src/`, so a consumer that
+has not built this package fails to resolve it rather than falling back to
+source. A fresh clone should run `npm run build --workspaces` before anything
+that imports `@bsv/dpp-core`.
+
+## The rule that governs it
+
+Within the reference implementation this package is the single place the
+standard's rules are coded, and no reference consumer reimplements any of it:
+if a consumer needs behaviour that is not here, the change belongs here, with a
+test. The normative text is the specification, not this package: `spec/`
+defines the rules, `fixtures/` pins the bytes, and an independent
+implementation reproduces both without this code. Where this package and the
+specification disagree before version 1.0, `GOVERNANCE.md` names the
+tiebreaker.

package/dist/acceptance.d.ts

@@ -0,0 +1,100 @@
+import { MANAGED_CUSTODY_PROFILE } from './constants.js';
+import type { DppStateV2, Outpoint } from './types.js';
+/**
+ * The managed acceptance record (`spec/managed-custody.md` §3): the evidence a
+ * custodian retains that the current holder offered a transfer and the
+ * intended recipient accepted it through the application, before the
+ * custodian spent the tip. A version 2 TRANSFER under the profile carries
+ * `authorisation_commitment` equal to the SHA-256 of this record's canonical
+ * JSON, signature included, so the on-chain state binds the acceptance and the
+ * record binds the exact predecessor, destination key, terms and expiry.
+ *
+ * What it is: custody-dependent evidence. The custodian signs it; the
+ * recipient's key never does. A reader learns that the custodian observed an
+ * acceptance under these terms and that the transfer it executed matches them.
+ * It is not a signature made with a key the recipient controls, and the record
+ * says so in `acceptance.evidenceKind`. A profile that needs recipient-signed
+ * acceptance is a later profile with its own record format.
+ *
+ * What stays out: application account identifiers, claim codes, names and
+ * contact details. The recipient is named by the identity key the destination
+ * derives from, and a claim code by its SHA-256, so the record can be exported
+ * with the passport's public evidence.
+ */
+export declare const MANAGED_ACCEPTANCE_FORMAT: "dpp-managed-acceptance@1";
+export { MANAGED_CUSTODY_PROFILE };
+export type OfferMechanism = 'claim-code' | 'named-recipient';
+export interface ManagedAcceptanceClaim {
+    acceptanceFormat: typeof MANAGED_ACCEPTANCE_FORMAT;
+    /** Unique per offer; a retry names the same request and never a second one. */
+    requestId: string;
+    passportId: string;
+    lineageGenesis: Outpoint;
+    /** The tip the offer was made against; the TRANSFER must spend exactly this. */
+    expectedPredecessor: Outpoint;
+    /** SHA-256, hex, of the terms as the application presented them to the recipient (the story word, a note, revised restricted values), in the application's own canonical form. */
+    termsDigest: string;
+    offer: {
+        /** The current holder's actor identity key, the key field 7 of the TRANSFER carries. */
+        holderIdentityKey: string;
+        createdAt: string;
+        expiresAt: string;
+        mechanism: OfferMechanism;
+        /** claim-code: SHA-256 of the code, hex; named-recipient: the recipient's identity key. Absent when the mechanism carries nothing to reference. */
+        recipientRef?: string;
+    };
+    acceptance: {
+        /** The recipient's actor identity key, from which the destination derives. */
+        recipientIdentityKey: string;
+        /** The controller key the TRANSFER moves control to: field 6 of the TRANSFER. */
+        destinationKey: string;
+        acceptedAt: string;
+        /** Always custodian-attested under this format; named so a reader never mistakes it for a recipient signature. */
+        evidenceKind: 'custodian-attested';
+    };
+    /** The custodian's identity key, compressed hex, which signs the record. */
+    custodian: string;
+}
+export interface ManagedAcceptanceRecord extends ManagedAcceptanceClaim {
+    /** DER ECDSA, lowercase hex, over SHA-256 of the canonical JSON of the record without this property. */
+    signature: string;
+}
+export interface AcceptanceSigner {
+    sign(preimage: number[]): Promise<number[]> | number[];
+}
+export type AcceptanceFailureReason = 'format' | 'time-order' | 'signature-invalid' | 'custodian-unexpected' | 'state-mismatch';
+export interface AcceptanceFailure {
+    reason: AcceptanceFailureReason;
+    detail: string;
+}
+export interface AcceptanceInspection {
+    /** The record has the declared shape and its own declarations agree. */
+    structureValid: boolean;
+    /** The custodian's signature over the canonical record, or null when the record could not be canonicalised. */
+    signatureValid: boolean | null;
+    /** SHA-256 of the complete signed record in canonical JSON: what a TRANSFER commits to. Present when the record canonicalises. */
+    commitment?: string;
+    failures: AcceptanceFailure[];
+}
+/** The bytes the custodian signs: the record without `signature`, in canonical JSON, UTF-8. */
+export declare function acceptanceSigningPreimage(claim: ManagedAcceptanceClaim | ManagedAcceptanceRecord): number[];
+/** The commitment a TRANSFER carries in field 15: SHA-256 of the complete signed record, canonical JSON. */
+export declare function acceptanceCommitment(record: ManagedAcceptanceRecord): string;
+/**
+ * Inspect a record on its own: structure, the custodian's signature and, when
+ * the caller names the custodians it trusts, whether the signer is one of
+ * them. Binding to the TRANSFER that commits to it is `bindAcceptanceToState`.
+ */
+export declare function inspectManagedAcceptance(value: unknown, options?: {
+    custodians?: readonly string[];
+}): AcceptanceInspection;
+/**
+ * Whether a version 2 TRANSFER executed exactly the acceptance the record
+ * evidences: same passport and lineage, the tip the offer named, the
+ * destination the recipient accepted, the holder who offered as the actor,
+ * and the record's own commitment in field 15. Every mismatch is named.
+ */
+export declare function bindAcceptanceToState(record: ManagedAcceptanceRecord, state: DppStateV2): AcceptanceFailure[];
+/** Sign a claim as the custodian. The signer's key must be `claim.custodian`; the result is checked before it is returned. */
+export declare function signManagedAcceptance(claim: ManagedAcceptanceClaim, signer: AcceptanceSigner): Promise<ManagedAcceptanceRecord>;
+//# sourceMappingURL=acceptance.d.ts.map

package/dist/acceptance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance.d.ts","sourceRoot":"","sources":["../src/acceptance.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAEtD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,eAAO,MAAM,yBAAyB,EAAG,0BAAmC,CAAA;AAC5E,OAAO,EAAE,uBAAuB,EAAE,CAAA;AAElC,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,iBAAiB,CAAA;AAE7D,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,EAAE,OAAO,yBAAyB,CAAA;IAClD,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,QAAQ,CAAA;IACxB,gFAAgF;IAChF,mBAAmB,EAAE,QAAQ,CAAA;IAC7B,kLAAkL;IAClL,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE;QACL,wFAAwF;QACxF,iBAAiB,EAAE,MAAM,CAAA;QACzB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,cAAc,CAAA;QACzB,mJAAmJ;QACnJ,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,UAAU,EAAE;QACV,8EAA8E;QAC9E,oBAAoB,EAAE,MAAM,CAAA;QAC5B,iFAAiF;QACjF,cAAc,EAAE,MAAM,CAAA;QACtB,UAAU,EAAE,MAAM,CAAA;QAClB,kHAAkH;QAClH,YAAY,EAAE,oBAAoB,CAAA;KACnC,CAAA;IACD,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,uBAAwB,SAAQ,sBAAsB;IACrE,wGAAwG;IACxG,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,CAAA;CACvD;AAQD,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,GACR,YAAY,GACZ,mBAAmB,GACnB,sBAAsB,GACtB,gBAAgB,CAAA;AAEpB,MAAM,WAAW,iBAAiB;IAAG,MAAM,EAAE,uBAAuB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAEtF,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,cAAc,EAAE,OAAO,CAAA;IACvB,+GAA+G;IAC/G,cAAc,EAAE,OAAO,GAAG,IAAI,CAAA;IAC9B,kIAAkI;IAClI,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,iBAAiB,EAAE,CAAA;CAC9B;AAUD,+FAA+F;AAC/F,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,sBAAsB,GAAG,uBAAuB,GAAG,MAAM,EAAE,CAG3G;AAED,4GAA4G;AAC5G,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,uBAAuB,GAAG,MAAM,CAE5E;AA6DD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE;IAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GAAG,oBAAoB,CAoB/H;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,uBAAuB,EAAE,KAAK,EAAE,UAAU,GAAG,iBAAiB,EAAE,CAY7G;AAED,8HAA8H;AAC9H,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAWrI"}

package/dist/acceptance.js

@@ -0,0 +1,202 @@
+import { Hash, PublicKey, Signature, Utils } from '@bsv/sdk';
+import { canonicalJson, CanonicalJsonError } from './canonicalJson.js';
+import { MANAGED_CUSTODY_PROFILE } from './constants.js';
+/**
+ * The managed acceptance record (`spec/managed-custody.md` §3): the evidence a
+ * custodian retains that the current holder offered a transfer and the
+ * intended recipient accepted it through the application, before the
+ * custodian spent the tip. A version 2 TRANSFER under the profile carries
+ * `authorisation_commitment` equal to the SHA-256 of this record's canonical
+ * JSON, signature included, so the on-chain state binds the acceptance and the
+ * record binds the exact predecessor, destination key, terms and expiry.
+ *
+ * What it is: custody-dependent evidence. The custodian signs it; the
+ * recipient's key never does. A reader learns that the custodian observed an
+ * acceptance under these terms and that the transfer it executed matches them.
+ * It is not a signature made with a key the recipient controls, and the record
+ * says so in `acceptance.evidenceKind`. A profile that needs recipient-signed
+ * acceptance is a later profile with its own record format.
+ *
+ * What stays out: application account identifiers, claim codes, names and
+ * contact details. The recipient is named by the identity key the destination
+ * derives from, and a claim code by its SHA-256, so the record can be exported
+ * with the passport's public evidence.
+ */
+export const MANAGED_ACCEPTANCE_FORMAT = 'dpp-managed-acceptance@1';
+export { MANAGED_CUSTODY_PROFILE };
+const KEY = /^0[23][0-9a-f]{64}$/;
+const HEX64 = /^[0-9a-f]{64}$/;
+const TIME = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d+)?(Z|[+-]\d{2}:\d{2})$/;
+const CONTROL = /[\u0000-\u001f\u007f-\u009f]/u;
+const MAX_REQUEST_ID = 128;
+const text = (value, maximum) => typeof value === 'string' && value.length > 0 && Utils.toArray(value, 'utf8').length <= maximum && !CONTROL.test(value);
+const outpointOk = (value) => typeof value === 'object' && value !== null && HEX64.test(value.txid ?? '') && Number.isInteger(value.outputIndex) && value.outputIndex >= 0;
+const instant = (value) => Date.parse(value);
+/** The bytes the custodian signs: the record without `signature`, in canonical JSON, UTF-8. */
+export function acceptanceSigningPreimage(claim) {
+    const { signature: _signature, ...unsigned } = claim;
+    return Utils.toArray(canonicalJson(unsigned), 'utf8');
+}
+/** The commitment a TRANSFER carries in field 15: SHA-256 of the complete signed record, canonical JSON. */
+export function acceptanceCommitment(record) {
+    return Utils.toHex(Hash.sha256(Utils.toArray(canonicalJson(record), 'utf8')));
+}
+function structure(value, failures) {
+    const fail = (reason, detail) => { failures.push({ reason, detail }); };
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        fail('format', 'the record must be an object');
+        return false;
+    }
+    const r = value;
+    const allowed = new Set(['acceptanceFormat', 'requestId', 'passportId', 'lineageGenesis', 'expectedPredecessor', 'termsDigest', 'offer', 'acceptance', 'custodian', 'signature']);
+    for (const key of Object.keys(r))
+        if (!allowed.has(key))
+            fail('format', `unsupported property ${key}`);
+    if (r.acceptanceFormat !== MANAGED_ACCEPTANCE_FORMAT)
+        fail('format', `acceptanceFormat is not ${MANAGED_ACCEPTANCE_FORMAT}`);
+    if (!text(r.requestId, MAX_REQUEST_ID))
+        fail('format', `requestId must be printable text of at most ${MAX_REQUEST_ID} bytes`);
+    if (!text(r.passportId, 512))
+        fail('format', 'passportId must be printable text of at most 512 bytes');
+    if (!outpointOk(r.lineageGenesis))
+        fail('format', 'lineageGenesis must be an outpoint');
+    if (!outpointOk(r.expectedPredecessor))
+        fail('format', 'expectedPredecessor must be an outpoint');
+    if (!HEX64.test(String(r.termsDigest ?? '')))
+        fail('format', 'termsDigest must be 64 lowercase hex characters');
+    const offer = r.offer;
+    if (offer == null || typeof offer !== 'object' || Array.isArray(offer))
+        fail('format', 'offer must be an object');
+    else {
+        for (const key of Object.keys(offer))
+            if (!['holderIdentityKey', 'createdAt', 'expiresAt', 'mechanism', 'recipientRef'].includes(key))
+                fail('format', `unsupported offer property ${key}`);
+        if (!KEY.test(String(offer.holderIdentityKey ?? '')))
+            fail('format', 'offer.holderIdentityKey must be a compressed public key');
+        if (!TIME.test(String(offer.createdAt ?? '')) || !Number.isFinite(instant(String(offer.createdAt))))
+            fail('format', 'offer.createdAt must be an ISO date-time with a timezone');
+        if (!TIME.test(String(offer.expiresAt ?? '')) || !Number.isFinite(instant(String(offer.expiresAt))))
+            fail('format', 'offer.expiresAt must be an ISO date-time with a timezone');
+        if (offer.mechanism !== 'claim-code' && offer.mechanism !== 'named-recipient')
+            fail('format', 'offer.mechanism must be claim-code or named-recipient');
+        if (offer.recipientRef !== undefined && !(offer.mechanism === 'claim-code' ? HEX64.test(String(offer.recipientRef)) : KEY.test(String(offer.recipientRef)))) {
+            fail('format', 'offer.recipientRef must be a SHA-256 for a claim code or a compressed key for a named recipient');
+        }
+    }
+    const acceptance = r.acceptance;
+    if (acceptance == null || typeof acceptance !== 'object' || Array.isArray(acceptance))
+        fail('format', 'acceptance must be an object');
+    else {
+        for (const key of Object.keys(acceptance))
+            if (!['recipientIdentityKey', 'destinationKey', 'acceptedAt', 'evidenceKind'].includes(key))
+                fail('format', `unsupported acceptance property ${key}`);
+        if (!KEY.test(String(acceptance.recipientIdentityKey ?? '')))
+            fail('format', 'acceptance.recipientIdentityKey must be a compressed public key');
+        if (!KEY.test(String(acceptance.destinationKey ?? '')))
+            fail('format', 'acceptance.destinationKey must be a compressed public key');
+        if (!TIME.test(String(acceptance.acceptedAt ?? '')) || !Number.isFinite(instant(String(acceptance.acceptedAt))))
+            fail('format', 'acceptance.acceptedAt must be an ISO date-time with a timezone');
+        if (acceptance.evidenceKind !== 'custodian-attested')
+            fail('format', 'acceptance.evidenceKind must be custodian-attested');
+    }
+    if (!KEY.test(String(r.custodian ?? '')))
+        fail('format', 'custodian must be a compressed public key');
+    if (typeof r.signature !== 'string' || !/^(?:[0-9a-f]{2}){8,72}$/.test(r.signature))
+        fail('format', 'signature must be lowercase DER hex');
+    else {
+        try {
+            const der = Signature.fromDER(r.signature, 'hex');
+            if (Utils.toHex(der.toDER()) !== r.signature)
+                fail('format', 'signature must use canonical DER');
+        }
+        catch {
+            fail('format', 'signature is not DER');
+        }
+    }
+    if (failures.length > 0)
+        return false;
+    const record = value;
+    const created = instant(record.offer.createdAt);
+    const accepted = instant(record.acceptance.acceptedAt);
+    const expires = instant(record.offer.expiresAt);
+    if (!(created <= accepted))
+        fail('time-order', 'acceptedAt precedes createdAt');
+    if (!(accepted <= expires))
+        fail('time-order', 'acceptedAt is after expiresAt: the offer had expired');
+    if (record.offer.mechanism === 'named-recipient' && record.offer.recipientRef != null && record.offer.recipientRef !== record.acceptance.recipientIdentityKey) {
+        fail('state-mismatch', 'the named recipient is not the accepting identity');
+    }
+    return failures.length === 0;
+}
+/**
+ * Inspect a record on its own: structure, the custodian's signature and, when
+ * the caller names the custodians it trusts, whether the signer is one of
+ * them. Binding to the TRANSFER that commits to it is `bindAcceptanceToState`.
+ */
+export function inspectManagedAcceptance(value, options = {}) {
+    const failures = [];
+    const structureValid = structure(value, failures);
+    if (!structureValid)
+        return { structureValid, signatureValid: null, failures };
+    const record = value;
+    let signatureValid = null;
+    let commitment;
+    try {
+        const preimage = acceptanceSigningPreimage(record);
+        signatureValid = PublicKey.fromString(record.custodian).verify(preimage, Signature.fromDER(Utils.toArray(record.signature, 'hex')));
+        commitment = acceptanceCommitment(record);
+    }
+    catch (error) {
+        signatureValid = error instanceof CanonicalJsonError ? null : false;
+        if (signatureValid === null)
+            failures.push({ reason: 'format', detail: error instanceof Error ? error.message : 'the record has no canonical form' });
+    }
+    if (signatureValid === false)
+        failures.push({ reason: 'signature-invalid', detail: `the signature does not verify under custodian ${record.custodian}` });
+    if (options.custodians != null && !options.custodians.includes(record.custodian)) {
+        failures.push({ reason: 'custodian-unexpected', detail: `signed by ${record.custodian}, not a custodian the policy names` });
+    }
+    return { structureValid, signatureValid, ...(commitment == null ? {} : { commitment }), failures };
+}
+/**
+ * Whether a version 2 TRANSFER executed exactly the acceptance the record
+ * evidences: same passport and lineage, the tip the offer named, the
+ * destination the recipient accepted, the holder who offered as the actor,
+ * and the record's own commitment in field 15. Every mismatch is named.
+ */
+export function bindAcceptanceToState(record, state) {
+    const failures = [];
+    const fail = (detail) => { failures.push({ reason: 'state-mismatch', detail }); };
+    if (state.op !== 'TRANSFER')
+        fail(`the state is a ${state.op}, not a TRANSFER`);
+    if (state.passportId !== record.passportId)
+        fail('the state names another passport');
+    if (state.lineageGenesis == null || state.lineageGenesis.txid !== record.lineageGenesis.txid || state.lineageGenesis.outputIndex !== record.lineageGenesis.outputIndex)
+        fail('the state names another lineage');
+    if (state.previousTxid !== record.expectedPredecessor.txid || state.previousOutputIndex !== record.expectedPredecessor.outputIndex)
+        fail('the state spends a tip other than the one the offer named');
+    if (state.ownerIdentityKey !== record.acceptance.destinationKey)
+        fail('the state moves control to a key other than the accepted destination');
+    if (state.actorIdentityKey !== record.offer.holderIdentityKey)
+        fail('the state was made by an actor other than the holder who offered');
+    if (state.authorisationCommitment !== acceptanceCommitment(record))
+        fail('the state does not commit to this record');
+    if (instant(record.acceptance.acceptedAt) > instant(state.timestamp))
+        fail('the state is timestamped before the acceptance it executes');
+    return failures;
+}
+/** Sign a claim as the custodian. The signer's key must be `claim.custodian`; the result is checked before it is returned. */
+export async function signManagedAcceptance(claim, signer) {
+    const failures = [];
+    // A well-formed placeholder (r = 1, s = 1) stands in for the signature while the claim's own shape is checked.
+    if (!structure({ ...claim, signature: '3006020101020101' }, failures)) {
+        throw new Error(`acceptance record is not well formed: ${failures.map((f) => f.detail).join('; ')}`);
+    }
+    const der = await signer.sign(acceptanceSigningPreimage(claim));
+    const record = { ...claim, signature: Utils.toHex(der) };
+    const inspection = inspectManagedAcceptance(record);
+    if (inspection.signatureValid !== true)
+        throw new Error('the signer does not hold the custodian key the record names');
+    return record;
+}
+//# sourceMappingURL=acceptance.js.map

package/dist/acceptance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance.js","sourceRoot":"","sources":["../src/acceptance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AAGxD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAAmC,CAAA;AAC5E,OAAO,EAAE,uBAAuB,EAAE,CAAA;AA6ClC,MAAM,GAAG,GAAG,qBAAqB,CAAA;AACjC,MAAM,KAAK,GAAG,gBAAgB,CAAA;AAC9B,MAAM,IAAI,GAAG,kEAAkE,CAAA;AAC/E,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAC/C,MAAM,cAAc,GAAG,GAAG,CAAA;AAqB1B,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,OAAe,EAAmB,EAAE,CAChE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AAEzH,MAAM,UAAU,GAAG,CAAC,KAAc,EAAqB,EAAE,CACvD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAE,KAAkB,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC,SAAS,CAAE,KAAkB,CAAC,WAAW,CAAC,IAAK,KAAkB,CAAC,WAAW,IAAI,CAAC,CAAA;AAExL,MAAM,OAAO,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAE5D,+FAA+F;AAC/F,MAAM,UAAU,yBAAyB,CAAC,KAAuD;IAC/F,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAgC,CAAA;IAC/E,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;AACvD,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,oBAAoB,CAAC,MAA+B;IAClE,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;AAC/E,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,QAA6B;IAC9D,MAAM,IAAI,GAAG,CAAC,MAA+B,EAAE,MAAc,EAAQ,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;IAC7G,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,IAAI,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAA;QAC9C,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAA;IACjL,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,wBAAwB,GAAG,EAAE,CAAC,CAAA;IACtG,IAAI,CAAC,CAAC,gBAAgB,KAAK,yBAAyB;QAAE,IAAI,CAAC,QAAQ,EAAE,2BAA2B,yBAAyB,EAAE,CAAC,CAAA;IAC5H,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC;QAAE,IAAI,CAAC,QAAQ,EAAE,+CAA+C,cAAc,QAAQ,CAAC,CAAA;IAC7H,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC;QAAE,IAAI,CAAC,QAAQ,EAAE,wDAAwD,CAAC,CAAA;IACtG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;QAAE,IAAI,CAAC,QAAQ,EAAE,oCAAoC,CAAC,CAAA;IACvF,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAAE,IAAI,CAAC,QAAQ,EAAE,yCAAyC,CAAC,CAAA;IACjG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAAE,IAAI,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAA;IAC/G,MAAM,KAAK,GAAG,CAAC,CAAC,KAA4C,CAAA;IAC5D,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAA;SAC5G,CAAC;QACJ,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,CAAC,mBAAmB,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,QAAQ,EAAE,8BAA8B,GAAG,EAAE,CAAC,CAAA;QAC1L,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,yDAAyD,CAAC,CAAA;QAC/H,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,0DAA0D,CAAC,CAAA;QAC/K,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,0DAA0D,CAAC,CAAA;QAC/K,IAAI,KAAK,CAAC,SAAS,KAAK,YAAY,IAAI,KAAK,CAAC,SAAS,KAAK,iBAAiB;YAAE,IAAI,CAAC,QAAQ,EAAE,uDAAuD,CAAC,CAAA;QACtJ,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5J,IAAI,CAAC,QAAQ,EAAE,iGAAiG,CAAC,CAAA;QACnH,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,CAAC,UAAiD,CAAA;IACtE,IAAI,UAAU,IAAI,IAAI,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAA;SAChI,CAAC;QACJ,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,IAAI,CAAC,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,QAAQ,EAAE,mCAAmC,GAAG,EAAE,CAAC,CAAA;QAChM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,iEAAiE,CAAC,CAAA;QAC/I,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,2DAA2D,CAAC,CAAA;QACnI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,QAAQ,EAAE,gEAAgE,CAAC,CAAA;QACjM,IAAI,UAAU,CAAC,YAAY,KAAK,oBAAoB;YAAE,IAAI,CAAC,QAAQ,EAAE,oDAAoD,CAAC,CAAA;IAC5H,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAAE,IAAI,CAAC,QAAQ,EAAE,2CAA2C,CAAC,CAAA;IACrG,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAA;SACrI,CAAC;QACJ,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YACjD,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAc,CAAC,KAAK,CAAC,CAAC,SAAS;gBAAE,IAAI,CAAC,QAAQ,EAAE,kCAAkC,CAAC,CAAA;QAC9G,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAA;QACxC,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IAC/C,IAAI,CAAC,CAAC,OAAO,IAAI,QAAQ,CAAC;QAAE,IAAI,CAAC,YAAY,EAAE,+BAA+B,CAAC,CAAA;IAC/E,IAAI,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC;QAAE,IAAI,CAAC,YAAY,EAAE,sDAAsD,CAAC,CAAA;IACtG,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,KAAK,iBAAiB,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,UAAU,CAAC,oBAAoB,EAAE,CAAC;QAC9J,IAAI,CAAC,gBAAgB,EAAE,mDAAmD,CAAC,CAAA;IAC7E,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAA;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAc,EAAE,UAA8C,EAAE;IACvG,MAAM,QAAQ,GAAwB,EAAE,CAAA;IACxC,MAAM,cAAc,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACjD,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAA;IAC9E,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,IAAI,cAAc,GAAmB,IAAI,CAAA;IACzC,IAAI,UAA8B,CAAA;IAClC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAA;QAClD,cAAc,GAAG,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAA;QACnI,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAA;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,GAAG,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAA;QACnE,IAAI,cAAc,KAAK,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,EAAE,CAAC,CAAA;IACvJ,CAAC;IACD,IAAI,cAAc,KAAK,KAAK;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,iDAAiD,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;IACzJ,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACjF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,aAAa,MAAM,CAAC,SAAS,oCAAoC,EAAE,CAAC,CAAA;IAC9H,CAAC;IACD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAA;AACpG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA+B,EAAE,KAAiB;IACtF,MAAM,QAAQ,GAAwB,EAAE,CAAA;IACxC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAQ,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;IAC9F,IAAI,KAAK,CAAC,EAAE,KAAK,UAAU;QAAE,IAAI,CAAC,kBAAkB,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAA;IAC/E,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACpF,IAAI,KAAK,CAAC,cAAc,IAAI,IAAI,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,MAAM,CAAC,cAAc,CAAC,IAAI,IAAI,KAAK,CAAC,cAAc,CAAC,WAAW,KAAK,MAAM,CAAC,cAAc,CAAC,WAAW;QAAE,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC/M,IAAI,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,mBAAmB,CAAC,IAAI,IAAI,KAAK,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,CAAC,WAAW;QAAE,IAAI,CAAC,2DAA2D,CAAC,CAAA;IACrM,IAAI,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC,UAAU,CAAC,cAAc;QAAE,IAAI,CAAC,sEAAsE,CAAC,CAAA;IAC7I,IAAI,KAAK,CAAC,gBAAgB,KAAK,MAAM,CAAC,KAAK,CAAC,iBAAiB;QAAE,IAAI,CAAC,kEAAkE,CAAC,CAAA;IACvI,IAAI,KAAK,CAAC,uBAAuB,KAAK,oBAAoB,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,0CAA0C,CAAC,CAAA;IACpH,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QAAE,IAAI,CAAC,4DAA4D,CAAC,CAAA;IACxI,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,8HAA8H;AAC9H,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAA6B,EAAE,MAAwB;IACjG,MAAM,QAAQ,GAAwB,EAAE,CAAA;IACxC,+GAA+G;IAC/G,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,yCAAyC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACtG,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAA;IAC/D,MAAM,MAAM,GAA4B,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAA;IACjF,MAAM,UAAU,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAA;IACnD,IAAI,UAAU,CAAC,cAAc,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IACtH,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/anchor.d.ts

@@ -0,0 +1,66 @@
+import { LockingScript, PublicKey, type WalletProtocol } from '@bsv/sdk';
+/**
+ * The generic complete-representation anchor, `bsv-attestation-anchor-v1`
+ * (`spec/rules.md` §5 and §6). It lives in the core rather than in the overlay
+ * package because a reader in a browser verifies anchors without a database or
+ * an overlay engine, and `verifyPassportEvidence` (evidence.ts) reports the
+ * anchor rail beside the token rail from one package. `@bsv/dpp-overlay-topics`
+ * re-exports every name below unchanged.
+ */
+export declare const ATTESTATION_ANCHOR_PREFIX = "bsv-attestation-anchor-v1";
+export declare const ATTESTATION_ANCHOR_PROTOCOL: WalletProtocol;
+export declare const ATTESTATION_ANCHOR_BASKET = "attestation-anchor";
+export declare const ATTESTATION_ANCHOR_FIELD_COUNT = 9;
+/** Metadata is authenticated as the anchor service's statement, not as credential authority. */
+export interface AnchorMetadata {
+    digest: string;
+    attestationId: string;
+    issuer: string;
+    subject: string;
+    attestationType: string;
+    representation: string;
+    mediaType: string;
+    anchoredBy: string;
+}
+export interface AttestationAnchor extends AnchorMetadata {
+    lockingKey: string;
+    signature: number[];
+}
+export interface AnchorSigner {
+    createSignature(args: {
+        data: number[];
+        protocolID: WalletProtocol;
+        keyID: string;
+        counterparty: string;
+    }): Promise<{
+        signature: number[];
+    }>;
+}
+export declare function expectedAttestationLockingKey(anchoredBy: string, attestationId: string): PublicKey;
+export declare function attestationAnchorFields(anchor: AnchorMetadata): number[][];
+export declare function attestationAnchorSigningPreimage(fields: number[][]): number[];
+export declare function buildAttestationAnchor(anchor: AnchorMetadata, signer: AnchorSigner): Promise<LockingScript>;
+/**
+ * What a reader learnt from one output, check by check, so a report can say
+ * which rule failed rather than only that one did. `metadata` is present once
+ * the layout and every field bound held; the two Booleans are `null` until the
+ * material they need was decoded. `decodeAttestationAnchor` collapses this to
+ * the total strict parser the topic manager and the fixtures use.
+ */
+export interface AttestationAnchorInspection {
+    metadata?: AnchorMetadata;
+    /** Canonical hex of the key in the first push, when it is a canonical compressed key. */
+    lockingKey?: string;
+    /** The child the metadata says the locking key must be, when metadata decoded. */
+    derivedKey?: string;
+    keyDerivationValid: boolean | null;
+    /** Verified against the derived key, never against whatever key the script happened to carry. */
+    signatureValid: boolean | null;
+    signature?: number[];
+    /** The first structural refusal, present when `metadata` is absent or a key did not parse. */
+    failure?: string;
+}
+export declare function inspectAttestationAnchor(script: LockingScript): AttestationAnchorInspection;
+/** A total strict parser: invalid or legacy outputs return null. No credential proof is implied. */
+export declare function decodeAttestationAnchor(script: LockingScript): AttestationAnchor | null;
+//# sourceMappingURL=anchor.d.ts.map

package/dist/anchor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor.d.ts","sourceRoot":"","sources":["../src/anchor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,aAAa,EAAE,SAAS,EAAoB,KAAK,cAAc,EAAE,MAAM,UAAU,CAAA;AAE5G;;;;;;;GAOG;AAEH,eAAO,MAAM,yBAAyB,8BAA8B,CAAA;AACpE,eAAO,MAAM,2BAA2B,EAAE,cAAiD,CAAA;AAC3F,eAAO,MAAM,yBAAyB,uBAAuB,CAAA;AAC7D,eAAO,MAAM,8BAA8B,IAAI,CAAA;AAE/C,gGAAgG;AAChG,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;CACnB;AACD,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,EAAE,CAAA;CACpB;AACD,MAAM,WAAW,YAAY;IAC3B,eAAe,CAAC,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAA;CAC7I;AAoBD,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,SAAS,CAIlG;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,EAAE,EAAE,CAW1E;AAED,wBAAgB,gCAAgC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,CAK7E;AAED,wBAAsB,sBAAsB,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAajH;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,EAAE,cAAc,CAAA;IACzB,yFAAyF;IACzF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kBAAkB,EAAE,OAAO,GAAG,IAAI,CAAA;IAClC,iGAAiG;IACjG,cAAc,EAAE,OAAO,GAAG,IAAI,CAAA;IAC9B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,aAAa,GAAG,2BAA2B,CA6C3F;AAED,oGAAoG;AACpG,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,aAAa,GAAG,iBAAiB,GAAG,IAAI,CAOvF"}