@bsv/dpp-core 0.3.0-beta.1

package/dist/signatures.js

@@ -0,0 +1,137 @@
+import { CachedKeyDeriver, Signature, Utils } from '@bsv/sdk';
+import { DPP_PROTOCOL_ID, DPP_PROTOCOL_ID_V2, PROTOCOL_MARKER, RECORD_V2_ACTOR_TAG, RECORD_V2_PUBLISHER_TAG, STANDARD_VERSION, } from './constants.js';
+import { dataFields, dataFieldsV2, isV2Data } from './codec.js';
+/**
+ * Canonical version 1 user-signature preimage (`spec/record-model.md` §5): the
+ * concatenated raw bytes of fields 1–12 in standard order - never a JSON
+ * serialization.
+ *
+ * Framing note: §5 mandates plain concatenation, so the preimage bytes alone
+ * do not bind field boundaries. Boundary uniqueness comes from field
+ * validation (op enum, ISO timestamp, fixed-width keys/hashes, JSON rules)
+ * plus the chain invariants (genesis must be ACTIVATE, spend linkage,
+ * passport_id immutability), which together block re-split states from
+ * verifying in any spec-sanctioned consumer. Version 2 replaces this with a
+ * framed, domain-tagged preimage (`actorPreimageV2`); version 1 keeps it
+ * because a published state keeps the contract it was signed under.
+ */
+export function userPreimageV1(d) {
+    return dataFields(d).flat();
+}
+/** Canonical version 1 server-signature preimage: fields 1–13 (user preimage + user_signature). */
+export function serverPreimageV1(d, userSignature) {
+    return [...userPreimageV1(d), ...userSignature];
+}
+/**
+ * Length framing (`spec/record-model-v2.md` §5): each item as its Bitcoin
+ * VarInt byte length followed by its bytes, in order. The same framing the
+ * anchor rail uses (`spec/rules.md` §5), so one rule serves both.
+ */
+export function frameFields(items) {
+    const writer = new Utils.Writer();
+    for (const item of items) {
+        writer.writeVarIntNum(item.length);
+        writer.write(item);
+    }
+    return writer.toArray();
+}
+/**
+ * The version 2 actor preimage: the actor tag, then fields 1–15, every item
+ * length-framed. Two field tuples that differ anywhere produce different
+ * bytes, and the tag keeps a signature made for the publisher role, or for
+ * version 1, from verifying here.
+ */
+export function actorPreimageV2(d) {
+    return frameFields([Utils.toArray(RECORD_V2_ACTOR_TAG, 'utf8'), ...dataFieldsV2(d)]);
+}
+/** The version 2 publisher preimage: the publisher tag, fields 1–15 and the actor signature, every item length-framed. */
+export function publisherPreimageV2(d, actorSignature) {
+    return frameFields([Utils.toArray(RECORD_V2_PUBLISHER_TAG, 'utf8'), ...dataFieldsV2(d), actorSignature]);
+}
+/** The actor's preimage under the version the data declares: version 1 unframed, version 2 framed and tagged. */
+export function userPreimage(d) {
+    return isV2Data(d) ? actorPreimageV2(d) : userPreimageV1(d);
+}
+/** The publisher's preimage under the version the data declares. */
+export function serverPreimage(d, userSignature) {
+    return isV2Data(d) ? publisherPreimageV2(d, userSignature) : serverPreimageV1(d, userSignature);
+}
+/** The BRC-43 protocol both signatures of a state derive under: one per version, so keys never cross. */
+export function protocolIdFor(d) {
+    return isV2Data(d) ? DPP_PROTOCOL_ID_V2 : DPP_PROTOCOL_ID;
+}
+/** Deriver for counterparty-'anyone' verification keys (rootKey = 1). */
+const anyone = new CachedKeyDeriver('anyone');
+/**
+ * Create the actor signature (field 13 in version 1, field 16 in version 2):
+ * the actor signs the version's actor preimage with the child key for
+ * (the version's protocol, actor_keyID, counterparty 'anyone').
+ */
+export async function createUserSignature(d, actorWallet) {
+    const { signature } = await actorWallet.createSignature({
+        data: userPreimage(d),
+        protocolID: protocolIdFor(d),
+        keyID: d.actorKeyId,
+        counterparty: 'anyone',
+    });
+    return signature;
+}
+/**
+ * Create the publisher signature (field 14 in version 1, field 17 in version
+ * 2): the service signs the version's publisher preimage with the child key
+ * for (the version's protocol, keyID = passport_id, counterparty 'anyone').
+ * keyID is pinned to passport_id so verifiers can re-derive the service child
+ * key from on-chain data plus the published service identity key (§5).
+ */
+export async function createServerSignature(d, userSignature, serverWallet) {
+    const { signature } = await serverWallet.createSignature({
+        data: serverPreimage(d, userSignature),
+        protocolID: protocolIdFor(d),
+        keyID: d.passportId,
+        counterparty: 'anyone',
+    });
+    return signature;
+}
+/** Sign the actor and publisher preimages and assemble the complete state of the version the data declares. */
+export async function completeState(d, actorWallet, serverWallet) {
+    const userSignature = await createUserSignature(d, actorWallet);
+    const serverSignature = await createServerSignature(d, userSignature, serverWallet);
+    if (isV2Data(d)) {
+        return { ...d, protocolMarker: PROTOCOL_MARKER, userSignature, serverSignature };
+    }
+    return {
+        ...d,
+        protocolMarker: PROTOCOL_MARKER,
+        version: STANDARD_VERSION,
+        userSignature,
+        serverSignature,
+    };
+}
+/**
+ * Verify the actor signature against actor_identity_key + actor_keyID (§5;
+ * §8 check 1), under the version the state carries. Open verification: the
+ * key is derived with counterparty 'anyone', so no wallet or secret is needed.
+ */
+export function verifyUserSignature(state) {
+    try {
+        const pub = anyone.derivePublicKey(protocolIdFor(state), state.actorKeyId, state.actorIdentityKey);
+        return pub.verify(userPreimage(state), Signature.fromDER(state.userSignature));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Verify the publisher signature against a configured service identity key.
+ * Admission policy, not token validity (§5).
+ */
+export function verifyServerSignature(state, serverIdentityKey) {
+    try {
+        const pub = anyone.derivePublicKey(protocolIdFor(state), state.passportId, serverIdentityKey);
+        return pub.verify(serverPreimage(state, state.userSignature), Signature.fromDER(state.serverSignature));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=signatures.js.map

package/dist/signatures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signatures.js","sourceRoot":"","sources":["../src/signatures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAuB,MAAM,UAAU,CAAA;AAClF,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAG/D;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAAC,CAAe;IAC5C,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAC7B,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,gBAAgB,CAAC,CAAe,EAAE,aAAuB;IACvE,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,aAAa,CAAC,CAAA;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,MAAM,MAAM,GAAG,IAAI,KAAK,CAAC,MAAM,EAAE,CAAA;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACpB,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,EAAE,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,CAAiB;IAC/C,OAAO,WAAW,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACtF,CAAC;AAED,0HAA0H;AAC1H,MAAM,UAAU,mBAAmB,CAAC,CAAiB,EAAE,cAAwB;IAC7E,OAAO,WAAW,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,uBAAuB,EAAE,MAAM,CAAC,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAA;AAC1G,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,YAAY,CAAC,CAAkB;IAC7C,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;AAC7D,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,CAAkB,EAAE,aAAuB;IACxE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAA;AACjG,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,eAAe,CAAA;AAC3D,CAAC;AAiBD,yEAAyE;AACzE,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAA;AAE7C;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,CAAkB,EAClB,WAAuB;IAEvB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,WAAW,CAAC,eAAe,CAAC;QACtD,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;QACrB,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5B,KAAK,EAAE,CAAC,CAAC,UAAU;QACnB,YAAY,EAAE,QAAQ;KACvB,CAAC,CAAA;IACF,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,CAAkB,EAClB,aAAuB,EACvB,YAAwB;IAExB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC;QACvD,IAAI,EAAE,cAAc,CAAC,CAAC,EAAE,aAAa,CAAC;QACtC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;QAC5B,KAAK,EAAE,CAAC,CAAC,UAAU;QACnB,YAAY,EAAE,QAAQ;KACvB,CAAC,CAAA;IACF,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,CAAkB,EAClB,WAAuB,EACvB,YAAwB;IAExB,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;IAC/D,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,CAAA;IACnF,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,OAAO,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,eAAe,EAAE,CAAA;IAClF,CAAC;IACD,OAAO;QACL,GAAG,CAAC;QACJ,cAAc,EAAE,eAAe;QAC/B,OAAO,EAAE,gBAAgB;QACzB,aAAa;QACb,eAAe;KAChB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAe;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAChC,aAAa,CAAC,KAAK,CAAC,EACpB,KAAK,CAAC,UAAU,EAChB,KAAK,CAAC,gBAAgB,CACvB,CAAA;QACD,OAAO,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAA;IAChF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAe,EACf,iBAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAChC,aAAa,CAAC,KAAK,CAAC,EACpB,KAAK,CAAC,UAAU,EAChB,iBAAiB,CAClB,CAAA;QACD,OAAO,GAAG,CAAC,MAAM,CACf,cAAc,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,CAAC,EAC1C,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CACzC,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/transition.d.ts

@@ -0,0 +1,29 @@
+import type { DppState, Outpoint } from './types.js';
+/**
+ * Per-link rules from `spec/record-model.md` §4 and §6 (version 1) and
+ * `spec/record-model-v2.md` §4 and §6 (version 2). Field-level well-formedness
+ * (event_data emptiness, JSON validity, ISO timestamps, field bounds) is
+ * enforced by the codec at decode time. These functions check the rules that
+ * span states. Returns null when valid, otherwise a human-readable reason; the
+ * fixtures pin these strings.
+ */
+/** What a link needs beyond the two states: the predecessor's output index, the lineage's genesis, and the profile's authorities. */
+export interface LinkContext {
+    /** The output index of the predecessor's DPP output, as spent. Version 2 binds it (field 13). */
+    prevOutputIndex?: number;
+    /** The genesis outpoint of the chain being verified. Version 2 binds it (field 12). */
+    lineageGenesis?: Outpoint;
+    /** Identity keys the profile names as authorities, whose version 2 UPDATE, TRANSFER or RETIRE passes without a control proof. */
+    authorities?: readonly string[];
+}
+export declare function checkGenesisState(s: DppState): string | null;
+/**
+ * The rules one link must satisfy, under the version of the state that
+ * extends the chain. A version 1 successor keeps the version 1 rules exactly;
+ * a version 2 successor binds the predecessor outpoint and the lineage
+ * genesis, refuses to follow a RETIRE, proves control of the predecessor, and
+ * may follow a version 1 predecessor only as the UPDATE that upgrades the
+ * lineage (`spec/record-model-v2.md` §8).
+ */
+export declare function checkTransition(prev: DppState, next: DppState, prevTxid: string, link?: LinkContext): string | null;
+//# sourceMappingURL=transition.d.ts.map

package/dist/transition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transition.d.ts","sourceRoot":"","sources":["../src/transition.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAc,QAAQ,EAAE,MAAM,YAAY,CAAA;AAEhE;;;;;;;GAOG;AAEH,qIAAqI;AACrI,MAAM,WAAW,WAAW;IAC1B,iGAAiG;IACjG,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,uFAAuF;IACvF,cAAc,CAAC,EAAE,QAAQ,CAAA;IACzB,iIAAiI;IACjI,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAChC;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAW5D;AA+ED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,WAAgB,GACrB,MAAM,GAAG,IAAI,CAGf"}

package/dist/transition.js

@@ -0,0 +1,117 @@
+import { NO_EVENT_OPS, PAYLOAD_CHANGE_OPS, PAYLOAD_CHANGE_OPS_V2 } from './constants.js';
+import { checkControl } from './owner.js';
+export function checkGenesisState(s) {
+    if (s.version === '2') {
+        if (s.op !== 'ISSUE')
+            return `genesis op must be ISSUE, got ${s.op}`;
+        if (s.previousTxid !== '' || s.previousOutputIndex != null)
+            return 'genesis previous_outpoint must be empty';
+        if (s.lineageGenesis != null)
+            return 'genesis lineage_genesis must be empty';
+        if (s.controlLinkage !== '')
+            return 'genesis control_linkage must be empty';
+        return null;
+    }
+    if (s.op !== 'ACTIVATE')
+        return `genesis op must be ACTIVATE, got ${s.op}`;
+    if (s.previousTxid !== '')
+        return 'genesis previous_txid must be empty';
+    return null;
+}
+const sameOutpoint = (a, b) => a.txid === b.txid && a.outputIndex === b.outputIndex;
+function checkTransitionV1(prev, next, prevTxid) {
+    if (prev.version === '2')
+        return 'a version 1 state cannot follow a version 2 state';
+    if (next.op === 'ACTIVATE')
+        return 'ACTIVATE is allowed at genesis only';
+    if (next.previousTxid === '')
+        return 'non-genesis previous_txid must be set';
+    if (next.passportId !== prev.passportId) {
+        return 'passport_id is immutable across the chain';
+    }
+    if (next.previousTxid !== prevTxid) {
+        return 'previous_txid must equal the spent tip txid';
+    }
+    if (next.op !== 'TRANSFER' && next.ownerIdentityKey !== prev.ownerIdentityKey) {
+        return 'owner_identity_key changes only on TRANSFER';
+    }
+    if (!PAYLOAD_CHANGE_OPS.includes(next.op) &&
+        (next.payloadPublic !== prev.payloadPublic ||
+            next.payloadOwnerHash !== prev.payloadOwnerHash)) {
+        return 'payload_public / payload_owner_hash change only on ACTIVATE, EDIT or TRANSFER';
+    }
+    if (NO_EVENT_OPS.includes(next.op) && next.eventData !== '') {
+        return `event_data must be empty on ${next.op}`;
+    }
+    return null;
+}
+/**
+ * The lineage genesis a version 2 state must name, from what the caller
+ * knows: the chain's genesis when supplied; otherwise, for a version 2
+ * predecessor, what that predecessor names (or the predecessor itself when it
+ * is the ISSUE). A version 1 predecessor names no genesis, so the caller must
+ * supply one; a reader that cannot is told so rather than left to guess.
+ */
+function expectedLineageGenesis(prev, prevTxid, link) {
+    if (link.lineageGenesis != null)
+        return link.lineageGenesis;
+    if (prev.version !== '2')
+        return undefined;
+    if (prev.lineageGenesis != null)
+        return prev.lineageGenesis;
+    if (link.prevOutputIndex == null)
+        return undefined;
+    return { txid: prevTxid, outputIndex: link.prevOutputIndex };
+}
+function checkTransitionV2(prev, next, prevTxid, link) {
+    if (next.op === 'ISSUE')
+        return 'ISSUE is allowed at genesis only';
+    if (prev.version === '2' && prev.op === 'RETIRE')
+        return 'the lineage is retired: no state may follow RETIRE';
+    if (prev.version === '1' && next.op !== 'UPDATE') {
+        return 'a version 1 state is followed only by a version 2 UPDATE, the upgrade transition';
+    }
+    if (next.previousTxid === '' || next.previousOutputIndex == null)
+        return 'non-genesis previous_outpoint must be set';
+    if (next.passportId !== prev.passportId)
+        return 'passport_id is immutable across the chain';
+    if (next.previousTxid !== prevTxid)
+        return 'previous_outpoint must name the spent tip';
+    if (link.prevOutputIndex != null && next.previousOutputIndex !== link.prevOutputIndex) {
+        return 'previous_outpoint must name the spent tip output';
+    }
+    const genesis = expectedLineageGenesis(prev, prevTxid, link);
+    if (genesis == null)
+        return 'lineage_genesis cannot be checked without the chain genesis';
+    if (next.lineageGenesis == null || !sameOutpoint(next.lineageGenesis, genesis)) {
+        return 'lineage_genesis must name the chain genesis';
+    }
+    if (prev.version === '1' && next.ownerIdentityKey !== prev.ownerIdentityKey) {
+        return 'the upgrade transition keeps the controller key';
+    }
+    if (next.op !== 'TRANSFER' && next.ownerIdentityKey !== prev.ownerIdentityKey) {
+        return 'controller_key changes only on TRANSFER';
+    }
+    if (!PAYLOAD_CHANGE_OPS_V2.includes(next.op) &&
+        (next.payloadPublic !== prev.payloadPublic || next.payloadOwnerHash !== prev.payloadOwnerHash)) {
+        return 'payload_public / payload_owner_hash do not change on RETIRE';
+    }
+    const control = checkControl(prev, next, link.authorities ?? []);
+    if (control != null)
+        return control;
+    return null;
+}
+/**
+ * The rules one link must satisfy, under the version of the state that
+ * extends the chain. A version 1 successor keeps the version 1 rules exactly;
+ * a version 2 successor binds the predecessor outpoint and the lineage
+ * genesis, refuses to follow a RETIRE, proves control of the predecessor, and
+ * may follow a version 1 predecessor only as the UPDATE that upgrades the
+ * lineage (`spec/record-model-v2.md` §8).
+ */
+export function checkTransition(prev, next, prevTxid, link = {}) {
+    if (next.version === '2')
+        return checkTransitionV2(prev, next, prevTxid, link);
+    return checkTransitionV1(prev, next, prevTxid);
+}
+//# sourceMappingURL=transition.js.map

package/dist/transition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transition.js","sourceRoot":"","sources":["../src/transition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAA;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAsBzC,MAAM,UAAU,iBAAiB,CAAC,CAAW;IAC3C,IAAI,CAAC,CAAC,OAAO,KAAK,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE,KAAK,OAAO;YAAE,OAAO,iCAAiC,CAAC,CAAC,EAAE,EAAE,CAAA;QACpE,IAAI,CAAC,CAAC,YAAY,KAAK,EAAE,IAAI,CAAC,CAAC,mBAAmB,IAAI,IAAI;YAAE,OAAO,yCAAyC,CAAA;QAC5G,IAAI,CAAC,CAAC,cAAc,IAAI,IAAI;YAAE,OAAO,uCAAuC,CAAA;QAC5E,IAAI,CAAC,CAAC,cAAc,KAAK,EAAE;YAAE,OAAO,uCAAuC,CAAA;QAC3E,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,CAAC,EAAE,KAAK,UAAU;QAAE,OAAO,oCAAoC,CAAC,CAAC,EAAE,EAAE,CAAA;IAC1E,IAAI,CAAC,CAAC,YAAY,KAAK,EAAE;QAAE,OAAO,qCAAqC,CAAA;IACvE,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAW,EAAE,CAAW,EAAW,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,WAAW,CAAA;AAEhH,SAAS,iBAAiB,CAAC,IAAc,EAAE,IAAiC,EAAE,QAAgB;IAC5F,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG;QAAE,OAAO,mDAAmD,CAAA;IACpF,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU;QAAE,OAAO,qCAAqC,CAAA;IACxE,IAAI,IAAI,CAAC,YAAY,KAAK,EAAE;QAAE,OAAO,uCAAuC,CAAA;IAC5E,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,OAAO,2CAA2C,CAAA;IACpD,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,6CAA6C,CAAA;IACtD,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9E,OAAO,6CAA6C,CAAA;IACtD,CAAC;IACD,IACE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa;YACxC,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,CAAC,EAClD,CAAC;QACD,OAAO,+EAA+E,CAAA;IACxF,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QAC5D,OAAO,+BAA+B,IAAI,CAAC,EAAE,EAAE,CAAA;IACjD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,IAAc,EAAE,QAAgB,EAAE,IAAiB;IACjF,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,cAAc,CAAA;IAC3D,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1C,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,cAAc,CAAA;IAC3D,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI;QAAE,OAAO,SAAS,CAAA;IAClD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,CAAA;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAc,EAAE,IAAgB,EAAE,QAAgB,EAAE,IAAiB;IAC9F,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO;QAAE,OAAO,kCAAkC,CAAA;IAClE,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,oDAAoD,CAAA;IAC7G,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACjD,OAAO,kFAAkF,CAAA;IAC3F,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,KAAK,EAAE,IAAI,IAAI,CAAC,mBAAmB,IAAI,IAAI;QAAE,OAAO,2CAA2C,CAAA;IACpH,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;QAAE,OAAO,2CAA2C,CAAA;IAC3F,IAAI,IAAI,CAAC,YAAY,KAAK,QAAQ;QAAE,OAAO,2CAA2C,CAAA;IACtF,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;QACtF,OAAO,kDAAkD,CAAA;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC5D,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,6DAA6D,CAAA;IACzF,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE,CAAC;QAC/E,OAAO,6CAA6C,CAAA;IACtD,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5E,OAAO,iDAAiD,CAAA;IAC1D,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,UAAU,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9E,OAAO,yCAAyC,CAAA;IAClD,CAAC;IACD,IACE,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB,CAAC,EAC9F,CAAC;QACD,OAAO,6DAA6D,CAAA;IACtE,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAA;IAChE,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,OAAO,CAAA;IACnC,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAc,EACd,IAAc,EACd,QAAgB,EAChB,OAAoB,EAAE;IAEtB,IAAI,IAAI,CAAC,OAAO,KAAK,GAAG;QAAE,OAAO,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;IAC9E,OAAO,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAA;AAChD,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,135 @@
+import { DPP_OPS, DPP_OPS_V2 } from './constants.js';
+export type DppOpV1 = (typeof DPP_OPS)[number];
+export type DppOpV2 = (typeof DPP_OPS_V2)[number];
+/** Every operation either record version carries. A version 1 state carries only a `DppOpV1`, a version 2 state only a `DppOpV2`. */
+export type DppOp = DppOpV1 | DppOpV2;
+/** A transaction output by identifier and index; the shape both record versions and the report name outputs by. */
+export interface Outpoint {
+    txid: string;
+    outputIndex: number;
+}
+/**
+ * The signable content of one version 1 passport state - fields 1–12 of the
+ * DPP Token Standard v1 layout (`spec/record-model.md` §3), before signatures.
+ */
+export interface DppStateData {
+    /** Stable GS1-DL-style ID; immutable across the chain; primary lookup key. */
+    passportId: string;
+    op: DppOpV1;
+    /** Actor-asserted ISO 8601; bounded by neighbouring blocks (§3 field 5). */
+    timestamp: string;
+    /** Current owner's compressed public key, hex; SHOULD be the owner's BRC-42 child under OWNER_PROTOCOL_ID (§3 field 6). */
+    ownerIdentityKey: string;
+    /** Compressed public key, hex, of who performed this state change. */
+    actorIdentityKey: string;
+    /** Published keyID for the actor signature; enables open verification. */
+    actorKeyId: string;
+    /** Clear JSON event metadata; '' on ACTIVATE and EDIT. */
+    eventData: string;
+    /** Clear JSON, the record's public tier (`spec/record-model.md` §3 field 10). */
+    payloadPublic: string;
+    /** SHA-256 hex of the off-chain owner-tier ciphertext blob; '' if none. */
+    payloadOwnerHash: string;
+    /** Prior tip txid, hex; '' at genesis. Must equal the spent outpoint's txid. */
+    previousTxid: string;
+}
+/** The version 1 data, under the name the version 2 type sits beside. */
+export type DppStateDataV1 = DppStateData;
+/**
+ * The signable content of one version 2 passport state - fields 1–15 of the
+ * layout in `spec/record-model-v2.md` §3, before signatures. The property
+ * names shared with version 1 keep their meaning; `ownerIdentityKey` is the
+ * controller key (field 6) and `previousTxid` the txid half of the predecessor
+ * outpoint (field 13).
+ */
+export interface DppStateDataV2 {
+    version: '2';
+    passportId: string;
+    op: DppOpV2;
+    timestamp: string;
+    /** The controller key, field 6: the per-passport key that names who controls the lineage. */
+    ownerIdentityKey: string;
+    actorIdentityKey: string;
+    actorKeyId: string;
+    /** Clear JSON or ''; at most MAX_EVENT_DATA_BYTES_V2 bytes. No property is reserved. */
+    eventData: string;
+    /** Clear JSON, non-empty; at most MAX_PAYLOAD_PUBLIC_BYTES_V2 bytes. */
+    payloadPublic: string;
+    payloadOwnerHash: string;
+    /** The predecessor's txid, hex; '' on ISSUE. With `previousOutputIndex`, field 13. */
+    previousTxid: string;
+    /** The predecessor's output index; null on ISSUE. */
+    previousOutputIndex: number | null;
+    /** The genesis outpoint of the lineage, field 12; null on ISSUE, which is the genesis. */
+    lineageGenesis: Outpoint | null;
+    /** Field 14: '' or 64 lower-case hex, the BRC-69 scalar linking the actor's root to the previous controller key. */
+    controlLinkage: string;
+    /** Field 15: '' or 64 lower-case hex, the SHA-256 commitment to the off-chain authorisation record the profile names. */
+    authorisationCommitment: string;
+}
+/** Either version's signable content. */
+export type AnyDppStateData = DppStateDataV1 | DppStateDataV2;
+interface SignedFields {
+    protocolMarker: string;
+    /** DER ECDSA, the actor's signature (field 13 in version 1, field 16 in version 2). */
+    userSignature: number[];
+    /** DER ECDSA, the publisher's countersignature (field 14 in version 1, field 17 in version 2). */
+    serverSignature: number[];
+}
+/** A fully signed version 1 state: fields 1–14 decoded from a DPP output. */
+export interface DppStateV1 extends DppStateDataV1, SignedFields {
+    version: '1';
+}
+/** A fully signed version 2 state: fields 1–17 decoded from a DPP output. */
+export interface DppStateV2 extends DppStateDataV2, SignedFields {
+}
+/** A fully signed state of either version. Narrow on `version`. */
+export type DppState = DppStateV1 | DppStateV2;
+/** One link of a passport chain as needed for verification. */
+export interface DppChainEntry {
+    state: DppState;
+    txid: string;
+    /** Output index of the DPP output within its transaction. */
+    outputIndex: number;
+}
+export type SpvStatus = 'verified' | 'pending';
+export interface StateCheck {
+    txid: string;
+    op: DppOp;
+    userSignatureValid: boolean;
+    serverSignatureValid: boolean | null;
+    linkageValid: boolean;
+    /**
+     * The optional owner-signed transfer (`spec/custody.md` §4). null when the
+     * invariant was not run: the option is off, or the state is not a version 1
+     * TRANSFER. A report says "not applicable" for null rather than a vacuous pass.
+     * Version 2 states prove control as part of linkage instead (`controlValid`
+     * on the inspection).
+     */
+    ownerConsentValid: boolean | null;
+    spv: SpvStatus | 'failed';
+}
+export interface ChainVerifyResult {
+    valid: boolean;
+    /**
+     * 'verified' only when the chain is valid and every state proved against
+     * block headers. 'pending' covers both an unmined state and one that could
+     * not be checked, because to a reader those are the same sentence:
+     * inclusion is not proved yet. A chain that fails verification also says
+     * 'pending', whatever its proofs said, so no consumer can print "inclusion
+     * proved" beside "could not verify"; the per-state detail in `states`
+     * keeps 'failed' where a proof was refuted.
+     */
+    spv: SpvStatus;
+    states: StateCheck[];
+    /** Human-readable reason for the first failure, when valid === false. */
+    error?: string;
+    /**
+     * Set when the chain tracker could not answer at least once, carrying the
+     * first such error. Operational signal only: an outage leaves SPV 'pending'
+     * rather than 'failed', and this is how a caller can tell the two apart.
+     */
+    spvUnavailable?: string;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAEpD,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAA;AAC9C,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;AACjD,qIAAqI;AACrI,MAAM,MAAM,KAAK,GAAG,OAAO,GAAG,OAAO,CAAA;AAErC,mHAAmH;AACnH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,OAAO,CAAA;IACX,4EAA4E;IAC5E,SAAS,EAAE,MAAM,CAAA;IACjB,2HAA2H;IAC3H,gBAAgB,EAAE,MAAM,CAAA;IACxB,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,CAAA;IACxB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,CAAA;IAClB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAA;IACjB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAA;IACrB,2EAA2E;IAC3E,gBAAgB,EAAE,MAAM,CAAA;IACxB,gFAAgF;IAChF,YAAY,EAAE,MAAM,CAAA;CACrB;AAED,yEAAyE;AACzE,MAAM,MAAM,cAAc,GAAG,YAAY,CAAA;AAEzC;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,GAAG,CAAA;IACZ,UAAU,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,OAAO,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,6FAA6F;IAC7F,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAA;IACjB,wEAAwE;IACxE,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAA;IACpB,qDAAqD;IACrD,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,0FAA0F;IAC1F,cAAc,EAAE,QAAQ,GAAG,IAAI,CAAA;IAC/B,oHAAoH;IACpH,cAAc,EAAE,MAAM,CAAA;IACtB,yHAAyH;IACzH,uBAAuB,EAAE,MAAM,CAAA;CAChC;AAED,yCAAyC;AACzC,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,cAAc,CAAA;AAE7D,UAAU,YAAY;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,uFAAuF;IACvF,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,kGAAkG;IAClG,eAAe,EAAE,MAAM,EAAE,CAAA;CAC1B;AAED,6EAA6E;AAC7E,MAAM,WAAW,UAAW,SAAQ,cAAc,EAAE,YAAY;IAC9D,OAAO,EAAE,GAAG,CAAA;CACb;AAED,6EAA6E;AAC7E,MAAM,WAAW,UAAW,SAAQ,cAAc,EAAE,YAAY;CAAG;AAEnE,mEAAmE;AACnE,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAA;AAE9C,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,SAAS,CAAA;AAE9C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,KAAK,CAAA;IACT,kBAAkB,EAAE,OAAO,CAAA;IAC3B,oBAAoB,EAAE,OAAO,GAAG,IAAI,CAAA;IACpC,YAAY,EAAE,OAAO,CAAA;IACrB;;;;;;OAMG;IACH,iBAAiB,EAAE,OAAO,GAAG,IAAI,CAAA;IACjC,GAAG,EAAE,SAAS,GAAG,QAAQ,CAAA;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAA;IACd;;;;;;;;OAQG;IACH,GAAG,EAAE,SAAS,CAAA;IACd,MAAM,EAAE,UAAU,EAAE,CAAA;IACpB,yEAAyE;IACzE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/verifyChain.d.ts

@@ -0,0 +1,152 @@
+import { Beef, PublicKey, Transaction, type ChainTracker } from '@bsv/sdk';
+import { type PublisherPolicy } from './publisherPolicy.js';
+import type { DppVersion } from './constants.js';
+import type { ChainVerifyResult, DppState, StateCheck } from './types.js';
+export interface VerifyChainOptions {
+    /**
+     * Tracker for SPV (`spec/record-model.md` §8 check 3). Omit or pass 'scripts only' to skip root
+     * checks - every state then reports SPV 'pending'. The demo app always
+     * passes a real tracker; 'scripts only' exists for offline use and tests.
+     */
+    chainTracker?: ChainTracker | 'scripts only';
+    /**
+     * When set, server_signature is verified against this service identity key
+     * (admission policy, §8). Token validity itself never depends on it; the
+     * overlay's topic manager passes its configured key, viewers may omit it.
+     */
+    serverIdentityKey?: string;
+    /**
+     * The optional owner-signed transfer (`spec/custody.md` §4), selected by a
+     * profile for version 1 states. `true` runs the predicate on every version 1
+     * TRANSFER; an object also names the transfer authorities, identity keys
+     * whose TRANSFER passes without it (recovery). A malformed authority throws
+     * before any state is read: a misconfigured authority must be loud, never
+     * silently unmatched. Version 2 states prove control on every UPDATE,
+     * TRANSFER and RETIRE regardless (`spec/record-model-v2.md` §6); the same
+     * authorities serve them unless `controlAuthorities` names others.
+     */
+    ownerConsent?: boolean | {
+        authorities: string[];
+    };
+    /**
+     * Identity keys the profile names as authorities for version 2 states: an
+     * UPDATE, TRANSFER or RETIRE by one of them passes without a control proof
+     * (recovery, or a scoped authority the profile defines). Defaults to the
+     * `ownerConsent` authorities. Malformed keys throw at construction.
+     */
+    controlAuthorities?: string[];
+    /**
+     * The managed-custody profile (`spec/managed-custody.md`): when true, every
+     * version 2 TRANSFER must carry an `authorisation_commitment`, the
+     * commitment to the acceptance record the custodian retains. Off, the
+     * record model alone is checked and the commitment is read but not required.
+     */
+    managedAcceptance?: boolean;
+}
+export interface DppOutputRef {
+    state: DppState;
+    outputIndex: number;
+    lockingPublicKey: PublicKey;
+}
+/** What a reader reports when the managed-custody profile is selected and a version 2 TRANSFER carries no commitment. */
+export declare const ACCEPTANCE_COMMITMENT_REFUSAL = "TRANSFER carries no authorisation_commitment under managed-custody@1";
+/**
+ * Locate THE DPP output of a transaction (§6 invariant 1: exactly one).
+ * Returns all matches; callers enforce the invariant.
+ */
+export declare function findDppOutputs(tx: Transaction): DppOutputRef[];
+/** The options `inspectChain` takes beyond `verifyChain`'s: several publisher keys, any of which may have countersigned. */
+export interface InspectChainOptions extends VerifyChainOptions {
+    /**
+     * Publisher identity keys, any one of which satisfies the server-signature
+     * check (`spec/verification.md` §4, `publisherSignatures`). `serverIdentityKey`
+     * is the one-key spelling of the same option; both may be given.
+     */
+    publisherKeys?: string[];
+    /**
+     * A publisher key policy chain (`spec/services.md` §1), already verified by
+     * the caller with `verifyPolicyChain`. A state is then checked against the
+     * state-publisher keys active at its own timestamp, so a retired key still
+     * authenticates what it signed while active and a new key authenticates
+     * nothing timestamped before its activation. Combined with `publisherKeys`
+     * when both are given.
+     */
+    publisherPolicy?: PublisherPolicy[];
+}
+/** Why one state stopped the inspection, in the vocabulary the report uses. */
+export type ChainFailureKind = 'encoding' | 'userSignature' | 'serverSignature' | 'linkage' | 'consent' | 'inclusion';
+/** One inspected state: the verifier's findings plus what a report needs to name it. */
+export interface StateInspection extends StateCheck {
+    index: number;
+    outputIndex: number;
+    state: DppState;
+    /** The record version the state carries. */
+    version: DppVersion;
+    linkError: string | null;
+    consentError: string | null;
+    /**
+     * The version 2 control proof (`spec/record-model-v2.md` §6): true when
+     * the actor proved control of the predecessor, false when it did not, null
+     * on a genesis and on every version 1 state, where the rule does not run.
+     */
+    controlValid: boolean | null;
+    /** True when the countersignature verifies under a key the policy names, but one not active at this state's timestamp. */
+    publisherOutsideWindow?: boolean;
+    /** Why `spv` is 'pending' or 'failed'; absent when 'verified'. */
+    spvReason?: 'no-proof' | 'header-check-disabled' | 'header-source-unavailable' | 'proof-does-not-contain-txid' | 'proof-refuted';
+}
+/**
+ * Every finding the token rail's verifier makes, state by state, stopping after
+ * the first state that fails (§8's rule: a chain fails as a whole at the first
+ * failing state, with the reason identified). `verifyChain` reduces this to
+ * the `ChainVerifyResult` it has always returned; `verifyPassportEvidence`
+ * reports it check by check instead of collapsing it to one Boolean.
+ */
+export interface ChainInspection {
+    states: StateInspection[];
+    /**
+     * The first failure, when there was one. An `encoding` failure names a
+     * transaction that yielded no state, so `states` carries nothing for it.
+     */
+    failure?: {
+        index: number;
+        txid: string;
+        kind: ChainFailureKind;
+        message: string;
+    };
+    /** True when the inspection reached the last supplied transaction without a failure. */
+    complete: boolean;
+    anyPending: boolean;
+    spvUnavailable?: string;
+}
+export declare function inspectChain(txs: Transaction[], options?: InspectChainOptions): Promise<ChainInspection>;
+/**
+ * Verify a full passport chain, ordered genesis → tip (§6 + §8).
+ *
+ * What "Authentic ✓" means (§8): (1) the genesis maker signature is valid;
+ * (2) every link satisfies invariants 1–5, checked here both structurally
+ * (the next state spends the previous DPP output) and on the readable field
+ * (previous_txid equality); (3) SPV - each mined transaction's merkle path
+ * validates against block headers via the chain tracker. An unmined state
+ * passes with SPV 'pending'. Any failure ⇒ valid: false ("Could not verify").
+ *
+ * Script execution of spends is enforced by the network and is not
+ * re-evaluated here; the in-app checks are exactly the three above.
+ *
+ * This is supplied-history verification and nothing more: it says whether the
+ * states handed to it form a valid chain, not that the last one is the current
+ * tip, that its genesis was authorised, or that the attestation rail was
+ * checked. `verifyPassportEvidence` (evidence.ts) is the report that keeps
+ * those findings apart; this function keeps its one Boolean for the callers
+ * that mean exactly what it says.
+ */
+export declare function verifyChain(txs: Transaction[], options?: VerifyChainOptions): Promise<ChainVerifyResult>;
+/**
+ * Reconstruct the ordered passport chain (genesis → tip) from a BEEF, e.g.
+ * as returned by the ls_dpp lookup. Transactions come out hydrated: merkle
+ * paths attached, input source transactions linked - ready for verifyChain.
+ * States of either version link by `previousTxid`; a version 2 state also
+ * carries the predecessor's output index, which the verifier checks.
+ */
+export declare function chainFromBeef(beef: Beef, passportId?: string): Transaction[];
+//# sourceMappingURL=verifyChain.d.ts.map

package/dist/verifyChain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verifyChain.d.ts","sourceRoot":"","sources":["../src/verifyChain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAA;AAI1E,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAG5E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAY,UAAU,EAAE,MAAM,YAAY,CAAA;AAEnF,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,GAAG,cAAc,CAAA;IAC5C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,OAAO,GAAG;QAAE,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;IAClD;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,QAAQ,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,SAAS,CAAA;CAC5B;AAED,yHAAyH;AACzH,eAAO,MAAM,6BAA6B,yEAAkF,CAAA;AAE5H;;;GAGG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,WAAW,GAAG,YAAY,EAAE,CAS9D;AAED,4HAA4H;AAC5H,MAAM,WAAW,mBAAoB,SAAQ,kBAAkB;IAC7D;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,EAAE,CAAA;CACpC;AAED,+EAA+E;AAC/E,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,eAAe,GAAG,iBAAiB,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAA;AAErH,wFAAwF;AACxF,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,QAAQ,CAAA;IACf,4CAA4C;IAC5C,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B;;;;OAIG;IACH,YAAY,EAAE,OAAO,GAAG,IAAI,CAAA;IAC5B,0HAA0H;IAC1H,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC,kEAAkE;IAClE,SAAS,CAAC,EAAE,UAAU,GAAG,uBAAuB,GAAG,2BAA2B,GAAG,6BAA6B,GAAG,eAAe,CAAA;CACjI;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,EAAE,CAAA;IACzB;;;OAGG;IACH,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IAClF,wFAAwF;IACxF,QAAQ,EAAE,OAAO,CAAA;IACjB,UAAU,EAAE,OAAO,CAAA;IACnB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,eAAe,CAAC,CAsMlH;AAeD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,WAAW,EAAE,EAClB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAwB5B;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE,CAqC5E"}