@cardanowall/poe-standard 0.0.0 → 0.2.0

package/dist/error-codes.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/error-codes.ts"],"names":[],"mappings":";;;AAgBO,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,gBAAA;AAAA;AAAA,EAEA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EAEA,6BAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EAEA,+BAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,kCAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,iBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,8BAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,+BAAA;AAAA,EACA,8BAAA;AAAA,EACA,sCAAA;AAAA,EACA,qCAAA;AAAA;AAAA,EAEA,0BAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,iCAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,gCAAA;AAAA,EACA;AACF;AAOO,IAAM,oBAAA,GAAuB;AAAA,EAClC,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,gCAAA;AAAA,EACA,8BAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,mCAAA;AAAA,EACA,yCAAA;AAAA,EACA,gCAAA;AAAA,EACA,sBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF;AAEO,IAAM,WAAA,GAAc,CAAC,GAAG,sBAAA,EAAwB,GAAG,oBAAoB;AAqBvE,IAAM,QAAA,GAAkD,OAAO,MAAA,CAAO;AAAA;AAAA,EAE3E,cAAA,EAAgB,OAAA;AAAA,EAChB,oBAAA,EAAsB,OAAA;AAAA,EACtB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,oBAAA,EAAsB,OAAA;AAAA,EACtB,6BAAA,EAA+B,OAAA;AAAA,EAC/B,WAAA,EAAa,OAAA;AAAA,EACb,eAAA,EAAiB,OAAA;AAAA,EACjB,gCAAA,EAAkC,OAAA;AAAA,EAClC,oBAAA,EAAsB,OAAA;AAAA,EACtB,qBAAA,EAAuB,OAAA;AAAA,EACvB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,eAAA,EAAiB,OAAA;AAAA,EACjB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,gBAAA,EAAkB,OAAA;AAAA,EAClB,uBAAA,EAAyB,OAAA;AAAA,EACzB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,sBAAA,EAAwB,OAAA;AAAA,EACxB,kBAAA,EAAoB,OAAA;AAAA,EACpB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,eAAA,EAAiB,OAAA;AAAA,EACjB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,8BAAA,EAAgC,OAAA;AAAA,EAChC,6BAAA,EAA+B,OAAA;AAAA,EAC/B,4BAAA,EAA8B,OAAA;AAAA,EAC9B,oCAAA,EAAsC,OAAA;AAAA,EACtC,mCAAA,EAAqC,OAAA;AAAA,EACrC,wBAAA,EAA0B,OAAA;AAAA,EAC1B,qBAAA,EAAuB,MAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,+BAAA,EAAiC,OAAA;AAAA,EACjC,sBAAA,EAAwB,OAAA;AAAA,EACxB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,8BAAA,EAAgC,OAAA;AAAA,EAChC,kBAAA,EAAoB,OAAA;AAAA;AAAA,EAEpB,kBAAA,EAAoB,OAAA;AAAA,EACpB,0BAAA,EAA4B,MAAA;AAAA,EAC5B,iBAAA,EAAmB,OAAA;AAAA,EACnB,qBAAA,EAAuB,OAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gBAAA,EAAkB,SAAA;AAAA,EAClB,mBAAA,EAAqB,OAAA;AAAA,EACrB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,8BAAA,EAAgC,OAAA;AAAA,EAChC,4BAAA,EAA8B,OAAA;AAAA,EAC9B,mBAAA,EAAqB,OAAA;AAAA,EACrB,eAAA,EAAiB,OAAA;AAAA,EACjB,mBAAA,EAAqB,OAAA;AAAA,EACrB,qBAAA,EAAuB,OAAA;AAAA,EACvB,iCAAA,EAAmC,OAAA;AAAA,EACnC,uCAAA,EAAyC,OAAA;AAAA,EACzC,8BAAA,EAAgC,OAAA;AAAA,EAChC,oBAAA,EAAsB,OAAA;AAAA,EACtB,yBAAA,EAA2B,SAAA;AAAA,EAC3B,8BAAA,EAAgC,MAAA;AAAA;AAAA;AAAA;AAAA,EAIhC,kBAAA,EAAoB,MAAA;AAAA;AAAA;AAAA,EAGpB,sBAAA,EAAwB;AAC1B,CAAC;AAEM,SAAS,WAAW,IAAA,EAA2B;AACpD,EAAA,OAAO,SAAS,IAAI,CAAA;AACtB","file":"error-codes.cjs","sourcesContent":["// CIP-309 v1 error-code catalogue — single source of truth for the\n// structural-validator codes (Part A) and the verifier-layer codes (Part B)\n// that downstream verifiers re-export from this package.\n//\n// The structural validator emits ONLY Part A codes. Part B codes are\n// re-exported so consumers can `import { ErrorCode } from '@cardanowall/poe-standard'`\n// and dispatch on a single union type without round-tripping through the\n// verifier package.\n//\n// Codes are SCREAMING_SNAKE_CASE and MUST match the canonical taxonomy\n// byte-exact across the TS/PY/RS implementations — no lowercase synonyms,\n// no `schema_*`-prefixed parser-internal codes.\n\n// =============================================================================\n// Part A — structural validator codes\n// =============================================================================\nexport const STRUCTURAL_ERROR_CODES = [\n  // CBOR decode layer. A single code covers every canonical-decode failure —\n  // malformed/truncated bytes, indefinite-length encodings, non-canonical\n  // (unsorted) map-key ordering, duplicate map keys, non-minimal integers, and\n  // invalid UTF-8 — by design (no separate duplicate-key code).\n  'MALFORMED_CBOR',\n  // Generic schema-layer\n  'SCHEMA_TYPE_MISMATCH',\n  'SCHEMA_MISSING_REQUIRED',\n  'SCHEMA_UNKNOWN_FIELD',\n  'SCHEMA_INVALID_LITERAL',\n  'SCHEMA_EMPTY_RECORD',\n  // Hash-map\n  'HASH_DIGEST_LENGTH_MISMATCH',\n  'UNSUPPORTED_HASH_ALG',\n  // Top-level `merkle[]`\n  'UNSUPPORTED_MERKLE_COMMIT_ALG',\n  // URI / chunking. A chunk whose bytes do not reconstruct to valid UTF-8\n  // surfaces as MALFORMED_CBOR at decode (cbor2 rejects invalid-UTF-8 tstr)\n  // or, in the residual reconstruct guard, as INVALID_URI — there is no\n  // separate codepoint-split code.\n  'INVALID_URI',\n  'CHUNK_TOO_LARGE',\n  // Encryption envelope\n  'UNAUTHENTICATED_CIPHER_FORBIDDEN',\n  'UNSUPPORTED_AEAD_ALG',\n  'NONCE_LENGTH_MISMATCH',\n  'UNSUPPORTED_ENVELOPE_SCHEME',\n  'ENC_SLOTS_EMPTY',\n  'ENC_SLOT_INVALID_SHAPE',\n  'UNSUPPORTED_KEM_ALG',\n  'ENC_KEM_REQUIRED',\n  'KEM_EPK_LENGTH_MISMATCH',\n  'KEM_CT_LENGTH_MISMATCH',\n  'WRAP_LENGTH_MISMATCH',\n  'ENC_SLOTS_MAC_INVALID_LENGTH',\n  'ENC_SLOTS_MAC_REQUIRED',\n  'ENC_SLOTS_REQUIRED',\n  'ENC_EXCLUSIVITY_VIOLATION',\n  'ENC_NO_KEY_PATH',\n  'ENC_REQUIRES_CONTENT_HASH',\n  'ENC_PASSPHRASE_ALG_UNSUPPORTED',\n  'ENC_PASSPHRASE_SALT_TOO_SHORT',\n  'ENC_PASSPHRASE_SALT_TOO_LONG',\n  'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW',\n  'ENC_PASSPHRASE_PARAMS_EXCEED_POLICY',\n  // Signatures\n  'MALFORMED_SIG_COSE_SIGN1',\n  'SIGNATURE_UNSUPPORTED',\n  'SIG_ENTRY_INVALID_SHAPE',\n  'SIG_ENTRY_KID_COSE_KEY_CONFLICT',\n  'SIG_PRIVATE_KEY_LEAKED',\n  // Supersedence\n  'SUPERSEDES_TX_INVALID_LENGTH',\n  // Forward-compat critical extensions\n  'EXTENSION_UNSUPPORTED_CRITICAL',\n  'CRIT_SHAPE_INVALID',\n] as const;\n\n// =============================================================================\n// Part B — verifier-layer codes\n// Re-exported so downstream verifiers can dispatch on a single union.\n// The structural validator NEVER emits these.\n// =============================================================================\nexport const VERIFIER_ERROR_CODES = [\n  'METADATA_NOT_FOUND',\n  'INSUFFICIENT_CONFIRMATIONS',\n  'SIGNATURE_INVALID',\n  'SIGNER_KEY_UNRESOLVED',\n  'WALLET_ADDRESS_MISMATCH',\n  'URI_TARGET_FORBIDDEN',\n  'URI_INTEGRITY_MISMATCH',\n  'URI_FETCH_FAILED',\n  'CONTENT_UNAVAILABLE',\n  'CIPHERTEXT_UNAVAILABLE',\n  'PROVIDER_UNAVAILABLE',\n  'SERVICE_INDEPENDENCE_VIOLATION',\n  'WRONG_DECRYPTION_INPUT_SHAPE',\n  'WRONG_RECIPIENT_KEY',\n  'TAMPERED_HEADER',\n  'TAMPERED_CIPHERTEXT',\n  'KDF_DERIVATION_FAILED',\n  'SCHEMA_MERKLE_LEAF_COUNT_MISMATCH',\n  'SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED',\n  'SCHEMA_MERKLE_LEAVES_MALFORMED',\n  'MERKLE_ROOT_MISMATCH',\n  'MERKLE_LEAVES_UNAVAILABLE',\n  'MERKLE_LEAVES_INFORMATIVE_FORM',\n  'MERKLE_UNSUPPORTED',\n  'OUT_OF_PROFILE_SKIPPED',\n] as const;\n\nexport const ERROR_CODES = [...STRUCTURAL_ERROR_CODES, ...VERIFIER_ERROR_CODES] as const;\n\nexport type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];\nexport type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];\nexport type ErrorCode = (typeof ERROR_CODES)[number];\n\n// Severity classification. Codes not listed are `error` by default.\n//\n// `info` — a deliberate non-check (algorithm out of profile, unrecognised\n// signature algorithm at the opt-in informational tier).\n//\n// `warning` — a non-fatal anomaly that occurred at runtime but did not\n// invalidate the record (e.g. a transient gateway failure, partial leaves\n// availability).\n//\n// `MERKLE_UNSUPPORTED` / `OUT_OF_PROFILE_SKIPPED` carry dual severity\n// (`info` when another commitment was validated; `error` for the\n// merkle-only / strict-mode case). The verifier emits the resolved severity\n// per-issue; this map records the default `info` reading.\nexport type Severity = 'error' | 'warning' | 'info';\n\nexport const SEVERITY: Readonly<Record<ErrorCode, Severity>> = Object.freeze({\n  // --- Part A ---\n  MALFORMED_CBOR: 'error',\n  SCHEMA_TYPE_MISMATCH: 'error',\n  SCHEMA_MISSING_REQUIRED: 'error',\n  SCHEMA_UNKNOWN_FIELD: 'error',\n  SCHEMA_INVALID_LITERAL: 'error',\n  SCHEMA_EMPTY_RECORD: 'error',\n  HASH_DIGEST_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_HASH_ALG: 'error',\n  UNSUPPORTED_MERKLE_COMMIT_ALG: 'error',\n  INVALID_URI: 'error',\n  CHUNK_TOO_LARGE: 'error',\n  UNAUTHENTICATED_CIPHER_FORBIDDEN: 'error',\n  UNSUPPORTED_AEAD_ALG: 'error',\n  NONCE_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_ENVELOPE_SCHEME: 'error',\n  ENC_SLOTS_EMPTY: 'error',\n  ENC_SLOT_INVALID_SHAPE: 'error',\n  UNSUPPORTED_KEM_ALG: 'error',\n  ENC_KEM_REQUIRED: 'error',\n  KEM_EPK_LENGTH_MISMATCH: 'error',\n  KEM_CT_LENGTH_MISMATCH: 'error',\n  WRAP_LENGTH_MISMATCH: 'error',\n  ENC_SLOTS_MAC_INVALID_LENGTH: 'error',\n  ENC_SLOTS_MAC_REQUIRED: 'error',\n  ENC_SLOTS_REQUIRED: 'error',\n  ENC_EXCLUSIVITY_VIOLATION: 'error',\n  ENC_NO_KEY_PATH: 'error',\n  ENC_REQUIRES_CONTENT_HASH: 'error',\n  ENC_PASSPHRASE_ALG_UNSUPPORTED: 'error',\n  ENC_PASSPHRASE_SALT_TOO_SHORT: 'error',\n  ENC_PASSPHRASE_SALT_TOO_LONG: 'error',\n  ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW: 'error',\n  ENC_PASSPHRASE_PARAMS_EXCEED_POLICY: 'error',\n  MALFORMED_SIG_COSE_SIGN1: 'error',\n  SIGNATURE_UNSUPPORTED: 'info',\n  SIG_ENTRY_INVALID_SHAPE: 'error',\n  SIG_ENTRY_KID_COSE_KEY_CONFLICT: 'error',\n  SIG_PRIVATE_KEY_LEAKED: 'error',\n  SUPERSEDES_TX_INVALID_LENGTH: 'error',\n  EXTENSION_UNSUPPORTED_CRITICAL: 'error',\n  CRIT_SHAPE_INVALID: 'error',\n  // --- Part B ---\n  METADATA_NOT_FOUND: 'error',\n  INSUFFICIENT_CONFIRMATIONS: 'info',\n  SIGNATURE_INVALID: 'error',\n  SIGNER_KEY_UNRESOLVED: 'error',\n  WALLET_ADDRESS_MISMATCH: 'error',\n  URI_TARGET_FORBIDDEN: 'error',\n  URI_INTEGRITY_MISMATCH: 'error',\n  URI_FETCH_FAILED: 'warning',\n  CONTENT_UNAVAILABLE: 'error',\n  CIPHERTEXT_UNAVAILABLE: 'error',\n  PROVIDER_UNAVAILABLE: 'error',\n  SERVICE_INDEPENDENCE_VIOLATION: 'error',\n  WRONG_DECRYPTION_INPUT_SHAPE: 'error',\n  WRONG_RECIPIENT_KEY: 'error',\n  TAMPERED_HEADER: 'error',\n  TAMPERED_CIPHERTEXT: 'error',\n  KDF_DERIVATION_FAILED: 'error',\n  SCHEMA_MERKLE_LEAF_COUNT_MISMATCH: 'error',\n  SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED: 'error',\n  SCHEMA_MERKLE_LEAVES_MALFORMED: 'error',\n  MERKLE_ROOT_MISMATCH: 'error',\n  MERKLE_LEAVES_UNAVAILABLE: 'warning',\n  MERKLE_LEAVES_INFORMATIVE_FORM: 'info',\n  // Dual-severity — default reading is `info`; the verifier promotes to\n  // `error` for merkle-only records (no `items[]` content claim was\n  // validated in the same record).\n  MERKLE_UNSUPPORTED: 'info',\n  // Dual-severity — default reading is `info` (render mode); strict\n  // end-to-end verifiers promote to `error`.\n  OUT_OF_PROFILE_SKIPPED: 'info',\n});\n\nexport function severityOf(code: ErrorCode): Severity {\n  return SEVERITY[code];\n}\n"]}
+{"version":3,"sources":["../src/error-codes.ts"],"names":[],"mappings":";;;AAgBO,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,gBAAA;AAAA;AAAA,EAEA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EAEA,6BAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EAEA,+BAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,kCAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,iBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,8BAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,+BAAA;AAAA,EACA,8BAAA;AAAA,EACA,sCAAA;AAAA,EACA,qCAAA;AAAA;AAAA,EAEA,0BAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,iCAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,gCAAA;AAAA,EACA;AACF;AAOO,IAAM,oBAAA,GAAuB;AAAA,EAClC,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,gCAAA;AAAA,EACA,8BAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,mCAAA;AAAA,EACA,yCAAA;AAAA,EACA,gCAAA;AAAA,EACA,sBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF;AAEO,IAAM,WAAA,GAAc,CAAC,GAAG,sBAAA,EAAwB,GAAG,oBAAoB;AAqBvE,IAAM,QAAA,GAAkD,OAAO,MAAA,CAAO;AAAA;AAAA,EAE3E,cAAA,EAAgB,OAAA;AAAA,EAChB,oBAAA,EAAsB,OAAA;AAAA,EACtB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,oBAAA,EAAsB,OAAA;AAAA,EACtB,6BAAA,EAA+B,OAAA;AAAA,EAC/B,WAAA,EAAa,OAAA;AAAA,EACb,eAAA,EAAiB,OAAA;AAAA,EACjB,gCAAA,EAAkC,OAAA;AAAA,EAClC,oBAAA,EAAsB,OAAA;AAAA,EACtB,qBAAA,EAAuB,OAAA;AAAA,EACvB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,eAAA,EAAiB,OAAA;AAAA,EACjB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,gBAAA,EAAkB,OAAA;AAAA,EAClB,uBAAA,EAAyB,OAAA;AAAA,EACzB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,sBAAA,EAAwB,OAAA;AAAA,EACxB,kBAAA,EAAoB,OAAA;AAAA,EACpB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,eAAA,EAAiB,OAAA;AAAA,EACjB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,8BAAA,EAAgC,OAAA;AAAA,EAChC,6BAAA,EAA+B,OAAA;AAAA,EAC/B,4BAAA,EAA8B,OAAA;AAAA,EAC9B,oCAAA,EAAsC,OAAA;AAAA,EACtC,mCAAA,EAAqC,OAAA;AAAA,EACrC,wBAAA,EAA0B,OAAA;AAAA,EAC1B,qBAAA,EAAuB,MAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,+BAAA,EAAiC,OAAA;AAAA,EACjC,sBAAA,EAAwB,OAAA;AAAA,EACxB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,8BAAA,EAAgC,OAAA;AAAA,EAChC,kBAAA,EAAoB,OAAA;AAAA;AAAA,EAEpB,kBAAA,EAAoB,OAAA;AAAA,EACpB,0BAAA,EAA4B,MAAA;AAAA,EAC5B,iBAAA,EAAmB,OAAA;AAAA,EACnB,qBAAA,EAAuB,OAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gBAAA,EAAkB,SAAA;AAAA,EAClB,mBAAA,EAAqB,OAAA;AAAA,EACrB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,8BAAA,EAAgC,OAAA;AAAA,EAChC,4BAAA,EAA8B,OAAA;AAAA,EAC9B,mBAAA,EAAqB,OAAA;AAAA,EACrB,eAAA,EAAiB,OAAA;AAAA,EACjB,mBAAA,EAAqB,OAAA;AAAA,EACrB,qBAAA,EAAuB,OAAA;AAAA,EACvB,iCAAA,EAAmC,OAAA;AAAA,EACnC,uCAAA,EAAyC,OAAA;AAAA,EACzC,8BAAA,EAAgC,OAAA;AAAA,EAChC,oBAAA,EAAsB,OAAA;AAAA,EACtB,yBAAA,EAA2B,SAAA;AAAA,EAC3B,8BAAA,EAAgC,MAAA;AAAA;AAAA;AAAA;AAAA,EAIhC,kBAAA,EAAoB,MAAA;AAAA;AAAA;AAAA,EAGpB,sBAAA,EAAwB;AAC1B,CAAC;AAEM,SAAS,WAAW,IAAA,EAA2B;AACpD,EAAA,OAAO,SAAS,IAAI,CAAA;AACtB","file":"error-codes.cjs","sourcesContent":["// Label 309 v1 error-code catalogue — single source of truth for the\n// structural-validator codes (Part A) and the verifier-layer codes (Part B)\n// that downstream verifiers re-export from this package.\n//\n// The structural validator emits ONLY Part A codes. Part B codes are\n// re-exported so consumers can `import { ErrorCode } from '@cardanowall/poe-standard'`\n// and dispatch on a single union type without round-tripping through the\n// verifier package.\n//\n// Codes are SCREAMING_SNAKE_CASE and MUST match the canonical taxonomy\n// byte-exact across the TS/PY/RS implementations — no lowercase synonyms,\n// no `schema_*`-prefixed parser-internal codes.\n\n// =============================================================================\n// Part A — structural validator codes\n// =============================================================================\nexport const STRUCTURAL_ERROR_CODES = [\n  // CBOR decode layer. A single code covers every canonical-decode failure —\n  // malformed/truncated bytes, indefinite-length encodings, non-canonical\n  // (unsorted) map-key ordering, duplicate map keys, non-minimal integers, and\n  // invalid UTF-8 — by design (no separate duplicate-key code).\n  'MALFORMED_CBOR',\n  // Generic schema-layer\n  'SCHEMA_TYPE_MISMATCH',\n  'SCHEMA_MISSING_REQUIRED',\n  'SCHEMA_UNKNOWN_FIELD',\n  'SCHEMA_INVALID_LITERAL',\n  'SCHEMA_EMPTY_RECORD',\n  // Hash-map\n  'HASH_DIGEST_LENGTH_MISMATCH',\n  'UNSUPPORTED_HASH_ALG',\n  // Top-level `merkle[]`\n  'UNSUPPORTED_MERKLE_COMMIT_ALG',\n  // URI / chunking. A chunk whose bytes do not reconstruct to valid UTF-8\n  // surfaces as MALFORMED_CBOR at decode (cbor2 rejects invalid-UTF-8 tstr)\n  // or, in the residual reconstruct guard, as INVALID_URI — there is no\n  // separate codepoint-split code.\n  'INVALID_URI',\n  'CHUNK_TOO_LARGE',\n  // Encryption envelope\n  'UNAUTHENTICATED_CIPHER_FORBIDDEN',\n  'UNSUPPORTED_AEAD_ALG',\n  'NONCE_LENGTH_MISMATCH',\n  'UNSUPPORTED_ENVELOPE_SCHEME',\n  'ENC_SLOTS_EMPTY',\n  'ENC_SLOT_INVALID_SHAPE',\n  'UNSUPPORTED_KEM_ALG',\n  'ENC_KEM_REQUIRED',\n  'KEM_EPK_LENGTH_MISMATCH',\n  'KEM_CT_LENGTH_MISMATCH',\n  'WRAP_LENGTH_MISMATCH',\n  'ENC_SLOTS_MAC_INVALID_LENGTH',\n  'ENC_SLOTS_MAC_REQUIRED',\n  'ENC_SLOTS_REQUIRED',\n  'ENC_EXCLUSIVITY_VIOLATION',\n  'ENC_NO_KEY_PATH',\n  'ENC_REQUIRES_CONTENT_HASH',\n  'ENC_PASSPHRASE_ALG_UNSUPPORTED',\n  'ENC_PASSPHRASE_SALT_TOO_SHORT',\n  'ENC_PASSPHRASE_SALT_TOO_LONG',\n  'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW',\n  'ENC_PASSPHRASE_PARAMS_EXCEED_POLICY',\n  // Signatures\n  'MALFORMED_SIG_COSE_SIGN1',\n  'SIGNATURE_UNSUPPORTED',\n  'SIG_ENTRY_INVALID_SHAPE',\n  'SIG_ENTRY_KID_COSE_KEY_CONFLICT',\n  'SIG_PRIVATE_KEY_LEAKED',\n  // Supersedence\n  'SUPERSEDES_TX_INVALID_LENGTH',\n  // Forward-compat critical extensions\n  'EXTENSION_UNSUPPORTED_CRITICAL',\n  'CRIT_SHAPE_INVALID',\n] as const;\n\n// =============================================================================\n// Part B — verifier-layer codes\n// Re-exported so downstream verifiers can dispatch on a single union.\n// The structural validator NEVER emits these.\n// =============================================================================\nexport const VERIFIER_ERROR_CODES = [\n  'METADATA_NOT_FOUND',\n  'INSUFFICIENT_CONFIRMATIONS',\n  'SIGNATURE_INVALID',\n  'SIGNER_KEY_UNRESOLVED',\n  'WALLET_ADDRESS_MISMATCH',\n  'URI_TARGET_FORBIDDEN',\n  'URI_INTEGRITY_MISMATCH',\n  'URI_FETCH_FAILED',\n  'CONTENT_UNAVAILABLE',\n  'CIPHERTEXT_UNAVAILABLE',\n  'PROVIDER_UNAVAILABLE',\n  'SERVICE_INDEPENDENCE_VIOLATION',\n  'WRONG_DECRYPTION_INPUT_SHAPE',\n  'WRONG_RECIPIENT_KEY',\n  'TAMPERED_HEADER',\n  'TAMPERED_CIPHERTEXT',\n  'KDF_DERIVATION_FAILED',\n  'SCHEMA_MERKLE_LEAF_COUNT_MISMATCH',\n  'SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED',\n  'SCHEMA_MERKLE_LEAVES_MALFORMED',\n  'MERKLE_ROOT_MISMATCH',\n  'MERKLE_LEAVES_UNAVAILABLE',\n  'MERKLE_LEAVES_INFORMATIVE_FORM',\n  'MERKLE_UNSUPPORTED',\n  'OUT_OF_PROFILE_SKIPPED',\n] as const;\n\nexport const ERROR_CODES = [...STRUCTURAL_ERROR_CODES, ...VERIFIER_ERROR_CODES] as const;\n\nexport type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];\nexport type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];\nexport type ErrorCode = (typeof ERROR_CODES)[number];\n\n// Severity classification. Codes not listed are `error` by default.\n//\n// `info` — a deliberate non-check (algorithm out of profile, unrecognised\n// signature algorithm at the opt-in informational tier).\n//\n// `warning` — a non-fatal anomaly that occurred at runtime but did not\n// invalidate the record (e.g. a transient gateway failure, partial leaves\n// availability).\n//\n// `MERKLE_UNSUPPORTED` / `OUT_OF_PROFILE_SKIPPED` carry dual severity\n// (`info` when another commitment was validated; `error` for the\n// merkle-only / strict-mode case). The verifier emits the resolved severity\n// per-issue; this map records the default `info` reading.\nexport type Severity = 'error' | 'warning' | 'info';\n\nexport const SEVERITY: Readonly<Record<ErrorCode, Severity>> = Object.freeze({\n  // --- Part A ---\n  MALFORMED_CBOR: 'error',\n  SCHEMA_TYPE_MISMATCH: 'error',\n  SCHEMA_MISSING_REQUIRED: 'error',\n  SCHEMA_UNKNOWN_FIELD: 'error',\n  SCHEMA_INVALID_LITERAL: 'error',\n  SCHEMA_EMPTY_RECORD: 'error',\n  HASH_DIGEST_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_HASH_ALG: 'error',\n  UNSUPPORTED_MERKLE_COMMIT_ALG: 'error',\n  INVALID_URI: 'error',\n  CHUNK_TOO_LARGE: 'error',\n  UNAUTHENTICATED_CIPHER_FORBIDDEN: 'error',\n  UNSUPPORTED_AEAD_ALG: 'error',\n  NONCE_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_ENVELOPE_SCHEME: 'error',\n  ENC_SLOTS_EMPTY: 'error',\n  ENC_SLOT_INVALID_SHAPE: 'error',\n  UNSUPPORTED_KEM_ALG: 'error',\n  ENC_KEM_REQUIRED: 'error',\n  KEM_EPK_LENGTH_MISMATCH: 'error',\n  KEM_CT_LENGTH_MISMATCH: 'error',\n  WRAP_LENGTH_MISMATCH: 'error',\n  ENC_SLOTS_MAC_INVALID_LENGTH: 'error',\n  ENC_SLOTS_MAC_REQUIRED: 'error',\n  ENC_SLOTS_REQUIRED: 'error',\n  ENC_EXCLUSIVITY_VIOLATION: 'error',\n  ENC_NO_KEY_PATH: 'error',\n  ENC_REQUIRES_CONTENT_HASH: 'error',\n  ENC_PASSPHRASE_ALG_UNSUPPORTED: 'error',\n  ENC_PASSPHRASE_SALT_TOO_SHORT: 'error',\n  ENC_PASSPHRASE_SALT_TOO_LONG: 'error',\n  ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW: 'error',\n  ENC_PASSPHRASE_PARAMS_EXCEED_POLICY: 'error',\n  MALFORMED_SIG_COSE_SIGN1: 'error',\n  SIGNATURE_UNSUPPORTED: 'info',\n  SIG_ENTRY_INVALID_SHAPE: 'error',\n  SIG_ENTRY_KID_COSE_KEY_CONFLICT: 'error',\n  SIG_PRIVATE_KEY_LEAKED: 'error',\n  SUPERSEDES_TX_INVALID_LENGTH: 'error',\n  EXTENSION_UNSUPPORTED_CRITICAL: 'error',\n  CRIT_SHAPE_INVALID: 'error',\n  // --- Part B ---\n  METADATA_NOT_FOUND: 'error',\n  INSUFFICIENT_CONFIRMATIONS: 'info',\n  SIGNATURE_INVALID: 'error',\n  SIGNER_KEY_UNRESOLVED: 'error',\n  WALLET_ADDRESS_MISMATCH: 'error',\n  URI_TARGET_FORBIDDEN: 'error',\n  URI_INTEGRITY_MISMATCH: 'error',\n  URI_FETCH_FAILED: 'warning',\n  CONTENT_UNAVAILABLE: 'error',\n  CIPHERTEXT_UNAVAILABLE: 'error',\n  PROVIDER_UNAVAILABLE: 'error',\n  SERVICE_INDEPENDENCE_VIOLATION: 'error',\n  WRONG_DECRYPTION_INPUT_SHAPE: 'error',\n  WRONG_RECIPIENT_KEY: 'error',\n  TAMPERED_HEADER: 'error',\n  TAMPERED_CIPHERTEXT: 'error',\n  KDF_DERIVATION_FAILED: 'error',\n  SCHEMA_MERKLE_LEAF_COUNT_MISMATCH: 'error',\n  SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED: 'error',\n  SCHEMA_MERKLE_LEAVES_MALFORMED: 'error',\n  MERKLE_ROOT_MISMATCH: 'error',\n  MERKLE_LEAVES_UNAVAILABLE: 'warning',\n  MERKLE_LEAVES_INFORMATIVE_FORM: 'info',\n  // Dual-severity — default reading is `info`; the verifier promotes to\n  // `error` for merkle-only records (no `items[]` content claim was\n  // validated in the same record).\n  MERKLE_UNSUPPORTED: 'info',\n  // Dual-severity — default reading is `info` (render mode); strict\n  // end-to-end verifiers promote to `error`.\n  OUT_OF_PROFILE_SKIPPED: 'info',\n});\n\nexport function severityOf(code: ErrorCode): Severity {\n  return SEVERITY[code];\n}\n"]}

package/dist/error-codes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/error-codes.ts"],"names":[],"mappings":";AAgBO,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,gBAAA;AAAA;AAAA,EAEA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EAEA,6BAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EAEA,+BAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,kCAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,iBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,8BAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,+BAAA;AAAA,EACA,8BAAA;AAAA,EACA,sCAAA;AAAA,EACA,qCAAA;AAAA;AAAA,EAEA,0BAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,iCAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,gCAAA;AAAA,EACA;AACF;AAOO,IAAM,oBAAA,GAAuB;AAAA,EAClC,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,gCAAA;AAAA,EACA,8BAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,mCAAA;AAAA,EACA,yCAAA;AAAA,EACA,gCAAA;AAAA,EACA,sBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF;AAEO,IAAM,WAAA,GAAc,CAAC,GAAG,sBAAA,EAAwB,GAAG,oBAAoB;AAqBvE,IAAM,QAAA,GAAkD,OAAO,MAAA,CAAO;AAAA;AAAA,EAE3E,cAAA,EAAgB,OAAA;AAAA,EAChB,oBAAA,EAAsB,OAAA;AAAA,EACtB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,oBAAA,EAAsB,OAAA;AAAA,EACtB,6BAAA,EAA+B,OAAA;AAAA,EAC/B,WAAA,EAAa,OAAA;AAAA,EACb,eAAA,EAAiB,OAAA;AAAA,EACjB,gCAAA,EAAkC,OAAA;AAAA,EAClC,oBAAA,EAAsB,OAAA;AAAA,EACtB,qBAAA,EAAuB,OAAA;AAAA,EACvB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,eAAA,EAAiB,OAAA;AAAA,EACjB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,gBAAA,EAAkB,OAAA;AAAA,EAClB,uBAAA,EAAyB,OAAA;AAAA,EACzB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,sBAAA,EAAwB,OAAA;AAAA,EACxB,kBAAA,EAAoB,OAAA;AAAA,EACpB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,eAAA,EAAiB,OAAA;AAAA,EACjB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,8BAAA,EAAgC,OAAA;AAAA,EAChC,6BAAA,EAA+B,OAAA;AAAA,EAC/B,4BAAA,EAA8B,OAAA;AAAA,EAC9B,oCAAA,EAAsC,OAAA;AAAA,EACtC,mCAAA,EAAqC,OAAA;AAAA,EACrC,wBAAA,EAA0B,OAAA;AAAA,EAC1B,qBAAA,EAAuB,MAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,+BAAA,EAAiC,OAAA;AAAA,EACjC,sBAAA,EAAwB,OAAA;AAAA,EACxB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,8BAAA,EAAgC,OAAA;AAAA,EAChC,kBAAA,EAAoB,OAAA;AAAA;AAAA,EAEpB,kBAAA,EAAoB,OAAA;AAAA,EACpB,0BAAA,EAA4B,MAAA;AAAA,EAC5B,iBAAA,EAAmB,OAAA;AAAA,EACnB,qBAAA,EAAuB,OAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gBAAA,EAAkB,SAAA;AAAA,EAClB,mBAAA,EAAqB,OAAA;AAAA,EACrB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,8BAAA,EAAgC,OAAA;AAAA,EAChC,4BAAA,EAA8B,OAAA;AAAA,EAC9B,mBAAA,EAAqB,OAAA;AAAA,EACrB,eAAA,EAAiB,OAAA;AAAA,EACjB,mBAAA,EAAqB,OAAA;AAAA,EACrB,qBAAA,EAAuB,OAAA;AAAA,EACvB,iCAAA,EAAmC,OAAA;AAAA,EACnC,uCAAA,EAAyC,OAAA;AAAA,EACzC,8BAAA,EAAgC,OAAA;AAAA,EAChC,oBAAA,EAAsB,OAAA;AAAA,EACtB,yBAAA,EAA2B,SAAA;AAAA,EAC3B,8BAAA,EAAgC,MAAA;AAAA;AAAA;AAAA;AAAA,EAIhC,kBAAA,EAAoB,MAAA;AAAA;AAAA;AAAA,EAGpB,sBAAA,EAAwB;AAC1B,CAAC;AAEM,SAAS,WAAW,IAAA,EAA2B;AACpD,EAAA,OAAO,SAAS,IAAI,CAAA;AACtB","file":"error-codes.js","sourcesContent":["// CIP-309 v1 error-code catalogue — single source of truth for the\n// structural-validator codes (Part A) and the verifier-layer codes (Part B)\n// that downstream verifiers re-export from this package.\n//\n// The structural validator emits ONLY Part A codes. Part B codes are\n// re-exported so consumers can `import { ErrorCode } from '@cardanowall/poe-standard'`\n// and dispatch on a single union type without round-tripping through the\n// verifier package.\n//\n// Codes are SCREAMING_SNAKE_CASE and MUST match the canonical taxonomy\n// byte-exact across the TS/PY/RS implementations — no lowercase synonyms,\n// no `schema_*`-prefixed parser-internal codes.\n\n// =============================================================================\n// Part A — structural validator codes\n// =============================================================================\nexport const STRUCTURAL_ERROR_CODES = [\n  // CBOR decode layer. A single code covers every canonical-decode failure —\n  // malformed/truncated bytes, indefinite-length encodings, non-canonical\n  // (unsorted) map-key ordering, duplicate map keys, non-minimal integers, and\n  // invalid UTF-8 — by design (no separate duplicate-key code).\n  'MALFORMED_CBOR',\n  // Generic schema-layer\n  'SCHEMA_TYPE_MISMATCH',\n  'SCHEMA_MISSING_REQUIRED',\n  'SCHEMA_UNKNOWN_FIELD',\n  'SCHEMA_INVALID_LITERAL',\n  'SCHEMA_EMPTY_RECORD',\n  // Hash-map\n  'HASH_DIGEST_LENGTH_MISMATCH',\n  'UNSUPPORTED_HASH_ALG',\n  // Top-level `merkle[]`\n  'UNSUPPORTED_MERKLE_COMMIT_ALG',\n  // URI / chunking. A chunk whose bytes do not reconstruct to valid UTF-8\n  // surfaces as MALFORMED_CBOR at decode (cbor2 rejects invalid-UTF-8 tstr)\n  // or, in the residual reconstruct guard, as INVALID_URI — there is no\n  // separate codepoint-split code.\n  'INVALID_URI',\n  'CHUNK_TOO_LARGE',\n  // Encryption envelope\n  'UNAUTHENTICATED_CIPHER_FORBIDDEN',\n  'UNSUPPORTED_AEAD_ALG',\n  'NONCE_LENGTH_MISMATCH',\n  'UNSUPPORTED_ENVELOPE_SCHEME',\n  'ENC_SLOTS_EMPTY',\n  'ENC_SLOT_INVALID_SHAPE',\n  'UNSUPPORTED_KEM_ALG',\n  'ENC_KEM_REQUIRED',\n  'KEM_EPK_LENGTH_MISMATCH',\n  'KEM_CT_LENGTH_MISMATCH',\n  'WRAP_LENGTH_MISMATCH',\n  'ENC_SLOTS_MAC_INVALID_LENGTH',\n  'ENC_SLOTS_MAC_REQUIRED',\n  'ENC_SLOTS_REQUIRED',\n  'ENC_EXCLUSIVITY_VIOLATION',\n  'ENC_NO_KEY_PATH',\n  'ENC_REQUIRES_CONTENT_HASH',\n  'ENC_PASSPHRASE_ALG_UNSUPPORTED',\n  'ENC_PASSPHRASE_SALT_TOO_SHORT',\n  'ENC_PASSPHRASE_SALT_TOO_LONG',\n  'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW',\n  'ENC_PASSPHRASE_PARAMS_EXCEED_POLICY',\n  // Signatures\n  'MALFORMED_SIG_COSE_SIGN1',\n  'SIGNATURE_UNSUPPORTED',\n  'SIG_ENTRY_INVALID_SHAPE',\n  'SIG_ENTRY_KID_COSE_KEY_CONFLICT',\n  'SIG_PRIVATE_KEY_LEAKED',\n  // Supersedence\n  'SUPERSEDES_TX_INVALID_LENGTH',\n  // Forward-compat critical extensions\n  'EXTENSION_UNSUPPORTED_CRITICAL',\n  'CRIT_SHAPE_INVALID',\n] as const;\n\n// =============================================================================\n// Part B — verifier-layer codes\n// Re-exported so downstream verifiers can dispatch on a single union.\n// The structural validator NEVER emits these.\n// =============================================================================\nexport const VERIFIER_ERROR_CODES = [\n  'METADATA_NOT_FOUND',\n  'INSUFFICIENT_CONFIRMATIONS',\n  'SIGNATURE_INVALID',\n  'SIGNER_KEY_UNRESOLVED',\n  'WALLET_ADDRESS_MISMATCH',\n  'URI_TARGET_FORBIDDEN',\n  'URI_INTEGRITY_MISMATCH',\n  'URI_FETCH_FAILED',\n  'CONTENT_UNAVAILABLE',\n  'CIPHERTEXT_UNAVAILABLE',\n  'PROVIDER_UNAVAILABLE',\n  'SERVICE_INDEPENDENCE_VIOLATION',\n  'WRONG_DECRYPTION_INPUT_SHAPE',\n  'WRONG_RECIPIENT_KEY',\n  'TAMPERED_HEADER',\n  'TAMPERED_CIPHERTEXT',\n  'KDF_DERIVATION_FAILED',\n  'SCHEMA_MERKLE_LEAF_COUNT_MISMATCH',\n  'SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED',\n  'SCHEMA_MERKLE_LEAVES_MALFORMED',\n  'MERKLE_ROOT_MISMATCH',\n  'MERKLE_LEAVES_UNAVAILABLE',\n  'MERKLE_LEAVES_INFORMATIVE_FORM',\n  'MERKLE_UNSUPPORTED',\n  'OUT_OF_PROFILE_SKIPPED',\n] as const;\n\nexport const ERROR_CODES = [...STRUCTURAL_ERROR_CODES, ...VERIFIER_ERROR_CODES] as const;\n\nexport type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];\nexport type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];\nexport type ErrorCode = (typeof ERROR_CODES)[number];\n\n// Severity classification. Codes not listed are `error` by default.\n//\n// `info` — a deliberate non-check (algorithm out of profile, unrecognised\n// signature algorithm at the opt-in informational tier).\n//\n// `warning` — a non-fatal anomaly that occurred at runtime but did not\n// invalidate the record (e.g. a transient gateway failure, partial leaves\n// availability).\n//\n// `MERKLE_UNSUPPORTED` / `OUT_OF_PROFILE_SKIPPED` carry dual severity\n// (`info` when another commitment was validated; `error` for the\n// merkle-only / strict-mode case). The verifier emits the resolved severity\n// per-issue; this map records the default `info` reading.\nexport type Severity = 'error' | 'warning' | 'info';\n\nexport const SEVERITY: Readonly<Record<ErrorCode, Severity>> = Object.freeze({\n  // --- Part A ---\n  MALFORMED_CBOR: 'error',\n  SCHEMA_TYPE_MISMATCH: 'error',\n  SCHEMA_MISSING_REQUIRED: 'error',\n  SCHEMA_UNKNOWN_FIELD: 'error',\n  SCHEMA_INVALID_LITERAL: 'error',\n  SCHEMA_EMPTY_RECORD: 'error',\n  HASH_DIGEST_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_HASH_ALG: 'error',\n  UNSUPPORTED_MERKLE_COMMIT_ALG: 'error',\n  INVALID_URI: 'error',\n  CHUNK_TOO_LARGE: 'error',\n  UNAUTHENTICATED_CIPHER_FORBIDDEN: 'error',\n  UNSUPPORTED_AEAD_ALG: 'error',\n  NONCE_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_ENVELOPE_SCHEME: 'error',\n  ENC_SLOTS_EMPTY: 'error',\n  ENC_SLOT_INVALID_SHAPE: 'error',\n  UNSUPPORTED_KEM_ALG: 'error',\n  ENC_KEM_REQUIRED: 'error',\n  KEM_EPK_LENGTH_MISMATCH: 'error',\n  KEM_CT_LENGTH_MISMATCH: 'error',\n  WRAP_LENGTH_MISMATCH: 'error',\n  ENC_SLOTS_MAC_INVALID_LENGTH: 'error',\n  ENC_SLOTS_MAC_REQUIRED: 'error',\n  ENC_SLOTS_REQUIRED: 'error',\n  ENC_EXCLUSIVITY_VIOLATION: 'error',\n  ENC_NO_KEY_PATH: 'error',\n  ENC_REQUIRES_CONTENT_HASH: 'error',\n  ENC_PASSPHRASE_ALG_UNSUPPORTED: 'error',\n  ENC_PASSPHRASE_SALT_TOO_SHORT: 'error',\n  ENC_PASSPHRASE_SALT_TOO_LONG: 'error',\n  ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW: 'error',\n  ENC_PASSPHRASE_PARAMS_EXCEED_POLICY: 'error',\n  MALFORMED_SIG_COSE_SIGN1: 'error',\n  SIGNATURE_UNSUPPORTED: 'info',\n  SIG_ENTRY_INVALID_SHAPE: 'error',\n  SIG_ENTRY_KID_COSE_KEY_CONFLICT: 'error',\n  SIG_PRIVATE_KEY_LEAKED: 'error',\n  SUPERSEDES_TX_INVALID_LENGTH: 'error',\n  EXTENSION_UNSUPPORTED_CRITICAL: 'error',\n  CRIT_SHAPE_INVALID: 'error',\n  // --- Part B ---\n  METADATA_NOT_FOUND: 'error',\n  INSUFFICIENT_CONFIRMATIONS: 'info',\n  SIGNATURE_INVALID: 'error',\n  SIGNER_KEY_UNRESOLVED: 'error',\n  WALLET_ADDRESS_MISMATCH: 'error',\n  URI_TARGET_FORBIDDEN: 'error',\n  URI_INTEGRITY_MISMATCH: 'error',\n  URI_FETCH_FAILED: 'warning',\n  CONTENT_UNAVAILABLE: 'error',\n  CIPHERTEXT_UNAVAILABLE: 'error',\n  PROVIDER_UNAVAILABLE: 'error',\n  SERVICE_INDEPENDENCE_VIOLATION: 'error',\n  WRONG_DECRYPTION_INPUT_SHAPE: 'error',\n  WRONG_RECIPIENT_KEY: 'error',\n  TAMPERED_HEADER: 'error',\n  TAMPERED_CIPHERTEXT: 'error',\n  KDF_DERIVATION_FAILED: 'error',\n  SCHEMA_MERKLE_LEAF_COUNT_MISMATCH: 'error',\n  SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED: 'error',\n  SCHEMA_MERKLE_LEAVES_MALFORMED: 'error',\n  MERKLE_ROOT_MISMATCH: 'error',\n  MERKLE_LEAVES_UNAVAILABLE: 'warning',\n  MERKLE_LEAVES_INFORMATIVE_FORM: 'info',\n  // Dual-severity — default reading is `info`; the verifier promotes to\n  // `error` for merkle-only records (no `items[]` content claim was\n  // validated in the same record).\n  MERKLE_UNSUPPORTED: 'info',\n  // Dual-severity — default reading is `info` (render mode); strict\n  // end-to-end verifiers promote to `error`.\n  OUT_OF_PROFILE_SKIPPED: 'info',\n});\n\nexport function severityOf(code: ErrorCode): Severity {\n  return SEVERITY[code];\n}\n"]}
+{"version":3,"sources":["../src/error-codes.ts"],"names":[],"mappings":";AAgBO,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,gBAAA;AAAA;AAAA,EAEA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EAEA,6BAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EAEA,+BAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,kCAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,iBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,8BAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,+BAAA;AAAA,EACA,8BAAA;AAAA,EACA,sCAAA;AAAA,EACA,qCAAA;AAAA;AAAA,EAEA,0BAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,iCAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,gCAAA;AAAA,EACA;AACF;AAOO,IAAM,oBAAA,GAAuB;AAAA,EAClC,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,gCAAA;AAAA,EACA,8BAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,mCAAA;AAAA,EACA,yCAAA;AAAA,EACA,gCAAA;AAAA,EACA,sBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF;AAEO,IAAM,WAAA,GAAc,CAAC,GAAG,sBAAA,EAAwB,GAAG,oBAAoB;AAqBvE,IAAM,QAAA,GAAkD,OAAO,MAAA,CAAO;AAAA;AAAA,EAE3E,cAAA,EAAgB,OAAA;AAAA,EAChB,oBAAA,EAAsB,OAAA;AAAA,EACtB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,oBAAA,EAAsB,OAAA;AAAA,EACtB,6BAAA,EAA+B,OAAA;AAAA,EAC/B,WAAA,EAAa,OAAA;AAAA,EACb,eAAA,EAAiB,OAAA;AAAA,EACjB,gCAAA,EAAkC,OAAA;AAAA,EAClC,oBAAA,EAAsB,OAAA;AAAA,EACtB,qBAAA,EAAuB,OAAA;AAAA,EACvB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,eAAA,EAAiB,OAAA;AAAA,EACjB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,gBAAA,EAAkB,OAAA;AAAA,EAClB,uBAAA,EAAyB,OAAA;AAAA,EACzB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,sBAAA,EAAwB,OAAA;AAAA,EACxB,kBAAA,EAAoB,OAAA;AAAA,EACpB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,eAAA,EAAiB,OAAA;AAAA,EACjB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,8BAAA,EAAgC,OAAA;AAAA,EAChC,6BAAA,EAA+B,OAAA;AAAA,EAC/B,4BAAA,EAA8B,OAAA;AAAA,EAC9B,oCAAA,EAAsC,OAAA;AAAA,EACtC,mCAAA,EAAqC,OAAA;AAAA,EACrC,wBAAA,EAA0B,OAAA;AAAA,EAC1B,qBAAA,EAAuB,MAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,+BAAA,EAAiC,OAAA;AAAA,EACjC,sBAAA,EAAwB,OAAA;AAAA,EACxB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,8BAAA,EAAgC,OAAA;AAAA,EAChC,kBAAA,EAAoB,OAAA;AAAA;AAAA,EAEpB,kBAAA,EAAoB,OAAA;AAAA,EACpB,0BAAA,EAA4B,MAAA;AAAA,EAC5B,iBAAA,EAAmB,OAAA;AAAA,EACnB,qBAAA,EAAuB,OAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gBAAA,EAAkB,SAAA;AAAA,EAClB,mBAAA,EAAqB,OAAA;AAAA,EACrB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,8BAAA,EAAgC,OAAA;AAAA,EAChC,4BAAA,EAA8B,OAAA;AAAA,EAC9B,mBAAA,EAAqB,OAAA;AAAA,EACrB,eAAA,EAAiB,OAAA;AAAA,EACjB,mBAAA,EAAqB,OAAA;AAAA,EACrB,qBAAA,EAAuB,OAAA;AAAA,EACvB,iCAAA,EAAmC,OAAA;AAAA,EACnC,uCAAA,EAAyC,OAAA;AAAA,EACzC,8BAAA,EAAgC,OAAA;AAAA,EAChC,oBAAA,EAAsB,OAAA;AAAA,EACtB,yBAAA,EAA2B,SAAA;AAAA,EAC3B,8BAAA,EAAgC,MAAA;AAAA;AAAA;AAAA;AAAA,EAIhC,kBAAA,EAAoB,MAAA;AAAA;AAAA;AAAA,EAGpB,sBAAA,EAAwB;AAC1B,CAAC;AAEM,SAAS,WAAW,IAAA,EAA2B;AACpD,EAAA,OAAO,SAAS,IAAI,CAAA;AACtB","file":"error-codes.js","sourcesContent":["// Label 309 v1 error-code catalogue — single source of truth for the\n// structural-validator codes (Part A) and the verifier-layer codes (Part B)\n// that downstream verifiers re-export from this package.\n//\n// The structural validator emits ONLY Part A codes. Part B codes are\n// re-exported so consumers can `import { ErrorCode } from '@cardanowall/poe-standard'`\n// and dispatch on a single union type without round-tripping through the\n// verifier package.\n//\n// Codes are SCREAMING_SNAKE_CASE and MUST match the canonical taxonomy\n// byte-exact across the TS/PY/RS implementations — no lowercase synonyms,\n// no `schema_*`-prefixed parser-internal codes.\n\n// =============================================================================\n// Part A — structural validator codes\n// =============================================================================\nexport const STRUCTURAL_ERROR_CODES = [\n  // CBOR decode layer. A single code covers every canonical-decode failure —\n  // malformed/truncated bytes, indefinite-length encodings, non-canonical\n  // (unsorted) map-key ordering, duplicate map keys, non-minimal integers, and\n  // invalid UTF-8 — by design (no separate duplicate-key code).\n  'MALFORMED_CBOR',\n  // Generic schema-layer\n  'SCHEMA_TYPE_MISMATCH',\n  'SCHEMA_MISSING_REQUIRED',\n  'SCHEMA_UNKNOWN_FIELD',\n  'SCHEMA_INVALID_LITERAL',\n  'SCHEMA_EMPTY_RECORD',\n  // Hash-map\n  'HASH_DIGEST_LENGTH_MISMATCH',\n  'UNSUPPORTED_HASH_ALG',\n  // Top-level `merkle[]`\n  'UNSUPPORTED_MERKLE_COMMIT_ALG',\n  // URI / chunking. A chunk whose bytes do not reconstruct to valid UTF-8\n  // surfaces as MALFORMED_CBOR at decode (cbor2 rejects invalid-UTF-8 tstr)\n  // or, in the residual reconstruct guard, as INVALID_URI — there is no\n  // separate codepoint-split code.\n  'INVALID_URI',\n  'CHUNK_TOO_LARGE',\n  // Encryption envelope\n  'UNAUTHENTICATED_CIPHER_FORBIDDEN',\n  'UNSUPPORTED_AEAD_ALG',\n  'NONCE_LENGTH_MISMATCH',\n  'UNSUPPORTED_ENVELOPE_SCHEME',\n  'ENC_SLOTS_EMPTY',\n  'ENC_SLOT_INVALID_SHAPE',\n  'UNSUPPORTED_KEM_ALG',\n  'ENC_KEM_REQUIRED',\n  'KEM_EPK_LENGTH_MISMATCH',\n  'KEM_CT_LENGTH_MISMATCH',\n  'WRAP_LENGTH_MISMATCH',\n  'ENC_SLOTS_MAC_INVALID_LENGTH',\n  'ENC_SLOTS_MAC_REQUIRED',\n  'ENC_SLOTS_REQUIRED',\n  'ENC_EXCLUSIVITY_VIOLATION',\n  'ENC_NO_KEY_PATH',\n  'ENC_REQUIRES_CONTENT_HASH',\n  'ENC_PASSPHRASE_ALG_UNSUPPORTED',\n  'ENC_PASSPHRASE_SALT_TOO_SHORT',\n  'ENC_PASSPHRASE_SALT_TOO_LONG',\n  'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW',\n  'ENC_PASSPHRASE_PARAMS_EXCEED_POLICY',\n  // Signatures\n  'MALFORMED_SIG_COSE_SIGN1',\n  'SIGNATURE_UNSUPPORTED',\n  'SIG_ENTRY_INVALID_SHAPE',\n  'SIG_ENTRY_KID_COSE_KEY_CONFLICT',\n  'SIG_PRIVATE_KEY_LEAKED',\n  // Supersedence\n  'SUPERSEDES_TX_INVALID_LENGTH',\n  // Forward-compat critical extensions\n  'EXTENSION_UNSUPPORTED_CRITICAL',\n  'CRIT_SHAPE_INVALID',\n] as const;\n\n// =============================================================================\n// Part B — verifier-layer codes\n// Re-exported so downstream verifiers can dispatch on a single union.\n// The structural validator NEVER emits these.\n// =============================================================================\nexport const VERIFIER_ERROR_CODES = [\n  'METADATA_NOT_FOUND',\n  'INSUFFICIENT_CONFIRMATIONS',\n  'SIGNATURE_INVALID',\n  'SIGNER_KEY_UNRESOLVED',\n  'WALLET_ADDRESS_MISMATCH',\n  'URI_TARGET_FORBIDDEN',\n  'URI_INTEGRITY_MISMATCH',\n  'URI_FETCH_FAILED',\n  'CONTENT_UNAVAILABLE',\n  'CIPHERTEXT_UNAVAILABLE',\n  'PROVIDER_UNAVAILABLE',\n  'SERVICE_INDEPENDENCE_VIOLATION',\n  'WRONG_DECRYPTION_INPUT_SHAPE',\n  'WRONG_RECIPIENT_KEY',\n  'TAMPERED_HEADER',\n  'TAMPERED_CIPHERTEXT',\n  'KDF_DERIVATION_FAILED',\n  'SCHEMA_MERKLE_LEAF_COUNT_MISMATCH',\n  'SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED',\n  'SCHEMA_MERKLE_LEAVES_MALFORMED',\n  'MERKLE_ROOT_MISMATCH',\n  'MERKLE_LEAVES_UNAVAILABLE',\n  'MERKLE_LEAVES_INFORMATIVE_FORM',\n  'MERKLE_UNSUPPORTED',\n  'OUT_OF_PROFILE_SKIPPED',\n] as const;\n\nexport const ERROR_CODES = [...STRUCTURAL_ERROR_CODES, ...VERIFIER_ERROR_CODES] as const;\n\nexport type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];\nexport type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];\nexport type ErrorCode = (typeof ERROR_CODES)[number];\n\n// Severity classification. Codes not listed are `error` by default.\n//\n// `info` — a deliberate non-check (algorithm out of profile, unrecognised\n// signature algorithm at the opt-in informational tier).\n//\n// `warning` — a non-fatal anomaly that occurred at runtime but did not\n// invalidate the record (e.g. a transient gateway failure, partial leaves\n// availability).\n//\n// `MERKLE_UNSUPPORTED` / `OUT_OF_PROFILE_SKIPPED` carry dual severity\n// (`info` when another commitment was validated; `error` for the\n// merkle-only / strict-mode case). The verifier emits the resolved severity\n// per-issue; this map records the default `info` reading.\nexport type Severity = 'error' | 'warning' | 'info';\n\nexport const SEVERITY: Readonly<Record<ErrorCode, Severity>> = Object.freeze({\n  // --- Part A ---\n  MALFORMED_CBOR: 'error',\n  SCHEMA_TYPE_MISMATCH: 'error',\n  SCHEMA_MISSING_REQUIRED: 'error',\n  SCHEMA_UNKNOWN_FIELD: 'error',\n  SCHEMA_INVALID_LITERAL: 'error',\n  SCHEMA_EMPTY_RECORD: 'error',\n  HASH_DIGEST_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_HASH_ALG: 'error',\n  UNSUPPORTED_MERKLE_COMMIT_ALG: 'error',\n  INVALID_URI: 'error',\n  CHUNK_TOO_LARGE: 'error',\n  UNAUTHENTICATED_CIPHER_FORBIDDEN: 'error',\n  UNSUPPORTED_AEAD_ALG: 'error',\n  NONCE_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_ENVELOPE_SCHEME: 'error',\n  ENC_SLOTS_EMPTY: 'error',\n  ENC_SLOT_INVALID_SHAPE: 'error',\n  UNSUPPORTED_KEM_ALG: 'error',\n  ENC_KEM_REQUIRED: 'error',\n  KEM_EPK_LENGTH_MISMATCH: 'error',\n  KEM_CT_LENGTH_MISMATCH: 'error',\n  WRAP_LENGTH_MISMATCH: 'error',\n  ENC_SLOTS_MAC_INVALID_LENGTH: 'error',\n  ENC_SLOTS_MAC_REQUIRED: 'error',\n  ENC_SLOTS_REQUIRED: 'error',\n  ENC_EXCLUSIVITY_VIOLATION: 'error',\n  ENC_NO_KEY_PATH: 'error',\n  ENC_REQUIRES_CONTENT_HASH: 'error',\n  ENC_PASSPHRASE_ALG_UNSUPPORTED: 'error',\n  ENC_PASSPHRASE_SALT_TOO_SHORT: 'error',\n  ENC_PASSPHRASE_SALT_TOO_LONG: 'error',\n  ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW: 'error',\n  ENC_PASSPHRASE_PARAMS_EXCEED_POLICY: 'error',\n  MALFORMED_SIG_COSE_SIGN1: 'error',\n  SIGNATURE_UNSUPPORTED: 'info',\n  SIG_ENTRY_INVALID_SHAPE: 'error',\n  SIG_ENTRY_KID_COSE_KEY_CONFLICT: 'error',\n  SIG_PRIVATE_KEY_LEAKED: 'error',\n  SUPERSEDES_TX_INVALID_LENGTH: 'error',\n  EXTENSION_UNSUPPORTED_CRITICAL: 'error',\n  CRIT_SHAPE_INVALID: 'error',\n  // --- Part B ---\n  METADATA_NOT_FOUND: 'error',\n  INSUFFICIENT_CONFIRMATIONS: 'info',\n  SIGNATURE_INVALID: 'error',\n  SIGNER_KEY_UNRESOLVED: 'error',\n  WALLET_ADDRESS_MISMATCH: 'error',\n  URI_TARGET_FORBIDDEN: 'error',\n  URI_INTEGRITY_MISMATCH: 'error',\n  URI_FETCH_FAILED: 'warning',\n  CONTENT_UNAVAILABLE: 'error',\n  CIPHERTEXT_UNAVAILABLE: 'error',\n  PROVIDER_UNAVAILABLE: 'error',\n  SERVICE_INDEPENDENCE_VIOLATION: 'error',\n  WRONG_DECRYPTION_INPUT_SHAPE: 'error',\n  WRONG_RECIPIENT_KEY: 'error',\n  TAMPERED_HEADER: 'error',\n  TAMPERED_CIPHERTEXT: 'error',\n  KDF_DERIVATION_FAILED: 'error',\n  SCHEMA_MERKLE_LEAF_COUNT_MISMATCH: 'error',\n  SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED: 'error',\n  SCHEMA_MERKLE_LEAVES_MALFORMED: 'error',\n  MERKLE_ROOT_MISMATCH: 'error',\n  MERKLE_LEAVES_UNAVAILABLE: 'warning',\n  MERKLE_LEAVES_INFORMATIVE_FORM: 'info',\n  // Dual-severity — default reading is `info`; the verifier promotes to\n  // `error` for merkle-only records (no `items[]` content claim was\n  // validated in the same record).\n  MERKLE_UNSUPPORTED: 'info',\n  // Dual-severity — default reading is `info` (render mode); strict\n  // end-to-end verifiers promote to `error`.\n  OUT_OF_PROFILE_SKIPPED: 'info',\n});\n\nexport function severityOf(code: ErrorCode): Severity {\n  return SEVERITY[code];\n}\n"]}

package/dist/index.cjs

@@ -1737,7 +1737,7 @@ function decodeCanonicalCbor(bytes) {
       ...r,
       rejectStreaming: true,
       rejectDuplicateKeys: true,
-      // A CIP-309 record carries integers, byte/text strings, arrays, maps and
+      // A Label 309 record carries integers, byte/text strings, arrays, maps and
       // `null` — and nothing else. Without these rejections the major-type-7
       // surface leaks into the decoder: a float16/32/64 that happens to hold an
       // integral value (e.g. 1.0) silently decodes to the integer 1 and passes
@@ -2283,7 +2283,7 @@ function decodeCanonicalCbor2(bytes) {
       ...r,
       rejectStreaming: true,
       rejectDuplicateKeys: true,
-      // A CIP-309 record carries integers, byte/text strings, arrays, maps and
+      // A Label 309 record carries integers, byte/text strings, arrays, maps and
       // `null` — and nothing else. Without these rejections the major-type-7
       // surface leaks into the decoder: a float16/32/64 that happens to hold an
       // integral value (e.g. 1.0) silently decodes to the integer 1 and passes
@@ -2810,11 +2810,7 @@ function validateOneUri(chunks, path, errors) {
   const uri = reconstructed.uri;
   if (uri.includes("#")) {
     errors.push(
-      issue(
-        "INVALID_URI",
-        path,
-        "URI contains a fragment identifier ('#'), which is forbidden"
-      )
+      issue("INVALID_URI", path, "URI contains a fragment identifier ('#'), which is forbidden")
     );
     return;
   }
@@ -2844,21 +2840,13 @@ function validateOneUri(chunks, path, errors) {
     const cid = slashIdx === -1 ? rest : rest.slice(0, slashIdx);
     if (!validateCidProfile(cid)) {
       errors.push(
-        issue(
-          "INVALID_URI",
-          path,
-          "ipfs:// URI is not a valid CID under the CIP-309 profile"
-        )
+        issue("INVALID_URI", path, "ipfs:// URI is not a valid CID under the Label 309 profile")
       );
     }
     return;
   }
   errors.push(
-    issue(
-      "INVALID_URI",
-      path,
-      "unsupported URI scheme; v1 PoE URI set is {ar://, ipfs://}"
-    )
+    issue("INVALID_URI", path, "unsupported URI scheme; v1 PoE URI set is {ar://, ipfs://}")
   );
 }
 function checkItemEnc(item, idx, errors) {
@@ -2900,7 +2888,7 @@ function checkItemEnc(item, idx, errors) {
       issue(
         "UNAUTHENTICATED_CIPHER_FORBIDDEN",
         [...basePath, "aead"],
-        `'${enc.aead}' is an unauthenticated cipher; CIP-309 mandates an authenticated (AEAD) cipher`
+        `'${enc.aead}' is an unauthenticated cipher; Label 309 mandates an authenticated (AEAD) cipher`
       )
     );
     return;