@cardanowall/poe-standard 0.2.0 → 0.3.0

package/dist/error-codes.cjs

@@ -31,6 +31,9 @@ var STRUCTURAL_ERROR_CODES = [
   "UNSUPPORTED_ENVELOPE_SCHEME",
   "ENC_SLOTS_EMPTY",
   "ENC_SLOT_INVALID_SHAPE",
+  "ENC_SLOTS_DUPLICATE_KEM_MATERIAL",
+  "ENC_SLOTS_TOO_MANY",
+  "ENC_ENVELOPE_TOO_LARGE",
   "UNSUPPORTED_KEM_ALG",
   "ENC_KEM_REQUIRED",
   "KEM_EPK_LENGTH_MISMATCH",
@@ -106,6 +109,9 @@ var SEVERITY = Object.freeze({
   UNSUPPORTED_ENVELOPE_SCHEME: "error",
   ENC_SLOTS_EMPTY: "error",
   ENC_SLOT_INVALID_SHAPE: "error",
+  ENC_SLOTS_DUPLICATE_KEM_MATERIAL: "error",
+  ENC_SLOTS_TOO_MANY: "error",
+  ENC_ENVELOPE_TOO_LARGE: "error",
   UNSUPPORTED_KEM_ALG: "error",
   ENC_KEM_REQUIRED: "error",
   KEM_EPK_LENGTH_MISMATCH: "error",

package/dist/error-codes.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/error-codes.ts"],"names":[],"mappings":";;;AAgBO,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,gBAAA;AAAA;AAAA,EAEA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EAEA,6BAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EAEA,+BAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,kCAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,iBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,8BAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,+BAAA;AAAA,EACA,8BAAA;AAAA,EACA,sCAAA;AAAA,EACA,qCAAA;AAAA;AAAA,EAEA,0BAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,iCAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,gCAAA;AAAA,EACA;AACF;AAOO,IAAM,oBAAA,GAAuB;AAAA,EAClC,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,gCAAA;AAAA,EACA,8BAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,mCAAA;AAAA,EACA,yCAAA;AAAA,EACA,gCAAA;AAAA,EACA,sBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF;AAEO,IAAM,WAAA,GAAc,CAAC,GAAG,sBAAA,EAAwB,GAAG,oBAAoB;AAqBvE,IAAM,QAAA,GAAkD,OAAO,MAAA,CAAO;AAAA;AAAA,EAE3E,cAAA,EAAgB,OAAA;AAAA,EAChB,oBAAA,EAAsB,OAAA;AAAA,EACtB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,oBAAA,EAAsB,OAAA;AAAA,EACtB,6BAAA,EAA+B,OAAA;AAAA,EAC/B,WAAA,EAAa,OAAA;AAAA,EACb,eAAA,EAAiB,OAAA;AAAA,EACjB,gCAAA,EAAkC,OAAA;AAAA,EAClC,oBAAA,EAAsB,OAAA;AAAA,EACtB,qBAAA,EAAuB,OAAA;AAAA,EACvB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,eAAA,EAAiB,OAAA;AAAA,EACjB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,gBAAA,EAAkB,OAAA;AAAA,EAClB,uBAAA,EAAyB,OAAA;AAAA,EACzB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,sBAAA,EAAwB,OAAA;AAAA,EACxB,kBAAA,EAAoB,OAAA;AAAA,EACpB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,eAAA,EAAiB,OAAA;AAAA,EACjB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,8BAAA,EAAgC,OAAA;AAAA,EAChC,6BAAA,EAA+B,OAAA;AAAA,EAC/B,4BAAA,EAA8B,OAAA;AAAA,EAC9B,oCAAA,EAAsC,OAAA;AAAA,EACtC,mCAAA,EAAqC,OAAA;AAAA,EACrC,wBAAA,EAA0B,OAAA;AAAA,EAC1B,qBAAA,EAAuB,MAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,+BAAA,EAAiC,OAAA;AAAA,EACjC,sBAAA,EAAwB,OAAA;AAAA,EACxB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,8BAAA,EAAgC,OAAA;AAAA,EAChC,kBAAA,EAAoB,OAAA;AAAA;AAAA,EAEpB,kBAAA,EAAoB,OAAA;AAAA,EACpB,0BAAA,EAA4B,MAAA;AAAA,EAC5B,iBAAA,EAAmB,OAAA;AAAA,EACnB,qBAAA,EAAuB,OAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gBAAA,EAAkB,SAAA;AAAA,EAClB,mBAAA,EAAqB,OAAA;AAAA,EACrB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,8BAAA,EAAgC,OAAA;AAAA,EAChC,4BAAA,EAA8B,OAAA;AAAA,EAC9B,mBAAA,EAAqB,OAAA;AAAA,EACrB,eAAA,EAAiB,OAAA;AAAA,EACjB,mBAAA,EAAqB,OAAA;AAAA,EACrB,qBAAA,EAAuB,OAAA;AAAA,EACvB,iCAAA,EAAmC,OAAA;AAAA,EACnC,uCAAA,EAAyC,OAAA;AAAA,EACzC,8BAAA,EAAgC,OAAA;AAAA,EAChC,oBAAA,EAAsB,OAAA;AAAA,EACtB,yBAAA,EAA2B,SAAA;AAAA,EAC3B,8BAAA,EAAgC,MAAA;AAAA;AAAA;AAAA;AAAA,EAIhC,kBAAA,EAAoB,MAAA;AAAA;AAAA;AAAA,EAGpB,sBAAA,EAAwB;AAC1B,CAAC;AAEM,SAAS,WAAW,IAAA,EAA2B;AACpD,EAAA,OAAO,SAAS,IAAI,CAAA;AACtB","file":"error-codes.cjs","sourcesContent":["// Label 309 v1 error-code catalogue — single source of truth for the\n// structural-validator codes (Part A) and the verifier-layer codes (Part B)\n// that downstream verifiers re-export from this package.\n//\n// The structural validator emits ONLY Part A codes. Part B codes are\n// re-exported so consumers can `import { ErrorCode } from '@cardanowall/poe-standard'`\n// and dispatch on a single union type without round-tripping through the\n// verifier package.\n//\n// Codes are SCREAMING_SNAKE_CASE and MUST match the canonical taxonomy\n// byte-exact across the TS/PY/RS implementations — no lowercase synonyms,\n// no `schema_*`-prefixed parser-internal codes.\n\n// =============================================================================\n// Part A — structural validator codes\n// =============================================================================\nexport const STRUCTURAL_ERROR_CODES = [\n  // CBOR decode layer. A single code covers every canonical-decode failure —\n  // malformed/truncated bytes, indefinite-length encodings, non-canonical\n  // (unsorted) map-key ordering, duplicate map keys, non-minimal integers, and\n  // invalid UTF-8 — by design (no separate duplicate-key code).\n  'MALFORMED_CBOR',\n  // Generic schema-layer\n  'SCHEMA_TYPE_MISMATCH',\n  'SCHEMA_MISSING_REQUIRED',\n  'SCHEMA_UNKNOWN_FIELD',\n  'SCHEMA_INVALID_LITERAL',\n  'SCHEMA_EMPTY_RECORD',\n  // Hash-map\n  'HASH_DIGEST_LENGTH_MISMATCH',\n  'UNSUPPORTED_HASH_ALG',\n  // Top-level `merkle[]`\n  'UNSUPPORTED_MERKLE_COMMIT_ALG',\n  // URI / chunking. A chunk whose bytes do not reconstruct to valid UTF-8\n  // surfaces as MALFORMED_CBOR at decode (cbor2 rejects invalid-UTF-8 tstr)\n  // or, in the residual reconstruct guard, as INVALID_URI — there is no\n  // separate codepoint-split code.\n  'INVALID_URI',\n  'CHUNK_TOO_LARGE',\n  // Encryption envelope\n  'UNAUTHENTICATED_CIPHER_FORBIDDEN',\n  'UNSUPPORTED_AEAD_ALG',\n  'NONCE_LENGTH_MISMATCH',\n  'UNSUPPORTED_ENVELOPE_SCHEME',\n  'ENC_SLOTS_EMPTY',\n  'ENC_SLOT_INVALID_SHAPE',\n  'UNSUPPORTED_KEM_ALG',\n  'ENC_KEM_REQUIRED',\n  'KEM_EPK_LENGTH_MISMATCH',\n  'KEM_CT_LENGTH_MISMATCH',\n  'WRAP_LENGTH_MISMATCH',\n  'ENC_SLOTS_MAC_INVALID_LENGTH',\n  'ENC_SLOTS_MAC_REQUIRED',\n  'ENC_SLOTS_REQUIRED',\n  'ENC_EXCLUSIVITY_VIOLATION',\n  'ENC_NO_KEY_PATH',\n  'ENC_REQUIRES_CONTENT_HASH',\n  'ENC_PASSPHRASE_ALG_UNSUPPORTED',\n  'ENC_PASSPHRASE_SALT_TOO_SHORT',\n  'ENC_PASSPHRASE_SALT_TOO_LONG',\n  'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW',\n  'ENC_PASSPHRASE_PARAMS_EXCEED_POLICY',\n  // Signatures\n  'MALFORMED_SIG_COSE_SIGN1',\n  'SIGNATURE_UNSUPPORTED',\n  'SIG_ENTRY_INVALID_SHAPE',\n  'SIG_ENTRY_KID_COSE_KEY_CONFLICT',\n  'SIG_PRIVATE_KEY_LEAKED',\n  // Supersedence\n  'SUPERSEDES_TX_INVALID_LENGTH',\n  // Forward-compat critical extensions\n  'EXTENSION_UNSUPPORTED_CRITICAL',\n  'CRIT_SHAPE_INVALID',\n] as const;\n\n// =============================================================================\n// Part B — verifier-layer codes\n// Re-exported so downstream verifiers can dispatch on a single union.\n// The structural validator NEVER emits these.\n// =============================================================================\nexport const VERIFIER_ERROR_CODES = [\n  'METADATA_NOT_FOUND',\n  'INSUFFICIENT_CONFIRMATIONS',\n  'SIGNATURE_INVALID',\n  'SIGNER_KEY_UNRESOLVED',\n  'WALLET_ADDRESS_MISMATCH',\n  'URI_TARGET_FORBIDDEN',\n  'URI_INTEGRITY_MISMATCH',\n  'URI_FETCH_FAILED',\n  'CONTENT_UNAVAILABLE',\n  'CIPHERTEXT_UNAVAILABLE',\n  'PROVIDER_UNAVAILABLE',\n  'SERVICE_INDEPENDENCE_VIOLATION',\n  'WRONG_DECRYPTION_INPUT_SHAPE',\n  'WRONG_RECIPIENT_KEY',\n  'TAMPERED_HEADER',\n  'TAMPERED_CIPHERTEXT',\n  'KDF_DERIVATION_FAILED',\n  'SCHEMA_MERKLE_LEAF_COUNT_MISMATCH',\n  'SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED',\n  'SCHEMA_MERKLE_LEAVES_MALFORMED',\n  'MERKLE_ROOT_MISMATCH',\n  'MERKLE_LEAVES_UNAVAILABLE',\n  'MERKLE_LEAVES_INFORMATIVE_FORM',\n  'MERKLE_UNSUPPORTED',\n  'OUT_OF_PROFILE_SKIPPED',\n] as const;\n\nexport const ERROR_CODES = [...STRUCTURAL_ERROR_CODES, ...VERIFIER_ERROR_CODES] as const;\n\nexport type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];\nexport type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];\nexport type ErrorCode = (typeof ERROR_CODES)[number];\n\n// Severity classification. Codes not listed are `error` by default.\n//\n// `info` — a deliberate non-check (algorithm out of profile, unrecognised\n// signature algorithm at the opt-in informational tier).\n//\n// `warning` — a non-fatal anomaly that occurred at runtime but did not\n// invalidate the record (e.g. a transient gateway failure, partial leaves\n// availability).\n//\n// `MERKLE_UNSUPPORTED` / `OUT_OF_PROFILE_SKIPPED` carry dual severity\n// (`info` when another commitment was validated; `error` for the\n// merkle-only / strict-mode case). The verifier emits the resolved severity\n// per-issue; this map records the default `info` reading.\nexport type Severity = 'error' | 'warning' | 'info';\n\nexport const SEVERITY: Readonly<Record<ErrorCode, Severity>> = Object.freeze({\n  // --- Part A ---\n  MALFORMED_CBOR: 'error',\n  SCHEMA_TYPE_MISMATCH: 'error',\n  SCHEMA_MISSING_REQUIRED: 'error',\n  SCHEMA_UNKNOWN_FIELD: 'error',\n  SCHEMA_INVALID_LITERAL: 'error',\n  SCHEMA_EMPTY_RECORD: 'error',\n  HASH_DIGEST_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_HASH_ALG: 'error',\n  UNSUPPORTED_MERKLE_COMMIT_ALG: 'error',\n  INVALID_URI: 'error',\n  CHUNK_TOO_LARGE: 'error',\n  UNAUTHENTICATED_CIPHER_FORBIDDEN: 'error',\n  UNSUPPORTED_AEAD_ALG: 'error',\n  NONCE_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_ENVELOPE_SCHEME: 'error',\n  ENC_SLOTS_EMPTY: 'error',\n  ENC_SLOT_INVALID_SHAPE: 'error',\n  UNSUPPORTED_KEM_ALG: 'error',\n  ENC_KEM_REQUIRED: 'error',\n  KEM_EPK_LENGTH_MISMATCH: 'error',\n  KEM_CT_LENGTH_MISMATCH: 'error',\n  WRAP_LENGTH_MISMATCH: 'error',\n  ENC_SLOTS_MAC_INVALID_LENGTH: 'error',\n  ENC_SLOTS_MAC_REQUIRED: 'error',\n  ENC_SLOTS_REQUIRED: 'error',\n  ENC_EXCLUSIVITY_VIOLATION: 'error',\n  ENC_NO_KEY_PATH: 'error',\n  ENC_REQUIRES_CONTENT_HASH: 'error',\n  ENC_PASSPHRASE_ALG_UNSUPPORTED: 'error',\n  ENC_PASSPHRASE_SALT_TOO_SHORT: 'error',\n  ENC_PASSPHRASE_SALT_TOO_LONG: 'error',\n  ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW: 'error',\n  ENC_PASSPHRASE_PARAMS_EXCEED_POLICY: 'error',\n  MALFORMED_SIG_COSE_SIGN1: 'error',\n  SIGNATURE_UNSUPPORTED: 'info',\n  SIG_ENTRY_INVALID_SHAPE: 'error',\n  SIG_ENTRY_KID_COSE_KEY_CONFLICT: 'error',\n  SIG_PRIVATE_KEY_LEAKED: 'error',\n  SUPERSEDES_TX_INVALID_LENGTH: 'error',\n  EXTENSION_UNSUPPORTED_CRITICAL: 'error',\n  CRIT_SHAPE_INVALID: 'error',\n  // --- Part B ---\n  METADATA_NOT_FOUND: 'error',\n  INSUFFICIENT_CONFIRMATIONS: 'info',\n  SIGNATURE_INVALID: 'error',\n  SIGNER_KEY_UNRESOLVED: 'error',\n  WALLET_ADDRESS_MISMATCH: 'error',\n  URI_TARGET_FORBIDDEN: 'error',\n  URI_INTEGRITY_MISMATCH: 'error',\n  URI_FETCH_FAILED: 'warning',\n  CONTENT_UNAVAILABLE: 'error',\n  CIPHERTEXT_UNAVAILABLE: 'error',\n  PROVIDER_UNAVAILABLE: 'error',\n  SERVICE_INDEPENDENCE_VIOLATION: 'error',\n  WRONG_DECRYPTION_INPUT_SHAPE: 'error',\n  WRONG_RECIPIENT_KEY: 'error',\n  TAMPERED_HEADER: 'error',\n  TAMPERED_CIPHERTEXT: 'error',\n  KDF_DERIVATION_FAILED: 'error',\n  SCHEMA_MERKLE_LEAF_COUNT_MISMATCH: 'error',\n  SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED: 'error',\n  SCHEMA_MERKLE_LEAVES_MALFORMED: 'error',\n  MERKLE_ROOT_MISMATCH: 'error',\n  MERKLE_LEAVES_UNAVAILABLE: 'warning',\n  MERKLE_LEAVES_INFORMATIVE_FORM: 'info',\n  // Dual-severity — default reading is `info`; the verifier promotes to\n  // `error` for merkle-only records (no `items[]` content claim was\n  // validated in the same record).\n  MERKLE_UNSUPPORTED: 'info',\n  // Dual-severity — default reading is `info` (render mode); strict\n  // end-to-end verifiers promote to `error`.\n  OUT_OF_PROFILE_SKIPPED: 'info',\n});\n\nexport function severityOf(code: ErrorCode): Severity {\n  return SEVERITY[code];\n}\n"]}
+{"version":3,"sources":["../src/error-codes.ts"],"names":[],"mappings":";;;AAgBO,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,gBAAA;AAAA;AAAA,EAEA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EAEA,6BAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EAEA,+BAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,kCAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,iBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kCAAA;AAAA,EACA,oBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,8BAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,+BAAA;AAAA,EACA,8BAAA;AAAA,EACA,sCAAA;AAAA,EACA,qCAAA;AAAA;AAAA,EAEA,0BAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,iCAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,gCAAA;AAAA,EACA;AACF;AAOO,IAAM,oBAAA,GAAuB;AAAA,EAClC,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,gCAAA;AAAA,EACA,8BAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,mCAAA;AAAA,EACA,yCAAA;AAAA,EACA,gCAAA;AAAA,EACA,sBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF;AAEO,IAAM,WAAA,GAAc,CAAC,GAAG,sBAAA,EAAwB,GAAG,oBAAoB;AAqBvE,IAAM,QAAA,GAAkD,OAAO,MAAA,CAAO;AAAA;AAAA,EAE3E,cAAA,EAAgB,OAAA;AAAA,EAChB,oBAAA,EAAsB,OAAA;AAAA,EACtB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,oBAAA,EAAsB,OAAA;AAAA,EACtB,6BAAA,EAA+B,OAAA;AAAA,EAC/B,WAAA,EAAa,OAAA;AAAA,EACb,eAAA,EAAiB,OAAA;AAAA,EACjB,gCAAA,EAAkC,OAAA;AAAA,EAClC,oBAAA,EAAsB,OAAA;AAAA,EACtB,qBAAA,EAAuB,OAAA;AAAA,EACvB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,eAAA,EAAiB,OAAA;AAAA,EACjB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gCAAA,EAAkC,OAAA;AAAA,EAClC,kBAAA,EAAoB,OAAA;AAAA,EACpB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,gBAAA,EAAkB,OAAA;AAAA,EAClB,uBAAA,EAAyB,OAAA;AAAA,EACzB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,sBAAA,EAAwB,OAAA;AAAA,EACxB,kBAAA,EAAoB,OAAA;AAAA,EACpB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,eAAA,EAAiB,OAAA;AAAA,EACjB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,8BAAA,EAAgC,OAAA;AAAA,EAChC,6BAAA,EAA+B,OAAA;AAAA,EAC/B,4BAAA,EAA8B,OAAA;AAAA,EAC9B,oCAAA,EAAsC,OAAA;AAAA,EACtC,mCAAA,EAAqC,OAAA;AAAA,EACrC,wBAAA,EAA0B,OAAA;AAAA,EAC1B,qBAAA,EAAuB,MAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,+BAAA,EAAiC,OAAA;AAAA,EACjC,sBAAA,EAAwB,OAAA;AAAA,EACxB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,8BAAA,EAAgC,OAAA;AAAA,EAChC,kBAAA,EAAoB,OAAA;AAAA;AAAA,EAEpB,kBAAA,EAAoB,OAAA;AAAA,EACpB,0BAAA,EAA4B,MAAA;AAAA,EAC5B,iBAAA,EAAmB,OAAA;AAAA,EACnB,qBAAA,EAAuB,OAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gBAAA,EAAkB,SAAA;AAAA,EAClB,mBAAA,EAAqB,OAAA;AAAA,EACrB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,8BAAA,EAAgC,OAAA;AAAA,EAChC,4BAAA,EAA8B,OAAA;AAAA,EAC9B,mBAAA,EAAqB,OAAA;AAAA,EACrB,eAAA,EAAiB,OAAA;AAAA,EACjB,mBAAA,EAAqB,OAAA;AAAA,EACrB,qBAAA,EAAuB,OAAA;AAAA,EACvB,iCAAA,EAAmC,OAAA;AAAA,EACnC,uCAAA,EAAyC,OAAA;AAAA,EACzC,8BAAA,EAAgC,OAAA;AAAA,EAChC,oBAAA,EAAsB,OAAA;AAAA,EACtB,yBAAA,EAA2B,SAAA;AAAA,EAC3B,8BAAA,EAAgC,MAAA;AAAA;AAAA;AAAA;AAAA,EAIhC,kBAAA,EAAoB,MAAA;AAAA;AAAA;AAAA,EAGpB,sBAAA,EAAwB;AAC1B,CAAC;AAEM,SAAS,WAAW,IAAA,EAA2B;AACpD,EAAA,OAAO,SAAS,IAAI,CAAA;AACtB","file":"error-codes.cjs","sourcesContent":["// Label 309 v1 error-code catalogue — single source of truth for the\n// structural-validator codes (Part A) and the verifier-layer codes (Part B)\n// that downstream verifiers re-export from this package.\n//\n// The structural validator emits ONLY Part A codes. Part B codes are\n// re-exported so consumers can `import { ErrorCode } from '@cardanowall/poe-standard'`\n// and dispatch on a single union type without round-tripping through the\n// verifier package.\n//\n// Codes are SCREAMING_SNAKE_CASE and MUST match the canonical taxonomy\n// byte-exact across the TS/PY/RS implementations — no lowercase synonyms,\n// no `schema_*`-prefixed parser-internal codes.\n\n// =============================================================================\n// Part A — structural validator codes\n// =============================================================================\nexport const STRUCTURAL_ERROR_CODES = [\n  // CBOR decode layer. A single code covers every canonical-decode failure —\n  // malformed/truncated bytes, indefinite-length encodings, non-canonical\n  // (unsorted) map-key ordering, duplicate map keys, non-minimal integers, and\n  // invalid UTF-8 — by design (no separate duplicate-key code).\n  'MALFORMED_CBOR',\n  // Generic schema-layer\n  'SCHEMA_TYPE_MISMATCH',\n  'SCHEMA_MISSING_REQUIRED',\n  'SCHEMA_UNKNOWN_FIELD',\n  'SCHEMA_INVALID_LITERAL',\n  'SCHEMA_EMPTY_RECORD',\n  // Hash-map\n  'HASH_DIGEST_LENGTH_MISMATCH',\n  'UNSUPPORTED_HASH_ALG',\n  // Top-level `merkle[]`\n  'UNSUPPORTED_MERKLE_COMMIT_ALG',\n  // URI / chunking. A chunk whose bytes do not reconstruct to valid UTF-8\n  // surfaces as MALFORMED_CBOR at decode (cbor2 rejects invalid-UTF-8 tstr)\n  // or, in the residual reconstruct guard, as INVALID_URI — there is no\n  // separate codepoint-split code.\n  'INVALID_URI',\n  'CHUNK_TOO_LARGE',\n  // Encryption envelope\n  'UNAUTHENTICATED_CIPHER_FORBIDDEN',\n  'UNSUPPORTED_AEAD_ALG',\n  'NONCE_LENGTH_MISMATCH',\n  'UNSUPPORTED_ENVELOPE_SCHEME',\n  'ENC_SLOTS_EMPTY',\n  'ENC_SLOT_INVALID_SHAPE',\n  'ENC_SLOTS_DUPLICATE_KEM_MATERIAL',\n  'ENC_SLOTS_TOO_MANY',\n  'ENC_ENVELOPE_TOO_LARGE',\n  'UNSUPPORTED_KEM_ALG',\n  'ENC_KEM_REQUIRED',\n  'KEM_EPK_LENGTH_MISMATCH',\n  'KEM_CT_LENGTH_MISMATCH',\n  'WRAP_LENGTH_MISMATCH',\n  'ENC_SLOTS_MAC_INVALID_LENGTH',\n  'ENC_SLOTS_MAC_REQUIRED',\n  'ENC_SLOTS_REQUIRED',\n  'ENC_EXCLUSIVITY_VIOLATION',\n  'ENC_NO_KEY_PATH',\n  'ENC_REQUIRES_CONTENT_HASH',\n  'ENC_PASSPHRASE_ALG_UNSUPPORTED',\n  'ENC_PASSPHRASE_SALT_TOO_SHORT',\n  'ENC_PASSPHRASE_SALT_TOO_LONG',\n  'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW',\n  'ENC_PASSPHRASE_PARAMS_EXCEED_POLICY',\n  // Signatures\n  'MALFORMED_SIG_COSE_SIGN1',\n  'SIGNATURE_UNSUPPORTED',\n  'SIG_ENTRY_INVALID_SHAPE',\n  'SIG_ENTRY_KID_COSE_KEY_CONFLICT',\n  'SIG_PRIVATE_KEY_LEAKED',\n  // Supersedence\n  'SUPERSEDES_TX_INVALID_LENGTH',\n  // Forward-compat critical extensions\n  'EXTENSION_UNSUPPORTED_CRITICAL',\n  'CRIT_SHAPE_INVALID',\n] as const;\n\n// =============================================================================\n// Part B — verifier-layer codes\n// Re-exported so downstream verifiers can dispatch on a single union.\n// The structural validator NEVER emits these.\n// =============================================================================\nexport const VERIFIER_ERROR_CODES = [\n  'METADATA_NOT_FOUND',\n  'INSUFFICIENT_CONFIRMATIONS',\n  'SIGNATURE_INVALID',\n  'SIGNER_KEY_UNRESOLVED',\n  'WALLET_ADDRESS_MISMATCH',\n  'URI_TARGET_FORBIDDEN',\n  'URI_INTEGRITY_MISMATCH',\n  'URI_FETCH_FAILED',\n  'CONTENT_UNAVAILABLE',\n  'CIPHERTEXT_UNAVAILABLE',\n  'PROVIDER_UNAVAILABLE',\n  'SERVICE_INDEPENDENCE_VIOLATION',\n  'WRONG_DECRYPTION_INPUT_SHAPE',\n  'WRONG_RECIPIENT_KEY',\n  'TAMPERED_HEADER',\n  'TAMPERED_CIPHERTEXT',\n  'KDF_DERIVATION_FAILED',\n  'SCHEMA_MERKLE_LEAF_COUNT_MISMATCH',\n  'SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED',\n  'SCHEMA_MERKLE_LEAVES_MALFORMED',\n  'MERKLE_ROOT_MISMATCH',\n  'MERKLE_LEAVES_UNAVAILABLE',\n  'MERKLE_LEAVES_INFORMATIVE_FORM',\n  'MERKLE_UNSUPPORTED',\n  'OUT_OF_PROFILE_SKIPPED',\n] as const;\n\nexport const ERROR_CODES = [...STRUCTURAL_ERROR_CODES, ...VERIFIER_ERROR_CODES] as const;\n\nexport type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];\nexport type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];\nexport type ErrorCode = (typeof ERROR_CODES)[number];\n\n// Severity classification. Codes not listed are `error` by default.\n//\n// `info` — a deliberate non-check (algorithm out of profile, unrecognised\n// signature algorithm at the opt-in informational tier).\n//\n// `warning` — a non-fatal anomaly that occurred at runtime but did not\n// invalidate the record (e.g. a transient gateway failure, partial leaves\n// availability).\n//\n// `MERKLE_UNSUPPORTED` / `OUT_OF_PROFILE_SKIPPED` carry dual severity\n// (`info` when another commitment was validated; `error` for the\n// merkle-only / strict-mode case). The verifier emits the resolved severity\n// per-issue; this map records the default `info` reading.\nexport type Severity = 'error' | 'warning' | 'info';\n\nexport const SEVERITY: Readonly<Record<ErrorCode, Severity>> = Object.freeze({\n  // --- Part A ---\n  MALFORMED_CBOR: 'error',\n  SCHEMA_TYPE_MISMATCH: 'error',\n  SCHEMA_MISSING_REQUIRED: 'error',\n  SCHEMA_UNKNOWN_FIELD: 'error',\n  SCHEMA_INVALID_LITERAL: 'error',\n  SCHEMA_EMPTY_RECORD: 'error',\n  HASH_DIGEST_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_HASH_ALG: 'error',\n  UNSUPPORTED_MERKLE_COMMIT_ALG: 'error',\n  INVALID_URI: 'error',\n  CHUNK_TOO_LARGE: 'error',\n  UNAUTHENTICATED_CIPHER_FORBIDDEN: 'error',\n  UNSUPPORTED_AEAD_ALG: 'error',\n  NONCE_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_ENVELOPE_SCHEME: 'error',\n  ENC_SLOTS_EMPTY: 'error',\n  ENC_SLOT_INVALID_SHAPE: 'error',\n  ENC_SLOTS_DUPLICATE_KEM_MATERIAL: 'error',\n  ENC_SLOTS_TOO_MANY: 'error',\n  ENC_ENVELOPE_TOO_LARGE: 'error',\n  UNSUPPORTED_KEM_ALG: 'error',\n  ENC_KEM_REQUIRED: 'error',\n  KEM_EPK_LENGTH_MISMATCH: 'error',\n  KEM_CT_LENGTH_MISMATCH: 'error',\n  WRAP_LENGTH_MISMATCH: 'error',\n  ENC_SLOTS_MAC_INVALID_LENGTH: 'error',\n  ENC_SLOTS_MAC_REQUIRED: 'error',\n  ENC_SLOTS_REQUIRED: 'error',\n  ENC_EXCLUSIVITY_VIOLATION: 'error',\n  ENC_NO_KEY_PATH: 'error',\n  ENC_REQUIRES_CONTENT_HASH: 'error',\n  ENC_PASSPHRASE_ALG_UNSUPPORTED: 'error',\n  ENC_PASSPHRASE_SALT_TOO_SHORT: 'error',\n  ENC_PASSPHRASE_SALT_TOO_LONG: 'error',\n  ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW: 'error',\n  ENC_PASSPHRASE_PARAMS_EXCEED_POLICY: 'error',\n  MALFORMED_SIG_COSE_SIGN1: 'error',\n  SIGNATURE_UNSUPPORTED: 'info',\n  SIG_ENTRY_INVALID_SHAPE: 'error',\n  SIG_ENTRY_KID_COSE_KEY_CONFLICT: 'error',\n  SIG_PRIVATE_KEY_LEAKED: 'error',\n  SUPERSEDES_TX_INVALID_LENGTH: 'error',\n  EXTENSION_UNSUPPORTED_CRITICAL: 'error',\n  CRIT_SHAPE_INVALID: 'error',\n  // --- Part B ---\n  METADATA_NOT_FOUND: 'error',\n  INSUFFICIENT_CONFIRMATIONS: 'info',\n  SIGNATURE_INVALID: 'error',\n  SIGNER_KEY_UNRESOLVED: 'error',\n  WALLET_ADDRESS_MISMATCH: 'error',\n  URI_TARGET_FORBIDDEN: 'error',\n  URI_INTEGRITY_MISMATCH: 'error',\n  URI_FETCH_FAILED: 'warning',\n  CONTENT_UNAVAILABLE: 'error',\n  CIPHERTEXT_UNAVAILABLE: 'error',\n  PROVIDER_UNAVAILABLE: 'error',\n  SERVICE_INDEPENDENCE_VIOLATION: 'error',\n  WRONG_DECRYPTION_INPUT_SHAPE: 'error',\n  WRONG_RECIPIENT_KEY: 'error',\n  TAMPERED_HEADER: 'error',\n  TAMPERED_CIPHERTEXT: 'error',\n  KDF_DERIVATION_FAILED: 'error',\n  SCHEMA_MERKLE_LEAF_COUNT_MISMATCH: 'error',\n  SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED: 'error',\n  SCHEMA_MERKLE_LEAVES_MALFORMED: 'error',\n  MERKLE_ROOT_MISMATCH: 'error',\n  MERKLE_LEAVES_UNAVAILABLE: 'warning',\n  MERKLE_LEAVES_INFORMATIVE_FORM: 'info',\n  // Dual-severity — default reading is `info`; the verifier promotes to\n  // `error` for merkle-only records (no `items[]` content claim was\n  // validated in the same record).\n  MERKLE_UNSUPPORTED: 'info',\n  // Dual-severity — default reading is `info` (render mode); strict\n  // end-to-end verifiers promote to `error`.\n  OUT_OF_PROFILE_SKIPPED: 'info',\n});\n\nexport function severityOf(code: ErrorCode): Severity {\n  return SEVERITY[code];\n}\n"]}

package/dist/error-codes.d.cts

@@ -1,6 +1,6 @@
-declare const STRUCTURAL_ERROR_CODES: readonly ["MALFORMED_CBOR", "SCHEMA_TYPE_MISMATCH", "SCHEMA_MISSING_REQUIRED", "SCHEMA_UNKNOWN_FIELD", "SCHEMA_INVALID_LITERAL", "SCHEMA_EMPTY_RECORD", "HASH_DIGEST_LENGTH_MISMATCH", "UNSUPPORTED_HASH_ALG", "UNSUPPORTED_MERKLE_COMMIT_ALG", "INVALID_URI", "CHUNK_TOO_LARGE", "UNAUTHENTICATED_CIPHER_FORBIDDEN", "UNSUPPORTED_AEAD_ALG", "NONCE_LENGTH_MISMATCH", "UNSUPPORTED_ENVELOPE_SCHEME", "ENC_SLOTS_EMPTY", "ENC_SLOT_INVALID_SHAPE", "UNSUPPORTED_KEM_ALG", "ENC_KEM_REQUIRED", "KEM_EPK_LENGTH_MISMATCH", "KEM_CT_LENGTH_MISMATCH", "WRAP_LENGTH_MISMATCH", "ENC_SLOTS_MAC_INVALID_LENGTH", "ENC_SLOTS_MAC_REQUIRED", "ENC_SLOTS_REQUIRED", "ENC_EXCLUSIVITY_VIOLATION", "ENC_NO_KEY_PATH", "ENC_REQUIRES_CONTENT_HASH", "ENC_PASSPHRASE_ALG_UNSUPPORTED", "ENC_PASSPHRASE_SALT_TOO_SHORT", "ENC_PASSPHRASE_SALT_TOO_LONG", "ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW", "ENC_PASSPHRASE_PARAMS_EXCEED_POLICY", "MALFORMED_SIG_COSE_SIGN1", "SIGNATURE_UNSUPPORTED", "SIG_ENTRY_INVALID_SHAPE", "SIG_ENTRY_KID_COSE_KEY_CONFLICT", "SIG_PRIVATE_KEY_LEAKED", "SUPERSEDES_TX_INVALID_LENGTH", "EXTENSION_UNSUPPORTED_CRITICAL", "CRIT_SHAPE_INVALID"];
+declare const STRUCTURAL_ERROR_CODES: readonly ["MALFORMED_CBOR", "SCHEMA_TYPE_MISMATCH", "SCHEMA_MISSING_REQUIRED", "SCHEMA_UNKNOWN_FIELD", "SCHEMA_INVALID_LITERAL", "SCHEMA_EMPTY_RECORD", "HASH_DIGEST_LENGTH_MISMATCH", "UNSUPPORTED_HASH_ALG", "UNSUPPORTED_MERKLE_COMMIT_ALG", "INVALID_URI", "CHUNK_TOO_LARGE", "UNAUTHENTICATED_CIPHER_FORBIDDEN", "UNSUPPORTED_AEAD_ALG", "NONCE_LENGTH_MISMATCH", "UNSUPPORTED_ENVELOPE_SCHEME", "ENC_SLOTS_EMPTY", "ENC_SLOT_INVALID_SHAPE", "ENC_SLOTS_DUPLICATE_KEM_MATERIAL", "ENC_SLOTS_TOO_MANY", "ENC_ENVELOPE_TOO_LARGE", "UNSUPPORTED_KEM_ALG", "ENC_KEM_REQUIRED", "KEM_EPK_LENGTH_MISMATCH", "KEM_CT_LENGTH_MISMATCH", "WRAP_LENGTH_MISMATCH", "ENC_SLOTS_MAC_INVALID_LENGTH", "ENC_SLOTS_MAC_REQUIRED", "ENC_SLOTS_REQUIRED", "ENC_EXCLUSIVITY_VIOLATION", "ENC_NO_KEY_PATH", "ENC_REQUIRES_CONTENT_HASH", "ENC_PASSPHRASE_ALG_UNSUPPORTED", "ENC_PASSPHRASE_SALT_TOO_SHORT", "ENC_PASSPHRASE_SALT_TOO_LONG", "ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW", "ENC_PASSPHRASE_PARAMS_EXCEED_POLICY", "MALFORMED_SIG_COSE_SIGN1", "SIGNATURE_UNSUPPORTED", "SIG_ENTRY_INVALID_SHAPE", "SIG_ENTRY_KID_COSE_KEY_CONFLICT", "SIG_PRIVATE_KEY_LEAKED", "SUPERSEDES_TX_INVALID_LENGTH", "EXTENSION_UNSUPPORTED_CRITICAL", "CRIT_SHAPE_INVALID"];
 declare const VERIFIER_ERROR_CODES: readonly ["METADATA_NOT_FOUND", "INSUFFICIENT_CONFIRMATIONS", "SIGNATURE_INVALID", "SIGNER_KEY_UNRESOLVED", "WALLET_ADDRESS_MISMATCH", "URI_TARGET_FORBIDDEN", "URI_INTEGRITY_MISMATCH", "URI_FETCH_FAILED", "CONTENT_UNAVAILABLE", "CIPHERTEXT_UNAVAILABLE", "PROVIDER_UNAVAILABLE", "SERVICE_INDEPENDENCE_VIOLATION", "WRONG_DECRYPTION_INPUT_SHAPE", "WRONG_RECIPIENT_KEY", "TAMPERED_HEADER", "TAMPERED_CIPHERTEXT", "KDF_DERIVATION_FAILED", "SCHEMA_MERKLE_LEAF_COUNT_MISMATCH", "SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED", "SCHEMA_MERKLE_LEAVES_MALFORMED", "MERKLE_ROOT_MISMATCH", "MERKLE_LEAVES_UNAVAILABLE", "MERKLE_LEAVES_INFORMATIVE_FORM", "MERKLE_UNSUPPORTED", "OUT_OF_PROFILE_SKIPPED"];
-declare const ERROR_CODES: readonly ["MALFORMED_CBOR", "SCHEMA_TYPE_MISMATCH", "SCHEMA_MISSING_REQUIRED", "SCHEMA_UNKNOWN_FIELD", "SCHEMA_INVALID_LITERAL", "SCHEMA_EMPTY_RECORD", "HASH_DIGEST_LENGTH_MISMATCH", "UNSUPPORTED_HASH_ALG", "UNSUPPORTED_MERKLE_COMMIT_ALG", "INVALID_URI", "CHUNK_TOO_LARGE", "UNAUTHENTICATED_CIPHER_FORBIDDEN", "UNSUPPORTED_AEAD_ALG", "NONCE_LENGTH_MISMATCH", "UNSUPPORTED_ENVELOPE_SCHEME", "ENC_SLOTS_EMPTY", "ENC_SLOT_INVALID_SHAPE", "UNSUPPORTED_KEM_ALG", "ENC_KEM_REQUIRED", "KEM_EPK_LENGTH_MISMATCH", "KEM_CT_LENGTH_MISMATCH", "WRAP_LENGTH_MISMATCH", "ENC_SLOTS_MAC_INVALID_LENGTH", "ENC_SLOTS_MAC_REQUIRED", "ENC_SLOTS_REQUIRED", "ENC_EXCLUSIVITY_VIOLATION", "ENC_NO_KEY_PATH", "ENC_REQUIRES_CONTENT_HASH", "ENC_PASSPHRASE_ALG_UNSUPPORTED", "ENC_PASSPHRASE_SALT_TOO_SHORT", "ENC_PASSPHRASE_SALT_TOO_LONG", "ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW", "ENC_PASSPHRASE_PARAMS_EXCEED_POLICY", "MALFORMED_SIG_COSE_SIGN1", "SIGNATURE_UNSUPPORTED", "SIG_ENTRY_INVALID_SHAPE", "SIG_ENTRY_KID_COSE_KEY_CONFLICT", "SIG_PRIVATE_KEY_LEAKED", "SUPERSEDES_TX_INVALID_LENGTH", "EXTENSION_UNSUPPORTED_CRITICAL", "CRIT_SHAPE_INVALID", "METADATA_NOT_FOUND", "INSUFFICIENT_CONFIRMATIONS", "SIGNATURE_INVALID", "SIGNER_KEY_UNRESOLVED", "WALLET_ADDRESS_MISMATCH", "URI_TARGET_FORBIDDEN", "URI_INTEGRITY_MISMATCH", "URI_FETCH_FAILED", "CONTENT_UNAVAILABLE", "CIPHERTEXT_UNAVAILABLE", "PROVIDER_UNAVAILABLE", "SERVICE_INDEPENDENCE_VIOLATION", "WRONG_DECRYPTION_INPUT_SHAPE", "WRONG_RECIPIENT_KEY", "TAMPERED_HEADER", "TAMPERED_CIPHERTEXT", "KDF_DERIVATION_FAILED", "SCHEMA_MERKLE_LEAF_COUNT_MISMATCH", "SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED", "SCHEMA_MERKLE_LEAVES_MALFORMED", "MERKLE_ROOT_MISMATCH", "MERKLE_LEAVES_UNAVAILABLE", "MERKLE_LEAVES_INFORMATIVE_FORM", "MERKLE_UNSUPPORTED", "OUT_OF_PROFILE_SKIPPED"];
+declare const ERROR_CODES: readonly ["MALFORMED_CBOR", "SCHEMA_TYPE_MISMATCH", "SCHEMA_MISSING_REQUIRED", "SCHEMA_UNKNOWN_FIELD", "SCHEMA_INVALID_LITERAL", "SCHEMA_EMPTY_RECORD", "HASH_DIGEST_LENGTH_MISMATCH", "UNSUPPORTED_HASH_ALG", "UNSUPPORTED_MERKLE_COMMIT_ALG", "INVALID_URI", "CHUNK_TOO_LARGE", "UNAUTHENTICATED_CIPHER_FORBIDDEN", "UNSUPPORTED_AEAD_ALG", "NONCE_LENGTH_MISMATCH", "UNSUPPORTED_ENVELOPE_SCHEME", "ENC_SLOTS_EMPTY", "ENC_SLOT_INVALID_SHAPE", "ENC_SLOTS_DUPLICATE_KEM_MATERIAL", "ENC_SLOTS_TOO_MANY", "ENC_ENVELOPE_TOO_LARGE", "UNSUPPORTED_KEM_ALG", "ENC_KEM_REQUIRED", "KEM_EPK_LENGTH_MISMATCH", "KEM_CT_LENGTH_MISMATCH", "WRAP_LENGTH_MISMATCH", "ENC_SLOTS_MAC_INVALID_LENGTH", "ENC_SLOTS_MAC_REQUIRED", "ENC_SLOTS_REQUIRED", "ENC_EXCLUSIVITY_VIOLATION", "ENC_NO_KEY_PATH", "ENC_REQUIRES_CONTENT_HASH", "ENC_PASSPHRASE_ALG_UNSUPPORTED", "ENC_PASSPHRASE_SALT_TOO_SHORT", "ENC_PASSPHRASE_SALT_TOO_LONG", "ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW", "ENC_PASSPHRASE_PARAMS_EXCEED_POLICY", "MALFORMED_SIG_COSE_SIGN1", "SIGNATURE_UNSUPPORTED", "SIG_ENTRY_INVALID_SHAPE", "SIG_ENTRY_KID_COSE_KEY_CONFLICT", "SIG_PRIVATE_KEY_LEAKED", "SUPERSEDES_TX_INVALID_LENGTH", "EXTENSION_UNSUPPORTED_CRITICAL", "CRIT_SHAPE_INVALID", "METADATA_NOT_FOUND", "INSUFFICIENT_CONFIRMATIONS", "SIGNATURE_INVALID", "SIGNER_KEY_UNRESOLVED", "WALLET_ADDRESS_MISMATCH", "URI_TARGET_FORBIDDEN", "URI_INTEGRITY_MISMATCH", "URI_FETCH_FAILED", "CONTENT_UNAVAILABLE", "CIPHERTEXT_UNAVAILABLE", "PROVIDER_UNAVAILABLE", "SERVICE_INDEPENDENCE_VIOLATION", "WRONG_DECRYPTION_INPUT_SHAPE", "WRONG_RECIPIENT_KEY", "TAMPERED_HEADER", "TAMPERED_CIPHERTEXT", "KDF_DERIVATION_FAILED", "SCHEMA_MERKLE_LEAF_COUNT_MISMATCH", "SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED", "SCHEMA_MERKLE_LEAVES_MALFORMED", "MERKLE_ROOT_MISMATCH", "MERKLE_LEAVES_UNAVAILABLE", "MERKLE_LEAVES_INFORMATIVE_FORM", "MERKLE_UNSUPPORTED", "OUT_OF_PROFILE_SKIPPED"];
 type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];
 type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];
 type ErrorCode = (typeof ERROR_CODES)[number];

package/dist/error-codes.d.ts

@@ -1,6 +1,6 @@
-declare const STRUCTURAL_ERROR_CODES: readonly ["MALFORMED_CBOR", "SCHEMA_TYPE_MISMATCH", "SCHEMA_MISSING_REQUIRED", "SCHEMA_UNKNOWN_FIELD", "SCHEMA_INVALID_LITERAL", "SCHEMA_EMPTY_RECORD", "HASH_DIGEST_LENGTH_MISMATCH", "UNSUPPORTED_HASH_ALG", "UNSUPPORTED_MERKLE_COMMIT_ALG", "INVALID_URI", "CHUNK_TOO_LARGE", "UNAUTHENTICATED_CIPHER_FORBIDDEN", "UNSUPPORTED_AEAD_ALG", "NONCE_LENGTH_MISMATCH", "UNSUPPORTED_ENVELOPE_SCHEME", "ENC_SLOTS_EMPTY", "ENC_SLOT_INVALID_SHAPE", "UNSUPPORTED_KEM_ALG", "ENC_KEM_REQUIRED", "KEM_EPK_LENGTH_MISMATCH", "KEM_CT_LENGTH_MISMATCH", "WRAP_LENGTH_MISMATCH", "ENC_SLOTS_MAC_INVALID_LENGTH", "ENC_SLOTS_MAC_REQUIRED", "ENC_SLOTS_REQUIRED", "ENC_EXCLUSIVITY_VIOLATION", "ENC_NO_KEY_PATH", "ENC_REQUIRES_CONTENT_HASH", "ENC_PASSPHRASE_ALG_UNSUPPORTED", "ENC_PASSPHRASE_SALT_TOO_SHORT", "ENC_PASSPHRASE_SALT_TOO_LONG", "ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW", "ENC_PASSPHRASE_PARAMS_EXCEED_POLICY", "MALFORMED_SIG_COSE_SIGN1", "SIGNATURE_UNSUPPORTED", "SIG_ENTRY_INVALID_SHAPE", "SIG_ENTRY_KID_COSE_KEY_CONFLICT", "SIG_PRIVATE_KEY_LEAKED", "SUPERSEDES_TX_INVALID_LENGTH", "EXTENSION_UNSUPPORTED_CRITICAL", "CRIT_SHAPE_INVALID"];
+declare const STRUCTURAL_ERROR_CODES: readonly ["MALFORMED_CBOR", "SCHEMA_TYPE_MISMATCH", "SCHEMA_MISSING_REQUIRED", "SCHEMA_UNKNOWN_FIELD", "SCHEMA_INVALID_LITERAL", "SCHEMA_EMPTY_RECORD", "HASH_DIGEST_LENGTH_MISMATCH", "UNSUPPORTED_HASH_ALG", "UNSUPPORTED_MERKLE_COMMIT_ALG", "INVALID_URI", "CHUNK_TOO_LARGE", "UNAUTHENTICATED_CIPHER_FORBIDDEN", "UNSUPPORTED_AEAD_ALG", "NONCE_LENGTH_MISMATCH", "UNSUPPORTED_ENVELOPE_SCHEME", "ENC_SLOTS_EMPTY", "ENC_SLOT_INVALID_SHAPE", "ENC_SLOTS_DUPLICATE_KEM_MATERIAL", "ENC_SLOTS_TOO_MANY", "ENC_ENVELOPE_TOO_LARGE", "UNSUPPORTED_KEM_ALG", "ENC_KEM_REQUIRED", "KEM_EPK_LENGTH_MISMATCH", "KEM_CT_LENGTH_MISMATCH", "WRAP_LENGTH_MISMATCH", "ENC_SLOTS_MAC_INVALID_LENGTH", "ENC_SLOTS_MAC_REQUIRED", "ENC_SLOTS_REQUIRED", "ENC_EXCLUSIVITY_VIOLATION", "ENC_NO_KEY_PATH", "ENC_REQUIRES_CONTENT_HASH", "ENC_PASSPHRASE_ALG_UNSUPPORTED", "ENC_PASSPHRASE_SALT_TOO_SHORT", "ENC_PASSPHRASE_SALT_TOO_LONG", "ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW", "ENC_PASSPHRASE_PARAMS_EXCEED_POLICY", "MALFORMED_SIG_COSE_SIGN1", "SIGNATURE_UNSUPPORTED", "SIG_ENTRY_INVALID_SHAPE", "SIG_ENTRY_KID_COSE_KEY_CONFLICT", "SIG_PRIVATE_KEY_LEAKED", "SUPERSEDES_TX_INVALID_LENGTH", "EXTENSION_UNSUPPORTED_CRITICAL", "CRIT_SHAPE_INVALID"];
 declare const VERIFIER_ERROR_CODES: readonly ["METADATA_NOT_FOUND", "INSUFFICIENT_CONFIRMATIONS", "SIGNATURE_INVALID", "SIGNER_KEY_UNRESOLVED", "WALLET_ADDRESS_MISMATCH", "URI_TARGET_FORBIDDEN", "URI_INTEGRITY_MISMATCH", "URI_FETCH_FAILED", "CONTENT_UNAVAILABLE", "CIPHERTEXT_UNAVAILABLE", "PROVIDER_UNAVAILABLE", "SERVICE_INDEPENDENCE_VIOLATION", "WRONG_DECRYPTION_INPUT_SHAPE", "WRONG_RECIPIENT_KEY", "TAMPERED_HEADER", "TAMPERED_CIPHERTEXT", "KDF_DERIVATION_FAILED", "SCHEMA_MERKLE_LEAF_COUNT_MISMATCH", "SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED", "SCHEMA_MERKLE_LEAVES_MALFORMED", "MERKLE_ROOT_MISMATCH", "MERKLE_LEAVES_UNAVAILABLE", "MERKLE_LEAVES_INFORMATIVE_FORM", "MERKLE_UNSUPPORTED", "OUT_OF_PROFILE_SKIPPED"];
-declare const ERROR_CODES: readonly ["MALFORMED_CBOR", "SCHEMA_TYPE_MISMATCH", "SCHEMA_MISSING_REQUIRED", "SCHEMA_UNKNOWN_FIELD", "SCHEMA_INVALID_LITERAL", "SCHEMA_EMPTY_RECORD", "HASH_DIGEST_LENGTH_MISMATCH", "UNSUPPORTED_HASH_ALG", "UNSUPPORTED_MERKLE_COMMIT_ALG", "INVALID_URI", "CHUNK_TOO_LARGE", "UNAUTHENTICATED_CIPHER_FORBIDDEN", "UNSUPPORTED_AEAD_ALG", "NONCE_LENGTH_MISMATCH", "UNSUPPORTED_ENVELOPE_SCHEME", "ENC_SLOTS_EMPTY", "ENC_SLOT_INVALID_SHAPE", "UNSUPPORTED_KEM_ALG", "ENC_KEM_REQUIRED", "KEM_EPK_LENGTH_MISMATCH", "KEM_CT_LENGTH_MISMATCH", "WRAP_LENGTH_MISMATCH", "ENC_SLOTS_MAC_INVALID_LENGTH", "ENC_SLOTS_MAC_REQUIRED", "ENC_SLOTS_REQUIRED", "ENC_EXCLUSIVITY_VIOLATION", "ENC_NO_KEY_PATH", "ENC_REQUIRES_CONTENT_HASH", "ENC_PASSPHRASE_ALG_UNSUPPORTED", "ENC_PASSPHRASE_SALT_TOO_SHORT", "ENC_PASSPHRASE_SALT_TOO_LONG", "ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW", "ENC_PASSPHRASE_PARAMS_EXCEED_POLICY", "MALFORMED_SIG_COSE_SIGN1", "SIGNATURE_UNSUPPORTED", "SIG_ENTRY_INVALID_SHAPE", "SIG_ENTRY_KID_COSE_KEY_CONFLICT", "SIG_PRIVATE_KEY_LEAKED", "SUPERSEDES_TX_INVALID_LENGTH", "EXTENSION_UNSUPPORTED_CRITICAL", "CRIT_SHAPE_INVALID", "METADATA_NOT_FOUND", "INSUFFICIENT_CONFIRMATIONS", "SIGNATURE_INVALID", "SIGNER_KEY_UNRESOLVED", "WALLET_ADDRESS_MISMATCH", "URI_TARGET_FORBIDDEN", "URI_INTEGRITY_MISMATCH", "URI_FETCH_FAILED", "CONTENT_UNAVAILABLE", "CIPHERTEXT_UNAVAILABLE", "PROVIDER_UNAVAILABLE", "SERVICE_INDEPENDENCE_VIOLATION", "WRONG_DECRYPTION_INPUT_SHAPE", "WRONG_RECIPIENT_KEY", "TAMPERED_HEADER", "TAMPERED_CIPHERTEXT", "KDF_DERIVATION_FAILED", "SCHEMA_MERKLE_LEAF_COUNT_MISMATCH", "SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED", "SCHEMA_MERKLE_LEAVES_MALFORMED", "MERKLE_ROOT_MISMATCH", "MERKLE_LEAVES_UNAVAILABLE", "MERKLE_LEAVES_INFORMATIVE_FORM", "MERKLE_UNSUPPORTED", "OUT_OF_PROFILE_SKIPPED"];
+declare const ERROR_CODES: readonly ["MALFORMED_CBOR", "SCHEMA_TYPE_MISMATCH", "SCHEMA_MISSING_REQUIRED", "SCHEMA_UNKNOWN_FIELD", "SCHEMA_INVALID_LITERAL", "SCHEMA_EMPTY_RECORD", "HASH_DIGEST_LENGTH_MISMATCH", "UNSUPPORTED_HASH_ALG", "UNSUPPORTED_MERKLE_COMMIT_ALG", "INVALID_URI", "CHUNK_TOO_LARGE", "UNAUTHENTICATED_CIPHER_FORBIDDEN", "UNSUPPORTED_AEAD_ALG", "NONCE_LENGTH_MISMATCH", "UNSUPPORTED_ENVELOPE_SCHEME", "ENC_SLOTS_EMPTY", "ENC_SLOT_INVALID_SHAPE", "ENC_SLOTS_DUPLICATE_KEM_MATERIAL", "ENC_SLOTS_TOO_MANY", "ENC_ENVELOPE_TOO_LARGE", "UNSUPPORTED_KEM_ALG", "ENC_KEM_REQUIRED", "KEM_EPK_LENGTH_MISMATCH", "KEM_CT_LENGTH_MISMATCH", "WRAP_LENGTH_MISMATCH", "ENC_SLOTS_MAC_INVALID_LENGTH", "ENC_SLOTS_MAC_REQUIRED", "ENC_SLOTS_REQUIRED", "ENC_EXCLUSIVITY_VIOLATION", "ENC_NO_KEY_PATH", "ENC_REQUIRES_CONTENT_HASH", "ENC_PASSPHRASE_ALG_UNSUPPORTED", "ENC_PASSPHRASE_SALT_TOO_SHORT", "ENC_PASSPHRASE_SALT_TOO_LONG", "ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW", "ENC_PASSPHRASE_PARAMS_EXCEED_POLICY", "MALFORMED_SIG_COSE_SIGN1", "SIGNATURE_UNSUPPORTED", "SIG_ENTRY_INVALID_SHAPE", "SIG_ENTRY_KID_COSE_KEY_CONFLICT", "SIG_PRIVATE_KEY_LEAKED", "SUPERSEDES_TX_INVALID_LENGTH", "EXTENSION_UNSUPPORTED_CRITICAL", "CRIT_SHAPE_INVALID", "METADATA_NOT_FOUND", "INSUFFICIENT_CONFIRMATIONS", "SIGNATURE_INVALID", "SIGNER_KEY_UNRESOLVED", "WALLET_ADDRESS_MISMATCH", "URI_TARGET_FORBIDDEN", "URI_INTEGRITY_MISMATCH", "URI_FETCH_FAILED", "CONTENT_UNAVAILABLE", "CIPHERTEXT_UNAVAILABLE", "PROVIDER_UNAVAILABLE", "SERVICE_INDEPENDENCE_VIOLATION", "WRONG_DECRYPTION_INPUT_SHAPE", "WRONG_RECIPIENT_KEY", "TAMPERED_HEADER", "TAMPERED_CIPHERTEXT", "KDF_DERIVATION_FAILED", "SCHEMA_MERKLE_LEAF_COUNT_MISMATCH", "SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED", "SCHEMA_MERKLE_LEAVES_MALFORMED", "MERKLE_ROOT_MISMATCH", "MERKLE_LEAVES_UNAVAILABLE", "MERKLE_LEAVES_INFORMATIVE_FORM", "MERKLE_UNSUPPORTED", "OUT_OF_PROFILE_SKIPPED"];
 type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];
 type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];
 type ErrorCode = (typeof ERROR_CODES)[number];

package/dist/error-codes.js

@@ -29,6 +29,9 @@ var STRUCTURAL_ERROR_CODES = [
   "UNSUPPORTED_ENVELOPE_SCHEME",
   "ENC_SLOTS_EMPTY",
   "ENC_SLOT_INVALID_SHAPE",
+  "ENC_SLOTS_DUPLICATE_KEM_MATERIAL",
+  "ENC_SLOTS_TOO_MANY",
+  "ENC_ENVELOPE_TOO_LARGE",
   "UNSUPPORTED_KEM_ALG",
   "ENC_KEM_REQUIRED",
   "KEM_EPK_LENGTH_MISMATCH",
@@ -104,6 +107,9 @@ var SEVERITY = Object.freeze({
   UNSUPPORTED_ENVELOPE_SCHEME: "error",
   ENC_SLOTS_EMPTY: "error",
   ENC_SLOT_INVALID_SHAPE: "error",
+  ENC_SLOTS_DUPLICATE_KEM_MATERIAL: "error",
+  ENC_SLOTS_TOO_MANY: "error",
+  ENC_ENVELOPE_TOO_LARGE: "error",
   UNSUPPORTED_KEM_ALG: "error",
   ENC_KEM_REQUIRED: "error",
   KEM_EPK_LENGTH_MISMATCH: "error",

package/dist/error-codes.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/error-codes.ts"],"names":[],"mappings":";AAgBO,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,gBAAA;AAAA;AAAA,EAEA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EAEA,6BAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EAEA,+BAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,kCAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,iBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,8BAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,+BAAA;AAAA,EACA,8BAAA;AAAA,EACA,sCAAA;AAAA,EACA,qCAAA;AAAA;AAAA,EAEA,0BAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,iCAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,gCAAA;AAAA,EACA;AACF;AAOO,IAAM,oBAAA,GAAuB;AAAA,EAClC,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,gCAAA;AAAA,EACA,8BAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,mCAAA;AAAA,EACA,yCAAA;AAAA,EACA,gCAAA;AAAA,EACA,sBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF;AAEO,IAAM,WAAA,GAAc,CAAC,GAAG,sBAAA,EAAwB,GAAG,oBAAoB;AAqBvE,IAAM,QAAA,GAAkD,OAAO,MAAA,CAAO;AAAA;AAAA,EAE3E,cAAA,EAAgB,OAAA;AAAA,EAChB,oBAAA,EAAsB,OAAA;AAAA,EACtB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,oBAAA,EAAsB,OAAA;AAAA,EACtB,6BAAA,EAA+B,OAAA;AAAA,EAC/B,WAAA,EAAa,OAAA;AAAA,EACb,eAAA,EAAiB,OAAA;AAAA,EACjB,gCAAA,EAAkC,OAAA;AAAA,EAClC,oBAAA,EAAsB,OAAA;AAAA,EACtB,qBAAA,EAAuB,OAAA;AAAA,EACvB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,eAAA,EAAiB,OAAA;AAAA,EACjB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,gBAAA,EAAkB,OAAA;AAAA,EAClB,uBAAA,EAAyB,OAAA;AAAA,EACzB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,sBAAA,EAAwB,OAAA;AAAA,EACxB,kBAAA,EAAoB,OAAA;AAAA,EACpB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,eAAA,EAAiB,OAAA;AAAA,EACjB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,8BAAA,EAAgC,OAAA;AAAA,EAChC,6BAAA,EAA+B,OAAA;AAAA,EAC/B,4BAAA,EAA8B,OAAA;AAAA,EAC9B,oCAAA,EAAsC,OAAA;AAAA,EACtC,mCAAA,EAAqC,OAAA;AAAA,EACrC,wBAAA,EAA0B,OAAA;AAAA,EAC1B,qBAAA,EAAuB,MAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,+BAAA,EAAiC,OAAA;AAAA,EACjC,sBAAA,EAAwB,OAAA;AAAA,EACxB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,8BAAA,EAAgC,OAAA;AAAA,EAChC,kBAAA,EAAoB,OAAA;AAAA;AAAA,EAEpB,kBAAA,EAAoB,OAAA;AAAA,EACpB,0BAAA,EAA4B,MAAA;AAAA,EAC5B,iBAAA,EAAmB,OAAA;AAAA,EACnB,qBAAA,EAAuB,OAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gBAAA,EAAkB,SAAA;AAAA,EAClB,mBAAA,EAAqB,OAAA;AAAA,EACrB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,8BAAA,EAAgC,OAAA;AAAA,EAChC,4BAAA,EAA8B,OAAA;AAAA,EAC9B,mBAAA,EAAqB,OAAA;AAAA,EACrB,eAAA,EAAiB,OAAA;AAAA,EACjB,mBAAA,EAAqB,OAAA;AAAA,EACrB,qBAAA,EAAuB,OAAA;AAAA,EACvB,iCAAA,EAAmC,OAAA;AAAA,EACnC,uCAAA,EAAyC,OAAA;AAAA,EACzC,8BAAA,EAAgC,OAAA;AAAA,EAChC,oBAAA,EAAsB,OAAA;AAAA,EACtB,yBAAA,EAA2B,SAAA;AAAA,EAC3B,8BAAA,EAAgC,MAAA;AAAA;AAAA;AAAA;AAAA,EAIhC,kBAAA,EAAoB,MAAA;AAAA;AAAA;AAAA,EAGpB,sBAAA,EAAwB;AAC1B,CAAC;AAEM,SAAS,WAAW,IAAA,EAA2B;AACpD,EAAA,OAAO,SAAS,IAAI,CAAA;AACtB","file":"error-codes.js","sourcesContent":["// Label 309 v1 error-code catalogue — single source of truth for the\n// structural-validator codes (Part A) and the verifier-layer codes (Part B)\n// that downstream verifiers re-export from this package.\n//\n// The structural validator emits ONLY Part A codes. Part B codes are\n// re-exported so consumers can `import { ErrorCode } from '@cardanowall/poe-standard'`\n// and dispatch on a single union type without round-tripping through the\n// verifier package.\n//\n// Codes are SCREAMING_SNAKE_CASE and MUST match the canonical taxonomy\n// byte-exact across the TS/PY/RS implementations — no lowercase synonyms,\n// no `schema_*`-prefixed parser-internal codes.\n\n// =============================================================================\n// Part A — structural validator codes\n// =============================================================================\nexport const STRUCTURAL_ERROR_CODES = [\n  // CBOR decode layer. A single code covers every canonical-decode failure —\n  // malformed/truncated bytes, indefinite-length encodings, non-canonical\n  // (unsorted) map-key ordering, duplicate map keys, non-minimal integers, and\n  // invalid UTF-8 — by design (no separate duplicate-key code).\n  'MALFORMED_CBOR',\n  // Generic schema-layer\n  'SCHEMA_TYPE_MISMATCH',\n  'SCHEMA_MISSING_REQUIRED',\n  'SCHEMA_UNKNOWN_FIELD',\n  'SCHEMA_INVALID_LITERAL',\n  'SCHEMA_EMPTY_RECORD',\n  // Hash-map\n  'HASH_DIGEST_LENGTH_MISMATCH',\n  'UNSUPPORTED_HASH_ALG',\n  // Top-level `merkle[]`\n  'UNSUPPORTED_MERKLE_COMMIT_ALG',\n  // URI / chunking. A chunk whose bytes do not reconstruct to valid UTF-8\n  // surfaces as MALFORMED_CBOR at decode (cbor2 rejects invalid-UTF-8 tstr)\n  // or, in the residual reconstruct guard, as INVALID_URI — there is no\n  // separate codepoint-split code.\n  'INVALID_URI',\n  'CHUNK_TOO_LARGE',\n  // Encryption envelope\n  'UNAUTHENTICATED_CIPHER_FORBIDDEN',\n  'UNSUPPORTED_AEAD_ALG',\n  'NONCE_LENGTH_MISMATCH',\n  'UNSUPPORTED_ENVELOPE_SCHEME',\n  'ENC_SLOTS_EMPTY',\n  'ENC_SLOT_INVALID_SHAPE',\n  'UNSUPPORTED_KEM_ALG',\n  'ENC_KEM_REQUIRED',\n  'KEM_EPK_LENGTH_MISMATCH',\n  'KEM_CT_LENGTH_MISMATCH',\n  'WRAP_LENGTH_MISMATCH',\n  'ENC_SLOTS_MAC_INVALID_LENGTH',\n  'ENC_SLOTS_MAC_REQUIRED',\n  'ENC_SLOTS_REQUIRED',\n  'ENC_EXCLUSIVITY_VIOLATION',\n  'ENC_NO_KEY_PATH',\n  'ENC_REQUIRES_CONTENT_HASH',\n  'ENC_PASSPHRASE_ALG_UNSUPPORTED',\n  'ENC_PASSPHRASE_SALT_TOO_SHORT',\n  'ENC_PASSPHRASE_SALT_TOO_LONG',\n  'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW',\n  'ENC_PASSPHRASE_PARAMS_EXCEED_POLICY',\n  // Signatures\n  'MALFORMED_SIG_COSE_SIGN1',\n  'SIGNATURE_UNSUPPORTED',\n  'SIG_ENTRY_INVALID_SHAPE',\n  'SIG_ENTRY_KID_COSE_KEY_CONFLICT',\n  'SIG_PRIVATE_KEY_LEAKED',\n  // Supersedence\n  'SUPERSEDES_TX_INVALID_LENGTH',\n  // Forward-compat critical extensions\n  'EXTENSION_UNSUPPORTED_CRITICAL',\n  'CRIT_SHAPE_INVALID',\n] as const;\n\n// =============================================================================\n// Part B — verifier-layer codes\n// Re-exported so downstream verifiers can dispatch on a single union.\n// The structural validator NEVER emits these.\n// =============================================================================\nexport const VERIFIER_ERROR_CODES = [\n  'METADATA_NOT_FOUND',\n  'INSUFFICIENT_CONFIRMATIONS',\n  'SIGNATURE_INVALID',\n  'SIGNER_KEY_UNRESOLVED',\n  'WALLET_ADDRESS_MISMATCH',\n  'URI_TARGET_FORBIDDEN',\n  'URI_INTEGRITY_MISMATCH',\n  'URI_FETCH_FAILED',\n  'CONTENT_UNAVAILABLE',\n  'CIPHERTEXT_UNAVAILABLE',\n  'PROVIDER_UNAVAILABLE',\n  'SERVICE_INDEPENDENCE_VIOLATION',\n  'WRONG_DECRYPTION_INPUT_SHAPE',\n  'WRONG_RECIPIENT_KEY',\n  'TAMPERED_HEADER',\n  'TAMPERED_CIPHERTEXT',\n  'KDF_DERIVATION_FAILED',\n  'SCHEMA_MERKLE_LEAF_COUNT_MISMATCH',\n  'SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED',\n  'SCHEMA_MERKLE_LEAVES_MALFORMED',\n  'MERKLE_ROOT_MISMATCH',\n  'MERKLE_LEAVES_UNAVAILABLE',\n  'MERKLE_LEAVES_INFORMATIVE_FORM',\n  'MERKLE_UNSUPPORTED',\n  'OUT_OF_PROFILE_SKIPPED',\n] as const;\n\nexport const ERROR_CODES = [...STRUCTURAL_ERROR_CODES, ...VERIFIER_ERROR_CODES] as const;\n\nexport type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];\nexport type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];\nexport type ErrorCode = (typeof ERROR_CODES)[number];\n\n// Severity classification. Codes not listed are `error` by default.\n//\n// `info` — a deliberate non-check (algorithm out of profile, unrecognised\n// signature algorithm at the opt-in informational tier).\n//\n// `warning` — a non-fatal anomaly that occurred at runtime but did not\n// invalidate the record (e.g. a transient gateway failure, partial leaves\n// availability).\n//\n// `MERKLE_UNSUPPORTED` / `OUT_OF_PROFILE_SKIPPED` carry dual severity\n// (`info` when another commitment was validated; `error` for the\n// merkle-only / strict-mode case). The verifier emits the resolved severity\n// per-issue; this map records the default `info` reading.\nexport type Severity = 'error' | 'warning' | 'info';\n\nexport const SEVERITY: Readonly<Record<ErrorCode, Severity>> = Object.freeze({\n  // --- Part A ---\n  MALFORMED_CBOR: 'error',\n  SCHEMA_TYPE_MISMATCH: 'error',\n  SCHEMA_MISSING_REQUIRED: 'error',\n  SCHEMA_UNKNOWN_FIELD: 'error',\n  SCHEMA_INVALID_LITERAL: 'error',\n  SCHEMA_EMPTY_RECORD: 'error',\n  HASH_DIGEST_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_HASH_ALG: 'error',\n  UNSUPPORTED_MERKLE_COMMIT_ALG: 'error',\n  INVALID_URI: 'error',\n  CHUNK_TOO_LARGE: 'error',\n  UNAUTHENTICATED_CIPHER_FORBIDDEN: 'error',\n  UNSUPPORTED_AEAD_ALG: 'error',\n  NONCE_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_ENVELOPE_SCHEME: 'error',\n  ENC_SLOTS_EMPTY: 'error',\n  ENC_SLOT_INVALID_SHAPE: 'error',\n  UNSUPPORTED_KEM_ALG: 'error',\n  ENC_KEM_REQUIRED: 'error',\n  KEM_EPK_LENGTH_MISMATCH: 'error',\n  KEM_CT_LENGTH_MISMATCH: 'error',\n  WRAP_LENGTH_MISMATCH: 'error',\n  ENC_SLOTS_MAC_INVALID_LENGTH: 'error',\n  ENC_SLOTS_MAC_REQUIRED: 'error',\n  ENC_SLOTS_REQUIRED: 'error',\n  ENC_EXCLUSIVITY_VIOLATION: 'error',\n  ENC_NO_KEY_PATH: 'error',\n  ENC_REQUIRES_CONTENT_HASH: 'error',\n  ENC_PASSPHRASE_ALG_UNSUPPORTED: 'error',\n  ENC_PASSPHRASE_SALT_TOO_SHORT: 'error',\n  ENC_PASSPHRASE_SALT_TOO_LONG: 'error',\n  ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW: 'error',\n  ENC_PASSPHRASE_PARAMS_EXCEED_POLICY: 'error',\n  MALFORMED_SIG_COSE_SIGN1: 'error',\n  SIGNATURE_UNSUPPORTED: 'info',\n  SIG_ENTRY_INVALID_SHAPE: 'error',\n  SIG_ENTRY_KID_COSE_KEY_CONFLICT: 'error',\n  SIG_PRIVATE_KEY_LEAKED: 'error',\n  SUPERSEDES_TX_INVALID_LENGTH: 'error',\n  EXTENSION_UNSUPPORTED_CRITICAL: 'error',\n  CRIT_SHAPE_INVALID: 'error',\n  // --- Part B ---\n  METADATA_NOT_FOUND: 'error',\n  INSUFFICIENT_CONFIRMATIONS: 'info',\n  SIGNATURE_INVALID: 'error',\n  SIGNER_KEY_UNRESOLVED: 'error',\n  WALLET_ADDRESS_MISMATCH: 'error',\n  URI_TARGET_FORBIDDEN: 'error',\n  URI_INTEGRITY_MISMATCH: 'error',\n  URI_FETCH_FAILED: 'warning',\n  CONTENT_UNAVAILABLE: 'error',\n  CIPHERTEXT_UNAVAILABLE: 'error',\n  PROVIDER_UNAVAILABLE: 'error',\n  SERVICE_INDEPENDENCE_VIOLATION: 'error',\n  WRONG_DECRYPTION_INPUT_SHAPE: 'error',\n  WRONG_RECIPIENT_KEY: 'error',\n  TAMPERED_HEADER: 'error',\n  TAMPERED_CIPHERTEXT: 'error',\n  KDF_DERIVATION_FAILED: 'error',\n  SCHEMA_MERKLE_LEAF_COUNT_MISMATCH: 'error',\n  SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED: 'error',\n  SCHEMA_MERKLE_LEAVES_MALFORMED: 'error',\n  MERKLE_ROOT_MISMATCH: 'error',\n  MERKLE_LEAVES_UNAVAILABLE: 'warning',\n  MERKLE_LEAVES_INFORMATIVE_FORM: 'info',\n  // Dual-severity — default reading is `info`; the verifier promotes to\n  // `error` for merkle-only records (no `items[]` content claim was\n  // validated in the same record).\n  MERKLE_UNSUPPORTED: 'info',\n  // Dual-severity — default reading is `info` (render mode); strict\n  // end-to-end verifiers promote to `error`.\n  OUT_OF_PROFILE_SKIPPED: 'info',\n});\n\nexport function severityOf(code: ErrorCode): Severity {\n  return SEVERITY[code];\n}\n"]}
+{"version":3,"sources":["../src/error-codes.ts"],"names":[],"mappings":";AAgBO,IAAM,sBAAA,GAAyB;AAAA;AAAA;AAAA;AAAA;AAAA,EAKpC,gBAAA;AAAA;AAAA,EAEA,sBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA;AAAA,EAEA,6BAAA;AAAA,EACA,sBAAA;AAAA;AAAA,EAEA,+BAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA;AAAA,EACA,iBAAA;AAAA;AAAA,EAEA,kCAAA;AAAA,EACA,sBAAA;AAAA,EACA,uBAAA;AAAA,EACA,6BAAA;AAAA,EACA,iBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kCAAA;AAAA,EACA,oBAAA;AAAA,EACA,wBAAA;AAAA,EACA,qBAAA;AAAA,EACA,kBAAA;AAAA,EACA,yBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,8BAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,2BAAA;AAAA,EACA,iBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,+BAAA;AAAA,EACA,8BAAA;AAAA,EACA,sCAAA;AAAA,EACA,qCAAA;AAAA;AAAA,EAEA,0BAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,iCAAA;AAAA,EACA,wBAAA;AAAA;AAAA,EAEA,8BAAA;AAAA;AAAA,EAEA,gCAAA;AAAA,EACA;AACF;AAOO,IAAM,oBAAA,GAAuB;AAAA,EAClC,oBAAA;AAAA,EACA,4BAAA;AAAA,EACA,mBAAA;AAAA,EACA,uBAAA;AAAA,EACA,yBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,gCAAA;AAAA,EACA,8BAAA;AAAA,EACA,qBAAA;AAAA,EACA,iBAAA;AAAA,EACA,qBAAA;AAAA,EACA,uBAAA;AAAA,EACA,mCAAA;AAAA,EACA,yCAAA;AAAA,EACA,gCAAA;AAAA,EACA,sBAAA;AAAA,EACA,2BAAA;AAAA,EACA,gCAAA;AAAA,EACA,oBAAA;AAAA,EACA;AACF;AAEO,IAAM,WAAA,GAAc,CAAC,GAAG,sBAAA,EAAwB,GAAG,oBAAoB;AAqBvE,IAAM,QAAA,GAAkD,OAAO,MAAA,CAAO;AAAA;AAAA,EAE3E,cAAA,EAAgB,OAAA;AAAA,EAChB,oBAAA,EAAsB,OAAA;AAAA,EACtB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,oBAAA,EAAsB,OAAA;AAAA,EACtB,6BAAA,EAA+B,OAAA;AAAA,EAC/B,WAAA,EAAa,OAAA;AAAA,EACb,eAAA,EAAiB,OAAA;AAAA,EACjB,gCAAA,EAAkC,OAAA;AAAA,EAClC,oBAAA,EAAsB,OAAA;AAAA,EACtB,qBAAA,EAAuB,OAAA;AAAA,EACvB,2BAAA,EAA6B,OAAA;AAAA,EAC7B,eAAA,EAAiB,OAAA;AAAA,EACjB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gCAAA,EAAkC,OAAA;AAAA,EAClC,kBAAA,EAAoB,OAAA;AAAA,EACpB,sBAAA,EAAwB,OAAA;AAAA,EACxB,mBAAA,EAAqB,OAAA;AAAA,EACrB,gBAAA,EAAkB,OAAA;AAAA,EAClB,uBAAA,EAAyB,OAAA;AAAA,EACzB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,sBAAA,EAAwB,OAAA;AAAA,EACxB,kBAAA,EAAoB,OAAA;AAAA,EACpB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,eAAA,EAAiB,OAAA;AAAA,EACjB,yBAAA,EAA2B,OAAA;AAAA,EAC3B,8BAAA,EAAgC,OAAA;AAAA,EAChC,6BAAA,EAA+B,OAAA;AAAA,EAC/B,4BAAA,EAA8B,OAAA;AAAA,EAC9B,oCAAA,EAAsC,OAAA;AAAA,EACtC,mCAAA,EAAqC,OAAA;AAAA,EACrC,wBAAA,EAA0B,OAAA;AAAA,EAC1B,qBAAA,EAAuB,MAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,+BAAA,EAAiC,OAAA;AAAA,EACjC,sBAAA,EAAwB,OAAA;AAAA,EACxB,4BAAA,EAA8B,OAAA;AAAA,EAC9B,8BAAA,EAAgC,OAAA;AAAA,EAChC,kBAAA,EAAoB,OAAA;AAAA;AAAA,EAEpB,kBAAA,EAAoB,OAAA;AAAA,EACpB,0BAAA,EAA4B,MAAA;AAAA,EAC5B,iBAAA,EAAmB,OAAA;AAAA,EACnB,qBAAA,EAAuB,OAAA;AAAA,EACvB,uBAAA,EAAyB,OAAA;AAAA,EACzB,oBAAA,EAAsB,OAAA;AAAA,EACtB,sBAAA,EAAwB,OAAA;AAAA,EACxB,gBAAA,EAAkB,SAAA;AAAA,EAClB,mBAAA,EAAqB,OAAA;AAAA,EACrB,sBAAA,EAAwB,OAAA;AAAA,EACxB,oBAAA,EAAsB,OAAA;AAAA,EACtB,8BAAA,EAAgC,OAAA;AAAA,EAChC,4BAAA,EAA8B,OAAA;AAAA,EAC9B,mBAAA,EAAqB,OAAA;AAAA,EACrB,eAAA,EAAiB,OAAA;AAAA,EACjB,mBAAA,EAAqB,OAAA;AAAA,EACrB,qBAAA,EAAuB,OAAA;AAAA,EACvB,iCAAA,EAAmC,OAAA;AAAA,EACnC,uCAAA,EAAyC,OAAA;AAAA,EACzC,8BAAA,EAAgC,OAAA;AAAA,EAChC,oBAAA,EAAsB,OAAA;AAAA,EACtB,yBAAA,EAA2B,SAAA;AAAA,EAC3B,8BAAA,EAAgC,MAAA;AAAA;AAAA;AAAA;AAAA,EAIhC,kBAAA,EAAoB,MAAA;AAAA;AAAA;AAAA,EAGpB,sBAAA,EAAwB;AAC1B,CAAC;AAEM,SAAS,WAAW,IAAA,EAA2B;AACpD,EAAA,OAAO,SAAS,IAAI,CAAA;AACtB","file":"error-codes.js","sourcesContent":["// Label 309 v1 error-code catalogue — single source of truth for the\n// structural-validator codes (Part A) and the verifier-layer codes (Part B)\n// that downstream verifiers re-export from this package.\n//\n// The structural validator emits ONLY Part A codes. Part B codes are\n// re-exported so consumers can `import { ErrorCode } from '@cardanowall/poe-standard'`\n// and dispatch on a single union type without round-tripping through the\n// verifier package.\n//\n// Codes are SCREAMING_SNAKE_CASE and MUST match the canonical taxonomy\n// byte-exact across the TS/PY/RS implementations — no lowercase synonyms,\n// no `schema_*`-prefixed parser-internal codes.\n\n// =============================================================================\n// Part A — structural validator codes\n// =============================================================================\nexport const STRUCTURAL_ERROR_CODES = [\n  // CBOR decode layer. A single code covers every canonical-decode failure —\n  // malformed/truncated bytes, indefinite-length encodings, non-canonical\n  // (unsorted) map-key ordering, duplicate map keys, non-minimal integers, and\n  // invalid UTF-8 — by design (no separate duplicate-key code).\n  'MALFORMED_CBOR',\n  // Generic schema-layer\n  'SCHEMA_TYPE_MISMATCH',\n  'SCHEMA_MISSING_REQUIRED',\n  'SCHEMA_UNKNOWN_FIELD',\n  'SCHEMA_INVALID_LITERAL',\n  'SCHEMA_EMPTY_RECORD',\n  // Hash-map\n  'HASH_DIGEST_LENGTH_MISMATCH',\n  'UNSUPPORTED_HASH_ALG',\n  // Top-level `merkle[]`\n  'UNSUPPORTED_MERKLE_COMMIT_ALG',\n  // URI / chunking. A chunk whose bytes do not reconstruct to valid UTF-8\n  // surfaces as MALFORMED_CBOR at decode (cbor2 rejects invalid-UTF-8 tstr)\n  // or, in the residual reconstruct guard, as INVALID_URI — there is no\n  // separate codepoint-split code.\n  'INVALID_URI',\n  'CHUNK_TOO_LARGE',\n  // Encryption envelope\n  'UNAUTHENTICATED_CIPHER_FORBIDDEN',\n  'UNSUPPORTED_AEAD_ALG',\n  'NONCE_LENGTH_MISMATCH',\n  'UNSUPPORTED_ENVELOPE_SCHEME',\n  'ENC_SLOTS_EMPTY',\n  'ENC_SLOT_INVALID_SHAPE',\n  'ENC_SLOTS_DUPLICATE_KEM_MATERIAL',\n  'ENC_SLOTS_TOO_MANY',\n  'ENC_ENVELOPE_TOO_LARGE',\n  'UNSUPPORTED_KEM_ALG',\n  'ENC_KEM_REQUIRED',\n  'KEM_EPK_LENGTH_MISMATCH',\n  'KEM_CT_LENGTH_MISMATCH',\n  'WRAP_LENGTH_MISMATCH',\n  'ENC_SLOTS_MAC_INVALID_LENGTH',\n  'ENC_SLOTS_MAC_REQUIRED',\n  'ENC_SLOTS_REQUIRED',\n  'ENC_EXCLUSIVITY_VIOLATION',\n  'ENC_NO_KEY_PATH',\n  'ENC_REQUIRES_CONTENT_HASH',\n  'ENC_PASSPHRASE_ALG_UNSUPPORTED',\n  'ENC_PASSPHRASE_SALT_TOO_SHORT',\n  'ENC_PASSPHRASE_SALT_TOO_LONG',\n  'ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW',\n  'ENC_PASSPHRASE_PARAMS_EXCEED_POLICY',\n  // Signatures\n  'MALFORMED_SIG_COSE_SIGN1',\n  'SIGNATURE_UNSUPPORTED',\n  'SIG_ENTRY_INVALID_SHAPE',\n  'SIG_ENTRY_KID_COSE_KEY_CONFLICT',\n  'SIG_PRIVATE_KEY_LEAKED',\n  // Supersedence\n  'SUPERSEDES_TX_INVALID_LENGTH',\n  // Forward-compat critical extensions\n  'EXTENSION_UNSUPPORTED_CRITICAL',\n  'CRIT_SHAPE_INVALID',\n] as const;\n\n// =============================================================================\n// Part B — verifier-layer codes\n// Re-exported so downstream verifiers can dispatch on a single union.\n// The structural validator NEVER emits these.\n// =============================================================================\nexport const VERIFIER_ERROR_CODES = [\n  'METADATA_NOT_FOUND',\n  'INSUFFICIENT_CONFIRMATIONS',\n  'SIGNATURE_INVALID',\n  'SIGNER_KEY_UNRESOLVED',\n  'WALLET_ADDRESS_MISMATCH',\n  'URI_TARGET_FORBIDDEN',\n  'URI_INTEGRITY_MISMATCH',\n  'URI_FETCH_FAILED',\n  'CONTENT_UNAVAILABLE',\n  'CIPHERTEXT_UNAVAILABLE',\n  'PROVIDER_UNAVAILABLE',\n  'SERVICE_INDEPENDENCE_VIOLATION',\n  'WRONG_DECRYPTION_INPUT_SHAPE',\n  'WRONG_RECIPIENT_KEY',\n  'TAMPERED_HEADER',\n  'TAMPERED_CIPHERTEXT',\n  'KDF_DERIVATION_FAILED',\n  'SCHEMA_MERKLE_LEAF_COUNT_MISMATCH',\n  'SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED',\n  'SCHEMA_MERKLE_LEAVES_MALFORMED',\n  'MERKLE_ROOT_MISMATCH',\n  'MERKLE_LEAVES_UNAVAILABLE',\n  'MERKLE_LEAVES_INFORMATIVE_FORM',\n  'MERKLE_UNSUPPORTED',\n  'OUT_OF_PROFILE_SKIPPED',\n] as const;\n\nexport const ERROR_CODES = [...STRUCTURAL_ERROR_CODES, ...VERIFIER_ERROR_CODES] as const;\n\nexport type StructuralErrorCode = (typeof STRUCTURAL_ERROR_CODES)[number];\nexport type VerifierErrorCode = (typeof VERIFIER_ERROR_CODES)[number];\nexport type ErrorCode = (typeof ERROR_CODES)[number];\n\n// Severity classification. Codes not listed are `error` by default.\n//\n// `info` — a deliberate non-check (algorithm out of profile, unrecognised\n// signature algorithm at the opt-in informational tier).\n//\n// `warning` — a non-fatal anomaly that occurred at runtime but did not\n// invalidate the record (e.g. a transient gateway failure, partial leaves\n// availability).\n//\n// `MERKLE_UNSUPPORTED` / `OUT_OF_PROFILE_SKIPPED` carry dual severity\n// (`info` when another commitment was validated; `error` for the\n// merkle-only / strict-mode case). The verifier emits the resolved severity\n// per-issue; this map records the default `info` reading.\nexport type Severity = 'error' | 'warning' | 'info';\n\nexport const SEVERITY: Readonly<Record<ErrorCode, Severity>> = Object.freeze({\n  // --- Part A ---\n  MALFORMED_CBOR: 'error',\n  SCHEMA_TYPE_MISMATCH: 'error',\n  SCHEMA_MISSING_REQUIRED: 'error',\n  SCHEMA_UNKNOWN_FIELD: 'error',\n  SCHEMA_INVALID_LITERAL: 'error',\n  SCHEMA_EMPTY_RECORD: 'error',\n  HASH_DIGEST_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_HASH_ALG: 'error',\n  UNSUPPORTED_MERKLE_COMMIT_ALG: 'error',\n  INVALID_URI: 'error',\n  CHUNK_TOO_LARGE: 'error',\n  UNAUTHENTICATED_CIPHER_FORBIDDEN: 'error',\n  UNSUPPORTED_AEAD_ALG: 'error',\n  NONCE_LENGTH_MISMATCH: 'error',\n  UNSUPPORTED_ENVELOPE_SCHEME: 'error',\n  ENC_SLOTS_EMPTY: 'error',\n  ENC_SLOT_INVALID_SHAPE: 'error',\n  ENC_SLOTS_DUPLICATE_KEM_MATERIAL: 'error',\n  ENC_SLOTS_TOO_MANY: 'error',\n  ENC_ENVELOPE_TOO_LARGE: 'error',\n  UNSUPPORTED_KEM_ALG: 'error',\n  ENC_KEM_REQUIRED: 'error',\n  KEM_EPK_LENGTH_MISMATCH: 'error',\n  KEM_CT_LENGTH_MISMATCH: 'error',\n  WRAP_LENGTH_MISMATCH: 'error',\n  ENC_SLOTS_MAC_INVALID_LENGTH: 'error',\n  ENC_SLOTS_MAC_REQUIRED: 'error',\n  ENC_SLOTS_REQUIRED: 'error',\n  ENC_EXCLUSIVITY_VIOLATION: 'error',\n  ENC_NO_KEY_PATH: 'error',\n  ENC_REQUIRES_CONTENT_HASH: 'error',\n  ENC_PASSPHRASE_ALG_UNSUPPORTED: 'error',\n  ENC_PASSPHRASE_SALT_TOO_SHORT: 'error',\n  ENC_PASSPHRASE_SALT_TOO_LONG: 'error',\n  ENC_PASSPHRASE_ARGON2_PARAMS_TOO_LOW: 'error',\n  ENC_PASSPHRASE_PARAMS_EXCEED_POLICY: 'error',\n  MALFORMED_SIG_COSE_SIGN1: 'error',\n  SIGNATURE_UNSUPPORTED: 'info',\n  SIG_ENTRY_INVALID_SHAPE: 'error',\n  SIG_ENTRY_KID_COSE_KEY_CONFLICT: 'error',\n  SIG_PRIVATE_KEY_LEAKED: 'error',\n  SUPERSEDES_TX_INVALID_LENGTH: 'error',\n  EXTENSION_UNSUPPORTED_CRITICAL: 'error',\n  CRIT_SHAPE_INVALID: 'error',\n  // --- Part B ---\n  METADATA_NOT_FOUND: 'error',\n  INSUFFICIENT_CONFIRMATIONS: 'info',\n  SIGNATURE_INVALID: 'error',\n  SIGNER_KEY_UNRESOLVED: 'error',\n  WALLET_ADDRESS_MISMATCH: 'error',\n  URI_TARGET_FORBIDDEN: 'error',\n  URI_INTEGRITY_MISMATCH: 'error',\n  URI_FETCH_FAILED: 'warning',\n  CONTENT_UNAVAILABLE: 'error',\n  CIPHERTEXT_UNAVAILABLE: 'error',\n  PROVIDER_UNAVAILABLE: 'error',\n  SERVICE_INDEPENDENCE_VIOLATION: 'error',\n  WRONG_DECRYPTION_INPUT_SHAPE: 'error',\n  WRONG_RECIPIENT_KEY: 'error',\n  TAMPERED_HEADER: 'error',\n  TAMPERED_CIPHERTEXT: 'error',\n  KDF_DERIVATION_FAILED: 'error',\n  SCHEMA_MERKLE_LEAF_COUNT_MISMATCH: 'error',\n  SCHEMA_MERKLE_LEAVES_FORMAT_UNSUPPORTED: 'error',\n  SCHEMA_MERKLE_LEAVES_MALFORMED: 'error',\n  MERKLE_ROOT_MISMATCH: 'error',\n  MERKLE_LEAVES_UNAVAILABLE: 'warning',\n  MERKLE_LEAVES_INFORMATIVE_FORM: 'info',\n  // Dual-severity — default reading is `info`; the verifier promotes to\n  // `error` for merkle-only records (no `items[]` content claim was\n  // validated in the same record).\n  MERKLE_UNSUPPORTED: 'info',\n  // Dual-severity — default reading is `info` (render mode); strict\n  // end-to-end verifiers promote to `error`.\n  OUT_OF_PROFILE_SKIPPED: 'info',\n});\n\nexport function severityOf(code: ErrorCode): Severity {\n  return SEVERITY[code];\n}\n"]}

package/dist/index.cjs

@@ -2390,6 +2390,60 @@ function decodeCoseSign1(bytes) {
   };
 }
 
+// ../crypto-core/dist/sealed-poe.js
+var CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX = new TextEncoder().encode(
+  "cardano-poe-slots-transcript-v1"
+);
+var CARDANO_POE_HKDF_INFO_PAYLOAD = new TextEncoder().encode(
+  "cardano-poe-payload-v1"
+);
+var CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE = new TextEncoder().encode(
+  "cardano-poe-payload-passphrase-v1"
+);
+var CARDANO_POE_XWING_KEK_SALT_PREFIX = new TextEncoder().encode(
+  "cardano-poe-xwing-kek-salt-v1"
+);
+if (CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX.length !== 31) {
+  throw new Error(
+    "CARDANO_POE_SLOTS_TRANSCRIPT_PREFIX byte-length invariant violated (expected 31)"
+  );
+}
+if (CARDANO_POE_HKDF_INFO_PAYLOAD.length !== 22) {
+  throw new Error("CARDANO_POE_HKDF_INFO_PAYLOAD byte-length invariant violated (expected 22)");
+}
+if (CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE.length !== 33) {
+  throw new Error(
+    "CARDANO_POE_HKDF_INFO_PAYLOAD_PASSPHRASE byte-length invariant violated (expected 33)"
+  );
+}
+if (CARDANO_POE_XWING_KEK_SALT_PREFIX.length !== 29) {
+  throw new Error("CARDANO_POE_XWING_KEK_SALT_PREFIX byte-length invariant violated (expected 29)");
+}
+var MAX_SLOTS = 1024;
+var MAX_DECODED_ENVELOPE_BYTES = 65536;
+var CARDANO_POE_HKDF_INFO_KEK = new TextEncoder().encode("cardano-poe-kek-v1");
+var CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519 = new TextEncoder().encode(
+  "cardano-poe-kek-mlkem768x25519-v1"
+);
+var CARDANO_POE_HKDF_INFO_SLOTS_MAC = new TextEncoder().encode(
+  "cardano-poe-slots-mac-v1"
+);
+var ZERO_NONCE_12 = new Uint8Array(12);
+if (CARDANO_POE_HKDF_INFO_KEK.length !== 18) {
+  throw new Error("CARDANO_POE_HKDF_INFO_KEK byte-length invariant violated (expected 18)");
+}
+if (CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519.length !== 33) {
+  throw new Error(
+    "CARDANO_POE_HKDF_INFO_KEK_MLKEM768X25519 byte-length invariant violated (expected 33)"
+  );
+}
+if (CARDANO_POE_HKDF_INFO_SLOTS_MAC.length !== 24) {
+  throw new Error("CARDANO_POE_HKDF_INFO_SLOTS_MAC byte-length invariant violated (expected 24)");
+}
+if (ZERO_NONCE_12.length !== 12) {
+  throw new Error("ZERO_NONCE_12 byte-length invariant violated (expected 12)");
+}
+
 // src/chunked.ts
 var CHUNK_MAX_BYTES = 64;
 var UTF8_ENCODER2 = new TextEncoder();
@@ -2472,6 +2526,9 @@ var STRUCTURAL_ERROR_CODES = [
   "UNSUPPORTED_ENVELOPE_SCHEME",
   "ENC_SLOTS_EMPTY",
   "ENC_SLOT_INVALID_SHAPE",
+  "ENC_SLOTS_DUPLICATE_KEM_MATERIAL",
+  "ENC_SLOTS_TOO_MANY",
+  "ENC_ENVELOPE_TOO_LARGE",
   "UNSUPPORTED_KEM_ALG",
   "ENC_KEM_REQUIRED",
   "KEM_EPK_LENGTH_MISMATCH",
@@ -2547,6 +2604,9 @@ var SEVERITY = Object.freeze({
   UNSUPPORTED_ENVELOPE_SCHEME: "error",
   ENC_SLOTS_EMPTY: "error",
   ENC_SLOT_INVALID_SHAPE: "error",
+  ENC_SLOTS_DUPLICATE_KEM_MATERIAL: "error",
+  ENC_SLOTS_TOO_MANY: "error",
+  ENC_ENVELOPE_TOO_LARGE: "error",
   UNSUPPORTED_KEM_ALG: "error",
   ENC_KEM_REQUIRED: "error",
   KEM_EPK_LENGTH_MISMATCH: "error",
@@ -2627,6 +2687,8 @@ var KEM_FIELD_LENGTH_CODE = {
   epk: "KEM_EPK_LENGTH_MISMATCH",
   kem_ct: "KEM_CT_LENGTH_MISMATCH"
 };
+var NONCE_LENGTH = 24;
+var SLOTS_MAC_LENGTH = 32;
 var PASSPHRASE_KDF_ALGS = /* @__PURE__ */ new Set(["argon2id"]);
 var KNOWN_SIG_ALG_IDS = /* @__PURE__ */ new Set([-8, -19]);
 function validatePoeRecord(bytes) {
@@ -2943,24 +3005,62 @@ function checkItemEnc(item, idx, errors) {
     );
   }
   if (hasSlots) {
-    if (enc.slots.length < 1) {
+    const slotCount = enc.slots.length;
+    if (slotCount < 1) {
       errors.push(
-        issue("ENC_SLOTS_EMPTY", [...basePath, "slots"], `slots length ${enc.slots.length} < 1`)
+        issue("ENC_SLOTS_EMPTY", [...basePath, "slots"], `slots length ${slotCount} < 1`)
       );
-    }
-    const descriptor = enc.kem !== void 0 ? KEM_SLOT_DESCRIPTORS[enc.kem] : void 0;
-    if (descriptor !== void 0) {
-      const rawSlotKeys = rawSlotKeySets(item.enc);
-      enc.slots.forEach((slot, si) => {
-        checkSlotShape(
-          slot,
-          rawSlotKeys[si] ?? /* @__PURE__ */ new Set(),
-          descriptor,
-          enc.kem,
-          [...basePath, "slots", si],
-          errors
-        );
-      });
+    } else if (slotCount > MAX_SLOTS) {
+      errors.push(
+        issue(
+          "ENC_SLOTS_TOO_MANY",
+          [...basePath, "slots"],
+          `slots length ${slotCount} exceeds MAX_SLOTS=${MAX_SLOTS}`
+        )
+      );
+    } else {
+      const descriptor = enc.kem !== void 0 ? KEM_SLOT_DESCRIPTORS[enc.kem] : void 0;
+      if (descriptor !== void 0) {
+        const rawSlotKeys = rawSlotKeySets(item.enc);
+        const seenKemMaterial = /* @__PURE__ */ new Set();
+        enc.slots.forEach((slot, si) => {
+          const slotPath = [...basePath, "slots", si];
+          checkSlotShape(
+            slot,
+            rawSlotKeys[si] ?? /* @__PURE__ */ new Set(),
+            descriptor,
+            enc.kem,
+            slotPath,
+            errors
+          );
+          const material = slotKemMaterial(slot, descriptor);
+          if (material !== void 0) {
+            const key = bytesToHex2(material);
+            if (seenKemMaterial.has(key)) {
+              errors.push(
+                issue(
+                  "ENC_SLOTS_DUPLICATE_KEM_MATERIAL",
+                  [...slotPath, descriptor.field],
+                  `slot ${si} ${descriptor.field} duplicates an earlier slot \u2014 per-slot KEK uniqueness is violated`
+                )
+              );
+            } else {
+              seenKemMaterial.add(key);
+            }
+          }
+        });
+        const perSlotBytes = descriptor.fieldLength + descriptor.wrapLength;
+        const decodedEnvelopeBytes = NONCE_LENGTH + SLOTS_MAC_LENGTH + slotCount * perSlotBytes;
+        if (decodedEnvelopeBytes > MAX_DECODED_ENVELOPE_BYTES) {
+          errors.push(
+            issue(
+              "ENC_ENVELOPE_TOO_LARGE",
+              [...basePath, "slots"],
+              `decoded envelope size ${decodedEnvelopeBytes} exceeds MAX_DECODED_ENVELOPE_BYTES=${MAX_DECODED_ENVELOPE_BYTES}`
+            )
+          );
+        }
+      }
     }
   }
   if (hasPassphrase) {
@@ -3117,6 +3217,20 @@ function checkSlotShape(slot, rawKeys, descriptor, kem, slotPath, errors) {
     );
   }
 }
+function slotKemMaterial(slot, descriptor) {
+  if (descriptor.field === "epk") {
+    return slot.epk;
+  }
+  if (slot.kem_ct === void 0) return void 0;
+  return bytesChunkArrayConcat(slot.kem_ct);
+}
+function bytesToHex2(bytes) {
+  let hex = "";
+  for (let i = 0; i < bytes.length; i++) {
+    hex += bytes[i].toString(16).padStart(2, "0");
+  }
+  return hex;
+}
 function rawSlotKeySets(rawEnc) {
   const slots = mapLikeGet(rawEnc, "slots");
   if (!Array.isArray(slots)) return [];