@cello-protocol/protocol-types 0.0.44 → 0.0.46

package/dist/document-proposal.js

@@ -0,0 +1,244 @@
+/**
+ * DOD-DOC-HANDSHAKE-1 — the document PROPOSAL envelope (§16.3).
+ *
+ * A distinct wire type from `document-envelope.ts`'s UPDATE envelope. The two share the word
+ * "envelope" and nothing else: this one is proposed once, consented to once, and its hash becomes
+ * the `document_id` that every subsequent update names.
+ *
+ * **`document_id` is the hash of this envelope** — globally unique with no minting authority and
+ * no coordination round. That is the property that makes the whole scheme federated, and it is why
+ * the proposal must be canonically encodable: two parties that hash it differently are on two
+ * different documents while believing they are on one.
+ *
+ * ── THE SEAM (§3.4, §11.1) ────────────────────────────────────────────────────────────────────
+ *
+ * Three properties are DECLARED in V1 but support exactly one value each, and the pattern is
+ * deliberate — §3.3 chose it for `schema_enforcement` and §16.1 generalized it. Declaring a field
+ * that only accepts one value looks redundant until you need the second value: the field is
+ * already on the wire and already signed, so V2 is a validation change rather than a wire break
+ * that strands every document created before it.
+ *
+ * Refused at BOTH ends — at proposal and again at accept. Not belt-and-braces: the proposer and
+ * the accepter run different builds. A V2 peer proposing `topology: "mesh"` to a V1 peer must be
+ * refused by the V1 accepter, and a V1 proposer must not be able to emit a value it cannot honour.
+ * One-sided validation means whichever side is newer silently decides for both.
+ *
+ * ── THE FEATURE VERSION (§16.7-8) ─────────────────────────────────────────────────────────────
+ *
+ * Alpha owes no backward compatibility, so this is not a negotiation — it is the difference
+ * between a human answer and a timeout. A peer whose client predates documents does not understand
+ * the proposal at all, and without a version the symptom is silence: the proposal is never
+ * answered and the operator sees a hang. `documentFeatureIncompatibility` turns that into "your
+ * peer's client doesn't support shared documents yet — ask them to upgrade".
+ */
+import { createHash } from "node:crypto";
+import { encodeCbor, decodeCbor } from "./cbor.js";
+/** Domain tag in slot 0 of the to-be-signed array. Distinct from the UPDATE envelope's domain. */
+export const DOCUMENT_PROPOSAL_DOMAIN = "CELLO-DOCUMENT-PROPOSAL-v1";
+/**
+ * The document feature version this build speaks. Bumped when the document wire changes in a way
+ * a peer must understand; see `documentFeatureIncompatibility` for what a mismatch produces.
+ */
+export const DOCUMENT_FEATURE_VERSION = 1;
+/** §6 — Tier 1. Tier 2 (attested) is V2; the field exists so V2 is a validation change. */
+export const ASSURANCE_TIER_V1 = "authenticated";
+/** §11 — the pairwise two-document form. Mesh is deferred (§11.1). */
+export const TOPOLOGY_V1 = "hub-and-spoke";
+/**
+ * The canonical to-be-signed preimage: a fixed-order CBOR ARRAY with the domain in slot 0.
+ *
+ * The properties are flattened into their own slots rather than nested as a map. `encodeCbor` is
+ * not deterministic for maps — keys follow insertion order — so a nested `properties` object would
+ * make the signature depend on the order the proposer happened to build it in, and two honest
+ * builds of the same proposal would produce different `document_id`s. For this envelope that is
+ * worse than a bad signature: the id IS the hash, so the two parties would be on two documents.
+ */
+export function buildDocumentProposalTbs(env, opts = {}) {
+    const preimage = encodeCbor([
+        DOCUMENT_PROPOSAL_DOMAIN,
+        env.feature_version,
+        env.proposer_agent_id,
+        env.peer_agent_id,
+        env.document_type,
+        env.properties.assurance_tier,
+        env.properties.schema_enforcement,
+        env.properties.topology,
+        env.properties.append_only,
+        env.starting_content,
+        env.nonce,
+        // BIGINT past 0xffffffff — the same coercion three sibling builders carry and which
+        // primary-transfer.ts names as a defect it shipped without. cbor-x encodes a JS number that
+        // large as an IEEE float64 (`fb`), not a uint64 (`1b`), so any implementation encoding RFC
+        // 8949-canonically would compute a DIFFERENT document_id from the same proposal — and for this
+        // envelope the id IS the hash, so the two parties would be on two documents.
+        //
+        // Fixed now rather than left as a known wart: M14 is unreleased, nothing is wired, and no
+        // proposal has ever been signed. The frozen vector below is reissued deliberately, which is
+        // exactly the case its own comment describes.
+        typeof env.proposed_at_ms === "number" && env.proposed_at_ms > 0xffffffff
+            ? BigInt(env.proposed_at_ms)
+            : env.proposed_at_ms,
+    ]);
+    if (opts.preHash === false)
+        return preimage;
+    return new Uint8Array(createHash("sha256").update(preimage).digest());
+}
+/**
+ * `document_id` = the hash of the proposal envelope (§16.3).
+ *
+ * Over the same preimage that is signed, and therefore NOT over the signature — so the id a party
+ * computes is the id of the thing whose signature it verified, and re-signing cannot change the
+ * identity of an already-accepted document.
+ */
+export function documentIdFromProposal(env) {
+    return createHash("sha256")
+        .update(buildDocumentProposalTbs(env, { preHash: false }))
+        .digest("hex");
+}
+/**
+ * Refuse any seam value this build cannot honour, at proposal AND at accept.
+ *
+ * Returns the reason, or null when the properties are acceptable. A REASON rather than a boolean
+ * because the operator on the refusing side has to be able to tell "your peer asked for mesh
+ * topology, which this version does not support" from a generic refusal — a handshake that fails
+ * without saying which property failed is indistinguishable from the peer being unreachable.
+ */
+export function seamViolation(props) {
+    if (props.assurance_tier !== ASSURANCE_TIER_V1) {
+        return (`document_seam_assurance_tier: this version supports "${ASSURANCE_TIER_V1}" only, and the ` +
+            `proposal asks for "${props.assurance_tier}" — attested documents (§6 Tier 2) are not yet built`);
+    }
+    if (props.schema_enforcement !== false) {
+        return ("document_seam_schema_enforcement: this version supports schema_enforcement: false only — " +
+            "schema-as-first-update validation (§3.3) is not yet built");
+    }
+    if (props.topology !== TOPOLOGY_V1) {
+        return (`document_seam_topology: this version supports "${TOPOLOGY_V1}" only, and the proposal asks ` +
+            `for "${props.topology}" — mesh documents (§11.1) are not yet built`);
+    }
+    return null;
+}
+/**
+ * A human answer for a version mismatch, or null when the peer is compatible.
+ *
+ * Deliberately phrased for the operator rather than for a log: the alternative to this string is a
+ * proposal that is never answered, which surfaces as a hang and gets diagnosed as a network fault.
+ */
+export function documentFeatureIncompatibility(peerFeatureVersion) {
+    if (peerFeatureVersion === null) {
+        return ("your peer's client doesn't support shared documents yet — ask them to upgrade to a version " +
+            "that speaks the document protocol");
+    }
+    if (peerFeatureVersion > DOCUMENT_FEATURE_VERSION) {
+        return (`your peer's client speaks document feature version ${peerFeatureVersion} and this one ` +
+            `speaks ${DOCUMENT_FEATURE_VERSION} — upgrade this client to collaborate with them`);
+    }
+    if (peerFeatureVersion < DOCUMENT_FEATURE_VERSION) {
+        return (`your peer's client speaks document feature version ${peerFeatureVersion} and this one ` +
+            `speaks ${DOCUMENT_FEATURE_VERSION} — ask them to upgrade`);
+    }
+    return null;
+}
+export function encodeDocumentProposal(env) {
+    return encodeCbor({
+        type: env.type,
+        feature_version: env.feature_version,
+        proposer_agent_id: env.proposer_agent_id,
+        peer_agent_id: env.peer_agent_id,
+        document_type: env.document_type,
+        properties: {
+            assurance_tier: env.properties.assurance_tier,
+            schema_enforcement: env.properties.schema_enforcement,
+            topology: env.properties.topology,
+            append_only: env.properties.append_only,
+        },
+        starting_content: env.starting_content,
+        nonce: env.nonce,
+        proposed_at_ms: env.proposed_at_ms,
+        signature: env.signature,
+    });
+}
+function present(map, field) {
+    // `in`, not a nullish check — see document-envelope.ts. A defaulted seam field is a property the
+    // peer never actually declared, admitted under this build's own preference.
+    if (!(field in map)) {
+        throw new Error(`document_proposal_missing_field: ${field} is mandatory and was not present`);
+    }
+    return map[field];
+}
+function str(map, field) {
+    const v = present(map, field);
+    if (typeof v !== "string" || v.length === 0) {
+        throw new Error(`document_proposal_field_type: ${field} must be a non-empty text string`);
+    }
+    return v;
+}
+function bytes(map, field) {
+    const v = present(map, field);
+    if (!(v instanceof Uint8Array)) {
+        throw new Error(`document_proposal_field_type: ${field} must be a CBOR byte string`);
+    }
+    // COPIED — cbor-x returns byte strings as views into the decoded buffer, so a caller reusing a
+    // pooled read buffer would mutate the starting content after it was validated and hashed.
+    return new Uint8Array(v);
+}
+/**
+ * Decode and validate. Does NOT check the seam — `seamViolation` is called separately at both the
+ * proposal and the accept step, because a decoder that refused seam values would make a
+ * V2 proposal undecodable and therefore unanswerable, which is exactly the silent hang the feature
+ * version exists to replace.
+ */
+export function decodeDocumentProposal(input) {
+    const decoded = decodeCbor(input);
+    if (typeof decoded !== "object" || decoded === null || Array.isArray(decoded)) {
+        throw new Error("document_proposal_malformed: not a CBOR map");
+    }
+    const map = decoded;
+    const type = str(map, "type");
+    if (type !== "document_proposal") {
+        throw new Error(`document_proposal_type: expected document_proposal, got ${type}`);
+    }
+    const featureVersion = present(map, "feature_version");
+    if (typeof featureVersion !== "number" || !Number.isInteger(featureVersion) || featureVersion < 1) {
+        throw new Error(`document_proposal_feature_version: must be a positive integer, got ${String(featureVersion)}`);
+    }
+    const rawProps = present(map, "properties");
+    if (typeof rawProps !== "object" || rawProps === null || Array.isArray(rawProps)) {
+        throw new Error("document_proposal_properties: must be a CBOR map");
+    }
+    const p = rawProps;
+    const schemaEnforcement = present(p, "schema_enforcement");
+    if (typeof schemaEnforcement !== "boolean") {
+        throw new Error("document_proposal_field_type: properties.schema_enforcement must be a boolean");
+    }
+    const appendOnly = present(p, "append_only");
+    if (typeof appendOnly !== "boolean") {
+        throw new Error("document_proposal_field_type: properties.append_only must be a boolean");
+    }
+    const startingContent = present(map, "starting_content");
+    if (startingContent !== null && !(startingContent instanceof Uint8Array)) {
+        throw new Error("document_proposal_field_type: starting_content must be a CBOR byte string or explicit null");
+    }
+    const proposedAt = present(map, "proposed_at_ms");
+    if (typeof proposedAt !== "number" || !Number.isInteger(proposedAt)) {
+        throw new Error(`document_proposal_field_type: proposed_at_ms must be an integer`);
+    }
+    return {
+        type: "document_proposal",
+        feature_version: featureVersion,
+        proposer_agent_id: str(map, "proposer_agent_id"),
+        peer_agent_id: str(map, "peer_agent_id"),
+        document_type: str(map, "document_type"),
+        properties: {
+            assurance_tier: str(p, "assurance_tier"),
+            schema_enforcement: schemaEnforcement,
+            topology: str(p, "topology"),
+            append_only: appendOnly,
+        },
+        starting_content: startingContent === null ? null : new Uint8Array(startingContent),
+        nonce: bytes(map, "nonce"),
+        proposed_at_ms: proposedAt,
+        signature: bytes(map, "signature"),
+    };
+}
+//# sourceMappingURL=document-proposal.js.map

package/dist/document-proposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-proposal.js","sourceRoot":"","sources":["../src/document-proposal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,kGAAkG;AAClG,MAAM,CAAC,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAErE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAE1C,2FAA2F;AAC3F,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AACjD,sEAAsE;AACtE,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AA2C3C;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,GAA6B,EAC7B,OAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,wBAAwB;QACxB,GAAG,CAAC,eAAe;QACnB,GAAG,CAAC,iBAAiB;QACrB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,aAAa;QACjB,GAAG,CAAC,UAAU,CAAC,cAAc;QAC7B,GAAG,CAAC,UAAU,CAAC,kBAAkB;QACjC,GAAG,CAAC,UAAU,CAAC,QAAQ;QACvB,GAAG,CAAC,UAAU,CAAC,WAAW;QAC1B,GAAG,CAAC,gBAAgB;QACpB,GAAG,CAAC,KAAK;QACT,oFAAoF;QACpF,4FAA4F;QAC5F,2FAA2F;QAC3F,+FAA+F;QAC/F,6EAA6E;QAC7E,EAAE;QACF,0FAA0F;QAC1F,4FAA4F;QAC5F,8CAA8C;QAC9C,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,GAAG,UAAU;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;YAC5B,CAAC,CAAC,GAAG,CAAC,cAAc;KACvB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,wBAAwB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;SACzD,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,KAAK,CAAC,cAAc,KAAK,iBAAiB,EAAE,CAAC;QAC/C,OAAO,CACL,wDAAwD,iBAAiB,kBAAkB;YAC3F,sBAAsB,KAAK,CAAC,cAAc,sDAAsD,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;QACvC,OAAO,CACL,2FAA2F;YAC3F,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;QACnC,OAAO,CACL,kDAAkD,WAAW,gCAAgC;YAC7F,QAAQ,KAAK,CAAC,QAAQ,8CAA8C,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAAC,kBAAiC;IAC9E,IAAI,kBAAkB,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CACL,6FAA6F;YAC7F,mCAAmC,CACpC,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,iDAAiD,CACpF,CAAC;IACJ,CAAC;IACD,IAAI,kBAAkB,GAAG,wBAAwB,EAAE,CAAC;QAClD,OAAO,CACL,sDAAsD,kBAAkB,gBAAgB;YACxF,UAAU,wBAAwB,wBAAwB,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,GAA6B;IAClE,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,UAAU,CAAC,cAAc;YAC7C,kBAAkB,EAAE,GAAG,CAAC,UAAU,CAAC,kBAAkB;YACrD,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,QAAQ;YACjC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW;SACxC;QACD,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;QACtC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,KAAa;IAC1D,iGAAiG;IACjG,4EAA4E;IAC5E,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,oCAAoC,KAAK,mCAAmC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,GAAG,CAAC,GAA4B,EAAE,KAAa;IACtD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,kCAAkC,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,GAA4B,EAAE,KAAa;IACxD,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,6BAA6B,CAAC,CAAC;IACvF,CAAC;IACD,+FAA+F;IAC/F,0FAA0F;IAC1F,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB;IACtD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAE/C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC9B,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2DAA2D,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACvD,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CACb,sEAAsE,MAAM,CAAC,cAAc,CAAC,EAAE,CAC/F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,CAAC,GAAG,QAAmC,CAAC;IAC9C,MAAM,iBAAiB,GAAG,OAAO,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC3D,IAAI,OAAO,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IAC7C,IAAI,OAAO,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IACzD,IAAI,eAAe,KAAK,IAAI,IAAI,CAAC,CAAC,eAAe,YAAY,UAAU,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,eAAe,EAAE,cAAc;QAC/B,iBAAiB,EAAE,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC;QAChD,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,aAAa,EAAE,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC;QACxC,UAAU,EAAE;YACV,cAAc,EAAE,GAAG,CAAC,CAAC,EAAE,gBAAgB,CAAC;YACxC,kBAAkB,EAAE,iBAAiB;YACrC,QAAQ,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC;YAC5B,WAAW,EAAE,UAAU;SACxB;QACD,gBAAgB,EAAE,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC;QACnF,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC;QAC1B,cAAc,EAAE,UAAU;QAC1B,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/document-rejection-envelope.d.ts

@@ -0,0 +1,87 @@
+/**
+ * DOD-DOC-REJECT-2 — the rejection's signed preimage, and its wire type.
+ *
+ * A `0x05` rejection leaf has carried a `signature` field since REJECT-1, and nothing defined what
+ * that signature was OVER. The field was required — rightly, because an all-zero placeholder in an
+ * immutable log is indistinguishable from a real signature that fails to verify — but with no
+ * canonical to-be-signed structure it could only ever be filled dishonestly. Writing the
+ * composition-root signer is what surfaced it: the only thing available to sign was an empty buffer.
+ *
+ * ── WHAT A REJECTION HAS TO BIND ──────────────────────────────────────────────────────────────
+ *
+ * A rejection is a claim with consequences for the other party: they stop retrying, roll back local
+ * work, and supersede. So it binds
+ *
+ *   `document_id`            — a rejection cannot be moved to another document,
+ *   `rejected_envelope_hash` — nor to another envelope,
+ *   `reason`                 — the sender acts on it, so it must not be substitutable,
+ *   `rejecting_agent_id`     — who refused; the counterpart of the ack's `acker_agent_id`,
+ *   `round`                  — which retry this is. Unbound, a captured round-1 rejection replayed
+ *                              twice more would drive a document to `stalled` without the rejecting
+ *                              party ever having refused again.
+ *
+ * ── WHY IT IS A SEPARATE TYPE FROM THE ACK ────────────────────────────────────────────────────
+ *
+ * They look similar and are not the same statement. An ACK answers "did you take my envelope" and
+ * settles delivery. A REJECTION is a §3.2 protocol act that goes in the log as a leaf, carries a
+ * retry round, and is what supersession resolves. One type carrying both would need a mode flag,
+ * and a mode flag on a signed structure is how a signature over one meaning gets read as the other.
+ */
+/** Domain tag in slot 0. Distinct from the update, proposal and ack domains. */
+export declare const DOCUMENT_REJECTION_DOMAIN = "CELLO-DOCUMENT-REJECTION-v1";
+/** On the wire, so a version skew is DETECTED rather than surfacing as a signature failure. */
+export declare const DOCUMENT_REJECTION_VERSION = 1;
+/** Peer-controlled display text; capped for the same reason the ack's reason is. */
+export declare const MAX_REJECTION_DETAIL_LENGTH = 500;
+export interface DocumentRejectionEnvelope {
+    type: "document_rejection";
+    rejection_version: number;
+    document_id: string;
+    /** The envelope being refused. */
+    rejected_envelope_hash: string;
+    /** Who refused. The counterpart of the ack's `acker_agent_id`. */
+    rejecting_agent_id: string;
+    /** The §3.2 machine-readable reason the sender acts on. */
+    reason: string;
+    detail?: string;
+    /**
+     * Which retry round this is (1-based). SIGNED, because unbound a captured round-1 rejection
+     * replayed twice more drives the document to `stalled` without the rejecting party ever having
+     * refused again.
+     */
+    round: number;
+    rejected_at_ms: number;
+    /** Ed25519 (RFC 8032) over `buildDocumentRejectionTbs`. */
+    signature: Uint8Array;
+}
+/**
+ * The canonical to-be-signed preimage: a fixed-order CBOR ARRAY with the domain in slot 0.
+ *
+ * An array rather than a map, for the reason `cbor.ts` gives — this encoder is deliberately not
+ * deterministic for maps, so a map preimage would make the signature depend on the order the
+ * rejecting party happened to build the object in.
+ *
+ * `detail` is encoded as explicit `null` when absent so the slot is always occupied and no field's
+ * meaning depends on whether the one before it was present. The timestamp is coerced to a BigInt
+ * past `0xffffffff`, because cbor-x encodes a JS number that large as an IEEE float64 rather than a
+ * uint64 — measured on the ack, where it would have made a genuine signature read as a forgery to
+ * any implementation encoding canonically.
+ */
+export declare function buildDocumentRejectionTbs(env: DocumentRejectionEnvelope, opts?: {
+    preHash?: boolean;
+}): Uint8Array;
+/**
+ * The rejection's identity — the `0x05` leaf's envelope hash.
+ *
+ * Over the same preimage that is signed, so the leaf commits to exactly the bytes whose signature
+ * was verified, and excludes the signature so re-signing does not orphan anything pointing at it.
+ *
+ * This replaces REJECT-1's local `sha256("rejection:" + hash + reason + nonce)` construction, which
+ * was a placeholder: it bound no signature, no round, and no rejecting party.
+ */
+export declare function documentRejectionHash(env: DocumentRejectionEnvelope): string;
+/** The cross-field rules, applied on BOTH encode and decode so the two cannot drift. */
+export declare function assertDocumentRejectionConsistent(env: DocumentRejectionEnvelope): void;
+export declare function encodeDocumentRejection(env: DocumentRejectionEnvelope): Uint8Array;
+export declare function decodeDocumentRejection(bytes: Uint8Array): DocumentRejectionEnvelope;
+//# sourceMappingURL=document-rejection-envelope.d.ts.map

package/dist/document-rejection-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-rejection-envelope.d.ts","sourceRoot":"","sources":["../src/document-rejection-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAKH,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,gCAAgC,CAAC;AAEvE,+FAA+F;AAC/F,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,oFAAoF;AACpF,eAAO,MAAM,2BAA2B,MAAM,CAAC;AAI/C,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,kCAAkC;IAClC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kEAAkE;IAClE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,2DAA2D;IAC3D,SAAS,EAAE,UAAU,CAAC;CACvB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,yBAAyB,EAC9B,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAO,GAC/B,UAAU,CAiBZ;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,yBAAyB,GAAG,MAAM,CAI5E;AAED,wFAAwF;AACxF,wBAAgB,iCAAiC,CAAC,GAAG,EAAE,yBAAyB,GAAG,IAAI,CActF;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,yBAAyB,GAAG,UAAU,CAclF;AAWD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,GAAG,yBAAyB,CA8EpF"}

package/dist/document-rejection-envelope.js

@@ -0,0 +1,189 @@
+/**
+ * DOD-DOC-REJECT-2 — the rejection's signed preimage, and its wire type.
+ *
+ * A `0x05` rejection leaf has carried a `signature` field since REJECT-1, and nothing defined what
+ * that signature was OVER. The field was required — rightly, because an all-zero placeholder in an
+ * immutable log is indistinguishable from a real signature that fails to verify — but with no
+ * canonical to-be-signed structure it could only ever be filled dishonestly. Writing the
+ * composition-root signer is what surfaced it: the only thing available to sign was an empty buffer.
+ *
+ * ── WHAT A REJECTION HAS TO BIND ──────────────────────────────────────────────────────────────
+ *
+ * A rejection is a claim with consequences for the other party: they stop retrying, roll back local
+ * work, and supersede. So it binds
+ *
+ *   `document_id`            — a rejection cannot be moved to another document,
+ *   `rejected_envelope_hash` — nor to another envelope,
+ *   `reason`                 — the sender acts on it, so it must not be substitutable,
+ *   `rejecting_agent_id`     — who refused; the counterpart of the ack's `acker_agent_id`,
+ *   `round`                  — which retry this is. Unbound, a captured round-1 rejection replayed
+ *                              twice more would drive a document to `stalled` without the rejecting
+ *                              party ever having refused again.
+ *
+ * ── WHY IT IS A SEPARATE TYPE FROM THE ACK ────────────────────────────────────────────────────
+ *
+ * They look similar and are not the same statement. An ACK answers "did you take my envelope" and
+ * settles delivery. A REJECTION is a §3.2 protocol act that goes in the log as a leaf, carries a
+ * retry round, and is what supersession resolves. One type carrying both would need a mode flag,
+ * and a mode flag on a signed structure is how a signature over one meaning gets read as the other.
+ */
+import { createHash } from "node:crypto";
+import { encodeCbor, decodeCbor } from "./cbor.js";
+/** Domain tag in slot 0. Distinct from the update, proposal and ack domains. */
+export const DOCUMENT_REJECTION_DOMAIN = "CELLO-DOCUMENT-REJECTION-v1";
+/** On the wire, so a version skew is DETECTED rather than surfacing as a signature failure. */
+export const DOCUMENT_REJECTION_VERSION = 1;
+/** Peer-controlled display text; capped for the same reason the ack's reason is. */
+export const MAX_REJECTION_DETAIL_LENGTH = 500;
+const HEX32 = /^[0-9a-f]{64}$/;
+/**
+ * The canonical to-be-signed preimage: a fixed-order CBOR ARRAY with the domain in slot 0.
+ *
+ * An array rather than a map, for the reason `cbor.ts` gives — this encoder is deliberately not
+ * deterministic for maps, so a map preimage would make the signature depend on the order the
+ * rejecting party happened to build the object in.
+ *
+ * `detail` is encoded as explicit `null` when absent so the slot is always occupied and no field's
+ * meaning depends on whether the one before it was present. The timestamp is coerced to a BigInt
+ * past `0xffffffff`, because cbor-x encodes a JS number that large as an IEEE float64 rather than a
+ * uint64 — measured on the ack, where it would have made a genuine signature read as a forgery to
+ * any implementation encoding canonically.
+ */
+export function buildDocumentRejectionTbs(env, opts = {}) {
+    assertDocumentRejectionConsistent(env);
+    const preimage = encodeCbor([
+        DOCUMENT_REJECTION_DOMAIN,
+        env.rejection_version,
+        env.document_id,
+        env.rejected_envelope_hash,
+        env.rejecting_agent_id,
+        env.reason,
+        env.detail ?? null,
+        env.round,
+        typeof env.rejected_at_ms === "number" && env.rejected_at_ms > 0xffffffff
+            ? BigInt(env.rejected_at_ms)
+            : env.rejected_at_ms,
+    ]);
+    if (opts.preHash === false)
+        return preimage;
+    return new Uint8Array(createHash("sha256").update(preimage).digest());
+}
+/**
+ * The rejection's identity — the `0x05` leaf's envelope hash.
+ *
+ * Over the same preimage that is signed, so the leaf commits to exactly the bytes whose signature
+ * was verified, and excludes the signature so re-signing does not orphan anything pointing at it.
+ *
+ * This replaces REJECT-1's local `sha256("rejection:" + hash + reason + nonce)` construction, which
+ * was a placeholder: it bound no signature, no round, and no rejecting party.
+ */
+export function documentRejectionHash(env) {
+    return createHash("sha256")
+        .update(buildDocumentRejectionTbs(env, { preHash: false }))
+        .digest("hex");
+}
+/** The cross-field rules, applied on BOTH encode and decode so the two cannot drift. */
+export function assertDocumentRejectionConsistent(env) {
+    if (env.reason.length === 0) {
+        // The sender is being told to stop and supersede; without the reason it cannot know what to
+        // change. The whole rejection protocol exists to avoid exactly that.
+        throw new Error("document_rejection_reason: a rejection must carry its reason");
+    }
+    if (!Number.isInteger(env.round) || env.round < 1) {
+        throw new Error(`document_rejection_round: must be a positive integer, got ${env.round}`);
+    }
+    if (env.detail !== undefined && env.detail.length > MAX_REJECTION_DETAIL_LENGTH) {
+        throw new Error(`document_rejection_detail: at most ${MAX_REJECTION_DETAIL_LENGTH} characters, got ${env.detail.length}`);
+    }
+}
+export function encodeDocumentRejection(env) {
+    assertDocumentRejectionConsistent(env);
+    return encodeCbor({
+        type: env.type,
+        rejection_version: env.rejection_version,
+        document_id: env.document_id,
+        rejected_envelope_hash: env.rejected_envelope_hash,
+        rejecting_agent_id: env.rejecting_agent_id,
+        reason: env.reason,
+        detail: env.detail ?? null,
+        round: env.round,
+        rejected_at_ms: env.rejected_at_ms,
+        signature: env.signature,
+    });
+}
+function present(map, field) {
+    // `in`, not a nullish check — the same discipline as every sibling envelope. A defaulted field is
+    // a claim the rejecting party never made.
+    if (!(field in map)) {
+        throw new Error(`document_rejection_missing_field: ${field} is mandatory and was not present`);
+    }
+    return map[field];
+}
+export function decodeDocumentRejection(bytes) {
+    const decoded = decodeCbor(bytes);
+    if (typeof decoded !== "object" || decoded === null || Array.isArray(decoded)) {
+        throw new Error("document_rejection_malformed: not a CBOR map");
+    }
+    const map = decoded;
+    if (present(map, "type") !== "document_rejection") {
+        throw new Error("document_rejection_type: expected document_rejection");
+    }
+    const version = present(map, "rejection_version");
+    if (typeof version !== "number" || !Number.isInteger(version)) {
+        throw new Error("document_rejection_version: must be an integer");
+    }
+    if (version !== DOCUMENT_REJECTION_VERSION) {
+        throw new Error(`document_rejection_version: this build speaks version ${DOCUMENT_REJECTION_VERSION} and the ` +
+            `frame declares ${version} — one of the two clients needs upgrading`);
+    }
+    for (const field of ["document_id", "rejected_envelope_hash"]) {
+        const value = present(map, field);
+        if (typeof value !== "string" || !HEX32.test(value)) {
+            throw new Error(`document_rejection_${field}: must be a 32-byte hex digest`);
+        }
+    }
+    const rejecting = present(map, "rejecting_agent_id");
+    if (typeof rejecting !== "string" || rejecting.length === 0) {
+        throw new Error("document_rejection_agent: rejecting_agent_id must be a non-empty text string");
+    }
+    const reason = present(map, "reason");
+    if (typeof reason !== "string") {
+        throw new Error("document_rejection_reason: must be a text string");
+    }
+    const rawDetail = present(map, "detail");
+    if (rawDetail !== null && typeof rawDetail !== "string") {
+        throw new Error("document_rejection_detail: must be a text string or explicit null");
+    }
+    // Empty string means ABSENT — the same normalisation the ack needed, for the same reason: a peer
+    // in a language where a non-nullable string defaults to "" must not be refused for a field it
+    // never filled in.
+    const detail = rawDetail === "" ? null : rawDetail;
+    const round = present(map, "round");
+    if (typeof round !== "number" || !Number.isInteger(round) || round < 1) {
+        throw new Error(`document_rejection_round: must be a positive integer, got ${String(round)}`);
+    }
+    const rejectedAt = present(map, "rejected_at_ms");
+    if (typeof rejectedAt !== "number" || !Number.isSafeInteger(rejectedAt) || rejectedAt <= 0) {
+        throw new Error("document_rejection_time: rejected_at_ms must be a positive safe integer");
+    }
+    const signature = present(map, "signature");
+    if (!(signature instanceof Uint8Array)) {
+        throw new Error("document_rejection_signature: must be a CBOR byte string");
+    }
+    const env = {
+        type: "document_rejection",
+        rejection_version: version,
+        document_id: map["document_id"],
+        rejected_envelope_hash: map["rejected_envelope_hash"],
+        rejecting_agent_id: rejecting,
+        reason,
+        ...(detail === null ? {} : { detail }),
+        round,
+        rejected_at_ms: rejectedAt,
+        // COPIED — cbor-x returns byte strings as views into the buffer it decoded.
+        signature: new Uint8Array(signature),
+    };
+    assertDocumentRejectionConsistent(env);
+    return env;
+}
+//# sourceMappingURL=document-rejection-envelope.js.map

package/dist/document-rejection-envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-rejection-envelope.js","sourceRoot":"","sources":["../src/document-rejection-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEvE,+FAA+F;AAC/F,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAE5C,oFAAoF;AACpF,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAE/C,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAwB/B;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAA8B,EAC9B,OAA8B,EAAE;IAEhC,iCAAiC,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC1B,yBAAyB;QACzB,GAAG,CAAC,iBAAiB;QACrB,GAAG,CAAC,WAAW;QACf,GAAG,CAAC,sBAAsB;QAC1B,GAAG,CAAC,kBAAkB;QACtB,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,MAAM,IAAI,IAAI;QAClB,GAAG,CAAC,KAAK;QACT,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,IAAI,GAAG,CAAC,cAAc,GAAG,UAAU;YACvE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC;YAC5B,CAAC,CAAC,GAAG,CAAC,cAAc;KACvB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAA8B;IAClE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,yBAAyB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;SAC1D,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iCAAiC,CAAC,GAA8B;IAC9E,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,4FAA4F;QAC5F,qEAAqE;QACrE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,6DAA6D,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,2BAA2B,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CACb,sCAAsC,2BAA2B,oBAAoB,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CACzG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAA8B;IACpE,iCAAiC,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC;QAChB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;QACxC,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,sBAAsB,EAAE,GAAG,CAAC,sBAAsB;QAClD,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;QAC1C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,OAAO,CAAC,GAA4B,EAAE,KAAa;IAC1D,kGAAkG;IAClG,0CAA0C;IAC1C,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,qCAAqC,KAAK,mCAAmC,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAiB;IACvD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,OAAkC,CAAC;IAE/C,IAAI,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,oBAAoB,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IAClD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,KAAK,0BAA0B,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,yDAAyD,0BAA0B,WAAW;YAC5F,kBAAkB,OAAO,2CAA2C,CACvE,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,CAAC,aAAa,EAAE,wBAAwB,CAAC,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,gCAAgC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IACrD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,iGAAiG;IACjG,8FAA8F;IAC9F,mBAAmB;IACnB,MAAM,MAAM,GAAG,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,SAA2B,CAAC;IAEtE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,6DAA6D,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAClD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,SAAS,YAAY,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,GAAG,GAA8B;QACrC,IAAI,EAAE,oBAAoB;QAC1B,iBAAiB,EAAE,OAAO;QAC1B,WAAW,EAAE,GAAG,CAAC,aAAa,CAAW;QACzC,sBAAsB,EAAE,GAAG,CAAC,wBAAwB,CAAW;QAC/D,kBAAkB,EAAE,SAAS;QAC7B,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QACtC,KAAK;QACL,cAAc,EAAE,UAAU;QAC1B,4EAA4E;QAC5E,SAAS,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC;KACrC,CAAC;IACF,iCAAiC,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -28,4 +28,16 @@ export { IT_LENGTH_PREFIX_DEFAULT_MAX, CONTENT_PARK_PROTOCOL_ID, CONTENT_PARK_AU
 export type { SessionLiveness, SessionLivenessQuery, SessionLivenessResponse, } from "./session-liveness.js";
 export { encodeSessionLivenessQuery, decodeSessionLivenessQuery, encodeSessionLivenessResponse, decodeSessionLivenessResponse, } from "./session-liveness.js";
 export { MONIKER_RE, validateMoniker } from "./moniker.js";
+export { DOCUMENT_UPDATE_DOMAIN, DOCUMENT_UPDATE_ENCODING_V1, DOCUMENT_EPOCH_V1, buildDocumentUpdateTbs, encodeDocumentUpdateEnvelope, decodeDocumentUpdateEnvelope, documentEnvelopeHash, verifyDocumentChainLink, } from "./document-envelope.js";
+export type { DocumentUpdateEnvelope } from "./document-envelope.js";
+export { DOCUMENT_PROPOSAL_DOMAIN, DOCUMENT_FEATURE_VERSION, ASSURANCE_TIER_V1, TOPOLOGY_V1, buildDocumentProposalTbs, documentIdFromProposal, encodeDocumentProposal, decodeDocumentProposal, seamViolation, documentFeatureIncompatibility, } from "./document-proposal.js";
+export type { DocumentProposalEnvelope, DocumentProperties, DocumentConsentState, } from "./document-proposal.js";
+export { DOCUMENT_ACK_DOMAIN, buildDocumentAckTbs, encodeDocumentAck, decodeDocumentAck, } from "./document-ack.js";
+export type { DocumentAck } from "./document-ack.js";
+export { encodeDocumentProposalAck, decodeDocumentProposalAck, buildDocumentProposalAckTbs, assertDocumentProposalAckConsistent, DOCUMENT_PROPOSAL_ACK_DOMAIN, DOCUMENT_PROPOSAL_ACK_VERSION, MAX_PROPOSAL_REFUSAL_REASON_LENGTH, } from "./document-proposal-ack.js";
+export type { DocumentProposalAck } from "./document-proposal-ack.js";
+export { encodeDocumentControl, decodeDocumentControl, buildDocumentControlTbs, assertDocumentControlConsistent, DOCUMENT_CONTROL_DOMAIN, DOCUMENT_CONTROL_VERSION, DOCUMENT_CONTROL_VERBS, MAX_CONTROL_REASON_LENGTH, } from "./document-control.js";
+export type { DocumentControl, DocumentControlVerb } from "./document-control.js";
+export { DOCUMENT_REJECTION_DOMAIN, DOCUMENT_REJECTION_VERSION, MAX_REJECTION_DETAIL_LENGTH, buildDocumentRejectionTbs, documentRejectionHash, assertDocumentRejectionConsistent, encodeDocumentRejection, decodeDocumentRejection, } from "./document-rejection-envelope.js";
+export type { DocumentRejectionEnvelope } from "./document-rejection-envelope.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAKnD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEtF,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEvE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACjK,YAAY,EACV,iBAAiB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EACnH,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,YAAY,EAChI,eAAe,EAAE,cAAc,EAAE,yBAAyB,EAAE,0BAA0B,GACvF,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACnF,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,QAAQ,GACT,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAKnD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEtF,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEvE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACjK,YAAY,EACV,iBAAiB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EACnH,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,YAAY,EAChI,eAAe,EAAE,cAAc,EAAE,yBAAyB,EAAE,0BAA0B,GACvF,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACnF,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,QAAQ,GACT,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,iBAAiB,EACjB,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,WAAW,EACX,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,mCAAmC,EACnC,4BAA4B,EAC5B,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/index.js

@@ -19,4 +19,10 @@ export { IT_LENGTH_PREFIX_DEFAULT_MAX, CONTENT_PARK_PROTOCOL_ID, CONTENT_PARK_AU
 export { encodeSessionLivenessQuery, decodeSessionLivenessQuery, encodeSessionLivenessResponse, decodeSessionLivenessResponse, } from "./session-liveness.js";
 // MONIKER-0 — the single home of the agent-name / moniker charset rule (wire contract).
 export { MONIKER_RE, validateMoniker } from "./moniker.js";
+export { DOCUMENT_UPDATE_DOMAIN, DOCUMENT_UPDATE_ENCODING_V1, DOCUMENT_EPOCH_V1, buildDocumentUpdateTbs, encodeDocumentUpdateEnvelope, decodeDocumentUpdateEnvelope, documentEnvelopeHash, verifyDocumentChainLink, } from "./document-envelope.js";
+export { DOCUMENT_PROPOSAL_DOMAIN, DOCUMENT_FEATURE_VERSION, ASSURANCE_TIER_V1, TOPOLOGY_V1, buildDocumentProposalTbs, documentIdFromProposal, encodeDocumentProposal, decodeDocumentProposal, seamViolation, documentFeatureIncompatibility, } from "./document-proposal.js";
+export { DOCUMENT_ACK_DOMAIN, buildDocumentAckTbs, encodeDocumentAck, decodeDocumentAck, } from "./document-ack.js";
+export { encodeDocumentProposalAck, decodeDocumentProposalAck, buildDocumentProposalAckTbs, assertDocumentProposalAckConsistent, DOCUMENT_PROPOSAL_ACK_DOMAIN, DOCUMENT_PROPOSAL_ACK_VERSION, MAX_PROPOSAL_REFUSAL_REASON_LENGTH, } from "./document-proposal-ack.js";
+export { encodeDocumentControl, decodeDocumentControl, buildDocumentControlTbs, assertDocumentControlConsistent, DOCUMENT_CONTROL_DOMAIN, DOCUMENT_CONTROL_VERSION, DOCUMENT_CONTROL_VERBS, MAX_CONTROL_REASON_LENGTH, } from "./document-control.js";
+export { DOCUMENT_REJECTION_DOMAIN, DOCUMENT_REJECTION_VERSION, MAX_REJECTION_DETAIL_LENGTH, buildDocumentRejectionTbs, documentRejectionHash, assertDocumentRejectionConsistent, encodeDocumentRejection, decodeDocumentRejection, } from "./document-rejection-envelope.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,8FAA8F;AAC9F,wFAAwF;AACxF,2BAA2B;AAC3B,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAO3B,+FAA+F;AAC/F,qGAAqG;AACrG,wFAAwF;AACxF,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,iBAAiB,CAAC;AAezB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGvE,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AA0BjK,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAmBjC,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AA8DnF,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAuBvB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAE/B,wFAAwF;AACxF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,8FAA8F;AAC9F,wFAAwF;AACxF,2BAA2B;AAC3B,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAO3B,+FAA+F;AAC/F,qGAAqG;AACrG,wFAAwF;AACxF,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,iBAAiB,CAAC;AAezB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGvE,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AA0BjK,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAmBjC,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AA8DnF,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAuBvB,OAAO,EACL,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAE/B,wFAAwF;AACxF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,iBAAiB,EACjB,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,WAAW,EACX,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,mCAAmC,EACnC,4BAA4B,EAC5B,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,+BAA+B,EAC/B,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cello-protocol/protocol-types",
-  "version": "0.0.44",
+  "version": "0.0.46",
   "private": false,
   "type": "module",
   "engines": {
@@ -26,7 +26,7 @@
   ],
   "dependencies": {
     "cbor-x": "^1.6.4",
-    "@cello-protocol/crypto": "0.0.40"
+    "@cello-protocol/crypto": "0.0.42"
   },
   "devDependencies": {
     "@claude-flow/testing": "3.0.0-alpha.6",