@cello-protocol/protocol-types 0.0.66 → 0.0.68

package/dist/index.d.ts

@@ -5,7 +5,8 @@ export { SUBMISSION_DOMAIN, buildSubmissionTbs, encodeSubmission, decodeSubmissi
 export type { SubmissionBody, SubmissionOp, SignedSubmission } from "./submission.js";
 export type { MessageEnvelope, MessageEnvelopeV1, EnvelopeError, BuildResult, BuildResultV1, ValidateResult, ValidateResultV1, DeserializeResult, DeserializeResultV1, } from "./types.js";
 export { MAX_CONTENT_BYTES } from "./limits.js";
-export { encodeStructure1, STRUCTURE1_VERSION } from "./structure1.js";
+export { encodeStructure1, decodeStructure1, STRUCTURE1_VERSION, STRUCTURE1_VERSION_V2, LAST_SEEN_HASH_BYTES, STRUCTURE1_DECODE_REASONS, } from "./structure1.js";
+export type { Structure1Fields, Structure1DecodeResult, Structure1DecodeReason, } from "./structure1.js";
 export type { ScanResultSentinel, Structure2, BuildStructure2Result } from "./structure2.js";
 export { SCAN_RESULT_SENTINEL, buildStructure2, encodeStructure2, encodeScanResultSentinel, verifyStructure2Signature, } from "./structure2.js";
 export { computeGenesisPrevRoot, encodeSealPayload, decodeSealPayload, buildSessionEstablishmentTbs, buildSealTbs, SEAL_RECEIPT_DISCLAIMER } from "./session.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAKnD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEtF,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEvE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACjK,YAAY,EACV,iBAAiB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EACnH,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,YAAY,EACxJ,eAAe,EAAE,cAAc,EAAE,yBAAyB,EAAE,0BAA0B,GACvF,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACnF,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,QAAQ,GACT,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,yBAAyB,EACzB,kBAAkB,EAClB,WAAW,EACX,YAAY,GACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mCAAmC,EACnC,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,mCAAmC,EACnC,4BAA4B,EAC5B,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAKnD,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEtF,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,YAAY,EACV,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC7F,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACjK,YAAY,EACV,iBAAiB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,eAAe,EAAE,iBAAiB,EAAE,WAAW,EACnH,gBAAgB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,aAAa,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,YAAY,EACxJ,eAAe,EAAE,cAAc,EAAE,yBAAyB,EAAE,0BAA0B,GACvF,MAAM,cAAc,CAAC;AAEtB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,iBAAiB,EACjB,2BAA2B,EAC3B,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAGjC,YAAY,EACV,eAAe,EACf,WAAW,EACX,QAAQ,EACR,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,YAAY,EACZ,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AACnF,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,iBAAiB,EACjB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AAEjC,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,EACf,gBAAgB,GACjB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,wBAAwB,EACxB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,0BAA0B,EAC1B,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAG5B,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,QAAQ,GACT,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAGvB,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,wBAAwB,EACxB,uBAAuB,EACvB,+BAA+B,GAChC,MAAM,uBAAuB,CAAC;AAG/B,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,wBAAwB,EACxB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,YAAY,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,aAAa,EACb,qBAAqB,EACrB,yBAAyB,EACzB,kBAAkB,EAClB,WAAW,EACX,YAAY,GACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mCAAmC,EACnC,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,mCAAmC,EACnC,4BAA4B,EAC5B,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC;AAC1C,YAAY,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC"}

package/dist/index.js

@@ -8,7 +8,7 @@ export { TRUST_SIGNAL_DOMAIN, encodeTrustSignalEnvelope, decodeTrustSignalEnvelo
 // local copy on each side is how two implementations drift into disagreeing (M10B-D28).
 export { SUBMISSION_DOMAIN, buildSubmissionTbs, encodeSubmission, decodeSubmission, submissionId, } from "./submission.js";
 export { MAX_CONTENT_BYTES } from "./limits.js";
-export { encodeStructure1, STRUCTURE1_VERSION } from "./structure1.js";
+export { encodeStructure1, decodeStructure1, STRUCTURE1_VERSION, STRUCTURE1_VERSION_V2, LAST_SEEN_HASH_BYTES, STRUCTURE1_DECODE_REASONS, } from "./structure1.js";
 export { SCAN_RESULT_SENTINEL, buildStructure2, encodeStructure2, encodeScanResultSentinel, verifyStructure2Signature, } from "./structure2.js";
 export { computeGenesisPrevRoot, encodeSealPayload, decodeSealPayload, buildSessionEstablishmentTbs, buildSealTbs, SEAL_RECEIPT_DISCLAIMER } from "./session.js";
 export { MAX_PSEUDONYM_LABEL_BYTES, ML_DSA_PUBKEY_BYTES, ML_DSA_SIGNATURE_BYTES, buildPseudonymBinding, verifyPseudonymBinding, verifyEndorsement, verifyAttestation, validateConnectionPackage, encodeConnectionPackage, decodeConnectionPackage, } from "./connection-package.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,8FAA8F;AAC9F,wFAAwF;AACxF,2BAA2B;AAC3B,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAO3B,+FAA+F;AAC/F,qGAAqG;AACrG,wFAAwF;AACxF,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,iBAAiB,CAAC;AAezB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGvE,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AA0BjK,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAmBjC,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AA8DnF,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAwBvB,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAE/B,wFAAwF;AACxF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AASjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mCAAmC,EACnC,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAQjC,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,mCAAmC,EACnC,4BAA4B,EAC5B,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,8FAA8F;AAC9F,wFAAwF;AACxF,2BAA2B;AAC3B,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAO3B,+FAA+F;AAC/F,qGAAqG;AACrG,wFAAwF;AACxF,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,iBAAiB,CAAC;AAezB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAQzB,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,gBAAgB,EAChB,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,4BAA4B,EAAE,YAAY,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AA0BjK,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,yBAAyB,EACzB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAmBjC,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEzF,OAAO,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AA8DnF,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAwBvB,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAE/B,wFAAwF;AACxF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,aAAa,EACb,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAMhC,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAEpE,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AASjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,mCAAmC,EACnC,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAQjC,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,2BAA2B,EAC3B,mCAAmC,EACnC,4BAA4B,EAC5B,6BAA6B,EAC7B,kCAAkC,GACnC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,2BAA2B,EAC3B,yBAAyB,EACzB,qBAAqB,EACrB,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,GACxB,MAAM,kCAAkC,CAAC"}

package/dist/structure1.d.ts

@@ -1,10 +1,87 @@
 /** The Structure 1 version tag. Bound as the FIRST field, so a v1 claim can never read as a v2 one. */
 export declare const STRUCTURE1_VERSION = 1;
 /**
- * Canonical Structure 1 bytes: [version, content_hash, sender_pubkey, session_id, last_seen_seq, timestamp].
+ * v2 — `last_seen_hash` APPENDED at index 6 (`DOD-M15-WITHHOLD-SEAL-1`).
  *
- * A timestamp above 2^32-1 is encoded as a CBOR bigint — a plain number would silently lose
- * precision, and the sender's signature is over THESE bytes.
+ * `last_seen_seq` is a NUMBER, so "I saw position 7" attests to a POSITION and never to CONTENT.
+ * `last_seen_hash` binds the acknowledgement to what was actually received. It ADDS: `last_seen_seq`
+ * stays and keeps doing ordering and dedup work.
+ */
+export declare const STRUCTURE1_VERSION_V2 = 2;
+/** `last_seen_hash` is a SHA-256 root — always exactly 32 bytes, never a prefix and never empty. */
+export declare const LAST_SEEN_HASH_BYTES = 32;
+/**
+ * ⚠️ INDEX 6 IS ALREADY SPOKEN FOR, WHICH IS WHY THE VERSION DECIDES AND NOT THE LENGTH.
+ *
+ * `DOD-M15-SUBMIT-ID-1` widened the relay to accept a SIX OR SEVEN field Structure 1, reserving
+ * index 6 for a sender-minted submission id, and shipped that tolerance ahead of any emitter. So a
+ * seven-field array has two possible meanings and `arr.length` cannot tell them apart:
+ *
+ *   length 7 && version 1  ⇒  the pre-existing submission-id layout (index 6 is NOT an ack hash)
+ *   length 7 && version 2  ⇒  the ack-hash layout
+ *   anything else          ⇒  refused BY NAME, never coerced
+ *
+ * A reader that silently admits an unrecognised length is not tolerant, it is fail-open: it would
+ * verify a signature over bytes whose meaning is not agreed.
+ */
+export declare const STRUCTURE1_DECODE_REASONS: {
+    /** The bytes are not CBOR at all. */
+    readonly NOT_CBOR: "structure1_not_cbor";
+    /** Valid CBOR, but not the positional array every Structure 1 is. */
+    readonly NOT_ARRAY: "structure1_not_array";
+    /** A (version, length) pair this build cannot name — including a v2 that omits `last_seen_hash`. */
+    readonly UNKNOWN_LAYOUT: "structure1_unknown_layout";
+    /** A field at one of the unchanged indices 1–5 is the wrong type or the wrong width. */
+    readonly FIELD_MALFORMED: "structure1_field_malformed";
+    /** A v2 carried `last_seen_hash`, and it was not 32 bytes. Present-but-wrong, never dropped. */
+    readonly LAST_SEEN_HASH_MALFORMED: "structure1_last_seen_hash_malformed";
+};
+export type Structure1DecodeReason = (typeof STRUCTURE1_DECODE_REASONS)[keyof typeof STRUCTURE1_DECODE_REASONS];
+export interface Structure1Fields {
+    version: number;
+    contentHash: Uint8Array;
+    senderPubkey: Uint8Array;
+    sessionId: Uint8Array;
+    lastSeenSeq: number;
+    /**
+     * `number` for a legacy float64 leaf, `bigint` for the canonical uint64 form. Never re-encoded on
+     * a verification path — the signature is over the bytes as received, so both are carried as read.
+     */
+    timestamp: number | bigint;
+    /**
+     * The 32 bytes on a v2 claim; `null` on any v1 claim, INCLUDING a v1 seven-array whose index 6 is
+     * a submission id. `null` means "this layout carries no ack hash", never "the hash was missing" —
+     * a v2 that omits the field is refused as UNKNOWN_LAYOUT and never reaches here.
+     */
+    lastSeenHash: Uint8Array | null;
+}
+export type Structure1DecodeResult = {
+    ok: true;
+    fields: Structure1Fields;
+} | {
+    ok: false;
+    reason: Structure1DecodeReason;
+};
+/**
+ * Canonical Structure 1 bytes.
+ *
+ *   v1: [1, content_hash(32), sender_pubkey(32), session_id(16), last_seen_seq, timestamp]
+ *   v2: [2, content_hash(32), sender_pubkey(32), session_id(16), last_seen_seq, timestamp,
+ *        last_seen_hash(32)]
+ *
+ * `lastSeenHash` ABSENT ⇒ v1, six fields, byte-identical to the pinned v1 vector. PRESENT ⇒ v2.
+ * The version tag is what disambiguates, so the two can never be confused by a reader.
+ *
+ * ⚠️ `last_seen_hash` IS A VALUE, NEVER AN ABSENCE. The first message of a session has seen nothing,
+ * and that case is a defined 32-byte value: `computeGenesisPrevRoot` for the session — the agreed
+ * starting point of this two-party chain. Not 32 zero bytes, which would be a constant identical
+ * across every session and therefore presentable for any of them; and not a shorter array, which is
+ * refused. A caller that has no hash to send sends v1, and a v1 claim makes no content assertion at
+ * all — which is honest — rather than an empty one that reads as satisfied.
+ *
+ * A timestamp above 2^32-1 is encoded as a CBOR bigint — a plain number encodes as a float64, and
+ * two implementations that disagree about which one they emit produce different signed bytes for
+ * the same value. Same promotion as `buildSessionEstablishmentTbs`.
  */
 export declare function encodeStructure1(fields: {
     contentHash: Uint8Array;
@@ -12,5 +89,17 @@ export declare function encodeStructure1(fields: {
     sessionId: Uint8Array;
     lastSeenSeq: number;
     timestamp: number;
+    lastSeenHash?: Uint8Array;
 }): Uint8Array;
+/**
+ * Read a Structure 1 claim, branching on the VERSION at index 0 — never on the array length (see
+ * `STRUCTURE1_DECODE_REASONS` for why the two are not interchangeable).
+ *
+ * Exported because the readers across both repos each hand-rolled their own positional
+ * destructuring, and the next layout change should not have to find them again.
+ *
+ * Never throws: these bytes arrive off a wire, and a decode failure is a named refusal to report,
+ * not an exception escaping into a stream handler.
+ */
+export declare function decodeStructure1(cbor: Uint8Array): Structure1DecodeResult;
 //# sourceMappingURL=structure1.d.ts.map

package/dist/structure1.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"structure1.d.ts","sourceRoot":"","sources":["../src/structure1.ts"],"names":[],"mappings":"AAcA,uGAAuG;AACvG,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,UAAU,CAAC;IACzB,SAAS,EAAE,UAAU,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,UAAU,CAUb"}
+{"version":3,"file":"structure1.d.ts","sourceRoot":"","sources":["../src/structure1.ts"],"names":[],"mappings":"AAeA,uGAAuG;AACvG,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,oGAAoG;AACpG,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,yBAAyB;IACpC,qCAAqC;;IAErC,qEAAqE;;IAErE,oGAAoG;;IAEpG,wFAAwF;;IAExF,gGAAgG;;CAExF,CAAC;AAEX,MAAM,MAAM,sBAAsB,GAChC,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,OAAO,yBAAyB,CAAC,CAAC;AAE7E,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,UAAU,CAAC;IACzB,SAAS,EAAE,UAAU,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B;;;;OAIG;IACH,YAAY,EAAE,UAAU,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,sBAAsB,GAC9B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GACtC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,CAAC;AAElD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IACvC,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,UAAU,CAAC;IACzB,SAAS,EAAE,UAAU,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,UAAU,CAAC;CAC3B,GAAG,UAAU,CAyBb;AASD;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,UAAU,GAAG,sBAAsB,CAiEzE"}

package/dist/structure1.js

@@ -1,33 +1,178 @@
 /**
  * Structure 1 — the sender's signed ordering claim, canonical CBOR.
  *
- * The daemon PARSES Structure 1 (it arrives from the relay, the ordering authority) but does not
- * build one, so this encoder has no production caller. It is kept because it is the only written
- * definition of the Structure 1 FIELD ORDER, and `structure1-canonical.json` is the only vector in
- * either repo pinning the resulting bytes. Delete it and the wire format is defined solely by
- * whatever the relay happens to emit, with nothing to catch a drift.
+ * THE ONE BUILDER AND THE ONE READER. The daemon kept a second, positional `encodeStructure1` in
+ * `session-relay-client.ts` until 020-ACKHASH; the two were maintained separately and only a
+ * convention kept them equal. It had already broken — the copy emitted a timestamp above 2^32-1 as
+ * a CBOR float64 where this one promotes to uint64 — so the vector below was pinning bytes
+ * production never emitted. Import this; never write a third.
  *
  * Field order is LOAD-BEARING: it is signed over. Reorder a field and signatures produced by any
- * other implementation stop verifying against ours.
+ * other implementation stop verifying against ours. `structure1-canonical.json` and
+ * `structure1-v2-canonical.json` pin the resulting bytes for each version.
  */
-import { encodeCbor } from "./cbor.js";
+import { encodeCbor, decodeCbor } from "./cbor.js";
 /** The Structure 1 version tag. Bound as the FIRST field, so a v1 claim can never read as a v2 one. */
 export const STRUCTURE1_VERSION = 1;
 /**
- * Canonical Structure 1 bytes: [version, content_hash, sender_pubkey, session_id, last_seen_seq, timestamp].
+ * v2 — `last_seen_hash` APPENDED at index 6 (`DOD-M15-WITHHOLD-SEAL-1`).
  *
- * A timestamp above 2^32-1 is encoded as a CBOR bigint — a plain number would silently lose
- * precision, and the sender's signature is over THESE bytes.
+ * `last_seen_seq` is a NUMBER, so "I saw position 7" attests to a POSITION and never to CONTENT.
+ * `last_seen_hash` binds the acknowledgement to what was actually received. It ADDS: `last_seen_seq`
+ * stays and keeps doing ordering and dedup work.
+ */
+export const STRUCTURE1_VERSION_V2 = 2;
+/** `last_seen_hash` is a SHA-256 root — always exactly 32 bytes, never a prefix and never empty. */
+export const LAST_SEEN_HASH_BYTES = 32;
+/**
+ * ⚠️ INDEX 6 IS ALREADY SPOKEN FOR, WHICH IS WHY THE VERSION DECIDES AND NOT THE LENGTH.
+ *
+ * `DOD-M15-SUBMIT-ID-1` widened the relay to accept a SIX OR SEVEN field Structure 1, reserving
+ * index 6 for a sender-minted submission id, and shipped that tolerance ahead of any emitter. So a
+ * seven-field array has two possible meanings and `arr.length` cannot tell them apart:
+ *
+ *   length 7 && version 1  ⇒  the pre-existing submission-id layout (index 6 is NOT an ack hash)
+ *   length 7 && version 2  ⇒  the ack-hash layout
+ *   anything else          ⇒  refused BY NAME, never coerced
+ *
+ * A reader that silently admits an unrecognised length is not tolerant, it is fail-open: it would
+ * verify a signature over bytes whose meaning is not agreed.
+ */
+export const STRUCTURE1_DECODE_REASONS = {
+    /** The bytes are not CBOR at all. */
+    NOT_CBOR: "structure1_not_cbor",
+    /** Valid CBOR, but not the positional array every Structure 1 is. */
+    NOT_ARRAY: "structure1_not_array",
+    /** A (version, length) pair this build cannot name — including a v2 that omits `last_seen_hash`. */
+    UNKNOWN_LAYOUT: "structure1_unknown_layout",
+    /** A field at one of the unchanged indices 1–5 is the wrong type or the wrong width. */
+    FIELD_MALFORMED: "structure1_field_malformed",
+    /** A v2 carried `last_seen_hash`, and it was not 32 bytes. Present-but-wrong, never dropped. */
+    LAST_SEEN_HASH_MALFORMED: "structure1_last_seen_hash_malformed",
+};
+/**
+ * Canonical Structure 1 bytes.
+ *
+ *   v1: [1, content_hash(32), sender_pubkey(32), session_id(16), last_seen_seq, timestamp]
+ *   v2: [2, content_hash(32), sender_pubkey(32), session_id(16), last_seen_seq, timestamp,
+ *        last_seen_hash(32)]
+ *
+ * `lastSeenHash` ABSENT ⇒ v1, six fields, byte-identical to the pinned v1 vector. PRESENT ⇒ v2.
+ * The version tag is what disambiguates, so the two can never be confused by a reader.
+ *
+ * ⚠️ `last_seen_hash` IS A VALUE, NEVER AN ABSENCE. The first message of a session has seen nothing,
+ * and that case is a defined 32-byte value: `computeGenesisPrevRoot` for the session — the agreed
+ * starting point of this two-party chain. Not 32 zero bytes, which would be a constant identical
+ * across every session and therefore presentable for any of them; and not a shorter array, which is
+ * refused. A caller that has no hash to send sends v1, and a v1 claim makes no content assertion at
+ * all — which is honest — rather than an empty one that reads as satisfied.
+ *
+ * A timestamp above 2^32-1 is encoded as a CBOR bigint — a plain number encodes as a float64, and
+ * two implementations that disagree about which one they emit produce different signed bytes for
+ * the same value. Same promotion as `buildSessionEstablishmentTbs`.
  */
 export function encodeStructure1(fields) {
     const ts = fields.timestamp > 0xffffffff ? BigInt(fields.timestamp) : fields.timestamp;
-    return encodeCbor([
-        STRUCTURE1_VERSION,
+    const head = [
         fields.contentHash,
         fields.senderPubkey,
         fields.sessionId,
         fields.lastSeenSeq,
         ts,
-    ]);
+    ];
+    // Branch on the VALUE, not on `"lastSeenHash" in fields`: an explicit `undefined` must encode as
+    // v1, not as a seven-field array whose index 6 is CBOR undefined — a v2 claim with no hash in it.
+    if (fields.lastSeenHash === undefined) {
+        return encodeCbor([STRUCTURE1_VERSION, ...head]);
+    }
+    if (fields.lastSeenHash.length !== LAST_SEEN_HASH_BYTES) {
+        // Thrown, not silently downgraded to v1. A caller that meant to acknowledge content and cannot
+        // must find out here, at the last point before these bytes are signed — a signature over a v2
+        // nobody accepts is worse than a refusal, and a silent drop to v1 is the downgrade this layout
+        // exists to close.
+        throw new Error(`structure1: last_seen_hash must be ${LAST_SEEN_HASH_BYTES} bytes, got ${fields.lastSeenHash.length}`);
+    }
+    return encodeCbor([STRUCTURE1_VERSION_V2, ...head, fields.lastSeenHash]);
+}
+/** Bytes at `i` of exactly `len`, tolerating a Buffer from a decoder that produced one. */
+function bytesAt(arr, i, len) {
+    const v = arr[i];
+    const b = v instanceof Uint8Array ? v : Buffer.isBuffer(v) ? new Uint8Array(v) : null;
+    return b !== null && b.length === len ? b : null;
+}
+/**
+ * Read a Structure 1 claim, branching on the VERSION at index 0 — never on the array length (see
+ * `STRUCTURE1_DECODE_REASONS` for why the two are not interchangeable).
+ *
+ * Exported because the readers across both repos each hand-rolled their own positional
+ * destructuring, and the next layout change should not have to find them again.
+ *
+ * Never throws: these bytes arrive off a wire, and a decode failure is a named refusal to report,
+ * not an exception escaping into a stream handler.
+ */
+export function decodeStructure1(cbor) {
+    let arr;
+    try {
+        arr = decodeCbor(cbor);
+    }
+    catch {
+        return { ok: false, reason: STRUCTURE1_DECODE_REASONS.NOT_CBOR };
+    }
+    if (!Array.isArray(arr))
+        return { ok: false, reason: STRUCTURE1_DECODE_REASONS.NOT_ARRAY };
+    const version = arr[0];
+    const isV1 = version === STRUCTURE1_VERSION && (arr.length === 6 || arr.length === 7);
+    const isV2 = version === STRUCTURE1_VERSION_V2 && arr.length === 7;
+    if (!isV1 && !isV2)
+        return { ok: false, reason: STRUCTURE1_DECODE_REASONS.UNKNOWN_LAYOUT };
+    const contentHash = bytesAt(arr, 1, 32);
+    const senderPubkey = bytesAt(arr, 2, 32);
+    /**
+     * SESSION ID: THE WIDTH IS NOT CHECKED HERE, AND THAT IS DELIBERATE.
+     *
+     * The wire contract is 16 bytes, and it is enforced where peer-supplied bytes arrive — the relay's
+     * and the directory's own decoders each refuse anything else, and both keep doing so. This decoder
+     * also reads leaves THIS daemon just produced, and it must not newly refuse a leaf it accepted
+     * before: no client-side reader ever checked this width, and requiring it here would turn a
+     * layout reader into a second, quieter place that can reject a session.
+     *
+     * Each consumer is safe for one of two reasons, and it is worth naming both rather than claiming
+     * the stronger one for all of them. `seal-frontier-verify` COMPARES the value against an expected
+     * session id, so a wrong width fails exactly as a wrong value does. `#captureReceipt`
+     * (`session-relay-client.ts`) does NOT compare it — it hexes the value straight into the
+     * `relay_ack_receipts` primary key — and is safe instead because those bytes are
+     * `#pendingStructure1`, which this daemon produced and signed moments earlier.
+     *
+     * An earlier version of this comment said every consumer compares it. That was false for
+     * `#captureReceipt`, and a comment asserting a safety property the code does not have is how
+     * defects survive review in this repo — so it is corrected here rather than deleted.
+     */
+    const sessionId = arr[3] instanceof Uint8Array
+        ? arr[3]
+        : Buffer.isBuffer(arr[3]) ? new Uint8Array(arr[3]) : null;
+    const lastSeenSeq = arr[4];
+    const timestamp = arr[5];
+    if (contentHash === null || senderPubkey === null || sessionId === null) {
+        return { ok: false, reason: STRUCTURE1_DECODE_REASONS.FIELD_MALFORMED };
+    }
+    if (typeof lastSeenSeq !== "number") {
+        return { ok: false, reason: STRUCTURE1_DECODE_REASONS.FIELD_MALFORMED };
+    }
+    if (typeof timestamp !== "number" && typeof timestamp !== "bigint") {
+        return { ok: false, reason: STRUCTURE1_DECODE_REASONS.FIELD_MALFORMED };
+    }
+    // A v1 seven-array's index 6 is a SUBMISSION ID and is not read here — it is the relay's concern,
+    // and reading it as an ack hash is exactly the confusion the version tag prevents.
+    let lastSeenHash = null;
+    if (isV2) {
+        lastSeenHash = bytesAt(arr, 6, LAST_SEEN_HASH_BYTES);
+        if (lastSeenHash === null) {
+            return { ok: false, reason: STRUCTURE1_DECODE_REASONS.LAST_SEEN_HASH_MALFORMED };
+        }
+    }
+    return {
+        ok: true,
+        fields: { version, contentHash, senderPubkey, sessionId, lastSeenSeq, timestamp, lastSeenHash },
+    };
 }
 //# sourceMappingURL=structure1.js.map

package/dist/structure1.js.map

@@ -1 +1 @@
-{"version":3,"file":"structure1.js","sourceRoot":"","sources":["../src/structure1.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEvC,uGAAuG;AACvG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAMhC;IACC,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACvF,OAAO,UAAU,CAAC;QAChB,kBAAkB;QAClB,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,YAAY;QACnB,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,WAAW;QAClB,EAAE;KACH,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"structure1.js","sourceRoot":"","sources":["../src/structure1.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEnD,uGAAuG;AACvG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC,oGAAoG;AACpG,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,qCAAqC;IACrC,QAAQ,EAAE,qBAAqB;IAC/B,qEAAqE;IACrE,SAAS,EAAE,sBAAsB;IACjC,oGAAoG;IACpG,cAAc,EAAE,2BAA2B;IAC3C,wFAAwF;IACxF,eAAe,EAAE,4BAA4B;IAC7C,gGAAgG;IAChG,wBAAwB,EAAE,qCAAqC;CACvD,CAAC;AA4BX;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAOhC;IACC,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACvF,MAAM,IAAI,GAAG;QACX,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,YAAY;QACnB,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,WAAW;QAClB,EAAE;KACH,CAAC;IAEF,iGAAiG;IACjG,kGAAkG;IAClG,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,UAAU,CAAC,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACxD,+FAA+F;QAC/F,8FAA8F;QAC9F,+FAA+F;QAC/F,mBAAmB;QACnB,MAAM,IAAI,KAAK,CACb,sCAAsC,oBAAoB,eAAe,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,qBAAqB,EAAE,GAAG,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,2FAA2F;AAC3F,SAAS,OAAO,CAAC,GAAc,EAAE,CAAS,EAAE,GAAW;IACrD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACjB,MAAM,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgB;IAC/C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,SAAS,EAAE,CAAC;IAE3F,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,OAAO,KAAK,kBAAkB,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,OAAO,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;IACnE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,cAAc,EAAE,CAAC;IAE3F,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACzC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,YAAY,UAAU;QAC5C,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACR,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,WAAW,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,eAAe,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,eAAe,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,eAAe,EAAE,CAAC;IAC1E,CAAC;IAED,kGAAkG;IAClG,mFAAmF;IACnF,IAAI,YAAY,GAAsB,IAAI,CAAC;IAC3C,IAAI,IAAI,EAAE,CAAC;QACT,YAAY,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACrD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,wBAAwB,EAAE,CAAC;QACnF,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,MAAM,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE;KAChG,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cello-protocol/protocol-types",
-  "version": "0.0.66",
+  "version": "0.0.68",
   "private": false,
   "type": "module",
   "engines": {
@@ -26,7 +26,7 @@
   ],
   "dependencies": {
     "cbor-x": "^1.6.4",
-    "@cello-protocol/crypto": "0.0.62"
+    "@cello-protocol/crypto": "0.0.64"
   },
   "devDependencies": {
     "@claude-flow/testing": "3.0.0-alpha.6",

package/test/vectors/structure1-v2-canonical.json

@@ -0,0 +1,14 @@
+{
+  "description": "020-ACKHASH: Structure 1 v2 canonical CBOR fixture — last_seen_hash appended at index 6. RFC 8949 §4.2.1.",
+  "_note": "Canonical CBOR of the 7-element positional TBS array for protocol_version=2. Inputs 1-5 are byte-for-byte the ones in structure1-canonical.json, so the two files together prove the field is APPENDED and no existing index moved: strip the leading '8702' and the trailing 32-byte hash from this hex and the remainder is the v1 hex after its leading '8601'.",
+  "inputs": {
+    "protocol_version": 2,
+    "content_hash_hex": "cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc",
+    "sender_pubkey_hex": "dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd",
+    "session_id_hex": "eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee",
+    "last_seen_seq": 3,
+    "timestamp": 1700000000000,
+    "last_seen_hash_hex": "a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7"
+  },
+  "expected_cbor_hex": "87025820cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc5820dddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddddd50eeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee031b0000018bcfe568005820a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7a7"
+}