@emilia-protocol/gate 0.11.0 → 0.14.0

package/dist/action-escrow-state.d.ts

@@ -0,0 +1,141 @@
+/**
+ * EP-ACTION-ESCROW-STATE-STATEMENT-v1
+ *
+ * A portable, operator-signed statement over one exact durable Action Escrow
+ * snapshot. The signature authenticates an operator statement; it does not
+ * prove the operator's database was complete or that a custodian moved money.
+ */
+import crypto from 'node:crypto';
+export declare const ACTION_ESCROW_STATE_STATEMENT_VERSION = "EP-ACTION-ESCROW-STATE-STATEMENT-v1";
+export declare const ACTION_ESCROW_STATE_STATEMENT_DOMAIN = "EP-ACTION-ESCROW-STATE-STATEMENT-v1\0";
+/**
+ * Sign one exact state snapshot. Issuance may throw on invalid local input;
+ * verification below never throws.
+ */
+export declare function signActionEscrowStateStatement({ statementId, agreementId, bindingDigest, actionDigest, profileDigest, state, revision, amendmentDigests, stateRecord, previousStatementDigest, occurredAt, }?: {
+    statementId?: string;
+    agreementId?: string;
+    bindingDigest?: string;
+    actionDigest?: string;
+    profileDigest?: string;
+    state?: string;
+    revision?: number;
+    amendmentDigests?: string[];
+    stateRecord?: unknown;
+    previousStatementDigest?: string | null;
+    occurredAt?: string;
+}, { operatorId, keyId, privateKey, }?: {
+    operatorId?: string;
+    keyId?: string;
+    privateKey?: crypto.KeyObject | Parameters<typeof crypto.createPrivateKey>[0];
+}): any;
+/**
+ * Verify one state statement against an exact snapshot and relying-party pins.
+ *
+ * @param {*} statement
+ */
+export declare function verifyActionEscrowStateStatement(statement: any, { trustedKeys, stateRecord, expectedAgreementId, expectedBindingDigest, expectedActionDigest, expectedProfileDigest, expectedState, expectedRevision, expectedAmendmentDigests, expectedPreviousStatementDigest, now, }?: {
+    trustedKeys?: unknown;
+    stateRecord?: unknown;
+    expectedAgreementId?: string;
+    expectedBindingDigest?: string;
+    expectedActionDigest?: string;
+    expectedProfileDigest?: string;
+    expectedState?: string;
+    expectedRevision?: number;
+    expectedAmendmentDigests?: string[];
+    expectedPreviousStatementDigest?: string | null;
+    now?: Date | number | string;
+}): {
+    valid: boolean;
+    reason: any;
+    checks: any;
+    statement_digest: null;
+    agreement_id: null;
+    binding_digest: null;
+    action_digest: null;
+    profile_digest: null;
+    state: null;
+    revision: null;
+    amendment_digests: never[];
+} | {
+    valid: boolean;
+    reason: string;
+    checks: {
+        structure: boolean;
+        payload: boolean;
+        issuer_pin: boolean;
+        signature: boolean;
+        statement_digest: boolean;
+        state_record: boolean;
+        expected_bindings: boolean;
+        time: boolean;
+    };
+    statement_digest: string;
+    agreement_id: any;
+    binding_digest: any;
+    action_digest: any;
+    profile_digest: any;
+    state: any;
+    revision: any;
+    amendment_digests: any[];
+};
+/**
+ * Build the callback expected by verifyActionEscrowEvidencePackage. The
+ * package carries both the exact durable snapshot and the signed statement
+ * over it; trust keys and time remain verifier configuration.
+ */
+export declare function createActionEscrowStatePackageVerifier({ trustedKeys, now, minimumRevision, }?: {
+    trustedKeys?: unknown;
+    now?: Date | number | string;
+    minimumRevision?: number;
+}): (packaged: any, expected?: {
+    agreementId?: string;
+    bindingDigest?: string;
+    actionDigest?: string;
+    profileDigest?: string;
+    stage?: string;
+    amendmentDigests?: string[];
+}) => Promise<{
+    valid: boolean;
+    reason: any;
+    checks: any;
+    statement_digest: null;
+    agreement_id: null;
+    binding_digest: null;
+    action_digest: null;
+    profile_digest: null;
+    state: null;
+    revision: null;
+    amendment_digests: never[];
+} | {
+    valid: boolean;
+    reason: string;
+    checks: {
+        structure: boolean;
+        payload: boolean;
+        issuer_pin: boolean;
+        signature: boolean;
+        statement_digest: boolean;
+        state_record: boolean;
+        expected_bindings: boolean;
+        time: boolean;
+    };
+    statement_digest: string;
+    agreement_id: any;
+    binding_digest: any;
+    action_digest: any;
+    profile_digest: any;
+    state: any;
+    revision: any;
+    amendment_digests: any[];
+}>;
+declare const _default: {
+    ACTION_ESCROW_STATE_STATEMENT_VERSION: string;
+    ACTION_ESCROW_STATE_STATEMENT_DOMAIN: string;
+    signActionEscrowStateStatement: typeof signActionEscrowStateStatement;
+    verifyActionEscrowStateStatement: typeof verifyActionEscrowStateStatement;
+    createActionEscrowStatePackageVerifier: typeof createActionEscrowStatePackageVerifier;
+};
+export default _default;
+//# sourceMappingURL=action-escrow-state.d.ts.map

package/dist/action-escrow-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-escrow-state.d.ts","sourceRoot":"","sources":["../src/action-escrow-state.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AAIjC,eAAO,MAAM,qCAAqC,wCAAwC,CAAC;AAC3F,eAAO,MAAM,oCAAoC,0CAA+C,CAAC;AA4MjG;;;GAGG;AACH,wBAAgB,8BAA8B,CAAC,EAC7C,WAAW,EACX,WAAW,EACX,aAAa,EACb,YAAY,EACZ,aAAa,EACb,KAAK,EACL,QAAQ,EACR,gBAAqB,EACrB,WAAW,EACX,uBAA8B,EAC9B,UAAU,GACX,GAAE;IACD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC;CAChB,EAAE,EACN,UAAU,EACV,KAAK,EACL,UAAU,GACX,GAAE;IACD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC,SAAS,GAAG,UAAU,CAAC,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;CAC1E,OA6CL;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAAC,SAAS,KAAA,EAAE,EAC1D,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,+BAA+B,EAC/B,GAAG,GACJ,GAAE;IACD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;IACpC,+BAA+B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChD,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;CACzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkGL;AAED;;;;GAIG;AACH,wBAAgB,sCAAsC,CAAC,EACrD,WAAW,EACX,GAAG,EACH,eAAmB,GACpB,GAAE;IACD,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,GAAG,CAAC,EAAE,IAAI,GAAG,MAAM,GAAG,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;CACrB,IAQsC,aAAQ,EAAE,WAAU;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCP;;;;;;;;AAED,wBAME"}

package/dist/action-escrow-state.js

@@ -0,0 +1,413 @@
+// @ts-nocheck
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * EP-ACTION-ESCROW-STATE-STATEMENT-v1
+ *
+ * A portable, operator-signed statement over one exact durable Action Escrow
+ * snapshot. The signature authenticates an operator statement; it does not
+ * prove the operator's database was complete or that a custodian moved money.
+ */
+import crypto from 'node:crypto';
+import { canonicalize, hashCanonical } from './execution-binding.js';
+import { ACTION_ESCROW_EVIDENCE_STAGES } from './action-escrow-evidence.js';
+export const ACTION_ESCROW_STATE_STATEMENT_VERSION = 'EP-ACTION-ESCROW-STATE-STATEMENT-v1';
+export const ACTION_ESCROW_STATE_STATEMENT_DOMAIN = `${ACTION_ESCROW_STATE_STATEMENT_VERSION}\0`;
+const HASH = /^sha256:[0-9a-f]{64}$/;
+const ID = /^[A-Za-z0-9][A-Za-z0-9._:/#@+-]{0,255}$/;
+const BASE64URL = /^[A-Za-z0-9_-]+$/;
+const TOP_KEYS = new Set(['version', 'issuer', 'payload', 'statement_digest', 'signature']);
+const ISSUER_KEYS = new Set(['operator_id', 'key_id']);
+const PAYLOAD_KEYS = new Set([
+    'statement_id',
+    'agreement_id',
+    'binding_digest',
+    'action_digest',
+    'profile_digest',
+    'state',
+    'revision',
+    'amendment_digests',
+    'state_record_digest',
+    'previous_statement_digest',
+    'occurred_at',
+]);
+const SIGNATURE_KEYS = new Set(['algorithm', 'signature_b64u']);
+function isRecord(value) {
+    return value !== null
+        && typeof value === 'object'
+        && !Array.isArray(value)
+        && (Object.getPrototypeOf(value) === Object.prototype
+            || Object.getPrototypeOf(value) === null);
+}
+/**
+ * @param {*} value
+ * @param {Set<string>} keys
+ */
+function exactKeys(value, keys) {
+    return isRecord(value)
+        && Object.keys(value).length === keys.size
+        && Object.keys(value).every((key) => keys.has(key));
+}
+/** @param {*} value */
+function strictInstant(value) {
+    if (typeof value !== 'string')
+        return NaN;
+    const match = value.match(/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d{1,9})?Z$/);
+    if (!match)
+        return NaN;
+    const [, year, month, day, hour, minute, second] = match;
+    const calendar = new Date(0);
+    calendar.setUTCFullYear(Number(year), Number(month) - 1, Number(day));
+    calendar.setUTCHours(Number(hour), Number(minute), Number(second), 0);
+    if (calendar.toISOString().slice(0, 19)
+        !== `${year}-${month}-${day}T${hour}:${minute}:${second}`)
+        return NaN;
+    const parsed = Date.parse(value);
+    return Number.isFinite(parsed) ? parsed : NaN;
+}
+/** @param {*} value */
+function boundedCanonicalCopy(value) {
+    let nodes = 0;
+    let bytes = 0;
+    const seen = new WeakSet();
+    /**
+     * @param {*} current
+     * @param {number} depth
+     * @returns {*}
+     */
+    function copy(current, depth) {
+        nodes += 1;
+        if (nodes > 50_000 || depth > 64)
+            throw new TypeError('state statement exceeds resource limits');
+        if (current === null || typeof current === 'boolean')
+            return current;
+        if (typeof current === 'string') {
+            bytes += Buffer.byteLength(current, 'utf8');
+            if (bytes > 4 * 1024 * 1024)
+                throw new TypeError('state statement exceeds string limit');
+            return current;
+        }
+        if (typeof current === 'number') {
+            if (!Number.isSafeInteger(current) || Object.is(current, -0)) {
+                throw new TypeError('state statement contains a non-canonical number');
+            }
+            return current;
+        }
+        if (!isRecord(current) && !Array.isArray(current)) {
+            throw new TypeError('state statement is not canonical JSON');
+        }
+        if (seen.has(current))
+            throw new TypeError('state statement contains an alias or cycle');
+        seen.add(current);
+        if (Array.isArray(current))
+            return current.map((entry) => copy(entry, depth + 1));
+        return Object.fromEntries(Object.entries(current).map(([key, entry]) => [key, copy(entry, depth + 1)]));
+    }
+    return copy(value, 0);
+}
+/** @param {*} value */
+function canonicalHash(value) {
+    return `sha256:${hashCanonical(value)}`;
+}
+/**
+ * @typedef {Object} StateStatementLike
+ * @property {string} [version]
+ * @property {*} [issuer]
+ * @property {*} [payload]
+ * @property {string} [statement_digest]
+ * @property {*} [signature]
+ */
+/** @param {StateStatementLike} statement */
+function signingBody(statement) {
+    return {
+        version: statement.version,
+        issuer: statement.issuer,
+        payload: statement.payload,
+    };
+}
+/** @param {StateStatementLike} statement */
+function stateSigningBytes(statement) {
+    const body = boundedCanonicalCopy(signingBody(statement));
+    return Buffer.from(ACTION_ESCROW_STATE_STATEMENT_DOMAIN + canonicalize(body), 'utf8');
+}
+/** @param {*} value */
+function deepFreeze(value) {
+    if (!value || typeof value !== 'object' || Object.isFrozen(value))
+        return value;
+    Object.freeze(value);
+    for (const child of Object.values(value))
+        deepFreeze(child);
+    return value;
+}
+/**
+ * @param {*} value
+ * @param {number} [length]
+ */
+function strictBase64url(value, length) {
+    if (typeof value !== 'string' || !BASE64URL.test(value) || value.length % 4 === 1)
+        return null;
+    const bytes = Buffer.from(value, 'base64url');
+    if (bytes.toString('base64url') !== value || (length !== undefined && bytes.length !== length))
+        return null;
+    return bytes;
+}
+/** @param {*} value */
+function validDigestList(value) {
+    return Array.isArray(value)
+        && value.length <= 1024
+        && value.every((entry) => typeof entry === 'string' && HASH.test(entry))
+        && new Set(value).size === value.length;
+}
+/** @param {*} payload */
+function payloadValid(payload) {
+    return exactKeys(payload, PAYLOAD_KEYS)
+        && typeof payload.statement_id === 'string' && ID.test(payload.statement_id)
+        && typeof payload.agreement_id === 'string' && ID.test(payload.agreement_id)
+        && HASH.test(payload.binding_digest)
+        && HASH.test(payload.action_digest)
+        && HASH.test(payload.profile_digest)
+        && ACTION_ESCROW_EVIDENCE_STAGES.includes(payload.state)
+        && Number.isSafeInteger(payload.revision) && payload.revision >= 0
+        && validDigestList(payload.amendment_digests)
+        && HASH.test(payload.state_record_digest)
+        && (payload.previous_statement_digest === null || HASH.test(payload.previous_statement_digest))
+        && Number.isFinite(strictInstant(payload.occurred_at));
+}
+/**
+ * @typedef {Object} StateStatementChecks
+ * @property {boolean} structure
+ * @property {boolean} payload
+ * @property {boolean} issuer_pin
+ * @property {boolean} signature
+ * @property {boolean} statement_digest
+ * @property {boolean} state_record
+ * @property {boolean} expected_bindings
+ * @property {boolean} time
+ */
+/**
+ * @param {string} reason
+ * @param {StateStatementChecks} checks
+ */
+function refuse(reason, checks) {
+    return {
+        valid: false,
+        reason,
+        checks,
+        statement_digest: null,
+        agreement_id: null,
+        binding_digest: null,
+        action_digest: null,
+        profile_digest: null,
+        state: null,
+        revision: null,
+        amendment_digests: [],
+    };
+}
+/**
+ * Sign one exact state snapshot. Issuance may throw on invalid local input;
+ * verification below never throws.
+ */
+export function signActionEscrowStateStatement({ statementId, agreementId, bindingDigest, actionDigest, profileDigest, state, revision, amendmentDigests = [], stateRecord, previousStatementDigest = null, occurredAt, } = {}, { operatorId, keyId, privateKey, } = {}) {
+    const stateRecordCopy = boundedCanonicalCopy(stateRecord);
+    const statement = {
+        version: ACTION_ESCROW_STATE_STATEMENT_VERSION,
+        issuer: {
+            operator_id: operatorId,
+            key_id: keyId,
+        },
+        payload: {
+            statement_id: statementId,
+            agreement_id: agreementId,
+            binding_digest: bindingDigest,
+            action_digest: actionDigest,
+            profile_digest: profileDigest,
+            state,
+            revision,
+            amendment_digests: boundedCanonicalCopy(amendmentDigests),
+            state_record_digest: canonicalHash(stateRecordCopy),
+            previous_statement_digest: previousStatementDigest,
+            occurred_at: occurredAt,
+        },
+    };
+    if (!exactKeys(statement.issuer, ISSUER_KEYS)
+        || typeof operatorId !== 'string' || !ID.test(operatorId)
+        || typeof keyId !== 'string' || !ID.test(keyId)
+        || !payloadValid(statement.payload)) {
+        throw new TypeError('action-escrow state statement input is invalid');
+    }
+    // privateKey may be omitted by a caller (optional field); createPrivateKey
+    // throws on undefined input, matching this function's documented
+    // throw-on-invalid-local-input contract.
+    const key = privateKey instanceof crypto.KeyObject ? privateKey : crypto.createPrivateKey(privateKey);
+    if (key.asymmetricKeyType !== 'ed25519') {
+        throw new TypeError('action-escrow state statement key must be Ed25519');
+    }
+    const bytes = stateSigningBytes(statement);
+    const statementDigest = `sha256:${crypto.createHash('sha256').update(bytes).digest('hex')}`;
+    return deepFreeze({
+        ...statement,
+        statement_digest: statementDigest,
+        signature: {
+            algorithm: 'Ed25519',
+            signature_b64u: crypto.sign(null, bytes, key).toString('base64url'),
+        },
+    });
+}
+/**
+ * Verify one state statement against an exact snapshot and relying-party pins.
+ *
+ * @param {*} statement
+ */
+export function verifyActionEscrowStateStatement(statement, { trustedKeys, stateRecord, expectedAgreementId, expectedBindingDigest, expectedActionDigest, expectedProfileDigest, expectedState, expectedRevision, expectedAmendmentDigests, expectedPreviousStatementDigest, now, } = {}) {
+    const checks = {
+        structure: false,
+        payload: false,
+        issuer_pin: false,
+        signature: false,
+        statement_digest: false,
+        state_record: false,
+        expected_bindings: false,
+        time: false,
+    };
+    try {
+        checks.structure = exactKeys(statement, TOP_KEYS)
+            && statement.version === ACTION_ESCROW_STATE_STATEMENT_VERSION
+            && exactKeys(statement.issuer, ISSUER_KEYS)
+            && exactKeys(statement.signature, SIGNATURE_KEYS);
+        if (!checks.structure)
+            return refuse('malformed_state_statement', checks);
+        checks.payload = payloadValid(statement.payload);
+        if (!checks.payload)
+            return refuse('invalid_state_payload', checks);
+        const pin = isRecord(trustedKeys) && Object.hasOwn(trustedKeys, statement.issuer.key_id)
+            ? trustedKeys[statement.issuer.key_id]
+            : null;
+        checks.issuer_pin = exactKeys(pin, new Set(['operator_id', 'public_key']))
+            && pin.operator_id === statement.issuer.operator_id
+            && typeof pin.public_key === 'string';
+        if (!checks.issuer_pin)
+            return refuse('operator_key_not_pinned', checks);
+        const publicBytes = strictBase64url(pin.public_key);
+        const signatureBytes = strictBase64url(statement.signature.signature_b64u, 64);
+        let publicKey = null;
+        try {
+            // publicBytes may be null here (checked below via publicBytes !== null);
+            // createPublicKey rejects a null key and the catch maps that to null.
+            publicKey = crypto.createPublicKey({ key: publicBytes, format: 'der', type: 'spki' });
+        }
+        catch {
+            publicKey = null;
+        }
+        const bytes = stateSigningBytes(statement);
+        checks.signature = statement.signature.algorithm === 'Ed25519'
+            && publicBytes !== null
+            && signatureBytes !== null
+            && publicKey?.asymmetricKeyType === 'ed25519'
+            && crypto.verify(null, bytes, publicKey, signatureBytes);
+        if (!checks.signature)
+            return refuse('state_signature_invalid', checks);
+        const digest = `sha256:${crypto.createHash('sha256').update(bytes).digest('hex')}`;
+        checks.statement_digest = statement.statement_digest === digest;
+        if (!checks.statement_digest)
+            return refuse('state_statement_digest_mismatch', checks);
+        checks.state_record = canonicalHash(boundedCanonicalCopy(stateRecord))
+            === statement.payload.state_record_digest;
+        if (!checks.state_record)
+            return refuse('state_record_digest_mismatch', checks);
+        const amendments = expectedAmendmentDigests;
+        checks.expected_bindings = typeof expectedAgreementId === 'string'
+            && statement.payload.agreement_id === expectedAgreementId
+            && statement.payload.binding_digest === expectedBindingDigest
+            && statement.payload.action_digest === expectedActionDigest
+            && statement.payload.profile_digest === expectedProfileDigest
+            && statement.payload.state === expectedState
+            && statement.payload.revision === expectedRevision
+            && Array.isArray(amendments)
+            && statement.payload.amendment_digests.length === amendments.length
+            && statement.payload.amendment_digests.every(
+            /**
+             * @param {string} entry
+             * @param {number} index
+             */
+            (entry, index) => entry === amendments[index])
+            && statement.payload.previous_statement_digest === expectedPreviousStatementDigest;
+        if (!checks.expected_bindings)
+            return refuse('state_expected_binding_mismatch', checks);
+        const evaluation = now instanceof Date
+            ? now.getTime()
+            : typeof now === 'number' ? now : strictInstant(now);
+        checks.time = Number.isFinite(evaluation)
+            && strictInstant(statement.payload.occurred_at) <= evaluation;
+        if (!checks.time)
+            return refuse('state_statement_from_future', checks);
+        return {
+            valid: true,
+            reason: 'verified',
+            checks,
+            statement_digest: digest,
+            agreement_id: statement.payload.agreement_id,
+            binding_digest: statement.payload.binding_digest,
+            action_digest: statement.payload.action_digest,
+            profile_digest: statement.payload.profile_digest,
+            state: statement.payload.state,
+            revision: statement.payload.revision,
+            amendment_digests: [...statement.payload.amendment_digests],
+        };
+    }
+    catch {
+        return refuse('malformed_state_statement', checks);
+    }
+}
+/**
+ * Build the callback expected by verifyActionEscrowEvidencePackage. The
+ * package carries both the exact durable snapshot and the signed statement
+ * over it; trust keys and time remain verifier configuration.
+ */
+export function createActionEscrowStatePackageVerifier({ trustedKeys, now, minimumRevision = 0, } = {}) {
+    if (!Number.isSafeInteger(minimumRevision) || minimumRevision < 0) {
+        throw new TypeError('minimumRevision must be a non-negative safe integer');
+    }
+    const pinnedKeys = boundedCanonicalCopy(trustedKeys);
+    /**
+     * @param {*} packaged
+     */
+    return async function verifyPackagedState(packaged, expected = {}) {
+        if (!exactKeys(packaged, new Set(['snapshot', 'statement']))
+            || !isRecord(packaged.statement?.payload)
+            || !isRecord(packaged.snapshot)
+            || packaged.statement.payload.state !== packaged.snapshot.state
+            || packaged.statement.payload.revision !== packaged.snapshot.revision
+            || packaged.statement.payload.revision < minimumRevision) {
+            return refuse('malformed_packaged_state', {
+                structure: false,
+                payload: false,
+                issuer_pin: false,
+                signature: false,
+                statement_digest: false,
+                state_record: false,
+                expected_bindings: false,
+                time: false,
+            });
+        }
+        return verifyActionEscrowStateStatement(packaged.statement, {
+            trustedKeys: pinnedKeys,
+            stateRecord: packaged.snapshot,
+            expectedAgreementId: expected.agreementId,
+            expectedBindingDigest: expected.bindingDigest,
+            expectedActionDigest: expected.actionDigest,
+            expectedProfileDigest: expected.profileDigest,
+            expectedState: expected.stage,
+            expectedRevision: packaged.statement.payload.revision,
+            expectedAmendmentDigests: expected.amendmentDigests,
+            expectedPreviousStatementDigest: packaged.statement.payload.previous_statement_digest,
+            now,
+        });
+    };
+}
+export default {
+    ACTION_ESCROW_STATE_STATEMENT_VERSION,
+    ACTION_ESCROW_STATE_STATEMENT_DOMAIN,
+    signActionEscrowStateStatement,
+    verifyActionEscrowStateStatement,
+    createActionEscrowStatePackageVerifier,
+};
+//# sourceMappingURL=action-escrow-state.js.map

package/dist/action-escrow-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-escrow-state.js","sourceRoot":"","sources":["../src/action-escrow-state.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;GAMG;AACH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAE5E,MAAM,CAAC,MAAM,qCAAqC,GAAG,qCAAqC,CAAC;AAC3F,MAAM,CAAC,MAAM,oCAAoC,GAAG,GAAG,qCAAqC,IAAI,CAAC;AAEjG,MAAM,IAAI,GAAG,uBAAuB,CAAC;AACrC,MAAM,EAAE,GAAG,yCAAyC,CAAC;AACrD,MAAM,SAAS,GAAG,kBAAkB,CAAC;AACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAC,CAAC;AAC5F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;AACvD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc;IACd,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,OAAO;IACP,UAAU;IACV,mBAAmB;IACnB,qBAAqB;IACrB,2BAA2B;IAC3B,aAAa;CACd,CAAC,CAAC;AACH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEhE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI;WAChB,OAAO,KAAK,KAAK,QAAQ;WACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACrB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;eAChD,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,KAAK,EAAE,IAAI;IAC5B,OAAO,QAAQ,CAAC,KAAK,CAAC;WACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI;WACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,uBAAuB;AACvB,SAAS,aAAa,CAAC,KAAK;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CACvB,kEAAkE,CACnE,CAAC;IACF,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACjC,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,EAAE;QAAE,OAAO,GAAG,CAAC;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;AAChD,CAAC;AAED,uBAAuB;AACvB,SAAS,oBAAoB,CAAC,KAAK;IACjC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAE3B;;;;OAIG;IACH,SAAS,IAAI,CAAC,OAAO,EAAE,KAAK;QAC1B,KAAK,IAAI,CAAC,CAAC;QACX,IAAI,KAAK,GAAG,MAAM,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACjG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QACrE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;YACzF,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACzF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAClF,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAC7E,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACxB,CAAC;AAED,uBAAuB;AACvB,SAAS,aAAa,CAAC,KAAK;IAC1B,OAAO,UAAU,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;;;GAOG;AAEH,4CAA4C;AAC5C,SAAS,WAAW,CAAC,SAAS;IAC5B,OAAO;QACL,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAC;AACJ,CAAC;AAED,4CAA4C;AAC5C,SAAS,iBAAiB,CAAC,SAAS;IAClC,MAAM,IAAI,GAAG,oBAAoB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,IAAI,CAChB,oCAAoC,GAAG,YAAY,CAAC,IAAI,CAAC,EACzD,MAAM,CACP,CAAC;AACJ,CAAC;AAED,uBAAuB;AACvB,SAAS,UAAU,CAAC,KAAK;IACvB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAK,EAAE,MAAe;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uBAAuB;AACvB,SAAS,eAAe,CAAC,KAAK;IAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WACtB,KAAK,CAAC,MAAM,IAAI,IAAI;WACpB,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;WACrE,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;AAC5C,CAAC;AAED,yBAAyB;AACzB,SAAS,YAAY,CAAC,OAAO;IAC3B,OAAO,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC;WAClC,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;WACzE,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;WACzE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;WACjC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;WAChC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;WACjC,6BAA6B,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;WACrD,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC;WAC/D,eAAe,CAAC,OAAO,CAAC,iBAAiB,CAAC;WAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;WACtC,CAAC,OAAO,CAAC,yBAAyB,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;WAC5F,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;GAUG;AAEH;;;GAGG;AACH,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM;IAC5B,OAAO;QACL,KAAK,EAAE,KAAK;QACZ,MAAM;QACN,MAAM;QACN,gBAAgB,EAAE,IAAI;QACtB,YAAY,EAAE,IAAI;QAClB,cAAc,EAAE,IAAI;QACpB,aAAa,EAAE,IAAI;QACnB,cAAc,EAAE,IAAI;QACpB,KAAK,EAAE,IAAI;QACX,QAAQ,EAAE,IAAI;QACd,iBAAiB,EAAE,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,EAC7C,WAAW,EACX,WAAW,EACX,aAAa,EACb,YAAY,EACZ,aAAa,EACb,KAAK,EACL,QAAQ,EACR,gBAAgB,GAAG,EAAE,EACrB,WAAW,EACX,uBAAuB,GAAG,IAAI,EAC9B,UAAU,MAaR,EAAE,EAAE,EACN,UAAU,EACV,KAAK,EACL,UAAU,MAKR,EAAE;IACJ,MAAM,eAAe,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG;QAChB,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE;YACN,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,KAAK;SACd;QACD,OAAO,EAAE;YACP,YAAY,EAAE,WAAW;YACzB,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,aAAa;YAC7B,aAAa,EAAE,YAAY;YAC3B,cAAc,EAAE,aAAa;YAC7B,KAAK;YACL,QAAQ;YACR,iBAAiB,EAAE,oBAAoB,CAAC,gBAAgB,CAAC;YACzD,mBAAmB,EAAE,aAAa,CAAC,eAAe,CAAC;YACnD,yBAAyB,EAAE,uBAAuB;YAClD,WAAW,EAAE,UAAU;SACxB;KACF,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC;WACxC,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;WACtD,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;WAC5C,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxE,CAAC;IACD,2EAA2E;IAC3E,iEAAiE;IACjE,yCAAyC;IACzC,MAAM,GAAG,GAAG,UAAU,YAAY,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,UAAW,CAAC,CAAC;IACvG,IAAI,GAAG,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,eAAe,GAAG,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC5F,OAAO,UAAU,CAAC;QAChB,GAAG,SAAS;QACZ,gBAAgB,EAAE,eAAe;QACjC,SAAS,EAAE;YACT,SAAS,EAAE,SAAS;YACpB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;SACpE;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAAC,SAAS,EAAE,EAC1D,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,wBAAwB,EACxB,+BAA+B,EAC/B,GAAG,MAaD,EAAE;IACJ,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,KAAK;QAChB,gBAAgB,EAAE,KAAK;QACvB,YAAY,EAAE,KAAK;QACnB,iBAAiB,EAAE,KAAK;QACxB,IAAI,EAAE,KAAK;KACZ,CAAC;IACF,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC;eAC5C,SAAS,CAAC,OAAO,KAAK,qCAAqC;eAC3D,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC;eACxC,SAAS,CAAC,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;QAE1E,MAAM,CAAC,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAEpE,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;YACtF,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,CAAC,UAAU,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;eACrE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,MAAM,CAAC,WAAW;eAChD,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,UAAU;YAAE,OAAO,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;QAEzE,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,cAAc,GAAG,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/E,IAAI,SAAS,GAA4B,IAAI,CAAC;QAC9C,IAAI,CAAC;YACH,yEAAyE;YACzE,sEAAsE;YACtE,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,WAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS;eACzD,WAAW,KAAK,IAAI;eACpB,cAAc,KAAK,IAAI;eACvB,SAAS,EAAE,iBAAiB,KAAK,SAAS;eAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;QAExE,MAAM,MAAM,GAAG,UAAU,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,gBAAgB,KAAK,MAAM,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,gBAAgB;YAAE,OAAO,MAAM,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;QAEvF,MAAM,CAAC,YAAY,GAAG,aAAa,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;gBAChE,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,YAAY;YAAE,OAAO,MAAM,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;QAEhF,MAAM,UAAU,GAAG,wBAAwB,CAAC;QAC5C,MAAM,CAAC,iBAAiB,GAAG,OAAO,mBAAmB,KAAK,QAAQ;eAC7D,SAAS,CAAC,OAAO,CAAC,YAAY,KAAK,mBAAmB;eACtD,SAAS,CAAC,OAAO,CAAC,cAAc,KAAK,qBAAqB;eAC1D,SAAS,CAAC,OAAO,CAAC,aAAa,KAAK,oBAAoB;eACxD,SAAS,CAAC,OAAO,CAAC,cAAc,KAAK,qBAAqB;eAC1D,SAAS,CAAC,OAAO,CAAC,KAAK,KAAK,aAAa;eACzC,SAAS,CAAC,OAAO,CAAC,QAAQ,KAAK,gBAAgB;eAC/C,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;eACzB,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;eAChE,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK;YAC1C;;;eAGG;YACH,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,CAC9C;eACE,SAAS,CAAC,OAAO,CAAC,yBAAyB,KAAK,+BAA+B,CAAC;QACrF,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAAE,OAAO,MAAM,CAAC,iCAAiC,EAAE,MAAM,CAAC,CAAC;QAExF,MAAM,UAAU,GAAG,GAAG,YAAY,IAAI;YACpC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE;YACf,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;eACpC,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAEvE,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,UAAU;YAClB,MAAM;YACN,gBAAgB,EAAE,MAAM;YACxB,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,YAAY;YAC5C,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,cAAc;YAChD,aAAa,EAAE,SAAS,CAAC,OAAO,CAAC,aAAa;YAC9C,cAAc,EAAE,SAAS,CAAC,OAAO,CAAC,cAAc;YAChD,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK;YAC9B,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ;YACpC,iBAAiB,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC;SAC5D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sCAAsC,CAAC,EACrD,WAAW,EACX,GAAG,EACH,eAAe,GAAG,CAAC,MAKjB,EAAE;IACJ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,eAAe,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACrD;;OAEG;IACH,OAAO,KAAK,UAAU,mBAAmB,CAAC,QAAQ,EAAE,WAOhD,EAAE;QACJ,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;eACvD,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;eACtC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;eAC5B,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,QAAQ,CAAC,KAAK;eAC5D,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,QAAQ;eAClE,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,GAAG,eAAe,EAAE,CAAC;YAC3D,OAAO,MAAM,CAAC,0BAA0B,EAAE;gBACxC,SAAS,EAAE,KAAK;gBAChB,OAAO,EAAE,KAAK;gBACd,UAAU,EAAE,KAAK;gBACjB,SAAS,EAAE,KAAK;gBAChB,gBAAgB,EAAE,KAAK;gBACvB,YAAY,EAAE,KAAK;gBACnB,iBAAiB,EAAE,KAAK;gBACxB,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QACD,OAAO,gCAAgC,CAAC,QAAQ,CAAC,SAAS,EAAE;YAC1D,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,QAAQ,CAAC,QAAQ;YAC9B,mBAAmB,EAAE,QAAQ,CAAC,WAAW;YACzC,qBAAqB,EAAE,QAAQ,CAAC,aAAa;YAC7C,oBAAoB,EAAE,QAAQ,CAAC,YAAY;YAC3C,qBAAqB,EAAE,QAAQ,CAAC,aAAa;YAC7C,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,gBAAgB,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ;YACrD,wBAAwB,EAAE,QAAQ,CAAC,gBAAgB;YACnD,+BAA+B,EAAE,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,yBAAyB;YACrF,GAAG;SACJ,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,eAAe;IACb,qCAAqC;IACrC,oCAAoC;IACpC,8BAA8B;IAC9B,gCAAgC;IAChC,sCAAsC;CACvC,CAAC"}

package/dist/action-escrow-verifiers.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Validated, sorted shape of the caller-supplied expected-binding context
+ * returned by {@link exactExpected}.
+ * @typedef {Object} ExpectedActionBindingContext
+ * @property {string} agreement_digest
+ * @property {string} document_action_binding_digest
+ * @property {string} release_action_digest
+ * @property {string} milestone_id
+ * @property {Array<{party_id: string, role: string}>} parties
+ * @property {string} parties_digest
+ * @property {string} profile_digest
+ * @property {string|null} supersedes_document_action_binding_digest
+ */
+/**
+ * Validated release-action template shape produced by
+ * {@link validateActionEscrowReleaseTemplate}.
+ * @typedef {Object} ActionEscrowReleaseTemplate
+ * @property {string} action_type
+ * @property {string} action_escrow_profile_digest
+ * @property {string} agreement_id
+ * @property {string} agreement_digest
+ * @property {string} milestone_id
+ * @property {string} amount
+ * @property {string} currency
+ * @property {string} destination_id
+ * @property {string} payee_id
+ * @property {string} custodian_provider
+ * @property {'sandbox'|'production'} custodian_environment
+ * @property {string} custodian_transaction_id
+ * @property {string} custodian_milestone_id
+ * @property {string} document_sha256
+ * @property {string} material_terms_sha256
+ * @property {string} completion_evidence_sha256
+ * @property {number} amendment_version
+ * @property {string} [project_record_snapshot_digest]
+ * @property {string} [action_escrow_template_profile]
+ */
+export declare const ACTION_ESCROW_AGREEMENT_DIGEST_VERSION = "EP-ACTION-ESCROW-AGREEMENT-DIGEST-v1";
+export declare const ACTION_ESCROW_CONTRACTOR_TEMPLATE_VERSION = "EP-ACTION-ESCROW-CONTRACTOR-TEMPLATE-v1";
+export declare const ACTION_ESCROW_REQUIRED_MATERIAL_TERM_IDS: readonly string[];
+export declare const ACTION_ESCROW_CONTRACTOR_REQUIRED_MATERIAL_TERM_IDS: readonly string[];
+export declare function computeActionEscrowAgreementDigest(agreementId: any): string | null;
+export declare function validateActionEscrowReleaseTemplate(template: any, { profileDigest, agreementId, agreementDigest, milestoneId, documentDigest, materialTerms, contractorProjectSource, }?: {
+    profileDigest?: any;
+    agreementId?: any;
+    agreementDigest?: any;
+    milestoneId?: any;
+    documentDigest?: any;
+    materialTerms?: any;
+    contractorProjectSource?: boolean;
+}): any;
+export declare function createActionEscrowDocumentBindingVerifier(options?: {}): (binding: any, untrustedExpected: any) => Promise<any>;
+export declare function createActionEscrowContractorDocumentBindingVerifier(options?: {}): (binding: any, untrustedExpected: any) => Promise<any>;
+declare const _default: Readonly<{
+    ACTION_ESCROW_AGREEMENT_DIGEST_VERSION: "EP-ACTION-ESCROW-AGREEMENT-DIGEST-v1";
+    ACTION_ESCROW_CONTRACTOR_TEMPLATE_VERSION: "EP-ACTION-ESCROW-CONTRACTOR-TEMPLATE-v1";
+    ACTION_ESCROW_CONTRACTOR_REQUIRED_MATERIAL_TERM_IDS: readonly string[];
+    ACTION_ESCROW_REQUIRED_MATERIAL_TERM_IDS: readonly string[];
+    computeActionEscrowAgreementDigest: typeof computeActionEscrowAgreementDigest;
+    createActionEscrowContractorDocumentBindingVerifier: typeof createActionEscrowContractorDocumentBindingVerifier;
+    createActionEscrowDocumentBindingVerifier: typeof createActionEscrowDocumentBindingVerifier;
+    validateActionEscrowReleaseTemplate: typeof validateActionEscrowReleaseTemplate;
+}>;
+export default _default;
+//# sourceMappingURL=action-escrow-verifiers.d.ts.map

package/dist/action-escrow-verifiers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-escrow-verifiers.d.ts","sourceRoot":"","sources":["../src/action-escrow-verifiers.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;GAYG;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,eAAO,MAAM,sCAAsC,yCACX,CAAC;AACzC,eAAO,MAAM,yCAAyC,4CACX,CAAC;AAK5C,eAAO,MAAM,wCAAwC,mBAWnD,CAAC;AACH,eAAO,MAAM,mDAAmD,mBAG9D,CAAC;AA8FH,wBAAgB,kCAAkC,CAAC,WAAW,KAAA,iBAU7D;AAgCD,wBAAgB,mCAAmC,CAAC,QAAQ,EAAE,GAAG,EAAE,EACjE,aAAa,EACb,WAAW,EACX,eAAe,EACf,WAAW,EACX,cAAc,EACd,aAAa,EACb,uBAA+B,GAChC,GAAE;IACD,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,eAAe,CAAC,EAAE,GAAG,CAAC;IACtB,WAAW,CAAC,EAAE,GAAG,CAAC;IAClB,cAAc,CAAC,EAAE,GAAG,CAAC;IACrB,aAAa,CAAC,EAAE,GAAG,CAAC;IACpB,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAC9B,OAgDL;AA6LD,wBAAgB,yCAAyC,CAAC,OAAO,KAAK,0DAIrE;AAED,wBAAgB,mDAAmD,CAAC,OAAO,KAAK,0DAI/E;;;;;;;;;;;AAED,wBASG"}