@fides-anima/fpp-protocol-core 1.0.2

package/dist/mandates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandates.d.ts","sourceRoot":"","sources":["../src/mandates.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAKtD,eAAO,MAAM,sBAAsB,8EAKzB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;EAqCnC,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAEvE,yEAAyE;AACzE,MAAM,MAAM,kBAAkB,GAAG;IAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,qBAAqB,GAAG;IAClC,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAYvE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,qBAAqB,GAC5B,eAAe,CAmBjB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,iBAAiB,GACzB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAiBzB;AA0BD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAW1E"}

package/dist/mandates.js

@@ -0,0 +1,127 @@
+/**
+ * Standing mandate schema — signed or allowlist-backed authorization
+ * consumed by the unattended disposition engine.
+ */
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+import { canonicalizeV2 } from "./canonical-json.js";
+import { verifySignature } from "./identity.js";
+export const MANDATE_ISSUER_CLASSES = [
+    "operator",
+    "peer-quorum",
+    "steward-quorum",
+    "standing-allowlist",
+];
+export const StandingMandateV1Schema = Type.Object({
+    schemaVersion: Type.Literal(1),
+    mandateId: Type.String({ minLength: 1 }),
+    issuerClass: Type.Union(MANDATE_ISSUER_CLASSES.map((c) => Type.Literal(c))),
+    issuerId: Type.String({ minLength: 1 }),
+    scope: Type.Object({
+        classifications: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
+        capabilities: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
+    }, { additionalProperties: false }),
+    budgets: Type.Object({
+        maxActions: Type.Optional(Type.Integer({ minimum: 0 })),
+        remainingActions: Type.Optional(Type.Integer({ minimum: 0 })),
+    }, { additionalProperties: false }),
+    validFrom: Type.String({ minLength: 1 }),
+    validTo: Type.String({ minLength: 1 }),
+    revocable: Type.Boolean(),
+    revoked: Type.Optional(Type.Boolean()),
+    evidenceRef: Type.String({ minLength: 1 }),
+    quorumRef: Type.Optional(Type.String({ minLength: 1 })),
+    publicKey: Type.Optional(Type.String({ minLength: 1 })),
+    signature: Type.Optional(Type.String({ minLength: 1 })),
+}, { additionalProperties: false });
+export function parseStandingMandate(input) {
+    if (!Value.Check(StandingMandateV1Schema, input)) {
+        const errors = [...Value.Errors(StandingMandateV1Schema, input)];
+        return {
+            ok: false,
+            error: errors[0] !== undefined
+                ? `${errors[0].path}: ${errors[0].message}`
+                : "invalid StandingMandateV1",
+        };
+    }
+    return { ok: true, mandate: input };
+}
+/**
+ * Temporal / revocation check for a schema-valid mandate.
+ * Budget debit and signature verification live in the plugin mandate store.
+ */
+export function validateMandateValidity(mandate, policy) {
+    if (mandate.revoked === true) {
+        return { valid: false, reason: "mandate revoked" };
+    }
+    const from = Date.parse(mandate.validFrom);
+    const to = Date.parse(mandate.validTo);
+    if (Number.isNaN(from) || Number.isNaN(to)) {
+        return { valid: false, reason: "validFrom/validTo must be ISO-8601" };
+    }
+    if (to <= from) {
+        return { valid: false, reason: "validTo must be after validFrom" };
+    }
+    if (policy.nowMs < from) {
+        return { valid: false, reason: "mandate not yet valid (validFrom)" };
+    }
+    if (policy.nowMs > to) {
+        return { valid: false, reason: "mandate expired" };
+    }
+    return { valid: true, reason: "ok" };
+}
+/**
+ * Canonical unsigned payload for new mandate signatures.
+ * Excludes `signature`, `revoked`, and `budgets.remainingActions` so debit/revoke
+ * can mutate an unsigned ledger without invalidating the grant.
+ */
+export function mandateSigningFields(mandate) {
+    const { signature: _signature, revoked: _revoked, budgets, ...rest } = mandate;
+    void _signature;
+    void _revoked;
+    const signingBudgets = {};
+    if (budgets.maxActions !== undefined) {
+        signingBudgets.maxActions = budgets.maxActions;
+    }
+    return {
+        ...rest,
+        budgets: signingBudgets,
+    };
+}
+function legacySigningFields(mandate) {
+    const { signature: _signature, ...unsigned } = mandate;
+    void _signature;
+    return unsigned;
+}
+function tryVerifyMandatePayload(mandate, payload) {
+    if (!mandate.publicKey || !mandate.signature) {
+        return false;
+    }
+    const message = Buffer.from(canonicalizeV2(payload), "utf8");
+    const sigBytes = Buffer.from(mandate.signature, "hex");
+    const pubBytes = Buffer.from(mandate.publicKey, "hex");
+    if (sigBytes.length !== 64 || pubBytes.length !== 32) {
+        return false;
+    }
+    return verifySignature(message, sigBytes, pubBytes);
+}
+/**
+ * Dual-verify mandate signatures:
+ * 1. New payload (`mandateSigningFields`) — preferred for newly issued grants.
+ * 2. Legacy payload (full object minus `signature`) — undebited historical files.
+ *
+ * Standing-allowlist mandates are unsigned by design.
+ */
+export function verifyMandateSignature(mandate) {
+    if (mandate.issuerClass === "standing-allowlist") {
+        return true;
+    }
+    if (!mandate.publicKey || !mandate.signature) {
+        return false;
+    }
+    if (tryVerifyMandatePayload(mandate, mandateSigningFields(mandate))) {
+        return true;
+    }
+    return tryVerifyMandatePayload(mandate, legacySigningFields(mandate));
+}
+//# sourceMappingURL=mandates.js.map

package/dist/mandates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandates.js","sourceRoot":"","sources":["../src/mandates.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,UAAU;IACV,aAAa;IACb,gBAAgB;IAChB,oBAAoB;CACZ,CAAC;AAIX,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC,MAAM,CAChD;IACE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,WAAW,EAAE,IAAI,CAAC,KAAK,CACrB,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAKhD,CACF;IACD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACvC,KAAK,EAAE,IAAI,CAAC,MAAM,CAChB;QACE,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;KACvE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC;IACD,OAAO,EAAE,IAAI,CAAC,MAAM,CAClB;QACE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;KAC9D,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC;IACD,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE;IACzB,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACtC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC1C,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACvD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACvD,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;CACxD,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAkCF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS;gBACrB,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;gBAC3C,CAAC,CAAC,2BAA2B;SAClC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAA0B,EAC1B,MAA6B;IAE7B,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,GAAG,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAA0B;IAE1B,MAAM,EACJ,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,QAAQ,EACjB,OAAO,EACP,GAAG,IAAI,EACR,GAAG,OAAO,CAAC;IACZ,KAAK,UAAU,CAAC;IAChB,KAAK,QAAQ,CAAC;IACd,MAAM,cAAc,GAA4B,EAAE,CAAC;IACnD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,cAAc,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACjD,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,OAAO,EAAE,cAAc;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAA0B;IAE1B,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;IACvD,KAAK,UAAU,CAAC;IAChB,OAAO,QAAmC,CAAC;AAC7C,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAA0B,EAC1B,OAAgC;IAEhC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA0B;IAC/D,IAAI,OAAO,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/merkle.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Versioned Merkle tree primitives.
+ *
+ * V1 preserves the historical SHA-256(utf8(left+right)) pairing used by
+ * audit proofs. V2 domain-separates leaf and internal-node hashes.
+ */
+export type MerkleProofStep = {
+    hash: string;
+    position: "left" | "right";
+};
+export type MerkleProof = {
+    leaf: string;
+    index: number;
+    path: MerkleProofStep[];
+    root: string;
+};
+/** Legacy pair hash: SHA-256(utf8(a + b)) with no domain separator. */
+export declare function hashPairV1(a: string, b: string): string;
+/** V2 pair hash: domain-separated internal node. */
+export declare function hashPairV2(a: string, b: string): string;
+export declare function computeMerkleRootV1(leaves: string[]): string;
+export declare function createMerkleProofV1(leaves: string[], index: number): MerkleProof | null;
+export declare function verifyMerkleProofV1(proof: MerkleProof): boolean;
+export declare function computeMerkleRootV2(leaves: string[]): string;
+export declare function createMerkleProofV2(leaves: string[], index: number): MerkleProof | null;
+export declare function verifyMerkleProofV2(proof: MerkleProof): boolean;
+/** Compatibility aliases matching historical script/plugin names (v1). */
+export declare const computeMerkleRoot: typeof computeMerkleRootV1;
+export declare const createMerkleProof: typeof createMerkleProofV1;
+export declare const verifyMerkleProof: typeof verifyMerkleProofV1;
+//# sourceMappingURL=merkle.d.ts.map

package/dist/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAMF,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,oDAAoD;AACpD,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AAqED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAE5D;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,GACZ,WAAW,GAAG,IAAI,CAEpB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAE/D;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,CAE5D;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,GACZ,WAAW,GAAG,IAAI,CAEpB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAE/D;AAED,0EAA0E;AAC1E,eAAO,MAAM,iBAAiB,4BAAsB,CAAC;AACrD,eAAO,MAAM,iBAAiB,4BAAsB,CAAC;AACrD,eAAO,MAAM,iBAAiB,4BAAsB,CAAC"}

package/dist/merkle.js

@@ -0,0 +1,95 @@
+/**
+ * Versioned Merkle tree primitives.
+ *
+ * V1 preserves the historical SHA-256(utf8(left+right)) pairing used by
+ * audit proofs. V2 domain-separates leaf and internal-node hashes.
+ */
+import { sha256 } from "@noble/hashes/sha256";
+import { bytesToHex, utf8ToBytes } from "@noble/hashes/utils";
+import { DIGEST_DOMAINS } from "./digest.js";
+function sha256Hex(data) {
+    return bytesToHex(sha256(utf8ToBytes(data)));
+}
+/** Legacy pair hash: SHA-256(utf8(a + b)) with no domain separator. */
+export function hashPairV1(a, b) {
+    return sha256Hex(a + b);
+}
+/** V2 pair hash: domain-separated internal node. */
+export function hashPairV2(a, b) {
+    return sha256Hex(DIGEST_DOMAINS.node + "\0" + a + "\0" + b);
+}
+function computeRoot(leaves, hashPair) {
+    if (leaves.length === 0)
+        return "0".repeat(64);
+    if (leaves.length === 1)
+        return leaves[0];
+    const level = [];
+    for (let i = 0; i < leaves.length; i += 2) {
+        const left = leaves[i];
+        const right = leaves[i + 1] ?? left;
+        level.push(hashPair(left, right));
+    }
+    return computeRoot(level, hashPair);
+}
+function createProof(leaves, index, hashPair) {
+    if (index < 0 || index >= leaves.length || leaves.length === 0)
+        return null;
+    const path = [];
+    let currentLevel = [...leaves];
+    let idx = index;
+    while (currentLevel.length > 1) {
+        if (currentLevel.length % 2 === 1) {
+            currentLevel.push(currentLevel[currentLevel.length - 1]);
+        }
+        const siblingIdx = idx % 2 === 0 ? idx + 1 : idx - 1;
+        path.push({
+            hash: currentLevel[siblingIdx],
+            position: idx % 2 === 0 ? "right" : "left",
+        });
+        const nextLevel = [];
+        for (let i = 0; i < currentLevel.length; i += 2) {
+            nextLevel.push(hashPair(currentLevel[i], currentLevel[i + 1]));
+        }
+        currentLevel = nextLevel;
+        idx = Math.floor(idx / 2);
+    }
+    return {
+        leaf: leaves[index],
+        index,
+        path,
+        root: currentLevel[0],
+    };
+}
+function verifyProof(proof, hashPair) {
+    let current = proof.leaf;
+    for (const step of proof.path) {
+        current =
+            step.position === "left"
+                ? hashPair(step.hash, current)
+                : hashPair(current, step.hash);
+    }
+    return current === proof.root;
+}
+export function computeMerkleRootV1(leaves) {
+    return computeRoot(leaves, hashPairV1);
+}
+export function createMerkleProofV1(leaves, index) {
+    return createProof(leaves, index, hashPairV1);
+}
+export function verifyMerkleProofV1(proof) {
+    return verifyProof(proof, hashPairV1);
+}
+export function computeMerkleRootV2(leaves) {
+    return computeRoot(leaves, hashPairV2);
+}
+export function createMerkleProofV2(leaves, index) {
+    return createProof(leaves, index, hashPairV2);
+}
+export function verifyMerkleProofV2(proof) {
+    return verifyProof(proof, hashPairV2);
+}
+/** Compatibility aliases matching historical script/plugin names (v1). */
+export const computeMerkleRoot = computeMerkleRootV1;
+export const createMerkleProof = createMerkleProofV1;
+export const verifyMerkleProof = verifyMerkleProofV1;
+//# sourceMappingURL=merkle.js.map

package/dist/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAc7C,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,UAAU,CAAC,CAAS,EAAE,CAAS;IAC7C,OAAO,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,UAAU,CAAC,CAAS,EAAE,CAAS;IAC7C,OAAO,SAAS,CAAC,cAAc,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAClB,MAAgB,EAChB,QAA0C;IAE1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC;IAE3C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAClB,MAAgB,EAChB,KAAa,EACb,QAA0C;IAE1C,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5E,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,IAAI,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC/B,IAAI,GAAG,GAAG,KAAK,CAAC;IAEhB,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,YAAY,CAAC,UAAU,CAAE;YAC/B,QAAQ,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;SAC3C,CAAC,CAAC;QAEH,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAE,EAAE,YAAY,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,YAAY,GAAG,SAAS,CAAC;QACzB,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,KAAK,CAAE;QACpB,KAAK;QACL,IAAI;QACJ,IAAI,EAAE,YAAY,CAAC,CAAC,CAAE;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAAkB,EAClB,QAA0C;IAE1C,IAAI,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,CAAC,QAAQ,KAAK,MAAM;gBACtB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;gBAC9B,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAgB;IAClD,OAAO,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAgB,EAChB,KAAa;IAEb,OAAO,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACpD,OAAO,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAgB;IAClD,OAAO,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAgB,EAChB,KAAa;IAEb,OAAO,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAkB;IACpD,OAAO,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;AACxC,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AACrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,mBAAmB,CAAC"}

package/dist/quorum.d.ts

@@ -0,0 +1,133 @@
+/**
+ * Quorum proposal, ballot, and evidence-package schemas.
+ * Quorum finalization produces StandingMandateV1 with evidenceRef
+ * pointing at the evidence digest — not constitutional ratification.
+ */
+import { type Static } from "@sinclair/typebox";
+export declare const QUORUM_CLASSES: readonly ["peer-quorum", "steward-quorum"];
+export type QuorumClass = (typeof QUORUM_CLASSES)[number];
+export declare const QUORUM_VOTES: readonly ["aye", "nay", "abstain"];
+export type QuorumVote = (typeof QUORUM_VOTES)[number];
+export declare const QuorumProposalV1Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    proposalId: import("@sinclair/typebox").TString;
+    quorumClass: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"peer-quorum">, import("@sinclair/typebox").TLiteral<"steward-quorum">]>;
+    proposerId: import("@sinclair/typebox").TString;
+    /** Digest of the intended unsigned mandate payload. */
+    mandateDigest: import("@sinclair/typebox").TString;
+    scope: import("@sinclair/typebox").TObject<{
+        classifications: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        capabilities: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+    }>;
+    budgets: import("@sinclair/typebox").TObject<{
+        maxActions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        remainingActions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+    }>;
+    mandateValidFrom: import("@sinclair/typebox").TString;
+    mandateValidTo: import("@sinclair/typebox").TString;
+    proposedAt: import("@sinclair/typebox").TString;
+    expiresAt: import("@sinclair/typebox").TString;
+    publicKey: import("@sinclair/typebox").TString;
+    signature: import("@sinclair/typebox").TString;
+}>;
+export type QuorumProposalV1 = Static<typeof QuorumProposalV1Schema>;
+export declare const QuorumBallotV1Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    ballotId: import("@sinclair/typebox").TString;
+    proposalId: import("@sinclair/typebox").TString;
+    voterId: import("@sinclair/typebox").TString;
+    vote: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"aye">, import("@sinclair/typebox").TLiteral<"nay">, import("@sinclair/typebox").TLiteral<"abstain">]>;
+    /** Must match the proposal's mandateDigest. */
+    mandateDigest: import("@sinclair/typebox").TString;
+    castAt: import("@sinclair/typebox").TString;
+    publicKey: import("@sinclair/typebox").TString;
+    signature: import("@sinclair/typebox").TString;
+}>;
+export type QuorumBallotV1 = Static<typeof QuorumBallotV1Schema>;
+export declare const QuorumEvidencePackageV1Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    proposal: import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+        proposalId: import("@sinclair/typebox").TString;
+        quorumClass: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"peer-quorum">, import("@sinclair/typebox").TLiteral<"steward-quorum">]>;
+        proposerId: import("@sinclair/typebox").TString;
+        /** Digest of the intended unsigned mandate payload. */
+        mandateDigest: import("@sinclair/typebox").TString;
+        scope: import("@sinclair/typebox").TObject<{
+            classifications: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+            capabilities: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>>;
+        }>;
+        budgets: import("@sinclair/typebox").TObject<{
+            maxActions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+            remainingActions: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TInteger>;
+        }>;
+        mandateValidFrom: import("@sinclair/typebox").TString;
+        mandateValidTo: import("@sinclair/typebox").TString;
+        proposedAt: import("@sinclair/typebox").TString;
+        expiresAt: import("@sinclair/typebox").TString;
+        publicKey: import("@sinclair/typebox").TString;
+        signature: import("@sinclair/typebox").TString;
+    }>;
+    ballots: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+        schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+        ballotId: import("@sinclair/typebox").TString;
+        proposalId: import("@sinclair/typebox").TString;
+        voterId: import("@sinclair/typebox").TString;
+        vote: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"aye">, import("@sinclair/typebox").TLiteral<"nay">, import("@sinclair/typebox").TLiteral<"abstain">]>;
+        /** Must match the proposal's mandateDigest. */
+        mandateDigest: import("@sinclair/typebox").TString;
+        castAt: import("@sinclair/typebox").TString;
+        publicKey: import("@sinclair/typebox").TString;
+        signature: import("@sinclair/typebox").TString;
+    }>>;
+    finalizedAt: import("@sinclair/typebox").TString;
+}>;
+export type QuorumEvidencePackageV1 = Static<typeof QuorumEvidencePackageV1Schema>;
+export type QuorumParseResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    error: string;
+};
+export type QuorumProposalParseResult = {
+    ok: true;
+    proposal: QuorumProposalV1;
+} | {
+    ok: false;
+    error: string;
+};
+export type QuorumBallotParseResult = {
+    ok: true;
+    ballot: QuorumBallotV1;
+} | {
+    ok: false;
+    error: string;
+};
+export type QuorumEvidenceParseResult = {
+    ok: true;
+    package: QuorumEvidencePackageV1;
+} | {
+    ok: false;
+    error: string;
+};
+export type BallotMatchResult = {
+    ok: true;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function parseQuorumProposal(input: unknown): QuorumProposalParseResult;
+export declare function parseQuorumBallot(input: unknown): QuorumBallotParseResult;
+export declare function parseQuorumEvidencePackage(input: unknown): QuorumEvidenceParseResult;
+/**
+ * Ballot must reference the same proposal and mandateDigest.
+ * Signature cryptographic verification is left to the plugin layer.
+ */
+export declare function validateBallotAgainstProposal(ballot: QuorumBallotV1, proposal: QuorumProposalV1): BallotMatchResult;
+/**
+ * Stable digest of a quorum evidence package for StandingMandateV1.evidenceRef.
+ * Domain-separated so it cannot be confused with claim/receipt digests.
+ */
+export declare function computeQuorumEvidenceDigest(pkg: QuorumEvidencePackageV1): string;
+//# sourceMappingURL=quorum.d.ts.map

package/dist/quorum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quorum.d.ts","sourceRoot":"","sources":["../src/quorum.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAItD,eAAO,MAAM,cAAc,4CAA6C,CAAC;AACzE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,eAAO,MAAM,YAAY,oCAAqC,CAAC;AAC/D,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAkBvD,eAAO,MAAM,sBAAsB;;;;;IAS/B,uDAAuD;;;;;;;;;;;;;;;;EAY1D,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,eAAO,MAAM,oBAAoB;;;;;;IAW7B,+CAA+C;;;;;EAOlD,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEjE,eAAO,MAAM,6BAA6B;;;;;;;QAtCtC,uDAAuD;;;;;;;;;;;;;;;;;;;;;;;QA2BvD,+CAA+C;;;;;;;EAmBlD,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,MAAM,CAC1C,OAAO,6BAA6B,CACrC,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,yBAAyB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,gBAAgB,CAAA;CAAE,GACxC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,uBAAuB,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,GACpC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,yBAAyB,GACjC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AASjC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAQ7E;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAQzE;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,yBAAyB,CAQ3B;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,cAAc,EACtB,QAAQ,EAAE,gBAAgB,GACzB,iBAAiB,CAcnB;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,uBAAuB,GAC3B,MAAM,CAWR"}

package/dist/quorum.js

@@ -0,0 +1,128 @@
+/**
+ * Quorum proposal, ballot, and evidence-package schemas.
+ * Quorum finalization produces StandingMandateV1 with evidenceRef
+ * pointing at the evidence digest — not constitutional ratification.
+ */
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+import { digest, DIGEST_DOMAINS } from "./digest.js";
+export const QUORUM_CLASSES = ["peer-quorum", "steward-quorum"];
+export const QUORUM_VOTES = ["aye", "nay", "abstain"];
+const ScopeSchema = Type.Object({
+    classifications: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
+    capabilities: Type.Optional(Type.Array(Type.String({ minLength: 1 }))),
+}, { additionalProperties: false });
+const BudgetsSchema = Type.Object({
+    maxActions: Type.Optional(Type.Integer({ minimum: 0 })),
+    remainingActions: Type.Optional(Type.Integer({ minimum: 0 })),
+}, { additionalProperties: false });
+export const QuorumProposalV1Schema = Type.Object({
+    schemaVersion: Type.Literal(1),
+    proposalId: Type.String({ minLength: 1 }),
+    quorumClass: Type.Union([
+        Type.Literal("peer-quorum"),
+        Type.Literal("steward-quorum"),
+    ]),
+    proposerId: Type.String({ minLength: 1 }),
+    /** Digest of the intended unsigned mandate payload. */
+    mandateDigest: Type.String({ minLength: 1 }),
+    scope: ScopeSchema,
+    budgets: BudgetsSchema,
+    mandateValidFrom: Type.String({ minLength: 1 }),
+    mandateValidTo: Type.String({ minLength: 1 }),
+    proposedAt: Type.String({ minLength: 1 }),
+    expiresAt: Type.String({ minLength: 1 }),
+    publicKey: Type.String({ minLength: 1 }),
+    signature: Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+export const QuorumBallotV1Schema = Type.Object({
+    schemaVersion: Type.Literal(1),
+    ballotId: Type.String({ minLength: 1 }),
+    proposalId: Type.String({ minLength: 1 }),
+    voterId: Type.String({ minLength: 1 }),
+    vote: Type.Union([
+        Type.Literal("aye"),
+        Type.Literal("nay"),
+        Type.Literal("abstain"),
+    ]),
+    /** Must match the proposal's mandateDigest. */
+    mandateDigest: Type.String({ minLength: 1 }),
+    castAt: Type.String({ minLength: 1 }),
+    publicKey: Type.String({ minLength: 1 }),
+    signature: Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+export const QuorumEvidencePackageV1Schema = Type.Object({
+    schemaVersion: Type.Literal(1),
+    proposal: QuorumProposalV1Schema,
+    ballots: Type.Array(QuorumBallotV1Schema, { minItems: 1 }),
+    finalizedAt: Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+function firstSchemaError(schema, input) {
+    const errors = [...Value.Errors(schema, input)];
+    return errors[0] !== undefined
+        ? `${errors[0].path}: ${errors[0].message}`
+        : "invalid input";
+}
+export function parseQuorumProposal(input) {
+    if (!Value.Check(QuorumProposalV1Schema, input)) {
+        return {
+            ok: false,
+            error: firstSchemaError(QuorumProposalV1Schema, input),
+        };
+    }
+    return { ok: true, proposal: input };
+}
+export function parseQuorumBallot(input) {
+    if (!Value.Check(QuorumBallotV1Schema, input)) {
+        return {
+            ok: false,
+            error: firstSchemaError(QuorumBallotV1Schema, input),
+        };
+    }
+    return { ok: true, ballot: input };
+}
+export function parseQuorumEvidencePackage(input) {
+    if (!Value.Check(QuorumEvidencePackageV1Schema, input)) {
+        return {
+            ok: false,
+            error: firstSchemaError(QuorumEvidencePackageV1Schema, input),
+        };
+    }
+    return { ok: true, package: input };
+}
+/**
+ * Ballot must reference the same proposal and mandateDigest.
+ * Signature cryptographic verification is left to the plugin layer.
+ */
+export function validateBallotAgainstProposal(ballot, proposal) {
+    if (ballot.proposalId !== proposal.proposalId) {
+        return {
+            ok: false,
+            error: `proposalId mismatch: ballot=${ballot.proposalId} proposal=${proposal.proposalId}`,
+        };
+    }
+    if (ballot.mandateDigest !== proposal.mandateDigest) {
+        return {
+            ok: false,
+            error: "mandateDigest mismatch between ballot and proposal",
+        };
+    }
+    return { ok: true };
+}
+/**
+ * Stable digest of a quorum evidence package for StandingMandateV1.evidenceRef.
+ * Domain-separated so it cannot be confused with claim/receipt digests.
+ */
+export function computeQuorumEvidenceDigest(pkg) {
+    return digest({
+        version: 2,
+        domain: DIGEST_DOMAINS.quorum,
+        value: {
+            schemaVersion: pkg.schemaVersion,
+            proposal: pkg.proposal,
+            ballots: pkg.ballots,
+            finalizedAt: pkg.finalizedAt,
+        },
+    });
+}
+//# sourceMappingURL=quorum.js.map

package/dist/quorum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quorum.js","sourceRoot":"","sources":["../src/quorum.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAU,CAAC;AAGzE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;AAG/D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAC7B;IACE,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;CACvE,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,MAAM,aAAa,GAAG,IAAI,CAAC,MAAM,CAC/B;IACE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACvD,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;CAC9D,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAC/C;IACE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;KAC/B,CAAC;IACF,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,uDAAuD;IACvD,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC5C,KAAK,EAAE,WAAW;IAClB,OAAO,EAAE,aAAa;IACtB,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC/C,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC7C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CACzC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAIF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,MAAM,CAC7C;IACE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACvC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;KACxB,CAAC;IACF,+CAA+C;IAC/C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC5C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACrC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CACzC,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AAIF,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC,MAAM,CACtD;IACE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,sBAAsB;IAChC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC1D,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CAC3C,EACD,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAChC,CAAC;AA0BF,SAAS,gBAAgB,CAAC,MAAe,EAAE,KAAc;IACvD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAe,EAAE,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS;QAC5B,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;QAC3C,CAAC,CAAC,eAAe,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,EAAE,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,gBAAgB,CAAC,sBAAsB,EAAE,KAAK,CAAC;SACvD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,gBAAgB,CAAC,oBAAoB,EAAE,KAAK,CAAC;SACrD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,KAAc;IAEd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,gBAAgB,CAAC,6BAA6B,EAAE,KAAK,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAsB,EACtB,QAA0B;IAE1B,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC9C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,+BAA+B,MAAM,CAAC,UAAU,aAAa,QAAQ,CAAC,UAAU,EAAE;SAC1F,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,KAAK,QAAQ,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,oDAAoD;SAC5D,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAA4B;IAE5B,OAAO,MAAM,CAAC;QACZ,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,KAAK,EAAE;YACL,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/receipts.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Conformance receipt schema (emission deferred to later plans).
+ */
+import { type Static } from "@sinclair/typebox";
+export declare const ReceiptInclusionEvidenceV1Schema: import("@sinclair/typebox").TObject<{
+    evidenceVersion: import("@sinclair/typebox").TLiteral<1>;
+    logKind: import("@sinclair/typebox").TLiteral<"conformance-receipt">;
+    entry: import("@sinclair/typebox").TObject<{
+        previousHash: import("@sinclair/typebox").TString;
+        timestamp: import("@sinclair/typebox").TString;
+        kind: import("@sinclair/typebox").TLiteral<"conformance-receipt">;
+        receipt: import("@sinclair/typebox").TUnknown;
+        hash: import("@sinclair/typebox").TString;
+    }>;
+    proof: import("@sinclair/typebox").TObject<{
+        leaf: import("@sinclair/typebox").TString;
+        index: import("@sinclair/typebox").TInteger;
+        path: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TObject<{
+            hash: import("@sinclair/typebox").TString;
+            position: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"left">, import("@sinclair/typebox").TLiteral<"right">]>;
+        }>>;
+        root: import("@sinclair/typebox").TString;
+    }>;
+}>;
+export type ReceiptInclusionEvidenceV1 = Static<typeof ReceiptInclusionEvidenceV1Schema>;
+export type ReceiptInclusionEvidenceParseResult = {
+    ok: true;
+    evidence: ReceiptInclusionEvidenceV1;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function parseReceiptInclusionEvidence(input: unknown): ReceiptInclusionEvidenceParseResult;
+export declare const ConformanceReceiptV1Schema: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    receiptClass: import("@sinclair/typebox").TLiteral<"conformance">;
+    actionDigest: import("@sinclair/typebox").TString;
+    policyId: import("@sinclair/typebox").TString;
+    policyVersion: import("@sinclair/typebox").TString;
+    implementationVersion: import("@sinclair/typebox").TString;
+    disposition: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"allow">, import("@sinclair/typebox").TLiteral<"deny">, import("@sinclair/typebox").TLiteral<"require_approval">, import("@sinclair/typebox").TLiteral<"abstain">, import("@sinclair/typebox").TLiteral<"allow_staged">, import("@sinclair/typebox").TLiteral<"allow_minimal">]>;
+    authorization: import("@sinclair/typebox").TString;
+    outcome: import("@sinclair/typebox").TString;
+    issuedAt: import("@sinclair/typebox").TString;
+    constitutionHash: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    classifierRulesetHash: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    effectiveConfigHash: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    governanceEpoch: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNever>;
+    governanceMode: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TNever>;
+}>, import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    receiptClass: import("@sinclair/typebox").TLiteral<"conformance">;
+    actionDigest: import("@sinclair/typebox").TString;
+    policyId: import("@sinclair/typebox").TString;
+    policyVersion: import("@sinclair/typebox").TString;
+    implementationVersion: import("@sinclair/typebox").TString;
+    disposition: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"allow">, import("@sinclair/typebox").TLiteral<"deny">, import("@sinclair/typebox").TLiteral<"require_approval">, import("@sinclair/typebox").TLiteral<"abstain">, import("@sinclair/typebox").TLiteral<"allow_staged">, import("@sinclair/typebox").TLiteral<"allow_minimal">]>;
+    authorization: import("@sinclair/typebox").TString;
+    outcome: import("@sinclair/typebox").TString;
+    issuedAt: import("@sinclair/typebox").TString;
+    constitutionHash: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    classifierRulesetHash: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    effectiveConfigHash: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    /** Gateway governance binding — both fields required together. */
+    governanceEpoch: import("@sinclair/typebox").TInteger;
+    governanceMode: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">, ...import("@sinclair/typebox").TLiteral<"enabled" | "draining" | "disabled">[]]>;
+}>]>;
+export type ConformanceReceiptV1 = Static<typeof ConformanceReceiptV1Schema>;
+export type ReceiptParseResult = {
+    ok: true;
+    receipt: ConformanceReceiptV1;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function parseConformanceReceipt(input: unknown): ReceiptParseResult;
+//# sourceMappingURL=receipts.d.ts.map

package/dist/receipts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipts.d.ts","sourceRoot":"","sources":["../src/receipts.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAStD,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;EAoC5C,CAAC;AAEF,MAAM,MAAM,0BAA0B,GAAG,MAAM,CAC7C,OAAO,gCAAgC,CACxC,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAC3C;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,0BAA0B,CAAA;CAAE,GAClD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,GACb,mCAAmC,CAKrC;AAED,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAmDjC,kEAAkE;;;IAMtE,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAgB1E"}