@kya-os/mcp 1.16.1 → 1.17.0

package/README.md

@@ -252,7 +252,7 @@ The server is operated by a maintainer on pinned releases; this repo does not de
 | **Revocation** | StatusList2021 bitstring with cascading revocation |
 | **Replay prevention** | Nonce-based handshake with timestamp skew validation |
 | **Verifiable auditability** | Typed producer events, authoritative atomic recorder, signed chain receipts, RFC 9162 checkpoints, independent observation, encrypted evidence references, replay bundles, and offline CLI |
-| **Extensible** | Bring your own KMS, HSM, nonce cache (Redis, DynamoDB, KV), or DID method |
+| **Extensible** | Bring your own KMS, HSM, atomic nonce provider, or DID method |
 
 ### Multi-instance deployments
 
@@ -263,25 +263,77 @@ implementation for **every** runtime-state seam — the nonce cache
 `PendingFlowStore`, `SessionStore`) — so replay protection, grants, pending OAuth
 flows, and sessions are shared across instances and survive restarts.
 
+Delegation grants must retain their original signed evidence: `credentialJwt` for VC-JWTs, or `delegationCredential` for object VCs.
+`wrapWithDelegation` revalidates that evidence with the same verifier as a directly presented credential on every reuse, including chain resolution, audience, scope, expiry, and configured status/revocation checks.
+Store providers must preserve these fields and return only active grants; cache availability alone does not authorize a request.
+Grant expiry is bounded by the earliest credential or constraint expiry in the verified chain.
+
+**Upgrade compatibility:** legacy grants without signed evidence intentionally return `needs_authorization`; re-present a valid delegation or complete the normal consent flow to replace them.
+Do not reconstruct unsigned credentials from cached metadata.
+Under `holderBinding: 'enforce'`, did:key session retries also require a fresh holder proof.
+`off` and `warn` retain their documented session behavior, and non-did:key binding remains deferred; neither provides an enforced proof-of-possession guarantee for those requests.
+Status and chain providers now receive reads on grant reuse as they do on direct calls, and an unavailable required provider prevents reuse.
+This does not strengthen a provider's own status-cache freshness policy.
+
+VC-JWT envelope `exp` and `nbf` are checked on every verification, including signature-cache hits and grant reuse.
+Omitted claims remain supported.
+A present claim must be a finite NumericDate.
+An expired envelope denies authorization even when the embedded VC is otherwise current, and verified envelope expiry can shorten the cached grant's lifetime.
+`nbf` allows `JWT_NBF_LEEWAY_SECONDS` (30 seconds) of clock skew; `exp` allows none.
+
+**Delegation issuers:** each re-delegation must be signed by its parent's subject.
+The `issuerDid` inside a credential is only a claim, so the chain walk also checks who signed it.
+Set `delegation.trustedRootIssuers` to the DIDs allowed to issue root delegations, the Responsible Party for the whole chain.
+With it set, a chain whose root is signed by any other DID is rejected, including when a stored grant is reused.
+Without it, any issuer is accepted, including an agent signing a delegation for itself, and the middleware logs a warning at startup.
+A root whose claimed `issuerDid` differs from its signer is still accepted, and logged.
+
+**Nonce providers:** give your `NonceCacheProvider` an atomic `consume(nonce, ttlSeconds, agentDid?)`.
+It must record an unseen `(agentDid, nonce)`, return literal `true` only to the call that recorded it, and reject on storage failure.
+Implement the claim in the shared backend with a conditional insert and expiry, not with a local mutex around remote reads and writes.
+Eventually consistent KV alone cannot provide it.
+The bundled memory provider implements `consume`, but it protects only one cache instance and loses its state on restart.
+`consume` is optional: a provider without it keeps working by falling back to `has` then `add`, which cannot stop concurrent duplicates of one signed request, and a warning is logged once.
+Set `requireAtomicNonce: true` on the middleware, `ProofVerifier`, `SessionManager` or `consumeFromNonceCacheProvider` to refuse that fallback; each then throws at construction for a provider without `consume`.
+Any result other than literal `true`, or a storage failure, denies admission.
+`withKyaOs` takes the same `nonceCache` and `requireAtomicNonce` options (and `responseProofProfile`) and passes them to the middleware.
+
+Providers must honor the requested retention duration.
+The verifiers retain nonces through the final accepted second, including future timestamps and clock skew, while preserving a longer configured TTL.
+The detached verifier also covers later increases up to its supported `setTimestampSkew` maximum.
+Custom card `consumeNonceIfFresh` callbacks must honor the new third `minTtlSec` argument; the bundled card cache and provider adapter do so.
+Instances sharing a replay namespace must agree on the longest proof-acceptance policy and retain state accordingly.
+Retire old non-atomic writers before claiming atomic protection.
+Preserve or extend existing records through the full remaining acceptance window; merely keeping their old, shorter TTLs is insufficient.
+If the backend cannot extend them safely, pause affected admission and wait out that window before cutover.
+Do not clear records while their proofs may still be accepted.
+
 ---
 
 ## Integrations
 
-KYA-OS reaches the outside world two ways: shipped **modules** for specific
-systems and standards, and typed **adapter seams** with in-memory defaults you
-swap out. Adding one is "drop a folder under `src/integrations/`" or "implement
-this interface" — contributions welcome.
-
-### Modules
+KYA-OS integrates through typed **seams** — the adapter pattern is the whole
+model. Every external dependency is a port with an in-memory or reference
+default; bind your own backend, or drop in a shipped adapter. Adding one is
+"implement this interface" (or, for a self-contained system, "drop a folder
+under `src/integrations/`") — contributions welcome.
 
-| Module | Adds | Docs |
+| Seam (port) | Reference / default | Bring your own |
 | --- | --- | --- |
-| **cheqd** (on-chain) | `did:cheqd` resolution, StatusList2021 revocation, DID-Linked Resources + registrar | [src/integrations/cheqd](./src/integrations/cheqd/README.md) |
-| **OAuth / OIDC** | PKCE + protected-resource metadata; generic-OIDC reference adapter | [`@kya-os/mcp/authz`](./src/authz/) · [example](./examples/authz-inspector/) |
-| **Verifiable audit** | RFC 9162 ledger; local or Checkpoint recorders, on-chain anchoring | [AUDITABILITY.md](./AUDITABILITY.md) |
+| DID resolution — `DIDResolver` | `did:key`, `did:web` | `did:cheqd`, custom methods |
+| Revocation — `StatusListResolver` | not configured | cheqd StatusList2021 |
+| Authorization — `AuthorizationServerAdapter` | `GenericOidcAdapter` (OIDC + PKCE) | Auth0, Okta, your IdP ([example](./examples/authz-inspector/)) |
+| State — `GrantStore`, `SessionStore`, `NonceCacheProvider`, `PendingFlowStore` | in-memory | Redis, DynamoDB, Durable Objects, DB; atomic consumption for replay and pending state ([multi-instance](#multi-instance-deployments)) |
+| Audit delivery — `AuditRecorder`, `AuditAnchorProvider` | local recorder | Checkpoint, on-chain anchoring ([AUDITABILITY.md](./AUDITABILITY.md)) |
+| Crypto — `CryptoProvider` | Node, WebCrypto | your KMS / HSM |
+| Policy — `PolicyEngine` | built-in default | custom engine |
 
-Enabling a module is a small config change. cheqd, for example, is a resolver
-you register under `didResolvers`:
+### cheqd: a fully-worked on-chain integration
+
+cheqd is the reference for what filling the seams looks like end to end — one
+package binds three at once: DID resolution (`did:cheqd`), revocation (on-chain
+StatusList2021), and audit anchoring (DID-Linked Resources). Enabling the
+resolver is a small config change:
 
 ```typescript
 import { cheqdResolver } from '@kya-os/mcp/cheqd';
@@ -299,19 +351,6 @@ DID-Linked Resource helpers, live testnet E2E) lives in
 [src/integrations/cheqd/README.md](./src/integrations/cheqd/README.md); see
 [examples/cheqd-dlr](./examples/cheqd-dlr/) for a complete operator flow.
 
-### Adapter seams (bring your own)
-
-Every external dependency is a typed interface with an in-memory default, so you
-can swap in your own backend without touching the middleware.
-
-| Seam | Default | Swap in |
-| --- | --- | --- |
-| DID resolution — `DIDResolver` | `did:key`, `did:web` | `did:cheqd`, custom |
-| Revocation — `StatusListResolver` | none | cheqd StatusList2021 |
-| State — `GrantStore`, `SessionStore`, `NonceCacheProvider`, `PendingFlowStore` | in-memory | Redis, DynamoDB, KV, Durable Objects, DB ([multi-instance](#multi-instance-deployments)) |
-| Crypto — `CryptoProvider` | Node, WebCrypto | your KMS / HSM |
-| Policy — `PolicyEngine` | default | custom |
-
 ## Links
 
 - [Spec](./SPEC.md) | [Card Profile](./SPEC-ENTITY-CARD.md) | [Changelog](./CHANGELOG.md) | [DIF TAAWG](https://identity.foundation/working-groups/trusted-agents.html) | [npm](https://www.npmjs.com/package/@kya-os/mcp)

package/SPEC.md

@@ -4,7 +4,7 @@
 
 Version: 1.0.0
 Status: Stable
-Editors: KYA-OS Working Group
+Editors: Dylan Hobbs ([@H0BB5](https://github.com/H0BB5)), KYA-OS Working Group
 Repository: https://github.com/decentralized-identity/kya-os-mcp
 
 ---
@@ -194,7 +194,18 @@ Base58btc:        6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK
 DID:              did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK
 ```
 
-The verification method ID is `<did>#keys-1`.
+The verification method ID is `<did>#<multibase>`: the fragment repeats the
+`z`-prefixed multibase value, as the W3C did:key method defines it. For the
+example above:
+
+```
+did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK#z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK
+```
+
+This fragment identifies the Ed25519 verification method; `#keys-1` does not.
+A `did:key` document may also carry an X25519 `keyAgreement` method derived
+from the same key; its fragment is the X25519 key's own multibase value
+(`#z6LS…`).
 
 ### 4.4 did:web Resolution
 
@@ -384,8 +395,8 @@ The server MUST validate the handshake request:
 
 2. **Nonce Uniqueness**: The (nonce, agentDid) pair MUST NOT have been seen before
    - Reject with "Nonce already used (replay attack prevention)"
-   - Nonces MUST be cached for at least `sessionTtlMinutes + 1 minute`
-   - When `agentDid` is omitted, the dedupe key is `nonce` alone. Servers MUST use a shorter cache TTL for anonymous nonces (recommended: 60 seconds, vs. the default 120 seconds for authenticated handshakes)
+   - Nonces MUST be retained for at least the acceptance window of rule 1, as §5.5 specifies; retention is not tied to the session TTL
+   - When `agentDid` is omitted, the dedupe key is `nonce` alone. Servers MAY keep a shorter minimum retention for anonymous nonces than for authenticated ones (for example 60 and 120 seconds), never below what §5.5 requires
 
 3. **Audience Match**: `request.audience` MUST match the server's DID or expected domain
    - Prevents credential forwarding attacks
@@ -421,9 +432,11 @@ The nonce cache implementation MUST:
 - Store (nonce, agentDid, expiry) tuples
 - Support TTL-based automatic expiry
 - Be atomic to prevent race conditions in concurrent environments
-- For distributed deployments: use Redis, DynamoDB, or Cloudflare KV (not in-memory)
+- For distributed deployments: use a shared store with an atomic conditional insert and expiry, such as Redis `SET NX PX`, a DynamoDB conditional write or a Durable Object transaction (not in-memory). Eventually consistent stores such as Cloudflare Workers KV cannot provide the atomic check-and-set on their own.
 
-Nonce lifetime MUST exceed the session TTL. Servers MUST NOT drop nonces before the lifetime expires, to prevent replay attacks via early eviction.
+**Retention.** A verifier MUST retain each admitted nonce at least until the timestamp it was admitted with leaves the acceptance window on the verifier's clock: until `ts + skew`, plus a margin of at least one second for second-granularity timestamps. `ts` is the handshake `timestamp` or the proof's `ts`, and `skew` is the largest timestamp skew the verifier may apply while the nonce is retained; a verifier that can widen its skew at runtime (§10.1) retains for the widest. Servers MUST NOT evict a nonce before its retention ends, to prevent replay via early eviction. Verifiers MAY retain longer, and a verifier whose clock can be stepped backwards SHOULD add the largest expected step to the margin.
+
+Retention is bounded by the acceptance window, not by the session TTL. A nonce presented after its window is rejected on its timestamp (§5.2 rule 1, §11.3) before the cache is consulted, so keeping it longer adds memory and denial-of-service exposure and no replay protection. The bound holds because every nonce-checked path checks a timestamp window in the same verification: the handshake (§5.2), the detached proof and the holder-binding request proof (`ts` within skew, signed with the nonce, §7.4), and the Entity Card proof (`created`/`expires`, SPEC-ENTITY-CARD §8). The handshake request is unsigned, so a replayed handshake gives its sender nothing that a fresh handshake would not; its nonce check deduplicates and follows the same window. A path that checked a nonce without a timestamp window would have to retain the nonce for as long as the message it protects stays valid.
 
 ---
 
@@ -493,7 +506,7 @@ Delegations are issued as W3C Verifiable Credentials:
   "proof": {
     "type": "Ed25519Signature2020",
     "created": "2024-03-01T12:00:00Z",
-    "verificationMethod": "did:key:z6MkIssuer...#keys-1",
+    "verificationMethod": "did:key:z6MkIssuer...#z6MkIssuer...",
     "proofPurpose": "assertionMethod",
     "proofValue": "<base64url-encoded-signature>"
   }
@@ -819,7 +832,7 @@ chain:
 
 - **action subset** - child `allowedAction ⊆ parent`;
 - **monotone caveats** - no parent caveat may be silently dropped; for a shared caveat type, child
-  `MaxAmount ≤ parent` (same currency; compared as fixed-point decimals scaled to 6 places) and
+  `MaxAmount ≤ parent` (same currency; compared as exact decimals, never rounded or truncated) and
   child `ValidUntil ≤ parent`; an unknown caveat type MUST be replicated **verbatim**;
 - **top-level `validUntil` narrowing** - child `validUntil ≤ parent`;
 - **continuity** - the parent's delegate (`invoker`) MUST equal the child's `issuer` (you may only
@@ -877,10 +890,10 @@ interface ProofMeta {
   did: string;          // Server's DID (signer)
   kid: string;          // Key ID used for signing
   ts: number;           // Unix epoch seconds when proof was generated
-  nonce: string;        // Session nonce (prevents cross-session replay)
+  nonce: string;        // Fresh random nonce per proof (replay protection, §5.5)
   audience: string;     // Session audience
   sessionId: string;    // Session identifier
-  requestHash: string;  // SHA-256 of canonicalized request
+  requestHash: string;  // SHA-256 of the canonicalized request (§7.3)
   responseHash?: string; // SHA-256 of canonicalized response. Present on success
                          // AND on needs_authorization challenges (binds the
                          // challenge content, incl. authorizationUrl); ABSENT on
@@ -905,14 +918,36 @@ interface ProofMeta {
 2. **Hash**: Compute SHA-256 of the canonical JSON bytes (UTF-8 encoded)
 3. **Format**: `sha256:<64-char-lowercase-hex>`
 
-Request canonicalization includes:
+Request canonicalization covers the JSON-RPC request as sent: its `method` and `params`.
+The envelope members `jsonrpc` and `id` are not covered.
+Two kinds of member are removed before canonicalizing:
+
+1. `params._meta`, if present.
+   `_meta` is intermediary-mutable transport metadata that also carries proofs (§7.6), so it is never signed.
+   Only that top-level member is removed; values nested under other `params` members are not touched.
+2. For `method: "tools/call"`, every member of `params.arguments` whose name begins with `_kyaos`: the KYA-OS control arguments (`_kyaos_delegation`, `_kyaos_proof`, `_kyaos_approvals`).
+   They carry the credentials that authorize the call, each authenticated on its own, and the holder-of-key request proof and approval grants are themselves bound to this hash, so covering them would make the hash depend on its own output.
+   Tool handlers SHOULD NOT receive control arguments, so that the covered request is the call the tool executes.
+   An absent `params.arguments` is covered as `{}`, since a server cannot tell it from an empty one.
+
+Every other `params` member (`name`, `task`, and any future member) is covered.
+When `params` is absent the covered request is `{ "method": ... }`.
+For a tool call:
 ```json
 {
   "method": "tools/call",
-  "params": { /* sorted keys, no whitespace */ }
+  "params": { "name": "echo", "arguments": { /* minus _kyaos* members */ } }
 }
 ```
 
+A client, a PEP or a third-party auditor recomputes `requestHash` this way from the request it sent or received.
+Rule 1 is the rule Entity Card request proofs use (SPEC-ENTITY-CARD §8.3).
+Appendix C.1 gives vectors.
+
+**Legacy shape in 1.x.** The 1.x releases of the reference implementation (`@kya-os/mcp`) still emit `requestHash` over the legacy shape `{"method": <tool name>, "params": <arguments>}` for every proof over a tool call: response and outcome proofs (§7.4), the approval `requestHash` of a step-up challenge, and holder-of-key request proofs.
+Their verifiers accept a `requestHash` over either shape of the call they hold, so a producer that follows this section verifies against them; the reference producers switch to the covered request above in 2.0.0.
+The legacy shape is deprecated: it hashes a tool named after a JSON-RPC method like that method's request, and it has no room for `params` members other than the arguments.
+
 Response canonicalization is selected by the proof's response-proof profile, named by the signature-covered `prf` claim (§7.2):
 
 - **body** (`prf` ABSENT — the original profile): the `data` field only (excludes `_meta`).
@@ -1243,7 +1278,7 @@ interface NeedsAuthorizationError {
   message: string;
   authorizationUrl: string;  // URL where user can grant authorization
   resumeToken: string;       // Token to resume flow after authorization
-  expiresAt: number;         // Unix epoch when resumeToken expires
+  expiresAt: number;         // Unix timestamp in seconds when resumeToken expires
   scopes: string[];          // Scopes being requested
   display?: {
     title?: string;
@@ -1422,7 +1457,7 @@ and the residual risk an operator carries.
 
 - Nonces MUST be cryptographically random (16 bytes minimum entropy)
 - Nonce cache MUST persist across server restarts (use external storage)
-- Nonce cache TTL MUST exceed session TTL
+- Nonce cache retention MUST cover the timestamp acceptance window (§5.5); it need not reach the session TTL
 - Distributed deployments MUST use atomic check-and-set operations
 
 ### 11.3 Timestamp Skew Attacks
@@ -1684,7 +1719,11 @@ purpose/scope authorization out of band. Bundle contents cannot authorize their
 own signer or bootstrap their own trust root. A verifier MUST distinguish
 `valid`, `invalid`, and `indeterminate`, MUST keep authorization-as-observed
 separate from current authorization/revocation, and MUST NOT consume a live
-nonce cache when verifying historical proof artifacts.
+nonce cache when verifying historical proof artifacts. A verifier MUST NOT
+ignore a verification-policy constraint (checkpoint-bounded key validity,
+required assurance profile, key revocation mode), and a constraint it cannot
+evaluate for the artifacts at hand MUST NOT leave the affected dimension
+`valid`.
 
 Sensitive payloads SHOULD be encrypted in a separate evidence provider and
 referenced by opaque randomized identifiers and ciphertext commitments. The
@@ -1784,6 +1823,35 @@ These test vectors enable interoperability testing across implementations.
 sha256:5057521f310b536837b619f0ac040ef8064f8c597da8ec22a56801b435744033
 ```
 
+**Covered request (§7.3).**
+`requestHash` covers a request's `method` and `params` minus `params._meta` and, on a `tools/call`, minus the `_kyaos*` control arguments; an absent `arguments` is covered as `{}`.
+Each of these requests covers to the input above and hashes to the same value:
+
+```json
+{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"echo","arguments":{"_kyaos_proof":{"jws":"...","meta":{}}},"_meta":{"traceparent":"00-4bf92f3577b34da6a3ce929d0e0e4736-00f067aa0ba902b7-01"}}}
+```
+
+```json
+{"method":"tools/call","params":{"name":"echo"}}
+```
+
+Business arguments stay covered:
+
+**Input JSON:**
+```json
+{"jsonrpc":"2.0","id":7,"method":"tools/call","params":{"name":"echo","arguments":{"msg":"hi","_kyaos_delegation":{"id":"urn:uuid:1111-aaaa"}},"_meta":{"progressToken":7}}}
+```
+
+**Covered request, JCS canonicalized:**
+```json
+{"method":"tools/call","params":{"arguments":{"msg":"hi"},"name":"echo"}}
+```
+
+**KYA-OS Format:**
+```
+sha256:c8f3d59959c9247211de8c76b94ef17f0c279f09362350ced67f69ecdb89d6c7
+```
+
 ### C.2 did:key Derivation
 
 **Ed25519 Public Key (32 bytes, hex):**
@@ -1813,7 +1881,7 @@ did:key:z6Mko6jQvza2BSKRcrbJwgwbL9KYDn1isCUV5Lnq7gSTTKJq
 
 **Verification Method ID:**
 ```
-did:key:z6Mko6jQvza2BSKRcrbJwgwbL9KYDn1isCUV5Lnq7gSTTKJq#keys-1
+did:key:z6Mko6jQvza2BSKRcrbJwgwbL9KYDn1isCUV5Lnq7gSTTKJq#z6Mko6jQvza2BSKRcrbJwgwbL9KYDn1isCUV5Lnq7gSTTKJq
 ```
 
 ### C.3 JWS Structure
@@ -1824,7 +1892,7 @@ A valid detached proof JWS has the following structure:
 ```json
 {
   "alg": "EdDSA",
-  "kid": "did:key:z6Mk...#keys-1"
+  "kid": "did:key:z6Mk...#z6Mk..."
 }
 ```
 

package/dist/audit/adapters/legacy-audit-log.d.ts

@@ -17,4 +17,3 @@ export declare class LegacyAuditSinkAdapter extends AuditLogProvider {
     logAuditRecord(context: AuditContext): Promise<void>;
     logEvent(context: AuditEventContext): Promise<void>;
 }
-//# sourceMappingURL=legacy-audit-log.d.ts.map

package/dist/audit/adapters/mcp.d.ts

@@ -102,4 +102,3 @@ export declare class McpAuditEventAdapter {
     }): Promise<void>;
     private context;
 }
-//# sourceMappingURL=mcp.d.ts.map

package/dist/audit/adapters/mcp.js

@@ -1,5 +1,16 @@
-function boundedReference(value, maxLength = 256) {
-    return value.slice(0, maxLength);
+import { boundedAuditReference } from './references.js';
+/** Bounds every caller-supplied reference so a hostile one cannot keep the event out of the ledger. */
+async function boundedAuthorization(authorization) {
+    const bounded = { ...authorization };
+    for (const field of ['scopeId', 'delegationRef', 'grantRef', 'policyId', 'policyVersion']) {
+        const value = authorization[field];
+        if (value !== undefined)
+            bounded[field] = await boundedAuditReference(value);
+    }
+    if (authorization.verificationCode !== undefined) {
+        bounded.verificationCode = await boundedAuditReference(authorization.verificationCode, 128);
+    }
+    return bounded;
 }
 /** Privacy-minimal translation from MCP lifecycle signals to binding-neutral events. */
 export class McpAuditEventAdapter {
@@ -12,7 +23,7 @@ export class McpAuditEventAdapter {
     async session(phase, input) {
         await this.trail.record({
             eventType: `session.${phase}`,
-            ...this.context(input.context),
+            ...(await this.context(input.context)),
             action: { category: 'session' },
             outcome: input.succeeded ? 'succeeded' : 'failed',
             ...(input.reasonCode === undefined ? {} : { reason: { code: input.reasonCode } }),
@@ -26,11 +37,11 @@ export class McpAuditEventAdapter {
     async tool(phase, input) {
         await this.trail.record({
             eventType: `tool.call.${phase}`,
-            ...this.context(input.context),
+            ...(await this.context(input.context)),
             action: {
                 category: 'tool.call',
                 ...(this.options.includeToolNames
-                    ? { name: boundedReference(input.toolName) }
+                    ? { name: await boundedAuditReference(input.toolName) }
                     : {}),
             },
             outcome: input.outcome,
@@ -42,7 +53,7 @@ export class McpAuditEventAdapter {
     async proof(phase, input) {
         await this.trail.record({
             eventType: `proof.${phase}`,
-            ...this.context(input.context),
+            ...(await this.context(input.context)),
             action: { category: 'proof' },
             outcome: input.outcome,
             evidence: [],
@@ -61,7 +72,7 @@ export class McpAuditEventAdapter {
             : `authorization.${phase}`;
         await this.trail.record({
             eventType,
-            ...this.context(input.context),
+            ...(await this.context(input.context)),
             action: { category: 'authorization' },
             outcome: input.outcome,
             ...(input.reasonCode === undefined ? {} : { reason: { code: input.reasonCode } }),
@@ -71,24 +82,24 @@ export class McpAuditEventAdapter {
                 ...(input.policyDigest === undefined ? {} : { policyDigest: input.policyDigest }),
                 ...(input.grantRef === undefined
                     ? {}
-                    : { grantRef: boundedReference(input.grantRef) }),
+                    : { grantRef: await boundedAuditReference(input.grantRef) }),
             },
         });
     }
     async delegation(phase, input) {
         await this.trail.record({
             eventType: `delegation.${phase}`,
-            ...this.context(input.context),
+            ...(await this.context(input.context)),
             action: { category: 'delegation' },
             outcome: input.outcome,
             ...(input.reasonCode === undefined ? {} : { reason: { code: input.reasonCode } }),
             evidence: [],
             details: {
                 family: 'delegation', phase,
-                delegationRef: boundedReference(input.delegationRef),
+                delegationRef: await boundedAuditReference(input.delegationRef),
                 ...(input.parentRef === undefined
                     ? {}
-                    : { parentRef: boundedReference(input.parentRef) }),
+                    : { parentRef: await boundedAuditReference(input.parentRef) }),
             },
         });
     }
@@ -98,7 +109,7 @@ export class McpAuditEventAdapter {
             : `consent.${phase}`;
         await this.trail.record({
             eventType: eventType,
-            ...this.context(input.context),
+            ...(await this.context(input.context)),
             action: { category: 'consent' },
             outcome: input.outcome,
             ...(input.reasonCode === undefined ? {} : { reason: { code: input.reasonCode } }),
@@ -107,7 +118,7 @@ export class McpAuditEventAdapter {
                 family: 'consent', phase,
                 ...(input.consentRef === undefined
                     ? {}
-                    : { consentRef: boundedReference(input.consentRef) }),
+                    : { consentRef: await boundedAuditReference(input.consentRef) }),
             },
         });
     }
@@ -120,7 +131,7 @@ export class McpAuditEventAdapter {
         };
         await this.trail.record({
             eventType: eventTypes[phase],
-            ...this.context(input.context),
+            ...(await this.context(input.context)),
             action: { category: 'configuration' },
             outcome: input.outcome,
             ...(input.reasonCode === undefined ? {} : { reason: { code: input.reasonCode } }),
@@ -147,7 +158,7 @@ export class McpAuditEventAdapter {
         };
         await this.trail.record({
             eventType: eventTypes[phase],
-            ...this.context(input.context),
+            ...(await this.context(input.context)),
             action: { category: 'audit.ledger' },
             outcome: input.outcome,
             ...(input.reasonCode === undefined ? {} : { reason: { code: input.reasonCode } }),
@@ -177,7 +188,7 @@ export class McpAuditEventAdapter {
         };
         await this.trail.record({
             eventType: eventTypes[phase],
-            ...this.context(input.context),
+            ...(await this.context(input.context)),
             action: { category: 'audit.administration' },
             outcome: input.outcome,
             ...(input.reasonCode === undefined ? {} : { reason: { code: input.reasonCode } }),
@@ -194,7 +205,7 @@ export class McpAuditEventAdapter {
             },
         });
     }
-    context(context) {
+    async context(context) {
         if (context === undefined)
             return {};
         return {
@@ -204,9 +215,13 @@ export class McpAuditEventAdapter {
                 : { responsibleParty: context.responsibleParty }),
             ...(context.authorization === undefined
                 ? {}
-                : { authorization: context.authorization }),
-            ...(context.correlationId === undefined ? {} : { correlationId: context.correlationId }),
-            ...(context.causationId === undefined ? {} : { causationId: context.causationId }),
+                : { authorization: await boundedAuthorization(context.authorization) }),
+            ...(context.correlationId === undefined
+                ? {}
+                : { correlationId: await boundedAuditReference(context.correlationId) }),
+            ...(context.causationId === undefined
+                ? {}
+                : { causationId: await boundedAuditReference(context.causationId) }),
         };
     }
 }

package/dist/audit/adapters/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../src/audit/adapters/mcp.ts"],"names":[],"mappings":"AAoBA,SAAS,gBAAgB,CAAC,KAAa,EAAE,SAAS,GAAG,GAAG;IACtD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,wFAAwF;AACxF,MAAM,OAAO,oBAAoB;IAEZ;IACA;IAFnB,YACmB,KAAwC,EACxC,UAAuC,EAAE;QADzC,UAAK,GAAL,KAAK,CAAmC;QACxC,YAAO,GAAP,OAAO,CAAkC;IACzD,CAAC;IAEJ,KAAK,CAAC,OAAO,CACX,KAAiE,EACjE,KAA6E;QAE7E,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,WAAW,KAAK,EAA2B;YACtD,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC/B,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YACjD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,SAAS,EAAE,KAAK;gBACxB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;aAC5E;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAA8D,EAC9D,KAMC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,aAAa,KAAK,EAA2B;YACxD,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE;gBACN,QAAQ,EAAE,WAAW;gBACrB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB;oBAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;oBAC5C,CAAC,CAAC,EAAE,CAAC;aACR;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE;SAClE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CACT,KAA+D,EAC/D,KAKC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,SAAS,KAAK,EAAuB;YAChD,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,OAAO,EAAE,KAAK;gBACtB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC9E,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;oBACtC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;aAClD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAAuE,EACvE,KAMC;QAED,MAAM,SAAS,GAAG,KAAK,KAAK,YAAY;YACtC,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,iBAAiB,KAAK,EAAW,CAAC;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS;YACT,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,eAAe,EAAE,KAAK;gBAC9B,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;gBACjF,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAC9B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;aACpD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAoE,EACpE,KAMC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,cAAc,KAAK,EAA2B;YACzD,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,YAAY,EAAE,KAAK;gBAC3B,aAAa,EAAE,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC;gBACpD,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,gBAAgB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;aACtD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAAiE,EACjE,KAKC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;YAC/C,CAAC,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE;YACnD,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,SAAgC;YAC3C,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,SAAS,EAAE,KAAK;gBACxB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;aACxD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CACP,KAA6D,EAC7D,KAOC;QAED,MAAM,UAAU,GAAG;YACjB,OAAO,EAAE,aAAa;YACtB,cAAc,EAAE,gBAAgB;YAChC,qBAAqB,EAAE,uBAAuB;YAC9C,4BAA4B,EAAE,8BAA8B;SACpD,CAAC;QACX,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC;YAC5B,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,KAAK,EAAE,KAAK;gBACpB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;gBACvF,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;oBACzC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;aACxD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAgE,EAChE,KAQC;QAED,MAAM,UAAU,GAAG;YACjB,aAAa,EAAE,sBAAsB;YACrC,kBAAkB,EAAE,2BAA2B;YAC/C,kBAAkB,EAAE,oBAAoB;YACxC,mBAAmB,EAAE,qBAAqB;YAC1C,wBAAwB,EAAE,0BAA0B;YACpD,iBAAiB,EAAE,mBAAmB;YACtC,qBAAqB,EAAE,uBAAuB;SACtC,CAAC;QACX,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC;YAC5B,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ,EAAE,KAAK;gBACvB,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;oBACtC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBACjD,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1F,GAAG,CAAC,KAAK,CAAC,gCAAgC,KAAK,SAAS;oBACtD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,gCAAgC,EAAE,KAAK,CAAC,gCAAgC,EAAE,CAAC;gBACjF,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;aACpD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAwE,EACxE,KAOC;QAED,MAAM,UAAU,GAAG;YACjB,iBAAiB,EAAE,yBAAyB;YAC5C,QAAQ,EAAE,gBAAgB;YAC1B,QAAQ,EAAE,gBAAgB;YAC1B,kBAAkB,EAAE,oBAAoB;YACxC,kBAAkB,EAAE,oBAAoB;SAChC,CAAC;QACX,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC;YAC5B,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9B,MAAM,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE;YAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB,EAAE,KAAK;gBAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClE,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC7C,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;aAChD;SACF,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,OAAoC;QAClD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO;YACL,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACnD,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;YAC7C,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;YACxF,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;SACnF,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../src/audit/adapters/mcp.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAcxD,uGAAuG;AACvG,KAAK,UAAU,oBAAoB,CACjC,aAAoC;IAEpC,MAAM,OAAO,GAAG,EAAE,GAAG,aAAa,EAAE,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,CAAU,EAAE,CAAC;QACnG,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,aAAa,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,CAAC,gBAAgB,GAAG,MAAM,qBAAqB,CAAC,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wFAAwF;AACxF,MAAM,OAAO,oBAAoB;IAEZ;IACA;IAFnB,YACmB,KAAwC,EACxC,UAAuC,EAAE;QADzC,UAAK,GAAL,KAAK,CAAmC;QACxC,YAAO,GAAP,OAAO,CAAkC;IACzD,CAAC;IAEJ,KAAK,CAAC,OAAO,CACX,KAAiE,EACjE,KAA6E;QAE7E,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,WAAW,KAAK,EAA2B;YACtD,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC/B,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ;YACjD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,SAAS,EAAE,KAAK;gBACxB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;aAC5E;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAA8D,EAC9D,KAMC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,aAAa,KAAK,EAA2B;YACxD,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE;gBACN,QAAQ,EAAE,WAAW;gBACrB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB;oBAC/B,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;oBACvD,CAAC,CAAC,EAAE,CAAC;aACR;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,GAAG,EAAE;SAClE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CACT,KAA+D,EAC/D,KAKC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,SAAS,KAAK,EAAuB;YAChD,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC7B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,OAAO,EAAE,KAAK;gBACtB,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC9E,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;oBACtC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;aAClD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAAuE,EACvE,KAMC;QAED,MAAM,SAAS,GAAG,KAAK,KAAK,YAAY;YACtC,CAAC,CAAC,YAAY;YACd,CAAC,CAAC,iBAAiB,KAAK,EAAW,CAAC;QACtC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS;YACT,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,eAAe,EAAE,KAAK;gBAC9B,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC;gBACjF,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;oBAC9B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;aAC/D;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAoE,EACpE,KAMC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,cAAc,KAAK,EAA2B;YACzD,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,YAAY,EAAE,KAAK;gBAC3B,aAAa,EAAE,MAAM,qBAAqB,CAAC,KAAK,CAAC,aAAa,CAAC;gBAC/D,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS;oBAC/B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;aACjE;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAAiE,EACjE,KAKC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;YAC/C,CAAC,CAAC,cAAc,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE;YACnD,CAAC,CAAC,WAAW,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,SAAgC;YAC3C,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE;YAC/B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,SAAS,EAAE,KAAK;gBACxB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;aACnE;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CACP,KAA6D,EAC7D,KAOC;QAED,MAAM,UAAU,GAAG;YACjB,OAAO,EAAE,aAAa;YACtB,cAAc,EAAE,gBAAgB;YAChC,qBAAqB,EAAE,uBAAuB;YAC9C,4BAA4B,EAAE,8BAA8B;SACpD,CAAC;QACX,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC;YAC5B,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE;YACrC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,KAAK,EAAE,KAAK;gBACpB,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;gBACvF,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;oBACzC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE,CAAC;aACxD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAAgE,EAChE,KAQC;QAED,MAAM,UAAU,GAAG;YACjB,aAAa,EAAE,sBAAsB;YACrC,kBAAkB,EAAE,2BAA2B;YAC/C,kBAAkB,EAAE,oBAAoB;YACxC,mBAAmB,EAAE,qBAAqB;YAC1C,wBAAwB,EAAE,0BAA0B;YACpD,iBAAiB,EAAE,mBAAmB;YACtC,qBAAqB,EAAE,uBAAuB;SACtC,CAAC;QACX,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC;YAC5B,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,QAAQ,EAAE,KAAK;gBACvB,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS;oBACtC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBACjD,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC1F,GAAG,CAAC,KAAK,CAAC,gCAAgC,KAAK,SAAS;oBACtD,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,gCAAgC,EAAE,KAAK,CAAC,gCAAgC,EAAE,CAAC;gBACjF,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;aACpD;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAwE,EACxE,KAOC;QAED,MAAM,UAAU,GAAG;YACjB,iBAAiB,EAAE,yBAAyB;YAC5C,QAAQ,EAAE,gBAAgB;YAC1B,QAAQ,EAAE,gBAAgB;YAC1B,kBAAkB,EAAE,oBAAoB;YACxC,kBAAkB,EAAE,oBAAoB;SAChC,CAAC;QACX,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACtB,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC;YAC5B,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,EAAE,EAAE,QAAQ,EAAE,sBAAsB,EAAE;YAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB,EAAE,KAAK;gBAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClE,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;oBACpC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC7C,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC;aAChD;SACF,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,OAAoC;QACxD,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACrC,OAAO;YACL,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACnD,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;gBACnC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;SACvE,CAAC;IACJ,CAAC;CACF"}

package/dist/audit/adapters/references.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Caller-presented identifiers (credential IDs, grant and consent references,
+ * correlation IDs) are untrusted input. A non-empty, well-formed value within
+ * the schema bound is kept verbatim. Anything else is replaced by the SHA-256
+ * of its well-formed UTF-8 encoding: that form always canonicalizes and fits
+ * the bound, and unlike truncation it cannot be made to collide with a
+ * different reference that shares a long prefix.
+ */
+export declare function boundedAuditReference(value: string, maxLength?: number): Promise<string>;

package/dist/audit/adapters/references.js

@@ -0,0 +1,22 @@
+import { WebCryptoProvider } from '../../providers/web-crypto.js';
+import { CryptoProviderAuditHasher } from '../crypto.js';
+const encoder = new TextEncoder();
+// Matches a high surrogate without its low half, or a low surrogate without its
+// high half. No `u` flag, so the pattern sees UTF-16 code units.
+const LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/;
+let referenceHasher;
+/**
+ * Caller-presented identifiers (credential IDs, grant and consent references,
+ * correlation IDs) are untrusted input. A non-empty, well-formed value within
+ * the schema bound is kept verbatim. Anything else is replaced by the SHA-256
+ * of its well-formed UTF-8 encoding: that form always canonicalizes and fits
+ * the bound, and unlike truncation it cannot be made to collide with a
+ * different reference that shares a long prefix.
+ */
+export async function boundedAuditReference(value, maxLength = 256) {
+    if (value.length > 0 && value.length <= maxLength && !LONE_SURROGATE.test(value))
+        return value;
+    referenceHasher ??= new CryptoProviderAuditHasher(new WebCryptoProvider());
+    return referenceHasher.sha256(encoder.encode(value));
+}
+//# sourceMappingURL=references.js.map

package/dist/audit/adapters/references.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"references.js","sourceRoot":"","sources":["../../../src/audit/adapters/references.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAoB,MAAM,cAAc,CAAC;AAE3E,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,gFAAgF;AAChF,iEAAiE;AACjE,MAAM,cAAc,GAAG,wEAAwE,CAAC;AAEhG,IAAI,eAAwC,CAAC;AAE7C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa,EAAE,SAAS,GAAG,GAAG;IACxE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/F,eAAe,KAAK,IAAI,yBAAyB,CAAC,IAAI,iBAAiB,EAAE,CAAC,CAAC;IAC3E,OAAO,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/audit/assurance.d.ts

@@ -19,4 +19,3 @@ export declare const AUDIT_ASSURANCE_PROFILES: Readonly<Record<AuditAssurancePro
 }>>;
 /** Fail startup when advertised assurance exceeds configured mechanics. */
 export declare function assertAuditCapabilities(capabilities: AuditCapabilities): void;
-//# sourceMappingURL=assurance.d.ts.map

package/dist/audit/checkpoint-coordinator.d.ts

@@ -48,4 +48,3 @@ export declare class AuditCheckpointCoordinator {
     private publishWithRetry;
     private assertRequirements;
 }
-//# sourceMappingURL=checkpoint-coordinator.d.ts.map

package/dist/audit/checkpoint.d.ts

@@ -32,6 +32,11 @@ export interface AuditCheckpointBuilderOptions {
     clock?: {
         now(): number;
     };
+    /**
+     * Lifecycle hook for a newly stored checkpoint. If it throws, this builder's
+     * next `createCheckpoint` call runs it again for that checkpoint, before any
+     * newer one, so it must be idempotent on the checkpoint digest.
+     */
     onCheckpointCreated?: (checkpoint: SignedAuditCheckpointV1) => Promise<void> | void;
 }
 /** Creates append-only RFC 9162 checkpoints from a stable journal high-water mark. */
@@ -39,8 +44,20 @@ export declare class AuditCheckpointBuilder {
     private readonly options;
     private readonly tree;
     private readonly clock;
+    private readonly ledgerTails;
+    /** Per ledger, stored checkpoints whose lifecycle hook has not completed, oldest first. */
+    private readonly failedHooks;
     constructor(options: AuditCheckpointBuilderOptions);
     createCheckpoint(ledger: AuditLedgerRef): Promise<SignedAuditCheckpointV1>;
+    private serialized;
+    private storeCheckpoint;
+    /**
+     * A journal that has grown since the latest checkpoint must still hold that
+     * checkpoint's exact tree as its prefix. Otherwise the history was rewritten
+     * or restored, and chaining a new checkpoint to it would sign a split view.
+     */
+    private assertExtends;
+    private signCheckpoint;
     inclusionProof(ledger: AuditLedgerRef, sequence: DecimalString, checkpoint: SignedAuditCheckpointV1): Promise<AuditMerkleInclusionProofV1>;
     consistencyProof(ledger: AuditLedgerRef, oldTreeSize: DecimalString, checkpoint: SignedAuditCheckpointV1): Promise<AuditMerkleConsistencyProofV1>;
     rootForRange(ledger: AuditLedgerRef, treeSize: DecimalString): Promise<Digest>;
@@ -56,4 +73,3 @@ export declare class AuditCheckpointBuilder {
     private readEntries;
     private assertCheckpointLedger;
 }
-//# sourceMappingURL=checkpoint.d.ts.map