@kynesyslabs/demosdk 4.0.10 → 4.0.12

package/build/l2ps/channel/finalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalize.js","sourceRoot":"","sources":["../../../../src/l2ps/channel/finalize.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAUH,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAgD/C,MAAM,CAAC,KAAK,UAAU,WAAW,CAC7B,IAAqB;IAErB,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACX,gCAAgC,IAAI,CAAC,GAAG,CAAC,KAAK,sBAAsB;YAChE,iDAAiD,CACxD,CAAA;IACL,CAAC;IAED,qEAAqE;IACrE,qEAAqE;IACrE,mEAAmE;IACnE,kEAAkE;IAClE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACX,wBAAwB,IAAI,CAAC,MAAM,8BAA8B;YAC7D,kDAAkD,CACzD,CAAA;IACL,CAAC;IAED,gEAAgE;IAChE,iEAAiE;IACjE,kEAAkE;IAClE,+DAA+D;IAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;IAClC,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAA;IACjD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACX,iFAAiF,CACpF,CAAA;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAA;IACxC,MAAM,mBAAmB,GAAG,QAAQ,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,gBAAgB,CACvC,CAAA;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAC3B,CAAC,CAAC,EAAE,CACA,CAAC,CAAC,IAAI,KAAK,QAAQ;QAClB,CAAC,CAAC,IAAkD;YACjD,EAAE,gBAAgB,KAAK,gBAAgB,CAClD,CAAA;IACD,IAAI,CAAC,mBAAmB,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACX,yEAAyE;YACrE,QAAQ,gBAAgB,8CAA8C,CAC7E,CAAA;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC;QACtC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;QACjC,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAClC,QAAQ;QACR,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;KACvD,CAAC,CAAA;IAEF,yDAAyD;IACzD,oEAAoE;IACpE,sEAAsE;IACtE,MAAM,UAAU,GACZ,IAAI,CAAC,MAAM,KAAK,6BAA6B;QAC7C,CAAC,IAAI,CAAC,MAAM,KAAK,gCAAgC,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxE,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAA;IACrD,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACX,wBAAwB,IAAI,CAAC,MAAM,uDAAuD,CAC7F,CAAA;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,IAAI,yBAAyB,CAAA;IACzD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC;QACvB,UAAU;QACV,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;KACxB,CAAC,CAAA;IAEF,oEAAoE;IACpE,IAAI,IAAI,CAAC,MAAM,KAAK,6BAA6B,IAAI,CAAC,GAAG,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CACX,qEAAqE;YACjE,uCAAuC,CAC9C,CAAA;IACL,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAA;AACpD,CAAC"}

package/build/l2ps/channel/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * DACS-3 §8.3.3 / §8.7 — channel message envelope, session-level
+ * sequence + channelId enforcement, transcript export (SR-4 WI-2).
+ *
+ * All signatures use the sender's primary-claim key (on Demos: the
+ * connected Demos Ed25519 keypair) via WI-0's `signWithPrimaryClaim`;
+ * never the RSA L2PS subnet key.
+ */
+export type { ChannelMessage, ChannelMessageSignature, ChannelMessageType, ChannelTranscript, TranscriptSignature, UnsignedChannelMessage, UnsignedChannelTranscript, } from "./types";
+export { CHANNEL_MESSAGE_DOMAIN_PREFIX, TRANSCRIPT_DOMAIN_PREFIX, channelMessageSigningBytes, envelopeHashHex, signatureFromHex, signatureToHex, stripChannelMessageSignature, stripTranscriptSignatures, transcriptHashHex, transcriptSigningBytes, } from "./canonical";
+export { isSenderInMembers, signChannelMessage, verifyChannelMessage, } from "./envelope";
+export { InMemoryChannelIdRegistry, type ChannelIdRegistry, } from "./channelIdRegistry";
+export { ChannelSession, type ChannelSessionOpts } from "./session";
+export { buildUnsignedTranscript, exportTranscript, signTranscript, verifyTranscript, type TranscriptVerificationResult, } from "./transcript";
+export { L2PSChannelTransport, type L2PSChannelTransportOpts, type ChannelSessionLike, type L2PSMessagingPeerLike, type SerializedEncryptedMessage, type IncomingMessagePayload, } from "./transport";
+export { RfqSession, type RfqState, type RfqOutcome, type RfqSessionOpts, type RfqProposalBody, type RfqAcceptBody, type RfqEndBody, type StandingProposal, } from "./negotiate";
+export { finalizeRfq, type FinalizeRfqOpts, type RfqFinalizeResult, type RfqLike, type ChannelSessionView, } from "./finalize";

package/build/l2ps/channel/index.js

@@ -0,0 +1,17 @@
+/**
+ * DACS-3 §8.3.3 / §8.7 — channel message envelope, session-level
+ * sequence + channelId enforcement, transcript export (SR-4 WI-2).
+ *
+ * All signatures use the sender's primary-claim key (on Demos: the
+ * connected Demos Ed25519 keypair) via WI-0's `signWithPrimaryClaim`;
+ * never the RSA L2PS subnet key.
+ */
+export { CHANNEL_MESSAGE_DOMAIN_PREFIX, TRANSCRIPT_DOMAIN_PREFIX, channelMessageSigningBytes, envelopeHashHex, signatureFromHex, signatureToHex, stripChannelMessageSignature, stripTranscriptSignatures, transcriptHashHex, transcriptSigningBytes, } from "./canonical.js";
+export { isSenderInMembers, signChannelMessage, verifyChannelMessage, } from "./envelope.js";
+export { InMemoryChannelIdRegistry, } from "./channelIdRegistry.js";
+export { ChannelSession } from "./session.js";
+export { buildUnsignedTranscript, exportTranscript, signTranscript, verifyTranscript, } from "./transcript.js";
+export { L2PSChannelTransport, } from "./transport.js";
+export { RfqSession, } from "./negotiate.js";
+export { finalizeRfq, } from "./finalize.js";
+//# sourceMappingURL=index.js.map

package/build/l2ps/channel/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/l2ps/channel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAYH,OAAO,EACH,6BAA6B,EAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,4BAA4B,EAC5B,yBAAyB,EACzB,iBAAiB,EACjB,sBAAsB,GACzB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACH,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,GACvB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACH,yBAAyB,GAE5B,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,cAAc,EAA2B,MAAM,WAAW,CAAA;AAEnE,OAAO,EACH,uBAAuB,EACvB,gBAAgB,EAChB,cAAc,EACd,gBAAgB,GAEnB,MAAM,cAAc,CAAA;AAErB,OAAO,EACH,oBAAoB,GAMvB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACH,UAAU,GAQb,MAAM,aAAa,CAAA;AAEpB,OAAO,EACH,WAAW,GAKd,MAAM,YAAY,CAAA"}

package/build/l2ps/channel/negotiate.d.ts

@@ -0,0 +1,106 @@
+/**
+ * SR-4 WI-B — `negotiate-rfq` phase logic.
+ *
+ * A request-for-quote negotiation is a turn-based exchange of `offer` /
+ * `counter` proposals terminating in `accept`, `reject`, or `abort`
+ * (CH-5 termination; DACS-3 §8.3). Per the SR-4 brief the RFQ message
+ * *bodies* are implementation-defined (only sealed-envelope bodies are
+ * spec-locked, §8.4.3), so this layer fixes a minimal body schema and
+ * the state machine while staying agnostic to the actual `terms`.
+ *
+ * `RfqSession` is a pure protocol state machine. It does not move bytes:
+ * the caller wires its `send` callback to a transport (e.g.
+ * `L2PSChannelTransport.send`) and feeds verified inbound envelopes to
+ * `onIncoming`. By the time a message reaches `onIncoming` the channel
+ * layer has already verified the signature, `sender ∈ members`, the
+ * channelId, and monotonic sequence — so this layer only enforces
+ * protocol-level rules (legal transitions, body shape, referencing an
+ * existing offer).
+ */
+import type { ChannelMessage, ChannelMessageType } from "./types";
+import type { ClaimReference } from "../../identity/cci";
+/** Terminal + in-progress states (CH-5). */
+export type RfqState = "open" | "accepted" | "rejected" | "aborted";
+/** Body of an `offer` / `counter` — `terms` is opaque (impl-defined). */
+export interface RfqProposalBody {
+    terms: unknown;
+}
+/** Body of an `accept` — references the proposal sequence being accepted. */
+export interface RfqAcceptBody {
+    acceptedSequence: number;
+}
+/** Body of a `reject` / `abort`. */
+export interface RfqEndBody {
+    reason?: string;
+}
+/** A standing proposal on the table. */
+export interface StandingProposal {
+    sequence: number;
+    sender: ClaimReference;
+    terms: unknown;
+}
+export interface RfqOutcome {
+    state: RfqState;
+    /** Set when `state === "accepted"`: the terms that were agreed. */
+    agreedTerms?: unknown;
+    /** Sequence of the proposal that was accepted. */
+    acceptedSequence?: number;
+    /** Reason for a reject / abort, if given. */
+    reason?: string;
+}
+export interface RfqSessionOpts {
+    /** This party's CCI primary claim. */
+    me: ClaimReference;
+    /**
+     * Delivers a signed channel message. Wire to the transport's send
+     * (e.g. `L2PSChannelTransport.send`). Returns the signed envelope so
+     * the session can track the sequence it produced.
+     */
+    send: (opts: {
+        type: ChannelMessageType;
+        body: unknown;
+        repliesTo?: number;
+    }) => Promise<ChannelMessage>;
+    /** Fired on every state transition (including the terminal one). */
+    onStateChange?: (outcome: RfqOutcome) => void;
+    /** Fired when a fresh proposal (offer/counter) lands, ours or theirs. */
+    onProposal?: (proposal: StandingProposal) => void;
+}
+export declare class RfqSession {
+    private readonly me;
+    private readonly sendFn;
+    private readonly onStateChange?;
+    private readonly onProposal?;
+    private _state;
+    private _standing;
+    /** Every proposal seen, by sequence — so `accept` can resolve its terms. */
+    private readonly proposals;
+    private _outcome;
+    constructor(opts: RfqSessionOpts);
+    get state(): RfqState;
+    /** The proposal currently on the table, or null before the first offer. */
+    get standingProposal(): StandingProposal | null;
+    outcome(): RfqOutcome;
+    /** Open a negotiation with the first proposal. */
+    offer(terms: unknown): Promise<ChannelMessage>;
+    /** Counter the standing proposal with new terms. */
+    counter(terms: unknown): Promise<ChannelMessage>;
+    /** Accept the standing proposal — terminal (CH-5). */
+    accept(): Promise<ChannelMessage>;
+    /** Reject the negotiation — terminal (CH-5). */
+    reject(reason?: string): Promise<ChannelMessage>;
+    /** Abort the negotiation — terminal (CH-5). */
+    abort(reason?: string): Promise<ChannelMessage>;
+    /**
+     * Feed a verified inbound channel message. No-op for non-RFQ types or
+     * messages arriving after a terminal state (a late duplicate of an
+     * end message). Throws only on a protocol violation that the channel
+     * layer can't catch (e.g. accept referencing an unknown proposal).
+     */
+    onIncoming(msg: ChannelMessage): void;
+    /** Record a verified inbound offer/counter as the standing proposal. */
+    private acceptProposal;
+    private proposeOutgoing;
+    private settle;
+    private assertOpen;
+}

package/build/l2ps/channel/negotiate.js

@@ -0,0 +1,206 @@
+/**
+ * SR-4 WI-B — `negotiate-rfq` phase logic.
+ *
+ * A request-for-quote negotiation is a turn-based exchange of `offer` /
+ * `counter` proposals terminating in `accept`, `reject`, or `abort`
+ * (CH-5 termination; DACS-3 §8.3). Per the SR-4 brief the RFQ message
+ * *bodies* are implementation-defined (only sealed-envelope bodies are
+ * spec-locked, §8.4.3), so this layer fixes a minimal body schema and
+ * the state machine while staying agnostic to the actual `terms`.
+ *
+ * `RfqSession` is a pure protocol state machine. It does not move bytes:
+ * the caller wires its `send` callback to a transport (e.g.
+ * `L2PSChannelTransport.send`) and feeds verified inbound envelopes to
+ * `onIncoming`. By the time a message reaches `onIncoming` the channel
+ * layer has already verified the signature, `sender ∈ members`, the
+ * channelId, and monotonic sequence — so this layer only enforces
+ * protocol-level rules (legal transitions, body shape, referencing an
+ * existing offer).
+ */
+const RFQ_TYPES = new Set([
+    "offer",
+    "counter",
+    "accept",
+    "reject",
+    "abort",
+]);
+export class RfqSession {
+    constructor(opts) {
+        this._state = "open";
+        this._standing = null;
+        /** Every proposal seen, by sequence — so `accept` can resolve its terms. */
+        this.proposals = new Map();
+        this._outcome = { state: "open" };
+        this.me = opts.me;
+        this.sendFn = opts.send;
+        this.onStateChange = opts.onStateChange;
+        this.onProposal = opts.onProposal;
+    }
+    get state() {
+        return this._state;
+    }
+    /** The proposal currently on the table, or null before the first offer. */
+    get standingProposal() {
+        return this._standing;
+    }
+    outcome() {
+        return this._outcome;
+    }
+    /** Open a negotiation with the first proposal. */
+    async offer(terms) {
+        this.assertOpen("offer");
+        if (this._standing)
+            throw new Error("RfqSession: a proposal already stands; use counter()");
+        return this.proposeOutgoing("offer", terms);
+    }
+    /** Counter the standing proposal with new terms. */
+    async counter(terms) {
+        this.assertOpen("counter");
+        if (!this._standing)
+            throw new Error("RfqSession: nothing to counter — no standing offer");
+        return this.proposeOutgoing("counter", terms, this._standing.sequence);
+    }
+    /** Accept the standing proposal — terminal (CH-5). */
+    async accept() {
+        this.assertOpen("accept");
+        if (!this._standing)
+            throw new Error("RfqSession: nothing to accept — no standing offer");
+        // You cannot accept your own proposal: acceptance is the
+        // counterparty agreeing to the terms on the table. Accepting a
+        // self-authored standing proposal would settle the negotiation
+        // (and produce a transcript) without the other side ever agreeing.
+        if (this._standing.sender === this.me)
+            throw new Error("RfqSession: cannot accept your own proposal — wait for the counterparty");
+        const accepted = this._standing;
+        const body = { acceptedSequence: accepted.sequence };
+        const msg = await this.sendFn({
+            type: "accept",
+            body,
+            repliesTo: accepted.sequence,
+        });
+        this.settle({
+            state: "accepted",
+            agreedTerms: accepted.terms,
+            acceptedSequence: accepted.sequence,
+        });
+        return msg;
+    }
+    /** Reject the negotiation — terminal (CH-5). */
+    async reject(reason) {
+        this.assertOpen("reject");
+        const body = reason ? { reason } : {};
+        const msg = await this.sendFn({ type: "reject", body });
+        this.settle({ state: "rejected", reason });
+        return msg;
+    }
+    /** Abort the negotiation — terminal (CH-5). */
+    async abort(reason) {
+        this.assertOpen("abort");
+        const body = reason ? { reason } : {};
+        const msg = await this.sendFn({ type: "abort", body });
+        this.settle({ state: "aborted", reason });
+        return msg;
+    }
+    /**
+     * Feed a verified inbound channel message. No-op for non-RFQ types or
+     * messages arriving after a terminal state (a late duplicate of an
+     * end message). Throws only on a protocol violation that the channel
+     * layer can't catch (e.g. accept referencing an unknown proposal).
+     */
+    onIncoming(msg) {
+        if (!RFQ_TYPES.has(msg.type))
+            return;
+        if (msg.sender === this.me)
+            return; // our own echo, already applied
+        if (this._state !== "open")
+            return; // terminal — ignore trailing traffic
+        switch (msg.type) {
+            case "offer": {
+                // An offer opens a negotiation: it is only legal when no
+                // proposal stands yet. A second inbound offer must not
+                // overwrite the standing proposal — `offer()` rejects the
+                // same case outbound, so the inbound path enforces it too.
+                if (this._standing)
+                    throw new Error(`RfqSession: inbound offer (seq ${msg.sequence}) but a proposal already stands (seq ${this._standing.sequence})`);
+                this.acceptProposal(msg);
+                break;
+            }
+            case "counter": {
+                // A counter replaces the standing proposal — illegal before
+                // any offer exists, mirroring `counter()` outbound.
+                if (!this._standing)
+                    throw new Error(`RfqSession: inbound counter (seq ${msg.sequence}) but no standing offer to counter`);
+                this.acceptProposal(msg);
+                break;
+            }
+            case "accept": {
+                const seq = msg.body?.acceptedSequence;
+                const accepted = this.proposals.get(seq);
+                if (!accepted)
+                    throw new Error(`RfqSession: accept references unknown proposal sequence ${seq}`);
+                // The accept must reference the proposal currently on the
+                // table. Once a counter supersedes an earlier offer, that
+                // older offer is off the table — accepting it would settle
+                // obsolete terms instead of what is currently being
+                // negotiated.
+                if (!this._standing || seq !== this._standing.sequence)
+                    throw new Error(`RfqSession: accept references stale proposal seq ${seq}; standing proposal is seq ${this._standing?.sequence ?? "none"}`);
+                this.settle({
+                    state: "accepted",
+                    agreedTerms: accepted.terms,
+                    acceptedSequence: seq,
+                });
+                break;
+            }
+            case "reject": {
+                this.settle({
+                    state: "rejected",
+                    reason: msg.body?.reason,
+                });
+                break;
+            }
+            case "abort": {
+                this.settle({
+                    state: "aborted",
+                    reason: msg.body?.reason,
+                });
+                break;
+            }
+        }
+    }
+    /** Record a verified inbound offer/counter as the standing proposal. */
+    acceptProposal(msg) {
+        const terms = msg.body?.terms;
+        const proposal = {
+            sequence: msg.sequence,
+            sender: msg.sender,
+            terms,
+        };
+        this.proposals.set(msg.sequence, proposal);
+        this._standing = proposal;
+        this.onProposal?.(proposal);
+    }
+    async proposeOutgoing(type, terms, repliesTo) {
+        const body = { terms };
+        const msg = await this.sendFn({ type, body, repliesTo });
+        const proposal = {
+            sequence: msg.sequence,
+            sender: this.me,
+            terms,
+        };
+        this.proposals.set(msg.sequence, proposal);
+        this._standing = proposal;
+        this.onProposal?.(proposal);
+        return msg;
+    }
+    settle(outcome) {
+        this._state = outcome.state;
+        this._outcome = outcome;
+        this.onStateChange?.(outcome);
+    }
+    assertOpen(action) {
+        if (this._state !== "open")
+            throw new Error(`RfqSession: cannot ${action} — negotiation is ${this._state}`);
+    }
+}
+//# sourceMappingURL=negotiate.js.map

package/build/l2ps/channel/negotiate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"negotiate.js","sourceRoot":"","sources":["../../../../src/l2ps/channel/negotiate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAyDH,MAAM,SAAS,GAAoC,IAAI,GAAG,CAAqB;IAC3E,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;CACV,CAAC,CAAA;AAEF,MAAM,OAAO,UAAU;IAYnB,YAAY,IAAoB;QANxB,WAAM,GAAa,MAAM,CAAA;QACzB,cAAS,GAA4B,IAAI,CAAA;QACjD,4EAA4E;QAC3D,cAAS,GAAG,IAAI,GAAG,EAA4B,CAAA;QACxD,aAAQ,GAAe,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;QAG5C,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAA;QACjB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAA;QACvB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAA;QACvC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAA;IACrC,CAAC;IAED,IAAI,KAAK;QACL,OAAO,IAAI,CAAC,MAAM,CAAA;IACtB,CAAC;IACD,2EAA2E;IAC3E,IAAI,gBAAgB;QAChB,OAAO,IAAI,CAAC,SAAS,CAAA;IACzB,CAAC;IACD,OAAO;QACH,OAAO,IAAI,CAAC,QAAQ,CAAA;IACxB,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,KAAK,CAAC,KAAc;QACtB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACxB,IAAI,IAAI,CAAC,SAAS;YACd,MAAM,IAAI,KAAK,CACX,sDAAsD,CACzD,CAAA;QACL,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IAC/C,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,OAAO,CAAC,KAAc;QACxB,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QAC1B,IAAI,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;QACzE,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IAC1E,CAAC;IAED,sDAAsD;IACtD,KAAK,CAAC,MAAM;QACR,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS;YACf,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACxE,yDAAyD;QACzD,+DAA+D;QAC/D,+DAA+D;QAC/D,mEAAmE;QACnE,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE;YACjC,MAAM,IAAI,KAAK,CACX,yEAAyE,CAC5E,CAAA;QACL,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,MAAM,IAAI,GAAkB,EAAE,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAA;QACnE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC1B,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,SAAS,EAAE,QAAQ,CAAC,QAAQ;SAC/B,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,CAAC;YACR,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,QAAQ,CAAC,KAAK;YAC3B,gBAAgB,EAAE,QAAQ,CAAC,QAAQ;SACtC,CAAC,CAAA;QACF,OAAO,GAAG,CAAA;IACd,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,MAAM,CAAC,MAAe;QACxB,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;QACzB,MAAM,IAAI,GAAe,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;QAC1C,OAAO,GAAG,CAAA;IACd,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,KAAK,CAAC,MAAe;QACvB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACxB,MAAM,IAAI,GAAe,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACjD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAA;QACzC,OAAO,GAAG,CAAA;IACd,CAAC;IAED;;;;;OAKG;IACH,UAAU,CAAC,GAAmB;QAC1B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAM;QACpC,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE;YAAE,OAAM,CAAC,gCAAgC;QACnE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,OAAM,CAAC,qCAAqC;QAExE,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,OAAO,CAAC,CAAC,CAAC;gBACX,yDAAyD;gBACzD,uDAAuD;gBACvD,0DAA0D;gBAC1D,2DAA2D;gBAC3D,IAAI,IAAI,CAAC,SAAS;oBACd,MAAM,IAAI,KAAK,CACX,kCAAkC,GAAG,CAAC,QAAQ,wCAAwC,IAAI,CAAC,SAAS,CAAC,QAAQ,GAAG,CACnH,CAAA;gBACL,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;gBACxB,MAAK;YACT,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACb,4DAA4D;gBAC5D,oDAAoD;gBACpD,IAAI,CAAC,IAAI,CAAC,SAAS;oBACf,MAAM,IAAI,KAAK,CACX,oCAAoC,GAAG,CAAC,QAAQ,oCAAoC,CACvF,CAAA;gBACL,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;gBACxB,MAAK;YACT,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACZ,MAAM,GAAG,GAAI,GAAG,CAAC,IAAsB,EAAE,gBAAgB,CAAA;gBACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;gBACxC,IAAI,CAAC,QAAQ;oBACT,MAAM,IAAI,KAAK,CACX,2DAA2D,GAAG,EAAE,CACnE,CAAA;gBACL,0DAA0D;gBAC1D,0DAA0D;gBAC1D,2DAA2D;gBAC3D,oDAAoD;gBACpD,cAAc;gBACd,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ;oBAClD,MAAM,IAAI,KAAK,CACX,oDAAoD,GAAG,8BACnD,IAAI,CAAC,SAAS,EAAE,QAAQ,IAAI,MAChC,EAAE,CACL,CAAA;gBACL,IAAI,CAAC,MAAM,CAAC;oBACR,KAAK,EAAE,UAAU;oBACjB,WAAW,EAAE,QAAQ,CAAC,KAAK;oBAC3B,gBAAgB,EAAE,GAAG;iBACxB,CAAC,CAAA;gBACF,MAAK;YACT,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACZ,IAAI,CAAC,MAAM,CAAC;oBACR,KAAK,EAAE,UAAU;oBACjB,MAAM,EAAG,GAAG,CAAC,IAAmB,EAAE,MAAM;iBAC3C,CAAC,CAAA;gBACF,MAAK;YACT,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,MAAM,CAAC;oBACR,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAG,GAAG,CAAC,IAAmB,EAAE,MAAM;iBAC3C,CAAC,CAAA;gBACF,MAAK;YACT,CAAC;QACL,CAAC;IACL,CAAC;IAED,wEAAwE;IAChE,cAAc,CAAC,GAAmB;QACtC,MAAM,KAAK,GAAI,GAAG,CAAC,IAAwB,EAAE,KAAK,CAAA;QAClD,MAAM,QAAQ,GAAqB;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK;SACR,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAC1C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;QACzB,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAA;IAC/B,CAAC;IAEO,KAAK,CAAC,eAAe,CACzB,IAAyB,EACzB,KAAc,EACd,SAAkB;QAElB,MAAM,IAAI,GAAoB,EAAE,KAAK,EAAE,CAAA;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;QACxD,MAAM,QAAQ,GAAqB;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK;SACR,CAAA;QACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QAC1C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAA;QACzB,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAA;QAC3B,OAAO,GAAG,CAAA;IACd,CAAC;IAEO,MAAM,CAAC,OAAmB;QAC9B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAA;QAC3B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAA;QACvB,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,CAAA;IACjC,CAAC;IAEO,UAAU,CAAC,MAAc;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YACtB,MAAM,IAAI,KAAK,CACX,sBAAsB,MAAM,qBAAqB,IAAI,CAAC,MAAM,EAAE,CACjE,CAAA;IACT,CAAC;CACJ"}

package/build/l2ps/channel/session.d.ts

@@ -0,0 +1,66 @@
+import { Demos } from "../../websdk/demosclass";
+import type { ClaimReference } from "../../identity/cci";
+import type { ChannelMessage, ChannelMessageType } from "./types";
+import type { ChannelIdRegistry } from "./channelIdRegistry";
+export interface ChannelSessionOpts {
+    channelId: string;
+    members: ClaimReference[];
+    /** This party's primary claim — must be in `members`. */
+    me: ClaimReference;
+    demos: Demos;
+    /**
+     * Optional CH-6 enforcement. If provided, `open()` registers the
+     * channelId here and throws on reuse.
+     */
+    channelIdRegistry?: ChannelIdRegistry;
+}
+/**
+ * Per-channel session — owns the monotonic sequence counter and applies
+ * the four invariants from §8.3.3 / §8.12 on every message:
+ *
+ *   1. signature verifies under sender's CCI key
+ *   2. sender ∈ members (CH-1)
+ *   3. sequence is monotonic per channel (anti-replay)
+ *   4. channelId matches the session's channelId
+ *
+ * A single counter is shared across senders, as the brief specifies
+ * (`sequence: number  // monotonic per channel, starts at 1`). Outgoing
+ * messages get `current + 1`; incoming messages must use a sequence
+ * strictly greater than every value already seen.
+ */
+export declare class ChannelSession {
+    readonly channelId: string;
+    readonly members: ReadonlyArray<ClaimReference>;
+    readonly me: ClaimReference;
+    private readonly demos;
+    private readonly registry;
+    private opened;
+    private highestSeen;
+    private readonly transcript;
+    constructor(opts: ChannelSessionOpts);
+    /**
+     * Register the channelId (CH-6) and prepare for messaging. Idempotent
+     * within a session — calling twice throws via the registry.
+     */
+    open(): Promise<void>;
+    /**
+     * Build, sign, append-to-local-transcript, and return the next
+     * outgoing `ChannelMessage`. Sequence is `highestSeen + 1` so it is
+     * monotonic across both directions.
+     */
+    sendOutgoing(opts: {
+        type: ChannelMessageType;
+        body: unknown;
+        sentAt?: number;
+        repliesTo?: number;
+    }): Promise<ChannelMessage>;
+    /**
+     * Validate an incoming `ChannelMessage`. Throws with a precise reason
+     * on any failure — caller should treat throw as channel-fatal per
+     * §8.12 (a single tampered message invalidates the session's record).
+     */
+    receiveIncoming(msg: ChannelMessage): Promise<void>;
+    /** Read-only snapshot of all messages this session has signed or accepted. */
+    messages(): ReadonlyArray<ChannelMessage>;
+    private assertOpened;
+}

package/build/l2ps/channel/session.js

@@ -0,0 +1,101 @@
+import { isSenderInMembers, signChannelMessage, verifyChannelMessage, } from "./envelope.js";
+/**
+ * Per-channel session — owns the monotonic sequence counter and applies
+ * the four invariants from §8.3.3 / §8.12 on every message:
+ *
+ *   1. signature verifies under sender's CCI key
+ *   2. sender ∈ members (CH-1)
+ *   3. sequence is monotonic per channel (anti-replay)
+ *   4. channelId matches the session's channelId
+ *
+ * A single counter is shared across senders, as the brief specifies
+ * (`sequence: number  // monotonic per channel, starts at 1`). Outgoing
+ * messages get `current + 1`; incoming messages must use a sequence
+ * strictly greater than every value already seen.
+ */
+export class ChannelSession {
+    constructor(opts) {
+        this.opened = false;
+        this.highestSeen = 0;
+        this.transcript = [];
+        if (!opts.channelId)
+            throw new Error("ChannelSession: channelId required");
+        if (!opts.members?.length)
+            throw new Error("ChannelSession: members required");
+        if (!opts.members.includes(opts.me))
+            throw new Error(`ChannelSession: me (${opts.me}) is not in members`);
+        this.channelId = opts.channelId;
+        this.members = [...opts.members];
+        this.me = opts.me;
+        this.demos = opts.demos;
+        this.registry = opts.channelIdRegistry;
+    }
+    /**
+     * Register the channelId (CH-6) and prepare for messaging. Idempotent
+     * within a session — calling twice throws via the registry.
+     */
+    async open() {
+        if (this.opened)
+            throw new Error("ChannelSession: already opened");
+        if (this.registry)
+            await this.registry.register(this.channelId);
+        this.opened = true;
+    }
+    /**
+     * Build, sign, append-to-local-transcript, and return the next
+     * outgoing `ChannelMessage`. Sequence is `highestSeen + 1` so it is
+     * monotonic across both directions.
+     */
+    async sendOutgoing(opts) {
+        this.assertOpened();
+        // Reserve the sequence slot SYNCHRONOUSLY before any await — two
+        // concurrent sendOutgoing() calls would otherwise read the same
+        // `highestSeen`, sign two messages with identical sequence
+        // numbers, and silently violate the anti-replay invariant on the
+        // receiver side.
+        const sequence = ++this.highestSeen;
+        const unsigned = {
+            channelId: this.channelId,
+            sequence,
+            sender: this.me,
+            sentAt: opts.sentAt ?? Date.now(),
+            type: opts.type,
+            body: opts.body,
+            ...(opts.repliesTo !== undefined && {
+                refs: { repliesTo: opts.repliesTo },
+            }),
+        };
+        const signed = await signChannelMessage(unsigned, this.demos);
+        this.transcript.push(signed);
+        return signed;
+    }
+    /**
+     * Validate an incoming `ChannelMessage`. Throws with a precise reason
+     * on any failure — caller should treat throw as channel-fatal per
+     * §8.12 (a single tampered message invalidates the session's record).
+     */
+    async receiveIncoming(msg) {
+        this.assertOpened();
+        if (msg.channelId !== this.channelId)
+            throw new Error(`ChannelSession: channelId mismatch (expected ${this.channelId}, got ${msg.channelId})`);
+        if (!isSenderInMembers(msg, this.members))
+            throw new Error(`ChannelSession: sender "${msg.sender}" not in members (CH-1)`);
+        if (!Number.isInteger(msg.sequence) || msg.sequence < 1)
+            throw new Error(`ChannelSession: invalid sequence ${msg.sequence}`);
+        if (msg.sequence <= this.highestSeen)
+            throw new Error(`ChannelSession: non-monotonic sequence ${msg.sequence} (highest seen ${this.highestSeen})`);
+        if (!verifyChannelMessage(msg))
+            throw new Error("ChannelSession: signature verification failed");
+        this.highestSeen = msg.sequence;
+        this.transcript.push(msg);
+    }
+    /** Read-only snapshot of all messages this session has signed or accepted. */
+    messages() {
+        return this.transcript;
+    }
+    assertOpened() {
+        if (!this.opened)
+            throw new Error("ChannelSession: call open() before sending or receiving");
+    }
+}
+//# sourceMappingURL=session.js.map

package/build/l2ps/channel/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../../src/l2ps/channel/session.ts"],"names":[],"mappings":"AAOA,OAAO,EACH,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,GACvB,MAAM,YAAY,CAAA;AAgBnB;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,cAAc;IAUvB,YAAY,IAAwB;QAJ5B,WAAM,GAAG,KAAK,CAAA;QACd,gBAAW,GAAG,CAAC,CAAA;QACN,eAAU,GAAqB,EAAE,CAAA;QAG9C,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;QAC1E,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM;YACrB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACvD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACX,uBAAuB,IAAI,CAAC,EAAE,qBAAqB,CACtD,CAAA;QAEL,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAC/B,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;QAChC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAA;QACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAA;QACvB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAA;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI;QACN,IAAI,IAAI,CAAC,MAAM;YACX,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QACrD,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;IACtB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAAC,IAKlB;QACG,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,iEAAiE;QACjE,gEAAgE;QAChE,2DAA2D;QAC3D,iEAAiE;QACjE,iBAAiB;QACjB,MAAM,QAAQ,GAAG,EAAE,IAAI,CAAC,WAAW,CAAA;QACnC,MAAM,QAAQ,GAA2B;YACrC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ;YACR,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI;gBAChC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE;aACtC,CAAC;SACL,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC5B,OAAO,MAAM,CAAA;IACjB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,GAAmB;QACrC,IAAI,CAAC,YAAY,EAAE,CAAA;QACnB,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAChC,MAAM,IAAI,KAAK,CACX,gDAAgD,IAAI,CAAC,SAAS,SAAS,GAAG,CAAC,SAAS,GAAG,CAC1F,CAAA;QACL,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC;YACrC,MAAM,IAAI,KAAK,CACX,2BAA2B,GAAG,CAAC,MAAM,yBAAyB,CACjE,CAAA;QACL,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,GAAG,CAAC;YACnD,MAAM,IAAI,KAAK,CACX,oCAAoC,GAAG,CAAC,QAAQ,EAAE,CACrD,CAAA;QACL,IAAI,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW;YAChC,MAAM,IAAI,KAAK,CACX,0CAA0C,GAAG,CAAC,QAAQ,kBAAkB,IAAI,CAAC,WAAW,GAAG,CAC9F,CAAA;QACL,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;YAC1B,MAAM,IAAI,KAAK,CACX,+CAA+C,CAClD,CAAA;QACL,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,QAAQ,CAAA;QAC/B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,8EAA8E;IAC9E,QAAQ;QACJ,OAAO,IAAI,CAAC,UAAU,CAAA;IAC1B,CAAC;IAEO,YAAY;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM;YACZ,MAAM,IAAI,KAAK,CACX,yDAAyD,CAC5D,CAAA;IACT,CAAC;CACJ"}

package/build/l2ps/channel/transcript.d.ts

@@ -0,0 +1,48 @@
+import { type ClaimReference } from "../../identity/cci";
+import { Demos } from "../../websdk/demosclass";
+import type { ChannelMessage, ChannelTranscript, TranscriptSignature, UnsignedChannelTranscript } from "./types";
+/**
+ * Build the unsigned transcript shell. Messages must already be in
+ * sequence order — typically `session.messages()`.
+ */
+export declare function buildUnsignedTranscript(opts: {
+    channelId: string;
+    members: ClaimReference[];
+    messages: ReadonlyArray<ChannelMessage>;
+    generatedAt?: number;
+}): UnsignedChannelTranscript;
+/**
+ * Produce one party's `TranscriptSignature` over the unsigned transcript.
+ * Domain-separated under `dacs-transcript:v1:` — cannot be confused with
+ * a channel-message or binding signature.
+ */
+export declare function signTranscript(unsigned: UnsignedChannelTranscript, signer: ClaimReference, demos: Demos): Promise<TranscriptSignature>;
+/**
+ * Convenience: assemble the full transcript with one or more party
+ * signatures. Pass signers in the order their signatures should appear.
+ */
+export declare function exportTranscript(opts: {
+    channelId: string;
+    members: ClaimReference[];
+    messages: ReadonlyArray<ChannelMessage>;
+    signers: Array<{
+        claim: ClaimReference;
+        demos: Demos;
+    }>;
+    generatedAt?: number;
+}): Promise<ChannelTranscript>;
+export interface TranscriptVerificationResult {
+    ok: boolean;
+    errors: string[];
+}
+/**
+ * Verify every claim about a transcript a non-member can check given only
+ * the public keys: (a) each `TranscriptSignature` is valid, (b) each
+ * `ChannelMessage` carries a valid signature, (c) every message's sender
+ * is in `members`, (d) sequences are strictly monotonic per channel,
+ * (e) every message's `channelId` matches the transcript.
+ *
+ * Returns a list of errors rather than throwing so auditors can collect
+ * every failure in one pass.
+ */
+export declare function verifyTranscript(t: ChannelTranscript): TranscriptVerificationResult;