@mikeargento/bitgraph-player 0.1.0

package/dist/rule.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Rule parsing and validation for bitgraph-player/1.
+ *
+ * Strict by design: unknown fields are rejected at every level, because a
+ * silently ignored field in a rule is a claim the author believes is being
+ * enforced and is not. `requires.ordering` is mandatory — a rule that does
+ * not declare its trust floor does not parse.
+ *
+ * One deliberate looseness: a claim may reference a role the cast does not
+ * declare. That is NOT a parse error; it evaluates to UNDETERMINED. The
+ * rule file stays parseable so the verdict can say exactly which reference
+ * was undeclared.
+ */
+import type { Rule } from "./types.js";
+export declare class RuleError extends Error {
+    readonly issues: readonly string[];
+    constructor(issues: readonly string[]);
+}
+/**
+ * Normalize any accepted digest spelling to the standard-base64 form used
+ * by bitgraph/1 proofs (artifact.digestB64). Returns undefined when the
+ * input is not a CANONICAL spelling of a 32-byte SHA-256: base64 forms
+ * must round-trip byte-exactly, so spellings with nonzero trailing
+ * padding bits (which Node's lenient decoder silently reinterprets) are
+ * rejected rather than collapsed into different bytes than written.
+ */
+export declare function normalizeDigest(input: string): string | undefined;
+/**
+ * Tolerant decode of a digest string observed in a bundle proof, for
+ * byte-level matching only (a hostile file may spell its digest any way
+ * it likes; matching by bytes keeps "only broken recordings exist" from
+ * masquerading as "no recordings exist").
+ */
+export declare function decodeDigestBytes(input: string): Buffer | undefined;
+/**
+ * Parse and validate a rule from raw JSON text. Throws RuleError with every
+ * issue found, not just the first.
+ */
+export declare function parseRule(jsonText: string): Rule;
+//# sourceMappingURL=rule.d.ts.map

package/dist/rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.d.ts","sourceRoot":"","sources":["../src/rule.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAA2C,IAAI,EAAE,MAAM,YAAY,CAAC;AAEhF,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;gBACvB,MAAM,EAAE,SAAS,MAAM,EAAE;CAKtC;AAMD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAmBjE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYnE;AAkKD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CA+FhD"}

package/dist/rule.js

@@ -0,0 +1,324 @@
+// Copyright (c) 2024-2026 Mike Argento. Licensed under the MIT License. See LICENSE.
+export class RuleError extends Error {
+    issues;
+    constructor(issues) {
+        super(`invalid rule: ${issues.join("; ")}`);
+        this.name = "RuleError";
+        this.issues = issues;
+    }
+}
+const HEX64 = /^[0-9a-fA-F]{64}$/;
+const B64_STD = /^[A-Za-z0-9+/]{43}=$/;
+const B64_URL = /^[A-Za-z0-9_-]{43}=?$/;
+/**
+ * Normalize any accepted digest spelling to the standard-base64 form used
+ * by bitgraph/1 proofs (artifact.digestB64). Returns undefined when the
+ * input is not a CANONICAL spelling of a 32-byte SHA-256: base64 forms
+ * must round-trip byte-exactly, so spellings with nonzero trailing
+ * padding bits (which Node's lenient decoder silently reinterprets) are
+ * rejected rather than collapsed into different bytes than written.
+ */
+export function normalizeDigest(input) {
+    let s = input.trim();
+    if (s.toLowerCase().startsWith("sha256:"))
+        s = s.slice("sha256:".length);
+    if (HEX64.test(s)) {
+        return Buffer.from(s, "hex").toString("base64");
+    }
+    if (B64_STD.test(s)) {
+        const bytes = Buffer.from(s, "base64");
+        if (bytes.length === 32 && bytes.toString("base64") === s)
+            return s;
+        return undefined;
+    }
+    if (B64_URL.test(s)) {
+        const bytes = Buffer.from(s, "base64url");
+        if (bytes.length === 32 && bytes.toString("base64url") === s.replace(/=+$/, "")) {
+            return bytes.toString("base64");
+        }
+        return undefined;
+    }
+    return undefined;
+}
+/**
+ * Tolerant decode of a digest string observed in a bundle proof, for
+ * byte-level matching only (a hostile file may spell its digest any way
+ * it likes; matching by bytes keeps "only broken recordings exist" from
+ * masquerading as "no recordings exist").
+ */
+export function decodeDigestBytes(input) {
+    const s = input.trim();
+    if (HEX64.test(s))
+        return Buffer.from(s, "hex");
+    if (/^[A-Za-z0-9+/]+=*$/.test(s)) {
+        const bytes = Buffer.from(s, "base64");
+        return bytes.length === 32 ? bytes : undefined;
+    }
+    if (/^[A-Za-z0-9_-]+=*$/.test(s)) {
+        const bytes = Buffer.from(s, "base64url");
+        return bytes.length === 32 ? bytes : undefined;
+    }
+    return undefined;
+}
+function isPlainObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function rejectUnknownKeys(obj, allowed, where, issues) {
+    for (const key of Object.keys(obj)) {
+        if (!allowed.includes(key))
+            issues.push(`${where}: unknown field "${key}"`);
+    }
+}
+function parsePin(v, where, issues) {
+    if (!isPlainObject(v)) {
+        issues.push(`${where}: "at" must be an object`);
+        return undefined;
+    }
+    const hasProofHash = "proofHash" in v;
+    const hasPosition = "epochId" in v || "counter" in v;
+    if (hasProofHash && hasPosition) {
+        issues.push(`${where}: "at" must be {proofHash} or {epochId, counter}, not both`);
+        return undefined;
+    }
+    if (hasProofHash) {
+        rejectUnknownKeys(v, ["proofHash"], where, issues);
+        if (typeof v["proofHash"] !== "string" || v["proofHash"].length === 0) {
+            issues.push(`${where}: "at.proofHash" must be a non-empty string`);
+            return undefined;
+        }
+        return { proofHash: v["proofHash"] };
+    }
+    if (hasPosition) {
+        rejectUnknownKeys(v, ["epochId", "counter"], where, issues);
+        const epochId = v["epochId"];
+        const counter = v["counter"];
+        if (typeof epochId !== "string" || epochId.length === 0) {
+            issues.push(`${where}: "at.epochId" must be a non-empty string`);
+            return undefined;
+        }
+        if (typeof counter !== "string" || !/^\d+$/.test(counter)) {
+            issues.push(`${where}: "at.counter" must be a decimal string`);
+            return undefined;
+        }
+        return { epochId, counter };
+    }
+    issues.push(`${where}: "at" must be {proofHash} or {epochId, counter}`);
+    return undefined;
+}
+function parseCastEntry(role, v, issues) {
+    const where = `cast.${role}`;
+    if (!isPlainObject(v)) {
+        issues.push(`${where}: must be an object`);
+        return undefined;
+    }
+    rejectUnknownKeys(v, ["digest", "means", "at", "signedBy", "optional"], where, issues);
+    const digest = v["digest"];
+    if (typeof digest !== "string") {
+        issues.push(`${where}: "digest" is required and must be a string`);
+        return undefined;
+    }
+    if (normalizeDigest(digest) === undefined) {
+        issues.push(`${where}: "digest" is not a well-formed 32-byte SHA-256 in any accepted spelling`);
+        return undefined;
+    }
+    const entry = { digest };
+    if ("means" in v) {
+        if (typeof v["means"] !== "string") {
+            issues.push(`${where}: "means" must be a string`);
+        }
+        else {
+            entry.means = v["means"];
+        }
+    }
+    if ("at" in v) {
+        const pin = parsePin(v["at"], where, issues);
+        if (pin !== undefined)
+            entry.at = pin;
+    }
+    if ("signedBy" in v) {
+        entry.signedBy = v["signedBy"];
+    }
+    if ("optional" in v) {
+        if (typeof v["optional"] !== "boolean") {
+            issues.push(`${where}: "optional" must be a boolean`);
+        }
+        else {
+            entry.optional = v["optional"];
+        }
+    }
+    return entry;
+}
+function parseClaim(v, where, issues, depth) {
+    if (depth > 32) {
+        issues.push(`${where}: claim nesting exceeds the maximum depth of 32`);
+        return undefined;
+    }
+    if (!isPlainObject(v)) {
+        issues.push(`${where}: must be an object`);
+        return undefined;
+    }
+    const keys = Object.keys(v);
+    if (keys.length !== 1) {
+        issues.push(`${where}: a claim must have exactly one operator, got [${keys.join(", ")}]`);
+        return undefined;
+    }
+    const op = keys[0];
+    const body = v[op];
+    switch (op) {
+        case "exists": {
+            if (typeof body !== "string" || body.length === 0) {
+                issues.push(`${where}.exists: must be a role name`);
+                return undefined;
+            }
+            return { exists: body };
+        }
+        case "before":
+        case "after": {
+            if (!Array.isArray(body) || body.length !== 2 || body.some((r) => typeof r !== "string")) {
+                issues.push(`${where}.${op}: must be a two-element array of role names`);
+                return undefined;
+            }
+            const pair = body;
+            return op === "before" ? { before: pair } : { after: pair };
+        }
+        case "between": {
+            if (!Array.isArray(body) || body.length !== 3 || body.some((r) => typeof r !== "string")) {
+                issues.push(`${where}.between: must be [subject, lowerRole, upperRole]`);
+                return undefined;
+            }
+            return { between: body };
+        }
+        case "all":
+        case "any": {
+            if (!Array.isArray(body) || body.length === 0) {
+                issues.push(`${where}.${op}: must be a non-empty array of claims`);
+                return undefined;
+            }
+            const parsed = [];
+            let ok = true;
+            body.forEach((child, i) => {
+                const c = parseClaim(child, `${where}.${op}[${i}]`, issues, depth + 1);
+                if (c === undefined)
+                    ok = false;
+                else
+                    parsed.push(c);
+            });
+            if (!ok)
+                return undefined;
+            return op === "all" ? { all: parsed } : { any: parsed };
+        }
+        case "not": {
+            const inner = parseClaim(body, `${where}.not`, issues, depth + 1);
+            if (inner === undefined)
+                return undefined;
+            return { not: inner };
+        }
+        default:
+            issues.push(`${where}: unknown operator "${op}"`);
+            return undefined;
+    }
+}
+/**
+ * Parse and validate a rule from raw JSON text. Throws RuleError with every
+ * issue found, not just the first.
+ */
+export function parseRule(jsonText) {
+    let raw;
+    try {
+        raw = JSON.parse(jsonText);
+    }
+    catch (err) {
+        throw new RuleError([`not valid JSON: ${err.message}`]);
+    }
+    const issues = [];
+    if (!isPlainObject(raw))
+        throw new RuleError(["rule file must be a JSON object"]);
+    rejectUnknownKeys(raw, ["rule", "id", "cast", "world", "requires", "claim", "then"], "rule", issues);
+    if (raw["rule"] !== "bitgraph-player/1") {
+        issues.push(`"rule" must be exactly "bitgraph-player/1"`);
+    }
+    if (typeof raw["id"] !== "string" || raw["id"].length === 0) {
+        issues.push(`"id" is required and must be a non-empty string`);
+    }
+    if (raw["world"] !== "closed") {
+        issues.push(`"world" is required and must be exactly "closed" (the only defined value)`);
+    }
+    // The trust floor is mandatory. No default: a rule that does not state
+    // what evidence it accepts does not parse.
+    let ordering;
+    if (!isPlainObject(raw["requires"])) {
+        issues.push(`"requires" is required: a rule must declare its trust floor via requires.ordering`);
+    }
+    else {
+        rejectUnknownKeys(raw["requires"], ["ordering"], "requires", issues);
+        const o = raw["requires"]["ordering"];
+        if (o === "hash-linked" || o === "assumption-dependent") {
+            ordering = o;
+        }
+        else {
+            issues.push(`requires.ordering must be "hash-linked" or "assumption-dependent"`);
+        }
+    }
+    // Null prototype: a role named "__proto__" must become an ordinary own
+    // key, not a prototype assignment that silently drops the role.
+    const cast = Object.create(null);
+    if (!isPlainObject(raw["cast"]) || Object.keys(raw["cast"]).length === 0) {
+        issues.push(`"cast" is required and must declare at least one role`);
+    }
+    else {
+        for (const [role, entry] of Object.entries(raw["cast"])) {
+            if (!/^[A-Za-z0-9_.-]+$/.test(role)) {
+                issues.push(`cast: role name "${role}" must match [A-Za-z0-9_.-]+`);
+                continue;
+            }
+            // Pure-integer names are re-ordered ahead of string keys by JSON
+            // object semantics in some languages, breaking the declaration-order
+            // guarantee a verdict depends on. Forbidden by the grammar.
+            if (/^[0-9]+$/.test(role)) {
+                issues.push(`cast: role name "${role}" must contain at least one non-digit character`);
+                continue;
+            }
+            const parsed = parseCastEntry(role, entry, issues);
+            if (parsed !== undefined)
+                cast[role] = parsed;
+        }
+    }
+    let claim;
+    if (!("claim" in raw)) {
+        issues.push(`"claim" is required`);
+    }
+    else {
+        claim = parseClaim(raw["claim"], "claim", issues, 0);
+    }
+    let then;
+    if ("then" in raw) {
+        if (!isPlainObject(raw["then"])) {
+            issues.push(`"then" must be an object`);
+        }
+        else {
+            // A label and nothing else. The first request for a field here that
+            // can cause an action is a request to make Player an enforcer.
+            rejectUnknownKeys(raw["then"], ["label"], "then", issues);
+            if (typeof raw["then"]["label"] !== "string" || raw["then"]["label"].length === 0) {
+                issues.push(`then.label must be a non-empty string`);
+            }
+            else {
+                then = { label: raw["then"]["label"] };
+            }
+        }
+    }
+    if (issues.length > 0)
+        throw new RuleError(issues);
+    const rule = {
+        rule: "bitgraph-player/1",
+        id: raw["id"],
+        cast,
+        world: "closed",
+        requires: { ordering: ordering },
+        claim: claim,
+    };
+    if (then !== undefined)
+        rule.then = then;
+    return rule;
+}
+//# sourceMappingURL=rule.js.map

package/dist/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../src/rule.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAkBrF,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,MAAM,CAAoB;IACnC,YAAY,MAAyB;QACnC,KAAK,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAClC,MAAM,OAAO,GAAG,sBAAsB,CAAC;AACvC,MAAM,OAAO,GAAG,uBAAuB,CAAC;AAExC;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QACpE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;YAChF,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvC,OAAO,KAAK,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CACxB,GAA4B,EAC5B,OAA0B,EAC1B,KAAa,EACb,MAAgB;IAEhB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,oBAAoB,GAAG,GAAG,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU,EAAE,KAAa,EAAE,MAAgB;IAC3D,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,YAAY,GAAG,WAAW,IAAI,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,SAAS,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC;IACrD,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,4DAA4D,CAAC,CAAC;QAClF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,iBAAiB,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;YACnE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,iBAAiB,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAC;YAC/D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,kDAAkD,CAAC,CAAC;IACxE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,CAAU,EAAE,MAAgB;IAChE,MAAM,KAAK,GAAG,QAAQ,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,iBAAiB,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,SAAS,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,0EAA0E,CAAC,CAAC;QAChG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAc,EAAE,MAAM,EAAE,CAAC;IACpC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QACd,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,SAAS;YAAE,KAAK,CAAC,EAAE,GAAG,GAAG,CAAC;IACxC,CAAC;IACD,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QACpB,IAAI,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,CAAU,EAAE,KAAa,EAAE,MAAgB,EAAE,KAAa;IAC5E,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,iDAAiD,CAAC,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,kDAAkD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,MAAM,IAAI,GAAG,CAAC,CAAC,EAAoB,CAAC,CAAC;IACrC,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;gBACpD,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,CAAC;QACD,KAAK,QAAQ,CAAC;QACd,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACzF,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,6CAA6C,CAAC,CAAC;gBACzE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,GAAG,IAAwB,CAAC;YACtC,OAAO,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9D,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACzF,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,mDAAmD,CAAC,CAAC;gBACzE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAgC,EAAE,CAAC;QACvD,CAAC;QACD,KAAK,KAAK,CAAC;QACX,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,uCAAuC,CAAC,CAAC;gBACnE,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,MAAM,GAAY,EAAE,CAAC;YAC3B,IAAI,EAAE,GAAG,IAAI,CAAC;YACd,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;gBACxB,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC,KAAK,SAAS;oBAAE,EAAE,GAAG,KAAK,CAAC;;oBAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtB,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC1B,OAAO,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAC1D,CAAC;QACD,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,KAAK,MAAM,EAAE,MAAM,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAClE,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC1C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACxB,CAAC;QACD;YACE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,uBAAuB,EAAE,GAAG,CAAC,CAAC;YAClD,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC,CAAC,mBAAoB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC;IAElF,iBAAiB,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAErG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,mBAAmB,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC3F,CAAC;IAED,uEAAuE;IACvE,2CAA2C;IAC3C,IAAI,QAAkC,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;IACnG,CAAC;SAAM,CAAC;QACN,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,sBAAsB,EAAE,CAAC;YACxD,QAAQ,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,IAAI,GAA8B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA8B,CAAC;IACzF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,8BAA8B,CAAC,CAAC;gBACpE,SAAS;YACX,CAAC;YACD,iEAAiE;YACjE,qEAAqE;YACrE,4DAA4D;YAC5D,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,iDAAiD,CAAC,CAAC;gBACvF,SAAS;YACX,CAAC;YACD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACnD,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,KAAwB,CAAC;IAC7B,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,IAAmC,CAAC;IACxC,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,oEAAoE;YACpE,+DAA+D;YAC/D,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC1D,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClF,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;YACvD,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC;IAEnD,MAAM,IAAI,GAAS;QACjB,IAAI,EAAE,mBAAmB;QACzB,EAAE,EAAE,GAAG,CAAC,IAAI,CAAW;QACvB,IAAI;QACJ,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE,EAAE,QAAQ,EAAE,QAAwB,EAAE;QAChD,KAAK,EAAE,KAAc;KACtB,CAAC;IACF,IAAI,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACzC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,205 @@
+/**
+ * @mikeargento/bitgraph-player
+ *
+ * Shared vocabulary. The normative semantics live in SPEC.md; the comments
+ * here restate them only where a reader of the types needs the contract.
+ *
+ * Player is a pure function over an AuditResult:
+ *
+ *   evaluate(rule, runAudit(bundle)) -> verdict
+ *
+ * Three-valued by design. TRUE and FALSE are claims BitGraph evidence
+ * supports; UNDETERMINED is the honest answer everywhere the evidence does
+ * not decide. A boolean evaluator would launder undecidable into FALSE.
+ */
+import type { ObservedProof } from "@mikeargento/bitgraph-audit";
+export type ThreeValued = "TRUE" | "FALSE" | "UNDETERMINED";
+/**
+ * Every ordering answer names what it rests on:
+ *
+ *   "chain-link"     same partition, both proofs in one verified prevB64
+ *                    component; commit-counter order within a hash-linked
+ *                    structure.
+ *   "counter-order"  same partition, different components; commit-counter
+ *                    values only, which relies on the authority's counter
+ *                    discipline.
+ *   "epoch-lineage"  different epochs related by hard epochLink succession
+ *                    (cryptographic hand-off; transitive pairs from audit).
+ *   "anchor-bounds"  different epochs related through Ethereum anchor
+ *                    bounds. The not-after side always rests on the
+ *                    anchor-freshness assumption.
+ */
+export type OrderBasis = "chain-link" | "counter-order" | "epoch-lineage" | "anchor-bounds";
+/**
+ * The two honest tiers. "hash-linked" rests on hash links alone;
+ * "assumption-dependent" additionally rests on counter discipline or
+ * anchor freshness. A rule declares the floor it will accept.
+ */
+export type EvidenceTier = "hash-linked" | "assumption-dependent";
+export declare function basisTier(basis: OrderBasis): EvidenceTier;
+/** True when `tier` satisfies a declared floor. */
+export declare function meetsFloor(tier: EvidenceTier, floor: EvidenceTier): boolean;
+/** Result of comparing two resolved recordings. */
+export interface OrderResult {
+    /** "same" when both roles resolved to the identical recording. */
+    relation: "before" | "after" | "same" | "unordered";
+    /** Present exactly when relation is "before" or "after". */
+    basis?: OrderBasis;
+    /**
+     * Present exactly when relation is "before" or "after": the tier this
+     * specific answer rests on. Usually basisTier(basis), but epoch-lineage
+     * answers whose predecessor-side coverage rests on counter discipline
+     * carry "assumption-dependent" despite the hash-linked basis family.
+     * The evidence floor gates THIS field.
+     */
+    tier?: EvidenceTier;
+    /** True when the answer rests on an assumption (counter discipline or anchor freshness). */
+    assumptionDependent: boolean;
+    /** True when the evidence additionally rests on counter-order rather than a chain-link path. */
+    weaker: boolean;
+    /** Plain-language statement of exactly what was compared and why it answered this way. */
+    detail: string;
+}
+/**
+ * Pin selecting one occurrence when the same bits hold several causal
+ * positions. Exactly one of the two forms.
+ */
+export type CastPin = {
+    proofHash: string;
+} | {
+    epochId: string;
+    counter: string;
+};
+/**
+ * One cast role. Everything here is DECLARED: taken on the rule author's
+ * word, surfaced in the verdict's `declared` block, never derived.
+ */
+export interface CastEntry {
+    /**
+     * Artifact digest identifying the bits. Accepted forms: "sha256:<64 hex>",
+     * bare 64-char hex, standard base64, or base64url of the 32-byte digest.
+     * Normalized internally to the proof's base64 form.
+     */
+    digest: string;
+    /** What the digest means as a business object. Declared, echoed, never interpreted. */
+    means?: string;
+    /** Selects one recording when the digest holds several causal positions. */
+    at?: CastPin;
+    /**
+     * External identity evidence (e.g. a C2PA manifest reference). Player
+     * echoes it into `declared` verbatim with verifiedHere: false. SIGNED_BY
+     * is not a BitGraph primitive and is never derived here.
+     */
+    signedBy?: unknown;
+    /** When true, absence from the bundle is a definite fact under the closed world, not an error. */
+    optional?: boolean;
+}
+export type Claim = {
+    exists: string;
+} | {
+    before: [string, string];
+} | {
+    after: [string, string];
+} | {
+    between: [string, string, string];
+} | {
+    all: Claim[];
+} | {
+    any: Claim[];
+} | {
+    not: Claim;
+};
+export interface Rule {
+    rule: "bitgraph-player/1";
+    id: string;
+    cast: Record<string, CastEntry>;
+    /** The only defined value. Absence is only ever asserted within the declared cast. */
+    world: "closed";
+    /**
+     * Mandatory. A rule that does not state its trust floor does not parse:
+     * the rule carries its own security policy.
+     */
+    requires: {
+        ordering: EvidenceTier;
+    };
+    claim: Claim;
+    /**
+     * A label and nothing else. No field in this format is capable of
+     * causing an action; Player decides, it does not enforce.
+     */
+    then?: {
+        label: string;
+    };
+}
+/**
+ * A digest identifies bits; a recording identifies an occurrence of those
+ * bits at a causal position. A cast role resolves to a RECORDING. Two or
+ * more matches with no pin is UNDETERMINED, never a silent pick.
+ */
+export type Resolution = {
+    kind: "resolved";
+    role: string;
+    proof: ObservedProof;
+    /** Verification tier the resolution rests on ("full" | "integrity"). */
+    verificationTier: string;
+    /** How many verified recordings of this digest the bundle holds. */
+    matchCount: number;
+} | {
+    kind: "absent";
+    role: string;
+    optional: boolean;
+} | {
+    kind: "ambiguous";
+    role: string;
+    matchCount: number;
+    candidates: string[];
+} | {
+    kind: "invalid";
+    role: string;
+    reason: string;
+};
+/** One evaluated sub-claim, in evaluation order. Everything BitGraph established. */
+export interface DerivedStep {
+    claim: string;
+    result: ThreeValued;
+    basis?: OrderBasis;
+    evidenceTier?: EvidenceTier;
+    because: Record<string, unknown>;
+}
+/** One assertion Player took on somebody's word. */
+export interface DeclaredEntry {
+    assertion: "signedBy" | "means" | "closed-world" | "pinned-occurrence";
+    role?: string;
+    verifiedHere: false;
+    [k: string]: unknown;
+}
+export interface Verdict {
+    verdict: "bitgraph-player-verdict/1";
+    result: ThreeValued;
+    rule: {
+        id: string;
+        sha256: string;
+    };
+    then?: {
+        label: string;
+    };
+    /** Weakest evidence tier any contributing ordering answer rested on. Absent when no ordering was used. */
+    weakestEvidence?: EvidenceTier;
+    cast: Record<string, {
+        digestB64: string;
+        resolution: string;
+        proofHash?: string;
+        epochId?: string;
+        chainId?: string;
+        counter?: string;
+        slotCounter?: string;
+    }>;
+    derived: DerivedStep[];
+    declared: DeclaredEntry[];
+    evaluator: {
+        name: string;
+        version: string;
+    };
+    network: "none";
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAMjE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,OAAO,GAAG,cAAc,CAAC;AAM5D;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;AAE5F;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,aAAa,GAAG,sBAAsB,CAAC;AAElE,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,YAAY,CASzD;AAED,mDAAmD;AACnD,wBAAgB,UAAU,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAE3E;AAED,mDAAmD;AACnD,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,QAAQ,EAAE,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC;IACpD,4DAA4D;IAC5D,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,4FAA4F;IAC5F,mBAAmB,EAAE,OAAO,CAAC;IAC7B,gGAAgG;IAChG,MAAM,EAAE,OAAO,CAAC;IAChB,0FAA0F;IAC1F,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD;;;GAGG;AACH,MAAM,MAAM,OAAO,GACf;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,GACrB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,EAAE,CAAC,EAAE,OAAO,CAAC;IACb;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,kGAAkG;IAClG,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,KAAK,GACb;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC5B;IAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC3B;IAAE,OAAO,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACrC;IAAE,GAAG,EAAE,KAAK,EAAE,CAAA;CAAE,GAChB;IAAE,GAAG,EAAE,KAAK,EAAE,CAAA;CAAE,GAChB;IAAE,GAAG,EAAE,KAAK,CAAA;CAAE,CAAC;AAEnB,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,mBAAmB,CAAC;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChC,sFAAsF;IACtF,KAAK,EAAE,QAAQ,CAAC;IAChB;;;OAGG;IACH,QAAQ,EAAE;QAAE,QAAQ,EAAE,YAAY,CAAA;KAAE,CAAC;IACrC,KAAK,EAAE,KAAK,CAAC;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1B;AAMD;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,aAAa,CAAC;IACrB,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAC;CACpB,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GACnD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAA;CAAE,GAC7E;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAMtD,qFAAqF;AACrF,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,oDAAoD;AACpD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,UAAU,GAAG,OAAO,GAAG,cAAc,GAAG,mBAAmB,CAAC;IACvE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,EAAE,KAAK,CAAC;IACpB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,2BAA2B,CAAC;IACrC,MAAM,EAAE,WAAW,CAAC;IACpB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACrC,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACzB,0GAA0G;IAC1G,eAAe,CAAC,EAAE,YAAY,CAAC;IAC/B,IAAI,EAAE,MAAM,CACV,MAAM,EACN;QACE,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CACF,CAAC;IACF,OAAO,EAAE,WAAW,EAAE,CAAC;IACvB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/types.js

@@ -0,0 +1,16 @@
+// Copyright (c) 2024-2026 Mike Argento. Licensed under the MIT License. See LICENSE.
+export function basisTier(basis) {
+    switch (basis) {
+        case "chain-link":
+        case "epoch-lineage":
+            return "hash-linked";
+        case "counter-order":
+        case "anchor-bounds":
+            return "assumption-dependent";
+    }
+}
+/** True when `tier` satisfies a declared floor. */
+export function meetsFloor(tier, floor) {
+    return floor === "assumption-dependent" || tier === "hash-linked";
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAqDrF,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,YAAY,CAAC;QAClB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;QACvB,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,sBAAsB,CAAC;IAClC,CAAC;AACH,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,IAAkB,EAAE,KAAmB;IAChE,OAAO,KAAK,KAAK,sBAAsB,IAAI,IAAI,KAAK,aAAa,CAAC;AACpE,CAAC"}

package/dist/verdict.d.ts

@@ -0,0 +1,14 @@
+import type { AuditResult } from "@mikeargento/bitgraph-audit";
+import type { Evaluation } from "./evaluate.js";
+import type { Resolution, Rule, Verdict } from "./types.js";
+/** The player package's own version, read once from its package.json. */
+export declare function playerVersion(): string;
+export declare function buildVerdict(rule: Rule, ruleSha256Hex: string, resolutions: Map<string, Resolution>, evaluation: Evaluation, audit: AuditResult): Verdict;
+/**
+ * Deterministic bytes. Fixed key order (construction order), two-space
+ * indent, trailing newline. No timestamp: a `generatedAt` field would
+ * break byte-identical reproduction, which is the entire product claim.
+ * If a run timestamp is wanted it belongs in a sidecar, never here.
+ */
+export declare function serializeVerdict(verdict: Verdict): string;
+//# sourceMappingURL=verdict.d.ts.map

package/dist/verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../src/verdict.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,KAAK,EAAiB,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAI3E,yEAAyE;AACzE,wBAAgB,aAAa,IAAI,MAAM,CAMtC;AAeD,wBAAgB,YAAY,CAC1B,IAAI,EAAE,IAAI,EACV,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,EACpC,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,WAAW,GACjB,OAAO,CA6ET;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAkBzD"}