@noy-db/attestation 0.2.0-pre.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 vLannaAi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,3 @@
+# @noy-db/attestation
+
+Pure, zero-dependency document-attestation primitive for noy-db — per-field salted commitments, Ed25519 sign/verify, QR credential codec, and revocation checks. Runs in Node and the browser; the offline verifier imports only this.

package/dist/index.cjs

@@ -0,0 +1,347 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  b64urlToBytes: () => b64urlToBytes,
+  bytesToB64url: () => bytesToB64url,
+  bytesToHex: () => bytesToHex,
+  canonicalJson: () => canonicalJson,
+  computeFieldHashes: () => computeFieldHashes,
+  decodeQr: () => decodeQr,
+  ed25519Sign: () => ed25519Sign,
+  ed25519Verify: () => ed25519Verify,
+  encodeQr: () => encodeQr,
+  generateDocSigningKeyPair: () => generateDocSigningKeyPair,
+  getPath: () => getPath,
+  isRevoked: () => isRevoked,
+  keyIdFor: () => keyIdFor,
+  normalizeField: () => normalizeField,
+  sha256Bytes: () => sha256Bytes,
+  sha256Hex: () => sha256Hex,
+  signPayloadCore: () => signPayloadCore,
+  signRevocationList: () => signRevocationList,
+  utf8: () => utf8,
+  validateFieldSchema: () => validateFieldSchema,
+  verifyAttestation: () => verifyAttestation,
+  verifyRevocationList: () => verifyRevocationList
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/encoding.ts
+function utf8(s) {
+  return new TextEncoder().encode(s);
+}
+function bytesToHex(bytes) {
+  let out = "";
+  for (const b of bytes) out += b.toString(16).padStart(2, "0");
+  return out;
+}
+function bytesToB64url(bytes) {
+  let s = "";
+  for (const b of bytes) s += String.fromCharCode(b);
+  return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function b64urlToBytes(s) {
+  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - s.length % 4);
+  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
+  const bin = atob(b64);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function canonicalJson(value) {
+  if (value === null) return "null";
+  if (typeof value === "boolean") return value ? "true" : "false";
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) {
+      throw new Error(`canonicalJson: refusing to encode non-finite number ${String(value)}`);
+    }
+    return JSON.stringify(value);
+  }
+  if (typeof value === "string") return JSON.stringify(value);
+  if (typeof value === "bigint") throw new Error("canonicalJson: BigInt is not JSON-serializable");
+  if (typeof value === "undefined" || typeof value === "function") {
+    throw new Error(`canonicalJson: refusing to encode ${typeof value} \u2014 include all fields explicitly`);
+  }
+  if (Array.isArray(value)) return "[" + value.map((v) => canonicalJson(v)).join(",") + "]";
+  if (typeof value === "object") {
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    const parts = [];
+    for (const key of keys) parts.push(JSON.stringify(key) + ":" + canonicalJson(obj[key]));
+    return "{" + parts.join(",") + "}";
+  }
+  throw new Error(`canonicalJson: unexpected value type: ${typeof value}`);
+}
+async function sha256Bytes(input) {
+  const digest = await globalThis.crypto.subtle.digest("SHA-256", utf8(input));
+  return new Uint8Array(digest);
+}
+async function sha256Hex(input) {
+  return bytesToHex(await sha256Bytes(input));
+}
+
+// src/normalize.ts
+var NORMALIZERS = /* @__PURE__ */ new Set([
+  "trim",
+  "lower",
+  "upper",
+  "alnum-upper",
+  "digits",
+  "cents",
+  "iso-date"
+]);
+function getPath(obj, path) {
+  return path.split(".").reduce(
+    (o, k) => o == null ? void 0 : o[k],
+    obj
+  );
+}
+function normalizeField(value, n) {
+  switch (n) {
+    case "trim":
+      return String(value).trim();
+    case "lower":
+      return String(value).trim().toLowerCase();
+    case "upper":
+      return String(value).trim().toUpperCase();
+    case "alnum-upper":
+      return String(value).replace(/[^A-Za-z0-9]/g, "").toUpperCase();
+    case "digits":
+      return String(value).replace(/[^0-9]/g, "");
+    case "cents": {
+      if (typeof value === "number") {
+        if (!Number.isFinite(value)) {
+          throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`);
+        }
+        return String(Math.round(value * 100));
+      }
+      const stripped = String(value).replace(/[^0-9.-]/g, "");
+      if (!/[0-9]/.test(stripped)) {
+        throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`);
+      }
+      const num = Number(stripped);
+      if (!Number.isFinite(num)) {
+        throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`);
+      }
+      return String(Math.round(num * 100));
+    }
+    case "iso-date": {
+      const d = value instanceof Date ? value : new Date(String(value));
+      if (Number.isNaN(d.getTime())) {
+        throw new Error(`normalizeField(iso-date): unparseable date: ${String(value)}`);
+      }
+      return d.toISOString().slice(0, 10);
+    }
+    default: {
+      const exhaustive = n;
+      throw new Error(`normalizeField: unknown normalizer ${String(exhaustive)}`);
+    }
+  }
+}
+function validateFieldSchema(schema) {
+  if (!schema.fields || schema.fields.length === 0) {
+    throw new Error("validateFieldSchema: schema must declare at least one field");
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const f of schema.fields) {
+    if (!NORMALIZERS.has(f.normalize)) {
+      throw new Error(
+        `validateFieldSchema: unknown normalizer '${String(f.normalize)}' for path '${f.path}'`
+      );
+    }
+    if (seen.has(f.path)) {
+      throw new Error(`validateFieldSchema: duplicate path '${f.path}'`);
+    }
+    seen.add(f.path);
+  }
+}
+
+// src/hashing.ts
+async function computeFieldHashes(saltB64, schema, values) {
+  const out = [];
+  for (const f of schema.fields) {
+    const raw = getPath(values, f.path);
+    if (raw === void 0 || raw === null) {
+      throw new Error(`computeFieldHashes: missing value at declared path '${f.path}'`);
+    }
+    const norm = normalizeField(raw, f.normalize);
+    const digest = await sha256Bytes(canonicalJson([saltB64, f.path, norm]));
+    out.push(bytesToB64url(digest));
+  }
+  return out;
+}
+
+// src/ed25519.ts
+var ALG = "Ed25519";
+async function keyIdFor(publicKeyB64) {
+  return (await sha256Hex(publicKeyB64)).slice(0, 16);
+}
+async function generateDocSigningKeyPair() {
+  const kp = await globalThis.crypto.subtle.generateKey(ALG, true, ["sign", "verify"]);
+  const rawPub = new Uint8Array(await globalThis.crypto.subtle.exportKey("raw", kp.publicKey));
+  const pkcs8 = new Uint8Array(await globalThis.crypto.subtle.exportKey("pkcs8", kp.privateKey));
+  const publicKeyB64 = bytesToB64url(rawPub);
+  return { keyId: await keyIdFor(publicKeyB64), publicKeyB64, privateKeyPkcs8B64: bytesToB64url(pkcs8) };
+}
+async function ed25519Sign(privateKeyPkcs8B64, message) {
+  const key = await globalThis.crypto.subtle.importKey(
+    "pkcs8",
+    b64urlToBytes(privateKeyPkcs8B64),
+    ALG,
+    false,
+    ["sign"]
+  );
+  const sig = new Uint8Array(await globalThis.crypto.subtle.sign(ALG, key, message));
+  return bytesToB64url(sig);
+}
+async function ed25519Verify(publicKeyB64, sigB64url, message) {
+  try {
+    const key = await globalThis.crypto.subtle.importKey(
+      "raw",
+      b64urlToBytes(publicKeyB64),
+      ALG,
+      false,
+      ["verify"]
+    );
+    return await globalThis.crypto.subtle.verify(
+      ALG,
+      key,
+      b64urlToBytes(sigB64url),
+      message
+    );
+  } catch {
+    return false;
+  }
+}
+
+// src/qr.ts
+function encodeQr(p) {
+  return bytesToB64url(utf8(JSON.stringify(p)));
+}
+function decodeQr(s) {
+  let parsed;
+  try {
+    parsed = JSON.parse(new TextDecoder().decode(b64urlToBytes(s)));
+  } catch {
+    throw new Error("decodeQr: invalid base64url-encoded JSON payload");
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("decodeQr: invalid payload \u2014 expected a JSON object");
+  }
+  const p = parsed;
+  if (p["v"] !== 1) throw new Error(`decodeQr: unsupported version ${String(p["v"])} (expected 1)`);
+  if (typeof p["docId"] !== "string" || typeof p["salt"] !== "string" || p["alg"] !== "ed25519" || typeof p["keyId"] !== "string" || typeof p["sig"] !== "string" || !Array.isArray(p["fieldHashes"]) || !p["fieldHashes"].every((h) => typeof h === "string")) {
+    throw new Error("decodeQr: invalid payload shape");
+  }
+  return {
+    v: 1,
+    docId: p["docId"],
+    salt: p["salt"],
+    alg: "ed25519",
+    keyId: p["keyId"],
+    fieldHashes: p["fieldHashes"],
+    sig: p["sig"]
+  };
+}
+
+// src/revocation.ts
+function listCore(revokedDocIds, asOf, keyId) {
+  return utf8(canonicalJson({ v: 1, revokedDocIds: [...revokedDocIds].sort(), asOf, keyId }));
+}
+function isRevoked(docId, list) {
+  if (!Array.isArray(list?.revokedDocIds)) return false;
+  return list.revokedDocIds.includes(docId);
+}
+async function signRevocationList(revokedDocIds, asOf, keyId, privateKeyPkcs8B64) {
+  const sorted = [...revokedDocIds].sort();
+  const sig = await ed25519Sign(privateKeyPkcs8B64, listCore(sorted, asOf, keyId));
+  return { v: 1, revokedDocIds: sorted, asOf, keyId, sig };
+}
+async function verifyRevocationList(list, publicKeyB64) {
+  if (list?.v !== 1 || !Array.isArray(list.revokedDocIds) || typeof list.asOf !== "string" || typeof list.keyId !== "string" || typeof list.sig !== "string") {
+    return false;
+  }
+  return ed25519Verify(publicKeyB64, list.sig, listCore(list.revokedDocIds, list.asOf, list.keyId));
+}
+
+// src/verify.ts
+function signedCore(core) {
+  return utf8(canonicalJson({ v: core.v, docId: core.docId, salt: core.salt, keyId: core.keyId, fieldHashes: core.fieldHashes }));
+}
+async function signPayloadCore(core, privateKeyPkcs8B64) {
+  return ed25519Sign(privateKeyPkcs8B64, signedCore(core));
+}
+async function verifyAttestation(input) {
+  const p = decodeQr(input.qr);
+  const pub = input.publicKeys[p.keyId];
+  const signatureValid = pub ? await ed25519Verify(pub, p.sig, signedCore({ v: p.v, docId: p.docId, salt: p.salt, keyId: p.keyId, fieldHashes: p.fieldHashes })) : false;
+  const schema = input.fieldSchema;
+  const perField = [];
+  let allMatch = true;
+  let countMismatch = false;
+  if (schema.fields.length !== p.fieldHashes.length) {
+    countMismatch = true;
+    allMatch = false;
+    for (const f of schema.fields) perField.push({ path: f.path, match: false });
+  } else {
+    const recomputed = await computeFieldHashes(p.salt, schema, input.claimedFields);
+    for (let i = 0; i < schema.fields.length; i++) {
+      const match = recomputed[i] === p.fieldHashes[i];
+      perField.push({ path: schema.fields[i].path, match });
+      if (!match) allMatch = false;
+    }
+  }
+  const revoked = input.revocation ? isRevoked(p.docId, input.revocation.list) : null;
+  const valid = signatureValid && allMatch && revoked !== true;
+  let reason;
+  if (!signatureValid) reason = pub ? "signature invalid" : "unknown keyId";
+  else if (countMismatch) reason = "schema/payload field-count mismatch";
+  else if (!allMatch) reason = "field mismatch";
+  else if (revoked === true) reason = "revoked";
+  return reason !== void 0 ? { valid, signatureValid, perField, revoked, reason } : { valid, signatureValid, perField, revoked };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  b64urlToBytes,
+  bytesToB64url,
+  bytesToHex,
+  canonicalJson,
+  computeFieldHashes,
+  decodeQr,
+  ed25519Sign,
+  ed25519Verify,
+  encodeQr,
+  generateDocSigningKeyPair,
+  getPath,
+  isRevoked,
+  keyIdFor,
+  normalizeField,
+  sha256Bytes,
+  sha256Hex,
+  signPayloadCore,
+  signRevocationList,
+  utf8,
+  validateFieldSchema,
+  verifyAttestation,
+  verifyRevocationList
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/encoding.ts","../src/normalize.ts","../src/hashing.ts","../src/ed25519.ts","../src/qr.ts","../src/revocation.ts","../src/verify.ts"],"sourcesContent":["/**\n * @noy-db/attestation — pure document-attestation primitive.\n * @packageDocumentation\n */\nexport type { Normalizer, AttestationFieldSpec, AttestationFieldSchema } from './types.js'\nexport type { QrPayload } from './qr.js'\nexport type { RevocationList } from './revocation.js'\nexport type { VerifyInput, VerifyResult } from './verify.js'\n\nexport { canonicalJson, sha256Hex, sha256Bytes, bytesToHex, bytesToB64url, b64urlToBytes, utf8 } from './encoding.js'\nexport { normalizeField, validateFieldSchema, getPath } from './normalize.js'\nexport { computeFieldHashes } from './hashing.js'\nexport { generateDocSigningKeyPair, ed25519Sign, ed25519Verify, keyIdFor } from './ed25519.js'\nexport { encodeQr, decodeQr } from './qr.js'\nexport { signPayloadCore, verifyAttestation } from './verify.js'\nexport { isRevoked, verifyRevocationList, signRevocationList } from './revocation.js'\n","/**\n * Pure encoding + hashing primitives. Zero deps; WebCrypto only.\n *\n * `canonicalJson` and `sha256Hex` are intentionally byte-identical to\n * hub's `history/ledger/entry.ts` implementations. They are REPLICATED\n * here (not imported) because this package is upstream of hub — importing\n * from hub would invert the dependency. The conformance test pins the\n * shared contract via fixed vectors.\n */\n\nexport function utf8(s: string): Uint8Array {\n  return new TextEncoder().encode(s)\n}\n\nexport function bytesToHex(bytes: Uint8Array): string {\n  let out = ''\n  for (const b of bytes) out += b.toString(16).padStart(2, '0')\n  return out\n}\n\nexport function bytesToB64url(bytes: Uint8Array): string {\n  let s = ''\n  for (const b of bytes) s += String.fromCharCode(b)\n  return btoa(s).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '')\n}\n\nexport function b64urlToBytes(s: string): Uint8Array {\n  const pad = s.length % 4 === 0 ? '' : '='.repeat(4 - (s.length % 4))\n  const b64 = s.replace(/-/g, '+').replace(/_/g, '/') + pad\n  const bin = atob(b64)\n  const out = new Uint8Array(bin.length)\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i)\n  return out\n}\n\nexport function canonicalJson(value: unknown): string {\n  if (value === null) return 'null'\n  if (typeof value === 'boolean') return value ? 'true' : 'false'\n  if (typeof value === 'number') {\n    if (!Number.isFinite(value)) {\n      throw new Error(`canonicalJson: refusing to encode non-finite number ${String(value)}`)\n    }\n    return JSON.stringify(value)\n  }\n  if (typeof value === 'string') return JSON.stringify(value)\n  if (typeof value === 'bigint') throw new Error('canonicalJson: BigInt is not JSON-serializable')\n  if (typeof value === 'undefined' || typeof value === 'function') {\n    throw new Error(`canonicalJson: refusing to encode ${typeof value} — include all fields explicitly`)\n  }\n  if (Array.isArray(value)) return '[' + value.map((v) => canonicalJson(v)).join(',') + ']'\n  if (typeof value === 'object') {\n    const obj = value as Record<string, unknown>\n    const keys = Object.keys(obj).sort()\n    const parts: string[] = []\n    for (const key of keys) parts.push(JSON.stringify(key) + ':' + canonicalJson(obj[key]))\n    return '{' + parts.join(',') + '}'\n  }\n  throw new Error(`canonicalJson: unexpected value type: ${typeof value}`)\n}\n\nexport async function sha256Bytes(input: string): Promise<Uint8Array> {\n  const digest = await globalThis.crypto.subtle.digest('SHA-256', utf8(input) as BufferSource)\n  return new Uint8Array(digest)\n}\n\nexport async function sha256Hex(input: string): Promise<string> {\n  return bytesToHex(await sha256Bytes(input))\n}\n","import type { AttestationFieldSchema, Normalizer } from './types.js'\n\nconst NORMALIZERS: ReadonlySet<string> = new Set<Normalizer>([\n  'trim', 'lower', 'upper', 'alnum-upper', 'digits', 'cents', 'iso-date',\n])\n\nexport function getPath(obj: unknown, path: string): unknown {\n  return path.split('.').reduce<unknown>(\n    (o, k) => (o == null ? undefined : (o as Record<string, unknown>)[k]),\n    obj,\n  )\n}\n\n/**\n * Normalize a field value to a canonical string for hashing.\n *\n * `iso-date` returns the **UTC** calendar date (`toISOString().slice(0,10)`),\n * so a local-time `Date` near midnight can shift by ±1 day in non-UTC\n * environments — prefer passing an ISO date string (e.g. `'2026-05-29'`)\n * over a local `new Date(2026, 4, 29)`. Issue and verify use this same\n * function, so a value passed identically on both sides always round-trips.\n */\nexport function normalizeField(value: unknown, n: Normalizer): string {\n  switch (n) {\n    case 'trim':\n      return String(value).trim()\n    case 'lower':\n      return String(value).trim().toLowerCase()\n    case 'upper':\n      return String(value).trim().toUpperCase()\n    case 'alnum-upper':\n      return String(value).replace(/[^A-Za-z0-9]/g, '').toUpperCase()\n    case 'digits':\n      return String(value).replace(/[^0-9]/g, '')\n    case 'cents': {\n      if (typeof value === 'number') {\n        if (!Number.isFinite(value)) {\n          throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`)\n        }\n        return String(Math.round(value * 100))\n      }\n      // For string values: strip currency symbols / spaces / commas but keep digits, dot, minus\n      const stripped = String(value).replace(/[^0-9.-]/g, '')\n      // A valid numeric string must have at least one digit\n      if (!/[0-9]/.test(stripped)) {\n        throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`)\n      }\n      const num = Number(stripped)\n      if (!Number.isFinite(num)) {\n        throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`)\n      }\n      return String(Math.round(num * 100))\n    }\n    case 'iso-date': {\n      const d = value instanceof Date ? value : new Date(String(value))\n      if (Number.isNaN(d.getTime())) {\n        throw new Error(`normalizeField(iso-date): unparseable date: ${String(value)}`)\n      }\n      return d.toISOString().slice(0, 10)\n    }\n    default: {\n      const exhaustive: never = n\n      throw new Error(`normalizeField: unknown normalizer ${String(exhaustive)}`)\n    }\n  }\n}\n\nexport function validateFieldSchema(schema: AttestationFieldSchema): void {\n  if (!schema.fields || schema.fields.length === 0) {\n    throw new Error('validateFieldSchema: schema must declare at least one field')\n  }\n  const seen = new Set<string>()\n  for (const f of schema.fields) {\n    if (!NORMALIZERS.has(f.normalize)) {\n      throw new Error(\n        `validateFieldSchema: unknown normalizer '${String(f.normalize)}' for path '${f.path}'`,\n      )\n    }\n    if (seen.has(f.path)) {\n      throw new Error(`validateFieldSchema: duplicate path '${f.path}'`)\n    }\n    seen.add(f.path)\n  }\n}\n","import type { AttestationFieldSchema } from './types.js'\nimport { canonicalJson, sha256Bytes, bytesToB64url } from './encoding.js'\nimport { getPath, normalizeField } from './normalize.js'\n\n/**\n * One salted, domain-separated hash per declared field, in schema order:\n *   fieldHash[i] = base64url( sha256( canonicalJson([salt, path, normalizedValue]) ) )\n * Per-document salt defeats brute-force of low-entropy fields and cross-\n * document correlation; the path in the input domain-separates fields\n * that happen to share a value.\n */\nexport async function computeFieldHashes(\n  saltB64: string,\n  schema: AttestationFieldSchema,\n  values: Record<string, unknown>,\n): Promise<string[]> {\n  const out: string[] = []\n  for (const f of schema.fields) {\n    const raw = getPath(values, f.path)\n    if (raw === undefined || raw === null) {\n      throw new Error(`computeFieldHashes: missing value at declared path '${f.path}'`)\n    }\n    const norm = normalizeField(raw, f.normalize)\n    const digest = await sha256Bytes(canonicalJson([saltB64, f.path, norm]))\n    out.push(bytesToB64url(digest))\n  }\n  return out\n}\n","import { bytesToB64url, b64urlToBytes, sha256Hex } from './encoding.js'\n\nconst ALG = 'Ed25519'\n\n/** Stable key identifier: first 16 hex chars of sha256(publicKeyB64). */\nexport async function keyIdFor(publicKeyB64: string): Promise<string> {\n  return (await sha256Hex(publicKeyB64)).slice(0, 16)\n}\n\nexport async function generateDocSigningKeyPair(): Promise<{\n  keyId: string\n  publicKeyB64: string        // base64url raw (32 bytes) — non-secret, publishable\n  privateKeyPkcs8B64: string  // base64url pkcs8 — secret, wrap before persisting\n}> {\n  const kp = await globalThis.crypto.subtle.generateKey(ALG, true, ['sign', 'verify'])\n  const rawPub = new Uint8Array(await globalThis.crypto.subtle.exportKey('raw', kp.publicKey))\n  const pkcs8 = new Uint8Array(await globalThis.crypto.subtle.exportKey('pkcs8', kp.privateKey))\n  const publicKeyB64 = bytesToB64url(rawPub)\n  return { keyId: await keyIdFor(publicKeyB64), publicKeyB64, privateKeyPkcs8B64: bytesToB64url(pkcs8) }\n}\n\nexport async function ed25519Sign(privateKeyPkcs8B64: string, message: Uint8Array): Promise<string> {\n  const key = await globalThis.crypto.subtle.importKey(\n    'pkcs8',\n    b64urlToBytes(privateKeyPkcs8B64) as BufferSource,\n    ALG,\n    false,\n    ['sign'],\n  )\n  const sig = new Uint8Array(await globalThis.crypto.subtle.sign(ALG, key, message as BufferSource))\n  return bytesToB64url(sig)\n}\n\nexport async function ed25519Verify(publicKeyB64: string, sigB64url: string, message: Uint8Array): Promise<boolean> {\n  try {\n    const key = await globalThis.crypto.subtle.importKey(\n      'raw',\n      b64urlToBytes(publicKeyB64) as BufferSource,\n      ALG,\n      false,\n      ['verify'],\n    )\n    return await globalThis.crypto.subtle.verify(\n      ALG,\n      key,\n      b64urlToBytes(sigB64url) as BufferSource,\n      message as BufferSource,\n    )\n  } catch {\n    return false\n  }\n}\n","import { bytesToB64url, b64urlToBytes, utf8 } from './encoding.js'\n\nexport interface QrPayload {\n  readonly v: 1\n  readonly docId: string\n  readonly salt: string\n  readonly alg: 'ed25519'\n  readonly keyId: string\n  readonly fieldHashes: readonly string[]\n  readonly sig: string\n}\n\n/** Compact JSON → base64url. (CBOR + base45 density optimisation deferred.) */\nexport function encodeQr(p: QrPayload): string {\n  return bytesToB64url(utf8(JSON.stringify(p)))\n}\n\nexport function decodeQr(s: string): QrPayload {\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(new TextDecoder().decode(b64urlToBytes(s)))\n  } catch {\n    throw new Error('decodeQr: invalid base64url-encoded JSON payload')\n  }\n  if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {\n    throw new Error('decodeQr: invalid payload — expected a JSON object')\n  }\n  const p = parsed as Record<string, unknown>\n  if (p['v'] !== 1) throw new Error(`decodeQr: unsupported version ${String(p['v'])} (expected 1)`)\n  if (typeof p['docId'] !== 'string' || typeof p['salt'] !== 'string' || p['alg'] !== 'ed25519'\n      || typeof p['keyId'] !== 'string' || typeof p['sig'] !== 'string'\n      || !Array.isArray(p['fieldHashes']) || !p['fieldHashes'].every((h) => typeof h === 'string')) {\n    throw new Error('decodeQr: invalid payload shape')\n  }\n  return {\n    v: 1, docId: p['docId'], salt: p['salt'], alg: 'ed25519',\n    keyId: p['keyId'], fieldHashes: p['fieldHashes'], sig: p['sig'],\n  }\n}\n","import { canonicalJson, utf8 } from './encoding.js'\nimport { ed25519Sign, ed25519Verify } from './ed25519.js'\n\nexport interface RevocationList {\n  readonly v: 1\n  readonly revokedDocIds: readonly string[]\n  readonly asOf: string\n  readonly keyId: string\n  readonly sig: string\n}\n\nfunction listCore(revokedDocIds: readonly string[], asOf: string, keyId: string): Uint8Array {\n  return utf8(canonicalJson({ v: 1, revokedDocIds: [...revokedDocIds].sort(), asOf, keyId }))\n}\n\nexport function isRevoked(docId: string, list: RevocationList): boolean {\n  // The list is untrusted (typically network-fetched). Fail closed on a\n  // malformed shape rather than throwing a raw TypeError.\n  if (!Array.isArray(list?.revokedDocIds)) return false\n  return list.revokedDocIds.includes(docId)\n}\n\nexport async function signRevocationList(\n  revokedDocIds: readonly string[], asOf: string, keyId: string, privateKeyPkcs8B64: string,\n): Promise<RevocationList> {\n  const sorted = [...revokedDocIds].sort()\n  const sig = await ed25519Sign(privateKeyPkcs8B64, listCore(sorted, asOf, keyId))\n  return { v: 1, revokedDocIds: sorted, asOf, keyId, sig }\n}\n\nexport async function verifyRevocationList(list: RevocationList, publicKeyB64: string): Promise<boolean> {\n  // Untrusted input — validate the shape before touching it (no raw TypeError).\n  if (list?.v !== 1 || !Array.isArray(list.revokedDocIds)\n      || typeof list.asOf !== 'string' || typeof list.keyId !== 'string' || typeof list.sig !== 'string') {\n    return false\n  }\n  return ed25519Verify(publicKeyB64, list.sig, listCore(list.revokedDocIds, list.asOf, list.keyId))\n}\n","import type { AttestationFieldSchema } from './types.js'\nimport type { QrPayload } from './qr.js'\nimport type { RevocationList } from './revocation.js'\nimport { canonicalJson, utf8 } from './encoding.js'\nimport { ed25519Sign, ed25519Verify } from './ed25519.js'\nimport { computeFieldHashes } from './hashing.js'\nimport { decodeQr } from './qr.js'\nimport { isRevoked } from './revocation.js'\n\nexport interface VerifyInput {\n  readonly qr: string\n  readonly claimedFields: Record<string, unknown>\n  readonly fieldSchema: AttestationFieldSchema\n  readonly publicKeys: Readonly<Record<string, string>>\n  readonly revocation?: { list: RevocationList }\n}\nexport interface VerifyResult {\n  readonly valid: boolean\n  readonly signatureValid: boolean\n  readonly perField: ReadonlyArray<{ path: string; match: boolean }>\n  readonly revoked: boolean | null\n  readonly reason?: string\n}\n\n/**\n * The bytes the signature covers: canonicalJson of the payload minus `alg`/`sig`.\n * Excludes `alg` by design — v1 has exactly one algorithm (`ed25519`). If a `v:2`\n * ever introduces a second algorithm, `alg` MUST be added here to prevent a\n * downgrade attack.\n */\nfunction signedCore(core: { v: 1; docId: string; salt: string; keyId: string; fieldHashes: readonly string[] }): Uint8Array {\n  return utf8(canonicalJson({ v: core.v, docId: core.docId, salt: core.salt, keyId: core.keyId, fieldHashes: core.fieldHashes }))\n}\n\nexport async function signPayloadCore(\n  core: { v: 1; docId: string; salt: string; keyId: string; fieldHashes: readonly string[] },\n  privateKeyPkcs8B64: string,\n): Promise<string> {\n  return ed25519Sign(privateKeyPkcs8B64, signedCore(core))\n}\n\nexport async function verifyAttestation(input: VerifyInput): Promise<VerifyResult> {\n  const p: QrPayload = decodeQr(input.qr)\n  const pub = input.publicKeys[p.keyId]\n  const signatureValid = pub\n    ? await ed25519Verify(pub, p.sig, signedCore({ v: p.v, docId: p.docId, salt: p.salt, keyId: p.keyId, fieldHashes: p.fieldHashes }))\n    : false\n\n  const schema = input.fieldSchema\n  const perField: Array<{ path: string; match: boolean }> = []\n  let allMatch = true\n  let countMismatch = false\n  if (schema.fields.length !== p.fieldHashes.length) {\n    countMismatch = true\n    allMatch = false\n    for (const f of schema.fields) perField.push({ path: f.path, match: false })\n  } else {\n    const recomputed = await computeFieldHashes(p.salt, schema, input.claimedFields)\n    for (let i = 0; i < schema.fields.length; i++) {\n      const match = recomputed[i] === p.fieldHashes[i]\n      perField.push({ path: schema.fields[i]!.path, match })\n      if (!match) allMatch = false\n    }\n  }\n\n  // Membership check only — the CALLER must have verified the list's own\n  // signature with `verifyRevocationList` before passing it here. A list that\n  // omits a genuinely-revoked id lets that doc pass; that risk is the caller's.\n  const revoked = input.revocation ? isRevoked(p.docId, input.revocation.list) : null\n  const valid = signatureValid && allMatch && revoked !== true\n\n  let reason: string | undefined\n  if (!signatureValid) reason = pub ? 'signature invalid' : 'unknown keyId'\n  else if (countMismatch) reason = 'schema/payload field-count mismatch'\n  else if (!allMatch) reason = 'field mismatch'\n  else if (revoked === true) reason = 'revoked'\n\n  return reason !== undefined\n    ? { valid, signatureValid, perField, revoked, reason }\n    : { valid, signatureValid, perField, revoked }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACUO,SAAS,KAAK,GAAuB;AAC1C,SAAO,IAAI,YAAY,EAAE,OAAO,CAAC;AACnC;AAEO,SAAS,WAAW,OAA2B;AACpD,MAAI,MAAM;AACV,aAAW,KAAK,MAAO,QAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC5D,SAAO;AACT;AAEO,SAAS,cAAc,OAA2B;AACvD,MAAI,IAAI;AACR,aAAW,KAAK,MAAO,MAAK,OAAO,aAAa,CAAC;AACjD,SAAO,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC1E;AAEO,SAAS,cAAc,GAAuB;AACnD,QAAM,MAAM,EAAE,SAAS,MAAM,IAAI,KAAK,IAAI,OAAO,IAAK,EAAE,SAAS,CAAE;AACnE,QAAM,MAAM,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI;AACtD,QAAM,MAAM,KAAK,GAAG;AACpB,QAAM,MAAM,IAAI,WAAW,IAAI,MAAM;AACrC,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,KAAI,CAAC,IAAI,IAAI,WAAW,CAAC;AAC9D,SAAO;AACT;AAEO,SAAS,cAAc,OAAwB;AACpD,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,OAAO,UAAU,UAAW,QAAO,QAAQ,SAAS;AACxD,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,YAAM,IAAI,MAAM,uDAAuD,OAAO,KAAK,CAAC,EAAE;AAAA,IACxF;AACA,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B;AACA,MAAI,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,KAAK;AAC1D,MAAI,OAAO,UAAU,SAAU,OAAM,IAAI,MAAM,gDAAgD;AAC/F,MAAI,OAAO,UAAU,eAAe,OAAO,UAAU,YAAY;AAC/D,UAAM,IAAI,MAAM,qCAAqC,OAAO,KAAK,uCAAkC;AAAA,EACrG;AACA,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI;AACtF,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,MAAM;AACZ,UAAM,OAAO,OAAO,KAAK,GAAG,EAAE,KAAK;AACnC,UAAM,QAAkB,CAAC;AACzB,eAAW,OAAO,KAAM,OAAM,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,cAAc,IAAI,GAAG,CAAC,CAAC;AACtF,WAAO,MAAM,MAAM,KAAK,GAAG,IAAI;AAAA,EACjC;AACA,QAAM,IAAI,MAAM,yCAAyC,OAAO,KAAK,EAAE;AACzE;AAEA,eAAsB,YAAY,OAAoC;AACpE,QAAM,SAAS,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,KAAK,KAAK,CAAiB;AAC3F,SAAO,IAAI,WAAW,MAAM;AAC9B;AAEA,eAAsB,UAAU,OAAgC;AAC9D,SAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC5C;;;ACjEA,IAAM,cAAmC,oBAAI,IAAgB;AAAA,EAC3D;AAAA,EAAQ;AAAA,EAAS;AAAA,EAAS;AAAA,EAAe;AAAA,EAAU;AAAA,EAAS;AAC9D,CAAC;AAEM,SAAS,QAAQ,KAAc,MAAuB;AAC3D,SAAO,KAAK,MAAM,GAAG,EAAE;AAAA,IACrB,CAAC,GAAG,MAAO,KAAK,OAAO,SAAa,EAA8B,CAAC;AAAA,IACnE;AAAA,EACF;AACF;AAWO,SAAS,eAAe,OAAgB,GAAuB;AACpE,UAAQ,GAAG;AAAA,IACT,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,KAAK;AAAA,IAC5B,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY;AAAA,IAC1C,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY;AAAA,IAC1C,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,QAAQ,iBAAiB,EAAE,EAAE,YAAY;AAAA,IAChE,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,QAAQ,WAAW,EAAE;AAAA,IAC5C,KAAK,SAAS;AACZ,UAAI,OAAO,UAAU,UAAU;AAC7B,YAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,gBAAM,IAAI,MAAM,+CAA+C,OAAO,KAAK,CAAC,EAAE;AAAA,QAChF;AACA,eAAO,OAAO,KAAK,MAAM,QAAQ,GAAG,CAAC;AAAA,MACvC;AAEA,YAAM,WAAW,OAAO,KAAK,EAAE,QAAQ,aAAa,EAAE;AAEtD,UAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;AAC3B,cAAM,IAAI,MAAM,+CAA+C,OAAO,KAAK,CAAC,EAAE;AAAA,MAChF;AACA,YAAM,MAAM,OAAO,QAAQ;AAC3B,UAAI,CAAC,OAAO,SAAS,GAAG,GAAG;AACzB,cAAM,IAAI,MAAM,+CAA+C,OAAO,KAAK,CAAC,EAAE;AAAA,MAChF;AACA,aAAO,OAAO,KAAK,MAAM,MAAM,GAAG,CAAC;AAAA,IACrC;AAAA,IACA,KAAK,YAAY;AACf,YAAM,IAAI,iBAAiB,OAAO,QAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;AAChE,UAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,GAAG;AAC7B,cAAM,IAAI,MAAM,+CAA+C,OAAO,KAAK,CAAC,EAAE;AAAA,MAChF;AACA,aAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,IACpC;AAAA,IACA,SAAS;AACP,YAAM,aAAoB;AAC1B,YAAM,IAAI,MAAM,sCAAsC,OAAO,UAAU,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACF;AAEO,SAAS,oBAAoB,QAAsC;AACxE,MAAI,CAAC,OAAO,UAAU,OAAO,OAAO,WAAW,GAAG;AAChD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,KAAK,OAAO,QAAQ;AAC7B,QAAI,CAAC,YAAY,IAAI,EAAE,SAAS,GAAG;AACjC,YAAM,IAAI;AAAA,QACR,4CAA4C,OAAO,EAAE,SAAS,CAAC,eAAe,EAAE,IAAI;AAAA,MACtF;AAAA,IACF;AACA,QAAI,KAAK,IAAI,EAAE,IAAI,GAAG;AACpB,YAAM,IAAI,MAAM,wCAAwC,EAAE,IAAI,GAAG;AAAA,IACnE;AACA,SAAK,IAAI,EAAE,IAAI;AAAA,EACjB;AACF;;;ACxEA,eAAsB,mBACpB,SACA,QACA,QACmB;AACnB,QAAM,MAAgB,CAAC;AACvB,aAAW,KAAK,OAAO,QAAQ;AAC7B,UAAM,MAAM,QAAQ,QAAQ,EAAE,IAAI;AAClC,QAAI,QAAQ,UAAa,QAAQ,MAAM;AACrC,YAAM,IAAI,MAAM,uDAAuD,EAAE,IAAI,GAAG;AAAA,IAClF;AACA,UAAM,OAAO,eAAe,KAAK,EAAE,SAAS;AAC5C,UAAM,SAAS,MAAM,YAAY,cAAc,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC;AACvE,QAAI,KAAK,cAAc,MAAM,CAAC;AAAA,EAChC;AACA,SAAO;AACT;;;ACzBA,IAAM,MAAM;AAGZ,eAAsB,SAAS,cAAuC;AACpE,UAAQ,MAAM,UAAU,YAAY,GAAG,MAAM,GAAG,EAAE;AACpD;AAEA,eAAsB,4BAInB;AACD,QAAM,KAAK,MAAM,WAAW,OAAO,OAAO,YAAY,KAAK,MAAM,CAAC,QAAQ,QAAQ,CAAC;AACnF,QAAM,SAAS,IAAI,WAAW,MAAM,WAAW,OAAO,OAAO,UAAU,OAAO,GAAG,SAAS,CAAC;AAC3F,QAAM,QAAQ,IAAI,WAAW,MAAM,WAAW,OAAO,OAAO,UAAU,SAAS,GAAG,UAAU,CAAC;AAC7F,QAAM,eAAe,cAAc,MAAM;AACzC,SAAO,EAAE,OAAO,MAAM,SAAS,YAAY,GAAG,cAAc,oBAAoB,cAAc,KAAK,EAAE;AACvG;AAEA,eAAsB,YAAY,oBAA4B,SAAsC;AAClG,QAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,IACzC;AAAA,IACA,cAAc,kBAAkB;AAAA,IAChC;AAAA,IACA;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,QAAM,MAAM,IAAI,WAAW,MAAM,WAAW,OAAO,OAAO,KAAK,KAAK,KAAK,OAAuB,CAAC;AACjG,SAAO,cAAc,GAAG;AAC1B;AAEA,eAAsB,cAAc,cAAsB,WAAmB,SAAuC;AAClH,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA,cAAc,YAAY;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,CAAC,QAAQ;AAAA,IACX;AACA,WAAO,MAAM,WAAW,OAAO,OAAO;AAAA,MACpC;AAAA,MACA;AAAA,MACA,cAAc,SAAS;AAAA,MACvB;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACtCO,SAAS,SAAS,GAAsB;AAC7C,SAAO,cAAc,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC;AAC9C;AAEO,SAAS,SAAS,GAAsB;AAC7C,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,cAAc,CAAC,CAAC,CAAC;AAAA,EAChE,QAAQ;AACN,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAC1E,UAAM,IAAI,MAAM,yDAAoD;AAAA,EACtE;AACA,QAAM,IAAI;AACV,MAAI,EAAE,GAAG,MAAM,EAAG,OAAM,IAAI,MAAM,iCAAiC,OAAO,EAAE,GAAG,CAAC,CAAC,eAAe;AAChG,MAAI,OAAO,EAAE,OAAO,MAAM,YAAY,OAAO,EAAE,MAAM,MAAM,YAAY,EAAE,KAAK,MAAM,aAC7E,OAAO,EAAE,OAAO,MAAM,YAAY,OAAO,EAAE,KAAK,MAAM,YACtD,CAAC,MAAM,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,GAAG;AAChG,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IAAG,OAAO,EAAE,OAAO;AAAA,IAAG,MAAM,EAAE,MAAM;AAAA,IAAG,KAAK;AAAA,IAC/C,OAAO,EAAE,OAAO;AAAA,IAAG,aAAa,EAAE,aAAa;AAAA,IAAG,KAAK,EAAE,KAAK;AAAA,EAChE;AACF;;;AC3BA,SAAS,SAAS,eAAkC,MAAc,OAA2B;AAC3F,SAAO,KAAK,cAAc,EAAE,GAAG,GAAG,eAAe,CAAC,GAAG,aAAa,EAAE,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC;AAC5F;AAEO,SAAS,UAAU,OAAe,MAA+B;AAGtE,MAAI,CAAC,MAAM,QAAQ,MAAM,aAAa,EAAG,QAAO;AAChD,SAAO,KAAK,cAAc,SAAS,KAAK;AAC1C;AAEA,eAAsB,mBACpB,eAAkC,MAAc,OAAe,oBACtC;AACzB,QAAM,SAAS,CAAC,GAAG,aAAa,EAAE,KAAK;AACvC,QAAM,MAAM,MAAM,YAAY,oBAAoB,SAAS,QAAQ,MAAM,KAAK,CAAC;AAC/E,SAAO,EAAE,GAAG,GAAG,eAAe,QAAQ,MAAM,OAAO,IAAI;AACzD;AAEA,eAAsB,qBAAqB,MAAsB,cAAwC;AAEvG,MAAI,MAAM,MAAM,KAAK,CAAC,MAAM,QAAQ,KAAK,aAAa,KAC/C,OAAO,KAAK,SAAS,YAAY,OAAO,KAAK,UAAU,YAAY,OAAO,KAAK,QAAQ,UAAU;AACtG,WAAO;AAAA,EACT;AACA,SAAO,cAAc,cAAc,KAAK,KAAK,SAAS,KAAK,eAAe,KAAK,MAAM,KAAK,KAAK,CAAC;AAClG;;;ACPA,SAAS,WAAW,MAAwG;AAC1H,SAAO,KAAK,cAAc,EAAE,GAAG,KAAK,GAAG,OAAO,KAAK,OAAO,MAAM,KAAK,MAAM,OAAO,KAAK,OAAO,aAAa,KAAK,YAAY,CAAC,CAAC;AAChI;AAEA,eAAsB,gBACpB,MACA,oBACiB;AACjB,SAAO,YAAY,oBAAoB,WAAW,IAAI,CAAC;AACzD;AAEA,eAAsB,kBAAkB,OAA2C;AACjF,QAAM,IAAe,SAAS,MAAM,EAAE;AACtC,QAAM,MAAM,MAAM,WAAW,EAAE,KAAK;AACpC,QAAM,iBAAiB,MACnB,MAAM,cAAc,KAAK,EAAE,KAAK,WAAW,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,MAAM,EAAE,MAAM,OAAO,EAAE,OAAO,aAAa,EAAE,YAAY,CAAC,CAAC,IAChI;AAEJ,QAAM,SAAS,MAAM;AACrB,QAAM,WAAoD,CAAC;AAC3D,MAAI,WAAW;AACf,MAAI,gBAAgB;AACpB,MAAI,OAAO,OAAO,WAAW,EAAE,YAAY,QAAQ;AACjD,oBAAgB;AAChB,eAAW;AACX,eAAW,KAAK,OAAO,OAAQ,UAAS,KAAK,EAAE,MAAM,EAAE,MAAM,OAAO,MAAM,CAAC;AAAA,EAC7E,OAAO;AACL,UAAM,aAAa,MAAM,mBAAmB,EAAE,MAAM,QAAQ,MAAM,aAAa;AAC/E,aAAS,IAAI,GAAG,IAAI,OAAO,OAAO,QAAQ,KAAK;AAC7C,YAAM,QAAQ,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC;AAC/C,eAAS,KAAK,EAAE,MAAM,OAAO,OAAO,CAAC,EAAG,MAAM,MAAM,CAAC;AACrD,UAAI,CAAC,MAAO,YAAW;AAAA,IACzB;AAAA,EACF;AAKA,QAAM,UAAU,MAAM,aAAa,UAAU,EAAE,OAAO,MAAM,WAAW,IAAI,IAAI;AAC/E,QAAM,QAAQ,kBAAkB,YAAY,YAAY;AAExD,MAAI;AACJ,MAAI,CAAC,eAAgB,UAAS,MAAM,sBAAsB;AAAA,WACjD,cAAe,UAAS;AAAA,WACxB,CAAC,SAAU,UAAS;AAAA,WACpB,YAAY,KAAM,UAAS;AAEpC,SAAO,WAAW,SACd,EAAE,OAAO,gBAAgB,UAAU,SAAS,OAAO,IACnD,EAAE,OAAO,gBAAgB,UAAU,QAAQ;AACjD;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,111 @@
+type Normalizer = 'trim' | 'lower' | 'upper' | 'alnum-upper' | 'digits' | 'cents' | 'iso-date';
+interface AttestationFieldSpec {
+    readonly path: string;
+    readonly normalize: Normalizer;
+}
+interface AttestationFieldSchema {
+    readonly fields: readonly AttestationFieldSpec[];
+}
+
+interface QrPayload {
+    readonly v: 1;
+    readonly docId: string;
+    readonly salt: string;
+    readonly alg: 'ed25519';
+    readonly keyId: string;
+    readonly fieldHashes: readonly string[];
+    readonly sig: string;
+}
+/** Compact JSON → base64url. (CBOR + base45 density optimisation deferred.) */
+declare function encodeQr(p: QrPayload): string;
+declare function decodeQr(s: string): QrPayload;
+
+interface RevocationList {
+    readonly v: 1;
+    readonly revokedDocIds: readonly string[];
+    readonly asOf: string;
+    readonly keyId: string;
+    readonly sig: string;
+}
+declare function isRevoked(docId: string, list: RevocationList): boolean;
+declare function signRevocationList(revokedDocIds: readonly string[], asOf: string, keyId: string, privateKeyPkcs8B64: string): Promise<RevocationList>;
+declare function verifyRevocationList(list: RevocationList, publicKeyB64: string): Promise<boolean>;
+
+interface VerifyInput {
+    readonly qr: string;
+    readonly claimedFields: Record<string, unknown>;
+    readonly fieldSchema: AttestationFieldSchema;
+    readonly publicKeys: Readonly<Record<string, string>>;
+    readonly revocation?: {
+        list: RevocationList;
+    };
+}
+interface VerifyResult {
+    readonly valid: boolean;
+    readonly signatureValid: boolean;
+    readonly perField: ReadonlyArray<{
+        path: string;
+        match: boolean;
+    }>;
+    readonly revoked: boolean | null;
+    readonly reason?: string;
+}
+declare function signPayloadCore(core: {
+    v: 1;
+    docId: string;
+    salt: string;
+    keyId: string;
+    fieldHashes: readonly string[];
+}, privateKeyPkcs8B64: string): Promise<string>;
+declare function verifyAttestation(input: VerifyInput): Promise<VerifyResult>;
+
+/**
+ * Pure encoding + hashing primitives. Zero deps; WebCrypto only.
+ *
+ * `canonicalJson` and `sha256Hex` are intentionally byte-identical to
+ * hub's `history/ledger/entry.ts` implementations. They are REPLICATED
+ * here (not imported) because this package is upstream of hub — importing
+ * from hub would invert the dependency. The conformance test pins the
+ * shared contract via fixed vectors.
+ */
+declare function utf8(s: string): Uint8Array;
+declare function bytesToHex(bytes: Uint8Array): string;
+declare function bytesToB64url(bytes: Uint8Array): string;
+declare function b64urlToBytes(s: string): Uint8Array;
+declare function canonicalJson(value: unknown): string;
+declare function sha256Bytes(input: string): Promise<Uint8Array>;
+declare function sha256Hex(input: string): Promise<string>;
+
+declare function getPath(obj: unknown, path: string): unknown;
+/**
+ * Normalize a field value to a canonical string for hashing.
+ *
+ * `iso-date` returns the **UTC** calendar date (`toISOString().slice(0,10)`),
+ * so a local-time `Date` near midnight can shift by ±1 day in non-UTC
+ * environments — prefer passing an ISO date string (e.g. `'2026-05-29'`)
+ * over a local `new Date(2026, 4, 29)`. Issue and verify use this same
+ * function, so a value passed identically on both sides always round-trips.
+ */
+declare function normalizeField(value: unknown, n: Normalizer): string;
+declare function validateFieldSchema(schema: AttestationFieldSchema): void;
+
+/**
+ * One salted, domain-separated hash per declared field, in schema order:
+ *   fieldHash[i] = base64url( sha256( canonicalJson([salt, path, normalizedValue]) ) )
+ * Per-document salt defeats brute-force of low-entropy fields and cross-
+ * document correlation; the path in the input domain-separates fields
+ * that happen to share a value.
+ */
+declare function computeFieldHashes(saltB64: string, schema: AttestationFieldSchema, values: Record<string, unknown>): Promise<string[]>;
+
+/** Stable key identifier: first 16 hex chars of sha256(publicKeyB64). */
+declare function keyIdFor(publicKeyB64: string): Promise<string>;
+declare function generateDocSigningKeyPair(): Promise<{
+    keyId: string;
+    publicKeyB64: string;
+    privateKeyPkcs8B64: string;
+}>;
+declare function ed25519Sign(privateKeyPkcs8B64: string, message: Uint8Array): Promise<string>;
+declare function ed25519Verify(publicKeyB64: string, sigB64url: string, message: Uint8Array): Promise<boolean>;
+
+export { type AttestationFieldSchema, type AttestationFieldSpec, type Normalizer, type QrPayload, type RevocationList, type VerifyInput, type VerifyResult, b64urlToBytes, bytesToB64url, bytesToHex, canonicalJson, computeFieldHashes, decodeQr, ed25519Sign, ed25519Verify, encodeQr, generateDocSigningKeyPair, getPath, isRevoked, keyIdFor, normalizeField, sha256Bytes, sha256Hex, signPayloadCore, signRevocationList, utf8, validateFieldSchema, verifyAttestation, verifyRevocationList };

package/dist/index.d.ts

@@ -0,0 +1,111 @@
+type Normalizer = 'trim' | 'lower' | 'upper' | 'alnum-upper' | 'digits' | 'cents' | 'iso-date';
+interface AttestationFieldSpec {
+    readonly path: string;
+    readonly normalize: Normalizer;
+}
+interface AttestationFieldSchema {
+    readonly fields: readonly AttestationFieldSpec[];
+}
+
+interface QrPayload {
+    readonly v: 1;
+    readonly docId: string;
+    readonly salt: string;
+    readonly alg: 'ed25519';
+    readonly keyId: string;
+    readonly fieldHashes: readonly string[];
+    readonly sig: string;
+}
+/** Compact JSON → base64url. (CBOR + base45 density optimisation deferred.) */
+declare function encodeQr(p: QrPayload): string;
+declare function decodeQr(s: string): QrPayload;
+
+interface RevocationList {
+    readonly v: 1;
+    readonly revokedDocIds: readonly string[];
+    readonly asOf: string;
+    readonly keyId: string;
+    readonly sig: string;
+}
+declare function isRevoked(docId: string, list: RevocationList): boolean;
+declare function signRevocationList(revokedDocIds: readonly string[], asOf: string, keyId: string, privateKeyPkcs8B64: string): Promise<RevocationList>;
+declare function verifyRevocationList(list: RevocationList, publicKeyB64: string): Promise<boolean>;
+
+interface VerifyInput {
+    readonly qr: string;
+    readonly claimedFields: Record<string, unknown>;
+    readonly fieldSchema: AttestationFieldSchema;
+    readonly publicKeys: Readonly<Record<string, string>>;
+    readonly revocation?: {
+        list: RevocationList;
+    };
+}
+interface VerifyResult {
+    readonly valid: boolean;
+    readonly signatureValid: boolean;
+    readonly perField: ReadonlyArray<{
+        path: string;
+        match: boolean;
+    }>;
+    readonly revoked: boolean | null;
+    readonly reason?: string;
+}
+declare function signPayloadCore(core: {
+    v: 1;
+    docId: string;
+    salt: string;
+    keyId: string;
+    fieldHashes: readonly string[];
+}, privateKeyPkcs8B64: string): Promise<string>;
+declare function verifyAttestation(input: VerifyInput): Promise<VerifyResult>;
+
+/**
+ * Pure encoding + hashing primitives. Zero deps; WebCrypto only.
+ *
+ * `canonicalJson` and `sha256Hex` are intentionally byte-identical to
+ * hub's `history/ledger/entry.ts` implementations. They are REPLICATED
+ * here (not imported) because this package is upstream of hub — importing
+ * from hub would invert the dependency. The conformance test pins the
+ * shared contract via fixed vectors.
+ */
+declare function utf8(s: string): Uint8Array;
+declare function bytesToHex(bytes: Uint8Array): string;
+declare function bytesToB64url(bytes: Uint8Array): string;
+declare function b64urlToBytes(s: string): Uint8Array;
+declare function canonicalJson(value: unknown): string;
+declare function sha256Bytes(input: string): Promise<Uint8Array>;
+declare function sha256Hex(input: string): Promise<string>;
+
+declare function getPath(obj: unknown, path: string): unknown;
+/**
+ * Normalize a field value to a canonical string for hashing.
+ *
+ * `iso-date` returns the **UTC** calendar date (`toISOString().slice(0,10)`),
+ * so a local-time `Date` near midnight can shift by ±1 day in non-UTC
+ * environments — prefer passing an ISO date string (e.g. `'2026-05-29'`)
+ * over a local `new Date(2026, 4, 29)`. Issue and verify use this same
+ * function, so a value passed identically on both sides always round-trips.
+ */
+declare function normalizeField(value: unknown, n: Normalizer): string;
+declare function validateFieldSchema(schema: AttestationFieldSchema): void;
+
+/**
+ * One salted, domain-separated hash per declared field, in schema order:
+ *   fieldHash[i] = base64url( sha256( canonicalJson([salt, path, normalizedValue]) ) )
+ * Per-document salt defeats brute-force of low-entropy fields and cross-
+ * document correlation; the path in the input domain-separates fields
+ * that happen to share a value.
+ */
+declare function computeFieldHashes(saltB64: string, schema: AttestationFieldSchema, values: Record<string, unknown>): Promise<string[]>;
+
+/** Stable key identifier: first 16 hex chars of sha256(publicKeyB64). */
+declare function keyIdFor(publicKeyB64: string): Promise<string>;
+declare function generateDocSigningKeyPair(): Promise<{
+    keyId: string;
+    publicKeyB64: string;
+    privateKeyPkcs8B64: string;
+}>;
+declare function ed25519Sign(privateKeyPkcs8B64: string, message: Uint8Array): Promise<string>;
+declare function ed25519Verify(publicKeyB64: string, sigB64url: string, message: Uint8Array): Promise<boolean>;
+
+export { type AttestationFieldSchema, type AttestationFieldSpec, type Normalizer, type QrPayload, type RevocationList, type VerifyInput, type VerifyResult, b64urlToBytes, bytesToB64url, bytesToHex, canonicalJson, computeFieldHashes, decodeQr, ed25519Sign, ed25519Verify, encodeQr, generateDocSigningKeyPair, getPath, isRevoked, keyIdFor, normalizeField, sha256Bytes, sha256Hex, signPayloadCore, signRevocationList, utf8, validateFieldSchema, verifyAttestation, verifyRevocationList };

package/dist/index.js

@@ -0,0 +1,299 @@
+// src/encoding.ts
+function utf8(s) {
+  return new TextEncoder().encode(s);
+}
+function bytesToHex(bytes) {
+  let out = "";
+  for (const b of bytes) out += b.toString(16).padStart(2, "0");
+  return out;
+}
+function bytesToB64url(bytes) {
+  let s = "";
+  for (const b of bytes) s += String.fromCharCode(b);
+  return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function b64urlToBytes(s) {
+  const pad = s.length % 4 === 0 ? "" : "=".repeat(4 - s.length % 4);
+  const b64 = s.replace(/-/g, "+").replace(/_/g, "/") + pad;
+  const bin = atob(b64);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function canonicalJson(value) {
+  if (value === null) return "null";
+  if (typeof value === "boolean") return value ? "true" : "false";
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) {
+      throw new Error(`canonicalJson: refusing to encode non-finite number ${String(value)}`);
+    }
+    return JSON.stringify(value);
+  }
+  if (typeof value === "string") return JSON.stringify(value);
+  if (typeof value === "bigint") throw new Error("canonicalJson: BigInt is not JSON-serializable");
+  if (typeof value === "undefined" || typeof value === "function") {
+    throw new Error(`canonicalJson: refusing to encode ${typeof value} \u2014 include all fields explicitly`);
+  }
+  if (Array.isArray(value)) return "[" + value.map((v) => canonicalJson(v)).join(",") + "]";
+  if (typeof value === "object") {
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    const parts = [];
+    for (const key of keys) parts.push(JSON.stringify(key) + ":" + canonicalJson(obj[key]));
+    return "{" + parts.join(",") + "}";
+  }
+  throw new Error(`canonicalJson: unexpected value type: ${typeof value}`);
+}
+async function sha256Bytes(input) {
+  const digest = await globalThis.crypto.subtle.digest("SHA-256", utf8(input));
+  return new Uint8Array(digest);
+}
+async function sha256Hex(input) {
+  return bytesToHex(await sha256Bytes(input));
+}
+
+// src/normalize.ts
+var NORMALIZERS = /* @__PURE__ */ new Set([
+  "trim",
+  "lower",
+  "upper",
+  "alnum-upper",
+  "digits",
+  "cents",
+  "iso-date"
+]);
+function getPath(obj, path) {
+  return path.split(".").reduce(
+    (o, k) => o == null ? void 0 : o[k],
+    obj
+  );
+}
+function normalizeField(value, n) {
+  switch (n) {
+    case "trim":
+      return String(value).trim();
+    case "lower":
+      return String(value).trim().toLowerCase();
+    case "upper":
+      return String(value).trim().toUpperCase();
+    case "alnum-upper":
+      return String(value).replace(/[^A-Za-z0-9]/g, "").toUpperCase();
+    case "digits":
+      return String(value).replace(/[^0-9]/g, "");
+    case "cents": {
+      if (typeof value === "number") {
+        if (!Number.isFinite(value)) {
+          throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`);
+        }
+        return String(Math.round(value * 100));
+      }
+      const stripped = String(value).replace(/[^0-9.-]/g, "");
+      if (!/[0-9]/.test(stripped)) {
+        throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`);
+      }
+      const num = Number(stripped);
+      if (!Number.isFinite(num)) {
+        throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`);
+      }
+      return String(Math.round(num * 100));
+    }
+    case "iso-date": {
+      const d = value instanceof Date ? value : new Date(String(value));
+      if (Number.isNaN(d.getTime())) {
+        throw new Error(`normalizeField(iso-date): unparseable date: ${String(value)}`);
+      }
+      return d.toISOString().slice(0, 10);
+    }
+    default: {
+      const exhaustive = n;
+      throw new Error(`normalizeField: unknown normalizer ${String(exhaustive)}`);
+    }
+  }
+}
+function validateFieldSchema(schema) {
+  if (!schema.fields || schema.fields.length === 0) {
+    throw new Error("validateFieldSchema: schema must declare at least one field");
+  }
+  const seen = /* @__PURE__ */ new Set();
+  for (const f of schema.fields) {
+    if (!NORMALIZERS.has(f.normalize)) {
+      throw new Error(
+        `validateFieldSchema: unknown normalizer '${String(f.normalize)}' for path '${f.path}'`
+      );
+    }
+    if (seen.has(f.path)) {
+      throw new Error(`validateFieldSchema: duplicate path '${f.path}'`);
+    }
+    seen.add(f.path);
+  }
+}
+
+// src/hashing.ts
+async function computeFieldHashes(saltB64, schema, values) {
+  const out = [];
+  for (const f of schema.fields) {
+    const raw = getPath(values, f.path);
+    if (raw === void 0 || raw === null) {
+      throw new Error(`computeFieldHashes: missing value at declared path '${f.path}'`);
+    }
+    const norm = normalizeField(raw, f.normalize);
+    const digest = await sha256Bytes(canonicalJson([saltB64, f.path, norm]));
+    out.push(bytesToB64url(digest));
+  }
+  return out;
+}
+
+// src/ed25519.ts
+var ALG = "Ed25519";
+async function keyIdFor(publicKeyB64) {
+  return (await sha256Hex(publicKeyB64)).slice(0, 16);
+}
+async function generateDocSigningKeyPair() {
+  const kp = await globalThis.crypto.subtle.generateKey(ALG, true, ["sign", "verify"]);
+  const rawPub = new Uint8Array(await globalThis.crypto.subtle.exportKey("raw", kp.publicKey));
+  const pkcs8 = new Uint8Array(await globalThis.crypto.subtle.exportKey("pkcs8", kp.privateKey));
+  const publicKeyB64 = bytesToB64url(rawPub);
+  return { keyId: await keyIdFor(publicKeyB64), publicKeyB64, privateKeyPkcs8B64: bytesToB64url(pkcs8) };
+}
+async function ed25519Sign(privateKeyPkcs8B64, message) {
+  const key = await globalThis.crypto.subtle.importKey(
+    "pkcs8",
+    b64urlToBytes(privateKeyPkcs8B64),
+    ALG,
+    false,
+    ["sign"]
+  );
+  const sig = new Uint8Array(await globalThis.crypto.subtle.sign(ALG, key, message));
+  return bytesToB64url(sig);
+}
+async function ed25519Verify(publicKeyB64, sigB64url, message) {
+  try {
+    const key = await globalThis.crypto.subtle.importKey(
+      "raw",
+      b64urlToBytes(publicKeyB64),
+      ALG,
+      false,
+      ["verify"]
+    );
+    return await globalThis.crypto.subtle.verify(
+      ALG,
+      key,
+      b64urlToBytes(sigB64url),
+      message
+    );
+  } catch {
+    return false;
+  }
+}
+
+// src/qr.ts
+function encodeQr(p) {
+  return bytesToB64url(utf8(JSON.stringify(p)));
+}
+function decodeQr(s) {
+  let parsed;
+  try {
+    parsed = JSON.parse(new TextDecoder().decode(b64urlToBytes(s)));
+  } catch {
+    throw new Error("decodeQr: invalid base64url-encoded JSON payload");
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    throw new Error("decodeQr: invalid payload \u2014 expected a JSON object");
+  }
+  const p = parsed;
+  if (p["v"] !== 1) throw new Error(`decodeQr: unsupported version ${String(p["v"])} (expected 1)`);
+  if (typeof p["docId"] !== "string" || typeof p["salt"] !== "string" || p["alg"] !== "ed25519" || typeof p["keyId"] !== "string" || typeof p["sig"] !== "string" || !Array.isArray(p["fieldHashes"]) || !p["fieldHashes"].every((h) => typeof h === "string")) {
+    throw new Error("decodeQr: invalid payload shape");
+  }
+  return {
+    v: 1,
+    docId: p["docId"],
+    salt: p["salt"],
+    alg: "ed25519",
+    keyId: p["keyId"],
+    fieldHashes: p["fieldHashes"],
+    sig: p["sig"]
+  };
+}
+
+// src/revocation.ts
+function listCore(revokedDocIds, asOf, keyId) {
+  return utf8(canonicalJson({ v: 1, revokedDocIds: [...revokedDocIds].sort(), asOf, keyId }));
+}
+function isRevoked(docId, list) {
+  if (!Array.isArray(list?.revokedDocIds)) return false;
+  return list.revokedDocIds.includes(docId);
+}
+async function signRevocationList(revokedDocIds, asOf, keyId, privateKeyPkcs8B64) {
+  const sorted = [...revokedDocIds].sort();
+  const sig = await ed25519Sign(privateKeyPkcs8B64, listCore(sorted, asOf, keyId));
+  return { v: 1, revokedDocIds: sorted, asOf, keyId, sig };
+}
+async function verifyRevocationList(list, publicKeyB64) {
+  if (list?.v !== 1 || !Array.isArray(list.revokedDocIds) || typeof list.asOf !== "string" || typeof list.keyId !== "string" || typeof list.sig !== "string") {
+    return false;
+  }
+  return ed25519Verify(publicKeyB64, list.sig, listCore(list.revokedDocIds, list.asOf, list.keyId));
+}
+
+// src/verify.ts
+function signedCore(core) {
+  return utf8(canonicalJson({ v: core.v, docId: core.docId, salt: core.salt, keyId: core.keyId, fieldHashes: core.fieldHashes }));
+}
+async function signPayloadCore(core, privateKeyPkcs8B64) {
+  return ed25519Sign(privateKeyPkcs8B64, signedCore(core));
+}
+async function verifyAttestation(input) {
+  const p = decodeQr(input.qr);
+  const pub = input.publicKeys[p.keyId];
+  const signatureValid = pub ? await ed25519Verify(pub, p.sig, signedCore({ v: p.v, docId: p.docId, salt: p.salt, keyId: p.keyId, fieldHashes: p.fieldHashes })) : false;
+  const schema = input.fieldSchema;
+  const perField = [];
+  let allMatch = true;
+  let countMismatch = false;
+  if (schema.fields.length !== p.fieldHashes.length) {
+    countMismatch = true;
+    allMatch = false;
+    for (const f of schema.fields) perField.push({ path: f.path, match: false });
+  } else {
+    const recomputed = await computeFieldHashes(p.salt, schema, input.claimedFields);
+    for (let i = 0; i < schema.fields.length; i++) {
+      const match = recomputed[i] === p.fieldHashes[i];
+      perField.push({ path: schema.fields[i].path, match });
+      if (!match) allMatch = false;
+    }
+  }
+  const revoked = input.revocation ? isRevoked(p.docId, input.revocation.list) : null;
+  const valid = signatureValid && allMatch && revoked !== true;
+  let reason;
+  if (!signatureValid) reason = pub ? "signature invalid" : "unknown keyId";
+  else if (countMismatch) reason = "schema/payload field-count mismatch";
+  else if (!allMatch) reason = "field mismatch";
+  else if (revoked === true) reason = "revoked";
+  return reason !== void 0 ? { valid, signatureValid, perField, revoked, reason } : { valid, signatureValid, perField, revoked };
+}
+export {
+  b64urlToBytes,
+  bytesToB64url,
+  bytesToHex,
+  canonicalJson,
+  computeFieldHashes,
+  decodeQr,
+  ed25519Sign,
+  ed25519Verify,
+  encodeQr,
+  generateDocSigningKeyPair,
+  getPath,
+  isRevoked,
+  keyIdFor,
+  normalizeField,
+  sha256Bytes,
+  sha256Hex,
+  signPayloadCore,
+  signRevocationList,
+  utf8,
+  validateFieldSchema,
+  verifyAttestation,
+  verifyRevocationList
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/encoding.ts","../src/normalize.ts","../src/hashing.ts","../src/ed25519.ts","../src/qr.ts","../src/revocation.ts","../src/verify.ts"],"sourcesContent":["/**\n * Pure encoding + hashing primitives. Zero deps; WebCrypto only.\n *\n * `canonicalJson` and `sha256Hex` are intentionally byte-identical to\n * hub's `history/ledger/entry.ts` implementations. They are REPLICATED\n * here (not imported) because this package is upstream of hub — importing\n * from hub would invert the dependency. The conformance test pins the\n * shared contract via fixed vectors.\n */\n\nexport function utf8(s: string): Uint8Array {\n  return new TextEncoder().encode(s)\n}\n\nexport function bytesToHex(bytes: Uint8Array): string {\n  let out = ''\n  for (const b of bytes) out += b.toString(16).padStart(2, '0')\n  return out\n}\n\nexport function bytesToB64url(bytes: Uint8Array): string {\n  let s = ''\n  for (const b of bytes) s += String.fromCharCode(b)\n  return btoa(s).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '')\n}\n\nexport function b64urlToBytes(s: string): Uint8Array {\n  const pad = s.length % 4 === 0 ? '' : '='.repeat(4 - (s.length % 4))\n  const b64 = s.replace(/-/g, '+').replace(/_/g, '/') + pad\n  const bin = atob(b64)\n  const out = new Uint8Array(bin.length)\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i)\n  return out\n}\n\nexport function canonicalJson(value: unknown): string {\n  if (value === null) return 'null'\n  if (typeof value === 'boolean') return value ? 'true' : 'false'\n  if (typeof value === 'number') {\n    if (!Number.isFinite(value)) {\n      throw new Error(`canonicalJson: refusing to encode non-finite number ${String(value)}`)\n    }\n    return JSON.stringify(value)\n  }\n  if (typeof value === 'string') return JSON.stringify(value)\n  if (typeof value === 'bigint') throw new Error('canonicalJson: BigInt is not JSON-serializable')\n  if (typeof value === 'undefined' || typeof value === 'function') {\n    throw new Error(`canonicalJson: refusing to encode ${typeof value} — include all fields explicitly`)\n  }\n  if (Array.isArray(value)) return '[' + value.map((v) => canonicalJson(v)).join(',') + ']'\n  if (typeof value === 'object') {\n    const obj = value as Record<string, unknown>\n    const keys = Object.keys(obj).sort()\n    const parts: string[] = []\n    for (const key of keys) parts.push(JSON.stringify(key) + ':' + canonicalJson(obj[key]))\n    return '{' + parts.join(',') + '}'\n  }\n  throw new Error(`canonicalJson: unexpected value type: ${typeof value}`)\n}\n\nexport async function sha256Bytes(input: string): Promise<Uint8Array> {\n  const digest = await globalThis.crypto.subtle.digest('SHA-256', utf8(input) as BufferSource)\n  return new Uint8Array(digest)\n}\n\nexport async function sha256Hex(input: string): Promise<string> {\n  return bytesToHex(await sha256Bytes(input))\n}\n","import type { AttestationFieldSchema, Normalizer } from './types.js'\n\nconst NORMALIZERS: ReadonlySet<string> = new Set<Normalizer>([\n  'trim', 'lower', 'upper', 'alnum-upper', 'digits', 'cents', 'iso-date',\n])\n\nexport function getPath(obj: unknown, path: string): unknown {\n  return path.split('.').reduce<unknown>(\n    (o, k) => (o == null ? undefined : (o as Record<string, unknown>)[k]),\n    obj,\n  )\n}\n\n/**\n * Normalize a field value to a canonical string for hashing.\n *\n * `iso-date` returns the **UTC** calendar date (`toISOString().slice(0,10)`),\n * so a local-time `Date` near midnight can shift by ±1 day in non-UTC\n * environments — prefer passing an ISO date string (e.g. `'2026-05-29'`)\n * over a local `new Date(2026, 4, 29)`. Issue and verify use this same\n * function, so a value passed identically on both sides always round-trips.\n */\nexport function normalizeField(value: unknown, n: Normalizer): string {\n  switch (n) {\n    case 'trim':\n      return String(value).trim()\n    case 'lower':\n      return String(value).trim().toLowerCase()\n    case 'upper':\n      return String(value).trim().toUpperCase()\n    case 'alnum-upper':\n      return String(value).replace(/[^A-Za-z0-9]/g, '').toUpperCase()\n    case 'digits':\n      return String(value).replace(/[^0-9]/g, '')\n    case 'cents': {\n      if (typeof value === 'number') {\n        if (!Number.isFinite(value)) {\n          throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`)\n        }\n        return String(Math.round(value * 100))\n      }\n      // For string values: strip currency symbols / spaces / commas but keep digits, dot, minus\n      const stripped = String(value).replace(/[^0-9.-]/g, '')\n      // A valid numeric string must have at least one digit\n      if (!/[0-9]/.test(stripped)) {\n        throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`)\n      }\n      const num = Number(stripped)\n      if (!Number.isFinite(num)) {\n        throw new Error(`normalizeField(cents): not a finite number: ${String(value)}`)\n      }\n      return String(Math.round(num * 100))\n    }\n    case 'iso-date': {\n      const d = value instanceof Date ? value : new Date(String(value))\n      if (Number.isNaN(d.getTime())) {\n        throw new Error(`normalizeField(iso-date): unparseable date: ${String(value)}`)\n      }\n      return d.toISOString().slice(0, 10)\n    }\n    default: {\n      const exhaustive: never = n\n      throw new Error(`normalizeField: unknown normalizer ${String(exhaustive)}`)\n    }\n  }\n}\n\nexport function validateFieldSchema(schema: AttestationFieldSchema): void {\n  if (!schema.fields || schema.fields.length === 0) {\n    throw new Error('validateFieldSchema: schema must declare at least one field')\n  }\n  const seen = new Set<string>()\n  for (const f of schema.fields) {\n    if (!NORMALIZERS.has(f.normalize)) {\n      throw new Error(\n        `validateFieldSchema: unknown normalizer '${String(f.normalize)}' for path '${f.path}'`,\n      )\n    }\n    if (seen.has(f.path)) {\n      throw new Error(`validateFieldSchema: duplicate path '${f.path}'`)\n    }\n    seen.add(f.path)\n  }\n}\n","import type { AttestationFieldSchema } from './types.js'\nimport { canonicalJson, sha256Bytes, bytesToB64url } from './encoding.js'\nimport { getPath, normalizeField } from './normalize.js'\n\n/**\n * One salted, domain-separated hash per declared field, in schema order:\n *   fieldHash[i] = base64url( sha256( canonicalJson([salt, path, normalizedValue]) ) )\n * Per-document salt defeats brute-force of low-entropy fields and cross-\n * document correlation; the path in the input domain-separates fields\n * that happen to share a value.\n */\nexport async function computeFieldHashes(\n  saltB64: string,\n  schema: AttestationFieldSchema,\n  values: Record<string, unknown>,\n): Promise<string[]> {\n  const out: string[] = []\n  for (const f of schema.fields) {\n    const raw = getPath(values, f.path)\n    if (raw === undefined || raw === null) {\n      throw new Error(`computeFieldHashes: missing value at declared path '${f.path}'`)\n    }\n    const norm = normalizeField(raw, f.normalize)\n    const digest = await sha256Bytes(canonicalJson([saltB64, f.path, norm]))\n    out.push(bytesToB64url(digest))\n  }\n  return out\n}\n","import { bytesToB64url, b64urlToBytes, sha256Hex } from './encoding.js'\n\nconst ALG = 'Ed25519'\n\n/** Stable key identifier: first 16 hex chars of sha256(publicKeyB64). */\nexport async function keyIdFor(publicKeyB64: string): Promise<string> {\n  return (await sha256Hex(publicKeyB64)).slice(0, 16)\n}\n\nexport async function generateDocSigningKeyPair(): Promise<{\n  keyId: string\n  publicKeyB64: string        // base64url raw (32 bytes) — non-secret, publishable\n  privateKeyPkcs8B64: string  // base64url pkcs8 — secret, wrap before persisting\n}> {\n  const kp = await globalThis.crypto.subtle.generateKey(ALG, true, ['sign', 'verify'])\n  const rawPub = new Uint8Array(await globalThis.crypto.subtle.exportKey('raw', kp.publicKey))\n  const pkcs8 = new Uint8Array(await globalThis.crypto.subtle.exportKey('pkcs8', kp.privateKey))\n  const publicKeyB64 = bytesToB64url(rawPub)\n  return { keyId: await keyIdFor(publicKeyB64), publicKeyB64, privateKeyPkcs8B64: bytesToB64url(pkcs8) }\n}\n\nexport async function ed25519Sign(privateKeyPkcs8B64: string, message: Uint8Array): Promise<string> {\n  const key = await globalThis.crypto.subtle.importKey(\n    'pkcs8',\n    b64urlToBytes(privateKeyPkcs8B64) as BufferSource,\n    ALG,\n    false,\n    ['sign'],\n  )\n  const sig = new Uint8Array(await globalThis.crypto.subtle.sign(ALG, key, message as BufferSource))\n  return bytesToB64url(sig)\n}\n\nexport async function ed25519Verify(publicKeyB64: string, sigB64url: string, message: Uint8Array): Promise<boolean> {\n  try {\n    const key = await globalThis.crypto.subtle.importKey(\n      'raw',\n      b64urlToBytes(publicKeyB64) as BufferSource,\n      ALG,\n      false,\n      ['verify'],\n    )\n    return await globalThis.crypto.subtle.verify(\n      ALG,\n      key,\n      b64urlToBytes(sigB64url) as BufferSource,\n      message as BufferSource,\n    )\n  } catch {\n    return false\n  }\n}\n","import { bytesToB64url, b64urlToBytes, utf8 } from './encoding.js'\n\nexport interface QrPayload {\n  readonly v: 1\n  readonly docId: string\n  readonly salt: string\n  readonly alg: 'ed25519'\n  readonly keyId: string\n  readonly fieldHashes: readonly string[]\n  readonly sig: string\n}\n\n/** Compact JSON → base64url. (CBOR + base45 density optimisation deferred.) */\nexport function encodeQr(p: QrPayload): string {\n  return bytesToB64url(utf8(JSON.stringify(p)))\n}\n\nexport function decodeQr(s: string): QrPayload {\n  let parsed: unknown\n  try {\n    parsed = JSON.parse(new TextDecoder().decode(b64urlToBytes(s)))\n  } catch {\n    throw new Error('decodeQr: invalid base64url-encoded JSON payload')\n  }\n  if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {\n    throw new Error('decodeQr: invalid payload — expected a JSON object')\n  }\n  const p = parsed as Record<string, unknown>\n  if (p['v'] !== 1) throw new Error(`decodeQr: unsupported version ${String(p['v'])} (expected 1)`)\n  if (typeof p['docId'] !== 'string' || typeof p['salt'] !== 'string' || p['alg'] !== 'ed25519'\n      || typeof p['keyId'] !== 'string' || typeof p['sig'] !== 'string'\n      || !Array.isArray(p['fieldHashes']) || !p['fieldHashes'].every((h) => typeof h === 'string')) {\n    throw new Error('decodeQr: invalid payload shape')\n  }\n  return {\n    v: 1, docId: p['docId'], salt: p['salt'], alg: 'ed25519',\n    keyId: p['keyId'], fieldHashes: p['fieldHashes'], sig: p['sig'],\n  }\n}\n","import { canonicalJson, utf8 } from './encoding.js'\nimport { ed25519Sign, ed25519Verify } from './ed25519.js'\n\nexport interface RevocationList {\n  readonly v: 1\n  readonly revokedDocIds: readonly string[]\n  readonly asOf: string\n  readonly keyId: string\n  readonly sig: string\n}\n\nfunction listCore(revokedDocIds: readonly string[], asOf: string, keyId: string): Uint8Array {\n  return utf8(canonicalJson({ v: 1, revokedDocIds: [...revokedDocIds].sort(), asOf, keyId }))\n}\n\nexport function isRevoked(docId: string, list: RevocationList): boolean {\n  // The list is untrusted (typically network-fetched). Fail closed on a\n  // malformed shape rather than throwing a raw TypeError.\n  if (!Array.isArray(list?.revokedDocIds)) return false\n  return list.revokedDocIds.includes(docId)\n}\n\nexport async function signRevocationList(\n  revokedDocIds: readonly string[], asOf: string, keyId: string, privateKeyPkcs8B64: string,\n): Promise<RevocationList> {\n  const sorted = [...revokedDocIds].sort()\n  const sig = await ed25519Sign(privateKeyPkcs8B64, listCore(sorted, asOf, keyId))\n  return { v: 1, revokedDocIds: sorted, asOf, keyId, sig }\n}\n\nexport async function verifyRevocationList(list: RevocationList, publicKeyB64: string): Promise<boolean> {\n  // Untrusted input — validate the shape before touching it (no raw TypeError).\n  if (list?.v !== 1 || !Array.isArray(list.revokedDocIds)\n      || typeof list.asOf !== 'string' || typeof list.keyId !== 'string' || typeof list.sig !== 'string') {\n    return false\n  }\n  return ed25519Verify(publicKeyB64, list.sig, listCore(list.revokedDocIds, list.asOf, list.keyId))\n}\n","import type { AttestationFieldSchema } from './types.js'\nimport type { QrPayload } from './qr.js'\nimport type { RevocationList } from './revocation.js'\nimport { canonicalJson, utf8 } from './encoding.js'\nimport { ed25519Sign, ed25519Verify } from './ed25519.js'\nimport { computeFieldHashes } from './hashing.js'\nimport { decodeQr } from './qr.js'\nimport { isRevoked } from './revocation.js'\n\nexport interface VerifyInput {\n  readonly qr: string\n  readonly claimedFields: Record<string, unknown>\n  readonly fieldSchema: AttestationFieldSchema\n  readonly publicKeys: Readonly<Record<string, string>>\n  readonly revocation?: { list: RevocationList }\n}\nexport interface VerifyResult {\n  readonly valid: boolean\n  readonly signatureValid: boolean\n  readonly perField: ReadonlyArray<{ path: string; match: boolean }>\n  readonly revoked: boolean | null\n  readonly reason?: string\n}\n\n/**\n * The bytes the signature covers: canonicalJson of the payload minus `alg`/`sig`.\n * Excludes `alg` by design — v1 has exactly one algorithm (`ed25519`). If a `v:2`\n * ever introduces a second algorithm, `alg` MUST be added here to prevent a\n * downgrade attack.\n */\nfunction signedCore(core: { v: 1; docId: string; salt: string; keyId: string; fieldHashes: readonly string[] }): Uint8Array {\n  return utf8(canonicalJson({ v: core.v, docId: core.docId, salt: core.salt, keyId: core.keyId, fieldHashes: core.fieldHashes }))\n}\n\nexport async function signPayloadCore(\n  core: { v: 1; docId: string; salt: string; keyId: string; fieldHashes: readonly string[] },\n  privateKeyPkcs8B64: string,\n): Promise<string> {\n  return ed25519Sign(privateKeyPkcs8B64, signedCore(core))\n}\n\nexport async function verifyAttestation(input: VerifyInput): Promise<VerifyResult> {\n  const p: QrPayload = decodeQr(input.qr)\n  const pub = input.publicKeys[p.keyId]\n  const signatureValid = pub\n    ? await ed25519Verify(pub, p.sig, signedCore({ v: p.v, docId: p.docId, salt: p.salt, keyId: p.keyId, fieldHashes: p.fieldHashes }))\n    : false\n\n  const schema = input.fieldSchema\n  const perField: Array<{ path: string; match: boolean }> = []\n  let allMatch = true\n  let countMismatch = false\n  if (schema.fields.length !== p.fieldHashes.length) {\n    countMismatch = true\n    allMatch = false\n    for (const f of schema.fields) perField.push({ path: f.path, match: false })\n  } else {\n    const recomputed = await computeFieldHashes(p.salt, schema, input.claimedFields)\n    for (let i = 0; i < schema.fields.length; i++) {\n      const match = recomputed[i] === p.fieldHashes[i]\n      perField.push({ path: schema.fields[i]!.path, match })\n      if (!match) allMatch = false\n    }\n  }\n\n  // Membership check only — the CALLER must have verified the list's own\n  // signature with `verifyRevocationList` before passing it here. A list that\n  // omits a genuinely-revoked id lets that doc pass; that risk is the caller's.\n  const revoked = input.revocation ? isRevoked(p.docId, input.revocation.list) : null\n  const valid = signatureValid && allMatch && revoked !== true\n\n  let reason: string | undefined\n  if (!signatureValid) reason = pub ? 'signature invalid' : 'unknown keyId'\n  else if (countMismatch) reason = 'schema/payload field-count mismatch'\n  else if (!allMatch) reason = 'field mismatch'\n  else if (revoked === true) reason = 'revoked'\n\n  return reason !== undefined\n    ? { valid, signatureValid, perField, revoked, reason }\n    : { valid, signatureValid, perField, revoked }\n}\n"],"mappings":";AAUO,SAAS,KAAK,GAAuB;AAC1C,SAAO,IAAI,YAAY,EAAE,OAAO,CAAC;AACnC;AAEO,SAAS,WAAW,OAA2B;AACpD,MAAI,MAAM;AACV,aAAW,KAAK,MAAO,QAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAC5D,SAAO;AACT;AAEO,SAAS,cAAc,OAA2B;AACvD,MAAI,IAAI;AACR,aAAW,KAAK,MAAO,MAAK,OAAO,aAAa,CAAC;AACjD,SAAO,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC1E;AAEO,SAAS,cAAc,GAAuB;AACnD,QAAM,MAAM,EAAE,SAAS,MAAM,IAAI,KAAK,IAAI,OAAO,IAAK,EAAE,SAAS,CAAE;AACnE,QAAM,MAAM,EAAE,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI;AACtD,QAAM,MAAM,KAAK,GAAG;AACpB,QAAM,MAAM,IAAI,WAAW,IAAI,MAAM;AACrC,WAAS,IAAI,GAAG,IAAI,IAAI,QAAQ,IAAK,KAAI,CAAC,IAAI,IAAI,WAAW,CAAC;AAC9D,SAAO;AACT;AAEO,SAAS,cAAc,OAAwB;AACpD,MAAI,UAAU,KAAM,QAAO;AAC3B,MAAI,OAAO,UAAU,UAAW,QAAO,QAAQ,SAAS;AACxD,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,YAAM,IAAI,MAAM,uDAAuD,OAAO,KAAK,CAAC,EAAE;AAAA,IACxF;AACA,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B;AACA,MAAI,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,KAAK;AAC1D,MAAI,OAAO,UAAU,SAAU,OAAM,IAAI,MAAM,gDAAgD;AAC/F,MAAI,OAAO,UAAU,eAAe,OAAO,UAAU,YAAY;AAC/D,UAAM,IAAI,MAAM,qCAAqC,OAAO,KAAK,uCAAkC;AAAA,EACrG;AACA,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI;AACtF,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,MAAM;AACZ,UAAM,OAAO,OAAO,KAAK,GAAG,EAAE,KAAK;AACnC,UAAM,QAAkB,CAAC;AACzB,eAAW,OAAO,KAAM,OAAM,KAAK,KAAK,UAAU,GAAG,IAAI,MAAM,cAAc,IAAI,GAAG,CAAC,CAAC;AACtF,WAAO,MAAM,MAAM,KAAK,GAAG,IAAI;AAAA,EACjC;AACA,QAAM,IAAI,MAAM,yCAAyC,OAAO,KAAK,EAAE;AACzE;AAEA,eAAsB,YAAY,OAAoC;AACpE,QAAM,SAAS,MAAM,WAAW,OAAO,OAAO,OAAO,WAAW,KAAK,KAAK,CAAiB;AAC3F,SAAO,IAAI,WAAW,MAAM;AAC9B;AAEA,eAAsB,UAAU,OAAgC;AAC9D,SAAO,WAAW,MAAM,YAAY,KAAK,CAAC;AAC5C;;;ACjEA,IAAM,cAAmC,oBAAI,IAAgB;AAAA,EAC3D;AAAA,EAAQ;AAAA,EAAS;AAAA,EAAS;AAAA,EAAe;AAAA,EAAU;AAAA,EAAS;AAC9D,CAAC;AAEM,SAAS,QAAQ,KAAc,MAAuB;AAC3D,SAAO,KAAK,MAAM,GAAG,EAAE;AAAA,IACrB,CAAC,GAAG,MAAO,KAAK,OAAO,SAAa,EAA8B,CAAC;AAAA,IACnE;AAAA,EACF;AACF;AAWO,SAAS,eAAe,OAAgB,GAAuB;AACpE,UAAQ,GAAG;AAAA,IACT,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,KAAK;AAAA,IAC5B,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY;AAAA,IAC1C,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,KAAK,EAAE,YAAY;AAAA,IAC1C,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,QAAQ,iBAAiB,EAAE,EAAE,YAAY;AAAA,IAChE,KAAK;AACH,aAAO,OAAO,KAAK,EAAE,QAAQ,WAAW,EAAE;AAAA,IAC5C,KAAK,SAAS;AACZ,UAAI,OAAO,UAAU,UAAU;AAC7B,YAAI,CAAC,OAAO,SAAS,KAAK,GAAG;AAC3B,gBAAM,IAAI,MAAM,+CAA+C,OAAO,KAAK,CAAC,EAAE;AAAA,QAChF;AACA,eAAO,OAAO,KAAK,MAAM,QAAQ,GAAG,CAAC;AAAA,MACvC;AAEA,YAAM,WAAW,OAAO,KAAK,EAAE,QAAQ,aAAa,EAAE;AAEtD,UAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG;AAC3B,cAAM,IAAI,MAAM,+CAA+C,OAAO,KAAK,CAAC,EAAE;AAAA,MAChF;AACA,YAAM,MAAM,OAAO,QAAQ;AAC3B,UAAI,CAAC,OAAO,SAAS,GAAG,GAAG;AACzB,cAAM,IAAI,MAAM,+CAA+C,OAAO,KAAK,CAAC,EAAE;AAAA,MAChF;AACA,aAAO,OAAO,KAAK,MAAM,MAAM,GAAG,CAAC;AAAA,IACrC;AAAA,IACA,KAAK,YAAY;AACf,YAAM,IAAI,iBAAiB,OAAO,QAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;AAChE,UAAI,OAAO,MAAM,EAAE,QAAQ,CAAC,GAAG;AAC7B,cAAM,IAAI,MAAM,+CAA+C,OAAO,KAAK,CAAC,EAAE;AAAA,MAChF;AACA,aAAO,EAAE,YAAY,EAAE,MAAM,GAAG,EAAE;AAAA,IACpC;AAAA,IACA,SAAS;AACP,YAAM,aAAoB;AAC1B,YAAM,IAAI,MAAM,sCAAsC,OAAO,UAAU,CAAC,EAAE;AAAA,IAC5E;AAAA,EACF;AACF;AAEO,SAAS,oBAAoB,QAAsC;AACxE,MAAI,CAAC,OAAO,UAAU,OAAO,OAAO,WAAW,GAAG;AAChD,UAAM,IAAI,MAAM,6DAA6D;AAAA,EAC/E;AACA,QAAM,OAAO,oBAAI,IAAY;AAC7B,aAAW,KAAK,OAAO,QAAQ;AAC7B,QAAI,CAAC,YAAY,IAAI,EAAE,SAAS,GAAG;AACjC,YAAM,IAAI;AAAA,QACR,4CAA4C,OAAO,EAAE,SAAS,CAAC,eAAe,EAAE,IAAI;AAAA,MACtF;AAAA,IACF;AACA,QAAI,KAAK,IAAI,EAAE,IAAI,GAAG;AACpB,YAAM,IAAI,MAAM,wCAAwC,EAAE,IAAI,GAAG;AAAA,IACnE;AACA,SAAK,IAAI,EAAE,IAAI;AAAA,EACjB;AACF;;;ACxEA,eAAsB,mBACpB,SACA,QACA,QACmB;AACnB,QAAM,MAAgB,CAAC;AACvB,aAAW,KAAK,OAAO,QAAQ;AAC7B,UAAM,MAAM,QAAQ,QAAQ,EAAE,IAAI;AAClC,QAAI,QAAQ,UAAa,QAAQ,MAAM;AACrC,YAAM,IAAI,MAAM,uDAAuD,EAAE,IAAI,GAAG;AAAA,IAClF;AACA,UAAM,OAAO,eAAe,KAAK,EAAE,SAAS;AAC5C,UAAM,SAAS,MAAM,YAAY,cAAc,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC;AACvE,QAAI,KAAK,cAAc,MAAM,CAAC;AAAA,EAChC;AACA,SAAO;AACT;;;ACzBA,IAAM,MAAM;AAGZ,eAAsB,SAAS,cAAuC;AACpE,UAAQ,MAAM,UAAU,YAAY,GAAG,MAAM,GAAG,EAAE;AACpD;AAEA,eAAsB,4BAInB;AACD,QAAM,KAAK,MAAM,WAAW,OAAO,OAAO,YAAY,KAAK,MAAM,CAAC,QAAQ,QAAQ,CAAC;AACnF,QAAM,SAAS,IAAI,WAAW,MAAM,WAAW,OAAO,OAAO,UAAU,OAAO,GAAG,SAAS,CAAC;AAC3F,QAAM,QAAQ,IAAI,WAAW,MAAM,WAAW,OAAO,OAAO,UAAU,SAAS,GAAG,UAAU,CAAC;AAC7F,QAAM,eAAe,cAAc,MAAM;AACzC,SAAO,EAAE,OAAO,MAAM,SAAS,YAAY,GAAG,cAAc,oBAAoB,cAAc,KAAK,EAAE;AACvG;AAEA,eAAsB,YAAY,oBAA4B,SAAsC;AAClG,QAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,IACzC;AAAA,IACA,cAAc,kBAAkB;AAAA,IAChC;AAAA,IACA;AAAA,IACA,CAAC,MAAM;AAAA,EACT;AACA,QAAM,MAAM,IAAI,WAAW,MAAM,WAAW,OAAO,OAAO,KAAK,KAAK,KAAK,OAAuB,CAAC;AACjG,SAAO,cAAc,GAAG;AAC1B;AAEA,eAAsB,cAAc,cAAsB,WAAmB,SAAuC;AAClH,MAAI;AACF,UAAM,MAAM,MAAM,WAAW,OAAO,OAAO;AAAA,MACzC;AAAA,MACA,cAAc,YAAY;AAAA,MAC1B;AAAA,MACA;AAAA,MACA,CAAC,QAAQ;AAAA,IACX;AACA,WAAO,MAAM,WAAW,OAAO,OAAO;AAAA,MACpC;AAAA,MACA;AAAA,MACA,cAAc,SAAS;AAAA,MACvB;AAAA,IACF;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;;;ACtCO,SAAS,SAAS,GAAsB;AAC7C,SAAO,cAAc,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC;AAC9C;AAEO,SAAS,SAAS,GAAsB;AAC7C,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,IAAI,YAAY,EAAE,OAAO,cAAc,CAAC,CAAC,CAAC;AAAA,EAChE,QAAQ;AACN,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AACA,MAAI,WAAW,QAAQ,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GAAG;AAC1E,UAAM,IAAI,MAAM,yDAAoD;AAAA,EACtE;AACA,QAAM,IAAI;AACV,MAAI,EAAE,GAAG,MAAM,EAAG,OAAM,IAAI,MAAM,iCAAiC,OAAO,EAAE,GAAG,CAAC,CAAC,eAAe;AAChG,MAAI,OAAO,EAAE,OAAO,MAAM,YAAY,OAAO,EAAE,MAAM,MAAM,YAAY,EAAE,KAAK,MAAM,aAC7E,OAAO,EAAE,OAAO,MAAM,YAAY,OAAO,EAAE,KAAK,MAAM,YACtD,CAAC,MAAM,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,OAAO,MAAM,QAAQ,GAAG;AAChG,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IAAG,OAAO,EAAE,OAAO;AAAA,IAAG,MAAM,EAAE,MAAM;AAAA,IAAG,KAAK;AAAA,IAC/C,OAAO,EAAE,OAAO;AAAA,IAAG,aAAa,EAAE,aAAa;AAAA,IAAG,KAAK,EAAE,KAAK;AAAA,EAChE;AACF;;;AC3BA,SAAS,SAAS,eAAkC,MAAc,OAA2B;AAC3F,SAAO,KAAK,cAAc,EAAE,GAAG,GAAG,eAAe,CAAC,GAAG,aAAa,EAAE,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC;AAC5F;AAEO,SAAS,UAAU,OAAe,MAA+B;AAGtE,MAAI,CAAC,MAAM,QAAQ,MAAM,aAAa,EAAG,QAAO;AAChD,SAAO,KAAK,cAAc,SAAS,KAAK;AAC1C;AAEA,eAAsB,mBACpB,eAAkC,MAAc,OAAe,oBACtC;AACzB,QAAM,SAAS,CAAC,GAAG,aAAa,EAAE,KAAK;AACvC,QAAM,MAAM,MAAM,YAAY,oBAAoB,SAAS,QAAQ,MAAM,KAAK,CAAC;AAC/E,SAAO,EAAE,GAAG,GAAG,eAAe,QAAQ,MAAM,OAAO,IAAI;AACzD;AAEA,eAAsB,qBAAqB,MAAsB,cAAwC;AAEvG,MAAI,MAAM,MAAM,KAAK,CAAC,MAAM,QAAQ,KAAK,aAAa,KAC/C,OAAO,KAAK,SAAS,YAAY,OAAO,KAAK,UAAU,YAAY,OAAO,KAAK,QAAQ,UAAU;AACtG,WAAO;AAAA,EACT;AACA,SAAO,cAAc,cAAc,KAAK,KAAK,SAAS,KAAK,eAAe,KAAK,MAAM,KAAK,KAAK,CAAC;AAClG;;;ACPA,SAAS,WAAW,MAAwG;AAC1H,SAAO,KAAK,cAAc,EAAE,GAAG,KAAK,GAAG,OAAO,KAAK,OAAO,MAAM,KAAK,MAAM,OAAO,KAAK,OAAO,aAAa,KAAK,YAAY,CAAC,CAAC;AAChI;AAEA,eAAsB,gBACpB,MACA,oBACiB;AACjB,SAAO,YAAY,oBAAoB,WAAW,IAAI,CAAC;AACzD;AAEA,eAAsB,kBAAkB,OAA2C;AACjF,QAAM,IAAe,SAAS,MAAM,EAAE;AACtC,QAAM,MAAM,MAAM,WAAW,EAAE,KAAK;AACpC,QAAM,iBAAiB,MACnB,MAAM,cAAc,KAAK,EAAE,KAAK,WAAW,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,MAAM,EAAE,MAAM,OAAO,EAAE,OAAO,aAAa,EAAE,YAAY,CAAC,CAAC,IAChI;AAEJ,QAAM,SAAS,MAAM;AACrB,QAAM,WAAoD,CAAC;AAC3D,MAAI,WAAW;AACf,MAAI,gBAAgB;AACpB,MAAI,OAAO,OAAO,WAAW,EAAE,YAAY,QAAQ;AACjD,oBAAgB;AAChB,eAAW;AACX,eAAW,KAAK,OAAO,OAAQ,UAAS,KAAK,EAAE,MAAM,EAAE,MAAM,OAAO,MAAM,CAAC;AAAA,EAC7E,OAAO;AACL,UAAM,aAAa,MAAM,mBAAmB,EAAE,MAAM,QAAQ,MAAM,aAAa;AAC/E,aAAS,IAAI,GAAG,IAAI,OAAO,OAAO,QAAQ,KAAK;AAC7C,YAAM,QAAQ,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC;AAC/C,eAAS,KAAK,EAAE,MAAM,OAAO,OAAO,CAAC,EAAG,MAAM,MAAM,CAAC;AACrD,UAAI,CAAC,MAAO,YAAW;AAAA,IACzB;AAAA,EACF;AAKA,QAAM,UAAU,MAAM,aAAa,UAAU,EAAE,OAAO,MAAM,WAAW,IAAI,IAAI;AAC/E,QAAM,QAAQ,kBAAkB,YAAY,YAAY;AAExD,MAAI;AACJ,MAAI,CAAC,eAAgB,UAAS,MAAM,sBAAsB;AAAA,WACjD,cAAe,UAAS;AAAA,WACxB,CAAC,SAAU,UAAS;AAAA,WACpB,YAAY,KAAM,UAAS;AAEpC,SAAO,WAAW,SACd,EAAE,OAAO,gBAAgB,UAAU,SAAS,OAAO,IACnD,EAAE,OAAO,gBAAgB,UAAU,QAAQ;AACjD;","names":[]}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@noy-db/attestation",
+  "version": "0.2.0-pre.2",
+  "description": "Pure, zero-dependency document-attestation primitive for noy-db — per-field salted commitments, Ed25519 sign/verify, QR credential codec, and revocation checks. Runs in Node and the browser; the offline verifier imports only this.",
+  "license": "MIT",
+  "author": "vLannaAi <vicio@lanna.ai>",
+  "homepage": "https://github.com/vLannaAi/noy-db/tree/main/packages/attestation#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/vLannaAi/noy-db.git",
+    "directory": "packages/attestation"
+  },
+  "bugs": {
+    "url": "https://github.com/vLannaAi/noy-db/issues"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "keywords": [
+    "noy-db",
+    "attestation",
+    "document",
+    "commitment",
+    "ed25519",
+    "verification",
+    "qr",
+    "tamper-evident"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "latest"
+  },
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "lint": "eslint src/",
+    "typecheck": "tsc --noEmit"
+  }
+}