@primust/artifact-core 1.0.0

package/dist/types.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Primust Artifact Core — Type definitions
+ *
+ * Frozen schemas from P1-B spec. Do not modify without schema migration.
+ */
+/** Key lifecycle states per SIGNER_TRUST_POLICY.md §2 */
+export type KeyStatus = 'active' | 'rotated' | 'revoked';
+/** Revocation reasons per SIGNER_TRUST_POLICY.md §3 */
+export type RevocationReason = 'key_compromise' | 'decommissioned';
+/** Signer purpose */
+export type SignerType = 'artifact_signer' | 'manifest_signer' | 'policy_pack_signer';
+/**
+ * SignerRecord — frozen schema.
+ *
+ * One record per kid. A signer_id may have multiple SignerRecords
+ * (one active, zero or more rotated/revoked).
+ */
+export interface SignerRecord {
+    signer_id: string;
+    kid: string;
+    public_key_b64url: string;
+    algorithm: 'Ed25519';
+    status: KeyStatus;
+    revocation_reason: RevocationReason | null;
+    revoked_at: string | null;
+    superseded_by_kid: string | null;
+    activated_at: string;
+    deactivated_at: string | null;
+    org_id: string;
+    signer_type: SignerType;
+}
+/**
+ * SignatureEnvelope — frozen schema.
+ *
+ * Attached to every signed Primust artifact. Both signer_id and kid
+ * are required — no exceptions.
+ */
+export interface SignatureEnvelope {
+    signer_id: string;
+    kid: string;
+    algorithm: 'Ed25519';
+    signature: string;
+    signed_at: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,yDAAyD;AACzD,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAEzD,uDAAuD;AACvD,MAAM,MAAM,gBAAgB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAEnE,qBAAqB;AACrB,MAAM,MAAM,UAAU,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,oBAAoB,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,MAAM,EAAE,SAAS,CAAC;IAClB,iBAAiB,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC3C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,UAAU,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/types.js

@@ -0,0 +1,7 @@
+/**
+ * Primust Artifact Core — Type definitions
+ *
+ * Frozen schemas from P1-B spec. Do not modify without schema migration.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/validate-artifact.d.ts

@@ -0,0 +1,23 @@
+/**
+ * VPEC Artifact validation — enforces all critical invariants.
+ *
+ * This is structural/semantic validation beyond what JSON Schema covers.
+ * JSON Schema handles type checks; this function enforces cross-field invariants.
+ */
+export interface ValidationError {
+    code: string;
+    message: string;
+    path?: string;
+}
+export interface ValidationResult {
+    valid: boolean;
+    errors: ValidationError[];
+}
+/**
+ * Validate a VPEC artifact against all critical invariants.
+ *
+ * @param artifact - The artifact payload (parsed JSON)
+ * @returns ValidationResult with errors if any invariants are violated
+ */
+export declare function validateArtifact(artifact: Record<string, unknown>): ValidationResult;
+//# sourceMappingURL=validate-artifact.d.ts.map

package/dist/validate-artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-artifact.d.ts","sourceRoot":"","sources":["../src/validate-artifact.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAiCD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CA6HpF"}

package/dist/validate-artifact.js

@@ -0,0 +1,168 @@
+/**
+ * VPEC Artifact validation — enforces all critical invariants.
+ *
+ * This is structural/semantic validation beyond what JSON Schema covers.
+ * JSON Schema handles type checks; this function enforces cross-field invariants.
+ */
+const PROOF_LEVELS = [
+    'mathematical',
+    'verifiable_inference',
+    'execution',
+    'witnessed',
+    'attestation',
+];
+const GAP_TYPES = new Set([
+    'check_not_executed',
+    'enforcement_override',
+    'engine_error',
+    'check_degraded',
+    'external_boundary_traversal',
+    'lineage_token_missing',
+    'admission_gate_override',
+    'check_timing_suspect',
+    'reviewer_credential_invalid',
+    'witnessed_display_missing',
+    'witnessed_rationale_missing',
+    'deterministic_consistency_violation',
+    'skip_rationale_missing',
+    'policy_config_drift',
+    'zkml_proof_pending_timeout',
+    'zkml_proof_failed',
+]);
+const GAP_SEVERITIES = new Set(['Critical', 'High', 'Medium', 'Low', 'Informational']);
+const PUBLIC_KEY_URL_PATTERN = /^https:\/\/primust\.com\/\.well-known\/primust-pubkeys\/.+\.pem$/;
+/**
+ * Validate a VPEC artifact against all critical invariants.
+ *
+ * @param artifact - The artifact payload (parsed JSON)
+ * @returns ValidationResult with errors if any invariants are violated
+ */
+export function validateArtifact(artifact) {
+    const errors = [];
+    // Invariant 2: reliance_mode field ANYWHERE → validation error
+    if ('reliance_mode' in artifact) {
+        errors.push({
+            code: 'RELIANCE_MODE_FORBIDDEN',
+            message: 'reliance_mode field is forbidden in VPEC artifacts',
+            path: 'reliance_mode',
+        });
+    }
+    checkNestedRelianceMode(artifact, '', errors);
+    // schema_version must be 4.0.0
+    if (artifact.schema_version !== '4.0.0') {
+        errors.push({
+            code: 'INVALID_SCHEMA_VERSION',
+            message: `schema_version must be "4.0.0", got "${artifact.schema_version}"`,
+            path: 'schema_version',
+        });
+    }
+    // Invariant 1: proof_level MUST equal proof_distribution.weakest_link
+    const proofDist = artifact.proof_distribution;
+    if (proofDist && artifact.proof_level !== proofDist.weakest_link) {
+        errors.push({
+            code: 'PROOF_LEVEL_MISMATCH',
+            message: `proof_level "${artifact.proof_level}" does not match proof_distribution.weakest_link "${proofDist.weakest_link}"`,
+            path: 'proof_level',
+        });
+    }
+    // Validate proof_level is a valid enum value
+    if (artifact.proof_level && !PROOF_LEVELS.includes(artifact.proof_level)) {
+        errors.push({
+            code: 'INVALID_PROOF_LEVEL',
+            message: `proof_level "${artifact.proof_level}" is not a valid proof level`,
+            path: 'proof_level',
+        });
+    }
+    // Invariant 3: manifest_hashes MUST be object (map), not array
+    if (Array.isArray(artifact.manifest_hashes)) {
+        errors.push({
+            code: 'MANIFEST_HASHES_NOT_MAP',
+            message: 'manifest_hashes must be an object (map), not an array',
+            path: 'manifest_hashes',
+        });
+    }
+    // Invariant 4: gaps[] entries MUST have gap_type and severity
+    const gaps = artifact.gaps;
+    if (Array.isArray(gaps)) {
+        for (let i = 0; i < gaps.length; i++) {
+            const gap = gaps[i];
+            if (typeof gap === 'string') {
+                errors.push({
+                    code: 'GAP_BARE_STRING',
+                    message: `gaps[${i}] is a bare string — must be an object with gap_type and severity`,
+                    path: `gaps[${i}]`,
+                });
+                continue;
+            }
+            if (typeof gap !== 'object' || gap === null) {
+                errors.push({
+                    code: 'GAP_INVALID_TYPE',
+                    message: `gaps[${i}] must be an object with gap_type and severity`,
+                    path: `gaps[${i}]`,
+                });
+                continue;
+            }
+            if (!gap.gap_type || !gap.severity) {
+                errors.push({
+                    code: 'GAP_MISSING_FIELDS',
+                    message: `gaps[${i}] must have gap_type and severity fields`,
+                    path: `gaps[${i}]`,
+                });
+            }
+            if (gap.gap_type && !GAP_TYPES.has(gap.gap_type)) {
+                errors.push({
+                    code: 'GAP_INVALID_TYPE_VALUE',
+                    message: `gaps[${i}].gap_type "${gap.gap_type}" is not a valid gap type`,
+                    path: `gaps[${i}].gap_type`,
+                });
+            }
+            if (gap.severity && !GAP_SEVERITIES.has(gap.severity)) {
+                errors.push({
+                    code: 'GAP_INVALID_SEVERITY',
+                    message: `gaps[${i}].severity "${gap.severity}" is not a valid severity`,
+                    path: `gaps[${i}].severity`,
+                });
+            }
+        }
+    }
+    // Invariant 5: partial: true → policy_coverage_pct must be 0
+    const coverage = artifact.coverage;
+    if (artifact.partial === true && coverage) {
+        if (typeof coverage.policy_coverage_pct === 'number' && coverage.policy_coverage_pct !== 0) {
+            errors.push({
+                code: 'PARTIAL_COVERAGE_NOT_ZERO',
+                message: `partial: true requires policy_coverage_pct to be 0, got ${coverage.policy_coverage_pct}`,
+                path: 'coverage.policy_coverage_pct',
+            });
+        }
+    }
+    // Invariant 7: issuer.public_key_url must match primust.com/.well-known/ pattern
+    const issuer = artifact.issuer;
+    if (issuer && typeof issuer.public_key_url === 'string') {
+        if (!PUBLIC_KEY_URL_PATTERN.test(issuer.public_key_url)) {
+            errors.push({
+                code: 'ISSUER_URL_INVALID',
+                message: `issuer.public_key_url must match https://primust.com/.well-known/primust-pubkeys/*.pem, got "${issuer.public_key_url}"`,
+                path: 'issuer.public_key_url',
+            });
+        }
+    }
+    return { valid: errors.length === 0, errors };
+}
+/** Recursively check for reliance_mode in any nested object */
+function checkNestedRelianceMode(obj, path, errors) {
+    for (const [key, value] of Object.entries(obj)) {
+        const currentPath = path ? `${path}.${key}` : key;
+        if (key === 'reliance_mode' && currentPath !== 'reliance_mode') {
+            errors.push({
+                code: 'RELIANCE_MODE_FORBIDDEN',
+                message: `reliance_mode field is forbidden in VPEC artifacts (found at ${currentPath})`,
+                path: currentPath,
+            });
+        }
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            checkNestedRelianceMode(value, currentPath, errors);
+        }
+    }
+}
+//# sourceMappingURL=validate-artifact.js.map

package/dist/validate-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-artifact.js","sourceRoot":"","sources":["../src/validate-artifact.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAeH,MAAM,YAAY,GAAiB;IACjC,cAAc;IACd,sBAAsB;IACtB,WAAW;IACX,WAAW;IACX,aAAa;CACd,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,oBAAoB;IACpB,sBAAsB;IACtB,cAAc;IACd,gBAAgB;IAChB,6BAA6B;IAC7B,uBAAuB;IACvB,yBAAyB;IACzB,sBAAsB;IACtB,6BAA6B;IAC7B,2BAA2B;IAC3B,6BAA6B;IAC7B,qCAAqC;IACrC,wBAAwB;IACxB,qBAAqB;IACrB,4BAA4B;IAC5B,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAEvF,MAAM,sBAAsB,GAAG,kEAAkE,CAAC;AAElG;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAiC;IAChE,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,+DAA+D;IAC/D,IAAI,eAAe,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,oDAAoD;YAC7D,IAAI,EAAE,eAAe;SACtB,CAAC,CAAC;IACL,CAAC;IACD,uBAAuB,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAE9C,+BAA+B;IAC/B,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,wBAAwB;YAC9B,OAAO,EAAE,wCAAwC,QAAQ,CAAC,cAAc,GAAG;YAC3E,IAAI,EAAE,gBAAgB;SACvB,CAAC,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,MAAM,SAAS,GAAG,QAAQ,CAAC,kBAAyD,CAAC;IACrF,IAAI,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,YAAY,EAAE,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,sBAAsB;YAC5B,OAAO,EAAE,gBAAgB,QAAQ,CAAC,WAAW,qDAAqD,SAAS,CAAC,YAAY,GAAG;YAC3H,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC;IAED,6CAA6C;IAC7C,IAAI,QAAQ,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAyB,CAAC,EAAE,CAAC;QACvF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,gBAAgB,QAAQ,CAAC,WAAW,8BAA8B;YAC3E,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC;IAED,+DAA+D;IAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,uDAAuD;YAChE,IAAI,EAAE,iBAAiB;SACxB,CAAC,CAAC;IACL,CAAC;IAED,8DAA8D;IAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAA4B,CAAC;YAE/C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,QAAQ,CAAC,mEAAmE;oBACrF,IAAI,EAAE,QAAQ,CAAC,GAAG;iBACnB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,kBAAkB;oBACxB,OAAO,EAAE,QAAQ,CAAC,gDAAgD;oBAClE,IAAI,EAAE,QAAQ,CAAC,GAAG;iBACnB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,QAAQ,CAAC,0CAA0C;oBAC5D,IAAI,EAAE,QAAQ,CAAC,GAAG;iBACnB,CAAC,CAAC;YACL,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAkB,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,wBAAwB;oBAC9B,OAAO,EAAE,QAAQ,CAAC,eAAe,GAAG,CAAC,QAAQ,2BAA2B;oBACxE,IAAI,EAAE,QAAQ,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;YAED,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,QAAkB,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,sBAAsB;oBAC5B,OAAO,EAAE,QAAQ,CAAC,eAAe,GAAG,CAAC,QAAQ,2BAA2B;oBACxE,IAAI,EAAE,QAAQ,CAAC,YAAY;iBAC5B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAA+C,CAAC;IAC1E,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC1C,IAAI,OAAO,QAAQ,CAAC,mBAAmB,KAAK,QAAQ,IAAI,QAAQ,CAAC,mBAAmB,KAAK,CAAC,EAAE,CAAC;YAC3F,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,2BAA2B;gBACjC,OAAO,EAAE,2DAA2D,QAAQ,CAAC,mBAAmB,EAAE;gBAClG,IAAI,EAAE,8BAA8B;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAA6C,CAAC;IACtE,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;QACxD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,gGAAgG,MAAM,CAAC,cAAc,GAAG;gBACjI,IAAI,EAAE,uBAAuB;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,+DAA+D;AAC/D,SAAS,uBAAuB,CAC9B,GAA4B,EAC5B,IAAY,EACZ,MAAyB;IAEzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAClD,IAAI,GAAG,KAAK,eAAe,IAAI,WAAW,KAAK,eAAe,EAAE,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,gEAAgE,WAAW,GAAG;gBACvF,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,uBAAuB,CAAC,KAAgC,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/validate-artifact.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=validate-artifact.test.d.ts.map

package/dist/validate-artifact.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-artifact.test.d.ts","sourceRoot":"","sources":["../src/validate-artifact.test.ts"],"names":[],"mappings":""}

package/dist/validate-artifact.test.js

@@ -0,0 +1,300 @@
+import { describe, it, expect } from 'vitest';
+import { validateArtifact } from './validate-artifact.js';
+/** Build a valid VPEC artifact fixture. Override fields as needed. */
+function validArtifact(overrides = {}) {
+    const base = {
+        vpec_id: 'vpec_00000000-0000-0000-0000-000000000001',
+        schema_version: '4.0.0',
+        org_id: 'org_test',
+        run_id: 'run_00000000-0000-0000-0000-000000000001',
+        workflow_id: 'wf_test',
+        process_context_hash: null,
+        policy_snapshot_hash: 'sha256:' + 'a'.repeat(64),
+        policy_basis: 'P1_self_declared',
+        partial: false,
+        surface_summary: [
+            {
+                surface_id: 'surf_1',
+                surface_type: 'in_process_adapter',
+                observation_mode: 'pre_action',
+                proof_ceiling: 'execution',
+                scope_type: 'full_workflow',
+                scope_description: 'Full workflow adapter',
+                surface_coverage_statement: 'All tool calls in graph scope',
+            },
+        ],
+        proof_level: 'execution',
+        proof_distribution: {
+            mathematical: 0,
+            verifiable_inference: 0,
+            execution: 5,
+            witnessed: 0,
+            attestation: 0,
+            weakest_link: 'execution',
+            weakest_link_explanation: 'All checks ran in execution mode',
+        },
+        state: 'signed',
+        coverage: {
+            records_total: 5,
+            records_pass: 4,
+            records_fail: 0,
+            records_degraded: 1,
+            records_not_applicable: 0,
+            policy_coverage_pct: 100,
+            instrumentation_surface_pct: 95.5,
+            instrumentation_surface_basis: 'LangGraph full_workflow adapter — all tool calls in graph scope.',
+        },
+        gaps: [],
+        manifest_hashes: {
+            'manifest_001': 'sha256:' + 'b'.repeat(64),
+        },
+        commitment_root: 'poseidon2:' + 'c'.repeat(64),
+        commitment_algorithm: 'poseidon2',
+        zk_proof: null,
+        issuer: {
+            signer_id: 'signer_test',
+            kid: 'kid_test',
+            algorithm: 'Ed25519',
+            public_key_url: 'https://primust.com/.well-known/primust-pubkeys/abc123.pem',
+            org_region: 'us',
+        },
+        signature: {
+            signer_id: 'signer_test',
+            kid: 'kid_test',
+            algorithm: 'Ed25519',
+            signature: 'dGVzdF9zaWduYXR1cmU',
+            signed_at: '2026-03-10T00:00:00Z',
+        },
+        timestamp_anchor: {
+            type: 'none',
+            tsa: 'none',
+            value: null,
+        },
+        transparency_log: {
+            rekor_log_id: null,
+            rekor_entry_url: null,
+            published_at: null,
+        },
+        issued_at: '2026-03-10T00:00:00Z',
+        pending_flags: {
+            signature_pending: false,
+            proof_pending: false,
+            zkml_proof_pending: false,
+            submission_pending: false,
+            rekor_pending: true,
+        },
+        test_mode: false,
+    };
+    return { ...base, ...overrides };
+}
+describe('validateArtifact', () => {
+    it('valid artifact passes validation', () => {
+        const result = validateArtifact(validArtifact());
+        expect(result.valid).toBe(true);
+        expect(result.errors).toHaveLength(0);
+    });
+    describe('MUST PASS: invariant enforcement', () => {
+        it('proof_level above weakest_link → validation error', () => {
+            const artifact = validArtifact({
+                proof_level: 'mathematical',
+                proof_distribution: {
+                    mathematical: 0,
+                    verifiable_inference: 0,
+                    execution: 5,
+                    witnessed: 0,
+                    attestation: 0,
+                    weakest_link: 'execution',
+                    weakest_link_explanation: 'All checks ran in execution mode',
+                },
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'PROOF_LEVEL_MISMATCH')).toBe(true);
+        });
+        it('reliance_mode field anywhere → validation error', () => {
+            const artifact = validArtifact({ reliance_mode: 'full' });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'RELIANCE_MODE_FORBIDDEN')).toBe(true);
+        });
+        it('reliance_mode nested in sub-object → validation error', () => {
+            const artifact = validArtifact();
+            artifact.coverage.reliance_mode = 'partial';
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'RELIANCE_MODE_FORBIDDEN')).toBe(true);
+        });
+        it('manifest_hashes as array → validation error', () => {
+            const artifact = validArtifact({
+                manifest_hashes: ['sha256:' + 'a'.repeat(64)],
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'MANIFEST_HASHES_NOT_MAP')).toBe(true);
+        });
+        it('gaps with bare string IDs → validation error', () => {
+            const artifact = validArtifact({
+                gaps: ['gap_001', 'gap_002'],
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'GAP_BARE_STRING')).toBe(true);
+        });
+        it('test_mode: true + proof_pending: true → valid provisional artifact', () => {
+            const artifact = validArtifact({
+                test_mode: true,
+                state: 'provisional',
+                pending_flags: {
+                    signature_pending: false,
+                    proof_pending: true,
+                    zkml_proof_pending: false,
+                    submission_pending: false,
+                    rekor_pending: true,
+                },
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(true);
+        });
+        it('schema_version: "4.0.0" on all issued artifacts', () => {
+            const artifact = validArtifact({ schema_version: '2.0.0' });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'INVALID_SCHEMA_VERSION')).toBe(true);
+        });
+        it('all 5 proof levels valid in proof_level enum', () => {
+            const levels = ['mathematical', 'verifiable_inference', 'execution', 'witnessed', 'attestation'];
+            for (const level of levels) {
+                const artifact = validArtifact({
+                    proof_level: level,
+                    proof_distribution: {
+                        mathematical: 0,
+                        verifiable_inference: 0,
+                        execution: 0,
+                        witnessed: 0,
+                        attestation: 0,
+                        [level]: 5,
+                        weakest_link: level,
+                        weakest_link_explanation: `All at ${level}`,
+                    },
+                });
+                const result = validateArtifact(artifact);
+                expect(result.errors.filter((e) => e.code === 'INVALID_PROOF_LEVEL')).toHaveLength(0);
+            }
+        });
+        it('all 16 gap types valid in gap_type enum', () => {
+            const gapTypes = [
+                'check_not_executed',
+                'enforcement_override',
+                'engine_error',
+                'check_degraded',
+                'external_boundary_traversal',
+                'lineage_token_missing',
+                'admission_gate_override',
+                'check_timing_suspect',
+                'reviewer_credential_invalid',
+                'witnessed_display_missing',
+                'witnessed_rationale_missing',
+                'deterministic_consistency_violation',
+                'skip_rationale_missing',
+                'policy_config_drift',
+                'zkml_proof_pending_timeout',
+                'zkml_proof_failed',
+            ];
+            // 16 gap types — spec says 15 but there are 16 in the enum
+            expect(gapTypes).toHaveLength(16);
+            const gaps = gapTypes.map((gt, i) => ({
+                gap_id: `gap_${i}`,
+                gap_type: gt,
+                severity: 'Medium',
+            }));
+            const artifact = validArtifact({ gaps });
+            const result = validateArtifact(artifact);
+            expect(result.errors.filter((e) => e.code === 'GAP_INVALID_TYPE_VALUE')).toHaveLength(0);
+        });
+    });
+    describe('additional invariants', () => {
+        it('partial: true with non-zero policy_coverage_pct → error', () => {
+            const artifact = validArtifact({
+                partial: true,
+                coverage: {
+                    records_total: 5,
+                    records_pass: 3,
+                    records_fail: 0,
+                    records_degraded: 0,
+                    records_not_applicable: 2,
+                    policy_coverage_pct: 60,
+                    instrumentation_surface_pct: 100,
+                    instrumentation_surface_basis: 'Full scope',
+                },
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'PARTIAL_COVERAGE_NOT_ZERO')).toBe(true);
+        });
+        it('partial: true with policy_coverage_pct 0 → valid', () => {
+            const artifact = validArtifact({
+                partial: true,
+                coverage: {
+                    records_total: 5,
+                    records_pass: 3,
+                    records_fail: 0,
+                    records_degraded: 0,
+                    records_not_applicable: 2,
+                    policy_coverage_pct: 0,
+                    instrumentation_surface_pct: null,
+                    instrumentation_surface_basis: 'Partial — coverage not calculated',
+                },
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(true);
+        });
+        it('issuer.public_key_url with wrong domain → error', () => {
+            const artifact = validArtifact({
+                issuer: {
+                    signer_id: 'signer_test',
+                    kid: 'kid_test',
+                    algorithm: 'Ed25519',
+                    public_key_url: 'https://evil.com/.well-known/primust-pubkeys/abc.pem',
+                    org_region: 'us',
+                },
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'ISSUER_URL_INVALID')).toBe(true);
+        });
+        it('invalid gap_type value → error', () => {
+            const artifact = validArtifact({
+                gaps: [{ gap_id: 'g1', gap_type: 'nonexistent_type', severity: 'High' }],
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'GAP_INVALID_TYPE_VALUE')).toBe(true);
+        });
+        it('gap missing gap_type and severity → error', () => {
+            const artifact = validArtifact({
+                gaps: [{ gap_id: 'g1' }],
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'GAP_MISSING_FIELDS')).toBe(true);
+        });
+        it('invalid proof_level value → error', () => {
+            const artifact = validArtifact({
+                proof_level: 'quantum_proof',
+                proof_distribution: {
+                    mathematical: 0,
+                    verifiable_inference: 0,
+                    execution: 0,
+                    witnessed: 0,
+                    attestation: 5,
+                    weakest_link: 'quantum_proof',
+                    weakest_link_explanation: 'invalid',
+                },
+            });
+            const result = validateArtifact(artifact);
+            expect(result.valid).toBe(false);
+            expect(result.errors.some((e) => e.code === 'INVALID_PROOF_LEVEL')).toBe(true);
+        });
+    });
+});
+//# sourceMappingURL=validate-artifact.test.js.map

package/dist/validate-artifact.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-artifact.test.js","sourceRoot":"","sources":["../src/validate-artifact.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAG1D,sEAAsE;AACtE,SAAS,aAAa,CAAC,YAAqC,EAAE;IAC5D,MAAM,IAAI,GAAiB;QACzB,OAAO,EAAE,2CAA2C;QACpD,cAAc,EAAE,OAAO;QACvB,MAAM,EAAE,UAAU;QAClB,MAAM,EAAE,0CAA0C;QAClD,WAAW,EAAE,SAAS;QACtB,oBAAoB,EAAE,IAAI;QAC1B,oBAAoB,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAChD,YAAY,EAAE,kBAAkB;QAChC,OAAO,EAAE,KAAK;QACd,eAAe,EAAE;YACf;gBACE,UAAU,EAAE,QAAQ;gBACpB,YAAY,EAAE,oBAAoB;gBAClC,gBAAgB,EAAE,YAAY;gBAC9B,aAAa,EAAE,WAAW;gBAC1B,UAAU,EAAE,eAAe;gBAC3B,iBAAiB,EAAE,uBAAuB;gBAC1C,0BAA0B,EAAE,+BAA+B;aAC5D;SACF;QACD,WAAW,EAAE,WAAW;QACxB,kBAAkB,EAAE;YAClB,YAAY,EAAE,CAAC;YACf,oBAAoB,EAAE,CAAC;YACvB,SAAS,EAAE,CAAC;YACZ,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,WAAW;YACzB,wBAAwB,EAAE,kCAAkC;SAC7D;QACD,KAAK,EAAE,QAAQ;QACf,QAAQ,EAAE;YACR,aAAa,EAAE,CAAC;YAChB,YAAY,EAAE,CAAC;YACf,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;YACnB,sBAAsB,EAAE,CAAC;YACzB,mBAAmB,EAAE,GAAG;YACxB,2BAA2B,EAAE,IAAI;YACjC,6BAA6B,EAAE,kEAAkE;SAClG;QACD,IAAI,EAAE,EAAE;QACR,eAAe,EAAE;YACf,cAAc,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;SAC3C;QACD,eAAe,EAAE,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,oBAAoB,EAAE,WAAW;QACjC,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE;YACN,SAAS,EAAE,aAAa;YACxB,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,SAAS;YACpB,cAAc,EAAE,4DAA4D;YAC5E,UAAU,EAAE,IAAI;SACjB;QACD,SAAS,EAAE;YACT,SAAS,EAAE,aAAa;YACxB,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,qBAAqB;YAChC,SAAS,EAAE,sBAAsB;SAClC;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,MAAM;YACZ,GAAG,EAAE,MAAM;YACX,KAAK,EAAE,IAAI;SACZ;QACD,gBAAgB,EAAE;YAChB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,IAAI;YACrB,YAAY,EAAE,IAAI;SACnB;QACD,SAAS,EAAE,sBAAsB;QACjC,aAAa,EAAE;YACb,iBAAiB,EAAE,KAAK;YACxB,aAAa,EAAE,KAAK;YACpB,kBAAkB,EAAE,KAAK;YACzB,kBAAkB,EAAE,KAAK;YACzB,aAAa,EAAE,IAAI;SACpB;QACD,SAAS,EAAE,KAAK;KACjB,CAAC;IAEF,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,SAAS,EAAwC,CAAC;AACzE,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,WAAW,EAAE,cAAc;gBAC3B,kBAAkB,EAAE;oBAClB,YAAY,EAAE,CAAC;oBACf,oBAAoB,EAAE,CAAC;oBACvB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,CAAC;oBACZ,WAAW,EAAE,CAAC;oBACd,YAAY,EAAE,WAAW;oBACzB,wBAAwB,EAAE,kCAAkC;iBAC7D;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;YAE1D,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;YAC/D,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;YAChC,QAAgB,CAAC,QAAQ,CAAC,aAAa,GAAG,SAAS,CAAC;YAErD,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;YACrD,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,eAAe,EAAE,CAAC,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;aAC9C,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,IAAI,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;aAC7B,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAC5E,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,aAAa;gBACpB,aAAa,EAAE;oBACb,iBAAiB,EAAE,KAAK;oBACxB,aAAa,EAAE,IAAI;oBACnB,kBAAkB,EAAE,KAAK;oBACzB,kBAAkB,EAAE,KAAK;oBACzB,aAAa,EAAE,IAAI;iBACpB;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;YAE5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,MAAM,GAAG,CAAC,cAAc,EAAE,sBAAsB,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;YAEjG,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,aAAa,CAAC;oBAC7B,WAAW,EAAE,KAAK;oBAClB,kBAAkB,EAAE;wBAClB,YAAY,EAAE,CAAC;wBACf,oBAAoB,EAAE,CAAC;wBACvB,SAAS,EAAE,CAAC;wBACZ,SAAS,EAAE,CAAC;wBACZ,WAAW,EAAE,CAAC;wBACd,CAAC,KAAK,CAAC,EAAE,CAAC;wBACV,YAAY,EAAE,KAAK;wBACnB,wBAAwB,EAAE,UAAU,KAAK,EAAE;qBAC5C;iBACF,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACxF,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,QAAQ,GAAG;gBACf,oBAAoB;gBACpB,sBAAsB;gBACtB,cAAc;gBACd,gBAAgB;gBAChB,6BAA6B;gBAC7B,uBAAuB;gBACvB,yBAAyB;gBACzB,sBAAsB;gBACtB,6BAA6B;gBAC7B,2BAA2B;gBAC3B,6BAA6B;gBAC7B,qCAAqC;gBACrC,wBAAwB;gBACxB,qBAAqB;gBACrB,4BAA4B;gBAC5B,mBAAmB;aACpB,CAAC;YAEF,2DAA2D;YAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAElC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpC,MAAM,EAAE,OAAO,CAAC,EAAE;gBAClB,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC,CAAC;YAEJ,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAEzC,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE;oBACR,aAAa,EAAE,CAAC;oBAChB,YAAY,EAAE,CAAC;oBACf,YAAY,EAAE,CAAC;oBACf,gBAAgB,EAAE,CAAC;oBACnB,sBAAsB,EAAE,CAAC;oBACzB,mBAAmB,EAAE,EAAE;oBACvB,2BAA2B,EAAE,GAAG;oBAChC,6BAA6B,EAAE,YAAY;iBAC5C;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,OAAO,EAAE,IAAI;gBACb,QAAQ,EAAE;oBACR,aAAa,EAAE,CAAC;oBAChB,YAAY,EAAE,CAAC;oBACf,YAAY,EAAE,CAAC;oBACf,gBAAgB,EAAE,CAAC;oBACnB,sBAAsB,EAAE,CAAC;oBACzB,mBAAmB,EAAE,CAAC;oBACtB,2BAA2B,EAAE,IAAI;oBACjC,6BAA6B,EAAE,mCAAmC;iBACnE;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,MAAM,EAAE;oBACN,SAAS,EAAE,aAAa;oBACxB,GAAG,EAAE,UAAU;oBACf,SAAS,EAAE,SAAS;oBACpB,cAAc,EAAE,sDAAsD;oBACtE,UAAU,EAAE,IAAI;iBACjB;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;aACzE,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;aACzB,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC;gBAC7B,WAAW,EAAE,eAAe;gBAC5B,kBAAkB,EAAE;oBAClB,YAAY,EAAE,CAAC;oBACf,oBAAoB,EAAE,CAAC;oBACvB,SAAS,EAAE,CAAC;oBACZ,SAAS,EAAE,CAAC;oBACZ,WAAW,EAAE,CAAC;oBACd,YAAY,EAAE,eAAe;oBAC7B,wBAAwB,EAAE,SAAS;iBACpC;aACF,CAAC,CAAC;YAEH,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@primust/artifact-core",
+  "version": "1.0.0",
+  "description": "Canonical JSON, commitment hashing, and Ed25519 signing primitives for Primust.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "license": "SEE LICENSE IN LICENSE",
+  "author": "Primust, Inc. <eng@primust.com>",
+  "homepage": "https://primust.com",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/primust-dev/primust.git",
+    "directory": "packages/artifact-core"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@noble/ed25519": "^2.3.0",
+    "@noble/hashes": "^1.8.0",
+    "@zkpassport/poseidon2": "^0.6.2"
+  },
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run"
+  }
+}