@real-life/trust-protocol 0.3.2 → 0.4.0

package/dist/continuity.js

@@ -0,0 +1,110 @@
+// continuity — continuity-probe@1 and continuity-mapping@1 (Trust Layer
+// 0.31 §6a, tasks continuity-probe/0.1 and continuity-mapping/0.1): the
+// pure wire constructions over raw X25519 shared secrets (lib Stage 2,
+// PR 4c). The holder's trust module (trust/continuity.ts) builds and
+// verifies through these with secrets from its KeyProvider. Byte-compatible
+// with the continuity cases of vectors/visibility.json
+// (test/trust-continuity.test.mjs).
+//
+//   k_p   = HKDF(X25519(newPairX_sender, newPairX_recipient),
+//                "rltp/visibility/blind/probe/" || senderNewPair || "/" || recipientNewPair)       (6720)
+//   entry = HMAC(k_p, ownPriorPairAnchor bytes)                                                     (6730)
+//   chunk = { body: { type: "continuity-probe@1", probe, seq, last, blinded[256] },
+//             proof: { mac: HMAC(k_p, JCS(body)) } }                                                (6670)
+//   mac1  = HMAC(HKDF(X25519(priorPairX_sender, priorPairX_addressee), "rltp/visibility/mac/cont1"), JCS(body))
+//   mac2  = HMAC(HKDF(X25519(newPairX_sender, newPairX_addressee), "rltp/visibility/mac/cont2"), JCS(body))   (6880)
+//
+// The entries are padded with random 32-byte values in the MAC encoding
+// to the next multiple of 256 (an empty set to 256: one all-padding
+// chunk), a padding value colliding with any other value resampled; the
+// padded union is sorted once and sliced into 256-entry chunks, seq 1…n,
+// exactly one last (6760–6780). Padding bytes come from the caller's
+// `pad`, so vectors replay; this module draws none itself.
+import { jcs, makeValidator, calOK } from './core.js';
+import { SCHEMAS } from './schemas.js';
+import { b64uOf, hkdf, platformSubtle } from './crypto.js';
+import { macU } from './anchor.js';
+const VAL = makeValidator(SCHEMAS);
+const schemaOk = (file, data) => VAL.validate(data, SCHEMAS[file], SCHEMAS[file]).length === 0;
+/** Exactly this many entries per probe chunk (6670, 6760). */
+export const PROBE_CHUNK = 256;
+const nonZero = (shared) => {
+    if (shared.every((b) => b === 0))
+        throw new Error('all-zero shared secret (Trust 6970)');
+};
+/** k_p of one direction from the new pair secret (6720). */
+export async function probeKeyOf(shared, sender, recipient, subtle = platformSubtle()) {
+    nonZero(shared);
+    return hkdf(shared, `rltp/visibility/blind/probe/${sender}/${recipient}`, 32, subtle);
+}
+/** One probe entry: HMAC(k_p, anchor) in its u form (6730, 6800). */
+export const blindPrior = (k, anchor, subtle) => macU(k, anchor, subtle);
+/** A padding value: 32 random bytes in the MAC encoding (6760). */
+export const padValue = (bytes) => {
+    if (bytes.length !== 32)
+        throw new RangeError('a probe padding value is 32 bytes');
+    return 'u' + b64uOf(bytes);
+};
+/**
+ * The chunks of one probe: the own prior pair anchors blinded under k_p,
+ * padded to the next multiple of 256 by values from `pad` (each called
+ * again where its value collides), sorted once, sliced by 256 (6730,
+ * 6760–6780). `probe` is the probe sequence in its wire form (6680).
+ */
+export async function buildProbeChunks(k, probe, priors, pad, subtle = platformSubtle()) {
+    const entries = [];
+    for (const anchor of new Set(priors))
+        entries.push(await blindPrior(k, anchor, subtle));
+    const used = new Set(entries);
+    const total = Math.max(PROBE_CHUNK, Math.ceil(entries.length / PROBE_CHUNK) * PROBE_CHUNK);
+    while (entries.length < total) {
+        let v = padValue(pad());
+        while (used.has(v))
+            v = padValue(pad());
+        used.add(v);
+        entries.push(v);
+    }
+    entries.sort();
+    const chunks = [];
+    for (let i = 0; i * PROBE_CHUNK < entries.length; i++) {
+        const body = { type: 'continuity-probe@1', probe, seq: String(i + 1), last: (i + 1) * PROBE_CHUNK >= entries.length, blinded: entries.slice(i * PROBE_CHUNK, (i + 1) * PROBE_CHUNK) };
+        chunks.push({ body, proof: { mac: await macU(k, jcs(body), subtle) } });
+    }
+    return chunks;
+}
+/** Is this a schema-valid continuity-probe@1 chunk (exactly 256 unique entries)? */
+export const probeChunkOk = (chunk) => schemaOk('visibility-continuity-probe.schema.json', chunk);
+/** Does the chunk's MAC verify under k_p? */
+export async function probeChunkMacOk(k, chunk, subtle) {
+    return (await macU(k, jcs(chunk.body), subtle)) === chunk.proof.mac;
+}
+/** The two MAC keys of a continuity mapping (6880): mac1 under the prior
+ *  relationship secret, mac2 under the new one. */
+export async function continuityMacKeys(sharedPrior, sharedNew, subtle) {
+    nonZero(sharedPrior);
+    nonZero(sharedNew);
+    return { k1: await hkdf(sharedPrior, 'rltp/visibility/mac/cont1', 32, subtle), k2: await hkdf(sharedNew, 'rltp/visibility/mac/cont2', 32, subtle) };
+}
+/** continuity-mapping@1 over its body (6880): the sender's prior and new
+ *  pair secrets toward the addressee. */
+export async function assembleContinuityMapping(body, sharedPrior, sharedNew, subtle) {
+    const { k1, k2 } = await continuityMacKeys(sharedPrior, sharedNew, subtle);
+    const msg = jcs(body);
+    return { body, proof: { mac1: await macU(k1, msg, subtle), mac2: await macU(k2, msg, subtle) } };
+}
+/** Do both MACs verify (6970 step 5), under the receiver's prior and new
+ *  pair secrets toward the sender? */
+export async function continuityMacsOk(m, sharedPrior, sharedNew, subtle) {
+    const { k1, k2 } = await continuityMacKeys(sharedPrior, sharedNew, subtle);
+    const msg = jcs(m.body);
+    return (await macU(k1, msg, subtle)) === m.proof.mac1 && (await macU(k2, msg, subtle)) === m.proof.mac2;
+}
+/** Step 1 of 6940: the schema and a calendar-valid issuedAt. */
+export const continuityMappingOk = (m) => schemaOk('visibility-continuity-mapping.schema.json', m) && calOK(m.body.issuedAt);
+/** 2290: the record side of a fresh tuple is the party whose new pair
+ *  anchor is the smaller by byte order (did:key strings are ASCII). Either
+ *  party can grind its anchor to take either side, so being the record
+ *  side grants nothing: neither side chains without the counterpart's
+ *  mapping verified under the prior key (trust/continuity.ts, follow-up 14). */
+export const isRecordSide = (ownNew, counterpartNew) => ownNew < counterpartNew;
+//# sourceMappingURL=continuity.js.map

package/dist/continuity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"continuity.js","sourceRoot":"","sources":["../src/continuity.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,wEAAwE;AACxE,uEAAuE;AACvE,qEAAqE;AACrE,4EAA4E;AAC5E,uDAAuD;AACvD,oCAAoC;AACpC,EAAE;AACF,8DAA8D;AAC9D,0GAA0G;AAC1G,2GAA2G;AAC3G,oFAAoF;AACpF,2GAA2G;AAC3G,gHAAgH;AAChH,qHAAqH;AACrH,EAAE;AACF,wEAAwE;AACxE,oEAAoE;AACpE,wEAAwE;AACxE,yEAAyE;AACzE,qEAAqE;AACrE,2DAA2D;AAC3D,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAElC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAClC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAa,EAAW,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAE,EAAE,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AAE1H,8DAA8D;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAA;AAM9B,MAAM,OAAO,GAAG,CAAC,MAAkB,EAAQ,EAAE;IAC3C,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;AAC1F,CAAC,CAAA;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,UAAU,CAAE,MAAkB,EAAE,MAAc,EAAE,SAAiB,EAAE,SAAuB,cAAc,EAAE;IAC9H,OAAO,CAAC,MAAM,CAAC,CAAA;IACf,OAAO,IAAI,CAAC,MAAM,EAAE,+BAA+B,MAAM,IAAI,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;AACvF,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAa,EAAE,MAAc,EAAE,MAAqB,EAAmB,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AAE5H,mEAAmE;AACnE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAAU,EAAE;IACpD,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAA;IAClF,OAAO,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAE,CAAa,EAAE,KAAa,EAAE,MAAwB,EAAE,GAAqB,EAAE,SAAuB,cAAc,EAAE;IAC5J,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACvF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,GAAG,WAAW,CAAC,CAAA;IAC1F,OAAO,OAAO,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAA;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IACD,OAAO,CAAC,IAAI,EAAE,CAAA;IACd,MAAM,MAAM,GAAiB,EAAE,CAAA;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,oBAA6B,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,EAAE,CAAA;QAC9L,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,QAAQ,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAA;AAEnH,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAE,CAAa,EAAE,KAAiB,EAAE,MAAqB;IAC5F,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAA;AACrE,CAAC;AAED;mDACmD;AACnD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAE,WAAuB,EAAE,SAAqB,EAAE,MAAqB;IAC5G,OAAO,CAAC,WAAW,CAAC,CAAC;IAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACxC,OAAO,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC,WAAW,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,IAAI,CAAC,SAAS,EAAE,2BAA2B,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAA;AACrJ,CAAC;AAED;yCACyC;AACzC,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAE,IAA2B,EAAE,WAAuB,EAAE,SAAqB,EAAE,MAAqB;IACjJ,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;IACrB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAA;AAClG,CAAC;AAED;sCACsC;AACtC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAE,CAAoB,EAAE,WAAuB,EAAE,SAAqB,EAAE,MAAqB;IACjI,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,iBAAiB,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;IAC1E,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;IACvB,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;AACzG,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAU,EAAW,EAAE,CACzD,QAAQ,CAAC,2CAA2C,EAAE,CAAC,CAAC,IAAI,KAAK,CAAE,CAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;AAE3G;;;;gFAIgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAc,EAAE,cAAsB,EAAW,EAAE,CAAC,MAAM,GAAG,cAAc,CAAA","sourcesContent":["// continuity — continuity-probe@1 and continuity-mapping@1 (Trust Layer\n// 0.31 §6a, tasks continuity-probe/0.1 and continuity-mapping/0.1): the\n// pure wire constructions over raw X25519 shared secrets (lib Stage 2,\n// PR 4c). The holder's trust module (trust/continuity.ts) builds and\n// verifies through these with secrets from its KeyProvider. Byte-compatible\n// with the continuity cases of vectors/visibility.json\n// (test/trust-continuity.test.mjs).\n//\n//   k_p   = HKDF(X25519(newPairX_sender, newPairX_recipient),\n//                \"rltp/visibility/blind/probe/\" || senderNewPair || \"/\" || recipientNewPair)       (6720)\n//   entry = HMAC(k_p, ownPriorPairAnchor bytes)                                                     (6730)\n//   chunk = { body: { type: \"continuity-probe@1\", probe, seq, last, blinded[256] },\n//             proof: { mac: HMAC(k_p, JCS(body)) } }                                                (6670)\n//   mac1  = HMAC(HKDF(X25519(priorPairX_sender, priorPairX_addressee), \"rltp/visibility/mac/cont1\"), JCS(body))\n//   mac2  = HMAC(HKDF(X25519(newPairX_sender, newPairX_addressee), \"rltp/visibility/mac/cont2\"), JCS(body))   (6880)\n//\n// The entries are padded with random 32-byte values in the MAC encoding\n// to the next multiple of 256 (an empty set to 256: one all-padding\n// chunk), a padding value colliding with any other value resampled; the\n// padded union is sorted once and sliced into 256-entry chunks, seq 1…n,\n// exactly one last (6760–6780). Padding bytes come from the caller's\n// `pad`, so vectors replay; this module draws none itself.\nimport { jcs, makeValidator, calOK } from './core.js'\nimport { SCHEMAS } from './schemas.js'\nimport { b64uOf, hkdf, platformSubtle } from './crypto.js'\nimport { macU } from './anchor.js'\n\nconst VAL = makeValidator(SCHEMAS)\nconst schemaOk = (file: string, data: unknown): boolean => VAL.validate(data, SCHEMAS[file]!, SCHEMAS[file]!).length === 0\n\n/** Exactly this many entries per probe chunk (6670, 6760). */\nexport const PROBE_CHUNK = 256\n\nexport type ProbeChunk = { body: { type: 'continuity-probe@1', probe: string, seq: string, last: boolean, blinded: string[] }, proof: { mac: string } }\nexport type ContinuityMappingBody = { type: 'continuity-mapping@1', prior: string, next: string, to: string, revision: string, issuedAt: string }\nexport type ContinuityMapping = { body: ContinuityMappingBody, proof: { mac1: string, mac2: string } }\n\nconst nonZero = (shared: Uint8Array): void => {\n  if (shared.every((b) => b === 0)) throw new Error('all-zero shared secret (Trust 6970)')\n}\n\n/** k_p of one direction from the new pair secret (6720). */\nexport async function probeKeyOf (shared: Uint8Array, sender: string, recipient: string, subtle: SubtleCrypto = platformSubtle()): Promise<Uint8Array> {\n  nonZero(shared)\n  return hkdf(shared, `rltp/visibility/blind/probe/${sender}/${recipient}`, 32, subtle)\n}\n\n/** One probe entry: HMAC(k_p, anchor) in its u form (6730, 6800). */\nexport const blindPrior = (k: Uint8Array, anchor: string, subtle?: SubtleCrypto): Promise<string> => macU(k, anchor, subtle)\n\n/** A padding value: 32 random bytes in the MAC encoding (6760). */\nexport const padValue = (bytes: Uint8Array): string => {\n  if (bytes.length !== 32) throw new RangeError('a probe padding value is 32 bytes')\n  return 'u' + b64uOf(bytes)\n}\n\n/**\n * The chunks of one probe: the own prior pair anchors blinded under k_p,\n * padded to the next multiple of 256 by values from `pad` (each called\n * again where its value collides), sorted once, sliced by 256 (6730,\n * 6760–6780). `probe` is the probe sequence in its wire form (6680).\n */\nexport async function buildProbeChunks (k: Uint8Array, probe: string, priors: Iterable<string>, pad: () => Uint8Array, subtle: SubtleCrypto = platformSubtle()): Promise<ProbeChunk[]> {\n  const entries: string[] = []\n  for (const anchor of new Set(priors)) entries.push(await blindPrior(k, anchor, subtle))\n  const used = new Set(entries)\n  const total = Math.max(PROBE_CHUNK, Math.ceil(entries.length / PROBE_CHUNK) * PROBE_CHUNK)\n  while (entries.length < total) {\n    let v = padValue(pad())\n    while (used.has(v)) v = padValue(pad())\n    used.add(v)\n    entries.push(v)\n  }\n  entries.sort()\n  const chunks: ProbeChunk[] = []\n  for (let i = 0; i * PROBE_CHUNK < entries.length; i++) {\n    const body = { type: 'continuity-probe@1' as const, probe, seq: String(i + 1), last: (i + 1) * PROBE_CHUNK >= entries.length, blinded: entries.slice(i * PROBE_CHUNK, (i + 1) * PROBE_CHUNK) }\n    chunks.push({ body, proof: { mac: await macU(k, jcs(body), subtle) } })\n  }\n  return chunks\n}\n\n/** Is this a schema-valid continuity-probe@1 chunk (exactly 256 unique entries)? */\nexport const probeChunkOk = (chunk: unknown): boolean => schemaOk('visibility-continuity-probe.schema.json', chunk)\n\n/** Does the chunk's MAC verify under k_p? */\nexport async function probeChunkMacOk (k: Uint8Array, chunk: ProbeChunk, subtle?: SubtleCrypto): Promise<boolean> {\n  return (await macU(k, jcs(chunk.body), subtle)) === chunk.proof.mac\n}\n\n/** The two MAC keys of a continuity mapping (6880): mac1 under the prior\n *  relationship secret, mac2 under the new one. */\nexport async function continuityMacKeys (sharedPrior: Uint8Array, sharedNew: Uint8Array, subtle?: SubtleCrypto): Promise<{ k1: Uint8Array, k2: Uint8Array }> {\n  nonZero(sharedPrior); nonZero(sharedNew)\n  return { k1: await hkdf(sharedPrior, 'rltp/visibility/mac/cont1', 32, subtle), k2: await hkdf(sharedNew, 'rltp/visibility/mac/cont2', 32, subtle) }\n}\n\n/** continuity-mapping@1 over its body (6880): the sender's prior and new\n *  pair secrets toward the addressee. */\nexport async function assembleContinuityMapping (body: ContinuityMappingBody, sharedPrior: Uint8Array, sharedNew: Uint8Array, subtle?: SubtleCrypto): Promise<ContinuityMapping> {\n  const { k1, k2 } = await continuityMacKeys(sharedPrior, sharedNew, subtle)\n  const msg = jcs(body)\n  return { body, proof: { mac1: await macU(k1, msg, subtle), mac2: await macU(k2, msg, subtle) } }\n}\n\n/** Do both MACs verify (6970 step 5), under the receiver's prior and new\n *  pair secrets toward the sender? */\nexport async function continuityMacsOk (m: ContinuityMapping, sharedPrior: Uint8Array, sharedNew: Uint8Array, subtle?: SubtleCrypto): Promise<boolean> {\n  const { k1, k2 } = await continuityMacKeys(sharedPrior, sharedNew, subtle)\n  const msg = jcs(m.body)\n  return (await macU(k1, msg, subtle)) === m.proof.mac1 && (await macU(k2, msg, subtle)) === m.proof.mac2\n}\n\n/** Step 1 of 6940: the schema and a calendar-valid issuedAt. */\nexport const continuityMappingOk = (m: unknown): boolean =>\n  schemaOk('visibility-continuity-mapping.schema.json', m) && calOK((m as ContinuityMapping).body.issuedAt)\n\n/** 2290: the record side of a fresh tuple is the party whose new pair\n *  anchor is the smaller by byte order (did:key strings are ASCII). Either\n *  party can grind its anchor to take either side, so being the record\n *  side grants nothing: neither side chains without the counterpart's\n *  mapping verified under the prior key (trust/continuity.ts, follow-up 14). */\nexport const isRecordSide = (ownNew: string, counterpartNew: string): boolean => ownNew < counterpartNew\n"]}

package/dist/core.d.ts

@@ -1,6 +1,10 @@
 export type Json = string | number | boolean | null | Json[] | {
     [k: string]: Json;
 };
+/** A JSON object (the codec's `anyObj`: an object, contents open). */
+export type JsonObject = {
+    [field: string]: Json;
+};
 /** RFC 8785 subset for the ASCII I-JSON forms this stack ships. */
 export declare const jcs: (o: unknown) => string;
 export declare const B58 = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";

package/dist/core.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG;IAAE,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AAEpF,mEAAmE;AACnE,eAAO,MAAM,GAAG,GAAI,GAAG,OAAO,KAAG,MA0ChC,CAAA;AAGD,eAAO,MAAM,GAAG,+DAA+D,CAAA;AAC/E,wBAAgB,MAAM,CAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAOjD;AACD,wBAAgB,UAAU,CAAE,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAWxD;AACD,eAAO,MAAM,MAAM,GAAI,OAAO,UAAU,KAAG,MAO1C,CAAA;AACD,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,KAAG,UAMpC,CAAA;AAMD,eAAO,MAAM,GAAG,GAAI,GAAG,OAAO,KAAG,MAAM,GAAG,IAgBzC,CAAA;AACD,eAAO,MAAM,UAAU,GAAI,GAAG,OAAO,EAAE,GAAG,OAAO,KAAG,OAAqE,CAAA;AAEzH,8EAA8E;AAC9E,eAAO,MAAM,GAAG,GAAI,IAAI,MAAM,KAAG,MAA8D,CAAA;AAI/F,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,MAA+E,CAAA;AAGzH,eAAO,MAAM,KAAK,GAAI,GAAG,OAAO,KAAG,OAKlC,CAAA;AAKD,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG;IAAE,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CAAA;AACnD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAC9C,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,CAAA;IAClF,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACzE,OAAO,EAAE,SAAS,CAAA;IAClB,IAAI,EAAE,SAAS,CAAA;CAChB;AAED,iFAAiF;AACjF,wBAAgB,aAAa,CAAE,OAAO,EAAE,SAAS,GAAG,SAAS,CAiF5D"}
+{"version":3,"file":"core.d.ts","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAeA,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG;IAAE,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AACpF,sEAAsE;AACtE,MAAM,MAAM,UAAU,GAAG;IAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AAElD,mEAAmE;AACnE,eAAO,MAAM,GAAG,GAAI,GAAG,OAAO,KAAG,MA0ChC,CAAA;AAGD,eAAO,MAAM,GAAG,+DAA+D,CAAA;AAC/E,wBAAgB,MAAM,CAAE,KAAK,EAAE,UAAU,GAAG,MAAM,CAOjD;AACD,wBAAgB,UAAU,CAAE,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAWxD;AACD,eAAO,MAAM,MAAM,GAAI,OAAO,UAAU,KAAG,MAO1C,CAAA;AACD,eAAO,MAAM,QAAQ,GAAI,GAAG,MAAM,KAAG,UAMpC,CAAA;AAMD,eAAO,MAAM,GAAG,GAAI,GAAG,OAAO,KAAG,MAAM,GAAG,IAgBzC,CAAA;AACD,eAAO,MAAM,UAAU,GAAI,GAAG,OAAO,EAAE,GAAG,OAAO,KAAG,OAAqE,CAAA;AAEzH,8EAA8E;AAC9E,eAAO,MAAM,GAAG,GAAI,IAAI,MAAM,KAAG,MAA8D,CAAA;AAI/F,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,GAAG,MAAM,KAAG,MAA+E,CAAA;AAGzH,eAAO,MAAM,KAAK,GAAI,GAAG,OAAO,KAAG,OAKlC,CAAA;AAKD,MAAM,MAAM,MAAM,GAAG,OAAO,GAAG;IAAE,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;CAAE,CAAA;AACnD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;AAC9C,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,CAAA;IAClF,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAA;IACzE,OAAO,EAAE,SAAS,CAAA;IAClB,IAAI,EAAE,SAAS,CAAA;CAChB;AAED,iFAAiF;AACjF,wBAAgB,aAAa,CAAE,OAAO,EAAE,SAAS,GAAG,SAAS,CAiF5D"}

package/dist/core.js.map

@@ -1 +1 @@
-{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,kEAAkE;AAClE,2DAA2D;AAC3D,uEAAuE;AACvE,kEAAkE;AAClE,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,+BAA+B;AAC/B,EAAE;AACF,yEAAyE;AACzE,2CAA2C;AAK3C,mEAAmE;AACnE,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE;IACxC,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAC1E,sEAAsE;IACtE,sEAAsE;IACtE,gEAAgE;IAChE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAE,CAA4C,CAAC,YAAY,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAClI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC3F,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,mEAAmE;QACnE,6DAA6D;QAC7D,8DAA8D;QAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;QACtF,gEAAgE;QAChE,mEAAmE;QACnE,IAAI,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,qBAAqB,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACtL,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACzC,CAAC;IACD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,oEAAoE;QACpE,mEAAmE;QACnE,4DAA4D;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACjG,qEAAqE;QACrE,0DAA0D;QAC1D,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC/F,iEAAiE;QACjE,mDAAmD;QACnD,IAAI,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACrI,MAAM,GAAG,GAAG,CAA4B,CAAA;QACxC,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7C,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,CAAC,CAAA;YACzE,IAAI,CAAE,CAA4C,CAAC,YAAY,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACpB,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC3B,qEAAqE;IACrE,oEAAoE;IACpE,4CAA4C;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAClF,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,GAAG,GAAG,4DAA4D,CAAA;AAC/E,MAAM,UAAU,MAAM,CAAE,KAAiB;IACvC,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAC/C,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAAC,CAAC,IAAI,GAAG,CAAA;IAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC;YAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;;YAAM,MAAK;IAAC,CAAC;IACnE,OAAO,GAAG,CAAA;AACZ,CAAC;AACD,MAAM,UAAU,UAAU,CAAE,CAAS;IACnC,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACxB,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACtB,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IACzB,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC,IAAI,IAAI,CAAA;IAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG;YAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;;YAAM,MAAK;IAAC,CAAC;IAChE,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;AAC5B,CAAC;AACD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAU,EAAE;IAClD,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAClD,MAAM,MAAM,GAA0B,OAAO,IAAI,KAAK,UAAU;QAC9D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,UAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC7E,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAc,EAAE;IAChD,MAAM,MAAM,GAA0B,OAAO,IAAI,KAAK,UAAU;QAC9D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,UAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAC3D,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC,CAAA;AAED,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,uDAAuD;AACvD,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACtD,IAAI,KAAwB,CAAA;IAC5B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC;YAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QAC1D,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,IAAI,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IACrD,CAAC;SAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACxB,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,2BAA2B;IACjF,CAAC;;QAAM,OAAO,IAAI,CAAA;IAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACxF,OAAO,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAU,EAAE,CAAU,EAAW,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAA;AAEzH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;AAE/F,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAkB,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;AACzH,qEAAqE;AACrE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAW,EAAE;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,CAAC,yEAAyE,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACpG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACtF,CAAC,CAAA;AAcD,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAE,OAAkB;IAC/C,MAAM,IAAI,GAAc,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3F,MAAM,IAAI,GAAG,CAAC,IAAS,EAAE,KAAe,EAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC,CAAA;IAC7G,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE;QAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;QACnF,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAK,CAAC,IAAI,IAAI,CAAC,IAAK,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAA;QACxD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;QAChD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IACvE,CAAC,CAAA;IACD,SAAS,QAAQ,CAAE,IAAa,EAAE,MAAc,EAAE,IAAY,EAAE,IAAI,GAAG,GAAG;QACxE,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAA;QACnD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QACxD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,IAAI,CAAA;QAClD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;QAClH,MAAM,OAAO,GAAG,IAAW,CAAA;QAC3B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,CAAC,CAAC,gBAAgB,CAAC,CAAA;QACtF,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,CAAC,CAAC,eAAe,CAAC,CAAA;QAC9F,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAA;YAC9E,MAAM,IAAI,GAAc,EAAe,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACtG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAA;YAAC,CAAC;QAC7D,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,CAAC,CAAC,SAAS,CAAC,CAAA;YAC1E,8DAA8D;YAC9D,mEAAmE;YACnE,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3F,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,SAAS;gBAAE,CAAC,CAAC,WAAW,CAAC,CAAA;YACxE,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,SAAS;gBAAE,CAAC,CAAC,WAAW,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;gBAAE,CAAC,CAAC,UAAU,CAAC,CAAA;YAC3E,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;gBAAE,CAAC,CAAC,UAAU,CAAC,CAAA;YAC3E,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;gBAAE,CAAC,CAAC,aAAa,CAAC,CAAA;YACvF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;gBAC1I,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM;oBAAE,CAAC,CAAC,gCAAgC,CAAC,CAAA;YAC5G,CAAC;iBAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC/D,IAAI,CAAC,OAAO,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACzG,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;gBAAE,CAAC,CAAC,oBAAoB,CAAC,CAAA;QACnI,CAAC;QACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACjC,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa;gBAAE,CAAC,CAAC,eAAe,CAAC,CAAA;YAC1F,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa;gBAAE,CAAC,CAAC,eAAe,CAAC,CAAA;YAC1F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;oBAAE,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAA;YACjG,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAA8B,CAAC,EAAE,CAAC;gBACnG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;oBAAE,KAAK,MAAM,CAAC,IAAI,IAAgB;wBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;4BAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACnI,CAAC;YACD,IAAI,MAAM,CAAC,aAAa;gBAAE,KAAK,MAAM,CAAC,IAAI,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;YAC5H,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;qBACvI,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK;oBAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAA;qBACvE,IAAI,MAAM,CAAC,oBAAoB,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,oBAAoB,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YAChL,CAAC;QACH,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,IAAI,GAAG,MAAM,CAAC,OAAO;gBAAE,CAAC,CAAC,SAAS,CAAC,CAAA;YACjE,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,IAAI,GAAG,MAAM,CAAC,OAAO;gBAAE,CAAC,CAAC,SAAS,CAAC,CAAA;YACjE,IAAI,MAAM,CAAC,gBAAgB,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,gBAAgB;gBAAE,CAAC,CAAC,kBAAkB,CAAC,CAAA;YAC7F,IAAI,MAAM,CAAC,gBAAgB,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,gBAAgB;gBAAE,CAAC,CAAC,kBAAkB,CAAC,CAAA;YAC7F,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,CAAC,CAAC,YAAY,CAAC,CAAA;QACxF,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,CAAC,CAAC,iBAAiB,CAAC,CAAA;QACzH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;QAC7J,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,CAAC,CAAC,aAAa,CAAC,CAAA;QACrG,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;YAC9D,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;YAC3F,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QAC9F,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAa;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QACjG,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAChD,CAAC","sourcesContent":["// core — the form layer: the canonical rules every RLTP artifact obeys.\n//\n// One implementation of the canonical form (JCS subset, multibase\n// encodings, digest equality over DECODED bytes, timestamp\n// normalization) and the JSON-Schema subset validator. The conformance\n// runner, the reference engine and every simulator delegate here.\n//\n// Predicates exist ONCE — that is the point. Weakening a rule here fails\n// the conformance runner's self-tests rather than silently changing what\n// some user interface accepts.\n//\n// Dependency-free and environment-free: no node:*, no DOM, no WebCrypto.\n// Everything here is synchronous and pure.\n\n// ── JCS (RFC 8785 subset for the ASCII I-JSON forms this stack ships) ──\nexport type Json = string | number | boolean | null | Json[] | { [k: string]: Json }\n\n/** RFC 8785 subset for the ASCII I-JSON forms this stack ships. */\nexport const jcs = (o: unknown): string => {\n  if (o === undefined) throw new Error('jcs: undefined is not serializable')\n  // RFC 8785 operates on Unicode strings — a lone surrogate is not one,\n  // and a conformant implementation MUST error rather than canonicalize\n  // it (review 3, B-1: divergent digests between implementations)\n  if (typeof o === 'string' && !(o as unknown as { isWellFormed(): boolean }).isWellFormed()) throw new Error('jcs: lone surrogate')\n  if (typeof o === 'number' && !Number.isFinite(o)) throw new Error('jcs: non-finite number')\n  if (Array.isArray(o)) {\n    // a sparse array is not a JSON value: map() skips holes and join()\n    // erases them, so [empty] and [] would COLLIDE on one digest\n    // (review 4, B-3) — reject instead of silently canonicalizing\n    for (let i = 0; i < o.length; i++) if (!(i in o)) throw new Error('jcs: sparse array')\n    // non-index own properties (arr.x = 1) and symbol keys would be\n    // silently DROPPED and collide with the bare array (review 6, B-2)\n    if (Object.getOwnPropertyNames(o).length !== o.length + 1 /* 'length' itself */ || Object.getOwnPropertySymbols(o).length > 0) throw new Error('jcs: array with extra own properties')\n    return '[' + o.map(jcs).join(',') + ']'\n  }\n  if (o && typeof o === 'object') {\n    // only PLAIN objects are JSON values: a Date, Map or class instance\n    // would serialize by its enumerable keys alone and collide with {}\n    // (review 5, B-3) — reject at the edge of the digest domain\n    const proto = Object.getPrototypeOf(o)\n    if (proto !== null && proto !== Object.prototype) throw new Error('jcs: not a plain JSON object')\n    // symbol-keyed own properties would be silently dropped — the object\n    // would collide with its symbol-free twin (review 6, B-2)\n    if (Object.getOwnPropertySymbols(o).length > 0) throw new Error('jcs: object with symbol keys')\n    // non-enumerable own properties are invisible to Object.keys and\n    // would collide with the bare twin (review 7, B-4)\n    if (Object.getOwnPropertyNames(o).length !== Object.keys(o).length) throw new Error('jcs: object with non-enumerable own properties')\n    const rec = o as Record<string, unknown>\n    return '{' + Object.keys(rec).sort().map((k) => {\n      if (rec[k] === undefined) throw new Error('jcs: undefined property ' + k)\n      if (!(k as unknown as { isWellFormed(): boolean }).isWellFormed()) throw new Error('jcs: lone surrogate in key')\n      return JSON.stringify(k) + ':' + jcs(rec[k])\n    }).join(',') + '}'\n  }\n  const s = JSON.stringify(o)\n  // M-4 (review 1): symbols and functions stringify to undefined — the\n  // invariant \"jcs returns a string\" is enforced at the API edge, not\n  // silently violated downstream in a digest.\n  if (typeof s !== 'string') throw new Error('jcs: value is not JSON-representable')\n  return s\n}\n\n// ── multibase encodings ─────────────────────────────────────────────────\nexport const B58 = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz'\nexport function base58 (bytes: Uint8Array): string {\n  let n = 0n\n  for (const b of bytes) n = n * 256n + BigInt(b)\n  let out = ''\n  while (n > 0n) { out = B58[Number(n % 58n)] + out; n /= 58n }\n  for (const b of bytes) { if (b === 0) out = '1' + out; else break }\n  return out\n}\nexport function fromBase58 (s: string): Uint8Array | null {\n  let n = 0n\n  for (const c of s) {\n    const i = B58.indexOf(c)\n    if (i < 0) return null\n    n = n * 58n + BigInt(i)\n  }\n  const out: number[] = []\n  while (n > 0n) { out.unshift(Number(n % 256n)); n /= 256n }\n  for (const c of s) { if (c === '1') out.unshift(0); else break }\n  return new Uint8Array(out)\n}\nexport const b64uOf = (bytes: Uint8Array): string => {\n  let s = ''\n  for (const b of bytes) s += String.fromCharCode(b)\n  const btoaFn: (x: string) => string = typeof btoa === 'function'\n    ? btoa\n    : (x) => (globalThis as any).Buffer.from(x, 'binary').toString('base64')\n  return btoaFn(s).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '')\n}\nexport const fromB64u = (s: string): Uint8Array => {\n  const atobFn: (x: string) => string = typeof atob === 'function'\n    ? atob\n    : (x) => (globalThis as any).Buffer.from(x, 'base64').toString('binary')\n  const bin = atobFn(s.replace(/-/g, '+').replace(/_/g, '/'))\n  return Uint8Array.from(bin, (c) => c.charCodeAt(0))\n}\n\n// ── digest equality over decoded multihash bytes (Encounter 2.3) ────────\n// toU: strict multibase bridge — prefix, sha2-256 multihash header and\n// length, AND canonical-form round-trip; returns the canonical u rendering\n// or null. A u input is checked for header/length too.\nexport const toU = (v: unknown): string | null => {\n  if (typeof v !== 'string' || v.length < 2) return null\n  let bytes: Uint8Array | null\n  if (v[0] === 'u') {\n    try { bytes = fromB64u(v.slice(1)) } catch { return null }\n    // canonical base64url only — padding or non-zero trailing bits make a\n    // DIFFERENT string decode to the same bytes, and equality is decided\n    // over bytes; without this check 16 spellings of one digest verify\n    // (B-1, review 1; the shipped reject vectors demand exactly this).\n    if (bytes && 'u' + b64uOf(bytes) !== v) return null\n  } else if (v[0] === 'z') {\n    bytes = fromBase58(v.slice(1))\n    if (bytes && 'z' + base58(bytes) !== v) return null // canonical base58btc only\n  } else return null\n  if (!bytes || bytes.length !== 34 || bytes[0] !== 0x12 || bytes[1] !== 0x20) return null\n  return 'u' + b64uOf(bytes)\n}\nexport const sameDigest = (a: unknown, b: unknown): boolean => { const na = toU(a); return na !== null && na === toU(b) }\n\n/** Whole-second ISO rendering — the timestamp form every artifact carries. */\nexport const iso = (ms: number): string => new Date(ms).toISOString().replace(/\\.\\d{3}Z$/, 'Z')\n\n// ── timestamps (Encounter 2.3) ──────────────────────────────────────────\n// tsec: whole-second truncation of EVERY comparison operand (incl. now).\nexport const tsec = (v: string | number): number => Math.floor((typeof v === 'number' ? v : Date.parse(v)) / 1000) * 1000\n// calOK: calendar-valid round-trip AND the ≤3-fractional-digit cap —\n// Date.parse silently normalizes impossible dates, so demand the round-trip.\nexport const calOK = (t: unknown): boolean => {\n  if (typeof t !== 'string') return false\n  if (!/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(\\.[0-9]{1,3})?Z$/.test(t)) return false\n  const d = new Date(t)\n  return !Number.isNaN(d.getTime()) && d.toISOString().slice(0, 19) === t.slice(0, 19)\n}\n\n// ── THE JSON-Schema subset validator (exactly the keywords we ship) ─────\n// makeValidator(schemaMap): schemaMap is { filename → parsed schema }.\n// Returns { validate, resolveRef, SCHEMAS, BYID } bound to that map.\nexport type Schema = boolean | { [k: string]: any }\nexport type SchemaMap = Record<string, Schema>\nexport interface Validator {\n  validate: (data: unknown, schema: Schema, root: Schema, path?: string) => string[]\n  resolveRef: (ref: string, root: Schema) => { node: Schema, root: Schema }\n  SCHEMAS: SchemaMap\n  BYID: SchemaMap\n}\n\n/** Builds a validator bound to one schema map ({ filename → parsed schema }). */\nexport function makeValidator (SCHEMAS: SchemaMap): Validator {\n  const BYID: SchemaMap = {}\n  for (const s of Object.values(SCHEMAS)) if (typeof s === 'object' && s.$id) BYID[s.$id] = s\n  const walk = (node: any, parts: string[]): any => { let n = node; for (const p of parts) n = n[p]; return n }\n  const resolveRef = (ref: string, root: Schema) => {\n    if (ref.startsWith('#')) return { node: walk(root, ref.slice(2).split('/')), root }\n    const [base, frag] = ref.split('#')\n    const target = SCHEMAS[base!] || BYID[base!]\n    if (!target) throw new Error('unresolvable $ref ' + ref)\n    if (!frag) return { node: target, root: target }\n    return { node: walk(target, frag.slice(1).split('/')), root: target }\n  }\n  function validate (data: unknown, schema: Schema, root: Schema, path = '$'): string[] {\n    const errs: string[] = []\n    const E = (m: string) => errs.push(`${path}: ${m}`)\n    if (schema === false) { E('schema false'); return errs }\n    if (schema === true || schema == null) return errs\n    if (schema.$ref) { const { node, root: r } = resolveRef(schema.$ref, root); return validate(data, node, r, path) }\n    const anyData = data as any\n    if (schema.const !== undefined && jcs(data) !== jcs(schema.const)) E('const mismatch')\n    if (schema.enum && !schema.enum.some((v: unknown) => jcs(v) === jcs(data))) E('enum mismatch')\n    if (schema.type) {\n      const t = Array.isArray(data) ? 'array' : data === null ? 'null' : typeof data\n      const want: string[] = ([] as string[]).concat(schema.type)\n      const okT = want.some((w) => w === t || (w === 'integer' && t === 'number' && Number.isInteger(data)))\n      if (!okT) { E(`type ${t} != ${schema.type}`); return errs }\n    }\n    if (typeof data === 'string') {\n      if (schema.pattern && !new RegExp(schema.pattern).test(data)) E('pattern')\n      // JSON Schema misst Stringlänge in CODEPUNKTEN, nicht UTF-16-\n      // Einheiten (Review 4, M-2: 101 Emoji sind 101 Zeichen, nicht 202)\n      const cpLen = (schema.minLength != null || schema.maxLength != null) ? [...data].length : 0\n      if (schema.minLength != null && cpLen < schema.minLength) E('minLength')\n      if (schema.maxLength != null && cpLen > schema.maxLength) E('maxLength')\n    }\n    if (Array.isArray(data)) {\n      if (schema.minItems != null && data.length < schema.minItems) E('minItems')\n      if (schema.maxItems != null && data.length > schema.maxItems) E('maxItems')\n      if (schema.uniqueItems && new Set(data.map(jcs)).size !== data.length) E('uniqueItems')\n      if (schema.prefixItems) {\n        schema.prefixItems.forEach((ps: Schema, i: number) => { if (i < data.length) errs.push(...validate(data[i], ps, root, `${path}[${i}]`)) })\n        if (schema.items === false && data.length > schema.prefixItems.length) E('items false beyond prefixItems')\n      } else if (schema.items !== undefined && schema.items !== true) {\n        data.forEach((d: unknown, i: number) => errs.push(...validate(d, schema.items, root, `${path}[${i}]`)))\n      }\n      if (schema.contains && !data.some((d: unknown) => validate(d, schema.contains, root, path).length === 0)) E('contains unmatched')\n    }\n    if (data && typeof data === 'object' && !Array.isArray(data)) {\n      const keys = Object.keys(anyData)\n      if (schema.minProperties != null && keys.length < schema.minProperties) E('minProperties')\n      if (schema.maxProperties != null && keys.length > schema.maxProperties) E('maxProperties')\n      for (const r of schema.required || []) if (!Object.hasOwn(anyData, r)) E(`missing required ${r}`)\n      for (const [k, deps] of Object.entries(schema.dependentRequired || {} as Record<string, string[]>)) {\n        if (Object.hasOwn(anyData, k)) for (const d of deps as string[]) if (!Object.hasOwn(anyData, d)) E(`dependentRequired ${k}→${d}`)\n      }\n      if (schema.propertyNames) for (const k of keys) errs.push(...validate(k, schema.propertyNames, root, `${path}.<name:${k}>`))\n      for (const k of keys) {\n        if (schema.properties && Object.hasOwn(schema.properties, k)) errs.push(...validate(anyData[k], schema.properties[k], root, `${path}.${k}`))\n        else if (schema.additionalProperties === false) E(`additionalProperty ${k}`)\n        else if (schema.additionalProperties && typeof schema.additionalProperties === 'object') errs.push(...validate(anyData[k], schema.additionalProperties, root, `${path}.${k}`))\n      }\n    }\n    if (typeof data === 'number') {\n      if (schema.minimum != null && data < schema.minimum) E('minimum')\n      if (schema.maximum != null && data > schema.maximum) E('maximum')\n      if (schema.exclusiveMinimum != null && data <= schema.exclusiveMinimum) E('exclusiveMinimum')\n      if (schema.exclusiveMaximum != null && data >= schema.exclusiveMaximum) E('exclusiveMaximum')\n      if (schema.multipleOf != null && (data / schema.multipleOf) % 1 !== 0) E('multipleOf')\n    }\n    if (schema.anyOf && !schema.anyOf.some((s2: Schema) => validate(data, s2, root, path).length === 0)) E('anyOf unmatched')\n    if (schema.oneOf) { const n = schema.oneOf.filter((s2: Schema) => validate(data, s2, root, path).length === 0).length; if (n !== 1) E(`oneOf matched ${n}`) }\n    if (schema.not !== undefined && validate(data, schema.not, root, path).length === 0) E('not matched')\n    if (schema.if !== undefined) {\n      const hit = validate(data, schema.if, root, path).length === 0\n      if (hit && schema.then !== undefined) errs.push(...validate(data, schema.then, root, path))\n      if (!hit && schema.else !== undefined) errs.push(...validate(data, schema.else, root, path))\n    }\n    for (const sub of (schema.allOf || []) as Schema[]) errs.push(...validate(data, sub, root, path))\n    return errs\n  }\n  return { validate, resolveRef, SCHEMAS, BYID }\n}\n"]}
+{"version":3,"file":"core.js","sourceRoot":"","sources":["../src/core.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,kEAAkE;AAClE,2DAA2D;AAC3D,uEAAuE;AACvE,kEAAkE;AAClE,EAAE;AACF,yEAAyE;AACzE,yEAAyE;AACzE,+BAA+B;AAC/B,EAAE;AACF,yEAAyE;AACzE,2CAA2C;AAO3C,mEAAmE;AACnE,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE;IACxC,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAC1E,sEAAsE;IACtE,sEAAsE;IACtE,gEAAgE;IAChE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAE,CAA4C,CAAC,YAAY,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAA;IAClI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;IAC3F,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,mEAAmE;QACnE,6DAA6D;QAC7D,8DAA8D;QAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;QACtF,gEAAgE;QAChE,mEAAmE;QACnE,IAAI,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,qBAAqB,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACtL,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACzC,CAAC;IACD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,oEAAoE;QACpE,mEAAmE;QACnE,4DAA4D;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAA;QACtC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACjG,qEAAqE;QACrE,0DAA0D;QAC1D,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;QAC/F,iEAAiE;QACjE,mDAAmD;QACnD,IAAI,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACrI,MAAM,GAAG,GAAG,CAA4B,CAAA;QACxC,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7C,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,CAAC,CAAA;YACzE,IAAI,CAAE,CAA4C,CAAC,YAAY,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAChH,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;IACpB,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC3B,qEAAqE;IACrE,oEAAoE;IACpE,4CAA4C;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAClF,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AAED,2EAA2E;AAC3E,MAAM,CAAC,MAAM,GAAG,GAAG,4DAA4D,CAAA;AAC/E,MAAM,UAAU,MAAM,CAAE,KAAiB;IACvC,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IAC/C,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QAAC,CAAC,IAAI,GAAG,CAAA;IAAC,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC;YAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;;YAAM,MAAK;IAAC,CAAC;IACnE,OAAO,GAAG,CAAA;AACZ,CAAC;AACD,MAAM,UAAU,UAAU,CAAE,CAAS;IACnC,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QACxB,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAA;QACtB,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;IACzB,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;QAAC,CAAC,IAAI,IAAI,CAAA;IAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG;YAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;;YAAM,MAAK;IAAC,CAAC;IAChE,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;AAC5B,CAAC;AACD,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAU,EAAE;IAClD,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IAClD,MAAM,MAAM,GAA0B,OAAO,IAAI,KAAK,UAAU;QAC9D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,UAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC7E,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAc,EAAE;IAChD,MAAM,MAAM,GAA0B,OAAO,IAAI,KAAK,UAAU;QAC9D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,UAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAA;IAC3D,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC,CAAA;AAED,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,uDAAuD;AACvD,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IACtD,IAAI,KAAwB,CAAA;IAC5B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC;YAAC,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QAC1D,sEAAsE;QACtE,qEAAqE;QACrE,mEAAmE;QACnE,mEAAmE;QACnE,IAAI,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;IACrD,CAAC;SAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACxB,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAC9B,IAAI,KAAK,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA,CAAC,2BAA2B;IACjF,CAAC;;QAAM,OAAO,IAAI,CAAA;IAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACxF,OAAO,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAU,EAAE,CAAU,EAAW,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAA;AAEzH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;AAE/F,2EAA2E;AAC3E,yEAAyE;AACzE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAkB,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAA;AACzH,qEAAqE;AACrE,6EAA6E;AAC7E,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAU,EAAW,EAAE;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,CAAC,yEAAyE,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACpG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;AACtF,CAAC,CAAA;AAcD,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAE,OAAkB;IAC/C,MAAM,IAAI,GAAc,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC3F,MAAM,IAAI,GAAG,CAAC,IAAS,EAAE,KAAe,EAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC,CAAA;IAC7G,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAY,EAAE,EAAE;QAC/C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;QACnF,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAK,CAAC,IAAI,IAAI,CAAC,IAAK,CAAC,CAAA;QAC5C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,GAAG,CAAC,CAAA;QACxD,IAAI,CAAC,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;QAChD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IACvE,CAAC,CAAA;IACD,SAAS,QAAQ,CAAE,IAAa,EAAE,MAAc,EAAE,IAAY,EAAE,IAAI,GAAG,GAAG;QACxE,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,EAAE,CAAC,CAAA;QACnD,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YAAC,OAAO,IAAI,CAAA;QAAC,CAAC;QACxD,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,IAAI;YAAE,OAAO,IAAI,CAAA;QAClD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAAC,CAAC;QAClH,MAAM,OAAO,GAAG,IAAW,CAAA;QAC3B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,CAAC,CAAC,gBAAgB,CAAC,CAAA;QACtF,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,CAAC,CAAC,eAAe,CAAC,CAAA;QAC9F,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,IAAI,CAAA;YAC9E,MAAM,IAAI,GAAc,EAAe,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACtG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAA;YAAC,CAAC;QAC7D,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,CAAC,CAAC,SAAS,CAAC,CAAA;YAC1E,8DAA8D;YAC9D,mEAAmE;YACnE,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;YAC3F,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,SAAS;gBAAE,CAAC,CAAC,WAAW,CAAC,CAAA;YACxE,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,KAAK,GAAG,MAAM,CAAC,SAAS;gBAAE,CAAC,CAAC,WAAW,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;gBAAE,CAAC,CAAC,UAAU,CAAC,CAAA;YAC3E,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ;gBAAE,CAAC,CAAC,UAAU,CAAC,CAAA;YAC3E,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;gBAAE,CAAC,CAAC,aAAa,CAAC,CAAA;YACvF,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,EAAU,EAAE,CAAS,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;gBAC1I,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM;oBAAE,CAAC,CAAC,gCAAgC,CAAC,CAAA;YAC5G,CAAC;iBAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;gBAC/D,IAAI,CAAC,OAAO,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;YACzG,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;gBAAE,CAAC,CAAC,oBAAoB,CAAC,CAAA;QACnI,CAAC;QACD,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACjC,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa;gBAAE,CAAC,CAAC,eAAe,CAAC,CAAA;YAC1F,IAAI,MAAM,CAAC,aAAa,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa;gBAAE,CAAC,CAAC,eAAe,CAAC,CAAA;YAC1F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;oBAAE,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAA;YACjG,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAA8B,CAAC,EAAE,CAAC;gBACnG,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;oBAAE,KAAK,MAAM,CAAC,IAAI,IAAgB;wBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;4BAAE,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACnI,CAAC;YACD,IAAI,MAAM,CAAC,aAAa;gBAAE,KAAK,MAAM,CAAC,IAAI,IAAI;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;YAC5H,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;qBACvI,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK;oBAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAA;qBACvE,IAAI,MAAM,CAAC,oBAAoB,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,oBAAoB,EAAE,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;YAChL,CAAC;QACH,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,IAAI,GAAG,MAAM,CAAC,OAAO;gBAAE,CAAC,CAAC,SAAS,CAAC,CAAA;YACjE,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,IAAI,GAAG,MAAM,CAAC,OAAO;gBAAE,CAAC,CAAC,SAAS,CAAC,CAAA;YACjE,IAAI,MAAM,CAAC,gBAAgB,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,gBAAgB;gBAAE,CAAC,CAAC,kBAAkB,CAAC,CAAA;YAC7F,IAAI,MAAM,CAAC,gBAAgB,IAAI,IAAI,IAAI,IAAI,IAAI,MAAM,CAAC,gBAAgB;gBAAE,CAAC,CAAC,kBAAkB,CAAC,CAAA;YAC7F,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,CAAC,CAAC,YAAY,CAAC,CAAA;QACxF,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,CAAC,CAAC,iBAAiB,CAAC,CAAA;QACzH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;QAC7J,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,CAAC,CAAC,aAAa,CAAC,CAAA;QACrG,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;YAC9D,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;YAC3F,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QAC9F,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAa;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;QACjG,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;AAChD,CAAC","sourcesContent":["// core — the form layer: the canonical rules every RLTP artifact obeys.\n//\n// One implementation of the canonical form (JCS subset, multibase\n// encodings, digest equality over DECODED bytes, timestamp\n// normalization) and the JSON-Schema subset validator. The conformance\n// runner, the reference engine and every simulator delegate here.\n//\n// Predicates exist ONCE — that is the point. Weakening a rule here fails\n// the conformance runner's self-tests rather than silently changing what\n// some user interface accepts.\n//\n// Dependency-free and environment-free: no node:*, no DOM, no WebCrypto.\n// Everything here is synchronous and pure.\n\n// ── JCS (RFC 8785 subset for the ASCII I-JSON forms this stack ships) ──\nexport type Json = string | number | boolean | null | Json[] | { [k: string]: Json }\n/** A JSON object (the codec's `anyObj`: an object, contents open). */\nexport type JsonObject = { [field: string]: Json }\n\n/** RFC 8785 subset for the ASCII I-JSON forms this stack ships. */\nexport const jcs = (o: unknown): string => {\n  if (o === undefined) throw new Error('jcs: undefined is not serializable')\n  // RFC 8785 operates on Unicode strings — a lone surrogate is not one,\n  // and a conformant implementation MUST error rather than canonicalize\n  // it (review 3, B-1: divergent digests between implementations)\n  if (typeof o === 'string' && !(o as unknown as { isWellFormed(): boolean }).isWellFormed()) throw new Error('jcs: lone surrogate')\n  if (typeof o === 'number' && !Number.isFinite(o)) throw new Error('jcs: non-finite number')\n  if (Array.isArray(o)) {\n    // a sparse array is not a JSON value: map() skips holes and join()\n    // erases them, so [empty] and [] would COLLIDE on one digest\n    // (review 4, B-3) — reject instead of silently canonicalizing\n    for (let i = 0; i < o.length; i++) if (!(i in o)) throw new Error('jcs: sparse array')\n    // non-index own properties (arr.x = 1) and symbol keys would be\n    // silently DROPPED and collide with the bare array (review 6, B-2)\n    if (Object.getOwnPropertyNames(o).length !== o.length + 1 /* 'length' itself */ || Object.getOwnPropertySymbols(o).length > 0) throw new Error('jcs: array with extra own properties')\n    return '[' + o.map(jcs).join(',') + ']'\n  }\n  if (o && typeof o === 'object') {\n    // only PLAIN objects are JSON values: a Date, Map or class instance\n    // would serialize by its enumerable keys alone and collide with {}\n    // (review 5, B-3) — reject at the edge of the digest domain\n    const proto = Object.getPrototypeOf(o)\n    if (proto !== null && proto !== Object.prototype) throw new Error('jcs: not a plain JSON object')\n    // symbol-keyed own properties would be silently dropped — the object\n    // would collide with its symbol-free twin (review 6, B-2)\n    if (Object.getOwnPropertySymbols(o).length > 0) throw new Error('jcs: object with symbol keys')\n    // non-enumerable own properties are invisible to Object.keys and\n    // would collide with the bare twin (review 7, B-4)\n    if (Object.getOwnPropertyNames(o).length !== Object.keys(o).length) throw new Error('jcs: object with non-enumerable own properties')\n    const rec = o as Record<string, unknown>\n    return '{' + Object.keys(rec).sort().map((k) => {\n      if (rec[k] === undefined) throw new Error('jcs: undefined property ' + k)\n      if (!(k as unknown as { isWellFormed(): boolean }).isWellFormed()) throw new Error('jcs: lone surrogate in key')\n      return JSON.stringify(k) + ':' + jcs(rec[k])\n    }).join(',') + '}'\n  }\n  const s = JSON.stringify(o)\n  // M-4 (review 1): symbols and functions stringify to undefined — the\n  // invariant \"jcs returns a string\" is enforced at the API edge, not\n  // silently violated downstream in a digest.\n  if (typeof s !== 'string') throw new Error('jcs: value is not JSON-representable')\n  return s\n}\n\n// ── multibase encodings ─────────────────────────────────────────────────\nexport const B58 = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz'\nexport function base58 (bytes: Uint8Array): string {\n  let n = 0n\n  for (const b of bytes) n = n * 256n + BigInt(b)\n  let out = ''\n  while (n > 0n) { out = B58[Number(n % 58n)] + out; n /= 58n }\n  for (const b of bytes) { if (b === 0) out = '1' + out; else break }\n  return out\n}\nexport function fromBase58 (s: string): Uint8Array | null {\n  let n = 0n\n  for (const c of s) {\n    const i = B58.indexOf(c)\n    if (i < 0) return null\n    n = n * 58n + BigInt(i)\n  }\n  const out: number[] = []\n  while (n > 0n) { out.unshift(Number(n % 256n)); n /= 256n }\n  for (const c of s) { if (c === '1') out.unshift(0); else break }\n  return new Uint8Array(out)\n}\nexport const b64uOf = (bytes: Uint8Array): string => {\n  let s = ''\n  for (const b of bytes) s += String.fromCharCode(b)\n  const btoaFn: (x: string) => string = typeof btoa === 'function'\n    ? btoa\n    : (x) => (globalThis as any).Buffer.from(x, 'binary').toString('base64')\n  return btoaFn(s).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '')\n}\nexport const fromB64u = (s: string): Uint8Array => {\n  const atobFn: (x: string) => string = typeof atob === 'function'\n    ? atob\n    : (x) => (globalThis as any).Buffer.from(x, 'base64').toString('binary')\n  const bin = atobFn(s.replace(/-/g, '+').replace(/_/g, '/'))\n  return Uint8Array.from(bin, (c) => c.charCodeAt(0))\n}\n\n// ── digest equality over decoded multihash bytes (Encounter 2.3) ────────\n// toU: strict multibase bridge — prefix, sha2-256 multihash header and\n// length, AND canonical-form round-trip; returns the canonical u rendering\n// or null. A u input is checked for header/length too.\nexport const toU = (v: unknown): string | null => {\n  if (typeof v !== 'string' || v.length < 2) return null\n  let bytes: Uint8Array | null\n  if (v[0] === 'u') {\n    try { bytes = fromB64u(v.slice(1)) } catch { return null }\n    // canonical base64url only — padding or non-zero trailing bits make a\n    // DIFFERENT string decode to the same bytes, and equality is decided\n    // over bytes; without this check 16 spellings of one digest verify\n    // (B-1, review 1; the shipped reject vectors demand exactly this).\n    if (bytes && 'u' + b64uOf(bytes) !== v) return null\n  } else if (v[0] === 'z') {\n    bytes = fromBase58(v.slice(1))\n    if (bytes && 'z' + base58(bytes) !== v) return null // canonical base58btc only\n  } else return null\n  if (!bytes || bytes.length !== 34 || bytes[0] !== 0x12 || bytes[1] !== 0x20) return null\n  return 'u' + b64uOf(bytes)\n}\nexport const sameDigest = (a: unknown, b: unknown): boolean => { const na = toU(a); return na !== null && na === toU(b) }\n\n/** Whole-second ISO rendering — the timestamp form every artifact carries. */\nexport const iso = (ms: number): string => new Date(ms).toISOString().replace(/\\.\\d{3}Z$/, 'Z')\n\n// ── timestamps (Encounter 2.3) ──────────────────────────────────────────\n// tsec: whole-second truncation of EVERY comparison operand (incl. now).\nexport const tsec = (v: string | number): number => Math.floor((typeof v === 'number' ? v : Date.parse(v)) / 1000) * 1000\n// calOK: calendar-valid round-trip AND the ≤3-fractional-digit cap —\n// Date.parse silently normalizes impossible dates, so demand the round-trip.\nexport const calOK = (t: unknown): boolean => {\n  if (typeof t !== 'string') return false\n  if (!/^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(\\.[0-9]{1,3})?Z$/.test(t)) return false\n  const d = new Date(t)\n  return !Number.isNaN(d.getTime()) && d.toISOString().slice(0, 19) === t.slice(0, 19)\n}\n\n// ── THE JSON-Schema subset validator (exactly the keywords we ship) ─────\n// makeValidator(schemaMap): schemaMap is { filename → parsed schema }.\n// Returns { validate, resolveRef, SCHEMAS, BYID } bound to that map.\nexport type Schema = boolean | { [k: string]: any }\nexport type SchemaMap = Record<string, Schema>\nexport interface Validator {\n  validate: (data: unknown, schema: Schema, root: Schema, path?: string) => string[]\n  resolveRef: (ref: string, root: Schema) => { node: Schema, root: Schema }\n  SCHEMAS: SchemaMap\n  BYID: SchemaMap\n}\n\n/** Builds a validator bound to one schema map ({ filename → parsed schema }). */\nexport function makeValidator (SCHEMAS: SchemaMap): Validator {\n  const BYID: SchemaMap = {}\n  for (const s of Object.values(SCHEMAS)) if (typeof s === 'object' && s.$id) BYID[s.$id] = s\n  const walk = (node: any, parts: string[]): any => { let n = node; for (const p of parts) n = n[p]; return n }\n  const resolveRef = (ref: string, root: Schema) => {\n    if (ref.startsWith('#')) return { node: walk(root, ref.slice(2).split('/')), root }\n    const [base, frag] = ref.split('#')\n    const target = SCHEMAS[base!] || BYID[base!]\n    if (!target) throw new Error('unresolvable $ref ' + ref)\n    if (!frag) return { node: target, root: target }\n    return { node: walk(target, frag.slice(1).split('/')), root: target }\n  }\n  function validate (data: unknown, schema: Schema, root: Schema, path = '$'): string[] {\n    const errs: string[] = []\n    const E = (m: string) => errs.push(`${path}: ${m}`)\n    if (schema === false) { E('schema false'); return errs }\n    if (schema === true || schema == null) return errs\n    if (schema.$ref) { const { node, root: r } = resolveRef(schema.$ref, root); return validate(data, node, r, path) }\n    const anyData = data as any\n    if (schema.const !== undefined && jcs(data) !== jcs(schema.const)) E('const mismatch')\n    if (schema.enum && !schema.enum.some((v: unknown) => jcs(v) === jcs(data))) E('enum mismatch')\n    if (schema.type) {\n      const t = Array.isArray(data) ? 'array' : data === null ? 'null' : typeof data\n      const want: string[] = ([] as string[]).concat(schema.type)\n      const okT = want.some((w) => w === t || (w === 'integer' && t === 'number' && Number.isInteger(data)))\n      if (!okT) { E(`type ${t} != ${schema.type}`); return errs }\n    }\n    if (typeof data === 'string') {\n      if (schema.pattern && !new RegExp(schema.pattern).test(data)) E('pattern')\n      // JSON Schema misst Stringlänge in CODEPUNKTEN, nicht UTF-16-\n      // Einheiten (Review 4, M-2: 101 Emoji sind 101 Zeichen, nicht 202)\n      const cpLen = (schema.minLength != null || schema.maxLength != null) ? [...data].length : 0\n      if (schema.minLength != null && cpLen < schema.minLength) E('minLength')\n      if (schema.maxLength != null && cpLen > schema.maxLength) E('maxLength')\n    }\n    if (Array.isArray(data)) {\n      if (schema.minItems != null && data.length < schema.minItems) E('minItems')\n      if (schema.maxItems != null && data.length > schema.maxItems) E('maxItems')\n      if (schema.uniqueItems && new Set(data.map(jcs)).size !== data.length) E('uniqueItems')\n      if (schema.prefixItems) {\n        schema.prefixItems.forEach((ps: Schema, i: number) => { if (i < data.length) errs.push(...validate(data[i], ps, root, `${path}[${i}]`)) })\n        if (schema.items === false && data.length > schema.prefixItems.length) E('items false beyond prefixItems')\n      } else if (schema.items !== undefined && schema.items !== true) {\n        data.forEach((d: unknown, i: number) => errs.push(...validate(d, schema.items, root, `${path}[${i}]`)))\n      }\n      if (schema.contains && !data.some((d: unknown) => validate(d, schema.contains, root, path).length === 0)) E('contains unmatched')\n    }\n    if (data && typeof data === 'object' && !Array.isArray(data)) {\n      const keys = Object.keys(anyData)\n      if (schema.minProperties != null && keys.length < schema.minProperties) E('minProperties')\n      if (schema.maxProperties != null && keys.length > schema.maxProperties) E('maxProperties')\n      for (const r of schema.required || []) if (!Object.hasOwn(anyData, r)) E(`missing required ${r}`)\n      for (const [k, deps] of Object.entries(schema.dependentRequired || {} as Record<string, string[]>)) {\n        if (Object.hasOwn(anyData, k)) for (const d of deps as string[]) if (!Object.hasOwn(anyData, d)) E(`dependentRequired ${k}→${d}`)\n      }\n      if (schema.propertyNames) for (const k of keys) errs.push(...validate(k, schema.propertyNames, root, `${path}.<name:${k}>`))\n      for (const k of keys) {\n        if (schema.properties && Object.hasOwn(schema.properties, k)) errs.push(...validate(anyData[k], schema.properties[k], root, `${path}.${k}`))\n        else if (schema.additionalProperties === false) E(`additionalProperty ${k}`)\n        else if (schema.additionalProperties && typeof schema.additionalProperties === 'object') errs.push(...validate(anyData[k], schema.additionalProperties, root, `${path}.${k}`))\n      }\n    }\n    if (typeof data === 'number') {\n      if (schema.minimum != null && data < schema.minimum) E('minimum')\n      if (schema.maximum != null && data > schema.maximum) E('maximum')\n      if (schema.exclusiveMinimum != null && data <= schema.exclusiveMinimum) E('exclusiveMinimum')\n      if (schema.exclusiveMaximum != null && data >= schema.exclusiveMaximum) E('exclusiveMaximum')\n      if (schema.multipleOf != null && (data / schema.multipleOf) % 1 !== 0) E('multipleOf')\n    }\n    if (schema.anyOf && !schema.anyOf.some((s2: Schema) => validate(data, s2, root, path).length === 0)) E('anyOf unmatched')\n    if (schema.oneOf) { const n = schema.oneOf.filter((s2: Schema) => validate(data, s2, root, path).length === 0).length; if (n !== 1) E(`oneOf matched ${n}`) }\n    if (schema.not !== undefined && validate(data, schema.not, root, path).length === 0) E('not matched')\n    if (schema.if !== undefined) {\n      const hit = validate(data, schema.if, root, path).length === 0\n      if (hit && schema.then !== undefined) errs.push(...validate(data, schema.then, root, path))\n      if (!hit && schema.else !== undefined) errs.push(...validate(data, schema.else, root, path))\n    }\n    for (const sub of (schema.allOf || []) as Schema[]) errs.push(...validate(data, sub, root, path))\n    return errs\n  }\n  return { validate, resolveRef, SCHEMAS, BYID }\n}\n"]}

package/dist/crypto.d.ts

@@ -1,23 +1,27 @@
 import { base58, fromBase58, b64uOf, fromB64u } from './core.js';
 export { b64uOf, fromB64u, base58, fromBase58 };
+/** The platform's SubtleCrypto, read at call time — never at import, so
+ *  the library loads in a runtime without WebCrypto and fails only where
+ *  it is used (note §3 Crypto). */
+export declare const platformSubtle: () => SubtleCrypto;
 export declare const cat: (...bs: Uint8Array[]) => Uint8Array;
 export declare const rand: (n: number) => Uint8Array;
-export declare const sha: (bytes: Uint8Array) => Promise<Uint8Array>;
-export declare const hkdf: (ikm: Uint8Array, info: string, len?: number) => Promise<Uint8Array>;
-export declare const digestBytes: (bytes: Uint8Array) => Promise<string>;
-export declare const digestDoc: (obj: unknown) => Promise<string>;
+export declare const sha: (bytes: Uint8Array, subtle?: SubtleCrypto) => Promise<Uint8Array>;
+export declare const hkdf: (ikm: Uint8Array, info: string, len?: number, subtle?: SubtleCrypto) => Promise<Uint8Array>;
+export declare const digestBytes: (bytes: Uint8Array, subtle?: SubtleCrypto) => Promise<string>;
+export declare const digestDoc: (obj: unknown, subtle?: SubtleCrypto) => Promise<string>;
 /** A key pair as this library carries it: the private CryptoKey plus the raw public bytes. */
 export interface KeyPair {
     priv: CryptoKey;
     pubRaw: Uint8Array;
 }
 export declare function edFromSeed(seed: Uint8Array): Promise<KeyPair>;
-export declare function xFromSeed(seed: Uint8Array): Promise<KeyPair>;
+export declare function xFromSeed(seed: Uint8Array, subtle?: SubtleCrypto): Promise<KeyPair>;
 export declare const anchorOfEd: (pubRaw: Uint8Array) => string;
 export declare const mkOfX: (pubRaw: Uint8Array) => string;
 export declare const edRawOfAnchor: (did: unknown) => Uint8Array | null;
 export declare const xRawOfMk: (mk: unknown) => Uint8Array | null;
-export declare const ecdh: (xPriv: CryptoKey, theirPubRaw: Uint8Array) => Promise<Uint8Array>;
+export declare const ecdh: (xPriv: CryptoKey, theirPubRaw: Uint8Array, subtle?: SubtleCrypto) => Promise<Uint8Array>;
 /** What a signer must offer: its anchor and its Ed25519 key. A full identity Context satisfies this. */
 export interface Signer {
     anchor: string;
@@ -28,5 +32,17 @@ export interface Signer {
 export declare function diSign<T extends Record<string, any>>(ctx: Signer, doc: T, created: string): Promise<T & {
     proof: Record<string, any>;
 }>;
-export declare function diVerify(doc: any, expectedAnchor?: string): Promise<boolean>;
+/**
+ * The same eddsa-jcs-2022 proof as diSign, with the signature from a
+ * signing function instead of a private key: the holder signs through
+ * its KeyProvider (`keys.sign(label, bytes)`, raw Ed25519 over the
+ * hashData), so modules never hold a key. Ed25519 is deterministic: for
+ * the same key, document and `created` the result is byte-identical to
+ * diSign's.
+ */
+export declare function diSignWith<T extends Record<string, any>>(anchor: string, sign: (hashData: Uint8Array) => Promise<Uint8Array>, doc: T, created: string, subtle?: SubtleCrypto): Promise<T & {
+    proof: Record<string, any>;
+}>;
+/** `subtle`: the holder's resolved handle; without one the platform's, at call time. */
+export declare function diVerify(doc: any, expectedAnchor?: string, subtle?: SubtleCrypto): Promise<boolean>;
 //# sourceMappingURL=crypto.d.ts.map

package/dist/crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAcA,OAAO,EAAO,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAS,MAAM,WAAW,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AAM/C,eAAO,MAAM,GAAG,GAAI,GAAG,IAAI,UAAU,EAAE,KAAG,UAIzC,CAAA;AACD,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,KAAG,UAAkE,CAAA;AAGnG,eAAO,MAAM,GAAG,GAAU,OAAO,UAAU,KAAG,OAAO,CAAC,UAAU,CAAqD,CAAA;AACrH,eAAO,MAAM,IAAI,GAAU,KAAK,UAAU,EAAE,MAAM,MAAM,EAAE,YAAQ,KAAG,OAAO,CAAC,UAAU,CAGtF,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,OAAO,UAAU,KAAG,OAAO,CAAC,MAAM,CAAuE,CAAA;AAE3I,eAAO,MAAM,SAAS,GAAU,KAAK,OAAO,KAAG,OAAO,CAAC,MAAM,CAAqC,CAAA;AAMlG,8FAA8F;AAC9F,MAAM,WAAW,OAAO;IAAG,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE;AAEhE,wBAAsB,UAAU,CAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAGpE;AACD,wBAAsB,SAAS,CAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAGnE;AACD,eAAO,MAAM,UAAU,GAAI,QAAQ,UAAU,KAAG,MAA0E,CAAA;AAC1H,eAAO,MAAM,KAAK,GAAI,QAAQ,UAAU,KAAG,MAAkE,CAAA;AAC7G,eAAO,MAAM,aAAa,GAAI,KAAK,OAAO,KAAG,UAAU,GAAG,IAIzD,CAAA;AACD,eAAO,MAAM,QAAQ,GAAI,IAAI,OAAO,KAAG,UAAU,GAAG,IAInD,CAAA;AACD,eAAO,MAAM,IAAI,GAAU,OAAO,SAAS,EAAE,aAAa,UAAU,KAAG,OAAO,CAAC,UAAU,CAGxF,CAAA;AAMD,wGAAwG;AACxG,MAAM,WAAW,MAAM;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAA;CAAE;AAEnE,wBAAsB,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAG,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAAC,CAM9I;AACD,wBAAsB,QAAQ,CAAE,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAyBnF"}
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAO,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAS,MAAM,WAAW,CAAA;AAE5E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AAG/C;;mCAEmC;AACnC,eAAO,MAAM,cAAc,QAAO,YAIjC,CAAA;AAID,eAAO,MAAM,GAAG,GAAI,GAAG,IAAI,UAAU,EAAE,KAAG,UAIzC,CAAA;AACD,eAAO,MAAM,IAAI,GAAI,GAAG,MAAM,KAAG,UAAkE,CAAA;AAGnG,eAAO,MAAM,GAAG,GAAU,OAAO,UAAU,EAAE,SAAQ,YAAkB,KAAG,OAAO,CAAC,UAAU,CAA0D,CAAA;AACtJ,eAAO,MAAM,IAAI,GAAU,KAAK,UAAU,EAAE,MAAM,MAAM,EAAE,YAAQ,EAAE,SAAQ,YAAkB,KAAG,OAAO,CAAC,UAAU,CAGlH,CAAA;AAED,eAAO,MAAM,WAAW,GAAU,OAAO,UAAU,EAAE,SAAS,YAAY,KAAG,OAAO,CAAC,MAAM,CAA+E,CAAA;AAE1K,eAAO,MAAM,SAAS,GAAU,KAAK,OAAO,EAAE,SAAS,YAAY,KAAG,OAAO,CAAC,MAAM,CAA6C,CAAA;AAMjI,8FAA8F;AAC9F,MAAM,WAAW,OAAO;IAAG,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE;AAEhE,wBAAsB,UAAU,CAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAGpE;AACD,wBAAsB,SAAS,CAAE,IAAI,EAAE,UAAU,EAAE,MAAM,GAAE,YAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAG/F;AACD,eAAO,MAAM,UAAU,GAAI,QAAQ,UAAU,KAAG,MAA0E,CAAA;AAC1H,eAAO,MAAM,KAAK,GAAI,QAAQ,UAAU,KAAG,MAAkE,CAAA;AAC7G,eAAO,MAAM,aAAa,GAAI,KAAK,OAAO,KAAG,UAAU,GAAG,IAIzD,CAAA;AACD,eAAO,MAAM,QAAQ,GAAI,IAAI,OAAO,KAAG,UAAU,GAAG,IAInD,CAAA;AACD,eAAO,MAAM,IAAI,GAAU,OAAO,SAAS,EAAE,aAAa,UAAU,EAAE,SAAQ,YAAkB,KAAG,OAAO,CAAC,UAAU,CAGpH,CAAA;AAMD,wGAAwG;AACxG,MAAM,WAAW,MAAM;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAA;CAAE;AAEnE,wBAAsB,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAG,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAAC,CAM9I;AACD;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC5D,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAClH,OAAO,CAAC,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAAE,CAAC,CAO7C;AACD,wFAAwF;AACxF,wBAAsB,QAAQ,CAAE,GAAG,EAAE,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CA0B1G"}

package/dist/crypto.js

@@ -8,14 +8,28 @@
 // by the layer that issues it. Runs on globalThis.crypto.subtle in
 // browsers, Node >= 20, Deno and Bun alike.
 //
+// Every primitive below runs on the platform's SubtleCrypto unless the
+// caller hands its own (the holder passes the handle it resolved at
+// construction, note §3 Crypto).
+//
 // Determinism: every construction takes its entropy from the CALLER
 // (nonces, ephemeral seeds). Random helpers exist, but nothing here
 // calls them implicitly — that is what makes the whole stack replayable
 // and vector-testable.
 import { jcs, base58, fromBase58, b64uOf, fromB64u, calOK } from './core.js';
+import { CryptoUnavailableError } from './results.js';
 export { b64uOf, fromB64u, base58, fromBase58 };
 const te = new TextEncoder();
-const S = globalThis.crypto.subtle;
+/** The platform's SubtleCrypto, read at call time — never at import, so
+ *  the library loads in a runtime without WebCrypto and fails only where
+ *  it is used (note §3 Crypto). */
+export const platformSubtle = () => {
+    const s = globalThis.crypto?.subtle;
+    if (!s)
+        throw new CryptoUnavailableError(['subtle']);
+    return s;
+};
+const S = platformSubtle;
 // ── bytes ───────────────────────────────────────────────────────────────
 export const cat = (...bs) => {
     const o = new Uint8Array(bs.reduce((n, b) => n + b.length, 0));
@@ -28,26 +42,26 @@ export const cat = (...bs) => {
 };
 export const rand = (n) => globalThis.crypto.getRandomValues(new Uint8Array(n));
 // ── hashes, KDF, digests ────────────────────────────────────────────────
-export const sha = async (bytes) => new Uint8Array(await S.digest('SHA-256', bytes));
-export const hkdf = async (ikm, info, len = 32) => {
-    const k = await S.importKey('raw', ikm, 'HKDF', false, ['deriveBits']);
-    return new Uint8Array(await S.deriveBits({ name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: te.encode(info) }, k, len * 8));
+export const sha = async (bytes, subtle = S()) => new Uint8Array(await subtle.digest('SHA-256', bytes));
+export const hkdf = async (ikm, info, len = 32, subtle = S()) => {
+    const k = await subtle.importKey('raw', ikm, 'HKDF', false, ['deriveBits']);
+    return new Uint8Array(await subtle.deriveBits({ name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: te.encode(info) }, k, len * 8));
 };
 // multibase multihash (u, sha2-256) over raw BYTES — pair labels digest the nonce bytes
-export const digestBytes = async (bytes) => 'u' + b64uOf(cat(Uint8Array.from([0x12, 0x20]), await sha(bytes)));
+export const digestBytes = async (bytes, subtle) => 'u' + b64uOf(cat(Uint8Array.from([0x12, 0x20]), await sha(bytes, subtle)));
 // …and over the JCS of a document — the document digest of the stack
-export const digestDoc = async (obj) => digestBytes(te.encode(jcs(obj)));
+export const digestDoc = async (obj, subtle) => digestBytes(te.encode(jcs(obj)), subtle);
 // ── keys (Ed25519 signing, X25519 agreement; did:key / multikey) ────────
 const ED_PKCS8 = Uint8Array.from([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20]);
 const X_PKCS8 = Uint8Array.from([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x6e, 0x04, 0x22, 0x04, 0x20]);
-const jwkX = async (priv) => fromB64u((await S.exportKey('jwk', priv)).x);
+const jwkX = async (priv, subtle = S()) => fromB64u((await subtle.exportKey('jwk', priv)).x);
 export async function edFromSeed(seed) {
-    const priv = await S.importKey('pkcs8', cat(ED_PKCS8, seed), { name: 'Ed25519' }, true, ['sign']);
+    const priv = await S().importKey('pkcs8', cat(ED_PKCS8, seed), { name: 'Ed25519' }, true, ['sign']);
     return { priv, pubRaw: await jwkX(priv) };
 }
-export async function xFromSeed(seed) {
-    const priv = await S.importKey('pkcs8', cat(X_PKCS8, seed), { name: 'X25519' }, true, ['deriveBits']);
-    return { priv, pubRaw: await jwkX(priv) };
+export async function xFromSeed(seed, subtle = S()) {
+    const priv = await subtle.importKey('pkcs8', cat(X_PKCS8, seed), { name: 'X25519' }, true, ['deriveBits']);
+    return { priv, pubRaw: await jwkX(priv, subtle) };
 }
 export const anchorOfEd = (pubRaw) => 'did:key:z' + base58(cat(Uint8Array.from([0xed, 0x01]), pubRaw));
 export const mkOfX = (pubRaw) => 'z' + base58(cat(Uint8Array.from([0xec, 0x01]), pubRaw));
@@ -63,19 +77,38 @@ export const xRawOfMk = (mk) => {
     const b = fromBase58(mk.slice(1));
     return (b && b.length === 34 && b[0] === 0xec && b[1] === 0x01) ? b.subarray(2) : null;
 };
-export const ecdh = async (xPriv, theirPubRaw) => {
-    const pub = await S.importKey('raw', theirPubRaw, { name: 'X25519' }, false, []);
-    return new Uint8Array(await S.deriveBits({ name: 'X25519', public: pub }, xPriv, 256));
+export const ecdh = async (xPriv, theirPubRaw, subtle = S()) => {
+    const pub = await subtle.importKey('raw', theirPubRaw, { name: 'X25519' }, false, []);
+    return new Uint8Array(await subtle.deriveBits({ name: 'X25519', public: pub }, xPriv, 256));
 };
 export async function diSign(ctx, doc, created) {
     const cfg = { type: 'DataIntegrityProof', cryptosuite: 'eddsa-jcs-2022', created, verificationMethod: ctx.anchor + '#' + ctx.anchor.slice(8), proofPurpose: 'assertionMethod' };
     if ('@context' in doc)
         cfg['@context'] = doc['@context'];
     const hashData = cat(await sha(te.encode(jcs(cfg))), await sha(te.encode(jcs(doc))));
-    const sig = new Uint8Array(await S.sign({ name: 'Ed25519' }, ctx.ed.priv, hashData));
+    const sig = new Uint8Array(await S().sign({ name: 'Ed25519' }, ctx.ed.priv, hashData));
+    return { ...doc, proof: { ...cfg, proofValue: 'z' + base58(sig) } };
+}
+/**
+ * The same eddsa-jcs-2022 proof as diSign, with the signature from a
+ * signing function instead of a private key: the holder signs through
+ * its KeyProvider (`keys.sign(label, bytes)`, raw Ed25519 over the
+ * hashData), so modules never hold a key. Ed25519 is deterministic: for
+ * the same key, document and `created` the result is byte-identical to
+ * diSign's.
+ */
+export async function diSignWith(anchor, sign, doc, created, subtle) {
+    const cfg = { type: 'DataIntegrityProof', cryptosuite: 'eddsa-jcs-2022', created, verificationMethod: anchor + '#' + anchor.slice(8), proofPurpose: 'assertionMethod' };
+    if ('@context' in doc)
+        cfg['@context'] = doc['@context'];
+    const hashData = cat(await sha(te.encode(jcs(cfg)), subtle), await sha(te.encode(jcs(doc)), subtle));
+    const sig = await sign(hashData);
+    if (!(sig instanceof Uint8Array) || sig.length !== 64)
+        throw new Error('diSignWith: the signer must answer a 64-byte Ed25519 signature');
     return { ...doc, proof: { ...cfg, proofValue: 'z' + base58(sig) } };
 }
-export async function diVerify(doc, expectedAnchor) {
+/** `subtle`: the holder's resolved handle; without one the platform's, at call time. */
+export async function diVerify(doc, expectedAnchor, subtle) {
     const { proof, ...rest } = doc ?? {};
     if (typeof proof?.proofValue !== 'string' || typeof proof?.verificationMethod !== 'string')
         return false;
@@ -107,8 +140,9 @@ export async function diVerify(doc, expectedAnchor) {
     if (!sig || sig.length !== 64 || 'z' + base58(sig) !== zsig)
         return false;
     const { proofValue, ...cfg } = proof;
-    const hashData = cat(await sha(te.encode(jcs(cfg))), await sha(te.encode(jcs(rest))));
-    const pub = await S.importKey('raw', raw, { name: 'Ed25519' }, false, ['verify']);
-    return S.verify({ name: 'Ed25519' }, pub, sig, hashData);
+    const SS = subtle ?? S();
+    const hashData = cat(await sha(te.encode(jcs(cfg)), SS), await sha(te.encode(jcs(rest)), SS));
+    const pub = await SS.importKey('raw', raw, { name: 'Ed25519' }, false, ['verify']);
+    return SS.verify({ name: 'Ed25519' }, pub, sig, hashData);
 }
 //# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,iEAAiE;AACjE,iEAAiE;AACjE,qEAAqE;AACrE,EAAE;AACF,yEAAyE;AACzE,mEAAmE;AACnE,4CAA4C;AAC5C,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,wEAAwE;AACxE,uBAAuB;AACvB,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAC5E,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AAE/C,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAA;AAC5B,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAA;AAElC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,EAAgB,EAAc,EAAE;IACrD,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9D,IAAI,CAAC,GAAG,CAAC,CAAC;IAAC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;IAAC,CAAC;IAC7D,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AAEnG,2EAA2E;AAC3E,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,EAAE,KAAiB,EAAuB,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;AACrH,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,GAAe,EAAE,IAAY,EAAE,GAAG,GAAG,EAAE,EAAuB,EAAE;IACzF,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IACtE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;AAC1I,CAAC,CAAA;AACD,wFAAwF;AACxF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,KAAiB,EAAmB,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAC3I,qEAAqE;AACrE,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,GAAY,EAAmB,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAElG,2EAA2E;AAC3E,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAClI,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AACjI,MAAM,IAAI,GAAG,KAAK,EAAE,IAAe,EAAuB,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,CAAA;AAI1G,MAAM,CAAC,KAAK,UAAU,UAAU,CAAE,IAAgB;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IACjG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;AAC3C,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAE,IAAgB;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IACrG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;AAC3C,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAkB,EAAU,EAAE,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;AAC1H,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAkB,EAAU,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;AAC7G,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAY,EAAqB,EAAE;IAC/D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAA;IACxE,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACnD,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACxF,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,EAAW,EAAqB,EAAE;IACzD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IACxD,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACjC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACxF,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,KAAgB,EAAE,WAAuB,EAAuB,EAAE;IAC3F,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAChF,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;AACxF,CAAC,CAAA;AASD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAiC,GAAW,EAAE,GAAM,EAAE,OAAe;IAC/F,MAAM,GAAG,GAAwB,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAA;IACpM,IAAI,UAAU,IAAI,GAAG;QAAE,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACpF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;IACpF,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAA;AACrE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAE,GAAQ,EAAE,cAAuB;IAC/D,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,CAAA;IACpC,IAAI,OAAO,KAAK,EAAE,UAAU,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,kBAAkB,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACxG,kEAAkE;IAClE,qEAAqE;IACrE,wEAAwE;IACxE,8BAA8B;IAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,WAAW,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAA;IAC/F,IAAI,KAAK,CAAC,YAAY,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAA;IAC1D,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW,CAAA;IAC9D,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3E,IAAI,cAAc,IAAI,KAAK,KAAK,cAAc;QAAE,OAAO,KAAK,CAAA;IAC5D,IAAI,UAAU,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAChG,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAA;IAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACrC,6EAA6E;IAC7E,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACzE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,CAAA;IACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;IACrF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IACjF,OAAO,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC1D,CAAC","sourcesContent":["// crypto — the primitives, and nothing above them.\n//\n// Byte helpers, hashes, HKDF, key pairs (Ed25519 signing, X25519\n// agreement), the did:key / multikey renderings, ECDH — plus the\n// eddsa-jcs-2022 Data Integrity proof, which every layer signs with.\n//\n// This module answers \"how\", never \"what\": what a proof MEANS is decided\n// by the layer that issues it. Runs on globalThis.crypto.subtle in\n// browsers, Node >= 20, Deno and Bun alike.\n//\n// Determinism: every construction takes its entropy from the CALLER\n// (nonces, ephemeral seeds). Random helpers exist, but nothing here\n// calls them implicitly — that is what makes the whole stack replayable\n// and vector-testable.\nimport { jcs, base58, fromBase58, b64uOf, fromB64u, calOK } from './core.js'\nexport { b64uOf, fromB64u, base58, fromBase58 }\n\nconst te = new TextEncoder()\nconst S = globalThis.crypto.subtle\n\n// ── bytes ───────────────────────────────────────────────────────────────\nexport const cat = (...bs: Uint8Array[]): Uint8Array => {\n  const o = new Uint8Array(bs.reduce((n, b) => n + b.length, 0))\n  let i = 0; for (const b of bs) { o.set(b, i); i += b.length }\n  return o\n}\nexport const rand = (n: number): Uint8Array => globalThis.crypto.getRandomValues(new Uint8Array(n))\n\n// ── hashes, KDF, digests ────────────────────────────────────────────────\nexport const sha = async (bytes: Uint8Array): Promise<Uint8Array> => new Uint8Array(await S.digest('SHA-256', bytes))\nexport const hkdf = async (ikm: Uint8Array, info: string, len = 32): Promise<Uint8Array> => {\n  const k = await S.importKey('raw', ikm, 'HKDF', false, ['deriveBits'])\n  return new Uint8Array(await S.deriveBits({ name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: te.encode(info) }, k, len * 8))\n}\n// multibase multihash (u, sha2-256) over raw BYTES — pair labels digest the nonce bytes\nexport const digestBytes = async (bytes: Uint8Array): Promise<string> => 'u' + b64uOf(cat(Uint8Array.from([0x12, 0x20]), await sha(bytes)))\n// …and over the JCS of a document — the document digest of the stack\nexport const digestDoc = async (obj: unknown): Promise<string> => digestBytes(te.encode(jcs(obj)))\n\n// ── keys (Ed25519 signing, X25519 agreement; did:key / multikey) ────────\nconst ED_PKCS8 = Uint8Array.from([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20])\nconst X_PKCS8 = Uint8Array.from([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x6e, 0x04, 0x22, 0x04, 0x20])\nconst jwkX = async (priv: CryptoKey): Promise<Uint8Array> => fromB64u((await S.exportKey('jwk', priv)).x!)\n/** A key pair as this library carries it: the private CryptoKey plus the raw public bytes. */\nexport interface KeyPair { priv: CryptoKey, pubRaw: Uint8Array }\n\nexport async function edFromSeed (seed: Uint8Array): Promise<KeyPair> {\n  const priv = await S.importKey('pkcs8', cat(ED_PKCS8, seed), { name: 'Ed25519' }, true, ['sign'])\n  return { priv, pubRaw: await jwkX(priv) }\n}\nexport async function xFromSeed (seed: Uint8Array): Promise<KeyPair> {\n  const priv = await S.importKey('pkcs8', cat(X_PKCS8, seed), { name: 'X25519' }, true, ['deriveBits'])\n  return { priv, pubRaw: await jwkX(priv) }\n}\nexport const anchorOfEd = (pubRaw: Uint8Array): string => 'did:key:z' + base58(cat(Uint8Array.from([0xed, 0x01]), pubRaw))\nexport const mkOfX = (pubRaw: Uint8Array): string => 'z' + base58(cat(Uint8Array.from([0xec, 0x01]), pubRaw))\nexport const edRawOfAnchor = (did: unknown): Uint8Array | null => {\n  if (typeof did !== 'string' || !did.startsWith('did:key:z')) return null\n  const b = fromBase58(did.slice('did:key:z'.length))\n  return (b && b.length === 34 && b[0] === 0xed && b[1] === 0x01) ? b.subarray(2) : null\n}\nexport const xRawOfMk = (mk: unknown): Uint8Array | null => {\n  if (typeof mk !== 'string' || mk[0] !== 'z') return null\n  const b = fromBase58(mk.slice(1))\n  return (b && b.length === 34 && b[0] === 0xec && b[1] === 0x01) ? b.subarray(2) : null\n}\nexport const ecdh = async (xPriv: CryptoKey, theirPubRaw: Uint8Array): Promise<Uint8Array> => {\n  const pub = await S.importKey('raw', theirPubRaw, { name: 'X25519' }, false, [])\n  return new Uint8Array(await S.deriveBits({ name: 'X25519', public: pub }, xPriv, 256))\n}\n\n// ── eddsa-jcs-2022 Data Integrity (W3C-true; Encounter §2.3) ──────────\n// hashData = SHA256(JCS(proofConfig incl. @context where the document has\n// one)) || SHA256(JCS(document without proof)); Ed25519 over hashData;\n// proofValue = z-base58btc of the exactly-64-byte signature.\n/** What a signer must offer: its anchor and its Ed25519 key. A full identity Context satisfies this. */\nexport interface Signer { anchor: string, ed: { priv: CryptoKey } }\n\nexport async function diSign<T extends Record<string, any>> (ctx: Signer, doc: T, created: string): Promise<T & { proof: Record<string, any> }> {\n  const cfg: Record<string, any> = { type: 'DataIntegrityProof', cryptosuite: 'eddsa-jcs-2022', created, verificationMethod: ctx.anchor + '#' + ctx.anchor.slice(8), proofPurpose: 'assertionMethod' }\n  if ('@context' in doc) cfg['@context'] = doc['@context']\n  const hashData = cat(await sha(te.encode(jcs(cfg))), await sha(te.encode(jcs(doc))))\n  const sig = new Uint8Array(await S.sign({ name: 'Ed25519' }, ctx.ed.priv, hashData))\n  return { ...doc, proof: { ...cfg, proofValue: 'z' + base58(sig) } }\n}\nexport async function diVerify (doc: any, expectedAnchor?: string): Promise<boolean> {\n  const { proof, ...rest } = doc ?? {}\n  if (typeof proof?.proofValue !== 'string' || typeof proof?.verificationMethod !== 'string') return false\n  // M-3 (review 1): this predicate verifies THE RLTP proof, not any\n  // signature that happens to be valid under the key — a config with a\n  // foreign type, suite, purpose or timestamp form is false here, whether\n  // or not a schema runs first.\n  if (proof.type !== 'DataIntegrityProof' || proof.cryptosuite !== 'eddsa-jcs-2022') return false\n  if (proof.proofPurpose !== 'assertionMethod') return false\n  if (typeof proof.created !== 'string' || !calOK(proof.created)) return false\n  const vmDid = proof.verificationMethod.split('#')[0] as string\n  if (proof.verificationMethod !== vmDid + '#' + vmDid.slice(8)) return false\n  if (expectedAnchor && vmDid !== expectedAnchor) return false\n  if ('@context' in rest && jcs(proof['@context'] ?? null) !== jcs(rest['@context'])) return false\n  const raw = edRawOfAnchor(vmDid)\n  if (!raw) return false\n  const zsig = proof.proofValue\n  if (typeof zsig !== 'string' || zsig[0] !== 'z') return false\n  const sig = fromBase58(zsig.slice(1))\n  // exactly 64 bytes, canonical base58btc — no left-pad repair (Encounter 2.3)\n  if (!sig || sig.length !== 64 || 'z' + base58(sig) !== zsig) return false\n  const { proofValue, ...cfg } = proof\n  const hashData = cat(await sha(te.encode(jcs(cfg))), await sha(te.encode(jcs(rest))))\n  const pub = await S.importKey('raw', raw, { name: 'Ed25519' }, false, ['verify'])\n  return S.verify({ name: 'Ed25519' }, pub, sig, hashData)\n}\n\n"]}
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,iEAAiE;AACjE,iEAAiE;AACjE,qEAAqE;AACrE,EAAE;AACF,yEAAyE;AACzE,mEAAmE;AACnE,4CAA4C;AAC5C,EAAE;AACF,uEAAuE;AACvE,oEAAoE;AACpE,iCAAiC;AACjC,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,wEAAwE;AACxE,uBAAuB;AACvB,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;AAE/C,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAA;AAC5B;;mCAEmC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,GAAiB,EAAE;IAC/C,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAA;IACnC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IACpD,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AACD,MAAM,CAAC,GAAG,cAAc,CAAA;AAExB,2EAA2E;AAC3E,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,EAAgB,EAAc,EAAE;IACrD,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9D,IAAI,CAAC,GAAG,CAAC,CAAC;IAAC,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAA;IAAC,CAAC;IAC7D,OAAO,CAAC,CAAA;AACV,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;AAEnG,2EAA2E;AAC3E,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,EAAE,KAAiB,EAAE,SAAuB,CAAC,EAAE,EAAuB,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;AACtJ,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,GAAe,EAAE,IAAY,EAAE,GAAG,GAAG,EAAE,EAAE,SAAuB,CAAC,EAAE,EAAuB,EAAE;IACrH,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IAC3E,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;AAC/I,CAAC,CAAA;AACD,wFAAwF;AACxF,MAAM,CAAC,MAAM,WAAW,GAAG,KAAK,EAAE,KAAiB,EAAE,MAAqB,EAAmB,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;AAC1K,qEAAqE;AACrE,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAAE,GAAY,EAAE,MAAqB,EAAmB,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;AAEjI,2EAA2E;AAC3E,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AAClI,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AACjI,MAAM,IAAI,GAAG,KAAK,EAAE,IAAe,EAAE,SAAuB,CAAC,EAAE,EAAuB,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,CAAA;AAI3I,MAAM,CAAC,KAAK,UAAU,UAAU,CAAE,IAAgB;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IACnG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAA;AAC3C,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAE,IAAgB,EAAE,SAAuB,CAAC,EAAE;IAC3E,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,CAAA;IAC1G,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAA;AACnD,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAkB,EAAU,EAAE,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;AAC1H,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,MAAkB,EAAU,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;AAC7G,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAY,EAAqB,EAAE;IAC/D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAA;IACxE,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;IACnD,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACxF,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,EAAW,EAAqB,EAAE;IACzD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IACxD,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACjC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACxF,CAAC,CAAA;AACD,MAAM,CAAC,MAAM,IAAI,GAAG,KAAK,EAAE,KAAgB,EAAE,WAAuB,EAAE,SAAuB,CAAC,EAAE,EAAuB,EAAE;IACvH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IACrF,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;AAC7F,CAAC,CAAA;AASD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAiC,GAAW,EAAE,GAAM,EAAE,OAAe;IAC/F,MAAM,GAAG,GAAwB,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,CAAC,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAA;IACpM,IAAI,UAAU,IAAI,GAAG;QAAE,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACpF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;IACtF,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAA;AACrE,CAAC;AACD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EAAE,IAAmD,EAAE,GAAM,EAAE,OAAe,EAAE,MAAqB;IAEnH,MAAM,GAAG,GAAwB,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,gBAAgB,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,iBAAiB,EAAE,CAAA;IAC5L,IAAI,UAAU,IAAI,GAAG;QAAE,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IACpG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAA;IAChC,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;IACxI,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,UAAU,EAAE,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAA;AACrE,CAAC;AACD,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAE,GAAQ,EAAE,cAAuB,EAAE,MAAqB;IACtF,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,CAAA;IACpC,IAAI,OAAO,KAAK,EAAE,UAAU,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,kBAAkB,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACxG,kEAAkE;IAClE,qEAAqE;IACrE,wEAAwE;IACxE,8BAA8B;IAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,IAAI,KAAK,CAAC,WAAW,KAAK,gBAAgB;QAAE,OAAO,KAAK,CAAA;IAC/F,IAAI,KAAK,CAAC,YAAY,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAA;IAC1D,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW,CAAA;IAC9D,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3E,IAAI,cAAc,IAAI,KAAK,KAAK,cAAc;QAAE,OAAO,KAAK,CAAA;IAC5D,IAAI,UAAU,IAAI,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAChG,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IACtB,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAA;IAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACrC,6EAA6E;IAC7E,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACzE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,CAAA;IACpC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,EAAE,CAAA;IACxB,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IAC7F,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IAClF,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC3D,CAAC","sourcesContent":["// crypto — the primitives, and nothing above them.\n//\n// Byte helpers, hashes, HKDF, key pairs (Ed25519 signing, X25519\n// agreement), the did:key / multikey renderings, ECDH — plus the\n// eddsa-jcs-2022 Data Integrity proof, which every layer signs with.\n//\n// This module answers \"how\", never \"what\": what a proof MEANS is decided\n// by the layer that issues it. Runs on globalThis.crypto.subtle in\n// browsers, Node >= 20, Deno and Bun alike.\n//\n// Every primitive below runs on the platform's SubtleCrypto unless the\n// caller hands its own (the holder passes the handle it resolved at\n// construction, note §3 Crypto).\n//\n// Determinism: every construction takes its entropy from the CALLER\n// (nonces, ephemeral seeds). Random helpers exist, but nothing here\n// calls them implicitly — that is what makes the whole stack replayable\n// and vector-testable.\nimport { jcs, base58, fromBase58, b64uOf, fromB64u, calOK } from './core.js'\nimport { CryptoUnavailableError } from './results.js'\nexport { b64uOf, fromB64u, base58, fromBase58 }\n\nconst te = new TextEncoder()\n/** The platform's SubtleCrypto, read at call time — never at import, so\n *  the library loads in a runtime without WebCrypto and fails only where\n *  it is used (note §3 Crypto). */\nexport const platformSubtle = (): SubtleCrypto => {\n  const s = globalThis.crypto?.subtle\n  if (!s) throw new CryptoUnavailableError(['subtle'])\n  return s\n}\nconst S = platformSubtle\n\n// ── bytes ───────────────────────────────────────────────────────────────\nexport const cat = (...bs: Uint8Array[]): Uint8Array => {\n  const o = new Uint8Array(bs.reduce((n, b) => n + b.length, 0))\n  let i = 0; for (const b of bs) { o.set(b, i); i += b.length }\n  return o\n}\nexport const rand = (n: number): Uint8Array => globalThis.crypto.getRandomValues(new Uint8Array(n))\n\n// ── hashes, KDF, digests ────────────────────────────────────────────────\nexport const sha = async (bytes: Uint8Array, subtle: SubtleCrypto = S()): Promise<Uint8Array> => new Uint8Array(await subtle.digest('SHA-256', bytes))\nexport const hkdf = async (ikm: Uint8Array, info: string, len = 32, subtle: SubtleCrypto = S()): Promise<Uint8Array> => {\n  const k = await subtle.importKey('raw', ikm, 'HKDF', false, ['deriveBits'])\n  return new Uint8Array(await subtle.deriveBits({ name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: te.encode(info) }, k, len * 8))\n}\n// multibase multihash (u, sha2-256) over raw BYTES — pair labels digest the nonce bytes\nexport const digestBytes = async (bytes: Uint8Array, subtle?: SubtleCrypto): Promise<string> => 'u' + b64uOf(cat(Uint8Array.from([0x12, 0x20]), await sha(bytes, subtle)))\n// …and over the JCS of a document — the document digest of the stack\nexport const digestDoc = async (obj: unknown, subtle?: SubtleCrypto): Promise<string> => digestBytes(te.encode(jcs(obj)), subtle)\n\n// ── keys (Ed25519 signing, X25519 agreement; did:key / multikey) ────────\nconst ED_PKCS8 = Uint8Array.from([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x04, 0x22, 0x04, 0x20])\nconst X_PKCS8 = Uint8Array.from([0x30, 0x2e, 0x02, 0x01, 0x00, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x6e, 0x04, 0x22, 0x04, 0x20])\nconst jwkX = async (priv: CryptoKey, subtle: SubtleCrypto = S()): Promise<Uint8Array> => fromB64u((await subtle.exportKey('jwk', priv)).x!)\n/** A key pair as this library carries it: the private CryptoKey plus the raw public bytes. */\nexport interface KeyPair { priv: CryptoKey, pubRaw: Uint8Array }\n\nexport async function edFromSeed (seed: Uint8Array): Promise<KeyPair> {\n  const priv = await S().importKey('pkcs8', cat(ED_PKCS8, seed), { name: 'Ed25519' }, true, ['sign'])\n  return { priv, pubRaw: await jwkX(priv) }\n}\nexport async function xFromSeed (seed: Uint8Array, subtle: SubtleCrypto = S()): Promise<KeyPair> {\n  const priv = await subtle.importKey('pkcs8', cat(X_PKCS8, seed), { name: 'X25519' }, true, ['deriveBits'])\n  return { priv, pubRaw: await jwkX(priv, subtle) }\n}\nexport const anchorOfEd = (pubRaw: Uint8Array): string => 'did:key:z' + base58(cat(Uint8Array.from([0xed, 0x01]), pubRaw))\nexport const mkOfX = (pubRaw: Uint8Array): string => 'z' + base58(cat(Uint8Array.from([0xec, 0x01]), pubRaw))\nexport const edRawOfAnchor = (did: unknown): Uint8Array | null => {\n  if (typeof did !== 'string' || !did.startsWith('did:key:z')) return null\n  const b = fromBase58(did.slice('did:key:z'.length))\n  return (b && b.length === 34 && b[0] === 0xed && b[1] === 0x01) ? b.subarray(2) : null\n}\nexport const xRawOfMk = (mk: unknown): Uint8Array | null => {\n  if (typeof mk !== 'string' || mk[0] !== 'z') return null\n  const b = fromBase58(mk.slice(1))\n  return (b && b.length === 34 && b[0] === 0xec && b[1] === 0x01) ? b.subarray(2) : null\n}\nexport const ecdh = async (xPriv: CryptoKey, theirPubRaw: Uint8Array, subtle: SubtleCrypto = S()): Promise<Uint8Array> => {\n  const pub = await subtle.importKey('raw', theirPubRaw, { name: 'X25519' }, false, [])\n  return new Uint8Array(await subtle.deriveBits({ name: 'X25519', public: pub }, xPriv, 256))\n}\n\n// ── eddsa-jcs-2022 Data Integrity (W3C-true; Encounter §2.3) ──────────\n// hashData = SHA256(JCS(proofConfig incl. @context where the document has\n// one)) || SHA256(JCS(document without proof)); Ed25519 over hashData;\n// proofValue = z-base58btc of the exactly-64-byte signature.\n/** What a signer must offer: its anchor and its Ed25519 key. A full identity Context satisfies this. */\nexport interface Signer { anchor: string, ed: { priv: CryptoKey } }\n\nexport async function diSign<T extends Record<string, any>> (ctx: Signer, doc: T, created: string): Promise<T & { proof: Record<string, any> }> {\n  const cfg: Record<string, any> = { type: 'DataIntegrityProof', cryptosuite: 'eddsa-jcs-2022', created, verificationMethod: ctx.anchor + '#' + ctx.anchor.slice(8), proofPurpose: 'assertionMethod' }\n  if ('@context' in doc) cfg['@context'] = doc['@context']\n  const hashData = cat(await sha(te.encode(jcs(cfg))), await sha(te.encode(jcs(doc))))\n  const sig = new Uint8Array(await S().sign({ name: 'Ed25519' }, ctx.ed.priv, hashData))\n  return { ...doc, proof: { ...cfg, proofValue: 'z' + base58(sig) } }\n}\n/**\n * The same eddsa-jcs-2022 proof as diSign, with the signature from a\n * signing function instead of a private key: the holder signs through\n * its KeyProvider (`keys.sign(label, bytes)`, raw Ed25519 over the\n * hashData), so modules never hold a key. Ed25519 is deterministic: for\n * the same key, document and `created` the result is byte-identical to\n * diSign's.\n */\nexport async function diSignWith<T extends Record<string, any>> (\n  anchor: string, sign: (hashData: Uint8Array) => Promise<Uint8Array>, doc: T, created: string, subtle?: SubtleCrypto,\n): Promise<T & { proof: Record<string, any> }> {\n  const cfg: Record<string, any> = { type: 'DataIntegrityProof', cryptosuite: 'eddsa-jcs-2022', created, verificationMethod: anchor + '#' + anchor.slice(8), proofPurpose: 'assertionMethod' }\n  if ('@context' in doc) cfg['@context'] = doc['@context']\n  const hashData = cat(await sha(te.encode(jcs(cfg)), subtle), await sha(te.encode(jcs(doc)), subtle))\n  const sig = await sign(hashData)\n  if (!(sig instanceof Uint8Array) || sig.length !== 64) throw new Error('diSignWith: the signer must answer a 64-byte Ed25519 signature')\n  return { ...doc, proof: { ...cfg, proofValue: 'z' + base58(sig) } }\n}\n/** `subtle`: the holder's resolved handle; without one the platform's, at call time. */\nexport async function diVerify (doc: any, expectedAnchor?: string, subtle?: SubtleCrypto): Promise<boolean> {\n  const { proof, ...rest } = doc ?? {}\n  if (typeof proof?.proofValue !== 'string' || typeof proof?.verificationMethod !== 'string') return false\n  // M-3 (review 1): this predicate verifies THE RLTP proof, not any\n  // signature that happens to be valid under the key — a config with a\n  // foreign type, suite, purpose or timestamp form is false here, whether\n  // or not a schema runs first.\n  if (proof.type !== 'DataIntegrityProof' || proof.cryptosuite !== 'eddsa-jcs-2022') return false\n  if (proof.proofPurpose !== 'assertionMethod') return false\n  if (typeof proof.created !== 'string' || !calOK(proof.created)) return false\n  const vmDid = proof.verificationMethod.split('#')[0] as string\n  if (proof.verificationMethod !== vmDid + '#' + vmDid.slice(8)) return false\n  if (expectedAnchor && vmDid !== expectedAnchor) return false\n  if ('@context' in rest && jcs(proof['@context'] ?? null) !== jcs(rest['@context'])) return false\n  const raw = edRawOfAnchor(vmDid)\n  if (!raw) return false\n  const zsig = proof.proofValue\n  if (typeof zsig !== 'string' || zsig[0] !== 'z') return false\n  const sig = fromBase58(zsig.slice(1))\n  // exactly 64 bytes, canonical base58btc — no left-pad repair (Encounter 2.3)\n  if (!sig || sig.length !== 64 || 'z' + base58(sig) !== zsig) return false\n  const { proofValue, ...cfg } = proof\n  const SS = subtle ?? S()\n  const hashData = cat(await sha(te.encode(jcs(cfg)), SS), await sha(te.encode(jcs(rest)), SS))\n  const pub = await SS.importKey('raw', raw, { name: 'Ed25519' }, false, ['verify'])\n  return SS.verify({ name: 'Ed25519' }, pub, sig, hashData)\n}\n\n"]}