@riddledc/riddle-proof 0.8.82 → 0.8.84

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -2,6 +2,8 @@ import { JsonValue } from './types.cjs';
2
2
  import './public-state.cjs';
3
3
 
4
4
  declare const RIDDLE_PROOF_SEMANTIC_CERTIFICATE_VERSION: "riddle-proof.semantic-certificate.v0";
5
+ declare const RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_VERSION: "riddle-proof.semantic-certificate-closure.v0";
6
+ declare const RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_MAX_CERTIFICATES = 4096;
5
7
  interface RiddleProofSemanticScope {
6
8
  repository: string;
7
9
  revision: string;
@@ -17,6 +19,9 @@ interface RiddleProofSemanticClaimRef {
17
19
  interface RiddleProofSemanticClaim extends RiddleProofSemanticClaimRef {
18
20
  label: string;
19
21
  }
22
+ interface RiddleProofSemanticClaimExpectation extends RiddleProofSemanticClaimRef {
23
+ label?: string;
24
+ }
20
25
  interface RiddleProofSemanticEvidenceRef {
21
26
  receipt_id: string;
22
27
  artifact_digest: string;
@@ -46,10 +51,11 @@ interface RiddleProofSemanticRule {
46
51
  premises: [RiddleProofSemanticClaimRef, ...RiddleProofSemanticClaimRef[]];
47
52
  conclusion: RiddleProofSemanticClaim;
48
53
  }
54
+ type RiddleProofSemanticAssurance = "runtime_contract_accepted" | "declared_runtime_rule";
49
55
  interface RiddleProofSemanticPremise {
50
56
  certificate_id: string;
51
57
  derivation_kind: RiddleProofSemanticDerivation["kind"];
52
- assurance: RiddleProofSemanticDerivation["assurance"];
58
+ assurance: RiddleProofSemanticAssurance;
53
59
  scope: RiddleProofSemanticScope;
54
60
  claim: RiddleProofSemanticClaim;
55
61
  evidence: RiddleProofSemanticEvidenceBundle;
@@ -134,9 +140,171 @@ type RiddleProofSemanticCompositionResult = {
134
140
  ok: false;
135
141
  error: RiddleProofSemanticCompositionError;
136
142
  };
143
+ interface RiddleProofSemanticCertificateClosure {
144
+ version: typeof RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_VERSION;
145
+ root_certificate_id: string;
146
+ certificates: [
147
+ RiddleProofSemanticCertificate,
148
+ ...RiddleProofSemanticCertificate[]
149
+ ];
150
+ }
151
+ type RiddleProofSemanticPremiseSnapshotField = "derivation_kind" | "assurance" | "scope" | "claim" | "evidence";
152
+ interface RiddleProofSemanticCertificateClosureInvalid {
153
+ code: "invalid_closure";
154
+ message: string;
155
+ }
156
+ interface RiddleProofSemanticCertificateClosureCertificateInvalid {
157
+ code: "invalid_closure_certificate";
158
+ input_index: number;
159
+ message: string;
160
+ }
161
+ interface RiddleProofSemanticCertificateClosureDuplicateId {
162
+ code: "duplicate_certificate_id";
163
+ certificate_id: string;
164
+ first_index: number;
165
+ duplicate_index: number;
166
+ message: string;
167
+ }
168
+ interface RiddleProofSemanticCertificateClosureRootMissing {
169
+ code: "root_certificate_missing";
170
+ root_certificate_id: string;
171
+ message: string;
172
+ }
173
+ interface RiddleProofSemanticCertificateClosureDanglingPremise {
174
+ code: "dangling_premise";
175
+ parent_certificate_id: string;
176
+ premise_index: number;
177
+ premise_certificate_id: string;
178
+ message: string;
179
+ }
180
+ interface RiddleProofSemanticCertificateClosurePremiseMismatch {
181
+ code: "premise_snapshot_mismatch";
182
+ parent_certificate_id: string;
183
+ premise_index: number;
184
+ premise_certificate_id: string;
185
+ field: RiddleProofSemanticPremiseSnapshotField;
186
+ message: string;
187
+ }
188
+ interface RiddleProofSemanticCertificateClosureCycle {
189
+ code: "certificate_cycle";
190
+ certificate_ids: string[];
191
+ message: string;
192
+ }
193
+ interface RiddleProofSemanticCertificateClosureUnreachable {
194
+ code: "unreachable_certificates";
195
+ certificate_ids: string[];
196
+ message: string;
197
+ }
198
+ type RiddleProofSemanticCertificateClosureValidationError = RiddleProofSemanticCertificateClosureInvalid | RiddleProofSemanticCertificateClosureCertificateInvalid | RiddleProofSemanticCertificateClosureDuplicateId | RiddleProofSemanticCertificateClosureRootMissing | RiddleProofSemanticCertificateClosureDanglingPremise | RiddleProofSemanticCertificateClosurePremiseMismatch | RiddleProofSemanticCertificateClosureCycle | RiddleProofSemanticCertificateClosureUnreachable;
199
+ type RiddleProofSemanticCertificateClosureValidationResult = {
200
+ ok: true;
201
+ closure: RiddleProofSemanticCertificateClosure;
202
+ root_certificate: RiddleProofSemanticCertificate;
203
+ } | {
204
+ ok: false;
205
+ error: RiddleProofSemanticCertificateClosureValidationError;
206
+ };
207
+ interface CreateRiddleProofSemanticAtomicCertificateClosureInput {
208
+ certificate: unknown;
209
+ }
210
+ interface ComposeRiddleProofSemanticCertificateClosuresInput {
211
+ rule: RiddleProofSemanticRule;
212
+ closures: [unknown, ...unknown[]];
213
+ issued_at?: string;
214
+ }
215
+ interface RiddleProofSemanticCertificateClosureInputInvalid {
216
+ code: "input_closure_invalid";
217
+ input_index: number;
218
+ cause: RiddleProofSemanticCertificateClosureValidationError;
219
+ message: string;
220
+ }
221
+ interface RiddleProofSemanticCertificateClosureIdCollision {
222
+ code: "certificate_id_collision";
223
+ certificate_id: string;
224
+ message: string;
225
+ }
226
+ interface RiddleProofSemanticCertificateClosureConstructionFailed {
227
+ code: "closure_construction_failed";
228
+ cause: RiddleProofSemanticCertificateClosureValidationError;
229
+ message: string;
230
+ }
231
+ type RiddleProofSemanticCertificateClosureCompositionError = RiddleProofSemanticCompositionError | RiddleProofSemanticCertificateClosureInputInvalid | RiddleProofSemanticCertificateClosureIdCollision | RiddleProofSemanticCertificateClosureConstructionFailed;
232
+ type RiddleProofSemanticCertificateClosureCompositionResult = {
233
+ ok: true;
234
+ certificate: RiddleProofSemanticCertificate;
235
+ closure: RiddleProofSemanticCertificateClosure;
236
+ } | {
237
+ ok: false;
238
+ error: RiddleProofSemanticCertificateClosureCompositionError;
239
+ };
240
+ interface MatchRiddleProofSemanticCertificateInput {
241
+ certificate: unknown;
242
+ expected_certificate_id: string;
243
+ expected_scope: RiddleProofSemanticScope;
244
+ expected_claim: RiddleProofSemanticClaimExpectation;
245
+ expected_assurance: RiddleProofSemanticAssurance;
246
+ }
247
+ interface RiddleProofSemanticCertificateInvalid {
248
+ code: "invalid_certificate";
249
+ message: string;
250
+ }
251
+ interface RiddleProofSemanticCertificateIdMismatch {
252
+ code: "certificate_id_mismatch";
253
+ expected: string;
254
+ observed: string;
255
+ message: string;
256
+ }
257
+ interface RiddleProofSemanticCertificateMatchScopeMismatch {
258
+ code: "scope_mismatch";
259
+ field: RiddleProofSemanticScopeField;
260
+ expected: string;
261
+ observed: string;
262
+ message: string;
263
+ }
264
+ interface RiddleProofSemanticCertificateClaimMismatch {
265
+ code: "claim_mismatch";
266
+ expected: RiddleProofSemanticClaimRef;
267
+ observed: RiddleProofSemanticClaimRef;
268
+ message: string;
269
+ }
270
+ interface RiddleProofSemanticCertificateAssuranceMismatch {
271
+ code: "assurance_mismatch";
272
+ expected: RiddleProofSemanticAssurance;
273
+ observed: RiddleProofSemanticAssurance;
274
+ message: string;
275
+ }
276
+ type RiddleProofSemanticCertificateMatchError = RiddleProofSemanticCertificateInvalid | RiddleProofSemanticCertificateIdMismatch | RiddleProofSemanticCertificateMatchScopeMismatch | RiddleProofSemanticCertificateClaimMismatch | RiddleProofSemanticCertificateAssuranceMismatch;
277
+ type RiddleProofSemanticCertificateMatchResult = {
278
+ ok: true;
279
+ certificate: RiddleProofSemanticCertificate;
280
+ } | {
281
+ ok: false;
282
+ error: RiddleProofSemanticCertificateMatchError;
283
+ };
284
+ interface MatchRiddleProofSemanticCertificateClosureInput {
285
+ closure: unknown;
286
+ expected_root_certificate_id: string;
287
+ expected_scope: RiddleProofSemanticScope;
288
+ expected_claim: RiddleProofSemanticClaimExpectation;
289
+ expected_assurance: RiddleProofSemanticAssurance;
290
+ }
291
+ type RiddleProofSemanticCertificateClosureMatchError = RiddleProofSemanticCertificateClosureValidationError | RiddleProofSemanticCertificateMatchError;
292
+ type RiddleProofSemanticCertificateClosureMatchResult = {
293
+ ok: true;
294
+ closure: RiddleProofSemanticCertificateClosure;
295
+ root_certificate: RiddleProofSemanticCertificate;
296
+ } | {
297
+ ok: false;
298
+ error: RiddleProofSemanticCertificateClosureMatchError;
299
+ };
137
300
  declare function riddleProofSemanticScopesEqual(left: RiddleProofSemanticScope, right: RiddleProofSemanticScope): boolean;
138
301
  declare function createRiddleProofSemanticCertificate<Observation>(input: CreateRiddleProofSemanticCertificateInput<Observation>): RiddleProofSemanticCertificationResult;
139
302
  declare function parseRiddleProofSemanticCertificate(value: unknown): RiddleProofSemanticCertificate;
303
+ declare function matchRiddleProofSemanticCertificate(input: MatchRiddleProofSemanticCertificateInput): RiddleProofSemanticCertificateMatchResult;
140
304
  declare function composeRiddleProofSemanticCertificates(input: ComposeRiddleProofSemanticCertificatesInput): RiddleProofSemanticCompositionResult;
305
+ declare function validateRiddleProofSemanticCertificateClosure(value: unknown): RiddleProofSemanticCertificateClosureValidationResult;
306
+ declare function createRiddleProofSemanticAtomicCertificateClosure(input: CreateRiddleProofSemanticAtomicCertificateClosureInput): RiddleProofSemanticCertificateClosureValidationResult;
307
+ declare function composeRiddleProofSemanticCertificateClosures(input: ComposeRiddleProofSemanticCertificateClosuresInput): RiddleProofSemanticCertificateClosureCompositionResult;
308
+ declare function matchRiddleProofSemanticCertificateClosure(input: MatchRiddleProofSemanticCertificateClosureInput): RiddleProofSemanticCertificateClosureMatchResult;
141
309
 
142
- export { type ComposeRiddleProofSemanticCertificatesInput, type CreateRiddleProofSemanticCertificateInput, RIDDLE_PROOF_SEMANTIC_CERTIFICATE_VERSION, type RiddleProofSemanticCertificate, type RiddleProofSemanticCertificationResult, type RiddleProofSemanticClaim, type RiddleProofSemanticClaimRef, type RiddleProofSemanticCompositionDerivation, type RiddleProofSemanticCompositionError, type RiddleProofSemanticCompositionResult, type RiddleProofSemanticContract, type RiddleProofSemanticContractDerivation, type RiddleProofSemanticContractError, type RiddleProofSemanticContractRef, type RiddleProofSemanticContractRejected, type RiddleProofSemanticDerivation, type RiddleProofSemanticEvidenceBundle, type RiddleProofSemanticEvidenceRef, type RiddleProofSemanticPremise, type RiddleProofSemanticPremiseCountMismatch, type RiddleProofSemanticPremiseMismatch, type RiddleProofSemanticRule, type RiddleProofSemanticRuntimeContract, type RiddleProofSemanticScope, type RiddleProofSemanticScopeField, type RiddleProofSemanticScopeMismatch, composeRiddleProofSemanticCertificates, createRiddleProofSemanticCertificate, parseRiddleProofSemanticCertificate, riddleProofSemanticScopesEqual };
310
+ export { type ComposeRiddleProofSemanticCertificateClosuresInput, type ComposeRiddleProofSemanticCertificatesInput, type CreateRiddleProofSemanticAtomicCertificateClosureInput, type CreateRiddleProofSemanticCertificateInput, type MatchRiddleProofSemanticCertificateClosureInput, type MatchRiddleProofSemanticCertificateInput, RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_MAX_CERTIFICATES, RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_VERSION, RIDDLE_PROOF_SEMANTIC_CERTIFICATE_VERSION, type RiddleProofSemanticAssurance, type RiddleProofSemanticCertificate, type RiddleProofSemanticCertificateAssuranceMismatch, type RiddleProofSemanticCertificateClaimMismatch, type RiddleProofSemanticCertificateClosure, type RiddleProofSemanticCertificateClosureCertificateInvalid, type RiddleProofSemanticCertificateClosureCompositionError, type RiddleProofSemanticCertificateClosureCompositionResult, type RiddleProofSemanticCertificateClosureConstructionFailed, type RiddleProofSemanticCertificateClosureCycle, type RiddleProofSemanticCertificateClosureDanglingPremise, type RiddleProofSemanticCertificateClosureDuplicateId, type RiddleProofSemanticCertificateClosureIdCollision, type RiddleProofSemanticCertificateClosureInputInvalid, type RiddleProofSemanticCertificateClosureInvalid, type RiddleProofSemanticCertificateClosureMatchError, type RiddleProofSemanticCertificateClosureMatchResult, type RiddleProofSemanticCertificateClosurePremiseMismatch, type RiddleProofSemanticCertificateClosureRootMissing, type RiddleProofSemanticCertificateClosureUnreachable, type RiddleProofSemanticCertificateClosureValidationError, type RiddleProofSemanticCertificateClosureValidationResult, type RiddleProofSemanticCertificateIdMismatch, type RiddleProofSemanticCertificateInvalid, type RiddleProofSemanticCertificateMatchError, type RiddleProofSemanticCertificateMatchResult, type RiddleProofSemanticCertificateMatchScopeMismatch, type RiddleProofSemanticCertificationResult, type RiddleProofSemanticClaim, type RiddleProofSemanticClaimExpectation, type RiddleProofSemanticClaimRef, type RiddleProofSemanticCompositionDerivation, type RiddleProofSemanticCompositionError, type RiddleProofSemanticCompositionResult, type RiddleProofSemanticContract, type RiddleProofSemanticContractDerivation, type RiddleProofSemanticContractError, type RiddleProofSemanticContractRef, type RiddleProofSemanticContractRejected, type RiddleProofSemanticDerivation, type RiddleProofSemanticEvidenceBundle, type RiddleProofSemanticEvidenceRef, type RiddleProofSemanticPremise, type RiddleProofSemanticPremiseCountMismatch, type RiddleProofSemanticPremiseMismatch, type RiddleProofSemanticPremiseSnapshotField, type RiddleProofSemanticRule, type RiddleProofSemanticRuntimeContract, type RiddleProofSemanticScope, type RiddleProofSemanticScopeField, type RiddleProofSemanticScopeMismatch, composeRiddleProofSemanticCertificateClosures, composeRiddleProofSemanticCertificates, createRiddleProofSemanticAtomicCertificateClosure, createRiddleProofSemanticCertificate, matchRiddleProofSemanticCertificate, matchRiddleProofSemanticCertificateClosure, parseRiddleProofSemanticCertificate, riddleProofSemanticScopesEqual, validateRiddleProofSemanticCertificateClosure };
@@ -2,6 +2,8 @@ import { JsonValue } from './types.js';
2
2
  import './public-state.js';
3
3
 
4
4
  declare const RIDDLE_PROOF_SEMANTIC_CERTIFICATE_VERSION: "riddle-proof.semantic-certificate.v0";
5
+ declare const RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_VERSION: "riddle-proof.semantic-certificate-closure.v0";
6
+ declare const RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_MAX_CERTIFICATES = 4096;
5
7
  interface RiddleProofSemanticScope {
6
8
  repository: string;
7
9
  revision: string;
@@ -17,6 +19,9 @@ interface RiddleProofSemanticClaimRef {
17
19
  interface RiddleProofSemanticClaim extends RiddleProofSemanticClaimRef {
18
20
  label: string;
19
21
  }
22
+ interface RiddleProofSemanticClaimExpectation extends RiddleProofSemanticClaimRef {
23
+ label?: string;
24
+ }
20
25
  interface RiddleProofSemanticEvidenceRef {
21
26
  receipt_id: string;
22
27
  artifact_digest: string;
@@ -46,10 +51,11 @@ interface RiddleProofSemanticRule {
46
51
  premises: [RiddleProofSemanticClaimRef, ...RiddleProofSemanticClaimRef[]];
47
52
  conclusion: RiddleProofSemanticClaim;
48
53
  }
54
+ type RiddleProofSemanticAssurance = "runtime_contract_accepted" | "declared_runtime_rule";
49
55
  interface RiddleProofSemanticPremise {
50
56
  certificate_id: string;
51
57
  derivation_kind: RiddleProofSemanticDerivation["kind"];
52
- assurance: RiddleProofSemanticDerivation["assurance"];
58
+ assurance: RiddleProofSemanticAssurance;
53
59
  scope: RiddleProofSemanticScope;
54
60
  claim: RiddleProofSemanticClaim;
55
61
  evidence: RiddleProofSemanticEvidenceBundle;
@@ -134,9 +140,171 @@ type RiddleProofSemanticCompositionResult = {
134
140
  ok: false;
135
141
  error: RiddleProofSemanticCompositionError;
136
142
  };
143
+ interface RiddleProofSemanticCertificateClosure {
144
+ version: typeof RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_VERSION;
145
+ root_certificate_id: string;
146
+ certificates: [
147
+ RiddleProofSemanticCertificate,
148
+ ...RiddleProofSemanticCertificate[]
149
+ ];
150
+ }
151
+ type RiddleProofSemanticPremiseSnapshotField = "derivation_kind" | "assurance" | "scope" | "claim" | "evidence";
152
+ interface RiddleProofSemanticCertificateClosureInvalid {
153
+ code: "invalid_closure";
154
+ message: string;
155
+ }
156
+ interface RiddleProofSemanticCertificateClosureCertificateInvalid {
157
+ code: "invalid_closure_certificate";
158
+ input_index: number;
159
+ message: string;
160
+ }
161
+ interface RiddleProofSemanticCertificateClosureDuplicateId {
162
+ code: "duplicate_certificate_id";
163
+ certificate_id: string;
164
+ first_index: number;
165
+ duplicate_index: number;
166
+ message: string;
167
+ }
168
+ interface RiddleProofSemanticCertificateClosureRootMissing {
169
+ code: "root_certificate_missing";
170
+ root_certificate_id: string;
171
+ message: string;
172
+ }
173
+ interface RiddleProofSemanticCertificateClosureDanglingPremise {
174
+ code: "dangling_premise";
175
+ parent_certificate_id: string;
176
+ premise_index: number;
177
+ premise_certificate_id: string;
178
+ message: string;
179
+ }
180
+ interface RiddleProofSemanticCertificateClosurePremiseMismatch {
181
+ code: "premise_snapshot_mismatch";
182
+ parent_certificate_id: string;
183
+ premise_index: number;
184
+ premise_certificate_id: string;
185
+ field: RiddleProofSemanticPremiseSnapshotField;
186
+ message: string;
187
+ }
188
+ interface RiddleProofSemanticCertificateClosureCycle {
189
+ code: "certificate_cycle";
190
+ certificate_ids: string[];
191
+ message: string;
192
+ }
193
+ interface RiddleProofSemanticCertificateClosureUnreachable {
194
+ code: "unreachable_certificates";
195
+ certificate_ids: string[];
196
+ message: string;
197
+ }
198
+ type RiddleProofSemanticCertificateClosureValidationError = RiddleProofSemanticCertificateClosureInvalid | RiddleProofSemanticCertificateClosureCertificateInvalid | RiddleProofSemanticCertificateClosureDuplicateId | RiddleProofSemanticCertificateClosureRootMissing | RiddleProofSemanticCertificateClosureDanglingPremise | RiddleProofSemanticCertificateClosurePremiseMismatch | RiddleProofSemanticCertificateClosureCycle | RiddleProofSemanticCertificateClosureUnreachable;
199
+ type RiddleProofSemanticCertificateClosureValidationResult = {
200
+ ok: true;
201
+ closure: RiddleProofSemanticCertificateClosure;
202
+ root_certificate: RiddleProofSemanticCertificate;
203
+ } | {
204
+ ok: false;
205
+ error: RiddleProofSemanticCertificateClosureValidationError;
206
+ };
207
+ interface CreateRiddleProofSemanticAtomicCertificateClosureInput {
208
+ certificate: unknown;
209
+ }
210
+ interface ComposeRiddleProofSemanticCertificateClosuresInput {
211
+ rule: RiddleProofSemanticRule;
212
+ closures: [unknown, ...unknown[]];
213
+ issued_at?: string;
214
+ }
215
+ interface RiddleProofSemanticCertificateClosureInputInvalid {
216
+ code: "input_closure_invalid";
217
+ input_index: number;
218
+ cause: RiddleProofSemanticCertificateClosureValidationError;
219
+ message: string;
220
+ }
221
+ interface RiddleProofSemanticCertificateClosureIdCollision {
222
+ code: "certificate_id_collision";
223
+ certificate_id: string;
224
+ message: string;
225
+ }
226
+ interface RiddleProofSemanticCertificateClosureConstructionFailed {
227
+ code: "closure_construction_failed";
228
+ cause: RiddleProofSemanticCertificateClosureValidationError;
229
+ message: string;
230
+ }
231
+ type RiddleProofSemanticCertificateClosureCompositionError = RiddleProofSemanticCompositionError | RiddleProofSemanticCertificateClosureInputInvalid | RiddleProofSemanticCertificateClosureIdCollision | RiddleProofSemanticCertificateClosureConstructionFailed;
232
+ type RiddleProofSemanticCertificateClosureCompositionResult = {
233
+ ok: true;
234
+ certificate: RiddleProofSemanticCertificate;
235
+ closure: RiddleProofSemanticCertificateClosure;
236
+ } | {
237
+ ok: false;
238
+ error: RiddleProofSemanticCertificateClosureCompositionError;
239
+ };
240
+ interface MatchRiddleProofSemanticCertificateInput {
241
+ certificate: unknown;
242
+ expected_certificate_id: string;
243
+ expected_scope: RiddleProofSemanticScope;
244
+ expected_claim: RiddleProofSemanticClaimExpectation;
245
+ expected_assurance: RiddleProofSemanticAssurance;
246
+ }
247
+ interface RiddleProofSemanticCertificateInvalid {
248
+ code: "invalid_certificate";
249
+ message: string;
250
+ }
251
+ interface RiddleProofSemanticCertificateIdMismatch {
252
+ code: "certificate_id_mismatch";
253
+ expected: string;
254
+ observed: string;
255
+ message: string;
256
+ }
257
+ interface RiddleProofSemanticCertificateMatchScopeMismatch {
258
+ code: "scope_mismatch";
259
+ field: RiddleProofSemanticScopeField;
260
+ expected: string;
261
+ observed: string;
262
+ message: string;
263
+ }
264
+ interface RiddleProofSemanticCertificateClaimMismatch {
265
+ code: "claim_mismatch";
266
+ expected: RiddleProofSemanticClaimRef;
267
+ observed: RiddleProofSemanticClaimRef;
268
+ message: string;
269
+ }
270
+ interface RiddleProofSemanticCertificateAssuranceMismatch {
271
+ code: "assurance_mismatch";
272
+ expected: RiddleProofSemanticAssurance;
273
+ observed: RiddleProofSemanticAssurance;
274
+ message: string;
275
+ }
276
+ type RiddleProofSemanticCertificateMatchError = RiddleProofSemanticCertificateInvalid | RiddleProofSemanticCertificateIdMismatch | RiddleProofSemanticCertificateMatchScopeMismatch | RiddleProofSemanticCertificateClaimMismatch | RiddleProofSemanticCertificateAssuranceMismatch;
277
+ type RiddleProofSemanticCertificateMatchResult = {
278
+ ok: true;
279
+ certificate: RiddleProofSemanticCertificate;
280
+ } | {
281
+ ok: false;
282
+ error: RiddleProofSemanticCertificateMatchError;
283
+ };
284
+ interface MatchRiddleProofSemanticCertificateClosureInput {
285
+ closure: unknown;
286
+ expected_root_certificate_id: string;
287
+ expected_scope: RiddleProofSemanticScope;
288
+ expected_claim: RiddleProofSemanticClaimExpectation;
289
+ expected_assurance: RiddleProofSemanticAssurance;
290
+ }
291
+ type RiddleProofSemanticCertificateClosureMatchError = RiddleProofSemanticCertificateClosureValidationError | RiddleProofSemanticCertificateMatchError;
292
+ type RiddleProofSemanticCertificateClosureMatchResult = {
293
+ ok: true;
294
+ closure: RiddleProofSemanticCertificateClosure;
295
+ root_certificate: RiddleProofSemanticCertificate;
296
+ } | {
297
+ ok: false;
298
+ error: RiddleProofSemanticCertificateClosureMatchError;
299
+ };
137
300
  declare function riddleProofSemanticScopesEqual(left: RiddleProofSemanticScope, right: RiddleProofSemanticScope): boolean;
138
301
  declare function createRiddleProofSemanticCertificate<Observation>(input: CreateRiddleProofSemanticCertificateInput<Observation>): RiddleProofSemanticCertificationResult;
139
302
  declare function parseRiddleProofSemanticCertificate(value: unknown): RiddleProofSemanticCertificate;
303
+ declare function matchRiddleProofSemanticCertificate(input: MatchRiddleProofSemanticCertificateInput): RiddleProofSemanticCertificateMatchResult;
140
304
  declare function composeRiddleProofSemanticCertificates(input: ComposeRiddleProofSemanticCertificatesInput): RiddleProofSemanticCompositionResult;
305
+ declare function validateRiddleProofSemanticCertificateClosure(value: unknown): RiddleProofSemanticCertificateClosureValidationResult;
306
+ declare function createRiddleProofSemanticAtomicCertificateClosure(input: CreateRiddleProofSemanticAtomicCertificateClosureInput): RiddleProofSemanticCertificateClosureValidationResult;
307
+ declare function composeRiddleProofSemanticCertificateClosures(input: ComposeRiddleProofSemanticCertificateClosuresInput): RiddleProofSemanticCertificateClosureCompositionResult;
308
+ declare function matchRiddleProofSemanticCertificateClosure(input: MatchRiddleProofSemanticCertificateClosureInput): RiddleProofSemanticCertificateClosureMatchResult;
141
309
 
142
- export { type ComposeRiddleProofSemanticCertificatesInput, type CreateRiddleProofSemanticCertificateInput, RIDDLE_PROOF_SEMANTIC_CERTIFICATE_VERSION, type RiddleProofSemanticCertificate, type RiddleProofSemanticCertificationResult, type RiddleProofSemanticClaim, type RiddleProofSemanticClaimRef, type RiddleProofSemanticCompositionDerivation, type RiddleProofSemanticCompositionError, type RiddleProofSemanticCompositionResult, type RiddleProofSemanticContract, type RiddleProofSemanticContractDerivation, type RiddleProofSemanticContractError, type RiddleProofSemanticContractRef, type RiddleProofSemanticContractRejected, type RiddleProofSemanticDerivation, type RiddleProofSemanticEvidenceBundle, type RiddleProofSemanticEvidenceRef, type RiddleProofSemanticPremise, type RiddleProofSemanticPremiseCountMismatch, type RiddleProofSemanticPremiseMismatch, type RiddleProofSemanticRule, type RiddleProofSemanticRuntimeContract, type RiddleProofSemanticScope, type RiddleProofSemanticScopeField, type RiddleProofSemanticScopeMismatch, composeRiddleProofSemanticCertificates, createRiddleProofSemanticCertificate, parseRiddleProofSemanticCertificate, riddleProofSemanticScopesEqual };
310
+ export { type ComposeRiddleProofSemanticCertificateClosuresInput, type ComposeRiddleProofSemanticCertificatesInput, type CreateRiddleProofSemanticAtomicCertificateClosureInput, type CreateRiddleProofSemanticCertificateInput, type MatchRiddleProofSemanticCertificateClosureInput, type MatchRiddleProofSemanticCertificateInput, RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_MAX_CERTIFICATES, RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_VERSION, RIDDLE_PROOF_SEMANTIC_CERTIFICATE_VERSION, type RiddleProofSemanticAssurance, type RiddleProofSemanticCertificate, type RiddleProofSemanticCertificateAssuranceMismatch, type RiddleProofSemanticCertificateClaimMismatch, type RiddleProofSemanticCertificateClosure, type RiddleProofSemanticCertificateClosureCertificateInvalid, type RiddleProofSemanticCertificateClosureCompositionError, type RiddleProofSemanticCertificateClosureCompositionResult, type RiddleProofSemanticCertificateClosureConstructionFailed, type RiddleProofSemanticCertificateClosureCycle, type RiddleProofSemanticCertificateClosureDanglingPremise, type RiddleProofSemanticCertificateClosureDuplicateId, type RiddleProofSemanticCertificateClosureIdCollision, type RiddleProofSemanticCertificateClosureInputInvalid, type RiddleProofSemanticCertificateClosureInvalid, type RiddleProofSemanticCertificateClosureMatchError, type RiddleProofSemanticCertificateClosureMatchResult, type RiddleProofSemanticCertificateClosurePremiseMismatch, type RiddleProofSemanticCertificateClosureRootMissing, type RiddleProofSemanticCertificateClosureUnreachable, type RiddleProofSemanticCertificateClosureValidationError, type RiddleProofSemanticCertificateClosureValidationResult, type RiddleProofSemanticCertificateIdMismatch, type RiddleProofSemanticCertificateInvalid, type RiddleProofSemanticCertificateMatchError, type RiddleProofSemanticCertificateMatchResult, type RiddleProofSemanticCertificateMatchScopeMismatch, type RiddleProofSemanticCertificationResult, type RiddleProofSemanticClaim, type RiddleProofSemanticClaimExpectation, type RiddleProofSemanticClaimRef, type RiddleProofSemanticCompositionDerivation, type RiddleProofSemanticCompositionError, type RiddleProofSemanticCompositionResult, type RiddleProofSemanticContract, type RiddleProofSemanticContractDerivation, type RiddleProofSemanticContractError, type RiddleProofSemanticContractRef, type RiddleProofSemanticContractRejected, type RiddleProofSemanticDerivation, type RiddleProofSemanticEvidenceBundle, type RiddleProofSemanticEvidenceRef, type RiddleProofSemanticPremise, type RiddleProofSemanticPremiseCountMismatch, type RiddleProofSemanticPremiseMismatch, type RiddleProofSemanticPremiseSnapshotField, type RiddleProofSemanticRule, type RiddleProofSemanticRuntimeContract, type RiddleProofSemanticScope, type RiddleProofSemanticScopeField, type RiddleProofSemanticScopeMismatch, composeRiddleProofSemanticCertificateClosures, composeRiddleProofSemanticCertificates, createRiddleProofSemanticAtomicCertificateClosure, createRiddleProofSemanticCertificate, matchRiddleProofSemanticCertificate, matchRiddleProofSemanticCertificateClosure, parseRiddleProofSemanticCertificate, riddleProofSemanticScopesEqual, validateRiddleProofSemanticCertificateClosure };
@@ -1,15 +1,29 @@
1
1
  import {
2
+ RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_MAX_CERTIFICATES,
3
+ RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_VERSION,
2
4
  RIDDLE_PROOF_SEMANTIC_CERTIFICATE_VERSION,
5
+ composeRiddleProofSemanticCertificateClosures,
3
6
  composeRiddleProofSemanticCertificates,
7
+ createRiddleProofSemanticAtomicCertificateClosure,
4
8
  createRiddleProofSemanticCertificate,
9
+ matchRiddleProofSemanticCertificate,
10
+ matchRiddleProofSemanticCertificateClosure,
5
11
  parseRiddleProofSemanticCertificate,
6
- riddleProofSemanticScopesEqual
7
- } from "./chunk-ZZ6UNKJQ.js";
12
+ riddleProofSemanticScopesEqual,
13
+ validateRiddleProofSemanticCertificateClosure
14
+ } from "./chunk-AQTCU6W5.js";
8
15
  import "./chunk-MLKGABMK.js";
9
16
  export {
17
+ RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_MAX_CERTIFICATES,
18
+ RIDDLE_PROOF_SEMANTIC_CERTIFICATE_CLOSURE_VERSION,
10
19
  RIDDLE_PROOF_SEMANTIC_CERTIFICATE_VERSION,
20
+ composeRiddleProofSemanticCertificateClosures,
11
21
  composeRiddleProofSemanticCertificates,
22
+ createRiddleProofSemanticAtomicCertificateClosure,
12
23
  createRiddleProofSemanticCertificate,
24
+ matchRiddleProofSemanticCertificate,
25
+ matchRiddleProofSemanticCertificateClosure,
13
26
  parseRiddleProofSemanticCertificate,
14
- riddleProofSemanticScopesEqual
27
+ riddleProofSemanticScopesEqual,
28
+ validateRiddleProofSemanticCertificateClosure
15
29
  };
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@riddledc/riddle-proof",
3
- "version": "0.8.82",
3
+ "version": "0.8.84",
4
4
  "description": "Reusable Riddle Proof contracts and helpers for evidence-backed agent changes.",
5
5
  "license": "MIT",
6
6
  "author": "RiddleDC",