@svta/cml-c2pa 1.3.0 → 1.4.1

package/dist/index.d.ts

@@ -1,12 +1,10 @@
 import { ValueOf } from "@svta/cml-utils";
-
 //#region src/C2paAssertion.d.ts
-
 /**
-* A C2PA assertion within a manifest
-*
-* @public
-*/
+ * A C2PA assertion within a manifest
+ *
+ * @public
+ */
 type C2paAssertion = {
   readonly label: string;
   readonly data: unknown;
@@ -14,10 +12,10 @@ type C2paAssertion = {
 //#endregion
 //#region src/C2paSignatureInfo.d.ts
 /**
-* Signature information extracted from a C2PA claim
-*
-* @public
-*/
+ * Signature information extracted from a C2PA claim
+ *
+ * @public
+ */
 type C2paSignatureInfo = {
   readonly issuer: string | null;
   readonly certNotBefore: string | null;
@@ -25,10 +23,10 @@ type C2paSignatureInfo = {
 //#endregion
 //#region src/C2paManifest.d.ts
 /**
-* A C2PA manifest (the active manifest within a manifest store)
-*
-* @public
-*/
+ * A C2PA manifest (the active manifest within a manifest store)
+ *
+ * @public
+ */
 type C2paManifest = {
   readonly label: string;
   readonly instanceId: string | null;
@@ -39,20 +37,24 @@ type C2paManifest = {
 //#endregion
 //#region src/C2paStatusCode.d.ts
 /**
-* Standard C2PA validation status codes for manifest integrity checks,
-* as defined in the C2PA specification chapters 15 and 18.
-*
-* @see {@link https://c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_claim_validation | C2PA Spec §15.10.3}
-*
-* @enum
-*
-* @public
-*/
-declare const C2paStatusCode: {
+ * Standard C2PA validation status codes for manifest integrity checks,
+ * as defined in the C2PA specification chapters 15 and 18.
+ *
+ * @see {@link https://c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_claim_validation | C2PA Spec §15.10.3}
+ *
+ * @enum
+ *
+ * @public
+ */
+export declare const C2paStatusCode: {
   /** Assertion hash does not match the hashed URI in the claim (§15.10.3.1) */
   readonly ASSERTION_HASHEDURI_MISMATCH: "assertion.hashedURI.mismatch";
-  /** An assertion referenced in the claim is missing from the assertion store (§15.10.3.1) */
+  /** The assertion store has no box for a claim reference, or more than one box for its label (§8.4.1, §15.10.3.1) */
   readonly ASSERTION_MISSING: "assertion.missing";
+  /** The manifest has more than one hard binding assertion (§9.1, §15.10.1.2) */
+  readonly ASSERTION_MULTIPLE_HARD_BINDINGS: "assertion.multipleHardBindings";
+  /** The assertion store holds an assertion that the claim does not reference (§15.10.3.1) */
+  readonly ASSERTION_UNDECLARED: "assertion.undeclared";
   /** An action requiring an ingredient reference does not have one (§18.15.4.7) */
   readonly ASSERTION_ACTION_INGREDIENT_MISMATCH: "assertion.action.ingredientMismatch";
   /** Claim signature verification failed, or the signature carries no certificate (§15.7) */
@@ -61,25 +63,31 @@ declare const C2paStatusCode: {
   readonly CLAIM_SIGNATURE_MISSING: "claimSignature.missing";
   /** The manifest has no claim box (§15.6.1) */
   readonly CLAIM_MISSING: "claim.missing";
+  /** The claim box holds CBOR that does not decode (§15.6.2) */
+  readonly CLAIM_CBOR_INVALID: "claim.cbor.invalid";
+  /** The claim box holds CBOR that is not a map (§15.6.2). The library does not check the fields of the claim. */
+  readonly CLAIM_MALFORMED: "claim.malformed";
+  /** The manifest has more than one claim box (§15.6.1) */
+  readonly CLAIM_MULTIPLE: "claim.multiple";
   /** BMFF hash assertion or Merkle structure is malformed (§15.2.2.3) */
   readonly ASSERTION_BMFFHASH_MALFORMED: "assertion.bmffHash.malformed";
   /** BMFF content hash does not match the committed value (§15.2.2.3) */
   readonly ASSERTION_BMFFHASH_MISMATCH: "assertion.bmffHash.mismatch";
 };
 /**
-* Union type of all {@link (C2paStatusCode:variable)} values.
-*
-* @public
-*/
-type C2paStatusCode = ValueOf<typeof C2paStatusCode>;
+ * Union type of all {@link (C2paStatusCode:variable)} values.
+ *
+ * @public
+ */
+export type C2paStatusCode = ValueOf<typeof C2paStatusCode>;
 //#endregion
 //#region src/cose/CoseKeyJwk.d.ts
 /**
-* A JWK (JSON Web Key) representation of a COSE public key,
-* suitable for use with the WebCrypto `importKey` API.
-*
-* @public
-*/
+ * A JWK (JSON Web Key) representation of a COSE public key,
+ * suitable for use with the WebCrypto `importKey` API.
+ *
+ * @public
+ */
 type CoseKeyJwk = {
   readonly kty: string;
   readonly crv: string;
@@ -89,27 +97,27 @@ type CoseKeyJwk = {
 //#endregion
 //#region src/LiveVideoStatusCode.d.ts
 /**
-* Standard C2PA failure status codes for live video validation,
-* as defined in the C2PA specification section 19.7.
-*
-* @see {@link https://c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_live_video_validation_process | C2PA Spec §19.7}
-*
-* @enum
-*
-* @public
-*/
-declare const LiveVideoStatusCode: {
+ * Standard C2PA failure status codes for live video validation,
+ * as defined in the C2PA specification section 19.7.
+ *
+ * @see {@link https://c2pa.org/specifications/specifications/2.3/specs/C2PA_Specification.html#_live_video_validation_process | C2PA Spec §19.7}
+ *
+ * @enum
+ *
+ * @public
+ */
+export declare const LiveVideoStatusCode: {
   /** Init segment contains an `mdat` box (§19.7.1) */
   readonly INIT_INVALID: "livevideo.init.invalid";
   /** C2PA Manifest Box failed standard validation (§19.7.1) */
   readonly MANIFEST_INVALID: "livevideo.manifest.invalid";
-  /** Segment structure invalid: missing Manifest Box/emsg, signature/hash/key failure (§19.7) */
+  /** Segment invalid: missing Manifest Box/emsg, signature/hash/key failure, or session key outside its validity period (§19.7) */
   readonly SEGMENT_INVALID: "livevideo.segment.invalid";
   /**
-  * Live video assertion field invalid: sequenceNumber or streamId mismatch
-  * (§19.7.2). Also reused for VOD Merkle per-track location discontinuity
-  * (§15.12.2), which has no dedicated code.
-  */
+   * Live video assertion field invalid: sequenceNumber or streamId mismatch
+   * (§19.7.2). Also reused for VOD Merkle per-track location discontinuity
+   * (§15.12.2), which has no dedicated code.
+   */
   readonly ASSERTION_INVALID: "livevideo.assertion.invalid";
   /** continuityMethod absent, unsupported, or companion fields incorrect (§19.7.2) */
   readonly CONTINUITY_METHOD_INVALID: "livevideo.continuityMethod.invalid";
@@ -119,32 +127,32 @@ declare const LiveVideoStatusCode: {
   readonly SESSIONKEY_INVALID: "livevideo.sessionkey.invalid";
 };
 /**
-* Union type of all {@link (LiveVideoStatusCode:variable)} values.
-*
-* @public
-*/
-type LiveVideoStatusCode = ValueOf<typeof LiveVideoStatusCode>;
+ * Union type of all {@link (LiveVideoStatusCode:variable)} values.
+ *
+ * @public
+ */
+export type LiveVideoStatusCode = ValueOf<typeof LiveVideoStatusCode>;
 //#endregion
 //#region src/bmff/BmffHashExclusion.d.ts
 /**
-* A byte-level constraint used to match specific BMFF box content
-* within a C2PA BMFF hash exclusion.
-*
-* @public
-*/
+ * A byte-level constraint used to match specific BMFF box content
+ * within a C2PA BMFF hash exclusion.
+ *
+ * @public
+ */
 type BmffHashConstraint = {
   readonly offset: number;
   readonly value: Uint8Array | readonly number[];
 };
 /**
-* Identifies a BMFF box to exclude from the C2PA content hash (`c2pa.hash.bmff.v3`).
-*
-* The `xpath` uses C2PA path notation (e.g. `/emsg`, `/moof/traf`).
-* Optional `data` constraints narrow the match to specific box content
-* by byte offset within the box.
-*
-* @public
-*/
+ * Identifies a BMFF box to exclude from the C2PA content hash (`c2pa.hash.bmff.v3`).
+ *
+ * The `xpath` uses C2PA path notation (e.g. `/emsg`, `/moof/traf`).
+ * Optional `data` constraints narrow the match to specific box content
+ * by byte offset within the box.
+ *
+ * @public
+ */
 type BmffHashExclusion = {
   readonly xpath: string;
   readonly data?: readonly BmffHashConstraint[];
@@ -152,10 +160,10 @@ type BmffHashExclusion = {
 //#endregion
 //#region src/merkle/MerkleSegmentValidation.d.ts
 /**
-* One merkle map from the `c2pa.hash.bmff.v3` assertion (§18.6).
-*
-* @public
-*/
+ * One merkle map from the `c2pa.hash.bmff.v3` assertion (§18.6).
+ *
+ * @public
+ */
 type MerkleMap = {
   readonly uniqueId: number;
   readonly localId: number;
@@ -167,24 +175,24 @@ type MerkleMap = {
   readonly offsetPrefixSize: number;
 };
 /**
-* Continuity state carried between calls to `validateC2paMerkleSegment`.
-* Reset (pass `undefined`) after a seek.
-*
-* `lastLocations` is keyed by `${uniqueId}:${localId}`, matching the
-* `MerkleMap` fields of the track it tracks. The first location seen for a
-* key is always accepted (no prior state to compare against), so a caller
-* that needs strict start-at-zero enforcement must seed this map itself.
-*
-* @public
-*/
+ * Continuity state carried between calls to `validateC2paMerkleSegment`.
+ * Reset (pass `undefined`) after a seek.
+ *
+ * `lastLocations` is keyed by `${uniqueId}:${localId}`, matching the
+ * `MerkleMap` fields of the track it tracks. The first location seen for a
+ * key is always accepted (no prior state to compare against), so a caller
+ * that needs strict start-at-zero enforcement must seed this map itself.
+ *
+ * @public
+ */
 type MerkleSegmentState = {
   readonly lastLocations: ReadonlyMap<string, number>;
 };
 /**
-* Result of `validateC2paMerkleSegment` for one media segment.
-*
-* @public
-*/
+ * Result of `validateC2paMerkleSegment` for one media segment.
+ *
+ * @public
+ */
 type MerkleSegmentValidation = {
   readonly location: number | null;
   readonly bmffHashHex: string | null;
@@ -194,13 +202,13 @@ type MerkleSegmentValidation = {
 //#endregion
 //#region src/init/InitSegmentValidation.d.ts
 /**
-* A session key extracted and verified from a C2PA `c2pa.session-keys` assertion.
-*
-* Only keys whose signer binding is valid and whose validity period has not expired
-* are included in {@link InitSegmentValidation.sessionKeys}.
-*
-* @public
-*/
+ * A session key extracted and verified from a C2PA `c2pa.session-keys` assertion.
+ *
+ * Only keys whose signer binding is valid and whose validity period has not expired
+ * are included in {@link InitSegmentValidation.sessionKeys}.
+ *
+ * @public
+ */
 type ValidatedSessionKey = {
   readonly kid: string;
   readonly jwk: CoseKeyJwk;
@@ -209,12 +217,12 @@ type ValidatedSessionKey = {
   readonly createdAt: string;
 };
 /**
-* Result of validating a C2PA init segment.
-*
-* Returned by {@link validateC2paInitSegment}.
-*
-* @public
-*/
+ * Result of validating a C2PA init segment.
+ *
+ * Returned by {@link validateC2paInitSegment}.
+ *
+ * @public
+ */
 type InitSegmentValidation = {
   readonly manifest: C2paManifest | null;
   readonly certificate: Uint8Array | null;
@@ -227,54 +235,62 @@ type InitSegmentValidation = {
 //#endregion
 //#region src/init/validateC2paInitSegment.d.ts
 /**
-* Validates a C2PA init segment: parses the manifest, extracts and verifies
-* the certificate, validates the BMFF hard binding hash, verifies all
-* session keys from the `c2pa.session-keys` assertion, and performs
-* manifest integrity checks (assertion hashes, missing assertions,
-* action ingredients, and claim signature verification).
-*
-* Only session keys with a valid signer binding and an unexpired validity period
-* are included in the result.
-*
-* @param bytes - Raw init segment bytes
-* @returns Structured validation result (with `INIT_INVALID` error code if `mdat` box is present)
-* @throws If no C2PA UUID box is found
-*
-* @example
-* {@includeCode ../../test/init/validateC2paInitSegment.test.ts#example}
-*
-* @public
-*/
-declare function validateC2paInitSegment(bytes: Uint8Array): Promise<InitSegmentValidation>;
+ * Validates a C2PA init segment: parses the manifest, extracts and verifies
+ * the certificate, validates the BMFF hard binding hash, verifies all
+ * session keys from the `c2pa.session-keys` assertion, and performs
+ * manifest integrity checks (assertion references and hashes, undeclared
+ * assertions, the hard binding count, duplicate manifest boxes, action
+ * ingredients, and claim signature verification).
+ *
+ * Only session keys with a valid signer binding and an unexpired validity period
+ * are included in the result. The result holds `sessionKeys` and `merkleMaps` only when
+ * every manifest integrity check passes, so check `isValid` before you use either list.
+ *
+ * The result includes `LiveVideoStatusCode.SESSIONKEY_INVALID` if the function finds an invalid
+ * session key (C2PA section 19.7.3). A session key is invalid if it does not conform to section 18.25.2,
+ * or if its signer binding fails verification. The function does not check every rule of section 18.25.2.
+ * An expired session key does not count as invalid. A `c2pa.session-keys` assertion without a session key,
+ * or with CBOR that does not decode, also causes `SESSIONKEY_INVALID`.
+ *
+ * @param bytes - Raw init segment bytes
+ * @returns Structured validation result (with `INIT_INVALID` error code if `mdat` box is present)
+ * @throws If no C2PA UUID box is found
+ *
+ * @example
+ * {@includeCode ../../test/init/validateC2paInitSegment.test.ts#example}
+ *
+ * @public
+ */
+export declare function validateC2paInitSegment(bytes: Uint8Array): Promise<InitSegmentValidation>;
 //#endregion
 //#region src/vsi/SequenceState.d.ts
 /**
-* State and result types for monotonic sequence number validation
-* per C2PA Live Streaming Specification §18.4.
-*
-* @public
-*/
+ * State and result types for monotonic sequence number validation
+ * per C2PA Live Streaming Specification §18.4.
+ *
+ * @public
+ */
 /**
-* Immutable state snapshot for a single stream's sequence number history.
-*
-* Pass to {@link validateC2paSegment} via the `sequenceState` parameter.
-*
-* @public
-*/
+ * Immutable state snapshot for a single stream's sequence number history.
+ *
+ * Pass to {@link validateC2paSegment} via the `sequenceState` parameter.
+ *
+ * @public
+ */
 type SequenceState = {
   readonly lastSequenceNumber: number | null;
   readonly seenSequences: ReadonlySet<number>;
 };
 /**
-* Reason codes for sequence number validation outcomes.
-*
-* @see {@link SequenceValidationResult}
-*
-* @enum
-*
-* @public
-*/
-declare const SequenceValidationReason: {
+ * Reason codes for sequence number validation outcomes.
+ *
+ * @see {@link SequenceValidationResult}
+ *
+ * @enum
+ *
+ * @public
+ */
+export declare const SequenceValidationReason: {
   /** Sequence number is the next expected value */
   readonly VALID: "valid";
   /** Sequence number was already seen */
@@ -287,19 +303,19 @@ declare const SequenceValidationReason: {
   readonly SEQUENCE_NUMBER_BELOW_MINIMUM: "sequence_number_below_minimum";
 };
 /**
-* Union type of all {@link (SequenceValidationReason:variable)} values.
-*
-* @public
-*/
-type SequenceValidationReason = ValueOf<typeof SequenceValidationReason>;
+ * Union type of all {@link (SequenceValidationReason:variable)} values.
+ *
+ * @public
+ */
+export type SequenceValidationReason = ValueOf<typeof SequenceValidationReason>;
 /**
-* Result of validating a single sequence number against the current stream state.
-*
-* Discriminated on `reason` — narrow to `'gap_detected'` to access
-* `missingFrom` / `missingTo`.
-*
-* @public
-*/
+ * Result of validating a single sequence number against the current stream state.
+ *
+ * Discriminated on `reason` — narrow to `'gap_detected'` to access
+ * `missingFrom` / `missingTo`.
+ *
+ * @public
+ */
 type SequenceValidationResult = {
   readonly isValid: true;
   readonly reason: typeof SequenceValidationReason.VALID;
@@ -315,12 +331,12 @@ type SequenceValidationResult = {
 //#endregion
 //#region src/segment/SegmentValidation.d.ts
 /**
-* The result of validating a single C2PA live stream segment (VSI/EMSG method).
-*
-* Returned by {@link validateC2paSegment}.
-*
-* @public
-*/
+ * The result of validating a single C2PA live stream segment (VSI/EMSG method).
+ *
+ * Returned by {@link validateC2paSegment}.
+ *
+ * @public
+ */
 type SegmentValidationResult = {
   readonly sequenceNumber: number;
   readonly manifestId: string;
@@ -333,37 +349,40 @@ type SegmentValidationResult = {
 //#endregion
 //#region src/segment/validateC2paSegment.d.ts
 /**
-* Validates a C2PA live stream segment using the VSI/EMSG method (§19.7.3).
-*
-* Extracts the EMSG box, decodes the COSE_Sign1 and VSI map, matches the
-* session key by kid, then performs all cryptographic checks: signature
-* verification, BMFF content hash, sequence number floor, and key validity.
-*
-* Returns `null` if the segment does not contain a C2PA EMSG box.
-*
-* @param segmentBytes - Raw segment bytes
-* @param sessionKeys - Available session keys from the init segment
-* @param sequenceState - Current sequence state for this stream
-* @returns Validation result and updated sequence state, or `null` if no C2PA EMSG box
-*
-* @example
-* {@includeCode ../../test/segment/validateC2paSegment.test.ts#example}
-*
-* @public
-*/
-declare function validateC2paSegment(segmentBytes: Uint8Array, sessionKeys: readonly ValidatedSessionKey[], sequenceState?: SequenceState): Promise<{
+ * Validates a C2PA live stream segment using the VSI/EMSG method (§19.7.3).
+ *
+ * Extracts the EMSG box, decodes the COSE_Sign1 and VSI map, matches the
+ * session key by kid, then performs all cryptographic checks: signature
+ * verification, BMFF content hash, sequence number floor, and key validity.
+ *
+ * Returns `null` if the segment does not contain a C2PA EMSG box.
+ *
+ * A segment whose signature, content hash, or key validity does not verify
+ * returns the received `sequenceState` unchanged.
+ *
+ * @param segmentBytes - Raw segment bytes
+ * @param sessionKeys - Available session keys from the init segment
+ * @param sequenceState - Current sequence state for this stream
+ * @returns Validation result and the sequence state for the next call, or `null` if no C2PA EMSG box
+ *
+ * @example
+ * {@includeCode ../../test/segment/validateC2paSegment.test.ts#example}
+ *
+ * @public
+ */
+export declare function validateC2paSegment(segmentBytes: Uint8Array, sessionKeys: readonly ValidatedSessionKey[], sequenceState?: SequenceState): Promise<{
   readonly result: SegmentValidationResult;
   readonly nextSequenceState: SequenceState;
 } | null>;
 //#endregion
 //#region src/manifestbox/ManifestBoxValidation.d.ts
 /**
-* The result of validating a single C2PA manifest-box live stream segment.
-*
-* Returned by {@link validateC2paManifestBoxSegment}.
-*
-* @public
-*/
+ * The result of validating a single C2PA manifest-box live stream segment.
+ *
+ * Returned by {@link validateC2paManifestBoxSegment}.
+ *
+ * @public
+ */
 type ManifestBoxValidationResult = {
   readonly manifest: C2paManifest | null;
   readonly issuer: string | null;
@@ -378,16 +397,16 @@ type ManifestBoxValidationResult = {
   readonly errorCodes: readonly (LiveVideoStatusCode | C2paStatusCode)[];
 };
 /**
-* Validates continuity for an implementer-defined continuity method (§19.3.2).
-*
-* @public
-*/
+ * Validates continuity for an implementer-defined continuity method (§19.3.2).
+ *
+ * @public
+ */
 type ManifestBoxContinuityValidator = (liveVideoAssertion: Readonly<Record<string, unknown>>, manifest: C2paManifest) => boolean | Promise<boolean>;
 /**
-* Options for `validateC2paManifestBoxSegment`.
-*
-* @public
-*/
+ * Options for `validateC2paManifestBoxSegment`.
+ *
+ * @public
+ */
 type ManifestBoxValidationOptions = {
   readonly continuityValidator?: {
     readonly method: string;
@@ -395,13 +414,13 @@ type ManifestBoxValidationOptions = {
   };
 };
 /**
-* State to carry between consecutive manifest-box segment validations.
-*
-* Pass the `nextState` returned by {@link validateC2paManifestBoxSegment}
-* into the next call to enable streamId, sequenceNumber, and continuity checks.
-*
-* @public
-*/
+ * State to carry between consecutive manifest-box segment validations.
+ *
+ * Pass the `nextState` returned by {@link validateC2paManifestBoxSegment}
+ * into the next call to enable streamId, sequenceNumber, and continuity checks.
+ *
+ * @public
+ */
 type ManifestBoxValidationState = {
   readonly lastStreamId?: string | null;
   readonly lastSequenceNumber?: number | null;
@@ -409,31 +428,36 @@ type ManifestBoxValidationState = {
 //#endregion
 //#region src/manifestbox/validateC2paManifestBoxSegment.d.ts
 /**
-* Validates a C2PA manifest-box live stream segment.
-*
-* Parses the C2PA manifest embedded in the segment and validates per §19.7.1 and §19.7.2.
-* Recomputes the `c2pa.hash.bmff.v3` content hash from the raw segment bytes and compares
-* it against the expected hash in the manifest assertion. Checks live-video assertions
-* (sequenceNumber, streamId, continuityMethod) and manifest-ID chain continuity.
-* A validator for an implementer-defined continuity method can be registered
-* via {@link ManifestBoxValidationOptions}.
-*
-* This function is **pure** — it does not access any external state. The
-* caller is responsible for persisting `nextManifestId` and `nextState`
-* between calls.
-*
-* @param bytes - Raw segment bytes
-* @param lastManifestId - Manifest ID from the previous segment, or null for the first segment
-* @param state - Optional state from the previous segment for streamId/sequenceNumber checks
-* @param options - Optional custom continuity method validator
-* @returns Validation result, the manifest ID, and state to persist for the next call
-*
-* @example
-* {@includeCode ../../test/manifestbox/validateC2paManifestBoxSegment.test.ts#example}
-*
-* @public
-*/
-declare function validateC2paManifestBoxSegment(bytes: Uint8Array, lastManifestId: string | null, state?: ManifestBoxValidationState, options?: ManifestBoxValidationOptions): Promise<{
+ * Validates a C2PA manifest-box live stream segment.
+ *
+ * Parses the C2PA manifest embedded in the segment and validates per §19.7.1 and §19.7.2.
+ * Recomputes the `c2pa.hash.bmff.v3` content hash from the raw segment bytes and compares
+ * it against the expected hash in the manifest assertion. Checks live-video assertions
+ * (sequenceNumber, streamId, continuityMethod) and manifest-ID chain continuity.
+ * The live-video and BMFF hash fields of the result come only from assertions whose
+ * hash matches a claim reference. Check `isValid` before you use any field.
+ * A validator for an implementer-defined continuity method can be registered
+ * via {@link ManifestBoxValidationOptions}.
+ *
+ * This function is **pure** — it does not access any external state. The
+ * caller is responsible for persisting `nextManifestId` and `nextState`
+ * between calls. A segment that fails verification, is on another stream, or
+ * does not move the sequence number forward returns the received
+ * `lastManifestId` and `state` unchanged. A segment that fails only the
+ * continuity check still updates them.
+ *
+ * @param bytes - Raw segment bytes
+ * @param lastManifestId - Manifest ID from the last segment that updated the state, or `null` for the first segment
+ * @param state - Optional state from the last segment that updated the state, for the streamId and sequenceNumber checks
+ * @param options - Optional custom continuity method validator
+ * @returns Validation result, the manifest ID, and state to persist for the next call
+ *
+ * @example
+ * {@includeCode ../../test/manifestbox/validateC2paManifestBoxSegment.test.ts#example}
+ *
+ * @public
+ */
+export declare function validateC2paManifestBoxSegment(bytes: Uint8Array, lastManifestId: string | null, state?: ManifestBoxValidationState, options?: ManifestBoxValidationOptions): Promise<{
   readonly result: ManifestBoxValidationResult;
   readonly nextManifestId: string | null;
   readonly nextState: ManifestBoxValidationState;
@@ -441,23 +465,23 @@ declare function validateC2paManifestBoxSegment(bytes: Uint8Array, lastManifestI
 //#endregion
 //#region src/merkle/validateC2paMerkleSegment.d.ts
 /**
-* Validates a fragmented MP4 VOD media segment against the init manifest's
-* merkle maps (§15.12.2.2). Pure: the caller persists `nextState` and resets
-* `state` after a seek.
-*
-* `merkleMaps` must be non-empty; the caller is responsible for only calling
-* this in VOD Merkle mode (i.e. after `InitSegmentValidation.merkleMaps` came
-* back non-empty).
-*
-* @example
-* {@includeCode ../../test/merkle/validateC2paMerkleSegment.test.ts#example}
-*
-* @public
-*/
-declare function validateC2paMerkleSegment(segmentBytes: Uint8Array, merkleMaps: readonly MerkleMap[], state?: MerkleSegmentState): Promise<{
+ * Validates a fragmented MP4 VOD media segment against the init manifest's
+ * merkle maps (§15.12.2.2). Pure: the caller persists `nextState` and resets
+ * `state` after a seek.
+ *
+ * `merkleMaps` must be non-empty; the caller is responsible for only calling
+ * this in VOD Merkle mode (i.e. after `InitSegmentValidation.merkleMaps` came
+ * back non-empty).
+ *
+ * @example
+ * {@includeCode ../../test/merkle/validateC2paMerkleSegment.test.ts#example}
+ *
+ * @public
+ */
+export declare function validateC2paMerkleSegment(segmentBytes: Uint8Array, merkleMaps: readonly MerkleMap[], state?: MerkleSegmentState): Promise<{
   readonly result: MerkleSegmentValidation;
   readonly nextState: MerkleSegmentState;
 }>;
 //#endregion
-export { BmffHashConstraint, BmffHashExclusion, C2paAssertion, C2paManifest, C2paSignatureInfo, C2paStatusCode, CoseKeyJwk, InitSegmentValidation, LiveVideoStatusCode, ManifestBoxContinuityValidator, ManifestBoxValidationOptions, ManifestBoxValidationResult, ManifestBoxValidationState, MerkleMap, MerkleSegmentState, MerkleSegmentValidation, SegmentValidationResult, type SequenceState, SequenceValidationReason, type SequenceValidationResult, ValidatedSessionKey, validateC2paInitSegment, validateC2paManifestBoxSegment, validateC2paMerkleSegment, validateC2paSegment };
+export type { BmffHashConstraint, BmffHashExclusion, C2paAssertion, C2paManifest, C2paSignatureInfo, CoseKeyJwk, InitSegmentValidation, ManifestBoxContinuityValidator, ManifestBoxValidationOptions, ManifestBoxValidationResult, ManifestBoxValidationState, MerkleMap, MerkleSegmentState, MerkleSegmentValidation, SegmentValidationResult, SequenceState, SequenceValidationResult, ValidatedSessionKey };
 //# sourceMappingURL=index.d.ts.map