@svta/cml-c2pa 1.4.0 → 1.4.1

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/C2paAssertion.ts","../src/C2paSignatureInfo.ts","../src/C2paManifest.ts","../src/C2paStatusCode.ts","../src/cose/CoseKeyJwk.ts","../src/LiveVideoStatusCode.ts","../src/bmff/BmffHashExclusion.ts","../src/merkle/MerkleSegmentValidation.ts","../src/init/InitSegmentValidation.ts","../src/init/validateC2paInitSegment.ts","../src/vsi/SequenceState.ts","../src/segment/SegmentValidation.ts","../src/segment/validateC2paSegment.ts","../src/manifestbox/ManifestBoxValidation.ts","../src/manifestbox/validateC2paManifestBoxSegment.ts","../src/merkle/validateC2paMerkleSegment.ts"],"sourcesContent":[],"mappings":";;;;;;;AAKA;;KAAY,aAAA;;ECAZ,SAAY,IAAA,EAAA,OAAA;;;;;;;ADAZ;;KCAY,iBAAA;;EAAZ,SAAY,aAAA,EAAA,MAAA,GAAA,IAAA;;;;;ADAZ;;;;ACAY,KCGA,YAAA,GDHA;;;;ECGZ,SAAY,aAAA,EAIa,iBAAA;gCACM;;;;;;AFR/B;;;;ACAA;;;;ACGY,cCIC,cDAY,EAAA;;;;ECAzB,SAAa,iBAAA,EAAA,mBAAA;EAkCb;;;;ECxCA;;;;ECMA;EA0BA,SAAY,uBAAA,EAAA,wBAAsB;;;;EChClC,SAAY,kBAAA,EAAA,oBAEK;EAYjB;;;;ECXA;EAI2B,SAAA,4BAAA,EAAA,8BAAA;EACP;EAEW,SAAA,2BAAA,EAAA,6BAAA;CAAA;AAe/B;AASA;;;;AC1BY,KLgCA,cAAA,GAAiB,OKhCjB,CAEG,OL8B6B,cK9B7B,CAAA;;;;;;ARXf;;;KICY,UAAA;EHDZ,SAAY,GAAA,EAAA,MAAA;;;;ACGZ,CAAA;;;;;AFHA;;;;ACAA;;;;ACGY,cGIC,mBHAY,EAAA;;;;ECAzB,SAAa,gBAAA,EAAA,4BAAA;EAkCb;;;;ACxCA;;;;ECMA;EA0BA,SAAY,yBAAA,EAAA,oCAAsB;;;;EChClC,SAAY,kBAAA,EAAA,8BAEK;AAYjB,CAAA;;;;ACXA;;AAKoB,KFwBR,mBAAA,GAAsB,OExBd,CAAA,OFwB6B,mBExB7B,CAAA;;;;;;APTpB;;;KMCY,kBAAA;ELDZ,SAAY,MAAA,EAAA,MAAA;kBKGK;;;AJAjB;;;;ACIA;AAkCA;;;KG1BY,iBAAA;EFdZ,SAAY,KAAA,EAAA,MAAA;2BEgBc;;;;ANjB1B;;;;ACAA;KMIY,SAAA;;;ELDZ,SAAY,KAAA,EAAA,MAAA;4BKKe;qBACP;;EJFpB,SAAa,UAAA,EAAA,SIIkB,iBJJlB,EAAA;EAkCb,SAAY,gBAAA,EAAA,MAAgC;;;;ACxC5C;;;;ACMA;AA0BA;;;;AChCY,KCyBA,kBAAA,GDzBA;EAcZ,SAAY,aAAA,ECYa,WDVC,CAAA,MAAA,EAAA,MAAA,CAAA;;;;ACb1B;;;AAO+B,KAwBnB,uBAAA,GAxBmB;EAAA,SAAA,QAAA,EAAA,MAAA,GAAA,IAAA;EAe/B,SAAY,WAAA,EAAA,MAAA,GAAA,IAAA;EASZ,SAAY,OAAA,EAAA,OAAA;iCAIoB,sBAAsB;;;;;;ANvCtD;;;;ACGA;;KMMY,mBAAA;;ELFZ,SAAa,GAAA,EKIE,ULJF;EAkCb,SAAY,iBAAA,EAAA,MAAgC;;;;ACxC5C;;;;ACMA;AA0BA;;KGTY,qBAAA;qBACQ;EFxBpB,SAAY,WAAA,EEyBW,UFzBX,GAAA,IAEK;EAYjB,SAAY,UAAA,EAAA,MAAA,GAAA,IAAA;iCEaoB;gCACD;;EDzB/B,SAAY,UAAA,EAAA,SAAA,CC2BoB,mBD3BpB,GC2B0C,cD3B1C,CAAA,EAAA;CAIe;;;;;APR3B;;;;ACAA;;;;ACGA;;;;ACIA;AAkCA;;;;ACxCA;;;;ACMA;AA0BA;;;iBI+JsB,uBAAA,QAA+B,aAAa,QAAQ;;;;;AThM1E;;;;ACAA;;;;ACGA;;;KQQY,aAAA;EPJZ,SAAa,kBAAA,EAAA,MAAA,GAAA,IAAA;EAkCb,SAAY,aAAA,EO5Ba,WP4BmB,CAAA,MAAA,CAAA;;;;ACxC5C;;;;ACMA;AA0BA;;cKRa;;EJxBb,SAAY,KAAA,EAAA,OAAA;EAcZ;;;;ECXA;EAI2B,SAAA,YAAA,EAAA,cAAA;EACP;EAEW,SAAA,6BAAA,EAAA,+BAAA;CAAA;AAe/B;AASA;;;;AC1BY,KEkCA,wBAAA,GAA2B,OFhCxB,CAAA,OEgCuC,wBFhCvC,CAAA;AAaf;;;;;;;;KE6BY,wBAAA;;0BACyC,wBAAA,CAAyB;AD0I9E,CAAA,GAAsB;EAA+B,SAAA,OAAA,EAAA,KAAA;EAAqB,SAAA,MAAA,EAAA,OCtI7D,wBAAA,CAAyB,6BDsIoC,GAAA,OCrI7D,wBAAA,CAAyB,SDqIoC,GAAA,OCpI7D,wBAAA,CAAyB,YDoIoC;CAAR,GAAA;EAAA,SAAA,OAAA,EAAA,KAAA;0BChIvC,wBAAA,CAAyB;;;AArDpD,CAAA;;;;AVXA;;;;ACAA;;KUKY,uBAAA;;ETFZ,SAAY,UAAA,EAAA,MAAA;;;2BSOc;ERH1B,SAAa,OAAA,EAAA,OAAA;EAkCb,SAAY,UAAA,EAAA,SQ7BmB,mBR6BF,EAAA;;;;AHzC7B;;;;ACAA;;;;ACGA;;;;ACIA;AAkCA;;;;ACxCA;;;;ACMA;AA0BY,iBOGU,mBAAA,CPH2B,YAAA,EOIlC,UPJmB,EAAA,WAAA,EAAA,SOKX,mBPLW,EAAA,EAAA,aAAA,CAAA,EOMlB,aPNkB,CAAA,EOO/B,OPP+B,CAAA;mBOOJ;8BAAqD;;;;AZxCnF;;;;ACAA;;;KYMY,2BAAA;EXHZ,SAAY,QAAA,EWIQ,YXAK,GAAA,IAAA;;;wBWGF;EVHvB,SAAa,cAAA,EAAA,MAAA,GAAA,IAAA;EAkCb,SAAY,kBAAA,EAAA,MAAgC,GAAA,IAAA;;;;ECxC5C,SAAY,OAAA,EAAA,OAAA;iCSgBoB,sBAAsB;;;ARVtD;AA0BA;;;KQRY,8BAAA,wBACS,SAAS,oCACnB,2BACI;AP3Bf;AAcA;;;;ACXY,KM+BA,4BAAA,GN/BA;EAIe,SAAA,mBAAA,CAAA,EAAA;IACP,SAAA,MAAA,EAAA,MAAA;IAEW,SAAA,QAAA,EM2BV,8BN3BU;EAAA,CAAA;AAe/B,CAAA;AASA;;;;AC1BA;AAeA;;;AAIgC,KKsBpB,0BAAA,GLtBoB;EACD,SAAA,YAAA,CAAA,EAAA,MAAA,GAAA,IAAA;EAEC,SAAA,kBAAA,CAAA,EAAA,MAAA,GAAA,IAAA;CAAsB;;;;;AR/BtD;;;;ACAA;;;;ACGA;;;;ACIA;AAkCA;;;;ACxCA;;;;ACMA;AA0BA;;;;AChCA;AAcA;iBQ6KsB,8BAAA,QACd,mDAEC,sCACE,+BACR;mBACe;;EP9LlB,SAAY,SAAA,EOgMS,0BPhMT;CAIe,CAAA;;;;;APR3B;;;;ACAA;;;;ACGA;;;;ACIa,iBYwMS,yBAAA,CZxMT,YAAA,EYyME,UZzMF,EAAA,UAAA,EAAA,SY0MS,SZ1MT,EAAA,EAAA,KAAA,CAAA,EY2MJ,kBZ3MI,CAAA,EY4MV,OZ5MU,CAAA;EAkCb,SAAY,MAAA,EY2KM,uBZ3K0B;sBY4KvB"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/C2paAssertion.ts","../src/C2paSignatureInfo.ts","../src/C2paManifest.ts","../src/C2paStatusCode.ts","../src/cose/CoseKeyJwk.ts","../src/LiveVideoStatusCode.ts","../src/bmff/BmffHashExclusion.ts","../src/merkle/MerkleSegmentValidation.ts","../src/init/InitSegmentValidation.ts","../src/init/validateC2paInitSegment.ts","../src/vsi/SequenceState.ts","../src/segment/SegmentValidation.ts","../src/segment/validateC2paSegment.ts","../src/manifestbox/ManifestBoxValidation.ts","../src/manifestbox/validateC2paManifestBoxSegment.ts","../src/merkle/validateC2paMerkleSegment.ts"],"mappings":";;;;;;;KAKY;WACF;WACA;;;;;;;;;KCFE;WACF;WACA;;;;;;;;;KCCE;WACF;WACA;WACA;WACA,eAAe;WACf,qBAAqB;;;;;;;;;;;;;;qBCDlB;;WAEZ;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;WAEA;;;;;;;YAQW,iBAAiB,eAAe;;;;;;;;;KCxChC;WACF;WACA;WACA;WACA;;;;;;;;;;;;;;qBCEG;;WAEZ;;WAEA;;WAEA;;;;;;WAMA;;WAEA;;WAEA;;WAEA;;;;;;;YAQW,sBAAsB,eAAe;;;;;;;;;KChCrC;WACF;WACA,OAAO;;;;;;;;;;;KAYL;WACF;WACA,gBAAgB;;;;;;;;;KCbd;WACF;WACA;WACA;WACA,iBAAiB;WACjB,UAAU;WACV;WACA,qBAAqB;WACrB;;;;;;;;;;;;;KAcE;WACF,eAAe;;;;;;;KAQb;WACF;WACA;WACA;WACA,sBAAsB,sBAAsB;;;;;;;;;;;;KC9B1C;WACF;WACA,KAAK;WACL;WACA;WACA;;;;;;;;;KAUE;WACF,UAAU;WACV,aAAa;WACb;WACA,sBAAsB;WACtB,qBAAqB;WACrB;WACA,sBAAsB,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBCiKhC,wBAAwB,OAAO,aAAa,QAAQ;;;;;;;;;;;;;;;;KCrL9D;WACF;WACA,eAAe;;;;;;;;;;;qBAYZ;;WAEZ;;WAEA;;WAEA;;WAEA;;WAEA;;;;;;;YAQW,2BAA2B,eAAe;;;;;;;;;KAU1C;WACE;WAAwB,eAAe,yBAAyB;;WAElE;WACA,eACC,yBAAyB,uCACzB,yBAAyB,mBACzB,yBAAyB;;WAG1B;WACA,eAAe,yBAAyB;WACxC;WACA;;;;;;;;;;;KC7DA;WACF;WACA;WACA;WACA;WACA,gBAAgB;WAChB;WACA,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;wBCwBT,oBACrB,cAAc,YACd,sBAAsB,uBACtB,gBAAe,gBACb;WAAmB,QAAQ;WAAkC,mBAAmB;;;;;;;;;;;KClCvE;WACF,UAAU;WACV;;WAEA,aAAa;WACb;WACA;WACA;WACA;WACA;WACA;WACA,sBAAsB,sBAAsB;;;;;;;KAQ1C,kCACX,oBAAoB,SAAS,0BAC7B,UAAU,2BACI;;;;;;KAOH;WACF;aACC;aACA,UAAU;;;;;;;;;;;KAYT;WACF;WACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBCwIY,+BACrB,OAAO,YACP,+BACA,QAAQ,4BACR,UAAU,+BACR;WACO,QAAQ;WACR;WACA,WAAW;;;;;;;;;;;;;;;;;;wBCWC,0BACrB,cAAc,YACd,qBAAqB,aACrB,QAAQ,qBACN;WACO,QAAQ;WACR,WAAW"}

package/dist/index.js

@@ -1,5 +1,4 @@
 import { findIsoBox, readEmsg, readIsoBoxes } from "@svta/cml-iso-bmff";
-
 //#region src/cbor/readCborItem.ts
 const TEXT_DECODER$4 = /* @__PURE__ */ new TextDecoder("utf-8", { ignoreBOM: true });
 const MAJOR_UINT = 0;
@@ -218,7 +217,6 @@ function decodeCbor(bytes) {
 	if (item.end !== bytes.length) throw new RangeError("Trailing bytes after CBOR data item");
 	return item.value;
 }
-
 //#endregion
 //#region src/LiveVideoStatusCode.ts
 /**
@@ -232,15 +230,25 @@ function decodeCbor(bytes) {
 * @public
 */
 const LiveVideoStatusCode = {
+	/** Init segment contains an `mdat` box (§19.7.1) */
 	INIT_INVALID: "livevideo.init.invalid",
+	/** C2PA Manifest Box failed standard validation (§19.7.1) */
 	MANIFEST_INVALID: "livevideo.manifest.invalid",
+	/** Segment invalid: missing Manifest Box/emsg, signature/hash/key failure, or session key outside its validity period (§19.7) */
 	SEGMENT_INVALID: "livevideo.segment.invalid",
+	/**
+	* Live video assertion field invalid: sequenceNumber or streamId mismatch
+	* (§19.7.2). Also reused for VOD Merkle per-track location discontinuity
+	* (§15.12.2), which has no dedicated code.
+	*/
 	ASSERTION_INVALID: "livevideo.assertion.invalid",
+	/** continuityMethod absent, unsupported, or companion fields incorrect (§19.7.2) */
 	CONTINUITY_METHOD_INVALID: "livevideo.continuityMethod.invalid",
+	/** Custom continuityMethod with no registered validator (§19.7.2) */
 	CONTINUITY_METHOD_UNSUPPORTED: "livevideo.continuityMethod.unsupported",
+	/** Session key invalid: signerBinding failed or required fields absent (§19.7.3) */
 	SESSIONKEY_INVALID: "livevideo.sessionkey.invalid"
 };
-
 //#endregion
 //#region src/cbor/projectCborTags.ts
 const TAG_DATE_TIME_STRING = 0;
@@ -288,7 +296,6 @@ function projectCborTags(value) {
 	}
 	return value;
 }
-
 //#endregion
 //#region src/C2paStatusCode.ts
 /**
@@ -302,21 +309,33 @@ function projectCborTags(value) {
 * @public
 */
 const C2paStatusCode = {
+	/** Assertion hash does not match the hashed URI in the claim (§15.10.3.1) */
 	ASSERTION_HASHEDURI_MISMATCH: "assertion.hashedURI.mismatch",
+	/** The assertion store has no box for a claim reference, or more than one box for its label (§8.4.1, §15.10.3.1) */
 	ASSERTION_MISSING: "assertion.missing",
+	/** The manifest has more than one hard binding assertion (§9.1, §15.10.1.2) */
 	ASSERTION_MULTIPLE_HARD_BINDINGS: "assertion.multipleHardBindings",
+	/** The assertion store holds an assertion that the claim does not reference (§15.10.3.1) */
 	ASSERTION_UNDECLARED: "assertion.undeclared",
+	/** An action requiring an ingredient reference does not have one (§18.15.4.7) */
 	ASSERTION_ACTION_INGREDIENT_MISMATCH: "assertion.action.ingredientMismatch",
+	/** Claim signature verification failed, or the signature carries no certificate (§15.7) */
 	CLAIM_SIGNATURE_MISMATCH: "claimSignature.mismatch",
+	/** The manifest has no `c2pa.signature` box, so the claim signature cannot be found (§15.7) */
 	CLAIM_SIGNATURE_MISSING: "claimSignature.missing",
+	/** The manifest has no claim box (§15.6.1) */
 	CLAIM_MISSING: "claim.missing",
+	/** The claim box holds CBOR that does not decode (§15.6.2) */
 	CLAIM_CBOR_INVALID: "claim.cbor.invalid",
+	/** The claim box holds CBOR that is not a map (§15.6.2). The library does not check the fields of the claim. */
 	CLAIM_MALFORMED: "claim.malformed",
+	/** The manifest has more than one claim box (§15.6.1) */
 	CLAIM_MULTIPLE: "claim.multiple",
+	/** BMFF hash assertion or Merkle structure is malformed (§15.2.2.3) */
 	ASSERTION_BMFFHASH_MALFORMED: "assertion.bmffHash.malformed",
+	/** BMFF content hash does not match the committed value (§15.2.2.3) */
 	ASSERTION_BMFFHASH_MISMATCH: "assertion.bmffHash.mismatch"
 };
-
 //#endregion
 //#region src/cose/decodeCoseSign1.ts
 const COSE_SIGN1_TAG = 18;
@@ -368,7 +387,6 @@ function decodeCoseSign1(coseBytes) {
 		throw new Error(`Failed to decode COSE_Sign1: ${error.message}`);
 	}
 }
-
 //#endregion
 //#region src/jumbf/parseJumbfBoxes.ts
 /**
@@ -391,11 +409,9 @@ function parseJumbfBoxes(bytes) {
 		data: box.view.readData(box.view.bytesRemaining)
 	}));
 }
-
 //#endregion
 //#region src/jumbf/parseJumbfLabel.ts
 const TEXT_DECODER$3 = /* @__PURE__ */ new TextDecoder();
-const JUMD_UUID_SIZE = 16;
 const JUMD_TOGGLES_OFFSET = 16;
 const JUMD_LABEL_START = 17;
 const LABEL_FLAG_MASK = 3;
@@ -415,14 +431,13 @@ const LABEL_FLAG_EXPECTED = 3;
 * @internal
 */
 function parseJumbfLabel(jumdData) {
-	if (jumdData.length < JUMD_UUID_SIZE + 1) return null;
+	if (jumdData.length < 17) return null;
 	if ((jumdData[JUMD_TOGGLES_OFFSET] & LABEL_FLAG_MASK) !== LABEL_FLAG_EXPECTED) return null;
 	let end = JUMD_LABEL_START;
 	while (end < jumdData.length && jumdData[end] !== 0) end++;
 	if (end >= jumdData.length) return null;
 	return TEXT_DECODER$3.decode(jumdData.subarray(JUMD_LABEL_START, end));
 }
-
 //#endregion
 //#region src/utils.ts
 const MILLISECONDS_PER_SECOND = 1e3;
@@ -572,21 +587,8 @@ function stripJumbfUuidPrefix(payload) {
 	if (!prefix || prefix.rest.length < AUX_UUID_OFFSET_SIZE) return null;
 	return prefix.rest.subarray(AUX_UUID_OFFSET_SIZE);
 }
-
 //#endregion
 //#region src/x509/asn1.ts
-/**
-* Minimal ASN.1 DER parsing helpers for X.509 certificate navigation.
-*
-* @internal
-*/
-const ASN1_TAG_INTEGER = 2;
-const ASN1_TAG_OBJECT_IDENTIFIER = 6;
-const ASN1_TAG_SEQUENCE = 48;
-const ASN1_TAG_SET = 49;
-const ASN1_TAG_UTC_TIME = 23;
-const ASN1_TAG_GENERALIZED_TIME = 24;
-const ASN1_TAG_CONTEXT_0 = 160;
 const ASN1_LONG_FORM_FLAG = 128;
 const ASN1_LONG_FORM_MASK = 127;
 function readLength(bytes, offset) {
@@ -630,7 +632,6 @@ function readElementRaw(bytes, offset) {
 	if (!el) return null;
 	return bytes.subarray(offset, offset + el.totalSize);
 }
-
 //#endregion
 //#region src/x509/extractCertificateInfo.ts
 const TEXT_DECODER$1 = /* @__PURE__ */ new TextDecoder();
@@ -651,16 +652,16 @@ function matchesOID(value, oid) {
 }
 function parseTime(element) {
 	const text = TEXT_DECODER$1.decode(element.value);
-	if (element.tag === ASN1_TAG_UTC_TIME) {
+	if (element.tag === 23) {
 		const yy = parseInt(text.substring(0, 2), 10);
 		return `${yy >= 50 ? 1900 + yy : 2e3 + yy}-${text.substring(2, 4)}-${text.substring(4, 6)}T${text.substring(6, 8)}:${text.substring(8, 10)}:${text.substring(10, 12)}Z`;
 	}
-	if (element.tag === ASN1_TAG_GENERALIZED_TIME) return `${text.substring(0, 4)}-${text.substring(4, 6)}-${text.substring(6, 8)}T${text.substring(8, 10)}:${text.substring(10, 12)}:${text.substring(12, 14)}Z`;
+	if (element.tag === 24) return `${text.substring(0, 4)}-${text.substring(4, 6)}-${text.substring(6, 8)}T${text.substring(8, 10)}:${text.substring(10, 12)}:${text.substring(12, 14)}Z`;
 	return null;
 }
 function findOidValueInSequence(seqValue, targetOID) {
 	const oidEl = readElement(seqValue, 0);
-	if (!oidEl || oidEl.tag !== ASN1_TAG_OBJECT_IDENTIFIER) return null;
+	if (!oidEl || oidEl.tag !== 6) return null;
 	if (!matchesOID(oidEl.value, targetOID)) return null;
 	const valEl = readElement(seqValue, oidEl.totalSize);
 	return valEl ? TEXT_DECODER$1.decode(valEl.value) : null;
@@ -669,11 +670,11 @@ function findRDNValue(issuerValue, targetOID) {
 	let offset = 0;
 	while (offset < issuerValue.length) {
 		const setEl = readElement(issuerValue, offset);
-		if (!setEl || setEl.tag !== ASN1_TAG_SET) break;
+		if (!setEl || setEl.tag !== 49) break;
 		let setOffset = 0;
 		while (setOffset < setEl.value.length) {
 			const seqEl = readElement(setEl.value, setOffset);
-			if (!seqEl || seqEl.tag !== ASN1_TAG_SEQUENCE) break;
+			if (!seqEl || seqEl.tag !== 48) break;
 			const found = findOidValueInSequence(seqEl.value, targetOID);
 			if (found) return found;
 			setOffset += seqEl.totalSize;
@@ -700,29 +701,29 @@ function findRDNValue(issuerValue, targetOID) {
 function extractCertificateInfo(certDER) {
 	try {
 		const cert = readElement(certDER, 0);
-		if (!cert || cert.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!cert || cert.tag !== 48) return null;
 		const tbs = readElement(cert.value, 0);
-		if (!tbs || tbs.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!tbs || tbs.tag !== 48) return null;
 		let offset = 0;
 		let el = readElement(tbs.value, offset);
 		if (!el) return null;
-		if (el.tag === ASN1_TAG_CONTEXT_0) {
+		if (el.tag === 160) {
 			offset += el.totalSize;
 			el = readElement(tbs.value, offset);
 			if (!el) return null;
 		}
-		if (el.tag !== ASN1_TAG_INTEGER) return null;
+		if (el.tag !== 2) return null;
 		offset += el.totalSize;
 		el = readElement(tbs.value, offset);
-		if (!el || el.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!el || el.tag !== 48) return null;
 		offset += el.totalSize;
 		el = readElement(tbs.value, offset);
-		if (!el || el.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!el || el.tag !== 48) return null;
 		const issuer = findRDNValue(el.value, OID_COMMON_NAME) ?? findRDNValue(el.value, OID_ORG_NAME) ?? "Unknown Issuer";
 		offset += el.totalSize;
 		el = readElement(tbs.value, offset);
 		let notBefore = null;
-		if (el && el.tag === ASN1_TAG_SEQUENCE) {
+		if (el && el.tag === 48) {
 			const timeEl = readElement(el.value, 0);
 			if (timeEl) notBefore = parseTime(timeEl);
 		}
@@ -734,7 +735,6 @@ function extractCertificateInfo(certDER) {
 		return null;
 	}
 }
-
 //#endregion
 //#region src/readC2paManifest.ts
 const TEXT_DECODER = /* @__PURE__ */ new TextDecoder();
@@ -774,18 +774,20 @@ function parseAssertionsInternal(assertionStoreBoxes) {
 		const contentBox = inner.find((b) => b.type === "cbor" || b.type === "json" || b.type === "jumc" || b.type === "jp2c" || b.type === "bidb");
 		let data = null;
 		let taggedData;
-		if (contentBox) if (contentBox.type === "cbor") try {
-			taggedData = decodeCbor(contentBox.data);
-			data = projectCborTags(taggedData);
-		} catch {
-			data = contentBox.data;
-		}
-		else if (contentBox.type === "json") try {
-			data = JSON.parse(TEXT_DECODER.decode(contentBox.data));
-		} catch {
-			data = contentBox.data;
+		if (contentBox) {
+			if (contentBox.type === "cbor") try {
+				taggedData = decodeCbor(contentBox.data);
+				data = projectCborTags(taggedData);
+			} catch {
+				data = contentBox.data;
+			}
+			else if (contentBox.type === "json") try {
+				data = JSON.parse(TEXT_DECODER.decode(contentBox.data));
+			} catch {
+				data = contentBox.data;
+			}
+			else data = contentBox.data;
 		}
-		else data = contentBox.data;
 		assertions.push({
 			label,
 			data,
@@ -861,7 +863,7 @@ function extractClaimAssertionRefs(claimData) {
 		if (!url || hash == null) continue;
 		refs.push({
 			url,
-			hash: hash instanceof Uint8Array ? hash : new Uint8Array(0),
+			hash: hash instanceof Uint8Array ? hash : /* @__PURE__ */ new Uint8Array(0),
 			alg: e["alg"] ?? null
 		});
 	}
@@ -963,7 +965,6 @@ function readC2paManifest(bytes, preParsedBoxes) {
 		assertions: internalAssertions
 	};
 }
-
 //#endregion
 //#region src/bmff/shouldExcludeBox.ts
 function bytesMatchAt(boxData, offset, expected) {
@@ -1002,7 +1003,6 @@ function shouldExcludeBox(boxType, boxData, exclusions) {
 	}
 	return false;
 }
-
 //#endregion
 //#region src/bmff/computeBmffHash.ts
 const MINIMUM_BOX_SIZE = 8;
@@ -1068,7 +1068,6 @@ async function computeBmffHash(segmentBytes, options) {
 	const hashBuffer = await crypto.subtle.digest(alg, hashInput);
 	return new Uint8Array(hashBuffer);
 }
-
 //#endregion
 //#region src/bmff/parseExclusions.ts
 function isMap(value) {
@@ -1117,7 +1116,6 @@ function parseExclusions(rawExclusions) {
 	}
 	return exclusions;
 }
-
 //#endregion
 //#region src/extractManifestCertificate.ts
 const X5CHAIN_COSE_HEADER = 33;
@@ -1137,11 +1135,10 @@ function extractCertificateFromSignatureBytes(signatureBytes) {
 		return null;
 	}
 }
-
 //#endregion
 //#region src/claim/validateActionIngredients.ts
-const ACTIONS_LABELS = new Set(["c2pa.actions", "c2pa.actions.v2"]);
-const ACTIONS_REQUIRING_INGREDIENTS = new Set([
+const ACTIONS_LABELS = /* @__PURE__ */ new Set(["c2pa.actions", "c2pa.actions.v2"]);
+const ACTIONS_REQUIRING_INGREDIENTS = /* @__PURE__ */ new Set([
 	"c2pa.opened",
 	"c2pa.placed",
 	"c2pa.removed"
@@ -1178,7 +1175,6 @@ function validateActionIngredients(assertions) {
 	}
 	return codes;
 }
-
 //#endregion
 //#region src/claim/validateAssertionHashes.ts
 /**
@@ -1255,7 +1251,6 @@ async function validateAssertionHashes(claimRefs, assertions) {
 		verified
 	};
 }
-
 //#endregion
 //#region src/cose/constants.ts
 const ECDSA_ALGORITHM = "ECDSA";
@@ -1267,10 +1262,9 @@ const CURVE_P521 = "P-521";
 const HASH_SHA256 = "SHA-256";
 const HASH_SHA384 = "SHA-384";
 const HASH_SHA512 = "SHA-512";
-
 //#endregion
 //#region src/cose/resolveAlgorithmFromCoseAlg.ts
-const COSE_ALGORITHM_MAP = new Map([
+const COSE_ALGORITHM_MAP = /* @__PURE__ */ new Map([
 	[-7, {
 		name: ECDSA_ALGORITHM,
 		namedCurve: CURVE_P256
@@ -1312,7 +1306,6 @@ function resolveAlgorithmFromCoseAlg(coseAlg) {
 	if (!algorithm) throw new Error(`Unsupported COSE algorithm: ${coseAlg}`);
 	return algorithm;
 }
-
 //#endregion
 //#region src/cose/buildSigStructure.ts
 const CBOR_ARRAY_FOUR_ITEMS = 132;
@@ -1364,7 +1357,7 @@ function writeByteStringHeader(output, offset, length) {
 *
 * @public
 */
-function buildSigStructure(protectedBytes, payload, externalAad = new Uint8Array(0)) {
+function buildSigStructure(protectedBytes, payload, externalAad = /* @__PURE__ */ new Uint8Array(0)) {
 	const totalLength = 2 + COSE_SIG1_CONTEXT_BYTES.length + byteStringHeaderSize(protectedBytes.length) + protectedBytes.length + byteStringHeaderSize(externalAad.length) + externalAad.length + byteStringHeaderSize(payload.length) + payload.length;
 	const result = new Uint8Array(totalLength);
 	let offset = 0;
@@ -1395,7 +1388,6 @@ function encodeCborByteString(bytes) {
 	result.set(bytes, writeByteStringHeader(result, 0, bytes.length));
 	return result;
 }
-
 //#endregion
 //#region src/cose/verifyCoseSign1.ts
 const DER_SEQUENCE_TAG = 48;
@@ -1462,22 +1454,25 @@ function derToRawEcdsaSignature(der, componentSize) {
 }
 function resolveVerifyAlgorithm(publicKey) {
 	const { name } = publicKey.algorithm;
-	if (name === ED25519_ALGORITHM) return { name: ED25519_ALGORITHM };
-	if (name === ECDSA_ALGORITHM) {
+	if (name === "Ed25519") return { name: ED25519_ALGORITHM };
+	if (name === "ECDSA") {
 		const curve = publicKey.algorithm.namedCurve;
 		return {
 			name: ECDSA_ALGORITHM,
-			hash: { name: curve === CURVE_P384 ? HASH_SHA384 : curve === CURVE_P521 ? HASH_SHA512 : HASH_SHA256 }
+			hash: { name: curve === "P-384" ? HASH_SHA384 : curve === "P-521" ? HASH_SHA512 : HASH_SHA256 }
+		};
+	}
+	if (name === "RSA-PSS") {
+		const hashName = publicKey.algorithm.hash.name;
+		return {
+			name: RSA_PSS_ALGORITHM,
+			saltLength: RSA_PSS_SALT_LENGTH[hashName] ?? 32
 		};
 	}
-	if (name === RSA_PSS_ALGORITHM) return {
-		name: RSA_PSS_ALGORITHM,
-		saltLength: RSA_PSS_SALT_LENGTH[publicKey.algorithm.hash.name] ?? 32
-	};
 	throw new Error(`Unsupported public key algorithm: ${name}`);
 }
 function normalizeSignature(signature, publicKey) {
-	if (publicKey.algorithm.name !== ECDSA_ALGORITHM) return signature;
+	if (publicKey.algorithm.name !== "ECDSA") return signature;
 	const componentSize = getComponentSize(publicKey);
 	if (isDerEncoded(signature, componentSize * 2)) return derToRawEcdsaSignature(signature, componentSize);
 	return signature;
@@ -1508,7 +1503,6 @@ async function verifyCoseSign1(coseSign1, payload, publicKey) {
 	const signature = normalizeSignature(coseSign1.signature, publicKey);
 	return crypto.subtle.verify(algorithm, publicKey, signature, sigStructure);
 }
-
 //#endregion
 //#region src/x509/extractCertificateSpki.ts
 /**
@@ -1529,37 +1523,36 @@ async function verifyCoseSign1(coseSign1, payload, publicKey) {
 function extractCertificateSpki(certDER) {
 	try {
 		const cert = readElement(certDER, 0);
-		if (!cert || cert.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!cert || cert.tag !== 48) return null;
 		const tbs = readElement(cert.value, 0);
-		if (!tbs || tbs.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!tbs || tbs.tag !== 48) return null;
 		let offset = 0;
 		let el = readElement(tbs.value, offset);
 		if (!el) return null;
-		if (el.tag === ASN1_TAG_CONTEXT_0) {
+		if (el.tag === 160) {
 			offset += el.totalSize;
 			el = readElement(tbs.value, offset);
 			if (!el) return null;
 		}
-		if (el.tag !== ASN1_TAG_INTEGER) return null;
+		if (el.tag !== 2) return null;
 		offset += el.totalSize;
 		el = readElement(tbs.value, offset);
-		if (!el || el.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!el || el.tag !== 48) return null;
 		offset += el.totalSize;
 		el = readElement(tbs.value, offset);
-		if (!el || el.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!el || el.tag !== 48) return null;
 		offset += el.totalSize;
 		el = readElement(tbs.value, offset);
-		if (!el || el.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!el || el.tag !== 48) return null;
 		offset += el.totalSize;
 		el = readElement(tbs.value, offset);
-		if (!el || el.tag !== ASN1_TAG_SEQUENCE) return null;
+		if (!el || el.tag !== 48) return null;
 		offset += el.totalSize;
 		return readElementRaw(tbs.value, offset);
 	} catch {
 		return null;
 	}
 }
-
 //#endregion
 //#region src/x509/normalizeRsaPssSpki.ts
 const OID_RSASSA_PSS = /* @__PURE__ */ new Uint8Array([
@@ -1616,15 +1609,15 @@ function containsRsaPssOid(bytes) {
 function normalizeRsaPssSpki(spkiBytes) {
 	if (!containsRsaPssOid(spkiBytes)) return spkiBytes;
 	const outer = readElement(spkiBytes, 0);
-	if (!outer || outer.tag !== ASN1_TAG_SEQUENCE) return spkiBytes;
+	if (!outer || outer.tag !== 48) return spkiBytes;
 	const algId = readElement(outer.value, 0);
-	if (!algId || algId.tag !== ASN1_TAG_SEQUENCE) return spkiBytes;
+	if (!algId || algId.tag !== 48) return spkiBytes;
 	const publicKeyBitString = outer.value.subarray(algId.totalSize);
 	const innerLength = RSA_ENCRYPTION_ALGORITHM_ID.length + publicKeyBitString.length;
 	const headerBytes = encodeDerLength(innerLength);
 	const result = new Uint8Array(1 + headerBytes.length + innerLength);
 	let offset = 0;
-	result[offset++] = ASN1_TAG_SEQUENCE;
+	result[offset++] = 48;
 	result.set(headerBytes, offset);
 	offset += headerBytes.length;
 	result.set(RSA_ENCRYPTION_ALGORITHM_ID, offset);
@@ -1647,7 +1640,6 @@ function encodeDerLength(length) {
 		length & 255
 	]);
 }
-
 //#endregion
 //#region src/claim/verifyClaimSignature.ts
 /**
@@ -1677,7 +1669,6 @@ async function verifyClaimSignature(signatureBytes, claimCborBytes, certificateD
 		return false;
 	}
 }
-
 //#endregion
 //#region src/claim/validateManifestIntegrity.ts
 const HARD_BINDING_LABELS = /* @__PURE__ */ new Set([
@@ -1753,7 +1744,6 @@ async function validateManifestIntegrity(internal) {
 		verifiedAssertions: assertionHashes.verified
 	};
 }
-
 //#endregion
 //#region src/cose/convertCoseKeyToJwk.ts
 const OKP_KEY_TYPE = 1;
@@ -1819,7 +1809,6 @@ function convertCoseKeyToJwk(coseKey) {
 	}
 	throw new Error(`Unsupported COSE key type: ${kty}`);
 }
-
 //#endregion
 //#region src/cose/resolveImportAlgorithm.ts
 const KEY_TYPE_OKP = "OKP";
@@ -1829,7 +1818,6 @@ function resolveImportAlgorithm(jwk) {
 		namedCurve: jwk.crv
 	};
 }
-
 //#endregion
 //#region src/cose/verifySignerBinding.ts
 async function verifyPayload(coseSign1, payload, publicKey) {
@@ -1864,7 +1852,6 @@ async function verifySignerBinding(signerBindingBytes, sessionCoseKey, signerCer
 	if (await verifyPayload(coseSign1, signerCertBytes, publicKey)) return true;
 	return verifyPayload(coseSign1, encodeCborByteString(signerCertBytes), publicKey);
 }
-
 //#endregion
 //#region src/merkle/validateMerkleMaps.ts
 function parseMerkleRow(rawHashes) {
@@ -1938,7 +1925,6 @@ async function validateMerkleMaps(bytes, assertion, codes) {
 	}
 	return merkleMaps;
 }
-
 //#endregion
 //#region src/init/validateC2paInitSegment.ts
 const BMFF_HASH_ASSERTION_LABEL$1 = "c2pa.hash.bmff.v3";
@@ -2112,7 +2098,6 @@ async function validateC2paInitSegment(bytes) {
 		errorCodes
 	};
 }
-
 //#endregion
 //#region src/emsg/extractVsiEmsgBox.ts
 const EMSG_BOX_TYPE = "emsg";
@@ -2138,7 +2123,6 @@ function extractVsiEmsgBox(segmentBytes) {
 	}
 	return null;
 }
-
 //#endregion
 //#region src/vsi/decodeVsiMap.ts
 /**
@@ -2160,10 +2144,7 @@ function decodeVsiMap(vsiCborBytes) {
 	if (typeof raw !== "object" || raw === null) throw new Error("VSI map must be a CBOR map");
 	const rawSequenceNumber = raw["sequenceNumber"];
 	const sequenceNumber = asUnsignedInteger(rawSequenceNumber);
-	if (sequenceNumber === null) {
-		const received = typeof rawSequenceNumber === "number" || typeof rawSequenceNumber === "bigint" ? String(rawSequenceNumber) : typeof rawSequenceNumber;
-		throw new Error(`VSI map sequenceNumber must be an unsigned integer up to ${Number.MAX_SAFE_INTEGER}, got ${received}`);
-	}
+	if (sequenceNumber === null) throw new Error(`VSI map sequenceNumber must be an unsigned integer up to ${Number.MAX_SAFE_INTEGER}, got ${typeof rawSequenceNumber === "number" || typeof rawSequenceNumber === "bigint" ? String(rawSequenceNumber) : typeof rawSequenceNumber}`);
 	const bmffHashRaw = raw["bmffHash"];
 	if (!bmffHashRaw || typeof bmffHashRaw !== "object") throw new Error("VSI map missing bmffHash");
 	const hash = bmffHashRaw["hash"];
@@ -2182,7 +2163,6 @@ function decodeVsiMap(vsiCborBytes) {
 		manifestId
 	};
 }
-
 //#endregion
 //#region src/vsi/createSequenceState.ts
 /**
@@ -2201,7 +2181,6 @@ function createSequenceState() {
 		seenSequences: /* @__PURE__ */ new Set()
 	};
 }
-
 //#endregion
 //#region src/vsi/SequenceState.ts
 /**
@@ -2214,13 +2193,17 @@ function createSequenceState() {
 * @public
 */
 const SequenceValidationReason = {
+	/** Sequence number is the next expected value */
 	VALID: "valid",
+	/** Sequence number was already seen */
 	DUPLICATE: "duplicate",
+	/** One or more sequence numbers were skipped */
 	GAP_DETECTED: "gap_detected",
+	/** Sequence number is less than the last seen */
 	OUT_OF_ORDER: "out_of_order",
+	/** Below the session key's minSequenceNumber */
 	SEQUENCE_NUMBER_BELOW_MINIMUM: "sequence_number_below_minimum"
 };
-
 //#endregion
 //#region src/vsi/validateSequenceNumber.ts
 const SEEN_SEQUENCES_WINDOW_SIZE = 32;
@@ -2309,7 +2292,6 @@ function validateSequenceNumber(state, sequenceNumber, minSequenceNumber) {
 		}
 	};
 }
-
 //#endregion
 //#region src/bmff/validateBmffHash.ts
 const OFFSET_PREFIX_SIZES_TO_TRY = [8, 0];
@@ -2339,7 +2321,6 @@ async function validateBmffHash(segmentBytes, expectedHash, options) {
 	}), expectedHash)) return true;
 	return false;
 }
-
 //#endregion
 //#region src/segment/validateC2paSegment.ts
 function findSessionKey(sessionKeys, kidHex) {
@@ -2418,7 +2399,6 @@ async function validateC2paSegment(segmentBytes, sessionKeys, sequenceState = cr
 		nextSequenceState: authentic ? nextSequenceState : sequenceState
 	};
 }
-
 //#endregion
 //#region src/manifestbox/validateC2paManifestBoxSegment.ts
 const LIVE_VIDEO_ASSERTION_LABEL = "c2pa.livevideo.segment";
@@ -2566,7 +2546,7 @@ async function validateC2paManifestBoxSegment(bytes, lastManifestId, state, opti
 		offsetPrefixSize: 8
 	}), bmff.hashBytes);
 	const continuityCodes = await validateContinuity(manifest, liveVideo, lastManifestId, options);
-	const liveVideoCodes = [...new Set([...collectErrorCodes(manifest !== null, liveVideo !== null, streamIdValid, sequenceNumberValid, bmffHashMatches), ...continuityCodes])];
+	const liveVideoCodes = [.../* @__PURE__ */ new Set([...collectErrorCodes(manifest !== null, liveVideo !== null, streamIdValid, sequenceNumberValid, bmffHashMatches), ...continuityCodes])];
 	const integrityCodes = integrity?.codes ?? [];
 	const errorCodes = [...liveVideoCodes, ...integrityCodes];
 	if (bmff.malformed) errorCodes.push(C2paStatusCode.ASSERTION_BMFFHASH_MALFORMED);
@@ -2592,7 +2572,6 @@ async function validateC2paManifestBoxSegment(bytes, lastManifestId, state, opti
 		} : state ?? {}
 	};
 }
-
 //#endregion
 //#region src/merkle/validateC2paMerkleSegment.ts
 const MERKLE_BOX_PURPOSE = "merkle";
@@ -2764,7 +2743,7 @@ async function validateC2paMerkleSegment(segmentBytes, merkleMaps, state) {
 		nextState: { lastLocations: nextLocations }
 	};
 }
-
 //#endregion
 export { C2paStatusCode, LiveVideoStatusCode, SequenceValidationReason, validateC2paInitSegment, validateC2paManifestBoxSegment, validateC2paMerkleSegment, validateC2paSegment };
+
 //# sourceMappingURL=index.js.map