@swal/edge-mesh 0.0.0-stage → 0.1.1

package/dist/medico/credencial.d.ts

@@ -0,0 +1,160 @@
+/**
+ * `CredencialMedica` — construction, signing and validation.
+ *
+ * ─── VALIDATION FAILS CLOSED ────────────────────────────────────────────────
+ *
+ * Every refusal in this module returns a named reason and leaves the caller
+ * with no way to read "unverified but proceed" out of the result. There is no
+ * `unknown`, no tri-state, no boolean-plus-warning. The type system does not
+ * offer a value meaning "we could not check this, carry on".
+ *
+ * That is the whole point. The OrionHealth licence verifier returns
+ * `LicenseVerificationResult.unknown` when a country's registry is empty, which
+ * is correct for a local lookup UI and wrong here: a mesh node that treats
+ * `unknown` as "not refused" turns *an unsupported country* into a bypass. A
+ * physician could present a licence from a country with no registry snapshot and
+ * be waved through by any node that had not yet downloaded that registry.
+ */
+import type { PostQuantumIdentity } from "../identity/index.js";
+import type { NodoId, ParPublico } from "../types/index.js";
+import { type CredencialMedica, type EstadoEmision, type TipoCredencial, VERSION_MODELO } from "./types.js";
+/** Why a credential was refused. Every value here means access stays closed. */
+export declare const MOTIVO_RECHAZO_CREDENCIAL: {
+    /** A mandatory field is absent or empty. Names the field. */
+    readonly CAMPO_OBLIGATORIO_AUSENTE: "campo_obligatorio_ausente";
+    /**
+     * `vigenteHasta` absent or not a number. Kept distinct from
+     * `CREDENCIAL_CADUCADA` because this is the OrionHealth `expired`-never-returned
+     * defect: without an issuer-signed expiry a revoked licence verifies forever.
+     */
+    readonly SIN_VIGENCIA: "sin_vigencia";
+    /** `Date.now() >= vigenteHasta`. */
+    readonly CREDENCIAL_CADUCADA: "credencial_caducada";
+    /** `vigenteHasta` is in the past at construction time. */
+    readonly VIGENCIA_EN_PASADO: "vigencia_en_pasado";
+    /** `emitidoEn` is not a plausible epoch-ms value, or is after `vigenteHasta`. */
+    readonly EMISION_INVALIDA: "emision_invalida";
+    /** `idLicencia` is not a 64-char lower-case hex SHA-256. */
+    readonly ID_LICENCIA_MAL_FORMADO: "id_licencia_mal_formado";
+    /** `pais` is not ISO 3166-1 alpha-2. */
+    readonly PAIS_INVALIDO: "pais_invalido";
+    /** `tipo` or `estadoEmision` outside the declared unions. */
+    readonly ENUM_INVALIDO: "enum_invalido";
+    /** No signature bytes. */
+    readonly FIRMA_AUSENTE: "firma_ausente";
+    /** Signature does not verify against the issuer's public key. */
+    readonly FIRMA_INVALIDA: "firma_invalida";
+    /** `estadoEmision: 'autofirmada'` whose `emisor` is not the subject. */
+    readonly AUTOEMISION_INCOHERENTE: "autoemision_incoherente";
+};
+export type MotivoRechazoCredencial = (typeof MOTIVO_RECHAZO_CREDENCIAL)[keyof typeof MOTIVO_RECHAZO_CREDENCIAL];
+export type ResultadoValidacionCredencial = {
+    readonly ok: true;
+    readonly credencial: CredencialMedica;
+} | {
+    readonly ok: false;
+    readonly motivo: MotivoRechazoCredencial;
+    readonly detalle: string;
+    /**
+     * Always `false`. Present so that a caller destructuring the discriminant
+     * cannot accidentally treat a refusal as soft information. There is no
+     * state in this module where a credential is "unverified but usable".
+     */
+    readonly accesoPermitido: false;
+};
+/** Inputs for {@link crearCredencial}. The issuer signs; nothing else does. */
+export interface BorradorCredencial {
+    readonly tipo: TipoCredencial;
+    /** ISO 3166-1 alpha-2. `CO` for Colombia. */
+    readonly pais: string;
+    /** `'minsalud-rethus'`, `'colomedico-cm'`. The source of the claim. */
+    readonly autoridad: string;
+    /** `sha256(normalize(numeroLicencia))`. The raw number must not be passed here. */
+    readonly idLicencia: string;
+    readonly especialidad?: string;
+    /** Seal of the real licence number to a specific verifier, if kept. */
+    readonly numeroLicenciaCifrado?: Uint8Array;
+    readonly emitidoEn: number;
+    /**
+     * REQUIRED. Issuer-signed expiry. There is no default and no "derive it from
+     * the registry": a membership list cannot express a validity window, so this
+     * value has to come from the issuer's signature.
+     */
+    readonly vigenteHasta: number;
+    readonly estadoEmision: EstadoEmision;
+    /** Who signs. For `'autofirmada'` this is the subject node itself. */
+    readonly emisor: NodoId;
+}
+/**
+ * Structural validation, in cheap-to-expensive order. Runs no signature check.
+ *
+ * Order is deliberate: the malformed-shape refusals cost nothing, so a garbage
+ * payload never reaches a post-quantum operation. Same discipline
+ * `applyTransaction` in `src/maloca/karma.ts` uses.
+ *
+ * @param ahora - injected clock (ms epoch). Tests pass a fixed value; the
+ *   function itself never reads the clock, which is what keeps it pure.
+ */
+export declare function validarCredencial(credencial: CredencialMedica, ahora: number): ResultadoValidacionCredencial;
+/**
+ * Verify the issuer's signature over the canonical credential bytes.
+ *
+ * Separate from {@link validarCredencial} so a caller can run the cheap
+ * structural checks first and skip a post-quantum verification on garbage.
+ * Both are required before a credential counts as evidence; neither is
+ * sufficient alone.
+ */
+export declare function verificarFirmaCredencial(credencial: CredencialMedica, identidadEmisor: PostQuantumIdentity, parPublico: ParPublico): Promise<boolean>;
+/**
+ * Full validation: structure, then signature, then the self-attestation rule.
+ *
+ * @returns `ok: true` only when the credential is well formed, unexpired and
+ *   genuinely signed by `emisor`. Any other outcome is `ok: false` with
+ *   `accesoPermitido: false`. There is no partial credit and no third state.
+ */
+export declare function validarCredencialFirmada(credencial: CredencialMedica, identidadEmisor: PostQuantumIdentity, parPublicoEmisor: ParPublico, ahora: number): Promise<ResultadoValidacionCredencial>;
+/**
+ * A self-attested credential must be signed by the subject it rides on.
+ *
+ * Kept separate from {@link validarCredencialFirmada} because a
+ * `CredencialMedica` carries no subject field of its own — the binding is
+ * `RegistroProfesional.nodoId`, one level up. An `autofirmada` credential whose
+ * `emisor` is a different node would let a node borrow someone else's key to
+ * look institutionally verified, so the check needs both halves and neither
+ * object alone contains them.
+ *
+ * Only `autofirmada` is constrained this way: an `atestiguada_pares` credential
+ * carries the issuing node's own signature, and an `anclada_autoridad` one
+ * carries the college's, and both are expected to differ from the subject.
+ */
+export declare function validarVinculoEmision(credencial: CredencialMedica, nodoSujeto: NodoId): ResultadoValidacionCredencial;
+/**
+ * Build and sign a credential.
+ *
+ * The `id` is derived from `idLicencia + tipo + pais`, so the same licence with
+ * the same type in the same country always yields the same id: the credential is
+ * identifiable across nodes without any node choosing a random identifier that
+ * two honest nodes would fail to agree on.
+ *
+ * The signature covers everything except `firma`, over the canonical bytes from
+ * `./canonica.ts`.
+ */
+export declare function crearCredencial(borrador: BorradorCredencial, identidad: PostQuantumIdentity): Promise<CredencialMedica>;
+/** SHA-256 of the canonical credential bytes. Binds an `Aval` to exact bytes. */
+export declare function hashDeCredencial(credencial: CredencialMedica): Promise<string>;
+/** Hex form of the canonical credential bytes, for logging and debugging. */
+export declare function volcarCredencial(credencial: CredencialMedica): string;
+/**
+ * A "certified doctor" per the product promise: `licencia ∧ especialidad`, both
+ * with a peer-witnessed or authority-anchored state, both unexpired.
+ *
+ * Deliberately not a boolean field on the licence. A boolean cannot expire, and
+ * specialties are revoked on a different cadence from base licensure.
+ *
+ * A licensed-but-unspecialised doctor is a legitimate node with a *smaller*
+ * capability set, not an impostor (DECISIÓN A.4) — this returns `false`, and the
+ * caller decides what a lower tier grants.
+ */
+export declare function esMedicoCertificado(credenciales: readonly CredencialMedica[], ahora: number): boolean;
+export { VERSION_MODELO };
+//# sourceMappingURL=credencial.d.ts.map

package/dist/medico/credencial.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credencial.d.ts","sourceRoot":"","sources":["../../src/medico/credencial.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAO5D,OAAO,EAEN,KAAK,gBAAgB,EAErB,KAAK,aAAa,EAElB,KAAK,cAAc,EACnB,cAAc,EACd,MAAM,YAAY,CAAC;AAEpB,gFAAgF;AAChF,eAAO,MAAM,yBAAyB;IACrC,6DAA6D;aAC7D,yBAAyB,EAAE,2BAA2B;IACtD;;;;OAIG;aACH,YAAY,EAAE,cAAc;IAC5B,oCAAoC;aACpC,mBAAmB,EAAE,qBAAqB;IAC1C,0DAA0D;aAC1D,kBAAkB,EAAE,oBAAoB;IACxC,iFAAiF;aACjF,gBAAgB,EAAE,kBAAkB;IACpC,4DAA4D;aAC5D,uBAAuB,EAAE,yBAAyB;IAClD,wCAAwC;aACxC,aAAa,EAAE,eAAe;IAC9B,6DAA6D;aAC7D,aAAa,EAAE,eAAe;IAC9B,0BAA0B;aAC1B,aAAa,EAAE,eAAe;IAC9B,iEAAiE;aACjE,cAAc,EAAE,gBAAgB;IAChC,wEAAwE;aACxE,uBAAuB,EAAE,yBAAyB;CACzC,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAClC,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,MAAM,6BAA6B,GACtC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAA;CAAE,GAC5D;IACA,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC;CAC/B,CAAC;AAEL,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,6CAA6C;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,UAAU,CAAC;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAYD;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAChC,UAAU,EAAE,gBAAgB,EAC5B,KAAK,EAAE,MAAM,GACX,6BAA6B,CAkH/B;AAED;;;;;;;GAOG;AACH,wBAAsB,wBAAwB,CAC7C,UAAU,EAAE,gBAAgB,EAC5B,eAAe,EAAE,mBAAmB,EACpC,UAAU,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAC7C,UAAU,EAAE,gBAAgB,EAC5B,eAAe,EAAE,mBAAmB,EACpC,gBAAgB,EAAE,UAAU,EAC5B,KAAK,EAAE,MAAM,GACX,OAAO,CAAC,6BAA6B,CAAC,CAkBxC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACpC,UAAU,EAAE,gBAAgB,EAC5B,UAAU,EAAE,MAAM,GAChB,6BAA6B,CAW/B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACpC,QAAQ,EAAE,kBAAkB,EAC5B,SAAS,EAAE,mBAAmB,GAC5B,OAAO,CAAC,gBAAgB,CAAC,CA4B3B;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAC/B,UAAU,EAAE,gBAAgB,GAC1B,OAAO,CAAC,MAAM,CAAC,CAEjB;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,GAAG,MAAM,CAErE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAClC,YAAY,EAAE,SAAS,gBAAgB,EAAE,EACzC,KAAK,EAAE,MAAM,GACX,OAAO,CAcT;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/medico/credencial.js

@@ -0,0 +1,240 @@
+/**
+ * `CredencialMedica` — construction, signing and validation.
+ *
+ * ─── VALIDATION FAILS CLOSED ────────────────────────────────────────────────
+ *
+ * Every refusal in this module returns a named reason and leaves the caller
+ * with no way to read "unverified but proceed" out of the result. There is no
+ * `unknown`, no tri-state, no boolean-plus-warning. The type system does not
+ * offer a value meaning "we could not check this, carry on".
+ *
+ * That is the whole point. The OrionHealth licence verifier returns
+ * `LicenseVerificationResult.unknown` when a country's registry is empty, which
+ * is correct for a local lookup UI and wrong here: a mesh node that treats
+ * `unknown` as "not refused" turns *an unsupported country* into a bypass. A
+ * physician could present a licence from a country with no registry snapshot and
+ * be waved through by any node that had not yet downloaded that registry.
+ */
+import { bytesAHex, bytesCredencial, hashCredencial, idCredencial, } from "./canonica.js";
+import { CAMPOS_OBLIGATORIOS_CREDENCIAL, ESTADO_EMISION, TIPO_CREDENCIAL, VERSION_MODELO, } from "./types.js";
+/** Why a credential was refused. Every value here means access stays closed. */
+export const MOTIVO_RECHAZO_CREDENCIAL = {
+    /** A mandatory field is absent or empty. Names the field. */
+    CAMPO_OBLIGATORIO_AUSENTE: "campo_obligatorio_ausente",
+    /**
+     * `vigenteHasta` absent or not a number. Kept distinct from
+     * `CREDENCIAL_CADUCADA` because this is the OrionHealth `expired`-never-returned
+     * defect: without an issuer-signed expiry a revoked licence verifies forever.
+     */
+    SIN_VIGENCIA: "sin_vigencia",
+    /** `Date.now() >= vigenteHasta`. */
+    CREDENCIAL_CADUCADA: "credencial_caducada",
+    /** `vigenteHasta` is in the past at construction time. */
+    VIGENCIA_EN_PASADO: "vigencia_en_pasado",
+    /** `emitidoEn` is not a plausible epoch-ms value, or is after `vigenteHasta`. */
+    EMISION_INVALIDA: "emision_invalida",
+    /** `idLicencia` is not a 64-char lower-case hex SHA-256. */
+    ID_LICENCIA_MAL_FORMADO: "id_licencia_mal_formado",
+    /** `pais` is not ISO 3166-1 alpha-2. */
+    PAIS_INVALIDO: "pais_invalido",
+    /** `tipo` or `estadoEmision` outside the declared unions. */
+    ENUM_INVALIDO: "enum_invalido",
+    /** No signature bytes. */
+    FIRMA_AUSENTE: "firma_ausente",
+    /** Signature does not verify against the issuer's public key. */
+    FIRMA_INVALIDA: "firma_invalida",
+    /** `estadoEmision: 'autofirmada'` whose `emisor` is not the subject. */
+    AUTOEMISION_INCOHERENTE: "autoemision_incoherente",
+};
+const RE_HEX64 = /^[0-9a-f]{64}$/;
+const RE_PAIS_ALFA2 = /^[A-Z]{2}$/;
+function fallo(motivo, detalle) {
+    return { ok: false, motivo, detalle, accesoPermitido: false };
+}
+/**
+ * Structural validation, in cheap-to-expensive order. Runs no signature check.
+ *
+ * Order is deliberate: the malformed-shape refusals cost nothing, so a garbage
+ * payload never reaches a post-quantum operation. Same discipline
+ * `applyTransaction` in `src/maloca/karma.ts` uses.
+ *
+ * @param ahora - injected clock (ms epoch). Tests pass a fixed value; the
+ *   function itself never reads the clock, which is what keeps it pure.
+ */
+export function validarCredencial(credencial, ahora) {
+    if (!credencial || typeof credencial !== "object") {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.CAMPO_OBLIGATORIO_AUSENTE, "la credencial no es un objeto");
+    }
+    // ── 1. The five mandatory fields, by name ──
+    for (const campo of CAMPOS_OBLIGATORIOS_CREDENCIAL) {
+        const valor = credencial[campo];
+        if (valor === undefined || valor === null || valor === "") {
+            return fallo(MOTIVO_RECHAZO_CREDENCIAL.CAMPO_OBLIGATORIO_AUSENTE, `falta '${campo}'`);
+        }
+    }
+    // ── 2. `vigenteHasta`, the field that closes the OrionHealth defect ──
+    // Checked before the enums because its absence is the specific bug this
+    // module exists to make impossible, and deserves the most specific reason.
+    if (typeof credencial.vigenteHasta !== "number" ||
+        !Number.isFinite(credencial.vigenteHasta)) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.SIN_VIGENCIA, "vigenteHasta ausente o no numérico: sin vigencia firmada por el emisor, una licencia revocada validaría para siempre");
+    }
+    if (credencial.vigenteHasta <= 0) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.SIN_VIGENCIA, `vigenteHasta inválido: ${credencial.vigenteHasta}`);
+    }
+    // ── 3. Enums ──
+    if (!Object.values(TIPO_CREDENCIAL).includes(credencial.tipo)) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.ENUM_INVALIDO, `tipo desconocido: ${String(credencial.tipo)}`);
+    }
+    if (!Object.values(ESTADO_EMISION).includes(credencial.estadoEmision)) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.ENUM_INVALIDO, `estadoEmision desconocido: ${String(credencial.estadoEmision)}`);
+    }
+    // ── 4. Country: alpha-2, upper case ──
+    if (!RE_PAIS_ALFA2.test(credencial.pais)) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.PAIS_INVALIDO, `pais debe ser ISO 3166-1 alpha-2 en mayúsculas: ${credencial.pais}`);
+    }
+    // ── 5. `idLicencia` must be a SHA-256 hex digest, not a licence number ──
+    // A raw licence number pasted into this field would be a PII leak and is
+    // refused at the boundary rather than at publication time.
+    if (!RE_HEX64.test(credencial.idLicencia)) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.ID_LICENCIA_MAL_FORMADO, "idLicencia debe ser sha256 hex de 64 caracteres; el número de licencia en claro no se acepta aquí");
+    }
+    // ── 6. Dates are coherent ──
+    if (typeof credencial.emitidoEn !== "number" ||
+        !Number.isFinite(credencial.emitidoEn)) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.EMISION_INVALIDA, `emitidoEn inválido: ${String(credencial.emitidoEn)}`);
+    }
+    if (credencial.emitidoEn > credencial.vigenteHasta) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.EMISION_INVALIDA, `emitidoEn (${credencial.emitidoEn}) es posterior a vigenteHasta (${credencial.vigenteHasta})`);
+    }
+    // ── 7. Expiry ──
+    if (credencial.vigenteHasta < ahora) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.CREDENCIAL_CADUCADA, `credencial caducada: vigente hasta ${credencial.vigenteHasta}, ahora ${ahora}`);
+    }
+    if (credencial.vigenteHasta === ahora) {
+        // `vigenteHasta` is exclusive: at the exact millisecond it lapses, it lapses.
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.CREDENCIAL_CADUCADA, `credencial caducada en el instante exacto de expiración (${ahora})`);
+    }
+    // ── 8. Signature present ──
+    if (!(credencial.firma instanceof Uint8Array) ||
+        credencial.firma.length === 0) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.FIRMA_AUSENTE, "firma ausente o vacía");
+    }
+    return { ok: true, credencial };
+}
+/**
+ * Verify the issuer's signature over the canonical credential bytes.
+ *
+ * Separate from {@link validarCredencial} so a caller can run the cheap
+ * structural checks first and skip a post-quantum verification on garbage.
+ * Both are required before a credential counts as evidence; neither is
+ * sufficient alone.
+ */
+export async function verificarFirmaCredencial(credencial, identidadEmisor, parPublico) {
+    try {
+        return await identidadEmisor.verificar(bytesCredencial(credencial), credencial.firma, parPublico);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Full validation: structure, then signature, then the self-attestation rule.
+ *
+ * @returns `ok: true` only when the credential is well formed, unexpired and
+ *   genuinely signed by `emisor`. Any other outcome is `ok: false` with
+ *   `accesoPermitido: false`. There is no partial credit and no third state.
+ */
+export async function validarCredencialFirmada(credencial, identidadEmisor, parPublicoEmisor, ahora) {
+    const estructural = validarCredencial(credencial, ahora);
+    if (!estructural.ok)
+        return estructural;
+    if (!(await verificarFirmaCredencial(credencial, identidadEmisor, parPublicoEmisor))) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.FIRMA_INVALIDA, `la firma no verifica contra la clave pública de ${credencial.emisor}`);
+    }
+    return { ok: true, credencial };
+}
+/**
+ * A self-attested credential must be signed by the subject it rides on.
+ *
+ * Kept separate from {@link validarCredencialFirmada} because a
+ * `CredencialMedica` carries no subject field of its own — the binding is
+ * `RegistroProfesional.nodoId`, one level up. An `autofirmada` credential whose
+ * `emisor` is a different node would let a node borrow someone else's key to
+ * look institutionally verified, so the check needs both halves and neither
+ * object alone contains them.
+ *
+ * Only `autofirmada` is constrained this way: an `atestiguada_pares` credential
+ * carries the issuing node's own signature, and an `anclada_autoridad` one
+ * carries the college's, and both are expected to differ from the subject.
+ */
+export function validarVinculoEmision(credencial, nodoSujeto) {
+    if (credencial.estadoEmision === ESTADO_EMISION.AUTOFIRMADA &&
+        credencial.emisor !== nodoSujeto) {
+        return fallo(MOTIVO_RECHAZO_CREDENCIAL.AUTOEMISION_INCOHERENTE, `credencial autofirmada por ${credencial.emisor} pero presentada por el sujeto ${nodoSujeto}`);
+    }
+    return { ok: true, credencial };
+}
+/**
+ * Build and sign a credential.
+ *
+ * The `id` is derived from `idLicencia + tipo + pais`, so the same licence with
+ * the same type in the same country always yields the same id: the credential is
+ * identifiable across nodes without any node choosing a random identifier that
+ * two honest nodes would fail to agree on.
+ *
+ * The signature covers everything except `firma`, over the canonical bytes from
+ * `./canonica.ts`.
+ */
+export async function crearCredencial(borrador, identidad) {
+    const id = await idCredencial(borrador.idLicencia, borrador.tipo, borrador.pais);
+    // Assemble first, then sign the assembly, so what is signed is exactly what
+    // travels — including the derived id.
+    const sinFirmar = {
+        id,
+        tipo: borrador.tipo,
+        pais: borrador.pais.toUpperCase(),
+        autoridad: borrador.autoridad,
+        idLicencia: borrador.idLicencia,
+        ...(borrador.numeroLicenciaCifrado
+            ? { numeroLicenciaCifrado: borrador.numeroLicenciaCifrado }
+            : {}),
+        ...(borrador.especialidad ? { especialidad: borrador.especialidad } : {}),
+        emitidoEn: borrador.emitidoEn,
+        vigenteHasta: borrador.vigenteHasta,
+        estadoEmision: borrador.estadoEmision,
+        firma: new Uint8Array(0),
+        emisor: borrador.emisor,
+    };
+    const firma = await identidad.firmar(bytesCredencial(sinFirmar));
+    return { ...sinFirmar, firma };
+}
+/** SHA-256 of the canonical credential bytes. Binds an `Aval` to exact bytes. */
+export function hashDeCredencial(credencial) {
+    return hashCredencial(credencial);
+}
+/** Hex form of the canonical credential bytes, for logging and debugging. */
+export function volcarCredencial(credencial) {
+    return bytesAHex(bytesCredencial(credencial));
+}
+/**
+ * A "certified doctor" per the product promise: `licencia ∧ especialidad`, both
+ * with a peer-witnessed or authority-anchored state, both unexpired.
+ *
+ * Deliberately not a boolean field on the licence. A boolean cannot expire, and
+ * specialties are revoked on a different cadence from base licensure.
+ *
+ * A licensed-but-unspecialised doctor is a legitimate node with a *smaller*
+ * capability set, not an impostor (DECISIÓN A.4) — this returns `false`, and the
+ * caller decides what a lower tier grants.
+ */
+export function esMedicoCertificado(credenciales, ahora) {
+    const vigentes = credenciales.filter((c) => validarCredencial(c, ahora).ok);
+    const conEmisionFuerte = vigentes.filter((c) => c.estadoEmision === ESTADO_EMISION.ATESTIGUADA_PARES ||
+        c.estadoEmision === ESTADO_EMISION.ANCLADA_AUTORIDAD);
+    const tieneLicencia = conEmisionFuerte.some((c) => c.tipo === TIPO_CREDENCIAL.LICENCIA);
+    const tieneEspecialidad = conEmisionFuerte.some((c) => c.tipo === TIPO_CREDENCIAL.ESPECIALIDAD);
+    return tieneLicencia && tieneEspecialidad;
+}
+export { VERSION_MODELO };
+//# sourceMappingURL=credencial.js.map

package/dist/medico/credencial.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credencial.js","sourceRoot":"","sources":["../../src/medico/credencial.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EACN,SAAS,EACT,eAAe,EACf,cAAc,EACd,YAAY,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,8BAA8B,EAE9B,cAAc,EAEd,eAAe,EAEf,cAAc,GACd,MAAM,YAAY,CAAC;AAEpB,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACxC,6DAA6D;IAC7D,yBAAyB,EAAE,2BAA2B;IACtD;;;;OAIG;IACH,YAAY,EAAE,cAAc;IAC5B,oCAAoC;IACpC,mBAAmB,EAAE,qBAAqB;IAC1C,0DAA0D;IAC1D,kBAAkB,EAAE,oBAAoB;IACxC,iFAAiF;IACjF,gBAAgB,EAAE,kBAAkB;IACpC,4DAA4D;IAC5D,uBAAuB,EAAE,yBAAyB;IAClD,wCAAwC;IACxC,aAAa,EAAE,eAAe;IAC9B,6DAA6D;IAC7D,aAAa,EAAE,eAAe;IAC9B,0BAA0B;IAC1B,aAAa,EAAE,eAAe;IAC9B,iEAAiE;IACjE,cAAc,EAAE,gBAAgB;IAChC,wEAAwE;IACxE,uBAAuB,EAAE,yBAAyB;CACzC,CAAC;AA2CX,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAClC,MAAM,aAAa,GAAG,YAAY,CAAC;AAEnC,SAAS,KAAK,CACb,MAA+B,EAC/B,OAAe;IAEf,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AAC/D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAChC,UAA4B,EAC5B,KAAa;IAEb,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACnD,OAAO,KAAK,CACX,yBAAyB,CAAC,yBAAyB,EACnD,+BAA+B,CAC/B,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,KAAK,MAAM,KAAK,IAAI,8BAA8B,EAAE,CAAC;QACpD,MAAM,KAAK,GAAI,UAAiD,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;YAC3D,OAAO,KAAK,CACX,yBAAyB,CAAC,yBAAyB,EACnD,UAAU,KAAK,GAAG,CAClB,CAAC;QACH,CAAC;IACF,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,IACC,OAAO,UAAU,CAAC,YAAY,KAAK,QAAQ;QAC3C,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EACxC,CAAC;QACF,OAAO,KAAK,CACX,yBAAyB,CAAC,YAAY,EACtC,sHAAsH,CACtH,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CACX,yBAAyB,CAAC,YAAY,EACtC,0BAA0B,UAAU,CAAC,YAAY,EAAE,CACnD,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,KAAK,CACX,yBAAyB,CAAC,aAAa,EACvC,qBAAqB,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAC9C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACvE,OAAO,KAAK,CACX,yBAAyB,CAAC,aAAa,EACvC,8BAA8B,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAChE,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CACX,yBAAyB,CAAC,aAAa,EACvC,mDAAmD,UAAU,CAAC,IAAI,EAAE,CACpE,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,2DAA2D;IAC3D,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CACX,yBAAyB,CAAC,uBAAuB,EACjD,mGAAmG,CACnG,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IACC,OAAO,UAAU,CAAC,SAAS,KAAK,QAAQ;QACxC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EACrC,CAAC;QACF,OAAO,KAAK,CACX,yBAAyB,CAAC,gBAAgB,EAC1C,uBAAuB,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CACrD,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,SAAS,GAAG,UAAU,CAAC,YAAY,EAAE,CAAC;QACpD,OAAO,KAAK,CACX,yBAAyB,CAAC,gBAAgB,EAC1C,cAAc,UAAU,CAAC,SAAS,kCAAkC,UAAU,CAAC,YAAY,GAAG,CAC9F,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,UAAU,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QACrC,OAAO,KAAK,CACX,yBAAyB,CAAC,mBAAmB,EAC7C,sCAAsC,UAAU,CAAC,YAAY,WAAW,KAAK,EAAE,CAC/E,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACvC,8EAA8E;QAC9E,OAAO,KAAK,CACX,yBAAyB,CAAC,mBAAmB,EAC7C,4DAA4D,KAAK,GAAG,CACpE,CAAC;IACH,CAAC;IAED,6BAA6B;IAC7B,IACC,CAAC,CAAC,UAAU,CAAC,KAAK,YAAY,UAAU,CAAC;QACzC,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAC5B,CAAC;QACF,OAAO,KAAK,CACX,yBAAyB,CAAC,aAAa,EACvC,uBAAuB,CACvB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,UAA4B,EAC5B,eAAoC,EACpC,UAAsB;IAEtB,IAAI,CAAC;QACJ,OAAO,MAAM,eAAe,CAAC,SAAS,CACrC,eAAe,CAAC,UAAU,CAAC,EAC3B,UAAU,CAAC,KAAK,EAChB,UAAU,CACV,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,UAA4B,EAC5B,eAAoC,EACpC,gBAA4B,EAC5B,KAAa;IAEb,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IAExC,IACC,CAAC,CAAC,MAAM,wBAAwB,CAC/B,UAAU,EACV,eAAe,EACf,gBAAgB,CAChB,CAAC,EACD,CAAC;QACF,OAAO,KAAK,CACX,yBAAyB,CAAC,cAAc,EACxC,mDAAmD,UAAU,CAAC,MAAM,EAAE,CACtE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CACpC,UAA4B,EAC5B,UAAkB;IAElB,IACC,UAAU,CAAC,aAAa,KAAK,cAAc,CAAC,WAAW;QACvD,UAAU,CAAC,MAAM,KAAK,UAAU,EAC/B,CAAC;QACF,OAAO,KAAK,CACX,yBAAyB,CAAC,uBAAuB,EACjD,8BAA8B,UAAU,CAAC,MAAM,kCAAkC,UAAU,EAAE,CAC7F,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,QAA4B,EAC5B,SAA8B;IAE9B,MAAM,EAAE,GAAG,MAAM,YAAY,CAC5B,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,IAAI,EACb,QAAQ,CAAC,IAAI,CACb,CAAC;IAEF,4EAA4E;IAC5E,sCAAsC;IACtC,MAAM,SAAS,GAAqB;QACnC,EAAE;QACF,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE;QACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,GAAG,CAAC,QAAQ,CAAC,qBAAqB;YACjC,CAAC,CAAC,EAAE,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;QACN,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,KAAK,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;QACxB,MAAM,EAAE,QAAQ,CAAC,MAAM;KACvB,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;IACjE,OAAO,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAC/B,UAA4B;IAE5B,OAAO,cAAc,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,UAA4B;IAC5D,OAAO,SAAS,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAClC,YAAyC,EACzC,KAAa;IAEb,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CACvC,CAAC,CAAC,EAAE,EAAE,CACL,CAAC,CAAC,aAAa,KAAK,cAAc,CAAC,iBAAiB;QACpD,CAAC,CAAC,aAAa,KAAK,cAAc,CAAC,iBAAiB,CACrD,CAAC;IACF,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,QAAQ,CAC1C,CAAC;IACF,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,YAAY,CAC9C,CAAC;IACF,OAAO,aAAa,IAAI,iBAAiB,CAAC;AAC3C,CAAC;AAED,OAAO,EAAE,cAAc,EAAE,CAAC"}

package/dist/medico/index.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Public surface of the medical layer.
+ *
+ * ─── SCOPE ──────────────────────────────────────────────────────────────────
+ *
+ * This directory owns the *data model*, its pure validation and its wire
+ * format: the credential type, the endorsement type, the professional record,
+ * the fail-closed registry seam, and — since `malla.ts` — the encrypted
+ * serialisation that lets a record actually travel. It does not own the mesh
+ * integration or the authz decision: `aPayloadGossipMedico` produces the object
+ * `MeshManager.transmitirConGossip` takes, but the method itself belongs to
+ * `src/mesh/index.ts`, which another owner owns.
+ *
+ * Layering, per `docs/medico/modelo-datos.md` §0:
+ *
+ *   `types.ts`               the four layers as types, no logic
+ *   `canonica.ts`            deterministic bytes + hashing (WebCrypto), no logic
+ *   `credencial.ts`          layer 1: build, sign, validate (fail closed)
+ *   `aval.ts`                layer 2: build, sign, validate, fold, adapt to karma
+ *   `registro.ts`            the registry seam + fail-closed licence lookup
+ *   `registro-profesional.ts` the aggregate record and its rules
+ *   `malla.ts`               the wire format: seal, sign, verify, gossip adapter
+ *
+ * Everything is pure: no network, no filesystem, no clock read. `ahora` is always
+ * injected, and randomness for an `Aval` nonce is the caller's, so the whole
+ * layer is testable with fixtures and no I/O.
+ */
+export { aTransaccionKarma, avalCuentaParaPromocion, type BorradorAval, crearAval, idLicenciaDesdeNumero, MOTIVO_RECHAZO_AVAL, type MotivoRechazoAval, OBJETO_QUE_CUENTA, prepararCredencialParaAval, type ResultadoValidacionAval, resumirAvales, validarAval, validarAvalFirmado, verificarFirmaAval, } from "./aval.js";
+export { bytesAHex, bytesAval, bytesCredencial, canonicalBytes, canonicalizarAval, canonicalizarCredencial, canonicalStringify, DOMINIO_ID_CREDENCIAL, hashCredencial, hashLicencia, hexABytes, idAval, idCredencial, normalizarLicencia, sha256, sha256Hex, } from "./canonica.js";
+export { type BorradorCredencial, crearCredencial, esMedicoCertificado, hashDeCredencial, MOTIVO_RECHAZO_CREDENCIAL, type MotivoRechazoCredencial, type ResultadoValidacionCredencial, validarCredencial, validarCredencialFirmada, validarVinculoEmision, verificarFirmaCredencial, volcarCredencial, } from "./credencial.js";
+export { type AvalWire, aPayloadGossipMedico, avalAWire, type CredencialMedicaWire, credencialAWire, type EmisionMedica, emitirAval, emitirCredencial, emitirRegistro, type MetodoVerificacionWire, MOTIVO_RECHAZO_MALLA, type MotivoRechazoMalla, type OpcionesEmitir, type OpcionesRecibir, PAYLOAD_MEDICO_TIPO, type RegistroPaisWire, type ResultadoRecepcion, recibirAval, recibirCredencial, registroAWire, wireAAval, wireACredencial, } from "./malla.js";
+export { ESTADO_VERIFICACION_REGISTRO, type EstadoVerificacionRegistro, type InstantaneaRegistroPais, PAISES_SOPORTADOS, type ResultadoVerificacionRegistro, VerificadorRegistroEnMemoria, type VerificadorRegistroPais, verificarCredencialContraRegistro, verificarHashContraRegistro, verificarLicenciaContraRegistro, } from "./registro.js";
+export { MOTIVO_RECHAZO_REGISTRO, type MotivoRechazoRegistro, type ResultadoValidacionRegistro, recalcularAvalRecibido, validarRegistroProfesional, } from "./registro-profesional.js";
+export { ALCANCE_AVAL, type AlcanceAval, CAMPOS_OBLIGATORIOS_CREDENCIAL, CLASE_VERIFICACION, type ClaseVerificacion, type CredencialMedica, type DeclaracionNodo, ESTADO_EMISION, type Especialidad, type EstadoEmision, type MetodoVerificacion, OBJETO_AVAL, type ObjetoAval, type RegistroProfesional, type ResumenAvales, TIPO_CREDENCIAL, type TipoCredencial, VERSION_MODELO, } from "./types.js";
+export { acreditarCon, acreditarContraRegistro, CLASES_NO_IMPLEMENTADAS, type ConsultaRegistroLicencia, type ConsultarEntradaRegistro, type EntradaRegistroLicencia, ESTADO_LICENCIA, ESTRATEGIA_REGISTRO_POR_PAIS, type EstadoLicencia, type EstrategiaAcreditacion, type FuenteAcreditacion, type MetodoVerificacionAplicado, MOTIVO_RECHAZO_CONSULTA_REGISTRO, type MotivoRechazoAcreditacion, type MotivoRechazoConsultaRegistro, metodoRegistroPorPais, RegistroLicenciasEnMemoria, type ResultadoAcreditacion, } from "./verificacion-registro.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/medico/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/medico/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACN,iBAAiB,EACjB,uBAAuB,EACvB,KAAK,YAAY,EACjB,SAAS,EACT,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,iBAAiB,EACtB,iBAAiB,EACjB,0BAA0B,EAC1B,KAAK,uBAAuB,EAC5B,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,kBAAkB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EACN,SAAS,EACT,SAAS,EACT,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,SAAS,EACT,MAAM,EACN,YAAY,EACZ,kBAAkB,EAClB,MAAM,EACN,SAAS,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,KAAK,kBAAkB,EACvB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,yBAAyB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,KAAK,QAAQ,EACb,oBAAoB,EACpB,SAAS,EACT,KAAK,oBAAoB,EACzB,eAAe,EACf,KAAK,aAAa,EAClB,UAAU,EACV,gBAAgB,EAChB,cAAc,EACd,KAAK,sBAAsB,EAC3B,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,eAAe,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,4BAA4B,EAC5B,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,6BAA6B,EAClC,4BAA4B,EAC5B,KAAK,uBAAuB,EAC5B,iCAAiC,EACjC,2BAA2B,EAC3B,+BAA+B,GAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,sBAAsB,EACtB,0BAA0B,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,YAAY,EACZ,KAAK,WAAW,EAChB,8BAA8B,EAC9B,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,WAAW,EACX,KAAK,UAAU,EACf,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,eAAe,EACf,KAAK,cAAc,EACnB,cAAc,GACd,MAAM,YAAY,CAAC;AAKpB,OAAO,EACN,YAAY,EACZ,uBAAuB,EACvB,uBAAuB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,eAAe,EACf,4BAA4B,EAC5B,KAAK,cAAc,EACnB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,gCAAgC,EAChC,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAClC,qBAAqB,EACrB,0BAA0B,EAC1B,KAAK,qBAAqB,GAC1B,MAAM,4BAA4B,CAAC"}

package/dist/medico/index.js

@@ -0,0 +1,39 @@
+/**
+ * Public surface of the medical layer.
+ *
+ * ─── SCOPE ──────────────────────────────────────────────────────────────────
+ *
+ * This directory owns the *data model*, its pure validation and its wire
+ * format: the credential type, the endorsement type, the professional record,
+ * the fail-closed registry seam, and — since `malla.ts` — the encrypted
+ * serialisation that lets a record actually travel. It does not own the mesh
+ * integration or the authz decision: `aPayloadGossipMedico` produces the object
+ * `MeshManager.transmitirConGossip` takes, but the method itself belongs to
+ * `src/mesh/index.ts`, which another owner owns.
+ *
+ * Layering, per `docs/medico/modelo-datos.md` §0:
+ *
+ *   `types.ts`               the four layers as types, no logic
+ *   `canonica.ts`            deterministic bytes + hashing (WebCrypto), no logic
+ *   `credencial.ts`          layer 1: build, sign, validate (fail closed)
+ *   `aval.ts`                layer 2: build, sign, validate, fold, adapt to karma
+ *   `registro.ts`            the registry seam + fail-closed licence lookup
+ *   `registro-profesional.ts` the aggregate record and its rules
+ *   `malla.ts`               the wire format: seal, sign, verify, gossip adapter
+ *
+ * Everything is pure: no network, no filesystem, no clock read. `ahora` is always
+ * injected, and randomness for an `Aval` nonce is the caller's, so the whole
+ * layer is testable with fixtures and no I/O.
+ */
+export { aTransaccionKarma, avalCuentaParaPromocion, crearAval, idLicenciaDesdeNumero, MOTIVO_RECHAZO_AVAL, OBJETO_QUE_CUENTA, prepararCredencialParaAval, resumirAvales, validarAval, validarAvalFirmado, verificarFirmaAval, } from "./aval.js";
+export { bytesAHex, bytesAval, bytesCredencial, canonicalBytes, canonicalizarAval, canonicalizarCredencial, canonicalStringify, DOMINIO_ID_CREDENCIAL, hashCredencial, hashLicencia, hexABytes, idAval, idCredencial, normalizarLicencia, sha256, sha256Hex, } from "./canonica.js";
+export { crearCredencial, esMedicoCertificado, hashDeCredencial, MOTIVO_RECHAZO_CREDENCIAL, validarCredencial, validarCredencialFirmada, validarVinculoEmision, verificarFirmaCredencial, volcarCredencial, } from "./credencial.js";
+export { aPayloadGossipMedico, avalAWire, credencialAWire, emitirAval, emitirCredencial, emitirRegistro, MOTIVO_RECHAZO_MALLA, PAYLOAD_MEDICO_TIPO, recibirAval, recibirCredencial, registroAWire, wireAAval, wireACredencial, } from "./malla.js";
+export { ESTADO_VERIFICACION_REGISTRO, PAISES_SOPORTADOS, VerificadorRegistroEnMemoria, verificarCredencialContraRegistro, verificarHashContraRegistro, verificarLicenciaContraRegistro, } from "./registro.js";
+export { MOTIVO_RECHAZO_REGISTRO, recalcularAvalRecibido, validarRegistroProfesional, } from "./registro-profesional.js";
+export { ALCANCE_AVAL, CAMPOS_OBLIGATORIOS_CREDENCIAL, CLASE_VERIFICACION, ESTADO_EMISION, OBJETO_AVAL, TIPO_CREDENCIAL, VERSION_MODELO, } from "./types.js";
+// The foundation-verification layer: credential → accreditation. Re-exported
+// here so the medical layer keeps a single public surface, and so the parallel
+// agent working on the wire protocol imports from the same place.
+export { acreditarCon, acreditarContraRegistro, CLASES_NO_IMPLEMENTADAS, ESTADO_LICENCIA, ESTRATEGIA_REGISTRO_POR_PAIS, MOTIVO_RECHAZO_CONSULTA_REGISTRO, metodoRegistroPorPais, RegistroLicenciasEnMemoria, } from "./verificacion-registro.js";
+//# sourceMappingURL=index.js.map

package/dist/medico/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/medico/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EACN,iBAAiB,EACjB,uBAAuB,EAEvB,SAAS,EACT,qBAAqB,EACrB,mBAAmB,EAEnB,iBAAiB,EACjB,0BAA0B,EAE1B,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,kBAAkB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EACN,SAAS,EACT,SAAS,EACT,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,SAAS,EACT,MAAM,EACN,YAAY,EACZ,kBAAkB,EAClB,MAAM,EACN,SAAS,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAEN,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,yBAAyB,EAGzB,iBAAiB,EACjB,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,GAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAEN,oBAAoB,EACpB,SAAS,EAET,eAAe,EAEf,UAAU,EACV,gBAAgB,EAChB,cAAc,EAEd,oBAAoB,EAIpB,mBAAmB,EAGnB,WAAW,EACX,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,eAAe,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACN,4BAA4B,EAG5B,iBAAiB,EAEjB,4BAA4B,EAE5B,iCAAiC,EACjC,2BAA2B,EAC3B,+BAA+B,GAC/B,MAAM,eAAe,CAAC;AACvB,OAAO,EACN,uBAAuB,EAGvB,sBAAsB,EACtB,0BAA0B,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,YAAY,EAEZ,8BAA8B,EAC9B,kBAAkB,EAIlB,cAAc,EAId,WAAW,EAIX,eAAe,EAEf,cAAc,GACd,MAAM,YAAY,CAAC;AAEpB,6EAA6E;AAC7E,+EAA+E;AAC/E,kEAAkE;AAClE,OAAO,EACN,YAAY,EACZ,uBAAuB,EACvB,uBAAuB,EAIvB,eAAe,EACf,4BAA4B,EAK5B,gCAAgC,EAGhC,qBAAqB,EACrB,0BAA0B,GAE1B,MAAM,4BAA4B,CAAC"}