@synoi/sraid 0.2.0 → 0.4.0

package/dist/internal/ed25519-browser.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @synoi/sraid — internal/ed25519-browser.ts
+ *
+ * Browser-safe Ed25519 verification. NO node:crypto.
+ *
+ * Primary path: WebCrypto (`globalThis.crypto.subtle`), which uses RFC 8032
+ * cofactored verification — the SAME rule OpenSSL/node:crypto uses on the node
+ * default entry, so the browser verifier accepts/rejects exactly what the node
+ * verifier does for every real signature.
+ *
+ * Fallback path: `@noble/curves` ed25519 (pure JS), used only when WebCrypto
+ * Ed25519 is unavailable (older embedded webviews / Chrome extensions below the
+ * WebCrypto-Ed25519 support floor, ~Chrome 137). @noble defaults to ZIP-215
+ * verification rules, which agree with cofactored on every well-formed
+ * signature and can differ only on deliberately malformed/malleable points that
+ * real signers never produce (see ed25519.ts for the same note). SynOI signs
+ * canonically, so the fallback is behavior-equivalent for legitimate inputs.
+ *
+ * ASYNC: WebCrypto verify is Promise-based, so this returns a Promise<boolean>.
+ * The browser attestation verifier is async as a result; the node path stays
+ * synchronous and unchanged.
+ *
+ * Returns false (never throws) on any malformed input or verification failure,
+ * matching the node `verifyEd25519` contract, so callers get a clean boolean.
+ */
+/**
+ * Verify a raw 64-byte Ed25519 signature over `message` against a raw 32-byte
+ * public key. Prefers WebCrypto (cofactored, matching the node path); falls
+ * back to @noble/curves only when WebCrypto Ed25519 is not supported. Returns
+ * false on any malformed input or verification failure; never throws.
+ */
+export declare function verifyEd25519Browser(signature: Uint8Array, message: Uint8Array, publicKeyRaw: Uint8Array): Promise<boolean>;
+//# sourceMappingURL=ed25519-browser.d.ts.map

package/dist/internal/ed25519-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519-browser.d.ts","sourceRoot":"","sources":["../../src/internal/ed25519-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AA8BH;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,UAAU,EACnB,YAAY,EAAE,UAAU,GACvB,OAAO,CAAC,OAAO,CAAC,CAoBlB"}

package/dist/internal/ed25519-browser.js

@@ -0,0 +1,79 @@
+/**
+ * @synoi/sraid — internal/ed25519-browser.ts
+ *
+ * Browser-safe Ed25519 verification. NO node:crypto.
+ *
+ * Primary path: WebCrypto (`globalThis.crypto.subtle`), which uses RFC 8032
+ * cofactored verification — the SAME rule OpenSSL/node:crypto uses on the node
+ * default entry, so the browser verifier accepts/rejects exactly what the node
+ * verifier does for every real signature.
+ *
+ * Fallback path: `@noble/curves` ed25519 (pure JS), used only when WebCrypto
+ * Ed25519 is unavailable (older embedded webviews / Chrome extensions below the
+ * WebCrypto-Ed25519 support floor, ~Chrome 137). @noble defaults to ZIP-215
+ * verification rules, which agree with cofactored on every well-formed
+ * signature and can differ only on deliberately malformed/malleable points that
+ * real signers never produce (see ed25519.ts for the same note). SynOI signs
+ * canonically, so the fallback is behavior-equivalent for legitimate inputs.
+ *
+ * ASYNC: WebCrypto verify is Promise-based, so this returns a Promise<boolean>.
+ * The browser attestation verifier is async as a result; the node path stays
+ * synchronous and unchanged.
+ *
+ * Returns false (never throws) on any malformed input or verification failure,
+ * matching the node `verifyEd25519` contract, so callers get a clean boolean.
+ */
+import { ed25519 } from '@noble/curves/ed25519.js';
+// Fixed DER prefix for an Ed25519 SubjectPublicKeyInfo (RFC 8410):
+//   SEQUENCE { SEQUENCE { OID 1.3.101.112 } BIT STRING (32 raw bytes) }
+// A plain Uint8Array literal (NOT Buffer, which is undefined in browsers). Used
+// only for the SPKI import fallback below.
+const ED25519_SPKI_PREFIX = new Uint8Array([
+    0x30, 0x2a, 0x30, 0x05, 0x06, 0x03, 0x2b, 0x65, 0x70, 0x03, 0x21, 0x00,
+]);
+const ED25519_ALG = { name: 'Ed25519' };
+// Return type is inferred (webcrypto.CryptoKey); the bare `CryptoKey` global is
+// not declared by @types/node ^20, so it is deliberately left un-annotated.
+async function importPublicKey(publicKeyRaw) {
+    const subtle = globalThis.crypto.subtle;
+    try {
+        // Preferred: raw 32-byte import (Secure Curves spec).
+        return await subtle.importKey('raw', publicKeyRaw, ED25519_ALG, false, ['verify']);
+    }
+    catch {
+        // Some engines only accept SPKI for Ed25519 import; wrap the raw key.
+        const spki = new Uint8Array(ED25519_SPKI_PREFIX.length + publicKeyRaw.length);
+        spki.set(ED25519_SPKI_PREFIX, 0);
+        spki.set(publicKeyRaw, ED25519_SPKI_PREFIX.length);
+        return await subtle.importKey('spki', spki, ED25519_ALG, false, ['verify']);
+    }
+}
+/**
+ * Verify a raw 64-byte Ed25519 signature over `message` against a raw 32-byte
+ * public key. Prefers WebCrypto (cofactored, matching the node path); falls
+ * back to @noble/curves only when WebCrypto Ed25519 is not supported. Returns
+ * false on any malformed input or verification failure; never throws.
+ */
+export async function verifyEd25519Browser(signature, message, publicKeyRaw) {
+    if (publicKeyRaw.length !== 32)
+        return false;
+    const subtle = globalThis.crypto?.subtle;
+    if (subtle) {
+        try {
+            const key = await importPublicKey(publicKeyRaw);
+            return await subtle.verify(ED25519_ALG, key, signature, message);
+        }
+        catch {
+            // Fall through to @noble. A WebCrypto throw here is either an
+            // unsupported-algorithm signal or a malformed input; @noble resolves both
+            // correctly (a real bad signature/key verifies as false there too).
+        }
+    }
+    try {
+        return ed25519.verify(signature, message, publicKeyRaw);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=ed25519-browser.js.map

package/dist/internal/ed25519-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519-browser.js","sourceRoot":"","sources":["../../src/internal/ed25519-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAA;AAElD,mEAAmE;AACnE,wEAAwE;AACxE,gFAAgF;AAChF,2CAA2C;AAC3C,MAAM,mBAAmB,GAAG,IAAI,UAAU,CAAC;IACzC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CACvE,CAAC,CAAA;AAEF,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,SAAS,EAAW,CAAA;AAEhD,gFAAgF;AAChF,4EAA4E;AAC5E,KAAK,UAAU,eAAe,CAAC,YAAwB;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAA;IACvC,IAAI,CAAC;QACH,sDAAsD;QACtD,OAAO,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,sEAAsE;QACtE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAC7E,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAA;QAChC,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAA;QAClD,OAAO,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC7E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAqB,EACrB,OAAmB,EACnB,YAAwB;IAExB,IAAI,YAAY,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,KAAK,CAAA;IAE5C,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAA;IACxC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,CAAA;YAC/C,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,0EAA0E;YAC1E,oEAAoE;QACtE,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/internal/mldsa-browser.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @synoi/sraid — internal/mldsa-browser.ts
+ *
+ * Browser-safe ML-DSA-65 (FIPS 204) verification. NO node:crypto.
+ *
+ * Browsers ship no native ML-DSA, so there is only one path here: the pure-JS
+ * `@noble/post-quantum` implementation, which is fully browser-safe. The node
+ * default entry (mldsa.ts) uses a native OpenSSL fast path with this same
+ * @noble impl as its fallback, so both entries are byte-for-byte interoperable.
+ *
+ * IMPORTANT: import `ml_dsa65` DIRECTLY from `@noble/post-quantum/ml-dsa.js`,
+ * NOT from ./mldsa.ts — that module statically imports `node:crypto` (for its
+ * native fast path and the globalThis.crypto polyfill), which would poison a
+ * browser bundle. No globalThis.crypto polyfill is needed here: browsers,
+ * workers, and MV3 service workers all provide it natively, and ml_dsa65.verify
+ * is deterministic (it never calls getRandomValues; only keygen/sign do).
+ *
+ * Verification is SYNCHRONOUS. Returns false (never throws) on any malformed
+ * input or verification failure, matching the node `verifyMlDsa65` contract.
+ */
+/**
+ * Verify a raw ML-DSA-65 signature over `message` against a raw 1952-byte
+ * public key using @noble/post-quantum. Returns false on any malformed input or
+ * verification failure; never throws.
+ */
+export declare function verifyMlDsa65Browser(signature: Uint8Array, message: Uint8Array, publicKeyRaw: Uint8Array): boolean;
+//# sourceMappingURL=mldsa-browser.d.ts.map

package/dist/internal/mldsa-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mldsa-browser.d.ts","sourceRoot":"","sources":["../../src/internal/mldsa-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,UAAU,EACnB,YAAY,EAAE,UAAU,GACvB,OAAO,CAMT"}

package/dist/internal/mldsa-browser.js

@@ -0,0 +1,35 @@
+/**
+ * @synoi/sraid — internal/mldsa-browser.ts
+ *
+ * Browser-safe ML-DSA-65 (FIPS 204) verification. NO node:crypto.
+ *
+ * Browsers ship no native ML-DSA, so there is only one path here: the pure-JS
+ * `@noble/post-quantum` implementation, which is fully browser-safe. The node
+ * default entry (mldsa.ts) uses a native OpenSSL fast path with this same
+ * @noble impl as its fallback, so both entries are byte-for-byte interoperable.
+ *
+ * IMPORTANT: import `ml_dsa65` DIRECTLY from `@noble/post-quantum/ml-dsa.js`,
+ * NOT from ./mldsa.ts — that module statically imports `node:crypto` (for its
+ * native fast path and the globalThis.crypto polyfill), which would poison a
+ * browser bundle. No globalThis.crypto polyfill is needed here: browsers,
+ * workers, and MV3 service workers all provide it natively, and ml_dsa65.verify
+ * is deterministic (it never calls getRandomValues; only keygen/sign do).
+ *
+ * Verification is SYNCHRONOUS. Returns false (never throws) on any malformed
+ * input or verification failure, matching the node `verifyMlDsa65` contract.
+ */
+import { ml_dsa65 } from '@noble/post-quantum/ml-dsa.js';
+/**
+ * Verify a raw ML-DSA-65 signature over `message` against a raw 1952-byte
+ * public key using @noble/post-quantum. Returns false on any malformed input or
+ * verification failure; never throws.
+ */
+export function verifyMlDsa65Browser(signature, message, publicKeyRaw) {
+    try {
+        return ml_dsa65.verify(signature, message, publicKeyRaw);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=mldsa-browser.js.map

package/dist/internal/mldsa-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mldsa-browser.js","sourceRoot":"","sources":["../../src/internal/mldsa-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAA;AAExD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAqB,EACrB,OAAmB,EACnB,YAAwB;IAExB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;AACH,CAAC"}

package/dist/internal/sha256-browser.d.ts

@@ -0,0 +1,17 @@
+/**
+ * @synoi/sraid — internal/sha256-browser.ts
+ *
+ * Browser-safe SHA-256 via WebCrypto (`globalThis.crypto.subtle.digest`). NO
+ * node:crypto. Used by the browser OID helpers in verify-browser.ts.
+ *
+ * ASYNC: subtle.digest is Promise-based, so the browser OID helpers are async
+ * (the node oid.ts helpers stay synchronous via node:crypto createHash and are
+ * unchanged). SHA-256 is byte-identical across any conformant implementation,
+ * so a browser-computed OID equals the node-computed one for the same input.
+ */
+/**
+ * Compute `sha256:` + lowercase hex of SHA-256(bytes) using WebCrypto. Mirrors
+ * the `sha256:`-prefixed output of the node oid.ts helpers.
+ */
+export declare function sha256HexPrefixed(bytes: Uint8Array): Promise<string>;
+//# sourceMappingURL=sha256-browser.d.ts.map

package/dist/internal/sha256-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256-browser.d.ts","sourceRoot":"","sources":["../../src/internal/sha256-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAG1E"}

package/dist/internal/sha256-browser.js

@@ -0,0 +1,27 @@
+/**
+ * @synoi/sraid — internal/sha256-browser.ts
+ *
+ * Browser-safe SHA-256 via WebCrypto (`globalThis.crypto.subtle.digest`). NO
+ * node:crypto. Used by the browser OID helpers in verify-browser.ts.
+ *
+ * ASYNC: subtle.digest is Promise-based, so the browser OID helpers are async
+ * (the node oid.ts helpers stay synchronous via node:crypto createHash and are
+ * unchanged). SHA-256 is byte-identical across any conformant implementation,
+ * so a browser-computed OID equals the node-computed one for the same input.
+ */
+function toHex(bytes) {
+    let out = '';
+    for (let i = 0; i < bytes.length; i++) {
+        out += bytes[i].toString(16).padStart(2, '0');
+    }
+    return out;
+}
+/**
+ * Compute `sha256:` + lowercase hex of SHA-256(bytes) using WebCrypto. Mirrors
+ * the `sha256:`-prefixed output of the node oid.ts helpers.
+ */
+export async function sha256HexPrefixed(bytes) {
+    const digest = await globalThis.crypto.subtle.digest('SHA-256', bytes);
+    return 'sha256:' + toHex(new Uint8Array(digest));
+}
+//# sourceMappingURL=sha256-browser.js.map

package/dist/internal/sha256-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256-browser.js","sourceRoot":"","sources":["../../src/internal/sha256-browser.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,SAAS,KAAK,CAAC,KAAiB;IAC9B,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,IAAK,KAAK,CAAC,CAAC,CAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAiB;IACvD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IACtE,OAAO,SAAS,GAAG,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AAClD,CAAC"}

package/dist/lineage.js.map

@@ -1 +1 @@
-{"version":3,"file":"lineage.js","sourceRoot":"","sources":["../src/lineage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,IAAiD;IAC5E,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,GAAW,EAAQ,EAAE;QAC/C,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAM;QACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IACxB,CAAC,CAAA;IAED,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpF,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiD;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,UAAU,CAAC,QAA+B;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAA;QACtF,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAA;QAChG,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACrB,CAAC;IAED,2EAA2E;IAC3E,cAAc;IACd,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,IAAI,OAAO,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;oBACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAA;gBAC5F,CAAC;gBACD,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAEvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;YACrC,OAAO,EAAE,CAAC,iEAAiE,GAAG,GAAG,CAAC,EAAE,CAAA;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;YACrC,OAAO,EAAE,CAAC,SAAS,KAAK,CAAC,MAAM,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAC/E,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;IAE/B,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAA,CAAE,gBAAgB;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAA,CAAiB,2CAA2C;IAGxF,MAAM,KAAK,GAAY,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAClD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAElB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;QAClC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAE,CAAA;YAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,+DAA+D;gBAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;oBACrC,OAAO,EAAE,CAAC,uBAAuB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;YAC5D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;gBAC7B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAClB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1F,CAAC;YACD,iEAAiE;QACnE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACnB,OAAO,CAAC,GAAG,EAAE,CAAA;YACb,KAAK,CAAC,GAAG,EAAE,CAAA;QACb,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;YAC1C,OAAO,EAAE,CAAC,yBAAyB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;IAClE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AAC5D,CAAC"}
+{"version":3,"file":"lineage.js","sourceRoot":"","sources":["../src/lineage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,IAAiD;IAC5E,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,GAAW,EAAQ,EAAE;QAC/C,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,GAAG,GAAG,CAAA;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAM;QACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IACxB,CAAC,CAAA;IAED,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpF,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiD;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,UAAU,CAAC,QAA+B;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAA;QACtF,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAA;QAChG,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACrB,CAAC;IAED,2EAA2E;IAC3E,cAAc;IACd,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,IAAI,OAAO,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;oBACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAA;gBAC5F,CAAC;gBACD,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAEvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;YACrC,OAAO,EAAE,CAAC,iEAAiE,GAAG,GAAG,CAAC,EAAE,CAAA;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;YACrC,OAAO,EAAE,CAAC,SAAS,KAAK,CAAC,MAAM,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAC/E,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;IAE/B,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAA,CAAE,gBAAgB;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAA,CAAiB,2CAA2C;IAGxF,MAAM,KAAK,GAAY,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAClD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAElB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;QAClC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAE,CAAA;YAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,+DAA+D;gBAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;oBACrC,OAAO,EAAE,CAAC,uBAAuB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;YAC5D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;gBAC7B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAClB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1F,CAAC;YACD,iEAAiE;QACnE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACnB,OAAO,CAAC,GAAG,EAAE,CAAA;YACb,KAAK,CAAC,GAAG,EAAE,CAAA;QACb,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;YAC1C,OAAO,EAAE,CAAC,yBAAyB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;IAClE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AAC5D,CAAC"}

package/dist/oid.d.ts

@@ -19,6 +19,8 @@
  * This matches the gateway's `computeGapOid` (src/gap/oid.ts) and
  * `payloadOid` (src/inference/receipts.ts) byte-for-byte.
  */
+import { CDRO_ENVELOPE_FIELDS, cdroContentCore } from './internal/content-core.js';
+export { CDRO_ENVELOPE_FIELDS, cdroContentCore };
 /**
  * Compute an OID over an arbitrary canonical-compatible value.
  *
@@ -38,58 +40,6 @@ export declare function oidOf(canonical: unknown): string;
  * canonicalizing twice.
  */
 export declare function oidOfCanonical(canonical: string | Uint8Array): string;
-/**
- * The detached-signature / envelope fields removed by `cdroContentCore`
- * before hashing. This is the SINGLE NORMATIVE strip-set for the CDRO OID
- * projection (ADR_019 decision 1); every other surface (GAP SDKs, the
- * gateway signer, IMPLEMENTING.md) derives from THIS set, never re-lists it.
- *
- * The set is defined SEMANTICALLY: it is "every field produced BY the signer
- * after canonicalization, plus the OID output itself." Concretely:
- *
- *   oid                  — the projection OUTPUT (cannot be an input to itself).
- *   signature            — legacy hybrid SignatureEnvelope (attaches after hash).
- *   ml_dsa_signature     — detached PQ signature (attaches after hash).
- *   signature_key_id     — signer-stamped key id (produced by the signer).
- *   signature_algorithm  — signer-stamped alg id (produced by the signer).
- *   attestation          — DSSE AttestationEnvelope (attaches after hash).
- *
- * EVERYTHING ELSE IS KEPT and hashed into the OID, including in particular:
- *   - `gap_version` — IN identity so a protocol downgrade is OID-detectable.
- *   - `supersedes`  — IN identity because the SRAID Merkle-DAG head-proves-
- *                     history property requires every lineage edge inside the
- *                     hash. Superseding mints a NEW object; it never mutates
- *                     the old one's bytes, so keeping it here is safe and
- *                     makes the lineage edge tamper-evident.
- *   - `type`, `sraid_version`, `tenant_id`, `created_at_ms`, `created_by`,
- *     `body`, `authority`, `sensitivity`, `prev`, `links`, and any other
- *     content field.
- *
- * This is the ONE projection that yields the SAME OID whether the object is
- * pre- or post-attestation: attaching an `attestation` (or `signature`,
- * `ml_dsa_signature`, `signature_key_id`, `signature_algorithm`) after hashing
- * is stripped back out here, so `cdroOid(obj)` is invariant across signing.
- *
- * It is FROZEN so no caller can mutate the normative set at runtime.
- */
-export declare const CDRO_ENVELOPE_FIELDS: readonly string[];
-/**
- * Build the OID content core of a full CDRO: the object with EXACTLY the six
- * detached-signature / envelope fields in `CDRO_ENVELOPE_FIELDS` removed at
- * the top level, and everything else kept.
- *
- * This is the mechanism that makes the L4 `authority` block, the L3 lineage
- * edges (`prev`, `links`, `supersedes`), the propagating `sensitivity` tier,
- * and `gap_version` tamper-evident: they are hashed into identity by
- * construction, so a field cannot be added, stripped, re-pointed, or
- * downgraded without producing a different OID (and invalidating the
- * signature, which is computed over these same bytes). Because `prev`/`links`/
- * `supersedes` OIDs are inside the hash, a node's OID transitively commits its
- * whole reachable history (the Merkle-DAG "head proves history" property).
- *
- * Returns a plain object suitable for `canonicalize` / `oidOf`.
- */
-export declare function cdroContentCore(cdro: unknown): Record<string, unknown>;
 /**
  * Compute the OID of a full CDRO over its content core (see
  * `cdroContentCore`). This is the correct way to derive identity for a

package/dist/oid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oid.d.ts","sourceRoot":"","sources":["../src/oid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAKH;;;;;;;;;;GAUG;AACH,wBAAgB,KAAK,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAGhD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAMrE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAOhD,CAAA;AAIF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUtE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAE7C"}
+{"version":3,"file":"oid.d.ts","sourceRoot":"","sources":["../src/oid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AASlF,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,CAAA;AAEhD;;;;;;;;;;GAUG;AACH,wBAAgB,KAAK,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAGhD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAMrE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAE7C"}

package/dist/oid.js

@@ -21,6 +21,15 @@
  */
 import { createHash } from 'node:crypto';
 import { canonicalize } from './canonicalize.js';
+import { CDRO_ENVELOPE_FIELDS, cdroContentCore } from './internal/content-core.js';
+// The CDRO strip-set and its content-core projection are the SINGLE NORMATIVE
+// SOURCE (ADR_019) and live in the PURE ./internal/content-core module (no
+// node:crypto), so the browser verify surface can share them byte-for-byte.
+// oid.ts re-exports them and layers the SHA-256 hashing (below) on top; this
+// keeps the public surface (`import { cdroContentCore, CDRO_ENVELOPE_FIELDS }
+// from '@synoi/sraid'`) unchanged. See ./internal/content-core.ts for the
+// normative strip-set documentation; do not re-list it here.
+export { CDRO_ENVELOPE_FIELDS, cdroContentCore };
 /**
  * Compute an OID over an arbitrary canonical-compatible value.
  *
@@ -48,77 +57,6 @@ export function oidOfCanonical(canonical) {
         : canonical;
     return 'sha256:' + createHash('sha256').update(bytes).digest('hex');
 }
-/**
- * The detached-signature / envelope fields removed by `cdroContentCore`
- * before hashing. This is the SINGLE NORMATIVE strip-set for the CDRO OID
- * projection (ADR_019 decision 1); every other surface (GAP SDKs, the
- * gateway signer, IMPLEMENTING.md) derives from THIS set, never re-lists it.
- *
- * The set is defined SEMANTICALLY: it is "every field produced BY the signer
- * after canonicalization, plus the OID output itself." Concretely:
- *
- *   oid                  — the projection OUTPUT (cannot be an input to itself).
- *   signature            — legacy hybrid SignatureEnvelope (attaches after hash).
- *   ml_dsa_signature     — detached PQ signature (attaches after hash).
- *   signature_key_id     — signer-stamped key id (produced by the signer).
- *   signature_algorithm  — signer-stamped alg id (produced by the signer).
- *   attestation          — DSSE AttestationEnvelope (attaches after hash).
- *
- * EVERYTHING ELSE IS KEPT and hashed into the OID, including in particular:
- *   - `gap_version` — IN identity so a protocol downgrade is OID-detectable.
- *   - `supersedes`  — IN identity because the SRAID Merkle-DAG head-proves-
- *                     history property requires every lineage edge inside the
- *                     hash. Superseding mints a NEW object; it never mutates
- *                     the old one's bytes, so keeping it here is safe and
- *                     makes the lineage edge tamper-evident.
- *   - `type`, `sraid_version`, `tenant_id`, `created_at_ms`, `created_by`,
- *     `body`, `authority`, `sensitivity`, `prev`, `links`, and any other
- *     content field.
- *
- * This is the ONE projection that yields the SAME OID whether the object is
- * pre- or post-attestation: attaching an `attestation` (or `signature`,
- * `ml_dsa_signature`, `signature_key_id`, `signature_algorithm`) after hashing
- * is stripped back out here, so `cdroOid(obj)` is invariant across signing.
- *
- * It is FROZEN so no caller can mutate the normative set at runtime.
- */
-export const CDRO_ENVELOPE_FIELDS = Object.freeze([
-    'oid',
-    'signature',
-    'ml_dsa_signature',
-    'signature_key_id',
-    'signature_algorithm',
-    'attestation',
-]);
-const CDRO_ENVELOPE_FIELD_SET = new Set(CDRO_ENVELOPE_FIELDS);
-/**
- * Build the OID content core of a full CDRO: the object with EXACTLY the six
- * detached-signature / envelope fields in `CDRO_ENVELOPE_FIELDS` removed at
- * the top level, and everything else kept.
- *
- * This is the mechanism that makes the L4 `authority` block, the L3 lineage
- * edges (`prev`, `links`, `supersedes`), the propagating `sensitivity` tier,
- * and `gap_version` tamper-evident: they are hashed into identity by
- * construction, so a field cannot be added, stripped, re-pointed, or
- * downgraded without producing a different OID (and invalidating the
- * signature, which is computed over these same bytes). Because `prev`/`links`/
- * `supersedes` OIDs are inside the hash, a node's OID transitively commits its
- * whole reachable history (the Merkle-DAG "head proves history" property).
- *
- * Returns a plain object suitable for `canonicalize` / `oidOf`.
- */
-export function cdroContentCore(cdro) {
-    if (cdro === null || typeof cdro !== 'object' || Array.isArray(cdro)) {
-        throw new TypeError('cdroContentCore: argument must be a CDRO object');
-    }
-    const core = {};
-    for (const [k, v] of Object.entries(cdro)) {
-        if (CDRO_ENVELOPE_FIELD_SET.has(k))
-            continue;
-        core[k] = v;
-    }
-    return core;
-}
 /**
  * Compute the OID of a full CDRO over its content core (see
  * `cdroContentCore`). This is the correct way to derive identity for a

package/dist/oid.js.map

@@ -1 +1 @@
-{"version":3,"file":"oid.js","sourceRoot":"","sources":["../src/oid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,KAAK,CAAC,SAAkB;IACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/D,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAA8B;IAC3D,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC3B,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;QACrC,CAAC,CAAC,SAAS,CAAA;IACf,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACnE,KAAK;IACL,WAAW;IACX,kBAAkB;IAClB,kBAAkB;IAClB,qBAAqB;IACrB,aAAa;CACd,CAAC,CAAA;AAEF,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAA;AAElF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,eAAe,CAAC,IAAa;IAC3C,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAA;IACxE,CAAC;IACD,MAAM,IAAI,GAA4B,EAAE,CAAA;IACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;QACrE,IAAI,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAQ;QAC5C,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACb,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,OAAO,CAAC,IAAa;IACnC,OAAO,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;AACrC,CAAC"}
+{"version":3,"file":"oid.js","sourceRoot":"","sources":["../src/oid.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAElF,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,8EAA8E;AAC9E,0EAA0E;AAC1E,6DAA6D;AAC7D,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,CAAA;AAEhD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,KAAK,CAAC,SAAkB;IACtC,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAA;IAC/D,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,SAA8B;IAC3D,MAAM,KAAK,GACT,OAAO,SAAS,KAAK,QAAQ;QAC3B,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC;QACrC,CAAC,CAAC,SAAS,CAAA;IACf,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,OAAO,CAAC,IAAa;IACnC,OAAO,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;AACrC,CAAC"}

package/dist/types.d.ts

@@ -196,14 +196,15 @@ export interface AttestationEnvelope {
  * CDRO — Canonical Data Record Object.
  *
  * The base shape every signed CDRO object takes. The `oid` field is
- * `sha256:` + hex(sha256(canonicalize(body))) where the body is the CDRO
- * minus the `oid` and `signature` fields.
+ * `sha256:` + hex(sha256(canonicalize(cdroContentCore(obj)))) — the WHOLE
+ * object minus the six detached envelope fields (`CDRO_ENVELOPE_FIELDS`).
+ * It is NOT a hash of `body` alone: use `cdroOid`, not `oidOf(cdro.body)`.
  *
  * Mirrors `GapCdroEnvelope` in synoi-gateway so a GAP object IS a CDRO.
  * Higher-layer packages narrow `body` with their own type.
  */
 export interface CDRO<TBody = unknown> {
-    /** "sha256:" + hex(sha256(canonicalize(cdro_minus_oid_and_signature))). */
+    /** "sha256:" + hex(sha256(canonicalize(cdroContentCore(this)))). */
     oid: string;
     /** Object type discriminator (e.g. "gap:capability_grant"). */
     type: string;
@@ -283,31 +284,4 @@ export interface CDRO<TBody = unknown> {
      */
     signature?: SignatureEnvelope;
 }
-/**
- * SRO — Mutation / Supersession Record.
- *
- * Links a successor CDRO to its predecessor and the actor that authorized
- * the supersession. SROs are themselves CDRO objects (so they're CDROs with
- * an `oid` and `signature`), but they have a specific body shape.
- *
- * Where CDROs are the "what" of the system, SROs are the "what changed."
- * They form an append-only chain: every supersedes pointer in a CDRO is
- * accompanied by an SRO that explains and witnesses the change.
- */
-export interface SROBody {
-    /** OID of the predecessor object being superseded. */
-    predecessor_oid: string;
-    /** OID of the successor object that supersedes it. */
-    successor_oid: string;
-    /** Why the predecessor was superseded. Free-form short string. */
-    reason: string;
-    /** OID of the actor that authorized this mutation. */
-    authorized_by: string;
-    /** Optional list of supporting evidence OIDs (audit trail). */
-    evidence_oids?: string[];
-}
-/** SRO is just a CDRO with a fixed body type. */
-export type SRO = CDRO<SROBody> & {
-    type: 'sraid:sro';
-};
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT,UAAU,GACV,QAAQ,CAAA;AAEZ;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAID;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,MAAM,OAAO,GACf,YAAY,GACZ,cAAc,GACd,aAAa,GACb,mBAAmB,GACnB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,WAAW,GACX,kBAAkB,GAClB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,GAAG,EAAE,OAAO,CAAA;IACZ,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAA;CACZ;AAID,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAIvD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAA;IACf,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAA;IACjB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAA;CACnB;AAID;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,GAAG,EAAE,SAAS,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IAC5C,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAA;IACX,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,kEAAkE;IAClE,UAAU,EAAE,oBAAoB,EAAE,CAAA;CACnC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,IAAI,CAAC,KAAK,GAAG,OAAO;IACnC,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAA;IACX,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,aAAa,EAAE,KAAK,CAAA;IACpB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAA;IAClB,+DAA+D;IAC/D,IAAI,EAAE,KAAK,CAAA;IACX;;;;;OAKG;IACH,SAAS,CAAC,EAAE,cAAc,CAAA;IAC1B;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,EAAE,eAAe,CAAA;IAC7B;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;IACrB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAA;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAA;CAC9B;AAID;;;;;;;;;;GAUG;AACH,MAAM,WAAW,OAAO;IACtB,sDAAsD;IACtD,eAAe,EAAE,MAAM,CAAA;IACvB,sDAAsD;IACtD,aAAa,EAAE,MAAM,CAAA;IACrB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAA;IACd,sDAAsD;IACtD,aAAa,EAAE,MAAM,CAAA;IACrB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,iDAAiD;AACjD,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT,UAAU,GACV,QAAQ,CAAA;AAEZ;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAID;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,MAAM,OAAO,GACf,YAAY,GACZ,cAAc,GACd,aAAa,GACb,mBAAmB,GACnB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,WAAW,GACX,kBAAkB,GAClB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,GAAG,EAAE,OAAO,CAAA;IACZ,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAA;CACZ;AAID,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAIvD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAA;IACf,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAA;IACjB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAA;CACnB;AAID;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,GAAG,EAAE,SAAS,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IAC5C,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAA;IACX,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,kEAAkE;IAClE,UAAU,EAAE,oBAAoB,EAAE,CAAA;CACnC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,IAAI,CAAC,KAAK,GAAG,OAAO;IACnC,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAA;IACX,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,aAAa,EAAE,KAAK,CAAA;IACpB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAA;IAClB,+DAA+D;IAC/D,IAAI,EAAE,KAAK,CAAA;IACX;;;;;OAKG;IACH,SAAS,CAAC,EAAE,cAAc,CAAA;IAC1B;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,EAAE,eAAe,CAAA;IAC7B;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;IACrB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAA;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAA;CAC9B"}

package/dist/types.js

@@ -13,4 +13,23 @@
  * input, so signature rotation does not change the OID.
  */
 export {};
+// ── Supersession ──────────────────────────────────────────────────────────────
+//
+// The standalone SRO (Supersession Record Object, `type: 'sraid:sro'`) was
+// REMOVED in 0.4.0. It was the third of three overlapping supersession
+// mechanisms and the only one nothing consumed: `lineage.ts` never handled it,
+// no repo in the SynOI stack referenced it in any language, and the canon had
+// already retired the term (ADR_022 section 0: "an earlier, retired
+// object-format term").
+//
+// Supersession is now expressed by exactly two things, both identity-bound
+// because `cdroContentCore` hashes them:
+//
+//   prev / links[]  the Merkle edges - a head OID commits its whole reachable
+//                   history. Resolve a version set with `latestWins`.
+//   supersedes      the legacy self-asserted string, kept for compatibility.
+//
+// A caller that needs to record WHY something was superseded should put that
+// in the successor's own `body`, where it is hashed and signed, rather than in
+// a separate object whose linkage was never verified.
 //# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;;AAuTH,iFAAiF;AACjF,EAAE;AACF,2EAA2E;AAC3E,uEAAuE;AACvE,+EAA+E;AAC/E,8EAA8E;AAC9E,oEAAoE;AACpE,wBAAwB;AACxB,EAAE;AACF,2EAA2E;AAC3E,yCAAyC;AACzC,EAAE;AACF,8EAA8E;AAC9E,sEAAsE;AACtE,6EAA6E;AAC7E,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,sDAAsD"}

package/dist/validate.d.ts

@@ -11,7 +11,7 @@
  * Style mirrors the hand-rolled validators in synoi-mcp-server (no zod,
  * no heavy validation library) — kept tiny on purpose.
  */
-import type { AttestationEnvelope, AttestationSignature, AuthorityBlock, CDRO, LineageLink, LinkRel, SignatureEnvelope, SRO } from './types.js';
+import type { AttestationEnvelope, AttestationSignature, AuthorityBlock, CDRO, LineageLink, LinkRel, SignatureEnvelope } from './types.js';
 export interface ValidationResult {
     ok: boolean;
     errors: string[];
@@ -69,20 +69,5 @@ export declare function validateSignatureEnvelope(x: unknown): ValidationResult;
  * entries.
  */
 export declare function validateAttestationEnvelope(x: unknown): ValidationResult;
-/**
- * Validate that `x` matches the SRO shape — a CDRO whose `type` is
- * "sraid:sro" and whose `body` carries predecessor/successor pointers and
- * an authorizer. Reuses validateCdro and layers SRO-specific checks on
- * top.
- *
- *   [S01] envelope is not a valid CDRO
- *   [S02] type is not "sraid:sro"
- *   [S03] body.predecessor_oid not a canonical OID (sha256:<64 hex>)
- *   [S04] body.successor_oid not a canonical OID (sha256:<64 hex>)
- *   [S05] body.reason not a non-empty string
- *   [S06] body.authorized_by not a non-empty string
- *   [S07] body.evidence_oids, if present, not an array of non-empty strings
- */
-export declare function validateSro(x: unknown): ValidationResult;
-export type { AttestationEnvelope, AttestationSignature, AuthorityBlock, CDRO, LineageLink, LinkRel, SRO, SignatureEnvelope, };
+export type { AttestationEnvelope, AttestationSignature, AuthorityBlock, CDRO, LineageLink, LinkRel, SignatureEnvelope, };
 //# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,IAAI,EACJ,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,GAAG,EACJ,MAAM,YAAY,CAAA;AAkBnB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAmFzD;AAID;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGnE;AA0CD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGhE;AA+BD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGtE;AAsBD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGxE;AAyCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CA2CxD;AAID,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,IAAI,EACJ,WAAW,EACX,OAAO,EACP,GAAG,EACH,iBAAiB,GAClB,CAAA"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,IAAI,EACJ,WAAW,EACX,OAAO,EACP,iBAAiB,EAClB,MAAM,YAAY,CAAA;AAkBnB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAmFzD;AAID;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGnE;AA0CD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGhE;AA+BD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGtE;AAsBD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGxE;AAyCD,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,IAAI,EACJ,WAAW,EACX,OAAO,EACP,iBAAiB,GAClB,CAAA"}