@synoi/sraid 0.2.0

package/dist/validate.d.ts

@@ -0,0 +1,88 @@
+/**
+ * @synoi/sraid — validate.ts
+ *
+ * Non-throwing shape validators for CDRO objects. Returns `{ ok, errors }`
+ * so callers can collect every violation in one pass.
+ *
+ * Validation here is intentionally LOW-LEVEL — it checks the CDRO
+ * envelope shape, not the semantics of a specific `body`. Higher-layer
+ * packages (GAP, Vault, …) layer their own validators on top.
+ *
+ * Style mirrors the hand-rolled validators in synoi-mcp-server (no zod,
+ * no heavy validation library) — kept tiny on purpose.
+ */
+import type { AttestationEnvelope, AttestationSignature, AuthorityBlock, CDRO, LineageLink, LinkRel, SignatureEnvelope, SRO } from './types.js';
+export interface ValidationResult {
+    ok: boolean;
+    errors: string[];
+}
+/**
+ * Validate that `x` matches the CDRO envelope shape. Does not verify the
+ * signature — use `verifySignature` for that. Does not recompute the
+ * OID — use `oidOf` and compare for that.
+ *
+ *   [E01] not an object / null
+ *   [E02] oid missing or not a non-empty string
+ *   [E03] oid missing "sha256:" prefix
+ *   [E04] type missing or not a non-empty string
+ *   [E05] sraid_version not "2.0"
+ *   [E06] tenant_id missing or not a non-empty string
+ *   [E07] created_at_ms not a positive integer
+ *   [E08] created_by missing or not a non-empty string
+ *   [E09] body field absent (it may be any value, but must be present)
+ *   [E10] supersedes, if present, not a canonical OID (sha256:<64 hex>)
+ *   [E11] signature, if present, malformed envelope
+ *   [E12] authority, if present, malformed block
+ *   [E13] prev, if present, not a non-empty "sha256:" string
+ *   [E14] links, if present, not an array of well-formed typed edges
+ *   [E15] attestation, if present, malformed DSSE envelope
+ *   [E16] sensitivity, if present, not a known opaque tier (s0..s4)
+ */
+export declare function validateCdro(x: unknown): ValidationResult;
+/**
+ * Validate the shape of an L4 AuthorityBlock. This is a SHAPE check only —
+ * it does NOT verify that the referenced grant exists, is signed, covers
+ * the action, or is unrevoked. For real authorization verification use
+ * `verifyAuthority` in authority.ts (it does binding/signature/coverage
+ * locally and marks revocation/existence as resolver-dependent).
+ */
+export declare function validateAuthorityBlock(x: unknown): ValidationResult;
+/**
+ * Validate a single L3 lineage edge ({ rel, oid }). Shape check only — it
+ * does NOT resolve the target OID or check it exists / is signed / is
+ * unrevoked (resolver concern). `rel` is an OPEN taxonomy: any non-empty
+ * string is accepted so the format stays forward-compatible.
+ */
+export declare function validateLineageLink(x: unknown): ValidationResult;
+/**
+ * Validate the shape of a SignatureEnvelope. Useful when verifying a
+ * detached signature or when a caller wants a quick sanity check before
+ * a more expensive verifySignature() call.
+ */
+export declare function validateSignatureEnvelope(x: unknown): ValidationResult;
+/**
+ * Validate the shape of a DSSE `AttestationEnvelope`. Shape check only — it
+ * does NOT verify the signatures (use `verifyAttestation` in attestation.ts
+ * for that) and does NOT enforce the hybrid both-required policy (the
+ * verifier does). It checks: `payloadType` is a non-empty string, `payload`
+ * is a string, and `signatures` is an array of well-formed `{ alg, sig }`
+ * entries.
+ */
+export declare function validateAttestationEnvelope(x: unknown): ValidationResult;
+/**
+ * Validate that `x` matches the SRO shape — a CDRO whose `type` is
+ * "sraid:sro" and whose `body` carries predecessor/successor pointers and
+ * an authorizer. Reuses validateCdro and layers SRO-specific checks on
+ * top.
+ *
+ *   [S01] envelope is not a valid CDRO
+ *   [S02] type is not "sraid:sro"
+ *   [S03] body.predecessor_oid not a canonical OID (sha256:<64 hex>)
+ *   [S04] body.successor_oid not a canonical OID (sha256:<64 hex>)
+ *   [S05] body.reason not a non-empty string
+ *   [S06] body.authorized_by not a non-empty string
+ *   [S07] body.evidence_oids, if present, not an array of non-empty strings
+ */
+export declare function validateSro(x: unknown): ValidationResult;
+export type { AttestationEnvelope, AttestationSignature, AuthorityBlock, CDRO, LineageLink, LinkRel, SRO, SignatureEnvelope, };
+//# sourceMappingURL=validate.d.ts.map

package/dist/validate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,IAAI,EACJ,WAAW,EACX,OAAO,EACP,iBAAiB,EACjB,GAAG,EACJ,MAAM,YAAY,CAAA;AAkBnB,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAID;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAmFzD;AAID;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGnE;AA0CD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGhE;AA+BD;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGtE;AAsBD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CAGxE;AAyCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,CA2CxD;AAID,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,IAAI,EACJ,WAAW,EACX,OAAO,EACP,GAAG,EACH,iBAAiB,GAClB,CAAA"}

package/dist/validate.js

@@ -0,0 +1,339 @@
+/**
+ * @synoi/sraid — validate.ts
+ *
+ * Non-throwing shape validators for CDRO objects. Returns `{ ok, errors }`
+ * so callers can collect every violation in one pass.
+ *
+ * Validation here is intentionally LOW-LEVEL — it checks the CDRO
+ * envelope shape, not the semantics of a specific `body`. Higher-layer
+ * packages (GAP, Vault, …) layer their own validators on top.
+ *
+ * Style mirrors the hand-rolled validators in synoi-mcp-server (no zod,
+ * no heavy validation library) — kept tiny on purpose.
+ */
+import { SENSITIVITY_TIERS, isSensitivityTier } from './sensitivity.js';
+const VALID_AUTHORITY_DECISIONS = new Set([
+    'allow',
+    'deny',
+    'defer',
+    'step_up',
+    'delegate',
+    'revoke',
+]);
+// Matches the output of oidOf(): "sha256:" followed by exactly 64 lowercase hex chars.
+const CANONICAL_OID_RE = /^sha256:[0-9a-f]{64}$/;
+function isCanonicalOid(v) {
+    return typeof v === 'string' && CANONICAL_OID_RE.test(v);
+}
+// ── CDRO validation ──────────────────────────────────────────────────────────
+/**
+ * Validate that `x` matches the CDRO envelope shape. Does not verify the
+ * signature — use `verifySignature` for that. Does not recompute the
+ * OID — use `oidOf` and compare for that.
+ *
+ *   [E01] not an object / null
+ *   [E02] oid missing or not a non-empty string
+ *   [E03] oid missing "sha256:" prefix
+ *   [E04] type missing or not a non-empty string
+ *   [E05] sraid_version not "2.0"
+ *   [E06] tenant_id missing or not a non-empty string
+ *   [E07] created_at_ms not a positive integer
+ *   [E08] created_by missing or not a non-empty string
+ *   [E09] body field absent (it may be any value, but must be present)
+ *   [E10] supersedes, if present, not a canonical OID (sha256:<64 hex>)
+ *   [E11] signature, if present, malformed envelope
+ *   [E12] authority, if present, malformed block
+ *   [E13] prev, if present, not a non-empty "sha256:" string
+ *   [E14] links, if present, not an array of well-formed typed edges
+ *   [E15] attestation, if present, malformed DSSE envelope
+ *   [E16] sensitivity, if present, not a known opaque tier (s0..s4)
+ */
+export function validateCdro(x) {
+    const errors = [];
+    if (x === null || typeof x !== 'object' || Array.isArray(x)) {
+        return { ok: false, errors: ['[E01] CDRO must be a plain object'] };
+    }
+    const o = x;
+    if (typeof o['oid'] !== 'string' || o['oid'].length === 0) {
+        errors.push('[E02] oid must be a non-empty string');
+    }
+    else if (!o['oid'].startsWith('sha256:')) {
+        errors.push('[E03] oid must start with "sha256:"');
+    }
+    if (typeof o['type'] !== 'string' || o['type'].length === 0) {
+        errors.push('[E04] type must be a non-empty string');
+    }
+    if (o['sraid_version'] !== '2.0') {
+        errors.push('[E05] sraid_version must be "2.0"');
+    }
+    if (typeof o['tenant_id'] !== 'string' || o['tenant_id'].length === 0) {
+        errors.push('[E06] tenant_id must be a non-empty string');
+    }
+    const createdAt = o['created_at_ms'];
+    if (typeof createdAt !== 'number' || !Number.isInteger(createdAt) || createdAt <= 0) {
+        errors.push('[E07] created_at_ms must be a positive integer (Unix ms)');
+    }
+    if (typeof o['created_by'] !== 'string' || o['created_by'].length === 0) {
+        errors.push('[E08] created_by must be a non-empty string');
+    }
+    if (!('body' in o)) {
+        errors.push('[E09] body field must be present');
+    }
+    if (o['supersedes'] !== undefined) {
+        if (!isCanonicalOid(o['supersedes'])) {
+            errors.push('[E10] supersedes, if present, must be a canonical OID (sha256:<64 hex>)');
+        }
+    }
+    if (o['prev'] !== undefined && o['prev'] !== null) {
+        if (typeof o['prev'] !== 'string' || o['prev'].length === 0) {
+            errors.push('[E13] prev, if present, must be a non-empty string');
+        }
+        else if (!o['prev'].startsWith('sha256:')) {
+            errors.push('[E13] prev must start with "sha256:"');
+        }
+    }
+    if (o['links'] !== undefined) {
+        const linkErrors = validateLinksShape(o['links']);
+        for (const e of linkErrors)
+            errors.push('[E14] ' + e);
+    }
+    if (o['signature'] !== undefined) {
+        const envErrors = validateSignatureEnvelopeShape(o['signature']);
+        for (const e of envErrors)
+            errors.push('[E11] ' + e);
+    }
+    if (o['authority'] !== undefined) {
+        const authErrors = validateAuthorityBlockShape(o['authority']);
+        for (const e of authErrors)
+            errors.push('[E12] ' + e);
+    }
+    if (o['attestation'] !== undefined) {
+        const attErrors = validateAttestationEnvelopeShape(o['attestation']);
+        for (const e of attErrors)
+            errors.push('[E15] ' + e);
+    }
+    if (o['sensitivity'] !== undefined && o['sensitivity'] !== null) {
+        if (!isSensitivityTier(o['sensitivity'])) {
+            errors.push(`[E16] sensitivity, if present, must be one of ${SENSITIVITY_TIERS.join('|')} ` +
+                '(a coarse, opaque tier — NOT a literal category like "phi"; SPEC §7)');
+        }
+    }
+    return { ok: errors.length === 0, errors };
+}
+// ── Authority block validation (L4) ───────────────────────────────────────────
+/**
+ * Validate the shape of an L4 AuthorityBlock. This is a SHAPE check only —
+ * it does NOT verify that the referenced grant exists, is signed, covers
+ * the action, or is unrevoked. For real authorization verification use
+ * `verifyAuthority` in authority.ts (it does binding/signature/coverage
+ * locally and marks revocation/existence as resolver-dependent).
+ */
+export function validateAuthorityBlock(x) {
+    const errors = validateAuthorityBlockShape(x);
+    return { ok: errors.length === 0, errors };
+}
+function validateAuthorityBlockShape(x) {
+    const errors = [];
+    if (x === null || typeof x !== 'object' || Array.isArray(x)) {
+        return ['authority must be a plain object'];
+    }
+    const o = x;
+    if (o['grant_oid'] !== undefined) {
+        if (typeof o['grant_oid'] !== 'string' || o['grant_oid'].length === 0) {
+            errors.push('authority.grant_oid, if present, must be a non-empty string');
+        }
+        else if (!o['grant_oid'].startsWith('sha256:')) {
+            errors.push('authority.grant_oid must start with "sha256:"');
+        }
+    }
+    // decision may be null (the orphan / uncorrelated case) or a valid verb.
+    if (o['decision'] !== undefined && o['decision'] !== null) {
+        if (typeof o['decision'] !== 'string' ||
+            !VALID_AUTHORITY_DECISIONS.has(o['decision'])) {
+            errors.push('authority.decision must be one of allow|deny|defer|step_up|delegate|revoke (or null)');
+        }
+    }
+    if (o['intent_oid'] !== undefined) {
+        if (typeof o['intent_oid'] !== 'string' || o['intent_oid'].length === 0) {
+            errors.push('authority.intent_oid, if present, must be a non-empty string');
+        }
+        else if (!o['intent_oid'].startsWith('sha256:')) {
+            errors.push('authority.intent_oid must start with "sha256:"');
+        }
+    }
+    return errors;
+}
+// ── Lineage validation (L3) ───────────────────────────────────────────────────
+/**
+ * Validate a single L3 lineage edge ({ rel, oid }). Shape check only — it
+ * does NOT resolve the target OID or check it exists / is signed / is
+ * unrevoked (resolver concern). `rel` is an OPEN taxonomy: any non-empty
+ * string is accepted so the format stays forward-compatible.
+ */
+export function validateLineageLink(x) {
+    const errors = validateLineageLinkShape(x);
+    return { ok: errors.length === 0, errors };
+}
+function validateLineageLinkShape(x) {
+    const errors = [];
+    if (x === null || typeof x !== 'object' || Array.isArray(x)) {
+        return ['link must be a plain object { rel, oid }'];
+    }
+    const o = x;
+    if (typeof o['rel'] !== 'string' || o['rel'].length === 0) {
+        errors.push('link.rel must be a non-empty string');
+    }
+    if (typeof o['oid'] !== 'string' || o['oid'].length === 0) {
+        errors.push('link.oid must be a non-empty string');
+    }
+    else if (!o['oid'].startsWith('sha256:')) {
+        errors.push('link.oid must start with "sha256:"');
+    }
+    return errors;
+}
+function validateLinksShape(x) {
+    if (!Array.isArray(x))
+        return ['links, if present, must be an array'];
+    const errors = [];
+    for (let i = 0; i < x.length; i++) {
+        const edgeErrors = validateLineageLinkShape(x[i]);
+        for (const e of edgeErrors)
+            errors.push(`links[${i}]: ${e}`);
+    }
+    return errors;
+}
+// ── Signature envelope validation ────────────────────────────────────────────
+/**
+ * Validate the shape of a SignatureEnvelope. Useful when verifying a
+ * detached signature or when a caller wants a quick sanity check before
+ * a more expensive verifySignature() call.
+ */
+export function validateSignatureEnvelope(x) {
+    const errors = validateSignatureEnvelopeShape(x);
+    return { ok: errors.length === 0, errors };
+}
+function validateSignatureEnvelopeShape(x) {
+    const errors = [];
+    if (x === null || typeof x !== 'object' || Array.isArray(x)) {
+        return ['signature envelope must be a plain object'];
+    }
+    const o = x;
+    if (typeof o['ed25519'] !== 'string' || o['ed25519'].length === 0) {
+        errors.push('signature.ed25519 must be a non-empty base64 string');
+    }
+    if (typeof o['ml_dsa_65'] !== 'string' || o['ml_dsa_65'].length === 0) {
+        errors.push('signature.ml_dsa_65 must be a non-empty base64 string');
+    }
+    if (typeof o['signer_kid'] !== 'string' || o['signer_kid'].length === 0) {
+        errors.push('signature.signer_kid must be a non-empty string');
+    }
+    return errors;
+}
+// ── DSSE attestation envelope validation (L2) ─────────────────────────────────
+/**
+ * Validate the shape of a DSSE `AttestationEnvelope`. Shape check only — it
+ * does NOT verify the signatures (use `verifyAttestation` in attestation.ts
+ * for that) and does NOT enforce the hybrid both-required policy (the
+ * verifier does). It checks: `payloadType` is a non-empty string, `payload`
+ * is a string, and `signatures` is an array of well-formed `{ alg, sig }`
+ * entries.
+ */
+export function validateAttestationEnvelope(x) {
+    const errors = validateAttestationEnvelopeShape(x);
+    return { ok: errors.length === 0, errors };
+}
+function validateAttestationEnvelopeShape(x) {
+    const errors = [];
+    if (x === null || typeof x !== 'object' || Array.isArray(x)) {
+        return ['attestation must be a plain object'];
+    }
+    const o = x;
+    if (typeof o['payloadType'] !== 'string' || o['payloadType'].length === 0) {
+        errors.push('attestation.payloadType must be a non-empty string');
+    }
+    if (typeof o['payload'] !== 'string') {
+        errors.push('attestation.payload must be a string');
+    }
+    if (!Array.isArray(o['signatures'])) {
+        errors.push('attestation.signatures must be an array');
+    }
+    else {
+        const sigs = o['signatures'];
+        for (let i = 0; i < sigs.length; i++) {
+            const s = sigs[i];
+            if (s === null || typeof s !== 'object' || Array.isArray(s)) {
+                errors.push(`attestation.signatures[${i}] must be a plain object { alg, sig }`);
+                continue;
+            }
+            const se = s;
+            if (typeof se['alg'] !== 'string' || se['alg'].length === 0) {
+                errors.push(`attestation.signatures[${i}].alg must be a non-empty string`);
+            }
+            if (typeof se['sig'] !== 'string' || se['sig'].length === 0) {
+                errors.push(`attestation.signatures[${i}].sig must be a non-empty base64 string`);
+            }
+            if (se['keyid'] !== undefined && typeof se['keyid'] !== 'string') {
+                errors.push(`attestation.signatures[${i}].keyid, if present, must be a string`);
+            }
+        }
+    }
+    return errors;
+}
+// ── SRO validation ───────────────────────────────────────────────────────────
+/**
+ * Validate that `x` matches the SRO shape — a CDRO whose `type` is
+ * "sraid:sro" and whose `body` carries predecessor/successor pointers and
+ * an authorizer. Reuses validateCdro and layers SRO-specific checks on
+ * top.
+ *
+ *   [S01] envelope is not a valid CDRO
+ *   [S02] type is not "sraid:sro"
+ *   [S03] body.predecessor_oid not a canonical OID (sha256:<64 hex>)
+ *   [S04] body.successor_oid not a canonical OID (sha256:<64 hex>)
+ *   [S05] body.reason not a non-empty string
+ *   [S06] body.authorized_by not a non-empty string
+ *   [S07] body.evidence_oids, if present, not an array of non-empty strings
+ */
+export function validateSro(x) {
+    const cdroResult = validateCdro(x);
+    if (!cdroResult.ok) {
+        return { ok: false, errors: cdroResult.errors.map((e) => '[S01] ' + e) };
+    }
+    const errors = [];
+    const o = x;
+    if (o.type !== 'sraid:sro') {
+        errors.push('[S02] type must be "sraid:sro" for an SRO');
+    }
+    if (o.body === null || typeof o.body !== 'object' || Array.isArray(o.body)) {
+        errors.push('[S01] body must be an object');
+        return { ok: false, errors };
+    }
+    const b = o.body;
+    if (!isCanonicalOid(b['predecessor_oid'])) {
+        errors.push('[S03] body.predecessor_oid must be a canonical OID (sha256:<64 hex>)');
+    }
+    if (!isCanonicalOid(b['successor_oid'])) {
+        errors.push('[S04] body.successor_oid must be a canonical OID (sha256:<64 hex>)');
+    }
+    if (typeof b['reason'] !== 'string' || b['reason'].length === 0) {
+        errors.push('[S05] body.reason must be a non-empty string');
+    }
+    if (typeof b['authorized_by'] !== 'string' || b['authorized_by'].length === 0) {
+        errors.push('[S06] body.authorized_by must be a non-empty string');
+    }
+    if (b['evidence_oids'] !== undefined) {
+        if (!Array.isArray(b['evidence_oids'])) {
+            errors.push('[S07] body.evidence_oids, if present, must be an array');
+        }
+        else {
+            const arr = b['evidence_oids'];
+            for (let i = 0; i < arr.length; i++) {
+                if (typeof arr[i] !== 'string' || arr[i].length === 0) {
+                    errors.push(`[S07] body.evidence_oids[${i}] must be a non-empty string`);
+                }
+            }
+        }
+    }
+    return { ok: errors.length === 0, errors };
+}
+//# sourceMappingURL=validate.js.map

package/dist/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../src/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAYH,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEvE,MAAM,yBAAyB,GAAwB,IAAI,GAAG,CAAC;IAC7D,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,UAAU;IACV,QAAQ;CACT,CAAC,CAAA;AAEF,uFAAuF;AACvF,MAAM,gBAAgB,GAAG,uBAAuB,CAAA;AAChD,SAAS,cAAc,CAAC,CAAU;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC1D,CAAC;AAOD,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,YAAY,CAAC,CAAU;IACrC,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,mCAAmC,CAAC,EAAE,CAAA;IACrE,CAAC;IACD,MAAM,CAAC,GAAG,CAA4B,CAAA;IAEtC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;IACrD,CAAC;SAAM,IAAI,CAAE,CAAC,CAAC,KAAK,CAAY,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,MAAM,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAA;IACtD,CAAC;IAED,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,KAAK,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAA;IAClD,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,WAAW,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAA;IAC3D,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe,CAAC,CAAA;IACpC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAA;IACzE,CAAC;IAED,IAAI,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,YAAY,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAA;IAC5D,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACjD,CAAC;IAED,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAA;QACxF,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QAClD,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,MAAM,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAA;QACnE,CAAC;aAAM,IAAI,CAAE,CAAC,CAAC,MAAM,CAAY,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;QACrD,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QACjD,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;IACvD,CAAC;IAED,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,8BAA8B,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QAChE,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;IACtD,CAAC;IAED,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,2BAA2B,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA;QAC9D,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;IACvD,CAAC;IAED,IAAI,CAAC,CAAC,aAAa,CAAC,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,gCAAgC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAA;QACpE,KAAK,MAAM,CAAC,IAAI,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;IACtD,CAAC;IAED,IAAI,CAAC,CAAC,aAAa,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,iDAAiD,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG;gBAC7E,sEAAsE,CACzE,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC;AAED,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,CAAU;IAC/C,MAAM,MAAM,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;IAC7C,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,2BAA2B,CAAC,CAAU;IAC7C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,kCAAkC,CAAC,CAAA;IAC7C,CAAC;IACD,MAAM,CAAC,GAAG,CAA4B,CAAA;IAEtC,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,WAAW,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClF,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAA;QAC5E,CAAC;aAAM,IAAI,CAAE,CAAC,CAAC,WAAW,CAAY,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAA;QAC9D,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1D,IACE,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ;YACjC,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAW,CAAC,EACvD,CAAC;YACD,MAAM,CAAC,IAAI,CACT,sFAAsF,CACvF,CAAA;QACH,CAAC;IACH,CAAC;IAED,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,YAAY,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpF,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAA;QAC7E,CAAC;aAAM,IAAI,CAAE,CAAC,CAAC,YAAY,CAAY,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,CAAU;IAC5C,MAAM,MAAM,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAA;IAC1C,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,wBAAwB,CAAC,CAAU;IAC1C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,0CAA0C,CAAC,CAAA;IACrD,CAAC;IACD,MAAM,CAAC,GAAG,CAA4B,CAAA;IACtC,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;SAAM,IAAI,CAAE,CAAC,CAAC,KAAK,CAAY,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAU;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,qCAAqC,CAAC,CAAA;IACrE,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACjD,KAAK,MAAM,CAAC,IAAI,UAAU;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,CAAU;IAClD,MAAM,MAAM,GAAG,8BAA8B,CAAC,CAAC,CAAC,CAAA;IAChD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,8BAA8B,CAAC,CAAU;IAChD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,2CAA2C,CAAC,CAAA;IACtD,CAAC;IACD,MAAM,CAAC,GAAG,CAA4B,CAAA;IACtC,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,SAAS,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,WAAW,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,YAAY,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpF,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAA;IAChE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,iFAAiF;AAEjF;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CAAC,CAAU;IACpD,MAAM,MAAM,GAAG,gCAAgC,CAAC,CAAC,CAAC,CAAA;IAClD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,gCAAgC,CAAC,CAAU;IAClD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,oCAAoC,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,CAAC,GAAG,CAA4B,CAAA;IACtC,IAAI,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,aAAa,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtF,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAA;IACnE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAA;IACxD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAc,CAAA;QACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;YACjB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,uCAAuC,CAAC,CAAA;gBAC/E,SAAQ;YACV,CAAC;YACD,MAAM,EAAE,GAAG,CAA4B,CAAA;YACvC,IAAI,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,EAAE,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,kCAAkC,CAAC,CAAA;YAC5E,CAAC;YACD,IAAI,OAAO,EAAE,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAK,EAAE,CAAC,KAAK,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,yCAAyC,CAAC,CAAA;YACnF,CAAC;YACD,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,SAAS,IAAI,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,uCAAuC,CAAC,CAAA;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,gFAAgF;AAEhF;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,CAAU;IACpC,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,CAAC,CAAA;IAClC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAA;IAC1E,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,MAAM,CAAC,GAAG,CAAuC,CAAA;IAEjD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IAC9B,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,CAAC,IAA+B,CAAA;IAE3C,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;IACrF,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,QAAQ,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,eAAe,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1F,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,CAAC,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;QACvE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,CAAC,CAAC,eAAe,CAAc,CAAA;YAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAK,GAAG,CAAC,CAAC,CAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAClE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,8BAA8B,CAAC,CAAA;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC"}

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@synoi/sraid",
+  "version": "0.2.0",
+  "description": "Reference TypeScript library for the SynOI SRAID (Self-Routing Addressable Identity Data) protocol - types, canonical object serializer, OID computation, signature verification, and validators for L0 of the SRAID Stack.",
+  "license": "MIT",
+  "homepage": "https://synoi.systems",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/synoi/synoi-sraid.git"
+  },
+  "author": {
+    "name": "SynOI Inc.",
+    "url": "https://synoi.systems"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org"
+  },
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./canonicalize": {
+      "types": "./dist/canonicalize.d.ts",
+      "default": "./dist/canonicalize.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src",
+    "README.md",
+    "SPEC.md",
+    "PROJECTION_SPEC.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "npx tsx test/run-all.ts"
+  },
+  "dependencies": {
+    "@noble/curves": "^1.9.7",
+    "@noble/hashes": "^1.5.0",
+    "@noble/post-quantum": "^0.6.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.12.0",
+    "tsx": "^4.22.2",
+    "typescript": "^5.4.5"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "keywords": [
+    "synoi",
+    "sraid",
+    "canonical-object-format",
+    "cdro",
+    "content-addressed",
+    "ed25519",
+    "ml-dsa",
+    "post-quantum",
+    "canonicalization"
+  ]
+}