@synoi/sraid 0.3.0 → 0.4.0

package/README.md

@@ -1,7 +1,11 @@
 # @synoi/sraid
 
-Reference TypeScript implementation of **SRAID (Self-Routing Addressable
-Identity Data)**, L0 of the SynOI SRAID Stack. MIT-licensed.
+Reference TypeScript implementation of **SRAID**, the SynOI content-addressed
+object format. MIT-licensed.
+
+SRAID is a name, not an acronym. It has been expanded two different ways in two
+different places; neither expansion added anything, so this package no longer
+expands it. What it does is below.
 
 SRAID defines:
 
@@ -9,24 +13,28 @@ SRAID defines:
 - a deterministic canonical object serializer used as input to hashing and signing,
 - a content-derived **OID** (`sha256:` followed by 64 hex chars) over the canonical bytes,
 - a hybrid **Ed25519 + ML-DSA-65** signature envelope,
-- an **L3 Merkle-DAG lineage** layer (`prev` edge + typed `links[]`), hashed into the OID so a head id commits its whole reachable history, and
-- a supersession record, the **SRO** (Supersession Record Object), that links a successor CDRO to its predecessor.
-
-The three legacy supersession mechanisms, the self-asserted `supersedes`
-string, the standalone SRO, and the `prev` edge, are unified by the lineage
-helpers (`lineageLinks`, `supersededOids`, `latestWins`). `latestWins` resolves
-a set of versions to its single head by following the identity-bound `prev`/
-`links` edges, giving a verifier a **latest-wins / monotone** rule instead of an
-unwitnessed pointer. Given the complete version set, `latestWins` will not name
-a superseded object as head; full rollback-replay resistance additionally
-requires that the superseding object cannot be withheld, which is a Resolver /
-transparency-log property (DESIGN, not yet deployed). The `set_complete` field
-on `LatestWinsResult` is the local signal that lets a caller detect an
-incomplete (potentially withheld) set.
-
-Higher layers are built on SRAID objects: Vault/Resolver at L1, Inference
-Broker/Resonance at L2, GAP at L3. This package is intentionally tiny and has no
-storage, no HTTP surface, and no governance logic.
+- a **Merkle-DAG lineage** layer (`prev` edge + typed `links[]`), hashed into the OID so a head id commits its whole reachable history.
+
+Supersession is expressed by two things, both identity-bound because
+`cdroContentCore` hashes them: the `prev`/`links[]` Merkle edges, and the legacy
+self-asserted `supersedes` string. `latestWins` resolves a version set to its
+single head by following the identity-bound edges, giving a verifier a
+**latest-wins / monotone** rule instead of an unwitnessed pointer. Given the
+complete version set it will not name a superseded object as head; full
+rollback-replay resistance additionally requires that the superseding object
+cannot be withheld, which is a Resolver / transparency-log property (DESIGN, not
+yet deployed). `set_complete` on `LatestWinsResult` is the local signal letting a
+caller detect an incomplete (potentially withheld) set.
+
+The standalone **SRO** was removed in 0.4.0 — see the CHANGELOG.
+
+This package is object identity: canonical bytes, OIDs, hybrid signature
+verification, lineage. It has no storage, no HTTP surface, and no policy.
+
+It verifies **signatures, not identities**: `signer_kid` is an opaque string this
+package never resolves, and nothing here checks revocation. Deciding whether a
+key was trusted at signing time needs a key directory, which is a caller
+concern.
 
 ## Install
 
@@ -39,63 +47,101 @@ npm install @synoi/sraid
 ```ts
 import {
   canonicalize,
-  oidOf,
-  verifySignature,
+  cdroOid,
+  cdroContentCore,
+  pae,
+  verifyAttestation,
   validateCdro,
+  type AttestationEnvelope,
   type CDRO,
-  type SignatureEnvelope,
 } from '@synoi/sraid'
 import { ed25519 } from '@noble/curves/ed25519'
 import { ml_dsa65 } from '@noble/post-quantum/ml-dsa.js'
 import { randomBytes } from 'node:crypto'
 
-// 1. Build a CDRO body and derive its OID.
-const body = { capability: 'door.unlock', risk_class: 'B' }
-const oid = oidOf(body)                          // sha256:<64 hex chars>
-
-const cdro: CDRO<typeof body> = {
-  oid,
+// 1. Build the CDRO content core: every field EXCEPT the detached
+//    envelope fields (oid, signature, attestation, ...).
+const core = {
   type: 'gap:capability_declaration',
-  sraid_version: '2.0',
+  sraid_version: '2.0' as const,
   tenant_id: 't-home',
   created_at_ms: Date.now(),
   created_by: 'actor:skill:demo',
-  body,
+  body: { capability: 'door.unlock', risk_class: 'B' },
 }
 
-console.log(validateCdro(cdro))                  // { ok: true, errors: [] }
+// 2. Identity is the hash of the WHOLE content core, not just the body.
+//    Use cdroOid(core) — NOT oidOf(core.body).
+const cdro: CDRO<typeof core.body> = { oid: cdroOid(core), ...core }
+
+console.log(validateCdro(cdro))            // { ok: true, errors: [] }
+console.log(cdro.oid === cdroOid(cdro))    // true
 
-// 2. Sign the canonical bytes with both Ed25519 and ML-DSA-65.
-const canonical = canonicalize(cdro.body)
-const message = new TextEncoder().encode(canonical)
+// 3. Sign the canonical content core through the DSSE PAE, which binds
+//    payloadType into the signed bytes (prevents cross-type replay).
+const payloadType = 'application/vnd.synoi.sraid+json'
+const payload = canonicalize(cdroContentCore(cdro))
+const signedBytes = pae(payloadType, payload)
 
 const edPriv = new Uint8Array(randomBytes(32))
 const edPub = ed25519.getPublicKey(edPriv)
 const mlKeys = ml_dsa65.keygen(new Uint8Array(randomBytes(32)))
 
-const envelope: SignatureEnvelope = {
-  ed25519: Buffer.from(ed25519.sign(message, edPriv)).toString('base64'),
-  ml_dsa_65: Buffer.from(ml_dsa65.sign(message, mlKeys.secretKey)).toString('base64'),
-  signer_kid: 'synoi-demo-2026-05',
+const attestation: AttestationEnvelope = {
+  payloadType,
+  payload,
+  signatures: [
+    {
+      alg: 'ed25519',
+      sig: Buffer.from(ed25519.sign(signedBytes, edPriv)).toString('base64'),
+      keyid: 'synoi-demo-2026-05',
+    },
+    {
+      alg: 'ml-dsa-65',
+      sig: Buffer.from(ml_dsa65.sign(signedBytes, mlKeys.secretKey)).toString('base64'),
+      keyid: 'synoi-demo-2026-05',
+    },
+  ],
 }
 
-// 3. Verify.
-const v = verifySignature({
-  canonical,
-  envelope,
+// 4. Attaching the attestation does NOT change identity — the six detached
+//    envelope fields are stripped before hashing.
+const attested = { ...cdro, attestation }
+console.log(cdroOid(attested) === cdro.oid) // true
+
+// 5. Verify. `valid` is true only when BOTH signatures verify over the PAE.
+const v = verifyAttestation({
+  envelope: attestation,
   ed25519_pub: edPub,
   ml_dsa_pub: mlKeys.publicKey,
+  expectedPayloadType: payloadType,
 })
-console.log(v)                                   // { valid: true, reasons: [] }
+console.log(v)                             // { valid: true, reasons: [] }
 ```
 
+> **Identity is over the content core, not the body.** `oidOf(cdro.body)` is
+> *not* a CDRO's OID; use `cdroOid`. `verifySignature` / `SignatureEnvelope`
+> (bare-bytes, no payload-type binding) remain exported for compatibility but
+> are superseded by the attestation path above.
+
 ## Surface
 
 ```ts
 canonicalize(value: unknown): string
+
+// CDRO identity — hash the content core. THIS is an object's OID.
+cdroOid(cdro: unknown): string
+cdroContentCore(cdro: unknown): Record<string, unknown>
+CDRO_ENVELOPE_FIELDS: readonly string[]   // the six stripped fields
+
+// Value-level hashing. oidOf(cdro.body) is NOT the CDRO's OID.
 oidOf(canonical: unknown): string
 oidOfCanonical(canonical: string | Uint8Array): string
 
+// DSSE attestation — payload-type bound, both signatures required.
+verifyAttestation(input): { valid: boolean; reasons: string[] }
+pae(payloadType: string, payload: string | Uint8Array): Uint8Array
+
 verifySignature(args: {
   canonical:   string | Uint8Array
   envelope:    SignatureEnvelope
@@ -109,7 +155,6 @@ validateSignatureEnvelope(x: unknown): { ok: boolean; errors: string[] }
 
 // Types
 interface CDRO<TBody>            { /* envelope */ }
-interface SRO                    { /* supersession record */ }
 interface SignatureEnvelope      { ed25519: string; ml_dsa_65: string; signer_kid: string }
 ```
 
@@ -158,9 +203,21 @@ The node default entry is unchanged and keeps its synchronous `node:crypto` fast
 paths. This subpath is purely additive. Added in 0.3.0; earlier versions export
 only `.` and `./canonicalize`.
 
+## Authority verification
+
+Capability-grant and delegation-chain verification is NOT in this package. It is
+authorization policy, not object identity, and it moved to
+[`@synoi/authority-verify`](https://github.com/synoi/synoi-authority-verify) in
+0.4.0.
+
+`capabilityCovers`, `AuthorityResolver` and `GrantStatus` did NOT move - they are
+a pure string predicate and a live-status contract, and remain in the surface
+above.
+
 ## Canonical form
 
-The canonical form is recursive JCS-lite JSON:
+The canonical form is a strict RFC 8785 (JCS) profile, tested against the
+RFC 8785 vectors (`test/rfc8785-conformance.test.ts`):
 
 - primitives via `JSON.stringify`,
 - objects emit keys in lexicographic order,
@@ -170,7 +227,7 @@ The canonical form is recursive JCS-lite JSON:
 
 This canonical form is a wire contract. **Any byte-level change to the
 serializer changes every OID and invalidates every previously-created
-signature.** Treat it as frozen for SRAID v1.0; evolve it only via a new,
+signature.** Treat it as frozen for SRAID v2.0; evolve it only via a new,
 explicitly versioned canonical profile.
 
 ## OID format
@@ -179,8 +236,12 @@ explicitly versioned canonical profile.
 OID = "sha256:" + lowercase_hex( sha256( canonicalize(content) ) )
 ```
 
-The hash input is the OBJECT MINUS its own `oid` and `signature` fields, so
-signature rotation does not change the OID.
+The hash input is the object MINUS the six detached envelope fields
+(`oid`, `signature`, `ml_dsa_signature`, `signature_key_id`,
+`signature_algorithm`, `attestation`) — see `CDRO_ENVELOPE_FIELDS`. Everything
+else is hashed, including `authority`, `sensitivity`, `prev`, `links` and
+`supersedes`, so those are identity-bound and cannot be silently stripped.
+Signing or rotating a signature never changes the OID.
 
 ## Why hybrid signatures
 

package/SPEC.md

@@ -1,4 +1,4 @@
-# SRAID - Self-Routing Addressable Identity Data, Core Object Specification
+# SRAID - Core Object Specification
 
 **Core Specification, Version 1.0**
 
@@ -38,7 +38,7 @@ A SRAID object (the Canonical Data Record Object, or **CDRO**) is a map with the
 
 The `oid`, `attestation`, and `signature` members are excluded from the OID input (Section 4) so that the same content produces the same OID and re-signing never changes identity. All other members are part of the canonical content and therefore contribute to the OID.
 
-**Lineage fields are independent.** An object MAY carry `supersedes`, `prev`, and one or more `links[]` simultaneously. `supersedes` asserts a version-replacement relationship (this object is the authoritative successor of the referenced OID); `prev` is the hash-chain backpointer for ordered append; `links[]` are typed semantic edges (L3). Each is validated for canonical-OID format in isolation. The validator does NOT enforce agreement among them (for example it does not require `supersedes === prev`), nor does it resolve or fetch the referenced objects. Higher layers (Vault/Resolver, GAP) are responsible for any cross-field lineage semantics. The signed supersession receipt (SRO, type `sraid:sro`) is distinct from the self-asserted `supersedes` field on a CDRO: the SRO is an independently signed object authored by a governing actor; `supersedes` is a producer-asserted claim inside the envelope. Both fields are format-validated but neither implies the other.
+**Lineage fields are independent.** An object MAY carry `supersedes`, `prev`, and one or more `links[]` simultaneously. `supersedes` asserts a version-replacement relationship (this object is the authoritative successor of the referenced OID); `prev` is the hash-chain backpointer for ordered append; `links[]` are typed semantic edges (L3). Each is validated for canonical-OID format in isolation. The validator does NOT enforce agreement among them (for example it does not require `supersedes === prev`), nor does it resolve or fetch the referenced objects. Higher layers (Vault/Resolver, GAP) are responsible for any cross-field lineage semantics. The standalone supersession receipt (SRO, type `sraid:sro`) was REMOVED in 0.4.0: nothing in any language consumed it, `lineage.ts` never handled it, and the canon had already retired the term (ADR_022 section 0). A caller recording WHY something was superseded should put that in the successor's own `body`, where it is hashed and signed.
 
 ## 3. Canonical form
 

package/dist/capability.d.ts

@@ -0,0 +1,59 @@
+/**
+ * @synoi/sraid — capability.ts
+ *
+ * Capability-pattern matching and the live-status contract.
+ *
+ * These stay in the core entry, while the grant/delegation VERIFIERS moved to
+ * `@synoi/sraid/authority` in 0.4.0, because they are different things:
+ *
+ *   - `capabilityCovers` is a pure, total string predicate with no crypto, no
+ *     I/O and no policy. It decides whether one dotted-taxonomy pattern covers
+ *     another, and it is the leaf primitive that grant stores build on
+ *     (synoi-app's `in-memory-engine.ts` and `app-store/store.ts` both call it
+ *     directly rather than going through a verifier).
+ *   - `GrantStatus` / `AuthorityResolver` are the CONTRACT for live grant
+ *     state. The contract is a type; satisfying it is somebody else's job.
+ *     Keeping it here lets a store, a resolver and a verifier agree on shape
+ *     without any of them depending on the verifier.
+ *
+ * Nothing in this module makes, or can make, a live claim.
+ */
+/**
+ * Match a capability `target` against a grant `pattern`. Pure string logic,
+ * re-stated here so the core stays dependency-free (the same rule lives in
+ * `@synoi/gap-types` `capabilityMatches`; the object layer must not depend on
+ * the protocol layer).
+ *
+ *   - exact match → true
+ *   - '*' → match-all
+ *   - 'skill.*' matches 'skill.create' and deeper (segment-boundary only).
+ *     A non-boundary 'admin.us*' must NOT match 'admin.users.delete'
+ *     (privilege-escalation footgun) — only a '.'-anchored '*' is a wildcard.
+ */
+export declare function capabilityCovers(pattern: string, target: string): boolean;
+/**
+ * The live-state interface that the OID Resolver implements. It is the ONLY
+ * source of truth for the two properties that cannot be checked offline:
+ * whether a grant currently exists (resolves) and whether it has been revoked.
+ *
+ * RESOLVER-DEPENDENT: undeployed today (SRAID_FOUNDATION_PUNCHLIST C). Defined
+ * here so callers, a future resolver, and the out-of-core verifier all agree
+ * on one contract.
+ */
+export interface AuthorityResolver {
+    /**
+     * Resolve a grant OID to its current status. Implementations should return
+     * `{ exists: false }` for an unknown OID and `{ exists: true, revoked: true,
+     * revoked_at_ms }` for a revoked one.
+     */
+    resolveGrantStatus(grantOid: string): Promise<GrantStatus> | GrantStatus;
+}
+export interface GrantStatus {
+    /** Whether the grant OID resolves to a known, published grant. */
+    exists: boolean;
+    /** Whether the grant has been revoked. Only meaningful when `exists`. */
+    revoked?: boolean;
+    /** When the revocation took effect, if revoked. */
+    revoked_at_ms?: number;
+}
+//# sourceMappingURL=capability.d.ts.map

package/dist/capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAQzE;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,WAAW,CAAA;CACzE;AAED,MAAM,WAAW,WAAW;IAC1B,kEAAkE;IAClE,MAAM,EAAE,OAAO,CAAA;IACf,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,mDAAmD;IACnD,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB"}

package/dist/capability.js

@@ -0,0 +1,44 @@
+/**
+ * @synoi/sraid — capability.ts
+ *
+ * Capability-pattern matching and the live-status contract.
+ *
+ * These stay in the core entry, while the grant/delegation VERIFIERS moved to
+ * `@synoi/sraid/authority` in 0.4.0, because they are different things:
+ *
+ *   - `capabilityCovers` is a pure, total string predicate with no crypto, no
+ *     I/O and no policy. It decides whether one dotted-taxonomy pattern covers
+ *     another, and it is the leaf primitive that grant stores build on
+ *     (synoi-app's `in-memory-engine.ts` and `app-store/store.ts` both call it
+ *     directly rather than going through a verifier).
+ *   - `GrantStatus` / `AuthorityResolver` are the CONTRACT for live grant
+ *     state. The contract is a type; satisfying it is somebody else's job.
+ *     Keeping it here lets a store, a resolver and a verifier agree on shape
+ *     without any of them depending on the verifier.
+ *
+ * Nothing in this module makes, or can make, a live claim.
+ */
+/**
+ * Match a capability `target` against a grant `pattern`. Pure string logic,
+ * re-stated here so the core stays dependency-free (the same rule lives in
+ * `@synoi/gap-types` `capabilityMatches`; the object layer must not depend on
+ * the protocol layer).
+ *
+ *   - exact match → true
+ *   - '*' → match-all
+ *   - 'skill.*' matches 'skill.create' and deeper (segment-boundary only).
+ *     A non-boundary 'admin.us*' must NOT match 'admin.users.delete'
+ *     (privilege-escalation footgun) — only a '.'-anchored '*' is a wildcard.
+ */
+export function capabilityCovers(pattern, target) {
+    if (pattern === target)
+        return true;
+    if (pattern === '*')
+        return true;
+    if (pattern.endsWith('.*')) {
+        const prefix = pattern.slice(0, -1); // keep trailing '.', e.g. 'skill.'
+        return target.startsWith(prefix);
+    }
+    return false;
+}
+//# sourceMappingURL=capability.js.map

package/dist/capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,MAAc;IAC9D,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,IAAI,CAAA;IACnC,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA;IAChC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA,CAAC,mCAAmC;QACvE,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/index.d.ts

@@ -1,19 +1,19 @@
 /**
  * @synoi/sraid — public surface.
  *
- * SRAID (Self-Routing Addressable Identity Data) is L0 of the SynOI SRAID Stack:
+ * SRAID is the object-identity layer: it defines what a signed object IS and
+ * how anyone re-derives and verifies its identity offline.
  *
- *   L0 SRAID            ← this package
- *   L1 Vault / Resolver
- *   L2 Inference Broker / Resonance
- *   L3 GAP (Governed Action Protocol)
- *   L4 Apps
+ * Scope, precisely:
+ *   IN   canonical serializer, OID computation, hybrid Ed25519 + ML-DSA-65
+ *        attestation verification, lineage resolution, shape validators.
+ *   OUT  storage, transport, key resolution, revocation, policy, enforcement.
  *
- * This package is intentionally small: types, canonical serializer,
- * OID computation, hybrid signature verification, and shape validators.
- * No storage, no HTTP, no governance — those are higher layers.
+ * It verifies SIGNATURES, not IDENTITIES: `signer_kid` is an opaque string
+ * this package never resolves, and nothing here checks revocation. Deciding
+ * whether a key was trusted at signing time is a caller/directory concern.
  */
-export type { AttestationEnvelope, AttestationSignature, AuthorityBlock, AuthorityDecision, CDRO, LineageLink, LinkRel, SRO, SROBody, SensitivityTier, SignatureEnvelope, } from './types.js';
+export type { AttestationEnvelope, AttestationSignature, AuthorityBlock, AuthorityDecision, CDRO, LineageLink, LinkRel, SensitivityTier, SignatureEnvelope, } from './types.js';
 export { canonicalize } from './canonicalize.js';
 export { oidOf, oidOfCanonical, cdroOid, cdroContentCore, CDRO_ENVELOPE_FIELDS } from './oid.js';
 export { verifySignature, type VerifySignatureInput, type VerifySignatureResult, } from './signature.js';
@@ -22,7 +22,7 @@ export { evictKeyFromCaches } from './internal/key-cache.js';
 export { verifyAttestation, pae, ALG_ED25519, ALG_ML_DSA_65, type VerifyAttestationInput, type VerifyAttestationResult, } from './attestation.js';
 export { lineageLinks, supersededOids, latestWins, type LatestWinsResult, } from './lineage.js';
 export { SENSITIVITY_TIERS, SENSITIVITY_DEFAULT, isSensitivityTier, sensitivityRank, sensitivityMax, sensitivityCarryForward, sensitivityMonotoneCheck, } from './sensitivity.js';
-export { verifyAuthority, capabilityCovers, type VerifyAuthorityInput, type VerifyAuthorityResult, type AuthorityResolver, type GrantStatus, type GrantBodyShape, } from './authority.js';
-export { verifyDelegationChain, MAX_DELEGATION_DEPTH, type VerifyDelegationChainInput, type VerifyDelegationChainResult, type HopResult, type LinkPubkeys, } from './authority.js';
-export { validateCdro, validateSro, validateSignatureEnvelope, validateAttestationEnvelope, validateAuthorityBlock, validateLineageLink, type ValidationResult, } from './validate.js';
+export { capabilityCovers } from './capability.js';
+export type { AuthorityResolver, GrantStatus } from './capability.js';
+export { validateCdro, validateSignatureEnvelope, validateAttestationEnvelope, validateAuthorityBlock, validateLineageLink, type ValidationResult, } from './validate.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,IAAI,EACJ,WAAW,EACX,OAAO,EACP,GAAG,EACH,OAAO,EACP,eAAe,EACf,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAGnB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAGhD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAGhG,OAAO,EACL,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAA;AAKvB,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAMlE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAK5D,OAAO,EACL,iBAAiB,EACjB,GAAG,EACH,WAAW,EACX,aAAa,EACb,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,UAAU,EACV,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAA;AAGrB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,cAAc,GACpB,MAAM,gBAAgB,CAAA;AAIvB,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAChC,KAAK,SAAS,EACd,KAAK,WAAW,GACjB,MAAM,gBAAgB,CAAA;AAGvB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,YAAY,EACV,mBAAmB,EACnB,oBAAoB,EACpB,cAAc,EACd,iBAAiB,EACjB,IAAI,EACJ,WAAW,EACX,OAAO,EACP,eAAe,EACf,iBAAiB,GAClB,MAAM,YAAY,CAAA;AAGnB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAGhD,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAGhG,OAAO,EACL,eAAe,EACf,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAA;AAKvB,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAMlE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAK5D,OAAO,EACL,iBAAiB,EACjB,GAAG,EACH,WAAW,EACX,aAAa,EACb,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,GAC7B,MAAM,kBAAkB,CAAA;AAIzB,OAAO,EACL,YAAY,EACZ,cAAc,EACd,UAAU,EACV,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAA;AAGrB,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kBAAkB,CAAA;AAIzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClD,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAGrE,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,gBAAgB,GACtB,MAAM,eAAe,CAAA"}

package/dist/index.js

@@ -1,17 +1,17 @@
 /**
  * @synoi/sraid — public surface.
  *
- * SRAID (Self-Routing Addressable Identity Data) is L0 of the SynOI SRAID Stack:
+ * SRAID is the object-identity layer: it defines what a signed object IS and
+ * how anyone re-derives and verifies its identity offline.
  *
- *   L0 SRAID            ← this package
- *   L1 Vault / Resolver
- *   L2 Inference Broker / Resonance
- *   L3 GAP (Governed Action Protocol)
- *   L4 Apps
+ * Scope, precisely:
+ *   IN   canonical serializer, OID computation, hybrid Ed25519 + ML-DSA-65
+ *        attestation verification, lineage resolution, shape validators.
+ *   OUT  storage, transport, key resolution, revocation, policy, enforcement.
  *
- * This package is intentionally small: types, canonical serializer,
- * OID computation, hybrid signature verification, and shape validators.
- * No storage, no HTTP, no governance — those are higher layers.
+ * It verifies SIGNATURES, not IDENTITIES: `signer_kid` is an opaque string
+ * this package never resolves, and nothing here checks revocation. Deciding
+ * whether a key was trusted at signing time is a caller/directory concern.
  */
 // Canonical serializer — byte-identical to synoi-gateway + @synoi/vault.
 export { canonicalize } from './canonicalize.js';
@@ -28,19 +28,27 @@ export { verifyMlDsa65, isNativeMlDsaAvailable } from './mldsa.js';
 // bytes; `evictKeyFromCaches(keyId)` drops that entry from every cache so a
 // rotated or compromised key cannot be served stale on a later verify.
 export { evictKeyFromCaches } from './internal/key-cache.js';
-// L2 DSSE attestation — PAE type-binding, hybrid Ed25519 + ML-DSA-65 both
+// DSSE attestation — PAE type-binding, hybrid Ed25519 + ML-DSA-65 both
 // required. The preferred signing path (replaces the legacy bare-bytes
 // SignatureEnvelope; closes the cross-type confusion gap SRAID F7 / A4).
 export { verifyAttestation, pae, ALG_ED25519, ALG_ML_DSA_65, } from './attestation.js';
-// L3 lineage (Merkle-DAG) — unify supersedes/SRO/prev; latest-wins resolution.
+// Lineage (Merkle-DAG) — unify the `supersedes` string with the identity-bound
+// `prev`/`links` edges; latest-wins resolution over a version set.
 export { lineageLinks, supersededOids, latestWins, } from './lineage.js';
-// L4 propagating sensitivity — coarse, opaque tier + monotone max() carry-forward.
+// Propagating sensitivity — coarse, opaque tier + monotone max() carry-forward.
 export { SENSITIVITY_TIERS, SENSITIVITY_DEFAULT, isSensitivityTier, sensitivityRank, sensitivityMax, sensitivityCarryForward, sensitivityMonotoneCheck, } from './sensitivity.js';
-// L4 authority verification (the authorized axis).
-export { verifyAuthority, capabilityCovers, } from './authority.js';
-// L4 delegation-chain verification (K2) — VERIFY-ONLY, offline, no enforcement.
-// Always reports revocation_checked/existence_checked false (no live claim).
-export { verifyDelegationChain, MAX_DELEGATION_DEPTH, } from './authority.js';
+// Capability matching + the live-grant-status contract. The leaf primitive a
+// grant store needs: pure string logic, no crypto, no I/O, no live claim.
+export { capabilityCovers } from './capability.js';
 // Shape validators.
-export { validateCdro, validateSro, validateSignatureEnvelope, validateAttestationEnvelope, validateAuthorityBlock, validateLineageLink, } from './validate.js';
+export { validateCdro, validateSignatureEnvelope, validateAttestationEnvelope, validateAuthorityBlock, validateLineageLink, } from './validate.js';
+// MOVED IN 0.4.0 — the grant and delegation-chain VERIFIERS (`verifyAuthority`,
+// `verifyDelegationChain`, `MAX_DELEGATION_DEPTH`) are authorization policy,
+// not object identity, and are no longer exported from this entry. They live
+// at the `@synoi/sraid/authority` subpath, unchanged and still verify-only.
+//
+// `capabilityCovers`, `AuthorityResolver` and `GrantStatus` did NOT move: they
+// are the leaf primitive and the contract, and are exported above.
+//
+// REMOVED IN 0.4.0 — `validateSro`, `SRO`, `SROBody`. See CHANGELOG 0.4.0.
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiBH,yEAAyE;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,oEAAoE;AACpE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAEhG,8EAA8E;AAC9E,OAAO,EACL,eAAe,GAGhB,MAAM,gBAAgB,CAAA;AAEvB,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAElE,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,uEAAuE;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,0EAA0E;AAC1E,uEAAuE;AACvE,yEAAyE;AACzE,OAAO,EACL,iBAAiB,EACjB,GAAG,EACH,WAAW,EACX,aAAa,GAGd,MAAM,kBAAkB,CAAA;AAEzB,+EAA+E;AAC/E,OAAO,EACL,YAAY,EACZ,cAAc,EACd,UAAU,GAEX,MAAM,cAAc,CAAA;AAErB,mFAAmF;AACnF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kBAAkB,CAAA;AAEzB,mDAAmD;AACnD,OAAO,EACL,eAAe,EACf,gBAAgB,GAMjB,MAAM,gBAAgB,CAAA;AAEvB,gFAAgF;AAChF,6EAA6E;AAC7E,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAKrB,MAAM,gBAAgB,CAAA;AAEvB,oBAAoB;AACpB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,mBAAmB,GAEpB,MAAM,eAAe,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAeH,yEAAyE;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,oEAAoE;AACpE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AAEhG,8EAA8E;AAC9E,OAAO,EACL,eAAe,GAGhB,MAAM,gBAAgB,CAAA;AAEvB,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAElE,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,uEAAuE;AACvE,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AAE5D,uEAAuE;AACvE,uEAAuE;AACvE,yEAAyE;AACzE,OAAO,EACL,iBAAiB,EACjB,GAAG,EACH,WAAW,EACX,aAAa,GAGd,MAAM,kBAAkB,CAAA;AAEzB,+EAA+E;AAC/E,mEAAmE;AACnE,OAAO,EACL,YAAY,EACZ,cAAc,EACd,UAAU,GAEX,MAAM,cAAc,CAAA;AAErB,gFAAgF;AAChF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,kBAAkB,CAAA;AAEzB,6EAA6E;AAC7E,0EAA0E;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,oBAAoB;AACpB,OAAO,EACL,YAAY,EACZ,yBAAyB,EACzB,2BAA2B,EAC3B,sBAAsB,EACtB,mBAAmB,GAEpB,MAAM,eAAe,CAAA;AAEtB,gFAAgF;AAChF,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,EAAE;AACF,+EAA+E;AAC/E,mEAAmE;AACnE,EAAE;AACF,2EAA2E"}

package/dist/lineage.js.map

@@ -1 +1 @@
-{"version":3,"file":"lineage.js","sourceRoot":"","sources":["../src/lineage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,IAAiD;IAC5E,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,GAAW,EAAQ,EAAE;QAC/C,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,GAAG,CAAA;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAM;QACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IACxB,CAAC,CAAA;IAED,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpF,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiD;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,UAAU,CAAC,QAA+B;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAA;QACtF,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAA;QAChG,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACrB,CAAC;IAED,2EAA2E;IAC3E,cAAc;IACd,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,IAAI,OAAO,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;oBACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAA;gBAC5F,CAAC;gBACD,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAEvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;YACrC,OAAO,EAAE,CAAC,iEAAiE,GAAG,GAAG,CAAC,EAAE,CAAA;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;YACrC,OAAO,EAAE,CAAC,SAAS,KAAK,CAAC,MAAM,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAC/E,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;IAE/B,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAA,CAAE,gBAAgB;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAA,CAAiB,2CAA2C;IAGxF,MAAM,KAAK,GAAY,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAClD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAElB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;QAClC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAE,CAAA;YAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,+DAA+D;gBAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;oBACrC,OAAO,EAAE,CAAC,uBAAuB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;YAC5D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;gBAC7B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAClB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1F,CAAC;YACD,iEAAiE;QACnE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACnB,OAAO,CAAC,GAAG,EAAE,CAAA;YACb,KAAK,CAAC,GAAG,EAAE,CAAA;QACb,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;YAC1C,OAAO,EAAE,CAAC,yBAAyB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;IAClE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AAC5D,CAAC"}
+{"version":3,"file":"lineage.js","sourceRoot":"","sources":["../src/lineage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,YAAY,CAAC,IAAiD;IAC5E,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,GAAW,EAAQ,EAAE;QAC/C,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,GAAG,GAAG,CAAA;QAChC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAM;QACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IACxB,CAAC,CAAA;IAED,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IACrC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpF,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAiD;IAC9E,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;YACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAsBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,UAAU,CAAC,QAA+B;IACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC3C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,8BAA8B,CAAC,EAAE,CAAA;QACtF,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,iCAAiC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAA;QAChG,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IACrB,CAAC;IAED,2EAA2E;IAC3E,cAAc;IACd,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC9C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,MAAM,OAAO,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvB,IAAI,OAAO,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;oBACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,6BAA6B,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAA;gBAC5F,CAAC;gBACD,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAA;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;IAEvE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;YACrC,OAAO,EAAE,CAAC,iEAAiE,GAAG,GAAG,CAAC,EAAE,CAAA;IACxF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;YACrC,OAAO,EAAE,CAAC,SAAS,KAAK,CAAC,MAAM,sBAAsB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAC/E,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAA;IAE/B,2EAA2E;IAC3E,wEAAwE;IACxE,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAA,CAAE,gBAAgB;IAC5D,MAAM,OAAO,GAAa,EAAE,CAAA,CAAiB,2CAA2C;IAGxF,MAAM,KAAK,GAAY,EAAE,CAAA;IACzB,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAClD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAElB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;QAClC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAE,CAAA;YAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC9B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,+DAA+D;gBAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;gBAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK;oBACrC,OAAO,EAAE,CAAC,uBAAuB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;YAC5D,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAE,CAAA;gBAC7B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBAClB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;gBAClB,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAC1F,CAAC;YACD,iEAAiE;QACnE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACnB,OAAO,CAAC,GAAG,EAAE,CAAA;YACb,KAAK,CAAC,GAAG,EAAE,CAAA;QACb,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK;YAC1C,OAAO,EAAE,CAAC,yBAAyB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAA;IAClE,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;AAC5D,CAAC"}

package/dist/types.d.ts

@@ -196,14 +196,15 @@ export interface AttestationEnvelope {
  * CDRO — Canonical Data Record Object.
  *
  * The base shape every signed CDRO object takes. The `oid` field is
- * `sha256:` + hex(sha256(canonicalize(body))) where the body is the CDRO
- * minus the `oid` and `signature` fields.
+ * `sha256:` + hex(sha256(canonicalize(cdroContentCore(obj)))) — the WHOLE
+ * object minus the six detached envelope fields (`CDRO_ENVELOPE_FIELDS`).
+ * It is NOT a hash of `body` alone: use `cdroOid`, not `oidOf(cdro.body)`.
  *
  * Mirrors `GapCdroEnvelope` in synoi-gateway so a GAP object IS a CDRO.
  * Higher-layer packages narrow `body` with their own type.
  */
 export interface CDRO<TBody = unknown> {
-    /** "sha256:" + hex(sha256(canonicalize(cdro_minus_oid_and_signature))). */
+    /** "sha256:" + hex(sha256(canonicalize(cdroContentCore(this)))). */
     oid: string;
     /** Object type discriminator (e.g. "gap:capability_grant"). */
     type: string;
@@ -283,31 +284,4 @@ export interface CDRO<TBody = unknown> {
      */
     signature?: SignatureEnvelope;
 }
-/**
- * SRO — Mutation / Supersession Record.
- *
- * Links a successor CDRO to its predecessor and the actor that authorized
- * the supersession. SROs are themselves CDRO objects (so they're CDROs with
- * an `oid` and `signature`), but they have a specific body shape.
- *
- * Where CDROs are the "what" of the system, SROs are the "what changed."
- * They form an append-only chain: every supersedes pointer in a CDRO is
- * accompanied by an SRO that explains and witnesses the change.
- */
-export interface SROBody {
-    /** OID of the predecessor object being superseded. */
-    predecessor_oid: string;
-    /** OID of the successor object that supersedes it. */
-    successor_oid: string;
-    /** Why the predecessor was superseded. Free-form short string. */
-    reason: string;
-    /** OID of the actor that authorized this mutation. */
-    authorized_by: string;
-    /** Optional list of supporting evidence OIDs (audit trail). */
-    evidence_oids?: string[];
-}
-/** SRO is just a CDRO with a fixed body type. */
-export type SRO = CDRO<SROBody> & {
-    type: 'sraid:sro';
-};
 //# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT,UAAU,GACV,QAAQ,CAAA;AAEZ;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAID;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,MAAM,OAAO,GACf,YAAY,GACZ,cAAc,GACd,aAAa,GACb,mBAAmB,GACnB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,WAAW,GACX,kBAAkB,GAClB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,GAAG,EAAE,OAAO,CAAA;IACZ,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAA;CACZ;AAID,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAIvD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAA;IACf,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAA;IACjB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAA;CACnB;AAID;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,GAAG,EAAE,SAAS,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IAC5C,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAA;IACX,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,kEAAkE;IAClE,UAAU,EAAE,oBAAoB,EAAE,CAAA;CACnC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,IAAI,CAAC,KAAK,GAAG,OAAO;IACnC,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAA;IACX,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,aAAa,EAAE,KAAK,CAAA;IACpB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAA;IAClB,+DAA+D;IAC/D,IAAI,EAAE,KAAK,CAAA;IACX;;;;;OAKG;IACH,SAAS,CAAC,EAAE,cAAc,CAAA;IAC1B;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,EAAE,eAAe,CAAA;IAC7B;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;IACrB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAA;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAA;CAC9B;AAID;;;;;;;;;;GAUG;AACH,MAAM,WAAW,OAAO;IACtB,sDAAsD;IACtD,eAAe,EAAE,MAAM,CAAA;IACvB,sDAAsD;IACtD,aAAa,EAAE,MAAM,CAAA;IACrB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAA;IACd,sDAAsD;IACtD,aAAa,EAAE,MAAM,CAAA;IACrB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,iDAAiD;AACjD,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG;IAAE,IAAI,EAAE,WAAW,CAAA;CAAE,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,iBAAiB,GACzB,OAAO,GACP,MAAM,GACN,OAAO,GACP,SAAS,GACT,UAAU,GACV,QAAQ,CAAA;AAEZ;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAID;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,MAAM,OAAO,GACf,YAAY,GACZ,cAAc,GACd,aAAa,GACb,mBAAmB,GACnB,aAAa,GACb,cAAc,GACd,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,WAAW,GACX,kBAAkB,GAClB,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B,2EAA2E;IAC3E,GAAG,EAAE,OAAO,CAAA;IACZ,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAA;CACZ;AAID,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAIvD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAA;IACf,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAA;IACjB,+DAA+D;IAC/D,UAAU,EAAE,MAAM,CAAA;CACnB;AAID;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC;;;;OAIG;IACH,GAAG,EAAE,SAAS,GAAG,WAAW,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;IAC5C,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAA;IACX,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAA;IACf,kEAAkE;IAClE,UAAU,EAAE,oBAAoB,EAAE,CAAA;CACnC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,IAAI,CAAC,KAAK,GAAG,OAAO;IACnC,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAA;IACX,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,aAAa,EAAE,KAAK,CAAA;IACpB,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,aAAa,EAAE,MAAM,CAAA;IACrB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAA;IAClB,+DAA+D;IAC/D,IAAI,EAAE,KAAK,CAAA;IACX;;;;;OAKG;IACH,SAAS,CAAC,EAAE,cAAc,CAAA;IAC1B;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,EAAE,eAAe,CAAA;IAC7B;;;;;;;;OAQG;IACH,IAAI,CAAC,EAAE,MAAM,CAAA;IACb;;;;;;OAMG;IACH,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;IACrB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,mBAAmB,CAAA;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,iBAAiB,CAAA;CAC9B"}

package/dist/types.js

@@ -13,4 +13,23 @@
  * input, so signature rotation does not change the OID.
  */
 export {};
+// ── Supersession ──────────────────────────────────────────────────────────────
+//
+// The standalone SRO (Supersession Record Object, `type: 'sraid:sro'`) was
+// REMOVED in 0.4.0. It was the third of three overlapping supersession
+// mechanisms and the only one nothing consumed: `lineage.ts` never handled it,
+// no repo in the SynOI stack referenced it in any language, and the canon had
+// already retired the term (ADR_022 section 0: "an earlier, retired
+// object-format term").
+//
+// Supersession is now expressed by exactly two things, both identity-bound
+// because `cdroContentCore` hashes them:
+//
+//   prev / links[]  the Merkle edges - a head OID commits its whole reachable
+//                   history. Resolve a version set with `latestWins`.
+//   supersedes      the legacy self-asserted string, kept for compatibility.
+//
+// A caller that needs to record WHY something was superseded should put that
+// in the successor's own `body`, where it is hashed and signed, rather than in
+// a separate object whose linkage was never verified.
 //# sourceMappingURL=types.js.map