@trylimbo/sdk-verifier-wasm 0.2.11-canary.18 → 0.2.11

package/gen/wasm/trylimbo_sdk_verifier.d.ts

@@ -325,9 +325,10 @@ export interface RegistryOptions {
      */
     url: string;
     /**
-     * Federated resolution APIs a match may name as holding its manifest. C2PA 2.4 lets a
-     * match carry an `endpoint`; one listed here is fetched from, any other is reported as
-     * refused. Checked like `url`: https, or http on loopback only.
+     * Federated resolution APIs a match may name as holding its manifest, beside the ones the
+     * C2PA algorithm list publishes, which are always allowed. C2PA 2.4 lets a match carry an
+     * `endpoint`; one allowed is fetched from, any other is reported as refused. Checked like
+     * `url`: https, or http on loopback only.
      */
     endpoints?: string[];
 }
@@ -375,32 +376,39 @@ export interface Lineage {
     supersededBy: string[];
 }
 
+/**
+ * [`crate::asset::RecoveryIssue`] as JS sees it: a tagged union, each kind with its own data.
+ */
+export type RecoveryIssue = { kind: "binder"; binderIndex: number; message: string } | { kind: "deprecatedAlgorithm"; algorithm: string } | { kind: "bindingQuery"; binderIndex: number; algorithm: string; message: string } | { kind: "queryRefused"; algorithm: string; message: string } | { kind: "contentForm"; message: string } | { kind: "contentQuery"; algorithm: string; message: string } | { kind: "capabilities"; message: string } | { kind: "contentTooLarge"; capBytes: number } | { kind: "candidateFetch"; manifestId: string; message: string } | { kind: "candidateValidation"; manifestId: string; reason: string } | { kind: "endpointRefused"; manifestId: string; endpoint: string } | { kind: "resourceLimit"; message: string };
+
+/**
+ * [`crate::asset::VerdictRule`] as JS sees it.
+ */
+export type VerdictRule = "onlyCandidate" | "notSuperseded" | "hardBinding";
+
+/**
+ * [`crate::asset::Verdict`] as JS sees it.
+ */
+export type Verdict = { kind: "unsigned" } | { kind: "inconclusive" } | { kind: "embedded" } | { kind: "recovered"; index: number; decidedBy: VerdictRule } | { kind: "recoveredDerivative"; index: number; decidedBy: VerdictRule } | { kind: "ambiguous"; candidates: number[] };
+
 export interface AssetVerification {
     credentials: FoundCredential[];
     recovery: RecoverySummary;
     goldenComparison: GoldenComparison;
-}
-
-export interface RecoveryIssue {
-    kind: RecoveryIssueKind;
-    manifestId: string | undefined;
-    message: string;
+    verdict: Verdict;
 }
 
 export interface RecoverySummary {
     status: RecoveryStatus;
-    bestCredentialIndex: number | undefined;
     issues: RecoveryIssue[];
 }
 
 export type ContentBindingClass = "fingerprint" | "watermark";
 
-export type GoldenComparison = { kind: "notRequested" } | { kind: "noEmbeddedManifest" } | { kind: "noRecoveredManifest" } | { kind: "matches"; recoveredIndex: number } | { kind: "differs"; recoveredIndex: number } | { kind: "indeterminate"; recoveredIndex: number | undefined };
+export type GoldenComparison = { kind: "notRequested" } | { kind: "noEmbeddedManifest" } | { kind: "noRecoveredManifest" } | { kind: "recoveryIncomplete" } | { kind: "matches"; recoveredIndex: number } | { kind: "differs"; recoveredIndex: number } | { kind: "noneMatches"; candidates: number[] } | { kind: "unreadable"; recoveredIndex: number };
 
 export type RecoveryDiscovery = { method: "byBinding"; class: ContentBindingClass; binding: SoftBinding; binderIndex: number; registryScore: number | undefined; endpoint: string | undefined } | { method: "byContent"; hint: SoftBinding | undefined; class: ContentBindingClass; algorithm: string; registryScore: number | undefined; endpoint: string | undefined } | { method: "byReference"; hint: SoftBinding | undefined; class: ContentBindingClass; algorithm: string; registryScore: number | undefined; endpoint: string | undefined };
 
-export type RecoveryIssueKind = "binder" | "bindingQuery" | "queryRefused" | "contentQuery" | "capabilities" | "contentTooLarge" | "candidateFetch" | "candidateValidation" | "resourceLimit" | "endpointRefused";
-
 export type RecoveryStatus = "notRequested" | "notFound" | "recovered" | "incomplete";
 
 
@@ -415,7 +423,7 @@ export class AssetVerifier {
      */
     static create(options: AssetVerifierOptions): AssetVerifier;
     /**
-     * Verify an asset against the configured trust anchors and per-call recovery plan.
+     * Verify an asset against the configured trust anchors and per-call recovery options.
      *
      * Reads the C2PA-native formats. A container format (MXF) is plugin-backed, and plugins
      * are native, so a master is verified through the native SDK.
@@ -694,15 +702,13 @@ export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembl
 
 export interface InitOutput {
     readonly memory: WebAssembly.Memory;
-    readonly __wbg_binder_free: (a: number, b: number) => void;
+    readonly __wbg_assetverifier_free: (a: number, b: number) => void;
     readonly __wbg_blobsource_free: (a: number, b: number) => void;
     readonly __wbg_bytessource_free: (a: number, b: number) => void;
     readonly __wbg_memorysource_free: (a: number, b: number) => void;
-    readonly __wbg_streamvalidation_free: (a: number, b: number) => void;
-    readonly __wbg_streamverifier_free: (a: number, b: number) => void;
-    readonly binder_derive: (a: number, b: any, c: number, d: number) => any;
-    readonly binder_held: (a: any) => [number, number, number];
-    readonly binder_iscc: () => number;
+    readonly __wbg_verifyoptions_free: (a: number, b: number) => void;
+    readonly assetverifier_create: (a: any) => [number, number, number];
+    readonly assetverifier_verify: (a: number, b: any, c: number) => any;
     readonly blobsource_length: (a: number) => number;
     readonly blobsource_new: (a: any) => [number, number, number];
     readonly blobsource_readAt: (a: number, b: number, c: number) => [number, number, number];
@@ -714,21 +720,23 @@ export interface InitOutput {
     readonly memorysource_readAt: (a: number, b: number, c: number) => any;
     readonly parse: (a: number, b: number) => [number, number, number];
     readonly resource: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly streamvalidation_export: (a: number) => [number, number, number, number];
-    readonly streamvalidation_validate: (a: number, b: any) => any;
-    readonly streamverifier_create: (a: any) => [number, number, number];
-    readonly streamverifier_open: (a: number, b: number, c: number) => number;
-    readonly streamverifier_resume: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
     readonly thumbnails: (a: number, b: number) => [number, number, number];
-    readonly __wbg_assetverifier_free: (a: number, b: number) => void;
-    readonly __wbg_verifyoptions_free: (a: number, b: number) => void;
-    readonly assetverifier_create: (a: any) => [number, number, number];
-    readonly assetverifier_verify: (a: number, b: any, c: number) => any;
     readonly verifyoptions_new: (a: number, b: number, c: number) => number;
+    readonly __wbg_binder_free: (a: number, b: number) => void;
+    readonly binder_derive: (a: number, b: any, c: number, d: number) => any;
+    readonly binder_held: (a: any) => [number, number, number];
+    readonly binder_iscc: () => number;
     readonly C2PA_TRUST_LIST: () => [number, number];
     readonly C2PA_TSA_TRUST_LIST: () => [number, number];
     readonly DEV_CA: () => [number, number];
     readonly init_panic_hook: () => void;
+    readonly __wbg_streamvalidation_free: (a: number, b: number) => void;
+    readonly __wbg_streamverifier_free: (a: number, b: number) => void;
+    readonly streamvalidation_export: (a: number) => [number, number, number, number];
+    readonly streamvalidation_validate: (a: number, b: any) => any;
+    readonly streamverifier_create: (a: any) => [number, number, number];
+    readonly streamverifier_open: (a: number, b: number, c: number) => number;
+    readonly streamverifier_resume: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
     readonly __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
     readonly intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
     readonly intounderlyingbytesource_cancel: (a: number) => void;

package/gen/wasm/trylimbo_sdk_verifier.js

@@ -32,7 +32,7 @@ export class AssetVerifier {
         return AssetVerifier.__wrap(ret[0]);
     }
     /**
-     * Verify an asset against the configured trust anchors and per-call recovery plan.
+     * Verify an asset against the configured trust anchors and per-call recovery options.
      *
      * Reads the C2PA-native formats. A container format (MXF) is plugin-backed, and plugins
      * are native, so a master is verified through the native SDK.
@@ -1284,7 +1284,7 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 3940, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 3946, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hedf60f9cb8ab20c3);
             return ret;
         },

package/gen/wasm/trylimbo_sdk_verifier_bg.wasm.d.ts

@@ -1,15 +1,13 @@
 /* tslint:disable */
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
-export const __wbg_binder_free: (a: number, b: number) => void;
+export const __wbg_assetverifier_free: (a: number, b: number) => void;
 export const __wbg_blobsource_free: (a: number, b: number) => void;
 export const __wbg_bytessource_free: (a: number, b: number) => void;
 export const __wbg_memorysource_free: (a: number, b: number) => void;
-export const __wbg_streamvalidation_free: (a: number, b: number) => void;
-export const __wbg_streamverifier_free: (a: number, b: number) => void;
-export const binder_derive: (a: number, b: any, c: number, d: number) => any;
-export const binder_held: (a: any) => [number, number, number];
-export const binder_iscc: () => number;
+export const __wbg_verifyoptions_free: (a: number, b: number) => void;
+export const assetverifier_create: (a: any) => [number, number, number];
+export const assetverifier_verify: (a: number, b: any, c: number) => any;
 export const blobsource_length: (a: number) => number;
 export const blobsource_new: (a: any) => [number, number, number];
 export const blobsource_readAt: (a: number, b: number, c: number) => [number, number, number];
@@ -21,21 +19,23 @@ export const memorysource_new: (a: number, b: number) => number;
 export const memorysource_readAt: (a: number, b: number, c: number) => any;
 export const parse: (a: number, b: number) => [number, number, number];
 export const resource: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-export const streamvalidation_export: (a: number) => [number, number, number, number];
-export const streamvalidation_validate: (a: number, b: any) => any;
-export const streamverifier_create: (a: any) => [number, number, number];
-export const streamverifier_open: (a: number, b: number, c: number) => number;
-export const streamverifier_resume: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
 export const thumbnails: (a: number, b: number) => [number, number, number];
-export const __wbg_assetverifier_free: (a: number, b: number) => void;
-export const __wbg_verifyoptions_free: (a: number, b: number) => void;
-export const assetverifier_create: (a: any) => [number, number, number];
-export const assetverifier_verify: (a: number, b: any, c: number) => any;
 export const verifyoptions_new: (a: number, b: number, c: number) => number;
+export const __wbg_binder_free: (a: number, b: number) => void;
+export const binder_derive: (a: number, b: any, c: number, d: number) => any;
+export const binder_held: (a: any) => [number, number, number];
+export const binder_iscc: () => number;
 export const C2PA_TRUST_LIST: () => [number, number];
 export const C2PA_TSA_TRUST_LIST: () => [number, number];
 export const DEV_CA: () => [number, number];
 export const init_panic_hook: () => void;
+export const __wbg_streamvalidation_free: (a: number, b: number) => void;
+export const __wbg_streamverifier_free: (a: number, b: number) => void;
+export const streamvalidation_export: (a: number) => [number, number, number, number];
+export const streamvalidation_validate: (a: number, b: any) => any;
+export const streamverifier_create: (a: any) => [number, number, number];
+export const streamverifier_open: (a: number, b: number, c: number) => number;
+export const streamverifier_resume: (a: number, b: number, c: number, d: number, e: number) => [number, number, number];
 export const __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
 export const intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
 export const intounderlyingbytesource_cancel: (a: number) => void;

package/gen/wasm/worker-thread.js

@@ -30,7 +30,7 @@ var AssetVerifier = class AssetVerifier {
 		return AssetVerifier.__wrap(ret[0]);
 	}
 	/**
-	* Verify an asset against the configured trust anchors and per-call recovery plan.
+	* Verify an asset against the configured trust anchors and per-call recovery options.
 	*
 	* Reads the C2PA-native formats. A container format (MXF) is plugin-backed, and plugins
 	* are native, so a master is verified through the native SDK.

package/gen/wasm/worker.d.ts

@@ -406,9 +406,10 @@ interface RegistryOptions {
    */
   url: string;
   /**
-   * Federated resolution APIs a match may name as holding its manifest. C2PA 2.4 lets a
-   * match carry an `endpoint`; one listed here is fetched from, any other is reported as
-   * refused. Checked like `url`: https, or http on loopback only.
+   * Federated resolution APIs a match may name as holding its manifest, beside the ones the
+   * C2PA algorithm list publishes, which are always allowed. C2PA 2.4 lets a match carry an
+   * `endpoint`; one allowed is fetched from, any other is reported as refused. Checked like
+   * `url`: https, or http on loopback only.
    */
   endpoints?: string[];
 }
@@ -474,19 +475,87 @@ interface Lineage {
   supersedes: string[];
   supersededBy: string[];
 }
+/**
+ * [`crate::asset::RecoveryIssue`] as JS sees it: a tagged union, each kind with its own data.
+ */
+type RecoveryIssue = {
+  kind: "binder";
+  binderIndex: number;
+  message: string;
+} | {
+  kind: "deprecatedAlgorithm";
+  algorithm: string;
+} | {
+  kind: "bindingQuery";
+  binderIndex: number;
+  algorithm: string;
+  message: string;
+} | {
+  kind: "queryRefused";
+  algorithm: string;
+  message: string;
+} | {
+  kind: "contentForm";
+  message: string;
+} | {
+  kind: "contentQuery";
+  algorithm: string;
+  message: string;
+} | {
+  kind: "capabilities";
+  message: string;
+} | {
+  kind: "contentTooLarge";
+  capBytes: number;
+} | {
+  kind: "candidateFetch";
+  manifestId: string;
+  message: string;
+} | {
+  kind: "candidateValidation";
+  manifestId: string;
+  reason: string;
+} | {
+  kind: "endpointRefused";
+  manifestId: string;
+  endpoint: string;
+} | {
+  kind: "resourceLimit";
+  message: string;
+};
+/**
+ * [`crate::asset::VerdictRule`] as JS sees it.
+ */
+type VerdictRule = "onlyCandidate" | "notSuperseded" | "hardBinding";
+/**
+ * [`crate::asset::Verdict`] as JS sees it.
+ */
+type Verdict = {
+  kind: "unsigned";
+} | {
+  kind: "inconclusive";
+} | {
+  kind: "embedded";
+} | {
+  kind: "recovered";
+  index: number;
+  decidedBy: VerdictRule;
+} | {
+  kind: "recoveredDerivative";
+  index: number;
+  decidedBy: VerdictRule;
+} | {
+  kind: "ambiguous";
+  candidates: number[];
+};
 interface AssetVerification {
   credentials: FoundCredential[];
   recovery: RecoverySummary;
   goldenComparison: GoldenComparison;
-}
-interface RecoveryIssue {
-  kind: RecoveryIssueKind;
-  manifestId: string | undefined;
-  message: string;
+  verdict: Verdict;
 }
 interface RecoverySummary {
   status: RecoveryStatus;
-  bestCredentialIndex: number | undefined;
   issues: RecoveryIssue[];
 }
 type ContentBindingClass = "fingerprint" | "watermark";
@@ -496,6 +565,8 @@ type GoldenComparison = {
   kind: "noEmbeddedManifest";
 } | {
   kind: "noRecoveredManifest";
+} | {
+  kind: "recoveryIncomplete";
 } | {
   kind: "matches";
   recoveredIndex: number;
@@ -503,8 +574,11 @@ type GoldenComparison = {
   kind: "differs";
   recoveredIndex: number;
 } | {
-  kind: "indeterminate";
-  recoveredIndex: number | undefined;
+  kind: "noneMatches";
+  candidates: number[];
+} | {
+  kind: "unreadable";
+  recoveredIndex: number;
 };
 type RecoveryDiscovery = {
   method: "byBinding";
@@ -528,7 +602,6 @@ type RecoveryDiscovery = {
   registryScore: number | undefined;
   endpoint: string | undefined;
 };
-type RecoveryIssueKind = "binder" | "bindingQuery" | "queryRefused" | "contentQuery" | "capabilities" | "contentTooLarge" | "candidateFetch" | "candidateValidation" | "resourceLimit" | "endpointRefused";
 type RecoveryStatus = "notRequested" | "notFound" | "recovered" | "incomplete";
 declare class AssetVerifier {
   private constructor();
@@ -541,7 +614,7 @@ declare class AssetVerifier {
    */
   static create(options: AssetVerifierOptions): AssetVerifier;
   /**
-   * Verify an asset against the configured trust anchors and per-call recovery plan.
+   * Verify an asset against the configured trust anchors and per-call recovery options.
    *
    * Reads the C2PA-native formats. A container format (MXF) is plugin-backed, and plugins
    * are native, so a master is verified through the native SDK.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trylimbo/sdk-verifier-wasm",
-  "version": "0.2.11-canary.18",
+  "version": "0.2.11",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",
@@ -40,6 +40,5 @@
   "devDependencies": {
     "comlink": "4.4.2",
     "typescript": "^7.0.2"
-  },
-  "stableVersion": "0.2.10"
+  }
 }