@trylimbo/sdk-verifier-wasm 0.2.25-canary.37 → 0.2.25-canary.38

package/gen/wasm/comlink.js

@@ -267,4 +267,4 @@ function generateUUID() {
 	return new Array(4).fill(0).map(() => Math.floor(Math.random() * Number.MAX_SAFE_INTEGER).toString(16)).join("-");
 }
 //#endregion
-export { wrap as i, finalizer as n, proxy as r, expose as t };
+export { wrap as a, transferHandlers as i, finalizer as n, proxy as r, expose as t };

package/gen/wasm/trylimbo_sdk_verifier.d.ts

@@ -77,7 +77,7 @@ export interface SessionKey {
      */
     kid: Uint8Array;
     /**
-     * The session key\'s public half (SEC1-encoded bytes).
+     * SEC1 EC, raw Ed25519 or PKCS#1 DER RSA public-key bytes.
      */
     publicKey: Uint8Array;
 }
@@ -211,7 +211,7 @@ export interface InitValidation {
 /**
  * Result of `StreamSession.validate`, discriminated by `kind`.
  */
-export type SegmentValidation = ({ kind: "init" } & InitValidation) | ({ kind: "media" } & MediaValidation) | { kind: "unknown" };
+export type SegmentValidation = ({ kind: "init" } & InitValidation) | ({ kind: "media" } & MediaValidation);
 
 /**
  * The C2PA 2.4 golden-flow comparison of the embedded manifest against what the repository holds.
@@ -233,6 +233,9 @@ export type DiscoveryVia = { kind: "byBinding"; value: Uint8Array } | { kind: "b
  * by `kind`. A consumer switches on `err.kind` (`\"reason\" | \"invalid\" | \"status\"`)
  * and reads the shape-specific fields; `code` and `message` are common to every
  * shape.
+ *
+ * What is thrown is an `Error` named `SdkError` (a stack, `instanceof Error`) that carries
+ * these fields; this type is the shape of its properties.
  */
 export type SdkError = ({ kind: "status" } & StatusError) | ({ kind: "reason" } & ReasonError) | ({ kind: "invalid" } & InvalidError);
 
@@ -279,9 +282,9 @@ export interface Hint {
  */
 export interface SegmentTiming {
     /**
-     * The segment\'s `sequenceNumber` (exact below 2^53).
+     * The segment\'s `sequenceNumber`, a `bigint` as in the Node FFI lane.
      */
-    sequence: number;
+    sequence: bigint;
     /**
      * The span its C2PA `emsg` covers, in milliseconds.
      */
@@ -298,6 +301,10 @@ export interface StreamVerifierOptions {
      * in milliseconds. Absent, 5 minutes.
      */
     skewTolerance?: number;
+    /**
+     * Exact HTTPS origins approved for external live-video manifest recovery.
+     */
+    manifestOrigins?: string[];
 }
 
 /**
@@ -359,7 +366,7 @@ export interface Recovery {
 /**
  * What this verify concludes about the asset, from signed evidence alone.
  */
-export type Verdict = { kind: "unsigned" } | { kind: "inconclusive" } | { kind: "embedded" } | { kind: "recovered"; index: number; decidedBy: VerdictRule } | { kind: "recoveredDerivative"; index: number; decidedBy: VerdictRule } | { kind: "ambiguous"; candidates: number[] };
+export type Verdict = { kind: "unsigned" } | { kind: "inconclusive" } | { kind: "embedded" } | { kind: "invalid"; index: number } | { kind: "recovered"; index: number; decidedBy: VerdictRule } | { kind: "recoveredDerivative"; index: number; decidedBy: VerdictRule } | { kind: "ambiguous"; candidates: number[] };
 
 /**
  * When a verify asks the repositories.
@@ -395,7 +402,7 @@ export type FingerprintCheck = { kind: "notNeeded" } | { kind: "missing" } | { k
 /**
  * Whether the manifest\'s hard binding holds over the bytes this verify read.
  */
-export type HardBinding = "match" | "mismatch";
+export type HardBinding = "match" | "mismatch" | "unverified";
 
 /**
  * Why repository recovery did not complete cleanly, or why one candidate was omitted.
@@ -435,13 +442,14 @@ export class AssetVerifier {
      *
      * Reads the C2PA-native formats. A container format (MXF) is plugin-backed, and plugins
      * are native, so a master is verified through the native SDK.
+     * `format` optionally declares the media type for inputs such as SVG and plain text.
      *
      * # Errors
      *
      * Throws on a malformed `source`, a repository (or engine) failure, or a validation
      * failure.
      */
-    verify(source: RangeSource, recovery?: Recovery | null): Promise<Verification>;
+    verify(source: RangeSource, recovery?: Recovery | null, format?: string | null): Promise<Verification>;
 }
 
 /**
@@ -589,7 +597,7 @@ export class StreamVerifier {
      * `StreamSession.export` produced (`state.malformed`), or one of another export version
      * (`state.version`).
      */
-    resume(state: Uint8Array): StreamSession;
+    resume(state: Uint8Array): Promise<StreamSession>;
 }
 
 /**
@@ -660,7 +668,7 @@ export function init_panic_hook(): void;
  *
  * # Errors
  *
- * Throws `READER_INVALID` when the bytes are not a manifest store c2pa can parse.
+ * Rejects with `READER_INVALID` when the bytes are not a manifest store c2pa can parse.
  */
 export function parse(manifest: Uint8Array): Promise<import('@contentauth/c2pa-types').ManifestStore>;
 
@@ -670,7 +678,7 @@ export function parse(manifest: Uint8Array): Promise<import('@contentauth/c2pa-t
  *
  * # Errors
  *
- * Throws `READER_INVALID` when the bytes are not a manifest store c2pa can parse, or the store
+ * Rejects with `READER_INVALID` when the bytes are not a manifest store c2pa can parse, or the store
  * holds the resource but cannot produce it.
  */
 export function resource(manifest: Uint8Array, uri: string): Promise<Uint8Array | undefined>;
@@ -679,6 +687,12 @@ export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembl
 
 export interface InitOutput {
     readonly memory: WebAssembly.Memory;
+    readonly parse: (a: number, b: number) => any;
+    readonly resource: (a: number, b: number, c: number, d: number) => any;
+    readonly c2paTrustList: () => [number, number];
+    readonly c2paTsaTrustList: () => [number, number];
+    readonly devCa: () => [number, number];
+    readonly init_panic_hook: () => void;
     readonly computeSoftBinding: (a: number, b: number, c: any, d: number, e: number) => any;
     readonly __wbg_assetverifier_free: (a: number, b: number) => void;
     readonly __wbg_blobsource_free: (a: number, b: number) => void;
@@ -687,26 +701,20 @@ export interface InitOutput {
     readonly __wbg_streamverifier_free: (a: number, b: number) => void;
     readonly __wbg_verification_free: (a: number, b: number) => void;
     readonly assetverifier_create: (a: any) => [number, number, number];
-    readonly assetverifier_verify: (a: number, b: any, c: number) => any;
+    readonly assetverifier_verify: (a: number, b: any, c: number, d: number, e: number) => any;
     readonly blobsource_length: (a: number) => number;
     readonly blobsource_new: (a: any) => [number, number, number];
     readonly blobsource_readAt: (a: number, b: number, c: number) => [number, number, number];
     readonly memorysource_length: (a: number) => number;
     readonly memorysource_new: (a: any) => number;
     readonly memorysource_readAt: (a: number, b: number, c: number) => any;
-    readonly parse: (a: number, b: number) => any;
-    readonly resource: (a: number, b: number, c: number, d: number) => any;
     readonly streamsession_export: (a: number) => [number, number, number, number];
     readonly streamsession_validate: (a: number, b: any) => any;
     readonly streamverifier_create: (a: any) => [number, number, number];
     readonly streamverifier_open: (a: number, b: number, c: number) => number;
-    readonly streamverifier_resume: (a: number, b: number, c: number) => [number, number, number];
+    readonly streamverifier_resume: (a: number, b: number, c: number) => any;
     readonly verification_report: (a: number) => any;
     readonly verification_resource: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly c2paTrustList: () => [number, number];
-    readonly c2paTsaTrustList: () => [number, number];
-    readonly devCa: () => [number, number];
-    readonly init_panic_hook: () => void;
     readonly __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
     readonly intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
     readonly intounderlyingbytesource_cancel: (a: number) => void;
@@ -722,8 +730,8 @@ export interface InitOutput {
     readonly intounderlyingsink_write: (a: number, b: any) => any;
     readonly wasm_bindgen__convert__closures_____invoke__hfa954cb356c7e7e1: (a: number, b: number, c: any) => [number, number];
     readonly wasm_bindgen__convert__closures_____invoke__h32a4f2e7671466cf: (a: number, b: number, c: any, d: any) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__hedf60f9cb8ab20c3: (a: number, b: number, c: any) => void;
-    readonly wasm_bindgen__convert__closures_____invoke__hbf782ef36cea6846: (a: number, b: number) => void;
+    readonly wasm_bindgen__convert__closures_____invoke__hbfbf6526ca40dbc0: (a: number, b: number, c: any) => void;
+    readonly wasm_bindgen__convert__closures_____invoke__h66de60f9da4a5479: (a: number, b: number) => void;
     readonly __wbindgen_malloc: (a: number, b: number) => number;
     readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_exn_store: (a: number) => void;

package/gen/wasm/trylimbo_sdk_verifier.js

@@ -36,6 +36,7 @@ export class AssetVerifier {
      *
      * Reads the C2PA-native formats. A container format (MXF) is plugin-backed, and plugins
      * are native, so a master is verified through the native SDK.
+     * `format` optionally declares the media type for inputs such as SVG and plain text.
      *
      * # Errors
      *
@@ -43,10 +44,13 @@ export class AssetVerifier {
      * failure.
      * @param {RangeSource} source
      * @param {Recovery | null} [recovery]
+     * @param {string | null} [format]
      * @returns {Promise<Verification>}
      */
-    verify(source, recovery) {
-        const ret = wasm.assetverifier_verify(this.__wbg_ptr, source, isLikeNone(recovery) ? 0 : addToExternrefTable0(recovery));
+    verify(source, recovery, format) {
+        var ptr0 = isLikeNone(format) ? 0 : passStringToWasm0(format, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len0 = WASM_VECTOR_LEN;
+        const ret = wasm.assetverifier_verify(this.__wbg_ptr, source, isLikeNone(recovery) ? 0 : addToExternrefTable0(recovery), ptr0, len0);
         return ret;
     }
 }
@@ -398,16 +402,13 @@ export class StreamVerifier {
      * `StreamSession.export` produced (`state.malformed`), or one of another export version
      * (`state.version`).
      * @param {Uint8Array} state
-     * @returns {StreamSession}
+     * @returns {Promise<StreamSession>}
      */
     resume(state) {
         const ptr0 = passArray8ToWasm0(state, wasm.__wbindgen_malloc);
         const len0 = WASM_VECTOR_LEN;
         const ret = wasm.streamverifier_resume(this.__wbg_ptr, ptr0, len0);
-        if (ret[2]) {
-            throw takeFromExternrefTable0(ret[1]);
-        }
-        return StreamSession.__wrap(ret[0]);
+        return ret;
     }
 }
 if (Symbol.dispose) StreamVerifier.prototype[Symbol.dispose] = StreamVerifier.prototype.free;
@@ -563,9 +564,9 @@ export function init_panic_hook() {
  *
  * # Errors
  *
- * Throws `READER_INVALID` when the bytes are not a manifest store c2pa can parse.
+ * Rejects with `READER_INVALID` when the bytes are not a manifest store c2pa can parse.
  * @param {Uint8Array} manifest
- * @returns {import('@contentauth/c2pa-types').ManifestStore}
+ * @returns {Promise<import('@contentauth/c2pa-types').ManifestStore>}
  */
 export function parse(manifest) {
     const ptr0 = passArray8ToWasm0(manifest, wasm.__wbindgen_malloc);
@@ -580,7 +581,7 @@ export function parse(manifest) {
  *
  * # Errors
  *
- * Throws `READER_INVALID` when the bytes are not a manifest store c2pa can parse, or the store
+ * Rejects with `READER_INVALID` when the bytes are not a manifest store c2pa can parse, or the store
  * holds the resource but cannot produce it.
  * @param {Uint8Array} manifest
  * @param {string} uri
@@ -704,6 +705,10 @@ function __wbg_get_imports() {
             const ret = arg0.arrayBuffer();
             return ret;
         }, arguments); },
+        __wbg_assign_fd82cd5b89efb160: function(arg0, arg1) {
+            const ret = Object.assign(arg0, arg1);
+            return ret;
+        },
         __wbg_body_18c9f2ac15ead4b2: function(arg0) {
             const ret = arg0.body;
             return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
@@ -1050,6 +1055,10 @@ function __wbg_get_imports() {
             const ret = arg0.read();
             return ret;
         },
+        __wbg_reject_90df95b492dd8563: function(arg0) {
+            const ret = Promise.reject(arg0);
+            return ret;
+        },
         __wbg_releaseLock_5b92874cad775644: function(arg0) {
             arg0.releaseLock();
         },
@@ -1098,6 +1107,12 @@ function __wbg_get_imports() {
         __wbg_set_mode_66c79886ad78fc05: function(arg0, arg1) {
             arg0.mode = __wbindgen_enum_RequestMode[arg1];
         },
+        __wbg_set_name_3bbc583faefa4193: function(arg0, arg1, arg2) {
+            arg0.name = getStringFromWasm0(arg1, arg2);
+        },
+        __wbg_set_redirect_badd73a0bcb765e3: function(arg0, arg1) {
+            arg0.redirect = __wbindgen_enum_RequestRedirect[arg1];
+        },
         __wbg_set_signal_c4ef8faddb4c1446: function(arg0, arg1) {
             arg0.signal = arg1;
         },
@@ -1140,6 +1155,10 @@ function __wbg_get_imports() {
             const ret = arg0.status;
             return ret;
         },
+        __wbg_streamsession_new: function(arg0) {
+            const ret = StreamSession.__wrap(arg0);
+            return ret;
+        },
         __wbg_stringify_b54333f60f1e4dad: function() { return handleError(function (arg0) {
             const ret = JSON.stringify(arg0);
             return ret;
@@ -1180,18 +1199,18 @@ function __wbg_get_imports() {
             return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
         },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 2185, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 2234, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hfa954cb356c7e7e1);
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 5888, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hedf60f9cb8ab20c3);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 5988, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hbfbf6526ca40dbc0);
             return ret;
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 3433, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hbf782ef36cea6846);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 3528, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h66de60f9da4a5479);
             return ret;
         },
         __wbindgen_cast_0000000000000004: function(arg0) {
@@ -1249,12 +1268,12 @@ function __wbg_get_imports() {
     };
 }
 
-function wasm_bindgen__convert__closures_____invoke__hbf782ef36cea6846(arg0, arg1) {
-    wasm.wasm_bindgen__convert__closures_____invoke__hbf782ef36cea6846(arg0, arg1);
+function wasm_bindgen__convert__closures_____invoke__h66de60f9da4a5479(arg0, arg1) {
+    wasm.wasm_bindgen__convert__closures_____invoke__h66de60f9da4a5479(arg0, arg1);
 }
 
-function wasm_bindgen__convert__closures_____invoke__hedf60f9cb8ab20c3(arg0, arg1, arg2) {
-    wasm.wasm_bindgen__convert__closures_____invoke__hedf60f9cb8ab20c3(arg0, arg1, arg2);
+function wasm_bindgen__convert__closures_____invoke__hbfbf6526ca40dbc0(arg0, arg1, arg2) {
+    wasm.wasm_bindgen__convert__closures_____invoke__hbfbf6526ca40dbc0(arg0, arg1, arg2);
 }
 
 function wasm_bindgen__convert__closures_____invoke__hfa954cb356c7e7e1(arg0, arg1, arg2) {
@@ -1279,6 +1298,9 @@ const __wbindgen_enum_RequestCredentials = ["omit", "same-origin", "include"];
 
 
 const __wbindgen_enum_RequestMode = ["same-origin", "no-cors", "cors", "navigate"];
+
+
+const __wbindgen_enum_RequestRedirect = ["follow", "error", "manual"];
 const AssetVerifierFinalization = (typeof FinalizationRegistry === 'undefined')
     ? { register: () => {}, unregister: () => {} }
     : new FinalizationRegistry(ptr => wasm.__wbg_assetverifier_free(ptr, 1));

package/gen/wasm/trylimbo_sdk_verifier_bg.wasm.d.ts

@@ -1,6 +1,12 @@
 /* tslint:disable */
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
+export const parse: (a: number, b: number) => any;
+export const resource: (a: number, b: number, c: number, d: number) => any;
+export const c2paTrustList: () => [number, number];
+export const c2paTsaTrustList: () => [number, number];
+export const devCa: () => [number, number];
+export const init_panic_hook: () => void;
 export const computeSoftBinding: (a: number, b: number, c: any, d: number, e: number) => any;
 export const __wbg_assetverifier_free: (a: number, b: number) => void;
 export const __wbg_blobsource_free: (a: number, b: number) => void;
@@ -9,26 +15,20 @@ export const __wbg_streamsession_free: (a: number, b: number) => void;
 export const __wbg_streamverifier_free: (a: number, b: number) => void;
 export const __wbg_verification_free: (a: number, b: number) => void;
 export const assetverifier_create: (a: any) => [number, number, number];
-export const assetverifier_verify: (a: number, b: any, c: number) => any;
+export const assetverifier_verify: (a: number, b: any, c: number, d: number, e: number) => any;
 export const blobsource_length: (a: number) => number;
 export const blobsource_new: (a: any) => [number, number, number];
 export const blobsource_readAt: (a: number, b: number, c: number) => [number, number, number];
 export const memorysource_length: (a: number) => number;
 export const memorysource_new: (a: any) => number;
 export const memorysource_readAt: (a: number, b: number, c: number) => any;
-export const parse: (a: number, b: number) => any;
-export const resource: (a: number, b: number, c: number, d: number) => any;
 export const streamsession_export: (a: number) => [number, number, number, number];
 export const streamsession_validate: (a: number, b: any) => any;
 export const streamverifier_create: (a: any) => [number, number, number];
 export const streamverifier_open: (a: number, b: number, c: number) => number;
-export const streamverifier_resume: (a: number, b: number, c: number) => [number, number, number];
+export const streamverifier_resume: (a: number, b: number, c: number) => any;
 export const verification_report: (a: number) => any;
 export const verification_resource: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-export const c2paTrustList: () => [number, number];
-export const c2paTsaTrustList: () => [number, number];
-export const devCa: () => [number, number];
-export const init_panic_hook: () => void;
 export const __wbg_intounderlyingbytesource_free: (a: number, b: number) => void;
 export const intounderlyingbytesource_autoAllocateChunkSize: (a: number) => number;
 export const intounderlyingbytesource_cancel: (a: number) => void;
@@ -44,8 +44,8 @@ export const intounderlyingsink_close: (a: number) => any;
 export const intounderlyingsink_write: (a: number, b: any) => any;
 export const wasm_bindgen__convert__closures_____invoke__hfa954cb356c7e7e1: (a: number, b: number, c: any) => [number, number];
 export const wasm_bindgen__convert__closures_____invoke__h32a4f2e7671466cf: (a: number, b: number, c: any, d: any) => void;
-export const wasm_bindgen__convert__closures_____invoke__hedf60f9cb8ab20c3: (a: number, b: number, c: any) => void;
-export const wasm_bindgen__convert__closures_____invoke__hbf782ef36cea6846: (a: number, b: number) => void;
+export const wasm_bindgen__convert__closures_____invoke__hbfbf6526ca40dbc0: (a: number, b: number, c: any) => void;
+export const wasm_bindgen__convert__closures_____invoke__h66de60f9da4a5479: (a: number, b: number) => void;
 export const __wbindgen_malloc: (a: number, b: number) => number;
 export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
 export const __wbindgen_exn_store: (a: number) => void;

package/gen/wasm/worker-thread.js

@@ -1,4 +1,4 @@
-import { n as finalizer, r as proxy, t as expose } from "./comlink.js";
+import { i as transferHandlers, n as finalizer, r as proxy, t as expose } from "./comlink.js";
 //#region gen/wasm/trylimbo_sdk_verifier.js
 var AssetVerifier = class AssetVerifier {
 	static __wrap(ptr) {
@@ -34,6 +34,7 @@ var AssetVerifier = class AssetVerifier {
 	*
 	* Reads the C2PA-native formats. A container format (MXF) is plugin-backed, and plugins
 	* are native, so a master is verified through the native SDK.
+	* `format` optionally declares the media type for inputs such as SVG and plain text.
 	*
 	* # Errors
 	*
@@ -41,10 +42,13 @@ var AssetVerifier = class AssetVerifier {
 	* failure.
 	* @param {RangeSource} source
 	* @param {Recovery | null} [recovery]
+	* @param {string | null} [format]
 	* @returns {Promise<Verification>}
 	*/
-	verify(source, recovery) {
-		return wasm.assetverifier_verify(this.__wbg_ptr, source, isLikeNone(recovery) ? 0 : addToExternrefTable0(recovery));
+	verify(source, recovery, format) {
+		var ptr0 = isLikeNone(format) ? 0 : passStringToWasm0(format, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+		var len0 = WASM_VECTOR_LEN;
+		return wasm.assetverifier_verify(this.__wbg_ptr, source, isLikeNone(recovery) ? 0 : addToExternrefTable0(recovery), ptr0, len0);
 	}
 };
 if (Symbol.dispose) AssetVerifier.prototype[Symbol.dispose] = AssetVerifier.prototype.free;
@@ -370,14 +374,12 @@ var StreamVerifier = class StreamVerifier {
 	* `StreamSession.export` produced (`state.malformed`), or one of another export version
 	* (`state.version`).
 	* @param {Uint8Array} state
-	* @returns {StreamSession}
+	* @returns {Promise<StreamSession>}
 	*/
 	resume(state) {
 		const ptr0 = passArray8ToWasm0(state, wasm.__wbindgen_malloc);
 		const len0 = WASM_VECTOR_LEN;
-		const ret = wasm.streamverifier_resume(this.__wbg_ptr, ptr0, len0);
-		if (ret[2]) throw takeFromExternrefTable0(ret[1]);
-		return StreamSession.__wrap(ret[0]);
+		return wasm.streamverifier_resume(this.__wbg_ptr, ptr0, len0);
 	}
 };
 if (Symbol.dispose) StreamVerifier.prototype[Symbol.dispose] = StreamVerifier.prototype.free;
@@ -486,9 +488,9 @@ function devCa() {
 *
 * # Errors
 *
-* Throws `READER_INVALID` when the bytes are not a manifest store c2pa can parse.
+* Rejects with `READER_INVALID` when the bytes are not a manifest store c2pa can parse.
 * @param {Uint8Array} manifest
-* @returns {import('@contentauth/c2pa-types').ManifestStore}
+* @returns {Promise<import('@contentauth/c2pa-types').ManifestStore>}
 */
 function parse(manifest) {
 	const ptr0 = passArray8ToWasm0(manifest, wasm.__wbindgen_malloc);
@@ -501,7 +503,7 @@ function parse(manifest) {
 *
 * # Errors
 *
-* Throws `READER_INVALID` when the bytes are not a manifest store c2pa can parse, or the store
+* Rejects with `READER_INVALID` when the bytes are not a manifest store c2pa can parse, or the store
 * holds the resource but cannot produce it.
 * @param {Uint8Array} manifest
 * @param {string} uri
@@ -615,6 +617,9 @@ function __wbg_get_imports() {
 					return arg0.arrayBuffer();
 				}, arguments);
 			},
+			__wbg_assign_fd82cd5b89efb160: function(arg0, arg1) {
+				return Object.assign(arg0, arg1);
+			},
 			__wbg_body_18c9f2ac15ead4b2: function(arg0) {
 				const ret = arg0.body;
 				return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
@@ -940,6 +945,9 @@ function __wbg_get_imports() {
 			__wbg_read_8afa15f12a160ef8: function(arg0) {
 				return arg0.read();
 			},
+			__wbg_reject_90df95b492dd8563: function(arg0) {
+				return Promise.reject(arg0);
+			},
 			__wbg_releaseLock_5b92874cad775644: function(arg0) {
 				arg0.releaseLock();
 			},
@@ -989,6 +997,12 @@ function __wbg_get_imports() {
 			__wbg_set_mode_66c79886ad78fc05: function(arg0, arg1) {
 				arg0.mode = __wbindgen_enum_RequestMode[arg1];
 			},
+			__wbg_set_name_3bbc583faefa4193: function(arg0, arg1, arg2) {
+				arg0.name = getStringFromWasm0(arg1, arg2);
+			},
+			__wbg_set_redirect_badd73a0bcb765e3: function(arg0, arg1) {
+				arg0.redirect = __wbindgen_enum_RequestRedirect[arg1];
+			},
 			__wbg_set_signal_c4ef8faddb4c1446: function(arg0, arg1) {
 				arg0.signal = arg1;
 			},
@@ -1029,6 +1043,9 @@ function __wbg_get_imports() {
 			__wbg_status_c45b3b9b3033184a: function(arg0) {
 				return arg0.status;
 			},
+			__wbg_streamsession_new: function(arg0) {
+				return StreamSession.__wrap(arg0);
+			},
 			__wbg_stringify_b54333f60f1e4dad: function() {
 				return handleError(function(arg0) {
 					return JSON.stringify(arg0);
@@ -1067,10 +1084,10 @@ function __wbg_get_imports() {
 				return makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hfa954cb356c7e7e1);
 			},
 			__wbindgen_cast_0000000000000002: function(arg0, arg1) {
-				return makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hedf60f9cb8ab20c3);
+				return makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hbfbf6526ca40dbc0);
 			},
 			__wbindgen_cast_0000000000000003: function(arg0, arg1) {
-				return makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__hbf782ef36cea6846);
+				return makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h66de60f9da4a5479);
 			},
 			__wbindgen_cast_0000000000000004: function(arg0) {
 				return arg0;
@@ -1109,11 +1126,11 @@ function __wbg_get_imports() {
 		}
 	};
 }
-function wasm_bindgen__convert__closures_____invoke__hbf782ef36cea6846(arg0, arg1) {
-	wasm.wasm_bindgen__convert__closures_____invoke__hbf782ef36cea6846(arg0, arg1);
+function wasm_bindgen__convert__closures_____invoke__h66de60f9da4a5479(arg0, arg1) {
+	wasm.wasm_bindgen__convert__closures_____invoke__h66de60f9da4a5479(arg0, arg1);
 }
-function wasm_bindgen__convert__closures_____invoke__hedf60f9cb8ab20c3(arg0, arg1, arg2) {
-	wasm.wasm_bindgen__convert__closures_____invoke__hedf60f9cb8ab20c3(arg0, arg1, arg2);
+function wasm_bindgen__convert__closures_____invoke__hbfbf6526ca40dbc0(arg0, arg1, arg2) {
+	wasm.wasm_bindgen__convert__closures_____invoke__hbfbf6526ca40dbc0(arg0, arg1, arg2);
 }
 function wasm_bindgen__convert__closures_____invoke__hfa954cb356c7e7e1(arg0, arg1, arg2) {
 	const ret = wasm.wasm_bindgen__convert__closures_____invoke__hfa954cb356c7e7e1(arg0, arg1, arg2);
@@ -1142,6 +1159,11 @@ const __wbindgen_enum_RequestMode = [
 	"cors",
 	"navigate"
 ];
+const __wbindgen_enum_RequestRedirect = [
+	"follow",
+	"error",
+	"manual"
+];
 const AssetVerifierFinalization = typeof FinalizationRegistry === "undefined" ? {
 	register: () => {},
 	unregister: () => {}
@@ -1452,8 +1474,8 @@ var VerificationHandle = class extends Handle {
 };
 var AssetVerifierHandle = class extends Handle {
 	/** `recovery` is what this verify may do to recover a manifest, as the direct import takes it. */
-	async verify(asset, recovery) {
-		return proxy(new VerificationHandle(await this.inner.verify(source(asset), recovery)));
+	async verify(asset, recovery, format) {
+		return proxy(new VerificationHandle(await this.inner.verify(source(asset), recovery, format)));
 	}
 };
 /** One stream being validated. Dropping the handle releases the session it accumulated. */
@@ -1469,10 +1491,28 @@ var StreamVerifierHandle = class extends Handle {
 	open(id) {
 		return proxy(new StreamSessionHandle(this.inner.open(id)));
 	}
-	resume(state) {
-		return proxy(new StreamSessionHandle(this.inner.resume(state)));
+	async resume(state) {
+		return proxy(new StreamSessionHandle(await this.inner.resume(state)));
 	}
 };
+const thrown = transferHandlers.get("throw");
+transferHandlers.set("throw", {
+	...thrown,
+	serialize: (payload) => {
+		const { value } = payload;
+		if (!(value instanceof Error)) return thrown.serialize(payload);
+		const { message, name, stack } = value;
+		return [{
+			isError: true,
+			value: {
+				...value,
+				message,
+				name,
+				stack
+			}
+		}, []];
+	}
+});
 let ready;
 /** The module's own surface, name for name with the direct import. */
 const sdk = {

package/gen/wasm/worker.d.ts

@@ -192,7 +192,7 @@ interface SessionKey {
    */
   kid: Uint8Array;
   /**
-   * The session key\'s public half (SEC1-encoded bytes).
+   * SEC1 EC, raw Ed25519 or PKCS#1 DER RSA public-key bytes.
    */
   publicKey: Uint8Array;
 }
@@ -311,9 +311,7 @@ type SegmentValidation = ({
   kind: "init";
 } & InitValidation) | ({
   kind: "media";
-} & MediaValidation) | {
-  kind: "unknown";
-};
+} & MediaValidation);
 /**
  * The C2PA 2.4 golden-flow comparison of the embedded manifest against what the repository holds.
  */
@@ -386,9 +384,9 @@ interface Hint {
  */
 interface SegmentTiming {
   /**
-   * The segment\'s `sequenceNumber` (exact below 2^53).
+   * The segment\'s `sequenceNumber`, a `bigint` as in the Node FFI lane.
    */
-  sequence: number;
+  sequence: bigint;
   /**
    * The span its C2PA `emsg` covers, in milliseconds.
    */
@@ -404,6 +402,10 @@ interface StreamVerifierOptions {
    * in milliseconds. Absent, 5 minutes.
    */
   skewTolerance?: number;
+  /**
+   * Exact HTTPS origins approved for external live-video manifest recovery.
+   */
+  manifestOrigins?: string[];
 }
 /**
  * What a verifier trusts. An omitted list trusts nothing.
@@ -467,6 +469,9 @@ type Verdict = {
   kind: "inconclusive";
 } | {
   kind: "embedded";
+} | {
+  kind: "invalid";
+  index: number;
 } | {
   kind: "recovered";
   index: number;
@@ -532,7 +537,7 @@ type FingerprintCheck = {
 /**
  * Whether the manifest\'s hard binding holds over the bytes this verify read.
  */
-type HardBinding = "match" | "mismatch";
+type HardBinding = "match" | "mismatch" | "unverified";
 /**
  * Why repository recovery did not complete cleanly, or why one candidate was omitted.
  */
@@ -609,13 +614,14 @@ declare class AssetVerifier {
    *
    * Reads the C2PA-native formats. A container format (MXF) is plugin-backed, and plugins
    * are native, so a master is verified through the native SDK.
+   * `format` optionally declares the media type for inputs such as SVG and plain text.
    *
    * # Errors
    *
    * Throws on a malformed `source`, a repository (or engine) failure, or a validation
    * failure.
    */
-  verify(source: RangeSource, recovery?: Recovery | null): Promise<Verification>;
+  verify(source: RangeSource, recovery?: Recovery | null, format?: string | null): Promise<Verification>;
 }
 /**
  * One stream being validated. It owns the session keys and manifest ids its init segments
@@ -681,7 +687,7 @@ declare class StreamVerifier {
    * `StreamSession.export` produced (`state.malformed`), or one of another export version
    * (`state.version`).
    */
-  resume(state: Uint8Array): StreamSession;
+  resume(state: Uint8Array): Promise<StreamSession>;
 }
 /**
  * One `verify` result held with the stores it read: `report` is the data, and `resource` reads a
@@ -751,7 +757,7 @@ declare class VerificationHandle extends Handle<Verification> {
 }
 declare class AssetVerifierHandle extends Handle<AssetVerifier> {
   /** `recovery` is what this verify may do to recover a manifest, as the direct import takes it. */
-  verify(asset: Asset, recovery: Recovery | undefined): Promise<VerificationHandle & ProxyMarked>;
+  verify(asset: Asset, recovery: Recovery | undefined, format?: string): Promise<VerificationHandle & ProxyMarked>;
 }
 /** One stream being validated. Dropping the handle releases the session it accumulated. */
 declare class StreamSessionHandle extends Handle<StreamSession> {
@@ -760,7 +766,7 @@ declare class StreamSessionHandle extends Handle<StreamSession> {
 }
 declare class StreamVerifierHandle extends Handle<StreamVerifier> {
   open(id: string): StreamSessionHandle & ProxyMarked;
-  resume(state: Uint8Array): StreamSessionHandle & ProxyMarked;
+  resume(state: Uint8Array): Promise<StreamSessionHandle & ProxyMarked>;
 }
 /** The module's own surface, name for name with the direct import. */
 declare const sdk: {

package/gen/wasm/worker.js

@@ -1,4 +1,4 @@
-import { i as wrap } from "./comlink.js";
+import { a as wrap } from "./comlink.js";
 //#region src/worker.ts
 /**
 * Start the SDK in a Worker and wait for its module to instantiate.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trylimbo/sdk-verifier-wasm",
-  "version": "0.2.25-canary.37",
+  "version": "0.2.25-canary.38",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",