@trylimbo/sdk-verifier 0.2.25-canary.37 → 0.2.25-canary.38

package/gen/ffi/index.d.ts

@@ -181,7 +181,7 @@ declare const pointerLiteralSymbol: unique symbol;
  */
 declare const uniffiTypeNameSymbol: unique symbol;
 declare namespace trylimbo_verifier_d_exports {
-  export { Actor, AssertionMetadata, AssetType, AssetVerification, AssetVerifier, AssetVerifierInterface, AssetVerifierLike, AssetVerifierOptions, Block, ByteRange, ClaimGeneratorInfo, Code, Compute, ComputeImpl, ComputeRequest, Content, ContentWhen, Coordinate, Credential, CredentialInterface, CredentialLike, CredentialOrigin, CredentialOrigin_Tags, DataSource, Discovery, DiscoveryVia, DiscoveryVia_Tags, EndInclusivity, FieldViolation, FileSource, FileSourceInterface, FileSourceLike, FingerprintCheck, FingerprintCheck_Tags, Frame, Golden, Golden_Tags, HardBinding, HashedUri, Hint, Ingredient, IngredientDeltaValidationResult, InitValidation, Item, JsonValue, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestStore, MediaValidation, MemorySource, MemorySourceInterface, MemorySourceLike, PluginReader, Range, RangeSource, RangeSourceImpl, RangeType, Recovery, RecoveryIssue, RecoveryIssue_Tags, RecoveryStatus, RecoverySummary, RecoveryTrigger, Reference, RegionOfInterest, Relationship, Repository, Repository_Tags, ResourceRef, ReviewRating, Role, Scope, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKey, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SimilarityScore, SoftBindingSource, SoftBindingSource_Tags, SoftBindingType, StatusCodes, StreamSession, StreamSessionInterface, StreamSessionLike, StreamVerifier, StreamVerifierInterface, StreamVerifierLike, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, Timespan, Trust, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Verdict, VerdictRule, Verdict_Tags, c2paTrustList, c2paTsaTrustList, computeSoftBinding, _default$1 as default, devCa, parse, resource };
+  export { Actor, AssertionMetadata, AssetType, AssetVerification, AssetVerifier, AssetVerifierInterface, AssetVerifierLike, AssetVerifierOptions, Block, ByteRange, ClaimGeneratorInfo, Code, Compute, ComputeImpl, ComputeRequest, Content, ContentWhen, Coordinate, Credential, CredentialInterface, CredentialLike, CredentialOrigin, CredentialOrigin_Tags, DataSource, Discovery, DiscoveryVia, DiscoveryVia_Tags, EndInclusivity, FieldViolation, FileSource, FileSourceInterface, FileSourceLike, FingerprintCheck, FingerprintCheck_Tags, Frame, Golden, Golden_Tags, HardBinding, HashedUri, Hint, Ingredient, IngredientDeltaValidationResult, InitValidation, Item, JsonValue, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestStore, MediaValidation, MemorySource, MemorySourceInterface, MemorySourceLike, PluginReader, Range, RangeSource, RangeSourceImpl, RangeType, Recovery, RecoveryIssue, RecoveryIssue_Tags, RecoveryStatus, RecoverySummary, RecoveryTrigger, Reference, RegionOfInterest, Relationship, Repository, Repository_Tags, ResourceRef, ReviewRating, Scope, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKey, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SimilarityScore, SoftBindingSource, SoftBindingSource_Tags, SoftBindingType, StatusCodes, StreamSession, StreamSessionInterface, StreamSessionLike, StreamVerifier, StreamVerifierInterface, StreamVerifierLike, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, Timespan, Trust, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Verdict, VerdictRule, Verdict_Tags, c2paTrustList, c2paTsaTrustList, computeSoftBinding, _default$1 as default, devCa, parse, resource };
 }
 /**
  * The bundled C2PA Conformance Program signing-CA trust list (a release snapshot). Trusted by
@@ -648,47 +648,6 @@ export declare const Range: Readonly<{
   new: (partial: Partial<Range> & Required<Omit<Range, "frame" | "item" | "shape" | "text" | "time">>) => Range;
   defaults: () => Partial<Range>;
 }>;
-/**
- * A role describing the region.
- */
-export declare enum Role {
-  /**
-   * Arbitrary area worth identifying.
-   */
-  C2paAreaOfInterest = 0,
-  /**
-   * This area is all that is left after a crop action.
-   */
-  C2paCropped = 1,
-  /**
-   * This area has had edits applied to it.
-   */
-  C2paEdited = 2,
-  /**
-   * The area where an ingredient was placed/added.
-   */
-  C2paPlaced = 3,
-  /**
-   * Something in this area was redacted.
-   */
-  C2paRedacted = 4,
-  /**
-   * Area specific to a subject (human or not).
-   */
-  C2paSubjectArea = 5,
-  /**
-   * A range of information was removed/deleted.
-   */
-  C2paDeleted = 6,
-  /**
-   * Styling was applied to this area.
-   */
-  C2paStyled = 7,
-  /**
-   * Invisible watermarking was applied to this area for the purpose of soft binding.
-   */
-  C2paWatermarked = 8
-}
 /**
  * A region of interest within an asset describing the change.
  *
@@ -717,11 +676,6 @@ export type RegionOfInterest = {
    * A range describing the region of interest for the specific asset.
    */
   region: Array<Range>;
-  /**
-   * A value from our controlled vocabulary or an entity-specific value (e.g., com.litware.coolArea) that represents
-   * the role of a region among other regions.
-   */
-  role?: Role;
   /**
    * A value from a controlled vocabulary such as <https://cv.iptc.org/newscodes/imageregiontype/> or an entity-specific
    * value (e.g., com.litware.newType) that represents the type of thing(s) depicted by a region.
@@ -734,8 +688,8 @@ export type RegionOfInterest = {
  * Generated factory for {@link RegionOfInterest} record objects.
  */
 export declare const RegionOfInterest: Readonly<{
-  create: (partial: Partial<RegionOfInterest> & Required<Omit<RegionOfInterest, "description" | "identifier" | "metadata" | "name" | "role" | "type">>) => RegionOfInterest;
-  new: (partial: Partial<RegionOfInterest> & Required<Omit<RegionOfInterest, "description" | "identifier" | "metadata" | "name" | "role" | "type">>) => RegionOfInterest;
+  create: (partial: Partial<RegionOfInterest> & Required<Omit<RegionOfInterest, "description" | "identifier" | "metadata" | "name" | "type">>) => RegionOfInterest;
+  new: (partial: Partial<RegionOfInterest> & Required<Omit<RegionOfInterest, "description" | "identifier" | "metadata" | "name" | "type">>) => RegionOfInterest;
   defaults: () => Partial<RegionOfInterest>;
 }>;
 /**
@@ -800,14 +754,19 @@ export declare const AssetType: Readonly<{
  */
 export declare enum HardBinding {
   /**
-   * No data, box, BMFF or collection hash failed against these bytes.
+   * A data, box, BMFF or collection hash was checked against these bytes and held.
    */
   Match = 0,
   /**
    * A hash mismatch is among the active manifest's failures: the manifest describes other
    * bytes. Whether it is otherwise authentic is its remaining statuses.
    */
-  Mismatch = 1
+  Mismatch = 1,
+  /**
+   * No hash was checked against these bytes: the active manifest carries no hard binding, or
+   * validation never reached it. Says nothing about the bytes, so it is never a match.
+   */
+  Unverified = 2
 }
 /**
  * The re-sign chain, read from the validated stores themselves: C2PA 2.4 18.16.11 copies a
@@ -1191,6 +1150,11 @@ export type Ingredient = {
    * Instance ID from `xmpMM:InstanceID` in XMP metadata.
    */
   instanceId?: string;
+  /**
+   * If true, the ingredient assertion is added to created_assertions, rather than to gathered_assertions, which is the default.
+   * ParentOf ingredients are always created assertions, and this field is ignored for them.
+   */
+  isCreated?: boolean;
   /**
    * The ingredient's label as assigned in the manifest.
    */
@@ -1250,8 +1214,8 @@ export type Ingredient = {
  * Generated factory for {@link Ingredient} record objects.
  */
 export declare const Ingredient: Readonly<{
-  create: (partial: Partial<Ingredient> & Required<Omit<Ingredient, "activeManifest" | "data" | "dataTypes" | "description" | "digitalSourceType" | "documentId" | "format" | "hash" | "informationalUri" | "instanceId" | "label" | "manifestData" | "metadata" | "ocspResponses" | "provenance" | "softBindingAlgorithmsMatched" | "thumbnail" | "title" | "validationResults" | "validationStatus">>) => Ingredient;
-  new: (partial: Partial<Ingredient> & Required<Omit<Ingredient, "activeManifest" | "data" | "dataTypes" | "description" | "digitalSourceType" | "documentId" | "format" | "hash" | "informationalUri" | "instanceId" | "label" | "manifestData" | "metadata" | "ocspResponses" | "provenance" | "softBindingAlgorithmsMatched" | "thumbnail" | "title" | "validationResults" | "validationStatus">>) => Ingredient;
+  create: (partial: Partial<Ingredient> & Required<Omit<Ingredient, "activeManifest" | "data" | "dataTypes" | "description" | "digitalSourceType" | "documentId" | "format" | "hash" | "informationalUri" | "instanceId" | "isCreated" | "label" | "manifestData" | "metadata" | "ocspResponses" | "provenance" | "softBindingAlgorithmsMatched" | "thumbnail" | "title" | "validationResults" | "validationStatus">>) => Ingredient;
+  new: (partial: Partial<Ingredient> & Required<Omit<Ingredient, "activeManifest" | "data" | "dataTypes" | "description" | "digitalSourceType" | "documentId" | "format" | "hash" | "informationalUri" | "instanceId" | "isCreated" | "label" | "manifestData" | "metadata" | "ocspResponses" | "provenance" | "softBindingAlgorithmsMatched" | "thumbnail" | "title" | "validationResults" | "validationStatus">>) => Ingredient;
   defaults: () => Partial<Ingredient>;
 }>;
 /**
@@ -3055,18 +3019,20 @@ export type Golden = InstanceType<typeof Golden['Matches' | 'Differs' | 'NoneMat
 export declare enum VerdictRule {
   OnlyCandidate = 0,
   /**
-   * Every other candidate is superseded by a credential in this report.
+   * Its hash holds over these bytes and no other candidate's does.
    */
-  NotSuperseded = 1,
+  HardBinding = 1,
   /**
-   * Its hash holds over these bytes and no other unsuperseded candidate's does.
+   * Every other candidate with the same hard-binding standing is superseded by a credential
+   * in this report.
    */
-  HardBinding = 2
+  NotSuperseded = 2
 }
 export declare enum Verdict_Tags {
   Unsigned = "Unsigned",
   Inconclusive = "Inconclusive",
   Embedded = "Embedded",
+  Invalid = "Invalid",
   Recovered = "Recovered",
   RecoveredDerivative = "RecoveredDerivative",
   Ambiguous = "Ambiguous"
@@ -3080,12 +3046,17 @@ export declare enum Verdict_Tags {
  * and the golden comparison does not contradict it. When it `differs` from what the repository
  * holds, or several recovered candidates leave the comparison indeterminate, the embedded and
  * the recovered manifests are reported as ambiguous: C2PA 2.4's substitution use case leaves
- * that trust decision to the client. Otherwise a recovered candidate is named only when
- * evidence singles it out: it is the only one, or the only one no other credential in this
- * report supersedes (the successor's signed `parentOf` link), or the only one of those whose
- * hard binding holds over these bytes. A repository score, a signature time or a position in the
- * list is not evidence of which manifest belongs to these bytes, so candidates those alone would
- * separate are reported as ambiguous.
+ * that trust decision to the client.
+ *
+ * Otherwise a recovered candidate is named only when evidence singles it out, and only among
+ * those that are authentic (they fail on nothing but a hash mismatch) and state a hard binding.
+ * The verdict is about THESE bytes, so a candidate whose hash holds over them outranks any whose
+ * hash does not, whatever the repository calls its head; among equals, one that no other
+ * credential supersedes (the successor's signed `parentOf` link) outranks the rest. A repository
+ * score, a signature time or a position in the list is not evidence of which manifest belongs to
+ * these bytes, so candidates those alone would separate are reported as ambiguous. When no
+ * credential is both authentic and bound to some bytes, the verdict is `Invalid`, never a
+ * recovered one: a manifest that fails its own signature or signer vouches for nothing.
  */
 export declare const Verdict: Readonly<{
   instanceOf: (obj: any) => obj is Verdict;
@@ -3167,6 +3138,45 @@ export declare const Verdict: Readonly<{
       readonly tag: Verdict_Tags.Embedded;
     };
   };
+  Invalid: {
+    new (inner: {
+      index: number;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Invalid;
+      readonly inner: Readonly<{
+        index: number;
+      }>;
+    };
+    "new"(inner: {
+      index: number;
+    }): {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Invalid;
+      readonly inner: Readonly<{
+        index: number;
+      }>;
+    };
+    instanceOf(obj: any): obj is {
+      /**
+       * @private
+       * This field is private and should not be used, use `tag` instead.
+       */
+      readonly [uniffiTypeNameSymbol]: "Verdict";
+      readonly tag: Verdict_Tags.Invalid;
+      readonly inner: Readonly<{
+        index: number;
+      }>;
+    };
+  };
   Recovered: {
     new (inner: {
       index: number;
@@ -3304,14 +3314,19 @@ export declare const Verdict: Readonly<{
  * and the golden comparison does not contradict it. When it `differs` from what the repository
  * holds, or several recovered candidates leave the comparison indeterminate, the embedded and
  * the recovered manifests are reported as ambiguous: C2PA 2.4's substitution use case leaves
- * that trust decision to the client. Otherwise a recovered candidate is named only when
- * evidence singles it out: it is the only one, or the only one no other credential in this
- * report supersedes (the successor's signed `parentOf` link), or the only one of those whose
- * hard binding holds over these bytes. A repository score, a signature time or a position in the
- * list is not evidence of which manifest belongs to these bytes, so candidates those alone would
- * separate are reported as ambiguous.
- */
-export type Verdict = InstanceType<typeof Verdict['Unsigned' | 'Inconclusive' | 'Embedded' | 'Recovered' | 'RecoveredDerivative' | 'Ambiguous']>;
+ * that trust decision to the client.
+ *
+ * Otherwise a recovered candidate is named only when evidence singles it out, and only among
+ * those that are authentic (they fail on nothing but a hash mismatch) and state a hard binding.
+ * The verdict is about THESE bytes, so a candidate whose hash holds over them outranks any whose
+ * hash does not, whatever the repository calls its head; among equals, one that no other
+ * credential supersedes (the successor's signed `parentOf` link) outranks the rest. A repository
+ * score, a signature time or a position in the list is not evidence of which manifest belongs to
+ * these bytes, so candidates those alone would separate are reported as ambiguous. When no
+ * credential is both authentic and bound to some bytes, the verdict is `Invalid`, never a
+ * recovered one: a manifest that fails its own signature or signer vouches for nothing.
+ */
+export type Verdict = InstanceType<typeof Verdict['Unsigned' | 'Inconclusive' | 'Embedded' | 'Invalid' | 'Recovered' | 'RecoveredDerivative' | 'Ambiguous']>;
 /**
  * Complete asset verification result: every credential, the recovery state, the C2PA
  * golden-flow comparison when there was something to compare, and the verdict the SDK's rules
@@ -3728,7 +3743,7 @@ export type SessionKey = {
    */
   kid: ArrayBuffer;
   /**
-   * The session key's public half (SEC1-encoded bytes).
+   * SEC1 EC, raw Ed25519 or PKCS#1 DER RSA public-key bytes.
    */
   publicKey: ArrayBuffer;
 };
@@ -3770,7 +3785,7 @@ export declare const InitValidation: Readonly<{
  */
 export type SegmentTiming = {
   /**
-   * The segment's `sequenceNumber` (exact below 2^53).
+   * The segment's `sequenceNumber`: a `bigint` in both Node lanes.
    */
   sequence: bigint;
   /**
@@ -4037,19 +4052,23 @@ export type StreamVerifierOptions = {
    * the encoder clock's allowance. Absent, 5 minutes. Compared in whole seconds.
    */
   skewTolerance?: number;
+  /**
+   * Exact HTTPS origins permitted for a segment's `manifestUri` (§19.4.4.1).
+   * Empty disables external manifest recovery. Paths and wildcard hosts are not accepted.
+   */
+  manifestOrigins: Array<string>;
 };
 /**
  * Generated factory for {@link StreamVerifierOptions} record objects.
  */
 export declare const StreamVerifierOptions: Readonly<{
-  create: (partial: Partial<StreamVerifierOptions> & Required<Omit<StreamVerifierOptions, "skewTolerance">>) => StreamVerifierOptions;
-  new: (partial: Partial<StreamVerifierOptions> & Required<Omit<StreamVerifierOptions, "skewTolerance">>) => StreamVerifierOptions;
+  create: (partial: Partial<StreamVerifierOptions> & Required<Omit<StreamVerifierOptions, "manifestOrigins" | "skewTolerance">>) => StreamVerifierOptions;
+  new: (partial: Partial<StreamVerifierOptions> & Required<Omit<StreamVerifierOptions, "manifestOrigins" | "skewTolerance">>) => StreamVerifierOptions;
   defaults: () => Partial<StreamVerifierOptions>;
 }>;
 export declare enum SegmentValidation_Tags {
   Init = "Init",
-  Media = "Media",
-  Unknown = "Unknown"
+  Media = "Media"
 }
 /**
  * Result of `StreamSession.validate`.
@@ -4114,37 +4133,11 @@ export declare const SegmentValidation: Readonly<{
       readonly inner: Readonly<[MediaValidation]>;
     };
   };
-  Unknown: {
-    new (): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SegmentValidation";
-      readonly tag: SegmentValidation_Tags.Unknown;
-    };
-    "new"(): {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SegmentValidation";
-      readonly tag: SegmentValidation_Tags.Unknown;
-    };
-    instanceOf(obj: any): obj is {
-      /**
-       * @private
-       * This field is private and should not be used, use `tag` instead.
-       */
-      readonly [uniffiTypeNameSymbol]: "SegmentValidation";
-      readonly tag: SegmentValidation_Tags.Unknown;
-    };
-  };
 }>;
 /**
  * Result of `StreamSession.validate`.
  */
-export type SegmentValidation = InstanceType<typeof SegmentValidation['Init' | 'Media' | 'Unknown']>;
+export type SegmentValidation = InstanceType<typeof SegmentValidation['Init' | 'Media']>;
 /**
  * The read surface a plugin implements. Implemented by the CALLER, in Rust
  * behind its own cdylib or directly in the host language, and handed to `verify`.
@@ -4183,6 +4176,7 @@ export interface AssetVerifierLike {
    * order; an empty list is a built-in C2PA media format. The SDK links no plugin itself.
    * Returns embedded/recovered credentials plus typed recovery and golden-comparison
    * outcomes.
+   * `format` optionally declares the media type for inputs such as SVG and plain text.
    *
    * # Errors
    *
@@ -4190,7 +4184,7 @@ export interface AssetVerifierLike {
    * parsed, and the backend's fault when it fails mid-read. Everything a repository answers
    * or fails to answer is in the recovery summary.
    */
-  verify(source: RangeSource, recovery: Recovery | undefined, plugins: Array<PluginReader>, asyncOpts_?: {
+  verify(source: RangeSource, recovery: Recovery | undefined, plugins: Array<PluginReader>, format: string | undefined, asyncOpts_?: {
     signal: AbortSignal;
   }): Promise<AssetVerification>;
 }
@@ -4221,6 +4215,7 @@ export declare class AssetVerifier extends UniffiAbstractObject implements Asset
    * order; an empty list is a built-in C2PA media format. The SDK links no plugin itself.
    * Returns embedded/recovered credentials plus typed recovery and golden-comparison
    * outcomes.
+   * `format` optionally declares the media type for inputs such as SVG and plain text.
    *
    * # Errors
    *
@@ -4228,7 +4223,7 @@ export declare class AssetVerifier extends UniffiAbstractObject implements Asset
    * parsed, and the backend's fault when it fails mid-read. Everything a repository answers
    * or fails to answer is in the recovery summary.
    */
-  verify(source: RangeSource, recovery?: Recovery | undefined, plugins?: Array<PluginReader>, asyncOpts_?: {
+  verify(source: RangeSource, recovery?: Recovery | undefined, plugins?: Array<PluginReader>, format?: string | undefined, asyncOpts_?: {
     signal: AbortSignal;
   }): Promise<AssetVerification>;
   uniffiDestroy(): void;
@@ -4383,7 +4378,7 @@ export interface StreamSessionLike {
    *
    * `STREAM_INVALID` when a registered session key cannot be re-encoded.
    */
-  export_(): ArrayBuffer;
+  export(): ArrayBuffer;
   /**
    * Validate any BMFF segment. Classifies internally and dispatches to init- or
    * media-processing, registering what an init advertises into this handle.
@@ -4424,7 +4419,7 @@ export declare class StreamSession extends UniffiAbstractObject implements Strea
    *
    * `STREAM_INVALID` when a registered session key cannot be re-encoded.
    */
-  export_(): ArrayBuffer;
+  export(): ArrayBuffer;
   /**
    * Validate any BMFF segment. Classifies internally and dispatches to init- or
    * media-processing, registering what an init advertises into this handle.
@@ -4465,7 +4460,9 @@ export interface StreamVerifierLike {
    * A field violation at `state` when it is not a value [`StreamSession::export`]
    * produced (`state.malformed`), or one of another export version (`state.version`).
    */
-  resume(state: ArrayBuffer): StreamSessionLike;
+  resume(state: ArrayBuffer, asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<StreamSessionLike>;
 }
 /**
  * @deprecated Use `StreamVerifierLike` instead.
@@ -4507,7 +4504,9 @@ export declare class StreamVerifier extends UniffiAbstractObject implements Stre
    * A field violation at `state` when it is not a value [`StreamSession::export`]
    * produced (`state.malformed`), or one of another export version (`state.version`).
    */
-  resume(state: ArrayBuffer): StreamSessionLike;
+  resume(state: ArrayBuffer, asyncOpts_?: {
+    signal: AbortSignal;
+  }): Promise<StreamSessionLike>;
   uniffiDestroy(): void;
   static instanceOf(obj_: any): obj_ is StreamVerifier;
 }
@@ -4868,13 +4867,6 @@ declare const _default$1: Readonly<{
       lift(value: UniffiByteArray): ReviewRating;
       lower(value: ReviewRating, alloc: RustBufferAllocator): UniffiByteArray;
     };
-    FfiConverterTypeRole: {
-      readFromCursor(c: Cursor): Role;
-      writeIntoCursor(value: Role, c: Cursor): void;
-      allocationSize(value: Role): number;
-      lift(value: UniffiByteArray): Role;
-      lower(value: Role, alloc: RustBufferAllocator): UniffiByteArray;
-    };
     FfiConverterTypeScope: {
       readFromCursor(c: Cursor): Scope;
       writeIntoCursor(value: Scope, c: Cursor): void;

package/gen/ffi/index.js

@@ -658,10 +658,17 @@ const UNIFFI_FOREIGN_FUTURE_HANDLE_MAP = new UniffiHandleMap();
 function uniffiTraitInterfaceCallAsyncWithError(makeCall, handleSuccess, handleError, isErrorType, lowerError, lowerString, alloc) {
 	const settledHolder = { settled: false };
 	const abortController = new AbortController();
+	let onRejected;
 	const promiseHelper = {
 		abortController,
 		settledHolder,
-		promise: makeCall(abortController.signal).finally(() => settledHolder.settled = true).then(handleSuccess, (error) => {
+		promise: makeCall(abortController.signal).finally(() => settledHolder.settled = true).then((value) => {
+			try {
+				handleSuccess(value);
+			} catch (error) {
+				onRejected(error);
+			}
+		}, onRejected = (error) => {
 			let message = error.message ? error.message : error.toString();
 			if (isErrorType(error)) try {
 				handleError(1, lowerError(error, alloc));
@@ -906,16 +913,58 @@ var Cursor = class Cursor {
 };
 //#endregion
 //#region ../../../../node_modules/@ubjs/core/dist/esm/ffi-converters.js
+function uniffiInvalid(message) {
+	return SdkError.Invalid.new({
+		code: Code.InvalidArgument,
+		message,
+		fieldViolations: []
+	});
+}
+const uniffiUnsignedBounds = {
+	UInt8: 255,
+	UInt16: 65535,
+	UInt32: 4294967295
+};
+function uniffiChecked(kind, converter) {
+	const unsigned = kind.startsWith("UInt");
+	const bits = Number(kind.replace(/\D/g, ""));
+	const wide = bits === 64;
+	const lower = wide ? unsigned ? BigInt("0") : -(BigInt("1") << BigInt("63")) : unsigned ? 0 : -(2 ** (bits - 1));
+	const upper = wide ? unsigned ? (BigInt("1") << BigInt("64")) - BigInt("1") : (BigInt("1") << BigInt("63")) - BigInt("1") : unsigned ? uniffiUnsignedBounds[kind] : 2 ** (bits - 1) - 1;
+	return {
+		...converter,
+		lower: (v, _alloc) => {
+			if (wide ? typeof v !== "bigint" : typeof v !== "number" || !Number.isInteger(v)) throw uniffiInvalid(`expected ${wide ? "a bigint" : "an integer number"} for a ${kind}, got ${typeof v === "number" ? v : typeof v}`);
+			if (v < lower || v > upper) throw uniffiInvalid(`${v} is outside the range of a ${kind}`);
+			return v;
+		}
+	};
+}
+function uniffiMillis(value) {
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw uniffiInvalid(`a duration is a non-negative whole number of milliseconds, got ${typeof value === "number" ? value : typeof value}`);
+	return value;
+}
+function uniffiObject(value) {
+	if (value === null || typeof value !== "object" && typeof value !== "function") throw uniffiInvalid(`expected an object, got ${value === null ? "null" : typeof value}`);
+}
+function uniffiBytes(value) {
+	if (!(value instanceof ArrayBuffer || value instanceof Uint8Array)) throw uniffiInvalid(`expected an ArrayBuffer or Uint8Array, got ${value === null ? "null" : typeof value}`);
+}
 var AbstractFfiConverterByteArray = class {
 	lift(value) {
 		const c = Cursor.fromUint8Array(value);
 		return this.readFromCursor(c);
 	}
 	lower(value, alloc) {
-		const view = alloc(this.allocationSize(value));
-		const c = Cursor.fromUint8Array(view);
-		this.writeIntoCursor(value, c);
-		return view;
+		try {
+			const view = alloc(this.allocationSize(value));
+			const c = Cursor.fromUint8Array(view);
+			this.writeIntoCursor(value, c);
+			return view;
+		} catch (error) {
+			if (error != null && SdkError.instanceOf(error)) throw error;
+			throw uniffiInvalid(error instanceof Error ? error.message : String(error));
+		}
 	}
 };
 /**
@@ -935,12 +984,15 @@ function makePrimitive(read, write, byteSize) {
 		writeIntoCursor: write
 	};
 }
-const FfiConverterInt32 = makePrimitive((c) => c.readI32(), (v, c) => c.writeI32(v), 4);
-const FfiConverterInt64 = makePrimitive((c) => c.readI64(), (v, c) => c.writeI64(v), 8);
+uniffiChecked("Int8", makePrimitive((c) => c.readI8(), (v, c) => c.writeI8(v), 1));
+uniffiChecked("Int16", makePrimitive((c) => c.readI16(), (v, c) => c.writeI16(v), 2));
+const FfiConverterInt32 = uniffiChecked("Int32", makePrimitive((c) => c.readI32(), (v, c) => c.writeI32(v), 4));
+const FfiConverterInt64 = uniffiChecked("Int64", makePrimitive((c) => c.readI64(), (v, c) => c.writeI64(v), 8));
 const FfiConverterFloat64 = makePrimitive((c) => c.readF64(), (v, c) => c.writeF64(v), 8);
-const FfiConverterUInt8 = makePrimitive((c) => c.readU8(), (v, c) => c.writeU8(v), 1);
-const FfiConverterUInt32 = makePrimitive((c) => c.readU32(), (v, c) => c.writeU32(v), 4);
-const FfiConverterUInt64 = makePrimitive((c) => c.readU64(), (v, c) => c.writeU64(v), 8);
+const FfiConverterUInt8 = uniffiChecked("UInt8", makePrimitive((c) => c.readU8(), (v, c) => c.writeU8(v), 1));
+uniffiChecked("UInt16", makePrimitive((c) => c.readU16(), (v, c) => c.writeU16(v), 2));
+const FfiConverterUInt32 = uniffiChecked("UInt32", makePrimitive((c) => c.readU32(), (v, c) => c.writeU32(v), 4));
+const FfiConverterUInt64 = uniffiChecked("UInt64", makePrimitive((c) => c.readU64(), (v, c) => c.writeU64(v), 8));
 const FfiConverterBool = (() => {
 	const read = (c) => c.readBool();
 	const write = (v, c) => c.writeBool(v);
@@ -964,7 +1016,7 @@ const FfiConverterDuration = (() => {
 			return ms + nanos / nanosPerMs;
 		}
 		writeIntoCursor(value, c) {
-			const ms = value.valueOf();
+			const ms = uniffiMillis(value);
 			const secsBigInt = BigInt(Math.trunc(ms)) / msPerSecBigInt;
 			const remainingNanos = ms % 1e3 * nanosPerMs;
 			c.writeU64(secsBigInt);
@@ -1086,6 +1138,7 @@ const FfiConverterArrayBuffer = (() => {
 			c.writeBytes(new Uint8Array(value));
 		}
 		allocationSize(value) {
+			uniffiBytes(value);
 			return 4 + value.byteLength;
 		}
 	}
@@ -1159,6 +1212,7 @@ var FfiConverterCallback = class {
 		return this.handleMap.get(value);
 	}
 	lower(value, _alloc) {
+		uniffiObject(value);
 		return this.handleMap.insert(value);
 	}
 	readFromCursor(c) {
@@ -1241,6 +1295,7 @@ var FfiConverterObject = class {
 		pointerConverter.writeIntoCursor(this.lowerHandle(value), c);
 	}
 	lowerHandle(value) {
+		uniffiObject(value);
 		if (this.factory.isConcreteType(value)) return this.factory.clonePointer(value);
 		else throw new Error("Cannot lower this object to a pointer");
 	}
@@ -1255,6 +1310,7 @@ var FfiConverterObjectWithCallbacks = class extends FfiConverterObject {
 		this.handleMap = handleMap;
 	}
 	lowerHandle(value) {
+		uniffiObject(value);
 		if (this.factory.isConcreteType(value)) return super.lowerHandle(value);
 		return this.handleMap.insert(value);
 	}
@@ -1745,6 +1801,7 @@ const DEFINITIONS = {
 				FfiType.Handle,
 				FfiType.Handle,
 				FfiType.RustBuffer,
+				FfiType.RustBuffer,
 				FfiType.RustBuffer
 			],
 			ret: FfiType.Handle,
@@ -1860,7 +1917,7 @@ const DEFINITIONS = {
 		"uniffi_trylimbo_sdk_verifier_fn_method_streamverifier_resume": {
 			args: [FfiType.Handle, FfiType.RustBuffer],
 			ret: FfiType.Handle,
-			hasRustCallStatus: true
+			hasRustCallStatus: false
 		},
 		"ffi_trylimbo_sdk_verifier_uniffi_contract_version": {
 			args: [],
@@ -2285,7 +2342,6 @@ var trylimbo_verifier_exports = /* @__PURE__ */ __exportAll({
 	Repository_Tags: () => Repository_Tags,
 	ResourceRef: () => ResourceRef,
 	ReviewRating: () => ReviewRating,
-	Role: () => Role,
 	Scope: () => Scope,
 	SdkError: () => SdkError,
 	SdkError_Tags: () => SdkError_Tags,
@@ -3085,84 +3141,6 @@ const FfiConverterTypeRange = (() => {
 	return new FFIConverter();
 })();
 /**
-* A role describing the region.
-
-*/
-let Role = /* @__PURE__ */ function(Role) {
-	/**
-	* Arbitrary area worth identifying.
-	*/
-	Role[Role["C2paAreaOfInterest"] = 0] = "C2paAreaOfInterest";
-	/**
-	* This area is all that is left after a crop action.
-	*/
-	Role[Role["C2paCropped"] = 1] = "C2paCropped";
-	/**
-	* This area has had edits applied to it.
-	*/
-	Role[Role["C2paEdited"] = 2] = "C2paEdited";
-	/**
-	* The area where an ingredient was placed/added.
-	*/
-	Role[Role["C2paPlaced"] = 3] = "C2paPlaced";
-	/**
-	* Something in this area was redacted.
-	*/
-	Role[Role["C2paRedacted"] = 4] = "C2paRedacted";
-	/**
-	* Area specific to a subject (human or not).
-	*/
-	Role[Role["C2paSubjectArea"] = 5] = "C2paSubjectArea";
-	/**
-	* A range of information was removed/deleted.
-	*/
-	Role[Role["C2paDeleted"] = 6] = "C2paDeleted";
-	/**
-	* Styling was applied to this area.
-	*/
-	Role[Role["C2paStyled"] = 7] = "C2paStyled";
-	/**
-	* Invisible watermarking was applied to this area for the purpose of soft binding.
-	*/
-	Role[Role["C2paWatermarked"] = 8] = "C2paWatermarked";
-	return Role;
-}({});
-const FfiConverterTypeRole = (() => {
-	class FFIConverter extends AbstractFfiConverterByteArray {
-		readFromCursor(c) {
-			switch (c.readI32()) {
-				case 1: return 0;
-				case 2: return 1;
-				case 3: return 2;
-				case 4: return 3;
-				case 5: return 4;
-				case 6: return 5;
-				case 7: return 6;
-				case 8: return 7;
-				case 9: return 8;
-				default: throw new UniffiInternalError.UnexpectedEnumCase();
-			}
-		}
-		writeIntoCursor(value, c) {
-			switch (value) {
-				case 0: return c.writeI32(1);
-				case 1: return c.writeI32(2);
-				case 2: return c.writeI32(3);
-				case 3: return c.writeI32(4);
-				case 4: return c.writeI32(5);
-				case 5: return c.writeI32(6);
-				case 6: return c.writeI32(7);
-				case 7: return c.writeI32(8);
-				case 8: return c.writeI32(9);
-			}
-		}
-		allocationSize(value) {
-			return 4;
-		}
-	}
-	return new FFIConverter();
-})();
-/**
 * Generated factory for {@link RegionOfInterest} record objects.
 */
 const RegionOfInterest = (() => {
@@ -3185,7 +3163,6 @@ const FfiConverterTypeRegionOfInterest = (() => {
 				metadata: FfiConverterOptionalTypeJsonValue.readFromCursor(c),
 				name: FfiConverterOptionalString.readFromCursor(c),
 				region: FfiConverterSequenceTypeRange.readFromCursor(c),
-				role: FfiConverterOptionalTypeRole.readFromCursor(c),
 				type: FfiConverterOptionalString.readFromCursor(c)
 			};
 		}
@@ -3195,11 +3172,10 @@ const FfiConverterTypeRegionOfInterest = (() => {
 			FfiConverterOptionalTypeJsonValue.writeIntoCursor(value.metadata, c);
 			FfiConverterOptionalString.writeIntoCursor(value.name, c);
 			FfiConverterSequenceTypeRange.writeIntoCursor(value.region, c);
-			FfiConverterOptionalTypeRole.writeIntoCursor(value.role, c);
 			FfiConverterOptionalString.writeIntoCursor(value.type, c);
 		}
 		allocationSize(value) {
-			return FfiConverterOptionalString.allocationSize(value.description) + FfiConverterOptionalString.allocationSize(value.identifier) + FfiConverterOptionalTypeJsonValue.allocationSize(value.metadata) + FfiConverterOptionalString.allocationSize(value.name) + FfiConverterSequenceTypeRange.allocationSize(value.region) + FfiConverterOptionalTypeRole.allocationSize(value.role) + FfiConverterOptionalString.allocationSize(value.type);
+			return FfiConverterOptionalString.allocationSize(value.description) + FfiConverterOptionalString.allocationSize(value.identifier) + FfiConverterOptionalTypeJsonValue.allocationSize(value.metadata) + FfiConverterOptionalString.allocationSize(value.name) + FfiConverterSequenceTypeRange.allocationSize(value.region) + FfiConverterOptionalString.allocationSize(value.type);
 		}
 	}
 	return new FFIConverter();
@@ -3320,7 +3296,7 @@ const FfiConverterTypeAssetType = (() => {
 */
 let HardBinding = /* @__PURE__ */ function(HardBinding) {
 	/**
-	* No data, box, BMFF or collection hash failed against these bytes.
+	* A data, box, BMFF or collection hash was checked against these bytes and held.
 	*/
 	HardBinding[HardBinding["Match"] = 0] = "Match";
 	/**
@@ -3328,6 +3304,11 @@ let HardBinding = /* @__PURE__ */ function(HardBinding) {
 	* bytes. Whether it is otherwise authentic is its remaining statuses.
 	*/
 	HardBinding[HardBinding["Mismatch"] = 1] = "Mismatch";
+	/**
+	* No hash was checked against these bytes: the active manifest carries no hard binding, or
+	* validation never reached it. Says nothing about the bytes, so it is never a match.
+	*/
+	HardBinding[HardBinding["Unverified"] = 2] = "Unverified";
 	return HardBinding;
 }({});
 const FfiConverterTypeHardBinding = (() => {
@@ -3336,6 +3317,7 @@ const FfiConverterTypeHardBinding = (() => {
 			switch (c.readI32()) {
 				case 1: return 0;
 				case 2: return 1;
+				case 3: return 2;
 				default: throw new UniffiInternalError.UnexpectedEnumCase();
 			}
 		}
@@ -3343,6 +3325,7 @@ const FfiConverterTypeHardBinding = (() => {
 			switch (value) {
 				case 0: return c.writeI32(1);
 				case 1: return c.writeI32(2);
+				case 2: return c.writeI32(3);
 			}
 		}
 		allocationSize(value) {
@@ -3842,6 +3825,7 @@ const FfiConverterTypeIngredient = (() => {
 				hash: FfiConverterOptionalString.readFromCursor(c),
 				informationalUri: FfiConverterOptionalString.readFromCursor(c),
 				instanceId: FfiConverterOptionalString.readFromCursor(c),
+				isCreated: FfiConverterOptionalBoolean.readFromCursor(c),
 				label: FfiConverterOptionalString.readFromCursor(c),
 				manifestData: FfiConverterOptionalTypeResourceRef.readFromCursor(c),
 				metadata: FfiConverterOptionalTypeAssertionMetadata.readFromCursor(c),
@@ -3866,6 +3850,7 @@ const FfiConverterTypeIngredient = (() => {
 			FfiConverterOptionalString.writeIntoCursor(value.hash, c);
 			FfiConverterOptionalString.writeIntoCursor(value.informationalUri, c);
 			FfiConverterOptionalString.writeIntoCursor(value.instanceId, c);
+			FfiConverterOptionalBoolean.writeIntoCursor(value.isCreated, c);
 			FfiConverterOptionalString.writeIntoCursor(value.label, c);
 			FfiConverterOptionalTypeResourceRef.writeIntoCursor(value.manifestData, c);
 			FfiConverterOptionalTypeAssertionMetadata.writeIntoCursor(value.metadata, c);
@@ -3879,7 +3864,7 @@ const FfiConverterTypeIngredient = (() => {
 			FfiConverterOptionalSequenceTypeValidationStatus.writeIntoCursor(value.validationStatus, c);
 		}
 		allocationSize(value) {
-			return FfiConverterOptionalString.allocationSize(value.activeManifest) + FfiConverterOptionalTypeResourceRef.allocationSize(value.data) + FfiConverterOptionalSequenceTypeAssetType.allocationSize(value.dataTypes) + FfiConverterOptionalString.allocationSize(value.description) + FfiConverterOptionalString.allocationSize(value.digitalSourceType) + FfiConverterOptionalString.allocationSize(value.documentId) + FfiConverterOptionalString.allocationSize(value.format) + FfiConverterOptionalString.allocationSize(value.hash) + FfiConverterOptionalString.allocationSize(value.informationalUri) + FfiConverterOptionalString.allocationSize(value.instanceId) + FfiConverterOptionalString.allocationSize(value.label) + FfiConverterOptionalTypeResourceRef.allocationSize(value.manifestData) + FfiConverterOptionalTypeAssertionMetadata.allocationSize(value.metadata) + FfiConverterOptionalSequenceTypeResourceRef.allocationSize(value.ocspResponses) + FfiConverterOptionalString.allocationSize(value.provenance) + FfiConverterTypeRelationship.allocationSize(value.relationship) + FfiConverterOptionalSequenceString.allocationSize(value.softBindingAlgorithmsMatched) + FfiConverterOptionalTypeResourceRef.allocationSize(value.thumbnail) + FfiConverterOptionalString.allocationSize(value.title) + FfiConverterOptionalTypeValidationResults.allocationSize(value.validationResults) + FfiConverterOptionalSequenceTypeValidationStatus.allocationSize(value.validationStatus);
+			return FfiConverterOptionalString.allocationSize(value.activeManifest) + FfiConverterOptionalTypeResourceRef.allocationSize(value.data) + FfiConverterOptionalSequenceTypeAssetType.allocationSize(value.dataTypes) + FfiConverterOptionalString.allocationSize(value.description) + FfiConverterOptionalString.allocationSize(value.digitalSourceType) + FfiConverterOptionalString.allocationSize(value.documentId) + FfiConverterOptionalString.allocationSize(value.format) + FfiConverterOptionalString.allocationSize(value.hash) + FfiConverterOptionalString.allocationSize(value.informationalUri) + FfiConverterOptionalString.allocationSize(value.instanceId) + FfiConverterOptionalBoolean.allocationSize(value.isCreated) + FfiConverterOptionalString.allocationSize(value.label) + FfiConverterOptionalTypeResourceRef.allocationSize(value.manifestData) + FfiConverterOptionalTypeAssertionMetadata.allocationSize(value.metadata) + FfiConverterOptionalSequenceTypeResourceRef.allocationSize(value.ocspResponses) + FfiConverterOptionalString.allocationSize(value.provenance) + FfiConverterTypeRelationship.allocationSize(value.relationship) + FfiConverterOptionalSequenceString.allocationSize(value.softBindingAlgorithmsMatched) + FfiConverterOptionalTypeResourceRef.allocationSize(value.thumbnail) + FfiConverterOptionalString.allocationSize(value.title) + FfiConverterOptionalTypeValidationResults.allocationSize(value.validationResults) + FfiConverterOptionalSequenceTypeValidationStatus.allocationSize(value.validationStatus);
 		}
 	}
 	return new FFIConverter();
@@ -5830,13 +5815,14 @@ const FfiConverterTypeGolden = (() => {
 let VerdictRule = /* @__PURE__ */ function(VerdictRule) {
 	VerdictRule[VerdictRule["OnlyCandidate"] = 0] = "OnlyCandidate";
 	/**
-	* Every other candidate is superseded by a credential in this report.
+	* Its hash holds over these bytes and no other candidate's does.
 	*/
-	VerdictRule[VerdictRule["NotSuperseded"] = 1] = "NotSuperseded";
+	VerdictRule[VerdictRule["HardBinding"] = 1] = "HardBinding";
 	/**
-	* Its hash holds over these bytes and no other unsuperseded candidate's does.
+	* Every other candidate with the same hard-binding standing is superseded by a credential
+	* in this report.
 	*/
-	VerdictRule[VerdictRule["HardBinding"] = 2] = "HardBinding";
+	VerdictRule[VerdictRule["NotSuperseded"] = 2] = "NotSuperseded";
 	return VerdictRule;
 }({});
 const FfiConverterTypeVerdictRule = (() => {
@@ -5866,6 +5852,7 @@ let Verdict_Tags = /* @__PURE__ */ function(Verdict_Tags) {
 	Verdict_Tags["Unsigned"] = "Unsigned";
 	Verdict_Tags["Inconclusive"] = "Inconclusive";
 	Verdict_Tags["Embedded"] = "Embedded";
+	Verdict_Tags["Invalid"] = "Invalid";
 	Verdict_Tags["Recovered"] = "Recovered";
 	Verdict_Tags["RecoveredDerivative"] = "RecoveredDerivative";
 	Verdict_Tags["Ambiguous"] = "Ambiguous";
@@ -5880,12 +5867,17 @@ let Verdict_Tags = /* @__PURE__ */ function(Verdict_Tags) {
 * and the golden comparison does not contradict it. When it `differs` from what the repository
 * holds, or several recovered candidates leave the comparison indeterminate, the embedded and
 * the recovered manifests are reported as ambiguous: C2PA 2.4's substitution use case leaves
-* that trust decision to the client. Otherwise a recovered candidate is named only when
-* evidence singles it out: it is the only one, or the only one no other credential in this
-* report supersedes (the successor's signed `parentOf` link), or the only one of those whose
-* hard binding holds over these bytes. A repository score, a signature time or a position in the
-* list is not evidence of which manifest belongs to these bytes, so candidates those alone would
-* separate are reported as ambiguous.
+* that trust decision to the client.
+*
+* Otherwise a recovered candidate is named only when evidence singles it out, and only among
+* those that are authentic (they fail on nothing but a hash mismatch) and state a hard binding.
+* The verdict is about THESE bytes, so a candidate whose hash holds over them outranks any whose
+* hash does not, whatever the repository calls its head; among equals, one that no other
+* credential supersedes (the successor's signed `parentOf` link) outranks the rest. A repository
+* score, a signature time or a position in the list is not evidence of which manifest belongs to
+* these bytes, so candidates those alone would separate are reported as ambiguous. When no
+* credential is both authentic and bound to some bytes, the verdict is `Invalid`, never a
+* recovered one: a manifest that fails its own signature or signer vouches for nothing.
 */
 const Verdict = (() => {
 	/**
@@ -5929,8 +5921,7 @@ const Verdict = (() => {
 		}
 	}
 	/**
-	* The manifest the asset carries, always the first credential. An `Invalid` one is the
-	* verdict only when nothing was recovered.
+	* The manifest the asset carries, always the first credential, and not `Invalid`.
 	*/
 	class Embedded_ extends UniffiEnum {
 		/**
@@ -5950,6 +5941,29 @@ const Verdict = (() => {
 		}
 	}
 	/**
+	* The credential at `index`, embedded or recovered, is the best there is and it does not
+	* hold up: it fails validation beyond a hash mismatch, or states no hard binding at all.
+	*/
+	class Invalid_ extends UniffiEnum {
+		/**
+		* @private
+		* This field is private and should not be used, use `tag` instead.
+		*/
+		[uniffiTypeNameSymbol] = "Verdict";
+		tag = "Invalid";
+		inner;
+		constructor(inner) {
+			super("Verdict", "Invalid");
+			this.inner = Object.freeze(inner);
+		}
+		static new(inner) {
+			return new Invalid_(inner);
+		}
+		static instanceOf(obj) {
+			return obj.tag === "Invalid";
+		}
+	}
+	/**
 	* A recovered manifest whose hard binding holds over these bytes.
 	*/
 	class Recovered_ extends UniffiEnum {
@@ -5972,7 +5986,8 @@ const Verdict = (() => {
 		}
 	}
 	/**
-	* A recovered manifest for an earlier state of these bytes: its hard binding mismatches.
+	* A recovered manifest for another state of these bytes: its hard binding mismatches, and
+	* no candidate's holds.
 	*/
 	class RecoveredDerivative_ extends UniffiEnum {
 		/**
@@ -6025,6 +6040,7 @@ const Verdict = (() => {
 		Unsigned: Unsigned_,
 		Inconclusive: Inconclusive_,
 		Embedded: Embedded_,
+		Invalid: Invalid_,
 		Recovered: Recovered_,
 		RecoveredDerivative: RecoveredDerivative_,
 		Ambiguous: Ambiguous_
@@ -6037,15 +6053,16 @@ const FfiConverterTypeVerdict = (() => {
 				case 1: return new Verdict.Unsigned();
 				case 2: return new Verdict.Inconclusive();
 				case 3: return new Verdict.Embedded();
-				case 4: return new Verdict.Recovered({
+				case 4: return new Verdict.Invalid({ index: FfiConverterUInt32.readFromCursor(c) });
+				case 5: return new Verdict.Recovered({
 					index: FfiConverterUInt32.readFromCursor(c),
 					decidedBy: FfiConverterTypeVerdictRule.readFromCursor(c)
 				});
-				case 5: return new Verdict.RecoveredDerivative({
+				case 6: return new Verdict.RecoveredDerivative({
 					index: FfiConverterUInt32.readFromCursor(c),
 					decidedBy: FfiConverterTypeVerdictRule.readFromCursor(c)
 				});
-				case 6: return new Verdict.Ambiguous({ candidates: FfiConverterSequenceUInt32.readFromCursor(c) });
+				case 7: return new Verdict.Ambiguous({ candidates: FfiConverterSequenceUInt32.readFromCursor(c) });
 				default: throw new UniffiInternalError.UnexpectedEnumCase();
 			}
 		}
@@ -6060,22 +6077,28 @@ const FfiConverterTypeVerdict = (() => {
 				case "Embedded":
 					c.writeI32(3);
 					return;
-				case "Recovered": {
+				case "Invalid": {
 					c.writeI32(4);
 					const inner = value.inner;
 					FfiConverterUInt32.writeIntoCursor(inner.index, c);
+					return;
+				}
+				case "Recovered": {
+					c.writeI32(5);
+					const inner = value.inner;
+					FfiConverterUInt32.writeIntoCursor(inner.index, c);
 					FfiConverterTypeVerdictRule.writeIntoCursor(inner.decidedBy, c);
 					return;
 				}
 				case "RecoveredDerivative": {
-					c.writeI32(5);
+					c.writeI32(6);
 					const inner = value.inner;
 					FfiConverterUInt32.writeIntoCursor(inner.index, c);
 					FfiConverterTypeVerdictRule.writeIntoCursor(inner.decidedBy, c);
 					return;
 				}
 				case "Ambiguous": {
-					c.writeI32(6);
+					c.writeI32(7);
 					const inner = value.inner;
 					FfiConverterSequenceUInt32.writeIntoCursor(inner.candidates, c);
 					return;
@@ -6088,6 +6111,12 @@ const FfiConverterTypeVerdict = (() => {
 				case "Unsigned": return 4;
 				case "Inconclusive": return 4;
 				case "Embedded": return 4;
+				case "Invalid": {
+					const inner = value.inner;
+					let size = 4;
+					size += FfiConverterUInt32.allocationSize(inner.index);
+					return size;
+				}
 				case "Recovered": {
 					const inner = value.inner;
 					let size = 4;
@@ -7357,7 +7386,10 @@ const FfiConverterTypeRecovery = (() => {
 * Generated factory for {@link StreamVerifierOptions} record objects.
 */
 const StreamVerifierOptions = (() => {
-	const defaults = () => ({ skewTolerance: void 0 });
+	const defaults = () => ({
+		skewTolerance: void 0,
+		manifestOrigins: []
+	});
 	const create = (() => {
 		return uniffiCreateRecord(defaults);
 	})();
@@ -7372,15 +7404,17 @@ const FfiConverterTypeStreamVerifierOptions = (() => {
 		readFromCursor(c) {
 			return {
 				trust: FfiConverterTypeTrust.readFromCursor(c),
-				skewTolerance: FfiConverterOptionalDuration.readFromCursor(c)
+				skewTolerance: FfiConverterOptionalDuration.readFromCursor(c),
+				manifestOrigins: FfiConverterSequenceString.readFromCursor(c)
 			};
 		}
 		writeIntoCursor(value, c) {
 			FfiConverterTypeTrust.writeIntoCursor(value.trust, c);
 			FfiConverterOptionalDuration.writeIntoCursor(value.skewTolerance, c);
+			FfiConverterSequenceString.writeIntoCursor(value.manifestOrigins, c);
 		}
 		allocationSize(value) {
-			return FfiConverterTypeTrust.allocationSize(value.trust) + FfiConverterOptionalDuration.allocationSize(value.skewTolerance);
+			return FfiConverterTypeTrust.allocationSize(value.trust) + FfiConverterOptionalDuration.allocationSize(value.skewTolerance) + FfiConverterSequenceString.allocationSize(value.manifestOrigins);
 		}
 	}
 	return new FFIConverter();
@@ -7388,7 +7422,6 @@ const FfiConverterTypeStreamVerifierOptions = (() => {
 let SegmentValidation_Tags = /* @__PURE__ */ function(SegmentValidation_Tags) {
 	SegmentValidation_Tags["Init"] = "Init";
 	SegmentValidation_Tags["Media"] = "Media";
-	SegmentValidation_Tags["Unknown"] = "Unknown";
 	return SegmentValidation_Tags;
 }({});
 /**
@@ -7433,31 +7466,13 @@ const SegmentValidation = (() => {
 			return obj.tag === "Media";
 		}
 	}
-	class Unknown_ extends UniffiEnum {
-		/**
-		* @private
-		* This field is private and should not be used, use `tag` instead.
-		*/
-		[uniffiTypeNameSymbol] = "SegmentValidation";
-		tag = "Unknown";
-		constructor() {
-			super("SegmentValidation", "Unknown");
-		}
-		static new() {
-			return new Unknown_();
-		}
-		static instanceOf(obj) {
-			return obj.tag === "Unknown";
-		}
-	}
 	function instanceOf(obj) {
 		return obj[uniffiTypeNameSymbol] === "SegmentValidation";
 	}
 	return Object.freeze({
 		instanceOf,
 		Init: Init_,
-		Media: Media_,
-		Unknown: Unknown_
+		Media: Media_
 	});
 })();
 const FfiConverterTypeSegmentValidation = (() => {
@@ -7466,7 +7481,6 @@ const FfiConverterTypeSegmentValidation = (() => {
 			switch (c.readI32()) {
 				case 1: return new SegmentValidation.Init(FfiConverterTypeInitValidation.readFromCursor(c));
 				case 2: return new SegmentValidation.Media(FfiConverterTypeMediaValidation.readFromCursor(c));
-				case 3: return new SegmentValidation.Unknown();
 				default: throw new UniffiInternalError.UnexpectedEnumCase();
 			}
 		}
@@ -7484,9 +7498,6 @@ const FfiConverterTypeSegmentValidation = (() => {
 					FfiConverterTypeMediaValidation.writeIntoCursor(inner[0], c);
 					return;
 				}
-				case "Unknown":
-					c.writeI32(3);
-					return;
 				default: throw new UniffiInternalError.UnexpectedEnumCase();
 			}
 		}
@@ -7504,7 +7515,6 @@ const FfiConverterTypeSegmentValidation = (() => {
 					size += FfiConverterTypeMediaValidation.allocationSize(inner[0]);
 					return size;
 				}
-				case "Unknown": return 4;
 				default: throw new UniffiInternalError.UnexpectedEnumCase();
 			}
 		}
@@ -7606,6 +7616,7 @@ var AssetVerifier = class extends UniffiAbstractObject {
 	* order; an empty list is a built-in C2PA media format. The SDK links no plugin itself.
 	* Returns embedded/recovered credentials plus typed recovery and golden-comparison
 	* outcomes.
+	* `format` optionally declares the media type for inputs such as SVG and plain text.
 	*
 	* # Errors
 	*
@@ -7613,11 +7624,11 @@ var AssetVerifier = class extends UniffiAbstractObject {
 	* parsed, and the backend's fault when it fails mid-read. Everything a repository answers
 	* or fails to answer is in the recovery summary.
 	*/
-	async verify(source, recovery = void 0, plugins = [], asyncOpts_) {
+	async verify(source, recovery = void 0, plugins = [], format = void 0, asyncOpts_) {
 		const __stack = uniffiIsDebug ? (/* @__PURE__ */ new Error()).stack : void 0;
 		try {
 			return await uniffiRustCallAsync(uniffiCaller, () => {
-				return getter().uniffi_trylimbo_sdk_verifier_fn_method_assetverifier_verify(uniffiTypeAssetVerifierObjectFactory.clonePointer(this), FfiConverterTypeRangeSource.lower(source, getter().rustbuffer_alloc), FfiConverterOptionalTypeRecovery.lower(recovery, getter().rustbuffer_alloc), FfiConverterSequenceTypePluginReader.lower(plugins, getter().rustbuffer_alloc));
+				return getter().uniffi_trylimbo_sdk_verifier_fn_method_assetverifier_verify(uniffiTypeAssetVerifierObjectFactory.clonePointer(this), FfiConverterTypeRangeSource.lower(source, getter().rustbuffer_alloc), FfiConverterOptionalTypeRecovery.lower(recovery, getter().rustbuffer_alloc), FfiConverterSequenceTypePluginReader.lower(plugins, getter().rustbuffer_alloc), FfiConverterOptionalString.lower(format, getter().rustbuffer_alloc));
 			}, getter().ffi_trylimbo_sdk_verifier_rust_future_poll_rust_buffer, getter().ffi_trylimbo_sdk_verifier_rust_future_cancel_rust_buffer, getter().ffi_trylimbo_sdk_verifier_rust_future_complete_rust_buffer, getter().ffi_trylimbo_sdk_verifier_rust_future_free_rust_buffer, (__rb) => {
 				try {
 					return FfiConverterTypeAssetVerification.lift(__rb);
@@ -7942,7 +7953,7 @@ var StreamSession = class extends UniffiAbstractObject {
 	*
 	* `STREAM_INVALID` when a registered session key cannot be re-encoded.
 	*/
-	export_() {
+	export() {
 		const __rb = uniffiCaller.rustCallWithError(FfiConverterTypeSdkError.lift.bind(FfiConverterTypeSdkError), (callStatus) => {
 			return getter().uniffi_trylimbo_sdk_verifier_fn_method_streamsession_export(uniffiTypeStreamSessionObjectFactory.clonePointer(this), callStatus);
 		}, FfiConverterString.lift.bind(FfiConverterString));
@@ -8080,10 +8091,16 @@ var StreamVerifier = class extends UniffiAbstractObject {
 	* A field violation at `state` when it is not a value [`StreamSession::export`]
 	* produced (`state.malformed`), or one of another export version (`state.version`).
 	*/
-	resume(state) {
-		return FfiConverterTypeStreamSession.lift(uniffiCaller.rustCallWithError(FfiConverterTypeSdkError.lift.bind(FfiConverterTypeSdkError), (callStatus) => {
-			return getter().uniffi_trylimbo_sdk_verifier_fn_method_streamverifier_resume(uniffiTypeStreamVerifierObjectFactory.clonePointer(this), FfiConverterArrayBuffer.lower(state, getter().rustbuffer_alloc), callStatus);
-		}, FfiConverterString.lift.bind(FfiConverterString)));
+	async resume(state, asyncOpts_) {
+		const __stack = uniffiIsDebug ? (/* @__PURE__ */ new Error()).stack : void 0;
+		try {
+			return await uniffiRustCallAsync(uniffiCaller, () => {
+				return getter().uniffi_trylimbo_sdk_verifier_fn_method_streamverifier_resume(uniffiTypeStreamVerifierObjectFactory.clonePointer(this), FfiConverterArrayBuffer.lower(state, getter().rustbuffer_alloc));
+			}, getter().ffi_trylimbo_sdk_verifier_rust_future_poll_u64, getter().ffi_trylimbo_sdk_verifier_rust_future_cancel_u64, getter().ffi_trylimbo_sdk_verifier_rust_future_complete_u64, getter().ffi_trylimbo_sdk_verifier_rust_future_free_u64, FfiConverterTypeStreamSession.lift.bind(FfiConverterTypeStreamSession), FfiConverterString.lift.bind(FfiConverterString), asyncOpts_, FfiConverterTypeSdkError.lift.bind(FfiConverterTypeSdkError));
+		} catch (__error) {
+			if (uniffiIsDebug && __error instanceof Error) __error.stack = __stack;
+			throw __error;
+		}
 	}
 	uniffiDestroy() {
 		const ptr = this[destructorGuardSymbol];
@@ -8159,7 +8176,6 @@ const FfiConverterOptionalTypeText = new FfiConverterOptional(FfiConverterTypeTe
 const FfiConverterOptionalTypeEndInclusivity = new FfiConverterOptional(FfiConverterTypeEndInclusivity);
 const FfiConverterOptionalTypeTime = new FfiConverterOptional(FfiConverterTypeTime);
 const FfiConverterSequenceTypeRange = new FfiConverterArray(FfiConverterTypeRange);
-const FfiConverterOptionalTypeRole = new FfiConverterOptional(FfiConverterTypeRole);
 const FfiConverterOptionalTypeRegionOfInterest = new FfiConverterOptional(FfiConverterTypeRegionOfInterest);
 const FfiConverterOptionalSequenceTypeReviewRating = new FfiConverterOptional(new FfiConverterArray(FfiConverterTypeReviewRating));
 const FfiConverterSequenceString = new FfiConverterArray(FfiConverterString);
@@ -8228,7 +8244,7 @@ function uniffiEnsureInitialized() {
 	if (getter().uniffi_trylimbo_sdk_verifier_checksum_func_parse() !== 2838) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_func_parse");
 	if (getter().uniffi_trylimbo_sdk_verifier_checksum_func_resource() !== 21307) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_func_resource");
 	if (getter().uniffi_trylimbo_sdk_verifier_checksum_constructor_assetverifier_create() !== 14882) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_constructor_assetverifier_create");
-	if (getter().uniffi_trylimbo_sdk_verifier_checksum_method_assetverifier_verify() !== 42540) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_method_assetverifier_verify");
+	if (getter().uniffi_trylimbo_sdk_verifier_checksum_method_assetverifier_verify() !== 20785) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_method_assetverifier_verify");
 	if (getter().uniffi_trylimbo_sdk_verifier_checksum_method_compute_alg() !== 65518) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_method_compute_alg");
 	if (getter().uniffi_trylimbo_sdk_verifier_checksum_method_compute_compute() !== 17061) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_method_compute_compute");
 	if (getter().uniffi_trylimbo_sdk_verifier_checksum_method_credential_hard_binding() !== 52977) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_method_credential_hard_binding");
@@ -8248,7 +8264,7 @@ function uniffiEnsureInitialized() {
 	if (getter().uniffi_trylimbo_sdk_verifier_checksum_method_streamsession_validate() !== 59142) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_method_streamsession_validate");
 	if (getter().uniffi_trylimbo_sdk_verifier_checksum_constructor_streamverifier_create() !== 14621) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_constructor_streamverifier_create");
 	if (getter().uniffi_trylimbo_sdk_verifier_checksum_method_streamverifier_open() !== 3844) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_method_streamverifier_open");
-	if (getter().uniffi_trylimbo_sdk_verifier_checksum_method_streamverifier_resume() !== 17091) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_method_streamverifier_resume");
+	if (getter().uniffi_trylimbo_sdk_verifier_checksum_method_streamverifier_resume() !== 25844) throw new UniffiInternalError.ApiChecksumMismatch("uniffi_trylimbo_sdk_verifier_checksum_method_streamverifier_resume");
 	uniffiCallbackInterfaceRangeSource.register();
 	uniffiCallbackInterfaceCompute.register();
 	uniffiCallbackInterfacePluginReader.register();
@@ -8311,7 +8327,6 @@ var trylimbo_verifier_default = Object.freeze({
 		FfiConverterTypeRepository,
 		FfiConverterTypeResourceRef,
 		FfiConverterTypeReviewRating,
-		FfiConverterTypeRole,
 		FfiConverterTypeScope,
 		FfiConverterTypeSdkError,
 		FfiConverterTypeSegmentTiming,
@@ -8356,4 +8371,4 @@ if (!initialized) {
 async function uniffiInitAsync() {}
 var ffi_trylimbo_sdk_verifier_default = { trylimbo_verifier: trylimbo_verifier_exports };
 //#endregion
-export { Actor, AssertionMetadata, AssetType, AssetVerification, AssetVerifier, AssetVerifierOptions, Block, ByteRange, ClaimGeneratorInfo, Code, ComputeImpl, ComputeRequest, Content, ContentWhen, Coordinate, Credential, CredentialOrigin, CredentialOrigin_Tags, DataSource, Discovery, DiscoveryVia, DiscoveryVia_Tags, EndInclusivity, FieldViolation, FileSource, FingerprintCheck, FingerprintCheck_Tags, Frame, Golden, Golden_Tags, HardBinding, HashedUri, Hint, Ingredient, IngredientDeltaValidationResult, InitValidation, Item, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestStore, MediaValidation, MemorySource, Range, RangeSourceImpl, RangeType, Recovery, RecoveryIssue, RecoveryIssue_Tags, RecoveryStatus, RecoverySummary, RecoveryTrigger, Reference, RegionOfInterest, Relationship, Repository, Repository_Tags, ResourceRef, ReviewRating, Role, Scope, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKey, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SoftBindingSource, SoftBindingSource_Tags, SoftBindingType, StatusCodes, StreamSession, StreamVerifier, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, Timespan, Trust, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Verdict, VerdictRule, Verdict_Tags, c2paTrustList, c2paTsaTrustList, computeSoftBinding, ffi_trylimbo_sdk_verifier_default as default, devCa, parse, resource, uniffiInitAsync };
+export { Actor, AssertionMetadata, AssetType, AssetVerification, AssetVerifier, AssetVerifierOptions, Block, ByteRange, ClaimGeneratorInfo, Code, ComputeImpl, ComputeRequest, Content, ContentWhen, Coordinate, Credential, CredentialOrigin, CredentialOrigin_Tags, DataSource, Discovery, DiscoveryVia, DiscoveryVia_Tags, EndInclusivity, FieldViolation, FileSource, FingerprintCheck, FingerprintCheck_Tags, Frame, Golden, Golden_Tags, HardBinding, HashedUri, Hint, Ingredient, IngredientDeltaValidationResult, InitValidation, Item, Lineage, Manifest, ManifestAssertion, ManifestAssertionKind, ManifestStore, MediaValidation, MemorySource, Range, RangeSourceImpl, RangeType, Recovery, RecoveryIssue, RecoveryIssue_Tags, RecoveryStatus, RecoverySummary, RecoveryTrigger, Reference, RegionOfInterest, Relationship, Repository, Repository_Tags, ResourceRef, ReviewRating, Scope, SdkError, SdkError_Tags, SegmentTiming, SegmentValidation, SegmentValidation_Tags, SessionKey, Shape, ShapeType, SignatureInfo, SigningAlgSchema, SoftBindingSource, SoftBindingSource_Tags, SoftBindingType, StatusCodes, StreamSession, StreamVerifier, StreamVerifierOptions, Text, TextSelector, TextSelectorRange, Time, TimeType, Timespan, Trust, UnitType, UriOrResource, UriOrResource_Tags, ValidationCode, ValidationCodeKind, ValidationResults, ValidationState, ValidationStatus, Verdict, VerdictRule, Verdict_Tags, c2paTrustList, c2paTsaTrustList, computeSoftBinding, ffi_trylimbo_sdk_verifier_default as default, devCa, parse, resource, uniffiInitAsync };

package/package.json

@@ -1,12 +1,12 @@
 {
   "optionalDependencies": {
-    "@trylimbo/sdk-verifier-linux-arm64-gnu": "0.2.25-canary.37",
-    "@trylimbo/sdk-verifier-linux-x64-gnu": "0.2.25-canary.37",
+    "@trylimbo/sdk-verifier-linux-arm64-gnu": "0.2.25-canary.38",
+    "@trylimbo/sdk-verifier-linux-x64-gnu": "0.2.25-canary.38",
     "@ubjs/node-linux-arm64-gnu": "0.31.0-5",
     "@ubjs/node-linux-x64-gnu": "0.31.0-5"
   },
   "name": "@trylimbo/sdk-verifier",
-  "version": "0.2.25-canary.37",
+  "version": "0.2.25-canary.38",
   "license": "UNLICENSED",
   "repository": {
     "type": "git",