@uncefact/untp-utils 0.1.0 → 0.3.0

package/build/bundle/fallback.test.js

@@ -0,0 +1,124 @@
+import { jest } from '@jest/globals';
+import { isHostDeliveryFailure, withBundledFallback } from './fallback.js';
+import { ResolverHttpError, ResolverNetworkError } from '../resolvers/errors.js';
+import { PrivateAddressError, ResolutionEmptyError, ResolutionFailedError } from '../node/errors.js';
+import { SchemaLoaderNetworkError } from '../loaders/errors.js';
+const BUNDLED = 'https://untp.unece.org/artefacts/schema/v0.7.0/dpp/DigitalProductPassport.json';
+const UNBUNDLED = 'https://untp.unece.org/artefacts/schema/v9.9.9/dpp/DigitalProductPassport.json';
+describe('withBundledFallback', () => {
+    it('returns the fetched value and never consults the bundle when the fetch succeeds', async () => {
+        const onBundledFallback = jest.fn();
+        const result = await withBundledFallback(BUNDLED, { onBundledFallback }, async () => ({ fetched: true }));
+        expect(result).toEqual({ fetched: true });
+        expect(onBundledFallback).not.toHaveBeenCalled();
+    });
+    it('serves the bundled copy and reports the cause when the fetch of a bundled URL fails', async () => {
+        const onBundledFallback = jest.fn();
+        const cause = new ResolverNetworkError(BUNDLED, new Error('getaddrinfo ENOTFOUND untp.unece.org'));
+        const result = (await withBundledFallback(BUNDLED, { onBundledFallback }, async () => {
+            throw cause;
+        }));
+        expect(JSON.stringify(result)).toContain('DigitalProductPassport');
+        expect(onBundledFallback).toHaveBeenCalledWith({ url: BUNDLED, cause });
+    });
+    it('rethrows when the URL is not bundled', async () => {
+        const cause = new ResolverHttpError(UNBUNDLED, 503);
+        await expect(withBundledFallback(UNBUNDLED, {}, async () => {
+            throw cause;
+        })).rejects.toBe(cause);
+    });
+    it('rethrows when the fallback is switched off, even for a bundled URL', async () => {
+        const cause = new ResolverHttpError(BUNDLED, 503);
+        const onBundledFallback = jest.fn();
+        await expect(withBundledFallback(BUNDLED, { bundledFallback: false, onBundledFallback }, async () => {
+            throw cause;
+        })).rejects.toBe(cause);
+        expect(onBundledFallback).not.toHaveBeenCalled();
+    });
+    it('serves the copy when the host name stops resolving, bare (the JSON-LD path)', async () => {
+        const onBundledFallback = jest.fn();
+        const dns = new ResolutionFailedError('untp.unece.org', new Error('getaddrinfo ENOTFOUND untp.unece.org'));
+        const result = await withBundledFallback(BUNDLED, { onBundledFallback }, async () => {
+            throw dns;
+        });
+        expect(JSON.stringify(result)).toContain('DigitalProductPassport');
+        expect(onBundledFallback).toHaveBeenCalledWith({ url: BUNDLED, cause: dns });
+    });
+    it('hands back a fresh copy each time, so a caller mutating one cannot poison the next', async () => {
+        const first = (await withBundledFallback(BUNDLED, {}, async () => {
+            throw new ResolverHttpError(BUNDLED, 503);
+        }));
+        first.required = ['mutated'];
+        const second = (await withBundledFallback(BUNDLED, {}, async () => {
+            throw new ResolverHttpError(BUNDLED, 503);
+        }));
+        expect(second.required).not.toEqual(['mutated']);
+    });
+    it('never covers a URL the SSRF guard refused, even when wrapped by the schema loader', async () => {
+        const onBundledFallback = jest.fn();
+        const guard = new PrivateAddressError(BUNDLED, ['10.0.0.5']);
+        await expect(withBundledFallback(BUNDLED, { onBundledFallback }, async () => {
+            throw guard;
+        })).rejects.toBe(guard);
+        const wrapped = new SchemaLoaderNetworkError(BUNDLED, guard);
+        await expect(withBundledFallback(BUNDLED, { onBundledFallback }, async () => {
+            throw wrapped;
+        })).rejects.toBe(wrapped);
+        expect(onBundledFallback).not.toHaveBeenCalled();
+    });
+    it('never covers an error that is not a typed resolver or loader failure', async () => {
+        const bug = new TypeError('cannot read properties of undefined');
+        await expect(withBundledFallback(BUNDLED, {}, async () => {
+            throw bug;
+        })).rejects.toBe(bug);
+    });
+    it('still serves the copy when the listener throws', async () => {
+        const result = await withBundledFallback(BUNDLED, {
+            onBundledFallback: () => {
+                throw new Error('logger down');
+            },
+        }, async () => {
+            throw new ResolverHttpError(BUNDLED, 403);
+        });
+        expect(JSON.stringify(result)).toContain('DigitalProductPassport');
+    });
+});
+describe('isHostDeliveryFailure', () => {
+    it.each([
+        ['resolver network', new ResolverNetworkError(BUNDLED, new Error('ENOTFOUND')), true],
+        ['resolver http 403', new ResolverHttpError(BUNDLED, 403), true],
+        [
+            'DNS resolution failed (the founding outage)',
+            new ResolutionFailedError('untp.unece.org', new Error('ENOTFOUND')),
+            true,
+        ],
+        ['DNS resolution empty', new ResolutionEmptyError('untp.unece.org'), true],
+        [
+            'contradictory resolver metadata',
+            new ResolutionFailedError('untp.unece.org', new Error('address does not match family')),
+            true,
+        ],
+        [
+            'DNS failure wrapped by the schema loader',
+            new SchemaLoaderNetworkError(BUNDLED, new ResolutionFailedError('untp.unece.org', new Error('ENOTFOUND'))),
+            false,
+        ],
+        [
+            'schema loader network (never classified any more)',
+            new SchemaLoaderNetworkError(BUNDLED, new Error('ENOTFOUND')),
+            false,
+        ],
+        ['guard rejection', new PrivateAddressError(BUNDLED, ['127.0.0.1']), false],
+        [
+            'guard rejection wrapped',
+            new SchemaLoaderNetworkError(BUNDLED, new PrivateAddressError(BUNDLED, ['127.0.0.1'])),
+            false,
+        ],
+        ['plain Error', new Error('boom'), false],
+        ['TypeError', new TypeError('boom'), false],
+        ['not an error', 'boom', false],
+    ])('%s -> %s', (_label, error, expected) => {
+        expect(isHostDeliveryFailure(error)).toBe(expected);
+    });
+});
+//# sourceMappingURL=fallback.test.js.map

package/build/bundle/fallback.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fallback.test.js","sourceRoot":"","sources":["../../src/bundle/fallback.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACrG,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,OAAO,GAAG,gFAAgF,CAAC;AACjG,MAAM,SAAS,GAAG,gFAAgF,CAAC;AAEnG,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,iBAAiB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1G,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,iBAAiB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,IAAI,EAAE;YACnF,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAW,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACnE,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpD,MAAM,MAAM,CACV,mBAAmB,CAAC,SAAS,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,KAAK,GAAG,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,iBAAiB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,MAAM,CACV,mBAAmB,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,KAAK,IAAI,EAAE;YACrF,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,iBAAiB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,CAAC;QAC3G,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,IAAI,EAAE;YAClF,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACnE,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,KAAK,GAAG,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC,CAAC,CAA4B,CAAC;QAC/B,KAAK,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,MAAM,mBAAmB,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC,CAAC,CAA4B,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,iBAAiB,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,CACV,mBAAmB,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,MAAM,OAAO,GAAG,IAAI,wBAAwB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7D,MAAM,MAAM,CACV,mBAAmB,CAAC,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,OAAO,CAAC;QAChB,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,MAAM,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;QACjE,MAAM,MAAM,CACV,mBAAmB,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CACH,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,OAAO,EACP;YACE,iBAAiB,EAAE,GAAG,EAAE;gBACtB,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;YACjC,CAAC;SACF,EACD,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAC5C,CAAC,CACF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,kBAAkB,EAAE,IAAI,oBAAoB,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,IAAI,CAAC;QACrF,CAAC,mBAAmB,EAAE,IAAI,iBAAiB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC;QAChE;YACE,6CAA6C;YAC7C,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YACnE,IAAI;SACL;QACD,CAAC,sBAAsB,EAAE,IAAI,oBAAoB,CAAC,gBAAgB,CAAC,EAAE,IAAI,CAAC;QAC1E;YACE,iCAAiC;YACjC,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACvF,IAAI;SACL;QACD;YACE,0CAA0C;YAC1C,IAAI,wBAAwB,CAAC,OAAO,EAAE,IAAI,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YAC1G,KAAK;SACN;QACD;YACE,mDAAmD;YACnD,IAAI,wBAAwB,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;YAC7D,KAAK;SACN;QACD,CAAC,iBAAiB,EAAE,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC;QAC3E;YACE,yBAAyB;YACzB,IAAI,wBAAwB,CAAC,OAAO,EAAE,IAAI,mBAAmB,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;YACtF,KAAK;SACN;QACD,CAAC,aAAa,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QACzC,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAC3C,CAAC,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC;KAChC,CAAC,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;QACzC,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/bundle/index.d.ts

@@ -0,0 +1,4 @@
+/** Bundled artefacts keyed by the published URL consumers request. */
+export declare const BUNDLED_ARTEFACTS: ReadonlyMap<string, Record<string, unknown>>;
+/** UNTP versions the bundle carries, ascending. */
+export declare const BUNDLED_UNTP_VERSIONS: readonly string[];

package/build/bundle/index.js

@@ -0,0 +1,77 @@
+// Generated by scripts/refresh-artefacts.mjs. Do not edit by hand.
+import context_vcdm_2_credentials from './artefacts/context/vcdm/2/credentials.js';
+import schema_vcdm_2_verifiable_credential from './artefacts/schema/vcdm/2/verifiable-credential.js';
+import schema_untp_0_7_0_dpp from './artefacts/schema/untp/0.7.0/dpp.js';
+import schema_untp_0_7_0_dcc from './artefacts/schema/untp/0.7.0/dcc.js';
+import schema_untp_0_7_0_dfr from './artefacts/schema/untp/0.7.0/dfr.js';
+import schema_untp_0_7_0_dia from './artefacts/schema/untp/0.7.0/dia.js';
+import schema_untp_0_7_0_dte from './artefacts/schema/untp/0.7.0/dte.js';
+import schema_untp_0_7_0_cvc from './artefacts/schema/untp/0.7.0/cvc.js';
+import schema_untp_0_7_0_linkset from './artefacts/schema/untp/0.7.0/linkset.js';
+import context_untp_0_7_0_untp from './artefacts/context/untp/0.7.0/untp.js';
+import schema_untp_0_6_0_dpp from './artefacts/schema/untp/0.6.0/dpp.js';
+import context_untp_0_6_0_dpp from './artefacts/context/untp/0.6.0/dpp.js';
+import schema_untp_0_6_0_dcc from './artefacts/schema/untp/0.6.0/dcc.js';
+import context_untp_0_6_0_dcc from './artefacts/context/untp/0.6.0/dcc.js';
+import schema_untp_0_6_0_dfr from './artefacts/schema/untp/0.6.0/dfr.js';
+import context_untp_0_6_0_dfr from './artefacts/context/untp/0.6.0/dfr.js';
+import schema_untp_0_6_0_dia from './artefacts/schema/untp/0.6.0/dia.js';
+import context_untp_0_6_0_dia from './artefacts/context/untp/0.6.0/dia.js';
+import schema_untp_0_6_0_dte from './artefacts/schema/untp/0.6.0/dte.js';
+import context_untp_0_6_0_dte from './artefacts/context/untp/0.6.0/dte.js';
+import schema_untp_0_6_1_dpp from './artefacts/schema/untp/0.6.1/dpp.js';
+import context_untp_0_6_1_dpp from './artefacts/context/untp/0.6.1/dpp.js';
+import schema_untp_0_6_1_dcc from './artefacts/schema/untp/0.6.1/dcc.js';
+import context_untp_0_6_1_dcc from './artefacts/context/untp/0.6.1/dcc.js';
+import schema_untp_0_6_1_dfr from './artefacts/schema/untp/0.6.1/dfr.js';
+import context_untp_0_6_1_dfr from './artefacts/context/untp/0.6.1/dfr.js';
+import schema_untp_0_6_1_dia from './artefacts/schema/untp/0.6.1/dia.js';
+import context_untp_0_6_1_dia from './artefacts/context/untp/0.6.1/dia.js';
+import schema_untp_0_6_1_dte from './artefacts/schema/untp/0.6.1/dte.js';
+import context_untp_0_6_1_dte from './artefacts/context/untp/0.6.1/dte.js';
+/** Bundled artefacts keyed by the published URL consumers request. */
+export const BUNDLED_ARTEFACTS = new Map([
+    ['https://www.w3.org/ns/credentials/v2', context_vcdm_2_credentials],
+    ['https://w3c.github.io/vc-data-model/schema/verifiable-credential/verifiable-credential-schema.json', schema_vcdm_2_verifiable_credential],
+    ['https://untp.unece.org/artefacts/schema/v0.7.0/dpp/DigitalProductPassport.json', schema_untp_0_7_0_dpp],
+    ['https://untp.unece.org/artefacts/schema/v0.7.0/dcc/ConformityCredential.json', schema_untp_0_7_0_dcc],
+    ['https://untp.unece.org/artefacts/schema/v0.7.0/dfr/DigitalFacilityRecord.json', schema_untp_0_7_0_dfr],
+    ['https://untp.unece.org/artefacts/schema/v0.7.0/dia/DigitalIdentityAnchor.json', schema_untp_0_7_0_dia],
+    ['https://untp.unece.org/artefacts/schema/v0.7.0/dte/DigitalTraceabilityEvent.json', schema_untp_0_7_0_dte],
+    ['https://untp.unece.org/artefacts/schema/v0.7.0/cvc/ConformityScheme.json', schema_untp_0_7_0_cvc],
+    ['https://untp.unece.org/artefacts/schema/v0.7.0/idr/LinksetSchema.json', schema_untp_0_7_0_linkset],
+    ['https://vocabulary.uncefact.org/untp/0.7.0/context/', context_untp_0_7_0_untp],
+    ['https://test.uncefact.org/vocabulary/untp/dpp/untp-dpp-schema-0.6.0.json', schema_untp_0_6_0_dpp],
+    ['https://test.uncefact.org/vocabulary/untp/dpp/0.6.0/', context_untp_0_6_0_dpp],
+    ['https://test.uncefact.org/vocabulary/untp/dpp/0.6.0/context/', context_untp_0_6_0_dpp],
+    ['https://test.uncefact.org/vocabulary/untp/dcc/untp-dcc-schema-0.6.0.json', schema_untp_0_6_0_dcc],
+    ['https://test.uncefact.org/vocabulary/untp/dcc/0.6.0/', context_untp_0_6_0_dcc],
+    ['https://test.uncefact.org/vocabulary/untp/dcc/0.6.0/context/', context_untp_0_6_0_dcc],
+    ['https://test.uncefact.org/vocabulary/untp/dfr/untp-dfr-schema-0.6.0.json', schema_untp_0_6_0_dfr],
+    ['https://test.uncefact.org/vocabulary/untp/dfr/0.6.0/', context_untp_0_6_0_dfr],
+    ['https://test.uncefact.org/vocabulary/untp/dfr/0.6.0/context/', context_untp_0_6_0_dfr],
+    ['https://test.uncefact.org/vocabulary/untp/dia/untp-dia-schema-0.6.0.json', schema_untp_0_6_0_dia],
+    ['https://test.uncefact.org/vocabulary/untp/dia/0.6.0/', context_untp_0_6_0_dia],
+    ['https://test.uncefact.org/vocabulary/untp/dia/0.6.0/context/', context_untp_0_6_0_dia],
+    ['https://test.uncefact.org/vocabulary/untp/dte/untp-dte-schema-0.6.0.json', schema_untp_0_6_0_dte],
+    ['https://test.uncefact.org/vocabulary/untp/dte/0.6.0/', context_untp_0_6_0_dte],
+    ['https://test.uncefact.org/vocabulary/untp/dte/0.6.0/context/', context_untp_0_6_0_dte],
+    ['https://test.uncefact.org/vocabulary/untp/dpp/untp-dpp-schema-0.6.1.json', schema_untp_0_6_1_dpp],
+    ['https://test.uncefact.org/vocabulary/untp/dpp/0.6.1/', context_untp_0_6_1_dpp],
+    ['https://test.uncefact.org/vocabulary/untp/dpp/0.6.1/context/', context_untp_0_6_1_dpp],
+    ['https://test.uncefact.org/vocabulary/untp/dcc/untp-dcc-schema-0.6.1.json', schema_untp_0_6_1_dcc],
+    ['https://test.uncefact.org/vocabulary/untp/dcc/0.6.1/', context_untp_0_6_1_dcc],
+    ['https://test.uncefact.org/vocabulary/untp/dcc/0.6.1/context/', context_untp_0_6_1_dcc],
+    ['https://test.uncefact.org/vocabulary/untp/dfr/untp-dfr-schema-0.6.1.json', schema_untp_0_6_1_dfr],
+    ['https://test.uncefact.org/vocabulary/untp/dfr/0.6.1/', context_untp_0_6_1_dfr],
+    ['https://test.uncefact.org/vocabulary/untp/dfr/0.6.1/context/', context_untp_0_6_1_dfr],
+    ['https://test.uncefact.org/vocabulary/untp/dia/untp-dia-schema-0.6.1.json', schema_untp_0_6_1_dia],
+    ['https://test.uncefact.org/vocabulary/untp/dia/0.6.1/', context_untp_0_6_1_dia],
+    ['https://test.uncefact.org/vocabulary/untp/dia/0.6.1/context/', context_untp_0_6_1_dia],
+    ['https://test.uncefact.org/vocabulary/untp/dte/untp-dte-schema-0.6.1.json', schema_untp_0_6_1_dte],
+    ['https://test.uncefact.org/vocabulary/untp/dte/0.6.1/', context_untp_0_6_1_dte],
+    ['https://test.uncefact.org/vocabulary/untp/dte/0.6.1/context/', context_untp_0_6_1_dte],
+]);
+/** UNTP versions the bundle carries, ascending. */
+export const BUNDLED_UNTP_VERSIONS = ["0.6.0", "0.6.1", "0.7.0"];
+//# sourceMappingURL=index.js.map

package/build/bundle/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bundle/index.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAEnE,OAAO,0BAA0B,MAAM,2CAA2C,CAAC;AACnF,OAAO,mCAAmC,MAAM,oDAAoD,CAAC;AACrG,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,yBAAyB,MAAM,0CAA0C,CAAC;AACjF,OAAO,uBAAuB,MAAM,wCAAwC,CAAC;AAC7E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAC3E,OAAO,qBAAqB,MAAM,sCAAsC,CAAC;AACzE,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;AAE3E,sEAAsE;AACtE,MAAM,CAAC,MAAM,iBAAiB,GAAiD,IAAI,GAAG,CAAkC;IACtH,CAAC,sCAAsC,EAAE,0BAA0B,CAAC;IACpE,CAAC,oGAAoG,EAAE,mCAAmC,CAAC;IAC3I,CAAC,gFAAgF,EAAE,qBAAqB,CAAC;IACzG,CAAC,8EAA8E,EAAE,qBAAqB,CAAC;IACvG,CAAC,+EAA+E,EAAE,qBAAqB,CAAC;IACxG,CAAC,+EAA+E,EAAE,qBAAqB,CAAC;IACxG,CAAC,kFAAkF,EAAE,qBAAqB,CAAC;IAC3G,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,uEAAuE,EAAE,yBAAyB,CAAC;IACpG,CAAC,qDAAqD,EAAE,uBAAuB,CAAC;IAChF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;IACxF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;IACxF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;IACxF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;IACxF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;IACxF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;IACxF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;IACxF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;IACxF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;IACxF,CAAC,0EAA0E,EAAE,qBAAqB,CAAC;IACnG,CAAC,sDAAsD,EAAE,sBAAsB,CAAC;IAChF,CAAC,8DAA8D,EAAE,sBAAsB,CAAC;CACzF,CAAC,CAAC;AAEH,mDAAmD;AACnD,MAAM,CAAC,MAAM,qBAAqB,GAAsB,CAAC,OAAO,EAAC,OAAO,EAAC,OAAO,CAAC,CAAC"}

package/build/bundle/lookup.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Lookup over the bundled UNTP artefacts (see `scripts/refresh-artefacts.mjs`
+ * and `artefacts/manifest.json`). The bundle itself is imported lazily so a
+ * consumer that never needs the fallback never loads it.
+ */
+/** Trailing-slash and scheme-case differences never mean a different artefact. */
+export declare function normaliseArtefactUrl(url: string): string;
+/**
+ * The bundled copy of the artefact published at `url`, or `undefined` when the
+ * bundle does not carry it. Each call returns a fresh clone: validators such
+ * as Ajv mutate the documents they are given, and a mutation must not leak
+ * into every later fallback in the process.
+ */
+export declare function findBundledArtefact(url: string): Promise<Record<string, unknown> | undefined>;

package/build/bundle/lookup.js

@@ -0,0 +1,40 @@
+/**
+ * Lookup over the bundled UNTP artefacts (see `scripts/refresh-artefacts.mjs`
+ * and `artefacts/manifest.json`). The bundle itself is imported lazily so a
+ * consumer that never needs the fallback never loads it.
+ */
+/** Trailing-slash and scheme-case differences never mean a different artefact. */
+export function normaliseArtefactUrl(url) {
+    try {
+        const parsed = new URL(url);
+        parsed.hash = '';
+        const path = parsed.pathname.replace(/\/+$/, '');
+        return `${parsed.protocol}//${parsed.host.toLowerCase()}${path}${parsed.search}`;
+    }
+    catch {
+        return url.replace(/\/+$/, '');
+    }
+}
+let index;
+async function bundledByNormalisedUrl() {
+    if (!index) {
+        index = import('./index.js').then(({ BUNDLED_ARTEFACTS }) => {
+            const map = new Map();
+            for (const [url, artefact] of BUNDLED_ARTEFACTS)
+                map.set(normaliseArtefactUrl(url), artefact);
+            return map;
+        });
+    }
+    return index;
+}
+/**
+ * The bundled copy of the artefact published at `url`, or `undefined` when the
+ * bundle does not carry it. Each call returns a fresh clone: validators such
+ * as Ajv mutate the documents they are given, and a mutation must not leak
+ * into every later fallback in the process.
+ */
+export async function findBundledArtefact(url) {
+    const artefact = (await bundledByNormalisedUrl()).get(normaliseArtefactUrl(url));
+    return artefact === undefined ? undefined : structuredClone(artefact);
+}
+//# sourceMappingURL=lookup.js.map

package/build/bundle/lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.js","sourceRoot":"","sources":["../../src/bundle/lookup.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjD,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,IAAI,KAAwE,CAAC;AAE7E,KAAK,UAAU,sBAAsB;IACnC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE;YAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAmC,CAAC;YACvD,KAAK,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,iBAAiB;gBAAE,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC9F,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW;IACnD,MAAM,QAAQ,GAAG,CAAC,MAAM,sBAAsB,EAAE,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;AACxE,CAAC"}

package/build/bundle/lookup.test.d.ts

@@ -0,0 +1 @@
+export {};

package/build/bundle/lookup.test.js

@@ -0,0 +1,70 @@
+import { findBundledArtefact, normaliseArtefactUrl } from './lookup.js';
+describe('normaliseArtefactUrl', () => {
+    it.each([
+        ['https://vocabulary.uncefact.org/untp/0.7.0/context/', 'https://vocabulary.uncefact.org/untp/0.7.0/context'],
+        ['https://VOCABULARY.uncefact.org/untp/0.7.0/context', 'https://vocabulary.uncefact.org/untp/0.7.0/context'],
+        [
+            'https://untp.unece.org/artefacts/schema/v0.7.0/dpp/DigitalProductPassport.json#frag',
+            'https://untp.unece.org/artefacts/schema/v0.7.0/dpp/DigitalProductPassport.json',
+        ],
+    ])('%s -> %s', (input, expected) => {
+        expect(normaliseArtefactUrl(input)).toBe(expected);
+    });
+});
+describe('findBundledArtefact', () => {
+    it('returns the bundled v0.7.0 DPP schema for its published URL', async () => {
+        const schema = (await findBundledArtefact('https://untp.unece.org/artefacts/schema/v0.7.0/dpp/DigitalProductPassport.json'));
+        expect(schema).toBeDefined();
+        expect(JSON.stringify(schema)).toContain('DigitalProductPassport');
+    });
+    it('matches the unified 0.7.0 context with or without its trailing slash', async () => {
+        const withSlash = await findBundledArtefact('https://vocabulary.uncefact.org/untp/0.7.0/context/');
+        const without = await findBundledArtefact('https://vocabulary.uncefact.org/untp/0.7.0/context');
+        expect(withSlash).toBeDefined();
+        expect(without).toEqual(withSlash);
+        expect(Object.keys(withSlash)).toContain('@context');
+    });
+    it('returns the VCDM v2 context and schema', async () => {
+        const context = (await findBundledArtefact('https://www.w3.org/ns/credentials/v2'));
+        expect(Object.keys(context)).toContain('@context');
+        expect(await findBundledArtefact('https://w3c.github.io/vc-data-model/schema/verifiable-credential/verifiable-credential-schema.json')).toBeDefined();
+    });
+    it('returns the legacy 0.6.0 DPP schema and context', async () => {
+        expect(await findBundledArtefact('https://test.uncefact.org/vocabulary/untp/dpp/untp-dpp-schema-0.6.0.json')).toBeDefined();
+        expect(await findBundledArtefact('https://test.uncefact.org/vocabulary/untp/dpp/0.6.0/context/')).toBeDefined();
+    });
+    it('returns undefined for a version or host the bundle does not carry', async () => {
+        expect(await findBundledArtefact('https://untp.unece.org/artefacts/schema/v9.9.9/dpp/DigitalProductPassport.json')).toBeUndefined();
+        expect(await findBundledArtefact('https://aatp.foodagility.com/schema/aatp-dlp-schema-0.4.1-beta1.json')).toBeUndefined();
+    });
+    it('carries every artefact the manifest lists', async () => {
+        const { readFile } = await import('node:fs/promises');
+        const manifest = JSON.parse(await readFile(new URL('../../artefacts/manifest.json', import.meta.url), 'utf8'));
+        expect(manifest.artefacts.length).toBeGreaterThanOrEqual(30);
+        for (const { url } of manifest.artefacts) {
+            expect(await findBundledArtefact(url)).toBeDefined();
+        }
+    });
+});
+describe('bundle integrity', () => {
+    it('serves every artefact with the content hash the manifest records', async () => {
+        const { readFile } = await import('node:fs/promises');
+        const { createHash } = await import('node:crypto');
+        const manifest = JSON.parse(await readFile(new URL('../../artefacts/manifest.json', import.meta.url), 'utf8'));
+        const sortKeys = (value) => Array.isArray(value)
+            ? value.map(sortKeys)
+            : value !== null && typeof value === 'object'
+                ? Object.fromEntries(Object.keys(value)
+                    .sort()
+                    .map((key) => [key, sortKeys(value[key])]))
+                : value;
+        for (const { url, sha256 } of manifest.artefacts) {
+            const served = await findBundledArtefact(url);
+            expect(served).toBeDefined();
+            expect(createHash('sha256')
+                .update(JSON.stringify(sortKeys(served)))
+                .digest('hex')).toBe(sha256);
+        }
+    });
+});
+//# sourceMappingURL=lookup.test.js.map

package/build/bundle/lookup.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lookup.test.js","sourceRoot":"","sources":["../../src/bundle/lookup.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAExE,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,qDAAqD,EAAE,oDAAoD,CAAC;QAC7G,CAAC,oDAAoD,EAAE,oDAAoD,CAAC;QAC5G;YACE,qFAAqF;YACrF,gFAAgF;SACjF;KACF,CAAC,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QACjC,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,CAAC,MAAM,mBAAmB,CACvC,gFAAgF,CACjF,CAAiD,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,qDAAqD,CAAC,CAAC;QACnG,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,oDAAoD,CAAC,CAAC;QAChG,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAmB,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,GAAG,CAAC,MAAM,mBAAmB,CAAC,sCAAsC,CAAC,CAA4B,CAAC;QAC/G,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CACJ,MAAM,mBAAmB,CACvB,oGAAoG,CACrG,CACF,CAAC,WAAW,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,CACJ,MAAM,mBAAmB,CAAC,0EAA0E,CAAC,CACtG,CAAC,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,MAAM,mBAAmB,CAAC,8DAA8D,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAClH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,CACJ,MAAM,mBAAmB,CAAC,gFAAgF,CAAC,CAC5G,CAAC,aAAa,EAAE,CAAC;QAClB,MAAM,CACJ,MAAM,mBAAmB,CAAC,sEAAsE,CAAC,CAClG,CAAC,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAE5G,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,CAAC,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAE5G,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAW,EAAE,CAC3C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAClB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;YACrB,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAC3C,CAAC,CAAC,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC;qBACzB,IAAI,EAAE;qBACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAE,KAAiC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAC1E;gBACH,CAAC,CAAC,KAAK,CAAC;QACd,KAAK,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACjD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7B,MAAM,CACJ,UAAU,CAAC,QAAQ,CAAC;iBACjB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;iBACxC,MAAM,CAAC,KAAK,CAAC,CACjB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/bundle/public.d.ts

@@ -0,0 +1,25 @@
+export { findBundledArtefact, normaliseArtefactUrl } from './lookup.js';
+export { isHostDeliveryFailure } from './fallback.js';
+export type { BundledFallbackEvent, BundledFallbackOptions } from './fallback.js';
+/** Every bundled artefact keyed by its published URL (and each alias it is also published under), as fresh clones. */
+export declare function loadBundledArtefacts(): Promise<ReadonlyMap<string, Record<string, unknown>>>;
+/** UNTP versions the bundle carries, ascending (for example `['0.6.0', '0.6.1', '0.7.0']`). */
+export declare function bundledUntpVersions(): Promise<readonly string[]>;
+/**
+ * The bundled JSON Schema for a UNTP credential type and version, for example
+ * `bundledSchema('DigitalProductPassport', '0.6.0')`, or `undefined` when the
+ * bundle does not carry that version. `type` accepts the names
+ * `buildUntpArtefactUrls` accepts.
+ */
+export declare function bundledSchema(type: string, version: string): Promise<Record<string, unknown> | undefined>;
+/**
+ * The bundled JSON-LD context a UNTP credential type declares at a version:
+ * the per-type context before 0.7.0, the unified UNTP context from 0.7.0.
+ */
+export declare function bundledContext(type: string, version: string): Promise<Record<string, unknown> | undefined>;
+/** The bundled Identity Resolver link set schema for a UNTP version (published from 0.7.0). */
+export declare function bundledLinkSetSchema(version: string): Promise<Record<string, unknown> | undefined>;
+/** The W3C Verifiable Credentials Data Model context for a major version (`'2'` today). */
+export declare function bundledVcdmContext(version: '2'): Promise<Record<string, unknown> | undefined>;
+/** The W3C Verifiable Credentials Data Model JSON Schema for a major version (`'2'` today). */
+export declare function bundledVcdmSchema(version: '2'): Promise<Record<string, unknown> | undefined>;

package/build/bundle/public.js

@@ -0,0 +1,56 @@
+/**
+ * Public entry for the bundled UNTP and VCDM artefacts
+ * (`@uncefact/untp-utils/bundled-artefacts`).
+ *
+ * The loaders use these copies as a fallback when a fetch fails; a consumer
+ * can also read them directly, for example to validate against a schema
+ * without any network access. Keyed by the URL the artefact is published at,
+ * which is the URL a credential or link set references. The bundle is around
+ * a megabyte and loads on first use, not at import.
+ */
+import { findBundledArtefact } from './lookup.js';
+export { findBundledArtefact, normaliseArtefactUrl } from './lookup.js';
+export { isHostDeliveryFailure } from './fallback.js';
+/** Every bundled artefact keyed by its published URL (and each alias it is also published under), as fresh clones. */
+export async function loadBundledArtefacts() {
+    const { BUNDLED_ARTEFACTS } = await import('./index.js');
+    return new Map([...BUNDLED_ARTEFACTS].map(([url, artefact]) => [url, structuredClone(artefact)]));
+}
+/** UNTP versions the bundle carries, ascending (for example `['0.6.0', '0.6.1', '0.7.0']`). */
+export async function bundledUntpVersions() {
+    const { BUNDLED_UNTP_VERSIONS } = await import('./index.js');
+    return BUNDLED_UNTP_VERSIONS;
+}
+/**
+ * The bundled JSON Schema for a UNTP credential type and version, for example
+ * `bundledSchema('DigitalProductPassport', '0.6.0')`, or `undefined` when the
+ * bundle does not carry that version. `type` accepts the names
+ * `buildUntpArtefactUrls` accepts.
+ */
+export async function bundledSchema(type, version) {
+    const { buildUntpArtefactUrls } = await import('../artefacts/urls.js');
+    return findBundledArtefact(buildUntpArtefactUrls(type, version).schemaUrl);
+}
+/**
+ * The bundled JSON-LD context a UNTP credential type declares at a version:
+ * the per-type context before 0.7.0, the unified UNTP context from 0.7.0.
+ */
+export async function bundledContext(type, version) {
+    const { buildUntpArtefactUrls } = await import('../artefacts/urls.js');
+    return findBundledArtefact(buildUntpArtefactUrls(type, version).contextUrl);
+}
+/** The bundled Identity Resolver link set schema for a UNTP version (published from 0.7.0). */
+export async function bundledLinkSetSchema(version) {
+    const { buildLinkSetSchemaUrl } = await import('../artefacts/urls.js');
+    return findBundledArtefact(buildLinkSetSchemaUrl(version));
+}
+/** The W3C Verifiable Credentials Data Model context for a major version (`'2'` today). */
+export async function bundledVcdmContext(version) {
+    return findBundledArtefact(`https://www.w3.org/ns/credentials/v${version}`);
+}
+/** The W3C Verifiable Credentials Data Model JSON Schema for a major version (`'2'` today). */
+export async function bundledVcdmSchema(version) {
+    void version;
+    return findBundledArtefact('https://w3c.github.io/vc-data-model/schema/verifiable-credential/verifiable-credential-schema.json');
+}
+//# sourceMappingURL=public.js.map

package/build/bundle/public.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.js","sourceRoot":"","sources":["../../src/bundle/public.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGtD,sHAAsH;AACtH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACzD,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7D,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IAC/D,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACvE,OAAO,mBAAmB,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe;IAChE,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACvE,OAAO,mBAAmB,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC;AAC9E,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAe;IACxD,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACvE,OAAO,mBAAmB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAY;IACnD,OAAO,mBAAmB,CAAC,sCAAsC,OAAO,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAY;IAClD,KAAK,OAAO,CAAC;IACb,OAAO,mBAAmB,CACxB,oGAAoG,CACrG,CAAC;AACJ,CAAC"}

package/build/bundle/public.test.d.ts

@@ -0,0 +1 @@
+export {};

package/build/bundle/public.test.js

@@ -0,0 +1,35 @@
+import { bundledContext, bundledLinkSetSchema, bundledSchema, bundledUntpVersions, bundledVcdmContext, bundledVcdmSchema, findBundledArtefact, loadBundledArtefacts, } from './public.js';
+describe('bundled-artefacts public entry', () => {
+    it('exposes every bundled artefact keyed by its published URL', async () => {
+        const all = await loadBundledArtefacts();
+        expect(all.size).toBeGreaterThanOrEqual(30);
+        expect(all.has('https://www.w3.org/ns/credentials/v2')).toBe(true);
+        expect(all.has('https://untp.unece.org/artefacts/schema/v0.7.0/idr/LinksetSchema.json')).toBe(true);
+    });
+    it('lets a consumer read a schema without the network', async () => {
+        const linkset = (await findBundledArtefact('https://untp.unece.org/artefacts/schema/v0.7.0/idr/LinksetSchema.json'));
+        expect(linkset.title).toMatch(/linkset/i);
+    });
+    it('lists the UNTP versions it carries', async () => {
+        expect(await bundledUntpVersions()).toEqual(['0.6.0', '0.6.1', '0.7.0']);
+    });
+    it('returns a schema and context by credential type and version', async () => {
+        const legacy = await bundledSchema('DigitalProductPassport', '0.6.0');
+        expect(JSON.stringify(legacy)).toContain('DigitalProductPassport');
+        const legacyContext = (await bundledContext('DigitalProductPassport', '0.6.0'));
+        expect(Object.keys(legacyContext)).toContain('@context');
+        const unified = await bundledContext('DigitalConformityCredential', '0.7.0');
+        expect(unified).toEqual(await bundledContext('DigitalProductPassport', '0.7.0'));
+        expect(await bundledSchema('DigitalProductPassport', '9.9.9')).toBeUndefined();
+    });
+    it('rejects an unknown credential type the way the URL builder does', async () => {
+        await expect(bundledSchema('NotAType', '0.7.0')).rejects.toThrow(/Unknown UNTP artefact type/);
+    });
+    it('returns the link set schema and the VCDM pair by version', async () => {
+        expect(await bundledLinkSetSchema('0.7.0')).toBeDefined();
+        expect(await bundledLinkSetSchema('0.6.0')).toBeUndefined();
+        expect(Object.keys((await bundledVcdmContext('2')))).toContain('@context');
+        expect(await bundledVcdmSchema('2')).toBeDefined();
+    });
+});
+//# sourceMappingURL=public.test.js.map

package/build/bundle/public.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public.test.js","sourceRoot":"","sources":["../../src/bundle/public.test.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,MAAM,oBAAoB,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,uEAAuE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,OAAO,GAAG,CAAC,MAAM,mBAAmB,CACxC,uEAAuE,CACxE,CAAuB,CAAC;QACzB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,CAAC,MAAM,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACnE,MAAM,aAAa,GAAG,CAAC,MAAM,cAAc,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAA4B,CAAC;QAC3G,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,cAAc,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,aAAa,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1D,MAAM,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAW,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACrF,MAAM,CAAC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/bundle/refresh-classify.test.d.ts

@@ -0,0 +1 @@
+export {};

package/build/bundle/refresh-classify.test.js

@@ -0,0 +1,20 @@
+// The refresh script is plain ESM JavaScript outside `src/`, so it is loaded
+// at runtime rather than imported statically (tsc's rootDir is `src`).
+const scriptUrl = new URL('../../scripts/refresh-artefacts.mjs', import.meta.url).href;
+const { classify } = (await import(scriptUrl));
+describe('refresh-artefacts classify', () => {
+    it('reports a copy the bundle does not have', () => {
+        expect(classify(undefined, '{"a":1}')).toBe('missing');
+    });
+    it('treats byte-different but content-equal copies as the same, so a formatter never reads as drift', () => {
+        expect(classify('{\n  "a": 1\n}\n', '{"a":1}')).toBe('same');
+    });
+    it('reports a published copy whose content differs', () => {
+        expect(classify('{"a":1}', '{"a":2}')).toBe('differs');
+    });
+    it('reports an unreadable bundled copy as corrupt rather than as upstream drift', () => {
+        expect(classify('{not json', '{"a":1}')).toBe('corrupt');
+    });
+});
+export {};
+//# sourceMappingURL=refresh-classify.test.js.map

package/build/bundle/refresh-classify.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh-classify.test.js","sourceRoot":"","sources":["../../src/bundle/refresh-classify.test.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,uEAAuE;AACvE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,qCAAqC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACvF,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAE5C,CAAC;AAEF,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,GAAG,EAAE;QACzG,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/build/bundle/refresh-main.test.d.ts

@@ -0,0 +1 @@
+export {};