@veraanchor/verifier 0.0.0-stage → 0.1.0

package/dist/profiles/sourceV1Helpers.js

@@ -0,0 +1,141 @@
+import { posix } from "node:path";
+import { sha3_512Stream } from "../crypto/streamSha3.js";
+import { canonicalizeHfV1Json, hashHfV1, MAX_HF_V1_PAYLOAD_BYTES } from "../hf/hashContractV1.js";
+export const DEFAULT_SOURCE_V1_MAX_BYTES = 1024 * 1024 * 1024;
+const DIGEST = /^[0-9a-f]{128}$/;
+const TEXT_SUFFIXES = new Set([
+    ".txt", ".text", ".csv", ".tsv", ".fasta", ".fa", ".fna", ".ffn", ".faa", ".frn",
+    ".json", ".jsonl", ".ndjson", ".md", ".yaml", ".yml", ".xml", ".html", ".htm",
+]);
+const MEDIA_BY_SUFFIX = {
+    ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".webp": "image/webp",
+    ".gif": "image/gif", ".bmp": "image/bmp", ".tif": "image/tiff", ".tiff": "image/tiff",
+    ".svg": "image/svg+xml", ".txt": "text/plain", ".text": "text/plain", ".csv": "text/csv",
+    ".tsv": "text/tab-separated-values", ".fasta": "chemical/seq-na-fasta", ".fa": "chemical/seq-na-fasta",
+    ".fna": "chemical/seq-na-fasta", ".ffn": "chemical/seq-na-fasta", ".faa": "chemical/seq-aa-fasta",
+    ".frn": "chemical/seq-na-fasta", ".json": "application/json", ".jsonl": "application/x-ndjson",
+    ".ndjson": "application/x-ndjson", ".md": "text/markdown", ".yaml": "application/yaml",
+    ".yml": "application/yaml", ".xml": "application/xml", ".html": "text/html", ".htm": "text/html",
+};
+function hasControlChars(value) {
+    for (let i = 0; i < value.length; i++) {
+        const code = value.charCodeAt(i);
+        if (code <= 31 || code === 127)
+            return true;
+    }
+    return false;
+}
+export function sourceV1Path(value, maxLength) {
+    if (typeof value !== "string" || !value || value.length > maxLength || hasControlChars(value)) {
+        throw new TypeError("Source path must be a bounded relative path");
+    }
+    if (value.trim() !== value || value.includes("\\") || value.startsWith("/") || /^[a-zA-Z]:/.test(value)) {
+        throw new TypeError("Source path is not canonical POSIX relative form");
+    }
+    if (value.split("/").some((segment) => !segment || segment === "." || segment === "..")) {
+        throw new TypeError("Source path contains invalid segments");
+    }
+    if (posix.normalize(value) !== value)
+        throw new TypeError("Source path is not normalized");
+    return value;
+}
+export function sourceV1MediaType(pathRel) {
+    const suffix = posix.extname(pathRel).trim().toLowerCase();
+    return MEDIA_BY_SUFFIX[suffix];
+}
+export function sourceV1TextFile(pathRel) {
+    return TEXT_SUFFIXES.has(posix.extname(pathRel).trim().toLowerCase());
+}
+export function sourceV1PathDigest(pathRel, profile) {
+    if (profile === "dataset") {
+        return hashHfV1({ domain: "va:dataset:path:v1", material: "raw", bytes: Buffer.from(pathRel, "utf8") });
+    }
+    return hashHfV1({ domain: "va:ingest:path:v1", material: "json", value: { path_rel: pathRel } });
+}
+export function sourceV1Leaf(profile, value) {
+    return hashHfV1({
+        domain: profile === "dataset" ? "va:dataset:leaf:v1" : "va:ingest:leaf:v1",
+        material: "json",
+        value: {
+            ...(profile === "ingest" ? { item_kind: value.item_kind } : {}),
+            ...(value.path_rel ? { path_rel: value.path_rel } : {}),
+            ...(value.path_hash ? { path_hash: value.path_hash } : {}),
+            ...(value.media_type ? { media_type: value.media_type } : {}),
+            bytes: value.bytes,
+            sha3_512: value.sha3_512,
+        },
+    });
+}
+export function sourceV1Root(profile, leaves) {
+    if (!leaves.length || leaves.some((leaf) => !DIGEST.test(leaf)))
+        throw new TypeError("Invalid source Merkle leaves");
+    let level = leaves.slice();
+    while (level.length > 1) {
+        const next = [];
+        for (let index = 0; index < level.length; index += 2) {
+            const left = level[index];
+            if (!left)
+                throw new TypeError("Invalid Merkle level");
+            const right = level[index + 1] ?? left;
+            next.push(hashHfV1({ domain: `va:${profile}:node:v1`, material: "raw", bytes: Buffer.from(left + right, "hex") }));
+        }
+        level = next;
+    }
+    const root = level[0];
+    if (!root)
+        throw new TypeError("Invalid source Merkle tree");
+    return root;
+}
+export function sourceV1Mismatch(field, expected, actual) {
+    return Object.freeze({ field, expected, actual });
+}
+export function sourceV1Compare(mismatches, field, expected, actual) {
+    if (expected !== actual)
+        mismatches.push(sourceV1Mismatch(field, expected, actual));
+}
+export function sourceV1SafeLimit(value, field) {
+    if (!Number.isSafeInteger(value) || value < 0)
+        throw new TypeError(`${field} must be a non-negative safe integer`);
+    return value;
+}
+export function sourceV1Limits(limits) {
+    return {
+        total: sourceV1SafeLimit(limits?.max_total_bytes ?? DEFAULT_SOURCE_V1_MAX_BYTES, "max_total_bytes"),
+        file: sourceV1SafeLimit(limits?.max_file_bytes ?? DEFAULT_SOURCE_V1_MAX_BYTES, "max_file_bytes"),
+    };
+}
+export async function sourceV1HashFile(source, maxBytes, normalizeText) {
+    if (!normalizeText) {
+        const result = await sha3_512Stream(source, { max_bytes: maxBytes });
+        return { bytes: result.bytes_hashed, sha3_512: result.digest };
+    }
+    const ceiling = Math.min(maxBytes, MAX_HF_V1_PAYLOAD_BYTES);
+    const chunks = [];
+    let bytes = 0;
+    for await (const chunk of source) {
+        if (!(chunk instanceof Uint8Array))
+            throw new TypeError("Source chunks must be Uint8Array");
+        if (chunk.byteLength > ceiling - bytes)
+            throw new RangeError("Normalized text exceeds source byte limit");
+        bytes += chunk.byteLength;
+        chunks.push(Buffer.from(chunk));
+    }
+    const normalized = Buffer.concat(chunks, bytes).toString("utf8").replace(/\r\n/g, "\n").replace(/\r/g, "\n");
+    return { bytes, sha3_512: hashHfV1({ domain: "va:ingest:file-text:v1", material: "utf8", text: normalized }) };
+}
+export function sourceV1JsonMaterial(value) {
+    const canonical = canonicalizeHfV1Json(value);
+    return {
+        bytes: canonical.byteLength,
+        sha3_512: hashHfV1({ domain: "va:ingest:json:v1", material: "raw", bytes: canonical }),
+    };
+}
+export function sourceV1TextMaterial(text) {
+    if (typeof text !== "string")
+        throw new TypeError("Ingest text material must be a string");
+    return {
+        bytes: Buffer.byteLength(text, "utf8"),
+        sha3_512: hashHfV1({ domain: "va:ingest:text:v1", material: "utf8", text }),
+    };
+}
+//# sourceMappingURL=sourceV1Helpers.js.map

package/dist/profiles/sourceV1Helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sourceV1Helpers.js","sourceRoot":"","sources":["../../src/profiles/sourceV1Helpers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,cAAc,EAAwB,MAAM,yBAAyB,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAKlG,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9D,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAChF,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAC9E,CAAC,CAAC;AACH,MAAM,eAAe,GAAqC;IACxD,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY;IACvF,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY;IACrF,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU;IACxF,MAAM,EAAE,2BAA2B,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,uBAAuB;IACtG,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,uBAAuB;IACjG,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,sBAAsB;IAC9F,SAAS,EAAE,sBAAsB,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB;IACtF,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW;CACjG,CAAC;AAEF,SAAS,eAAe,CAAC,KAAa;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc,EAAE,SAAiB;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxG,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3D,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACxE,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,OAA6B;IAC/E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,QAAQ,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;AACnG,CAAC;AACD,MAAM,UAAU,YAAY,CAC1B,OAA6B,EAC7B,KAAsJ;IAEtJ,OAAO,QAAQ,CAAC;QACd,MAAM,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,mBAAmB;QAC1E,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE;YACL,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;KACF,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,OAA6B,EAAE,MAAyB;IACnF,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACrH,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IAC3B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,OAAO,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACrH,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,QAAiB,EAAE,MAAe;IAChF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AACpD,CAAC;AACD,MAAM,UAAU,eAAe,CAC7B,UAA8B,EAAE,KAAa,EAAE,QAAiB,EAAE,MAAe;IAEjF,IAAI,QAAQ,KAAK,MAAM;QAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACtF,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,KAAa;IAC7D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAC/H,OAAO,KAAe,CAAC;AACzB,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,OAAO;QACL,KAAK,EAAE,iBAAiB,CAAC,MAAM,EAAE,eAAe,IAAI,2BAA2B,EAAE,iBAAiB,CAAC;QACnG,IAAI,EAAE,iBAAiB,CAAC,MAAM,EAAE,cAAc,IAAI,2BAA2B,EAAE,gBAAgB,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAuB,EAAE,QAAgB,EAAE,aAAsB;IAEjE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;QAC5F,IAAI,KAAK,CAAC,UAAU,GAAG,OAAO,GAAG,KAAK;YAAE,MAAM,IAAI,UAAU,CAAC,2CAA2C,CAAC,CAAC;QAC1G,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7G,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AACjH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,SAAS,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO;QACL,KAAK,EAAE,SAAS,CAAC,UAAU;QAC3B,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;KACvF,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC3F,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;QACtC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAC5E,CAAC;AACJ,CAAC"}

package/dist/reports/coreV1.d.ts

@@ -0,0 +1,7 @@
+import type { VerificationReport } from "../contracts/verification.js";
+export declare const VERIFICATION_CORE_SCHEMA_VERSION = "va.verification-core.v1";
+/** Canonical shared findings/observations only; profile-specific assurance is NOT included. */
+export declare function canonicalizeVerificationCoreV1(input: VerificationReport): string;
+/** Unauthenticated content digest, NOT proof that these checks were performed. */
+export declare function computeVerificationCoreDigestV1(input: VerificationReport): string;
+//# sourceMappingURL=coreV1.d.ts.map

package/dist/reports/coreV1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coreV1.d.ts","sourceRoot":"","sources":["../../src/reports/coreV1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGvE,eAAO,MAAM,gCAAgC,4BAA4B,CAAC;AAkK1E,+FAA+F;AAC/F,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAmBhF;AAED,kFAAkF;AAClF,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAIjF"}

package/dist/reports/coreV1.js

@@ -0,0 +1,195 @@
+import { sha3_512Hex } from "../crypto/sha3.js";
+export const VERIFICATION_CORE_SCHEMA_VERSION = "va.verification-core.v1";
+const DOMAIN = "va:verification-core:v1";
+const CHECK_ID = /^[a-z][a-z0-9._:-]{0,159}$/;
+const OBSERVATION_ID = /^[a-z][a-z0-9._:-]{0,127}$/;
+const EXPECTED_KEY = /^[a-z][a-z0-9_]{0,63}$/;
+const HEX_512 = /^[0-9a-f]{128}$/i;
+const SUBJECT_KINDS = ["artifact", "dataset", "ingest", "evidence_package", "merkle_anchor",
+    "merkle_root", "merkle_leaf", "execution", "result"];
+const OUTCOMES = ["pass", "fail", "indeterminate", "unsupported", "skipped"];
+const SOURCES = ["provided_evidence", "public_record", "hedera_mirror", "local_computation"];
+const MAX_CANONICAL_BYTES = 1024 * 1024;
+function record(value, name) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new TypeError(`Invalid ${name}`);
+    const proto = Object.getPrototypeOf(value);
+    if (proto !== Object.prototype && proto !== null)
+        throw new TypeError(`Invalid ${name}`);
+    return value;
+}
+function fields(value, allowed, name) {
+    if (Object.keys(value).some((key) => !allowed.includes(key)))
+        throw new TypeError(`Unknown ${name} field`);
+}
+function items(value, max, name) {
+    if (!Array.isArray(value) || value.length > max)
+        throw new TypeError(`Invalid ${name}`);
+    for (let i = 0; i < value.length; i += 1) {
+        if (!Object.hasOwn(value, i))
+            throw new TypeError(`Sparse ${name}`);
+    }
+    return value;
+}
+function text(value, name, max, nonempty = true) {
+    if (typeof value !== "string" || value.length > max || (nonempty && !value.length)) {
+        throw new TypeError(`Invalid ${name}`);
+    }
+    for (let i = 0; i < value.length; i += 1) {
+        const u = value.charCodeAt(i);
+        if (u >= 0xd800 && u <= 0xdbff) {
+            const next = value.charCodeAt(++i);
+            if (!(next >= 0xdc00 && next <= 0xdfff))
+                throw new TypeError(`Invalid ${name}`);
+        }
+        else if (u >= 0xdc00 && u <= 0xdfff)
+            throw new TypeError(`Invalid ${name}`);
+    }
+    return value;
+}
+function identifier(value, name, pattern) {
+    const result = text(value, name, 160);
+    if (!pattern.test(result))
+        throw new TypeError(`Invalid ${name}`);
+    return result;
+}
+function digest(value, name) {
+    const result = text(value, name, 128);
+    if (!HEX_512.test(result))
+        throw new TypeError(`Invalid ${name}`);
+    return result.toLowerCase();
+}
+function subject(value) {
+    const row = record(value, "verification subject");
+    fields(row, ["kind", "id", "hedera_network"], "subject");
+    if (!SUBJECT_KINDS.includes(row.kind))
+        throw new TypeError("Invalid subject kind");
+    const id = text(row.id, "subject id", 256);
+    if (id.trim() !== id)
+        throw new TypeError("Invalid subject id");
+    if (Object.hasOwn(row, "hedera_network")) {
+        if (row.hedera_network !== "mainnet" && row.hedera_network !== "testnet") {
+            throw new TypeError("Invalid subject network");
+        }
+        return { kind: row.kind, id, hedera_network: row.hedera_network };
+    }
+    return { kind: row.kind, id };
+}
+function commitment(value) {
+    const row = record(value, "expected commitment");
+    const key = identifier(row.key, "expected commitment key", EXPECTED_KEY);
+    if (row.kind === "merkle-root") {
+        fields(row, ["key", "kind", "tree_alg", "root_hash", "leaf_count"], "merkle commitment");
+        if (!["binary-sorted", "binary-sorted-v2", "hf-dataset-v1", "hf-ingest-v1"].includes(row.tree_alg) ||
+            !Number.isSafeInteger(row.leaf_count) || row.leaf_count < 1) {
+            throw new TypeError("Invalid Merkle commitment");
+        }
+        return { key, kind: "merkle-root", tree_alg: row.tree_alg,
+            root_hash: digest(row.root_hash, "root hash"), leaf_count: row.leaf_count };
+    }
+    if (row.kind !== "digest")
+        throw new TypeError("Invalid commitment kind");
+    if (row.contract === "hf-contract-v1") {
+        fields(row, ["key", "kind", "contract", "material", "domain", "digest"], "HF commitment");
+        if (!["json", "utf8", "raw"].includes(row.material))
+            throw new TypeError("Invalid HF material");
+        const domain = text(row.domain, "HF domain", 256);
+        return { key, kind: "digest", contract: "hf-contract-v1", material: row.material,
+            domain, digest: digest(row.digest, "expected digest") };
+    }
+    fields(row, ["key", "kind", "contract", "digest"], "digest commitment");
+    if (row.contract !== "raw-sha3-512" && row.contract !== "core-canonical-json") {
+        throw new TypeError("Invalid digest contract");
+    }
+    return { key, kind: "digest", contract: row.contract, digest: digest(row.digest, "expected digest") };
+}
+function fact(value) {
+    const row = record(value, "verification fact");
+    const key = identifier(row.key, "fact key", CHECK_ID);
+    if (row.state === "available") {
+        fields(row, ["key", "state", "value"], "available fact");
+        if (!Object.hasOwn(row, "value"))
+            throw new TypeError("Missing fact value");
+        const v = row.value;
+        if (typeof v === "number" && (!Number.isFinite(v) || Object.is(v, -0))) {
+            throw new TypeError("Invalid numeric fact");
+        }
+        if (typeof v === "string")
+            text(v, "fact value", 4096, false);
+        else if (v !== null && typeof v !== "number" && typeof v !== "boolean") {
+            throw new TypeError("Invalid fact value");
+        }
+        return { key, state: "available", value: v };
+    }
+    if (row.state !== "unavailable" && row.state !== "not_applicable") {
+        throw new TypeError("Invalid fact state");
+    }
+    fields(row, ["key", "state", "reason_code"], "unavailable fact");
+    if (Object.hasOwn(row, "reason_code")) {
+        return { key, state: row.state,
+            reason_code: row.reason_code === null ? null : text(row.reason_code, "fact reason", 160) };
+    }
+    return { key, state: row.state };
+}
+function unique(values, key, name) {
+    values.sort((a, b) => key(a) < key(b) ? -1 : key(a) > key(b) ? 1 : 0);
+    for (let i = 1; i < values.length; i += 1) {
+        if (key(values[i]) === key(values[i - 1]))
+            throw new TypeError(`Duplicate ${name}`);
+    }
+    return values;
+}
+function observation(value) {
+    const row = record(value, "observation");
+    fields(row, ["id", "subject", "source", "resolver_id", "observed_at", "facts"], "observation");
+    const id = identifier(row.id, "observation id", OBSERVATION_ID);
+    if (!SOURCES.includes(row.source))
+        throw new TypeError("Invalid observation source");
+    const facts = unique(items(row.facts, 256, "observation facts").map(fact), (v) => v.key, "fact key");
+    const result = { id, subject: subject(row.subject), source: row.source };
+    if (Object.hasOwn(row, "resolver_id"))
+        result.resolver_id = text(row.resolver_id, "resolver id", 256);
+    if (Object.hasOwn(row, "observed_at")) {
+        result.observed_at = row.observed_at === null ? null : text(row.observed_at, "observation time", 128);
+    }
+    result.facts = facts;
+    return result;
+}
+function finding(value) {
+    const row = record(value, "finding");
+    fields(row, ["check_id", "outcome", "reason_code", "observation_ids"], "finding");
+    const check_id = identifier(row.check_id, "check id", CHECK_ID);
+    if (!OUTCOMES.includes(row.outcome))
+        throw new TypeError("Invalid finding outcome");
+    const reason_code = row.reason_code === null ? null : text(row.reason_code, "finding reason", 160);
+    const observation_ids = unique(items(row.observation_ids, 32, "finding observation ids")
+        .map((id) => identifier(id, "finding observation id", OBSERVATION_ID)), (id) => id, "finding observation id");
+    return { check_id, outcome: row.outcome, reason_code, observation_ids };
+}
+/** Canonical shared findings/observations only; profile-specific assurance is NOT included. */
+export function canonicalizeVerificationCoreV1(input) {
+    const report = record(input, "verification report");
+    const intent = record(report.intent, "verification intent");
+    fields(intent, ["subject", "expected"], "intent");
+    const expected = unique(items(intent.expected, 32, "expectations").map(commitment), (v) => v.key, "expectation key");
+    const observations = unique(items(report.observations, 32, "observations").map(observation), (v) => v.id, "observation id");
+    const findings = unique(items(report.findings, 512, "findings").map(finding), (v) => v.check_id, "check id");
+    const ids = new Set(observations.map((v) => v.id));
+    for (const entry of findings) {
+        if (entry.observation_ids.some((id) => !ids.has(id)))
+            throw new TypeError("Finding references missing observation");
+    }
+    const canonical = JSON.stringify({ schema_version: VERIFICATION_CORE_SCHEMA_VERSION,
+        intent: { subject: subject(intent.subject), expected }, findings, observations });
+    if (Buffer.byteLength(canonical, "utf8") > MAX_CANONICAL_BYTES) {
+        throw new RangeError("Verification core exceeds size limit");
+    }
+    return canonical;
+}
+/** Unauthenticated content digest, NOT proof that these checks were performed. */
+export function computeVerificationCoreDigestV1(input) {
+    const canonical = canonicalizeVerificationCoreV1(input);
+    return sha3_512Hex(Buffer.concat([Buffer.from(DOMAIN, "utf8"), Buffer.from([0]),
+        Buffer.from(canonical, "utf8")]));
+}
+//# sourceMappingURL=coreV1.js.map

package/dist/reports/coreV1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coreV1.js","sourceRoot":"","sources":["../../src/reports/coreV1.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,MAAM,CAAC,MAAM,gCAAgC,GAAG,yBAAyB,CAAC;AAC1E,MAAM,MAAM,GAAG,yBAAyB,CAAC;AACzC,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAC9C,MAAM,cAAc,GAAG,4BAA4B,CAAC;AACpD,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,OAAO,GAAG,kBAAkB,CAAC;AACnC,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,kBAAkB,EAAE,eAAe;IACzF,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;AACvD,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;AAC7E,MAAM,OAAO,GAAG,CAAC,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;AAC7F,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AAIxC,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACzF,OAAO,KAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,MAAM,CAAC,KAAiB,EAAE,OAA0B,EAAE,IAAY;IACzE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,QAAQ,CAAC,CAAC;AAC7G,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,GAAW,EAAE,IAAY;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACxF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY,EAAE,GAAW,EAAE,QAAQ,GAAG,IAAI;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;aAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,IAAY,EAAE,OAAe;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,IAAY;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAc,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAC7F,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACzC,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACzE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,yBAAyB,EAAE,YAAY,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACzF,IAAI,CAAC,CAAC,eAAe,EAAE,kBAAkB,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAkB,CAAC;YAC1G,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAK,GAAG,CAAC,UAAqB,GAAG,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACvD,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC1E,IAAI,GAAG,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;QAC1F,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAkB,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;QAClD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;YAC9E,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACxE,IAAI,GAAG,CAAC,QAAQ,KAAK,cAAc,IAAI,GAAG,CAAC,QAAQ,KAAK,qBAAqB,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;AACxG,CAAC;AAED,SAAS,IAAI,CAAC,KAAc;IAC1B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;aACzD,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,IAAI,GAAG,CAAC,KAAK,KAAK,gBAAgB,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK;YAC5B,WAAW,EAAE,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,MAAM,CAAI,MAAW,EAAE,GAAyB,EAAE,IAAY;IACrE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,aAAa,CAAC,CAAC;IAC/F,MAAM,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC;IAChE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAgB,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC/F,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,mBAAmB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACrG,MAAM,MAAM,GAAe,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC;QAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;IACtG,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,iBAAiB,CAAC,EAAE,SAAS,CAAC,CAAC;IAClF,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAiB,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAC;IAC9F,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACnG,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,EAAE,EAAE,EAAE,yBAAyB,CAAC;SACrF,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,wBAAwB,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAChH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC;AAC1E,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,8BAA8B,CAAC,KAAyB;IACtE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IAC5D,MAAM,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACrH,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,EACzF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAY,EAAE,gBAAgB,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAC1E,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACtH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,gCAAgC;QACjF,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,mBAAmB,EAAE,CAAC;QAC/D,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,+BAA+B,CAAC,KAAyB;IACvE,MAAM,SAAS,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC"}

package/dist/reports/portableV1.d.ts

@@ -0,0 +1,48 @@
+import type { VerificationReport } from "../contracts/verification.js";
+import type { ExecutionV1Report } from "../profiles/execution/verificationV1.js";
+import type { IndependentStandardsV1Report } from "../profiles/execution/independentStandardsV1.js";
+import type { PublicTriangulationV1Result } from "../triangulation/publicV1.js";
+import type { PublicExecutionTriangulationV1Result } from "../triangulation/executionPublicV1.js";
+export declare const PORTABLE_VERIFICATION_REPORT_SCHEMA_VERSION = "va.portable-verification-report.v1";
+type Json = null | string | number | boolean | Json[] | {
+    [key: string]: Json;
+};
+type JsonObject = {
+    [key: string]: Json;
+};
+export type PortableVerificationReportV1Input = Readonly<{
+    kind: "verification";
+    result: VerificationReport;
+}> | Readonly<{
+    kind: "execution";
+    result: ExecutionV1Report;
+}> | Readonly<{
+    kind: "independent_standards";
+    result: IndependentStandardsV1Report;
+}> | Readonly<{
+    kind: "public_triangulation";
+    result: PublicTriangulationV1Result;
+}> | Readonly<{
+    kind: "execution_triangulation";
+    result: PublicExecutionTriangulationV1Result;
+    /** Required only when the public execution was not acquired and no plan exists. */
+    source_report?: ExecutionV1Report;
+}>;
+export type PortableVerificationReportV1 = Readonly<{
+    schema_version: typeof PORTABLE_VERIFICATION_REPORT_SCHEMA_VERSION;
+    kind: PortableVerificationReportV1Input["kind"];
+    core_sha3_512: string;
+    report_sha3_512: string;
+    core: VerificationReport & Readonly<{
+        schema_version: string;
+    }>;
+    /** Profile-specific, bounded and digest-bound assurance context. */
+    context: Readonly<JsonObject>;
+}>;
+/** A content-addressed record of claimed findings, not proof of their authenticity. */
+export declare function createPortableVerificationReportV1(input: PortableVerificationReportV1Input): PortableVerificationReportV1;
+/** Deterministic serialized report, including the digest of its material conclusions. */
+export declare function canonicalizePortableVerificationReportV1(input: PortableVerificationReportV1Input): string;
+export declare function computePortableVerificationReportDigestV1(input: PortableVerificationReportV1Input): string;
+export {};
+//# sourceMappingURL=portableV1.d.ts.map

package/dist/reports/portableV1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"portableV1.d.ts","sourceRoot":"","sources":["../../src/reports/portableV1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAuB,MAAM,8BAA8B,CAAC;AAG5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AACjF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AACpG,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,KAAK,EAAE,oCAAoC,EAAE,MAAM,uCAAuC,CAAC;AAGlG,eAAO,MAAM,2CAA2C,uCAAuC,CAAC;AAUhG,KAAK,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAChF,KAAK,UAAU,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAE1C,MAAM,MAAM,iCAAiC,GACzC,QAAQ,CAAC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC,GAC9D,QAAQ,CAAC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAC,GAC1D,QAAQ,CAAC;IAAE,IAAI,EAAE,uBAAuB,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAA;CAAE,CAAC,GACjF,QAAQ,CAAC;IAAE,IAAI,EAAE,sBAAsB,CAAC;IAAC,MAAM,EAAE,2BAA2B,CAAA;CAAE,CAAC,GAC/E,QAAQ,CAAC;IAAE,IAAI,EAAE,yBAAyB,CAAC;IAAC,MAAM,EAAE,oCAAoC,CAAC;IACvF,mFAAmF;IACnF,aAAa,CAAC,EAAE,iBAAiB,CAAA;CAAE,CAAC,CAAC;AAE3C,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAClD,cAAc,EAAE,OAAO,2CAA2C,CAAC;IACnE,IAAI,EAAE,iCAAiC,CAAC,MAAM,CAAC,CAAC;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,kBAAkB,GAAG,QAAQ,CAAC;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChE,oEAAoE;IACpE,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;CAC/B,CAAC,CAAC;AAiPH,uFAAuF;AACvF,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,iCAAiC,GAAG,4BAA4B,CAezH;AAED,yFAAyF;AACzF,wBAAgB,wCAAwC,CAAC,KAAK,EAAE,iCAAiC,GAAG,MAAM,CAEzG;AAED,wBAAgB,yCAAyC,CAAC,KAAK,EAAE,iCAAiC,GAAG,MAAM,CAE1G"}