@veraanchor/verifier 0.0.0-stage → 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (214) hide show
  1. package/CHANGELOG.md +22 -0
  2. package/CONTRIBUTING.md +33 -0
  3. package/LICENSE +21 -0
  4. package/NOTICE +4 -0
  5. package/README.md +263 -2
  6. package/SECURITY.md +21 -0
  7. package/dist/cli/commandV1.d.ts +5 -0
  8. package/dist/cli/commandV1.d.ts.map +1 -0
  9. package/dist/cli/commandV1.js +440 -0
  10. package/dist/cli/commandV1.js.map +1 -0
  11. package/dist/cli.d.ts +3 -0
  12. package/dist/cli.d.ts.map +1 -0
  13. package/dist/cli.js +5 -0
  14. package/dist/cli.js.map +1 -0
  15. package/dist/contracts/verification.d.ts +77 -0
  16. package/dist/contracts/verification.d.ts.map +1 -0
  17. package/dist/contracts/verification.js +6 -0
  18. package/dist/contracts/verification.js.map +1 -0
  19. package/dist/crypto/sha3.d.ts +15 -0
  20. package/dist/crypto/sha3.d.ts.map +1 -0
  21. package/dist/crypto/sha3.js +27 -0
  22. package/dist/crypto/sha3.js.map +1 -0
  23. package/dist/crypto/streamSha3.d.ts +26 -0
  24. package/dist/crypto/streamSha3.d.ts.map +1 -0
  25. package/dist/crypto/streamSha3.js +52 -0
  26. package/dist/crypto/streamSha3.js.map +1 -0
  27. package/dist/hf/hashContractV1.d.ts +48 -0
  28. package/dist/hf/hashContractV1.d.ts.map +1 -0
  29. package/dist/hf/hashContractV1.js +185 -0
  30. package/dist/hf/hashContractV1.js.map +1 -0
  31. package/dist/index.d.ts +80 -0
  32. package/dist/index.d.ts.map +1 -0
  33. package/dist/index.js +57 -0
  34. package/dist/index.js.map +1 -0
  35. package/dist/merkle/membership.d.ts +30 -0
  36. package/dist/merkle/membership.d.ts.map +1 -0
  37. package/dist/merkle/membership.js +105 -0
  38. package/dist/merkle/membership.js.map +1 -0
  39. package/dist/policy/contractV1.d.ts +37 -0
  40. package/dist/policy/contractV1.d.ts.map +1 -0
  41. package/dist/policy/contractV1.js +2 -0
  42. package/dist/policy/contractV1.js.map +1 -0
  43. package/dist/policy/evaluateV1.d.ts +24 -0
  44. package/dist/policy/evaluateV1.d.ts.map +1 -0
  45. package/dist/policy/evaluateV1.js +320 -0
  46. package/dist/policy/evaluateV1.js.map +1 -0
  47. package/dist/profiles/dataset/sourceV1.d.ts +22 -0
  48. package/dist/profiles/dataset/sourceV1.d.ts.map +1 -0
  49. package/dist/profiles/dataset/sourceV1.js +73 -0
  50. package/dist/profiles/dataset/sourceV1.js.map +1 -0
  51. package/dist/profiles/dataset/v1.d.ts +39 -0
  52. package/dist/profiles/dataset/v1.d.ts.map +1 -0
  53. package/dist/profiles/dataset/v1.js +362 -0
  54. package/dist/profiles/dataset/v1.js.map +1 -0
  55. package/dist/profiles/execution/contractV1.d.ts +279 -0
  56. package/dist/profiles/execution/contractV1.d.ts.map +1 -0
  57. package/dist/profiles/execution/contractV1.js +364 -0
  58. package/dist/profiles/execution/contractV1.js.map +1 -0
  59. package/dist/profiles/execution/independentStandardsV1.d.ts +44 -0
  60. package/dist/profiles/execution/independentStandardsV1.d.ts.map +1 -0
  61. package/dist/profiles/execution/independentStandardsV1.js +336 -0
  62. package/dist/profiles/execution/independentStandardsV1.js.map +1 -0
  63. package/dist/profiles/execution/reasonCodesV1.d.ts +30 -0
  64. package/dist/profiles/execution/reasonCodesV1.d.ts.map +1 -0
  65. package/dist/profiles/execution/reasonCodesV1.js +20 -0
  66. package/dist/profiles/execution/reasonCodesV1.js.map +1 -0
  67. package/dist/profiles/execution/recomputationV1.d.ts +11 -0
  68. package/dist/profiles/execution/recomputationV1.d.ts.map +1 -0
  69. package/dist/profiles/execution/recomputationV1.js +144 -0
  70. package/dist/profiles/execution/recomputationV1.js.map +1 -0
  71. package/dist/profiles/execution/rulesV1.d.ts +6 -0
  72. package/dist/profiles/execution/rulesV1.d.ts.map +1 -0
  73. package/dist/profiles/execution/rulesV1.js +855 -0
  74. package/dist/profiles/execution/rulesV1.js.map +1 -0
  75. package/dist/profiles/execution/standardsPlanV1.d.ts +18 -0
  76. package/dist/profiles/execution/standardsPlanV1.d.ts.map +1 -0
  77. package/dist/profiles/execution/standardsPlanV1.js +16 -0
  78. package/dist/profiles/execution/standardsPlanV1.js.map +1 -0
  79. package/dist/profiles/execution/verificationV1.d.ts +28 -0
  80. package/dist/profiles/execution/verificationV1.d.ts.map +1 -0
  81. package/dist/profiles/execution/verificationV1.js +188 -0
  82. package/dist/profiles/execution/verificationV1.js.map +1 -0
  83. package/dist/profiles/ingest/sourceV1.d.ts +36 -0
  84. package/dist/profiles/ingest/sourceV1.d.ts.map +1 -0
  85. package/dist/profiles/ingest/sourceV1.js +99 -0
  86. package/dist/profiles/ingest/sourceV1.js.map +1 -0
  87. package/dist/profiles/ingest/v1.d.ts +65 -0
  88. package/dist/profiles/ingest/v1.d.ts.map +1 -0
  89. package/dist/profiles/ingest/v1.js +477 -0
  90. package/dist/profiles/ingest/v1.js.map +1 -0
  91. package/dist/profiles/sourceV1Helpers.d.ts +48 -0
  92. package/dist/profiles/sourceV1Helpers.d.ts.map +1 -0
  93. package/dist/profiles/sourceV1Helpers.js +141 -0
  94. package/dist/profiles/sourceV1Helpers.js.map +1 -0
  95. package/dist/reports/coreV1.d.ts +7 -0
  96. package/dist/reports/coreV1.d.ts.map +1 -0
  97. package/dist/reports/coreV1.js +195 -0
  98. package/dist/reports/coreV1.js.map +1 -0
  99. package/dist/reports/portableV1.d.ts +48 -0
  100. package/dist/reports/portableV1.d.ts.map +1 -0
  101. package/dist/reports/portableV1.js +279 -0
  102. package/dist/reports/portableV1.js.map +1 -0
  103. package/dist/reports/validationV1.d.ts +19 -0
  104. package/dist/reports/validationV1.d.ts.map +1 -0
  105. package/dist/reports/validationV1.js +441 -0
  106. package/dist/reports/validationV1.js.map +1 -0
  107. package/dist/resolvers/executionMirrorV1.d.ts +15 -0
  108. package/dist/resolvers/executionMirrorV1.d.ts.map +1 -0
  109. package/dist/resolvers/executionMirrorV1.js +206 -0
  110. package/dist/resolvers/executionMirrorV1.js.map +1 -0
  111. package/dist/resolvers/explorerExecutionV1.d.ts +17 -0
  112. package/dist/resolvers/explorerExecutionV1.d.ts.map +1 -0
  113. package/dist/resolvers/explorerExecutionV1.js +61 -0
  114. package/dist/resolvers/explorerExecutionV1.js.map +1 -0
  115. package/dist/resolvers/explorerPublicV1.d.ts +37 -0
  116. package/dist/resolvers/explorerPublicV1.d.ts.map +1 -0
  117. package/dist/resolvers/explorerPublicV1.js +210 -0
  118. package/dist/resolvers/explorerPublicV1.js.map +1 -0
  119. package/dist/resolvers/explorerPublicationV1.d.ts +20 -0
  120. package/dist/resolvers/explorerPublicationV1.d.ts.map +1 -0
  121. package/dist/resolvers/explorerPublicationV1.js +195 -0
  122. package/dist/resolvers/explorerPublicationV1.js.map +1 -0
  123. package/dist/resolvers/explorerTransportV1.d.ts +17 -0
  124. package/dist/resolvers/explorerTransportV1.d.ts.map +1 -0
  125. package/dist/resolvers/explorerTransportV1.js +112 -0
  126. package/dist/resolvers/explorerTransportV1.js.map +1 -0
  127. package/dist/resolvers/hcs11MirrorV1.d.ts +49 -0
  128. package/dist/resolvers/hcs11MirrorV1.d.ts.map +1 -0
  129. package/dist/resolvers/hcs11MirrorV1.js +293 -0
  130. package/dist/resolvers/hcs11MirrorV1.js.map +1 -0
  131. package/dist/resolvers/hcs13MirrorV1.d.ts +35 -0
  132. package/dist/resolvers/hcs13MirrorV1.d.ts.map +1 -0
  133. package/dist/resolvers/hcs13MirrorV1.js +72 -0
  134. package/dist/resolvers/hcs13MirrorV1.js.map +1 -0
  135. package/dist/resolvers/hcs1MirrorV1.d.ts +28 -0
  136. package/dist/resolvers/hcs1MirrorV1.d.ts.map +1 -0
  137. package/dist/resolvers/hcs1MirrorV1.js +220 -0
  138. package/dist/resolvers/hcs1MirrorV1.js.map +1 -0
  139. package/dist/resolvers/hcs26MirrorV1.d.ts +67 -0
  140. package/dist/resolvers/hcs26MirrorV1.d.ts.map +1 -0
  141. package/dist/resolvers/hcs26MirrorV1.js +218 -0
  142. package/dist/resolvers/hcs26MirrorV1.js.map +1 -0
  143. package/dist/resolvers/hcs26RegistryMirrorV1.d.ts +26 -0
  144. package/dist/resolvers/hcs26RegistryMirrorV1.d.ts.map +1 -0
  145. package/dist/resolvers/hcs26RegistryMirrorV1.js +200 -0
  146. package/dist/resolvers/hcs26RegistryMirrorV1.js.map +1 -0
  147. package/dist/resolvers/hcs2MirrorV1.d.ts +26 -0
  148. package/dist/resolvers/hcs2MirrorV1.d.ts.map +1 -0
  149. package/dist/resolvers/hcs2MirrorV1.js +196 -0
  150. package/dist/resolvers/hcs2MirrorV1.js.map +1 -0
  151. package/dist/resolvers/hederaMirrorV1.d.ts +22 -0
  152. package/dist/resolvers/hederaMirrorV1.d.ts.map +1 -0
  153. package/dist/resolvers/hederaMirrorV1.js +338 -0
  154. package/dist/resolvers/hederaMirrorV1.js.map +1 -0
  155. package/dist/standards/hcs/hcs11V1.d.ts +51 -0
  156. package/dist/standards/hcs/hcs11V1.d.ts.map +1 -0
  157. package/dist/standards/hcs/hcs11V1.js +289 -0
  158. package/dist/standards/hcs/hcs11V1.js.map +1 -0
  159. package/dist/standards/hcs/hcs13V1.d.ts +39 -0
  160. package/dist/standards/hcs/hcs13V1.d.ts.map +1 -0
  161. package/dist/standards/hcs/hcs13V1.js +114 -0
  162. package/dist/standards/hcs/hcs13V1.js.map +1 -0
  163. package/dist/standards/hcs/hcs14V1.d.ts +35 -0
  164. package/dist/standards/hcs/hcs14V1.d.ts.map +1 -0
  165. package/dist/standards/hcs/hcs14V1.js +168 -0
  166. package/dist/standards/hcs/hcs14V1.js.map +1 -0
  167. package/dist/standards/hcs/hcs1V1.d.ts +30 -0
  168. package/dist/standards/hcs/hcs1V1.d.ts.map +1 -0
  169. package/dist/standards/hcs/hcs1V1.js +140 -0
  170. package/dist/standards/hcs/hcs1V1.js.map +1 -0
  171. package/dist/standards/hcs/hcs26V1.d.ts +58 -0
  172. package/dist/standards/hcs/hcs26V1.d.ts.map +1 -0
  173. package/dist/standards/hcs/hcs26V1.js +339 -0
  174. package/dist/standards/hcs/hcs26V1.js.map +1 -0
  175. package/dist/standards/hcs/hcs2V1.d.ts +36 -0
  176. package/dist/standards/hcs/hcs2V1.d.ts.map +1 -0
  177. package/dist/standards/hcs/hcs2V1.js +181 -0
  178. package/dist/standards/hcs/hcs2V1.js.map +1 -0
  179. package/dist/standards/hcs/jsonCanonicalV1.d.ts +15 -0
  180. package/dist/standards/hcs/jsonCanonicalV1.d.ts.map +1 -0
  181. package/dist/standards/hcs/jsonCanonicalV1.js +160 -0
  182. package/dist/standards/hcs/jsonCanonicalV1.js.map +1 -0
  183. package/dist/triangulation/compareV1.d.ts +50 -0
  184. package/dist/triangulation/compareV1.d.ts.map +1 -0
  185. package/dist/triangulation/compareV1.js +236 -0
  186. package/dist/triangulation/compareV1.js.map +1 -0
  187. package/dist/triangulation/executionPlanV1.d.ts +39 -0
  188. package/dist/triangulation/executionPlanV1.d.ts.map +1 -0
  189. package/dist/triangulation/executionPlanV1.js +208 -0
  190. package/dist/triangulation/executionPlanV1.js.map +1 -0
  191. package/dist/triangulation/executionPublicV1.d.ts +22 -0
  192. package/dist/triangulation/executionPublicV1.d.ts.map +1 -0
  193. package/dist/triangulation/executionPublicV1.js +39 -0
  194. package/dist/triangulation/executionPublicV1.js.map +1 -0
  195. package/dist/triangulation/messageObservationV1.d.ts +26 -0
  196. package/dist/triangulation/messageObservationV1.d.ts.map +1 -0
  197. package/dist/triangulation/messageObservationV1.js +69 -0
  198. package/dist/triangulation/messageObservationV1.js.map +1 -0
  199. package/dist/triangulation/publicV1.d.ts +29 -0
  200. package/dist/triangulation/publicV1.d.ts.map +1 -0
  201. package/dist/triangulation/publicV1.js +170 -0
  202. package/dist/triangulation/publicV1.js.map +1 -0
  203. package/dist/verification/sourceIntentV1.d.ts +15 -0
  204. package/dist/verification/sourceIntentV1.d.ts.map +1 -0
  205. package/dist/verification/sourceIntentV1.js +206 -0
  206. package/dist/verification/sourceIntentV1.js.map +1 -0
  207. package/docs/cli-v0.1.md +237 -0
  208. package/docs/conformance.md +38 -0
  209. package/docs/threat-model.md +37 -0
  210. package/docs/verification-semantics.md +65 -0
  211. package/examples/README.md +35 -0
  212. package/examples/dataset-offline.mjs +58 -0
  213. package/examples/dataset-policy.mjs +59 -0
  214. package/package.json +65 -4
@@ -0,0 +1,195 @@
1
+ import { observeCoreMessageBindingV1 } from "../triangulation/messageObservationV1.js";
2
+ import { resolveExplorerDatasetV1, resolveExplorerIngestV1, resolveExplorerMerkleRootV1, } from "./explorerPublicV1.js";
3
+ import { readExplorerPublicV1 } from "./explorerTransportV1.js";
4
+ const HASH = /^[0-9a-f]{128}$/i;
5
+ const MAX_RECEIPT_BYTES = 128 * 1024;
6
+ const SCHEMA = "va:explorer_publication_receipt:v1";
7
+ function result(status, reason) {
8
+ return { status, reason_code: reason, receipt_observation: null, message_binding_observation: null };
9
+ }
10
+ function record(value) {
11
+ return value && typeof value === "object" && !Array.isArray(value) ? value : null;
12
+ }
13
+ function text(value, max = 512) {
14
+ if (value === undefined || value === null || value === "")
15
+ return null;
16
+ return typeof value === "string" && value.trim().length > 0 && value.length <= max ? value.trim() : null;
17
+ }
18
+ function digest(value) {
19
+ const normalized = text(value, 128);
20
+ return normalized && HASH.test(normalized) ? normalized.toLowerCase() : null;
21
+ }
22
+ function optionalDigest(value) {
23
+ if (value === undefined || value === null || value === "")
24
+ return null;
25
+ const parsed = digest(value);
26
+ if (!parsed)
27
+ throw new TypeError("Invalid publication proof digest");
28
+ return parsed;
29
+ }
30
+ function fact(key, value) {
31
+ return value === null ? { key, state: "unavailable", reason_code: "PUBLICATION_RECEIPT_FIELD_UNAVAILABLE" } :
32
+ { key, state: "available", value };
33
+ }
34
+ function optionalNumber(value) {
35
+ if (value === undefined || value === null || value === "")
36
+ return null;
37
+ if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
38
+ throw new TypeError("Invalid publication receipt numeric commitment");
39
+ }
40
+ return value;
41
+ }
42
+ function publicReceipt(payload, claim) {
43
+ let raw = payload;
44
+ if (typeof payload === "string") {
45
+ if (new TextEncoder().encode(payload).byteLength > MAX_RECEIPT_BYTES)
46
+ return null;
47
+ try {
48
+ raw = JSON.parse(payload);
49
+ }
50
+ catch {
51
+ return null;
52
+ }
53
+ }
54
+ const receipt = record(raw);
55
+ if (!receipt)
56
+ return null;
57
+ try {
58
+ if (new TextEncoder().encode(JSON.stringify(receipt)).byteLength > MAX_RECEIPT_BYTES)
59
+ return null;
60
+ }
61
+ catch {
62
+ return null;
63
+ }
64
+ if (receipt.schema !== SCHEMA || receipt.event_type !== "published" ||
65
+ receipt.entity_kind !== claim.entity_kind || receipt.entity_id !== claim.entity_id ||
66
+ receipt.visibility !== "public" || receipt.event_version !== 1) {
67
+ return null;
68
+ }
69
+ if (receipt.proof !== undefined && !record(receipt.proof))
70
+ return null;
71
+ return receipt;
72
+ }
73
+ /**
74
+ * Scoped Explorer-assisted disclosure, using only the locator selected from a
75
+ * successfully resolved public record. The public entry points below always
76
+ * obtain the locator themselves. Never accepts a user-specified HCS URL,
77
+ * tenant key, or a free-form decrypt locator. No payload is returned in reports.
78
+ * This call does NOT independently authenticate ciphertext-to-plaintext binding.
79
+ */
80
+ async function resolveExplorerPublicationV1(config, publicRecord) {
81
+ if (publicRecord.status !== "resolved" || !publicRecord.observation ||
82
+ publicRecord.observation.source !== "public_record" || !publicRecord.publication) {
83
+ return result("unavailable", "PUBLICATION_ANCHOR_UNAVAILABLE");
84
+ }
85
+ const locator = publicRecord.publication;
86
+ if (locator.hedera_network !== publicRecord.observation.subject.hedera_network ||
87
+ !locator.entity_id || !locator.entity_kind ||
88
+ (!locator.transaction_id && !locator.message_id)) {
89
+ return result("invalid", "PUBLICATION_REFERENCE_INVALID");
90
+ }
91
+ const body = {
92
+ hedera_network: locator.hedera_network,
93
+ mode: "decrypt_and_verify",
94
+ include_decrypted: true,
95
+ ...(locator.transaction_id ? { transaction_id: locator.transaction_id } : { message_id: locator.message_id }),
96
+ };
97
+ const read = await readExplorerPublicV1(config, "/v1/hcs/verify-decrypt", locator.hedera_network, body);
98
+ if (read.status !== "ok") {
99
+ return result("unavailable", read.reason_code ?? "PUBLICATION_DECRYPT_UNAVAILABLE");
100
+ }
101
+ const response = record(read.body);
102
+ if (!response)
103
+ return result("invalid", "PUBLICATION_DECRYPT_RESPONSE_INVALID");
104
+ if (response.hedera_network !== locator.hedera_network) {
105
+ return result("conflict", "PUBLICATION_NETWORK_MISMATCH");
106
+ }
107
+ const tx = record(response.tx);
108
+ const topic = record(response.topic);
109
+ if (locator.transaction_id && text(tx?.transaction_id, 256) !== locator.transaction_id) {
110
+ return result(!tx?.transaction_id ? "invalid" : "conflict", "PUBLICATION_TRANSACTION_MISMATCH");
111
+ }
112
+ if (locator.message_id && !tx?.message_id && !locator.transaction_id) {
113
+ return result("unavailable", "PUBLICATION_MESSAGE_REFERENCE_UNAVAILABLE");
114
+ }
115
+ if (locator.message_id) {
116
+ const returnedId = text(tx?.message_id, 256);
117
+ if (returnedId && returnedId !== locator.message_id &&
118
+ returnedId !== `${locator.topic_id}@${locator.sequence_number}`) {
119
+ return result("conflict", "PUBLICATION_MESSAGE_MISMATCH");
120
+ }
121
+ if (!returnedId && !locator.transaction_id) {
122
+ return result("invalid", "PUBLICATION_MESSAGE_UNAVAILABLE");
123
+ }
124
+ }
125
+ if (locator.topic_id && text(topic?.topic_id, 64) !== locator.topic_id) {
126
+ return result(!topic?.topic_id ? "invalid" : "conflict", "PUBLICATION_TOPIC_MISMATCH");
127
+ }
128
+ const hash = record(response.hash);
129
+ if (hash?.match === false || response.verified === false) {
130
+ // A provider-declared hash failure is not, by itself, independently
131
+ // established cryptographic contradiction. Record a non-passing result.
132
+ return result("unavailable", "PUBLICATION_PROVIDER_VERIFICATION_FAILED");
133
+ }
134
+ if (hash?.match !== true || response.verified !== true) {
135
+ return result("unavailable", "PUBLICATION_PROVIDER_VERIFICATION_UNAVAILABLE");
136
+ }
137
+ if (record(response.payload)?.schema !== undefined && record(response.payload)?.schema !== SCHEMA) {
138
+ return result("unsupported", "PUBLICATION_RECEIPT_UNSUPPORTED_SCHEMA");
139
+ }
140
+ const receipt = publicReceipt(response.payload, locator);
141
+ if (!receipt)
142
+ return result("invalid", "PUBLICATION_RECEIPT_INVALID");
143
+ try {
144
+ const proof = record(receipt.proof) ?? {};
145
+ const facts = [
146
+ fact("publication.receipt.schema", SCHEMA),
147
+ fact("publication.receipt.entity_kind", locator.entity_kind),
148
+ fact("publication.receipt.entity_id", locator.entity_id),
149
+ fact("publication.receipt.event_type", "published"),
150
+ fact("publication.proof.dataset_key", text(proof.dataset_key, 256)),
151
+ fact("publication.proof.fingerprint", optionalDigest(proof.fingerprint)),
152
+ fact("publication.proof.manifest_hash", optionalDigest(proof.manifest_hash)),
153
+ fact("publication.proof.merkle_root", optionalDigest(proof.merkle_root)),
154
+ fact("publication.proof.ingest_object_key", text(proof.ingest_object_key, 256)),
155
+ fact("publication.proof.ingest_fingerprint", optionalDigest(proof.ingest_fingerprint)),
156
+ fact("publication.proof.ingest_bundle_digest", optionalDigest(proof.ingest_bundle_digest)),
157
+ fact("publication.proof.ingest_merkle_root", optionalDigest(proof.ingest_merkle_root)),
158
+ fact("publication.proof.ingest_item_count", optionalNumber(proof.ingest_item_count)),
159
+ fact("publication.proof.ingest_total_bytes", optionalNumber(proof.ingest_total_bytes)),
160
+ ];
161
+ const subject = publicRecord.observation.subject;
162
+ const disclosure = Object.freeze({
163
+ id: `${subject.kind}.publication_receipt`,
164
+ subject,
165
+ source: "public_record",
166
+ resolver_id: "explorer.public-disclosure.v1",
167
+ facts: Object.freeze(facts.map((entry) => Object.freeze(entry))),
168
+ });
169
+ const binding = observeCoreMessageBindingV1({
170
+ id: `${subject.kind}.core_binding`,
171
+ subject,
172
+ binding: response.message_binding,
173
+ });
174
+ return { status: "resolved", reason_code: null, receipt_observation: disclosure, message_binding_observation: binding };
175
+ }
176
+ catch {
177
+ return result("invalid", "PUBLICATION_RECEIPT_INVALID");
178
+ }
179
+ }
180
+ async function withDisclosure(config, publicRecord) {
181
+ return Object.freeze({
182
+ public_record: publicRecord,
183
+ disclosure: await resolveExplorerPublicationV1(config, publicRecord),
184
+ });
185
+ }
186
+ export async function resolveExplorerDatasetPublicationV1(config, request) {
187
+ return withDisclosure(config, await resolveExplorerDatasetV1(config, request));
188
+ }
189
+ export async function resolveExplorerIngestPublicationV1(config, request) {
190
+ return withDisclosure(config, await resolveExplorerIngestV1(config, request));
191
+ }
192
+ export async function resolveExplorerMerkleRootPublicationV1(config, request) {
193
+ return withDisclosure(config, await resolveExplorerMerkleRootV1(config, request));
194
+ }
195
+ //# sourceMappingURL=explorerPublicationV1.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"explorerPublicationV1.js","sourceRoot":"","sources":["../../src/resolvers/explorerPublicationV1.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,2BAA2B,EAAE,MAAM,0CAA0C,CAAC;AACvF,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,GAM5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAkC,MAAM,0BAA0B,CAAC;AAEhG,MAAM,IAAI,GAAG,kBAAkB,CAAC;AAChC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,CAAC;AACrC,MAAM,MAAM,GAAG,oCAAoC,CAAC;AAYpD,SAAS,MAAM,CAAC,MAAiD,EAAE,MAAqB;IACtF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,IAAI,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC;AACvG,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAa,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5F,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,GAAG,GAAG,GAAG;IACrC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3G,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpC,OAAO,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IACrE,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,IAAI,CAAC,GAAW,EAAE,KAA6B;IACtD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAC3G,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC;AACD,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,KAA4B;IACnE,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,GAAG,iBAAiB;YAAE,OAAO,IAAI,CAAC;QAClF,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACtE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,iBAAiB;YAAE,OAAO,IAAI,CAAC;IACpG,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACxB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,WAAW;QACjE,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;QAClF,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,4BAA4B,CACzC,MAAiC,EACjC,YAAoC;IAEpC,IAAI,YAAY,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,YAAY,CAAC,WAAW;QACjE,YAAY,CAAC,WAAW,CAAC,MAAM,KAAK,eAAe,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;QACnF,OAAO,MAAM,CAAC,aAAa,EAAE,gCAAgC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC;IACzC,IAAI,OAAO,CAAC,cAAc,KAAK,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC,cAAc;QAC5E,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,WAAW;QAC1C,CAAC,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACnD,OAAO,MAAM,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG;QACX,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,oBAAoB;QAC1B,iBAAiB,EAAE,IAAI;QACvB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;KAC9G,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,MAAM,EAAE,wBAAwB,EAAE,OAAO,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACxG,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,IAAI,iCAAiC,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;IAChF,IAAI,QAAQ,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,CAAC,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACvF,OAAO,MAAM,CAAC,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,EAAE,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QACrE,OAAO,MAAM,CAAC,aAAa,EAAE,2CAA2C,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAC7C,IAAI,UAAU,IAAI,UAAU,KAAK,OAAO,CAAC,UAAU;YACjD,UAAU,KAAK,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;YAClE,OAAO,MAAM,CAAC,UAAU,EAAE,8BAA8B,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3C,OAAO,MAAM,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvE,OAAO,MAAM,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,IAAI,EAAE,KAAK,KAAK,KAAK,IAAI,QAAQ,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QACzD,oEAAoE;QACpE,wEAAwE;QACxE,OAAO,MAAM,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,EAAE,KAAK,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACvD,OAAO,MAAM,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;QAClG,OAAO,MAAM,CAAC,aAAa,EAAE,wCAAwC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;IACtE,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAuB;YAChC,IAAI,CAAC,4BAA4B,EAAE,MAAM,CAAC;YAC1C,IAAI,CAAC,iCAAiC,EAAE,OAAO,CAAC,WAAW,CAAC;YAC5D,IAAI,CAAC,+BAA+B,EAAE,OAAO,CAAC,SAAS,CAAC;YACxD,IAAI,CAAC,gCAAgC,EAAE,WAAW,CAAC;YACnD,IAAI,CAAC,+BAA+B,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,+BAA+B,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxE,IAAI,CAAC,iCAAiC,EAAE,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAC5E,IAAI,CAAC,+BAA+B,EAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACxE,IAAI,CAAC,qCAAqC,EAAE,IAAI,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;YAC/E,IAAI,CAAC,sCAAsC,EAAE,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtF,IAAI,CAAC,wCAAwC,EAAE,cAAc,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC1F,IAAI,CAAC,sCAAsC,EAAE,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YACtF,IAAI,CAAC,qCAAqC,EAAE,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACpF,IAAI,CAAC,sCAAsC,EAAE,cAAc,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;SACvF,CAAC;QACF,MAAM,OAAO,GAAG,YAAY,CAAC,WAAW,CAAC,OAAO,CAAC;QACjD,MAAM,UAAU,GAA4B,MAAM,CAAC,MAAM,CAAC;YACxD,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,sBAAsB;YACzC,OAAO;YACP,MAAM,EAAE,eAAwB;YAChC,WAAW,EAAE,+BAA+B;YAC5C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;SACjE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,2BAA2B,CAAC;YAC1C,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,eAAe;YAClC,OAAO;YACP,OAAO,EAAE,QAAQ,CAAC,eAAe;SAClC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,mBAAmB,EAAE,UAAU,EAAE,2BAA2B,EAAE,OAAO,EAAE,CAAC;IAC1H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAQD,KAAK,UAAU,cAAc,CAC3B,MAAiC,EACjC,YAAoC;IAEpC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,YAAY;QAC3B,UAAU,EAAE,MAAM,4BAA4B,CAAC,MAAM,EAAE,YAAY,CAAC;KACrE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACvD,MAAiC,EACjC,OAAiC;IAEjC,OAAO,cAAc,CAAC,MAAM,EAAE,MAAM,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,MAAiC,EACjC,OAAgC;IAEhC,OAAO,cAAc,CAAC,MAAM,EAAE,MAAM,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,MAAiC,EACjC,OAAoC;IAEpC,OAAO,cAAc,CAAC,MAAM,EAAE,MAAM,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AACpF,CAAC"}
@@ -0,0 +1,17 @@
1
+ /** Bounded, credential-free transport for fixed Explorer public API paths. */
2
+ export type ExplorerPublicTransportV1 = Readonly<{
3
+ base_url: string;
4
+ fetch_impl?: typeof fetch;
5
+ timeout_ms?: number;
6
+ max_response_bytes?: number;
7
+ }>;
8
+ export type ExplorerPublicHttpResultV1 = Readonly<{
9
+ status: "ok" | "not_found" | "unavailable" | "invalid";
10
+ reason_code: string | null;
11
+ body: unknown | null;
12
+ }>;
13
+ /** Only code-defined paths are accepted. No evidence-controlled URL resolution. */
14
+ export declare function readExplorerPublicV1(config: ExplorerPublicTransportV1, path: string, network: "mainnet" | "testnet", postBody?: Readonly<Record<string, unknown>>, query?: Readonly<{
15
+ resultId?: string;
16
+ }>): Promise<ExplorerPublicHttpResultV1>;
17
+ //# sourceMappingURL=explorerTransportV1.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"explorerTransportV1.d.ts","sourceRoot":"","sources":["../../src/resolvers/explorerTransportV1.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,KAAK,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,MAAM,EAAE,IAAI,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;IACvD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;CACtB,CAAC,CAAC;AAqBH,mFAAmF;AACnF,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,yBAAyB,EACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,SAAS,GAAG,SAAS,EAC9B,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC5C,KAAK,CAAC,EAAE,QAAQ,CAAC;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACtC,OAAO,CAAC,0BAA0B,CAAC,CAkFrC"}
@@ -0,0 +1,112 @@
1
+ const MAX_BYTES = 512 * 1024;
2
+ const DEFAULT_TIMEOUT = 15_000;
3
+ function origin(value) {
4
+ let url;
5
+ try {
6
+ url = new URL(value);
7
+ }
8
+ catch {
9
+ throw new TypeError("Explorer base_url must be an absolute URL");
10
+ }
11
+ const local = url.hostname === "localhost" || url.hostname === "127.0.0.1" || url.hostname === "[::1]";
12
+ if ((url.protocol !== "https:" && !(local && url.protocol === "http:")) ||
13
+ url.username || url.password || url.search || url.hash ||
14
+ (url.pathname !== "/" && url.pathname !== "/v1" && url.pathname !== "/v1/")) {
15
+ throw new TypeError("Explorer base_url must identify a fixed HTTPS origin (HTTP loopback permitted)");
16
+ }
17
+ return url.origin;
18
+ }
19
+ /** Only code-defined paths are accepted. No evidence-controlled URL resolution. */
20
+ export async function readExplorerPublicV1(config, path, network, postBody, query) {
21
+ const base = origin(config.base_url);
22
+ if (!/^\/v1\/[a-zA-Z0-9/._:%-]+$/.test(path) || path.includes("..") ||
23
+ (network !== "mainnet" && network !== "testnet")) {
24
+ throw new TypeError("Invalid fixed Explorer API path or network");
25
+ }
26
+ const timeout = config.timeout_ms ?? DEFAULT_TIMEOUT;
27
+ const budget = config.max_response_bytes ?? MAX_BYTES;
28
+ if (!Number.isSafeInteger(timeout) || timeout < 100 || timeout > 60_000 ||
29
+ !Number.isSafeInteger(budget) || budget < 1024 || budget > MAX_BYTES) {
30
+ throw new TypeError("Invalid Explorer transport bounds");
31
+ }
32
+ const endpoint = new URL(path, base);
33
+ if (query && postBody !== undefined)
34
+ throw new TypeError("Explorer GET query cannot accompany POST body");
35
+ if (query?.resultId !== undefined) {
36
+ if (!/^[0-9a-f]{8}-(?:[0-9a-f]{4}-){3}[0-9a-f]{12}$/i.test(query.resultId)) {
37
+ throw new TypeError("Invalid Explorer resultId query");
38
+ }
39
+ endpoint.searchParams.set("resultId", query.resultId.toLowerCase());
40
+ }
41
+ if (postBody === undefined)
42
+ endpoint.searchParams.set("network", network);
43
+ const method = postBody === undefined ? "GET" : "POST";
44
+ try {
45
+ const response = await (config.fetch_impl ?? fetch)(endpoint.toString(), {
46
+ method,
47
+ redirect: "error",
48
+ credentials: "omit",
49
+ cache: "no-store",
50
+ headers: {
51
+ Accept: "application/json",
52
+ ...(postBody === undefined ? {} : { "Content-Type": "application/json" }),
53
+ },
54
+ ...(postBody === undefined ? {} : { body: JSON.stringify(postBody) }),
55
+ signal: AbortSignal.timeout(timeout),
56
+ });
57
+ if (response.status === 404)
58
+ return { status: "not_found", reason_code: "EXPLORER_NOT_FOUND", body: null };
59
+ if (!response.ok)
60
+ return { status: "unavailable", reason_code: "EXPLORER_HTTP_UNAVAILABLE", body: null };
61
+ const declaredNetwork = response.headers.get("x-hedera-network");
62
+ if (declaredNetwork && declaredNetwork !== network) {
63
+ return { status: "invalid", reason_code: "EXPLORER_NETWORK_MISMATCH", body: null };
64
+ }
65
+ const declaredSize = response.headers.get("content-length");
66
+ if (declaredSize && Number(declaredSize) > budget) {
67
+ return { status: "invalid", reason_code: "EXPLORER_RESPONSE_TOO_LARGE", body: null };
68
+ }
69
+ if (!response.body)
70
+ return { status: "invalid", reason_code: "EXPLORER_EMPTY_RESPONSE", body: null };
71
+ const reader = response.body.getReader();
72
+ const chunks = [];
73
+ let size = 0;
74
+ try {
75
+ while (true) {
76
+ const next = await reader.read();
77
+ if (next.done)
78
+ break;
79
+ size += next.value.byteLength;
80
+ if (size > budget) {
81
+ await reader.cancel().catch(() => undefined);
82
+ return { status: "invalid", reason_code: "EXPLORER_RESPONSE_TOO_LARGE", body: null };
83
+ }
84
+ chunks.push(next.value);
85
+ }
86
+ }
87
+ finally {
88
+ reader.releaseLock();
89
+ }
90
+ const bytes = new Uint8Array(size);
91
+ let offset = 0;
92
+ for (const chunk of chunks) {
93
+ bytes.set(chunk, offset);
94
+ offset += chunk.byteLength;
95
+ }
96
+ let parsed;
97
+ try {
98
+ parsed = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
99
+ }
100
+ catch {
101
+ return { status: "invalid", reason_code: "EXPLORER_RESPONSE_INVALID", body: null };
102
+ }
103
+ if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
104
+ return { status: "invalid", reason_code: "EXPLORER_RESPONSE_INVALID", body: null };
105
+ }
106
+ return { status: "ok", reason_code: null, body: parsed };
107
+ }
108
+ catch {
109
+ return { status: "unavailable", reason_code: "EXPLORER_REQUEST_UNAVAILABLE", body: null };
110
+ }
111
+ }
112
+ //# sourceMappingURL=explorerTransportV1.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"explorerTransportV1.js","sourceRoot":"","sources":["../../src/resolvers/explorerTransportV1.ts"],"names":[],"mappings":"AAcA,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC;AAC7B,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IACvG,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;QACrE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;QACtD,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CAAC,gFAAgF,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAiC,EACjC,IAAY,EACZ,OAA8B,EAC9B,QAA4C,EAC5C,KAAuC;IAEvC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjE,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,IAAI,eAAe,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,IAAI,SAAS,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,GAAG,IAAI,OAAO,GAAG,MAAM;QACrE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,IAAI,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,KAAK,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IAC1G,IAAI,KAAK,EAAE,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;QACzD,CAAC;QACD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE;YACvE,MAAM;YACN,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,MAAM;YACnB,KAAK,EAAE,UAAU;YACjB,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;aAC1E;YACD,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC3G,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzG,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACjE,IAAI,eAAe,IAAI,eAAe,KAAK,OAAO,EAAE,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC5D,IAAI,YAAY,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,EAAE,CAAC;YAClD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,6BAA6B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,yBAAyB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrG,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,CAAC;YACH,OAAO,IAAI,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,IAAI;oBAAE,MAAM;gBACrB,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC9B,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;oBAClB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAC7C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,6BAA6B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACvF,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;QAC7B,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,8BAA8B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5F,CAAC;AACH,CAAC"}
@@ -0,0 +1,49 @@
1
+ /**
2
+ * Bounded public HCS-11 profile resolution. The observed account memo is current
3
+ * Mirror state; an exact HCS-2 sequence is caller-selected historical evidence.
4
+ * Neither observation authenticates Hedera consensus nor DID controller control.
5
+ */
6
+ import type { HederaNetwork } from "../contracts/verification.js";
7
+ import { type Hcs1MirrorV1Config } from "./hcs1MirrorV1.js";
8
+ import { type Hcs11V1Memo, type Hcs11V1Profile } from "../standards/hcs/hcs11V1.js";
9
+ import { type Hcs1V1ContentOptions } from "../standards/hcs/hcs1V1.js";
10
+ export type Hcs11MirrorV1Request = Readonly<{
11
+ hedera_network: HederaNetwork;
12
+ account_id: string;
13
+ /** Required for hcs://2 account memos. Never choose a mutable 'latest' record. */
14
+ hcs2_sequence_number?: number;
15
+ /** Explicit relying-party constraints, independent of fetched evidence. */
16
+ expected_profile_reference?: string | null;
17
+ expected_hcs1_reference?: string | null;
18
+ expected_hcs1_sha256?: string | null;
19
+ expected_profile_sha256?: string | null;
20
+ expected_uaid?: string | null;
21
+ expected_base_did?: string | null;
22
+ }>;
23
+ export type Hcs11MirrorV1Result = Readonly<{
24
+ status: "resolved" | "conflict" | "invalid" | "unavailable" | "unsupported";
25
+ reason_code: string | null;
26
+ hedera_network: HederaNetwork;
27
+ account_id: string;
28
+ resolver_id: "hedera.mirror-rest.hcs11.v1";
29
+ /** Always the observed current account memo, never asserted as historical. */
30
+ account_memo_temporal_scope: "current_observation";
31
+ account_memo: Hcs11V1Memo | null;
32
+ /** Only populated after the exact caller-selected register is verified. */
33
+ registry_entry: Readonly<{
34
+ topic_id: string;
35
+ sequence_number: number;
36
+ consensus_timestamp: string;
37
+ }> | null;
38
+ profile_reference: string | null;
39
+ /** SHA-256 of HCS-1 original bytes, authenticated only relative to Mirror topic memo. */
40
+ content_sha256: string | null;
41
+ /** SHA-256 of canonical normalized HCS-11 profile material. */
42
+ canonical_profile_sha256: string | null;
43
+ profile: Hcs11V1Profile | null;
44
+ /** Caller-supplied DID binding is structural, not DID-controller authentication. */
45
+ did_binding: "match" | "not_checked";
46
+ }>;
47
+ /** Only follows the observed account memo and, where necessary, an explicit HCS-2 sequence. */
48
+ export declare function resolveHcs11ProfileV1(config: Hcs1MirrorV1Config, request: Hcs11MirrorV1Request, decodeOptions?: Hcs1V1ContentOptions): Promise<Hcs11MirrorV1Result>;
49
+ //# sourceMappingURL=hcs11MirrorV1.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"hcs11MirrorV1.d.ts","sourceRoot":"","sources":["../../src/resolvers/hcs11MirrorV1.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE/E,OAAO,EACL,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAwB,KAAK,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAY7F,MAAM,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAC1C,cAAc,EAAE,aAAa,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,2EAA2E;IAC3E,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,aAAa,CAAC;IAC5E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,cAAc,EAAE,aAAa,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,6BAA6B,CAAC;IAC3C,8EAA8E;IAC9E,2BAA2B,EAAE,qBAAqB,CAAC;IACnD,YAAY,EAAE,WAAW,GAAG,IAAI,CAAC;IACjC,2EAA2E;IAC3E,cAAc,EAAE,QAAQ,CAAC;QACvB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,mBAAmB,EAAE,MAAM,CAAC;KAC7B,CAAC,GAAG,IAAI,CAAC;IACV,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,yFAAyF;IACzF,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,+DAA+D;IAC/D,wBAAwB,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IAC/B,oFAAoF;IACpF,WAAW,EAAE,OAAO,GAAG,aAAa,CAAC;CACtC,CAAC,CAAC;AA8HH,+FAA+F;AAC/F,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,oBAAoB,EAC7B,aAAa,GAAE,oBAAyB,GACvC,OAAO,CAAC,mBAAmB,CAAC,CAwG9B"}