@veraanchor/verifier 0.0.0-stage → 0.1.0

package/dist/crypto/sha3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha3.js","sourceRoot":"","sources":["../../src/crypto/sha3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,SAAS,GAAG,kBAAkB,CAAC;AASrC,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAGlC;IACA,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,QAAQ,KAAK,QAAQ,CAAC;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAClC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB;QAC/C,eAAe,EAAE,QAAQ;QACzB,eAAe,EAAE,QAAQ;KAC1B,CAAC,CAAC;AACL,CAAC"}

package/dist/crypto/streamSha3.d.ts

@@ -0,0 +1,26 @@
+import { type DigestVerificationResult } from "./sha3.js";
+/** Byte chunks from a caller-owned source (including Node readable streams). */
+export type ByteChunkSource = Iterable<Uint8Array> | AsyncIterable<Uint8Array>;
+export type Sha3_512StreamHashResult = Readonly<{
+    digest: string;
+    bytes_hashed: number;
+}>;
+export type Sha3_512StreamVerificationResult = DigestVerificationResult & Readonly<{
+    bytes_hashed: number;
+}>;
+/**
+ * SHA3-512 over the exact byte stream, with constant auxiliary memory.
+ * No canonicalization, framing, filesystem access, or network requests.
+ * The source owns chunk buffering and cancellation.
+ */
+export declare function sha3_512Stream(source: ByteChunkSource, options?: Readonly<{
+    max_bytes?: number;
+}>): Promise<Sha3_512StreamHashResult>;
+/** Verify a stream against an independently supplied SHA3-512 commitment. */
+export declare function verifySha3_512Stream(input: Readonly<{
+    source: ByteChunkSource;
+    expected_digest: string;
+    expected_bytes?: number;
+    max_bytes?: number;
+}>): Promise<Sha3_512StreamVerificationResult>;
+//# sourceMappingURL=streamSha3.d.ts.map

package/dist/crypto/streamSha3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamSha3.d.ts","sourceRoot":"","sources":["../../src/crypto/streamSha3.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,KAAK,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAEnF,gFAAgF;AAChF,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;AAE/E,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,MAAM,MAAM,gCAAgC,GAAG,wBAAwB,GACrE,QAAQ,CAAC;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AASrC;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,eAAe,EACvB,OAAO,GAAE,QAAQ,CAAC;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAM,GAC7C,OAAO,CAAC,wBAAwB,CAAC,CAoBnC;AAED,6EAA6E;AAC7E,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,QAAQ,CAAC;IACd,MAAM,EAAE,eAAe,CAAC;IACxB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC,GACD,OAAO,CAAC,gCAAgC,CAAC,CAwB3C"}

package/dist/crypto/streamSha3.js

@@ -0,0 +1,52 @@
+import { createHash } from "node:crypto";
+import { normalizeSha3_512Digest } from "./sha3.js";
+function safeByteCount(value, name) {
+    if (!Number.isSafeInteger(value) || value < 0) {
+        throw new TypeError(`${name} must be a non-negative safe integer`);
+    }
+    return value;
+}
+/**
+ * SHA3-512 over the exact byte stream, with constant auxiliary memory.
+ * No canonicalization, framing, filesystem access, or network requests.
+ * The source owns chunk buffering and cancellation.
+ */
+export async function sha3_512Stream(source, options = {}) {
+    const maxBytes = options.max_bytes === undefined
+        ? Number.MAX_SAFE_INTEGER
+        : safeByteCount(options.max_bytes, "max_bytes");
+    const hash = createHash("sha3-512");
+    let bytesHashed = 0;
+    for await (const chunk of source) {
+        if (!(chunk instanceof Uint8Array)) {
+            throw new TypeError("SHA3-512 stream chunks must be Uint8Array");
+        }
+        if (chunk.byteLength > maxBytes - bytesHashed) {
+            throw new RangeError("SHA3-512 stream exceeds max_bytes");
+        }
+        hash.update(chunk);
+        bytesHashed += chunk.byteLength;
+    }
+    return Object.freeze({ digest: hash.digest("hex"), bytes_hashed: bytesHashed });
+}
+/** Verify a stream against an independently supplied SHA3-512 commitment. */
+export async function verifySha3_512Stream(input) {
+    const expected = normalizeSha3_512Digest(input.expected_digest);
+    const expectedBytes = input.expected_bytes === undefined
+        ? undefined
+        : safeByteCount(input.expected_bytes, "expected_bytes");
+    const { digest, bytes_hashed } = await sha3_512Stream(input.source, input.max_bytes === undefined ? undefined : { max_bytes: input.max_bytes });
+    const reasonCode = digest !== expected
+        ? "DIGEST_MISMATCH"
+        : expectedBytes !== undefined && bytes_hashed !== expectedBytes
+            ? "BYTE_COUNT_MISMATCH"
+            : null;
+    return Object.freeze({
+        outcome: reasonCode === null ? "pass" : "fail",
+        reason_code: reasonCode,
+        expected_digest: expected,
+        computed_digest: digest,
+        bytes_hashed,
+    });
+}
+//# sourceMappingURL=streamSha3.js.map

package/dist/crypto/streamSha3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"streamSha3.js","sourceRoot":"","sources":["../../src/crypto/streamSha3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAiC,MAAM,WAAW,CAAC;AAanF,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IACjD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,sCAAsC,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAe,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAuB,EACvB,UAA4C,EAAE;IAE9C,MAAM,QAAQ,GACZ,OAAO,CAAC,SAAS,KAAK,SAAS;QAC7B,CAAC,CAAC,MAAM,CAAC,gBAAgB;QACzB,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,GAAG,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,WAAW,IAAI,KAAK,CAAC,UAAU,CAAC;IAClC,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAKE;IAEF,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAChE,MAAM,aAAa,GACjB,KAAK,CAAC,cAAc,KAAK,SAAS;QAChC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC5D,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,cAAc,CACnD,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAC3E,CAAC;IACF,MAAM,UAAU,GACd,MAAM,KAAK,QAAQ;QACjB,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,YAAY,KAAK,aAAa;YAC7D,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,IAAI,CAAC;IAEb,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC9C,WAAW,EAAE,UAAU;QACvB,eAAe,EAAE,QAAQ;QACzB,eAAe,EAAE,MAAM;QACvB,YAAY;KACb,CAAC,CAAC;AACL,CAAC"}

package/dist/hf/hashContractV1.d.ts

@@ -0,0 +1,48 @@
+import type { ExpectedCommitment, VerificationOutcome } from "../contracts/verification.js";
+/** HF v1 hashing is distinct from Core's unframed canonical-object hashes. */
+export declare const HF_V1_CONTRACT_ID: "hf-contract-v1";
+export declare const HF_V1_FRAME_ID: "hf:frame:v1";
+export declare const HF_V1_CANONICAL_JSON_ID: "hf:canonical-json:v1";
+export declare const MAX_HF_V1_PAYLOAD_BYTES: number;
+type JsonMaterial = Readonly<{
+    material: "json";
+    value: unknown;
+}>;
+type RawMaterial = Readonly<{
+    material: "raw";
+    bytes: Uint8Array;
+}>;
+type Utf8Material = Readonly<{
+    material: "utf8";
+    text: string;
+}>;
+export type HfV1Material = JsonMaterial | RawMaterial | Utf8Material;
+export type HfV1HashInput = HfV1Material & Readonly<{
+    domain: string;
+}>;
+export type HfV1ExpectedCommitment = Extract<ExpectedCommitment, {
+    contract: "hf-contract-v1";
+}>;
+export type HfV1DigestVerificationResult = Readonly<{
+    outcome: Extract<VerificationOutcome, "pass" | "fail">;
+    reason_code: string | null;
+    contract: typeof HF_V1_CONTRACT_ID;
+    material: HfV1Material["material"];
+    domain: string;
+    expected_digest: string;
+    computed_digest: string | null;
+}>;
+/** Strict HF canonical-json:v1 bytes; UTF-16 key ordering, no lossy sentinels. */
+export declare function canonicalizeHfV1Json(value: unknown): Uint8Array;
+export declare function normalizeHfV1Domain(domain: string): string;
+/** frame = 'hf:frame:v1' || 0x00 || u16be(domain length) || domain || u32be(payload length) || payload. */
+export declare function frameHfV1(domain: string, payload: Uint8Array): Uint8Array;
+/** SHA3-512 over exact HF v1 framed bytes; returns lowercase hex. */
+export declare function hashHfV1(input: HfV1HashInput): string;
+/** Caller expectation selects both framing domain and material encoding. */
+export declare function verifyHfV1Digest(input: Readonly<{
+    expected: HfV1ExpectedCommitment;
+    evidence: HfV1Material;
+}>): HfV1DigestVerificationResult;
+export {};
+//# sourceMappingURL=hashContractV1.d.ts.map

package/dist/hf/hashContractV1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashContractV1.d.ts","sourceRoot":"","sources":["../../src/hf/hashContractV1.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,8EAA8E;AAC9E,eAAO,MAAM,iBAAiB,EAAG,gBAAyB,CAAC;AAC3D,eAAO,MAAM,cAAc,EAAG,aAAsB,CAAC;AACrD,eAAO,MAAM,uBAAuB,EAAG,sBAA+B,CAAC;AAGvE,eAAO,MAAM,uBAAuB,QAAmB,CAAC;AAOxD,KAAK,YAAY,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAC,CAAC;AACnE,KAAK,WAAW,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAC,CAAC;AACpE,KAAK,YAAY,GAAG,QAAQ,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACjE,MAAM,MAAM,YAAY,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CAAC;AACrE,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,QAAQ,CAAC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AACxE,MAAM,MAAM,sBAAsB,GAAG,OAAO,CAC1C,kBAAkB,EAClB;IAAE,QAAQ,EAAE,gBAAgB,CAAA;CAAE,CAC/B,CAAC;AACF,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAClD,OAAO,EAAE,OAAO,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACvD,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,OAAO,iBAAiB,CAAC;IACnC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC,CAAC;AAkBH,kFAAkF;AAClF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAkE/D;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED,2GAA2G;AAC3G,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,CAkBzE;AA0BD,qEAAqE;AACrE,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAGrD;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC;IAC/C,QAAQ,EAAE,sBAAsB,CAAC;IACjC,QAAQ,EAAE,YAAY,CAAC;CACxB,CAAC,GAAG,4BAA4B,CAgChC"}

package/dist/hf/hashContractV1.js

@@ -0,0 +1,185 @@
+import { normalizeSha3_512Digest, sha3_512Hex } from "../crypto/sha3.js";
+/** HF v1 hashing is distinct from Core's unframed canonical-object hashes. */
+export const HF_V1_CONTRACT_ID = "hf-contract-v1";
+export const HF_V1_FRAME_ID = "hf:frame:v1";
+export const HF_V1_CANONICAL_JSON_ID = "hf:canonical-json:v1";
+// SDK-specific resource ceilings; these are not claims about a producer's limits.
+export const MAX_HF_V1_PAYLOAD_BYTES = 16 * 1024 * 1024;
+const MAX_JSON_DEPTH = 64;
+const MAX_JSON_KEYS = 200_000;
+const MAX_JSON_ARRAY_LENGTH = 200_000;
+const DOMAIN_RE = /^[a-z0-9][a-z0-9._:/-]{0,63}$/;
+const FRAME_MAGIC = Buffer.from(HF_V1_FRAME_ID, "utf8");
+function chargeBudget(budget, bytes) {
+    budget.used += bytes;
+    if (budget.used > MAX_HF_V1_PAYLOAD_BYTES) {
+        throw new RangeError("HF v1 canonical JSON exceeds SDK byte limit");
+    }
+}
+function quoted(value) {
+    return JSON.stringify(value);
+}
+function plainObject(value) {
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+/** Strict HF canonical-json:v1 bytes; UTF-16 key ordering, no lossy sentinels. */
+export function canonicalizeHfV1Json(value) {
+    const seen = new WeakSet();
+    const budget = { used: 0 };
+    let keys = 0;
+    function walk(node, depth) {
+        if (depth > MAX_JSON_DEPTH)
+            throw new TypeError("HF v1 JSON nesting limit exceeded");
+        if (node === null) {
+            chargeBudget(budget, 4);
+            return "null";
+        }
+        if (typeof node === "string") {
+            const result = quoted(node);
+            chargeBudget(budget, Buffer.byteLength(result, "utf8"));
+            return result;
+        }
+        if (typeof node === "boolean") {
+            chargeBudget(budget, node ? 4 : 5);
+            return node ? "true" : "false";
+        }
+        if (typeof node === "number") {
+            if (!Number.isFinite(node))
+                throw new TypeError("HF v1 JSON numbers must be finite");
+            const result = JSON.stringify(node);
+            chargeBudget(budget, result.length);
+            return result;
+        }
+        if (typeof node === "bigint") {
+            const result = quoted(node.toString(10));
+            chargeBudget(budget, Buffer.byteLength(result, "utf8"));
+            return result;
+        }
+        if (typeof node !== "object") {
+            throw new TypeError(`HF v1 JSON unsupported type: ${typeof node}`);
+        }
+        if (node instanceof Uint8Array || !Array.isArray(node) && !plainObject(node)) {
+            throw new TypeError("HF v1 JSON accepts only plain objects, arrays and scalar values");
+        }
+        if (seen.has(node))
+            throw new TypeError("HF v1 JSON repeated or circular object reference");
+        seen.add(node);
+        if (Array.isArray(node)) {
+            if (node.length > MAX_JSON_ARRAY_LENGTH) {
+                throw new RangeError("HF v1 JSON array exceeds SDK limit");
+            }
+            chargeBudget(budget, node.length ? node.length + 1 : 2);
+            const parts = [];
+            for (let i = 0; i < node.length; i++)
+                parts.push(walk(node[i], depth + 1));
+            return `[${parts.join(",")}]`;
+        }
+        const object = node;
+        const sorted = Object.keys(object).sort();
+        keys += sorted.length;
+        if (keys > MAX_JSON_KEYS)
+            throw new RangeError("HF v1 JSON key count exceeds SDK limit");
+        chargeBudget(budget, sorted.length ? sorted.length + 1 : 2);
+        const entries = [];
+        for (const key of sorted) {
+            const field = quoted(key);
+            chargeBudget(budget, Buffer.byteLength(field, "utf8") + 1);
+            entries.push(`${field}:${walk(object[key], depth + 1)}`);
+        }
+        return `{${entries.join(",")}}`;
+    }
+    return Buffer.from(walk(value, 0), "utf8");
+}
+export function normalizeHfV1Domain(domain) {
+    if (typeof domain !== "string")
+        throw new TypeError("HF v1 domain must be a string");
+    const normalized = domain.trim();
+    if (!DOMAIN_RE.test(normalized))
+        throw new TypeError("Invalid HF v1 domain");
+    return normalized;
+}
+/** frame = 'hf:frame:v1' || 0x00 || u16be(domain length) || domain || u32be(payload length) || payload. */
+export function frameHfV1(domain, payload) {
+    const normalized = normalizeHfV1Domain(domain);
+    if (!(payload instanceof Uint8Array))
+        throw new TypeError("HF v1 payload must be bytes");
+    if (payload.byteLength > MAX_HF_V1_PAYLOAD_BYTES) {
+        throw new RangeError("HF v1 payload exceeds SDK byte limit");
+    }
+    const domainBytes = Buffer.from(normalized, "utf8");
+    const header = Buffer.alloc(FRAME_MAGIC.length + 1 + 2 + domainBytes.length + 4);
+    let offset = 0;
+    FRAME_MAGIC.copy(header, offset);
+    offset += FRAME_MAGIC.length;
+    header[offset++] = 0;
+    header.writeUInt16BE(domainBytes.length, offset);
+    offset += 2;
+    domainBytes.copy(header, offset);
+    offset += domainBytes.length;
+    header.writeUInt32BE(payload.byteLength, offset);
+    return Buffer.concat([header, Buffer.from(payload)]);
+}
+function payloadBytes(material) {
+    switch (material.material) {
+        case "json":
+            return canonicalizeHfV1Json(material.value);
+        case "utf8": {
+            if (typeof material.text !== "string") {
+                throw new TypeError("HF v1 UTF-8 material must be a string");
+            }
+            const bytes = Buffer.from(material.text, "utf8");
+            if (bytes.byteLength > MAX_HF_V1_PAYLOAD_BYTES) {
+                throw new RangeError("HF v1 text exceeds SDK byte limit");
+            }
+            return bytes;
+        }
+        case "raw":
+            if (!(material.bytes instanceof Uint8Array)) {
+                throw new TypeError("HF v1 raw material must be bytes");
+            }
+            return material.bytes;
+        default:
+            throw new TypeError("Unsupported HF v1 material kind");
+    }
+}
+/** SHA3-512 over exact HF v1 framed bytes; returns lowercase hex. */
+export function hashHfV1(input) {
+    const framed = frameHfV1(input.domain, payloadBytes(input));
+    return sha3_512Hex(framed);
+}
+/** Caller expectation selects both framing domain and material encoding. */
+export function verifyHfV1Digest(input) {
+    if (!input?.expected || input.expected.kind !== "digest" || input.expected.contract !== HF_V1_CONTRACT_ID) {
+        throw new TypeError("Expected an hf-contract-v1 digest commitment");
+    }
+    const expected = normalizeSha3_512Digest(input.expected.digest);
+    const domain = normalizeHfV1Domain(input.expected.domain);
+    const material = input.expected.material;
+    if (material !== "json" && material !== "raw" && material !== "utf8") {
+        throw new TypeError("Unsupported HF v1 material kind");
+    }
+    if (!input.evidence || input.evidence.material !== material) {
+        return Object.freeze({
+            outcome: "fail",
+            reason_code: "HF_MATERIAL_MISMATCH",
+            contract: HF_V1_CONTRACT_ID,
+            material,
+            domain,
+            expected_digest: expected,
+            computed_digest: null,
+        });
+    }
+    const computed = hashHfV1({ ...input.evidence, domain });
+    const match = expected === computed;
+    return Object.freeze({
+        outcome: match ? "pass" : "fail",
+        reason_code: match ? null : "DIGEST_MISMATCH",
+        contract: HF_V1_CONTRACT_ID,
+        material,
+        domain,
+        expected_digest: expected,
+        computed_digest: computed,
+    });
+}
+//# sourceMappingURL=hashContractV1.js.map

package/dist/hf/hashContractV1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashContractV1.js","sourceRoot":"","sources":["../../src/hf/hashContractV1.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEzE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAyB,CAAC;AAC3D,MAAM,CAAC,MAAM,cAAc,GAAG,aAAsB,CAAC;AACrD,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAA+B,CAAC;AAEvE,kFAAkF;AAClF,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxD,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,aAAa,GAAG,OAAO,CAAC;AAC9B,MAAM,qBAAqB,GAAG,OAAO,CAAC;AACtC,MAAM,SAAS,GAAG,+BAA+B,CAAC;AAClD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;AAqBxD,SAAS,YAAY,CAAC,MAAwB,EAAE,KAAa;IAC3D,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC;IACrB,IAAI,MAAM,CAAC,IAAI,GAAG,uBAAuB,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAAC,6CAA6C,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAC;IAEb,SAAS,IAAI,CAAC,IAAa,EAAE,KAAa;QACxC,IAAI,KAAK,GAAG,cAAc;YAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAErF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;YACrF,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACpC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YACpC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACzC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,SAAS,CAAC,gCAAgC,OAAO,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,IAAI,YAAY,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC5F,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEf,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;gBACxC,MAAM,IAAI,UAAU,CAAC,oCAAoC,CAAC,CAAC;YAC7D,CAAC;YACD,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3E,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,CAAC;QAED,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC;QACtB,IAAI,IAAI,GAAG,aAAa;YAAE,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;QACzF,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACrF,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,OAAmB;IAC3D,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC,OAAO,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;IACzF,IAAI,OAAO,CAAC,UAAU,GAAG,uBAAuB,EAAE,CAAC;QACjD,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC;IAC7B,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;IACrB,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,IAAI,CAAC,CAAC;IACZ,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC;IAC7B,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,YAAY,CAAC,QAAsB;IAC1C,QAAQ,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC1B,KAAK,MAAM;YACT,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,UAAU,GAAG,uBAAuB,EAAE,CAAC;gBAC/C,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,KAAK;YACR,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;YAC1D,CAAC;YACD,OAAO,QAAQ,CAAC,KAAK,CAAC;QACxB;YACE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC7B,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,KAG/B;IACA,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QAC1G,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACzC,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACrE,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC5D,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,sBAAsB;YACnC,QAAQ,EAAE,iBAAiB;YAC3B,QAAQ;YACR,MAAM;YACN,eAAe,EAAE,QAAQ;YACzB,eAAe,EAAE,IAAI;SACtB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,QAAQ,KAAK,QAAQ,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAChC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB;QAC7C,QAAQ,EAAE,iBAAiB;QAC3B,QAAQ;QACR,MAAM;QACN,eAAe,EAAE,QAAQ;QACzB,eAAe,EAAE,QAAQ;KAC1B,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Public entry point for read-only verification contracts
+ * and offline cryptographic verification primitives.
+ */
+export type * from "./contracts/verification.js";
+export { normalizeSha3_512Digest, sha3_512Hex, verifySha3_512Bytes, } from "./crypto/sha3.js";
+export type { DigestVerificationResult } from "./crypto/sha3.js";
+export { MAX_MERKLE_PROOF_STEPS, verifyMerkleMembership, } from "./merkle/membership.js";
+export type { MerkleMembershipInput, MerkleMembershipResult, MerkleProofStep, } from "./merkle/membership.js";
+export { HF_V1_CANONICAL_JSON_ID, HF_V1_CONTRACT_ID, HF_V1_FRAME_ID, MAX_HF_V1_PAYLOAD_BYTES, canonicalizeHfV1Json, frameHfV1, hashHfV1, normalizeHfV1Domain, verifyHfV1Digest, } from "./hf/hashContractV1.js";
+export type { HfV1DigestVerificationResult, HfV1ExpectedCommitment, HfV1HashInput, HfV1Material, } from "./hf/hashContractV1.js";
+export { sha3_512Stream, verifySha3_512Stream } from "./crypto/streamSha3.js";
+export type { ByteChunkSource, Sha3_512StreamHashResult, Sha3_512StreamVerificationResult, } from "./crypto/streamSha3.js";
+export { verifyDatasetV1Bundle, verifyDatasetV1Receipt } from "./profiles/dataset/v1.js";
+export type { DatasetV1BundleComputed, DatasetV1Mismatch, DatasetV1ReceiptComputed, DatasetV1VerificationResult, } from "./profiles/dataset/v1.js";
+export { verifyIngestV1Bundle, verifyIngestV1Receipt, verifyIngestV1Pair } from "./profiles/ingest/v1.js";
+export type { IngestV1BundleComputed, IngestV1Mismatch, IngestV1ReceiptComputed, IngestV1Result, } from "./profiles/ingest/v1.js";
+export { verifyDatasetV1Sources } from "./profiles/dataset/sourceV1.js";
+export type { DatasetV1SourceInput, DatasetV1SourceResult } from "./profiles/dataset/sourceV1.js";
+export { verifyIngestV1Sources } from "./profiles/ingest/sourceV1.js";
+export type { IngestV1SourceInput, IngestV1SourceMaterial, IngestV1SourceResult } from "./profiles/ingest/sourceV1.js";
+export type { SourceV1File, SourceV1Limits, SourceV1Mismatch } from "./profiles/sourceV1Helpers.js";
+export { verifyDatasetV1WithIntent, verifyIngestV1WithIntent } from "./verification/sourceIntentV1.js";
+export type { DatasetV1IntentInput, IngestV1IntentInput } from "./verification/sourceIntentV1.js";
+export { compareEvidenceTriangulationV1 } from "./triangulation/compareV1.js";
+export type { TriangulationFactPlanV1, TriangulationFactResultV1, TriangulationRelationshipId, TriangulationRelationshipPlanV1, TriangulationRelationshipResultV1, TriangulationV1Input, TriangulationV1Result, } from "./triangulation/compareV1.js";
+export { observeCoreMessageBindingV1, observeMirrorMessageV1 } from "./triangulation/messageObservationV1.js";
+export type { CoreMessageBindingV1Input, MirrorMessageV1Input } from "./triangulation/messageObservationV1.js";
+export { resolveExplorerDatasetV1, resolveExplorerIngestV1, resolveExplorerMerkleRootV1, } from "./resolvers/explorerPublicV1.js";
+export type { ExplorerDatasetV1Request, ExplorerIngestV1Request, ExplorerMerkleRootV1Request, ExplorerPublicRecordV1, ExplorerPublicationV1, } from "./resolvers/explorerPublicV1.js";
+export { resolveExplorerDatasetPublicationV1, resolveExplorerIngestPublicationV1, resolveExplorerMerkleRootPublicationV1, } from "./resolvers/explorerPublicationV1.js";
+export type { ExplorerPublicationDisclosureV1, ExplorerPublishedEvidenceV1 } from "./resolvers/explorerPublicationV1.js";
+export type { ExplorerPublicTransportV1 } from "./resolvers/explorerTransportV1.js";
+export { resolveHederaPublicationV1 } from "./resolvers/hederaMirrorV1.js";
+export type { HederaMirrorV1Config, HederaPublicationObservationV1 } from "./resolvers/hederaMirrorV1.js";
+export { triangulateDatasetV1, triangulateIngestV1 } from "./triangulation/publicV1.js";
+export type { PublicTriangulationV1Config, PublicTriangulationV1Result, PublicIngestTriangulationV1Input } from "./triangulation/publicV1.js";
+export { canonicalizeExecutionVerificationValue, computeExecutionDomainSeparatedSha3_512, executionTimestampNanos, hederaConsensusTimestampNanos, } from "./profiles/execution/recomputationV1.js";
+export { verifyExecutionV1WithIntent } from "./profiles/execution/verificationV1.js";
+export type { ExecutionV1Input, ExecutionV1Profile, ExecutionV1Report } from "./profiles/execution/verificationV1.js";
+export type { PublicExecutionStandardsEvidence, PublicExecutionVerificationMaterial } from "./profiles/execution/contractV1.js";
+export { MAX_HCS1_V1_CHUNKS, MAX_HCS1_V1_FILE_BYTES, parseHcs1ReferenceV1, verifyHcs1ContentV1 } from "./standards/hcs/hcs1V1.js";
+export type { Hcs1V1ContentInput, Hcs1V1ContentOptions, Hcs1V1ContentResult } from "./standards/hcs/hcs1V1.js";
+export { resolveHcs1FileV1 } from "./resolvers/hcs1MirrorV1.js";
+export type { Hcs1MirrorV1Config, Hcs1MirrorV1Request, Hcs1MirrorV1Result } from "./resolvers/hcs1MirrorV1.js";
+export { parseHcs2MemoV1, parseHcs2RegisterV1, verifyHcs2RegisterV1, Hcs2V1Error } from "./standards/hcs/hcs2V1.js";
+export type { Hcs2V1Memo, Hcs2V1Register, Hcs2V1VerificationInput, Hcs2V1VerificationResult } from "./standards/hcs/hcs2V1.js";
+export { resolveHcs2RegisterV1 } from "./resolvers/hcs2MirrorV1.js";
+export type { Hcs2MirrorV1Request, Hcs2MirrorV1Result } from "./resolvers/hcs2MirrorV1.js";
+export { Hcs14V1Error, parseHcs14DidUaidV1, buildHcs14DidUaidV1, verifyHcs14DidBindingV1 } from "./standards/hcs/hcs14V1.js";
+export type { Hcs14DidUaidV1, Hcs14BindingV1Result } from "./standards/hcs/hcs14V1.js";
+export { Hcs11V1Error, MAX_HCS11_V1_PROFILE_BYTES, parseHcs11AccountMemoV1, parseHcs11AiAgentProfileV1, verifyHcs11AiAgentProfileV1 } from "./standards/hcs/hcs11V1.js";
+export type { Hcs11V1Memo, Hcs11V1Profile, Hcs11V1Input, Hcs11V1Result } from "./standards/hcs/hcs11V1.js";
+export { resolveHcs11ProfileV1 } from "./resolvers/hcs11MirrorV1.js";
+export type { Hcs11MirrorV1Request, Hcs11MirrorV1Result } from "./resolvers/hcs11MirrorV1.js";
+export { Hcs13V1Error, MAX_HCS13_V1_SCHEMA_BYTES, buildHcs13ReferenceV1, parseHcs13ReferenceV1, finalizeHcs13SchemaV1, parseHcs13SchemaV1, verifyHcs13SchemaV1 } from "./standards/hcs/hcs13V1.js";
+export type { Hcs13ReferenceV1, Hcs13SchemaV1, Hcs13SchemaVerificationV1 } from "./standards/hcs/hcs13V1.js";
+export { Hcs26V1Error, MAX_HCS26_V1_MANIFEST_BYTES, parseHcs26MemoV1, parseHcs26DiscoveryRegisterV1, parseHcs26DiscoveryUpdateV1, parseHcs26VersionRegisterV1, finalizeHcs26SkillManifestV1, parseHcs26SkillManifestV1, verifyHcs26SkillVersionV1 } from "./standards/hcs/hcs26V1.js";
+export type { Hcs26MemoV1, Hcs26VersionRegisterV1, Hcs26SkillManifestV1, Hcs26VersionVerificationV1 } from "./standards/hcs/hcs26V1.js";
+export { resolveHcs13SchemaV1 } from "./resolvers/hcs13MirrorV1.js";
+export type { Hcs13MirrorV1Request, Hcs13MirrorV1Result } from "./resolvers/hcs13MirrorV1.js";
+export { resolveHcs26SkillVersionV1 } from "./resolvers/hcs26MirrorV1.js";
+export type { Hcs26MirrorV1Request, Hcs26MirrorV1Result, Hcs26ManifestFileResolutionV1, Hcs26ManifestFilesResolutionV1 } from "./resolvers/hcs26MirrorV1.js";
+export { verifyExecutionWithIndependentStandardsV1 } from "./profiles/execution/independentStandardsV1.js";
+export type { IndependentStandardsV1Item, IndependentStandardsV1Report } from "./profiles/execution/independentStandardsV1.js";
+export { resolveExplorerExecutionV1 } from "./resolvers/explorerExecutionV1.js";
+export type { ExplorerExecutionV1Request, ExplorerExecutionV1Result } from "./resolvers/explorerExecutionV1.js";
+export { resolveExecutionHederaV1 } from "./resolvers/executionMirrorV1.js";
+export type { ExecutionMirrorV1Result } from "./resolvers/executionMirrorV1.js";
+export { triangulatePublicExecutionV1 } from "./triangulation/executionPublicV1.js";
+export type { PublicExecutionTriangulationV1Config, PublicExecutionTriangulationV1Result } from "./triangulation/executionPublicV1.js";
+export { VERIFICATION_CORE_SCHEMA_VERSION, canonicalizeVerificationCoreV1, computeVerificationCoreDigestV1 } from "./reports/coreV1.js";
+export { PORTABLE_VERIFICATION_REPORT_SCHEMA_VERSION, createPortableVerificationReportV1, canonicalizePortableVerificationReportV1, computePortableVerificationReportDigestV1 } from "./reports/portableV1.js";
+export type { PortableVerificationReportV1, PortableVerificationReportV1Input } from "./reports/portableV1.js";
+export { validatePortableVerificationReportV1, comparePortableVerificationReportsV1 } from "./reports/validationV1.js";
+export type { PortableVerificationReportValidationV1, PortableVerificationReportComparisonV1 } from "./reports/validationV1.js";
+export { VERIFICATION_POLICY_SCHEMA_VERSION } from "./policy/contractV1.js";
+export type { VerificationPolicyAssuranceV1, VerificationPolicyV1, VerificationPolicyRequirementV1, VerificationPolicyDecisionV1, VerificationPolicyWorkflowV1 } from "./policy/contractV1.js";
+export { assessPortableVerificationPolicyV1, verifyDatasetWithPolicyV1, verifyIngestWithPolicyV1, verifyExecutionWithPolicyV1, triangulateDatasetWithPolicyV1, triangulateIngestWithPolicyV1, triangulateExecutionWithPolicyV1, verifyExecutionStandardsWithPolicyV1 } from "./policy/evaluateV1.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,mBAAmB,6BAA6B,CAAC;AAEjD,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAEjE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,eAAe,GAChB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,4BAA4B,EAC5B,sBAAsB,EACtB,aAAa,EACb,YAAY,GACb,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,YAAY,EACV,eAAe,EACf,wBAAwB,EACxB,gCAAgC,GACjC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACzF,YAAY,EACV,uBAAuB,EACvB,iBAAiB,EACjB,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC1G,YAAY,EACV,sBAAsB,EACtB,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,GACf,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,YAAY,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAClG,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACvH,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEpG,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AACvG,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAElG,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,YAAY,EACV,uBAAuB,EACvB,yBAAyB,EACzB,2BAA2B,EAC3B,+BAA+B,EAC/B,iCAAiC,EACjC,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAC9G,YAAY,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,yCAAyC,CAAC;AAE/G,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AACzC,YAAY,EACV,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,EAC3B,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAC9C,YAAY,EAAE,+BAA+B,EAAE,2BAA2B,EAAE,MAAM,sCAAsC,CAAC;AACzH,YAAY,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAEpF,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAC3E,YAAY,EAAE,oBAAoB,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAC1G,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACxF,YAAY,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAI9I,OAAO,EACL,sCAAsC,EACtC,uCAAuC,EACvC,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AAGjD,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AACrF,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AACtH,YAAY,EAAE,gCAAgC,EAAE,mCAAmC,EAAE,MAAM,oCAAoC,CAAC;AAGhI,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAClI,YAAY,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAC/G,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAG/G,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACpH,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC/H,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAG3F,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAC7H,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAEvF,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AACxK,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAG3G,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAG9F,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,qBAAqB,EAC5F,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACrG,YAAY,EAAE,gBAAgB,EAAE,aAAa,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAG7G,OAAO,EAAE,YAAY,EAAE,2BAA2B,EAAE,gBAAgB,EAClE,6BAA6B,EAAE,2BAA2B,EAAE,2BAA2B,EACvF,4BAA4B,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACzH,YAAY,EAAE,WAAW,EAAE,sBAAsB,EAAE,oBAAoB,EACrE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAGjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAG9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,YAAY,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,6BAA6B,EACpF,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAIvE,OAAO,EAAE,yCAAyC,EAAE,MAAM,gDAAgD,CAAC;AAC3G,YAAY,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,MAAM,gDAAgD,CAAC;AAE/H,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAChF,YAAY,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,oCAAoC,CAAC;AAChH,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,YAAY,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,YAAY,EAAE,oCAAoC,EAAE,oCAAoC,EAAE,MAAM,sCAAsC,CAAC;AAEvI,OAAO,EAAE,gCAAgC,EAAE,8BAA8B,EACvE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,2CAA2C,EAAE,kCAAkC,EACtF,wCAAwC,EAAE,yCAAyC,EAAE,MAAM,yBAAyB,CAAC;AACvH,YAAY,EAAE,4BAA4B,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAE/G,OAAO,EAAE,oCAAoC,EAAE,oCAAoC,EAAE,MAAM,2BAA2B,CAAC;AACvH,YAAY,EAAE,sCAAsC,EAAE,sCAAsC,EAAE,MAAM,2BAA2B,CAAC;AAGhI,OAAO,EAAE,kCAAkC,EAAE,MAAM,wBAAwB,CAAC;AAC5E,YAAY,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,+BAA+B,EAChG,4BAA4B,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EAAE,kCAAkC,EAAE,yBAAyB,EACpE,wBAAwB,EAAE,2BAA2B,EACrD,8BAA8B,EAAE,6BAA6B,EAC7D,gCAAgC,EAAE,oCAAoC,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -0,0 +1,57 @@
+/**
+ * Public entry point for read-only verification contracts
+ * and offline cryptographic verification primitives.
+ */
+export { normalizeSha3_512Digest, sha3_512Hex, verifySha3_512Bytes, } from "./crypto/sha3.js";
+export { MAX_MERKLE_PROOF_STEPS, verifyMerkleMembership, } from "./merkle/membership.js";
+export { HF_V1_CANONICAL_JSON_ID, HF_V1_CONTRACT_ID, HF_V1_FRAME_ID, MAX_HF_V1_PAYLOAD_BYTES, canonicalizeHfV1Json, frameHfV1, hashHfV1, normalizeHfV1Domain, verifyHfV1Digest, } from "./hf/hashContractV1.js";
+export { sha3_512Stream, verifySha3_512Stream } from "./crypto/streamSha3.js";
+export { verifyDatasetV1Bundle, verifyDatasetV1Receipt } from "./profiles/dataset/v1.js";
+export { verifyIngestV1Bundle, verifyIngestV1Receipt, verifyIngestV1Pair } from "./profiles/ingest/v1.js";
+export { verifyDatasetV1Sources } from "./profiles/dataset/sourceV1.js";
+export { verifyIngestV1Sources } from "./profiles/ingest/sourceV1.js";
+export { verifyDatasetV1WithIntent, verifyIngestV1WithIntent } from "./verification/sourceIntentV1.js";
+export { compareEvidenceTriangulationV1 } from "./triangulation/compareV1.js";
+export { observeCoreMessageBindingV1, observeMirrorMessageV1 } from "./triangulation/messageObservationV1.js";
+export { resolveExplorerDatasetV1, resolveExplorerIngestV1, resolveExplorerMerkleRootV1, } from "./resolvers/explorerPublicV1.js";
+export { resolveExplorerDatasetPublicationV1, resolveExplorerIngestPublicationV1, resolveExplorerMerkleRootPublicationV1, } from "./resolvers/explorerPublicationV1.js";
+export { resolveHederaPublicationV1 } from "./resolvers/hederaMirrorV1.js";
+export { triangulateDatasetV1, triangulateIngestV1 } from "./triangulation/publicV1.js";
+// Deterministic primitives for supported SAGE execution evidence.
+// These are not themselves acceptance or identity verification.
+export { canonicalizeExecutionVerificationValue, computeExecutionDomainSeparatedSha3_512, executionTimestampNanos, hederaConsensusTimestampNanos, } from "./profiles/execution/recomputationV1.js";
+// Independent offline SAGE execution profile; rule outcomes are SDK-native findings.
+export { verifyExecutionV1WithIntent } from "./profiles/execution/verificationV1.js";
+// Supported pinned HCS-1 file integrity and independent Mirror observation.
+export { MAX_HCS1_V1_CHUNKS, MAX_HCS1_V1_FILE_BYTES, parseHcs1ReferenceV1, verifyHcs1ContentV1 } from "./standards/hcs/hcs1V1.js";
+export { resolveHcs1FileV1 } from "./resolvers/hcs1MirrorV1.js";
+// Pinned HCS-2 historical registry entry checks; independent of VA evidence production.
+export { parseHcs2MemoV1, parseHcs2RegisterV1, verifyHcs2RegisterV1, Hcs2V1Error } from "./standards/hcs/hcs2V1.js";
+export { resolveHcs2RegisterV1 } from "./resolvers/hcs2MirrorV1.js";
+// Pinned open HCS-14 DID-backed UAID structural binding; no DID controller authentication.
+export { Hcs14V1Error, parseHcs14DidUaidV1, buildHcs14DidUaidV1, verifyHcs14DidBindingV1 } from "./standards/hcs/hcs14V1.js";
+// Pinned open HCS-11 AI-agent profile integrity and reference checks; no account ownership assertion.
+export { Hcs11V1Error, MAX_HCS11_V1_PROFILE_BYTES, parseHcs11AccountMemoV1, parseHcs11AiAgentProfileV1, verifyHcs11AiAgentProfileV1 } from "./standards/hcs/hcs11V1.js";
+// Account -> current HCS-11 memo -> optional historical HCS-2 -> HCS-1 -> HCS-11/HCS-14.
+export { resolveHcs11ProfileV1 } from "./resolvers/hcs11MirrorV1.js";
+// Open pinned HCS-13 schema references and canonical document integrity (offline).
+export { Hcs13V1Error, MAX_HCS13_V1_SCHEMA_BYTES, buildHcs13ReferenceV1, parseHcs13ReferenceV1, finalizeHcs13SchemaV1, parseHcs13SchemaV1, verifyHcs13SchemaV1 } from "./standards/hcs/hcs13V1.js";
+// Open pinned HCS-26 discovery/version registers and SKILL.json integrity (offline).
+export { Hcs26V1Error, MAX_HCS26_V1_MANIFEST_BYTES, parseHcs26MemoV1, parseHcs26DiscoveryRegisterV1, parseHcs26DiscoveryUpdateV1, parseHcs26VersionRegisterV1, finalizeHcs26SkillManifestV1, parseHcs26SkillManifestV1, verifyHcs26SkillVersionV1 } from "./standards/hcs/hcs26V1.js";
+// Historical HCS-13 HCS-2 registration -> HCS-1 schema resolution.
+export { resolveHcs13SchemaV1 } from "./resolvers/hcs13MirrorV1.js";
+// Historical HCS-26 discovery -> version registration -> HCS-1 skill manifest + declared files.
+export { resolveHcs26SkillVersionV1 } from "./resolvers/hcs26MirrorV1.js";
+// SDK-owned online integration: exact HCS-11/14, HCS-13 and HCS-26 reference
+// observations augment the offline SAGE report without trusting producer summaries.
+export { verifyExecutionWithIndependentStandardsV1 } from "./profiles/execution/independentStandardsV1.js";
+export { resolveExplorerExecutionV1 } from "./resolvers/explorerExecutionV1.js";
+export { resolveExecutionHederaV1 } from "./resolvers/executionMirrorV1.js";
+export { triangulatePublicExecutionV1 } from "./triangulation/executionPublicV1.js";
+export { VERIFICATION_CORE_SCHEMA_VERSION, canonicalizeVerificationCoreV1, computeVerificationCoreDigestV1 } from "./reports/coreV1.js";
+export { PORTABLE_VERIFICATION_REPORT_SCHEMA_VERSION, createPortableVerificationReportV1, canonicalizePortableVerificationReportV1, computePortableVerificationReportDigestV1 } from "./reports/portableV1.js";
+export { validatePortableVerificationReportV1, comparePortableVerificationReportsV1 } from "./reports/validationV1.js";
+// Exact policy evaluation. Saved reports remain unauthenticated and cannot grant allow.
+export { VERIFICATION_POLICY_SCHEMA_VERSION } from "./policy/contractV1.js";
+export { assessPortableVerificationPolicyV1, verifyDatasetWithPolicyV1, verifyIngestWithPolicyV1, verifyExecutionWithPolicyV1, triangulateDatasetWithPolicyV1, triangulateIngestWithPolicyV1, triangulateExecutionWithPolicyV1, verifyExecutionStandardsWithPolicyV1 } from "./policy/evaluateV1.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EACL,uBAAuB,EACvB,WAAW,EACX,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAI1B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,SAAS,EACT,QAAQ,EACR,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAQhC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAO9E,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAQzF,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAQ1G,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAExE,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AAItE,OAAO,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAGvG,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAU9E,OAAO,EAAE,2BAA2B,EAAE,sBAAsB,EAAE,MAAM,yCAAyC,CAAC;AAG9G,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,2BAA2B,GAC5B,MAAM,iCAAiC,CAAC;AAQzC,OAAO,EACL,mCAAmC,EACnC,kCAAkC,EAClC,sCAAsC,GACvC,MAAM,sCAAsC,CAAC;AAI9C,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AAE3E,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAGxF,kEAAkE;AAClE,gEAAgE;AAChE,OAAO,EACL,sCAAsC,EACtC,uCAAuC,EACvC,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,yCAAyC,CAAC;AAEjD,qFAAqF;AACrF,OAAO,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAIrF,4EAA4E;AAC5E,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAElI,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGhE,wFAAwF;AACxF,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAEpH,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAGpE,2FAA2F;AAC3F,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAE7H,sGAAsG;AACtG,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAC;AAGxK,yFAAyF;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAGrE,mFAAmF;AACnF,OAAO,EAAE,YAAY,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,qBAAqB,EAC5F,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGrG,qFAAqF;AACrF,OAAO,EAAE,YAAY,EAAE,2BAA2B,EAAE,gBAAgB,EAClE,6BAA6B,EAAE,2BAA2B,EAAE,2BAA2B,EACvF,4BAA4B,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAIzH,mEAAmE;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAGpE,gGAAgG;AAChG,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAI1E,6EAA6E;AAC7E,oFAAoF;AACpF,OAAO,EAAE,yCAAyC,EAAE,MAAM,gDAAgD,CAAC;AAG3G,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAEhF,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAGpF,OAAO,EAAE,gCAAgC,EAAE,8BAA8B,EACvE,+BAA+B,EAAE,MAAM,qBAAqB,CAAC;AAE/D,OAAO,EAAE,2CAA2C,EAAE,kCAAkC,EACtF,wCAAwC,EAAE,yCAAyC,EAAE,MAAM,yBAAyB,CAAC;AAGvH,OAAO,EAAE,oCAAoC,EAAE,oCAAoC,EAAE,MAAM,2BAA2B,CAAC;AAGvH,wFAAwF;AACxF,OAAO,EAAE,kCAAkC,EAAE,MAAM,wBAAwB,CAAC;AAG5E,OAAO,EAAE,kCAAkC,EAAE,yBAAyB,EACpE,wBAAwB,EAAE,2BAA2B,EACrD,8BAA8B,EAAE,6BAA6B,EAC7D,gCAAgC,EAAE,oCAAoC,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/merkle/membership.d.ts

@@ -0,0 +1,30 @@
+import type { ExpectedCommitment, VerificationOutcome } from "../contracts/verification.js";
+export declare const MAX_MERKLE_PROOF_STEPS = 64;
+export type MerkleProofStep = Readonly<{
+    position: "left" | "right";
+    hash: string;
+}>;
+export type MerkleMembershipInput = Readonly<{
+    /** This commitment must come from the caller's trusted expectations. */
+    expected: Extract<ExpectedCommitment, {
+        kind: "merkle-root";
+    }>;
+    proof: Readonly<{
+        /** Stored leaf digest; v2 applies a separate leaf-node hash. */
+        leaf_hash: string;
+        leaf_index: number;
+        path: readonly MerkleProofStep[];
+    }>;
+}>;
+export type MerkleMembershipResult = Readonly<{
+    outcome: Extract<VerificationOutcome, "pass" | "fail" | "unsupported">;
+    reason_code: string | null;
+    expected_root: string;
+    computed_root: string | null;
+}>;
+/**
+ * Verify membership against a separately trusted root, algorithm, and leaf count.
+ * This establishes a mathematical commitment relationship, not ledger authenticity.
+ */
+export declare function verifyMerkleMembership(input: MerkleMembershipInput): MerkleMembershipResult;
+//# sourceMappingURL=membership.d.ts.map

package/dist/merkle/membership.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"membership.d.ts","sourceRoot":"","sources":["../../src/merkle/membership.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAG5F,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAEzC,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,wEAAwE;IACxE,QAAQ,EAAE,OAAO,CAAC,kBAAkB,EAAE;QAAE,IAAI,EAAE,aAAa,CAAA;KAAE,CAAC,CAAC;IAC/D,KAAK,EAAE,QAAQ,CAAC;QACd,gEAAgE;QAChE,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,IAAI,EAAE,SAAS,eAAe,EAAE,CAAC;KAClC,CAAC,CAAC;CACJ,CAAC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,OAAO,EAAE,OAAO,CAAC,mBAAmB,EAAE,MAAM,GAAG,MAAM,GAAG,aAAa,CAAC,CAAC;IACvE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B,CAAC,CAAC;AA6EH;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,qBAAqB,GAAG,sBAAsB,CA6C3F"}