@xyo-network/event-kit-protocol 1.0.0 → 1.0.1

package/dist/neutral/admissionCore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admissionCore.d.ts","sourceRoot":"","sources":["../../src/admissionCore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EAGf,oBAAoB,EAGpB,mBAAmB,EAEpB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAEvE,MAAM,WAAW,kBAAkB,CAAC,KAAK,GAAG,YAAY;IACtD,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAA;IACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAA;IACxC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CACrB;AAED,MAAM,MAAM,4BAA4B,GAClC,eAAe,GACf,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,CAAA;AAEzB,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAA;CAC9C;AAED,MAAM,WAAW,sBAAsB,CAAC,KAAK,GAAG,YAAY;IAC1D,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,CAAA;IAC9C,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CACrB;AAED,MAAM,MAAM,qBAAqB,CAAC,KAAK,GAAG,YAAY,IAAI,sBAAsB,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;AAEhH;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAgBtH"}
+{"version":3,"file":"admissionCore.d.ts","sourceRoot":"","sources":["../../src/admissionCore.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EAGf,oBAAoB,EAGpB,mBAAmB,EAEpB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAEvE,MAAM,WAAW,kBAAkB,CAAC,KAAK,GAAG,YAAY;IACtD,2EAA2E;IAC3E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAA;IACtC,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAA;IACxC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CACrB;AAED,MAAM,MAAM,4BAA4B,GAClC,eAAe,GACf,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,mBAAmB,GACnB,kBAAkB,GAClB,mBAAmB,CAAA;AAEzB,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACpC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAA;CAC9C;AAED,MAAM,WAAW,sBAAsB,CAAC,KAAK,GAAG,YAAY;IAC1D,QAAQ,CAAC,WAAW,EAAE,WAAW,GAAG,UAAU,CAAA;IAC9C,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;IACjB,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAA;CACrB;AAED,MAAM,MAAM,qBAAqB,CAAC,KAAK,GAAG,YAAY,IAAI,sBAAsB,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;AAEhH;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAetH"}

package/dist/neutral/endpointChallenge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"endpointChallenge.d.ts","sourceRoot":"","sources":["../../src/endpointChallenge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,OAAO,EACP,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,EACX,IAAI,EACJ,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gCAAgC,CAAA;AAevC,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,IAAI,CAAA;IACnB,SAAS,EAAE,mBAAmB,CAAA;IAC9B,KAAK,EAAE,IAAI,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,WAAW,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,OAAO,EAAE,IAAI,CAAA;IACb,UAAU,EAAE,iBAAiB,CAAA;IAC7B,YAAY,EAAE,IAAI,CAAA;CACnB;AAED,MAAM,WAAW,oCAAoC;IACnD,SAAS,EAAE,iBAAiB,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,yBAAyB,CAAA;IACnC,MAAM,EAAE,gBAAgB,CAAA;CACzB;AAED,KAAK,iCAAiC,GAAG,IAAI,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAA;AA6BjG,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGvF;AAED,uFAAuF;AACvF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CA4B9F;AAED,uFAAuF;AACvF,wBAAsB,+BAA+B,CACnD,SAAS,EAAE,iBAAiB,EAC5B,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,yBAAyB,CAAC,CAOpC;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,OAAO,CAAC,CAUlB;AAED,iGAAiG;AACjG,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,OAAO,CAAC,CAUlB"}
+{"version":3,"file":"endpointChallenge.d.ts","sourceRoot":"","sources":["../../src/endpointChallenge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,OAAO,EACP,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,EACX,IAAI,EACJ,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,gCAAgC,CAAA;AAevC,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,EAAE,IAAI,CAAA;IACnB,SAAS,EAAE,mBAAmB,CAAA;IAC9B,KAAK,EAAE,IAAI,CAAA;IACX,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,WAAW,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,EAAE,iBAAiB,CAAA;IAC5B,OAAO,EAAE,IAAI,CAAA;IACb,UAAU,EAAE,iBAAiB,CAAA;IAC7B,YAAY,EAAE,IAAI,CAAA;CACnB;AAED,MAAM,WAAW,oCAAoC;IACnD,SAAS,EAAE,iBAAiB,CAAA;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,yBAAyB,CAAA;IACnC,MAAM,EAAE,gBAAgB,CAAA;CACzB;AAED,KAAK,iCAAiC,GAAG,IAAI,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAA;AA6BjG,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGvF;AAED,uFAAuF;AACvF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,4BAA4B,GAAG,iBAAiB,CA4B9F;AAED,uFAAuF;AACvF,wBAAsB,+BAA+B,CACnD,SAAS,EAAE,iBAAiB,EAC5B,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,yBAAyB,CAAC,CAOpC;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,OAAO,CAAC,CASlB;AAED,iGAAiG;AACjG,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,OAAO,CAAC,CAUlB"}

package/dist/neutral/index.mjs

@@ -13,8 +13,7 @@ async function admitVerifiedWake(input) {
     return reject("grant-view-invalid", ["expectedHead must be a nonnegative safe integer"]);
   }
   const authorization = await authorize(input);
-  if (!authorization.ok) return authorization.failure;
-  return await commitAuthorizedWake(input.inbox, attempt, authorization.grant, wake);
+  return authorization.ok ? await commitAuthorizedWake(input.inbox, attempt, authorization.grant, wake) : authorization.failure;
 }
 async function resolvePriorAttempt(inbox, attempt, wake) {
   let resolution;
@@ -33,10 +32,7 @@ async function resolvePriorAttempt(inbox, attempt, wake) {
     const receiptFailure = validateReceipt(resolution.receipt, attempt);
     return completed(receiptFailure ?? success("duplicate", snapshotReceipt(resolution.receipt), wake));
   }
-  if (resolution.kind !== "new") {
-    return completed(reject("inbox-unavailable", ["inbox returned an unknown attempt resolution"]));
-  }
-  return Object.freeze({ pending: true });
+  return resolution.kind === "new" ? Object.freeze({ pending: true }) : completed(reject("inbox-unavailable", ["inbox returned an unknown attempt resolution"]));
 }
 async function commitAuthorizedWake(inbox, attempt, grant, wake) {
   let committed;
@@ -59,8 +55,7 @@ async function commitAuthorizedWake(inbox, attempt, grant, wake) {
     return reject("inbox-unavailable", ["inbox returned an unknown commit result"]);
   }
   const receiptFailure = validateReceipt(committed.receipt, attempt);
-  if (receiptFailure !== void 0) return receiptFailure;
-  return success(committed.kind, snapshotReceipt(committed.receipt), wake);
+  return receiptFailure ?? success(committed.kind, snapshotReceipt(committed.receipt), wake);
 }
 function completed(result) {
   return Object.freeze({ pending: false, result });
@@ -132,10 +127,7 @@ function validateGrantView(decision, expectedHead, maxGrantLagBlocks) {
   if (decision.lag !== void 0 && decision.lag !== lag) {
     return reject("grant-view-invalid", ["grant diagnostic lag disagrees with the recomputed lag"]);
   }
-  if (lag > maxGrantLagBlocks) {
-    return reject("grant-view-stale", [`grantLag=${lag} max=${maxGrantLagBlocks}`]);
-  }
-  return void 0;
+  return lag > maxGrantLagBlocks ? reject("grant-view-stale", [`grantLag=${lag} max=${maxGrantLagBlocks}`]) : void 0;
 }
 function validateGrantEvidence(evidence, verified, atBlock) {
   if (!isRecord(evidence)) return reject("grant-view-invalid", ["enabled grant decision omitted evidence"]);
@@ -170,10 +162,7 @@ function validateGrantEvidence(evidence, verified, atBlock) {
   }
   const evidenceHasQueue = Object.hasOwn(evidence, "queueId");
   const routeHasQueue = Object.hasOwn(verified.route, "queueId");
-  if (evidence.deploymentId !== verified.route.deploymentId || evidenceHasQueue !== routeHasQueue || evidence.queueId !== verified.route.queueId) {
-    return reject("grant-view-invalid", ["grant scope does not exactly match the configured route"]);
-  }
-  return void 0;
+  return evidence.deploymentId !== verified.route.deploymentId || evidenceHasQueue !== routeHasQueue || evidence.queueId !== verified.route.queueId ? reject("grant-view-invalid", ["grant scope does not exactly match the configured route"]) : void 0;
 }
 function validateReceipt(receipt, attempt) {
   const requiredFields = [
@@ -186,10 +175,7 @@ function validateReceipt(receipt, attempt) {
   if (!isRecord(receipt) || requiredFields.some((field) => !Object.hasOwn(receipt, field)) || typeof receipt.id !== "string" || receipt.id.length === 0) {
     return reject("inbox-unavailable", ["inbox returned an invalid receipt"]);
   }
-  if (receipt.audience !== attempt.audience || receipt.publisher !== attempt.publisher || receipt.eventHash !== attempt.eventHash || receipt.wakeId !== attempt.wakeId) {
-    return reject("inbox-unavailable", ["inbox receipt is not bound to the verified attempt"]);
-  }
-  return void 0;
+  return receipt.audience !== attempt.audience || receipt.publisher !== attempt.publisher || receipt.eventHash !== attempt.eventHash || receipt.wakeId !== attempt.wakeId ? reject("inbox-unavailable", ["inbox receipt is not bound to the verified attempt"]) : void 0;
 }
 function snapshotGrantEvidence(evidence) {
   return Object.freeze({
@@ -427,8 +413,7 @@ async function verifyEndpointChallengeProof(input) {
     const challenge = EndpointChallengeZod.parse(input.challenge);
     const response = EndpointChallengeResponseZod.parse(input.response);
     const challengeHash = await endpointChallengeHash(challenge);
-    if (response.challenge !== challengeHash) return false;
-    return equalProof(response.proof, await hmacProof(input.secret, challengeHash));
+    return response.challenge === challengeHash && equalProof(response.proof, await hmacProof(input.secret, challengeHash));
   } catch {
     return false;
   }
@@ -436,8 +421,7 @@ async function verifyEndpointChallengeProof(input) {
 async function verifyEndpointChallengeResponse(input) {
   try {
     const challenge = EndpointChallengeZod.parse(input.challenge);
-    if (!Number.isSafeInteger(input.nowSeconds) || input.nowSeconds < challenge.issuedAt || input.nowSeconds >= challenge.expiresAt) return false;
-    return await verifyEndpointChallengeProof(input);
+    return Number.isSafeInteger(input.nowSeconds) && input.nowSeconds >= challenge.issuedAt && input.nowSeconds < challenge.expiresAt && await verifyEndpointChallengeProof(input);
   } catch {
     return false;
   }
@@ -850,12 +834,10 @@ function isUnrevokedEvidence(claimedAtBlock, revokedAtBlock, finalizedHead) {
   return isVisible(claimedAtBlock, finalizedHead) && (revokedAtBlock === void 0 || isNonnegativeSafeInteger2(revokedAtBlock) && revokedAtBlock >= claimedAtBlock) && !isRevoked(revokedAtBlock, finalizedHead);
 }
 function isInsideExclusiveWindow(finalizedHead, validFromBlock, expiresAtBlock) {
-  if (!isNonnegativeSafeInteger2(validFromBlock) || finalizedHead < validFromBlock) return false;
-  return expiresAtBlock === void 0 || isNonnegativeSafeInteger2(expiresAtBlock) && expiresAtBlock > validFromBlock && finalizedHead < expiresAtBlock;
+  return isNonnegativeSafeInteger2(validFromBlock) && finalizedHead >= validFromBlock && (expiresAtBlock === void 0 || isNonnegativeSafeInteger2(expiresAtBlock) && expiresAtBlock > validFromBlock && finalizedHead < expiresAtBlock);
 }
 function isRevisionShapeValid(revision) {
-  if (!Number.isSafeInteger(revision.revision) || revision.revision < 1) return false;
-  if (!isNonnegativeSafeInteger2(revision.claimedAtBlock)) return false;
+  if (!Number.isSafeInteger(revision.revision) || revision.revision < 1 || !isNonnegativeSafeInteger2(revision.claimedAtBlock)) return false;
   if (revision.revokedAtBlock !== void 0 && (!isNonnegativeSafeInteger2(revision.revokedAtBlock) || revision.revokedAtBlock < revision.claimedAtBlock)) return false;
   return revision.revision === 1 ? revision.supersedes === void 0 : revision.supersedes !== void 0;
 }
@@ -929,8 +911,7 @@ function selectPublisherService(input) {
     }
   }
   if (selectable.length === 0) return { ok: false, reason: "service-not-found" };
-  if (selectable.length > 1) return { ok: false, reason: "ambiguous-service" };
-  return { ok: true, service: selectable[0] };
+  return selectable.length > 1 ? { ok: false, reason: "ambiguous-service" } : { ok: true, service: selectable[0] };
 }
 function resolvePreferredEncryptionKey(input) {
   const preferredHash = input.service.preferredEncryptionKey;
@@ -943,10 +924,7 @@ function resolvePreferredEncryptionKey(input) {
   const key = exact[0];
   const sameStableIdentity = input.keys.filter((candidate) => candidate.source === key.source && candidate.keyId === key.keyId && candidate.objectHash !== key.objectHash && isVisible(candidate.claimedAtBlock, input.finalizedHead));
   if (sameStableIdentity.length > 0) return { ok: false, reason: "ambiguous-key" };
-  if (!isUnrevokedEvidence(key.claimedAtBlock, key.revokedAtBlock, input.finalizedHead) || !isInsideExclusiveWindow(input.finalizedHead, key.validFromBlock, key.expiresAtBlock)) {
-    return { ok: false, reason: "preferred-key-inactive" };
-  }
-  return { ok: true, key };
+  return !isUnrevokedEvidence(key.claimedAtBlock, key.revokedAtBlock, input.finalizedHead) || !isInsideExclusiveWindow(input.finalizedHead, key.validFromBlock, key.expiresAtBlock) ? { ok: false, reason: "preferred-key-inactive" } : { ok: true, key };
 }
 function acceptanceFor(subscription, input) {
   return input.acceptances.filter((acceptance) => acceptance.source === input.publisherSource && acceptance.subscription === subscription.objectHash && isVisible(acceptance.acceptanceBlock, input.finalizedHead));
@@ -991,10 +969,7 @@ function selectSubscriptionActivation(input) {
   if (selected === void 0) return { ok: false, reason: "subscription-pending" };
   const latest = resolution.chain.at(-1);
   if (!isActiveAcceptedSubscription(selected, input.finalizedHead)) {
-    if (latest?.objectHash !== selected.subscription.objectHash) {
-      return { ok: false, reason: "subscription-pending" };
-    }
-    return { ok: false, reason: "subscription-inactive" };
+    return { ok: false, reason: latest?.objectHash === selected.subscription.objectHash ? "subscription-inactive" : "subscription-pending" };
   }
   return {
     acceptance: selected.acceptance,
@@ -1323,8 +1298,7 @@ function publicBindingFailure(candidate, parsed) {
   if (!hasExactKeyBinding(parsed.service, hashedKey, parsed.subscription)) return "key-binding-invalid";
   if (!isActiveAt(parsed.service, candidate.tupleBlock) || !isActiveAt(parsed.service, candidate.finalizedHead)) return "service-inactive";
   if (!isActiveAt(parsed.key, candidate.tupleBlock) || !isActiveAt(parsed.key, candidate.finalizedHead)) return "key-inactive";
-  if (!expiryWithinServicePolicy(parsed.subscription, parsed.service, candidate.tupleBlock) || parsed.subscription.expiresAtBlock - candidate.finalizedHead <= 2) return "subscription-expiry-invalid";
-  return void 0;
+  return !expiryWithinServicePolicy(parsed.subscription, parsed.service, candidate.tupleBlock) || parsed.subscription.expiresAtBlock - candidate.finalizedHead <= 2 ? "subscription-expiry-invalid" : void 0;
 }
 async function decryptCandidate(candidate, parsed) {
   let privateKey;
@@ -1388,19 +1362,14 @@ async function validateAndDecryptPublisherSubscription(candidate) {
   if (!hasExactQueueScope(parsed.grant, decrypted.plaintext)) {
     return rejectPublisherSubscription("grant-scope-invalid");
   }
-  if (!filterWithinServicePolicy(parsed.service, decrypted.plaintext)) {
-    return rejectPublisherSubscription("service-limit-invalid");
-  }
-  return validatedPublisherSubscription(candidate, parsed, decrypted.plaintext);
+  return filterWithinServicePolicy(parsed.service, decrypted.plaintext) ? validatedPublisherSubscription(candidate, parsed, decrypted.plaintext) : rejectPublisherSubscription("service-limit-invalid");
 }
 function endpointChallengeMatchesPublisherContext(challenge, context) {
   const parsed = EndpointChallengeZod3.safeParse(challenge);
-  if (!parsed.success) return false;
-  return parsed.data.chainId === context.chainId && parsed.data.publisher === context.publisher && parsed.data.subscriber === context.subscriber && parsed.data.service === context.service && parsed.data.encryptionKey === context.encryptionKey && parsed.data.keyId === context.keyId && parsed.data.subscription === context.subscription && parsed.data.grant === context.grant && parsed.data.eventKind === context.eventKind;
+  return parsed.success && parsed.data.chainId === context.chainId && parsed.data.publisher === context.publisher && parsed.data.subscriber === context.subscriber && parsed.data.service === context.service && parsed.data.encryptionKey === context.encryptionKey && parsed.data.keyId === context.keyId && parsed.data.subscription === context.subscription && parsed.data.grant === context.grant && parsed.data.eventKind === context.eventKind;
 }
 async function challengeRecordMatches(record, challenge, challengeHash, responseHash) {
-  if (record.challengeHash !== challengeHash || await endpointChallengeHash(record.challenge) !== challengeHash || await endpointChallengeHash(challenge) !== challengeHash) return false;
-  return responseHash === void 0 || record.responseHash === responseHash;
+  return record.challengeHash === challengeHash && await endpointChallengeHash(record.challenge) === challengeHash && await endpointChallengeHash(challenge) === challengeHash && (responseHash === void 0 || record.responseHash === responseHash);
 }
 async function issuePublisherEndpointChallenge(input) {
   const context = input.subscription.context;
@@ -1443,8 +1412,7 @@ async function beginPublisherEndpointChallengeAttempt(input) {
       HashZod4.parse(input.challengeHash)
     )) return { kind: "store-invalid" };
     if ((result.kind === "started" || result.kind === "already-attempted") && result.record.state !== "attempted") return { kind: "store-invalid" };
-    if (result.kind === "verified" && result.record.state !== "verified") return { kind: "store-invalid" };
-    return result;
+    return result.kind === "verified" && result.record.state !== "verified" ? { kind: "store-invalid" } : result;
   } catch {
     return { kind: "store-unavailable" };
   }
@@ -1461,10 +1429,7 @@ async function validateChallengeCompletion(input, result, challengeHash, respons
   if (result.kind === "expired") return completeFailure("challenge-expired");
   if (result.kind === "not-attempted") return completeFailure("challenge-not-attempted");
   if (result.kind === "collision") return completeFailure("challenge-response-collision");
-  if (result.kind !== "duplicate" && result.kind !== "verified" || !await challengeRecordMatches(result.record, input.challenge, challengeHash, responseHash)) {
-    return completeFailure("challenge-store-invalid");
-  }
-  return result;
+  return result.kind !== "duplicate" && result.kind !== "verified" || !await challengeRecordMatches(result.record, input.challenge, challengeHash, responseHash) ? completeFailure("challenge-store-invalid") : result;
 }
 async function completePublisherEndpointChallenge(input) {
   if (!endpointChallengeMatchesPublisherContext(input.challenge, input.subscription.context)) {
@@ -1620,9 +1585,7 @@ async function readRevocations(viewer, controller, subject, atBlock) {
   for (const claim of claims) {
     if (!isLiveClaim(claim, controller, subject, WakeGrantRevocationSchema3, atBlock)) continue;
     const object = await viewer.object(claim.objectHash);
-    if (object?.assurance !== "resolved") continue;
-    if (object.declaredSchema !== WakeGrantRevocationSchema3 || object.objectHash !== claim.objectHash) continue;
-    if (!isRecord2(object.params) || Object.hasOwn(object.params, "schema")) continue;
+    if (object?.assurance !== "resolved" || object.declaredSchema !== WakeGrantRevocationSchema3 || object.objectHash !== claim.objectHash || !isRecord2(object.params) || Object.hasOwn(object.params, "schema")) continue;
     const revocation = asWakeGrantRevocation({ ...object.params, schema: object.declaredSchema });
     if (revocation !== void 0) revoked.add(revocation.grant);
   }
@@ -1654,13 +1617,7 @@ async function resolveEvidence(viewer, claim, request, atBlock, revokedGrantHash
   });
 }
 function isLiveClaim(claim, controller, subject, declaredObjectSchema, atBlock) {
-  if (claim.source !== controller) return false;
-  if (claim.subject !== subject) return false;
-  if (claim.declaredObjectSchema !== declaredObjectSchema) return false;
-  if (!isNonnegativeSafeInteger4(claim.firstBlock) || claim.firstBlock > atBlock) return false;
-  if (!isNonnegativeSafeInteger4(claim.lastBlock) || claim.lastBlock < claim.firstBlock) return false;
-  if (!HashZod6.safeParse(claim.firstEventHash).success) return false;
-  return HashZod6.safeParse(claim.objectHash).success;
+  return claim.source === controller && claim.subject === subject && claim.declaredObjectSchema === declaredObjectSchema && isNonnegativeSafeInteger4(claim.firstBlock) && claim.firstBlock <= atBlock && isNonnegativeSafeInteger4(claim.lastBlock) && claim.lastBlock >= claim.firstBlock && HashZod6.safeParse(claim.firstEventHash).success && HashZod6.safeParse(claim.objectHash).success;
 }
 function parseExactGrantObject(object, expectedObjectHash) {
   if (object?.assurance !== "resolved") return void 0;
@@ -1844,8 +1801,7 @@ async function verifyJwtProfile(token, audience, nowSeconds) {
     return reject2("jwt-malformed", [errorMessage2(error)]);
   }
   if (!verified.ok) {
-    if (Object.hasOwn(verified.payload ?? {}, "nbf")) return reject2("jwt-nbf-not-allowed");
-    return reject2(classifySdkJwtFailure(verified.reasons), verified.reasons);
+    return Object.hasOwn(verified.payload ?? {}, "nbf") ? reject2("jwt-nbf-not-allowed") : reject2(classifySdkJwtFailure(verified.reasons), verified.reasons);
   }
   const wireResult = parseStrictJwtWire(verified.header, verified.payload, audience);
   if (!wireResult.ok) return wireResult;
@@ -1866,8 +1822,7 @@ async function verifyJwtProfile(token, audience, nowSeconds) {
 function parseStrictJwtWire(header, payload, audience) {
   const headerResult = WakeJwtHeaderZod.safeParse(header);
   if (!headerResult.success) {
-    if (!NormalizedAddressZod7.safeParse(header.kid).success) return reject2("jwt-identity-invalid");
-    return reject2("jwt-header-invalid", zodDetails(headerResult.error.issues));
+    return NormalizedAddressZod7.safeParse(header.kid).success ? reject2("jwt-header-invalid", zodDetails(headerResult.error.issues)) : reject2("jwt-identity-invalid");
   }
   if (Object.hasOwn(payload, "nbf")) return reject2("jwt-nbf-not-allowed");
   if (!NormalizedAddressZod7.safeParse(payload.iss).success) return reject2("jwt-identity-invalid");
@@ -1890,16 +1845,12 @@ function classifySdkJwtFailure(reasons) {
   if (reasons.some((reason) => reason.startsWith("unsupported alg:") || reason.startsWith("unsupported typ:"))) {
     return "jwt-header-invalid";
   }
-  if (reasons.some((reason) => reason.startsWith("invalid public key:") || reason.startsWith("public key does not derive to kid:") || reason === "header.kid does not match payload.iss")) {
-    return "jwt-identity-invalid";
-  }
-  return "jwt-invalid";
+  return reasons.some((reason) => reason.startsWith("invalid public key:") || reason.startsWith("public key does not derive to kid:") || reason === "header.kid does not match payload.iss") ? "jwt-identity-invalid" : "jwt-invalid";
 }
 function malformedWake(body, issues) {
   const details = zodDetails(issues);
   if (hasInvertedSafeRange(body)) return reject2("range-invalid", details);
-  if (isRecord3(body) && Object.hasOwn(body, "wakeId") && issues.some((issue) => issue.path[0] === "wakeId")) return reject2("wake-id-invalid", details);
-  return reject2("event-malformed", details);
+  return reject2(isRecord3(body) && Object.hasOwn(body, "wakeId") && issues.some((issue) => issue.path[0] === "wakeId") ? "wake-id-invalid" : "event-malformed", details);
 }
 function hasInvertedSafeRange(value) {
   if (!isRecord3(value)) return false;