@zanii/provenance 0.1.0 → 0.1.2

package/README.md

@@ -38,6 +38,9 @@ caller's concern.
   export adapters can come later.
 
 ## Changelog
+
+- **0.1.2** — C2PA assertion round-trip, watermark bindings, edit chains (human vs AI), newsroom co-signing, subject disputes, commit credentials, TDM reservations, feed labelling, political-ad registry, exact royalty splits.
+- **0.1.1** — now depends on `@zanii/core` 0.5 (protocol 1.2), so it shares one core with `@zanii/sdk` 0.5 instead of pulling in a second, older copy. No API change.
 - **0.1.0** — initial release: `buildContentCredential`, `verifyContentCredential`, `credentialReceipt`, `resolveCreator`.
 
 ## License

package/dist/index.d.ts

@@ -41,4 +41,5 @@ export declare function resolveCreator(credential: ContentCredential, opts?: {
     server?: string;
     fetchImpl?: FetchLike;
 }): Promise<AgentTrust | null>;
+export * from './media.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAgB,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGrF,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,oBAAoB,CAAC;IAC3B,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAC/B,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,+DAA+D;AAC/D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,GAAG,iBAAiB,CAmB7G;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,mGAAmG;AACnG,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,iBAAiB,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,eAAe,CA0BlI;AAED,wGAAwG;AACxG,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAYrH;AAED,4FAA4F;AAC5F,wBAAsB,cAAc,CAClC,UAAU,EAAE,iBAAiB,EAC7B,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GACpD,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAE5B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAgB,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGrF,MAAM,WAAW,iBAAiB;IAChC,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,oBAAoB,CAAC;IAC3B,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,sCAAsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,gGAAgG;IAChG,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAC/B,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,+DAA+D;AAC/D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,GAAG,iBAAiB,CAmB7G;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,mGAAmG;AACnG,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,iBAAiB,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,GAAG,eAAe,CA0BlI;AAED,wGAAwG;AACxG,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,iBAAiB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAYrH;AAED,4FAA4F;AAC5F,wBAAsB,cAAc,CAClC,UAAU,EAAE,iBAAiB,EAC7B,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,CAAA;CAAO,GACpD,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAE5B;AACD,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -94,4 +94,5 @@ export function credentialReceipt(credential) {
 export async function resolveCreator(credential, opts = {}) {
     return resolveAgent(credential.agent, opts);
 }
+export * from './media.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAmC,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA4BrF,+DAA+D;AAC/D,MAAM,UAAU,sBAAsB,CAAC,KAAsB,EAAE,eAA2B;IACxF,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrG,IAAI,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACtC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7F,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG;QACf,CAAC,EAAE,CAAU;QACb,IAAI,EAAE,oBAA6B;QACnC,aAAa,EAAE,YAAY;QAC3B,KAAK,EAAE,KAAK,CAAC,QAAQ;QACrB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;IACpE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,WAAW,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AAC5D,CAAC;AAOD,mGAAmG;AACnG,MAAM,UAAU,uBAAuB,CAAC,UAAyC,EAAE,QAA8B;IAC/G,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,CAAC,GAAG,UAAU,IAAK,EAAwB,CAAC;IAClD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB;QAAE,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACzI,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC3H,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;YACzC,IAAI,EAAE,GAAG,KAAK,CAAC;YACf,IAAI,CAAC;gBACH,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,GAAG,KAAK,CAAC;YACb,CAAC;YACD,IAAI,CAAC,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,iBAAiB,CAAC,UAA6B;IAC7D,OAAO;QACL,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE;YACP,QAAQ,EAAE,YAAY;YACtB,CAAC,EAAE,CAAC;YACJ,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC;YACpC,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU,EAAE,UAAU,CAAC,UAAU;SAClC;KACF,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAA6B,EAC7B,OAAmD,EAAE;IAErD,OAAO,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,YAAY,EAAmC,MAAM,sBAAsB,CAAC;AACrF,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA4BrF,+DAA+D;AAC/D,MAAM,UAAU,sBAAsB,CAAC,KAAsB,EAAE,eAA2B;IACxF,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrG,IAAI,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACtC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7F,YAAY,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG;QACf,CAAC,EAAE,CAAU;QACb,IAAI,EAAE,oBAA6B;QACnC,aAAa,EAAE,YAAY;QAC3B,KAAK,EAAE,KAAK,CAAC,QAAQ;QACrB,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;IACpE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,WAAW,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AAC5D,CAAC;AAOD,mGAAmG;AACnG,MAAM,UAAU,uBAAuB,CAAC,UAAyC,EAAE,QAA8B;IAC/G,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,CAAC,GAAG,UAAU,IAAK,EAAwB,CAAC;IAClD,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB;QAAE,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAChG,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACzI,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC3H,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5G,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC;YACzC,IAAI,EAAE,GAAG,KAAK,CAAC;YACf,IAAI,CAAC;gBACH,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,GAAG,KAAK,CAAC;YACb,CAAC;YACD,IAAI,CAAC,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;QAChG,OAAO,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,iBAAiB,CAAC,UAA6B;IAC7D,OAAO;QACL,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE;YACP,QAAQ,EAAE,YAAY;YACtB,CAAC,EAAE,CAAC;YACJ,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC;YACpC,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU,EAAE,UAAU,CAAC,UAAU;SAClC;KACF,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAA6B,EAC7B,OAAmD,EAAE;IAErD,OAAO,YAAY,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC;AACD,cAAc,YAAY,CAAC"}

package/dist/media.d.ts

@@ -0,0 +1,204 @@
+/**
+ * Provenance in the field: a C2PA assertion carrying the credential, watermark bindings,
+ * edit chains (human vs AI steps), newsroom co-signing, disputes by depicted people,
+ * AI-authored commits, text-and-data-mining reservations, feed labelling, a political-ad
+ * disclosure registry and exact royalty splits. Built on `buildContentCredential`.
+ */
+import { type SignedObject } from '@zanii/core';
+import { type ContentCredential } from './index.js';
+export declare const C2PA_LABEL = "org.zanii.credential";
+/**
+ * A custom assertion to place in a C2PA manifest (your C2PA SDK signs the manifest with
+ * its X.509 identity; this assertion links it to the agent's DID and receipt).
+ */
+export declare function c2paAssertion(credential: ContentCredential): {
+    label: string;
+    data: {
+        credential: ContentCredential;
+        credential_hash: string;
+    };
+};
+/** Find and verify the Zanii assertion inside a C2PA manifest's assertions (as JSON). */
+export declare function credentialFromC2pa(assertions: Array<{
+    label: string;
+    data: unknown;
+}>, artifact?: Uint8Array | string): {
+    found: false;
+    ok: boolean;
+    reasons: string[];
+    credential?: undefined;
+} | {
+    found: true;
+    credential: ContentCredential;
+    ok: boolean;
+    reasons: string[];
+};
+export type WatermarkBinding = SignedObject<{
+    v: 1;
+    type: 'provenance.watermark';
+    credential: string;
+    artifact_hash: string;
+    detector: string;
+    watermark_id: string;
+    ts: string;
+}>;
+/**
+ * Bind an invisible watermark id to the credential, signed by the creating agent. The
+ * trust root for "this watermark is present" is the detector you name, not Zanii.
+ */
+export declare function bindWatermark(credential: ContentCredential, w: {
+    detector: string;
+    watermarkId: string;
+    ts?: string;
+}, agentPrivateKey: Uint8Array): WatermarkBinding;
+export declare function verifyWatermarkBinding(b: WatermarkBinding, credential: ContentCredential): boolean;
+export interface EditStep {
+    by: 'human' | 'ai';
+    description: string;
+}
+/** A credential for an edited version, linking to the previous one and stating the edits. */
+export declare function editVersion(previous: ContentCredential, next: {
+    artifact: Uint8Array | string;
+    agentDid: string;
+    createdAt: string;
+    edits: EditStep[];
+}, agentPrivateKey: Uint8Array): ContentCredential;
+/** Verify a chain of versions (oldest first): every credential valid, every link and time in order; counts human and AI edits. */
+export declare function verifyEditChain(chain: ContentCredential[]): {
+    ok: boolean;
+    reasons: string[];
+    versions: number;
+    humanEdits: number;
+    aiEdits: number;
+};
+export type CoSignature = SignedObject<{
+    v: 1;
+    type: 'provenance.cosign';
+    credential: string;
+    role: string;
+    ts: string;
+}>;
+/** A journalist, editor or fact-checker countersigns an article's credential in a stated role. */
+export declare function coSign(credential: ContentCredential, role: string, privateKey: Uint8Array, ts?: string): CoSignature;
+/** The credential is valid and every required role is countersigned by one of its allowed signers. */
+export declare function verifyNewsroom(credential: ContentCredential, cosigs: CoSignature[], required: Record<string, string[]>): {
+    ok: boolean;
+    reasons: string[];
+};
+export type Dispute = SignedObject<{
+    v: 1;
+    type: 'provenance.dispute';
+    artifact_hash: string;
+    claim: 'not_me' | 'not_consented' | 'altered';
+    statement: string;
+    evidence: string[];
+    ts: string;
+}>;
+/** A person depicted in content disputes it, signed with their own DID, with hashes of their evidence. */
+export declare function fileDispute(input: {
+    artifactHash: string;
+    claim: Dispute['claim'];
+    statement: string;
+    evidence?: Array<Uint8Array | string>;
+    ts?: string;
+}, subjectPrivateKey: Uint8Array): Dispute;
+/** For a platform: the dispute is genuine and about this artifact; includes whether the artifact had a valid credential at all. */
+export declare function assessDispute(d: Dispute, credential?: ContentCredential): {
+    disputeValid: boolean;
+    subject: string;
+    claim: "not_me" | "not_consented" | "altered";
+    credentialed: boolean;
+    creator: string | null;
+};
+/** A credential for an AI-authored commit, plus a git trailer to put in the commit message. */
+export declare function commitCredential(c: {
+    repo: string;
+    commit: string;
+    agentDid: string;
+    reviewer?: string;
+    createdAt: string;
+}, agentPrivateKey: Uint8Array): {
+    credential: ContentCredential;
+    trailer: string;
+};
+export type TdmReservation = SignedObject<{
+    v: 1;
+    type: 'provenance.tdm_reservation';
+    artifact_hash: string;
+    reserved: boolean;
+    policy?: string;
+    ts: string;
+}>;
+/** A rightsholder's machine-readable text-and-data-mining reservation (EU CDSM Art. 4(3)) bound to an asset. */
+export declare function reserveTdm(input: {
+    artifactHash: string;
+    reserved?: boolean;
+    policyUrl?: string;
+    ts?: string;
+}, holderPrivateKey: Uint8Array): TdmReservation;
+/** For a crawler: is mining this asset reserved? The latest valid statement from a trusted holder wins. */
+export declare function tdmReserved(artifactHash: string, reservations: TdmReservation[], trustedHolders?: string[]): boolean;
+/** Label every item in a feed from its credential: AI-generated by a named agent, credential invalid, or no credential. */
+export declare function labelFeed(items: Array<{
+    id: string;
+    artifact?: Uint8Array | string;
+    credential?: ContentCredential;
+}>): ({
+    id: string;
+    label: "no-credential";
+    agent: null;
+} | {
+    id: string;
+    label: "ai-generated" | "credential-invalid";
+    agent: string | null;
+})[];
+export type PoliticalAdDisclosure = SignedObject<{
+    v: 1;
+    type: 'provenance.political_ad';
+    artifact_hash: string;
+    sponsor: string;
+    jurisdiction: string;
+    ai_used: boolean;
+    ai_description?: string;
+    ts: string;
+}>;
+/** A sponsor discloses a political ad and whether AI made or altered it. */
+export declare function disclosePoliticalAd(input: {
+    artifactHash: string;
+    sponsor: string;
+    jurisdiction: string;
+    aiUsed: boolean;
+    aiDescription?: string;
+    ts?: string;
+}, sponsorPrivateKey: Uint8Array): PoliticalAdDisclosure;
+/** An in-memory registry a regulator can run: accepts only valid disclosures, looks ads up by hash. */
+export declare function createAdRegistry(): {
+    register(d: PoliticalAdDisclosure): void;
+    lookup: (artifactHash: string) => PoliticalAdDisclosure[];
+    aiAds: (jurisdiction?: string) => PoliticalAdDisclosure[];
+};
+/** Contributor shares (basis points summing to 10,000) for a work, hashed so payouts can cite it. */
+export declare function royaltySplit(artifactHash: string, contributors: Array<{
+    did: string;
+    bps: number;
+    role?: string;
+}>): {
+    hash: string;
+    v: 1;
+    type: "provenance.royalty_split";
+    artifact_hash: string;
+    contributors: {
+        did: string;
+        bps: number;
+        role?: string;
+    }[];
+};
+/** Pay out an amount in integer minor units by the split; remainders go by largest fraction, so the total is exact. */
+export declare function splitPayout(split: ReturnType<typeof royaltySplit>, amountMinor: bigint): {
+    split: string;
+    payouts: {
+        did: string;
+        minor: string;
+    }[];
+};
+//# sourceMappingURL=media.d.ts.map

package/dist/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../src/media.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAwD,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACtG,OAAO,EAAmD,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAMrG,eAAO,MAAM,UAAU,yBAAyB,CAAC;AAEjD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,iBAAiB;;;;;;EAE1D;AAED,yFAAyF;AACzF,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM;;;;;;;;;;EAOrH;AAED,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEnL;;;GAGG;AACH,wBAAgB,aAAa,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,eAAe,EAAE,UAAU,GAAG,gBAAgB,CAErK;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,GAAG,OAAO,CAElG;AAMD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,OAAO,GAAG,IAAI,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE;IAAE,QAAQ,EAAE,UAAU,GAAG,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,EAAE,CAAA;CAAE,EAAE,eAAe,EAAE,UAAU,GAAG,iBAAiB,CAExM;AAED,kIAAkI;AAClI,wBAAgB,eAAe,CAAC,KAAK,EAAE,iBAAiB,EAAE;;;;;;EAYzD;AAED,MAAM,MAAM,WAAW,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE1H,kGAAkG;AAClG,wBAAgB,MAAM,CAAC,UAAU,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,SAA2B,GAAG,WAAW,CAEtI;AAED,sGAAsG;AACtG,wBAAgB,cAAc,CAAC,UAAU,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;;;EAOtH;AAED,MAAM,MAAM,OAAO,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,GAAG,eAAe,GAAG,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAElM,0GAA0G;AAC1G,wBAAgB,WAAW,CAAC,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,iBAAiB,EAAE,UAAU,GAAG,OAAO,CAEnM;AAED,mIAAmI;AACnI,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,iBAAiB;;;;;;EAEvE;AAMD,+FAA+F;AAC/F,wBAAgB,gBAAgB,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,EAAE,eAAe,EAAE,UAAU;;;EAIxJ;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,4BAA4B,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE/J,gHAAgH;AAChH,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,gBAAgB,EAAE,UAAU,GAAG,cAAc,CAE7J;AAED,2GAA2G;AAC3G,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,CAGpH;AAED,2HAA2H;AAC3H,wBAAgB,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,iBAAiB,CAAA;CAAE,CAAC;;;;;;;;KAMrH;AAED,MAAM,MAAM,qBAAqB,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,yBAAyB,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEjN,4EAA4E;AAC5E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,iBAAiB,EAAE,UAAU,GAAG,qBAAqB,CAEtN;AAED,uGAAuG;AACvG,wBAAgB,gBAAgB;gBAGhB,qBAAqB;2BAIV,MAAM;2BACN,MAAM;EAEhC;AAED,qGAAqG;AACrG,wBAAgB,YAAY,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;;;;;;aAArC,MAAM;aAAO,MAAM;eAAS,MAAM;;EAM/G;AAED,uHAAuH;AACvH,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,YAAY,CAAC,EAAE,WAAW,EAAE,MAAM;;;;;;EAStF"}

package/dist/media.js

@@ -0,0 +1,153 @@
+/**
+ * Provenance in the field: a C2PA assertion carrying the credential, watermark bindings,
+ * edit chains (human vs AI steps), newsroom co-signing, disputes by depicted people,
+ * AI-authored commits, text-and-data-mining reservations, feed labelling, a political-ad
+ * disclosure registry and exact royalty splits. Built on `buildContentCredential`.
+ */
+import { hashPayload, jcsHash, signObject, verifySignedObject } from '@zanii/core';
+import { buildContentCredential, verifyContentCredential } from './index.js';
+// ------------------------------------------------------------------------------ //
+// C2PA and watermarks
+// ------------------------------------------------------------------------------ //
+export const C2PA_LABEL = 'org.zanii.credential';
+/**
+ * A custom assertion to place in a C2PA manifest (your C2PA SDK signs the manifest with
+ * its X.509 identity; this assertion links it to the agent's DID and receipt).
+ */
+export function c2paAssertion(credential) {
+    return { label: C2PA_LABEL, data: { credential, credential_hash: jcsHash(credential) } };
+}
+/** Find and verify the Zanii assertion inside a C2PA manifest's assertions (as JSON). */
+export function credentialFromC2pa(assertions, artifact) {
+    const a = assertions.find((x) => x.label === C2PA_LABEL);
+    if (!a)
+        return { found: false, ok: false, reasons: ['no Zanii assertion in the manifest'] };
+    const { credential, credential_hash } = a.data;
+    const check = verifyContentCredential(credential, artifact);
+    if (check.ok && jcsHash(credential) !== credential_hash)
+        check.reasons.push('assertion hash does not match the credential');
+    return { found: true, credential, ok: check.reasons.length === 0, reasons: check.reasons };
+}
+/**
+ * Bind an invisible watermark id to the credential, signed by the creating agent. The
+ * trust root for "this watermark is present" is the detector you name, not Zanii.
+ */
+export function bindWatermark(credential, w, agentPrivateKey) {
+    return signObject({ v: 1, type: 'provenance.watermark', credential: jcsHash(credential), artifact_hash: credential.artifact_hash, detector: w.detector, watermark_id: w.watermarkId, ts: w.ts ?? new Date().toISOString() }, agentPrivateKey);
+}
+export function verifyWatermarkBinding(b, credential) {
+    return verifySignedObject(b) && b.signer === credential.agent && b.credential === jcsHash(credential);
+}
+/** A credential for an edited version, linking to the previous one and stating the edits. */
+export function editVersion(previous, next, agentPrivateKey) {
+    return buildContentCredential({ artifact: next.artifact, agentDid: next.agentDid, createdAt: next.createdAt, meta: { derivative_of: jcsHash(previous), edits: next.edits } }, agentPrivateKey);
+}
+/** Verify a chain of versions (oldest first): every credential valid, every link and time in order; counts human and AI edits. */
+export function verifyEditChain(chain) {
+    const reasons = [];
+    let human = 0;
+    let ai = 0;
+    chain.forEach((c, i) => {
+        if (!verifyContentCredential(c).ok)
+            reasons.push(`version ${i}: invalid credential`);
+        if (i === 0)
+            return;
+        if (c.meta?.derivative_of !== jcsHash(chain[i - 1]))
+            reasons.push(`version ${i}: does not link to version ${i - 1}`);
+        if (c.created_at < chain[i - 1].created_at)
+            reasons.push(`version ${i}: earlier than its predecessor`);
+        for (const e of (c.meta?.edits ?? []))
+            e.by === 'ai' ? ai++ : human++;
+    });
+    return { ok: reasons.length === 0, reasons, versions: chain.length, humanEdits: human, aiEdits: ai };
+}
+/** A journalist, editor or fact-checker countersigns an article's credential in a stated role. */
+export function coSign(credential, role, privateKey, ts = new Date().toISOString()) {
+    return signObject({ v: 1, type: 'provenance.cosign', credential: jcsHash(credential), role, ts }, privateKey);
+}
+/** The credential is valid and every required role is countersigned by one of its allowed signers. */
+export function verifyNewsroom(credential, cosigs, required) {
+    const reasons = verifyContentCredential(credential).reasons;
+    const h = jcsHash(credential);
+    for (const [role, signers] of Object.entries(required)) {
+        if (!cosigs.some((c) => c.role === role && c.credential === h && signers.includes(c.signer) && verifySignedObject(c)))
+            reasons.push(`no valid ${role} countersignature`);
+    }
+    return { ok: reasons.length === 0, reasons };
+}
+/** A person depicted in content disputes it, signed with their own DID, with hashes of their evidence. */
+export function fileDispute(input, subjectPrivateKey) {
+    return signObject({ v: 1, type: 'provenance.dispute', artifact_hash: input.artifactHash, claim: input.claim, statement: input.statement, evidence: (input.evidence ?? []).map((e) => hashPayload(e)), ts: input.ts ?? new Date().toISOString() }, subjectPrivateKey);
+}
+/** For a platform: the dispute is genuine and about this artifact; includes whether the artifact had a valid credential at all. */
+export function assessDispute(d, credential) {
+    return { disputeValid: verifySignedObject(d), subject: d.signer, claim: d.claim, credentialed: !!credential && credential.artifact_hash === d.artifact_hash && verifyContentCredential(credential).ok, creator: credential?.agent ?? null };
+}
+// ------------------------------------------------------------------------------ //
+// Code, opt-outs, feeds, political ads, royalties
+// ------------------------------------------------------------------------------ //
+/** A credential for an AI-authored commit, plus a git trailer to put in the commit message. */
+export function commitCredential(c, agentPrivateKey) {
+    if (!/^[0-9a-f]{40}([0-9a-f]{24})?$/.test(c.commit))
+        throw new Error('provenance: commit must be a full SHA-1 or SHA-256 hex id');
+    const credential = buildContentCredential({ artifact: `${c.repo}@${c.commit}`, agentDid: c.agentDid, createdAt: c.createdAt, meta: { kind: 'code', repo: c.repo, commit: c.commit, ...(c.reviewer ? { reviewer: c.reviewer } : {}) } }, agentPrivateKey);
+    return { credential, trailer: `Zanii-Credential: ${jcsHash(credential)}` };
+}
+/** A rightsholder's machine-readable text-and-data-mining reservation (EU CDSM Art. 4(3)) bound to an asset. */
+export function reserveTdm(input, holderPrivateKey) {
+    return signObject({ v: 1, type: 'provenance.tdm_reservation', artifact_hash: input.artifactHash, reserved: input.reserved ?? true, ...(input.policyUrl ? { policy: input.policyUrl } : {}), ts: input.ts ?? new Date().toISOString() }, holderPrivateKey);
+}
+/** For a crawler: is mining this asset reserved? The latest valid statement from a trusted holder wins. */
+export function tdmReserved(artifactHash, reservations, trustedHolders) {
+    const latest = reservations.filter((r) => r.artifact_hash === artifactHash && verifySignedObject(r) && (!trustedHolders || trustedHolders.includes(r.signer))).sort((a, b) => a.ts.localeCompare(b.ts)).at(-1);
+    return latest?.reserved ?? false;
+}
+/** Label every item in a feed from its credential: AI-generated by a named agent, credential invalid, or no credential. */
+export function labelFeed(items) {
+    return items.map((i) => {
+        if (!i.credential)
+            return { id: i.id, label: 'no-credential', agent: null };
+        const ok = verifyContentCredential(i.credential, i.artifact).ok;
+        return { id: i.id, label: ok ? 'ai-generated' : 'credential-invalid', agent: ok ? i.credential.agent : null };
+    });
+}
+/** A sponsor discloses a political ad and whether AI made or altered it. */
+export function disclosePoliticalAd(input, sponsorPrivateKey) {
+    return signObject({ v: 1, type: 'provenance.political_ad', artifact_hash: input.artifactHash, sponsor: input.sponsor, jurisdiction: input.jurisdiction, ai_used: input.aiUsed, ...(input.aiDescription ? { ai_description: input.aiDescription } : {}), ts: input.ts ?? new Date().toISOString() }, sponsorPrivateKey);
+}
+/** An in-memory registry a regulator can run: accepts only valid disclosures, looks ads up by hash. */
+export function createAdRegistry() {
+    const byHash = new Map();
+    return {
+        register(d) {
+            if (!verifySignedObject(d))
+                throw new Error('provenance: invalid political ad disclosure');
+            byHash.set(d.artifact_hash, [...(byHash.get(d.artifact_hash) ?? []), d]);
+        },
+        lookup: (artifactHash) => byHash.get(artifactHash) ?? [],
+        aiAds: (jurisdiction) => [...byHash.values()].flat().filter((d) => d.ai_used && (!jurisdiction || d.jurisdiction === jurisdiction)),
+    };
+}
+/** Contributor shares (basis points summing to 10,000) for a work, hashed so payouts can cite it. */
+export function royaltySplit(artifactHash, contributors) {
+    if (contributors.some((c) => !Number.isInteger(c.bps) || c.bps <= 0))
+        throw new Error('provenance: shares must be positive integer basis points');
+    const total = contributors.reduce((s, c) => s + c.bps, 0);
+    if (total !== 10_000)
+        throw new Error(`provenance: shares sum to ${total} bps, not 10000`);
+    const split = { v: 1, type: 'provenance.royalty_split', artifact_hash: artifactHash, contributors };
+    return { ...split, hash: jcsHash(split) };
+}
+/** Pay out an amount in integer minor units by the split; remainders go by largest fraction, so the total is exact. */
+export function splitPayout(split, amountMinor) {
+    const raw = split.contributors.map((c) => ({ did: c.did, q: (amountMinor * BigInt(c.bps)) / 10000n, r: (amountMinor * BigInt(c.bps)) % 10000n }));
+    let left = amountMinor - raw.reduce((s, x) => s + x.q, 0n);
+    for (const x of [...raw].sort((a, b) => (b.r > a.r ? 1 : b.r < a.r ? -1 : 0))) {
+        if (left === 0n)
+            break;
+        x.q += 1n;
+        left -= 1n;
+    }
+    return { split: split.hash, payouts: raw.map((x) => ({ did: x.did, minor: x.q.toString() })) };
+}
+//# sourceMappingURL=media.js.map

package/dist/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../src/media.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAqB,MAAM,aAAa,CAAC;AACtG,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAA0B,MAAM,YAAY,CAAC;AAErG,oFAAoF;AACpF,sBAAsB;AACtB,oFAAoF;AAEpF,MAAM,CAAC,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAEjD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,UAA6B;IACzD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;AAC3F,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,kBAAkB,CAAC,UAAmD,EAAE,QAA8B;IACpH,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IACzD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,oCAAoC,CAAC,EAAE,CAAC;IACrG,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC,IAAkE,CAAC;IAC7G,MAAM,KAAK,GAAG,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,eAAe;QAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC5H,OAAO,EAAE,KAAK,EAAE,IAAa,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;AACtG,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,UAA6B,EAAE,CAAyD,EAAE,eAA2B;IACjJ,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,sBAA+B,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;AAClQ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,CAAmB,EAAE,UAA6B;IACvF,OAAO,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,KAAK,IAAI,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;AACxG,CAAC;AAWD,6FAA6F;AAC7F,MAAM,UAAU,WAAW,CAAC,QAA2B,EAAE,IAA+F,EAAE,eAA2B;IACnL,OAAO,sBAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;AACjM,CAAC;AAED,kIAAkI;AAClI,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,CAAC;QACrF,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO;QACpB,IAAK,CAAC,CAAC,IAA+C,EAAE,aAAa,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,8BAA8B,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClK,IAAI,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,gCAAgC,CAAC,CAAC;QACxG,KAAK,MAAM,CAAC,IAAI,CAAE,CAAC,CAAC,IAA2C,EAAE,KAAK,IAAI,EAAE,CAAC;YAAE,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAChH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACvG,CAAC;AAID,kGAAkG;AAClG,MAAM,UAAU,MAAM,CAAC,UAA6B,EAAE,IAAY,EAAE,UAAsB,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACvH,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,mBAA4B,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;AAClI,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,cAAc,CAAC,UAA6B,EAAE,MAAqB,EAAE,QAAkC;IACrH,MAAM,OAAO,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;IAC5D,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC;IAC3K,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAID,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,KAA+H,EAAE,iBAA6B;IACxL,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,oBAA6B,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACzR,CAAC;AAED,mIAAmI;AACnI,MAAM,UAAU,aAAa,CAAC,CAAU,EAAE,UAA8B;IACtE,OAAO,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC;AAC9O,CAAC;AAED,oFAAoF;AACpF,kDAAkD;AAClD,oFAAoF;AAEpF,+FAA+F;AAC/F,MAAM,UAAU,gBAAgB,CAAC,CAA2F,EAAE,eAA2B;IACvJ,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAClI,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;IACzP,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,qBAAqB,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;AAC7E,CAAC;AAID,gHAAgH;AAChH,MAAM,UAAU,UAAU,CAAC,KAAoF,EAAE,gBAA4B;IAC3I,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,4BAAqC,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAC9Q,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,WAAW,CAAC,YAAoB,EAAE,YAA8B,EAAE,cAAyB;IACzG,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,YAAY,IAAI,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/M,OAAO,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC;AACnC,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,SAAS,CAAC,KAA4F;IACpH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACrB,IAAI,CAAC,CAAC,CAAC,UAAU;YAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,eAAwB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACrF,MAAM,EAAE,GAAG,uBAAuB,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAE,cAAwB,CAAC,CAAC,CAAE,oBAA8B,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtI,CAAC,CAAC,CAAC;AACL,CAAC;AAID,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,KAA4H,EAAE,iBAA6B;IAC7L,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,yBAAkC,EAAE,aAAa,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAC3U,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,gBAAgB;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC1D,OAAO;QACL,QAAQ,CAAC,CAAwB;YAC/B,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC3F,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,EAAE,CAAC,YAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QAChE,KAAK,EAAE,CAAC,YAAqB,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;KAC7I,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,YAAY,CAAC,YAAoB,EAAE,YAAgE;IACjH,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAClJ,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,iBAAiB,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,0BAAmC,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC;IACtH,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,WAAW,CAAC,KAAsC,EAAE,WAAmB;IACrF,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAO,EAAE,CAAC,EAAE,CAAC,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,MAAO,EAAE,CAAC,CAAC,CAAC;IACpJ,IAAI,IAAI,GAAG,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,IAAI,IAAI,KAAK,EAAE;YAAE,MAAM;QACvB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,EAAE,CAAC;IACb,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;AACjG,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zanii/provenance",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "AI-content provenance: sign an artifact's hash with the creating agent's did:key, anchor it on the ledger, and resolve the creator to their verified history — 'made by a known, accountable agent' vs 'appeared from nowhere'.",
   "license": "Apache-2.0",
   "homepage": "https://ledger.zanii.agency",
@@ -33,8 +33,8 @@
   "dependencies": {
     "@noble/curves": "^1.8.1",
     "@noble/hashes": "^1.7.1",
-    "@zanii/core": "0.4.0",
-    "@zanii/a2a-directory": "0.1.0"
+    "@zanii/a2a-directory": "^0.1.3",
+    "@zanii/core": "^0.5.4"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",

package/src/index.ts

@@ -123,3 +123,4 @@ export async function resolveCreator(
 ): Promise<AgentTrust | null> {
   return resolveAgent(credential.agent, opts);
 }
+export * from './media.js';

package/src/media.ts

@@ -0,0 +1,178 @@
+/**
+ * Provenance in the field: a C2PA assertion carrying the credential, watermark bindings,
+ * edit chains (human vs AI steps), newsroom co-signing, disputes by depicted people,
+ * AI-authored commits, text-and-data-mining reservations, feed labelling, a political-ad
+ * disclosure registry and exact royalty splits. Built on `buildContentCredential`.
+ */
+import { hashPayload, jcsHash, signObject, verifySignedObject, type SignedObject } from '@zanii/core';
+import { buildContentCredential, verifyContentCredential, type ContentCredential } from './index.js';
+
+// ------------------------------------------------------------------------------ //
+// C2PA and watermarks
+// ------------------------------------------------------------------------------ //
+
+export const C2PA_LABEL = 'org.zanii.credential';
+
+/**
+ * A custom assertion to place in a C2PA manifest (your C2PA SDK signs the manifest with
+ * its X.509 identity; this assertion links it to the agent's DID and receipt).
+ */
+export function c2paAssertion(credential: ContentCredential) {
+  return { label: C2PA_LABEL, data: { credential, credential_hash: jcsHash(credential) } };
+}
+
+/** Find and verify the Zanii assertion inside a C2PA manifest's assertions (as JSON). */
+export function credentialFromC2pa(assertions: Array<{ label: string; data: unknown }>, artifact?: Uint8Array | string) {
+  const a = assertions.find((x) => x.label === C2PA_LABEL);
+  if (!a) return { found: false as const, ok: false, reasons: ['no Zanii assertion in the manifest'] };
+  const { credential, credential_hash } = a.data as { credential: ContentCredential; credential_hash: string };
+  const check = verifyContentCredential(credential, artifact);
+  if (check.ok && jcsHash(credential) !== credential_hash) check.reasons.push('assertion hash does not match the credential');
+  return { found: true as const, credential, ok: check.reasons.length === 0, reasons: check.reasons };
+}
+
+export type WatermarkBinding = SignedObject<{ v: 1; type: 'provenance.watermark'; credential: string; artifact_hash: string; detector: string; watermark_id: string; ts: string }>;
+
+/**
+ * Bind an invisible watermark id to the credential, signed by the creating agent. The
+ * trust root for "this watermark is present" is the detector you name, not Zanii.
+ */
+export function bindWatermark(credential: ContentCredential, w: { detector: string; watermarkId: string; ts?: string }, agentPrivateKey: Uint8Array): WatermarkBinding {
+  return signObject({ v: 1 as const, type: 'provenance.watermark' as const, credential: jcsHash(credential), artifact_hash: credential.artifact_hash, detector: w.detector, watermark_id: w.watermarkId, ts: w.ts ?? new Date().toISOString() }, agentPrivateKey);
+}
+
+export function verifyWatermarkBinding(b: WatermarkBinding, credential: ContentCredential): boolean {
+  return verifySignedObject(b) && b.signer === credential.agent && b.credential === jcsHash(credential);
+}
+
+// ------------------------------------------------------------------------------ //
+// Edits, newsrooms, disputes
+// ------------------------------------------------------------------------------ //
+
+export interface EditStep {
+  by: 'human' | 'ai';
+  description: string;
+}
+
+/** A credential for an edited version, linking to the previous one and stating the edits. */
+export function editVersion(previous: ContentCredential, next: { artifact: Uint8Array | string; agentDid: string; createdAt: string; edits: EditStep[] }, agentPrivateKey: Uint8Array): ContentCredential {
+  return buildContentCredential({ artifact: next.artifact, agentDid: next.agentDid, createdAt: next.createdAt, meta: { derivative_of: jcsHash(previous), edits: next.edits } }, agentPrivateKey);
+}
+
+/** Verify a chain of versions (oldest first): every credential valid, every link and time in order; counts human and AI edits. */
+export function verifyEditChain(chain: ContentCredential[]) {
+  const reasons: string[] = [];
+  let human = 0;
+  let ai = 0;
+  chain.forEach((c, i) => {
+    if (!verifyContentCredential(c).ok) reasons.push(`version ${i}: invalid credential`);
+    if (i === 0) return;
+    if ((c.meta as { derivative_of?: string } | undefined)?.derivative_of !== jcsHash(chain[i - 1]!)) reasons.push(`version ${i}: does not link to version ${i - 1}`);
+    if (c.created_at < chain[i - 1]!.created_at) reasons.push(`version ${i}: earlier than its predecessor`);
+    for (const e of ((c.meta as { edits?: EditStep[] } | undefined)?.edits ?? [])) e.by === 'ai' ? ai++ : human++;
+  });
+  return { ok: reasons.length === 0, reasons, versions: chain.length, humanEdits: human, aiEdits: ai };
+}
+
+export type CoSignature = SignedObject<{ v: 1; type: 'provenance.cosign'; credential: string; role: string; ts: string }>;
+
+/** A journalist, editor or fact-checker countersigns an article's credential in a stated role. */
+export function coSign(credential: ContentCredential, role: string, privateKey: Uint8Array, ts = new Date().toISOString()): CoSignature {
+  return signObject({ v: 1 as const, type: 'provenance.cosign' as const, credential: jcsHash(credential), role, ts }, privateKey);
+}
+
+/** The credential is valid and every required role is countersigned by one of its allowed signers. */
+export function verifyNewsroom(credential: ContentCredential, cosigs: CoSignature[], required: Record<string, string[]>) {
+  const reasons = verifyContentCredential(credential).reasons;
+  const h = jcsHash(credential);
+  for (const [role, signers] of Object.entries(required)) {
+    if (!cosigs.some((c) => c.role === role && c.credential === h && signers.includes(c.signer) && verifySignedObject(c))) reasons.push(`no valid ${role} countersignature`);
+  }
+  return { ok: reasons.length === 0, reasons };
+}
+
+export type Dispute = SignedObject<{ v: 1; type: 'provenance.dispute'; artifact_hash: string; claim: 'not_me' | 'not_consented' | 'altered'; statement: string; evidence: string[]; ts: string }>;
+
+/** A person depicted in content disputes it, signed with their own DID, with hashes of their evidence. */
+export function fileDispute(input: { artifactHash: string; claim: Dispute['claim']; statement: string; evidence?: Array<Uint8Array | string>; ts?: string }, subjectPrivateKey: Uint8Array): Dispute {
+  return signObject({ v: 1 as const, type: 'provenance.dispute' as const, artifact_hash: input.artifactHash, claim: input.claim, statement: input.statement, evidence: (input.evidence ?? []).map((e) => hashPayload(e)), ts: input.ts ?? new Date().toISOString() }, subjectPrivateKey);
+}
+
+/** For a platform: the dispute is genuine and about this artifact; includes whether the artifact had a valid credential at all. */
+export function assessDispute(d: Dispute, credential?: ContentCredential) {
+  return { disputeValid: verifySignedObject(d), subject: d.signer, claim: d.claim, credentialed: !!credential && credential.artifact_hash === d.artifact_hash && verifyContentCredential(credential).ok, creator: credential?.agent ?? null };
+}
+
+// ------------------------------------------------------------------------------ //
+// Code, opt-outs, feeds, political ads, royalties
+// ------------------------------------------------------------------------------ //
+
+/** A credential for an AI-authored commit, plus a git trailer to put in the commit message. */
+export function commitCredential(c: { repo: string; commit: string; agentDid: string; reviewer?: string; createdAt: string }, agentPrivateKey: Uint8Array) {
+  if (!/^[0-9a-f]{40}([0-9a-f]{24})?$/.test(c.commit)) throw new Error('provenance: commit must be a full SHA-1 or SHA-256 hex id');
+  const credential = buildContentCredential({ artifact: `${c.repo}@${c.commit}`, agentDid: c.agentDid, createdAt: c.createdAt, meta: { kind: 'code', repo: c.repo, commit: c.commit, ...(c.reviewer ? { reviewer: c.reviewer } : {}) } }, agentPrivateKey);
+  return { credential, trailer: `Zanii-Credential: ${jcsHash(credential)}` };
+}
+
+export type TdmReservation = SignedObject<{ v: 1; type: 'provenance.tdm_reservation'; artifact_hash: string; reserved: boolean; policy?: string; ts: string }>;
+
+/** A rightsholder's machine-readable text-and-data-mining reservation (EU CDSM Art. 4(3)) bound to an asset. */
+export function reserveTdm(input: { artifactHash: string; reserved?: boolean; policyUrl?: string; ts?: string }, holderPrivateKey: Uint8Array): TdmReservation {
+  return signObject({ v: 1 as const, type: 'provenance.tdm_reservation' as const, artifact_hash: input.artifactHash, reserved: input.reserved ?? true, ...(input.policyUrl ? { policy: input.policyUrl } : {}), ts: input.ts ?? new Date().toISOString() }, holderPrivateKey);
+}
+
+/** For a crawler: is mining this asset reserved? The latest valid statement from a trusted holder wins. */
+export function tdmReserved(artifactHash: string, reservations: TdmReservation[], trustedHolders?: string[]): boolean {
+  const latest = reservations.filter((r) => r.artifact_hash === artifactHash && verifySignedObject(r) && (!trustedHolders || trustedHolders.includes(r.signer))).sort((a, b) => a.ts.localeCompare(b.ts)).at(-1);
+  return latest?.reserved ?? false;
+}
+
+/** Label every item in a feed from its credential: AI-generated by a named agent, credential invalid, or no credential. */
+export function labelFeed(items: Array<{ id: string; artifact?: Uint8Array | string; credential?: ContentCredential }>) {
+  return items.map((i) => {
+    if (!i.credential) return { id: i.id, label: 'no-credential' as const, agent: null };
+    const ok = verifyContentCredential(i.credential, i.artifact).ok;
+    return { id: i.id, label: ok ? ('ai-generated' as const) : ('credential-invalid' as const), agent: ok ? i.credential.agent : null };
+  });
+}
+
+export type PoliticalAdDisclosure = SignedObject<{ v: 1; type: 'provenance.political_ad'; artifact_hash: string; sponsor: string; jurisdiction: string; ai_used: boolean; ai_description?: string; ts: string }>;
+
+/** A sponsor discloses a political ad and whether AI made or altered it. */
+export function disclosePoliticalAd(input: { artifactHash: string; sponsor: string; jurisdiction: string; aiUsed: boolean; aiDescription?: string; ts?: string }, sponsorPrivateKey: Uint8Array): PoliticalAdDisclosure {
+  return signObject({ v: 1 as const, type: 'provenance.political_ad' as const, artifact_hash: input.artifactHash, sponsor: input.sponsor, jurisdiction: input.jurisdiction, ai_used: input.aiUsed, ...(input.aiDescription ? { ai_description: input.aiDescription } : {}), ts: input.ts ?? new Date().toISOString() }, sponsorPrivateKey);
+}
+
+/** An in-memory registry a regulator can run: accepts only valid disclosures, looks ads up by hash. */
+export function createAdRegistry() {
+  const byHash = new Map<string, PoliticalAdDisclosure[]>();
+  return {
+    register(d: PoliticalAdDisclosure) {
+      if (!verifySignedObject(d)) throw new Error('provenance: invalid political ad disclosure');
+      byHash.set(d.artifact_hash, [...(byHash.get(d.artifact_hash) ?? []), d]);
+    },
+    lookup: (artifactHash: string) => byHash.get(artifactHash) ?? [],
+    aiAds: (jurisdiction?: string) => [...byHash.values()].flat().filter((d) => d.ai_used && (!jurisdiction || d.jurisdiction === jurisdiction)),
+  };
+}
+
+/** Contributor shares (basis points summing to 10,000) for a work, hashed so payouts can cite it. */
+export function royaltySplit(artifactHash: string, contributors: Array<{ did: string; bps: number; role?: string }>) {
+  if (contributors.some((c) => !Number.isInteger(c.bps) || c.bps <= 0)) throw new Error('provenance: shares must be positive integer basis points');
+  const total = contributors.reduce((s, c) => s + c.bps, 0);
+  if (total !== 10_000) throw new Error(`provenance: shares sum to ${total} bps, not 10000`);
+  const split = { v: 1 as const, type: 'provenance.royalty_split' as const, artifact_hash: artifactHash, contributors };
+  return { ...split, hash: jcsHash(split) };
+}
+
+/** Pay out an amount in integer minor units by the split; remainders go by largest fraction, so the total is exact. */
+export function splitPayout(split: ReturnType<typeof royaltySplit>, amountMinor: bigint) {
+  const raw = split.contributors.map((c) => ({ did: c.did, q: (amountMinor * BigInt(c.bps)) / 10_000n, r: (amountMinor * BigInt(c.bps)) % 10_000n }));
+  let left = amountMinor - raw.reduce((s, x) => s + x.q, 0n);
+  for (const x of [...raw].sort((a, b) => (b.r > a.r ? 1 : b.r < a.r ? -1 : 0))) {
+    if (left === 0n) break;
+    x.q += 1n;
+    left -= 1n;
+  }
+  return { split: split.hash, payouts: raw.map((x) => ({ did: x.did, minor: x.q.toString() })) };
+}