@zanii/redact 0.1.1 → 0.1.3

package/README.md

@@ -41,6 +41,8 @@ SPEC.md §12).
 
 ## Changelog
 
+- **0.1.3** — Range proofs (via @zanii/zk), field-in-set proofs, predicates over disclosures and ranges, nested JSON commitments, provably redacted documents, SD-JWT export/verify/present, disclosure log, expiring grants, role-based auditor views, LLM-safe context.
+- **0.1.2** — now depends on `@zanii/core` 0.5 (protocol 1.2), so it shares one core with `@zanii/sdk` 0.5 instead of pulling in a second, older copy. No API change.
 - **0.1.0** — initial release: `commit`, `disclose`, `verifyDisclosure`.
 
 ## License

package/dist/advanced.d.ts

@@ -0,0 +1,157 @@
+import { type RiskLevel, type SignedObject } from '@zanii/core';
+import { type CommittedSet, type MembershipProof, type ThresholdAnchor, type ThresholdProof, type ThresholdSecret } from '@zanii/zk';
+import { type CommitResult, type Disclosure, type RedactEnvelope } from './index.js';
+export interface RangeAnchors {
+    field: string;
+    /** Upper bound of the scale (e.g. 150 for age); proofs of "at most" count down from it. */
+    bound: number;
+    lo: ThresholdAnchor;
+    hi: ThresholdAnchor;
+}
+/**
+ * Issuer side: anchors for a numeric field so the holder can later prove min <= value <= max
+ * without revealing it. Commit or sign `anchors` (e.g. as a committed field); give `secret` to the holder.
+ */
+export declare function rangeAnchors(field: string, value: number, bound: number): {
+    anchors: RangeAnchors;
+    secret: {
+        lo: ThresholdSecret;
+        hi: ThresholdSecret;
+    };
+};
+export interface RangeProof {
+    field: string;
+    min: number;
+    max: number;
+    lo: ThresholdProof;
+    hi: ThresholdProof;
+}
+/** Holder side: prove min <= value <= max. Throws if the value is outside. */
+export declare function proveRange(anchors: RangeAnchors, secret: {
+    lo: ThresholdSecret;
+    hi: ThresholdSecret;
+}, min: number, max: number): RangeProof;
+export declare function verifyRange(anchors: RangeAnchors, p: RangeProof): boolean;
+/**
+ * Show that a committed field's value is in a committed set (an allow-list, the eligible ids),
+ * revealing that value but nothing else of the set or the other fields.
+ */
+export declare function proveFieldInSet(result: CommitResult, key: string, set: CommittedSet): {
+    disclosure: Disclosure;
+    membership: MembershipProof;
+};
+export declare function verifyFieldInSet(p: {
+    disclosure: Disclosure;
+    membership: MembershipProof;
+}, envelope: RedactEnvelope, setRoot: string): boolean;
+export type Predicate = {
+    all: Predicate[];
+} | {
+    any: Predicate[];
+} | {
+    field: string;
+    op: 'eq' | 'neq' | 'in';
+    value: unknown;
+} | {
+    field: string;
+    op: 'gte' | 'lte';
+    value: number;
+};
+/**
+ * Evaluate a predicate over verified disclosures (and range proofs, which satisfy gte/lte without
+ * revealing the value). Unverifiable or missing fields make their clause false.
+ */
+export declare function evaluatePredicate(expr: Predicate, envelope: RedactEnvelope, evidence: {
+    disclosures?: Disclosure[];
+    ranges?: Array<{
+        anchors: RangeAnchors;
+        proof: RangeProof;
+    }>;
+}): boolean;
+/** Flatten JSON to RFC 6901 pointers -> leaf values (empty objects and arrays are kept as leaves). */
+export declare function flattenJson(value: unknown, prefix?: string): Record<string, unknown>;
+/** Commit to every leaf of a JSON document, keyed by its JSON pointer (e.g. `/customer/address/city`). */
+export declare function nestedCommit(json: Record<string, unknown>): CommitResult;
+/** Commit to a document split into segments (pages, paragraphs, clauses). You do the splitting, e.g. per PDF page. */
+export declare function commitDocument(segments: string[]): CommitResult;
+/** Release a redacted copy: the kept segments with proofs; the rest are provably the committed ones, hidden. */
+export declare function redactDocument(result: CommitResult, keep: number[]): {
+    envelope: RedactEnvelope;
+    disclosures: Disclosure[];
+};
+/** Rebuild the redacted view: verified segments in place, `null` where redacted; fails on any bad proof. */
+export declare function verifyRedactedDocument(doc: {
+    envelope: RedactEnvelope;
+    disclosures: Disclosure[];
+}): {
+    ok: boolean;
+    bad: string[];
+    segments: (string | null)[];
+};
+/**
+ * Export fields as an SD-JWT (IETF draft format: `<issuer-jwt>~<disclosure>~...~`), signed EdDSA
+ * with the issuer's did:key. Every field is selectively disclosable.
+ */
+export declare function sdJwtExport(fields: Record<string, unknown>, issuerPrivateKey: Uint8Array, opts?: {
+    iat?: number;
+    vct?: string;
+}): string;
+/** Verify an SD-JWT from `sdJwtExport` (issuer signature, every presented disclosure listed) and return the disclosed claims. */
+export declare function verifySdJwt(token: string): {
+    ok: boolean;
+    issuer?: string;
+    claims: Record<string, unknown>;
+    reason?: string;
+};
+/** Present only some claims of an SD-JWT: keeps the issuer JWT and the chosen disclosures. */
+export declare function presentSdJwt(token: string, keys: string[]): string;
+interface Recorder {
+    record(fields: {
+        target: string;
+        payload: unknown;
+        risk?: RiskLevel;
+    }): Promise<unknown>;
+}
+/** Record who was shown which fields, why, as a receipt (names and root only, never the values). */
+export declare function logDisclosure(agent: Recorder, input: {
+    recipient: string;
+    purpose: string;
+    disclosures: Disclosure[];
+}): Promise<unknown>;
+export type DisclosureGrant = SignedObject<{
+    v: 1;
+    type: 'redact.grant';
+    recipient: string;
+    exp: string;
+    root: string;
+    disclosures: Disclosure[];
+}>;
+/** Wrap disclosures in a grant for one recipient that expires. Signed by the holder. */
+export declare function grantDisclosure(disclosures: Disclosure[], opts: {
+    recipient: string;
+    exp: string;
+}, holderPrivateKey: Uint8Array): DisclosureGrant;
+export declare function verifyGrant(g: DisclosureGrant, envelope: RedactEnvelope, opts: {
+    recipient: string;
+    now?: string;
+}): {
+    ok: boolean;
+    reasons: string[];
+};
+export type RevealPolicy = Record<string, string[]>;
+/** Disclosures for a role (e.g. `regulator` sees more than `counterparty`). Unknown roles see nothing. */
+export declare function auditorView(result: CommitResult, policy: RevealPolicy, role: string): Disclosure[];
+/**
+ * Context for a language model holding only the fields a role may see, each with its proof,
+ * and the names of what was withheld. The model never receives the withheld values.
+ */
+export declare function llmSafeContext(result: CommitResult, policy: RevealPolicy, role: string): {
+    context: {
+        [k: string]: unknown;
+    };
+    text: string;
+    proofs: Disclosure[];
+    withheld: string[];
+};
+export {};
+//# sourceMappingURL=advanced.d.ts.map

package/dist/advanced.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanced.d.ts","sourceRoot":"","sources":["../src/advanced.ts"],"names":[],"mappings":"AAOA,OAAO,EAAsE,KAAK,SAAS,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACpI,OAAO,EAAkF,KAAK,YAAY,EAAE,KAAK,eAAe,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,MAAM,WAAW,CAAC;AACrN,OAAO,EAAsC,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AAMzH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,eAAe,CAAC;IACpB,EAAE,EAAE,eAAe,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE;QAAE,EAAE,EAAE,eAAe,CAAC;QAAC,EAAE,EAAE,eAAe,CAAA;KAAE,CAAA;CAAE,CAKzJ;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,cAAc,CAAC;IACnB,EAAE,EAAE,cAAc,CAAC;CACpB;AAED,8EAA8E;AAC9E,wBAAgB,UAAU,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE;IAAE,EAAE,EAAE,eAAe,CAAC;IAAC,EAAE,EAAE,eAAe,CAAA;CAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAE5I;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAEzE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,eAAe,CAAA;CAAE,CAG7I;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,eAAe,CAAA;CAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAE/I;AAED,MAAM,MAAM,SAAS,GACjB;IAAE,GAAG,EAAE,SAAS,EAAE,CAAA;CAAE,GACpB;IAAE,GAAG,EAAE,SAAS,EAAE,CAAA;CAAE,GACpB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAC1D;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE;IAAE,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC,CAAA;CAAE,GAAG,OAAO,CAiB5L;AAQD,sGAAsG;AACtG,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,SAAK,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKhF;AAED,0GAA0G;AAC1G,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CAExE;AAED,sHAAsH;AACtH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,YAAY,CAG/D;AAED,gHAAgH;AAChH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE;;;EAGlE;AAED,4GAA4G;AAC5G,wBAAgB,sBAAsB,CAAC,GAAG,EAAE;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE;;;;EAIlG;AAUD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,GAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,MAAM,CAO5I;AAED,iIAAiI;AACjI,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAmB7H;AAED,8FAA8F;AAC9F,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAIlE;AAMD,UAAU,QAAQ;IAChB,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1F;AAED,oGAAoG;AACpG,wBAAgB,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,oBAEtH;AAED,MAAM,MAAM,eAAe,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,UAAU,EAAE,CAAA;CAAE,CAAC,CAAC;AAEpJ,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,gBAAgB,EAAE,UAAU,GAAG,eAAe,CAGlJ;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE;;;EAOlH;AAED,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AAEpD,0GAA0G;AAC1G,wBAAgB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,CAElG;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM;;;;;;;EAKtF"}

package/dist/advanced.js

@@ -0,0 +1,183 @@
+/**
+ * Selective disclosure, further: range proofs (hash-chain, via @zanii/zk), set
+ * membership, predicates over disclosed fields, nested JSON commitments, redacted
+ * documents with a provably unchanged remainder, SD-JWT export, a disclosure log,
+ * expiring grants, role-based auditor views and LLM-safe context.
+ */
+import { createHash, createPrivateKey, createPublicKey, randomBytes, sign as edSign, verify as edVerify } from 'node:crypto';
+import { didFromPublicKey, publicKeyFromDid, signObject, verifySignedObject } from '@zanii/core';
+import { proveAtLeast, proveMembership, thresholdChain, verifyAtLeast, verifyMembership } from '@zanii/zk';
+import { commit, disclose, verifyDisclosure } from './index.js';
+/**
+ * Issuer side: anchors for a numeric field so the holder can later prove min <= value <= max
+ * without revealing it. Commit or sign `anchors` (e.g. as a committed field); give `secret` to the holder.
+ */
+export function rangeAnchors(field, value, bound) {
+    if (!Number.isInteger(value) || value < 0 || value > bound)
+        throw new Error(`redact: ${field} must be an integer in 0..${bound}`);
+    const lo = thresholdChain(value, `${field}/lo`);
+    const hi = thresholdChain(bound - value, `${field}/hi`);
+    return { anchors: { field, bound, lo: lo.anchor, hi: hi.anchor }, secret: { lo: lo.secret, hi: hi.secret } };
+}
+/** Holder side: prove min <= value <= max. Throws if the value is outside. */
+export function proveRange(anchors, secret, min, max) {
+    return { field: anchors.field, min, max, lo: proveAtLeast(secret.lo, `${anchors.field}/lo`, min), hi: proveAtLeast(secret.hi, `${anchors.field}/hi`, anchors.bound - max) };
+}
+export function verifyRange(anchors, p) {
+    return p.field === anchors.field && p.min <= p.max && p.lo.threshold === p.min && p.hi.threshold === anchors.bound - p.max && verifyAtLeast(anchors.lo, p.lo) && verifyAtLeast(anchors.hi, p.hi);
+}
+/**
+ * Show that a committed field's value is in a committed set (an allow-list, the eligible ids),
+ * revealing that value but nothing else of the set or the other fields.
+ */
+export function proveFieldInSet(result, key, set) {
+    const d = disclose(result, key);
+    return { disclosure: d, membership: proveMembership(set, String(d.value)) };
+}
+export function verifyFieldInSet(p, envelope, setRoot) {
+    return verifyDisclosure(p.disclosure, envelope) && p.membership.item === String(p.disclosure.value) && verifyMembership(setRoot, p.membership);
+}
+/**
+ * Evaluate a predicate over verified disclosures (and range proofs, which satisfy gte/lte without
+ * revealing the value). Unverifiable or missing fields make their clause false.
+ */
+export function evaluatePredicate(expr, envelope, evidence) {
+    if ('all' in expr)
+        return expr.all.every((e) => evaluatePredicate(e, envelope, evidence));
+    if ('any' in expr)
+        return expr.any.some((e) => evaluatePredicate(e, envelope, evidence));
+    if (expr.op === 'gte' || expr.op === 'lte') {
+        const viaRange = (evidence.ranges ?? []).some(({ anchors, proof }) => anchors.field === expr.field && verifyRange(anchors, proof) && (expr.op === 'gte' ? proof.min >= expr.value : proof.max <= expr.value));
+        if (viaRange)
+            return true;
+    }
+    const d = (evidence.disclosures ?? []).find((x) => x.key === expr.field && verifyDisclosure(x, envelope));
+    if (!d)
+        return false;
+    const v = d.value;
+    switch (expr.op) {
+        case 'eq': return JSON.stringify(v) === JSON.stringify(expr.value);
+        case 'neq': return JSON.stringify(v) !== JSON.stringify(expr.value);
+        case 'in': return Array.isArray(expr.value) && expr.value.some((x) => JSON.stringify(x) === JSON.stringify(v));
+        case 'gte': return typeof v === 'number' && v >= expr.value;
+        case 'lte': return typeof v === 'number' && v <= expr.value;
+    }
+}
+// ------------------------------------------------------------------------------ //
+// Nested JSON and documents
+// ------------------------------------------------------------------------------ //
+const escapePointer = (s) => s.replace(/~/g, '~0').replace(/\//g, '~1');
+/** Flatten JSON to RFC 6901 pointers -> leaf values (empty objects and arrays are kept as leaves). */
+export function flattenJson(value, prefix = '') {
+    if (value !== null && typeof value === 'object' && Object.keys(value).length > 0) {
+        return Object.assign({}, ...Object.entries(value).map(([k, v]) => flattenJson(v, `${prefix}/${escapePointer(k)}`)));
+    }
+    return { [prefix || '/']: value };
+}
+/** Commit to every leaf of a JSON document, keyed by its JSON pointer (e.g. `/customer/address/city`). */
+export function nestedCommit(json) {
+    return commit(flattenJson(json));
+}
+/** Commit to a document split into segments (pages, paragraphs, clauses). You do the splitting, e.g. per PDF page. */
+export function commitDocument(segments) {
+    if (segments.length === 0)
+        throw new Error('redact: a document needs at least one segment');
+    return commit(Object.fromEntries(segments.map((s, i) => [`seg/${String(i).padStart(6, '0')}`, s])));
+}
+/** Release a redacted copy: the kept segments with proofs; the rest are provably the committed ones, hidden. */
+export function redactDocument(result, keep) {
+    const keys = new Set(keep.map((i) => `seg/${String(i).padStart(6, '0')}`));
+    return { envelope: result.envelope, disclosures: result.envelope.keys.filter((k) => keys.has(k)).map((k) => disclose(result, k)) };
+}
+/** Rebuild the redacted view: verified segments in place, `null` where redacted; fails on any bad proof. */
+export function verifyRedactedDocument(doc) {
+    const byKey = new Map(doc.disclosures.map((d) => [d.key, d]));
+    const bad = doc.disclosures.filter((d) => !verifyDisclosure(d, doc.envelope)).map((d) => d.key);
+    return { ok: bad.length === 0, bad, segments: doc.envelope.keys.map((k) => (byKey.has(k) && !bad.includes(k) ? byKey.get(k).value : null)) };
+}
+// ------------------------------------------------------------------------------ //
+// SD-JWT
+// ------------------------------------------------------------------------------ //
+const b64u = (b) => Buffer.from(b).toString('base64url');
+const PKCS8 = Buffer.from('302e020100300506032b657004220420', 'hex');
+const SPKI = Buffer.from('302a300506032b6570032100', 'hex');
+/**
+ * Export fields as an SD-JWT (IETF draft format: `<issuer-jwt>~<disclosure>~...~`), signed EdDSA
+ * with the issuer's did:key. Every field is selectively disclosable.
+ */
+export function sdJwtExport(fields, issuerPrivateKey, opts = {}) {
+    const key = createPrivateKey({ key: Buffer.concat([PKCS8, Buffer.from(issuerPrivateKey)]), format: 'der', type: 'pkcs8' });
+    const iss = didFromPublicKey(new Uint8Array(createPublicKey(key).export({ format: 'der', type: 'spki' }).subarray(SPKI.length))); // a KeyObject; @types/node omits that overload
+    const disclosures = Object.entries(fields).map(([k, v]) => b64u(JSON.stringify([randomBytes(16).toString('base64url'), k, v])));
+    const payload = { iss, iat: opts.iat ?? Math.floor(Date.now() / 1000), ...(opts.vct ? { vct: opts.vct } : {}), _sd_alg: 'sha-256', _sd: disclosures.map((d) => createHash('sha256').update(d).digest('base64url')).sort() };
+    const signingInput = `${b64u(JSON.stringify({ alg: 'EdDSA', typ: 'vc+sd-jwt' }))}.${b64u(JSON.stringify(payload))}`;
+    return `${signingInput}.${b64u(edSign(null, Buffer.from(signingInput), key))}~${disclosures.map((d) => `${d}~`).join('')}`;
+}
+/** Verify an SD-JWT from `sdJwtExport` (issuer signature, every presented disclosure listed) and return the disclosed claims. */
+export function verifySdJwt(token) {
+    try {
+        const [jwt, ...rest] = token.split('~');
+        const [h, p, s] = jwt.split('.');
+        const payload = JSON.parse(Buffer.from(p, 'base64url').toString());
+        const pub = publicKeyFromDid(payload.iss);
+        if (!pub)
+            return { ok: false, claims: {}, reason: 'issuer is not a did:key' };
+        const key = createPublicKey({ key: Buffer.concat([SPKI, Buffer.from(pub)]), format: 'der', type: 'spki' });
+        if (!edVerify(null, Buffer.from(`${h}.${p}`), key, Buffer.from(s, 'base64url')))
+            return { ok: false, claims: {}, reason: 'bad issuer signature' };
+        const claims = {};
+        for (const d of rest.filter(Boolean)) {
+            if (!payload._sd.includes(createHash('sha256').update(d).digest('base64url')))
+                return { ok: false, claims: {}, reason: 'a disclosure is not in the signed digests' };
+            const [, k, v] = JSON.parse(Buffer.from(d, 'base64url').toString());
+            claims[k] = v;
+        }
+        return { ok: true, issuer: payload.iss, claims };
+    }
+    catch {
+        return { ok: false, claims: {}, reason: 'malformed SD-JWT' };
+    }
+}
+/** Present only some claims of an SD-JWT: keeps the issuer JWT and the chosen disclosures. */
+export function presentSdJwt(token, keys) {
+    const [jwt, ...rest] = token.split('~');
+    const keep = rest.filter(Boolean).filter((d) => keys.includes(JSON.parse(Buffer.from(d, 'base64url').toString())[1]));
+    return `${jwt}~${keep.map((d) => `${d}~`).join('')}`;
+}
+/** Record who was shown which fields, why, as a receipt (names and root only, never the values). */
+export function logDisclosure(agent, input) {
+    return agent.record({ target: 'redact.disclosed', risk: 'medium', payload: { recipient: input.recipient, purpose: input.purpose, root: input.disclosures[0]?.root ?? null, keys: input.disclosures.map((d) => d.key) } });
+}
+/** Wrap disclosures in a grant for one recipient that expires. Signed by the holder. */
+export function grantDisclosure(disclosures, opts, holderPrivateKey) {
+    if (Number.isNaN(Date.parse(opts.exp)))
+        throw new Error('redact: exp must be an ISO timestamp');
+    return signObject({ v: 1, type: 'redact.grant', recipient: opts.recipient, exp: opts.exp, root: disclosures[0]?.root ?? '', disclosures }, holderPrivateKey);
+}
+export function verifyGrant(g, envelope, opts) {
+    const reasons = [];
+    if (!verifySignedObject(g))
+        reasons.push('grant signature invalid');
+    if (g.recipient !== opts.recipient)
+        reasons.push('grant is for another recipient');
+    if ((opts.now ?? new Date().toISOString()) >= g.exp)
+        reasons.push('grant expired');
+    if (g.disclosures.some((d) => !verifyDisclosure(d, envelope)))
+        reasons.push('a disclosure does not verify');
+    return { ok: reasons.length === 0, reasons };
+}
+/** Disclosures for a role (e.g. `regulator` sees more than `counterparty`). Unknown roles see nothing. */
+export function auditorView(result, policy, role) {
+    return (policy[role] ?? []).filter((k) => result.envelope.keys.includes(k)).map((k) => disclose(result, k));
+}
+/**
+ * Context for a language model holding only the fields a role may see, each with its proof,
+ * and the names of what was withheld. The model never receives the withheld values.
+ */
+export function llmSafeContext(result, policy, role) {
+    const disclosures = auditorView(result, policy, role);
+    const shown = new Set(disclosures.map((d) => d.key));
+    const context = Object.fromEntries(result.envelope.keys.map((k) => [k, shown.has(k) ? result.secrets.fields[k].value : '[withheld]']));
+    return { context, text: JSON.stringify(context), proofs: disclosures, withheld: result.envelope.keys.filter((k) => !shown.has(k)) };
+}
+//# sourceMappingURL=advanced.js.map

package/dist/advanced.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanced.js","sourceRoot":"","sources":["../src/advanced.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC7H,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,UAAU,EAAE,kBAAkB,EAAqC,MAAM,aAAa,CAAC;AACpI,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAA4G,MAAM,WAAW,CAAC;AACrN,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAA2D,MAAM,YAAY,CAAC;AAczH;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,KAAa,EAAE,KAAa;IACtE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,6BAA6B,KAAK,EAAE,CAAC,CAAC;IAClI,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;IAChD,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,GAAG,KAAK,EAAE,GAAG,KAAK,KAAK,CAAC,CAAC;IACxD,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC;AAC/G,CAAC;AAUD,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,OAAqB,EAAE,MAAoD,EAAE,GAAW,EAAE,GAAW;IAC9H,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,KAAK,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;AAC9K,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAqB,EAAE,CAAa;IAC9D,OAAO,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,KAAK,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AACnM,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB,EAAE,GAAW,EAAE,GAAiB;IAClF,MAAM,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAA0D,EAAE,QAAwB,EAAE,OAAe;IACpI,OAAO,gBAAgB,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;AACjJ,CAAC;AAQD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAe,EAAE,QAAwB,EAAE,QAAsG;IACjL,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1F,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzF,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9M,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;IAC5B,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;IAClB,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;QAChB,KAAK,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnE,KAAK,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpE,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/G,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC;QAC5D,KAAK,KAAK,CAAC,CAAC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,4BAA4B;AAC5B,oFAAoF;AAEpF,MAAM,aAAa,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAEhF,sGAAsG;AACtG,MAAM,UAAU,WAAW,CAAC,KAAc,EAAE,MAAM,GAAG,EAAE;IACrD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,YAAY,CAAC,IAA6B;IACxD,OAAO,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,cAAc,CAAC,QAAkB;IAC/C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtG,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,IAAc;IACjE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACrI,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,sBAAsB,CAAC,GAA4D;IACjG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChG,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,KAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AAC5J,CAAC;AAED,oFAAoF;AACpF,SAAS;AACT,oFAAoF;AAEpF,MAAM,IAAI,GAAG,CAAC,CAAkB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;AACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AAE5D;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,MAA+B,EAAE,gBAA4B,EAAE,OAAuC,EAAE;IAClI,MAAM,GAAG,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3H,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,UAAU,CAAC,eAAe,CAAC,GAAwB,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,+CAA+C;IACtM,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChI,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5N,MAAM,YAAY,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IACpH,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7H,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,GAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAmC,CAAC;QACtG,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;QAC9E,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3G,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAE,EAAE,WAAW,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QACnJ,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAC;YACrK,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAA8B,CAAC;YACjG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,IAAc;IACxD,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAe,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC;IAC/I,OAAO,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACvD,CAAC;AAUD,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAAC,KAAe,EAAE,KAAwE;IACrH,OAAO,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5N,CAAC;AAID,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,WAAyB,EAAE,IAAwC,EAAE,gBAA4B;IAC/H,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAChG,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,cAAuB,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,gBAAgB,CAAC,CAAC;AACjL,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAkB,EAAE,QAAwB,EAAE,IAAyC;IACjH,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACnF,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACnF,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC5G,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AAID,0GAA0G;AAC1G,MAAM,UAAU,WAAW,CAAC,MAAoB,EAAE,MAAoB,EAAE,IAAY;IAClF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;AAC9G,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,MAAoB,EAAE,IAAY;IACrF,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxI,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtI,CAAC"}

package/dist/index.d.ts

@@ -44,4 +44,5 @@ export declare function disclose(result: CommitResult, key: string): Disclosure;
  * true only if the revealed `(key, value)` is provably one of the committed fields.
  */
 export declare function verifyDisclosure(d: Disclosure, envelope: RedactEnvelope): boolean;
+export * from './advanced.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAwBA,iGAAiG;AACjG,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,OAAO,CAAC;IACb,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,kBAAkB,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CAYpE;AAED,gDAAgD;AAChD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAMtE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAWjF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAwBA,iGAAiG;AACjG,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,OAAO,CAAC;IACb,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,yFAAyF;AACzF,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,kBAAkB,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CAYpE;AAED,gDAAgD;AAChD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,UAAU,CAMtE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAWjF;AACD,cAAc,eAAe,CAAC"}

package/dist/index.js

@@ -66,4 +66,5 @@ export function verifyDisclosure(d, envelope) {
         return false;
     }
 }
+export * from './advanced.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,GAAG,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAE/E,gGAAgG;AAChG,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc,EAAE,OAAe;IAC7D,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAoCD;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,MAA+B;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,OAAO;QACL,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE;QAC7D,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;KACpF,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,QAAQ,CAAC,MAAoB,EAAE,GAAW;IACxD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO,EAAE,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AACtJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAa,EAAE,QAAwB;IACtE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACpG,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,GAAG,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AAE/E,gGAAgG;AAChG,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc,EAAE,OAAe;IAC7D,OAAO,QAAQ,CAAC,cAAc,CAAC,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAoCD;;;GAGG;AACH,MAAM,UAAU,MAAM,CAAC,MAA+B;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/F,OAAO;QACL,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE;QAC7D,OAAO,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;KACpF,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,QAAQ,CAAC,MAAoB,EAAE,GAAW;IACxD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO,EAAE,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;AACtJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAa,EAAE,QAAwB;IACtE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3C,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AACD,cAAc,eAAe,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zanii/redact",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "Selective disclosure for Zanii receipts - prove an agent acted on specific data without revealing the rest, via salted field commitments and Merkle inclusion proofs.",
   "license": "Apache-2.0",
   "homepage": "https://ledger.zanii.agency",
@@ -31,7 +31,8 @@
     "vitest": "^3.0.9"
   },
   "dependencies": {
-    "@zanii/core": "^0.4.0"
+    "@zanii/core": "^0.5.4",
+    "@zanii/zk": "^0.1.0"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",

package/src/advanced.ts

@@ -0,0 +1,228 @@
+/**
+ * Selective disclosure, further: range proofs (hash-chain, via @zanii/zk), set
+ * membership, predicates over disclosed fields, nested JSON commitments, redacted
+ * documents with a provably unchanged remainder, SD-JWT export, a disclosure log,
+ * expiring grants, role-based auditor views and LLM-safe context.
+ */
+import { createHash, createPrivateKey, createPublicKey, randomBytes, sign as edSign, verify as edVerify } from 'node:crypto';
+import { didFromPublicKey, publicKeyFromDid, signObject, verifySignedObject, type RiskLevel, type SignedObject } from '@zanii/core';
+import { proveAtLeast, proveMembership, thresholdChain, verifyAtLeast, verifyMembership, type CommittedSet, type MembershipProof, type ThresholdAnchor, type ThresholdProof, type ThresholdSecret } from '@zanii/zk';
+import { commit, disclose, verifyDisclosure, type CommitResult, type Disclosure, type RedactEnvelope } from './index.js';
+
+// ------------------------------------------------------------------------------ //
+// Ranges, sets, predicates
+// ------------------------------------------------------------------------------ //
+
+export interface RangeAnchors {
+  field: string;
+  /** Upper bound of the scale (e.g. 150 for age); proofs of "at most" count down from it. */
+  bound: number;
+  lo: ThresholdAnchor;
+  hi: ThresholdAnchor;
+}
+
+/**
+ * Issuer side: anchors for a numeric field so the holder can later prove min <= value <= max
+ * without revealing it. Commit or sign `anchors` (e.g. as a committed field); give `secret` to the holder.
+ */
+export function rangeAnchors(field: string, value: number, bound: number): { anchors: RangeAnchors; secret: { lo: ThresholdSecret; hi: ThresholdSecret } } {
+  if (!Number.isInteger(value) || value < 0 || value > bound) throw new Error(`redact: ${field} must be an integer in 0..${bound}`);
+  const lo = thresholdChain(value, `${field}/lo`);
+  const hi = thresholdChain(bound - value, `${field}/hi`);
+  return { anchors: { field, bound, lo: lo.anchor, hi: hi.anchor }, secret: { lo: lo.secret, hi: hi.secret } };
+}
+
+export interface RangeProof {
+  field: string;
+  min: number;
+  max: number;
+  lo: ThresholdProof;
+  hi: ThresholdProof;
+}
+
+/** Holder side: prove min <= value <= max. Throws if the value is outside. */
+export function proveRange(anchors: RangeAnchors, secret: { lo: ThresholdSecret; hi: ThresholdSecret }, min: number, max: number): RangeProof {
+  return { field: anchors.field, min, max, lo: proveAtLeast(secret.lo, `${anchors.field}/lo`, min), hi: proveAtLeast(secret.hi, `${anchors.field}/hi`, anchors.bound - max) };
+}
+
+export function verifyRange(anchors: RangeAnchors, p: RangeProof): boolean {
+  return p.field === anchors.field && p.min <= p.max && p.lo.threshold === p.min && p.hi.threshold === anchors.bound - p.max && verifyAtLeast(anchors.lo, p.lo) && verifyAtLeast(anchors.hi, p.hi);
+}
+
+/**
+ * Show that a committed field's value is in a committed set (an allow-list, the eligible ids),
+ * revealing that value but nothing else of the set or the other fields.
+ */
+export function proveFieldInSet(result: CommitResult, key: string, set: CommittedSet): { disclosure: Disclosure; membership: MembershipProof } {
+  const d = disclose(result, key);
+  return { disclosure: d, membership: proveMembership(set, String(d.value)) };
+}
+
+export function verifyFieldInSet(p: { disclosure: Disclosure; membership: MembershipProof }, envelope: RedactEnvelope, setRoot: string): boolean {
+  return verifyDisclosure(p.disclosure, envelope) && p.membership.item === String(p.disclosure.value) && verifyMembership(setRoot, p.membership);
+}
+
+export type Predicate =
+  | { all: Predicate[] }
+  | { any: Predicate[] }
+  | { field: string; op: 'eq' | 'neq' | 'in'; value: unknown }
+  | { field: string; op: 'gte' | 'lte'; value: number };
+
+/**
+ * Evaluate a predicate over verified disclosures (and range proofs, which satisfy gte/lte without
+ * revealing the value). Unverifiable or missing fields make their clause false.
+ */
+export function evaluatePredicate(expr: Predicate, envelope: RedactEnvelope, evidence: { disclosures?: Disclosure[]; ranges?: Array<{ anchors: RangeAnchors; proof: RangeProof }> }): boolean {
+  if ('all' in expr) return expr.all.every((e) => evaluatePredicate(e, envelope, evidence));
+  if ('any' in expr) return expr.any.some((e) => evaluatePredicate(e, envelope, evidence));
+  if (expr.op === 'gte' || expr.op === 'lte') {
+    const viaRange = (evidence.ranges ?? []).some(({ anchors, proof }) => anchors.field === expr.field && verifyRange(anchors, proof) && (expr.op === 'gte' ? proof.min >= expr.value : proof.max <= expr.value));
+    if (viaRange) return true;
+  }
+  const d = (evidence.disclosures ?? []).find((x) => x.key === expr.field && verifyDisclosure(x, envelope));
+  if (!d) return false;
+  const v = d.value;
+  switch (expr.op) {
+    case 'eq': return JSON.stringify(v) === JSON.stringify(expr.value);
+    case 'neq': return JSON.stringify(v) !== JSON.stringify(expr.value);
+    case 'in': return Array.isArray(expr.value) && expr.value.some((x) => JSON.stringify(x) === JSON.stringify(v));
+    case 'gte': return typeof v === 'number' && v >= expr.value;
+    case 'lte': return typeof v === 'number' && v <= expr.value;
+  }
+}
+
+// ------------------------------------------------------------------------------ //
+// Nested JSON and documents
+// ------------------------------------------------------------------------------ //
+
+const escapePointer = (s: string) => s.replace(/~/g, '~0').replace(/\//g, '~1');
+
+/** Flatten JSON to RFC 6901 pointers -> leaf values (empty objects and arrays are kept as leaves). */
+export function flattenJson(value: unknown, prefix = ''): Record<string, unknown> {
+  if (value !== null && typeof value === 'object' && Object.keys(value).length > 0) {
+    return Object.assign({}, ...Object.entries(value).map(([k, v]) => flattenJson(v, `${prefix}/${escapePointer(k)}`)));
+  }
+  return { [prefix || '/']: value };
+}
+
+/** Commit to every leaf of a JSON document, keyed by its JSON pointer (e.g. `/customer/address/city`). */
+export function nestedCommit(json: Record<string, unknown>): CommitResult {
+  return commit(flattenJson(json));
+}
+
+/** Commit to a document split into segments (pages, paragraphs, clauses). You do the splitting, e.g. per PDF page. */
+export function commitDocument(segments: string[]): CommitResult {
+  if (segments.length === 0) throw new Error('redact: a document needs at least one segment');
+  return commit(Object.fromEntries(segments.map((s, i) => [`seg/${String(i).padStart(6, '0')}`, s])));
+}
+
+/** Release a redacted copy: the kept segments with proofs; the rest are provably the committed ones, hidden. */
+export function redactDocument(result: CommitResult, keep: number[]) {
+  const keys = new Set(keep.map((i) => `seg/${String(i).padStart(6, '0')}`));
+  return { envelope: result.envelope, disclosures: result.envelope.keys.filter((k) => keys.has(k)).map((k) => disclose(result, k)) };
+}
+
+/** Rebuild the redacted view: verified segments in place, `null` where redacted; fails on any bad proof. */
+export function verifyRedactedDocument(doc: { envelope: RedactEnvelope; disclosures: Disclosure[] }) {
+  const byKey = new Map(doc.disclosures.map((d) => [d.key, d]));
+  const bad = doc.disclosures.filter((d) => !verifyDisclosure(d, doc.envelope)).map((d) => d.key);
+  return { ok: bad.length === 0, bad, segments: doc.envelope.keys.map((k) => (byKey.has(k) && !bad.includes(k) ? (byKey.get(k)!.value as string) : null)) };
+}
+
+// ------------------------------------------------------------------------------ //
+// SD-JWT
+// ------------------------------------------------------------------------------ //
+
+const b64u = (b: Buffer | string) => Buffer.from(b).toString('base64url');
+const PKCS8 = Buffer.from('302e020100300506032b657004220420', 'hex');
+const SPKI = Buffer.from('302a300506032b6570032100', 'hex');
+
+/**
+ * Export fields as an SD-JWT (IETF draft format: `<issuer-jwt>~<disclosure>~...~`), signed EdDSA
+ * with the issuer's did:key. Every field is selectively disclosable.
+ */
+export function sdJwtExport(fields: Record<string, unknown>, issuerPrivateKey: Uint8Array, opts: { iat?: number; vct?: string } = {}): string {
+  const key = createPrivateKey({ key: Buffer.concat([PKCS8, Buffer.from(issuerPrivateKey)]), format: 'der', type: 'pkcs8' });
+  const iss = didFromPublicKey(new Uint8Array(createPublicKey(key as unknown as string).export({ format: 'der', type: 'spki' }).subarray(SPKI.length))); // a KeyObject; @types/node omits that overload
+  const disclosures = Object.entries(fields).map(([k, v]) => b64u(JSON.stringify([randomBytes(16).toString('base64url'), k, v])));
+  const payload = { iss, iat: opts.iat ?? Math.floor(Date.now() / 1000), ...(opts.vct ? { vct: opts.vct } : {}), _sd_alg: 'sha-256', _sd: disclosures.map((d) => createHash('sha256').update(d).digest('base64url')).sort() };
+  const signingInput = `${b64u(JSON.stringify({ alg: 'EdDSA', typ: 'vc+sd-jwt' }))}.${b64u(JSON.stringify(payload))}`;
+  return `${signingInput}.${b64u(edSign(null, Buffer.from(signingInput), key))}~${disclosures.map((d) => `${d}~`).join('')}`;
+}
+
+/** Verify an SD-JWT from `sdJwtExport` (issuer signature, every presented disclosure listed) and return the disclosed claims. */
+export function verifySdJwt(token: string): { ok: boolean; issuer?: string; claims: Record<string, unknown>; reason?: string } {
+  try {
+    const [jwt, ...rest] = token.split('~');
+    const [h, p, s] = jwt!.split('.');
+    const payload = JSON.parse(Buffer.from(p!, 'base64url').toString()) as { iss: string; _sd: string[] };
+    const pub = publicKeyFromDid(payload.iss);
+    if (!pub) return { ok: false, claims: {}, reason: 'issuer is not a did:key' };
+    const key = createPublicKey({ key: Buffer.concat([SPKI, Buffer.from(pub)]), format: 'der', type: 'spki' });
+    if (!edVerify(null, Buffer.from(`${h}.${p}`), key, Buffer.from(s!, 'base64url'))) return { ok: false, claims: {}, reason: 'bad issuer signature' };
+    const claims: Record<string, unknown> = {};
+    for (const d of rest.filter(Boolean)) {
+      if (!payload._sd.includes(createHash('sha256').update(d).digest('base64url'))) return { ok: false, claims: {}, reason: 'a disclosure is not in the signed digests' };
+      const [, k, v] = JSON.parse(Buffer.from(d, 'base64url').toString()) as [string, string, unknown];
+      claims[k] = v;
+    }
+    return { ok: true, issuer: payload.iss, claims };
+  } catch {
+    return { ok: false, claims: {}, reason: 'malformed SD-JWT' };
+  }
+}
+
+/** Present only some claims of an SD-JWT: keeps the issuer JWT and the chosen disclosures. */
+export function presentSdJwt(token: string, keys: string[]): string {
+  const [jwt, ...rest] = token.split('~');
+  const keep = rest.filter(Boolean).filter((d) => keys.includes((JSON.parse(Buffer.from(d, 'base64url').toString()) as unknown[])[1] as string));
+  return `${jwt}~${keep.map((d) => `${d}~`).join('')}`;
+}
+
+// ------------------------------------------------------------------------------ //
+// Logs, grants, views
+// ------------------------------------------------------------------------------ //
+
+interface Recorder {
+  record(fields: { target: string; payload: unknown; risk?: RiskLevel }): Promise<unknown>;
+}
+
+/** Record who was shown which fields, why, as a receipt (names and root only, never the values). */
+export function logDisclosure(agent: Recorder, input: { recipient: string; purpose: string; disclosures: Disclosure[] }) {
+  return agent.record({ target: 'redact.disclosed', risk: 'medium', payload: { recipient: input.recipient, purpose: input.purpose, root: input.disclosures[0]?.root ?? null, keys: input.disclosures.map((d) => d.key) } });
+}
+
+export type DisclosureGrant = SignedObject<{ v: 1; type: 'redact.grant'; recipient: string; exp: string; root: string; disclosures: Disclosure[] }>;
+
+/** Wrap disclosures in a grant for one recipient that expires. Signed by the holder. */
+export function grantDisclosure(disclosures: Disclosure[], opts: { recipient: string; exp: string }, holderPrivateKey: Uint8Array): DisclosureGrant {
+  if (Number.isNaN(Date.parse(opts.exp))) throw new Error('redact: exp must be an ISO timestamp');
+  return signObject({ v: 1 as const, type: 'redact.grant' as const, recipient: opts.recipient, exp: opts.exp, root: disclosures[0]?.root ?? '', disclosures }, holderPrivateKey);
+}
+
+export function verifyGrant(g: DisclosureGrant, envelope: RedactEnvelope, opts: { recipient: string; now?: string }) {
+  const reasons: string[] = [];
+  if (!verifySignedObject(g)) reasons.push('grant signature invalid');
+  if (g.recipient !== opts.recipient) reasons.push('grant is for another recipient');
+  if ((opts.now ?? new Date().toISOString()) >= g.exp) reasons.push('grant expired');
+  if (g.disclosures.some((d) => !verifyDisclosure(d, envelope))) reasons.push('a disclosure does not verify');
+  return { ok: reasons.length === 0, reasons };
+}
+
+export type RevealPolicy = Record<string, string[]>;
+
+/** Disclosures for a role (e.g. `regulator` sees more than `counterparty`). Unknown roles see nothing. */
+export function auditorView(result: CommitResult, policy: RevealPolicy, role: string): Disclosure[] {
+  return (policy[role] ?? []).filter((k) => result.envelope.keys.includes(k)).map((k) => disclose(result, k));
+}
+
+/**
+ * Context for a language model holding only the fields a role may see, each with its proof,
+ * and the names of what was withheld. The model never receives the withheld values.
+ */
+export function llmSafeContext(result: CommitResult, policy: RevealPolicy, role: string) {
+  const disclosures = auditorView(result, policy, role);
+  const shown = new Set(disclosures.map((d) => d.key));
+  const context = Object.fromEntries(result.envelope.keys.map((k) => [k, shown.has(k) ? result.secrets.fields[k]!.value : '[withheld]']));
+  return { context, text: JSON.stringify(context), proofs: disclosures, withheld: result.envelope.keys.filter((k) => !shown.has(k)) };
+}

package/src/index.ts

@@ -99,3 +99,4 @@ export function verifyDisclosure(d: Disclosure, envelope: RedactEnvelope): boole
     return false;
   }
 }
+export * from './advanced.js';