@zanii/subprocessor 0.2.1 → 0.2.2

package/README.md

@@ -36,3 +36,7 @@ breach. dpa/scc transfers with no agreement id are flagged too. Composes
 Proves the transfers that were **recorded**. It cannot prove an off-record leak — a
 processor that received plaintext and emitted nothing (that's the enclave/broker problem).
 An agreement id is a reference, not a guarantee the counterparty honored it.
+
+## Changelog
+
+- **0.2.2** — Model-provider transfers with zero-retention flag, signed DPA versions, Art. 28(3) clause check, Art. 28(2) change notices and objections, fourth-party declarations, transfer impact assessments, AI Act roles, per-object breach propagation, trust-center feed, regulator export.

package/dist/dpa.d.ts

@@ -0,0 +1,176 @@
+/**
+ * The onward-transfer chain in contracts and operations: model-provider calls as
+ * transfers, signed DPAs and change notices (Art. 28(2)), fourth-party declarations,
+ * transfer impact assessments, AI Act roles, breach propagation, Art. 28(3) clause checks,
+ * a trust-center feed and a regulator export. All read the same `Transfer` records.
+ */
+import { type SignedObject } from '@zanii/core';
+import { type Transfer } from './index.js';
+/** Record a call to a model provider as a transfer, flagging zero data retention. */
+export declare function modelProviderTransfer(input: {
+    from: string;
+    provider: string;
+    model: string;
+    zeroRetention: boolean;
+    dpaId?: string;
+    region?: string;
+    ref?: string;
+    ts: string;
+}): {
+    target: string;
+    payload: Record<string, unknown>;
+};
+export type SignedDpa = SignedObject<{
+    v: 1;
+    type: 'subprocessor.dpa';
+    processor: string;
+    version: string;
+    effective: string;
+    clauses: string[];
+    document: string;
+}>;
+/** A DPA version, signed by the controller, naming the document by hash. */
+export declare function signDpa(input: {
+    processor: string;
+    version: string;
+    effective: string;
+    clauses: string[];
+    documentHash: string;
+}, privateKey: Uint8Array): SignedDpa;
+/** The DPA in force for a processor at a time: the latest valid version effective by then. */
+export declare function dpaInForce(dpas: SignedDpa[], processor: string, at: string, trustedSigners?: string[]): SignedDpa | null;
+/** Art. 28(3) GDPR: what a processor contract must cover. */
+export declare const ART28_CLAUSES: readonly ["documented-instructions", "confidentiality", "security-art32", "subprocessor-conditions", "data-subject-assistance", "controller-assistance-art32-36", "deletion-or-return", "audit-rights"];
+export declare function contractualMinimums(clauses: string[], required?: readonly string[]): {
+    ok: boolean;
+    missing: string[];
+};
+export type ChangeNotice = SignedObject<{
+    v: 1;
+    type: 'subprocessor.change_notice';
+    subprocessor: string;
+    purpose: string;
+    region?: string;
+    effective: string;
+    ts: string;
+}>;
+export type Objection = SignedObject<{
+    v: 1;
+    type: 'subprocessor.objection';
+    notice: string;
+    reason: string;
+    ts: string;
+}>;
+/** The processor gives prior notice of a new subprocessor; it takes effect after `noticeDays`. */
+export declare function changeNotice(input: {
+    subprocessor: string;
+    purpose: string;
+    region?: string;
+    noticeDays?: number;
+    ts?: string;
+}, processorPrivateKey: Uint8Array): ChangeNotice;
+/** A customer objects within the notice period. */
+export declare function objectTo(notice: ChangeNotice, reason: string, customerPrivateKey: Uint8Array, ts?: string): Objection;
+/** Where a change stands: in its notice period, objected to in time, or effective. */
+export declare function changeStatus(notice: ChangeNotice, objections: Objection[], now?: string): {
+    status: "invalid";
+    objectors: string[];
+} | {
+    status: "objected";
+    objectors: string[];
+} | {
+    status: "notice-period" | "effective";
+    objectors: string[];
+};
+export type SubprocessorDeclaration = SignedObject<{
+    v: 1;
+    type: 'subprocessor.declaration';
+    subprocessors: string[];
+    ts: string;
+}>;
+/** A provider declares its own subprocessors, signed with its DID. */
+export declare function declareSubprocessors(subprocessors: string[], providerPrivateKey: Uint8Array, ts?: string): SubprocessorDeclaration;
+/** The supply chain from a root through signed declarations, with each party's depth. Parties without a declaration are leaves. */
+export declare function supplyChain(root: string, declarations: SubprocessorDeclaration[], maxDepth?: number): {
+    parties: {
+        [k: string]: number;
+    };
+    edges: {
+        from: string;
+        to: string;
+    }[];
+    undeclaredBelow: string[];
+};
+export declare const SUPPLEMENTARY_MEASURES: readonly ["exporter-held-keys", "pseudonymisation", "split-processing", "transparency-reporting", "challenge-requests"];
+/**
+ * A recorded transfer impact assessment (after Schrems II). Where public-authority access risk
+ * is high, a technical measure that keeps data unintelligible to the importer is needed to
+ * proceed. A structured record of the assessment, not legal advice.
+ */
+export declare function transferImpactAssessment(input: {
+    destination: string;
+    mechanism: 'scc' | 'bcr' | 'adequacy' | 'derogation';
+    accessRisk: 'low' | 'medium' | 'high';
+    measures: string[];
+    assessedBy: string;
+    ts: string;
+}): {
+    hash: string;
+    outcome: string;
+    destination: string;
+    mechanism: "scc" | "bcr" | "adequacy" | "derogation";
+    accessRisk: "low" | "medium" | "high";
+    measures: string[];
+    assessedBy: string;
+    ts: string;
+    v: number;
+    type: string;
+};
+export type AiActRole = 'provider' | 'deployer' | 'importer' | 'distributor' | 'authorised-representative';
+/** Annotate each transfer edge with the parties' AI Act roles; edges with an unknown role are listed. */
+export declare function aiActRoles(transfers: Transfer[], roles: Record<string, AiActRole>): {
+    edges: {
+        from: string;
+        to: string;
+        fromRole: AiActRole | null;
+        toRole: AiActRole | null;
+    }[];
+    unknown: string[];
+};
+/**
+ * After a breach at one party: which data objects had reached it, and through which senders.
+ * Traced per object (`ref`), so another object that merely shared an intermediary is not
+ * implicated; transfers without a ref are traced together as one group.
+ */
+export declare function breachPropagation(transfers: Transfer[], breached: string): {
+    upstream: string[];
+    objects: string[];
+};
+/** A public subprocessor list from recorded transfers: first and last seen per declared party, plus declared-but-unused. */
+export declare function trustCenterFeed(transfers: Transfer[], declared: Array<{
+    name: string;
+    purpose: string;
+    region?: string;
+}>): {
+    subprocessors: {
+        inUse: boolean;
+        firstSeen: string | null;
+        lastSeen: string | null;
+        name: string;
+        purpose: string;
+        region?: string;
+    }[];
+    generatedFrom: number;
+};
+/** One export for a supervisor: nodes, edges, verdict and a hash over all of it. */
+export declare function regulatorExport(transfers: Transfer[], declared: string[], controller: string): {
+    hash: string;
+    v: number;
+    type: string;
+    controller: string;
+    declared: string[];
+    graph: import("./index.js").SubprocessorGraph;
+    verdict: import("./index.js").TransferCheck;
+    transfers: string[];
+};
+//# sourceMappingURL=dpa.d.ts.map

package/dist/dpa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dpa.d.ts","sourceRoot":"","sources":["../src/dpa.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAA2C,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAqD,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAM9F,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE;;;EAEhL;AAED,MAAM,MAAM,SAAS,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAErK,4EAA4E;AAC5E,wBAAgB,OAAO,CAAC,KAAK,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,EAAE,UAAU,EAAE,UAAU,GAAG,SAAS,CAEpK;AAED,8FAA8F;AAC9F,wBAAgB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,CAExH;AAED,6DAA6D;AAC7D,eAAO,MAAM,aAAa,yMAA0M,CAAC;AAErO,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,QAAQ,GAAE,SAAS,MAAM,EAAkB;;;EAGjG;AAMD,MAAM,MAAM,YAAY,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,4BAA4B,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC7K,MAAM,MAAM,SAAS,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE3H,kGAAkG;AAClG,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,mBAAmB,EAAE,UAAU,GAAG,YAAY,CAG/K;AAED,mDAAmD;AACnD,wBAAgB,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,SAA2B,GAAG,SAAS,CAEvI;AAED,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,GAAG,SAA2B;;eACjB,MAAM,EAAE;;;;;;;EAKhG;AAMD,MAAM,MAAM,uBAAuB,GAAG,YAAY,CAAC;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,0BAA0B,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEpI,sEAAsE;AACtE,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,SAA2B,GAAG,uBAAuB,CAEpJ;AAED,mIAAmI;AACnI,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,uBAAuB,EAAE,EAAE,QAAQ,SAAI;;;;;cAIlE,MAAM;YAAM,MAAM;;;EAY9C;AAED,eAAO,MAAM,sBAAsB,yHAA0H,CAAC;AAE9J;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,GAAG,KAAK,GAAG,UAAU,GAAG,YAAY,CAAC;IAAC,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE;;;iBAAzJ,MAAM;eAAa,KAAK,GAAG,KAAK,GAAG,UAAU,GAAG,YAAY;gBAAc,KAAK,GAAG,QAAQ,GAAG,MAAM;cAAY,MAAM,EAAE;gBAAc,MAAM;QAAM,MAAM;;;EAKrN;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,GAAG,2BAA2B,CAAC;AAE3G,yGAAyG;AACzG,wBAAgB,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC;;;;;;;;EAGjF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM;;;EAkBxE;AAMD,4HAA4H;AAC5H,wBAAgB,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;;;;;cAA3C,MAAM;iBAAW,MAAM;iBAAW,MAAM;;;EAUtH;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM;;;;;;;;;EAK5F"}

package/dist/dpa.js

@@ -0,0 +1,147 @@
+/**
+ * The onward-transfer chain in contracts and operations: model-provider calls as
+ * transfers, signed DPAs and change notices (Art. 28(2)), fourth-party declarations,
+ * transfer impact assessments, AI Act roles, breach propagation, Art. 28(3) clause checks,
+ * a trust-center feed and a regulator export. All read the same `Transfer` records.
+ */
+import { jcsHash, signObject, verifySignedObject } from '@zanii/core';
+import { buildTransfer, subprocessorGraph, verifyTransfers } from './index.js';
+// ------------------------------------------------------------------------------ //
+// Transfers and agreements
+// ------------------------------------------------------------------------------ //
+/** Record a call to a model provider as a transfer, flagging zero data retention. */
+export function modelProviderTransfer(input) {
+    return buildTransfer({ from: input.from, to: input.provider, agreement: input.zeroRetention ? { type: 'zero-retention', id: input.dpaId } : { type: 'dpa', id: input.dpaId }, ts: input.ts, junction: `model:${input.model}`, ...(input.region ? { region: input.region } : {}), ...(input.ref ? { ref: input.ref } : {}) });
+}
+/** A DPA version, signed by the controller, naming the document by hash. */
+export function signDpa(input, privateKey) {
+    return signObject({ v: 1, type: 'subprocessor.dpa', processor: input.processor, version: input.version, effective: input.effective, clauses: input.clauses, document: input.documentHash }, privateKey);
+}
+/** The DPA in force for a processor at a time: the latest valid version effective by then. */
+export function dpaInForce(dpas, processor, at, trustedSigners) {
+    return dpas.filter((d) => d.processor === processor && d.effective <= at && verifySignedObject(d) && (!trustedSigners || trustedSigners.includes(d.signer))).sort((a, b) => a.effective.localeCompare(b.effective)).at(-1) ?? null;
+}
+/** Art. 28(3) GDPR: what a processor contract must cover. */
+export const ART28_CLAUSES = ['documented-instructions', 'confidentiality', 'security-art32', 'subprocessor-conditions', 'data-subject-assistance', 'controller-assistance-art32-36', 'deletion-or-return', 'audit-rights'];
+export function contractualMinimums(clauses, required = ART28_CLAUSES) {
+    const missing = required.filter((c) => !clauses.includes(c));
+    return { ok: missing.length === 0, missing };
+}
+/** The processor gives prior notice of a new subprocessor; it takes effect after `noticeDays`. */
+export function changeNotice(input, processorPrivateKey) {
+    const ts = input.ts ?? new Date().toISOString();
+    return signObject({ v: 1, type: 'subprocessor.change_notice', subprocessor: input.subprocessor, purpose: input.purpose, ...(input.region ? { region: input.region } : {}), effective: new Date(Date.parse(ts) + (input.noticeDays ?? 30) * 86_400_000).toISOString(), ts }, processorPrivateKey);
+}
+/** A customer objects within the notice period. */
+export function objectTo(notice, reason, customerPrivateKey, ts = new Date().toISOString()) {
+    return signObject({ v: 1, type: 'subprocessor.objection', notice: jcsHash(notice), reason, ts }, customerPrivateKey);
+}
+/** Where a change stands: in its notice period, objected to in time, or effective. */
+export function changeStatus(notice, objections, now = new Date().toISOString()) {
+    if (!verifySignedObject(notice))
+        return { status: 'invalid', objectors: [] };
+    const timely = objections.filter((o) => o.notice === jcsHash(notice) && o.ts < notice.effective && verifySignedObject(o));
+    const objectors = [...new Set(timely.map((o) => o.signer))];
+    if (objectors.length)
+        return { status: 'objected', objectors };
+    return { status: now < notice.effective ? 'notice-period' : 'effective', objectors };
+}
+/** A provider declares its own subprocessors, signed with its DID. */
+export function declareSubprocessors(subprocessors, providerPrivateKey, ts = new Date().toISOString()) {
+    return signObject({ v: 1, type: 'subprocessor.declaration', subprocessors: [...subprocessors].sort(), ts }, providerPrivateKey);
+}
+/** The supply chain from a root through signed declarations, with each party's depth. Parties without a declaration are leaves. */
+export function supplyChain(root, declarations, maxDepth = 6) {
+    const latest = new Map();
+    for (const d of declarations.filter(verifySignedObject))
+        if (!latest.has(d.signer) || latest.get(d.signer).ts < d.ts)
+            latest.set(d.signer, d);
+    const depth = new Map([[root, 0]]);
+    const edges = [];
+    const queue = [root];
+    while (queue.length) {
+        const p = queue.shift();
+        const d = depth.get(p);
+        if (d >= maxDepth)
+            continue;
+        for (const s of latest.get(p)?.subprocessors ?? []) {
+            edges.push({ from: p, to: s });
+            if (!depth.has(s)) {
+                depth.set(s, d + 1);
+                queue.push(s);
+            }
+        }
+    }
+    return { parties: Object.fromEntries(depth), edges, undeclaredBelow: [...depth.keys()].filter((p) => p !== root && !latest.has(p)) };
+}
+export const SUPPLEMENTARY_MEASURES = ['exporter-held-keys', 'pseudonymisation', 'split-processing', 'transparency-reporting', 'challenge-requests'];
+/**
+ * A recorded transfer impact assessment (after Schrems II). Where public-authority access risk
+ * is high, a technical measure that keeps data unintelligible to the importer is needed to
+ * proceed. A structured record of the assessment, not legal advice.
+ */
+export function transferImpactAssessment(input) {
+    const technical = input.measures.some((m) => m === 'exporter-held-keys' || m === 'pseudonymisation' || m === 'split-processing');
+    const outcome = input.mechanism === 'adequacy' || input.accessRisk === 'low' ? 'proceed' : input.accessRisk === 'medium' ? (input.measures.length ? 'proceed-with-measures' : 'review') : technical ? 'proceed-with-measures' : 'suspend';
+    const record = { v: 1, type: 'subprocessor.tia', ...input, outcome };
+    return { ...record, hash: jcsHash(record) };
+}
+/** Annotate each transfer edge with the parties' AI Act roles; edges with an unknown role are listed. */
+export function aiActRoles(transfers, roles) {
+    const edges = transfers.map((t) => ({ from: t.from, to: t.to, fromRole: roles[t.from] ?? null, toRole: roles[t.to] ?? null }));
+    return { edges, unknown: [...new Set(edges.flatMap((e) => [...(e.fromRole ? [] : [e.from]), ...(e.toRole ? [] : [e.to])]))].sort() };
+}
+/**
+ * After a breach at one party: which data objects had reached it, and through which senders.
+ * Traced per object (`ref`), so another object that merely shared an intermediary is not
+ * implicated; transfers without a ref are traced together as one group.
+ */
+export function breachPropagation(transfers, breached) {
+    const groups = new Map();
+    for (const t of transfers)
+        groups.set(t.ref ?? '', [...(groups.get(t.ref ?? '') ?? []), t]);
+    const upstream = new Set();
+    const objects = new Set();
+    for (const [ref, ts] of groups) {
+        const reached = new Set([breached]);
+        let grew = true;
+        while (grew) {
+            grew = false;
+            for (const t of ts)
+                if (reached.has(t.to) && !reached.has(t.from)) {
+                    reached.add(t.from);
+                    grew = true;
+                }
+        }
+        reached.delete(breached);
+        if (reached.size === 0)
+            continue;
+        reached.forEach((p) => upstream.add(p));
+        if (ref)
+            objects.add(ref);
+    }
+    return { upstream: [...upstream].sort(), objects: [...objects].sort() };
+}
+// ------------------------------------------------------------------------------ //
+// Publishing
+// ------------------------------------------------------------------------------ //
+/** A public subprocessor list from recorded transfers: first and last seen per declared party, plus declared-but-unused. */
+export function trustCenterFeed(transfers, declared) {
+    const seen = new Map();
+    for (const t of transfers) {
+        const s = seen.get(t.to);
+        seen.set(t.to, s ? { first: s.first < t.ts ? s.first : t.ts, last: s.last > t.ts ? s.last : t.ts, count: s.count + 1 } : { first: t.ts, last: t.ts, count: 1 });
+    }
+    return {
+        subprocessors: declared.map((d) => ({ ...d, inUse: seen.has(d.name), firstSeen: seen.get(d.name)?.first ?? null, lastSeen: seen.get(d.name)?.last ?? null })),
+        generatedFrom: transfers.length,
+    };
+}
+/** One export for a supervisor: nodes, edges, verdict and a hash over all of it. */
+export function regulatorExport(transfers, declared, controller) {
+    const graph = subprocessorGraph(transfers, declared, { controller });
+    const verdict = verifyTransfers(transfers, declared, { controller });
+    const body = { v: 1, type: 'subprocessor.regulator_export', controller, declared: [...declared].sort(), graph, verdict, transfers: transfers.map((t) => jcsHash(t)) };
+    return { ...body, hash: jcsHash(body) };
+}
+//# sourceMappingURL=dpa.js.map

package/dist/dpa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dpa.js","sourceRoot":"","sources":["../src/dpa.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAqB,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,eAAe,EAAiB,MAAM,YAAY,CAAC;AAE9F,oFAAoF;AACpF,2BAA2B;AAC3B,oFAAoF;AAEpF,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,KAA2I;IAC/K,OAAO,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,KAAK,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/T,CAAC;AAID,4EAA4E;AAC5E,MAAM,UAAU,OAAO,CAAC,KAAyG,EAAE,UAAsB;IACvJ,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,kBAA2B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,EAAE,UAAU,CAAC,CAAC;AAC5N,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,UAAU,CAAC,IAAiB,EAAE,SAAiB,EAAE,EAAU,EAAE,cAAyB;IACpG,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACrO,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,yBAAyB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,oBAAoB,EAAE,cAAc,CAAU,CAAC;AAErO,MAAM,UAAU,mBAAmB,CAAC,OAAiB,EAAE,WAA8B,aAAa;IAChG,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AASD,kGAAkG;AAClG,MAAM,UAAU,YAAY,CAAC,KAAmG,EAAE,mBAA+B;IAC/J,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,4BAAqC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;AACrT,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,QAAQ,CAAC,MAAoB,EAAE,MAAc,EAAE,kBAA8B,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IAC1H,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,wBAAiC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACzI,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,UAAuB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACxG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,SAAS,EAAE,EAAc,EAAE,CAAC;IAClG,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5D,IAAI,SAAS,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,UAAmB,EAAE,SAAS,EAAE,CAAC;IACxE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,eAAyB,CAAC,CAAC,CAAE,WAAqB,EAAE,SAAS,EAAE,CAAC;AAC7G,CAAC;AAQD,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAAC,aAAuB,EAAE,kBAA8B,EAAE,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACzH,OAAO,UAAU,CAAC,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,0BAAmC,EAAE,aAAa,EAAE,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;AACpJ,CAAC;AAED,mIAAmI;AACnI,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,YAAuC,EAAE,QAAQ,GAAG,CAAC;IAC7F,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC1D,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,kBAAkB,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/I,MAAM,KAAK,GAAG,IAAI,GAAG,CAAiB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,KAAK,GAAwC,EAAE,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,EAAG,CAAC;QACzB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC;QACxB,IAAI,CAAC,IAAI,QAAQ;YAAE,SAAS;QAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,EAAE,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvI,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,oBAAoB,CAAU,CAAC;AAE9J;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAA+K;IACtN,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,oBAAoB,IAAI,CAAC,KAAK,kBAAkB,IAAI,CAAC,KAAK,kBAAkB,CAAC,CAAC;IACjI,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1O,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC;IACrE,OAAO,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AAC9C,CAAC;AAID,yGAAyG;AACzG,MAAM,UAAU,UAAU,CAAC,SAAqB,EAAE,KAAgC;IAChF,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/H,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACvI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAqB,EAAE,QAAgB;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpC,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,GAAG,KAAK,CAAC;YACb,KAAK,MAAM,CAAC,IAAI,EAAE;gBAAE,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAAC,IAAI,GAAG,IAAI,CAAC;gBAAC,CAAC;QAC1G,CAAC;QACD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,SAAS;QACjC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AAC1E,CAAC;AAED,oFAAoF;AACpF,aAAa;AACb,oFAAoF;AAEpF,4HAA4H;AAC5H,MAAM,UAAU,eAAe,CAAC,SAAqB,EAAE,QAAmE;IACxH,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0D,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAClK,CAAC;IACD,OAAO;QACL,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7J,aAAa,EAAE,SAAS,CAAC,MAAM;KAChC,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,SAAqB,EAAE,QAAkB,EAAE,UAAkB;IAC3F,MAAM,KAAK,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAU,CAAC,CAAC,EAAE,CAAC;IAC/K,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1C,CAAC"}

package/dist/index.d.ts

@@ -84,4 +84,5 @@ export interface TransferCheck {
 export declare function verifyTransfers(transfers: Transfer[], declared: string[], opts?: {
     controller?: string;
 }): TransferCheck;
+export * from './dpa.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,SAAS;IACxB,0EAA0E;IAC1E,IAAI,EAAE,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;IACjD,0CAA0C;IAC1C,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,uBAAuB,CAAC;IAC9B,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,SAAS,CAAC;IACrB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,SAAS,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAQD,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAiBxG;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAEhD;AAED,MAAM,WAAW,iBAAiB;IAChC,wDAAwD;IACxD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yBAAyB;IACzB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,SAAS,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,wEAAwE;IACxE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sEAAsE;IACtE,oBAAoB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,6FAA6F;IAC7F,SAAS,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAWD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,iBAAiB,CA6B9H;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,aAAa,CAOxH"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,SAAS;IACxB,0EAA0E;IAC1E,IAAI,EAAE,gBAAgB,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;IACjD,0CAA0C;IAC1C,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,QAAQ;IACvB,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,uBAAuB,CAAC;IAC9B,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,SAAS,CAAC;IACrB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,SAAS,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAQD,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAiBxG;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAEhD;AAED,MAAM,WAAW,iBAAiB;IAChC,wDAAwD;IACxD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,yBAAyB;IACzB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,SAAS,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7E,wEAAwE;IACxE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,sEAAsE;IACtE,oBAAoB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,6FAA6F;IAC7F,SAAS,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAWD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,iBAAiB,CA6B9H;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,aAAa,CAOxH;AACD,cAAc,UAAU,CAAC"}

package/dist/index.js

@@ -124,4 +124,5 @@ export function verifyTransfers(transfers, declared, opts) {
         reasons.push(`transfer to '${m.to}' at ${m.ts} has no agreement id (dpa/scc requires one)`);
     return { ok: reasons.length === 0, reasons };
 }
+export * from './dpa.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAoCtC,MAAM,UAAU,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAE7D,6FAA6F;AAC7F,MAAM,OAAO,GAAG,CAAC,EAAW,EAAW,EAAE,CACvC,OAAO,EAAE,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAE5F,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,KAAoB;IAChD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC3F,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/F,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvE,MAAM,CAAC,GAAa;QAClB,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC;IACF,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACxD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC9D,OAAO,EAAE,MAAM,EAAE,yBAAyB,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAuC,EAAE,CAAC;AACvH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAW;IACtC,OAAO,OAAO,CAAC,CAAuC,CAAC,CAAC;AAC1D,CAAC;AAeD,MAAM,eAAe,GAAG,CAAC,CAAuB,EAAiB,EAAE;IACjE,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,uBAAuB,CAAC;IAChE,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,cAAc,CAAC;IACjE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,YAAY,CAAC;IAC3D,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC;IACtE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,OAAO,oBAAoB,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAqB,EAAE,QAAkB,EAAE,IAA8B;IACzG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,OAAO,GAA8C,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClF,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;QAC5B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;QAClC,oBAAoB,EAAE,OAAO;QAC7B,SAAS;KACV,CAAC;AACJ,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,SAAqB,EAAE,QAAkB,EAAE,IAA8B;IACvG,MAAM,CAAC,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,yCAAyC,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB;QAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;IACpI,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAoCtC,MAAM,UAAU,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAE7D,6FAA6F;AAC7F,MAAM,OAAO,GAAG,CAAC,EAAW,EAAW,EAAE,CACvC,OAAO,EAAE,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAE5F,mGAAmG;AACnG,MAAM,UAAU,aAAa,CAAC,KAAoB;IAChD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC3F,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC/F,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvE,MAAM,CAAC,GAAa;QAClB,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,uBAAuB;QAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,EAAE,EAAE,KAAK,CAAC,EAAE;KACb,CAAC;IACF,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS;QAAE,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,CAAC,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACxD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC9D,OAAO,EAAE,MAAM,EAAE,yBAAyB,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAuC,EAAE,CAAC;AACvH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAW;IACtC,OAAO,OAAO,CAAC,CAAuC,CAAC,CAAC;AAC1D,CAAC;AAeD,MAAM,eAAe,GAAG,CAAC,CAAuB,EAAiB,EAAE;IACjE,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,uBAAuB,CAAC;IAChE,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO,cAAc,CAAC;IACjE,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,YAAY,CAAC;IAC3D,IAAI,OAAO,CAAC,CAAC,SAAS,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC;IACtE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,OAAO,oBAAoB,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAqB,EAAE,QAAkB,EAAE,IAA8B;IACzG,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAA+B,EAAE,CAAC;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,OAAO,GAA8C,EAAE,CAAC;IAC9D,MAAM,SAAS,GAAmC,EAAE,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACnC,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClF,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE;QAC5B,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE;QAClC,oBAAoB,EAAE,OAAO;QAC7B,SAAS;KACV,CAAC;AACJ,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,SAAqB,EAAE,QAAkB,EAAE,IAA8B;IACvG,MAAM,CAAC,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACvD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,yCAAyC,CAAC,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB;QAAE,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;IACpI,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;AAC/C,CAAC;AACD,cAAc,UAAU,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zanii/subprocessor",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Prove the onward-transfer chain - which downstream processors actually saw the data, under which agreement (zero-retention, DPA id), tied to the junction/settlement. Answers the exact GDPR Art. 28 question every AI DPA raises: 'you sent my data to OpenAI, who sent it where?' A transfer to a party not in the declared subprocessor list is a provable, flagged violation. Proves recorded transfers; an off-record leak needs an attested enclave.",
   "license": "Apache-2.0",
   "homepage": "https://ledger.zanii.agency",
@@ -31,7 +31,7 @@
     "vitest": "^3.0.9"
   },
   "dependencies": {
-    "@zanii/core": "^0.5.2"
+    "@zanii/core": "^0.5.4"
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json",

package/src/dpa.ts

@@ -0,0 +1,166 @@
+/**
+ * The onward-transfer chain in contracts and operations: model-provider calls as
+ * transfers, signed DPAs and change notices (Art. 28(2)), fourth-party declarations,
+ * transfer impact assessments, AI Act roles, breach propagation, Art. 28(3) clause checks,
+ * a trust-center feed and a regulator export. All read the same `Transfer` records.
+ */
+import { jcsHash, signObject, verifySignedObject, type SignedObject } from '@zanii/core';
+import { buildTransfer, subprocessorGraph, verifyTransfers, type Transfer } from './index.js';
+
+// ------------------------------------------------------------------------------ //
+// Transfers and agreements
+// ------------------------------------------------------------------------------ //
+
+/** Record a call to a model provider as a transfer, flagging zero data retention. */
+export function modelProviderTransfer(input: { from: string; provider: string; model: string; zeroRetention: boolean; dpaId?: string; region?: string; ref?: string; ts: string }) {
+  return buildTransfer({ from: input.from, to: input.provider, agreement: input.zeroRetention ? { type: 'zero-retention', id: input.dpaId } : { type: 'dpa', id: input.dpaId }, ts: input.ts, junction: `model:${input.model}`, ...(input.region ? { region: input.region } : {}), ...(input.ref ? { ref: input.ref } : {}) });
+}
+
+export type SignedDpa = SignedObject<{ v: 1; type: 'subprocessor.dpa'; processor: string; version: string; effective: string; clauses: string[]; document: string }>;
+
+/** A DPA version, signed by the controller, naming the document by hash. */
+export function signDpa(input: { processor: string; version: string; effective: string; clauses: string[]; documentHash: string }, privateKey: Uint8Array): SignedDpa {
+  return signObject({ v: 1 as const, type: 'subprocessor.dpa' as const, processor: input.processor, version: input.version, effective: input.effective, clauses: input.clauses, document: input.documentHash }, privateKey);
+}
+
+/** The DPA in force for a processor at a time: the latest valid version effective by then. */
+export function dpaInForce(dpas: SignedDpa[], processor: string, at: string, trustedSigners?: string[]): SignedDpa | null {
+  return dpas.filter((d) => d.processor === processor && d.effective <= at && verifySignedObject(d) && (!trustedSigners || trustedSigners.includes(d.signer))).sort((a, b) => a.effective.localeCompare(b.effective)).at(-1) ?? null;
+}
+
+/** Art. 28(3) GDPR: what a processor contract must cover. */
+export const ART28_CLAUSES = ['documented-instructions', 'confidentiality', 'security-art32', 'subprocessor-conditions', 'data-subject-assistance', 'controller-assistance-art32-36', 'deletion-or-return', 'audit-rights'] as const;
+
+export function contractualMinimums(clauses: string[], required: readonly string[] = ART28_CLAUSES) {
+  const missing = required.filter((c) => !clauses.includes(c));
+  return { ok: missing.length === 0, missing };
+}
+
+// ------------------------------------------------------------------------------ //
+// Change notices and objections (Art. 28(2))
+// ------------------------------------------------------------------------------ //
+
+export type ChangeNotice = SignedObject<{ v: 1; type: 'subprocessor.change_notice'; subprocessor: string; purpose: string; region?: string; effective: string; ts: string }>;
+export type Objection = SignedObject<{ v: 1; type: 'subprocessor.objection'; notice: string; reason: string; ts: string }>;
+
+/** The processor gives prior notice of a new subprocessor; it takes effect after `noticeDays`. */
+export function changeNotice(input: { subprocessor: string; purpose: string; region?: string; noticeDays?: number; ts?: string }, processorPrivateKey: Uint8Array): ChangeNotice {
+  const ts = input.ts ?? new Date().toISOString();
+  return signObject({ v: 1 as const, type: 'subprocessor.change_notice' as const, subprocessor: input.subprocessor, purpose: input.purpose, ...(input.region ? { region: input.region } : {}), effective: new Date(Date.parse(ts) + (input.noticeDays ?? 30) * 86_400_000).toISOString(), ts }, processorPrivateKey);
+}
+
+/** A customer objects within the notice period. */
+export function objectTo(notice: ChangeNotice, reason: string, customerPrivateKey: Uint8Array, ts = new Date().toISOString()): Objection {
+  return signObject({ v: 1 as const, type: 'subprocessor.objection' as const, notice: jcsHash(notice), reason, ts }, customerPrivateKey);
+}
+
+/** Where a change stands: in its notice period, objected to in time, or effective. */
+export function changeStatus(notice: ChangeNotice, objections: Objection[], now = new Date().toISOString()) {
+  if (!verifySignedObject(notice)) return { status: 'invalid' as const, objectors: [] as string[] };
+  const timely = objections.filter((o) => o.notice === jcsHash(notice) && o.ts < notice.effective && verifySignedObject(o));
+  const objectors = [...new Set(timely.map((o) => o.signer))];
+  if (objectors.length) return { status: 'objected' as const, objectors };
+  return { status: now < notice.effective ? ('notice-period' as const) : ('effective' as const), objectors };
+}
+
+// ------------------------------------------------------------------------------ //
+// Fourth parties, assessments, roles
+// ------------------------------------------------------------------------------ //
+
+export type SubprocessorDeclaration = SignedObject<{ v: 1; type: 'subprocessor.declaration'; subprocessors: string[]; ts: string }>;
+
+/** A provider declares its own subprocessors, signed with its DID. */
+export function declareSubprocessors(subprocessors: string[], providerPrivateKey: Uint8Array, ts = new Date().toISOString()): SubprocessorDeclaration {
+  return signObject({ v: 1 as const, type: 'subprocessor.declaration' as const, subprocessors: [...subprocessors].sort(), ts }, providerPrivateKey);
+}
+
+/** The supply chain from a root through signed declarations, with each party's depth. Parties without a declaration are leaves. */
+export function supplyChain(root: string, declarations: SubprocessorDeclaration[], maxDepth = 6) {
+  const latest = new Map<string, SubprocessorDeclaration>();
+  for (const d of declarations.filter(verifySignedObject)) if (!latest.has(d.signer) || latest.get(d.signer)!.ts < d.ts) latest.set(d.signer, d);
+  const depth = new Map<string, number>([[root, 0]]);
+  const edges: Array<{ from: string; to: string }> = [];
+  const queue = [root];
+  while (queue.length) {
+    const p = queue.shift()!;
+    const d = depth.get(p)!;
+    if (d >= maxDepth) continue;
+    for (const s of latest.get(p)?.subprocessors ?? []) {
+      edges.push({ from: p, to: s });
+      if (!depth.has(s)) { depth.set(s, d + 1); queue.push(s); }
+    }
+  }
+  return { parties: Object.fromEntries(depth), edges, undeclaredBelow: [...depth.keys()].filter((p) => p !== root && !latest.has(p)) };
+}
+
+export const SUPPLEMENTARY_MEASURES = ['exporter-held-keys', 'pseudonymisation', 'split-processing', 'transparency-reporting', 'challenge-requests'] as const;
+
+/**
+ * A recorded transfer impact assessment (after Schrems II). Where public-authority access risk
+ * is high, a technical measure that keeps data unintelligible to the importer is needed to
+ * proceed. A structured record of the assessment, not legal advice.
+ */
+export function transferImpactAssessment(input: { destination: string; mechanism: 'scc' | 'bcr' | 'adequacy' | 'derogation'; accessRisk: 'low' | 'medium' | 'high'; measures: string[]; assessedBy: string; ts: string }) {
+  const technical = input.measures.some((m) => m === 'exporter-held-keys' || m === 'pseudonymisation' || m === 'split-processing');
+  const outcome = input.mechanism === 'adequacy' || input.accessRisk === 'low' ? 'proceed' : input.accessRisk === 'medium' ? (input.measures.length ? 'proceed-with-measures' : 'review') : technical ? 'proceed-with-measures' : 'suspend';
+  const record = { v: 1, type: 'subprocessor.tia', ...input, outcome };
+  return { ...record, hash: jcsHash(record) };
+}
+
+export type AiActRole = 'provider' | 'deployer' | 'importer' | 'distributor' | 'authorised-representative';
+
+/** Annotate each transfer edge with the parties' AI Act roles; edges with an unknown role are listed. */
+export function aiActRoles(transfers: Transfer[], roles: Record<string, AiActRole>) {
+  const edges = transfers.map((t) => ({ from: t.from, to: t.to, fromRole: roles[t.from] ?? null, toRole: roles[t.to] ?? null }));
+  return { edges, unknown: [...new Set(edges.flatMap((e) => [...(e.fromRole ? [] : [e.from]), ...(e.toRole ? [] : [e.to])]))].sort() };
+}
+
+/**
+ * After a breach at one party: which data objects had reached it, and through which senders.
+ * Traced per object (`ref`), so another object that merely shared an intermediary is not
+ * implicated; transfers without a ref are traced together as one group.
+ */
+export function breachPropagation(transfers: Transfer[], breached: string) {
+  const groups = new Map<string, Transfer[]>();
+  for (const t of transfers) groups.set(t.ref ?? '', [...(groups.get(t.ref ?? '') ?? []), t]);
+  const upstream = new Set<string>();
+  const objects = new Set<string>();
+  for (const [ref, ts] of groups) {
+    const reached = new Set([breached]);
+    let grew = true;
+    while (grew) {
+      grew = false;
+      for (const t of ts) if (reached.has(t.to) && !reached.has(t.from)) { reached.add(t.from); grew = true; }
+    }
+    reached.delete(breached);
+    if (reached.size === 0) continue;
+    reached.forEach((p) => upstream.add(p));
+    if (ref) objects.add(ref);
+  }
+  return { upstream: [...upstream].sort(), objects: [...objects].sort() };
+}
+
+// ------------------------------------------------------------------------------ //
+// Publishing
+// ------------------------------------------------------------------------------ //
+
+/** A public subprocessor list from recorded transfers: first and last seen per declared party, plus declared-but-unused. */
+export function trustCenterFeed(transfers: Transfer[], declared: Array<{ name: string; purpose: string; region?: string }>) {
+  const seen = new Map<string, { first: string; last: string; count: number }>();
+  for (const t of transfers) {
+    const s = seen.get(t.to);
+    seen.set(t.to, s ? { first: s.first < t.ts ? s.first : t.ts, last: s.last > t.ts ? s.last : t.ts, count: s.count + 1 } : { first: t.ts, last: t.ts, count: 1 });
+  }
+  return {
+    subprocessors: declared.map((d) => ({ ...d, inUse: seen.has(d.name), firstSeen: seen.get(d.name)?.first ?? null, lastSeen: seen.get(d.name)?.last ?? null })),
+    generatedFrom: transfers.length,
+  };
+}
+
+/** One export for a supervisor: nodes, edges, verdict and a hash over all of it. */
+export function regulatorExport(transfers: Transfer[], declared: string[], controller: string) {
+  const graph = subprocessorGraph(transfers, declared, { controller });
+  const verdict = verifyTransfers(transfers, declared, { controller });
+  const body = { v: 1, type: 'subprocessor.regulator_export', controller, declared: [...declared].sort(), graph, verdict, transfers: transfers.map((t) => jcsHash(t as never)) };
+  return { ...body, hash: jcsHash(body) };
+}

package/src/index.ts

@@ -167,3 +167,4 @@ export function verifyTransfers(transfers: Transfer[], declared: string[], opts?
   for (const m of g.missing_agreement_id) reasons.push(`transfer to '${m.to}' at ${m.ts} has no agreement id (dpa/scc requires one)`);
   return { ok: reasons.length === 0, reasons };
 }
+export * from './dpa.js';