@ziffer-io/verify 0.1.1 → 0.2.0

package/dist/cbor.d.ts

@@ -0,0 +1,87 @@
+/**
+ * AT-8a canonical CBOR (RFC 8949 §4.2) -- the ONE primitive this package did
+ * not already have, added for §8.6c and for nothing else.
+ *
+ * # Why a new module rather than a reused one
+ *
+ * `canon.ts` is the canonical JSON encoding, and it is the right preimage for
+ * every hash this verifier takes: the engine's `attestation_id` and AB-1 entry
+ * digest are `sha256:` over `acp_executor.canon` / `receipt.rs::canon`, both
+ * JSON, and this package reproduces those bytes. What CBOR is needed for is
+ * narrower and unavoidable: HM-3 says a human attester's assertion is canonical
+ * CBOR of `{authenticator_data, client_data_json, signature}`, and HM-1 says the
+ * credential's `public_key` is a COSE_Key, which is CBOR by RFC 9052. Those two
+ * byte strings arrive from the wire and must be DECODED; no JSON encoder can
+ * read them. So this is a decoder for two fixed shapes, not a general codec.
+ *
+ * The engine's twins are `crates/acp-crypto/src/cbor.rs` and
+ * `reference/src/acp_crypto.py`'s `_enc` / `_dec` / `decode_canonical`, and the
+ * rule this file takes from them verbatim is the last one:
+ *
+ * # Canonicity is proved by RE-ENCODING, not by a list of sub-rules
+ *
+ * {@link decodeCanonical} parses, re-encodes what it parsed, and refuses the
+ * input unless the two byte strings are identical. That single comparison
+ * carries every §4.2 requirement at once -- shortest-form arguments, definite
+ * lengths, map keys sorted by their ENCODED bytes, no duplicate keys -- and it
+ * cannot drift from the encoder the way a hand-written checklist of those rules
+ * can. The decoder still refuses the coarse violations itself (indefinite
+ * lengths, non-shortest arguments, reserved additional information) because a
+ * decoder that accepted them would have to invent a canonical form to compare
+ * against, and inventing one is normalising.
+ *
+ * Refused, never normalised (AT-8a): the AB-1 entry digest is taken over the
+ * bytes that arrived, so a second encoding of one assertion is a second digest
+ * for one human decision, and accepting both would put two receipt identities
+ * behind one approval -- the Z4 encoding split, reached through the assertion.
+ *
+ * # Floats and tags are absent on purpose
+ *
+ * Neither is encodable, so neither is decodable: a float has several
+ * representations of one value and no deterministic ordering story (WE-1), and
+ * a tag is a type this verifier has no shape for. They refuse as
+ * {@link CborError} rather than being skipped, because a decoder that silently
+ * ignores what it does not understand is a parser an attacker can steer.
+ */
+/** The input is not canonical CBOR, or is not CBOR at all. */
+export declare class CborError extends Error {
+    constructor(message: string);
+}
+/**
+ * What this decoder can produce. Deliberately NOT a general CBOR value type:
+ * a map key is an integer (COSE labels, RFC 9052 §7) or text (HM-3's three
+ * fields), and nothing here needs more.
+ */
+export type Cbor = boolean | null | bigint | Uint8Array | string | Cbor[] | CborMap;
+/**
+ * A CBOR map, kept as ordered entries rather than a JS object.
+ *
+ * An object would key everything by string and collapse the integer label `1`
+ * and the text key `"1"` into one entry -- two distinct CBOR values, and in
+ * COSE_Key the integer form is the only legal one. The order is the order the
+ * bytes carried, which the re-encode check has already proved canonical.
+ */
+export interface CborMap {
+    readonly entries: readonly (readonly [Cbor, Cbor])[];
+}
+/** Whether a decoded value is a map -- the narrowing the callers need. */
+export declare function cborIsMap(v: Cbor): v is CborMap;
+/** A map's keys, in the (canonical) order the bytes carried. */
+export declare function cborKeys(m: CborMap): Cbor[];
+/** The value at an integer label, or undefined. COSE_Key's accessor. */
+export declare function cborGetInt(m: CborMap, label: bigint): Cbor | undefined;
+/** The value at a text key, or undefined. The assertion map's accessor. */
+export declare function cborGetText(m: CborMap, key: string): Cbor | undefined;
+/** A decoded value as bytes, or null if it is not a byte string. */
+export declare function cborAsBytes(v: Cbor | undefined): Uint8Array | null;
+/** The canonical CBOR bytes of a value. Used by {@link decodeCanonical}'s proof. */
+export declare function cborEncode(value: Cbor): Uint8Array;
+/**
+ * AT-8a: parse AND prove canonicity. Any input that is not byte-identical to
+ * the canonical encoding of what it decodes to is REFUSED, never normalised.
+ *
+ * The engine's `decode_canonical` in one sentence, and the same sentence is the
+ * whole specification of this function.
+ */
+export declare function decodeCanonical(buf: Uint8Array): Cbor;
+//# sourceMappingURL=cbor.d.ts.map

package/dist/cbor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cbor.d.ts","sourceRoot":"","sources":["../src/cbor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,8DAA8D;AAC9D,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;AAEpF;;;;;;;GAOG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;CACtD;AAMD,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,OAAO,CAE/C;AAED,gEAAgE;AAChE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,EAAE,CAE3C;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAGtE;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAGrE;AAED,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,UAAU,GAAG,IAAI,CAElE;AAsHD,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,KAAK,EAAE,IAAI,GAAG,UAAU,CAIlD;AA0FD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAQrD"}

package/dist/cbor.js

@@ -0,0 +1,326 @@
+/**
+ * AT-8a canonical CBOR (RFC 8949 §4.2) -- the ONE primitive this package did
+ * not already have, added for §8.6c and for nothing else.
+ *
+ * # Why a new module rather than a reused one
+ *
+ * `canon.ts` is the canonical JSON encoding, and it is the right preimage for
+ * every hash this verifier takes: the engine's `attestation_id` and AB-1 entry
+ * digest are `sha256:` over `acp_executor.canon` / `receipt.rs::canon`, both
+ * JSON, and this package reproduces those bytes. What CBOR is needed for is
+ * narrower and unavoidable: HM-3 says a human attester's assertion is canonical
+ * CBOR of `{authenticator_data, client_data_json, signature}`, and HM-1 says the
+ * credential's `public_key` is a COSE_Key, which is CBOR by RFC 9052. Those two
+ * byte strings arrive from the wire and must be DECODED; no JSON encoder can
+ * read them. So this is a decoder for two fixed shapes, not a general codec.
+ *
+ * The engine's twins are `crates/acp-crypto/src/cbor.rs` and
+ * `reference/src/acp_crypto.py`'s `_enc` / `_dec` / `decode_canonical`, and the
+ * rule this file takes from them verbatim is the last one:
+ *
+ * # Canonicity is proved by RE-ENCODING, not by a list of sub-rules
+ *
+ * {@link decodeCanonical} parses, re-encodes what it parsed, and refuses the
+ * input unless the two byte strings are identical. That single comparison
+ * carries every §4.2 requirement at once -- shortest-form arguments, definite
+ * lengths, map keys sorted by their ENCODED bytes, no duplicate keys -- and it
+ * cannot drift from the encoder the way a hand-written checklist of those rules
+ * can. The decoder still refuses the coarse violations itself (indefinite
+ * lengths, non-shortest arguments, reserved additional information) because a
+ * decoder that accepted them would have to invent a canonical form to compare
+ * against, and inventing one is normalising.
+ *
+ * Refused, never normalised (AT-8a): the AB-1 entry digest is taken over the
+ * bytes that arrived, so a second encoding of one assertion is a second digest
+ * for one human decision, and accepting both would put two receipt identities
+ * behind one approval -- the Z4 encoding split, reached through the assertion.
+ *
+ * # Floats and tags are absent on purpose
+ *
+ * Neither is encodable, so neither is decodable: a float has several
+ * representations of one value and no deterministic ordering story (WE-1), and
+ * a tag is a type this verifier has no shape for. They refuse as
+ * {@link CborError} rather than being skipped, because a decoder that silently
+ * ignores what it does not understand is a parser an attacker can steer.
+ */
+/** The input is not canonical CBOR, or is not CBOR at all. */
+export class CborError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CborError';
+    }
+}
+function isCborMap(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v) && !(v instanceof Uint8Array);
+}
+/** Whether a decoded value is a map -- the narrowing the callers need. */
+export function cborIsMap(v) {
+    return isCborMap(v);
+}
+/** A map's keys, in the (canonical) order the bytes carried. */
+export function cborKeys(m) {
+    return m.entries.map(([k]) => k);
+}
+/** The value at an integer label, or undefined. COSE_Key's accessor. */
+export function cborGetInt(m, label) {
+    for (const [k, v] of m.entries)
+        if (typeof k === 'bigint' && k === label)
+            return v;
+    return undefined;
+}
+/** The value at a text key, or undefined. The assertion map's accessor. */
+export function cborGetText(m, key) {
+    for (const [k, v] of m.entries)
+        if (typeof k === 'string' && k === key)
+            return v;
+    return undefined;
+}
+/** A decoded value as bytes, or null if it is not a byte string. */
+export function cborAsBytes(v) {
+    return v instanceof Uint8Array ? v : null;
+}
+const MAJOR_UINT = 0;
+const MAJOR_NINT = 1;
+const MAJOR_BYTES = 2;
+const MAJOR_TEXT = 3;
+const MAJOR_ARRAY = 4;
+const MAJOR_MAP = 5;
+const MAJOR_SIMPLE = 7;
+/**
+ * RFC 8949 §4.2.1: the argument MUST use the shortest form that holds it.
+ *
+ * `bigint` throughout rather than `number`, because a CBOR argument is a full
+ * 64-bit unsigned integer and `number` loses digits past 2^53-1 -- the same
+ * defect `canon.ts` refuses on the JSON side, and here it would mean re-encoding
+ * a length to different bytes than arrived and calling the input non-canonical
+ * for the decoder's own reason.
+ */
+function encodeHead(major, value, out) {
+    const head = major << 5;
+    if (value < 24n) {
+        out.push(head | Number(value));
+        return;
+    }
+    let width;
+    if (value < 0x100n) {
+        out.push(head | 24);
+        width = 1;
+    }
+    else if (value < 0x10000n) {
+        out.push(head | 25);
+        width = 2;
+    }
+    else if (value < 0x100000000n) {
+        out.push(head | 26);
+        width = 4;
+    }
+    else if (value < 0x10000000000000000n) {
+        out.push(head | 27);
+        width = 8;
+    }
+    else {
+        throw new CborError('integer exceeds the 64-bit CBOR argument');
+    }
+    for (let i = width - 1; i >= 0; i -= 1) {
+        out.push(Number((value >> BigInt(i * 8)) & 0xffn));
+    }
+}
+function encodeInto(value, out) {
+    if (value === true) {
+        out.push(0xf5);
+        return;
+    }
+    if (value === false) {
+        out.push(0xf4);
+        return;
+    }
+    if (value === null) {
+        out.push(0xf6);
+        return;
+    }
+    if (typeof value === 'bigint') {
+        if (value >= 0n)
+            encodeHead(MAJOR_UINT, value, out);
+        else
+            encodeHead(MAJOR_NINT, -value - 1n, out);
+        return;
+    }
+    if (value instanceof Uint8Array) {
+        encodeHead(MAJOR_BYTES, BigInt(value.length), out);
+        for (const b of value)
+            out.push(b);
+        return;
+    }
+    if (typeof value === 'string') {
+        const bytes = new TextEncoder().encode(value);
+        encodeHead(MAJOR_TEXT, BigInt(bytes.length), out);
+        for (const b of bytes)
+            out.push(b);
+        return;
+    }
+    if (Array.isArray(value)) {
+        encodeHead(MAJOR_ARRAY, BigInt(value.length), out);
+        for (const item of value)
+            encodeInto(item, out);
+        return;
+    }
+    if (isCborMap(value)) {
+        // §4.2.1: keys sorted by their ENCODED bytes, bytewise lexicographic.
+        // Sorting by the decoded value would put the integer label -2 and the text
+        // key "x" in an order that depends on the comparison chosen rather than on
+        // the bytes, and the encoded order is the one the rule names.
+        const keyed = value.entries.map(([k, v]) => {
+            const kb = [];
+            encodeInto(k, kb);
+            return { kb, v };
+        });
+        keyed.sort((a, b) => compareBytes(a.kb, b.kb));
+        for (let i = 1; i < keyed.length; i += 1) {
+            const prev = keyed[i - 1];
+            const cur = keyed[i];
+            if (prev === undefined || cur === undefined)
+                continue; // unreachable; index in range
+            if (compareBytes(prev.kb, cur.kb) === 0)
+                throw new CborError('duplicate map key');
+        }
+        encodeHead(MAJOR_MAP, BigInt(keyed.length), out);
+        for (const { kb, v } of keyed) {
+            for (const b of kb)
+                out.push(b);
+            encodeInto(v, out);
+        }
+        return;
+    }
+    throw new CborError('value is not canonically encodable');
+}
+function compareBytes(a, b) {
+    const n = Math.min(a.length, b.length);
+    for (let i = 0; i < n; i += 1) {
+        const x = a[i];
+        const y = b[i];
+        if (x === undefined || y === undefined)
+            continue; // unreachable; index in range
+        if (x !== y)
+            return x - y;
+    }
+    return a.length - b.length;
+}
+/** The canonical CBOR bytes of a value. Used by {@link decodeCanonical}'s proof. */
+export function cborEncode(value) {
+    const out = [];
+    encodeInto(value, out);
+    return Uint8Array.from(out);
+}
+function decodeAt(buf, start) {
+    if (start >= buf.length)
+        throw new CborError('truncated');
+    const ib = buf[start];
+    if (ib === undefined)
+        throw new CborError('truncated'); // unreachable; bound checked
+    const major = ib >> 5;
+    const ai = ib & 0x1f;
+    let i = start + 1;
+    let value;
+    if (ai < 24) {
+        value = BigInt(ai);
+    }
+    else if (ai <= 27) {
+        const width = 1 << (ai - 24);
+        if (i + width > buf.length)
+            throw new CborError('truncated argument');
+        value = 0n;
+        for (let k = 0; k < width; k += 1) {
+            const b = buf[i + k];
+            if (b === undefined)
+                throw new CborError('truncated argument'); // unreachable
+            value = (value << 8n) | BigInt(b);
+        }
+        i += width;
+        // Shortest form (§4.2.1). Refused here as well as by the re-encode proof,
+        // because the value that re-encodes shorter would otherwise be decoded
+        // first and any shape check above would run on attacker-chosen bytes.
+        const floor = ai === 24 ? 24n : 1n << BigInt((width / 2) * 8);
+        if (value < floor)
+            throw new CborError('non-shortest argument');
+    }
+    else if (ai === 31) {
+        throw new CborError('indefinite length forbidden in canonical CBOR');
+    }
+    else {
+        throw new CborError(`reserved additional information ${ai}`);
+    }
+    switch (major) {
+        case MAJOR_UINT:
+            return { value, next: i };
+        case MAJOR_NINT:
+            return { value: -value - 1n, next: i };
+        case MAJOR_BYTES:
+        case MAJOR_TEXT: {
+            const len = Number(value);
+            if (!Number.isSafeInteger(len) || i + len > buf.length) {
+                throw new CborError('truncated string');
+            }
+            const slice = buf.subarray(i, i + len);
+            if (major === MAJOR_BYTES)
+                return { value: Uint8Array.from(slice), next: i + len };
+            // fatal: true -- invalid UTF-8 is a refusal, not a run of U+FFFD. A
+            // replacement character would make two distinct byte strings decode to
+            // one text value, which the re-encode proof would then report as
+            // non-canonical for the wrong reason.
+            return { value: new TextDecoder('utf-8', { fatal: true }).decode(slice), next: i + len };
+        }
+        case MAJOR_ARRAY: {
+            const n = Number(value);
+            if (!Number.isSafeInteger(n) || n > buf.length - i)
+                throw new CborError('truncated array');
+            const items = [];
+            for (let k = 0; k < n; k += 1) {
+                const d = decodeAt(buf, i);
+                items.push(d.value);
+                i = d.next;
+            }
+            return { value: items, next: i };
+        }
+        case MAJOR_MAP: {
+            const n = Number(value);
+            if (!Number.isSafeInteger(n) || n > buf.length - i)
+                throw new CborError('truncated map');
+            const entries = [];
+            for (let k = 0; k < n; k += 1) {
+                const key = decodeAt(buf, i);
+                const val = decodeAt(buf, key.next);
+                entries.push([key.value, val.value]);
+                i = val.next;
+            }
+            return { value: { entries }, next: i };
+        }
+        case MAJOR_SIMPLE:
+            if (value === 20n)
+                return { value: false, next: i };
+            if (value === 21n)
+                return { value: true, next: i };
+            if (value === 22n)
+                return { value: null, next: i };
+            throw new CborError('float or unsupported simple value');
+        default:
+            throw new CborError(`unsupported major type ${major}`);
+    }
+}
+/**
+ * AT-8a: parse AND prove canonicity. Any input that is not byte-identical to
+ * the canonical encoding of what it decodes to is REFUSED, never normalised.
+ *
+ * The engine's `decode_canonical` in one sentence, and the same sentence is the
+ * whole specification of this function.
+ */
+export function decodeCanonical(buf) {
+    const { value, next } = decodeAt(buf, 0);
+    if (next !== buf.length)
+        throw new CborError('trailing bytes');
+    const re = cborEncode(value);
+    if (re.length !== buf.length || !re.every((b, i) => b === buf[i])) {
+        throw new CborError('input is not the canonical encoding of its value');
+    }
+    return value;
+}
+//# sourceMappingURL=cbor.js.map

package/dist/cbor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cbor.js","sourceRoot":"","sources":["../src/cbor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,8DAA8D;AAC9D,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAqBD,SAAS,SAAS,CAAC,CAAO;IACxB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC;AAChG,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,CAAO;IAC/B,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,QAAQ,CAAC,CAAU;IACjC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,CAAU,EAAE,KAAa;IAClD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;QAAE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,GAAW;IACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;QAAE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,CAAC;IACjF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,CAAmB;IAC7C,OAAO,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa,EAAE,GAAa;IAC7D,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,IAAI,KAAa,CAAC;IAClB,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAW,EAAE,GAAa;IAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,IAAI,EAAE;YAAE,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;;YAC/C,UAAU,CAAC,UAAU,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;YACzC,MAAM,EAAE,GAAa,EAAE,CAAC;YACxB,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS,CAAC,8BAA8B;YACrF,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACpF,CAAC;QACD,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,KAAK,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,CAAoB,EAAE,CAAoB;IAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS,CAAC,8BAA8B;QAChF,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,KAAW;IACpC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAOD,SAAS,QAAQ,CAAC,GAAe,EAAE,KAAa;IAC9C,IAAI,KAAK,IAAI,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,6BAA6B;IACrF,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAClB,IAAI,KAAa,CAAC;IAClB,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;QACZ,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACtE,KAAK,GAAG,EAAE,CAAC;QACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc;YAC9E,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,CAAC,IAAI,KAAK,CAAC;QACX,0EAA0E;QAC1E,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,IAAI,KAAK,GAAG,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,UAAU;YACb,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5B,KAAK,UAAU;YACb,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzC,KAAK,WAAW,CAAC;QACjB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBACvD,MAAM,IAAI,SAAS,CAAC,kBAAkB,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,WAAW;gBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC;YACnF,oEAAoE;YACpE,uEAAuE;YACvE,iEAAiE;YACjE,sCAAsC;YACtC,OAAO,EAAE,KAAK,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC;QAC3F,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAW,EAAE,CAAC;YACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACb,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnC,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;YACzF,MAAM,OAAO,GAA8B,EAAE,CAAC;YAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;YACf,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,YAAY;YACf,IAAI,KAAK,KAAK,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,IAAI,KAAK,KAAK,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,KAAK,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC3D;YACE,MAAM,IAAI,SAAS,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAe;IAC7C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/clauses.d.ts

@@ -50,4 +50,74 @@ export declare const CLAUSE_WIRE_TYPE = "WE-4";
  * refusal carries the field's (ACP-88/ACP-89).
  */
 export declare const CLAUSE_RECEIPT_NONCE_SIZE = "L-17";
+/** Rust `quorum::CLAUSE_NO_ATTESTATIONS` -- INV-1-HIGH, a receipt commits to
+ * attestations and none arrived. */
+export declare const CLAUSE_NO_ATTESTATIONS = "INV-1-HIGH";
+/** Rust `quorum::CLAUSE_NO_OBJECT` -- AT-8, an entry carrying no Attestation
+ * Object (the pre-v1.3.3 form, where only the id travelled). */
+export declare const CLAUSE_NO_OBJECT = "AT-8";
+/** Rust `quorum::CLAUSE_OBJECT_SCHEMA` -- AT-8b, the object's field set is not
+ * exactly AT-1's. CLOSED: an unknown field is refused, a missing one never
+ * defaulted (Z4). */
+export declare const CLAUSE_OBJECT_SCHEMA = "AT-8b";
+/** Rust `quorum::CLAUSE_NONCE_SIZE` -- AT-1, `att_nonce` is well-formed but is
+ * not 128-bit. The ATTESTATION nonce's own size clause, never L-17 (which sizes
+ * the receipt's): one number, two clauses, and the refusal carries the field's. */
+export declare const CLAUSE_ATT_NONCE_SIZE = "AT-1";
+/** Rust `quorum::CLAUSE_ATTESTATION_SUITE` -- CR-4. An UNKNOWN suite refuses
+ * here under CR-4 and not CR-1, matching `Bundle.suite_ok`, which returns False
+ * for a name it does not know; the receipt path spells the same condition CR-1
+ * and the differential compares names, so the reference wins. */
+export declare const CLAUSE_ATTESTATION_SUITE = "CR-4";
+/** Rust `quorum::CLAUSE_ATTESTER_SIG` -- §9.3 step 7b(i). */
+export declare const CLAUSE_ATTESTER_SIG = "9.3-7b-i";
+/** Rust `quorum::CLAUSE_BINDING` -- §9.3 step 7b(ii), the object binds a
+ * DIFFERENT proposal. This is Y1: a genuine quorum raised for P1 attached to a
+ * receipt for P2. */
+export declare const CLAUSE_BINDING = "9.3-7b-ii";
+/** Rust `quorum::CLAUSE_POLICY_BASIS` -- §9.3 step 7b(iii), policy basis or
+ * object freshness. */
+export declare const CLAUSE_POLICY_BASIS = "9.3-7b-iii";
+/** Rust `quorum::CLAUSE_OPERATOR_DISAGREE` -- §9.3 step 7b(iii-a), the objects
+ * disagree on who the operator is (Y4). */
+export declare const CLAUSE_OPERATOR_DISAGREE = "9.3-7b-iii-a";
+/** Rust `quorum::CLAUSE_CONSENT` -- AT-9's SECOND requirement: an attester
+ * signed for a quorum other than the bundle's. A CONSENT check, not a threshold
+ * one; deleting it cannot lower a quorum. */
+export declare const CLAUSE_CONSENT = "AT-9";
+/** Rust `quorum::CLAUSE_DERIVED_ID` -- Y1b, a transmitted `attestation_id`
+ * differing from the derived one. */
+export declare const CLAUSE_DERIVED_ID = "Y1b";
+/** Rust `quorum::CLAUSE_MEMBERSHIP` -- AB-1, the entry digest binding: entry
+ * schema, digest-list type, or membership. */
+export declare const CLAUSE_MEMBERSHIP = "AB-1";
+/** Rust `quorum::CLAUSE_DIGEST_ORDER` -- AB-2, `attestation_digests` is not in
+ * the one canonical ordering. */
+export declare const CLAUSE_DIGEST_ORDER = "AB-2";
+/** Rust `quorum::CLAUSE_DIGEST_DUP` -- AB-3, a repeated digest. */
+export declare const CLAUSE_DIGEST_DUP = "AB-3";
+/** Rust `quorum::CLAUSE_CARDINALITY` -- AB-4, entry count and signed digest
+ * count disagree. Fewer is withholding, more is injection. */
+export declare const CLAUSE_CARDINALITY = "AB-4";
+/** Rust `quorum::CLAUSE_ASSURANCE` -- AT-10, an identity enrolled below the
+ * registry's assurance floor. */
+export declare const CLAUSE_ASSURANCE = "AT-10";
+/** Rust `quorum::CLAUSE_QUORUM` -- AT-3, fewer distinct approvals than the
+ * threshold recomputed from the bundle. */
+export declare const CLAUSE_QUORUM = "AT-3";
+/** Rust `quorum::CLAUSE_OPERATOR_SELF` -- AT-2, the operator counted toward
+ * their own quorum. */
+export declare const CLAUSE_OPERATOR_SELF = "AT-2";
+/** Rust `quorum::CLAUSE_WEBAUTHN_ALG` -- HM-3. The object's declared `alg` and
+ * the registry's disagree about what KIND of key this identity holds. Either
+ * side alone decides nothing; the DISAGREEMENT is the refusal, raised before a
+ * byte of the assertion is parsed. */
+export declare const CLAUSE_WEBAUTHN_ALG = "WebauthnAlgMismatch";
+/** Rust `quorum::CLAUSE_WEBAUTHN_COUNTER` -- HM-4 (f). A regression is a CLONED
+ * AUTHENTICATOR, not a retry. */
+export declare const CLAUSE_WEBAUTHN_COUNTER = "WebauthnCounter";
+/** Rust `quorum::CLAUSE_MALFORMED` -- the entry's `sig`, the assertion or the
+ * credential is not the shape §8.6c declares. Not a statement about a
+ * signature. */
+export declare const CLAUSE_MALFORMED = "Malformed";
 //# sourceMappingURL=clauses.d.ts.map

package/dist/clauses.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"clauses.d.ts","sourceRoot":"","sources":["../src/clauses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,eAAO,MAAM,cAAc,SAAS,CAAC;AACrC,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,oGAAoG;AACpG,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,4EAA4E;AAC5E,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAC/C,qGAAqG;AACrG,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,SAAS,CAAC"}
+{"version":3,"file":"clauses.d.ts","sourceRoot":"","sources":["../src/clauses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,eAAO,MAAM,cAAc,SAAS,CAAC;AACrC,8FAA8F;AAC9F,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC,gGAAgG;AAChG,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C,oGAAoG;AACpG,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,4EAA4E;AAC5E,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,UAAU,CAAC;AAC/C,qGAAqG;AACrG,eAAO,MAAM,eAAe,UAAU,CAAC;AACvC;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,SAAS,CAAC;AAC7C,6FAA6F;AAC7F,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,SAAS,CAAC;AAUhD;oCACoC;AACpC,eAAO,MAAM,sBAAsB,eAAe,CAAC;AACnD;gEACgE;AAChE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AACvC;;qBAEqB;AACrB,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAC5C;;mFAEmF;AACnF,eAAO,MAAM,qBAAqB,SAAS,CAAC;AAC5C;;;iEAGiE;AACjE,eAAO,MAAM,wBAAwB,SAAS,CAAC;AAC/C,6DAA6D;AAC7D,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAC9C;;qBAEqB;AACrB,eAAO,MAAM,cAAc,cAAc,CAAC;AAC1C;uBACuB;AACvB,eAAO,MAAM,mBAAmB,eAAe,CAAC;AAChD;2CAC2C;AAC3C,eAAO,MAAM,wBAAwB,iBAAiB,CAAC;AACvD;;6CAE6C;AAC7C,eAAO,MAAM,cAAc,SAAS,CAAC;AACrC;qCACqC;AACrC,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AACvC;8CAC8C;AAC9C,eAAO,MAAM,iBAAiB,SAAS,CAAC;AACxC;iCACiC;AACjC,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAC1C,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,SAAS,CAAC;AACxC;8DAC8D;AAC9D,eAAO,MAAM,kBAAkB,SAAS,CAAC;AACzC;iCACiC;AACjC,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC;2CAC2C;AAC3C,eAAO,MAAM,aAAa,SAAS,CAAC;AACpC;uBACuB;AACvB,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAC3C;;;sCAGsC;AACtC,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AACzD;iCACiC;AACjC,eAAO,MAAM,uBAAuB,oBAAoB,CAAC;AACzD;;gBAEgB;AAChB,eAAO,MAAM,gBAAgB,cAAc,CAAC"}

package/dist/clauses.js

@@ -50,4 +50,81 @@ export const CLAUSE_WIRE_TYPE = 'WE-4';
  * refusal carries the field's (ACP-88/ACP-89).
  */
 export const CLAUSE_RECEIPT_NONCE_SIZE = 'L-17';
+// ------------------------------------------------------------------ step 7b
+//
+// The AT-* quorum and §8.6b's AB-*, spelled as `crates/acp-decision/src/quorum.rs`
+// and `reference/src/acp_executor.py` spell them. Several are literals at the
+// refusal site in Rust and named here; the VALUE is the contract either way, and
+// the Rust constant name is kept beside each one so a reader diffing the two
+// files sees one table rather than two vocabularies.
+/** Rust `quorum::CLAUSE_NO_ATTESTATIONS` -- INV-1-HIGH, a receipt commits to
+ * attestations and none arrived. */
+export const CLAUSE_NO_ATTESTATIONS = 'INV-1-HIGH';
+/** Rust `quorum::CLAUSE_NO_OBJECT` -- AT-8, an entry carrying no Attestation
+ * Object (the pre-v1.3.3 form, where only the id travelled). */
+export const CLAUSE_NO_OBJECT = 'AT-8';
+/** Rust `quorum::CLAUSE_OBJECT_SCHEMA` -- AT-8b, the object's field set is not
+ * exactly AT-1's. CLOSED: an unknown field is refused, a missing one never
+ * defaulted (Z4). */
+export const CLAUSE_OBJECT_SCHEMA = 'AT-8b';
+/** Rust `quorum::CLAUSE_NONCE_SIZE` -- AT-1, `att_nonce` is well-formed but is
+ * not 128-bit. The ATTESTATION nonce's own size clause, never L-17 (which sizes
+ * the receipt's): one number, two clauses, and the refusal carries the field's. */
+export const CLAUSE_ATT_NONCE_SIZE = 'AT-1';
+/** Rust `quorum::CLAUSE_ATTESTATION_SUITE` -- CR-4. An UNKNOWN suite refuses
+ * here under CR-4 and not CR-1, matching `Bundle.suite_ok`, which returns False
+ * for a name it does not know; the receipt path spells the same condition CR-1
+ * and the differential compares names, so the reference wins. */
+export const CLAUSE_ATTESTATION_SUITE = 'CR-4';
+/** Rust `quorum::CLAUSE_ATTESTER_SIG` -- §9.3 step 7b(i). */
+export const CLAUSE_ATTESTER_SIG = '9.3-7b-i';
+/** Rust `quorum::CLAUSE_BINDING` -- §9.3 step 7b(ii), the object binds a
+ * DIFFERENT proposal. This is Y1: a genuine quorum raised for P1 attached to a
+ * receipt for P2. */
+export const CLAUSE_BINDING = '9.3-7b-ii';
+/** Rust `quorum::CLAUSE_POLICY_BASIS` -- §9.3 step 7b(iii), policy basis or
+ * object freshness. */
+export const CLAUSE_POLICY_BASIS = '9.3-7b-iii';
+/** Rust `quorum::CLAUSE_OPERATOR_DISAGREE` -- §9.3 step 7b(iii-a), the objects
+ * disagree on who the operator is (Y4). */
+export const CLAUSE_OPERATOR_DISAGREE = '9.3-7b-iii-a';
+/** Rust `quorum::CLAUSE_CONSENT` -- AT-9's SECOND requirement: an attester
+ * signed for a quorum other than the bundle's. A CONSENT check, not a threshold
+ * one; deleting it cannot lower a quorum. */
+export const CLAUSE_CONSENT = 'AT-9';
+/** Rust `quorum::CLAUSE_DERIVED_ID` -- Y1b, a transmitted `attestation_id`
+ * differing from the derived one. */
+export const CLAUSE_DERIVED_ID = 'Y1b';
+/** Rust `quorum::CLAUSE_MEMBERSHIP` -- AB-1, the entry digest binding: entry
+ * schema, digest-list type, or membership. */
+export const CLAUSE_MEMBERSHIP = 'AB-1';
+/** Rust `quorum::CLAUSE_DIGEST_ORDER` -- AB-2, `attestation_digests` is not in
+ * the one canonical ordering. */
+export const CLAUSE_DIGEST_ORDER = 'AB-2';
+/** Rust `quorum::CLAUSE_DIGEST_DUP` -- AB-3, a repeated digest. */
+export const CLAUSE_DIGEST_DUP = 'AB-3';
+/** Rust `quorum::CLAUSE_CARDINALITY` -- AB-4, entry count and signed digest
+ * count disagree. Fewer is withholding, more is injection. */
+export const CLAUSE_CARDINALITY = 'AB-4';
+/** Rust `quorum::CLAUSE_ASSURANCE` -- AT-10, an identity enrolled below the
+ * registry's assurance floor. */
+export const CLAUSE_ASSURANCE = 'AT-10';
+/** Rust `quorum::CLAUSE_QUORUM` -- AT-3, fewer distinct approvals than the
+ * threshold recomputed from the bundle. */
+export const CLAUSE_QUORUM = 'AT-3';
+/** Rust `quorum::CLAUSE_OPERATOR_SELF` -- AT-2, the operator counted toward
+ * their own quorum. */
+export const CLAUSE_OPERATOR_SELF = 'AT-2';
+/** Rust `quorum::CLAUSE_WEBAUTHN_ALG` -- HM-3. The object's declared `alg` and
+ * the registry's disagree about what KIND of key this identity holds. Either
+ * side alone decides nothing; the DISAGREEMENT is the refusal, raised before a
+ * byte of the assertion is parsed. */
+export const CLAUSE_WEBAUTHN_ALG = 'WebauthnAlgMismatch';
+/** Rust `quorum::CLAUSE_WEBAUTHN_COUNTER` -- HM-4 (f). A regression is a CLONED
+ * AUTHENTICATOR, not a retry. */
+export const CLAUSE_WEBAUTHN_COUNTER = 'WebauthnCounter';
+/** Rust `quorum::CLAUSE_MALFORMED` -- the entry's `sig`, the assertion or the
+ * credential is not the shape §8.6c declares. Not a statement about a
+ * signature. */
+export const CLAUSE_MALFORMED = 'Malformed';
 //# sourceMappingURL=clauses.js.map

package/dist/clauses.js.map

@@ -1 +1 @@
-{"version":3,"file":"clauses.js","sourceRoot":"","sources":["../src/clauses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,oGAAoG;AACpG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAC/C,qGAAqG;AACrG,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC"}
+{"version":3,"file":"clauses.js","sourceRoot":"","sources":["../src/clauses.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,gGAAgG;AAChG,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,oGAAoG;AACpG,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,4EAA4E;AAC5E,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAC/C,qGAAqG;AACrG,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,6EAA6E;AAC7E,EAAE;AACF,mFAAmF;AACnF,8EAA8E;AAC9E,iFAAiF;AACjF,6EAA6E;AAC7E,qDAAqD;AAErD;oCACoC;AACpC,MAAM,CAAC,MAAM,sBAAsB,GAAG,YAAY,CAAC;AACnD;gEACgE;AAChE,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC;;qBAEqB;AACrB,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAC5C;;mFAEmF;AACnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C;;;iEAGiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AAC/C,6DAA6D;AAC7D,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAC9C;;qBAEqB;AACrB,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAC1C;uBACuB;AACvB,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAChD;2CAC2C;AAC3C,MAAM,CAAC,MAAM,wBAAwB,GAAG,cAAc,CAAC;AACvD;;6CAE6C;AAC7C,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AACrC;qCACqC;AACrC,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AACvC;8CAC8C;AAC9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC;iCACiC;AACjC,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAC1C,mEAAmE;AACnE,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACxC;8DAC8D;AAC9D,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AACzC;iCACiC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC;2CAC2C;AAC3C,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AACpC;uBACuB;AACvB,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C;;;sCAGsC;AACtC,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD;iCACiC;AACjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AACzD;;gBAEgB;AAChB,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC"}

package/dist/index.d.ts

@@ -6,6 +6,11 @@
  * client adds no verification logic of its own -- one home per rule).
  */
 export { canon, compareCodePoints, type Json } from './canon.js';
+export { CborError, cborAsBytes, cborEncode, cborGetInt, cborGetText, cborIsMap, cborKeys, decodeCanonical, type Cbor, type CborMap, } from './cbor.js';
+export { CLAUSE_ASSURANCE, CLAUSE_ATTESTATION_SUITE, CLAUSE_ATTESTER_SIG, CLAUSE_ATT_NONCE_SIZE, CLAUSE_BINDING, CLAUSE_CARDINALITY, CLAUSE_CONSENT, CLAUSE_DERIVED_ID, CLAUSE_DIGEST_DUP, CLAUSE_DIGEST_ORDER, CLAUSE_MALFORMED, CLAUSE_MEMBERSHIP, CLAUSE_NO_ATTESTATIONS, CLAUSE_NO_OBJECT, CLAUSE_OBJECT_SCHEMA, CLAUSE_OPERATOR_DISAGREE, CLAUSE_OPERATOR_SELF, CLAUSE_POLICY_BASIS, CLAUSE_QUORUM, CLAUSE_WEBAUTHN_ALG, CLAUSE_WEBAUTHN_COUNTER, } from './clauses.js';
+export { AT1_FIELDS, attestationId, entryDigest, verifyQuorum, type AttesterCredential, type DecisionBasis, type HybridAttester, type QuorumOutcome, type QuorumPolicy, type WebauthnAttester, } from './quorum.js';
+export { ASSERTION_FIELDS, MALFORMED, REGISTRY_KEY_WEAK, WEBAUTHN_ALGS, WEBAUTHN_AUTHENTICATOR_DATA, WEBAUTHN_CHALLENGE, WEBAUTHN_ORIGIN, WEBAUTHN_PRIMITIVE, WEBAUTHN_SIGNATURE, WEBAUTHN_TYPE, WebauthnRefusal, coseKeyParse, decodeAssertion, verifyWebauthn, webauthnChallenge, type Assertion, type CredentialKey, } from './webauthn.js';
+export { b64Decode } from './wire.js';
 export { CLAUSE_BODY_SIZE, CLAUSE_CANONICAL, CLAUSE_DECISION, CLAUSE_PROPOSAL_BINDING, CLAUSE_RECEIPT_NONCE_SIZE, CLAUSE_SIGNATURE, CLAUSE_SUITE_FLOOR, CLAUSE_TEMPORAL, CLAUSE_UNKNOWN_SUITE, CLAUSE_VALIDITY_WINDOW, CLAUSE_VERSION, CLAUSE_WIRE_TYPE, } from './clauses.js';
 export { ED25519_PK_LEN, ED25519_SIG_LEN, ed25519IsSmallOrder, verifyEd25519Strict, } from './ed25519.js';
 export { parseInstant } from './instant.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EACL,UAAU,EACV,cAAc,EACd,eAAe,EACf,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,KAAK,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,cAAc,EACd,YAAY,EACZ,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,QAAQ,EACR,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,aAAa,GACnB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,SAAS,EACT,WAAW,EACX,UAAU,EACV,UAAU,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,eAAe,EACf,KAAK,IAAI,EACT,KAAK,OAAO,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,iBAAiB,EACjB,aAAa,EACb,2BAA2B,EAC3B,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EACL,UAAU,EACV,cAAc,EACd,eAAe,EACf,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,KAAK,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,cAAc,EACd,YAAY,EACZ,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,QAAQ,EACR,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,aAAa,GACnB,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -6,6 +6,11 @@
  * client adds no verification logic of its own -- one home per rule).
  */
 export { canon, compareCodePoints } from './canon.js';
+export { CborError, cborAsBytes, cborEncode, cborGetInt, cborGetText, cborIsMap, cborKeys, decodeCanonical, } from './cbor.js';
+export { CLAUSE_ASSURANCE, CLAUSE_ATTESTATION_SUITE, CLAUSE_ATTESTER_SIG, CLAUSE_ATT_NONCE_SIZE, CLAUSE_BINDING, CLAUSE_CARDINALITY, CLAUSE_CONSENT, CLAUSE_DERIVED_ID, CLAUSE_DIGEST_DUP, CLAUSE_DIGEST_ORDER, CLAUSE_MALFORMED, CLAUSE_MEMBERSHIP, CLAUSE_NO_ATTESTATIONS, CLAUSE_NO_OBJECT, CLAUSE_OBJECT_SCHEMA, CLAUSE_OPERATOR_DISAGREE, CLAUSE_OPERATOR_SELF, CLAUSE_POLICY_BASIS, CLAUSE_QUORUM, CLAUSE_WEBAUTHN_ALG, CLAUSE_WEBAUTHN_COUNTER, } from './clauses.js';
+export { AT1_FIELDS, attestationId, entryDigest, verifyQuorum, } from './quorum.js';
+export { ASSERTION_FIELDS, MALFORMED, REGISTRY_KEY_WEAK, WEBAUTHN_ALGS, WEBAUTHN_AUTHENTICATOR_DATA, WEBAUTHN_CHALLENGE, WEBAUTHN_ORIGIN, WEBAUTHN_PRIMITIVE, WEBAUTHN_SIGNATURE, WEBAUTHN_TYPE, WebauthnRefusal, coseKeyParse, decodeAssertion, verifyWebauthn, webauthnChallenge, } from './webauthn.js';
+export { b64Decode } from './wire.js';
 export { CLAUSE_BODY_SIZE, CLAUSE_CANONICAL, CLAUSE_DECISION, CLAUSE_PROPOSAL_BINDING, CLAUSE_RECEIPT_NONCE_SIZE, CLAUSE_SIGNATURE, CLAUSE_SUITE_FLOOR, CLAUSE_TEMPORAL, CLAUSE_UNKNOWN_SUITE, CLAUSE_VALIDITY_WINDOW, CLAUSE_VERSION, CLAUSE_WIRE_TYPE, } from './clauses.js';
 export { ED25519_PK_LEN, ED25519_SIG_LEN, ed25519IsSmallOrder, verifyEd25519Strict, } from './ed25519.js';
 export { parseInstant } from './instant.js';