@ziffer-io/verify 0.1.1 → 0.2.1

package/README.md

@@ -50,6 +50,14 @@ Every refusal is a thrown `Refusal` whose `clause` names the rule that fired; th
 clause, what it means and what to do is at https://ziffer.io/docs/refusals. Narrow with
 `instanceof Refusal`, record the clause, and do not retry it.
 
+## Checking an audit chain download
+
+The console's *Download the audit chain for this window* file checks here too:
+`verifyChain(fileBytes, parseAnchorKey(anchorKeyBytes))` recomputes every record's hash, checks
+each anchor's signature under the audit anchor key you hold (never the copy inside the file), and
+reports which records no anchor covers yet. A break throws `ChainRefusal`, whose `refusal` and
+`seq` name what broke and where. Integrating the SDK, section 6, has the whole of it.
+
 ## Documentation
 
 - Quickstart: https://ziffer.io/docs/quickstart

package/dist/cbor.d.ts

@@ -0,0 +1,87 @@
+/**
+ * AT-8a canonical CBOR (RFC 8949 §4.2) -- the ONE primitive this package did
+ * not already have, added for §8.6c and for nothing else.
+ *
+ * # Why a new module rather than a reused one
+ *
+ * `canon.ts` is the canonical JSON encoding, and it is the right preimage for
+ * every hash this verifier takes: the engine's `attestation_id` and AB-1 entry
+ * digest are `sha256:` over `acp_executor.canon` / `receipt.rs::canon`, both
+ * JSON, and this package reproduces those bytes. What CBOR is needed for is
+ * narrower and unavoidable: HM-3 says a human attester's assertion is canonical
+ * CBOR of `{authenticator_data, client_data_json, signature}`, and HM-1 says the
+ * credential's `public_key` is a COSE_Key, which is CBOR by RFC 9052. Those two
+ * byte strings arrive from the wire and must be DECODED; no JSON encoder can
+ * read them. So this is a decoder for two fixed shapes, not a general codec.
+ *
+ * The engine's twins are `crates/acp-crypto/src/cbor.rs` and
+ * `reference/src/acp_crypto.py`'s `_enc` / `_dec` / `decode_canonical`, and the
+ * rule this file takes from them verbatim is the last one:
+ *
+ * # Canonicity is proved by RE-ENCODING, not by a list of sub-rules
+ *
+ * {@link decodeCanonical} parses, re-encodes what it parsed, and refuses the
+ * input unless the two byte strings are identical. That single comparison
+ * carries every §4.2 requirement at once -- shortest-form arguments, definite
+ * lengths, map keys sorted by their ENCODED bytes, no duplicate keys -- and it
+ * cannot drift from the encoder the way a hand-written checklist of those rules
+ * can. The decoder still refuses the coarse violations itself (indefinite
+ * lengths, non-shortest arguments, reserved additional information) because a
+ * decoder that accepted them would have to invent a canonical form to compare
+ * against, and inventing one is normalising.
+ *
+ * Refused, never normalised (AT-8a): the AB-1 entry digest is taken over the
+ * bytes that arrived, so a second encoding of one assertion is a second digest
+ * for one human decision, and accepting both would put two receipt identities
+ * behind one approval -- the Z4 encoding split, reached through the assertion.
+ *
+ * # Floats and tags are absent on purpose
+ *
+ * Neither is encodable, so neither is decodable: a float has several
+ * representations of one value and no deterministic ordering story (WE-1), and
+ * a tag is a type this verifier has no shape for. They refuse as
+ * {@link CborError} rather than being skipped, because a decoder that silently
+ * ignores what it does not understand is a parser an attacker can steer.
+ */
+/** The input is not canonical CBOR, or is not CBOR at all. */
+export declare class CborError extends Error {
+    constructor(message: string);
+}
+/**
+ * What this decoder can produce. Deliberately NOT a general CBOR value type:
+ * a map key is an integer (COSE labels, RFC 9052 §7) or text (HM-3's three
+ * fields), and nothing here needs more.
+ */
+export type Cbor = boolean | null | bigint | Uint8Array | string | Cbor[] | CborMap;
+/**
+ * A CBOR map, kept as ordered entries rather than a JS object.
+ *
+ * An object would key everything by string and collapse the integer label `1`
+ * and the text key `"1"` into one entry -- two distinct CBOR values, and in
+ * COSE_Key the integer form is the only legal one. The order is the order the
+ * bytes carried, which the re-encode check has already proved canonical.
+ */
+export interface CborMap {
+    readonly entries: readonly (readonly [Cbor, Cbor])[];
+}
+/** Whether a decoded value is a map -- the narrowing the callers need. */
+export declare function cborIsMap(v: Cbor): v is CborMap;
+/** A map's keys, in the (canonical) order the bytes carried. */
+export declare function cborKeys(m: CborMap): Cbor[];
+/** The value at an integer label, or undefined. COSE_Key's accessor. */
+export declare function cborGetInt(m: CborMap, label: bigint): Cbor | undefined;
+/** The value at a text key, or undefined. The assertion map's accessor. */
+export declare function cborGetText(m: CborMap, key: string): Cbor | undefined;
+/** A decoded value as bytes, or null if it is not a byte string. */
+export declare function cborAsBytes(v: Cbor | undefined): Uint8Array | null;
+/** The canonical CBOR bytes of a value. Used by {@link decodeCanonical}'s proof. */
+export declare function cborEncode(value: Cbor): Uint8Array;
+/**
+ * AT-8a: parse AND prove canonicity. Any input that is not byte-identical to
+ * the canonical encoding of what it decodes to is REFUSED, never normalised.
+ *
+ * The engine's `decode_canonical` in one sentence, and the same sentence is the
+ * whole specification of this function.
+ */
+export declare function decodeCanonical(buf: Uint8Array): Cbor;
+//# sourceMappingURL=cbor.d.ts.map

package/dist/cbor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cbor.d.ts","sourceRoot":"","sources":["../src/cbor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,8DAA8D;AAC9D,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,IAAI,GAAG,MAAM,GAAG,UAAU,GAAG,MAAM,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;AAEpF;;;;;;;GAOG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;CACtD;AAMD,0EAA0E;AAC1E,wBAAgB,SAAS,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,OAAO,CAE/C;AAED,gEAAgE;AAChE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,EAAE,CAE3C;AAED,wEAAwE;AACxE,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAGtE;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAGrE;AAED,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,CAAC,EAAE,IAAI,GAAG,SAAS,GAAG,UAAU,GAAG,IAAI,CAElE;AAsHD,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,KAAK,EAAE,IAAI,GAAG,UAAU,CAIlD;AA0FD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAQrD"}

package/dist/cbor.js

@@ -0,0 +1,326 @@
+/**
+ * AT-8a canonical CBOR (RFC 8949 §4.2) -- the ONE primitive this package did
+ * not already have, added for §8.6c and for nothing else.
+ *
+ * # Why a new module rather than a reused one
+ *
+ * `canon.ts` is the canonical JSON encoding, and it is the right preimage for
+ * every hash this verifier takes: the engine's `attestation_id` and AB-1 entry
+ * digest are `sha256:` over `acp_executor.canon` / `receipt.rs::canon`, both
+ * JSON, and this package reproduces those bytes. What CBOR is needed for is
+ * narrower and unavoidable: HM-3 says a human attester's assertion is canonical
+ * CBOR of `{authenticator_data, client_data_json, signature}`, and HM-1 says the
+ * credential's `public_key` is a COSE_Key, which is CBOR by RFC 9052. Those two
+ * byte strings arrive from the wire and must be DECODED; no JSON encoder can
+ * read them. So this is a decoder for two fixed shapes, not a general codec.
+ *
+ * The engine's twins are `crates/acp-crypto/src/cbor.rs` and
+ * `reference/src/acp_crypto.py`'s `_enc` / `_dec` / `decode_canonical`, and the
+ * rule this file takes from them verbatim is the last one:
+ *
+ * # Canonicity is proved by RE-ENCODING, not by a list of sub-rules
+ *
+ * {@link decodeCanonical} parses, re-encodes what it parsed, and refuses the
+ * input unless the two byte strings are identical. That single comparison
+ * carries every §4.2 requirement at once -- shortest-form arguments, definite
+ * lengths, map keys sorted by their ENCODED bytes, no duplicate keys -- and it
+ * cannot drift from the encoder the way a hand-written checklist of those rules
+ * can. The decoder still refuses the coarse violations itself (indefinite
+ * lengths, non-shortest arguments, reserved additional information) because a
+ * decoder that accepted them would have to invent a canonical form to compare
+ * against, and inventing one is normalising.
+ *
+ * Refused, never normalised (AT-8a): the AB-1 entry digest is taken over the
+ * bytes that arrived, so a second encoding of one assertion is a second digest
+ * for one human decision, and accepting both would put two receipt identities
+ * behind one approval -- the Z4 encoding split, reached through the assertion.
+ *
+ * # Floats and tags are absent on purpose
+ *
+ * Neither is encodable, so neither is decodable: a float has several
+ * representations of one value and no deterministic ordering story (WE-1), and
+ * a tag is a type this verifier has no shape for. They refuse as
+ * {@link CborError} rather than being skipped, because a decoder that silently
+ * ignores what it does not understand is a parser an attacker can steer.
+ */
+/** The input is not canonical CBOR, or is not CBOR at all. */
+export class CborError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CborError';
+    }
+}
+function isCborMap(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v) && !(v instanceof Uint8Array);
+}
+/** Whether a decoded value is a map -- the narrowing the callers need. */
+export function cborIsMap(v) {
+    return isCborMap(v);
+}
+/** A map's keys, in the (canonical) order the bytes carried. */
+export function cborKeys(m) {
+    return m.entries.map(([k]) => k);
+}
+/** The value at an integer label, or undefined. COSE_Key's accessor. */
+export function cborGetInt(m, label) {
+    for (const [k, v] of m.entries)
+        if (typeof k === 'bigint' && k === label)
+            return v;
+    return undefined;
+}
+/** The value at a text key, or undefined. The assertion map's accessor. */
+export function cborGetText(m, key) {
+    for (const [k, v] of m.entries)
+        if (typeof k === 'string' && k === key)
+            return v;
+    return undefined;
+}
+/** A decoded value as bytes, or null if it is not a byte string. */
+export function cborAsBytes(v) {
+    return v instanceof Uint8Array ? v : null;
+}
+const MAJOR_UINT = 0;
+const MAJOR_NINT = 1;
+const MAJOR_BYTES = 2;
+const MAJOR_TEXT = 3;
+const MAJOR_ARRAY = 4;
+const MAJOR_MAP = 5;
+const MAJOR_SIMPLE = 7;
+/**
+ * RFC 8949 §4.2.1: the argument MUST use the shortest form that holds it.
+ *
+ * `bigint` throughout rather than `number`, because a CBOR argument is a full
+ * 64-bit unsigned integer and `number` loses digits past 2^53-1 -- the same
+ * defect `canon.ts` refuses on the JSON side, and here it would mean re-encoding
+ * a length to different bytes than arrived and calling the input non-canonical
+ * for the decoder's own reason.
+ */
+function encodeHead(major, value, out) {
+    const head = major << 5;
+    if (value < 24n) {
+        out.push(head | Number(value));
+        return;
+    }
+    let width;
+    if (value < 0x100n) {
+        out.push(head | 24);
+        width = 1;
+    }
+    else if (value < 0x10000n) {
+        out.push(head | 25);
+        width = 2;
+    }
+    else if (value < 0x100000000n) {
+        out.push(head | 26);
+        width = 4;
+    }
+    else if (value < 0x10000000000000000n) {
+        out.push(head | 27);
+        width = 8;
+    }
+    else {
+        throw new CborError('integer exceeds the 64-bit CBOR argument');
+    }
+    for (let i = width - 1; i >= 0; i -= 1) {
+        out.push(Number((value >> BigInt(i * 8)) & 0xffn));
+    }
+}
+function encodeInto(value, out) {
+    if (value === true) {
+        out.push(0xf5);
+        return;
+    }
+    if (value === false) {
+        out.push(0xf4);
+        return;
+    }
+    if (value === null) {
+        out.push(0xf6);
+        return;
+    }
+    if (typeof value === 'bigint') {
+        if (value >= 0n)
+            encodeHead(MAJOR_UINT, value, out);
+        else
+            encodeHead(MAJOR_NINT, -value - 1n, out);
+        return;
+    }
+    if (value instanceof Uint8Array) {
+        encodeHead(MAJOR_BYTES, BigInt(value.length), out);
+        for (const b of value)
+            out.push(b);
+        return;
+    }
+    if (typeof value === 'string') {
+        const bytes = new TextEncoder().encode(value);
+        encodeHead(MAJOR_TEXT, BigInt(bytes.length), out);
+        for (const b of bytes)
+            out.push(b);
+        return;
+    }
+    if (Array.isArray(value)) {
+        encodeHead(MAJOR_ARRAY, BigInt(value.length), out);
+        for (const item of value)
+            encodeInto(item, out);
+        return;
+    }
+    if (isCborMap(value)) {
+        // §4.2.1: keys sorted by their ENCODED bytes, bytewise lexicographic.
+        // Sorting by the decoded value would put the integer label -2 and the text
+        // key "x" in an order that depends on the comparison chosen rather than on
+        // the bytes, and the encoded order is the one the rule names.
+        const keyed = value.entries.map(([k, v]) => {
+            const kb = [];
+            encodeInto(k, kb);
+            return { kb, v };
+        });
+        keyed.sort((a, b) => compareBytes(a.kb, b.kb));
+        for (let i = 1; i < keyed.length; i += 1) {
+            const prev = keyed[i - 1];
+            const cur = keyed[i];
+            if (prev === undefined || cur === undefined)
+                continue; // unreachable; index in range
+            if (compareBytes(prev.kb, cur.kb) === 0)
+                throw new CborError('duplicate map key');
+        }
+        encodeHead(MAJOR_MAP, BigInt(keyed.length), out);
+        for (const { kb, v } of keyed) {
+            for (const b of kb)
+                out.push(b);
+            encodeInto(v, out);
+        }
+        return;
+    }
+    throw new CborError('value is not canonically encodable');
+}
+function compareBytes(a, b) {
+    const n = Math.min(a.length, b.length);
+    for (let i = 0; i < n; i += 1) {
+        const x = a[i];
+        const y = b[i];
+        if (x === undefined || y === undefined)
+            continue; // unreachable; index in range
+        if (x !== y)
+            return x - y;
+    }
+    return a.length - b.length;
+}
+/** The canonical CBOR bytes of a value. Used by {@link decodeCanonical}'s proof. */
+export function cborEncode(value) {
+    const out = [];
+    encodeInto(value, out);
+    return Uint8Array.from(out);
+}
+function decodeAt(buf, start) {
+    if (start >= buf.length)
+        throw new CborError('truncated');
+    const ib = buf[start];
+    if (ib === undefined)
+        throw new CborError('truncated'); // unreachable; bound checked
+    const major = ib >> 5;
+    const ai = ib & 0x1f;
+    let i = start + 1;
+    let value;
+    if (ai < 24) {
+        value = BigInt(ai);
+    }
+    else if (ai <= 27) {
+        const width = 1 << (ai - 24);
+        if (i + width > buf.length)
+            throw new CborError('truncated argument');
+        value = 0n;
+        for (let k = 0; k < width; k += 1) {
+            const b = buf[i + k];
+            if (b === undefined)
+                throw new CborError('truncated argument'); // unreachable
+            value = (value << 8n) | BigInt(b);
+        }
+        i += width;
+        // Shortest form (§4.2.1). Refused here as well as by the re-encode proof,
+        // because the value that re-encodes shorter would otherwise be decoded
+        // first and any shape check above would run on attacker-chosen bytes.
+        const floor = ai === 24 ? 24n : 1n << BigInt((width / 2) * 8);
+        if (value < floor)
+            throw new CborError('non-shortest argument');
+    }
+    else if (ai === 31) {
+        throw new CborError('indefinite length forbidden in canonical CBOR');
+    }
+    else {
+        throw new CborError(`reserved additional information ${ai}`);
+    }
+    switch (major) {
+        case MAJOR_UINT:
+            return { value, next: i };
+        case MAJOR_NINT:
+            return { value: -value - 1n, next: i };
+        case MAJOR_BYTES:
+        case MAJOR_TEXT: {
+            const len = Number(value);
+            if (!Number.isSafeInteger(len) || i + len > buf.length) {
+                throw new CborError('truncated string');
+            }
+            const slice = buf.subarray(i, i + len);
+            if (major === MAJOR_BYTES)
+                return { value: Uint8Array.from(slice), next: i + len };
+            // fatal: true -- invalid UTF-8 is a refusal, not a run of U+FFFD. A
+            // replacement character would make two distinct byte strings decode to
+            // one text value, which the re-encode proof would then report as
+            // non-canonical for the wrong reason.
+            return { value: new TextDecoder('utf-8', { fatal: true }).decode(slice), next: i + len };
+        }
+        case MAJOR_ARRAY: {
+            const n = Number(value);
+            if (!Number.isSafeInteger(n) || n > buf.length - i)
+                throw new CborError('truncated array');
+            const items = [];
+            for (let k = 0; k < n; k += 1) {
+                const d = decodeAt(buf, i);
+                items.push(d.value);
+                i = d.next;
+            }
+            return { value: items, next: i };
+        }
+        case MAJOR_MAP: {
+            const n = Number(value);
+            if (!Number.isSafeInteger(n) || n > buf.length - i)
+                throw new CborError('truncated map');
+            const entries = [];
+            for (let k = 0; k < n; k += 1) {
+                const key = decodeAt(buf, i);
+                const val = decodeAt(buf, key.next);
+                entries.push([key.value, val.value]);
+                i = val.next;
+            }
+            return { value: { entries }, next: i };
+        }
+        case MAJOR_SIMPLE:
+            if (value === 20n)
+                return { value: false, next: i };
+            if (value === 21n)
+                return { value: true, next: i };
+            if (value === 22n)
+                return { value: null, next: i };
+            throw new CborError('float or unsupported simple value');
+        default:
+            throw new CborError(`unsupported major type ${major}`);
+    }
+}
+/**
+ * AT-8a: parse AND prove canonicity. Any input that is not byte-identical to
+ * the canonical encoding of what it decodes to is REFUSED, never normalised.
+ *
+ * The engine's `decode_canonical` in one sentence, and the same sentence is the
+ * whole specification of this function.
+ */
+export function decodeCanonical(buf) {
+    const { value, next } = decodeAt(buf, 0);
+    if (next !== buf.length)
+        throw new CborError('trailing bytes');
+    const re = cborEncode(value);
+    if (re.length !== buf.length || !re.every((b, i) => b === buf[i])) {
+        throw new CborError('input is not the canonical encoding of its value');
+    }
+    return value;
+}
+//# sourceMappingURL=cbor.js.map

package/dist/cbor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cbor.js","sourceRoot":"","sources":["../src/cbor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAEH,8DAA8D;AAC9D,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAqBD,SAAS,SAAS,CAAC,CAAO;IACxB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC;AAChG,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,SAAS,CAAC,CAAO;IAC/B,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC;AACtB,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,QAAQ,CAAC,CAAU;IACjC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,CAAU,EAAE,KAAa;IAClD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;QAAE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,CAAC,CAAC;IACnF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,GAAW;IACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO;QAAE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,CAAC;IACjF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAC,CAAmB;IAC7C,OAAO,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,UAAU,GAAG,CAAC,CAAC;AACrB,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,YAAY,GAAG,CAAC,CAAC;AAEvB;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa,EAAE,GAAa;IAC7D,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC;IACxB,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IACD,IAAI,KAAa,CAAC;IAClB,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QACpB,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAW,EAAE,GAAa;IAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QACpB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,IAAI,EAAE;YAAE,UAAU,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;;YAC/C,UAAU,CAAC,UAAU,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO;IACT,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,sEAAsE;QACtE,2EAA2E;QAC3E,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;YACzC,MAAM,EAAE,GAAa,EAAE,CAAC;YACxB,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClB,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS;gBAAE,SAAS,CAAC,8BAA8B;YACrF,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACpF,CAAC;QACD,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACjD,KAAK,MAAM,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC;YAC9B,KAAK,MAAM,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAChC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,oCAAoC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,YAAY,CAAC,CAAoB,EAAE,CAAoB;IAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS,CAAC,8BAA8B;QAChF,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,KAAW;IACpC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAOD,SAAS,QAAQ,CAAC,GAAe,EAAE,KAAa;IAC9C,IAAI,KAAK,IAAI,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACtB,IAAI,EAAE,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,6BAA6B;IACrF,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,CAAC;IACtB,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACrB,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;IAClB,IAAI,KAAa,CAAC;IAClB,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC;QACZ,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC;SAAM,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,KAAK,GAAG,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC;QACtE,KAAK,GAAG,EAAE,CAAC;QACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,KAAK,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc;YAC9E,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,CAAC,IAAI,KAAK,CAAC;QACX,0EAA0E;QAC1E,uEAAuE;QACvE,sEAAsE;QACtE,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,IAAI,KAAK,GAAG,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAClE,CAAC;SAAM,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,UAAU;YACb,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC5B,KAAK,UAAU;YACb,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzC,KAAK,WAAW,CAAC;QACjB,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;gBACvD,MAAM,IAAI,SAAS,CAAC,kBAAkB,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK,KAAK,WAAW;gBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC;YACnF,oEAAoE;YACpE,uEAAuE;YACvE,iEAAiE;YACjE,sCAAsC;YACtC,OAAO,EAAE,KAAK,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC;QAC3F,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,iBAAiB,CAAC,CAAC;YAC3F,MAAM,KAAK,GAAW,EAAE,CAAC;YACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC3B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACb,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACnC,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;YACzF,MAAM,OAAO,GAA8B,EAAE,CAAC;YAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;YACf,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzC,CAAC;QACD,KAAK,YAAY;YACf,IAAI,KAAK,KAAK,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACpD,IAAI,KAAK,KAAK,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,KAAK,GAAG;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC3D;YACE,MAAM,IAAI,SAAS,CAAC,0BAA0B,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAe;IAC7C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC/D,MAAM,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/chain.d.ts

@@ -0,0 +1,142 @@
+/**
+ * The audit chain export verifier (ACP-428) -- the TypeScript reader of the
+ * file the console's "Download the audit chain for this window" link gives.
+ *
+ * The link said the file was verifiable offline and nothing a customer held
+ * verified it. The Python SDK's `verify_chain` and this function are that
+ * verifier, and they are held to ONE verdict per file by the shared corpus in
+ * `fixtures/chain-export/` -- the same refusal name at the same record, the
+ * same recomputed last hash, the same report of what the anchors cover. The
+ * check order below is the Python reader's, step for step, because on a file
+ * with two defects the order decides which one is named.
+ *
+ * # What is recomputed, and what is only reported
+ *
+ * Every `chain_hash` is RECOMPUTED -- `sha256:` over the canonical bytes of the
+ * record (the first record of the chain) or of `{prev, record}` (every later
+ * one), the audit service's own link -- and the file's value is compared,
+ * never used. Every `previous_hash` after the first row is compared against
+ * the hash just recomputed. The first row's `previous_hash`, in a file that
+ * starts after the beginning of the chain, is the one link this file cannot
+ * recompute; it is reported as `startsAfter`, and it is checked only when an
+ * anchor names exactly that position.
+ *
+ * # The anchor key never comes from the file
+ *
+ * Every anchor entry carries an `anchor_identity` beside it. Reading the key
+ * from there would accept any file whose author signed their own anchors and
+ * wrote their own key next to them -- the party under verification supplying
+ * the value it is verified with. So the key is a parameter, from a file the
+ * customer holds, and with no key every anchor is reported `unchecked`: never
+ * passed, and never dropped from the report.
+ *
+ * # Numbers: the file's TEXT is read, not only its parsed values
+ *
+ * `JSON.parse` reads `1.0` as the integer 1. The record the writer hashed said
+ * `1.0`, so hashing `1` would compare bytes nobody wrote and name the wrong
+ * defect. The parser's reviver sees each number's source text (Node 22 and
+ * later), and a number written with a fraction or an exponent becomes a value
+ * the canonical encoder refuses -- `RecordNotCanonical` inside a record,
+ * `ExportMalformed` in the file's own fields, exactly where the Python reader
+ * says so. On a runtime whose parser does not hand the reviver the source
+ * text, that one case would be named `ChainHashMismatch` instead; the file is
+ * refused either way.
+ */
+/** The one suite an audit anchor is signed under here, and the only one an anchor key may name. */
+export declare const ANCHOR_SUITE = "hybrid-ed25519-mldsa65";
+/** A refusal of an export, by name, at the first record or anchor that broke. */
+export declare class ChainRefusal extends Error {
+    /** The refusal name, identical to the Python reader's `ChainRefused.name`. */
+    readonly refusal: string;
+    readonly seq: number | null;
+    readonly anchor: number | null;
+    constructor(refusal: string, detail: string, where?: {
+        seq?: number;
+        anchor?: number;
+    });
+}
+/** An anchor key file that cannot be used, by name. A defect in the caller's own file, not a verdict. */
+export declare class AnchorKeyRefusal extends Error {
+    readonly refusal: string;
+    constructor(refusal: string, detail: string);
+}
+/** The audit anchor identity's public halves, from the file the customer holds. */
+export interface AnchorKey {
+    readonly alg: typeof ANCHOR_SUITE;
+    readonly classical: Uint8Array;
+    readonly pq: Uint8Array;
+    readonly fingerprint: string;
+}
+export interface AnchorResult {
+    readonly index: number;
+    readonly status: 'verified' | 'unchecked';
+    readonly placement: 'in_file' | 'window_floor' | 'before_file' | 'after_file' | 'no_head';
+    readonly headSeq: number | null;
+    readonly periodEnd: number;
+}
+export interface ChainVerified {
+    readonly tenant: string;
+    readonly firstSeq: number;
+    readonly lastSeq: number;
+    readonly records: number;
+    /** RECOMPUTED, never the file's. */
+    readonly lastChainHash: string;
+    readonly startsAfter: string | null;
+    readonly anchorsChecked: boolean;
+    readonly anchors: readonly AnchorResult[];
+    readonly anchoredThrough: number | null;
+    readonly unanchoredFrom: number | null;
+    readonly unanchoredCount: number;
+}
+/** The verdict as the shared corpus writes it -- snake_case, the Python reader's keys. */
+export type ChainVerdict = {
+    readonly verdict: 'verified';
+    readonly tenant: string;
+    readonly first_seq: number;
+    readonly last_seq: number;
+    readonly records: number;
+    readonly last_chain_hash: string;
+    readonly starts_after: string | null;
+    readonly anchors_checked: boolean;
+    readonly anchors: readonly {
+        readonly index: number;
+        readonly status: string;
+        readonly placement: string;
+        readonly head_seq: number | null;
+        readonly period_end: number;
+    }[];
+    readonly anchored_through: number | null;
+    readonly unanchored_from: number | null;
+    readonly unanchored_count: number;
+} | {
+    readonly verdict: 'refused';
+    readonly refusal: string;
+    readonly seq: number | null;
+    readonly anchor: number | null;
+};
+/**
+ * Read the audit anchor identity's public document -- `{alg, classical, pq,
+ * fingerprint}`, the halves in base64 -- checking every redundant field: the
+ * fingerprint is recomputed over both halves and compared, and a small-order
+ * Ed25519 half is refused, because under one a single signature verifies every
+ * message.
+ */
+export declare function parseAnchorKey(file: string | Uint8Array): AnchorKey;
+/**
+ * Verify an audit chain export, from the file's bytes or text.
+ *
+ * Throws {@link ChainRefusal} at the first break: `ExportMalformed`,
+ * `ExportEmpty`, `ChainSeqGap`, `RecordOutOfPlace`, `ChainLinkBroken`,
+ * `RecordNotCanonical`, `ChainHashMismatch`, `AnchorMalformed`,
+ * `AnchorSuiteNotEnrolled`, `AnchorSignatureInvalid`, `AnchorHeadMismatch`.
+ *
+ * NOT checked, on purpose, as in the Python reader: whether each record's
+ * fields are the set its kind of event carries, the transparency-log entry and
+ * timestamp stored beside each anchor, and whether the file holds EVERY record
+ * of its window -- a file cut short at the end verifies, and `unanchoredFrom`
+ * says how much of it nothing yet commits to.
+ */
+export declare function verifyChain(file: string | Uint8Array, anchorKey?: AnchorKey): ChainVerified;
+/** {@link verifyChain}'s answer, or its refusal, as one corpus-shaped object. */
+export declare function chainVerdict(file: string | Uint8Array, anchorKey?: AnchorKey): ChainVerdict;
+//# sourceMappingURL=chain.d.ts.map

package/dist/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../src/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AASH,mGAAmG;AACnG,eAAO,MAAM,YAAY,2BAA2B,CAAC;AAKrD,iFAAiF;AACjF,qBAAa,YAAa,SAAQ,KAAK;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO;CAO3F;AAED,yGAAyG;AACzG,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED,mFAAmF;AACnF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,OAAO,YAAY,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,0FAA0F;AAC1F,MAAM,MAAM,YAAY,GACpB;IACE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS;QACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,EAAE,CAAC;IACJ,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAyEN;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAyCnE;AAkCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,aAAa,CAyK3F;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,YAAY,CA8B3F"}