@ziffer-io/verify 0.2.0 → 0.2.1

package/README.md

@@ -50,6 +50,14 @@ Every refusal is a thrown `Refusal` whose `clause` names the rule that fired; th
 clause, what it means and what to do is at https://ziffer.io/docs/refusals. Narrow with
 `instanceof Refusal`, record the clause, and do not retry it.
 
+## Checking an audit chain download
+
+The console's *Download the audit chain for this window* file checks here too:
+`verifyChain(fileBytes, parseAnchorKey(anchorKeyBytes))` recomputes every record's hash, checks
+each anchor's signature under the audit anchor key you hold (never the copy inside the file), and
+reports which records no anchor covers yet. A break throws `ChainRefusal`, whose `refusal` and
+`seq` name what broke and where. Integrating the SDK, section 6, has the whole of it.
+
 ## Documentation
 
 - Quickstart: https://ziffer.io/docs/quickstart

package/dist/chain.d.ts

@@ -0,0 +1,142 @@
+/**
+ * The audit chain export verifier (ACP-428) -- the TypeScript reader of the
+ * file the console's "Download the audit chain for this window" link gives.
+ *
+ * The link said the file was verifiable offline and nothing a customer held
+ * verified it. The Python SDK's `verify_chain` and this function are that
+ * verifier, and they are held to ONE verdict per file by the shared corpus in
+ * `fixtures/chain-export/` -- the same refusal name at the same record, the
+ * same recomputed last hash, the same report of what the anchors cover. The
+ * check order below is the Python reader's, step for step, because on a file
+ * with two defects the order decides which one is named.
+ *
+ * # What is recomputed, and what is only reported
+ *
+ * Every `chain_hash` is RECOMPUTED -- `sha256:` over the canonical bytes of the
+ * record (the first record of the chain) or of `{prev, record}` (every later
+ * one), the audit service's own link -- and the file's value is compared,
+ * never used. Every `previous_hash` after the first row is compared against
+ * the hash just recomputed. The first row's `previous_hash`, in a file that
+ * starts after the beginning of the chain, is the one link this file cannot
+ * recompute; it is reported as `startsAfter`, and it is checked only when an
+ * anchor names exactly that position.
+ *
+ * # The anchor key never comes from the file
+ *
+ * Every anchor entry carries an `anchor_identity` beside it. Reading the key
+ * from there would accept any file whose author signed their own anchors and
+ * wrote their own key next to them -- the party under verification supplying
+ * the value it is verified with. So the key is a parameter, from a file the
+ * customer holds, and with no key every anchor is reported `unchecked`: never
+ * passed, and never dropped from the report.
+ *
+ * # Numbers: the file's TEXT is read, not only its parsed values
+ *
+ * `JSON.parse` reads `1.0` as the integer 1. The record the writer hashed said
+ * `1.0`, so hashing `1` would compare bytes nobody wrote and name the wrong
+ * defect. The parser's reviver sees each number's source text (Node 22 and
+ * later), and a number written with a fraction or an exponent becomes a value
+ * the canonical encoder refuses -- `RecordNotCanonical` inside a record,
+ * `ExportMalformed` in the file's own fields, exactly where the Python reader
+ * says so. On a runtime whose parser does not hand the reviver the source
+ * text, that one case would be named `ChainHashMismatch` instead; the file is
+ * refused either way.
+ */
+/** The one suite an audit anchor is signed under here, and the only one an anchor key may name. */
+export declare const ANCHOR_SUITE = "hybrid-ed25519-mldsa65";
+/** A refusal of an export, by name, at the first record or anchor that broke. */
+export declare class ChainRefusal extends Error {
+    /** The refusal name, identical to the Python reader's `ChainRefused.name`. */
+    readonly refusal: string;
+    readonly seq: number | null;
+    readonly anchor: number | null;
+    constructor(refusal: string, detail: string, where?: {
+        seq?: number;
+        anchor?: number;
+    });
+}
+/** An anchor key file that cannot be used, by name. A defect in the caller's own file, not a verdict. */
+export declare class AnchorKeyRefusal extends Error {
+    readonly refusal: string;
+    constructor(refusal: string, detail: string);
+}
+/** The audit anchor identity's public halves, from the file the customer holds. */
+export interface AnchorKey {
+    readonly alg: typeof ANCHOR_SUITE;
+    readonly classical: Uint8Array;
+    readonly pq: Uint8Array;
+    readonly fingerprint: string;
+}
+export interface AnchorResult {
+    readonly index: number;
+    readonly status: 'verified' | 'unchecked';
+    readonly placement: 'in_file' | 'window_floor' | 'before_file' | 'after_file' | 'no_head';
+    readonly headSeq: number | null;
+    readonly periodEnd: number;
+}
+export interface ChainVerified {
+    readonly tenant: string;
+    readonly firstSeq: number;
+    readonly lastSeq: number;
+    readonly records: number;
+    /** RECOMPUTED, never the file's. */
+    readonly lastChainHash: string;
+    readonly startsAfter: string | null;
+    readonly anchorsChecked: boolean;
+    readonly anchors: readonly AnchorResult[];
+    readonly anchoredThrough: number | null;
+    readonly unanchoredFrom: number | null;
+    readonly unanchoredCount: number;
+}
+/** The verdict as the shared corpus writes it -- snake_case, the Python reader's keys. */
+export type ChainVerdict = {
+    readonly verdict: 'verified';
+    readonly tenant: string;
+    readonly first_seq: number;
+    readonly last_seq: number;
+    readonly records: number;
+    readonly last_chain_hash: string;
+    readonly starts_after: string | null;
+    readonly anchors_checked: boolean;
+    readonly anchors: readonly {
+        readonly index: number;
+        readonly status: string;
+        readonly placement: string;
+        readonly head_seq: number | null;
+        readonly period_end: number;
+    }[];
+    readonly anchored_through: number | null;
+    readonly unanchored_from: number | null;
+    readonly unanchored_count: number;
+} | {
+    readonly verdict: 'refused';
+    readonly refusal: string;
+    readonly seq: number | null;
+    readonly anchor: number | null;
+};
+/**
+ * Read the audit anchor identity's public document -- `{alg, classical, pq,
+ * fingerprint}`, the halves in base64 -- checking every redundant field: the
+ * fingerprint is recomputed over both halves and compared, and a small-order
+ * Ed25519 half is refused, because under one a single signature verifies every
+ * message.
+ */
+export declare function parseAnchorKey(file: string | Uint8Array): AnchorKey;
+/**
+ * Verify an audit chain export, from the file's bytes or text.
+ *
+ * Throws {@link ChainRefusal} at the first break: `ExportMalformed`,
+ * `ExportEmpty`, `ChainSeqGap`, `RecordOutOfPlace`, `ChainLinkBroken`,
+ * `RecordNotCanonical`, `ChainHashMismatch`, `AnchorMalformed`,
+ * `AnchorSuiteNotEnrolled`, `AnchorSignatureInvalid`, `AnchorHeadMismatch`.
+ *
+ * NOT checked, on purpose, as in the Python reader: whether each record's
+ * fields are the set its kind of event carries, the transparency-log entry and
+ * timestamp stored beside each anchor, and whether the file holds EVERY record
+ * of its window -- a file cut short at the end verifies, and `unanchoredFrom`
+ * says how much of it nothing yet commits to.
+ */
+export declare function verifyChain(file: string | Uint8Array, anchorKey?: AnchorKey): ChainVerified;
+/** {@link verifyChain}'s answer, or its refusal, as one corpus-shaped object. */
+export declare function chainVerdict(file: string | Uint8Array, anchorKey?: AnchorKey): ChainVerdict;
+//# sourceMappingURL=chain.d.ts.map

package/dist/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../src/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AASH,mGAAmG;AACnG,eAAO,MAAM,YAAY,2BAA2B,CAAC;AAKrD,iFAAiF;AACjF,qBAAa,YAAa,SAAQ,KAAK;IACrC,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEnB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO;CAO3F;AAED,yGAAyG;AACzG,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;gBAEb,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAK5C;AAED,mFAAmF;AACnF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,OAAO,YAAY,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,WAAW,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oCAAoC;IACpC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,0FAA0F;AAC1F,MAAM,MAAM,YAAY,GACpB;IACE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS;QACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,EAAE,CAAC;IACJ,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC,GACD;IACE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,CAAC;AAyEN;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAyCnE;AAkCD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,aAAa,CAyK3F;AAED,iFAAiF;AACjF,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,YAAY,CA8B3F"}

package/dist/chain.js

@@ -0,0 +1,430 @@
+/**
+ * The audit chain export verifier (ACP-428) -- the TypeScript reader of the
+ * file the console's "Download the audit chain for this window" link gives.
+ *
+ * The link said the file was verifiable offline and nothing a customer held
+ * verified it. The Python SDK's `verify_chain` and this function are that
+ * verifier, and they are held to ONE verdict per file by the shared corpus in
+ * `fixtures/chain-export/` -- the same refusal name at the same record, the
+ * same recomputed last hash, the same report of what the anchors cover. The
+ * check order below is the Python reader's, step for step, because on a file
+ * with two defects the order decides which one is named.
+ *
+ * # What is recomputed, and what is only reported
+ *
+ * Every `chain_hash` is RECOMPUTED -- `sha256:` over the canonical bytes of the
+ * record (the first record of the chain) or of `{prev, record}` (every later
+ * one), the audit service's own link -- and the file's value is compared,
+ * never used. Every `previous_hash` after the first row is compared against
+ * the hash just recomputed. The first row's `previous_hash`, in a file that
+ * starts after the beginning of the chain, is the one link this file cannot
+ * recompute; it is reported as `startsAfter`, and it is checked only when an
+ * anchor names exactly that position.
+ *
+ * # The anchor key never comes from the file
+ *
+ * Every anchor entry carries an `anchor_identity` beside it. Reading the key
+ * from there would accept any file whose author signed their own anchors and
+ * wrote their own key next to them -- the party under verification supplying
+ * the value it is verified with. So the key is a parameter, from a file the
+ * customer holds, and with no key every anchor is reported `unchecked`: never
+ * passed, and never dropped from the report.
+ *
+ * # Numbers: the file's TEXT is read, not only its parsed values
+ *
+ * `JSON.parse` reads `1.0` as the integer 1. The record the writer hashed said
+ * `1.0`, so hashing `1` would compare bytes nobody wrote and name the wrong
+ * defect. The parser's reviver sees each number's source text (Node 22 and
+ * later), and a number written with a fraction or an exponent becomes a value
+ * the canonical encoder refuses -- `RecordNotCanonical` inside a record,
+ * `ExportMalformed` in the file's own fields, exactly where the Python reader
+ * says so. On a runtime whose parser does not hand the reviver the source
+ * text, that one case would be named `ChainHashMismatch` instead; the file is
+ * refused either way.
+ */
+import { createHash } from 'node:crypto';
+import { canon } from './canon.js';
+import { ed25519IsSmallOrder } from './ed25519.js';
+import { MLDSA65_PK_LEN, verifyUnderSuite } from './sig.js';
+import { isRecord } from './wire.js';
+/** The one suite an audit anchor is signed under here, and the only one an anchor key may name. */
+export const ANCHOR_SUITE = 'hybrid-ed25519-mldsa65';
+const ANCHOR_VERSION = 1;
+const HASH_PATTERN = /^sha256:[0-9a-f]{64}$/;
+const ED25519_PK_BYTES = 32;
+/** A refusal of an export, by name, at the first record or anchor that broke. */
+export class ChainRefusal extends Error {
+    /** The refusal name, identical to the Python reader's `ChainRefused.name`. */
+    refusal;
+    seq;
+    anchor;
+    constructor(refusal, detail, where = {}) {
+        super(`${refusal}: ${detail}`);
+        this.name = 'ChainRefusal';
+        this.refusal = refusal;
+        this.seq = where.seq ?? null;
+        this.anchor = where.anchor ?? null;
+    }
+}
+/** An anchor key file that cannot be used, by name. A defect in the caller's own file, not a verdict. */
+export class AnchorKeyRefusal extends Error {
+    refusal;
+    constructor(refusal, detail) {
+        super(`${refusal}: ${detail}`);
+        this.name = 'AnchorKeyRefusal';
+        this.refusal = refusal;
+    }
+}
+// A number the source spelled with a fraction or an exponent. A symbol, so the
+// canonical encoder refuses it wherever it lands and no field check mistakes it
+// for an integer.
+const NOT_AN_INTEGER = Symbol('a number written with a fraction or an exponent');
+function reviver(_key, value, context) {
+    if (typeof value === 'number' && typeof context?.source === 'string' && /[.eE]/.test(context.source)) {
+        return NOT_AN_INTEGER;
+    }
+    return value;
+}
+function isInt(v) {
+    return typeof v === 'number' && Number.isSafeInteger(v) && v >= 0;
+}
+// Half of a UTF-16 surrogate pair on its own: the Python reader cannot encode
+// one at all, and JSON.stringify would escape it into bytes nobody wrote.
+const LONE_SURROGATE = /[\uD800-\uDBFF](?![\uDC00-\uDFFF])|(?<![\uD800-\uDBFF])[\uDC00-\uDFFF]/;
+function canonicalValue(v) {
+    if (v === null || typeof v === 'boolean')
+        return true;
+    if (typeof v === 'number')
+        return Number.isSafeInteger(v);
+    if (typeof v === 'string')
+        return !LONE_SURROGATE.test(v);
+    if (Array.isArray(v))
+        return v.every(canonicalValue);
+    if (isRecord(v))
+        return Object.entries(v).every(([k, x]) => !LONE_SURROGATE.test(k) && canonicalValue(x));
+    return false;
+}
+function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes).digest('hex');
+}
+/** The audit service's link: `sha256:` over the canonical bytes. */
+function link(value) {
+    return `sha256:${sha256Hex(canon(value))}`;
+}
+/**
+ * RFC 4648 section 4 base64 with padding, in its one spelling: a value that
+ * does not re-encode to itself is refused, so two spellings of one signature
+ * are not two accepted signatures.
+ */
+function b64Strict(value) {
+    if (typeof value !== 'string' || value.length === 0)
+        return null;
+    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(value) || value.length % 4 !== 0)
+        return null;
+    const raw = Uint8Array.from(Buffer.from(value, 'base64'));
+    return Buffer.from(raw).toString('base64') === value ? raw : null;
+}
+function parseText(file) {
+    let text;
+    if (typeof file === 'string') {
+        text = file;
+    }
+    else {
+        try {
+            // ignoreBOM keeps a byte-order mark in the text, where JSON.parse refuses
+            // it -- as the Python reader's parser does.
+            text = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(file);
+        }
+        catch {
+            throw new ChainRefusal('ExportMalformed', 'the file is not UTF-8');
+        }
+    }
+    try {
+        const parsed = JSON.parse(text, reviver);
+        return parsed;
+    }
+    catch {
+        throw new ChainRefusal('ExportMalformed', 'the file is not JSON');
+    }
+}
+/**
+ * Read the audit anchor identity's public document -- `{alg, classical, pq,
+ * fingerprint}`, the halves in base64 -- checking every redundant field: the
+ * fingerprint is recomputed over both halves and compared, and a small-order
+ * Ed25519 half is refused, because under one a single signature verifies every
+ * message.
+ */
+export function parseAnchorKey(file) {
+    let doc;
+    try {
+        doc = JSON.parse(typeof file === 'string' ? file : new TextDecoder('utf-8', { fatal: true }).decode(file));
+    }
+    catch {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'the anchor key file is not JSON');
+    }
+    if (!isRecord(doc)) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'the anchor key document is not a JSON object');
+    }
+    if ('ed25519_pk_hex' in doc || 'identity' in doc) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'this is a receipt trust anchor (the document `ziffer pubkey` writes), not the audit anchor identity');
+    }
+    if (doc['alg'] !== ANCHOR_SUITE) {
+        throw new AnchorKeyRefusal('AnchorKeyUnsupported', `audit anchors are verified under ${ANCHOR_SUITE} only`);
+    }
+    const classical = b64Strict(doc['classical']);
+    const pq = b64Strict(doc['pq']);
+    if (classical === null || classical.length !== ED25519_PK_BYTES || pq === null || pq.length !== MLDSA65_PK_LEN) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', '`classical` must be 32 bytes and `pq` 1952 bytes, each in padded base64');
+    }
+    if (ed25519IsSmallOrder(classical)) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'the Ed25519 half is a small-order point');
+    }
+    const both = new Uint8Array(classical.length + pq.length);
+    both.set(classical, 0);
+    both.set(pq, classical.length);
+    const fingerprint = `sha256:${sha256Hex(both)}`;
+    if (doc['fingerprint'] !== fingerprint) {
+        throw new AnchorKeyRefusal('AnchorKeyMalformed', 'the fingerprint is not the fingerprint of the document’s own keys; it was edited after it was written');
+    }
+    return { alg: ANCHOR_SUITE, classical, pq, fingerprint };
+}
+/**
+ * Both halves of the hybrid signature over the bytes the audit service signed:
+ * the canonical encoding of the anchor's `alg`, `heads`, `period_end` and `v`.
+ * Conjunctive, over exactly {classical, pq}.
+ */
+function anchorSignatureOk(key, signed) {
+    const sig = signed['sig'];
+    if (!isRecord(sig))
+        return false;
+    const names = Object.keys(sig).sort();
+    if (names.length !== 2 || names[0] !== 'classical' || names[1] !== 'pq')
+        return false;
+    const classical = b64Strict(sig['classical']);
+    const pq = b64Strict(sig['pq']);
+    if (classical === null || pq === null)
+        return false;
+    const body = canon({
+        alg: signed['alg'],
+        heads: signed['heads'],
+        period_end: signed['period_end'],
+        v: signed['v'],
+    });
+    const parts = [
+        { primitive: 'classical', bytes: classical },
+        { primitive: 'pq', bytes: pq },
+    ];
+    return verifyUnderSuite(ANCHOR_SUITE, key, body, parts) === null;
+}
+function isHead(h) {
+    return (Array.isArray(h) && h.length === 3 && typeof h[0] === 'string' && isInt(h[1]) && typeof h[2] === 'string');
+}
+/**
+ * Verify an audit chain export, from the file's bytes or text.
+ *
+ * Throws {@link ChainRefusal} at the first break: `ExportMalformed`,
+ * `ExportEmpty`, `ChainSeqGap`, `RecordOutOfPlace`, `ChainLinkBroken`,
+ * `RecordNotCanonical`, `ChainHashMismatch`, `AnchorMalformed`,
+ * `AnchorSuiteNotEnrolled`, `AnchorSignatureInvalid`, `AnchorHeadMismatch`.
+ *
+ * NOT checked, on purpose, as in the Python reader: whether each record's
+ * fields are the set its kind of event carries, the transparency-log entry and
+ * timestamp stored beside each anchor, and whether the file holds EVERY record
+ * of its window -- a file cut short at the end verifies, and `unanchoredFrom`
+ * says how much of it nothing yet commits to.
+ */
+export function verifyChain(file, anchorKey) {
+    const doc = parseText(file);
+    if (!isRecord(doc))
+        throw new ChainRefusal('ExportMalformed', 'the file is not a JSON object');
+    const tenant = doc['tenant'];
+    const chain = doc['chain'];
+    const anchors = doc['anchors'];
+    if (typeof tenant !== 'string' || !Array.isArray(chain) || !Array.isArray(anchors)) {
+        throw new ChainRefusal('ExportMalformed', 'the file carries no `tenant`, `chain` and `anchors`');
+    }
+    if (chain.length === 0)
+        throw new ChainRefusal('ExportEmpty', 'the file holds no records');
+    // ---- the chain: every link recomputed, in order -------------------------
+    const recomputed = [];
+    let firstSeq = 0;
+    let startsAfter = null;
+    for (let i = 0; i < chain.length; i += 1) {
+        const row = chain[i];
+        if (!isRecord(row) ||
+            !isInt(row['seq']) ||
+            typeof row['chain_hash'] !== 'string' ||
+            !('previous_hash' in row) ||
+            !(row['previous_hash'] === null || typeof row['previous_hash'] === 'string') ||
+            !isRecord(row['record'])) {
+            throw new ChainRefusal('ExportMalformed', `row ${i} is not {seq, previous_hash, chain_hash, record}`);
+        }
+        const seq = row['seq'];
+        const record = row['record'];
+        const previous = row['previous_hash'];
+        if (i === 0) {
+            firstSeq = seq;
+        }
+        else if (seq !== firstSeq + i) {
+            throw new ChainRefusal('ChainSeqGap', `follows record ${firstSeq + i - 1}; a chain has no gaps`, { seq });
+        }
+        const recordSeq = record['seq'];
+        if (record['tenant_id'] !== tenant || (seq > 0 && !(isInt(recordSeq) && recordSeq === seq))) {
+            throw new ChainRefusal('RecordOutOfPlace', 'the record names another tenant or another position', { seq });
+        }
+        let prev;
+        if (i === 0) {
+            if (seq === 0 && previous !== null) {
+                throw new ChainRefusal('ChainLinkBroken', 'the first record of a chain has no predecessor', { seq });
+            }
+            if (seq > 0) {
+                if (typeof previous !== 'string' || !HASH_PATTERN.test(previous)) {
+                    throw new ChainRefusal('ChainLinkBroken', 'the file starts after the chain’s beginning and does not say which hash it continues from', { seq });
+                }
+                startsAfter = previous;
+            }
+            prev = typeof previous === 'string' ? previous : null;
+        }
+        else {
+            const before = recomputed[i - 1] ?? null;
+            if (previous !== before) {
+                throw new ChainRefusal('ChainLinkBroken', 'does not continue from the record before it', { seq });
+            }
+            prev = before;
+        }
+        if (!canonicalValue(record)) {
+            throw new ChainRefusal('RecordNotCanonical', 'the record holds a fraction or an integer too large to encode one way', { seq });
+        }
+        const hash = seq === 0 ? link(record) : link({ prev, record });
+        if (hash !== row['chain_hash']) {
+            throw new ChainRefusal('ChainHashMismatch', `the record hashes to ${hash}`, { seq });
+        }
+        recomputed.push(hash);
+    }
+    const lastSeq = firstSeq + chain.length - 1;
+    // ---- the anchors: each signature under YOUR key, each head against the chain
+    const results = [];
+    let anchoredThrough = null;
+    for (let j = 0; j < anchors.length; j += 1) {
+        const entry = anchors[j];
+        const signed = isRecord(entry) ? entry['anchor'] : undefined;
+        if (!isRecord(signed) ||
+            typeof signed['alg'] !== 'string' ||
+            !isInt(signed['v']) ||
+            signed['v'] !== ANCHOR_VERSION ||
+            !isInt(signed['period_end']) ||
+            !Array.isArray(signed['heads']) ||
+            !signed['heads'].every(isHead) ||
+            !('sig' in signed)) {
+            throw new ChainRefusal('AnchorMalformed', 'not {alg, heads, period_end, sig, v} with three-part heads', {
+                anchor: j,
+            });
+        }
+        const periodEnd = signed['period_end'];
+        const heads = signed['heads'];
+        const mine = heads.filter(isHead).filter((h) => h[0] === tenant);
+        if (mine.length > 1) {
+            throw new ChainRefusal('AnchorMalformed', `names this tenant ${mine.length} times`, { anchor: j });
+        }
+        let status = 'unchecked';
+        if (anchorKey !== undefined) {
+            if (signed['alg'] !== anchorKey.alg) {
+                throw new ChainRefusal('AnchorSuiteNotEnrolled', 'signed under a suite your anchor key is not', {
+                    anchor: j,
+                });
+            }
+            if (!anchorSignatureOk(anchorKey, signed)) {
+                throw new ChainRefusal('AnchorSignatureInvalid', 'the anchor’s signature does not verify under your anchor key -- both halves must', { anchor: j });
+            }
+            status = 'verified';
+        }
+        let placement = 'no_head';
+        let headSeq = null;
+        const head = mine[0];
+        if (head !== undefined) {
+            const [, hSeq, hHash] = head;
+            headSeq = hSeq;
+            let expected = null;
+            if (firstSeq <= hSeq && hSeq <= lastSeq) {
+                placement = 'in_file';
+                expected = recomputed[hSeq - firstSeq] ?? null;
+            }
+            else if (hSeq === firstSeq - 1 && startsAfter !== null) {
+                placement = 'window_floor';
+                expected = startsAfter;
+            }
+            else {
+                placement = hSeq < firstSeq ? 'before_file' : 'after_file';
+            }
+            // Compared with or without a key, as in the Python reader: a file whose
+            // anchors disagree with its own recomputed chain is refused either way.
+            if (expected !== null && hHash !== expected) {
+                throw new ChainRefusal('AnchorHeadMismatch', `the chain recomputes to ${expected} at this position`, {
+                    seq: hSeq,
+                    anchor: j,
+                });
+            }
+            if (status === 'verified' && (placement === 'in_file' || placement === 'window_floor')) {
+                anchoredThrough = anchoredThrough === null ? hSeq : Math.max(anchoredThrough, hSeq);
+            }
+        }
+        results.push({ index: j, status, placement, headSeq, periodEnd });
+    }
+    let unanchoredFrom;
+    if (anchoredThrough === null)
+        unanchoredFrom = firstSeq;
+    else if (anchoredThrough < lastSeq)
+        unanchoredFrom = anchoredThrough + 1;
+    else
+        unanchoredFrom = null;
+    const lastChainHash = recomputed[recomputed.length - 1];
+    if (lastChainHash === undefined)
+        throw new ChainRefusal('ExportEmpty', 'the file holds no records');
+    return {
+        tenant,
+        firstSeq,
+        lastSeq,
+        records: chain.length,
+        lastChainHash,
+        startsAfter,
+        anchorsChecked: anchorKey !== undefined,
+        anchors: results,
+        anchoredThrough,
+        unanchoredFrom,
+        unanchoredCount: unanchoredFrom === null ? 0 : lastSeq - unanchoredFrom + 1,
+    };
+}
+/** {@link verifyChain}'s answer, or its refusal, as one corpus-shaped object. */
+export function chainVerdict(file, anchorKey) {
+    let v;
+    try {
+        v = verifyChain(file, anchorKey);
+    }
+    catch (e) {
+        if (e instanceof ChainRefusal) {
+            return { verdict: 'refused', refusal: e.refusal, seq: e.seq, anchor: e.anchor };
+        }
+        throw e;
+    }
+    return {
+        verdict: 'verified',
+        tenant: v.tenant,
+        first_seq: v.firstSeq,
+        last_seq: v.lastSeq,
+        records: v.records,
+        last_chain_hash: v.lastChainHash,
+        starts_after: v.startsAfter,
+        anchors_checked: v.anchorsChecked,
+        anchors: v.anchors.map((a) => ({
+            index: a.index,
+            status: a.status,
+            placement: a.placement,
+            head_seq: a.headSeq,
+            period_end: a.periodEnd,
+        })),
+        anchored_through: v.anchoredThrough,
+        unanchored_from: v.unanchoredFrom,
+        unanchored_count: v.unanchoredCount,
+    };
+}
+//# sourceMappingURL=chain.js.map

package/dist/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../src/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2CG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAsB,MAAM,UAAU,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,mGAAmG;AACnG,MAAM,CAAC,MAAM,YAAY,GAAG,wBAAwB,CAAC;AACrD,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,iFAAiF;AACjF,MAAM,OAAO,YAAa,SAAQ,KAAK;IACrC,8EAA8E;IACrE,OAAO,CAAS;IAChB,GAAG,CAAgB;IACnB,MAAM,CAAgB;IAE/B,YAAY,OAAe,EAAE,MAAc,EAAE,QAA2C,EAAE;QACxF,KAAK,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC;IACrC,CAAC;CACF;AAED,yGAAyG;AACzG,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,OAAO,CAAS;IAEzB,YAAY,OAAe,EAAE,MAAc;QACzC,KAAK,CAAC,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AA8DD,+EAA+E;AAC/E,gFAAgF;AAChF,kBAAkB;AAClB,MAAM,cAAc,GAAG,MAAM,CAAC,iDAAiD,CAAC,CAAC;AAEjF,SAAS,OAAO,CAAgB,IAAY,EAAE,KAAc,EAAE,OAA6B;IACzF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,OAAO,EAAE,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACrG,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,MAAM,cAAc,GAAG,wEAAwE,CAAC;AAEhG,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,oEAAoE;AACpE,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,UAAU,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjF,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACpE,CAAC;AAED,SAAS,SAAS,CAAC,IAAyB;IAC1C,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,0EAA0E;YAC1E,4CAA4C;YAC5C,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,IAAyB;IACtD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,iCAAiC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,8CAA8C,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,gBAAgB,IAAI,GAAG,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACjD,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,YAAY,EAAE,CAAC;QAChC,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,EAAE,oCAAoC,YAAY,OAAO,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,gBAAgB,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QAC/G,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,EAAE,yCAAyC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACvB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,WAAW,GAAG,UAAU,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;IAChD,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,WAAW,EAAE,CAAC;QACvC,MAAM,IAAI,gBAAgB,CACxB,oBAAoB,EACpB,uGAAuG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAc,EAAE,MAA+B;IACxE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,IAAI,SAAS,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC;QACjB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC;QAChC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC;KACf,CAAC,CAAC;IACH,MAAM,KAAK,GAAoB;QAC7B,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE;QAC5C,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;KAC/B,CAAC;IACF,OAAO,gBAAgB,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;AACnE,CAAC;AAED,SAAS,MAAM,CAAC,CAAU;IACxB,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAC1G,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,IAAyB,EAAE,SAAqB;IAC1E,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,+BAA+B,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,qDAAqD,CAAC,CAAC;IACnG,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IAE3F,4EAA4E;IAC5E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,GAAY,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,IACE,CAAC,QAAQ,CAAC,GAAG,CAAC;YACd,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClB,OAAO,GAAG,CAAC,YAAY,CAAC,KAAK,QAAQ;YACrC,CAAC,CAAC,eAAe,IAAI,GAAG,CAAC;YACzB,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,eAAe,CAAC,KAAK,QAAQ,CAAC;YAC5E,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,OAAO,CAAC,kDAAkD,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,QAAQ,GAAG,GAAG,CAAC;QACjB,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,kBAAkB,QAAQ,GAAG,CAAC,GAAG,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,MAAM,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,SAAS,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,qDAAqD,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,IAAmB,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACZ,IAAI,GAAG,KAAK,CAAC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACnC,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,gDAAgD,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;gBACZ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACjE,MAAM,IAAI,YAAY,CACpB,iBAAiB,EACjB,2FAA2F,EAC3F,EAAE,GAAG,EAAE,CACR,CAAC;gBACJ,CAAC;gBACD,WAAW,GAAG,QAAQ,CAAC;YACzB,CAAC;YACD,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;YACzC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,6CAA6C,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACpG,CAAC;YACD,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,YAAY,CACpB,oBAAoB,EACpB,uEAAuE,EACvE,EAAE,GAAG,EAAE,CACR,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,KAAK,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,wBAAwB,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAE5C,+EAA+E;IAC/E,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAY,OAAO,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IACE,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjB,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;YACjC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnB,MAAM,CAAC,GAAG,CAAC,KAAK,cAAc;YAC9B,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,EAClB,CAAC;YACD,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,4DAA4D,EAAE;gBACtG,MAAM,EAAE,CAAC;aACV,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,KAAK,GAAc,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,YAAY,CAAC,iBAAiB,EAAE,qBAAqB,IAAI,CAAC,MAAM,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,IAAI,MAAM,GAA2B,WAAW,CAAC;QACjD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,GAAG,EAAE,CAAC;gBACpC,MAAM,IAAI,YAAY,CAAC,wBAAwB,EAAE,6CAA6C,EAAE;oBAC9F,MAAM,EAAE,CAAC;iBACV,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,YAAY,CACpB,wBAAwB,EACxB,kFAAkF,EAClF,EAAE,MAAM,EAAE,CAAC,EAAE,CACd,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,UAAU,CAAC;QACtB,CAAC;QACD,IAAI,SAAS,GAA8B,SAAS,CAAC;QACrD,IAAI,OAAO,GAAkB,IAAI,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC;YAC7B,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,QAAQ,GAAkB,IAAI,CAAC;YACnC,IAAI,QAAQ,IAAI,IAAI,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;gBACxC,SAAS,GAAG,SAAS,CAAC;gBACtB,QAAQ,GAAG,UAAU,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC;YACjD,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,GAAG,CAAC,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzD,SAAS,GAAG,cAAc,CAAC;gBAC3B,QAAQ,GAAG,WAAW,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC;YAC7D,CAAC;YACD,wEAAwE;YACxE,wEAAwE;YACxE,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC5C,MAAM,IAAI,YAAY,CAAC,oBAAoB,EAAE,2BAA2B,QAAQ,mBAAmB,EAAE;oBACnG,GAAG,EAAE,IAAI;oBACT,MAAM,EAAE,CAAC;iBACV,CAAC,CAAC;YACL,CAAC;YACD,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,cAAc,CAAC,EAAE,CAAC;gBACvF,eAAe,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,cAA6B,CAAC;IAClC,IAAI,eAAe,KAAK,IAAI;QAAE,cAAc,GAAG,QAAQ,CAAC;SACnD,IAAI,eAAe,GAAG,OAAO;QAAE,cAAc,GAAG,eAAe,GAAG,CAAC,CAAC;;QACpE,cAAc,GAAG,IAAI,CAAC;IAC3B,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,aAAa,KAAK,SAAS;QAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IACpG,OAAO;QACL,MAAM;QACN,QAAQ;QACR,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,MAAM;QACrB,aAAa;QACb,WAAW;QACX,cAAc,EAAE,SAAS,KAAK,SAAS;QACvC,OAAO,EAAE,OAAO;QAChB,eAAe;QACf,cAAc;QACd,eAAe,EAAE,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,cAAc,GAAG,CAAC;KAC5E,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,IAAyB,EAAE,SAAqB;IAC3E,IAAI,CAAgB,CAAC;IACrB,IAAI,CAAC;QACH,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,YAAY,EAAE,CAAC;YAC9B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;QAClF,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;IACD,OAAO;QACL,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,SAAS,EAAE,CAAC,CAAC,QAAQ;QACrB,QAAQ,EAAE,CAAC,CAAC,OAAO;QACnB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,eAAe,EAAE,CAAC,CAAC,aAAa;QAChC,YAAY,EAAE,CAAC,CAAC,WAAW;QAC3B,eAAe,EAAE,CAAC,CAAC,cAAc;QACjC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,OAAO;YACnB,UAAU,EAAE,CAAC,CAAC,SAAS;SACxB,CAAC,CAAC;QACH,gBAAgB,EAAE,CAAC,CAAC,eAAe;QACnC,eAAe,EAAE,CAAC,CAAC,cAAc;QACjC,gBAAgB,EAAE,CAAC,CAAC,eAAe;KACpC,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,11 +1,13 @@
 /**
  * @ziffer-io/verify -- the third receipt-verifier implementation (ACP-197 §5).
  *
- * `verifyReceipt` is the API; everything else is exported so the pieces are
+ * `verifyReceipt` is the API for a receipt and `verifyChain` for an exported
+ * audit chain (ACP-428); everything else is exported so the pieces are
  * individually testable and so `@ziffer-io/client` can re-export ONE verify (the
  * client adds no verification logic of its own -- one home per rule).
  */
 export { canon, compareCodePoints, type Json } from './canon.js';
+export { ANCHOR_SUITE, AnchorKeyRefusal, ChainRefusal, chainVerdict, parseAnchorKey, verifyChain, type AnchorKey, type AnchorResult, type ChainVerdict, type ChainVerified, } from './chain.js';
 export { CborError, cborAsBytes, cborEncode, cborGetInt, cborGetText, cborIsMap, cborKeys, decodeCanonical, type Cbor, type CborMap, } from './cbor.js';
 export { CLAUSE_ASSURANCE, CLAUSE_ATTESTATION_SUITE, CLAUSE_ATTESTER_SIG, CLAUSE_ATT_NONCE_SIZE, CLAUSE_BINDING, CLAUSE_CARDINALITY, CLAUSE_CONSENT, CLAUSE_DERIVED_ID, CLAUSE_DIGEST_DUP, CLAUSE_DIGEST_ORDER, CLAUSE_MALFORMED, CLAUSE_MEMBERSHIP, CLAUSE_NO_ATTESTATIONS, CLAUSE_NO_OBJECT, CLAUSE_OBJECT_SCHEMA, CLAUSE_OPERATOR_DISAGREE, CLAUSE_OPERATOR_SELF, CLAUSE_POLICY_BASIS, CLAUSE_QUORUM, CLAUSE_WEBAUTHN_ALG, CLAUSE_WEBAUTHN_COUNTER, } from './clauses.js';
 export { AT1_FIELDS, attestationId, entryDigest, verifyQuorum, type AttesterCredential, type DecisionBasis, type HybridAttester, type QuorumOutcome, type QuorumPolicy, type WebauthnAttester, } from './quorum.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,SAAS,EACT,WAAW,EACX,UAAU,EACV,UAAU,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,eAAe,EACf,KAAK,IAAI,EACT,KAAK,OAAO,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,iBAAiB,EACjB,aAAa,EACb,2BAA2B,EAC3B,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EACL,UAAU,EACV,cAAc,EACd,eAAe,EACf,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,KAAK,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,cAAc,EACd,YAAY,EACZ,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,QAAQ,EACR,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,aAAa,GACnB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,WAAW,EACX,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,WAAW,EACX,UAAU,EACV,UAAU,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,eAAe,EACf,KAAK,IAAI,EACT,KAAK,OAAO,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,aAAa,EACb,WAAW,EACX,YAAY,EACZ,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,iBAAiB,EACjB,aAAa,EACb,2BAA2B,EAC3B,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,KAAK,SAAS,EACd,KAAK,aAAa,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EACL,UAAU,EACV,cAAc,EACd,eAAe,EACf,YAAY,EACZ,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,KAAK,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,cAAc,EACd,YAAY,EACZ,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,QAAQ,EACR,aAAa,EACb,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,aAAa,GACnB,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,11 +1,13 @@
 /**
  * @ziffer-io/verify -- the third receipt-verifier implementation (ACP-197 §5).
  *
- * `verifyReceipt` is the API; everything else is exported so the pieces are
+ * `verifyReceipt` is the API for a receipt and `verifyChain` for an exported
+ * audit chain (ACP-428); everything else is exported so the pieces are
  * individually testable and so `@ziffer-io/client` can re-export ONE verify (the
  * client adds no verification logic of its own -- one home per rule).
  */
 export { canon, compareCodePoints } from './canon.js';
+export { ANCHOR_SUITE, AnchorKeyRefusal, ChainRefusal, chainVerdict, parseAnchorKey, verifyChain, } from './chain.js';
 export { CborError, cborAsBytes, cborEncode, cborGetInt, cborGetText, cborIsMap, cborKeys, decodeCanonical, } from './cbor.js';
 export { CLAUSE_ASSURANCE, CLAUSE_ATTESTATION_SUITE, CLAUSE_ATTESTER_SIG, CLAUSE_ATT_NONCE_SIZE, CLAUSE_BINDING, CLAUSE_CARDINALITY, CLAUSE_CONSENT, CLAUSE_DERIVED_ID, CLAUSE_DIGEST_DUP, CLAUSE_DIGEST_ORDER, CLAUSE_MALFORMED, CLAUSE_MEMBERSHIP, CLAUSE_NO_ATTESTATIONS, CLAUSE_NO_OBJECT, CLAUSE_OBJECT_SCHEMA, CLAUSE_OPERATOR_DISAGREE, CLAUSE_OPERATOR_SELF, CLAUSE_POLICY_BASIS, CLAUSE_QUORUM, CLAUSE_WEBAUTHN_ALG, CLAUSE_WEBAUTHN_COUNTER, } from './clauses.js';
 export { AT1_FIELDS, attestationId, entryDigest, verifyQuorum, } from './quorum.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAa,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,SAAS,EACT,WAAW,EACX,UAAU,EACV,UAAU,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,eAAe,GAGhB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,aAAa,EACb,WAAW,EACX,YAAY,GAOb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,iBAAiB,EACjB,aAAa,EACb,2BAA2B,EAC3B,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,EACf,cAAc,EACd,iBAAiB,GAGlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EACL,UAAU,EACV,cAAc,EACd,eAAe,EACf,YAAY,GAKb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,cAAc,EACd,YAAY,EACZ,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,QAAQ,EACR,aAAa,GAId,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAa,MAAM,YAAY,CAAC;AACjE,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,WAAW,GAKZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,WAAW,EACX,UAAU,EACV,UAAU,EACV,WAAW,EACX,SAAS,EACT,QAAQ,EACR,eAAe,GAGhB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,UAAU,EACV,aAAa,EACb,WAAW,EACX,YAAY,GAOb,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,SAAS,EACT,iBAAiB,EACjB,aAAa,EACb,2BAA2B,EAC3B,kBAAkB,EAClB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,YAAY,EACZ,eAAe,EACf,cAAc,EACd,iBAAiB,GAGlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,eAAe,EACf,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EACL,UAAU,EACV,cAAc,EACd,eAAe,EACf,YAAY,GAKb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,cAAc,EACd,YAAY,EACZ,wBAAwB,EACxB,eAAe,EACf,cAAc,EACd,QAAQ,EACR,aAAa,GAId,MAAM,aAAa,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ziffer-io/verify",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Verify a ZIFFER decision receipt in your own process, against a key you configured.",
   "keywords": [
     "ziffer",
@@ -41,7 +41,7 @@
     "access": "public"
   },
   "ziffer": {
-    "enginePin": "7fd84dbe1a430e6deea4b241ebe1ba641103ffbe"
+    "enginePin": "0ce0567bec3ee9d8c2b58d8c26c1ec83c4782f72"
   },
   "dependencies": {
     "@noble/curves": "2.3.0",