agent-passport-system 2.3.0-alpha → 2.5.0-alpha

package/dist/src/v2/accountability/__tests__/bundle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.test.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/bundle.test.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,wCAAwC;AAExC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AAEvC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAIrD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACnC,MAAM,QAAQ,GAAG,0BAA0B,CAAA;AAE3C,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAE5B,SAAS,KAAK,CAAC,EAAU,EAAE,UAAU,GAAG,eAAe;IACrD,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAA;AACvC,CAAC;AAED,SAAS,KAAK,CAAC,QAA6B,EAAE,SAAwC,EAAE;IACtF,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,cAAc,EAAE;YACd,OAAO,EAAE,8EAA8E;YACvF,eAAe,EAAE;gBACf,gDAAgD;gBAChD,qDAAqD;aACtD;YACD,YAAY,EAAE,kBAAkB;YAChC,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,KAAK;SACrB;QACD,WAAW,EAAE,0BAA0B;QACvC,YAAY,EAAE,0BAA0B;QACxC,UAAU,EAAE,0BAA0B;QACtC,QAAQ;QACR,mBAAmB,EAAE,CAAC,oBAAoB,CAAC;QAC3C,GAAG,MAAM;KACV,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QACrC,0DAA0D;QAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,kEAAkE,CAAC,CAAA;QACpG,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC5D,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QACjF,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QACjF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;QACpD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAC9F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAC/F,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QACjG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,CAAA;QACxD,+EAA+E;QAC/E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG,eAAe,CAC5B,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,mBAAmB,EAAE,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,EAAE,CAAC,EAC3F,WAAW,CACZ,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAA;QACzF,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAChF,MAAM,QAAQ,GAAc,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAA;QAC5D,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAChF,MAAM,QAAQ,GAAc,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;QACtE,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAChF,MAAM,OAAO,GACX,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC9E,MAAM,QAAQ,GAAc,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;QAC7D,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,eAA6C,EAAE,CAAA;QACtF,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,GAAG,GAAc,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAA;QAC9D,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,GAAG,GAAc,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,CAAA;QACvD,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/v2/accountability/__tests__/contestability.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contestability.test.d.ts.map

package/dist/src/v2/accountability/__tests__/contestability.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.test.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/contestability.test.ts"],"names":[],"mappings":""}

package/dist/src/v2/accountability/__tests__/contestability.test.js

@@ -0,0 +1,205 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ContestabilityReceipt — construct + verify conformance.
+//
+// Note: node:test rather than vitest because the repo has no vitest
+// install; node:test is the v2 convention.
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { attachControllerResponse, createContestabilityReceipt, } from '../construct/contestability.js';
+import { verifyContestabilityReceipt } from '../verify/contestability.js';
+import { publicKeyFromPrivate } from '../../../crypto/keys.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const CONTESTANT_PRIV = '33'.repeat(64);
+const CONTROLLER_PRIV = '44'.repeat(64);
+const CONTESTANT_TS = '2026-04-30T00:00:00.000Z';
+const RESPONDED_TS = '2026-04-30T01:00:00.000Z';
+const ACTION_ID = '0000000000000000000000000000000000000000000000000000000000000002';
+const SCOPE = {
+    asserts: 'Named contestant filed a challenge against the named action with the named grounds.',
+    does_not_assert: [
+        'that the contestation is meritorious',
+        'that the standing is legally valid',
+        'that any controller response is correct or final',
+    ],
+    capture_mode: 'self_attested',
+    completeness: 'complete',
+    self_attested: true,
+};
+function baseInput(overrides = {}) {
+    return {
+        timestamp: CONTESTANT_TS,
+        scope_of_claim: SCOPE,
+        contestant: {
+            did: 'did:aps:test-subject-001',
+            standing_basis: 'data_subject',
+        },
+        action_id: ACTION_ID,
+        grounds: 'Automated decision affected my access without disclosed criteria.',
+        requested_remedy: 'explanation',
+        ...overrides,
+    };
+}
+describe('ContestabilityReceipt — construct + verify', () => {
+    it('happy path without response: construct + verify round-trips green', () => {
+        const r = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const v = verifyContestabilityReceipt(r);
+        assert.equal(v.valid, true, `expected valid; got reason=${v.reason}`);
+        assert.equal(r.claim_type, 'aps:contestability:v1');
+        assert.equal(r.controller_response, undefined);
+    });
+    it('receipt_id is stable across reruns with identical inputs', () => {
+        const a = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const b = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        assert.equal(a.receipt_id, b.receipt_id);
+        assert.equal(a.signature, b.signature);
+    });
+    it('happy path with controller_response attached: both signatures verify', () => {
+        const filed = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const controllerDid = publicKeyFromPrivate(CONTROLLER_PRIV);
+        const responded = attachControllerResponse(filed, {
+            status: 'under_review',
+            responded_at: RESPONDED_TS,
+            responder_did: controllerDid,
+            response_detail: 'Acknowledged. Routed to data-subject access team.',
+        }, CONTROLLER_PRIV);
+        assert.notEqual(responded.controller_response, undefined);
+        assert.equal(responded.controller_response?.response_signature.length, 128);
+        // Outer (contestant) signature is unchanged from the filing.
+        assert.equal(responded.signature, filed.signature);
+        assert.equal(responded.receipt_id, filed.receipt_id);
+        const v = verifyContestabilityReceipt(responded);
+        assert.equal(v.valid, true, `expected valid; got reason=${v.reason}`);
+    });
+    it('pseudonymous contestant: pseudonym_hash only, no did', () => {
+        const pseudo = createHash('sha256').update('subject-handle-42').digest('hex');
+        const r = createContestabilityReceipt(baseInput({
+            contestant: {
+                pseudonym_hash: pseudo,
+                standing_basis: 'data_subject',
+            },
+        }), CONTESTANT_PRIV);
+        assert.equal(r.contestant.did, undefined);
+        assert.equal(r.contestant.pseudonym_hash, pseudo);
+        const v = verifyContestabilityReceipt(r);
+        assert.equal(v.valid, true, `expected valid; got reason=${v.reason}`);
+    });
+    it('construct rejects contestant with neither did nor pseudonym_hash', () => {
+        assert.throws(() => createContestabilityReceipt(baseInput({
+            contestant: { standing_basis: 'data_subject' },
+        }), CONTESTANT_PRIV), /must have at least one of did or pseudonym_hash/);
+    });
+    it('verify reports MISSING_CONTESTANT_IDENTITY when both identity fields are empty', () => {
+        const r = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const tampered = {
+            ...r,
+            contestant: { standing_basis: 'data_subject' },
+        };
+        const v = verifyContestabilityReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'MISSING_CONTESTANT_IDENTITY');
+    });
+    it('tamper on grounds field yields RECEIPT_ID_MISMATCH', () => {
+        const r = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const tampered = {
+            ...r,
+            grounds: 'rewritten grounds after the fact',
+        };
+        const v = verifyContestabilityReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'RECEIPT_ID_MISMATCH');
+    });
+    it('tamper on response_detail invalidates the controller signature only', () => {
+        const filed = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const controllerDid = publicKeyFromPrivate(CONTROLLER_PRIV);
+        const responded = attachControllerResponse(filed, {
+            status: 'under_review',
+            responded_at: RESPONDED_TS,
+            responder_did: controllerDid,
+            response_detail: 'original response detail',
+        }, CONTROLLER_PRIV);
+        const tampered = {
+            ...responded,
+            controller_response: {
+                ...responded.controller_response,
+                response_detail: 'rewritten response detail',
+            },
+        };
+        const v = verifyContestabilityReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'CONTROLLER_SIGNATURE_INVALID');
+    });
+    it('all 7 standing_basis values verify', () => {
+        const all = [
+            'data_subject',
+            'third_party',
+            'regulator',
+            'court',
+            'internal_audit',
+            'insurer',
+            'principal',
+        ];
+        for (const standing_basis of all) {
+            const r = createContestabilityReceipt(baseInput({
+                contestant: { did: 'did:aps:test-subject-001', standing_basis },
+            }), CONTESTANT_PRIV);
+            const v = verifyContestabilityReceipt(r);
+            assert.equal(v.valid, true, `standing=${standing_basis} did not verify: ${v.reason}`);
+        }
+    });
+    it('all 6 requested_remedy values verify', () => {
+        const all = [
+            'rollback',
+            'review',
+            'explanation',
+            'compensation',
+            'erasure',
+            'modification',
+        ];
+        for (const requested_remedy of all) {
+            const r = createContestabilityReceipt(baseInput({ requested_remedy }), CONTESTANT_PRIV);
+            const v = verifyContestabilityReceipt(r);
+            assert.equal(v.valid, true, `remedy=${requested_remedy} did not verify: ${v.reason}`);
+        }
+    });
+    it('all 7 contest_status values verify when carried in controller_response', () => {
+        const all = [
+            'filed',
+            'under_review',
+            'upheld',
+            'rejected',
+            'remedied',
+            'expired',
+            'abandoned',
+        ];
+        const controllerDid = publicKeyFromPrivate(CONTROLLER_PRIV);
+        for (const status of all) {
+            const filed = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+            const responded = attachControllerResponse(filed, { status, responded_at: RESPONDED_TS, responder_did: controllerDid }, CONTROLLER_PRIV);
+            const v = verifyContestabilityReceipt(responded);
+            assert.equal(v.valid, true, `status=${status} did not verify: ${v.reason}`);
+        }
+    });
+    it('rejects wrong claim_type', () => {
+        const r = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const tampered = {
+            ...r,
+            claim_type: 'aps:custody:v1',
+        };
+        const v = verifyContestabilityReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_CLAIM_TYPE');
+    });
+    it('matches the on-disk fixture byte-for-byte (no controller_response)', () => {
+        const fixturePath = join(__dirname, '..', 'fixtures', 'contestability.fixture.json');
+        const fixture = JSON.parse(readFileSync(fixturePath, 'utf-8'));
+        const built = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        assert.deepEqual(built, fixture);
+        const v = verifyContestabilityReceipt(fixture);
+        assert.equal(v.valid, true, `fixture failed verify: ${v.reason}`);
+    });
+});
+//# sourceMappingURL=contestability.test.js.map

package/dist/src/v2/accountability/__tests__/contestability.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.test.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/contestability.test.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0DAA0D;AAC1D,EAAE;AACF,oEAAoE;AACpE,2CAA2C;AAE3C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAS9D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAEzD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACvC,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACvC,MAAM,aAAa,GAAG,0BAA0B,CAAA;AAChD,MAAM,YAAY,GAAG,0BAA0B,CAAA;AAC/C,MAAM,SAAS,GAAG,kEAAkE,CAAA;AAEpF,MAAM,KAAK,GAAiB;IAC1B,OAAO,EAAE,qFAAqF;IAC9F,eAAe,EAAE;QACf,sCAAsC;QACtC,oCAAoC;QACpC,kDAAkD;KACnD;IACD,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,UAAU;IACxB,aAAa,EAAE,IAAI;CACpB,CAAA;AAED,SAAS,SAAS,CAAC,YAA4C,EAAE;IAC/D,OAAO;QACL,SAAS,EAAE,aAAa;QACxB,cAAc,EAAE,KAAK;QACrB,UAAU,EAAE;YACV,GAAG,EAAE,0BAA0B;YAC/B,cAAc,EAAE,cAA+B;SAChD;QACD,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,mEAAmE;QAC5E,gBAAgB,EAAE,aAAgC;QAClD,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAA;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACvE,MAAM,aAAa,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,wBAAwB,CACxC,KAAK,EACL;YACE,MAAM,EAAE,cAAc;YACtB,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,aAAa;YAC5B,eAAe,EAAE,mDAAmD;SACrE,EACD,eAAe,CAChB,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;QACzD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC3E,6DAA6D;QAC7D,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QAClD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QACpD,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,CAAC,GAAG,2BAA2B,CACnC,SAAS,CAAC;YACR,UAAU,EAAE;gBACV,cAAc,EAAE,MAAM;gBACtB,cAAc,EAAE,cAAc;aAC/B;SACF,CAAC,EACF,eAAe,CAChB,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QACjD,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,2BAA2B,CACzB,SAAS,CAAC;YACR,UAAU,EAAE,EAAE,cAAc,EAAE,cAAc,EAAyC;SACtF,CAAC,EACF,eAAe,CAChB,EACH,iDAAiD,CAClD,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,QAAQ,GAA0B;YACtC,GAAG,CAAC;YACJ,UAAU,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE;SAC/C,CAAA;QACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,QAAQ,GAA0B;YACtC,GAAG,CAAC;YACJ,OAAO,EAAE,kCAAkC;SAC5C,CAAA;QACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACvE,MAAM,aAAa,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,wBAAwB,CACxC,KAAK,EACL;YACE,MAAM,EAAE,cAAc;YACtB,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,aAAa;YAC5B,eAAe,EAAE,0BAA0B;SAC5C,EACD,eAAe,CAChB,CAAA;QACD,MAAM,QAAQ,GAA0B;YACtC,GAAG,SAAS;YACZ,mBAAmB,EAAE;gBACnB,GAAG,SAAS,CAAC,mBAAoB;gBACjC,eAAe,EAAE,2BAA2B;aAC7C;SACF,CAAA;QACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,GAAG,GAAoB;YAC3B,cAAc;YACd,aAAa;YACb,WAAW;YACX,OAAO;YACP,gBAAgB;YAChB,SAAS;YACT,WAAW;SACZ,CAAA;QACD,KAAK,MAAM,cAAc,IAAI,GAAG,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,2BAA2B,CACnC,SAAS,CAAC;gBACR,UAAU,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE,cAAc,EAAE;aAChE,CAAC,EACF,eAAe,CAChB,CAAA;YACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;YACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,cAAc,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACvF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,GAAG,GAAsB;YAC7B,UAAU;YACV,QAAQ;YACR,aAAa;YACb,cAAc;YACd,SAAS;YACT,cAAc;SACf,CAAA;QACD,KAAK,MAAM,gBAAgB,IAAI,GAAG,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,eAAe,CAAC,CAAA;YACvF,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;YACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,gBAAgB,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACvF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,GAAG,GAAoB;YAC3B,OAAO;YACP,cAAc;YACd,QAAQ;YACR,UAAU;YACV,UAAU;YACV,SAAS;YACT,WAAW;SACZ,CAAA;QACD,MAAM,aAAa,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAA;QAC3D,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;YACvE,MAAM,SAAS,GAAG,wBAAwB,CACxC,KAAK,EACL,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,EACpE,eAAe,CAChB,CAAA;YACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAA;YAChD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,MAAM,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC;YACJ,UAAU,EAAE,gBAA2C;SACxD,CAAA;QACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,6BAA6B,CAAC,CAAA;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAA0B,CAAA;QACvF,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACvE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAA;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/v2/accountability/__tests__/custody.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=custody.test.d.ts.map

package/dist/src/v2/accountability/__tests__/custody.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.test.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/custody.test.ts"],"names":[],"mappings":""}

package/dist/src/v2/accountability/__tests__/custody.test.js

@@ -0,0 +1,155 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// CustodyReceipt — construct + verify conformance.
+//
+// Note: this file uses node:test rather than vitest because the repo
+// has no vitest install; node:test is the v2 convention (see
+// tests/v2/instruction-provenance/conformance.test.ts and siblings).
+// The describe/it/assert API is interchangeable for these tests.
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createCustodyReceipt } from '../construct/custody.js';
+import { verifyCustodyReceipt } from '../verify/custody.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PRIV = '22'.repeat(64);
+const TS = '2026-04-30T00:00:00.000Z';
+const MERKLE_ROOT_1 = '0000000000000000000000000000000000000000000000000000000000000001';
+const SCOPE = {
+    asserts: 'Custodian sealed the named receipt batch at the named time for the named purpose.',
+    does_not_assert: [
+        'that the underlying receipts are factually accurate',
+        'that downstream custody handoffs were honored',
+    ],
+    capture_mode: 'self_attested',
+    completeness: 'complete',
+    self_attested: true,
+};
+function makeBaseInput(overrides = {}) {
+    return {
+        timestamp: TS,
+        scope_of_claim: SCOPE,
+        custodian_did: 'did:aps:test-custodian-001',
+        event_type: 'sealed',
+        subject_receipt_batch: { merkle_root: MERKLE_ROOT_1, count: 1 },
+        purpose: 'internal_audit',
+        ...overrides,
+    };
+}
+describe('CustodyReceipt — construct + verify', () => {
+    it('happy path: construct + verify round-trips green', () => {
+        const r = createCustodyReceipt(makeBaseInput(), PRIV);
+        const v = verifyCustodyReceipt(r);
+        assert.equal(v.valid, true, `expected valid; got reason=${v.reason}`);
+        assert.equal(r.claim_type, 'aps:custody:v1');
+        assert.equal(r.signer_did.length, 64);
+        assert.equal(r.signature.length, 128);
+        assert.equal(r.receipt_id.length, 64);
+    });
+    it('receipt_id is stable across reruns with identical inputs', () => {
+        const a = createCustodyReceipt(makeBaseInput(), PRIV);
+        const b = createCustodyReceipt(makeBaseInput(), PRIV);
+        assert.equal(a.receipt_id, b.receipt_id);
+        assert.equal(a.signature, b.signature);
+    });
+    it('all 8 event types are accepted by construct + verify', () => {
+        const events = [
+            'created',
+            'sealed',
+            'transferred',
+            'disclosed',
+            'redacted',
+            'erased',
+            'expired',
+            'verified',
+        ];
+        for (const event_type of events) {
+            const input = makeBaseInput({ event_type });
+            // 'transferred' requires next_custodian_did per the type contract;
+            // handled in a dedicated test. Other events accept the base input.
+            if (event_type === 'transferred')
+                continue;
+            const r = createCustodyReceipt(input, PRIV);
+            const v = verifyCustodyReceipt(r);
+            assert.equal(v.valid, true, `event_type=${event_type} did not verify: ${v.reason}`);
+        }
+    });
+    it('all 7 purposes are accepted by construct + verify', () => {
+        const purposes = [
+            'internal_audit',
+            'regulator_disclosure',
+            'subject_access',
+            'litigation_discovery',
+            'vendor_handoff',
+            'archival',
+            'incident_response',
+        ];
+        for (const purpose of purposes) {
+            const r = createCustodyReceipt(makeBaseInput({ purpose }), PRIV);
+            const v = verifyCustodyReceipt(r);
+            assert.equal(v.valid, true, `purpose=${purpose} did not verify: ${v.reason}`);
+        }
+    });
+    it('transferred event carries next_custodian_did and round-trips', () => {
+        const r = createCustodyReceipt(makeBaseInput({
+            event_type: 'transferred',
+            next_custodian_did: 'did:aps:test-custodian-002',
+        }), PRIV);
+        assert.equal(r.event_type, 'transferred');
+        assert.equal(r.next_custodian_did, 'did:aps:test-custodian-002');
+        const v = verifyCustodyReceipt(r);
+        assert.equal(v.valid, true, `verify failed: ${v.reason}`);
+    });
+    it('erased event preserves merkle_root + count (cryptographic-erasure pattern)', () => {
+        const r = createCustodyReceipt(makeBaseInput({
+            event_type: 'erased',
+            purpose: 'subject_access',
+            subject_receipt_batch: { merkle_root: MERKLE_ROOT_1, count: 42 },
+        }), PRIV);
+        assert.equal(r.event_type, 'erased');
+        // The chain remains verifiable across erasure: merkle_root and count
+        // survive even though the underlying content is irrecoverable.
+        assert.equal(r.subject_receipt_batch.merkle_root, MERKLE_ROOT_1);
+        assert.equal(r.subject_receipt_batch.count, 42);
+        const v = verifyCustodyReceipt(r);
+        assert.equal(v.valid, true, `verify failed: ${v.reason}`);
+    });
+    it('tamper on event_type to a non-enum value yields INVALID_EVENT_TYPE', () => {
+        const r = createCustodyReceipt(makeBaseInput(), PRIV);
+        const tampered = { ...r, event_type: 'fabricated' };
+        const v = verifyCustodyReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_EVENT_TYPE');
+    });
+    it('tamper on event_type to a different valid enum yields RECEIPT_ID_MISMATCH', () => {
+        const r = createCustodyReceipt(makeBaseInput({ event_type: 'sealed' }), PRIV);
+        const tampered = { ...r, event_type: 'erased' };
+        const v = verifyCustodyReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'RECEIPT_ID_MISMATCH');
+    });
+    it('tamper on signature alone yields SIGNATURE_INVALID', () => {
+        const r = createCustodyReceipt(makeBaseInput(), PRIV);
+        const tampered = { ...r, signature: '00'.repeat(64) };
+        const v = verifyCustodyReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'SIGNATURE_INVALID');
+    });
+    it('rejects wrong claim_type', () => {
+        const r = createCustodyReceipt(makeBaseInput(), PRIV);
+        const tampered = { ...r, claim_type: 'aps:action:v1' };
+        const v = verifyCustodyReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_CLAIM_TYPE');
+    });
+    it('matches the on-disk fixture byte-for-byte', () => {
+        const fixturePath = join(__dirname, '..', 'fixtures', 'custody.fixture.json');
+        const fixture = JSON.parse(readFileSync(fixturePath, 'utf-8'));
+        const built = createCustodyReceipt(makeBaseInput(), PRIV);
+        assert.deepEqual(built, fixture);
+        const v = verifyCustodyReceipt(fixture);
+        assert.equal(v.valid, true, `fixture failed verify: ${v.reason}`);
+    });
+});
+//# sourceMappingURL=custody.test.js.map

package/dist/src/v2/accountability/__tests__/custody.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.test.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/custody.test.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,mDAAmD;AACnD,EAAE;AACF,qEAAqE;AACrE,6DAA6D;AAC7D,qEAAqE;AACrE,iEAAiE;AAEjE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAQ3D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAEzD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAC5B,MAAM,EAAE,GAAG,0BAA0B,CAAA;AACrC,MAAM,aAAa,GAAG,kEAAkE,CAAA;AAExF,MAAM,KAAK,GAAiB;IAC1B,OAAO,EAAE,mFAAmF;IAC5F,eAAe,EAAE;QACf,qDAAqD;QACrD,+CAA+C;KAChD;IACD,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,UAAU;IACxB,aAAa,EAAE,IAAI;CACpB,CAAA;AAED,SAAS,aAAa,CAAC,YAAqC,EAAE;IAC5D,OAAO;QACL,SAAS,EAAE,EAAE;QACb,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,4BAA4B;QAC3C,UAAU,EAAE,QAA4B;QACxC,qBAAqB,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;QAC/D,OAAO,EAAE,gBAAkC;QAC3C,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAuB;YACjC,SAAS;YACT,QAAQ;YACR,aAAa;YACb,WAAW;YACX,UAAU;YACV,QAAQ;YACR,SAAS;YACT,UAAU;SACX,CAAA;QACD,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;YAC3C,mEAAmE;YACnE,mEAAmE;YACnE,IAAI,UAAU,KAAK,aAAa;gBAAE,SAAQ;YAC1C,MAAM,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;YACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,UAAU,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,QAAQ,GAAqB;YACjC,gBAAgB;YAChB,sBAAsB;YACtB,gBAAgB;YAChB,sBAAsB;YACtB,gBAAgB;YAChB,UAAU;YACV,mBAAmB;SACpB,CAAA;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;YAChE,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;YACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,OAAO,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,oBAAoB,CAC5B,aAAa,CAAC;YACZ,UAAU,EAAE,aAAa;YACzB,kBAAkB,EAAE,4BAA4B;SACjD,CAAC,EACF,IAAI,CACL,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,GAAG,oBAAoB,CAC5B,aAAa,CAAC;YACZ,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,gBAAgB;YACzB,qBAAqB,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE;SACjE,CAAC,EACF,IAAI,CACL,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACpC,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAC/C,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,YAAgC,EAAE,CAAA;QACvE,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC7E,MAAM,QAAQ,GAAmB,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;QAC/D,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAmB,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;QACrE,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,eAAmC,EAAE,CAAA;QAC1E,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAA;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAmB,CAAA;QAChF,MAAM,KAAK,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/v2/accountability/__tests__/fixtures.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fixtures.test.d.ts.map

package/dist/src/v2/accountability/__tests__/fixtures.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.test.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/fixtures.test.ts"],"names":[],"mappings":""}

package/dist/src/v2/accountability/__tests__/fixtures.test.js

@@ -0,0 +1,48 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// Fixture cross-verification — every checked-in fixture must verify clean.
+// Cross-implementation byte-match anchor: other SDKs validate against
+// THESE files. Any change to construct/* that breaks fixture signatures
+// fails this test loud.
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { verifyActionReceipt } from '../verify/action.js';
+import { verifyAuthorityBoundaryReceipt } from '../verify/authority-boundary.js';
+import { verifyCustodyReceipt } from '../verify/custody.js';
+import { verifyContestabilityReceipt } from '../verify/contestability.js';
+import { verifyAPSBundle } from '../verify/bundle.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const FIXTURES_DIR = join(__dirname, '..', 'fixtures');
+function loadFixture(name) {
+    return JSON.parse(readFileSync(join(FIXTURES_DIR, name), 'utf8'));
+}
+describe('accountability fixtures', () => {
+    it('action.fixture.json verifies clean', () => {
+        const r = loadFixture('action.fixture.json');
+        const v = verifyActionReceipt(r);
+        assert.equal(v.valid, true, JSON.stringify(v));
+    });
+    it('authority-boundary.fixture.json verifies clean', () => {
+        const r = loadFixture('authority-boundary.fixture.json');
+        const v = verifyAuthorityBoundaryReceipt(r);
+        assert.equal(v.valid, true, JSON.stringify(v));
+    });
+    it('custody.fixture.json verifies clean', () => {
+        const r = loadFixture('custody.fixture.json');
+        const v = verifyCustodyReceipt(r);
+        assert.equal(v.valid, true, JSON.stringify(v));
+    });
+    it('contestability.fixture.json verifies clean', () => {
+        const r = loadFixture('contestability.fixture.json');
+        const v = verifyContestabilityReceipt(r);
+        assert.equal(v.valid, true, JSON.stringify(v));
+    });
+    it('bundle.fixture.json verifies clean', () => {
+        const r = loadFixture('bundle.fixture.json');
+        const v = verifyAPSBundle(r);
+        assert.equal(v.valid, true, JSON.stringify(v));
+    });
+});
+//# sourceMappingURL=fixtures.test.js.map

package/dist/src/v2/accountability/__tests__/fixtures.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.test.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/fixtures.test.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,wEAAwE;AACxE,wBAAwB;AAExB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAExC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAA;AAChF,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAQrD,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AACzD,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;AAEtD,SAAS,WAAW,CAAI,IAAY;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAM,CAAA;AACxE,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,WAAW,CAAgB,qBAAqB,CAAC,CAAA;QAC3D,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,GAAG,WAAW,CAA2B,iCAAiC,CAAC,CAAA;QAClF,MAAM,CAAC,GAAG,8BAA8B,CAAC,CAAC,CAAC,CAAA;QAC3C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,WAAW,CAAiB,sBAAsB,CAAC,CAAA;QAC7D,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,GAAG,WAAW,CAAwB,6BAA6B,CAAC,CAAA;QAC3E,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,WAAW,CAAY,qBAAqB,CAAC,CAAA;QACvD,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/v2/accountability/construct/action.d.ts

@@ -0,0 +1,7 @@
+import type { ActionReceipt } from '../types/action.js';
+export type CreateActionReceiptInput = Omit<ActionReceipt, 'receipt_id' | 'signature' | 'signer_did' | 'timestamp' | 'claim_type'> & {
+    /** Optional override; defaults to new Date().toISOString(). */
+    timestamp?: string;
+};
+export declare function createActionReceipt(input: CreateActionReceiptInput, signerPrivateKey: string): ActionReceipt;
+//# sourceMappingURL=action.d.ts.map

package/dist/src/v2/accountability/construct/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/action.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,aAAa,EACb,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CACvE,GAAG;IACF,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,wBAAwB,EAC/B,gBAAgB,EAAE,MAAM,GACvB,aAAa,CAoCf"}

package/dist/src/v2/accountability/construct/action.js

@@ -0,0 +1,46 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// ActionReceipt — construction
+// ══════════════════════════════════════════════════════════════════
+// receipt_id is the sha256 hex of JCS(receipt with empty receipt_id and
+// empty signature). signature is Ed25519 over JCS(receipt with computed
+// receipt_id and empty signature) — i.e. the signature covers the
+// receipt_id, so any post-signing receipt_id tampering breaks the sig.
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { sign, publicKeyFromPrivate } from '../../../crypto/keys.js';
+export function createActionReceipt(input, signerPrivateKey) {
+    const signer_did = publicKeyFromPrivate(signerPrivateKey);
+    const timestamp = input.timestamp ?? new Date().toISOString();
+    // Pre-signature draft: receipt_id and signature both empty.
+    const draft = {
+        claim_type: 'aps:action:v1',
+        receipt_id: '',
+        timestamp,
+        signer_did,
+        scope_of_claim: input.scope_of_claim,
+        agent_did: input.agent_did,
+        delegation_chain_root: input.delegation_chain_root,
+        ...(input.intent_ref !== undefined ? { intent_ref: input.intent_ref } : {}),
+        ...(input.policy_ref !== undefined ? { policy_ref: input.policy_ref } : {}),
+        action: input.action,
+        side_effect_classes: input.side_effect_classes,
+        ...(input.transparency_log_inclusion !== undefined
+            ? { transparency_log_inclusion: input.transparency_log_inclusion }
+            : {}),
+        ...(input.rfc3161_timestamp !== undefined
+            ? { rfc3161_timestamp: input.rfc3161_timestamp }
+            : {}),
+        signature: '',
+    };
+    // receipt_id = sha256(JCS(draft with empty receipt_id and empty signature))
+    const receiptIdBytes = canonicalizeJCS(draft);
+    const receipt_id = createHash('sha256').update(receiptIdBytes, 'utf8').digest('hex');
+    // signature = Ed25519(JCS(draft with computed receipt_id and empty signature))
+    const signed = { ...draft, receipt_id };
+    const signatureInput = canonicalizeJCS(signed);
+    const signature = sign(signatureInput, signerPrivateKey);
+    return { ...signed, signature };
+}
+//# sourceMappingURL=action.js.map

package/dist/src/v2/accountability/construct/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/action.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,+BAA+B;AAC/B,qEAAqE;AACrE,wEAAwE;AACxE,wEAAwE;AACxE,kEAAkE;AAClE,uEAAuE;AACvE,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAWpE,MAAM,UAAU,mBAAmB,CACjC,KAA+B,EAC/B,gBAAwB;IAExB,MAAM,UAAU,GAAG,oBAAoB,CAAC,gBAAgB,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE7D,4DAA4D;IAC5D,MAAM,KAAK,GAAkB;QAC3B,UAAU,EAAE,eAAe;QAC3B,UAAU,EAAE,EAAE;QACd,SAAS;QACT,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS;YAChD,CAAC,CAAC,EAAE,0BAA0B,EAAE,KAAK,CAAC,0BAA0B,EAAE;YAClE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,EAAE;KACd,CAAA;IAED,4EAA4E;IAC5E,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEpF,+EAA+E;IAC/E,MAAM,MAAM,GAAkB,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAA;IACtD,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;IAExD,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC"}

package/dist/src/v2/accountability/construct/authority-boundary.d.ts

@@ -0,0 +1,7 @@
+import type { AuthorityBoundaryReceipt } from '../types/authority-boundary.js';
+export type CreateAuthorityBoundaryReceiptInput = Omit<AuthorityBoundaryReceipt, 'receipt_id' | 'signature' | 'signer_did' | 'timestamp' | 'claim_type'> & {
+    /** Optional override; defaults to new Date().toISOString(). */
+    timestamp?: string;
+};
+export declare function createAuthorityBoundaryReceipt(input: CreateAuthorityBoundaryReceiptInput, evaluatorPrivateKey: string): AuthorityBoundaryReceipt;
+//# sourceMappingURL=authority-boundary.d.ts.map

package/dist/src/v2/accountability/construct/authority-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-boundary.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/authority-boundary.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAA;AAE9E,MAAM,MAAM,mCAAmC,GAAG,IAAI,CACpD,wBAAwB,EACxB,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CACvE,GAAG;IACF,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,mCAAmC,EAC1C,mBAAmB,EAAE,MAAM,GAC1B,wBAAwB,CA0B1B"}

package/dist/src/v2/accountability/construct/authority-boundary.js

@@ -0,0 +1,34 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// AuthorityBoundaryReceipt — construction
+// ══════════════════════════════════════════════════════════════════
+// Same id-then-signature ordering as ActionReceipt: receipt_id covers
+// the empty-id form, signature covers the populated-id form.
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { sign, publicKeyFromPrivate } from '../../../crypto/keys.js';
+export function createAuthorityBoundaryReceipt(input, evaluatorPrivateKey) {
+    const signer_did = publicKeyFromPrivate(evaluatorPrivateKey);
+    const timestamp = input.timestamp ?? new Date().toISOString();
+    const draft = {
+        claim_type: 'aps:authority_boundary:v1',
+        receipt_id: '',
+        timestamp,
+        signer_did,
+        scope_of_claim: input.scope_of_claim,
+        action_id: input.action_id,
+        evaluator_did: input.evaluator_did,
+        delegation_chain_root: input.delegation_chain_root,
+        result: input.result,
+        ...(input.result_detail !== undefined ? { result_detail: input.result_detail } : {}),
+        signature: '',
+    };
+    const receiptIdBytes = canonicalizeJCS(draft);
+    const receipt_id = createHash('sha256').update(receiptIdBytes, 'utf8').digest('hex');
+    const signed = { ...draft, receipt_id };
+    const signatureInput = canonicalizeJCS(signed);
+    const signature = sign(signatureInput, evaluatorPrivateKey);
+    return { ...signed, signature };
+}
+//# sourceMappingURL=authority-boundary.js.map

package/dist/src/v2/accountability/construct/authority-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-boundary.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/authority-boundary.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,0CAA0C;AAC1C,qEAAqE;AACrE,sEAAsE;AACtE,6DAA6D;AAC7D,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAWpE,MAAM,UAAU,8BAA8B,CAC5C,KAA0C,EAC1C,mBAA2B;IAE3B,MAAM,UAAU,GAAG,oBAAoB,CAAC,mBAAmB,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE7D,MAAM,KAAK,GAA6B;QACtC,UAAU,EAAE,2BAA2B;QACvC,UAAU,EAAE,EAAE;QACd,SAAS;QACT,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,SAAS,EAAE,EAAE;KACd,CAAA;IAED,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEpF,MAAM,MAAM,GAA6B,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAA;IACjE,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA;IAE3D,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC"}

package/dist/src/v2/accountability/construct/bundle.d.ts

@@ -0,0 +1,19 @@
+import type { APSBundle, BundledReceiptRef } from '../types/bundle.js';
+import type { ScopeOfClaim } from '../types/base.js';
+/** Balanced binary Merkle tree over sorted receipt ids.
+ *  Empty input returns sha256('') as the canonical sentinel.
+ *  Odd-length layers duplicate the trailing element. */
+export declare function computeMerkleRoot(receiptIds: string[]): string;
+export interface CreateAPSBundleInput {
+    bundler_did: string;
+    period_start: string;
+    period_end: string;
+    subject_scope?: string[];
+    receipts: BundledReceiptRef[];
+    profile_conformance: string[];
+    scope_of_claim: ScopeOfClaim;
+    /** Optional override; defaults to new Date().toISOString(). */
+    timestamp?: string;
+}
+export declare function createAPSBundle(input: CreateAPSBundleInput, bundlerPrivateKey: string): APSBundle;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/src/v2/accountability/construct/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/bundle.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAMpD;;wDAEwD;AACxD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,CAgB9D;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,QAAQ,EAAE,iBAAiB,EAAE,CAAA;IAC7B,mBAAmB,EAAE,MAAM,EAAE,CAAA;IAC7B,cAAc,EAAE,YAAY,CAAA;IAC5B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,oBAAoB,EAC3B,iBAAiB,EAAE,MAAM,GACxB,SAAS,CA8BX"}