agent-passport-system 2.3.0-alpha → 2.5.0-alpha

package/dist/src/v2/accountability/construct/bundle.js

@@ -0,0 +1,63 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// APSBundle — construction
+// ══════════════════════════════════════════════════════════════════
+// merkle_root is computed over receipt_ids sorted lexicographically,
+// hashed leaf-wise, then folded pairwise. Odd-length layers duplicate
+// the trailing leaf. Empty bundles use sha256('') as the sentinel.
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { sign, publicKeyFromPrivate } from '../../../crypto/keys.js';
+function sha256Hex(input) {
+    return createHash('sha256').update(input, 'utf-8').digest('hex');
+}
+/** Balanced binary Merkle tree over sorted receipt ids.
+ *  Empty input returns sha256('') as the canonical sentinel.
+ *  Odd-length layers duplicate the trailing element. */
+export function computeMerkleRoot(receiptIds) {
+    if (receiptIds.length === 0) {
+        return sha256Hex('');
+    }
+    const sorted = [...receiptIds].sort();
+    let layer = sorted.map(id => sha256Hex(id));
+    while (layer.length > 1) {
+        const next = [];
+        for (let i = 0; i < layer.length; i += 2) {
+            const left = layer[i];
+            const right = i + 1 < layer.length ? layer[i + 1] : layer[i];
+            next.push(sha256Hex(left + right));
+        }
+        layer = next;
+    }
+    return layer[0];
+}
+export function createAPSBundle(input, bundlerPrivateKey) {
+    const timestamp = input.timestamp ?? new Date().toISOString();
+    const signer_did = publicKeyFromPrivate(bundlerPrivateKey);
+    const merkle_root = computeMerkleRoot(input.receipts.map(r => r.receipt_id));
+    const receipt_count = input.receipts.length;
+    // Skeleton: receipt_id and signature both empty placeholders. Optional
+    // fields (subject_scope) are conditionally spread so the canonical bytes
+    // match what JSON.stringify will produce when the fixture is reloaded.
+    const skeleton = {
+        claim_type: 'aps:bundle:v1',
+        receipt_id: '',
+        timestamp,
+        signer_did,
+        scope_of_claim: input.scope_of_claim,
+        bundler_did: input.bundler_did,
+        period_start: input.period_start,
+        period_end: input.period_end,
+        ...(input.subject_scope !== undefined ? { subject_scope: input.subject_scope } : {}),
+        merkle_root,
+        receipt_count,
+        profile_conformance: input.profile_conformance,
+        signature: '',
+    };
+    const receipt_id = sha256Hex(canonicalizeJCS({ ...skeleton, signature: undefined }));
+    const withId = { ...skeleton, receipt_id };
+    const signature = sign(canonicalizeJCS({ ...withId, signature: undefined }), bundlerPrivateKey);
+    return { ...withId, signature };
+}
+//# sourceMappingURL=bundle.js.map

package/dist/src/v2/accountability/construct/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/bundle.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,2BAA2B;AAC3B,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,mEAAmE;AACnE,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAIpE,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClE,CAAC;AAED;;wDAEwD;AACxD,MAAM,UAAU,iBAAiB,CAAC,UAAoB;IACpD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,SAAS,CAAC,EAAE,CAAC,CAAA;IACtB,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAA;IACrC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAa,EAAE,CAAA;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAA;YACtB,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;YAC9D,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAA;QACpC,CAAC;QACD,KAAK,GAAG,IAAI,CAAA;IACd,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAE,CAAA;AAClB,CAAC;AAcD,MAAM,UAAU,eAAe,CAC7B,KAA2B,EAC3B,iBAAyB;IAEzB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7D,MAAM,UAAU,GAAG,oBAAoB,CAAC,iBAAiB,CAAC,CAAA;IAC1D,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAA;IAC5E,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAA;IAE3C,uEAAuE;IACvE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,QAAQ,GAAc;QAC1B,UAAU,EAAE,eAAe;QAC3B,UAAU,EAAE,EAAE;QACd,SAAS;QACT,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,WAAW;QACX,aAAa;QACb,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,SAAS,EAAE,EAAE;KACd,CAAA;IAED,MAAM,UAAU,GAAG,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IACpF,MAAM,MAAM,GAAc,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,CAAA;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAA;IAE/F,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC"}

package/dist/src/v2/accountability/construct/contestability.d.ts

@@ -0,0 +1,9 @@
+import type { ContestabilityReceipt, ContestabilityControllerResponse } from '../types/contestability.js';
+export type CreateContestabilityReceiptInput = Omit<ContestabilityReceipt, 'receipt_id' | 'signature' | 'signer_did' | 'timestamp' | 'claim_type' | 'controller_response'> & {
+    /** Optional override; defaults to new Date().toISOString(). */
+    timestamp?: string;
+};
+export declare function createContestabilityReceipt(input: CreateContestabilityReceiptInput, contestantPrivateKey: string): ContestabilityReceipt;
+export type ControllerResponseInput = Omit<ContestabilityControllerResponse, 'response_signature'>;
+export declare function attachControllerResponse(receipt: ContestabilityReceipt, response: ControllerResponseInput, controllerPrivateKey: string): ContestabilityReceipt;
+//# sourceMappingURL=contestability.d.ts.map

package/dist/src/v2/accountability/construct/contestability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/contestability.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,qBAAqB,EACrB,gCAAgC,EACjC,MAAM,4BAA4B,CAAA;AAEnC,MAAM,MAAM,gCAAgC,GAAG,IAAI,CACjD,qBAAqB,EACnB,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,qBAAqB,CACxB,GAAG;IACF,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gCAAgC,EACvC,oBAAoB,EAAE,MAAM,GAC3B,qBAAqB,CAkCvB;AAED,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,gCAAgC,EAChC,oBAAoB,CACrB,CAAA;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,qBAAqB,EAC9B,QAAQ,EAAE,uBAAuB,EACjC,oBAAoB,EAAE,MAAM,GAC3B,qBAAqB,CAiBvB"}

package/dist/src/v2/accountability/construct/contestability.js

@@ -0,0 +1,62 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// ContestabilityReceipt — construction
+// ══════════════════════════════════════════════════════════════════
+// At filing time: receipt_id and outer signature are computed over the
+// receipt with NO controller_response present. This locks the
+// contestants claim independently of any later controller response.
+//
+// attachControllerResponse re-issues the receipt by adding an
+// independently-signed controller_response. The outer (contestant)
+// signature is unchanged; the response_signature is computed over
+// JCS(receipt with controller_response present and response_signature
+// emptied), so anyone with both DIDs can verify the two assertions
+// separately.
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { sign, publicKeyFromPrivate } from '../../../crypto/keys.js';
+export function createContestabilityReceipt(input, contestantPrivateKey) {
+    if ((input.contestant.did === undefined || input.contestant.did === '') &&
+        (input.contestant.pseudonym_hash === undefined || input.contestant.pseudonym_hash === '')) {
+        throw new Error('createContestabilityReceipt: contestant must have at least one of did or pseudonym_hash');
+    }
+    const signer_did = publicKeyFromPrivate(contestantPrivateKey);
+    const timestamp = input.timestamp ?? new Date().toISOString();
+    const draft = {
+        claim_type: 'aps:contestability:v1',
+        receipt_id: '',
+        timestamp,
+        signer_did,
+        scope_of_claim: input.scope_of_claim,
+        contestant: input.contestant,
+        action_id: input.action_id,
+        grounds: input.grounds,
+        requested_remedy: input.requested_remedy,
+        signature: '',
+    };
+    const receipt_id = createHash('sha256')
+        .update(canonicalizeJCS(draft), 'utf8')
+        .digest('hex');
+    const signed = { ...draft, receipt_id };
+    const signature = sign(canonicalizeJCS(signed), contestantPrivateKey);
+    return { ...signed, signature };
+}
+export function attachControllerResponse(receipt, response, controllerPrivateKey) {
+    // Build the receipt as it will exist post-attach but with the
+    // response_signature placeholder, then sign that canonical form.
+    const responseDraft = {
+        ...response,
+        response_signature: '',
+    };
+    const receiptDraft = {
+        ...receipt,
+        controller_response: responseDraft,
+    };
+    const response_signature = sign(canonicalizeJCS(receiptDraft), controllerPrivateKey);
+    return {
+        ...receipt,
+        controller_response: { ...response, response_signature },
+    };
+}
+//# sourceMappingURL=contestability.js.map

package/dist/src/v2/accountability/construct/contestability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/contestability.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,uCAAuC;AACvC,qEAAqE;AACrE,uEAAuE;AACvE,8DAA8D;AAC9D,oEAAoE;AACpE,EAAE;AACF,8DAA8D;AAC9D,mEAAmE;AACnE,kEAAkE;AAClE,sEAAsE;AACtE,mEAAmE;AACnE,cAAc;AACd,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAmBpE,MAAM,UAAU,2BAA2B,CACzC,KAAuC,EACvC,oBAA4B;IAE5B,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,CAAC;QACnE,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,cAAc,KAAK,EAAE,CAAC,EACzF,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,oBAAoB,CAAC,CAAA;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE7D,MAAM,KAAK,GAA0B;QACnC,UAAU,EAAE,uBAAuB;QACnC,UAAU,EAAE,EAAE;QACd,SAAS;QACT,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,SAAS,EAAE,EAAE;KACd,CAAA;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;SACtC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,MAAM,MAAM,GAA0B,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAA;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAA;IAErE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC;AAOD,MAAM,UAAU,wBAAwB,CACtC,OAA8B,EAC9B,QAAiC,EACjC,oBAA4B;IAE5B,8DAA8D;IAC9D,iEAAiE;IACjE,MAAM,aAAa,GAAqC;QACtD,GAAG,QAAQ;QACX,kBAAkB,EAAE,EAAE;KACvB,CAAA;IACD,MAAM,YAAY,GAA0B;QAC1C,GAAG,OAAO;QACV,mBAAmB,EAAE,aAAa;KACnC,CAAA;IACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC,CAAA;IAEpF,OAAO;QACL,GAAG,OAAO;QACV,mBAAmB,EAAE,EAAE,GAAG,QAAQ,EAAE,kBAAkB,EAAE;KACzD,CAAA;AACH,CAAC"}

package/dist/src/v2/accountability/construct/custody.d.ts

@@ -0,0 +1,7 @@
+import type { CustodyReceipt } from '../types/custody.js';
+export type CreateCustodyReceiptInput = Omit<CustodyReceipt, 'receipt_id' | 'signature' | 'signer_did' | 'timestamp' | 'claim_type'> & {
+    /** Optional override; defaults to new Date().toISOString(). */
+    timestamp?: string;
+};
+export declare function createCustodyReceipt(input: CreateCustodyReceiptInput, custodianPrivateKey: string): CustodyReceipt;
+//# sourceMappingURL=custody.d.ts.map

package/dist/src/v2/accountability/construct/custody.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/custody.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEzD,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAC1C,cAAc,EACd,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,CACvE,GAAG;IACF,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,CAAA;AAED,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,yBAAyB,EAChC,mBAAmB,EAAE,MAAM,GAC1B,cAAc,CA+BhB"}

package/dist/src/v2/accountability/construct/custody.js

@@ -0,0 +1,41 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// CustodyReceipt — construction
+// ══════════════════════════════════════════════════════════════════
+// receipt_id is sha256 hex of JCS(receipt with empty receipt_id and
+// empty signature). signature is Ed25519 over JCS(receipt with computed
+// receipt_id and empty signature) — i.e. the signature covers the
+// receipt_id, so any post-signing receipt_id tampering breaks the sig.
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { sign, publicKeyFromPrivate } from '../../../crypto/keys.js';
+export function createCustodyReceipt(input, custodianPrivateKey) {
+    const signer_did = publicKeyFromPrivate(custodianPrivateKey);
+    const timestamp = input.timestamp ?? new Date().toISOString();
+    const draft = {
+        claim_type: 'aps:custody:v1',
+        receipt_id: '',
+        timestamp,
+        signer_did,
+        scope_of_claim: input.scope_of_claim,
+        custodian_did: input.custodian_did,
+        event_type: input.event_type,
+        subject_receipt_batch: input.subject_receipt_batch,
+        ...(input.previous_custody_id !== undefined
+            ? { previous_custody_id: input.previous_custody_id }
+            : {}),
+        ...(input.next_custodian_did !== undefined
+            ? { next_custodian_did: input.next_custodian_did }
+            : {}),
+        purpose: input.purpose,
+        signature: '',
+    };
+    const receipt_id = createHash('sha256')
+        .update(canonicalizeJCS(draft), 'utf8')
+        .digest('hex');
+    const signed = { ...draft, receipt_id };
+    const signature = sign(canonicalizeJCS(signed), custodianPrivateKey);
+    return { ...signed, signature };
+}
+//# sourceMappingURL=custody.js.map

package/dist/src/v2/accountability/construct/custody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/custody.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,gCAAgC;AAChC,qEAAqE;AACrE,oEAAoE;AACpE,wEAAwE;AACxE,kEAAkE;AAClE,uEAAuE;AACvE,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAWpE,MAAM,UAAU,oBAAoB,CAClC,KAAgC,EAChC,mBAA2B;IAE3B,MAAM,UAAU,GAAG,oBAAoB,CAAC,mBAAmB,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE7D,MAAM,KAAK,GAAmB;QAC5B,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,SAAS;QACT,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,EAAE;KACd,CAAA;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;SACtC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,MAAM,MAAM,GAAmB,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAA;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAA;IAEpE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC"}

package/dist/src/v2/accountability/index.d.ts

@@ -0,0 +1,12 @@
+export * from './types/index.js';
+export { createActionReceipt } from './construct/action.js';
+export { createAuthorityBoundaryReceipt } from './construct/authority-boundary.js';
+export { createCustodyReceipt } from './construct/custody.js';
+export { createContestabilityReceipt, attachControllerResponse } from './construct/contestability.js';
+export { createAPSBundle, computeMerkleRoot } from './construct/bundle.js';
+export { verifyActionReceipt } from './verify/action.js';
+export { verifyAuthorityBoundaryReceipt } from './verify/authority-boundary.js';
+export { verifyCustodyReceipt } from './verify/custody.js';
+export { verifyContestabilityReceipt } from './verify/contestability.js';
+export { verifyAPSBundle } from './verify/bundle.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/v2/accountability/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/v2/accountability/index.ts"],"names":[],"mappings":"AAwBA,cAAc,kBAAkB,CAAA;AAGhC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACrG,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAG1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/src/v2/accountability/index.js

@@ -0,0 +1,37 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// Accountability MVP — Wave 1 attribution-grade receipt surface
+// ══════════════════════════════════════════════════════════════════
+// Spec: specs/full-accountability-mvp.md
+//
+// Five primitives:
+//   ActionReceipt              — what was emitted, by whom, under what authority
+//   AuthorityBoundaryReceipt   — was the action inside or outside delegation
+//   CustodyReceipt             — provenance trail of receipt-handling events
+//   ContestabilityReceipt      — affected-party challenge with controller response
+//   APSBundle                  — signed aggregation envelope with Merkle commitment
+//
+// Every receipt extends AccountabilityReceiptBase and MUST declare its
+// scope_of_claim. Verbal confessions, not brain scans.
+//
+// SDK scope: receipt construction, JCS canonicalization, Ed25519 signing,
+//            cryptographic verification, Merkle aggregation.
+//
+// Out of scope (private gateway): replay engines, drift detection, compliance
+// dashboards, cross-tenant correlation, decision-equivalence reports.
+// ══════════════════════════════════════════════════════════════════
+// Types
+export * from './types/index.js';
+// Constructors
+export { createActionReceipt } from './construct/action.js';
+export { createAuthorityBoundaryReceipt } from './construct/authority-boundary.js';
+export { createCustodyReceipt } from './construct/custody.js';
+export { createContestabilityReceipt, attachControllerResponse } from './construct/contestability.js';
+export { createAPSBundle, computeMerkleRoot } from './construct/bundle.js';
+// Verifiers
+export { verifyActionReceipt } from './verify/action.js';
+export { verifyAuthorityBoundaryReceipt } from './verify/authority-boundary.js';
+export { verifyCustodyReceipt } from './verify/custody.js';
+export { verifyContestabilityReceipt } from './verify/contestability.js';
+export { verifyAPSBundle } from './verify/bundle.js';
+//# sourceMappingURL=index.js.map

package/dist/src/v2/accountability/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/v2/accountability/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,gEAAgE;AAChE,qEAAqE;AACrE,yCAAyC;AACzC,EAAE;AACF,mBAAmB;AACnB,iFAAiF;AACjF,6EAA6E;AAC7E,6EAA6E;AAC7E,mFAAmF;AACnF,oFAAoF;AACpF,EAAE;AACF,uEAAuE;AACvE,uDAAuD;AACvD,EAAE;AACF,0EAA0E;AAC1E,6DAA6D;AAC7D,EAAE;AACF,8EAA8E;AAC9E,sEAAsE;AACtE,qEAAqE;AAErE,QAAQ;AACR,cAAc,kBAAkB,CAAA;AAEhC,eAAe;AACf,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,mCAAmC,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AACrG,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAE1E,YAAY;AACZ,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAA;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAAE,2BAA2B,EAAE,MAAM,4BAA4B,CAAA;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/src/v2/accountability/types/action.d.ts

@@ -0,0 +1,24 @@
+import type { AccountabilityReceiptBase } from './base.js';
+export type SideEffectClass = 'financial' | 'data_modification' | 'external_message' | 'irreversible' | 'subject_affecting' | 'internal_only';
+export interface ActionReceipt extends AccountabilityReceiptBase {
+    claim_type: 'aps:action:v1';
+    agent_did: string;
+    /** sha256 hex of the canonical delegation chain that authorized the agent. */
+    delegation_chain_root: string;
+    intent_ref?: string;
+    policy_ref?: string;
+    action: {
+        kind: string;
+        target: string;
+        parameters?: Record<string, unknown>;
+        resource_version?: string;
+    };
+    side_effect_classes: SideEffectClass[];
+    transparency_log_inclusion?: {
+        log_url: string;
+        leaf_hash: string;
+    };
+    /** RFC 3161 timestamp token, base64-encoded. Optional. */
+    rfc3161_timestamp?: string;
+}
+//# sourceMappingURL=action.d.ts.map

package/dist/src/v2/accountability/types/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/action.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAE1D,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,mBAAmB,GACnB,kBAAkB,GAClB,cAAc,GACd,mBAAmB,GACnB,eAAe,CAAA;AAEnB,MAAM,WAAW,aAAc,SAAQ,yBAAyB;IAC9D,UAAU,EAAE,eAAe,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,8EAA8E;IAC9E,qBAAqB,EAAE,MAAM,CAAA;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAA;QACZ,MAAM,EAAE,MAAM,CAAA;QACd,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACpC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD,mBAAmB,EAAE,eAAe,EAAE,CAAA;IACtC,0BAA0B,CAAC,EAAE;QAC3B,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;KAClB,CAAA;IACD,0DAA0D;IAC1D,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAC3B"}

package/dist/src/v2/accountability/types/action.js

@@ -0,0 +1,11 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// ActionReceipt — declares an action the system observed an agent take
+// ══════════════════════════════════════════════════════════════════
+// Spec: specs/full-accountability-mvp.md
+// Verbal confession: this receipt asserts WHAT happened (kind, target,
+// parameters, side-effect classes). It does not claim the agent
+// understood why; that is a separate primitive.
+// ══════════════════════════════════════════════════════════════════
+export {};
+//# sourceMappingURL=action.js.map

package/dist/src/v2/accountability/types/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/action.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,uEAAuE;AACvE,qEAAqE;AACrE,yCAAyC;AACzC,uEAAuE;AACvE,gEAAgE;AAChE,gDAAgD;AAChD,qEAAqE"}

package/dist/src/v2/accountability/types/authority-boundary.d.ts

@@ -0,0 +1,16 @@
+import type { AccountabilityReceiptBase } from './base.js';
+export type BoundaryResult = 'inside' | 'outside' | 'indeterminate';
+export interface AuthorityBoundaryReceipt extends AccountabilityReceiptBase {
+    claim_type: 'aps:authority_boundary:v1';
+    /** receipt_id of the ActionReceipt this ruling is about. */
+    action_id: string;
+    /** DID of the entity that ran the boundary check (typically the gateway). */
+    evaluator_did: string;
+    /** sha256 hex of the canonical delegation chain evaluated against. */
+    delegation_chain_root: string;
+    result: BoundaryResult;
+    /** Optional human-readable explanation. e.g. "scope 'commerce.purchase'
+     *  not in delegation" when result='outside'. */
+    result_detail?: string;
+}
+//# sourceMappingURL=authority-boundary.d.ts.map

package/dist/src/v2/accountability/types/authority-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-boundary.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/authority-boundary.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAE1D,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,GAAG,eAAe,CAAA;AAEnE,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB;IACzE,UAAU,EAAE,2BAA2B,CAAA;IACvC,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAA;IACjB,6EAA6E;IAC7E,aAAa,EAAE,MAAM,CAAA;IACrB,sEAAsE;IACtE,qBAAqB,EAAE,MAAM,CAAA;IAC7B,MAAM,EAAE,cAAc,CAAA;IACtB;oDACgD;IAChD,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB"}

package/dist/src/v2/accountability/types/authority-boundary.js

@@ -0,0 +1,12 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// AuthorityBoundaryReceipt — gateway-side ruling on whether an action
+// fell inside, outside, or at the edge of the agent's delegated scope
+// ══════════════════════════════════════════════════════════════════
+// Spec: specs/full-accountability-mvp.md
+// Pairs with ActionReceipt: the action is what the agent did; the
+// authority-boundary receipt is the evaluator's call on whether that
+// action was authorized. Different signers, distinct trust roles.
+// ══════════════════════════════════════════════════════════════════
+export {};
+//# sourceMappingURL=authority-boundary.js.map

package/dist/src/v2/accountability/types/authority-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-boundary.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/authority-boundary.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,sEAAsE;AACtE,sEAAsE;AACtE,qEAAqE;AACrE,yCAAyC;AACzC,kEAAkE;AAClE,qEAAqE;AACrE,kEAAkE;AAClE,qEAAqE"}

package/dist/src/v2/accountability/types/base.d.ts

@@ -0,0 +1,35 @@
+/**
+ * @fileoverview Accountability primitive foundation.
+ *
+ * Verbal confessions, not brain scans. APS receipts are signed declarations
+ * about what the system observed, not causal proofs of agent cognition.
+ * Every accountability receipt MUST declare its scope_of_claim explicitly.
+ */
+export type CaptureMode = 'gateway_observed' | 'runtime_attested' | 'self_attested' | 'partial' | 'unknown';
+export type Completeness = 'complete' | 'partial' | 'best_effort';
+export interface ScopeOfClaim {
+    /** 1-2 sentences: what this receipt claims cryptographically. */
+    asserts: string;
+    /** Explicit list of what this receipt does NOT prove. */
+    does_not_assert: string[];
+    capture_mode: CaptureMode;
+    completeness: Completeness;
+    /** True when the agent itself signed without independent attestation.
+     *  Self-attested receipts have lower evidentiary weight. */
+    self_attested: boolean;
+}
+export interface AccountabilityReceiptBase {
+    /** e.g. 'aps:action:v1', 'aps:authority_boundary:v1' */
+    claim_type: string;
+    /** sha256(jcs(this excluding signature)) — content-addressed identity */
+    receipt_id: string;
+    /** ISO 8601 UTC with milliseconds, ending Z */
+    timestamp: string;
+    /** Ed25519 hex pubkey of signer */
+    signer_did: string;
+    /** Required honest scope declaration */
+    scope_of_claim: ScopeOfClaim;
+    /** Ed25519 signature over JCS(this excluding signature), hex */
+    signature: string;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/src/v2/accountability/types/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/base.ts"],"names":[],"mappings":"AACA;;;;;;GAMG;AAEH,MAAM,MAAM,WAAW,GACnB,kBAAkB,GAClB,kBAAkB,GAClB,eAAe,GACf,SAAS,GACT,SAAS,CAAA;AAEb,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,CAAA;AAEjE,MAAM,WAAW,YAAY;IAC3B,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAA;IACf,yDAAyD;IACzD,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,YAAY,EAAE,WAAW,CAAA;IACzB,YAAY,EAAE,YAAY,CAAA;IAC1B;gEAC4D;IAC5D,aAAa,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAA;IAClB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAA;IAClB,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAA;IAClB,wCAAwC;IACxC,cAAc,EAAE,YAAY,CAAA;IAC5B,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAA;CAClB"}

package/dist/src/v2/accountability/types/base.js

@@ -0,0 +1,10 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+/**
+ * @fileoverview Accountability primitive foundation.
+ *
+ * Verbal confessions, not brain scans. APS receipts are signed declarations
+ * about what the system observed, not causal proofs of agent cognition.
+ * Every accountability receipt MUST declare its scope_of_claim explicitly.
+ */
+export {};
+//# sourceMappingURL=base.js.map

package/dist/src/v2/accountability/types/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/base.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E;;;;;;GAMG"}

package/dist/src/v2/accountability/types/bundle.d.ts

@@ -0,0 +1,23 @@
+import type { AccountabilityReceiptBase } from './base.js';
+export interface APSBundle extends AccountabilityReceiptBase {
+    claim_type: 'aps:bundle:v1';
+    bundler_did: string;
+    /** ISO 8601 UTC ms + Z, inclusive. */
+    period_start: string;
+    /** ISO 8601 UTC ms + Z, exclusive. */
+    period_end: string;
+    /** Optional list of subject DIDs covered. */
+    subject_scope?: string[];
+    /** sha256 hex of balanced binary tree over sorted receipt_ids. */
+    merkle_root: string;
+    /** Exact count of bundled receipts. */
+    receipt_count: number;
+    /** e.g. ['aps:profile/mva-v1']. */
+    profile_conformance: string[];
+}
+/** Lightweight reference for tree construction. */
+export interface BundledReceiptRef {
+    receipt_id: string;
+    claim_type: string;
+}
+//# sourceMappingURL=bundle.d.ts.map

package/dist/src/v2/accountability/types/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/bundle.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAE1D,MAAM,WAAW,SAAU,SAAQ,yBAAyB;IAC1D,UAAU,EAAE,eAAe,CAAA;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,sCAAsC;IACtC,YAAY,EAAE,MAAM,CAAA;IACpB,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,kEAAkE;IAClE,WAAW,EAAE,MAAM,CAAA;IACnB,uCAAuC;IACvC,aAAa,EAAE,MAAM,CAAA;IACrB,mCAAmC;IACnC,mBAAmB,EAAE,MAAM,EAAE,CAAA;CAC9B;AAED,mDAAmD;AACnD,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CACnB"}

package/dist/src/v2/accountability/types/bundle.js

@@ -0,0 +1,12 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// APSBundle — signed aggregation envelope over a set of receipts
+// ══════════════════════════════════════════════════════════════════
+// Spec: specs/full-accountability-mvp.md
+// A bundler signs a Merkle-rooted commitment over a batch of receipt
+// ids in a closed time window. Survives cryptographic erasure of the
+// underlying content: merkle_root and receipt_count remain verifiable
+// even when the leaves are destroyed.
+// ══════════════════════════════════════════════════════════════════
+export {};
+//# sourceMappingURL=bundle.js.map

package/dist/src/v2/accountability/types/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/bundle.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,iEAAiE;AACjE,qEAAqE;AACrE,yCAAyC;AACzC,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,sCAAsC;AACtC,qEAAqE"}

package/dist/src/v2/accountability/types/contestability.d.ts

@@ -0,0 +1,31 @@
+import type { AccountabilityReceiptBase } from './base.js';
+export type StandingBasis = 'data_subject' | 'third_party' | 'regulator' | 'court' | 'internal_audit' | 'insurer' | 'principal';
+export type RequestedRemedy = 'rollback' | 'review' | 'explanation' | 'compensation' | 'erasure' | 'modification';
+export type ContestStatus = 'filed' | 'under_review' | 'upheld' | 'rejected' | 'remedied' | 'expired' | 'abandoned';
+export interface ContestabilityControllerResponse {
+    status: ContestStatus;
+    /** ISO 8601 UTC with milliseconds, ending Z. */
+    responded_at: string;
+    responder_did: string;
+    /** Ed25519 hex over canonicalizeJCS(receipt with response_signature emptied). */
+    response_signature: string;
+    response_detail?: string;
+}
+export interface ContestabilityContestant {
+    /** Optional — pseudonymous filings are allowed. At least one of did
+     *  or pseudonym_hash MUST be present. */
+    did?: string;
+    /** sha256 hex when the contestant prefers a pseudonym. */
+    pseudonym_hash?: string;
+    standing_basis: StandingBasis;
+}
+export interface ContestabilityReceipt extends AccountabilityReceiptBase {
+    claim_type: 'aps:contestability:v1';
+    contestant: ContestabilityContestant;
+    /** References the contested ActionReceipt.receipt_id. */
+    action_id: string;
+    grounds: string;
+    requested_remedy: RequestedRemedy;
+    controller_response?: ContestabilityControllerResponse;
+}
+//# sourceMappingURL=contestability.d.ts.map

package/dist/src/v2/accountability/types/contestability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/contestability.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAE1D,MAAM,MAAM,aAAa,GACrB,cAAc,GACd,aAAa,GACb,WAAW,GACX,OAAO,GACP,gBAAgB,GAChB,SAAS,GACT,WAAW,CAAA;AAEf,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,QAAQ,GACR,aAAa,GACb,cAAc,GACd,SAAS,GACT,cAAc,CAAA;AAElB,MAAM,MAAM,aAAa,GACrB,OAAO,GACP,cAAc,GACd,QAAQ,GACR,UAAU,GACV,UAAU,GACV,SAAS,GACT,WAAW,CAAA;AAEf,MAAM,WAAW,gCAAgC;IAC/C,MAAM,EAAE,aAAa,CAAA;IACrB,gDAAgD;IAChD,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,iFAAiF;IACjF,kBAAkB,EAAE,MAAM,CAAA;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC;6CACyC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,aAAa,CAAA;CAC9B;AAED,MAAM,WAAW,qBAAsB,SAAQ,yBAAyB;IACtE,UAAU,EAAE,uBAAuB,CAAA;IACnC,UAAU,EAAE,wBAAwB,CAAA;IACpC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,gBAAgB,EAAE,eAAe,CAAA;IACjC,mBAAmB,CAAC,EAAE,gCAAgC,CAAA;CACvD"}

package/dist/src/v2/accountability/types/contestability.js

@@ -0,0 +1,18 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// ContestabilityReceipt — declares a challenge filed against an action
+// ══════════════════════════════════════════════════════════════════
+// Spec: specs/full-accountability-mvp.md
+// The wedge primitive: every observability surface in the market today
+// is operator-facing. ContestabilityReceipt is the first cryptographic
+// format designed for STANDING — the right of an affected party to
+// challenge an automated decision and force a tracked response.
+//
+// The contestant signs a receipt about the FILING. If a controller
+// later responds, the response is appended with an INDEPENDENT
+// signature inside controller_response — the contestants outer
+// signature does not cover that response, so the response cannot
+// retroactively rewrite the original claim.
+// ══════════════════════════════════════════════════════════════════
+export {};
+//# sourceMappingURL=contestability.js.map

package/dist/src/v2/accountability/types/contestability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/contestability.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,uEAAuE;AACvE,qEAAqE;AACrE,yCAAyC;AACzC,uEAAuE;AACvE,uEAAuE;AACvE,mEAAmE;AACnE,gEAAgE;AAChE,EAAE;AACF,mEAAmE;AACnE,+DAA+D;AAC/D,+DAA+D;AAC/D,iEAAiE;AACjE,4CAA4C;AAC5C,qEAAqE"}

package/dist/src/v2/accountability/types/custody.d.ts

@@ -0,0 +1,18 @@
+import type { AccountabilityReceiptBase } from './base.js';
+export type CustodyEventType = 'created' | 'sealed' | 'transferred' | 'disclosed' | 'redacted' | 'erased' | 'expired' | 'verified';
+export type CustodyPurpose = 'internal_audit' | 'regulator_disclosure' | 'subject_access' | 'litigation_discovery' | 'vendor_handoff' | 'archival' | 'incident_response';
+export interface CustodyReceipt extends AccountabilityReceiptBase {
+    claim_type: 'aps:custody:v1';
+    custodian_did: string;
+    event_type: CustodyEventType;
+    subject_receipt_batch: {
+        merkle_root: string;
+        count: number;
+    };
+    /** Chains custody events. Set to the previous CustodyReceipt.receipt_id. */
+    previous_custody_id?: string;
+    /** Receiving custodian DID. Required when event_type === 'transferred'. */
+    next_custodian_did?: string;
+    purpose: CustodyPurpose;
+}
+//# sourceMappingURL=custody.d.ts.map

package/dist/src/v2/accountability/types/custody.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/custody.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAA;AAE1D,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,QAAQ,GACR,aAAa,GACb,WAAW,GACX,UAAU,GACV,QAAQ,GACR,SAAS,GACT,UAAU,CAAA;AAEd,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,sBAAsB,GACtB,gBAAgB,GAChB,sBAAsB,GACtB,gBAAgB,GAChB,UAAU,GACV,mBAAmB,CAAA;AAEvB,MAAM,WAAW,cAAe,SAAQ,yBAAyB;IAC/D,UAAU,EAAE,gBAAgB,CAAA;IAC5B,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,gBAAgB,CAAA;IAC5B,qBAAqB,EAAE;QACrB,WAAW,EAAE,MAAM,CAAA;QACnB,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;IACD,4EAA4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,OAAO,EAAE,cAAc,CAAA;CACxB"}

package/dist/src/v2/accountability/types/custody.js

@@ -0,0 +1,14 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// CustodyReceipt — declares a custody event over a batch of receipts
+// ══════════════════════════════════════════════════════════════════
+// Spec: specs/full-accountability-mvp.md
+// Verbal confession: this receipt asserts WHO held WHAT receipts at
+// WHAT moment, for WHAT purpose. It does not assert the custodians
+// claim is factually accurate; the protocol records the claim, truth
+// is rebuttable. The chain remains verifiable across erasure events
+// (cryptographic-erasure pattern: merkle_root and count are preserved
+// even when the underlying content is destroyed).
+// ══════════════════════════════════════════════════════════════════
+export {};
+//# sourceMappingURL=custody.js.map

package/dist/src/v2/accountability/types/custody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/custody.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,yCAAyC;AACzC,oEAAoE;AACpE,mEAAmE;AACnE,qEAAqE;AACrE,oEAAoE;AACpE,sEAAsE;AACtE,kDAAkD;AAClD,qEAAqE"}

package/dist/src/v2/accountability/types/index.d.ts

@@ -0,0 +1,7 @@
+export * from './base.js';
+export * from './action.js';
+export * from './authority-boundary.js';
+export * from './custody.js';
+export * from './contestability.js';
+export * from './bundle.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/v2/accountability/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,yBAAyB,CAAA;AACvC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,aAAa,CAAA"}

package/dist/src/v2/accountability/types/index.js

@@ -0,0 +1,7 @@
+export * from './base.js';
+export * from './action.js';
+export * from './authority-boundary.js';
+export * from './custody.js';
+export * from './contestability.js';
+export * from './bundle.js';
+//# sourceMappingURL=index.js.map

package/dist/src/v2/accountability/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,aAAa,CAAA;AAC3B,cAAc,yBAAyB,CAAA;AACvC,cAAc,cAAc,CAAA;AAC5B,cAAc,qBAAqB,CAAA;AACnC,cAAc,aAAa,CAAA"}

package/dist/src/v2/accountability/verify/action.d.ts

@@ -0,0 +1,8 @@
+import type { ActionReceipt } from '../types/action.js';
+export type ActionReceiptVerifyReason = 'INVALID_CLAIM_TYPE' | 'RECEIPT_ID_MISMATCH' | 'SIGNATURE_INVALID';
+export interface ActionReceiptVerifyResult {
+    valid: boolean;
+    reason?: ActionReceiptVerifyReason;
+}
+export declare function verifyActionReceipt(receipt: ActionReceipt): ActionReceiptVerifyResult;
+//# sourceMappingURL=action.d.ts.map