agent-passport-system 2.3.0-alpha → 2.5.0-alpha

package/dist/src/v2/accountability/verify/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/action.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD,MAAM,MAAM,yBAAyB,GACjC,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,CAAA;AAEvB,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,yBAAyB,CAAA;CACnC;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,yBAAyB,CAsBrF"}

package/dist/src/v2/accountability/verify/action.js

@@ -0,0 +1,33 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// ActionReceipt — verification
+// ══════════════════════════════════════════════════════════════════
+// Three failure modes:
+//   INVALID_CLAIM_TYPE  — receipt is not aps:action:v1
+//   RECEIPT_ID_MISMATCH — receipt_id does not equal sha256(JCS(empty-id form))
+//   SIGNATURE_INVALID   — Ed25519 signature does not verify under signer_did
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { verify } from '../../../crypto/keys.js';
+export function verifyActionReceipt(receipt) {
+    if (receipt.claim_type !== 'aps:action:v1') {
+        return { valid: false, reason: 'INVALID_CLAIM_TYPE' };
+    }
+    // Re-derive receipt_id over the empty-id, empty-signature form.
+    const draftForId = { ...receipt, receipt_id: '', signature: '' };
+    const expectedReceiptId = createHash('sha256')
+        .update(canonicalizeJCS(draftForId), 'utf8')
+        .digest('hex');
+    if (receipt.receipt_id !== expectedReceiptId) {
+        return { valid: false, reason: 'RECEIPT_ID_MISMATCH' };
+    }
+    // Verify signature over the populated-id, empty-signature form.
+    const draftForSig = { ...receipt, signature: '' };
+    const ok = verify(canonicalizeJCS(draftForSig), receipt.signature, receipt.signer_did);
+    if (!ok) {
+        return { valid: false, reason: 'SIGNATURE_INVALID' };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=action.js.map

package/dist/src/v2/accountability/verify/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/action.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,+BAA+B;AAC/B,qEAAqE;AACrE,uBAAuB;AACvB,uDAAuD;AACvD,+EAA+E;AAC/E,6EAA6E;AAC7E,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAahD,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,IAAI,OAAO,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IAED,gEAAgE;IAChE,MAAM,UAAU,GAAkB,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC/E,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC3C,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IAED,gEAAgE;IAChE,MAAM,WAAW,GAAkB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAChE,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IACtF,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/src/v2/accountability/verify/authority-boundary.d.ts

@@ -0,0 +1,8 @@
+import type { AuthorityBoundaryReceipt } from '../types/authority-boundary.js';
+export type AuthorityBoundaryReceiptVerifyReason = 'INVALID_CLAIM_TYPE' | 'RECEIPT_ID_MISMATCH' | 'SIGNATURE_INVALID';
+export interface AuthorityBoundaryReceiptVerifyResult {
+    valid: boolean;
+    reason?: AuthorityBoundaryReceiptVerifyReason;
+}
+export declare function verifyAuthorityBoundaryReceipt(receipt: AuthorityBoundaryReceipt): AuthorityBoundaryReceiptVerifyResult;
+//# sourceMappingURL=authority-boundary.d.ts.map

package/dist/src/v2/accountability/verify/authority-boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-boundary.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/authority-boundary.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAA;AAE9E,MAAM,MAAM,oCAAoC,GAC5C,oBAAoB,GACpB,qBAAqB,GACrB,mBAAmB,CAAA;AAEvB,MAAM,WAAW,oCAAoC;IACnD,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,oCAAoC,CAAA;CAC9C;AAED,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,wBAAwB,GAChC,oCAAoC,CAoBtC"}

package/dist/src/v2/accountability/verify/authority-boundary.js

@@ -0,0 +1,26 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// AuthorityBoundaryReceipt — verification
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { verify } from '../../../crypto/keys.js';
+export function verifyAuthorityBoundaryReceipt(receipt) {
+    if (receipt.claim_type !== 'aps:authority_boundary:v1') {
+        return { valid: false, reason: 'INVALID_CLAIM_TYPE' };
+    }
+    const draftForId = { ...receipt, receipt_id: '', signature: '' };
+    const expectedReceiptId = createHash('sha256')
+        .update(canonicalizeJCS(draftForId), 'utf8')
+        .digest('hex');
+    if (receipt.receipt_id !== expectedReceiptId) {
+        return { valid: false, reason: 'RECEIPT_ID_MISMATCH' };
+    }
+    const draftForSig = { ...receipt, signature: '' };
+    const ok = verify(canonicalizeJCS(draftForSig), receipt.signature, receipt.signer_did);
+    if (!ok) {
+        return { valid: false, reason: 'SIGNATURE_INVALID' };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=authority-boundary.js.map

package/dist/src/v2/accountability/verify/authority-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-boundary.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/authority-boundary.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,0CAA0C;AAC1C,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAahD,MAAM,UAAU,8BAA8B,CAC5C,OAAiC;IAEjC,IAAI,OAAO,CAAC,UAAU,KAAK,2BAA2B,EAAE,CAAC;QACvD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IAED,MAAM,UAAU,GAA6B,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC1F,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC3C,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IAED,MAAM,WAAW,GAA6B,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC3E,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IACtF,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/src/v2/accountability/verify/bundle.d.ts

@@ -0,0 +1,8 @@
+import type { APSBundle } from '../types/bundle.js';
+export type APSBundleVerifyReason = 'INVALID_CLAIM_TYPE' | 'INVALID_MERKLE_ROOT' | 'INVALID_RECEIPT_COUNT' | 'RECEIPT_ID_MISMATCH' | 'SIGNATURE_INVALID';
+export interface APSBundleVerifyResult {
+    valid: boolean;
+    reason?: APSBundleVerifyReason;
+}
+export declare function verifyAPSBundle(bundle: APSBundle): APSBundleVerifyResult;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/src/v2/accountability/verify/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/bundle.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAEnD,MAAM,MAAM,qBAAqB,GAC7B,oBAAoB,GACpB,qBAAqB,GACrB,uBAAuB,GACvB,qBAAqB,GACrB,mBAAmB,CAAA;AAEvB,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,qBAAqB,CAAA;CAC/B;AAMD,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,qBAAqB,CAsBxE"}

package/dist/src/v2/accountability/verify/bundle.js

@@ -0,0 +1,31 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// APSBundle — verification
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { verify as edVerifyHex } from '../../../crypto/keys.js';
+function sha256Hex(input) {
+    return createHash('sha256').update(input, 'utf-8').digest('hex');
+}
+export function verifyAPSBundle(bundle) {
+    if (bundle.claim_type !== 'aps:bundle:v1') {
+        return { valid: false, reason: 'INVALID_CLAIM_TYPE' };
+    }
+    if (typeof bundle.merkle_root !== 'string' || bundle.merkle_root.length !== 64) {
+        return { valid: false, reason: 'INVALID_MERKLE_ROOT' };
+    }
+    if (!Number.isInteger(bundle.receipt_count) || bundle.receipt_count < 0) {
+        return { valid: false, reason: 'INVALID_RECEIPT_COUNT' };
+    }
+    const idCheck = sha256Hex(canonicalizeJCS({ ...bundle, receipt_id: '', signature: undefined }));
+    if (idCheck !== bundle.receipt_id) {
+        return { valid: false, reason: 'RECEIPT_ID_MISMATCH' };
+    }
+    const sigPayload = canonicalizeJCS({ ...bundle, signature: undefined });
+    if (!edVerifyHex(sigPayload, bundle.signature, bundle.signer_did)) {
+        return { valid: false, reason: 'SIGNATURE_INVALID' };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=bundle.js.map

package/dist/src/v2/accountability/verify/bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/bundle.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,2BAA2B;AAC3B,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAe/D,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,IAAI,MAAM,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAA;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IAC/F,IAAI,OAAO,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;IACvE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/src/v2/accountability/verify/contestability.d.ts

@@ -0,0 +1,8 @@
+import type { ContestabilityReceipt } from '../types/contestability.js';
+export type ContestabilityReceiptVerifyReason = 'INVALID_CLAIM_TYPE' | 'MISSING_CONTESTANT_IDENTITY' | 'INVALID_STANDING_BASIS' | 'INVALID_REMEDY' | 'INVALID_CONTEST_STATUS' | 'RECEIPT_ID_MISMATCH' | 'SIGNATURE_INVALID' | 'CONTROLLER_SIGNATURE_INVALID';
+export interface ContestabilityReceiptVerifyResult {
+    valid: boolean;
+    reason?: ContestabilityReceiptVerifyReason;
+}
+export declare function verifyContestabilityReceipt(receipt: ContestabilityReceipt): ContestabilityReceiptVerifyResult;
+//# sourceMappingURL=contestability.d.ts.map

package/dist/src/v2/accountability/verify/contestability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/contestability.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACV,qBAAqB,EAKtB,MAAM,4BAA4B,CAAA;AAEnC,MAAM,MAAM,iCAAiC,GACzC,oBAAoB,GACpB,6BAA6B,GAC7B,wBAAwB,GACxB,gBAAgB,GAChB,wBAAwB,GACxB,qBAAqB,GACrB,mBAAmB,GACnB,8BAA8B,CAAA;AAElC,MAAM,WAAW,iCAAiC;IAChD,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,iCAAiC,CAAA;CAC3C;AAsCD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,qBAAqB,GAC7B,iCAAiC,CAsEnC"}

package/dist/src/v2/accountability/verify/contestability.js

@@ -0,0 +1,107 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// ContestabilityReceipt — verification
+// ══════════════════════════════════════════════════════════════════
+// Failure modes:
+//   INVALID_CLAIM_TYPE          — claim_type is not 'aps:contestability:v1'
+//   MISSING_CONTESTANT_IDENTITY — contestant has neither did nor pseudonym_hash
+//   INVALID_STANDING_BASIS      — outside the closed taxonomy
+//   INVALID_REMEDY              — outside the closed taxonomy
+//   INVALID_CONTEST_STATUS      — outside the closed taxonomy (response only)
+//   RECEIPT_ID_MISMATCH         — receipt_id does not equal sha256(JCS(filing form))
+//   SIGNATURE_INVALID           — outer (contestant) signature does not verify
+//   CONTROLLER_SIGNATURE_INVALID — response_signature does not verify
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { verify } from '../../../crypto/keys.js';
+const VALID_STANDING = [
+    'data_subject',
+    'third_party',
+    'regulator',
+    'court',
+    'internal_audit',
+    'insurer',
+    'principal',
+];
+const VALID_REMEDY = [
+    'rollback',
+    'review',
+    'explanation',
+    'compensation',
+    'erasure',
+    'modification',
+];
+const VALID_STATUS = [
+    'filed',
+    'under_review',
+    'upheld',
+    'rejected',
+    'remedied',
+    'expired',
+    'abandoned',
+];
+/** Strip controller_response to recover the receipt as the contestant
+ *  originally signed it. */
+function withoutControllerResponse(receipt) {
+    const { controller_response: _ignored, ...rest } = receipt;
+    return rest;
+}
+export function verifyContestabilityReceipt(receipt) {
+    if (receipt.claim_type !== 'aps:contestability:v1') {
+        return { valid: false, reason: 'INVALID_CLAIM_TYPE' };
+    }
+    const hasDid = receipt.contestant.did !== undefined && receipt.contestant.did !== '';
+    const hasPseudo = receipt.contestant.pseudonym_hash !== undefined &&
+        receipt.contestant.pseudonym_hash !== '';
+    if (!hasDid && !hasPseudo) {
+        return { valid: false, reason: 'MISSING_CONTESTANT_IDENTITY' };
+    }
+    if (!VALID_STANDING.includes(receipt.contestant.standing_basis)) {
+        return { valid: false, reason: 'INVALID_STANDING_BASIS' };
+    }
+    if (!VALID_REMEDY.includes(receipt.requested_remedy)) {
+        return { valid: false, reason: 'INVALID_REMEDY' };
+    }
+    if (receipt.controller_response !== undefined &&
+        !VALID_STATUS.includes(receipt.controller_response.status)) {
+        return { valid: false, reason: 'INVALID_CONTEST_STATUS' };
+    }
+    // Re-derive receipt_id over the filing form: empty receipt_id, empty
+    // signature, no controller_response.
+    const filingDraft = withoutControllerResponse({
+        ...receipt,
+        receipt_id: '',
+        signature: '',
+    });
+    const expectedReceiptId = createHash('sha256')
+        .update(canonicalizeJCS(filingDraft), 'utf8')
+        .digest('hex');
+    if (receipt.receipt_id !== expectedReceiptId) {
+        return { valid: false, reason: 'RECEIPT_ID_MISMATCH' };
+    }
+    // Verify outer (contestant) signature over the filing form with
+    // populated receipt_id and empty signature.
+    const sigDraft = withoutControllerResponse({ ...receipt, signature: '' });
+    const outerOk = verify(canonicalizeJCS(sigDraft), receipt.signature, receipt.signer_did);
+    if (!outerOk) {
+        return { valid: false, reason: 'SIGNATURE_INVALID' };
+    }
+    // Verify controller response signature, if present.
+    if (receipt.controller_response !== undefined) {
+        const respDraft = {
+            ...receipt.controller_response,
+            response_signature: '',
+        };
+        const fullDraft = {
+            ...receipt,
+            controller_response: respDraft,
+        };
+        const respOk = verify(canonicalizeJCS(fullDraft), receipt.controller_response.response_signature, receipt.controller_response.responder_did);
+        if (!respOk) {
+            return { valid: false, reason: 'CONTROLLER_SIGNATURE_INVALID' };
+        }
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=contestability.js.map

package/dist/src/v2/accountability/verify/contestability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/contestability.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,uCAAuC;AACvC,qEAAqE;AACrE,iBAAiB;AACjB,4EAA4E;AAC5E,gFAAgF;AAChF,8DAA8D;AAC9D,8DAA8D;AAC9D,8EAA8E;AAC9E,qFAAqF;AACrF,+EAA+E;AAC/E,sEAAsE;AACtE,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAwBhD,MAAM,cAAc,GAA6B;IAC/C,cAAc;IACd,aAAa;IACb,WAAW;IACX,OAAO;IACP,gBAAgB;IAChB,SAAS;IACT,WAAW;CACZ,CAAA;AAED,MAAM,YAAY,GAA+B;IAC/C,UAAU;IACV,QAAQ;IACR,aAAa;IACb,cAAc;IACd,SAAS;IACT,cAAc;CACf,CAAA;AAED,MAAM,YAAY,GAA6B;IAC7C,OAAO;IACP,cAAc;IACd,QAAQ;IACR,UAAU;IACV,UAAU;IACV,SAAS;IACT,WAAW;CACZ,CAAA;AAED;4BAC4B;AAC5B,SAAS,yBAAyB,CAAC,OAA8B;IAC/D,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;IAC1D,OAAO,IAA6B,CAAA;AACtC,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAA8B;IAE9B,IAAI,OAAO,CAAC,UAAU,KAAK,uBAAuB,EAAE,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IAED,MAAM,MAAM,GACV,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,CAAA;IACvE,MAAM,SAAS,GACb,OAAO,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS;QAC/C,OAAO,CAAC,UAAU,CAAC,cAAc,KAAK,EAAE,CAAA;IAC1C,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAA;IAChE,CAAC;IAED,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAA;IAC3D,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAA;IACnD,CAAC;IACD,IACE,OAAO,CAAC,mBAAmB,KAAK,SAAS;QACzC,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAC1D,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAA;IAC3D,CAAC;IAED,qEAAqE;IACrE,qCAAqC;IACrC,MAAM,WAAW,GAAG,yBAAyB,CAAC;QAC5C,GAAG,OAAO;QACV,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,EAAE;KACd,CAAC,CAAA;IACF,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC3C,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;SAC5C,MAAM,CAAC,KAAK,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IAED,gEAAgE;IAChE,4CAA4C;IAC5C,MAAM,QAAQ,GAAG,yBAAyB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAA;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IACxF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACtD,CAAC;IAED,oDAAoD;IACpD,IAAI,OAAO,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAqC;YAClD,GAAG,OAAO,CAAC,mBAAmB;YAC9B,kBAAkB,EAAE,EAAE;SACvB,CAAA;QACD,MAAM,SAAS,GAA0B;YACvC,GAAG,OAAO;YACV,mBAAmB,EAAE,SAAS;SAC/B,CAAA;QACD,MAAM,MAAM,GAAG,MAAM,CACnB,eAAe,CAAC,SAAS,CAAC,EAC1B,OAAO,CAAC,mBAAmB,CAAC,kBAAkB,EAC9C,OAAO,CAAC,mBAAmB,CAAC,aAAa,CAC1C,CAAA;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAA;QACjE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/src/v2/accountability/verify/custody.d.ts

@@ -0,0 +1,8 @@
+import type { CustodyReceipt } from '../types/custody.js';
+export type CustodyReceiptVerifyReason = 'INVALID_CLAIM_TYPE' | 'INVALID_EVENT_TYPE' | 'INVALID_PURPOSE' | 'RECEIPT_ID_MISMATCH' | 'SIGNATURE_INVALID';
+export interface CustodyReceiptVerifyResult {
+    valid: boolean;
+    reason?: CustodyReceiptVerifyReason;
+}
+export declare function verifyCustodyReceipt(receipt: CustodyReceipt): CustodyReceiptVerifyResult;
+//# sourceMappingURL=custody.d.ts.map

package/dist/src/v2/accountability/verify/custody.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/custody.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,cAAc,EAGf,MAAM,qBAAqB,CAAA;AAE5B,MAAM,MAAM,0BAA0B,GAClC,oBAAoB,GACpB,oBAAoB,GACpB,iBAAiB,GACjB,qBAAqB,GACrB,mBAAmB,CAAA;AAEvB,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,0BAA0B,CAAA;CACpC;AAuBD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,0BAA0B,CA0BxF"}

package/dist/src/v2/accountability/verify/custody.js

@@ -0,0 +1,58 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// CustodyReceipt — verification
+// ══════════════════════════════════════════════════════════════════
+// Five failure modes:
+//   INVALID_CLAIM_TYPE   — claim_type is not 'aps:custody:v1'
+//   INVALID_EVENT_TYPE   — event_type is outside the closed taxonomy
+//   INVALID_PURPOSE      — purpose is outside the closed taxonomy
+//   RECEIPT_ID_MISMATCH  — receipt_id does not equal sha256(JCS(empty-id form))
+//   SIGNATURE_INVALID    — Ed25519 signature does not verify under signer_did
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { verify } from '../../../crypto/keys.js';
+const VALID_EVENT_TYPES = [
+    'created',
+    'sealed',
+    'transferred',
+    'disclosed',
+    'redacted',
+    'erased',
+    'expired',
+    'verified',
+];
+const VALID_PURPOSES = [
+    'internal_audit',
+    'regulator_disclosure',
+    'subject_access',
+    'litigation_discovery',
+    'vendor_handoff',
+    'archival',
+    'incident_response',
+];
+export function verifyCustodyReceipt(receipt) {
+    if (receipt.claim_type !== 'aps:custody:v1') {
+        return { valid: false, reason: 'INVALID_CLAIM_TYPE' };
+    }
+    if (!VALID_EVENT_TYPES.includes(receipt.event_type)) {
+        return { valid: false, reason: 'INVALID_EVENT_TYPE' };
+    }
+    if (!VALID_PURPOSES.includes(receipt.purpose)) {
+        return { valid: false, reason: 'INVALID_PURPOSE' };
+    }
+    const draftForId = { ...receipt, receipt_id: '', signature: '' };
+    const expectedReceiptId = createHash('sha256')
+        .update(canonicalizeJCS(draftForId), 'utf8')
+        .digest('hex');
+    if (receipt.receipt_id !== expectedReceiptId) {
+        return { valid: false, reason: 'RECEIPT_ID_MISMATCH' };
+    }
+    const draftForSig = { ...receipt, signature: '' };
+    const ok = verify(canonicalizeJCS(draftForSig), receipt.signature, receipt.signer_did);
+    if (!ok) {
+        return { valid: false, reason: 'SIGNATURE_INVALID' };
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=custody.js.map

package/dist/src/v2/accountability/verify/custody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/custody.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,gCAAgC;AAChC,qEAAqE;AACrE,sBAAsB;AACtB,8DAA8D;AAC9D,qEAAqE;AACrE,kEAAkE;AAClE,gFAAgF;AAChF,8EAA8E;AAC9E,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAmBhD,MAAM,iBAAiB,GAAgC;IACrD,SAAS;IACT,QAAQ;IACR,aAAa;IACb,WAAW;IACX,UAAU;IACV,QAAQ;IACR,SAAS;IACT,UAAU;CACX,CAAA;AAED,MAAM,cAAc,GAA8B;IAChD,gBAAgB;IAChB,sBAAsB;IACtB,gBAAgB;IAChB,sBAAsB;IACtB,gBAAgB;IAChB,UAAU;IACV,mBAAmB;CACpB,CAAA;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAuB;IAC1D,IAAI,OAAO,CAAC,UAAU,KAAK,gBAAgB,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IACD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;IACpD,CAAC;IAED,MAAM,UAAU,GAAmB,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAChF,MAAM,iBAAiB,GAAG,UAAU,CAAC,QAAQ,CAAC;SAC3C,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;SAC3C,MAAM,CAAC,KAAK,CAAC,CAAA;IAChB,IAAI,OAAO,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;QAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IAED,MAAM,WAAW,GAAmB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IACjE,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;IACtF,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/src/v2/index.d.ts

@@ -41,4 +41,6 @@ export { aggregateAttributionPrimitives, buildContributorMerklePath, buildContri
 export type { AggregateOptions as AttributionSettlementAggregateOptions, ContributorQueryAxisBody as AttributionContributorQueryAxisBody, ContributorQueryResponse as AttributionContributorQueryResponse, SettlementAxisIndex as AttributionSettlementAxisIndex, SettlementContributor as AttributionSettlementContributor, SettlementPeriod as AttributionSettlementPeriod, SettlementRecord as AttributionSettlementRecord, SettlementResidualBucket as AttributionSettlementResidualBucket, SettlementVerifyReason as AttributionSettlementVerifyReason, SettlementVerifyResult as AttributionSettlementVerifyResult, VerifySettlementOptions as AttributionVerifySettlementOptions, } from './attribution-settlement/index.js';
 export { ATTRIBUTION_AXIS_TAGS, DEFAULT_MIN_WEIGHT, aggregateComputeAxis, aggregateDataAxis, aggregateProtocolAxis, assertCanonicalTimestamp, buildMerkleFrame, canonicalTimestamp as attributionCanonicalTimestamp, canonicalHashHex as attributionCanonicalHashHex, checkProjectionConsistency, computeAttributionActionRef, constructAttributionPrimitive, envelopeBytes, hashAxisLeaf, hashNode, normalizeAxes, orderGovernanceAxis, projectAllAxes, projectAttribution, projectionPath, projectionDataAsC, projectionDataAsD, projectionDataAsG, projectionDataAsP, reconstructRoot, resignAttributionPrimitive, sortComputeAxis, sortDataAxis, sortProtocolAxis, toWeightString, verifyAttributionPrimitive, verifyAttributionProjection, } from './attribution-primitive/index.js';
 export type { AggregateOptions, AggregationResult, AttributionAction, AttributionAxes, AttributionAxisTag, AttributionConsistencyResult, AttributionEnvelope, AttributionPrimitive, AttributionProjection, AttributionVerifyResult, ComputeAxisEntry, ComputeAxisItem, ConstructAttributionParams, DataAxisEntry, DataAxisItem, GovernanceAxisEntry, MerkleFrame, ProtocolAxisEntry, ProtocolAxisItem, ResidualBucket, } from './attribution-primitive/index.js';
+export { createActionReceipt, createAuthorityBoundaryReceipt, createCustodyReceipt, createContestabilityReceipt, attachControllerResponse, createAPSBundle, computeMerkleRoot, verifyActionReceipt, verifyAuthorityBoundaryReceipt, verifyCustodyReceipt, verifyContestabilityReceipt, verifyAPSBundle, } from './accountability/index.js';
+export type { AccountabilityReceiptBase, CaptureMode, Completeness, ScopeOfClaim, ActionReceipt, SideEffectClass, AuthorityBoundaryReceipt, BoundaryResult, CustodyReceipt, CustodyEventType, CustodyPurpose, ContestabilityReceipt, StandingBasis, RequestedRemedy, ContestStatus, APSBundle, BundledReceiptRef, } from './accountability/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/v2/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/v2/index.ts"],"names":[],"mappings":"AACA;;;GAGG;AAGH,YAAY,EACV,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAClE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,cAAc,EACjE,SAAS,EAAE,qBAAqB,EAAE,UAAU,EAAE,WAAW,EACzD,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EACnD,kBAAkB,EAAE,0BAA0B,EAC9C,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAC/C,gBAAgB,EAAE,eAAe,EACjC,mBAAmB,EAAE,qBAAqB,EAC1C,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAC1C,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EACpE,iBAAiB,EAAE,kBAAkB,EAAE,aAAa,EACpD,qBAAqB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAChF,kBAAkB,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EACtE,eAAe,EAAE,uBAAuB,EACxC,oBAAoB,EAAE,mBAAmB,EACzC,cAAc,EAAE,mBAAmB,GACpC,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAC5C,mBAAmB,EAAE,qBAAqB,EAAE,sBAAsB,EAClE,gBAAgB,EAAE,gBAAgB,EAClC,wBAAwB,EAAE,uBAAuB,EACjD,oBAAoB,EACpB,0BAA0B,EAAE,uBAAuB,EACnD,kBAAkB,GACnB,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB,EAC5D,kBAAkB,EAAE,oBAAoB,EACxC,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,EAC3D,wBAAwB,EAAE,wBAAwB,EAClD,oBAAoB,EAAE,sBAAsB,EAC5C,gBAAgB,EAAE,gBAAgB,GACnC,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAA;AAG/F,OAAO,EACL,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EACnE,kBAAkB,EAAE,qBAAqB,EACzC,wBAAwB,EAAE,2BAA2B,EACrD,qBAAqB,EAAE,yBAAyB,EAChD,mBAAmB,GACpB,MAAM,iBAAiB,CAAA;AAKxB,OAAO,EACL,+BAA+B,GAChC,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EACL,wBAAwB,EAAE,mBAAmB,EAC7C,oBAAoB,EAAE,iBAAiB,EACvC,YAAY,EAAE,0BAA0B,EACxC,eAAe,EAAE,sBAAsB,EACvC,mBAAmB,EAAE,sBAAsB,GAC5C,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAKlF,OAAO,EACL,6BAA6B,GAC9B,MAAM,mBAAmB,CAAA;AAK1B,OAAO,EACL,eAAe,EAAE,0BAA0B,GAC5C,MAAM,qBAAqB,CAAA;AAM5B,OAAO,EACL,eAAe,EAAE,oBAAoB,GACtC,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EACL,aAAa,EAAE,eAAe,EAAE,iBAAiB,EACjD,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAC3C,6BAA6B,GAC9B,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAG7F,OAAO,EACL,iBAAiB,EAAE,WAAW,EAAE,sBAAsB,EACtD,cAAc,EAAE,wBAAwB,GACzC,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAKxD,OAAO,EACL,2BAA2B,GAC5B,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAG9F,OAAO,EACL,aAAa,EAAE,aAAa,EAAE,oBAAoB,EAClD,sBAAsB,EAAE,aAAa,EACrC,kBAAkB,EAAE,UAAU,EAAE,wBAAwB,GACzD,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAG/F,OAAO,EACL,kBAAkB,EAAE,cAAc,EAClC,cAAc,EAAE,sBAAsB,GACvC,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,yBAAyB,EAAE,qBAAqB,EAAE,oBAAoB,EACtE,cAAc,GACf,MAAM,2BAA2B,CAAA;AAIlC,OAAO,EACL,uBAAuB,EAAE,wBAAwB,EAAE,uBAAuB,EAC1E,uBAAuB,EAAE,mBAAmB,EAAE,2BAA2B,EACzE,iBAAiB,EAAE,8BAA8B,GAClD,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,wBAAwB,EAC3D,mBAAmB,EAAE,qBAAqB,GAC3C,MAAM,uBAAuB,CAAA;AAI9B,OAAO,EACL,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,GAC/D,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,WAAW,EAAE,WAAW,EAAE,2BAA2B,EAAE,WAAW,GACnE,MAAM,2BAA2B,CAAA;AAQlC,OAAO,EACL,gBAAgB,EAAE,uBAAuB,EACzC,eAAe,IAAI,wBAAwB,EAC3C,0BAA0B,EAAE,sBAAsB,EAAE,wBAAwB,EAC5E,eAAe,IAAI,mCAAmC,EACtD,yBAAyB,EACzB,qBAAqB,EAAE,cAAc,GACtC,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EACzD,iBAAiB,EAAE,iBAAiB,EAAE,SAAS,IAAI,6BAA6B,EAChF,UAAU,IAAI,8BAA8B,EAAE,oBAAoB,EAClE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,EACxD,iBAAiB,EAAE,cAAc,EAAE,qBAAqB,EACxD,oBAAoB,EAAE,gBAAgB,EAAE,0BAA0B,EAClE,aAAa,EAAE,wBAAwB,EACvC,gBAAgB,EAAE,gBAAgB,EAAE,oBAAoB,EACxD,4BAA4B,EAAE,8BAA8B,EAC5D,mBAAmB,EAAE,OAAO,GAC7B,MAAM,kCAAkC,CAAA;AAIzC,OAAO,EACL,cAAc,EAAE,uBAAuB,EAAE,gBAAgB,GAC1D,MAAM,oCAAoC,CAAA;AAC3C,YAAY,EACV,mBAAmB,EAAE,qBAAqB,EAAE,qBAAqB,EACjE,yBAAyB,EAAE,eAAe,GAC3C,MAAM,oCAAoC,CAAA;AAI3C,OAAO,EACL,wBAAwB,EAAE,sBAAsB,EAChD,wBAAwB,EAAE,sBAAsB,EAAE,WAAW,GAC9D,MAAM,gCAAgC,CAAA;AACvC,YAAY,EACV,kBAAkB,EAAE,wBAAwB,EAAE,gBAAgB,EAC9D,cAAc,EAAE,8BAA8B,GAC/C,MAAM,gCAAgC,CAAA;AAIvC,OAAO,EACL,iBAAiB,EAAE,SAAS,EAAE,qBAAqB,EACnD,mBAAmB,EAAE,iBAAiB,EAAE,uBAAuB,EAC/D,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,EACzD,eAAe,GAChB,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,oBAAoB,EAAE,cAAc,EAAE,eAAe,EACrD,aAAa,EAAE,iBAAiB,EAAE,qBAAqB,EACvD,uBAAuB,GACxB,MAAM,kCAAkC,CAAA;AAMzC,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,qBAAqB,GACtB,MAAM,gCAAgC,CAAA;AACvC,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,GACd,MAAM,gCAAgC,CAAA;AAMvC,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,6BAA6B,EAC7B,eAAe,IAAI,yBAAyB,EAC5C,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,8BAA8B,EAC9B,gBAAgB,IAAI,0BAA0B,EAC9C,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAA;AAK1C,YAAY,EACV,gBAAgB,IAAI,qCAAqC,EACzD,wBAAwB,IAAI,mCAAmC,EAC/D,wBAAwB,IAAI,mCAAmC,EAC/D,mBAAmB,IAAI,8BAA8B,EACrD,qBAAqB,IAAI,gCAAgC,EACzD,gBAAgB,IAAI,2BAA2B,EAC/C,gBAAgB,IAAI,2BAA2B,EAC/C,wBAAwB,IAAI,mCAAmC,EAC/D,sBAAsB,IAAI,iCAAiC,EAC3D,sBAAsB,IAAI,iCAAiC,EAC3D,uBAAuB,IAAI,kCAAkC,GAC9D,MAAM,mCAAmC,CAAA;AAM1C,OAAO,EACL,qBAAqB,EAAE,kBAAkB,EACzC,oBAAoB,EAAE,iBAAiB,EAAE,qBAAqB,EAC9D,wBAAwB,EAAE,gBAAgB,EAC1C,kBAAkB,IAAI,6BAA6B,EACnD,gBAAgB,IAAI,2BAA2B,EAC/C,0BAA0B,EAAE,2BAA2B,EACvD,6BAA6B,EAAE,aAAa,EAC5C,YAAY,EAAE,QAAQ,EACtB,aAAa,EAAE,mBAAmB,EAClC,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAClD,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,iBAAiB,EACpC,eAAe,EAAE,0BAA0B,EAC3C,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAC/C,cAAc,EACd,0BAA0B,EAAE,2BAA2B,GACxD,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,gBAAgB,EAAE,iBAAiB,EACnC,iBAAiB,EAAE,eAAe,EAAE,kBAAkB,EACtD,4BAA4B,EAAE,mBAAmB,EACjD,oBAAoB,EAAE,qBAAqB,EAAE,uBAAuB,EACpE,gBAAgB,EAAE,eAAe,EACjC,0BAA0B,EAC1B,aAAa,EAAE,YAAY,EAC3B,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EAAE,gBAAgB,EACnC,cAAc,GACf,MAAM,kCAAkC,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/v2/index.ts"],"names":[],"mappings":"AACA;;;GAGG;AAGH,YAAY,EACV,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAClE,cAAc,EAAE,mBAAmB,EAAE,YAAY,EAAE,cAAc,EACjE,SAAS,EAAE,qBAAqB,EAAE,UAAU,EAAE,WAAW,EACzD,gBAAgB,EAAE,kBAAkB,EAAE,aAAa,EACnD,kBAAkB,EAAE,0BAA0B,EAC9C,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,WAAW,EAAE,oBAAoB,EAC/C,gBAAgB,EAAE,eAAe,EACjC,mBAAmB,EAAE,qBAAqB,EAC1C,SAAS,EAAE,WAAW,EAAE,kBAAkB,EAC1C,cAAc,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EACpE,iBAAiB,EAAE,kBAAkB,EAAE,aAAa,EACpD,qBAAqB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAChF,kBAAkB,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EACtE,eAAe,EAAE,uBAAuB,EACxC,oBAAoB,EAAE,mBAAmB,EACzC,cAAc,EAAE,mBAAmB,GACpC,MAAM,YAAY,CAAA;AAGnB,OAAO,EACL,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAC5C,mBAAmB,EAAE,qBAAqB,EAAE,sBAAsB,EAClE,gBAAgB,EAAE,gBAAgB,EAClC,wBAAwB,EAAE,uBAAuB,EACjD,oBAAoB,EACpB,0BAA0B,EAAE,uBAAuB,EACnD,kBAAkB,GACnB,MAAM,aAAa,CAAA;AAGpB,OAAO,EACL,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB,EAC5D,kBAAkB,EAAE,oBAAoB,EACxC,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,EAC3D,wBAAwB,EAAE,wBAAwB,EAClD,oBAAoB,EAAE,sBAAsB,EAC5C,gBAAgB,EAAE,gBAAgB,GACnC,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAA;AAG/F,OAAO,EACL,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EACnE,kBAAkB,EAAE,qBAAqB,EACzC,wBAAwB,EAAE,2BAA2B,EACrD,qBAAqB,EAAE,yBAAyB,EAChD,mBAAmB,GACpB,MAAM,iBAAiB,CAAA;AAKxB,OAAO,EACL,+BAA+B,GAChC,MAAM,iBAAiB,CAAA;AAGxB,OAAO,EACL,wBAAwB,EAAE,mBAAmB,EAC7C,oBAAoB,EAAE,iBAAiB,EACvC,YAAY,EAAE,0BAA0B,EACxC,eAAe,EAAE,sBAAsB,EACvC,mBAAmB,EAAE,sBAAsB,GAC5C,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAKlF,OAAO,EACL,6BAA6B,GAC9B,MAAM,mBAAmB,CAAA;AAK1B,OAAO,EACL,eAAe,EAAE,0BAA0B,GAC5C,MAAM,qBAAqB,CAAA;AAM5B,OAAO,EACL,eAAe,EAAE,oBAAoB,GACtC,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EACL,aAAa,EAAE,eAAe,EAAE,iBAAiB,EACjD,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAC3C,6BAA6B,GAC9B,MAAM,0BAA0B,CAAA;AACjC,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAG7F,OAAO,EACL,iBAAiB,EAAE,WAAW,EAAE,sBAAsB,EACtD,cAAc,EAAE,wBAAwB,GACzC,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAKxD,OAAO,EACL,2BAA2B,GAC5B,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AAG9F,OAAO,EACL,aAAa,EAAE,aAAa,EAAE,oBAAoB,EAClD,sBAAsB,EAAE,aAAa,EACrC,kBAAkB,EAAE,UAAU,EAAE,wBAAwB,GACzD,MAAM,sBAAsB,CAAA;AAC7B,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAG/F,OAAO,EACL,kBAAkB,EAAE,cAAc,EAClC,cAAc,EAAE,sBAAsB,GACvC,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,yBAAyB,EAAE,qBAAqB,EAAE,oBAAoB,EACtE,cAAc,GACf,MAAM,2BAA2B,CAAA;AAIlC,OAAO,EACL,uBAAuB,EAAE,wBAAwB,EAAE,uBAAuB,EAC1E,uBAAuB,EAAE,mBAAmB,EAAE,2BAA2B,EACzE,iBAAiB,EAAE,8BAA8B,GAClD,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,gBAAgB,EAAE,eAAe,EAAE,wBAAwB,EAC3D,mBAAmB,EAAE,qBAAqB,GAC3C,MAAM,uBAAuB,CAAA;AAI9B,OAAO,EACL,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,GAC/D,MAAM,2BAA2B,CAAA;AAClC,YAAY,EACV,WAAW,EAAE,WAAW,EAAE,2BAA2B,EAAE,WAAW,GACnE,MAAM,2BAA2B,CAAA;AAQlC,OAAO,EACL,gBAAgB,EAAE,uBAAuB,EACzC,eAAe,IAAI,wBAAwB,EAC3C,0BAA0B,EAAE,sBAAsB,EAAE,wBAAwB,EAC5E,eAAe,IAAI,mCAAmC,EACtD,yBAAyB,EACzB,qBAAqB,EAAE,cAAc,GACtC,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,EACzD,iBAAiB,EAAE,iBAAiB,EAAE,SAAS,IAAI,6BAA6B,EAChF,UAAU,IAAI,8BAA8B,EAAE,oBAAoB,EAClE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,mBAAmB,EACxD,iBAAiB,EAAE,cAAc,EAAE,qBAAqB,EACxD,oBAAoB,EAAE,gBAAgB,EAAE,0BAA0B,EAClE,aAAa,EAAE,wBAAwB,EACvC,gBAAgB,EAAE,gBAAgB,EAAE,oBAAoB,EACxD,4BAA4B,EAAE,8BAA8B,EAC5D,mBAAmB,EAAE,OAAO,GAC7B,MAAM,kCAAkC,CAAA;AAIzC,OAAO,EACL,cAAc,EAAE,uBAAuB,EAAE,gBAAgB,GAC1D,MAAM,oCAAoC,CAAA;AAC3C,YAAY,EACV,mBAAmB,EAAE,qBAAqB,EAAE,qBAAqB,EACjE,yBAAyB,EAAE,eAAe,GAC3C,MAAM,oCAAoC,CAAA;AAI3C,OAAO,EACL,wBAAwB,EAAE,sBAAsB,EAChD,wBAAwB,EAAE,sBAAsB,EAAE,WAAW,GAC9D,MAAM,gCAAgC,CAAA;AACvC,YAAY,EACV,kBAAkB,EAAE,wBAAwB,EAAE,gBAAgB,EAC9D,cAAc,EAAE,8BAA8B,GAC/C,MAAM,gCAAgC,CAAA;AAIvC,OAAO,EACL,iBAAiB,EAAE,SAAS,EAAE,qBAAqB,EACnD,mBAAmB,EAAE,iBAAiB,EAAE,uBAAuB,EAC/D,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,EACzD,eAAe,GAChB,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,oBAAoB,EAAE,cAAc,EAAE,eAAe,EACrD,aAAa,EAAE,iBAAiB,EAAE,qBAAqB,EACvD,uBAAuB,GACxB,MAAM,kCAAkC,CAAA;AAMzC,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,qBAAqB,GACtB,MAAM,gCAAgC,CAAA;AACvC,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,yBAAyB,EACzB,sBAAsB,EACtB,sBAAsB,EACtB,gBAAgB,EAChB,aAAa,GACd,MAAM,gCAAgC,CAAA;AAMvC,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,6BAA6B,EAC7B,eAAe,IAAI,yBAAyB,EAC5C,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,8BAA8B,EAC9B,gBAAgB,IAAI,0BAA0B,EAC9C,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAA;AAK1C,YAAY,EACV,gBAAgB,IAAI,qCAAqC,EACzD,wBAAwB,IAAI,mCAAmC,EAC/D,wBAAwB,IAAI,mCAAmC,EAC/D,mBAAmB,IAAI,8BAA8B,EACrD,qBAAqB,IAAI,gCAAgC,EACzD,gBAAgB,IAAI,2BAA2B,EAC/C,gBAAgB,IAAI,2BAA2B,EAC/C,wBAAwB,IAAI,mCAAmC,EAC/D,sBAAsB,IAAI,iCAAiC,EAC3D,sBAAsB,IAAI,iCAAiC,EAC3D,uBAAuB,IAAI,kCAAkC,GAC9D,MAAM,mCAAmC,CAAA;AAM1C,OAAO,EACL,qBAAqB,EAAE,kBAAkB,EACzC,oBAAoB,EAAE,iBAAiB,EAAE,qBAAqB,EAC9D,wBAAwB,EAAE,gBAAgB,EAC1C,kBAAkB,IAAI,6BAA6B,EACnD,gBAAgB,IAAI,2BAA2B,EAC/C,0BAA0B,EAAE,2BAA2B,EACvD,6BAA6B,EAAE,aAAa,EAC5C,YAAY,EAAE,QAAQ,EACtB,aAAa,EAAE,mBAAmB,EAClC,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAClD,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,iBAAiB,EACpC,eAAe,EAAE,0BAA0B,EAC3C,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAC/C,cAAc,EACd,0BAA0B,EAAE,2BAA2B,GACxD,MAAM,kCAAkC,CAAA;AACzC,YAAY,EACV,gBAAgB,EAAE,iBAAiB,EACnC,iBAAiB,EAAE,eAAe,EAAE,kBAAkB,EACtD,4BAA4B,EAAE,mBAAmB,EACjD,oBAAoB,EAAE,qBAAqB,EAAE,uBAAuB,EACpE,gBAAgB,EAAE,eAAe,EACjC,0BAA0B,EAC1B,aAAa,EAAE,YAAY,EAC3B,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EAAE,gBAAgB,EACnC,cAAc,GACf,MAAM,kCAAkC,CAAA;AAKzC,OAAO,EACL,mBAAmB,EACnB,8BAA8B,EAC9B,oBAAoB,EACpB,2BAA2B,EAC3B,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,8BAA8B,EAC9B,oBAAoB,EACpB,2BAA2B,EAC3B,eAAe,GAChB,MAAM,2BAA2B,CAAA;AAElC,YAAY,EACV,yBAAyB,EACzB,WAAW,EACX,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,eAAe,EACf,wBAAwB,EACxB,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,aAAa,EACb,SAAS,EACT,iBAAiB,GAClB,MAAM,2BAA2B,CAAA"}

package/dist/src/v2/index.js

@@ -74,4 +74,8 @@ export { aggregateAttributionPrimitives, buildContributorMerklePath, buildContri
 // attribution-consent (that module's AttributionReceipt is a citation-
 // consent primitive; this one is the per-action cross-axis primitive).
 export { ATTRIBUTION_AXIS_TAGS, DEFAULT_MIN_WEIGHT, aggregateComputeAxis, aggregateDataAxis, aggregateProtocolAxis, assertCanonicalTimestamp, buildMerkleFrame, canonicalTimestamp as attributionCanonicalTimestamp, canonicalHashHex as attributionCanonicalHashHex, checkProjectionConsistency, computeAttributionActionRef, constructAttributionPrimitive, envelopeBytes, hashAxisLeaf, hashNode, normalizeAxes, orderGovernanceAxis, projectAllAxes, projectAttribution, projectionPath, projectionDataAsC, projectionDataAsD, projectionDataAsG, projectionDataAsP, reconstructRoot, resignAttributionPrimitive, sortComputeAxis, sortDataAxis, sortProtocolAxis, toWeightString, verifyAttributionPrimitive, verifyAttributionProjection, } from './attribution-primitive/index.js';
+// ══════════════════════════════════════
+// Accountability MVP (Wave 1)
+// ══════════════════════════════════════
+export { createActionReceipt, createAuthorityBoundaryReceipt, createCustodyReceipt, createContestabilityReceipt, attachControllerResponse, createAPSBundle, computeMerkleRoot, verifyActionReceipt, verifyAuthorityBoundaryReceipt, verifyCustodyReceipt, verifyContestabilityReceipt, verifyAPSBundle, } from './accountability/index.js';
 //# sourceMappingURL=index.js.map

package/dist/src/v2/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/v2/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E;;;GAGG;AAuBH,8DAA8D;AAC9D,OAAO,EACL,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAC5C,mBAAmB,EAAE,qBAAqB,EAAE,sBAAsB,EAClE,gBAAgB,EAAE,gBAAgB,EAClC,wBAAwB,EAAE,uBAAuB,EACjD,oBAAoB,EACpB,0BAA0B,EAAE,uBAAuB,EACnD,kBAAkB,GACnB,MAAM,aAAa,CAAA;AAEpB,2BAA2B;AAC3B,OAAO,EACL,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB,EAC5D,kBAAkB,EAAE,oBAAoB,EACxC,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,EAC3D,wBAAwB,EAAE,wBAAwB,EAClD,oBAAoB,EAAE,sBAAsB,EAC5C,gBAAgB,EAAE,gBAAgB,GACnC,MAAM,oBAAoB,CAAA;AAG3B,0BAA0B;AAC1B,OAAO,EACL,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EACnE,kBAAkB,EAAE,qBAAqB,EACzC,wBAAwB,EAAE,2BAA2B,EACrD,qBAAqB,EAAE,yBAAyB,EAChD,mBAAmB,GACpB,MAAM,iBAAiB,CAAA;AAExB,sEAAsE;AACtE,kEAAkE;AAClE,yEAAyE;AACzE,OAAO,EACL,+BAA+B,GAChC,MAAM,iBAAiB,CAAA;AAExB,wBAAwB;AACxB,OAAO,EACL,wBAAwB,EAAE,mBAAmB,EAC7C,oBAAoB,EAAE,iBAAiB,EACvC,YAAY,EAAE,0BAA0B,EACxC,eAAe,EAAE,sBAAsB,EACvC,mBAAmB,EAAE,sBAAsB,GAC5C,MAAM,mBAAmB,CAAA;AAG1B,qEAAqE;AACrE,sEAAsE;AACtE,gEAAgE;AAChE,OAAO,EACL,6BAA6B,GAC9B,MAAM,mBAAmB,CAAA;AAE1B,4DAA4D;AAC5D,wEAAwE;AACxE,iBAAiB;AACjB,OAAO,EACL,eAAe,EAAE,0BAA0B,GAC5C,MAAM,qBAAqB,CAAA;AAG5B,+DAA+D;AAC/D,8DAA8D;AAC9D,iCAAiC;AACjC,OAAO,EACL,eAAe,EAAE,oBAAoB,GACtC,MAAM,qBAAqB,CAAA;AAE5B,kDAAkD;AAClD,OAAO,EACL,aAAa,EAAE,eAAe,EAAE,iBAAiB,EACjD,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAC3C,6BAA6B,GAC9B,MAAM,0BAA0B,CAAA;AAGjC,oEAAoE;AACpE,OAAO,EACL,iBAAiB,EAAE,WAAW,EAAE,sBAAsB,EACtD,cAAc,EAAE,wBAAwB,GACzC,MAAM,qBAAqB,CAAA;AAG5B,sEAAsE;AACtE,qEAAqE;AACrE,iCAAiC;AACjC,OAAO,EACL,2BAA2B,GAC5B,MAAM,uBAAuB,CAAA;AAG9B,oCAAoC;AACpC,OAAO,EACL,aAAa,EAAE,aAAa,EAAE,oBAAoB,EAClD,sBAAsB,EAAE,aAAa,EACrC,kBAAkB,EAAE,UAAU,EAAE,wBAAwB,GACzD,MAAM,sBAAsB,CAAA;AAG7B,oEAAoE;AACpE,OAAO,EACL,kBAAkB,EAAE,cAAc,EAClC,cAAc,EAAE,sBAAsB,GACvC,MAAM,2BAA2B,CAAA;AAOlC,+DAA+D;AAC/D,OAAO,EACL,uBAAuB,EAAE,wBAAwB,EAAE,uBAAuB,EAC1E,uBAAuB,EAAE,mBAAmB,EAAE,2BAA2B,EACzE,iBAAiB,EAAE,8BAA8B,GAClD,MAAM,uBAAuB,CAAA;AAO9B,uDAAuD;AACvD,OAAO,EACL,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,GAC/D,MAAM,2BAA2B,CAAA;AAKlC,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,sBAAsB;AACtB,OAAO,EACL,gBAAgB,EAAE,uBAAuB,EACzC,eAAe,IAAI,wBAAwB,EAC3C,0BAA0B,EAAE,sBAAsB,EAAE,wBAAwB,EAC5E,eAAe,IAAI,mCAAmC,EACtD,yBAAyB,EACzB,qBAAqB,EAAE,cAAc,GACtC,MAAM,kCAAkC,CAAA;AAczC,wEAAwE;AACxE,qEAAqE;AACrE,OAAO,EACL,cAAc,EAAE,uBAAuB,EAAE,gBAAgB,GAC1D,MAAM,oCAAoC,CAAA;AAM3C,mEAAmE;AACnE,4CAA4C;AAC5C,OAAO,EACL,wBAAwB,EAAE,sBAAsB,EAChD,wBAAwB,EAAE,sBAAsB,EAAE,WAAW,GAC9D,MAAM,gCAAgC,CAAA;AAMvC,6EAA6E;AAC7E,gFAAgF;AAChF,OAAO,EACL,iBAAiB,EAAE,SAAS,EAAE,qBAAqB,EACnD,mBAAmB,EAAE,iBAAiB,EAAE,uBAAuB,EAC/D,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,EACzD,eAAe,GAChB,MAAM,kCAAkC,CAAA;AAOzC,uEAAuE;AACvE,sEAAsE;AACtE,wEAAwE;AACxE,+EAA+E;AAC/E,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,qBAAqB,GACtB,MAAM,gCAAgC,CAAA;AAWvC,uEAAuE;AACvE,iEAAiE;AACjE,wEAAwE;AACxE,wDAAwD;AACxD,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,6BAA6B,EAC7B,eAAe,IAAI,yBAAyB,EAC5C,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,8BAA8B,EAC9B,gBAAgB,IAAI,0BAA0B,EAC9C,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAA;AAmB1C,uEAAuE;AACvE,8DAA8D;AAC9D,uEAAuE;AACvE,uEAAuE;AACvE,OAAO,EACL,qBAAqB,EAAE,kBAAkB,EACzC,oBAAoB,EAAE,iBAAiB,EAAE,qBAAqB,EAC9D,wBAAwB,EAAE,gBAAgB,EAC1C,kBAAkB,IAAI,6BAA6B,EACnD,gBAAgB,IAAI,2BAA2B,EAC/C,0BAA0B,EAAE,2BAA2B,EACvD,6BAA6B,EAAE,aAAa,EAC5C,YAAY,EAAE,QAAQ,EACtB,aAAa,EAAE,mBAAmB,EAClC,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAClD,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,iBAAiB,EACpC,eAAe,EAAE,0BAA0B,EAC3C,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAC/C,cAAc,EACd,0BAA0B,EAAE,2BAA2B,GACxD,MAAM,kCAAkC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/v2/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E;;;GAGG;AAuBH,8DAA8D;AAC9D,OAAO,EACL,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAC5C,mBAAmB,EAAE,qBAAqB,EAAE,sBAAsB,EAClE,gBAAgB,EAAE,gBAAgB,EAClC,wBAAwB,EAAE,uBAAuB,EACjD,oBAAoB,EACpB,0BAA0B,EAAE,uBAAuB,EACnD,kBAAkB,GACnB,MAAM,aAAa,CAAA;AAEpB,2BAA2B;AAC3B,OAAO,EACL,kBAAkB,EAAE,qBAAqB,EAAE,iBAAiB,EAC5D,kBAAkB,EAAE,oBAAoB,EACxC,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,EAC3D,wBAAwB,EAAE,wBAAwB,EAClD,oBAAoB,EAAE,sBAAsB,EAC5C,gBAAgB,EAAE,gBAAgB,GACnC,MAAM,oBAAoB,CAAA;AAG3B,0BAA0B;AAC1B,OAAO,EACL,qBAAqB,EAAE,oBAAoB,EAAE,sBAAsB,EACnE,kBAAkB,EAAE,qBAAqB,EACzC,wBAAwB,EAAE,2BAA2B,EACrD,qBAAqB,EAAE,yBAAyB,EAChD,mBAAmB,GACpB,MAAM,iBAAiB,CAAA;AAExB,sEAAsE;AACtE,kEAAkE;AAClE,yEAAyE;AACzE,OAAO,EACL,+BAA+B,GAChC,MAAM,iBAAiB,CAAA;AAExB,wBAAwB;AACxB,OAAO,EACL,wBAAwB,EAAE,mBAAmB,EAC7C,oBAAoB,EAAE,iBAAiB,EACvC,YAAY,EAAE,0BAA0B,EACxC,eAAe,EAAE,sBAAsB,EACvC,mBAAmB,EAAE,sBAAsB,GAC5C,MAAM,mBAAmB,CAAA;AAG1B,qEAAqE;AACrE,sEAAsE;AACtE,gEAAgE;AAChE,OAAO,EACL,6BAA6B,GAC9B,MAAM,mBAAmB,CAAA;AAE1B,4DAA4D;AAC5D,wEAAwE;AACxE,iBAAiB;AACjB,OAAO,EACL,eAAe,EAAE,0BAA0B,GAC5C,MAAM,qBAAqB,CAAA;AAG5B,+DAA+D;AAC/D,8DAA8D;AAC9D,iCAAiC;AACjC,OAAO,EACL,eAAe,EAAE,oBAAoB,GACtC,MAAM,qBAAqB,CAAA;AAE5B,kDAAkD;AAClD,OAAO,EACL,aAAa,EAAE,eAAe,EAAE,iBAAiB,EACjD,gBAAgB,EAAE,aAAa,EAAE,UAAU,EAC3C,6BAA6B,GAC9B,MAAM,0BAA0B,CAAA;AAGjC,oEAAoE;AACpE,OAAO,EACL,iBAAiB,EAAE,WAAW,EAAE,sBAAsB,EACtD,cAAc,EAAE,wBAAwB,GACzC,MAAM,qBAAqB,CAAA;AAG5B,sEAAsE;AACtE,qEAAqE;AACrE,iCAAiC;AACjC,OAAO,EACL,2BAA2B,GAC5B,MAAM,uBAAuB,CAAA;AAG9B,oCAAoC;AACpC,OAAO,EACL,aAAa,EAAE,aAAa,EAAE,oBAAoB,EAClD,sBAAsB,EAAE,aAAa,EACrC,kBAAkB,EAAE,UAAU,EAAE,wBAAwB,GACzD,MAAM,sBAAsB,CAAA;AAG7B,oEAAoE;AACpE,OAAO,EACL,kBAAkB,EAAE,cAAc,EAClC,cAAc,EAAE,sBAAsB,GACvC,MAAM,2BAA2B,CAAA;AAOlC,+DAA+D;AAC/D,OAAO,EACL,uBAAuB,EAAE,wBAAwB,EAAE,uBAAuB,EAC1E,uBAAuB,EAAE,mBAAmB,EAAE,2BAA2B,EACzE,iBAAiB,EAAE,8BAA8B,GAClD,MAAM,uBAAuB,CAAA;AAO9B,uDAAuD;AACvD,OAAO,EACL,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,GAC/D,MAAM,2BAA2B,CAAA;AAKlC,uEAAuE;AACvE,wEAAwE;AACxE,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,sBAAsB;AACtB,OAAO,EACL,gBAAgB,EAAE,uBAAuB,EACzC,eAAe,IAAI,wBAAwB,EAC3C,0BAA0B,EAAE,sBAAsB,EAAE,wBAAwB,EAC5E,eAAe,IAAI,mCAAmC,EACtD,yBAAyB,EACzB,qBAAqB,EAAE,cAAc,GACtC,MAAM,kCAAkC,CAAA;AAczC,wEAAwE;AACxE,qEAAqE;AACrE,OAAO,EACL,cAAc,EAAE,uBAAuB,EAAE,gBAAgB,GAC1D,MAAM,oCAAoC,CAAA;AAM3C,mEAAmE;AACnE,4CAA4C;AAC5C,OAAO,EACL,wBAAwB,EAAE,sBAAsB,EAChD,wBAAwB,EAAE,sBAAsB,EAAE,WAAW,GAC9D,MAAM,gCAAgC,CAAA;AAMvC,6EAA6E;AAC7E,gFAAgF;AAChF,OAAO,EACL,iBAAiB,EAAE,SAAS,EAAE,qBAAqB,EACnD,mBAAmB,EAAE,iBAAiB,EAAE,uBAAuB,EAC/D,gBAAgB,EAAE,cAAc,EAAE,uBAAuB,EACzD,eAAe,GAChB,MAAM,kCAAkC,CAAA;AAOzC,uEAAuE;AACvE,sEAAsE;AACtE,wEAAwE;AACxE,+EAA+E;AAC/E,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,qBAAqB,GACtB,MAAM,gCAAgC,CAAA;AAWvC,uEAAuE;AACvE,iEAAiE;AACjE,wEAAwE;AACxE,wDAAwD;AACxD,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,EAC1B,6BAA6B,EAC7B,eAAe,IAAI,yBAAyB,EAC5C,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,8BAA8B,EAC9B,gBAAgB,IAAI,0BAA0B,EAC9C,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,mCAAmC,CAAA;AAmB1C,uEAAuE;AACvE,8DAA8D;AAC9D,uEAAuE;AACvE,uEAAuE;AACvE,OAAO,EACL,qBAAqB,EAAE,kBAAkB,EACzC,oBAAoB,EAAE,iBAAiB,EAAE,qBAAqB,EAC9D,wBAAwB,EAAE,gBAAgB,EAC1C,kBAAkB,IAAI,6BAA6B,EACnD,gBAAgB,IAAI,2BAA2B,EAC/C,0BAA0B,EAAE,2BAA2B,EACvD,6BAA6B,EAAE,aAAa,EAC5C,YAAY,EAAE,QAAQ,EACtB,aAAa,EAAE,mBAAmB,EAClC,cAAc,EAAE,kBAAkB,EAAE,cAAc,EAClD,iBAAiB,EAAE,iBAAiB,EACpC,iBAAiB,EAAE,iBAAiB,EACpC,eAAe,EAAE,0BAA0B,EAC3C,eAAe,EAAE,YAAY,EAAE,gBAAgB,EAC/C,cAAc,EACd,0BAA0B,EAAE,2BAA2B,GACxD,MAAM,kCAAkC,CAAA;AAezC,yCAAyC;AACzC,8BAA8B;AAC9B,yCAAyC;AACzC,OAAO,EACL,mBAAmB,EACnB,8BAA8B,EAC9B,oBAAoB,EACpB,2BAA2B,EAC3B,wBAAwB,EACxB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,8BAA8B,EAC9B,oBAAoB,EACpB,2BAA2B,EAC3B,eAAe,GAChB,MAAM,2BAA2B,CAAA"}

package/dist/src/v2/instruction-provenance/canonicalize.d.ts

@@ -0,0 +1,50 @@
+import type { FilesystemMode, InstructionFile, InstructionProvenanceReceipt } from './types.js';
+/** Typed error for path-canonicalization rejections (spec §5.1). */
+export declare class IPRPathError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+export interface CanonicalizePathOptions {
+    /** Absolute POSIX path to the working root. The input path must resolve
+     *  inside this root. */
+    workingRoot: string;
+    /** Filesystem case mode for the working root. Affects normalization. */
+    filesystemMode: FilesystemMode;
+}
+/**
+ * Canonicalize a raw path per spec §5.1. Returns a relative POSIX path.
+ *
+ * Steps (must match the spec algorithm exactly for cross-language parity):
+ *   1. Reject empty path.
+ *   2. Reject percent-encoded paths (paths are POSIX, not URIs).
+ *   3. Compute absolute form of `raw` relative to `workingRoot` (without
+ *      filesystem access — pure string math).
+ *   4. Reject if the absolute form does not start with `workingRoot`.
+ *   5. Strip the working-root prefix to get a relative form.
+ *   6. Reject leading `./`.
+ *   7. Reject any `..` segment.
+ *   8. Reject trailing slash.
+ *   9. Normalize Unicode to NFC.
+ *  10. Apply case mode (lowercase if case-insensitive).
+ *  11. Replace OS-specific separators with `/`.
+ */
+export declare function canonicalizePath(raw: string, options: CanonicalizePathOptions): string;
+/** sha256 hex of a UTF-8 string. */
+export declare function sha256Hex(input: string | Uint8Array): string;
+/**
+ * Compute `context_root` per spec §4.1: sha256 of the JCS canonicalization
+ * of the `instruction_files` array. Must be byte-identical across languages.
+ */
+export declare function computeContextRoot(files: InstructionFile[]): string;
+/**
+ * Canonical sort order for `instruction_files`: lexicographic by `path`
+ * (canonical bytes). Spec §6.3 step 8.
+ */
+export declare function sortInstructionFiles(files: InstructionFile[]): InstructionFile[];
+/**
+ * Strip `signature` and `receipt_id` from the envelope and return the JCS
+ * canonical bytes used for both `receipt_id` derivation and Ed25519 signing.
+ * Spec §5.2.
+ */
+export declare function canonicalizeEnvelope(envelope: Omit<InstructionProvenanceReceipt, 'signature' | 'receipt_id'>): string;
+//# sourceMappingURL=canonicalize.d.ts.map

package/dist/src/v2/instruction-provenance/canonicalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalize.d.ts","sourceRoot":"","sources":["../../../../src/v2/instruction-provenance/canonicalize.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAA;AAE/F,oEAAoE;AACpE,qBAAa,YAAa,SAAQ,KAAK;aACT,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAI1D;AAED,MAAM,WAAW,uBAAuB;IACtC;4BACwB;IACxB,WAAW,EAAE,MAAM,CAAA;IACnB,wEAAwE;IACxE,cAAc,EAAE,cAAc,CAAA;CAC/B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,uBAAuB,GAAG,MAAM,CAkDtF;AAQD,oCAAoC;AACpC,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAE5D;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,MAAM,CAGnE;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAEhF;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,IAAI,CAAC,4BAA4B,EAAE,WAAW,GAAG,YAAY,CAAC,GACvE,MAAM,CAWR"}

package/dist/src/v2/instruction-provenance/canonicalize.js

@@ -0,0 +1,128 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ══════════════════════════════════════════════════════════════════
+// IPR — path canonicalization (§5.1) + envelope canonicalization (§5.2)
+// ══════════════════════════════════════════════════════════════════
+// Pure functions, no I/O. Cross-language byte-parity contract: every
+// `canonicalizePath` result must match the future Python port byte-for-byte
+// against the same fixture inputs. JCS canonicalization for envelopes
+// reuses the existing src/core/canonical-jcs.ts implementation (RFC 8785).
+// ══════════════════════════════════════════════════════════════════
+import { createHash } from 'node:crypto';
+import { canonicalizeJCS } from '../../core/canonical-jcs.js';
+/** Typed error for path-canonicalization rejections (spec §5.1). */
+export class IPRPathError extends Error {
+    code;
+    constructor(code, message) {
+        super(`${code}: ${message}`);
+        this.code = code;
+        this.name = 'IPRPathError';
+    }
+}
+/**
+ * Canonicalize a raw path per spec §5.1. Returns a relative POSIX path.
+ *
+ * Steps (must match the spec algorithm exactly for cross-language parity):
+ *   1. Reject empty path.
+ *   2. Reject percent-encoded paths (paths are POSIX, not URIs).
+ *   3. Compute absolute form of `raw` relative to `workingRoot` (without
+ *      filesystem access — pure string math).
+ *   4. Reject if the absolute form does not start with `workingRoot`.
+ *   5. Strip the working-root prefix to get a relative form.
+ *   6. Reject leading `./`.
+ *   7. Reject any `..` segment.
+ *   8. Reject trailing slash.
+ *   9. Normalize Unicode to NFC.
+ *  10. Apply case mode (lowercase if case-insensitive).
+ *  11. Replace OS-specific separators with `/`.
+ */
+export function canonicalizePath(raw, options) {
+    if (raw.length === 0)
+        throw new IPRPathError('EMPTY', 'path is empty');
+    if (raw.includes('%')) {
+        throw new IPRPathError('PERCENT_ENCODING', 'paths are POSIX, not URIs; percent-encoding rejected');
+    }
+    const root = stripTrailingSlash(options.workingRoot);
+    if (!root.startsWith('/')) {
+        throw new IPRPathError('WORKING_ROOT_NOT_ABSOLUTE', `working_root must be absolute POSIX: ${root}`);
+    }
+    // Compute absolute form. Treat raw as relative-to-root if not already absolute.
+    let abs;
+    if (raw.startsWith('/')) {
+        abs = raw;
+    }
+    else {
+        const cleaned = raw.startsWith('./') ? raw.slice(2) : raw;
+        abs = `${root}/${cleaned}`;
+    }
+    // Reject ".." anywhere (segment-level check).
+    for (const seg of abs.split('/')) {
+        if (seg === '..')
+            throw new IPRPathError('TRAVERSAL', 'parent traversal `..` not permitted');
+    }
+    // Reject if absolute form is not under root.
+    const rootWithSlash = `${root}/`;
+    if (abs !== root && !abs.startsWith(rootWithSlash)) {
+        throw new IPRPathError('OUTSIDE_ROOT', `path resolves outside working_root: ${abs}`);
+    }
+    let rel = abs === root ? '' : abs.slice(rootWithSlash.length);
+    if (rel.length === 0) {
+        throw new IPRPathError('EMPTY', 'path canonicalizes to empty (working_root itself, not a file)');
+    }
+    if (rel.endsWith('/')) {
+        throw new IPRPathError('TRAILING_SLASH', `trailing slash not permitted: ${rel}`);
+    }
+    if (rel.startsWith('./')) {
+        throw new IPRPathError('LEADING_DOT_SLASH', `leading "./" not permitted in canonical form: ${rel}`);
+    }
+    rel = rel.normalize('NFC');
+    if (options.filesystemMode === 'case-insensitive')
+        rel = rel.toLowerCase();
+    // Replace any backslashes (OS separators on non-POSIX platforms emitting
+    // path strings via Node's path.join). Spec mandates POSIX `/`.
+    rel = rel.replace(/\\/g, '/');
+    return rel;
+}
+/** Strip trailing slash from a path while preserving the root `/`. */
+function stripTrailingSlash(p) {
+    if (p.length > 1 && p.endsWith('/'))
+        return p.slice(0, -1);
+    return p;
+}
+/** sha256 hex of a UTF-8 string. */
+export function sha256Hex(input) {
+    return createHash('sha256').update(input).digest('hex');
+}
+/**
+ * Compute `context_root` per spec §4.1: sha256 of the JCS canonicalization
+ * of the `instruction_files` array. Must be byte-identical across languages.
+ */
+export function computeContextRoot(files) {
+    const sorted = sortInstructionFiles(files);
+    return sha256Hex(canonicalizeJCS(sorted));
+}
+/**
+ * Canonical sort order for `instruction_files`: lexicographic by `path`
+ * (canonical bytes). Spec §6.3 step 8.
+ */
+export function sortInstructionFiles(files) {
+    return [...files].sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+}
+/**
+ * Strip `signature` and `receipt_id` from the envelope and return the JCS
+ * canonical bytes used for both `receipt_id` derivation and Ed25519 signing.
+ * Spec §5.2.
+ */
+export function canonicalizeEnvelope(envelope) {
+    // Defensive shallow clone that strips signature/receipt_id even when the
+    // caller passes a fully-formed envelope at runtime (TS narrows on Omit at
+    // compile time, but JS objects can carry extras).
+    const clone = {};
+    const src = envelope;
+    for (const k of Object.keys(src)) {
+        if (k === 'signature' || k === 'receipt_id')
+            continue;
+        clone[k] = src[k];
+    }
+    return canonicalizeJCS(clone);
+}
+//# sourceMappingURL=canonicalize.js.map

package/dist/src/v2/instruction-provenance/canonicalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalize.js","sourceRoot":"","sources":["../../../../src/v2/instruction-provenance/canonicalize.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,qEAAqE;AACrE,wEAAwE;AACxE,qEAAqE;AACrE,qEAAqE;AACrE,4EAA4E;AAC5E,sEAAsE;AACtE,2EAA2E;AAC3E,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAG7D,oEAAoE;AACpE,MAAM,OAAO,YAAa,SAAQ,KAAK;IACT;IAA5B,YAA4B,IAAY,EAAE,OAAe;QACvD,KAAK,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAA;QADF,SAAI,GAAJ,IAAI,CAAQ;QAEtC,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;IAC5B,CAAC;CACF;AAUD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,OAAgC;IAC5E,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;IACtE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,sDAAsD,CAAC,CAAA;IACpG,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IACpD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,YAAY,CAAC,2BAA2B,EAAE,wCAAwC,IAAI,EAAE,CAAC,CAAA;IACrG,CAAC;IAED,gFAAgF;IAChF,IAAI,GAAW,CAAA;IACf,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,GAAG,GAAG,GAAG,CAAA;IACX,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA;QACzD,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,EAAE,CAAA;IAC5B,CAAC;IAED,8CAA8C;IAC9C,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,GAAG,KAAK,IAAI;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,qCAAqC,CAAC,CAAA;IAC9F,CAAC;IAED,6CAA6C;IAC7C,MAAM,aAAa,GAAG,GAAG,IAAI,GAAG,CAAA;IAChC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,uCAAuC,GAAG,EAAE,CAAC,CAAA;IACtF,CAAC;IAED,IAAI,GAAG,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,YAAY,CAAC,OAAO,EAAE,+DAA+D,CAAC,CAAA;IAClG,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,YAAY,CAAC,gBAAgB,EAAE,iCAAiC,GAAG,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,iDAAiD,GAAG,EAAE,CAAC,CAAA;IACrG,CAAC;IAED,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC1B,IAAI,OAAO,CAAC,cAAc,KAAK,kBAAkB;QAAE,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAE1E,yEAAyE;IACzE,+DAA+D;IAC/D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;IAE7B,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,sEAAsE;AACtE,SAAS,kBAAkB,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1D,OAAO,CAAC,CAAA;AACV,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,SAAS,CAAC,KAA0B;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;IAC1C,OAAO,SAAS,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAA;AAC3C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAwB;IAC3D,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAwE;IAExE,yEAAyE;IACzE,0EAA0E;IAC1E,kDAAkD;IAClD,MAAM,KAAK,GAA4B,EAAE,CAAA;IACzC,MAAM,GAAG,GAAG,QAAmC,CAAA;IAC/C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,YAAY;YAAE,SAAQ;QACrD,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;IACnB,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC"}