agent-passport-system 2.4.0-alpha → 2.5.1-alpha

package/dist/src/v2/accountability/__tests__/authority-boundary.test.js

@@ -0,0 +1,79 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// AuthorityBoundaryReceipt — construct + verify tests.
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { createAuthorityBoundaryReceipt } from '../construct/authority-boundary.js';
+import { verifyAuthorityBoundaryReceipt } from '../verify/authority-boundary.js';
+const PRIVATE_KEY = '11'.repeat(64);
+const FIXED_TS = '2026-04-30T00:00:00.000Z';
+const ACTION_ID_REF = 'b'.repeat(64);
+function baseInput(result, detail) {
+    return {
+        timestamp: FIXED_TS,
+        scope_of_claim: {
+            asserts: 'The evaluator ran a delegation-scope check on the named action.',
+            does_not_assert: [
+                'That the underlying action receipt was itself valid.',
+                'That side effects had occurred at evaluation time.',
+            ],
+            capture_mode: 'gateway_observed',
+            completeness: 'complete',
+            self_attested: false,
+        },
+        action_id: ACTION_ID_REF,
+        evaluator_did: 'did:aps:test-gateway-001',
+        delegation_chain_root: 'c'.repeat(64),
+        result,
+        ...(detail !== undefined ? { result_detail: detail } : {}),
+    };
+}
+describe('createAuthorityBoundaryReceipt', () => {
+    for (const result of ['inside', 'outside', 'indeterminate']) {
+        it(`round-trips construct + verify for result='${result}'`, () => {
+            const detail = result === 'outside' ? `scope 'commerce.purchase' not in delegation` : undefined;
+            const receipt = createAuthorityBoundaryReceipt(baseInput(result, detail), PRIVATE_KEY);
+            assert.equal(receipt.result, result);
+            const v = verifyAuthorityBoundaryReceipt(receipt);
+            assert.equal(v.valid, true);
+            assert.equal(v.reason, undefined);
+        });
+    }
+    it('produces stable receipt_id for identical inputs (deterministic)', () => {
+        const a = createAuthorityBoundaryReceipt(baseInput('inside'), PRIVATE_KEY);
+        const b = createAuthorityBoundaryReceipt(baseInput('inside'), PRIVATE_KEY);
+        assert.equal(a.receipt_id, b.receipt_id);
+        assert.equal(a.signature, b.signature);
+    });
+    it('sets claim_type to aps:authority_boundary:v1', () => {
+        const receipt = createAuthorityBoundaryReceipt(baseInput('inside'), PRIVATE_KEY);
+        assert.equal(receipt.claim_type, 'aps:authority_boundary:v1');
+    });
+});
+describe('verifyAuthorityBoundaryReceipt', () => {
+    it('detects tampered result field via RECEIPT_ID_MISMATCH', () => {
+        const receipt = createAuthorityBoundaryReceipt(baseInput('inside'), PRIVATE_KEY);
+        const tampered = { ...receipt, result: 'outside' };
+        const v = verifyAuthorityBoundaryReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'RECEIPT_ID_MISMATCH');
+    });
+    it('detects tampered signature bytes via SIGNATURE_INVALID', () => {
+        const receipt = createAuthorityBoundaryReceipt(baseInput('outside', 'reason'), PRIVATE_KEY);
+        const flipped = receipt.signature.slice(0, -1) + (receipt.signature.endsWith('0') ? '1' : '0');
+        const tampered = { ...receipt, signature: flipped };
+        const v = verifyAuthorityBoundaryReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'SIGNATURE_INVALID');
+    });
+    it('rejects wrong claim_type with INVALID_CLAIM_TYPE', () => {
+        const receipt = createAuthorityBoundaryReceipt(baseInput('inside'), PRIVATE_KEY);
+        const wrong = {
+            ...receipt,
+            claim_type: 'aps:action:v1',
+        };
+        const v = verifyAuthorityBoundaryReceipt(wrong);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_CLAIM_TYPE');
+    });
+});
+//# sourceMappingURL=authority-boundary.test.js.map

package/dist/src/v2/accountability/__tests__/authority-boundary.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority-boundary.test.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/authority-boundary.test.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,uDAAuD;AAEvD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AAEvC,OAAO,EAAE,8BAA8B,EAAE,MAAM,oCAAoC,CAAA;AACnF,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAA;AAIhF,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACnC,MAAM,QAAQ,GAAG,0BAA0B,CAAA;AAC3C,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAEpC,SAAS,SAAS,CAAC,MAAsB,EAAE,MAAe;IACxD,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,cAAc,EAAE;YACd,OAAO,EAAE,iEAAiE;YAC1E,eAAe,EAAE;gBACf,sDAAsD;gBACtD,oDAAoD;aACrD;YACD,YAAY,EAAE,kBAAkB;YAChC,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,KAAK;SACrB;QACD,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,0BAA0B;QACzC,qBAAqB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM;QACN,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,KAAK,MAAM,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAU,EAAE,CAAC;QACrE,EAAE,CAAC,8CAA8C,MAAM,GAAG,EAAE,GAAG,EAAE;YAC/D,MAAM,MAAM,GACV,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,SAAS,CAAA;YAClF,MAAM,OAAO,GAAG,8BAA8B,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,CAAA;YACtF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YACpC,MAAM,CAAC,GAAG,8BAA8B,CAAC,OAAO,CAAC,CAAA;YACjD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YAC3B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QACnC,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,8BAA8B,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAC1E,MAAM,CAAC,GAAG,8BAA8B,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAC1E,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,OAAO,GAAG,8BAA8B,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAChF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,OAAO,GAAG,8BAA8B,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAChF,MAAM,QAAQ,GAA6B,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC5E,MAAM,CAAC,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAA;QAClD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,OAAO,GAAG,8BAA8B,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAC3F,MAAM,OAAO,GACX,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAChF,MAAM,QAAQ,GAA6B,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;QAC7E,MAAM,CAAC,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAA;QAClD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,OAAO,GAAG,8BAA8B,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAA;QAChF,MAAM,KAAK,GAAG;YACZ,GAAG,OAAO;YACV,UAAU,EAAE,eAAyD;SACtE,CAAA;QACD,MAAM,CAAC,GAAG,8BAA8B,CAAC,KAAK,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/v2/accountability/__tests__/bundle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bundle.test.d.ts.map

package/dist/src/v2/accountability/__tests__/bundle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.test.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/bundle.test.ts"],"names":[],"mappings":""}

package/dist/src/v2/accountability/__tests__/bundle.test.js

@@ -0,0 +1,122 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// APSBundle — construct + verify tests.
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { createAPSBundle, computeMerkleRoot } from '../construct/bundle.js';
+import { verifyAPSBundle } from '../verify/bundle.js';
+const PRIVATE_KEY = '55'.repeat(64);
+const FIXED_TS = '2026-04-30T00:00:00.000Z';
+const RID_A = 'a'.repeat(64);
+const RID_B = 'b'.repeat(64);
+const RID_C = 'c'.repeat(64);
+function refOf(id, claim_type = 'aps:action:v1') {
+    return { receipt_id: id, claim_type };
+}
+function input(receipts, extras = {}) {
+    return {
+        timestamp: FIXED_TS,
+        scope_of_claim: {
+            asserts: 'Bundler asserts the listed receipt_ids were observed in the declared period.',
+            does_not_assert: [
+                'That every receipt referenced is itself valid.',
+                'That no other receipts existed outside this bundle.',
+            ],
+            capture_mode: 'gateway_observed',
+            completeness: 'complete',
+            self_attested: false,
+        },
+        bundler_did: 'did:aps:test-bundler-001',
+        period_start: '2026-04-30T00:00:00.000Z',
+        period_end: '2026-05-01T00:00:00.000Z',
+        receipts,
+        profile_conformance: ['aps:profile/mva-v1'],
+        ...extras,
+    };
+}
+describe('createAPSBundle', () => {
+    it('round-trips empty bundle (receipt_count = 0)', () => {
+        const bundle = createAPSBundle(input([]), PRIVATE_KEY);
+        assert.equal(bundle.receipt_count, 0);
+        // Empty merkle_root sentinel = sha256('') = e3b0c44298...
+        assert.equal(bundle.merkle_root, 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855');
+        const v = verifyAPSBundle(bundle);
+        assert.equal(v.valid, true);
+    });
+    it('round-trips single-receipt bundle', () => {
+        const bundle = createAPSBundle(input([refOf(RID_A)]), PRIVATE_KEY);
+        assert.equal(bundle.receipt_count, 1);
+        assert.equal(bundle.merkle_root, computeMerkleRoot([RID_A]));
+        const v = verifyAPSBundle(bundle);
+        assert.equal(v.valid, true);
+    });
+    it('round-trips two-receipt bundle and merkle_root is deterministic', () => {
+        const bundle1 = createAPSBundle(input([refOf(RID_A), refOf(RID_B)]), PRIVATE_KEY);
+        const bundle2 = createAPSBundle(input([refOf(RID_A), refOf(RID_B)]), PRIVATE_KEY);
+        assert.equal(bundle1.merkle_root, bundle2.merkle_root);
+        assert.equal(bundle1.receipt_id, bundle2.receipt_id);
+        assert.equal(verifyAPSBundle(bundle1).valid, true);
+    });
+    it('round-trips three-receipt bundle (exercises odd-layer duplicate path)', () => {
+        const bundle = createAPSBundle(input([refOf(RID_A), refOf(RID_B), refOf(RID_C)]), PRIVATE_KEY);
+        assert.equal(bundle.receipt_count, 3);
+        assert.equal(verifyAPSBundle(bundle).valid, true);
+    });
+    it('produces same merkle_root regardless of input receipt order (sort discipline)', () => {
+        const ordered = createAPSBundle(input([refOf(RID_A), refOf(RID_B), refOf(RID_C)]), PRIVATE_KEY);
+        const reordered = createAPSBundle(input([refOf(RID_C), refOf(RID_A), refOf(RID_B)]), PRIVATE_KEY);
+        assert.equal(ordered.merkle_root, reordered.merkle_root);
+        // receipt_id matches too because all other fields and order-of-keys are equal.
+        assert.equal(ordered.receipt_id, reordered.receipt_id);
+    });
+    it('round-trips profile_conformance values verbatim', () => {
+        const bundle = createAPSBundle(input([refOf(RID_A)], { profile_conformance: ['aps:profile/mva-v1', 'aps:profile/extra'] }), PRIVATE_KEY);
+        assert.deepEqual(bundle.profile_conformance, ['aps:profile/mva-v1', 'aps:profile/extra']);
+        assert.equal(verifyAPSBundle(bundle).valid, true);
+    });
+});
+describe('verifyAPSBundle', () => {
+    it('detects mutated receipt_count via RECEIPT_ID_MISMATCH', () => {
+        const bundle = createAPSBundle(input([refOf(RID_A), refOf(RID_B)]), PRIVATE_KEY);
+        const tampered = { ...bundle, receipt_count: 99 };
+        const v = verifyAPSBundle(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'RECEIPT_ID_MISMATCH');
+    });
+    it('detects mutated merkle_root via RECEIPT_ID_MISMATCH', () => {
+        const bundle = createAPSBundle(input([refOf(RID_A), refOf(RID_B)]), PRIVATE_KEY);
+        const tampered = { ...bundle, merkle_root: '0'.repeat(64) };
+        const v = verifyAPSBundle(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'RECEIPT_ID_MISMATCH');
+    });
+    it('detects mutated signature bytes alone via SIGNATURE_INVALID', () => {
+        const bundle = createAPSBundle(input([refOf(RID_A), refOf(RID_B)]), PRIVATE_KEY);
+        const flipped = bundle.signature.slice(0, -1) + (bundle.signature.endsWith('0') ? '1' : '0');
+        const tampered = { ...bundle, signature: flipped };
+        const v = verifyAPSBundle(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'SIGNATURE_INVALID');
+    });
+    it('rejects wrong claim_type with INVALID_CLAIM_TYPE', () => {
+        const bundle = createAPSBundle(input([refOf(RID_A)]), PRIVATE_KEY);
+        const wrong = { ...bundle, claim_type: 'aps:action:v1' };
+        const v = verifyAPSBundle(wrong);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_CLAIM_TYPE');
+    });
+    it('rejects malformed merkle_root with INVALID_MERKLE_ROOT', () => {
+        const bundle = createAPSBundle(input([refOf(RID_A)]), PRIVATE_KEY);
+        const bad = { ...bundle, merkle_root: 'too-short' };
+        const v = verifyAPSBundle(bad);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_MERKLE_ROOT');
+    });
+    it('rejects malformed receipt_count with INVALID_RECEIPT_COUNT', () => {
+        const bundle = createAPSBundle(input([refOf(RID_A)]), PRIVATE_KEY);
+        const bad = { ...bundle, receipt_count: -1 };
+        const v = verifyAPSBundle(bad);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_RECEIPT_COUNT');
+    });
+});
+//# sourceMappingURL=bundle.test.js.map

package/dist/src/v2/accountability/__tests__/bundle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.test.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/bundle.test.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,wCAAwC;AAExC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AAEvC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAIrD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACnC,MAAM,QAAQ,GAAG,0BAA0B,CAAA;AAE3C,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAE5B,SAAS,KAAK,CAAC,EAAU,EAAE,UAAU,GAAG,eAAe;IACrD,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAA;AACvC,CAAC;AAED,SAAS,KAAK,CAAC,QAA6B,EAAE,SAAwC,EAAE;IACtF,OAAO;QACL,SAAS,EAAE,QAAQ;QACnB,cAAc,EAAE;YACd,OAAO,EAAE,8EAA8E;YACvF,eAAe,EAAE;gBACf,gDAAgD;gBAChD,qDAAqD;aACtD;YACD,YAAY,EAAE,kBAAkB;YAChC,YAAY,EAAE,UAAU;YACxB,aAAa,EAAE,KAAK;SACrB;QACD,WAAW,EAAE,0BAA0B;QACvC,YAAY,EAAE,0BAA0B;QACxC,UAAU,EAAE,0BAA0B;QACtC,QAAQ;QACR,mBAAmB,EAAE,CAAC,oBAAoB,CAAC;QAC3C,GAAG,MAAM;KACV,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QACrC,0DAA0D;QAC1D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,kEAAkE,CAAC,CAAA;QACpG,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC5D,MAAM,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAC7B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QACjF,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QACjF,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;QACtD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAA;QACpD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACpD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAC9F,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAC/F,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QACjG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,CAAA;QACxD,+EAA+E;QAC/E,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAG,eAAe,CAC5B,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,mBAAmB,EAAE,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,EAAE,CAAC,EAC3F,WAAW,CACZ,CAAA;QACD,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAA;QACzF,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAChF,MAAM,QAAQ,GAAc,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAA;QAC5D,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAChF,MAAM,QAAQ,GAAc,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;QACtE,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAChF,MAAM,OAAO,GACX,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC9E,MAAM,QAAQ,GAAc,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;QAC7D,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,eAA6C,EAAE,CAAA;QACtF,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,GAAG,GAAc,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,CAAA;QAC9D,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAA;QAClE,MAAM,GAAG,GAAc,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,EAAE,CAAA;QACvD,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/v2/accountability/__tests__/contestability.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contestability.test.d.ts.map

package/dist/src/v2/accountability/__tests__/contestability.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.test.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/contestability.test.ts"],"names":[],"mappings":""}

package/dist/src/v2/accountability/__tests__/contestability.test.js

@@ -0,0 +1,205 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// ContestabilityReceipt — construct + verify conformance.
+//
+// Note: node:test rather than vitest because the repo has no vitest
+// install; node:test is the v2 convention.
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { attachControllerResponse, createContestabilityReceipt, } from '../construct/contestability.js';
+import { verifyContestabilityReceipt } from '../verify/contestability.js';
+import { publicKeyFromPrivate } from '../../../crypto/keys.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const CONTESTANT_PRIV = '33'.repeat(64);
+const CONTROLLER_PRIV = '44'.repeat(64);
+const CONTESTANT_TS = '2026-04-30T00:00:00.000Z';
+const RESPONDED_TS = '2026-04-30T01:00:00.000Z';
+const ACTION_ID = '0000000000000000000000000000000000000000000000000000000000000002';
+const SCOPE = {
+    asserts: 'Named contestant filed a challenge against the named action with the named grounds.',
+    does_not_assert: [
+        'that the contestation is meritorious',
+        'that the standing is legally valid',
+        'that any controller response is correct or final',
+    ],
+    capture_mode: 'self_attested',
+    completeness: 'complete',
+    self_attested: true,
+};
+function baseInput(overrides = {}) {
+    return {
+        timestamp: CONTESTANT_TS,
+        scope_of_claim: SCOPE,
+        contestant: {
+            did: 'did:aps:test-subject-001',
+            standing_basis: 'data_subject',
+        },
+        action_id: ACTION_ID,
+        grounds: 'Automated decision affected my access without disclosed criteria.',
+        requested_remedy: 'explanation',
+        ...overrides,
+    };
+}
+describe('ContestabilityReceipt — construct + verify', () => {
+    it('happy path without response: construct + verify round-trips green', () => {
+        const r = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const v = verifyContestabilityReceipt(r);
+        assert.equal(v.valid, true, `expected valid; got reason=${v.reason}`);
+        assert.equal(r.claim_type, 'aps:contestability:v1');
+        assert.equal(r.controller_response, undefined);
+    });
+    it('receipt_id is stable across reruns with identical inputs', () => {
+        const a = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const b = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        assert.equal(a.receipt_id, b.receipt_id);
+        assert.equal(a.signature, b.signature);
+    });
+    it('happy path with controller_response attached: both signatures verify', () => {
+        const filed = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const controllerDid = publicKeyFromPrivate(CONTROLLER_PRIV);
+        const responded = attachControllerResponse(filed, {
+            status: 'under_review',
+            responded_at: RESPONDED_TS,
+            responder_did: controllerDid,
+            response_detail: 'Acknowledged. Routed to data-subject access team.',
+        }, CONTROLLER_PRIV);
+        assert.notEqual(responded.controller_response, undefined);
+        assert.equal(responded.controller_response?.response_signature.length, 128);
+        // Outer (contestant) signature is unchanged from the filing.
+        assert.equal(responded.signature, filed.signature);
+        assert.equal(responded.receipt_id, filed.receipt_id);
+        const v = verifyContestabilityReceipt(responded);
+        assert.equal(v.valid, true, `expected valid; got reason=${v.reason}`);
+    });
+    it('pseudonymous contestant: pseudonym_hash only, no did', () => {
+        const pseudo = createHash('sha256').update('subject-handle-42').digest('hex');
+        const r = createContestabilityReceipt(baseInput({
+            contestant: {
+                pseudonym_hash: pseudo,
+                standing_basis: 'data_subject',
+            },
+        }), CONTESTANT_PRIV);
+        assert.equal(r.contestant.did, undefined);
+        assert.equal(r.contestant.pseudonym_hash, pseudo);
+        const v = verifyContestabilityReceipt(r);
+        assert.equal(v.valid, true, `expected valid; got reason=${v.reason}`);
+    });
+    it('construct rejects contestant with neither did nor pseudonym_hash', () => {
+        assert.throws(() => createContestabilityReceipt(baseInput({
+            contestant: { standing_basis: 'data_subject' },
+        }), CONTESTANT_PRIV), /must have at least one of did or pseudonym_hash/);
+    });
+    it('verify reports MISSING_CONTESTANT_IDENTITY when both identity fields are empty', () => {
+        const r = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const tampered = {
+            ...r,
+            contestant: { standing_basis: 'data_subject' },
+        };
+        const v = verifyContestabilityReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'MISSING_CONTESTANT_IDENTITY');
+    });
+    it('tamper on grounds field yields RECEIPT_ID_MISMATCH', () => {
+        const r = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const tampered = {
+            ...r,
+            grounds: 'rewritten grounds after the fact',
+        };
+        const v = verifyContestabilityReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'RECEIPT_ID_MISMATCH');
+    });
+    it('tamper on response_detail invalidates the controller signature only', () => {
+        const filed = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const controllerDid = publicKeyFromPrivate(CONTROLLER_PRIV);
+        const responded = attachControllerResponse(filed, {
+            status: 'under_review',
+            responded_at: RESPONDED_TS,
+            responder_did: controllerDid,
+            response_detail: 'original response detail',
+        }, CONTROLLER_PRIV);
+        const tampered = {
+            ...responded,
+            controller_response: {
+                ...responded.controller_response,
+                response_detail: 'rewritten response detail',
+            },
+        };
+        const v = verifyContestabilityReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'CONTROLLER_SIGNATURE_INVALID');
+    });
+    it('all 7 standing_basis values verify', () => {
+        const all = [
+            'data_subject',
+            'third_party',
+            'regulator',
+            'court',
+            'internal_audit',
+            'insurer',
+            'principal',
+        ];
+        for (const standing_basis of all) {
+            const r = createContestabilityReceipt(baseInput({
+                contestant: { did: 'did:aps:test-subject-001', standing_basis },
+            }), CONTESTANT_PRIV);
+            const v = verifyContestabilityReceipt(r);
+            assert.equal(v.valid, true, `standing=${standing_basis} did not verify: ${v.reason}`);
+        }
+    });
+    it('all 6 requested_remedy values verify', () => {
+        const all = [
+            'rollback',
+            'review',
+            'explanation',
+            'compensation',
+            'erasure',
+            'modification',
+        ];
+        for (const requested_remedy of all) {
+            const r = createContestabilityReceipt(baseInput({ requested_remedy }), CONTESTANT_PRIV);
+            const v = verifyContestabilityReceipt(r);
+            assert.equal(v.valid, true, `remedy=${requested_remedy} did not verify: ${v.reason}`);
+        }
+    });
+    it('all 7 contest_status values verify when carried in controller_response', () => {
+        const all = [
+            'filed',
+            'under_review',
+            'upheld',
+            'rejected',
+            'remedied',
+            'expired',
+            'abandoned',
+        ];
+        const controllerDid = publicKeyFromPrivate(CONTROLLER_PRIV);
+        for (const status of all) {
+            const filed = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+            const responded = attachControllerResponse(filed, { status, responded_at: RESPONDED_TS, responder_did: controllerDid }, CONTROLLER_PRIV);
+            const v = verifyContestabilityReceipt(responded);
+            assert.equal(v.valid, true, `status=${status} did not verify: ${v.reason}`);
+        }
+    });
+    it('rejects wrong claim_type', () => {
+        const r = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        const tampered = {
+            ...r,
+            claim_type: 'aps:custody:v1',
+        };
+        const v = verifyContestabilityReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_CLAIM_TYPE');
+    });
+    it('matches the on-disk fixture byte-for-byte (no controller_response)', () => {
+        const fixturePath = join(__dirname, '..', 'fixtures', 'contestability.fixture.json');
+        const fixture = JSON.parse(readFileSync(fixturePath, 'utf-8'));
+        const built = createContestabilityReceipt(baseInput(), CONTESTANT_PRIV);
+        assert.deepEqual(built, fixture);
+        const v = verifyContestabilityReceipt(fixture);
+        assert.equal(v.valid, true, `fixture failed verify: ${v.reason}`);
+    });
+});
+//# sourceMappingURL=contestability.test.js.map

package/dist/src/v2/accountability/__tests__/contestability.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contestability.test.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/contestability.test.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,0DAA0D;AAC1D,EAAE;AACF,oEAAoE;AACpE,2CAA2C;AAE3C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EACL,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAS9D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAEzD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACvC,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACvC,MAAM,aAAa,GAAG,0BAA0B,CAAA;AAChD,MAAM,YAAY,GAAG,0BAA0B,CAAA;AAC/C,MAAM,SAAS,GAAG,kEAAkE,CAAA;AAEpF,MAAM,KAAK,GAAiB;IAC1B,OAAO,EAAE,qFAAqF;IAC9F,eAAe,EAAE;QACf,sCAAsC;QACtC,oCAAoC;QACpC,kDAAkD;KACnD;IACD,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,UAAU;IACxB,aAAa,EAAE,IAAI;CACpB,CAAA;AAED,SAAS,SAAS,CAAC,YAA4C,EAAE;IAC/D,OAAO;QACL,SAAS,EAAE,aAAa;QACxB,cAAc,EAAE,KAAK;QACrB,UAAU,EAAE;YACV,GAAG,EAAE,0BAA0B;YAC/B,cAAc,EAAE,cAA+B;SAChD;QACD,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,mEAAmE;QAC5E,gBAAgB,EAAE,aAAgC;QAClD,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;IAC1D,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAA;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;IAChD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACvE,MAAM,aAAa,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,wBAAwB,CACxC,KAAK,EACL;YACE,MAAM,EAAE,cAAc;YACtB,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,aAAa;YAC5B,eAAe,EAAE,mDAAmD;SACrE,EACD,eAAe,CAChB,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAA;QACzD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAC3E,6DAA6D;QAC7D,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;QAClD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;QACpD,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC7E,MAAM,CAAC,GAAG,2BAA2B,CACnC,SAAS,CAAC;YACR,UAAU,EAAE;gBACV,cAAc,EAAE,MAAM;gBACtB,cAAc,EAAE,cAAc;aAC/B;SACF,CAAC,EACF,eAAe,CAChB,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;QACjD,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CACH,2BAA2B,CACzB,SAAS,CAAC;YACR,UAAU,EAAE,EAAE,cAAc,EAAE,cAAc,EAAyC;SACtF,CAAC,EACF,eAAe,CAChB,EACH,iDAAiD,CAClD,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,QAAQ,GAA0B;YACtC,GAAG,CAAC;YACJ,UAAU,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE;SAC/C,CAAA;QACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,QAAQ,GAA0B;YACtC,GAAG,CAAC;YACJ,OAAO,EAAE,kCAAkC;SAC5C,CAAA;QACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACvE,MAAM,aAAa,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAA;QAC3D,MAAM,SAAS,GAAG,wBAAwB,CACxC,KAAK,EACL;YACE,MAAM,EAAE,cAAc;YACtB,YAAY,EAAE,YAAY;YAC1B,aAAa,EAAE,aAAa;YAC5B,eAAe,EAAE,0BAA0B;SAC5C,EACD,eAAe,CAChB,CAAA;QACD,MAAM,QAAQ,GAA0B;YACtC,GAAG,SAAS;YACZ,mBAAmB,EAAE;gBACnB,GAAG,SAAS,CAAC,mBAAoB;gBACjC,eAAe,EAAE,2BAA2B;aAC7C;SACF,CAAA;QACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,GAAG,GAAoB;YAC3B,cAAc;YACd,aAAa;YACb,WAAW;YACX,OAAO;YACP,gBAAgB;YAChB,SAAS;YACT,WAAW;SACZ,CAAA;QACD,KAAK,MAAM,cAAc,IAAI,GAAG,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,2BAA2B,CACnC,SAAS,CAAC;gBACR,UAAU,EAAE,EAAE,GAAG,EAAE,0BAA0B,EAAE,cAAc,EAAE;aAChE,CAAC,EACF,eAAe,CAChB,CAAA;YACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;YACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,cAAc,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACvF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,GAAG,GAAsB;YAC7B,UAAU;YACV,QAAQ;YACR,aAAa;YACb,cAAc;YACd,SAAS;YACT,cAAc;SACf,CAAA;QACD,KAAK,MAAM,gBAAgB,IAAI,GAAG,EAAE,CAAC;YACnC,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,eAAe,CAAC,CAAA;YACvF,MAAM,CAAC,GAAG,2BAA2B,CAAC,CAAC,CAAC,CAAA;YACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,gBAAgB,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACvF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,GAAG,GAAoB;YAC3B,OAAO;YACP,cAAc;YACd,QAAQ;YACR,UAAU;YACV,UAAU;YACV,SAAS;YACT,WAAW;SACZ,CAAA;QACD,MAAM,aAAa,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAA;QAC3D,KAAK,MAAM,MAAM,IAAI,GAAG,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;YACvE,MAAM,SAAS,GAAG,wBAAwB,CACxC,KAAK,EACL,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,EACpE,eAAe,CAChB,CAAA;YACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAA;YAChD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,MAAM,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QAC7E,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACnE,MAAM,QAAQ,GAAG;YACf,GAAG,CAAC;YACJ,UAAU,EAAE,gBAA2C;SACxD,CAAA;QACD,MAAM,CAAC,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,6BAA6B,CAAC,CAAA;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAA0B,CAAA;QACvF,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,EAAE,EAAE,eAAe,CAAC,CAAA;QACvE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAA;QAC9C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/v2/accountability/__tests__/custody.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=custody.test.d.ts.map

package/dist/src/v2/accountability/__tests__/custody.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.test.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/custody.test.ts"],"names":[],"mappings":""}

package/dist/src/v2/accountability/__tests__/custody.test.js

@@ -0,0 +1,155 @@
+// Copyright 2024-2026 Tymofii Pidlisnyi. Apache-2.0 license. See LICENSE.
+// CustodyReceipt — construct + verify conformance.
+//
+// Note: this file uses node:test rather than vitest because the repo
+// has no vitest install; node:test is the v2 convention (see
+// tests/v2/instruction-provenance/conformance.test.ts and siblings).
+// The describe/it/assert API is interchangeable for these tests.
+import { describe, it } from 'node:test';
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { createCustodyReceipt } from '../construct/custody.js';
+import { verifyCustodyReceipt } from '../verify/custody.js';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PRIV = '22'.repeat(64);
+const TS = '2026-04-30T00:00:00.000Z';
+const MERKLE_ROOT_1 = '0000000000000000000000000000000000000000000000000000000000000001';
+const SCOPE = {
+    asserts: 'Custodian sealed the named receipt batch at the named time for the named purpose.',
+    does_not_assert: [
+        'that the underlying receipts are factually accurate',
+        'that downstream custody handoffs were honored',
+    ],
+    capture_mode: 'self_attested',
+    completeness: 'complete',
+    self_attested: true,
+};
+function makeBaseInput(overrides = {}) {
+    return {
+        timestamp: TS,
+        scope_of_claim: SCOPE,
+        custodian_did: 'did:aps:test-custodian-001',
+        event_type: 'sealed',
+        subject_receipt_batch: { merkle_root: MERKLE_ROOT_1, count: 1 },
+        purpose: 'internal_audit',
+        ...overrides,
+    };
+}
+describe('CustodyReceipt — construct + verify', () => {
+    it('happy path: construct + verify round-trips green', () => {
+        const r = createCustodyReceipt(makeBaseInput(), PRIV);
+        const v = verifyCustodyReceipt(r);
+        assert.equal(v.valid, true, `expected valid; got reason=${v.reason}`);
+        assert.equal(r.claim_type, 'aps:custody:v1');
+        assert.equal(r.signer_did.length, 64);
+        assert.equal(r.signature.length, 128);
+        assert.equal(r.receipt_id.length, 64);
+    });
+    it('receipt_id is stable across reruns with identical inputs', () => {
+        const a = createCustodyReceipt(makeBaseInput(), PRIV);
+        const b = createCustodyReceipt(makeBaseInput(), PRIV);
+        assert.equal(a.receipt_id, b.receipt_id);
+        assert.equal(a.signature, b.signature);
+    });
+    it('all 8 event types are accepted by construct + verify', () => {
+        const events = [
+            'created',
+            'sealed',
+            'transferred',
+            'disclosed',
+            'redacted',
+            'erased',
+            'expired',
+            'verified',
+        ];
+        for (const event_type of events) {
+            const input = makeBaseInput({ event_type });
+            // 'transferred' requires next_custodian_did per the type contract;
+            // handled in a dedicated test. Other events accept the base input.
+            if (event_type === 'transferred')
+                continue;
+            const r = createCustodyReceipt(input, PRIV);
+            const v = verifyCustodyReceipt(r);
+            assert.equal(v.valid, true, `event_type=${event_type} did not verify: ${v.reason}`);
+        }
+    });
+    it('all 7 purposes are accepted by construct + verify', () => {
+        const purposes = [
+            'internal_audit',
+            'regulator_disclosure',
+            'subject_access',
+            'litigation_discovery',
+            'vendor_handoff',
+            'archival',
+            'incident_response',
+        ];
+        for (const purpose of purposes) {
+            const r = createCustodyReceipt(makeBaseInput({ purpose }), PRIV);
+            const v = verifyCustodyReceipt(r);
+            assert.equal(v.valid, true, `purpose=${purpose} did not verify: ${v.reason}`);
+        }
+    });
+    it('transferred event carries next_custodian_did and round-trips', () => {
+        const r = createCustodyReceipt(makeBaseInput({
+            event_type: 'transferred',
+            next_custodian_did: 'did:aps:test-custodian-002',
+        }), PRIV);
+        assert.equal(r.event_type, 'transferred');
+        assert.equal(r.next_custodian_did, 'did:aps:test-custodian-002');
+        const v = verifyCustodyReceipt(r);
+        assert.equal(v.valid, true, `verify failed: ${v.reason}`);
+    });
+    it('erased event preserves merkle_root + count (cryptographic-erasure pattern)', () => {
+        const r = createCustodyReceipt(makeBaseInput({
+            event_type: 'erased',
+            purpose: 'subject_access',
+            subject_receipt_batch: { merkle_root: MERKLE_ROOT_1, count: 42 },
+        }), PRIV);
+        assert.equal(r.event_type, 'erased');
+        // The chain remains verifiable across erasure: merkle_root and count
+        // survive even though the underlying content is irrecoverable.
+        assert.equal(r.subject_receipt_batch.merkle_root, MERKLE_ROOT_1);
+        assert.equal(r.subject_receipt_batch.count, 42);
+        const v = verifyCustodyReceipt(r);
+        assert.equal(v.valid, true, `verify failed: ${v.reason}`);
+    });
+    it('tamper on event_type to a non-enum value yields INVALID_EVENT_TYPE', () => {
+        const r = createCustodyReceipt(makeBaseInput(), PRIV);
+        const tampered = { ...r, event_type: 'fabricated' };
+        const v = verifyCustodyReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_EVENT_TYPE');
+    });
+    it('tamper on event_type to a different valid enum yields RECEIPT_ID_MISMATCH', () => {
+        const r = createCustodyReceipt(makeBaseInput({ event_type: 'sealed' }), PRIV);
+        const tampered = { ...r, event_type: 'erased' };
+        const v = verifyCustodyReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'RECEIPT_ID_MISMATCH');
+    });
+    it('tamper on signature alone yields SIGNATURE_INVALID', () => {
+        const r = createCustodyReceipt(makeBaseInput(), PRIV);
+        const tampered = { ...r, signature: '00'.repeat(64) };
+        const v = verifyCustodyReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'SIGNATURE_INVALID');
+    });
+    it('rejects wrong claim_type', () => {
+        const r = createCustodyReceipt(makeBaseInput(), PRIV);
+        const tampered = { ...r, claim_type: 'aps:action:v1' };
+        const v = verifyCustodyReceipt(tampered);
+        assert.equal(v.valid, false);
+        assert.equal(v.reason, 'INVALID_CLAIM_TYPE');
+    });
+    it('matches the on-disk fixture byte-for-byte', () => {
+        const fixturePath = join(__dirname, '..', 'fixtures', 'custody.fixture.json');
+        const fixture = JSON.parse(readFileSync(fixturePath, 'utf-8'));
+        const built = createCustodyReceipt(makeBaseInput(), PRIV);
+        assert.deepEqual(built, fixture);
+        const v = verifyCustodyReceipt(fixture);
+        assert.equal(v.valid, true, `fixture failed verify: ${v.reason}`);
+    });
+});
+//# sourceMappingURL=custody.test.js.map

package/dist/src/v2/accountability/__tests__/custody.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custody.test.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/__tests__/custody.test.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,mDAAmD;AACnD,EAAE;AACF,qEAAqE;AACrE,6DAA6D;AAC7D,qEAAqE;AACrE,iEAAiE;AAEjE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,MAAM,MAAM,oBAAoB,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAQ3D,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;AAEzD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAC5B,MAAM,EAAE,GAAG,0BAA0B,CAAA;AACrC,MAAM,aAAa,GAAG,kEAAkE,CAAA;AAExF,MAAM,KAAK,GAAiB;IAC1B,OAAO,EAAE,mFAAmF;IAC5F,eAAe,EAAE;QACf,qDAAqD;QACrD,+CAA+C;KAChD;IACD,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,UAAU;IACxB,aAAa,EAAE,IAAI;CACpB,CAAA;AAED,SAAS,aAAa,CAAC,YAAqC,EAAE;IAC5D,OAAO;QACL,SAAS,EAAE,EAAE;QACb,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,4BAA4B;QAC3C,UAAU,EAAE,QAA4B;QACxC,qBAAqB,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE;QAC/D,OAAO,EAAE,gBAAkC;QAC3C,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,8BAA8B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,MAAM,GAAuB;YACjC,SAAS;YACT,QAAQ;YACR,aAAa;YACb,WAAW;YACX,UAAU;YACV,QAAQ;YACR,SAAS;YACT,UAAU;SACX,CAAA;QACD,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC,CAAA;YAC3C,mEAAmE;YACnE,mEAAmE;YACnE,IAAI,UAAU,KAAK,aAAa;gBAAE,SAAQ;YAC1C,MAAM,CAAC,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;YAC3C,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;YACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,UAAU,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACrF,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,QAAQ,GAAqB;YACjC,gBAAgB;YAChB,sBAAsB;YACtB,gBAAgB;YAChB,sBAAsB;YACtB,gBAAgB;YAChB,UAAU;YACV,mBAAmB;SACpB,CAAA;QACD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;YAChE,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;YACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,WAAW,OAAO,oBAAoB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QAC/E,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,GAAG,oBAAoB,CAC5B,aAAa,CAAC;YACZ,UAAU,EAAE,aAAa;YACzB,kBAAkB,EAAE,4BAA4B;SACjD,CAAC,EACF,IAAI,CACL,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAA;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAA;QAChE,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,CAAC,GAAG,oBAAoB,CAC5B,aAAa,CAAC;YACZ,UAAU,EAAE,QAAQ;YACpB,OAAO,EAAE,gBAAgB;YACzB,qBAAqB,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE;SACjE,CAAC,EACF,IAAI,CACL,CAAA;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;QACpC,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAC/C,MAAM,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAA;QACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,YAAgC,EAAE,CAAA;QACvE,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,CAAA;QAC7E,MAAM,QAAQ,GAAmB,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;QAC/D,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAmB,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAA;QACrE,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACrD,MAAM,QAAQ,GAAG,EAAE,GAAG,CAAC,EAAE,UAAU,EAAE,eAAmC,EAAE,CAAA;QAC1E,MAAM,CAAC,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAA;QAC7E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAmB,CAAA;QAChF,MAAM,KAAK,GAAG,oBAAoB,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAA;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/v2/accountability/__tests__/fixtures.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fixtures.test.d.ts.map