agent-passport-system 4.0.0 → 4.1.0

package/dist/src/core/canonical-jcs.d.ts

@@ -1,3 +1,14 @@
+/** Raised when a value cannot be canonicalized under RFC 8785. Subclasses the
+ *  built-in Error that canonicalizeJCS already throws, so any existing handler
+ *  that catches Error (or `catch (e)`) still catches it and fails closed. */
+export declare class JcsCanonicalizationError extends Error {
+    readonly code: string;
+    /** Stable machine-readable category, shared across the APS SDKs. */
+    readonly category = "invalid_unicode";
+    /** Specific failure within the category, e.g. 'lone_surrogate'. */
+    readonly reason: string;
+    constructor(code: string, message: string, reason?: string);
+}
 /** RFC 8785 JSON Canonicalization Scheme.
  *  Differences from legacy canonicalize():
  *  - null values ARE preserved (not filtered)

package/dist/src/core/canonical-jcs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-jcs.d.ts","sourceRoot":"","sources":["../../../src/core/canonical-jcs.ts"],"names":[],"mappings":"AAgBA;;;;;qEAKqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAiCtD;AAED;kFACkF;AAClF,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,eAAe,EAAE,MAAM,GACtB,KAAK,GAAG,QAAQ,GAAG,WAAW,CAMhC;AAYD,mEAAmE;AACnE,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,OAAO,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;CACtB;AAOD;;;yDAGyD;AACzD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE;AAED,4DAA4D;AAC5D,wBAAgB,cAAc,IAAI,0BAA0B,EAAE,CAoF7D"}
+{"version":3,"file":"canonical-jcs.d.ts","sourceRoot":"","sources":["../../../src/core/canonical-jcs.ts"],"names":[],"mappings":"AAgBA;;6EAE6E;AAC7E,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,qBAAoB;IACrC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAmB,EAKnE;CACF;AAqBD;;;;;qEAKqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAmCtD;AAED;kFACkF;AAClF,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,EACZ,eAAe,EAAE,MAAM,GACtB,KAAK,GAAG,QAAQ,GAAG,WAAW,CAMhC;AAYD,mEAAmE;AACnE,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,OAAO,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;CACtB;AAOD;;;yDAGyD;AACzD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAErE;AAED,4DAA4D;AAC5D,wBAAgB,cAAc,IAAI,0BAA0B,EAAE,CAoF7D"}

package/dist/src/core/canonical-jcs.js

@@ -13,6 +13,43 @@
 // Migration: new signatures should use JCS. Old signatures keep
 // working with the legacy function. Verification tries both.
 // ══════════════════════════════════════════════════════════════════
+/** Raised when a value cannot be canonicalized under RFC 8785. Subclasses the
+ *  built-in Error that canonicalizeJCS already throws, so any existing handler
+ *  that catches Error (or `catch (e)`) still catches it and fails closed. */
+export class JcsCanonicalizationError extends Error {
+    code;
+    /** Stable machine-readable category, shared across the APS SDKs. */
+    category = 'invalid_unicode';
+    /** Specific failure within the category, e.g. 'lone_surrogate'. */
+    reason;
+    constructor(code, message, reason = 'lone_surrogate') {
+        super(message);
+        this.name = 'JcsCanonicalizationError';
+        this.code = code;
+        this.reason = reason;
+    }
+}
+/** Reject a string containing an unpaired UTF-16 surrogate: a high surrogate
+ *  (U+D800..U+DBFF) not immediately followed by a low surrogate (U+DC00..U+DFFF),
+ *  or a low surrogate not immediately preceded by a high one. A lone surrogate is
+ *  not a valid Unicode scalar and has no UTF-8 encoding, so RFC 8785 requires
+ *  rejecting the input rather than escaping it. A valid surrogate PAIR passes. */
+function assertNoLoneSurrogate(s) {
+    for (let i = 0; i < s.length; i++) {
+        const c = s.charCodeAt(i);
+        if (c >= 0xd800 && c <= 0xdbff) {
+            const next = i + 1 < s.length ? s.charCodeAt(i + 1) : 0;
+            if (next >= 0xdc00 && next <= 0xdfff) {
+                i++;
+                continue;
+            } // valid pair
+            throw new JcsCanonicalizationError('ERR_JCS_LONE_SURROGATE', 'canonicalizeJCS: string contains an unpaired UTF-16 high surrogate; a lone surrogate has no valid UTF-8 encoding and RFC 8785 requires rejection');
+        }
+        if (c >= 0xdc00 && c <= 0xdfff) {
+            throw new JcsCanonicalizationError('ERR_JCS_LONE_SURROGATE', 'canonicalizeJCS: string contains an unpaired UTF-16 low surrogate; a lone surrogate has no valid UTF-8 encoding and RFC 8785 requires rejection');
+        }
+    }
+}
 /** RFC 8785 JSON Canonicalization Scheme.
  *  Differences from legacy canonicalize():
  *  - null values ARE preserved (not filtered)
@@ -32,6 +69,7 @@ export function canonicalizeJCS(value) {
             return JSON.stringify(value);
         }
         case 'string':
+            assertNoLoneSurrogate(value);
             return JSON.stringify(value);
         case 'object': {
             if (value instanceof Date)
@@ -44,6 +82,7 @@ export function canonicalizeJCS(value) {
             const keys = Object.keys(obj).sort();
             const pairs = [];
             for (const key of keys) {
+                assertNoLoneSurrogate(key);
                 const v = obj[key];
                 // RFC 8785: undefined becomes null, null is preserved
                 // Only skip if the key was never set (shouldn't happen with Object.keys)

package/dist/src/core/canonical-jcs.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-jcs.js","sourceRoot":"","sources":["../../../src/core/canonical-jcs.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,EAAE;AACF,wBAAwB;AACxB,mDAAmD;AACnD,uDAAuD;AACvD,EAAE;AACF,gEAAgE;AAChE,6DAA6D;AAC7D,qEAAqE;AAErE;;;;;qEAKqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IAExD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;QACjC,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YAC7E,sEAAsE;YACtE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,KAAK,YAAY,IAAI;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;YACvE,CAAC;YACD,gEAAgE;YAChE,MAAM,GAAG,GAAG,KAAgC,CAAA;YAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YACpC,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;gBAClB,sDAAsD;gBACtD,yEAAyE;gBACzE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QACpC,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,eAAuB;IAEvB,2EAA2E;IAC3E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAA;IAC3C,uEAAuE;IACvE,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACnD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACtD,OAAO,MAAM,CAAC,MAAM,CAAC,GAA8B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC5D,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAanC,8CAA8C;AAC9C,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClE,CAAC;AAED;;;yDAGyD;AACzD,MAAM,UAAU,gBAAgB,CAAC,GAA4B;IAC3D,OAAO,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAiC,EAAE,CAAA;IAEhD,SAAS,SAAS,CAAC,EAAU,EAAE,IAAY,EAAE,KAAc,EAAE,GAAW,EAAE,MAAc;QACtF,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK;YAC5B,YAAY,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM;YAC1C,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC;SAC7D,CAAC,CAAA;IACJ,CAAC;IAED,8CAA8C;IAC9C,SAAS,CAAC,QAAQ,EAAE,8CAA8C,EAChE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EACvC,wCAAwC,EACxC,wCAAwC,CAAC,CAAA;IAE3C,0CAA0C;IAC1C,SAAS,CAAC,QAAQ,EAAE,2CAA2C,EAC7D,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EACvD,wDAAwD,EACxD,wCAAwC,CAAC,CAAA;IAE3C,mBAAmB;IACnB,SAAS,CAAC,QAAQ,EAAE,mCAAmC,EACrD,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EACjC,kCAAkC,EAClC,kCAAkC,CAAC,CAAA;IAErC,+BAA+B;IAC/B,SAAS,CAAC,QAAQ,EAAE,kCAAkC,EACpD,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAChD,gDAAgD,EAChD,mCAAmC,CAAC,CAAA;IAEtC,gCAAgC;IAChC,SAAS,CAAC,QAAQ,EAAE,sDAAsD,EACxE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EACvB,sBAAsB,EACtB,sBAAsB,CAAC,CAAA;IAEzB,wBAAwB;IACxB,SAAS,CAAC,QAAQ,EAAE,yCAAyC,EAC3D,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EACnD,oDAAoD,EACpD,oDAAoD,CAAC,CAAA;IAEvD,uBAAuB;IACvB,SAAS,CAAC,QAAQ,EAAE,8BAA8B,EAChD,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9B,+BAA+B,EAC/B,+BAA+B,CAAC,CAAA;IAElC,cAAc;IACd,SAAS,CAAC,QAAQ,EAAE,wBAAwB,EAC1C,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAChC,iCAAiC,EACjC,iCAAiC,CAAC,CAAA;IAEpC,uDAAuD;IACvD,SAAS,CAAC,QAAQ,EAAE,4DAA4D,EAC9E;QACE,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;QACzC,UAAU,EAAE,GAAG;QACf,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,sBAAsB;QACjC,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,sBAAsB;KAClC,EACD,iTAAiT,EACjT,oQAAoQ,CAAC,CAAA;IAEvQ,sBAAsB;IACtB,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAClC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAChC,iCAAiC,EACjC,iCAAiC,CAAC,CAAA;IAEpC,OAAO,OAAO,CAAA;AAChB,CAAC"}
+{"version":3,"file":"canonical-jcs.js","sourceRoot":"","sources":["../../../src/core/canonical-jcs.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,wEAAwE;AACxE,EAAE;AACF,wBAAwB;AACxB,mDAAmD;AACnD,uDAAuD;AACvD,EAAE;AACF,gEAAgE;AAChE,6DAA6D;AAC7D,qEAAqE;AAErE;;6EAE6E;AAC7E,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,CAAQ;IACrB,oEAAoE;IAC3D,QAAQ,GAAG,iBAAiB,CAAA;IACrC,mEAAmE;IAC1D,MAAM,CAAQ;IACvB,YAAY,IAAY,EAAE,OAAe,EAAE,MAAM,GAAG,gBAAgB;QAClE,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAA;QACtC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAA;IACtB,CAAC;CACF;AAED;;;;kFAIkF;AAClF,SAAS,qBAAqB,CAAC,CAAS;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QACzB,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACvD,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;gBAAC,CAAC,EAAE,CAAC;gBAAC,SAAQ;YAAC,CAAC,CAAC,aAAa;YACrE,MAAM,IAAI,wBAAwB,CAAC,wBAAwB,EAAE,kJAAkJ,CAAC,CAAA;QAClN,CAAC;QACD,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,wBAAwB,CAAC,wBAAwB,EAAE,iJAAiJ,CAAC,CAAA;QACjN,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;qEAKqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IAExD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;QACjC,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;YAC7E,sEAAsE;YACtE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC;QACD,KAAK,QAAQ;YACX,qBAAqB,CAAC,KAAK,CAAC,CAAA;YAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC9B,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,KAAK,YAAY,IAAI;gBAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;YACvE,CAAC;YACD,gEAAgE;YAChE,MAAM,GAAG,GAAG,KAAgC,CAAA;YAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YACpC,MAAM,KAAK,GAAa,EAAE,CAAA;YAC1B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,qBAAqB,CAAC,GAAG,CAAC,CAAA;gBAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAA;gBAClB,sDAAsD;gBACtD,yEAAyE;gBACzE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAA;QACpC,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,KAAK,EAAE,CAAC,CAAA;IAC5D,CAAC;AACH,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,sBAAsB,CACpC,GAAY,EACZ,eAAuB;IAEvB,2EAA2E;IAC3E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;QAAE,OAAO,WAAW,CAAA;IAC3C,uEAAuE;IACvE,IAAI,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAA;IACnD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAC9D,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IACtD,OAAO,MAAM,CAAC,MAAM,CAAC,GAA8B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAC5D,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAanC,8CAA8C;AAC9C,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClE,CAAC;AAED;;;yDAGyD;AACzD,MAAM,UAAU,gBAAgB,CAAC,GAA4B;IAC3D,OAAO,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,cAAc;IAC5B,MAAM,OAAO,GAAiC,EAAE,CAAA;IAEhD,SAAS,SAAS,CAAC,EAAU,EAAE,IAAY,EAAE,KAAc,EAAE,GAAW,EAAE,MAAc;QACtF,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK;YAC5B,YAAY,EAAE,GAAG,EAAE,eAAe,EAAE,MAAM;YAC1C,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,MAAM,CAAC;SAC7D,CAAC,CAAA;IACJ,CAAC;IAED,8CAA8C;IAC9C,SAAS,CAAC,QAAQ,EAAE,8CAA8C,EAChE,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EACvC,wCAAwC,EACxC,wCAAwC,CAAC,CAAA;IAE3C,0CAA0C;IAC1C,SAAS,CAAC,QAAQ,EAAE,2CAA2C,EAC7D,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EACvD,wDAAwD,EACxD,wCAAwC,CAAC,CAAA;IAE3C,mBAAmB;IACnB,SAAS,CAAC,QAAQ,EAAE,mCAAmC,EACrD,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EACjC,kCAAkC,EAClC,kCAAkC,CAAC,CAAA;IAErC,+BAA+B;IAC/B,SAAS,CAAC,QAAQ,EAAE,kCAAkC,EACpD,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,EAChD,gDAAgD,EAChD,mCAAmC,CAAC,CAAA;IAEtC,gCAAgC;IAChC,SAAS,CAAC,QAAQ,EAAE,sDAAsD,EACxE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EACvB,sBAAsB,EACtB,sBAAsB,CAAC,CAAA;IAEzB,wBAAwB;IACxB,SAAS,CAAC,QAAQ,EAAE,yCAAyC,EAC3D,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,EACnD,oDAAoD,EACpD,oDAAoD,CAAC,CAAA;IAEvD,uBAAuB;IACvB,SAAS,CAAC,QAAQ,EAAE,8BAA8B,EAChD,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAC9B,+BAA+B,EAC/B,+BAA+B,CAAC,CAAA;IAElC,cAAc;IACd,SAAS,CAAC,QAAQ,EAAE,wBAAwB,EAC1C,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAChC,iCAAiC,EACjC,iCAAiC,CAAC,CAAA;IAEpC,uDAAuD;IACvD,SAAS,CAAC,QAAQ,EAAE,4DAA4D,EAC9E;QACE,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE,kBAAkB;QAC/B,KAAK,EAAE,CAAC,WAAW,EAAE,mBAAmB,CAAC;QACzC,UAAU,EAAE,GAAG;QACf,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,sBAAsB;QACjC,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,CAAC;QACX,YAAY,EAAE,CAAC;QACf,SAAS,EAAE,sBAAsB;KAClC,EACD,iTAAiT,EACjT,oQAAoQ,CAAC,CAAA;IAEvQ,sBAAsB;IACtB,SAAS,CAAC,QAAQ,EAAE,gBAAgB,EAClC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAChC,iCAAiC,EACjC,iCAAiC,CAAC,CAAA;IAEpC,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/src/core/reversibility-fold.d.ts

@@ -0,0 +1,425 @@
+/** What evidence actually establishes about an effect's reversibility.
+ *  `unresolved` is an honest "not known yet", never silently upgraded. */
+export type RealizedClass = 'tentative' | 'compensable' | 'irreversible' | 'unresolved';
+/** The conservative class admission and the gateway act on. There is no
+ *  `unresolved` here: the projection below folds it to `irreversible`. */
+export type EnforcementClass = 'tentative' | 'compensable' | 'irreversible';
+/** Pure projection realized -> enforcement (spec section 0).
+ *  `unresolved` becomes `irreversible` (conservative, fail-closed). Every
+ *  other value is the identity. This is the ONLY place `unresolved` is
+ *  mapped to `irreversible`; realized truth is never rewritten. */
+export declare function enforcementFrom(realized: RealizedClass): EnforcementClass;
+/** The externality bucket an effect falls in. These values mirror the RAPV0
+ *  TaskClassification.externality vocabulary (src/types/reputation-authority.ts)
+ *  minus 'none'; a caller may pass RAPV0 values, and 'none' or an absent value
+ *  is treated as unbound (see EffectFacts.externality). This is pattern reuse,
+ *  not a shared type: reversibility is not a scalar of the effect location. */
+export type EffectExternality = 'internal' | 'external-reversible' | 'external-irreversible';
+/** Finality of an external effect. Used to decide whether an irreversible
+ *  verdict is definitive or only an upper bound (spec section 4). */
+export type FinalityState = 'settled' | 'pending' | 'expired' | 'contradicted';
+/** A reversal-right attestation fact. To count, the signer MUST be a domain
+ *  other than the acting principal (spec section 4). This step models the
+ *  fact; it verifies no signature. A signer equal to the acting principal is
+ *  self-attestation and does not establish the right. */
+export interface ReversalRightFact {
+    /** Identity/domain that attested the reversal right. */
+    signer: string;
+}
+/** The raw facts a classifier consumes for one effect. Every field is
+ *  optional: absence is meaningful and generally fails toward unresolved or,
+ *  once the externality bucket is known, toward irreversible (fail-closed).
+ *  This is the classifier input, not a receipt wire shape. */
+export interface EffectFacts {
+    /** The externality bucket. Absent (undefined) means unbound / missing and
+     *  classifies as unresolved. A caller mapping RAPV0 'none' should pass it
+     *  as undefined here. */
+    externality?: EffectExternality;
+    /** RESERVED for the deferred v4 section 10 four-object subsystem. Not consumed
+     *  by the v0 classifier: v0 has no external-compensable path, so the acting
+     *  principal plays no part in v0 classification. */
+    actingPrincipal?: string;
+    /** Who can invoke reversal (recovery_controller), a carried raw fact. Not
+     *  consumed by the v0 classifier (v0 external is irreversible-only). */
+    recoveryController?: string | null;
+    /** RESERVED for the deferred v4 section 10 four-object subsystem. Not consumed
+     *  by the v0 classifier. In v0 no reversal-right can ground compensability;
+     *  external compensability is a future profile, not a v0 branch. */
+    reversalRight?: ReversalRightFact | null;
+    /** Finality of an external-irreversible effect. Only 'settled' contributes
+     *  to a definitive (non-upper-bound) irreversible verdict. */
+    finalityState?: FinalityState;
+    /** Whether the target/counterparty binding is verified, for external-
+     *  irreversible effects. Both finality and this must hold to drop the
+     *  upper_bound label. */
+    targetBindingVerified?: boolean;
+    /** A producer-declared recovery mechanism reference. Carried as raw data only:
+     *  in v0 it derives NOTHING about the class (v4 s4 / s4.1). A self-declared ref
+     *  is self-attestation, so it cannot mint compensability; internal-compensable
+     *  requires a verifier-checked recovery result that v0 defers. */
+    recoveryMechanismRef?: string | null;
+}
+/** Deterministic reason codes for the v0 profile. One per mapping rule, so a
+ *  verifier and an auditor read the same explanation for the same facts. Part of
+ *  the profile's authoritative content (its reason-code set). */
+export type ReasonCode = 'RM_V0_UNBOUND' | 'RM_V0_INTERNAL_DEFINITIVE' | 'RM_V0_INTERNAL_UPPER_BOUND' | 'RM_V0_EXTERNAL_DEFINITIVE' | 'RM_V0_EXTERNAL_UPPER_BOUND';
+/** The result of a classification. The RealizedClass is the mapping output;
+ *  `label` carries the section-4 upper_bound annotation, present only when an
+ *  external verdict is not backed by verified finality and target binding; and
+ *  `reason` is the deterministic reason code for the rule that fired. */
+export interface ClassificationResult {
+    realized: RealizedClass;
+    label?: 'upper_bound';
+    reason: ReasonCode;
+}
+/** A versioned mapping profile: a pure function from raw effect facts to a
+ *  RealizedClass, addressed by a stable id. */
+export interface ClassificationProfile {
+    id: string;
+    classify: (facts: EffectFacts) => ClassificationResult;
+}
+/** Stable id of the v0 mapping profile. Chosen value; the spec fixes no
+ *  literal, only that classification_profile_id must be bound. */
+export declare const REVERSIBILITY_MAPPING_V0_ID = "reversibility-mapping-v0";
+/** The v0 mapping rules (v4 sections 4, 4.1, 10), as a pure function.
+ *
+ *  v0 has NO external-compensable path. External compensability is a FUTURE
+ *  profile (reversibility-mapping-v1) built on the deferred four-object subsystem
+ *  of v4 section 10, never a branch inside the v0 profile. v4 section 10 rejects
+ *  the domain-separation-without-authority model (a non-empty reversal-right
+ *  signer different from the principal): a registration outside operator control
+ *  shows only separation, not authority-over-a-mechanism, so it cannot ground
+ *  compensability. This profile must not behave differently by entry point.
+ *
+ *  - external-irreversible AND external-reversible -> irreversible. Upper bound
+ *    (label upper_bound) unless finality is settled AND the target binding is
+ *    verified. The two external buckets are treated identically in v0.
+ *  - internal -> irreversible, treated exactly like an external-irreversible
+ *    effect (upper_bound unless finality settled AND target binding verified). A
+ *    self-declared recovery_mechanism_ref derives nothing (v4 s4 / s4.1), so v0
+ *    has no internal-compensable path.
+ *  - unbound / missing externality -> unresolved.
+ *  v0 therefore emits no compensable outcome at all. */
+export declare function classifyV0(facts: EffectFacts): ClassificationResult;
+/** The v0 profile function object. */
+export declare const reversibilityMappingV0: ClassificationProfile;
+/** The AUTHORITATIVE, canonical content of the v0 profile (v4 section 4): its
+ *  input schema, mapping rules, reason-code set, and time semantics, and nothing
+ *  else. No runtime, diagnostic, or human-facing metadata (display name,
+ *  comments, timestamps) is included, so those can change without changing the
+ *  content digest. This object is what the digest commits to. */
+export declare const REVERSIBILITY_PROFILE_V0_CONTENT: {
+    profile_id: string;
+    input_fields: string[];
+    externality_values: string[];
+    finality_values: string[];
+    external_compensable: boolean;
+    internal_compensable: boolean;
+    rules: ({
+        id: string;
+        when: string;
+        realized: string;
+        reason: string;
+        label?: undefined;
+    } | {
+        id: string;
+        when: string;
+        realized: string;
+        label: string;
+        reason: string;
+    })[];
+    reason_codes: string[];
+    time_semantics: {
+        clock_skew_ms: number;
+        finality_source: string;
+        target_binding_source: string;
+    };
+    schema_version: string;
+};
+/** Domain-separated content digest of a profile (v4 section 4):
+ *  SHA-256( UTF8("APS-REVERSIBILITY-PROFILE-V0") || 0x00 || UTF8(JCS(content)) ).
+ *  Any language that JCS-canonicalizes the same content reproduces this byte-for-
+ *  byte. */
+export declare function profileContentDigest(content: unknown): string;
+/** The v0 profile's content digest. */
+export declare const REVERSIBILITY_MAPPING_V0_DIGEST: string;
+/** A registered profile: its function object, its authoritative content, its
+ *  content digest, and non-authoritative diagnostic metadata that is NOT part of
+ *  the digest. */
+export interface RegisteredProfile {
+    profile: ClassificationProfile;
+    content: unknown;
+    digest: string;
+    /** Diagnostic/human-facing only. Excluded from the digest; may change freely. */
+    metadata: {
+        display_name: string;
+        description: string;
+    };
+}
+/** Resolve a mapping profile function by its classification_profile_id. Returns
+ *  undefined for an unknown id (a distinct event from unbound facts). */
+export declare function getClassificationProfile(id: string): ClassificationProfile | undefined;
+/** Resolve the full registered profile (function, content, digest, metadata). */
+export declare function getRegisteredProfile(id: string): RegisteredProfile | undefined;
+/** The registry's content digest for a profile id, or undefined if unknown. */
+export declare function getProfileDigest(id: string): string | undefined;
+/** The set of registered profile ids. */
+export declare function registeredProfileIds(): string[];
+/** The outcome of checking a declared (id, digest) against the registry. Unknown
+ *  id and digest mismatch are DISTINCT failures, never conflated. */
+export type ProfileBindingCheck = {
+    ok: true;
+    digest: string;
+} | {
+    ok: false;
+    reason: 'unknown_profile';
+    classificationProfileId: string;
+} | {
+    ok: false;
+    reason: 'digest_mismatch';
+    classificationProfileId: string;
+    declaredDigest: string;
+    expectedDigest: string;
+};
+/** Check a declared profile id + content digest against the immutable registry.
+ *  An id not in the registry fails unknown_profile; a known id whose declared
+ *  digest does not equal the registry digest fails digest_mismatch. */
+export declare function verifyProfileBinding(id: string, declaredDigest: string): ProfileBindingCheck;
+/** Where an effect lands. Coarser than the classifier's externality bucket:
+ *  the reversible-vs-irreversible distinction for an external effect is not a
+ *  field an author sets, it is recomputed from the recovery facts (spec Q4:
+ *  reversibility is not a scalar of the effect location). */
+export type EffectScope = 'internal' | 'external';
+/** Whether the effect's facts are established yet. Carried per section 3 and
+ *  consumed by the two-stage lifecycle (a later step), not by this recompute. */
+export type EvidenceStatus = 'resolved' | 'pending' | 'unavailable' | 'conflicted';
+/** One instantiated effect. Raw facts only. */
+export interface EffectInstantiationElement {
+    effect_scope: EffectScope;
+    effect_target_ref: string;
+    finality_state: FinalityState;
+    recovery_mechanism_ref: string | null;
+    recovery_controller: string | null;
+    recovery_deadline: string | null;
+    evidence_status: EvidenceStatus;
+    classification_profile_id: string;
+    /** The content digest of the profile named by classification_profile_id (v4
+     *  section 4). A recompute checks it against the immutable registry: a
+     *  mismatch fails distinctly from an unknown profile. Binding the id to the
+     *  digest proves which profile CONTENT governed the classification. */
+    classification_profile_digest: string;
+    /** Content-addressed request/action identity of the execution instance this
+     *  effect belongs to (v4 section 2). Sourced from the carrying receipt's
+     *  action_ref (ExecutionEnvelope.action_ref, the APS correlation key). A
+     *  stable, signed binding so an effect state cannot be transplanted between
+     *  receipts. */
+    action_ref: string;
+    /** Stable unique id of the specific execution instance (v4 section 2). Sourced
+     *  from the carrying receipt's per-instance id (ExecutionEnvelope.action_id or
+     *  RAPV0.receipt_id). Distinguishes two instances that share a content-
+     *  addressed action_ref. */
+    action_instance_id: string;
+    /** Stable id for this effect across its lifecycle stages (v4 section 2).
+     *  Precedence is defined by lineage under this id, never by array position. */
+    effect_id: string;
+    /** Hash of the prior signed state of THIS effect, or null on the first state.
+     *  Chains an effect's lineage so a later state references its predecessor. */
+    predecessor_effect_state_hash: string | null;
+    /** Monotonic position within THIS effect's own lineage (not the array). */
+    sequence: number;
+    /** Optional cache ONLY. Never trusted. A verifier recomputes the realized
+     *  class and any mismatch fails verification (verifyAssertedClass). */
+    asserted_realized_class?: RealizedClass;
+}
+/** The effect-instantiation block: the effect vector (v0). */
+export interface EffectInstantiationBlock {
+    instantiated_effects: EffectInstantiationElement[];
+}
+/** RAPV0 TaskClassification.externality value space. Declared here to avoid
+ *  coupling this primitive to the reputation type; the values mirror
+ *  src/types/reputation-authority.ts TaskClassification.externality. */
+export type RapvExternality = 'none' | 'internal' | 'external-reversible' | 'external-irreversible';
+/** Map an RAPV0 externality onto the value used for EffectFacts.externality.
+ *  'none' or absent -> undefined (unbound), which classifies unresolved.
+ *  internal -> internal. Both external buckets -> external-irreversible: the
+ *  legacy 'external-reversible' taxonomy carried a stronger meaning than v0
+ *  grants, so it is NOT passed through as-is; mapping it to external-irreversible
+ *  keeps it from being a backdoor into compensability (v4 s4/s10). This is a pure
+ *  adapter, not an import-and-couple. */
+export declare function rapvExternalityToEffectFacts(externality: RapvExternality | null | undefined): EffectExternality | undefined;
+/** Verifier-supplied context for a recompute. Facts a verifier establishes
+ *  out of band. Everything defaults to the fail-closed value when absent. */
+export interface RecomputeOptions {
+    /** HARD RULE: an author NEVER sets this from the block. Only a verifier that
+     *  checked the resource_confirmation_ref cryptographic commitment (a later
+     *  step) may pass true. Absent or false keeps an external-irreversible effect
+     *  at irreversible + upper_bound. */
+    targetBindingVerified?: boolean;
+}
+/** The outcome of a recompute. An unknown classification_profile_id is a
+ *  DISTINCT failure from unbound facts: it is surfaced, never silently
+ *  classified as unresolved. */
+export type RecomputeOutcome = {
+    status: 'recomputed';
+    classificationProfileId: string;
+    result: ClassificationResult;
+} | {
+    status: 'unknown_profile';
+    classificationProfileId: string;
+} | {
+    status: 'profile_digest_mismatch';
+    classificationProfileId: string;
+    declaredDigest: string;
+    expectedDigest: string;
+};
+/** Recompute the realized class for one effect element. Resolves the mapping
+ *  profile by classification_profile_id; an unknown id is surfaced as its own
+ *  failure and is NOT classified. Otherwise runs the profile over the element's
+ *  facts and returns the ClassificationResult. */
+export declare function recomputeEffect(element: EffectInstantiationElement, options?: RecomputeOptions): RecomputeOutcome;
+/** Recompute every effect in a block, per element. No folding or collapsing to
+ *  a maximum here (that is the fold, a later step). */
+export declare function recomputeBlock(block: EffectInstantiationBlock, options?: RecomputeOptions): RecomputeOutcome[];
+/** The result of checking an element's asserted cache class against the
+ *  recompute. Absent cache passes. A present cache that differs from the
+ *  recomputed realized class fails. An unknown profile cannot be verified. */
+export type AssertedClassCheck = {
+    ok: true;
+    recomputed: ClassificationResult;
+} | {
+    ok: false;
+    reason: 'mismatch';
+    asserted: RealizedClass;
+    recomputed: RealizedClass;
+} | {
+    ok: false;
+    reason: 'unknown_profile';
+    classificationProfileId: string;
+} | {
+    ok: false;
+    reason: 'profile_digest_mismatch';
+    classificationProfileId: string;
+    declaredDigest: string;
+    expectedDigest: string;
+};
+/** Verify an element's asserted cache class (if any) against the recompute.
+ *  A cache is a convenience only and is never trusted: a mismatch fails. An
+ *  unknown profile or a profile-digest mismatch cannot be verified and surfaces
+ *  distinctly. */
+export declare function verifyAssertedClass(element: EffectInstantiationElement, options?: RecomputeOptions): AssertedClassCheck;
+/** Provisional stage. Append-only. */
+export interface ExecutionStageReceipt {
+    stage: 'execution';
+    action_ref: string;
+    run_id: string;
+    /** The provisional class facts. */
+    effect_instantiation: EffectInstantiationBlock;
+    /** Stage-level evidence status. Provisional receipts are always pending. */
+    evidence_status: 'pending';
+    /** The enforcement class that GOVERNED admission, recorded by the gateway that
+     *  admitted the action. Never rewritten by any later stage. */
+    admitted_enforcement_class: EnforcementClass;
+    created_at: string;
+}
+export interface ReconciliationSignature {
+    algorithm: 'Ed25519';
+    public_key: string;
+    value: string;
+}
+/** Audit stage. Hash-linked to an execution receipt and signed. Carries the
+ *  refined realized class, which has NO enforcement power. */
+export interface ReconciliationStageReceipt {
+    stage: 'reconciliation';
+    /** SHA-256 hash-link to the execution receipt this refines. */
+    execution_receipt_hash: string;
+    action_ref: string;
+    /** Audit-time realized class. Never gates admission. */
+    realized_class: RealizedClass;
+    /** Refined evidence status after reconciliation. */
+    evidence_status: 'resolved' | 'unavailable' | 'conflicted';
+    reconciled_at: string;
+    signature: ReconciliationSignature;
+}
+/** SHA-256 (over strict JCS bytes) of an execution receipt. Any change to the
+ *  execution receipt changes this hash, so a hash-link detects a rewrite. */
+export declare function hashExecutionReceipt(receipt: ExecutionStageReceipt): string;
+export interface CreateReconciliationInput {
+    realized_class: RealizedClass;
+    evidence_status: 'resolved' | 'unavailable' | 'conflicted';
+    reconciled_at: string;
+    signerPrivateKey: string;
+    signerPublicKey: string;
+}
+/** Create a reconciliation receipt hash-linked to an execution receipt and
+ *  signed over its canonical body. Does not touch the execution receipt. */
+export declare function createReconciliationReceipt(execution: ExecutionStageReceipt, input: CreateReconciliationInput): ReconciliationStageReceipt;
+export interface TransitionCheck {
+    ok: boolean;
+    errors: string[];
+}
+/** Validate a reconciliation against its execution receipt. Rejects a broken
+ *  hash-link (a rewritten execution receipt), an invalid signature, a stage
+ *  that is not pending, and any non-monotonic realized class. */
+export declare function validateTransition(execution: ExecutionStageReceipt, reconciliation: ReconciliationStageReceipt): TransitionCheck;
+/** The enforcement class that GOVERNED admission. This reads ONLY the execution
+ *  receipt: the reconciliation's realized class is audit-time truth and carries
+ *  no enforcement power, so a consumer cannot read the final class as the one
+ *  that gated the action. */
+export declare function admittedEnforcementClass(execution: ExecutionStageReceipt): EnforcementClass;
+/** The signed authoritative fields of one effect state as a null-free object
+ *  (v4 section 2). It commits to every signed field: effect_id, sequence,
+ *  predecessor_effect_state_hash, the raw effect facts, classification_profile_id,
+ *  classification_profile_digest, the evidence status, and the receipt/action
+ *  binding (action_ref, action_instance_id). The asserted class is signed content
+ *  and part of the state identity, so it is included when present, but it is
+ *  non-authoritative for classification (a verifier recomputes). Computed
+ *  verification outputs, the state hash itself, and out-of-object signatures are
+ *  excluded: the builder reads only the known signed fields, so an extra property
+ *  on the element object cannot enter the preimage. Only non-null fields are
+ *  included, the same parity-safe rule the profile content follows, because the
+ *  SDK JCS implementations diverge on null-valued keys. */
+export declare function effectStatePreimage(el: EffectInstantiationElement): Record<string, unknown>;
+/** Domain-separated hash of one effect state (v4 section 2):
+ *  SHA-256( UTF8("APS-REVERSIBILITY-EFFECT-STATE-V0") || 0x00 || UTF8(JCS(preimage)) )
+ *  over the null-free preimage of every signed authoritative field. Chains a
+ *  lineage: a later state's predecessor_effect_state_hash references this. Any
+ *  language that JCS-canonicalizes the same preimage reproduces it byte-for-byte. */
+export declare function hashEffectState(element: EffectInstantiationElement): string;
+/** Deterministic derivation of an effect_id (v4 section 2):
+ *  base64url( SHA-256( UTF8("APS-REVERSIBILITY-EFFECT-ID-V0") || 0x00 ||
+ *  UTF8(JCS({action_ref, action_instance_id, local_effect_id})) ) ), where
+ *  local_effect_id is unique within the receipt and STABLE across retries (an
+ *  id, not a nonce). The id is a function of stable inputs, so a retry produces
+ *  the same effect_id and the same lineage identity. */
+export declare function deriveEffectId(action_ref: string, action_instance_id: string, local_effect_id: string): string;
+/** The typed outcome of lineage validation (v4 section 2, corrected).
+ *  - ok: a single rooted, gap-free, correctly chained lineage per effect_id.
+ *  - lineage_incomplete: a gap in sequences, a non-zero origin, or no root
+ *    (missing states).
+ *  - lineage_conflicted: a fork, where one predecessor state has two distinct
+ *    successors.
+ *  - equivocation: two distinct roots share an effect_id (multiple-roots), or two
+ *    states occupy the same (effect_id, sequence) with different hashes without a
+ *    shared predecessor. Named as the provable condition; it is NOT a claim about
+ *    a semantic collision between unrelated effects.
+ *  - invalid_state: a state at sequence n>0 whose predecessor_effect_state_hash
+ *    does not equal the hash of the state at n-1 (a broken chain link). */
+export type LineageStatus = 'ok' | 'lineage_incomplete' | 'lineage_conflicted' | 'equivocation' | 'invalid_state';
+export interface LineageResult {
+    status: LineageStatus;
+    /** Exact-duplicate states (identical full effect-state hash) removed before
+     *  the graph checks, aggregated across all effect_ids in the block. */
+    duplicate_count: number;
+}
+/** Validate the identity and lineage structure of a block, independent of array
+ *  order (v4 section 2, corrected). Returns a TYPED status plus a duplicate_count.
+ *  The block is ok only when every effect_id's lineage is ok; otherwise the
+ *  status is that of the lexicographically first non-ok effect_id (deterministic).
+ *  This validates identity only; the lineage-based fold reading (classify from
+ *  the latest lineage state per effect_id) is the fold, not built here. */
+export declare function validateEffectLineage(block: EffectInstantiationBlock): LineageResult;
+/** The latest valid state per effect_id, but ONLY for an ok lineage. Returns
+ *  undefined for any non-ok block, so a caller cannot pull a latest state from an
+ *  incomplete, conflicted, equivocating, or invalid lineage. Order-invariant. */
+export declare function latestValidEffectStates(block: EffectInstantiationBlock): Map<string, EffectInstantiationElement> | undefined;
+//# sourceMappingURL=reversibility-fold.d.ts.map

package/dist/src/core/reversibility-fold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reversibility-fold.d.ts","sourceRoot":"","sources":["../../../src/core/reversibility-fold.ts"],"names":[],"mappings":"AAmCA;0EAC0E;AAC1E,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,aAAa,GAAG,cAAc,GAAG,YAAY,CAAA;AAEvF;0EAC0E;AAC1E,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,aAAa,GAAG,cAAc,CAAA;AAE3E;;;mEAGmE;AACnE,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,gBAAgB,CAEzE;AAsBD;;;;+EAI+E;AAC/E,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,qBAAqB,GAAG,uBAAuB,CAAA;AAE5F;qEACqE;AACrE,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,cAAc,CAAA;AAE9E;;;yDAGyD;AACzD,MAAM,WAAW,iBAAiB;IAChC,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;8DAG8D;AAC9D,MAAM,WAAW,WAAW;IAC1B;;6BAEyB;IACzB,WAAW,CAAC,EAAE,iBAAiB,CAAA;IAC/B;;wDAEoD;IACpD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;4EACwE;IACxE,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC;;wEAEoE;IACpE,aAAa,CAAC,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACxC;kEAC8D;IAC9D,aAAa,CAAC,EAAE,aAAa,CAAA;IAC7B;;6BAEyB;IACzB,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B;;;sEAGkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACrC;AAED;;iEAEiE;AACjE,MAAM,MAAM,UAAU,GAClB,eAAe,GACf,2BAA2B,GAC3B,4BAA4B,GAC5B,2BAA2B,GAC3B,4BAA4B,CAAA;AAEhC;;;yEAGyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,aAAa,CAAA;IACvB,KAAK,CAAC,EAAE,aAAa,CAAA;IACrB,MAAM,EAAE,UAAU,CAAA;CACnB;AAED;+CAC+C;AAC/C,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,oBAAoB,CAAA;CACvD;AAED;kEACkE;AAClE,eAAO,MAAM,2BAA2B,6BAA6B,CAAA;AAErE;;;;;;;;;;;;;;;;;;wDAkBwD;AACxD,wBAAgB,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,oBAAoB,CA4CnE;AAED,sCAAsC;AACtC,eAAO,MAAM,sBAAsB,EAAE,qBAGpC,CAAA;AAED;;;;iEAIiE;AACjE,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;QAsBzB,aAAa;QAAK,eAAe;QAAiB,qBAAqB;;;CAE1F,CAAA;AAED;;;YAGY;AACZ,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAO7D;AAED,uCAAuC;AACvC,eAAO,MAAM,+BAA+B,QAAyD,CAAA;AAErG;;kBAEkB;AAClB,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,qBAAqB,CAAA;IAC9B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,iFAAiF;IACjF,QAAQ,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CACxD;AAkBD;yEACyE;AACzE,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,qBAAqB,GAAG,SAAS,CAEtF;AAED,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAE9E;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAE/D;AAED,yCAAyC;AACzC,wBAAgB,oBAAoB,IAAI,MAAM,EAAE,CAE/C;AAED;qEACqE;AACrE,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAA;AAE7H;;uEAEuE;AACvE,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,mBAAmB,CAS5F;AAiBD;;;6DAG6D;AAC7D,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,UAAU,CAAA;AAEjD;iFACiF;AACjF,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,SAAS,GAAG,aAAa,GAAG,YAAY,CAAA;AAElF,+CAA+C;AAC/C,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,WAAW,CAAA;IACzB,iBAAiB,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,aAAa,CAAA;IAC7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAA;IAClC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,eAAe,EAAE,cAAc,CAAA;IAC/B,yBAAyB,EAAE,MAAM,CAAA;IACjC;;;2EAGuE;IACvE,6BAA6B,EAAE,MAAM,CAAA;IACrC;;;;oBAIgB;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB;;;gCAG4B;IAC5B,kBAAkB,EAAE,MAAM,CAAA;IAC1B;mFAC+E;IAC/E,SAAS,EAAE,MAAM,CAAA;IACjB;kFAC8E;IAC9E,6BAA6B,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5C,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAA;IAChB;2EACuE;IACvE,uBAAuB,CAAC,EAAE,aAAa,CAAA;CACxC;AAED,8DAA8D;AAC9D,MAAM,WAAW,wBAAwB;IACvC,oBAAoB,EAAE,0BAA0B,EAAE,CAAA;CACnD;AAED;;wEAEwE;AACxE,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,UAAU,GAAG,qBAAqB,GAAG,uBAAuB,CAAA;AAEnG;;;;;;yCAMyC;AACzC,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,eAAe,GAAG,IAAI,GAAG,SAAS,GAC9C,iBAAiB,GAAG,SAAS,CAI/B;AAED;6EAC6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B;;;yCAGqC;IACrC,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAChC;AAED;;gCAEgC;AAChC,MAAM,MAAM,gBAAgB,GACxB;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAA;CAAE,GACvF;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAA;CAAE,GAC9D;IAAE,MAAM,EAAE,yBAAyB,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAA;AAmC1H;;;kDAGkD;AAClD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,gBAAgB,GACzB,gBAAgB,CAqBlB;AAED;uDACuD;AACvD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,wBAAwB,EAC/B,OAAO,CAAC,EAAE,gBAAgB,GACzB,gBAAgB,EAAE,CAEpB;AAED;;8EAE8E;AAC9E,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,aAAa,CAAC;IAAC,UAAU,EAAE,aAAa,CAAA;CAAE,GACrF;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAA;CAAE,GACzE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,yBAAyB,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAA;AAErI;;;kBAGkB;AAClB,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,0BAA0B,EACnC,OAAO,CAAC,EAAE,gBAAgB,GACzB,kBAAkB,CAsBpB;AAwBD,sCAAsC;AACtC,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,WAAW,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,mCAAmC;IACnC,oBAAoB,EAAE,wBAAwB,CAAA;IAC9C,4EAA4E;IAC5E,eAAe,EAAE,SAAS,CAAA;IAC1B;mEAC+D;IAC/D,0BAA0B,EAAE,gBAAgB,CAAA;IAC5C,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,SAAS,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACd;AAED;8DAC8D;AAC9D,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,gBAAgB,CAAA;IACvB,+DAA+D;IAC/D,sBAAsB,EAAE,MAAM,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,cAAc,EAAE,aAAa,CAAA;IAC7B,oDAAoD;IACpD,eAAe,EAAE,UAAU,GAAG,aAAa,GAAG,YAAY,CAAA;IAC1D,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,uBAAuB,CAAA;CACnC;AAED;6EAC6E;AAC7E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAE3E;AAED,MAAM,WAAW,yBAAyB;IACxC,cAAc,EAAE,aAAa,CAAA;IAC7B,eAAe,EAAE,UAAU,GAAG,aAAa,GAAG,YAAY,CAAA;IAC1D,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,eAAe,EAAE,MAAM,CAAA;CACxB;AAED;4EAC4E;AAC5E,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,qBAAqB,EAChC,KAAK,EAAE,yBAAyB,GAC/B,0BAA0B,CAW5B;AASD,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED;;iEAEiE;AACjE,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,qBAAqB,EAChC,cAAc,EAAE,0BAA0B,GACzC,eAAe,CAgCjB;AAED;;;6BAG6B;AAC7B,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,qBAAqB,GAAG,gBAAgB,CAE3F;AAYD;;;;;;;;;;;2DAW2D;AAC3D,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,0BAA0B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAmB3F;AAED;;;;qFAIqF;AACrF,wBAAgB,eAAe,CAAC,OAAO,EAAE,0BAA0B,GAAG,MAAM,CAO3E;AAED;;;;;wDAKwD;AACxD,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM,CAO9G;AAED;;;;;;;;;;;2EAW2E;AAC3E,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,oBAAoB,GAAG,oBAAoB,GAAG,cAAc,GAAG,eAAe,CAAA;AAEjH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,aAAa,CAAA;IACrB;2EACuE;IACvE,eAAe,EAAE,MAAM,CAAA;CACxB;AAyDD;;;;;2EAK2E;AAC3E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,wBAAwB,GAAG,aAAa,CAepF;AAED;;iFAEiF;AACjF,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,wBAAwB,GAC9B,GAAG,CAAC,MAAM,EAAE,0BAA0B,CAAC,GAAG,SAAS,CAarD"}

package/dist/src/core/reversibility-fold.js

@@ -0,0 +1,513 @@
+// Copyright (c) 2026 Tymofii Pidlisnyi
+// SPDX-License-Identifier: Apache-2.0
+// Reversibility fold - foundation (spec v2, reversibility-fold-design-v2.md)
+//
+// A new primitive that reuses the trust-domain-counting and provisional/final
+// lifecycle patterns already established in APS, applied to reversibility.
+//
+// This module is the FOUNDATION only: the two-axis output types and their
+// projection (step 1), and the versioned mapping-profile registry (step 2).
+// It touches no receipt envelope, no gateway, and no existing wire shape.
+// The effect-instantiation block, lifecycle records, fold, divergence, and
+// admission checkpoint are later steps and are not implemented here.
+import { createHash } from 'node:crypto';
+import { sign, verify } from '../crypto/keys.js';
+import { canonicalizeJCS } from './canonical-jcs.js';
+/** Pure projection realized -> enforcement (spec section 0).
+ *  `unresolved` becomes `irreversible` (conservative, fail-closed). Every
+ *  other value is the identity. This is the ONLY place `unresolved` is
+ *  mapped to `irreversible`; realized truth is never rewritten. */
+export function enforcementFrom(realized) {
+    return realized === 'unresolved' ? 'irreversible' : realized;
+}
+/** Stable id of the v0 mapping profile. Chosen value; the spec fixes no
+ *  literal, only that classification_profile_id must be bound. */
+export const REVERSIBILITY_MAPPING_V0_ID = 'reversibility-mapping-v0';
+/** The v0 mapping rules (v4 sections 4, 4.1, 10), as a pure function.
+ *
+ *  v0 has NO external-compensable path. External compensability is a FUTURE
+ *  profile (reversibility-mapping-v1) built on the deferred four-object subsystem
+ *  of v4 section 10, never a branch inside the v0 profile. v4 section 10 rejects
+ *  the domain-separation-without-authority model (a non-empty reversal-right
+ *  signer different from the principal): a registration outside operator control
+ *  shows only separation, not authority-over-a-mechanism, so it cannot ground
+ *  compensability. This profile must not behave differently by entry point.
+ *
+ *  - external-irreversible AND external-reversible -> irreversible. Upper bound
+ *    (label upper_bound) unless finality is settled AND the target binding is
+ *    verified. The two external buckets are treated identically in v0.
+ *  - internal -> irreversible, treated exactly like an external-irreversible
+ *    effect (upper_bound unless finality settled AND target binding verified). A
+ *    self-declared recovery_mechanism_ref derives nothing (v4 s4 / s4.1), so v0
+ *    has no internal-compensable path.
+ *  - unbound / missing externality -> unresolved.
+ *  v0 therefore emits no compensable outcome at all. */
+export function classifyV0(facts) {
+    const ext = facts.externality;
+    // Unbound / missing externality: we cannot even name the bucket. Honest
+    // unresolved; enforcementFrom() lifts this to irreversible for admission.
+    if (ext === undefined || ext === null) {
+        return { realized: 'unresolved', reason: 'RM_V0_UNBOUND' };
+    }
+    // Any external effect -> irreversible; upper bound unless finality is settled
+    // AND target binding verified. v0 has no external-compensable path, so the
+    // legacy 'external-reversible' taxonomy value is treated exactly as
+    // 'external-irreversible' here (no compensable branch, no reversal-right read).
+    if (ext === 'external-irreversible' || ext === 'external-reversible') {
+        const finalityVerified = facts.finalityState === 'settled';
+        const definitive = finalityVerified && facts.targetBindingVerified === true;
+        return definitive
+            ? { realized: 'irreversible', reason: 'RM_V0_EXTERNAL_DEFINITIVE' }
+            : { realized: 'irreversible', label: 'upper_bound', reason: 'RM_V0_EXTERNAL_UPPER_BOUND' };
+    }
+    // internal -> irreversible in v0. A self-declared recovery_mechanism_ref is
+    // self-attestation and derives NOTHING about the class (v4 s4 / s4.1), the same
+    // conflation removed for the external path: a producer cannot mint
+    // compensability by naming a rollback path. v0 has no verifier-checked recovery
+    // evidence (recoveryMechanismRef, recoveryController, recovery_deadline, and
+    // evidence_status are all producer-declared, and the only verifier-supplied
+    // signal, targetBindingVerified, is the external resource-confirmation check).
+    // internal-compensable requires a verified recovery result that v0 defers, so
+    // internal is treated exactly as an external-irreversible effect: irreversible
+    // plus upper_bound, unless finality is settled AND the binding is verified. v0
+    // therefore has no compensable outcome at all, the sound and consistent
+    // position across both externality axes.
+    if (ext === 'internal') {
+        const finalityVerified = facts.finalityState === 'settled';
+        const definitive = finalityVerified && facts.targetBindingVerified === true;
+        return definitive
+            ? { realized: 'irreversible', reason: 'RM_V0_INTERNAL_DEFINITIVE' }
+            : { realized: 'irreversible', label: 'upper_bound', reason: 'RM_V0_INTERNAL_UPPER_BOUND' };
+    }
+    // Unreachable for typed inputs. Any unrecognized externality bucket is
+    // treated as unbound and fails to unresolved (never a compensable fall-open).
+    return { realized: 'unresolved', reason: 'RM_V0_UNBOUND' };
+}
+/** The v0 profile function object. */
+export const reversibilityMappingV0 = {
+    id: REVERSIBILITY_MAPPING_V0_ID,
+    classify: classifyV0,
+};
+/** The AUTHORITATIVE, canonical content of the v0 profile (v4 section 4): its
+ *  input schema, mapping rules, reason-code set, and time semantics, and nothing
+ *  else. No runtime, diagnostic, or human-facing metadata (display name,
+ *  comments, timestamps) is included, so those can change without changing the
+ *  content digest. This object is what the digest commits to. */
+export const REVERSIBILITY_PROFILE_V0_CONTENT = {
+    profile_id: REVERSIBILITY_MAPPING_V0_ID,
+    input_fields: ['externality', 'finality_state', 'target_binding_verified'],
+    externality_values: ['internal', 'external-reversible', 'external-irreversible'],
+    finality_values: ['settled', 'pending', 'expired', 'contradicted'],
+    external_compensable: false,
+    internal_compensable: false,
+    // label is present only when the rule emits one (upper_bound). No null values
+    // anywhere in the content: the three SDK JCS implementations disagree on
+    // null-valued keys (TS and Python drop them, Go keeps them), so a null-free
+    // content is the parity-safe form that canonicalizes byte-identically.
+    // v0 has no compensable outcome: both compensable strengths require verified
+    // recovery evidence that v0 defers, and a self-declared recovery_mechanism_ref
+    // derives nothing, so it is not a classification input.
+    rules: [
+        { id: 'unbound', when: 'externality_absent', realized: 'unresolved', reason: 'RM_V0_UNBOUND' },
+        { id: 'external_definitive', when: 'externality_external AND finality_settled AND target_binding_verified', realized: 'irreversible', reason: 'RM_V0_EXTERNAL_DEFINITIVE' },
+        { id: 'external_upper_bound', when: 'externality_external AND NOT(finality_settled AND target_binding_verified)', realized: 'irreversible', label: 'upper_bound', reason: 'RM_V0_EXTERNAL_UPPER_BOUND' },
+        { id: 'internal_definitive', when: 'externality_internal AND finality_settled AND target_binding_verified', realized: 'irreversible', reason: 'RM_V0_INTERNAL_DEFINITIVE' },
+        { id: 'internal_upper_bound', when: 'externality_internal AND NOT(finality_settled AND target_binding_verified)', realized: 'irreversible', label: 'upper_bound', reason: 'RM_V0_INTERNAL_UPPER_BOUND' },
+    ],
+    reason_codes: ['RM_V0_UNBOUND', 'RM_V0_EXTERNAL_DEFINITIVE', 'RM_V0_EXTERNAL_UPPER_BOUND', 'RM_V0_INTERNAL_DEFINITIVE', 'RM_V0_INTERNAL_UPPER_BOUND'],
+    time_semantics: { clock_skew_ms: 0, finality_source: 'bound_input', target_binding_source: 'verifier_supplied' },
+    schema_version: 'v0',
+};
+/** Domain-separated content digest of a profile (v4 section 4):
+ *  SHA-256( UTF8("APS-REVERSIBILITY-PROFILE-V0") || 0x00 || UTF8(JCS(content)) ).
+ *  Any language that JCS-canonicalizes the same content reproduces this byte-for-
+ *  byte. */
+export function profileContentDigest(content) {
+    const preimage = Buffer.concat([
+        Buffer.from('APS-REVERSIBILITY-PROFILE-V0', 'utf8'),
+        Buffer.from([0x00]),
+        Buffer.from(canonicalizeJCS(content), 'utf8'),
+    ]);
+    return 'sha256:' + createHash('sha256').update(preimage).digest('hex');
+}
+/** The v0 profile's content digest. */
+export const REVERSIBILITY_MAPPING_V0_DIGEST = profileContentDigest(REVERSIBILITY_PROFILE_V0_CONTENT);
+/** The immutable content-addressed registry (v4 section 4). It never mutates an
+ *  existing (id, digest) pair; a change to a profile's content yields a new
+ *  digest and is a NEW profile with a new id. Resolving an unknown id, or an
+ *  (id, digest) mismatch, is a DISTINCT failure, never a silent fallback. */
+const PROFILE_REGISTRY = new Map([
+    [REVERSIBILITY_MAPPING_V0_ID, {
+            profile: reversibilityMappingV0,
+            content: REVERSIBILITY_PROFILE_V0_CONTENT,
+            digest: REVERSIBILITY_MAPPING_V0_DIGEST,
+            metadata: {
+                display_name: 'Reversibility mapping v0',
+                description: 'Fail-closed v0 classifier: internal and external both resolve to irreversible; no compensable outcome, since verified recovery evidence is deferred.',
+            },
+        }],
+]);
+/** Resolve a mapping profile function by its classification_profile_id. Returns
+ *  undefined for an unknown id (a distinct event from unbound facts). */
+export function getClassificationProfile(id) {
+    return PROFILE_REGISTRY.get(id)?.profile;
+}
+/** Resolve the full registered profile (function, content, digest, metadata). */
+export function getRegisteredProfile(id) {
+    return PROFILE_REGISTRY.get(id);
+}
+/** The registry's content digest for a profile id, or undefined if unknown. */
+export function getProfileDigest(id) {
+    return PROFILE_REGISTRY.get(id)?.digest;
+}
+/** The set of registered profile ids. */
+export function registeredProfileIds() {
+    return [...PROFILE_REGISTRY.keys()];
+}
+/** Check a declared profile id + content digest against the immutable registry.
+ *  An id not in the registry fails unknown_profile; a known id whose declared
+ *  digest does not equal the registry digest fails digest_mismatch. */
+export function verifyProfileBinding(id, declaredDigest) {
+    const registered = PROFILE_REGISTRY.get(id);
+    if (registered === undefined) {
+        return { ok: false, reason: 'unknown_profile', classificationProfileId: id };
+    }
+    if (declaredDigest !== registered.digest) {
+        return { ok: false, reason: 'digest_mismatch', classificationProfileId: id, declaredDigest, expectedDigest: registered.digest };
+    }
+    return { ok: true, digest: registered.digest };
+}
+/** Map an RAPV0 externality onto the value used for EffectFacts.externality.
+ *  'none' or absent -> undefined (unbound), which classifies unresolved.
+ *  internal -> internal. Both external buckets -> external-irreversible: the
+ *  legacy 'external-reversible' taxonomy carried a stronger meaning than v0
+ *  grants, so it is NOT passed through as-is; mapping it to external-irreversible
+ *  keeps it from being a backdoor into compensability (v4 s4/s10). This is a pure
+ *  adapter, not an import-and-couple. */
+export function rapvExternalityToEffectFacts(externality) {
+    if (externality == null || externality === 'none')
+        return undefined;
+    if (externality === 'internal')
+        return 'internal';
+    return 'external-irreversible';
+}
+/** Derive the classifier externality bucket from an element's raw facts (v4
+ *  section 4.1). internal -> internal. external -> external-irreversible,
+ *  ALWAYS, in v0: there is no verified reversal right in v0, so no external
+ *  effect reaches external-reversible, and a self-declared recovery_mechanism_ref
+ *  derives NOTHING about the class. recovery_mechanism_ref remains a carried raw
+ *  fact and still informs the INTERNAL branch's observable-recovery test; it is
+ *  simply not evidence of reversibility for an external effect. Downstream, an
+ *  external effect classifies to irreversible + upper_bound (target binding is
+ *  not verified in v0), never bare irreversible and never compensable. */
+function deriveExternality(element) {
+    if (element.effect_scope === 'internal')
+        return 'internal';
+    return 'external-irreversible';
+}
+/** Build classifier facts from an element plus verifier context. Note what is
+ *  deliberately NOT supplied here: actingPrincipal and the external reversal-
+ *  right attestation are the actor axis (a later step), so an external-
+ *  reversible effect fails closed to irreversible under this recompute until
+ *  that step supplies verified actor-axis facts. targetBindingVerified comes
+ *  only from the verifier context, never from the element (hard rule). */
+function effectFactsFromElement(element, options) {
+    return {
+        externality: deriveExternality(element),
+        recoveryController: element.recovery_controller,
+        recoveryMechanismRef: element.recovery_mechanism_ref,
+        finalityState: element.finality_state,
+        targetBindingVerified: options?.targetBindingVerified === true,
+    };
+}
+/** Recompute the realized class for one effect element. Resolves the mapping
+ *  profile by classification_profile_id; an unknown id is surfaced as its own
+ *  failure and is NOT classified. Otherwise runs the profile over the element's
+ *  facts and returns the ClassificationResult. */
+export function recomputeEffect(element, options) {
+    const registered = getRegisteredProfile(element.classification_profile_id);
+    if (registered === undefined) {
+        return { status: 'unknown_profile', classificationProfileId: element.classification_profile_id };
+    }
+    // Bind id to content: a declared digest that does not match the registry is a
+    // DISTINCT failure from an unknown profile, and is not classified.
+    if (element.classification_profile_digest !== registered.digest) {
+        return {
+            status: 'profile_digest_mismatch',
+            classificationProfileId: element.classification_profile_id,
+            declaredDigest: element.classification_profile_digest,
+            expectedDigest: registered.digest,
+        };
+    }
+    const facts = effectFactsFromElement(element, options);
+    return {
+        status: 'recomputed',
+        classificationProfileId: element.classification_profile_id,
+        result: registered.profile.classify(facts),
+    };
+}
+/** Recompute every effect in a block, per element. No folding or collapsing to
+ *  a maximum here (that is the fold, a later step). */
+export function recomputeBlock(block, options) {
+    return block.instantiated_effects.map((e) => recomputeEffect(e, options));
+}
+/** Verify an element's asserted cache class (if any) against the recompute.
+ *  A cache is a convenience only and is never trusted: a mismatch fails. An
+ *  unknown profile or a profile-digest mismatch cannot be verified and surfaces
+ *  distinctly. */
+export function verifyAssertedClass(element, options) {
+    const outcome = recomputeEffect(element, options);
+    if (outcome.status === 'unknown_profile') {
+        return { ok: false, reason: 'unknown_profile', classificationProfileId: outcome.classificationProfileId };
+    }
+    if (outcome.status === 'profile_digest_mismatch') {
+        return {
+            ok: false,
+            reason: 'profile_digest_mismatch',
+            classificationProfileId: outcome.classificationProfileId,
+            declaredDigest: outcome.declaredDigest,
+            expectedDigest: outcome.expectedDigest,
+        };
+    }
+    const recomputed = outcome.result;
+    if (element.asserted_realized_class === undefined) {
+        return { ok: true, recomputed };
+    }
+    if (element.asserted_realized_class !== recomputed.realized) {
+        return { ok: false, reason: 'mismatch', asserted: element.asserted_realized_class, recomputed: recomputed.realized };
+    }
+    return { ok: true, recomputed };
+}
+/** SHA-256 (over strict JCS bytes) of an execution receipt. Any change to the
+ *  execution receipt changes this hash, so a hash-link detects a rewrite. */
+export function hashExecutionReceipt(receipt) {
+    return 'sha256:' + createHash('sha256').update(canonicalizeJCS(receipt)).digest('hex');
+}
+/** Create a reconciliation receipt hash-linked to an execution receipt and
+ *  signed over its canonical body. Does not touch the execution receipt. */
+export function createReconciliationReceipt(execution, input) {
+    const body = {
+        stage: 'reconciliation',
+        execution_receipt_hash: hashExecutionReceipt(execution),
+        action_ref: execution.action_ref,
+        realized_class: input.realized_class,
+        evidence_status: input.evidence_status,
+        reconciled_at: input.reconciled_at,
+    };
+    const value = sign(canonicalizeJCS(body), input.signerPrivateKey);
+    return { ...body, signature: { algorithm: 'Ed25519', public_key: input.signerPublicKey, value } };
+}
+/** The realized classes a reconciliation may refine a pending stage into.
+ *  pending -> compensable and pending -> irreversible only. */
+const MONOTONIC_RECONCILED_CLASSES = new Set([
+    'compensable',
+    'irreversible',
+]);
+/** Validate a reconciliation against its execution receipt. Rejects a broken
+ *  hash-link (a rewritten execution receipt), an invalid signature, a stage
+ *  that is not pending, and any non-monotonic realized class. */
+export function validateTransition(execution, reconciliation) {
+    const errors = [];
+    // Hash-link integrity: the reconciliation must reference THIS execution
+    // receipt. A post-hoc rewrite of the execution receipt breaks the link.
+    if (reconciliation.execution_receipt_hash !== hashExecutionReceipt(execution)) {
+        errors.push('hash-link mismatch: reconciliation does not reference this execution receipt');
+    }
+    if (reconciliation.action_ref !== execution.action_ref) {
+        errors.push('action_ref mismatch between stages');
+    }
+    // Signature over the reconciliation body (excluding the signature block).
+    const { signature, ...body } = reconciliation;
+    if (!verify(canonicalizeJCS(body), signature.value, signature.public_key)) {
+        errors.push('reconciliation signature invalid');
+    }
+    // Monotonic transition: the execution stage is provisional (pending); the
+    // reconciliation may only refine to compensable or irreversible. Anything
+    // else is an arbitrary replacement and is rejected.
+    if (execution.evidence_status !== 'pending') {
+        errors.push('execution receipt is not in the pending stage');
+    }
+    if (!MONOTONIC_RECONCILED_CLASSES.has(reconciliation.realized_class)) {
+        errors.push(`non-monotonic realized_class '${reconciliation.realized_class}' (only compensable or irreversible refine a pending stage)`);
+    }
+    return { ok: errors.length === 0, errors };
+}
+/** The enforcement class that GOVERNED admission. This reads ONLY the execution
+ *  receipt: the reconciliation's realized class is audit-time truth and carries
+ *  no enforcement power, so a consumer cannot read the final class as the one
+ *  that gated the action. */
+export function admittedEnforcementClass(execution) {
+    return execution.admitted_enforcement_class;
+}
+// ══════════════════════════════════════
+// STEP v0-2 - Effect identity and lineage (v4 section 2)
+// ══════════════════════════════════════
+//
+// Every effect element carries a stable identity so precedence is defined
+// without array position. The fold (a later step) classifies from the LATEST
+// valid lineage state per effect_id, never from position in instantiated_effects
+// and never from the existence of a right. This step adds and validates the
+// identity fields only; it does not build the fold.
+/** The signed authoritative fields of one effect state as a null-free object
+ *  (v4 section 2). It commits to every signed field: effect_id, sequence,
+ *  predecessor_effect_state_hash, the raw effect facts, classification_profile_id,
+ *  classification_profile_digest, the evidence status, and the receipt/action
+ *  binding (action_ref, action_instance_id). The asserted class is signed content
+ *  and part of the state identity, so it is included when present, but it is
+ *  non-authoritative for classification (a verifier recomputes). Computed
+ *  verification outputs, the state hash itself, and out-of-object signatures are
+ *  excluded: the builder reads only the known signed fields, so an extra property
+ *  on the element object cannot enter the preimage. Only non-null fields are
+ *  included, the same parity-safe rule the profile content follows, because the
+ *  SDK JCS implementations diverge on null-valued keys. */
+export function effectStatePreimage(el) {
+    const p = {
+        effect_scope: el.effect_scope,
+        effect_target_ref: el.effect_target_ref,
+        finality_state: el.finality_state,
+        evidence_status: el.evidence_status,
+        classification_profile_id: el.classification_profile_id,
+        classification_profile_digest: el.classification_profile_digest,
+        action_ref: el.action_ref,
+        action_instance_id: el.action_instance_id,
+        effect_id: el.effect_id,
+        sequence: el.sequence,
+    };
+    if (el.recovery_mechanism_ref != null)
+        p.recovery_mechanism_ref = el.recovery_mechanism_ref;
+    if (el.recovery_controller != null)
+        p.recovery_controller = el.recovery_controller;
+    if (el.recovery_deadline != null)
+        p.recovery_deadline = el.recovery_deadline;
+    if (el.predecessor_effect_state_hash != null)
+        p.predecessor_effect_state_hash = el.predecessor_effect_state_hash;
+    if (el.asserted_realized_class !== undefined)
+        p.asserted_realized_class = el.asserted_realized_class;
+    return p;
+}
+/** Domain-separated hash of one effect state (v4 section 2):
+ *  SHA-256( UTF8("APS-REVERSIBILITY-EFFECT-STATE-V0") || 0x00 || UTF8(JCS(preimage)) )
+ *  over the null-free preimage of every signed authoritative field. Chains a
+ *  lineage: a later state's predecessor_effect_state_hash references this. Any
+ *  language that JCS-canonicalizes the same preimage reproduces it byte-for-byte. */
+export function hashEffectState(element) {
+    const preimage = Buffer.concat([
+        Buffer.from('APS-REVERSIBILITY-EFFECT-STATE-V0', 'utf8'),
+        Buffer.from([0x00]),
+        Buffer.from(canonicalizeJCS(effectStatePreimage(element)), 'utf8'),
+    ]);
+    return 'sha256:' + createHash('sha256').update(preimage).digest('hex');
+}
+/** Deterministic derivation of an effect_id (v4 section 2):
+ *  base64url( SHA-256( UTF8("APS-REVERSIBILITY-EFFECT-ID-V0") || 0x00 ||
+ *  UTF8(JCS({action_ref, action_instance_id, local_effect_id})) ) ), where
+ *  local_effect_id is unique within the receipt and STABLE across retries (an
+ *  id, not a nonce). The id is a function of stable inputs, so a retry produces
+ *  the same effect_id and the same lineage identity. */
+export function deriveEffectId(action_ref, action_instance_id, local_effect_id) {
+    const preimage = Buffer.concat([
+        Buffer.from('APS-REVERSIBILITY-EFFECT-ID-V0', 'utf8'),
+        Buffer.from([0x00]),
+        Buffer.from(canonicalizeJCS({ action_ref, action_instance_id, local_effect_id }), 'utf8'),
+    ]);
+    return createHash('sha256').update(preimage).digest('base64url');
+}
+/** Validate one effect_id's lineage, order-invariant. First removes exact
+ *  duplicates (same full hash), then enforces the graph invariant. */
+function validateOneLineage(states) {
+    // Deduplicate exact-duplicate states by full effect-state hash.
+    const byHash = new Map();
+    let duplicate_count = 0;
+    for (const s of states) {
+        const h = hashEffectState(s);
+        if (byHash.has(h))
+            duplicate_count++;
+        else
+            byHash.set(h, s);
+    }
+    const unique = [...byHash.values()];
+    // Exactly one root at sequence 0 with a null predecessor.
+    const roots = unique.filter((s) => s.predecessor_effect_state_hash === null);
+    if (roots.length > 1)
+        return { status: 'equivocation', duplicate_count };
+    if (roots.length === 0)
+        return { status: 'lineage_incomplete', duplicate_count };
+    if (roots[0].sequence !== 0)
+        return { status: 'lineage_incomplete', duplicate_count };
+    // Fork: no predecessor hash may have more than one distinct successor. This
+    // holds regardless of the successors' sequences, so a fork whose branches sit
+    // at different sequences is still a fork, not a broken link.
+    const succOfPred = new Map();
+    for (const s of unique) {
+        if (s.predecessor_effect_state_hash !== null) {
+            succOfPred.set(s.predecessor_effect_state_hash, (succOfPred.get(s.predecessor_effect_state_hash) ?? 0) + 1);
+        }
+    }
+    if ([...succOfPred.values()].some((c) => c > 1)) {
+        return { status: 'lineage_conflicted', duplicate_count };
+    }
+    // At most one state per sequence. A remaining collision (not from a shared
+    // predecessor, since forks were already caught) is an equivocation about the
+    // position: two states claim the same sequence with different hashes.
+    const bySeq = new Map();
+    for (const s of unique)
+        bySeq.set(s.sequence, (bySeq.get(s.sequence) ?? 0) + 1);
+    if ([...bySeq.values()].some((c) => c > 1)) {
+        return { status: 'equivocation', duplicate_count };
+    }
+    // Consecutive sequences 0..n-1 (a gap is incomplete), and each state at n>0
+    // references the hash of the state at n-1 (else the chain link is invalid).
+    const ordered = [...unique].sort((a, b) => a.sequence - b.sequence);
+    for (let i = 0; i < ordered.length; i++) {
+        if (ordered[i].sequence !== i)
+            return { status: 'lineage_incomplete', duplicate_count };
+    }
+    for (let i = 1; i < ordered.length; i++) {
+        if (ordered[i].predecessor_effect_state_hash !== hashEffectState(ordered[i - 1])) {
+            return { status: 'invalid_state', duplicate_count };
+        }
+    }
+    return { status: 'ok', duplicate_count };
+}
+/** Validate the identity and lineage structure of a block, independent of array
+ *  order (v4 section 2, corrected). Returns a TYPED status plus a duplicate_count.
+ *  The block is ok only when every effect_id's lineage is ok; otherwise the
+ *  status is that of the lexicographically first non-ok effect_id (deterministic).
+ *  This validates identity only; the lineage-based fold reading (classify from
+ *  the latest lineage state per effect_id) is the fold, not built here. */
+export function validateEffectLineage(block) {
+    const byEffect = new Map();
+    for (const el of block.instantiated_effects) {
+        const states = byEffect.get(el.effect_id) ?? [];
+        states.push(el);
+        byEffect.set(el.effect_id, states);
+    }
+    let duplicate_count = 0;
+    let firstNonOk;
+    for (const effectId of [...byEffect.keys()].sort()) {
+        const r = validateOneLineage(byEffect.get(effectId));
+        duplicate_count += r.duplicate_count;
+        if (r.status !== 'ok' && firstNonOk === undefined)
+            firstNonOk = r.status;
+    }
+    return { status: firstNonOk ?? 'ok', duplicate_count };
+}
+/** The latest valid state per effect_id, but ONLY for an ok lineage. Returns
+ *  undefined for any non-ok block, so a caller cannot pull a latest state from an
+ *  incomplete, conflicted, equivocating, or invalid lineage. Order-invariant. */
+export function latestValidEffectStates(block) {
+    if (validateEffectLineage(block).status !== 'ok')
+        return undefined;
+    const byEffect = new Map();
+    for (const el of block.instantiated_effects) {
+        const states = byEffect.get(el.effect_id) ?? [];
+        states.push(el);
+        byEffect.set(el.effect_id, states);
+    }
+    const latest = new Map();
+    for (const [id, states] of byEffect) {
+        latest.set(id, [...states].sort((a, b) => b.sequence - a.sequence)[0]);
+    }
+    return latest;
+}
+//# sourceMappingURL=reversibility-fold.js.map

package/dist/src/core/reversibility-fold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reversibility-fold.js","sourceRoot":"","sources":["../../../src/core/reversibility-fold.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,6EAA6E;AAC7E,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,2EAA2E;AAC3E,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AA4BpD;;;mEAGmE;AACnE,MAAM,UAAU,eAAe,CAAC,QAAuB;IACrD,OAAO,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC9D,CAAC;AAuGD;kEACkE;AAClE,MAAM,CAAC,MAAM,2BAA2B,GAAG,0BAA0B,CAAA;AAErE;;;;;;;;;;;;;;;;;;wDAkBwD;AACxD,MAAM,UAAU,UAAU,CAAC,KAAkB;IAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAA;IAE7B,wEAAwE;IACxE,0EAA0E;IAC1E,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;IAC5D,CAAC;IAED,8EAA8E;IAC9E,2EAA2E;IAC3E,oEAAoE;IACpE,gFAAgF;IAChF,IAAI,GAAG,KAAK,uBAAuB,IAAI,GAAG,KAAK,qBAAqB,EAAE,CAAC;QACrE,MAAM,gBAAgB,GAAG,KAAK,CAAC,aAAa,KAAK,SAAS,CAAA;QAC1D,MAAM,UAAU,GAAG,gBAAgB,IAAI,KAAK,CAAC,qBAAqB,KAAK,IAAI,CAAA;QAC3E,OAAO,UAAU;YACf,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,2BAA2B,EAAE;YACnE,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAA;IAC9F,CAAC;IAED,4EAA4E;IAC5E,gFAAgF;IAChF,mEAAmE;IACnE,gFAAgF;IAChF,6EAA6E;IAC7E,4EAA4E;IAC5E,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E,+EAA+E;IAC/E,wEAAwE;IACxE,yCAAyC;IACzC,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,MAAM,gBAAgB,GAAG,KAAK,CAAC,aAAa,KAAK,SAAS,CAAA;QAC1D,MAAM,UAAU,GAAG,gBAAgB,IAAI,KAAK,CAAC,qBAAqB,KAAK,IAAI,CAAA;QAC3E,OAAO,UAAU;YACf,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,2BAA2B,EAAE;YACnE,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAA;IAC9F,CAAC;IAED,uEAAuE;IACvE,8EAA8E;IAC9E,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;AAC5D,CAAC;AAED,sCAAsC;AACtC,MAAM,CAAC,MAAM,sBAAsB,GAA0B;IAC3D,EAAE,EAAE,2BAA2B;IAC/B,QAAQ,EAAE,UAAU;CACrB,CAAA;AAED;;;;iEAIiE;AACjE,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,UAAU,EAAE,2BAA2B;IACvC,YAAY,EAAE,CAAC,aAAa,EAAE,gBAAgB,EAAE,yBAAyB,CAAC;IAC1E,kBAAkB,EAAE,CAAC,UAAU,EAAE,qBAAqB,EAAE,uBAAuB,CAAC;IAChF,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC;IAClE,oBAAoB,EAAE,KAAK;IAC3B,oBAAoB,EAAE,KAAK;IAC3B,8EAA8E;IAC9E,yEAAyE;IACzE,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,+EAA+E;IAC/E,wDAAwD;IACxD,KAAK,EAAE;QACL,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE;QAC9F,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,uEAAuE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,2BAA2B,EAAE;QAC3K,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,4EAA4E,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,4BAA4B,EAAE;QACxM,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,uEAAuE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,2BAA2B,EAAE;QAC3K,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,4EAA4E,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,4BAA4B,EAAE;KACzM;IACD,YAAY,EAAE,CAAC,eAAe,EAAE,2BAA2B,EAAE,4BAA4B,EAAE,2BAA2B,EAAE,4BAA4B,CAAC;IACrJ,cAAc,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,eAAe,EAAE,aAAa,EAAE,qBAAqB,EAAE,mBAAmB,EAAE;IAChH,cAAc,EAAE,IAAI;CACrB,CAAA;AAED;;;YAGY;AACZ,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,MAAM,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC9C,CAAC,CAAA;IACF,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxE,CAAC;AAED,uCAAuC;AACvC,MAAM,CAAC,MAAM,+BAA+B,GAAG,oBAAoB,CAAC,gCAAgC,CAAC,CAAA;AAarG;;;6EAG6E;AAC7E,MAAM,gBAAgB,GAA2C,IAAI,GAAG,CAAC;IACvE,CAAC,2BAA2B,EAAE;YAC5B,OAAO,EAAE,sBAAsB;YAC/B,OAAO,EAAE,gCAAgC;YACzC,MAAM,EAAE,+BAA+B;YACvC,QAAQ,EAAE;gBACR,YAAY,EAAE,0BAA0B;gBACxC,WAAW,EAAE,sJAAsJ;aACpK;SACF,CAAC;CACH,CAAC,CAAA;AAEF;yEACyE;AACzE,MAAM,UAAU,wBAAwB,CAAC,EAAU;IACjD,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAA;AAC1C,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACjC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,EAAU;IACzC,OAAO,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,MAAM,CAAA;AACzC,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,GAAG,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAA;AACrC,CAAC;AASD;;uEAEuE;AACvE,MAAM,UAAU,oBAAoB,CAAC,EAAU,EAAE,cAAsB;IACrE,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC3C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAA;IAC9E,CAAC;IACD,IAAI,cAAc,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,UAAU,CAAC,MAAM,EAAE,CAAA;IACjI,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAA;AAChD,CAAC;AA4ED;;;;;;yCAMyC;AACzC,MAAM,UAAU,4BAA4B,CAC1C,WAA+C;IAE/C,IAAI,WAAW,IAAI,IAAI,IAAI,WAAW,KAAK,MAAM;QAAE,OAAO,SAAS,CAAA;IACnE,IAAI,WAAW,KAAK,UAAU;QAAE,OAAO,UAAU,CAAA;IACjD,OAAO,uBAAuB,CAAA;AAChC,CAAC;AAoBD;;;;;;;;0EAQ0E;AAC1E,SAAS,iBAAiB,CAAC,OAAmC;IAC5D,IAAI,OAAO,CAAC,YAAY,KAAK,UAAU;QAAE,OAAO,UAAU,CAAA;IAC1D,OAAO,uBAAuB,CAAA;AAChC,CAAC;AAED;;;;;0EAK0E;AAC1E,SAAS,sBAAsB,CAC7B,OAAmC,EACnC,OAA0B;IAE1B,OAAO;QACL,WAAW,EAAE,iBAAiB,CAAC,OAAO,CAAC;QACvC,kBAAkB,EAAE,OAAO,CAAC,mBAAmB;QAC/C,oBAAoB,EAAE,OAAO,CAAC,sBAAsB;QACpD,aAAa,EAAE,OAAO,CAAC,cAAc;QACrC,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,KAAK,IAAI;KAC/D,CAAA;AACH,CAAC;AAED;;;kDAGkD;AAClD,MAAM,UAAU,eAAe,CAC7B,OAAmC,EACnC,OAA0B;IAE1B,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAA;IAC1E,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,OAAO,CAAC,yBAAyB,EAAE,CAAA;IAClG,CAAC;IACD,8EAA8E;IAC9E,mEAAmE;IACnE,IAAI,OAAO,CAAC,6BAA6B,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QAChE,OAAO;YACL,MAAM,EAAE,yBAAyB;YACjC,uBAAuB,EAAE,OAAO,CAAC,yBAAyB;YAC1D,cAAc,EAAE,OAAO,CAAC,6BAA6B;YACrD,cAAc,EAAE,UAAU,CAAC,MAAM;SAClC,CAAA;IACH,CAAC;IACD,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACtD,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,uBAAuB,EAAE,OAAO,CAAC,yBAAyB;QAC1D,MAAM,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;KAC3C,CAAA;AACH,CAAC;AAED;uDACuD;AACvD,MAAM,UAAU,cAAc,CAC5B,KAA+B,EAC/B,OAA0B;IAE1B,OAAO,KAAK,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAA;AAC3E,CAAC;AAWD;;;kBAGkB;AAClB,MAAM,UAAU,mBAAmB,CACjC,OAAmC,EACnC,OAA0B;IAE1B,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACzC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,OAAO,CAAC,uBAAuB,EAAE,CAAA;IAC3G,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACjD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,yBAAyB;YACjC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;YACxD,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC,CAAA;IACH,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAA;IACjC,IAAI,OAAO,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,uBAAuB,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,uBAAuB,EAAE,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAA;IACtH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAA;AACjC,CAAC;AA4DD;6EAC6E;AAC7E,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxF,CAAC;AAUD;4EAC4E;AAC5E,MAAM,UAAU,2BAA2B,CACzC,SAAgC,EAChC,KAAgC;IAEhC,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,gBAAyB;QAChC,sBAAsB,EAAE,oBAAoB,CAAC,SAAS,CAAC;QACvD,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAA;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAA;IACjE,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,EAAE,CAAA;AACnG,CAAC;AAED;+DAC+D;AAC/D,MAAM,4BAA4B,GAA+B,IAAI,GAAG,CAAgB;IACtF,aAAa;IACb,cAAc;CACf,CAAC,CAAA;AAOF;;iEAEiE;AACjE,MAAM,UAAU,kBAAkB,CAChC,SAAgC,EAChC,cAA0C;IAE1C,MAAM,MAAM,GAAa,EAAE,CAAA;IAE3B,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,cAAc,CAAC,sBAAsB,KAAK,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAA;IAC7F,CAAC;IAED,IAAI,cAAc,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;IACnD,CAAC;IAED,0EAA0E;IAC1E,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,cAAc,CAAA;IAC7C,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACjD,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,oDAAoD;IACpD,IAAI,SAAS,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAA;IAC9D,CAAC;IACD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,MAAM,CAAC,IAAI,CACT,iCAAiC,cAAc,CAAC,cAAc,6DAA6D,CAC5H,CAAA;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC;AAED;;;6BAG6B;AAC7B,MAAM,UAAU,wBAAwB,CAAC,SAAgC;IACvE,OAAO,SAAS,CAAC,0BAA0B,CAAA;AAC7C,CAAC;AAED,yCAAyC;AACzC,yDAAyD;AACzD,yCAAyC;AACzC,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,iFAAiF;AACjF,4EAA4E;AAC5E,oDAAoD;AAEpD;;;;;;;;;;;2DAW2D;AAC3D,MAAM,UAAU,mBAAmB,CAAC,EAA8B;IAChE,MAAM,CAAC,GAA4B;QACjC,YAAY,EAAE,EAAE,CAAC,YAAY;QAC7B,iBAAiB,EAAE,EAAE,CAAC,iBAAiB;QACvC,cAAc,EAAE,EAAE,CAAC,cAAc;QACjC,eAAe,EAAE,EAAE,CAAC,eAAe;QACnC,yBAAyB,EAAE,EAAE,CAAC,yBAAyB;QACvD,6BAA6B,EAAE,EAAE,CAAC,6BAA6B;QAC/D,UAAU,EAAE,EAAE,CAAC,UAAU;QACzB,kBAAkB,EAAE,EAAE,CAAC,kBAAkB;QACzC,SAAS,EAAE,EAAE,CAAC,SAAS;QACvB,QAAQ,EAAE,EAAE,CAAC,QAAQ;KACtB,CAAA;IACD,IAAI,EAAE,CAAC,sBAAsB,IAAI,IAAI;QAAE,CAAC,CAAC,sBAAsB,GAAG,EAAE,CAAC,sBAAsB,CAAA;IAC3F,IAAI,EAAE,CAAC,mBAAmB,IAAI,IAAI;QAAE,CAAC,CAAC,mBAAmB,GAAG,EAAE,CAAC,mBAAmB,CAAA;IAClF,IAAI,EAAE,CAAC,iBAAiB,IAAI,IAAI;QAAE,CAAC,CAAC,iBAAiB,GAAG,EAAE,CAAC,iBAAiB,CAAA;IAC5E,IAAI,EAAE,CAAC,6BAA6B,IAAI,IAAI;QAAE,CAAC,CAAC,6BAA6B,GAAG,EAAE,CAAC,6BAA6B,CAAA;IAChH,IAAI,EAAE,CAAC,uBAAuB,KAAK,SAAS;QAAE,CAAC,CAAC,uBAAuB,GAAG,EAAE,CAAC,uBAAuB,CAAA;IACpG,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;qFAIqF;AACrF,MAAM,UAAU,eAAe,CAAC,OAAmC;IACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,MAAM,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC;KACnE,CAAC,CAAA;IACF,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxE,CAAC;AAED;;;;;wDAKwD;AACxD,MAAM,UAAU,cAAc,CAAC,UAAkB,EAAE,kBAA0B,EAAE,eAAuB;IACpG,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,MAAM,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC,EAAE,MAAM,CAAC;KAC1F,CAAC,CAAA;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;AAClE,CAAC;AAuBD;sEACsE;AACtE,SAAS,kBAAkB,CAAC,MAAoC;IAC9D,gEAAgE;IAChE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAA;IAC5D,IAAI,eAAe,GAAG,CAAC,CAAA;IACvB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAA;QAC5B,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,eAAe,EAAE,CAAA;;YAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;IAEnC,0DAA0D;IAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,6BAA6B,KAAK,IAAI,CAAC,CAAA;IAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,CAAA;IACxE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,eAAe,EAAE,CAAA;IAChF,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,eAAe,EAAE,CAAA;IAErF,4EAA4E;IAC5E,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC5C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,6BAA6B,KAAK,IAAI,EAAE,CAAC;YAC7C,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,6BAA6B,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7G,CAAC;IACH,CAAC;IACD,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,eAAe,EAAE,CAAA;IAC1D,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,sEAAsE;IACtE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAC/E,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,CAAA;IACpD,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IACnE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,eAAe,EAAE,CAAA;IACzF,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,6BAA6B,KAAK,eAAe,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE,CAAA;QACrD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,CAAA;AAC1C,CAAC;AAED;;;;;2EAK2E;AAC3E,MAAM,UAAU,qBAAqB,CAAC,KAA+B;IACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAA;IAChE,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACf,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACpC,CAAC;IACD,IAAI,eAAe,GAAG,CAAC,CAAA;IACvB,IAAI,UAAqC,CAAA;IACzC,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACnD,MAAM,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,CAAA;QACrD,eAAe,IAAI,CAAC,CAAC,eAAe,CAAA;QACpC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS;YAAE,UAAU,GAAG,CAAC,CAAC,MAAM,CAAA;IAC1E,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,IAAI,IAAI,EAAE,eAAe,EAAE,CAAA;AACxD,CAAC;AAED;;iFAEiF;AACjF,MAAM,UAAU,uBAAuB,CACrC,KAA+B;IAE/B,IAAI,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAClE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAA;IAChE,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;QAC/C,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACf,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;IACpC,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAA;IAC5D,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/src/types/execution-envelope.d.ts

@@ -1,3 +1,4 @@
+import type { EffectInstantiationBlock } from '../core/reversibility-fold.js';
 export type EvaluationMethod = 'deterministic' | 'probabilistic' | 'model_dependent' | 'hybrid';
 export type EnvelopeVerdict = 'permit' | 'deny' | 'narrow' | 'audit';
 export type RevocationStatus = 'active' | 'revoked';
@@ -53,6 +54,12 @@ export interface ExecutionEnvelope {
     };
     /** When the envelope was created */
     timestamp: string;
+    /** OPTIONAL effect-instantiation block (reversibility fold, spec v2 section 3).
+     *  Absent on existing receipts, which stay valid unchanged. A fold over a
+     *  receipt lacking it is incomplete, never irreversible. When present the
+     *  block is part of the signed body; its presence does not change any
+     *  existing validation path. */
+    effect_instantiation?: EffectInstantiationBlock;
     signature: {
         algorithm: 'Ed25519';
         /** Public key of the signer */

package/dist/src/types/execution-envelope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"execution-envelope.d.ts","sourceRoot":"","sources":["../../../src/types/execution-envelope.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,gBAAgB,GAAG,eAAe,GAAG,eAAe,GAAG,iBAAiB,GAAG,QAAQ,CAAA;AAC/F,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAA;AACpE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEnD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,yBAAyB,CAAA;IAEjC,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAA;IACjB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,cAAc,EAAE;QACd,4EAA4E;QAC5E,aAAa,EAAE,MAAM,CAAA;QACrB,oDAAoD;QACpD,KAAK,EAAE,MAAM,EAAE,CAAA;QACf,oCAAoC;QACpC,sBAAsB,EAAE,MAAM,CAAA;QAC9B,0CAA0C;QAC1C,iBAAiB,EAAE,gBAAgB,CAAA;KACpC,CAAA;IAED,QAAQ,EAAE;QACR,8CAA8C;QAC9C,aAAa,EAAE,MAAM,CAAA;QACrB,oEAAoE;QACpE,UAAU,EAAE,MAAM,CAAA;QAClB,4FAA4F;QAC5F,iBAAiB,EAAE,gBAAgB,CAAA;QACnC,kDAAkD;QAClD,OAAO,EAAE,eAAe,CAAA;QACxB,4DAA4D;QAC5D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,iCAAiC;QACjC,YAAY,EAAE,MAAM,CAAA;QACpB,2BAA2B;QAC3B,aAAa,EAAE,MAAM,CAAA;QACrB,8CAA8C;QAC9C,mBAAmB,EAAE,MAAM,CAAA;KAC5B,CAAA;IAED,WAAW,EAAE;QACX,oCAAoC;QACpC,YAAY,EAAE,MAAM,CAAA;QACpB,+DAA+D;QAC/D,YAAY,EAAE,MAAM,CAAA;QACpB,gEAAgE;QAChE,gBAAgB,CAAC,EAAE;YACjB,MAAM,EAAE,MAAM,CAAA;YACd,QAAQ,EAAE,MAAM,CAAA;YAChB,OAAO,EAAE,MAAM,CAAA;SAChB,CAAA;KACF,CAAA;IAED,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB,SAAS,EAAE;QACT,SAAS,EAAE,SAAS,CAAA;QACpB,+BAA+B;QAC/B,UAAU,EAAE,MAAM,CAAA;QAClB,wEAAwE;QACxE,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACnC,uBAAuB;IACvB,KAAK,EAAE,OAAO,CAAA;IACd,kCAAkC;IAClC,cAAc,EAAE,OAAO,CAAA;IACvB,mCAAmC;IACnC,uBAAuB,EAAE,OAAO,CAAA;IAChC,6BAA6B;IAC7B,gBAAgB,EAAE,OAAO,CAAA;IACzB,uDAAuD;IACvD,aAAa,EAAE,OAAO,CAAA;IACtB,yBAAyB;IACzB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB"}
+{"version":3,"file":"execution-envelope.d.ts","sourceRoot":"","sources":["../../../src/types/execution-envelope.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAA;AAE7E,MAAM,MAAM,gBAAgB,GAAG,eAAe,GAAG,eAAe,GAAG,iBAAiB,GAAG,QAAQ,CAAA;AAC/F,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAA;AACpE,MAAM,MAAM,gBAAgB,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEnD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,yBAAyB,CAAA;IAEjC,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAA;IACjB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,SAAS,EAAE,MAAM,CAAA;IACjB,mFAAmF;IACnF,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,cAAc,EAAE;QACd,4EAA4E;QAC5E,aAAa,EAAE,MAAM,CAAA;QACrB,oDAAoD;QACpD,KAAK,EAAE,MAAM,EAAE,CAAA;QACf,oCAAoC;QACpC,sBAAsB,EAAE,MAAM,CAAA;QAC9B,0CAA0C;QAC1C,iBAAiB,EAAE,gBAAgB,CAAA;KACpC,CAAA;IAED,QAAQ,EAAE;QACR,8CAA8C;QAC9C,aAAa,EAAE,MAAM,CAAA;QACrB,oEAAoE;QACpE,UAAU,EAAE,MAAM,CAAA;QAClB,4FAA4F;QAC5F,iBAAiB,EAAE,gBAAgB,CAAA;QACnC,kDAAkD;QAClD,OAAO,EAAE,eAAe,CAAA;QACxB,4DAA4D;QAC5D,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,iCAAiC;QACjC,YAAY,EAAE,MAAM,CAAA;QACpB,2BAA2B;QAC3B,aAAa,EAAE,MAAM,CAAA;QACrB,8CAA8C;QAC9C,mBAAmB,EAAE,MAAM,CAAA;KAC5B,CAAA;IAED,WAAW,EAAE;QACX,oCAAoC;QACpC,YAAY,EAAE,MAAM,CAAA;QACpB,+DAA+D;QAC/D,YAAY,EAAE,MAAM,CAAA;QACpB,gEAAgE;QAChE,gBAAgB,CAAC,EAAE;YACjB,MAAM,EAAE,MAAM,CAAA;YACd,QAAQ,EAAE,MAAM,CAAA;YAChB,OAAO,EAAE,MAAM,CAAA;SAChB,CAAA;KACF,CAAA;IAED,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;IAEjB;;;;oCAIgC;IAChC,oBAAoB,CAAC,EAAE,wBAAwB,CAAA;IAE/C,SAAS,EAAE;QACT,SAAS,EAAE,SAAS,CAAA;QACpB,+BAA+B;QAC/B,UAAU,EAAE,MAAM,CAAA;QAClB,wEAAwE;QACxE,KAAK,EAAE,MAAM,CAAA;KACd,CAAA;CACF;AAED,gDAAgD;AAChD,MAAM,WAAW,oBAAoB;IACnC,uBAAuB;IACvB,KAAK,EAAE,OAAO,CAAA;IACd,kCAAkC;IAClC,cAAc,EAAE,OAAO,CAAA;IACvB,mCAAmC;IACnC,uBAAuB,EAAE,OAAO,CAAA;IAChC,6BAA6B;IAC7B,gBAAgB,EAAE,OAAO,CAAA;IACzB,uDAAuD;IACvD,aAAa,EAAE,OAAO,CAAA;IACtB,yBAAyB;IACzB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-passport-system",
-  "version": "4.0.0",
+  "version": "4.1.0",
   "description": "Enforcement and accountability layer for AI agents. Bring your own identity (did:key, did:web, SPIFFE, OAuth, did:aps). Verifier hot path p50 = 420ns bare-metal Linux EPYC 7313P (§13.1 canonical environment per spec), 347ns AWS c7i.2xlarge, 292ns Mac M3. Gateway enforcement, monotonic narrowing, cascade revocation, Bayesian reputation, wallet binding, unified four-axis attribution primitive, per-period attribution settlement, data lifecycle, mutual authentication, Wave 1 accountability primitives (action, authority-boundary, custody, contestability, bundle), evidentiary type safety (claim/evidence registry, claim verifier with forbidden-substitution detection, contestation cascade). 4,098 tests.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -20,7 +20,7 @@
   },
   "scripts": {
     "build": "tsc && chmod +x dist/src/cli/index.js",
-    "test": "npx tsx --test tests/passport.test.ts tests/adversarial.ts tests/v2.0-integration.ts tests/contract.test.ts tests/agora.test.ts tests/values.test.ts tests/delegation.test.ts tests/attribution.test.ts tests/policy.test.ts tests/canonical.test.ts tests/coordination.test.ts tests/commerce.test.ts tests/enforcement.test.ts tests/routing.test.ts tests/did-vc.test.ts tests/a2a.test.ts tests/principal.test.ts tests/adversarial-paper.test.ts tests/property-delegation.test.ts tests/property-canonical.test.ts tests/intent.test.ts tests/reputation-authority.test.ts tests/cross-chain.test.ts tests/encrypted-messaging.test.ts tests/obligations.test.ts tests/execution-envelope.test.ts tests/adversarial-causal-chain.test.ts tests/governance.test.ts tests/feasibility.test.ts tests/identity.test.ts tests/precedent.test.ts tests/reanchor.test.ts tests/escalation.test.ts tests/oracle-witness.test.ts tests/messaging-audit.test.ts tests/policy-conflict.test.ts tests/data-source.test.ts tests/decision-semantics.test.ts tests/interop-vectors.test.ts tests/v2-bridge.test.ts tests/v2-full.test.ts tests/key-storage.test.ts tests/qntm-bridge.test.ts tests/agent-json-bridge.test.ts tests/did-resolution-conformance.test.ts tests/decision-equivalence.test.ts tests/data-lifecycle.test.ts tests/campaign7-composition.test.ts tests/entity-verification.test.ts tests/conformance.test.ts tests/governance-block.test.ts tests/aps-txt.test.ts tests/governance-360.test.ts tests/storage-backend.test.ts tests/receipt-bundle.test.ts tests/reputation-confidence.test.ts tests/governance-consumer.test.ts tests/charter.test.ts tests/institutional-governance-phase2.test.ts tests/data-source-attribution.test.ts tests/canonical-jcs.test.ts tests/temporal-spread.test.ts tests/fidelity-pressure.test.ts tests/denial-domains.test.ts tests/data-narrowing.test.ts tests/governance-posture.test.ts tests/anchor-state.test.ts tests/issuer-signature.test.ts tests/openshell-adapter.test.ts tests/attestation.test.ts tests/execution-attestation.test.ts tests/bilateral-receipt.test.ts tests/proof-namespace.test.ts tests/ecosystem-features.test.ts tests/persistent-passport.test.ts tests/security-av.test.ts tests/audit-fixes.test.ts tests/did-interop.test.ts tests/identity-bridge.test.ts tests/vc-wrapper.test.ts tests/identity-pipeline.test.ts tests/cross-protocol/sint-crossverify.test.ts tests/action-ref.test.ts tests/external-action-ref.test.ts tests/freshness.test.ts tests/evidence-grade.test.ts tests/key-rotation.test.ts tests/governance-regression.test.ts tests/posture-overlay.test.ts tests/feasibility-gateway.test.ts tests/trust-adapters.test.ts tests/evaluation-context.test.ts tests/health.test.ts tests/composio-adapter.test.ts tests/interop/ietf-envelope.test.ts tests/interop/signet-combined.test.ts tests/interop/moltrust-attestation.test.ts tests/interop/cross-protocol-vectors.test.ts tests/interop/receipt-chaining.test.ts tests/ibac-adapter.test.ts tests/langchain-adapter.test.ts tests/crewai-adapter.test.ts tests/mcp-adapter.test.ts tests/a2a-adapter.test.ts tests/gonka-adapter.test.ts tests/cross-algo-mismatch.test.ts tests/credential-lifecycle.test.ts tests/behavioral-memory.test.ts tests/telemetry-scope.test.ts tests/idempotency.test.ts tests/v2/wallet-binding.test.ts tests/v2/wallet-binding-fixture.test.ts tests/v2/credential-check-policy.test.ts tests/v2/delegation-escalation.test.ts tests/v2/attribution-consent.test.ts tests/v2/attribution-integration.test.ts tests/v2/attribution-primitive.test.ts tests/v2/attribution-primitive-integration.test.ts tests/v2/build-b-fractional-weights.test.ts tests/v2/build-b-cross-language.test.ts tests/v2/build-c-settlement.test.ts tests/v2/build-c-cross-language.test.ts tests/v2/build-c-end-to-end.test.ts tests/v2/provisional-statement.test.ts tests/temporal-decay.test.ts tests/confidence-breakdown.test.ts tests/behavioral-fingerprint.test.ts tests/session-boundary.test.ts tests/probe-identity.test.ts tests/v2/cognitive-attestation/envelope.test.ts tests/v2/cognitive-attestation/verify.test.ts tests/v2/cognitive-attestation/adversarial.test.ts tests/v2/mutual-auth/handshake.test.ts tests/v2/mutual-auth/adversarial.test.ts tests/v2/mutual-auth/conformance.test.ts tests/property-bilateral-receipt.test.ts tests/v2/instruction-provenance/conformance.test.ts tests/v2/instruction-provenance/adversarial.test.ts tests/v2/identity-composition-error.test.ts tests/v2/claim-evidence-types.test.ts tests/v2/claim-verifier.test.ts tests/v2/downstream-taint.test.ts tests/v2/payment-rails/nano.test.ts tests/v2/payment-rails/governance.test.ts tests/v2/payment-rails/ap2.test.ts tests/v2/payment-rails/x402.test.ts tests/v2/payment-rails/conformance/harness.test.ts tests/v2/payment-rails/binding-harness.test.ts tests/v2/payment-rails/stripe-issuing-primitives.test.ts tests/v2/payment-rails/acp.test.ts tests/v2/payment-rails/cycles.test.ts tests/v2/payment-rails/mpp.test.ts tests/v2/payment-rails/scope-resolution.test.ts tests/v2/payment-rails/accountability-bundle.test.ts tests/v2/payment-rails/did-uri-signing.test.ts tests/v2/payment-rails/cross-receipt-chain.test.ts src/v2/accountability/__tests__/action.test.ts src/v2/accountability/__tests__/authority-boundary.test.ts src/v2/accountability/__tests__/bundle.test.ts src/v2/accountability/__tests__/contestability.test.ts src/v2/accountability/__tests__/custody.test.ts src/v2/accountability/__tests__/fixtures.test.ts src/v2/cognitive_attestation/__tests__/cognitive_attestation.test.ts src/v2/delegation/__tests__/responsibility_anchor.test.ts src/v2/memory_provenance/__tests__/memory_provenance.test.ts src/v2/cross_issuer_attestation/__tests__/cross_issuer_attestation.test.ts src/v2/behavioral_drift_window/__tests__/behavioral_drift_window.test.ts tests/tool-registry-integrity.test.ts tests/v2/transport/rfc9421/request-binding.test.ts tests/v2/verifier-hardening.test.ts tests/v2/key-resolution/resolver.test.ts src/v2/feasibility/__tests__/feasibility.test.ts tests/oauth-rfc8693-bridge.test.ts tests/conformance/conformance-negatives.test.ts tests/v2/policy-bundle/policy-bundle.test.ts src/v2/scope-registry/__tests__/scope-registry.test.ts tests/check-many-parity.test.ts tests/cross-impl/jcs-equivalence.test.ts tests/remote-signer.test.ts tests/v2/assurance/descriptor.test.ts tests/v2/audience-binding/audience-binding.test.ts tests/v2/hash-pointer/bbs-composition.test.ts tests/v2/hash-pointer/profile.test.ts tests/v2/human-oversight/human-oversight.test.ts tests/v2/offline-verifier/conformance-runner.test.ts tests/v2/offline-verifier/middleware.test.ts tests/v2/offline-verifier/verify.test.ts tests/v2/payment-rails/cycles-evidence-resolution.test.ts tests/v2/payment-rails/cycles-evidence-authority.test.ts tests/v2/revocation-enforcement.test.ts tests/v2/trust-policy/trust-policy.test.ts src/v2/context-provenance/__tests__/roundtrip.test.ts src/v2/context-provenance/__tests__/disclosure.test.ts src/v2/context-provenance/__tests__/known-answer.test.ts src/v2/context-provenance/__tests__/conformance.test.ts src/v2/context-provenance/__tests__/adversarial.test.ts src/v2/context-provenance/__tests__/parity.test.ts src/v2/context-provenance/__tests__/cross-lang-parity.test.ts tests/v2/verification-source.test.ts tests/v2/producer-attestation.test.ts tests/delegation-currency-narrowing.test.ts tests/delegation-temporal-narrowing.test.ts tests/oauth-id-jag-bridge.test.ts tests/v2/regulated-action/conformance.test.ts tests/commerce-spend-accumulation.test.ts tests/delegation-spend-unit-narrowing.test.ts tests/delegation-parent-verify.test.ts tests/commerce-currency-gate.test.ts tests/v2/composition-check/conformance.test.ts src/v2/word_handles/__tests__/word_handles.test.ts src/v2/read_fidelity_receipt/__tests__/read_fidelity_receipt.test.ts tests/jurisdiction-selection.test.ts tests/v2/bilateral-pair/bilateral-pair.test.ts tests/evidence-bundle.test.ts tests/v2/verifier-null-guards.test.ts tests/merkle-domain-separation.test.ts tests/threshold-verify-before-count.test.ts",
+    "test": "npx tsx --test tests/passport.test.ts tests/adversarial.ts tests/v2.0-integration.ts tests/contract.test.ts tests/agora.test.ts tests/values.test.ts tests/delegation.test.ts tests/attribution.test.ts tests/policy.test.ts tests/canonical.test.ts tests/coordination.test.ts tests/commerce.test.ts tests/enforcement.test.ts tests/routing.test.ts tests/did-vc.test.ts tests/a2a.test.ts tests/principal.test.ts tests/adversarial-paper.test.ts tests/property-delegation.test.ts tests/property-canonical.test.ts tests/intent.test.ts tests/reputation-authority.test.ts tests/cross-chain.test.ts tests/encrypted-messaging.test.ts tests/obligations.test.ts tests/execution-envelope.test.ts tests/adversarial-causal-chain.test.ts tests/governance.test.ts tests/feasibility.test.ts tests/identity.test.ts tests/precedent.test.ts tests/reanchor.test.ts tests/escalation.test.ts tests/oracle-witness.test.ts tests/messaging-audit.test.ts tests/policy-conflict.test.ts tests/data-source.test.ts tests/decision-semantics.test.ts tests/interop-vectors.test.ts tests/v2-bridge.test.ts tests/v2-full.test.ts tests/key-storage.test.ts tests/qntm-bridge.test.ts tests/agent-json-bridge.test.ts tests/did-resolution-conformance.test.ts tests/decision-equivalence.test.ts tests/data-lifecycle.test.ts tests/campaign7-composition.test.ts tests/entity-verification.test.ts tests/conformance.test.ts tests/governance-block.test.ts tests/aps-txt.test.ts tests/governance-360.test.ts tests/storage-backend.test.ts tests/receipt-bundle.test.ts tests/reputation-confidence.test.ts tests/governance-consumer.test.ts tests/charter.test.ts tests/institutional-governance-phase2.test.ts tests/data-source-attribution.test.ts tests/canonical-jcs.test.ts tests/canonical-jcs-lone-surrogate.test.ts tests/temporal-spread.test.ts tests/fidelity-pressure.test.ts tests/denial-domains.test.ts tests/data-narrowing.test.ts tests/governance-posture.test.ts tests/anchor-state.test.ts tests/issuer-signature.test.ts tests/openshell-adapter.test.ts tests/attestation.test.ts tests/execution-attestation.test.ts tests/bilateral-receipt.test.ts tests/proof-namespace.test.ts tests/ecosystem-features.test.ts tests/persistent-passport.test.ts tests/security-av.test.ts tests/audit-fixes.test.ts tests/did-interop.test.ts tests/identity-bridge.test.ts tests/vc-wrapper.test.ts tests/identity-pipeline.test.ts tests/cross-protocol/sint-crossverify.test.ts tests/action-ref.test.ts tests/external-action-ref.test.ts tests/freshness.test.ts tests/evidence-grade.test.ts tests/key-rotation.test.ts tests/governance-regression.test.ts tests/posture-overlay.test.ts tests/feasibility-gateway.test.ts tests/trust-adapters.test.ts tests/evaluation-context.test.ts tests/health.test.ts tests/composio-adapter.test.ts tests/interop/ietf-envelope.test.ts tests/interop/signet-combined.test.ts tests/interop/moltrust-attestation.test.ts tests/interop/cross-protocol-vectors.test.ts tests/interop/receipt-chaining.test.ts tests/ibac-adapter.test.ts tests/langchain-adapter.test.ts tests/crewai-adapter.test.ts tests/mcp-adapter.test.ts tests/a2a-adapter.test.ts tests/gonka-adapter.test.ts tests/cross-algo-mismatch.test.ts tests/credential-lifecycle.test.ts tests/behavioral-memory.test.ts tests/telemetry-scope.test.ts tests/idempotency.test.ts tests/v2/wallet-binding.test.ts tests/v2/wallet-binding-fixture.test.ts tests/v2/credential-check-policy.test.ts tests/v2/delegation-escalation.test.ts tests/v2/attribution-consent.test.ts tests/v2/attribution-integration.test.ts tests/v2/attribution-primitive.test.ts tests/v2/attribution-primitive-integration.test.ts tests/v2/build-b-fractional-weights.test.ts tests/v2/build-b-cross-language.test.ts tests/v2/build-c-settlement.test.ts tests/v2/build-c-cross-language.test.ts tests/v2/build-c-end-to-end.test.ts tests/v2/provisional-statement.test.ts tests/temporal-decay.test.ts tests/confidence-breakdown.test.ts tests/behavioral-fingerprint.test.ts tests/session-boundary.test.ts tests/probe-identity.test.ts tests/v2/cognitive-attestation/envelope.test.ts tests/v2/cognitive-attestation/verify.test.ts tests/v2/cognitive-attestation/adversarial.test.ts tests/v2/mutual-auth/handshake.test.ts tests/v2/mutual-auth/adversarial.test.ts tests/v2/mutual-auth/conformance.test.ts tests/property-bilateral-receipt.test.ts tests/v2/instruction-provenance/conformance.test.ts tests/v2/instruction-provenance/adversarial.test.ts tests/v2/identity-composition-error.test.ts tests/v2/claim-evidence-types.test.ts tests/v2/claim-verifier.test.ts tests/v2/downstream-taint.test.ts tests/v2/payment-rails/nano.test.ts tests/v2/payment-rails/governance.test.ts tests/v2/payment-rails/ap2.test.ts tests/v2/payment-rails/x402.test.ts tests/v2/payment-rails/conformance/harness.test.ts tests/v2/payment-rails/binding-harness.test.ts tests/v2/payment-rails/stripe-issuing-primitives.test.ts tests/v2/payment-rails/acp.test.ts tests/v2/payment-rails/cycles.test.ts tests/v2/payment-rails/mpp.test.ts tests/v2/payment-rails/scope-resolution.test.ts tests/v2/payment-rails/accountability-bundle.test.ts tests/v2/payment-rails/did-uri-signing.test.ts tests/v2/payment-rails/cross-receipt-chain.test.ts src/v2/accountability/__tests__/action.test.ts src/v2/accountability/__tests__/authority-boundary.test.ts src/v2/accountability/__tests__/bundle.test.ts src/v2/accountability/__tests__/contestability.test.ts src/v2/accountability/__tests__/custody.test.ts src/v2/accountability/__tests__/fixtures.test.ts src/v2/cognitive_attestation/__tests__/cognitive_attestation.test.ts src/v2/delegation/__tests__/responsibility_anchor.test.ts src/v2/memory_provenance/__tests__/memory_provenance.test.ts src/v2/cross_issuer_attestation/__tests__/cross_issuer_attestation.test.ts src/v2/behavioral_drift_window/__tests__/behavioral_drift_window.test.ts tests/tool-registry-integrity.test.ts tests/v2/transport/rfc9421/request-binding.test.ts tests/v2/verifier-hardening.test.ts tests/v2/key-resolution/resolver.test.ts src/v2/feasibility/__tests__/feasibility.test.ts tests/oauth-rfc8693-bridge.test.ts tests/conformance/conformance-negatives.test.ts tests/v2/policy-bundle/policy-bundle.test.ts src/v2/scope-registry/__tests__/scope-registry.test.ts tests/check-many-parity.test.ts tests/cross-impl/jcs-equivalence.test.ts tests/remote-signer.test.ts tests/v2/assurance/descriptor.test.ts tests/v2/audience-binding/audience-binding.test.ts tests/v2/hash-pointer/bbs-composition.test.ts tests/v2/hash-pointer/profile.test.ts tests/v2/human-oversight/human-oversight.test.ts tests/v2/offline-verifier/conformance-runner.test.ts tests/v2/offline-verifier/middleware.test.ts tests/v2/offline-verifier/verify.test.ts tests/v2/payment-rails/cycles-evidence-resolution.test.ts tests/v2/payment-rails/cycles-evidence-authority.test.ts tests/v2/revocation-enforcement.test.ts tests/v2/trust-policy/trust-policy.test.ts src/v2/context-provenance/__tests__/roundtrip.test.ts src/v2/context-provenance/__tests__/disclosure.test.ts src/v2/context-provenance/__tests__/known-answer.test.ts src/v2/context-provenance/__tests__/conformance.test.ts src/v2/context-provenance/__tests__/adversarial.test.ts src/v2/context-provenance/__tests__/parity.test.ts src/v2/context-provenance/__tests__/cross-lang-parity.test.ts tests/v2/verification-source.test.ts tests/v2/producer-attestation.test.ts tests/delegation-currency-narrowing.test.ts tests/delegation-temporal-narrowing.test.ts tests/oauth-id-jag-bridge.test.ts tests/v2/regulated-action/conformance.test.ts tests/commerce-spend-accumulation.test.ts tests/delegation-spend-unit-narrowing.test.ts tests/delegation-parent-verify.test.ts tests/commerce-currency-gate.test.ts tests/v2/composition-check/conformance.test.ts src/v2/word_handles/__tests__/word_handles.test.ts src/v2/read_fidelity_receipt/__tests__/read_fidelity_receipt.test.ts tests/jurisdiction-selection.test.ts tests/v2/bilateral-pair/bilateral-pair.test.ts tests/evidence-bundle.test.ts tests/v2/verifier-null-guards.test.ts tests/merkle-domain-separation.test.ts tests/threshold-verify-before-count.test.ts tests/reversibility-fold.test.ts tests/reversibility-profile-parity.test.ts tests/reversibility-v0-vectors.test.ts",
     "test:interop": "npx tsx --test tests/interop/ietf-envelope.test.ts tests/interop/signet-combined.test.ts tests/interop/moltrust-attestation.test.ts tests/interop/cross-protocol-vectors.test.ts tests/interop/receipt-chaining.test.ts",
     "test:quick": "tsx --test tests/passport.test.ts",
     "test:fixtures": "tsx fixtures/bilateral-delegation/test-canonicalize.ts",
@@ -30,7 +30,7 @@
     "prepublishOnly": "npm run build && npm test",
     "postversion": "if [ -f ~/aps-web/scripts/sync-project-state.mjs ]; then node ~/aps-web/scripts/sync-project-state.mjs sdk $npm_package_version; else echo 'postversion: ~/aps-web/scripts/sync-project-state.mjs not found, skipping project-state sync'; fi",
     "postpublish": "if [ -d ~/aps-web ]; then cd ~/aps-web && node scripts/propagate.mjs --apply --skip-roadmap-build; else echo 'postpublish: ~/aps-web not found, skipping propagation'; fi",
-    "test:coverage": "npx tsx --test --experimental-test-coverage tests/passport.test.ts tests/adversarial.ts tests/v2.0-integration.ts tests/contract.test.ts tests/agora.test.ts tests/values.test.ts tests/delegation.test.ts tests/attribution.test.ts tests/policy.test.ts tests/canonical.test.ts tests/coordination.test.ts tests/commerce.test.ts tests/enforcement.test.ts tests/routing.test.ts tests/did-vc.test.ts tests/a2a.test.ts tests/principal.test.ts tests/adversarial-paper.test.ts tests/property-delegation.test.ts tests/property-canonical.test.ts tests/intent.test.ts tests/reputation-authority.test.ts tests/cross-chain.test.ts tests/encrypted-messaging.test.ts tests/obligations.test.ts tests/execution-envelope.test.ts tests/adversarial-causal-chain.test.ts tests/governance.test.ts tests/feasibility.test.ts tests/identity.test.ts tests/precedent.test.ts tests/reanchor.test.ts tests/escalation.test.ts tests/oracle-witness.test.ts tests/messaging-audit.test.ts tests/policy-conflict.test.ts tests/data-source.test.ts tests/decision-semantics.test.ts tests/interop-vectors.test.ts tests/v2-bridge.test.ts tests/v2-full.test.ts tests/key-storage.test.ts tests/qntm-bridge.test.ts tests/agent-json-bridge.test.ts tests/did-resolution-conformance.test.ts tests/decision-equivalence.test.ts tests/data-lifecycle.test.ts tests/campaign7-composition.test.ts tests/entity-verification.test.ts tests/conformance.test.ts tests/governance-block.test.ts tests/aps-txt.test.ts tests/governance-360.test.ts tests/storage-backend.test.ts tests/receipt-bundle.test.ts tests/reputation-confidence.test.ts tests/governance-consumer.test.ts tests/charter.test.ts tests/institutional-governance-phase2.test.ts tests/data-source-attribution.test.ts tests/canonical-jcs.test.ts tests/temporal-spread.test.ts tests/fidelity-pressure.test.ts tests/denial-domains.test.ts tests/data-narrowing.test.ts tests/governance-posture.test.ts tests/anchor-state.test.ts tests/issuer-signature.test.ts tests/openshell-adapter.test.ts tests/attestation.test.ts tests/execution-attestation.test.ts tests/bilateral-receipt.test.ts tests/proof-namespace.test.ts tests/ecosystem-features.test.ts tests/persistent-passport.test.ts tests/security-av.test.ts tests/audit-fixes.test.ts tests/did-interop.test.ts tests/identity-bridge.test.ts tests/vc-wrapper.test.ts tests/identity-pipeline.test.ts tests/cross-protocol/sint-crossverify.test.ts tests/action-ref.test.ts tests/external-action-ref.test.ts tests/freshness.test.ts tests/evidence-grade.test.ts tests/key-rotation.test.ts tests/governance-regression.test.ts tests/posture-overlay.test.ts tests/feasibility-gateway.test.ts tests/trust-adapters.test.ts tests/evaluation-context.test.ts tests/health.test.ts tests/composio-adapter.test.ts tests/interop/ietf-envelope.test.ts tests/interop/signet-combined.test.ts tests/interop/moltrust-attestation.test.ts tests/interop/cross-protocol-vectors.test.ts tests/interop/receipt-chaining.test.ts tests/ibac-adapter.test.ts tests/langchain-adapter.test.ts tests/crewai-adapter.test.ts tests/mcp-adapter.test.ts tests/a2a-adapter.test.ts tests/gonka-adapter.test.ts tests/cross-algo-mismatch.test.ts tests/credential-lifecycle.test.ts tests/behavioral-memory.test.ts tests/telemetry-scope.test.ts tests/idempotency.test.ts tests/v2/wallet-binding.test.ts tests/v2/wallet-binding-fixture.test.ts tests/v2/credential-check-policy.test.ts tests/v2/delegation-escalation.test.ts tests/v2/attribution-consent.test.ts tests/v2/attribution-integration.test.ts tests/v2/attribution-primitive.test.ts tests/v2/attribution-primitive-integration.test.ts tests/v2/build-b-fractional-weights.test.ts tests/v2/build-b-cross-language.test.ts tests/v2/build-c-settlement.test.ts tests/v2/build-c-cross-language.test.ts tests/v2/build-c-end-to-end.test.ts tests/v2/provisional-statement.test.ts tests/temporal-decay.test.ts tests/confidence-breakdown.test.ts tests/behavioral-fingerprint.test.ts tests/session-boundary.test.ts tests/probe-identity.test.ts tests/v2/cognitive-attestation/envelope.test.ts tests/v2/cognitive-attestation/verify.test.ts tests/v2/cognitive-attestation/adversarial.test.ts tests/v2/mutual-auth/handshake.test.ts tests/v2/mutual-auth/adversarial.test.ts tests/v2/mutual-auth/conformance.test.ts tests/property-bilateral-receipt.test.ts tests/v2/instruction-provenance/conformance.test.ts tests/v2/instruction-provenance/adversarial.test.ts tests/v2/identity-composition-error.test.ts tests/v2/claim-evidence-types.test.ts tests/v2/claim-verifier.test.ts tests/v2/downstream-taint.test.ts tests/v2/payment-rails/nano.test.ts tests/v2/payment-rails/governance.test.ts tests/v2/payment-rails/ap2.test.ts tests/v2/payment-rails/x402.test.ts tests/v2/payment-rails/conformance/harness.test.ts tests/v2/payment-rails/binding-harness.test.ts tests/v2/payment-rails/stripe-issuing-primitives.test.ts tests/v2/payment-rails/acp.test.ts tests/v2/payment-rails/cycles.test.ts tests/v2/payment-rails/mpp.test.ts tests/v2/payment-rails/scope-resolution.test.ts tests/v2/payment-rails/accountability-bundle.test.ts tests/v2/payment-rails/did-uri-signing.test.ts tests/v2/payment-rails/cross-receipt-chain.test.ts src/v2/accountability/__tests__/action.test.ts src/v2/accountability/__tests__/authority-boundary.test.ts src/v2/accountability/__tests__/bundle.test.ts src/v2/accountability/__tests__/contestability.test.ts src/v2/accountability/__tests__/custody.test.ts src/v2/accountability/__tests__/fixtures.test.ts src/v2/cognitive_attestation/__tests__/cognitive_attestation.test.ts src/v2/delegation/__tests__/responsibility_anchor.test.ts src/v2/memory_provenance/__tests__/memory_provenance.test.ts src/v2/cross_issuer_attestation/__tests__/cross_issuer_attestation.test.ts src/v2/behavioral_drift_window/__tests__/behavioral_drift_window.test.ts tests/tool-registry-integrity.test.ts tests/v2/transport/rfc9421/request-binding.test.ts tests/v2/verifier-hardening.test.ts tests/v2/key-resolution/resolver.test.ts src/v2/feasibility/__tests__/feasibility.test.ts tests/oauth-rfc8693-bridge.test.ts tests/conformance/conformance-negatives.test.ts tests/v2/policy-bundle/policy-bundle.test.ts src/v2/scope-registry/__tests__/scope-registry.test.ts tests/check-many-parity.test.ts tests/cross-impl/jcs-equivalence.test.ts tests/remote-signer.test.ts tests/v2/assurance/descriptor.test.ts tests/v2/audience-binding/audience-binding.test.ts tests/v2/hash-pointer/bbs-composition.test.ts tests/v2/hash-pointer/profile.test.ts tests/v2/human-oversight/human-oversight.test.ts tests/v2/offline-verifier/conformance-runner.test.ts tests/v2/offline-verifier/middleware.test.ts tests/v2/offline-verifier/verify.test.ts tests/v2/payment-rails/cycles-evidence-resolution.test.ts tests/v2/payment-rails/cycles-evidence-authority.test.ts tests/v2/revocation-enforcement.test.ts tests/v2/trust-policy/trust-policy.test.ts src/v2/context-provenance/__tests__/roundtrip.test.ts src/v2/context-provenance/__tests__/disclosure.test.ts src/v2/context-provenance/__tests__/known-answer.test.ts src/v2/context-provenance/__tests__/conformance.test.ts src/v2/context-provenance/__tests__/adversarial.test.ts src/v2/context-provenance/__tests__/parity.test.ts src/v2/context-provenance/__tests__/cross-lang-parity.test.ts tests/v2/verification-source.test.ts tests/v2/producer-attestation.test.ts tests/delegation-currency-narrowing.test.ts tests/delegation-temporal-narrowing.test.ts tests/oauth-id-jag-bridge.test.ts tests/v2/regulated-action/conformance.test.ts tests/commerce-spend-accumulation.test.ts tests/delegation-spend-unit-narrowing.test.ts tests/delegation-parent-verify.test.ts tests/commerce-currency-gate.test.ts tests/v2/composition-check/conformance.test.ts src/v2/word_handles/__tests__/word_handles.test.ts src/v2/read_fidelity_receipt/__tests__/read_fidelity_receipt.test.ts tests/jurisdiction-selection.test.ts tests/v2/bilateral-pair/bilateral-pair.test.ts tests/evidence-bundle.test.ts"
+    "test:coverage": "npx tsx --test --experimental-test-coverage tests/passport.test.ts tests/adversarial.ts tests/v2.0-integration.ts tests/contract.test.ts tests/agora.test.ts tests/values.test.ts tests/delegation.test.ts tests/attribution.test.ts tests/policy.test.ts tests/canonical.test.ts tests/coordination.test.ts tests/commerce.test.ts tests/enforcement.test.ts tests/routing.test.ts tests/did-vc.test.ts tests/a2a.test.ts tests/principal.test.ts tests/adversarial-paper.test.ts tests/property-delegation.test.ts tests/property-canonical.test.ts tests/intent.test.ts tests/reputation-authority.test.ts tests/cross-chain.test.ts tests/encrypted-messaging.test.ts tests/obligations.test.ts tests/execution-envelope.test.ts tests/adversarial-causal-chain.test.ts tests/governance.test.ts tests/feasibility.test.ts tests/identity.test.ts tests/precedent.test.ts tests/reanchor.test.ts tests/escalation.test.ts tests/oracle-witness.test.ts tests/messaging-audit.test.ts tests/policy-conflict.test.ts tests/data-source.test.ts tests/decision-semantics.test.ts tests/interop-vectors.test.ts tests/v2-bridge.test.ts tests/v2-full.test.ts tests/key-storage.test.ts tests/qntm-bridge.test.ts tests/agent-json-bridge.test.ts tests/did-resolution-conformance.test.ts tests/decision-equivalence.test.ts tests/data-lifecycle.test.ts tests/campaign7-composition.test.ts tests/entity-verification.test.ts tests/conformance.test.ts tests/governance-block.test.ts tests/aps-txt.test.ts tests/governance-360.test.ts tests/storage-backend.test.ts tests/receipt-bundle.test.ts tests/reputation-confidence.test.ts tests/governance-consumer.test.ts tests/charter.test.ts tests/institutional-governance-phase2.test.ts tests/data-source-attribution.test.ts tests/canonical-jcs.test.ts tests/canonical-jcs-lone-surrogate.test.ts tests/temporal-spread.test.ts tests/fidelity-pressure.test.ts tests/denial-domains.test.ts tests/data-narrowing.test.ts tests/governance-posture.test.ts tests/anchor-state.test.ts tests/issuer-signature.test.ts tests/openshell-adapter.test.ts tests/attestation.test.ts tests/execution-attestation.test.ts tests/bilateral-receipt.test.ts tests/proof-namespace.test.ts tests/ecosystem-features.test.ts tests/persistent-passport.test.ts tests/security-av.test.ts tests/audit-fixes.test.ts tests/did-interop.test.ts tests/identity-bridge.test.ts tests/vc-wrapper.test.ts tests/identity-pipeline.test.ts tests/cross-protocol/sint-crossverify.test.ts tests/action-ref.test.ts tests/external-action-ref.test.ts tests/freshness.test.ts tests/evidence-grade.test.ts tests/key-rotation.test.ts tests/governance-regression.test.ts tests/posture-overlay.test.ts tests/feasibility-gateway.test.ts tests/trust-adapters.test.ts tests/evaluation-context.test.ts tests/health.test.ts tests/composio-adapter.test.ts tests/interop/ietf-envelope.test.ts tests/interop/signet-combined.test.ts tests/interop/moltrust-attestation.test.ts tests/interop/cross-protocol-vectors.test.ts tests/interop/receipt-chaining.test.ts tests/ibac-adapter.test.ts tests/langchain-adapter.test.ts tests/crewai-adapter.test.ts tests/mcp-adapter.test.ts tests/a2a-adapter.test.ts tests/gonka-adapter.test.ts tests/cross-algo-mismatch.test.ts tests/credential-lifecycle.test.ts tests/behavioral-memory.test.ts tests/telemetry-scope.test.ts tests/idempotency.test.ts tests/v2/wallet-binding.test.ts tests/v2/wallet-binding-fixture.test.ts tests/v2/credential-check-policy.test.ts tests/v2/delegation-escalation.test.ts tests/v2/attribution-consent.test.ts tests/v2/attribution-integration.test.ts tests/v2/attribution-primitive.test.ts tests/v2/attribution-primitive-integration.test.ts tests/v2/build-b-fractional-weights.test.ts tests/v2/build-b-cross-language.test.ts tests/v2/build-c-settlement.test.ts tests/v2/build-c-cross-language.test.ts tests/v2/build-c-end-to-end.test.ts tests/v2/provisional-statement.test.ts tests/temporal-decay.test.ts tests/confidence-breakdown.test.ts tests/behavioral-fingerprint.test.ts tests/session-boundary.test.ts tests/probe-identity.test.ts tests/v2/cognitive-attestation/envelope.test.ts tests/v2/cognitive-attestation/verify.test.ts tests/v2/cognitive-attestation/adversarial.test.ts tests/v2/mutual-auth/handshake.test.ts tests/v2/mutual-auth/adversarial.test.ts tests/v2/mutual-auth/conformance.test.ts tests/property-bilateral-receipt.test.ts tests/v2/instruction-provenance/conformance.test.ts tests/v2/instruction-provenance/adversarial.test.ts tests/v2/identity-composition-error.test.ts tests/v2/claim-evidence-types.test.ts tests/v2/claim-verifier.test.ts tests/v2/downstream-taint.test.ts tests/v2/payment-rails/nano.test.ts tests/v2/payment-rails/governance.test.ts tests/v2/payment-rails/ap2.test.ts tests/v2/payment-rails/x402.test.ts tests/v2/payment-rails/conformance/harness.test.ts tests/v2/payment-rails/binding-harness.test.ts tests/v2/payment-rails/stripe-issuing-primitives.test.ts tests/v2/payment-rails/acp.test.ts tests/v2/payment-rails/cycles.test.ts tests/v2/payment-rails/mpp.test.ts tests/v2/payment-rails/scope-resolution.test.ts tests/v2/payment-rails/accountability-bundle.test.ts tests/v2/payment-rails/did-uri-signing.test.ts tests/v2/payment-rails/cross-receipt-chain.test.ts src/v2/accountability/__tests__/action.test.ts src/v2/accountability/__tests__/authority-boundary.test.ts src/v2/accountability/__tests__/bundle.test.ts src/v2/accountability/__tests__/contestability.test.ts src/v2/accountability/__tests__/custody.test.ts src/v2/accountability/__tests__/fixtures.test.ts src/v2/cognitive_attestation/__tests__/cognitive_attestation.test.ts src/v2/delegation/__tests__/responsibility_anchor.test.ts src/v2/memory_provenance/__tests__/memory_provenance.test.ts src/v2/cross_issuer_attestation/__tests__/cross_issuer_attestation.test.ts src/v2/behavioral_drift_window/__tests__/behavioral_drift_window.test.ts tests/tool-registry-integrity.test.ts tests/v2/transport/rfc9421/request-binding.test.ts tests/v2/verifier-hardening.test.ts tests/v2/key-resolution/resolver.test.ts src/v2/feasibility/__tests__/feasibility.test.ts tests/oauth-rfc8693-bridge.test.ts tests/conformance/conformance-negatives.test.ts tests/v2/policy-bundle/policy-bundle.test.ts src/v2/scope-registry/__tests__/scope-registry.test.ts tests/check-many-parity.test.ts tests/cross-impl/jcs-equivalence.test.ts tests/remote-signer.test.ts tests/v2/assurance/descriptor.test.ts tests/v2/audience-binding/audience-binding.test.ts tests/v2/hash-pointer/bbs-composition.test.ts tests/v2/hash-pointer/profile.test.ts tests/v2/human-oversight/human-oversight.test.ts tests/v2/offline-verifier/conformance-runner.test.ts tests/v2/offline-verifier/middleware.test.ts tests/v2/offline-verifier/verify.test.ts tests/v2/payment-rails/cycles-evidence-resolution.test.ts tests/v2/payment-rails/cycles-evidence-authority.test.ts tests/v2/revocation-enforcement.test.ts tests/v2/trust-policy/trust-policy.test.ts src/v2/context-provenance/__tests__/roundtrip.test.ts src/v2/context-provenance/__tests__/disclosure.test.ts src/v2/context-provenance/__tests__/known-answer.test.ts src/v2/context-provenance/__tests__/conformance.test.ts src/v2/context-provenance/__tests__/adversarial.test.ts src/v2/context-provenance/__tests__/parity.test.ts src/v2/context-provenance/__tests__/cross-lang-parity.test.ts tests/v2/verification-source.test.ts tests/v2/producer-attestation.test.ts tests/delegation-currency-narrowing.test.ts tests/delegation-temporal-narrowing.test.ts tests/oauth-id-jag-bridge.test.ts tests/v2/regulated-action/conformance.test.ts tests/commerce-spend-accumulation.test.ts tests/delegation-spend-unit-narrowing.test.ts tests/delegation-parent-verify.test.ts tests/commerce-currency-gate.test.ts tests/v2/composition-check/conformance.test.ts src/v2/word_handles/__tests__/word_handles.test.ts src/v2/read_fidelity_receipt/__tests__/read_fidelity_receipt.test.ts tests/jurisdiction-selection.test.ts tests/v2/bilateral-pair/bilateral-pair.test.ts tests/evidence-bundle.test.ts"
   },
   "dependencies": {
     "libsodium-wrappers": "^0.8.4",