agent-passport-system 4.3.0 → 4.4.0

package/dist/src/v2/accountability/construct/contestability.js.map

@@ -1 +1 @@
-{"version":3,"file":"contestability.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/contestability.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,uCAAuC;AACvC,qEAAqE;AACrE,uEAAuE;AACvE,8DAA8D;AAC9D,oEAAoE;AACpE,EAAE;AACF,8DAA8D;AAC9D,mEAAmE;AACnE,kEAAkE;AAClE,sEAAsE;AACtE,mEAAmE;AACnE,cAAc;AACd,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAmBpE,MAAM,UAAU,2BAA2B,CACzC,KAAuC,EACvC,oBAA4B;IAE5B,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,CAAC;QACnE,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,cAAc,KAAK,EAAE,CAAC,EACzF,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,oBAAoB,CAAC,CAAA;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE7D,MAAM,KAAK,GAA0B;QACnC,UAAU,EAAE,uBAAuB;QACnC,UAAU,EAAE,EAAE;QACd,SAAS;QACT,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,SAAS,EAAE,EAAE;KACd,CAAA;IACD,mEAAmE;IACnE,mEAAmE;IACnE,+BAA+B;IAC/B,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;SACtC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,MAAM,MAAM,GAA0B,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAA;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAA;IAErE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC;AAOD,MAAM,UAAU,wBAAwB,CACtC,OAA8B,EAC9B,QAAiC,EACjC,oBAA4B;IAE5B,8DAA8D;IAC9D,iEAAiE;IACjE,MAAM,aAAa,GAAqC;QACtD,GAAG,QAAQ;QACX,kBAAkB,EAAE,EAAE;KACvB,CAAA;IACD,MAAM,YAAY,GAA0B;QAC1C,GAAG,OAAO;QACV,mBAAmB,EAAE,aAAa;KACnC,CAAA;IACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC,CAAA;IAEpF,OAAO;QACL,GAAG,OAAO;QACV,mBAAmB,EAAE,EAAE,GAAG,QAAQ,EAAE,kBAAkB,EAAE;KACzD,CAAA;AACH,CAAC"}
+{"version":3,"file":"contestability.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/contestability.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,uCAAuC;AACvC,qEAAqE;AACrE,uEAAuE;AACvE,8DAA8D;AAC9D,oEAAoE;AACpE,EAAE;AACF,8DAA8D;AAC9D,mEAAmE;AACnE,kEAAkE;AAClE,sEAAsE;AACtE,mEAAmE;AACnE,cAAc;AACd,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAmB,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AACzF,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAmBpE,MAAM,UAAU,2BAA2B,CACzC,KAAuC,EACvC,oBAA4B;IAE5B,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,CAAC;QACnE,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,cAAc,KAAK,EAAE,CAAC,EACzF,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yFAAyF,CAC1F,CAAA;IACH,CAAC;IAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,oBAAoB,CAAC,CAAA;IAC7D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE7D,MAAM,KAAK,GAA0B;QACnC,UAAU,EAAE,uBAAuB;QACnC,UAAU,EAAE,EAAE;QACd,SAAS;QACT,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,SAAS,EAAE,EAAE;KACd,CAAA;IACD,mEAAmE;IACnE,mEAAmE;IACnE,+BAA+B;IAC/B,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACtC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAA;IAC3C,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;SAC9C,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,MAAM,MAAM,GAA0B,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAA;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAA;IAE7E,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC;AAOD,MAAM,UAAU,wBAAwB,CACtC,OAA8B,EAC9B,QAAiC,EACjC,oBAA4B;IAE5B,8DAA8D;IAC9D,iEAAiE;IACjE,MAAM,aAAa,GAAqC;QACtD,GAAG,QAAQ;QACX,kBAAkB,EAAE,EAAE;KACvB,CAAA;IACD,MAAM,YAAY,GAA0B;QAC1C,GAAG,OAAO;QACV,mBAAmB,EAAE,aAAa;KACnC,CAAA;IACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC,CAAA;IAE5F,OAAO;QACL,GAAG,OAAO;QACV,mBAAmB,EAAE,EAAE,GAAG,QAAQ,EAAE,kBAAkB,EAAE;KACzD,CAAA;AACH,CAAC"}

package/dist/src/v2/accountability/construct/custody.js

@@ -9,7 +9,7 @@
 // receipt_id, so any post-signing receipt_id tampering breaks the sig.
 // ══════════════════════════════════════════════════════════════════
 import { createHash } from 'node:crypto';
-import { canonicalizeJCS } from '../../../core/canonical-jcs.js';
+import { canonicalizeJCSForWrite } from '../../../core/canonical-jcs.js';
 import { sign, publicKeyFromPrivate } from '../../../crypto/keys.js';
 export function createCustodyReceipt(input, custodianPrivateKey) {
     const signer_did = publicKeyFromPrivate(custodianPrivateKey);
@@ -33,10 +33,10 @@ export function createCustodyReceipt(input, custodianPrivateKey) {
         signature: '',
     };
     const receipt_id = createHash('sha256')
-        .update(canonicalizeJCS(draft), 'utf8')
+        .update(canonicalizeJCSForWrite(draft), 'utf8')
         .digest('hex');
     const signed = { ...draft, receipt_id };
-    const signature = sign(canonicalizeJCS(signed), custodianPrivateKey);
+    const signature = sign(canonicalizeJCSForWrite(signed), custodianPrivateKey);
     return { ...signed, signature };
 }
 //# sourceMappingURL=custody.js.map

package/dist/src/v2/accountability/construct/custody.js.map

@@ -1 +1 @@
-{"version":3,"file":"custody.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/custody.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,gCAAgC;AAChC,qEAAqE;AACrE,oEAAoE;AACpE,wEAAwE;AACxE,kEAAkE;AAClE,uEAAuE;AACvE,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAWpE,MAAM,UAAU,oBAAoB,CAClC,KAAgC,EAChC,mBAA2B;IAE3B,MAAM,UAAU,GAAG,oBAAoB,CAAC,mBAAmB,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE7D,MAAM,KAAK,GAAmB;QAC5B,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,SAAS;QACT,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,EAAE;KACd,CAAA;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;SACtC,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,MAAM,MAAM,GAAmB,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAA;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAA;IAEpE,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC"}
+{"version":3,"file":"custody.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/construct/custody.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,gCAAgC;AAChC,qEAAqE;AACrE,oEAAoE;AACpE,wEAAwE;AACxE,kEAAkE;AAClE,uEAAuE;AACvE,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAmB,uBAAuB,EAAE,MAAM,gCAAgC,CAAA;AACzF,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAWpE,MAAM,UAAU,oBAAoB,CAClC,KAAgC,EAChC,mBAA2B;IAE3B,MAAM,UAAU,GAAG,oBAAoB,CAAC,mBAAmB,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAE7D,MAAM,KAAK,GAAmB;QAC5B,UAAU,EAAE,gBAAgB;QAC5B,UAAU,EAAE,EAAE;QACd,SAAS;QACT,UAAU;QACV,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,GAAG,CAAC,KAAK,CAAC,mBAAmB,KAAK,SAAS;YACzC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,mBAAmB,EAAE;YACpD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS,EAAE,EAAE;KACd,CAAA;IAED,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC;SACpC,MAAM,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;SAC9C,MAAM,CAAC,KAAK,CAAC,CAAA;IAEhB,MAAM,MAAM,GAAmB,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAA;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,mBAAmB,CAAC,CAAA;IAE5E,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAA;AACjC,CAAC"}

package/dist/src/v2/accountability/verify/bundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/bundle.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAEnD,MAAM,MAAM,qBAAqB,GAC7B,oBAAoB,GACpB,qBAAqB,GACrB,uBAAuB,GACvB,qBAAqB,GACrB,mBAAmB,CAAA;AAEvB,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,qBAAqB,CAAA;CAC/B;AAMD,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,qBAAqB,CA2BxE"}
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/bundle.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAEnD,MAAM,MAAM,qBAAqB,GAC7B,oBAAoB,GACpB,qBAAqB,GACrB,uBAAuB,GACvB,qBAAqB,GACrB,mBAAmB,CAAA;AAEvB,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,qBAAqB,CAAA;CAC/B;AAMD,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,qBAAqB,CA6BxE"}

package/dist/src/v2/accountability/verify/bundle.js

@@ -25,11 +25,13 @@ export function verifyAPSBundle(bundle) {
     if (!Number.isInteger(bundle.receipt_count) || bundle.receipt_count < 0) {
         return { valid: false, reason: 'INVALID_RECEIPT_COUNT' };
     }
-    const idCheck = sha256Hex(canonicalizeJCS({ ...bundle, receipt_id: '', signature: undefined }));
+    // explicit null: keeps the shipped preimage bytes (#101); omission would change signatures
+    const idCheck = sha256Hex(canonicalizeJCS({ ...bundle, receipt_id: '', signature: null }));
     if (idCheck !== bundle.receipt_id) {
         return { valid: false, reason: 'RECEIPT_ID_MISMATCH' };
     }
-    const sigPayload = canonicalizeJCS({ ...bundle, signature: undefined });
+    // explicit null: keeps the shipped preimage bytes (#101); omission would change signatures
+    const sigPayload = canonicalizeJCS({ ...bundle, signature: null });
     if (!edVerifyHex(sigPayload, bundle.signature, bundle.signer_did)) {
         return { valid: false, reason: 'SIGNATURE_INVALID' };
     }

package/dist/src/v2/accountability/verify/bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/bundle.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,2BAA2B;AAC3B,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AACrD,OAAO,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAe/D,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,0EAA0E;IAC1E,yCAAyC;IACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAA;IAC1D,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;IAC/F,IAAI,OAAO,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAA;IACvE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../../../../src/v2/accountability/verify/bundle.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,2BAA2B;AAC3B,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAA;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAA;AACrD,OAAO,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAe/D,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,0EAA0E;IAC1E,yCAAyC;IACzC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,eAAe,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAA;IACvD,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC/E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QACxE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAA;IAC1D,CAAC;IAED,2FAA2F;IAC3F,MAAM,OAAO,GAAG,SAAS,CAAC,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAC1F,IAAI,OAAO,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACxD,CAAC;IAED,2FAA2F;IAC3F,MAAM,UAAU,GAAG,eAAe,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClE,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACtD,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAA;AACxB,CAAC"}

package/dist/src/v2/attribution-consent/create.d.ts

@@ -2,7 +2,17 @@ import type { HybridTimestamp } from '../../types/time.js';
 import type { AgentDID, AttributionReceipt, ContextID, PrincipalDID } from './types.js';
 /** The canonical unsigned core of a receipt. Both citer and cited principal
  *  sign exactly this payload, and the receipt id is sha256(core). */
-export declare function receiptCore(receipt: AttributionReceipt | Omit<AttributionReceipt, 'id' | 'citer_signature' | 'cited_principal_signature'>): string;
+type ReceiptCoreInput = AttributionReceipt | Omit<AttributionReceipt, 'id' | 'citer_signature' | 'cited_principal_signature'>;
+export declare function receiptCore(receipt: ReceiptCoreInput): string;
+/** Write-boundary twin of receiptCore().
+ *
+ *  Shares one implementation body with receiptCore() so the two can never drift apart
+ *  on the field list. Emits the same bytes for every value it accepts; the only
+ *  difference is that an integer-valued number outside the interoperable IEEE 754
+ *  range is refused instead of serialized. Use at signing and new-write boundaries
+ *  ONLY: receiptCore() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export declare function receiptCoreForWrite(receipt: ReceiptCoreInput): string;
 export interface CreateAttributionReceiptParams {
     citer: AgentDID;
     citer_public_key: string;
@@ -18,4 +28,5 @@ export interface CreateAttributionReceiptParams {
  *  consent signature is still absent — verifyAttributionConsent() will
  *  reject this receipt until signAttributionConsent() runs. */
 export declare function createAttributionReceipt(params: CreateAttributionReceiptParams): AttributionReceipt;
+export {};
 //# sourceMappingURL=create.d.ts.map

package/dist/src/v2/attribution-consent/create.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-consent/create.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EACV,QAAQ,EACR,kBAAkB,EAClB,SAAS,EACT,YAAY,EACb,MAAM,YAAY,CAAA;AAEnB;qEACqE;AACrE,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,EAC/E,IAAI,GAAG,iBAAiB,GAAG,2BAA2B,CAAC,GAAG,MAAM,CAYjE;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,QAAQ,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,YAAY,CAAA;IAC7B,0BAA0B,EAAE,MAAM,CAAA;IAClC,gBAAgB,EAAE,MAAM,CAAA;IACxB,eAAe,EAAE,SAAS,CAAA;IAC1B,UAAU,EAAE,eAAe,CAAA;IAC3B,UAAU,EAAE,eAAe,CAAA;CAC5B;AAED;;+DAE+D;AAC/D,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,8BAA8B,GACrC,kBAAkB,CA6BpB"}
+{"version":3,"file":"create.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-consent/create.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EACV,QAAQ,EACR,kBAAkB,EAClB,SAAS,EACT,YAAY,EACb,MAAM,YAAY,CAAA;AAEnB;qEACqE;AACrE,KAAK,gBAAgB,GAAG,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,EAClE,IAAI,GAAG,iBAAiB,GAAG,2BAA2B,CAAC,CAAA;AAgBzD,wBAAgB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAE7D;AAED;;;;;;;iBAOiB;AACjB,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,MAAM,CAErE;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,QAAQ,CAAA;IACf,gBAAgB,EAAE,MAAM,CAAA;IACxB,iBAAiB,EAAE,MAAM,CAAA;IACzB,eAAe,EAAE,YAAY,CAAA;IAC7B,0BAA0B,EAAE,MAAM,CAAA;IAClC,gBAAgB,EAAE,MAAM,CAAA;IACxB,eAAe,EAAE,SAAS,CAAA;IAC1B,UAAU,EAAE,eAAe,CAAA;IAC3B,UAAU,EAAE,eAAe,CAAA;CAC5B;AAED;;+DAE+D;AAC/D,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,8BAA8B,GACrC,kBAAkB,CA6BpB"}

package/dist/src/v2/attribution-consent/create.js

@@ -3,11 +3,9 @@
 // Attribution Consent — construct + sign (citer-side)
 import { createHash } from 'node:crypto';
 import { sign } from '../../crypto/keys.js';
-import { canonicalize } from '../../core/canonical.js';
-/** The canonical unsigned core of a receipt. Both citer and cited principal
- *  sign exactly this payload, and the receipt id is sha256(core). */
-export function receiptCore(receipt) {
-    return canonicalize({
+import { canonicalize, canonicalizeForWrite } from '../../core/canonical.js';
+function receiptCoreImpl(receipt, canon) {
+    return canon({
         version: receipt.version,
         citer: receipt.citer,
         citer_public_key: receipt.citer_public_key,
@@ -19,6 +17,20 @@ export function receiptCore(receipt) {
         expires_at: receipt.expires_at,
     });
 }
+export function receiptCore(receipt) {
+    return receiptCoreImpl(receipt, canonicalize);
+}
+/** Write-boundary twin of receiptCore().
+ *
+ *  Shares one implementation body with receiptCore() so the two can never drift apart
+ *  on the field list. Emits the same bytes for every value it accepts; the only
+ *  difference is that an integer-valued number outside the interoperable IEEE 754
+ *  range is refused instead of serialized. Use at signing and new-write boundaries
+ *  ONLY: receiptCore() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export function receiptCoreForWrite(receipt) {
+    return receiptCoreImpl(receipt, canonicalizeForWrite);
+}
 /** Build an AttributionReceipt signed by the citer. The cited principal's
  *  consent signature is still absent — verifyAttributionConsent() will
  *  reject this receipt until signAttributionConsent() runs. */
@@ -40,7 +52,7 @@ export function createAttributionReceipt(params) {
         created_at: params.created_at,
         expires_at: params.expires_at,
     };
-    const core = receiptCore(unsigned);
+    const core = receiptCoreForWrite(unsigned);
     const id = createHash('sha256').update(core).digest('hex');
     const citer_signature = sign(core, params.citer_private_key);
     return {

package/dist/src/v2/attribution-consent/create.js.map

@@ -1 +1 @@
-{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../src/v2/attribution-consent/create.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,sDAAsD;AAEtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAStD;qEACqE;AACrE,MAAM,UAAU,WAAW,CAAC,OAC6B;IACvD,OAAO,YAAY,CAAC;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;QAC9D,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAA;AACJ,CAAC;AAcD;;+DAE+D;AAC/D,MAAM,UAAU,wBAAwB,CACtC,MAAsC;IAEtC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;IAC1F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,KAAc;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAA;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAA;IAClC,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAE5D,OAAO;QACL,EAAE;QACF,GAAG,QAAQ;QACX,eAAe;KAChB,CAAA;AACH,CAAC"}
+{"version":3,"file":"create.js","sourceRoot":"","sources":["../../../../src/v2/attribution-consent/create.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,sDAAsD;AAEtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAc5E,SAAS,eAAe,CAAC,OAAyB,EAAE,KAA6B;IAC/E,OAAO,KAAK,CAAC;QACX,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;QAC9D,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAyB;IACnD,OAAO,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;;;iBAOiB;AACjB,MAAM,UAAU,mBAAmB,CAAC,OAAyB;IAC3D,OAAO,eAAe,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;AACvD,CAAC;AAcD;;+DAE+D;AAC/D,MAAM,UAAU,wBAAwB,CACtC,MAAsC;IAEtC,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ,EAAE,CAAC;QAC5E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAA;IAC1F,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,KAAc;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;QAC7D,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAA;IAED,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAC1C,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAE5D,OAAO;QACL,EAAE;QACF,GAAG,QAAQ;QACX,eAAe;KAChB,CAAA;AACH,CAAC"}

package/dist/src/v2/attribution-consent/sign.js

@@ -2,12 +2,12 @@
 // SPDX-License-Identifier: Apache-2.0
 // Attribution Consent — cited-principal consent signing
 import { sign, verify } from '../../crypto/keys.js';
-import { receiptCore } from './create.js';
+import { receiptCoreForWrite } from './create.js';
 /** Add the cited principal's consent signature. The private key must match
  *  cited_principal_public_key on the receipt or this throws. Does not
  *  mutate the input receipt. */
 export function signAttributionConsent(receipt, cited_principal_private_key) {
-    const core = receiptCore(receipt);
+    const core = receiptCoreForWrite(receipt);
     const cited_principal_signature = sign(core, cited_principal_private_key);
     if (!verify(core, cited_principal_signature, receipt.cited_principal_public_key)) {
         throw new Error('signAttributionConsent: consent signature does not verify against cited_principal_public_key — wrong private key?');

package/dist/src/v2/attribution-consent/sign.js.map

@@ -1 +1 @@
-{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../src/v2/attribution-consent/sign.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,wDAAwD;AAExD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAGzC;;gCAEgC;AAChC,MAAM,UAAU,sBAAsB,CACpC,OAA2B,EAC3B,2BAAmC;IAEnC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACjC,MAAM,yBAAyB,GAAG,IAAI,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAA;IAEzE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,yBAAyB,EAAE,OAAO,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAA;IACH,CAAC;IAED,OAAO,EAAE,GAAG,OAAO,EAAE,yBAAyB,EAAE,CAAA;AAClD,CAAC"}
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../src/v2/attribution-consent/sign.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,wDAAwD;AAExD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAGjD;;gCAEgC;AAChC,MAAM,UAAU,sBAAsB,CACpC,OAA2B,EAC3B,2BAAmC;IAEnC,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IACzC,MAAM,yBAAyB,GAAG,IAAI,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAA;IAEzE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,yBAAyB,EAAE,OAAO,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAA;IACH,CAAC;IAED,OAAO,EAAE,GAAG,OAAO,EAAE,yBAAyB,EAAE,CAAA;AAClD,CAAC"}

package/dist/src/v2/attribution-primitive/canonical.d.ts

@@ -32,14 +32,29 @@ export declare function orderGovernanceAxis(items: GovernanceAxisEntry[]): Gover
 export declare function normalizeAxes(axes: AttributionAxes): AttributionAxes;
 /** SHA-256(canonical(axis_content)) as raw 32 bytes. §2.1. */
 export declare function hashAxisLeaf(axis: unknown): Buffer;
+/** Write-boundary twin of hashAxisLeaf().
+ *
+ *  Emits the same bytes as hashAxisLeaf() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  hashAxisLeaf() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export declare function hashAxisLeafForWrite(axis: unknown): Buffer;
 /** Internal Merkle node: SHA-256(left_bytes || right_bytes). §2.1. */
 export declare function hashNode(left: Buffer, right: Buffer): Buffer;
 /** Hex sha256 of canonicalize(envelope). Used for signing and for deriving
  *  action_ref from the action tuple. */
 export declare function canonicalHashHex(obj: unknown): string;
-/** The canonical envelope §2.3 that Ed25519 signs. Returned as a string so
- *  Python and TypeScript sign/verify exactly the same bytes. */
 export declare function envelopeBytes(env: AttributionEnvelope): string;
+/** Write-boundary twin of envelopeBytes().
+ *
+ *  Shares one implementation body with envelopeBytes() so the two can never drift apart
+ *  on the field list. Emits the same bytes for every value it accepts; the only
+ *  difference is that an integer-valued number outside the interoperable IEEE 754
+ *  range is refused instead of serialized. Use at signing and new-write boundaries
+ *  ONLY: envelopeBytes() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export declare function envelopeBytesForWrite(env: AttributionEnvelope): string;
 /** Type-safe enumeration of axis tags, for iteration. */
 export declare const ATTRIBUTION_AXIS_TAGS: ReadonlyArray<AttributionAxisTag>;
 //# sourceMappingURL=canonical.d.ts.map

package/dist/src/v2/attribution-primitive/canonical.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/canonical.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAEjB,MAAM,YAAY,CAAA;AAKnB;;2CAE2C;AAC3C,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAgB7D;AAED;2EAC2E;AAC3E,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAMzD;AAED;;0BAE0B;AAC1B,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,IAAiB,GAAG,MAAM,CAIjE;AAYD;;;;;;;;;;4CAU4C;AAC5C,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAQlE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAY9E;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAU3E;AAED;2DAC2D;AAC3D,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,CAUvF;AAED;0EAC0E;AAC1E,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAOpE;AAED,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAElD;AAED,sEAAsE;AACtE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;wCACwC;AACxC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAErD;AAED;gEACgE;AAChE,wBAAgB,aAAa,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAQ9D;AAED,yDAAyD;AACzD,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAAC,kBAAkB,CAAwB,CAAA"}
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/canonical.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,gBAAgB,EAEjB,MAAM,YAAY,CAAA;AAKnB;;2CAE2C;AAC3C,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAgB7D;AAED;2EAC2E;AAC3E,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAMzD;AAED;;0BAE0B;AAC1B,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,IAAiB,GAAG,MAAM,CAIjE;AAYD;;;;;;;;;;4CAU4C;AAC5C,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,CAQlE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAY9E;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAU3E;AAED;2DAC2D;AAC3D,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,mBAAmB,EAAE,CAUvF;AAED;0EAC0E;AAC1E,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,eAAe,CAOpE;AAED,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAElD;AACD;;;;;;iBAMiB;AACjB,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAE1D;AAED,sEAAsE;AACtE,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;wCACwC;AACxC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAErD;AAcD,wBAAgB,aAAa,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAE9D;AAED;;;;;;;iBAOiB;AACjB,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,GAAG,MAAM,CAEtE;AAED,yDAAyD;AACzD,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAAC,kBAAkB,CAAwB,CAAA"}

package/dist/src/v2/attribution-primitive/canonical.js

@@ -8,7 +8,7 @@
 // §3.4) holds for schema-valid inputs.
 // ══════════════════════════════════════════════════════════════════
 import { createHash } from 'node:crypto';
-import { canonicalize } from '../../core/canonical.js';
+import { canonicalize, canonicalizeForWrite } from '../../core/canonical.js';
 const WEIGHT_PATTERN = /^\d+\.\d{6}$/;
 const ISO_8601_MS_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
 /** Format a numeric weight or decimal-string input as the canonical
@@ -118,6 +118,16 @@ export function normalizeAxes(axes) {
 export function hashAxisLeaf(axis) {
     return createHash('sha256').update(canonicalize(axis)).digest();
 }
+/** Write-boundary twin of hashAxisLeaf().
+ *
+ *  Emits the same bytes as hashAxisLeaf() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  hashAxisLeaf() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export function hashAxisLeafForWrite(axis) {
+    return createHash('sha256').update(canonicalizeForWrite(axis)).digest();
+}
 /** Internal Merkle node: SHA-256(left_bytes || right_bytes). §2.1. */
 export function hashNode(left, right) {
     return createHash('sha256').update(Buffer.concat([left, right])).digest();
@@ -129,15 +139,29 @@ export function canonicalHashHex(obj) {
 }
 /** The canonical envelope §2.3 that Ed25519 signs. Returned as a string so
  *  Python and TypeScript sign/verify exactly the same bytes. */
-export function envelopeBytes(env) {
+function envelopeBytesImpl(env, canon) {
     assertCanonicalTimestamp(env.timestamp);
-    return canonicalize({
+    return canon({
         action_ref: env.action_ref,
         merkle_root: env.merkle_root,
         issuer: env.issuer,
         timestamp: env.timestamp,
     });
 }
+export function envelopeBytes(env) {
+    return envelopeBytesImpl(env, canonicalize);
+}
+/** Write-boundary twin of envelopeBytes().
+ *
+ *  Shares one implementation body with envelopeBytes() so the two can never drift apart
+ *  on the field list. Emits the same bytes for every value it accepts; the only
+ *  difference is that an integer-valued number outside the interoperable IEEE 754
+ *  range is refused instead of serialized. Use at signing and new-write boundaries
+ *  ONLY: envelopeBytes() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export function envelopeBytesForWrite(env) {
+    return envelopeBytesImpl(env, canonicalizeForWrite);
+}
 /** Type-safe enumeration of axis tags, for iteration. */
 export const ATTRIBUTION_AXIS_TAGS = ['D', 'P', 'G', 'C'];
 //# sourceMappingURL=canonical.js.map

package/dist/src/v2/attribution-primitive/canonical.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/canonical.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,yEAAyE;AACzE,uEAAuE;AACvE,uCAAuC;AACvC,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAYtD,MAAM,cAAc,GAAG,cAAc,CAAA;AACrC,MAAM,mBAAmB,GAAG,+CAA+C,CAAA;AAE3E;;2CAE2C;AAC3C,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,yCAAyC,KAAK,uCAAuC,CACtF,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,wDAAwD,KAAK,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AACzB,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,wBAAwB,CAAC,EAAU;IACjD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,qCAAqC,EAAE,yEAAyE,CACjH,CAAA;IACH,CAAC;AACH,CAAC;AAED;;0BAE0B;AAC1B,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAS,IAAI,IAAI,EAAE;IACvD,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC3B,wBAAwB,CAAC,CAAC,CAAC,CAAA;IAC3B,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,aAAa,IAAK,CAAY;QAC9B,OAAQ,CAAoB,CAAC,WAAW,KAAK,QAAQ;QACpD,CAAoB,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAC1D,CAAA;AACH,CAAC;AAED;;;;;;;;;;4CAU4C;AAC5C,MAAM,UAAU,YAAY,CAAC,KAAqB;IAChD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAqB,CAAA;IAC9D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAA4C,CAAA;IAC/F,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjG,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAqB,CAAA;IAC9D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAgD,CAAA;IACnG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,cAAc,EAAE,CAAA;QACpD,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,cAAc,EAAE,CAAA;QACpD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAwB;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAqB,CAAA;IAC9D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAA+C,CAAA;IAClG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrB,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/E,CAAA;IACD,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAA;AACpC,CAAC;AAED;2DAC2D;AAC3D,MAAM,UAAU,mBAAmB,CAAC,KAA4B;IAC9D,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,8DAA8D,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CACjF,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,aAAa,CAAC,IAAqB;IACjD,OAAO;QACL,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACvB,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3B,CAAC,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;KAC3B,CAAA;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AACjE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAa;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AAC3E,CAAC;AAED;wCACwC;AACxC,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED;gEACgE;AAChE,MAAM,UAAU,aAAa,CAAC,GAAwB;IACpD,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,OAAO,YAAY,CAAC;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAA;AACJ,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAsC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA"}
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/canonical.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,qEAAqE;AACrE,qEAAqE;AACrE,yEAAyE;AACzE,uEAAuE;AACvE,uCAAuC;AACvC,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAY5E,MAAM,cAAc,GAAG,cAAc,CAAA;AACrC,MAAM,mBAAmB,GAAG,+CAA+C,CAAA;AAE3E;;2CAE2C;AAC3C,MAAM,UAAU,cAAc,CAAC,KAAsB;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,yCAAyC,KAAK,uCAAuC,CACtF,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,qDAAqD,KAAK,EAAE,CAAC,CAAA;IAC/E,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,wDAAwD,KAAK,EAAE,CAAC,CAAA;IAClF,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AACzB,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,wBAAwB,CAAC,EAAU;IACjD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,qCAAqC,EAAE,yEAAyE,CACjH,CAAA;IACH,CAAC;AACH,CAAC;AAED;;0BAE0B;AAC1B,MAAM,UAAU,kBAAkB,CAAC,GAAG,GAAS,IAAI,IAAI,EAAE;IACvD,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAC3B,wBAAwB,CAAC,CAAC,CAAC,CAAA;IAC3B,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,aAAa,IAAK,CAAY;QAC9B,OAAQ,CAAoB,CAAC,WAAW,KAAK,QAAQ;QACpD,CAAoB,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAC1D,CAAA;AACH,CAAC;AAED;;;;;;;;;;4CAU4C;AAC5C,MAAM,UAAU,YAAY,CAAC,KAAqB;IAChD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAqB,CAAA;IAC9D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAA4C,CAAA;IAC/F,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjG,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAqB,CAAA;IAC9D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAgD,CAAA;IACnG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACrB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,cAAc,EAAE,CAAA;QACpD,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,SAAS,SAAS,CAAC,CAAC,cAAc,EAAE,CAAA;QACpD,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAwB;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAqB,CAAA;IAC9D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAA+C,CAAA;IAClG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrB,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC/E,CAAA;IACD,OAAO,CAAC,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC,CAAA;AACpC,CAAC;AAED;2DAC2D;AAC3D,MAAM,UAAU,mBAAmB,CAAC,KAA4B;IAC9D,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,8DAA8D,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CACjF,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,aAAa,CAAC,IAAqB;IACjD,OAAO;QACL,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACvB,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3B,CAAC,EAAE,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,CAAC,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;KAC3B,CAAA;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AACjE,CAAC;AACD;;;;;;iBAMiB;AACjB,MAAM,UAAU,oBAAoB,CAAC,IAAa;IAChD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AACzE,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAa;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AAC3E,CAAC;AAED;wCACwC;AACxC,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACrE,CAAC;AAED;gEACgE;AAChE,SAAS,iBAAiB,CAAC,GAAwB,EAAE,KAA6B;IAChF,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACvC,OAAO,KAAK,CAAC;QACX,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAwB;IACpD,OAAO,iBAAiB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAA;AAC7C,CAAC;AAED;;;;;;;iBAOiB;AACjB,MAAM,UAAU,qBAAqB,CAAC,GAAwB;IAC5D,OAAO,iBAAiB,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAA;AACrD,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,qBAAqB,GAAsC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA"}

package/dist/src/v2/attribution-primitive/construct.d.ts

@@ -1,19 +1,4 @@
 import type { AttributionAction, AttributionAxes, AttributionPrimitive } from './types.js';
-/** Derive action_ref from the action tuple. §1.2 / §3.4.
- *
- *  The spec pseudocode in §2.7 uses string concatenation (`agentId || type
- *  || canonical(params) || nonce`), but Theorem 1's reduction relies on
- *  canonical(T) being injective (A1). Plain string concatenation is not
- *  self-delimiting, so two distinct tuples could produce the same byte
- *  string. We adopt canonical(T) on the full tuple, which is injective by
- *  construction and matches the security argument.
- *
- *  Canonicalization uses strict RFC 8785 JCS (canonicalHashJCS), not the
- *  legacy null-stripping APS variant. ATTRIBUTION-PRIMITIVE-v1.1 §1.6
- *  pins all hashing to RFC 8785, and Theorem 1's Assumption A1
- *  (canonicalization injectivity) requires that semantically distinct
- *  action tuples produce distinct canonical bytes — which null-stripping
- *  would violate ({k:null, v:1} and {v:1} would collide). */
 export declare function computeAttributionActionRef(action: AttributionAction): string;
 export interface ConstructAttributionParams {
     /** The action being attested. Used to derive action_ref. */

package/dist/src/v2/attribution-primitive/construct.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"construct.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/construct.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACrB,MAAM,YAAY,CAAA;AAEnB;;;;;;;;;;;;;;6DAc6D;AAC7D,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAa7E;AAED,MAAM,WAAW,0BAA0B;IACzC,4DAA4D;IAC5D,MAAM,EAAE,iBAAiB,CAAA;IACzB;2BACuB;IACvB,IAAI,EAAE,eAAe,CAAA;IACrB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;IACd;0DACsD;IACtD,gBAAgB,EAAE,MAAM,CAAA;IACxB;uEACmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,4DAA4D;AAC5D,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,0BAA0B,GACjC,oBAAoB,CA0BtB;AAED;;;mEAGmE;AACnE,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,oBAAoB,EAC/B,gBAAgB,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAAE,GAChF,oBAAoB,CAiBtB"}
+{"version":3,"file":"construct.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/construct.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EACV,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACrB,MAAM,YAAY,CAAA;AAmCnB,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAE7E;AAaD,MAAM,WAAW,0BAA0B;IACzC,4DAA4D;IAC5D,MAAM,EAAE,iBAAiB,CAAA;IACzB;2BACuB;IACvB,IAAI,EAAE,eAAe,CAAA;IACrB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAA;IACd;0DACsD;IACtD,gBAAgB,EAAE,MAAM,CAAA;IACxB;uEACmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,4DAA4D;AAC5D,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,0BAA0B,GACjC,oBAAoB,CA0BtB;AAED;;;mEAGmE;AACnE,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,oBAAoB,EAC/B,gBAAgB,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,eAAe,CAAC;IAAC,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAAE,GAChF,oBAAoB,CAiBtB"}

package/dist/src/v2/attribution-primitive/construct.js

@@ -11,9 +11,9 @@
 // policy per §7.1.
 // ══════════════════════════════════════════════════════════════════
 import { sign } from '../../crypto/keys.js';
-import { canonicalHashJCS } from '../../core/canonical-jcs.js';
-import { assertCanonicalTimestamp, canonicalTimestamp, envelopeBytes, } from './canonical.js';
-import { buildMerkleFrame } from './merkle.js';
+import { canonicalHashJCS, canonicalHashJCSForWrite } from '../../core/canonical-jcs.js';
+import { assertCanonicalTimestamp, canonicalTimestamp, envelopeBytesForWrite, } from './canonical.js';
+import { buildMerkleFrameForWrite } from './merkle.js';
 /** Derive action_ref from the action tuple. §1.2 / §3.4.
  *
  *  The spec pseudocode in §2.7 uses string concatenation (`agentId || type
@@ -29,7 +29,7 @@ import { buildMerkleFrame } from './merkle.js';
  *  (canonicalization injectivity) requires that semantically distinct
  *  action tuples produce distinct canonical bytes — which null-stripping
  *  would violate ({k:null, v:1} and {v:1} would collide). */
-export function computeAttributionActionRef(action) {
+function computeAttributionActionRefImpl(action, hash) {
     if (!action.agentId)
         throw new Error('attribution-primitive: action.agentId required');
     if (!action.actionType)
@@ -39,25 +39,38 @@ export function computeAttributionActionRef(action) {
     if (typeof action.params !== 'object' || action.params === null) {
         throw new Error('attribution-primitive: action.params must be an object');
     }
-    return canonicalHashJCS({
+    return hash({
         agentId: action.agentId,
         actionType: action.actionType,
         params: action.params,
         nonce: action.nonce,
     });
 }
+export function computeAttributionActionRef(action) {
+    return computeAttributionActionRefImpl(action, canonicalHashJCS);
+}
+/** Write-boundary twin of computeAttributionActionRef().
+ *
+ *  Module-internal on purpose: it is deliberately absent from the package barrel, so
+ *  this adds no public API. The exported computeAttributionActionRef() stays
+ *  unrestricted, because an external verifier re-deriving the action_ref of a primitive
+ *  signed before this rule must still get the same value. Mirrors the Python SDK's
+ *  _compute_attribution_action_ref_for_write. */
+function computeAttributionActionRefForWrite(action) {
+    return computeAttributionActionRefImpl(action, canonicalHashJCSForWrite);
+}
 /** Build and sign a complete AttributionPrimitive. §2.7. */
 export function constructAttributionPrimitive(params) {
     if (!params.issuer)
         throw new Error('attribution-primitive: issuer required');
     if (!params.issuerPrivateKey)
         throw new Error('attribution-primitive: issuerPrivateKey required');
-    const action_ref = computeAttributionActionRef(params.action);
-    const frame = buildMerkleFrame(params.axes);
+    const action_ref = computeAttributionActionRefForWrite(params.action);
+    const frame = buildMerkleFrameForWrite(params.axes);
     const merkle_root = frame.root.toString('hex');
     const timestamp = params.timestamp ?? canonicalTimestamp();
     assertCanonicalTimestamp(timestamp);
-    const envelope = envelopeBytes({
+    const envelope = envelopeBytesForWrite({
         action_ref,
         merkle_root,
         issuer: params.issuer,
@@ -80,13 +93,13 @@ export function constructAttributionPrimitive(params) {
 export function resignAttributionPrimitive(primitive, issuerPrivateKey, opts) {
     const axes = opts?.axes ?? primitive.axes;
     const action_ref = opts?.action
-        ? computeAttributionActionRef(opts.action)
+        ? computeAttributionActionRefForWrite(opts.action)
         : primitive.action_ref;
-    const frame = buildMerkleFrame(axes);
+    const frame = buildMerkleFrameForWrite(axes);
     const merkle_root = frame.root.toString('hex');
     const timestamp = opts?.timestamp ?? canonicalTimestamp();
     assertCanonicalTimestamp(timestamp);
-    const envelope = envelopeBytes({
+    const envelope = envelopeBytesForWrite({
         action_ref,
         merkle_root,
         issuer: primitive.issuer,

package/dist/src/v2/attribution-primitive/construct.js.map

@@ -1 +1 @@
-{"version":3,"file":"construct.js","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/construct.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,uCAAuC;AACvC,qEAAqE;AACrE,0EAA0E;AAC1E,wEAAwE;AACxE,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,mBAAmB;AACnB,qEAAqE;AAErE,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,GACd,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAO9C;;;;;;;;;;;;;;6DAc6D;AAC7D,MAAM,UAAU,2BAA2B,CAAC,MAAyB;IACnE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACtF,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IAC5F,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAClF,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,gBAAgB,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAA;AACJ,CAAC;AAkBD,4DAA4D;AAC5D,MAAM,UAAU,6BAA6B,CAC3C,MAAkC;IAElC,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC7E,IAAI,CAAC,MAAM,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IAEjG,MAAM,UAAU,GAAG,2BAA2B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,EAAE,CAAA;IAC1D,wBAAwB,CAAC,SAAS,CAAC,CAAA;IAEnC,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,UAAU;QACV,WAAW;QACX,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS;KACV,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAEzD,OAAO;QACL,UAAU;QACV,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW;QACX,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS;QACT,SAAS;KACV,CAAA;AACH,CAAC;AAED;;;mEAGmE;AACnE,MAAM,UAAU,0BAA0B,CACxC,SAA+B,EAC/B,gBAAwB,EACxB,IAAiF;IAEjF,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,SAAS,CAAC,IAAI,CAAA;IACzC,MAAM,UAAU,GAAG,IAAI,EAAE,MAAM;QAC7B,CAAC,CAAC,2BAA2B,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1C,CAAC,CAAC,SAAS,CAAC,UAAU,CAAA;IACxB,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACpC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,kBAAkB,EAAE,CAAA;IACzD,wBAAwB,CAAC,SAAS,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,UAAU;QACV,WAAW;QACX,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS;KACV,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;IAClD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AACtG,CAAC"}
+{"version":3,"file":"construct.js","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/construct.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,uCAAuC;AACvC,qEAAqE;AACrE,0EAA0E;AAC1E,wEAAwE;AACxE,uEAAuE;AACvE,0EAA0E;AAC1E,qEAAqE;AACrE,mBAAmB;AACnB,qEAAqE;AAErE,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAC3C,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AACxF,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AAOtD;;;;;;;;;;;;;;6DAc6D;AAC7D,SAAS,+BAA+B,CACtC,MAAyB,EACzB,IAA8C;IAE9C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACtF,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IAC5F,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IAClF,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;QACV,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAyB;IACnE,OAAO,+BAA+B,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;AAClE,CAAC;AAED;;;;;;iDAMiD;AACjD,SAAS,mCAAmC,CAAC,MAAyB;IACpE,OAAO,+BAA+B,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAA;AAC1E,CAAC;AAkBD,4DAA4D;AAC5D,MAAM,UAAU,6BAA6B,CAC3C,MAAkC;IAElC,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC7E,IAAI,CAAC,MAAM,CAAC,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IAEjG,MAAM,UAAU,GAAG,mCAAmC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACrE,MAAM,KAAK,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACnD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,kBAAkB,EAAE,CAAA;IAC1D,wBAAwB,CAAC,SAAS,CAAC,CAAA;IAEnC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACrC,UAAU;QACV,WAAW;QACX,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS;KACV,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;IAEzD,OAAO;QACL,UAAU;QACV,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW;QACX,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS;QACT,SAAS;KACV,CAAA;AACH,CAAC;AAED;;;mEAGmE;AACnE,MAAM,UAAU,0BAA0B,CACxC,SAA+B,EAC/B,gBAAwB,EACxB,IAAiF;IAEjF,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,SAAS,CAAC,IAAI,CAAA;IACzC,MAAM,UAAU,GAAG,IAAI,EAAE,MAAM;QAC7B,CAAC,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC;QAClD,CAAC,CAAC,SAAS,CAAC,UAAU,CAAA;IACxB,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;IAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC9C,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,kBAAkB,EAAE,CAAA;IACzD,wBAAwB,CAAC,SAAS,CAAC,CAAA;IACnC,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACrC,UAAU;QACV,WAAW;QACX,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,SAAS;KACV,CAAC,CAAA;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAA;IAClD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AACtG,CAAC"}

package/dist/src/v2/attribution-primitive/merkle.d.ts

@@ -14,10 +14,14 @@ export interface MerkleFrame {
     };
     root: Buffer;
 }
-/** Build the full tree for a set of axes. Callers pass the raw (possibly
- *  unsorted) axes; we normalize before hashing so the caller can't produce
- *  two different canonical representations of the same logical content. */
 export declare function buildMerkleFrame(rawAxes: AttributionAxes): MerkleFrame;
+/** Write-boundary twin of buildMerkleFrame().
+ *
+ *  Reaches a canonicalizer only indirectly, through hashAxisLeaf, so a call-site
+ *  census over canonicalizer usage cannot see it. Use when CONSTRUCTING a primitive;
+ *  projection and verification keep calling buildMerkleFrame() so a primitive built
+ *  before this rule still reconstructs. */
+export declare function buildMerkleFrameForWrite(rawAxes: AttributionAxes): MerkleFrame;
 /** The sibling path for a projection, in the order §2.2 specifies:
  *  [sibling_leaf_within_pair_hex, sibling_internal_node_hex]. */
 export declare function projectionPath(frame: MerkleFrame, axis: AttributionAxisTag): [string, string];

package/dist/src/v2/attribution-primitive/merkle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/merkle.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAErE,MAAM,WAAW,WAAW;IAC1B,0DAA0D;IAC1D,IAAI,EAAE,eAAe,CAAA;IACrB,MAAM,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACtD,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;IAClD,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;2EAE2E;AAC3E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CAetE;AAED;iEACiE;AACjE,wBAAgB,cAAc,CAC5B,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,kBAAkB,GACvB,CAAC,MAAM,EAAE,MAAM,CAAC,CAelB;AAED;;iEAEiE;AACjE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EACtB,IAAI,EAAE,kBAAkB,GACvB,MAAM,CA2BR"}
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/merkle.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAErE,MAAM,WAAW,WAAW;IAC1B,0DAA0D;IAC1D,IAAI,EAAE,eAAe,CAAA;IACrB,MAAM,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACtD,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;IAClD,IAAI,EAAE,MAAM,CAAA;CACb;AAyBD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CAEtE;AAED;;;;;2CAK2C;AAC3C,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW,CAE9E;AAED;iEACiE;AACjE,wBAAgB,cAAc,CAC5B,KAAK,EAAE,WAAW,EAClB,IAAI,EAAE,kBAAkB,GACvB,CAAC,MAAM,EAAE,MAAM,CAAC,CAelB;AAED;;iEAEiE;AACjE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,EACtB,IAAI,EAAE,kBAAkB,GACvB,MAAM,CA2BR"}

package/dist/src/v2/attribution-primitive/merkle.js

@@ -7,16 +7,16 @@
 // left, authority-infrastructure pair (G, C) on the right, balanced above.
 // All projections share a path length of two.
 // ══════════════════════════════════════════════════════════════════
-import { hashAxisLeaf, hashNode, normalizeAxes } from './canonical.js';
+import { hashAxisLeaf, hashAxisLeafForWrite, hashNode, normalizeAxes } from './canonical.js';
 /** Build the full tree for a set of axes. Callers pass the raw (possibly
  *  unsorted) axes; we normalize before hashing so the caller can't produce
  *  two different canonical representations of the same logical content. */
-export function buildMerkleFrame(rawAxes) {
+function buildMerkleFrameImpl(rawAxes, leaf) {
     const axes = normalizeAxes(rawAxes);
-    const leafD = hashAxisLeaf(axes.D);
-    const leafP = hashAxisLeaf(axes.P);
-    const leafG = hashAxisLeaf(axes.G);
-    const leafC = hashAxisLeaf(axes.C);
+    const leafD = leaf(axes.D);
+    const leafP = leaf(axes.P);
+    const leafG = leaf(axes.G);
+    const leafC = leaf(axes.C);
     const nContent = hashNode(leafD, leafP);
     const nAuthInfra = hashNode(leafG, leafC);
     const root = hashNode(nContent, nAuthInfra);
@@ -27,6 +27,18 @@ export function buildMerkleFrame(rawAxes) {
         root,
     };
 }
+export function buildMerkleFrame(rawAxes) {
+    return buildMerkleFrameImpl(rawAxes, hashAxisLeaf);
+}
+/** Write-boundary twin of buildMerkleFrame().
+ *
+ *  Reaches a canonicalizer only indirectly, through hashAxisLeaf, so a call-site
+ *  census over canonicalizer usage cannot see it. Use when CONSTRUCTING a primitive;
+ *  projection and verification keep calling buildMerkleFrame() so a primitive built
+ *  before this rule still reconstructs. */
+export function buildMerkleFrameForWrite(rawAxes) {
+    return buildMerkleFrameImpl(rawAxes, hashAxisLeafForWrite);
+}
 /** The sibling path for a projection, in the order §2.2 specifies:
  *  [sibling_leaf_within_pair_hex, sibling_internal_node_hex]. */
 export function projectionPath(frame, axis) {

package/dist/src/v2/attribution-primitive/merkle.js.map

@@ -1 +1 @@
-{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/merkle.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,yDAAyD;AACzD,qEAAqE;AACrE,wEAAwE;AACxE,2EAA2E;AAC3E,8CAA8C;AAC9C,qEAAqE;AAErE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAWtE;;2EAE2E;AAC3E,MAAM,UAAU,gBAAgB,CAAC,OAAwB;IACvD,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IAC3C,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE;QAClD,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE;QACxD,IAAI;KACL,CAAA;AACH,CAAC;AAED;iEACiE;AACjE,MAAM,UAAU,cAAc,CAC5B,KAAkB,EAClB,IAAwB;IAExB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,GAAG;YACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QACnF,KAAK,GAAG;YACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QACnF,KAAK,GAAG;YACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QAChF,KAAK,GAAG;YACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QAChF,SAAS,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAA;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;iEAEiE;AACjE,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,IAAsB,EACtB,IAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC3C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,yEAAyE,OAAO,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,GAAG,CACtH,CAAA;IACH,CAAC;IACD,IAAI,QAAgB,CAAA;IACpB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,GAAG;YACN,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA,CAAC,mBAAmB;YAC1D,OAAO,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA,CAAC,4BAA4B;QACzE,KAAK,GAAG;YACN,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA,CAAC,mBAAmB;YAC1D,OAAO,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;QAC5C,KAAK,GAAG;YACN,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA,CAAC,mBAAmB;YAC1D,OAAO,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA,CAAC,4BAA4B;QACzE,KAAK,GAAG;YACN,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA,CAAC,mBAAmB;YAC1D,OAAO,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;QAC5C,SAAS,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAA;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/merkle.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,yDAAyD;AACzD,qEAAqE;AACrE,wEAAwE;AACxE,2EAA2E;AAC3E,8CAA8C;AAC9C,qEAAqE;AAErE,OAAO,EAAE,YAAY,EAAE,oBAAoB,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAW5F;;2EAE2E;AAC3E,SAAS,oBAAoB,CAC3B,OAAwB,EACxB,IAA+B;IAE/B,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC1B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IAC3C,OAAO;QACL,IAAI;QACJ,MAAM,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE;QAClD,KAAK,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE;QACxD,IAAI;KACL,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAwB;IACvD,OAAO,oBAAoB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;AACpD,CAAC;AAED;;;;;2CAK2C;AAC3C,MAAM,UAAU,wBAAwB,CAAC,OAAwB;IAC/D,OAAO,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAA;AAC5D,CAAC;AAED;iEACiE;AACjE,MAAM,UAAU,cAAc,CAC5B,KAAkB,EAClB,IAAwB;IAExB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,GAAG;YACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QACnF,KAAK,GAAG;YACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QACnF,KAAK,GAAG;YACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QAChF,KAAK,GAAG;YACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QAChF,SAAS,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAA;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;AACH,CAAC;AAED;;iEAEiE;AACjE,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,IAAsB,EACtB,IAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IAC3C,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;IACnD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,yEAAyE,OAAO,CAAC,MAAM,KAAK,eAAe,CAAC,MAAM,GAAG,CACtH,CAAA;IACH,CAAC;IACD,IAAI,QAAgB,CAAA;IACpB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,GAAG;YACN,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA,CAAC,mBAAmB;YAC1D,OAAO,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA,CAAC,4BAA4B;QACzE,KAAK,GAAG;YACN,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA,CAAC,mBAAmB;YAC1D,OAAO,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAA;QAC5C,KAAK,GAAG;YACN,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA,CAAC,mBAAmB;YAC1D,OAAO,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA,CAAC,4BAA4B;QACzE,KAAK,GAAG;YACN,QAAQ,GAAG,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA,CAAC,mBAAmB;YAC1D,OAAO,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAA;QAC5C,SAAS,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAA;YAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/src/v2/attribution-primitive/residual.js

@@ -15,7 +15,7 @@
 // gateway-side — not in this module.
 // ══════════════════════════════════════════════════════════════════
 import { createHash } from 'node:crypto';
-import { canonicalize } from '../../core/canonical.js';
+import { canonicalizeForWrite } from '../../core/canonical.js';
 import { toWeightString } from './canonical.js';
 export const DEFAULT_MIN_WEIGHT = 0.001;
 function isResidual(x) {
@@ -40,7 +40,7 @@ function weightNumber(w) {
  *  For the reference implementation we commit to the canonicalized list. */
 function pooledContributorsHash(entries) {
     const sorted = [...entries].sort((a, b) => (a.did < b.did ? -1 : a.did > b.did ? 1 : 0));
-    return createHash('sha256').update(canonicalize(sorted)).digest('hex');
+    return createHash('sha256').update(canonicalizeForWrite(sorted)).digest('hex');
 }
 /** Apply the §4.1 threshold to a list of data-axis contributors. Returns
  *  the retained entries plus a residual bucket (or null). Input entries

package/dist/src/v2/attribution-primitive/residual.js.map

@@ -1 +1 @@
-{"version":3,"file":"residual.js","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/residual.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,6DAA6D;AAC7D,qEAAqE;AACrE,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,8CAA8C;AAC9C,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,qCAAqC;AACrC,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAW/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAEvC,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,aAAa,IAAK,CAAY;QAC9B,OAAQ,CAAoB,CAAC,WAAW,KAAK,QAAQ;QACpD,CAAoB,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAC1D,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,GAAG,CAAC,CAAA;IAC/F,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;;4EAM4E;AAC5E,SAAS,sBAAsB,CAAC,OAAuD;IACrF,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxE,CAAC;AAkBD;;;iBAGiB;AACjB,MAAM,UAAU,iBAAiB,CAC/B,OAAuB,EACvB,IAAI,GAAqB,EAAE;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACtD,MAAM,QAAQ,GAAmB,EAAE,CAAA;IACnC,MAAM,MAAM,GAAsC,EAAE,CAAA;IACpD,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChB,SAAQ;QACV,CAAC;QACD,MAAM,eAAe,GAAG,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;QAC7D,MAAM,CAAC,GAAG,YAAY,CAAC,eAAe,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAG,CAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;YAC9E,WAAW,IAAI,CAAC,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAI,CAAmB,EAAE,mBAAmB,EAAE,eAAe,EAAE,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;IAE5E,MAAM,QAAQ,GAAmB;QAC/B,WAAW,EAAE,YAAY;QACzB,mBAAmB,EAAE,cAAc,CAAC,WAAW,CAAC;QAChD,4BAA4B,EAAE,MAAM,CAAC,MAAM;QAC3C,wBAAwB,EAAE,sBAAsB,CAAC,MAAM,CAAC;KACzD,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAC3D,CAAC;AAED;;sEAEsE;AACtE,MAAM,UAAU,qBAAqB,CACnC,OAA2B,EAC3B,IAAI,GAAqB,EAAE;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACtD,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,MAAM,MAAM,GAAsC,EAAE,CAAA;IACpD,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChB,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,GAAG,CAAsB,CAAA;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpB,SAAQ;QACV,CAAC;QACD,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACpD,MAAM,CAAC,GAAG,YAAY,CAAC,eAAe,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;YAC3F,WAAW,IAAI,CAAC,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;IAE5E,MAAM,QAAQ,GAAmB;QAC/B,WAAW,EAAE,YAAY;QACzB,mBAAmB,EAAE,cAAc,CAAC,WAAW,CAAC;QAChD,4BAA4B,EAAE,MAAM,CAAC,MAAM;QAC3C,wBAAwB,EAAE,sBAAsB,CAAC,MAAM,CAAC;KACzD,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAC3D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,oBAAoB,CAClC,OAA0B,EAC1B,IAAI,GAAqB,EAAE;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACtD,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,MAAM,GAAsC,EAAE,CAAA;IACpD,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChB,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,GAAG,CAAqB,CAAA;QACnC,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QAC3D,MAAM,CAAC,GAAG,YAAY,CAAC,eAAe,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;YACjE,WAAW,IAAI,CAAC,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;IAE5E,MAAM,QAAQ,GAAmB;QAC/B,WAAW,EAAE,YAAY;QACzB,mBAAmB,EAAE,cAAc,CAAC,WAAW,CAAC;QAChD,4BAA4B,EAAE,MAAM,CAAC,MAAM;QAC3C,wBAAwB,EAAE,sBAAsB,CAAC,MAAM,CAAC;KACzD,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAC3D,CAAC"}
+{"version":3,"file":"residual.js","sourceRoot":"","sources":["../../../../src/v2/attribution-primitive/residual.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,6DAA6D;AAC7D,qEAAqE;AACrE,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,8CAA8C;AAC9C,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,qCAAqC;AACrC,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAgB,oBAAoB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAW/C,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAA;AAEvC,SAAS,UAAU,CAAC,CAAU;IAC5B,OAAO,CACL,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,aAAa,IAAK,CAAY;QAC9B,OAAQ,CAAoB,CAAC,WAAW,KAAK,QAAQ;QACpD,CAAoB,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAC1D,CAAA;AACH,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,GAAG,CAAC,CAAA;IAC/F,OAAO,CAAC,CAAA;AACV,CAAC;AAED;;;;;;4EAM4E;AAC5E,SAAS,sBAAsB,CAAC,OAAuD;IACrF,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACxF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAChF,CAAC;AAkBD;;;iBAGiB;AACjB,MAAM,UAAU,iBAAiB,CAC/B,OAAuB,EACvB,IAAI,GAAqB,EAAE;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACtD,MAAM,QAAQ,GAAmB,EAAE,CAAA;IACnC,MAAM,MAAM,GAAsC,EAAE,CAAA;IACpD,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChB,SAAQ;QACV,CAAC;QACD,MAAM,eAAe,GAAG,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAA;QAC7D,MAAM,CAAC,GAAG,YAAY,CAAC,eAAe,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAG,CAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;YAC9E,WAAW,IAAI,CAAC,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAI,CAAmB,EAAE,mBAAmB,EAAE,eAAe,EAAE,CAAC,CAAA;QAClF,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;IAE5E,MAAM,QAAQ,GAAmB;QAC/B,WAAW,EAAE,YAAY;QACzB,mBAAmB,EAAE,cAAc,CAAC,WAAW,CAAC;QAChD,4BAA4B,EAAE,MAAM,CAAC,MAAM;QAC3C,wBAAwB,EAAE,sBAAsB,CAAC,MAAM,CAAC;KACzD,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAC3D,CAAC;AAED;;sEAEsE;AACtE,MAAM,UAAU,qBAAqB,CACnC,OAA2B,EAC3B,IAAI,GAAqB,EAAE;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACtD,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,MAAM,MAAM,GAAsC,EAAE,CAAA;IACpD,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChB,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,GAAG,CAAsB,CAAA;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpB,SAAQ;QACV,CAAC;QACD,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QACpD,MAAM,CAAC,GAAG,YAAY,CAAC,eAAe,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;YAC3F,WAAW,IAAI,CAAC,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;QACtD,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;IAE5E,MAAM,QAAQ,GAAmB;QAC/B,WAAW,EAAE,YAAY;QACzB,mBAAmB,EAAE,cAAc,CAAC,WAAW,CAAC;QAChD,4BAA4B,EAAE,MAAM,CAAC,MAAM;QAC3C,wBAAwB,EAAE,sBAAsB,CAAC,MAAM,CAAC;KACzD,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAC3D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,oBAAoB,CAClC,OAA0B,EAC1B,IAAI,GAAqB,EAAE;IAE3B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAA;IACtD,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,MAAM,GAAsC,EAAE,CAAA;IACpD,IAAI,WAAW,GAAG,CAAC,CAAA;IAEnB,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAChB,SAAQ;QACV,CAAC;QACD,MAAM,KAAK,GAAG,CAAqB,CAAA;QACnC,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QAC3D,MAAM,CAAC,GAAG,YAAY,CAAC,eAAe,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG,SAAS,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAA;YACjE,WAAW,IAAI,CAAC,CAAA;QAClB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;IAE5E,MAAM,QAAQ,GAAmB;QAC/B,WAAW,EAAE,YAAY;QACzB,mBAAmB,EAAE,cAAc,CAAC,WAAW,CAAC;QAChD,4BAA4B,EAAE,MAAM,CAAC,MAAM;QAC3C,wBAAwB,EAAE,sBAAsB,CAAC,MAAM,CAAC;KACzD,CAAA;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;AAC3D,CAAC"}

package/dist/src/v2/attribution-settlement/aggregate.d.ts

@@ -7,6 +7,14 @@ export declare function contributorLeafHashHex(c: SettlementContributor): string
 /** Residual-bucket leaf hash for the per-axis tree. Canonicalizes the
  *  full bucket object. */
 export declare function residualLeafHashHex(r: SettlementResidualBucket): string;
+/** Write-boundary twin of residualLeafHashHex().
+ *
+ *  Emits the same bytes as residualLeafHashHex() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  residualLeafHashHex() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export declare function residualLeafHashHexForWrite(r: SettlementResidualBucket): string;
 /** 6-digit decimal form for settlement weights. Unlike Build A's
  *  `toWeightString`, settlement weights can exceed 1.0 (they accumulate
  *  over many actions); the 6-digit precision is preserved. Rejects

package/dist/src/v2/attribution-settlement/aggregate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"aggregate.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-settlement/aggregate.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAEV,oBAAoB,EASrB,MAAM,mCAAmC,CAAA;AAE1C,OAAO,KAAK,EAEV,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,YAAY,CAAA;AA8BnB;;4DAE4D;AAC5D,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAEvE;AAED;0BAC0B;AAC1B,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,wBAAwB,GAAG,MAAM,CAEvE;AA6GD;;;qCAGqC;AACrC,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAQxD;AA4ED,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAA;IACnB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;8DAE0D;IAC1D,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED;;;qEAGqE;AACrE,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,oBAAoB,EAAE,EAChC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,gBAAgB,GACxB,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CA6ErC"}
+{"version":3,"file":"aggregate.d.ts","sourceRoot":"","sources":["../../../../src/v2/attribution-settlement/aggregate.ts"],"names":[],"mappings":"AAmCA,OAAO,KAAK,EAEV,oBAAoB,EASrB,MAAM,mCAAmC,CAAA;AAE1C,OAAO,KAAK,EAEV,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACzB,MAAM,YAAY,CAAA;AA8BnB;;4DAE4D;AAC5D,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,qBAAqB,GAAG,MAAM,CAEvE;AAED;0BAC0B;AAC1B,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,wBAAwB,GAAG,MAAM,CAEvE;AACD;;;;;;iBAMiB;AACjB,wBAAgB,2BAA2B,CAAC,CAAC,EAAE,wBAAwB,GAAG,MAAM,CAE/E;AA6GD;;;qCAGqC;AACrC,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAQxD;AA4ED,MAAM,WAAW,gBAAgB;IAC/B,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAA;IACnB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;8DAE0D;IAC1D,eAAe,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED;;;qEAGqE;AACrE,wBAAgB,8BAA8B,CAC5C,QAAQ,EAAE,oBAAoB,EAAE,EAChC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,gBAAgB,GACxB,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CA6ErC"}