agent-passport-system 4.3.0 → 4.4.0

package/dist/src/v2/cognitive-attestation/envelope.js

@@ -13,7 +13,7 @@
 //   - feature_activations sorted by (feature_id, activation_statistic)
 // ══════════════════════════════════════════════════════════════════
 import { createHash } from 'node:crypto';
-import { canonicalizeJCS } from '../../core/canonical-jcs.js';
+import { canonicalizeJCS, canonicalizeJCSForWrite } from '../../core/canonical-jcs.js';
 import { sign as edSignHex } from '../../crypto/keys.js';
 const SPEC_VERSION = '1.0';
 function bytesToHex(bytes) {
@@ -93,15 +93,29 @@ export function buildAttestation(input) {
  *
  * Returns UTF-8 bytes. To obtain the canonical string, decode with TextDecoder.
  */
-export function canonicalizeAttestation(att) {
+function canonicalizeAttestationImpl(att, canon) {
     const view = {
         ...att,
         feature_activations: sortFeatureActivations(att.feature_activations),
         signatures: [],
     };
-    const s = canonicalizeJCS(view);
+    const s = canon(view);
     return new TextEncoder().encode(s);
 }
+export function canonicalizeAttestation(att) {
+    return canonicalizeAttestationImpl(att, canonicalizeJCS);
+}
+/** Write-boundary twin of canonicalizeAttestation().
+ *
+ *  Shares one implementation body with canonicalizeAttestation() so the two can never drift apart
+ *  on the field list. Emits the same bytes for every value it accepts; the only
+ *  difference is that an integer-valued number outside the interoperable IEEE 754
+ *  range is refused instead of serialized. Use at signing and new-write boundaries
+ *  ONLY: canonicalizeAttestation() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export function canonicalizeAttestationForWrite(att) {
+    return canonicalizeAttestationImpl(att, canonicalizeJCSForWrite);
+}
 /**
  * Sign an attestation with a 32-byte Ed25519 seed. Appends a new entry to
  * `signatures`. Returns a new object; never mutates input.
@@ -117,7 +131,7 @@ export function signAttestation(att, privateKey, signerDid, signerRole) {
     if (typeof signerDid !== 'string' || signerDid.length === 0) {
         throw new Error('signAttestation: signerDid must be a non-empty string');
     }
-    const canonicalBytes = canonicalizeAttestation(att);
+    const canonicalBytes = canonicalizeAttestationForWrite(att);
     const canonicalString = new TextDecoder().decode(canonicalBytes);
     const privateKeyHex = bytesToHex(privateKey);
     const sigHex = edSignHex(canonicalString, privateKeyHex);

package/dist/src/v2/cognitive-attestation/envelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../../../src/v2/cognitive-attestation/envelope.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,sEAAsE;AACtE,qEAAqE;AACrE,sEAAsE;AACtE,gFAAgF;AAChF,EAAE;AACF,uDAAuD;AACvD,uDAAuD;AACvD,kDAAkD;AAClD,wBAAwB;AACxB,uEAAuE;AACvE,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAQxD,MAAM,YAAY,GAAG,KAAc,CAAA;AAEnC,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACpF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;YAAE,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAA;QACrE,IAAI,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB;YAAE,OAAO,CAAC,CAAC,CAAA;QAC9D,IAAI,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB;YAAE,OAAO,CAAC,CAAA;QAC7D,OAAO,CAAC,CAAA;IACV,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7D,OAAO;QACL,YAAY,EAAE,YAAY;QAC1B,SAAS,EAAE;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,qBAAqB,EAAE;gBACrB,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;aAC7C;SACF;QACD,cAAc,EAAE;YACd,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;QACD,WAAW,EAAE;YACX,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B;QACD,mBAAmB,EAAE,sBAAsB,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACtE,kBAAkB,EAAE;YAClB,GAAG,KAAK,CAAC,kBAAkB;YAC3B,qBAAqB,EAAE,KAAK,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,KAAK,EAAE;SAC9E;QACD,UAAU,EAAE,EAAE;QACd,qBAAqB,EAAE,SAAS;KACjC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAyB;IAC/D,MAAM,IAAI,GAAyB;QACjC,GAAG,GAAG;QACN,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpE,UAAU,EAAE,EAAE;KACf,CAAA;IACD,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAC/B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAyB,EACzB,UAAsB,EACtB,SAAiB,EACjB,UAAsB;IAEtB,IAAI,CAAC,CAAC,UAAU,YAAY,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,cAAc,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAA;IACnD,MAAM,eAAe,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IAChE,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAElC,OAAO;QACL,GAAG,GAAG;QACN,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpE,UAAU,EAAE;YACV,GAAG,GAAG,CAAC,UAAU;YACjB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE;SACtE;KACF,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAyB;IAClE,MAAM,kBAAkB,GAAyB;QAC/C,GAAG,GAAG;QACN,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,CAAC,mBAAmB,CAAC;KACrE,CAAA;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAA;IACrD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACtE,CAAC;AAED,qEAAqE;AACrE,qEAAqE;AACrE,oEAAoE;AACpE,6DAA6D;AAC7D,qEAAqE;AAErE,MAAM,KAAK,GAAG,gBAAgB,CAAA;AAC9B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAC5D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAA;AACxF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;AACjF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;AACjE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC,CAAA;AAC5F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAA;AACxE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC,CAAA;AAEhF,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,IAAc,EAAE,IAAY,EAAE,CAAU;IAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAc,EAAE,IAAY,EAAE,CAAU;IAClE,IAAI,CAAC,KAAK,IAAI;QAAE,OAAM;IACtB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAA;IAE3E,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAE1E,YAAY;IACZ,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAA;IACvB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;IAC3C,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;QACtF,UAAU,CAAC,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAA;QACxE,UAAU,CAAC,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAA;QAChF,IAAI,CAAC,CAAC,kBAAkB,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAA;QACnE,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,qBAAqB,CAAA;QAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAA;QACjE,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,EAAE,CAAC,eAAe,KAAK,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;YACjH,IAAI,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAA;YAC7E,CAAC;YACD,IAAI,OAAO,EAAE,CAAC,gBAAgB,KAAK,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;YACnH,IAAI,OAAO,EAAE,CAAC,kBAAkB,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;QAC3H,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAA;IAC5B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAChD,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAA;QACrG,UAAU,CAAC,MAAM,EAAE,wCAAwC,EAAE,CAAC,CAAC,uBAAuB,CAAC,CAAA;QACvF,kBAAkB,CAAC,MAAM,EAAE,qCAAqC,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAA;QACzF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAK,CAAC,CAAC,WAAsB,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzF,MAAM,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAA;QACrG,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAA;QACxF,CAAC;IACH,CAAC;IAED,cAAc;IACd,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAA;IAC1B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC7C,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,MAAM,EAAE,oCAAoC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAA;QACnF,kBAAkB,CAAC,MAAM,EAAE,8BAA8B,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAA;QAC/E,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,IAAK,EAAE,CAAC,iBAA4B,GAAG,CAAC,EAAE,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAA;QAC7E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAK,EAAE,CAAC,eAA0B,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,IAAK,EAAE,CAAC,WAAsB,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;YACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YACxF,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,IAAK,EAAE,CAAC,UAAqB,GAAG,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,6CAA6C,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,EAAE,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,EAAE,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,uCAAuC,CAAC,CAAA;YAC9E,CAAC;YACD,IAAI,OAAO,EAAE,CAAC,oBAAoB,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACvF,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,4DAA4D,CAAC,CAAA;YACnG,CAAC;YACD,IAAI,OAAO,EAAE,CAAC,gBAAgB,KAAK,QAAQ,IAAK,EAAE,CAAC,gBAA2B,GAAG,CAAC,EAAE,CAAC;gBACnF,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,0CAA0C,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,IAAK,EAAE,CAAC,aAAwB,GAAG,CAAC,EAAE,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,gDAAgD,CAAC,CAAA;YACvF,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,EAAE,GAAG,GAAG,CAAC,kBAAkB,CAAA;IACjC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;SAAM,CAAC;QACN,IAAI,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAK,EAAE,CAAC,KAAgB,GAAG,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;QACxE,CAAC;QACD,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,IAAK,EAAE,CAAC,SAAoB,GAAG,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,OAAO,EAAE,CAAC,mBAAmB,KAAK,QAAQ,IAAK,EAAE,CAAC,mBAA8B,IAAI,CAAC,EAAE,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;QACrF,CAAC;QACD,kBAAkB,CAAC,MAAM,EAAE,2CAA2C,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAA;QAClG,IAAI,OAAO,EAAE,CAAC,kBAAkB,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAA;QACpH,CAAC;QACD,IAAI,OAAO,EAAE,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAA;QACpF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;YAC9B,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,yDAAyD,CAAC,CAAA;gBACrH,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,GAAG,CAAC,CAAA;gBACpG,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC,CAAA;YACvB,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,aAAa;IACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;IACrD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC9B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC9E,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,yCAAyC,CAAC,CAAA;YACvE,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,qEAAqE,CAAC,CAAA;YACnG,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,+CAA+C,CAAC,CAAA;YAC7E,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,wBAAwB;IACxB,IAAI,OAAO,GAAG,CAAC,qBAAqB,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAA;IAC1E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC"}
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../../../src/v2/cognitive-attestation/envelope.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,sEAAsE;AACtE,qEAAqE;AACrE,sEAAsE;AACtE,gFAAgF;AAChF,EAAE;AACF,uDAAuD;AACvD,uDAAuD;AACvD,kDAAkD;AAClD,wBAAwB;AACxB,uEAAuE;AACvE,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAQxD,MAAM,YAAY,GAAG,KAAc,CAAA;AAEnC,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACpF,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC9D,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAChC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;YAAE,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAA;QACrE,IAAI,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB;YAAE,OAAO,CAAC,CAAC,CAAA;QAC9D,IAAI,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,oBAAoB;YAAE,OAAO,CAAC,CAAA;QAC7D,OAAO,CAAC,CAAA;IACV,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC7D,OAAO;QACL,YAAY,EAAE,YAAY;QAC1B,SAAS,EAAE;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,qBAAqB,EAAE;gBACrB,eAAe,EAAE,KAAK,CAAC,eAAe;gBACtC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;gBACxC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;aAC7C;SACF;QACD,cAAc,EAAE;YACd,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;YAChD,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB;QACD,WAAW,EAAE;YACX,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;YACpD,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,WAAW,EAAE,KAAK,CAAC,WAAW;SAC/B;QACD,mBAAmB,EAAE,sBAAsB,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACtE,kBAAkB,EAAE;YAClB,GAAG,KAAK,CAAC,kBAAkB;YAC3B,qBAAqB,EAAE,KAAK,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,KAAK,EAAE;SAC9E;QACD,UAAU,EAAE,EAAE;QACd,qBAAqB,EAAE,SAAS;KACjC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,2BAA2B,CAClC,GAAyB,EACzB,KAA6B;IAE7B,MAAM,IAAI,GAAyB;QACjC,GAAG,GAAG;QACN,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpE,UAAU,EAAE,EAAE;KACf,CAAA;IACD,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAA;IACrB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAyB;IAC/D,OAAO,2BAA2B,CAAC,GAAG,EAAE,eAAe,CAAC,CAAA;AAC1D,CAAC;AAED;;;;;;;iBAOiB;AACjB,MAAM,UAAU,+BAA+B,CAAC,GAAyB;IACvE,OAAO,2BAA2B,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAA;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAyB,EACzB,UAAsB,EACtB,SAAiB,EACjB,UAAsB;IAEtB,IAAI,CAAC,CAAC,UAAU,YAAY,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,cAAc,GAAG,+BAA+B,CAAC,GAAG,CAAC,CAAA;IAC3D,MAAM,eAAe,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IAChE,MAAM,aAAa,GAAG,UAAU,CAAC,UAAU,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,EAAE,aAAa,CAAC,CAAA;IACxD,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAElC,OAAO;QACL,GAAG,GAAG;QACN,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACpE,UAAU,EAAE;YACV,GAAG,GAAG,CAAC,UAAU;YACjB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE;SACtE;KACF,CAAA;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAyB;IAClE,MAAM,kBAAkB,GAAyB;QAC/C,GAAG,GAAG;QACN,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,CAAC,mBAAmB,CAAC;KACrE,CAAA;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,kBAAkB,CAAC,CAAA;IACrD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACtE,CAAC;AAED,qEAAqE;AACrE,qEAAqE;AACrE,oEAAoE;AACpE,6DAA6D;AAC7D,qEAAqE;AAErE,MAAM,KAAK,GAAG,gBAAgB,CAAA;AAC9B,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;AAC5D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,CAAC,CAAC,CAAA;AACxF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAA;AACjF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAA;AACjE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC,CAAA;AAC5F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,CAAA;AACxE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,sBAAsB,CAAC,CAAC,CAAA;AAEhF,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;AACjE,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,IAAc,EAAE,IAAY,EAAE,CAAU;IAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAc,EAAE,IAAY,EAAE,CAAU;IAClE,IAAI,CAAC,KAAK,IAAI;QAAE,OAAM;IACtB,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,GAAY;IACnD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAA;IAE3E,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;IAE1E,YAAY;IACZ,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAA;IACvB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;IAC3C,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;QACtF,UAAU,CAAC,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC,kBAAkB,CAAC,CAAA;QACxE,UAAU,CAAC,MAAM,EAAE,kCAAkC,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAA;QAChF,IAAI,CAAC,CAAC,kBAAkB,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAA;QACnE,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,qBAAqB,CAAA;QAClC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAA;QACjE,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,EAAE,CAAC,eAAe,KAAK,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;YACjH,IAAI,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAA;YAC7E,CAAC;YACD,IAAI,OAAO,EAAE,CAAC,gBAAgB,KAAK,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;YACnH,IAAI,OAAO,EAAE,CAAC,kBAAkB,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;QAC3H,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAA;IAC5B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAChD,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAA;QACrG,UAAU,CAAC,MAAM,EAAE,wCAAwC,EAAE,CAAC,CAAC,uBAAuB,CAAC,CAAA;QACvF,kBAAkB,CAAC,MAAM,EAAE,qCAAqC,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAA;QACzF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAK,CAAC,CAAC,WAAsB,GAAG,CAAC,EAAE,CAAC;YAC3D,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACzF,MAAM,CAAC,IAAI,CAAC,sFAAsF,CAAC,CAAA;QACrG,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAA;QACxF,CAAC;IACH,CAAC;IAED,cAAc;IACd,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAA;IAC1B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC7C,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,MAAM,EAAE,oCAAoC,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAA;QACnF,kBAAkB,CAAC,MAAM,EAAE,8BAA8B,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAA;QAC/E,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,IAAK,EAAE,CAAC,iBAA4B,GAAG,CAAC,EAAE,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAA;QAC7E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,IAAK,EAAE,CAAC,eAA0B,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,IAAK,EAAE,CAAC,WAAsB,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAA;QAC/D,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;YACxC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YACxF,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,IAAK,EAAE,CAAC,UAAqB,GAAG,CAAC,EAAE,CAAC;gBAC3D,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,6CAA6C,CAAC,CAAA;YACpF,CAAC;YACD,IAAI,EAAE,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,EAAE,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,uCAAuC,CAAC,CAAA;YAC9E,CAAC;YACD,IAAI,OAAO,EAAE,CAAC,oBAAoB,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACvF,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,4DAA4D,CAAC,CAAA;YACnG,CAAC;YACD,IAAI,OAAO,EAAE,CAAC,gBAAgB,KAAK,QAAQ,IAAK,EAAE,CAAC,gBAA2B,GAAG,CAAC,EAAE,CAAC;gBACnF,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,0CAA0C,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,IAAK,EAAE,CAAC,aAAwB,GAAG,CAAC,EAAE,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,gDAAgD,CAAC,CAAA;YACvF,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,qBAAqB;IACrB,MAAM,EAAE,GAAG,GAAG,CAAC,kBAAkB,CAAA;IACjC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAA;IACpD,CAAC;SAAM,CAAC;QACN,IAAI,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAK,EAAE,CAAC,KAAgB,GAAG,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAA;QACxE,CAAC;QACD,IAAI,EAAE,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,KAAK,QAAQ,IAAK,EAAE,CAAC,SAAoB,GAAG,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,OAAO,EAAE,CAAC,mBAAmB,KAAK,QAAQ,IAAK,EAAE,CAAC,mBAA8B,IAAI,CAAC,EAAE,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAA;QACrF,CAAC;QACD,kBAAkB,CAAC,MAAM,EAAE,2CAA2C,EAAE,EAAE,CAAC,sBAAsB,CAAC,CAAA;QAClG,IAAI,OAAO,EAAE,CAAC,kBAAkB,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC1F,MAAM,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAA;QACpH,CAAC;QACD,IAAI,OAAO,EAAE,CAAC,eAAe,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;YACnF,MAAM,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAA;QACjG,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,qBAAqB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtF,MAAM,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAA;QACpF,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;YAC9B,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACxC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,yDAAyD,CAAC,CAAA;gBACrH,CAAC;gBACD,IAAI,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,wDAAwD,CAAC,GAAG,CAAC,CAAA;gBACpG,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC,CAAA;YACvB,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,aAAa;IACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;IACrD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YAC9B,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC9E,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,yCAAyC,CAAC,CAAA;YACvE,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;gBACnE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,qEAAqE,CAAC,CAAA;YACnG,CAAC;YACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,+CAA+C,CAAC,CAAA;YAC7E,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,wBAAwB;IACxB,IAAI,OAAO,GAAG,CAAC,qBAAqB,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAA;IAC1E,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;AAC5C,CAAC"}

package/dist/src/v2/cognitive_attestation/envelope.d.ts

@@ -6,6 +6,14 @@ import type { CognitiveAttestationEnvelope, UnsignedCognitiveAttestationEnvelope
  * envelope from a partial shape.
  */
 export declare function canonicalizeForSignature(envelope: UnsignedCognitiveAttestationEnvelope | CognitiveAttestationEnvelope): string;
+/** Write-boundary twin of canonicalizeForSignature().
+ *
+ *  Emits the same bytes as canonicalizeForSignature() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  canonicalizeForSignature() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export declare function canonicalizeForSignatureForWrite(envelope: UnsignedCognitiveAttestationEnvelope | CognitiveAttestationEnvelope): string;
 /**
  * Sign an unsigned envelope with an Ed25519 private key (hex). Derives
  * the public key from the private key and writes it into `agent_id` on

package/dist/src/v2/cognitive_attestation/envelope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../../../src/v2/cognitive_attestation/envelope.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,4BAA4B,EAC5B,oCAAoC,EACrC,MAAM,YAAY,CAAA;AAEnB;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,oCAAoC,GAAG,4BAA4B,GAC5E,MAAM,CAGR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,oCAAoC,EACrF,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,CAAC,GACV,CAAC,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAM/D"}
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../../../src/v2/cognitive_attestation/envelope.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,4BAA4B,EAC5B,oCAAoC,EACrC,MAAM,YAAY,CAAA;AAEnB;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,oCAAoC,GAAG,4BAA4B,GAC5E,MAAM,CAGR;AAED;;;;;;iBAMiB;AACjB,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,oCAAoC,GAAG,4BAA4B,GAC5E,MAAM,CAGR;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,oCAAoC,EACrF,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,CAAC,GACV,CAAC,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAM/D"}

package/dist/src/v2/cognitive_attestation/envelope.js

@@ -9,7 +9,7 @@
 // is the source of truth, the wire object is the canonical bytes plus
 // signature.
 // ══════════════════════════════════════════════════════════════════
-import { canonicalizeJCS } from '../../core/canonical-jcs.js';
+import { canonicalizeJCS, canonicalizeJCSForWrite } from '../../core/canonical-jcs.js';
 import { sign, publicKeyFromPrivate } from '../../crypto/keys.js';
 /**
  * Canonicalize an envelope for signing. The signature field is set to the
@@ -21,6 +21,17 @@ export function canonicalizeForSignature(envelope) {
     const draft = { ...envelope, signature: '' };
     return canonicalizeJCS(draft);
 }
+/** Write-boundary twin of canonicalizeForSignature().
+ *
+ *  Emits the same bytes as canonicalizeForSignature() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  canonicalizeForSignature() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export function canonicalizeForSignatureForWrite(envelope) {
+    const draft = { ...envelope, signature: '' };
+    return canonicalizeJCSForWrite(draft);
+}
 /**
  * Sign an unsigned envelope with an Ed25519 private key (hex). Derives
  * the public key from the private key and writes it into `agent_id` on
@@ -36,7 +47,7 @@ export function canonicalizeForSignature(envelope) {
 export function signCognitiveAttestation(privateKeyHex, unsigned) {
     const agent_id = publicKeyFromPrivate(privateKeyHex);
     const withDerivedKey = { ...unsigned, agent_id };
-    const bytes = canonicalizeForSignature(withDerivedKey);
+    const bytes = canonicalizeForSignatureForWrite(withDerivedKey);
     const signature = sign(bytes, privateKeyHex);
     return { ...withDerivedKey, signature };
 }

package/dist/src/v2/cognitive_attestation/envelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../../../src/v2/cognitive_attestation/envelope.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,6DAA6D;AAC7D,qEAAqE;AACrE,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AACzE,sEAAsE;AACtE,aAAa;AACb,qEAAqE;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAOjE;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA6E;IAE7E,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC5C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,aAAqB,EACrB,QAAW;IAEX,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAA;IACpD,MAAM,cAAc,GAAG,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAA;IAChD,MAAM,KAAK,GAAG,wBAAwB,CAAC,cAAsD,CAAC,CAAA;IAC9F,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IAC5C,OAAO,EAAE,GAAG,cAAc,EAAE,SAAS,EAAmE,CAAA;AAC1G,CAAC"}
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../../../src/v2/cognitive_attestation/envelope.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,6DAA6D;AAC7D,qEAAqE;AACrE,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AACzE,sEAAsE;AACtE,aAAa;AACb,qEAAqE;AAErE,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAOjE;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAA6E;IAE7E,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC5C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;;iBAMiB;AACjB,MAAM,UAAU,gCAAgC,CAC9C,QAA6E;IAE7E,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC5C,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,aAAqB,EACrB,QAAW;IAEX,MAAM,QAAQ,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAA;IACpD,MAAM,cAAc,GAAG,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAA;IAChD,MAAM,KAAK,GAAG,gCAAgC,CAAC,cAAsD,CAAC,CAAA;IACtG,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IAC5C,OAAO,EAAE,GAAG,cAAc,EAAE,SAAS,EAAmE,CAAA;AAC1G,CAAC"}

package/dist/src/v2/context-provenance/cpa.d.ts

@@ -52,6 +52,14 @@ export declare function buildCPA(input: BuildCpaInput): ContextProvenanceAttesta
  * Returns 64-hex lowercase.
  */
 export declare function computeCpaRef(signedCpa: ContextProvenanceAttestation): string;
+/** Write-boundary twin of computeCpaRef().
+ *
+ *  Emits the same bytes as computeCpaRef() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  computeCpaRef() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export declare function computeCpaRefForWrite(signedCpa: ContextProvenanceAttestation): string;
 /**
  * Carry the content address of a signed CPA as a one-field object, ready
  * to spread onto a receipt body BEFORE the receipt is signed. The verifier

package/dist/src/v2/context-provenance/cpa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cpa.d.ts","sourceRoot":"","sources":["../../../../src/v2/context-provenance/cpa.ts"],"names":[],"mappings":"AAmBA,OAAO,EAGL,KAAK,WAAW,EAEhB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EAElC,MAAM,YAAY,CAAA;AAYnB;4CAC4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,WAAW,EAAE,CAAA;IACpB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAA;IACjC;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,OAAO,kCAAkC,EAAE,yBAAyB,CAAA;CAC5F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,4BAA4B,CAgG3E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,4BAA4B,GAAG,MAAM,CAK7E;AAWD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,4BAA4B,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAElF;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,EAClD,OAAO,EAAE,CAAC,EACV,OAAO,EAAE,MAAM,GACd,CAAC,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAEzB"}
+{"version":3,"file":"cpa.d.ts","sourceRoot":"","sources":["../../../../src/v2/context-provenance/cpa.ts"],"names":[],"mappings":"AAmBA,OAAO,EAGL,KAAK,WAAW,EAEhB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EAElC,MAAM,YAAY,CAAA;AAYnB;4CAC4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,cAAc,CAAA;IACpB,KAAK,EAAE,WAAW,EAAE,CAAA;IACpB;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,EAAE,CAAA;IACjC;;;;;;;OAOG;IACH,oBAAoB,CAAC,EAAE,OAAO,kCAAkC,EAAE,yBAAyB,CAAA;CAC5F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,4BAA4B,CAiG3E;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,4BAA4B,GAAG,MAAM,CAK7E;AACD;;;;;;iBAMiB;AACjB,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,4BAA4B,GAAG,MAAM,CAKrF;AAWD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,4BAA4B,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAElF;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,MAAM,EAClD,OAAO,EAAE,CAAC,EACV,OAAO,EAAE,MAAM,GACd,CAAC,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAEzB"}

package/dist/src/v2/context-provenance/cpa.js

@@ -13,10 +13,10 @@
 // computeCpaRef content-addresses the FULLY SIGNED object under SIGN_TAG.
 // ══════════════════════════════════════════════════════════════════
 import { createHash } from 'node:crypto';
-import { canonicalizeJCS } from '../../core/canonical-jcs.js';
+import { canonicalizeJCS, canonicalizeJCSForWrite } from '../../core/canonical-jcs.js';
 import { sign, publicKeyFromPrivate } from '../../crypto/keys.js';
 import { CHANNEL_ORDER, } from './types.js';
-import { SIGN_TAG, buildPartitionRootBytes, buildInclusionProof, buildTopRootBytes, bytesToHex, utf8Bytes, } from './merkle.js';
+import { SIGN_TAG, buildPartitionRootBytesForWrite, buildInclusionProofForWrite, buildTopRootBytes, bytesToHex, utf8Bytes, } from './merkle.js';
 /**
  * Build and sign a CPA from a flat list of context items.
  *
@@ -56,7 +56,7 @@ export function buildCPA(input) {
         if (!leaves || leaves.length === 0)
             continue; // empty partitions omitted
         // partition_root is over ALL leaves, unchanged in either mode.
-        const rootBytes = buildPartitionRootBytes(leaves);
+        const rootBytes = buildPartitionRootBytesForWrite(leaves);
         partitionRootBytes.push(rootBytes);
         const partition_root = bytesToHex(rootBytes);
         const leaf_count = leaves.length;
@@ -73,7 +73,7 @@ export function buildCPA(input) {
             for (const leaf of leaves) {
                 if (disclose.has(leaf.ctx_id)) {
                     disclosedLeaves.push({ ...leaf });
-                    inclusion_proofs.push(buildInclusionProof(leaves, leaf.ctx_id));
+                    inclusion_proofs.push(buildInclusionProofForWrite(leaves, leaf.ctx_id));
                 }
             }
             const disclosedCount = disclosedLeaves.length;
@@ -105,14 +105,15 @@ export function buildCPA(input) {
         mode,
         partitions,
         root,
-        // Conditional spread, not an undefined-valued key: strict JCS renders
-        // an explicitly-set undefined as null, which would change the bytes.
+        // Conditional spread, not an undefined-valued key. An explicitly-set
+        // undefined is rejected by the canonicalizer as of #101, and before that it
+        // was rendered as null; either way it would not be the intended bytes.
         ...(input.producer_attestation !== undefined
             ? { producer_attestation: input.producer_attestation }
             : {}),
         signature: '',
     };
-    const bytes = canonicalizeJCS(unsigned);
+    const bytes = canonicalizeJCSForWrite(unsigned);
     const signature = sign(bytes, privateKey);
     return { ...unsigned, signature };
 }
@@ -127,6 +128,19 @@ export function computeCpaRef(signedCpa) {
     h.update(utf8Bytes(canonicalizeJCS(signedCpa)));
     return h.digest('hex');
 }
+/** Write-boundary twin of computeCpaRef().
+ *
+ *  Emits the same bytes as computeCpaRef() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  computeCpaRef() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export function computeCpaRefForWrite(signedCpa) {
+    const h = createHash('sha256');
+    h.update(utf8Bytes(SIGN_TAG));
+    h.update(utf8Bytes(canonicalizeJCSForWrite(signedCpa)));
+    return h.digest('hex');
+}
 // ══════════════════════════════════════════════════════════════════
 // Mutual binding helpers (lean, module-local; see BINDING.md)
 // ══════════════════════════════════════════════════════════════════
@@ -142,7 +156,7 @@ export function computeCpaRef(signedCpa) {
  * receipt's cpa_ref (the receipt -> CPA binding direction).
  */
 export function carryCpaRef(cpa) {
-    return { cpa_ref: computeCpaRef(cpa) };
+    return { cpa_ref: computeCpaRefForWrite(cpa) };
 }
 /**
  * Pure binder: return a NEW object equal to `receipt` plus a `cpa_ref`

package/dist/src/v2/context-provenance/cpa.js.map

@@ -1 +1 @@
-{"version":3,"file":"cpa.js","sourceRoot":"","sources":["../../../../src/v2/context-provenance/cpa.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,qEAAqE;AACrE,uEAAuE;AACvE,wEAAwE;AACxE,+BAA+B;AAC/B,EAAE;AACF,0EAA0E;AAC1E,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAEjE,OAAO,EACL,aAAa,GAOd,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,QAAQ,EACR,uBAAuB,EACvB,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EACV,SAAS,GAEV,MAAM,aAAa,CAAA;AAmCpB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAC3C,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IAEhF,wEAAwE;IACxE,MAAM,QAAQ,GAAgB,KAAK,CAAC,QAAQ;QAC1C,CAAC,CAAC,KAAK,CAAC,QAAQ,YAAY,GAAG;YAC7B,CAAC,CAAC,KAAK,CAAC,QAAQ;YAChB,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,IAAI,GAAG,EAAU,CAAA;IAErB,iDAAiD;IACjD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAA;IAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;;YACxB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED,6DAA6D;IAC7D,MAAM,UAAU,GAAmB,EAAE,CAAA;IACrC,MAAM,kBAAkB,GAAiB,EAAE,CAAA;IAE3C,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ,CAAC,2BAA2B;QAExE,+DAA+D;QAC/D,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAA;QACjD,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAClC,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAA;QAEhC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAA;QAC/E,CAAC;aAAM,CAAC;YACN,+DAA+D;YAC/D,iEAAiE;YACjE,iEAAiE;YACjE,uBAAuB;YACvB,MAAM,eAAe,GAAkB,EAAE,CAAA;YACzC,MAAM,gBAAgB,GAAqB,EAAE,CAAA;YAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9B,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;oBACjC,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;gBACjE,CAAC;YACH,CAAC;YACD,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAA;YAE7C,MAAM,SAAS,GAAiB;gBAC9B,OAAO;gBACP,cAAc;gBACd,UAAU;gBACV,eAAe,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,GAAG,cAAc,EAAE;aAC7E,CAAA;YACD,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;gBACvB,gEAAgE;gBAChE,6DAA6D;gBAC7D,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvD,CAAA;gBACD,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC7B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvD,CAAA;gBACD,SAAS,CAAC,MAAM,GAAG,eAAe,CAAA;gBAClC,SAAS,CAAC,gBAAgB,GAAG,gBAAgB,CAAA;YAC/C,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAA;IAE9D,MAAM,eAAe,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;IAExD,MAAM,QAAQ,GAAgB;QAC5B,OAAO,EAAE,SAAS;QAClB,UAAU;QACV,YAAY;QACZ,eAAe;QACf,WAAW;QACX,IAAI;QACJ,UAAU;QACV,IAAI;QACJ,sEAAsE;QACtE,qEAAqE;QACrE,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,EAAE;KACd,CAAA;IAED,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAEzC,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAA;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,SAAuC;IACnE,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC/C,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,qEAAqE;AACrE,8DAA8D;AAC9D,qEAAqE;AACrE,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,uDAAuD;AAEvD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAiC;IAC3D,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE,CAAA;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAU,EACV,OAAe;IAEf,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAA;AAChC,CAAC"}
+{"version":3,"file":"cpa.js","sourceRoot":"","sources":["../../../../src/v2/context-provenance/cpa.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,kEAAkE;AAClE,qEAAqE;AACrE,qEAAqE;AACrE,sEAAsE;AACtE,qEAAqE;AACrE,uEAAuE;AACvE,wEAAwE;AACxE,+BAA+B;AAC/B,EAAE;AACF,0EAA0E;AAC1E,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAEjE,OAAO,EACL,aAAa,GAOd,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,QAAQ,EACR,+BAA+B,EAC/B,2BAA2B,EAC3B,iBAAiB,EACjB,UAAU,EACV,SAAS,GAEV,MAAM,aAAa,CAAA;AAmCpB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAoB;IAC3C,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,CAAA;IAEhF,wEAAwE;IACxE,MAAM,QAAQ,GAAgB,KAAK,CAAC,QAAQ;QAC1C,CAAC,CAAC,KAAK,CAAC,QAAQ,YAAY,GAAG;YAC7B,CAAC,CAAC,KAAK,CAAC,QAAQ;YAChB,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3B,CAAC,CAAC,IAAI,GAAG,EAAU,CAAA;IAErB,iDAAiD;IACjD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAiC,CAAA;IAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC1C,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;;YACxB,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1C,CAAC;IAED,6DAA6D;IAC7D,MAAM,UAAU,GAAmB,EAAE,CAAA;IACrC,MAAM,kBAAkB,GAAiB,EAAE,CAAA;IAE3C,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAQ,CAAC,2BAA2B;QAExE,+DAA+D;QAC/D,MAAM,SAAS,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAA;QACzD,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAClC,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAA;QAEhC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAA;QAC/E,CAAC;aAAM,CAAC;YACN,+DAA+D;YAC/D,iEAAiE;YACjE,iEAAiE;YACjE,uBAAuB;YACvB,MAAM,eAAe,GAAkB,EAAE,CAAA;YACzC,MAAM,gBAAgB,GAAqB,EAAE,CAAA;YAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;gBAC1B,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC9B,eAAe,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,CAAA;oBACjC,gBAAgB,CAAC,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;gBACzE,CAAC;YACH,CAAC;YACD,MAAM,cAAc,GAAG,eAAe,CAAC,MAAM,CAAA;YAE7C,MAAM,SAAS,GAAiB;gBAC9B,OAAO;gBACP,cAAc;gBACd,UAAU;gBACV,eAAe,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,GAAG,cAAc,EAAE;aAC7E,CAAA;YACD,IAAI,cAAc,GAAG,CAAC,EAAE,CAAC;gBACvB,gEAAgE;gBAChE,6DAA6D;gBAC7D,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC5B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvD,CAAA;gBACD,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC7B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvD,CAAA;gBACD,SAAS,CAAC,MAAM,GAAG,eAAe,CAAA;gBAClC,SAAS,CAAC,gBAAgB,GAAG,gBAAgB,CAAA;YAC/C,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC5B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAA;IAE9D,MAAM,eAAe,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAA;IAExD,MAAM,QAAQ,GAAgB;QAC5B,OAAO,EAAE,SAAS;QAClB,UAAU;QACV,YAAY;QACZ,eAAe;QACf,WAAW;QACX,IAAI;QACJ,UAAU;QACV,IAAI;QACJ,qEAAqE;QACrE,4EAA4E;QAC5E,uEAAuE;QACvE,GAAG,CAAC,KAAK,CAAC,oBAAoB,KAAK,SAAS;YAC1C,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,CAAC,oBAAoB,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;QACP,SAAS,EAAE,EAAE;KACd,CAAA;IAED,MAAM,KAAK,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAA;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAEzC,OAAO,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAA;AACnC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,SAAuC;IACnE,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAC/C,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AACD;;;;;;iBAMiB;AACjB,MAAM,UAAU,qBAAqB,CAAC,SAAuC;IAC3E,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACvD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxB,CAAC;AAED,qEAAqE;AACrE,8DAA8D;AAC9D,qEAAqE;AACrE,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,uDAAuD;AAEvD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAiC;IAC3D,OAAO,EAAE,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,EAAE,CAAA;AAChD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,OAAU,EACV,OAAe;IAEf,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAA;AAChC,CAAC"}

package/dist/src/v2/context-provenance/merkle.d.ts

@@ -22,17 +22,25 @@ export declare function leafPreimage(leaf: ContextItem): LeafPreimage;
 /** leaf_hash = sha256( utf8(LEAF_TAG) || utf8(canonicalizeJCS(preimage)) )
  *  Returns the raw 32-byte digest. */
 export declare function leafHash(leaf: ContextItem): Uint8Array;
+/** Write-boundary twin of leafHash().
+ *
+ *  Emits the same bytes as leafHash() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  leafHash() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export declare function leafHashForWrite(leaf: ContextItem): Uint8Array;
 /** node_hash = sha256( utf8(NODE_TAG) || left32 || right32 ) over RAW
  *  32-byte digests. Returns the raw 32-byte digest. */
 export declare function nodeHash(left: Uint8Array, right: Uint8Array): Uint8Array;
-/**
- * Build the partition_root (raw 32-byte digest) for one partition's
- * leaves. Leaves are sorted ascending by ctx_id (JS string / code-point
- * order). ctx_id MUST be unique within the partition; a duplicate throws.
- * Single leaf => partition_root = that leaf digest (no node hashing).
- * Throws on an empty leaf list (empty partitions are omitted upstream).
- */
 export declare function buildPartitionRootBytes(leaves: ContextItem[]): Uint8Array;
+/** Write-boundary twin of buildPartitionRootBytes().
+ *
+ *  Reaches a canonicalizer only indirectly, through leafHash, so a call-site census
+ *  over canonicalizer usage cannot see it. Use when BUILDING a CPA; the recompute path
+ *  in verify.ts keeps calling buildPartitionRootBytes() so a CPA signed before this
+ *  rule still verifies. */
+export declare function buildPartitionRootBytesForWrite(leaves: ContextItem[]): Uint8Array;
 /** Hex convenience wrapper around buildPartitionRootBytes. */
 export declare function buildPartitionRoot(leaves: ContextItem[]): string;
 /**
@@ -64,18 +72,13 @@ export interface InclusionProof {
     ctx_id: string;
     path: InclusionStep[];
 }
-/**
- * Build an inclusion proof for the leaf whose ctx_id === ctx_id, against
- * the partition formed by `leaves`. Leaves are sorted by ctx_id exactly as
- * buildPartitionRootBytes does. Walks bottom-up, recording the sibling
- * digest (hex) and side at each level, and recording NO step when the
- * target/ancestor is the promoted odd node at a level (it carries straight
- * up, mirroring `reduce`).
- *
- * Throws on an empty partition, a duplicate ctx_id, or a ctx_id not found
- * (these are producer-side invariants; the verifier never calls this).
- */
 export declare function buildInclusionProof(leaves: ContextItem[], ctx_id: string): InclusionProof;
+/** Write-boundary twin of buildInclusionProof().
+ *
+ *  Reaches a canonicalizer only indirectly, through leafHash, so a call-site census over
+ *  canonicalizer usage cannot see it. Use when BUILDING a CPA; verifyInclusionProof keeps
+ *  calling leafHash() unrestricted so a proof emitted before this rule still checks. */
+export declare function buildInclusionProofForWrite(leaves: ContextItem[], ctx_id: string): InclusionProof;
 /**
  * Verify an inclusion proof: recompute leaf_hash(leaf), fold the path with
  * node_hash respecting each step's side, and compare the hex result to

package/dist/src/v2/context-provenance/merkle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../../../../src/v2/context-provenance/merkle.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAI7D,iCAAiC;AACjC,eAAO,MAAM,QAAQ,oBAAoB,CAAA;AACzC,gCAAgC;AAChC,eAAO,MAAM,QAAQ,oBAAoB,CAAA;AACzC,4DAA4D;AAC5D,eAAO,MAAM,QAAQ,oBAAoB,CAAA;AAczC,iBAAS,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAEnC;AAQD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,cAAc,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,YAAY,CAO5D;AAED;sCACsC;AACtC,wBAAgB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,CAEtD;AAED;uDACuD;AACvD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAExE;AA8BD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAczE;AAED,8DAA8D;AAC9D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAEhE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,4BAA4B,EAAE,UAAU,EAAE,GAAG,UAAU,CAKxF;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,4BAA4B,EAAE,MAAM,EAAE,GAAG,MAAM,CAG3E;AAED,oEAAoE;AACpE,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAID,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEpD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAMlD;AAED,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,CAAA;AAkB5B;;0DAE0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED;4CAC4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,aAAa,EAAE,CAAA;CACtB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CA+CzF;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,cAAc,EACrB,cAAc,EAAE,MAAM,GACrB,OAAO,CAoBT"}
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../../../../src/v2/context-provenance/merkle.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAI7D,iCAAiC;AACjC,eAAO,MAAM,QAAQ,oBAAoB,CAAA;AACzC,gCAAgC;AAChC,eAAO,MAAM,QAAQ,oBAAoB,CAAA;AACzC,4DAA4D;AAC5D,eAAO,MAAM,QAAQ,oBAAoB,CAAA;AAczC,iBAAS,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAEnC;AAQD;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,cAAc,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,gEAAgE;AAChE,wBAAgB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,YAAY,CAO5D;AAED;sCACsC;AACtC,wBAAgB,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,CAEtD;AACD;;;;;;iBAMiB;AACjB,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,CAE9D;AAED;uDACuD;AACvD,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAExE;AAwDD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAEzE;AAED;;;;;2BAK2B;AAC3B,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,UAAU,CAEjF;AAED,8DAA8D;AAC9D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAEhE;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,4BAA4B,EAAE,UAAU,EAAE,GAAG,UAAU,CAKxF;AAED,wDAAwD;AACxD,wBAAgB,YAAY,CAAC,4BAA4B,EAAE,MAAM,EAAE,GAAG,MAAM,CAG3E;AAED,oEAAoE;AACpE,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAID,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEpD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAMlD;AAED,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,CAAA;AAkB5B;;0DAE0D;AAC1D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED;4CAC4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,aAAa,EAAE,CAAA;CACtB;AAkED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAEzF;AAED;;;;wFAIwF;AACxF,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAEjG;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,cAAc,EACrB,cAAc,EAAE,MAAM,GACrB,OAAO,CAoBT"}

package/dist/src/v2/context-provenance/merkle.js

@@ -18,7 +18,7 @@
 // See TREE-SHAPE.md for the frozen-shape narrative.
 // ══════════════════════════════════════════════════════════════════
 import { createHash } from 'node:crypto';
-import { canonicalizeJCS } from '../../core/canonical-jcs.js';
+import { canonicalizeJCS, canonicalizeJCSForWrite } from '../../core/canonical-jcs.js';
 // ── Domain tags (frozen byte values; trailing newline is intentional) ──
 /** Leaf pre-image domain tag. */
 export const LEAF_TAG = 'CPA:v0.1:leaf\n';
@@ -56,6 +56,16 @@ export function leafPreimage(leaf) {
 export function leafHash(leaf) {
     return sha256(utf8(LEAF_TAG), utf8(canonicalizeJCS(leafPreimage(leaf))));
 }
+/** Write-boundary twin of leafHash().
+ *
+ *  Emits the same bytes as leafHash() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  leafHash() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export function leafHashForWrite(leaf) {
+    return sha256(utf8(LEAF_TAG), utf8(canonicalizeJCSForWrite(leafPreimage(leaf))));
+}
 /** node_hash = sha256( utf8(NODE_TAG) || left32 || right32 ) over RAW
  *  32-byte digests. Returns the raw 32-byte digest. */
 export function nodeHash(left, right) {
@@ -95,7 +105,7 @@ function reduce(level) {
  * Single leaf => partition_root = that leaf digest (no node hashing).
  * Throws on an empty leaf list (empty partitions are omitted upstream).
  */
-export function buildPartitionRootBytes(leaves) {
+function buildPartitionRootBytesImpl(leaves, leaf) {
     if (leaves.length === 0) {
         throw new Error('CPA merkle: a present partition must have at least one leaf');
     }
@@ -105,9 +115,21 @@ export function buildPartitionRootBytes(leaves) {
             throw new Error(`CPA merkle: duplicate ctx_id "${sorted[i].ctx_id}" within partition`);
         }
     }
-    const digests = sorted.map(leafHash);
+    const digests = sorted.map(leaf);
     return reduce(digests);
 }
+export function buildPartitionRootBytes(leaves) {
+    return buildPartitionRootBytesImpl(leaves, leafHash);
+}
+/** Write-boundary twin of buildPartitionRootBytes().
+ *
+ *  Reaches a canonicalizer only indirectly, through leafHash, so a call-site census
+ *  over canonicalizer usage cannot see it. Use when BUILDING a CPA; the recompute path
+ *  in verify.ts keeps calling buildPartitionRootBytes() so a CPA signed before this
+ *  rule still verifies. */
+export function buildPartitionRootBytesForWrite(leaves) {
+    return buildPartitionRootBytesImpl(leaves, leafHashForWrite);
+}
 /** Hex convenience wrapper around buildPartitionRootBytes. */
 export function buildPartitionRoot(leaves) {
     return toHex(buildPartitionRootBytes(leaves));
@@ -158,7 +180,7 @@ export { utf8 as utf8Bytes };
  * Throws on an empty partition, a duplicate ctx_id, or a ctx_id not found
  * (these are producer-side invariants; the verifier never calls this).
  */
-export function buildInclusionProof(leaves, ctx_id) {
+function buildInclusionProofImpl(leaves, ctx_id, leaf) {
     if (leaves.length === 0) {
         throw new Error('CPA merkle: cannot build an inclusion proof over an empty partition');
     }
@@ -172,7 +194,7 @@ export function buildInclusionProof(leaves, ctx_id) {
     if (index < 0) {
         throw new Error(`CPA merkle: ctx_id "${ctx_id}" not found in partition`);
     }
-    let current = sorted.map(leafHash);
+    let current = sorted.map(leaf);
     const path = [];
     while (current.length > 1) {
         const isRightChild = index % 2 === 1;
@@ -203,6 +225,17 @@ export function buildInclusionProof(leaves, ctx_id) {
     }
     return { ctx_id, path };
 }
+export function buildInclusionProof(leaves, ctx_id) {
+    return buildInclusionProofImpl(leaves, ctx_id, leafHash);
+}
+/** Write-boundary twin of buildInclusionProof().
+ *
+ *  Reaches a canonicalizer only indirectly, through leafHash, so a call-site census over
+ *  canonicalizer usage cannot see it. Use when BUILDING a CPA; verifyInclusionProof keeps
+ *  calling leafHash() unrestricted so a proof emitted before this rule still checks. */
+export function buildInclusionProofForWrite(leaves, ctx_id) {
+    return buildInclusionProofImpl(leaves, ctx_id, leafHashForWrite);
+}
 /**
  * Verify an inclusion proof: recompute leaf_hash(leaf), fold the path with
  * node_hash respecting each step's side, and compare the hex result to

package/dist/src/v2/context-provenance/merkle.js.map

@@ -1 +1 @@
-{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../../../../src/v2/context-provenance/merkle.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,2DAA2D;AAC3D,qEAAqE;AACrE,yEAAyE;AACzE,wEAAwE;AACxE,sEAAsE;AACtE,yBAAyB;AACzB,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,uEAAuE;AACvE,gEAAgE;AAChE,0BAA0B;AAC1B,EAAE;AACF,oDAAoD;AACpD,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAG7D,0EAA0E;AAE1E,iCAAiC;AACjC,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAA;AACzC,gCAAgC;AAChC,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAA;AACzC,4DAA4D;AAC5D,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAA;AAEzC;yEACyE;AACzE,MAAM,cAAc,GAAG,OAAO,CAAA;AAE9B,wCAAwC;AAExC,SAAS,MAAM,CAAC,GAAG,KAAmB;IACpC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAClC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC7E,CAAC;AAgBD,gEAAgE;AAChE,MAAM,UAAU,YAAY,CAAC,IAAiB;IAC5C,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAA;AACH,CAAC;AAED;sCACsC;AACtC,MAAM,UAAU,QAAQ,CAAC,IAAiB;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAC1E,CAAC;AAED;uDACuD;AACvD,MAAM,UAAU,QAAQ,CAAC,IAAgB,EAAE,KAAiB;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;AAC5C,CAAC;AAED,mDAAmD;AAEnD;;;;;GAKG;AACH,SAAS,MAAM,CAAC,KAAmB;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAiB,EAAE,CAAA;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACjD,CAAC;iBAAM,CAAC;gBACN,gEAAgE;gBAChE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAqB;IAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACvC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvD,CAAA;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAA;QACxF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACpC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;AACxB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,OAAO,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,4BAA0C;IAC1E,IAAI,4BAA4B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,4BAA4B,CAAC,CAAA;AAC7C,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,YAAY,CAAC,4BAAsC;IACjE,MAAM,KAAK,GAAG,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC1D,OAAO,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa;IAC3B,OAAO,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAA;AACrC,CAAC;AAED,sDAAsD;AAEtD,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,CAAA;AAiC5B;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,MAAc;IACvE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACvC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvD,CAAA;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAA;QACxF,CAAC;IACH,CAAC;IACD,IAAI,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;IACtD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,0BAA0B,CAAC,CAAA;IAC1E,CAAC;IAED,IAAI,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAClC,MAAM,IAAI,GAAoB,EAAE,CAAA;IAEhC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,YAAY,EAAE,CAAC;YACjB,iEAAiE;YACjE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACtC,sCAAsC;YACtC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAClE,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,4DAA4D;QAC9D,CAAC;QAED,sEAAsE;QACtE,MAAM,IAAI,GAAiB,EAAE,CAAA;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACjD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC7B,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACzB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAiB,EACjB,KAAqB,EACrB,cAAsB;IAEtB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACnF,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9F,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAE9C,IAAI,GAAe,CAAA;IACnB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAA;QACnG,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAA;QAC/D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpC,GAAG,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,cAAc,CAAA;AACtC,CAAC"}
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../../../../src/v2/context-provenance/merkle.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,2DAA2D;AAC3D,qEAAqE;AACrE,yEAAyE;AACzE,wEAAwE;AACxE,sEAAsE;AACtE,yBAAyB;AACzB,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,uEAAuE;AACvE,gEAAgE;AAChE,0BAA0B;AAC1B,EAAE;AACF,oDAAoD;AACpD,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAGtF,0EAA0E;AAE1E,iCAAiC;AACjC,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAA;AACzC,gCAAgC;AAChC,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAA;AACzC,4DAA4D;AAC5D,MAAM,CAAC,MAAM,QAAQ,GAAG,iBAAiB,CAAA;AAEzC;yEACyE;AACzE,MAAM,cAAc,GAAG,OAAO,CAAA;AAE9B,wCAAwC;AAExC,SAAS,MAAM,CAAC,GAAG,KAAmB;IACpC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;IAClC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;AACnC,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,KAAK,CAAC,KAAiB;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAC7E,CAAC;AAgBD,gEAAgE;AAChE,MAAM,UAAU,YAAY,CAAC,IAAiB;IAC5C,OAAO;QACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;KACpB,CAAA;AACH,CAAC;AAED;sCACsC;AACtC,MAAM,UAAU,QAAQ,CAAC,IAAiB;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAC1E,CAAC;AACD;;;;;;iBAMiB;AACjB,MAAM,UAAU,gBAAgB,CAAC,IAAiB;IAChD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAClF,CAAC;AAED;uDACuD;AACvD,MAAM,UAAU,QAAQ,CAAC,IAAgB,EAAE,KAAiB;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;AAC5C,CAAC;AAED,mDAAmD;AAEnD;;;;;GAKG;AACH,SAAS,MAAM,CAAC,KAAmB;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;IAC7D,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAiB,EAAE,CAAA;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACjD,CAAC;iBAAM,CAAC;gBACN,gEAAgE;gBAChE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;QACD,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAA;AACnB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,2BAA2B,CAClC,MAAqB,EACrB,IAAoC;IAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IAChF,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACvC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvD,CAAA;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAA;QACxF,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAChC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;AACxB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAqB;IAC3D,OAAO,2BAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;AACtD,CAAC;AAED;;;;;2BAK2B;AAC3B,MAAM,UAAU,+BAA+B,CAAC,MAAqB;IACnE,OAAO,2BAA2B,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;AAC9D,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,OAAO,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,4BAA0C;IAC1E,IAAI,4BAA4B,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,4BAA4B,CAAC,CAAA;AAC7C,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,YAAY,CAAC,4BAAsC;IACjE,MAAM,KAAK,GAAG,4BAA4B,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IAC1D,OAAO,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAA;AACxC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa;IAC3B,OAAO,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAA;AACrC,CAAC;AAED,sDAAsD;AAEtD,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,OAAO,EAAE,IAAI,IAAI,SAAS,EAAE,CAAA;AAiC5B;;;;;;;;;;GAUG;AACH,SAAS,uBAAuB,CAC9B,MAAqB,EACrB,MAAc,EACd,IAAoC;IAEpC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAA;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACvC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACvD,CAAA;IACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAA;QACxF,CAAC;IACH,CAAC;IACD,IAAI,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;IACtD,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,0BAA0B,CAAC,CAAA;IAC1E,CAAC;IAED,IAAI,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC9B,MAAM,IAAI,GAAoB,EAAE,CAAA;IAEhC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,KAAK,GAAG,CAAC,KAAK,CAAC,CAAA;QACpC,IAAI,YAAY,EAAE,CAAC;YACjB,iEAAiE;YACjE,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAA;QACjE,CAAC;aAAM,IAAI,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACtC,sCAAsC;YACtC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;QAClE,CAAC;aAAM,CAAC;YACN,4DAA4D;YAC5D,4DAA4D;QAC9D,CAAC;QAED,sEAAsE;QACtE,MAAM,IAAI,GAAiB,EAAE,CAAA;QAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;YACjD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;YACvB,CAAC;QACH,CAAC;QACD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;QAC7B,OAAO,GAAG,IAAI,CAAA;IAChB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAqB,EAAE,MAAc;IACvE,OAAO,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;AAC1D,CAAC;AAED;;;;wFAIwF;AACxF,MAAM,UAAU,2BAA2B,CAAC,MAAqB,EAAE,MAAc;IAC/E,OAAO,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAA;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAAiB,EACjB,KAAqB,EACrB,cAAsB;IAEtB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IACnF,IAAI,OAAO,cAAc,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9F,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IAE9C,IAAI,GAAe,CAAA;IACnB,IAAI,CAAC;QACH,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAA;QACnG,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAA;QAC/D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACpC,GAAG,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtE,CAAC;IAED,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,cAAc,CAAA;AACtC,CAAC"}

package/dist/src/v2/context-provenance/types.d.ts

@@ -95,7 +95,7 @@ export interface CpaPartition {
  *     to an external producer attestation; absent on a CPA that does not
  *     carry one, and the absent form is byte-identical to the pre-slot
  *     shape (the builder adds the key by conditional spread, never as an
- *     explicitly-undefined key, which strict JCS would render as null).
+ *     explicitly-undefined key, which the canonicalizer rejects as of #101).
  *   - signature: 128-hex Ed25519; '' in the unsigned/canonical shape.
  */
 export interface ContextProvenanceAttestation {

package/dist/src/v2/cross_issuer_attestation/envelope.d.ts

@@ -6,6 +6,14 @@ import type { CrossIssuerAttestationEnvelope, UnsignedCrossIssuerAttestationEnve
  * having to reconstruct the envelope from a partial shape.
  */
 export declare function canonicalizeForSignature(envelope: UnsignedCrossIssuerAttestationEnvelope | CrossIssuerAttestationEnvelope): string;
+/** Write-boundary twin of canonicalizeForSignature().
+ *
+ *  Emits the same bytes as canonicalizeForSignature() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  canonicalizeForSignature() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export declare function canonicalizeForSignatureForWrite(envelope: UnsignedCrossIssuerAttestationEnvelope | CrossIssuerAttestationEnvelope): string;
 /**
  * Sign an unsigned envelope with the composer's Ed25519 private key
  * (hex). Derives the public key from the private key and writes it

package/dist/src/v2/cross_issuer_attestation/envelope.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../../../src/v2/cross_issuer_attestation/envelope.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,8BAA8B,EAC9B,sCAAsC,EACvC,MAAM,YAAY,CAAA;AAEnB;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,sCAAsC,GAAG,8BAA8B,GAChF,MAAM,CAGR;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,sCAAsC,EACzF,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,CAAC,GACV,CAAC,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAMlE"}
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../../../src/v2/cross_issuer_attestation/envelope.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,8BAA8B,EAC9B,sCAAsC,EACvC,MAAM,YAAY,CAAA;AAEnB;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,sCAAsC,GAAG,8BAA8B,GAChF,MAAM,CAGR;AAED;;;;;;iBAMiB;AACjB,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,sCAAsC,GAAG,8BAA8B,GAChF,MAAM,CAGR;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,SAAS,sCAAsC,EACzF,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,CAAC,GACV,CAAC,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAMlE"}

package/dist/src/v2/cross_issuer_attestation/envelope.js

@@ -9,7 +9,7 @@
 // canonical bytes are the source of truth, the wire object is those
 // bytes plus the composer signature.
 // ══════════════════════════════════════════════════════════════════
-import { canonicalizeJCS } from '../../core/canonical-jcs.js';
+import { canonicalizeJCS, canonicalizeJCSForWrite } from '../../core/canonical-jcs.js';
 import { sign, publicKeyFromPrivate } from '../../crypto/keys.js';
 /**
  * Canonicalize an envelope for signing. The signature field is set to
@@ -21,6 +21,17 @@ export function canonicalizeForSignature(envelope) {
     const draft = { ...envelope, signature: '' };
     return canonicalizeJCS(draft);
 }
+/** Write-boundary twin of canonicalizeForSignature().
+ *
+ *  Emits the same bytes as canonicalizeForSignature() for every value it accepts. The only difference
+ *  is that an integer-valued number outside the interoperable IEEE 754 range is
+ *  refused instead of serialized. Use at signing and new-write boundaries ONLY:
+ *  canonicalizeForSignature() stays unrestricted so an artifact signed before this rule keeps
+ *  verifying. */
+export function canonicalizeForSignatureForWrite(envelope) {
+    const draft = { ...envelope, signature: '' };
+    return canonicalizeJCSForWrite(draft);
+}
 /**
  * Sign an unsigned envelope with the composer's Ed25519 private key
  * (hex). Derives the public key from the private key and writes it
@@ -33,7 +44,7 @@ export function canonicalizeForSignature(envelope) {
 export function signCrossIssuerAttestation(privateKeyHex, unsigned) {
     const composer_id = publicKeyFromPrivate(privateKeyHex);
     const withDerivedKey = { ...unsigned, composer_id };
-    const bytes = canonicalizeForSignature(withDerivedKey);
+    const bytes = canonicalizeForSignatureForWrite(withDerivedKey);
     const signature = sign(bytes, privateKeyHex);
     return { ...withDerivedKey, signature };
 }

package/dist/src/v2/cross_issuer_attestation/envelope.js.map

@@ -1 +1 @@
-{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../../../src/v2/cross_issuer_attestation/envelope.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,gEAAgE;AAChE,qEAAqE;AACrE,kEAAkE;AAClE,oEAAoE;AACpE,qEAAqE;AACrE,oEAAoE;AACpE,qCAAqC;AACrC,qEAAqE;AAErE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAA;AAC7D,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAOjE;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAiF;IAEjF,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC5C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,aAAqB,EACrB,QAAW;IAEX,MAAM,WAAW,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAA;IACvD,MAAM,cAAc,GAAG,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,CAAA;IACnD,MAAM,KAAK,GAAG,wBAAwB,CAAC,cAAwD,CAAC,CAAA;IAChG,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IAC5C,OAAO,EAAE,GAAG,cAAc,EAAE,SAAS,EAAsE,CAAA;AAC7G,CAAC"}
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../../../src/v2/cross_issuer_attestation/envelope.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,sCAAsC;AACtC,qEAAqE;AACrE,gEAAgE;AAChE,qEAAqE;AACrE,kEAAkE;AAClE,oEAAoE;AACpE,qEAAqE;AACrE,oEAAoE;AACpE,qCAAqC;AACrC,qEAAqE;AAErE,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AACtF,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAA;AAOjE;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,QAAiF;IAEjF,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC5C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;AAC/B,CAAC;AAED;;;;;;iBAMiB;AACjB,MAAM,UAAU,gCAAgC,CAC9C,QAAiF;IAEjF,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;IAC5C,OAAO,uBAAuB,CAAC,KAAK,CAAC,CAAA;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,0BAA0B,CACxC,aAAqB,EACrB,QAAW;IAEX,MAAM,WAAW,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAA;IACvD,MAAM,cAAc,GAAG,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,CAAA;IACnD,MAAM,KAAK,GAAG,gCAAgC,CAAC,cAAwD,CAAC,CAAA;IACxG,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,aAAa,CAAC,CAAA;IAC5C,OAAO,EAAE,GAAG,cAAc,EAAE,SAAS,EAAsE,CAAA;AAC7G,CAAC"}

package/dist/src/v2/hash-pointer/profile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../../../src/v2/hash-pointer/profile.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EACV,gCAAgC,EAGhC,sBAAsB,EACtB,2BAA2B,EAE5B,MAAM,YAAY,CAAA;AAkBnB;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gCAAgC,GACtC,sBAAsB,CA8ExB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,sBAAsB,EAC/B,IAAI,CAAC,EAAE;IACL,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC,GACA,2BAA2B,CA6E7B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAE7E"}
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../../../../src/v2/hash-pointer/profile.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EACV,gCAAgC,EAGhC,sBAAsB,EACtB,2BAA2B,EAE5B,MAAM,YAAY,CAAA;AA2BnB;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gCAAgC,GACtC,sBAAsB,CA8ExB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,sBAAsB,EAC/B,IAAI,CAAC,EAAE;IACL,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACnC,mEAAmE;IACnE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC,GACA,2BAA2B,CA6E7B;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,MAAM,CAE7E"}