burnledger 0.9.0 → 0.10.0

package/dist/cjs/run-record.d.ts

@@ -0,0 +1,130 @@
+/** The run record (docs/run-record.md, ADR-031 option C).
+ *
+ * A port of core/run_record.go, verdict for verdict. A run is one bulk
+ * deletion cycle; the run record is the enclave's signed word on it — what the
+ * customer declared the input list to be, what the enclave actually issued
+ * under the run, and when it opened and closed. Held beside every record of
+ * the run (an audit pack filtered by run_id, every page of it), it lets a
+ * reader establish that the records are exactly what was issued, how many
+ * listed subjects have no record, and whether the run closed in time.
+ *
+ * What it does not establish is that the list was the regulator's list: the
+ * enclave never sees the list, and list_digest and list_count are the
+ * customer's assertion, signed and dated here rather than implicit.
+ */
+import type { CryptoOps } from "./crypto.js";
+import { type PublicKeyInfo } from "./verify.js";
+/** The domain-separation tag of a run record. */
+export declare const PAYLOAD_TYPE_RUN_RECORD = "burnledger.run_record.v1";
+/** What a run was: a regulator's bulk cycle or a customer's own sweep. Carried
+ * signed, so an auditor reads what the customer claimed the run to be rather
+ * than inferring it from a date. */
+export type RunKind = "drop_cycle" | "bulk_erasure";
+export declare const NIL_UUID = "00000000-0000-0000-0000-000000000000";
+/** Mirrors core.RunRecord, as GET /v1/runs/{id} serves it under `record` and
+ * an audit pack carries it in its header. UUIDs are canonical lowercase,
+ * timestamps whole-second UTC, exactly as the payload signs them. */
+export interface RunRecord {
+    runId: string;
+    runKind: string;
+    /** Signed, so a run record cannot be presented as another team's. */
+    teamId: string;
+    /** The customer's assertion about the input list: SHA-256 over its canonical
+     * form (one normalized identifier per line, sorted, LF-terminated), and how
+     * many entries it had. 32 bytes. */
+    listDigest: Uint8Array;
+    listCount: number;
+    /** Merkle root and count over the DISTINCT subject hashes the enclave issued
+     * records for under this run, leaves sorted. Computed by the enclave, never
+     * asserted. 32 bytes. */
+    subjectsRoot: Uint8Array;
+    subjectsCount: number;
+    /** Merkle root and count over the certificate ids issued under this run,
+     * leaves sorted. A run with no records has zero roots and zero counts. */
+    recordsRoot: Uint8Array;
+    recordsCount: number;
+    /** The systems every record in the run covered. */
+    systemIds: string[];
+    openedAt: string;
+    closedAt: string;
+    /** The customer-declared deadline, so "on time" is checkable against closedAt. */
+    notAfter: string;
+    issuer: {
+        keyId: string;
+        enclavePcr0: string;
+    };
+    /** 64 bytes. */
+    signature: Uint8Array;
+    transparencyStatus: string;
+    /** The record's own inclusion proof once it is in the log, in the shape a
+     * certificate's takes. Outside the signature, as on a certificate. */
+    transparency?: Record<string, unknown>;
+}
+/** What a verifier learns about a run record's signature (core.RunRecordResult). */
+export type RunRecordResult = "VALID" | "MALFORMED_RUN_RECORD" | "UNKNOWN_KEY" | "KEY_UNUSABLE" | "INVALID_RUN_RECORD_SIGNATURE";
+/** Mirrors core.RunCheck: what a reader learns by holding a run record beside
+ * the records issued under it. */
+export interface RunCheck {
+    /** The certificate ids reproduce records_root and records_count. */
+    recordsMatch: boolean;
+    /** The subject hashes reproduce subjects_root and subjects_count. */
+    subjectsMatch: boolean;
+    /** listCount minus subjectsCount: how many listed subjects have no record in
+     * the run. Zero is the number an auditor wants. */
+    listShortfall: number;
+    /** closedAt <= notAfter. */
+    closedInTime: boolean;
+    /** Records whose own signed run_id (format 10.0 and later) names a different
+     * run, or no run, while the pack presents them as this run's. A record
+     * without the field (older formats) is neither counted nor refused: it says
+     * nothing about its run, and the roots are what bind it. */
+    mislabelled: number;
+}
+/** What checkRunAgainstRecords needs from one record of the run. */
+export interface RunCheckRecord {
+    certificateId: string;
+    /** subject.identifier_hash, 32 bytes. */
+    subjectHash: Uint8Array;
+    /** The record's own signed run_id, when it carries one. */
+    runId?: string;
+    formatVersion?: string;
+}
+/** Read a run record as served, refusing what Go's ParseRunRecordDocument and
+ * the unmarshal behind it refuse. Throws a VerificationError naming the field. */
+export declare function parseRunRecordDocument(doc: unknown): RunRecord;
+/** The canonical signing payload. Every signed field is present; the system
+ * ids are sorted so two records over the same set sign the same bytes. Mirrors
+ * core.BuildRunRecordPayload, including its refusal of an unknown run_kind. */
+export declare function buildRunRecordPayload(r: RunRecord): Uint8Array;
+/** Checks the record's signature against the reader's keys, in the order every
+ * verifier uses: the shape, the key's authority at the record's own close
+ * instant, then the signature. Mirrors core.VerifyRunRecord. */
+export declare function verifyRunRecord(crypto: CryptoOps, r: RunRecord, keys: Map<string, PublicKeyInfo>): Promise<RunRecordResult>;
+/** What the run record's log leaf commits to: the SHA-256 of its canonical
+ * payload. A certificate leaf hashes the whole document less its transparency
+ * block; a run record's payload already is the whole signed document. */
+export declare function runRecordHash(crypto: CryptoOps, r: RunRecord): Promise<Uint8Array>;
+/** Checks the record's own transparency proof the way a certificate's is
+ * checked, under core.TransparencyResult's names: NOT_INCLUDED when it carries
+ * none, INVALID_INCLUSION_PROOF for a leaf that is not a RUN_RECORD leaf,
+ * UNREADABLE_DOCUMENT where the leaf cannot be built. Mirrors
+ * core.VerifyRunRecordInclusion. */
+export declare function verifyRunRecordInclusion(crypto: CryptoOps, r: RunRecord, key: PublicKeyInfo): Promise<string>;
+/** What a run record commits to, from what was issued under it. Subjects are
+ * de-duplicated — a subject certified twice in one run is one subject — and
+ * both leaf sets are sorted, so the roots do not depend on issuance order and a
+ * verifier can reproduce them from a pack in any order. A subject leaf is its
+ * 32-byte hash and a record leaf the certificate id's 16 bytes, both through
+ * the RFC 6962 leaf hash. Mirrors core.RunRoots. */
+export declare function runRoots(crypto: CryptoOps, subjects: Uint8Array[], certificateIds: string[]): Promise<{
+    subjectsRoot: Uint8Array;
+    subjectsCount: number;
+    recordsRoot: Uint8Array;
+    recordsCount: number;
+}>;
+/** Reproduces the run record's roots from the records a reader holds and
+ * compares them. The reader must hold every record of the run — a complete
+ * chain of pack pages filtered by the run — or the roots cannot match, which
+ * is the honest answer for a partial set. Mirrors core.CheckRunAgainstRecords. */
+export declare function checkRunAgainstRecords(crypto: CryptoOps, r: RunRecord, records: RunCheckRecord[]): Promise<RunCheck>;
+//# sourceMappingURL=run-record.d.ts.map

package/dist/cjs/run-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-record.d.ts","sourceRoot":"","sources":["../../src/run-record.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAgBL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAErB,iDAAiD;AACjD,eAAO,MAAM,uBAAuB,6BAA6B,CAAC;AAElE;;oCAEoC;AACpC,MAAM,MAAM,OAAO,GAAG,YAAY,GAAG,cAAc,CAAC;AAIpD,eAAO,MAAM,QAAQ,yCAAyC,CAAC;AAE/D;;qEAEqE;AACrE,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAC;IACf;;wCAEoC;IACpC,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB;;6BAEyB;IACzB,YAAY,EAAE,UAAU,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB;8EAC0E;IAC1E,WAAW,EAAE,UAAU,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,gBAAgB;IAChB,SAAS,EAAE,UAAU,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B;0EACsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,oFAAoF;AACpF,MAAM,MAAM,eAAe,GACvB,OAAO,GACP,sBAAsB,GACtB,aAAa,GACb,cAAc,GACd,8BAA8B,CAAC;AAEnC;kCACkC;AAClC,MAAM,WAAW,QAAQ;IACvB,oEAAoE;IACpE,YAAY,EAAE,OAAO,CAAC;IACtB,qEAAqE;IACrE,aAAa,EAAE,OAAO,CAAC;IACvB;uDACmD;IACnD,aAAa,EAAE,MAAM,CAAC;IACtB,4BAA4B;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB;;;gEAG4D;IAC5D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,WAAW,EAAE,UAAU,CAAC;IACxB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AA6CD;kFACkF;AAClF,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAwC9D;AAED;;+EAE+E;AAC/E,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,SAAS,GAAG,UAAU,CAsB9D;AAMD;;gEAEgE;AAChE,wBAAsB,eAAe,CACnC,MAAM,EAAE,SAAS,EACjB,CAAC,EAAE,SAAS,EACZ,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GAC/B,OAAO,CAAC,eAAe,CAAC,CAW1B;AAED;;yEAEyE;AACzE,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAElF;AAED;;;;oCAIoC;AACpC,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,SAAS,EACjB,CAAC,EAAE,SAAS,EACZ,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAiBD;;;;;oDAKoD;AACpD,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,UAAU,EAAE,EACtB,cAAc,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC;IAAE,YAAY,EAAE,UAAU,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,UAAU,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC,CAiB7G;AAMD;;;kFAGkF;AAClF,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,SAAS,EACjB,CAAC,EAAE,SAAS,EACZ,OAAO,EAAE,cAAc,EAAE,GACxB,OAAO,CAAC,QAAQ,CAAC,CAgBnB"}

package/dist/cjs/run-record.js

@@ -0,0 +1,272 @@
+"use strict";
+/** The run record (docs/run-record.md, ADR-031 option C).
+ *
+ * A port of core/run_record.go, verdict for verdict. A run is one bulk
+ * deletion cycle; the run record is the enclave's signed word on it — what the
+ * customer declared the input list to be, what the enclave actually issued
+ * under the run, and when it opened and closed. Held beside every record of
+ * the run (an audit pack filtered by run_id, every page of it), it lets a
+ * reader establish that the records are exactly what was issued, how many
+ * listed subjects have no record, and whether the run closed in time.
+ *
+ * What it does not establish is that the list was the regulator's list: the
+ * enclave never sees the list, and list_digest and list_count are the
+ * customer's assertion, signed and dated here rather than implicit.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NIL_UUID = exports.PAYLOAD_TYPE_RUN_RECORD = void 0;
+exports.parseRunRecordDocument = parseRunRecordDocument;
+exports.buildRunRecordPayload = buildRunRecordPayload;
+exports.verifyRunRecord = verifyRunRecord;
+exports.runRecordHash = runRecordHash;
+exports.verifyRunRecordInclusion = verifyRunRecordInclusion;
+exports.runRoots = runRoots;
+exports.checkRunAgainstRecords = checkRunAgainstRecords;
+const errors_js_1 = require("./errors.js");
+const verify_js_1 = require("./verify.js");
+/** The domain-separation tag of a run record. */
+exports.PAYLOAD_TYPE_RUN_RECORD = "burnledger.run_record.v1";
+const RUN_KINDS = new Set(["drop_cycle", "bulk_erasure"]);
+exports.NIL_UUID = "00000000-0000-0000-0000-000000000000";
+function isObject(v) {
+    return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+/** A UUID field as Go's uuid.UUID unmarshals it: null or absent is the nil
+ * UUID (encoding/json leaves the zero value), a string in any form uuid.Parse
+ * reads is canonical, anything else fails the document. */
+function uuidOrNil(v, path) {
+    if (v === null || v === undefined)
+        return exports.NIL_UUID;
+    if (typeof v !== "string")
+        throw new errors_js_1.VerificationError(`${path} is not a string`);
+    try {
+        return (0, verify_js_1.formatUuid)((0, verify_js_1.parseUuid)(v));
+    }
+    catch (e) {
+        if (e instanceof TypeError)
+            throw new errors_js_1.VerificationError(`${path} is not a UUID: ${JSON.stringify(v)}`);
+        throw e;
+    }
+}
+/** A fixed byte array as Go's [N]byte unmarshals it: null or absent is all
+ * zero, anything else must be exactly N bytes. */
+function bytesOrZero(v, path, length) {
+    if (v === null || v === undefined)
+        return new Uint8Array(length);
+    return (0, verify_js_1.decodeFixed)(v, path, length);
+}
+/** A count as Go's uint64 unmarshals it: null or absent is 0, and a fraction
+ * or a negative fails the document. */
+function countOrZero(v, path) {
+    if (v === null || v === undefined)
+        return 0;
+    if (typeof v !== "number" || !Number.isSafeInteger(v) || v < 0) {
+        throw new errors_js_1.VerificationError(`${path} is not a non-negative integer: ${JSON.stringify(v)}`);
+    }
+    return v;
+}
+function stringOrEmpty(v, path) {
+    if (v === null || v === undefined)
+        return "";
+    if (typeof v !== "string")
+        throw new errors_js_1.VerificationError(`${path} is not a string`);
+    return v;
+}
+/** Read a run record as served, refusing what Go's ParseRunRecordDocument and
+ * the unmarshal behind it refuse. Throws a VerificationError naming the field. */
+function parseRunRecordDocument(doc) {
+    if (!isObject(doc))
+        throw new errors_js_1.VerificationError("run record: not a JSON object");
+    const rawIssuer = doc.issuer;
+    if (rawIssuer !== null && rawIssuer !== undefined && !isObject(rawIssuer)) {
+        throw new errors_js_1.VerificationError("issuer is not an object");
+    }
+    const issuer = isObject(rawIssuer) ? rawIssuer : {};
+    const rawSystems = doc.system_ids;
+    let systemIds = [];
+    if (rawSystems !== null && rawSystems !== undefined) {
+        if (!Array.isArray(rawSystems))
+            throw new errors_js_1.VerificationError("system_ids is not an array");
+        systemIds = rawSystems.map((v, i) => uuidOrNil(v, `system_ids[${i}]`));
+    }
+    const record = {
+        runId: uuidOrNil(doc.run_id, "run_id"),
+        runKind: stringOrEmpty(doc.run_kind, "run_kind"),
+        teamId: uuidOrNil(doc.team_id, "team_id"),
+        listDigest: bytesOrZero(doc.list_digest, "list_digest", 32),
+        listCount: countOrZero(doc.list_count, "list_count"),
+        subjectsRoot: bytesOrZero(doc.subjects_root, "subjects_root", 32),
+        subjectsCount: countOrZero(doc.subjects_count, "subjects_count"),
+        recordsRoot: bytesOrZero(doc.records_root, "records_root", 32),
+        recordsCount: countOrZero(doc.records_count, "records_count"),
+        systemIds,
+        openedAt: (0, verify_js_1.formatTimestamp)(doc.opened_at, "opened_at"),
+        closedAt: (0, verify_js_1.formatTimestamp)(doc.closed_at, "closed_at"),
+        notAfter: (0, verify_js_1.formatTimestamp)(doc.not_after, "not_after"),
+        issuer: {
+            keyId: stringOrEmpty(issuer.key_id, "issuer.key_id"),
+            enclavePcr0: stringOrEmpty(issuer.enclave_pcr0, "issuer.enclave_pcr0"),
+        },
+        signature: bytesOrZero(doc.signature, "signature", 64),
+        transparencyStatus: stringOrEmpty(doc.transparency_status, "transparency_status"),
+    };
+    const transparency = doc.transparency;
+    if (transparency !== null && transparency !== undefined) {
+        if (!isObject(transparency))
+            throw new errors_js_1.VerificationError("transparency is not an object");
+        record.transparency = transparency;
+    }
+    return record;
+}
+/** The canonical signing payload. Every signed field is present; the system
+ * ids are sorted so two records over the same set sign the same bytes. Mirrors
+ * core.BuildRunRecordPayload, including its refusal of an unknown run_kind. */
+function buildRunRecordPayload(r) {
+    if (!RUN_KINDS.has(r.runKind)) {
+        throw new errors_js_1.VerificationError(`run record: unknown run_kind ${r.runKind}`);
+    }
+    return (0, verify_js_1.canonicalJson)({
+        payload_type: exports.PAYLOAD_TYPE_RUN_RECORD,
+        closed_at: (0, verify_js_1.formatTimestamp)(r.closedAt, "closed_at"),
+        enclave_pcr0: r.issuer.enclavePcr0,
+        key_id: r.issuer.keyId,
+        list_count: r.listCount,
+        list_digest: (0, verify_js_1.bytesToHex)(r.listDigest),
+        not_after: (0, verify_js_1.formatTimestamp)(r.notAfter, "not_after"),
+        opened_at: (0, verify_js_1.formatTimestamp)(r.openedAt, "opened_at"),
+        records_count: r.recordsCount,
+        records_root: (0, verify_js_1.bytesToHex)(r.recordsRoot),
+        run_id: r.runId,
+        run_kind: r.runKind,
+        subjects_count: r.subjectsCount,
+        subjects_root: (0, verify_js_1.bytesToHex)(r.subjectsRoot),
+        system_ids: [...r.systemIds].sort(),
+        team_id: r.teamId,
+    });
+}
+function epochSeconds(rfc3339, field) {
+    return Math.floor(Date.parse((0, verify_js_1.formatTimestamp)(rfc3339, field)) / 1000);
+}
+/** Checks the record's signature against the reader's keys, in the order every
+ * verifier uses: the shape, the key's authority at the record's own close
+ * instant, then the signature. Mirrors core.VerifyRunRecord. */
+async function verifyRunRecord(crypto, r, keys) {
+    const closedAt = epochSeconds(r.closedAt, "closed_at");
+    if (!RUN_KINDS.has(r.runKind) || r.runId === exports.NIL_UUID || closedAt < epochSeconds(r.openedAt, "opened_at")) {
+        return "MALFORMED_RUN_RECORD";
+    }
+    const key = keys.get(r.issuer.keyId);
+    if (key === undefined)
+        return "UNKNOWN_KEY";
+    if (!(0, verify_js_1.keyIsUsable)((0, verify_js_1.evaluateKey)(key, closedAt)))
+        return "KEY_UNUSABLE";
+    const payload = buildRunRecordPayload(r);
+    if (!(await crypto.ed25519Verify(key.keyBytes, payload, r.signature)))
+        return "INVALID_RUN_RECORD_SIGNATURE";
+    return "VALID";
+}
+/** What the run record's log leaf commits to: the SHA-256 of its canonical
+ * payload. A certificate leaf hashes the whole document less its transparency
+ * block; a run record's payload already is the whole signed document. */
+function runRecordHash(crypto, r) {
+    return crypto.sha256(buildRunRecordPayload(r));
+}
+/** Checks the record's own transparency proof the way a certificate's is
+ * checked, under core.TransparencyResult's names: NOT_INCLUDED when it carries
+ * none, INVALID_INCLUSION_PROOF for a leaf that is not a RUN_RECORD leaf,
+ * UNREADABLE_DOCUMENT where the leaf cannot be built. Mirrors
+ * core.VerifyRunRecordInclusion. */
+async function verifyRunRecordInclusion(crypto, r, key) {
+    const transparency = r.transparency;
+    if (transparency === undefined)
+        return "NOT_INCLUDED";
+    if (transparency.entry_type !== "RUN_RECORD")
+        return "INVALID_INCLUSION_PROOF";
+    let leaf;
+    try {
+        const payload = (0, verify_js_1.buildLogLeafPayload)("RUN_RECORD", r.runId, await runRecordHash(crypto, r), transparency.appended_at);
+        leaf = await (0, verify_js_1.hashLeaf)(crypto, payload);
+    }
+    catch (e) {
+        if (e instanceof errors_js_1.VerificationError)
+            return "UNREADABLE_DOCUMENT";
+        throw e;
+    }
+    try {
+        await (0, verify_js_1.verifyTransparencyHead)(crypto, transparency, key, r.issuer.keyId);
+        await (0, verify_js_1.verifyTransparencyInclusion)(crypto, transparency, leaf);
+    }
+    catch (e) {
+        if (e instanceof errors_js_1.VerificationError)
+            return (0, verify_js_1.transparencyVerdictName)(e);
+        throw e;
+    }
+    return "VALID";
+}
+function compareBytes(a, b) {
+    const n = Math.min(a.length, b.length);
+    for (let i = 0; i < n; i++) {
+        if (a[i] !== b[i])
+            return a[i] - b[i];
+    }
+    return a.length - b.length;
+}
+/** The root over a leaf set the way a run record commits to one: leaves
+ * sorted bytewise, and 32 zero bytes for the empty set. */
+async function sortedRoot(crypto, leaves) {
+    if (leaves.length === 0)
+        return new Uint8Array(32);
+    return (0, verify_js_1.merkleRoot)(crypto, [...leaves].sort(compareBytes));
+}
+/** What a run record commits to, from what was issued under it. Subjects are
+ * de-duplicated — a subject certified twice in one run is one subject — and
+ * both leaf sets are sorted, so the roots do not depend on issuance order and a
+ * verifier can reproduce them from a pack in any order. A subject leaf is its
+ * 32-byte hash and a record leaf the certificate id's 16 bytes, both through
+ * the RFC 6962 leaf hash. Mirrors core.RunRoots. */
+async function runRoots(crypto, subjects, certificateIds) {
+    const seen = new Set();
+    const subjectLeaves = [];
+    for (const s of subjects) {
+        const key = (0, verify_js_1.bytesToHex)(s);
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        subjectLeaves.push(await (0, verify_js_1.hashLeaf)(crypto, s));
+    }
+    const recordLeaves = [];
+    for (const id of certificateIds)
+        recordLeaves.push(await (0, verify_js_1.hashLeaf)(crypto, (0, verify_js_1.parseUuid)(id)));
+    return {
+        subjectsRoot: await sortedRoot(crypto, subjectLeaves),
+        subjectsCount: subjectLeaves.length,
+        recordsRoot: await sortedRoot(crypto, recordLeaves),
+        recordsCount: recordLeaves.length,
+    };
+}
+function bytesEqual(a, b) {
+    return compareBytes(a, b) === 0;
+}
+/** Reproduces the run record's roots from the records a reader holds and
+ * compares them. The reader must hold every record of the run — a complete
+ * chain of pack pages filtered by the run — or the roots cannot match, which
+ * is the honest answer for a partial set. Mirrors core.CheckRunAgainstRecords. */
+async function checkRunAgainstRecords(crypto, r, records) {
+    let mislabelled = 0;
+    for (const rec of records) {
+        if (rec.runId !== undefined && rec.runId !== r.runId)
+            mislabelled++;
+        if (rec.runId === undefined && rec.formatVersion !== undefined && (0, verify_js_1.signatureCoversRunId)(rec.formatVersion)) {
+            mislabelled++;
+        }
+    }
+    const roots = await runRoots(crypto, records.map((rec) => rec.subjectHash), records.map((rec) => rec.certificateId));
+    return {
+        recordsMatch: bytesEqual(roots.recordsRoot, r.recordsRoot) && roots.recordsCount === r.recordsCount,
+        subjectsMatch: bytesEqual(roots.subjectsRoot, r.subjectsRoot) && roots.subjectsCount === r.subjectsCount,
+        listShortfall: r.listCount - r.subjectsCount,
+        closedInTime: epochSeconds(r.closedAt, "closed_at") <= epochSeconds(r.notAfter, "not_after"),
+        mislabelled,
+    };
+}
+//# sourceMappingURL=run-record.js.map

package/dist/cjs/run-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-record.js","sourceRoot":"","sources":["../../src/run-record.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;AAGH,2CAAgD;AAChD,2CAiBqB;AAErB,iDAAiD;AACpC,QAAA,uBAAuB,GAAG,0BAA0B,CAAC;AAOlE,MAAM,SAAS,GAAwB,IAAI,GAAG,CAAU,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;AAE3E,QAAA,QAAQ,GAAG,sCAAsC,CAAC;AA8E/D,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;2DAE2D;AAC3D,SAAS,SAAS,CAAC,CAAU,EAAE,IAAY;IACzC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAA,QAAQ,CAAC;IACnD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC;IAClF,IAAI,CAAC;QACH,OAAO,IAAA,sBAAU,EAAC,IAAA,qBAAS,EAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,SAAS;YAAE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,mBAAmB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvG,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED;kDACkD;AAClD,SAAS,WAAW,CAAC,CAAU,EAAE,IAAY,EAAE,MAAc;IAC3D,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACjE,OAAO,IAAA,uBAAW,EAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACtC,CAAC;AAED;uCACuC;AACvC,SAAS,WAAW,CAAC,CAAU,EAAE,IAAY;IAC3C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,mCAAmC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,CAAU,EAAE,IAAY;IAC7C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,6BAAiB,CAAC,GAAG,IAAI,kBAAkB,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAED;kFACkF;AAClF,gCAAuC,GAAY;IACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,6BAAiB,CAAC,+BAA+B,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC;IAC7B,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,6BAAiB,CAAC,yBAAyB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,MAAM,GAAQ,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAClC,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,6BAAiB,CAAC,4BAA4B,CAAC,CAAC;QAC1F,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAc;QACxB,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC;QACtC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC;QAChD,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC;QACzC,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,EAAE,CAAC;QAC3D,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC;QACpD,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,EAAE,EAAE,CAAC;QACjE,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,CAAC;QAChE,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,EAAE,CAAC;QAC9D,YAAY,EAAE,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC;QAC7D,SAAS;QACT,QAAQ,EAAE,IAAA,2BAAe,EAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;QACrD,QAAQ,EAAE,IAAA,2BAAe,EAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;QACrD,QAAQ,EAAE,IAAA,2BAAe,EAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC;QACrD,MAAM,EAAE;YACN,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;YACpD,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE,qBAAqB,CAAC;SACvE;QACD,SAAS,EAAE,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC;QACtD,kBAAkB,EAAE,aAAa,CAAC,GAAG,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;KAClF,CAAC;IACF,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IACtC,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACxD,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,6BAAiB,CAAC,+BAA+B,CAAC,CAAC;QAC1F,MAAM,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;+EAE+E;AAC/E,+BAAsC,CAAY;IAChD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,6BAAiB,CAAC,gCAAgC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,IAAA,yBAAa,EAAC;QACnB,YAAY,EAAE,QAAA,uBAAuB;QACrC,SAAS,EAAE,IAAA,2BAAe,EAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC;QACnD,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;QAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK;QACtB,UAAU,EAAE,CAAC,CAAC,SAAS;QACvB,WAAW,EAAE,IAAA,sBAAU,EAAC,CAAC,CAAC,UAAU,CAAC;QACrC,SAAS,EAAE,IAAA,2BAAe,EAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC;QACnD,SAAS,EAAE,IAAA,2BAAe,EAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC;QACnD,aAAa,EAAE,CAAC,CAAC,YAAY;QAC7B,YAAY,EAAE,IAAA,sBAAU,EAAC,CAAC,CAAC,WAAW,CAAC;QACvC,MAAM,EAAE,CAAC,CAAC,KAAK;QACf,QAAQ,EAAE,CAAC,CAAC,OAAO;QACnB,cAAc,EAAE,CAAC,CAAC,aAAa;QAC/B,aAAa,EAAE,IAAA,sBAAU,EAAC,CAAC,CAAC,YAAY,CAAC;QACzC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE;QACnC,OAAO,EAAE,CAAC,CAAC,MAAM;KAClB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,2BAAe,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACxE,CAAC;AAED;;gEAEgE;AACzD,KAAK,0BACV,MAAiB,EACjB,CAAY,EACZ,IAAgC;IAEhC,MAAM,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,QAAA,QAAQ,IAAI,QAAQ,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAC1G,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAC5C,IAAI,CAAC,IAAA,uBAAW,EAAC,IAAA,uBAAW,EAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC;IACpE,MAAM,OAAO,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO,8BAA8B,CAAC;IAC7G,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;yEAEyE;AACzE,uBAA8B,MAAiB,EAAE,CAAY;IAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;oCAIoC;AAC7B,KAAK,mCACV,MAAiB,EACjB,CAAY,EACZ,GAAkB;IAElB,MAAM,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;IACpC,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IACtD,IAAI,YAAY,CAAC,UAAU,KAAK,YAAY;QAAE,OAAO,yBAAyB,CAAC;IAC/E,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,+BAAmB,EAAC,YAAY,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;QACrH,IAAI,GAAG,MAAM,IAAA,oBAAQ,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,6BAAiB;YAAE,OAAO,qBAAqB,CAAC;QACjE,MAAM,CAAC,CAAC;IACV,CAAC;IACD,IAAI,CAAC;QACH,MAAM,IAAA,kCAAsB,EAAC,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,IAAA,uCAA2B,EAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,6BAAiB;YAAE,OAAO,IAAA,mCAAuB,EAAC,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC;IACV,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,CAAa,EAAE,CAAa;IAChD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED;2DAC2D;AAC3D,KAAK,UAAU,UAAU,CAAC,MAAiB,EAAE,MAAoB;IAC/D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,IAAA,sBAAU,EAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;oDAKoD;AAC7C,KAAK,mBACV,MAAiB,EACjB,QAAsB,EACtB,cAAwB;IAExB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,aAAa,GAAiB,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAA,sBAAU,EAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,aAAa,CAAC,IAAI,CAAC,MAAM,IAAA,oBAAQ,EAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,YAAY,GAAiB,EAAE,CAAC;IACtC,KAAK,MAAM,EAAE,IAAI,cAAc;QAAE,YAAY,CAAC,IAAI,CAAC,MAAM,IAAA,oBAAQ,EAAC,MAAM,EAAE,IAAA,qBAAS,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1F,OAAO;QACL,YAAY,EAAE,MAAM,UAAU,CAAC,MAAM,EAAE,aAAa,CAAC;QACrD,aAAa,EAAE,aAAa,CAAC,MAAM;QACnC,WAAW,EAAE,MAAM,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC;QACnD,YAAY,EAAE,YAAY,CAAC,MAAM;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED;;;kFAGkF;AAC3E,KAAK,iCACV,MAAiB,EACjB,CAAY,EACZ,OAAyB;IAEzB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;YAAE,WAAW,EAAE,CAAC;QACpE,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,IAAA,gCAAoB,EAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;YAC1G,WAAW,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACrH,OAAO;QACL,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,YAAY;QACnG,aAAa,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa;QACxG,aAAa,EAAE,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,aAAa;QAC5C,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC5F,WAAW;KACZ,CAAC;AACJ,CAAC"}

package/dist/cjs/verify.d.ts

@@ -16,6 +16,7 @@
  *     output at issuance time (transparency_status=PENDING, no transparency).
  */
 import type { CryptoOps } from "./crypto.js";
+import { VerificationError } from "./errors.js";
 import type { TransparencyResult, VerificationResult } from "./models.js";
 /**
  * Every format this build can read, oldest first. Mirrors core.FormatVersions()
@@ -28,6 +29,17 @@ import type { TransparencyResult, VerificationResult } from "./models.js";
  * script on the page could otherwise push a version onto it.
  */
 export declare const KNOWN_FORMAT_VERSIONS: readonly string[];
+/**
+ * Does this format sign the top-level run_id (ADR-031)?
+ *
+ * v10 onward, and optional even there: a record issued outside a run has none.
+ * A record OLDER than v10 that carries one is refused outright rather than
+ * signed without it — the field would ride in the JSON beside a signature that
+ * says nothing about it. Exported for the audit pack verifier, which asks the
+ * same question of a record that carries none: below v10 that says nothing
+ * about its run, from v10 it says the record was issued under no run.
+ */
+export declare function signatureCoversRunId(version: string): boolean;
 /** Decode hex: whole bytes, digits in either case, nothing else. Anything else
  * throws TypeError. It is exported, so its input is a boundary: reading a stray
  * character as 0, as it once did, turned a typo into different bytes. */
@@ -199,6 +211,18 @@ export declare function registrationQualifier(image: IssuingImage): string;
 export declare function verifyCertificate(crypto: CryptoOps, certificate: Cert, publicKeys: Map<string, PublicKeyInfo>, options?: VerifyOptions): Promise<VerificationResult>;
 /** Verify the transparency proof embedded in a certificate. */
 export declare function verifyTransparency(crypto: CryptoOps, certificate: Cert, publicKeys: Map<string, PublicKeyInfo>): Promise<TransparencyResult>;
+/** The first half of a transparency check, shared with the run record's
+ * (run-record.ts): the key's authority at the head's own timestamp, then the
+ * head's signature. The tree head carries its own timestamp, so this path
+ * always has an anchor; a timestamp that does not read leaves none, which is
+ * the same conservative answer as no proof at all. Throws the VerificationError
+ * the caller reports. Exported as an internal seam, not from index.ts. */
+export declare function verifyTransparencyHead(crypto: CryptoOps, transparency: Doc, pki: PublicKeyInfo, keyId: string): Promise<void>;
+/** The second half: an already-hashed leaf against the signed head, after the
+ * unsigned duplicates beside the proof are held to the signed copies. Throws
+ * the VerificationError the caller reports. Exported as an internal seam. */
+export declare function verifyTransparencyInclusion(crypto: CryptoOps, transparency: Doc, leaf: Uint8Array): Promise<void>;
+export declare function transparencyVerdictName(e: VerificationError): string;
 /** Reconstruct the certificate JSON as it existed at issuance time.
  *
  * At issuance: transparency_status = "PENDING", transparency = nil (omitted).
@@ -214,6 +238,30 @@ export declare function issuanceBytes(certificate: Cert): Uint8Array;
  * this and must be able to prove the two agree. Not re-exported from index.ts,
  * so it stays off the published API. */
 export declare function canonicalJson(obj: unknown): Uint8Array;
+type Doc = Record<string, unknown>;
+/** The 16 bytes of a UUID, in any form Go's uuid.Parse reads. Throws TypeError
+ * for anything else: a UUID reaches a signed payload only as its canonical
+ * string, and an unreadable one must not be signed as whatever text arrived. */
+export declare function parseUuid(text: string): Uint8Array;
+/** The canonical lowercase 8-4-4-4-12 form, as Go's uuid.UUID.String prints:
+ * the only form a UUID takes inside a signed payload. */
+export declare function formatUuid(bytes: Uint8Array): string;
+/**
+ * Decode a fixed-size byte field — a hash, a key, a signature.
+ *
+ * Go marshals `[N]byte` as an array of numbers; hand-written documents carry
+ * hex or standard base64. A well-formed value of the right size is never
+ * ambiguous between the two text forms, because base64 of 32 or 64 bytes ends
+ * in padding hex cannot contain.
+ *
+ * Everything else is refused here, by name: a number, an array element that is
+ * not a byte, text that is neither encoding, the wrong length. Decoding it
+ * leniently instead wrapped 300 to 44 inside a Uint8Array, produced bytes no
+ * signature covers and blamed the signature — or threw from inside atob.
+ */
+/** Exported for run-record.ts, whose digests and roots arrive in the same
+ * shapes; not published from index.ts. */
+export declare function decodeFixed(value: unknown, path: string, length: number): Uint8Array;
 /** Normalize a certificate timestamp to the UTC form Go signs.
  *
  * Go builds every payload timestamp as `t.UTC().Format("2006-01-02T15:04:05Z")`
@@ -239,6 +287,10 @@ export declare function canonicalJson(obj: unknown): Uint8Array;
  * always used, for callers normalizing a time that is not a field of a document.
  */
 export declare function formatTimestamp(ts: unknown, field?: string): string;
+/** Port of Go's BuildLogLeafPayload (ADR-016 §4). A RUN_RECORD leaf names its
+ * run id where the other two name a certificate id, under the same key
+ * (ADR-031). Exported for run-record.ts; not published from index.ts. */
+export declare function buildLogLeafPayload(entryType: unknown, certificateId: string, certificateHash: Uint8Array, appendedAt: unknown): Uint8Array;
 /**
  * Port of Go's BuildTreeHeadPayload.
  *
@@ -253,6 +305,12 @@ export declare function formatTimestamp(ts: unknown, field?: string): string;
  * between two modules of this package, not published surface.
  */
 export declare function buildTreeHeadPayload(head: Record<string, unknown>): Uint8Array;
+/** Exported for run-record.ts, whose roots are trees over these leaves. */
+export declare function hashLeaf(crypto: CryptoOps, data: Uint8Array): Promise<Uint8Array>;
+/** The RFC 6962 root over already-hashed leaves, in the order given. Port of
+ * Go's treeHash, which like it takes at least one leaf: the empty tree has no
+ * root here, and a caller with nothing to commit to says so itself. */
+export declare function merkleRoot(crypto: CryptoOps, leaves: Uint8Array[]): Promise<Uint8Array>;
 /** Verify a Merkle consistency proof (RFC 6962 Section 2.1.4).
  *
  * Port of Go's VerifyConsistency / Python's _verify_consistency.

package/dist/cjs/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAQ7C,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAyE1E;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAQjD,CAAC;AAqIH;;yEAEyE;AACzE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAQlD;AAaD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAQpD;AAoCD;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;2DAEuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;8CAE0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,aAAa,CAAC,CA4BxB;AAED,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AACzE,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAoBnE;;;sEAGsE;AACtE,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAyB7E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAUrF;AAuFD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,mBAAmB,CAAC;CACrD;AAoCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAQ7D,CAAC;AAEH;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrF;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE,wBAAgB,YAAY,CAAC,WAAW,EAAE,IAAI,GAAG,YAAY,CAQ5D;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAmBjE;AA0ED,+DAA+D;AAC/D,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,kBAAkB,CAAC,CA+H7B;AAKD,+DAA+D;AAC/D,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAuF7B;AAMD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,IAAI,GAAG,UAAU,CAK3D;AAMD;;wCAEwC;AACxC,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAEtD;AA4HD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,SAAc,GAAG,MAAM,CAMxE;AAybD;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAW9E;AAqFD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAAC,OAAO,CAAC,CAwDlB;AAGD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,UAAU,CAuBZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAqB5E;AAED,uFAAuF;AACvF,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACvC,GAAG,CAAC,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,aAAa,EAAE,OAAO,EACtB,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAAC,MAAM,CAAC,CAoFjB"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAKL,iBAAiB,EAClB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAoF1E;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EASjD,CAAC;AA8EH;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAE7D;AAyDD;;yEAEyE;AACzE,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAQlD;AAaD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAQpD;AAoCD;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,aAAa,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;2DAEuD;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,qDAAqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;8CAE0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,aAAa,CAAC,CA4BxB;AAED,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAC3D,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AACzE,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAoBnE;;;sEAGsE;AACtE,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEpD;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAqC7E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,IAAI,CAUrF;AA0FD,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,mBAAmB;IAClC,sFAAsF;IACtF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,mBAAmB,CAAC;CACrD;AAoCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,sBAAsB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAQ7D,CAAC;AAEH;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GACpB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACrF;IAAE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAErE,wBAAgB,YAAY,CAAC,WAAW,EAAE,IAAI,GAAG,YAAY,CAQ5D;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAmBjE;AA0ED,+DAA+D;AAC/D,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,kBAAkB,CAAC,CA+H7B;AAKD,+DAA+D;AAC/D,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAgC7B;AAyFD;;;;;0EAK0E;AAC1E,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,SAAS,EACjB,YAAY,EAAE,GAAG,EACjB,GAAG,EAAE,aAAa,EAClB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED;;6EAE6E;AAC7E,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,SAAS,EACjB,YAAY,EAAE,GAAG,EACjB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,IAAI,CAAC,CA+Cf;AAkBD,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAKpE;AAMD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,IAAI,GAAG,UAAU,CAK3D;AAMD;;wCAEwC;AACxC,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAEtD;AAkCD,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAgDnC;;gFAEgF;AAChF,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAMlD;AAED;yDACyD;AACzD,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIpD;AAkBD;;;;;;;;;;;;GAYG;AACH;0CAC0C;AAC1C,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CAmBpF;AAYD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,SAAc,GAAG,MAAM,CAMxE;AAyZD;;yEAEyE;AACzE,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,OAAO,EAClB,aAAa,EAAE,MAAM,EACrB,eAAe,EAAE,UAAU,EAC3B,UAAU,EAAE,OAAO,GAClB,UAAU,CAYZ;AA8BD;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAW9E;AAMD,2EAA2E;AAC3E,wBAAsB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAEvF;AAED;;uEAEuE;AACvE,wBAAsB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAK7F;AAkFD;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAAC,OAAO,CAAC,CA6DlB;AAGD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,UAAU,CAuBZ;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,UAAU,CAqB5E;AAED,uFAAuF;AACvF,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,SAAS,EACjB,WAAW,EAAE,IAAI,EACjB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EACvC,GAAG,CAAC,EAAE,IAAI,EACV,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,MAAM,CAAC,CAiBjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,EACtC,aAAa,EAAE,OAAO,EACtB,GAAG,CAAC,EAAE,IAAI,GACT,OAAO,CAAC,MAAM,CAAC,CAoFjB"}