metered-protocol 1.0.0

package/dist/tools/anchor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor.d.ts","sourceRoot":"","sources":["../../tools/anchor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAW,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,wFAAwF;AACxF,eAAO,MAAM,WAAW,6CAA6C,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,UAAW,CAAC;AAGzC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,+FAA+F;IAC/F,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAeD;;;;;GAKG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAmCrF;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAUnE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,SAAU,GAClB,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAErD"}

package/dist/tools/anchor.js

@@ -0,0 +1,136 @@
+/**
+ * A real Kaspa anchor for SPEC.md §8 checkpoints -- the `Anchor` that src/checkpoint.ts takes.
+ *
+ * Every hard-won detail below came from kaspa-depin's proven implementation, and each one cost a
+ * live run to learn. They are restated rather than imported because that repository is a separate
+ * project and this one must build without it; but they are its findings, not new ones.
+ *
+ *   BUILD THE TRANSACTION BY HAND. `createTransactions` hands back a PendingTransaction whose
+ *   `.transaction` is a COPY -- setting subnetworkId and payload on it mutates a throwaway, the
+ *   chain receives neither, and nothing reports a problem. A first attempt confirmed happily and
+ *   landed a plain payment with an empty payload. `createTransaction` returns a Transaction we
+ *   own, so what is signed is what was built.
+ *
+ *   A VERSION 1 TRANSACTION BUDGETS ITS INPUTS. Toccata replaced sigOpCount with an explicit
+ *   computeBudget, and a node refuses a v1 transaction still carrying the old field.
+ *
+ * WHAT THIS DELIBERATELY DOES NOT DO: wait. §8 requires checkpointing to be non-blocking because
+ * Study B measured p90 confirmation at 1,879 ms. This resolves once the node ACCEPTS the
+ * transaction, not once it is mined -- src/checkpoint.ts already treats the record as pending and
+ * never awaits it. Proving a checkpoint later means fetching the block, which is a verifier's job
+ * and needs nothing from here.
+ */
+import { loadSdk } from './kaspa.js';
+/** KIP-21 subnetwork. Anchors go in their own lane so the stream is separable later. */
+export const ANCHOR_LANE = '00a0c40100000000000000000000000000000000';
+/**
+ * Measured, not guessed, and the first three guesses were wrong. At budget 10 the mass is 1,666
+ * and the node requires 166,600 sompi; this pays 200,000 for headroom -- about 0.002 KAS, the
+ * figure SPEC.md §0.1 quotes from Study B.
+ */
+export const ANCHOR_FEE_SOMPI = 200000n;
+const COMPUTE_BUDGET = 10;
+async function connect(cfg) {
+    const sdk = await loadSdk();
+    const networkId = new sdk.NetworkId(cfg.network);
+    const rpc = cfg.url
+        ? new sdk.RpcClient({ url: cfg.url, encoding: sdk.Encoding.Borsh, networkId })
+        : new sdk.RpcClient({ resolver: new sdk.Resolver(), encoding: sdk.Encoding.Borsh, networkId });
+    await rpc.connect();
+    return { sdk, rpc };
+}
+/**
+ * Put one digest on chain. Resolves with the transaction id once the node has accepted it.
+ *
+ * The payload is the raw 32 digest bytes. There is no framing: a checkpoint proves a State existed
+ * before a block, and the State's digest is the whole claim.
+ */
+export async function submitAnchor(cfg, digest) {
+    const { sdk, rpc } = await connect(cfg);
+    try {
+        const priv = new sdk.PrivateKey(cfg.privateKeyHex);
+        const address = priv.toKeypair().toAddress(new sdk.NetworkId(cfg.network)).toString();
+        const { entries } = await rpc.getUtxosByAddresses([address]);
+        if (!entries.length)
+            throw new Error(`no UTXOs at ${address} to pay the anchor fee`);
+        const utxo = entries.reduce((a, b) => (b.amount > a.amount ? b : a));
+        if (utxo.amount <= ANCHOR_FEE_SOMPI) {
+            throw new Error(`largest UTXO holds ${utxo.amount} sompi, under the ${ANCHOR_FEE_SOMPI} fee`);
+        }
+        const tx = sdk.createTransaction([utxo], [{ address, amount: utxo.amount - ANCHOR_FEE_SOMPI }], 0n, Buffer.from(digest, 'hex'), 0);
+        tx.version = 1;
+        tx.subnetworkId = ANCHOR_LANE;
+        tx.gas = 0n;
+        for (const input of tx.inputs) {
+            input.sigOpCount = 0;
+            input.computeBudget = COMPUTE_BUDGET;
+        }
+        tx.finalize();
+        const signed = sdk.signTransaction(tx, [priv], true);
+        const { transactionId } = await rpc.submitTransaction({ transaction: signed, allowOrphan: false });
+        return transactionId;
+    }
+    finally {
+        await rpc.disconnect().catch(() => undefined);
+    }
+}
+/** A tip to start a forward walk from. Must be captured BEFORE submitting. */
+export async function currentTip(cfg) {
+    const { rpc } = await connect(cfg);
+    try {
+        const { tipHashes } = await rpc.getBlockDagInfo();
+        const tip = tipHashes[0];
+        if (!tip)
+            throw new Error('the node reported no tips');
+        return tip;
+    }
+    finally {
+        await rpc.disconnect().catch(() => undefined);
+    }
+}
+/**
+ * Find an anchor in a block and return the payload the chain actually stored.
+ *
+ * ACCEPTANCE IS NOT PROOF, and this exists because of that. kaspa-depin's first live anchor
+ * confirmed perfectly and landed a plain payment with an EMPTY payload, because the payload had
+ * been set on a copy. Nothing anywhere reported a problem. The only way to know a checkpoint is
+ * real is to read it back off the chain.
+ *
+ * SCANNING TIPS DOES NOT WORK. At ten blocks a second a block stops being a tip within about a
+ * second, so polling tipHashes misses the block nearly every time and reports a timeout that
+ * reads like a failure. Walking forward from a hash captured before submission is the only
+ * approach that does not race the DAG.
+ */
+export async function readAnchoredPayload(cfg, txid, fromHash, timeoutMs = 120_000) {
+    const { rpc } = await connect(cfg);
+    const deadline = Date.now() + timeoutMs;
+    try {
+        let low = fromHash;
+        while (Date.now() < deadline) {
+            const { blocks } = await rpc.getBlocks({ lowHash: low, includeBlocks: true, includeTransactions: true });
+            for (const block of blocks ?? []) {
+                for (const tx of block.transactions ?? []) {
+                    if (tx.verboseData?.transactionId === txid)
+                        return String(tx.payload ?? '');
+                }
+            }
+            const last = blocks?.[blocks.length - 1];
+            if (last?.header?.hash)
+                low = last.header.hash;
+            await new Promise((r) => setTimeout(r, 1000));
+        }
+        throw new Error(`anchor ${txid} did not appear in a block within ${timeoutMs}ms`);
+    }
+    finally {
+        await rpc.disconnect().catch(() => undefined);
+    }
+}
+/**
+ * The `Anchor` src/checkpoint.ts consumes. Note what it returns: a promise the session never
+ * awaits. A failure marks the checkpoint record and stops there, because §8 is explicit that
+ * checkpoints are evidence rather than safety -- losing one costs provability, never funds.
+ */
+export function kaspaAnchor(cfg) {
+    return (digest) => submitAnchor(cfg, digest);
+}
+//# sourceMappingURL=anchor.js.map

package/dist/tools/anchor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anchor.js","sourceRoot":"","sources":["../../tools/anchor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,OAAO,EAAgB,MAAM,YAAY,CAAC;AAGnD,wFAAwF;AACxF,MAAM,CAAC,MAAM,WAAW,GAAG,0CAA0C,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAQ,CAAC;AACzC,MAAM,cAAc,GAAG,EAAE,CAAC;AAY1B,KAAK,UAAU,OAAO,CAAC,GAAiB;IACtC,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG;QACjB,CAAC,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9E,CAAC,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACjG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IACpB,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAiB,EAAE,MAAc;IAClE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEtF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,OAAO,wBAAwB,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAM,EAAE,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/E,IAAI,IAAI,CAAC,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,MAAM,qBAAqB,gBAAgB,MAAM,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,EAAE,GAAG,GAAG,CAAC,iBAAiB,CAC9B,CAAC,IAAI,CAAC,EACN,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC,EACrD,EAAE,EACF,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAC1B,CAAC,CACF,CAAC;QACF,EAAE,CAAC,OAAO,GAAG,CAAC,CAAC;QACf,EAAE,CAAC,YAAY,GAAG,WAAW,CAAC;QAC9B,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YAC9B,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;YACrB,KAAK,CAAC,aAAa,GAAG,cAAc,CAAC;QACvC,CAAC;QACD,EAAE,CAAC,QAAQ,EAAE,CAAC;QAEd,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,GAAG,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;QACnG,OAAO,aAAuB,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAiB;IAChD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvD,OAAO,GAAa,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAiB,EACjB,IAAY,EACZ,QAAgB,EAChB,SAAS,GAAG,OAAO;IAEnB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,QAAQ,CAAC;QACnB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;YACzG,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;gBACjC,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;oBAC1C,IAAI,EAAE,CAAC,WAAW,EAAE,aAAa,KAAK,IAAI;wBAAE,OAAO,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC9E,CAAC;YACH,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI;gBAAE,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YAC/C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,qCAAqC,SAAS,IAAI,CAAC,CAAC;IACpF,CAAC;YAAS,CAAC;QACT,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAiB;IAC3C,OAAO,CAAC,MAAc,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC"}

package/dist/tools/chain.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Settling a metered session on Kaspa -- the half of the protocol that consensus enforces.
+ *
+ * SEPARATE FROM THE MAIN ENTRY POINT ON PURPOSE. `import 'metered'` pulls in the messages, the
+ * meters and the HTTP layer, and nothing else: a buyer that only speaks the protocol should not
+ * have to load a WASM SDK to do it. Everything here needs that SDK, and needs `silverc` to compile
+ * a covenant carrying this session's own identity, so it lives behind `metered/chain` where the
+ * cost is opt-in.
+ *
+ * The drivers are deliberately NOT here. `tools/demo.ts` and `tools/live-*.ts` demonstrate these
+ * operations and print things; what a program links against is the operations.
+ */
+export { openCovenant, fundCovenant, settleClaim, closeCovenant, SETTLE_FEE, CLOSE_FEE, FUND_FEE, type Opened, type Claim, type Closed, } from './session-chain.js';
+export { loadSdk, loadAnchorKey, anchorAddress, type Network } from './kaspa.js';
+export { signatureScript, actionScript, settleArgs, encodeNumber, type Arg } from './sigscript.js';
+export { awaitUtxo, awaitWindow, closeOutputs, withState, type Any } from './live-steps.js';
+export { covenantAddress, compileWithState } from './covenant.js';
+//# sourceMappingURL=chain.d.ts.map

package/dist/tools/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../../tools/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EACtD,UAAU,EAAE,SAAS,EAAE,QAAQ,EAC/B,KAAK,MAAM,EAAE,KAAK,KAAK,EAAE,KAAK,MAAM,GACrC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,OAAO,EAAE,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,KAAK,GAAG,EAAE,MAAM,gBAAgB,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,GAAG,EAAE,MAAM,iBAAiB,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/tools/chain.js

@@ -0,0 +1,18 @@
+/**
+ * Settling a metered session on Kaspa -- the half of the protocol that consensus enforces.
+ *
+ * SEPARATE FROM THE MAIN ENTRY POINT ON PURPOSE. `import 'metered'` pulls in the messages, the
+ * meters and the HTTP layer, and nothing else: a buyer that only speaks the protocol should not
+ * have to load a WASM SDK to do it. Everything here needs that SDK, and needs `silverc` to compile
+ * a covenant carrying this session's own identity, so it lives behind `metered/chain` where the
+ * cost is opt-in.
+ *
+ * The drivers are deliberately NOT here. `tools/demo.ts` and `tools/live-*.ts` demonstrate these
+ * operations and print things; what a program links against is the operations.
+ */
+export { openCovenant, fundCovenant, settleClaim, closeCovenant, SETTLE_FEE, CLOSE_FEE, FUND_FEE, } from './session-chain.js';
+export { loadSdk, loadAnchorKey, anchorAddress } from './kaspa.js';
+export { signatureScript, actionScript, settleArgs, encodeNumber } from './sigscript.js';
+export { awaitUtxo, awaitWindow, closeOutputs, withState } from './live-steps.js';
+export { covenantAddress, compileWithState } from './covenant.js';
+//# sourceMappingURL=chain.js.map

package/dist/tools/chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.js","sourceRoot":"","sources":["../../tools/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EACL,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EACtD,UAAU,EAAE,SAAS,EAAE,QAAQ,GAEhC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAgB,MAAM,YAAY,CAAC;AACjF,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAY,MAAM,gBAAgB,CAAC;AACnG,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAY,MAAM,iBAAiB,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/tools/conformance.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=conformance.d.ts.map

package/dist/tools/conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../tools/conformance.ts"],"names":[],"mappings":""}

package/dist/tools/conformance.js

@@ -0,0 +1,220 @@
+/**
+ * `npm run conformance` -- generate the vectors a SECOND implementation must reproduce.
+ *
+ * THE SPECIFICATION'S CENTRAL CLAIM IS THAT TWO IMPLEMENTATIONS AGREE. That has been demonstrated
+ * for the tokeniser, where the JavaScript encoder is pinned against Python `tiktoken` boundary for
+ * boundary. It has never been demonstrated for the protocol, because there has only ever been one
+ * implementation of it -- and a specification with one implementation is a description of that
+ * implementation, however carefully it is written.
+ *
+ * So this emits the bytes. Every case names the section it comes from, states its input in a
+ * language-neutral form, and gives the exact output an implementation must produce. An implementer
+ * needs no TypeScript, no dependency on this repository, and no agreement with any of its choices
+ * -- only the same answers.
+ *
+ * WHAT IS PINNED IS WHAT CANNOT BE NEGOTIATED LATER: canonical bytes, digests, the settlement
+ * preimage, signature verification, reconciliation outcomes, and the close shape. Those are the
+ * places where two honest implementations diverge silently and then cannot settle with each other.
+ *
+ * Signatures are pinned as VERIFICATION, never as production: BIP340 signing is randomised, so a
+ * vector demanding particular signature bytes is a vector no correct implementation can pass.
+ */
+import { writeFileSync } from 'node:fs';
+import { canonicalize, digestHex, blake3Hex, publicKeyHex, signEnvelope, signState, settlementPreimage, stateSigningPayload, } from '../src/encoding.js';
+import { reconcileBabel, toleranceBound } from '../src/reconcile.js';
+import { requiredFunding, CLOSE_FEE_SOMPI, MIN_COVENANT_SOMPI } from '../src/reservation.js';
+import { resolveMeter, minimumTolerance, meterFor } from '../src/meter.js';
+const BUYER_SK = '11'.repeat(32);
+const PROVIDER_SK = '22'.repeat(32);
+const SESSION = 'a1'.repeat(16);
+const OFFER = signEnvelope({
+    v: 1, scheme: 'metered', network: 'kaspa:testnet-10', asset: 'KAS',
+    sessionId: SESSION, unit: 'llm.output_tokens.v1', meter: 'o200k_base',
+    unitPriceSompi: 3630, babelUnits: 550, maxBabels: 64,
+    toleranceAbs: 1, checkpointEvery: 2, responseWindowDaa: 600,
+    buyerPubkey: publicKeyHex(BUYER_SK), providerPubkey: publicKeyHex(PROVIDER_SK),
+    partiesCommitment: blake3Hex(`${publicKeyHex(BUYER_SK)}${publicKeyHex(PROVIDER_SK)}`),
+}, PROVIDER_SK);
+/** Section 2. The bytes everything else is computed over: key order, escaping, no stray space. */
+function encodingGroup() {
+    const shapes = [
+        ['nested objects sort by key at every level', { b: 1, a: { d: 4, c: 3 } }],
+        ['arrays keep their order, unlike objects', { a: [3, 1, 2] }],
+        ['non-ASCII is NOT escaped', { s: 'Cafe \u{1F512} 計量' }],
+        ['a null is preserved where the spec names one', { prevState: null, seq: 0 }],
+        ['negative and zero integers', { a: -1, b: 0, c: -9007199254740991 }],
+        // THE ONE THAT ACTUALLY TESTS THE RULE. An earlier version of this vector used only BMP
+        // characters, where code-point and code-unit order AGREE -- so it named the rule and tested
+        // nothing, and a second implementation sorting by code point passed it. These two keys order
+        // OPPOSITELY under the two rules: U+10000 encodes as the surrogate pair D800 DC00, and
+        // D800 < FFFD, so it sorts FIRST by code unit and LAST by code point.
+        ['UTF-16 code-unit order, where it DIFFERS from code-point order', { '�': 1, '\u{10000}': 2 }],
+        ['BMP keys, where the two orders agree', { 'aＺ': 1, 'aａ': 2, az: 3 }],
+    ];
+    return {
+        section: '2',
+        about: 'Canonical JSON, and the digest taken over it. Sorted keys, no insignificant whitespace.',
+        cases: shapes.map(([name, given]) => ({
+            name,
+            given,
+            expect: { canonical: canonicalize(given), digest: digestHex(given) },
+        })),
+    };
+}
+/** Section 3.4.1. Fixed width, fixed order, no delimiters -- and the traps inside it. */
+function preimageGroup() {
+    const states = [
+        ['a mid-session State', { v: 1, sessionId: SESSION, seq: 3, cumulativeUnits: 2199, cumulativeSompi: 7982370, prevState: 'b2'.repeat(32) }],
+        ['seq 0, where prevState is null and becomes 32 ZERO bytes', { v: 1, sessionId: SESSION, seq: 0, cumulativeUnits: 550, cumulativeSompi: 1996500, prevState: null }],
+        ['a NEGATIVE integer is signed-magnitude, not two-complement', { v: 1, sessionId: SESSION, seq: -1, cumulativeUnits: 0, cumulativeSompi: 0, prevState: null }],
+        ['the largest integer the protocol admits', { v: 1, sessionId: SESSION, seq: 1, cumulativeUnits: 9007199254740991, cumulativeSompi: 9007199254740991, prevState: 'cd'.repeat(32) }],
+    ];
+    return {
+        section: '3.4.1',
+        about: 'The 72-byte settlement preimage: sessionId(16) seq(8) units(8) sompi(8) prevState(32).',
+        cases: states.map(([name, given]) => ({
+            name,
+            given,
+            expect: {
+                lengthBytes: settlementPreimage(given).length,
+                preimageHex: stateSigningPayload(given),
+                digestHex: blake3Hex(settlementPreimage(given)),
+            },
+        })),
+    };
+}
+/** Signatures, pinned as verification because signing is randomised. */
+function signatureGroup() {
+    const state = { v: 1, sessionId: SESSION, seq: 0, cumulativeUnits: 550, cumulativeSompi: 1996500, prevState: null };
+    const buyerSig = signState(state, BUYER_SK);
+    return {
+        section: '2.6 / 3.4',
+        about: 'Verification vectors. A correct implementation MUST agree on true and on false alike.',
+        cases: [
+            {
+                name: 'the Offer verifies against the provider key that signed it',
+                given: { message: OFFER, publicKey: OFFER.providerPubkey, field: 'sig' },
+                expect: { verifies: true },
+            },
+            {
+                name: 'the Offer does NOT verify against the buyer key',
+                given: { message: OFFER, publicKey: OFFER.buyerPubkey, field: 'sig' },
+                expect: { verifies: false },
+            },
+            {
+                name: 'a State signature verifies over the 72-byte preimage, not over JSON',
+                given: { state, signature: buyerSig, publicKey: publicKeyHex(BUYER_SK) },
+                expect: { verifies: true },
+            },
+            {
+                name: 'the same signature fails once an amount changes',
+                given: { state: { ...state, cumulativeSompi: 1996501 }, signature: buyerSig, publicKey: publicKeyHex(BUYER_SK) },
+                expect: { verifies: false },
+            },
+        ],
+    };
+}
+const measure = (by, units, cumulative, digest) => signEnvelope({
+    v: 1, sessionId: SESSION, seq: 0, by, units, cumulativeUnits: cumulative,
+    contentDigest: digest, measurementId: blake3Hex(`${SESSION}/0/${by}`).slice(0, 32),
+}, by === 'buyer' ? BUYER_SK : PROVIDER_SK);
+/** Section 5. What gets billed, or why the session stops. */
+function reconcileGroup() {
+    const d = blake3Hex('the delivered bytes');
+    const other = blake3Hex('different bytes');
+    const rows = [
+        ['identical counts bill that count', measure('buyer', 550, 550, d), measure('provider', 550, 550, d)],
+        ['a one-token disagreement inside tolerance bills the LOWER', measure('buyer', 549, 549, d), measure('provider', 550, 550, d)],
+        ['beyond tolerance the session halts', measure('buyer', 500, 500, d), measure('provider', 550, 550, d)],
+        ['a different contentDigest halts, whatever the counts', measure('buyer', 550, 550, other), measure('provider', 550, 550, d)],
+    ];
+    return {
+        section: '5',
+        about: 'Reconciliation. Rule 6 bills the lower count; a digest mismatch is unresolvable.',
+        cases: rows.map(([name, buyer, provider]) => ({
+            name,
+            given: { buyer, provider, seq: 0, toleranceAbs: OFFER.toleranceAbs },
+            expect: reconcileBabel(OFFER, buyer, provider, 0),
+        })),
+    };
+}
+/** Section 7.4a and 7.4b. Which close shape is legal, and what a session must be funded with. */
+function settlementGroup() {
+    // STRUCTURED, never prose. An earlier version compared English -- "one output, all to the
+    // buyer" -- so a correct implementation with different wording failed. A conformance suite that
+    // tests its own phrasing is testing the wrong thing.
+    const shape = (pending, total) => {
+        if (pending < 2_600_000)
+            return { outputs: 1, to: ['buyer'] };
+        if (pending + 3_000_000 >= total)
+            return { outputs: 1, to: ['provider'] };
+        return { outputs: 2, to: ['provider', 'buyer'] };
+    };
+    const rows = [
+        [0, 50_000_000], [100_000, 50_000_000], [2_599_999, 50_000_000],
+        [2_600_000, 50_000_000], [4_000_000, 50_000_000], [47_600_000, 50_000_000],
+    ];
+    const units = [10, 550, 5000, 1000000];
+    return {
+        section: '7.4a / 7.4b',
+        about: 'Close shape by claim, the funding floor, and a tolerance that does not scale.',
+        cases: [
+            ...rows.map(([pending, total]) => ({
+                name: `claim ${pending} of ${total}`,
+                given: { pendingSompi: pending, covenantSompi: total },
+                expect: { shape: shape(pending, total) },
+            })),
+            {
+                name: 'the funding floor for this Offer',
+                given: { babelUnits: OFFER.babelUnits, maxBabels: OFFER.maxBabels, unitPriceSompi: OFFER.unitPriceSompi },
+                expect: { requiredFunding: requiredFunding(OFFER), closeFee: CLOSE_FEE_SOMPI, minCovenant: MIN_COVENANT_SOMPI },
+            },
+            {
+                name: 'the tolerance bound does not grow with the babel',
+                given: { toleranceAbs: OFFER.toleranceAbs, providerUnits: units },
+                expect: { bounds: units.map((u) => toleranceBound(OFFER, u)) },
+            },
+        ],
+    };
+}
+/** Section 6. The meters, and the property that decides each one's tolerance floor. */
+function meterGroup() {
+    const texts = ['', 'hello', 'café', '計量', '\u{1F512}', 'a\nb\tc  d', 'x'.repeat(1000)];
+    const octets = meterFor('octets');
+    const utf8 = (t) => new TextEncoder().encode(t);
+    const names = ['octets', 'o200k_base'];
+    return {
+        section: '6',
+        about: 'Units and meters. An exact meter permits a tolerance of 0; a lossy one requires 1.',
+        cases: [
+            ...texts.map((text) => ({
+                name: `octets of ${JSON.stringify(text).slice(0, 28)}`,
+                given: { meter: 'octets', content: text },
+                expect: { units: octets(utf8(text)), contentDigest: blake3Hex(text) },
+            })),
+            {
+                name: 'the tolerance floor belongs to the meter, not the protocol',
+                given: { meters: names },
+                expect: {
+                    floors: names.map((m) => minimumTolerance(resolveMeter(m))),
+                    exact: names.map((m) => resolveMeter(m).exact),
+                },
+            },
+            {
+                name: 'each meter measures exactly one unit',
+                given: { meters: names },
+                expect: { units: names.map((m) => resolveMeter(m).unit) },
+            },
+        ],
+    };
+}
+const doc = {
+    version: 1,
+    about: 'Conformance vectors for the metered protocol. See spec/CONFORMANCE.md.',
+    offer: OFFER,
+    groups: [encodingGroup(), preimageGroup(), signatureGroup(), reconcileGroup(), settlementGroup(), meterGroup()],
+};
+writeFileSync('spec/conformance-vectors.json', `${JSON.stringify(doc, null, 1)}\n`);
+const total = doc.groups.reduce((n, g) => n + g.cases.length, 0);
+console.log(`wrote spec/conformance-vectors.json -- ${doc.groups.length} groups, ${total} cases`);
+//# sourceMappingURL=conformance.js.map

package/dist/tools/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../tools/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EACL,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EACzE,kBAAkB,EAAE,mBAAmB,GACxC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAG3E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACpC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAKhC,MAAM,KAAK,GAAU,YAAY,CAAC;IAChC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK;IAClE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,YAAY;IACrE,cAAc,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;IACpD,YAAY,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,iBAAiB,EAAE,GAAG;IAC3D,WAAW,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,cAAc,EAAE,YAAY,CAAC,WAAW,CAAC;IAC9E,iBAAiB,EAAE,SAAS,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC;CACtF,EAAE,WAAW,CAAU,CAAC;AAEzB,kGAAkG;AAClG,SAAS,aAAa;IACpB,MAAM,MAAM,GAAwB;QAClC,CAAC,2CAA2C,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1E,CAAC,yCAAyC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAC7D,CAAC,0BAA0B,EAAE,EAAE,CAAC,EAAE,mBAAmB,EAAE,CAAC;QACxD,CAAC,8CAA8C,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;QAC7E,CAAC,4BAA4B,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,gBAAgB,EAAE,CAAC;QACrE,wFAAwF;QACxF,4FAA4F;QAC5F,6FAA6F;QAC7F,uFAAuF;QACvF,sEAAsE;QACtE,CAAC,gEAAgE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAC9F,CAAC,sCAAsC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;KACtE,CAAC;IACF,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,yFAAyF;QAChG,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI;YACJ,KAAK;YACL,MAAM,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;SACrE,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa;IACpB,MAAM,MAAM,GAAwC;QAClD,CAAC,qBAAqB,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1I,CAAC,0DAA0D,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACnK,CAAC,4DAA4D,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC9J,CAAC,yCAAyC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;KACpL,CAAC;IACF,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,KAAK,EAAE,wFAAwF;QAC/F,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI;YACJ,KAAK;YACL,MAAM,EAAE;gBACN,WAAW,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,MAAM;gBAC7C,WAAW,EAAE,mBAAmB,CAAC,KAAK,CAAC;gBACvC,SAAS,EAAE,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;aAChD;SACF,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,cAAc;IACrB,MAAM,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAsB,CAAC;IACxI,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,KAAK,EAAE,uFAAuF;QAC9F,KAAK,EAAE;YACL;gBACE,IAAI,EAAE,4DAA4D;gBAClE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE;gBACxE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC3B;YACD;gBACE,IAAI,EAAE,iDAAiD;gBACvD,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE;gBACrE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5B;YACD;gBACE,IAAI,EAAE,qEAAqE;gBAC3E,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE;gBACxE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;aAC3B;YACD;gBACE,IAAI,EAAE,iDAAiD;gBACvD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE;gBAChH,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC5B;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,EAAwB,EAAE,KAAa,EAAE,UAAkB,EAAE,MAAc,EAAe,EAAE,CAC3G,YAAY,CAAC;IACX,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,UAAU;IACxE,aAAa,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,CAAC,GAAG,OAAO,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;CACnF,EAAE,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAA2B,CAAC;AAExE,6DAA6D;AAC7D,SAAS,cAAc;IACrB,MAAM,CAAC,GAAG,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAyC;QACjD,CAAC,kCAAkC,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACrG,CAAC,2DAA2D,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9H,CAAC,oCAAoC,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACvG,CAAC,sDAAsD,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;KAC9H,CAAC;IACF,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,kFAAkF;QACzF,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI;YACJ,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE;YACpE,MAAM,EAAE,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;SAClD,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,SAAS,eAAe;IACtB,0FAA0F;IAC1F,gGAAgG;IAChG,qDAAqD;IACrD,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAa,EAAqC,EAAE;QAClF,IAAI,OAAO,GAAG,SAAS;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9D,IAAI,OAAO,GAAG,SAAS,IAAI,KAAK;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;IACnD,CAAC,CAAC;IACF,MAAM,IAAI,GAAuB;QAC/B,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;QAC/D,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;KAC3E,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,aAAa;QACtB,KAAK,EAAE,+EAA+E;QACtF,KAAK,EAAE;YACL,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,IAAI,EAAE,SAAS,OAAO,OAAO,KAAK,EAAE;gBACpC,KAAK,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE;gBACtD,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE;aACzC,CAAC,CAAC;YACH;gBACE,IAAI,EAAE,kCAAkC;gBACxC,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE;gBACzG,MAAM,EAAE,EAAE,eAAe,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE;aAChH;YACD;gBACE,IAAI,EAAE,kDAAkD;gBACxD,KAAK,EAAE,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE;gBACjE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;aAC/D;SACF;KACF,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAS,UAAU;IACjB,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACvF,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACvC,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,oFAAoF;QAC3F,KAAK,EAAE;YACL,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACtB,IAAI,EAAE,aAAa,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBACtD,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE;gBACzC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE;aACtE,CAAC,CAAC;YACH;gBACE,IAAI,EAAE,4DAA4D;gBAClE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;gBACxB,MAAM,EAAE;oBACN,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC3D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;iBAC/C;aACF;YACD;gBACE,IAAI,EAAE,sCAAsC;gBAC5C,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE;gBACxB,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;aAC1D;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,GAAG,GAAG;IACV,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,wEAAwE;IAC/E,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,EAAE,cAAc,EAAE,EAAE,cAAc,EAAE,EAAE,eAAe,EAAE,EAAE,UAAU,EAAE,CAAC;CAChH,CAAC;AAEF,aAAa,CAAC,+BAA+B,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACpF,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACjE,OAAO,CAAC,GAAG,CAAC,0CAA0C,GAAG,CAAC,MAAM,CAAC,MAAM,YAAY,KAAK,QAAQ,CAAC,CAAC"}

package/dist/tools/contracts.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contracts.d.ts.map

package/dist/tools/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../tools/contracts.ts"],"names":[],"mappings":""}

package/dist/tools/contracts.js

@@ -0,0 +1,68 @@
+/**
+ * `npm run contracts` -- execute the covenant against its simulator suite.
+ *
+ * NOT part of `npm run check`, deliberately, and for two reasons rather than the usual one. It
+ * needs the SilverScript debugger, a Rust binary from a separate checkout; and that binary must
+ * carry the local sighash patch described in tools/sighash.ts, without which `expire` cannot be
+ * executed at all. Wiring either requirement into the main gate would break `check` for anyone
+ * who has not built them. It fails with instructions instead of a stack trace.
+ *
+ * REGENERATE AFTER EVERY CONTRACT EDIT. The expire signatures cover the spending transaction,
+ * which commits to the covenant's own script -- so changing one line of the contract invalidates
+ * every expire signature in the suite. A stale suite fails loudly rather than passing wrongly,
+ * but it fails in a way that looks like a contract bug and is not. `npm run contracts` regenerates
+ * first for exactly this reason.
+ */
+import { fileURLToPath } from 'node:url';
+import { spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { DEBUGGER } from './sighash.js';
+import { profileFromArgv } from './covenant-profile.js';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/** argentc, outside the repository like every other toolchain binary here. */
+const ARGENTC = process.env.METERED_ARGENTC
+    ?? join(homedir(), '.metered', 'argent', 'target', 'release', 'argentc.exe');
+// `npm run contracts -- --profile ag` executes the Argent port instead. Both covenants run the
+// SAME cases from the same generator: see tools/covenant-profile.ts for why that is not optional.
+const PROFILE = profileFromArgv();
+if (!existsSync(DEBUGGER)) {
+    console.error(`SilverScript debugger not found at ${DEBUGGER}\n\n` +
+        '  git clone https://github.com/kaspanet/silverscript && cd silverscript && git checkout v1.0.0\n' +
+        '  cargo build --release -p cli-debugger\n\n' +
+        'Then apply the sighash patch (see tools/sighash.ts) and set SILVERSCRIPT_DEBUGGER.');
+    process.exit(1);
+}
+// REBUILD FIRST WHEN THE CONTRACT IS GENERATED. Editing contracts/metered.ag without re-running
+// argentc leaves this suite executing the PREVIOUS bytecode, which passes and proves nothing about
+// the source anyone is reading. Caught exactly that way on 2026-09-10 while changing a constant.
+/** argentc's output belongs beside the source it was built from, not beside the caller. */
+const AG_BUILD_DIR = fileURLToPath(new URL('../build/ag', import.meta.url));
+if (PROFILE.source) {
+    const built = spawnSync(ARGENTC, ['build', PROFILE.source, '--out', AG_BUILD_DIR], { encoding: 'utf8' });
+    if (built.status !== 0) {
+        process.stderr.write(built.stderr ?? `argentc not found at ${ARGENTC}
+`);
+        process.exit(1);
+    }
+}
+const gen = spawnSync('npx', ['tsx', 'tools/gen-contract-tests.ts', '--profile', PROFILE.key], { encoding: 'utf8', shell: true });
+process.stdout.write(gen.stdout ?? '');
+if (gen.status !== 0) {
+    process.stderr.write(gen.stderr ?? '');
+    process.exit(1);
+}
+if (!existsSync(PROFILE.contract)) {
+    console.error([
+        `contract not found at ${PROFILE.contract}`,
+        '',
+        '  the Argent profile executes argentc OUTPUT, so build it first:',
+        '  ~/.metered/argent/target/release/argentc build contracts/metered.ag --out build/ag',
+    ].join('\n'));
+    process.exit(1);
+}
+const run = spawnSync(DEBUGGER, [PROFILE.contract, '--test-file', PROFILE.suite, '--run-all'], { encoding: 'utf8' });
+process.stdout.write(run.stdout ?? '');
+process.stderr.write(run.stderr ?? '');
+process.exit(run.status ?? 1);
+//# sourceMappingURL=contracts.js.map

package/dist/tools/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../tools/contracts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,8EAA8E;AAC9E,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe;OACtC,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AAE/E,+FAA+F;AAC/F,kGAAkG;AAClG,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;AAElC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC1B,OAAO,CAAC,KAAK,CACX,sCAAsC,QAAQ,MAAM;QAClD,kGAAkG;QAClG,6CAA6C;QAC7C,oFAAoF,CACvF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,gGAAgG;AAChG,mGAAmG;AACnG,iGAAiG;AAEjG,2FAA2F;AAC3F,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE5E,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IACnB,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IACzG,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,wBAAwB,OAAO;CACvE,CAAC,CAAC;QACC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,6BAA6B,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AACvC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClC,OAAO,CAAC,KAAK,CACX;QACE,yBAAyB,OAAO,CAAC,QAAQ,EAAE;QAC3C,EAAE;QACF,kEAAkE;QAClE,sFAAsF;KACvF,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AACrH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AACvC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AACvC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC"}

package/dist/tools/covenant-binding.d.ts

@@ -0,0 +1,40 @@
+/**
+ * KIP-20 covenant bindings: what Argent's `settle` requires and the hand-written covenant does not.
+ *
+ * Argent lowers `emits next` to `OpAuthOutputCount(activeInput) == 1`, so a continuation output
+ * must be BOUND to the covenant and to the input that created it. `emits {}` lowers to a count of
+ * zero, which an unbound P2PK payout already satisfies -- so `expire` needs none of this.
+ *
+ * THE THING THAT COST A REJECTED TRANSACTION. `OpAuthOutputCount` asks how many outputs are
+ * authorised by the input being spent, and an input belonging to NO covenant authorises nothing,
+ * whatever its outputs claim. So an Argent session must be FUNDED AS A COVENANT rather than merely
+ * paid into: the funding transaction is the genesis, and every settle inherits from it.
+ *
+ * The simulator passed the same spend, because a test case declares `covenant_id` on the input
+ * directly and on chain there was nothing to declare it. That disagreement between simulator and
+ * consensus is the finding, and it is why a pre-flight is a floor rather than a proof.
+ */
+type Any = any;
+/** Which branch a binding took. `genesis` on a continuation would be a quietly reset session. */
+export type BindingKind = 'none' | 'genesis' | 'inherited';
+/** Bind output 0 to this session's covenant, establishing one only if the input has none. */
+export declare function bindContinuation(sdk: Any, tx: Any, utxo: Any, binds: boolean): BindingKind;
+/** Establish a covenant on output 0 of a funding transaction. See the header: this is the genesis. */
+export declare function fundAsCovenant(tx: Any, binds: boolean): void;
+/**
+ * The covenant id a finalized transaction actually carries, read off its serialized form.
+ *
+ * NOT off `tx.outputs[0].covenant`: that getter hands ownership of a WASM object to JavaScript,
+ * and reading it twice fails with "null pointer passed to rust".
+ */
+export declare function covenantIdOf(tx: Any): string;
+/**
+ * PRINTING "inherited" IS INTENTION; THIS IS THE MECHANISM.
+ *
+ * A supersede that fell to the genesis branch would start a SECOND covenant, still satisfy
+ * `OpAuthOutputCount == 1`, and settle happily -- passing for the wrong reason, with the session's
+ * identity quietly reset. So the branch and the id are both asserted, not merely reported.
+ */
+export declare function assertInherited(kind: BindingKind, continuation: Any, first: Any): void;
+export {};
+//# sourceMappingURL=covenant-binding.d.ts.map

package/dist/tools/covenant-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"covenant-binding.d.ts","sourceRoot":"","sources":["../../tools/covenant-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,KAAK,GAAG,GAAG,GAAG,CAAC;AAEf,iGAAiG;AACjG,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;AAE3D,6FAA6F;AAC7F,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,WAAW,CAS1F;AAED,sGAAsG;AACtG,wBAAgB,cAAc,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAG5D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,EAAE,EAAE,GAAG,GAAG,MAAM,CAG5C;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,GAAG,IAAI,CAOtF"}

package/dist/tools/covenant-binding.js

@@ -0,0 +1,60 @@
+/**
+ * KIP-20 covenant bindings: what Argent's `settle` requires and the hand-written covenant does not.
+ *
+ * Argent lowers `emits next` to `OpAuthOutputCount(activeInput) == 1`, so a continuation output
+ * must be BOUND to the covenant and to the input that created it. `emits {}` lowers to a count of
+ * zero, which an unbound P2PK payout already satisfies -- so `expire` needs none of this.
+ *
+ * THE THING THAT COST A REJECTED TRANSACTION. `OpAuthOutputCount` asks how many outputs are
+ * authorised by the input being spent, and an input belonging to NO covenant authorises nothing,
+ * whatever its outputs claim. So an Argent session must be FUNDED AS A COVENANT rather than merely
+ * paid into: the funding transaction is the genesis, and every settle inherits from it.
+ *
+ * The simulator passed the same spend, because a test case declares `covenant_id` on the input
+ * directly and on chain there was nothing to declare it. That disagreement between simulator and
+ * consensus is the finding, and it is why a pre-flight is a floor rather than a proof.
+ */
+/** Bind output 0 to this session's covenant, establishing one only if the input has none. */
+export function bindContinuation(sdk, tx, utxo, binds) {
+    if (!binds)
+        return 'none';
+    const inherited = utxo.covenantId ?? utxo.entry?.covenantId ?? utxo.utxoEntry?.covenantId;
+    if (inherited) {
+        tx.outputs[0].covenant = new sdk.CovenantBinding(0, inherited);
+        return 'inherited';
+    }
+    tx.populateGenesisCovenants([{ authorizingInput: 0, outputs: [0] }]);
+    return 'genesis';
+}
+/** Establish a covenant on output 0 of a funding transaction. See the header: this is the genesis. */
+export function fundAsCovenant(tx, binds) {
+    // Output 0 is the covenant; output 1 is the funder's change and must NOT join it.
+    if (binds)
+        tx.populateGenesisCovenants([{ authorizingInput: 0, outputs: [0] }]);
+}
+/**
+ * The covenant id a finalized transaction actually carries, read off its serialized form.
+ *
+ * NOT off `tx.outputs[0].covenant`: that getter hands ownership of a WASM object to JavaScript,
+ * and reading it twice fails with "null pointer passed to rust".
+ */
+export function covenantIdOf(tx) {
+    const json = JSON.parse(tx.serializeToSafeJSON());
+    return json.outputs[0]?.covenant?.covenantId ?? '(none)';
+}
+/**
+ * PRINTING "inherited" IS INTENTION; THIS IS THE MECHANISM.
+ *
+ * A supersede that fell to the genesis branch would start a SECOND covenant, still satisfy
+ * `OpAuthOutputCount == 1`, and settle happily -- passing for the wrong reason, with the session's
+ * identity quietly reset. So the branch and the id are both asserted, not merely reported.
+ */
+export function assertInherited(kind, continuation, first) {
+    if (kind !== 'inherited') {
+        throw new Error('the supersede started a NEW covenant instead of inheriting the session identity');
+    }
+    if (covenantIdOf(continuation) !== covenantIdOf(first)) {
+        throw new Error('the covenant identity changed between settles -- these are two sessions, not one');
+    }
+}
+//# sourceMappingURL=covenant-binding.js.map