@spec assemble_compact(BoundedAuthorityProtocol.V1.SigningInput.t(), binary()) ::
  {:ok, binary()} | {:error, :invalid}

Assembles the compact JWS from a signing input and a raw 64-byte Ed25519 signature, at the profile maxima. Same as assemble_compact/3 with %{} limits.

@spec assemble_compact(
  BoundedAuthorityProtocol.V1.SigningInput.t(),
  binary(),
  BoundedAuthorityProtocol.V1.Bounds.t() | map()
) :: {:ok, binary()} | {:error, :invalid}

Assembles the compact JWS from a BoundedAuthorityProtocol.V1.SigningInput and a raw 64-byte Ed25519 signature under caller limits.

The assembled value is re-parsed as its kind (grant, proof, boundary anchor, or key transition) before it is returned as {:ok, compact}. The signature is not verified here: verification happens in verify_grant/3, check_envelope/2, and the evidence verifiers. Returns {:error, :invalid} for a wrong signature width, a signing input that does not re-parse, or an over-limit result.

Since 0.9.0, assembly also refuses, with {:error, :invalid}, a signature that no conforming signer emits: an Ed25519 signature whose S is not below the group order or whose R is non-canonical or of small order (erratum 3). It never rewrites the signature bytes it accepts.

@spec boundary_anchor_signing_input(
  BoundedAuthorityProtocol.V1.BoundaryAnchor.t(),
  BoundedAuthorityProtocol.V1.Bounds.t() | map()
) :: {:ok, BoundedAuthorityProtocol.V1.SigningInput.t()} | {:error, :invalid}

Builds the deterministic boundary-anchor signing input from a BoundedAuthorityProtocol.V1.BoundaryAnchor.

Returns {:ok, %BoundedAuthorityProtocol.V1.SigningInput{}} or {:error, :invalid}.

@spec encode_anchored_export(
  BoundedAuthorityProtocol.V1.AnchoredExportInput.t(),
  BoundedAuthorityProtocol.V1.ExpectedExport.t()
) ::
  {:ok, BoundedAuthorityProtocol.V1.EncodedAnchoredExport.t()}
  | {:error, :invalid}

Frames an anchored export from a BoundedAuthorityProtocol.V1.AnchoredExportInput after checking it against the caller's BoundedAuthorityProtocol.V1.ExpectedExport.

Returns {:ok, %BoundedAuthorityProtocol.V1.EncodedAnchoredExport{chunks: chunks, digest: digest, byte_count: count}} or {:error, :invalid}.

Since 0.9.0, encoding also refuses, with {:error, :invalid}, a signature that no conforming signer emits: an Ed25519 signature whose S is not below the group order or whose R is non-canonical or of small order (erratum 3). It never rewrites the signature bytes it accepts.

@spec encode_consumption_entry(
  BoundedAuthorityProtocol.V1.ConsumptionEntry.t(),
  BoundedAuthorityProtocol.V1.Bounds.t() | map()
) ::
  {:ok, BoundedAuthorityProtocol.V1.EncodedConsumptionEntry.t()}
  | {:error, :invalid}

Encodes one consumption-chain row from a BoundedAuthorityProtocol.V1.ConsumptionEntry.

Returns {:ok, %BoundedAuthorityProtocol.V1.EncodedConsumptionEntry{bytes: row, hash: hash}} with the exact canonical row bytes and their domain-separated hash, or {:error, :invalid}.

@spec grant_signing_input(
  BoundedAuthorityProtocol.V1.Grant.t(),
  BoundedAuthorityProtocol.V1.Bounds.t() | map()
) :: {:ok, BoundedAuthorityProtocol.V1.SigningInput.t()} | {:error, :invalid}

Builds the deterministic grant signing input from a BoundedAuthorityProtocol.V1.Grant.

Returns {:ok, %BoundedAuthorityProtocol.V1.SigningInput{}}; sign its message with the issuer key, then call assemble_compact/2. Returns {:error, :invalid} when a field is out of profile (for example an empty audience list, an expiry not after the start, or a selector outside the closed set) or over limits.

@spec key_transition_signing_input(
  BoundedAuthorityProtocol.V1.KeyTransition.t(),
  BoundedAuthorityProtocol.V1.Bounds.t() | map()
) :: {:ok, BoundedAuthorityProtocol.V1.SigningInput.t()} | {:error, :invalid}

Builds the deterministic historical-key-transition signing input from a BoundedAuthorityProtocol.V1.KeyTransition.

Returns {:ok, %BoundedAuthorityProtocol.V1.SigningInput{}} or {:error, :invalid}; both keys must pass BoundedAuthorityProtocol.Ed25519.acceptable_public_key?/1.

@spec proof_signing_input(
  BoundedAuthorityProtocol.V1.Proof.t(),
  BoundedAuthorityProtocol.V1.Bounds.t() | map()
) :: {:ok, BoundedAuthorityProtocol.V1.SigningInput.t()} | {:error, :invalid}

Builds the deterministic holder-proof signing input from a BoundedAuthorityProtocol.V1.Proof.

The input binds the grant (by the digest of its exact compact bytes), the method, the normalized target URI, the invocation id, the operation, the request digest of the typed cast_arguments, the issue time, and the optional nonce. Returns {:ok, %BoundedAuthorityProtocol.V1.SigningInput{}} or {:error, :invalid}; the holder public key must pass BoundedAuthorityProtocol.Ed25519.acceptable_public_key?/1.

@spec request_digest(
  binary(),
  BoundedAuthorityProtocol.V1.Json.value(),
  BoundedAuthorityProtocol.V1.Bounds.t() | map()
) :: {:ok, binary()} | {:error, :invalid}

Returns {:ok, digest}, the base64url SHA-256 request digest over the operation and the typed cast_arguments (BAP1-REQUEST domain), or {:error, :invalid}.

Integer and float arguments stay distinct: {:integer, 1} and {:float, 1.0} digest differently.