1id 0.8.0 → 0.10.0

package/dist/index.d.ts

@@ -24,6 +24,7 @@ import { DEFAULT_KEY_ALGORITHM, HSMType, type Identity, KeyAlgorithm, type Token
 import { invalidate_world_cache, type WorldStatus, type WorldIdentitySection, type WorldDeviceEntry, type WorldServiceEntry, type WorldGuidanceItem, type WorldOperatorGuidance } from "./world.js";
 import { listDevices, lockHardware, registerOperatorEmail, type DeviceInfo, type DeviceListResult, type HardwareLockResult } from "./devices.js";
 import { signChallenge, verifyPeerIdentity, PeerVerificationError, CertificateChainValidationError, SignatureVerificationError, MissingIdentityCertificateError, type IdentityProofBundle, type VerifiedPeerIdentity } from "./verify.js";
+import { prepareAttestation, prepare_direct_hardware_attestation, compute_rfc_message_binding_nonce, canonicalise_headers_for_message_binding, canonicalise_headers_for_direct_attestation, canonicalise_body_using_dkim_simple, canonicalise_header_value_using_dkim_relaxed, canonicalise_header_name_using_dkim_relaxed, compute_attestation_digest_for_direct_mode, build_cms_signed_data_for_direct_attestation, type AttestationProof, type PrepareAttestationOptions, type DirectAttestationProof } from "./attestation.js";
 import { refresh_trust_roots, get_trust_roots } from "./trustRoots.js";
 import { generateConsentToken, listCredentialPointers, setCredentialPointerVisibility, removeCredentialPointer, type ConsentTokenResult, type CredentialPointerInfo, type CredentialPointerListResult } from "./credentialPointers.js";
 export { OneIDError, EnrollmentError, NoHSMError, UACDeniedError, HSMAccessError, TPMSetupRequiredError, AlreadyEnrolledError, HandleTakenError, HandleInvalidError, HandleRetiredError, AuthenticationError, HardwareDeviceNotPresentError, NetworkError, NotEnrolledError, BinaryNotFoundError, RateLimitExceededError, } from "./exceptions.js";
@@ -32,6 +33,7 @@ export { type WorldStatus, type WorldIdentitySection, type WorldDeviceEntry, typ
 export { type DeviceInfo, type DeviceListResult, type HardwareLockResult, };
 export { signChallenge, verifyPeerIdentity, refresh_trust_roots, get_trust_roots, PeerVerificationError, CertificateChainValidationError, SignatureVerificationError, MissingIdentityCertificateError, type IdentityProofBundle, type VerifiedPeerIdentity, };
 export { generateConsentToken, listCredentialPointers, setCredentialPointerVisibility, removeCredentialPointer, type ConsentTokenResult, type CredentialPointerInfo, type CredentialPointerListResult, };
+export { prepareAttestation, prepare_direct_hardware_attestation, compute_rfc_message_binding_nonce, canonicalise_headers_for_message_binding, canonicalise_headers_for_direct_attestation, canonicalise_body_using_dkim_simple, canonicalise_header_value_using_dkim_relaxed, canonicalise_header_name_using_dkim_relaxed, compute_attestation_digest_for_direct_mode, build_cms_signed_data_for_direct_attestation, type AttestationProof, type PrepareAttestationOptions, type DirectAttestationProof, };
 /** SDK version string. */
 export declare const VERSION = "0.8.0";
 /**
@@ -130,6 +132,16 @@ declare const oneid: {
     listCredentialPointers: typeof listCredentialPointers;
     setCredentialPointerVisibility: typeof setCredentialPointerVisibility;
     removeCredentialPointer: typeof removeCredentialPointer;
+    prepareAttestation: typeof prepareAttestation;
+    prepare_direct_hardware_attestation: typeof prepare_direct_hardware_attestation;
+    compute_rfc_message_binding_nonce: typeof compute_rfc_message_binding_nonce;
+    canonicalise_headers_for_message_binding: typeof canonicalise_headers_for_message_binding;
+    canonicalise_headers_for_direct_attestation: typeof canonicalise_headers_for_direct_attestation;
+    canonicalise_body_using_dkim_simple: typeof canonicalise_body_using_dkim_simple;
+    canonicalise_header_value_using_dkim_relaxed: typeof canonicalise_header_value_using_dkim_relaxed;
+    canonicalise_header_name_using_dkim_relaxed: typeof canonicalise_header_name_using_dkim_relaxed;
+    compute_attestation_digest_for_direct_mode: typeof compute_attestation_digest_for_direct_mode;
+    build_cms_signed_data_for_direct_attestation: typeof build_cms_signed_data_for_direct_attestation;
     VERSION: string;
     TrustTier: typeof TrustTier;
     KeyAlgorithm: typeof KeyAlgorithm;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACxG,OAAO,EAAE,iBAAiB,EAAsC,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,OAAO,EACP,KAAK,QAAQ,EACb,YAAY,EACZ,KAAK,KAAK,EACV,SAAS,EACT,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,EAClC,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,sBAAsB,EACtB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,qBAAqB,EACrB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EACjC,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,6BAA6B,EAC7B,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,SAAS,EACT,YAAY,EACZ,OAAO,EACP,qBAAqB,EACrB,KAAK,QAAQ,EACb,KAAK,KAAK,EACV,KAAK,aAAa,EAClB,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,GAClC,CAAC;AAGF,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,sBAAsB,GACvB,CAAC;AAGF,OAAO,EACL,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,CAAC;AAGF,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,CAAC;AAGF,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,CAAC;AAEF,0BAA0B;AAC1B,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B;;;;;;;GAOG;AACH,wBAAgB,MAAM,IAAI,QAAQ,CAoDjC;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,QAAQ,CAAC,CAqBnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAEnD;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,IAAI,IAAI,CAE9B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAIlD;AAGD,OAAO,EACL,MAAM,EACN,SAAS,IAAI,QAAQ,EACrB,SAAS,EACT,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,YAAY,EACZ,qBAAqB,GACtB,CAAC;AAEF,QAAA,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCV,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACxG,OAAO,EAAE,iBAAiB,EAAsC,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,OAAO,EACP,KAAK,QAAQ,EACb,YAAY,EACZ,KAAK,KAAK,EACV,SAAS,EACT,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,EAClC,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,sBAAsB,EACtB,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,qBAAqB,EACrB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,mCAAmC,EACnC,iCAAiC,EACjC,wCAAwC,EACxC,2CAA2C,EAC3C,mCAAmC,EACnC,4CAA4C,EAC5C,2CAA2C,EAC3C,0CAA0C,EAC1C,4CAA4C,EAC5C,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EACjC,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EACL,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,6BAA6B,EAC7B,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,SAAS,EACT,YAAY,EACZ,OAAO,EACP,qBAAqB,EACrB,KAAK,QAAQ,EACb,KAAK,KAAK,EACV,KAAK,aAAa,EAClB,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,GAClC,CAAC;AAGF,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,sBAAsB,GACvB,CAAC;AAGF,OAAO,EACL,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,GACxB,CAAC;AAGF,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,CAAC;AAGF,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,GACjC,CAAC;AAGF,OAAO,EACL,kBAAkB,EAClB,mCAAmC,EACnC,iCAAiC,EACjC,wCAAwC,EACxC,2CAA2C,EAC3C,mCAAmC,EACnC,4CAA4C,EAC5C,2CAA2C,EAC3C,0CAA0C,EAC1C,4CAA4C,EAC5C,KAAK,gBAAgB,EACrB,KAAK,yBAAyB,EAC9B,KAAK,sBAAsB,GAC5B,CAAC;AAEF,0BAA0B;AAC1B,eAAO,MAAM,OAAO,UAAU,CAAC;AAE/B;;;;;;;GAOG;AACH,wBAAgB,MAAM,IAAI,QAAQ,CAoDjC;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,CAAC,EAAE,0BAA0B,GACnC,OAAO,CAAC,QAAQ,CAAC,CAqBnB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAEnD;AAED;;;;;GAKG;AACH,wBAAgB,OAAO,IAAI,IAAI,CAE9B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAIlD;AAGD,OAAO,EACL,MAAM,EACN,SAAS,IAAI,QAAQ,EACrB,SAAS,EACT,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,YAAY,EACZ,qBAAqB,GACtB,CAAC;AAEF,QAAA,MAAM,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CV,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/index.js

@@ -24,6 +24,7 @@ import { DEFAULT_KEY_ALGORITHM, HSMType, KeyAlgorithm, TrustTier, this_token_has
 import { fetch_world_status_from_server, invalidate_world_cache, } from "./world.js";
 import { listDevices, lockHardware, registerOperatorEmail, } from "./devices.js";
 import { signChallenge, verifyPeerIdentity, PeerVerificationError, CertificateChainValidationError, SignatureVerificationError, MissingIdentityCertificateError, } from "./verify.js";
+import { prepareAttestation, prepare_direct_hardware_attestation, compute_rfc_message_binding_nonce, canonicalise_headers_for_message_binding, canonicalise_headers_for_direct_attestation, canonicalise_body_using_dkim_simple, canonicalise_header_value_using_dkim_relaxed, canonicalise_header_name_using_dkim_relaxed, compute_attestation_digest_for_direct_mode, build_cms_signed_data_for_direct_attestation, } from "./attestation.js";
 import { refresh_trust_roots, get_trust_roots } from "./trustRoots.js";
 import { generateConsentToken, listCredentialPointers, setCredentialPointerVisibility, removeCredentialPointer, } from "./credentialPointers.js";
 // Re-export all exception classes
@@ -36,6 +37,8 @@ export { invalidate_world_cache, };
 export { signChallenge, verifyPeerIdentity, refresh_trust_roots, get_trust_roots, PeerVerificationError, CertificateChainValidationError, SignatureVerificationError, MissingIdentityCertificateError, };
 // Re-export credential pointer functions and types
 export { generateConsentToken, listCredentialPointers, setCredentialPointerVisibility, removeCredentialPointer, };
+// Re-export attestation functions and types
+export { prepareAttestation, prepare_direct_hardware_attestation, compute_rfc_message_binding_nonce, canonicalise_headers_for_message_binding, canonicalise_headers_for_direct_attestation, canonicalise_body_using_dkim_simple, canonicalise_header_value_using_dkim_relaxed, canonicalise_header_name_using_dkim_relaxed, compute_attestation_digest_for_direct_mode, build_cms_signed_data_for_direct_attestation, };
 /** SDK version string. */
 export const VERSION = "0.8.0";
 /**
@@ -203,6 +206,16 @@ const oneid = {
     listCredentialPointers,
     setCredentialPointerVisibility,
     removeCredentialPointer,
+    prepareAttestation,
+    prepare_direct_hardware_attestation,
+    compute_rfc_message_binding_nonce,
+    canonicalise_headers_for_message_binding,
+    canonicalise_headers_for_direct_attestation,
+    canonicalise_body_using_dkim_simple,
+    canonicalise_header_value_using_dkim_relaxed,
+    canonicalise_header_name_using_dkim_relaxed,
+    compute_attestation_digest_for_direct_mode,
+    build_cms_signed_data_for_direct_attestation,
     VERSION,
     TrustTier,
     KeyAlgorithm,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACxG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAoB,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,MAAM,EAAsB,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,OAAO,EAEP,YAAY,EAEZ,SAAS,EACT,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GAOvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,qBAAqB,GAItB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,GAGhC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,uBAAuB,GAIxB,MAAM,yBAAyB,CAAC;AAEjC,kCAAkC;AAClC,OAAO,EACL,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,6BAA6B,EAC7B,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,4BAA4B;AAC5B,OAAO,EACL,SAAS,EACT,YAAY,EACZ,OAAO,EACP,qBAAqB,EAIrB,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,GAClC,CAAC;AAEF,+BAA+B;AAC/B,OAAO,EAOL,sBAAsB,GACvB,CAAC;AASF,kDAAkD;AAClD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,GAGhC,CAAC;AAEF,mDAAmD;AACnD,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,uBAAuB,GAIxB,CAAC;AAEF,0BAA0B;AAC1B,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IAEjC,qBAAqB;IACrB,IAAI,UAAqB,CAAC;IAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAa,CAAC;IACzD,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,UAAU,GAAG,KAAK,CAAC,UAAuB,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED,wBAAwB;IACxB,IAAI,aAA2B,CAAC;IAChC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAa,CAAC;IACjE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,aAAa,GAAG,KAAK,CAAC,aAA6B,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,aAAa,GAAG,qBAAqB,CAAC;IACxC,CAAC;IAED,oBAAoB;IACpB,IAAI,WAAiB,CAAC;IACtB,IAAI,CAAC;QACH,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;IAE7E,sCAAsC;IACtC,IAAI,QAAQ,GAAmB,IAAI,CAAC;IACpC,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QAClC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,CAAC;SAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;QAC3C,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;IACzB,CAAC;IAED,OAAO;QACL,WAAW;QACX,MAAM;QACN,UAAU;QACV,QAAQ;QACR,gBAAgB,EAAE,IAAI;QACtB,WAAW;QACX,YAAY,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,aAAa;QACb,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACpD,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAoC;IAEpC,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACxB,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC1E,MAAM,IAAI,WAAW,CACnB,yCAAyC;YACzC,iEAAiE;YACjE,yDAAyD;YACzD,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;QACZ,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI;QAC3C,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,IAAI;QAC/C,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,IAAI,IAAI;QACnD,YAAY,EAAE,OAAO,EAAE,YAAY;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,OAAO,8BAA8B,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO;IACrB,kBAAkB,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,EAAE,kCAAkC,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,kCAAkC,EAAE,CAAC;IAC1D,OAAQ,MAAM,CAAC,EAAc,IAAI,KAAK,CAAC;AACzC,CAAC;AAED,2BAA2B;AAC3B,OAAO,EACL,MAAM,EACN,SAAS,IAAI,QAAQ,EACrB,SAAS,EACT,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,YAAY,EACZ,qBAAqB,GACtB,CAAC;AAEF,MAAM,KAAK,GAAG;IACZ,MAAM;IACN,mBAAmB;IACnB,MAAM;IACN,QAAQ,EAAE,SAAS;IACnB,SAAS;IACT,MAAM;IACN,OAAO;IACP,SAAS;IACT,iBAAiB;IACjB,qBAAqB;IACrB,qBAAqB;IACrB,+BAA+B;IAC/B,kBAAkB;IAClB,iCAAiC;IACjC,sBAAsB;IACtB,WAAW;IACX,YAAY;IACZ,qBAAqB;IACrB,aAAa;IACb,kBAAkB;IAClB,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,sBAAsB;IACtB,8BAA8B;IAC9B,uBAAuB;IACvB,OAAO;IACP,SAAS;IACT,YAAY;IACZ,OAAO;IACP,qBAAqB;CACtB,CAAC;AAEF,eAAe,KAAK,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,SAAS,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AACxG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAoB,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,MAAM,EAAsB,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,OAAO,EAEP,YAAY,EAEZ,SAAS,EACT,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,GAClC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,8BAA8B,EAC9B,sBAAsB,GAOvB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,WAAW,EACX,YAAY,EACZ,qBAAqB,GAItB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,GAGhC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,mCAAmC,EACnC,iCAAiC,EACjC,wCAAwC,EACxC,2CAA2C,EAC3C,mCAAmC,EACnC,4CAA4C,EAC5C,2CAA2C,EAC3C,0CAA0C,EAC1C,4CAA4C,GAI7C,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,uBAAuB,GAIxB,MAAM,yBAAyB,CAAC;AAEjC,kCAAkC;AAClC,OAAO,EACL,UAAU,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,6BAA6B,EAC7B,YAAY,EACZ,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,4BAA4B;AAC5B,OAAO,EACL,SAAS,EACT,YAAY,EACZ,OAAO,EACP,qBAAqB,EAIrB,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,GAClC,CAAC;AAEF,+BAA+B;AAC/B,OAAO,EAOL,sBAAsB,GACvB,CAAC;AASF,kDAAkD;AAClD,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,qBAAqB,EACrB,+BAA+B,EAC/B,0BAA0B,EAC1B,+BAA+B,GAGhC,CAAC;AAEF,mDAAmD;AACnD,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,uBAAuB,GAIxB,CAAC;AAEF,4CAA4C;AAC5C,OAAO,EACL,kBAAkB,EAClB,mCAAmC,EACnC,iCAAiC,EACjC,wCAAwC,EACxC,2CAA2C,EAC3C,mCAAmC,EACnC,4CAA4C,EAC5C,2CAA2C,EAC3C,0CAA0C,EAC1C,4CAA4C,GAI7C,CAAC;AAEF,0BAA0B;AAC1B,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM;IACpB,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IAEjC,qBAAqB;IACrB,IAAI,UAAqB,CAAC;IAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAa,CAAC;IACzD,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,UAAU,GAAG,KAAK,CAAC,UAAuB,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC;IAClC,CAAC;IAED,wBAAwB;IACxB,IAAI,aAA2B,CAAC;IAChC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAa,CAAC;IACjE,IAAI,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QACnD,aAAa,GAAG,KAAK,CAAC,aAA6B,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,aAAa,GAAG,qBAAqB,CAAC;IACxC,CAAC;IAED,oBAAoB;IACpB,IAAI,WAAiB,CAAC;IACtB,IAAI,CAAC;QACH,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC;IACpC,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;IAE7E,sCAAsC;IACtC,IAAI,QAAQ,GAAmB,IAAI,CAAC;IACpC,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QAClC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,CAAC;SAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC;QAC3C,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;IACzB,CAAC;IAED,OAAO;QACL,WAAW;QACX,MAAM;QACN,UAAU;QACV,QAAQ;QACR,gBAAgB,EAAE,IAAI;QACtB,WAAW;QACX,YAAY,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,aAAa;QACb,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;QACpD,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;KACzC,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAoC;IAEpC,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACxB,OAAO,MAAM,EAAE,CAAC;IAClB,CAAC;IAED,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACtB,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC1E,MAAM,IAAI,WAAW,CACnB,yCAAyC;YACzC,iEAAiE;YACjE,yDAAyD;YACzD,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;QACZ,YAAY,EAAE,OAAO,EAAE,YAAY,IAAI,IAAI;QAC3C,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,IAAI;QAC/C,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,IAAI,IAAI;QACnD,YAAY,EAAE,OAAO,EAAE,YAAY;KACpC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,OAAO,8BAA8B,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO;IACrB,kBAAkB,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS;IAC7B,MAAM,EAAE,kCAAkC,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,MAAM,kCAAkC,EAAE,CAAC;IAC1D,OAAQ,MAAM,CAAC,EAAc,IAAI,KAAK,CAAC;AACzC,CAAC;AAED,2BAA2B;AAC3B,OAAO,EACL,MAAM,EACN,SAAS,IAAI,QAAQ,EACrB,SAAS,EACT,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,+BAA+B,EAC/B,WAAW,EACX,YAAY,EACZ,qBAAqB,GACtB,CAAC;AAEF,MAAM,KAAK,GAAG;IACZ,MAAM;IACN,mBAAmB;IACnB,MAAM;IACN,QAAQ,EAAE,SAAS;IACnB,SAAS;IACT,MAAM;IACN,OAAO;IACP,SAAS;IACT,iBAAiB;IACjB,qBAAqB;IACrB,qBAAqB;IACrB,+BAA+B;IAC/B,kBAAkB;IAClB,iCAAiC;IACjC,sBAAsB;IACtB,WAAW;IACX,YAAY;IACZ,qBAAqB;IACrB,aAAa;IACb,kBAAkB;IAClB,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,sBAAsB;IACtB,8BAA8B;IAC9B,uBAAuB;IACvB,kBAAkB;IAClB,mCAAmC;IACnC,iCAAiC;IACjC,wCAAwC;IACxC,2CAA2C;IAC3C,mCAAmC;IACnC,4CAA4C;IAC5C,2CAA2C;IAC3C,0CAA0C;IAC1C,4CAA4C;IAC5C,OAAO;IACP,SAAS;IACT,YAAY;IACZ,OAAO;IACP,qBAAqB;CACtB,CAAC;AAEF,eAAe,KAAK,CAAC"}

package/dist/test/test_attestation.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Unit tests for the attestation module (DKIM canonicalization + RFC nonce).
+ *
+ * Pure function tests -- no network calls, no credential files.
+ * Uses Node.js built-in test runner (node --test).
+ */
+export {};
+//# sourceMappingURL=test_attestation.d.ts.map

package/dist/test/test_attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test_attestation.d.ts","sourceRoot":"","sources":["../../src/test/test_attestation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/test/test_attestation.js

@@ -0,0 +1,200 @@
+/**
+ * Unit tests for the attestation module (DKIM canonicalization + RFC nonce).
+ *
+ * Pure function tests -- no network calls, no credential files.
+ * Uses Node.js built-in test runner (node --test).
+ */
+import { describe, it } from "node:test";
+import { strict as assert } from "node:assert";
+import { createHash } from "node:crypto";
+import { canonicalise_header_value_using_dkim_relaxed, canonicalise_header_name_using_dkim_relaxed, canonicalise_headers_for_message_binding, canonicalise_body_using_dkim_simple, compute_rfc_message_binding_nonce, } from "../attestation.js";
+const _SAMPLE_EMAIL_HEADERS = {
+    "From": "agent@mailpal.com",
+    "To": "bob@example.com",
+    "Subject": "Test Subject",
+    "Date": "Thu, 19 Mar 2026 12:00:00 +0000",
+    "Message-ID": "<test-001@mailpal.com>",
+};
+describe("DKIM relaxed header name canonicalization (RFC 6376 Section 3.4.2)", () => {
+    it("lowercases header names", () => {
+        assert.equal(canonicalise_header_name_using_dkim_relaxed("From"), "from");
+        assert.equal(canonicalise_header_name_using_dkim_relaxed("MESSAGE-ID"), "message-id");
+        assert.equal(canonicalise_header_name_using_dkim_relaxed("Content-Type"), "content-type");
+    });
+    it("strips leading and trailing whitespace from names", () => {
+        assert.equal(canonicalise_header_name_using_dkim_relaxed("  Subject  "), "subject");
+        assert.equal(canonicalise_header_name_using_dkim_relaxed("\tDate\t"), "date");
+    });
+});
+describe("DKIM relaxed header value canonicalization (RFC 6376 Section 3.4.2)", () => {
+    it("compresses interior whitespace runs to single space", () => {
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("hello   world"), "hello world");
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("a\t\tb"), "a b");
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("x  \t  y"), "x y");
+    });
+    it("strips trailing whitespace", () => {
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("value   "), "value");
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("value\t"), "value");
+    });
+    it("strips leading whitespace", () => {
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("   value"), "value");
+    });
+    it("unfolds CRLF-continuation lines", () => {
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("line1\r\n continuation"), "line1 continuation");
+    });
+    it("unfolds LF-only continuation lines", () => {
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("line1\n continuation"), "line1 continuation");
+    });
+    it("unfolds tab-continuation lines", () => {
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("line1\r\n\tcontinuation"), "line1 continuation");
+    });
+    it("passes through simple values unchanged", () => {
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("simple"), "simple");
+        assert.equal(canonicalise_header_value_using_dkim_relaxed("agent@mailpal.com"), "agent@mailpal.com");
+    });
+});
+describe("DKIM simple body canonicalization (RFC 6376 Section 3.4.3)", () => {
+    it("returns single CRLF for empty body", () => {
+        assert.deepEqual(canonicalise_body_using_dkim_simple(Buffer.alloc(0)), Buffer.from("\r\n"));
+    });
+    it("strips trailing empty lines (multiple CRLF)", () => {
+        assert.deepEqual(canonicalise_body_using_dkim_simple(Buffer.from("text\r\n\r\n\r\n")), Buffer.from("text\r\n"));
+    });
+    it("appends CRLF if missing from non-empty body", () => {
+        assert.deepEqual(canonicalise_body_using_dkim_simple(Buffer.from("text")), Buffer.from("text\r\n"));
+    });
+    it("preserves body already ending with single CRLF", () => {
+        assert.deepEqual(canonicalise_body_using_dkim_simple(Buffer.from("body text\r\n")), Buffer.from("body text\r\n"));
+    });
+    it("preserves interior empty lines while stripping only trailing ones", () => {
+        const input = Buffer.from("line1\r\n\r\nline3\r\n\r\n\r\n");
+        const expected = Buffer.from("line1\r\n\r\nline3\r\n");
+        assert.deepEqual(canonicalise_body_using_dkim_simple(input), expected);
+    });
+});
+describe("canonicalise_headers_for_message_binding", () => {
+    it("throws when required headers are missing", () => {
+        assert.throws(() => canonicalise_headers_for_message_binding({ "From": "a@b.com" }), { message: /Missing required email header/ });
+    });
+    it("produces a Buffer with all required headers", () => {
+        const result = canonicalise_headers_for_message_binding(_SAMPLE_EMAIL_HEADERS);
+        assert.ok(Buffer.isBuffer(result));
+        const decoded = result.toString("utf-8");
+        assert.ok(decoded.includes("from:agent@mailpal.com\r\n"));
+        assert.ok(decoded.includes("to:bob@example.com\r\n"));
+        assert.ok(decoded.includes("subject:Test Subject\r\n"));
+        assert.ok(decoded.includes("date:Thu, 19 Mar 2026 12:00:00 +0000\r\n"));
+        assert.ok(decoded.includes("message-id:<test-001@mailpal.com>\r\n"));
+    });
+    it("appends Hardware-Trust-Proof as last header without trailing CRLF", () => {
+        const result = canonicalise_headers_for_message_binding(_SAMPLE_EMAIL_HEADERS);
+        const decoded = result.toString("utf-8");
+        assert.ok(decoded.endsWith("hardware-trust-proof:"));
+        assert.ok(!decoded.endsWith("hardware-trust-proof:\r\n"));
+    });
+    it("includes a placeholder value for Hardware-Trust-Proof when provided", () => {
+        const result = canonicalise_headers_for_message_binding(_SAMPLE_EMAIL_HEADERS, "placeholder-jwt-value");
+        const decoded = result.toString("utf-8");
+        assert.ok(decoded.endsWith("hardware-trust-proof:placeholder-jwt-value"));
+    });
+    it("excludes Hardware-Trust-Proof from input headers (it is always appended last)", () => {
+        const headers_with_htp = {
+            ..._SAMPLE_EMAIL_HEADERS,
+            "Hardware-Trust-Proof": "should-be-excluded-from-sorted-section",
+        };
+        const result = canonicalise_headers_for_message_binding(headers_with_htp);
+        const decoded = result.toString("utf-8");
+        const htp_occurrences = decoded.split("hardware-trust-proof:").length - 1;
+        assert.equal(htp_occurrences, 1, "Hardware-Trust-Proof should appear exactly once (appended)");
+    });
+    it("sorts extra headers alphabetically after the required five", () => {
+        const headers_with_extras = {
+            ..._SAMPLE_EMAIL_HEADERS,
+            "X-Zebra": "last-extra",
+            "X-Alpha": "first-extra",
+        };
+        const result = canonicalise_headers_for_message_binding(headers_with_extras);
+        const decoded = result.toString("utf-8");
+        const alpha_position = decoded.indexOf("x-alpha:");
+        const zebra_position = decoded.indexOf("x-zebra:");
+        assert.ok(alpha_position < zebra_position, "x-alpha should come before x-zebra");
+        const htp_position = decoded.indexOf("hardware-trust-proof:");
+        assert.ok(zebra_position < htp_position, "extras should come before hardware-trust-proof");
+    });
+    it("is case-insensitive for input header keys", () => {
+        const mixed_case_headers = {
+            "FROM": "agent@mailpal.com",
+            "to": "bob@example.com",
+            "Subject": "Test Subject",
+            "DATE": "Thu, 19 Mar 2026 12:00:00 +0000",
+            "message-id": "<test-001@mailpal.com>",
+        };
+        const result_mixed = canonicalise_headers_for_message_binding(mixed_case_headers);
+        const result_original = canonicalise_headers_for_message_binding(_SAMPLE_EMAIL_HEADERS);
+        assert.deepEqual(result_mixed, result_original);
+    });
+});
+describe("compute_rfc_message_binding_nonce (RFC Section 5.3)", () => {
+    it("produces a base64url string without padding", () => {
+        const nonce = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("Hello, world!\r\n"), 1711022400);
+        assert.equal(typeof nonce, "string");
+        assert.ok(!nonce.includes("="), "no padding");
+        assert.ok(!nonce.includes("+"), "no + (base64url uses - instead)");
+        assert.ok(!nonce.includes("/"), "no / (base64url uses _ instead)");
+    });
+    it("produces exactly 43 characters (base64url of SHA-256)", () => {
+        const nonce = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("test body"), 1711022400);
+        assert.equal(nonce.length, 43);
+    });
+    it("is deterministic for identical inputs", () => {
+        const nonce_first = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("Same body"), 1711022400);
+        const nonce_second = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("Same body"), 1711022400);
+        assert.equal(nonce_first, nonce_second);
+    });
+    it("differs when body changes", () => {
+        const nonce_a = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("Body A"), 1711022400);
+        const nonce_b = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("Body B"), 1711022400);
+        assert.notEqual(nonce_a, nonce_b);
+    });
+    it("differs when headers change", () => {
+        const headers_a = { ..._SAMPLE_EMAIL_HEADERS, Subject: "Subject A" };
+        const headers_b = { ..._SAMPLE_EMAIL_HEADERS, Subject: "Subject B" };
+        const nonce_a = compute_rfc_message_binding_nonce(headers_a, Buffer.from("Same body"), 1711022400);
+        const nonce_b = compute_rfc_message_binding_nonce(headers_b, Buffer.from("Same body"), 1711022400);
+        assert.notEqual(nonce_a, nonce_b);
+    });
+    it("differs when timestamp changes", () => {
+        const nonce_a = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("Same body"), 1711022400);
+        const nonce_b = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("Same body"), 1711022401);
+        assert.notEqual(nonce_a, nonce_b);
+    });
+    it("matches manual RFC Section 5.3 computation", () => {
+        const body_bytes = Buffer.from("Hello, world!\r\n");
+        const iat = 1711022400;
+        const canonicalised_header_bytes = canonicalise_headers_for_message_binding(_SAMPLE_EMAIL_HEADERS);
+        const h_hash = createHash("sha256").update(canonicalised_header_bytes).digest();
+        const canonicalised_body = canonicalise_body_using_dkim_simple(body_bytes);
+        const bh_raw = createHash("sha256").update(canonicalised_body).digest();
+        const ts_bytes = Buffer.alloc(8);
+        ts_bytes.writeBigUInt64BE(BigInt(iat));
+        const message_binding = Buffer.concat([h_hash, bh_raw, ts_bytes]);
+        const expected_nonce = createHash("sha256").update(message_binding).digest().toString("base64url");
+        const actual_nonce = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, body_bytes, iat);
+        assert.equal(actual_nonce, expected_nonce);
+    });
+    it("handles large timestamps (year 2100+)", () => {
+        const far_future_iat = 4102444800;
+        const nonce = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("future body"), far_future_iat);
+        assert.equal(nonce.length, 43);
+        assert.equal(typeof nonce, "string");
+    });
+    it("handles zero timestamp", () => {
+        const nonce = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("epoch body"), 0);
+        assert.equal(nonce.length, 43);
+    });
+    it("handles unicode body content", () => {
+        const nonce = compute_rfc_message_binding_nonce(_SAMPLE_EMAIL_HEADERS, Buffer.from("Hello \u{1F600} world \u00E9\u00E8\u00EA"), 1711022400);
+        assert.equal(nonce.length, 43);
+    });
+});
+//# sourceMappingURL=test_attestation.js.map

package/dist/test/test_attestation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test_attestation.js","sourceRoot":"","sources":["../../src/test/test_attestation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,4CAA4C,EAC5C,2CAA2C,EAC3C,wCAAwC,EACxC,mCAAmC,EACnC,iCAAiC,GAClC,MAAM,mBAAmB,CAAC;AAE3B,MAAM,qBAAqB,GAA2B;IACpD,MAAM,EAAE,mBAAmB;IAC3B,IAAI,EAAE,iBAAiB;IACvB,SAAS,EAAE,cAAc;IACzB,MAAM,EAAE,iCAAiC;IACzC,YAAY,EAAE,wBAAwB;CACvC,CAAC;AAEF,QAAQ,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAClF,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,CAAC;QACtF,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,2CAA2C,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qEAAqE,EAAE,GAAG,EAAE;IACnF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,eAAe,CAAC,EAAE,aAAa,CAAC,CAAC;QAC3F,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QAChF,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,KAAK,CACV,4CAA4C,CAAC,wBAAwB,CAAC,EACtE,oBAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,KAAK,CACV,4CAA4C,CAAC,sBAAsB,CAAC,EACpE,oBAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,KAAK,CACV,4CAA4C,CAAC,yBAAyB,CAAC,EACvE,oBAAoB,CACrB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC/E,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4DAA4D,EAAE,GAAG,EAAE;IAC1E,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,SAAS,CAAC,mCAAmC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,SAAS,CACd,mCAAmC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,EACpE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,SAAS,CACd,mCAAmC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EACxD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,SAAS,CACd,mCAAmC,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EACjE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACvD,MAAM,CAAC,SAAS,CAAC,mCAAmC,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,wCAAwC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EACrE,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,wCAAwC,CAAC,qBAAqB,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACxD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,wCAAwC,CAAC,qBAAqB,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACrD,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,MAAM,GAAG,wCAAwC,CACrD,qBAAqB,EACrB,uBAAuB,CACxB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,gBAAgB,GAAG;YACvB,GAAG,qBAAqB;YACxB,sBAAsB,EAAE,wCAAwC;SACjE,CAAC;QACF,MAAM,MAAM,GAAG,wCAAwC,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1E,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,EAAE,4DAA4D,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,mBAAmB,GAAG;YAC1B,GAAG,qBAAqB;YACxB,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,aAAa;SACzB,CAAC;QACF,MAAM,MAAM,GAAG,wCAAwC,CAAC,mBAAmB,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,cAAc,GAAG,cAAc,EAAE,oCAAoC,CAAC,CAAC;QACjF,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC9D,MAAM,CAAC,EAAE,CAAC,cAAc,GAAG,YAAY,EAAE,gDAAgD,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,kBAAkB,GAA2B;YACjD,MAAM,EAAE,mBAAmB;YAC3B,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,cAAc;YACzB,MAAM,EAAE,iCAAiC;YACzC,YAAY,EAAE,wBAAwB;SACvC,CAAC;QACF,MAAM,YAAY,GAAG,wCAAwC,CAAC,kBAAkB,CAAC,CAAC;QAClF,MAAM,eAAe,GAAG,wCAAwC,CAAC,qBAAqB,CAAC,CAAC;QACxF,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qDAAqD,EAAE,GAAG,EAAE;IACnE,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,KAAK,GAAG,iCAAiC,CAC7C,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAChC,UAAU,CACX,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;QAC9C,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,iCAAiC,CAAC,CAAC;QACnE,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,iCAAiC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,KAAK,GAAG,iCAAiC,CAC7C,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EACxB,UAAU,CACX,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,WAAW,GAAG,iCAAiC,CACnD,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EACxB,UAAU,CACX,CAAC;QACF,MAAM,YAAY,GAAG,iCAAiC,CACpD,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EACxB,UAAU,CACX,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,OAAO,GAAG,iCAAiC,CAC/C,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EACrB,UAAU,CACX,CAAC;QACF,MAAM,OAAO,GAAG,iCAAiC,CAC/C,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EACrB,UAAU,CACX,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,SAAS,GAAG,EAAE,GAAG,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACrE,MAAM,SAAS,GAAG,EAAE,GAAG,qBAAqB,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,iCAAiC,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC,CAAC;QACnG,MAAM,OAAO,GAAG,iCAAiC,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC,CAAC;QACnG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,OAAO,GAAG,iCAAiC,CAC/C,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EACxB,UAAU,CACX,CAAC;QACF,MAAM,OAAO,GAAG,iCAAiC,CAC/C,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EACxB,UAAU,CACX,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,UAAU,CAAC;QAEvB,MAAM,0BAA0B,GAAG,wCAAwC,CAAC,qBAAqB,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,MAAM,EAAE,CAAC;QAEhF,MAAM,kBAAkB,GAAG,mCAAmC,CAAC,UAAU,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,CAAC;QAExE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAEvC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAEnG,MAAM,YAAY,GAAG,iCAAiC,CACpD,qBAAqB,EACrB,UAAU,EACV,GAAG,CACJ,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,cAAc,GAAG,UAAU,CAAC;QAClC,MAAM,KAAK,GAAG,iCAAiC,CAC7C,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAC1B,cAAc,CACf,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,KAAK,GAAG,iCAAiC,CAC7C,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EACzB,CAAC,CACF,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,iCAAiC,CAC7C,qBAAqB,EACrB,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,EACvD,UAAU,CACX,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verify.d.ts

@@ -13,6 +13,7 @@
  * No secrets are exchanged. The verifier never contacts 1ID. Once the
  * trust root is cached locally, verification is entirely offline.
  */
+import { type StoredCredentials } from "./credentials.js";
 import { OneIDError } from "./exceptions.js";
 export declare class PeerVerificationError extends OneIDError {
     constructor(message: string, error_code?: string);
@@ -40,6 +41,7 @@ export interface VerifiedPeerIdentity {
     hardware_locked: boolean;
     chain_valid: boolean;
 }
+export declare function determine_signing_algorithm_name(creds: StoredCredentials): string;
 /**
  * Sign a verifier-provided nonce and assemble a proof bundle.
  *

package/dist/verify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,OAAO,EAAoB,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAQ/D,qBAAa,qBAAsB,SAAQ,UAAU;gBACvC,OAAO,EAAE,MAAM,EAAE,UAAU,GAAE,MAAkC;CAI5E;AAED,qBAAa,+BAAgC,SAAQ,qBAAqB;gBAC5D,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,0BAA2B,SAAQ,qBAAqB;gBACvD,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,+BAAgC,SAAQ,qBAAqB;gBAC5D,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;CACtB;AA+BD;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0CrF;AAwJD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,mBAAmB,EACjC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAsD/B"}
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAoB,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAQ/D,qBAAa,qBAAsB,SAAQ,UAAU;gBACvC,OAAO,EAAE,MAAM,EAAE,UAAU,GAAE,MAAkC;CAI5E;AAED,qBAAa,+BAAgC,SAAQ,qBAAqB;gBAC5D,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,0BAA2B,SAAQ,qBAAqB;gBACvD,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,+BAAgC,SAAQ,qBAAqB;gBAC5D,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAOjF;AAuCD;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAiDrF;AAwJD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,mBAAmB,EACjC,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAsD/B"}

package/dist/verify.js

@@ -45,7 +45,7 @@ export class MissingIdentityCertificateError extends PeerVerificationError {
         this.name = "MissingIdentityCertificateError";
     }
 }
-function determine_signing_algorithm_name(creds) {
+export function determine_signing_algorithm_name(creds) {
     const algo = (creds.key_algorithm ?? "").toLowerCase();
     if (algo.includes("ed25519")) {
         return "EdDSA";
@@ -79,6 +79,17 @@ async function sign_with_piv(nonce_bytes) {
     const algorithm = algorithm_raw.toUpperCase().includes("ECDSA") ? "ES256" : algorithm_raw;
     return { signature_bytes: Buffer.from(signature_b64, "base64"), algorithm };
 }
+async function sign_with_enclave(nonce_bytes, enclave_key_data_representation_b64) {
+    const { sign_challenge_with_enclave } = await import("./helper.js");
+    const { restore_enclave_key_file_from_credentials_if_missing } = await import("./enroll.js");
+    if (enclave_key_data_representation_b64) {
+        restore_enclave_key_file_from_credentials_if_missing(enclave_key_data_representation_b64);
+    }
+    const nonce_b64 = nonce_bytes.toString("base64");
+    const result = await sign_challenge_with_enclave(nonce_b64);
+    const signature_b64 = result["signature_b64"] ?? "";
+    return { signature_bytes: Buffer.from(signature_b64, "base64"), algorithm: "ES256" };
+}
 /**
  * Sign a verifier-provided nonce and assemble a proof bundle.
  *
@@ -112,6 +123,11 @@ export async function signChallenge(nonce_bytes) {
         signature_bytes = result.signature_bytes;
         algorithm = result.algorithm;
     }
+    else if (trust_tier === "enclave") {
+        const result = await sign_with_enclave(nonce_bytes, creds.enclave_key_data_representation_b64);
+        signature_bytes = result.signature_bytes;
+        algorithm = result.algorithm;
+    }
     else if (creds.private_key_pem) {
         signature_bytes = sign_challenge_with_private_key(creds.private_key_pem, nonce_bytes);
         algorithm = determine_signing_algorithm_name(creds);
@@ -300,7 +316,7 @@ export async function verifyPeerIdentity(nonce_bytes, proof_bundle, api_base_url
     // Try to extract agent_id from SAN URI
     let verified_agent_id = proof_bundle.agent_id;
     const san_string = leaf_cert.subjectAltName ?? "";
-    const uri_match = san_string.match(/URI:urn:oneid:agent:([^\s,]+)/);
+    const uri_match = san_string.match(/URI:urn:aid:[^:]+:([^\s,]+)/);
     if (uri_match) {
         verified_agent_id = uri_match[1];
     }

package/dist/verify.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAA0B,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,MAAM,iBAAiB,CAAC;AAEtF,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AACrD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AACtD,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAE1D,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IACnD,YAAY,OAAe,EAAE,aAAqB,yBAAyB;QACzE,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,qBAAqB;IACxE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,oCAAoC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,qBAAqB;IACnE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,qBAAqB;IACxE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAkBD,SAAS,gCAAgC,CAAC,KAAwB;IAChE,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IACvG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IAC1H,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,SAAiB;IACjE,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,aAAa,GAAI,MAAM,CAAC,eAAe,CAAY,IAAI,EAAE,CAAC;IAChE,MAAM,aAAa,GAAI,MAAM,CAAC,WAAW,CAAY,IAAI,eAAe,CAAC;IACzE,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;IACxF,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,WAAmB;IAC9C,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GAAI,MAAM,CAAC,eAAe,CAAY,IAAI,EAAE,CAAC;IAChE,MAAM,aAAa,GAAI,MAAM,CAAC,WAAW,CAAY,IAAI,cAAc,CAAC;IACxE,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;IAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB;IACrD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IAEjC,IAAI,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC;QAC1C,MAAM,IAAI,+BAA+B,CACvC,sDAAsD;YACtD,qEAAqE;YACrE,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC;IAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;IACjC,IAAI,eAAuB,CAAC;IAC5B,IAAI,SAAiB,CAAC;IAEtB,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC/F,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC3D,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACzC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;SAAM,IAAI,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,iBAAiB,KAAK,aAAa,EAAE,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QAChD,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACzC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;SAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACjC,eAAe,GAAG,+BAA+B,CAAC,KAAK,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QACtF,SAAS,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,gBAAgB,CACxB,mDAAmD;YACnD,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,aAAa,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACjD,qBAAqB,EAAE,KAAK,CAAC,8BAA8B;QAC3D,QAAQ;QACR,UAAU;QACV,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,2CAA2C,CAAC,IAA4B,EAAE,UAAkB;IACnG,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,sEAAsE;IACtE,yDAAyD;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEpD,6CAA6C;IAC7C,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAE,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC1B,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;YACxB,KAAK,KAAK,CAAC,CAAC;YACZ,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBACjC,KAAK,KAAK,CAAC,CAAC;YACd,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,iBAAiB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAElD,oCAAoC;IACpC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,OAAO,aAAa,GAAG,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM;QAAC,CAAC;QAE/B,uFAAuF;QACvF,6EAA6E;QAC7E,IAAI,GAAG,GAAG,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC;QACvC,oEAAoE;QACpE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;YACtB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe;gBACjC,GAAG,EAAE,CAAC;gBACN,IAAI,YAAY,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;gBAC7B,GAAG,EAAE,CAAC;gBACN,IAAI,YAAY,GAAG,GAAG,EAAE,CAAC;oBACvB,MAAM,gBAAgB,GAAG,YAAY,GAAG,IAAI,CAAC;oBAC7C,YAAY,GAAG,CAAC,CAAC;oBACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC;wBAC1C,YAAY,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;wBAC/C,GAAG,EAAE,CAAC;oBACR,CAAC;gBACH,CAAC;gBACD,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,YAAY,CAAC,CAAC;YAC/C,CAAC;YACD,gBAAgB;YAChB,GAAG,EAAE,CAAC;YACN,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM;YAAC,CAAC;YACjC,IAAI,WAAW,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;YAC5B,GAAG,EAAE,CAAC;YACN,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC;gBACrC,WAAW,GAAG,CAAC,CAAC;gBAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;oBACnC,WAAW,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;oBAC7C,GAAG,EAAE,CAAC;gBACR,CAAC;YACH,CAAC;YACD,GAAG,IAAI,WAAW,CAAC;YACnB,KAAK,EAAE,CAAC;QACV,CAAC;QAED,aAAa,GAAG,QAAQ,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mCAAmC,CAAC,KAA+B;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,+BAA+B,CACvC,2BAA2B,CAAC,6CAA6C,CAAC,GAAG,CAAC,EAAE,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uCAAuC,CAC9C,KAA+B,EAC/B,aAAuC;IAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,+BAA+B,CAAC,4BAA4B,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC5C,MAAM,sBAAsB,GAAG,UAAU,CAAC,cAAc,CAAC;IAEzD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CACxC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,sBAAsB,CACzD,CAAC;IAEF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,+BAA+B,CACvC,eAAe,UAAU,CAAC,OAAO,0CAA0C,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAAmB,EACnB,eAAuB,EACvB,SAAiC;IAEjC,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAE9C,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,UAAU,CAAC,oBAAoB,EAAE,UAAU,CAAC;QAC/D,MAAM,cAAc,GAAG,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpE,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC/F,CAAC;SAAM,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE;YACxD,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB;SAC5C,EAAE,eAAe,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,0BAA0B,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,0BAA0B,CAClC,kEAAkE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,YAAiC,EACjC,YAAqB;IAErB,MAAM,KAAK,GAAG,kCAAkC,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,+BAA+B,CAAC,iDAAiD,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;IAE1D,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC3C,uCAAuC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAE9D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAE5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,+BAA+B,CACvC,kDAAkD,SAAS,CAAC,SAAS,GAAG,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,+BAA+B,CACvC,4CAA4C,SAAS,CAAC,OAAO,GAAG,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC1E,sBAAsB,CAAC,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IAEhE,sDAAsD;IACtD,MAAM,cAAc,GAAG,2CAA2C,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACpG,MAAM,eAAe,GAAG,2CAA2C,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACtG,MAAM,mBAAmB,GAAG,2CAA2C,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAE9G,MAAM,mBAAmB,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC;IACxG,MAAM,oBAAoB,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAE/F,uCAAuC;IACvC,IAAI,iBAAiB,GAAG,YAAY,CAAC,QAAQ,CAAC;IAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,cAAc,IAAI,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACpE,IAAI,SAAS,EAAE,CAAC;QACd,iBAAiB,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;IACpC,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE,mBAAmB;QAC/B,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,wBAAwB;QACzC,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAA0B,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAE,+BAA+B,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,MAAM,iBAAiB,CAAC;AAEtF,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AACrD,MAAM,qBAAqB,GAAG,uBAAuB,CAAC;AACtD,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAE1D,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IACnD,YAAY,OAAe,EAAE,aAAqB,yBAAyB;QACzE,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,qBAAqB;IACxE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,oCAAoC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,qBAAqB;IACnE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,OAAO,+BAAgC,SAAQ,qBAAqB;IACxE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAkBD,MAAM,UAAU,gCAAgC,CAAC,KAAwB;IACvE,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IACjD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IACvG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IAC1H,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAC,OAAO,OAAO,CAAC;IAAC,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,SAAiB;IACjE,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,aAAa,GAAI,MAAM,CAAC,eAAe,CAAY,IAAI,EAAE,CAAC;IAChE,MAAM,aAAa,GAAI,MAAM,CAAC,WAAW,CAAY,IAAI,eAAe,CAAC;IACzE,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;IACxF,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,WAAmB;IAC9C,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;IACxD,MAAM,aAAa,GAAI,MAAM,CAAC,eAAe,CAAY,IAAI,EAAE,CAAC;IAChE,MAAM,aAAa,GAAI,MAAM,CAAC,WAAW,CAAY,IAAI,cAAc,CAAC;IACxE,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC;IAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC;AAC9E,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,WAAmB,EACnB,mCAA8D;IAE9D,MAAM,EAAE,2BAA2B,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IACpE,MAAM,EAAE,oDAAoD,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAE7F,IAAI,mCAAmC,EAAE,CAAC;QACxC,oDAAoD,CAAC,mCAAmC,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAI,MAAM,CAAC,eAAe,CAAY,IAAI,EAAE,CAAC;IAChE,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,WAAmB;IACrD,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IAEjC,IAAI,CAAC,KAAK,CAAC,8BAA8B,EAAE,CAAC;QAC1C,MAAM,IAAI,+BAA+B,CACvC,sDAAsD;YACtD,qEAAqE;YACrE,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,UAAU,CAAC;IAClD,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;IACjC,IAAI,eAAuB,CAAC;IAC5B,IAAI,SAAiB,CAAC;IAEtB,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QAC/F,MAAM,SAAS,GAAG,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QAC3D,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACzC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;SAAM,IAAI,UAAU,KAAK,UAAU,IAAI,KAAK,CAAC,iBAAiB,KAAK,aAAa,EAAE,CAAC;QAClF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;QAChD,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACzC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;SAAM,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC,WAAW,EACX,KAAK,CAAC,mCAAmC,CAC1C,CAAC;QACF,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QACzC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC/B,CAAC;SAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACjC,eAAe,GAAG,+BAA+B,CAAC,KAAK,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QACtF,SAAS,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,gBAAgB,CACxB,mDAAmD;YACnD,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,aAAa,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACjD,qBAAqB,EAAE,KAAK,CAAC,8BAA8B;QAC3D,QAAQ;QACR,UAAU;QACV,SAAS;KACV,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,2CAA2C,CAAC,IAA4B,EAAE,UAAkB;IACnG,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC;IACpC,sEAAsE;IACtE,yDAAyD;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;IACrB,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEpD,6CAA6C;IAC7C,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,iBAAiB,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAE,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;QAC1B,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;YAChB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;YACxB,KAAK,KAAK,CAAC,CAAC;YACZ,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;gBACjC,KAAK,KAAK,CAAC,CAAC;YACd,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,iBAAiB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAElD,oCAAoC;IACpC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,OAAO,aAAa,GAAG,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACxD,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM;QAAC,CAAC;QAE/B,uFAAuF;QACvF,6EAA6E;QAC7E,IAAI,GAAG,GAAG,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC;QACvC,oEAAoE;QACpE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,GAAG,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;YACtB,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,eAAe;gBACjC,GAAG,EAAE,CAAC;gBACN,IAAI,YAAY,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;gBAC7B,GAAG,EAAE,CAAC;gBACN,IAAI,YAAY,GAAG,GAAG,EAAE,CAAC;oBACvB,MAAM,gBAAgB,GAAG,YAAY,GAAG,IAAI,CAAC;oBAC7C,YAAY,GAAG,CAAC,CAAC;oBACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC;wBAC1C,YAAY,GAAG,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;wBAC/C,GAAG,EAAE,CAAC;oBACR,CAAC;gBACH,CAAC;gBACD,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,YAAY,CAAC,CAAC;YAC/C,CAAC;YACD,gBAAgB;YAChB,GAAG,EAAE,CAAC;YACN,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM;YAAC,CAAC;YACjC,IAAI,WAAW,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;YAC5B,GAAG,EAAE,CAAC;YACN,IAAI,WAAW,GAAG,GAAG,EAAE,CAAC;gBACtB,MAAM,SAAS,GAAG,WAAW,GAAG,IAAI,CAAC;gBACrC,WAAW,GAAG,CAAC,CAAC;gBAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;oBACnC,WAAW,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAE,CAAC;oBAC7C,GAAG,EAAE,CAAC;gBACR,CAAC;YACH,CAAC;YACD,GAAG,IAAI,WAAW,CAAC;YACnB,KAAK,EAAE,CAAC;QACV,CAAC;QAED,aAAa,GAAG,QAAQ,GAAG,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mCAAmC,CAAC,KAA+B;IAC1E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,+BAA+B,CACvC,2BAA2B,CAAC,6CAA6C,CAAC,GAAG,CAAC,EAAE,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,uCAAuC,CAC9C,KAA+B,EAC/B,aAAuC;IAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,+BAA+B,CAAC,4BAA4B,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC5C,MAAM,sBAAsB,GAAG,UAAU,CAAC,cAAc,CAAC;IAEzD,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CACxC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,sBAAsB,CACzD,CAAC;IAEF,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,IAAI,+BAA+B,CACvC,eAAe,UAAU,CAAC,OAAO,0CAA0C,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAAmB,EACnB,eAAuB,EACvB,SAAiC;IAEjC,MAAM,UAAU,GAAG,SAAS,CAAC,SAAS,CAAC;IACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,iBAAiB,CAAC;IAE9C,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAE/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,UAAU,CAAC,oBAAoB,EAAE,UAAU,CAAC;QAC/D,MAAM,cAAc,GAAG,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpE,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC/F,CAAC;SAAM,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,EAAE;YACxD,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB;SAC5C,EAAE,eAAe,CAAC,CAAC;IACtB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,0BAA0B,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,MAAM,IAAI,0BAA0B,CAClC,kEAAkE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,YAAiC,EACjC,YAAqB;IAErB,MAAM,KAAK,GAAG,kCAAkC,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,+BAA+B,CAAC,iDAAiD,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;IAE1D,mCAAmC,CAAC,KAAK,CAAC,CAAC;IAC3C,uCAAuC,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAE9D,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAE5B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,UAAU,GAAG,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,+BAA+B,CACvC,kDAAkD,SAAS,CAAC,SAAS,GAAG,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,GAAG,GAAG,EAAE,CAAC;QACpB,MAAM,IAAI,+BAA+B,CACvC,4CAA4C,SAAS,CAAC,OAAO,GAAG,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;IAC1E,sBAAsB,CAAC,WAAW,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;IAEhE,sDAAsD;IACtD,MAAM,cAAc,GAAG,2CAA2C,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IACpG,MAAM,eAAe,GAAG,2CAA2C,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IACtG,MAAM,mBAAmB,GAAG,2CAA2C,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAE9G,MAAM,mBAAmB,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC;IACxG,MAAM,oBAAoB,GAAG,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtF,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAE/F,uCAAuC;IACvC,IAAI,iBAAiB,GAAG,YAAY,CAAC,QAAQ,CAAC;IAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,cAAc,IAAI,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAClE,IAAI,SAAS,EAAE,CAAC;QACd,iBAAiB,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;IACpC,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,UAAU,EAAE,mBAAmB;QAC/B,WAAW,EAAE,oBAAoB;QACjC,eAAe,EAAE,wBAAwB;QACzC,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "1id",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Hardware-anchored identity SDK for AI agents -- 1id.com",
   "keywords": [
     "identity",
@@ -46,8 +46,8 @@
     "build": "tsc",
     "clean": "node -e \"const fs=require('fs'); fs.rmSync('dist',{recursive:true,force:true})\"",
     "prepublishOnly": "npm run clean && npm run build",
-    "test": "node --test dist/test/test_declared_enrollment.js",
-    "test:src": "npx tsc && node --test dist/test/test_declared_enrollment.js"
+    "test": "node --test dist/test/test_attestation.js",
+    "test:src": "npx tsc && node --test dist/test/test_attestation.js"
   },
   "devDependencies": {
     "@types/node": "^25.3.0",