@adcp/sdk 16.0.0-beta.8 → 16.0.0

package/dist/lib/reporting/source/manifest.d.ts

@@ -101,10 +101,10 @@ export declare const ReportingCoverageConstituentV1Schema: z.ZodDiscriminatedUni
     productBinding: z.ZodOptional<z.ZodNever>;
     status: z.ZodEnum<{
         delayed: "delayed";
+        partial: "partial";
         present: "present";
         missing: "missing";
         unsupported: "unsupported";
-        partial: "partial";
         stale: "stale";
         explicit_zero: "explicit_zero";
     }>;
@@ -127,10 +127,10 @@ export declare const ReportingCoverageConstituentV1Schema: z.ZodDiscriminatedUni
     }, z.core.$strict>;
     status: z.ZodEnum<{
         delayed: "delayed";
+        partial: "partial";
         present: "present";
         missing: "missing";
         unsupported: "unsupported";
-        partial: "partial";
         stale: "stale";
         explicit_zero: "explicit_zero";
     }>;
@@ -153,10 +153,10 @@ export declare const ReportingCoverageConstituentV1Schema: z.ZodDiscriminatedUni
     }, z.core.$strict>;
     status: z.ZodEnum<{
         delayed: "delayed";
+        partial: "partial";
         present: "present";
         missing: "missing";
         unsupported: "unsupported";
-        partial: "partial";
         stale: "stale";
         explicit_zero: "explicit_zero";
     }>;
@@ -359,10 +359,10 @@ export declare const BasicSourceBatchManifestV1Schema: z.ZodObject<{
         semanticContractSha256: z.ZodString;
         status: z.ZodEnum<{
             delayed: "delayed";
+            partial: "partial";
             present: "present";
             missing: "missing";
             unsupported: "unsupported";
-            partial: "partial";
             stale: "stale";
             explicit_zero: "explicit_zero";
         }>;
@@ -386,10 +386,10 @@ export declare const BasicSourceBatchManifestV1Schema: z.ZodObject<{
             productBinding: z.ZodOptional<z.ZodNever>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -412,10 +412,10 @@ export declare const BasicSourceBatchManifestV1Schema: z.ZodObject<{
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -438,10 +438,10 @@ export declare const BasicSourceBatchManifestV1Schema: z.ZodObject<{
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -704,10 +704,10 @@ export declare const SourceBatchManifestV1Schema: z.ZodObject<{
         semanticContractSha256: z.ZodString;
         status: z.ZodEnum<{
             delayed: "delayed";
+            partial: "partial";
             present: "present";
             missing: "missing";
             unsupported: "unsupported";
-            partial: "partial";
             stale: "stale";
             explicit_zero: "explicit_zero";
         }>;
@@ -731,10 +731,10 @@ export declare const SourceBatchManifestV1Schema: z.ZodObject<{
             productBinding: z.ZodOptional<z.ZodNever>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -757,10 +757,10 @@ export declare const SourceBatchManifestV1Schema: z.ZodObject<{
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -783,10 +783,10 @@ export declare const SourceBatchManifestV1Schema: z.ZodObject<{
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -969,10 +969,10 @@ export declare const ReportingSourceManifestV1Schema: z.ZodUnion<readonly [z.Zod
         semanticContractSha256: z.ZodString;
         status: z.ZodEnum<{
             delayed: "delayed";
+            partial: "partial";
             present: "present";
             missing: "missing";
             unsupported: "unsupported";
-            partial: "partial";
             stale: "stale";
             explicit_zero: "explicit_zero";
         }>;
@@ -996,10 +996,10 @@ export declare const ReportingSourceManifestV1Schema: z.ZodUnion<readonly [z.Zod
             productBinding: z.ZodOptional<z.ZodNever>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1022,10 +1022,10 @@ export declare const ReportingSourceManifestV1Schema: z.ZodUnion<readonly [z.Zod
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1048,10 +1048,10 @@ export declare const ReportingSourceManifestV1Schema: z.ZodUnion<readonly [z.Zod
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1313,10 +1313,10 @@ export declare const ReportingSourceManifestV1Schema: z.ZodUnion<readonly [z.Zod
         semanticContractSha256: z.ZodString;
         status: z.ZodEnum<{
             delayed: "delayed";
+            partial: "partial";
             present: "present";
             missing: "missing";
             unsupported: "unsupported";
-            partial: "partial";
             stale: "stale";
             explicit_zero: "explicit_zero";
         }>;
@@ -1340,10 +1340,10 @@ export declare const ReportingSourceManifestV1Schema: z.ZodUnion<readonly [z.Zod
             productBinding: z.ZodOptional<z.ZodNever>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1366,10 +1366,10 @@ export declare const ReportingSourceManifestV1Schema: z.ZodUnion<readonly [z.Zod
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1392,10 +1392,10 @@ export declare const ReportingSourceManifestV1Schema: z.ZodUnion<readonly [z.Zod
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1600,10 +1600,10 @@ export declare const BasicSourceBatchManifestV1JsonSchema: z.core.ZodStandardJSO
         semanticContractSha256: z.ZodString;
         status: z.ZodEnum<{
             delayed: "delayed";
+            partial: "partial";
             present: "present";
             missing: "missing";
             unsupported: "unsupported";
-            partial: "partial";
             stale: "stale";
             explicit_zero: "explicit_zero";
         }>;
@@ -1627,10 +1627,10 @@ export declare const BasicSourceBatchManifestV1JsonSchema: z.core.ZodStandardJSO
             productBinding: z.ZodOptional<z.ZodNever>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1653,10 +1653,10 @@ export declare const BasicSourceBatchManifestV1JsonSchema: z.core.ZodStandardJSO
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1679,10 +1679,10 @@ export declare const BasicSourceBatchManifestV1JsonSchema: z.core.ZodStandardJSO
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1945,10 +1945,10 @@ export declare const SourceBatchManifestV1JsonSchema: z.core.ZodStandardJSONSche
         semanticContractSha256: z.ZodString;
         status: z.ZodEnum<{
             delayed: "delayed";
+            partial: "partial";
             present: "present";
             missing: "missing";
             unsupported: "unsupported";
-            partial: "partial";
             stale: "stale";
             explicit_zero: "explicit_zero";
         }>;
@@ -1972,10 +1972,10 @@ export declare const SourceBatchManifestV1JsonSchema: z.core.ZodStandardJSONSche
             productBinding: z.ZodOptional<z.ZodNever>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -1998,10 +1998,10 @@ export declare const SourceBatchManifestV1JsonSchema: z.core.ZodStandardJSONSche
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;
@@ -2024,10 +2024,10 @@ export declare const SourceBatchManifestV1JsonSchema: z.core.ZodStandardJSONSche
             }, z.core.$strict>;
             status: z.ZodEnum<{
                 delayed: "delayed";
+                partial: "partial";
                 present: "present";
                 missing: "missing";
                 unsupported: "unsupported";
-                partial: "partial";
                 stale: "stale";
                 explicit_zero: "explicit_zero";
             }>;

package/dist/lib/server/create-adcp-server.js

@@ -1993,6 +1993,12 @@ function createAdcpServer(config) {
     responseEnhancer,
     structuredContentTextFallback = "always"
   } = config;
+  if (capConfig?.major_versions?.some((major) => major < 3) || capConfig?.supported_versions?.some((version2) => (0, import_version.parseAdcpMajorVersion)(version2) < 3)) {
+    throw new import_errors.ConfigurationError(
+      "AdCP 2 reached end of life on 2026-08-01. Server capabilities must advertise AdCP 3 only.",
+      "capabilities"
+    );
+  }
   if (taskRegistry !== void 0 && taskRegistry.scopeVersion !== 1) {
     throw new Error(
       "createAdcpServer: taskRegistry.scopeVersion must be 1. Migrate custom registries to the account/principal-scoped TaskRegistry signatures before use."
@@ -4575,7 +4581,7 @@ function createAdcpServer(config) {
         .../* @__PURE__ */ new Set([
           algorithm,
           // `algorithms` lists AdCP webhook-profile values; a Web Bot Auth key
-          // is Ed25519 or RSA-PSS (adcp#7894), and only Ed25519 has a value here.
+          // is Ed25519 (adcp#7894), which has the value `ed25519` here.
           ...webhooks.webBotAuth && ("privateKey" in webhooks.webBotAuth.key ? webhooks.webBotAuth.key.privateKey.crv : webhooks.webBotAuth.key.publicKey.crv) === "Ed25519" ? ["ed25519"] : []
         ])
       ],

package/dist/lib/server/create-adcp-server.mjs

@@ -2084,6 +2084,12 @@ function createAdcpServer(config) {
     responseEnhancer,
     structuredContentTextFallback = "always"
   } = config;
+  if (capConfig?.major_versions?.some((major) => major < 3) || capConfig?.supported_versions?.some((version2) => parseAdcpMajorVersion(version2) < 3)) {
+    throw new ConfigurationError(
+      "AdCP 2 reached end of life on 2026-08-01. Server capabilities must advertise AdCP 3 only.",
+      "capabilities"
+    );
+  }
   if (taskRegistry !== void 0 && taskRegistry.scopeVersion !== 1) {
     throw new Error(
       "createAdcpServer: taskRegistry.scopeVersion must be 1. Migrate custom registries to the account/principal-scoped TaskRegistry signatures before use."
@@ -4666,7 +4672,7 @@ function createAdcpServer(config) {
         .../* @__PURE__ */ new Set([
           algorithm,
           // `algorithms` lists AdCP webhook-profile values; a Web Bot Auth key
-          // is Ed25519 or RSA-PSS (adcp#7894), and only Ed25519 has a value here.
+          // is Ed25519 (adcp#7894), which has the value `ed25519` here.
           ...webhooks.webBotAuth && ("privateKey" in webhooks.webBotAuth.key ? webhooks.webBotAuth.key.privateKey.crv : webhooks.webBotAuth.key.publicKey.crv) === "Ed25519" ? ["ed25519"] : []
         ])
       ],

package/dist/lib/signing/crypto.d.mts

@@ -15,5 +15,5 @@ export declare function verifySignatureAsync(alg: string, publicKey: KeyObject |
  * path passes the key as a JWK so workerd accepts it (#3243).
  */
 export declare function signWithPrivateJwk(alg: string, privateJwk: AdcpJsonWebKey, data: Uint8Array): Uint8Array;
-/** {@link signWithPrivateJwk}, preferring WebCrypto for ES256 and RSA-PSS when available (workerd, #3243). */
+/** {@link signWithPrivateJwk}, preferring WebCrypto for ES256 when available (workerd, #3243). */
 export declare function signWithPrivateJwkAsync(alg: string, privateJwk: AdcpJsonWebKey, data: Uint8Array): Promise<Uint8Array>;

package/dist/lib/signing/crypto.d.ts

@@ -15,5 +15,5 @@ export declare function verifySignatureAsync(alg: string, publicKey: KeyObject |
  * path passes the key as a JWK so workerd accepts it (#3243).
  */
 export declare function signWithPrivateJwk(alg: string, privateJwk: AdcpJsonWebKey, data: Uint8Array): Uint8Array;
-/** {@link signWithPrivateJwk}, preferring WebCrypto for ES256 and RSA-PSS when available (workerd, #3243). */
+/** {@link signWithPrivateJwk}, preferring WebCrypto for ES256 when available (workerd, #3243). */
 export declare function signWithPrivateJwkAsync(alg: string, privateJwk: AdcpJsonWebKey, data: Uint8Array): Promise<Uint8Array>;

package/dist/lib/signing/crypto.js

@@ -59,14 +59,6 @@ function verifySignature(alg, publicKey, data, signature) {
         );
       }
     }
-    if (alg === "rsa-pss-sha512") {
-      return (0, import_crypto.verify)(
-        "sha512",
-        data,
-        { key: publicKey, padding: import_crypto.constants.RSA_PKCS1_PSS_PADDING, saltLength: 64 },
-        signature
-      );
-    }
     return false;
   } catch {
     return false;
@@ -87,36 +79,15 @@ function privateP256Jwk(jwk) {
 async function verifySignatureAsync(alg, publicKey, data, signature) {
   const subtle = subtleCrypto();
   const keyObject = () => isKeyObject(publicKey) ? publicKey : jwkToPublicKey(publicKey);
-  if (alg !== "ecdsa-p256-sha256" && alg !== "rsa-pss-sha512" || !subtle)
-    return verifySignature(alg, keyObject(), data, signature);
+  if (alg !== "ecdsa-p256-sha256" || !subtle) return verifySignature(alg, keyObject(), data, signature);
   try {
     const jwk = isKeyObject(publicKey) ? publicKey.export({ format: "jwk" }) : publicKey;
-    if (alg === "rsa-pss-sha512") {
-      const key2 = await importRsaPssVerifyKey(subtle, jwk);
-      return await subtle.verify(RSA_PSS_SHA512_SIGN, key2, toArrayBuffer(signature), toArrayBuffer(data));
-    }
     const key = await importP256VerifyKey(subtle, jwk);
     return await subtle.verify(P256_SHA256, key, toArrayBuffer(signature), toArrayBuffer(data));
   } catch {
     return false;
   }
 }
-const RSA_PSS_SHA512 = { name: "RSA-PSS", hash: "SHA-512" };
-const RSA_PSS_SHA512_SIGN = { name: "RSA-PSS", saltLength: 64 };
-const rsaPssVerifyKeys = /* @__PURE__ */ new Map();
-function importRsaPssVerifyKey(subtle, jwk) {
-  if (jwk.kty !== "RSA" || typeof jwk.n !== "string" || typeof jwk.e !== "string")
-    return Promise.reject(new TypeError("Not an RSA public key"));
-  const cacheKey = `${jwk.e}.${jwk.n}`;
-  let key = rsaPssVerifyKeys.get(cacheKey);
-  if (!key) {
-    key = subtle.importKey("jwk", { kty: "RSA", n: jwk.n, e: jwk.e }, RSA_PSS_SHA512, false, ["verify"]);
-    key.catch(() => rsaPssVerifyKeys.delete(cacheKey));
-    if (rsaPssVerifyKeys.size >= 256) rsaPssVerifyKeys.delete(rsaPssVerifyKeys.keys().next().value);
-    rsaPssVerifyKeys.set(cacheKey, key);
-  }
-  return key;
-}
 function isKeyObject(value) {
   return typeof value?.export === "function" && "asymmetricKeyType" in value;
 }
@@ -139,25 +110,11 @@ function signWithPrivateJwk(alg, privateJwk, data) {
     return new Uint8Array((0, import_crypto.sign)(null, data, (0, import_crypto.createPrivateKey)({ key: privateJwk, format: "jwk" })));
   if (alg === "ecdsa-p256-sha256")
     return new Uint8Array((0, import_crypto.sign)("sha256", data, { key: privateJwk, format: "jwk", dsaEncoding: "ieee-p1363" }));
-  if (alg === "rsa-pss-sha512")
-    return new Uint8Array(
-      (0, import_crypto.sign)("sha512", data, {
-        key: (0, import_crypto.createPrivateKey)({ key: privateJwk, format: "jwk" }),
-        padding: import_crypto.constants.RSA_PKCS1_PSS_PADDING,
-        saltLength: 64
-      })
-    );
   throw new TypeError(`Unsupported signing algorithm: ${alg}`);
 }
 async function signWithPrivateJwkAsync(alg, privateJwk, data) {
   const subtle = subtleCrypto();
-  if (alg !== "ecdsa-p256-sha256" && alg !== "rsa-pss-sha512" || !subtle)
-    return signWithPrivateJwk(alg, privateJwk, data);
-  if (alg === "rsa-pss-sha512") {
-    const { kty, n, e, d, p, q, dp, dq, qi } = privateJwk;
-    const key2 = await subtle.importKey("jwk", { kty, n, e, d, p, q, dp, dq, qi }, RSA_PSS_SHA512, false, ["sign"]);
-    return new Uint8Array(await subtle.sign(RSA_PSS_SHA512_SIGN, key2, toArrayBuffer(data)));
-  }
+  if (alg !== "ecdsa-p256-sha256" || !subtle) return signWithPrivateJwk(alg, privateJwk, data);
   const key = await subtle.importKey("jwk", privateP256Jwk(privateJwk), P256, false, ["sign"]);
   return new Uint8Array(await subtle.sign(P256_SHA256, key, toArrayBuffer(data)));
 }

package/dist/lib/signing/crypto.mjs

@@ -1,5 +1,4 @@
 import {
-  constants,
   createPrivateKey,
   createPublicKey,
   sign as nodeSign,
@@ -38,14 +37,6 @@ function verifySignature(alg, publicKey, data, signature) {
         );
       }
     }
-    if (alg === "rsa-pss-sha512") {
-      return nodeVerify(
-        "sha512",
-        data,
-        { key: publicKey, padding: constants.RSA_PKCS1_PSS_PADDING, saltLength: 64 },
-        signature
-      );
-    }
     return false;
   } catch {
     return false;
@@ -66,36 +57,15 @@ function privateP256Jwk(jwk) {
 async function verifySignatureAsync(alg, publicKey, data, signature) {
   const subtle = subtleCrypto();
   const keyObject = () => isKeyObject(publicKey) ? publicKey : jwkToPublicKey(publicKey);
-  if (alg !== "ecdsa-p256-sha256" && alg !== "rsa-pss-sha512" || !subtle)
-    return verifySignature(alg, keyObject(), data, signature);
+  if (alg !== "ecdsa-p256-sha256" || !subtle) return verifySignature(alg, keyObject(), data, signature);
   try {
     const jwk = isKeyObject(publicKey) ? publicKey.export({ format: "jwk" }) : publicKey;
-    if (alg === "rsa-pss-sha512") {
-      const key2 = await importRsaPssVerifyKey(subtle, jwk);
-      return await subtle.verify(RSA_PSS_SHA512_SIGN, key2, toArrayBuffer(signature), toArrayBuffer(data));
-    }
     const key = await importP256VerifyKey(subtle, jwk);
     return await subtle.verify(P256_SHA256, key, toArrayBuffer(signature), toArrayBuffer(data));
   } catch {
     return false;
   }
 }
-const RSA_PSS_SHA512 = { name: "RSA-PSS", hash: "SHA-512" };
-const RSA_PSS_SHA512_SIGN = { name: "RSA-PSS", saltLength: 64 };
-const rsaPssVerifyKeys = /* @__PURE__ */ new Map();
-function importRsaPssVerifyKey(subtle, jwk) {
-  if (jwk.kty !== "RSA" || typeof jwk.n !== "string" || typeof jwk.e !== "string")
-    return Promise.reject(new TypeError("Not an RSA public key"));
-  const cacheKey = `${jwk.e}.${jwk.n}`;
-  let key = rsaPssVerifyKeys.get(cacheKey);
-  if (!key) {
-    key = subtle.importKey("jwk", { kty: "RSA", n: jwk.n, e: jwk.e }, RSA_PSS_SHA512, false, ["verify"]);
-    key.catch(() => rsaPssVerifyKeys.delete(cacheKey));
-    if (rsaPssVerifyKeys.size >= 256) rsaPssVerifyKeys.delete(rsaPssVerifyKeys.keys().next().value);
-    rsaPssVerifyKeys.set(cacheKey, key);
-  }
-  return key;
-}
 function isKeyObject(value) {
   return typeof value?.export === "function" && "asymmetricKeyType" in value;
 }
@@ -118,25 +88,11 @@ function signWithPrivateJwk(alg, privateJwk, data) {
     return new Uint8Array(nodeSign(null, data, createPrivateKey({ key: privateJwk, format: "jwk" })));
   if (alg === "ecdsa-p256-sha256")
     return new Uint8Array(nodeSign("sha256", data, { key: privateJwk, format: "jwk", dsaEncoding: "ieee-p1363" }));
-  if (alg === "rsa-pss-sha512")
-    return new Uint8Array(
-      nodeSign("sha512", data, {
-        key: createPrivateKey({ key: privateJwk, format: "jwk" }),
-        padding: constants.RSA_PKCS1_PSS_PADDING,
-        saltLength: 64
-      })
-    );
   throw new TypeError(`Unsupported signing algorithm: ${alg}`);
 }
 async function signWithPrivateJwkAsync(alg, privateJwk, data) {
   const subtle = subtleCrypto();
-  if (alg !== "ecdsa-p256-sha256" && alg !== "rsa-pss-sha512" || !subtle)
-    return signWithPrivateJwk(alg, privateJwk, data);
-  if (alg === "rsa-pss-sha512") {
-    const { kty, n, e, d, p, q, dp, dq, qi } = privateJwk;
-    const key2 = await subtle.importKey("jwk", { kty, n, e, d, p, q, dp, dq, qi }, RSA_PSS_SHA512, false, ["sign"]);
-    return new Uint8Array(await subtle.sign(RSA_PSS_SHA512_SIGN, key2, toArrayBuffer(data)));
-  }
+  if (alg !== "ecdsa-p256-sha256" || !subtle) return signWithPrivateJwk(alg, privateJwk, data);
   const key = await subtle.importKey("jwk", privateP256Jwk(privateJwk), P256, false, ["sign"]);
   return new Uint8Array(await subtle.sign(P256_SHA256, key, toArrayBuffer(data)));
 }

package/dist/lib/signing/web-bot-auth.d.mts

@@ -8,8 +8,8 @@ export declare const WEB_BOT_AUTH_PROFILE: "web-bot-auth";
 export declare const WEB_BOT_AUTH_DRAFT_REVISION: "draft-ietf-webbotauth-httpsig-protocol-00";
 export declare const SIGNATURE_DIRECTORY_PATH = "/.well-known/http-message-signatures-directory";
 export declare const SIGNATURE_DIRECTORY_MEDIA_TYPE = "application/http-message-signatures-directory+json";
-/** The profile's signature algorithms (wba-profile.mdx "Profile rules"). ES256 is RFC 9421 profile only. */
-export declare const WEB_BOT_AUTH_ALGORITHMS: readonly ["ed25519", "rsa-pss-sha512"];
+/** The profile's signature algorithm: Ed25519 only. ES256 is RFC 9421 profile only. */
+export declare const WEB_BOT_AUTH_ALGORITHMS: readonly ["ed25519"];
 /**
  * The profile's `Accept-Signature` member (RFC 9421 §5.1): the label, the
  * components the profile requires, and its parameters. A replay challenge
@@ -73,7 +73,12 @@ export declare function jwkThumbprint(jwk: Partial<Pick<AdcpJsonWebKey, 'kty' |
  * time rather than on the first request.
  */
 export declare function assertWebBotAuthSigningKey(key: WebBotSigningKey): void;
-/** Reject authority normalization differentials on received identifiers. */
+/**
+ * A received identity origin, which must be exactly the canonical https
+ * origin string (WBA §5.2.1): lowercase host, no default port, and no path,
+ * trailing `/`, query, fragment, or userinfo. The string is compared as
+ * received, never normalized first.
+ */
 export declare function receivedAgentOrigin(value: string): string;
 export declare function getWebBotAuthLegacyOriginGate(resolver: Function | undefined): ((origin: string) => Promise<void>) | undefined;
 export interface WebBotAuthAuthorizationFailure {
@@ -136,8 +141,9 @@ export interface VerifyWebBotAuthOptions {
 /**
  * Verify a Web Bot Auth request (wba-profile.mdx "Verification"). Resolves to
  * exactly one verified signer: the profile takes one `web-bot-auth` signature
- * and one `Signature-Agent` member per request. The array shape is kept for
- * principal resolvers written against earlier drafts.
+ * and one `Signature-Agent` member per request, and does not read signatures
+ * with other tags. The array shape is kept for principal resolvers written
+ * against earlier drafts.
  */
 export declare function verifyWebBotAuth(request: RequestLike, options: VerifyWebBotAuthOptions): Promise<VerifiedWebBotSigner[]>;
 export interface VerifiedSignatureDirectory {
@@ -151,11 +157,13 @@ export interface VerifiedSignatureDirectory {
 }
 /**
  * Verify a key directory response (wba-profile.mdx "Key directories", WBA
- * Appendix B.1). The response must be signed once per key, each signature
- * covering `"@authority";req` and `content-digest` with `created`, `expires`,
- * the key's thumbprint as `keyid` and `tag="http-message-signatures-directory"`,
- * and verifying under the key the directory itself provides. An unsigned
- * directory is a discovery failure.
+ * Appendix B.1). The response must be signed once per usable key, each
+ * signature covering `"@authority";req` and `content-digest` with `created`,
+ * `expires`, the key's thumbprint as `keyid` and
+ * `tag="http-message-signatures-directory"`, and verifying under the key the
+ * directory itself provides. Keys the profile cannot use, and their
+ * signatures, are ignored. An unsigned directory, or one without a usable
+ * key, is a discovery failure.
  */
 export declare function verifyKeyDirectory(response: ResponseLike, now?: number, options?: {
     allowTestKeys?: boolean;

package/dist/lib/signing/web-bot-auth.d.ts

@@ -8,8 +8,8 @@ export declare const WEB_BOT_AUTH_PROFILE: "web-bot-auth";
 export declare const WEB_BOT_AUTH_DRAFT_REVISION: "draft-ietf-webbotauth-httpsig-protocol-00";
 export declare const SIGNATURE_DIRECTORY_PATH = "/.well-known/http-message-signatures-directory";
 export declare const SIGNATURE_DIRECTORY_MEDIA_TYPE = "application/http-message-signatures-directory+json";
-/** The profile's signature algorithms (wba-profile.mdx "Profile rules"). ES256 is RFC 9421 profile only. */
-export declare const WEB_BOT_AUTH_ALGORITHMS: readonly ["ed25519", "rsa-pss-sha512"];
+/** The profile's signature algorithm: Ed25519 only. ES256 is RFC 9421 profile only. */
+export declare const WEB_BOT_AUTH_ALGORITHMS: readonly ["ed25519"];
 /**
  * The profile's `Accept-Signature` member (RFC 9421 §5.1): the label, the
  * components the profile requires, and its parameters. A replay challenge
@@ -73,7 +73,12 @@ export declare function jwkThumbprint(jwk: Partial<Pick<AdcpJsonWebKey, 'kty' |
  * time rather than on the first request.
  */
 export declare function assertWebBotAuthSigningKey(key: WebBotSigningKey): void;
-/** Reject authority normalization differentials on received identifiers. */
+/**
+ * A received identity origin, which must be exactly the canonical https
+ * origin string (WBA §5.2.1): lowercase host, no default port, and no path,
+ * trailing `/`, query, fragment, or userinfo. The string is compared as
+ * received, never normalized first.
+ */
 export declare function receivedAgentOrigin(value: string): string;
 export declare function getWebBotAuthLegacyOriginGate(resolver: Function | undefined): ((origin: string) => Promise<void>) | undefined;
 export interface WebBotAuthAuthorizationFailure {
@@ -136,8 +141,9 @@ export interface VerifyWebBotAuthOptions {
 /**
  * Verify a Web Bot Auth request (wba-profile.mdx "Verification"). Resolves to
  * exactly one verified signer: the profile takes one `web-bot-auth` signature
- * and one `Signature-Agent` member per request. The array shape is kept for
- * principal resolvers written against earlier drafts.
+ * and one `Signature-Agent` member per request, and does not read signatures
+ * with other tags. The array shape is kept for principal resolvers written
+ * against earlier drafts.
  */
 export declare function verifyWebBotAuth(request: RequestLike, options: VerifyWebBotAuthOptions): Promise<VerifiedWebBotSigner[]>;
 export interface VerifiedSignatureDirectory {
@@ -151,11 +157,13 @@ export interface VerifiedSignatureDirectory {
 }
 /**
  * Verify a key directory response (wba-profile.mdx "Key directories", WBA
- * Appendix B.1). The response must be signed once per key, each signature
- * covering `"@authority";req` and `content-digest` with `created`, `expires`,
- * the key's thumbprint as `keyid` and `tag="http-message-signatures-directory"`,
- * and verifying under the key the directory itself provides. An unsigned
- * directory is a discovery failure.
+ * Appendix B.1). The response must be signed once per usable key, each
+ * signature covering `"@authority";req` and `content-digest` with `created`,
+ * `expires`, the key's thumbprint as `keyid` and
+ * `tag="http-message-signatures-directory"`, and verifying under the key the
+ * directory itself provides. Keys the profile cannot use, and their
+ * signatures, are ignored. An unsigned directory, or one without a usable
+ * key, is a discovery failure.
  */
 export declare function verifyKeyDirectory(response: ResponseLike, now?: number, options?: {
     allowTestKeys?: boolean;