@adcp/sdk 16.0.0-beta.9 → 16.1.0

package/dist/lib/identity-3.3/trust.js

@@ -32,6 +32,7 @@ __export(trust_exports, {
   TrustEvaluator: () => TrustEvaluator,
   TrustMembershipError: () => TrustMembershipError,
   TrustRecordUnavailableError: () => TrustRecordUnavailableError,
+  assertPublishableTrustRecord: () => assertPublishableTrustRecord,
   authorizeDemandGrant: () => authorizeDemandGrant,
   createTrustRecord: () => createTrustRecord,
   validateIdentity33Schema: () => validateIdentity33Schema,
@@ -110,8 +111,34 @@ function validateTrustRecord(value) {
     origins.add(origin);
   }
 }
-function createTrustRecord(record) {
+function registrableGrantee(grantee) {
+  try {
+    return (0, import_etld.eTldPlusOne)(grantee) === grantee ? grantee : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function grantAgentOrigin(url) {
+  try {
+    return (0, import_canonicalize.canonicalAgentOrigin)(url);
+  } catch {
+    return void 0;
+  }
+}
+function assertPublishableTrustRecord(record) {
   validateTrustRecord(record);
+  for (const grant of record.grants ?? []) {
+    if (registrableGrantee(grant.grantee) === void 0)
+      throw new TypeError(
+        `Grant grantee "${grant.grantee}" is not a registrable domain; name the organization's registrable domain and narrow with agents[]`
+      );
+    for (const agent of grant.agents ?? [])
+      if (grantAgentOrigin(agent.url) === void 0)
+        throw new TypeError(`Grant agents[] URL "${agent.url}" is not a valid agent origin`);
+  }
+}
+function createTrustRecord(record) {
+  assertPublishableTrustRecord(record);
   return structuredClone(record);
 }
 class TrustEvaluator {
@@ -308,13 +335,15 @@ function authorityGroup(operator) {
   const provider = (0, import_tldts.parse)(operator).domain;
   return `private:${provider ?? operator}`;
 }
+function grantsScope(grant, scope) {
+  return grant.scopes.some(
+    (granted) => granted === "*" || granted === scope || granted === "adcp:all" && scope.startsWith("adcp:")
+  );
+}
 function grantMatches(grant, target, claim, now) {
-  if ((0, import_etld.eTldPlusOne)(grant.grantee) !== target) return false;
-  if (!grant.scopes.some(
-    (scope) => scope === "*" || scope === claim.scope || scope === "adcp:all" && claim.scope.startsWith("adcp:")
-  ))
-    return false;
-  if (grant.agents && !grant.agents.some((agent) => (0, import_canonicalize.canonicalAgentOrigin)(agent.url) === (0, import_canonicalize.canonicalAgentOrigin)(claim.signerOrigin)))
+  if (registrableGrantee(grant.grantee) !== target) return false;
+  if (!grantsScope(grant, claim.scope)) return false;
+  if (grant.agents && !grant.agents.some((agent) => grantAgentOrigin(agent.url) === (0, import_canonicalize.canonicalAgentOrigin)(claim.signerOrigin)))
     return false;
   const brands = grant.profiles?.adcp?.brands;
   if (brands && !brands.includes("*") && (!claim.brand.brand_id || !brands.includes(claim.brand.brand_id)))
@@ -361,11 +390,10 @@ async function authorizeDemandGrant(claim, options) {
       if (second) return result("trust", [brand, account, operator], [first[0], second]);
     }
   }
-  const covered = (record.record.grants ?? []).some(
-    (g) => ((0, import_etld.eTldPlusOne)(g.grantee) === account || selfOperated && (0, import_etld.eTldPlusOne)(g.grantee) === operator) && g.scopes.some(
-      (scope) => scope === "*" || scope === claim.scope || scope === "adcp:all" && claim.scope.startsWith("adcp:")
-    )
-  );
+  const covered = (record.record.grants ?? []).some((g) => {
+    const grantee = registrableGrantee(g.grantee);
+    return grantee !== void 0 && (grantee === account || selfOperated && grantee === operator) && grantsScope(g, claim.scope);
+  });
   if (!covered && !record.record.exclusive_grants && await options.sellerAuthorization?.(claim))
     return result("seller", [brand, account, operator]);
   throw new IdentityAuthorizationError("grant_absent");
@@ -376,6 +404,7 @@ async function authorizeDemandGrant(claim, options) {
   TrustEvaluator,
   TrustMembershipError,
   TrustRecordUnavailableError,
+  assertPublishableTrustRecord,
   authorizeDemandGrant,
   createTrustRecord,
   validateIdentity33Schema,

package/dist/lib/identity-3.3/trust.mjs

@@ -70,8 +70,34 @@ function validateTrustRecord(value) {
     origins.add(origin);
   }
 }
-function createTrustRecord(record) {
+function registrableGrantee(grantee) {
+  try {
+    return eTldPlusOne(grantee) === grantee ? grantee : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function grantAgentOrigin(url) {
+  try {
+    return canonicalAgentOrigin(url);
+  } catch {
+    return void 0;
+  }
+}
+function assertPublishableTrustRecord(record) {
   validateTrustRecord(record);
+  for (const grant of record.grants ?? []) {
+    if (registrableGrantee(grant.grantee) === void 0)
+      throw new TypeError(
+        `Grant grantee "${grant.grantee}" is not a registrable domain; name the organization's registrable domain and narrow with agents[]`
+      );
+    for (const agent of grant.agents ?? [])
+      if (grantAgentOrigin(agent.url) === void 0)
+        throw new TypeError(`Grant agents[] URL "${agent.url}" is not a valid agent origin`);
+  }
+}
+function createTrustRecord(record) {
+  assertPublishableTrustRecord(record);
   return structuredClone(record);
 }
 class TrustEvaluator {
@@ -268,13 +294,15 @@ function authorityGroup(operator) {
   const provider = parseDomain(operator).domain;
   return `private:${provider ?? operator}`;
 }
+function grantsScope(grant, scope) {
+  return grant.scopes.some(
+    (granted) => granted === "*" || granted === scope || granted === "adcp:all" && scope.startsWith("adcp:")
+  );
+}
 function grantMatches(grant, target, claim, now) {
-  if (eTldPlusOne(grant.grantee) !== target) return false;
-  if (!grant.scopes.some(
-    (scope) => scope === "*" || scope === claim.scope || scope === "adcp:all" && claim.scope.startsWith("adcp:")
-  ))
-    return false;
-  if (grant.agents && !grant.agents.some((agent) => canonicalAgentOrigin(agent.url) === canonicalAgentOrigin(claim.signerOrigin)))
+  if (registrableGrantee(grant.grantee) !== target) return false;
+  if (!grantsScope(grant, claim.scope)) return false;
+  if (grant.agents && !grant.agents.some((agent) => grantAgentOrigin(agent.url) === canonicalAgentOrigin(claim.signerOrigin)))
     return false;
   const brands = grant.profiles?.adcp?.brands;
   if (brands && !brands.includes("*") && (!claim.brand.brand_id || !brands.includes(claim.brand.brand_id)))
@@ -321,11 +349,10 @@ async function authorizeDemandGrant(claim, options) {
       if (second) return result("trust", [brand, account, operator], [first[0], second]);
     }
   }
-  const covered = (record.record.grants ?? []).some(
-    (g) => (eTldPlusOne(g.grantee) === account || selfOperated && eTldPlusOne(g.grantee) === operator) && g.scopes.some(
-      (scope) => scope === "*" || scope === claim.scope || scope === "adcp:all" && claim.scope.startsWith("adcp:")
-    )
-  );
+  const covered = (record.record.grants ?? []).some((g) => {
+    const grantee = registrableGrantee(g.grantee);
+    return grantee !== void 0 && (grantee === account || selfOperated && grantee === operator) && grantsScope(g, claim.scope);
+  });
   if (!covered && !record.record.exclusive_grants && await options.sellerAuthorization?.(claim))
     return result("seller", [brand, account, operator]);
   throw new IdentityAuthorizationError("grant_absent");
@@ -335,6 +362,7 @@ export {
   TrustEvaluator,
   TrustMembershipError,
   TrustRecordUnavailableError,
+  assertPublishableTrustRecord,
   authorizeDemandGrant,
   createTrustRecord,
   validateIdentity33Schema,

package/dist/lib/index.d.mts

@@ -36,7 +36,7 @@ export { match, attachMatch } from './core/match.mjs';
 export type { MatchHandlers, PartialMatchHandlers } from './core/match.mjs';
 export { ProtocolResponseParser, responseParser, ADCP_STATUS, type ADCPStatus } from './core/ProtocolResponseParser.mjs';
 export { ResponseValidator, responseValidator, type ValidationResult, type ValidationOptions, } from './core/ResponseValidator.mjs';
-export type { Message, InputRequest, InputHandler, InputHandlerResponse, ConversationContext, TaskOptions, WebhookToolPredicate, WebhookUrlTemplate, TaskResult, TaskResultCompleted, TaskResultIntermediate, TaskResultFailure, TaskResultMetadata, DeferredContinuation, DirectPauseRecoveryRequest, TaskState, TaskStatus, ConversationConfig, AdcpErrorInfo, AdcpValidationIssue, } from './core/ConversationTypes.mjs';
+export type { Message, InputRequest, InputHandler, InputHandlerResponse, ConversationContext, TaskOptions, TrackTaskRequest, TrackedTask, SubmittedContinuation, TaskInfo, WebhookToolPredicate, WebhookUrlTemplate, TaskResult, TaskResultCompleted, TaskResultIntermediate, TaskResultFailure, TaskResultMetadata, DeferredContinuation, DirectPauseRecoveryRequest, TaskState, TaskStatus, ConversationConfig, AdcpErrorInfo, AdcpValidationIssue, } from './core/ConversationTypes.mjs';
 export type { GovernanceConfig, CampaignGovernanceConfig, GovernanceCheckResult, GovernanceOutcome, GovernanceFinding, GovernanceIntentDetails, GovernanceCondition, GovernanceEscalation, NormalizedGovernanceApproved, NormalizedGovernanceConditions, NormalizedGovernanceDenied, NormalizedGovernanceVerdict, } from './core/GovernanceTypes.mjs';
 export { GovernanceMiddleware } from './core/GovernanceMiddleware.mjs';
 export { isGovernanceApproved, isGovernanceConditions, isGovernanceDenied, normalizeGovernanceVerdict, } from './core/GovernanceTypes.mjs';

package/dist/lib/index.d.ts

@@ -36,7 +36,7 @@ export { match, attachMatch } from './core/match';
 export type { MatchHandlers, PartialMatchHandlers } from './core/match';
 export { ProtocolResponseParser, responseParser, ADCP_STATUS, type ADCPStatus } from './core/ProtocolResponseParser';
 export { ResponseValidator, responseValidator, type ValidationResult, type ValidationOptions, } from './core/ResponseValidator';
-export type { Message, InputRequest, InputHandler, InputHandlerResponse, ConversationContext, TaskOptions, WebhookToolPredicate, WebhookUrlTemplate, TaskResult, TaskResultCompleted, TaskResultIntermediate, TaskResultFailure, TaskResultMetadata, DeferredContinuation, DirectPauseRecoveryRequest, TaskState, TaskStatus, ConversationConfig, AdcpErrorInfo, AdcpValidationIssue, } from './core/ConversationTypes';
+export type { Message, InputRequest, InputHandler, InputHandlerResponse, ConversationContext, TaskOptions, TrackTaskRequest, TrackedTask, SubmittedContinuation, TaskInfo, WebhookToolPredicate, WebhookUrlTemplate, TaskResult, TaskResultCompleted, TaskResultIntermediate, TaskResultFailure, TaskResultMetadata, DeferredContinuation, DirectPauseRecoveryRequest, TaskState, TaskStatus, ConversationConfig, AdcpErrorInfo, AdcpValidationIssue, } from './core/ConversationTypes';
 export type { GovernanceConfig, CampaignGovernanceConfig, GovernanceCheckResult, GovernanceOutcome, GovernanceFinding, GovernanceIntentDetails, GovernanceCondition, GovernanceEscalation, NormalizedGovernanceApproved, NormalizedGovernanceConditions, NormalizedGovernanceDenied, NormalizedGovernanceVerdict, } from './core/GovernanceTypes';
 export { GovernanceMiddleware } from './core/GovernanceMiddleware';
 export { isGovernanceApproved, isGovernanceConditions, isGovernanceDenied, normalizeGovernanceVerdict, } from './core/GovernanceTypes';

package/dist/lib/server/account-sync-contract.js

@@ -28,6 +28,7 @@ module.exports = __toCommonJS(account_sync_contract_exports);
 var import_account_key = require('../core/account-key.js');
 var import_account = require('./decisioning/account.js');
 var import_async_outcome = require('./decisioning/async-outcome.js');
+const NATURAL_KEY_FIELDS = ["brand", "operator", "operator_unit", "currency", "timezone", "sandbox"];
 function isolateAccountCallbackInput(ctx) {
   const descriptors = Object.getOwnPropertyDescriptors(ctx);
   delete descriptors.input;
@@ -58,7 +59,9 @@ function naturalRef(entry) {
   const ref = entry.account ?? entry;
   if (!ref || "account_id" in ref || !("brand" in ref) || !ref.brand || typeof ref.operator !== "string")
     return void 0;
-  return ref;
+  return Object.fromEntries(
+    NATURAL_KEY_FIELDS.filter((field) => ref[field] !== void 0).map((field) => [field, ref[field]])
+  );
 }
 async function lookup(accounts, ref, ctx, onUnsupported) {
   try {

package/dist/lib/server/account-sync-contract.mjs

@@ -1,6 +1,7 @@
 import { accountReferenceKey } from "../core/account-key.mjs";
 import { AccountNotFoundError, toWireAccount } from "./decisioning/account.mjs";
 import { AdcpError } from "./decisioning/async-outcome.mjs";
+const NATURAL_KEY_FIELDS = ["brand", "operator", "operator_unit", "currency", "timezone", "sandbox"];
 function isolateAccountCallbackInput(ctx) {
   const descriptors = Object.getOwnPropertyDescriptors(ctx);
   delete descriptors.input;
@@ -31,7 +32,9 @@ function naturalRef(entry) {
   const ref = entry.account ?? entry;
   if (!ref || "account_id" in ref || !("brand" in ref) || !ref.brand || typeof ref.operator !== "string")
     return void 0;
-  return ref;
+  return Object.fromEntries(
+    NATURAL_KEY_FIELDS.filter((field) => ref[field] !== void 0).map((field) => [field, ref[field]])
+  );
 }
 async function lookup(accounts, ref, ctx, onUnsupported) {
   try {

package/dist/lib/server/create-adcp-server.js

@@ -4581,7 +4581,7 @@ function createAdcpServer(config) {
         .../* @__PURE__ */ new Set([
           algorithm,
           // `algorithms` lists AdCP webhook-profile values; a Web Bot Auth key
-          // is Ed25519 or RSA-PSS (adcp#7894), and only Ed25519 has a value here.
+          // is Ed25519 (adcp#7894), which has the value `ed25519` here.
           ...webhooks.webBotAuth && ("privateKey" in webhooks.webBotAuth.key ? webhooks.webBotAuth.key.privateKey.crv : webhooks.webBotAuth.key.publicKey.crv) === "Ed25519" ? ["ed25519"] : []
         ])
       ],

package/dist/lib/server/create-adcp-server.mjs

@@ -4672,7 +4672,7 @@ function createAdcpServer(config) {
         .../* @__PURE__ */ new Set([
           algorithm,
           // `algorithms` lists AdCP webhook-profile values; a Web Bot Auth key
-          // is Ed25519 or RSA-PSS (adcp#7894), and only Ed25519 has a value here.
+          // is Ed25519 (adcp#7894), which has the value `ed25519` here.
           ...webhooks.webBotAuth && ("privateKey" in webhooks.webBotAuth.key ? webhooks.webBotAuth.key.privateKey.crv : webhooks.webBotAuth.key.publicKey.crv) === "Ed25519" ? ["ed25519"] : []
         ])
       ],

package/dist/lib/server/decisioning/runtime/from-platform.js

@@ -1009,23 +1009,28 @@ function jsonValuesEqual(left, right) {
   return leftKeys.length === rightKeys.length && leftKeys.every((key) => Object.hasOwn(rightRecord, key) && jsonValuesEqual(leftRecord[key], rightRecord[key]));
 }
 function matchLegacyRefToDeclaration(declaration, ref, ownerId, legacyFormatConverter) {
-  const projected = (0, import_v1_to_v2.projectV1ProductToV2)(
-    {
-      product_id: ownerId,
-      name: ownerId,
-      description: ownerId,
-      format_ids: [ref]
-    },
-    { legacyFormatConverter }
-  );
-  if (projected.diagnostics.length > 0 || projected.v2.format_options.length !== 1) return "unresolved";
-  const expected = projected.v2.format_options[0];
-  if (declaration.format_kind !== expected.format_kind) return "kind_mismatch";
-  const params = declaration.params !== null && typeof declaration.params === "object" && !Array.isArray(declaration.params) ? declaration.params : {};
-  for (const [key, expectedValue] of Object.entries(expected.params)) {
-    if (!Object.hasOwn(params, key) || !jsonValuesEqual(params[key], expectedValue)) return "params_mismatch";
-  }
-  return "match";
+  const compare = (authoritativeOnly) => {
+    const projected = (0, import_v1_to_v2.projectV1ProductToV2)(
+      {
+        product_id: ownerId,
+        name: ownerId,
+        description: ownerId,
+        format_ids: [ref]
+      },
+      { legacyFormatConverter, _authoritativeOnly: authoritativeOnly }
+    );
+    if (projected.diagnostics.length > 0 || projected.v2.format_options.length !== 1) return "unresolved";
+    const expected = projected.v2.format_options[0];
+    if (declaration.format_kind !== expected.format_kind) return "kind_mismatch";
+    const params = declaration.params !== null && typeof declaration.params === "object" && !Array.isArray(declaration.params) ? declaration.params : {};
+    for (const [key, expectedValue] of Object.entries(expected.params)) {
+      if (!Object.hasOwn(params, key) || !jsonValuesEqual(params[key], expectedValue)) return "params_mismatch";
+    }
+    return "match";
+  };
+  const authoritative = compare(true);
+  if (authoritative !== "unresolved") return authoritative;
+  return compare(false) === "match" ? "match" : "unresolved";
 }
 function validateLegacyRefNarrowing(declaration, ref, ownerId, field, legacyFormatConverter) {
   const match = matchLegacyRefToDeclaration(declaration, ref, ownerId, legacyFormatConverter);

package/dist/lib/server/decisioning/runtime/from-platform.mjs

@@ -1041,23 +1041,28 @@ function jsonValuesEqual(left, right) {
   return leftKeys.length === rightKeys.length && leftKeys.every((key) => Object.hasOwn(rightRecord, key) && jsonValuesEqual(leftRecord[key], rightRecord[key]));
 }
 function matchLegacyRefToDeclaration(declaration, ref, ownerId, legacyFormatConverter) {
-  const projected = projectV1ProductToV2(
-    {
-      product_id: ownerId,
-      name: ownerId,
-      description: ownerId,
-      format_ids: [ref]
-    },
-    { legacyFormatConverter }
-  );
-  if (projected.diagnostics.length > 0 || projected.v2.format_options.length !== 1) return "unresolved";
-  const expected = projected.v2.format_options[0];
-  if (declaration.format_kind !== expected.format_kind) return "kind_mismatch";
-  const params = declaration.params !== null && typeof declaration.params === "object" && !Array.isArray(declaration.params) ? declaration.params : {};
-  for (const [key, expectedValue] of Object.entries(expected.params)) {
-    if (!Object.hasOwn(params, key) || !jsonValuesEqual(params[key], expectedValue)) return "params_mismatch";
-  }
-  return "match";
+  const compare = (authoritativeOnly) => {
+    const projected = projectV1ProductToV2(
+      {
+        product_id: ownerId,
+        name: ownerId,
+        description: ownerId,
+        format_ids: [ref]
+      },
+      { legacyFormatConverter, _authoritativeOnly: authoritativeOnly }
+    );
+    if (projected.diagnostics.length > 0 || projected.v2.format_options.length !== 1) return "unresolved";
+    const expected = projected.v2.format_options[0];
+    if (declaration.format_kind !== expected.format_kind) return "kind_mismatch";
+    const params = declaration.params !== null && typeof declaration.params === "object" && !Array.isArray(declaration.params) ? declaration.params : {};
+    for (const [key, expectedValue] of Object.entries(expected.params)) {
+      if (!Object.hasOwn(params, key) || !jsonValuesEqual(params[key], expectedValue)) return "params_mismatch";
+    }
+    return "match";
+  };
+  const authoritative = compare(true);
+  if (authoritative !== "unresolved") return authoritative;
+  return compare(false) === "match" ? "match" : "unresolved";
 }
 function validateLegacyRefNarrowing(declaration, ref, ownerId, field, legacyFormatConverter) {
   const match = matchLegacyRefToDeclaration(declaration, ref, ownerId, legacyFormatConverter);

package/dist/lib/signing/crypto.d.mts

@@ -15,5 +15,5 @@ export declare function verifySignatureAsync(alg: string, publicKey: KeyObject |
  * path passes the key as a JWK so workerd accepts it (#3243).
  */
 export declare function signWithPrivateJwk(alg: string, privateJwk: AdcpJsonWebKey, data: Uint8Array): Uint8Array;
-/** {@link signWithPrivateJwk}, preferring WebCrypto for ES256 and RSA-PSS when available (workerd, #3243). */
+/** {@link signWithPrivateJwk}, preferring WebCrypto for ES256 when available (workerd, #3243). */
 export declare function signWithPrivateJwkAsync(alg: string, privateJwk: AdcpJsonWebKey, data: Uint8Array): Promise<Uint8Array>;

package/dist/lib/signing/crypto.d.ts

@@ -15,5 +15,5 @@ export declare function verifySignatureAsync(alg: string, publicKey: KeyObject |
  * path passes the key as a JWK so workerd accepts it (#3243).
  */
 export declare function signWithPrivateJwk(alg: string, privateJwk: AdcpJsonWebKey, data: Uint8Array): Uint8Array;
-/** {@link signWithPrivateJwk}, preferring WebCrypto for ES256 and RSA-PSS when available (workerd, #3243). */
+/** {@link signWithPrivateJwk}, preferring WebCrypto for ES256 when available (workerd, #3243). */
 export declare function signWithPrivateJwkAsync(alg: string, privateJwk: AdcpJsonWebKey, data: Uint8Array): Promise<Uint8Array>;

package/dist/lib/signing/crypto.js

@@ -59,14 +59,6 @@ function verifySignature(alg, publicKey, data, signature) {
         );
       }
     }
-    if (alg === "rsa-pss-sha512") {
-      return (0, import_crypto.verify)(
-        "sha512",
-        data,
-        { key: publicKey, padding: import_crypto.constants.RSA_PKCS1_PSS_PADDING, saltLength: 64 },
-        signature
-      );
-    }
     return false;
   } catch {
     return false;
@@ -87,36 +79,15 @@ function privateP256Jwk(jwk) {
 async function verifySignatureAsync(alg, publicKey, data, signature) {
   const subtle = subtleCrypto();
   const keyObject = () => isKeyObject(publicKey) ? publicKey : jwkToPublicKey(publicKey);
-  if (alg !== "ecdsa-p256-sha256" && alg !== "rsa-pss-sha512" || !subtle)
-    return verifySignature(alg, keyObject(), data, signature);
+  if (alg !== "ecdsa-p256-sha256" || !subtle) return verifySignature(alg, keyObject(), data, signature);
   try {
     const jwk = isKeyObject(publicKey) ? publicKey.export({ format: "jwk" }) : publicKey;
-    if (alg === "rsa-pss-sha512") {
-      const key2 = await importRsaPssVerifyKey(subtle, jwk);
-      return await subtle.verify(RSA_PSS_SHA512_SIGN, key2, toArrayBuffer(signature), toArrayBuffer(data));
-    }
     const key = await importP256VerifyKey(subtle, jwk);
     return await subtle.verify(P256_SHA256, key, toArrayBuffer(signature), toArrayBuffer(data));
   } catch {
     return false;
   }
 }
-const RSA_PSS_SHA512 = { name: "RSA-PSS", hash: "SHA-512" };
-const RSA_PSS_SHA512_SIGN = { name: "RSA-PSS", saltLength: 64 };
-const rsaPssVerifyKeys = /* @__PURE__ */ new Map();
-function importRsaPssVerifyKey(subtle, jwk) {
-  if (jwk.kty !== "RSA" || typeof jwk.n !== "string" || typeof jwk.e !== "string")
-    return Promise.reject(new TypeError("Not an RSA public key"));
-  const cacheKey = `${jwk.e}.${jwk.n}`;
-  let key = rsaPssVerifyKeys.get(cacheKey);
-  if (!key) {
-    key = subtle.importKey("jwk", { kty: "RSA", n: jwk.n, e: jwk.e }, RSA_PSS_SHA512, false, ["verify"]);
-    key.catch(() => rsaPssVerifyKeys.delete(cacheKey));
-    if (rsaPssVerifyKeys.size >= 256) rsaPssVerifyKeys.delete(rsaPssVerifyKeys.keys().next().value);
-    rsaPssVerifyKeys.set(cacheKey, key);
-  }
-  return key;
-}
 function isKeyObject(value) {
   return typeof value?.export === "function" && "asymmetricKeyType" in value;
 }
@@ -139,25 +110,11 @@ function signWithPrivateJwk(alg, privateJwk, data) {
     return new Uint8Array((0, import_crypto.sign)(null, data, (0, import_crypto.createPrivateKey)({ key: privateJwk, format: "jwk" })));
   if (alg === "ecdsa-p256-sha256")
     return new Uint8Array((0, import_crypto.sign)("sha256", data, { key: privateJwk, format: "jwk", dsaEncoding: "ieee-p1363" }));
-  if (alg === "rsa-pss-sha512")
-    return new Uint8Array(
-      (0, import_crypto.sign)("sha512", data, {
-        key: (0, import_crypto.createPrivateKey)({ key: privateJwk, format: "jwk" }),
-        padding: import_crypto.constants.RSA_PKCS1_PSS_PADDING,
-        saltLength: 64
-      })
-    );
   throw new TypeError(`Unsupported signing algorithm: ${alg}`);
 }
 async function signWithPrivateJwkAsync(alg, privateJwk, data) {
   const subtle = subtleCrypto();
-  if (alg !== "ecdsa-p256-sha256" && alg !== "rsa-pss-sha512" || !subtle)
-    return signWithPrivateJwk(alg, privateJwk, data);
-  if (alg === "rsa-pss-sha512") {
-    const { kty, n, e, d, p, q, dp, dq, qi } = privateJwk;
-    const key2 = await subtle.importKey("jwk", { kty, n, e, d, p, q, dp, dq, qi }, RSA_PSS_SHA512, false, ["sign"]);
-    return new Uint8Array(await subtle.sign(RSA_PSS_SHA512_SIGN, key2, toArrayBuffer(data)));
-  }
+  if (alg !== "ecdsa-p256-sha256" || !subtle) return signWithPrivateJwk(alg, privateJwk, data);
   const key = await subtle.importKey("jwk", privateP256Jwk(privateJwk), P256, false, ["sign"]);
   return new Uint8Array(await subtle.sign(P256_SHA256, key, toArrayBuffer(data)));
 }

package/dist/lib/signing/crypto.mjs

@@ -1,5 +1,4 @@
 import {
-  constants,
   createPrivateKey,
   createPublicKey,
   sign as nodeSign,
@@ -38,14 +37,6 @@ function verifySignature(alg, publicKey, data, signature) {
         );
       }
     }
-    if (alg === "rsa-pss-sha512") {
-      return nodeVerify(
-        "sha512",
-        data,
-        { key: publicKey, padding: constants.RSA_PKCS1_PSS_PADDING, saltLength: 64 },
-        signature
-      );
-    }
     return false;
   } catch {
     return false;
@@ -66,36 +57,15 @@ function privateP256Jwk(jwk) {
 async function verifySignatureAsync(alg, publicKey, data, signature) {
   const subtle = subtleCrypto();
   const keyObject = () => isKeyObject(publicKey) ? publicKey : jwkToPublicKey(publicKey);
-  if (alg !== "ecdsa-p256-sha256" && alg !== "rsa-pss-sha512" || !subtle)
-    return verifySignature(alg, keyObject(), data, signature);
+  if (alg !== "ecdsa-p256-sha256" || !subtle) return verifySignature(alg, keyObject(), data, signature);
   try {
     const jwk = isKeyObject(publicKey) ? publicKey.export({ format: "jwk" }) : publicKey;
-    if (alg === "rsa-pss-sha512") {
-      const key2 = await importRsaPssVerifyKey(subtle, jwk);
-      return await subtle.verify(RSA_PSS_SHA512_SIGN, key2, toArrayBuffer(signature), toArrayBuffer(data));
-    }
     const key = await importP256VerifyKey(subtle, jwk);
     return await subtle.verify(P256_SHA256, key, toArrayBuffer(signature), toArrayBuffer(data));
   } catch {
     return false;
   }
 }
-const RSA_PSS_SHA512 = { name: "RSA-PSS", hash: "SHA-512" };
-const RSA_PSS_SHA512_SIGN = { name: "RSA-PSS", saltLength: 64 };
-const rsaPssVerifyKeys = /* @__PURE__ */ new Map();
-function importRsaPssVerifyKey(subtle, jwk) {
-  if (jwk.kty !== "RSA" || typeof jwk.n !== "string" || typeof jwk.e !== "string")
-    return Promise.reject(new TypeError("Not an RSA public key"));
-  const cacheKey = `${jwk.e}.${jwk.n}`;
-  let key = rsaPssVerifyKeys.get(cacheKey);
-  if (!key) {
-    key = subtle.importKey("jwk", { kty: "RSA", n: jwk.n, e: jwk.e }, RSA_PSS_SHA512, false, ["verify"]);
-    key.catch(() => rsaPssVerifyKeys.delete(cacheKey));
-    if (rsaPssVerifyKeys.size >= 256) rsaPssVerifyKeys.delete(rsaPssVerifyKeys.keys().next().value);
-    rsaPssVerifyKeys.set(cacheKey, key);
-  }
-  return key;
-}
 function isKeyObject(value) {
   return typeof value?.export === "function" && "asymmetricKeyType" in value;
 }
@@ -118,25 +88,11 @@ function signWithPrivateJwk(alg, privateJwk, data) {
     return new Uint8Array(nodeSign(null, data, createPrivateKey({ key: privateJwk, format: "jwk" })));
   if (alg === "ecdsa-p256-sha256")
     return new Uint8Array(nodeSign("sha256", data, { key: privateJwk, format: "jwk", dsaEncoding: "ieee-p1363" }));
-  if (alg === "rsa-pss-sha512")
-    return new Uint8Array(
-      nodeSign("sha512", data, {
-        key: createPrivateKey({ key: privateJwk, format: "jwk" }),
-        padding: constants.RSA_PKCS1_PSS_PADDING,
-        saltLength: 64
-      })
-    );
   throw new TypeError(`Unsupported signing algorithm: ${alg}`);
 }
 async function signWithPrivateJwkAsync(alg, privateJwk, data) {
   const subtle = subtleCrypto();
-  if (alg !== "ecdsa-p256-sha256" && alg !== "rsa-pss-sha512" || !subtle)
-    return signWithPrivateJwk(alg, privateJwk, data);
-  if (alg === "rsa-pss-sha512") {
-    const { kty, n, e, d, p, q, dp, dq, qi } = privateJwk;
-    const key2 = await subtle.importKey("jwk", { kty, n, e, d, p, q, dp, dq, qi }, RSA_PSS_SHA512, false, ["sign"]);
-    return new Uint8Array(await subtle.sign(RSA_PSS_SHA512_SIGN, key2, toArrayBuffer(data)));
-  }
+  if (alg !== "ecdsa-p256-sha256" || !subtle) return signWithPrivateJwk(alg, privateJwk, data);
   const key = await subtle.importKey("jwk", privateP256Jwk(privateJwk), P256, false, ["sign"]);
   return new Uint8Array(await subtle.sign(P256_SHA256, key, toArrayBuffer(data)));
 }

package/dist/lib/signing/web-bot-auth.d.mts

@@ -8,8 +8,8 @@ export declare const WEB_BOT_AUTH_PROFILE: "web-bot-auth";
 export declare const WEB_BOT_AUTH_DRAFT_REVISION: "draft-ietf-webbotauth-httpsig-protocol-00";
 export declare const SIGNATURE_DIRECTORY_PATH = "/.well-known/http-message-signatures-directory";
 export declare const SIGNATURE_DIRECTORY_MEDIA_TYPE = "application/http-message-signatures-directory+json";
-/** The profile's signature algorithms (wba-profile.mdx "Profile rules"). ES256 is RFC 9421 profile only. */
-export declare const WEB_BOT_AUTH_ALGORITHMS: readonly ["ed25519", "rsa-pss-sha512"];
+/** The profile's signature algorithm: Ed25519 only. ES256 is RFC 9421 profile only. */
+export declare const WEB_BOT_AUTH_ALGORITHMS: readonly ["ed25519"];
 /**
  * The profile's `Accept-Signature` member (RFC 9421 §5.1): the label, the
  * components the profile requires, and its parameters. A replay challenge
@@ -73,7 +73,12 @@ export declare function jwkThumbprint(jwk: Partial<Pick<AdcpJsonWebKey, 'kty' |
  * time rather than on the first request.
  */
 export declare function assertWebBotAuthSigningKey(key: WebBotSigningKey): void;
-/** Reject authority normalization differentials on received identifiers. */
+/**
+ * A received identity origin, which must be exactly the canonical https
+ * origin string (WBA §5.2.1): lowercase host, no default port, and no path,
+ * trailing `/`, query, fragment, or userinfo. The string is compared as
+ * received, never normalized first.
+ */
 export declare function receivedAgentOrigin(value: string): string;
 export declare function getWebBotAuthLegacyOriginGate(resolver: Function | undefined): ((origin: string) => Promise<void>) | undefined;
 export interface WebBotAuthAuthorizationFailure {
@@ -136,8 +141,9 @@ export interface VerifyWebBotAuthOptions {
 /**
  * Verify a Web Bot Auth request (wba-profile.mdx "Verification"). Resolves to
  * exactly one verified signer: the profile takes one `web-bot-auth` signature
- * and one `Signature-Agent` member per request. The array shape is kept for
- * principal resolvers written against earlier drafts.
+ * and one `Signature-Agent` member per request, and does not read signatures
+ * with other tags. The array shape is kept for principal resolvers written
+ * against earlier drafts.
  */
 export declare function verifyWebBotAuth(request: RequestLike, options: VerifyWebBotAuthOptions): Promise<VerifiedWebBotSigner[]>;
 export interface VerifiedSignatureDirectory {
@@ -151,11 +157,13 @@ export interface VerifiedSignatureDirectory {
 }
 /**
  * Verify a key directory response (wba-profile.mdx "Key directories", WBA
- * Appendix B.1). The response must be signed once per key, each signature
- * covering `"@authority";req` and `content-digest` with `created`, `expires`,
- * the key's thumbprint as `keyid` and `tag="http-message-signatures-directory"`,
- * and verifying under the key the directory itself provides. An unsigned
- * directory is a discovery failure.
+ * Appendix B.1). The response must be signed once per usable key, each
+ * signature covering `"@authority";req` and `content-digest` with `created`,
+ * `expires`, the key's thumbprint as `keyid` and
+ * `tag="http-message-signatures-directory"`, and verifying under the key the
+ * directory itself provides. Keys the profile cannot use, and their
+ * signatures, are ignored. An unsigned directory, or one without a usable
+ * key, is a discovery failure.
  */
 export declare function verifyKeyDirectory(response: ResponseLike, now?: number, options?: {
     allowTestKeys?: boolean;