@adcp/sdk 5.23.0

package/dist/lib/signing/server.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createExpressVerifier = exports.WEBHOOK_SIGNING_TAG = exports.WEBHOOK_MANDATORY_COMPONENTS = exports.verifyWebhookSignature = exports.createWebhookVerifier = exports.verifyRequestSignature = exports.REQUEST_SIGNING_TAG = exports.MAX_SIGNATURE_WINDOW_SECONDS = exports.MANDATORY_COMPONENTS = exports.CLOCK_SKEW_TOLERANCE_SECONDS = exports.ALLOWED_ALGS = exports.HttpsRevocationStore = exports.InMemoryRevocationStore = exports.sweepExpiredReplays = exports.getReplayStoreMigration = exports.REPLAY_CACHE_MIGRATION = exports.PostgresReplayStore = exports.InMemoryReplayStore = exports.parseSignatureInput = exports.parseSignature = exports.BrandJsonResolverError = exports.BrandJsonJwksResolver = exports.HttpsJwksResolver = exports.StaticJwksResolver = exports.WebhookSignatureError = exports.RequestSignatureError = exports.verifySignature = exports.jwkToPublicKey = exports.parseContentDigest = exports.contentDigestMatches = exports.computeContentDigest = exports.getHeaderValue = exports.formatSignatureParams = exports.canonicalTargetUri = exports.canonicalMethod = exports.canonicalAuthority = exports.buildSignatureBase = void 0;
+/**
+ * Server-side signing surface: what a seller running an AdCP agent needs to
+ * verify inbound RFC 9421 signatures — verifier pipeline, Express-shaped
+ * middleware, pluggable JWKS / replay / revocation stores, and the error
+ * taxonomy.
+ *
+ * Paired with `@adcp/sdk/signing/client` (signer / fetch wrapper /
+ * capability cache). The aggregate `@adcp/sdk/signing` barrel re-exports
+ * both for back-compat.
+ */
+var canonicalize_1 = require("./canonicalize");
+Object.defineProperty(exports, "buildSignatureBase", { enumerable: true, get: function () { return canonicalize_1.buildSignatureBase; } });
+Object.defineProperty(exports, "canonicalAuthority", { enumerable: true, get: function () { return canonicalize_1.canonicalAuthority; } });
+Object.defineProperty(exports, "canonicalMethod", { enumerable: true, get: function () { return canonicalize_1.canonicalMethod; } });
+Object.defineProperty(exports, "canonicalTargetUri", { enumerable: true, get: function () { return canonicalize_1.canonicalTargetUri; } });
+Object.defineProperty(exports, "formatSignatureParams", { enumerable: true, get: function () { return canonicalize_1.formatSignatureParams; } });
+Object.defineProperty(exports, "getHeaderValue", { enumerable: true, get: function () { return canonicalize_1.getHeaderValue; } });
+var content_digest_1 = require("./content-digest");
+Object.defineProperty(exports, "computeContentDigest", { enumerable: true, get: function () { return content_digest_1.computeContentDigest; } });
+Object.defineProperty(exports, "contentDigestMatches", { enumerable: true, get: function () { return content_digest_1.contentDigestMatches; } });
+Object.defineProperty(exports, "parseContentDigest", { enumerable: true, get: function () { return content_digest_1.parseContentDigest; } });
+var crypto_1 = require("./crypto");
+Object.defineProperty(exports, "jwkToPublicKey", { enumerable: true, get: function () { return crypto_1.jwkToPublicKey; } });
+Object.defineProperty(exports, "verifySignature", { enumerable: true, get: function () { return crypto_1.verifySignature; } });
+var errors_1 = require("./errors");
+Object.defineProperty(exports, "RequestSignatureError", { enumerable: true, get: function () { return errors_1.RequestSignatureError; } });
+Object.defineProperty(exports, "WebhookSignatureError", { enumerable: true, get: function () { return errors_1.WebhookSignatureError; } });
+var jwks_1 = require("./jwks");
+Object.defineProperty(exports, "StaticJwksResolver", { enumerable: true, get: function () { return jwks_1.StaticJwksResolver; } });
+var jwks_https_1 = require("./jwks-https");
+Object.defineProperty(exports, "HttpsJwksResolver", { enumerable: true, get: function () { return jwks_https_1.HttpsJwksResolver; } });
+var brand_jwks_1 = require("./brand-jwks");
+Object.defineProperty(exports, "BrandJsonJwksResolver", { enumerable: true, get: function () { return brand_jwks_1.BrandJsonJwksResolver; } });
+Object.defineProperty(exports, "BrandJsonResolverError", { enumerable: true, get: function () { return brand_jwks_1.BrandJsonResolverError; } });
+var parser_1 = require("./parser");
+Object.defineProperty(exports, "parseSignature", { enumerable: true, get: function () { return parser_1.parseSignature; } });
+Object.defineProperty(exports, "parseSignatureInput", { enumerable: true, get: function () { return parser_1.parseSignatureInput; } });
+var replay_1 = require("./replay");
+Object.defineProperty(exports, "InMemoryReplayStore", { enumerable: true, get: function () { return replay_1.InMemoryReplayStore; } });
+var postgres_replay_store_1 = require("./postgres-replay-store");
+Object.defineProperty(exports, "PostgresReplayStore", { enumerable: true, get: function () { return postgres_replay_store_1.PostgresReplayStore; } });
+Object.defineProperty(exports, "REPLAY_CACHE_MIGRATION", { enumerable: true, get: function () { return postgres_replay_store_1.REPLAY_CACHE_MIGRATION; } });
+Object.defineProperty(exports, "getReplayStoreMigration", { enumerable: true, get: function () { return postgres_replay_store_1.getReplayStoreMigration; } });
+Object.defineProperty(exports, "sweepExpiredReplays", { enumerable: true, get: function () { return postgres_replay_store_1.sweepExpiredReplays; } });
+var revocation_1 = require("./revocation");
+Object.defineProperty(exports, "InMemoryRevocationStore", { enumerable: true, get: function () { return revocation_1.InMemoryRevocationStore; } });
+var revocation_https_1 = require("./revocation-https");
+Object.defineProperty(exports, "HttpsRevocationStore", { enumerable: true, get: function () { return revocation_https_1.HttpsRevocationStore; } });
+var types_1 = require("./types");
+Object.defineProperty(exports, "ALLOWED_ALGS", { enumerable: true, get: function () { return types_1.ALLOWED_ALGS; } });
+Object.defineProperty(exports, "CLOCK_SKEW_TOLERANCE_SECONDS", { enumerable: true, get: function () { return types_1.CLOCK_SKEW_TOLERANCE_SECONDS; } });
+Object.defineProperty(exports, "MANDATORY_COMPONENTS", { enumerable: true, get: function () { return types_1.MANDATORY_COMPONENTS; } });
+Object.defineProperty(exports, "MAX_SIGNATURE_WINDOW_SECONDS", { enumerable: true, get: function () { return types_1.MAX_SIGNATURE_WINDOW_SECONDS; } });
+Object.defineProperty(exports, "REQUEST_SIGNING_TAG", { enumerable: true, get: function () { return types_1.REQUEST_SIGNING_TAG; } });
+var verifier_1 = require("./verifier");
+Object.defineProperty(exports, "verifyRequestSignature", { enumerable: true, get: function () { return verifier_1.verifyRequestSignature; } });
+var webhook_verifier_1 = require("./webhook-verifier");
+Object.defineProperty(exports, "createWebhookVerifier", { enumerable: true, get: function () { return webhook_verifier_1.createWebhookVerifier; } });
+Object.defineProperty(exports, "verifyWebhookSignature", { enumerable: true, get: function () { return webhook_verifier_1.verifyWebhookSignature; } });
+Object.defineProperty(exports, "WEBHOOK_MANDATORY_COMPONENTS", { enumerable: true, get: function () { return webhook_verifier_1.WEBHOOK_MANDATORY_COMPONENTS; } });
+Object.defineProperty(exports, "WEBHOOK_SIGNING_TAG", { enumerable: true, get: function () { return webhook_verifier_1.WEBHOOK_SIGNING_TAG; } });
+var middleware_1 = require("./middleware");
+Object.defineProperty(exports, "createExpressVerifier", { enumerable: true, get: function () { return middleware_1.createExpressVerifier; } });
+//# sourceMappingURL=server.js.map

package/dist/lib/signing/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/lib/signing/server.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;GASG;AACH,+CASwB;AARtB,kHAAA,kBAAkB,OAAA;AAClB,kHAAA,kBAAkB,OAAA;AAClB,+GAAA,eAAe,OAAA;AACf,kHAAA,kBAAkB,OAAA;AAClB,qHAAA,qBAAqB,OAAA;AACrB,8GAAA,cAAc,OAAA;AAIhB,mDAAkG;AAAzF,sHAAA,oBAAoB,OAAA;AAAE,sHAAA,oBAAoB,OAAA;AAAE,oHAAA,kBAAkB,OAAA;AACvE,mCAA2D;AAAlD,wGAAA,cAAc,OAAA;AAAE,yGAAA,eAAe,OAAA;AACxC,mCAKkB;AAJhB,+GAAA,qBAAqB,OAAA;AAErB,+GAAA,qBAAqB,OAAA;AAGvB,+BAA+D;AAAtD,0GAAA,kBAAkB,OAAA;AAC3B,2CAAgF;AAAvE,+GAAA,iBAAiB,OAAA;AAC1B,2CAMsB;AALpB,mHAAA,qBAAqB,OAAA;AACrB,oHAAA,sBAAsB,OAAA;AAKxB,mCAAgH;AAAvG,wGAAA,cAAc,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAC5C,mCAKkB;AAJhB,6GAAA,mBAAmB,OAAA;AAKrB,iEAOiC;AAN/B,4HAAA,mBAAmB,OAAA;AACnB,+HAAA,sBAAsB,OAAA;AACtB,gIAAA,uBAAuB,OAAA;AACvB,4HAAA,mBAAmB,OAAA;AAIrB,2CAA6E;AAApE,qHAAA,uBAAuB,OAAA;AAChC,uDAA4F;AAAnF,wHAAA,oBAAoB,OAAA;AAC7B,iCAYiB;AAXf,qGAAA,YAAY,OAAA;AACZ,qHAAA,4BAA4B,OAAA;AAC5B,6GAAA,oBAAoB,OAAA;AACpB,qHAAA,4BAA4B,OAAA;AAC5B,4GAAA,mBAAmB,OAAA;AAQrB,uCAA+E;AAAtE,kHAAA,sBAAsB,OAAA;AAC/B,uDAQ4B;AAP1B,yHAAA,qBAAqB,OAAA;AACrB,0HAAA,sBAAsB,OAAA;AACtB,gIAAA,4BAA4B,OAAA;AAC5B,uHAAA,mBAAmB,OAAA;AAKrB,2CAAsG;AAA7F,mHAAA,qBAAqB,OAAA"}

package/dist/lib/signing/signer-async.d.ts

@@ -0,0 +1,24 @@
+import type { RequestLike } from './canonicalize';
+import type { SigningProvider } from './provider';
+import type { SignedRequest, SignRequestOptions, SignWebhookOptions } from './signer';
+/**
+ * Async variant of `signRequest` that delegates the actual signature
+ * production to a {@link SigningProvider}. Reuses
+ * {@link prepareRequestSignature} and {@link finalizeRequestSignature} from
+ * the sync path so canonicalization cannot drift between the two —
+ * `provider.sign(payload)` is the only difference, and it may dispatch to
+ * KMS / HSM / Vault and add 10–50 ms of network latency per call.
+ *
+ * Callers that hold a private JWK in process should keep using the sync
+ * `signRequest` for lower per-call cost; this entry point is for production
+ * deployments that store private keys in a managed key store.
+ */
+export declare function signRequestAsync(request: RequestLike, provider: SigningProvider, options?: SignRequestOptions): Promise<SignedRequest>;
+/**
+ * Async variant of `signWebhook`. Reuses {@link prepareWebhookSignature}
+ * and {@link finalizeRequestSignature} from the sync path so the five
+ * mandatory components, `adcp/webhook-signing/v1` tag, and unconditional
+ * `Content-Digest` header stay in lockstep.
+ */
+export declare function signWebhookAsync(request: RequestLike, provider: SigningProvider, options?: SignWebhookOptions): Promise<SignedRequest>;
+//# sourceMappingURL=signer-async.d.ts.map

package/dist/lib/signing/signer-async.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer-async.d.ts","sourceRoot":"","sources":["../../../src/lib/signing/signer-async.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAGtF;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,eAAe,EACzB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,aAAa,CAAC,CAIxB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,eAAe,EACzB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,aAAa,CAAC,CAIxB"}

package/dist/lib/signing/signer-async.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signRequestAsync = signRequestAsync;
+exports.signWebhookAsync = signWebhookAsync;
+const signer_1 = require("./signer");
+/**
+ * Async variant of `signRequest` that delegates the actual signature
+ * production to a {@link SigningProvider}. Reuses
+ * {@link prepareRequestSignature} and {@link finalizeRequestSignature} from
+ * the sync path so canonicalization cannot drift between the two —
+ * `provider.sign(payload)` is the only difference, and it may dispatch to
+ * KMS / HSM / Vault and add 10–50 ms of network latency per call.
+ *
+ * Callers that hold a private JWK in process should keep using the sync
+ * `signRequest` for lower per-call cost; this entry point is for production
+ * deployments that store private keys in a managed key store.
+ */
+async function signRequestAsync(request, provider, options = {}) {
+    const prepared = (0, signer_1.prepareRequestSignature)(request, { keyid: provider.keyid, alg: provider.algorithm }, options);
+    const signature = await provider.sign(Buffer.from(prepared.base, 'utf8'));
+    return (0, signer_1.finalizeRequestSignature)(prepared, signature);
+}
+/**
+ * Async variant of `signWebhook`. Reuses {@link prepareWebhookSignature}
+ * and {@link finalizeRequestSignature} from the sync path so the five
+ * mandatory components, `adcp/webhook-signing/v1` tag, and unconditional
+ * `Content-Digest` header stay in lockstep.
+ */
+async function signWebhookAsync(request, provider, options = {}) {
+    const prepared = (0, signer_1.prepareWebhookSignature)(request, { keyid: provider.keyid, alg: provider.algorithm }, options);
+    const signature = await provider.sign(Buffer.from(prepared.base, 'utf8'));
+    return (0, signer_1.finalizeRequestSignature)(prepared, signature);
+}
+//# sourceMappingURL=signer-async.js.map

package/dist/lib/signing/signer-async.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer-async.js","sourceRoot":"","sources":["../../../src/lib/signing/signer-async.ts"],"names":[],"mappings":";;AAiBA,4CAQC;AAQD,4CAQC;AAtCD,qCAAsG;AAEtG;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,gBAAgB,CACpC,OAAoB,EACpB,QAAyB,EACzB,UAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,IAAA,gCAAuB,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAA,iCAAwB,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,gBAAgB,CACpC,OAAoB,EACpB,QAAyB,EACzB,UAA8B,EAAE;IAEhC,MAAM,QAAQ,GAAG,IAAA,gCAAuB,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/G,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,OAAO,IAAA,iCAAwB,EAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC"}

package/dist/lib/signing/signer.d.ts

@@ -0,0 +1,94 @@
+import { type RequestLike, type SignatureParams } from './canonicalize';
+import { type AdcpJsonWebKey, type AdcpSignAlg } from './types';
+export interface SignerKey {
+    keyid: string;
+    alg: 'ed25519' | 'ecdsa-p256-sha256';
+    privateKey: AdcpJsonWebKey;
+}
+export interface SignRequestOptions {
+    coverContentDigest?: boolean;
+    label?: string;
+    windowSeconds?: number;
+    now?: () => number;
+    nonce?: string;
+}
+export interface SignedRequest {
+    headers: Record<string, string>;
+    signatureBase: string;
+    params: SignatureParams;
+}
+/**
+ * Identity fields needed to populate `Signature-Input` parameters. The sync
+ * `signRequest` path takes these from a {@link SignerKey}; the async path
+ * takes them from a `SigningProvider`. Centralizing the shape keeps both
+ * canonicalizations identical.
+ */
+export interface SignatureIdentity {
+    keyid: string;
+    alg: AdcpSignAlg;
+}
+/**
+ * Result of canonicalizing a request for signing — everything `signRequest`
+ * and `signRequestAsync` produce up to (but not including) the call into
+ * the signer/provider.
+ */
+export interface PreparedRequestSignature {
+    components: string[];
+    params: SignatureParams;
+    /**
+     * Outbound headers including `Content-Digest` when covered, but not yet
+     * including `Signature-Input` / `Signature` — those are appended by
+     * {@link finalizeRequestSignature}.
+     */
+    headers: Record<string, string>;
+    /** Canonical signature base bytes (UTF-8). Pass to the signer/provider. */
+    base: string;
+    label: string;
+}
+/**
+ * Canonicalize a request for RFC 9421 request-signing. Pure (no I/O); the
+ * sync and async paths share this so canonicalization can't drift between
+ * them.
+ */
+export declare function prepareRequestSignature(request: RequestLike, identity: SignatureIdentity, options?: SignRequestOptions): PreparedRequestSignature;
+/**
+ * Attach `Signature` / `Signature-Input` headers given the bytes returned
+ * by the signer/provider. Shared between the sync and async paths so the
+ * base64url emission stays canonical.
+ *
+ * Emits base64url without padding to match the AdCP conformance-vector
+ * format (and deterministic Ed25519 sigs are then byte-identical across
+ * SDKs). Verifiers accept either variant since Node's base64 decoder
+ * treats `+`/`-` and `/`/`_` interchangeably.
+ */
+export declare function finalizeRequestSignature(prepared: PreparedRequestSignature, signature: Uint8Array): SignedRequest;
+export declare function signRequest(request: RequestLike, key: SignerKey, options?: SignRequestOptions): SignedRequest;
+export interface SignWebhookOptions {
+    label?: string;
+    windowSeconds?: number;
+    now?: () => number;
+    nonce?: string;
+    /**
+     * Override the signature tag. Defaults to `adcp/webhook-signing/v1`.
+     * Exposed so test suites can pin a wrong tag to exercise receiver
+     * rejection paths without mutating the signed headers post-hoc.
+     */
+    tag?: string;
+}
+/**
+ * Canonicalize an outbound webhook request under the RFC 9421 webhook
+ * profile. Pure (no I/O); shared between sync `signWebhook` and async
+ * `signWebhookAsync` paths. Covers the five mandatory components —
+ * `@method`, `@target-uri`, `@authority`, `content-type`, `content-digest` —
+ * and sets `Content-Digest` on the outgoing headers.
+ */
+export declare function prepareWebhookSignature(request: RequestLike, identity: SignatureIdentity, options?: SignWebhookOptions): PreparedRequestSignature;
+/**
+ * Sign an outbound webhook request under the RFC 9421 webhook profile
+ * (`tag=adcp/webhook-signing/v1`). Covers the five mandatory components —
+ * `@method`, `@target-uri`, `@authority`, `content-type`, `content-digest` —
+ * and sets `Content-Digest` on the outgoing headers. Publishers emitting
+ * conformant webhooks should use this instead of hand-rolling signatures.
+ */
+export declare function signWebhook(request: RequestLike, key: SignerKey, options?: SignWebhookOptions): SignedRequest;
+//# sourceMappingURL=signer.d.ts.map

package/dist/lib/signing/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../../src/lib/signing/signer.ts"],"names":[],"mappings":"AACA,OAAO,EAA6C,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEnH,OAAO,EAIL,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,SAAS,CAAC;AAGjB,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,SAAS,GAAG,mBAAmB,CAAC;IACrC,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,eAAe,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,WAAW,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,EAAE,eAAe,CAAC;IACxB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,GAAE,kBAAuB,GAC/B,wBAAwB,CA8B1B;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,wBAAwB,EAAE,SAAS,EAAE,UAAU,GAAG,aAAa,CAMjH;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,GAAE,kBAAuB,GAAG,aAAa,CAIjH;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,WAAW,EACpB,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,GAAE,kBAAuB,GAC/B,wBAAwB,CAuB1B;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,GAAE,kBAAuB,GAAG,aAAa,CAIjH"}

package/dist/lib/signing/signer.js

@@ -0,0 +1,131 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareRequestSignature = prepareRequestSignature;
+exports.finalizeRequestSignature = finalizeRequestSignature;
+exports.signRequest = signRequest;
+exports.prepareWebhookSignature = prepareWebhookSignature;
+exports.signWebhook = signWebhook;
+const crypto_1 = require("crypto");
+const canonicalize_1 = require("./canonicalize");
+const content_digest_1 = require("./content-digest");
+const types_1 = require("./types");
+const webhook_verifier_1 = require("./webhook-verifier");
+/**
+ * Canonicalize a request for RFC 9421 request-signing. Pure (no I/O); the
+ * sync and async paths share this so canonicalization can't drift between
+ * them.
+ */
+function prepareRequestSignature(request, identity, options = {}) {
+    const now = options.now ? options.now() : Math.floor(Date.now() / 1000);
+    const windowSeconds = Math.min(options.windowSeconds ?? 300, types_1.MAX_SIGNATURE_WINDOW_SECONDS);
+    const nonce = options.nonce ?? base64UrlRandom(16);
+    const label = options.label ?? 'sig1';
+    const hasBody = (request.body ?? '').length > 0;
+    const coverDigest = options.coverContentDigest === true && hasBody;
+    const headers = { ...flattenHeaders(request.headers) };
+    if (coverDigest) {
+        headers['Content-Digest'] = (0, content_digest_1.computeContentDigest)(request.body ?? '');
+    }
+    const components = [...types_1.MANDATORY_COMPONENTS];
+    if (hasBody)
+        components.push('content-type');
+    if (coverDigest)
+        components.push('content-digest');
+    const params = {
+        created: now,
+        expires: now + windowSeconds,
+        nonce,
+        keyid: identity.keyid,
+        alg: identity.alg,
+        tag: types_1.REQUEST_SIGNING_TAG,
+    };
+    const normalizedRequest = { ...request, headers };
+    const base = (0, canonicalize_1.buildSignatureBase)(components, normalizedRequest, params);
+    return { components, params, headers, base, label };
+}
+/**
+ * Attach `Signature` / `Signature-Input` headers given the bytes returned
+ * by the signer/provider. Shared between the sync and async paths so the
+ * base64url emission stays canonical.
+ *
+ * Emits base64url without padding to match the AdCP conformance-vector
+ * format (and deterministic Ed25519 sigs are then byte-identical across
+ * SDKs). Verifiers accept either variant since Node's base64 decoder
+ * treats `+`/`-` and `/`/`_` interchangeably.
+ */
+function finalizeRequestSignature(prepared, signature) {
+    const headers = { ...prepared.headers };
+    const sigB64 = Buffer.from(signature).toString('base64url');
+    headers['Signature-Input'] = `${prepared.label}=${(0, canonicalize_1.formatSignatureParams)(prepared.components, prepared.params)}`;
+    headers['Signature'] = `${prepared.label}=:${sigB64}:`;
+    return { headers, signatureBase: prepared.base, params: prepared.params };
+}
+function signRequest(request, key, options = {}) {
+    const prepared = prepareRequestSignature(request, { keyid: key.keyid, alg: key.alg }, options);
+    const signature = produceSignature(key, Buffer.from(prepared.base, 'utf8'));
+    return finalizeRequestSignature(prepared, signature);
+}
+/**
+ * Canonicalize an outbound webhook request under the RFC 9421 webhook
+ * profile. Pure (no I/O); shared between sync `signWebhook` and async
+ * `signWebhookAsync` paths. Covers the five mandatory components —
+ * `@method`, `@target-uri`, `@authority`, `content-type`, `content-digest` —
+ * and sets `Content-Digest` on the outgoing headers.
+ */
+function prepareWebhookSignature(request, identity, options = {}) {
+    const now = options.now ? options.now() : Math.floor(Date.now() / 1000);
+    const windowSeconds = Math.min(options.windowSeconds ?? 300, types_1.MAX_SIGNATURE_WINDOW_SECONDS);
+    const nonce = options.nonce ?? base64UrlRandom(16);
+    const label = options.label ?? 'sig1';
+    const headers = { ...flattenHeaders(request.headers) };
+    headers['Content-Digest'] = (0, content_digest_1.computeContentDigest)(request.body ?? '');
+    const components = [...webhook_verifier_1.WEBHOOK_MANDATORY_COMPONENTS];
+    const params = {
+        created: now,
+        expires: now + windowSeconds,
+        nonce,
+        keyid: identity.keyid,
+        alg: identity.alg,
+        tag: options.tag ?? webhook_verifier_1.WEBHOOK_SIGNING_TAG,
+    };
+    const normalizedRequest = { ...request, headers };
+    const base = (0, canonicalize_1.buildSignatureBase)(components, normalizedRequest, params);
+    return { components, params, headers, base, label };
+}
+/**
+ * Sign an outbound webhook request under the RFC 9421 webhook profile
+ * (`tag=adcp/webhook-signing/v1`). Covers the five mandatory components —
+ * `@method`, `@target-uri`, `@authority`, `content-type`, `content-digest` —
+ * and sets `Content-Digest` on the outgoing headers. Publishers emitting
+ * conformant webhooks should use this instead of hand-rolling signatures.
+ */
+function signWebhook(request, key, options = {}) {
+    const prepared = prepareWebhookSignature(request, { keyid: key.keyid, alg: key.alg }, options);
+    const signature = produceSignature(key, Buffer.from(prepared.base, 'utf8'));
+    return finalizeRequestSignature(prepared, signature);
+}
+function produceSignature(key, data) {
+    const privateKey = (0, crypto_1.createPrivateKey)({
+        key: key.privateKey,
+        format: 'jwk',
+    });
+    if (key.alg === 'ed25519') {
+        return new Uint8Array((0, crypto_1.sign)(null, data, privateKey));
+    }
+    return new Uint8Array((0, crypto_1.sign)('sha256', data, { key: privateKey, dsaEncoding: 'ieee-p1363' }));
+}
+function flattenHeaders(headers) {
+    const out = {};
+    for (const [k, v] of Object.entries(headers)) {
+        if (v === undefined)
+            continue;
+        // Trim each entry and use ", " as the joiner so the signer and verifier
+        // produce the same canonical value when a header was originally multi-line.
+        out[k] = Array.isArray(v) ? v.map(entry => entry.trim()).join(', ') : v.trim();
+    }
+    return out;
+}
+function base64UrlRandom(byteLength) {
+    return (0, crypto_1.randomBytes)(byteLength).toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+}
+//# sourceMappingURL=signer.js.map

package/dist/lib/signing/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../../src/lib/signing/signer.ts"],"names":[],"mappings":";;AAmEA,0DAkCC;AAYD,4DAMC;AAED,kCAIC;AAsBD,0DA2BC;AASD,kCAIC;AA3LD,mCAA0F;AAC1F,iDAAmH;AACnH,qDAAwD;AACxD,mCAMiB;AACjB,yDAAuF;AAoDvF;;;;GAIG;AACH,SAAgB,uBAAuB,CACrC,OAAoB,EACpB,QAA2B,EAC3B,UAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,EAAE,oCAA4B,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAEhD,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,KAAK,IAAI,IAAI,OAAO,CAAC;IACnE,MAAM,OAAO,GAA2B,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/E,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAA,qCAAoB,EAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,GAAG,4BAAoB,CAAC,CAAC;IAC7C,IAAI,OAAO;QAAE,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7C,IAAI,WAAW;QAAE,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAoB;QAC9B,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,GAAG,GAAG,aAAa;QAC5B,KAAK;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,2BAAmB;KACzB,CAAC;IAEF,MAAM,iBAAiB,GAAgB,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAA,iCAAkB,EAAC,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,wBAAwB,CAAC,QAAkC,EAAE,SAAqB;IAChG,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC5D,OAAO,CAAC,iBAAiB,CAAC,GAAG,GAAG,QAAQ,CAAC,KAAK,IAAI,IAAA,oCAAqB,EAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;IAChH,OAAO,CAAC,WAAW,CAAC,GAAG,GAAG,QAAQ,CAAC,KAAK,KAAK,MAAM,GAAG,CAAC;IACvD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC5E,CAAC;AAED,SAAgB,WAAW,CAAC,OAAoB,EAAE,GAAc,EAAE,UAA8B,EAAE;IAChG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,OAAO,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC;AAeD;;;;;;GAMG;AACH,SAAgB,uBAAuB,CACrC,OAAoB,EACpB,QAA2B,EAC3B,UAA8B,EAAE;IAEhC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,GAAG,EAAE,oCAA4B,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC;IAEtC,MAAM,OAAO,GAA2B,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/E,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAA,qCAAoB,EAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAErE,MAAM,UAAU,GAAG,CAAC,GAAG,+CAA4B,CAAC,CAAC;IACrD,MAAM,MAAM,GAAoB;QAC9B,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,GAAG,GAAG,aAAa;QAC5B,KAAK;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,sCAAmB;KACxC,CAAC;IAEF,MAAM,iBAAiB,GAAgB,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAA,iCAAkB,EAAC,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAEvE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,OAAoB,EAAE,GAAc,EAAE,UAA8B,EAAE;IAChG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5E,OAAO,wBAAwB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAc,EAAE,IAAY;IACpD,MAAM,UAAU,GAAG,IAAA,yBAAgB,EAAC;QAClC,GAAG,EAAE,GAAG,CAAC,UAAwB;QACjC,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,IAAI,UAAU,CAAC,IAAA,aAAQ,EAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,IAAA,aAAQ,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,cAAc,CAAC,OAAsD;IAC5E,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,wEAAwE;QACxE,4EAA4E;QAC5E,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,OAAO,IAAA,oBAAW,EAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAChH,CAAC"}

package/dist/lib/signing/testing.d.ts

@@ -0,0 +1,45 @@
+import type { SigningProvider } from './provider';
+import type { SignerKey } from './signer';
+import type { AdcpJsonWebKey, AdcpSignAlg } from './types';
+/**
+ * Environment variable that lets operators acknowledge an in-memory signer
+ * is intentional in a `NODE_ENV=production` deployment (CI runs with
+ * production builds, ephemeral test envs, etc.). Set to `1` to bypass the
+ * production-time guard.
+ */
+export declare const ALLOW_IN_MEMORY_SIGNER_ENV = "ADCP_ALLOW_IN_MEMORY_SIGNER";
+export interface InMemorySigningProviderOptions {
+    /** `kid` published in `Signature-Input`. */
+    keyid: string;
+    /** Wire-format algorithm identifier — must match the JWK material. */
+    algorithm: AdcpSignAlg;
+    /** Private JWK including the `d` scalar. */
+    privateKey: AdcpJsonWebKey;
+}
+/**
+ * Reference {@link SigningProvider} that holds the private JWK in process
+ * memory. Useful for unit tests, conformance vectors, and local development.
+ *
+ * **Production deployments should use a KMS-backed provider** (see
+ * `examples/gcp-kms-signing-provider.ts`). To prevent accidental shipping of
+ * an in-memory signer to prod, the constructor refuses to instantiate when
+ * `NODE_ENV === 'production'` unless the operator sets
+ * `ADCP_ALLOW_IN_MEMORY_SIGNER=1` to acknowledge the choice — keeping the
+ * in-memory path grep-able in deploy manifests.
+ */
+export declare class InMemorySigningProvider implements SigningProvider {
+    readonly keyid: string;
+    readonly algorithm: AdcpSignAlg;
+    readonly fingerprint: string;
+    private readonly privateKey;
+    constructor(options: InMemorySigningProviderOptions);
+    sign(payload: Uint8Array): Promise<Uint8Array>;
+}
+/**
+ * Adapter from a legacy {@link SignerKey} to a {@link SigningProvider}.
+ * Lets callers (and the conformance runner) reuse private JWK material
+ * loaded for the sync-signing path against the new async-provider pipeline
+ * without rewriting key-load logic.
+ */
+export declare function signerKeyToProvider(key: SignerKey): SigningProvider;
+//# sourceMappingURL=testing.d.ts.map

package/dist/lib/signing/testing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.d.ts","sourceRoot":"","sources":["../../../src/lib/signing/testing.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAE3D;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,gCAAgC,CAAC;AAExE,MAAM,WAAW,8BAA8B;IAC7C,4CAA4C;IAC5C,KAAK,EAAE,MAAM,CAAC;IACd,sEAAsE;IACtE,SAAS,EAAE,WAAW,CAAC;IACvB,4CAA4C;IAC5C,UAAU,EAAE,cAAc,CAAC;CAC5B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,uBAAwB,YAAW,eAAe;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;gBAEhC,OAAO,EAAE,8BAA8B;IAgC7C,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;CAQrD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,SAAS,GAAG,eAAe,CAMnE"}

package/dist/lib/signing/testing.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemorySigningProvider = exports.ALLOW_IN_MEMORY_SIGNER_ENV = void 0;
+exports.signerKeyToProvider = signerKeyToProvider;
+const crypto_1 = require("crypto");
+/**
+ * Environment variable that lets operators acknowledge an in-memory signer
+ * is intentional in a `NODE_ENV=production` deployment (CI runs with
+ * production builds, ephemeral test envs, etc.). Set to `1` to bypass the
+ * production-time guard.
+ */
+exports.ALLOW_IN_MEMORY_SIGNER_ENV = 'ADCP_ALLOW_IN_MEMORY_SIGNER';
+/**
+ * Reference {@link SigningProvider} that holds the private JWK in process
+ * memory. Useful for unit tests, conformance vectors, and local development.
+ *
+ * **Production deployments should use a KMS-backed provider** (see
+ * `examples/gcp-kms-signing-provider.ts`). To prevent accidental shipping of
+ * an in-memory signer to prod, the constructor refuses to instantiate when
+ * `NODE_ENV === 'production'` unless the operator sets
+ * `ADCP_ALLOW_IN_MEMORY_SIGNER=1` to acknowledge the choice — keeping the
+ * in-memory path grep-able in deploy manifests.
+ */
+class InMemorySigningProvider {
+    keyid;
+    algorithm;
+    fingerprint;
+    privateKey;
+    constructor(options) {
+        // The env is read once at construction. Module-init paths that
+        // instantiate `InMemorySigningProvider` before the runtime sets
+        // `NODE_ENV` will bypass the gate; orchestrators conventionally set
+        // `NODE_ENV` before the app process spawns, so this is rare in practice.
+        // Compare case-insensitively so `Production` / `PRODUCTION` don't slip
+        // through.
+        const isProduction = process.env.NODE_ENV?.toLowerCase() === 'production';
+        if (isProduction && !process.env[exports.ALLOW_IN_MEMORY_SIGNER_ENV]) {
+            throw new Error(`InMemorySigningProvider blocked in production. Set ${exports.ALLOW_IN_MEMORY_SIGNER_ENV}=1 to acknowledge, ` +
+                `or use a KMS-backed SigningProvider (see examples/gcp-kms-signing-provider.ts).`);
+        }
+        if (!options.privateKey.d) {
+            throw new TypeError('InMemorySigningProvider requires a JWK with a `d` (private scalar) field.');
+        }
+        this.keyid = options.keyid;
+        this.algorithm = options.algorithm;
+        this.privateKey = options.privateKey;
+        // Mirrors the historical `privateKeyFingerprint` derivation — same input,
+        // same 64-bit cache disambiguator, so behavior carries over for callers
+        // who switch from the inline `request_signing` shape to a provider while
+        // holding the same key material.
+        this.fingerprint = (0, crypto_1.createHash)('sha256')
+            .update(options.keyid)
+            .update('\0')
+            .update(options.privateKey.d)
+            .digest('hex')
+            .slice(0, 16);
+    }
+    async sign(payload) {
+        const privateKey = (0, crypto_1.createPrivateKey)({ key: this.privateKey, format: 'jwk' });
+        const data = Buffer.from(payload);
+        if (this.algorithm === 'ed25519') {
+            return new Uint8Array((0, crypto_1.sign)(null, data, privateKey));
+        }
+        return new Uint8Array((0, crypto_1.sign)('sha256', data, { key: privateKey, dsaEncoding: 'ieee-p1363' }));
+    }
+}
+exports.InMemorySigningProvider = InMemorySigningProvider;
+/**
+ * Adapter from a legacy {@link SignerKey} to a {@link SigningProvider}.
+ * Lets callers (and the conformance runner) reuse private JWK material
+ * loaded for the sync-signing path against the new async-provider pipeline
+ * without rewriting key-load logic.
+ */
+function signerKeyToProvider(key) {
+    return new InMemorySigningProvider({
+        keyid: key.keyid,
+        algorithm: key.alg,
+        privateKey: key.privateKey,
+    });
+}
+//# sourceMappingURL=testing.js.map

package/dist/lib/signing/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../../src/lib/signing/testing.ts"],"names":[],"mappings":";;;AAuFA,kDAMC;AA7FD,mCAAyF;AAKzF;;;;;GAKG;AACU,QAAA,0BAA0B,GAAG,6BAA6B,CAAC;AAWxE;;;;;;;;;;GAUG;AACH,MAAa,uBAAuB;IACzB,KAAK,CAAS;IACd,SAAS,CAAc;IACvB,WAAW,CAAS;IACZ,UAAU,CAAiB;IAE5C,YAAY,OAAuC;QACjD,+DAA+D;QAC/D,gEAAgE;QAChE,oEAAoE;QACpE,yEAAyE;QACzE,uEAAuE;QACvE,WAAW;QACX,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,YAAY,CAAC;QAC1E,IAAI,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kCAA0B,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CACb,sDAAsD,kCAA0B,qBAAqB;gBACnG,iFAAiF,CACpF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,SAAS,CAAC,2EAA2E,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,0EAA0E;QAC1E,wEAAwE;QACxE,yEAAyE;QACzE,iCAAiC;QACjC,IAAI,CAAC,WAAW,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC;aACpC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aACrB,MAAM,CAAC,IAAI,CAAC;aACZ,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAW,CAAC;aACtC,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAmB;QAC5B,MAAM,UAAU,GAAG,IAAA,yBAAgB,EAAC,EAAE,GAAG,EAAE,IAAI,CAAC,UAAwB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,IAAI,UAAU,CAAC,IAAA,aAAQ,EAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,IAAA,aAAQ,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;CACF;AA9CD,0DA8CC;AAED;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,GAAc;IAChD,OAAO,IAAI,uBAAuB,CAAC;QACjC,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,GAAG;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;KAC3B,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/signing/types.d.ts

@@ -0,0 +1,90 @@
+export type ContentDigestPolicy = 'required' | 'forbidden' | 'either';
+export interface VerifierCapability {
+    supported: boolean;
+    covers_content_digest: ContentDigestPolicy;
+    required_for: string[];
+    /**
+     * Shadow-mode bridge between `supported_for` and `required_for`: the seller
+     * verifies signatures when present and logs failures but does NOT reject
+     * unsigned requests. Counterparties SHOULD sign ops in this list so sellers
+     * can surface failure rates before flipping to `required_for`. Precedence:
+     * `required_for` > `warn_for` > `supported_for`.
+     */
+    warn_for?: string[];
+    supported_for?: string[];
+}
+export interface AdcpJsonWebKey {
+    kid: string;
+    kty: string;
+    crv?: string;
+    alg?: string;
+    use?: string;
+    key_ops?: string[];
+    adcp_use?: string;
+    /** Public-key X coordinate (Ed25519) or x-coordinate (EC P-256). */
+    x?: string;
+    /** Public-key Y coordinate (EC P-256 only). */
+    y?: string;
+    /**
+     * Private scalar (RFC 7518 §6.2.2.1 / §6.1.2). Present only when the JWK
+     * represents a private key — never published at `jwks_uri`. Test vectors
+     * ship this under `_private_d_for_test_only` in their `keys.json`; runtime
+     * signers load it into `d`.
+     */
+    d?: string;
+    [extra: string]: unknown;
+}
+export interface RevocationSnapshot {
+    issuer: string;
+    updated: string;
+    next_update: string;
+    revoked_kids: string[];
+    revoked_jtis: string[];
+}
+/**
+ * Narrow "successfully verified" shape. Middleware sets `req.verifiedSigner`
+ * to a value of this type only after a real signature was validated — the
+ * absence of `req.verifiedSigner` is the signal that the request went through
+ * the verifier as unsigned (and the operation didn't require signing).
+ *
+ * `keyid` is always non-empty. Pre-3.x releases returned a `keyid: ''`
+ * sentinel on the unsigned path; consumers MUST now branch on
+ * `req.verifiedSigner === undefined` instead.
+ */
+export interface VerifiedSigner {
+    keyid: string;
+    agent_url?: string;
+    verified_at: number;
+}
+/**
+ * Discriminated union returned by `verifyRequestSignature`.
+ *
+ * - `{ status: 'verified', ... }` — a signature was present and passed all
+ *   pipeline steps. Shape extends {@link VerifiedSigner}.
+ * - `{ status: 'unsigned' }` — no signature headers were present, and the
+ *   operation was not in `capability.required_for` (or no operation was
+ *   supplied). The request may still be accepted by the server's own auth
+ *   path; the verifier just has no signer to attest to.
+ *
+ * A caller that needs to distinguish "unsigned but acceptable" from
+ * "verified" should branch on `.status`. Most middleware consumers should
+ * instead rely on `req.verifiedSigner` being populated — that reads cleanly
+ * as "did a real signature check succeed."
+ */
+export type VerifyResult = ({
+    status: 'verified';
+} & VerifiedSigner) | {
+    status: 'unsigned';
+    verified_at: number;
+};
+export declare const REQUEST_SIGNING_TAG = "adcp/request-signing/v1";
+export declare const ALLOWED_ALGS: Set<string>;
+/**
+ * Wire-format algorithm identifier — the string that appears in
+ * `Signature-Input`'s `alg` parameter. Same vocabulary as `ALLOWED_ALGS`.
+ */
+export type AdcpSignAlg = 'ed25519' | 'ecdsa-p256-sha256';
+export declare const MAX_SIGNATURE_WINDOW_SECONDS = 300;
+export declare const CLOCK_SKEW_TOLERANCE_SECONDS = 60;
+export declare const MANDATORY_COMPONENTS: ReadonlyArray<string>;
+//# sourceMappingURL=types.d.ts.map

package/dist/lib/signing/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/lib/signing/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEtE,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,OAAO,CAAC;IACnB,qBAAqB,EAAE,mBAAmB,CAAC;IAC3C,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,+CAA+C;IAC/C,CAAC,CAAC,EAAE,MAAM,CAAC;IACX;;;;;OAKG;IACH,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GAAG,cAAc,CAAC,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnH,eAAO,MAAM,mBAAmB,4BAA4B,CAAC;AAC7D,eAAO,MAAM,YAAY,aAA4C,CAAC;AACtE;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAC1D,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAA4C,CAAC"}

package/dist/lib/signing/types.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MANDATORY_COMPONENTS = exports.CLOCK_SKEW_TOLERANCE_SECONDS = exports.MAX_SIGNATURE_WINDOW_SECONDS = exports.ALLOWED_ALGS = exports.REQUEST_SIGNING_TAG = void 0;
+exports.REQUEST_SIGNING_TAG = 'adcp/request-signing/v1';
+exports.ALLOWED_ALGS = new Set(['ed25519', 'ecdsa-p256-sha256']);
+exports.MAX_SIGNATURE_WINDOW_SECONDS = 300;
+exports.CLOCK_SKEW_TOLERANCE_SECONDS = 60;
+exports.MANDATORY_COMPONENTS = ['@method', '@target-uri', '@authority'];
+//# sourceMappingURL=types.js.map

package/dist/lib/signing/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/lib/signing/types.ts"],"names":[],"mappings":";;;AAgFa,QAAA,mBAAmB,GAAG,yBAAyB,CAAC;AAChD,QAAA,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAMzD,QAAA,4BAA4B,GAAG,GAAG,CAAC;AACnC,QAAA,4BAA4B,GAAG,EAAE,CAAC;AAClC,QAAA,oBAAoB,GAA0B,CAAC,SAAS,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC"}