@agent-cards/sdk 0.23.28 → 0.24.1

package/dist/webhooks.d.ts

@@ -7,9 +7,9 @@
  * missed event, and hands back the event typed by its `type`. WebCrypto only,
  * so it runs wherever the client runs.
  */
-import { type AuthorizationStatus, type Settlement, type TerminalReason } from './voice-types.js';
+import { type AuthorizationStatus, type Settlement, type TerminalReason } from './api-types.js';
 /** The purchase events an endpoint receives, `checkout_authorization.*`. */
-export declare const CHECKOUT_AUTHORIZATION_EVENT_TYPES: readonly ["checkout_authorization.created", "checkout_authorization.notified", "checkout_authorization.watched", "checkout_authorization.approved", "checkout_authorization.declined", "checkout_authorization.refused", "checkout_authorization.expired", "checkout_authorization.cancelled", "checkout_authorization.submitted", "checkout_authorization.submitted_on_device", "checkout_authorization.replay_started", "checkout_authorization.amount_mismatch", "checkout_authorization.duplicate_charge", "checkout_authorization.duplicate_guard_reported", "checkout_authorization.outcome_reported", "checkout_authorization.continuation_checked", "checkout_authorization.bank_check_started", "checkout_authorization.settled", "checkout_authorization.settlement_unconfirmed", "checkout_authorization.autopilot_dispatched", "checkout_authorization.autopilot_completed", "checkout_authorization.voice_dispatched"];
+export declare const CHECKOUT_AUTHORIZATION_EVENT_TYPES: readonly ["checkout_authorization.created", "checkout_authorization.notified", "checkout_authorization.watched", "checkout_authorization.approved", "checkout_authorization.declined", "checkout_authorization.refused", "checkout_authorization.expired", "checkout_authorization.cancelled", "checkout_authorization.submitted", "checkout_authorization.submitted_on_device", "checkout_authorization.replay_started", "checkout_authorization.amount_mismatch", "checkout_authorization.duplicate_charge", "checkout_authorization.duplicate_guard_reported", "checkout_authorization.outcome_reported", "checkout_authorization.continuation_checked", "checkout_authorization.bank_check_started", "checkout_authorization.settled", "checkout_authorization.settlement_unconfirmed", "checkout_authorization.autopilot_dispatched", "checkout_authorization.autopilot_completed"];
 export type CheckoutAuthorizationEventType = (typeof CHECKOUT_AUTHORIZATION_EVENT_TYPES)[number];
 /** The Vault events, `vault.*`: a person connected, stored a card, added or used a passkey. */
 export declare const VAULT_EVENT_TYPES: readonly ["vault.session_linked", "vault.card_stored", "vault.passkey_added", "vault.passkey_signin"];

package/dist/webhooks.js

@@ -7,7 +7,7 @@
  * missed event, and hands back the event typed by its `type`. WebCrypto only,
  * so it runs wherever the client runs.
  */
-import { AgentcardError } from './voice-types.js';
+import { AgentcardError } from './api-types.js';
 /** The purchase events an endpoint receives, `checkout_authorization.*`. */
 export const CHECKOUT_AUTHORIZATION_EVENT_TYPES = [
     'checkout_authorization.created', 'checkout_authorization.notified', 'checkout_authorization.watched', 'checkout_authorization.approved',
@@ -16,7 +16,7 @@ export const CHECKOUT_AUTHORIZATION_EVENT_TYPES = [
     'checkout_authorization.amount_mismatch', 'checkout_authorization.duplicate_charge', 'checkout_authorization.duplicate_guard_reported',
     'checkout_authorization.outcome_reported', 'checkout_authorization.continuation_checked', 'checkout_authorization.bank_check_started',
     'checkout_authorization.settled', 'checkout_authorization.settlement_unconfirmed',
-    'checkout_authorization.autopilot_dispatched', 'checkout_authorization.autopilot_completed', 'checkout_authorization.voice_dispatched',
+    'checkout_authorization.autopilot_dispatched', 'checkout_authorization.autopilot_completed',
 ];
 /** The Vault events, `vault.*`: a person connected, stored a card, added or used a passkey. */
 export const VAULT_EVENT_TYPES = ['vault.session_linked', 'vault.card_stored', 'vault.passkey_added', 'vault.passkey_signin'];

package/examples/preflight/kernel-native/inventory.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "catalog_version": "2026-09-15.1",
-  "catalog_sha256": "7f65e0f07138296b0cbff7dd1ed4331842b6dd45e2950f08273fcc772c7f63f6",
+  "catalog_sha256": "86bf0b382e6d847b49d00310f262cf697a0189d4badf89c36ebfb595e07a005b",
   "baseline_version": "kernel-native-docs-2026-09-11.1",
   "baseline_sha256": "d86722f49633d8223fccae54cd3d485df4375aee06aa156a273cc689b7c8507c",
   "native_build": null,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@agent-cards/sdk",
-  "version": "0.23.28",
-  "description": "Agentcard's SDK: one client, Agentcard, with two modules. checkout pauses a browser purchase and pays it with the person's own card; voice connects a person to your product once and approves a purchase by voice inside it. Card data never enters your process.",
+  "version": "0.24.1",
+  "description": "Agentcard's SDK: one client, Agentcard, with two modules. checkout pauses a browser purchase and pays it with the person's own card; buy asks the Purchase API for a cart and places it. Card data never enters your process.",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -24,16 +24,15 @@
     "access": "public"
   },
   "scripts": {
-    "_comment_build": "The public SDK keeps zero runtime dependencies. Its build vendors deterministic metadata and substitution artifacts from the internal payment core (src/*.generated.ts), the voice streaming door from packages/voice/src/core (the phone package, @agent-cards/voice, ships it to phones), and the Kernel kit's inventory from the built catalog; git ignores every file it writes. TypeScript remains pinned.",
-    "build": "node ../payment-core/scripts/build.mjs && node scripts/generate-payment-core.mjs && node scripts/generate-voice-stream.mjs && node scripts/generate-url-masks.mjs && node scripts/generate-capabilities.mjs && node scripts/generate-agent-amount.mjs && npx -y -p typescript@5.9.3 tsc && node scripts/generate-preflight-contract.mjs && node scripts/generate-kernel-native-inventory.mjs",
+    "_comment_build": "The public SDK keeps zero runtime dependencies. Its build vendors deterministic metadata and substitution artifacts from the internal payment core (src/*.generated.ts) and the Kernel kit's inventory from the built catalog; git ignores every file it writes. TypeScript remains pinned. The build starts from an empty dist, so a module the source no longer has never reaches a packed tarball.",
+    "build": "node scripts/clean-dist.mjs && node ../payment-core/scripts/build.mjs && node scripts/generate-payment-core.mjs && node scripts/generate-url-masks.mjs && node scripts/generate-capabilities.mjs && node scripts/generate-agent-amount.mjs && npx -y -p typescript@5.9.3 tsc && node scripts/generate-preflight-contract.mjs && node scripts/generate-kernel-native-inventory.mjs",
     "prepublishOnly": "pnpm build",
     "_comment_test": "check:built runs first and names the command when a file the build generates (the copies in src/, the preflight contracts in dist/, the Kernel inventory) is missing or stale; verify:pack runs last, on the same dist.",
-    "check:built": "node scripts/generate-payment-core.mjs --check && node scripts/generate-voice-stream.mjs --check && node scripts/generate-url-masks.mjs --check && node scripts/generate-capabilities.mjs --check && node scripts/generate-agent-amount.mjs --check && node scripts/generate-preflight-contract.mjs --check && node scripts/generate-kernel-native-inventory.mjs --check",
+    "check:built": "node scripts/generate-payment-core.mjs --check && node scripts/generate-url-masks.mjs --check && node scripts/generate-capabilities.mjs --check && node scripts/generate-agent-amount.mjs --check && node scripts/generate-preflight-contract.mjs --check && node scripts/generate-kernel-native-inventory.mjs --check",
     "verify:pack": "node scripts/verify-pack.mjs",
-    "test": "npm run check:built && node test.mjs && node --test lifecycle.test.mjs merchant-abort.test.mjs preparation.test.mjs braintree.test.mjs pre-claim.test.mjs ekashu.test.mjs redsys.test.mjs quickpay.test.mjs paytrail.test.mjs paypal-hosted-fields.test.mjs paypal-card-forms.test.mjs cybersource-secure-acceptance.test.mjs ebanx.test.mjs payrexx.test.mjs payrexx-follow-ups.test.mjs payrexx-adapters.test.mjs autopilot.test.mjs stripe-checkout.test.mjs stripe-setup.test.mjs stripe-legacy-checkout.test.mjs payment-core.test.mjs prepared-processor.test.mjs merchant-hosted.test.mjs merchant-total.test.mjs sandbox-declaration.test.mjs minimum-delay.test.mjs paysafe.test.mjs wix-payments.test.mjs hipay.test.mjs openpay.test.mjs payu.test.mjs attachment.test.mjs worker-targets.test.mjs mercado-checkout.test.mjs mercado-polling.test.mjs amadeus.test.mjs pelecard.test.mjs aci.test.mjs primer.test.mjs payrails.test.mjs elavon-converge.test.mjs voice.test.mjs agentcard.test.mjs buy.test.mjs readme.test.mjs gmo.test.mjs cybersource-flex.test.mjs juspay-gate.test.mjs card-endpoint.test.mjs card-endpoint-fastspring.test.mjs card-endpoint-navigation.test.mjs merchant-session-probe.test.mjs datatrans.test.mjs authorize-net-dpm.test.mjs creditguard.test.mjs eprotect.test.mjs wspay.test.mjs shiji-sts.test.mjs worldline-mycheckout.test.mjs verifone.test.mjs gravy.test.mjs paddle-vgs.test.mjs sbps.test.mjs hold.test.mjs paddle-tokenex.test.mjs lyra.test.mjs gopay.test.mjs paygent.test.mjs twoc2p.test.mjs tap-payments.test.mjs pay-nl.test.mjs toast.test.mjs redact-url.test.mjs hosted-entry.test.mjs comgate.test.mjs przelewy24.test.mjs tokenex-iframe.test.mjs transbank.test.mjs sumup.test.mjs clover.test.mjs eximbay.test.mjs xendit.test.mjs omise.test.mjs fastspring.test.mjs amazon-payment-services.test.mjs barion.test.mjs paymob.test.mjs payu-latam.test.mjs nexi-checkout.test.mjs pin-payments.test.mjs && node --test preflight-package.test.mjs preflight-collector.test.mjs browser-tests.test.mjs && node --test kernel-native-qualification.test.mjs && node --test ../vault/scripts/recurly-validation/watch-duty-sdk-result.test.mjs && node scripts/verify-pack.mjs",
+    "test": "npm run check:built && node test.mjs && node --test lifecycle.test.mjs merchant-abort.test.mjs preparation.test.mjs braintree.test.mjs pre-claim.test.mjs ekashu.test.mjs redsys.test.mjs quickpay.test.mjs paytrail.test.mjs paypal-hosted-fields.test.mjs paypal-card-forms.test.mjs cybersource-secure-acceptance.test.mjs ebanx.test.mjs payrexx.test.mjs payrexx-follow-ups.test.mjs payrexx-adapters.test.mjs nike-order.test.mjs nike-order-adapters.test.mjs autopilot.test.mjs stripe-checkout.test.mjs stripe-setup.test.mjs stripe-legacy-checkout.test.mjs payment-core.test.mjs prepared-processor.test.mjs merchant-hosted.test.mjs merchant-total.test.mjs sandbox-declaration.test.mjs minimum-delay.test.mjs paysafe.test.mjs wix-payments.test.mjs hipay.test.mjs openpay.test.mjs processout.test.mjs payu.test.mjs attachment.test.mjs worker-targets.test.mjs mercado-checkout.test.mjs mercado-polling.test.mjs amadeus.test.mjs pelecard.test.mjs aci.test.mjs primer.test.mjs payrails.test.mjs elavon-converge.test.mjs agentcard.test.mjs buy.test.mjs clean-dist.test.mjs approvals.test.mjs gmo.test.mjs cybersource-flex.test.mjs juspay-gate.test.mjs card-endpoint.test.mjs card-endpoint-fastspring.test.mjs card-endpoint-navigation.test.mjs merchant-session-probe.test.mjs datatrans.test.mjs authorize-net-dpm.test.mjs creditguard.test.mjs eprotect.test.mjs wspay.test.mjs shiji-sts.test.mjs worldline-mycheckout.test.mjs verifone.test.mjs gravy.test.mjs paddle-vgs.test.mjs sbps.test.mjs hold.test.mjs paddle-tokenex.test.mjs lyra.test.mjs gopay.test.mjs paygent.test.mjs twoc2p.test.mjs tap-payments.test.mjs pay-nl.test.mjs toast.test.mjs redact-url.test.mjs hosted-entry.test.mjs comgate.test.mjs przelewy24.test.mjs tokenex-iframe.test.mjs transbank.test.mjs sumup.test.mjs clover.test.mjs eximbay.test.mjs xendit.test.mjs omise.test.mjs fastspring.test.mjs amazon-payment-services.test.mjs barion.test.mjs paymob.test.mjs payu-latam.test.mjs nexi-checkout.test.mjs oceanpayment.test.mjs pin-payments.test.mjs payplug.test.mjs cardlink-vpos.test.mjs eghl.test.mjs paymentwall.test.mjs vtex-payments.test.mjs vtex-payments-window.test.mjs iyzico.test.mjs usaepay.test.mjs viva-wallet.test.mjs aurus.test.mjs monei.test.mjs paystack.test.mjs frisbii.test.mjs && node --test preflight-package.test.mjs preflight-collector.test.mjs browser-tests.test.mjs && node --test kernel-native-qualification.test.mjs && node --test ../vault/scripts/recurly-validation/watch-duty-sdk-result.test.mjs && node scripts/verify-pack.mjs",
     "test:browser": "node browser-tests.mjs",
     "check:payment-core": "node scripts/generate-payment-core.mjs --check",
-    "check:voice-stream": "node scripts/generate-voice-stream.mjs --check",
     "test:preflight": "node --test preflight-package.test.mjs preflight-collector.test.mjs kernel-native-qualification.test.mjs",
     "test:preflight:browser": "node preflight-browser.test.mjs",
     "pack:preview": "node scripts/pack-preflight-preview.mjs",
@@ -46,7 +45,6 @@
     "browser-automation",
     "pci",
     "checkout",
-    "voice",
     "agentcard"
   ],
   "engines": {

package/dist/languages.d.ts

@@ -1,23 +0,0 @@
-/** A language tag as BCP 47 spells it: `en`, `es`, `pt-BR`. */
-export type Language = string;
-/** One language Agentcard speaks, as the API lists it. */
-export interface LanguageInfo {
-    /** The BCP 47 tag your calls name (`en`). */
-    tag: Language;
-    /** The language's own name for itself (`English`, `Español`). */
-    name: string;
-}
-export declare class Languages {
-    private readonly request;
-    private cached;
-    private inflight;
-    constructor(request: <T>(path: string) => Promise<T>);
-    /**
-     * The languages Agentcard speaks, read once and kept for ten minutes. `null`
-     * when the API does not serve the list (an API older than the route), in
-     * which case tags are passed through unchecked and the API judges them.
-     */
-    list(): Promise<LanguageInfo[] | null>;
-    /** Refuses a tag the API did not list (`unsupported_language`) before any call leaves; a well-formed tag passes when the API serves no list. */
-    check(tag: Language | undefined): Promise<void>;
-}

package/dist/languages.js

@@ -1,76 +0,0 @@
-/**
- * Languages are data, not types. A language is a BCP 47 tag (`en`, `es`,
- * `pt-BR`), and the list Agentcard speaks is read from the API
- * (`GET /api/v2/voice/languages`), so a language added on Agentcard's side
- * needs no release of this package. Every call that names a `lang` asks this
- * guard first and is refused with `unsupported_language` before anything is
- * sent when the tag is not on the list.
- */
-import { AgentcardError } from './voice-types.js';
-/** The list out of either wire shape: `data` on the list envelope, else `languages`; null when neither is a list. */
-function listOf(body) {
-    if (Array.isArray(body?.data))
-        return body.data;
-    if (Array.isArray(body?.languages))
-        return body.languages;
-    return null;
-}
-/** A tag's shape, before the list is consulted: a primary subtag and optional subtags, letters and digits only. */
-const TAG_SHAPE = /^[A-Za-z]{2,3}(-[A-Za-z0-9]{1,8})*$/;
-/** How long a read list is trusted before it is read again. */
-const LIST_TTL_MS = 10 * 60_000;
-export class Languages {
-    request;
-    cached = null;
-    inflight = null;
-    constructor(request) {
-        this.request = request;
-    }
-    /**
-     * The languages Agentcard speaks, read once and kept for ten minutes. `null`
-     * when the API does not serve the list (an API older than the route), in
-     * which case tags are passed through unchecked and the API judges them.
-     */
-    async list() {
-        if (this.cached && Date.now() - this.cached.at < LIST_TTL_MS)
-            return this.cached.list;
-        if (this.inflight)
-            return this.inflight;
-        this.inflight = (async () => {
-            let list;
-            try {
-                const body = await this.request('/api/v2/voice/languages');
-                const wire = listOf(body);
-                list = wire
-                    ? wire.flatMap((l) => (l && typeof l === 'object' && typeof l.tag === 'string'
-                        ? [{ tag: l.tag, name: typeof l.name === 'string' ? l.name : l.tag }]
-                        : []))
-                    : null;
-            }
-            catch (err) {
-                // An API that has no list yet answers 404; the tag then travels unchecked. Anything else is the caller's to see.
-                if (err instanceof AgentcardError && (err.status === 404 || err.code === 'not_found'))
-                    list = null;
-                else
-                    throw err;
-            }
-            this.cached = { list, at: Date.now() };
-            return list;
-        })().finally(() => { this.inflight = null; });
-        return this.inflight;
-    }
-    /** Refuses a tag the API did not list (`unsupported_language`) before any call leaves; a well-formed tag passes when the API serves no list. */
-    async check(tag) {
-        if (tag === undefined)
-            return;
-        if (typeof tag !== 'string' || !TAG_SHAPE.test(tag)) {
-            throw new AgentcardError('unsupported_language', `'${String(tag)}' is not a language tag (BCP 47: en, es, pt-BR). Refused before any call.`);
-        }
-        const list = await this.list();
-        if (list === null)
-            return;
-        if (!list.some((l) => l.tag.toLowerCase() === tag.toLowerCase())) {
-            throw new AgentcardError('unsupported_language', `Agentcard does not speak '${tag}' yet. It speaks ${list.map((l) => l.tag).join(', ') || 'no language on this API'}; read voice.languages() for the list. Refused before any call.`, undefined, { tag, languages: list.map((l) => l.tag) });
-        }
-    }
-}

package/dist/voice-pkce.d.ts

@@ -1,49 +0,0 @@
-/**
- * The grant's client half: a PKCE verifier and its S256
- * challenge (RFC 7636), and the opaque `state` the return link carries back.
- * Random bytes come from the platform's WebCrypto; SHA-256 from WebCrypto
- * where it exists (Node, browsers, workers), else from the small
- * implementation below, so the module keeps zero dependencies on a phone
- * runtime with no `crypto.subtle`. A runtime with no secure random source
- * names one through `VoiceOptions.pkce.randomBytes`; nothing here ever
- * falls back to `Math.random`.
- */
-import { type ReturnLink } from './voice-types.js';
-/** Seams for a runtime without WebCrypto (a React Native app running the demo's adapter). */
-export interface PkceCrypto {
-    /** `n` cryptographically random bytes. Default: `crypto.getRandomValues`. */
-    randomBytes?: (n: number) => Uint8Array;
-    /** SHA-256 of the bytes. Default: `crypto.subtle.digest`, else the built-in implementation. */
-    sha256?: (bytes: Uint8Array) => Promise<Uint8Array> | Uint8Array;
-}
-export declare const PKCE_UNAVAILABLE_MESSAGE = "This runtime has no crypto.getRandomValues, so the client cannot mint a PKCE verifier. Name voice: { pkce: { randomBytes } } with a secure source, or pass pkce: false to connect (the polling shape, deprecated).";
-export declare function randomBytes(n: number, seam: PkceCrypto | undefined): Uint8Array;
-export declare function sha256(bytes: Uint8Array, seam: PkceCrypto | undefined): Promise<Uint8Array>;
-/** RFC 4648 §5, no padding: what a verifier, a challenge and a state are made of. */
-export declare function base64url(bytes: Uint8Array): string;
-/** The ASCII bytes of a verifier (it is base64url, so ASCII by construction). */
-export declare function asciiBytes(s: string): Uint8Array;
-export interface PkcePair {
-    /** 43 characters of base64url (32 random bytes): within RFC 7636's 43–128. */
-    code_verifier: string;
-    /** base64url(SHA-256(code_verifier)). */
-    code_challenge: string;
-    code_challenge_method: 'S256';
-    /** 22 characters of base64url (16 random bytes), opaque. */
-    state: string;
-}
-export declare function mintPkce(seam: PkceCrypto | undefined): Promise<PkcePair>;
-/** The `code` and `state` a return link carries, read from its query alone; the scheme may be an app's own. */
-export declare function grantFromReturnLink(url: string): {
-    code: string | null;
-    state: string | null;
-};
-/**
- * A return link, read from its query alone (the scheme may be an app's own, `yourapp://connected?…`): the
- * grant's `code` and `state` (null on a link minted to poll: a reset, an action, `pkce: false`) and the
- * `voice_reset` outcome the Vault appends when the visit reset the person's voice key (`done`, `unchanged`,
- * `failed`; null when the link says nothing about a reset, and for any other word). A pure function with no
- * client behind it: the app half reads the sheet's result with it too.
- */
-export declare function readReturnLink(url: string): ReturnLink;
-export declare function sha256Pure(input: Uint8Array): Uint8Array;

package/dist/voice-pkce.js

@@ -1,147 +0,0 @@
-/**
- * The grant's client half: a PKCE verifier and its S256
- * challenge (RFC 7636), and the opaque `state` the return link carries back.
- * Random bytes come from the platform's WebCrypto; SHA-256 from WebCrypto
- * where it exists (Node, browsers, workers), else from the small
- * implementation below, so the module keeps zero dependencies on a phone
- * runtime with no `crypto.subtle`. A runtime with no secure random source
- * names one through `VoiceOptions.pkce.randomBytes`; nothing here ever
- * falls back to `Math.random`.
- */
-import { AgentcardError } from './voice-types.js';
-export const PKCE_UNAVAILABLE_MESSAGE = 'This runtime has no crypto.getRandomValues, so the client cannot mint a PKCE verifier. Name voice: { pkce: { randomBytes } } with a secure source, or pass pkce: false to connect (the polling shape, deprecated).';
-export function randomBytes(n, seam) {
-    if (seam?.randomBytes) {
-        const out = seam.randomBytes(n);
-        if (!(out instanceof Uint8Array) || out.length !== n)
-            throw new AgentcardError('pkce_unavailable', `voice.pkce.randomBytes must return ${n} bytes.`);
-        return out;
-    }
-    const c = globalThis.crypto;
-    if (!c?.getRandomValues)
-        throw new AgentcardError('pkce_unavailable', PKCE_UNAVAILABLE_MESSAGE);
-    return c.getRandomValues(new Uint8Array(n));
-}
-export async function sha256(bytes, seam) {
-    if (seam?.sha256)
-        return seam.sha256(bytes);
-    const subtle = globalThis.crypto?.subtle;
-    if (subtle?.digest)
-        return new Uint8Array(await subtle.digest('SHA-256', bytes));
-    return sha256Pure(bytes);
-}
-/** RFC 4648 §5, no padding: what a verifier, a challenge and a state are made of. */
-export function base64url(bytes) {
-    const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
-    let out = '';
-    for (let i = 0; i < bytes.length; i += 3) {
-        const a = bytes[i], b = bytes[i + 1], c = bytes[i + 2];
-        const n = (a << 16) | ((b ?? 0) << 8) | (c ?? 0);
-        out += alphabet[(n >>> 18) & 63] + alphabet[(n >>> 12) & 63];
-        if (b !== undefined)
-            out += alphabet[(n >>> 6) & 63];
-        if (c !== undefined)
-            out += alphabet[n & 63];
-    }
-    return out;
-}
-/** The ASCII bytes of a verifier (it is base64url, so ASCII by construction). */
-export function asciiBytes(s) {
-    const out = new Uint8Array(s.length);
-    for (let i = 0; i < s.length; i++)
-        out[i] = s.charCodeAt(i) & 0x7f;
-    return out;
-}
-export async function mintPkce(seam) {
-    const code_verifier = base64url(randomBytes(32, seam));
-    const code_challenge = base64url(await sha256(asciiBytes(code_verifier), seam));
-    const state = base64url(randomBytes(16, seam));
-    return { code_verifier, code_challenge, code_challenge_method: 'S256', state };
-}
-/** The `code` and `state` a return link carries, read from its query alone; the scheme may be an app's own. */
-export function grantFromReturnLink(url) {
-    const { code, state } = readReturnLink(url);
-    return { code, state };
-}
-/**
- * A return link, read from its query alone (the scheme may be an app's own, `yourapp://connected?…`): the
- * grant's `code` and `state` (null on a link minted to poll: a reset, an action, `pkce: false`) and the
- * `voice_reset` outcome the Vault appends when the visit reset the person's voice key (`done`, `unchanged`,
- * `failed`; null when the link says nothing about a reset, and for any other word). A pure function with no
- * client behind it: the app half reads the sheet's result with it too.
- */
-export function readReturnLink(url) {
-    const q = url.indexOf('?');
-    if (q < 0)
-        return { code: null, state: null, voice_reset: null };
-    const hash = url.indexOf('#', q);
-    const params = new URLSearchParams(url.slice(q + 1, hash < 0 ? undefined : hash));
-    const reset = params.get('voice_reset');
-    return {
-        code: params.get('code'),
-        state: params.get('state'),
-        voice_reset: reset === 'done' || reset === 'unchanged' || reset === 'failed' ? reset : null,
-    };
-}
-// ─── SHA-256, FIPS 180-4, for a runtime without crypto.subtle ───────────────
-const K = new Uint32Array([
-    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
-    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
-    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
-    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
-    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
-    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
-    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
-    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
-]);
-export function sha256Pure(input) {
-    const bitLength = input.length * 8;
-    const padded = new Uint8Array(((input.length + 9 + 63) >> 6) << 6);
-    padded.set(input);
-    padded[input.length] = 0x80;
-    const view = new DataView(padded.buffer);
-    view.setUint32(padded.length - 8, Math.floor(bitLength / 0x100000000));
-    view.setUint32(padded.length - 4, bitLength >>> 0);
-    const h = new Uint32Array([0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19]);
-    const w = new Uint32Array(64);
-    const rotr = (x, n) => (x >>> n) | (x << (32 - n));
-    for (let off = 0; off < padded.length; off += 64) {
-        for (let i = 0; i < 16; i++)
-            w[i] = view.getUint32(off + i * 4);
-        for (let i = 16; i < 64; i++) {
-            const s0 = rotr(w[i - 15], 7) ^ rotr(w[i - 15], 18) ^ (w[i - 15] >>> 3);
-            const s1 = rotr(w[i - 2], 17) ^ rotr(w[i - 2], 19) ^ (w[i - 2] >>> 10);
-            w[i] = (w[i - 16] + s0 + w[i - 7] + s1) >>> 0;
-        }
-        let [a, b, c, d, e, f, g, hh] = h;
-        for (let i = 0; i < 64; i++) {
-            const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
-            const ch = (e & f) ^ (~e & g);
-            const t1 = (hh + S1 + ch + K[i] + w[i]) >>> 0;
-            const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
-            const maj = (a & b) ^ (a & c) ^ (b & c);
-            const t2 = (S0 + maj) >>> 0;
-            hh = g;
-            g = f;
-            f = e;
-            e = (d + t1) >>> 0;
-            d = c;
-            c = b;
-            b = a;
-            a = (t1 + t2) >>> 0;
-        }
-        h[0] = (h[0] + a) >>> 0;
-        h[1] = (h[1] + b) >>> 0;
-        h[2] = (h[2] + c) >>> 0;
-        h[3] = (h[3] + d) >>> 0;
-        h[4] = (h[4] + e) >>> 0;
-        h[5] = (h[5] + f) >>> 0;
-        h[6] = (h[6] + g) >>> 0;
-        h[7] = (h[7] + hh) >>> 0;
-    }
-    const out = new Uint8Array(32);
-    const ov = new DataView(out.buffer);
-    for (let i = 0; i < 8; i++)
-        ov.setUint32(i * 4, h[i]);
-    return out;
-}

package/dist/voice-stream.generated.d.ts

@@ -1,118 +0,0 @@
-/**
- * The streaming door, from either side: the person's
- * answer goes to the verifier as it is spoken, over one WebSocket, and the
- * verifier says `hearing` the moment the key word is out and `verdict` when it
- * has closed the span. One call serves a live microphone and a finished
- * recording alike: a buffer pushed in one go and ended is a short stream.
- *
- * Uses the platform's WebSocket (Node 22, React Native, the browser). The
- * credential rides in the first frame, never in a header, so every platform
- * behaves the same.
- */
-import { AgentcardError, type Lang, type Verdict } from './voice-types.js';
-/**
- * How the bytes are encoded. `pcm16-16k`: little-endian 16-bit mono at
- * 16 kHz, judged live. `mulaw-8k`: a telephone band, judged on the words
- * only. `opus`: an Ogg or WebM Opus stream, judged live. A media type such
- * as `audio/m4a` or `audio/wav`: a finished recording pushed in one go, held
- * until `end`, then judged exactly as an upload of the same bytes.
- */
-export type StreamFormat = 'pcm16-16k' | 'mulaw-8k' | 'opus' | `audio/${string}`;
-/**
- * How the take is heard: the phone's own microphone, a wired headset, a Bluetooth one, or
- * unknown when the platform says nothing. The verifier scores the voice on that route's cohort when it has one
- * and records a change from the enrolment's route as evidence; only the kind travels, never a device name.
- */
-export type ChannelKind = 'builtin' | 'wired' | 'bluetooth' | 'unknown';
-export declare const CHANNEL_KINDS: readonly ChannelKind[];
-/** The key word (and, on a phone's stream, the price) is out: a bot may start its next line now. `heard_count` is how many words landed; the words themselves never cross (WP115). */
-export interface Hearing {
-    heard_count: number;
-}
-/** The verifier's verdict on the stream: the upload verdict plus what the live door knows. */
-/**
- * The verifier's signed word on a take (WP182): `payload` is the exact JSON string the signature covers (the challenge
- * id, `accepted`, the template hash it matched, `z`, `cos`, `spoof_bits`, `issued_at`), `signature` the raw ECDSA
- * `r || s` bytes base64url under the receipt key the Vault's page stamped on the listen, `kid` that key's name. The
- * host relays it to the frame as `host-judged` once the proof landed; the frame checks the signature itself.
- */
-export interface VerdictReceipt {
-    payload: string;
-    signature: string;
-    alg: string;
-    kid: string;
-}
-export interface StreamVerdict extends Verdict {
-    reason: string;
-    bits: {
-        words: number;
-        voice: number;
-        total: number;
-    };
-    cos: number | null;
-    z: number | null;
-    speech_s: number;
-    /** From the first byte to the verdict. */
-    ms: number;
-    /** From the caller's last byte (or `end`) to the verdict: what streaming saves. */
-    since_end_ms: number;
-    /** Why the verifier closed the span: `all_words`, `quiet`, `ended`, `stalled`, `span_cap`, `wall_cap`. */
-    closed_by: string;
-    /** The verifier's signed receipt for this take (WP182), when it sent one. */
-    receipt?: VerdictReceipt;
-}
-export interface StreamInput {
-    /** The verifier's streaming address, `wss://…/v1/stream` (`ws://` against a local verifier). */
-    stream_url: string;
-    authorization_id: string;
-    challenge_id: string;
-    lang: Lang;
-    format: StreamFormat;
-    /** The credential for this answer: the challenge's `answer_token` on the app side, the business's bearer on the server side. */
-    token: string;
-    /** The channel the take is heard on, when known at the open; `handle.channel(kind)` names it later. */
-    channel?: ChannelKind;
-    /** Test seam: the WebSocket constructor; defaults to the platform's. */
-    WebSocket?: typeof WebSocket;
-}
-type Listener<T> = (value: T) => void;
-export interface StreamHandle {
-    readonly format: StreamFormat;
-    /** Queue bytes; they go the moment the socket is open. */
-    push(chunk: ArrayBuffer | Uint8Array): void;
-    /** Nothing more is coming: the verifier closes the span with what it has. */
-    end(): void;
-    /** How the take is heard, once the microphone is open and the device is known; before the verdict. */
-    channel(kind: ChannelKind): void;
-    /**
-     * The audio that follows is sealed (WP115): the take's ephemeral key goes ahead of it as the stream's `sealed`
-     * frame, once, before the first push. The verifier opens every later chunk with it; this side reads none of them.
-     * `kid` names the verifier key the take was sealed to (the first sixteen hex characters of SHA-256 over its SPKI,
-     * as the frame computes it): after a key rotation the verifier opens the take under the key it names, inside the
-     * previous key's grace window, instead of assuming the current one and refusing. A head with no `kid` means the
-     * current key, as a frame from before the field sealed to it.
-     */
-    seal(head: {
-        alg: string;
-        eph: string;
-        kid?: string;
-    }): void;
-    on(event: 'hearing', fn: Listener<Hearing>): StreamHandle;
-    on(event: 'verdict', fn: Listener<StreamVerdict>): StreamHandle;
-    on(event: 'error', fn: Listener<AgentcardError>): StreamHandle;
-    /** Resolves with the verdict; rejects with an `AgentcardError` carrying the verifier's code. */
-    verdict(): Promise<StreamVerdict>;
-    /** Drops the socket without a verdict (the person walked away). */
-    close(): void;
-}
-/** Opens the door and hands back the handle. The first frame names the challenge; bytes follow. */
-export declare function openStream(input: StreamInput): StreamHandle;
-/**
- * A finished recording through the same door. For `pcm16-16k` with `chunkMs`
- * the bytes go in timed chunks, as a microphone would send them; otherwise
- * the whole buffer goes at once. Ends the stream and resolves the verdict.
- */
-export declare function streamBuffer(handle: StreamHandle, bytes: ArrayBuffer | Uint8Array, chunkMs?: number): Promise<StreamVerdict>;
-/** The verifier's streaming address from its origin (`/v1/stream` appended) or a full address, as given. */
-export declare function streamAddress(verifierUrl: string): string;
-export {};