@agent-score/commerce 2.3.0 → 2.5.0

package/dist/index.d.mts

@@ -1,15 +1,18 @@
 import { VerifyWalletSignerResult, DenialReason } from './core.mjs';
 export { AccountVerification, AgentIdentity, AgentMemoryHint, AgentScoreCore, AssessResult, CreateSessionOnMissing, DenialCode, EvaluateOutcome, OperatorVerification, PolicyCheck, PolicyResult, SignerVerdict, buildAgentMemoryHint } from './core.mjs';
 export { P as PaymentSigner, S as SignerNetwork, e as extractPaymentSigner, a as extractPaymentSignerFromAuth, b as extractSignerForPrecheck, r as readX402PaymentHeader } from './signer-3FAit11j.mjs';
-import { q as UCPSigningKey, n as UCPProfile } from './checkout-Ceo1_rVJ.mjs';
-export { A as AGENTSCORE_UCP_CAPABILITY, a as AgentScoreGatePolicy, C as Checkout, b as CheckoutContext, c as CheckoutGateConfig, d as CheckoutRailSpec, e as CheckoutRequest, f as CheckoutResult, g as ComposeMppxFn, D as DiscoveryProbeConfig, G as GateDenial, I as IsCachedAddressFn, M as MountUcpRoutesOptions, h as MppxComposeOutcome, O as OnSettledFn, P as PreValidateFn, i as PricingFn, j as PricingResult, R as RecipientsFn, k as ReferenceIdFn, l as RunGateFn, S as SettleOutcome, U as UCPCapabilityBinding, m as UCPPaymentHandlerBinding, o as UCPProfileBody, p as UCPServiceBinding, r as buildUCPProfile, s as getIdentityStatus, t as makeMppxComposeHook, u as mppPaymentHandler, v as pricingResult, w as stripeSptPaymentHandler, x as validationEnvelope, y as validationResponseExpress, z as validationResponseFastify, B as validationResponseHono, E as validationResponseNextjs, F as validationResponseWeb, H as x402PaymentHandler } from './checkout-Ceo1_rVJ.mjs';
+import { q as UCPSigningKey, n as UCPProfile } from './checkout-o17dIxHi.mjs';
+export { A as AGENTSCORE_UCP_CAPABILITY, a as AgentScoreGatePolicy, C as Checkout, b as CheckoutContext, c as CheckoutGateConfig, d as CheckoutRailSpec, e as CheckoutRequest, f as CheckoutResult, g as ComposeMppxFn, D as DiscoveryProbeConfig, G as GateDenial, I as IsCachedAddressFn, M as MountUcpRoutesOptions, h as MppxComposeOutcome, O as OnSettledFn, P as PreValidateFn, i as PricingFn, j as PricingResult, R as RecipientsFn, k as ReferenceIdFn, l as RunGateFn, S as SettleOutcome, U as UCPCapabilityBinding, m as UCPPaymentHandlerBinding, o as UCPProfileBody, p as UCPServiceBinding, r as buildAipTrustedIssuers, s as buildUCPProfile, t as getIdentityStatus, u as makeMppxComposeHook, v as mppPaymentHandler, w as pricingResult, x as stripeSptPaymentHandler, y as validationEnvelope, z as validationResponseExpress, B as validationResponseFastify, E as validationResponseHono, F as validationResponseNextjs, H as validationResponseWeb, J as x402PaymentHandler } from './checkout-o17dIxHi.mjs';
 export { EnforcementMode, GateResult, IdentityStatus, PolicyBlock, buildGateFromPolicy, runGateWithEnforcement, shippingCountryAllowed, shippingStateAllowed, validateShippingAgainstPolicy } from './identity/policy.mjs';
-import { H as HeadersLike } from './default_rails-K25PtWrL.mjs';
-export { c as buildDefaultCheckoutRails, d as buildMppxComposeRails, f as formatUsdCents, h as hasMppxHeader, e as hasPaymentHeader, g as hasX402Header, l as loadSolanaFeePayer } from './default_rails-K25PtWrL.mjs';
-import { T as TempoRailSpec, X as X402BaseRailSpec, S as SolanaMppRailSpec, b as StripeRailSpec } from './rail_spec-B1239jPp.mjs';
-export { c as TempoSessionRailSpec } from './rail_spec-B1239jPp.mjs';
+import { H as HeadersLike } from './network_kind-C0EMkdzz.mjs';
+export { c as buildDefaultCheckoutRails, d as buildMppxComposeRails, f as formatUsdCents, h as hasMppxHeader, e as hasPaymentHeader, g as hasX402Header, i as isEvmNetwork, j as isSolanaNetwork, l as loadSolanaFeePayer } from './network_kind-C0EMkdzz.mjs';
+import { T as TempoRailSpec, X as X402BaseRailSpec, S as SolanaMppRailSpec, b as StripeRailSpec } from './rail_spec-BFZmW9RN.mjs';
+export { c as TempoSessionRailSpec } from './rail_spec-BFZmW9RN.mjs';
 import { Context } from 'hono';
-import './pricing-BReyZiqN.mjs';
+import { o as VerifyRequestContext } from './gate-CWP10xPQ.mjs';
+export { A as AGENTSCORE_CANONICAL_ISSUER, a as AGENT_IDENTITY_HEADER, b as AipGateOptions, c as AipGateResult, d as AitHeader, e as AitPayload, f as AitValidationResult, g as AmrValue, H as HARD_MAX_CACHE_SECONDS, I as IdentityClaim, h as IntentClaim, J as JWKS_WELL_KNOWN_PATH, i as JwksCache, j as JwksCacheOptions, k as JwksLookupResult, T as TrustLevel, V as VerifiedAit, l as VerifyAitFailure, m as VerifyAitOptions, n as VerifyAitResult, p as aipErrorCode, q as aipErrorStatus, r as buildAipErrorBody, s as canonicalizeIssuer, t as isAitShape, v as validateAitPayload, u as verifyAit, w as verifyAitRequest } from './gate-CWP10xPQ.mjs';
+import { JWK } from 'jose';
+import './pricing-KHDqMLd7.mjs';
 import './x402_server-Ciz2mls2.mjs';
 
 /**
@@ -163,7 +166,7 @@ declare function verificationAgentInstructions({ userAction, retryStep, extraSte
  *     status: 403,
  *     body: buildVerificationRequiredBody(reason, {
  *       message: 'Identity verification is required to call this endpoint.',
- *       agentInstructions: VERIFICATION_AGENT_INSTRUCTIONS,
+ *       agentInstructions: JSON.stringify(VERIFICATION_AGENT_INSTRUCTIONS),
  *     }),
  *   };
  * }
@@ -599,9 +602,8 @@ declare function extractOwnerScope(input: Request | HeadersLike): OwnerScope;
  * Cross-module typed errors.
  *
  * Lives in its own module so `payment/` and `stripe-multichain/` helpers can
- * throw `CheckoutValidationError` without importing from `checkout.ts`. (In
- * the python sibling this avoids a checkout → payment → checkout cycle; in
- * node it sidesteps tsup's per-entry class duplication.)
+ * throw `CheckoutValidationError` without importing from `checkout.ts` — this
+ * also sidesteps tsup's per-entry class duplication.
  *
  * Re-exported from `checkout.ts` and the top-level entry to preserve the
  * public import path.
@@ -866,8 +868,8 @@ interface ComputeFirstHandler {
 declare function computeFirstCheckout(opts: ComputeFirstOptions): ComputeFirstHandler;
 
 /** Factory for the standard `onDenied` callback shape used by Checkout's
- *  gate config. Replaces the ~100-line switch every consumer codebase
- *  (sayer, martin, sandbox) wrote by hand.
+ *  gate config. Replaces the denial-mapping switch a merchant would otherwise
+ *  hand-write.
  *
  *  The shape is framework-neutral (`{status, body, headers?}`) — matches
  *  `Checkout`'s `onDenied` signature directly. For per-framework gate
@@ -928,4 +930,117 @@ declare function createDefaultOnDenied(opts: CreateDefaultOnDeniedOptions): (rea
  */
 declare function defaultReadOnlyOnDenied(reason: DenialReason): DefaultOnDeniedResult;
 
-export { type A2AAgentCard, type A2AAgentCardCapabilities, type A2AAgentCardExtension, type A2AAgentCardSignature, type A2AAgentInterface, type A2AAgentProvider, type A2AAgentSkill, A2A_DEFAULT_TRANSPORT, A2A_PROTOCOL_VERSION, type CachedQuote, CheckoutValidationError, type ComputeFirstHandler, type ComputeFirstMintContext, type ComputeFirstMppContext, type ComputeFirstOptions, type ComputeFirstRails, type ComputeFirstSettledContext, type ComputeFirstWorkContext, type CreateDefaultOnDeniedOptions, type DefaultOnDeniedResult, DenialReason, FIXABLE_DENIAL_REASONS, type GeneratedUCPKey, type JWKSResponse, type MintedRecipients, type OwnerScope, type QuoteCache, type QuoteCacheOptions, type SignedUCPProfile, SolanaMppRailSpec, StripeRailSpec, type SuccessBodyArgs, TempoRailSpec, UCPProfile, UCPSigningKey, UCPVerificationError, UCP_A2A_EXTENSION_URI, VerifyWalletSignerResult, type WorkOutcome, X402BaseRailSpec, buildA2AAgentCard, buildContactSupportNextSteps, buildJWKSResponse, buildSignerMismatchBody, buildVerificationRequiredBody, computeFirstCheckout, createDefaultOnDenied, createQuoteCache, defaultReadOnlyOnDenied, denialReasonStatus, denialReasonToBody, extractOwnerScope, generateUCPSigningKey, hashOperatorToken, isFixableDenial, loadUCPSigningKeyFromEnv, signUCPProfile, ucpA2AExtension, verificationAgentInstructions, verifyUCPProfile };
+/**
+ * RFC 9421 HTTP Message Signatures — the AIP-constrained subset.
+ *
+ * AIP (Agentic Identity Protocol) binds an Agent Identity Token (AIT) to the
+ * agent that presents it: the agent signs each HTTP request with the private key whose
+ * public half is carried in the AIT's `cnf.jwk` (RFC 7800). A verifier reconstructs the
+ * RFC 9421 signature base, verifies it against `cnf.jwk`, and confirms the signature's
+ * `keyid` equals the JWK thumbprint (RFC 7638) of that key. A stolen AIT is then useless
+ * without the bound private key.
+ *
+ * This module implements ONLY the shape AIP uses, not the full RFC 9421 grammar:
+ *
+ *   - Covered components: the derived components `@method`, `@authority`, `@path`, plus the
+ *     `agent-identity` header field. (The AIP "minimum required" set.) Extra components in a
+ *     presented signature are accepted and covered if the caller supplies their values.
+ *   - One labeled signature per request, tagged `tag="agent-identity"`. Web Bot Auth
+ *     signatures (`tag="web-bot-auth"`) may coexist on the same request under a different
+ *     label; we select ours by tag, ignoring the rest.
+ *   - Algorithm: Ed25519 (EdDSA over OKP/Ed25519). AIP's default and only signing curve.
+ *
+ * The structured-field parsing here is deliberately narrow: it parses the AIP member of the
+ * `Signature-Input` / `Signature` dictionaries (a parenthesized inner list + integer/string
+ * params, and a single byte-sequence value). It is not a general RFC 8941 parser.
+ */
+
+/** The AIP "minimum required" covered components, in canonical order. */
+declare const AIP_COVERED_COMPONENTS: readonly ["@method", "@authority", "@path", "agent-identity"];
+/** Tag that identifies the AIP signature among coexisting RFC 9421 signatures. */
+declare const AIP_SIGNATURE_TAG = "agent-identity";
+/** Parameters parsed from (or used to build) a `Signature-Input` member. */
+interface SignatureParams {
+    components: string[];
+    created?: number;
+    expires?: number;
+    keyid?: string;
+    tag?: string;
+    alg?: string;
+}
+interface VerifyMessageSignatureInput {
+    /** HTTP method, e.g. `POST`. Case-insensitive; normalized to upper. */
+    method: string;
+    /** Authority (host[:port]), e.g. `wine-merchant.com`. Lowercased; default ports dropped. */
+    authority: string;
+    /** Request path (no query), e.g. `/checkout`. */
+    path: string;
+    /** Raw value of the `Agent-Identity` header the signature covers. */
+    agentIdentity: string;
+    /** Raw `Signature-Input` header value. */
+    signatureInput: string;
+    /** Raw `Signature` header value. */
+    signature: string;
+    /** The agent's public key from the AIT's `cnf.jwk`. */
+    cnfJwk: JWK;
+    /** Wall-clock seconds; defaults to now. Injectable for tests. */
+    now?: number;
+    /** Skew tolerance for created/expires. Defaults to {@link DEFAULT_MAX_SKEW_SECONDS}. */
+    maxSkewSeconds?: number;
+    /** Extra covered-component values, keyed by component name (for components beyond the AIP minimum). */
+    extraComponents?: Record<string, string>;
+}
+type VerifyFailureReason = 'no_aip_signature' | 'malformed_signature_input' | 'malformed_signature' | 'unsupported_alg' | 'missing_keyid' | 'keyid_mismatch' | 'missing_covered_component' | 'created_in_future' | 'expired' | 'unsupported_cnf_key' | 'signature_invalid';
+type VerifyMessageSignatureResult = {
+    ok: true;
+    params: SignatureParams;
+} | {
+    ok: false;
+    reason: VerifyFailureReason;
+};
+/**
+ * Verify an AIP HTTP Message Signature. Performs the full check:
+ *   1. select the AIP-tagged member of `Signature-Input`
+ *   2. confirm the AIP minimum covered components are present
+ *   3. enforce `created`/`expires` against `now` with skew tolerance
+ *   4. confirm `keyid` equals the RFC 7638 thumbprint of `cnf.jwk`
+ *   5. reconstruct the signature base and verify Ed25519 over it
+ */
+declare const verifyMessageSignature: (input: VerifyMessageSignatureInput) => Promise<VerifyMessageSignatureResult>;
+interface SignMessageInput {
+    method: string;
+    authority: string;
+    path: string;
+    agentIdentity: string;
+    /** Agent private key (Ed25519 JWK with `d`). */
+    privateJwk: JWK;
+    /** Agent public key; used to derive `keyid` (thumbprint). */
+    publicJwk: JWK;
+    created?: number;
+    expires?: number;
+    /** Signature dictionary label. Defaults to `ait`. */
+    label?: string;
+    components?: string[];
+    extraComponents?: Record<string, string>;
+}
+/** Build the `Signature-Input` and `Signature` header values for an AIP request. */
+declare const signMessage: (input: SignMessageInput) => Promise<{
+    signatureInput: string;
+    signature: string;
+}>;
+
+/**
+ * Build an AIP {@link VerifyRequestContext} from a standard WHATWG `Request`.
+ *
+ * Every framework adapter ultimately has (or can produce) a `Request`: Hono exposes
+ * `c.req.raw`, Next.js / Web Fetch hand you one directly, and Express/Fastify can be shimmed.
+ * This helper centralizes the header + URL extraction so adapters stay thin and the parsing
+ * rules (authority derivation, multiple `Agent-Identity` headers) live in one place.
+ */
+
+/** Build the framework-agnostic verify context from a standard `Request`. */
+declare const buildVerifyContextFromRequest: (req: Request) => VerifyRequestContext;
+/** True when the request carries an AIP credential (at least one `Agent-Identity` header). */
+declare const hasAgentIdentityHeader: (req: Request) => boolean;
+
+export { type A2AAgentCard, type A2AAgentCardCapabilities, type A2AAgentCardExtension, type A2AAgentCardSignature, type A2AAgentInterface, type A2AAgentProvider, type A2AAgentSkill, A2A_DEFAULT_TRANSPORT, A2A_PROTOCOL_VERSION, AIP_COVERED_COMPONENTS, AIP_SIGNATURE_TAG, type CachedQuote, CheckoutValidationError, type ComputeFirstHandler, type ComputeFirstMintContext, type ComputeFirstMppContext, type ComputeFirstOptions, type ComputeFirstRails, type ComputeFirstSettledContext, type ComputeFirstWorkContext, type CreateDefaultOnDeniedOptions, type DefaultOnDeniedResult, DenialReason, FIXABLE_DENIAL_REASONS, type GeneratedUCPKey, type JWKSResponse, type MintedRecipients, type OwnerScope, type QuoteCache, type QuoteCacheOptions, type SignMessageInput, type SignedUCPProfile, SolanaMppRailSpec, StripeRailSpec, type SuccessBodyArgs, TempoRailSpec, UCPProfile, UCPSigningKey, UCPVerificationError, UCP_A2A_EXTENSION_URI, type VerifyFailureReason, type VerifyMessageSignatureInput, type VerifyMessageSignatureResult, VerifyRequestContext, VerifyWalletSignerResult, type WorkOutcome, X402BaseRailSpec, buildA2AAgentCard, buildContactSupportNextSteps, buildJWKSResponse, buildSignerMismatchBody, buildVerificationRequiredBody, buildVerifyContextFromRequest, computeFirstCheckout, createDefaultOnDenied, createQuoteCache, defaultReadOnlyOnDenied, denialReasonStatus, denialReasonToBody, extractOwnerScope, generateUCPSigningKey, hasAgentIdentityHeader, hashOperatorToken, isFixableDenial, loadUCPSigningKeyFromEnv, signMessage, signUCPProfile, ucpA2AExtension, verificationAgentInstructions, verifyMessageSignature, verifyUCPProfile };

package/dist/index.d.ts

@@ -1,15 +1,18 @@
 import { VerifyWalletSignerResult, DenialReason } from './core.js';
 export { AccountVerification, AgentIdentity, AgentMemoryHint, AgentScoreCore, AssessResult, CreateSessionOnMissing, DenialCode, EvaluateOutcome, OperatorVerification, PolicyCheck, PolicyResult, SignerVerdict, buildAgentMemoryHint } from './core.js';
 export { P as PaymentSigner, S as SignerNetwork, e as extractPaymentSigner, a as extractPaymentSignerFromAuth, b as extractSignerForPrecheck, r as readX402PaymentHeader } from './signer-3FAit11j.js';
-import { q as UCPSigningKey, n as UCPProfile } from './checkout-ChyOi7aU.js';
-export { A as AGENTSCORE_UCP_CAPABILITY, a as AgentScoreGatePolicy, C as Checkout, b as CheckoutContext, c as CheckoutGateConfig, d as CheckoutRailSpec, e as CheckoutRequest, f as CheckoutResult, g as ComposeMppxFn, D as DiscoveryProbeConfig, G as GateDenial, I as IsCachedAddressFn, M as MountUcpRoutesOptions, h as MppxComposeOutcome, O as OnSettledFn, P as PreValidateFn, i as PricingFn, j as PricingResult, R as RecipientsFn, k as ReferenceIdFn, l as RunGateFn, S as SettleOutcome, U as UCPCapabilityBinding, m as UCPPaymentHandlerBinding, o as UCPProfileBody, p as UCPServiceBinding, r as buildUCPProfile, s as getIdentityStatus, t as makeMppxComposeHook, u as mppPaymentHandler, v as pricingResult, w as stripeSptPaymentHandler, x as validationEnvelope, y as validationResponseExpress, z as validationResponseFastify, B as validationResponseHono, E as validationResponseNextjs, F as validationResponseWeb, H as x402PaymentHandler } from './checkout-ChyOi7aU.js';
+import { q as UCPSigningKey, n as UCPProfile } from './checkout-McfNpZJf.js';
+export { A as AGENTSCORE_UCP_CAPABILITY, a as AgentScoreGatePolicy, C as Checkout, b as CheckoutContext, c as CheckoutGateConfig, d as CheckoutRailSpec, e as CheckoutRequest, f as CheckoutResult, g as ComposeMppxFn, D as DiscoveryProbeConfig, G as GateDenial, I as IsCachedAddressFn, M as MountUcpRoutesOptions, h as MppxComposeOutcome, O as OnSettledFn, P as PreValidateFn, i as PricingFn, j as PricingResult, R as RecipientsFn, k as ReferenceIdFn, l as RunGateFn, S as SettleOutcome, U as UCPCapabilityBinding, m as UCPPaymentHandlerBinding, o as UCPProfileBody, p as UCPServiceBinding, r as buildAipTrustedIssuers, s as buildUCPProfile, t as getIdentityStatus, u as makeMppxComposeHook, v as mppPaymentHandler, w as pricingResult, x as stripeSptPaymentHandler, y as validationEnvelope, z as validationResponseExpress, B as validationResponseFastify, E as validationResponseHono, F as validationResponseNextjs, H as validationResponseWeb, J as x402PaymentHandler } from './checkout-McfNpZJf.js';
 export { EnforcementMode, GateResult, IdentityStatus, PolicyBlock, buildGateFromPolicy, runGateWithEnforcement, shippingCountryAllowed, shippingStateAllowed, validateShippingAgainstPolicy } from './identity/policy.js';
-import { H as HeadersLike } from './default_rails-DtR_E9N9.js';
-export { c as buildDefaultCheckoutRails, d as buildMppxComposeRails, f as formatUsdCents, h as hasMppxHeader, e as hasPaymentHeader, g as hasX402Header, l as loadSolanaFeePayer } from './default_rails-DtR_E9N9.js';
-import { T as TempoRailSpec, X as X402BaseRailSpec, S as SolanaMppRailSpec, b as StripeRailSpec } from './rail_spec-B1239jPp.js';
-export { c as TempoSessionRailSpec } from './rail_spec-B1239jPp.js';
+import { H as HeadersLike } from './network_kind-BIJM2peR.js';
+export { c as buildDefaultCheckoutRails, d as buildMppxComposeRails, f as formatUsdCents, h as hasMppxHeader, e as hasPaymentHeader, g as hasX402Header, i as isEvmNetwork, j as isSolanaNetwork, l as loadSolanaFeePayer } from './network_kind-BIJM2peR.js';
+import { T as TempoRailSpec, X as X402BaseRailSpec, S as SolanaMppRailSpec, b as StripeRailSpec } from './rail_spec-BFZmW9RN.js';
+export { c as TempoSessionRailSpec } from './rail_spec-BFZmW9RN.js';
 import { Context } from 'hono';
-import './pricing-B3-aKxSz.js';
+import { o as VerifyRequestContext } from './gate-CWP10xPQ.js';
+export { A as AGENTSCORE_CANONICAL_ISSUER, a as AGENT_IDENTITY_HEADER, b as AipGateOptions, c as AipGateResult, d as AitHeader, e as AitPayload, f as AitValidationResult, g as AmrValue, H as HARD_MAX_CACHE_SECONDS, I as IdentityClaim, h as IntentClaim, J as JWKS_WELL_KNOWN_PATH, i as JwksCache, j as JwksCacheOptions, k as JwksLookupResult, T as TrustLevel, V as VerifiedAit, l as VerifyAitFailure, m as VerifyAitOptions, n as VerifyAitResult, p as aipErrorCode, q as aipErrorStatus, r as buildAipErrorBody, s as canonicalizeIssuer, t as isAitShape, v as validateAitPayload, u as verifyAit, w as verifyAitRequest } from './gate-CWP10xPQ.js';
+import { JWK } from 'jose';
+import './pricing-CytRwhC2.js';
 import './x402_server-Ciz2mls2.js';
 
 /**
@@ -163,7 +166,7 @@ declare function verificationAgentInstructions({ userAction, retryStep, extraSte
  *     status: 403,
  *     body: buildVerificationRequiredBody(reason, {
  *       message: 'Identity verification is required to call this endpoint.',
- *       agentInstructions: VERIFICATION_AGENT_INSTRUCTIONS,
+ *       agentInstructions: JSON.stringify(VERIFICATION_AGENT_INSTRUCTIONS),
  *     }),
  *   };
  * }
@@ -599,9 +602,8 @@ declare function extractOwnerScope(input: Request | HeadersLike): OwnerScope;
  * Cross-module typed errors.
  *
  * Lives in its own module so `payment/` and `stripe-multichain/` helpers can
- * throw `CheckoutValidationError` without importing from `checkout.ts`. (In
- * the python sibling this avoids a checkout → payment → checkout cycle; in
- * node it sidesteps tsup's per-entry class duplication.)
+ * throw `CheckoutValidationError` without importing from `checkout.ts` — this
+ * also sidesteps tsup's per-entry class duplication.
  *
  * Re-exported from `checkout.ts` and the top-level entry to preserve the
  * public import path.
@@ -866,8 +868,8 @@ interface ComputeFirstHandler {
 declare function computeFirstCheckout(opts: ComputeFirstOptions): ComputeFirstHandler;
 
 /** Factory for the standard `onDenied` callback shape used by Checkout's
- *  gate config. Replaces the ~100-line switch every consumer codebase
- *  (sayer, martin, sandbox) wrote by hand.
+ *  gate config. Replaces the denial-mapping switch a merchant would otherwise
+ *  hand-write.
  *
  *  The shape is framework-neutral (`{status, body, headers?}`) — matches
  *  `Checkout`'s `onDenied` signature directly. For per-framework gate
@@ -928,4 +930,117 @@ declare function createDefaultOnDenied(opts: CreateDefaultOnDeniedOptions): (rea
  */
 declare function defaultReadOnlyOnDenied(reason: DenialReason): DefaultOnDeniedResult;
 
-export { type A2AAgentCard, type A2AAgentCardCapabilities, type A2AAgentCardExtension, type A2AAgentCardSignature, type A2AAgentInterface, type A2AAgentProvider, type A2AAgentSkill, A2A_DEFAULT_TRANSPORT, A2A_PROTOCOL_VERSION, type CachedQuote, CheckoutValidationError, type ComputeFirstHandler, type ComputeFirstMintContext, type ComputeFirstMppContext, type ComputeFirstOptions, type ComputeFirstRails, type ComputeFirstSettledContext, type ComputeFirstWorkContext, type CreateDefaultOnDeniedOptions, type DefaultOnDeniedResult, DenialReason, FIXABLE_DENIAL_REASONS, type GeneratedUCPKey, type JWKSResponse, type MintedRecipients, type OwnerScope, type QuoteCache, type QuoteCacheOptions, type SignedUCPProfile, SolanaMppRailSpec, StripeRailSpec, type SuccessBodyArgs, TempoRailSpec, UCPProfile, UCPSigningKey, UCPVerificationError, UCP_A2A_EXTENSION_URI, VerifyWalletSignerResult, type WorkOutcome, X402BaseRailSpec, buildA2AAgentCard, buildContactSupportNextSteps, buildJWKSResponse, buildSignerMismatchBody, buildVerificationRequiredBody, computeFirstCheckout, createDefaultOnDenied, createQuoteCache, defaultReadOnlyOnDenied, denialReasonStatus, denialReasonToBody, extractOwnerScope, generateUCPSigningKey, hashOperatorToken, isFixableDenial, loadUCPSigningKeyFromEnv, signUCPProfile, ucpA2AExtension, verificationAgentInstructions, verifyUCPProfile };
+/**
+ * RFC 9421 HTTP Message Signatures — the AIP-constrained subset.
+ *
+ * AIP (Agentic Identity Protocol) binds an Agent Identity Token (AIT) to the
+ * agent that presents it: the agent signs each HTTP request with the private key whose
+ * public half is carried in the AIT's `cnf.jwk` (RFC 7800). A verifier reconstructs the
+ * RFC 9421 signature base, verifies it against `cnf.jwk`, and confirms the signature's
+ * `keyid` equals the JWK thumbprint (RFC 7638) of that key. A stolen AIT is then useless
+ * without the bound private key.
+ *
+ * This module implements ONLY the shape AIP uses, not the full RFC 9421 grammar:
+ *
+ *   - Covered components: the derived components `@method`, `@authority`, `@path`, plus the
+ *     `agent-identity` header field. (The AIP "minimum required" set.) Extra components in a
+ *     presented signature are accepted and covered if the caller supplies their values.
+ *   - One labeled signature per request, tagged `tag="agent-identity"`. Web Bot Auth
+ *     signatures (`tag="web-bot-auth"`) may coexist on the same request under a different
+ *     label; we select ours by tag, ignoring the rest.
+ *   - Algorithm: Ed25519 (EdDSA over OKP/Ed25519). AIP's default and only signing curve.
+ *
+ * The structured-field parsing here is deliberately narrow: it parses the AIP member of the
+ * `Signature-Input` / `Signature` dictionaries (a parenthesized inner list + integer/string
+ * params, and a single byte-sequence value). It is not a general RFC 8941 parser.
+ */
+
+/** The AIP "minimum required" covered components, in canonical order. */
+declare const AIP_COVERED_COMPONENTS: readonly ["@method", "@authority", "@path", "agent-identity"];
+/** Tag that identifies the AIP signature among coexisting RFC 9421 signatures. */
+declare const AIP_SIGNATURE_TAG = "agent-identity";
+/** Parameters parsed from (or used to build) a `Signature-Input` member. */
+interface SignatureParams {
+    components: string[];
+    created?: number;
+    expires?: number;
+    keyid?: string;
+    tag?: string;
+    alg?: string;
+}
+interface VerifyMessageSignatureInput {
+    /** HTTP method, e.g. `POST`. Case-insensitive; normalized to upper. */
+    method: string;
+    /** Authority (host[:port]), e.g. `wine-merchant.com`. Lowercased; default ports dropped. */
+    authority: string;
+    /** Request path (no query), e.g. `/checkout`. */
+    path: string;
+    /** Raw value of the `Agent-Identity` header the signature covers. */
+    agentIdentity: string;
+    /** Raw `Signature-Input` header value. */
+    signatureInput: string;
+    /** Raw `Signature` header value. */
+    signature: string;
+    /** The agent's public key from the AIT's `cnf.jwk`. */
+    cnfJwk: JWK;
+    /** Wall-clock seconds; defaults to now. Injectable for tests. */
+    now?: number;
+    /** Skew tolerance for created/expires. Defaults to {@link DEFAULT_MAX_SKEW_SECONDS}. */
+    maxSkewSeconds?: number;
+    /** Extra covered-component values, keyed by component name (for components beyond the AIP minimum). */
+    extraComponents?: Record<string, string>;
+}
+type VerifyFailureReason = 'no_aip_signature' | 'malformed_signature_input' | 'malformed_signature' | 'unsupported_alg' | 'missing_keyid' | 'keyid_mismatch' | 'missing_covered_component' | 'created_in_future' | 'expired' | 'unsupported_cnf_key' | 'signature_invalid';
+type VerifyMessageSignatureResult = {
+    ok: true;
+    params: SignatureParams;
+} | {
+    ok: false;
+    reason: VerifyFailureReason;
+};
+/**
+ * Verify an AIP HTTP Message Signature. Performs the full check:
+ *   1. select the AIP-tagged member of `Signature-Input`
+ *   2. confirm the AIP minimum covered components are present
+ *   3. enforce `created`/`expires` against `now` with skew tolerance
+ *   4. confirm `keyid` equals the RFC 7638 thumbprint of `cnf.jwk`
+ *   5. reconstruct the signature base and verify Ed25519 over it
+ */
+declare const verifyMessageSignature: (input: VerifyMessageSignatureInput) => Promise<VerifyMessageSignatureResult>;
+interface SignMessageInput {
+    method: string;
+    authority: string;
+    path: string;
+    agentIdentity: string;
+    /** Agent private key (Ed25519 JWK with `d`). */
+    privateJwk: JWK;
+    /** Agent public key; used to derive `keyid` (thumbprint). */
+    publicJwk: JWK;
+    created?: number;
+    expires?: number;
+    /** Signature dictionary label. Defaults to `ait`. */
+    label?: string;
+    components?: string[];
+    extraComponents?: Record<string, string>;
+}
+/** Build the `Signature-Input` and `Signature` header values for an AIP request. */
+declare const signMessage: (input: SignMessageInput) => Promise<{
+    signatureInput: string;
+    signature: string;
+}>;
+
+/**
+ * Build an AIP {@link VerifyRequestContext} from a standard WHATWG `Request`.
+ *
+ * Every framework adapter ultimately has (or can produce) a `Request`: Hono exposes
+ * `c.req.raw`, Next.js / Web Fetch hand you one directly, and Express/Fastify can be shimmed.
+ * This helper centralizes the header + URL extraction so adapters stay thin and the parsing
+ * rules (authority derivation, multiple `Agent-Identity` headers) live in one place.
+ */
+
+/** Build the framework-agnostic verify context from a standard `Request`. */
+declare const buildVerifyContextFromRequest: (req: Request) => VerifyRequestContext;
+/** True when the request carries an AIP credential (at least one `Agent-Identity` header). */
+declare const hasAgentIdentityHeader: (req: Request) => boolean;
+
+export { type A2AAgentCard, type A2AAgentCardCapabilities, type A2AAgentCardExtension, type A2AAgentCardSignature, type A2AAgentInterface, type A2AAgentProvider, type A2AAgentSkill, A2A_DEFAULT_TRANSPORT, A2A_PROTOCOL_VERSION, AIP_COVERED_COMPONENTS, AIP_SIGNATURE_TAG, type CachedQuote, CheckoutValidationError, type ComputeFirstHandler, type ComputeFirstMintContext, type ComputeFirstMppContext, type ComputeFirstOptions, type ComputeFirstRails, type ComputeFirstSettledContext, type ComputeFirstWorkContext, type CreateDefaultOnDeniedOptions, type DefaultOnDeniedResult, DenialReason, FIXABLE_DENIAL_REASONS, type GeneratedUCPKey, type JWKSResponse, type MintedRecipients, type OwnerScope, type QuoteCache, type QuoteCacheOptions, type SignMessageInput, type SignedUCPProfile, SolanaMppRailSpec, StripeRailSpec, type SuccessBodyArgs, TempoRailSpec, UCPProfile, UCPSigningKey, UCPVerificationError, UCP_A2A_EXTENSION_URI, type VerifyFailureReason, type VerifyMessageSignatureInput, type VerifyMessageSignatureResult, VerifyRequestContext, VerifyWalletSignerResult, type WorkOutcome, X402BaseRailSpec, buildA2AAgentCard, buildContactSupportNextSteps, buildJWKSResponse, buildSignerMismatchBody, buildVerificationRequiredBody, buildVerifyContextFromRequest, computeFirstCheckout, createDefaultOnDenied, createQuoteCache, defaultReadOnlyOnDenied, denialReasonStatus, denialReasonToBody, extractOwnerScope, generateUCPSigningKey, hasAgentIdentityHeader, hashOperatorToken, isFixableDenial, loadUCPSigningKeyFromEnv, signMessage, signUCPProfile, ucpA2AExtension, verificationAgentInstructions, verifyMessageSignature, verifyUCPProfile };