@agentidentitytrustprotocol/aitp 0.15.0 → 0.17.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/README.md +5 -3
  2. package/index.d.ts +72 -8
  3. package/index.js +55 -54
  4. package/package.json +5 -5
package/README.md CHANGED
@@ -48,6 +48,7 @@ By default the published `.node` ships the **full** capability surface:
48
48
 
49
49
  - handshake, TCT, delegation, manifest verification and OIDC identity
50
50
  - revocation-list signing and verification
51
+ - envelope signing and verification
51
52
  - TCT renewal, session bundles, SPKI pinning and multi-hop delegation
52
53
 
53
54
  Each capability below is a named feature, all on by default. A minimal build
@@ -118,18 +119,19 @@ compact-JWS token strings** (`header.payload.signature`).
118
119
 
119
120
  | Export | Feature | Notes |
120
121
  |---------------------------|:-------:|-------|
121
- | `AitpAgent` | default | `generate(opts?)` / `fromSeed(buffer, opts?)` (`opts.suite = "ed25519" \| "p256"`), `aid`, `buildManifest(opts)`, `newSession(jwks?, opts?)`, `newResponder(jwks?, opts?)` (`opts.trustAnchors`, `opts.pinnedKeys`), `verifyTct(token, grant, expectedAudience?, revokedJtis?)`, `verifyTctCached(token, grant, store, expectedAudience?, revokedJtis?)`, `buildDelegation(voucherToken, delegateeAid, scope, ttlSecs?)`, `issueTctForDelegatee(verified, ttlSecs?)` → `{ tct, grantVoucher? }`, `signRevocationList(entries, expiresInSecs?)` |
122
+ | `AitpAgent` | default | `generate(opts?)` / `fromSeed(buffer, opts?)` (`opts.suite = "ed25519" \| "p256"`), `aid`, `buildManifest(opts)`, `newSession(jwks?, opts?)`, `newResponder(jwks?, opts?)` (`opts.trustAnchors`, `opts.pinnedKeys`), `verifyTct(token, grant, expectedAudience?, revokedJtis?)`, `verifyTctCached(token, grant, store, expectedAudience?, revokedJtis?)`, `buildDelegation(voucherToken, delegateeAid, scope, ttlSecs?)`, `issueTctForDelegatee(verified, ttlSecs?)` → `{ tct, grantVoucher? }`, `signEnvelope(messageType, payloadJson, opts?)` (`opts.extensionsJson`, `opts.messageId`, `opts.timestamp`), `signRevocationList(entries, expiresInSecs?)` |
122
123
  | `JsInitiatorSession` | default | Returned by `newSession`. `buildHello(peerManifest, grants, oidcMintJwt?)`, `processHelloAck(...)`, `complete(...)` → `{ tct, claims, grantVoucher? }` |
123
124
  | `JsResponderSession` | default | Returned by `newResponder`. `processHello(hello, oidcMintJwt?)` → `{ ackJson, sessionId }`, `processCommit(commit)` → `{ ackJson, completed: { tct, claims, grantVoucher? } }` |
124
125
  | `TctStore` | default | Cache for `AitpAgent.verifyTctCached()`. A byte-identical, still-valid TCT skips the signature check; the key is the SHA-256 of the token bytes |
125
126
  | `JwksProvider` | default | OIDC JWKS map. `upsert(issuer, keys)`, `remove(issuer)`, `issuers()` |
126
- | `verifyDelegation(token, verifierAid, revokedJtis?)` | default | RFC-AITP-0006, strict single-hop; rejects any multi-hop `chain`. Returns `{ delegator, delegatee, issuedBy, grants, expiresAt, cnfJkt }` |
127
+ | `verifyDelegation(token, verifierAid, issuerManifests, revokedJtis?)` | default | RFC-AITP-0006, strict single-hop; rejects any multi-hop `chain`. Verifies under the key the delegator's Manifest designates (`issuerManifests`: `{"manifest": ...}` JSON strings). Returns `{ delegator, delegatee, issuedBy, grants, expiresAt, cnfJkt }` |
127
128
  | `verifyManifestJson(json, nowUnixSecs?)` | default | Throws an `Error` with `code` (e.g. `signature_invalid`, `expired`, `unknown_field`, `malformed`) |
129
+ | `verifyEnvelope(json, expectedSenderAid)` | default | Verifies an `aitp/0.3` envelope's signature against a pinned sender, in the RFC-AITP-0001 §5.4 check order. Throws an `Error` with `code` (`UNKNOWN_VERSION`, `UNKNOWN_FIELD`, `INVALID_ENVELOPE`, `INVALID_SIGNATURE`). Replay and timestamp checks stay with the caller; see [Envelope signatures](../../docs/sdk-node.md#envelope-signatures-rfc-aitp-0001-54) |
128
130
  | `verifyRevocationList(json, expectedIssuerAid, nowUnixSecs?)` | default | Verifies a revocation snapshot against a pinned issuer. Throws an `Error` with `code` |
129
131
  | `revocationSigningBytes(json)` | default | The exact bytes a revocation snapshot's signature covers |
130
132
  | `computeAidJkt(aid)` | default | RFC 7638 thumbprint of an AID's key, for an OIDC JWT's `cnf.jkt` |
131
133
  | `buildRenewalRequest()` / `processRenewalRequest()` | `renewal` | RFC-AITP-0013 (Planned). `processRenewalRequest` → `{ tct, grantVoucher? }` |
132
- | `SessionBundleBuilder`, `verifySessionBundle(json, verifierAid, nowUnixSecs?, revocationCheck?)` | `session-bundle` | RFC-AITP-0010 |
134
+ | `SessionBundleBuilder`, `verifySessionBundle(json, verifierAid, coordinatorManifestJson, nowUnixSecs?, revocationCheck?)` | `session-bundle` | RFC-AITP-0010. Verifies under the key the coordinator's Manifest designates (`coordinatorManifestJson`: `{"manifest": ...}` JSON, required) |
133
135
  | `computeSpkiHash()`, `SpkiPinVerifier` | `spki-pinning` | HPKP-style outbound pinning |
134
136
  | `verifyDelegationMultihop(token, verifierAid, issuerManifests, maxDelegationHops?, revokedJtis?)` | `multihop-delegation` | RFC-AITP-0011 multi-hop opt-in |
135
137
 
package/index.d.ts CHANGED
@@ -96,6 +96,15 @@ export declare class AitpAgent {
96
96
  * `delegatee` AID.
97
97
  */
98
98
  issueTctForDelegatee(verified: JsDelegationVerified, ttlSecs?: number | undefined | null): JsIssuedTct
99
+ /**
100
+ * Sign an `AitpEnvelope` (RFC-AITP-0001 §5.4) from this agent and
101
+ * return its JSON. `messageType` is the wire string (e.g.
102
+ * `"mutual_hello"`) and `payloadJson` a JSON object; `opts` carries
103
+ * the optional `extensionsJson`, `messageId` (UUID v4, default fresh)
104
+ * and `timestamp` (unix seconds, default now). The counterpart of
105
+ * `verifyEnvelope`.
106
+ */
107
+ signEnvelope(messageType: string, payloadJson: string, opts?: SignEnvelopeOpts | undefined | null): string
99
108
  /**
100
109
  * Sign a `RevocationList` with this agent's key. `entries` carries
101
110
  * the revoked-TCT records; `expiresInSecs` defaults to 3600 s.
@@ -499,8 +508,21 @@ export interface SessionOpts {
499
508
  pinnedKeys?: Array<string>
500
509
  }
501
510
 
511
+ /** Options for `AitpAgent.signEnvelope`. */
512
+ export interface SignEnvelopeOpts {
513
+ /**
514
+ * JSON object for the envelope's `extensions` member, covered by the
515
+ * signature like every other member. Omitted when absent.
516
+ */
517
+ extensionsJson?: string
518
+ /** UUID v4. Defaults to a fresh one. */
519
+ messageId?: string
520
+ /** Unix seconds. Defaults to now. */
521
+ timestamp?: number
522
+ }
523
+
502
524
  /**
503
- * Verify a delegation compact JWS under **strict AITP v0.2**
525
+ * Verify a delegation compact JWS under **strict AITP v0.3**
504
526
  * (RFC-AITP-0006 single-hop). `verifierAid` is the verifier's own AID
505
527
  * string — it MUST equal the delegation's `aud` (the root grantor), and
506
528
  * the embedded voucher MUST verify under the verifier's own key.
@@ -510,6 +532,14 @@ export interface SessionOpts {
510
532
  * matching the Rust core default. To allow multi-hop chains, call
511
533
  * `verifyDelegationMultihop` instead.
512
534
  *
535
+ * `issuerManifests` is the delegator's Manifest(s), each a
536
+ * `{"manifest": {...}}` envelope JSON string. RFC-AITP-0006 §4 step 1
537
+ * verifies the token under the key resolved from its issuer's verified
538
+ * Manifest; with no valid Manifest for the issuer here the token fails
539
+ * with `KEY_RESOLUTION_FAILED`. Each Manifest is verified (RFC-AITP-0003
540
+ * §5) before use; when several designate one AID the newest
541
+ * `published_at` wins.
542
+ *
513
543
  * `revokedJtis` is an optional list of revoked `jti` strings — the
514
544
  * verifier's own deny list. When non-empty, a token whose
515
545
  * `voucher.src_jti` is in it is rejected after every signature check passes
@@ -517,7 +547,7 @@ export interface SessionOpts {
517
547
  * SHOULD supply it.** Omitting it silently redeems a delegation whose
518
548
  * source TCT has been revoked, which step 7 states as a MUST-reject.
519
549
  */
520
- export declare function verifyDelegation(token: string, verifierAid: string, revokedJtis?: Array<string> | undefined | null): JsDelegationVerified
550
+ export declare function verifyDelegation(token: string, verifierAid: string, issuerManifests: Array<string>, revokedJtis?: Array<string> | undefined | null): JsDelegationVerified
521
551
 
522
552
  /**
523
553
  * Verify a delegation compact JWS allowing **RFC-AITP-0011 multi-hop**
@@ -554,6 +584,40 @@ export declare function verifyDelegation(token: string, verifierAid: string, rev
554
584
  */
555
585
  export declare function verifyDelegationMultihop(token: string, verifierAid: string, issuerManifests: Array<string>, maxDelegationHops?: number | undefined | null, revokedJtis?: Array<string> | undefined | null): JsDelegationVerified
556
586
 
587
+ /**
588
+ * Verify an `AitpEnvelope` JSON string sent by `expectedSenderAid`.
589
+ *
590
+ * Returns on success; on failure throws an `Error` whose **`code`** is the
591
+ * registered RFC-AITP-0001 §5.7 code of the first failing step of the §5.4
592
+ * check order:
593
+ *
594
+ * 1. `version` absent or not `aitp/0.3` → `UNKNOWN_VERSION` (no
595
+ * dual-accept: `aitp/0.2` is as unknown as `aitp/9.9`);
596
+ * 2. a member outside the schema and outside `extensions` →
597
+ * `UNKNOWN_FIELD`; any other structural defect (a duplicate key,
598
+ * RFC-AITP-0001 §5.4.5, a missing member, an unregistered
599
+ * `message_type`, a non-v4 `message_id`, a non-object `payload`, a
600
+ * negative `timestamp`, a `signature` outside the schema pattern) →
601
+ * `INVALID_ENVELOPE`;
602
+ * 3. a signature that does not verify over `sig_input_v2` under the
603
+ * expected sender's key → `INVALID_SIGNATURE`. An envelope whose
604
+ * `sender.agent_id` is not `expectedSenderAid` fails here too: it is
605
+ * not signed by the key the caller trusts.
606
+ *
607
+ * Branch on `error.code`, never on `error.message`.
608
+ *
609
+ * The key comes from `expectedSenderAid` (every AID encodes its public
610
+ * key), as `verifyRevocationList` takes its pinned issuer. A malformed
611
+ * `expectedSenderAid` is the caller's error and throws an `Error` with no
612
+ * verification code.
613
+ *
614
+ * Establishes **authenticity and structure only**. Replay and freshness
615
+ * (RFC-AITP-0001 §5.5: the timestamp window and `message_id`
616
+ * deduplication) are not checked; they belong to the receiving endpoint's
617
+ * RFC-AITP-0009 §3.1 order, which the caller owns.
618
+ */
619
+ export declare function verifyEnvelope(envelopeJson: string, expectedSenderAid: string): void
620
+
557
621
  /**
558
622
  * Verify a `ManifestEnvelope` JSON string. Used by the AITP Control Plane
559
623
  * during agent enrollment, and by any consumer reading an AID or endpoint
@@ -599,10 +663,10 @@ export declare function verifyRevocationList(envelopeJson: string, expectedIssue
599
663
  /**
600
664
  * Verify a `SessionBundleEnvelope` JSON. `nowUnixSecs` defaults to
601
665
  * the system clock. `revocationCheck` receives a JTI string and
602
- * returns true if revoked. `coordinatorManifestJson` is the
603
- * coordinator's `ManifestEnvelope` JSON: when supplied it is verified
604
- * and the coordinator key is resolved from it (RFC-AITP-0010 §5 step
605
- * 5); when omitted the key is derived from the bundle's `coordinator`
606
- * AID alone, which skips that step.
666
+ * returns true if revoked. `coordinatorManifestJson` (required) is the
667
+ * coordinator's `ManifestEnvelope` JSON: it is verified (RFC-AITP-0003
668
+ * §5), must designate the bundle's `coordinator`, and the coordinator
669
+ * key is resolved from it (RFC-AITP-0010 §5 step 5). There is no
670
+ * AID-only fallback.
607
671
  */
608
- export declare function verifySessionBundle(bundleEnvelopeJson: string, verifierAid: string, nowUnixSecs?: number | undefined | null, revocationCheck?: ((arg: string) => boolean) | undefined | null, coordinatorManifestJson?: string | undefined | null): JsBundleOutcome
672
+ export declare function verifySessionBundle(bundleEnvelopeJson: string, verifierAid: string, coordinatorManifestJson: string, nowUnixSecs?: number | undefined | null, revocationCheck?: ((arg: string) => boolean) | undefined | null): JsBundleOutcome
package/index.js CHANGED
@@ -77,8 +77,8 @@ function requireNative() {
77
77
  try {
78
78
  const binding = require('@agentidentitytrustprotocol/aitp-android-arm64')
79
79
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-android-arm64/package.json').version
80
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
81
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
80
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
81
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
82
82
  }
83
83
  return binding
84
84
  } catch (e) {
@@ -93,8 +93,8 @@ function requireNative() {
93
93
  try {
94
94
  const binding = require('@agentidentitytrustprotocol/aitp-android-arm-eabi')
95
95
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-android-arm-eabi/package.json').version
96
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
97
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
96
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
97
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
98
98
  }
99
99
  return binding
100
100
  } catch (e) {
@@ -114,8 +114,8 @@ function requireNative() {
114
114
  try {
115
115
  const binding = require('@agentidentitytrustprotocol/aitp-win32-x64-gnu')
116
116
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-x64-gnu/package.json').version
117
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
118
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
117
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
118
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
119
119
  }
120
120
  return binding
121
121
  } catch (e) {
@@ -130,8 +130,8 @@ function requireNative() {
130
130
  try {
131
131
  const binding = require('@agentidentitytrustprotocol/aitp-win32-x64-msvc')
132
132
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-x64-msvc/package.json').version
133
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
134
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
133
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
134
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
135
135
  }
136
136
  return binding
137
137
  } catch (e) {
@@ -147,8 +147,8 @@ function requireNative() {
147
147
  try {
148
148
  const binding = require('@agentidentitytrustprotocol/aitp-win32-ia32-msvc')
149
149
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-ia32-msvc/package.json').version
150
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
151
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
150
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
151
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
152
152
  }
153
153
  return binding
154
154
  } catch (e) {
@@ -163,8 +163,8 @@ function requireNative() {
163
163
  try {
164
164
  const binding = require('@agentidentitytrustprotocol/aitp-win32-arm64-msvc')
165
165
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-arm64-msvc/package.json').version
166
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
167
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
166
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
167
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
168
168
  }
169
169
  return binding
170
170
  } catch (e) {
@@ -182,8 +182,8 @@ function requireNative() {
182
182
  try {
183
183
  const binding = require('@agentidentitytrustprotocol/aitp-darwin-universal')
184
184
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-darwin-universal/package.json').version
185
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
186
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
185
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
186
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
187
187
  }
188
188
  return binding
189
189
  } catch (e) {
@@ -198,8 +198,8 @@ function requireNative() {
198
198
  try {
199
199
  const binding = require('@agentidentitytrustprotocol/aitp-darwin-x64')
200
200
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-darwin-x64/package.json').version
201
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
202
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
201
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
202
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
203
203
  }
204
204
  return binding
205
205
  } catch (e) {
@@ -214,8 +214,8 @@ function requireNative() {
214
214
  try {
215
215
  const binding = require('@agentidentitytrustprotocol/aitp-darwin-arm64')
216
216
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-darwin-arm64/package.json').version
217
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
218
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
217
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
218
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
219
219
  }
220
220
  return binding
221
221
  } catch (e) {
@@ -234,8 +234,8 @@ function requireNative() {
234
234
  try {
235
235
  const binding = require('@agentidentitytrustprotocol/aitp-freebsd-x64')
236
236
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-freebsd-x64/package.json').version
237
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
238
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
237
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
238
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
239
239
  }
240
240
  return binding
241
241
  } catch (e) {
@@ -250,8 +250,8 @@ function requireNative() {
250
250
  try {
251
251
  const binding = require('@agentidentitytrustprotocol/aitp-freebsd-arm64')
252
252
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-freebsd-arm64/package.json').version
253
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
254
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
253
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
254
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
255
255
  }
256
256
  return binding
257
257
  } catch (e) {
@@ -271,8 +271,8 @@ function requireNative() {
271
271
  try {
272
272
  const binding = require('@agentidentitytrustprotocol/aitp-linux-x64-musl')
273
273
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-x64-musl/package.json').version
274
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
275
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
274
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
275
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
276
276
  }
277
277
  return binding
278
278
  } catch (e) {
@@ -287,8 +287,8 @@ function requireNative() {
287
287
  try {
288
288
  const binding = require('@agentidentitytrustprotocol/aitp-linux-x64-gnu')
289
289
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-x64-gnu/package.json').version
290
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
291
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
290
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
291
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
292
292
  }
293
293
  return binding
294
294
  } catch (e) {
@@ -305,8 +305,8 @@ function requireNative() {
305
305
  try {
306
306
  const binding = require('@agentidentitytrustprotocol/aitp-linux-arm64-musl')
307
307
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm64-musl/package.json').version
308
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
309
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
308
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
309
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
310
310
  }
311
311
  return binding
312
312
  } catch (e) {
@@ -321,8 +321,8 @@ function requireNative() {
321
321
  try {
322
322
  const binding = require('@agentidentitytrustprotocol/aitp-linux-arm64-gnu')
323
323
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm64-gnu/package.json').version
324
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
325
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
324
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
325
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
326
326
  }
327
327
  return binding
328
328
  } catch (e) {
@@ -339,8 +339,8 @@ function requireNative() {
339
339
  try {
340
340
  const binding = require('@agentidentitytrustprotocol/aitp-linux-arm-musleabihf')
341
341
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm-musleabihf/package.json').version
342
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
343
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
342
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
343
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
344
344
  }
345
345
  return binding
346
346
  } catch (e) {
@@ -355,8 +355,8 @@ function requireNative() {
355
355
  try {
356
356
  const binding = require('@agentidentitytrustprotocol/aitp-linux-arm-gnueabihf')
357
357
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm-gnueabihf/package.json').version
358
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
359
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
358
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
359
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
360
360
  }
361
361
  return binding
362
362
  } catch (e) {
@@ -373,8 +373,8 @@ function requireNative() {
373
373
  try {
374
374
  const binding = require('@agentidentitytrustprotocol/aitp-linux-loong64-musl')
375
375
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-loong64-musl/package.json').version
376
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
377
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
376
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
377
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
378
378
  }
379
379
  return binding
380
380
  } catch (e) {
@@ -389,8 +389,8 @@ function requireNative() {
389
389
  try {
390
390
  const binding = require('@agentidentitytrustprotocol/aitp-linux-loong64-gnu')
391
391
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-loong64-gnu/package.json').version
392
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
393
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
392
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
393
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
394
394
  }
395
395
  return binding
396
396
  } catch (e) {
@@ -407,8 +407,8 @@ function requireNative() {
407
407
  try {
408
408
  const binding = require('@agentidentitytrustprotocol/aitp-linux-riscv64-musl')
409
409
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-riscv64-musl/package.json').version
410
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
411
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
410
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
411
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
412
412
  }
413
413
  return binding
414
414
  } catch (e) {
@@ -423,8 +423,8 @@ function requireNative() {
423
423
  try {
424
424
  const binding = require('@agentidentitytrustprotocol/aitp-linux-riscv64-gnu')
425
425
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-riscv64-gnu/package.json').version
426
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
427
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
426
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
427
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
428
428
  }
429
429
  return binding
430
430
  } catch (e) {
@@ -440,8 +440,8 @@ function requireNative() {
440
440
  try {
441
441
  const binding = require('@agentidentitytrustprotocol/aitp-linux-ppc64-gnu')
442
442
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-ppc64-gnu/package.json').version
443
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
444
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
443
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
444
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
445
445
  }
446
446
  return binding
447
447
  } catch (e) {
@@ -456,8 +456,8 @@ function requireNative() {
456
456
  try {
457
457
  const binding = require('@agentidentitytrustprotocol/aitp-linux-s390x-gnu')
458
458
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-s390x-gnu/package.json').version
459
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
460
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
459
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
460
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
461
461
  }
462
462
  return binding
463
463
  } catch (e) {
@@ -476,8 +476,8 @@ function requireNative() {
476
476
  try {
477
477
  const binding = require('@agentidentitytrustprotocol/aitp-openharmony-arm64')
478
478
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-openharmony-arm64/package.json').version
479
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
480
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
479
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
480
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
481
481
  }
482
482
  return binding
483
483
  } catch (e) {
@@ -492,8 +492,8 @@ function requireNative() {
492
492
  try {
493
493
  const binding = require('@agentidentitytrustprotocol/aitp-openharmony-x64')
494
494
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-openharmony-x64/package.json').version
495
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
496
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
495
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
496
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
497
497
  }
498
498
  return binding
499
499
  } catch (e) {
@@ -508,8 +508,8 @@ function requireNative() {
508
508
  try {
509
509
  const binding = require('@agentidentitytrustprotocol/aitp-openharmony-arm')
510
510
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-openharmony-arm/package.json').version
511
- if (bindingPackageVersion !== '0.15.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
512
- throw new Error(`Native binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
511
+ if (bindingPackageVersion !== '0.17.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
512
+ throw new Error(`Native binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
513
513
  }
514
514
  return binding
515
515
  } catch (e) {
@@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) {
648
648
  if (!candidateFailed) {
649
649
  if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
650
650
  const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-wasm32-wasi/package.json').version
651
- if (bindingPackageVersion !== '0.15.0') {
652
- throw new Error(`WASI binding package version mismatch, expected 0.15.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
651
+ if (bindingPackageVersion !== '0.17.0') {
652
+ throw new Error(`WASI binding package version mismatch, expected 0.17.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
653
653
  }
654
654
  }
655
655
  wasiBinding = require('@agentidentitytrustprotocol/aitp-wasm32-wasi')
@@ -714,6 +714,7 @@ module.exports.computeSpkiHash = nativeBinding.computeSpkiHash
714
714
  module.exports.revocationSigningBytes = nativeBinding.revocationSigningBytes
715
715
  module.exports.verifyDelegation = nativeBinding.verifyDelegation
716
716
  module.exports.verifyDelegationMultihop = nativeBinding.verifyDelegationMultihop
717
+ module.exports.verifyEnvelope = nativeBinding.verifyEnvelope
717
718
  module.exports.verifyManifestJson = nativeBinding.verifyManifestJson
718
719
  module.exports.verifyRevocationList = nativeBinding.verifyRevocationList
719
720
  module.exports.verifySessionBundle = nativeBinding.verifySessionBundle
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@agentidentitytrustprotocol/aitp",
3
- "version": "0.15.0",
3
+ "version": "0.17.0",
4
4
  "description": "Agent Identity Trust Protocol — Node.js SDK",
5
5
  "license": "MIT OR Apache-2.0",
6
6
  "repository": {
@@ -48,9 +48,9 @@
48
48
  "registry": "https://registry.npmjs.org/"
49
49
  },
50
50
  "optionalDependencies": {
51
- "@agentidentitytrustprotocol/aitp-darwin-x64": "0.15.0",
52
- "@agentidentitytrustprotocol/aitp-darwin-arm64": "0.15.0",
53
- "@agentidentitytrustprotocol/aitp-linux-x64-gnu": "0.15.0",
54
- "@agentidentitytrustprotocol/aitp-linux-arm64-gnu": "0.15.0"
51
+ "@agentidentitytrustprotocol/aitp-darwin-x64": "0.17.0",
52
+ "@agentidentitytrustprotocol/aitp-darwin-arm64": "0.17.0",
53
+ "@agentidentitytrustprotocol/aitp-linux-x64-gnu": "0.17.0",
54
+ "@agentidentitytrustprotocol/aitp-linux-arm64-gnu": "0.17.0"
55
55
  }
56
56
  }