@agentidentitytrustprotocol/aitp 0.20.0 → 0.21.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -1
- package/index.d.ts +56 -7
- package/index.js +55 -54
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -119,7 +119,7 @@ compact-JWS token strings** (`header.payload.signature`).
|
|
|
119
119
|
|
|
120
120
|
| Export | Feature | Notes |
|
|
121
121
|
|---------------------------|:-------:|-------|
|
|
122
|
-
| `AitpAgent` | default | `generate(opts?)` / `fromSeed(buffer, opts?)` (`opts.suite = "ed25519" \| "p256"`), `aid`, `buildManifest(opts)` (`opts.revocationListUri`), `newSession(jwks?, opts?)`, `newResponder(jwks?, opts?)` (`opts.trustAnchors`, `opts.pinnedKeys`), `verifyTct(token, grant, expectedAudience?, revokedJtis?, revocation?)`, `verifyTctCached(token, grant, store, expectedAudience?, revokedJtis?, revocation?)`, `buildDelegation(voucherToken, delegateeAid, scope, ttlSecs?)`, `issueTctForDelegatee(verified, ttlSecs?)` → `{ tct, grantVoucher? }`, `signEnvelope(messageType, payloadJson, opts?)` (`opts.extensionsJson`, `opts.messageId`, `opts.timestamp`), `signRevocationList(entries, expiresInSecs?)` |
|
|
122
|
+
| `AitpAgent` | default | `generate(opts?)` / `fromSeed(buffer, opts?)` (`opts.suite = "ed25519" \| "p256"`), `aid`, `buildManifest(opts)` (`opts.revocationListUri`), `newSession(jwks?, opts?)`, `newResponder(jwks?, opts?)` (`opts.trustAnchors`, `opts.pinnedKeys`), `verifyTct(token, grant, expectedAudience?, revokedJtis?, revocation?, pop?)`, `verifyTctCached(token, grant, store, expectedAudience?, revokedJtis?, revocation?, pop?)` (`pop = { challenge, response }`, the presented-TCT path), `newPopChallenge(tctToken, ttlSecs?)`, `signPopResponse(challengeJson)`, `buildDelegation(voucherToken, delegateeAid, scope, ttlSecs?)`, `issueTctForDelegatee(verified, ttlSecs?)` → `{ tct, grantVoucher? }`, `signEnvelope(messageType, payloadJson, opts?)` (`opts.extensionsJson`, `opts.messageId`, `opts.timestamp`), `signRevocationList(entries, expiresInSecs?)` |
|
|
123
123
|
| `JsInitiatorSession` | default | Returned by `newSession`. `buildHello(peerManifest, grants, oidcMintJwt?)`, `processHelloAck(...)`, `complete(...)` → `{ tct, claims, grantVoucher? }` |
|
|
124
124
|
| `JsResponderSession` | default | Returned by `newResponder`. `processHello(hello, oidcMintJwt?)` → `{ ackJson, sessionId }`, `processCommit(commit)` → `{ ackJson, completed: { tct, claims, grantVoucher? } }` |
|
|
125
125
|
| `TctStore` | default | Cache for `AitpAgent.verifyTctCached()`. A byte-identical, still-valid TCT skips the signature check; the key is the SHA-256 of the token bytes |
|
|
@@ -129,6 +129,7 @@ compact-JWS token strings** (`header.payload.signature`).
|
|
|
129
129
|
| `verifyEnvelope(json, expectedSenderAid)` | default | Verifies an `aitp/0.3` envelope's signature against a pinned sender, in the RFC-AITP-0001 §5.4 check order. Throws an `Error` with `code` (`UNKNOWN_VERSION`, `UNKNOWN_FIELD`, `INVALID_ENVELOPE`, `INVALID_SIGNATURE`). Replay and timestamp checks stay with the caller; see [Envelope signatures](../../docs/sdk-node.md#envelope-signatures-rfc-aitp-0001-54) |
|
|
130
130
|
| `verifyRevocationList(json, expectedIssuerAid, nowUnixSecs?)` | default | Verifies a revocation snapshot against a pinned issuer. Throws an `Error` with `code` |
|
|
131
131
|
| `revocationSigningBytes(json)` | default | The exact bytes a revocation snapshot's signature covers |
|
|
132
|
+
| `verifyPopResponse(challengeJson, responseJson, tctToken)` | default | RFC-AITP-0005 §6.2 checks only (not the TCT itself); returns the proven holder AID. Throws with `code` `POP_CHALLENGE_INVALID` or `POP_RESPONSE_INVALID` |
|
|
132
133
|
| `computeAidJkt(aid)` | default | RFC 7638 thumbprint of an AID's key, for an OIDC JWT's `cnf.jkt` |
|
|
133
134
|
| `buildRenewalRequest()` / `processRenewalRequest()` | `renewal` | RFC-AITP-0013 (Planned). `processRenewalRequest` → `{ tct, grantVoucher? }` |
|
|
134
135
|
| `SessionBundleBuilder`, `verifySessionBundle(json, verifierAid, coordinatorManifestJson, nowUnixSecs?, revocationCheck?)` | `session-bundle` | RFC-AITP-0010. Verifies under the key the coordinator's Manifest designates (`coordinatorManifestJson`: `{"manifest": ...}` JSON, required) |
|
package/index.d.ts
CHANGED
|
@@ -60,9 +60,18 @@ export declare class AitpAgent {
|
|
|
60
60
|
*
|
|
61
61
|
* `expectedAudience` defaults to `null`, which means "verify as the
|
|
62
62
|
* holder" (RFC-AITP-0005 §9 receipt model — `this.aid` is used).
|
|
63
|
-
* Resource servers verifying a TCT presented by a peer
|
|
64
|
-
*
|
|
65
|
-
*
|
|
63
|
+
* Resource servers verifying a TCT presented by a peer pass
|
|
64
|
+
* `pop: { challenge, response }` (the presented-TCT path): the
|
|
65
|
+
* challenge from `newPopChallenge` and the presenter's
|
|
66
|
+
* `signPopResponse` reply. The TCT and the PoP response are verified
|
|
67
|
+
* together (RFC-AITP-0005 §6.2) and the audience is pinned to the
|
|
68
|
+
* proven holder AID (`sub`). A PoP failure throws with `code ===
|
|
69
|
+
* 'POP_CHALLENGE_INVALID'` or `'POP_RESPONSE_INVALID'`. `pop` and
|
|
70
|
+
* `expectedAudience` are mutually exclusive. If you pass
|
|
71
|
+
* `expectedAudience` instead, that AID MUST come from an authenticated
|
|
72
|
+
* source, never from the token: a verified PoP response or an
|
|
73
|
+
* equivalent channel binding. Passing the TCT's own `aud` back makes
|
|
74
|
+
* the audience check vacuous.
|
|
66
75
|
*
|
|
67
76
|
* `revokedJtis` (F-1) is the issuer's deny list of revoked TCT `jti`
|
|
68
77
|
* strings; any TCT whose `jti` is in the list is rejected even if
|
|
@@ -75,17 +84,34 @@ export declare class AitpAgent {
|
|
|
75
84
|
* any RFC 9562 text form (uppercase, braced, `urn:uuid:`, unhyphenated)
|
|
76
85
|
* matches. An entry that is not a UUID throws rather than being ignored.
|
|
77
86
|
*/
|
|
78
|
-
verifyTct(tctToken: string, requiredGrant: string, expectedAudience?: string | undefined | null, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null): JsTctIdentity
|
|
87
|
+
verifyTct(tctToken: string, requiredGrant: string, expectedAudience?: string | undefined | null, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null, pop?: PopExchange | undefined | null): JsTctIdentity
|
|
79
88
|
/**
|
|
80
89
|
* Like `verifyTct`, but consults a `TctStore` first: a byte-identical,
|
|
81
90
|
* already-verified, still-valid TCT skips the signature check (the
|
|
82
91
|
* verification hot path for an agent that sees the same TCT on many
|
|
83
92
|
* requests). All cheap policy checks (expiry, audience, required grant,
|
|
84
93
|
* and the `fail_closed` revocation gate) still run on every call; only
|
|
85
|
-
* the signature check is elided. `revokedJtis` and `
|
|
86
|
-
* as in `verifyTct
|
|
94
|
+
* the signature check is elided. `revokedJtis`, `revocation` and `pop`
|
|
95
|
+
* behave as in `verifyTct`; `pop` is checked on every call.
|
|
87
96
|
*/
|
|
88
|
-
verifyTctCached(tctToken: string, requiredGrant: string, store: JsTctStore, expectedAudience?: string | undefined | null, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null): JsTctIdentity
|
|
97
|
+
verifyTctCached(tctToken: string, requiredGrant: string, store: JsTctStore, expectedAudience?: string | undefined | null, revokedJtis?: Array<string> | undefined | null, revocation?: string | undefined | null, pop?: PopExchange | undefined | null): JsTctIdentity
|
|
98
|
+
/**
|
|
99
|
+
* Consumer side of downstream proof of possession (RFC-AITP-0005 §6):
|
|
100
|
+
* a `pop_challenge` payload JSON for the presented `tctToken`
|
|
101
|
+
* (`tct_jti`, a CSPRNG 128-bit base64url `nonce`, `expires_at`
|
|
102
|
+
* `ttlSecs` from now, default 60). Send it to the presenter, then pass
|
|
103
|
+
* it with the reply as `pop` to `verifyTct`. Accept a response to each
|
|
104
|
+
* challenge at most once: the SDK keeps no replay cache.
|
|
105
|
+
*/
|
|
106
|
+
newPopChallenge(tctToken: string, ttlSecs?: number | undefined | null): string
|
|
107
|
+
/**
|
|
108
|
+
* Holder side of downstream proof of possession (RFC-AITP-0005 §6.1):
|
|
109
|
+
* sign a received `pop_challenge` payload with this agent's key over
|
|
110
|
+
* `sha256` of the decoded nonce bytes, and return the `pop_response`
|
|
111
|
+
* payload JSON. A malformed or expired challenge throws with `code ===
|
|
112
|
+
* 'POP_CHALLENGE_INVALID'`.
|
|
113
|
+
*/
|
|
114
|
+
signPopResponse(challengeJson: string): string
|
|
89
115
|
/**
|
|
90
116
|
* Build a delegation compact-JWS token from a held **grant voucher**
|
|
91
117
|
* (RFC-AITP-0006). `voucherToken` is the `grantVoucher` surfaced by
|
|
@@ -489,6 +515,17 @@ export interface ManifestOpts {
|
|
|
489
515
|
revocationListUri?: string
|
|
490
516
|
}
|
|
491
517
|
|
|
518
|
+
/**
|
|
519
|
+
* A downstream PoP exchange for `verifyTct(..., pop)`: the challenge from
|
|
520
|
+
* `newPopChallenge` and the holder's `signPopResponse` reply.
|
|
521
|
+
*/
|
|
522
|
+
export interface PopExchange {
|
|
523
|
+
/** The `pop_challenge` payload JSON this verifier issued. */
|
|
524
|
+
challenge: string
|
|
525
|
+
/** The holder's `pop_response` payload JSON. */
|
|
526
|
+
response: string
|
|
527
|
+
}
|
|
528
|
+
|
|
492
529
|
/**
|
|
493
530
|
* The conventional path of an agent's `ListRevoked` endpoint (the Rust
|
|
494
531
|
* `HandshakeServer` serves it here). The Manifest still carries an
|
|
@@ -688,6 +725,18 @@ export declare function verifyEnvelope(envelopeJson: string, expectedSenderAid:
|
|
|
688
725
|
*/
|
|
689
726
|
export declare function verifyManifestJson(manifestEnvelopeJson: string, nowUnixSecs?: number | undefined | null): void
|
|
690
727
|
|
|
728
|
+
/**
|
|
729
|
+
* Verify a holder's PoP response for `tctToken` (RFC-AITP-0005 §6.2) and
|
|
730
|
+
* return the proven holder AID (the TCT's `sub`).
|
|
731
|
+
*
|
|
732
|
+
* This proves possession of the key `sub` encodes. It does **not**
|
|
733
|
+
* verify the TCT itself; `AitpAgent.verifyTct(..., pop)` does both. A
|
|
734
|
+
* malformed or stale challenge throws with `code ===
|
|
735
|
+
* 'POP_CHALLENGE_INVALID'`, any other failure with `code ===
|
|
736
|
+
* 'POP_RESPONSE_INVALID'`.
|
|
737
|
+
*/
|
|
738
|
+
export declare function verifyPopResponse(challengeJson: string, responseJson: string, tctToken: string): string
|
|
739
|
+
|
|
691
740
|
/**
|
|
692
741
|
* Verify a `RevocationListEnvelope` JSON string against a pinned issuer.
|
|
693
742
|
*
|
package/index.js
CHANGED
|
@@ -77,8 +77,8 @@ function requireNative() {
|
|
|
77
77
|
try {
|
|
78
78
|
const binding = require('@agentidentitytrustprotocol/aitp-android-arm64')
|
|
79
79
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-android-arm64/package.json').version
|
|
80
|
-
if (bindingPackageVersion !== '0.
|
|
81
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
80
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
81
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
82
82
|
}
|
|
83
83
|
return binding
|
|
84
84
|
} catch (e) {
|
|
@@ -93,8 +93,8 @@ function requireNative() {
|
|
|
93
93
|
try {
|
|
94
94
|
const binding = require('@agentidentitytrustprotocol/aitp-android-arm-eabi')
|
|
95
95
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-android-arm-eabi/package.json').version
|
|
96
|
-
if (bindingPackageVersion !== '0.
|
|
97
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
96
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
97
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
98
98
|
}
|
|
99
99
|
return binding
|
|
100
100
|
} catch (e) {
|
|
@@ -114,8 +114,8 @@ function requireNative() {
|
|
|
114
114
|
try {
|
|
115
115
|
const binding = require('@agentidentitytrustprotocol/aitp-win32-x64-gnu')
|
|
116
116
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-x64-gnu/package.json').version
|
|
117
|
-
if (bindingPackageVersion !== '0.
|
|
118
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
117
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
118
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
119
119
|
}
|
|
120
120
|
return binding
|
|
121
121
|
} catch (e) {
|
|
@@ -130,8 +130,8 @@ function requireNative() {
|
|
|
130
130
|
try {
|
|
131
131
|
const binding = require('@agentidentitytrustprotocol/aitp-win32-x64-msvc')
|
|
132
132
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-x64-msvc/package.json').version
|
|
133
|
-
if (bindingPackageVersion !== '0.
|
|
134
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
133
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
134
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
135
135
|
}
|
|
136
136
|
return binding
|
|
137
137
|
} catch (e) {
|
|
@@ -147,8 +147,8 @@ function requireNative() {
|
|
|
147
147
|
try {
|
|
148
148
|
const binding = require('@agentidentitytrustprotocol/aitp-win32-ia32-msvc')
|
|
149
149
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-ia32-msvc/package.json').version
|
|
150
|
-
if (bindingPackageVersion !== '0.
|
|
151
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
150
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
151
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
152
152
|
}
|
|
153
153
|
return binding
|
|
154
154
|
} catch (e) {
|
|
@@ -163,8 +163,8 @@ function requireNative() {
|
|
|
163
163
|
try {
|
|
164
164
|
const binding = require('@agentidentitytrustprotocol/aitp-win32-arm64-msvc')
|
|
165
165
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-win32-arm64-msvc/package.json').version
|
|
166
|
-
if (bindingPackageVersion !== '0.
|
|
167
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
166
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
167
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
168
168
|
}
|
|
169
169
|
return binding
|
|
170
170
|
} catch (e) {
|
|
@@ -182,8 +182,8 @@ function requireNative() {
|
|
|
182
182
|
try {
|
|
183
183
|
const binding = require('@agentidentitytrustprotocol/aitp-darwin-universal')
|
|
184
184
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-darwin-universal/package.json').version
|
|
185
|
-
if (bindingPackageVersion !== '0.
|
|
186
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
185
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
186
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
187
187
|
}
|
|
188
188
|
return binding
|
|
189
189
|
} catch (e) {
|
|
@@ -198,8 +198,8 @@ function requireNative() {
|
|
|
198
198
|
try {
|
|
199
199
|
const binding = require('@agentidentitytrustprotocol/aitp-darwin-x64')
|
|
200
200
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-darwin-x64/package.json').version
|
|
201
|
-
if (bindingPackageVersion !== '0.
|
|
202
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
201
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
202
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
203
203
|
}
|
|
204
204
|
return binding
|
|
205
205
|
} catch (e) {
|
|
@@ -214,8 +214,8 @@ function requireNative() {
|
|
|
214
214
|
try {
|
|
215
215
|
const binding = require('@agentidentitytrustprotocol/aitp-darwin-arm64')
|
|
216
216
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-darwin-arm64/package.json').version
|
|
217
|
-
if (bindingPackageVersion !== '0.
|
|
218
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
217
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
218
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
219
219
|
}
|
|
220
220
|
return binding
|
|
221
221
|
} catch (e) {
|
|
@@ -234,8 +234,8 @@ function requireNative() {
|
|
|
234
234
|
try {
|
|
235
235
|
const binding = require('@agentidentitytrustprotocol/aitp-freebsd-x64')
|
|
236
236
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-freebsd-x64/package.json').version
|
|
237
|
-
if (bindingPackageVersion !== '0.
|
|
238
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
237
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
238
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
239
239
|
}
|
|
240
240
|
return binding
|
|
241
241
|
} catch (e) {
|
|
@@ -250,8 +250,8 @@ function requireNative() {
|
|
|
250
250
|
try {
|
|
251
251
|
const binding = require('@agentidentitytrustprotocol/aitp-freebsd-arm64')
|
|
252
252
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-freebsd-arm64/package.json').version
|
|
253
|
-
if (bindingPackageVersion !== '0.
|
|
254
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
253
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
254
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
255
255
|
}
|
|
256
256
|
return binding
|
|
257
257
|
} catch (e) {
|
|
@@ -271,8 +271,8 @@ function requireNative() {
|
|
|
271
271
|
try {
|
|
272
272
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-x64-musl')
|
|
273
273
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-x64-musl/package.json').version
|
|
274
|
-
if (bindingPackageVersion !== '0.
|
|
275
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
274
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
275
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
276
276
|
}
|
|
277
277
|
return binding
|
|
278
278
|
} catch (e) {
|
|
@@ -287,8 +287,8 @@ function requireNative() {
|
|
|
287
287
|
try {
|
|
288
288
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-x64-gnu')
|
|
289
289
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-x64-gnu/package.json').version
|
|
290
|
-
if (bindingPackageVersion !== '0.
|
|
291
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
290
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
291
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
292
292
|
}
|
|
293
293
|
return binding
|
|
294
294
|
} catch (e) {
|
|
@@ -305,8 +305,8 @@ function requireNative() {
|
|
|
305
305
|
try {
|
|
306
306
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-arm64-musl')
|
|
307
307
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm64-musl/package.json').version
|
|
308
|
-
if (bindingPackageVersion !== '0.
|
|
309
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
308
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
309
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
310
310
|
}
|
|
311
311
|
return binding
|
|
312
312
|
} catch (e) {
|
|
@@ -321,8 +321,8 @@ function requireNative() {
|
|
|
321
321
|
try {
|
|
322
322
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-arm64-gnu')
|
|
323
323
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm64-gnu/package.json').version
|
|
324
|
-
if (bindingPackageVersion !== '0.
|
|
325
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
324
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
325
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
326
326
|
}
|
|
327
327
|
return binding
|
|
328
328
|
} catch (e) {
|
|
@@ -339,8 +339,8 @@ function requireNative() {
|
|
|
339
339
|
try {
|
|
340
340
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-arm-musleabihf')
|
|
341
341
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm-musleabihf/package.json').version
|
|
342
|
-
if (bindingPackageVersion !== '0.
|
|
343
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
342
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
343
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
344
344
|
}
|
|
345
345
|
return binding
|
|
346
346
|
} catch (e) {
|
|
@@ -355,8 +355,8 @@ function requireNative() {
|
|
|
355
355
|
try {
|
|
356
356
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-arm-gnueabihf')
|
|
357
357
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-arm-gnueabihf/package.json').version
|
|
358
|
-
if (bindingPackageVersion !== '0.
|
|
359
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
358
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
359
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
360
360
|
}
|
|
361
361
|
return binding
|
|
362
362
|
} catch (e) {
|
|
@@ -373,8 +373,8 @@ function requireNative() {
|
|
|
373
373
|
try {
|
|
374
374
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-loong64-musl')
|
|
375
375
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-loong64-musl/package.json').version
|
|
376
|
-
if (bindingPackageVersion !== '0.
|
|
377
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
376
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
377
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
378
378
|
}
|
|
379
379
|
return binding
|
|
380
380
|
} catch (e) {
|
|
@@ -389,8 +389,8 @@ function requireNative() {
|
|
|
389
389
|
try {
|
|
390
390
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-loong64-gnu')
|
|
391
391
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-loong64-gnu/package.json').version
|
|
392
|
-
if (bindingPackageVersion !== '0.
|
|
393
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
392
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
393
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
394
394
|
}
|
|
395
395
|
return binding
|
|
396
396
|
} catch (e) {
|
|
@@ -407,8 +407,8 @@ function requireNative() {
|
|
|
407
407
|
try {
|
|
408
408
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-riscv64-musl')
|
|
409
409
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-riscv64-musl/package.json').version
|
|
410
|
-
if (bindingPackageVersion !== '0.
|
|
411
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
410
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
411
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
412
412
|
}
|
|
413
413
|
return binding
|
|
414
414
|
} catch (e) {
|
|
@@ -423,8 +423,8 @@ function requireNative() {
|
|
|
423
423
|
try {
|
|
424
424
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-riscv64-gnu')
|
|
425
425
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-riscv64-gnu/package.json').version
|
|
426
|
-
if (bindingPackageVersion !== '0.
|
|
427
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
426
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
427
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
428
428
|
}
|
|
429
429
|
return binding
|
|
430
430
|
} catch (e) {
|
|
@@ -440,8 +440,8 @@ function requireNative() {
|
|
|
440
440
|
try {
|
|
441
441
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-ppc64-gnu')
|
|
442
442
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-ppc64-gnu/package.json').version
|
|
443
|
-
if (bindingPackageVersion !== '0.
|
|
444
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
443
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
444
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
445
445
|
}
|
|
446
446
|
return binding
|
|
447
447
|
} catch (e) {
|
|
@@ -456,8 +456,8 @@ function requireNative() {
|
|
|
456
456
|
try {
|
|
457
457
|
const binding = require('@agentidentitytrustprotocol/aitp-linux-s390x-gnu')
|
|
458
458
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-linux-s390x-gnu/package.json').version
|
|
459
|
-
if (bindingPackageVersion !== '0.
|
|
460
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
459
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
460
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
461
461
|
}
|
|
462
462
|
return binding
|
|
463
463
|
} catch (e) {
|
|
@@ -476,8 +476,8 @@ function requireNative() {
|
|
|
476
476
|
try {
|
|
477
477
|
const binding = require('@agentidentitytrustprotocol/aitp-openharmony-arm64')
|
|
478
478
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-openharmony-arm64/package.json').version
|
|
479
|
-
if (bindingPackageVersion !== '0.
|
|
480
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
479
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
480
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
481
481
|
}
|
|
482
482
|
return binding
|
|
483
483
|
} catch (e) {
|
|
@@ -492,8 +492,8 @@ function requireNative() {
|
|
|
492
492
|
try {
|
|
493
493
|
const binding = require('@agentidentitytrustprotocol/aitp-openharmony-x64')
|
|
494
494
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-openharmony-x64/package.json').version
|
|
495
|
-
if (bindingPackageVersion !== '0.
|
|
496
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
495
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
496
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
497
497
|
}
|
|
498
498
|
return binding
|
|
499
499
|
} catch (e) {
|
|
@@ -508,8 +508,8 @@ function requireNative() {
|
|
|
508
508
|
try {
|
|
509
509
|
const binding = require('@agentidentitytrustprotocol/aitp-openharmony-arm')
|
|
510
510
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-openharmony-arm/package.json').version
|
|
511
|
-
if (bindingPackageVersion !== '0.
|
|
512
|
-
throw new Error(`Native binding package version mismatch, expected 0.
|
|
511
|
+
if (bindingPackageVersion !== '0.21.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
512
|
+
throw new Error(`Native binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
513
513
|
}
|
|
514
514
|
return binding
|
|
515
515
|
} catch (e) {
|
|
@@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) {
|
|
|
648
648
|
if (!candidateFailed) {
|
|
649
649
|
if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
|
|
650
650
|
const bindingPackageVersion = require('@agentidentitytrustprotocol/aitp-wasm32-wasi/package.json').version
|
|
651
|
-
if (bindingPackageVersion !== '0.
|
|
652
|
-
throw new Error(`WASI binding package version mismatch, expected 0.
|
|
651
|
+
if (bindingPackageVersion !== '0.21.0') {
|
|
652
|
+
throw new Error(`WASI binding package version mismatch, expected 0.21.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
|
|
653
653
|
}
|
|
654
654
|
}
|
|
655
655
|
wasiBinding = require('@agentidentitytrustprotocol/aitp-wasm32-wasi')
|
|
@@ -717,5 +717,6 @@ module.exports.verifyDelegation = nativeBinding.verifyDelegation
|
|
|
717
717
|
module.exports.verifyDelegationMultihop = nativeBinding.verifyDelegationMultihop
|
|
718
718
|
module.exports.verifyEnvelope = nativeBinding.verifyEnvelope
|
|
719
719
|
module.exports.verifyManifestJson = nativeBinding.verifyManifestJson
|
|
720
|
+
module.exports.verifyPopResponse = nativeBinding.verifyPopResponse
|
|
720
721
|
module.exports.verifyRevocationList = nativeBinding.verifyRevocationList
|
|
721
722
|
module.exports.verifySessionBundle = nativeBinding.verifySessionBundle
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@agentidentitytrustprotocol/aitp",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.21.0",
|
|
4
4
|
"description": "Agent Identity Trust Protocol — Node.js SDK",
|
|
5
5
|
"license": "MIT OR Apache-2.0",
|
|
6
6
|
"repository": {
|
|
@@ -48,9 +48,9 @@
|
|
|
48
48
|
"registry": "https://registry.npmjs.org/"
|
|
49
49
|
},
|
|
50
50
|
"optionalDependencies": {
|
|
51
|
-
"@agentidentitytrustprotocol/aitp-darwin-x64": "0.
|
|
52
|
-
"@agentidentitytrustprotocol/aitp-darwin-arm64": "0.
|
|
53
|
-
"@agentidentitytrustprotocol/aitp-linux-x64-gnu": "0.
|
|
54
|
-
"@agentidentitytrustprotocol/aitp-linux-arm64-gnu": "0.
|
|
51
|
+
"@agentidentitytrustprotocol/aitp-darwin-x64": "0.21.0",
|
|
52
|
+
"@agentidentitytrustprotocol/aitp-darwin-arm64": "0.21.0",
|
|
53
|
+
"@agentidentitytrustprotocol/aitp-linux-x64-gnu": "0.21.0",
|
|
54
|
+
"@agentidentitytrustprotocol/aitp-linux-arm64-gnu": "0.21.0"
|
|
55
55
|
}
|
|
56
56
|
}
|