@atrib/verify 0.1.0

package/dist/verify-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-record.d.ts","sourceRoot":"","sources":["../src/verify-record.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EACL,eAAe,EAMf,KAAK,WAAW,EACjB,MAAM,YAAY,CAAA;AAKnB;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAA;IACb;;;OAGG;IACH,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;IACnC;;;OAGG;IACH,iBAAiB,EAAE,OAAO,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IAChC,qBAAqB,EAAE,IAAI,GAAG,GAAG,GAAG,KAAK,GAAG,GAAG,GAAG,GAAG,CAAA;IACrD;;;OAGG;IACH,oBAAoB,EAAE,OAAO,CAAA;IAC7B;;;;OAIG;IACH,8BAA8B,EAAE,OAAO,CAAA;CACxC;AAUD,MAAM,WAAW,wBAAwB;IACvC,kDAAkD;IAClD,KAAK,EAAE,OAAO,CAAA;IACd,iEAAiE;IACjE,WAAW,EAAE,OAAO,CAAA;IACpB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,oBAAoB,CAAA;IACjC;;;;;;OAMG;IACH,sBAAsB,CAAC,EAAE,oBAAoB,CAAA;IAC7C;;;;OAIG;IACH,OAAO,EAAE,iBAAiB,CAAA;IAC1B,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,WAAW,CAAA;IAC/B;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,WAAW,EAAE,CAAA;CACrC;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAyCnC;AAED,iBAAS,iBAAiB,CACxB,KAAK,EAAE,MAAM,EACb,iBAAiB,EAAE,WAAW,GAAG,SAAS,GACzC,oBAAoB,CAetB;AAED,iBAAS,iBAAiB,CACxB,OAAO,EAAE,MAAM,EAAE,EACjB,UAAU,EAAE,WAAW,EAAE,EACzB,QAAQ,EAAE,MAAM,EAAE,GACjB,oBAAoB,CAuBtB;AAED,iBAAS,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAmBjF;AAID,eAAO,MAAM,aAAa;;;;;;;;CAQzB,CAAA"}

package/dist/verify-record.js

@@ -0,0 +1,136 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Per-record verification (single AtribRecord).
+ *
+ * Distinct from `AtribVerifier.verify(recommendationDoc)` which verifies a
+ * settlement recommendation document by re-running the §4.6 calculation.
+ * This module verifies one signed record at a time and surfaces the
+ * per-record annotations defined in the package README.
+ *
+ * Implemented annotations (this file):
+ *   - provenance:             { token, upstream_record_hash, upstream_resolved }    (D044 / §1.2.6)
+ *   - informed_by_resolution: { resolved: string[], dangling: string[] }            (D041 / §1.2.5, §3.2.4)
+ *   - posture:                { timestamp_granularity, timestamp_consistent }       (D045 / §8.4)
+ *
+ * Pending annotations (tracked in DECISIONS.md P005):
+ *   - capability_check:       D051 / §6.7  (needs @atrib/directory integration)
+ *   - cross_attestation:      D052 / §1.7.6  (needs `signers[]` type addition + transaction-record signing variant in @atrib/mcp)
+ *   - cross_log_*:            D050 / §2.11  (needs multi-log proof-bundle infrastructure)
+ *   - tool_name_form / args_commitment_form: §8.2 / §8.3  (needs tool_name + args_hash fields on the record shape — currently only content_id is exposed)
+ */
+import { base64urlDecode, base64urlEncode, canonicalRecord, hexEncode, sha256, verifyRecord as verifyRecordSignature, } from '@atrib/mcp';
+const PROVENANCE_TOKEN_PATTERN = /^[A-Za-z0-9_-]{22}$/;
+const SHA256_REF_PATTERN = /^sha256:[0-9a-f]{64}$/;
+const GRANULARITY_MULTIPLIER = {
+    ms: 1,
+    s: 1000,
+    min: 60_000,
+    h: 3_600_000,
+    d: 86_400_000,
+};
+/**
+ * Verify one signed record.
+ *
+ * Always returns a result; never throws. Per spec §5.8 graceful-
+ * degradation: invalid inputs (malformed signature, malformed
+ * provenance_token, etc.) are surfaced via warnings + signatureOk=false
+ * rather than thrown errors.
+ */
+export async function verifyRecord(record, options = {}) {
+    const warnings = [];
+    let signatureOk = false;
+    try {
+        signatureOk = await verifyRecordSignature(record);
+        if (!signatureOk)
+            warnings.push('signature verification failed');
+    }
+    catch (err) {
+        warnings.push(`signature verification error: ${err.message}`);
+    }
+    const result = {
+        valid: false,
+        signatureOk,
+        posture: detectPosture(record, warnings),
+        warnings,
+    };
+    // provenance_token is OPTIONAL per spec §1.2.6 — surface only when present.
+    const provenanceToken = record.provenance_token;
+    if (typeof provenanceToken === 'string') {
+        if (!PROVENANCE_TOKEN_PATTERN.test(provenanceToken)) {
+            warnings.push(`provenance_token has invalid format (expected 22-char base64url): ${provenanceToken.slice(0, 32)}`);
+        }
+        else {
+            result.provenance = resolveProvenance(provenanceToken, options.upstreamCandidate);
+        }
+    }
+    // informed_by is OPTIONAL per spec §1.2.5 — surface only when present and non-empty.
+    if (record.informed_by && record.informed_by.length > 0) {
+        result.informed_by_resolution = resolveInformedBy(record.informed_by, options.informedByCandidates ?? [], warnings);
+    }
+    result.valid = signatureOk && warnings.length === 0;
+    return result;
+}
+function resolveProvenance(token, upstreamCandidate) {
+    if (!upstreamCandidate) {
+        return { token, upstream_record_hash: null, upstream_resolved: false };
+    }
+    const candidateHashBytes = sha256(canonicalRecord(upstreamCandidate));
+    const candidateTokenBytes = candidateHashBytes.slice(0, 16);
+    const candidateToken = base64urlEncode(candidateTokenBytes);
+    if (candidateToken !== token) {
+        return { token, upstream_record_hash: null, upstream_resolved: false };
+    }
+    const fullHash = `sha256:${hexEncode(candidateHashBytes)}`;
+    return { token, upstream_record_hash: fullHash, upstream_resolved: true };
+}
+function resolveInformedBy(entries, candidates, warnings) {
+    // Pre-hash every candidate once. Each entry is a sha256:<64hex> ref;
+    // matching is by string comparison against the candidate's full hash.
+    const candidateHashes = new Set();
+    for (const c of candidates) {
+        candidateHashes.add(`sha256:${hexEncode(sha256(canonicalRecord(c)))}`);
+    }
+    const resolved = [];
+    const dangling = [];
+    for (const entry of entries) {
+        if (!SHA256_REF_PATTERN.test(entry)) {
+            warnings.push(`informed_by entry has invalid format: ${entry.slice(0, 80)}`);
+            continue;
+        }
+        if (candidateHashes.has(entry)) {
+            resolved.push(entry);
+        }
+        else {
+            dangling.push(entry);
+        }
+    }
+    return { resolved, dangling };
+}
+function detectPosture(record, warnings) {
+    const declared = record.timestamp_granularity;
+    const explicit = typeof declared === 'string';
+    const granularity = explicit ? declared : 'ms';
+    // Spec §8.4 invariant: timestamp must match the granularity's trailing-zero pattern.
+    const multiplier = GRANULARITY_MULTIPLIER[granularity];
+    const consistent = record.timestamp % multiplier === 0;
+    if (!consistent) {
+        warnings.push(`timestamp_granularity declares '${granularity}' but timestamp ${record.timestamp} is not a multiple of ${multiplier}`);
+    }
+    return {
+        timestamp_granularity: granularity,
+        timestamp_consistent: consistent,
+        timestamp_granularity_explicit: explicit,
+    };
+}
+// Re-exported defensively so consumers that want stricter validation can
+// align with the same regex atrib-emit's input schema enforces.
+export const __test_only__ = {
+    PROVENANCE_TOKEN_PATTERN,
+    SHA256_REF_PATTERN,
+    GRANULARITY_MULTIPLIER,
+    resolveProvenance,
+    resolveInformedBy,
+    detectPosture,
+    base64urlDecode,
+};
+//# sourceMappingURL=verify-record.js.map

package/dist/verify-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-record.js","sourceRoot":"","sources":["../src/verify-record.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,SAAS,EACT,MAAM,EACN,YAAY,IAAI,qBAAqB,GAEtC,MAAM,YAAY,CAAA;AAEnB,MAAM,wBAAwB,GAAG,qBAAqB,CAAA;AACtD,MAAM,kBAAkB,GAAG,uBAAuB,CAAA;AA8DlD,MAAM,sBAAsB,GAA+D;IACzF,EAAE,EAAE,CAAC;IACL,CAAC,EAAE,IAAI;IACP,GAAG,EAAE,MAAM;IACX,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,UAAU;CACd,CAAA;AAqDD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAmB,EACnB,UAA+B,EAAE;IAEjC,MAAM,QAAQ,GAAa,EAAE,CAAA;IAE7B,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,CAAC,WAAW;YAAE,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAA;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,IAAI,CAAC,iCAAkC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAA;IAC1E,CAAC;IAED,MAAM,MAAM,GAA6B;QACvC,KAAK,EAAE,KAAK;QACZ,WAAW;QACX,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE,QAAQ,CAAC;QACxC,QAAQ;KACT,CAAA;IAED,4EAA4E;IAC5E,MAAM,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAA;IAC/C,IAAI,OAAO,eAAe,KAAK,QAAQ,EAAE,CAAC;QACxC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;YACpD,QAAQ,CAAC,IAAI,CACX,qEAAqE,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACpG,CAAA;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,UAAU,GAAG,iBAAiB,CAAC,eAAe,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,sBAAsB,GAAG,iBAAiB,CAC/C,MAAM,CAAC,WAAW,EAClB,OAAO,CAAC,oBAAoB,IAAI,EAAE,EAClC,QAAQ,CACT,CAAA;IACH,CAAC;IAED,MAAM,CAAC,KAAK,GAAG,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAA;IACnD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,iBAAiB,CACxB,KAAa,EACb,iBAA0C;IAE1C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAA;IACxE,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC,CAAA;IACrE,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC3D,MAAM,cAAc,GAAG,eAAe,CAAC,mBAAmB,CAAC,CAAA;IAE3D,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAA;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAA;IAC1D,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAA;AAC3E,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAiB,EACjB,UAAyB,EACzB,QAAkB;IAElB,qEAAqE;IACrE,sEAAsE;IACtE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAA;IACzC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,eAAe,CAAC,GAAG,CAAC,UAAU,SAAS,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACxE,CAAC;IAED,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAA;IAC7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,yCAAyC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;YAC5E,SAAQ;QACV,CAAC;QACD,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAA;AAC/B,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB,EAAE,QAAkB;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,qBAAqB,CAAA;IAC7C,MAAM,QAAQ,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAA;IAC7C,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAS,CAAC,CAAC,CAAE,IAAc,CAAA;IAE1D,qFAAqF;IACrF,MAAM,UAAU,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAA;IACtD,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,GAAG,UAAU,KAAK,CAAC,CAAA;IACtD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CACX,mCAAmC,WAAW,mBAAmB,MAAM,CAAC,SAAS,yBAAyB,UAAU,EAAE,CACvH,CAAA;IACH,CAAC;IAED,OAAO;QACL,qBAAqB,EAAE,WAAW;QAClC,oBAAoB,EAAE,UAAU;QAChC,8BAA8B,EAAE,QAAQ;KACzC,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,gEAAgE;AAChE,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,wBAAwB;IACxB,kBAAkB;IAClB,sBAAsB;IACtB,iBAAiB;IACjB,iBAAiB;IACjB,aAAa;IACb,eAAe;CAChB,CAAA"}

package/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@atrib/verify",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "description": "Merchant verification. Independently verify attribution settlement recommendations against the atrib spec.",
+  "author": "atrib <hello@atrib.dev>",
+  "license": "Apache-2.0",
+  "homepage": "https://atrib.dev",
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "attribution",
+    "verification",
+    "settlement",
+    "merchant",
+    "ed25519"
+  ],
+  "dependencies": {
+    "@noble/ed25519": "^2.3.0",
+    "@noble/hashes": "^2.2.0",
+    "canonicalize": "^2.1.0",
+    "@atrib/mcp": "0.1.1"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.0",
+    "fast-check": "^4.7.0",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist"
+  }
+}