@chitmark/sdk 0.8.0 → 0.9.0

package/dist/index.cjs

@@ -2,21 +2,47 @@
 
 // src/attribution.ts
 function attributionEvidence(options, mode) {
-  const { request, agentProof, session, piiMode = mode } = options;
+  const { request, agentProof, session, purpose, piiMode = mode } = options;
   const headers = request.headers;
   const header = typeof headers.get === "function" ? headers.get("chitmark-agent-proof") : Object.entries(headers).find(
     ([name]) => name.toLowerCase() === "chitmark-agent-proof"
   )?.[1];
-  let site = options.site;
-  if (!site && request.url?.startsWith("https://")) site = new URL(request.url).origin;
-  let proof = agentProof;
-  if (!proof && typeof header === "string" && header.length <= 2048 && site) {
+  let url;
+  if (!options.site && request.url) {
     try {
-      proof = JSON.parse(header);
+      url = new URL(request.url);
     } catch {
     }
   }
-  return { site, session, piiMode, agentProof: proof };
+  const site = options.site ?? (url?.protocol === "https:" ? url.origin : void 0);
+  const proof = agentProof ?? (site ? parseProof(header) : void 0);
+  return { site, session, piiMode, purpose, agentProof: proof };
+}
+function parseProof(header) {
+  if (typeof header !== "string" || header.length > 2048) return;
+  try {
+    const value = JSON.parse(header);
+    if (!value || typeof value.nonce !== "string" || value.nonce.length > 36 || typeof value.issuedAt !== "number" || !Number.isSafeInteger(value.issuedAt) || typeof value.signature !== "string" || value.signature.length > 86)
+      return;
+    const { nonce, issuedAt, signature } = value;
+    if ("iss" in value) {
+      const key = value.agentKey;
+      if (value.iss === "chitmark-agent-key-v1" && key?.kty === "OKP" && key.crv === "Ed25519" && typeof key.x === "string" && key.x.length === 43 && !("d" in key)) {
+        return {
+          iss: value.iss,
+          agentKey: { kty: key.kty, crv: key.crv, x: key.x },
+          nonce,
+          issuedAt,
+          signature
+        };
+      }
+      return;
+    }
+    if (typeof value.linkId === "string" && value.linkId.length <= 36)
+      return { linkId: value.linkId, nonce, issuedAt, signature };
+  } catch {
+  }
+  return void 0;
 }
 
 // src/credentials.ts
@@ -153,7 +179,7 @@ var DEFAULT_BASE_URLS = {
 };
 var DEFAULT_TIMEOUT_MS = 800;
 var LOCAL_TIMEOUT_MS = 2e3;
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.9.0";
 function defaultTimeoutMs(baseUrl) {
   try {
     const host = new URL(baseUrl).hostname.replace(/^\[|\]$/g, "").toLowerCase();