@chitmark/sdk 0.8.0 → 0.9.0

package/dist/{trusted-ip-BvSjdU80.d.cts → trusted-ip-DNO3xzCU.d.cts}

@@ -366,6 +366,18 @@ interface AttributionAgentProof {
     issuedAt: number;
     signature: string;
 }
+interface AttributionAgentKey {
+    kty: "OKP";
+    crv: "Ed25519";
+    x: string;
+}
+interface AttributionNetworkProof {
+    iss: "chitmark-agent-key-v1";
+    agentKey: AttributionAgentKey;
+    nonce: string;
+    issuedAt: number;
+    signature: string;
+}
 interface AttributionResolveOptions {
     request: {
         url?: string;
@@ -375,7 +387,9 @@ interface AttributionResolveOptions {
     site?: string;
     /** Opaque credential supplied by the integrating server, never a raw browser cookie. */
     session?: string;
-    agentProof?: AttributionAgentProof;
+    agentProof?: AttributionAgentProof | AttributionNetworkProof;
+    /** The recipient's configured disclosure purpose. Defaults to identity_attribution. */
+    purpose?: string;
     piiMode?: PiiMode;
     idempotencyKey?: string;
 }
@@ -390,10 +404,10 @@ interface AttributionResult {
         recognized: boolean;
         subject_id: string | null;
         scope: "site" | null;
-        match: "none" | "existing_session" | "verified_identity_link";
+        match: "none" | "existing_session" | "verified_identity_link" | "verified_agent_account";
     };
     principal: {
-        status: "unknown" | "previously_verified";
+        status: "unknown" | "previously_verified" | "withheld";
         email: string | null;
         email_verified: boolean | null;
         current_delegation_verified: boolean | null;
@@ -403,12 +417,30 @@ interface AttributionResult {
 interface AttributionLinkRequest {
     enrollmentId: string;
     site: string;
-    agentKey: {
-        kty: "OKP";
-        crv: "Ed25519";
-        x: string;
+    agentKey: AttributionAgentKey;
+    recipientKeyId: string;
+    emailConsent: boolean;
+    expiresAt: number;
+    principalProof: string;
+}
+interface AttributionNetworkAgentRequest {
+    kind: "network_agent";
+    enrollmentId: string;
+    agentKey: AttributionAgentKey;
+    principalProof: string;
+    agentProof: string;
+    expiresAt: number;
+    rotation?: {
+        agentId: string;
+        previousKey: AttributionAgentKey;
     };
+}
+interface AttributionNetworkGrantRequest {
+    kind: "network_grant";
+    agentId: string;
+    site: string;
     recipientKeyId: string;
+    purpose: string;
     emailConsent: boolean;
     expiresAt: number;
     principalProof: string;
@@ -734,7 +766,7 @@ declare class Chitmark {
     readonly attribution: {
         resolve: (input: AttributionResolveOptions) => Promise<AttributionResult>;
         get: (id: string) => Promise<AttributionResult>;
-        createLink: (input: AttributionLinkRequest, idempotencyKey?: string) => Promise<AttributionLink>;
+        createLink: (input: AttributionLinkRequest | AttributionNetworkAgentRequest | AttributionNetworkGrantRequest, idempotencyKey?: string) => Promise<AttributionLink>;
         revokeLink: (id: string) => Promise<void>;
     };
     /** Paid access lifecycle. Transport uncertainty must be resumed, never treated as payment. */
@@ -1053,4 +1085,4 @@ declare function verifyCheckpointInclusion(checkpoint: EvidenceCheckpoint, proof
  */
 declare function getTrustedClientIp(req: Request): string;
 
-export { type VerdictTokenClaims as $, type Action as A, type DecisionCosts as B, Chitmark as C, type Decision as D, type EligibleAllowVerdict as E, type EnforcementMode as F, type EvidenceBundle as G, type EvidenceCheckpoint as H, EvidenceError as I, type EvidenceKey as J, type EvidenceManifest as K, type EvidenceSigningKey as L, type FeedbackRequest as M, type FeedbackResponse as N, type FeedbackSource as O, type FeedbackUnit as P, type OnDegraded as Q, type Outcome as R, type PiiMode as S, type PortableRecord as T, type Principal as U, type VerifyContext as V, SENSITIVE_RECEIPT_ACTIONS as W, type SensitiveReceiptAction as X, type Subject as Y, type TrialCreditOperation as Z, VERDICT_TOKEN_ISSUER as _, type VerifyRequest as a, VerdictTokenError as a0, type VerdictTokenErrorCode as a1, type VerifyActionReceiptOptions as a2, type VerifyVerdictTokenOptions as a3, type WorkloadCredential as a4, canonicalEvidence as a5, checkpointFromCommitments as a6, createDPoPCredentialProvider as a7, degradedChallengeVerdict as a8, enforceDegradedNeverAllow as a9, summarizeCharge as aA, evidenceAssert as aa, evidenceCommitment as ab, evidenceHash as ac, evidenceKeyAt as ad, getTrustedClientIp as ae, hashEmailSha256 as af, isEligibleAllow as ag, minimizeFormData as ah, signEvidence as ai, trialCreditOperationDigest as aj, truncateIp as ak, validateManifest as al, verdictToHttpStatus as am, verifyActionReceipt as an, verifyCheckpointAppend as ao, verifyCheckpointInclusion as ap, verifyEvidenceBundle as aq, verifyEvidenceSignature as ar, verifyHistoricalReceipt as as, verifyVerdictToken as at, type ChargeExecution as au, type ChargePurchase as av, type ChargeQuote as aw, type ChargeRequest as ax, type ChargeResponse as ay, type PaidResource as az, type Verdict as b, type ActionBinding as c, type ActionReceiptClaims as d, type ActorType as e, type AttributionAgentProof as f, type AttributionLink as g, type AttributionLinkRequest as h, type AttributionResolveOptions as i, type AttributionResult as j, CHITMARK_HTTP_STATUS as k, CHITMARK_HTTP_STATUS_MEANING as l, type ChallengeCompletionResponse as m, type ChallengeMethod as n, type ChallengeProof as o, type ChallengeRequest as p, type ChallengeResponse as q, type ChallengeRiskTier as r, ChitmarkApiError as s, type ChitmarkEnv as t, ChitmarkError as u, type ChitmarkErrorBody as v, type ChitmarkHttpStatus as w, type ChitmarkOptions as x, type Commitment as y, type CredentialProvider as z };
+export { type SensitiveReceiptAction as $, type Action as A, type ChitmarkHttpStatus as B, Chitmark as C, type ChitmarkOptions as D, type Commitment as E, type CredentialProvider as F, type Decision as G, type DecisionCosts as H, type EligibleAllowVerdict as I, type EnforcementMode as J, type EvidenceBundle as K, type EvidenceCheckpoint as L, EvidenceError as M, type EvidenceKey as N, type EvidenceManifest as O, type EvidenceSigningKey as P, type FeedbackRequest as Q, type FeedbackResponse as R, type FeedbackSource as S, type FeedbackUnit as T, type OnDegraded as U, type VerifyContext as V, type Outcome as W, type PiiMode as X, type PortableRecord as Y, type Principal as Z, SENSITIVE_RECEIPT_ACTIONS as _, type VerifyRequest as a, type Subject as a0, type TrialCreditOperation as a1, VERDICT_TOKEN_ISSUER as a2, type VerdictTokenClaims as a3, VerdictTokenError as a4, type VerdictTokenErrorCode as a5, type VerifyActionReceiptOptions as a6, type VerifyVerdictTokenOptions as a7, type WorkloadCredential as a8, canonicalEvidence as a9, type ChargeQuote as aA, type ChargeRequest as aB, type ChargeResponse as aC, type PaidResource as aD, summarizeCharge as aE, checkpointFromCommitments as aa, createDPoPCredentialProvider as ab, degradedChallengeVerdict as ac, enforceDegradedNeverAllow as ad, evidenceAssert as ae, evidenceCommitment as af, evidenceHash as ag, evidenceKeyAt as ah, getTrustedClientIp as ai, hashEmailSha256 as aj, isEligibleAllow as ak, minimizeFormData as al, signEvidence as am, trialCreditOperationDigest as an, truncateIp as ao, validateManifest as ap, verdictToHttpStatus as aq, verifyActionReceipt as ar, verifyCheckpointAppend as as, verifyCheckpointInclusion as at, verifyEvidenceBundle as au, verifyEvidenceSignature as av, verifyHistoricalReceipt as aw, verifyVerdictToken as ax, type ChargeExecution as ay, type ChargePurchase as az, type Verdict as b, type ActionBinding as c, type ActionReceiptClaims as d, type ActorType as e, type AttributionAgentKey as f, type AttributionAgentProof as g, type AttributionLink as h, type AttributionLinkRequest as i, type AttributionNetworkAgentRequest as j, type AttributionNetworkGrantRequest as k, type AttributionNetworkProof as l, type AttributionResolveOptions as m, type AttributionResult as n, CHITMARK_HTTP_STATUS as o, CHITMARK_HTTP_STATUS_MEANING as p, type ChallengeCompletionResponse as q, type ChallengeMethod as r, type ChallengeProof as s, type ChallengeRequest as t, type ChallengeResponse as u, type ChallengeRiskTier as v, ChitmarkApiError as w, type ChitmarkEnv as x, ChitmarkError as y, type ChitmarkErrorBody as z };

package/dist/{trusted-ip-BvSjdU80.d.ts → trusted-ip-DNO3xzCU.d.ts}

@@ -366,6 +366,18 @@ interface AttributionAgentProof {
     issuedAt: number;
     signature: string;
 }
+interface AttributionAgentKey {
+    kty: "OKP";
+    crv: "Ed25519";
+    x: string;
+}
+interface AttributionNetworkProof {
+    iss: "chitmark-agent-key-v1";
+    agentKey: AttributionAgentKey;
+    nonce: string;
+    issuedAt: number;
+    signature: string;
+}
 interface AttributionResolveOptions {
     request: {
         url?: string;
@@ -375,7 +387,9 @@ interface AttributionResolveOptions {
     site?: string;
     /** Opaque credential supplied by the integrating server, never a raw browser cookie. */
     session?: string;
-    agentProof?: AttributionAgentProof;
+    agentProof?: AttributionAgentProof | AttributionNetworkProof;
+    /** The recipient's configured disclosure purpose. Defaults to identity_attribution. */
+    purpose?: string;
     piiMode?: PiiMode;
     idempotencyKey?: string;
 }
@@ -390,10 +404,10 @@ interface AttributionResult {
         recognized: boolean;
         subject_id: string | null;
         scope: "site" | null;
-        match: "none" | "existing_session" | "verified_identity_link";
+        match: "none" | "existing_session" | "verified_identity_link" | "verified_agent_account";
     };
     principal: {
-        status: "unknown" | "previously_verified";
+        status: "unknown" | "previously_verified" | "withheld";
         email: string | null;
         email_verified: boolean | null;
         current_delegation_verified: boolean | null;
@@ -403,12 +417,30 @@ interface AttributionResult {
 interface AttributionLinkRequest {
     enrollmentId: string;
     site: string;
-    agentKey: {
-        kty: "OKP";
-        crv: "Ed25519";
-        x: string;
+    agentKey: AttributionAgentKey;
+    recipientKeyId: string;
+    emailConsent: boolean;
+    expiresAt: number;
+    principalProof: string;
+}
+interface AttributionNetworkAgentRequest {
+    kind: "network_agent";
+    enrollmentId: string;
+    agentKey: AttributionAgentKey;
+    principalProof: string;
+    agentProof: string;
+    expiresAt: number;
+    rotation?: {
+        agentId: string;
+        previousKey: AttributionAgentKey;
     };
+}
+interface AttributionNetworkGrantRequest {
+    kind: "network_grant";
+    agentId: string;
+    site: string;
     recipientKeyId: string;
+    purpose: string;
     emailConsent: boolean;
     expiresAt: number;
     principalProof: string;
@@ -734,7 +766,7 @@ declare class Chitmark {
     readonly attribution: {
         resolve: (input: AttributionResolveOptions) => Promise<AttributionResult>;
         get: (id: string) => Promise<AttributionResult>;
-        createLink: (input: AttributionLinkRequest, idempotencyKey?: string) => Promise<AttributionLink>;
+        createLink: (input: AttributionLinkRequest | AttributionNetworkAgentRequest | AttributionNetworkGrantRequest, idempotencyKey?: string) => Promise<AttributionLink>;
         revokeLink: (id: string) => Promise<void>;
     };
     /** Paid access lifecycle. Transport uncertainty must be resumed, never treated as payment. */
@@ -1053,4 +1085,4 @@ declare function verifyCheckpointInclusion(checkpoint: EvidenceCheckpoint, proof
  */
 declare function getTrustedClientIp(req: Request): string;
 
-export { type VerdictTokenClaims as $, type Action as A, type DecisionCosts as B, Chitmark as C, type Decision as D, type EligibleAllowVerdict as E, type EnforcementMode as F, type EvidenceBundle as G, type EvidenceCheckpoint as H, EvidenceError as I, type EvidenceKey as J, type EvidenceManifest as K, type EvidenceSigningKey as L, type FeedbackRequest as M, type FeedbackResponse as N, type FeedbackSource as O, type FeedbackUnit as P, type OnDegraded as Q, type Outcome as R, type PiiMode as S, type PortableRecord as T, type Principal as U, type VerifyContext as V, SENSITIVE_RECEIPT_ACTIONS as W, type SensitiveReceiptAction as X, type Subject as Y, type TrialCreditOperation as Z, VERDICT_TOKEN_ISSUER as _, type VerifyRequest as a, VerdictTokenError as a0, type VerdictTokenErrorCode as a1, type VerifyActionReceiptOptions as a2, type VerifyVerdictTokenOptions as a3, type WorkloadCredential as a4, canonicalEvidence as a5, checkpointFromCommitments as a6, createDPoPCredentialProvider as a7, degradedChallengeVerdict as a8, enforceDegradedNeverAllow as a9, summarizeCharge as aA, evidenceAssert as aa, evidenceCommitment as ab, evidenceHash as ac, evidenceKeyAt as ad, getTrustedClientIp as ae, hashEmailSha256 as af, isEligibleAllow as ag, minimizeFormData as ah, signEvidence as ai, trialCreditOperationDigest as aj, truncateIp as ak, validateManifest as al, verdictToHttpStatus as am, verifyActionReceipt as an, verifyCheckpointAppend as ao, verifyCheckpointInclusion as ap, verifyEvidenceBundle as aq, verifyEvidenceSignature as ar, verifyHistoricalReceipt as as, verifyVerdictToken as at, type ChargeExecution as au, type ChargePurchase as av, type ChargeQuote as aw, type ChargeRequest as ax, type ChargeResponse as ay, type PaidResource as az, type Verdict as b, type ActionBinding as c, type ActionReceiptClaims as d, type ActorType as e, type AttributionAgentProof as f, type AttributionLink as g, type AttributionLinkRequest as h, type AttributionResolveOptions as i, type AttributionResult as j, CHITMARK_HTTP_STATUS as k, CHITMARK_HTTP_STATUS_MEANING as l, type ChallengeCompletionResponse as m, type ChallengeMethod as n, type ChallengeProof as o, type ChallengeRequest as p, type ChallengeResponse as q, type ChallengeRiskTier as r, ChitmarkApiError as s, type ChitmarkEnv as t, ChitmarkError as u, type ChitmarkErrorBody as v, type ChitmarkHttpStatus as w, type ChitmarkOptions as x, type Commitment as y, type CredentialProvider as z };
+export { type SensitiveReceiptAction as $, type Action as A, type ChitmarkHttpStatus as B, Chitmark as C, type ChitmarkOptions as D, type Commitment as E, type CredentialProvider as F, type Decision as G, type DecisionCosts as H, type EligibleAllowVerdict as I, type EnforcementMode as J, type EvidenceBundle as K, type EvidenceCheckpoint as L, EvidenceError as M, type EvidenceKey as N, type EvidenceManifest as O, type EvidenceSigningKey as P, type FeedbackRequest as Q, type FeedbackResponse as R, type FeedbackSource as S, type FeedbackUnit as T, type OnDegraded as U, type VerifyContext as V, type Outcome as W, type PiiMode as X, type PortableRecord as Y, type Principal as Z, SENSITIVE_RECEIPT_ACTIONS as _, type VerifyRequest as a, type Subject as a0, type TrialCreditOperation as a1, VERDICT_TOKEN_ISSUER as a2, type VerdictTokenClaims as a3, VerdictTokenError as a4, type VerdictTokenErrorCode as a5, type VerifyActionReceiptOptions as a6, type VerifyVerdictTokenOptions as a7, type WorkloadCredential as a8, canonicalEvidence as a9, type ChargeQuote as aA, type ChargeRequest as aB, type ChargeResponse as aC, type PaidResource as aD, summarizeCharge as aE, checkpointFromCommitments as aa, createDPoPCredentialProvider as ab, degradedChallengeVerdict as ac, enforceDegradedNeverAllow as ad, evidenceAssert as ae, evidenceCommitment as af, evidenceHash as ag, evidenceKeyAt as ah, getTrustedClientIp as ai, hashEmailSha256 as aj, isEligibleAllow as ak, minimizeFormData as al, signEvidence as am, trialCreditOperationDigest as an, truncateIp as ao, validateManifest as ap, verdictToHttpStatus as aq, verifyActionReceipt as ar, verifyCheckpointAppend as as, verifyCheckpointInclusion as at, verifyEvidenceBundle as au, verifyEvidenceSignature as av, verifyHistoricalReceipt as aw, verifyVerdictToken as ax, type ChargeExecution as ay, type ChargePurchase as az, type Verdict as b, type ActionBinding as c, type ActionReceiptClaims as d, type ActorType as e, type AttributionAgentKey as f, type AttributionAgentProof as g, type AttributionLink as h, type AttributionLinkRequest as i, type AttributionNetworkAgentRequest as j, type AttributionNetworkGrantRequest as k, type AttributionNetworkProof as l, type AttributionResolveOptions as m, type AttributionResult as n, CHITMARK_HTTP_STATUS as o, CHITMARK_HTTP_STATUS_MEANING as p, type ChallengeCompletionResponse as q, type ChallengeMethod as r, type ChallengeProof as s, type ChallengeRequest as t, type ChallengeResponse as u, type ChallengeRiskTier as v, ChitmarkApiError as w, type ChitmarkEnv as x, ChitmarkError as y, type ChitmarkErrorBody as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chitmark/sdk",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Chitmark TypeScript SDK for Trust Decisions, Agent Attribution, and Agent Paid Access",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Chitmark",