@dupecom/botcha-cloudflare 0.16.0 → 0.18.0

package/dist/static.js

@@ -110,6 +110,35 @@ curl https://botcha.ai/agent-only -H "Authorization: Bearer <token>"
 |--------|------|-------------|
 | \`POST\` | \`/v1/verify/consumer\` | Verify Agentic Consumer (Layer 2) |
 | \`POST\` | \`/v1/verify/payment\` | Verify Agentic Payment Container (Layer 3) |
+| \`POST\` | \`/v1/verify/delegation\` | Verify delegation chain validity |
+| \`POST\` | \`/v1/verify/attestation\` | Verify attestation token + check capability |
+
+### Delegation Chains
+
+| Method | Path | Description |
+|--------|------|-------------|
+| \`POST\` | \`/v1/delegations\` | Create delegation (grantor→grantee) |
+| \`GET\` | \`/v1/delegations/:id\` | Get delegation details |
+| \`GET\` | \`/v1/delegations\` | List delegations for agent |
+| \`POST\` | \`/v1/delegations/:id/revoke\` | Revoke delegation (cascades) |
+
+### Capability Attestation
+
+| Method | Path | Description |
+|--------|------|-------------|
+| \`POST\` | \`/v1/attestations\` | Issue attestation token (can/cannot rules) |
+| \`GET\` | \`/v1/attestations/:id\` | Get attestation details |
+| \`GET\` | \`/v1/attestations\` | List attestations for agent |
+| \`POST\` | \`/v1/attestations/:id/revoke\` | Revoke attestation |
+
+### Agent Reputation Scoring
+
+| Method | Path | Description |
+|--------|------|-------------|
+| \`GET\` | \`/v1/reputation/:agent_id\` | Get agent reputation score |
+| \`POST\` | \`/v1/reputation/events\` | Record a reputation event |
+| \`GET\` | \`/v1/reputation/:agent_id/events\` | List reputation events |
+| \`POST\` | \`/v1/reputation/:agent_id/reset\` | Reset reputation (admin) |
 
 ### Challenges
 
@@ -383,6 +412,26 @@ Endpoint: POST https://botcha.ai/v1/invoices/:id/verify-iou - Verify Browsing IO
 Endpoint: POST https://botcha.ai/v1/verify/consumer - Verify Agentic Consumer object (Layer 2)
 Endpoint: POST https://botcha.ai/v1/verify/payment - Verify Agentic Payment Container (Layer 3)
 
+# TAP Delegation Chains (v0.17.0)
+Endpoint: POST https://botcha.ai/v1/delegations - Create delegation (grantor→grantee with capability subset)
+Endpoint: GET https://botcha.ai/v1/delegations/:id - Get delegation details
+Endpoint: GET https://botcha.ai/v1/delegations - List delegations for agent (?agent_id=&direction=in|out|both)
+Endpoint: POST https://botcha.ai/v1/delegations/:id/revoke - Revoke delegation (cascades to sub-delegations)
+Endpoint: POST https://botcha.ai/v1/verify/delegation - Verify entire delegation chain
+
+# TAP Capability Attestation (v0.17.0)
+Endpoint: POST https://botcha.ai/v1/attestations - Issue capability attestation token (can/cannot rules with action:resource patterns)
+Endpoint: GET https://botcha.ai/v1/attestations/:id - Get attestation details
+Endpoint: GET https://botcha.ai/v1/attestations - List attestations for agent (?agent_id=)
+Endpoint: POST https://botcha.ai/v1/attestations/:id/revoke - Revoke attestation (token rejected on future verification)
+Endpoint: POST https://botcha.ai/v1/verify/attestation - Verify attestation token + optionally check specific capability
+
+# Agent Reputation Scoring (v0.18.0)
+Endpoint: GET https://botcha.ai/v1/reputation/:agent_id - Get agent reputation score (0-1000, 5 tiers)
+Endpoint: POST https://botcha.ai/v1/reputation/events - Record a reputation event (18 action types, 6 categories)
+Endpoint: GET https://botcha.ai/v1/reputation/:agent_id/events - List reputation events (?category=&limit=)
+Endpoint: POST https://botcha.ai/v1/reputation/:agent_id/reset - Reset reputation to default (admin action)
+
 # Legacy Endpoints
 Endpoint: GET https://botcha.ai/api/challenge - Generate standard challenge
 Endpoint: POST https://botcha.ai/api/challenge - Verify standard challenge
@@ -461,8 +510,8 @@ TAP-Session-Get: GET /v1/sessions/:id/tap — includes time_remaining
 TAP-Get-Agent: GET /v1/agents/:id/tap — includes public_key for verification
 TAP-List-Agents: GET /v1/agents/tap?app_id=...&tap_only=true
 TAP-Middleware-Modes: tap, signature-only, challenge-only, flexible
-TAP-SDK-TS: registerTAPAgent(options), getTAPAgent(agentId), listTAPAgents(tapOnly?), createTAPSession(options), getTAPSession(sessionId), getJWKS(), getKeyById(keyId), rotateAgentKey(agentId), createInvoice(data), getInvoice(id), verifyBrowsingIOU(invoiceId, token)
-TAP-SDK-Python: register_tap_agent(name, ...), get_tap_agent(agent_id), list_tap_agents(tap_only?), create_tap_session(agent_id, user_context, intent), get_tap_session(session_id), get_jwks(), get_key_by_id(key_id), rotate_agent_key(agent_id), create_invoice(data), get_invoice(id), verify_browsing_iou(invoice_id, token)
+TAP-SDK-TS: registerTAPAgent(options), getTAPAgent(agentId), listTAPAgents(tapOnly?), createTAPSession(options), getTAPSession(sessionId), getJWKS(), getKeyById(keyId), rotateAgentKey(agentId), createInvoice(data), getInvoice(id), verifyBrowsingIOU(invoiceId, token), createDelegation(options), getDelegation(id), listDelegations(agentId, options?), revokeDelegation(id, reason?), verifyDelegationChain(id), issueAttestation(options), getAttestation(id), listAttestations(agentId), revokeAttestation(id, reason?), verifyAttestation(token, action?, resource?), getReputation(agentId), recordReputationEvent(options), listReputationEvents(agentId, options?), resetReputation(agentId)
+TAP-SDK-Python: register_tap_agent(name, ...), get_tap_agent(agent_id), list_tap_agents(tap_only?), create_tap_session(agent_id, user_context, intent), get_tap_session(session_id), get_jwks(), get_key_by_id(key_id), rotate_agent_key(agent_id), create_invoice(data), get_invoice(id), verify_browsing_iou(invoice_id, token), create_delegation(grantor_id, grantee_id, capabilities, ...), get_delegation(id), list_delegations(agent_id, ...), revoke_delegation(id, reason?), verify_delegation_chain(id), issue_attestation(agent_id, can, cannot?, ...), get_attestation(id), list_attestations(agent_id), revoke_attestation(id, reason?), verify_attestation(token, action?, resource?), get_reputation(agent_id), record_reputation_event(agent_id, category, action, ...), list_reputation_events(agent_id, category?, limit?), reset_reputation(agent_id)
 TAP-Middleware-Import: import { createTAPVerifyMiddleware } from '@dupecom/botcha/middleware'
 
 # TAP FULL SPEC v0.16.0
@@ -476,6 +525,10 @@ TAP-Key-Rotation: POST /v1/agents/:id/tap/rotate-key — rotate keys, invalidate
 TAP-402-Flow: POST /v1/invoices → GET /v1/invoices/:id → POST /v1/invoices/:id/verify-iou
 TAP-Edge-Verify: createTAPEdgeMiddleware for Cloudflare Workers CDN edge verification
 TAP-Visa-Federation: Trust keys from https://mcp.visa.com/.well-known/jwks (3-tier cache: memory → KV → HTTP)
+TAP-Delegation: POST /v1/delegations → GET /v1/delegations/:id → POST /v1/delegations/:id/revoke → POST /v1/verify/delegation
+TAP-Attestation: POST /v1/attestations → GET /v1/attestations/:id → POST /v1/attestations/:id/revoke → POST /v1/verify/attestation
+TAP-Attestation-Patterns: action:resource format with wildcards (*:*, read:*, *:invoices), deny takes precedence over allow
+TAP-Attestation-Middleware: requireCapability('read:invoices') — Hono middleware, extracts token from X-Botcha-Attestation or Authorization: Bearer
 
 # EMBEDDED CHALLENGE (for bots visiting HTML pages)
 Embedded-Challenge: <script type="application/botcha+json">
@@ -682,7 +735,7 @@ MCP gives agents tools. A2A lets agents communicate. TAP proves identity and sco
 
 **Shipped:** Challenge types, JWT tokens, multi-tenant apps, agent registry, TAP, dashboard, SDKs (TS/Python), CLI, LangChain, discovery standards.
 
-**Planned:** Delegation chains, capability attestation, agent reputation scoring, Agent SSO (cross-service verification), IETF RFC contribution.
+**Planned:** Agent SSO (cross-service verification), IETF RFC contribution.
 
 ---
 
@@ -1752,6 +1805,303 @@ export function getOpenApiSpec(version) {
                         "400": { description: "Invalid payment container" }
                     }
                 }
+            },
+            "/v1/delegations": {
+                post: {
+                    summary: "Create delegation",
+                    description: "Create a delegation from one agent to another. Grants a subset of the grantor's capabilities to the grantee.",
+                    operationId: "createDelegation",
+                    parameters: [{ name: "app_id", in: "query", required: true, schema: { type: "string" } }],
+                    requestBody: {
+                        required: true,
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object",
+                                    required: ["grantor_id", "grantee_id", "capabilities"],
+                                    properties: {
+                                        "grantor_id": { type: "string", description: "Agent granting capabilities" },
+                                        "grantee_id": { type: "string", description: "Agent receiving capabilities" },
+                                        "capabilities": { type: "array", items: { type: "object" }, description: "Capabilities to delegate (subset of grantor's)" },
+                                        "duration_seconds": { type: "integer", description: "Duration in seconds (default: 3600)" },
+                                        "max_depth": { type: "integer", description: "Max sub-delegation depth (default: 3)" },
+                                        "parent_delegation_id": { type: "string", description: "Parent delegation ID for sub-delegation" },
+                                        "metadata": { type: "object", description: "Optional context metadata" }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                    responses: {
+                        "201": { description: "Delegation created" },
+                        "400": { description: "Invalid request or capability escalation" },
+                        "403": { description: "Insufficient capabilities or depth limit" },
+                        "409": { description: "Cycle detected in chain" }
+                    }
+                },
+                get: {
+                    summary: "List delegations",
+                    description: "List delegations for an agent.",
+                    operationId: "listDelegations",
+                    parameters: [
+                        { name: "app_id", in: "query", required: true, schema: { type: "string" } },
+                        { name: "agent_id", in: "query", required: true, schema: { type: "string" } },
+                        { name: "direction", in: "query", schema: { type: "string", enum: ["in", "out", "both"] } },
+                        { name: "include_revoked", in: "query", schema: { type: "boolean" } },
+                        { name: "include_expired", in: "query", schema: { type: "boolean" } }
+                    ],
+                    responses: {
+                        "200": { description: "Delegation list" }
+                    }
+                }
+            },
+            "/v1/delegations/{id}": {
+                get: {
+                    summary: "Get delegation details",
+                    operationId: "getDelegation",
+                    parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }],
+                    responses: {
+                        "200": { description: "Delegation details" },
+                        "404": { description: "Delegation not found or expired" }
+                    }
+                }
+            },
+            "/v1/delegations/{id}/revoke": {
+                post: {
+                    summary: "Revoke delegation",
+                    description: "Revoke a delegation and cascade to all sub-delegations.",
+                    operationId: "revokeDelegation",
+                    parameters: [
+                        { name: "id", in: "path", required: true, schema: { type: "string" } },
+                        { name: "app_id", in: "query", required: true, schema: { type: "string" } }
+                    ],
+                    requestBody: {
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object",
+                                    properties: {
+                                        "reason": { type: "string", description: "Revocation reason" }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                    responses: {
+                        "200": { description: "Delegation revoked" },
+                        "404": { description: "Delegation not found" }
+                    }
+                }
+            },
+            "/v1/verify/delegation": {
+                post: {
+                    summary: "Verify delegation chain",
+                    description: "Verify an entire delegation chain is valid (not revoked, not expired, capabilities are valid subsets).",
+                    operationId: "verifyDelegationChain",
+                    requestBody: {
+                        required: true,
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object",
+                                    required: ["delegation_id"],
+                                    properties: {
+                                        "delegation_id": { type: "string", description: "The leaf delegation to verify" }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                    responses: {
+                        "200": { description: "Chain is valid — returns chain and effective capabilities" },
+                        "400": { description: "Chain is invalid — returns error reason" }
+                    }
+                }
+            },
+            "/v1/attestations": {
+                post: {
+                    summary: "Issue attestation",
+                    description: "Issue a capability attestation token for an agent. Grants fine-grained action:resource permissions with explicit deny.",
+                    operationId: "issueAttestation",
+                    requestBody: {
+                        required: true,
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object",
+                                    required: ["agent_id", "can"],
+                                    properties: {
+                                        "agent_id": { type: "string", description: "Agent to issue attestation for" },
+                                        "can": { type: "array", items: { type: "string" }, description: "Allowed capability patterns (action:resource)" },
+                                        "cannot": { type: "array", items: { type: "string" }, description: "Denied capability patterns (overrides can)" },
+                                        "restrictions": { type: "object", description: "Optional restrictions (max_amount, rate_limit)" },
+                                        "duration_seconds": { type: "integer", description: "Attestation lifetime (default: 3600)" },
+                                        "delegation_id": { type: "string", description: "Optional link to delegation chain" },
+                                        "metadata": { type: "object", description: "Optional context metadata" }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                    responses: {
+                        "201": { description: "Attestation issued — includes signed JWT token" },
+                        "400": { description: "Invalid request" },
+                        "403": { description: "Agent does not belong to app" },
+                        "404": { description: "Agent not found" }
+                    }
+                },
+                get: {
+                    summary: "List attestations",
+                    description: "List attestations for an agent.",
+                    operationId: "listAttestations",
+                    parameters: [
+                        { name: "app_id", in: "query", required: true, schema: { type: "string" } },
+                        { name: "agent_id", in: "query", required: true, schema: { type: "string" } }
+                    ],
+                    responses: {
+                        "200": { description: "Attestation list" }
+                    }
+                }
+            },
+            "/v1/attestations/{id}": {
+                get: {
+                    summary: "Get attestation details",
+                    operationId: "getAttestation",
+                    parameters: [{ name: "id", in: "path", required: true, schema: { type: "string" } }],
+                    responses: {
+                        "200": { description: "Attestation details" },
+                        "404": { description: "Attestation not found or expired" }
+                    }
+                }
+            },
+            "/v1/attestations/{id}/revoke": {
+                post: {
+                    summary: "Revoke attestation",
+                    description: "Revoke an attestation. Token will be rejected on future verification.",
+                    operationId: "revokeAttestation",
+                    parameters: [
+                        { name: "id", in: "path", required: true, schema: { type: "string" } },
+                        { name: "app_id", in: "query", required: true, schema: { type: "string" } }
+                    ],
+                    requestBody: {
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object",
+                                    properties: {
+                                        "reason": { type: "string", description: "Revocation reason" }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                    responses: {
+                        "200": { description: "Attestation revoked" },
+                        "404": { description: "Attestation not found" }
+                    }
+                }
+            },
+            "/v1/verify/attestation": {
+                post: {
+                    summary: "Verify attestation token",
+                    description: "Verify an attestation JWT token and optionally check a specific capability.",
+                    operationId: "verifyAttestation",
+                    requestBody: {
+                        required: true,
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object",
+                                    required: ["token"],
+                                    properties: {
+                                        "token": { type: "string", description: "Attestation JWT token" },
+                                        "action": { type: "string", description: "Optional capability action to check (e.g. read)" },
+                                        "resource": { type: "string", description: "Optional capability resource to check (e.g. invoices)" }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                    responses: {
+                        "200": { description: "Token valid — returns payload or capability check result" },
+                        "401": { description: "Invalid or expired token" },
+                        "403": { description: "Capability denied" }
+                    }
+                }
+            },
+            "/v1/reputation/{agent_id}": {
+                get: {
+                    summary: "Get agent reputation",
+                    description: "Get the reputation score for an agent. Returns score (0-1000), tier, event counts, and category breakdown.",
+                    operationId: "getReputation",
+                    parameters: [
+                        { name: "agent_id", in: "path", required: true, schema: { type: "string" }, description: "Agent ID" },
+                        { name: "app_id", in: "query", schema: { type: "string" }, description: "App ID for authentication" }
+                    ],
+                    responses: {
+                        "200": { description: "Reputation score with tier and category breakdown" },
+                        "404": { description: "Agent not found" }
+                    }
+                }
+            },
+            "/v1/reputation/events": {
+                post: {
+                    summary: "Record reputation event",
+                    description: "Record a behavioral event that affects an agent's reputation score. 18 action types across 6 categories.",
+                    operationId: "recordReputationEvent",
+                    requestBody: {
+                        required: true,
+                        content: {
+                            "application/json": {
+                                schema: {
+                                    type: "object",
+                                    required: ["agent_id", "category", "action"],
+                                    properties: {
+                                        "agent_id": { type: "string", description: "Agent to record event for" },
+                                        "category": { type: "string", enum: ["verification", "attestation", "delegation", "session", "violation", "endorsement"], description: "Event category" },
+                                        "action": { type: "string", description: "Event action (e.g. challenge_solved, abuse_detected)" },
+                                        "source_agent_id": { type: "string", description: "Source agent for endorsements" },
+                                        "metadata": { type: "object", additionalProperties: { type: "string" }, description: "Optional key/value metadata" }
+                                    }
+                                }
+                            }
+                        }
+                    },
+                    responses: {
+                        "201": { description: "Event recorded — returns event details and updated score" },
+                        "400": { description: "Invalid category/action or self-endorsement" },
+                        "404": { description: "Agent not found" }
+                    }
+                }
+            },
+            "/v1/reputation/{agent_id}/events": {
+                get: {
+                    summary: "List reputation events",
+                    description: "List reputation events for an agent with optional category filter.",
+                    operationId: "listReputationEvents",
+                    parameters: [
+                        { name: "agent_id", in: "path", required: true, schema: { type: "string" }, description: "Agent ID" },
+                        { name: "category", in: "query", schema: { type: "string" }, description: "Filter by category" },
+                        { name: "limit", in: "query", schema: { type: "integer", maximum: 100 }, description: "Max events (default: 50, max: 100)" }
+                    ],
+                    responses: {
+                        "200": { description: "List of reputation events" }
+                    }
+                }
+            },
+            "/v1/reputation/{agent_id}/reset": {
+                post: {
+                    summary: "Reset reputation",
+                    description: "Reset an agent's reputation to default (500 neutral). Admin action — clears all event history.",
+                    operationId: "resetReputation",
+                    parameters: [
+                        { name: "agent_id", in: "path", required: true, schema: { type: "string" }, description: "Agent ID" }
+                    ],
+                    responses: {
+                        "200": { description: "Reputation reset to default" },
+                        "404": { description: "Agent not found" }
+                    }
+                }
             }
         },
         components: {

package/dist/tap-attestation-routes.d.ts

@@ -0,0 +1,204 @@
+/**
+ * TAP Capability Attestation API Routes
+ *
+ * Endpoints for issuing, retrieving, revoking, and verifying
+ * capability attestation tokens for TAP agents.
+ *
+ * Routes:
+ *   POST   /v1/attestations              — Issue attestation token
+ *   GET    /v1/attestations/:id          — Get attestation details
+ *   GET    /v1/attestations              — List attestations for agent
+ *   POST   /v1/attestations/:id/revoke   — Revoke attestation
+ *   POST   /v1/verify/attestation        — Verify attestation + check capability
+ */
+import type { Context } from 'hono';
+/**
+ * POST /v1/attestations
+ * Issue a capability attestation token for an agent
+ */
+export declare function issueAttestationRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: false;
+    error: string | undefined;
+    message: string;
+}, 401, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string | undefined;
+}, any, "json">) | (Response & import("hono").TypedResponse<{
+    success: true;
+    attestation_id: string;
+    agent_id: string;
+    app_id: string;
+    token: string;
+    can: string[];
+    cannot: string[];
+    restrictions: {
+        [x: string]: any;
+        max_amount?: number | undefined;
+        rate_limit?: number | undefined;
+    } | null;
+    delegation_id: string | null;
+    metadata: {
+        [x: string]: string;
+    } | null;
+    created_at: string;
+    expires_at: string;
+}, 201, "json">)>;
+/**
+ * GET /v1/attestations/:id
+ * Get attestation details
+ */
+export declare function getAttestationRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 400, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 404, "json">) | (Response & import("hono").TypedResponse<{
+    success: true;
+    attestation_id: string;
+    agent_id: string;
+    app_id: string;
+    can: string[];
+    cannot: string[];
+    restrictions: {
+        [x: string]: any;
+        max_amount?: number | undefined;
+        rate_limit?: number | undefined;
+    } | null;
+    delegation_id: string | null;
+    metadata: {
+        [x: string]: string;
+    } | null;
+    created_at: string;
+    expires_at: string;
+    revoked: boolean;
+    revoked_at: string | null;
+    revocation_reason: string | null;
+    time_remaining: number;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 500, "json">)>;
+/**
+ * GET /v1/attestations
+ * List attestations for an agent
+ *
+ * Query params:
+ *   agent_id — required, the agent to list attestations for
+ */
+export declare function listAttestationsRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: false;
+    error: string | undefined;
+    message: string;
+}, 401, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 400, "json">) | (Response & import("hono").TypedResponse<{
+    success: true;
+    attestations: any[];
+    count: number;
+    agent_id: string;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 500, "json">)>;
+/**
+ * POST /v1/attestations/:id/revoke
+ * Revoke an attestation
+ */
+export declare function revokeAttestationRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 400, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string | undefined;
+    message: string;
+}, 401, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 404, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 403, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string | undefined;
+}, 500, "json">) | (Response & import("hono").TypedResponse<{
+    success: true;
+    attestation_id: string;
+    revoked: true;
+    revoked_at: string | null;
+    revocation_reason: string | null;
+    message: string;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
+/**
+ * POST /v1/verify/attestation
+ * Verify an attestation token and optionally check a specific capability
+ *
+ * Body:
+ *   token     — required, the attestation JWT token
+ *   action    — optional, capability action to check (e.g. "read")
+ *   resource  — optional, capability resource to check (e.g. "invoices")
+ */
+export declare function verifyAttestationRoute(c: Context): Promise<(Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 400, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    valid: false;
+    allowed: false;
+    agent_id: string | null;
+    error: string | undefined;
+    matched_rule: string | null;
+    checked_capability: any;
+}, 401 | 403, "json">) | (Response & import("hono").TypedResponse<{
+    success: true;
+    valid: true;
+    allowed: true;
+    agent_id: string | undefined;
+    reason: string | undefined;
+    matched_rule: string | undefined;
+    checked_capability: any;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    valid: false;
+    error: string | undefined;
+}, 401, "json">) | (Response & import("hono").TypedResponse<{
+    success: true;
+    valid: true;
+    agent_id: string;
+    issuer: string;
+    can: string[];
+    cannot: string[];
+    restrictions: {
+        [x: string]: any;
+        max_amount?: number | undefined;
+        rate_limit?: number | undefined;
+    } | null;
+    delegation_id: string | null;
+    issued_at: string;
+    expires_at: string;
+}, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+    success: false;
+    error: string;
+    message: string;
+}, 500, "json">)>;
+declare const _default: {
+    issueAttestationRoute: typeof issueAttestationRoute;
+    getAttestationRoute: typeof getAttestationRoute;
+    listAttestationsRoute: typeof listAttestationsRoute;
+    revokeAttestationRoute: typeof revokeAttestationRoute;
+    verifyAttestationRoute: typeof verifyAttestationRoute;
+};
+export default _default;
+//# sourceMappingURL=tap-attestation-routes.d.ts.map

package/dist/tap-attestation-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tap-attestation-routes.d.ts","sourceRoot":"","sources":["../src/tap-attestation-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AA4CpC;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4GrD;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiDnD;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;kBA8DrD;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;oEAsEtD;AAED;;;;;;;;GAQG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmFtD;;;;;;;;AAED,wBAME"}