@getvda/witness 0.1.0

package/dist/fake-server.js

@@ -0,0 +1,168 @@
+/**
+ * FakeWitnessServer — a no-network Witness that speaks the REAL HTTP protocol.
+ *
+ * This is the fidelity fix: a fake that models the actual two-step
+ * prepare → sign → submit flow, so the REAL WitnessHttpClient can be exercised
+ * end-to-end against it. It is the same principle as the fake doing real signing,
+ * extended to the real protocol:
+ *
+ *   - `prepare` returns `submit` as INSTRUCTION TEXT (exactly as real Witness
+ *     does) — a client that mistakes it for a path will hit no route and 404.
+ *   - the seal endpoints VERIFY the Ed25519 proof over the canonical bytes with
+ *     the key presented at prepare, and reject a record submitted to the wrong
+ *     record-type endpoint.
+ *   - any unknown path 404s.
+ *
+ * That combination makes the class of bug that reached production (treating the
+ * `submit` field as a URL) impossible to hide in tests.
+ *
+ * Pass `.fetch` to WitnessHttpClient as its `fetch` implementation.
+ */
+import { verifyEd25519 } from './signer.js';
+import { stableStringify, sha256Hex } from './canonical.js';
+const ENDPOINT_TYPE = {
+    '/api/witness/seal/hitl-decision': 'hitl_decision',
+    '/api/witness/seal/attestation': 'attestation',
+    '/api/witness/seal/agent-action': 'agent_action',
+};
+const SKILL_TYPE = {
+    seal_hitl_decision: 'hitl_decision',
+    seal_attestation: 'attestation',
+    seal_agent_action: 'agent_action',
+};
+function res(status, body) {
+    return {
+        ok: status >= 200 && status < 300,
+        status,
+        json: async () => body,
+        text: async () => (typeof body === 'string' ? body : JSON.stringify(body)),
+    };
+}
+export class FakeWitnessServer {
+    anchored;
+    issuedAt;
+    account;
+    seq = 0;
+    prevHash = null;
+    prepared = new Map();
+    stored = new Map();
+    constructor(config = {}) {
+        this.anchored = config.anchored ?? true;
+        this.issuedAt = config.issuedAt ?? '2026-07-18T00:00:00.000Z';
+        this.account = {
+            account_id: 'acct_FAKE0000000000000000000000',
+            tier: this.anchored ? 'ANCHORED' : 'SEALED',
+            scopes: ['seal', 'read'],
+            compliance: this.anchored,
+            key_id: 'fake',
+            revoked: false,
+            expires_at: null,
+            ...config.account,
+        };
+    }
+    /** A fetch-compatible entry point. Bind and pass to WitnessHttpClient. */
+    fetch = async (input, init) => {
+        const raw = typeof input === 'string' ? input : input instanceof URL ? input.href : input.url;
+        const path = new URL(raw).pathname;
+        const method = (init?.method ?? 'GET').toUpperCase();
+        const body = init?.body ? JSON.parse(String(init.body)) : undefined;
+        if (method === 'GET' && path === '/api/witness/whoami')
+            return res(200, this.account);
+        if (method === 'POST' && path === '/api/witness/prepare')
+            return this.prepare(body);
+        if (method === 'POST' && ENDPOINT_TYPE[path])
+            return this.submit(ENDPOINT_TYPE[path], body);
+        if (method === 'POST' && path === '/api/witness/verify')
+            return this.verify(body);
+        if (method === 'GET' && path.startsWith('/api/witness/records/')) {
+            return this.readRecord(decodeURIComponent(path.slice('/api/witness/records/'.length)));
+        }
+        // Anything else — including a URL built from the `submit` instruction text.
+        return res(404, { error: 'not_found', path });
+    };
+    prepare(body) {
+        const recordType = body.skill ? SKILL_TYPE[body.skill] : undefined;
+        if (!recordType)
+            return res(422, { error: 'unknown_skill', skill: body.skill });
+        if (!body.signingPublicKeyJwk?.x)
+            return res(422, { error: 'missing_signingPublicKeyJwk' });
+        const canonical = stableStringify({ recordType, params: body.params });
+        const recordId = `rec_fake_${sha256Hex(canonical).slice(0, 24)}`;
+        const record = {
+            schema: 'vda.witness.record/1',
+            recordId,
+            account: this.account.account_id,
+            seq: this.seq,
+            issuedAt: this.issuedAt,
+            signer: {
+                keyId: 'did:web:acp.getvda.ai#key-2',
+                custody: 'customer-managed',
+                algorithm: 'Ed25519',
+                publicKeyJwk: body.signingPublicKeyJwk,
+            },
+            recordType,
+            prevHash: this.prevHash,
+            [recordType]: body.params,
+        };
+        this.prepared.set(recordId, { canonical, jwk: body.signingPublicKeyJwk, recordType });
+        // `submit` is STRUCTURED ROUTING {method, endpoint}, exactly like real Witness;
+        // the prose lives in `submitInstructions` and is never a routing value.
+        const endpoint = Object.keys(ENDPOINT_TYPE).find((p) => ENDPOINT_TYPE[p] === recordType);
+        return res(200, {
+            record,
+            canonicalBytes: canonical,
+            seq: this.seq,
+            prevHash: this.prevHash,
+            submit: { method: 'POST', endpoint },
+            submitInstructions: 'Ed25519-sign canonicalBytes with your record key; attach the proof; POST { record } to submit.endpoint.',
+        });
+    }
+    submit(endpointType, body) {
+        const record = body.record;
+        if (!record?.recordId)
+            return res(422, { error: 'missing_record' });
+        const prep = this.prepared.get(record.recordId);
+        if (!prep)
+            return res(404, { error: 'no_prepared_record', recordId: record.recordId });
+        // Fidelity: the record must be submitted to the endpoint matching its type.
+        if (prep.recordType !== endpointType) {
+            return res(400, { error: 'wrong_endpoint', expected: prep.recordType, got: endpointType });
+        }
+        if (!record.proof?.signature)
+            return res(422, { error: 'missing_proof' });
+        if (!verifyEd25519(prep.canonical, record.proof.signature, prep.jwk)) {
+            return res(400, { error: 'signature_invalid' });
+        }
+        this.seq += 1;
+        this.prevHash = sha256Hex(prep.canonical);
+        this.stored.set(record.recordId, { record, canonical: prep.canonical, jwk: prep.jwk });
+        return res(200, {
+            record,
+            bodyHash: sha256Hex(prep.canonical),
+            sealed: true,
+            anchored: this.anchored,
+            sealedState: this.anchored ? 'anchored' : 'not_anchored',
+        });
+    }
+    verify(body) {
+        const record = body.record;
+        const entry = record?.recordId ? this.stored.get(record.recordId) : undefined;
+        if (!entry || !record?.proof?.signature) {
+            return res(200, { ok: false, signatureValid: false, errors: ['unknown record or no proof'] });
+        }
+        const signatureValid = verifyEd25519(entry.canonical, record.proof.signature, entry.jwk);
+        return res(200, { ok: signatureValid, bodyHash: sha256Hex(entry.canonical), signatureValid });
+    }
+    readRecord(id) {
+        const entry = this.stored.get(id);
+        if (!entry)
+            return res(404, { error: 'not_found', recordId: id });
+        return res(200, {
+            record: entry.record,
+            bodyHash: sha256Hex(entry.canonical),
+            signatureValid: true,
+            anchorState: this.anchored ? 'ANCHORED_VALID' : 'not_anchored',
+        });
+    }
+}
+//# sourceMappingURL=fake-server.js.map

package/dist/fake-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-server.js","sourceRoot":"","sources":["../src/fake-server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,aAAa,EAAkB,MAAM,aAAa,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAI5D,MAAM,aAAa,GAA+B;IAChD,iCAAiC,EAAE,eAAe;IAClD,+BAA+B,EAAE,aAAa;IAC9C,gCAAgC,EAAE,cAAc;CACjD,CAAC;AACF,MAAM,UAAU,GAA+B;IAC7C,kBAAkB,EAAE,eAAe;IACnC,gBAAgB,EAAE,aAAa;IAC/B,iBAAiB,EAAE,cAAc;CAClC,CAAC;AAEF,SAAS,GAAG,CAAC,MAAc,EAAE,IAAa;IACxC,OAAO;QACL,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QACjC,MAAM;QACN,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QACtB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;KAC/D,CAAC;AAChB,CAAC;AAQD,MAAM,OAAO,iBAAiB;IACX,QAAQ,CAAU;IAClB,QAAQ,CAAS;IACjB,OAAO,CAAS;IACzB,GAAG,GAAG,CAAC,CAAC;IACR,QAAQ,GAAkB,IAAI,CAAC;IAC/B,QAAQ,GAAG,IAAI,GAAG,EAGvB,CAAC;IACI,MAAM,GAAG,IAAI,GAAG,EAAwE,CAAC;IAEjG,YAAY,SAAkC,EAAE;QAC9C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,0BAA0B,CAAC;QAC9D,IAAI,CAAC,OAAO,GAAG;YACb,UAAU,EAAE,iCAAiC;YAC7C,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;YAC3C,MAAM,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;YACxB,UAAU,EAAE,IAAI,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK;YACd,UAAU,EAAE,IAAI;YAChB,GAAG,MAAM,CAAC,OAAO;SAClB,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,KAAK,GAAG,KAAK,EAAE,KAA6B,EAAE,IAAkB,EAAqB,EAAE;QACrF,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAC9F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpE,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,qBAAqB;YAAE,OAAO,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtF,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,sBAAsB;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpF,IAAI,MAAM,KAAK,MAAM,IAAI,aAAa,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAE,EAAE,IAAI,CAAC,CAAC;QAC7F,IAAI,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,qBAAqB;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClF,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;YACjE,OAAO,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,4EAA4E;QAC5E,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC;IAEM,OAAO,CAAC,IAIf;QACC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,IAAI,CAAC,UAAU;YAAE,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAChF,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAAE,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAE5F,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,YAAY,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QACjE,MAAM,MAAM,GAAkB;YAC5B,MAAM,EAAE,sBAAsB;YAC9B,QAAQ;YACR,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YAChC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE;gBACN,KAAK,EAAE,6BAA6B;gBACpC,OAAO,EAAE,kBAAkB;gBAC3B,SAAS,EAAE,SAAS;gBACpB,YAAY,EAAE,IAAI,CAAC,mBAAmB;aACvC;YACD,UAAU;YACV,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,MAAM;SAC1B,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,mBAAmB,EAAE,UAAU,EAAE,CAAC,CAAC;QACtF,gFAAgF;QAChF,wEAAwE;QACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,UAAU,CAAE,CAAC;QAC1F,OAAO,GAAG,CAAC,GAAG,EAAE;YACd,MAAM;YACN,cAAc,EAAE,SAAS;YACzB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;YACpC,kBAAkB,EAChB,yGAAyG;SAC5G,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,YAAwB,EAAE,IAAgC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,QAAQ;YAAE,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvF,4EAA4E;QAC5E,IAAI,IAAI,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;YACrC,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS;YAAE,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACvF,OAAO,GAAG,CAAC,GAAG,EAAE;YACd,MAAM;YACN,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;YACnC,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc;SACzD,CAAC,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,IAAgC;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YACxC,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACzF,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IAChG,CAAC;IAEO,UAAU,CAAC,EAAU;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAClE,OAAO,GAAG,CAAC,GAAG,EAAE;YACd,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC;YACpC,cAAc,EAAE,IAAI;YACpB,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,cAAc;SAC/D,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/fake.d.ts

@@ -0,0 +1,40 @@
+/**
+ * FakeWitnessClient — a no-network Witness for tests and the reference loop.
+ *
+ * FAITHFUL BY CONSTRUCTION: it is the REAL WitnessHttpClient wired to an
+ * in-process FakeWitnessServer that speaks the real two-step protocol. So every
+ * consumer of the fake exercises the actual prepare → sign → submit flow (with
+ * real Ed25519 signing and server-side signature verification) — the same
+ * principle as the fake doing real signing, now extended to the real protocol.
+ * The submit-field bug that reached production cannot hide behind this fake.
+ *
+ * It is deterministic (fixed timestamps, content-addressed record ids) and does
+ * no network I/O. It is NOT Witness — no external anchoring; `anchored` is a
+ * claim of the fake (default true, mirroring ACP's ANCHORED account). Never use
+ * in production.
+ */
+import { FakeWitnessServer } from './fake-server.js';
+import { stableStringify } from './canonical.js';
+import type { RecordSigner } from './signer.js';
+import type { AgentActionParams, AttestationParams, HitlDecisionParams, SealedRecord, VerifyResult, WhoAmI, WitnessClient, WitnessRecord } from './types.js';
+export interface FakeWitnessConfig {
+    readonly signer?: RecordSigner;
+    readonly anchored?: boolean;
+    readonly account?: Partial<WhoAmI>;
+    readonly issuedAt?: string;
+}
+export declare class FakeWitnessClient implements WitnessClient {
+    /** All sealed records, for assertions in tests. */
+    readonly sealed: SealedRecord[];
+    readonly server: FakeWitnessServer;
+    private readonly http;
+    constructor(config?: FakeWitnessConfig);
+    sealHitlDecision(params: HitlDecisionParams): Promise<SealedRecord>;
+    sealAttestation(params: AttestationParams): Promise<SealedRecord>;
+    sealAgentAction(params: AgentActionParams): Promise<SealedRecord>;
+    whoami(): Promise<WhoAmI>;
+    verify(record: WitnessRecord): Promise<VerifyResult>;
+    private record;
+}
+export { stableStringify };
+//# sourceMappingURL=fake.d.ts.map

package/dist/fake.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake.d.ts","sourceRoot":"","sources":["../src/fake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAmB,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,aAAa,EACb,aAAa,EACd,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qBAAa,iBAAkB,YAAW,aAAa;IACrD,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,CAAM;IACrC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;gBAE7B,MAAM,GAAE,iBAAsB;IAgBpC,gBAAgB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,YAAY,CAAC;IAGnE,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAGjE,eAAe,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAGjE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAGzB,MAAM,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAI1D,OAAO,CAAC,MAAM;CAIf;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/fake.js

@@ -0,0 +1,60 @@
+/**
+ * FakeWitnessClient — a no-network Witness for tests and the reference loop.
+ *
+ * FAITHFUL BY CONSTRUCTION: it is the REAL WitnessHttpClient wired to an
+ * in-process FakeWitnessServer that speaks the real two-step protocol. So every
+ * consumer of the fake exercises the actual prepare → sign → submit flow (with
+ * real Ed25519 signing and server-side signature verification) — the same
+ * principle as the fake doing real signing, now extended to the real protocol.
+ * The submit-field bug that reached production cannot hide behind this fake.
+ *
+ * It is deterministic (fixed timestamps, content-addressed record ids) and does
+ * no network I/O. It is NOT Witness — no external anchoring; `anchored` is a
+ * claim of the fake (default true, mirroring ACP's ANCHORED account). Never use
+ * in production.
+ */
+import { WitnessHttpClient } from './client.js';
+import { FakeWitnessServer } from './fake-server.js';
+import { ephemeralSigner, stableStringify } from './canonical.js';
+export class FakeWitnessClient {
+    /** All sealed records, for assertions in tests. */
+    sealed = [];
+    server;
+    http;
+    constructor(config = {}) {
+        const issuedAt = config.issuedAt ?? '2026-07-18T00:00:00.000Z';
+        this.server = new FakeWitnessServer({
+            anchored: config.anchored ?? true,
+            issuedAt,
+            ...(config.account ? { account: config.account } : {}),
+        });
+        this.http = new WitnessHttpClient({
+            baseUrl: 'https://fake.witness.local',
+            getApiKey: () => 'wtn.fake.fake',
+            signer: config.signer ?? ephemeralSigner(),
+            fetch: this.server.fetch,
+            now: () => issuedAt,
+        });
+    }
+    async sealHitlDecision(params) {
+        return this.record(await this.http.sealHitlDecision(params));
+    }
+    async sealAttestation(params) {
+        return this.record(await this.http.sealAttestation(params));
+    }
+    async sealAgentAction(params) {
+        return this.record(await this.http.sealAgentAction(params));
+    }
+    async whoami() {
+        return this.http.whoami();
+    }
+    async verify(record) {
+        return this.http.verify(record);
+    }
+    record(sealed) {
+        this.sealed.push(sealed);
+        return sealed;
+    }
+}
+export { stableStringify };
+//# sourceMappingURL=fake.js.map

package/dist/fake.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake.js","sourceRoot":"","sources":["../src/fake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAoBlE,MAAM,OAAO,iBAAiB;IAC5B,mDAAmD;IAC1C,MAAM,GAAmB,EAAE,CAAC;IAC5B,MAAM,CAAoB;IAClB,IAAI,CAAoB;IAEzC,YAAY,SAA4B,EAAE;QACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,0BAA0B,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,IAAI,iBAAiB,CAAC;YAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,QAAQ;YACR,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,IAAI,iBAAiB,CAAC;YAChC,OAAO,EAAE,4BAA4B;YACrC,SAAS,EAAE,GAAG,EAAE,CAAC,eAAe;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE;YAC1C,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK;YACxB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAA0B;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,MAAyB;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,MAAyB;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,MAAqB;QAChC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAEO,MAAM,CAAC,MAAoB;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @getvda/witness — Witness sealing substrate for ACP.
+ *
+ * Real HTTP client (customer-managed custody: prepare → sign → submit) + a
+ * no-network fake (faithful: really signs, really verifies). Same
+ * substrate-with-a-fake pattern as the git provider, so the approval loop runs
+ * before ACP's Witness account exists.
+ */
+export type { Actor, GoverningClause, Evidence, Disposition, HitlDecisionParams, AttestationParams, AgentActionParams, RecordProof, WitnessRecord, SealedRecord, WhoAmI, VerifyResult, WitnessClient, } from './types.js';
+export { Ed25519RecordSigner, verifyEd25519, type RecordSigner, type PublicJwk } from './signer.js';
+export { WitnessHttpClient, WitnessError, type WitnessHttpConfig, type WitnessErrorCode, } from './client.js';
+export { FakeWitnessClient, stableStringify, type FakeWitnessConfig } from './fake.js';
+export { FakeWitnessServer, type FakeWitnessServerConfig } from './fake-server.js';
+export { renewApiKey, ControllerRenewingApiKey, type RenewedKey, type RenewOptions, } from './renew.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EACV,KAAK,EACL,eAAe,EACf,QAAQ,EACR,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,YAAY,EACZ,MAAM,EACN,YAAY,EACZ,aAAa,GACd,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAEpG,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,KAAK,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAEnF,OAAO,EACL,WAAW,EACX,wBAAwB,EACxB,KAAK,UAAU,EACf,KAAK,YAAY,GAClB,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,14 @@
+/**
+ * @getvda/witness — Witness sealing substrate for ACP.
+ *
+ * Real HTTP client (customer-managed custody: prepare → sign → submit) + a
+ * no-network fake (faithful: really signs, really verifies). Same
+ * substrate-with-a-fake pattern as the git provider, so the approval loop runs
+ * before ACP's Witness account exists.
+ */
+export { Ed25519RecordSigner, verifyEd25519 } from './signer.js';
+export { WitnessHttpClient, WitnessError, } from './client.js';
+export { FakeWitnessClient, stableStringify } from './fake.js';
+export { FakeWitnessServer } from './fake-server.js';
+export { renewApiKey, ControllerRenewingApiKey, } from './renew.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkBH,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAqC,MAAM,aAAa,CAAC;AAEpG,OAAO,EACL,iBAAiB,EACjB,YAAY,GAGb,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAA0B,MAAM,WAAW,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAgC,MAAM,kBAAkB,CAAC;AAEnF,OAAO,EACL,WAAW,EACX,wBAAwB,GAGzB,MAAM,YAAY,CAAC"}

package/dist/renew.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Renew-from-controller (challenge-response).
+ *
+ * ACP's runtime should NOT depend on a standing API key. Instead it proves
+ * control of the account by signing a Witness challenge with its CONTROLLER key
+ * and receives a fresh, short-TTL API key. `ControllerRenewingApiKey` caches that
+ * key and re-renews before expiry, so the Bearer used on seal calls is always
+ * freshly minted from the controller key — a leaked bootstrap key is not the
+ * thing the runtime relies on.
+ *
+ * Contract (confirmed against the live OpenAPI, 2026-07-18):
+ *   POST /api/witness/renew/challenge { accountId } → { nonce, expiresInSec, sign }
+ *   sign `vda.witness.renew/1|<accountId>|<nonce>` raw Ed25519 (base64url) with the controller key
+ *   POST /api/witness/renew { accountId, nonce, signature } → { apiKey, keyId, keyExpiresAt, keyTtlSec }
+ */
+import type { RecordSigner } from './signer.js';
+export interface RenewedKey {
+    readonly apiKey: string;
+    readonly accountId: string;
+    readonly keyId: string;
+    readonly keyExpiresAt: string;
+    readonly keyTtlSec: number;
+}
+export interface RenewOptions {
+    readonly accountId: string;
+    /** ACP's controller key signer (Ed25519 over UTF-8 bytes). */
+    readonly controller: RecordSigner;
+    readonly baseUrl?: string;
+    readonly fetch?: typeof fetch;
+}
+/** One renewal round-trip: challenge → sign with controller → renew. */
+export declare function renewApiKey(opts: RenewOptions): Promise<RenewedKey>;
+/**
+ * A caching Bearer provider that renews from the controller key before expiry.
+ * Pass `get` (bound) as `getApiKey` to WitnessHttpClient.
+ */
+export declare class ControllerRenewingApiKey {
+    private readonly opts;
+    private cached;
+    private readonly skewMs;
+    private inflight;
+    constructor(opts: RenewOptions & {
+        skewSec?: number;
+        now?: () => number;
+    });
+    private now;
+    get: () => Promise<string>;
+    private renew;
+}
+//# sourceMappingURL=renew.d.ts.map

package/dist/renew.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"renew.d.ts","sourceRoot":"","sources":["../src/renew.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGhD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AAID,wEAAwE;AACxE,wBAAsB,WAAW,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAsCzE;AAED;;;GAGG;AACH,qBAAa,wBAAwB;IAKvB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,MAAM,CAAmD;IACjE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAA8B;gBAEjB,IAAI,EAAE,YAAY,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;KAAE;IAI1F,OAAO,CAAC,GAAG;IAIX,GAAG,QAAa,OAAO,CAAC,MAAM,CAAC,CAQ7B;YAEY,KAAK;CAQpB"}

package/dist/renew.js

@@ -0,0 +1,82 @@
+/**
+ * Renew-from-controller (challenge-response).
+ *
+ * ACP's runtime should NOT depend on a standing API key. Instead it proves
+ * control of the account by signing a Witness challenge with its CONTROLLER key
+ * and receives a fresh, short-TTL API key. `ControllerRenewingApiKey` caches that
+ * key and re-renews before expiry, so the Bearer used on seal calls is always
+ * freshly minted from the controller key — a leaked bootstrap key is not the
+ * thing the runtime relies on.
+ *
+ * Contract (confirmed against the live OpenAPI, 2026-07-18):
+ *   POST /api/witness/renew/challenge { accountId } → { nonce, expiresInSec, sign }
+ *   sign `vda.witness.renew/1|<accountId>|<nonce>` raw Ed25519 (base64url) with the controller key
+ *   POST /api/witness/renew { accountId, nonce, signature } → { apiKey, keyId, keyExpiresAt, keyTtlSec }
+ */
+import { WitnessError } from './client.js';
+const DEFAULT_BASE = 'https://witness.getvda.ai';
+/** One renewal round-trip: challenge → sign with controller → renew. */
+export async function renewApiKey(opts) {
+    const base = (opts.baseUrl ?? DEFAULT_BASE).replace(/\/+$/, '');
+    const f = opts.fetch ?? fetch;
+    const post = async (path, body) => {
+        const res = await f(`${base}${path}`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok) {
+            const text = await res.text().catch(() => '');
+            throw new WitnessError('server_error', `witness ${path}: ${text || res.statusText}`, res.status);
+        }
+        return (await res.json());
+    };
+    const chal = await post('/api/witness/renew/challenge', { accountId: opts.accountId });
+    // Sign EXACTLY what the server says to (`sign_payload`), not a reconstruction.
+    // Fall back to the documented template only if the server omits it.
+    const signStr = chal.sign_payload ?? `vda.witness.renew/1|${opts.accountId}|${chal.nonce}`;
+    const signature = await opts.controller.sign(signStr);
+    const renewEndpoint = chal.renew?.endpoint ?? '/api/witness/renew';
+    return post(renewEndpoint, {
+        accountId: opts.accountId,
+        nonce: chal.nonce,
+        signature,
+    });
+}
+/**
+ * A caching Bearer provider that renews from the controller key before expiry.
+ * Pass `get` (bound) as `getApiKey` to WitnessHttpClient.
+ */
+export class ControllerRenewingApiKey {
+    opts;
+    cached;
+    skewMs;
+    inflight;
+    constructor(opts) {
+        this.opts = opts;
+        this.skewMs = (opts.skewSec ?? 300) * 1000;
+    }
+    now() {
+        return this.opts.now ? this.opts.now() : Date.now();
+    }
+    get = async () => {
+        if (this.cached && this.now() < this.cached.expiresAtMs - this.skewMs)
+            return this.cached.key;
+        // Coalesce concurrent renewals.
+        if (this.inflight)
+            return this.inflight;
+        this.inflight = this.renew().finally(() => {
+            this.inflight = undefined;
+        });
+        return this.inflight;
+    };
+    async renew() {
+        const r = await renewApiKey(this.opts);
+        const expiresAtMs = r.keyExpiresAt
+            ? Date.parse(r.keyExpiresAt)
+            : this.now() + (r.keyTtlSec ?? 3600) * 1000;
+        this.cached = { key: r.apiKey, expiresAtMs };
+        return r.apiKey;
+    }
+}
+//# sourceMappingURL=renew.js.map

package/dist/renew.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"renew.js","sourceRoot":"","sources":["../src/renew.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAkB3C,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAEjD,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAkB;IAClD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IAE9B,MAAM,IAAI,GAAG,KAAK,EAAK,IAAY,EAAE,IAAa,EAAc,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,YAAY,CACpB,cAAc,EACd,WAAW,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,EAAE,EAC5C,GAAG,CAAC,MAAM,CACX,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,IAAI,CAMpB,8BAA8B,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAClE,+EAA+E;IAC/E,oEAAoE;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,uBAAuB,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,QAAQ,IAAI,oBAAoB,CAAC;IACnE,OAAO,IAAI,CAAa,aAAa,EAAE;QACrC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,wBAAwB;IAKN;IAJrB,MAAM,CAAmD;IAChD,MAAM,CAAS;IACxB,QAAQ,CAA8B;IAE9C,YAA6B,IAA6D;QAA7D,SAAI,GAAJ,IAAI,CAAyD;QACxF,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC;IAC7C,CAAC;IAEO,GAAG;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;IAED,GAAG,GAAG,KAAK,IAAqB,EAAE;QAChC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAC9F,gCAAgC;QAChC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACxC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC,CAAC;IAEM,KAAK,CAAC,KAAK;QACjB,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,CAAC,CAAC,YAAY;YAChC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;YAC5B,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC;QAC9C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;QAC7C,OAAO,CAAC,CAAC,MAAM,CAAC;IAClB,CAAC;CACF"}

package/dist/signer.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Record signing for customer-managed custody.
+ *
+ * ACP seals with its OWN record-signing key (#key-2) so a record is provable even
+ * against Witness (Contract-B custody). Mike generates + holds the private key;
+ * at runtime it arrives from Secret Manager and is passed to Ed25519RecordSigner.
+ * The public half is published in ACP's DID doc, which is what Witness's
+ * `issuer_verified` resolves against.
+ */
+export interface PublicJwk {
+    readonly kty: 'OKP';
+    readonly crv: 'Ed25519';
+    readonly x: string;
+}
+export interface RecordSigner {
+    readonly publicKeyJwk: PublicJwk;
+    readonly keyId?: string;
+    /** Sign the exact canonical bytes Witness returned from `prepare`. */
+    sign(canonicalBytes: string): Promise<string>;
+}
+/** An Ed25519 signer over a PEM or JWK private key. */
+export declare class Ed25519RecordSigner implements RecordSigner {
+    readonly publicKeyJwk: PublicJwk;
+    readonly keyId?: string;
+    private readonly privateKey;
+    constructor(privateKey: string | {
+        pem: string;
+    } | {
+        jwk: object;
+    }, keyId?: string);
+    sign(canonicalBytes: string): Promise<string>;
+}
+/** Verify an Ed25519 signature over canonical bytes against a public JWK. */
+export declare function verifyEd25519(canonicalBytes: string, signatureB64url: string, jwk: PublicJwk): boolean;
+//# sourceMappingURL=signer.d.ts.map

package/dist/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAUH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/C;AAYD,uDAAuD;AACvD,qBAAa,mBAAoB,YAAW,YAAY;IACtD,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAY;gBAE3B,UAAU,EAAE,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,KAAK,CAAC,EAAE,MAAM;IAY5E,IAAI,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAKpD;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAC3B,cAAc,EAAE,MAAM,EACtB,eAAe,EAAE,MAAM,EACvB,GAAG,EAAE,SAAS,GACb,OAAO,CAYT"}

package/dist/signer.js

@@ -0,0 +1,53 @@
+/**
+ * Record signing for customer-managed custody.
+ *
+ * ACP seals with its OWN record-signing key (#key-2) so a record is provable even
+ * against Witness (Contract-B custody). Mike generates + holds the private key;
+ * at runtime it arrives from Secret Manager and is passed to Ed25519RecordSigner.
+ * The public half is published in ACP's DID doc, which is what Witness's
+ * `issuer_verified` resolves against.
+ */
+import { createPrivateKey, createPublicKey, sign as nodeSign, verify as nodeVerify, } from 'node:crypto';
+function toPublicJwk(pub) {
+    const jwk = pub.export({ format: 'jwk' });
+    if (jwk.kty !== 'OKP' || jwk.crv !== 'Ed25519' || !jwk.x) {
+        throw new Error(`record signer requires an Ed25519 OKP key (got kty=${jwk.kty} crv=${jwk.crv})`);
+    }
+    return { kty: 'OKP', crv: 'Ed25519', x: jwk.x };
+}
+/** An Ed25519 signer over a PEM or JWK private key. */
+export class Ed25519RecordSigner {
+    publicKeyJwk;
+    keyId;
+    privateKey;
+    constructor(privateKey, keyId) {
+        if (typeof privateKey === 'string') {
+            this.privateKey = createPrivateKey(privateKey);
+        }
+        else if ('pem' in privateKey) {
+            this.privateKey = createPrivateKey(privateKey.pem);
+        }
+        else {
+            this.privateKey = createPrivateKey({ key: privateKey.jwk, format: 'jwk' });
+        }
+        this.publicKeyJwk = toPublicJwk(createPublicKey(this.privateKey));
+        if (keyId !== undefined)
+            this.keyId = keyId;
+    }
+    async sign(canonicalBytes) {
+        // Ed25519 takes no digest algorithm (null). Sign the exact UTF-8 bytes.
+        const sig = nodeSign(null, Buffer.from(canonicalBytes, 'utf8'), this.privateKey);
+        return sig.toString('base64url');
+    }
+}
+/** Verify an Ed25519 signature over canonical bytes against a public JWK. */
+export function verifyEd25519(canonicalBytes, signatureB64url, jwk) {
+    try {
+        const pub = createPublicKey({ key: jwk, format: 'jwk' });
+        return nodeVerify(null, Buffer.from(canonicalBytes, 'utf8'), pub, Buffer.from(signatureB64url, 'base64url'));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=signer.js.map

package/dist/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,IAAI,IAAI,QAAQ,EAChB,MAAM,IAAI,UAAU,GACrB,MAAM,aAAa,CAAC;AAgBrB,SAAS,WAAW,CAAC,GAAc;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAA+C,CAAC;IACxF,IAAI,GAAG,CAAC,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,sDAAsD,GAAG,CAAC,GAAG,QAAQ,GAAG,CAAC,GAAG,GAAG,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,uDAAuD;AACvD,MAAM,OAAO,mBAAmB;IACrB,YAAY,CAAY;IACxB,KAAK,CAAU;IACP,UAAU,CAAY;IAEvC,YAAY,UAAsD,EAAE,KAAc;QAChF,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAClE,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,cAAsB;QAC/B,wEAAwE;QACxE,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACjF,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,UAAU,aAAa,CAC3B,cAAsB,EACtB,eAAuB,EACvB,GAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAY,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,OAAO,UAAU,CACf,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,EACnC,GAAG,EACH,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAC1C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}