@goodmeta/agent-verifier 0.2.0 → 0.6.0

package/dist/ap2/constraints.js

@@ -0,0 +1,231 @@
+/**
+ * Payment-constraint evaluation — line-for-line port of AP2's
+ * `sdk/constraints.py` (commit e1ea56d). Each evaluator returns a list of
+ * violation messages ([] = satisfied). Violation strings match AP2's f-strings
+ * byte-for-byte where the inputs are reproducible (amounts, ids, names, dates);
+ * the few AP2 messages that embed a Python object `repr` (pisp / pre-set
+ * amount+instrument) are noted and use a readable JSON form instead — only the
+ * violation COUNT is asserted against AP2 for those.
+ *
+ * Closed-world rule (AUTH-15 / SPEC-39): an UNKNOWN constraint type MUST be
+ * treated as failing evaluation.
+ */
+import { KnownPaymentConstraintSchema, KnownCheckoutConstraintSchema, } from "./types.js";
+import { evaluateLineItemsMaxFlow } from "./max-flow.js";
+/** Port of `merchant_matches`: id-first, else name+website (both non-empty). */
+export function merchantMatches(candidate, target) {
+    if (candidate.id && target.id)
+        return candidate.id === target.id;
+    return (candidate.name === target.name &&
+        Boolean(candidate.name) &&
+        candidate.website === target.website &&
+        Boolean(candidate.website));
+}
+function amountsEqual(a, b) {
+    return a?.amount === b?.amount && a?.currency === b?.currency;
+}
+/** Field-wise instrument equality with null/omitted normalized (matches AP2's
+ * pydantic model equality, where `description: null` == omitted). */
+function instrumentsEqual(a, b) {
+    return a.id === b.id && a.type === b.type && (a.description ?? null) === (b.description ?? null);
+}
+// ── Per-constraint evaluators (return violation messages) ────────────────────
+function amountRange(c, closed) {
+    const v = [];
+    const amount = closed.payment_amount;
+    if (c.currency && amount.currency !== c.currency) {
+        v.push(`Currency mismatch: expected ${c.currency}, got ${amount.currency}`);
+    }
+    if (c.min !== undefined && c.min !== null && amount.amount < c.min) {
+        v.push(`Amount ${amount.amount} below minimum ${c.min}`);
+    }
+    if (c.max !== undefined && c.max !== null && amount.amount > c.max) {
+        v.push(`Amount ${amount.amount} exceeds maximum ${c.max}`);
+    }
+    return v;
+}
+function allowedPayees(c, closed) {
+    const payee = closed.payee;
+    if (c.allowed.some((a) => merchantMatches(a, payee)))
+        return [];
+    return [`Payee ${payee.name} not in allowed list`];
+}
+function paymentReference(c, ctx) {
+    if (!ctx.openCheckoutHash) {
+        return ["open_checkout_hash is required to evaluate PaymentReference constraints"];
+    }
+    if (ctx.openCheckoutHash !== c.conditional_transaction_id) {
+        return [
+            `PaymentReference mismatch: expected open checkout hash ${c.conditional_transaction_id}, got ${ctx.openCheckoutHash}`,
+        ];
+    }
+    return [];
+}
+function agentRecurrence(c, ctx) {
+    const limit = c.max_occurrences;
+    if (limit === undefined || limit === null)
+        return [];
+    if (!ctx.mandateContext)
+        return ["Missing mandate context required to evaluate recurrence"];
+    const count = ctx.mandateContext.total_uses;
+    if (count >= limit)
+        return [`Maximum occurrences exceeded: ${count} >= ${limit}`];
+    return [];
+}
+function allowedPaymentInstruments(c, closed) {
+    const instrument = closed.payment_instrument;
+    if (!instrument)
+        return ["Missing payment instrument in closed mandate"];
+    if (c.allowed.some((a) => a.id === instrument.id))
+        return [];
+    return [`Payment instrument ${instrument.id} not in allowed list`];
+}
+function allowedPisps(c, closed) {
+    const pisp = closed.pisp;
+    if (!pisp)
+        return ["Missing PISP in closed mandate"];
+    if (c.allowed.some((a) => a.domain_name === pisp.domain_name && a.legal_name === pisp.legal_name && a.brand_name === pisp.brand_name)) {
+        return [];
+    }
+    // AP2 embeds a Python repr here; we use a readable form (count is what's asserted).
+    return [`PISP ${JSON.stringify(pisp)} not in allowed list`];
+}
+function budget(c, closed, ctx) {
+    if (closed.payment_amount.currency !== c.currency) {
+        return [`Budget currency mismatch: expected ${c.currency}, got ${closed.payment_amount.currency}`];
+    }
+    if (!ctx.mandateContext)
+        return ["Missing mandate context required to evaluate budget"];
+    const pastSpend = ctx.mandateContext.total_amount;
+    const totalSpend = pastSpend + closed.payment_amount.amount;
+    const budgetMaxCents = Math.trunc(c.max * 100);
+    if (totalSpend > budgetMaxCents) {
+        return [`Cumulative spend ${totalSpend} exceeds budget limit ${budgetMaxCents} (past spend: ${pastSpend})`];
+    }
+    return [];
+}
+function executionDate(c, closed) {
+    const execDate = closed.execution_date;
+    if (!execDate)
+        return [];
+    const v = [];
+    if (c.not_before && execDate < c.not_before) {
+        v.push(`Execution date ${execDate} is before allowed window ${c.not_before}`);
+    }
+    if (c.not_after && execDate > c.not_after) {
+        v.push(`Execution date ${execDate} is after allowed window ${c.not_after}`);
+    }
+    return v;
+}
+/** Dispatch one constraint; UNKNOWN type ⇒ a violation (closed-world, AUTH-15). */
+function evaluatePaymentConstraint(raw, closed, ctx) {
+    const parsed = KnownPaymentConstraintSchema.safeParse(raw);
+    if (!parsed.success) {
+        return [`Unknown or malformed constraint type '${raw.type}' — treated as failing evaluation`];
+    }
+    const c = parsed.data;
+    switch (c.type) {
+        case "payment.amount_range":
+            return amountRange(c, closed);
+        case "payment.allowed_payees":
+            return allowedPayees(c, closed);
+        case "payment.reference":
+            return paymentReference(c, ctx);
+        case "payment.agent_recurrence":
+            return agentRecurrence(c, ctx);
+        case "payment.allowed_payment_instruments":
+            return allowedPaymentInstruments(c, closed);
+        case "payment.allowed_pisps":
+            return allowedPisps(c, closed);
+        case "payment.budget":
+            return budget(c, closed, ctx);
+        case "payment.execution_date":
+            return executionDate(c, closed);
+    }
+}
+/** Port of `check_preset_payment_claims`: open mandate pre-set fields must be
+ * present unchanged in the closed mandate (SPEC-38 / step 2). */
+export function checkPresetPaymentClaims(open, closed) {
+    const v = [];
+    if (open.payee != null && !merchantMatches(open.payee, closed.payee)) {
+        v.push(`Pre-set payee mismatch: expected ${open.payee.name}, got ${closed.payee.name}`);
+    }
+    if (open.payment_amount != null && !amountsEqual(open.payment_amount, closed.payment_amount)) {
+        v.push("Pre-set amount mismatch"); // AP2 embeds a Python repr; count is asserted
+    }
+    if (open.payment_instrument != null && !instrumentsEqual(open.payment_instrument, closed.payment_instrument)) {
+        v.push("Pre-set payment_instrument mismatch");
+    }
+    if (open.execution_date != null && open.execution_date !== closed.execution_date) {
+        v.push(`Pre-set execution_date mismatch: expected ${open.execution_date}, got ${closed.execution_date}`);
+    }
+    return v;
+}
+/**
+ * Verify a closed payment satisfies an open mandate's pre-set claims and
+ * constraints. Port of `check_payment_constraints`. Returns [] when satisfied.
+ */
+export function checkPaymentConstraints(open, closed, ctx = {}) {
+    const violations = [];
+    violations.push(...checkPresetPaymentClaims(open, closed));
+    const types = open.constraints.map((c) => c.type);
+    if (types.includes("payment.agent_recurrence")) {
+        if (!types.includes("payment.amount_range")) {
+            violations.push("payment.agent_recurrence requires payment.amount_range constraint");
+        }
+        if (!types.includes("payment.budget")) {
+            violations.push("payment.agent_recurrence requires payment.budget constraint");
+        }
+    }
+    // Caller-declared coverage. Same shape as the agent_recurrence check above,
+    // generalised: a constraint the caller requires but which is not present was
+    // never evaluated, so reporting no violation for it would certify a limit that
+    // was never applied. Only runs when the caller opts in.
+    for (const required of ctx.requiredConstraints ?? []) {
+        if (!types.includes(required)) {
+            violations.push(`${required} was required but is not present in the open mandate, so it was never evaluated`);
+        }
+    }
+    for (const c of open.constraints) {
+        violations.push(...evaluatePaymentConstraint(c, closed, ctx));
+    }
+    return violations;
+}
+// ── Checkout constraints (port of the checkout half of constraints.py) ───────
+function allowedMerchants(c, checkout) {
+    const merchant = checkout.merchant;
+    if (!merchant)
+        return ["Missing merchant in checkout"];
+    if (c.allowed.some((a) => merchantMatches(a, merchant)))
+        return [];
+    return [`Merchant ${merchant.name || ""} not in allowed list`];
+}
+function lineItems(c, checkout) {
+    const checkoutItems = checkout.line_items ?? [];
+    if (checkoutItems.length === 0)
+        return ["Empty cart does not satisfy line_items constraint"];
+    return evaluateLineItemsMaxFlow(checkoutItems, c.items);
+}
+function evaluateCheckoutConstraint(raw, checkout) {
+    const parsed = KnownCheckoutConstraintSchema.safeParse(raw);
+    if (!parsed.success) {
+        return [`Unknown or malformed constraint type '${raw.type}' — treated as failing evaluation`];
+    }
+    const c = parsed.data;
+    switch (c.type) {
+        case "checkout.allowed_merchants":
+            return allowedMerchants(c, checkout);
+        case "checkout.line_items":
+            return lineItems(c, checkout);
+    }
+}
+/** Verify a checkout satisfies an open checkout mandate's constraints. Port of
+ * `check_checkout_constraints`. Returns [] when satisfied. */
+export function checkCheckoutConstraints(open, checkout) {
+    const violations = [];
+    for (const c of open.constraints) {
+        violations.push(...evaluateCheckoutConstraint(c, checkout));
+    }
+    return violations;
+}
+//# sourceMappingURL=constraints.js.map

package/dist/ap2/constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.js","sourceRoot":"","sources":["../../src/ap2/constraints.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAQ9B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,MAAM,eAAe,CAAC;AAwBzD,gFAAgF;AAChF,MAAM,UAAU,eAAe,CAAC,SAAmB,EAAE,MAAgB;IACnE,IAAI,SAAS,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;IACjE,OAAO,CACL,SAAS,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAC9B,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;QACvB,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QACpC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAA4B,EAAE,CAA4B;IAC9E,OAAO,CAAC,EAAE,MAAM,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,EAAE,QAAQ,KAAK,CAAC,EAAE,QAAQ,CAAC;AAChE,CAAC;AAED;qEACqE;AACrE,SAAS,gBAAgB,CACvB,CAA4D,EAC5D,CAA4D;IAE5D,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC;AACnG,CAAC;AAED,gFAAgF;AAEhF,SAAS,WAAW,CAAC,CAAkE,EAAE,MAAsB;IAC7G,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC;IACrC,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,QAAQ,SAAS,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACnE,CAAC,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,kBAAkB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACnE,CAAC,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,MAAM,oBAAoB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,aAAa,CAAC,CAA0B,EAAE,MAAsB;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAChE,OAAO,CAAC,SAAS,KAAK,CAAC,IAAI,sBAAsB,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAyC,EAAE,GAAgB;IACnF,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC1B,OAAO,CAAC,yEAAyE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,gBAAgB,KAAK,CAAC,CAAC,0BAA0B,EAAE,CAAC;QAC1D,OAAO;YACL,0DAA0D,CAAC,CAAC,0BAA0B,SAAS,GAAG,CAAC,gBAAgB,EAAE;SACtH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,CAAsC,EAAE,GAAgB;IAC/E,MAAM,KAAK,GAAG,CAAC,CAAC,eAAe,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,CAAC,yDAAyD,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC,UAAU,CAAC;IAC5C,IAAI,KAAK,IAAI,KAAK;QAAE,OAAO,CAAC,iCAAiC,KAAK,OAAO,KAAK,EAAE,CAAC,CAAC;IAClF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,yBAAyB,CAAC,CAAgC,EAAE,MAAsB;IACzF,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,CAAC;IAC7C,IAAI,CAAC,UAAU;QAAE,OAAO,CAAC,8CAA8C,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,UAAU,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7D,OAAO,CAAC,sBAAsB,UAAU,CAAC,EAAE,sBAAsB,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,YAAY,CAAC,CAAiF,EAAE,MAAsB;IAC7H,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACtI,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,oFAAoF;IACpF,OAAO,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,MAAM,CAAC,CAAoC,EAAE,MAAsB,EAAE,GAAgB;IAC5F,IAAI,MAAM,CAAC,cAAc,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClD,OAAO,CAAC,sCAAsC,CAAC,CAAC,QAAQ,SAAS,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,CAAC,qDAAqD,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,CAAC,YAAY,CAAC;IAClD,MAAM,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,cAAc,EAAE,CAAC;QAChC,OAAO,CAAC,oBAAoB,UAAU,yBAAyB,cAAc,iBAAiB,SAAS,GAAG,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,CAA4D,EAAE,MAAsB;IACzG,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,CAAC;IACvC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,IAAI,CAAC,CAAC,UAAU,IAAI,QAAQ,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC,kBAAkB,QAAQ,6BAA6B,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,IAAI,QAAQ,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,kBAAkB,QAAQ,4BAA4B,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mFAAmF;AACnF,SAAS,yBAAyB,CAAC,GAAe,EAAE,MAAsB,EAAE,GAAgB;IAC1F,MAAM,MAAM,GAAG,4BAA4B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,yCAAyC,GAAG,CAAC,IAAI,mCAAmC,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACtB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,sBAAsB;YACzB,OAAO,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAChC,KAAK,wBAAwB;YAC3B,OAAO,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAClC,KAAK,mBAAmB;YACtB,OAAO,gBAAgB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAClC,KAAK,0BAA0B;YAC7B,OAAO,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACjC,KAAK,qCAAqC;YACxC,OAAO,yBAAyB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9C,KAAK,uBAAuB;YAC1B,OAAO,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,gBAAgB;YACnB,OAAO,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAChC,KAAK,wBAAwB;YAC3B,OAAO,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED;iEACiE;AACjE,MAAM,UAAU,wBAAwB,CAAC,IAAwB,EAAE,MAAsB;IACvF,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,oCAAoC,IAAI,CAAC,KAAK,CAAC,IAAI,SAAS,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7F,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,8CAA8C;IACnF,CAAC;IACD,IAAI,IAAI,CAAC,kBAAkB,IAAI,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7G,CAAC,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;QACjF,CAAC,CAAC,IAAI,CAAC,6CAA6C,IAAI,CAAC,cAAc,SAAS,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAwB,EAAE,MAAsB,EAAE,MAAmB,EAAE;IAC7G,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,UAAU,CAAC,IAAI,CAAC,GAAG,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAE3D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC5C,UAAU,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,+EAA+E;IAC/E,wDAAwD;IACxD,KAAK,MAAM,QAAQ,IAAI,GAAG,CAAC,mBAAmB,IAAI,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,UAAU,CAAC,IAAI,CACb,GAAG,QAAQ,iFAAiF,CAC7F,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,GAAG,yBAAyB,CAAC,CAAe,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,gFAAgF;AAEhF,SAAS,gBAAgB,CAAC,CAA0B,EAAE,QAAkB;IACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACnC,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IACnE,OAAO,CAAC,YAAY,QAAQ,CAAC,IAAI,IAAI,EAAE,sBAAsB,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,CAAwE,EAAE,QAAkB;IAC7G,MAAM,aAAa,GAAG,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC;IAChD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,mDAAmD,CAAC,CAAC;IAC7F,OAAO,wBAAwB,CAAC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAe,EAAE,QAAkB;IACrE,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,yCAAyC,GAAG,CAAC,IAAI,mCAAmC,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;IACtB,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,4BAA4B;YAC/B,OAAO,gBAAgB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACvC,KAAK,qBAAqB;YACxB,OAAO,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;8DAC8D;AAC9D,MAAM,UAAU,wBAAwB,CAAC,IAAyB,EAAE,QAAkB;IACpF,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,UAAU,CAAC,IAAI,CAAC,GAAG,0BAA0B,CAAC,CAAe,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/ap2/hash.d.ts

@@ -0,0 +1,23 @@
+/**
+ * SD-JWT binding + disclosure hashes.
+ *
+ * Byte-exact port of AP2's `sdjwt/common.py` hashing: hash the ASCII bytes of
+ * the on-wire string with the algorithm named by `_sd_alg` (default sha-256),
+ * base64url (no padding). Used for `sd_hash` / `issuer_jwt_hash` chain binding
+ * and disclosure digests. Tested against AP2-minted vectors.
+ */
+import type { ParsedToken } from "./parse.js";
+/** Hash of the SD-JWT (issuer JWT + disclosures, trailing `~`, NO KB segment). */
+export declare function computeSdHash(token: ParsedToken): string;
+/** Hash of only the issuer-signed JWT portion. */
+export declare function computeIssuerJwtHash(token: ParsedToken): string;
+/** Hash of a single disclosure string, using the token's `_sd_alg`. */
+export declare function computeDisclosureDigest(disclosure: string, sdAlg: string | undefined): string;
+/**
+ * base64url hash of an arbitrary on-wire value (ASCII), keyed off `_sd_alg`.
+ * Used for the `checkout_hash` / `transaction_id` linkage (hash of the
+ * `checkout_jwt`) and the receipt `reference`, all of which the spec defines as
+ * "calculated in the same manner as `sd_hash`" (AUTH-17 / SPEC-4).
+ */
+export declare function computeValueHash(value: string, sdAlg: string | undefined): string;
+//# sourceMappingURL=hash.d.ts.map

package/dist/ap2/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/ap2/hash.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA0B9C,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAExD;AAED,kDAAkD;AAClD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAE/D;AAED,uEAAuE;AACvE,wBAAgB,uBAAuB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAE7F;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAEjF"}

package/dist/ap2/hash.js

@@ -0,0 +1,54 @@
+/**
+ * SD-JWT binding + disclosure hashes.
+ *
+ * Byte-exact port of AP2's `sdjwt/common.py` hashing: hash the ASCII bytes of
+ * the on-wire string with the algorithm named by `_sd_alg` (default sha-256),
+ * base64url (no padding). Used for `sd_hash` / `issuer_jwt_hash` chain binding
+ * and disclosure digests. Tested against AP2-minted vectors.
+ */
+import { createHash } from "node:crypto";
+const HASH_BY_SD_ALG = {
+    "sha-256": "sha256",
+    "sha-384": "sha384",
+    "sha-512": "sha512",
+};
+function hashForAlg(sdAlg) {
+    if (sdAlg === undefined)
+        return "sha256";
+    const alg = HASH_BY_SD_ALG[sdAlg];
+    if (!alg)
+        throw new Error(`Unsupported _sd_alg: ${sdAlg}`);
+    return alg;
+}
+function hashAscii(value, sdAlg) {
+    // AP2 hashes `value.encode('ascii')`, which RAISES on non-ASCII. Node's
+    // "ascii" decoder silently masks to the low 8 bits (so 'a' and 'š' would
+    // collide). Reject non-ASCII to match AP2 and avoid a hash collision on the
+    // public hash exports.
+    if (!/^[\x00-\x7f]*$/.test(value)) {
+        throw new Error("Non-ASCII byte in hash input (AP2 hashes ASCII only)");
+    }
+    return createHash(hashForAlg(sdAlg)).update(Buffer.from(value, "ascii")).digest("base64url");
+}
+/** Hash of the SD-JWT (issuer JWT + disclosures, trailing `~`, NO KB segment). */
+export function computeSdHash(token) {
+    return hashAscii(token.sdJwt, token.sdAlg);
+}
+/** Hash of only the issuer-signed JWT portion. */
+export function computeIssuerJwtHash(token) {
+    return hashAscii(token.issuerJwt, token.sdAlg);
+}
+/** Hash of a single disclosure string, using the token's `_sd_alg`. */
+export function computeDisclosureDigest(disclosure, sdAlg) {
+    return hashAscii(disclosure, sdAlg);
+}
+/**
+ * base64url hash of an arbitrary on-wire value (ASCII), keyed off `_sd_alg`.
+ * Used for the `checkout_hash` / `transaction_id` linkage (hash of the
+ * `checkout_jwt`) and the receipt `reference`, all of which the spec defines as
+ * "calculated in the same manner as `sd_hash`" (AUTH-17 / SPEC-4).
+ */
+export function computeValueHash(value, sdAlg) {
+    return hashAscii(value, sdAlg);
+}
+//# sourceMappingURL=hash.js.map

package/dist/ap2/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../src/ap2/hash.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,cAAc,GAAmD;IACrE,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;CACpB,CAAC;AAEF,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;IAC3D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,KAAyB;IACzD,wEAAwE;IACxE,yEAAyE;IACzE,4EAA4E;IAC5E,uBAAuB;IACvB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/F,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,KAAkB;IAC9C,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,oBAAoB,CAAC,KAAkB;IACrD,OAAO,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,uBAAuB,CAAC,UAAkB,EAAE,KAAyB;IACnF,OAAO,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,KAAyB;IACvE,OAAO,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC"}

package/dist/ap2/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Real AP2 mandate verification — dSD-JWT delegation chains.
+ *
+ * Ported byte-exact from AP2's reference SDK (pinned commit e1ea56db…) and
+ * validated against 65 golden vectors. See AP2-AUDIT.md for the conformance
+ * matrix; the verifier is STRICTER than AP2 on every trust decision (ES256 pin,
+ * x5c fail-closed, aud+nonce required, self-computed linkage).
+ *
+ *   import { ap2 } from "@goodmeta/agent-verifier";
+ *   const tokens = ap2.splitChain(compactChain);
+ *   const payloads = await ap2.verifyChain(
+ *     tokens,
+ *     ap2.x5cOrKidProvider({ trustedRoots }),   // or pass a key directly
+ *     { expectedAud, expectedNonce },
+ *   );
+ *   const chain = ap2.parsePaymentChain(payloads);
+ *   const violations = ap2.verifyPaymentChain(chain, { mandateContext }); // [] = ok
+ */
+export { splitChain, parseToken, type ParsedToken } from "./parse.js";
+export { verifyChain, CHAIN_CAPS, type VerifyChainOptions, type RootKeyProvider } from "./chain.js";
+export { verifyRootSdJwt, cnfJwk, type ResolvedToken, type VerificationKey } from "./sd-jwt.js";
+export { x5cOrKidProvider, type X5cKidProviderOptions } from "./keys.js";
+export { computeSdHash, computeIssuerJwtHash, computeValueHash, computeDisclosureDigest } from "./hash.js";
+export { JwkSchema, parseJwk, type Jwk } from "./jwk.js";
+export { parsePaymentChain, verifyPaymentChain, parseCheckoutChain, verifyCheckoutChain, extractCheckout, receiptReference, getClosedMandateJwt, type PaymentChain, type CheckoutChain, type VerifyPaymentChainOptions, type VerifyCheckoutChainOptions, } from "./chains.js";
+export { checkPaymentConstraints, checkCheckoutConstraints, merchantMatches } from "./constraints.js";
+export { OpenPaymentMandateSchema, PaymentMandateSchema, OpenCheckoutMandateSchema, CheckoutMandateSchema, CheckoutSchema, type OpenPaymentMandate, type PaymentMandate, type OpenCheckoutMandate, type CheckoutMandate, type Checkout, type MandateContext, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/ap2/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ap2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAGH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAGhG,OAAO,EAAE,gBAAgB,EAAE,KAAK,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAGzE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAG3G,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,GAAG,EAAE,MAAM,UAAU,CAAC;AAGzD,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,YAAY,EACjB,KAAK,aAAa,EAClB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGtG,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,cAAc,EACd,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,cAAc,GACpB,MAAM,YAAY,CAAC"}

package/dist/ap2/index.js

@@ -0,0 +1,35 @@
+/**
+ * Real AP2 mandate verification — dSD-JWT delegation chains.
+ *
+ * Ported byte-exact from AP2's reference SDK (pinned commit e1ea56db…) and
+ * validated against 65 golden vectors. See AP2-AUDIT.md for the conformance
+ * matrix; the verifier is STRICTER than AP2 on every trust decision (ES256 pin,
+ * x5c fail-closed, aud+nonce required, self-computed linkage).
+ *
+ *   import { ap2 } from "@goodmeta/agent-verifier";
+ *   const tokens = ap2.splitChain(compactChain);
+ *   const payloads = await ap2.verifyChain(
+ *     tokens,
+ *     ap2.x5cOrKidProvider({ trustedRoots }),   // or pass a key directly
+ *     { expectedAud, expectedNonce },
+ *   );
+ *   const chain = ap2.parsePaymentChain(payloads);
+ *   const violations = ap2.verifyPaymentChain(chain, { mandateContext }); // [] = ok
+ */
+// Chain parsing + walk
+export { splitChain, parseToken } from "./parse.js";
+export { verifyChain, CHAIN_CAPS } from "./chain.js";
+export { verifyRootSdJwt, cnfJwk } from "./sd-jwt.js";
+// Trust anchoring (x5c chain / kid lookup) — fail-closed
+export { x5cOrKidProvider } from "./keys.js";
+// Binding / disclosure / linkage hashes
+export { computeSdHash, computeIssuerJwtHash, computeValueHash, computeDisclosureDigest } from "./hash.js";
+// Strict EC P-256 JWK
+export { JwkSchema, parseJwk } from "./jwk.js";
+// Typed chains + linkage + receipt reference
+export { parsePaymentChain, verifyPaymentChain, parseCheckoutChain, verifyCheckoutChain, extractCheckout, receiptReference, getClosedMandateJwt, } from "./chains.js";
+// Constraint evaluation (closed-world: unknown constraint ⇒ violation)
+export { checkPaymentConstraints, checkCheckoutConstraints, merchantMatches } from "./constraints.js";
+// Mandate schemas + inferred types (snake_case, vct pinned exact)
+export { OpenPaymentMandateSchema, PaymentMandateSchema, OpenCheckoutMandateSchema, CheckoutMandateSchema, CheckoutSchema, } from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/ap2/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ap2/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,uBAAuB;AACvB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAoB,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAiD,MAAM,YAAY,CAAC;AACpG,OAAO,EAAE,eAAe,EAAE,MAAM,EAA4C,MAAM,aAAa,CAAC;AAEhG,yDAAyD;AACzD,OAAO,EAAE,gBAAgB,EAA8B,MAAM,WAAW,CAAC;AAEzE,wCAAwC;AACxC,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,WAAW,CAAC;AAE3G,sBAAsB;AACtB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAY,MAAM,UAAU,CAAC;AAEzD,6CAA6C;AAC7C,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,mBAAmB,GAKpB,MAAM,aAAa,CAAC;AAErB,uEAAuE;AACvE,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEtG,kEAAkE;AAClE,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,cAAc,GAOf,MAAM,YAAY,CAAC"}

package/dist/ap2/jwk.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Strict EC P-256 JWK validation.
+ *
+ * Mirrors AP2's `generated/types/jwk.py` (Pydantic `extra='forbid'`): kty='EC',
+ * crv='P-256', alg='ES256', x/y are 43-char base64url. We pin P-256/ES256 — our
+ * documented ES256-only narrowing — and reject unknown members so a `cnf.jwk`
+ * can't smuggle extra fields.
+ */
+import { z } from "zod";
+export declare const JwkSchema: z.ZodObject<{
+    kty: z.ZodLiteral<"EC">;
+    crv: z.ZodLiteral<"P-256">;
+    x: z.ZodString;
+    y: z.ZodString;
+    alg: z.ZodOptional<z.ZodLiteral<"ES256">>;
+    kid: z.ZodOptional<z.ZodString>;
+    use: z.ZodOptional<z.ZodString>;
+    x5c: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    "x5t#S256": z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type Jwk = z.infer<typeof JwkSchema>;
+/** Validate an untrusted value as a strict EC P-256 JWK, or return null. */
+export declare function parseJwk(input: unknown): Jwk | null;
+//# sourceMappingURL=jwk.d.ts.map

package/dist/ap2/jwk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwk.d.ts","sourceRoot":"","sources":["../../src/ap2/jwk.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,SAAS;;;;;;;;;;kBAYX,CAAC;AAEZ,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,SAAS,CAAC,CAAC;AAE5C,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,GAAG,IAAI,CAGnD"}

package/dist/ap2/jwk.js

@@ -0,0 +1,29 @@
+/**
+ * Strict EC P-256 JWK validation.
+ *
+ * Mirrors AP2's `generated/types/jwk.py` (Pydantic `extra='forbid'`): kty='EC',
+ * crv='P-256', alg='ES256', x/y are 43-char base64url. We pin P-256/ES256 — our
+ * documented ES256-only narrowing — and reject unknown members so a `cnf.jwk`
+ * can't smuggle extra fields.
+ */
+import { z } from "zod";
+const B64URL_43 = /^[A-Za-z0-9_-]{43}$/;
+export const JwkSchema = z
+    .object({
+    kty: z.literal("EC"),
+    crv: z.literal("P-256"),
+    x: z.string().regex(B64URL_43),
+    y: z.string().regex(B64URL_43),
+    alg: z.literal("ES256").optional(),
+    kid: z.string().optional(),
+    use: z.string().optional(),
+    x5c: z.array(z.string()).optional(),
+    "x5t#S256": z.string().optional(),
+})
+    .strict();
+/** Validate an untrusted value as a strict EC P-256 JWK, or return null. */
+export function parseJwk(input) {
+    const r = JwkSchema.safeParse(input);
+    return r.success ? r.data : null;
+}
+//# sourceMappingURL=jwk.js.map

package/dist/ap2/jwk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwk.js","sourceRoot":"","sources":["../../src/ap2/jwk.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,SAAS,GAAG,qBAAqB,CAAC;AAExC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9B,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;IAC9B,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC"}

package/dist/ap2/kb-sd-jwt.d.ts

@@ -0,0 +1,44 @@
+/**
+ * KB-SD-JWT delegation-hop verification.
+ *
+ * Line-for-line port of AP2's `sdjwt/kb_sd_jwt.py::verify` plus the binding /
+ * expected-claim helpers from `sdjwt/common.py`. The exact order matters and
+ * mirrors AP2:
+ *   1. `typ` is a known AP2 KB type (terminal `kb+sd-jwt`/`kb-sd-jwt`, or
+ *      intermediate `kb+sd-jwt+kb`/`kb-sd-jwt+kb`).
+ *   2. Signature verifies (ES256, pinned) under the PREVIOUS hop's `cnf.jwk`.
+ *   3. Resolve `delegate_payload` digests (CMWallet quirk) FIRST.
+ *   4. Binding: exactly one of `sd_hash`/`issuer_jwt_hash`, equal to the hash of
+ *      the previous on-wire token. Both-present AND both-absent are errors.
+ *   5. Terminal hop → enforce expected aud/nonce (when provided) + `iat`.
+ *   6. cnf presence: terminal MUST NOT carry `cnf`; intermediate MUST.
+ *
+ * The "aud+nonce are mandatory for any KB-bearing chain" hardening (H4) is
+ * enforced one level up in `chain.ts`, matching AP2's structure (AP2 only
+ * checks them on the terminal hop, and only if the caller supplied them).
+ */
+import type { ParsedToken } from "./parse.js";
+import { type ResolvedToken } from "./sd-jwt.js";
+type Json = Record<string, unknown>;
+/** Exactly one of `sd_hash`/`issuer_jwt_hash`, matching the hash of `prev`. */
+export declare function verifyBinding(payload: Json, prev: ParsedToken): void;
+/** Validate `iat` presence and, when provided, `aud`/`nonce` (port of
+ * `verify_expected_claims`; the "always required" tightening lives in chain.ts). */
+export declare function verifyExpectedClaims(payload: Json, expectedAud: string | undefined, expectedNonce: string | undefined, label?: string): void;
+export interface KbHopOptions {
+    /** Enforced only on the terminal hop, and only when provided (chain.ts makes
+     * them mandatory for any KB-bearing chain — hardening H4). */
+    expectedAud?: string;
+    expectedNonce?: string;
+    /** When set (the chain's positionally-last hop), the hop MUST be terminal-typ
+     * — otherwise a chain truncated to end on an intermediate hop would skip the
+     * aud/nonce check (H4 bypass). Stricter than AP2. */
+    requireTerminal?: boolean;
+}
+/**
+ * Verify one KB-SD-JWT hop against the previous (already verified+resolved)
+ * token, returning this hop's verified, disclosure-resolved payload.
+ */
+export declare function verifyKbHop(token: ParsedToken, prev: ResolvedToken, opts?: KbHopOptions): Promise<Json>;
+export {};
+//# sourceMappingURL=kb-sd-jwt.d.ts.map

package/dist/ap2/kb-sd-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-sd-jwt.d.ts","sourceRoot":"","sources":["../../src/ap2/kb-sd-jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAmE,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAKlH,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAMpC,+EAA+E;AAC/E,wBAAgB,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI,CAoBpE;AAED;oFACoF;AACpF,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,IAAI,EACb,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,KAAK,SAAc,GAClB,IAAI,CAQN;AAQD,MAAM,WAAW,YAAY;IAC3B;kEAC8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;yDAEqD;IACrD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BjH"}

package/dist/ap2/kb-sd-jwt.js

@@ -0,0 +1,97 @@
+/**
+ * KB-SD-JWT delegation-hop verification.
+ *
+ * Line-for-line port of AP2's `sdjwt/kb_sd_jwt.py::verify` plus the binding /
+ * expected-claim helpers from `sdjwt/common.py`. The exact order matters and
+ * mirrors AP2:
+ *   1. `typ` is a known AP2 KB type (terminal `kb+sd-jwt`/`kb-sd-jwt`, or
+ *      intermediate `kb+sd-jwt+kb`/`kb-sd-jwt+kb`).
+ *   2. Signature verifies (ES256, pinned) under the PREVIOUS hop's `cnf.jwk`.
+ *   3. Resolve `delegate_payload` digests (CMWallet quirk) FIRST.
+ *   4. Binding: exactly one of `sd_hash`/`issuer_jwt_hash`, equal to the hash of
+ *      the previous on-wire token. Both-present AND both-absent are errors.
+ *   5. Terminal hop → enforce expected aud/nonce (when provided) + `iat`.
+ *   6. cnf presence: terminal MUST NOT carry `cnf`; intermediate MUST.
+ *
+ * The "aud+nonce are mandatory for any KB-bearing chain" hardening (H4) is
+ * enforced one level up in `chain.ts`, matching AP2's structure (AP2 only
+ * checks them on the terminal hop, and only if the caller supplied them).
+ */
+import { computeSdHash, computeIssuerJwtHash } from "./hash.js";
+import { verifyEs256, resolveDisclosures, resolveDelegatePayload, cnfJwk } from "./sd-jwt.js";
+const TYP_TERMINAL = ["kb+sd-jwt", "kb-sd-jwt"];
+const TYP_INTERMEDIATE = ["kb+sd-jwt+kb", "kb-sd-jwt+kb"];
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Exactly one of `sd_hash`/`issuer_jwt_hash`, matching the hash of `prev`. */
+export function verifyBinding(payload, prev) {
+    const hasSd = "sd_hash" in payload;
+    const hasIss = "issuer_jwt_hash" in payload;
+    if (hasSd === hasIss) {
+        throw new Error(`KB-SD-JWT payload must contain exactly one of 'sd_hash' or 'issuer_jwt_hash' ` +
+            `(got sd_hash=${hasSd}, issuer_jwt_hash=${hasIss})`);
+    }
+    if (hasSd) {
+        const expected = computeSdHash(prev);
+        if (payload["sd_hash"] !== expected) {
+            throw new Error(`sd_hash mismatch: expected '${expected}', got '${String(payload["sd_hash"])}'`);
+        }
+    }
+    else {
+        const expected = computeIssuerJwtHash(prev);
+        if (payload["issuer_jwt_hash"] !== expected) {
+            throw new Error(`issuer_jwt_hash mismatch: expected '${expected}', got '${String(payload["issuer_jwt_hash"])}'`);
+        }
+    }
+}
+/** Validate `iat` presence and, when provided, `aud`/`nonce` (port of
+ * `verify_expected_claims`; the "always required" tightening lives in chain.ts). */
+export function verifyExpectedClaims(payload, expectedAud, expectedNonce, label = "KB-SD-JWT") {
+    if (!("iat" in payload))
+        throw new Error(`${label} missing required 'iat' claim`);
+    if (expectedAud !== undefined && payload["aud"] !== expectedAud) {
+        throw new Error(`${label} aud mismatch: expected '${expectedAud}', got '${String(payload["aud"])}'`);
+    }
+    if (expectedNonce !== undefined && payload["nonce"] !== expectedNonce) {
+        throw new Error(`${label} nonce mismatch: expected '${expectedNonce}', got '${String(payload["nonce"])}'`);
+    }
+}
+function delegatePayloadHasCnf(payload) {
+    const dp = payload["delegate_payload"];
+    if (!Array.isArray(dp))
+        return false;
+    return dp.some((item) => isPlainObject(item) && isPlainObject(item["cnf"]));
+}
+/**
+ * Verify one KB-SD-JWT hop against the previous (already verified+resolved)
+ * token, returning this hop's verified, disclosure-resolved payload.
+ */
+export async function verifyKbHop(token, prev, opts = {}) {
+    const typ = token.typ;
+    const isTerminal = typ !== undefined && TYP_TERMINAL.includes(typ);
+    const isIntermediate = typ !== undefined && TYP_INTERMEDIATE.includes(typ);
+    if (!isTerminal && !isIntermediate) {
+        throw new Error(`Unexpected JWT typ: expected one of ${[...TYP_TERMINAL, ...TYP_INTERMEDIATE].join(", ")}, got '${String(typ)}'`);
+    }
+    const prevKey = cnfJwk(prev); // 3-tier _find_cnf + single-cnf hardening (H3)
+    await verifyEs256(token.issuerJwt, prevKey); // ES256 under prev's cnf.jwk
+    const payload = resolveDisclosures(token.payload, token.disclosures, token.sdAlg);
+    resolveDelegatePayload(payload, token); // CMWallet digest-string resolution FIRST
+    verifyBinding(payload, prev.token);
+    if (isTerminal)
+        verifyExpectedClaims(payload, opts.expectedAud, opts.expectedNonce);
+    const hasCnf = delegatePayloadHasCnf(payload);
+    if (isTerminal && hasCnf)
+        throw new Error("Terminal KB-SD-JWT MUST NOT carry a 'cnf' claim");
+    if (isIntermediate && !hasCnf)
+        throw new Error(`Intermediate ${typ} requires a 'cnf' claim`);
+    // H4 anti-truncation: the chain's last hop MUST be terminal-typ. Placed after
+    // the cnf-presence checks so a non-terminal last hop still rejects (its
+    // aud/nonce would otherwise be silently skipped under attacker-chosen values).
+    if (opts.requireTerminal && !isTerminal) {
+        throw new Error(`Final chain hop must be a terminal KB-SD-JWT, got typ '${String(typ)}'`);
+    }
+    return payload;
+}
+//# sourceMappingURL=kb-sd-jwt.js.map

package/dist/ap2/kb-sd-jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-sd-jwt.js","sourceRoot":"","sources":["../../src/ap2/kb-sd-jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,EAAsB,MAAM,aAAa,CAAC;AAElH,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;AAChD,MAAM,gBAAgB,GAAG,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;AAI1D,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,aAAa,CAAC,OAAa,EAAE,IAAiB;IAC5D,MAAM,KAAK,GAAG,SAAS,IAAI,OAAO,CAAC;IACnC,MAAM,MAAM,GAAG,iBAAiB,IAAI,OAAO,CAAC;IAC5C,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,gBAAgB,KAAK,qBAAqB,MAAM,GAAG,CACtD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,WAAW,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,iBAAiB,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,WAAW,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC;QACnH,CAAC;IACH,CAAC;AACH,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,oBAAoB,CAClC,OAAa,EACb,WAA+B,EAC/B,aAAiC,EACjC,KAAK,GAAG,WAAW;IAEnB,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;IAClF,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,WAAW,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,WAAW,WAAW,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,aAAa,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B,aAAa,WAAW,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAa;IAC1C,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAaD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAkB,EAAE,IAAmB,EAAE,OAAqB,EAAE;IAChG,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,UAAU,GAAG,GAAG,KAAK,SAAS,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnE,MAAM,cAAc,GAAG,GAAG,KAAK,SAAS,IAAI,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,IAAI,CAAC,cAAc,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,uCAAuC,CAAC,GAAG,YAAY,EAAE,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,GAAG,CACjH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,+CAA+C;IAC7E,MAAM,WAAW,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,6BAA6B;IAC1E,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAClF,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,0CAA0C;IAClF,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,UAAU;QAAE,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IAEpF,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,UAAU,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC7F,IAAI,cAAc,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,yBAAyB,CAAC,CAAC;IAE7F,8EAA8E;IAC9E,wEAAwE;IACxE,+EAA+E;IAC/E,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,0DAA0D,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}