@goodmeta/agent-verifier 0.2.0 → 0.6.0

package/dist/ap2/types.js

@@ -0,0 +1,141 @@
+/**
+ * Typed AP2 payment-mandate schemas (zod), mirroring AP2's generated models at
+ * commit e1ea56d (`generated/open_payment_mandate.py`, `payment_mandate.py`,
+ * `types/{amount,merchant,payment_instrument,pisp}.py`).
+ *
+ * `vct` is pinned to the EXACT version-suffixed literal (AUTH-1 / SPEC-16: a
+ * verifier MUST match the full `vct` string), so a wrong/loose `vct` fails to
+ * parse. Objects are non-strict (unknown keys stripped) to match pydantic's
+ * default `extra='ignore'` and tolerate `iat`/`exp`/`risk_data`/future fields.
+ * Constraints are kept loosely typed at the mandate level so an UNKNOWN
+ * constraint type does not crash parsing — it is surfaced as a violation during
+ * evaluation (AUTH-15: unknown constraints MUST fail evaluation), not silently
+ * dropped.
+ */
+import { z } from "zod";
+// ── Shared value types ───────────────────────────────────────────────────────
+export const AmountSchema = z.object({ amount: z.number().int(), currency: z.string() });
+export const MerchantSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    website: z.string().nullish(),
+});
+export const PaymentInstrumentSchema = z.object({
+    id: z.string(),
+    type: z.string(),
+    description: z.string().nullish(),
+});
+export const PispSchema = z.object({
+    legal_name: z.string(),
+    brand_name: z.string(),
+    domain_name: z.string(),
+});
+// ── Payment constraints (the `type` discriminators are AP2 wire literals) ─────
+export const AmountRangeSchema = z.object({
+    type: z.literal("payment.amount_range"),
+    currency: z.string(),
+    max: z.number().int(),
+    min: z.number().int().nullish(),
+});
+export const BudgetSchema = z.object({
+    type: z.literal("payment.budget"),
+    max: z.number(), // MAJOR-unit float; evaluator converts to cents via trunc(max*100)
+    currency: z.string(),
+});
+export const AgentRecurrenceSchema = z.object({
+    type: z.literal("payment.agent_recurrence"),
+    frequency: z.string(),
+    max_occurrences: z.number().int().nullish(),
+});
+export const AllowedPayeesSchema = z.object({
+    type: z.literal("payment.allowed_payees"),
+    allowed: z.array(MerchantSchema),
+});
+export const AllowedPaymentInstrumentsSchema = z.object({
+    type: z.literal("payment.allowed_payment_instruments"),
+    allowed: z.array(PaymentInstrumentSchema),
+});
+export const AllowedPispsSchema = z.object({
+    type: z.literal("payment.allowed_pisps"),
+    allowed: z.array(PispSchema),
+});
+export const ExecutionDateSchema = z.object({
+    type: z.literal("payment.execution_date"),
+    not_before: z.string().nullish(),
+    not_after: z.string().nullish(),
+});
+export const PaymentReferenceSchema = z.object({
+    type: z.literal("payment.reference"),
+    conditional_transaction_id: z.string(),
+});
+/** Strongly-typed union of the known payment constraints (for the evaluator). */
+export const KnownPaymentConstraintSchema = z.discriminatedUnion("type", [
+    AmountRangeSchema,
+    BudgetSchema,
+    AgentRecurrenceSchema,
+    AllowedPayeesSchema,
+    AllowedPaymentInstrumentsSchema,
+    AllowedPispsSchema,
+    ExecutionDateSchema,
+    PaymentReferenceSchema,
+]);
+/** A constraint as it appears in a mandate: at least a `type`, possibly unknown. */
+const LooseConstraintSchema = z.object({ type: z.string() }).passthrough();
+// ── Mandates ─────────────────────────────────────────────────────────────────
+export const OpenPaymentMandateSchema = z.object({
+    vct: z.literal("mandate.payment.open.1"),
+    constraints: z.array(LooseConstraintSchema),
+    cnf: z.unknown().optional(), // already validated during chain walk (jwk.ts/cnfJwk)
+    payee: MerchantSchema.nullish(),
+    payment_amount: AmountSchema.nullish(),
+    payment_instrument: PaymentInstrumentSchema.nullish(),
+    pisp: PispSchema.nullish(),
+    execution_date: z.string().nullish(),
+});
+export const PaymentMandateSchema = z.object({
+    vct: z.literal("mandate.payment.1"),
+    transaction_id: z.string(),
+    payee: MerchantSchema,
+    pisp: PispSchema.nullish(),
+    payment_amount: AmountSchema,
+    payment_instrument: PaymentInstrumentSchema,
+    execution_date: z.string().nullish(),
+});
+// ── Checkout mandate + constraints (mirror `generated/open_checkout_mandate.py`) ─
+export const AllowedMerchantsSchema = z.object({
+    type: z.literal("checkout.allowed_merchants"),
+    allowed: z.array(MerchantSchema),
+});
+const LineItemRequirementsSchema = z.object({
+    id: z.string(),
+    acceptable_items: z.array(z.object({ id: z.string(), title: z.string() })),
+    quantity: z.number().int().positive(),
+});
+export const LineItemsSchema = z.object({
+    type: z.literal("checkout.line_items"),
+    items: z.array(LineItemRequirementsSchema).min(1),
+});
+export const KnownCheckoutConstraintSchema = z.discriminatedUnion("type", [AllowedMerchantsSchema, LineItemsSchema]);
+export const OpenCheckoutMandateSchema = z.object({
+    vct: z.literal("mandate.checkout.open.1"),
+    constraints: z.array(LooseConstraintSchema),
+    cnf: z.unknown().optional(),
+});
+/** Closed checkout mandate (mirror `generated/checkout_mandate.py`). */
+export const CheckoutMandateSchema = z.object({
+    vct: z.literal("mandate.checkout.1"),
+    checkout_jwt: z.string(),
+    checkout_hash: z.string(),
+});
+/** Minimal UCP Checkout — only the fields the constraint evaluators read
+ * (`merchant`, `line_items[].item.id`, `line_items[].quantity`). `extra='allow'`
+ * in AP2, so unknown keys pass through. */
+export const CheckoutSchema = z
+    .object({
+    merchant: MerchantSchema.nullish(),
+    line_items: z
+        .array(z.object({ item: z.object({ id: z.string() }).passthrough(), quantity: z.number().int() }).passthrough())
+        .nullish(),
+})
+    .passthrough();
+//# sourceMappingURL=types.js.map

package/dist/ap2/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/ap2/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CAC9B,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CAClC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAOH,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE;CAChC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,mEAAmE;IACpF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE;CAC5C,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CACjC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;CAC1C,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;CAC7B,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CAChC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE;CACvC,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACvE,iBAAiB;IACjB,YAAY;IACZ,qBAAqB;IACrB,mBAAmB;IACnB,+BAA+B;IAC/B,kBAAkB;IAClB,mBAAmB;IACnB,sBAAsB;CACvB,CAAC,CAAC;AAGH,oFAAoF;AACpF,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAE3E,gFAAgF;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,sDAAsD;IACnF,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE;IAC/B,cAAc,EAAE,YAAY,CAAC,OAAO,EAAE;IACtC,kBAAkB,EAAE,uBAAuB,CAAC,OAAO,EAAE;IACrD,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE;IAC1B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CACrC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,KAAK,EAAE,cAAc;IACrB,IAAI,EAAE,UAAU,CAAC,OAAO,EAAE;IAC1B,cAAc,EAAE,YAAY;IAC5B,kBAAkB,EAAE,uBAAuB;IAC3C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CACrC,CAAC,CAAC;AAYH,oFAAoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,4BAA4B,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;CACjC,CAAC,CAAC;AACH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAClD,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC,sBAAsB,EAAE,eAAe,CAAC,CAAC,CAAC;AAGrH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC,CAAC;AAGH,wEAAwE;AACxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1B,CAAC,CAAC;AAGH;;2CAE2C;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,QAAQ,EAAE,cAAc,CAAC,OAAO,EAAE;IAClC,UAAU,EAAE,CAAC;SACV,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;SAC/G,OAAO,EAAE;CACb,CAAC;KACD,WAAW,EAAE,CAAC"}

package/dist/client.d.ts

@@ -0,0 +1,152 @@
+/**
+ * Verifier API Client
+ *
+ * For merchants integrating with the hosted Good Meta Verifier.
+ * Cross-merchant budget tracking, hold management, audit trail.
+ *
+ * Every call applies a timeout, surfaces transport/auth/server/non-JSON failures
+ * as a typed VerifierError, and never blind-parses an error body as a success
+ * response. A *denied* verification (HTTP 403 with { approved: false }) is a
+ * normal domain outcome and is returned, not thrown.
+ *
+ *   import { VerifierClient, VerifierError } from "@goodmeta/agent-verifier";
+ *
+ *   const verifier = new VerifierClient({ apiKey: "gm_test_..." });
+ *   const result = await verifier.verify(mandate, { amount: "3000", currency: "USDC", idempotencyKey: "tx-1" });
+ *   if (result.approved) await verifier.settle(result.verificationId!, { success: true });
+ */
+import type { IntentMandate, CartMandate, CartItem, VerifyResponse, SettleResponse, ReleaseResponse, RefundResponse } from "./types.js";
+export interface VerifyByIdTransaction {
+    amount: string;
+    currency: string;
+    items?: CartItem[];
+    idempotencyKey: string;
+}
+export interface VerifierClientOptions {
+    apiKey: string;
+    baseUrl?: string;
+    /** Per-request timeout in milliseconds. Default 10_000. */
+    timeoutMs?: number;
+    /** Override the fetch implementation (testing / custom agents). Defaults to global fetch. */
+    fetch?: typeof fetch;
+}
+/**
+ * Thrown for transport, timeout, auth (401), client (4xx), server (5xx), or
+ * non-JSON failures. Business outcomes (e.g. a denied verification) are
+ * returned, not thrown. Carries the HTTP `status` and parsed `body` when available.
+ */
+export declare class VerifierError extends Error {
+    readonly status?: number;
+    readonly body?: unknown;
+    constructor(message: string, opts?: {
+        status?: number;
+        body?: unknown;
+        cause?: unknown;
+    });
+}
+export declare class VerifierClient {
+    private apiKey;
+    private baseUrl;
+    private timeoutMs;
+    private fetchImpl;
+    constructor(options: VerifierClientOptions);
+    /**
+     * Low-level request: applies auth header + timeout, returns { status, body }.
+     * Throws VerifierError on network failure, timeout (AbortError), or a body
+     * that isn't valid JSON.
+     */
+    private raw;
+    /** POST that throws VerifierError on any non-2xx. */
+    private post;
+    /** GET that throws VerifierError on any non-2xx. */
+    private get;
+    /**
+     * verify/verifyById share this: a denial (HTTP 403, { approved:false }) is a
+     * domain outcome and is returned. Auth/validation/server errors throw.
+     */
+    private doVerify;
+    /**
+     * Verify a mandate and place a budget hold. Call this BEFORE processing payment.
+     * A denied result is returned with `approved: false`; transport/auth/server
+     * errors throw VerifierError.
+     */
+    verify(mandate: IntentMandate | CartMandate, transaction: {
+        amount: string;
+        currency: string;
+        items?: CartItem[];
+        idempotencyKey: string;
+    }): Promise<VerifyResponse>;
+    /**
+     * Verify by mandate/policy ID — for integrations where the agent only passes
+     * an ID (e.g. cart metadata), not the full mandate object.
+     */
+    verifyById(mandateId: string, transaction: VerifyByIdTransaction): Promise<VerifyResponse>;
+    /**
+     * Settle a verification after payment succeeds or fails.
+     * success=true → budget permanently debited; success=false → hold released.
+     */
+    settle(verificationId: string, paymentResult: {
+        success: boolean;
+        transactionId?: string;
+        rail?: string;
+    }): Promise<SettleResponse>;
+    /**
+     * Release a pre-commit hold, returning the unspent reservation to the budget.
+     * Use BEFORE a payment settles (planned charge cancelled, hold expiring).
+     * For an already-settled payment, use refund() instead.
+     */
+    release(verificationId: string): Promise<ReleaseResponse>;
+    /**
+     * Refund a settled (committed) payment, fully or partially. Restores budget.
+     * `idempotencyKey` makes retries safe — the same key never double-refunds.
+     * For a pre-commit hold that hasn't settled, use release() instead.
+     */
+    refund(verificationId: string, amountCents: number, idempotencyKey: string): Promise<RefundResponse>;
+    /**
+     * Create a spending budget — no crypto signatures needed. The API key holder
+     * is the trust anchor. Returns a budget_id for use with verifyById().
+     */
+    createBudget(options: {
+        agentId: string;
+        budgetTotal: number;
+        currency?: string;
+        validUntil: string;
+        validFrom?: string;
+        maxTransactions?: number;
+        constraints?: {
+            maxAmount?: string;
+            currency?: string;
+            allowedMerchants?: string[];
+            blockedMerchants?: string[];
+            categories?: string[];
+        };
+    }): Promise<{
+        id: string;
+        type: "budget";
+        agentId: string;
+        budgetTotal: string;
+        remainingBudget: string;
+        currency: string;
+        validUntil: string;
+    }>;
+    /**
+     * Query mandate state — budget, transaction count, history.
+     */
+    getMandateState(mandateId: string): Promise<{
+        mandate: {
+            id: string;
+            budgetTotal: string;
+            budgetSpent: string;
+            remainingBudget: string;
+            txCount: number;
+        };
+        transactions: Array<{
+            verification_id: string;
+            merchant_name: string;
+            amount: number;
+            status: string;
+            payment_rail: string | null;
+        }>;
+    }>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EACV,aAAa,EACb,WAAW,EACX,QAAQ,EACR,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6FAA6F;IAC7F,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED;;;;GAIG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;gBACZ,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAM7F;AAID,qBAAa,cAAc;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,SAAS,CAAe;gBAEpB,OAAO,EAAE,qBAAqB;IAQ1C;;;;OAIG;YACW,GAAG;IAyCjB,qDAAqD;YACvC,IAAI;IAMlB,oDAAoD;YACtC,GAAG;IAMjB;;;OAGG;YACW,QAAQ;IAStB;;;;OAIG;IACG,MAAM,CACV,OAAO,EAAE,aAAa,GAAG,WAAW,EACpC,WAAW,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QAAC,cAAc,EAAE,MAAM,CAAA;KAAE,GAC5F,OAAO,CAAC,cAAc,CAAC;IAI1B;;;OAGG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,cAAc,CAAC;IAIhG;;;OAGG;IACG,MAAM,CACV,cAAc,EAAE,MAAM,EACtB,aAAa,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GACzE,OAAO,CAAC,cAAc,CAAC;IAI1B;;;;OAIG;IACG,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAI/D;;;;OAIG;IACG,MAAM,CACV,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,GACrB,OAAO,CAAC,cAAc,CAAC;IAQ1B;;;OAGG;IACG,YAAY,CAAC,OAAO,EAAE;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE;YACZ,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;YAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;YAC5B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;SACvB,CAAC;KACH,GAAG,OAAO,CAAC;QACV,EAAE,EAAE,MAAM,CAAC;QACX,IAAI,EAAE,QAAQ,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,EAAE,MAAM,CAAC;QACjB,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IAIF;;OAEG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAChD,OAAO,EAAE;YACP,EAAE,EAAE,MAAM,CAAC;YACX,WAAW,EAAE,MAAM,CAAC;YACpB,WAAW,EAAE,MAAM,CAAC;YACpB,eAAe,EAAE,MAAM,CAAC;YACxB,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;QACF,YAAY,EAAE,KAAK,CAAC;YAClB,eAAe,EAAE,MAAM,CAAC;YACxB,aAAa,EAAE,MAAM,CAAC;YACtB,MAAM,EAAE,MAAM,CAAC;YACf,MAAM,EAAE,MAAM,CAAC;YACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;SAC7B,CAAC,CAAC;KACJ,CAAC;CAGH"}

package/dist/client.js

@@ -0,0 +1,171 @@
+/**
+ * Verifier API Client
+ *
+ * For merchants integrating with the hosted Good Meta Verifier.
+ * Cross-merchant budget tracking, hold management, audit trail.
+ *
+ * Every call applies a timeout, surfaces transport/auth/server/non-JSON failures
+ * as a typed VerifierError, and never blind-parses an error body as a success
+ * response. A *denied* verification (HTTP 403 with { approved: false }) is a
+ * normal domain outcome and is returned, not thrown.
+ *
+ *   import { VerifierClient, VerifierError } from "@goodmeta/agent-verifier";
+ *
+ *   const verifier = new VerifierClient({ apiKey: "gm_test_..." });
+ *   const result = await verifier.verify(mandate, { amount: "3000", currency: "USDC", idempotencyKey: "tx-1" });
+ *   if (result.approved) await verifier.settle(result.verificationId!, { success: true });
+ */
+/**
+ * Thrown for transport, timeout, auth (401), client (4xx), server (5xx), or
+ * non-JSON failures. Business outcomes (e.g. a denied verification) are
+ * returned, not thrown. Carries the HTTP `status` and parsed `body` when available.
+ */
+export class VerifierError extends Error {
+    status;
+    body;
+    constructor(message, opts = {}) {
+        super(message, opts.cause !== undefined ? { cause: opts.cause } : undefined);
+        this.name = "VerifierError";
+        this.status = opts.status;
+        this.body = opts.body;
+    }
+}
+const DEFAULT_TIMEOUT_MS = 10_000;
+export class VerifierClient {
+    apiKey;
+    baseUrl;
+    timeoutMs;
+    fetchImpl;
+    constructor(options) {
+        if (!options.apiKey)
+            throw new VerifierError("apiKey is required");
+        this.apiKey = options.apiKey;
+        this.baseUrl = (options.baseUrl || "https://verifier.goodmeta.co").replace(/\/$/, "");
+        this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.fetchImpl = options.fetch ?? fetch;
+    }
+    /**
+     * Low-level request: applies auth header + timeout, returns { status, body }.
+     * Throws VerifierError on network failure, timeout (AbortError), or a body
+     * that isn't valid JSON.
+     */
+    async raw(path, init) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.timeoutMs);
+        let res;
+        try {
+            res = await this.fetchImpl(`${this.baseUrl}${path}`, {
+                method: init.method,
+                headers: { Authorization: `Bearer ${this.apiKey}`, "Content-Type": "application/json" },
+                body: init.body,
+                signal: controller.signal,
+            });
+        }
+        catch (cause) {
+            const aborted = cause?.name === "AbortError";
+            throw new VerifierError(aborted
+                ? `${init.method} ${path} timed out after ${this.timeoutMs}ms`
+                : `${init.method} ${path} failed: ${cause?.message ?? "network error"}`, { cause });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+        const text = await res.text();
+        let body;
+        if (text) {
+            try {
+                body = JSON.parse(text);
+            }
+            catch {
+                throw new VerifierError(`non-JSON response from ${path} (HTTP ${res.status})`, {
+                    status: res.status,
+                    body: text,
+                });
+            }
+        }
+        return { status: res.status, body };
+    }
+    /** POST that throws VerifierError on any non-2xx. */
+    async post(path, payload) {
+        const { status, body } = await this.raw(path, { method: "POST", body: JSON.stringify(payload) });
+        if (status >= 200 && status < 300)
+            return body;
+        throw new VerifierError(`POST ${path} failed (HTTP ${status})`, { status, body });
+    }
+    /** GET that throws VerifierError on any non-2xx. */
+    async get(path) {
+        const { status, body } = await this.raw(path, { method: "GET" });
+        if (status >= 200 && status < 300)
+            return body;
+        throw new VerifierError(`GET ${path} failed (HTTP ${status})`, { status, body });
+    }
+    /**
+     * verify/verifyById share this: a denial (HTTP 403, { approved:false }) is a
+     * domain outcome and is returned. Auth/validation/server errors throw.
+     */
+    async doVerify(payload) {
+        const { status, body } = await this.raw("/v1/verify", {
+            method: "POST",
+            body: JSON.stringify(payload),
+        });
+        if ((status >= 200 && status < 300) || status === 403)
+            return body;
+        throw new VerifierError(`verify failed (HTTP ${status})`, { status, body });
+    }
+    /**
+     * Verify a mandate and place a budget hold. Call this BEFORE processing payment.
+     * A denied result is returned with `approved: false`; transport/auth/server
+     * errors throw VerifierError.
+     */
+    async verify(mandate, transaction) {
+        return this.doVerify({ mandate, transaction });
+    }
+    /**
+     * Verify by mandate/policy ID — for integrations where the agent only passes
+     * an ID (e.g. cart metadata), not the full mandate object.
+     */
+    async verifyById(mandateId, transaction) {
+        return this.doVerify({ mandateId, transaction });
+    }
+    /**
+     * Settle a verification after payment succeeds or fails.
+     * success=true → budget permanently debited; success=false → hold released.
+     */
+    async settle(verificationId, paymentResult) {
+        return this.post("/v1/settle", { verificationId, paymentResult });
+    }
+    /**
+     * Release a pre-commit hold, returning the unspent reservation to the budget.
+     * Use BEFORE a payment settles (planned charge cancelled, hold expiring).
+     * For an already-settled payment, use refund() instead.
+     */
+    async release(verificationId) {
+        return this.post("/v1/release", { verificationId });
+    }
+    /**
+     * Refund a settled (committed) payment, fully or partially. Restores budget.
+     * `idempotencyKey` makes retries safe — the same key never double-refunds.
+     * For a pre-commit hold that hasn't settled, use release() instead.
+     */
+    async refund(verificationId, amountCents, idempotencyKey) {
+        return this.post("/v1/refund", {
+            verificationId,
+            amount_cents: amountCents,
+            idempotency_key: idempotencyKey,
+        });
+    }
+    /**
+     * Create a spending budget — no crypto signatures needed. The API key holder
+     * is the trust anchor. Returns a budget_id for use with verifyById().
+     */
+    async createBudget(options) {
+        return this.post("/v1/budgets", options);
+    }
+    /**
+     * Query mandate state — budget, transaction count, history.
+     */
+    async getMandateState(mandateId) {
+        return this.get(`/v1/mandates/${encodeURIComponent(mandateId)}`);
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA4BH;;;;GAIG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,MAAM,CAAU;IAChB,IAAI,CAAW;IACxB,YAAY,OAAe,EAAE,OAA6D,EAAE;QAC1F,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,MAAM,OAAO,cAAc;IACjB,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,SAAS,CAAS;IAClB,SAAS,CAAe;IAEhC,YAAY,OAA8B;QACxC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,8BAA8B,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,GAAG,CACf,IAAY,EACZ,IAAuC;QAEvC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;gBACnD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACvF,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAI,KAAkC,EAAE,IAAI,KAAK,YAAY,CAAC;YAC3E,MAAM,IAAI,aAAa,CACrB,OAAO;gBACL,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,oBAAoB,IAAI,CAAC,SAAS,IAAI;gBAC9D,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,YAAa,KAAe,EAAE,OAAO,IAAI,eAAe,EAAE,EACpF,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAa,CAAC;QAClB,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,aAAa,CAAC,0BAA0B,IAAI,UAAU,GAAG,CAAC,MAAM,GAAG,EAAE;oBAC7E,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE,IAAI;iBACX,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,qDAAqD;IAC7C,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,OAAgB;QAClD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjG,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;YAAE,OAAO,IAAS,CAAC;QACpD,MAAM,IAAI,aAAa,CAAC,QAAQ,IAAI,iBAAiB,MAAM,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,oDAAoD;IAC5C,KAAK,CAAC,GAAG,CAAI,IAAY;QAC/B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;YAAE,OAAO,IAAS,CAAC;QACpD,MAAM,IAAI,aAAa,CAAC,OAAO,IAAI,iBAAiB,MAAM,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,QAAQ,CAAC,OAAgB;QACrC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAsB,CAAC;QACrF,MAAM,IAAI,aAAa,CAAC,uBAAuB,MAAM,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CACV,OAAoC,EACpC,WAA6F;QAE7F,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,WAAkC;QACpE,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CACV,cAAsB,EACtB,aAA0E;QAE1E,OAAO,IAAI,CAAC,IAAI,CAAiB,YAAY,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC,CAAC;IACpF,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CAAC,cAAsB;QAClC,OAAO,IAAI,CAAC,IAAI,CAAkB,aAAa,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;IACvE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,MAAM,CACV,cAAsB,EACtB,WAAmB,EACnB,cAAsB;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAiB,YAAY,EAAE;YAC7C,cAAc;YACd,YAAY,EAAE,WAAW;YACzB,eAAe,EAAE,cAAc;SAChC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY,CAAC,OAclB;QASC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QAgBrC,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @goodmeta/agent-verifier
+ *
+ * Agent spending verification — open source.
+ *
+ * Real AP2 mandate verification (dSD-JWT delegation chains) — the headline:
+ *   import { ap2 } from "@goodmeta/agent-verifier";
+ *   const payloads = await ap2.verifyChain(ap2.splitChain(chain), key, { expectedAud, expectedNonce });
+ *   const violations = ap2.verifyPaymentChain(ap2.parsePaymentChain(payloads));
+ *
+ * Receipt signing & verification (ES256 JWS — AP2's *receipt* format):
+ *   import { signReceipt, verifyReceipt } from "@goodmeta/agent-verifier";
+ *
+ * Hosted Verifier API (cross-agent budget state) + policy engine:
+ *   import { VerifierClient, checkPolicy } from "@goodmeta/agent-verifier";
+ */
+export * as ap2 from "./ap2/index.js";
+export { signReceipt, verifyReceipt } from "./receipt-jwt.js";
+export type { VerifiedReceipt, JWK } from "./receipt-jwt.js";
+export { checkPolicy } from "./policy.js";
+export type { SpendingPolicy, PolicyVerifyRequest, PolicyVerifyResponse } from "./policy.js";
+export { VerifierClient, VerifierError } from "./client.js";
+export type { VerifierClientOptions, VerifyByIdTransaction } from "./client.js";
+export { parseCents, Cents, ConstraintTxSchema, PolicyRequestSchema } from "./schema.js";
+export { checkConstraints } from "./verify.js";
+export type { IntentMandate, CartMandate, CartItem, SpendingConstraint, VerifyRequest, VerifyResponse, SettleRequest, SettleResponse, MandateSummary, ReleaseResponse, RefundResponse, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AAGtC,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9D,YAAY,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAG7D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,YAAY,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5D,YAAY,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGhF,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAKzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,YAAY,EACV,aAAa,EACb,WAAW,EACX,QAAQ,EACR,kBAAkB,EAClB,aAAa,EACb,cAAc,EACd,aAAa,EACb,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,30 @@
+/**
+ * @goodmeta/agent-verifier
+ *
+ * Agent spending verification — open source.
+ *
+ * Real AP2 mandate verification (dSD-JWT delegation chains) — the headline:
+ *   import { ap2 } from "@goodmeta/agent-verifier";
+ *   const payloads = await ap2.verifyChain(ap2.splitChain(chain), key, { expectedAud, expectedNonce });
+ *   const violations = ap2.verifyPaymentChain(ap2.parsePaymentChain(payloads));
+ *
+ * Receipt signing & verification (ES256 JWS — AP2's *receipt* format):
+ *   import { signReceipt, verifyReceipt } from "@goodmeta/agent-verifier";
+ *
+ * Hosted Verifier API (cross-agent budget state) + policy engine:
+ *   import { VerifierClient, checkPolicy } from "@goodmeta/agent-verifier";
+ */
+// ── Real AP2 mandate verification (dSD-JWT) — see src/ap2 + AP2-AUDIT.md ──────
+export * as ap2 from "./ap2/index.js";
+// ── Receipt signing & verification — ES256 JWS, AP2's receipt format ─────────
+export { signReceipt, verifyReceipt } from "./receipt-jwt.js";
+// ── Hosted Verifier API + policy engine (non-AP2 billing systems) ────────────
+export { checkPolicy } from "./policy.js";
+export { VerifierClient, VerifierError } from "./client.js";
+// Input validation schemas (zod) — boundary validators + shared cents rule
+export { parseCents, Cents, ConstraintTxSchema, PolicyRequestSchema } from "./schema.js";
+// ── LEGACY (pre-AP2) hosted-API types — camelCase, NOT the AP2 dSD-JWT mandate
+//    model. Retained for the hosted Verifier client API; new integrations
+//    should use the snake_case `ap2.*` mandate schemas above. ─────────────────
+export { checkConstraints } from "./verify.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,iFAAiF;AACjF,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AAEtC,gFAAgF;AAChF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAG9D,gFAAgF;AAChF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5D,2EAA2E;AAC3E,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEzF,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;AAChF,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/policy.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Policy-Based Spending Verification
+ *
+ * For systems that don't use AP2 mandates (Lago, custom billing, etc).
+ * Spending rules are configured via API, not cryptographic signatures.
+ *
+ * Same core logic: can this agent spend $X on Y right now?
+ */
+export interface SpendingPolicy {
+    agentId: string;
+    budgetTotal: number;
+    budgetPeriod: "daily" | "weekly" | "monthly" | "total";
+    constraints: {
+        maxPerEvent: number;
+        allowedCodes?: string[];
+        blockedCodes?: string[];
+        allowedCustomers?: string[];
+        blockedCustomers?: string[];
+    };
+}
+export interface PolicyVerifyRequest {
+    agentId: string;
+    amount: number;
+    metadata?: {
+        code?: string;
+        customer?: string;
+        [key: string]: unknown;
+    };
+    idempotencyKey: string;
+}
+export interface PolicyVerifyResponse {
+    approved: boolean;
+    reason?: string;
+    detail?: string;
+    remaining?: {
+        budget: number;
+        period: string;
+    };
+}
+/**
+ * Check a spending request against a local policy (stateless).
+ * For cross-agent budget tracking, use the hosted Verifier.
+ */
+export declare function checkPolicy(policy: SpendingPolicy, request: PolicyVerifyRequest, currentSpend?: number): PolicyVerifyResponse;
+//# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;IACvD,WAAW,EAAE;QACX,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC7B,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE;QACT,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE;QACV,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,mBAAmB,EAC5B,YAAY,GAAE,MAAU,GACvB,oBAAoB,CAiFtB"}