@goodmeta/agent-verifier 0.2.0 → 0.6.0

package/dist/policy.js

@@ -0,0 +1,88 @@
+/**
+ * Policy-Based Spending Verification
+ *
+ * For systems that don't use AP2 mandates (Lago, custom billing, etc).
+ * Spending rules are configured via API, not cryptographic signatures.
+ *
+ * Same core logic: can this agent spend $X on Y right now?
+ */
+import { PolicyRequestSchema } from "./schema.js";
+/**
+ * Check a spending request against a local policy (stateless).
+ * For cross-agent budget tracking, use the hosted Verifier.
+ */
+export function checkPolicy(policy, request, currentSpend = 0) {
+    // Validate the untrusted request at the boundary. `amount` is coerced to
+    // positive integer cents — a negative amount would otherwise pass every ">"
+    // check below and then inflate the remaining budget (remaining - (-x)).
+    const parsed = PolicyRequestSchema.safeParse(request);
+    if (!parsed.success) {
+        const issue = parsed.error.issues[0];
+        return {
+            approved: false,
+            reason: issue?.path[0] === "amount" ? "INVALID_AMOUNT" : "INVALID_REQUEST",
+            detail: issue?.message ?? "invalid request",
+        };
+    }
+    const { amount, metadata } = parsed.data;
+    const { constraints } = policy;
+    // Per-event max
+    if (amount > constraints.maxPerEvent) {
+        return {
+            approved: false,
+            reason: "AMOUNT_EXCEEDED",
+            detail: `$${(amount / 100).toFixed(2)} exceeds per-event max $${(constraints.maxPerEvent / 100).toFixed(2)}`,
+        };
+    }
+    // Budget check
+    const remaining = policy.budgetTotal - currentSpend;
+    if (amount > remaining) {
+        return {
+            approved: false,
+            reason: "BUDGET_EXCEEDED",
+            detail: `$${(amount / 100).toFixed(2)} exceeds remaining budget $${(remaining / 100).toFixed(2)}`,
+            remaining: { budget: remaining, period: policy.budgetPeriod },
+        };
+    }
+    // Code allowlist
+    if (metadata?.code && constraints.allowedCodes?.length) {
+        if (!constraints.allowedCodes.includes(metadata.code)) {
+            return {
+                approved: false,
+                reason: "CODE_NOT_ALLOWED",
+                detail: `Code "${metadata.code}" not in allowed list`,
+            };
+        }
+    }
+    // Code blocklist
+    if (metadata?.code && constraints.blockedCodes?.includes(metadata.code)) {
+        return {
+            approved: false,
+            reason: "CODE_BLOCKED",
+            detail: `Code "${metadata.code}" is blocked`,
+        };
+    }
+    // Customer allowlist
+    if (metadata?.customer && constraints.allowedCustomers?.length) {
+        if (!constraints.allowedCustomers.includes(metadata.customer)) {
+            return {
+                approved: false,
+                reason: "CUSTOMER_NOT_ALLOWED",
+                detail: `Customer "${metadata.customer}" not in allowed list`,
+            };
+        }
+    }
+    // Customer blocklist
+    if (metadata?.customer && constraints.blockedCustomers?.includes(metadata.customer)) {
+        return {
+            approved: false,
+            reason: "CUSTOMER_BLOCKED",
+            detail: `Customer "${metadata.customer}" is blocked`,
+        };
+    }
+    return {
+        approved: true,
+        remaining: { budget: remaining - amount, period: policy.budgetPeriod },
+    };
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAoClD;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,MAAsB,EACtB,OAA4B,EAC5B,eAAuB,CAAC;IAExB,yEAAyE;IACzE,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB;YAC1E,MAAM,EAAE,KAAK,EAAE,OAAO,IAAI,iBAAiB;SAC5C,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAEzC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAE/B,gBAAgB;IAChB,IAAI,MAAM,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,WAAW,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SAC7G,CAAC;IACJ,CAAC;IAED,eAAe;IACf,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC;IACpD,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YACjG,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE;SAC9D,CAAC;IACJ,CAAC;IAED,iBAAiB;IACjB,IAAI,QAAQ,EAAE,IAAI,IAAI,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QACvD,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,SAAS,QAAQ,CAAC,IAAI,uBAAuB;aACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,iBAAiB;IACjB,IAAI,QAAQ,EAAE,IAAI,IAAI,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxE,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,SAAS,QAAQ,CAAC,IAAI,cAAc;SAC7C,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,QAAQ,EAAE,QAAQ,IAAI,WAAW,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC/D,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,aAAa,QAAQ,CAAC,QAAQ,uBAAuB;aAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,QAAQ,EAAE,QAAQ,IAAI,WAAW,CAAC,gBAAgB,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpF,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,aAAa,QAAQ,CAAC,QAAQ,cAAc;SACrD,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,EAAE,MAAM,EAAE,SAAS,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE;KACvE,CAAC;AACJ,CAAC"}

package/dist/receipt-jwt.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Receipt signing & verification — ES256 JWS (JWT), AP2's RECEIPT format.
+ *
+ * This is a plain compact JWS over a whole JSON payload (alg ES256, JWK keys) —
+ * which is exactly how AP2 secures a *Mandate Receipt* (a Verifier-signed JWT
+ * with `iss`/`result`/`reference`; see AP2 `jwt_helper.py`). It is NOT how AP2
+ * secures a *mandate*: real AP2 mandates are dSD-JWT delegation chains — use the
+ * `ap2` namespace (`ap2.verifyChain`, `ap2.receiptReference`, …) for those.
+ *
+ * Because the whole payload is signed, no field is mutable without breaking the
+ * signature — there is no "signed subset vs enforced superset" gap.
+ *
+ *   const token = await signReceipt(receipt, privateJwk);   // compact JWS string
+ *   const { valid, payload } = await verifyReceipt(token, publicJwk);
+ */
+import { type JWK } from "jose";
+/** Sign a receipt as a compact JWS (ES256) over the whole payload. */
+export declare function signReceipt(receipt: unknown, privateKey: JWK): Promise<string>;
+export interface VerifiedReceipt<T = unknown> {
+    valid: boolean;
+    payload?: T;
+    error?: string;
+}
+/**
+ * Verify a compact JWS receipt (ES256) and return the parsed payload.
+ * Returns { valid:false, error } on a bad signature, wrong key, or malformed token.
+ */
+export declare function verifyReceipt<T = unknown>(token: string, publicKey: JWK): Promise<VerifiedReceipt<T>>;
+export type { JWK };
+//# sourceMappingURL=receipt-jwt.d.ts.map

package/dist/receipt-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-jwt.d.ts","sourceRoot":"","sources":["../src/receipt-jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAyC,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAIvE,sEAAsE;AACtE,wBAAsB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAKpF;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,OAAO;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,CAAC,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAQ3G;AAED,YAAY,EAAE,GAAG,EAAE,CAAC"}

package/dist/receipt-jwt.js

@@ -0,0 +1,39 @@
+/**
+ * Receipt signing & verification — ES256 JWS (JWT), AP2's RECEIPT format.
+ *
+ * This is a plain compact JWS over a whole JSON payload (alg ES256, JWK keys) —
+ * which is exactly how AP2 secures a *Mandate Receipt* (a Verifier-signed JWT
+ * with `iss`/`result`/`reference`; see AP2 `jwt_helper.py`). It is NOT how AP2
+ * secures a *mandate*: real AP2 mandates are dSD-JWT delegation chains — use the
+ * `ap2` namespace (`ap2.verifyChain`, `ap2.receiptReference`, …) for those.
+ *
+ * Because the whole payload is signed, no field is mutable without breaking the
+ * signature — there is no "signed subset vs enforced superset" gap.
+ *
+ *   const token = await signReceipt(receipt, privateJwk);   // compact JWS string
+ *   const { valid, payload } = await verifyReceipt(token, publicJwk);
+ */
+import { CompactSign, compactVerify, importJWK } from "jose";
+const ALG = "ES256";
+/** Sign a receipt as a compact JWS (ES256) over the whole payload. */
+export async function signReceipt(receipt, privateKey) {
+    const key = await importJWK(privateKey, ALG);
+    return new CompactSign(new TextEncoder().encode(JSON.stringify(receipt)))
+        .setProtectedHeader({ alg: ALG })
+        .sign(key);
+}
+/**
+ * Verify a compact JWS receipt (ES256) and return the parsed payload.
+ * Returns { valid:false, error } on a bad signature, wrong key, or malformed token.
+ */
+export async function verifyReceipt(token, publicKey) {
+    try {
+        const key = await importJWK(publicKey, ALG);
+        const { payload } = await compactVerify(token, key, { algorithms: [ALG] });
+        return { valid: true, payload: JSON.parse(new TextDecoder().decode(payload)) };
+    }
+    catch (e) {
+        return { valid: false, error: e?.message || "verification failed" };
+    }
+}
+//# sourceMappingURL=receipt-jwt.js.map

package/dist/receipt-jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-jwt.js","sourceRoot":"","sources":["../src/receipt-jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAY,MAAM,MAAM,CAAC;AAEvE,MAAM,GAAG,GAAG,OAAO,CAAC;AAEpB,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,UAAe;IACjE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IAC7C,OAAO,IAAI,WAAW,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;SACtE,kBAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAChC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAc,KAAa,EAAE,SAAc;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAM,EAAE,CAAC;IACtF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,EAAE,OAAO,IAAI,qBAAqB,EAAE,CAAC;IACjF,CAAC;AACH,CAAC"}

package/dist/schema.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Input validation schemas (zod).
+ *
+ * The untrusted boundary is the runtime spend request — what an agent wants to
+ * spend right now. Mandate *integrity* is guaranteed separately by the ES256 JWS
+ * signature (see receipt-jwt.ts), so here we validate the request shapes and,
+ * above all, the money field.
+ *
+ * `Cents` is the shared money validator: a positive, safe-integer cent value,
+ * accepted as a number or an all-digit string. It rejects fractional, negative,
+ * zero, NaN, Infinity, overflow, and any non-digit string — the same rule the
+ * hosted Verifier enforces, so self-hosted and hosted agree to the cent.
+ */
+import { z } from "zod";
+export declare const Cents: z.ZodPipe<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>, z.ZodTransform<number, string | number>>;
+/** Parse any input into positive cents, or return null (never throws). */
+export declare function parseCents(input: unknown): number | null;
+/** A constraint-check transaction — the input to `checkConstraints`. */
+export declare const ConstraintTxSchema: z.ZodObject<{
+    amount: z.ZodPipe<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>, z.ZodTransform<number, string | number>>;
+    merchantId: z.ZodOptional<z.ZodString>;
+    items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        quantity: z.ZodNumber;
+        unitPrice: z.ZodString;
+        currency: z.ZodString;
+        category: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+/** A policy spend request — the input to `checkPolicy`. */
+export declare const PolicyRequestSchema: z.ZodObject<{
+    agentId: z.ZodString;
+    amount: z.ZodPipe<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>, z.ZodTransform<number, string | number>>;
+    metadata: z.ZodOptional<z.ZodObject<{
+        code: z.ZodOptional<z.ZodString>;
+        customer: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>;
+    idempotencyKey: z.ZodString;
+}, z.core.$strip>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,KAAK,qGAKd,CAAC;AAEL,0EAA0E;AAC1E,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAGxD;AAWD,wEAAwE;AACxE,eAAO,MAAM,kBAAkB;;;;;;;;;;;iBAI7B,CAAC;AAEH,2DAA2D;AAC3D,eAAO,MAAM,mBAAmB;;;;;;;;iBAQ9B,CAAC"}

package/dist/schema.js

@@ -0,0 +1,50 @@
+/**
+ * Input validation schemas (zod).
+ *
+ * The untrusted boundary is the runtime spend request — what an agent wants to
+ * spend right now. Mandate *integrity* is guaranteed separately by the ES256 JWS
+ * signature (see receipt-jwt.ts), so here we validate the request shapes and,
+ * above all, the money field.
+ *
+ * `Cents` is the shared money validator: a positive, safe-integer cent value,
+ * accepted as a number or an all-digit string. It rejects fractional, negative,
+ * zero, NaN, Infinity, overflow, and any non-digit string — the same rule the
+ * hosted Verifier enforces, so self-hosted and hosted agree to the cent.
+ */
+import { z } from "zod";
+export const Cents = z
+    .union([z.number(), z.string().regex(/^\d+$/, "must be all digits")])
+    .transform((v) => (typeof v === "string" ? Number(v) : v))
+    .refine((n) => Number.isSafeInteger(n) && n > 0, {
+    message: "amount must be a positive integer (cents)",
+});
+/** Parse any input into positive cents, or return null (never throws). */
+export function parseCents(input) {
+    const r = Cents.safeParse(input);
+    return r.success ? r.data : null;
+}
+const CartItemSchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    quantity: z.number(),
+    unitPrice: z.string(),
+    currency: z.string(),
+    category: z.string().optional(),
+});
+/** A constraint-check transaction — the input to `checkConstraints`. */
+export const ConstraintTxSchema = z.object({
+    amount: Cents,
+    merchantId: z.string().optional(),
+    items: z.array(CartItemSchema).optional(),
+});
+/** A policy spend request — the input to `checkPolicy`. */
+export const PolicyRequestSchema = z.object({
+    agentId: z.string(),
+    amount: Cents,
+    metadata: z
+        .object({ code: z.string().optional(), customer: z.string().optional() })
+        .passthrough()
+        .optional(),
+    idempotencyKey: z.string(),
+});
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC;KACnB,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC;KACpE,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACzD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;IAC/C,OAAO,EAAE,2CAA2C;CACrD,CAAC,CAAC;AAEL,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,KAAK;IACb,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAEH,2DAA2D;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;SACxE,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;CAC3B,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,116 @@
+/**
+ * AP2 Mandate Types
+ *
+ * Core types from the AP2 protocol spec.
+ * Used by both the open-source client and the hosted Verifier.
+ */
+export interface SpendingConstraint {
+    maxAmount: string;
+    currency: string;
+    categories?: string[];
+    allowedMerchants?: string[];
+    blockedMerchants?: string[];
+}
+export interface IntentMandate {
+    type: "intent-mandate";
+    version: "0.1.0";
+    id: string;
+    user: {
+        id: string;
+    };
+    agent: {
+        id: string;
+    };
+    intent: string;
+    constraints: SpendingConstraint;
+    validFrom: string;
+    validUntil: string;
+    maxTransactions?: number;
+    budgetTotal: string;
+    budgetSpent: string;
+}
+export interface CartMandate {
+    type: "cart-mandate";
+    version: "0.1.0";
+    id: string;
+    merchant: {
+        id: string;
+        name: string;
+        url: string;
+    };
+    agent: {
+        id: string;
+    };
+    user: {
+        id: string;
+    };
+    cart: {
+        items: CartItem[];
+        total: string;
+        currency: string;
+    };
+    expiresAt: string;
+    paymentRails: string[];
+}
+export interface CartItem {
+    id: string;
+    name: string;
+    quantity: number;
+    unitPrice: string;
+    currency: string;
+    category?: string;
+}
+export interface VerifyRequest {
+    mandate: IntentMandate | CartMandate;
+    transaction: {
+        amount: string;
+        currency: string;
+        items?: CartItem[];
+        idempotencyKey: string;
+    };
+}
+export interface VerifyResponse {
+    approved: boolean;
+    verificationId?: string;
+    reason?: string;
+    detail?: string;
+    mandate?: {
+        id: string;
+        remainingBudget: string;
+        remainingTransactions?: number;
+        expiresAt: string;
+    };
+    holdExpiresAt?: string;
+}
+export interface SettleRequest {
+    verificationId: string;
+    paymentResult: {
+        success: boolean;
+        transactionId?: string;
+        rail?: string;
+    };
+}
+export interface MandateSummary {
+    id: string;
+    budgetSpent: string;
+    remainingBudget: string;
+    txCount: number;
+}
+export interface SettleResponse {
+    settled: boolean;
+    released?: boolean;
+    mandate?: MandateSummary;
+}
+export interface ReleaseResponse {
+    released: boolean;
+    mandate?: MandateSummary;
+}
+export interface RefundResponse {
+    refundId?: string;
+    refundedAmount?: string;
+    totalRefunded?: string;
+    status?: "refunded" | "partially_refunded";
+    idempotentReplay?: boolean;
+    mandate?: MandateSummary;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrB,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,kBAAkB,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,KAAK,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACtB,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACrB,IAAI,EAAE;QACJ,KAAK,EAAE,QAAQ,EAAE,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,aAAa,GAAG,WAAW,CAAC;IACrC,WAAW,EAAE;QACX,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QACnB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE;QACR,EAAE,EAAE,MAAM,CAAC;QACX,eAAe,EAAE,MAAM,CAAC;QACxB,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE;QACb,OAAO,EAAE,OAAO,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,MAAM,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,UAAU,GAAG,oBAAoB,CAAC;IAC3C,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B"}

package/dist/types.js

@@ -0,0 +1,8 @@
+/**
+ * AP2 Mandate Types
+ *
+ * Core types from the AP2 protocol spec.
+ * Used by both the open-source client and the hosted Verifier.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/verify.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Constraint checking for a verified mandate.
+ *
+ * Signature verification lives in receipt-jwt.ts (ES256 JWS — AP2's receipt
+ * format). Once a mandate's signature is verified there, the WHOLE payload is
+ * trusted, and these checks enforce the spending constraints it carries. There
+ * is no "signed subset vs enforced superset" gap: every field was under the JWS.
+ */
+import type { IntentMandate, CartItem } from "./types.js";
+export interface VerificationResult {
+    valid: boolean;
+    error?: string;
+}
+/**
+ * Check an Intent Mandate's constraints against a proposed transaction.
+ * Stateless — does NOT track budget across transactions. For cross-merchant
+ * budget tracking, use the hosted Verifier (VerifierClient).
+ */
+export declare function checkConstraints(mandate: IntentMandate, transaction: {
+    amount: string;
+    merchantId?: string;
+    items?: CartItem[];
+}): VerificationResult;
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG1D,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,aAAa,EACtB,WAAW,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAA;CAAE,GACvE,kBAAkB,CAyDpB"}

package/dist/verify.js

@@ -0,0 +1,69 @@
+/**
+ * Constraint checking for a verified mandate.
+ *
+ * Signature verification lives in receipt-jwt.ts (ES256 JWS — AP2's receipt
+ * format). Once a mandate's signature is verified there, the WHOLE payload is
+ * trusted, and these checks enforce the spending constraints it carries. There
+ * is no "signed subset vs enforced superset" gap: every field was under the JWS.
+ */
+import { parseCents, ConstraintTxSchema } from "./schema.js";
+/**
+ * Check an Intent Mandate's constraints against a proposed transaction.
+ * Stateless — does NOT track budget across transactions. For cross-merchant
+ * budget tracking, use the hosted Verifier (VerifierClient).
+ */
+export function checkConstraints(mandate, transaction) {
+    const parsed = ConstraintTxSchema.safeParse(transaction);
+    if (!parsed.success) {
+        return { valid: false, error: parsed.error.issues[0]?.message ?? "Invalid transaction" };
+    }
+    const { amount, merchantId, items } = parsed.data;
+    const c = mandate.constraints;
+    // Temporal — parse explicitly and reject NaN. `new Date("garbage") > now` AND
+    // `< now` are both false, which would silently disable the expiry gate.
+    const now = Date.now();
+    const validFrom = Date.parse(mandate.validFrom);
+    const validUntil = Date.parse(mandate.validUntil);
+    if (Number.isNaN(validFrom) || Number.isNaN(validUntil)) {
+        return { valid: false, error: "Mandate has an invalid or missing validFrom/validUntil" };
+    }
+    if (validFrom > now)
+        return { valid: false, error: `Mandate not yet valid (from ${mandate.validFrom})` };
+    if (validUntil < now)
+        return { valid: false, error: "Mandate expired" };
+    // Per-transaction max
+    const maxAmount = parseCents(c.maxAmount);
+    if (maxAmount === null) {
+        return { valid: false, error: "Mandate maxAmount is not a valid positive integer (cents)" };
+    }
+    if (amount > maxAmount) {
+        return {
+            valid: false,
+            error: `$${(amount / 100).toFixed(2)} exceeds per-transaction max $${(maxAmount / 100).toFixed(2)}`,
+        };
+    }
+    // Merchant allowlist — if configured, a missing merchantId is a denial, not a skip.
+    if (c.allowedMerchants?.length) {
+        if (!merchantId || !c.allowedMerchants.includes(merchantId)) {
+            return { valid: false, error: `Merchant ${merchantId ?? "(none)"} not in allowlist` };
+        }
+    }
+    // Merchant blocklist
+    if (merchantId && c.blockedMerchants?.includes(merchantId)) {
+        return { valid: false, error: `Merchant ${merchantId} is blocked` };
+    }
+    // Category — under a category restriction every item must carry an allowed
+    // category; a transaction with no items can't be category-verified, so deny.
+    if (c.categories?.length) {
+        if (!items?.length) {
+            return { valid: false, error: "Category-restricted mandate requires an itemized transaction" };
+        }
+        for (const item of items) {
+            if (!item.category || !c.categories.includes(item.category)) {
+                return { valid: false, error: `Category "${item.category ?? "(none)"}" not allowed` };
+            }
+        }
+    }
+    return { valid: true };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAO7D;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAsB,EACtB,WAAwE;IAExE,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,qBAAqB,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAClD,MAAM,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;IAE9B,8EAA8E;IAC9E,wEAAwE;IACxE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC;IAC3F,CAAC;IACD,IAAI,SAAS,GAAG,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC;IACzG,IAAI,UAAU,GAAG,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAExE,sBAAsB;IACtB,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,2DAA2D,EAAE,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;SACpG,CAAC;IACJ,CAAC;IAED,oFAAoF;IACpF,IAAI,CAAC,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,UAAU,IAAI,QAAQ,mBAAmB,EAAE,CAAC;QACxF,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,UAAU,IAAI,CAAC,CAAC,gBAAgB,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,UAAU,aAAa,EAAE,CAAC;IACtE,CAAC;IAED,2EAA2E;IAC3E,6EAA6E;IAC7E,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACnB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,8DAA8D,EAAE,CAAC;QACjG,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,IAAI,CAAC,QAAQ,IAAI,QAAQ,eAAe,EAAE,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/package.json

@@ -1,21 +1,28 @@
 {
   "name": "@goodmeta/agent-verifier",
-  "version": "0.2.0",
+  "version": "0.6.0",
   "description": "Agent spending verification — signature verification, policy-based constraints, and Verifier API client",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {
-    "build": "tsc",
-    "demo": "tsx examples/single-merchant.ts"
+    "build": "rm -rf dist && tsc",
+    "test": "node --import tsx --test test/*.test.ts test/ap2/*.test.ts",
+    "demo": "tsx examples/single-merchant.ts",
+    "prepublishOnly": "npm run build && npm test"
   },
-  "files": ["dist", "README.md"],
+  "files": [
+    "dist",
+    "README.md"
+  ],
   "devDependencies": {
-    "tsx": "^4.19.0",
-    "typescript": "^5.7.0"
+    "@types/node": "20.19.42",
+    "tsx": "4.21.0",
+    "typescript": "5.9.3"
   },
   "dependencies": {
-    "viem": "^2.23.0"
+    "jose": "6.2.3",
+    "zod": "4.4.3"
   },
   "license": "MIT"
 }