@harrylabsj/kiwi 0.6.0

package/dist/supervisor/wrapper.js

@@ -0,0 +1,138 @@
+#!/usr/bin/env node
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * kiwi child-runner (internal; never invoked by users directly).
+ *
+ *   node wrapper.js --kiwi-nonce <hex> --manifest <path> --log <path> \
+ *     --exit <path> -- <cmd> [args...]
+ *
+ * Responsibilities:
+ * - spawn the exact child argv (array, never a shell string), piping its
+ *   stdout/stderr into the instance-owned log file;
+ * - forward SIGINT/SIGTERM to that exact child only;
+ * - on child exit, write the exit record and exit with the child's code
+ *   (or 128+signo), so up/status can see crashes.
+ *
+ * The nonce in argv lets status/down verify PID ownership with ps and makes
+ * PID-reuse kills cryptographically improbable.
+ */
+import { spawn } from "node:child_process";
+import { closeSync, fsyncSync, openSync, renameSync, writeSync } from "node:fs";
+function parseArgs(argv) {
+    let nonce;
+    let manifest;
+    let log;
+    let exit;
+    let command;
+    for (let i = 0; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === "--kiwi-nonce")
+            nonce = argv[++i];
+        else if (arg === "--manifest")
+            manifest = argv[++i];
+        else if (arg === "--log")
+            log = argv[++i];
+        else if (arg === "--exit")
+            exit = argv[++i];
+        else if (arg === "--") {
+            command = argv.slice(i + 1);
+            break;
+        }
+        else
+            return undefined;
+    }
+    if (!nonce || !manifest || !log || !exit || !command || command.length === 0)
+        return undefined;
+    return { nonce, manifest, log, exit, command };
+}
+function writeExitRecord(exitPath, record) {
+    const tmp = `${exitPath}.tmp-${process.pid}`;
+    const fd = openSync(tmp, "wx", 0o600);
+    try {
+        writeSync(fd, `${JSON.stringify(record)}\n`);
+        fsyncSync(fd);
+    }
+    finally {
+        closeSync(fd);
+    }
+    renameSync(tmp, exitPath);
+}
+function main() {
+    const args = parseArgs(process.argv.slice(2));
+    if (!args) {
+        process.stderr.write("kiwi child-runner: invalid arguments\n");
+        process.exit(2);
+    }
+    const logFd = openSync(args.log, "a", 0o600);
+    const child = spawn(args.command[0], args.command.slice(1), {
+        stdio: ["ignore", logFd, logFd],
+    });
+    closeSync(logFd); // the child holds its own descriptors now
+    let exited = false;
+    let killTimer;
+    const forward = (signal) => {
+        if (exited)
+            return;
+        child.kill(signal);
+        // 兜底（评审项 P3-2）：supervisor 的 SIGKILL 升级只杀 wrapper（5s 后），
+        // 若 wrapper 被升级杀掉而子进程还活着，子进程会孤儿化继续运行——重启后
+        // 双 agent 并存、双写同一 SQLite/端口。此处 2.5s（< 5s 升级点，留足
+        // 调度余量）强杀子进程：正常关停永远不需要 supervisor 升级，升级发生时
+        // 子进程已被兜底终止。
+        if (killTimer === undefined) {
+            killTimer = setTimeout(() => {
+                if (!exited)
+                    child.kill("SIGKILL");
+            }, 2500);
+        }
+    };
+    // Signal handlers are installed before the ready marker is written, so a
+    // supervisor that waits for readiness can never lose a signal.
+    process.on("SIGINT", () => forward("SIGINT"));
+    process.on("SIGTERM", () => forward("SIGTERM"));
+    child.on("error", (err) => {
+        exited = true;
+        writeExitRecord(args.exit, {
+            exit_code: 1,
+            signal: null,
+            at: new Date().toISOString(),
+        });
+        process.stderr.write(`kiwi child-runner: failed to spawn ${args.command[0] ?? ""}: ${err.message}\n`);
+        process.exit(1);
+    });
+    child.on("exit", (code, signal) => {
+        exited = true;
+        writeExitRecord(args.exit, {
+            exit_code: code,
+            signal,
+            at: new Date().toISOString(),
+        });
+        if (signal) {
+            process.exit(128 + (signal === "SIGTERM" ? 15 : signal === "SIGINT" ? 2 : 1));
+        }
+        process.exit(code ?? 1);
+    });
+    // Ready marker: signal handlers are up and the child has been spawned.
+    // The supervisor waits for this before it may signal us.
+    writeExitRecord(`${args.manifest}.ready`, {
+        exit_code: null,
+        signal: null,
+        at: new Date().toISOString(),
+    });
+}
+main();
+//# sourceMappingURL=wrapper.js.map

package/dist/supervisor/wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper.js","sourceRoot":"","sources":["../../src/supervisor/wrapper.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAUhF,SAAS,SAAS,CAAC,IAAc;IAC/B,IAAI,KAAyB,CAAC;IAC9B,IAAI,QAA4B,CAAC;IACjC,IAAI,GAAuB,CAAC;IAC5B,IAAI,IAAwB,CAAC;IAC7B,IAAI,OAA6B,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,cAAc;YAAE,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACzC,IAAI,GAAG,KAAK,YAAY;YAAE,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aAC/C,IAAI,GAAG,KAAK,OAAO;YAAE,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACrC,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;aACvC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACtB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC5B,MAAM;QACR,CAAC;;YAAM,OAAO,SAAS,CAAC;IAC1B,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,eAAe,CACtB,QAAgB,EAChB,MAAuE;IAEvE,MAAM,GAAG,GAAG,GAAG,QAAQ,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IAC7C,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,IAAI;IACX,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAW,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACpE,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;KAChC,CAAC,CAAC;IACH,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,0CAA0C;IAE5D,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,SAAoD,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,MAA4B,EAAQ,EAAE;QACrD,IAAI,MAAM;YAAE,OAAO;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,wDAAwD;QACxD,0CAA0C;QAC1C,gDAAgD;QAChD,2CAA2C;QAC3C,aAAa;QACb,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC1B,IAAI,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC;IACH,CAAC,CAAC;IACF,yEAAyE;IACzE,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAEhD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACxB,MAAM,GAAG,IAAI,CAAC;QACd,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE;YACzB,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI;YACZ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sCAAsC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,OAAO,IAAI,CAChF,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;QAChC,MAAM,GAAG,IAAI,CAAC;QACd,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE;YACzB,SAAS,EAAE,IAAI;YACf,MAAM;YACN,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SAC7B,CAAC,CAAC;QACH,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,uEAAuE;IACvE,yDAAyD;IACzD,eAAe,CAAC,GAAG,IAAI,CAAC,QAAQ,QAAQ,EAAE;QACxC,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,IAAI;QACZ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/trust/identity/auth-verifier.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * HttpMessageSignatureVerifier —— AuthVerifier 接缝的完整身份方案（WP5）。
+ *
+ * 在 a2a/server 的认证接缝上落地：
+ *   1. 请求带 HTTP Message Signature（RFC 9421）→ 验签（算法 / 时间窗口 /
+ *      nonce / content-digest 完整性）；
+ *   2. 验签通过的 keyid → 本地信任锚档案（profile：identity / organization /
+ *      role / trustLevel）；
+ *   3. TrustPolicy 按档案 trust level 决定是否强制 Agent Card JWS（§31：是否
+ *      强制由策略决定，不是算法自带的）；
+ *   4. 身份绑定冲突（宣称 profile vs 密钥档案）→ identity_rejected（§18）。
+ *
+ * 未签名请求：按 anonymousTrustLevel（默认 T0 UNKNOWN）评估策略。默认策略表
+ * T0 不强制签名，因此匿名可访问；部署方想 fail-closed 可传
+ * `requireHttpSignature: 恒真` 的策略或把 anonymousTrustLevel 设为 T1。
+ *
+ * 请求头约定（本实现自有的最小约定）：
+ *   - `x-agent-card-jws`：请求携带的 Agent Card compact JWS（T2+ 强制时校验）；
+ *   - `x-kiwi-claimed-identity`：可选 JSON `{ identity?, organization?, role? }`，
+ *     用于身份绑定冲突检测。
+ */
+import type { AuthContext, AuthResult, AuthVerifier } from "../../a2a/server/types.js";
+import { type ClaimedIdentity } from "./identity-binding.js";
+import type { KeyResolver } from "./keys.js";
+import type { NonceStore } from "./nonce.js";
+import { type TrustLevel, type TrustPolicy } from "./trust-policy.js";
+/** 请求携带 Agent Card JWS 的自定义头。 */
+export declare const CARD_JWS_HEADER = "x-agent-card-jws";
+/** 请求宣称身份的 JSON 头（untrusted，仅用于冲突检测）。 */
+export declare const CLAIMED_IDENTITY_HEADER = "x-kiwi-claimed-identity";
+export type CardJwsVerificationResult = {
+    ok: true;
+    identity?: string;
+    organization?: string;
+    role?: "buyer" | "merchant";
+} | {
+    ok: false;
+    reason: string;
+};
+export interface HttpMessageSignatureVerifierOptions {
+    /** keyid → 公钥 + 档案（本地信任锚 / JWKS 接缝）。 */
+    resolver: KeyResolver;
+    /** 信任策略；默认 DEFAULT_TRUST_POLICY（T0 匿名 / T1+ 强制签名 / T2+ 强制 JWS / T3 强制 nonce）。 */
+    policy?: TrustPolicy;
+    nonceStore?: NonceStore;
+    /** 时钟（unix 秒）；默认 Date.now()/1000。 */
+    now?: () => number;
+    /** @target-uri 重建用 scheme；默认取 AuthContext.scheme 再回落此值。 */
+    scheme?: "http" | "https";
+    /** 未签名请求的 trust level；默认 T0。 */
+    anonymousTrustLevel?: TrustLevel;
+    /** 未签名（匿名放行）时的幂等身份；默认 "anonymous"。 */
+    anonymousIdentity?: string;
+    /** 验证请求携带的 Agent Card JWS；T2+ 时必需。 */
+    verifyCardJws?: (jws: string) => CardJwsVerificationResult;
+    /** created/expires 时钟偏差（秒）；默认 300。 */
+    maxClockSkewSeconds?: number;
+    /** 无 expires 的签名最大年龄（秒）；默认 900。 */
+    maxSignatureAgeSeconds?: number;
+}
+/**
+ * 解析 `x-kiwi-claimed-identity` 头（JSON）。非 JSON / 形状非法返回 undefined
+ * （untrusted 输入，解析失败不阻断——冲突检测只在有宣称值时生效）。
+ */
+export declare function parseClaimedIdentityHeader(headers: Record<string, string | string[] | undefined>): ClaimedIdentity | undefined;
+/** 完整 HTTP Message Signature 入站验证器（AuthVerifier 实现）。 */
+export declare class HttpMessageSignatureVerifier implements AuthVerifier {
+    readonly name = "http-message-signature";
+    private readonly resolver;
+    private readonly policy;
+    private readonly nonceStore;
+    private readonly now;
+    private readonly scheme;
+    private readonly anonymousTrustLevel;
+    private readonly anonymousIdentity;
+    private readonly verifyCardJws;
+    private readonly maxClockSkewSeconds;
+    private readonly maxSignatureAgeSeconds;
+    constructor(options: HttpMessageSignatureVerifierOptions);
+    verify(ctx: AuthContext): AuthResult;
+}

package/dist/trust/identity/auth-verifier.js

@@ -0,0 +1,166 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { bindIdentity } from "./identity-binding.js";
+import { verifyHttpMessageSignature } from "./message-signature.js";
+import { headerValue } from "./signature-base.js";
+import { DEFAULT_TRUST_POLICY, } from "./trust-policy.js";
+/** 请求携带 Agent Card JWS 的自定义头。 */
+export const CARD_JWS_HEADER = "x-agent-card-jws";
+/** 请求宣称身份的 JSON 头（untrusted，仅用于冲突检测）。 */
+export const CLAIMED_IDENTITY_HEADER = "x-kiwi-claimed-identity";
+/**
+ * 解析 `x-kiwi-claimed-identity` 头（JSON）。非 JSON / 形状非法返回 undefined
+ * （untrusted 输入，解析失败不阻断——冲突检测只在有宣称值时生效）。
+ */
+export function parseClaimedIdentityHeader(headers) {
+    const value = headerValue(headers, CLAIMED_IDENTITY_HEADER);
+    if (value === undefined)
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        return undefined;
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+        return undefined;
+    const obj = parsed;
+    const out = {};
+    if (typeof obj.identity === "string")
+        out.identity = obj.identity;
+    if (typeof obj.organization === "string")
+        out.organization = obj.organization;
+    if (obj.role === "buyer" || obj.role === "merchant")
+        out.role = obj.role;
+    return out;
+}
+/** 完整 HTTP Message Signature 入站验证器（AuthVerifier 实现）。 */
+export class HttpMessageSignatureVerifier {
+    name = "http-message-signature";
+    resolver;
+    policy;
+    nonceStore;
+    now;
+    scheme;
+    anonymousTrustLevel;
+    anonymousIdentity;
+    verifyCardJws;
+    maxClockSkewSeconds;
+    maxSignatureAgeSeconds;
+    constructor(options) {
+        this.resolver = options.resolver;
+        this.policy = options.policy ?? DEFAULT_TRUST_POLICY;
+        this.nonceStore = options.nonceStore;
+        this.now = options.now ?? (() => Math.floor(Date.now() / 1000));
+        this.scheme = options.scheme ?? "http";
+        this.anonymousTrustLevel = options.anonymousTrustLevel ?? "T0";
+        this.anonymousIdentity = options.anonymousIdentity ?? "anonymous";
+        this.verifyCardJws = options.verifyCardJws;
+        this.maxClockSkewSeconds = options.maxClockSkewSeconds ?? 300;
+        this.maxSignatureAgeSeconds = options.maxSignatureAgeSeconds ?? 900;
+    }
+    verify(ctx) {
+        const headers = ctx.headers ?? {};
+        // 未签名请求：按匿名等级评估策略。
+        if (headerValue(headers, "signature-input") === undefined) {
+            if (this.policy.requireHttpSignature(this.anonymousTrustLevel)) {
+                return {
+                    authenticated: false,
+                    protocolCode: "authentication_required",
+                    reason: `HTTP Message Signature required at ${this.anonymousTrustLevel}`,
+                };
+            }
+            return { authenticated: true, identity: this.anonymousIdentity };
+        }
+        // 签名请求：重建 @target-uri / @authority（服务端只有 origin-form req.url）。
+        const authority = headerValue(headers, "host") ?? "";
+        const scheme = ctx.scheme ?? this.scheme;
+        const targetUri = ctx.url.startsWith("http://") || ctx.url.startsWith("https://")
+            ? ctx.url
+            : `${scheme}://${authority}${ctx.url}`;
+        const result = verifyHttpMessageSignature({
+            method: ctx.method,
+            targetUri,
+            authority,
+            headers,
+            body: ctx.body ?? Buffer.alloc(0),
+            resolver: this.resolver,
+            nonceStore: this.nonceStore,
+            now: this.now,
+            maxClockSkewSeconds: this.maxClockSkewSeconds,
+            maxSignatureAgeSeconds: this.maxSignatureAgeSeconds,
+        });
+        if (!result.ok) {
+            return { authenticated: false, protocolCode: result.code, reason: result.reason };
+        }
+        const principal = {
+            identity: result.profile?.identity ?? result.keyid,
+            keyid: result.keyid,
+            trustLevel: result.profile?.trustLevel ?? this.anonymousTrustLevel,
+            profile: result.profile,
+        };
+        // nonce 强制（策略表 T3）：签名必须携带 nonce 才能满足重放保护要求。
+        if (this.policy.requireNonce(principal.trustLevel) && result.params.nonce === undefined) {
+            return {
+                authenticated: false,
+                protocolCode: "authorization_failed",
+                reason: `signature nonce required at ${principal.trustLevel}`,
+            };
+        }
+        // Agent Card JWS 强制由 TrustPolicy 决定（§31）。
+        const cardJws = headerValue(headers, CARD_JWS_HEADER);
+        let cardClaims;
+        if (this.policy.requireCardJws(principal.trustLevel)) {
+            if (cardJws === undefined) {
+                return {
+                    authenticated: false,
+                    protocolCode: "authentication_required",
+                    reason: `Agent Card JWS required at ${principal.trustLevel}`,
+                };
+            }
+            if (this.verifyCardJws === undefined) {
+                return {
+                    authenticated: false,
+                    protocolCode: "authorization_failed",
+                    reason: "Agent Card JWS verification is not configured",
+                };
+            }
+            cardClaims = this.verifyCardJws(cardJws);
+            if (!cardClaims.ok) {
+                return {
+                    authenticated: false,
+                    protocolCode: "authorization_failed",
+                    reason: `invalid Agent Card JWS: ${cardClaims.reason}`,
+                };
+            }
+        }
+        // 身份绑定冲突 → identity_rejected（§18 / §32）。
+        const claimed = {
+            ...(parseClaimedIdentityHeader(headers) ?? {}),
+            ...(cardClaims !== undefined && cardClaims.ok ? cardClaims : {}),
+        };
+        const bound = bindIdentity({ verified: principal, claimed });
+        if (!bound.ok) {
+            return { authenticated: false, protocolCode: "identity_rejected", reason: bound.reason };
+        }
+        // 验签通过：identity 是 HTTP Message Signature 验证出的对端身份。
+        // identityVerified=true 让 pipeline 把该身份写入入站 Ledger identity
+        // snapshot 的 counterparty 侧（§22，与 buyer 侧记录对称）。
+        return { authenticated: true, identity: bound.senderIdentity, identityVerified: true };
+    }
+}
+//# sourceMappingURL=auth-verifier.js.map

package/dist/trust/identity/auth-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-verifier.js","sourceRoot":"","sources":["../../../src/trust/identity/auth-verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAyBH,OAAO,EAAE,YAAY,EAAgD,MAAM,uBAAuB,CAAC;AAEnG,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EACL,oBAAoB,GAGrB,MAAM,mBAAmB,CAAC;AAE3B,iCAAiC;AACjC,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAClD,yCAAyC;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AA4BjE;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAAsD;IAEtD,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC5D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7F,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAClE,IAAI,OAAO,GAAG,CAAC,YAAY,KAAK,QAAQ;QAAE,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IAC9E,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU;QAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACzE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wDAAwD;AACxD,MAAM,OAAO,4BAA4B;IAC9B,IAAI,GAAG,wBAAwB,CAAC;IACxB,QAAQ,CAAc;IACtB,MAAM,CAAc;IACpB,UAAU,CAAyB;IACnC,GAAG,CAAe;IAClB,MAAM,CAAmB;IACzB,mBAAmB,CAAa;IAChC,iBAAiB,CAAS;IAC1B,aAAa,CAA2D;IACxE,mBAAmB,CAAS;IAC5B,sBAAsB,CAAS;IAEhD,YAAY,OAA4C;QACtD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,oBAAoB,CAAC;QACrD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACvC,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,IAAI,CAAC;QAC/D,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,WAAW,CAAC;QAClE,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,GAAG,CAAC;QAC9D,IAAI,CAAC,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,IAAI,GAAG,CAAC;IACtE,CAAC;IAED,MAAM,CAAC,GAAgB;QACrB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QAElC,mBAAmB;QACnB,IAAI,WAAW,CAAC,OAAO,EAAE,iBAAiB,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,mBAAmB,CAAC,EAAE,CAAC;gBAC/D,OAAO;oBACL,aAAa,EAAE,KAAK;oBACpB,YAAY,EAAE,yBAAyB;oBACvC,MAAM,EAAE,sCAAsC,IAAI,CAAC,mBAAmB,EAAE;iBACzE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACnE,CAAC;QAED,+DAA+D;QAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QACrD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;QACzC,MAAM,SAAS,GACb,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;YAC7D,CAAC,CAAC,GAAG,CAAC,GAAG;YACT,CAAC,CAAC,GAAG,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;QAE3C,MAAM,MAAM,GAAG,0BAA0B,CAAC;YACxC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS;YACT,SAAS;YACT,OAAO;YACP,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;YAC7C,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;QACpF,CAAC;QAED,MAAM,SAAS,GAAsB;YACnC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,IAAI,MAAM,CAAC,KAAK;YAClD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,IAAI,IAAI,CAAC,mBAAmB;YAClE,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;QAEF,4CAA4C;QAC5C,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACxF,OAAO;gBACL,aAAa,EAAE,KAAK;gBACpB,YAAY,EAAE,sBAAsB;gBACpC,MAAM,EAAE,+BAA+B,SAAS,CAAC,UAAU,EAAE;aAC9D,CAAC;QACJ,CAAC;QAED,0CAA0C;QAC1C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACtD,IAAI,UAAiD,CAAC;QACtD,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YACrD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO;oBACL,aAAa,EAAE,KAAK;oBACpB,YAAY,EAAE,yBAAyB;oBACvC,MAAM,EAAE,8BAA8B,SAAS,CAAC,UAAU,EAAE;iBAC7D,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO;oBACL,aAAa,EAAE,KAAK;oBACpB,YAAY,EAAE,sBAAsB;oBACpC,MAAM,EAAE,+CAA+C;iBACxD,CAAC;YACJ,CAAC;YACD,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,OAAO;oBACL,aAAa,EAAE,KAAK;oBACpB,YAAY,EAAE,sBAAsB;oBACpC,MAAM,EAAE,2BAA2B,UAAU,CAAC,MAAM,EAAE;iBACvD,CAAC;YACJ,CAAC;QACH,CAAC;QAED,yCAAyC;QACzC,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,0BAA0B,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9C,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QACF,MAAM,KAAK,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACd,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,mBAAmB,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3F,CAAC;QACD,mDAAmD;QACnD,4DAA4D;QAC5D,gDAAgD;QAChD,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACzF,CAAC;CACF"}

package/dist/trust/identity/identity-binding.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 身份绑定（基线 §27 Identity Trust / §36-19 / UCP Identity Binding 思想）。
+ *
+ * 验签通过的身份 MUST 绑定到：
+ *   - 协议幂等主键的 sender 侧（子规范 §20.1 (sender_identity, message_id)）；
+ *   - Ledger identity snapshot（基线 §22 identity snapshot）。
+ *
+ * 冲突检测：请求宣称的 profile（identity / organization / role）与密钥绑定的
+ * profile 不一致 → identity_rejected（§18 词表 / §32 error model）。fail-closed：
+ * 任何宣称字段与已绑定档案冲突都拒绝，绝不静默采用宣称值。
+ */
+import type { LedgerIdentitySnapshot } from "../../negotiation/ledger/index.js";
+import type { TrustLevel } from "./trust-policy.js";
+/** 验签通过的身份主体。 */
+export interface VerifiedPrincipal {
+    /** 规范身份：优先密钥档案 profile.identity，否则 keyid。 */
+    identity: string;
+    keyid: string;
+    trustLevel: TrustLevel;
+    profile?: {
+        identity?: string;
+        organization?: string;
+        role?: "buyer" | "merchant";
+    };
+}
+/** 请求宣称的身份（来自请求头/卡片 JWS 等；untrusted）。 */
+export interface ClaimedIdentity {
+    identity?: string;
+    organization?: string;
+    role?: "buyer" | "merchant";
+}
+export type IdentityBindingResult = {
+    ok: true;
+    senderIdentity: string;
+    snapshot: LedgerIdentitySnapshot;
+} | {
+    ok: false;
+    protocolCode: "identity_rejected";
+    reason: string;
+};
+/**
+ * 把验证过的身份绑定到幂等主键与 Ledger 快照，并做宣称档案冲突检测。
+ * claimed 缺省时不冲突（未宣称即不比较）；宣称字段必须与档案一致。
+ */
+export declare function bindIdentity(input: {
+    verified: VerifiedPrincipal;
+    claimed?: ClaimedIdentity;
+}): IdentityBindingResult;

package/dist/trust/identity/identity-binding.js

@@ -0,0 +1,59 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 把验证过的身份绑定到幂等主键与 Ledger 快照，并做宣称档案冲突检测。
+ * claimed 缺省时不冲突（未宣称即不比较）；宣称字段必须与档案一致。
+ */
+export function bindIdentity(input) {
+    const senderIdentity = input.verified.identity;
+    const profile = input.verified.profile;
+    const claimed = input.claimed;
+    if (claimed !== undefined) {
+        if (claimed.identity !== undefined &&
+            profile?.identity !== undefined &&
+            claimed.identity !== profile.identity) {
+            return {
+                ok: false,
+                protocolCode: "identity_rejected",
+                reason: `claimed identity "${claimed.identity}" conflicts with key "${input.verified.keyid}" profile identity "${profile.identity}"`,
+            };
+        }
+        if (claimed.organization !== undefined &&
+            profile?.organization !== undefined &&
+            claimed.organization !== profile.organization) {
+            return {
+                ok: false,
+                protocolCode: "identity_rejected",
+                reason: `claimed organization "${claimed.organization}" conflicts with key "${input.verified.keyid}" profile`,
+            };
+        }
+        if (claimed.role !== undefined &&
+            profile?.role !== undefined &&
+            claimed.role !== profile.role) {
+            return {
+                ok: false,
+                protocolCode: "identity_rejected",
+                reason: `claimed role "${claimed.role}" conflicts with key "${input.verified.keyid}" profile role "${profile.role}"`,
+            };
+        }
+    }
+    return {
+        ok: true,
+        senderIdentity,
+        snapshot: { sender_identity: senderIdentity, counterparty_identity: senderIdentity },
+    };
+}
+//# sourceMappingURL=identity-binding.js.map

package/dist/trust/identity/identity-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-binding.js","sourceRoot":"","sources":["../../../src/trust/identity/identity-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAqCH;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAG5B;IACC,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAE9B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IACE,OAAO,CAAC,QAAQ,KAAK,SAAS;YAC9B,OAAO,EAAE,QAAQ,KAAK,SAAS;YAC/B,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EACrC,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,mBAAmB;gBACjC,MAAM,EAAE,qBAAqB,OAAO,CAAC,QAAQ,yBAAyB,KAAK,CAAC,QAAQ,CAAC,KAAK,uBAAuB,OAAO,CAAC,QAAQ,GAAG;aACrI,CAAC;QACJ,CAAC;QACD,IACE,OAAO,CAAC,YAAY,KAAK,SAAS;YAClC,OAAO,EAAE,YAAY,KAAK,SAAS;YACnC,OAAO,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY,EAC7C,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,mBAAmB;gBACjC,MAAM,EAAE,yBAAyB,OAAO,CAAC,YAAY,yBAAyB,KAAK,CAAC,QAAQ,CAAC,KAAK,WAAW;aAC9G,CAAC;QACJ,CAAC;QACD,IACE,OAAO,CAAC,IAAI,KAAK,SAAS;YAC1B,OAAO,EAAE,IAAI,KAAK,SAAS;YAC3B,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,EAC7B,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,YAAY,EAAE,mBAAmB;gBACjC,MAAM,EAAE,iBAAiB,OAAO,CAAC,IAAI,yBAAyB,KAAK,CAAC,QAAQ,CAAC,KAAK,mBAAmB,OAAO,CAAC,IAAI,GAAG;aACrH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,cAAc;QACd,QAAQ,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,qBAAqB,EAAE,cAAc,EAAE;KACrF,CAAC;AACJ,CAAC"}

package/dist/trust/identity/index.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * trust/identity — WP5 身份层（HTTP Message Signatures + Agent Card JWS +
+ * TrustPolicy + 身份绑定）。
+ *
+ * 入口：HttpMessageSignatureVerifier 接入 a2a/server 的 AuthVerifier 接缝；
+ * HttpMessageSigner 接入 a2a/client 的出站签名挂点。
+ */
+export { HttpMessageSignatureVerifier, parseClaimedIdentityHeader, CARD_JWS_HEADER, CLAIMED_IDENTITY_HEADER, } from "./auth-verifier.js";
+export type { CardJwsVerificationResult, HttpMessageSignatureVerifierOptions, } from "./auth-verifier.js";
+export { bindIdentity } from "./identity-binding.js";
+export type { ClaimedIdentity, IdentityBindingResult, VerifiedPrincipal, } from "./identity-binding.js";
+export { JwsError, jwsKid, verifyAgentCardJws, verifyCompactJws } from "./jws.js";
+export type { AgentCardJwsResult, JwsErrorCode, VerifiedJws } from "./jws.js";
+export { ed25519PrivateKeyFromSeed, privateKeyObject, publicKeyJwkFromRaw, publicKeyObject, resolveFromJwks, resolveFromSigningKeys, } from "./keys.js";
+export type { KeyProfile, KeyResolver, SignatureAlgorithm, SigningKey } from "./keys.js";
+export { contentDigestHeader, DEFAULT_COVERED_COMPONENTS, HttpMessageSigner, RFC9421_ALG_NAMES, verifyContentDigest, verifyHttpMessageSignature, } from "./message-signature.js";
+export type { HttpMessageSignerOptions, HttpSignatureVerifyResult, VerifyHttpSignatureInput, } from "./message-signature.js";
+export { InMemoryNonceStore } from "./nonce.js";
+export type { NonceStore } from "./nonce.js";
+export { buildSignatureBase, formatSignatureInput, headerValue, parseSignatureHeader, parseSignatureInput, serializeParams, } from "./signature-base.js";
+export type { CoveredComponent, ParsedSignatureInput, SignatureBaseError, SignatureBaseInput, SignatureParams, } from "./signature-base.js";
+export { conservativeLevel, DEFAULT_TRUST_POLICY, evaluatePolicy, isTrustLevel, TRUST_LEVELS, trustLevelRank, } from "./trust-policy.js";
+export type { PolicyEvaluationInput, PolicyEvaluationResult, TrustLevel, TrustPolicy, } from "./trust-policy.js";

package/dist/trust/identity/index.js

@@ -0,0 +1,31 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * trust/identity — WP5 身份层（HTTP Message Signatures + Agent Card JWS +
+ * TrustPolicy + 身份绑定）。
+ *
+ * 入口：HttpMessageSignatureVerifier 接入 a2a/server 的 AuthVerifier 接缝；
+ * HttpMessageSigner 接入 a2a/client 的出站签名挂点。
+ */
+export { HttpMessageSignatureVerifier, parseClaimedIdentityHeader, CARD_JWS_HEADER, CLAIMED_IDENTITY_HEADER, } from "./auth-verifier.js";
+export { bindIdentity } from "./identity-binding.js";
+export { JwsError, jwsKid, verifyAgentCardJws, verifyCompactJws } from "./jws.js";
+export { ed25519PrivateKeyFromSeed, privateKeyObject, publicKeyJwkFromRaw, publicKeyObject, resolveFromJwks, resolveFromSigningKeys, } from "./keys.js";
+export { contentDigestHeader, DEFAULT_COVERED_COMPONENTS, HttpMessageSigner, RFC9421_ALG_NAMES, verifyContentDigest, verifyHttpMessageSignature, } from "./message-signature.js";
+export { InMemoryNonceStore } from "./nonce.js";
+export { buildSignatureBase, formatSignatureInput, headerValue, parseSignatureHeader, parseSignatureInput, serializeParams, } from "./signature-base.js";
+export { conservativeLevel, DEFAULT_TRUST_POLICY, evaluatePolicy, isTrustLevel, TRUST_LEVELS, trustLevelRank, } from "./trust-policy.js";
+//# sourceMappingURL=index.js.map

package/dist/trust/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/trust/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;GAMG;AAEH,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,EAC1B,eAAe,EACf,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAOrD,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGlF,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,mBAAmB,EACnB,eAAe,EACf,eAAe,EACf,sBAAsB,GACvB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,wBAAwB,CAAC;AAOhC,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGhD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,GAChB,MAAM,qBAAqB,CAAC;AAS7B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,cAAc,GACf,MAAM,mBAAmB,CAAC"}