@harrylabsj/kiwi 0.6.0

package/dist/trust/identity/message-signature.js

@@ -0,0 +1,297 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * HTTP Message Signatures（RFC 9421）—— 出站签名器 + 入站验签核心。
+ *
+ * 覆盖组件默认集：@method @target-uri @authority content-digest。
+ *   - @method / @target-uri / @authority 是派生组件（请求语义）；
+ *   - content-digest（RFC 9530）把请求体绑定进签名 —— 篡改任一 covered
+ *     component 都会导致验签失败，这是 §31「digest ≠ authentication」的落点：
+ *     envelope digest 只证完整性，HTTP Message Signature 证明「由持有该 key 的
+ *     身份发出」。
+ *
+ * 支持算法：Ed25519（RFC 9421 alg="ed25519"）与 ES256（P-256 + SHA-256，
+ * alg="ecdsa-p256-sha256"，原始 r||s 编码 = node:dns ieee-p1363）。零新增依赖。
+ */
+import { createHash, sign as nodeSign, verify as nodeVerify, } from "node:crypto";
+import { buildSignatureBase, formatSignatureInput, headerValue, parseSignatureHeader, parseSignatureInput, } from "./signature-base.js";
+import { ed25519PrivateKeyFromSeed, privateKeyObject, publicKeyObject, } from "./keys.js";
+/** RFC 9421 alg 名（Signature-Input 的 alg 参数）。 */
+export const RFC9421_ALG_NAMES = {
+    ed25519: "ed25519",
+    es256: "ecdsa-p256-sha256",
+};
+/** 默认覆盖组件：把方法、目标、authority、请求体全部绑定进签名。 */
+export const DEFAULT_COVERED_COMPONENTS = [
+    "@method",
+    "@target-uri",
+    "@authority",
+    "content-digest",
+];
+// ---------------------------------------------------------------------------
+// content-digest（RFC 9530）
+// ---------------------------------------------------------------------------
+/** 计算请求体的 content-digest 头值：`sha-256=:<base64>:`。 */
+export function contentDigestHeader(body) {
+    const digest = createHash("sha256").update(body).digest();
+    return `sha-256=:${digest.toString("base64")}:`;
+}
+/** 从 content-digest 头提取 sha-256 的 base64 摘要值。 */
+function sha256DigestFromHeader(header) {
+    for (const part of header.split(/\s+/)) {
+        const m = /^sha-256=:([^:]*):$/.exec(part);
+        if (m !== null)
+            return m[1];
+    }
+    return undefined;
+}
+/** 重算请求体 digest 并与头声明比较（内容完整性，§31）。 */
+export function verifyContentDigest(body, header) {
+    const presented = sha256DigestFromHeader(header);
+    if (presented === undefined)
+        return false;
+    const expected = contentDigestHeader(body);
+    const m = /^sha-256=:([^:]*):$/.exec(expected);
+    if (m === null)
+        return false;
+    return presented === m[1];
+}
+// ---------------------------------------------------------------------------
+// 签名/验签字节操作
+// ---------------------------------------------------------------------------
+function signBytes(algorithm, data, key) {
+    switch (algorithm) {
+        case "ed25519":
+            return nodeSign(null, data, key);
+        case "es256":
+            return nodeSign("sha256", data, { key, dsaEncoding: "ieee-p1363" });
+    }
+}
+function verifyBytes(algorithm, data, key, signature) {
+    switch (algorithm) {
+        case "ed25519":
+            return nodeVerify(null, data, key, signature);
+        case "es256":
+            return nodeVerify("sha256", data, { key, dsaEncoding: "ieee-p1363" }, signature);
+    }
+}
+/** 出站 HTTP Message Signature 签名器。 */
+export class HttpMessageSigner {
+    keyid;
+    algorithm;
+    privateKey;
+    coveredComponents;
+    created;
+    expires;
+    nonce;
+    now;
+    constructor(options) {
+        this.keyid = options.keyid;
+        this.algorithm = options.algorithm;
+        this.coveredComponents = options.coveredComponents ?? DEFAULT_COVERED_COMPONENTS;
+        this.created = options.created;
+        this.expires = options.expires;
+        this.nonce = options.nonce;
+        this.now = options.now ?? (() => Math.floor(Date.now() / 1000));
+        this.privateKey = importPrivateKey(options.algorithm, options.privateKey);
+    }
+    /** 为一次出站请求计算签名头（content-digest / signature-input / signature）。 */
+    sign(input) {
+        const body = Buffer.isBuffer(input.body) ? input.body : Buffer.from(input.body, "utf8");
+        const contentDigest = contentDigestHeader(body);
+        const headers = { ...input.headers, "content-digest": contentDigest };
+        const created = this.created ?? this.now();
+        const params = {
+            created,
+            keyid: this.keyid,
+            algorithm: RFC9421_ALG_NAMES[this.algorithm],
+        };
+        if (this.expires !== undefined)
+            params.expires = this.expires;
+        if (this.nonce !== undefined)
+            params.nonce = this.nonce;
+        const components = [...this.coveredComponents];
+        const targetUri = new URL(input.url).href;
+        const authority = new URL(input.url).host;
+        const base = buildSignatureBase({
+            method: input.method,
+            targetUri,
+            authority,
+            headers,
+            components,
+            params,
+        });
+        const signature = signBytes(this.algorithm, Buffer.from(base, "utf8"), this.privateKey);
+        return {
+            "content-digest": contentDigest,
+            "signature-input": formatSignatureInput("sig1", components, params),
+            "signature": `sig1=:${signature.toString("base64")}:`,
+        };
+    }
+}
+function importPrivateKey(algorithm, input) {
+    if (Buffer.isBuffer(input)) {
+        if (algorithm !== "ed25519") {
+            throw new Error("raw private key bytes are only supported for ed25519 (provide JWK/PEM for es256)");
+        }
+        return ed25519PrivateKeyFromSeed(input);
+    }
+    return privateKeyObject(input);
+}
+/**
+ * 验签：解析 Signature-Input / Signature，逐项验证（keyid → 公钥、时间窗口、
+ * nonce、signature base、content-digest 完整性）。任一 signature 验证通过即成功；
+ * 全部失败返回第一个错误（fail-closed，§4.6）。
+ */
+export function verifyHttpMessageSignature(input) {
+    const now = (input.now ?? (() => Math.floor(Date.now() / 1000)))();
+    const skew = input.maxClockSkewSeconds ?? 300;
+    const maxAge = input.maxSignatureAgeSeconds ?? 900;
+    const signatureInputHeader = headerValue(input.headers, "signature-input");
+    if (signatureInputHeader === undefined) {
+        return { ok: false, code: "authentication_required", reason: "missing signature-input header" };
+    }
+    const signatureHeader = headerValue(input.headers, "signature");
+    if (signatureHeader === undefined) {
+        return { ok: false, code: "authentication_required", reason: "missing signature header" };
+    }
+    let entries;
+    try {
+        entries = parseSignatureInput(signatureInputHeader);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            code: "authorization_failed",
+            reason: `malformed signature-input: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    if (entries.length === 0) {
+        return { ok: false, code: "authorization_failed", reason: "signature-input has no signatures" };
+    }
+    const signatureLabels = parseSignatureHeader(signatureHeader);
+    let firstFailure;
+    for (const entry of entries) {
+        const signatureBytes = signatureLabels[entry.label];
+        if (signatureBytes === undefined)
+            continue;
+        const result = verifyEntry(entry, signatureBytes, input, now, skew, maxAge);
+        if (result.ok)
+            return result;
+        if (firstFailure === undefined)
+            firstFailure = result;
+    }
+    return (firstFailure ?? {
+        ok: false,
+        code: "authorization_failed",
+        reason: "signature header has no matching signature label",
+    });
+}
+function verifyEntry(entry, signatureBytes, input, now, skew, maxAge) {
+    const keyid = entry.params.keyid;
+    if (keyid === undefined) {
+        return { ok: false, code: "authorization_failed", reason: "signature has no keyid" };
+    }
+    const key = input.resolver(keyid);
+    if (key === undefined) {
+        return { ok: false, code: "authorization_failed", reason: `unknown keyid "${keyid}"` };
+    }
+    const requested = algorithmFromAlgParam(entry.params.algorithm);
+    if (entry.params.algorithm !== undefined && requested === undefined) {
+        return {
+            ok: false,
+            code: "authorization_failed",
+            reason: `unsupported signature algorithm "${entry.params.algorithm}"`,
+        };
+    }
+    if (requested !== undefined && requested !== key.algorithm) {
+        return {
+            ok: false,
+            code: "authorization_failed",
+            reason: `signature alg "${entry.params.algorithm}" does not match key ${keyid} algorithm`,
+        };
+    }
+    const algorithm = requested ?? key.algorithm;
+    // created/expires 窗口（RFC 9421 §3.1 / 防重放第一道防线）。
+    if (entry.params.created !== undefined) {
+        if (entry.params.created > now + skew) {
+            return { ok: false, code: "authorization_failed", reason: "signature created in the future" };
+        }
+        if (entry.params.expires === undefined && now - entry.params.created > maxAge) {
+            return { ok: false, code: "authorization_failed", reason: "signature is too old" };
+        }
+    }
+    if (entry.params.expires !== undefined && entry.params.expires < now - skew) {
+        return { ok: false, code: "authorization_failed", reason: "signature has expired" };
+    }
+    let base;
+    try {
+        base = buildSignatureBase({
+            method: input.method,
+            targetUri: input.targetUri,
+            authority: input.authority,
+            headers: input.headers,
+            components: entry.components,
+            params: entry.params,
+        });
+    }
+    catch (err) {
+        return {
+            ok: false,
+            code: "authorization_failed",
+            reason: `covered component unavailable: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    // content-digest 完整性：body 重算必须与头声明一致（篡改 body → 拒绝）。
+    if (entry.components.includes("content-digest")) {
+        const contentDigestHeaderValue = headerValue(input.headers, "content-digest");
+        if (contentDigestHeaderValue === undefined) {
+            return { ok: false, code: "authorization_failed", reason: "content-digest is covered but header is missing" };
+        }
+        if (!verifyContentDigest(input.body, contentDigestHeaderValue)) {
+            return { ok: false, code: "authorization_failed", reason: "content-digest does not match request body" };
+        }
+    }
+    const keyObject = publicKeyObject(key);
+    if (!verifyBytes(algorithm, Buffer.from(base, "utf8"), keyObject, signatureBytes)) {
+        return { ok: false, code: "authorization_failed", reason: "signature verification failed" };
+    }
+    // nonce 防重放（评审项 H6）：**验签成功后**才消费。此前在验签前
+    // checkAndSet——任何能构造格式合法请求的攻击者（keyid 公开可解析、时间
+    // 窗内）可用伪造签名刷入任意 nonce 填满 store，配合满额整体清空把已捕获
+    // 的真实签名打开重放窗口；验签后才消费使 nonce 只能被真实签名持有者写入。
+    if (entry.params.nonce !== undefined && input.nonceStore !== undefined) {
+        if (!input.nonceStore.checkAndSet(`${keyid}|${entry.params.nonce}`)) {
+            return { ok: false, code: "replay_detected", reason: "signature nonce already used" };
+        }
+    }
+    return { ok: true, keyid, algorithm, params: entry.params, profile: key.profile };
+}
+/** 把 Signature-Input 的 alg 参数映射到内部算法名。 */
+function algorithmFromAlgParam(alg) {
+    switch (alg) {
+        case undefined:
+            return undefined;
+        case "ed25519":
+            return "ed25519";
+        case "ecdsa-p256-sha256":
+        case "es256":
+            return "es256";
+        default:
+            return undefined;
+    }
+}
+//# sourceMappingURL=message-signature.js.map

package/dist/trust/identity/message-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-signature.js","sourceRoot":"","sources":["../../../src/trust/identity/message-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,UAAU,EACV,IAAI,IAAI,QAAQ,EAChB,MAAM,IAAI,UAAU,GAGrB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,oBAAoB,EACpB,mBAAmB,GAGpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,GAIhB,MAAM,WAAW,CAAC;AAGnB,gDAAgD;AAChD,MAAM,CAAC,MAAM,iBAAiB,GAAuC;IACnE,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,mBAAmB;CAC3B,CAAC;AAEF,0CAA0C;AAC1C,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,SAAS;IACT,aAAa;IACb,YAAY;IACZ,gBAAgB;CACjB,CAAC;AAEF,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,qDAAqD;AACrD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1D,OAAO,YAAY,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;AAClD,CAAC;AAED,iDAAiD;AACjD,SAAS,sBAAsB,CAAC,MAAc;IAC5C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,uCAAuC;AACvC,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAc;IAC9D,MAAM,SAAS,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7B,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,SAAS,CAAC,SAA6B,EAAE,IAAY,EAAE,GAAc;IAC5E,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACnC,KAAK,OAAO;YACV,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,SAA6B,EAC7B,IAAY,EACZ,GAAc,EACd,SAAiB;IAEjB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC;QAChD,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE,SAAS,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAuBD,qCAAqC;AACrC,MAAM,OAAO,iBAAiB;IACnB,KAAK,CAAS;IACd,SAAS,CAAqB;IACtB,UAAU,CAAY;IACtB,iBAAiB,CAAoB;IACrC,OAAO,CAAqB;IAC5B,OAAO,CAAqB;IAC5B,KAAK,CAAqB;IAC1B,GAAG,CAAe;IAEnC,YAAY,OAAiC;QAC3C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,0BAA0B,CAAC;QACjF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED,kEAAkE;IAClE,IAAI,CAAC,KAAyB;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxF,MAAM,aAAa,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,OAAO,GAA2B,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,CAAC;QAE9F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAoB;YAC9B,OAAO;YACP,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC;SAC7C,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC9D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAExD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC1C,MAAM,IAAI,GAAG,kBAAkB,CAAC;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS;YACT,SAAS;YACT,OAAO;YACP,UAAU;YACV,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACxF,OAAO;YACL,gBAAgB,EAAE,aAAa;YAC/B,iBAAiB,EAAE,oBAAoB,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC;YACnE,WAAW,EAAE,SAAS,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG;SACtD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,SAA6B,EAAE,KAAmC;IAC1F,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAkCD;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA+B;IACxE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,IAAI,GAAG,KAAK,CAAC,mBAAmB,IAAI,GAAG,CAAC;IAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,sBAAsB,IAAI,GAAG,CAAC;IAEnD,MAAM,oBAAoB,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAC3E,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,eAAe,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC5F,CAAC;IAED,IAAI,OAA+B,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,GAAG,mBAAmB,CAAC,oBAAoB,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE,8BAA8B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACzF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IAClG,CAAC;IACD,MAAM,eAAe,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAE9D,IAAI,YAAmD,CAAC;IACxD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,cAAc,KAAK,SAAS;YAAE,SAAS;QAC3C,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC7B,IAAI,YAAY,KAAK,SAAS;YAAE,YAAY,GAAG,MAAM,CAAC;IACxD,CAAC;IACD,OAAO,CACL,YAAY,IAAI;QACd,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,sBAAsB;QAC5B,MAAM,EAAE,kDAAkD;KAC3D,CACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,KAA2B,EAC3B,cAAsB,EACtB,KAA+B,EAC/B,GAAW,EACX,IAAY,EACZ,MAAc;IAEd,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;IACjC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,kBAAkB,KAAK,GAAG,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE,oCAAoC,KAAK,CAAC,MAAM,CAAC,SAAS,GAAG;SACtE,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE,kBAAkB,KAAK,CAAC,MAAM,CAAC,SAAS,wBAAwB,KAAK,YAAY;SAC1F,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC;IAE7C,gDAAgD;IAChD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;YACtC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;YAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACtF,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,kBAAkB,CAAC;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sBAAsB;YAC5B,MAAM,EAAE,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC7F,CAAC;IACJ,CAAC;IAED,oDAAoD;IACpD,IAAI,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAChD,MAAM,wBAAwB,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;QAC9E,IAAI,wBAAwB,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;QAChH,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,wBAAwB,CAAC,EAAE,CAAC;YAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;IAC9F,CAAC;IAED,wCAAwC;IACxC,8CAA8C;IAC9C,4CAA4C;IAC5C,0CAA0C;IAC1C,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QACxF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AACpF,CAAC;AAED,0CAA0C;AAC1C,SAAS,qBAAqB,CAAC,GAAuB;IACpD,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,mBAAmB,CAAC;QACzB,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/trust/identity/nonce.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 防重放 nonce 存储（RFC 9421 created/expires 之外的第二道防线）。
+ *
+ * created/expires 只证明签名在时间窗口内有效；nonce 让同一签名（相同 keyid +
+ * nonce）在窗口内也只能使用一次。验签方把 (keyid, nonce) 记入 nonceStore，
+ * 重复出现即 replay_detected。
+ */
+export interface NonceStore {
+    /**
+     * 记录一次 nonce 使用。返回 true 表示首次见到（fresh）；false 表示已用过
+     * （replay）。实现必须原子（同一 key 并发只会有一个 true）。
+     */
+    checkAndSet(key: string): boolean;
+}
+/**
+ * 进程内 nonce 缓存。适合单实例验证方；多实例部署应换共享存储（Redis 等）。
+ * 达到上限时逐 key 淘汰最旧一条（FIFO，评审项 H6）：整体清空会让时钟窗口
+ * 内**全部**已捕获 nonce 同时失效——此前配合"验签前消费"，攻击者用伪造
+ * 签名填满 store 触发清空后，真实捕获的签名可被重放；FIFO 只挤出最旧一条
+ * （最早的 nonce 最接近过期），配合验签后消费使 store 只能被真实签名写入。
+ */
+export declare class InMemoryNonceStore implements NonceStore {
+    /** key → 记录时间（ms）。Map 迭代序 = 插入序，满额时删除首条。 */
+    private readonly entries;
+    private readonly maxEntries;
+    private readonly now;
+    constructor(maxEntries?: number, now?: () => number);
+    checkAndSet(key: string): boolean;
+    get size(): number;
+}

package/dist/trust/identity/nonce.js

@@ -0,0 +1,50 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 进程内 nonce 缓存。适合单实例验证方；多实例部署应换共享存储（Redis 等）。
+ * 达到上限时逐 key 淘汰最旧一条（FIFO，评审项 H6）：整体清空会让时钟窗口
+ * 内**全部**已捕获 nonce 同时失效——此前配合"验签前消费"，攻击者用伪造
+ * 签名填满 store 触发清空后，真实捕获的签名可被重放；FIFO 只挤出最旧一条
+ * （最早的 nonce 最接近过期），配合验签后消费使 store 只能被真实签名写入。
+ */
+export class InMemoryNonceStore {
+    /** key → 记录时间（ms）。Map 迭代序 = 插入序，满额时删除首条。 */
+    entries = new Map();
+    maxEntries;
+    now;
+    constructor(maxEntries = 10_000, now = Date.now) {
+        if (!Number.isInteger(maxEntries) || maxEntries <= 0) {
+            throw new Error("InMemoryNonceStore: maxEntries must be a positive integer");
+        }
+        this.maxEntries = maxEntries;
+        this.now = now;
+    }
+    checkAndSet(key) {
+        if (this.entries.has(key))
+            return false;
+        if (this.entries.size >= this.maxEntries) {
+            const oldest = this.entries.keys().next().value;
+            if (oldest !== undefined)
+                this.entries.delete(oldest);
+        }
+        this.entries.set(key, this.now());
+        return true;
+    }
+    get size() {
+        return this.entries.size;
+    }
+}
+//# sourceMappingURL=nonce.js.map

package/dist/trust/identity/nonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.js","sourceRoot":"","sources":["../../../src/trust/identity/nonce.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAkBH;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IAC7B,4CAA4C;IAC3B,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,UAAU,CAAS;IACnB,GAAG,CAAe;IAEnC,YAAY,UAAU,GAAG,MAAM,EAAE,MAAoB,IAAI,CAAC,GAAG;QAC3D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,WAAW,CAAC,GAAW;QACrB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YACtE,IAAI,MAAM,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF"}

package/dist/trust/identity/signature-base.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * RFC 9421 HTTP Message Signatures — signature-base 构造与 Signature-Input 解析。
+ *
+ * 覆盖组件（covered components）为请求上的可签名元素：派生组件（@method /
+ * @target-uri / @authority / @scheme / @path / @query）与 HTTP 字段名
+ * （小写，如 content-digest）。签名方按声明顺序把每个组件渲染成一行，最后追加
+ * `"@signature-params"` 行（组件列表 + 参数字典），每行以 \n 结尾 —— 这就是
+ * signature base（RFC 9421 §2.1）。
+ *
+ * 本模块只做纯函数变换：不接触密钥、不接触时钟。密钥与验签在 message-signature.ts；
+ * 重放窗口/策略在 trust-policy.ts / auth-verifier.ts。
+ */
+/** 覆盖组件：派生组件 @xxx，或小写 HTTP 字段名。 */
+export type CoveredComponent = "@method" | "@target-uri" | "@authority" | "@scheme" | "@path" | "@query" | (string & {});
+/** @signature-params 参数字典（RFC 9421 §2.2）。 */
+export interface SignatureParams {
+    /** 整数 unix 秒；签名创建时间。 */
+    created?: number;
+    /** 整数 unix 秒；签名过期时间（可选）。 */
+    expires?: number;
+    /** 防重放 nonce（可选）。 */
+    nonce?: string;
+    /** 签名者 keyid。 */
+    keyid?: string;
+    /** RFC 9421 alg 名（ed25519 / ecdsa-p256-sha256）。 */
+    algorithm?: string;
+    /** 应用层 tag（可选，本实现透传）。 */
+    tag?: string;
+}
+export interface ParsedSignatureInput {
+    /** 签名标签（如 sig1）。 */
+    label: string;
+    /** 覆盖组件（按声明顺序）。 */
+    components: string[];
+    params: SignatureParams;
+}
+export interface SignatureBaseInput {
+    method: string;
+    /** 绝对 target URI（或 origin-form 请求目标）。 */
+    targetUri: string;
+    /** @authority 值（Host 头）。 */
+    authority: string;
+    /** 请求头（小写名）。 */
+    headers: Record<string, string | string[] | undefined>;
+    /** 覆盖组件（按声明顺序）。 */
+    components: string[];
+    params: SignatureParams;
+}
+/** signature-base 构造/解析失败。 */
+export declare class SignatureBaseError extends Error {
+    readonly code: "malformed" | "missing_component";
+    constructor(code: SignatureBaseError["code"], message: string);
+}
+/** 取单值 HTTP 字段；多值时按 RFC 9421 §2.1 用 ", " 连接。 */
+export declare function headerValue(headers: Record<string, string | string[] | undefined>, name: string): string | undefined;
+/** 参数字典序列化：RFC 9421 §2.2 固定顺序 created, expires, nonce, keyid, alg, tag。 */
+export declare function serializeParams(params: SignatureParams): string;
+/** 格式化一条 Signature-Input 项：`label=(comps)params`。 */
+export declare function formatSignatureInput(label: string, components: string[], params: SignatureParams): string;
+/** 解析 Signature-Input 头，返回全部签名项（可能多个）。 */
+export declare function parseSignatureInput(value: string): ParsedSignatureInput[];
+/** 解析 Signature 头：`label=:base64:` 序列。 */
+export declare function parseSignatureHeader(value: string): Record<string, Buffer>;
+/**
+ * 构造 signature base（RFC 9421 §2.1）。
+ * 每个覆盖组件渲染一行（`"name": value`），最后追加 `"@signature-params"` 行。
+ * 覆盖的字段缺失时抛 SignatureBaseError（fail-closed：不能对不存在的组件签名）。
+ */
+export declare function buildSignatureBase(input: SignatureBaseInput): string;