@ixo/openhands-sdk 0.0.0-stage → 0.2.0

package/dist/cjs/udid/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../../src/udid/key.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAoCH,gCAEC;AAED,8BAUC;AAhDD,2CAA+E;AAC/E,2CAAuC;AAEvC,4EAA4E;AAC5E,MAAM,YAAY,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAEtI;;;;;;GAMG;AACH,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAU,EAAE;IAC3C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,CAAC;IACpB,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,IAAI;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAChH,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC,CAAC;AA0CO,wBAAM;AA3Bf,wEAAwE;AACxE,SAAgB,UAAU,CAAC,QAAgB;IACzC,OAAO,IAAA,eAAU,EAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5E,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,QAAgB;IAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,GAAmB,MAAM,gBAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IACvD,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC3B,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,KAAqB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACvH,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,YAA4B,CAAC,CAAC,CAAC;IACnG,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,IAAA,oBAAQ,EAAC,YAAY,CAAC,EAAE,IAAI,EAAE,CAAC;AAC1G,CAAC;AAED,0DAA0D;AACnD,MAAM,SAAS,GAAG,CAAC,GAA4C,EAAE,EAAE,CAAC,CAAC;IAC1E,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,GAAG,EAAE,KAAc;IACnB,GAAG,EAAE,SAAkB;IACvB,GAAG,EAAE,OAAgB;IACrB,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;IAC3B,MAAM,EAAE,IAAI;CACb,CAAC,CAAC;AAPU,QAAA,SAAS,aAOnB"}

package/dist/cjs/udid/resolve.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Whose key signed this, asked of whoever signed it.
+ *
+ * A verifier configured with one issuer's address can check that issuer and
+ * nobody else — which is fine until somebody else's oracle rules on one of
+ * your claims, and then every surface you own quietly fails to read a
+ * perfectly valid verdict. So resolution starts from the determination's own
+ * `iss` and dispatches by DID method.
+ *
+ * Two methods matter today, and they agree on nothing:
+ *
+ *   did:ixo:<address>  the chain's resolver · Ed25519VerificationKey2018
+ *                      · publicKeyBase58                        (our checker)
+ *   did:web:<domain>   https://<domain>/.well-known/did.json
+ *                      · Ed25519VerificationKey2020
+ *                      · publicKeyMultibase (z6Mk…)      (ixo's evals engine)
+ *
+ * **`assertionMethod` only.** A DID document may carry Ed25519 keys for other
+ * jobs — a UCAN key for capability tokens is one, and the engine's own chain
+ * identity carries exactly that shape. A key minted to sign a capability must
+ * never pass as one that signs verdicts, and the document already says which
+ * is which.
+ */
+export interface AssertingKey {
+    /** The verification method's own id, so a report can name what verified. */
+    id: string;
+    raw: Uint8Array;
+    how: string;
+}
+export interface DidDocument {
+    id?: string;
+    verificationMethod?: {
+        id: string;
+        type?: string;
+        publicKeyBase58?: string;
+        publicKeyMultibase?: string;
+    }[];
+    assertionMethod?: (string | {
+        id?: string;
+    })[];
+}
+/** base58btc → bytes, minus the two-byte `ed25519-pub` multicodec prefix. */
+export declare function fromMultibase(text: string): Uint8Array | null;
+/**
+ * The asserting Ed25519 keys of a DID document, whatever shape it wrote them
+ * in. Pure — the caller fetches, so this is testable without a network.
+ */
+export declare function assertingKeys(document: DidDocument | null | undefined): AssertingKey[];
+export interface ResolveOptions {
+    network?: string;
+    fetchJson?: (url: string) => Promise<unknown>;
+}
+/** Where a DID's document is served. Exported so a caller can say so in a log. */
+export declare function documentUrl(did: string, network?: string): string;
+export declare function keysFor(did: string, options?: ResolveOptions): Promise<AssertingKey[]>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/cjs/udid/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/udid/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAWH,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,UAAU,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,kBAAkB,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5G,eAAe,CAAC,EAAE,CAAC,MAAM,GAAG;QAAE,EAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;CAChD;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAS7D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,WAAW,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,EAAE,CA6BtF;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/C;AAkCD,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,SAAY,GAAG,MAAM,CAWpE;AAgBD,wBAAsB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAoBhG"}

package/dist/cjs/udid/resolve.js

@@ -0,0 +1,168 @@
+"use strict";
+/**
+ * Whose key signed this, asked of whoever signed it.
+ *
+ * A verifier configured with one issuer's address can check that issuer and
+ * nobody else — which is fine until somebody else's oracle rules on one of
+ * your claims, and then every surface you own quietly fails to read a
+ * perfectly valid verdict. So resolution starts from the determination's own
+ * `iss` and dispatches by DID method.
+ *
+ * Two methods matter today, and they agree on nothing:
+ *
+ *   did:ixo:<address>  the chain's resolver · Ed25519VerificationKey2018
+ *                      · publicKeyBase58                        (our checker)
+ *   did:web:<domain>   https://<domain>/.well-known/did.json
+ *                      · Ed25519VerificationKey2020
+ *                      · publicKeyMultibase (z6Mk…)      (ixo's evals engine)
+ *
+ * **`assertionMethod` only.** A DID document may carry Ed25519 keys for other
+ * jobs — a UCAN key for capability tokens is one, and the engine's own chain
+ * identity carries exactly that shape. A key minted to sign a capability must
+ * never pass as one that signs verdicts, and the document already says which
+ * is which.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fromMultibase = fromMultibase;
+exports.assertingKeys = assertingKeys;
+exports.documentUrl = documentUrl;
+exports.keysFor = keysFor;
+const base58_ts_1 = require("./base58.js");
+const network_ts_1 = require("../network.js");
+const RESOLVERS = {
+    testnet: "https://resolver.testnet.ixo.earth/1.0/identifiers",
+    devnet: "https://resolver.devnet.ixo.earth/1.0/identifiers",
+    mainnet: "https://resolver.ixo.world/1.0/identifiers"
+};
+/** base58btc → bytes, minus the two-byte `ed25519-pub` multicodec prefix. */
+function fromMultibase(text) {
+    if (!text.startsWith("z"))
+        return null;
+    let raw;
+    try {
+        raw = (0, base58_ts_1.fromBase58)(text.slice(1));
+    }
+    catch {
+        return null;
+    }
+    return raw[0] === 0xed && raw[1] === 0x01 ? raw.slice(2) : null;
+}
+/**
+ * The asserting Ed25519 keys of a DID document, whatever shape it wrote them
+ * in. Pure — the caller fetches, so this is testable without a network.
+ */
+function assertingKeys(document) {
+    /* A relationship entry may be a relative DID URL (`#keys-1`) — did:web
+       documents commonly write them that way — which names the same method as
+       `<document id>#keys-1`. Both forms are read; neither is guessed at when
+       the document carries no id to resolve against. */
+    const absolute = (id) => (id.startsWith("#") && document?.id ? `${document.id}${id}` : id);
+    const asserting = new Set((document?.assertionMethod ?? [])
+        .map((one) => (typeof one === "string" ? one : (one?.id ?? "")))
+        .filter(Boolean)
+        .map(absolute));
+    const out = [];
+    for (const method of document?.verificationMethod ?? []) {
+        if (!asserting.has(absolute(method.id)))
+            continue;
+        if (method.type === "Ed25519VerificationKey2018" && method.publicKeyBase58) {
+            try {
+                const raw = (0, base58_ts_1.fromBase58)(method.publicKeyBase58);
+                if (raw.length === 32)
+                    out.push({ id: method.id, raw, how: "Ed25519VerificationKey2018 · base58" });
+            }
+            catch {
+                /* An unreadable method is one we cannot check against. Skip it. */
+            }
+        }
+        if (method.type === "Ed25519VerificationKey2020" && method.publicKeyMultibase) {
+            const raw = fromMultibase(method.publicKeyMultibase);
+            if (raw?.length === 32)
+                out.push({ id: method.id, raw, how: "Ed25519VerificationKey2020 · multibase" });
+        }
+    }
+    return out;
+}
+const defaultFetch = async (url) => {
+    const answer = await fetch(url, { signal: AbortSignal.timeout(20_000) });
+    return answer.ok ? await answer.json() : null;
+};
+/*
+ * The shape a did:web is allowed to have before it becomes a URL.
+ *
+ * `iss` is read off a document anybody can publish, and `documentUrl` turns it
+ * into a request this server makes. Without a grammar, `did:web:a?b`,
+ * `did:web:user@host`, `did:web:host:..:..` and `did:web:169.254.169.254` are
+ * all "valid" and each one points the fetch somewhere the spec never meant —
+ * a query, a userinfo, a path walk, a metadata endpoint. So: a hostname of
+ * RFC 1123 labels whose last label is not all digits (an IP literal is not a
+ * domain), an optional percent-encoded port, and path segments of unreserved
+ * characters only. Anything else is not a did:web this resolver will fetch.
+ */
+const HOST_LABEL = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i;
+const PATH_SEGMENT = /^[a-z0-9._~-]+$/i;
+function didWebUrl(did) {
+    const [host, ...path] = did.slice("did:web:".length).split(":");
+    const [hostname, port, ...more] = (host ?? "").split("%3A");
+    const labels = (hostname ?? "").split(".");
+    if (more.length > 0 || !labels.every((label) => HOST_LABEL.test(label)))
+        throw new Error(`not a did:web hostname: ${did}`);
+    if (/^\d+$/.test(labels[labels.length - 1] ?? ""))
+        throw new Error(`a did:web must name a domain, not an address: ${did}`);
+    if (port !== undefined && !/^\d{1,5}$/.test(port))
+        throw new Error(`not a did:web port: ${did}`);
+    if (!path.every((segment) => PATH_SEGMENT.test(segment) && segment !== "." && segment !== ".."))
+        throw new Error(`not a did:web path: ${did}`);
+    const origin = `https://${hostname}${port ? `:${port}` : ""}`;
+    return path.length === 0 ? `${origin}/.well-known/did.json` : `${origin}/${path.join("/")}/did.json`;
+}
+/** Where a DID's document is served. Exported so a caller can say so in a log. */
+function documentUrl(did, network = "testnet") {
+    if (did.startsWith("did:web:"))
+        return didWebUrl(did);
+    if (did.startsWith("did:ixo:")) {
+        /* No testnet fallback for a name we do not know: "Mainnet" resolving a
+           mainnet issuer against the testnet resolver reads as "no such key",
+           which fails verification for the wrong reason (scale review D23). */
+        const resolver = RESOLVERS[network];
+        if (!resolver)
+            throw new Error(`no ixo resolver for network ${JSON.stringify(network)}; expected one of ${Object.keys(RESOLVERS).join(", ")}`);
+        return `${resolver}/${encodeURIComponent(did)}`;
+    }
+    throw new Error(`no resolver for the DID method in ${did}`);
+}
+/*
+ * One document per issuer per few minutes, per process.
+ *
+ * A credential cites up to fifty determinations and nearly all of them name
+ * the same issuer; resolving that issuer fifty times per request is fifty
+ * round trips to the resolver for one answer. Short-lived, so a rotated key
+ * is seen within minutes, and bounded, so a stream of unknown issuers cannot
+ * grow it without limit. Only the default fetch is cached — an injected
+ * reader is a test's, and a test wants what it injected.
+ */
+const DOCUMENT_TTL_MS = 5 * 60_000;
+const DOCUMENT_CACHE_MAX = 500;
+const documents = new Map();
+async function keysFor(did, options = {}) {
+    /* Unset or empty is the documented default (testnet); `network()` refuses any
+       other value that is not a network. Only a did:ixo needs the network, so
+       a did:web still resolves under a mis-set one, as it always did. */
+    const network = options.network ?? (did.startsWith("did:ixo:") ? (0, network_ts_1.network)() : "testnet");
+    const url = documentUrl(did, network);
+    const cacheable = !options.fetchJson;
+    const held = cacheable ? documents.get(url) : undefined;
+    if (held && Date.now() - held.at < DOCUMENT_TTL_MS)
+        return held.keys;
+    const read = options.fetchJson ?? defaultFetch;
+    const body = (await read(url));
+    /* The chain's resolver wraps it; did:web serves it bare. */
+    const keys = assertingKeys(body?.didDocument ?? body);
+    if (cacheable && keys.length > 0) {
+        if (documents.size >= DOCUMENT_CACHE_MAX)
+            documents.delete(documents.keys().next().value);
+        documents.set(url, { at: Date.now(), keys });
+    }
+    return keys;
+}
+//# sourceMappingURL=resolve.js.map

package/dist/cjs/udid/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/udid/resolve.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;AAyBH,sCASC;AAMD,sCA6BC;AAwCD,kCAWC;AAgBD,0BAoBC;AA1JD,2CAAyC;AACzC,8CAA6D;AAE7D,MAAM,SAAS,GAA2B;IACxC,OAAO,EAAE,oDAAoD;IAC7D,MAAM,EAAE,mDAAmD;IAC3D,OAAO,EAAE,4CAA4C;CACtD,CAAC;AAeF,6EAA6E;AAC7E,SAAgB,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,GAAe,CAAC;IACpB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,sBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;;;GAGG;AACH,SAAgB,aAAa,CAAC,QAAwC;IACpE;;;wDAGoD;IACpD,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3G,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;SAC/D,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,QAAQ,CAAC,CACjB,CAAC;IACF,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,kBAAkB,IAAI,EAAE,EAAE,CAAC;QACxD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAE,SAAS;QAClD,IAAI,MAAM,CAAC,IAAI,KAAK,4BAA4B,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;YAC3E,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAA,sBAAU,EAAC,MAAM,CAAC,eAAe,CAAC,CAAC;gBAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;oBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,qCAAqC,EAAE,CAAC,CAAC;YACtG,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,4BAA4B,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC9E,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACrD,IAAI,GAAG,EAAE,MAAM,KAAK,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,wCAAwC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,MAAM,YAAY,GAAG,KAAK,EAAE,GAAW,EAAoB,EAAE;IAC3D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,GAAG,yCAAyC,CAAC;AAC7D,MAAM,YAAY,GAAG,kBAAkB,CAAC;AAExC,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IAC3H,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,GAAG,EAAE,CAAC,CAAC;IAC3H,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IACjG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IAC/I,MAAM,MAAM,GAAG,WAAW,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,uBAAuB,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;AACvG,CAAC;AAED,kFAAkF;AAClF,SAAgB,WAAW,CAAC,GAAW,EAAE,OAAO,GAAG,SAAS;IAC1D,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B;;+EAEuE;QACvE,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,qBAAqB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/I,OAAO,GAAG,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC;AACnC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAgD,CAAC;AAEnE,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,UAA0B,EAAE;IACrE;;yEAEqE;IACrE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAA,oBAAiB,GAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAClG,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;IACrC,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,eAAe;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IAErE,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAyD,CAAC;IACvF,4DAA4D;IAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,CAAC;IAEtD,IAAI,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,SAAS,CAAC,IAAI,IAAI,kBAAkB;YAAE,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;QACpG,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cjs/udid/schema.d.ts

@@ -0,0 +1,150 @@
+/**
+ * What a determination is allowed to say.
+ *
+ * ixo's `oracle.udid.ixo.v1` schema, mirrored in Zod so the payload is
+ * validated **before** it is signed. A payload that fails our own schema is a
+ * bug, and signing it would put that bug on chain behind a signature that
+ * makes it look deliberate.
+ *
+ * The top level is strict on purpose: an unknown key at the root is either a
+ * typo or a dialect drift, and both are worth failing loudly. Everything
+ * project-specific lives in one place — the `ixo` block — which is the escape
+ * hatch the standard reserves for exactly this.
+ */
+import { z } from "zod";
+/** The normative outcome codes. 5 is "a person should look at this". */
+export declare const OUTCOME: {
+    readonly APPROVED: 1;
+    readonly REJECTED: 2;
+    readonly DISPUTED: 3;
+    readonly INVALIDATED: 4;
+    readonly FLAGGED: 5;
+};
+/**
+ * The environment enum the standard actually defines.
+ *
+ * Two values, and neither of them is `testnet`. Everything that is not the
+ * real chain is a simulation, and a determination that says so cannot later
+ * be screenshotted as if it moved real money.
+ */
+export declare const ENV: readonly ["production", "simulation"];
+export declare const isAllowedOutBindingKey: (key: string) => boolean;
+export declare const CoinSchema: z.ZodObject<{
+    denom: z.ZodString;
+    amount: z.ZodString;
+}, z.core.$strip>;
+export declare const UdidPayloadSchema: z.ZodObject<{
+    iss: z.ZodString;
+    sub: z.ZodString;
+    aud: z.ZodString;
+    iat: z.ZodNumber;
+    jti: z.ZodString;
+    kind: z.ZodLiteral<"oracle.eval.v1">;
+    ver: z.ZodLiteral<1>;
+    sch: z.ZodLiteral<"oracle.udid.ixo.v1">;
+    act: z.ZodObject<{
+        cap: z.ZodString;
+        rub: z.ZodObject<{
+            id: z.ZodString;
+            digest: z.ZodString;
+        }, z.core.$strip>;
+        meta: z.ZodObject<{
+            env: z.ZodEnum<{
+                production: "production";
+                simulation: "simulation";
+            }>;
+            evaluator_version: z.ZodString;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    res: z.ZodObject<{
+        outcome: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>, z.ZodLiteral<4>, z.ZodLiteral<5>]>;
+        patch: z.ZodUnion<readonly [z.ZodObject<{}, z.core.$strict>, z.ZodObject<{
+            evaluationStatus: z.ZodNumber;
+            amount: z.ZodArray<z.ZodObject<{
+                denom: z.ZodString;
+                amount: z.ZodString;
+            }, z.core.$strip>>;
+        }, z.core.$strict>]>;
+        trace: z.ZodObject<{
+            uri: z.ZodString;
+            cid: z.ZodString;
+        }, z.core.$strip>;
+        reason: z.ZodString;
+    }, z.core.$strip>;
+    out: z.ZodObject<{
+        summary: z.ZodString;
+        bindings: z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber]>>;
+    }, z.core.$strip>;
+    ixo: z.ZodObject<{
+        cellNode: z.ZodString;
+        oracleDid: z.ZodString;
+        collectionId: z.ZodString;
+        claimId: z.ZodString;
+        entityDid: z.ZodString;
+        agentAddress: z.ZodString;
+        agentDid: z.ZodString;
+        network: z.ZodString;
+        verdict: z.ZodString;
+        reasonCode: z.ZodNumber;
+        criteria: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            kind: z.ZodString;
+            outcome: z.ZodEnum<{
+                unverifiable: "unverifiable";
+                pass: "pass";
+                fail: "fail";
+            }>;
+        }, z.core.$strip>>;
+        receipt: z.ZodString;
+    }, z.core.$catchall<z.ZodUnknown>>;
+}, z.core.$strict>;
+export type UdidPayload = z.infer<typeof UdidPayloadSchema>;
+/**
+ * What we accept from **anybody**, as opposed to what we ourselves emit.
+ *
+ * The schema above is our profile: strict, opinionated, and correct for the
+ * bytes we sign. Using it to *verify* was a mistake that only showed up when
+ * ixo's own evals engine was put beside us — it emits the same `kind` and
+ * `ver` under a different `sch`, with no `out`, no `act.meta`, and
+ * `res.trace.digest` where we write `res.trace.cid`. Every field of that is
+ * legitimate: `sch` is a profile marker over a shared base, and their schema
+ * says so in as many words.
+ *
+ * So this is the base, and only the base. Anything a determination is allowed
+ * to add rides through `passthrough`. Both our payload and the engine's
+ * validate against ixo's published `udid-payload-v1` unchanged — the base is
+ * not ours to invent, and the conformance test holds this one to it.
+ *
+ * The fields that stay required are the ones a verifier cannot do without:
+ * who signed, about what, in what scope, when, and what was decided.
+ */
+export declare const UdidBaseSchema: z.ZodObject<{
+    iss: z.ZodString;
+    sub: z.ZodString;
+    aud: z.ZodString;
+    iat: z.ZodNumber;
+    jti: z.ZodOptional<z.ZodString>;
+    kind: z.ZodLiteral<"oracle.eval.v1">;
+    ver: z.ZodLiteral<1>;
+    sch: z.ZodOptional<z.ZodString>;
+    act: z.ZodObject<{
+        cap: z.ZodString;
+        rub: z.ZodObject<{
+            id: z.ZodString;
+        }, z.core.$loose>;
+    }, z.core.$loose>;
+    res: z.ZodObject<{
+        outcome: z.ZodNumber;
+        patch: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        trace: z.ZodOptional<z.ZodObject<{
+            uri: z.ZodString;
+        }, z.core.$loose>>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>;
+    out: z.ZodOptional<z.ZodObject<{
+        summary: z.ZodString;
+    }, z.core.$loose>>;
+    ixo: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$loose>;
+export type UdidBase = z.infer<typeof UdidBaseSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/cjs/udid/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/udid/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wEAAwE;AACxE,eAAO,MAAM,OAAO;;;;;;CAAiF,CAAC;AAEtG;;;;;;GAMG;AACH,eAAO,MAAM,GAAG,uCAAwC,CAAC;AAczD,eAAO,MAAM,sBAAsB,GAAI,KAAK,MAAM,KAAG,OAAgC,CAAC;AAEtF,eAAO,MAAM,UAAU;;;iBAA4E,CAAC;AAEpG,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgE1B,CAAC;AAEL,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4BX,CAAC;AAEjB,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/cjs/udid/schema.js

@@ -0,0 +1,155 @@
+"use strict";
+/**
+ * What a determination is allowed to say.
+ *
+ * ixo's `oracle.udid.ixo.v1` schema, mirrored in Zod so the payload is
+ * validated **before** it is signed. A payload that fails our own schema is a
+ * bug, and signing it would put that bug on chain behind a signature that
+ * makes it look deliberate.
+ *
+ * The top level is strict on purpose: an unknown key at the root is either a
+ * typo or a dialect drift, and both are worth failing loudly. Everything
+ * project-specific lives in one place — the `ixo` block — which is the escape
+ * hatch the standard reserves for exactly this.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UdidBaseSchema = exports.UdidPayloadSchema = exports.CoinSchema = exports.isAllowedOutBindingKey = exports.ENV = exports.OUTCOME = void 0;
+const zod_1 = require("zod");
+/** The normative outcome codes. 5 is "a person should look at this". */
+exports.OUTCOME = { APPROVED: 1, REJECTED: 2, DISPUTED: 3, INVALIDATED: 4, FLAGGED: 5 };
+/**
+ * The environment enum the standard actually defines.
+ *
+ * Two values, and neither of them is `testnet`. Everything that is not the
+ * real chain is a simulation, and a determination that says so cannot later
+ * be screenshotted as if it moved real money.
+ */
+exports.ENV = ["production", "simulation"];
+const CriterionOutcome = zod_1.z.enum(["pass", "fail", "unverifiable"]);
+/**
+ * What `out.bindings` may name.
+ *
+ * `sub`, or a dotted path under `res` — and nothing else. `out` is narrative;
+ * bindings exist so a reader can check that the narrative echoes the result
+ * rather than asserting anything of its own. Letting it point at `act.cap` or
+ * `iat` would make the prose load-bearing, which is exactly what the standard
+ * is written to prevent. The pattern is ixo's own, character for character.
+ */
+const OUT_BINDING = /^(sub|res(\.[a-zA-Z0-9_]+)+)$/;
+const isAllowedOutBindingKey = (key) => OUT_BINDING.test(key);
+exports.isAllowedOutBindingKey = isAllowedOutBindingKey;
+exports.CoinSchema = zod_1.z.object({ denom: zod_1.z.string().min(1), amount: zod_1.z.string().regex(/^\d+$/) });
+exports.UdidPayloadSchema = zod_1.z
+    .object({
+    iss: zod_1.z.string().min(1),
+    sub: zod_1.z.string().min(1),
+    /** Replay-proof scope. Anything the verifier can pin an expectation to. */
+    aud: zod_1.z.string().min(1),
+    iat: zod_1.z.number().int().positive(),
+    jti: zod_1.z.string().min(1),
+    kind: zod_1.z.literal("oracle.eval.v1"),
+    ver: zod_1.z.literal(1),
+    sch: zod_1.z.literal("oracle.udid.ixo.v1"),
+    act: zod_1.z.object({
+        /** Who authorised this evaluation — the ask's entity. */
+        cap: zod_1.z.string().min(1),
+        rub: zod_1.z.object({ id: zod_1.z.string().min(1), digest: zod_1.z.string().min(1) }),
+        meta: zod_1.z.object({ env: zod_1.z.enum(exports.ENV), evaluator_version: zod_1.z.string().min(1) })
+    }),
+    res: zod_1.z.object({
+        outcome: zod_1.z.union([zod_1.z.literal(1), zod_1.z.literal(2), zod_1.z.literal(3), zod_1.z.literal(4), zod_1.z.literal(5)]),
+        /** What the chain was asked to write. Empty when nothing was decided. */
+        patch: zod_1.z.union([
+            zod_1.z.object({}).strict(),
+            zod_1.z.object({ evaluationStatus: zod_1.z.number().int(), amount: zod_1.z.array(exports.CoinSchema) }).strict()
+        ]),
+        trace: zod_1.z.object({ uri: zod_1.z.string().url(), cid: zod_1.z.string().min(1) }),
+        reason: zod_1.z.string().min(1)
+    }),
+    out: zod_1.z.object({
+        summary: zod_1.z.string().min(1),
+        bindings: zod_1.z.record(zod_1.z.string(), zod_1.z.union([zod_1.z.string(), zod_1.z.number()]))
+    }),
+    ixo: zod_1.z
+        .object({
+        /* The origin the receipt was published to; the key keeps its old name
+           because every verifier of this schema reads `ixo.cellNode`. */
+        cellNode: zod_1.z.string().url(),
+        oracleDid: zod_1.z.string().min(1),
+        collectionId: zod_1.z.string().min(1),
+        claimId: zod_1.z.string().min(1),
+        entityDid: zod_1.z.string().min(1),
+        agentAddress: zod_1.z.string().min(1),
+        agentDid: zod_1.z.string().min(1),
+        network: zod_1.z.string().min(1),
+        verdict: zod_1.z.string().min(1),
+        reasonCode: zod_1.z.number().int(),
+        criteria: zod_1.z.array(zod_1.z.object({ id: zod_1.z.string(), kind: zod_1.z.string(), outcome: CriterionOutcome })),
+        receipt: zod_1.z.string().min(1)
+    })
+        /* The block the standard reserves for the project. Open, because a
+           campaign carries its own words here and this file must not become
+           the thing you edit to add one. */
+        .catchall(zod_1.z.unknown())
+})
+    .strict()
+    .superRefine((payload, ctx) => {
+    for (const key of Object.keys(payload.out.bindings)) {
+        if (!(0, exports.isAllowedOutBindingKey)(key)) {
+            ctx.addIssue({ code: "custom", path: ["out", "bindings", key], message: `out.bindings may not name ${key}` });
+        }
+    }
+    /* Flagged decides nothing, so it must not carry a patch that says it did. */
+    if (payload.res.outcome === exports.OUTCOME.FLAGGED && Object.keys(payload.res.patch).length > 0) {
+        ctx.addIssue({ code: "custom", path: ["res", "patch"], message: "a flagged determination patches nothing" });
+    }
+});
+/**
+ * What we accept from **anybody**, as opposed to what we ourselves emit.
+ *
+ * The schema above is our profile: strict, opinionated, and correct for the
+ * bytes we sign. Using it to *verify* was a mistake that only showed up when
+ * ixo's own evals engine was put beside us — it emits the same `kind` and
+ * `ver` under a different `sch`, with no `out`, no `act.meta`, and
+ * `res.trace.digest` where we write `res.trace.cid`. Every field of that is
+ * legitimate: `sch` is a profile marker over a shared base, and their schema
+ * says so in as many words.
+ *
+ * So this is the base, and only the base. Anything a determination is allowed
+ * to add rides through `passthrough`. Both our payload and the engine's
+ * validate against ixo's published `udid-payload-v1` unchanged — the base is
+ * not ours to invent, and the conformance test holds this one to it.
+ *
+ * The fields that stay required are the ones a verifier cannot do without:
+ * who signed, about what, in what scope, when, and what was decided.
+ */
+exports.UdidBaseSchema = zod_1.z
+    .object({
+    iss: zod_1.z.string().min(1),
+    sub: zod_1.z.string().min(1),
+    aud: zod_1.z.string().min(1),
+    iat: zod_1.z.number().int().positive(),
+    jti: zod_1.z.string().min(1).optional(),
+    kind: zod_1.z.literal("oracle.eval.v1"),
+    ver: zod_1.z.literal(1),
+    /** A profile marker, not a gate. We read it; we never require our own. */
+    sch: zod_1.z.string().min(1).optional(),
+    act: zod_1.z
+        .object({
+        cap: zod_1.z.string().min(1),
+        rub: zod_1.z.object({ id: zod_1.z.string().min(1) }).passthrough()
+    })
+        .passthrough(),
+    res: zod_1.z
+        .object({
+        outcome: zod_1.z.number().int().min(0).max(5),
+        patch: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
+        trace: zod_1.z.object({ uri: zod_1.z.string().min(1) }).passthrough().optional(),
+        reason: zod_1.z.string().min(1).optional()
+    })
+        .passthrough(),
+    out: zod_1.z.object({ summary: zod_1.z.string().min(1) }).passthrough().optional(),
+    ixo: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional()
+})
+    .passthrough();
+//# sourceMappingURL=schema.js.map

package/dist/cjs/udid/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/udid/schema.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAEH,6BAAwB;AAExB,wEAAwE;AAC3D,QAAA,OAAO,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAW,CAAC;AAEtG;;;;;;GAMG;AACU,QAAA,GAAG,GAAG,CAAC,YAAY,EAAE,YAAY,CAAU,CAAC;AAEzD,MAAM,gBAAgB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAElE;;;;;;;;GAQG;AACH,MAAM,WAAW,GAAG,+BAA+B,CAAC;AAC7C,MAAM,sBAAsB,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAAzE,QAAA,sBAAsB,0BAAmD;AAEzE,QAAA,UAAU,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAEvF,QAAA,iBAAiB,GAAG,OAAC;KAC/B,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,2EAA2E;IAC3E,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,GAAG,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACjB,GAAG,EAAE,OAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IACpC,GAAG,EAAE,OAAC,CAAC,MAAM,CAAC;QACZ,yDAAyD;QACzD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACtB,GAAG,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,IAAI,CAAC,WAAG,CAAC,EAAE,iBAAiB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3E,CAAC;IACF,GAAG,EAAE,OAAC,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,yEAAyE;QACzE,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC;YACb,OAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;YACrB,OAAC,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,kBAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;SACvF,CAAC;QACF,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC1B,CAAC;IACF,GAAG,EAAE,OAAC,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;KAClE,CAAC;IACF,GAAG,EAAE,OAAC;SACH,MAAM,CAAC;QACN;yEACiE;QACjE,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QAC1B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;QAC5B,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC5F,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KAC3B,CAAC;QACF;;4CAEoC;SACnC,QAAQ,CAAC,OAAC,CAAC,OAAO,EAAE,CAAC;CACzB,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,IAAA,8BAAsB,EAAC,GAAG,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,6BAA6B,GAAG,EAAE,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IACD,6EAA6E;IAC7E,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,eAAO,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC,CAAC,CAAC;AAIL;;;;;;;;;;;;;;;;;;GAkBG;AACU,QAAA,cAAc,GAAG,OAAC;KAC5B,MAAM,CAAC;IACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAChC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACjC,GAAG,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACjB,0EAA0E;IAC1E,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,GAAG,EAAE,OAAC;SACH,MAAM,CAAC;QACN,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACtB,GAAG,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE;KACvD,CAAC;SACD,WAAW,EAAE;IAChB,GAAG,EAAE,OAAC;SACH,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACvC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC;QACxC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;QACpE,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACrC,CAAC;SACD,WAAW,EAAE;IAChB,GAAG,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACtE,GAAG,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,WAAW,EAAE,CAAC"}

package/dist/cjs/udid/verify.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Checking a determination without asking us anything.
+ *
+ * The point of signing is that this can run somewhere we do not control,
+ * against a key published somewhere anyone can read. So the checks are the
+ * blunt ones and they are all of them: the signature is real, the payload is
+ * the shape the standard defines, and it is about the thing the reader
+ * thinks it is about.
+ *
+ * **`aud` is not decoration.** A determination lifted from one collection and
+ * replayed against another verifies perfectly by signature alone; pinning
+ * `expectedAud` is what makes that a forgery rather than a fact.
+ */
+import { type UdidBase } from "./schema.ts";
+declare const fromB64url: (text: string) => Uint8Array;
+export interface VerifyOptions {
+    /** The 32-byte public point of the issuer, however the reader resolved it. */
+    publicKeyRaw: Uint8Array;
+    expectedAud?: string;
+    expectedSub?: string;
+    /** The address the wrapper claims these bytes have. */
+    expectedCid?: string;
+    /** Seconds since the epoch, for the `exp` check. Defaults to the clock. */
+    now?: number;
+}
+export interface VerifyResult {
+    valid: boolean;
+    /** The **base** payload — anyone's, not only ours. See `UdidBaseSchema`. */
+    payload: UdidBase | null;
+    /** Why not, in one phrase — for a log or a page, never for a decision. */
+    reason?: string;
+}
+export declare function verifyUdid(jws: string, options: VerifyOptions): Promise<VerifyResult>;
+export { fromB64url };
+//# sourceMappingURL=verify.d.ts.map

package/dist/cjs/udid/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/udid/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,OAAO,EAAkB,KAAK,QAAQ,EAAE,MAAM,aAAa,CAAC;AAE5D,QAAA,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,UAGlC,CAAC;AAgBF,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,YAAY,EAAE,UAAU,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,4EAA4E;IAC5E,OAAO,EAAE,QAAQ,GAAG,IAAI,CAAC;IACzB,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA2D3F;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}