@kya-os/contracts 1.7.31 → 1.7.33

package/dist/__fixtures__/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Test Fixtures Export
+ *
+ * Exports all test fixtures for use in test suites across packages.
+ */
+export * from './proof/ed25519-fixtures.js';
+export { default as keysAndPayloads } from './proof/keys-and-payloads.json';
+//# sourceMappingURL=index.d.ts.map

package/dist/__fixtures__/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/__fixtures__/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,6BAA6B,CAAC;AAC5C,OAAO,EAAE,OAAO,IAAI,eAAe,EAAE,MAAM,gCAAgC,CAAyB"}

package/dist/__fixtures__/index.js

@@ -0,0 +1,29 @@
+"use strict";
+/**
+ * Test Fixtures Export
+ *
+ * Exports all test fixtures for use in test suites across packages.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.keysAndPayloads = void 0;
+__exportStar(require("./proof/ed25519-fixtures.js"), exports);
+var keys_and_payloads_json_1 = require("./proof/keys-and-payloads.json");
+Object.defineProperty(exports, "keysAndPayloads", { enumerable: true, get: function () { return __importDefault(keys_and_payloads_json_1).default; } });
+//# sourceMappingURL=index.js.map

package/dist/__fixtures__/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/__fixtures__/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;;;;;;;;;;;;;;;;;;AAEH,8DAA4C;AAC5C,yEAAoG;AAA3F,0IAAA,OAAO,OAAmB"}

package/dist/__fixtures__/proof/ed25519-fixtures.d.ts

@@ -0,0 +1,253 @@
+/**
+ * Comprehensive Ed25519 Test Fixtures
+ *
+ * Deterministic test fixtures for cryptographic operations.
+ * These fixtures are used across all test suites to ensure consistent behavior.
+ */
+/**
+ * Valid Ed25519 Key Pair #1
+ * Generated deterministically from seed "test-seed-fixture-1"
+ */
+export declare const VALID_KEY_PAIR_1: {
+    jwk: {
+        kty: string;
+        crv: string;
+        x: string;
+        kid: string;
+        use: string;
+    };
+    privateKeyBase64: string;
+    publicKeyBase64: string;
+    privateKeyBytes: Uint8Array<ArrayBuffer>;
+    publicKeyBytes: Uint8Array<ArrayBuffer>;
+    did: string;
+};
+/**
+ * Valid Ed25519 Key Pair #2
+ * Generated deterministically from seed "test-seed-fixture-2"
+ */
+export declare const VALID_KEY_PAIR_2: {
+    jwk: {
+        kty: string;
+        crv: string;
+        x: string;
+        kid: string;
+    };
+    privateKeyBase64: string;
+    publicKeyBase64: string;
+    did: string;
+};
+/**
+ * Invalid Key Pair (wrong curve)
+ */
+export declare const INVALID_KEY_PAIR_WRONG_CURVE: {
+    jwk: {
+        kty: string;
+        crv: string;
+        x: string;
+    };
+};
+/**
+ * Invalid Key Pair (wrong key type)
+ */
+export declare const INVALID_KEY_PAIR_WRONG_KTY: {
+    jwk: {
+        kty: string;
+        crv: string;
+        x: string;
+    };
+};
+/**
+ * Invalid Key Pair (missing x field)
+ */
+export declare const INVALID_KEY_PAIR_MISSING_X: {
+    jwk: {
+        kty: string;
+        crv: string;
+    };
+};
+/**
+ * Sample Canonical JSON Payloads
+ */
+export declare const CANONICAL_PAYLOADS: {
+    /**
+     * Minimal valid proof payload
+     */
+    minimal: {
+        aud: string;
+        sub: string;
+        iss: string;
+        nonce: string;
+        ts: number;
+        sessionId: string;
+        requestHash: string;
+        responseHash: string;
+    };
+    /**
+     * Full proof payload with all fields
+     */
+    full: {
+        aud: string;
+        sub: string;
+        iss: string;
+        nonce: string;
+        ts: number;
+        sessionId: string;
+        requestHash: string;
+        responseHash: string;
+        scopeId: string;
+        delegationRef: string;
+    };
+    /**
+     * Payload with different field ordering (should canonicalize to same bytes)
+     */
+    reordered: {
+        responseHash: string;
+        requestHash: string;
+        sessionId: string;
+        ts: number;
+        nonce: string;
+        iss: string;
+        sub: string;
+        aud: string;
+    };
+};
+/**
+ * Valid Compact JWS Examples
+ * Format: header.payload.signature (3 parts)
+ */
+export declare const VALID_COMPACT_JWS: {
+    /**
+     * Valid compact JWS with minimal payload
+     */
+    minimal: {
+        header: {
+            alg: string;
+            typ: string;
+        };
+        payload: {
+            aud: string;
+            sub: string;
+            iss: string;
+            nonce: string;
+            ts: number;
+            sessionId: string;
+            requestHash: string;
+            responseHash: string;
+        };
+        jws: string;
+    };
+};
+/**
+ * Invalid JWS Examples
+ */
+export declare const INVALID_JWS: {
+    /**
+     * Wrong algorithm (should be EdDSA)
+     */
+    wrongAlgorithm: {
+        header: {
+            alg: string;
+            typ: string;
+        };
+        payload: {
+            aud: string;
+            sub: string;
+            iss: string;
+            nonce: string;
+            ts: number;
+            sessionId: string;
+            requestHash: string;
+            responseHash: string;
+        };
+        jws: string;
+    };
+    /**
+     * Malformed JWS (wrong number of parts)
+     */
+    malformed: {
+        jws: string;
+    };
+    /**
+     * Empty JWS
+     */
+    empty: {
+        jws: string;
+    };
+    /**
+     * Expired timestamp (too old)
+     */
+    expired: {
+        header: {
+            alg: string;
+            typ: string;
+        };
+        payload: {
+            ts: number;
+            aud: string;
+            sub: string;
+            iss: string;
+            nonce: string;
+            sessionId: string;
+            requestHash: string;
+            responseHash: string;
+        };
+        jws: string;
+    };
+    /**
+     * Future timestamp (too new)
+     */
+    future: {
+        header: {
+            alg: string;
+            typ: string;
+        };
+        payload: {
+            ts: number;
+            aud: string;
+            sub: string;
+            iss: string;
+            nonce: string;
+            sessionId: string;
+            requestHash: string;
+            responseHash: string;
+        };
+        jws: string;
+    };
+};
+/**
+ * Detached JWS Examples
+ * Format: header..signature (2 parts, payload separate)
+ */
+export declare const VALID_DETACHED_JWS: {
+    /**
+     * Valid detached JWS with separate payload
+     */
+    minimal: {
+        jws: string;
+        payload: {
+            aud: string;
+            sub: string;
+            iss: string;
+            nonce: string;
+            ts: number;
+            sessionId: string;
+            requestHash: string;
+            responseHash: string;
+        };
+    };
+};
+/**
+ * Test Helper: Generate deterministic Ed25519 key pair from seed
+ */
+export declare function generateDeterministicKeyPair(seed: string): {
+    privateKey: Uint8Array;
+    publicKey: Uint8Array;
+    jwk: {
+        kty: "OKP";
+        crv: "Ed25519";
+        x: string;
+        kid?: string;
+    };
+};
+//# sourceMappingURL=ed25519-fixtures.d.ts.map

package/dist/__fixtures__/proof/ed25519-fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519-fixtures.d.ts","sourceRoot":"","sources":["../../../src/__fixtures__/proof/ed25519-fixtures.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;CAuB5B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;CAU5B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,4BAA4B;;;;;;CAMxC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;;CAMtC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,0BAA0B;;;;;CAMtC,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB;IAC7B;;OAEG;;;;;;;;;;;IAYH;;OAEG;;;;;;;;;;;;;IAcH;;OAEG;;;;;;;;;;;CAWJ,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,iBAAiB;IAC5B;;OAEG;;;;;;;;;;;;;;;;;;CAWJ,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,WAAW;IACtB;;OAEG;;;;;;;;;;;;;;;;;;IAUH;;OAEG;;;;IAKH;;OAEG;;;;IAKH;;OAEG;;;;;;;;;;;;;;;;;;IAaH;;OAEG;;;;;;;;;;;;;;;;;;CAYJ,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB;IAC7B;;OAEG;;;;;;;;;;;;;;CAKJ,CAAC;AAEF;;GAEG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG;IAC1D,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;IACtB,GAAG,EAAE;QACH,GAAG,EAAE,KAAK,CAAC;QACX,GAAG,EAAE,SAAS,CAAC;QACf,CAAC,EAAE,MAAM,CAAC;QACV,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,CAAC;CACH,CA6BA"}

package/dist/__fixtures__/proof/ed25519-fixtures.js

@@ -0,0 +1,247 @@
+"use strict";
+/**
+ * Comprehensive Ed25519 Test Fixtures
+ *
+ * Deterministic test fixtures for cryptographic operations.
+ * These fixtures are used across all test suites to ensure consistent behavior.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VALID_DETACHED_JWS = exports.INVALID_JWS = exports.VALID_COMPACT_JWS = exports.CANONICAL_PAYLOADS = exports.INVALID_KEY_PAIR_MISSING_X = exports.INVALID_KEY_PAIR_WRONG_KTY = exports.INVALID_KEY_PAIR_WRONG_CURVE = exports.VALID_KEY_PAIR_2 = exports.VALID_KEY_PAIR_1 = void 0;
+exports.generateDeterministicKeyPair = generateDeterministicKeyPair;
+/**
+ * Valid Ed25519 Key Pair #1
+ * Generated deterministically from seed "test-seed-fixture-1"
+ */
+exports.VALID_KEY_PAIR_1 = {
+    // JWK format (RFC 7517)
+    jwk: {
+        kty: "OKP",
+        crv: "Ed25519",
+        x: "VCpo2LMLhn6iWku8MKvSLg2ZAoC-nlOyPVQaO3FxVeQ", // Base64url encoded public key
+        kid: "test-key-1",
+        use: "sig",
+    },
+    // Base64 encoded keys (for CryptoProvider interface)
+    privateKeyBase64: "dGVzdC1zZWVkLWZpeHR1cmUtMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
+    publicKeyBase64: "VCpo2LMLhn6iWku8MKvSLg2ZAoC-nlOyPVQaO3FxVeQ",
+    // Raw bytes (32 bytes each for Ed25519)
+    privateKeyBytes: new Uint8Array([
+        116, 101, 115, 116, 45, 115, 101, 101, 100, 45, 102, 105, 120, 116, 117, 114,
+        101, 45, 49, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0
+    ]),
+    publicKeyBytes: new Uint8Array([
+        84, 42, 104, 217, 179, 11, 134, 126, 162, 90, 75, 188, 48, 171, 210, 46,
+        13, 153, 2, 128, 190, 158, 83, 178, 61, 84, 26, 59, 113, 113, 85, 228
+    ]),
+    // DID format
+    did: "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+};
+/**
+ * Valid Ed25519 Key Pair #2
+ * Generated deterministically from seed "test-seed-fixture-2"
+ */
+exports.VALID_KEY_PAIR_2 = {
+    jwk: {
+        kty: "OKP",
+        crv: "Ed25519",
+        x: "j9VXvYFhN2pLmK8nQwRtS5dC7bE4fG6hJ3kM9oP1qR2sT",
+        kid: "test-key-2",
+    },
+    privateKeyBase64: "dGVzdC1zZWVkLWZpeHR1cmUtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
+    publicKeyBase64: "j9VXvYFhN2pLmK8nQwRtS5dC7bE4fG6hJ3kM9oP1qR2sT",
+    did: "did:key:z6MkjL2nW8bR9cD4eF5gH6iJ7kL8mN9oP0qR1sT2uV3wX",
+};
+/**
+ * Invalid Key Pair (wrong curve)
+ */
+exports.INVALID_KEY_PAIR_WRONG_CURVE = {
+    jwk: {
+        kty: "EC",
+        crv: "P-256", // Wrong curve - should be Ed25519
+        x: "VCpo2LMLhn6iWku8MKvSLg2ZAoC-nlOyPVQaO3FxVeQ",
+    },
+};
+/**
+ * Invalid Key Pair (wrong key type)
+ */
+exports.INVALID_KEY_PAIR_WRONG_KTY = {
+    jwk: {
+        kty: "RSA", // Wrong key type - should be OKP
+        crv: "Ed25519",
+        x: "VCpo2LMLhn6iWku8MKvSLg2ZAoC-nlOyPVQaO3FxVeQ",
+    },
+};
+/**
+ * Invalid Key Pair (missing x field)
+ */
+exports.INVALID_KEY_PAIR_MISSING_X = {
+    jwk: {
+        kty: "OKP",
+        crv: "Ed25519",
+        // Missing x field
+    },
+};
+/**
+ * Sample Canonical JSON Payloads
+ */
+exports.CANONICAL_PAYLOADS = {
+    /**
+     * Minimal valid proof payload
+     */
+    minimal: {
+        aud: "test-audience",
+        sub: "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+        iss: "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+        nonce: "test-nonce-123",
+        ts: 1609459200,
+        sessionId: "test-session-456",
+        requestHash: "sha256:" + "a".repeat(64),
+        responseHash: "sha256:" + "b".repeat(64),
+    },
+    /**
+     * Full proof payload with all fields
+     */
+    full: {
+        aud: "test-audience",
+        sub: "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+        iss: "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+        nonce: "test-nonce-123",
+        ts: 1609459200,
+        sessionId: "test-session-456",
+        requestHash: "sha256:" + "a".repeat(64),
+        responseHash: "sha256:" + "b".repeat(64),
+        scopeId: "test-tool:execute",
+        delegationRef: "del-abc123",
+    },
+    /**
+     * Payload with different field ordering (should canonicalize to same bytes)
+     */
+    reordered: {
+        responseHash: "sha256:" + "b".repeat(64),
+        requestHash: "sha256:" + "a".repeat(64),
+        sessionId: "test-session-456",
+        ts: 1609459200,
+        nonce: "test-nonce-123",
+        iss: "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+        sub: "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+        aud: "test-audience",
+    },
+};
+/**
+ * Valid Compact JWS Examples
+ * Format: header.payload.signature (3 parts)
+ */
+exports.VALID_COMPACT_JWS = {
+    /**
+     * Valid compact JWS with minimal payload
+     */
+    minimal: {
+        header: {
+            alg: "EdDSA",
+            typ: "JWT",
+        },
+        payload: exports.CANONICAL_PAYLOADS.minimal,
+        // Note: Signature would be generated from actual signing
+        // This is a placeholder format
+        jws: "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJ0ZXN0LWF1ZGllbmNlIiwic3ViIjoiZGlkOmtleTp6Nk1raGFYZ0JaRHZvdERrTDUyNTdmYWl6dGlHaUMyUXRLTEducG5uRUd0YTJkb0siLCJpc3MiOiJkaWQ6a2V5Ono2TWtoYVhnQlpEdm90RGtMNTI1N2ZhaXp0aUdpQzJRdEtMR25wbm5FR3RhMmRvSyIsIm5vbmNlIjoidGVzdC1ub25jZS0xMjMiLCJ0cyI6MTYwOTQ1OTIwMCwic2Vzc2lvbklkIjoidGVzdC1zZXNzaW9uLTQ1NiIsInJlcXVlc3RIYXNoIjoic2hhMjU2OiIuY29uY2F0KCJhIi5yZXBlYXQoNjQpKSIsInJlc3BvbnNlSGFzaCI6InNoYTI1NjoiLmNvbmNhdCgiYiIucmVwZWF0KDY0KSkifQ.signature-placeholder",
+    },
+};
+/**
+ * Invalid JWS Examples
+ */
+exports.INVALID_JWS = {
+    /**
+     * Wrong algorithm (should be EdDSA)
+     */
+    wrongAlgorithm: {
+        header: {
+            alg: "RS256", // Wrong algorithm
+            typ: "JWT",
+        },
+        payload: exports.CANONICAL_PAYLOADS.minimal,
+        jws: "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJ0ZXN0LWF1ZGllbmNlIn0.invalid-signature",
+    },
+    /**
+     * Malformed JWS (wrong number of parts)
+     */
+    malformed: {
+        jws: "header.payload", // Missing signature part
+    },
+    /**
+     * Empty JWS
+     */
+    empty: {
+        jws: "",
+    },
+    /**
+     * Expired timestamp (too old)
+     */
+    expired: {
+        header: {
+            alg: "EdDSA",
+            typ: "JWT",
+        },
+        payload: {
+            ...exports.CANONICAL_PAYLOADS.minimal,
+            ts: 1000000000, // Very old timestamp
+        },
+        jws: "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJ0cyI6MTAwMDAwMDAwMH0.expired-signature",
+    },
+    /**
+     * Future timestamp (too new)
+     */
+    future: {
+        header: {
+            alg: "EdDSA",
+            typ: "JWT",
+        },
+        payload: {
+            ...exports.CANONICAL_PAYLOADS.minimal,
+            ts: 9999999999, // Very future timestamp
+        },
+        jws: "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJ0cyI6OTk5OTk5OTk5OX0.future-signature",
+    },
+};
+/**
+ * Detached JWS Examples
+ * Format: header..signature (2 parts, payload separate)
+ */
+exports.VALID_DETACHED_JWS = {
+    /**
+     * Valid detached JWS with separate payload
+     */
+    minimal: {
+        jws: "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9..signature-placeholder",
+        payload: exports.CANONICAL_PAYLOADS.minimal,
+    },
+};
+/**
+ * Test Helper: Generate deterministic Ed25519 key pair from seed
+ */
+function generateDeterministicKeyPair(seed) {
+    // Use crypto.createHash for deterministic key generation
+    // In real tests, this would use @noble/ed25519 or similar
+    const crypto = require("crypto");
+    const hash = crypto.createHash("sha256").update(seed).digest();
+    // Use hash as private key (32 bytes)
+    const privateKey = hash.slice(0, 32);
+    // Generate public key deterministically
+    const publicKeyHash = crypto.createHash("sha256").update(privateKey).digest().slice(0, 32);
+    // Convert to base64url for JWK
+    const publicKeyBase64url = Buffer.from(publicKeyHash)
+        .toString("base64")
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=/g, "");
+    return {
+        privateKey: new Uint8Array(privateKey),
+        publicKey: new Uint8Array(publicKeyHash),
+        jwk: {
+            kty: "OKP",
+            crv: "Ed25519",
+            x: publicKeyBase64url,
+            kid: `key-${seed}`,
+        },
+    };
+}
+//# sourceMappingURL=ed25519-fixtures.js.map

package/dist/__fixtures__/proof/ed25519-fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519-fixtures.js","sourceRoot":"","sources":["../../../src/__fixtures__/proof/ed25519-fixtures.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAmOH,oEAsCC;AAvQD;;;GAGG;AACU,QAAA,gBAAgB,GAAG;IAC9B,wBAAwB;IACxB,GAAG,EAAE;QACH,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,SAAS;QACd,CAAC,EAAE,6CAA6C,EAAE,+BAA+B;QACjF,GAAG,EAAE,YAAY;QACjB,GAAG,EAAE,KAAK;KACX;IACD,qDAAqD;IACrD,gBAAgB,EAAE,0DAA0D;IAC5E,eAAe,EAAE,6CAA6C;IAC9D,wCAAwC;IACxC,eAAe,EAAE,IAAI,UAAU,CAAC;QAC9B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG;QAC5E,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;KACnD,CAAC;IACF,cAAc,EAAE,IAAI,UAAU,CAAC;QAC7B,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACvE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG;KACtE,CAAC;IACF,aAAa;IACb,GAAG,EAAE,0DAA0D;CAChE,CAAC;AAEF;;;GAGG;AACU,QAAA,gBAAgB,GAAG;IAC9B,GAAG,EAAE;QACH,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,SAAS;QACd,CAAC,EAAE,+CAA+C;QAClD,GAAG,EAAE,YAAY;KAClB;IACD,gBAAgB,EAAE,0DAA0D;IAC5E,eAAe,EAAE,+CAA+C;IAChE,GAAG,EAAE,uDAAuD;CAC7D,CAAC;AAEF;;GAEG;AACU,QAAA,4BAA4B,GAAG;IAC1C,GAAG,EAAE;QACH,GAAG,EAAE,IAAI;QACT,GAAG,EAAE,OAAO,EAAE,kCAAkC;QAChD,CAAC,EAAE,6CAA6C;KACjD;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,0BAA0B,GAAG;IACxC,GAAG,EAAE;QACH,GAAG,EAAE,KAAK,EAAE,iCAAiC;QAC7C,GAAG,EAAE,SAAS;QACd,CAAC,EAAE,6CAA6C;KACjD;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,0BAA0B,GAAG;IACxC,GAAG,EAAE;QACH,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,SAAS;QACd,kBAAkB;KACnB;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,kBAAkB,GAAG;IAChC;;OAEG;IACH,OAAO,EAAE;QACP,GAAG,EAAE,eAAe;QACpB,GAAG,EAAE,0DAA0D;QAC/D,GAAG,EAAE,0DAA0D;QAC/D,KAAK,EAAE,gBAAgB;QACvB,EAAE,EAAE,UAAU;QACd,SAAS,EAAE,kBAAkB;QAC7B,WAAW,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,YAAY,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;KACzC;IAED;;OAEG;IACH,IAAI,EAAE;QACJ,GAAG,EAAE,eAAe;QACpB,GAAG,EAAE,0DAA0D;QAC/D,GAAG,EAAE,0DAA0D;QAC/D,KAAK,EAAE,gBAAgB;QACvB,EAAE,EAAE,UAAU;QACd,SAAS,EAAE,kBAAkB;QAC7B,WAAW,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,YAAY,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,mBAAmB;QAC5B,aAAa,EAAE,YAAY;KAC5B;IAED;;OAEG;IACH,SAAS,EAAE;QACT,YAAY,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,WAAW,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACvC,SAAS,EAAE,kBAAkB;QAC7B,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,gBAAgB;QACvB,GAAG,EAAE,0DAA0D;QAC/D,GAAG,EAAE,0DAA0D;QAC/D,GAAG,EAAE,eAAe;KACrB;CACF,CAAC;AAEF;;;GAGG;AACU,QAAA,iBAAiB,GAAG;IAC/B;;OAEG;IACH,OAAO,EAAE;QACP,MAAM,EAAE;YACN,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,KAAK;SACX;QACD,OAAO,EAAE,0BAAkB,CAAC,OAAO;QACnC,yDAAyD;QACzD,+BAA+B;QAC/B,GAAG,EAAE,2eAA2e;KACjf;CACF,CAAC;AAEF;;GAEG;AACU,QAAA,WAAW,GAAG;IACzB;;OAEG;IACH,cAAc,EAAE;QACd,MAAM,EAAE;YACN,GAAG,EAAE,OAAO,EAAE,kBAAkB;YAChC,GAAG,EAAE,KAAK;SACX;QACD,OAAO,EAAE,0BAAkB,CAAC,OAAO;QACnC,GAAG,EAAE,wFAAwF;KAC9F;IAED;;OAEG;IACH,SAAS,EAAE;QACT,GAAG,EAAE,gBAAgB,EAAE,yBAAyB;KACjD;IAED;;OAEG;IACH,KAAK,EAAE;QACL,GAAG,EAAE,EAAE;KACR;IAED;;OAEG;IACH,OAAO,EAAE;QACP,MAAM,EAAE;YACN,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,KAAK;SACX;QACD,OAAO,EAAE;YACP,GAAG,0BAAkB,CAAC,OAAO;YAC7B,EAAE,EAAE,UAAU,EAAE,qBAAqB;SACtC;QACD,GAAG,EAAE,gFAAgF;KACtF;IAED;;OAEG;IACH,MAAM,EAAE;QACN,MAAM,EAAE;YACN,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,KAAK;SACX;QACD,OAAO,EAAE;YACP,GAAG,0BAAkB,CAAC,OAAO;YAC7B,EAAE,EAAE,UAAU,EAAE,wBAAwB;SACzC;QACD,GAAG,EAAE,+EAA+E;KACrF;CACF,CAAC;AAEF;;;GAGG;AACU,QAAA,kBAAkB,GAAG;IAChC;;OAEG;IACH,OAAO,EAAE;QACP,GAAG,EAAE,6DAA6D;QAClE,OAAO,EAAE,0BAAkB,CAAC,OAAO;KACpC;CACF,CAAC;AAEF;;GAEG;AACH,SAAgB,4BAA4B,CAAC,IAAY;IAUvD,yDAAyD;IACzD,0DAA0D;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IAE/D,qCAAqC;IACrC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAErC,wCAAwC;IACxC,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE3F,+BAA+B;IAC/B,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;SAClD,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAErB,OAAO;QACL,UAAU,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC;QACtC,SAAS,EAAE,IAAI,UAAU,CAAC,aAAa,CAAC;QACxC,GAAG,EAAE;YACH,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,SAAS;YACd,CAAC,EAAE,kBAAkB;YACrB,GAAG,EAAE,OAAO,IAAI,EAAE;SACnB;KACF,CAAC;AACJ,CAAC"}

package/dist/__fixtures__/proof/keys-and-payloads.json

@@ -0,0 +1,103 @@
+{
+    "keys": {
+        "valid_key_pair_1": {
+            "jwk": {
+                "kty": "OKP",
+                "crv": "Ed25519",
+                "x": "VCpo2LMLhn6iWku8MKvSLg2ZAoC-nlOyPVQaO3FxVeQ",
+                "kid": "test-key-1",
+                "use": "sig"
+            },
+            "privateKeyBase64": "dGVzdC1zZWVkLWZpeHR1cmUtMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
+            "publicKeyBase64": "VCpo2LMLhn6iWku8MKvSLg2ZAoC-nlOyPVQaO3FxVeQ",
+            "did": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK"
+        },
+        "valid_key_pair_2": {
+            "jwk": {
+                "kty": "OKP",
+                "crv": "Ed25519",
+                "x": "j9VXvYFhN2pLmK8nQwRtS5dC7bE4fG6hJ3kM9oP1qR2sT",
+                "kid": "test-key-2"
+            },
+            "privateKeyBase64": "dGVzdC1zZWVkLWZpeHR1cmUtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
+            "publicKeyBase64": "j9VXvYFhN2pLmK8nQwRtS5dC7bE4fG6hJ3kM9oP1qR2sT",
+            "did": "did:key:z6MkjL2nW8bR9cD4eF5gH6iJ7kL8mN9oP0qR1sT2uV3wX"
+        },
+        "invalid_wrong_curve": {
+            "jwk": {
+                "kty": "EC",
+                "crv": "P-256",
+                "x": "VCpo2LMLhn6iWku8MKvSLg2ZAoC-nlOyPVQaO3FxVeQ"
+            }
+        },
+        "invalid_wrong_kty": {
+            "jwk": {
+                "kty": "RSA",
+                "crv": "Ed25519",
+                "x": "VCpo2LMLhn6iWku8MKvSLg2ZAoC-nlOyPVQaO3FxVeQ"
+            }
+        },
+        "invalid_missing_x": {
+            "jwk": {
+                "kty": "OKP",
+                "crv": "Ed25519"
+            }
+        }
+    },
+    "payloads": {
+        "minimal": {
+            "aud": "test-audience",
+            "sub": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+            "iss": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+            "nonce": "test-nonce-123",
+            "ts": 1609459200,
+            "sessionId": "test-session-456",
+            "requestHash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+            "responseHash": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+        },
+        "full": {
+            "aud": "test-audience",
+            "sub": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+            "iss": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+            "nonce": "test-nonce-123",
+            "ts": 1609459200,
+            "sessionId": "test-session-456",
+            "requestHash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+            "responseHash": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb",
+            "scopeId": "test-tool:execute",
+            "delegationRef": "del-abc123"
+        }
+    },
+    "jws": {
+        "valid_compact_minimal": {
+            "header": {
+                "alg": "EdDSA",
+                "typ": "JWT"
+            },
+            "payload": {
+                "aud": "test-audience",
+                "sub": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+                "iss": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+                "nonce": "test-nonce-123",
+                "ts": 1609459200,
+                "sessionId": "test-session-456",
+                "requestHash": "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+                "responseHash": "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb"
+            },
+            "jws": "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJ0ZXN0LWF1ZGllbmNlIiwic3ViIjoiZGlkOmtleTp6Nk1raGFYZ0JaRHZvdERrTDUyNTdmYWl6dGlHaUMyUXRLTEducG5uRUd0YTJkb0siLCJpc3MiOiJkaWQ6a2V5Ono2TWtoYVhnQlpEdm90RGtMNTI1N2ZhaXp0aUdpQzJRdEtMR25wbm5FR3RhMmRvSyIsIm5vbmNlIjoidGVzdC1ub25jZS0xMjMiLCJ0cyI6MTYwOTQ1OTIwMCwic2Vzc2lvbklkIjoidGVzdC1zZXNzaW9uLTQ1NiIsInJlcXVlc3RIYXNoIjoic2hhMjU2OiIuY29uY2F0KCJhIi5yZXBlYXQoNjQpKSIsInJlc3BvbnNlSGFzaCI6InNoYTI1NjoiLmNvbmNhdCgiYiIucmVwZWF0KDY0KSkifQ.signature-placeholder"
+        },
+        "invalid_wrong_algorithm": {
+            "header": {
+                "alg": "RS256",
+                "typ": "JWT"
+            },
+            "jws": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJ0ZXN0LWF1ZGllbmNlIn0.invalid-signature"
+        },
+        "invalid_malformed": {
+            "jws": "header.payload"
+        },
+        "invalid_empty": {
+            "jws": ""
+        }
+    }
+}

package/dist/agent-deployment-utils.d.ts

@@ -60,3 +60,4 @@ export declare function didToFlyApp(did: string): string;
  * @throws {Error} If DID is invalid or name sanitizes to empty string
  */
 export declare function nameToFlySlug(name: string, did: string): string;
+//# sourceMappingURL=agent-deployment-utils.d.ts.map

package/dist/agent-deployment-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-deployment-utils.d.ts","sourceRoot":"","sources":["../src/agent-deployment-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAQ7C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAgB/D"}

package/dist/agent-deployment-utils.js

@@ -90,3 +90,4 @@ function nameToFlySlug(name, did) {
     }
     return `kya-${slug}-${hash}`;
 }
+//# sourceMappingURL=agent-deployment-utils.js.map

package/dist/agent-deployment-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-deployment-utils.js","sourceRoot":"","sources":["../src/agent-deployment-utils.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAqBH,8BAQC;AAaD,kCAEC;AAqBD,sCAgBC;AA/ED,mCAAoC;AAEpC;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,WAAW,CAAC,GAAW;IACrC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,aAAa,CAAC,IAAY,EAAE,GAAW;IACrD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI;SACd,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAG,4BAA4B;SAC1D,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAU,+BAA+B;SAC/D,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAS,iCAAiC;SACjE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;SAChB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAc,0CAA0C;IAC9E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC;AAC/B,CAAC"}