@kya-os/mcp 1.16.1 → 1.17.0

package/dist/utils/canonical-json.js

@@ -5,8 +5,14 @@
  * can silently erase or coerce unsupported JavaScript values. Protocol digests
  * must fail closed instead: two distinguishable JavaScript inputs must never be
  * accepted as the same canonical JSON value by accident.
+ *
+ * The serializer here is our own, over the value as validated. Any library
+ * that honours `toJSON` — `json-canonicalize` hands every object with one to
+ * `JSON.stringify` — lets a member named `toJSON` switch off key sorting, and a
+ * hidden `toJSON` function replace the value outright. A `toJSON` member is
+ * ordinary data here, and properties JSON does not carry (non-enumerable
+ * ones, and an array's non-index ones) are ignored, never consulted.
  */
-import { canonicalize } from 'json-canonicalize';
 const encoder = new TextEncoder();
 /** RFC 8785 requires invalid Unicode data (unpaired UTF-16 surrogates) to fail. */
 function hasLoneSurrogate(value) {
@@ -26,81 +32,145 @@ function hasLoneSurrogate(value) {
 }
 /** Validate that a value has an unambiguous JSON representation. */
 export function assertCanonicalJsonValue(value, path = '$', ancestors = new WeakSet()) {
-    if (value === null || typeof value === 'boolean') {
-        return;
+    serialize(value, new Serializer(path, ancestors));
+}
+/**
+ * Output and position for one serialization. Text goes into one shared list
+ * that is joined once, and the path is a stack turned into a string only for
+ * an error message, so the work stays linear in the size of the input however
+ * deeply it nests.
+ */
+class Serializer {
+    root;
+    ancestors;
+    out = [];
+    segments = [];
+    constructor(root, ancestors) {
+        this.root = root;
+        this.ancestors = ancestors;
     }
-    if (typeof value === 'string') {
-        if (hasLoneSurrogate(value)) {
-            throw new TypeError(`Cannot canonicalize string with lone surrogate at ${path}`);
-        }
-        return;
+    enter(segment) {
+        this.segments.push(segment);
     }
-    if (typeof value === 'number') {
-        if (!Number.isFinite(value)) {
-            throw new TypeError(`Cannot canonicalize non-finite number at ${path}: ${value}`);
-        }
-        if (Number.isInteger(value) && !Number.isSafeInteger(value)) {
-            throw new TypeError(`Cannot canonicalize unsafe integer at ${path}: ${value}`);
-        }
-        return;
-    }
-    if (typeof value === 'undefined') {
-        throw new TypeError(`Cannot canonicalize undefined at ${path}`);
+    leave() {
+        this.segments.pop();
     }
-    if (typeof value === 'function') {
-        throw new TypeError(`Cannot canonicalize function at ${path}`);
+    fail(problem, suffix = '') {
+        throw new TypeError(`Cannot canonicalize ${problem} at ${this.root}${this.segments.join('')}${suffix}`);
     }
-    if (typeof value === 'symbol') {
-        throw new TypeError(`Cannot canonicalize symbol at ${path}`);
+}
+/**
+ * Validate `value` and serialize it per RFC 8785 in one pass, so the output is
+ * built from exactly the data that was checked. Strings and numbers are
+ * written as ECMAScript `JSON.stringify` writes them, which is the RFC 8785
+ * rule (§3.2.2.2, §3.2.2.3); `toJSON` is never called.
+ *
+ * One stack frame per nesting level: arrays and objects recurse from here
+ * directly, so deep input reaches the same depth it did before.
+ */
+function serialize(value, s) {
+    if (value === null) {
+        s.out.push('null');
+        return;
     }
-    if (typeof value === 'bigint') {
-        throw new TypeError(`Cannot canonicalize bigint at ${path}`);
+    if (typeof value === 'boolean') {
+        s.out.push(value ? 'true' : 'false');
+        return;
     }
-    if (typeof value !== 'object') {
-        throw new TypeError(`Cannot canonicalize unsupported value at ${path}`);
+    if (typeof value === 'string') {
+        if (hasLoneSurrogate(value))
+            s.fail('string with lone surrogate');
+        s.out.push(JSON.stringify(value));
+        return;
     }
-    if (ancestors.has(value)) {
-        throw new TypeError(`Cannot canonicalize cyclic reference at ${path}`);
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            s.fail('non-finite number', `: ${value}`);
+        if (Number.isInteger(value) && !Number.isSafeInteger(value))
+            s.fail('unsafe integer', `: ${value}`);
+        s.out.push(JSON.stringify(value)); // shortest round-trip form; -0 is written as 0
+        return;
     }
-    ancestors.add(value);
+    if (typeof value === 'undefined')
+        s.fail('undefined');
+    if (typeof value === 'function')
+        s.fail('function');
+    if (typeof value === 'symbol')
+        s.fail('symbol');
+    if (typeof value === 'bigint')
+        s.fail('bigint');
+    if (typeof value !== 'object')
+        s.fail('unsupported value');
+    if (s.ancestors.has(value))
+        s.fail('cyclic reference');
+    s.ancestors.add(value);
     try {
-        if (Array.isArray(value)) {
-            for (let index = 0; index < value.length; index += 1) {
-                if (!(index in value)) {
-                    throw new TypeError(`Cannot canonicalize sparse array element at ${path}[${index}]`);
-                }
-                assertCanonicalJsonValue(value[index], `${path}[${index}]`, ancestors);
-            }
-            return;
-        }
-        const prototype = Object.getPrototypeOf(value);
-        if (prototype !== Object.prototype && prototype !== null) {
-            throw new TypeError(`Cannot canonicalize non-plain object at ${path}`);
-        }
-        for (const key of Reflect.ownKeys(value)) {
-            if (typeof key === 'symbol') {
-                throw new TypeError(`Cannot canonicalize symbol-keyed property at ${path}`);
-            }
-            if (hasLoneSurrogate(key)) {
-                throw new TypeError(`Cannot canonicalize object key with lone surrogate at ${path}`);
-            }
-            const descriptor = Object.getOwnPropertyDescriptor(value, key);
-            if (!descriptor?.enumerable)
-                continue;
-            if (!('value' in descriptor)) {
-                throw new TypeError(`Cannot canonicalize accessor property at ${path}.${key}`);
-            }
-            assertCanonicalJsonValue(descriptor.value, `${path}.${key}`, ancestors);
+        const array = Array.isArray(value);
+        const members = array ? arrayElements(value, s) : objectMembers(value, s);
+        s.out.push(array ? '[' : '{');
+        for (let index = 0; index < members.length; index += 1) {
+            const [segment, key, descriptor] = members[index];
+            if (index > 0)
+                s.out.push(',');
+            if (!array)
+                s.out.push(JSON.stringify(key), ':');
+            s.enter(segment);
+            // A getter could answer differently each time it is read, so the value
+            // checked might not be the value written: refused.
+            if (!('value' in descriptor))
+                s.fail('accessor property');
+            serialize(descriptor.value, s);
+            s.leave();
         }
+        s.out.push(array ? ']' : '}');
     }
     finally {
-        ancestors.delete(value);
+        s.ancestors.delete(value);
+    }
+}
+/**
+ * Elements only. Any other own property (a `toJSON`, a RegExp match's `index`
+ * and `input`) is not JSON and never reaches the output, so it is ignored.
+ */
+function arrayElements(array, s) {
+    const elements = [];
+    for (let index = 0; index < array.length; index += 1) {
+        const descriptor = Object.getOwnPropertyDescriptor(array, index);
+        if (!descriptor) {
+            s.enter(`[${index}]`);
+            s.fail('sparse array element');
+        }
+        elements.push([`[${index}]`, '', descriptor]);
+    }
+    return elements;
+}
+/**
+ * Enumerable string-keyed members, sorted. Non-enumerable ones are not JSON
+ * and are ignored.
+ */
+function objectMembers(object, s) {
+    const prototype = Object.getPrototypeOf(object);
+    if (prototype !== Object.prototype && prototype !== null)
+        s.fail('non-plain object');
+    const members = [];
+    for (const key of Reflect.ownKeys(object)) {
+        if (typeof key === 'symbol')
+            s.fail('symbol-keyed property');
+        if (hasLoneSurrogate(key))
+            s.fail('object key with lone surrogate');
+        const descriptor = Object.getOwnPropertyDescriptor(object, key);
+        if (descriptor.enumerable)
+            members.push([`.${key}`, key, descriptor]);
     }
+    // RFC 8785 §3.2.3: sort member names by their UTF-16 code units, which is
+    // exactly how JavaScript compares strings.
+    return members.sort(([, a], [, b]) => (a < b ? -1 : a > b ? 1 : 0));
 }
 /** Canonicalize a strict JSON value according to RFC 8785. */
 export function canonicalizeJson(value) {
-    assertCanonicalJsonValue(value);
-    return canonicalize(value);
+    const s = new Serializer('$', new WeakSet());
+    serialize(value, s);
+    return s.out.join('');
 }
 /** Canonical UTF-8 bytes for hashing or signing. */
 export function canonicalizeJsonBytes(value) {

package/dist/utils/canonical-json.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../src/utils/canonical-json.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,KAAa;IACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,GAAG,MAAM,IAAI,IAAI,GAAG,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC7E,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,IAAI,GAAG,GAAG,EACV,YAA6B,IAAI,OAAO,EAAU;IAElD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,qDAAqD,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,4CAA4C,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,SAAS,CAAC,yCAAyC,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,oCAAoC,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;gBACrD,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,SAAS,CAAC,+CAA+C,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC;gBACvF,CAAC;gBACD,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,SAAS,CAAC,CAAC;YACzE,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAkB,CAAC;QAChE,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,SAAS,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,SAAS,CAAC,yDAAyD,IAAI,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU,EAAE,UAAU;gBAAE,SAAS;YACtC,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,SAAS,CAAC,4CAA4C,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,wBAAwB,CAAC,UAAU,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../../src/utils/canonical-json.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,mFAAmF;AACnF,SAAS,gBAAgB,CAAC,KAAa;IACrC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,GAAG,MAAM,IAAI,IAAI,GAAG,MAAM;gBAAE,OAAO,IAAI,CAAC;YAC7E,KAAK,IAAI,CAAC,CAAC;QACb,CAAC;aAAM,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,IAAI,GAAG,GAAG,EACV,YAA6B,IAAI,OAAO,EAAU;IAElD,SAAS,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU;IAKK;IACR;IALF,GAAG,GAAa,EAAE,CAAC;IACX,QAAQ,GAAa,EAAE,CAAC;IAEzC,YACmB,IAAY,EACpB,SAA0B;QADlB,SAAI,GAAJ,IAAI,CAAQ;QACpB,cAAS,GAAT,SAAS,CAAiB;IAClC,CAAC;IAEJ,KAAK,CAAC,OAAe;QACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,MAAM,GAAG,EAAE;QAC/B,MAAM,IAAI,SAAS,CAAC,uBAAuB,OAAO,OAAO,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC;IAC1G,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,KAAc,EAAE,CAAa;IAC9C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,gBAAgB,CAAC,KAAK,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAClE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;QACpG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,+CAA+C;QAClF,OAAO;IACT,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,WAAW;QAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAEvD,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1E,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;YACnD,IAAI,KAAK,GAAG,CAAC;gBAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK;gBAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACjD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjB,uEAAuE;YACvE,mDAAmD;YACnD,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;gBAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC1D,SAAS,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC/B,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;QACD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;YAAS,CAAC;QACT,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAKD;;;GAGG;AACH,SAAS,aAAa,CAAC,KAAgB,EAAE,CAAa;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YACtB,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,aAAa,CAAC,MAAc,EAAE,CAAa;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAkB,CAAC;IACjE,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAErF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAC7D,IAAI,gBAAgB,CAAC,GAAG,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAE,CAAC;QACjE,IAAI,UAAU,CAAC,UAAU;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,0EAA0E;IAC1E,2CAA2C;IAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC;IACrD,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpB,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/utils/crypto-service.d.ts

@@ -34,4 +34,3 @@ export declare class CryptoService {
     private isValidEd25519JWK;
     private jwkToBase64PublicKey;
 }
-//# sourceMappingURL=crypto-service.d.ts.map

package/dist/utils/crypto-service.js

@@ -104,8 +104,10 @@ export class CryptoService {
                 return false;
             }
             let signingInputBytes;
+            // A payload segment the JWS embeds next to a different detached payload.
+            let embeddedSigningInput;
             if (options?.detachedPayload !== undefined) {
-                const headerB64 = jws.split('.')[0];
+                const [headerB64, embeddedPayloadB64] = jws.split('.');
                 let payloadB64;
                 if (options.detachedPayload instanceof Uint8Array) {
                     payloadB64 = base64urlEncodeFromBytes(options.detachedPayload);
@@ -114,6 +116,9 @@ export class CryptoService {
                     payloadB64 = base64urlEncodeFromBytes(new TextEncoder().encode(options.detachedPayload));
                 }
                 signingInputBytes = new TextEncoder().encode(`${headerB64}.${payloadB64}`);
+                if (embeddedPayloadB64 !== '' && embeddedPayloadB64 !== payloadB64) {
+                    embeddedSigningInput = `${headerB64}.${embeddedPayloadB64}`;
+                }
             }
             else {
                 if (!parsed.signingInput) {
@@ -130,7 +135,22 @@ export class CryptoService {
                 logger.error('[CryptoService] Failed to extract public key:', error);
                 return false;
             }
-            return await this.verifyEd25519(signingInputBytes, parsed.signatureBytes, publicKeyBase64);
+            if (!(await this.verifyEd25519(signingInputBytes, parsed.signatureBytes, publicKeyBase64))) {
+                return false;
+            }
+            // The signature was checked over the detached payload. A different
+            // payload the JWS also embeds must verify under the same signature, or
+            // anything reading the JWS alone (JWT tooling, an audit store) sees
+            // claims the verified signature never covered. One signature verifies
+            // two different payloads only under a forged or degenerate key, so in
+            // practice this accepts an embedded payload exactly when it is the
+            // detached one.
+            if (embeddedSigningInput !== undefined &&
+                !(await this.verifyEd25519(new TextEncoder().encode(embeddedSigningInput), parsed.signatureBytes, publicKeyBase64))) {
+                logger.error('[CryptoService] Embedded JWS payload is not the signed payload');
+                return false;
+            }
+            return true;
         }
         catch (error) {
             logger.error('[CryptoService] JWS verification error:', error);

package/dist/utils/crypto-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"crypto-service.js","sourceRoot":"","sources":["../../src/utils/crypto-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,aAAa,GACd,MAAM,aAAa,CAAC;AAoBrB,MAAM,OAAO,aAAa;IACJ;IAApB,YAAoB,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAEtD,KAAK,CAAC,aAAa,CACjB,IAAgB,EAChB,SAAqB,EACrB,SAAiB;QAEjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5E,OAAO,MAAM,KAAK,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QAEpD,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,SAAU,CAAC,CAA4B,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;QAED,IAAI,OAA4C,CAAC;QACjD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAA4B,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,cAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,cAAc,GAAG,sBAAsB,CAAC,YAAa,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAElD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,SAAS,CACb,GAAW,EACX,YAAwB,EACxB,OAIC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC3D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,EAAE,WAAW,IAAI,YAAY,CAAC,GAAG,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;gBACrE,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,MAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;wBAC1C,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;4BAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;4BAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,uBAAuB,CAAC,SAAS,CAAC,CACR,CAAC;4BAC7B,MAAM,cAAc,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;4BAC5D,MAAM,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;wBAC5E,CAAC;wBAAC,MAAM,CAAC;4BACP,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;4BAC5D,OAAO,KAAK,CAAC;wBACf,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;wBAC3D,OAAO,KAAK,CAAC;oBACf,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;oBAC3D,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,EAAE,CAAC;gBACzC,MAAM,CAAC,KAAK,CACV,0CAA0C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,WAAW,EAAE,CAC1F,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IACE,OAAO,EAAE,WAAW,KAAK,SAAS;gBAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,WAAW,EAC5C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBAC9D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,iBAA6B,CAAC;YAElC,IAAI,OAAO,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;gBACrC,IAAI,UAAkB,CAAC;gBAEvB,IAAI,OAAO,CAAC,eAAe,YAAY,UAAU,EAAE,CAAC;oBAClD,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBACjE,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,wBAAwB,CACnC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAClD,CAAC;gBACJ,CAAC;gBAED,iBAAiB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;YAC7E,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBACzB,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;oBACtE,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,iBAAiB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,eAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,eAAe,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,EAAE,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,GAAY;QACpC,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,KAAK,IAAI,GAAG;YACX,GAA+B,CAAC,KAAK,CAAC,KAAK,KAAK;YACjD,KAAK,IAAI,GAAG;YACX,GAA+B,CAAC,KAAK,CAAC,KAAK,SAAS;YACrD,GAAG,IAAI,GAAG;YACV,OAAQ,GAA+B,CAAC,GAAG,CAAC,KAAK,QAAQ;YACvD,GAA+B,CAAC,GAAG,CAAY,CAAC,MAAM,GAAG,CAAC,CAC7D,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAAC,GAAe;QAC1C,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,cAAc,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,aAAa,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC;CACF"}
+{"version":3,"file":"crypto-service.js","sourceRoot":"","sources":["../../src/utils/crypto-service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,aAAa,GACd,MAAM,aAAa,CAAC;AAoBrB,MAAM,OAAO,aAAa;IACJ;IAApB,YAAoB,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAEtD,KAAK,CAAC,aAAa,CACjB,IAAgB,EAChB,SAAqB,EACrB,SAAiB;QAEjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC5E,OAAO,MAAM,KAAK,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,GAAW;QAClB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,KAAK,CAAC;QAEpD,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,SAAU,CAAC,CAA4B,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;QAED,IAAI,OAA4C,CAAC;QACjD,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAA4B,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,cAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,cAAc,GAAG,sBAAsB,CAAC,YAAa,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;QAElD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,SAAS,CACb,GAAW,EACX,YAAwB,EACxB,OAIC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAC3D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,OAAO,EAAE,WAAW,IAAI,YAAY,CAAC,GAAG,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;gBACrE,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBAChD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,MAAiB,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;oBAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;wBAC1C,IAAI,CAAC;4BACH,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;4BAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;4BAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,uBAAuB,CAAC,SAAS,CAAC,CACR,CAAC;4BAC7B,MAAM,cAAc,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;4BAC5D,MAAM,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;wBAC5E,CAAC;wBAAC,MAAM,CAAC;4BACP,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;4BAC5D,OAAO,KAAK,CAAC;wBACf,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;wBAC3D,OAAO,KAAK,CAAC;oBACf,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;oBAC3D,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,MAAM,WAAW,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC;YAC5C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,EAAE,CAAC;gBACzC,MAAM,CAAC,KAAK,CACV,0CAA0C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,WAAW,EAAE,CAC1F,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IACE,OAAO,EAAE,WAAW,KAAK,SAAS;gBAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,WAAW,EAC5C,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBAC9D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,iBAA6B,CAAC;YAClC,yEAAyE;YACzE,IAAI,oBAAwC,CAAC;YAE7C,IAAI,OAAO,EAAE,eAAe,KAAK,SAAS,EAAE,CAAC;gBAC3C,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;gBAC3E,IAAI,UAAkB,CAAC;gBAEvB,IAAI,OAAO,CAAC,eAAe,YAAY,UAAU,EAAE,CAAC;oBAClD,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBACjE,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,wBAAwB,CACnC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAClD,CAAC;gBACJ,CAAC;gBAED,iBAAiB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC,CAAC;gBAC3E,IAAI,kBAAkB,KAAK,EAAE,IAAI,kBAAkB,KAAK,UAAU,EAAE,CAAC;oBACnE,oBAAoB,GAAG,GAAG,SAAS,IAAI,kBAAkB,EAAE,CAAC;gBAC9D,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBACzB,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;oBACtE,OAAO,KAAK,CAAC;gBACf,CAAC;gBACD,iBAAiB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACpE,CAAC;YAED,IAAI,eAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,eAAe,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,KAAK,CAAC,CAAC;gBACrE,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,iBAAiB,EAAE,MAAM,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;gBAC3F,OAAO,KAAK,CAAC;YACf,CAAC;YACD,mEAAmE;YACnE,uEAAuE;YACvE,oEAAoE;YACpE,sEAAsE;YACtE,sEAAsE;YACtE,mEAAmE;YACnE,gBAAgB;YAChB,IACE,oBAAoB,KAAK,SAAS;gBAClC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CACxB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAC9C,MAAM,CAAC,cAAc,EACrB,eAAe,CAChB,CAAC,EACF,CAAC;gBACD,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;gBAC/E,OAAO,KAAK,CAAC;YACf,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,GAAY;QACpC,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,KAAK,IAAI,GAAG;YACX,GAA+B,CAAC,KAAK,CAAC,KAAK,KAAK;YACjD,KAAK,IAAI,GAAG;YACX,GAA+B,CAAC,KAAK,CAAC,KAAK,SAAS;YACrD,GAAG,IAAI,GAAG;YACV,OAAQ,GAA+B,CAAC,GAAG,CAAC,KAAK,QAAQ;YACvD,GAA+B,CAAC,GAAG,CAAY,CAAC,MAAM,GAAG,CAAC,CAC7D,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAAC,GAAe;QAC1C,MAAM,cAAc,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,cAAc,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,aAAa,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC;CACF"}

package/dist/utils/did-helpers.d.ts

@@ -165,4 +165,3 @@ export declare function generateDidKeyFromBase64(publicKeyBase64: string): strin
  * @returns The fragment identifier (multibase value), or 'keys-1' as fallback for non-did:key
  */
 export declare function didKeyFragment(did: string): string;
-//# sourceMappingURL=did-helpers.d.ts.map

package/dist/utils/ed25519-constants.d.ts

@@ -15,4 +15,3 @@ export declare const ED25519_PKCS8_DER_HEADER: Uint8Array<ArrayBuffer>;
 export declare const ED25519_SPKI_DER_HEADER_LENGTH = 12;
 /** Ed25519 raw key size in bytes */
 export declare const ED25519_KEY_SIZE = 32;
-//# sourceMappingURL=ed25519-constants.d.ts.map

package/dist/utils/ed25519-public-key.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Strict decoding of the base64 Ed25519 public keys the CryptoProviders verify
+ * against, and the small-order check every Ed25519 verification path applies.
+ *
+ * Node's base64 decoder skips characters it does not recognise and accepts any
+ * length, so `NodeCryptoProvider` used to verify against keys that
+ * `WebCryptoProvider` rejected (a 64-byte "key", a key with junk appended).
+ * Both providers now decode through here: exactly 32 bytes, nothing but ASCII
+ * whitespace besides the key, and never a small-order point.
+ */
+/** True if `key` (32 bytes) encodes a point of small order, under either sign bit. */
+export declare function isSmallOrderEd25519Key(key: Uint8Array): boolean;
+/**
+ * Decode a base64 (or base64url) Ed25519 public key, or `null` unless it is
+ * exactly 32 bytes with nothing but ASCII whitespace besides it in the string,
+ * and is not a small-order point.
+ */
+export declare function decodeEd25519PublicKey(publicKeyBase64: string): Uint8Array | null;
+/**
+ * True if `key` is an Ed25519 public CryptoKey on a small-order point. Paths
+ * that import a JWK through `jose` or WebCrypto check the imported key, not
+ * the JWK string: neither refuses a small-order point, and Node's JWK import
+ * decodes `x` leniently (padding, junk, non-zero trailing bits), so a check on
+ * the string can be sidestepped. A key that is not an extractable Ed25519
+ * public key cannot be read back and is left to the verifier.
+ */
+export declare function isSmallOrderEd25519CryptoKey(key: object): Promise<boolean>;

package/dist/utils/ed25519-public-key.js

@@ -0,0 +1,86 @@
+/**
+ * Strict decoding of the base64 Ed25519 public keys the CryptoProviders verify
+ * against, and the small-order check every Ed25519 verification path applies.
+ *
+ * Node's base64 decoder skips characters it does not recognise and accepts any
+ * length, so `NodeCryptoProvider` used to verify against keys that
+ * `WebCryptoProvider` rejected (a 64-byte "key", a key with junk appended).
+ * Both providers now decode through here: exactly 32 bytes, nothing but ASCII
+ * whitespace besides the key, and never a small-order point.
+ */
+import { base64ToBytes } from './base64.js';
+import { ED25519_KEY_SIZE } from './ed25519-constants.js';
+/** 32 bytes as base64 or base64url: 43 characters, optionally one `=` of padding. */
+const ED25519_PUBLIC_KEY_BASE64 = /^[A-Za-z0-9+/_-]{43}=?$/;
+/**
+ * ASCII whitespace, which both base64 decoders the providers used before
+ * (Node's Buffer, and `atob`) skip: a key read from a file keeps its newline.
+ */
+const ASCII_WHITESPACE = /[\t\n\f\r ]/g;
+/**
+ * Encodings of the points of order 1, 2, 4 and 8, as libsodium blocks them
+ * (`ge25519_has_small_order`), including the non-canonical `p` and `p + 1`
+ * forms. Under such a key, the signature R = identity, S = 0 satisfies the
+ * verification equation for every message, so anyone could sign as it.
+ * Compared with the sign bit (top bit of the last byte) masked off.
+ */
+const SMALL_ORDER_ENCODINGS = [
+    // 0 (order 4)
+    new Uint8Array(32),
+    // 1 (order 1): the identity
+    Uint8Array.from([1, ...new Array(31).fill(0)]),
+    // order 8
+    Uint8Array.from([
+        0x26, 0xe8, 0x95, 0x8f, 0xc2, 0xb2, 0x27, 0xb0, 0x45, 0xc3, 0xf4, 0x89, 0xf2, 0xef, 0x98, 0xf0,
+        0xd5, 0xdf, 0xac, 0x05, 0xd3, 0xc6, 0x33, 0x39, 0xb1, 0x38, 0x02, 0x88, 0x6d, 0x53, 0xfc, 0x05,
+    ]),
+    // order 8
+    Uint8Array.from([
+        0xc7, 0x17, 0x6a, 0x70, 0x3d, 0x4d, 0xd8, 0x4f, 0xba, 0x3c, 0x0b, 0x76, 0x0d, 0x10, 0x67, 0x0f,
+        0x2a, 0x20, 0x53, 0xfa, 0x2c, 0x39, 0xcc, 0xc6, 0x4e, 0xc7, 0xfd, 0x77, 0x92, 0xac, 0x03, 0x7a,
+    ]),
+    // p - 1 (order 2)
+    Uint8Array.from([0xec, ...new Array(30).fill(0xff), 0x7f]),
+    // p, a non-canonical 0 (order 4)
+    Uint8Array.from([0xed, ...new Array(30).fill(0xff), 0x7f]),
+    // p + 1, a non-canonical 1 (order 1)
+    Uint8Array.from([0xee, ...new Array(30).fill(0xff), 0x7f]),
+];
+/** True if `key` (32 bytes) encodes a point of small order, under either sign bit. */
+export function isSmallOrderEd25519Key(key) {
+    return SMALL_ORDER_ENCODINGS.some((blocked) => blocked.every((byte, i) => (i === 31 ? (key[i] & 0x7f) === byte : key[i] === byte)));
+}
+/**
+ * Decode a base64 (or base64url) Ed25519 public key, or `null` unless it is
+ * exactly 32 bytes with nothing but ASCII whitespace besides it in the string,
+ * and is not a small-order point.
+ */
+export function decodeEd25519PublicKey(publicKeyBase64) {
+    const compact = publicKeyBase64.replace(ASCII_WHITESPACE, '');
+    if (!ED25519_PUBLIC_KEY_BASE64.test(compact)) {
+        return null;
+    }
+    const key = base64ToBytes(compact);
+    if (key.length !== ED25519_KEY_SIZE || isSmallOrderEd25519Key(key)) {
+        return null;
+    }
+    return key;
+}
+/**
+ * True if `key` is an Ed25519 public CryptoKey on a small-order point. Paths
+ * that import a JWK through `jose` or WebCrypto check the imported key, not
+ * the JWK string: neither refuses a small-order point, and Node's JWK import
+ * decodes `x` leniently (padding, junk, non-zero trailing bits), so a check on
+ * the string can be sidestepped. A key that is not an extractable Ed25519
+ * public key cannot be read back and is left to the verifier.
+ */
+export async function isSmallOrderEd25519CryptoKey(key) {
+    // Typed as `object` so callers holding an opaque key handle (or the
+    // Uint8Array secret jose returns for `oct` keys) need no casts.
+    const { type, algorithm, extractable } = key;
+    if (type !== 'public' || algorithm.name !== 'Ed25519' || extractable !== true) {
+        return false;
+    }
+    return isSmallOrderEd25519Key(new Uint8Array(await crypto.subtle.exportKey('raw', key)));
+}
+//# sourceMappingURL=ed25519-public-key.js.map

package/dist/utils/ed25519-public-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ed25519-public-key.js","sourceRoot":"","sources":["../../src/utils/ed25519-public-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,qFAAqF;AACrF,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAE5D;;;GAGG;AACH,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,qBAAqB,GAA0B;IACnD,cAAc;IACd,IAAI,UAAU,CAAC,EAAE,CAAC;IAClB,4BAA4B;IAC5B,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,UAAU;IACV,UAAU,CAAC,IAAI,CAAC;QACd,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QAC9F,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;KAC/F,CAAC;IACF,UAAU;IACV,UAAU,CAAC,IAAI,CAAC;QACd,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;QAC9F,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;KAC/F,CAAC;IACF,kBAAkB;IAClB,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,iCAAiC;IACjC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,qCAAqC;IACrC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,KAAK,CAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;CACnE,CAAC;AAEF,sFAAsF;AACtF,MAAM,UAAU,sBAAsB,CAAC,GAAe;IACpD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5C,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CACrF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,eAAuB;IAC5D,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,GAAG,CAAC,MAAM,KAAK,gBAAgB,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,GAAW;IAC5D,oEAAoE;IACpE,gEAAgE;IAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,GAAyB,CAAC;IACnE,IAAI,IAAI,KAAK,QAAQ,IAAK,SAA8B,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACpG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAgB,CAAC,CAAC,CAAC,CAAC;AACxG,CAAC"}

package/dist/utils/guards.d.ts

@@ -1,2 +1 @@
 export declare function isRecord(value: unknown): value is Record<string, unknown>;
-//# sourceMappingURL=guards.d.ts.map

package/dist/utils/index.d.ts

@@ -6,4 +6,3 @@ export { isRecord } from './guards.js';
 export { assertCanonicalJsonValue, canonicalizeJson, canonicalizeJsonBytes, } from './canonical-json.js';
 export { stripTrailingSlashes } from './url.js';
 export { createSafeFetch, fetchTransport, isBlockedAddress, type SafeFetch, type SafeFetchResponse, type SafeFetchOptions, type SafeFetchTransport, type TransportInit, type RawResponse, type DnsLookup, type DnsAddress, } from './safe-fetch.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/utils/ip-classifier.d.ts

@@ -9,4 +9,3 @@
  */
 /** True if an address must NOT be connected to (classified by shape, not by trusting `family`). */
 export declare function isBlockedAddress(address: string): boolean;
-//# sourceMappingURL=ip-classifier.d.ts.map

package/dist/utils/safe-fetch-transports.d.ts

@@ -50,4 +50,3 @@ export declare const nodeHttpsTransport: SafeFetchTransport;
  * Node serverless runtime) must still pass `transport: fetchTransport` explicitly.
  */
 export declare function selectDefaultTransport(): SafeFetchTransport;
-//# sourceMappingURL=safe-fetch-transports.d.ts.map

package/dist/utils/safe-fetch-types.d.ts

@@ -63,4 +63,3 @@ export interface SafeFetchOptions {
     /** Maximum same-origin redirects to follow (default 3). */
     maxRedirects?: number;
 }
-//# sourceMappingURL=safe-fetch-types.d.ts.map

package/dist/utils/safe-fetch.d.ts

@@ -37,4 +37,3 @@ export { defaultLookup, fetchTransport, nodeHttpsTransport, selectDefaultTranspo
  * card's `FetchLike`: `(url) => Promise<{ ok, status, json }>`.
  */
 export declare function createSafeFetch(options?: SafeFetchOptions): SafeFetch;
-//# sourceMappingURL=safe-fetch.d.ts.map

package/dist/utils/statuslist-bits.d.ts

@@ -48,4 +48,3 @@ export declare function readStatusBit(bits: Uint8Array, index: number): boolean;
  * therefore fail-closed-unusable — revocation source for every holder.
  */
 export declare function assertAnchorableStatusListCredential(content: unknown): void;
-//# sourceMappingURL=statuslist-bits.d.ts.map

package/dist/utils/statuslist-purpose.d.ts

@@ -9,4 +9,3 @@
  * its clear bit would otherwise report "not revoked" from the wrong list, a fail-open bypass.
  */
 export declare function assertStatusPurpose(listPurpose: unknown, wanted: string): void;
-//# sourceMappingURL=statuslist-purpose.d.ts.map

package/dist/utils/ttl-cache.d.ts

@@ -23,4 +23,3 @@ export declare class TtlCache<T> {
     deleteWhere(predicate: (key: string) => boolean): void;
     clear(): void;
 }
-//# sourceMappingURL=ttl-cache.d.ts.map

package/dist/utils/url.d.ts

@@ -1,2 +1 @@
 export declare function stripTrailingSlashes(value: string): string;
-//# sourceMappingURL=url.d.ts.map

package/package.json

@@ -1,10 +1,12 @@
 {
   "name": "@kya-os/mcp",
-  "version": "1.16.1",
+  "version": "1.17.0",
   "description": "Reference implementation of the KYA-OS protocol for Model Context Protocol servers: identity, delegation, proofs, sessions, and verifiable audit trails",
   "license": "MIT",
   "type": "module",
-  "sideEffects": false,
+  "sideEffects": [
+    "./dist/**/index.js"
+  ],
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
@@ -116,7 +118,7 @@
   },
   "dependencies": {
     "jose": "^6.2.8",
-    "json-canonicalize": "2.0.0",
+    "json-canonicalize": "3.0.1",
     "zod": "^4.4.3"
   },
   "peerDependencies": {
@@ -135,15 +137,16 @@
     "@types/node": "^26.2.0",
     "@typescript-eslint/eslint-plugin": "^8.67.0",
     "@typescript-eslint/parser": "^8.67.0",
-    "@vitest/coverage-v8": "^4.1.10",
+    "@vitest/coverage-v8": "^5.0.3",
     "ajv": "^8.20.0",
     "commander": "^15.0.0",
+    "esbuild": "^0.28.1",
     "eslint": "^10.8.1",
     "express": "^5.2.1",
     "tsx": "^4.23.12",
-    "typescript": "^5.9.3",
+    "typescript": "^6.0.3",
     "typescript-eslint": "^8.67.0",
-    "vitest": "^4.1.10"
+    "vitest": "^5.0.3"
   },
   "keywords": [
     "kya-os",

package/schemas/card-delegation-credential.json

@@ -25,7 +25,10 @@
     "type": {
       "type": "array",
       "items": { "type": "string" },
-      "contains": { "const": "VerifiableCredential" },
+      "allOf": [
+        { "contains": { "const": "VerifiableCredential" } },
+        { "contains": { "const": "DelegationCredential" } }
+      ],
       "minItems": 2,
       "description": "Credential types. MUST include 'VerifiableCredential' and 'DelegationCredential'."
     },