@ouispec/agent-core 0.16.0 → 0.17.0

package/README.md

@@ -11,4 +11,26 @@ It has no runtime of its own. `@ouispec/agent-worker` (the agent), `@ouispec/age
 - The turn events come from `@ouispec/agent-events`, and the approval messages from `@ouispec/contract`'s `approvals.json`.
 - `argsHash` and the approval rules are `oui-spec`'s. `@ouispec/agent-core/approval-vectors.json` re-exports its test vectors, so an engine in another language can hold its own hash to them.
 
+## Verifying an approval receipt
+
+A tool's own API refuses an irreversible request no user approved with `verifyApprovalReceipt`. The realtime server signs a receipt when it redeems an approval, and the worker sends it on the approved call as the `OUI-Approval-Receipt` header (`APPROVAL_RECEIPT_HEADER`). The function runs on WebCrypto, the same in Node and in the browser build.
+
+```ts
+import { APPROVAL_RECEIPT_HEADER, argsHash, verifyApprovalReceipt } from '@ouispec/agent-core';
+
+const checked = await verifyApprovalReceipt(request.headers.get(APPROVAL_RECEIPT_HEADER) ?? '', {
+  jwks: 'https://realtime.example.com/.well-known/oui-approval-jwks.json', // or the JWKS document itself
+  expectedArgsHash: await argsHash(toolInput), // the call as you received it
+  audience: 'https://api.example.com', // your own origin
+});
+// { ok: true, claims } or { ok: false, reason, error }
+```
+
+- `expectedArgsHash`: for a generated API tool, the tool's input as the worker's executor received it, one object holding every path, query and body parameter by its declared name; for an operation whose input is its body, that body.
+- `jwks` as a URL is fetched, cached for the response's `max-age`, and fetched again when a receipt names a key id it lacks, at most once a minute. A key set that cannot be read refuses with `key`.
+- It checks, in order: the header (`alg` `EdDSA`, `typ` `oui-approval-receipt+jwt`, a `kid`, no `crit`), a published key with that id, the signature, the claims' shape, `exp` and `iat` with 60 s of clock skew, `aud`, then `argsHash`. The refusal reasons are `malformed`, `key`, `signature`, `expired`, `audience` and `args`.
+- **Single use is yours.** The receipt's `jti` is the call's idempotency key. Record each one you act on for at least two minutes, and answer a repeat with the first result, or refuse it.
+
+Any JOSE library verifies a receipt too: accept only `EdDSA` with this `typ`, read the key from the JWKS by `kid`, and then check `exp`, `aud` and `argsHash` as above. `@ouispec/agent-core/receipt-vectors.json` holds receipts, the keys they were signed with, and the result each must give, for an implementation in any language.
+
 See [the integrator guide](https://github.com/wesreid/oui/blob/main/packages/contract/INTEGRATOR-GUIDE.md) for how the pieces fit, and [VERSIONING.md](https://github.com/wesreid/oui/blob/main/VERSIONING.md) for what a release may change.

package/dist/approvals/index.d.ts

@@ -1,3 +1,4 @@
 export * from './args-hash.js';
 export * from './types.js';
+export * from './receipt.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/approvals/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/approvals/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/approvals/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}

package/dist/approvals/index.js

@@ -1,3 +1,4 @@
 export * from './args-hash.js';
 export * from './types.js';
+export * from './receipt.js';
 //# sourceMappingURL=index.js.map

package/dist/approvals/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/approvals/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/approvals/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC"}

package/dist/approvals/receipt.d.ts

@@ -0,0 +1,127 @@
+import type { ApprovalReceiptClaims } from '@ouispec/contract';
+/**
+ * The approval receipt: what the tool's own API checks to know that the call
+ * it received is one a person approved.
+ *
+ * When the realtime server redeems an approval token it signs a receipt, a
+ * compact JWS over Ed25519 with a key only it holds, and the worker carries it
+ * on the approved call (`OUI-Approval-Receipt`). The tool holds only the
+ * public keys, published at `<iss>/.well-known/oui-approval-jwks.json`, so it
+ * can verify a receipt and never make one. The receipt names the one API it is
+ * for (`aud`), the call's args hash, and lasts 120 seconds; its `jti` is the
+ * call's idempotency key, which the tool acts on at most once.
+ *
+ * `verifyApprovalReceipt` is the same in Node and in the browser build: it
+ * runs on WebCrypto. `@ouispec/agent-core/receipt-vectors.json` holds every
+ * other implementation, in any language, to the results it gives.
+ */
+/** The receipt's JWS `typ`. A verifier accepts no other. */
+export declare const APPROVAL_RECEIPT_TYP = "oui-approval-receipt+jwt";
+/** The receipt's JWS `alg`: EdDSA over Ed25519. A verifier accepts no other, and never `none`. */
+export declare const APPROVAL_RECEIPT_ALG = "EdDSA";
+/** The request header an approved call carries its receipt in. */
+export declare const APPROVAL_RECEIPT_HEADER = "OUI-Approval-Receipt";
+/** Where, under the realtime server's public base URL (`iss`), its receipt keys are published. */
+export declare const APPROVAL_RECEIPT_JWKS_PATH = "/.well-known/oui-approval-jwks.json";
+/** How long a receipt lasts: the request that runs right after redemption, and one retry. */
+export declare const APPROVAL_RECEIPT_TTL_SEC = 120;
+/** The clock skew a verifier allows on `iat` and `exp`. */
+export declare const APPROVAL_RECEIPT_CLOCK_SKEW_SEC = 60;
+/** How long the published keys may be cached (`Cache-Control: public, max-age=3600`). */
+export declare const APPROVAL_RECEIPT_JWKS_MAX_AGE_SEC = 3600;
+/** A verifier that meets a key id it does not know fetches the keys again, at most this often. */
+export declare const APPROVAL_RECEIPT_JWKS_REFETCH_MS = 60000;
+/**
+ * Why a receipt was refused, in the order the verifier checks:
+ *
+ * - `malformed`: not a compact JWS; a header that is not exactly EdDSA with
+ *   this `typ` and a `kid`, or that names `crit`; or claims that are not a
+ *   receipt's.
+ * - `key`: no published key has its `kid` (a removed key, or another
+ *   environment's), or the keys could not be read.
+ * - `signature`: the signature is not that key's over this header and these claims.
+ * - `expired`: past `exp`, or issued in the future, beyond the clock skew.
+ * - `audience`: issued for another API.
+ * - `args`: issued for other arguments than the request carries.
+ */
+export type ApprovalReceiptRefusalReason = 'malformed' | 'key' | 'signature' | 'expired' | 'audience' | 'args';
+export declare const APPROVAL_RECEIPT_REFUSAL_REASONS: readonly ApprovalReceiptRefusalReason[];
+/** One published receipt key: an Ed25519 public key as a JWK. */
+export interface ApprovalReceiptPublicJwk {
+    kty: 'OKP';
+    crv: 'Ed25519';
+    /** The public key, base64url. */
+    x: string;
+    kid: string;
+    alg?: 'EdDSA';
+    use?: 'sig';
+}
+/** The realtime server's published receipt keys. */
+export interface ApprovalReceiptJwks {
+    keys: ApprovalReceiptPublicJwk[];
+}
+export type ApprovalReceiptVerification = {
+    ok: true;
+    claims: ApprovalReceiptClaims;
+} | {
+    ok: false;
+    reason: ApprovalReceiptRefusalReason;
+    error: string;
+};
+export interface VerifyApprovalReceiptOptions {
+    /**
+     * The realtime server's published keys: the JWKS document, or its URL
+     * (`<iss>/.well-known/oui-approval-jwks.json`). Given a URL, the keys are
+     * fetched, cached for the response's `max-age`, and fetched again when a
+     * receipt names a key id they lack, at most once a minute.
+     */
+    jwks: ApprovalReceiptJwks | string | URL;
+    /**
+     * `argsHash` of the call as the tool received it. For a generated API tool:
+     * one object holding every path, query and body parameter by its declared
+     * name; for an operation whose input is its body, that body.
+     */
+    expectedArgsHash: string;
+    /** The tool's own origin (scheme, host and port), which the receipt must name as `aud`. */
+    audience: string;
+    /** The time to check against, epoch ms. Default: now. */
+    now?: number;
+    /** The fetch the keys are read with, when `jwks` is a URL. Default: the global fetch. */
+    fetch?: typeof fetch;
+}
+/** base64url → bytes, without padding, on any runtime. */
+export declare function base64UrlToBytes(value: string): Uint8Array;
+/** bytes → base64url, without padding, on any runtime. */
+export declare function bytesToBase64Url(bytes: Uint8Array): string;
+/**
+ * The origin an audience names: scheme, host and port, as `URL.origin` writes
+ * it. One rule for the worker that names an API's audience, the store that
+ * fixes it, and the verifier that compares it. Null when it is not an
+ * absolute http(s) URL with nothing past its origin but a `/`.
+ */
+export declare function approvalReceiptAudience(value: string): string | null;
+/**
+ * What is wrong with a receipt's claims, or null: every required claim of the
+ * right type, no claim it does not define. The signer and the verifier hold a
+ * receipt to this one rule.
+ */
+export declare function approvalReceiptClaimsProblem(claims: unknown): string | null;
+/** The members of a JWK a receipt key is published with: never `d`. */
+export declare function publicReceiptJwk(jwk: {
+    kty?: unknown;
+    crv?: unknown;
+    x?: unknown;
+    kid?: unknown;
+}): ApprovalReceiptPublicJwk;
+/**
+ * Verifies an approval receipt. It checks, in this order: the header (EdDSA,
+ * the receipt `typ`, a key id, no `crit`), that a published key has that id,
+ * the signature, the claims' shape, `exp` and `iat` (60 s of clock skew),
+ * `aud`, then `argsHash`; each failure has its own `reason`. It never throws
+ * for a bad receipt; a JWKS URL that cannot be read refuses with `key`.
+ *
+ * A receipt that verifies is still the tool's to use once: record its `jti`
+ * for at least the receipt's lifetime, and never act twice on one.
+ */
+export declare function verifyApprovalReceipt(jws: string, options: VerifyApprovalReceiptOptions): Promise<ApprovalReceiptVerification>;
+//# sourceMappingURL=receipt.d.ts.map

package/dist/approvals/receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../../src/approvals/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAG/D;;;;;;;;;;;;;;;GAeG;AAEH,4DAA4D;AAC5D,eAAO,MAAM,oBAAoB,6BAA6B,CAAC;AAC/D,kGAAkG;AAClG,eAAO,MAAM,oBAAoB,UAAU,CAAC;AAC5C,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,yBAAyB,CAAC;AAC9D,kGAAkG;AAClG,eAAO,MAAM,0BAA0B,wCAAwC,CAAC;AAChF,6FAA6F;AAC7F,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,2DAA2D;AAC3D,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAClD,yFAAyF;AACzF,eAAO,MAAM,iCAAiC,OAAO,CAAC;AACtD,kGAAkG;AAClG,eAAO,MAAM,gCAAgC,QAAS,CAAC;AAEvD;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,4BAA4B,GAAG,WAAW,GAAG,KAAK,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAE/G,eAAO,MAAM,gCAAgC,EAAE,SAAS,4BAA4B,EAOnF,CAAC;AAEF,iEAAiE;AACjE,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,KAAK,CAAC;IACX,GAAG,EAAE,SAAS,CAAC;IACf,iCAAiC;IACjC,CAAC,EAAE,MAAM,CAAC;IACV,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,KAAK,CAAC;CACb;AAED,oDAAoD;AACpD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,wBAAwB,EAAE,CAAC;CAClC;AAED,MAAM,MAAM,2BAA2B,GACnC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,GAC3C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,4BAA4B,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE,MAAM,WAAW,4BAA4B;IAC3C;;;;;OAKG;IACH,IAAI,EAAE,mBAAmB,GAAG,MAAM,GAAG,GAAG,CAAC;IACzC;;;;OAIG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB,2FAA2F;IAC3F,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAKD,0DAA0D;AAC1D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAO1D;AAED,0DAA0D;AAC1D,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAI1D;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWpE;AAMD;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAW3E;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,GAAG,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,CAAC,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,wBAAwB,CAE5H;AAuGD;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAiEpI"}

package/dist/approvals/receipt.js

@@ -0,0 +1,312 @@
+import { APPROVAL_CHANNELS } from './types.js';
+/**
+ * The approval receipt: what the tool's own API checks to know that the call
+ * it received is one a person approved.
+ *
+ * When the realtime server redeems an approval token it signs a receipt, a
+ * compact JWS over Ed25519 with a key only it holds, and the worker carries it
+ * on the approved call (`OUI-Approval-Receipt`). The tool holds only the
+ * public keys, published at `<iss>/.well-known/oui-approval-jwks.json`, so it
+ * can verify a receipt and never make one. The receipt names the one API it is
+ * for (`aud`), the call's args hash, and lasts 120 seconds; its `jti` is the
+ * call's idempotency key, which the tool acts on at most once.
+ *
+ * `verifyApprovalReceipt` is the same in Node and in the browser build: it
+ * runs on WebCrypto. `@ouispec/agent-core/receipt-vectors.json` holds every
+ * other implementation, in any language, to the results it gives.
+ */
+/** The receipt's JWS `typ`. A verifier accepts no other. */
+export const APPROVAL_RECEIPT_TYP = 'oui-approval-receipt+jwt';
+/** The receipt's JWS `alg`: EdDSA over Ed25519. A verifier accepts no other, and never `none`. */
+export const APPROVAL_RECEIPT_ALG = 'EdDSA';
+/** The request header an approved call carries its receipt in. */
+export const APPROVAL_RECEIPT_HEADER = 'OUI-Approval-Receipt';
+/** Where, under the realtime server's public base URL (`iss`), its receipt keys are published. */
+export const APPROVAL_RECEIPT_JWKS_PATH = '/.well-known/oui-approval-jwks.json';
+/** How long a receipt lasts: the request that runs right after redemption, and one retry. */
+export const APPROVAL_RECEIPT_TTL_SEC = 120;
+/** The clock skew a verifier allows on `iat` and `exp`. */
+export const APPROVAL_RECEIPT_CLOCK_SKEW_SEC = 60;
+/** How long the published keys may be cached (`Cache-Control: public, max-age=3600`). */
+export const APPROVAL_RECEIPT_JWKS_MAX_AGE_SEC = 3600;
+/** A verifier that meets a key id it does not know fetches the keys again, at most this often. */
+export const APPROVAL_RECEIPT_JWKS_REFETCH_MS = 60_000;
+export const APPROVAL_RECEIPT_REFUSAL_REASONS = [
+    'malformed',
+    'key',
+    'signature',
+    'expired',
+    'audience',
+    'args',
+];
+const B64URL = /^[A-Za-z0-9_-]*$/;
+const ARGS_HASH = /^[0-9a-f]{64}$/;
+/** base64url → bytes, without padding, on any runtime. */
+export function base64UrlToBytes(value) {
+    if (!B64URL.test(value) || value.length % 4 === 1)
+        throw new TypeError('not base64url');
+    const base64 = value.replace(/-/g, '+').replace(/_/g, '/') + '='.repeat((4 - (value.length % 4)) % 4);
+    const binary = atob(base64);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+/** bytes → base64url, without padding, on any runtime. */
+export function bytesToBase64Url(bytes) {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/**
+ * The origin an audience names: scheme, host and port, as `URL.origin` writes
+ * it. One rule for the worker that names an API's audience, the store that
+ * fixes it, and the verifier that compares it. Null when it is not an
+ * absolute http(s) URL with nothing past its origin but a `/`.
+ */
+export function approvalReceiptAudience(value) {
+    if (typeof value !== 'string' || !value)
+        return null;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return null;
+    }
+    if (url.protocol !== 'http:' && url.protocol !== 'https:')
+        return null;
+    if (url.username || url.password || url.search || url.hash || (url.pathname !== '/' && url.pathname !== ''))
+        return null;
+    return url.origin;
+}
+const REQUIRED_STRINGS = ['iss', 'aud', 'approvalId', 'tool', 'conversationId', 'userId', 'jti'];
+const OPTIONAL_STRINGS = ['operationId', 'accountId'];
+const KNOWN_CLAIMS = new Set([...REQUIRED_STRINGS, ...OPTIONAL_STRINGS, 'argsHash', 'channel', 'iat', 'exp']);
+/**
+ * What is wrong with a receipt's claims, or null: every required claim of the
+ * right type, no claim it does not define. The signer and the verifier hold a
+ * receipt to this one rule.
+ */
+export function approvalReceiptClaimsProblem(claims) {
+    if (!claims || typeof claims !== 'object' || Array.isArray(claims))
+        return 'the claims are not an object';
+    const c = claims;
+    for (const k of REQUIRED_STRINGS)
+        if (typeof c[k] !== 'string' || !c[k])
+            return `claim ${k} is missing`;
+    for (const k of OPTIONAL_STRINGS)
+        if (c[k] !== undefined && (typeof c[k] !== 'string' || !c[k]))
+            return `claim ${k} is not a string`;
+    if (typeof c.argsHash !== 'string' || !ARGS_HASH.test(c.argsHash))
+        return 'claim argsHash is not an args hash';
+    if (!APPROVAL_CHANNELS.includes(c.channel))
+        return 'claim channel is not a channel';
+    for (const k of ['iat', 'exp'])
+        if (!Number.isSafeInteger(c[k]))
+            return `claim ${k} is not a time`;
+    if (c.exp <= c.iat)
+        return 'claim exp is not after iat';
+    for (const k of Object.keys(c))
+        if (!KNOWN_CLAIMS.has(k))
+            return `claim ${k} is not a receipt's`;
+    return null;
+}
+/** The members of a JWK a receipt key is published with: never `d`. */
+export function publicReceiptJwk(jwk) {
+    return { kty: 'OKP', crv: 'Ed25519', x: String(jwk.x), kid: String(jwk.kid), alg: 'EdDSA', use: 'sig' };
+}
+/** Whether a JWK is a receipt verification key: Ed25519, a 32-byte public key, a key id, and no other algorithm or use. */
+function isReceiptKey(jwk) {
+    if (!jwk || typeof jwk !== 'object')
+        return false;
+    const k = jwk;
+    if (k.kty !== 'OKP' || k.crv !== 'Ed25519' || typeof k.kid !== 'string' || !k.kid || typeof k.x !== 'string')
+        return false;
+    if (k.alg !== undefined && k.alg !== APPROVAL_RECEIPT_ALG)
+        return false;
+    if (k.use !== undefined && k.use !== 'sig')
+        return false;
+    try {
+        return base64UrlToBytes(k.x).length === 32;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * WebCrypto: global in browsers and Node 19+; Node 18 has it only on
+ * `node:crypto`, imported here by a specifier bundlers leave alone.
+ */
+async function subtleCrypto() {
+    const global = globalThis.crypto?.subtle;
+    if (global)
+        return global;
+    const nodeCrypto = 'node:crypto';
+    try {
+        const mod = (await import(/* @vite-ignore */ nodeCrypto));
+        if (mod.webcrypto?.subtle)
+            return mod.webcrypto.subtle;
+    }
+    catch {
+        // Not Node: fall through to the error below.
+    }
+    throw new Error('[agent-sdk] verifyApprovalReceipt needs WebCrypto (crypto.subtle), which this runtime does not provide');
+}
+/** A JWKS document's receipt keys by key id. Keys of any other kind are ignored, and a kid published twice is refused. */
+function keysById(document) {
+    const keys = document?.keys;
+    if (!Array.isArray(keys))
+        throw new Error('the key set has no "keys" list');
+    const byId = new Map();
+    const doubled = new Set();
+    for (const k of keys) {
+        if (!isReceiptKey(k))
+            continue;
+        if (byId.has(k.kid))
+            doubled.add(k.kid);
+        byId.set(k.kid, k);
+    }
+    // Two keys under one id: neither can be told from the other, so neither is used.
+    for (const kid of doubled)
+        byId.delete(kid);
+    return byId;
+}
+const remoteKeySets = new Map();
+const inflight = new Map();
+function maxAgeSeconds(cacheControl) {
+    if (/(?:^|,)\s*(?:no-store|no-cache)\s*(?:,|$)/i.test(cacheControl ?? ''))
+        return 0;
+    const match = /(?:^|,)\s*max-age\s*=\s*"?(\d+)"?\s*(?:,|$)/i.exec(cacheControl ?? '');
+    return match ? Number(match[1]) : APPROVAL_RECEIPT_JWKS_MAX_AGE_SEC;
+}
+async function fetchKeySet(url, fetchImpl, now) {
+    const running = inflight.get(url);
+    if (running)
+        return running;
+    const reading = (async () => {
+        const res = await fetchImpl(url, { headers: { accept: 'application/json' } });
+        if (!res.ok)
+            throw new Error(`the key set at ${url} answered HTTP ${res.status}`);
+        const document = (await res.json());
+        const set = { keys: keysById(document), freshUntil: now + maxAgeSeconds(res.headers.get('cache-control')) * 1000, fetchedAt: now };
+        remoteKeySets.set(url, set);
+        return set;
+    })();
+    inflight.set(url, reading);
+    try {
+        return await reading;
+    }
+    finally {
+        inflight.delete(url);
+    }
+}
+/** The key a receipt names, from a document or a cached, refreshed URL; null when no published key has that id. */
+async function receiptKey(jwks, kid, fetchImpl, now) {
+    if (typeof jwks !== 'string' && !(jwks instanceof URL))
+        return keysById(jwks).get(kid) ?? null;
+    const url = jwks.toString();
+    const doFetch = fetchImpl ?? globalThis.fetch;
+    if (typeof doFetch !== 'function')
+        throw new Error('no fetch to read the key set with');
+    let set = remoteKeySets.get(url);
+    if (!set || now >= set.freshUntil)
+        set = await fetchKeySet(url, doFetch, now);
+    else if (!set.keys.has(kid) && now - set.fetchedAt >= APPROVAL_RECEIPT_JWKS_REFETCH_MS)
+        set = await fetchKeySet(url, doFetch, now);
+    return set.keys.get(kid) ?? null;
+}
+const refuse = (reason, error) => ({ ok: false, reason, error });
+function decodeJson(segment) {
+    return JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(base64UrlToBytes(segment)));
+}
+/**
+ * Verifies an approval receipt. It checks, in this order: the header (EdDSA,
+ * the receipt `typ`, a key id, no `crit`), that a published key has that id,
+ * the signature, the claims' shape, `exp` and `iat` (60 s of clock skew),
+ * `aud`, then `argsHash`; each failure has its own `reason`. It never throws
+ * for a bad receipt; a JWKS URL that cannot be read refuses with `key`.
+ *
+ * A receipt that verifies is still the tool's to use once: record its `jti`
+ * for at least the receipt's lifetime, and never act twice on one.
+ */
+export async function verifyApprovalReceipt(jws, options) {
+    const now = options.now ?? Date.now();
+    if (typeof jws !== 'string')
+        return refuse('malformed', 'not a compact JWS');
+    const parts = jws.split('.');
+    if (parts.length !== 3 || parts.some((p) => !B64URL.test(p)) || !parts[0] || !parts[1] || !parts[2]) {
+        return refuse('malformed', 'not a compact JWS');
+    }
+    const [headerPart, payloadPart, signaturePart] = parts;
+    let header;
+    try {
+        header = decodeJson(headerPart);
+    }
+    catch {
+        return refuse('malformed', 'the header is not JSON');
+    }
+    if (!header || typeof header !== 'object' || Array.isArray(header))
+        return refuse('malformed', 'the header is not an object');
+    if (header.alg !== APPROVAL_RECEIPT_ALG)
+        return refuse('malformed', `the header's alg is not ${APPROVAL_RECEIPT_ALG}`);
+    if (header.typ !== APPROVAL_RECEIPT_TYP)
+        return refuse('malformed', `the header's typ is not ${APPROVAL_RECEIPT_TYP}`);
+    if (typeof header.kid !== 'string' || !header.kid)
+        return refuse('malformed', 'the header names no kid');
+    if (header.crit !== undefined)
+        return refuse('malformed', 'the header names critical extensions, which a receipt has none of');
+    let jwk;
+    try {
+        jwk = await receiptKey(options.jwks, header.kid, options.fetch, now);
+    }
+    catch (err) {
+        return refuse('key', `the receipt keys could not be read: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!jwk)
+        return refuse('key', `no published receipt key has kid "${header.kid}"`);
+    let signature;
+    try {
+        signature = base64UrlToBytes(signaturePart);
+    }
+    catch {
+        return refuse('malformed', 'the signature is not base64url');
+    }
+    const subtle = await subtleCrypto();
+    let valid;
+    try {
+        const key = await subtle.importKey('jwk', { kty: 'OKP', crv: 'Ed25519', x: jwk.x }, { name: 'Ed25519' }, false, ['verify']);
+        valid =
+            signature.length === 64 &&
+                (await subtle.verify({ name: 'Ed25519' }, key, signature, new TextEncoder().encode(`${headerPart}.${payloadPart}`)));
+    }
+    catch {
+        valid = false;
+    }
+    if (!valid)
+        return refuse('signature', `the signature is not key "${header.kid}"'s over this receipt`);
+    let claims;
+    try {
+        claims = decodeJson(payloadPart);
+    }
+    catch {
+        return refuse('malformed', 'the claims are not JSON');
+    }
+    const problem = approvalReceiptClaimsProblem(claims);
+    if (problem)
+        return refuse('malformed', problem);
+    const c = claims;
+    const nowSec = Math.floor(now / 1000);
+    if (nowSec >= c.exp + APPROVAL_RECEIPT_CLOCK_SKEW_SEC)
+        return refuse('expired', 'the receipt has expired');
+    if (c.iat > nowSec + APPROVAL_RECEIPT_CLOCK_SKEW_SEC)
+        return refuse('expired', 'the receipt was issued in the future');
+    const audience = approvalReceiptAudience(options.audience) ?? options.audience;
+    if (c.aud !== audience)
+        return refuse('audience', `the receipt is for ${c.aud}, not ${audience}`);
+    if (c.argsHash !== options.expectedArgsHash)
+        return refuse('args', 'the receipt is for other arguments than this request carries');
+    return { ok: true, claims: c };
+}
+//# sourceMappingURL=receipt.js.map

package/dist/approvals/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/approvals/receipt.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AAEH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAC/D,kGAAkG;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAC5C,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,sBAAsB,CAAC;AAC9D,kGAAkG;AAClG,MAAM,CAAC,MAAM,0BAA0B,GAAG,qCAAqC,CAAC;AAChF,6FAA6F;AAC7F,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAC5C,2DAA2D;AAC3D,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAClD,yFAAyF;AACzF,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC;AACtD,kGAAkG;AAClG,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC;AAiBvD,MAAM,CAAC,MAAM,gCAAgC,GAA4C;IACvF,WAAW;IACX,KAAK;IACL,WAAW;IACX,SAAS;IACT,UAAU;IACV,MAAM;CACP,CAAC;AA4CF,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAClC,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,0DAA0D;AAC1D,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACrD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACzH,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,CAAU,CAAC;AAC1G,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,WAAW,CAAU,CAAC;AAC/D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEtH;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAe;IAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,8BAA8B,CAAC;IAC1G,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,gBAAgB;QAAE,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,aAAa,CAAC;IACxG,KAAK,MAAM,CAAC,IAAI,gBAAgB;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,kBAAkB,CAAC;IACrI,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,oCAAoC,CAAC;IAC/G,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAgB,CAAC;QAAE,OAAO,gCAAgC,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAU;QAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,gBAAgB,CAAC;IAC5G,IAAK,CAAC,CAAC,GAAc,IAAK,CAAC,CAAC,GAAc;QAAE,OAAO,4BAA4B,CAAC;IAChF,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,qBAAqB,CAAC;IACjG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,GAAiE;IAChG,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AAC1G,CAAC;AAED,2HAA2H;AAC3H,SAAS,YAAY,CAAC,GAAY;IAChC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC3H,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,oBAAoB;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,YAAY;IACzB,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IACzC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,UAAU,GAAG,aAAa,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAA8C,CAAC;QACvG,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,6CAA6C;IAC/C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAC;AAC5H,CAAC;AAED,0HAA0H;AAC1H,SAAS,QAAQ,CAAC,QAAiB;IACjC,MAAM,IAAI,GAAI,QAAsC,EAAE,IAAI,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoC,CAAC;IACzD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;YAAE,SAAS;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,iFAAiF;IACjF,KAAK,MAAM,GAAG,IAAI,OAAO;QAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAwB,CAAC;AACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAC;AAE1D,SAAS,aAAa,CAAC,YAA2B;IAChD,IAAI,4CAA4C,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QAAE,OAAO,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,8CAA8C,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IACtF,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iCAAiC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,SAAuB,EAAE,GAAW;IAC1E,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QAC1B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClF,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;QAC/C,MAAM,GAAG,GAAiB,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACjJ,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,EAAE,CAAC;IACL,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,mHAAmH;AACnH,KAAK,UAAU,UAAU,CAAC,IAA0C,EAAE,GAAW,EAAE,SAAmC,EAAE,GAAW;IACjI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,YAAY,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC/F,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IAC9C,IAAI,OAAO,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACxF,IAAI,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU;QAAE,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;SACzE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,CAAC,SAAS,IAAI,gCAAgC;QAAE,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACnI,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AACnC,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,MAAoC,EAAE,KAAa,EAA+B,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAEpI,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAW,EAAE,OAAqC;IAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAC7E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpG,OAAO,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC;IAEvD,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,UAAU,CAA4B,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,WAAW,EAAE,wBAAwB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,6BAA6B,CAAC,CAAC;IAC9H,IAAI,MAAM,CAAC,GAAG,KAAK,oBAAoB;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,2BAA2B,oBAAoB,EAAE,CAAC,CAAC;IACvH,IAAI,MAAM,CAAC,GAAG,KAAK,oBAAoB;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,2BAA2B,oBAAoB,EAAE,CAAC,CAAC;IACvH,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,mEAAmE,CAAC,CAAC;IAE/H,IAAI,GAAoC,CAAC;IACzC,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,MAAM,CAAC,KAAK,EAAE,uCAAuC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,qCAAqC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;IAEnF,IAAI,SAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,SAAS,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;IACpC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5H,KAAK;YACH,SAAS,CAAC,MAAM,KAAK,EAAE;gBACvB,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,SAAyB,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,UAAU,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IACzI,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,6BAA6B,MAAM,CAAC,GAAG,uBAAuB,CAAC,CAAC;IAEvG,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,MAA+B,CAAC;IAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,IAAI,CAAC,CAAC,GAAG,GAAG,+BAA+B;QAAE,OAAO,MAAM,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAC3G,IAAI,CAAC,CAAC,GAAG,GAAG,MAAM,GAAG,+BAA+B;QAAE,OAAO,MAAM,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;IAEvH,MAAM,QAAQ,GAAG,uBAAuB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC;IAC/E,IAAI,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,GAAG,SAAS,QAAQ,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,gBAAgB;QAAE,OAAO,MAAM,CAAC,MAAM,EAAE,8DAA8D,CAAC,CAAC;IACnI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AACjC,CAAC"}

package/dist/approvals/types.d.ts

@@ -103,5 +103,5 @@ export interface ApprovalOwner {
     userId: string;
     conversationId: string;
 }
-export type { ActionRequestApproval, ApprovalChannel, ApprovalContinuation, ApprovalDecidePayload, ApprovalDecideResult, ApprovalDecision, ApprovalEffect, ApprovalGrant, ApprovalPreview, ApprovalPreviewArgument, ApprovalRedeemResult, ApprovalRefusal, ApprovalRefusalReason, ApprovalRequiredEvent, ApprovalStatus, ApprovalTokenClaims, ApprovedCall, PendingApprovalInput, } from '@ouispec/contract';
+export type { ActionRequestApproval, ApprovalChannel, ApprovalContinuation, ApprovalDecidePayload, ApprovalDecideResult, ApprovalDecision, ApprovalEffect, ApprovalGrant, ApprovalPreview, ApprovalPreviewArgument, ApprovalRedeemResult, ApprovalRefusal, ApprovalRefusalReason, ApprovalRequiredEvent, ApprovalStatus, ApprovalReceiptClaims, ApprovalTokenClaims, ApprovedCall, PendingApprovalInput, } from '@ouispec/contract';
 //# sourceMappingURL=types.d.ts.map

package/dist/approvals/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/approvals/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAyB,eAAe,EAAiB,MAAM,mBAAmB,CAAC;AAE/F;;;;;GAKG;AAEH,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;CAQ1B,CAAC;AAEX,uEAAuE;AACvE,eAAO,MAAM,uBAAuB,QAAa,CAAC;AAClD,2DAA2D;AAC3D,eAAO,MAAM,mBAAmB,QAAc,CAAC;AAE/C,eAAO,MAAM,iBAAiB,EAAE,SAAS,eAAe,EAA4C,CAAC;AAErG;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAwB,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,QAAa,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7F,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAAG,YAAY,GAAG,SAAS,CAAC;AAE9D,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EAA8B,CAAC;AAEtG,mGAAmG;AACnG,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;CAC9C;AAED,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAKD,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,eAAe,EACf,uBAAuB,EACvB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,GACrB,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/approvals/types.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAyB,eAAe,EAAiB,MAAM,mBAAmB,CAAC;AAE/F;;;;;GAKG;AAEH,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AAEvD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;CAQ1B,CAAC;AAEX,uEAAuE;AACvE,eAAO,MAAM,uBAAuB,QAAa,CAAC;AAClD,2DAA2D;AAC3D,eAAO,MAAM,mBAAmB,QAAc,CAAC;AAE/C,eAAO,MAAM,iBAAiB,EAAE,SAAS,eAAe,EAA4C,CAAC;AAErG;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,QAAwB,CAAC;AAEhE;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,QAAa,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,MAAM,qBAAqB,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7F,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,qBAAqB,CAAC;IAC/B,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB;;;OAGG;IACH,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,sBAAsB,GAAG,YAAY,GAAG,SAAS,CAAC;AAE9D,eAAO,MAAM,yBAAyB,EAAE,SAAS,sBAAsB,EAA8B,CAAC;AAEtG,mGAAmG;AACnG,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;CAC9C;AAED,yFAAyF;AACzF,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAKD,YAAY,EACV,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,eAAe,EACf,uBAAuB,EACvB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,YAAY,EACZ,oBAAoB,GACrB,MAAM,mBAAmB,CAAC"}

package/dist/approvals/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/approvals/types.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK,EAAE,GAAG;IACV,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,EAAE;IACb,YAAY,EAAE,GAAG;IACjB,aAAa,EAAE,GAAG;IAClB,aAAa,EAAE,IAAI;IACnB,QAAQ,EAAE,IAAI;CACN,CAAC;AAEX,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AAClD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE/C,MAAM,CAAC,MAAM,iBAAiB,GAA+B,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAErG;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,MAAM,CAAC;AAqDhD,MAAM,CAAC,MAAM,yBAAyB,GAAsC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AA8CtG,MAAM,aAAa,GAAmD,IAAI,CAAC;AAC3E,MAAM,WAAW,GAA0C,IAAI,CAAC;AAChE,KAAK,aAAa,CAAC;AACnB,KAAK,WAAW,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/approvals/types.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK,EAAE,GAAG;IACV,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,EAAE;IACb,YAAY,EAAE,GAAG;IACjB,aAAa,EAAE,GAAG;IAClB,aAAa,EAAE,IAAI;IACnB,QAAQ,EAAE,IAAI;CACN,CAAC;AAEX,uEAAuE;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,MAAM,CAAC;AAClD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE/C,MAAM,CAAC,MAAM,iBAAiB,GAA+B,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAErG;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAG,MAAM,CAAC;AAqDhD,MAAM,CAAC,MAAM,yBAAyB,GAAsC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;AA+CtG,MAAM,aAAa,GAAmD,IAAI,CAAC;AAC3E,MAAM,WAAW,GAA0C,IAAI,CAAC;AAChE,KAAK,aAAa,CAAC;AACnB,KAAK,WAAW,CAAC"}

package/dist/receipt-vectors.json

@@ -0,0 +1,291 @@
+{
+  "version": 1,
+  "description": "Approval receipts and the result every verifier must give for each. Verify each `receipt` against `jwks`, with `audience` as the tool's audience, `expectedArgsHash` as the hash of the request it received, and `now` (epoch seconds) as the time. A refusal must give `result.reason`; a receipt that verifies must give exactly `result.claims`. `signingKeys` holds every key the receipts were signed with, private parts included: a signer that writes the header and claims in the order shown must reproduce each valid receipt byte for byte.",
+  "provenance": "Written by packages/agent-core/scripts/receipt-vectors.mjs with node:crypto alone: Ed25519 signatures are deterministic, the arguments are hashed from their canonical form as written below, and every time is fixed. The keys come from published seeds and sign nothing real.",
+  "now": 1793145600,
+  "audience": "https://api.example.com",
+  "args": {
+    "vehicleId": "VIN-1HGCM82633A004352",
+    "slot": "2026-10-28T15:30:00-04:00",
+    "customer": {
+      "phone": "+15555550142",
+      "name": "Ana Souza"
+    }
+  },
+  "canonicalArgs": "{\"customer\":{\"name\":\"Ana Souza\",\"phone\":\"+15555550142\"},\"slot\":\"2026-10-28T15:30:00-04:00\",\"vehicleId\":\"VIN-1HGCM82633A004352\"}",
+  "expectedArgsHash": "63b49d3bd683750bf05cc00af982b2b4e5b2903e859052a86c9a4d3c8cedb59f",
+  "jwks": {
+    "keys": [
+      {
+        "kty": "OKP",
+        "crv": "Ed25519",
+        "x": "ml9nEfpt1d5wH6TDUg3mI9zygBB5g-g0Uf2Y_fxV7Gw",
+        "kid": "receipt-2026-10",
+        "alg": "EdDSA",
+        "use": "sig"
+      },
+      {
+        "kty": "OKP",
+        "crv": "Ed25519",
+        "x": "AGiwOPWf-13pP5-ZYdFJPWpuPFAV96144MAwUkKWHIk",
+        "kid": "receipt-2026-07",
+        "alg": "EdDSA",
+        "use": "sig"
+      }
+    ]
+  },
+  "signingKeys": [
+    {
+      "kty": "OKP",
+      "crv": "Ed25519",
+      "kid": "receipt-2026-10",
+      "x": "ml9nEfpt1d5wH6TDUg3mI9zygBB5g-g0Uf2Y_fxV7Gw",
+      "d": "oVL5iy4RviQHSAQyVDXTn_pGRCjkQ9tK6v6ytmcUens"
+    },
+    {
+      "kty": "OKP",
+      "crv": "Ed25519",
+      "kid": "receipt-2026-07",
+      "x": "AGiwOPWf-13pP5-ZYdFJPWpuPFAV96144MAwUkKWHIk",
+      "d": "AzpU5g1LDkYK2ubiyObI5q7f2nBLFUiB3Q-3C5cs4W0"
+    },
+    {
+      "kty": "OKP",
+      "crv": "Ed25519",
+      "kid": "receipt-2026-04",
+      "x": "GCRxk8RuVjisqZN0Vrb3m8mnBcCiCc_9TlVj6OnUphI",
+      "d": "Py5prdt0Axx9wqIzUkVFqzcQsZs6nJ-ZINqveSPTQxs"
+    },
+    {
+      "kty": "OKP",
+      "crv": "Ed25519",
+      "kid": "another-environment",
+      "x": "M1EtZG-9Iy29Vkq8fuQX-yV1buSgPmDGjDWC3Q4qU3k",
+      "d": "LG2oMvPvL1tj07TqY92DcL8lhQSAjC7C8KtcH_aPqRQ"
+    }
+  ],
+  "vectors": [
+    {
+      "name": "valid: signed by the active key, every claim",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.eyJpc3MiOiJodHRwczovL3JlYWx0aW1lLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20iLCJhcHByb3ZhbElkIjoidG9vbHVfMDFKQks3UTRSOE0yVjZYOSIsImFyZ3NIYXNoIjoiNjNiNDlkM2JkNjgzNzUwYmYwNWNjMDBhZjk4MmIyYjRlNWIyOTAzZTg1OTA1MmE4NmM5YTRkM2M4Y2VkYjU5ZiIsInRvb2wiOiJib29raW5nc19jcmVhdGUiLCJvcGVyYXRpb25JZCI6ImJvb2tpbmdzX2NyZWF0ZSIsImNvbnZlcnNhdGlvbklkIjoiY29udl83ZjNhOWMiLCJ1c2VySWQiOiJ1c2VyXzQyIiwiYWNjb3VudElkIjoiYWNjdF9kZWFsZXJfMTciLCJjaGFubmVsIjoidm9pY2UiLCJpYXQiOjE3OTMxNDU1OTUsImV4cCI6MTc5MzE0NTcxNSwianRpIjoiZjViOGU3YzItNGQxYS00ZTliLTljM2YtMmE2ZDhlMGIxYzQ3In0.jdc-wTgTiHmNfINq--iOo8E7M6V6VbYmCSvRzUYpZ_YD7P7JtdgWxaec7gvdJYPRgYEKJ0g_xUyTkbTcx55lDQ",
+      "result": {
+        "ok": true,
+        "claims": {
+          "iss": "https://realtime.example.com",
+          "aud": "https://api.example.com",
+          "approvalId": "toolu_01JBK7Q4R8M2V6X9",
+          "argsHash": "63b49d3bd683750bf05cc00af982b2b4e5b2903e859052a86c9a4d3c8cedb59f",
+          "tool": "bookings_create",
+          "operationId": "bookings_create",
+          "conversationId": "conv_7f3a9c",
+          "userId": "user_42",
+          "accountId": "acct_dealer_17",
+          "channel": "voice",
+          "iat": 1793145595,
+          "exp": 1793145715,
+          "jti": "f5b8e7c2-4d1a-4e9b-9c3f-2a6d8e0b1c47"
+        }
+      }
+    },
+    {
+      "name": "valid: no optional claims (no operationId, no accountId), approved in a UI",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.eyJpc3MiOiJodHRwczovL3JlYWx0aW1lLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20iLCJhcHByb3ZhbElkIjoidG9vbHVfMDFKQks3UTRSOE0yVjZYOSIsImFyZ3NIYXNoIjoiNjNiNDlkM2JkNjgzNzUwYmYwNWNjMDBhZjk4MmIyYjRlNWIyOTAzZTg1OTA1MmE4NmM5YTRkM2M4Y2VkYjU5ZiIsInRvb2wiOiJjb25maXJtX2Jvb2tpbmciLCJjb252ZXJzYXRpb25JZCI6ImNvbnZfN2YzYTljIiwidXNlcklkIjoidXNlcl80MiIsImNoYW5uZWwiOiJ1aSIsImlhdCI6MTc5MzE0NTU5NSwiZXhwIjoxNzkzMTQ1NzE1LCJqdGkiOiIwYjZjM2MxZS04ZjBhLTRkNWUtYTJiNy05ZTFmNGM2ZDhhMjAifQ.xOK04_awIKbWTt0enP4VeP6IMAGYzWEuLaZKj0LgVpU3fvPTh0XvQOllPn9GzEsXliKETnSJJBTzCtwbo5idBQ",
+      "result": {
+        "ok": true,
+        "claims": {
+          "iss": "https://realtime.example.com",
+          "aud": "https://api.example.com",
+          "approvalId": "toolu_01JBK7Q4R8M2V6X9",
+          "argsHash": "63b49d3bd683750bf05cc00af982b2b4e5b2903e859052a86c9a4d3c8cedb59f",
+          "tool": "confirm_booking",
+          "conversationId": "conv_7f3a9c",
+          "userId": "user_42",
+          "channel": "ui",
+          "iat": 1793145595,
+          "exp": 1793145715,
+          "jti": "0b6c3c1e-8f0a-4d5e-a2b7-9e1f4c6d8a20"
+        }
+      }
+    },
+    {
+      "name": "valid: signed by the previous key, which is still published",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0wNyJ9.eyJpc3MiOiJodHRwczovL3JlYWx0aW1lLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20iLCJhcHByb3ZhbElkIjoidG9vbHVfMDFKQks3UTRSOE0yVjZYOSIsImFyZ3NIYXNoIjoiNjNiNDlkM2JkNjgzNzUwYmYwNWNjMDBhZjk4MmIyYjRlNWIyOTAzZTg1OTA1MmE4NmM5YTRkM2M4Y2VkYjU5ZiIsInRvb2wiOiJib29raW5nc19jcmVhdGUiLCJvcGVyYXRpb25JZCI6ImJvb2tpbmdzX2NyZWF0ZSIsImNvbnZlcnNhdGlvbklkIjoiY29udl83ZjNhOWMiLCJ1c2VySWQiOiJ1c2VyXzQyIiwiYWNjb3VudElkIjoiYWNjdF9kZWFsZXJfMTciLCJjaGFubmVsIjoidm9pY2UiLCJpYXQiOjE3OTMxNDU1OTUsImV4cCI6MTc5MzE0NTcxNSwianRpIjoiN2MyZTliNGQtNWExZi00YzhlLWIzZDYtMmUwYTlmN2MxYjg1In0.mktb2NARmz3znJAAQMQxLR8l4D6VG3cZRLwmksloN6hsj5ul_CXgmHsgcaFtSQECBxruhOQ6cZ7twLWyXBV-CQ",
+      "result": {
+        "ok": true,
+        "claims": {
+          "iss": "https://realtime.example.com",
+          "aud": "https://api.example.com",
+          "approvalId": "toolu_01JBK7Q4R8M2V6X9",
+          "argsHash": "63b49d3bd683750bf05cc00af982b2b4e5b2903e859052a86c9a4d3c8cedb59f",
+          "tool": "bookings_create",
+          "operationId": "bookings_create",
+          "conversationId": "conv_7f3a9c",
+          "userId": "user_42",
+          "accountId": "acct_dealer_17",
+          "channel": "voice",
+          "iat": 1793145595,
+          "exp": 1793145715,
+          "jti": "7c2e9b4d-5a1f-4c8e-b3d6-2e0a9f7c1b85"
+        }
+      }
+    },
+    {
+      "name": "valid: expired 59 s ago, within the clock skew",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.eyJpc3MiOiJodHRwczovL3JlYWx0aW1lLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20iLCJhcHByb3ZhbElkIjoidG9vbHVfMDFKQks3UTRSOE0yVjZYOSIsImFyZ3NIYXNoIjoiNjNiNDlkM2JkNjgzNzUwYmYwNWNjMDBhZjk4MmIyYjRlNWIyOTAzZTg1OTA1MmE4NmM5YTRkM2M4Y2VkYjU5ZiIsInRvb2wiOiJib29raW5nc19jcmVhdGUiLCJvcGVyYXRpb25JZCI6ImJvb2tpbmdzX2NyZWF0ZSIsImNvbnZlcnNhdGlvbklkIjoiY29udl83ZjNhOWMiLCJ1c2VySWQiOiJ1c2VyXzQyIiwiYWNjb3VudElkIjoiYWNjdF9kZWFsZXJfMTciLCJjaGFubmVsIjoidm9pY2UiLCJpYXQiOjE3OTMxNDU0MjEsImV4cCI6MTc5MzE0NTU0MSwianRpIjoiM2U5ZDJmNGEtNmIxYy00YThlLWI1ZDctMWMwZjllMmE0YjY4In0.Wlpk2MNUBGMyubuo65EJB3UBnWXUQQbqrtTX8EI7rFzJOTcdR43w287wOczUgW3lLQZcqchskSwJfN6xxkvkBA",
+      "result": {
+        "ok": true,
+        "claims": {
+          "iss": "https://realtime.example.com",
+          "aud": "https://api.example.com",
+          "approvalId": "toolu_01JBK7Q4R8M2V6X9",
+          "argsHash": "63b49d3bd683750bf05cc00af982b2b4e5b2903e859052a86c9a4d3c8cedb59f",
+          "tool": "bookings_create",
+          "operationId": "bookings_create",
+          "conversationId": "conv_7f3a9c",
+          "userId": "user_42",
+          "accountId": "acct_dealer_17",
+          "channel": "voice",
+          "iat": 1793145421,
+          "exp": 1793145541,
+          "jti": "3e9d2f4a-6b1c-4a8e-b5d7-1c0f9e2a4b68"
+        }
+      }
+    },
+    {
+      "name": "expired: 60 s past exp, beyond the clock skew",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.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.7nHULjfSV7J6FXAs0XHkpox5A0u5FtnyK-tiHP7TEm1Laqi0zeOxWmclVtUvBm3MUCTwr1-j_AvNptc-__R0DQ",
+      "result": {
+        "ok": false,
+        "reason": "expired"
+      }
+    },
+    {
+      "name": "expired: issued 61 s in the future, beyond the clock skew",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.eyJpc3MiOiJodHRwczovL3JlYWx0aW1lLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20iLCJhcHByb3ZhbElkIjoidG9vbHVfMDFKQks3UTRSOE0yVjZYOSIsImFyZ3NIYXNoIjoiNjNiNDlkM2JkNjgzNzUwYmYwNWNjMDBhZjk4MmIyYjRlNWIyOTAzZTg1OTA1MmE4NmM5YTRkM2M4Y2VkYjU5ZiIsInRvb2wiOiJib29raW5nc19jcmVhdGUiLCJvcGVyYXRpb25JZCI6ImJvb2tpbmdzX2NyZWF0ZSIsImNvbnZlcnNhdGlvbklkIjoiY29udl83ZjNhOWMiLCJ1c2VySWQiOiJ1c2VyXzQyIiwiYWNjb3VudElkIjoiYWNjdF9kZWFsZXJfMTciLCJjaGFubmVsIjoidm9pY2UiLCJpYXQiOjE3OTMxNDU2NjEsImV4cCI6MTc5MzE0NTc4MSwianRpIjoiNmQ0YjJhOGUtMWY3Yy00ZTNhLTliNWQtMGM4ZTJmNmE0ZDE5In0.93Af8-S10xj3j9Yaqwvr9Er0LKWdL5sV-feO1OwRET2UpXEU0uDLAuXbrVlnVrfZzJCpj3cT5W6zvUZu5T93Cg",
+      "result": {
+        "ok": false,
+        "reason": "expired"
+      }
+    },
+    {
+      "name": "key: signed by a key that has been removed",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0wNCJ9.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.XglwKVP1Cp1aQISbglRB3824DADsKEIek4uXUfwEWEYtUF6PRd657TS-dyO1zcqOqqREz-lC_ehuc8UGWVzxCg",
+      "result": {
+        "ok": false,
+        "reason": "key"
+      }
+    },
+    {
+      "name": "signature: names the active key, signed by another",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.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.JExlbctWcOVonQt_ioQAddwWP7S-NcxC--d-KNAydltrbcbGHmBuhF2_lWqf8uzBywiEXBm9akt6m7gbC3dTAg",
+      "result": {
+        "ok": false,
+        "reason": "signature"
+      }
+    },
+    {
+      "name": "signature: claims changed under the real signature",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.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.jdc-wTgTiHmNfINq--iOo8E7M6V6VbYmCSvRzUYpZ_YD7P7JtdgWxaec7gvdJYPRgYEKJ0g_xUyTkbTcx55lDQ",
+      "result": {
+        "ok": false,
+        "reason": "signature"
+      }
+    },
+    {
+      "name": "signature: signature truncated",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.eyJpc3MiOiJodHRwczovL3JlYWx0aW1lLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20iLCJhcHByb3ZhbElkIjoidG9vbHVfMDFKQks3UTRSOE0yVjZYOSIsImFyZ3NIYXNoIjoiNjNiNDlkM2JkNjgzNzUwYmYwNWNjMDBhZjk4MmIyYjRlNWIyOTAzZTg1OTA1MmE4NmM5YTRkM2M4Y2VkYjU5ZiIsInRvb2wiOiJib29raW5nc19jcmVhdGUiLCJvcGVyYXRpb25JZCI6ImJvb2tpbmdzX2NyZWF0ZSIsImNvbnZlcnNhdGlvbklkIjoiY29udl83ZjNhOWMiLCJ1c2VySWQiOiJ1c2VyXzQyIiwiYWNjb3VudElkIjoiYWNjdF9kZWFsZXJfMTciLCJjaGFubmVsIjoidm9pY2UiLCJpYXQiOjE3OTMxNDU1OTUsImV4cCI6MTc5MzE0NTcxNSwianRpIjoiZjViOGU3YzItNGQxYS00ZTliLTljM2YtMmE2ZDhlMGIxYzQ3In0.jdc-wTgTiHmNfINq--iOo8E7M6V6VbYmCSvRzUYpZ_Y",
+      "result": {
+        "ok": false,
+        "reason": "signature"
+      }
+    },
+    {
+      "name": "malformed: typ is JWT",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.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.vgAwgIGl3H_BPGd5hMtDwI6jjzcwTYrHDbaQ-bssCv2pomwgX_bXHviW7JKyXtI1aLYAmZTjqPxjIFChDy9hDQ",
+      "result": {
+        "ok": false,
+        "reason": "malformed"
+      }
+    },
+    {
+      "name": "malformed: alg is HS256, keyed with the public key",
+      "receipt": "eyJhbGciOiJIUzI1NiIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.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.JBiLvF_JjICz_or8gQzUZ3pNEgyMgIL2_D97Thw0B-0",
+      "result": {
+        "ok": false,
+        "reason": "malformed"
+      }
+    },
+    {
+      "name": "malformed: alg is none, with no signature",
+      "receipt": "eyJhbGciOiJub25lIiwidHlwIjoib3VpLWFwcHJvdmFsLXJlY2VpcHQrand0Iiwia2lkIjoicmVjZWlwdC0yMDI2LTEwIn0.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.",
+      "result": {
+        "ok": false,
+        "reason": "malformed"
+      }
+    },
+    {
+      "name": "malformed: no kid",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCJ9.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.-iWjBMPz8A9zO-igJdvujLpWs-rb-BTA8awPHV_kEse15IkJ3RAng0iJqo7Z2Ge9W2aYoLfkVnDebufzSlytBw",
+      "result": {
+        "ok": false,
+        "reason": "malformed"
+      }
+    },
+    {
+      "name": "malformed: the header names critical extensions",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCIsImNyaXQiOlsiZXhwIl19.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.x7CuVIoN1ZRA4D89ZHJyvQeyz42YWix-D44_WhmuDVT2tLC0k3Uj89e0__4ZVOP-2ZBm8BmdgQCfzOgUQzd-CQ",
+      "result": {
+        "ok": false,
+        "reason": "malformed"
+      }
+    },
+    {
+      "name": "malformed: not three segments",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.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",
+      "result": {
+        "ok": false,
+        "reason": "malformed"
+      }
+    },
+    {
+      "name": "malformed: validly signed, claims not JSON",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.bm90IGpzb24.GY8RAW6bwJl9bfx4o-UmcihyMGkTT3Cdh874sxoHe8IsmH1gkH5_tFzg3nVyITdeTFYnPONc5W2_AYMyOlqsCg",
+      "result": {
+        "ok": false,
+        "reason": "malformed"
+      }
+    },
+    {
+      "name": "malformed: validly signed, approvalId missing",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.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.78fyUosdu0nOpCA9SRqI0h6ic1uldpchlPJEhCYnTU5EhuuvtwND8Z4wvMaFf3NwlI0xUDkCOKbvuBti9ls2DQ",
+      "result": {
+        "ok": false,
+        "reason": "malformed"
+      }
+    },
+    {
+      "name": "malformed: validly signed, a claim a receipt does not define",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.eyJpc3MiOiJodHRwczovL3JlYWx0aW1lLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkuZXhhbXBsZS5jb20iLCJhcHByb3ZhbElkIjoidG9vbHVfMDFKQks3UTRSOE0yVjZYOSIsImFyZ3NIYXNoIjoiNjNiNDlkM2JkNjgzNzUwYmYwNWNjMDBhZjk4MmIyYjRlNWIyOTAzZTg1OTA1MmE4NmM5YTRkM2M4Y2VkYjU5ZiIsInRvb2wiOiJib29raW5nc19jcmVhdGUiLCJvcGVyYXRpb25JZCI6ImJvb2tpbmdzX2NyZWF0ZSIsImNvbnZlcnNhdGlvbklkIjoiY29udl83ZjNhOWMiLCJ1c2VySWQiOiJ1c2VyXzQyIiwiYWNjb3VudElkIjoiYWNjdF9kZWFsZXJfMTciLCJjaGFubmVsIjoidm9pY2UiLCJpYXQiOjE3OTMxNDU1OTUsImV4cCI6MTc5MzE0NTcxNSwianRpIjoiZjViOGU3YzItNGQxYS00ZTliLTljM2YtMmE2ZDhlMGIxYzQ3Iiwic2NvcGUiOiJib29raW5nczp3cml0ZSJ9.r_tbF6YP6wkQUQZxhrCrdF6ByTwuP0zMYJOX3Xr5YA11V5g62_K7_p0hIvbSpZ_W8I50tsmpXXOO26vcUbJ8BA",
+      "result": {
+        "ok": false,
+        "reason": "malformed"
+      }
+    },
+    {
+      "name": "audience: issued for another API",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.eyJpc3MiOiJodHRwczovL3JlYWx0aW1lLmV4YW1wbGUuY29tIiwiYXVkIjoiaHR0cHM6Ly9hcGkub3RoZXIuZXhhbXBsZSIsImFwcHJvdmFsSWQiOiJ0b29sdV8wMUpCSzdRNFI4TTJWNlg5IiwiYXJnc0hhc2giOiI2M2I0OWQzYmQ2ODM3NTBiZjA1Y2MwMGFmOTgyYjJiNGU1YjI5MDNlODU5MDUyYTg2YzlhNGQzYzhjZWRiNTlmIiwidG9vbCI6ImJvb2tpbmdzX2NyZWF0ZSIsIm9wZXJhdGlvbklkIjoiYm9va2luZ3NfY3JlYXRlIiwiY29udmVyc2F0aW9uSWQiOiJjb252XzdmM2E5YyIsInVzZXJJZCI6InVzZXJfNDIiLCJhY2NvdW50SWQiOiJhY2N0X2RlYWxlcl8xNyIsImNoYW5uZWwiOiJ2b2ljZSIsImlhdCI6MTc5MzE0NTU5NSwiZXhwIjoxNzkzMTQ1NzE1LCJqdGkiOiJmNWI4ZTdjMi00ZDFhLTRlOWItOWMzZi0yYTZkOGUwYjFjNDcifQ.AwgvMG_d-Ck_NyEDznAhFYAiymSe2b4Gp05SHYtN77rjd1LDY98dHh0n842JhedH06yhwaAtgYpAmxssvBTFCQ",
+      "result": {
+        "ok": false,
+        "reason": "audience"
+      }
+    },
+    {
+      "name": "args: issued for other arguments",
+      "receipt": "eyJhbGciOiJFZERTQSIsInR5cCI6Im91aS1hcHByb3ZhbC1yZWNlaXB0K2p3dCIsImtpZCI6InJlY2VpcHQtMjAyNi0xMCJ9.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.X4ebLnORtbVjqHE55yf-cHs0ttcImJenVgslwSA0q1mVefQWRelGgc_eUfTq6tYp4L15O8T98jHLaaybyd-NCQ",
+      "result": {
+        "ok": false,
+        "reason": "args"
+      }
+    }
+  ]
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ouispec/agent-core",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Schema types, entity graph, intent resolution, and protocol definitions for the agent SDK",
   "homepage": "https://github.com/wesreid/oui/tree/main/packages/agent-core#readme",
   "bugs": {
@@ -21,7 +21,8 @@
       "browser": "./dist/browser.js",
       "import": "./dist/index.js"
     },
-    "./approval-vectors.json": "./dist/approval-vectors.json"
+    "./approval-vectors.json": "./dist/approval-vectors.json",
+    "./receipt-vectors.json": "./dist/receipt-vectors.json"
   },
   "files": [
     "dist",
@@ -30,8 +31,8 @@
   "dependencies": {
     "ajv": "^8.17.0",
     "yaml": "^2.7.0",
-    "@ouispec/agent-events": "^0.16.0",
-    "@ouispec/contract": "^0.4.8",
+    "@ouispec/agent-events": "^0.17.0",
+    "@ouispec/contract": "^0.4.9",
     "oui-spec": "^0.11.1"
   },
   "devDependencies": {
@@ -45,7 +46,7 @@
   },
   "browser": "./dist/browser.js",
   "scripts": {
-    "build": "tsc -p tsconfig.build.json && node -e \"require('node:fs').copyFileSync(require.resolve('oui-spec/approval-vectors.json'), 'dist/approval-vectors.json')\"",
+    "build": "tsc -p tsconfig.build.json && node -e \"require('node:fs').copyFileSync(require.resolve('oui-spec/approval-vectors.json'), 'dist/approval-vectors.json')\" && node scripts/receipt-vectors.mjs --check && node -e \"require('node:fs').copyFileSync('receipt-vectors.json', 'dist/receipt-vectors.json')\"",
     "typecheck": "tsc --noEmit",
     "test": "vitest run --passWithNoTests",
     "clean": "rm -rf dist"