@peac/adapter-x402 0.12.0 → 0.12.1

package/README.md

@@ -1,14 +1,19 @@
 # @peac/adapter-x402
 
-x402 offer/receipt verification, term-matching, and PEAC record mapping.
+Verification, term-matching, and evidence mapping for the x402
+Offer/Receipt extension (compatible with upstream coinbase/x402).
 
 ## Overview
 
-This package verifies x402 extension objects (offers and receipts) and maps
+This package verifies x402 extension artifacts (offers and receipts) and maps
 them into canonical PEAC interaction records. It implements term-matching
 verification where `acceptIndex` is treated as an untrusted hint and the
 binding comes from matching signed payload fields against accept terms.
 
+Compatible with upstream x402 Offer/Receipt extension wire shapes. Defaults
+match upstream behavior; stricter verification is available via opt-in
+configuration.
+
 ## Install
 
 ```bash
@@ -22,7 +27,7 @@ pnpm add @peac/adapter-x402
 ```typescript
 import { verifyOffer } from '@peac/adapter-x402';
 
-const result = verifyOffer(signedOffer, acceptEntries, acceptIndex);
+const result = verifyOffer(signedOffer, acceptEntries);
 
 if (result.valid) {
   console.log('Matched accept entry:', result.matchedAccept);
@@ -37,8 +42,8 @@ if (result.valid) {
 ```typescript
 import { selectAccept } from '@peac/adapter-x402';
 
-// With hint (bounds-check + term-match)
-const match = selectAccept(offerPayload, accepts, acceptIndex);
+// With hint (bounds-check + term-match via offer.acceptIndex)
+const match = selectAccept(offerPayload, accepts, offer.acceptIndex);
 
 // Without hint (scan for unique match)
 const match = selectAccept(offerPayload, accepts);
@@ -49,16 +54,32 @@ const match = selectAccept(offerPayload, accepts);
 ```typescript
 import { toPeacRecord } from '@peac/adapter-x402';
 
-const record = toPeacRecord(paymentRequired, settlementResponse);
-// record.proofs.x402.offer   -- raw offer preserved for audit
-// record.proofs.x402.receipt  -- raw receipt preserved for audit
-// record.evidence.txHash      -- from signed receipt payload
-// record.hints.acceptIndex    -- { value: 0, untrusted: true }
+const record = toPeacRecord(challenge, settlementResponse);
+// record.proofs.x402.offer    -- raw offer preserved for audit
+// record.proofs.x402.receipt   -- raw receipt preserved for audit
+// record.evidence.resourceUrl  -- from signed offer payload
+// record.evidence.payer        -- from signed receipt payload
+// record.evidence.transaction  -- optional, from receipt (privacy-minimal)
+// record.hints.acceptIndex     -- { value: 0, untrusted: true }
+```
+
+### Extract from upstream wire format
+
+```typescript
+import { extractExtensionInfo, extractReceiptFromHeaders } from '@peac/adapter-x402';
+
+// Extract offers from upstream 402 response body
+const info = extractExtensionInfo(responseBody);
+// info.offers: RawSignedOffer[]
+// info.receipt?: RawSignedReceipt
+
+// Extract receipt from settlement response headers
+const receipt = extractReceiptFromHeaders(responseHeaders);
 ```
 
 ## acceptIndex: hint-only semantics
 
-In the x402 Offer/Receipt extension, `acceptIndex` is an unsigned envelope
+In the x402 Offer/Receipt extension, `acceptIndex` is an unsigned per-offer
 field outside the signed payload. Verifiers MUST NOT rely on it as a binding
 mechanism.
 
@@ -73,25 +94,31 @@ This package treats `acceptIndex` as advisory:
 
 ## API
 
-### `verifyOffer(offer, accepts, acceptIndex?, config?)`
+### `verifyOffer(offer, accepts, config?)`
 
 Verify a signed offer against accept terms. Checks structure, expiry,
 version, signature format, and term-matching.
 
 ### `verifyReceipt(receipt, config?)`
 
-Verify a signed receipt's structure and version.
+Verify a signed receipt's required fields, version, payer format, and
+issuedAt recency.
+
+### `verifyOfferReceiptConsistency(offerPayload, receiptPayload, config?, options?)`
+
+Verify consistency between an offer and a receipt (resourceUrl, network,
+issuedAt freshness, optional payer candidate matching).
 
-### `matchAcceptTerms(payload, accept)`
+### `matchAcceptTerms(payload, accept, addressComparator?)`
 
 Compare offer payload fields against a single accept entry. Returns an
 array of mismatched field names (empty means match).
 
-### `selectAccept(payload, accepts, acceptIndex?)`
+### `selectAccept(payload, accepts, acceptIndex?, addressComparator?)`
 
 Select the matching accept entry. Throws `X402Error` on failure.
 
-### `toPeacRecord(paymentRequired, settlementResponse)`
+### `toPeacRecord(challenge, settlementResponse, options?)`
 
 Map an x402 payment flow to a PEAC interaction record.
 
@@ -107,12 +134,12 @@ This adapter supports x402 **Offer/Receipt extension version 1** (default).
 The version is configurable per call:
 
 ```typescript
-const result = verifyOffer(offer, accepts, acceptIndex, {
-  supportedVersions: ['1', '2'],
+const result = verifyOffer(offer, accepts, {
+  supportedVersions: [1, 2],
 });
 ```
 
-The adapter defines its own x402 types (no external x402 npm dependencies). If x402 v2 introduces new required payload fields, update the adapter types and add conformance vectors.
+The adapter defines its own x402 types (no external x402 npm dependencies).
 
 ## Error handling
 

package/dist/errors.d.ts

@@ -15,7 +15,7 @@
  * - amount_*: Amount validation errors
  * - network_*: Network validation errors
  */
-export type X402ErrorCode = 'offer_invalid_format' | 'offer_expired' | 'offer_version_unsupported' | 'offer_signature_invalid' | 'receipt_invalid_format' | 'receipt_signature_invalid' | 'receipt_version_unsupported' | 'accept_index_out_of_range' | 'accept_no_match' | 'accept_ambiguous' | 'accept_term_mismatch' | 'accept_too_many_entries' | 'payload_missing_field' | 'payload_tampered' | 'amount_invalid' | 'network_invalid';
+export type X402ErrorCode = 'offer_invalid_format' | 'offer_expired' | 'offer_version_unsupported' | 'offer_signature_invalid' | 'offer_no_expiry' | 'receipt_invalid_format' | 'receipt_signature_invalid' | 'receipt_version_unsupported' | 'receipt_resource_mismatch' | 'receipt_network_mismatch' | 'receipt_issuedAt_stale' | 'receipt_payer_invalid' | 'receipt_payer_not_in_candidates' | 'accept_index_out_of_range' | 'accept_no_match' | 'accept_ambiguous' | 'accept_term_mismatch' | 'accept_too_many_entries' | 'payload_missing_field' | 'payload_tampered' | 'amount_invalid' | 'network_invalid' | 'jws_too_large' | 'jws_malformed' | 'jws_padded_base64url' | 'jws_payload_not_object';
 /**
  * Custom error class for x402 adapter operations
  *

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GACrB,sBAAsB,GACtB,eAAe,GACf,2BAA2B,GAC3B,yBAAyB,GACzB,wBAAwB,GACxB,2BAA2B,GAC3B,6BAA6B,GAC7B,2BAA2B,GAC3B,iBAAiB,GACjB,kBAAkB,GAClB,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,CAAC;AAwBtB;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE;IAUjE,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAUlC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,MAAM,aAAa,GACrB,sBAAsB,GACtB,eAAe,GACf,2BAA2B,GAC3B,yBAAyB,GACzB,iBAAiB,GACjB,wBAAwB,GACxB,2BAA2B,GAC3B,6BAA6B,GAC7B,2BAA2B,GAC3B,0BAA0B,GAC1B,wBAAwB,GACxB,uBAAuB,GACvB,iCAAiC,GACjC,2BAA2B,GAC3B,iBAAiB,GACjB,kBAAkB,GAClB,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,GACvB,kBAAkB,GAClB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GACf,eAAe,GACf,sBAAsB,GACtB,wBAAwB,CAAC;AAkC7B;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE;IAUjE,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAUlC"}

package/dist/errors.js

@@ -15,9 +15,15 @@ const ERROR_HTTP_STATUS = {
     offer_expired: 400,
     offer_version_unsupported: 400,
     offer_signature_invalid: 401,
+    offer_no_expiry: 400,
     receipt_invalid_format: 400,
     receipt_signature_invalid: 401,
     receipt_version_unsupported: 400,
+    receipt_resource_mismatch: 400,
+    receipt_network_mismatch: 400,
+    receipt_issuedAt_stale: 400,
+    receipt_payer_invalid: 400,
+    receipt_payer_not_in_candidates: 400,
     accept_index_out_of_range: 400,
     accept_no_match: 400,
     accept_ambiguous: 400,
@@ -27,6 +33,10 @@ const ERROR_HTTP_STATUS = {
     payload_tampered: 401,
     amount_invalid: 400,
     network_invalid: 400,
+    jws_too_large: 400,
+    jws_malformed: 400,
+    jws_padded_base64url: 400,
+    jws_payload_not_object: 400,
 };
 /**
  * Custom error class for x402 adapter operations

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AA+BH;;GAEG;AACH,MAAM,iBAAiB,GAAkC;IACvD,oBAAoB,EAAE,GAAG;IACzB,aAAa,EAAE,GAAG;IAClB,yBAAyB,EAAE,GAAG;IAC9B,uBAAuB,EAAE,GAAG;IAC5B,sBAAsB,EAAE,GAAG;IAC3B,yBAAyB,EAAE,GAAG;IAC9B,2BAA2B,EAAE,GAAG;IAChC,yBAAyB,EAAE,GAAG;IAC9B,eAAe,EAAE,GAAG;IACpB,gBAAgB,EAAE,GAAG;IACrB,oBAAoB,EAAE,GAAG;IACzB,uBAAuB,EAAE,GAAG;IAC5B,qBAAqB,EAAE,GAAG;IAC1B,gBAAgB,EAAE,GAAG;IACrB,cAAc,EAAE,GAAG;IACnB,eAAe,EAAE,GAAG;CACrB,CAAC;AAEF;;;;;GAKG;AACH,MAAa,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAgB;IACpB,UAAU,CAAS;IACnB,KAAK,CAAU;IACf,OAAO,CAA2B;IAE3C,YACE,IAAmB,EACnB,OAAe,EACf,OAA+D;QAE/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;IAClC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;CACF;AA7BD,8BA6BC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAyCH;;GAEG;AACH,MAAM,iBAAiB,GAAkC;IACvD,oBAAoB,EAAE,GAAG;IACzB,aAAa,EAAE,GAAG;IAClB,yBAAyB,EAAE,GAAG;IAC9B,uBAAuB,EAAE,GAAG;IAC5B,eAAe,EAAE,GAAG;IACpB,sBAAsB,EAAE,GAAG;IAC3B,yBAAyB,EAAE,GAAG;IAC9B,2BAA2B,EAAE,GAAG;IAChC,yBAAyB,EAAE,GAAG;IAC9B,wBAAwB,EAAE,GAAG;IAC7B,sBAAsB,EAAE,GAAG;IAC3B,qBAAqB,EAAE,GAAG;IAC1B,+BAA+B,EAAE,GAAG;IACpC,yBAAyB,EAAE,GAAG;IAC9B,eAAe,EAAE,GAAG;IACpB,gBAAgB,EAAE,GAAG;IACrB,oBAAoB,EAAE,GAAG;IACzB,uBAAuB,EAAE,GAAG;IAC5B,qBAAqB,EAAE,GAAG;IAC1B,gBAAgB,EAAE,GAAG;IACrB,cAAc,EAAE,GAAG;IACnB,eAAe,EAAE,GAAG;IACpB,aAAa,EAAE,GAAG;IAClB,aAAa,EAAE,GAAG;IAClB,oBAAoB,EAAE,GAAG;IACzB,sBAAsB,EAAE,GAAG;CAC5B,CAAC;AAEF;;;;;GAKG;AACH,MAAa,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAgB;IACpB,UAAU,CAAS;IACnB,KAAK,CAAU;IACf,OAAO,CAA2B;IAE3C,YACE,IAAmB,EACnB,OAAe,EACf,OAA+D;QAE/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QACjD,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;IAClC,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;CACF;AA7BD,8BA6BC"}

package/dist/index.d.ts

@@ -1,36 +1,27 @@
 /**
  * @peac/adapter-x402
  *
- * x402 Offer/Receipt extension verification, term-matching, and PEAC record mapping.
+ * Verification, term-matching, and evidence mapping for the
+ * x402 Offer/Receipt extension (compatible with upstream coinbase/x402).
  *
- * NOTE: This adapter targets the x402 Offer/Receipt EXTENSION,
- * NOT the baseline x402 header flow. The profile identifier reflects this:
- * `peac-x402-offer-receipt/0.1` (extension) vs `peac-x402/0.1` (baseline, reserved).
- *
- * Key capabilities:
- * - Structural validation of x402 offers and receipts
- * - Term-matching: verify signed payload against accept entries
- * - Accept selection with acceptIndex as untrusted hint
- * - Mapping to canonical PEAC interaction records
- * - DoS protection: limits on accepts array size
- * - Amount/network validation: CAIP-2 format, integer strings
- *
- * IMPORTANT: This package does NOT perform cryptographic signature verification
- * (EIP-712 recovery, JWS validation). That is the caller's responsibility.
- * `valid: true` does NOT imply cryptographic signature validity unless
- * a CryptoVerifier is supplied and `verification.cryptographic.verified` is true.
- *
- * The focus is on term-matching and record mapping -- the verification
- * layer that makes unsigned acceptIndex irrelevant for security.
+ * Architecture:
+ * - Layer A (raw.ts): Exact upstream wire types and extraction
+ * - Layer B (normalize.ts): Semantic normalization (EIP-712 placeholders)
+ * - Layer C (map.ts): PEAC evidence mapping
+ * - Verification (verify.ts): Layered verification API
  *
  * @packageDocumentation
  */
-export type { SignatureFormat, OfferPayload, SignedOffer, ReceiptPayload, SignedReceipt, AcceptEntry, X402PaymentRequired, X402SettlementResponse, OfferVerification, ReceiptVerification, VerificationError, VerificationStatus, X402PeacRecord, X402AdapterConfig, MismatchPolicy, } from './types.js';
-export { X402_OFFER_RECEIPT_PROFILE, MAX_ACCEPT_ENTRIES, MAX_TOTAL_ACCEPTS_BYTES, MAX_AMOUNT_LENGTH, } from './types.js';
+export type { RawOfferPayload, RawReceiptPayload, RawJWSSignedOffer, RawEIP712SignedOffer, RawSignedOffer, RawJWSSignedReceipt, RawEIP712SignedReceipt, RawSignedReceipt, RawX402ExtensionInfo, ParsedCompactJWS, } from './raw.js';
+export { OFFER_RECEIPT, MAX_COMPACT_JWS_BYTES, X402_RECEIPT_HEADERS, parseCompactJWS, extractOfferPayload, extractReceiptPayload, extractExtensionInfo, extractReceiptFromHeaders, } from './raw.js';
+export type { NormalizedOfferPayload, NormalizedReceiptPayload } from './normalize.js';
+export { normalizeOfferPayload, normalizeReceiptPayload } from './normalize.js';
+export type { SignatureFormat, OfferPayload, SignedOffer, ReceiptPayload, SignedReceipt, AcceptEntry, X402OfferReceiptChallenge, X402SettlementResponse, WireVerification, OfferVerification, ReceiptVerification, ConsistencyVerification, ConsistencyOptions, VerificationError, VerificationStatus, X402PeacRecord, X402AdapterConfig, MismatchPolicy, AddressComparator, CryptoResult, CryptoVerifier, EIP712Domain, SignerAuthorizer, AuthorizationContext, AuthorizationResult, } from './types.js';
+export { X402_OFFER_RECEIPT_PROFILE, MAX_ACCEPT_ENTRIES, MAX_TOTAL_ACCEPTS_BYTES, MAX_AMOUNT_LENGTH, defaultAddressComparator, } from './types.js';
 export type { Result, AdapterError, AdapterErrorCode, JsonObject } from './types.js';
 export { X402Error } from './errors.js';
 export type { X402ErrorCode } from './errors.js';
-export { verifyOffer, verifyReceipt, matchAcceptTerms, selectAccept } from './verify.js';
+export { verifyOffer, verifyReceipt, verifyOfferWire, verifyReceiptWire, verifyOfferReceiptConsistency, matchAcceptTerms, selectAccept, } from './verify.js';
 export { toPeacRecord, toPeacCarrier } from './map.js';
 export type { X402HeaderMap, X402ResponseLike, X402ExtractResult, X402ExtractAsyncResult, } from './carrier.js';
 export { X402_CARRIER_LIMITS, fromOfferResponse, fromOfferResponseAsync, fromSettlementResponse, fromSettlementResponseAsync, X402CarrierAdapter, } from './carrier.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAGH,YAAY,EACV,eAAe,EACf,YAAY,EACZ,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,cAAc,GACf,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAGpB,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGrF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAGzF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGvD,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAGtB,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,YAAY,EACV,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,UAAU,CAAC;AAGlB,YAAY,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAEvF,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAGhF,YAAY,EACV,eAAe,EACf,YAAY,EACZ,WAAW,EACX,cAAc,EACd,aAAa,EACb,WAAW,EACX,yBAAyB,EACzB,sBAAsB,EACtB,gBAAgB,EAChB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,YAAY,CAAC;AAGpB,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGrF,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAGjD,OAAO,EACL,WAAW,EACX,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,6BAA6B,EAC7B,gBAAgB,EAChB,YAAY,GACb,MAAM,aAAa,CAAC;AAGrB,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGvD,YAAY,EACV,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,sBAAsB,EACtB,sBAAsB,EACtB,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,cAAc,CAAC;AAGtB,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -2,38 +2,38 @@
 /**
  * @peac/adapter-x402
  *
- * x402 Offer/Receipt extension verification, term-matching, and PEAC record mapping.
+ * Verification, term-matching, and evidence mapping for the
+ * x402 Offer/Receipt extension (compatible with upstream coinbase/x402).
  *
- * NOTE: This adapter targets the x402 Offer/Receipt EXTENSION,
- * NOT the baseline x402 header flow. The profile identifier reflects this:
- * `peac-x402-offer-receipt/0.1` (extension) vs `peac-x402/0.1` (baseline, reserved).
- *
- * Key capabilities:
- * - Structural validation of x402 offers and receipts
- * - Term-matching: verify signed payload against accept entries
- * - Accept selection with acceptIndex as untrusted hint
- * - Mapping to canonical PEAC interaction records
- * - DoS protection: limits on accepts array size
- * - Amount/network validation: CAIP-2 format, integer strings
- *
- * IMPORTANT: This package does NOT perform cryptographic signature verification
- * (EIP-712 recovery, JWS validation). That is the caller's responsibility.
- * `valid: true` does NOT imply cryptographic signature validity unless
- * a CryptoVerifier is supplied and `verification.cryptographic.verified` is true.
- *
- * The focus is on term-matching and record mapping -- the verification
- * layer that makes unsigned acceptIndex irrelevant for security.
+ * Architecture:
+ * - Layer A (raw.ts): Exact upstream wire types and extraction
+ * - Layer B (normalize.ts): Semantic normalization (EIP-712 placeholders)
+ * - Layer C (map.ts): PEAC evidence mapping
+ * - Verification (verify.ts): Layered verification API
  *
  * @packageDocumentation
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.mapX402ToChallengeType = exports.X402CarrierAdapter = exports.fromSettlementResponseAsync = exports.fromSettlementResponse = exports.fromOfferResponseAsync = exports.fromOfferResponse = exports.X402_CARRIER_LIMITS = exports.toPeacCarrier = exports.toPeacRecord = exports.selectAccept = exports.matchAcceptTerms = exports.verifyReceipt = exports.verifyOffer = exports.X402Error = exports.MAX_AMOUNT_LENGTH = exports.MAX_TOTAL_ACCEPTS_BYTES = exports.MAX_ACCEPT_ENTRIES = exports.X402_OFFER_RECEIPT_PROFILE = void 0;
-// Constants
+exports.mapX402ToChallengeType = exports.X402CarrierAdapter = exports.fromSettlementResponseAsync = exports.fromSettlementResponse = exports.fromOfferResponseAsync = exports.fromOfferResponse = exports.X402_CARRIER_LIMITS = exports.toPeacCarrier = exports.toPeacRecord = exports.selectAccept = exports.matchAcceptTerms = exports.verifyOfferReceiptConsistency = exports.verifyReceiptWire = exports.verifyOfferWire = exports.verifyReceipt = exports.verifyOffer = exports.X402Error = exports.defaultAddressComparator = exports.MAX_AMOUNT_LENGTH = exports.MAX_TOTAL_ACCEPTS_BYTES = exports.MAX_ACCEPT_ENTRIES = exports.X402_OFFER_RECEIPT_PROFILE = exports.normalizeReceiptPayload = exports.normalizeOfferPayload = exports.extractReceiptFromHeaders = exports.extractExtensionInfo = exports.extractReceiptPayload = exports.extractOfferPayload = exports.parseCompactJWS = exports.X402_RECEIPT_HEADERS = exports.MAX_COMPACT_JWS_BYTES = exports.OFFER_RECEIPT = void 0;
+var raw_js_1 = require("./raw.js");
+Object.defineProperty(exports, "OFFER_RECEIPT", { enumerable: true, get: function () { return raw_js_1.OFFER_RECEIPT; } });
+Object.defineProperty(exports, "MAX_COMPACT_JWS_BYTES", { enumerable: true, get: function () { return raw_js_1.MAX_COMPACT_JWS_BYTES; } });
+Object.defineProperty(exports, "X402_RECEIPT_HEADERS", { enumerable: true, get: function () { return raw_js_1.X402_RECEIPT_HEADERS; } });
+Object.defineProperty(exports, "parseCompactJWS", { enumerable: true, get: function () { return raw_js_1.parseCompactJWS; } });
+Object.defineProperty(exports, "extractOfferPayload", { enumerable: true, get: function () { return raw_js_1.extractOfferPayload; } });
+Object.defineProperty(exports, "extractReceiptPayload", { enumerable: true, get: function () { return raw_js_1.extractReceiptPayload; } });
+Object.defineProperty(exports, "extractExtensionInfo", { enumerable: true, get: function () { return raw_js_1.extractExtensionInfo; } });
+Object.defineProperty(exports, "extractReceiptFromHeaders", { enumerable: true, get: function () { return raw_js_1.extractReceiptFromHeaders; } });
+var normalize_js_1 = require("./normalize.js");
+Object.defineProperty(exports, "normalizeOfferPayload", { enumerable: true, get: function () { return normalize_js_1.normalizeOfferPayload; } });
+Object.defineProperty(exports, "normalizeReceiptPayload", { enumerable: true, get: function () { return normalize_js_1.normalizeReceiptPayload; } });
+// Constants and functions from types
 var types_js_1 = require("./types.js");
 Object.defineProperty(exports, "X402_OFFER_RECEIPT_PROFILE", { enumerable: true, get: function () { return types_js_1.X402_OFFER_RECEIPT_PROFILE; } });
 Object.defineProperty(exports, "MAX_ACCEPT_ENTRIES", { enumerable: true, get: function () { return types_js_1.MAX_ACCEPT_ENTRIES; } });
 Object.defineProperty(exports, "MAX_TOTAL_ACCEPTS_BYTES", { enumerable: true, get: function () { return types_js_1.MAX_TOTAL_ACCEPTS_BYTES; } });
 Object.defineProperty(exports, "MAX_AMOUNT_LENGTH", { enumerable: true, get: function () { return types_js_1.MAX_AMOUNT_LENGTH; } });
+Object.defineProperty(exports, "defaultAddressComparator", { enumerable: true, get: function () { return types_js_1.defaultAddressComparator; } });
 // Errors
 var errors_js_1 = require("./errors.js");
 Object.defineProperty(exports, "X402Error", { enumerable: true, get: function () { return errors_js_1.X402Error; } });
@@ -41,6 +41,9 @@ Object.defineProperty(exports, "X402Error", { enumerable: true, get: function ()
 var verify_js_1 = require("./verify.js");
 Object.defineProperty(exports, "verifyOffer", { enumerable: true, get: function () { return verify_js_1.verifyOffer; } });
 Object.defineProperty(exports, "verifyReceipt", { enumerable: true, get: function () { return verify_js_1.verifyReceipt; } });
+Object.defineProperty(exports, "verifyOfferWire", { enumerable: true, get: function () { return verify_js_1.verifyOfferWire; } });
+Object.defineProperty(exports, "verifyReceiptWire", { enumerable: true, get: function () { return verify_js_1.verifyReceiptWire; } });
+Object.defineProperty(exports, "verifyOfferReceiptConsistency", { enumerable: true, get: function () { return verify_js_1.verifyOfferReceiptConsistency; } });
 Object.defineProperty(exports, "matchAcceptTerms", { enumerable: true, get: function () { return verify_js_1.matchAcceptTerms; } });
 Object.defineProperty(exports, "selectAccept", { enumerable: true, get: function () { return verify_js_1.selectAccept; } });
 // Mapping

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AAqBH,YAAY;AACZ,uCAKoB;AAJlB,sHAAA,0BAA0B,OAAA;AAC1B,8GAAA,kBAAkB,OAAA;AAClB,mHAAA,uBAAuB,OAAA;AACvB,6GAAA,iBAAiB,OAAA;AAMnB,SAAS;AACT,yCAAwC;AAA/B,sGAAA,SAAS,OAAA;AAGlB,eAAe;AACf,yCAAyF;AAAhF,wGAAA,WAAW,OAAA;AAAE,0GAAA,aAAa,OAAA;AAAE,6GAAA,gBAAgB,OAAA;AAAE,yGAAA,YAAY,OAAA;AAEnE,UAAU;AACV,mCAAuD;AAA9C,sGAAA,YAAY,OAAA;AAAE,uGAAA,aAAa,OAAA;AAUpC,2CAOsB;AANpB,iHAAA,mBAAmB,OAAA;AACnB,+GAAA,iBAAiB,OAAA;AACjB,oHAAA,sBAAsB,OAAA;AACtB,oHAAA,sBAAsB,OAAA;AACtB,yHAAA,2BAA2B,OAAA;AAC3B,gHAAA,kBAAkB,OAAA;AAKpB,+CAAwD;AAA/C,sHAAA,sBAAsB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAgBH,mCASkB;AARhB,uGAAA,aAAa,OAAA;AACb,+GAAA,qBAAqB,OAAA;AACrB,8GAAA,oBAAoB,OAAA;AACpB,yGAAA,eAAe,OAAA;AACf,6GAAA,mBAAmB,OAAA;AACnB,+GAAA,qBAAqB,OAAA;AACrB,8GAAA,oBAAoB,OAAA;AACpB,mHAAA,yBAAyB,OAAA;AAM3B,+CAAgF;AAAvE,qHAAA,qBAAqB,OAAA;AAAE,uHAAA,uBAAuB,OAAA;AA+BvD,qCAAqC;AACrC,uCAMoB;AALlB,sHAAA,0BAA0B,OAAA;AAC1B,8GAAA,kBAAkB,OAAA;AAClB,mHAAA,uBAAuB,OAAA;AACvB,6GAAA,iBAAiB,OAAA;AACjB,oHAAA,wBAAwB,OAAA;AAM1B,SAAS;AACT,yCAAwC;AAA/B,sGAAA,SAAS,OAAA;AAGlB,eAAe;AACf,yCAQqB;AAPnB,wGAAA,WAAW,OAAA;AACX,0GAAA,aAAa,OAAA;AACb,4GAAA,eAAe,OAAA;AACf,8GAAA,iBAAiB,OAAA;AACjB,0HAAA,6BAA6B,OAAA;AAC7B,6GAAA,gBAAgB,OAAA;AAChB,yGAAA,YAAY,OAAA;AAGd,UAAU;AACV,mCAAuD;AAA9C,sGAAA,YAAY,OAAA;AAAE,uGAAA,aAAa,OAAA;AAUpC,2CAOsB;AANpB,iHAAA,mBAAmB,OAAA;AACnB,+GAAA,iBAAiB,OAAA;AACjB,oHAAA,sBAAsB,OAAA;AACtB,oHAAA,sBAAsB,OAAA;AACtB,yHAAA,2BAA2B,OAAA;AAC3B,gHAAA,kBAAkB,OAAA;AAKpB,+CAAwD;AAA/C,sHAAA,sBAAsB,OAAA"}

package/dist/map.d.ts

@@ -1,41 +1,48 @@
 /**
- * x402 to PEAC record mapping
+ * x402 to PEAC record mapping (Layer C)
  *
- * Maps x402 PaymentRequired + SettlementResponse into a canonical
+ * Maps x402 offer/receipt extension data into a canonical
  * PEAC interaction record (X402PeacRecord).
  *
- * NOTE: This mapper produces records for the x402 Offer/Receipt EXTENSION,
- * NOT the baseline x402 header flow. The profile identifier reflects this.
- *
- * The record preserves:
- * - Raw proofs (offer + receipt) for audit/dispute
- * - Normalized evidence fields from signed payloads
- * - Unsigned hints (acceptIndex) explicitly marked as untrusted
- * - Verification status metadata (structural, cryptographic, termMatching)
+ * Uses normalized payloads (Layer B output) for evidence fields.
+ * Raw upstream artifacts are preserved as-is in proofs.
  */
 import type { PeacEvidenceCarrier } from '@peac/kernel';
-import type { X402PaymentRequired, X402SettlementResponse, X402PeacRecord, OfferVerification } from './types.js';
+import type { X402OfferReceiptChallenge, X402SettlementResponse, X402PeacRecord, OfferVerification, ConsistencyVerification, CryptoResult, AuthorizationResult } from './types.js';
 /**
  * Options for record mapping
  */
 export interface ToPeacRecordOptions {
     /**
      * Offer verification result (to populate verification hints)
-     *
-     * The termMatching field in OfferVerification is used to derive
-     * hints.acceptIndex.mismatchDetected automatically. This makes
-     * mismatch detection first-class without requiring external options.
      */
     offerVerification?: OfferVerification;
+    /**
+     * Consistency verification result
+     */
+    consistencyVerification?: ConsistencyVerification;
     /**
      * Whether cryptographic signature verification was performed
      * Default: false (adapter does NOT perform crypto verification)
      */
     cryptoVerified?: boolean;
     /**
-     * Signer identity (if crypto verification was performed)
+     * Crypto verification result (if crypto verification was performed)
+     */
+    cryptoResult?: CryptoResult;
+    /**
+     * Signer authorization result (if authorization was performed)
+     */
+    authorizationResult?: AuthorizationResult;
+    /**
+     * Index of the offer within the offers array to use for mapping
+     * Default: 0 (first offer)
+     */
+    offerIndex?: number;
+    /**
+     * Maximum compact JWS byte length for payload extraction
      */
-    cryptoSigner?: string;
+    maxCompactJwsBytes?: number;
 }
 /**
  * Map x402 payment flow to a PEAC interaction record
@@ -43,21 +50,20 @@ export interface ToPeacRecordOptions {
  * Takes a PaymentRequired (offer side) and SettlementResponse (receipt side)
  * and produces a canonical PEAC record with normalized evidence.
  *
- * IMPORTANT: The resulting record does NOT indicate cryptographic signature
- * validity unless you explicitly pass `cryptoVerified: true` in options.
- * See `hints.verification.cryptographic` in the output.
+ * Uses Layer B (normalized) payloads for evidence; stores exact raw
+ * artifacts in proofs (proof preservation discipline).
  *
- * @param paymentRequired - The 402 response with offer and accepts
+ * @param paymentRequired - The 402 response with offers and accepts
  * @param settlementResponse - The settlement response with receipt
  * @param options - Optional mapping options
  * @returns Canonical PEAC interaction record
  * @throws X402Error if inputs are structurally invalid
  */
-export declare function toPeacRecord(paymentRequired: X402PaymentRequired, settlementResponse: X402SettlementResponse, options?: ToPeacRecordOptions): X402PeacRecord;
+export declare function toPeacRecord(paymentRequired: X402OfferReceiptChallenge, settlementResponse: X402SettlementResponse, options?: ToPeacRecordOptions): X402PeacRecord;
 /**
  * Convert an x402 PEAC record to a PeacEvidenceCarrier.
  *
- * Uses the shared `computeReceiptRef()` from `@peac/schema` (correction item 4)
+ * Uses the shared `computeReceiptRef()` from `@peac/schema`
  * to produce a canonical, content-addressed receipt_ref from the JWS.
  *
  * @param receiptJws - Compact JWS of the PEAC receipt

package/dist/map.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAIxD,OAAO,KAAK,EACV,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EAEd,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAGpB;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAC1B,eAAe,EAAE,mBAAmB,EACpC,kBAAkB,EAAE,sBAAsB,EAC1C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,cAAc,CAyFhB;AAMD;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAMpF"}
+{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAOxD,OAAO,KAAK,EACV,yBAAyB,EACzB,sBAAsB,EACtB,cAAc,EAEd,iBAAiB,EACjB,uBAAuB,EACvB,YAAY,EACZ,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAGpB;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;OAEG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;OAEG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAC1B,eAAe,EAAE,yBAAyB,EAC1C,kBAAkB,EAAE,sBAAsB,EAC1C,OAAO,CAAC,EAAE,mBAAmB,GAC5B,cAAc,CA2HhB;AAMD;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAMpF"}

package/dist/map.js

@@ -1,24 +1,20 @@
 "use strict";
 /**
- * x402 to PEAC record mapping
+ * x402 to PEAC record mapping (Layer C)
  *
- * Maps x402 PaymentRequired + SettlementResponse into a canonical
+ * Maps x402 offer/receipt extension data into a canonical
  * PEAC interaction record (X402PeacRecord).
  *
- * NOTE: This mapper produces records for the x402 Offer/Receipt EXTENSION,
- * NOT the baseline x402 header flow. The profile identifier reflects this.
- *
- * The record preserves:
- * - Raw proofs (offer + receipt) for audit/dispute
- * - Normalized evidence fields from signed payloads
- * - Unsigned hints (acceptIndex) explicitly marked as untrusted
- * - Verification status metadata (structural, cryptographic, termMatching)
+ * Uses normalized payloads (Layer B output) for evidence fields.
+ * Raw upstream artifacts are preserved as-is in proofs.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.toPeacRecord = toPeacRecord;
 exports.toPeacCarrier = toPeacCarrier;
 const schema_1 = require("@peac/schema");
 const errors_js_1 = require("./errors.js");
+const raw_js_1 = require("./raw.js");
+const normalize_js_1 = require("./normalize.js");
 const types_js_1 = require("./types.js");
 /**
  * Map x402 payment flow to a PEAC interaction record
@@ -26,35 +22,46 @@ const types_js_1 = require("./types.js");
  * Takes a PaymentRequired (offer side) and SettlementResponse (receipt side)
  * and produces a canonical PEAC record with normalized evidence.
  *
- * IMPORTANT: The resulting record does NOT indicate cryptographic signature
- * validity unless you explicitly pass `cryptoVerified: true` in options.
- * See `hints.verification.cryptographic` in the output.
+ * Uses Layer B (normalized) payloads for evidence; stores exact raw
+ * artifacts in proofs (proof preservation discipline).
  *
- * @param paymentRequired - The 402 response with offer and accepts
+ * @param paymentRequired - The 402 response with offers and accepts
  * @param settlementResponse - The settlement response with receipt
  * @param options - Optional mapping options
  * @returns Canonical PEAC interaction record
  * @throws X402Error if inputs are structurally invalid
  */
 function toPeacRecord(paymentRequired, settlementResponse, options) {
-    const offer = paymentRequired.offer;
-    const receipt = settlementResponse.receipt;
-    if (!offer?.payload) {
-        throw new errors_js_1.X402Error('offer_invalid_format', 'PaymentRequired must contain a valid offer with payload');
+    const offerIndex = options?.offerIndex ?? 0;
+    const maxJwsBytes = options?.maxCompactJwsBytes;
+    // Validate offers array
+    if (!paymentRequired.offers ||
+        !Array.isArray(paymentRequired.offers) ||
+        paymentRequired.offers.length === 0) {
+        throw new errors_js_1.X402Error('offer_invalid_format', 'PaymentRequired must contain a non-empty offers array');
+    }
+    if (offerIndex < 0 || offerIndex >= paymentRequired.offers.length) {
+        throw new errors_js_1.X402Error('offer_invalid_format', `offerIndex ${offerIndex} is out of range [0, ${paymentRequired.offers.length - 1}]`);
     }
-    if (!receipt?.payload) {
-        throw new errors_js_1.X402Error('receipt_invalid_format', 'SettlementResponse must contain a valid receipt with payload');
+    const offer = paymentRequired.offers[offerIndex];
+    const receipt = settlementResponse.receipt;
+    if (!receipt) {
+        throw new errors_js_1.X402Error('receipt_invalid_format', 'SettlementResponse must contain a valid receipt');
     }
-    const offerPayload = offer.payload;
-    const receiptPayload = receipt.payload;
+    // Extract and normalize payloads (Layer A -> Layer B)
+    const rawOfferPayload = (0, raw_js_1.extractOfferPayload)(offer, maxJwsBytes);
+    const rawReceiptPayload = (0, raw_js_1.extractReceiptPayload)(receipt, maxJwsBytes);
+    const offerPayload = (0, normalize_js_1.normalizeOfferPayload)(rawOfferPayload);
+    const receiptPayload = (0, normalize_js_1.normalizeReceiptPayload)(rawReceiptPayload);
     // Build hints (unsigned metadata, explicitly untrusted)
     const hints = {};
-    // Derive mismatchDetected from termMatching (first-class, always boolean when present)
+    // Derive mismatchDetected from termMatching
     const termMatching = options?.offerVerification?.termMatching;
     const mismatchDetected = termMatching?.hintMismatchDetected ?? false;
-    if (paymentRequired.acceptIndex !== undefined) {
+    // acceptIndex is now per-offer
+    if (offer.acceptIndex !== undefined) {
         hints.acceptIndex = {
-            value: paymentRequired.acceptIndex,
+            value: offer.acceptIndex,
             untrusted: true,
             ...(mismatchDetected && { mismatchDetected: true }),
         };
@@ -64,47 +71,61 @@ function toPeacRecord(paymentRequired, settlementResponse, options) {
         hints.resourceUrl = resourceUrl;
     }
     // Build verification status
-    // IMPORTANT: If offerVerification is not provided, we cannot assume terms matched.
-    // Callers SHOULD provide offerVerification for a complete record.
     const offerVerification = options?.offerVerification;
     const termMatchingVerified = offerVerification !== undefined;
+    const cryptoResult = options?.cryptoResult;
+    const authResult = options?.authorizationResult;
     const verification = {
         structural: true,
         cryptographic: {
             verified: options?.cryptoVerified ?? false,
             ...(!(options?.cryptoVerified ?? false) && { reason: 'not_checked' }),
             format: offer.format,
-            ...(options?.cryptoSigner && { signer: options.cryptoSigner }),
+            ...(cryptoResult?.signer && { signer: cryptoResult.signer }),
         },
         termMatching: {
-            // Safe-by-default: if verification wasn't performed, indicate that clearly
             matched: termMatchingVerified ? offerVerification.valid : false,
             method: offerVerification?.usedHint ? 'hint' : 'scan',
             ...(offerVerification?.matchedIndex !== undefined && {
                 matchedIndex: offerVerification.matchedIndex,
             }),
-            // Add flag to indicate if term-matching was actually performed
             ...(!termMatchingVerified && { reason: 'not_verified' }),
         },
+        ...(options?.consistencyVerification && {
+            consistency: {
+                checked: true,
+                valid: options.consistencyVerification.valid,
+            },
+        }),
+        ...(authResult && {
+            signerAuthorization: {
+                checked: true,
+                authorized: authResult.authorized,
+                ...(authResult.method && { method: authResult.method }),
+            },
+        }),
     };
     hints.verification = verification;
     return {
         version: types_js_1.X402_OFFER_RECEIPT_PROFILE,
         proofs: {
             x402: {
-                offer,
-                receipt,
+                offer, // exact raw artifact, never mutated
+                receipt, // exact raw artifact, never mutated
             },
         },
         evidence: {
-            validUntil: offerPayload.validUntil,
+            resourceUrl: offerPayload.resourceUrl,
+            ...(offerPayload.validUntil !== undefined && { validUntil: offerPayload.validUntil }),
             network: offerPayload.network,
             payee: offerPayload.payTo,
             asset: offerPayload.asset,
             amount: offerPayload.amount,
-            txHash: receiptPayload.txHash,
             offerVersion: offerPayload.version,
-            ...(receiptPayload.version && { receiptVersion: receiptPayload.version }),
+            ...(receiptPayload.payer && { payer: receiptPayload.payer }),
+            ...(receiptPayload.issuedAt && { issuedAt: receiptPayload.issuedAt }),
+            ...(receiptPayload.transaction && { transaction: receiptPayload.transaction }),
+            ...(receiptPayload.version !== undefined && { receiptVersion: receiptPayload.version }),
         },
         hints,
         createdAt: new Date().toISOString(),
@@ -116,7 +137,7 @@ function toPeacRecord(paymentRequired, settlementResponse, options) {
 /**
  * Convert an x402 PEAC record to a PeacEvidenceCarrier.
  *
- * Uses the shared `computeReceiptRef()` from `@peac/schema` (correction item 4)
+ * Uses the shared `computeReceiptRef()` from `@peac/schema`
  * to produce a canonical, content-addressed receipt_ref from the JWS.
  *
  * @param receiptJws - Compact JWS of the PEAC receipt

package/dist/map.js.map

@@ -1 +1 @@
-{"version":3,"file":"map.js","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;AAsDH,oCA6FC;AAeD,sCAMC;AArKD,yCAAiD;AAEjD,2CAAwC;AAQxC,yCAAwD;AAyBxD;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,YAAY,CAC1B,eAAoC,EACpC,kBAA0C,EAC1C,OAA6B;IAE7B,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC;IACpC,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC;IAE3C,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,qBAAS,CACjB,sBAAsB,EACtB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,qBAAS,CACjB,wBAAwB,EACxB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;IACnC,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAEvC,wDAAwD;IACxD,MAAM,KAAK,GAA4B,EAAE,CAAC;IAE1C,uFAAuF;IACvF,MAAM,YAAY,GAAG,OAAO,EAAE,iBAAiB,EAAE,YAAY,CAAC;IAC9D,MAAM,gBAAgB,GAAG,YAAY,EAAE,oBAAoB,IAAI,KAAK,CAAC;IAErE,IAAI,eAAe,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9C,KAAK,CAAC,WAAW,GAAG;YAClB,KAAK,EAAE,eAAe,CAAC,WAAW;YAClC,SAAS,EAAE,IAAI;YACf,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,IAAI,kBAAkB,CAAC,WAAW,CAAC;IAClF,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAClC,CAAC;IAED,4BAA4B;IAC5B,mFAAmF;IACnF,kEAAkE;IAClE,MAAM,iBAAiB,GAAG,OAAO,EAAE,iBAAiB,CAAC;IACrD,MAAM,oBAAoB,GAAG,iBAAiB,KAAK,SAAS,CAAC;IAE7D,MAAM,YAAY,GAAuB;QACvC,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE;YACb,QAAQ,EAAE,OAAO,EAAE,cAAc,IAAI,KAAK;YAC1C,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YACrE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,OAAO,EAAE,YAAY,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;SAC/D;QACD,YAAY,EAAE;YACZ,2EAA2E;YAC3E,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;YAC/D,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACrD,GAAG,CAAC,iBAAiB,EAAE,YAAY,KAAK,SAAS,IAAI;gBACnD,YAAY,EAAE,iBAAiB,CAAC,YAAY;aAC7C,CAAC;YACF,+DAA+D;YAC/D,GAAG,CAAC,CAAC,oBAAoB,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;SACzD;KACF,CAAC;IAEF,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;IAElC,OAAO;QACL,OAAO,EAAE,qCAA0B;QACnC,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,KAAK;gBACL,OAAO;aACR;SACF;QACD,QAAQ,EAAE;YACR,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,MAAM,EAAE,cAAc,CAAC,MAAM;YAC7B,YAAY,EAAE,YAAY,CAAC,OAAO;YAClC,GAAG,CAAC,cAAc,CAAC,OAAO,IAAI,EAAE,cAAc,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;SAC1E;QACD,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E;;;;;;;;GAQG;AACI,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAiB,EAAC,UAAU,CAAC,CAAC;IAChD,OAAO;QACL,WAAW,EAAE,GAAG;QAChB,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"map.js","sourceRoot":"","sources":["../src/map.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAwEH,oCA+HC;AAeD,sCAMC;AAzND,yCAAiD;AAEjD,2CAAwC;AAExC,qCAAsE;AACtE,iDAAgF;AAWhF,yCAAwD;AAsCxD;;;;;;;;;;;;;;GAcG;AACH,SAAgB,YAAY,CAC1B,eAA0C,EAC1C,kBAA0C,EAC1C,OAA6B;IAE7B,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC;IAC5C,MAAM,WAAW,GAAG,OAAO,EAAE,kBAAkB,CAAC;IAEhD,wBAAwB;IACxB,IACE,CAAC,eAAe,CAAC,MAAM;QACvB,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;QACtC,eAAe,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,qBAAS,CACjB,sBAAsB,EACtB,uDAAuD,CACxD,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,IAAI,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QAClE,MAAM,IAAI,qBAAS,CACjB,sBAAsB,EACtB,cAAc,UAAU,wBAAwB,eAAe,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAmB,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACjE,MAAM,OAAO,GAAqB,kBAAkB,CAAC,OAAO,CAAC;IAE7D,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,qBAAS,CACjB,wBAAwB,EACxB,iDAAiD,CAClD,CAAC;IACJ,CAAC;IAED,sDAAsD;IACtD,MAAM,eAAe,GAAG,IAAA,4BAAmB,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,IAAA,8BAAqB,EAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,IAAA,oCAAqB,EAAC,eAAe,CAAC,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAA,sCAAuB,EAAC,iBAAiB,CAAC,CAAC;IAElE,wDAAwD;IACxD,MAAM,KAAK,GAA4B,EAAE,CAAC;IAE1C,4CAA4C;IAC5C,MAAM,YAAY,GAAG,OAAO,EAAE,iBAAiB,EAAE,YAAY,CAAC;IAC9D,MAAM,gBAAgB,GAAG,YAAY,EAAE,oBAAoB,IAAI,KAAK,CAAC;IAErE,+BAA+B;IAC/B,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,KAAK,CAAC,WAAW,GAAG;YAClB,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,SAAS,EAAE,IAAI;YACf,GAAG,CAAC,gBAAgB,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,WAAW,IAAI,kBAAkB,CAAC,WAAW,CAAC;IAClF,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,WAAW,GAAG,WAAW,CAAC;IAClC,CAAC;IAED,4BAA4B;IAC5B,MAAM,iBAAiB,GAAG,OAAO,EAAE,iBAAiB,CAAC;IACrD,MAAM,oBAAoB,GAAG,iBAAiB,KAAK,SAAS,CAAC;IAC7D,MAAM,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,EAAE,mBAAmB,CAAC;IAEhD,MAAM,YAAY,GAAuB;QACvC,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE;YACb,QAAQ,EAAE,OAAO,EAAE,cAAc,IAAI,KAAK;YAC1C,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,IAAI,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;YACrE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC;SAC7D;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK;YAC/D,MAAM,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACrD,GAAG,CAAC,iBAAiB,EAAE,YAAY,KAAK,SAAS,IAAI;gBACnD,YAAY,EAAE,iBAAiB,CAAC,YAAY;aAC7C,CAAC;YACF,GAAG,CAAC,CAAC,oBAAoB,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;SACzD;QACD,GAAG,CAAC,OAAO,EAAE,uBAAuB,IAAI;YACtC,WAAW,EAAE;gBACX,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,OAAO,CAAC,uBAAuB,CAAC,KAAK;aAC7C;SACF,CAAC;QACF,GAAG,CAAC,UAAU,IAAI;YAChB,mBAAmB,EAAE;gBACnB,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,UAAU,CAAC,UAAU;gBACjC,GAAG,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;aACxD;SACF,CAAC;KACH,CAAC;IAEF,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;IAElC,OAAO;QACL,OAAO,EAAE,qCAA0B;QACnC,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,KAAK,EAAE,oCAAoC;gBAC3C,OAAO,EAAE,oCAAoC;aAC9C;SACF;QACD,QAAQ,EAAE;YACR,WAAW,EAAE,YAAY,CAAC,WAAW;YACrC,GAAG,CAAC,YAAY,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC;YACrF,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,YAAY,EAAE,YAAY,CAAC,OAAO;YAClC,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,CAAC;YAC5D,GAAG,CAAC,cAAc,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC;YACrE,GAAG,CAAC,cAAc,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,WAAW,EAAE,CAAC;YAC9E,GAAG,CAAC,cAAc,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,cAAc,CAAC,OAAO,EAAE,CAAC;SACxF;QACD,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E;;;;;;;;GAQG;AACI,KAAK,UAAU,aAAa,CAAC,UAAkB;IACpD,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAiB,EAAC,UAAU,CAAC,CAAC;IAChD,OAAO;QACL,WAAW,EAAE,GAAG;QAChB,WAAW,EAAE,UAAU;KACxB,CAAC;AACJ,CAAC"}