@peac/mappings-ucp 0.9.31

package/dist/mapper.js

@@ -0,0 +1,165 @@
+/**
+ * @peac/mappings-ucp - UCP to PEAC receipt mapping
+ *
+ * Maps UCP order data to PEAC receipt claims.
+ * Amounts are in minor units (cents), NOT micros.
+ */
+import { ErrorCodes, ucpError } from './errors.js';
+/**
+ * Generate a unique receipt ID.
+ * Uses timestamp + random suffix for uniqueness.
+ */
+function generateReceiptId() {
+    const timestamp = Date.now().toString(36);
+    const random = Math.random().toString(36).slice(2, 10);
+    return `rcpt_${timestamp}_${random}`;
+}
+/**
+ * Derive order status from line items.
+ */
+function deriveOrderStatus(order) {
+    const lineItems = order.line_items;
+    if (lineItems.length === 0) {
+        return 'processing';
+    }
+    const allFulfilled = lineItems.every((li) => li.status === 'fulfilled');
+    const someFulfilled = lineItems.some((li) => li.status === 'fulfilled' || li.status === 'partial');
+    if (allFulfilled) {
+        return 'completed';
+    }
+    if (someFulfilled) {
+        return 'partial';
+    }
+    return 'processing';
+}
+/**
+ * Extract totals by type from UCP order.
+ */
+function extractTotals(order) {
+    const result = {};
+    for (const total of order.totals) {
+        result[total.type] = total.amount;
+    }
+    return result;
+}
+/**
+ * Validate UCP order has required fields.
+ */
+function validateOrder(order) {
+    if (!order.id) {
+        throw ucpError(ErrorCodes.ORDER_MISSING_ID, 'Order must have an id');
+    }
+    if (!order.line_items || !Array.isArray(order.line_items)) {
+        throw ucpError(ErrorCodes.ORDER_MISSING_LINE_ITEMS, 'Order must have line_items array');
+    }
+    if (!order.totals || !Array.isArray(order.totals)) {
+        throw ucpError(ErrorCodes.ORDER_MISSING_TOTALS, 'Order must have totals array');
+    }
+    // Find the total amount
+    const totalEntry = order.totals.find((t) => t.type === 'total');
+    if (!totalEntry) {
+        throw ucpError(ErrorCodes.ORDER_MISSING_TOTALS, 'Order totals must include a "total" entry');
+    }
+}
+/**
+ * Map a UCP order to PEAC receipt claims.
+ *
+ * @param options - Mapping options
+ * @returns PEAC receipt claims (ready for signing)
+ *
+ * @example
+ * ```ts
+ * const claims = mapUcpOrderToReceipt({
+ *   order: ucpOrder,
+ *   issuer: 'https://merchant.example.com',
+ *   subject: 'agent:shopper-bot-123',
+ *   currency: 'USD',
+ * });
+ *
+ * // Sign with @peac/protocol
+ * const receipt = await issue(claims, privateKey, kid);
+ * ```
+ */
+export function mapUcpOrderToReceipt(options) {
+    const { order, issuer, subject, currency, receipt_id, issued_at } = options;
+    // Validate order
+    validateOrder(order);
+    // Get the total amount (in minor units)
+    const totalEntry = order.totals.find((t) => t.type === 'total');
+    const amount = totalEntry.amount;
+    // Derive status
+    const orderStatus = deriveOrderStatus(order);
+    // Map to payment status
+    const paymentStatus = orderStatus === 'processing' ? 'pending' : 'completed';
+    // Extract all totals
+    const totals = extractTotals(order);
+    // Build receipt claims
+    const claims = {
+        jti: receipt_id ?? generateReceiptId(),
+        iss: issuer,
+        sub: subject,
+        iat: issued_at
+            ? Math.floor(new Date(issued_at).getTime() / 1000)
+            : Math.floor(Date.now() / 1000),
+        payment: {
+            rail: 'ucp',
+            currency,
+            amount,
+            status: paymentStatus,
+            evidence: {
+                order_id: order.id,
+                ...(order.checkout_id && { checkout_id: order.checkout_id }),
+                line_items: order.line_items.length,
+                totals,
+            },
+        },
+        ext: {
+            'dev.ucp/order_id': order.id,
+            ...(order.checkout_id && { 'dev.ucp/checkout_id': order.checkout_id }),
+            'dev.ucp/order_status': orderStatus,
+            ...(order.permalink_url && { 'dev.ucp/permalink': order.permalink_url }),
+        },
+    };
+    return claims;
+}
+/**
+ * Extract line item summary for evidence.
+ */
+export function extractLineItemSummary(order) {
+    return order.line_items.map((li) => ({
+        id: li.id,
+        title: li.item.title,
+        quantity: li.quantity.total,
+        price: li.item.price,
+        status: li.status,
+    }));
+}
+/**
+ * Calculate order summary statistics.
+ */
+export function calculateOrderStats(order) {
+    let totalItems = 0;
+    let fulfilledItems = 0;
+    let pendingItems = 0;
+    let totalQuantity = 0;
+    let fulfilledQuantity = 0;
+    for (const li of order.line_items) {
+        totalItems++;
+        totalQuantity += li.quantity.total;
+        fulfilledQuantity += li.quantity.fulfilled;
+        if (li.status === 'fulfilled') {
+            fulfilledItems++;
+        }
+        else {
+            pendingItems++;
+        }
+    }
+    return {
+        total_items: totalItems,
+        fulfilled_items: fulfilledItems,
+        pending_items: pendingItems,
+        total_quantity: totalQuantity,
+        fulfilled_quantity: fulfilledQuantity,
+    };
+}
+//# sourceMappingURL=mapper.js.map

package/dist/mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapper.js","sourceRoot":"","sources":["../src/mapper.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEnD;;;GAGG;AACH,SAAS,iBAAiB;IACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,OAAO,QAAQ,SAAS,IAAI,MAAM,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,KAAe;IACxC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IAEnC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAClC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,KAAK,WAAW,IAAI,EAAE,CAAC,MAAM,KAAK,SAAS,CAC7D,CAAC;IAEF,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAe;IACpC,MAAM,MAAM,GAA+B,EAAE,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACpC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAe;IACpC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,MAAM,QAAQ,CAAC,UAAU,CAAC,gBAAgB,EAAE,uBAAuB,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,MAAM,QAAQ,CAAC,UAAU,CAAC,wBAAwB,EAAE,kCAAkC,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,QAAQ,CAAC,UAAU,CAAC,oBAAoB,EAAE,8BAA8B,CAAC,CAAC;IAClF,CAAC;IAED,wBAAwB;IACxB,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,QAAQ,CAAC,UAAU,CAAC,oBAAoB,EAAE,2CAA2C,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAA2B;IAC9D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IAE5E,iBAAiB;IACjB,aAAa,CAAC,KAAK,CAAC,CAAC;IAErB,wCAAwC;IACxC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAE,CAAC;IACjE,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAEjC,gBAAgB;IAChB,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAE7C,wBAAwB;IACxB,MAAM,aAAa,GAAG,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IAE7E,qBAAqB;IACrB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IAEpC,uBAAuB;IACvB,MAAM,MAAM,GAAwB;QAClC,GAAG,EAAE,UAAU,IAAI,iBAAiB,EAAE;QACtC,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,SAAS;YACZ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;YAClD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACjC,OAAO,EAAE;YACP,IAAI,EAAE,KAAK;YACX,QAAQ;YACR,MAAM;YACN,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE;gBACR,QAAQ,EAAE,KAAK,CAAC,EAAE;gBAClB,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC5D,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM;gBACnC,MAAM;aACP;SACF;QACD,GAAG,EAAE;YACH,kBAAkB,EAAE,KAAK,CAAC,EAAE;YAC5B,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,qBAAqB,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC;YACtE,sBAAsB,EAAE,WAAW;YACnC,GAAG,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,mBAAmB,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;SACzE;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAe;IAOpD,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACnC,EAAE,EAAE,EAAE,CAAC,EAAE;QACT,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK;QACpB,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK;QAC3B,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK;QACpB,MAAM,EAAE,EAAE,CAAC,MAAM;KAClB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAe;IAOjD,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAClC,UAAU,EAAE,CAAC;QACb,aAAa,IAAI,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;QACnC,iBAAiB,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC;QAE3C,IAAI,EAAE,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC9B,cAAc,EAAE,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,YAAY,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,eAAe,EAAE,cAAc;QAC/B,aAAa,EAAE,YAAY;QAC3B,cAAc,EAAE,aAAa;QAC7B,kBAAkB,EAAE,iBAAiB;KACtC,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,360 @@
+/**
+ * @peac/mappings-ucp - Type definitions
+ *
+ * Google Universal Commerce Protocol (UCP) types and evidence schema.
+ * UCP webhooks use detached JWS (RFC 7797) with ES256/ES384/ES512.
+ */
+/**
+ * UCP Evidence schema version.
+ * Used in policy/policy.yaml for dispute bundles.
+ */
+export declare const UCP_EVIDENCE_VERSION: "org.peacprotocol.ucp/0.1";
+/**
+ * Supported JWS algorithms for UCP webhook signatures.
+ * ES256 is most common, ES384/ES512 for higher security.
+ */
+export type UcpSignatureAlgorithm = 'ES256' | 'ES384' | 'ES512';
+/**
+ * UCP amounts are in minor units (cents), NOT micros.
+ * e.g., $10.00 = 1000 (cents)
+ */
+export type MinorUnits = number;
+/**
+ * Verification mode for webhook signatures.
+ * - 'raw': Verify against raw request body bytes
+ * - 'jcs': Verify against JCS-canonicalized body
+ */
+export type VerificationMode = 'raw' | 'jcs';
+/**
+ * b64 header parameter for detached JWS.
+ * - true: Payload is base64url-encoded before signing (default per RFC 7515)
+ * - false: Payload bytes used directly (RFC 7797 unencoded payload)
+ * - undefined: Treat as true per spec
+ */
+export type B64Mode = true | false | undefined;
+/**
+ * Parsed JWS header for UCP signatures.
+ */
+export interface UcpJwsHeader {
+    /** Algorithm (ES256, ES384, ES512) */
+    alg: UcpSignatureAlgorithm;
+    /** Key ID referencing signing_keys in UCP profile */
+    kid: string;
+    /** b64 parameter (RFC 7797) */
+    b64?: boolean;
+    /** Critical headers that MUST be understood */
+    crit?: string[];
+    /** Type (typically 'JWT') */
+    typ?: string;
+}
+/**
+ * Result of parsing a detached JWS from Request-Signature header.
+ */
+export interface ParsedDetachedJws {
+    /** Original header string value */
+    raw_header_value: string;
+    /** Parsed protected header */
+    header: UcpJwsHeader;
+    /** Base64url-encoded protected header */
+    protected_b64url: string;
+    /** Base64url-encoded signature */
+    signature_b64url: string;
+    /** Whether b64=false was specified */
+    is_unencoded_payload: boolean;
+}
+/**
+ * UCP signing key from business profile.
+ */
+export interface UcpSigningKey {
+    /** Key type (EC for ECDSA) */
+    kty: 'EC';
+    /** Curve (P-256, P-384, P-521) */
+    crv: 'P-256' | 'P-384' | 'P-521';
+    /** Key ID */
+    kid: string;
+    /** X coordinate (base64url) */
+    x: string;
+    /** Y coordinate (base64url) */
+    y: string;
+    /** Algorithm */
+    alg?: UcpSignatureAlgorithm;
+    /** Key use */
+    use?: 'sig';
+}
+/**
+ * UCP business profile (from /.well-known/ucp).
+ */
+export interface UcpProfile {
+    /** Profile version */
+    version: string;
+    /** Business ID */
+    business_id: string;
+    /** Signing keys for webhook verification */
+    signing_keys: UcpSigningKey[];
+    /** Capabilities supported */
+    capabilities?: UcpCapability[];
+}
+/**
+ * UCP capability declaration.
+ */
+export interface UcpCapability {
+    /** Capability name (e.g., 'dev.ucp.shopping.order') */
+    name: string;
+    /** Capability version */
+    version: string;
+    /** Capability config */
+    config?: Record<string, unknown>;
+}
+/**
+ * Verification attempt record for evidence.
+ */
+export interface VerificationAttempt {
+    /** Mode attempted */
+    mode: VerificationMode;
+    /** Whether this attempt succeeded */
+    success: boolean;
+    /** Error code if failed */
+    error_code?: string;
+    /** Error message if failed */
+    error_message?: string;
+}
+/**
+ * Payload representation for evidence.
+ * Stores both raw and JCS forms for reproducible verification.
+ */
+export interface PayloadEvidence {
+    /** SHA-256 hash of raw request body bytes (hex) */
+    raw_sha256_hex: string;
+    /** Raw body bytes as base64url (optional, recommended for <= 256KB) */
+    raw_bytes_b64url?: string;
+    /** SHA-256 hash of JCS-canonicalized body (hex, if JSON parseable) */
+    jcs_sha256_hex?: string;
+    /** JCS-canonicalized JSON text (optional, for human review) */
+    jcs_text?: string;
+    /** Whether JSON parsing succeeded */
+    json_parseable: boolean;
+}
+/**
+ * Signature evidence for dispute bundle.
+ */
+export interface SignatureEvidence {
+    /** Full Request-Signature header value */
+    header_value: string;
+    /** Parsed key ID */
+    kid: string;
+    /** Parsed algorithm */
+    alg: UcpSignatureAlgorithm;
+    /** b64 mode (true, false, or absent -> null) */
+    b64: boolean | null;
+    /** Critical headers if present */
+    crit?: string[];
+    /** Whether verification succeeded */
+    verified: boolean;
+    /** Which verification mode succeeded */
+    verification_mode_used?: VerificationMode;
+    /** All verification attempts (for debugging) */
+    verification_attempts: VerificationAttempt[];
+}
+/**
+ * Profile snapshot for offline audit.
+ */
+export interface ProfileSnapshot {
+    /** Profile URL */
+    url: string;
+    /** When profile was fetched (ISO 8601) */
+    fetched_at: string;
+    /** SHA-256 of JCS-canonicalized profile JSON (hex) */
+    profile_jcs_sha256_hex: string;
+    /** JWK thumbprint of the key used (RFC 7638) */
+    key_thumbprint?: string;
+    /** Full JWK used (for offline verification) */
+    key_jwk?: UcpSigningKey;
+}
+/**
+ * UCP webhook event metadata.
+ */
+export interface WebhookEventMeta {
+    /** Event type (e.g., 'order.created') */
+    type: string;
+    /** Resource ID (e.g., order_id) */
+    resource_id?: string;
+    /** Event timestamp from payload (ISO 8601) */
+    timestamp?: string;
+}
+/**
+ * Complete UCP webhook evidence for dispute bundle.
+ * Stored in policy/policy.yaml with fixed key ordering.
+ */
+export interface UcpWebhookEvidence {
+    /** Schema version - prevents misinterpretation as executable policy */
+    peac_bundle_metadata_version: typeof UCP_EVIDENCE_VERSION;
+    /** Kind marker - clearly not executable policy */
+    kind: 'evidence_attachment';
+    /** Evidence scope */
+    scope: 'ucp_webhook';
+    /** Webhook request metadata */
+    request: {
+        /** HTTP method */
+        method: string;
+        /** Request path */
+        path: string;
+        /** When request was received (ISO 8601, injected for determinism) */
+        received_at: string;
+    };
+    /** Payload evidence with both raw and JCS representations */
+    payload: PayloadEvidence;
+    /** Signature evidence */
+    signature: SignatureEvidence;
+    /** Event metadata from payload */
+    event?: WebhookEventMeta;
+    /** Business profile snapshot */
+    profile: ProfileSnapshot;
+    /** Links to PEAC receipts in this bundle */
+    linked_receipts?: LinkedReceipt[];
+}
+/**
+ * Link to a PEAC receipt in the same bundle.
+ */
+export interface LinkedReceipt {
+    /** Receipt ID (jti claim) */
+    receipt_id: string;
+    /** Relationship to the webhook event */
+    relationship: 'issued_for_order' | 'issued_for_checkout' | 'issued_for_adjustment';
+}
+/**
+ * Options for verifying a UCP webhook signature.
+ */
+export interface VerifyUcpWebhookOptions {
+    /** Request-Signature header value */
+    signature_header: string;
+    /** Raw request body bytes */
+    body_bytes: Uint8Array;
+    /** Profile URL for key discovery */
+    profile_url: string;
+    /** Optional: pre-fetched profile (skips fetch) */
+    profile?: UcpProfile;
+    /** Optional: timestamp for profile fetch (for deterministic evidence) */
+    fetched_at?: string;
+    /** Optional: maximum body size to include in evidence (default 256KB) */
+    max_body_evidence_bytes?: number;
+}
+/**
+ * Result of UCP webhook signature verification.
+ * Includes profile and key for single-fetch evidence capture.
+ */
+export interface VerifyUcpWebhookResult {
+    /** Whether signature is valid */
+    valid: boolean;
+    /** Which verification mode succeeded (if valid) */
+    mode_used?: VerificationMode;
+    /** Parsed header info */
+    header: UcpJwsHeader;
+    /** Key used for verification */
+    key?: UcpSigningKey;
+    /** Fetched profile (for evidence capture - avoids double-fetch) */
+    profile?: UcpProfile;
+    /** Raw profile JSON string (for deterministic hashing) */
+    profile_raw?: string;
+    /** All verification attempts */
+    attempts: VerificationAttempt[];
+    /** Error code (if invalid) */
+    error_code?: string;
+    /** Error message (if invalid) */
+    error_message?: string;
+}
+/**
+ * UCP order line item for receipt mapping.
+ */
+export interface UcpLineItem {
+    /** Line item ID */
+    id: string;
+    /** Item details */
+    item: {
+        id: string;
+        title: string;
+        price: MinorUnits;
+    };
+    /** Quantities */
+    quantity: {
+        total: number;
+        fulfilled: number;
+    };
+    /** Status */
+    status: 'processing' | 'partial' | 'fulfilled';
+}
+/**
+ * UCP order for receipt mapping.
+ */
+export interface UcpOrder {
+    /** Order ID */
+    id: string;
+    /** Checkout ID that created this order */
+    checkout_id?: string;
+    /** Order permalink */
+    permalink_url?: string;
+    /** Line items */
+    line_items: UcpLineItem[];
+    /** Order totals */
+    totals: Array<{
+        type: 'subtotal' | 'shipping' | 'tax' | 'total' | string;
+        amount: MinorUnits;
+    }>;
+    /** Fulfillment info */
+    fulfillment?: {
+        expectations: unknown[];
+        events: unknown[];
+    };
+    /** Adjustments (refunds, returns, etc.) */
+    adjustments?: unknown[];
+}
+/**
+ * Options for mapping UCP order to PEAC receipt claims.
+ */
+export interface MapUcpOrderOptions {
+    /** UCP order object */
+    order: UcpOrder;
+    /** Issuer URI (PEAC publisher) */
+    issuer: string;
+    /** Subject URI (buyer/agent) */
+    subject: string;
+    /** Currency code (ISO 4217) */
+    currency: string;
+    /** Optional receipt ID (generated if not provided) */
+    receipt_id?: string;
+    /** Optional issued_at (for deterministic fixtures) */
+    issued_at?: string;
+}
+/**
+ * PEAC receipt claims mapped from UCP order.
+ */
+export interface MappedReceiptClaims {
+    /** Receipt ID */
+    jti: string;
+    /** Issuer */
+    iss: string;
+    /** Subject */
+    sub: string;
+    /** Issued at (Unix timestamp) */
+    iat: number;
+    /** Payment evidence */
+    payment: {
+        rail: 'ucp';
+        currency: string;
+        amount: MinorUnits;
+        status: 'completed' | 'pending';
+        evidence: {
+            order_id: string;
+            checkout_id?: string;
+            line_items: number;
+            totals: Record<string, MinorUnits>;
+        };
+    };
+    /** UCP-specific extensions */
+    ext: {
+        'dev.ucp/order_id': string;
+        'dev.ucp/checkout_id'?: string;
+        'dev.ucp/order_status': string;
+        'dev.ucp/permalink'?: string;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAG,0BAAmC,CAAC;AAExE;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAEhE;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC;AAEhC;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,KAAK,CAAC;AAE7C;;;;;GAKG;AACH,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG,KAAK,GAAG,SAAS,CAAC;AAE/C;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,sCAAsC;IACtC,GAAG,EAAE,qBAAqB,CAAC;IAE3B,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IAEZ,+BAA+B;IAC/B,GAAG,CAAC,EAAE,OAAO,CAAC;IAEd,+CAA+C;IAC/C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,6BAA6B;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,mCAAmC;IACnC,gBAAgB,EAAE,MAAM,CAAC;IAEzB,8BAA8B;IAC9B,MAAM,EAAE,YAAY,CAAC;IAErB,yCAAyC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IAEzB,kCAAkC;IAClC,gBAAgB,EAAE,MAAM,CAAC;IAEzB,sCAAsC;IACtC,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,8BAA8B;IAC9B,GAAG,EAAE,IAAI,CAAC;IAEV,kCAAkC;IAClC,GAAG,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IAEjC,aAAa;IACb,GAAG,EAAE,MAAM,CAAC;IAEZ,+BAA+B;IAC/B,CAAC,EAAE,MAAM,CAAC;IAEV,+BAA+B;IAC/B,CAAC,EAAE,MAAM,CAAC;IAEV,gBAAgB;IAChB,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAE5B,cAAc;IACd,GAAG,CAAC,EAAE,KAAK,CAAC;CACb;AAED;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,sBAAsB;IACtB,OAAO,EAAE,MAAM,CAAC;IAEhB,kBAAkB;IAClB,WAAW,EAAE,MAAM,CAAC;IAEpB,4CAA4C;IAC5C,YAAY,EAAE,aAAa,EAAE,CAAC;IAE9B,6BAA6B;IAC7B,YAAY,CAAC,EAAE,aAAa,EAAE,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IAEb,yBAAyB;IACzB,OAAO,EAAE,MAAM,CAAC;IAEhB,wBAAwB;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,qBAAqB;IACrB,IAAI,EAAE,gBAAgB,CAAC;IAEvB,qCAAqC;IACrC,OAAO,EAAE,OAAO,CAAC;IAEjB,2BAA2B;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,8BAA8B;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,mDAAmD;IACnD,cAAc,EAAE,MAAM,CAAC;IAEvB,uEAAuE;IACvE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,sEAAsE;IACtE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,qCAAqC;IACrC,cAAc,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IAErB,oBAAoB;IACpB,GAAG,EAAE,MAAM,CAAC;IAEZ,uBAAuB;IACvB,GAAG,EAAE,qBAAqB,CAAC;IAE3B,gDAAgD;IAChD,GAAG,EAAE,OAAO,GAAG,IAAI,CAAC;IAEpB,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAEhB,qCAAqC;IACrC,QAAQ,EAAE,OAAO,CAAC;IAElB,wCAAwC;IACxC,sBAAsB,CAAC,EAAE,gBAAgB,CAAC;IAE1C,gDAAgD;IAChD,qBAAqB,EAAE,mBAAmB,EAAE,CAAC;CAC9C;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB;IAClB,GAAG,EAAE,MAAM,CAAC;IAEZ,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IAEnB,sDAAsD;IACtD,sBAAsB,EAAE,MAAM,CAAC;IAE/B,gDAAgD;IAChD,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IAEb,mCAAmC;IACnC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,uEAAuE;IACvE,4BAA4B,EAAE,OAAO,oBAAoB,CAAC;IAE1D,kDAAkD;IAClD,IAAI,EAAE,qBAAqB,CAAC;IAE5B,qBAAqB;IACrB,KAAK,EAAE,aAAa,CAAC;IAErB,+BAA+B;IAC/B,OAAO,EAAE;QACP,kBAAkB;QAClB,MAAM,EAAE,MAAM,CAAC;QAEf,mBAAmB;QACnB,IAAI,EAAE,MAAM,CAAC;QAEb,qEAAqE;QACrE,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IAEF,6DAA6D;IAC7D,OAAO,EAAE,eAAe,CAAC;IAEzB,yBAAyB;IACzB,SAAS,EAAE,iBAAiB,CAAC;IAE7B,kCAAkC;IAClC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAEzB,gCAAgC;IAChC,OAAO,EAAE,eAAe,CAAC;IAEzB,4CAA4C;IAC5C,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IAEnB,wCAAwC;IACxC,YAAY,EAAE,kBAAkB,GAAG,qBAAqB,GAAG,uBAAuB,CAAC;CACpF;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,qCAAqC;IACrC,gBAAgB,EAAE,MAAM,CAAC;IAEzB,6BAA6B;IAC7B,UAAU,EAAE,UAAU,CAAC;IAEvB,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IAEpB,kDAAkD;IAClD,OAAO,CAAC,EAAE,UAAU,CAAC;IAErB,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,yEAAyE;IACzE,uBAAuB,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,iCAAiC;IACjC,KAAK,EAAE,OAAO,CAAC;IAEf,mDAAmD;IACnD,SAAS,CAAC,EAAE,gBAAgB,CAAC;IAE7B,yBAAyB;IACzB,MAAM,EAAE,YAAY,CAAC;IAErB,gCAAgC;IAChC,GAAG,CAAC,EAAE,aAAa,CAAC;IAEpB,mEAAmE;IACnE,OAAO,CAAC,EAAE,UAAU,CAAC;IAErB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,gCAAgC;IAChC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAEhC,8BAA8B;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,iCAAiC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,mBAAmB;IACnB,EAAE,EAAE,MAAM,CAAC;IAEX,mBAAmB;IACnB,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,UAAU,CAAC;KACnB,CAAC;IAEF,iBAAiB;IACjB,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IAEF,aAAa;IACb,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,WAAW,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,eAAe;IACf,EAAE,EAAE,MAAM,CAAC;IAEX,0CAA0C;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,sBAAsB;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,iBAAiB;IACjB,UAAU,EAAE,WAAW,EAAE,CAAC;IAE1B,mBAAmB;IACnB,MAAM,EAAE,KAAK,CAAC;QACZ,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAAC;QACzD,MAAM,EAAE,UAAU,CAAC;KACpB,CAAC,CAAC;IAEH,uBAAuB;IACvB,WAAW,CAAC,EAAE;QACZ,YAAY,EAAE,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,OAAO,EAAE,CAAC;KACnB,CAAC;IAEF,2CAA2C;IAC3C,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;CACzB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,uBAAuB;IACvB,KAAK,EAAE,QAAQ,CAAC;IAEhB,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IAEf,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAEhB,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IAEjB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,iBAAiB;IACjB,GAAG,EAAE,MAAM,CAAC;IAEZ,aAAa;IACb,GAAG,EAAE,MAAM,CAAC;IAEZ,cAAc;IACd,GAAG,EAAE,MAAM,CAAC;IAEZ,iCAAiC;IACjC,GAAG,EAAE,MAAM,CAAC;IAEZ,uBAAuB;IACvB,OAAO,EAAE;QACP,IAAI,EAAE,KAAK,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,UAAU,CAAC;QACnB,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;QAChC,QAAQ,EAAE;YACR,QAAQ,EAAE,MAAM,CAAC;YACjB,WAAW,CAAC,EAAE,MAAM,CAAC;YACrB,UAAU,EAAE,MAAM,CAAC;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;SACpC,CAAC;KACH,CAAC;IAEF,8BAA8B;IAC9B,GAAG,EAAE;QACH,kBAAkB,EAAE,MAAM,CAAC;QAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAC;QAC/B,sBAAsB,EAAE,MAAM,CAAC;QAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH"}

package/dist/types.js

@@ -0,0 +1,12 @@
+/**
+ * @peac/mappings-ucp - Type definitions
+ *
+ * Google Universal Commerce Protocol (UCP) types and evidence schema.
+ * UCP webhooks use detached JWS (RFC 7797) with ES256/ES384/ES512.
+ */
+/**
+ * UCP Evidence schema version.
+ * Used in policy/policy.yaml for dispute bundles.
+ */
+export const UCP_EVIDENCE_VERSION = 'org.peacprotocol.ucp/0.1';
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAAmC,CAAC"}

package/dist/util.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @peac/mappings-ucp - Shared utilities
+ *
+ * Crypto and encoding helpers used by both verification and evidence generation.
+ * Extracted to prevent architectural coupling between modules.
+ */
+/**
+ * SHA-256 hash as hex string.
+ */
+export declare function sha256Hex(data: Uint8Array): string;
+/**
+ * SHA-256 hash as Uint8Array.
+ */
+export declare function sha256Bytes(data: Uint8Array): Uint8Array;
+/**
+ * Base64url encode without padding.
+ * Uses standard base64 + manual conversion for maximum portability.
+ * Works with Node.js 12+ (does not require 'base64url' encoding from Node 15.7.0+).
+ */
+export declare function base64urlEncode(data: Uint8Array): string;
+/**
+ * JCS canonicalize (RFC 8785) - synchronous.
+ * Produces deterministic JSON with sorted keys and no whitespace.
+ */
+export declare function jcsCanonicalizeSync(obj: unknown): string;
+//# sourceMappingURL=util.d.ts.map

package/dist/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../src/util.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH;;GAEG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAElD;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAExD;AA4BD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAwBxD;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CA8BxD"}