@peac/protocol 0.12.13 → 0.13.0

package/dist/discovery.d.ts

@@ -43,17 +43,32 @@ export declare function parsePolicyManifest(text: string, contentType?: string):
  */
 export declare function fetchPolicyManifest(baseUrl: string): Promise<PEACPolicyManifest>;
 /**
- * @deprecated Use parseIssuerConfig instead. Will be removed in v1.0.
+ * @deprecated Parses a legacy dual-purpose `peac.txt` manifest that carried
+ * both policy hints and key-discovery fields (`verify`, `jwks`). This shape
+ * is retired: `peac.txt` is a policy-document surface per
+ * `docs/specs/PEAC-TXT.md`, and the normative key-discovery chain is
+ * `iss` -> /.well-known/peac-issuer.json -> `jwks_uri` -> JWKS
+ * (see `docs/specs/PEAC-ISSUER.md`). Use `parseIssuerConfig` for issuer
+ * metadata, and `@peac/policy-kit.parsePolicyDocument` for `peac-policy/0.1`
+ * documents referenced from `peac.txt`. Removal target: next cleanup release.
  *
- * Parse a PEAC discovery manifest from YAML-like text.
- * This function is maintained for backward compatibility only.
+ * Parse a PEAC discovery manifest from YAML-like text. Retained only for
+ * backward compatibility with callers that have not yet migrated.
  */
 export declare function parseDiscovery(text: string): PEACDiscovery;
 /**
- * @deprecated Use fetchIssuerConfig instead. Will be removed in v1.0.
+ * @deprecated Fetches /.well-known/peac.txt and parses it as a legacy
+ * dual-purpose manifest. This shape is retired: `peac.txt` is a policy
+ * document (see `docs/specs/PEAC-TXT.md`) and key discovery flows through
+ * `iss` -> /.well-known/peac-issuer.json -> `jwks_uri` -> JWKS
+ * (see `docs/specs/PEAC-ISSUER.md`). Use `fetchIssuerConfig` for issuer
+ * metadata. To parse the `peac-policy/0.1` document referenced from
+ * `peac.txt`, fetch its bytes and call
+ * `@peac/policy-kit.parsePolicyDocument`. Removal target: next cleanup
+ * release.
  *
- * Fetch and parse PEAC discovery from an issuer URL.
- * This function is maintained for backward compatibility only.
+ * Fetch and parse PEAC discovery from an issuer URL. Retained only for
+ * backward compatibility with callers that have not yet migrated.
  */
 export declare function fetchDiscovery(issuerUrl: string): Promise<PEACDiscovery>;
 //# sourceMappingURL=discovery.d.ts.map

package/dist/discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EAOd,MAAM,cAAc,CAAC;AAMtB;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,CAoGzE;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsCpF;AAiBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAoD1F;AAkFD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA+CtF;AAMD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAkD1D;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA2B9E"}
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EAOd,MAAM,cAAc,CAAC;AAMtB;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,gBAAgB,CAoGzE;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsCpF;AAiBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,kBAAkB,CAoD1F;AAkFD;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA+CtF;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAkD1D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA2B9E"}

package/dist/document-binding.d.ts

@@ -0,0 +1,94 @@
+/**
+ * Document binding utilities (Layer 3)
+ *
+ * Generalized binding helpers for `peac-policy/0.1` policy documents,
+ * x402 PR #1986 `terms` representations, and any other referenced
+ * document. Three-state semantics (`verified` / `failed` / `unavailable`)
+ * are reused from `policy-binding`.
+ *
+ * Helper-naming rule (normative, see `docs/specs/DOCUMENT-BINDING.md`):
+ *   - `computeJsonDocumentDigestJcs` is JSON-only (RFC 8785 JCS + SHA-256).
+ *   - `computeTextDocumentDigestUtf8` is text-only (UTF-8 with `\n` line
+ *     endings + NFC, preserving all other bytes including trailing
+ *     whitespace).
+ *   - `computeDocumentDigest` is the umbrella dispatcher.
+ *
+ * The `Jcs` suffix is reserved for JSON-only helpers; text-only helpers
+ * name their scheme. This prevents the `aipref/resolver.ts` historical
+ * bug where a sort-keys `JSON.stringify` digest was labelled `JCS-SHA256`.
+ *
+ * The `policy_binding` field on the verifier report is the byte-stable
+ * legacy mirror of `bindings.policy`; both are populated identically.
+ *
+ * @see docs/specs/DOCUMENT-BINDING.md
+ * @see packages/protocol/src/policy-binding.ts
+ */
+import type { JsonValue } from '@peac/kernel';
+import type { PolicyBindingStatus } from './verifier-types.js';
+export type DocumentRepresentation = 'uri' | 'markdown' | 'plaintext' | 'json';
+/**
+ * Compute the RFC 8785 JCS canonicalization + SHA-256 digest of a JSON
+ * document. Returns the canonical PEAC self-describing hash format
+ * `'sha256:<64 lowercase hex>'`. Suitable for `peac-policy/0.1` policy
+ * docs and any other JSON-shaped document carried in or referenced from
+ * a record.
+ */
+export declare function computeJsonDocumentDigestJcs(value: JsonValue): Promise<string>;
+/**
+ * Compute the SHA-256 digest of a UTF-8 text document after the minimal
+ * canonical normalization documented in `docs/specs/DOCUMENT-BINDING.md`:
+ *
+ *   1. Normalize line endings to `\n` (strip `\r` before `\n`; replace a
+ *      lone `\r` with `\n`).
+ *   2. Normalize Unicode to NFC.
+ *   3. Preserve all other bytes exactly.
+ *
+ * Trailing whitespace is **not** stripped. Blank lines are **not**
+ * collapsed. Case is **not** normalized. The intent is a deterministic
+ * representation envelope identity, not a "pretty-print before hashing"
+ * scheme. Text representations like `markdown` and `plaintext` are
+ * frequently signed by publishers, and silent transformations would
+ * break those signatures.
+ *
+ * Returns the canonical PEAC self-describing hash format
+ * `'sha256:<64 lowercase hex>'`.
+ *
+ * @param bytes UTF-8 string to hash (single representation envelope).
+ * @param representation Tag recorded by the caller; not currently
+ *   altering the hash but reserved so future representation-specific
+ *   normalization rules can be added without renaming the helper.
+ */
+export declare function computeTextDocumentDigestUtf8(bytes: string, _representation: 'markdown' | 'plaintext'): Promise<string>;
+/**
+ * Umbrella dispatcher. Selects the correct scheme-specific helper from
+ * `input.representation`.
+ *
+ * For `representation: 'uri'`, the bytes the caller fetched from the URI
+ * MUST be supplied via `bytes`. Without bytes the dispatcher returns
+ * `'unavailable'`: the URI alone is not enough to bind, and PEAC does
+ * not perform network I/O from this layer (callers fetch under their own
+ * SSRF / redirect / timeout policy). When bytes are supplied for a URI,
+ * they are hashed via the text helper.
+ */
+export declare function computeDocumentDigest(input: {
+    representation: 'json';
+    value: JsonValue;
+} | {
+    representation: 'markdown' | 'plaintext';
+    bytes: string;
+} | {
+    representation: 'uri';
+    uri: string;
+    bytes?: string;
+}): Promise<string | 'unavailable'>;
+/**
+ * Three-state binding check. Same semantics as `checkPolicyBinding`:
+ *
+ *   - `'unavailable'` when either digest is missing.
+ *   - `'verified'` when both digests are present and match exactly.
+ *   - `'failed'` when both digests are present but do not match.
+ *
+ * The legacy `checkPolicyBinding` export delegates to this function.
+ */
+export declare function checkDocumentBinding(receiptDigest: string | undefined, localDigest: string | undefined): PolicyBindingStatus;
+//# sourceMappingURL=document-binding.d.ts.map

package/dist/document-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"document-binding.d.ts","sourceRoot":"","sources":["../src/document-binding.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAG/D,MAAM,MAAM,sBAAsB,GAAG,KAAK,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC;AAE/E;;;;;;GAMG;AACH,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAGpF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,MAAM,EACb,eAAe,EAAE,UAAU,GAAG,WAAW,GACxC,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EACD;IAAE,cAAc,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAC5C;IAAE,cAAc,EAAE,UAAU,GAAG,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC3D;IAAE,cAAc,EAAE,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACzD,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC,CAWjC;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,mBAAmB,CAKrB"}

package/dist/index.cjs

@@ -1,10 +1,10 @@
 'use strict';
 
 var uuidv7 = require('uuidv7');
-var crypto = require('@peac/crypto');
+var crypto$1 = require('@peac/crypto');
 var zod = require('zod');
 var schema = require('@peac/schema');
-var crypto$1 = require('crypto');
+var crypto$2 = require('crypto');
 var kernel = require('@peac/kernel');
 
 // src/issue.ts
@@ -20,7 +20,7 @@ function fireTelemetryHook(fn, input) {
   }
 }
 function hashReceipt(jws) {
-  const hash = crypto$1.createHash("sha256").update(jws).digest("hex");
+  const hash = crypto$2.createHash("sha256").update(jws).digest("hex");
   return `sha256:${hash.slice(0, 16)}`;
 }
 
@@ -163,7 +163,7 @@ async function issueWire01(options) {
   }
   const validatedSnapshot = schema.validateSubjectSnapshot(options.subject_snapshot);
   const startTime = performance.now();
-  const jws = await crypto.sign(claims, options.privateKey, options.kid);
+  const jws = await crypto$1.sign(claims, options.privateKey, options.kid);
   fireTelemetryHook(options.telemetry?.onReceiptIssued, {
     receiptHash: hashReceipt(jws),
     issuer: options.iss,
@@ -225,7 +225,7 @@ async function issueWire02(options) {
       }
     });
   }
-  const jws = await crypto.signWire02(claims, options.privateKey, options.kid);
+  const jws = await crypto$1.signWire02(claims, options.privateKey, options.kid);
   return { jws };
 }
 function parseIssuerConfig(json) {
@@ -991,8 +991,23 @@ async function fetchPointerSafe(pointerUrl, options) {
 }
 
 // src/jwks-resolver.ts
-var DEFAULT_CACHE_TTL_MS = 5 * 60 * 1e3;
-var DEFAULT_MAX_CACHE_ENTRIES = 1e3;
+var HARD_CACHE_TTL_MS_BUILTIN = 5 * 60 * 1e3;
+var HARD_MAX_CACHE_ENTRIES_BUILTIN = 1e3;
+function __parseEnvPositiveInt(name, fallback, env = typeof process !== "undefined" ? process.env : {}) {
+  const raw = env[name];
+  if (!raw) return fallback;
+  if (!/^[1-9][0-9]*$/.test(raw)) return fallback;
+  const parsed = parseInt(raw, 10);
+  return parsed > 0 ? parsed : fallback;
+}
+var DEFAULT_CACHE_TTL_MS = __parseEnvPositiveInt(
+  "PEAC_JWKS_CACHE_TTL_MS",
+  HARD_CACHE_TTL_MS_BUILTIN
+);
+var DEFAULT_MAX_CACHE_ENTRIES = __parseEnvPositiveInt(
+  "PEAC_JWKS_CACHE_MAX_ENTRIES",
+  HARD_MAX_CACHE_ENTRIES_BUILTIN
+);
 var jwksCache = /* @__PURE__ */ new Map();
 var KID_RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
 var MAX_KID_THUMBPRINT_ENTRIES = 1e4;
@@ -1267,7 +1282,7 @@ async function verifyReceipt(optionsOrJws) {
   const startTime = performance.now();
   let jwksFetchTime;
   try {
-    const { header, payload } = crypto.decode(receiptJws);
+    const { header, payload } = crypto$1.decode(receiptJws);
     const constraintResult = schema.validateKernelConstraints(payload);
     if (!constraintResult.valid) {
       const v = constraintResult.violations[0];
@@ -1343,7 +1358,7 @@ async function verifyReceipt(optionsOrJws) {
       };
     }
     const publicKey = jwkToPublicKey(jwk);
-    const result = await crypto.verify(receiptJws, publicKey);
+    const result = await crypto$1.verify(receiptJws, publicKey);
     if (!result.valid) {
       const durationMs = performance.now() - startTime;
       fireTelemetryHook(telemetry?.onReceiptVerified, {
@@ -1447,10 +1462,17 @@ function sanitizeParseIssues(issues) {
   }));
 }
 async function verifyLocal(jws, publicKey, options = {}) {
-  const { issuer, subjectUri, maxClockSkew = 300, strictness = "strict", policyDigest } = options;
+  const {
+    issuer,
+    subjectUri,
+    maxClockSkew = 300,
+    strictness = "strict",
+    policyDigest,
+    bindings: callerBindings
+  } = options;
   const now = options.now ?? Math.floor(Date.now() / 1e3);
   try {
-    const result = await crypto.verify(jws, publicKey);
+    const result = await crypto$1.verify(jws, publicKey);
     if (!result.valid) {
       return {
         valid: false,
@@ -1597,6 +1619,11 @@ async function verifyLocal(jws, publicKey, options = {}) {
           }
         };
       }
+      const bindings = {
+        policy: bindingStatus,
+        ...callerBindings?.terms !== void 0 && { terms: callerBindings.terms },
+        ...callerBindings?.documents !== void 0 && callerBindings.documents.length > 0 && { documents: callerBindings.documents }
+      };
       return {
         valid: true,
         variant: "wire-02",
@@ -1604,7 +1631,8 @@ async function verifyLocal(jws, publicKey, options = {}) {
         kid: result.header.kid,
         wireVersion: "0.2",
         warnings: schema.sortWarnings(accumulatedWarnings),
-        policy_binding: bindingStatus
+        policy_binding: bindingStatus,
+        bindings
       };
     }
     return {
@@ -1709,16 +1737,44 @@ function setVaryPurposeHeader(headers) {
     headers.set("Vary", schema.PEAC_PURPOSE_HEADER);
   }
 }
-async function computePolicyDigestJcs(policy) {
-  const hex = await crypto.jcsHash(policy);
+async function computeJsonDocumentDigestJcs(value) {
+  const hex = await crypto$1.jcsHash(value);
   return `${kernel.HASH.prefix}${hex}`;
 }
-function checkPolicyBinding(receiptDigest, localDigest) {
+async function computeTextDocumentDigestUtf8(bytes, _representation) {
+  const normalized = bytes.replace(/\r\n/g, "\n").replace(/\r/g, "\n").normalize("NFC");
+  const buf = new TextEncoder().encode(normalized);
+  const hashBuffer = await crypto.subtle.digest("SHA-256", buf);
+  const hashArray = Array.from(new Uint8Array(hashBuffer));
+  const hex = hashArray.map((b) => b.toString(16).padStart(2, "0")).join("");
+  return `${kernel.HASH.prefix}${hex}`;
+}
+async function computeDocumentDigest(input) {
+  switch (input.representation) {
+    case "json":
+      return computeJsonDocumentDigestJcs(input.value);
+    case "markdown":
+    case "plaintext":
+      return computeTextDocumentDigestUtf8(input.bytes, input.representation);
+    case "uri":
+      if (typeof input.bytes !== "string") return "unavailable";
+      return computeTextDocumentDigestUtf8(input.bytes);
+  }
+}
+function checkDocumentBinding(receiptDigest, localDigest) {
   if (receiptDigest === void 0 || localDigest === void 0) {
     return "unavailable";
   }
   return schema.verifyPolicyBinding(receiptDigest, localDigest);
 }
+
+// src/policy-binding.ts
+async function computePolicyDigestJcs(policy) {
+  return computeJsonDocumentDigestJcs(policy);
+}
+function checkPolicyBinding(receiptDigest, localDigest) {
+  return checkDocumentBinding(receiptDigest, localDigest);
+}
 var DEFAULT_VERIFIER_LIMITS = {
   max_receipt_bytes: kernel.VERIFIER_LIMITS.maxReceiptBytes,
   max_jwks_bytes: kernel.VERIFIER_LIMITS.maxJwksBytes,
@@ -1861,7 +1917,7 @@ var VerificationReportBuilder = class {
    * @param type - Input type
    */
   async setInputAsync(receiptBytes, type = "receipt_jws") {
-    const digestHex = await crypto.sha256Hex(receiptBytes);
+    const digestHex = await crypto$1.sha256Hex(receiptBytes);
     return this.setInputWithDigest(digestHex, type);
   }
   /**
@@ -2044,11 +2100,11 @@ function createReportBuilder(policy) {
 }
 async function computeReceiptDigest(receiptBytes) {
   const bytes = typeof receiptBytes === "string" ? new TextEncoder().encode(receiptBytes) : receiptBytes;
-  return crypto.sha256Hex(bytes);
+  return crypto$1.sha256Hex(bytes);
 }
 async function buildFailureReport(policy, receiptBytes, reason, failedCheckId, errorCode, detail, options) {
   const bytes = typeof receiptBytes === "string" ? new TextEncoder().encode(receiptBytes) : receiptBytes;
-  const digestHex = await crypto.sha256Hex(bytes);
+  const digestHex = await crypto$1.sha256Hex(bytes);
   const builder = createReportBuilder(policy).setInputWithDigest(digestHex).failure(reason, options?.issuer, options?.kid);
   const failedIndex = CHECK_IDS.indexOf(failedCheckId);
   for (let i = 0; i < CHECK_IDS.length; i++) {
@@ -2066,7 +2122,7 @@ async function buildFailureReport(policy, receiptBytes, reason, failedCheckId, e
 }
 async function buildSuccessReport(policy, receiptBytes, issuer, kid, checkDetails, options) {
   const bytes = typeof receiptBytes === "string" ? new TextEncoder().encode(receiptBytes) : receiptBytes;
-  const digestHex = await crypto.sha256Hex(bytes);
+  const digestHex = await crypto$1.sha256Hex(bytes);
   const builder = createReportBuilder(policy).setInputWithDigest(digestHex).success(issuer, kid);
   for (const checkId of CHECK_IDS) {
     if (checkId === "issuer.discovery" && policy.mode === "offline_only") {
@@ -2148,7 +2204,7 @@ async function verifyReceiptCore(options) {
   } = options;
   const receiptJws = typeof receipt === "string" ? receipt : new TextDecoder().decode(receipt);
   const receiptBytes = typeof receipt === "string" ? new TextEncoder().encode(receipt) : receipt;
-  const receiptDigestHex = await crypto.sha256Hex(receiptBytes);
+  const receiptDigestHex = await crypto$1.sha256Hex(receiptBytes);
   const builder = createReportBuilder(policy);
   builder.setInputWithDigest(receiptDigestHex);
   const nowSeconds = referenceTime ?? Math.floor(Date.now() / 1e3);
@@ -2158,7 +2214,7 @@ async function verifyReceiptCore(options) {
   let header;
   let payload;
   try {
-    const decoded = crypto.decode(receiptJws);
+    const decoded = crypto$1.decode(receiptJws);
     header = decoded.header;
     payload = decoded.payload;
     builder.pass("jws.parse");
@@ -2232,7 +2288,7 @@ async function verifyReceiptCore(options) {
   if (pinnedKey) {
     builder.skip("issuer.discovery", { reason: "pinned_key_available" });
     if (pinnedKey.jwk) {
-      const actualThumbprint = await crypto.computeJwkThumbprint(pinnedKey.jwk);
+      const actualThumbprint = await crypto$1.computeJwkThumbprint(pinnedKey.jwk);
       if (actualThumbprint !== pinnedKey.jwk_thumbprint_sha256) {
         builder.fail("key.resolve", "E_VERIFY_POLICY_VIOLATION", {
           error: "Pinned JWK thumbprint does not match declared thumbprint",
@@ -2245,7 +2301,7 @@ async function verifyReceiptCore(options) {
           report: includeMeta ? builder.addTimestamp().build() : builder.build()
         };
       }
-      publicKey = crypto.jwkToPublicKeyBytes(pinnedKey.jwk);
+      publicKey = crypto$1.jwkToPublicKeyBytes(pinnedKey.jwk);
       keySource = "pinned_keys";
       keyThumbprint = actualThumbprint;
       builder.pass("key.resolve", {
@@ -2256,7 +2312,7 @@ async function verifyReceiptCore(options) {
       });
     } else if (pinnedKey.public_key) {
       try {
-        publicKey = crypto.base64urlDecode(pinnedKey.public_key);
+        publicKey = crypto$1.base64urlDecode(pinnedKey.public_key);
         if (publicKey.length !== 32) {
           throw new Error(`Expected 32 bytes, got ${publicKey.length}`);
         }
@@ -2320,7 +2376,7 @@ async function verifyReceiptCore(options) {
           report: includeMeta ? builder.addTimestamp().build() : builder.build()
         };
       }
-      const actualThumbprint = await crypto.computeJwkThumbprint(jwk);
+      const actualThumbprint = await crypto$1.computeJwkThumbprint(jwk);
       if (actualThumbprint !== pinnedKey.jwk_thumbprint_sha256) {
         builder.fail("key.resolve", "E_VERIFY_POLICY_VIOLATION", {
           error: "JWK thumbprint does not match pinned key",
@@ -2333,7 +2389,7 @@ async function verifyReceiptCore(options) {
           report: includeMeta ? builder.addTimestamp().build() : builder.build()
         };
       }
-      publicKey = crypto.jwkToPublicKeyBytes(jwk);
+      publicKey = crypto$1.jwkToPublicKeyBytes(jwk);
       keySource = "pinned_keys";
       keyThumbprint = actualThumbprint;
       builder.pass("key.resolve", { source: keySource, kid, thumbprint_verified: true });
@@ -2381,13 +2437,13 @@ async function verifyReceiptCore(options) {
         report: includeMeta ? builder.addTimestamp().build() : builder.build()
       };
     }
-    publicKey = crypto.jwkToPublicKeyBytes(jwk);
+    publicKey = crypto$1.jwkToPublicKeyBytes(jwk);
     keySource = "jwks_discovery";
-    keyThumbprint = await crypto.computeJwkThumbprint(jwk);
+    keyThumbprint = await crypto$1.computeJwkThumbprint(jwk);
     builder.pass("key.resolve", { source: keySource, kid, thumbprint: keyThumbprint });
   }
   try {
-    const result = await crypto.verify(receiptJws, publicKey);
+    const result = await crypto$1.verify(receiptJws, publicKey);
     if (!result.valid) {
       builder.fail("jws.signature", "E_VERIFY_SIGNATURE_INVALID", {
         error: "Ed25519 signature verification failed"
@@ -2464,7 +2520,7 @@ async function verifyReceiptCore(options) {
     builder.addArtifact("issuer_key_thumbprint", keyThumbprint);
   }
   if (jwksRawBytes) {
-    const jwksDigestHex = await crypto.sha256Hex(jwksRawBytes);
+    const jwksDigestHex = await crypto$1.sha256Hex(jwksRawBytes);
     builder.addArtifact("issuer_jwks_digest", createDigest(jwksDigestHex));
   }
   const report = includeMeta ? builder.addTimestamp().build() : builder.build();
@@ -2884,7 +2940,7 @@ async function fetchPointerWithDigest(options) {
       message: jwsValidation.message
     };
   }
-  const actualDigest = await crypto.sha256Hex(receipt);
+  const actualDigest = await crypto$1.sha256Hex(receipt);
   if (actualDigest !== expectedDigest) {
     return {
       ok: false,
@@ -2996,35 +3052,35 @@ async function verifyAndFetchPointer(pointerHeader, fetchOptions) {
 
 Object.defineProperty(exports, "base64urlDecode", {
   enumerable: true,
-  get: function () { return crypto.base64urlDecode; }
+  get: function () { return crypto$1.base64urlDecode; }
 });
 Object.defineProperty(exports, "base64urlEncode", {
   enumerable: true,
-  get: function () { return crypto.base64urlEncode; }
+  get: function () { return crypto$1.base64urlEncode; }
 });
 Object.defineProperty(exports, "computeJwkThumbprint", {
   enumerable: true,
-  get: function () { return crypto.computeJwkThumbprint; }
+  get: function () { return crypto$1.computeJwkThumbprint; }
 });
 Object.defineProperty(exports, "generateKeypair", {
   enumerable: true,
-  get: function () { return crypto.generateKeypair; }
+  get: function () { return crypto$1.generateKeypair; }
 });
 Object.defineProperty(exports, "jwkToPublicKeyBytes", {
   enumerable: true,
-  get: function () { return crypto.jwkToPublicKeyBytes; }
+  get: function () { return crypto$1.jwkToPublicKeyBytes; }
 });
 Object.defineProperty(exports, "sha256Bytes", {
   enumerable: true,
-  get: function () { return crypto.sha256Bytes; }
+  get: function () { return crypto$1.sha256Bytes; }
 });
 Object.defineProperty(exports, "sha256Hex", {
   enumerable: true,
-  get: function () { return crypto.sha256Hex; }
+  get: function () { return crypto$1.sha256Hex; }
 });
 Object.defineProperty(exports, "verify", {
   enumerable: true,
-  get: function () { return crypto.verify; }
+  get: function () { return crypto$1.verify; }
 });
 exports.CHECK_IDS = CHECK_IDS;
 exports.DEFAULT_NETWORK_SECURITY = DEFAULT_NETWORK_SECURITY;
@@ -3034,11 +3090,15 @@ exports.NON_DETERMINISTIC_ARTIFACT_KEYS = NON_DETERMINISTIC_ARTIFACT_KEYS;
 exports.VerificationReportBuilder = VerificationReportBuilder;
 exports.buildFailureReport = buildFailureReport;
 exports.buildSuccessReport = buildSuccessReport;
+exports.checkDocumentBinding = checkDocumentBinding;
 exports.checkPolicyBinding = checkPolicyBinding;
 exports.clearJWKSCache = clearJWKSCache;
 exports.clearKidThumbprints = clearKidThumbprints;
+exports.computeDocumentDigest = computeDocumentDigest;
+exports.computeJsonDocumentDigestJcs = computeJsonDocumentDigestJcs;
 exports.computePolicyDigestJcs = computePolicyDigestJcs;
 exports.computeReceiptDigest = computeReceiptDigest;
+exports.computeTextDocumentDigestUtf8 = computeTextDocumentDigestUtf8;
 exports.createDefaultPolicy = createDefaultPolicy;
 exports.createDigest = createDigest;
 exports.createEmptyReport = createEmptyReport;