@proof-holdings/delegation-verifier 0.1.0

package/dist/delegate.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Canonicalization of typed delegate identifiers.
+ *
+ * ⚠️ SECOND LOCKSTEP COPY. The authority is the issuer-side implementation
+ * (`src/utils/delegateIdentifier.ts` in the proof.holdings backend), which produces the string
+ * that gets SIGNED into a token's `delegate` claim. This file must produce the same string for
+ * the same input, byte for byte, or a verifier reads a valid delegation as a mismatch. The
+ * equivalence is pinned by the drift suite `src/__tests__/drift/delegation-verifier.test.ts`
+ * in that repository, which runs one shared vector through both implementations.
+ *
+ * It is copied rather than imported for the reason the package exists at all: a gateway
+ * verifying someone's delegation must not have to install the issuer's backend.
+ */
+import type { DelegateInput, DelegateType } from './types.js';
+export declare const DELEGATE_TYPES: readonly DelegateType[];
+/** Cap on the CANONICAL delegate string. */
+export declare const DELEGATE_MAX_LENGTH = 512;
+export declare const DELEGATION_SCOPE_MAX_ENTRIES = 32;
+export declare const DELEGATION_SCOPE_TOKEN_MAX_LENGTH = 64;
+export declare class DelegateIdentifierError extends Error {
+    constructor(message: string);
+}
+/**
+ * Validate and canonicalize a typed delegate. Throws `DelegateIdentifierError` on rejection —
+ * the caller turns that into an `invalid_options` failure, because an artifact identity that
+ * cannot be canonicalized is a bug in the CALL, not evidence about the token.
+ */
+export declare function canonicalizeDelegate(input: DelegateInput): string;
+/**
+ * Validate and canonicalize a scope list: every entry a lowercase kebab-case token,
+ * deduplicated, sorted. Throws `DelegateIdentifierError` on any rejection.
+ */
+export declare function canonicalizeScopes(scopes: string[]): string[];
+//# sourceMappingURL=delegate.d.ts.map

package/dist/delegate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate.d.ts","sourceRoot":"","sources":["../src/delegate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9D,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAA6B,CAAC;AAEhF,4CAA4C;AAC5C,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAEvC,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,iCAAiC,KAAK,CAAC;AAQpD,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAIjE;AAqGD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAyB7D"}

package/dist/delegate.js

@@ -0,0 +1,156 @@
+/**
+ * Canonicalization of typed delegate identifiers.
+ *
+ * ⚠️ SECOND LOCKSTEP COPY. The authority is the issuer-side implementation
+ * (`src/utils/delegateIdentifier.ts` in the proof.holdings backend), which produces the string
+ * that gets SIGNED into a token's `delegate` claim. This file must produce the same string for
+ * the same input, byte for byte, or a verifier reads a valid delegation as a mismatch. The
+ * equivalence is pinned by the drift suite `src/__tests__/drift/delegation-verifier.test.ts`
+ * in that repository, which runs one shared vector through both implementations.
+ *
+ * It is copied rather than imported for the reason the package exists at all: a gateway
+ * verifying someone's delegation must not have to install the issuer's backend.
+ */
+export const DELEGATE_TYPES = ['url', 'purl'];
+/** Cap on the CANONICAL delegate string. */
+export const DELEGATE_MAX_LENGTH = 512;
+export const DELEGATION_SCOPE_MAX_ENTRIES = 32;
+export const DELEGATION_SCOPE_TOKEN_MAX_LENGTH = 64;
+/** Lowercase kebab-case: `send-email`, `read-profile-v2`. */
+const SCOPE_TOKEN_RE = /^[a-z][a-z0-9]*(-[a-z0-9]+)*$/;
+/** `pkg:type/[namespace/]name` — structure only; per-type case rules applied after. */
+const PURL_RE = /^pkg:([a-z0-9.+-]+)\/(.+)$/i;
+export class DelegateIdentifierError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'DelegateIdentifierError';
+    }
+}
+/**
+ * Validate and canonicalize a typed delegate. Throws `DelegateIdentifierError` on rejection —
+ * the caller turns that into an `invalid_options` failure, because an artifact identity that
+ * cannot be canonicalized is a bug in the CALL, not evidence about the token.
+ */
+export function canonicalizeDelegate(input) {
+    if (input.type === 'purl')
+        return canonicalizePurl(input.value);
+    if (input.type === 'url')
+        return canonicalizeUrl(input.value);
+    throw new DelegateIdentifierError(`unknown delegate type: ${String(input.type)}`);
+}
+function canonicalizePurl(value) {
+    const raw = value.trim();
+    if (!raw)
+        throw new DelegateIdentifierError('delegate must not be empty');
+    if (/\s/.test(raw))
+        throw new DelegateIdentifierError('delegate must not contain whitespace');
+    if (raw.includes('?')) {
+        throw new DelegateIdentifierError('purl qualifiers are not allowed in a delegate');
+    }
+    if (raw.includes('#')) {
+        throw new DelegateIdentifierError('purl subpath is not allowed in a delegate');
+    }
+    const match = raw.match(PURL_RE);
+    if (!match) {
+        throw new DelegateIdentifierError('delegate must be a purl of the form pkg:type/name');
+    }
+    const type = match[1].toLowerCase();
+    let rest = match[2];
+    // `@` in an npm scope (`pkg:npm/@acme/tool`) is legitimate; a trailing `@version` is not.
+    if (findVersionSeparator(rest) !== -1) {
+        throw new DelegateIdentifierError('purl version is not allowed in a delegate — delegate the artifact, not a version');
+    }
+    const segments = rest.split('/');
+    if (segments.some((segment) => segment.length === 0)) {
+        throw new DelegateIdentifierError('purl namespace and name must not be empty');
+    }
+    // Per-type case rules (purl-spec: type is case-insensitive and canonically lowercase; name
+    // rules are per-type). npm and pypi are lowercase-only registries; pypi additionally treats
+    // `_` and `-` as equivalent, canonically `-` (PEP 503).
+    if (type === 'npm') {
+        rest = segments.map((segment) => segment.toLowerCase()).join('/');
+    }
+    else if (type === 'pypi') {
+        rest = segments.map((segment) => segment.toLowerCase().replace(/_/g, '-')).join('/');
+    }
+    else {
+        rest = segments.join('/');
+    }
+    return enforceLength(`pkg:${type}/${rest}`);
+}
+/**
+ * Index of an `@version` separator, or -1. A leading `@` on a path segment is a scope/user
+ * marker (`@acme` in `pkg:npm/@acme/tool`), not a version.
+ */
+function findVersionSeparator(rest) {
+    for (let i = 0; i < rest.length; i++) {
+        if (rest[i] !== '@')
+            continue;
+        if (i === 0 || rest[i - 1] === '/')
+            continue; // scope marker
+        return i;
+    }
+    return -1;
+}
+function canonicalizeUrl(value) {
+    const raw = value.trim();
+    if (!raw)
+        throw new DelegateIdentifierError('delegate must not be empty');
+    let parsed;
+    try {
+        parsed = new URL(raw);
+    }
+    catch {
+        throw new DelegateIdentifierError('delegate must be a valid absolute URL');
+    }
+    if (parsed.protocol !== 'https:') {
+        throw new DelegateIdentifierError('delegate URL must use https');
+    }
+    if (parsed.username || parsed.password) {
+        throw new DelegateIdentifierError('delegate URL must not carry credentials');
+    }
+    if (parsed.search) {
+        throw new DelegateIdentifierError('delegate URL must not carry a query string');
+    }
+    if (raw.includes('#')) {
+        throw new DelegateIdentifierError('delegate URL must not carry a fragment');
+    }
+    // URL() already lowercases the host and strips an explicit default port; pathname keeps its
+    // case. Trailing slash is canonicalized away except at the root, where it is always '/'.
+    let pathname = parsed.pathname;
+    if (pathname.length > 1 && pathname.endsWith('/')) {
+        pathname = pathname.replace(/\/+$/, '');
+    }
+    return enforceLength(`https://${parsed.host}${pathname}`);
+}
+function enforceLength(canonical) {
+    if (canonical.length > DELEGATE_MAX_LENGTH) {
+        throw new DelegateIdentifierError(`delegate is too long (max ${DELEGATE_MAX_LENGTH} characters)`);
+    }
+    return canonical;
+}
+/**
+ * Validate and canonicalize a scope list: every entry a lowercase kebab-case token,
+ * deduplicated, sorted. Throws `DelegateIdentifierError` on any rejection.
+ */
+export function canonicalizeScopes(scopes) {
+    if (!Array.isArray(scopes) || scopes.length === 0) {
+        throw new DelegateIdentifierError('scope must contain at least one entry');
+    }
+    if (scopes.length > DELEGATION_SCOPE_MAX_ENTRIES) {
+        throw new DelegateIdentifierError(`too many scope entries (max ${DELEGATION_SCOPE_MAX_ENTRIES})`);
+    }
+    for (const token of scopes) {
+        if (typeof token !== 'string' || token.length === 0) {
+            throw new DelegateIdentifierError('scope entries must be non-empty strings');
+        }
+        if (token.length > DELEGATION_SCOPE_TOKEN_MAX_LENGTH) {
+            throw new DelegateIdentifierError(`scope entry is too long (max ${DELEGATION_SCOPE_TOKEN_MAX_LENGTH} characters)`);
+        }
+        if (!SCOPE_TOKEN_RE.test(token)) {
+            throw new DelegateIdentifierError(`invalid scope entry "${token}" — lowercase kebab-case tokens only (e.g. send-email)`);
+        }
+    }
+    return [...new Set(scopes)].sort();
+}
+//# sourceMappingURL=delegate.js.map

package/dist/delegate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate.js","sourceRoot":"","sources":["../src/delegate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,MAAM,CAAC,MAAM,cAAc,GAA4B,CAAC,KAAK,EAAE,MAAM,CAAU,CAAC;AAEhF,4CAA4C;AAC5C,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC;AAC/C,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,CAAC;AAEpD,6DAA6D;AAC7D,MAAM,cAAc,GAAG,+BAA+B,CAAC;AAEvD,uFAAuF;AACvF,MAAM,OAAO,GAAG,6BAA6B,CAAC;AAE9C,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAoB;IACvD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAChE,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,IAAI,uBAAuB,CAAC,0BAA0B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;IAC1E,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,uBAAuB,CAAC,sCAAsC,CAAC,CAAC;IAC9F,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAAC,+CAA+C,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAAC,2CAA2C,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,uBAAuB,CAAC,mDAAmD,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAEpB,0FAA0F;IAC1F,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,uBAAuB,CAC/B,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,uBAAuB,CAAC,2CAA2C,CAAC,CAAC;IACjF,CAAC;IAED,2FAA2F;IAC3F,4FAA4F;IAC5F,wDAAwD;IACxD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,CAAC;SAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC3B,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,aAAa,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,SAAS;QAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;YAAE,SAAS,CAAC,eAAe;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;IAE1E,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,uBAAuB,CAAC,yCAAyC,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,uBAAuB,CAAC,4CAA4C,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAAC,wCAAwC,CAAC,CAAC;IAC9E,CAAC;IAED,4FAA4F;IAC5F,yFAAyF;IACzF,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC/B,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,aAAa,CAAC,WAAW,MAAM,CAAC,IAAI,GAAG,QAAQ,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,IAAI,SAAS,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAC3C,MAAM,IAAI,uBAAuB,CAAC,6BAA6B,mBAAmB,cAAc,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAgB;IACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,4BAA4B,EAAE,CAAC;QACjD,MAAM,IAAI,uBAAuB,CAAC,+BAA+B,4BAA4B,GAAG,CAAC,CAAC;IACpG,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,uBAAuB,CAAC,yCAAyC,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,iCAAiC,EAAE,CAAC;YACrD,MAAM,IAAI,uBAAuB,CAC/B,gCAAgC,iCAAiC,cAAc,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,uBAAuB,CAC/B,wBAAwB,KAAK,wDAAwD,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @proof-holdings/delegation-verifier — issuer-agnostic verification of Proof of Delegation.
+ *
+ * A delegation says: the domain in `principal` authorized the artifact in `delegate` for these
+ * capability scopes, and the issuer checked that domain's control at issuance. It says nothing
+ * about whether the artifact is safe, audited, or any good.
+ *
+ * ```ts
+ * const result = await verifyPublishedDelegation(serverCard, {
+ *   trustedIssuers: [{
+ *     issuer: 'proof.holdings',
+ *     jwksUri: 'https://api.proof.holdings/.well-known/jwks.json',
+ *     statusEndpoint: 'https://api.proof.holdings/api/v1/proofs/validate',
+ *   }],
+ *   delegate: { type: 'purl', value: 'pkg:npm/postmark-mcp' }, // what YOU are installing
+ *   expectedPrincipal: 'postmarkapp.com',
+ * });
+ * ```
+ */
+export { verifyDelegation } from './verify.js';
+export { verifyPublishedDelegation, extractDelegationPublications, DELEGATION_META_KEY, DELEGATION_EXTENSION_URI, REGISTRY_PUBLISHER_PROVIDED_KEY, } from './publication.js';
+export type { FoundPublication } from './publication.js';
+/**
+ * The fourth carrier: a `_mcp.<domain>` TXT record naming the card that holds the publication.
+ * Only the PARSE half is here — resolving it means a DNS query and a card fetch, and this package
+ * is dependency-free on purpose. A consumer does the lookup with whatever resolver it already has
+ * and hands the TXT values in.
+ */
+export { parseDelegationPointer, pointerRecordName, POINTER_VERSION, POINTER_RECORD_PREFIX, } from './publication.js';
+export type { PointerParseResult, PointerRejection } from './publication.js';
+export { canonicalizeDelegate, canonicalizeScopes, DelegateIdentifierError, DELEGATE_TYPES, DELEGATE_MAX_LENGTH, } from './delegate.js';
+export { resetJwksCache, SUPPORTED_ALGORITHMS } from './jwks.js';
+export type { SupportedAlgorithm } from './jwks.js';
+export { readStatusSlot } from './status.js';
+export { classifyFailureReason } from './types.js';
+export type { DelegateInput, DelegateType, FailureOutcome, FailureReason, FetchLike, TrustedIssuer, VerificationFailure, VerificationResult, VerificationSuccess, VerifiedDelegation, VerifyOptions, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACzD;;;;;GAKG;AACH,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAC7E,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjE,YAAY,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AACnD,YAAY,EACV,aAAa,EACb,YAAY,EACZ,cAAc,EACd,aAAa,EACb,SAAS,EACT,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,GACd,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,33 @@
+/**
+ * @proof-holdings/delegation-verifier — issuer-agnostic verification of Proof of Delegation.
+ *
+ * A delegation says: the domain in `principal` authorized the artifact in `delegate` for these
+ * capability scopes, and the issuer checked that domain's control at issuance. It says nothing
+ * about whether the artifact is safe, audited, or any good.
+ *
+ * ```ts
+ * const result = await verifyPublishedDelegation(serverCard, {
+ *   trustedIssuers: [{
+ *     issuer: 'proof.holdings',
+ *     jwksUri: 'https://api.proof.holdings/.well-known/jwks.json',
+ *     statusEndpoint: 'https://api.proof.holdings/api/v1/proofs/validate',
+ *   }],
+ *   delegate: { type: 'purl', value: 'pkg:npm/postmark-mcp' }, // what YOU are installing
+ *   expectedPrincipal: 'postmarkapp.com',
+ * });
+ * ```
+ */
+export { verifyDelegation } from './verify.js';
+export { verifyPublishedDelegation, extractDelegationPublications, DELEGATION_META_KEY, DELEGATION_EXTENSION_URI, REGISTRY_PUBLISHER_PROVIDED_KEY, } from './publication.js';
+/**
+ * The fourth carrier: a `_mcp.<domain>` TXT record naming the card that holds the publication.
+ * Only the PARSE half is here — resolving it means a DNS query and a card fetch, and this package
+ * is dependency-free on purpose. A consumer does the lookup with whatever resolver it already has
+ * and hands the TXT values in.
+ */
+export { parseDelegationPointer, pointerRecordName, POINTER_VERSION, POINTER_RECORD_PREFIX, } from './publication.js';
+export { canonicalizeDelegate, canonicalizeScopes, DelegateIdentifierError, DELEGATE_TYPES, DELEGATE_MAX_LENGTH, } from './delegate.js';
+export { resetJwksCache, SUPPORTED_ALGORITHMS } from './jwks.js';
+export { readStatusSlot } from './status.js';
+export { classifyFailureReason } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EACL,yBAAyB,EACzB,6BAA6B,EAC7B,mBAAmB,EACnB,wBAAwB,EACxB,+BAA+B,GAChC,MAAM,kBAAkB,CAAC;AAE1B;;;;;GAKG;AACH,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACd,mBAAmB,GACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}

package/dist/jwks.d.ts

@@ -0,0 +1,47 @@
+/**
+ * JWKS retrieval and key cache.
+ *
+ * Three behaviours here are load-bearing rather than tidy, all learned from the hand-rolled Go
+ * verifier that shipped before this package:
+ *
+ *   - The algorithm is chosen from THIS list, never from the token's own header. A token that
+ *     asks for `none` or for an HMAC is refused before any key is looked up.
+ *   - An unknown `kid` is indistinguishable from a rotated key, so a miss triggers at most one
+ *     refetch per cooldown window. Without it every junk-kid token costs one outbound request
+ *     and a busy verifier trips the issuer's rate limit — failing its GOOD tokens too.
+ *   - Concurrent misses share ONE in-flight fetch per key set, with the cache re-checked after
+ *     it resolves. Serialising is what makes the cooldown hold under concurrency.
+ */
+import type { FetchLike } from './types.js';
+export declare const SUPPORTED_ALGORITHMS: readonly ["RS256", "ES256"];
+export type SupportedAlgorithm = (typeof SUPPORTED_ALGORITHMS)[number];
+/** How long a `kid` miss suppresses further refetches of the same key set. */
+export declare const KEY_MISS_COOLDOWN_MS = 30000;
+/** How long a successfully fetched key set is reused without refetching. */
+export declare const KEY_SET_TTL_MS: number;
+/**
+ * A key set is kilobytes. Anything larger is not a JWKS, and the request is driven by input the
+ * verifier does not control, so it is capped rather than streamed to completion.
+ */
+export declare const MAX_REMOTE_BODY_BYTES: number;
+/** Test seam — drops every cached key set. */
+export declare function resetJwksCache(): void;
+export declare class JwksUnavailableError extends Error {
+    constructor(message: string);
+}
+export declare function isSupportedAlgorithm(alg: unknown): alg is SupportedAlgorithm;
+/**
+ * Candidate verification keys for `kid`, fetching the key set at most once per cooldown.
+ * Returns an empty array when the key is genuinely unknown; throws `JwksUnavailableError`
+ * when the key set could not be read at all ("I could not check" is not "the token is bad").
+ */
+export declare function getVerificationKeys(params: {
+    jwksUri: string;
+    kid?: string;
+    alg: SupportedAlgorithm;
+    fetch: FetchLike;
+    timeoutMs: number;
+}): Promise<CryptoKey[]>;
+/** Verify a JWS signature against one candidate key. */
+export declare function verifySignature(key: CryptoKey, alg: SupportedAlgorithm, signingInput: string, signature: Uint8Array): Promise<boolean>;
+//# sourceMappingURL=jwks.d.ts.map

package/dist/jwks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks.d.ts","sourceRoot":"","sources":["../src/jwks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,eAAO,MAAM,oBAAoB,6BAA8B,CAAC;AAChE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvE,8EAA8E;AAC9E,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAC3C,4EAA4E;AAC5E,eAAO,MAAM,cAAc,QAAc,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,QAAa,CAAC;AAchD,8CAA8C;AAC9C,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAED,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAkBD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,kBAAkB,CAE5E;AA8ED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,MAAM,EAAE;IAChD,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,kBAAkB,CAAC;IACxB,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAmDvB;AAED,wDAAwD;AACxD,wBAAsB,eAAe,CACnC,GAAG,EAAE,SAAS,EACd,GAAG,EAAE,kBAAkB,EACvB,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,UAAU,GACpB,OAAO,CAAC,OAAO,CAAC,CAYlB"}

package/dist/jwks.js

@@ -0,0 +1,185 @@
+/**
+ * JWKS retrieval and key cache.
+ *
+ * Three behaviours here are load-bearing rather than tidy, all learned from the hand-rolled Go
+ * verifier that shipped before this package:
+ *
+ *   - The algorithm is chosen from THIS list, never from the token's own header. A token that
+ *     asks for `none` or for an HMAC is refused before any key is looked up.
+ *   - An unknown `kid` is indistinguishable from a rotated key, so a miss triggers at most one
+ *     refetch per cooldown window. Without it every junk-kid token costs one outbound request
+ *     and a busy verifier trips the issuer's rate limit — failing its GOOD tokens too.
+ *   - Concurrent misses share ONE in-flight fetch per key set, with the cache re-checked after
+ *     it resolves. Serialising is what makes the cooldown hold under concurrency.
+ */
+import { isRecord } from './jwt.js';
+export const SUPPORTED_ALGORITHMS = ['RS256', 'ES256'];
+/** How long a `kid` miss suppresses further refetches of the same key set. */
+export const KEY_MISS_COOLDOWN_MS = 30_000;
+/** How long a successfully fetched key set is reused without refetching. */
+export const KEY_SET_TTL_MS = 10 * 60_000;
+/**
+ * A key set is kilobytes. Anything larger is not a JWKS, and the request is driven by input the
+ * verifier does not control, so it is capped rather than streamed to completion.
+ */
+export const MAX_REMOTE_BODY_BYTES = 512 * 1024;
+const cache = new Map();
+/** Test seam — drops every cached key set. */
+export function resetJwksCache() {
+    cache.clear();
+}
+export class JwksUnavailableError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'JwksUnavailableError';
+    }
+}
+function importParams(alg) {
+    if (alg === 'ES256') {
+        return {
+            algorithm: { name: 'ECDSA', namedCurve: 'P-256' },
+            verify: { name: 'ECDSA', hash: 'SHA-256' },
+        };
+    }
+    return {
+        algorithm: { name: 'RSASSA-PKCS1-v1_5', hash: 'SHA-256' },
+        verify: { name: 'RSASSA-PKCS1-v1_5' },
+    };
+}
+export function isSupportedAlgorithm(alg) {
+    return typeof alg === 'string' && SUPPORTED_ALGORITHMS.includes(alg);
+}
+async function importJwk(jwk, alg) {
+    try {
+        const { algorithm } = importParams(alg);
+        return await crypto.subtle.importKey('jwk', jwk, algorithm, false, ['verify']);
+    }
+    catch {
+        return null;
+    }
+}
+async function fetchKeySet(entry, jwksUri, alg, fetchImpl, timeoutMs) {
+    const response = await fetchImpl(jwksUri, {
+        signal: AbortSignal.timeout(timeoutMs),
+        headers: { accept: 'application/json' },
+        // A redirect would let any open redirect on the issuer's origin move this fetch off it.
+        redirect: 'error',
+    });
+    if (!response.ok) {
+        throw new JwksUnavailableError(`JWKS fetch failed with HTTP ${response.status}`);
+    }
+    const declaredLength = Number(response.headers.get('content-length'));
+    if (Number.isFinite(declaredLength) && declaredLength > MAX_REMOTE_BODY_BYTES) {
+        throw new JwksUnavailableError('JWKS response is too large');
+    }
+    const raw = await response.text();
+    if (raw.length > MAX_REMOTE_BODY_BYTES) {
+        throw new JwksUnavailableError('JWKS response is too large');
+    }
+    let body;
+    try {
+        body = JSON.parse(raw);
+    }
+    catch {
+        throw new JwksUnavailableError('JWKS response is not JSON');
+    }
+    if (!isRecord(body) || !Array.isArray(body.keys)) {
+        throw new JwksUnavailableError('JWKS response has no `keys` array');
+    }
+    const keys = new Map();
+    const anonymousKeys = [];
+    for (const candidate of body.keys) {
+        if (!isRecord(candidate))
+            continue;
+        // A key set may legitimately mix algorithms; only the ones usable for THIS verification
+        // are imported, and an unusable entry is skipped rather than failing the whole set.
+        if (typeof candidate.alg === 'string' && candidate.alg !== alg)
+            continue;
+        const key = await importJwk(candidate, alg);
+        if (!key)
+            continue;
+        if (typeof candidate.kid === 'string' && candidate.kid.length > 0) {
+            keys.set(candidate.kid, key);
+        }
+        else {
+            anonymousKeys.push(key);
+        }
+    }
+    entry.keys = keys;
+    entry.anonymousKeys = anonymousKeys;
+    entry.fetchedAt = Date.now();
+}
+function lookup(entry, kid) {
+    if (kid) {
+        const key = entry.keys.get(kid);
+        return key ? [key] : [];
+    }
+    // No `kid` in the header: every key in the set is a candidate.
+    return [...entry.anonymousKeys, ...entry.keys.values()];
+}
+/**
+ * Candidate verification keys for `kid`, fetching the key set at most once per cooldown.
+ * Returns an empty array when the key is genuinely unknown; throws `JwksUnavailableError`
+ * when the key set could not be read at all ("I could not check" is not "the token is bad").
+ */
+export async function getVerificationKeys(params) {
+    const cacheKey = `${params.jwksUri}|${params.alg}`;
+    let entry = cache.get(cacheKey);
+    if (!entry) {
+        entry = {
+            keys: new Map(),
+            anonymousKeys: [],
+            fetchedAt: 0,
+            lastMissAt: 0,
+            inFlight: null,
+        };
+        cache.set(cacheKey, entry);
+    }
+    const fresh = entry.fetchedAt > 0 && Date.now() - entry.fetchedAt < KEY_SET_TTL_MS;
+    const hit = lookup(entry, params.kid);
+    if (fresh && hit.length > 0)
+        return hit;
+    if (fresh && Date.now() - entry.lastMissAt < KEY_MISS_COOLDOWN_MS) {
+        return []; // Cooldown: a miss we already paid a request for.
+    }
+    const current = entry;
+    if (!current.inFlight) {
+        const running = fetchKeySet(current, params.jwksUri, params.alg, params.fetch, params.timeoutMs);
+        // The shared promise RESOLVES to the outcome rather than recording it on the entry: a
+        // waiter reading shared state after its await could be handed the state of the NEXT
+        // fetch. Carried, not stored — a waiter that only saw an empty key set would report
+        // `unknown_key` ("this token names a key that does not exist") for what is actually
+        // "I could not reach the issuer": a false forgery signal during an outage.
+        current.inFlight = running.then(() => null, (error) => error instanceof JwksUnavailableError
+            ? error
+            : new JwksUnavailableError(error instanceof Error ? error.message : 'JWKS fetch failed'));
+        const settled = current.inFlight;
+        settled.finally(() => {
+            if (current.inFlight === settled)
+                current.inFlight = null;
+        });
+        const failure = await settled;
+        if (failure)
+            throw failure;
+    }
+    else {
+        const failure = await current.inFlight;
+        if (failure)
+            throw failure;
+    }
+    const after = lookup(current, params.kid);
+    if (after.length === 0)
+        current.lastMissAt = Date.now();
+    return after;
+}
+/** Verify a JWS signature against one candidate key. */
+export async function verifySignature(key, alg, signingInput, signature) {
+    const { verify } = importParams(alg);
+    try {
+        return await crypto.subtle.verify(verify, key, signature, new TextEncoder().encode(signingInput));
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=jwks.js.map

package/dist/jwks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwks.js","sourceRoot":"","sources":["../src/jwks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGpC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,OAAO,CAAU,CAAC;AAGhE,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,GAAG,IAAI,CAAC;AAYhD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;AAE7C,8CAA8C;AAC9C,MAAM,UAAU,cAAc;IAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,GAAuB;IAI3C,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;YACjD,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAiB;SAC1D,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,SAAS,EAAE;QACzD,MAAM,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAK,oBAA0C,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC9F,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAA4B,EAAE,GAAuB;IAC5E,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACxC,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,KAAkB,EAClB,OAAe,EACf,GAAuB,EACvB,SAAoB,EACpB,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE;QACxC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;QACvC,wFAAwF;QACxF,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,oBAAoB,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACtE,IAAI,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,qBAAqB,EAAE,CAAC;QAC9E,MAAM,IAAI,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,GAAG,CAAC,MAAM,GAAG,qBAAqB,EAAE,CAAC;QACvC,MAAM,IAAI,oBAAoB,CAAC,4BAA4B,CAAC,CAAC;IAC/D,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,oBAAoB,CAAC,mCAAmC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,MAAM,aAAa,GAAgB,EAAE,CAAC;IACtC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QACnC,wFAAwF;QACxF,oFAAoF;QACpF,IAAI,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,KAAK,GAAG;YAAE,SAAS;QACzE,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IAClB,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC;IACpC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,MAAM,CAAC,KAAkB,EAAE,GAAuB;IACzD,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1B,CAAC;IACD,+DAA+D;IAC/D,OAAO,CAAC,GAAG,KAAK,CAAC,aAAa,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAMzC;IACC,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;IACnD,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG;YACN,IAAI,EAAE,IAAI,GAAG,EAAE;YACf,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,CAAC;YACZ,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,IAAI;SACf,CAAC;QACF,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,GAAG,cAAc,CAAC;IACnF,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,KAAK,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAExC,IAAI,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,oBAAoB,EAAE,CAAC;QAClE,OAAO,EAAE,CAAC,CAAC,kDAAkD;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC;IACtB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACjG,sFAAsF;QACtF,oFAAoF;QACpF,oFAAoF;QACpF,oFAAoF;QACpF,2EAA2E;QAC3E,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAC7B,GAAG,EAAE,CAAC,IAAI,EACV,CAAC,KAAc,EAAE,EAAE,CACjB,KAAK,YAAY,oBAAoB;YACnC,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,oBAAoB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAC7F,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YACnB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC5D,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;QAC9B,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;QACvC,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAc,EACd,GAAuB,EACvB,YAAoB,EACpB,SAAqB;IAErB,MAAM,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,MAAM,EACN,GAAG,EACH,SAAoC,EACpC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAA4B,CAClE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/jwt.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Minimal JWT surface: base64url decoding and an UNVERIFIED structural parse.
+ *
+ * Deliberately dependency-free and deliberately small — everything here runs BEFORE any
+ * signature has been checked, so nothing it produces may be treated as a fact. The one thing
+ * the caller may read from an unverified token is `iss`, and only to select which trusted
+ * issuer's key set to check the signature against.
+ */
+export interface ParsedJwt {
+    header: Record<string, unknown>;
+    payload: Record<string, unknown>;
+    /** `<header>.<payload>` — the bytes the signature is over. */
+    signingInput: string;
+    signature: Uint8Array;
+}
+export declare function base64UrlToBytes(value: string): Uint8Array;
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/** Structural parse. Null on anything that is not a three-part JWT with JSON object segments. */
+export declare function parseJwt(token: string): ParsedJwt | null;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC;CACvB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAO1D;AAYD,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,iGAAiG;AACjG,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CA4BxD"}

package/dist/jwt.js

@@ -0,0 +1,63 @@
+/**
+ * Minimal JWT surface: base64url decoding and an UNVERIFIED structural parse.
+ *
+ * Deliberately dependency-free and deliberately small — everything here runs BEFORE any
+ * signature has been checked, so nothing it produces may be treated as a fact. The one thing
+ * the caller may read from an unverified token is `iss`, and only to select which trusted
+ * issuer's key set to check the signature against.
+ */
+export function base64UrlToBytes(value) {
+    const normalized = value.replace(/-/g, '+').replace(/_/g, '/');
+    const padded = normalized.padEnd(normalized.length + ((4 - (normalized.length % 4)) % 4), '=');
+    const binary = atob(padded);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+function decodeJsonSegment(segment) {
+    try {
+        const text = new TextDecoder().decode(base64UrlToBytes(segment));
+        const parsed = JSON.parse(text);
+        return isRecord(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/** Structural parse. Null on anything that is not a three-part JWT with JSON object segments. */
+export function parseJwt(token) {
+    if (typeof token !== 'string')
+        return null;
+    const parts = token.split('.');
+    if (parts.length !== 3)
+        return null;
+    const [headerSegment, payloadSegment, signatureSegment] = parts;
+    // An EMPTY signature segment is structurally legal (that is what an `alg: none` token looks
+    // like) and is deliberately parsed rather than rejected here: refusing it as "malformed"
+    // would hide the far more useful answer the algorithm gate gives one step later — that the
+    // verifier picks the algorithm, and this token asked for one that is not accepted.
+    if (!headerSegment || !payloadSegment)
+        return null;
+    const header = decodeJsonSegment(headerSegment);
+    const payload = decodeJsonSegment(payloadSegment);
+    if (!header || !payload)
+        return null;
+    let signature;
+    try {
+        signature = base64UrlToBytes(signatureSegment);
+    }
+    catch {
+        return null;
+    }
+    return {
+        header,
+        payload,
+        signingInput: `${headerSegment}.${payloadSegment}`,
+        signature,
+    };
+}
+//# sourceMappingURL=jwt.js.map

package/dist/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../src/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAUH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,KAAK,CAAC;IAChE,4FAA4F;IAC5F,yFAAyF;IACzF,2FAA2F;IAC3F,mFAAmF;IACnF,IAAI,CAAC,aAAa,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAErC,IAAI,SAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,SAAS,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,MAAM;QACN,OAAO;QACP,YAAY,EAAE,GAAG,aAAa,IAAI,cAAc,EAAE;QAClD,SAAS;KACV,CAAC;AACJ,CAAC"}