@proof-holdings/delegation-verifier 0.1.0

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,oEAAoE;AACpE,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,MAAM,CAAC;AAE1C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,YAAY,CAAC;IACnB,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEjF,MAAM,WAAW,aAAa;IAC5B,+EAA+E;IAC/E,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,yEAAyE;IACzE,QAAQ,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;IAClC,mDAAmD;IACnD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,0CAA0C;IAC1C,GAAG,CAAC,EAAE,IAAI,CAAC;IACX,oFAAoF;IACpF,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,aAAa;AACvB,4EAA4E;AAC1E,iBAAiB;AACnB,qEAAqE;GACnE,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,uBAAuB,GACvB,aAAa,GACb,eAAe,GACf,kBAAkB,GAClB,kBAAkB,GAClB,oBAAoB,GACpB,SAAS,GACT,eAAe,GACf,kBAAkB,GAClB,oBAAoB;AACtB,8EAA8E;GAC5E,mBAAmB,GACnB,mBAAmB;AACrB,8EAA8E;GAC5E,sBAAsB,GACtB,oBAAoB,GACpB,SAAS,GACT,WAAW;AACb,yFAAyF;GACvF,oBAAoB;AACtB,8CAA8C;GAC5C,gBAAgB;AAClB,kFAAkF;GAChF,uBAAuB,CAAC;AAE5B,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,aAAa,CAAC;AAQvD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,cAAc,CAE3E;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,IAAI,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,IAAI,CAAC;IACZ,2DAA2D;IAC3D,aAAa,EAAE,OAAO,CAAC;IACvB;;;;;;;;;;;;OAYG;IACH,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,EAAE,kBAAkB,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,aAAa,CAAC;IACtB,oGAAoG;IACpG,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC"}

package/dist/types.js

@@ -0,0 +1,35 @@
+/**
+ * Public types of the Proof of Delegation reference verifier.
+ *
+ * The library verifies a delegation token — an attestation that the domain in `principal`
+ * authorized the artifact in `delegate` for a set of capability scopes. It attests NOTHING
+ * about the artifact's quality, safety or the business behind it, and it is not a statement
+ * that anyone "verified" the server.
+ *
+ * Two design rules separate this from an SDK, and both are load-bearing:
+ *
+ *   1. There is NO default trust list. `trustedIssuers` is supplied by the caller on every
+ *      call — a verifier that trusts an issuer because the library shipped with its name
+ *      hard-coded is a client for that issuer, not a verifier.
+ *   2. `delegate` is REQUIRED. The token is a bearer artifact: anyone can copy a genuine
+ *      token into their own package. The comparison that defeats that is against the artifact
+ *      identity the CALLER resolved independently — never against what the card says about
+ *      itself.
+ */
+const UNCONFIRMED_REASONS = new Set([
+    'status_unavailable',
+    'jwks_unavailable',
+    'status_uri_untrusted',
+]);
+/**
+ * Whether a `FailureReason` means "checked, and it's bad" (`invalid`) or "could not check"
+ * (`unconfirmed`). The three status-channel reasons that mean the revocation check itself
+ * failed are `unconfirmed`; every other reason is a completed check with a negative verdict,
+ * including a call-shape error — `verifyDelegation` always receives a well-formed
+ * `VerifyOptions` in practice, so those are `invalid` for exhaustiveness, not because they
+ * occur.
+ */
+export function classifyFailureReason(reason) {
+    return UNCONFIRMED_REASONS.has(reason) ? 'unconfirmed' : 'invalid';
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AA8GH,MAAM,mBAAmB,GAA+B,IAAI,GAAG,CAAC;IAC9D,oBAAoB;IACpB,kBAAkB;IAClB,sBAAsB;CACvB,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAqB;IACzD,OAAO,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC"}

package/dist/verify.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `verifyDelegation` — the chain: signature → principal → delegate → status.
+ *
+ * Order is deliberate. Everything that can be decided WITHOUT the network is decided first, so
+ * a token from an untrusted issuer, a token about someone else's artifact and an expired token
+ * all cost zero outbound requests. Only a token that has already survived those checks is
+ * worth asking the issuer about.
+ */
+import type { VerificationResult, VerifyOptions } from './types.js';
+export declare function verifyDelegation(token: string, options: VerifyOptions): Promise<VerificationResult>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,OAAO,KAAK,EAIV,kBAAkB,EAClB,aAAa,EACd,MAAM,YAAY,CAAC;AAgDpB,wBAAsB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAyNzG"}

package/dist/verify.js

@@ -0,0 +1,240 @@
+/**
+ * `verifyDelegation` — the chain: signature → principal → delegate → status.
+ *
+ * Order is deliberate. Everything that can be decided WITHOUT the network is decided first, so
+ * a token from an untrusted issuer, a token about someone else's artifact and an expired token
+ * all cost zero outbound requests. Only a token that has already survived those checks is
+ * worth asking the issuer about.
+ */
+import { canonicalizeDelegate, DelegateIdentifierError } from './delegate.js';
+import { getVerificationKeys, isSupportedAlgorithm, verifySignature } from './jwks.js';
+import { parseJwt } from './jwt.js';
+import { checkDelegationStatus } from './status.js';
+import { classifyFailureReason } from './types.js';
+/** Delegation token schema versions this verifier understands (major-compatible). */
+const SUPPORTED_SCHEMA_MAJOR = '1';
+const DEFAULT_CLOCK_TOLERANCE_SECONDS = 5;
+const DEFAULT_TIMEOUT_MS = 5_000;
+function fail(reason, message) {
+    return { valid: false, reason, outcome: classifyFailureReason(reason), message };
+}
+function findTrustedIssuer(issuers, iss) {
+    if (typeof iss !== 'string' || iss.length === 0)
+        return undefined;
+    return issuers.find((candidate) => candidate.issuer === iss);
+}
+function isHttpsUrl(value) {
+    if (typeof value !== 'string')
+        return false;
+    try {
+        return new URL(value).protocol === 'https:';
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * A trust entry must be usable AND safe. Every URL it contributes is checked for https, not
+ * just the JWKS: `statusEndpoint` receives the whole delegation token in a POST body, and both
+ * it and `statusListOrigins` widen the set of origins a token may point the verifier at.
+ */
+function isValidIssuerEntry(entry) {
+    if (typeof entry !== 'object' || entry === null)
+        return false;
+    const candidate = entry;
+    if (typeof candidate.issuer !== 'string' || candidate.issuer.length === 0)
+        return false;
+    if (!isHttpsUrl(candidate.jwksUri))
+        return false;
+    if (candidate.statusEndpoint !== undefined && !isHttpsUrl(candidate.statusEndpoint))
+        return false;
+    if (candidate.statusListOrigins !== undefined) {
+        if (!Array.isArray(candidate.statusListOrigins))
+            return false;
+        if (!candidate.statusListOrigins.every(isHttpsUrl))
+            return false;
+    }
+    return true;
+}
+function normalizePrincipal(value) {
+    return value.trim().toLowerCase();
+}
+export async function verifyDelegation(token, options) {
+    // ---------------------------------------------------------------- call-shape checks
+    if (!options || typeof options !== 'object') {
+        return fail('invalid_options', 'options are required');
+    }
+    if (!options.delegate) {
+        return fail('invalid_options', 'delegate is required: the verifier compares the token against the artifact identity YOU resolved, never against what the card says about itself');
+    }
+    let expectedDelegate;
+    try {
+        expectedDelegate = canonicalizeDelegate(options.delegate);
+    }
+    catch (error) {
+        return fail('invalid_options', error instanceof DelegateIdentifierError ? error.message : 'delegate could not be canonicalized');
+    }
+    // Compared as exact strings, deliberately NOT through the issuer-side scope canonicalizer:
+    // scope grammar is the issuer's, and running another issuer's `mcp:tools/call` through
+    // proof.holdings' kebab-case rules would make the requirement unaskable rather than merely
+    // over-constrained.
+    let requiredScopes = [];
+    if (options.requiredScopes !== undefined) {
+        if (!Array.isArray(options.requiredScopes) || options.requiredScopes.some((entry) => typeof entry !== 'string')) {
+            return fail('invalid_options', 'requiredScopes must be an array of strings');
+        }
+        requiredScopes = options.requiredScopes.map((entry) => entry.trim()).filter((entry) => entry.length > 0);
+    }
+    // Validated like every other option rather than trusted: this is the pin that closes the
+    // sibling attack, and a non-string reaching `normalizePrincipal` would throw out of a
+    // function whose whole contract is to RETURN a discriminated result — worst on the untyped
+    // consumers this package is aimed at.
+    if (options.expectedPrincipal !== undefined) {
+        if (typeof options.expectedPrincipal !== 'string' || options.expectedPrincipal.trim().length === 0) {
+            return fail('invalid_options', 'expectedPrincipal must be a non-empty string when supplied');
+        }
+    }
+    const issuers = Array.isArray(options.trustedIssuers) ? options.trustedIssuers.filter(isValidIssuerEntry) : [];
+    if (issuers.length === 0) {
+        return fail('no_trust_policy', 'trustedIssuers is empty: this verifier has no built-in trust list, so the caller must name the issuers it accepts (each with an https jwksUri)');
+    }
+    const fetchImpl = options.fetch ?? ((input, init) => fetch(input, init));
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const clockToleranceSeconds = options.clockToleranceSeconds ?? DEFAULT_CLOCK_TOLERANCE_SECONDS;
+    const now = options.now ?? new Date();
+    const nowSeconds = Math.floor(now.getTime() / 1000);
+    // ---------------------------------------------------------------- structural parse
+    const parsed = parseJwt(token);
+    if (!parsed)
+        return fail('malformed_token', 'token is not a decodable three-part JWT');
+    const issuer = findTrustedIssuer(issuers, parsed.payload.iss);
+    if (!issuer) {
+        return fail('untrusted_issuer', `token issuer ${JSON.stringify(parsed.payload.iss)} is not in the supplied trust policy`);
+    }
+    const alg = parsed.header.alg;
+    if (!isSupportedAlgorithm(alg)) {
+        // The algorithm is chosen by the verifier, not by the token — `none` and HMAC forgeries
+        // die here, before any key is fetched.
+        return fail('unsupported_algorithm', `token algorithm ${JSON.stringify(alg)} is not accepted`);
+    }
+    // ---------------------------------------------------------------- claims (pre-network)
+    const claims = parsed.payload;
+    if (claims.token_type !== 'delegation') {
+        return fail('not_a_delegation', `token_type must be "delegation", got ${JSON.stringify(claims.token_type)}`);
+    }
+    const schemaVersion = claims.delegation_schema_version;
+    if (typeof schemaVersion !== 'string' || schemaVersion.split('.')[0] !== SUPPORTED_SCHEMA_MAJOR) {
+        return fail('unsupported_schema', `delegation_schema_version ${JSON.stringify(schemaVersion)} is not supported (this verifier understands ${SUPPORTED_SCHEMA_MAJOR}.x)`);
+    }
+    const { sub, principal, delegate, control_proof: controlProof, scope, iat, exp } = claims;
+    if (typeof sub !== 'string' ||
+        sub.length === 0 ||
+        typeof principal !== 'string' ||
+        principal.length === 0 ||
+        typeof delegate !== 'string' ||
+        delegate.length === 0 ||
+        typeof controlProof !== 'string' ||
+        controlProof.length === 0 ||
+        !Array.isArray(scope) ||
+        scope.length === 0 ||
+        scope.some((entry) => typeof entry !== 'string') ||
+        typeof iat !== 'number' ||
+        typeof exp !== 'number') {
+        return fail('malformed_claims', 'token is missing one of sub / principal / delegate / control_proof / scope / iat / exp');
+    }
+    if (nowSeconds > exp + clockToleranceSeconds) {
+        return fail('expired', 'delegation expired');
+    }
+    if (nowSeconds + clockToleranceSeconds < iat) {
+        return fail('not_yet_valid', 'delegation is not valid yet (iat is in the future)');
+    }
+    if (options.expectedPrincipal !== undefined) {
+        if (normalizePrincipal(principal) !== normalizePrincipal(options.expectedPrincipal)) {
+            return fail('principal_mismatch', `delegation was issued by ${JSON.stringify(principal)}, not ${JSON.stringify(options.expectedPrincipal)}`);
+        }
+    }
+    // Requirement (a) of the design: the token is a bearer artifact, so this comparison — against
+    // an identity the CALLER resolved — is what stops a genuine token being copied into another
+    // package's card.
+    if (delegate !== expectedDelegate) {
+        return fail('delegate_mismatch', `delegation attests ${JSON.stringify(delegate)}, but the artifact you resolved is ${JSON.stringify(expectedDelegate)}`);
+    }
+    const grantedScopes = scope;
+    const grantedTrimmed = grantedScopes.map((entry) => entry.trim());
+    const missing = requiredScopes.filter((required) => !grantedTrimmed.includes(required));
+    if (missing.length > 0) {
+        return fail('scope_not_granted', `delegation does not grant: ${missing.join(', ')}`);
+    }
+    // ---------------------------------------------------------------- signature
+    let keys;
+    try {
+        keys = await getVerificationKeys({
+            jwksUri: issuer.jwksUri,
+            kid: typeof parsed.header.kid === 'string' ? parsed.header.kid : undefined,
+            alg,
+            fetch: fetchImpl,
+            timeoutMs,
+        });
+    }
+    catch (error) {
+        // "I could not check" is not "the token is bad" — it gets its own reason.
+        return fail('jwks_unavailable', error instanceof Error ? error.message : 'JWKS could not be fetched');
+    }
+    if (keys.length === 0) {
+        return fail('unknown_key', 'no key in the issuer JWKS matches this token');
+    }
+    let signatureOk = false;
+    for (const key of keys) {
+        if (await verifySignature(key, alg, parsed.signingInput, parsed.signature)) {
+            signatureOk = true;
+            break;
+        }
+    }
+    if (!signatureOk)
+        return fail('bad_signature', 'token signature is invalid');
+    const delegation = {
+        issuer: issuer.issuer,
+        principal,
+        delegate,
+        scope: grantedScopes,
+        controlProof,
+        delegationId: sub,
+        issuedAt: new Date(iat * 1000),
+        expiresAt: new Date(exp * 1000),
+    };
+    // See `VerificationSuccess.principalChecked`: an issuer binds `delegate` to nothing, so a
+    // delegation naming someone else's artifact is a normal thing for any domain to mint. The
+    // caller is told whether that half of the question was asked.
+    const principalChecked = options.expectedPrincipal !== undefined;
+    // ---------------------------------------------------------------- status
+    if (options.statusCheck === 'skip') {
+        return { valid: true, statusChecked: false, principalChecked, delegation };
+    }
+    const status = await checkDelegationStatus({
+        token,
+        claims,
+        issuer,
+        fetch: fetchImpl,
+        timeoutMs,
+        now,
+        clockToleranceSeconds,
+    });
+    switch (status.state) {
+        case 'valid':
+            return { valid: true, statusChecked: true, principalChecked, delegation };
+        case 'revoked':
+            return fail('revoked', status.message);
+        case 'suspended':
+            return fail('suspended', status.message);
+        case 'expired':
+            return fail('expired', status.message);
+        case 'unknown':
+            return fail('unknown_delegation', status.message);
+        case 'untrusted_uri':
+            return fail('status_uri_untrusted', status.message);
+        case 'unavailable':
+            // Fail CLOSED: an unchecked revocation channel is not evidence of validity.
+            return fail('status_unavailable', status.message);
+    }
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AASnD,qFAAqF;AACrF,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAEnC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAC1C,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC,SAAS,IAAI,CAAC,MAAqB,EAAE,OAAe;IAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAwB,EAAE,GAAY;IAC/D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,SAAS,GAAG,KAA+B,CAAC;IAClD,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC;QAAE,OAAO,KAAK,CAAC;IAClG,IAAI,SAAS,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,CAAC,SAAS,CAAC,iBAAiB,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,OAAsB;IAC1E,qFAAqF;IACrF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,IAAI,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,IAAI,CACT,iBAAiB,EACjB,iJAAiJ,CAClJ,CAAC;IACJ,CAAC;IAED,IAAI,gBAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,gBAAgB,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAI,CACT,iBAAiB,EACjB,KAAK,YAAY,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC,CACjG,CAAC;IACJ,CAAC;IAED,2FAA2F;IAC3F,uFAAuF;IACvF,2FAA2F;IAC3F,oBAAoB;IACpB,IAAI,cAAc,GAAa,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChH,OAAO,IAAI,CAAC,iBAAiB,EAAE,4CAA4C,CAAC,CAAC;QAC/E,CAAC;QACD,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3G,CAAC;IAED,yFAAyF;IACzF,sFAAsF;IACtF,2FAA2F;IAC3F,sCAAsC;IACtC,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,OAAO,OAAO,CAAC,iBAAiB,KAAK,QAAQ,IAAI,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnG,OAAO,IAAI,CAAC,iBAAiB,EAAE,4DAA4D,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CACT,iBAAiB,EACjB,gJAAgJ,CACjJ,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAc,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACpF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,+BAA+B,CAAC;IAC/F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAEpD,oFAAoF;IACpF,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,iBAAiB,EAAE,yCAAyC,CAAC,CAAC;IAEvF,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CACT,kBAAkB,EAClB,gBAAgB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sCAAsC,CACzF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;IAC9B,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,wFAAwF;QACxF,uCAAuC;QACvC,OAAO,IAAI,CAAC,uBAAuB,EAAE,mBAAmB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjG,CAAC;IAED,wFAAwF;IACxF,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;IAC9B,IAAI,MAAM,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,kBAAkB,EAAE,wCAAwC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,yBAAyB,CAAC;IACvD,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,sBAAsB,EAAE,CAAC;QAChG,OAAO,IAAI,CACT,oBAAoB,EACpB,6BAA6B,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,gDAAgD,sBAAsB,KAAK,CACtI,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;IAC1F,IACE,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,CAAC,MAAM,KAAK,CAAC;QAChB,OAAO,SAAS,KAAK,QAAQ;QAC7B,SAAS,CAAC,MAAM,KAAK,CAAC;QACtB,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,OAAO,YAAY,KAAK,QAAQ;QAChC,YAAY,CAAC,MAAM,KAAK,CAAC;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QAChD,OAAO,GAAG,KAAK,QAAQ;QACvB,OAAO,GAAG,KAAK,QAAQ,EACvB,CAAC;QACD,OAAO,IAAI,CAAC,kBAAkB,EAAE,wFAAwF,CAAC,CAAC;IAC5H,CAAC;IAED,IAAI,UAAU,GAAG,GAAG,GAAG,qBAAqB,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,UAAU,GAAG,qBAAqB,GAAG,GAAG,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,OAAO,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC5C,IAAI,kBAAkB,CAAC,SAAS,CAAC,KAAK,kBAAkB,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACpF,OAAO,IAAI,CACT,oBAAoB,EACpB,4BAA4B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAC1G,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8FAA8F;IAC9F,4FAA4F;IAC5F,kBAAkB;IAClB,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAClC,OAAO,IAAI,CACT,mBAAmB,EACnB,sBAAsB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,sCAAsC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,CACvH,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,KAAiB,CAAC;IACxC,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC,mBAAmB,EAAE,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,6EAA6E;IAC7E,IAAI,IAAiB,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,mBAAmB,CAAC;YAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YAC1E,GAAG;YACH,KAAK,EAAE,SAAS;YAChB,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,OAAO,IAAI,CAAC,kBAAkB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,aAAa,EAAE,8CAA8C,CAAC,CAAC;IAC7E,CAAC;IAED,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3E,WAAW,GAAG,IAAI,CAAC;YACnB,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAE7E,MAAM,UAAU,GAAG;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS;QACT,QAAQ;QACR,KAAK,EAAE,aAAa;QACpB,YAAY;QACZ,YAAY,EAAE,GAAG;QACjB,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QAC9B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;KAChC,CAAC;IACF,0FAA0F;IAC1F,0FAA0F;IAC1F,8DAA8D;IAC9D,MAAM,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,KAAK,SAAS,CAAC;IAEjE,0EAA0E;IAC1E,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,EAAE,CAAC;QACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC;QACzC,KAAK;QACL,MAAM;QACN,MAAM;QACN,KAAK,EAAE,SAAS;QAChB,SAAS;QACT,GAAG;QACH,qBAAqB;KACtB,CAAC,CAAC;IAEH,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,OAAO;YACV,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;QAC5E,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,WAAW;YACd,OAAO,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACzC,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACpD,KAAK,eAAe;YAClB,OAAO,IAAI,CAAC,sBAAsB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACtD,KAAK,aAAa;YAChB,4EAA4E;YAC5E,OAAO,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@proof-holdings/delegation-verifier",
+  "version": "0.1.0",
+  "description": "Issuer-agnostic verifier for Proof of Delegation tokens — checks that a domain authorized an agent artifact, against a trust policy you supply",
+  "type": "module",
+  "license": "MIT",
+  "author": "proof.holdings <hello@proof.holdings> (https://proof.holdings)",
+  "homepage": "https://proof.holdings",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ProofHoldings/delegation-verifier.git"
+  },
+  "bugs": {
+    "email": "hello@proof.holdings",
+    "url": "https://proof.holdings/support"
+  },
+  "keywords": [
+    "proof-of-delegation",
+    "delegation",
+    "attestation",
+    "mcp",
+    "a2a",
+    "agent-card",
+    "jwt",
+    "verification"
+  ],
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@types/node": "^20.11.0",
+    "typescript": "^5.5.0",
+    "vitest": "^3.0.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  }
+}