@provian/mcp 0.0.0-stage → 1.2.0

package/dist/core/crypto.js

@@ -0,0 +1,124 @@
+"use strict";
+/**
+ * Agent-key crypto for the MCP tool core.
+ *
+ * SHARED CORE — canonical in `provian-mcp/src/core/`, mirrored into
+ * `provian-backend/src/mcp/core/`. Edit only the canonical copy.
+ *
+ * Line-for-line ports of the SDK's key handling so the relay accepts
+ * signatures from either package interchangeably:
+ *   - generateAgentKeyPair / signPoPChallenge ← provian-agent-sdk/src/wallet.ts
+ *     (Node crypto secp256k1 keygen; PoP challenge signed with
+ *     createSign('SHA256') → DER hex, exactly what
+ *     POST /v1/agent/wallet/create verifies)
+ *
+ * Deliberately Node-crypto-only (zero npm deps beyond the vendored keccak):
+ * the mirror compiles inside the relay with no new dependencies. EIP-191
+ * signing (external-address one-shot linking, local mode only) is NOT here —
+ * it is injected by the local stdio server via ToolContext.signEip191; the
+ * remote endpoint refuses private-key material by design.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateAgentKeyPair = generateAgentKeyPair;
+exports.signPoPChallenge = signPoPChallenge;
+exports.deriveAddressFromPrivateKey = deriveAddressFromPrivateKey;
+exports.derivePublicKeyFromPrivateKey = derivePublicKeyFromPrivateKey;
+const crypto_1 = require("crypto");
+const keccak256_1 = require("./keccak256");
+/**
+ * Generate a new secp256k1 key pair using Node.js crypto and derive the
+ * EVM address (keccak256 of the raw public key, last 20 bytes).
+ */
+function generateAgentKeyPair() {
+    const { privateKey, publicKey } = (0, crypto_1.generateKeyPairSync)('ec', {
+        namedCurve: 'secp256k1',
+    });
+    const privKeyDer = privateKey.export({ type: 'sec1', format: 'der' });
+    const pubKeyDer = publicKey.export({ type: 'spki', format: 'der' });
+    // SEC1 DER: private key OCTET STRING starts at offset 7 (30 xx 02 01 01 04 20)
+    const privKeyHex = privKeyDer.subarray(7, 7 + 32).toString('hex');
+    // Uncompressed public key = last 65 bytes of SPKI DER; skip the 04 prefix
+    const pubKeyRaw = pubKeyDer.subarray(pubKeyDer.length - 65);
+    const pubKeyHex = pubKeyRaw.subarray(1).toString('hex');
+    const addressHash = (0, keccak256_1.keccak256)(Buffer.from(pubKeyRaw.subarray(1)));
+    const address = toChecksumAddress('0x' + addressHash.subarray(12).toString('hex'));
+    return { privateKey: privKeyHex, publicKey: pubKeyHex, address };
+}
+/**
+ * Sign a wallet-create proof-of-possession challenge with the agent's
+ * private key. Plain ECDSA-SHA256 over the challenge string, DER-encoded
+ * hex — byte-identical to the SDK's `signMessage` and exactly what the
+ * relay's challenge verifier expects.
+ */
+function signPoPChallenge(privateKeyHex, challenge) {
+    const privKeyBuf = Buffer.from(stripHexPrefix(privateKeyHex), 'hex');
+    const privKey = (0, crypto_1.createPrivateKey)({
+        key: buildSec1Der(privKeyBuf),
+        format: 'der',
+        type: 'sec1',
+    });
+    const signer = (0, crypto_1.createSign)('SHA256');
+    signer.update(challenge);
+    return signer.sign(privKey, 'hex');
+}
+/** Derive the EIP-55 checksummed EVM address for a hex private key. */
+function deriveAddressFromPrivateKey(privateKeyHex) {
+    const pubKeyRaw = Buffer.concat([
+        Buffer.from([0x04]),
+        Buffer.from(derivePublicKeyFromPrivateKey(privateKeyHex), 'hex'),
+    ]);
+    const addressHash = (0, keccak256_1.keccak256)(Buffer.from(pubKeyRaw.subarray(1)));
+    return toChecksumAddress('0x' + addressHash.subarray(12).toString('hex'));
+}
+/** Derive the 64-byte uncompressed public key (without the 04 prefix). */
+function derivePublicKeyFromPrivateKey(privateKeyHex) {
+    const clean = stripHexPrefix(privateKeyHex.trim().toLowerCase());
+    if (!/^[0-9a-f]{64}$/.test(clean)) {
+        throw new Error('Private key must be 32 bytes (64 hex chars)');
+    }
+    const privKeyBuf = Buffer.from(clean, 'hex');
+    const ecPrivKey = (0, crypto_1.createPrivateKey)({
+        key: buildSec1Der(privKeyBuf),
+        format: 'der',
+        type: 'sec1',
+    });
+    const ecPubKey = (0, crypto_1.createPublicKey)(ecPrivKey);
+    const pubKeyDer = ecPubKey.export({ type: 'spki', format: 'der' });
+    const pubKeyRaw = pubKeyDer.subarray(pubKeyDer.length - 65);
+    if (pubKeyRaw[0] !== 0x04) {
+        throw new Error('Unexpected public key format (expected uncompressed)');
+    }
+    return pubKeyRaw.subarray(1).toString('hex');
+}
+/** Build a SEC1 DER encoding for a secp256k1 private key. */
+function buildSec1Der(privKeyBytes) {
+    // OID for secp256k1: 1.3.132.0.10
+    const oid = Buffer.from('06052b8104000a', 'hex');
+    const privKeyOctetString = Buffer.concat([
+        Buffer.from([0x04, privKeyBytes.length]),
+        privKeyBytes,
+    ]);
+    const oidWrapped = Buffer.concat([Buffer.from([0xa0, oid.length]), oid]);
+    const version = Buffer.from([0x02, 0x01, 0x01]);
+    const innerLength = version.length + privKeyOctetString.length + oidWrapped.length;
+    return Buffer.concat([
+        Buffer.from([0x30, innerLength]),
+        version,
+        privKeyOctetString,
+        oidWrapped,
+    ]);
+}
+/** EIP-55 checksum address encoding. */
+function toChecksumAddress(address) {
+    const addr = address.toLowerCase().replace('0x', '');
+    const hash = (0, keccak256_1.keccak256)(Buffer.from(addr, 'utf8')).toString('hex');
+    let checksummed = '0x';
+    for (let i = 0; i < 40; i++) {
+        checksummed += parseInt(hash[i], 16) >= 8 ? addr[i].toUpperCase() : addr[i];
+    }
+    return checksummed;
+}
+function stripHexPrefix(hex) {
+    return hex.startsWith('0x') || hex.startsWith('0X') ? hex.slice(2) : hex;
+}
+//# sourceMappingURL=crypto.js.map

package/dist/core/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/core/crypto.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;AAkBH,oDAmBC;AAQD,4CAWC;AAGD,kEAOC;AAGD,sEAmBC;AAtFD,mCAA4F;AAC5F,2CAAwC;AAWxC;;;GAGG;AACH,SAAgB,oBAAoB;IAClC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,IAAA,4BAAmB,EAAC,IAAI,EAAE;QAC1D,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEpE,+EAA+E;IAC/E,MAAM,UAAU,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElE,0EAA0E;IAC1E,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAExD,MAAM,WAAW,GAAG,IAAA,qBAAS,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAEnF,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,aAAqB,EAAE,SAAiB;IACvE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,IAAA,yBAAgB,EAAC;QAC/B,GAAG,EAAE,YAAY,CAAC,UAAU,CAAC;QAC7B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,uEAAuE;AACvE,SAAgB,2BAA2B,CAAC,aAAqB;IAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC;KACjE,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,IAAA,qBAAS,EAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,iBAAiB,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,0EAA0E;AAC1E,SAAgB,6BAA6B,CAAC,aAAqB;IACjE,MAAM,KAAK,GAAG,cAAc,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAE7C,MAAM,SAAS,GAAG,IAAA,yBAAgB,EAAC;QACjC,GAAG,EAAE,YAAY,CAAC,UAAU,CAAC;QAC7B,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAA,wBAAe,EAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;IAC5D,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,6DAA6D;AAC7D,SAAS,YAAY,CAAC,YAAoB;IACxC,kCAAkC;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACjD,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;QACxC,YAAY;KACb,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,GAAG,kBAAkB,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChC,OAAO;QACP,kBAAkB;QAClB,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,wCAAwC;AACxC,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,IAAA,qBAAS,EAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElE,IAAI,WAAW,GAAG,IAAI,CAAC;IACvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3E,CAAC"}

package/dist/core/disclosure-request.d.ts

@@ -0,0 +1,169 @@
+/**
+ * REQUESTER-NAMED DISCLOSURE — the second part of a signed challenge.
+ *
+ * Beyond predicates, a signed challenge may NAME what it wants to see from the presenter's own
+ * record: a specific PE by one of its output digests (`kind: 'pe'`), or PEs witnessed by a named
+ * issuer or signer (`kind: 'witness'`); each request may name specific FIELDS of the record (dotted
+ * paths into the act's pricing projection) and elect CONTENT (`description`, `intent`,
+ * `artifacts`, `fact_tier`). The predicate grammar is frozen; disclosure requests are a distinct
+ * part of the challenge, committed by their own `disclosures=` line in the signing string ONLY
+ * when present, so every pre-existing challenge signs byte-identical bytes.
+ *
+ * The presenter ELECTS per request: `disclosed` (with the matching records it holds, proven to the
+ * anchored root) or `declined` (signed as declined). Nothing is disclosed without an election; the
+ * floor of every disclosed record is METADATA (pe id, hash, action type, time, the witness facts
+ * the relay verified at issuance); fields and content appear only when requested AND elected.
+ * Standing is always present (disclosures ride the reputation tier). Disclosures travel only inside
+ * the requester-bound presentation; the relay retains nothing; nothing surfaces in the Commons.
+ *
+ * This module is the single source of the shapes, the canonical forms and the digests. Mirrored
+ * byte-for-byte (modulo the hash primitive import) in the SDK (`src/disclosure-request.ts`), the
+ * MCP core and the app (`src/core/presentation/disclosureRequest.ts`); the fixed vectors in
+ * `disclosure-request.test.ts` are pinned identically in each package.
+ */
+export declare const DISCLOSURE_REQUESTS_MAX = 16;
+export declare const DISCLOSURE_FIELDS_MAX = 32;
+export declare const DISCLOSURE_FIELD_PATH_MAX_DEPTH = 6;
+export declare const DISCLOSURE_RECORDS_DEFAULT_LIMIT = 10;
+export declare const DISCLOSURE_RECORDS_MAX_LIMIT = 50;
+/** Every disclosed record of one presentation, across requests. */
+export declare const DISCLOSURE_RECORDS_MAX_TOTAL = 50;
+/** Canonical bytes of one disclosed record (fields + content), a hard cap against a data channel. */
+export declare const DISCLOSURE_RECORD_MAX_BYTES: number;
+export declare const DISCLOSURE_CONTENT_ELECTIONS: readonly ["description", "intent", "artifacts", "fact_tier"];
+export type DisclosureContent = (typeof DISCLOSURE_CONTENT_ELECTIONS)[number];
+export declare const DISCLOSURE_ELECTIONS: readonly ["disclosed", "declined"];
+export type DisclosureElection = (typeof DISCLOSURE_ELECTIONS)[number];
+/** A specific PE named by one of its output digests (or its own pe_hash). */
+export interface PeDisclosureRequest {
+    readonly kind: 'pe';
+    readonly output_digest: string;
+    /** Optional: the witness issuer the record must carry (a credential by digest AND issuer). */
+    readonly issuer?: string;
+    readonly fields?: readonly string[];
+    readonly content?: readonly DisclosureContent[];
+}
+/** PEs witnessed by a named issuer (a pinned root fingerprint, `chain:base`, a forge host) or signer. */
+export interface WitnessDisclosureRequest {
+    readonly kind: 'witness';
+    readonly issuer?: string;
+    readonly signer?: string;
+    /** The most records the presenter may disclose for this request (1..50, default 10). */
+    readonly limit?: number;
+    readonly fields?: readonly string[];
+    readonly content?: readonly DisclosureContent[];
+}
+export type DisclosureRequest = PeDisclosureRequest | WitnessDisclosureRequest;
+/** Canonical (sorted, de-duplicated, lowercased) request — the form the signing string commits to. */
+export type CanonicalDisclosureRequest = {
+    kind: 'pe';
+    output_digest: string;
+    issuer?: string;
+    fields?: string[];
+    content?: DisclosureContent[];
+} | {
+    kind: 'witness';
+    issuer?: string;
+    signer?: string;
+    limit: number;
+    fields?: string[];
+    content?: DisclosureContent[];
+};
+/** The witness facts the relay verified at issuance for a disclosed record. */
+export interface DisclosedWitness {
+    /** `hardware` (an admitted non-actor attestation), `chain` (a chain-verified transfer), `device` (the recording device's key). */
+    readonly kind: 'hardware' | 'chain' | 'device';
+    readonly scheme?: string;
+    /** hardware: the pinned root fingerprint reached. chain: `chain:<name>`. */
+    readonly issuer?: string;
+    /** hardware: sha256(SPKI) of the report signer. device: the device id of the anchored batch. */
+    readonly signer?: string;
+    /** hardware: the launch measurement / PCR digest. */
+    readonly measurement?: string;
+    readonly region?: string;
+    /** chain: the transaction hash. */
+    readonly ref?: string;
+}
+/** One disclosed record: the metadata floor, plus requested fields and elected content. */
+export interface DisclosedRecord {
+    readonly pe_id: string;
+    readonly pe_hash: string;
+    readonly action_type: string;
+    readonly timestamp: number;
+    readonly witness: DisclosedWitness;
+    /** `kind: 'pe'` only: the output digest the request named, as carried by this record. */
+    readonly output_digest?: string;
+    /** The requested fields at their dotted paths (absent paths are reported as null). */
+    readonly fields?: Record<string, unknown>;
+    readonly content?: {
+        readonly description?: string | null;
+        readonly intent?: string | null;
+        readonly artifacts?: unknown[];
+        readonly fact_tier?: Record<string, unknown>;
+    };
+}
+export interface DisclosureAnswer {
+    readonly request: CanonicalDisclosureRequest;
+    readonly election: DisclosureElection;
+    /** Present only on `disclosed`. May be empty: the presenter elected but holds no matching record. */
+    readonly records?: readonly DisclosedRecord[];
+}
+/**
+ * Canonical JSON (sorted keys, no whitespace, undefined members dropped) — the same rule the meter
+ * wire uses, carried here so this module stays dependency-free in every package.
+ */
+export declare function canonicalJson(value: unknown): string;
+/** A dotted field path into the pricing projection: 1..6 segments of `[A-Za-z0-9_-]{1,64}`. */
+export declare function isDisclosureFieldPath(path: unknown): path is string;
+/**
+ * Parse ONE untrusted disclosure request into its canonical form, fail-closed (`null` on anything
+ * malformed: an unknown kind, a digest that is not 64 hex, a witness request naming neither issuer
+ * nor signer, a bad field path, an unknown content election, a limit outside 1..50).
+ */
+export declare function canonicalDisclosureRequest(raw: unknown): CanonicalDisclosureRequest | null;
+/** The order-independent identity of a request (its canonical JSON). */
+export declare function disclosureRequestKey(req: CanonicalDisclosureRequest): string;
+/**
+ * Parse an untrusted request list, fail-closed: `[]` for absent, `null` when it is not a list, is
+ * over the cap, carries a malformed entry, or names the same request twice.
+ */
+export declare function normalizeDisclosureRequests(raw: unknown): CanonicalDisclosureRequest[] | null;
+/** Two requests are the same when their canonical forms are byte-identical. */
+export declare function disclosureRequestMatches(a: CanonicalDisclosureRequest, b: CanonicalDisclosureRequest): boolean;
+/** sha256 hex of the canonical, sorted request list — the `disclosures=` signing-string commitment. */
+export declare function challengeDisclosuresDigest(requests: readonly CanonicalDisclosureRequest[] | undefined): string;
+/** The canonical, order-independent form of the answers — what the presenter's proof of possession
+ *  and the Provian signature commit to (elections AND records). */
+export declare function canonicalDisclosureAnswers(answers: readonly DisclosureAnswer[]): DisclosureAnswer[];
+/** sha256 hex of the canonical answers — the `disclosures=` line of the claims digest. */
+export declare function disclosureAnswersDigest(answers: readonly DisclosureAnswer[]): string;
+/** Read a dotted path off a plain object; `null` when any segment is absent. */
+export declare function readFieldPath(source: unknown, path: string): unknown;
+/** Parse an untrusted answer list structurally (elections and record floors); `null` when malformed. */
+export declare function parseDisclosureAnswers(raw: unknown): DisclosureAnswer[] | null;
+/**
+ * Does a record satisfy the request it answers? `pe`: the record carries the named digest (and the
+ * issuer when named). `witness`: the record's witness carries the named issuer / signer.
+ */
+export declare function recordMatchesRequest(record: DisclosedRecord, request: CanonicalDisclosureRequest): boolean;
+/** The floor-only view of a record: no fields, no content — what a declined-content request yields. */
+export declare function recordFloor(record: DisclosedRecord): DisclosedRecord;
+/** The identity-only view of the answers: elections plus `{pe_id, pe_hash}` per disclosed record. */
+export type DisclosureCommitment = {
+    request: CanonicalDisclosureRequest;
+    election: DisclosureElection;
+    records?: {
+        pe_id: string;
+        pe_hash: string;
+    }[];
+};
+/**
+ * The PRESENTER'S commitment: what it elected and WHICH records (by id + hash) it put forward —
+ * everything the presenter can know before the relay derives the witness facts. Its sha256 is the
+ * `disclosures=` line of the claims digest the proof of possession signs; the relay-derived facts,
+ * fields and content are covered by the Provian signature over the payload, and a verifier checks
+ * every field against the anchored act record itself.
+ */
+export declare function disclosureCommitment(answers: readonly DisclosureAnswer[]): DisclosureCommitment[];
+export declare function disclosureCommitmentDigest(answers: readonly DisclosureAnswer[]): string;
+//# sourceMappingURL=disclosure-request.d.ts.map

package/dist/core/disclosure-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"disclosure-request.d.ts","sourceRoot":"","sources":["../../src/core/disclosure-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,+BAA+B,IAAI,CAAC;AACjD,eAAO,MAAM,gCAAgC,KAAK,CAAC;AACnD,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,mEAAmE;AACnE,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,qGAAqG;AACrG,eAAO,MAAM,2BAA2B,QAAY,CAAC;AAErD,eAAO,MAAM,4BAA4B,8DAA+D,CAAC;AACzG,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E,eAAO,MAAM,oBAAoB,oCAAqC,CAAC;AACvE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAOvE,6EAA6E;AAC7E,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,8FAA8F;IAC9F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD;AAED,yGAAyG;AACzG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,wFAAwF;IACxF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD;AAED,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,wBAAwB,CAAC;AAE/E,sGAAsG;AACtG,MAAM,MAAM,0BAA0B,GAClC;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAA;CAAE,GACxG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,iBAAiB,EAAE,CAAA;CAAE,CAAC;AAE3H,+EAA+E;AAC/E,MAAM,WAAW,gBAAgB;IAC/B,kIAAkI;IAClI,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,gGAAgG;IAChG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qDAAqD;IACrD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mCAAmC;IACnC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,2FAA2F;AAC3F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,yFAAyF;IACzF,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,sFAAsF;IACtF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;QAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC9C,CAAC;CACH;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,qGAAqG;IACrG,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CAC/C;AAUD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAcpD;AAID,+FAA+F;AAC/F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,MAAM,CAMnE;AAqCD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,0BAA0B,GAAG,IAAI,CAgC1F;AAED,wEAAwE;AACxE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,0BAA0B,GAAG,MAAM,CAE5E;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,0BAA0B,EAAE,GAAG,IAAI,CAc7F;AAED,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,0BAA0B,EAAE,CAAC,EAAE,0BAA0B,GAAG,OAAO,CAE9G;AAED,uGAAuG;AACvG,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,SAAS,0BAA0B,EAAE,GAAG,SAAS,GAAG,MAAM,CAG9G;AAED;mEACmE;AACnE,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GAAG,gBAAgB,EAAE,CAQnG;AAED,0FAA0F;AAC1F,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAEpF;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAcpE;AAED,wGAAwG;AACxG,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAmC9E;AAyCD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAS1G;AAED,uGAAuG;AACvG,wBAAgB,WAAW,CAAC,MAAM,EAAE,eAAe,GAAG,eAAe,CAGpE;AAED,qGAAqG;AACrG,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,0BAA0B,CAAC;IACpC,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GAAG,oBAAoB,EAAE,CAMjG;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAEvF"}