@provian/mcp 0.0.0-stage → 1.2.1

package/dist/core/output-signature.js

@@ -0,0 +1,367 @@
+"use strict";
+/**
+ * OUTPUT SIGNATURE — the ONE definition of a signature over an output an agent or a person's device
+ * hands out, and of the citation that carries it :
+ *
+ * "every output an agent hands out carries its signature over the output's hash (SDK, MCP and
+ * facilitator responses). A citation counts toward the producer's consumption when it carries
+ * that signature."
+ * "1. The producer's signature only establishes who made the output. The citing act must still
+ * be witnessed, and the ring and self filters still apply …
+ * 2. Outputs produced on devices that don't hold the wallet key (the MacBook daemon, phones) are
+ * signed with that device's registered key and map to the owner through the same identity
+ * index, so human-device work earns consumption too."
+ *
+ * THIS FILE IS BYTE-IDENTICAL IN THREE PACKAGES and `scripts/check-meter-wire-parity.sh` refuses any
+ * drift:
+ * provian-backend/src/core/meter/output-signature.ts (the relay: verifies at intake)
+ * provian-agent-sdk/src/output-signature.ts (daemon + SDK: signs and cites)
+ * src/core/meter/output-signature.ts (the app: signs and cites)
+ * Pure: no I/O, no clock, no key material. Signing and verification are each package's own, over
+ * the message defined here; `docs/audit/output-signature-vectors.json` binds every package to the
+ * same bytes.
+ *
+ * WHAT IS SIGNED — one message for every key kind:
+ * hash `sha256:<64 lowercase hex>` of the output's exact bytes (what the consumer received).
+ * message `provian-output:v1:<64 lowercase hex>` (UTF-8). Domain-separated from every other
+ * Provian-signed message (none begins `provian-output:`; it is not base64url, so it can
+ * never be a device-signature preimage), and it carries the literal "provian", so the
+ * app's WalletConnect guard never lets a dApp obtain one (`provianReserved.ts`).
+ *
+ * WHO SIGNS — the producer's REGISTERED key, three kinds:
+ * wallet an agent's (or person's) wallet key, secp256k1. scheme `eip191_secp256k1` * `personal_sign` over the message; sig = 0x + 130 hex (r‖s‖v). id = the address
+ * (0x + 40 lowercase hex), resolved through the native wallet address index or a proven
+ * address registry.
+ * device a registered observer device (`devices/{id}` e.g. a human's MacBook daemon), its
+ * Secure-Enclave P-256 `signing_public_key`, or the P-256 output key a bearer device
+ * registered. scheme `p256_sha256` ECDSA P-256 over SHA-256(message); sig = 128
+ * lowercase hex (r‖s, low-s). id = the device id.
+ * app a phone running the Provian app: its hardware PE-attestation key
+ * (`provian_pe_attestation`, Secure Enclave / StrongBox — never the wallet key),
+ * registered once under wallet auth. scheme `p256_sha256`. id = `aok_` + 32 hex.
+ *
+ * HOW IT TRAVELS
+ * HTTP response header `Provian-Output-Signature: <base64url(canonical JSON of the object)>`.
+ * MCP/JSON the object itself under `provian_output_signature`.
+ * PE the consumer's next PE cites it as one `input_origins` entry:
+ * `{ hash, origin_identifier: "out:<kind>:<id>", witnessed, witness?, signature }`.
+ * The signature establishes WHO MADE the output (the owner of the citation edge); it
+ * never makes the citing act witnessed — that is the citing lane's own witness.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.THREAD_OUTPUT_SIGNATURE_TRAILER = exports.OUTPUT_SIGNER_SCHEMES = exports.OUTPUT_KEY_REGISTRATION_PREFIX = exports.OUTPUT_SIGNATURE_HEADER_MAX_LEN = exports.OUTPUT_CITATION_SCHEME = exports.OUTPUT_SIGNATURE_JSON_KEY = exports.OUTPUT_SIGNATURE_HEADER = exports.OUTPUT_SIGNATURE_MESSAGE_PREFIX = void 0;
+exports.outputHashOfBytes = outputHashOfBytes;
+exports.outputHashOfText = outputHashOfText;
+exports.canonicalOutputHash = canonicalOutputHash;
+exports.outputSignatureMessage = outputSignatureMessage;
+exports.outputSignatureDigestHex = outputSignatureDigestHex;
+exports.normalizeOutputSigner = normalizeOutputSigner;
+exports.normalizeOutputSignature = normalizeOutputSignature;
+exports.canonicalP256PublicKey = canonicalP256PublicKey;
+exports.appOutputKeyId = appOutputKeyId;
+exports.outputKeyRegistrationMessage = outputKeyRegistrationMessage;
+exports.encodeOutputSignatureHeader = encodeOutputSignatureHeader;
+exports.decodeOutputSignatureHeader = decodeOutputSignatureHeader;
+exports.outputCitationIdentifier = outputCitationIdentifier;
+exports.outputCitationSignerOf = outputCitationSignerOf;
+exports.outputCitationOrigin = outputCitationOrigin;
+exports.signedCitationOf = signedCitationOf;
+exports.forumPostOutputText = forumPostOutputText;
+exports.wantOutputText = wantOutputText;
+exports.jobPostOutputText = jobPostOutputText;
+exports.deliverableOutputText = deliverableOutputText;
+exports.withThreadOutputSignature = withThreadOutputSignature;
+exports.splitThreadOutputSignature = splitThreadOutputSignature;
+const meter_wire_1 = require("./meter-wire");
+const meter_hash_1 = require("./meter-hash");
+exports.OUTPUT_SIGNATURE_MESSAGE_PREFIX = 'provian-output:v1:';
+exports.OUTPUT_SIGNATURE_HEADER = 'Provian-Output-Signature';
+/** The JSON key a non-HTTP surface (an MCP tool result, a JSON body) carries the object under. */
+exports.OUTPUT_SIGNATURE_JSON_KEY = 'provian_output_signature';
+/** The `input_origins` class of a signed citation: `out:<kind>:<id>`. */
+exports.OUTPUT_CITATION_SCHEME = 'out:';
+/** Longest header value accepted (a wallet-signed object encodes to ~420 characters). */
+exports.OUTPUT_SIGNATURE_HEADER_MAX_LEN = 2048;
+/** The message a P-256 output key signs to prove possession when it is registered. */
+exports.OUTPUT_KEY_REGISTRATION_PREFIX = 'provian-output-key:v1:';
+const HASH_RE = /^sha256:[0-9a-f]{64}$/;
+const ADDRESS_RE = /^0x[0-9a-f]{40}$/;
+const DEVICE_ID_RE = /^[A-Za-z0-9_-]{1,200}$/;
+const APP_KEY_ID_RE = /^aok_[0-9a-f]{32}$/;
+const EIP191_SIG_RE = /^0x[0-9a-f]{130}$/;
+const P256_SIG_RE = /^[0-9a-f]{128}$/;
+const P256_PUBLIC_KEY_RE = /^04[0-9a-f]{128}$/;
+/** The scheme each signer kind signs with (one scheme per kind). */
+exports.OUTPUT_SIGNER_SCHEMES = Object.freeze({
+    wallet: 'eip191_secp256k1',
+    device: 'p256_sha256',
+    app: 'p256_sha256',
+});
+/** `sha256:<hex>` of an output's exact bytes. */
+function outputHashOfBytes(bytes) {
+    return `sha256:${(0, meter_wire_1.bytesToHexLower)((0, meter_hash_1.sha256Bytes)(bytes))}`;
+}
+/** `sha256:<hex>` of an output that is text (UTF-8). */
+function outputHashOfText(text) {
+    return outputHashOfBytes((0, meter_wire_1.utf8Bytes)(text));
+}
+/** The canonical form of an output hash (`sha256:` + 64 lowercase hex), or null. */
+function canonicalOutputHash(value) {
+    if (typeof value !== 'string')
+        return null;
+    const lower = value.trim().toLowerCase();
+    return HASH_RE.test(lower) ? lower : null;
+}
+/** The exact UTF-8 message every signer kind signs for an output hash. */
+function outputSignatureMessage(hash) {
+    const canonical = canonicalOutputHash(hash);
+    if (canonical === null)
+        throw new Error('output_signature_bad_hash');
+    return exports.OUTPUT_SIGNATURE_MESSAGE_PREFIX + canonical.slice('sha256:'.length);
+}
+/** SHA-256 (hex) of the message — the digest a P-256 signer (Secure Enclave, StrongBox) signs. */
+function outputSignatureDigestHex(hash) {
+    return (0, meter_wire_1.bytesToHexLower)((0, meter_hash_1.sha256Bytes)((0, meter_wire_1.utf8Bytes)(outputSignatureMessage(hash))));
+}
+/** The canonical form of a signer reference, or null. */
+function normalizeOutputSigner(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    const v = value;
+    if (typeof v.id !== 'string')
+        return null;
+    switch (v.kind) {
+        case 'wallet': {
+            const id = v.id.trim().toLowerCase();
+            return ADDRESS_RE.test(id) ? { kind: 'wallet', id } : null;
+        }
+        case 'device':
+            return DEVICE_ID_RE.test(v.id) ? { kind: 'device', id: v.id } : null;
+        case 'app': {
+            const id = v.id.trim().toLowerCase();
+            return APP_KEY_ID_RE.test(id) ? { kind: 'app', id } : null;
+        }
+        default:
+            return null;
+    }
+}
+/**
+ * The canonical form of a signature object, or null when it is not one. Shape only (the scheme must
+ * be the signer kind's scheme and the sig must have that scheme's shape): whether the signature
+ * verifies against the signer's registered key is the verifier's check (the relay's, at intake).
+ */
+function normalizeOutputSignature(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    const v = value;
+    const hash = canonicalOutputHash(v.hash);
+    const signer = normalizeOutputSigner(v.signer);
+    if (hash === null || signer === null || typeof v.sig !== 'string')
+        return null;
+    const scheme = exports.OUTPUT_SIGNER_SCHEMES[signer.kind];
+    if (v.scheme !== scheme)
+        return null;
+    const sig = v.sig.trim().toLowerCase();
+    if (scheme === 'eip191_secp256k1' ? !EIP191_SIG_RE.test(sig) : !P256_SIG_RE.test(sig))
+        return null;
+    return { hash, signer, scheme, sig };
+}
+/** The canonical SEC1 uncompressed P-256 public key (`04` + 128 hex, lowercase, no 0x), or null. */
+function canonicalP256PublicKey(value) {
+    if (typeof value !== 'string')
+        return null;
+    const v = value.trim().toLowerCase();
+    const hex = v.startsWith('0x') ? v.slice(2) : v;
+    return P256_PUBLIC_KEY_RE.test(hex) ? hex : null;
+}
+/** The registered id of an app output key: `aok_` + the first 32 hex of sha256(public key bytes). */
+function appOutputKeyId(publicKeyHex) {
+    const key = canonicalP256PublicKey(publicKeyHex);
+    if (key === null)
+        throw new Error('output_key_bad_public_key');
+    const bytes = new Uint8Array(key.length / 2);
+    for (let i = 0; i < bytes.length; i++)
+        bytes[i] = parseInt(key.slice(i * 2, i * 2 + 2), 16);
+    return `aok_${(0, meter_wire_1.bytesToHexLower)((0, meter_hash_1.sha256Bytes)(bytes)).slice(0, 32)}`;
+}
+/**
+ * The proof-of-possession message a P-256 output key signs (ECDSA P-256 over SHA-256 of it) when
+ * it is registered: bound to the key kind, the identity registering it, and the key itself.
+ */
+function outputKeyRegistrationMessage(kind, ownerId, publicKeyHex) {
+    const key = canonicalP256PublicKey(publicKeyHex);
+    if (key === null)
+        throw new Error('output_key_bad_public_key');
+    if (ownerId.length === 0 || ownerId.includes(':'))
+        throw new Error('output_key_bad_owner');
+    return `${exports.OUTPUT_KEY_REGISTRATION_PREFIX}${kind}:${ownerId}:${key}`;
+}
+// ─── base64url over ASCII (pure; the object's canonical JSON is ASCII-only) ─────
+const B64URL = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';
+function base64UrlOfAscii(text) {
+    let out = '';
+    for (let i = 0; i < text.length; i += 3) {
+        const a = text.charCodeAt(i);
+        const b = i + 1 < text.length ? text.charCodeAt(i + 1) : -1;
+        const c = i + 2 < text.length ? text.charCodeAt(i + 2) : -1;
+        out += B64URL[a >> 2];
+        out += B64URL[((a & 3) << 4) | (b < 0 ? 0 : b >> 4)];
+        if (b >= 0)
+            out += B64URL[((b & 15) << 2) | (c < 0 ? 0 : c >> 6)];
+        if (c >= 0)
+            out += B64URL[c & 63];
+    }
+    return out;
+}
+function asciiOfBase64Url(value) {
+    if (!/^[A-Za-z0-9_-]*$/.test(value) || value.length % 4 === 1)
+        return null;
+    let bits = 0;
+    let acc = 0;
+    let out = '';
+    for (let i = 0; i < value.length; i++) {
+        acc = ((acc << 6) | B64URL.indexOf(value[i])) & 0xffffff;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            const code = (acc >> bits) & 255;
+            if (code > 126 || code < 32)
+                return null;
+            out += String.fromCharCode(code);
+        }
+    }
+    return out;
+}
+/** The `Provian-Output-Signature` header value for a signature object. */
+function encodeOutputSignatureHeader(signature) {
+    const canonical = normalizeOutputSignature(signature);
+    if (canonical === null)
+        throw new Error('output_signature_bad_shape');
+    return base64UrlOfAscii((0, meter_wire_1.canonicalJson)(canonical));
+}
+/**
+ * Read a `Provian-Output-Signature` header value (base64url of the JSON object, or the JSON object
+ * itself), or null when it is not a well-formed signature object.
+ */
+function decodeOutputSignatureHeader(value) {
+    if (typeof value !== 'string')
+        return null;
+    const trimmed = value.trim();
+    if (trimmed.length === 0 || trimmed.length > exports.OUTPUT_SIGNATURE_HEADER_MAX_LEN)
+        return null;
+    const json = trimmed.startsWith('{') ? trimmed : asciiOfBase64Url(trimmed);
+    if (json === null)
+        return null;
+    try {
+        return normalizeOutputSignature(JSON.parse(json));
+    }
+    catch {
+        return null;
+    }
+}
+/** `out:<kind>:<id>` for a signer. */
+function outputCitationIdentifier(signer) {
+    const s = normalizeOutputSigner(signer);
+    if (s === null)
+        throw new Error('output_signature_bad_signer');
+    return `${exports.OUTPUT_CITATION_SCHEME}${s.kind}:${s.id}`;
+}
+/** The signer an `out:<kind>:<id>` identifier names, or null. */
+function outputCitationSignerOf(originIdentifier) {
+    if (typeof originIdentifier !== 'string' || !originIdentifier.startsWith(exports.OUTPUT_CITATION_SCHEME))
+        return null;
+    const rest = originIdentifier.slice(exports.OUTPUT_CITATION_SCHEME.length);
+    const colon = rest.indexOf(':');
+    if (colon <= 0)
+        return null;
+    const signer = normalizeOutputSigner({ kind: rest.slice(0, colon), id: rest.slice(colon + 1) });
+    // The identifier must already be canonical (it is hashed into the citer's PE).
+    return signer !== null && `${signer.kind}:${signer.id}` === rest ? signer : null;
+}
+/**
+ * The `input_origins` entry a consumer's next PE carries for an output it received signed. The
+ * `witness` is the CITING lane's own witness (e.g. the observer daemon's device) — never the
+ * producer: the producer's signature names the owner, not the act's witness. Without one the entry
+ * is `witnessed: false`, and whether a non-actor key vouched the citing act is the relay's call.
+ */
+function outputCitationOrigin(signature, citingWitness) {
+    const s = normalizeOutputSignature(signature);
+    if (s === null)
+        throw new Error('output_signature_bad_shape');
+    const base = { hash: s.hash, origin_identifier: outputCitationIdentifier(s.signer) };
+    return citingWitness
+        ? { ...base, witnessed: true, witness: { ...citingWitness }, signature: s }
+        : { ...base, witnessed: false, signature: s };
+}
+/**
+ * The signature carried on an `input_origins` entry when the entry is a well-formed signed citation
+ * (an `out:` identifier, a well-formed signature naming the same signer and the same hash), else
+ * null. Shape only — verification against the registered key is the verifier's.
+ */
+function signedCitationOf(origin) {
+    if (origin === null || typeof origin !== 'object' || Array.isArray(origin))
+        return null;
+    const o = origin;
+    const signer = outputCitationSignerOf(o.origin_identifier);
+    const signature = normalizeOutputSignature(o.signature);
+    if (signer === null || signature === null)
+        return null;
+    if (signature.signer.kind !== signer.kind || signature.signer.id !== signer.id)
+        return null;
+    if (signature.hash !== canonicalOutputHash(o.hash))
+        return null;
+    return signature;
+}
+// ─── Commons outputs : what each Commons write's signature covers ─────────────
+//
+// A person (or agent) signs the content a Commons write publishes, over EXACTLY the text whose
+// sha256 the write's PE seals in `output_digests`; the relay recomputes the same text from what it
+// stores, refuses a signature over anything else, keeps the signature beside the record
+// (`provian_output_signature`) and serves it with it, so a reader's witnessed act can cite it.
+function dedupLower(values) {
+    const out = [];
+    for (const v of values) {
+        const c = v.trim().toLowerCase();
+        if (c.length > 0 && !out.includes(c))
+            out.push(c);
+    }
+    return out;
+}
+/** A forum post or reply: its trimmed content. */
+function forumPostOutputText(content) {
+    return content.trim();
+}
+/** A want: its outcome, capabilities and preferred chains, normalized as the relay stores them. */
+function wantOutputText(outcome, capabilities, preferredChains = []) {
+    return JSON.stringify({ outcome: outcome.trim(), capabilities: dedupLower(capabilities), preferredChains: dedupLower(preferredChains) });
+}
+/** A hiring-board job post: its trimmed title and description. */
+function jobPostOutputText(title, description) {
+    return JSON.stringify({ title: title.trim(), description: description.trim() });
+}
+/** A job deliverable: its body when it has one, else its trimmed URI. */
+function deliverableOutputText(uri, body) {
+    const b = typeof body === 'string' ? body : '';
+    return b.length > 0 ? b : (typeof uri === 'string' ? uri.trim() : '');
+}
+/**
+ * A thread message is E2E ciphertext the relay cannot read, so its signature rides INSIDE the
+ * sealed plaintext as a trailing header line; the signature covers the message text before it.
+ */
+exports.THREAD_OUTPUT_SIGNATURE_TRAILER = `\n\n${exports.OUTPUT_SIGNATURE_HEADER}: `;
+function withThreadOutputSignature(text, signature) {
+    return `${text}${exports.THREAD_OUTPUT_SIGNATURE_TRAILER}${encodeOutputSignatureHeader(signature)}`;
+}
+/** Split a thread plaintext into its text and the signature over exactly that text (else null). */
+function splitThreadOutputSignature(plaintext) {
+    const at = plaintext.lastIndexOf(exports.THREAD_OUTPUT_SIGNATURE_TRAILER);
+    if (at < 0)
+        return { text: plaintext, signature: null };
+    const value = plaintext.slice(at + exports.THREAD_OUTPUT_SIGNATURE_TRAILER.length);
+    const signature = /^[A-Za-z0-9_-]+$/.test(value) ? decodeOutputSignatureHeader(value) : null;
+    const text = plaintext.slice(0, at);
+    if (signature === null || signature.hash !== outputHashOfText(text))
+        return { text: plaintext, signature: null };
+    return { text, signature };
+}
+//# sourceMappingURL=output-signature.js.map

package/dist/core/output-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-signature.js","sourceRoot":"","sources":["../../src/core/output-signature.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;;;AA0DH,8CAEC;AAGD,4CAEC;AAGD,kDAIC;AAGD,wDAIC;AAGD,4DAEC;AAGD,sDAkBC;AAOD,4DAWC;AAGD,wDAKC;AAGD,wCAMC;AAMD,oEAKC;AAuCD,kEAIC;AAMD,kEAWC;AAGD,4DAIC;AAGD,wDAQC;AAQD,oDAUC;AAOD,4CASC;AAmBD,kDAEC;AAGD,wCAEC;AAGD,8CAEC;AAGD,sDAGC;AAQD,8DAEC;AAGD,gEAQC;AA/TD,6CAAyE;AACzE,6CAA2C;AAE9B,QAAA,+BAA+B,GAAG,oBAAoB,CAAC;AACvD,QAAA,uBAAuB,GAAG,0BAA0B,CAAC;AAClE,kGAAkG;AACrF,QAAA,yBAAyB,GAAG,0BAA0B,CAAC;AACpE,yEAAyE;AAC5D,QAAA,sBAAsB,GAAG,MAAM,CAAC;AAC7C,yFAAyF;AAC5E,QAAA,+BAA+B,GAAG,IAAI,CAAC;AACpD,sFAAsF;AACzE,QAAA,8BAA8B,GAAG,wBAAwB,CAAC;AA4BvE,MAAM,OAAO,GAAG,uBAAuB,CAAC;AACxC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AACtC,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAC3C,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAE/C,oEAAoE;AACvD,QAAA,qBAAqB,GAA8D,MAAM,CAAC,MAAM,CAAC;IAC5G,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,aAAa;IACrB,GAAG,EAAE,aAAa;CACnB,CAAC,CAAC;AAEH,iDAAiD;AACjD,SAAgB,iBAAiB,CAAC,KAAiB;IACjD,OAAO,UAAU,IAAA,4BAAe,EAAC,IAAA,wBAAW,EAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,wDAAwD;AACxD,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,OAAO,iBAAiB,CAAC,IAAA,sBAAS,EAAC,IAAI,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,oFAAoF;AACpF,SAAgB,mBAAmB,CAAC,KAAc;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,0EAA0E;AAC1E,SAAgB,sBAAsB,CAAC,IAAY;IACjD,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACrE,OAAO,uCAA+B,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,kGAAkG;AAClG,SAAgB,wBAAwB,CAAC,IAAY;IACnD,OAAO,IAAA,4BAAe,EAAC,IAAA,wBAAW,EAAC,IAAA,sBAAS,EAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,yDAAyD;AACzD,SAAgB,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1C,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,OAAO,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,CAAC;QACD,KAAK,QAAQ;YACX,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvE,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,OAAO,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7D,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB,CAAC,KAAc;IACrD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrF,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,MAAM,GAAG,6BAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,MAAM,KAAK,kBAAkB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACnG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACvC,CAAC;AAED,oGAAoG;AACpG,SAAgB,sBAAsB,CAAC,KAAc;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,qGAAqG;AACrG,SAAgB,cAAc,CAAC,YAAoB;IACjD,MAAM,GAAG,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5F,OAAO,OAAO,IAAA,4BAAe,EAAC,IAAA,wBAAW,EAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACnE,CAAC;AAED;;;GAGG;AACH,SAAgB,4BAA4B,CAAC,IAAsB,EAAE,OAAe,EAAE,YAAoB;IACxG,MAAM,GAAG,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;IACjD,IAAI,GAAG,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC3F,OAAO,GAAG,sCAA8B,GAAG,IAAI,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;AACtE,CAAC;AAED,mFAAmF;AAEnF,MAAM,MAAM,GAAG,kEAAkE,CAAC;AAElF,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtB,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC;YAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC;YAAE,GAAG,IAAI,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3E,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;QACzD,IAAI,IAAI,CAAC,CAAC;QACV,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC;YACV,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,CAAC;YACjC,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE;gBAAE,OAAO,IAAI,CAAC;YACzC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AAC1E,SAAgB,2BAA2B,CAAC,SAA0B;IACpE,MAAM,SAAS,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,SAAS,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACtE,OAAO,gBAAgB,CAAC,IAAA,0BAAa,EAAC,SAAS,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAgB,2BAA2B,CAAC,KAAc;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,uCAA+B;QAAE,OAAO,IAAI,CAAC;IAC1F,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sCAAsC;AACtC,SAAgB,wBAAwB,CAAC,MAAoB;IAC3D,MAAM,CAAC,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC/D,OAAO,GAAG,8BAAsB,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,iEAAiE;AACjE,SAAgB,sBAAsB,CAAC,gBAAyB;IAC9D,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,8BAAsB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9G,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,CAAC,8BAAsB,CAAC,MAAM,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAChG,+EAA+E;IAC/E,OAAO,MAAM,KAAK,IAAI,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AACnF,CAAC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAClC,SAA0B,EAC1B,aAA+G;IAE/G,MAAM,CAAC,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,iBAAiB,EAAE,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACrF,OAAO,aAAa;QAClB,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,aAAa,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE;QAC3E,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB,CAAC,MAAe;IAC9C,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,MAAM,GAAG,sBAAsB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,MAAM,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5F,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,iFAAiF;AACjF,EAAE;AACF,+FAA+F;AAC/F,mGAAmG;AACnG,wFAAwF;AACxF,+FAA+F;AAE/F,SAAS,UAAU,CAAC,MAAyB;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,kDAAkD;AAClD,SAAgB,mBAAmB,CAAC,OAAe;IACjD,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,mGAAmG;AACnG,SAAgB,cAAc,CAAC,OAAe,EAAE,YAA+B,EAAE,kBAAqC,EAAE;IACtH,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;AAC3I,CAAC;AAED,kEAAkE;AAClE,SAAgB,iBAAiB,CAAC,KAAa,EAAE,WAAmB;IAClE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,yEAAyE;AACzE,SAAgB,qBAAqB,CAAC,GAA8B,EAAE,IAA+B;IACnG,MAAM,CAAC,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/C,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACU,QAAA,+BAA+B,GAAG,OAAO,+BAAuB,IAAI,CAAC;AAElF,SAAgB,yBAAyB,CAAC,IAAY,EAAE,SAA0B;IAChF,OAAO,GAAG,IAAI,GAAG,uCAA+B,GAAG,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED,mGAAmG;AACnG,SAAgB,0BAA0B,CAAC,SAAiB;IAC1D,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,uCAA+B,CAAC,CAAC;IAClE,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,uCAA+B,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7F,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACjH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAC7B,CAAC"}

package/dist/core/presentation.d.ts

@@ -0,0 +1,141 @@
+/**
+ * Burn-to-present — canonical binding + claims digest for the MCP `present` tool.
+ *
+ * SHARED CORE — canonical in `provian-mcp/src/core/`, mirrored byte-identically
+ * into `provian-backend/src/mcp/core/`. Edit only the canonical copy and run
+ * `scripts/sync-mcp-core.sh`.
+ *
+ * a presentation against a SIGNED challenge binds `provian-presentation-v2` the v1 lines
+ * plus `req=<requesterString>` and `chal_exp=<n>`; without a signed challenge the binding is v1,
+ * byte-identical to before. The challenge envelope itself lives in `challenge.ts`.
+ *
+ * A LINE-FOR-LINE PORT of `provian-agent-sdk/src/presentation.ts`
+ * (`claimsDigest` / `presentationBindingString` / `canonicalReputationDirective`)
+ * and the backend's `core/presentation/types.ts` the SAME bytes the presenter
+ * signs and the relay verifies. The MCP core cannot import the SDK (separate
+ * package) or the relay internals, so it carries its own audited copy, exactly as
+ * `crypto.ts` ports the SDK key handling. Pinned by a fixed-vector parity test
+ * (`presentation.test.ts`); a drift there means the presenter PoP would verify
+ * against the wrong bytes. Node-crypto-only (no npm deps), so the backend mirror
+ * compiles with nothing new.
+ */
+import { type CanonicalDisclosureRequest, type DisclosureAnswer, type DisclosureElection } from './disclosure-request';
+export declare const PRESENTATION_BINDING_TAG = "provian-presentation-v1";
+/** the binding tag for a presentation produced against a SIGNED challenge. */
+export declare const PRESENTATION_BINDING_TAG_V2 = "provian-presentation-v2";
+export declare const PRESENTATION_MIN_TTL_SECONDS = 60;
+export declare const PRESENTATION_MAX_TTL_SECONDS = 900;
+export declare const PRESENTATION_DEFAULT_TTL_SECONDS = 300;
+/** Clock skew every verifier tolerates past a deadline (seconds). */
+export declare const PRESENTATION_CLOCK_SKEW_SECONDS = 60;
+/** Challenge nonce length bounds (characters) and the audience length cap — mirror the relay. */
+export declare const PRESENTATION_CHALLENGE_MIN_LEN = 16;
+export declare const PRESENTATION_CHALLENGE_MAX_LEN = 512;
+export declare const PRESENTATION_AUDIENCE_MAX_LEN = 512;
+export type PresentationTier = 'pe_fact' | 'reputation';
+/** the VERIFIED requester a v2 presentation names (wallet keeps its lowercase address). */
+export interface PresentationRequester {
+    readonly type: 'domain' | 'wallet';
+    readonly id: string;
+    readonly address?: string;
+}
+/** `domain:<host>` | `wallet:<walletId>:<lowercase address>` — the signing-string / binding form. */
+export declare function requesterString(r: {
+    type: 'domain' | 'wallet';
+    id: string;
+    address?: string;
+}): string;
+/** §2.6: five comparisons + set membership (`in` over a numeric set). Mirrors the backend byte-for-byte. */
+export type PredicateOp = 'gte' | 'gt' | 'lte' | 'lt' | 'eq' | 'in';
+export declare const PREDICATE_OPS: readonly PredicateOp[];
+export declare const PREDICATE_SET_MAX = 64;
+export interface PredicateRequest {
+    readonly field: string;
+    readonly op: PredicateOp;
+    /** The comparison value (every op but `in`). */
+    readonly threshold?: number;
+    /** The membership set (`in` only). */
+    readonly set?: readonly number[];
+}
+export interface DisclosureDirective {
+    readonly redact?: readonly string[];
+    readonly predicates?: readonly PredicateRequest[];
+    /** Share-only mode : reveal ONLY Standing, the predicate answers and these fields. Exclusive with `redact`. */
+    readonly share?: readonly string[];
+}
+export type CanonicalPredicate = {
+    field: string;
+    op: string;
+    threshold: number;
+} | {
+    field: string;
+    op: 'in';
+    set: number[];
+};
+/** One predicate in canonical form: `in` carries a sorted, de-duplicated set; every other op its threshold. */
+export declare function canonicalPredicate(p: PredicateRequest): CanonicalPredicate;
+/**
+ * Parse an untrusted predicate list into well-formed requests, fail-closed (`null` on any malformed
+ * entry). Mirrors the backend `normalizePredicateRequests`.
+ */
+export declare function normalizePredicateRequests(raw: unknown): PredicateRequest[] | null;
+/** Two predicates are the same request when their canonical forms are byte-identical. */
+export declare function predicateMatchesRequest(answered: PredicateRequest, requested: PredicateRequest): boolean;
+/** Canonical, order-independent disclosure directive — matches SDK + backend. */
+export declare function canonicalReputationDirective(directive: DisclosureDirective): {
+    redact: string[];
+    predicates: CanonicalPredicate[];
+    share?: string[];
+};
+/** A PE fact the presenter vouches for: its id and its anchored content hash. */
+export interface PeFact {
+    peId: string;
+    envelopeHash: string;
+    /**
+     * PE meter: the PE itself (v2) and its two-hop inclusion proof. The relay keeps no PE, so a
+     * pe_fact presentation carries them; the claims digest still binds only peId + envelopeHash.
+     */
+    pe?: Readonly<Record<string, unknown>>;
+    inclusion?: Readonly<Record<string, unknown>>;
+}
+/** Tier-specific claims digest — matches SDK + backend claimsDigest. */
+export declare function claimsDigest(input: {
+    tier: PresentationTier;
+    peFacts?: readonly PeFact[];
+    directive?: DisclosureDirective;
+    disclosures?: readonly DisclosureAnswer[];
+}): string;
+/** One record the presenter puts forward for a disclosure request: the PE and its two-hop proof. */
+export interface DisclosedPeRecord {
+    readonly peId: string;
+    readonly envelopeHash: string;
+    readonly pe: Record<string, unknown>;
+    readonly inclusion: Record<string, unknown>;
+}
+/** The presenter's answer to one requester-named disclosure request. */
+export interface DisclosureAnswerInput {
+    readonly request: CanonicalDisclosureRequest;
+    readonly election: DisclosureElection;
+    readonly records?: readonly DisclosedPeRecord[];
+}
+/** The identity-only commitment the presenter signs for its disclosure answers (mirrors the SDK). */
+export declare function disclosureAnswersForCommitment(answers: readonly DisclosureAnswerInput[]): DisclosureAnswer[];
+/**
+ * The canonical binding string the presenter signs — matches SDK + backend. With a signed challenge
+ * (`requester` AND `chalExp`) it is v2: the v2 tag, the same lines, then `req=` and `chal_exp=`.
+ */
+export declare function presentationBindingString(fields: {
+    tier: PresentationTier;
+    presenterAddress: string;
+    aud: string;
+    chal: string;
+    iat: number;
+    exp: number;
+    jti: string;
+    burnId: string;
+    claimsDigest: string;
+    /** v2 (signed challenge) only — both or neither. */
+    requester?: PresentationRequester;
+    chalExp?: number;
+}): string;
+//# sourceMappingURL=presentation.d.ts.map

package/dist/core/presentation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"presentation.d.ts","sourceRoot":"","sources":["../../src/core/presentation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAGH,OAAO,EAA8B,KAAK,0BAA0B,EAAE,KAAK,gBAAgB,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEnJ,eAAO,MAAM,wBAAwB,4BAA4B,CAAC;AAClE,8EAA8E;AAC9E,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AACrE,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAChD,eAAO,MAAM,gCAAgC,MAAM,CAAC;AACpD,qEAAqE;AACrE,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAClD,iGAAiG;AACjG,eAAO,MAAM,8BAA8B,KAAK,CAAC;AACjD,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAClD,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,YAAY,CAAC;AAExD,2FAA2F;AAC3F,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qGAAqG;AACrG,wBAAgB,eAAe,CAAC,CAAC,EAAE;IAAE,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAEtG;AAED,4GAA4G;AAC5G,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AACpE,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAA2C,CAAC;AAC5F,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC;IACzB,gDAAgD;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AACD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD,+GAA+G;IAC/G,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AACD,MAAM,MAAM,kBAAkB,GAC1B;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAM/C,+GAA+G;AAC/G,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,gBAAgB,GAAG,kBAAkB,CAM1E;AAMD;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,EAAE,GAAG,IAAI,CAoBlF;AAED,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAExG;AAMD,iFAAiF;AACjF,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,mBAAmB,GAAG;IAC5E,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,kBAAkB,EAAE,CAAC;IACjC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB,CASA;AAED,iFAAiF;AACjF,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACvC,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC/C;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAAC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAAE,GAAG,MAAM,CAU/K;AAED,oGAAoG;AACpG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,wEAAwE;AACxE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD;AAED,qGAAqG;AACrG,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,GAAG,gBAAgB,EAAE,CAM5G;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE;IAChD,IAAI,EAAE,gBAAgB,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,SAAS,CAAC,EAAE,qBAAqB,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,MAAM,CAgBT"}