@zanii/core 0.1.0

package/dist/delegation.js

@@ -0,0 +1,110 @@
+import { ed25519 } from '@noble/curves/ed25519';
+import { canonicalBytes, decodeSig, encodeSig, jcsHash } from './encoding.js';
+import { publicKeyFromDid } from './keys.js';
+export function createCert(fields, issuerPrivateKey) {
+    if (fields.scopes.length === 0)
+        throw new Error('cert must grant at least one scope');
+    if (Number.isNaN(Date.parse(fields.exp)))
+        throw new Error(`invalid exp timestamp: ${fields.exp}`);
+    const unsigned = { v: 1, ...fields };
+    const sig = ed25519.sign(canonicalBytes(unsigned), issuerPrivateKey);
+    return { ...unsigned, sig: encodeSig(sig) };
+}
+/** Hash of the full cert (incl. sig) — the revocation identifier. */
+export function certHash(cert) {
+    return jcsHash(cert);
+}
+/** Does `scope` cover `target`? `a.*` covers `a`, `a.b`, `a.b.c`, `a.*`; `*` covers all. */
+export function scopeCovers(scope, target) {
+    if (scope === '*')
+        return true;
+    if (scope === target)
+        return true;
+    if (scope.endsWith('.*')) {
+        const prefix = scope.slice(0, -2);
+        return target === prefix || target.startsWith(prefix + '.');
+    }
+    return false;
+}
+export function scopesAllow(scopes, target) {
+    return scopes.some((s) => scopeCovers(s, target));
+}
+export function createRevocation(cert, ts, issuerPrivateKey) {
+    if (Number.isNaN(Date.parse(ts)))
+        throw new Error(`invalid ts timestamp: ${ts}`);
+    const unsigned = { v: 1, type: 'revocation', cert, ts };
+    const sig = ed25519.sign(canonicalBytes(unsigned), issuerPrivateKey);
+    return { ...unsigned, sig: encodeSig(sig) };
+}
+/** Valid iff the embedded cert verifies AND the record is signed by the cert's issuer. */
+export function verifyRevocation(record) {
+    if (record.v !== 1 || record.type !== 'revocation')
+        return false;
+    if (!record.cert || !verifyCertSignature(record.cert))
+        return false;
+    const pub = publicKeyFromDid(record.cert.issuer);
+    const sig = decodeSig(record.sig);
+    if (!pub || !sig)
+        return false;
+    const { sig: _omitted, ...unsigned } = record;
+    try {
+        return ed25519.verify(sig, canonicalBytes(unsigned), pub);
+    }
+    catch {
+        return false;
+    }
+}
+export function verifyCertSignature(cert) {
+    const pub = publicKeyFromDid(cert.issuer);
+    const sig = decodeSig(cert.sig);
+    if (!pub || !sig)
+        return false;
+    const { sig: _omitted, ...unsigned } = cert;
+    try {
+        return ed25519.verify(sig, canonicalBytes(unsigned), pub);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Validate a delegation chain (root first) per SPEC §2.
+ * `at` defaults to now; `revoked` is a set of cert hashes.
+ */
+export function verifyChain(chain, opts) {
+    if (!Array.isArray(chain) || chain.length === 0)
+        return { ok: false, error: 'empty delegation chain' };
+    const at = opts.at ?? new Date();
+    const root = chain[0];
+    if (opts.expectedRoot && root.issuer !== opts.expectedRoot) {
+        return { ok: false, error: `root issuer ${root.issuer} is not expected owner ${opts.expectedRoot}` };
+    }
+    if (chain[chain.length - 1].subject !== opts.agentId) {
+        return { ok: false, error: 'chain does not terminate at the agent' };
+    }
+    // Fold scopes down the chain: a delegate can only narrow, never widen.
+    // ponytail: widening scopes are silently dropped, not rejected — reject-on-widen when policy UX exists (Phase 2)
+    let effectiveScopes = [];
+    for (let i = 0; i < chain.length; i++) {
+        const cert = chain[i];
+        if (cert.v !== 1)
+            return { ok: false, error: `cert ${i}: unsupported version` };
+        if (i > 0 && cert.issuer !== chain[i - 1].subject) {
+            return { ok: false, error: `cert ${i}: issuer does not match previous subject` };
+        }
+        const exp = Date.parse(cert.exp);
+        if (Number.isNaN(exp))
+            return { ok: false, error: `cert ${i}: invalid exp` };
+        if (at.getTime() >= exp)
+            return { ok: false, error: `cert ${i}: expired` };
+        if (opts.revoked?.has(certHash(cert)))
+            return { ok: false, error: `cert ${i}: revoked` };
+        if (!verifyCertSignature(cert))
+            return { ok: false, error: `cert ${i}: bad signature` };
+        effectiveScopes = i === 0 ? [...cert.scopes] : cert.scopes.filter((s) => scopesAllow(effectiveScopes, s));
+    }
+    if (effectiveScopes.length === 0)
+        return { ok: false, error: 'chain grants no effective scopes' };
+    return { ok: true, effectiveScopes };
+}
+//# sourceMappingURL=delegation.js.map

package/dist/delegation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation.js","sourceRoot":"","sources":["../src/delegation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAkB7C,MAAM,UAAU,UAAU,CACxB,MAA0E,EAC1E,gBAA4B;IAE5B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACtF,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAU,EAAE,GAAG,MAAM,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,QAAQ,CAAC,IAAoB;IAC3C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAc;IACvD,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAgB,EAAE,MAAc;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC;AAWD,MAAM,UAAU,gBAAgB,CAAC,IAAoB,EAAE,EAAU,EAAE,gBAA4B;IAC7F,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,EAAE,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAU,EAAE,IAAI,EAAE,YAAqB,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC1E,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,GAAG,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAoB;IACtD,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,KAAuB,EACvB,IAAkF;IAElF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;IACvG,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAEvB,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,IAAI,CAAC,MAAM,0BAA0B,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACtD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;IACvE,CAAC;IAED,uEAAuE;IACvE,iHAAiH;IACjH,IAAI,eAAe,GAAa,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,uBAAuB,EAAE,CAAC;QAChF,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,OAAO,EAAE,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,0CAA0C,EAAE,CAAC;QACnF,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,eAAe,EAAE,CAAC;QAC7E,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC3E,IAAI,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QACzF,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAExF,eAAe,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;IAClG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACvC,CAAC"}

package/dist/encoding.d.ts

@@ -0,0 +1,8 @@
+/** RFC 8785 canonical JSON, UTF-8 bytes. Throws on non-serializable input. */
+export declare function canonicalBytes(obj: unknown): Uint8Array;
+/** `sha256:<hex>` of the JCS form of obj. */
+export declare function jcsHash(obj: unknown): string;
+export declare function encodeSig(sig: Uint8Array): string;
+/** Returns null instead of throwing: verification paths must not crash on malformed input. */
+export declare function decodeSig(s: string): Uint8Array | null;
+//# sourceMappingURL=encoding.d.ts.map

package/dist/encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../src/encoding.ts"],"names":[],"mappings":"AAOA,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAIvD;AAED,6CAA6C;AAC7C,wBAAgB,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAE5C;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,UAAU,GAAG,MAAM,CAEjD;AAED,8FAA8F;AAC9F,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAKtD"}

package/dist/encoding.js

@@ -0,0 +1,29 @@
+import { sha256 } from '@noble/hashes/sha256';
+import { bytesToHex, hexToBytes } from '@noble/hashes/utils';
+import canonicalizeImport from 'canonicalize';
+// canonicalize is CJS (`module.exports = fn`) with a .d.ts that hides the call signature
+const canonicalizeJson = canonicalizeImport;
+/** RFC 8785 canonical JSON, UTF-8 bytes. Throws on non-serializable input. */
+export function canonicalBytes(obj) {
+    const s = canonicalizeJson(obj);
+    if (typeof s !== 'string')
+        throw new Error('value is not canonicalizable JSON');
+    return new TextEncoder().encode(s);
+}
+/** `sha256:<hex>` of the JCS form of obj. */
+export function jcsHash(obj) {
+    return `sha256:${bytesToHex(sha256(canonicalBytes(obj)))}`;
+}
+export function encodeSig(sig) {
+    return `ed25519:${bytesToHex(sig)}`;
+}
+/** Returns null instead of throwing: verification paths must not crash on malformed input. */
+export function decodeSig(s) {
+    if (typeof s !== 'string' || !s.startsWith('ed25519:'))
+        return null;
+    const hex = s.slice('ed25519:'.length);
+    if (!/^[0-9a-f]{128}$/.test(hex))
+        return null;
+    return hexToBytes(hex);
+}
+//# sourceMappingURL=encoding.js.map

package/dist/encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../src/encoding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,kBAAkB,MAAM,cAAc,CAAC;AAE9C,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,kBAAmE,CAAC;AAE7F,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAChF,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,OAAO,CAAC,GAAY;IAClC,OAAO,UAAU,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAe;IACvC,OAAO,WAAW,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+export { generateKeypair, didFromPublicKey, publicKeyFromDid, type Keypair } from './keys.js';
+export { canonicalBytes, jcsHash } from './encoding.js';
+export { createCert, certHash, createRevocation, verifyRevocation, verifyCertSignature, verifyChain, scopeCovers, scopesAllow, type DelegationCert, type RevocationRecord, type ChainResult, } from './delegation.js';
+export { leafHash, merkleRoot, inclusionProof, verifyInclusion, consistencyProof, verifyConsistency, } from './merkle.js';
+export { createSTH, verifySTH, type SignedTreeHead } from './sth.js';
+export { buildA2ABody, signA2ABody, assembleA2AReceipt, a2aHash, bodyOf, verifyA2AReceipt, participantsOf, prevFor, type A2AReceipt, type A2ABody, type A2AParty, } from './a2a.js';
+export { verifyAuditBundle, type AuditBundle, type BundledReceipt, type BundledRevocation, type BundledAnchor, type BundleReport, type BundleCheck, } from './bundle.js';
+export { createReceipt, receiptHash, hashPayload, verifyReceipt, verifyReceiptSignature, verifyReceiptChain, type Receipt, type VerifyResult, } from './receipt.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EACL,UAAU,EACV,QAAQ,EACR,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,WAAW,EACX,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,QAAQ,EACR,UAAU,EACV,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,cAAc,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,OAAO,EACP,MAAM,EACN,gBAAgB,EAChB,cAAc,EACd,OAAO,EACP,KAAK,UAAU,EACf,KAAK,OAAO,EACZ,KAAK,QAAQ,GACd,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,iBAAiB,EACjB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,iBAAiB,EACtB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,kBAAkB,EAClB,KAAK,OAAO,EACZ,KAAK,YAAY,GAClB,MAAM,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,9 @@
+export { generateKeypair, didFromPublicKey, publicKeyFromDid } from './keys.js';
+export { canonicalBytes, jcsHash } from './encoding.js';
+export { createCert, certHash, createRevocation, verifyRevocation, verifyCertSignature, verifyChain, scopeCovers, scopesAllow, } from './delegation.js';
+export { leafHash, merkleRoot, inclusionProof, verifyInclusion, consistencyProof, verifyConsistency, } from './merkle.js';
+export { createSTH, verifySTH } from './sth.js';
+export { buildA2ABody, signA2ABody, assembleA2AReceipt, a2aHash, bodyOf, verifyA2AReceipt, participantsOf, prevFor, } from './a2a.js';
+export { verifyAuditBundle, } from './bundle.js';
+export { createReceipt, receiptHash, hashPayload, verifyReceipt, verifyReceiptSignature, verifyReceiptChain, } from './receipt.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAgB,MAAM,WAAW,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EACL,UAAU,EACV,QAAQ,EACR,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,WAAW,EACX,WAAW,GAIZ,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,QAAQ,EACR,UAAU,EACV,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAuB,MAAM,UAAU,CAAC;AACrE,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,OAAO,EACP,MAAM,EACN,gBAAgB,EAChB,cAAc,EACd,OAAO,GAIR,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,iBAAiB,GAOlB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,kBAAkB,GAGnB,MAAM,cAAc,CAAC"}

package/dist/keys.d.ts

@@ -0,0 +1,10 @@
+export interface Keypair {
+    privateKey: Uint8Array;
+    publicKey: Uint8Array;
+    did: string;
+}
+export declare function generateKeypair(): Keypair;
+export declare function didFromPublicKey(publicKey: Uint8Array): string;
+/** Returns null instead of throwing: verification paths must not crash on malformed input. */
+export declare function publicKeyFromDid(did: string): Uint8Array | null;
+//# sourceMappingURL=keys.d.ts.map

package/dist/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,OAAO;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,eAAe,IAAI,OAAO,CAIzC;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAM9D;AAED,8FAA8F;AAC9F,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAU/D"}

package/dist/keys.js

@@ -0,0 +1,33 @@
+import { ed25519 } from '@noble/curves/ed25519';
+import { base58 } from '@scure/base';
+const ED25519_MULTICODEC = Uint8Array.from([0xed, 0x01]);
+const DID_PREFIX = 'did:key:z';
+export function generateKeypair() {
+    const privateKey = ed25519.utils.randomPrivateKey();
+    const publicKey = ed25519.getPublicKey(privateKey);
+    return { privateKey, publicKey, did: didFromPublicKey(publicKey) };
+}
+export function didFromPublicKey(publicKey) {
+    if (publicKey.length !== 32)
+        throw new Error('ed25519 public key must be 32 bytes');
+    const prefixed = new Uint8Array(2 + 32);
+    prefixed.set(ED25519_MULTICODEC);
+    prefixed.set(publicKey, 2);
+    return DID_PREFIX + base58.encode(prefixed);
+}
+/** Returns null instead of throwing: verification paths must not crash on malformed input. */
+export function publicKeyFromDid(did) {
+    if (typeof did !== 'string' || !did.startsWith(DID_PREFIX))
+        return null;
+    let decoded;
+    try {
+        decoded = base58.decode(did.slice(DID_PREFIX.length));
+    }
+    catch {
+        return null;
+    }
+    if (decoded.length !== 34 || decoded[0] !== 0xed || decoded[1] !== 0x01)
+        return null;
+    return decoded.slice(2);
+}
+//# sourceMappingURL=keys.js.map

package/dist/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,kBAAkB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACzD,MAAM,UAAU,GAAG,WAAW,CAAC;AAQ/B,MAAM,UAAU,eAAe;IAC7B,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAqB;IACpD,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC3B,OAAO,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,OAAmB,CAAC;IACxB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC"}

package/dist/merkle.d.ts

@@ -0,0 +1,12 @@
+/** SHA-256(0x00 || data) */
+export declare function leafHash(data: Uint8Array): Uint8Array;
+export declare function merkleRoot(leafHashes: Uint8Array[]): Uint8Array;
+/** Audit path for leaf `index` in a tree of the given leaf hashes (RFC 6962 §2.1.1). */
+export declare function inclusionProof(index: number, leafHashes: Uint8Array[]): Uint8Array[];
+/** RFC 9162 §2.1.3.2. Pure; returns false on any malformed input. */
+export declare function verifyInclusion(leaf: Uint8Array, index: number, size: number, proof: Uint8Array[], root: Uint8Array): boolean;
+/** Consistency proof from tree size m to the current tree (RFC 6962 §2.1.2). */
+export declare function consistencyProof(m: number, leafHashes: Uint8Array[]): Uint8Array[];
+/** RFC 9162 §2.1.4.2. Pure; returns false on any malformed input. */
+export declare function verifyConsistency(size1: number, size2: number, root1: Uint8Array, root2: Uint8Array, proof: Uint8Array[]): boolean;
+//# sourceMappingURL=merkle.d.ts.map

package/dist/merkle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.d.ts","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AASA,4BAA4B;AAC5B,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAKrD;AAmBD,wBAAgB,UAAU,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,UAAU,CAM/D;AAED,wFAAwF;AACxF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAUpF;AAID,qEAAqE;AACrE,wBAAgB,eAAe,CAC7B,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,UAAU,EAAE,EACnB,IAAI,EAAE,UAAU,GACf,OAAO,CAuBT;AAED,gFAAgF;AAChF,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAOlF;AAWD,qEAAqE;AACrE,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,EAAE,GAClB,OAAO,CAsCT"}

package/dist/merkle.js

@@ -0,0 +1,146 @@
+/**
+ * RFC 6962 / RFC 9162 Merkle tree: root, inclusion proofs, consistency proofs.
+ * All functions operate on arrays of *leaf hashes* (already 0x00-prefixed-hashed).
+ */
+import { sha256 } from '@noble/hashes/sha256';
+const LEAF_PREFIX = 0x00;
+const NODE_PREFIX = 0x01;
+/** SHA-256(0x00 || data) */
+export function leafHash(data) {
+    const buf = new Uint8Array(1 + data.length);
+    buf[0] = LEAF_PREFIX;
+    buf.set(data, 1);
+    return sha256(buf);
+}
+function nodeHash(left, right) {
+    const buf = new Uint8Array(1 + 64);
+    buf[0] = NODE_PREFIX;
+    buf.set(left, 1);
+    buf.set(right, 33);
+    return sha256(buf);
+}
+/** Largest power of two strictly less than n (n >= 2). */
+function split(n) {
+    let k = 1;
+    while (k * 2 < n)
+        k *= 2;
+    return k;
+}
+// ponytail: recursive slices, O(n log n) per call — swap for an incremental level-cached tree past ~100k leaves
+export function merkleRoot(leafHashes) {
+    const n = leafHashes.length;
+    if (n === 0)
+        return sha256(new Uint8Array(0));
+    if (n === 1)
+        return leafHashes[0];
+    const k = split(n);
+    return nodeHash(merkleRoot(leafHashes.slice(0, k)), merkleRoot(leafHashes.slice(k)));
+}
+/** Audit path for leaf `index` in a tree of the given leaf hashes (RFC 6962 §2.1.1). */
+export function inclusionProof(index, leafHashes) {
+    const n = leafHashes.length;
+    if (!Number.isInteger(index) || index < 0 || index >= n) {
+        throw new Error(`leaf index ${index} out of range for tree size ${n}`);
+    }
+    if (n === 1)
+        return [];
+    const k = split(n);
+    return index < k
+        ? [...inclusionProof(index, leafHashes.slice(0, k)), merkleRoot(leafHashes.slice(k))]
+        : [...inclusionProof(index - k, leafHashes.slice(k)), merkleRoot(leafHashes.slice(0, k))];
+}
+const eq = (a, b) => a.length === b.length && a.every((x, i) => x === b[i]);
+/** RFC 9162 §2.1.3.2. Pure; returns false on any malformed input. */
+export function verifyInclusion(leaf, index, size, proof, root) {
+    if (!Number.isInteger(index) || !Number.isInteger(size) || index < 0 || index >= size)
+        return false;
+    let fn = index;
+    let sn = size - 1;
+    let r = leaf;
+    for (const p of proof) {
+        if (p.length !== 32)
+            return false;
+        if (sn === 0)
+            return false;
+        if (fn % 2 === 1 || fn === sn) {
+            r = nodeHash(p, r);
+            if (fn % 2 === 0) {
+                while (fn % 2 === 0 && fn !== 0) {
+                    fn = Math.floor(fn / 2);
+                    sn = Math.floor(sn / 2);
+                }
+            }
+        }
+        else {
+            r = nodeHash(r, p);
+        }
+        fn = Math.floor(fn / 2);
+        sn = Math.floor(sn / 2);
+    }
+    return sn === 0 && eq(r, root);
+}
+/** Consistency proof from tree size m to the current tree (RFC 6962 §2.1.2). */
+export function consistencyProof(m, leafHashes) {
+    const n = leafHashes.length;
+    if (!Number.isInteger(m) || m < 1 || m > n) {
+        throw new Error(`old size ${m} out of range for tree size ${n}`);
+    }
+    if (m === n)
+        return [];
+    return subproof(m, leafHashes, true);
+}
+function subproof(m, leafHashes, complete) {
+    const n = leafHashes.length;
+    if (m === n)
+        return complete ? [] : [merkleRoot(leafHashes)];
+    const k = split(n);
+    return m <= k
+        ? [...subproof(m, leafHashes.slice(0, k), complete), merkleRoot(leafHashes.slice(k))]
+        : [...subproof(m - k, leafHashes.slice(k), false), merkleRoot(leafHashes.slice(0, k))];
+}
+/** RFC 9162 §2.1.4.2. Pure; returns false on any malformed input. */
+export function verifyConsistency(size1, size2, root1, root2, proof) {
+    if (!Number.isInteger(size1) || !Number.isInteger(size2) || size1 < 0 || size1 > size2)
+        return false;
+    if (size1 === size2)
+        return proof.length === 0 && eq(root1, root2);
+    if (size1 === 0)
+        return proof.length === 0;
+    if (proof.length === 0)
+        return false;
+    const path = [...proof];
+    // If size1 is an exact power of two, root1 is itself the first component.
+    if ((size1 & (size1 - 1)) === 0)
+        path.unshift(root1);
+    let fn = size1 - 1;
+    let sn = size2 - 1;
+    while (fn % 2 === 1) {
+        fn = Math.floor(fn / 2);
+        sn = Math.floor(sn / 2);
+    }
+    let fr = path[0];
+    let sr = path[0];
+    for (const c of path.slice(1)) {
+        if (c.length !== 32)
+            return false;
+        if (sn === 0)
+            return false;
+        if (fn % 2 === 1 || fn === sn) {
+            fr = nodeHash(c, fr);
+            sr = nodeHash(c, sr);
+            if (fn % 2 === 0) {
+                while (fn % 2 === 0 && fn !== 0) {
+                    fn = Math.floor(fn / 2);
+                    sn = Math.floor(sn / 2);
+                }
+            }
+        }
+        else {
+            sr = nodeHash(sr, c);
+        }
+        fn = Math.floor(fn / 2);
+        sn = Math.floor(sn / 2);
+    }
+    return sn === 0 && eq(fr, root1) && eq(sr, root2);
+}
+//# sourceMappingURL=merkle.js.map

package/dist/merkle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merkle.js","sourceRoot":"","sources":["../src/merkle.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAE9C,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB,4BAA4B;AAC5B,MAAM,UAAU,QAAQ,CAAC,IAAgB;IACvC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5C,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;IACrB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAgB,EAAE,KAAiB;IACnD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC;IACrB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACjB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,0DAA0D;AAC1D,SAAS,KAAK,CAAC,CAAS;IACtB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC;AACX,CAAC;AAED,gHAAgH;AAEhH,MAAM,UAAU,UAAU,CAAC,UAAwB;IACjD,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,CAAC,CAAE,CAAC;IACnC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnB,OAAO,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,UAAwB;IACpE,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,cAAc,KAAK,+BAA+B,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnB,OAAO,KAAK,GAAG,CAAC;QACd,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,EAAE,GAAG,CAAC,CAAa,EAAE,CAAa,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEpG,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAC7B,IAAgB,EAChB,KAAa,EACb,IAAY,EACZ,KAAmB,EACnB,IAAgB;IAEhB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IACpG,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC;IAClB,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9B,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnB,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjB,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;oBAChC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBACxB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrB,CAAC;QACD,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACxB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACjC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,CAAS,EAAE,UAAwB;IAClE,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,QAAQ,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,UAAwB,EAAE,QAAiB;IACtE,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC5B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC;QACX,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,KAAa,EACb,KAAiB,EACjB,KAAiB,EACjB,KAAmB;IAEnB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK;QAAE,OAAO,KAAK,CAAC;IACrG,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAErC,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IACxB,0EAA0E;IAC1E,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAErD,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC;IACnB,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC;IACnB,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACxB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IAClB,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,EAAE,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAC9B,EAAE,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,EAAE,GAAG,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACrB,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjB,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;oBAChC,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;oBACxB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;gBAC1B,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACvB,CAAC;QACD,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACxB,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC"}

package/dist/receipt.d.ts

@@ -0,0 +1,49 @@
+import { type DelegationCert } from './delegation.js';
+export interface Receipt {
+    v: 1;
+    agent_id: string;
+    delegation: DelegationCert[];
+    action: string;
+    target: string;
+    payload_hash: string;
+    ts: string;
+    prev: string | null;
+    sig: string;
+}
+export interface VerifyResult {
+    ok: boolean;
+    error?: string;
+}
+export declare function hashPayload(payload: Uint8Array | string): string;
+export declare function createReceipt(fields: {
+    agentId: string;
+    delegation: DelegationCert[];
+    action: string;
+    target: string;
+    payloadHash: string;
+    ts: string;
+    prev: string | null;
+}, agentPrivateKey: Uint8Array): Receipt;
+/** Hash of the full receipt (incl. sig) — what the next receipt's `prev` points to. */
+export declare function receiptHash(receipt: Receipt): string;
+export declare function verifyReceiptSignature(receipt: Receipt): boolean;
+/**
+ * Full single-receipt verification per SPEC §4:
+ * signature → delegation chain (at receipt time) → scope covers target → prev linkage.
+ */
+export declare function verifyReceipt(receipt: Receipt, opts?: {
+    expectedOwner?: string;
+    revoked?: Set<string>;
+    expectedPrev?: string | null;
+}): VerifyResult;
+/**
+ * Verify an agent's full receipt sequence: every receipt valid and hash-linked
+ * to the one before it. Returns the index of the first bad receipt on failure.
+ */
+export declare function verifyReceiptChain(receipts: Receipt[], opts?: {
+    expectedOwner?: string;
+    revoked?: Set<string>;
+}): VerifyResult & {
+    failedIndex?: number;
+};
+//# sourceMappingURL=receipt.d.ts.map

package/dist/receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../src/receipt.ts"],"names":[],"mappings":"AAKA,OAAO,EAA4B,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEhF,MAAM,WAAW,OAAO;IACtB,CAAC,EAAE,CAAC,CAAC;IACL,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAGhE;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE;IACN,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB,EACD,eAAe,EAAE,UAAU,GAC1B,OAAO,CAcT;AAED,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEpD;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAUhE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACzF,YAAY,CAwBd;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,OAAO,EAAE,EACnB,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CAAO,GAC3D,YAAY,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,CASzC"}

package/dist/receipt.js

@@ -0,0 +1,87 @@
+import { ed25519 } from '@noble/curves/ed25519';
+import { sha256 } from '@noble/hashes/sha256';
+import { bytesToHex } from '@noble/hashes/utils';
+import { canonicalBytes, decodeSig, encodeSig, jcsHash } from './encoding.js';
+import { publicKeyFromDid } from './keys.js';
+import { scopesAllow, verifyChain } from './delegation.js';
+export function hashPayload(payload) {
+    const bytes = typeof payload === 'string' ? new TextEncoder().encode(payload) : payload;
+    return `sha256:${bytesToHex(sha256(bytes))}`;
+}
+export function createReceipt(fields, agentPrivateKey) {
+    if (Number.isNaN(Date.parse(fields.ts)))
+        throw new Error(`invalid ts timestamp: ${fields.ts}`);
+    const unsigned = {
+        v: 1,
+        agent_id: fields.agentId,
+        delegation: fields.delegation,
+        action: fields.action,
+        target: fields.target,
+        payload_hash: fields.payloadHash,
+        ts: fields.ts,
+        prev: fields.prev,
+    };
+    const sig = ed25519.sign(canonicalBytes(unsigned), agentPrivateKey);
+    return { ...unsigned, sig: encodeSig(sig) };
+}
+/** Hash of the full receipt (incl. sig) — what the next receipt's `prev` points to. */
+export function receiptHash(receipt) {
+    return jcsHash(receipt);
+}
+export function verifyReceiptSignature(receipt) {
+    const pub = publicKeyFromDid(receipt.agent_id);
+    const sig = decodeSig(receipt.sig);
+    if (!pub || !sig)
+        return false;
+    const { sig: _omitted, ...unsigned } = receipt;
+    try {
+        return ed25519.verify(sig, canonicalBytes(unsigned), pub);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Full single-receipt verification per SPEC §4:
+ * signature → delegation chain (at receipt time) → scope covers target → prev linkage.
+ */
+export function verifyReceipt(receipt, opts = {}) {
+    if (receipt.v !== 1)
+        return { ok: false, error: 'unsupported receipt version' };
+    if (!verifyReceiptSignature(receipt))
+        return { ok: false, error: 'bad receipt signature' };
+    const ts = new Date(receipt.ts);
+    if (Number.isNaN(ts.getTime()))
+        return { ok: false, error: 'invalid ts' };
+    const chain = verifyChain(receipt.delegation, {
+        agentId: receipt.agent_id,
+        expectedRoot: opts.expectedOwner,
+        revoked: opts.revoked,
+        at: ts,
+    });
+    if (!chain.ok)
+        return { ok: false, error: `delegation: ${chain.error}` };
+    if (!scopesAllow(chain.effectiveScopes, receipt.target)) {
+        return { ok: false, error: `target ${receipt.target} outside effective scopes` };
+    }
+    if (opts.expectedPrev !== undefined && receipt.prev !== opts.expectedPrev) {
+        return { ok: false, error: 'prev hash does not match preceding receipt (chain broken)' };
+    }
+    return { ok: true };
+}
+/**
+ * Verify an agent's full receipt sequence: every receipt valid and hash-linked
+ * to the one before it. Returns the index of the first bad receipt on failure.
+ */
+export function verifyReceiptChain(receipts, opts = {}) {
+    let expectedPrev = null;
+    for (let i = 0; i < receipts.length; i++) {
+        const r = receipts[i];
+        const result = verifyReceipt(r, { ...opts, expectedPrev });
+        if (!result.ok)
+            return { ok: false, error: `receipt ${i}: ${result.error}`, failedIndex: i };
+        expectedPrev = receiptHash(r);
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=receipt.js.map

package/dist/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../src/receipt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAuB,MAAM,iBAAiB,CAAC;AAmBhF,MAAM,UAAU,WAAW,CAAC,OAA4B;IACtD,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACxF,OAAO,UAAU,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAQC,EACD,eAA2B;IAE3B,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG;QACf,CAAC,EAAE,CAAU;QACb,QAAQ,EAAE,MAAM,CAAC,OAAO;QACxB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,YAAY,EAAE,MAAM,CAAC,WAAW;QAChC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;KAClB,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC;IACpE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,OAAgB;IAC1C,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC/C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAgB,EAChB,OAAwF,EAAE;IAE1F,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;IAChF,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAE3F,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAE1E,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,EAAE;QAC5C,OAAO,EAAE,OAAO,CAAC,QAAQ;QACzB,YAAY,EAAE,IAAI,CAAC,aAAa;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,EAAE,EAAE,EAAE;KACP,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAEzE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,eAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,OAAO,CAAC,MAAM,2BAA2B,EAAE,CAAC;IACnF,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2DAA2D,EAAE,CAAC;IAC3F,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAmB,EACnB,OAA0D,EAAE;IAE5D,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;QAC7F,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/sth.d.ts

@@ -0,0 +1,17 @@
+/** Signed Tree Head — the log's periodic, signed commitment to its state (SPEC §5). */
+export interface SignedTreeHead {
+    v: 1;
+    log_id: string;
+    size: number;
+    root: string;
+    ts: string;
+    sig: string;
+}
+export declare function createSTH(fields: {
+    logId: string;
+    size: number;
+    root: string;
+    ts: string;
+}, logPrivateKey: Uint8Array): SignedTreeHead;
+export declare function verifySTH(sth: SignedTreeHead): boolean;
+//# sourceMappingURL=sth.d.ts.map

package/dist/sth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sth.d.ts","sourceRoot":"","sources":["../src/sth.ts"],"names":[],"mappings":"AAIA,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,CAAC,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAgB,SAAS,CACvB,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,EACjE,aAAa,EAAE,UAAU,GACxB,cAAc,CAIhB;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAWtD"}

package/dist/sth.js

@@ -0,0 +1,24 @@
+import { ed25519 } from '@noble/curves/ed25519';
+import { canonicalBytes, decodeSig, encodeSig } from './encoding.js';
+import { publicKeyFromDid } from './keys.js';
+export function createSTH(fields, logPrivateKey) {
+    const unsigned = { v: 1, log_id: fields.logId, size: fields.size, root: fields.root, ts: fields.ts };
+    const sig = ed25519.sign(canonicalBytes(unsigned), logPrivateKey);
+    return { ...unsigned, sig: encodeSig(sig) };
+}
+export function verifySTH(sth) {
+    if (sth.v !== 1 || !Number.isInteger(sth.size) || sth.size < 0)
+        return false;
+    const pub = publicKeyFromDid(sth.log_id);
+    const sig = decodeSig(sth.sig);
+    if (!pub || !sig)
+        return false;
+    const { sig: _omitted, ...unsigned } = sth;
+    try {
+        return ed25519.verify(sig, canonicalBytes(unsigned), pub);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=sth.js.map

package/dist/sth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sth.js","sourceRoot":"","sources":["../src/sth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAY7C,MAAM,UAAU,SAAS,CACvB,MAAiE,EACjE,aAAyB;IAEzB,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAAU,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;IAC9G,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,CAAC;IAClE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAmB;IAC3C,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAC/B,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}