aqta-verify-receipt 1.0.1

package/LICENSE

@@ -0,0 +1,17 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   Copyright 2026 Aqta Technologies Ltd
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,63 @@
+# aqta-verify-receipt
+
+Independent verifier for [AqtaCore](https://app.aqta.ai) attestation receipts.
+Checks the Ed25519 signature on an enforcement-attestation receipt using only
+the published public key: **no dependency on Aqta's servers**.
+
+## Why this exists
+
+AqtaCore returns a signed receipt with every AI enforcement decision.
+Regulators, auditors, and internal compliance teams need to verify those
+receipts independently, without trusting the issuer. This package is the
+reference implementation of that verifier, maintained by Aqta under the open
+[ATTESTATION-v1](https://github.com/Aqta-ai/attestation-spec/blob/main/spec/ATTESTATION-v1.md)
+format specification.
+
+## Install
+
+```bash
+npm install aqta-verify-receipt
+```
+
+## Usage
+
+```ts
+import { verifyReceipt, fetchPublishedPublicKey } from 'aqta-verify-receipt';
+
+// One-time: fetch and pin the issuer's public key.
+const trustedPublicKey = await fetchPublishedPublicKey();
+
+// Per receipt:
+const result = verifyReceipt(receipt, { trustedPublicKey });
+
+if (!result.valid) {
+  throw new Error(`Receipt invalid: ${result.reason}`);
+}
+console.log('Receipt verified without contacting Aqta.');
+```
+
+## API
+
+### `verifyReceipt(receipt, options?) → { valid, reason? }`
+
+Verifies an attestation receipt against the declared (or pinned) public key.
+
+Options:
+- `trustedPublicKey`: base64url public key. If set, the receipt's `public_key`
+  field must match byte for byte. Strongly recommended for production.
+- `strictFields`: if `true` (default), any unknown top-level field causes
+  rejection, per ATTESTATION-v1 §4.
+
+### `fetchPublishedPublicKey(url?) → Promise<string>`
+
+Fetches the AqtaCore public key from
+`https://app.aqta.ai/security/pubkey.txt`. Pass a custom URL for self-hosted
+issuers.
+
+## Receipt format
+
+See [ATTESTATION-v1](https://github.com/Aqta-ai/attestation-spec/blob/main/spec/ATTESTATION-v1.md).
+
+## Licence
+
+Apache-2.0. See `LICENSE`.

package/dist/index.d.ts

@@ -0,0 +1,70 @@
+/**
+ * aqta-verify-receipt
+ *
+ * Independent verifier for AqtaCore attestation receipts (ATTESTATION-v1).
+ * Verifies the Ed25519 signature on a receipt using only the published
+ * public key: no dependency on any third-party server.
+ *
+ * Spec: https://github.com/Aqta-ai/attestation-spec/blob/main/spec/ATTESTATION-v1.md
+ */
+/** Required top-level fields of an ATTESTATION-v1 receipt. */
+export interface AttestationReceipt {
+    v: number;
+    attestation_id: string;
+    trace_id: string;
+    org_id: string;
+    request_hash: string;
+    model: string;
+    outcome: 'ALLOWED' | 'BLOCKED' | 'SUPPRESSED' | 'PASSED';
+    policy_applied: string[];
+    cost_prevented_eur: number;
+    timestamp: string;
+    public_key: string;
+    signature: string;
+}
+export interface VerifyOptions {
+    /**
+     * The trusted public key (base64url, no padding). If supplied, the receipt
+     * is rejected unless its `public_key` field matches byte-for-byte. This
+     * prevents an attacker from substituting a different key.
+     *
+     * If omitted, the receipt is verified against whatever public key it
+     * declares. This is lower trust but useful for offline / one-shot checks.
+     */
+    trustedPublicKey?: string;
+    /**
+     * If true, unknown top-level fields in the receipt cause rejection. Default
+     * true per spec §4: "Verifiers MUST reject receipts containing unknown
+     * top-level fields."
+     */
+    strictFields?: boolean;
+}
+export interface VerifyResult {
+    valid: boolean;
+    reason?: string;
+}
+/**
+ * Verify an AqtaCore attestation receipt.
+ *
+ * @param receipt  The full receipt object (including `signature`).
+ * @param options  Optional verification constraints.
+ * @returns        `{ valid: true }` if the signature is valid under the
+ *                 declared (and optionally pinned) public key; otherwise
+ *                 `{ valid: false, reason: string }`.
+ *
+ * @example
+ *   const result = verifyReceipt(receipt, {
+ *     trustedPublicKey: 'gUoUhIvptKAoLTnry3VrDtOQEWggGQveLrHFVrfNqmE',
+ *   });
+ *   if (!result.valid) throw new Error(`Receipt invalid: ${result.reason}`);
+ */
+export declare function verifyReceipt(receipt: unknown, options?: VerifyOptions): VerifyResult;
+/**
+ * Fetch the AqtaCore public key from the published URL and return it as a
+ * base64url string ready to pass to `verifyReceipt` as `trustedPublicKey`.
+ *
+ * Callers SHOULD pin this value once retrieved, rather than re-fetching on
+ * every verification.
+ */
+export declare function fetchPublishedPublicKey(url?: string): Promise<string>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,MAAM,CAAC;IACV,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,SAAS,GAAG,SAAS,GAAG,YAAY,GAAG,QAAQ,CAAC;IACzD,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAoED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE,aAAkB,GAC1B,YAAY,CAuEd;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,SAA4C,GAC9C,OAAO,CAAC,MAAM,CAAC,CAMjB"}

package/dist/index.js

@@ -0,0 +1,175 @@
+"use strict";
+/**
+ * aqta-verify-receipt
+ *
+ * Independent verifier for AqtaCore attestation receipts (ATTESTATION-v1).
+ * Verifies the Ed25519 signature on a receipt using only the published
+ * public key: no dependency on any third-party server.
+ *
+ * Spec: https://github.com/Aqta-ai/attestation-spec/blob/main/spec/ATTESTATION-v1.md
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.verifyReceipt = verifyReceipt;
+exports.fetchPublishedPublicKey = fetchPublishedPublicKey;
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+const tweetnacl_util_1 = __importDefault(require("tweetnacl-util"));
+const ALLOWED_OUTCOMES = new Set([
+    'ALLOWED',
+    'BLOCKED',
+    'SUPPRESSED',
+    'PASSED',
+]);
+const REQUIRED_FIELDS = new Set([
+    'v',
+    'attestation_id',
+    'trace_id',
+    'org_id',
+    'request_hash',
+    'model',
+    'outcome',
+    'policy_applied',
+    'cost_prevented_eur',
+    'timestamp',
+    'public_key',
+    'signature',
+]);
+/** Decode a base64url string (no padding) into a Uint8Array. */
+function base64urlDecode(s) {
+    const padded = s + '='.repeat((4 - (s.length % 4)) % 4);
+    const b64 = padded.replace(/-/g, '+').replace(/_/g, '/');
+    return tweetnacl_util_1.default.decodeBase64(b64);
+}
+/**
+ * Canonical JSON serialisation per ATTESTATION-v1 §6.
+ *
+ * Equivalent to Python's:
+ *   json.dumps(payload, sort_keys=True, separators=(",", ":")).encode("utf-8")
+ *
+ * This function handles only the receipt shape (flat object with scalar +
+ * array values). It is NOT a general-purpose canonical-JSON library.
+ */
+function canonicalise(payload) {
+    const keys = Object.keys(payload).sort();
+    const parts = [];
+    for (const k of keys) {
+        parts.push(`${JSON.stringify(k)}:${canonicalValue(payload[k])}`);
+    }
+    return new TextEncoder().encode('{' + parts.join(',') + '}');
+}
+function canonicalValue(v) {
+    if (v === null || v === undefined) {
+        return 'null';
+    }
+    if (Array.isArray(v)) {
+        return '[' + v.map(canonicalValue).join(',') + ']';
+    }
+    if (typeof v === 'number') {
+        // Preserving the serialisation of floats such as 0.0 as "0.0" is NOT
+        // spec. JSON.stringify(0) yields "0" and that is what Python json.dumps
+        // yields for float 0.0 when sort_keys=True on a rounded value. For the
+        // one float field on the receipt (cost_prevented_eur) the issuer rounds
+        // to 6 dp and integers serialise as integers.
+        return JSON.stringify(v);
+    }
+    // Strings, booleans
+    return JSON.stringify(v);
+}
+/**
+ * Verify an AqtaCore attestation receipt.
+ *
+ * @param receipt  The full receipt object (including `signature`).
+ * @param options  Optional verification constraints.
+ * @returns        `{ valid: true }` if the signature is valid under the
+ *                 declared (and optionally pinned) public key; otherwise
+ *                 `{ valid: false, reason: string }`.
+ *
+ * @example
+ *   const result = verifyReceipt(receipt, {
+ *     trustedPublicKey: 'gUoUhIvptKAoLTnry3VrDtOQEWggGQveLrHFVrfNqmE',
+ *   });
+ *   if (!result.valid) throw new Error(`Receipt invalid: ${result.reason}`);
+ */
+function verifyReceipt(receipt, options = {}) {
+    if (typeof receipt !== 'object' || receipt === null) {
+        return { valid: false, reason: 'receipt is not an object' };
+    }
+    const r = receipt;
+    // Structural checks
+    for (const field of REQUIRED_FIELDS) {
+        if (!(field in r)) {
+            return { valid: false, reason: `missing required field: ${field}` };
+        }
+    }
+    if (options.strictFields !== false) {
+        for (const k of Object.keys(r)) {
+            if (!REQUIRED_FIELDS.has(k)) {
+                return { valid: false, reason: `unknown top-level field: ${k}` };
+            }
+        }
+    }
+    // Semantic sanity
+    if (r.v !== 1) {
+        return { valid: false, reason: `unsupported version: ${r.v}` };
+    }
+    if (typeof r.outcome !== 'string' || !ALLOWED_OUTCOMES.has(r.outcome)) {
+        return { valid: false, reason: `invalid outcome: ${String(r.outcome)}` };
+    }
+    if (!Array.isArray(r.policy_applied)) {
+        return { valid: false, reason: 'policy_applied must be an array' };
+    }
+    if (typeof r.request_hash !== 'string' || !/^[0-9a-f]{64}$/.test(r.request_hash)) {
+        return { valid: false, reason: 'request_hash must be 64 lowercase hex chars' };
+    }
+    // Public-key pinning
+    if (options.trustedPublicKey !== undefined &&
+        options.trustedPublicKey !== r.public_key) {
+        return {
+            valid: false,
+            reason: 'public_key does not match trusted key',
+        };
+    }
+    // Canonical payload (all fields except signature)
+    const payload = { ...r };
+    delete payload.signature;
+    let canonical;
+    try {
+        canonical = canonicalise(payload);
+    }
+    catch (e) {
+        return { valid: false, reason: `failed to canonicalise: ${String(e)}` };
+    }
+    // Ed25519 verification
+    try {
+        const sig = base64urlDecode(r.signature);
+        const pub = base64urlDecode(r.public_key);
+        if (sig.length !== 64) {
+            return { valid: false, reason: 'signature length != 64 bytes' };
+        }
+        if (pub.length !== 32) {
+            return { valid: false, reason: 'public key length != 32 bytes' };
+        }
+        const ok = tweetnacl_1.default.sign.detached.verify(canonical, sig, pub);
+        return ok ? { valid: true } : { valid: false, reason: 'signature check failed' };
+    }
+    catch (e) {
+        return { valid: false, reason: `signature decode error: ${String(e)}` };
+    }
+}
+/**
+ * Fetch the AqtaCore public key from the published URL and return it as a
+ * base64url string ready to pass to `verifyReceipt` as `trustedPublicKey`.
+ *
+ * Callers SHOULD pin this value once retrieved, rather than re-fetching on
+ * every verification.
+ */
+async function fetchPublishedPublicKey(url = 'https://app.aqta.ai/security/pubkey.txt') {
+    const res = await fetch(url);
+    if (!res.ok) {
+        throw new Error(`failed to fetch public key: HTTP ${res.status}`);
+    }
+    return (await res.text()).trim();
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;;;AA8HH,sCA0EC;AASD,0DAQC;AAvND,0DAA6B;AAC7B,oEAAsC;AA0CtC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,SAAS;IACT,SAAS;IACT,YAAY;IACZ,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,GAAG;IACH,gBAAgB;IAChB,UAAU;IACV,QAAQ;IACR,cAAc;IACd,OAAO;IACP,SAAS;IACT,gBAAgB;IAChB,oBAAoB;IACpB,WAAW;IACX,YAAY;IACZ,WAAW;CACZ,CAAC,CAAC;AAEH,gEAAgE;AAChE,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,wBAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,OAAgC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,qEAAqE;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,wEAAwE;QACxE,8CAA8C;QAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IACD,oBAAoB;IACpB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,aAAa,CAC3B,OAAgB,EAChB,UAAyB,EAAE;IAE3B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,CAAC,GAAG,OAAkC,CAAC;IAE7C,oBAAoB;IACpB,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YAClB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,KAAK,EAAE,EAAE,CAAC;QACtE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,CAAC,EAAE,EAAE,CAAC;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACd,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IACjF,CAAC;IAED,qBAAqB;IACrB,IACE,OAAO,CAAC,gBAAgB,KAAK,SAAS;QACtC,OAAO,CAAC,gBAAgB,KAAK,CAAC,CAAC,UAAU,EACzC,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,uCAAuC;SAChD,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,MAAM,OAAO,GAA4B,EAAE,GAAG,CAAC,EAAE,CAAC;IAClD,OAAO,OAAO,CAAC,SAAS,CAAC;IAEzB,IAAI,SAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1E,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,SAAmB,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,UAAoB,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAClE,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;QACnE,CAAC;QACD,MAAM,EAAE,GAAG,mBAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1D,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACnF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,uBAAuB,CAC3C,GAAG,GAAG,yCAAyC;IAE/C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/dist/index.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Interop tests: verify a receipt produced by the Python reference implementation
+ * against this TypeScript verifier. Run: `npm run build && node --test dist/index.test.js`.
+ */
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/index.test.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * Interop tests: verify a receipt produced by the Python reference implementation
+ * against this TypeScript verifier. Run: `npm run build && node --test dist/index.test.js`.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_test_1 = require("node:test");
+const strict_1 = __importDefault(require("node:assert/strict"));
+const index_js_1 = require("./index.js");
+/**
+ * Fixture receipt shape, used here to exercise the structural checks.
+ * Full signature-level interop is covered by the cross-implementation
+ * runner at `scripts/make-interop-fixture.mjs`, which generates a receipt
+ * with the reference issuer and verifies it with this library.
+ */
+const FIXTURE_RECEIPT = {
+    v: 1,
+    attestation_id: 'a3f2b1c4-9d87-4e6f-b012-34567890abcd',
+    trace_id: 'trace-fixture-v1',
+    org_id: 'org-test',
+    request_hash: '8f3a7e2b9c4d5f6a1b0c9d8e7f6a5b4c3d2e1f0a9b8c7d6e5f4a3b2c1d0e9f8a',
+    model: 'gpt-4o',
+    outcome: 'ALLOWED',
+    policy_applied: ['budget_guard', 'loop_guard'],
+    cost_prevented_eur: 0.0,
+    timestamp: '2026-04-23T10:15:30.123456+00:00',
+    public_key: '', // populated by make-test-fixture.py
+    signature: '', // populated by make-test-fixture.py
+};
+(0, node_test_1.test)('rejects empty object', () => {
+    const res = (0, index_js_1.verifyReceipt)({});
+    strict_1.default.equal(res.valid, false);
+});
+(0, node_test_1.test)('rejects missing required field', () => {
+    const bad = { ...FIXTURE_RECEIPT };
+    delete bad.outcome;
+    const res = (0, index_js_1.verifyReceipt)(bad);
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /missing required field/);
+});
+(0, node_test_1.test)('rejects unknown top-level field (strict mode)', () => {
+    const bad = { ...FIXTURE_RECEIPT, extra: 'foo' };
+    const res = (0, index_js_1.verifyReceipt)(bad);
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /unknown top-level field/);
+});
+(0, node_test_1.test)('rejects unsupported version', () => {
+    const bad = { ...FIXTURE_RECEIPT, v: 2 };
+    const res = (0, index_js_1.verifyReceipt)(bad);
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /unsupported version/);
+});
+(0, node_test_1.test)('rejects invalid outcome', () => {
+    const bad = { ...FIXTURE_RECEIPT, outcome: 'YOLO' };
+    const res = (0, index_js_1.verifyReceipt)(bad);
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /invalid outcome/);
+});
+(0, node_test_1.test)('rejects malformed request_hash', () => {
+    const bad = { ...FIXTURE_RECEIPT, request_hash: 'not-a-hash' };
+    const res = (0, index_js_1.verifyReceipt)(bad);
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /request_hash/);
+});
+(0, node_test_1.test)('rejects pinned-key mismatch', () => {
+    const res = (0, index_js_1.verifyReceipt)(FIXTURE_RECEIPT, {
+        trustedPublicKey: 'different_key_000000000000000000000000000000',
+    });
+    strict_1.default.equal(res.valid, false);
+    strict_1.default.match(res.reason ?? '', /does not match trusted key/);
+});
+// Note: full signature-verification interop test requires the fixture to be
+// populated by `scripts/make-test-fixture.py` before running this suite.
+// When FIXTURE_RECEIPT.signature is empty, the signature check is skipped.
+(0, node_test_1.test)('signature decoder rejects empty signature', () => {
+    const res = (0, index_js_1.verifyReceipt)(FIXTURE_RECEIPT);
+    strict_1.default.equal(res.valid, false);
+    // Either the empty signature fails decode or fails length check
+    strict_1.default.ok(/signature/.test(res.reason ?? '') ||
+        /signature length/.test(res.reason ?? ''));
+});
+//# sourceMappingURL=index.test.js.map

package/dist/index.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.js","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAEH,yCAAiC;AACjC,gEAAwC;AACxC,yCAA2C;AAE3C;;;;;GAKG;AACH,MAAM,eAAe,GAAG;IACtB,CAAC,EAAE,CAAC;IACJ,cAAc,EAAE,sCAAsC;IACtD,QAAQ,EAAE,kBAAkB;IAC5B,MAAM,EAAE,UAAU;IAClB,YAAY,EAAE,kEAAkE;IAChF,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,SAAkB;IAC3B,cAAc,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC;IAC9C,kBAAkB,EAAE,GAAG;IACvB,SAAS,EAAE,kCAAkC;IAC7C,UAAU,EAAE,EAAE,EAAE,oCAAoC;IACpD,SAAS,EAAE,EAAE,EAAG,oCAAoC;CACrD,CAAC;AAEF,IAAA,gBAAI,EAAC,sBAAsB,EAAE,GAAG,EAAE;IAChC,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,EAAE,CAAC,CAAC;IAC9B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,gCAAgC,EAAE,GAAG,EAAE;IAC1C,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAS,CAAC;IAC1C,OAAO,GAAG,CAAC,OAAO,CAAC;IACnB,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAC3D,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,+CAA+C,EAAE,GAAG,EAAE;IACzD,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,KAAK,EAAE,KAAK,EAAS,CAAC;IACxD,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,yBAAyB,CAAC,CAAC;AAC5D,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,6BAA6B,EAAE,GAAG,EAAE;IACvC,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,CAAC,EAAE,CAAC,EAAS,CAAC;IAChD,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,qBAAqB,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,yBAAyB,EAAE,GAAG,EAAE;IACnC,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,OAAO,EAAE,MAAM,EAAS,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,gCAAgC,EAAE,GAAG,EAAE;IAC1C,MAAM,GAAG,GAAG,EAAE,GAAG,eAAe,EAAE,YAAY,EAAE,YAAY,EAAS,CAAC;IACtE,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,GAAG,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;AACjD,CAAC,CAAC,CAAC;AAEH,IAAA,gBAAI,EAAC,6BAA6B,EAAE,GAAG,EAAE;IACvC,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,eAAe,EAAE;QACzC,gBAAgB,EAAE,8CAA8C;KACjE,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,4BAA4B,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC;AAEH,4EAA4E;AAC5E,yEAAyE;AACzE,2EAA2E;AAC3E,IAAA,gBAAI,EAAC,2CAA2C,EAAE,GAAG,EAAE;IACrD,MAAM,GAAG,GAAG,IAAA,wBAAa,EAAC,eAAe,CAAC,CAAC;IAC3C,gBAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/B,gEAAgE;IAChE,gBAAM,CAAC,EAAE,CACP,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QAChC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAC5C,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "aqta-verify-receipt",
+  "version": "1.0.1",
+  "description": "Independent verifier for AqtaCore attestation receipts. Verifies the Ed25519 signature on an attestation receipt without trusting any third-party server. Reference implementation of ATTESTATION-v1.",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "test": "node --test dist/index.test.js",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "aqta",
+    "ai-governance",
+    "attestation",
+    "ed25519",
+    "zero-trust",
+    "eu-ai-act",
+    "dora",
+    "compliance",
+    "receipt-verification"
+  ],
+  "author": "Aqta Technologies Ltd",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Aqta-ai/attestation-spec.git",
+    "directory": "packages/verify-receipt"
+  },
+  "homepage": "https://github.com/Aqta-ai/attestation-spec",
+  "bugs": {
+    "url": "https://github.com/Aqta-ai/attestation-spec/issues"
+  },
+  "dependencies": {
+    "tweetnacl": "^1.0.3",
+    "tweetnacl-util": "^0.15.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.3.0"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}