chit402-verify 0.3.5 → 0.4.0

package/dist/receipt-version.js

@@ -0,0 +1,364 @@
+"use strict";
+/**
+ * Exact-type allowlist for receipt versions.
+ *
+ * The signed JWS payload is the only version that counts. `Number()` and
+ * `parseInt` are not used: strings, booleans, arrays, null, and non-integers
+ * are unsupported. JSON `11.0` and `1.1e1` are the number 11 after parse.
+ *
+ * `hmac_attestation.payload_version` is the HMAC field-list version (5 or 8).
+ * It is not a copy of the JWS payload version. chit-1ebc5616 is signed
+ * payload_version 6 with HMAC 8. That pair still verifies.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UPGRADE_HINT = exports.INVALID_JWS = exports.VERSION_MISMATCH = exports.UNSUPPORTED_VERSION = exports.VERIFIER_MIN = exports.SUPPORTED_RECEIPT_VERSIONS = exports.REFUSAL_EXACT_VERSIONS = exports.UNVERSIONED_OUTER_VERSIONS = exports.V11_VERSION = exports.ISSUER_ROOT_PAYLOAD_VERSION = exports.LEGACY_PAYLOAD_VERSIONS = void 0;
+exports.isPlainObject = isPlainObject;
+exports.isJsonInteger = isJsonInteger;
+exports.claimsAreUnversionedV4V5 = claimsAreUnversionedV4V5;
+exports.unversionedOuterVersion = unversionedOuterVersion;
+exports.readSignedClaims = readSignedClaims;
+exports.classifySignedClaims = classifySignedClaims;
+exports.signedClaimsOnAllowlist = signedClaimsOnAllowlist;
+exports.legacyIdentityErrors = legacyIdentityErrors;
+exports.classifyReceiptDocument = classifyReceiptDocument;
+exports.classifyShellDocument = classifyShellDocument;
+exports.formatSupportedReceiptVersions = formatSupportedReceiptVersions;
+exports.refusalPayloadVersion = refusalPayloadVersion;
+exports.LEGACY_PAYLOAD_VERSIONS = [1, 2, 3, 4, 5, 6, 7, 8, 9, 10];
+exports.ISSUER_ROOT_PAYLOAD_VERSION = 11;
+exports.V11_VERSION = 11;
+exports.UNVERSIONED_OUTER_VERSIONS = [4, 5];
+exports.REFUSAL_EXACT_VERSIONS = [1, 2, 3];
+exports.SUPPORTED_RECEIPT_VERSIONS = {
+    v: [exports.V11_VERSION],
+    payload_version: [...exports.LEGACY_PAYLOAD_VERSIONS, exports.ISSUER_ROOT_PAYLOAD_VERSION],
+    refusal_payload_version: [...exports.REFUSAL_EXACT_VERSIONS],
+    legacy_unversioned_outer: [...exports.UNVERSIONED_OUTER_VERSIONS],
+};
+exports.VERIFIER_MIN = '0.3.5';
+exports.UNSUPPORTED_VERSION = 'unsupported_version';
+exports.VERSION_MISMATCH = 'version_mismatch';
+exports.INVALID_JWS = 'invalid_jws';
+exports.UPGRADE_HINT = 'this receipt requires a verifier newer than @xfuel/verify 0.3.5';
+/** Named claims on the Sep 4–5 object JWS (payload v4/v5), without a signed version. */
+const UNVERSIONED_TOP = new Set([
+    'task_id',
+    'iss',
+    'iat',
+    'payment',
+    'provider_cogs',
+    'route',
+    'output',
+    'binding',
+    'caller_binding',
+]);
+const UNVERSIONED_PAYMENT = new Set([
+    'rail',
+    'ref',
+    'gross_amount',
+    'net_amount',
+    'fee_amount',
+    'protocol_fee_bps',
+    'platform_fee',
+    'platform_fee_bps',
+    'fee_bps',
+]);
+const UNVERSIONED_COGS = new Set(['actual']);
+const UNVERSIONED_ROUTE = new Set(['model', 'model_commitment', 'provider']);
+const UNVERSIONED_OUTPUT = new Set(['hash']);
+const UNVERSIONED_BINDING = new Set(['expected_commitment']);
+const UNVERSIONED_CALLER = new Set(['payer_wallet', 'agent_pubkey', 'api_key_hash']);
+function hasOwn(obj, key) {
+    return Object.prototype.hasOwnProperty.call(obj, key);
+}
+function isPlainObject(value) {
+    return !!value && typeof value === 'object' && !Array.isArray(value);
+}
+/** JSON number that is a whole integer. Rejects strings, booleans, arrays, and floats. */
+function isJsonInteger(value) {
+    return typeof value === 'number' && Number.isInteger(value);
+}
+function fail(reason, extra = []) {
+    const errors = reason === exports.UNSUPPORTED_VERSION
+        ? [exports.UNSUPPORTED_VERSION, ...extra, exports.UPGRADE_HINT]
+        : [reason, ...extra];
+    return { ok: false, reason, errors };
+}
+function subset(value, allowed) {
+    if (value == null)
+        return true;
+    if (!isPlainObject(value))
+        return false;
+    return Object.keys(value).every((key) => allowed.has(key));
+}
+/** True when every claim key belongs to the v4/v5 object, before v6 fields existed. */
+function claimsAreUnversionedV4V5(claims) {
+    if (!Object.keys(claims).every((key) => UNVERSIONED_TOP.has(key)))
+        return false;
+    if (!subset(claims.payment, UNVERSIONED_PAYMENT))
+        return false;
+    if (!subset(claims.provider_cogs, UNVERSIONED_COGS))
+        return false;
+    if (!subset(claims.route, UNVERSIONED_ROUTE))
+        return false;
+    if (isPlainObject(claims.route) && claims.route.model_commitment != null && isPlainObject(claims.route.model_commitment)) {
+        if (!subset(claims.route.model_commitment, new Set(['commitment'])))
+            return false;
+    }
+    if (!subset(claims.output, UNVERSIONED_OUTPUT))
+        return false;
+    if (!subset(claims.binding, UNVERSIONED_BINDING))
+        return false;
+    if (!subset(claims.caller_binding, UNVERSIONED_CALLER))
+        return false;
+    return true;
+}
+function stamped(container) {
+    if (!isPlainObject(container) || !hasOwn(container, 'payload_version')) {
+        return { present: false, value: undefined };
+    }
+    if (container.payload_version == null)
+        return { present: false, value: undefined };
+    return { present: true, value: container.payload_version };
+}
+/**
+ * Outer payload_version slots that may name a v4/v5 receipt whose JWS
+ * itself has no version. They must all be the same integer, 4 or 5.
+ */
+function unversionedOuterVersion(receipt) {
+    const slots = [
+        stamped(receipt.issuer_signature),
+        stamped(receipt.hmac_attestation),
+        stamped(receipt.signature),
+    ].filter((slot) => slot.present);
+    if (slots.length === 0)
+        return null;
+    const first = slots[0].value;
+    if (!isJsonInteger(first) || (first !== 4 && first !== 5))
+        return null;
+    for (const slot of slots) {
+        if (!Object.is(slot.value, first))
+            return null;
+    }
+    return first;
+}
+function outerV(receipt) {
+    if (!hasOwn(receipt, 'v') || receipt.v == null)
+        return { present: false, value: undefined };
+    return { present: true, value: receipt.v };
+}
+function versionsAgree(signed, outer) {
+    if (!outer.present)
+        return true;
+    if (typeof signed !== typeof outer.value)
+        return false;
+    return Object.is(signed, outer.value);
+}
+/**
+ * Signed `v: 11` agrees with an outer `issuer_signature.payload_version` of
+ * the number 11. That is the gateway's non-enumerable v11 stamp. Any other
+ * value or type is a mismatch. A missing stamp agrees.
+ */
+function v11PayloadStampAgrees(outer) {
+    if (!outer.present)
+        return true;
+    return typeof outer.value === 'number' && outer.value === 11;
+}
+function readSignedClaims(jws) {
+    if (typeof jws !== 'string' || jws.length === 0)
+        return { ok: false, reason: exports.INVALID_JWS };
+    const parts = jws.split('.');
+    if (parts.length < 2 || !parts[1])
+        return { ok: false, reason: exports.INVALID_JWS };
+    let text;
+    try {
+        text = Buffer.from(parts[1], 'base64url').toString('utf8');
+    }
+    catch {
+        return { ok: false, reason: exports.INVALID_JWS };
+    }
+    if (!text)
+        return { ok: false, reason: exports.INVALID_JWS };
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return { ok: false, reason: exports.INVALID_JWS };
+    }
+    if (!isPlainObject(parsed))
+        return { ok: false, reason: exports.UNSUPPORTED_VERSION };
+    return { ok: true, claims: parsed };
+}
+/**
+ * Allowlist on the signed claims. `outer` is the receipt document.
+ * Pass null to ignore outer copies (builders, claims-only checks).
+ */
+function classifySignedClaims(claims, outer) {
+    if (!isPlainObject(claims))
+        return fail(exports.UNSUPPORTED_VERSION);
+    const hasV = hasOwn(claims, 'v');
+    const hasPv = hasOwn(claims, 'payload_version');
+    const outerDoc = outer && isPlainObject(outer) ? outer : null;
+    const outerVersion = outerDoc ? stamped(outerDoc.issuer_signature) : { present: false, value: undefined };
+    const topV = outerDoc ? outerV(outerDoc) : { present: false, value: undefined };
+    if (hasV && hasPv) {
+        const extra = typeof claims.v === 'number' && claims.v === 11 ? ['v11_disallowed_field'] : [];
+        return fail(exports.UNSUPPORTED_VERSION, extra);
+    }
+    if (hasV) {
+        if (!(typeof claims.v === 'number' && claims.v === 11))
+            return fail(exports.UNSUPPORTED_VERSION);
+        if (outerDoc && !versionsAgree(11, topV))
+            return fail(exports.VERSION_MISMATCH);
+        if (outerDoc && !v11PayloadStampAgrees(outerVersion))
+            return fail(exports.VERSION_MISMATCH);
+        return { ok: true, family: 'v11', version: 11, version_source: 'signed' };
+    }
+    if (hasPv) {
+        const version = claims.payload_version;
+        const issuerRoot = hasOwn(claims, 'issuer_root')
+            && claims.issuer_root != null
+            && typeof claims.issuer_root === 'object';
+        const legacy = isJsonInteger(version) && exports.LEGACY_PAYLOAD_VERSIONS.includes(version);
+        const root = isJsonInteger(version) && version === exports.ISSUER_ROOT_PAYLOAD_VERSION && issuerRoot;
+        if (!legacy && !root)
+            return fail(exports.UNSUPPORTED_VERSION);
+        if (outerDoc && !versionsAgree(version, outerVersion))
+            return fail(exports.VERSION_MISMATCH);
+        if (outerDoc && topV.present)
+            return fail(exports.VERSION_MISMATCH);
+        return { ok: true, family: 'legacy', version: version, version_source: 'signed' };
+    }
+    if (!claimsAreUnversionedV4V5(claims))
+        return fail(exports.UNSUPPORTED_VERSION);
+    if (!outerDoc)
+        return fail(exports.UNSUPPORTED_VERSION);
+    if (topV.present)
+        return fail(exports.VERSION_MISMATCH);
+    const inferred = unversionedOuterVersion(outerDoc);
+    if (inferred == null)
+        return fail(exports.UNSUPPORTED_VERSION);
+    return { ok: true, family: 'legacy', version: inferred, version_source: 'inferred' };
+}
+/** True when the signed claims are on the allowlist. Outer copies are not checked. */
+function signedClaimsOnAllowlist(claims) {
+    const decision = classifySignedClaims(claims, null);
+    return decision.ok === true;
+}
+const UUID_BODY = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/**
+ * UUID ids must match the receipt version. Non-uuid task ids are documented
+ * legacy formats and are not this check. A wrong prefix is reported even
+ * when the version is otherwise unsupported.
+ */
+function legacyIdentityErrors(receipt) {
+    if (!isPlainObject(receipt))
+        return [];
+    const signature = receipt.issuer_signature;
+    const jws = isPlainObject(signature) ? signature.jws : undefined;
+    if (typeof jws !== 'string' || jws.length === 0)
+        return [];
+    const read = readSignedClaims(jws);
+    if (!read.ok)
+        return [];
+    const claims = read.claims;
+    let version = null;
+    if (hasOwn(claims, 'v') && isJsonInteger(claims.v))
+        version = claims.v;
+    else if (hasOwn(claims, 'payload_version') && isJsonInteger(claims.payload_version))
+        version = claims.payload_version;
+    const legacy = version == null || version <= 11;
+    const errors = [];
+    for (const id of [claims.task_id, claims.receipt_id]) {
+        if (typeof id !== 'string')
+            continue;
+        const match = /^(chit|xfuel)-(.+)$/i.exec(id);
+        if (!match || !UUID_BODY.test(match[2]))
+            continue;
+        const prefix = match[1].toLowerCase();
+        if ((legacy && prefix === 'chit') || (!legacy && prefix === 'xfuel')) {
+            errors.push('id_prefix_version_mismatch');
+            break;
+        }
+    }
+    if (legacy && hasOwn(claims, 'intent'))
+        errors.push('intent_on_legacy_version');
+    return errors;
+}
+function classifyReceiptDocument(receipt) {
+    if (!isPlainObject(receipt))
+        return fail(exports.UNSUPPORTED_VERSION);
+    const signature = receipt.issuer_signature;
+    const jws = isPlainObject(signature) ? signature.jws : undefined;
+    // A jws that is present but not a string is a malformed JWS, not an
+    // unsigned receipt. Later code would call .split() on it and throw.
+    if (jws != null && typeof jws !== 'string')
+        return fail(exports.INVALID_JWS);
+    if (typeof jws !== 'string' || jws.length === 0) {
+        return { ok: true, family: 'unsigned' };
+    }
+    const read = readSignedClaims(jws);
+    if (!read.ok) {
+        return read.reason === exports.UNSUPPORTED_VERSION ? fail(exports.UNSUPPORTED_VERSION) : fail(exports.INVALID_JWS);
+    }
+    return classifySignedClaims(read.claims, receipt);
+}
+/**
+ * Public shell with no holder JWS. Exact types. Unknown versions are not
+ * INCLUDED_SHELL. null payload_version is not a version.
+ */
+function classifyShellDocument(shell) {
+    if (!isPlainObject(shell))
+        return fail(exports.UNSUPPORTED_VERSION);
+    const hasV = hasOwn(shell, 'v') && shell.v != null;
+    const hasPv = hasOwn(shell, 'payload_version') && shell.payload_version != null;
+    if (hasV) {
+        if (!(typeof shell.v === 'number' && shell.v === 11))
+            return fail(exports.UNSUPPORTED_VERSION);
+        if (hasPv && !(typeof shell.payload_version === 'number' && shell.payload_version === 11)) {
+            return fail(exports.VERSION_MISMATCH);
+        }
+        return { ok: true };
+    }
+    if (!hasPv)
+        return fail(exports.UNSUPPORTED_VERSION);
+    const version = shell.payload_version;
+    if (!isJsonInteger(version))
+        return fail(exports.UNSUPPORTED_VERSION);
+    if (exports.LEGACY_PAYLOAD_VERSIONS.includes(version))
+        return { ok: true };
+    const root = version === 11 && shell.issuer_root != null && typeof shell.issuer_root === 'object';
+    if (root)
+        return { ok: true };
+    return fail(exports.UNSUPPORTED_VERSION);
+}
+function formatSupportedReceiptVersions() {
+    return [
+        'Supported receipt versions (signed payload, exact JSON numbers):',
+        `  v: ${exports.SUPPORTED_RECEIPT_VERSIONS.v.join(', ')}`,
+        `  payload_version: ${exports.LEGACY_PAYLOAD_VERSIONS.join(', ')}, and 11 only with a signed issuer_root`,
+        `  refusal payload_version: ${exports.REFUSAL_EXACT_VERSIONS.join(', ')}`,
+        '  unversioned JWS: outer version 4 or 5 and no field introduced at v6 or later (version_source: inferred)',
+        'Unknown versions fail closed: unsupported_version, exit 2.',
+        `Receipts issued after 2026-10-08 require chit402-verify >= ${exports.VERIFIER_MIN}.`,
+        'Older verifiers may print VERIFIED for formats they do not understand.',
+    ].join('\n');
+}
+/** Legacy refusal versions. Exact integers. v11 refusals use the v: 11 rule. */
+function refusalPayloadVersion(claims) {
+    if (!isPlainObject(claims))
+        return { ok: false, reason: exports.UNSUPPORTED_VERSION };
+    if (hasOwn(claims, 'v')) {
+        if (typeof claims.v === 'number' && claims.v === 11 && !hasOwn(claims, 'payload_version')) {
+            return { ok: false, reason: exports.UNSUPPORTED_VERSION };
+        }
+        return { ok: false, reason: exports.UNSUPPORTED_VERSION };
+    }
+    const version = claims.payload_version;
+    if (!isJsonInteger(version) || !exports.REFUSAL_EXACT_VERSIONS.includes(version)) {
+        return { ok: false, reason: exports.UNSUPPORTED_VERSION };
+    }
+    return { ok: true, version: version };
+}
+//# sourceMappingURL=receipt-version.js.map

package/dist/receipt-version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-version.js","sourceRoot":"","sources":["../src/receipt-version.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AA8DH,sCAEC;AAGD,sCAEC;AAgBD,4DAYC;AAcD,0DAaC;AAuBD,4CAqBC;AAMD,oDA0CC;AAGD,0DAGC;AASD,oDAyBC;AAED,0DAeC;AAMD,sDAkBC;AAED,wEAWC;AAGD,sDAeC;AAtUY,QAAA,uBAAuB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAU,CAAC;AACnE,QAAA,2BAA2B,GAAG,EAAE,CAAC;AACjC,QAAA,WAAW,GAAG,EAAE,CAAC;AACjB,QAAA,0BAA0B,GAAG,CAAC,CAAC,EAAE,CAAC,CAAU,CAAC;AAC7C,QAAA,sBAAsB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAU,CAAC;AAE5C,QAAA,0BAA0B,GAAG;IACxC,CAAC,EAAE,CAAC,mBAAW,CAAC;IAChB,eAAe,EAAE,CAAC,GAAG,+BAAuB,EAAE,mCAA2B,CAAC;IAC1E,uBAAuB,EAAE,CAAC,GAAG,8BAAsB,CAAC;IACpD,wBAAwB,EAAE,CAAC,GAAG,kCAA0B,CAAC;CACjD,CAAC;AAEE,QAAA,YAAY,GAAG,OAAO,CAAC;AACvB,QAAA,mBAAmB,GAAG,qBAAqB,CAAC;AAC5C,QAAA,gBAAgB,GAAG,kBAAkB,CAAC;AACtC,QAAA,WAAW,GAAG,aAAa,CAAC;AAC5B,QAAA,YAAY,GAAG,iEAAiE,CAAC;AAE9F,wFAAwF;AACxF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,SAAS;IACT,KAAK;IACL,KAAK;IACL,SAAS;IACT,eAAe;IACf,OAAO;IACP,QAAQ;IACR,SAAS;IACT,gBAAgB;CACjB,CAAC,CAAC;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,MAAM;IACN,KAAK;IACL,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,kBAAkB;IAClB,cAAc;IACd,kBAAkB;IAClB,SAAS;CACV,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC;AAC7E,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC7C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;AAC7D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;AAUrF,SAAS,MAAM,CAAC,GAAW,EAAE,GAAW;IACtC,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,aAAa,CAAC,KAAc;IAC1C,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,0FAA0F;AAC1F,SAAgB,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,IAAI,CAAC,MAAqB,EAAE,QAAkB,EAAE;IACvD,MAAM,MAAM,GAAG,MAAM,KAAK,2BAAmB;QAC3C,CAAC,CAAC,CAAC,2BAAmB,EAAE,GAAG,KAAK,EAAE,oBAAY,CAAC;QAC/C,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;IACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,OAAoB;IAClD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,uFAAuF;AACvF,SAAgB,wBAAwB,CAAC,MAA+B;IACtE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAI,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,mBAAmB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,SAAkB;IACjC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACvE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,SAAS,CAAC,eAAe,IAAI,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,eAAe,EAAE,CAAC;AAC7D,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CAAC,OAAgC;IACtE,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjC,OAAO,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACjC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;KAC3B,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,OAAgC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC,IAAI,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC5F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,aAAa,CAAC,MAAe,EAAE,KAA2C;IACjF,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,OAAO,MAAM,KAAK,OAAO,KAAK,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACvD,OAAO,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,KAA2C;IACxE,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;AAC/D,CAAC;AAED,SAAgB,gBAAgB,CAAC,GAAY;IAG3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAW,EAAE,CAAC;IAC3F,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAW,EAAE,CAAC;IAC7E,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAW,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAW,EAAE,CAAC;IACrD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAW,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAAmB,EAAE,CAAC;IAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAClC,MAAe,EACf,KAAqC;IAErC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC1G,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAEhF,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,OAAO,IAAI,CAAC,2BAAmB,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;QACzF,IAAI,QAAQ,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,wBAAgB,CAAC,CAAC;QACxE,IAAI,QAAQ,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC,wBAAgB,CAAC,CAAC;QACpF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IAC5E,CAAC;IAED,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC;eAC3C,MAAM,CAAC,WAAW,IAAI,IAAI;eAC1B,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAK,+BAA6C,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,mCAA2B,IAAI,UAAU,CAAC;QAC7F,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;QACvD,IAAI,QAAQ,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC;YAAE,OAAO,IAAI,CAAC,wBAAgB,CAAC,CAAC;QACrF,IAAI,QAAQ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,wBAAgB,CAAC,CAAC;QAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAiB,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;IAC9F,CAAC;IAED,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,wBAAgB,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACnD,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;IACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;AACvF,CAAC;AAED,sFAAsF;AACtF,SAAgB,uBAAuB,CAAC,MAAe;IACrD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,SAAS,GAAG,iEAAiE,CAAC;AAEpF;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,OAAgB;IACnD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC;SAClE,IAAI,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,eAAe,CAAC;QAAE,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;IACtH,MAAM,MAAM,GAAG,OAAO,IAAI,IAAI,IAAI,OAAO,IAAI,EAAE,CAAC;IAChD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,IAAI,OAAO,EAAE,KAAK,QAAQ;YAAE,SAAS;QACrC,MAAM,KAAK,GAAG,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,SAAS;QAClD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,KAAK,OAAO,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC1C,MAAM;QACR,CAAC;IACH,CAAC;IACD,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAChF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAgB;IACtD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC3C,MAAM,GAAG,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,IAAI,GAAG,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,mBAAW,CAAC,CAAC;IACrE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,MAAM,KAAK,2BAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,2BAAmB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAW,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC;IAChF,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;QACvF,IAAI,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,IAAI,KAAK,CAAC,eAAe,KAAK,EAAE,CAAC,EAAE,CAAC;YAC1F,OAAO,IAAI,CAAC,wBAAgB,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC;IACtC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;IAC9D,IAAK,+BAA6C,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC1F,MAAM,IAAI,GAAG,OAAO,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC;IAClG,IAAI,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC9B,OAAO,IAAI,CAAC,2BAAmB,CAAC,CAAC;AACnC,CAAC;AAED,SAAgB,8BAA8B;IAC5C,OAAO;QACL,kEAAkE;QAClE,QAAQ,kCAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACjD,sBAAsB,+BAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,yCAAyC;QACjG,8BAA8B,8BAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACjE,2GAA2G;QAC3G,4DAA4D;QAC5D,8DAA8D,oBAAY,GAAG;QAC7E,wEAAwE;KACzE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,gFAAgF;AAChF,SAAgB,qBAAqB,CAAC,MAAe;IAGnD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAAmB,EAAE,CAAC;IAC9E,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,OAAO,MAAM,CAAC,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAAmB,EAAE,CAAC;QACpD,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAAmB,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC;IACvC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAE,8BAA4C,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAChG,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAAmB,EAAE,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAoB,EAAE,CAAC;AACrD,CAAC"}

package/dist/refusal.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Offline check for a chit402.refusal.v1 document.
+ *
+ * Same ES256 issuer key and JWKS trust rules as a payment receipt.
+ * A refusal is not a payment. verifyReceipt refuses to treat one as spend.
+ */
+import { type Es256Jwk } from './jws.js';
+import { type RequestBindingStatus } from './request-binding.js';
+export declare const REFUSAL_SCHEMA = "chit402.refusal.v1";
+export declare const REFUSAL_SCHEMA_V2 = "chit402.refusal.v2";
+/** Versions a verifier accepts. Version 1 has no history pin. Version 3 is refusal v2. */
+export declare const REFUSAL_PAYLOAD_VERSIONS: readonly [1, 2, 3];
+/** Current issuance version. Version 1 still verifies. */
+export declare const REFUSAL_PAYLOAD_VERSION = 2;
+export declare const REFUSAL_PROVES: string[];
+export declare const REFUSAL_DOES_NOT_PROVE: string[];
+export interface RefusalJwks {
+    keys: Es256Jwk[];
+}
+export interface RefusalAnchor {
+    status?: string;
+    rail?: string;
+    chain_id?: number | null;
+    block_number?: string | null;
+    block_hash?: string | null;
+    state_root?: string | null;
+}
+export interface RefusalBookRow {
+    task_id?: string;
+    seq?: number;
+    prev_hash?: string | null;
+    row_hash?: string;
+    event?: string;
+}
+export interface RefusalDocument {
+    schema?: string;
+    payload_version?: number;
+    kind?: string;
+    refusal_id?: string;
+    nonce?: string;
+    issued_at?: string;
+    refusal_code?: string;
+    agent_id?: number;
+    book_id?: number;
+    task_id?: string;
+    amount_requested?: string | null;
+    chain_id?: number | null;
+    anchor?: RefusalAnchor | null;
+    book_row?: RefusalBookRow | null;
+    charged?: boolean;
+    amount_charged?: string;
+    issuer_signature?: {
+        jws?: string;
+        kid?: string;
+        issuer_jwk?: Es256Jwk;
+    };
+}
+export interface RefusalVerification {
+    schema: typeof REFUSAL_SCHEMA;
+    valid: boolean;
+    checked: boolean;
+    reason?: string;
+    kid?: string | null;
+    refusal_id?: string | null;
+    refusal_code?: string | null;
+    nonce?: string | null;
+    chain_id?: number | null;
+    charged: false;
+    proves: string[];
+    does_not_prove: string[];
+    errors: string[];
+    payload_version?: number;
+    issuer_history?: {
+        hash?: string;
+        version?: number;
+        seq?: number;
+    } | null;
+    payload_hash?: string | null;
+    request_binding?: RequestBindingStatus | null;
+}
+/** Schema inside the JWS payload. Unverified; callers still check the signature. */
+export declare function jwsPayloadSchema(doc: unknown): string | null;
+export declare function isRefusalDocument(doc: unknown): doc is RefusalDocument;
+/**
+ * Verify the issuer signature and that the outer refusal fields match it.
+ * Trust is a JWKS key matched by kid, or an embedded key whose thumbprint
+ * is a pinned trusted kid. The embedded key alone is not a trust root.
+ */
+export declare function verifyRefusal(doc: RefusalDocument, options?: {
+    jwks?: RefusalJwks;
+    trustedKids?: readonly string[];
+}): RefusalVerification;
+//# sourceMappingURL=refusal.d.ts.map

package/dist/refusal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal.d.ts","sourceRoot":"","sources":["../src/refusal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAOL,KAAK,QAAQ,EACd,MAAM,UAAU,CAAC;AAClB,OAAO,EAAuB,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGtF,eAAO,MAAM,cAAc,uBAAuB,CAAC;AACnD,eAAO,MAAM,iBAAiB,uBAAuB,CAAC;AACtD,0FAA0F;AAC1F,eAAO,MAAM,wBAAwB,oBAAqB,CAAC;AAC3D,0DAA0D;AAC1D,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,eAAO,MAAM,cAAc,UAQ1B,CAAC;AAEF,eAAO,MAAM,sBAAsB,UASlC,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,CAAC,EAAE;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,QAAQ,CAAC;KACvB,CAAC;CACH;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,OAAO,cAAc,CAAC;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC1E,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,CAAC,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC/C;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAY5D;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,eAAe,CAMtE;AAoDD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE;IAAE,IAAI,CAAC,EAAE,WAAW,CAAC;IAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAO,GACpE,mBAAmB,CAmHrB"}