inamprotocol 0.1.0

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,54 @@
+# inamprotocol (TypeScript/JavaScript SDK)
+
+Reference TypeScript client for the [INAM Protocol](https://inamprotocol.org) — agent identity (`did:key`), execution receipts, jobs, and reputation. Parity with the Python SDK, [`sdk-python`](https://pypi.org/project/inamprotocol/). See [SPEC.md](https://github.com/inamprotocol/inam-protocol/blob/main/SPEC.md) for the full protocol specification.
+
+This package is a standalone build of the same crypto/client code the [Node reference registry server](https://github.com/inamprotocol/inam-protocol) and its Cloudflare Workers deployment run in production — not a reimplementation with its own drift risk.
+
+## Install
+
+```
+npm install inamprotocol
+```
+
+## Usage
+
+```ts
+import { InamClient, generateKeypair } from "inamprotocol";
+
+const keypair = generateKeypair();
+const client = new InamClient("https://api.inamprotocol.org", keypair);
+
+const profile = await client.registerAgent(["document-extraction"], { name: "My Agent" });
+console.log(profile.id); // did:key:z...
+
+const reputation = await client.getReputation(profile.id);
+```
+
+### Jobs (post → offer → accept → execute → receipt)
+
+```ts
+const job = await poster.postJob({ capability: "document-extraction", specHash: "sha256:..." });
+await worker.submitOffer(job.jobId, "I can do this in an hour");
+await poster.acceptOffer(job.jobId, worker.did);
+
+const receipt = await worker.submitWork(poster.did, {
+  jobId: job.jobId,
+  task: { capability: "document-extraction", specHash: "sha256:...", createdAt: new Date().toISOString() },
+  result: { outputHash: "sha256:...", completedAt: new Date().toISOString() },
+  verification: { method: "payer_confirmation", outcome: "success" },
+});
+await poster.acceptWork(receipt); // finalizes the receipt and auto-completes the job
+```
+
+## What's exported
+
+`InamClient`, `generateKeypair`/`keypairFromPrivateKey`/`publicKeyToDid`/`didToPublicKey`/`sign`/`verify`/`sha256Hex`, `canonicalize` (the canonical-JSON serializer every INAM signature is computed over), `computeReceiptId`/`buildSignableContent`, and the full set of wire-format types (`AgentRecord`, `ExecutionReceipt`, `JobRecord`, `JobOffer`, `ReputationResult`, ...).
+
+## Building from source
+
+This package's `src/` is the actual source the registry server and Worker import directly (see `../src/services/receiptService.ts` and `../worker/src/receiptService.ts`) — there is exactly one implementation of the crypto/canonicalization/receipt-content logic across all TypeScript runtimes in this repo. The Python SDK is an independently maintained, interop-tested port (see `../sdk-python/tests/test_interop.py`).
+
+```
+npm install
+npm run build   # emits dist/ (declaration + sourcemaps)
+```

package/dist/client.d.ts

@@ -0,0 +1,60 @@
+import { type Keypair } from "./crypto/keys.js";
+import { type ReceiptContentInput } from "./core/receiptContent.js";
+import type { AgentRecord, ExecutionReceipt, JobOffer, JobRecord, ReputationResult } from "./types.js";
+/**
+ * Minimal reference client — the seed of the future `@inamprotocol/agent-sdk`
+ * package. Everything here is transport plumbing plus the two signature
+ * schemes (HTTP request signing, receipt content signing); an agent
+ * framework's tool-calling layer would wrap these same calls as
+ * `search_jobs` / `verify_agent` / `submit_work`-style tools.
+ */
+export declare class InamClient {
+    private readonly baseUrl;
+    private readonly keypair;
+    constructor(baseUrl: string, keypair: Keypair);
+    get did(): string;
+    private request;
+    registerAgent(capabilities: string[], metadata?: Record<string, unknown>): Promise<AgentRecord>;
+    getAgent(id: string): Promise<AgentRecord>;
+    linkIdentity(protocol: string, value: string): Promise<AgentRecord>;
+    searchAgents(query: {
+        capability?: string;
+        minReputation?: number;
+        supports?: string;
+    }): Promise<{
+        agents: AgentRecord[];
+    }>;
+    getReputation(id: string): Promise<ReputationResult>;
+    listReceipts(agentId: string): Promise<{
+        receipts: ExecutionReceipt[];
+    }>;
+    /** Called by the worker (agent_b) once a job is complete, off-network. */
+    submitWork(agentAId: string, input: ReceiptContentInput): Promise<ExecutionReceipt>;
+    /** Called by the requester (agent_a) to accept the worker's submitted result. */
+    acceptWork(receipt: ExecutionReceipt): Promise<ExecutionReceipt>;
+    disputeReceipt(receiptId: string, reason: string): Promise<ExecutionReceipt>;
+    postJob(input: {
+        capability: string;
+        specHash: string;
+        budget?: {
+            amount?: string;
+            currency?: string;
+        };
+        expiresAt?: string;
+    }): Promise<JobRecord>;
+    getJob(id: string): Promise<JobRecord>;
+    searchJobs(query: {
+        capability?: string;
+        status?: string;
+    }): Promise<{
+        jobs: JobRecord[];
+    }>;
+    submitOffer(jobId: string, message?: string): Promise<JobRecord>;
+    listOffers(jobId: string): Promise<{
+        offers: JobOffer[];
+    }>;
+    /** Called by the job's poster to accept one offer. */
+    acceptOffer(jobId: string, agentId: string): Promise<JobRecord>;
+    /** Called by the job's poster to cancel a not-yet-completed job. */
+    cancelJob(jobId: string): Promise<JobRecord>;
+}

package/dist/client.js

@@ -0,0 +1,133 @@
+import { canonicalize } from "./crypto/canonical.js";
+import { sha256Hex, sign, toBase64 } from "./crypto/keys.js";
+import { buildSignableContent } from "./core/receiptContent.js";
+/**
+ * Minimal reference client — the seed of the future `@inamprotocol/agent-sdk`
+ * package. Everything here is transport plumbing plus the two signature
+ * schemes (HTTP request signing, receipt content signing); an agent
+ * framework's tool-calling layer would wrap these same calls as
+ * `search_jobs` / `verify_agent` / `submit_work`-style tools.
+ */
+export class InamClient {
+    baseUrl;
+    keypair;
+    constructor(baseUrl, keypair) {
+        this.baseUrl = baseUrl;
+        this.keypair = keypair;
+    }
+    get did() {
+        return this.keypair.did;
+    }
+    async request(method, path, body, opts) {
+        const rawBody = body !== undefined ? JSON.stringify(body) : "";
+        const timestamp = Date.now().toString();
+        const bodyHash = sha256Hex(rawBody);
+        const signingString = `${method.toUpperCase()}\n${path}\n${timestamp}\n${bodyHash}`;
+        const signature = toBase64(sign(new TextEncoder().encode(signingString), this.keypair.privateKey));
+        const headers = {
+            "content-type": "application/json",
+            "inam-agent": this.keypair.did,
+            "inam-timestamp": timestamp,
+            "inam-signature": signature,
+        };
+        if (opts?.idempotencyKey)
+            headers["idempotency-key"] = opts.idempotencyKey;
+        const res = await fetch(`${this.baseUrl}${path}`, {
+            method,
+            headers,
+            body: body !== undefined ? rawBody : undefined,
+        });
+        const json = await res.json();
+        if (!res.ok) {
+            throw new Error(`${method} ${path} -> ${res.status}: ${JSON.stringify(json)}`);
+        }
+        return json;
+    }
+    registerAgent(capabilities, metadata) {
+        return this.request("POST", "/v1/agents", { capabilities, metadata }, { idempotencyKey: `register:${this.keypair.did}` });
+    }
+    getAgent(id) {
+        return this.request("GET", `/v1/agents/${encodeURIComponent(id)}`);
+    }
+    linkIdentity(protocol, value) {
+        return this.request("POST", `/v1/agents/${encodeURIComponent(this.did)}/link`, { protocol, value }, {
+            idempotencyKey: `link:${protocol}:${value}`,
+        });
+    }
+    searchAgents(query) {
+        const params = new URLSearchParams();
+        if (query.capability)
+            params.set("capability", query.capability);
+        if (query.minReputation !== undefined)
+            params.set("min_reputation", String(query.minReputation));
+        if (query.supports)
+            params.set("supports", query.supports);
+        return this.request("GET", `/v1/agents/search?${params.toString()}`);
+    }
+    getReputation(id) {
+        return this.request("GET", `/v1/agents/${encodeURIComponent(id)}/reputation`);
+    }
+    listReceipts(agentId) {
+        return this.request("GET", `/v1/agents/${encodeURIComponent(agentId)}/receipts`);
+    }
+    /** Called by the worker (agent_b) once a job is complete, off-network. */
+    async submitWork(agentAId, input) {
+        // receiptId is content-addressed (hash of everything below), so the
+        // client computes the exact same id the server will, and signs a payload
+        // that already includes it — no round-trip needed before signing.
+        const content = buildSignableContent(agentAId, this.did, input);
+        const signingBytes = new TextEncoder().encode(canonicalize({ ...content, dispute: undefined }));
+        const signature = toBase64(sign(signingBytes, this.keypair.privateKey));
+        return this.request("POST", "/v1/receipts", { ...input, agentAId, signature }, { idempotencyKey: `receipt:${input.jobId}` });
+    }
+    /** Called by the requester (agent_a) to accept the worker's submitted result. */
+    async acceptWork(receipt) {
+        const content = { ...receipt, signatures: undefined, status: undefined, dispute: undefined };
+        const signingBytes = new TextEncoder().encode(canonicalize(content));
+        const signature = toBase64(sign(signingBytes, this.keypair.privateKey));
+        return this.request("POST", `/v1/receipts/${encodeURIComponent(receipt.receiptId)}/countersign`, { signature }, {
+            idempotencyKey: `countersign:${receipt.receiptId}`,
+        });
+    }
+    disputeReceipt(receiptId, reason) {
+        return this.request("POST", `/v1/receipts/${encodeURIComponent(receiptId)}/dispute`, { reason }, {
+            idempotencyKey: `dispute:${receiptId}`,
+        });
+    }
+    // ---- Jobs (SPEC.md §3) — optional pre-work discovery/offer/accept ----
+    postJob(input) {
+        return this.request("POST", "/v1/jobs", input, { idempotencyKey: `job:${input.capability}:${input.specHash}:${Date.now()}` });
+    }
+    getJob(id) {
+        return this.request("GET", `/v1/jobs/${encodeURIComponent(id)}`);
+    }
+    searchJobs(query) {
+        const params = new URLSearchParams();
+        if (query.capability)
+            params.set("capability", query.capability);
+        if (query.status)
+            params.set("status", query.status);
+        return this.request("GET", `/v1/jobs/search?${params.toString()}`);
+    }
+    submitOffer(jobId, message) {
+        return this.request("POST", `/v1/jobs/${encodeURIComponent(jobId)}/offers`, { message }, {
+            idempotencyKey: `offer:${jobId}:${this.did}`,
+        });
+    }
+    listOffers(jobId) {
+        return this.request("GET", `/v1/jobs/${encodeURIComponent(jobId)}/offers`);
+    }
+    /** Called by the job's poster to accept one offer. */
+    acceptOffer(jobId, agentId) {
+        return this.request("POST", `/v1/jobs/${encodeURIComponent(jobId)}/accept`, { agentId }, {
+            idempotencyKey: `accept:${jobId}:${agentId}`,
+        });
+    }
+    /** Called by the job's poster to cancel a not-yet-completed job. */
+    cancelJob(jobId) {
+        return this.request("POST", `/v1/jobs/${encodeURIComponent(jobId)}/cancel`, undefined, {
+            idempotencyKey: `cancel:${jobId}`,
+        });
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAgB,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAA4B,MAAM,0BAA0B,CAAC;AAG1F;;;;;;GAMG;AACH,MAAM,OAAO,UAAU;IAEF;IACA;IAFnB,YACmB,OAAe,EACf,OAAgB;QADhB,YAAO,GAAP,OAAO,CAAQ;QACf,YAAO,GAAP,OAAO,CAAS;IAChC,CAAC;IAEJ,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc,EAAE,IAAkC;QACvG,MAAM,OAAO,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,aAAa,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,KAAK,IAAI,KAAK,SAAS,KAAK,QAAQ,EAAE,CAAC;QACpF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QAEnG,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YAC9B,gBAAgB,EAAE,SAAS;YAC3B,gBAAgB,EAAE,SAAS;SAC5B,CAAC;QACF,IAAI,IAAI,EAAE,cAAc;YAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC;QAE3E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SAC/C,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,IAAI,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,aAAa,CAAC,YAAsB,EAAE,QAAkC;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5H,CAAC;IAED,QAAQ,CAAC,EAAU;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,YAAY,CAAC,QAAgB,EAAE,KAAa;QAC1C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE;YAClG,cAAc,EAAE,QAAQ,QAAQ,IAAI,KAAK,EAAE;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,YAAY,CAAC,KAAyE;QACpF,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;QACjG,IAAI,KAAK,CAAC,QAAQ;YAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,qBAAqB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,aAAa,CAAC,EAAU;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,kBAAkB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;IAChF,CAAC;IAED,YAAY,CAAC,OAAe;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,cAAc,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACnF,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,KAA0B;QAC3D,oEAAoE;QACpE,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAChG,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/H,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,UAAU,CAAC,OAAyB;QACxC,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC7F,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,EAAE;YAC9G,cAAc,EAAE,eAAe,OAAO,CAAC,SAAS,EAAE;SACnD,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,SAAiB,EAAE,MAAc;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE;YAC/F,cAAc,EAAE,WAAW,SAAS,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAED,yEAAyE;IAEzE,OAAO,CAAC,KAAoH;QAC1H,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,OAAO,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAChI,CAAC;IAED,MAAM,CAAC,EAAU;QACf,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,UAAU,CAAC,KAA+C;QACxD,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,WAAW,CAAC,KAAa,EAAE,OAAgB;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE;YACvF,cAAc,EAAE,SAAS,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,KAAa;QACtB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7E,CAAC;IAED,sDAAsD;IACtD,WAAW,CAAC,KAAa,EAAE,OAAe;QACxC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE;YACvF,cAAc,EAAE,UAAU,KAAK,IAAI,OAAO,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,oEAAoE;IACpE,SAAS,CAAC,KAAa;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE;YACrF,cAAc,EAAE,UAAU,KAAK,EAAE;SAClC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/core/receiptContent.d.ts

@@ -0,0 +1,41 @@
+import type { SignableReceiptContent } from "../types.js";
+/**
+ * Pure, dependency-free receipt content logic shared by both the registry
+ * server and any SDK/client. Deliberately has no import from
+ * services/storage/middleware — an SDK package must be able to depend on
+ * this without pulling in server-only code.
+ */
+export interface ReceiptContentInput {
+    jobId: string;
+    task: {
+        capability: string;
+        specHash: string;
+        createdAt: string;
+    };
+    result: {
+        outputHash: string;
+        outputUri?: string;
+        completedAt: string;
+    };
+    settlement?: {
+        paymentRef?: string;
+        amount?: string;
+        currency?: string;
+    };
+    verification: {
+        method: "payer_confirmation" | "independent_validator" | "test_suite_pass";
+        verifier?: string;
+        outcome: "success" | "partial" | "failed";
+    };
+}
+/**
+ * Receipt IDs are content-addressed: the hash of everything except the id
+ * itself and the signatures/status/dispute fields that get added later. This
+ * lets the worker (agent_b) compute the exact id client-side, before the
+ * server has seen the receipt, so it can sign a payload that includes its own
+ * id without any round-trip — and resubmitting identical content always maps
+ * to the same id instead of minting a duplicate.
+ */
+export declare function computeReceiptId(agentAId: string, agentBId: string, input: ReceiptContentInput): string;
+/** The exact object shape that must be signed — callers compute this client-side before signing. */
+export declare function buildSignableContent(agentAId: string, agentBId: string, input: ReceiptContentInput): SignableReceiptContent;

package/dist/core/receiptContent.js

@@ -0,0 +1,39 @@
+import { canonicalize } from "../crypto/canonical.js";
+import { sha256Hex } from "../crypto/keys.js";
+/**
+ * Receipt IDs are content-addressed: the hash of everything except the id
+ * itself and the signatures/status/dispute fields that get added later. This
+ * lets the worker (agent_b) compute the exact id client-side, before the
+ * server has seen the receipt, so it can sign a payload that includes its own
+ * id without any round-trip — and resubmitting identical content always maps
+ * to the same id instead of minting a duplicate.
+ */
+export function computeReceiptId(agentAId, agentBId, input) {
+    const base = {
+        jobId: input.jobId,
+        agentA: { id: agentAId, role: "requester" },
+        agentB: { id: agentBId, role: "worker" },
+        task: input.task,
+        result: input.result,
+        settlement: input.settlement,
+        verification: input.verification,
+    };
+    return `sha256:${sha256Hex(canonicalize(base))}`;
+}
+/** The exact object shape that must be signed — callers compute this client-side before signing. */
+export function buildSignableContent(agentAId, agentBId, input) {
+    const receiptId = computeReceiptId(agentAId, agentBId, input);
+    return {
+        receiptVersion: "1.0",
+        receiptId,
+        jobId: input.jobId,
+        agentA: { id: agentAId, role: "requester" },
+        agentB: { id: agentBId, role: "worker" },
+        task: input.task,
+        result: input.result,
+        settlement: input.settlement,
+        verification: input.verification,
+        dispute: { status: "none", windowClosesAt: "" }, // placeholder, excluded from signature scope in practice
+    };
+}
+//# sourceMappingURL=receiptContent.js.map

package/dist/core/receiptContent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receiptContent.js","sourceRoot":"","sources":["../../src/core/receiptContent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAkB9C;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,QAAgB,EAAE,KAA0B;IAC7F,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE;QAC3C,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC;IACF,OAAO,UAAU,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,QAAgB,EAChB,KAA0B;IAE1B,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC9D,OAAO;QACL,cAAc,EAAE,KAAK;QACrB,SAAS;QACT,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE;QAC3C,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,EAAE,EAAE,yDAAyD;KAC3G,CAAC;AACJ,CAAC"}

package/dist/crypto/canonical.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Minimal canonical JSON serializer: recursively sorts object keys and emits
+ * whitespace-free JSON. This is a practical subset of RFC 8785 (JCS) — it does
+ * not handle every JCS number-formatting edge case, but it is deterministic
+ * for the plain string/number/boolean/array/object shapes used by Inam Protocol's own
+ * schemas, which is all that's required for our signer and verifier to agree.
+ */
+export declare function canonicalize(value: unknown): string;

package/dist/crypto/canonical.js

@@ -0,0 +1,25 @@
+/**
+ * Minimal canonical JSON serializer: recursively sorts object keys and emits
+ * whitespace-free JSON. This is a practical subset of RFC 8785 (JCS) — it does
+ * not handle every JCS number-formatting edge case, but it is deterministic
+ * for the plain string/number/boolean/array/object shapes used by Inam Protocol's own
+ * schemas, which is all that's required for our signer and verifier to agree.
+ */
+export function canonicalize(value) {
+    return stringify(value);
+}
+function stringify(value) {
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return "[" + value.map(stringify).join(",") + "]";
+    }
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    const entries = keys
+        .filter((k) => obj[k] !== undefined)
+        .map((k) => JSON.stringify(k) + ":" + stringify(obj[k]));
+    return "{" + entries.join(",") + "}";
+}
+//# sourceMappingURL=canonical.js.map

package/dist/crypto/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/crypto/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACpD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI;SACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC"}

package/dist/crypto/keys.d.ts

@@ -0,0 +1,14 @@
+export interface Keypair {
+    did: string;
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+}
+export declare function publicKeyToDid(publicKey: Uint8Array): string;
+export declare function didToPublicKey(did: string): Uint8Array;
+export declare function generateKeypair(): Keypair;
+export declare function keypairFromPrivateKey(privateKey: Uint8Array): Keypair;
+export declare function sign(message: Uint8Array, privateKey: Uint8Array): Uint8Array;
+export declare function verify(signature: Uint8Array, message: Uint8Array, did: string): boolean;
+export declare function sha256Hex(data: Uint8Array | string): string;
+export declare function toBase64(bytes: Uint8Array): string;
+export declare function fromBase64(b64: string): Uint8Array;

package/dist/crypto/keys.js

@@ -0,0 +1,54 @@
+import * as ed25519 from "@noble/ed25519";
+import { sha512 } from "@noble/hashes/sha512";
+import { sha256 } from "@noble/hashes/sha256";
+import bs58 from "bs58";
+// @noble/ed25519 v2 needs a sha512 implementation wired in for the sync API.
+ed25519.etc.sha512Sync = (...msgs) => sha512(ed25519.etc.concatBytes(...msgs));
+// multicodec value for ed25519-pub (0xed) as a varint: [0xed, 0x01].
+const ED25519_MULTICODEC_PREFIX = Uint8Array.from([0xed, 0x01]);
+export function publicKeyToDid(publicKey) {
+    const prefixed = new Uint8Array(ED25519_MULTICODEC_PREFIX.length + publicKey.length);
+    prefixed.set(ED25519_MULTICODEC_PREFIX, 0);
+    prefixed.set(publicKey, ED25519_MULTICODEC_PREFIX.length);
+    return "did:key:z" + bs58.encode(prefixed);
+}
+export function didToPublicKey(did) {
+    if (!did.startsWith("did:key:z")) {
+        throw new Error(`Unsupported DID method: ${did}`);
+    }
+    const decoded = bs58.decode(did.slice("did:key:z".length));
+    if (decoded[0] !== 0xed || decoded[1] !== 0x01) {
+        throw new Error(`Unsupported key type in DID: ${did}`);
+    }
+    return decoded.slice(2);
+}
+export function generateKeypair() {
+    return keypairFromPrivateKey(ed25519.utils.randomPrivateKey());
+}
+export function keypairFromPrivateKey(privateKey) {
+    const publicKey = ed25519.getPublicKey(privateKey);
+    return { did: publicKeyToDid(publicKey), publicKey, privateKey };
+}
+export function sign(message, privateKey) {
+    return ed25519.sign(message, privateKey);
+}
+export function verify(signature, message, did) {
+    try {
+        const publicKey = didToPublicKey(did);
+        return ed25519.verify(signature, message, publicKey);
+    }
+    catch {
+        return false;
+    }
+}
+export function sha256Hex(data) {
+    const bytes = typeof data === "string" ? new TextEncoder().encode(data) : data;
+    return Buffer.from(sha256(bytes)).toString("hex");
+}
+export function toBase64(bytes) {
+    return Buffer.from(bytes).toString("base64");
+}
+export function fromBase64(b64) {
+    return new Uint8Array(Buffer.from(b64, "base64"));
+}
+//# sourceMappingURL=keys.js.map

package/dist/crypto/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/crypto/keys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,6EAA6E;AAC7E,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,IAAkB,EAAE,EAAE,CACjD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;AAE3C,qEAAqE;AACrE,MAAM,yBAAyB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAQhE,MAAM,UAAU,cAAc,CAAC,SAAqB;IAClD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,yBAAyB,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACrF,QAAQ,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;IAC3C,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAC1D,OAAO,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAsB;IAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAAmB,EAAE,UAAsB;IAC9D,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,SAAqB,EAAE,OAAmB,EAAE,GAAW;IAC5E,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAyB;IACjD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAiB;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export { InamClient } from "./client.js";
+export { generateKeypair, keypairFromPrivateKey, publicKeyToDid, didToPublicKey, sign, verify, sha256Hex, toBase64, fromBase64, type Keypair, } from "./crypto/keys.js";
+export { canonicalize } from "./crypto/canonical.js";
+export { computeReceiptId, buildSignableContent, type ReceiptContentInput } from "./core/receiptContent.js";
+export type { LinkedIdentities, AgentRecord, VerificationMethod, ReceiptOutcome, ReceiptStatus, DisputeStatus, ExecutionReceipt, SignableReceiptContent, ReputationComponents, ReputationResult, JobStatus, JobOffer, JobRecord, } from "./types.js";

package/dist/index.js

@@ -0,0 +1,5 @@
+export { InamClient } from "./client.js";
+export { generateKeypair, keypairFromPrivateKey, publicKeyToDid, didToPublicKey, sign, verify, sha256Hex, toBase64, fromBase64, } from "./crypto/keys.js";
+export { canonicalize } from "./crypto/canonical.js";
+export { computeReceiptId, buildSignableContent } from "./core/receiptContent.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,IAAI,EACJ,MAAM,EACN,SAAS,EACT,QAAQ,EACR,UAAU,GAEX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAA4B,MAAM,0BAA0B,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,110 @@
+/**
+ * Wire-format types for the INAM Protocol REST API. This is the JS/TS SDK's
+ * own copy — parity with `sdk-python/inamprotocol/types` and the registry
+ * server's `src/types.ts` — kept in sync by hand rather than shared, since
+ * these are plain data shapes with no logic to drift.
+ */
+export interface LinkedIdentities {
+    agentpass_id?: string;
+    aitp_id?: string;
+    passport_id?: string;
+    a2a_endpoint?: string;
+}
+export interface AgentRecord {
+    id: string;
+    capabilities: string[];
+    metadata: Record<string, unknown>;
+    linked: LinkedIdentities;
+    stakeUsd: number;
+    createdAt: string;
+}
+export type VerificationMethod = "payer_confirmation" | "independent_validator" | "test_suite_pass";
+export type ReceiptOutcome = "success" | "partial" | "failed";
+export type ReceiptStatus = "draft" | "finalized" | "disputed";
+export type DisputeStatus = "none" | "open" | "resolved";
+export interface ExecutionReceipt {
+    receiptVersion: "1.0";
+    receiptId: string;
+    jobId: string;
+    agentA: {
+        id: string;
+        role: "requester";
+    };
+    agentB: {
+        id: string;
+        role: "worker";
+    };
+    task: {
+        capability: string;
+        specHash: string;
+        createdAt: string;
+    };
+    result: {
+        outputHash: string;
+        outputUri?: string;
+        completedAt: string;
+    };
+    settlement?: {
+        paymentRef?: string;
+        amount?: string;
+        currency?: string;
+    };
+    verification: {
+        method: VerificationMethod;
+        verifier?: string;
+        outcome: ReceiptOutcome;
+    };
+    dispute: {
+        status: DisputeStatus;
+        reason?: string;
+        windowClosesAt: string;
+    };
+    signatures: {
+        agentB?: string;
+        agentA?: string;
+    };
+    status: ReceiptStatus;
+}
+/** The subset of a receipt that gets signed — signatures can't sign themselves. */
+export type SignableReceiptContent = Omit<ExecutionReceipt, "signatures" | "status" | "dispute"> & {
+    dispute: {
+        status: "none";
+        windowClosesAt: string;
+    };
+};
+export interface ReputationComponents {
+    eigenWeight: number;
+    verifiedReceipts: number;
+    rawReceipts: number;
+    successRate: number;
+    volumeUsd: number;
+    stakeUsd: number;
+    decayHalfLifeDays: number;
+}
+export interface ReputationResult {
+    trustScore: number;
+    components: ReputationComponents;
+    flags: string[];
+}
+export type JobStatus = "open" | "accepted" | "completed" | "cancelled";
+export interface JobOffer {
+    agentId: string;
+    message?: string;
+    createdAt: string;
+}
+export interface JobRecord {
+    jobId: string;
+    postedBy: string;
+    capability: string;
+    specHash: string;
+    budget?: {
+        amount?: string;
+        currency?: string;
+    };
+    status: JobStatus;
+    offers: JobOffer[];
+    acceptedAgentId?: string;
+    receiptId?: string;
+    createdAt: string;
+    expiresAt?: string;
+}

package/dist/types.js

@@ -0,0 +1,8 @@
+/**
+ * Wire-format types for the INAM Protocol REST API. This is the JS/TS SDK's
+ * own copy — parity with `sdk-python/inamprotocol/types` and the registry
+ * server's `src/types.ts` — kept in sync by hand rather than shared, since
+ * these are plain data shapes with no logic to drift.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "inamprotocol",
+  "version": "0.1.0",
+  "description": "Reference TypeScript/JavaScript SDK for the INAM Protocol — agent identity, execution receipts, jobs, and reputation",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "license": "Apache-2.0",
+  "keywords": [
+    "inam",
+    "agent",
+    "ai-agent",
+    "identity",
+    "reputation",
+    "did",
+    "protocol",
+    "execution-receipt"
+  ],
+  "homepage": "https://inamprotocol.org",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/inamprotocol/inam-protocol.git",
+    "directory": "sdk-js"
+  },
+  "bugs": "https://github.com/inamprotocol/inam-protocol/issues",
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "@noble/ed25519": "^2.1.0",
+    "@noble/hashes": "^1.5.0",
+    "bs58": "^6.0.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.5.4"
+  }
+}