mppx 0.14.1 → 0.16.0

package/dist/attestation/Server.js

@@ -1,8 +0,0 @@
-/** Verifies every configured request-attestation protocol. */
-export async function verify(request, verifiers) {
-    const outcomes = {};
-    for (const [name, verifier] of Object.entries(verifiers))
-        outcomes[name] = await verifier.verify(request);
-    return outcomes;
-}
-//# sourceMappingURL=Server.js.map

package/dist/attestation/Types.d.ts

@@ -1,76 +0,0 @@
-import type { MaybePromise } from '../internal/types.js';
-import type { Algorithms } from './Constants.js';
-/** RFC 9421 algorithms implemented by the request-attestation signer and verifier. */
-export type SignatureAlgorithm = (typeof Algorithms)[keyof typeof Algorithms];
-/** Resolves a trusted public key for a parsed request signature. */
-export type KeyResolver = (parameters: {
-    /** RFC 9421 algorithm declared by the signature. */
-    algorithm: SignatureAlgorithm;
-    /** Key identifier declared by the signature. */
-    keyId: string;
-    /** Request carrying the signature. */
-    request: Request;
-}) => MaybePromise<CryptoKey | undefined>;
-/**
- * The complete outcome of attempting one protocol verifier.
- *
- * `absent` means the protocol did not appear on the request. `invalid` means
- * it appeared but failed validation and must reject the request. `unverified`
- * means key material or another required verification dependency was unavailable.
- * `verified` carries protocol-specific data that is safe for callers to inspect.
- */
-export type Verification<value = unknown> = {
-    status: 'absent';
-} | {
-    status: 'invalid';
-    reason: string;
-} | {
-    status: 'unverified';
-    reason: string;
-} | {
-    status: 'verified';
-    value: value;
-};
-/**
- * Verifies one request-attestation protocol carried by an HTTP request.
- *
- * Verifiers are registered in a {@link VerifierMap}; each map key names the
- * result returned to the caller.
- */
-export type Verifier<value = unknown> = {
-    /** Validates the request and returns a complete protocol verification outcome. */
-    verify: (request: Request) => MaybePromise<Verification<value>>;
-};
-/** Maps each recognized protocol name to its verifier. */
-export type VerifierMap = Readonly<Record<string, Verifier>>;
-/** Preserves each configured protocol's complete verification outcome. */
-export type VerificationsFrom<verifiers extends VerifierMap> = {
-    readonly [protocol in keyof verifiers]: Awaited<ReturnType<verifiers[protocol]['verify']>>;
-};
-/**
- * Values shared by every signer contributing to one HTTP request attempt.
- *
- * A caller may reuse this context across independent signature protocols so
- * they describe the same attempt. A later network retry must use a new context.
- */
-export type SigningContext = {
-    /** Unix timestamp, in seconds, at which the request attempt was created. */
-    readonly created: number;
-    /** Base64url-encoded random value identifying this request attempt. */
-    readonly nonce: string;
-};
-/**
- * Signs each outbound HTTP request, including MPP payment retries.
- *
- * The protocol type preserves which adapter produced the signer for diagnostics
- * and composition, without asserting that the signer alone authorizes payment.
- */
-export type Signer<protocol extends string = string> = {
-    /** Protocol identifier used for diagnostics. */
-    protocol: protocol;
-    /** Returns a new request containing the protocol's signature material. */
-    sign: (request: Request, context?: SigningContext | undefined) => MaybePromise<Request>;
-};
-/** Maps application-defined names to request-attestation signers. */
-export type SignerMap = Readonly<Record<string, Signer>>;
-//# sourceMappingURL=Types.d.ts.map

package/dist/attestation/internal/SigningContext.d.ts

@@ -1,4 +0,0 @@
-import type * as Types from '../Types.js';
-/** Creates the signing context for one outbound HTTP request attempt. */
-export declare function create(): Types.SigningContext;
-//# sourceMappingURL=SigningContext.d.ts.map

package/dist/tap/client/index.d.ts

@@ -1,26 +0,0 @@
-import type * as AttestationTypes from '../../attestation/Types.js';
-import { Constants } from '../Constants.js';
-/**
- * Creates a TAP request signer.
- *
- * The signer emits RFC 9421 HTTP message signatures with TAP's
- * `agent-browser-auth` or `agent-payer-auth` tag. Pass it to
- * `Attestation.Client.wrapFetch` so MPPX signs both the initial request and
- * its automatic paid retry.
- */
-export declare function signer(config: signer.Config): AttestationTypes.Signer<typeof Constants.protocol>;
-export declare namespace signer {
-    type Config = {
-        /** TAP signature type for the request. */
-        intent: (typeof Constants.intents)[keyof typeof Constants.intents];
-        /** Ed25519 or RSA-PSS SHA-512 private key provisioned to the agent provider. */
-        key: CryptoKey;
-        /** Identifier the merchant uses to resolve the signing public key. */
-        keyId: string;
-        /** Signature lifetime in seconds. TAP permits at most eight minutes. @default 480 */
-        expiresIn?: number | undefined;
-        /** RFC 9421 dictionary label. @default 'tap' */
-        label?: string | undefined;
-    };
-}
-//# sourceMappingURL=index.d.ts.map

package/dist/tap/server/index.d.ts

@@ -1,20 +0,0 @@
-import type * as Attestation from '../../attestation/Types.js';
-import type * as Store from '../../Store.js';
-import type * as Types from '../Types.js';
-/**
- * Creates a verifier for TAP agent-recognition signatures.
- *
- * TAP verifies trusted agent participation and request integrity. Consumer
- * recognition and payment-container verification stay protocol-specific and
- * are intentionally not inferred from this header-only verifier.
- */
-export declare function verifier(config: verifier.Config): Attestation.Verifier<Types.VerifiedRequest>;
-export declare namespace verifier {
-    type Config = {
-        /** Resolves a TAP-approved public key by its `keyid` and signature algorithm. */
-        keyResolver: Attestation.KeyResolver;
-        /** Atomically consumes each nonce in shared storage for multi-instance deployments. */
-        nonceStore: Store.AtomicStore;
-    };
-}
-//# sourceMappingURL=index.d.ts.map