Available today · v0.2.2 on npm
SD-JWT receipts for agent tool calls
~30 lines from npm install to a verified call. The human issues a scoped SD-JWT receipt; the agent presents it with a fresh KB-JWT (proof of holder-key possession); middleware verifies before any side effect. Rejects wrong audience, expired receipt, amount-over-cap, currency mismatch, revoked status, or replayed nonce — each with a crisp, switchable failure reason.
import { allow, present, verify, staticIssuerResolver } from '@bolyra/delegation';
import { generateKeyPair } from 'jose';
// 1. Human issues a scoped SD-JWT receipt to an agent.
const issuer = await generateKeyPair('EdDSA');
const holder = await generateKeyPair('EdDSA');
const receipt = await allow({
iss: 'did:web:bolyra.ai',
sub: 'did:bolyra:agent-alice',
aud: 'https://merchant.example',
act: 'checkout.charge',
perm: 'FINANCIAL_SMALL',
max: { amount: 50, currency: 'USD' },
ttlSeconds: 3600,
agentPubKey: holder.publicKey,
}, { privateKey: issuer.privateKey, kid: 'k1' });
// 2. Agent presents the receipt with a fresh server nonce (KB-JWT binding).
// `serverNonce` is the 32-byte random the merchant returned on its prior
// HTTP 402 response (`Bolyra-Challenge` header) — see /402 for the flow.
const serverNonce = crypto.randomUUID(); // in production: read from 402 response
const presented = await present(receipt, holder.privateKey, {
audience: 'https://merchant.example',
nonce: serverNonce,
});
// 3. Middleware verifies before the tool runs.
const result = await verify(presented, {
audience: 'https://merchant.example',
action: 'checkout.charge',
perm: 'FINANCIAL_SMALL',
amount: 25, currency: 'USD',
kbNonce: serverNonce,
trustedIssuers: staticIssuerResolver({ 'did:web:bolyra.ai': { k1: issuer.publicKey } }),
});
if (!result.ok) throw new Error(`delegation rejected: ${result.reason}`);Today (v0.2.2): SD-JWT receipts with selective disclosure + KB-JWT proof-of-possession + IETF status-list revocation (draft-20) + EdDSA over Ed25519. Legacy v0.1 compact-JWS receipts still verify via acceptLegacyV01. ZKP upgrade (v0.3.0 — shipped): zero-knowledge mutual handshake and one-way scope-narrowing delegation chains, same circuit-compatible permission encoding. npm install @bolyra/sdk.
