The open, lite origination layer for AlgoVoi Agent Passport. It content-addresses the public fields of an agent credential — agent_id, issuer, scope, validity_window — into a deterministic, recomputable passportRef.

This passportRef is exactly the agent_ref that Spend Guardrail (lite) binds. Byte-identical to the Python package algovoi-agent-passport-lite (JCS via canonicalize / RFC 8785 + SHA-256; the JCS object uses snake_case keys so the canonical bytes match Python exactly).

passportRef = "sha256:" + SHA-256(JCS({ agent_id, issuer, scope, validity_window }))

Install & use

npm install @algovoi/agent-passport-lite

import { passportRef, verify } from '@algovoi/agent-passport-lite';

const ref = passportRef('agent-001', 'did:algo:issuer', 'payments', '2026-06-21/2026-09-21');
verify(ref, 'agent-001', 'did:algo:issuer', 'payments', '2026-06-21/2026-09-21'); // true
verify(ref, 'agent-002', 'did:algo:issuer', 'payments', '2026-06-21/2026-09-21'); // false — agent tamper

All four fields are byte-load-bearing; an empty field throws.

Conformance

npm test   # node conformance/agent_passport_lite_v1/verify.mjs

Recomputes the same vectors as Python (expected hashes are Python-produced, so a PASS proves byte-for-byte parity). passport_1 / passport_2 equal the agent_1 / agent_2 references in spend_guardrail_lite_v1.

Lite vs commercial

Lite is content-addressed and unsigned. The commercial Agent Passport issues and verifies Falcon-1024 PQC credentials, binds spend limits, and supports revocation.