peacprotocol · jithinraj · Feb 21, 2026 · Feb 21, 2026 · Feb 21, 2026 · Feb 21, 2026
diff --git a/package.json b/package.json
@@ -62,8 +62,6 @@
     "version:bump": "node scripts/bump-version.mjs"
   },
   "devDependencies": {
-    "@peac/contracts": "workspace:^",
-    "@peac/mappings-tap": "workspace:^",
     "@types/node": "^22.19.11",
     "@eslint/js": "^10.0.1",
     "ajv": "^8.18.0",

diff --git a/packages/worker-shared/package.json b/packages/worker-shared/package.json
@@ -0,0 +1,33 @@
+{
+  "name": "@peac/worker-shared",
+  "version": "0.10.13",
+  "private": true,
+  "description": "Shared runtime-neutral TAP verification logic for edge worker surfaces",
+  "type": "module",
+  "main": "./src/index.ts",
+  "types": "./src/index.ts",
+  "exports": {
+    ".": {
+      "types": "./src/index.ts",
+      "import": "./src/index.ts",
+      "default": "./src/index.ts"
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/peacprotocol/peac.git",
+    "directory": "packages/worker-shared"
+  },
+  "author": "PEAC Protocol Contributors",
+  "license": "Apache-2.0",
+  "scripts": {
+    "build": "tsc --noEmit",
+    "typecheck": "tsc --noEmit",
+    "clean": "node -e \"/* no-op: source-exports package has no build artifacts */\""
+  },
+  "dependencies": {
+    "@peac/contracts": "workspace:*",
+    "@peac/mappings-tap": "workspace:*"
+  },
+  "sideEffects": false
+}
diff --git a/surfaces/workers/_shared/core/config.ts → packages/worker-shared/src/config.ts b/surfaces/workers/_shared/core/config.ts → packages/worker-shared/src/config.ts
diff --git a/surfaces/workers/_shared/core/errors.ts → packages/worker-shared/src/errors.ts b/surfaces/workers/_shared/core/errors.ts → packages/worker-shared/src/errors.ts
diff --git a/surfaces/workers/_shared/core/hash.ts → packages/worker-shared/src/hash.ts b/surfaces/workers/_shared/core/hash.ts → packages/worker-shared/src/hash.ts
diff --git a/surfaces/workers/_shared/core/index.ts → packages/worker-shared/src/index.ts b/surfaces/workers/_shared/core/index.ts → packages/worker-shared/src/index.ts
diff --git a/surfaces/workers/_shared/core/types.ts → packages/worker-shared/src/types.ts b/surfaces/workers/_shared/core/types.ts → packages/worker-shared/src/types.ts
diff --git a/...aces/workers/_shared/core/verification.ts → packages/worker-shared/src/verification.ts b/...aces/workers/_shared/core/verification.ts → packages/worker-shared/src/verification.ts
diff --git a/packages/worker-shared/tsconfig.json b/packages/worker-shared/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "composite": false,
+    "noEmit": true
+  },
+  "include": ["src"]
+}
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/surfaces/_shared/contracts/error-contract.ts b/surfaces/_shared/contracts/error-contract.ts
diff --git a/surfaces/_shared/contracts/index.ts b/surfaces/_shared/contracts/index.ts
diff --git a/surfaces/workers/akamai/package.json b/surfaces/workers/akamai/package.json
@@ -35,7 +35,8 @@
     "@peac/contracts": "workspace:^",
     "@peac/http-signatures": "workspace:*",
     "@peac/jwks-cache": "workspace:*",
-    "@peac/mappings-tap": "workspace:*"
+    "@peac/mappings-tap": "workspace:*",
+    "@peac/worker-shared": "workspace:*"
   },
   "devDependencies": {
     "typescript": "^5.3.0",

diff --git a/surfaces/workers/akamai/src/config.ts b/surfaces/workers/akamai/src/config.ts
@@ -8,7 +8,7 @@
  */
 
 import type { WorkerConfig, EWRequest } from './types.js';
-import { parseConfigFromEnv } from '../../_shared/core/index.js';
+import { parseConfigFromEnv } from '@peac/worker-shared';
 
 /**
  * Parse config from Akamai Property Manager variables.
@@ -44,4 +44,4 @@ export function parseConfigFromRecord(env: Record<string, string | undefined>):
 }
 
 // Re-export config utilities from shared core
-export { matchesBypassPath, isIssuerAllowed } from '../../_shared/core/index.js';
+export { matchesBypassPath, isIssuerAllowed } from '@peac/worker-shared';
diff --git a/surfaces/workers/akamai/src/errors.ts b/surfaces/workers/akamai/src/errors.ts
@@ -8,7 +8,7 @@
  */
 
 import type { ProblemDetails, EWRequestHandler } from './types.js';
-import { ErrorCodes, createProblemDetails } from '../../_shared/core/index.js';
+import { ErrorCodes, createProblemDetails } from '@peac/worker-shared';
 
 // Re-export error codes from shared core
 export { ErrorCodes };

diff --git a/surfaces/workers/akamai/src/index.ts b/surfaces/workers/akamai/src/index.ts
@@ -32,11 +32,7 @@ import {
   ErrorCodes,
   createErrorResponse,
 } from './errors.js';
-import {
-  handleVerification,
-  type HandlerResult,
-  type RequestLike,
-} from '../../_shared/core/index.js';
+import { handleVerification, type HandlerResult, type RequestLike } from '@peac/worker-shared';
 
 // Re-export types and utilities
 export type {

diff --git a/surfaces/workers/akamai/src/replay-store.ts b/surfaces/workers/akamai/src/replay-store.ts
@@ -15,7 +15,7 @@
  */
 
 import type { ReplayStore, ReplayContext, EdgeKVConfig } from './types.js';
-import { hashReplayKey } from '../../_shared/core/index.js';
+import { hashReplayKey } from '@peac/worker-shared';
 
 // Re-export hash function for testing
 export { hashReplayKey };

diff --git a/surfaces/workers/akamai/src/types.ts b/surfaces/workers/akamai/src/types.ts
@@ -14,7 +14,7 @@ export type {
   ReplayStore,
   VerificationResult,
   ProblemDetails,
-} from '../../_shared/core/index.js';
+} from '@peac/worker-shared';
 
 /**
  * Akamai EdgeWorkers environment configuration.

diff --git a/surfaces/workers/cloudflare/package.json b/surfaces/workers/cloudflare/package.json
@@ -36,7 +36,8 @@
     "@peac/contracts": "workspace:^",
     "@peac/http-signatures": "workspace:*",
     "@peac/jwks-cache": "workspace:*",
-    "@peac/mappings-tap": "workspace:*"
+    "@peac/mappings-tap": "workspace:*",
+    "@peac/worker-shared": "workspace:*"
   },
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20260214.0",

diff --git a/surfaces/workers/cloudflare/src/config.ts b/surfaces/workers/cloudflare/src/config.ts
@@ -8,12 +8,8 @@
  */
 
 import type { Env } from './types.js';
-import type { WorkerConfig } from '../../_shared/core/index.js';
-import {
-  parseConfigFromEnv,
-  matchesBypassPath,
-  isIssuerAllowed,
-} from '../../_shared/core/index.js';
+import type { WorkerConfig } from '@peac/worker-shared';
+import { parseConfigFromEnv, matchesBypassPath, isIssuerAllowed } from '@peac/worker-shared';
 
 // Re-export shared utilities
 export { matchesBypassPath, isIssuerAllowed };

diff --git a/surfaces/workers/cloudflare/src/errors.ts b/surfaces/workers/cloudflare/src/errors.ts
@@ -8,7 +8,7 @@
  */
 
 import type { ProblemDetails } from './types.js';
-import { ErrorCodes, createProblemDetails } from '../../_shared/core/index.js';
+import { ErrorCodes, createProblemDetails } from '@peac/worker-shared';
 
 // Re-export error codes from shared core
 export { ErrorCodes };

diff --git a/surfaces/workers/cloudflare/src/index.ts b/surfaces/workers/cloudflare/src/index.ts
@@ -21,11 +21,7 @@ import type { Env, WorkerConfig } from './types.js';
 import { parseConfig } from './config.js';
 import { createReplayStore } from './replay-store.js';
 import { createErrorResponse, createChallengeResponse, ErrorCodes } from './errors.js';
-import {
-  handleVerification,
-  type HandlerResult,
-  type RequestLike,
-} from '../../_shared/core/index.js';
+import { handleVerification, type HandlerResult, type RequestLike } from '@peac/worker-shared';
 
 // Re-export types and utilities
 export type {

diff --git a/surfaces/workers/cloudflare/src/replay-store.ts b/surfaces/workers/cloudflare/src/replay-store.ts
@@ -17,7 +17,7 @@
 
 import type { ReplayStore, ReplayContext } from './types.js';
 import type { Env } from './types.js';
-import { hashReplayKey } from '../../_shared/core/index.js';
+import { hashReplayKey } from '@peac/worker-shared';
 
 // Re-export hash function for testing
 export { hashReplayKey };

diff --git a/surfaces/workers/cloudflare/src/types.ts b/surfaces/workers/cloudflare/src/types.ts
@@ -14,7 +14,7 @@ export type {
   ReplayStore,
   VerificationResult,
   ProblemDetails,
-} from '../../_shared/core/index.js';
+} from '@peac/worker-shared';
 
 /**
  * Cloudflare Worker environment bindings.

diff --git a/surfaces/workers/fastly/package.json b/surfaces/workers/fastly/package.json
@@ -35,7 +35,8 @@
     "@peac/contracts": "workspace:^",
     "@peac/http-signatures": "workspace:*",
     "@peac/jwks-cache": "workspace:*",
-    "@peac/mappings-tap": "workspace:*"
+    "@peac/mappings-tap": "workspace:*",
+    "@peac/worker-shared": "workspace:*"
   },
   "devDependencies": {
     "@fastly/js-compute": "^3.0.0",

diff --git a/surfaces/workers/fastly/src/config.ts b/surfaces/workers/fastly/src/config.ts
@@ -8,7 +8,7 @@
  */
 
 import type { WorkerConfig } from './types.js';
-import { parseConfigFromEnv } from '../../_shared/core/index.js';
+import { parseConfigFromEnv } from '@peac/worker-shared';
 
 /**
  * Parse config from Fastly Edge Dictionary.
@@ -80,4 +80,4 @@ function getDictionary(name: string): Map<string, string> | null {
 }
 
 // Re-export config utilities from shared core
-export { matchesBypassPath, isIssuerAllowed } from '../../_shared/core/index.js';
+export { matchesBypassPath, isIssuerAllowed } from '@peac/worker-shared';
diff --git a/surfaces/workers/fastly/src/errors.ts b/surfaces/workers/fastly/src/errors.ts
@@ -8,7 +8,7 @@
  */
 
 import type { ProblemDetails } from './types.js';
-import { ErrorCodes, createProblemDetails } from '../../_shared/core/index.js';
+import { ErrorCodes, createProblemDetails } from '@peac/worker-shared';
 
 // Re-export error codes from shared core
 export { ErrorCodes };

diff --git a/surfaces/workers/fastly/src/index.ts b/surfaces/workers/fastly/src/index.ts
@@ -21,11 +21,7 @@ import type { WorkerConfig, FastlyBackendConfig } from './types.js';
 import { parseConfig } from './config.js';
 import { createReplayStore } from './replay-store.js';
 import { createErrorResponse, createChallengeResponse, ErrorCodes } from './errors.js';
-import {
-  handleVerification,
-  type HandlerResult,
-  type RequestLike,
-} from '../../_shared/core/index.js';
+import { handleVerification, type HandlerResult, type RequestLike } from '@peac/worker-shared';
 
 // Re-export types and utilities
 export type {

diff --git a/surfaces/workers/fastly/src/replay-store.ts b/surfaces/workers/fastly/src/replay-store.ts
@@ -15,7 +15,7 @@
  */
 
 import type { ReplayStore, ReplayContext } from './types.js';
-import { hashReplayKey } from '../../_shared/core/index.js';
+import { hashReplayKey } from '@peac/worker-shared';
 
 // Re-export hash function for testing
 export { hashReplayKey };

diff --git a/surfaces/workers/fastly/src/types.ts b/surfaces/workers/fastly/src/types.ts
@@ -14,7 +14,7 @@ export type {
   ReplayStore,
   VerificationResult,
   ProblemDetails,
-} from '../../_shared/core/index.js';
+} from '@peac/worker-shared';
 
 /**
  * Fastly Compute environment configuration.

diff --git a/tsconfig.base.json b/tsconfig.base.json
@@ -54,7 +54,8 @@
       "@peac/mappings-mcp": ["./packages/mappings/mcp/src"],
       "@peac/mappings-ucp": ["./packages/mappings/ucp/src"],
       "@peac/mappings-aipref": ["./packages/mappings/aipref/src"],
-      "@peac/mcp-server": ["./packages/mcp-server/src"]
+      "@peac/mcp-server": ["./packages/mcp-server/src"],
+      "@peac/worker-shared": ["./packages/worker-shared/src"]
     }
   },
   "exclude": ["node_modules", "dist", "build", "lib", "coverage"]