@aithos/sdk 0.1.0-alpha.7 → 0.1.0-alpha.8

package/dist/src/internal/delegate-bundle.js

@@ -50,13 +50,18 @@ export function parseDelegateBundle(text) {
     }
     const m = mandate;
     const mandateId = m["id"];
-    const subjectDid = m["subject_did"] ?? m["subjectDid"];
+    // The mandate subject's DID is carried by `issuer` in the wire format
+    // emitted by `mintDelegateBundle()` (cf. SignedMandate.issuer in
+    // protocol-client). We accept the legacy `subject_did` / camelCase
+    // variants too so older test fixtures and any externally-minted
+    // bundles using the older shape keep working.
+    const subjectDid = m["issuer"] ?? m["subject_did"] ?? m["subjectDid"];
     const grantee = m["grantee"];
     if (typeof mandateId !== "string" || !mandateId) {
         throw bad("mandate.id missing");
     }
     if (typeof subjectDid !== "string" || !subjectDid.startsWith("did:")) {
-        throw bad("mandate.subject_did missing or malformed");
+        throw bad("mandate.issuer missing or malformed (expected a `did:` URL)");
     }
     if (typeof grantee !== "object" || grantee === null) {
         throw bad("mandate.grantee missing");

package/dist/test/auth-j3.test.js

@@ -90,7 +90,7 @@ describe("recovery file: parse + serialize", () => {
 /*  parseDelegateBundle                                                       */
 /* -------------------------------------------------------------------------- */
 describe("delegate bundle: parse", () => {
-    it("parses a well-formed bundle", () => {
+    it("parses a well-formed bundle (legacy subject_did field)", () => {
         const text = delegateBundleText({
             mandateId: "mandate:01H8XYZ",
             subjectDid: "did:aithos:zCarol",
@@ -103,6 +103,37 @@ describe("delegate bundle: parse", () => {
         assert.equal(parsed.granteeId, "urn:aithos:agent:bob1");
         assert.equal(parsed.delegateSeedHex.length, 64);
     });
+    it("parses a bundle minted by mintDelegateBundle (issuer field)", () => {
+        // Real wire shape emitted by `mintDelegateBundle` in protocol-client:
+        // SignedMandate carries the subject's DID under `issuer`, NOT
+        // `subject_did`. Regression test for the import flow that broke
+        // every freshly-minted mandate before this fix.
+        const text = JSON.stringify({
+            aithos_delegate_version: "0.1.0",
+            mandate: {
+                "aithos-mandate": "0.1",
+                id: "mandate:01H8ISSUER",
+                issuer: "did:aithos:zCarol",
+                issued_by_key: "did:aithos:zCarol#root",
+                grantee: {
+                    id: "urn:aithos:agent:bob1",
+                    pubkey: "z6MkqGenericPubKey",
+                },
+                actor_sphere: "self",
+                scopes: ["ethos.read.public", "ethos.write.public"],
+                not_before: "2026-05-10T00:00:00Z",
+                not_after: "2026-05-11T00:00:00Z",
+                issued_at: "2026-05-10T00:00:00Z",
+                nonce: "abc",
+                signature: { alg: "ed25519", key: "...", value: "..." },
+            },
+            delegate_seed_hex: "11".repeat(32),
+        });
+        const parsed = parseDelegateBundle(text);
+        assert.equal(parsed.subjectDid, "did:aithos:zCarol");
+        assert.equal(parsed.mandateId, "mandate:01H8ISSUER");
+        assert.equal(parsed.granteeId, "urn:aithos:agent:bob1");
+    });
     it("readDelegateBundleText accepts string passthrough", async () => {
         const text = delegateBundleText({
             mandateId: "m",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aithos/sdk",
-  "version": "0.1.0-alpha.7",
+  "version": "0.1.0-alpha.8",
   "description": "Aithos SDK — high-level TypeScript developer kit for building agentic apps on the Aithos protocol. Wraps @aithos/protocol-client and exposes the Aithos compute proxy and wallet (Stripe top-up) endpoints.",
   "keywords": [
     "aithos",