@catp-protocol/cli 0.1.1 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/audit/logger.d.ts +3 -2
- package/dist/audit/logger.d.ts.map +1 -1
- package/dist/audit/logger.js +37 -10
- package/dist/audit/logger.js.map +1 -1
- package/dist/audit/paths.d.ts +4 -0
- package/dist/audit/paths.d.ts.map +1 -0
- package/dist/audit/paths.js +12 -0
- package/dist/audit/paths.js.map +1 -0
- package/dist/audit/verifier.d.ts.map +1 -1
- package/dist/audit/verifier.js +1 -1
- package/dist/audit/verifier.js.map +1 -1
- package/dist/cli.js +46 -1
- package/dist/cli.js.map +1 -1
- package/dist/commands/anchor.js +2 -2
- package/dist/commands/anchor.js.map +1 -1
- package/dist/commands/authorization.d.ts +68 -0
- package/dist/commands/authorization.d.ts.map +1 -0
- package/dist/commands/authorization.js +342 -0
- package/dist/commands/authorization.js.map +1 -0
- package/dist/commands/init.d.ts.map +1 -1
- package/dist/commands/init.js +2 -1
- package/dist/commands/init.js.map +1 -1
- package/dist/commands/log.d.ts.map +1 -1
- package/dist/commands/log.js +22 -11
- package/dist/commands/log.js.map +1 -1
- package/dist/commands/witness.d.ts +39 -0
- package/dist/commands/witness.d.ts.map +1 -0
- package/dist/commands/witness.js +164 -0
- package/dist/commands/witness.js.map +1 -0
- package/dist/policy/loader.d.ts.map +1 -1
- package/dist/policy/loader.js +36 -1
- package/dist/policy/loader.js.map +1 -1
- package/dist/policy/types.d.ts +19 -0
- package/dist/policy/types.d.ts.map +1 -1
- package/package.json +1 -1
package/dist/audit/logger.d.ts
CHANGED
|
@@ -1,8 +1,9 @@
|
|
|
1
|
-
import type { AuditEntry, HookInput } from "../policy/types.js";
|
|
2
|
-
export declare function computeCommitment(tool: string, decision: "allow" | "deny", ts: string, prev?: string): string;
|
|
1
|
+
import type { AuditEntry, AuthorizationAction, HookInput } from "../policy/types.js";
|
|
2
|
+
export declare function computeCommitment(tool: string, decision: "allow" | "deny", ts: string, prev?: string, ruleMatched?: string | null, inputSummary?: string): string;
|
|
3
3
|
export declare function summarizeInput(input: HookInput): string;
|
|
4
4
|
export declare function auditDir(agentId: string): string;
|
|
5
5
|
export declare function getLastCommitment(agentId: string): string;
|
|
6
6
|
export declare function appendAuditEntry(agentId: string, entry: AuditEntry): void;
|
|
7
7
|
export declare function buildEntry(input: HookInput, decision: "allow" | "deny", ruleMatched: string | null, prevCommitment?: string): AuditEntry;
|
|
8
|
+
export declare function extractAuthorizationAction(input: HookInput): AuthorizationAction | undefined;
|
|
8
9
|
//# sourceMappingURL=logger.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;
|
|
1
|
+
{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAMrF,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,OAAO,GAAG,MAAM,EAC1B,EAAE,EAAE,MAAM,EACV,IAAI,GAAE,MAAY,EAClB,WAAW,GAAE,MAAM,GAAG,IAAW,EACjC,YAAY,GAAE,MAAW,GACxB,MAAM,CAIR;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAGvD;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAYzD;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI,CAIzE;AAED,wBAAgB,UAAU,CACxB,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,OAAO,GAAG,MAAM,EAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,cAAc,GAAE,MAAY,GAC3B,UAAU,CAgBZ;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAsB5F"}
|
package/dist/audit/logger.js
CHANGED
|
@@ -1,17 +1,14 @@
|
|
|
1
1
|
import { createHash } from "node:crypto";
|
|
2
2
|
import { appendFileSync, mkdirSync, readFileSync } from "node:fs";
|
|
3
3
|
import { join } from "node:path";
|
|
4
|
-
import {
|
|
4
|
+
import { auditDirForDate } from "./paths.js";
|
|
5
5
|
// Phase 0: SHA-256 commitment placeholder.
|
|
6
6
|
// Chains on fields stored in the log (tool, decision, ts, prev) so the chain
|
|
7
7
|
// is verifiable from the JSONL file alone without replaying tool_input.
|
|
8
8
|
// Phase 1 replaces this with a Poseidon hash over the full action witness via WASM.
|
|
9
|
-
export function computeCommitment(tool, decision, ts, prev = "0") {
|
|
9
|
+
export function computeCommitment(tool, decision, ts, prev = "0", ruleMatched = null, inputSummary = "") {
|
|
10
10
|
return createHash("sha256")
|
|
11
|
-
.update(tool)
|
|
12
|
-
.update(decision)
|
|
13
|
-
.update(ts)
|
|
14
|
-
.update(prev)
|
|
11
|
+
.update(JSON.stringify({ tool, decision, ts, ruleMatched, inputSummary, prev }))
|
|
15
12
|
.digest("hex");
|
|
16
13
|
}
|
|
17
14
|
export function summarizeInput(input) {
|
|
@@ -20,7 +17,7 @@ export function summarizeInput(input) {
|
|
|
20
17
|
}
|
|
21
18
|
export function auditDir(agentId) {
|
|
22
19
|
const date = new Date().toISOString().slice(0, 10);
|
|
23
|
-
return
|
|
20
|
+
return auditDirForDate(agentId, date);
|
|
24
21
|
}
|
|
25
22
|
export function getLastCommitment(agentId) {
|
|
26
23
|
const dir = auditDir(agentId);
|
|
@@ -44,13 +41,43 @@ export function appendAuditEntry(agentId, entry) {
|
|
|
44
41
|
}
|
|
45
42
|
export function buildEntry(input, decision, ruleMatched, prevCommitment = "0") {
|
|
46
43
|
const ts = new Date().toISOString();
|
|
47
|
-
|
|
44
|
+
const inputSummary = summarizeInput(input);
|
|
45
|
+
const entry = {
|
|
48
46
|
ts,
|
|
49
47
|
tool: input.tool_name,
|
|
50
48
|
decision,
|
|
51
49
|
rule_matched: ruleMatched,
|
|
52
|
-
commitment: computeCommitment(input.tool_name, decision, ts, prevCommitment),
|
|
53
|
-
input_summary:
|
|
50
|
+
commitment: computeCommitment(input.tool_name, decision, ts, prevCommitment, ruleMatched, inputSummary),
|
|
51
|
+
input_summary: inputSummary,
|
|
52
|
+
};
|
|
53
|
+
const authorization = extractAuthorizationAction(input);
|
|
54
|
+
if (authorization) {
|
|
55
|
+
entry.authorization = authorization;
|
|
56
|
+
}
|
|
57
|
+
return entry;
|
|
58
|
+
}
|
|
59
|
+
export function extractAuthorizationAction(input) {
|
|
60
|
+
const candidate = input.tool_input.catp_authorization ?? input.tool_input.authorization;
|
|
61
|
+
if (!candidate || typeof candidate !== "object" || Array.isArray(candidate)) {
|
|
62
|
+
return undefined;
|
|
63
|
+
}
|
|
64
|
+
const value = candidate;
|
|
65
|
+
if (!isStringOrNumber(value.actionType) ||
|
|
66
|
+
typeof value.protocol !== "string" ||
|
|
67
|
+
typeof value.token !== "string" ||
|
|
68
|
+
!isStringOrNumber(value.value)) {
|
|
69
|
+
return undefined;
|
|
70
|
+
}
|
|
71
|
+
return {
|
|
72
|
+
actionType: value.actionType,
|
|
73
|
+
protocol: value.protocol,
|
|
74
|
+
token: value.token,
|
|
75
|
+
value: value.value,
|
|
76
|
+
...(isStringOrNumber(value.currentTimestamp) ? { currentTimestamp: value.currentTimestamp } : {}),
|
|
77
|
+
...(isStringOrNumber(value.cumulativeSpend) ? { cumulativeSpend: value.cumulativeSpend } : {}),
|
|
54
78
|
};
|
|
55
79
|
}
|
|
80
|
+
function isStringOrNumber(value) {
|
|
81
|
+
return typeof value === "string" || typeof value === "number";
|
|
82
|
+
}
|
|
56
83
|
//# sourceMappingURL=logger.js.map
|
package/dist/audit/logger.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/audit/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C,2CAA2C;AAC3C,6EAA6E;AAC7E,wEAAwE;AACxE,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,QAA0B,EAC1B,EAAU,EACV,OAAe,GAAG,EAClB,cAA6B,IAAI,EACjC,eAAuB,EAAE;IAEzB,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;SAC/E,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC7C,OAAO,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACrD,IAAI,CAAC,OAAO;YAAE,OAAO,GAAG,CAAC;QACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAe,CAAC;QACjD,OAAO,KAAK,CAAC,UAAU,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAiB;IACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9B,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,KAAgB,EAChB,QAA0B,EAC1B,WAA0B,EAC1B,iBAAyB,GAAG;IAE5B,MAAM,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAe;QACxB,EAAE;QACF,IAAI,EAAE,KAAK,CAAC,SAAS;QACrB,QAAQ;QACR,YAAY,EAAE,WAAW;QACzB,UAAU,EAAE,iBAAiB,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,CAAC;QACvG,aAAa,EAAE,YAAY;KAC5B,CAAC;IACF,MAAM,aAAa,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,aAAa,EAAE,CAAC;QAClB,KAAK,CAAC,aAAa,GAAG,aAAa,CAAC;IACtC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAgB;IACzD,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,kBAAkB,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;IACxF,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,SAAoC,CAAC;IACnD,IACE,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC;QACnC,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAC/B,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAC9B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjG,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC;AAChE,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/audit/paths.ts"],"names":[],"mappings":"AAGA,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAErE"}
|
|
@@ -0,0 +1,12 @@
|
|
|
1
|
+
import { homedir } from "node:os";
|
|
2
|
+
import { join } from "node:path";
|
|
3
|
+
export function catpHome() {
|
|
4
|
+
return process.env.CATP_HOME ?? join(homedir(), ".catp");
|
|
5
|
+
}
|
|
6
|
+
export function auditRoot(agentId) {
|
|
7
|
+
return join(catpHome(), "audit", agentId);
|
|
8
|
+
}
|
|
9
|
+
export function auditDirForDate(agentId, date) {
|
|
10
|
+
return join(auditRoot(agentId), date);
|
|
11
|
+
}
|
|
12
|
+
//# sourceMappingURL=paths.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/audit/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,UAAU,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,IAAY;IAC3D,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../src/audit/verifier.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,
|
|
1
|
+
{"version":3,"file":"verifier.d.ts","sourceRoot":"","sources":["../../src/audit/verifier.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAoCxE"}
|
package/dist/audit/verifier.js
CHANGED
|
@@ -16,7 +16,7 @@ export async function verifyChain(logFile) {
|
|
|
16
16
|
return { ok: false, checked: i, broken_at: i, message: `line ${i + 1}: invalid JSON` };
|
|
17
17
|
}
|
|
18
18
|
const decision = entry.decision;
|
|
19
|
-
const expected = computeCommitment(entry.tool, decision, entry.ts, prev);
|
|
19
|
+
const expected = computeCommitment(entry.tool, decision, entry.ts, prev, entry.rule_matched, entry.input_summary);
|
|
20
20
|
if (entry.commitment !== expected) {
|
|
21
21
|
return {
|
|
22
22
|
ok: false,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../src/audit/verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAUhD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAe,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzF,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAA4B,CAAC;QACpD,MAAM,QAAQ,GAAG,iBAAiB,
|
|
1
|
+
{"version":3,"file":"verifier.js","sourceRoot":"","sources":["../../src/audit/verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAUhD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe;IAC/C,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,KAAiB,CAAC;QACtB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAe,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzF,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAA4B,CAAC;QACpD,MAAM,QAAQ,GAAG,iBAAiB,CAChC,KAAK,CAAC,IAAI,EACV,QAAQ,EACR,KAAK,CAAC,EAAE,EACR,IAAI,EACJ,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,aAAa,CACpB,CAAC;QACF,IAAI,KAAK,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,CAAC;gBACV,SAAS,EAAE,CAAC;gBACZ,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,kDAAkD;aACzE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;AACvF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnF,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC"}
|
package/dist/cli.js
CHANGED
|
@@ -1,4 +1,5 @@
|
|
|
1
1
|
#!/usr/bin/env node
|
|
2
|
+
import { createRequire } from "node:module";
|
|
2
3
|
import { Command } from "commander";
|
|
3
4
|
import { runPreHook } from "./hook/pre.js";
|
|
4
5
|
import { runPostHook } from "./hook/post.js";
|
|
@@ -6,11 +7,15 @@ import { cmdInit } from "./commands/init.js";
|
|
|
6
7
|
import { cmdValidate } from "./commands/validate.js";
|
|
7
8
|
import { cmdLogShow, cmdLogVerify } from "./commands/log.js";
|
|
8
9
|
import { cmdAnchor } from "./commands/anchor.js";
|
|
10
|
+
import { cmdWitness } from "./commands/witness.js";
|
|
11
|
+
import { cmdProveAuthorization, cmdVerifyAuthorization } from "./commands/authorization.js";
|
|
12
|
+
const require = createRequire(import.meta.url);
|
|
13
|
+
const { version } = require("../package.json");
|
|
9
14
|
const program = new Command();
|
|
10
15
|
program
|
|
11
16
|
.name("catp")
|
|
12
17
|
.description("CATP enforcement plugin — policy enforcement and audit for AI agents")
|
|
13
|
-
.version(
|
|
18
|
+
.version(version);
|
|
14
19
|
program
|
|
15
20
|
.command("init")
|
|
16
21
|
.description("Scaffold a catp-policy.toml in the current directory")
|
|
@@ -47,6 +52,46 @@ program
|
|
|
47
52
|
.option("--agent <id>", "agent id (default: from policy file)")
|
|
48
53
|
.option("--dry-run", "compute and print the Merkle root without submitting")
|
|
49
54
|
.action(cmdAnchor);
|
|
55
|
+
program
|
|
56
|
+
.command("witness")
|
|
57
|
+
.description("Build an authorization_groth16_v1 witness from policy and action JSON")
|
|
58
|
+
.option("--action <path>", "path to structured action JSON")
|
|
59
|
+
.option("--audit-commitment <hex>", "build from a logged audit entry commitment")
|
|
60
|
+
.option("--agent <id>", "agent id for --audit-commitment (default: from policy file)")
|
|
61
|
+
.option("-f, --file <path>", "path to catp-policy.toml (default: auto-discover)")
|
|
62
|
+
.option("--out <path>", "write witness JSON to file instead of stdout")
|
|
63
|
+
.option("--current-timestamp <u64>", "override action currentTimestamp")
|
|
64
|
+
.option("--cumulative-spend <u64>", "override action cumulativeSpend")
|
|
65
|
+
.action(cmdWitness);
|
|
66
|
+
const prove = program.command("prove").description("Build shareable CATP proof manifests");
|
|
67
|
+
prove
|
|
68
|
+
.command("authorization")
|
|
69
|
+
.description("Build an authorization proof manifest from an artifact, action, or audit commitment")
|
|
70
|
+
.option("--artifact <path>", "existing authorization_groth16_v1 proof artifact JSON")
|
|
71
|
+
.option("--action <path>", "structured action JSON to prove")
|
|
72
|
+
.option("--audit-commitment <hex>", "audit log commitment linked to this proof")
|
|
73
|
+
.option("--agent <id>", "agent id for --audit-commitment (default: from policy file)")
|
|
74
|
+
.option("-f, --file <path>", "path to catp-policy.toml (default: auto-discover)")
|
|
75
|
+
.option("--current-timestamp <u64>", "override action currentTimestamp")
|
|
76
|
+
.option("--cumulative-spend <u64>", "override action cumulativeSpend")
|
|
77
|
+
.option("--artifact-out <path>", "keep generated proof artifact at this path")
|
|
78
|
+
.option("--witness-out <path>", "keep generated witness JSON at this path")
|
|
79
|
+
.option("--prover-script <path>", "Groth16 proof generation script")
|
|
80
|
+
.option("--deployment <path>", "deployment metadata JSON for verifier, authorizer, and chain id")
|
|
81
|
+
.option("--verifier <address>", "Groth16 authorization verifier wrapper address")
|
|
82
|
+
.option("--agent-authorizer <address>", "AgentAuthorizer address")
|
|
83
|
+
.option("--chain-id <id>", "chain id for the verifier/deployment")
|
|
84
|
+
.option("--proof-url <url>", "external URL where proof bytes or artifact are stored")
|
|
85
|
+
.option("--out <path>", "write proof manifest JSON to file instead of stdout")
|
|
86
|
+
.action(cmdProveAuthorization);
|
|
87
|
+
const verify = program.command("verify").description("Verify CATP proof manifests");
|
|
88
|
+
verify
|
|
89
|
+
.command("authorization")
|
|
90
|
+
.description("Validate an authorization proof manifest")
|
|
91
|
+
.requiredOption("--manifest <path>", "authorization proof manifest JSON")
|
|
92
|
+
.option("--check-audit", "check that auditCommitment exists in the local audit log")
|
|
93
|
+
.option("--audit-agent <id>", "agent id to use for --check-audit")
|
|
94
|
+
.action(cmdVerifyAuthorization);
|
|
50
95
|
program.parseAsync(process.argv).catch((err) => {
|
|
51
96
|
process.stderr.write(`catp: ${err.message}\n`);
|
|
52
97
|
process.exit(1);
|
package/dist/cli.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;
|
|
1
|
+
{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE5F,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAwB,CAAC;AAEtE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,MAAM,CAAC;KACZ,WAAW,CAAC,sEAAsE,CAAC;KACnF,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,OAAO;KACJ,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,sDAAsD,CAAC;KACnE,MAAM,CAAC,OAAO,CAAC,CAAC;AAEnB,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CAAC,kCAAkC,CAAC;KAC/C,MAAM,CAAC,mBAAmB,EAAE,8CAA8C,CAAC;KAC3E,MAAM,CAAC,WAAW,CAAC,CAAC;AAEvB,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,0CAA0C,CAAC,CAAC;AAE7F,IAAI;KACD,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CAAC,yDAAyD,CAAC;KACtE,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhE,IAAI;KACD,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,8DAA8D,CAAC;KAC3E,MAAM,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEjE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;AAErE,GAAG;KACA,OAAO,CAAC,MAAM,CAAC;KACf,WAAW,CAAC,kCAAkC,CAAC;KAC/C,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,EAAE,IAAI,CAAC;KAC1D,MAAM,CAAC,cAAc,EAAE,sCAAsC,CAAC;KAC9D,MAAM,CAAC,UAAU,CAAC,CAAC;AAEtB,GAAG;KACA,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,mCAAmC,CAAC;KAChD,MAAM,CAAC,cAAc,EAAE,sCAAsC,CAAC;KAC9D,MAAM,CAAC,YAAY,CAAC,CAAC;AAExB,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,gEAAgE,CAAC;KAC7E,MAAM,CAAC,cAAc,EAAE,sCAAsC,CAAC;KAC9D,MAAM,CAAC,WAAW,EAAE,sDAAsD,CAAC;KAC3E,MAAM,CAAC,SAAS,CAAC,CAAC;AAErB,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,WAAW,CAAC,uEAAuE,CAAC;KACpF,MAAM,CAAC,iBAAiB,EAAE,gCAAgC,CAAC;KAC3D,MAAM,CAAC,0BAA0B,EAAE,4CAA4C,CAAC;KAChF,MAAM,CAAC,cAAc,EAAE,6DAA6D,CAAC;KACrF,MAAM,CAAC,mBAAmB,EAAE,mDAAmD,CAAC;KAChF,MAAM,CAAC,cAAc,EAAE,8CAA8C,CAAC;KACtE,MAAM,CAAC,2BAA2B,EAAE,kCAAkC,CAAC;KACvE,MAAM,CAAC,0BAA0B,EAAE,iCAAiC,CAAC;KACrE,MAAM,CAAC,UAAU,CAAC,CAAC;AAEtB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,sCAAsC,CAAC,CAAC;AAE3F,KAAK;KACF,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,qFAAqF,CAAC;KAClG,MAAM,CAAC,mBAAmB,EAAE,uDAAuD,CAAC;KACpF,MAAM,CAAC,iBAAiB,EAAE,iCAAiC,CAAC;KAC5D,MAAM,CAAC,0BAA0B,EAAE,2CAA2C,CAAC;KAC/E,MAAM,CAAC,cAAc,EAAE,6DAA6D,CAAC;KACrF,MAAM,CAAC,mBAAmB,EAAE,mDAAmD,CAAC;KAChF,MAAM,CAAC,2BAA2B,EAAE,kCAAkC,CAAC;KACvE,MAAM,CAAC,0BAA0B,EAAE,iCAAiC,CAAC;KACrE,MAAM,CAAC,uBAAuB,EAAE,4CAA4C,CAAC;KAC7E,MAAM,CAAC,sBAAsB,EAAE,0CAA0C,CAAC;KAC1E,MAAM,CAAC,wBAAwB,EAAE,iCAAiC,CAAC;KACnE,MAAM,CAAC,qBAAqB,EAAE,iEAAiE,CAAC;KAChG,MAAM,CAAC,sBAAsB,EAAE,gDAAgD,CAAC;KAChF,MAAM,CAAC,8BAA8B,EAAE,yBAAyB,CAAC;KACjE,MAAM,CAAC,iBAAiB,EAAE,sCAAsC,CAAC;KACjE,MAAM,CAAC,mBAAmB,EAAE,uDAAuD,CAAC;KACpF,MAAM,CAAC,cAAc,EAAE,qDAAqD,CAAC;KAC7E,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,6BAA6B,CAAC,CAAC;AAEpF,MAAM;KACH,OAAO,CAAC,eAAe,CAAC;KACxB,WAAW,CAAC,0CAA0C,CAAC;KACvD,cAAc,CAAC,mBAAmB,EAAE,mCAAmC,CAAC;KACxE,MAAM,CAAC,eAAe,EAAE,0DAA0D,CAAC;KACnF,MAAM,CAAC,oBAAoB,EAAE,mCAAmC,CAAC;KACjE,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAElC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAU,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
|
package/dist/commands/anchor.js
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { createHash } from "node:crypto";
|
|
2
2
|
import { readFileSync, readdirSync, existsSync } from "node:fs";
|
|
3
3
|
import { join } from "node:path";
|
|
4
|
-
import {
|
|
4
|
+
import { auditRoot } from "../audit/paths.js";
|
|
5
5
|
import { findPolicyFile, loadPolicy } from "../policy/loader.js";
|
|
6
6
|
const REGISTER_POLICY_ABI = [
|
|
7
7
|
{
|
|
@@ -27,7 +27,7 @@ function resolveAgentId(opts) {
|
|
|
27
27
|
throw new Error("Could not determine agent ID. Specify --agent <id> or run from a directory with catp-policy.toml.");
|
|
28
28
|
}
|
|
29
29
|
export function readCommitments(agentId) {
|
|
30
|
-
const baseDir =
|
|
30
|
+
const baseDir = auditRoot(agentId);
|
|
31
31
|
if (!existsSync(baseDir))
|
|
32
32
|
return [];
|
|
33
33
|
const commitments = [];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"anchor.js","sourceRoot":"","sources":["../../src/commands/anchor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"anchor.js","sourceRoot":"","sources":["../../src/commands/anchor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjE,MAAM,mBAAmB,GAAG;IAC1B;QACE,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,UAAU;QAChB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACvD,OAAO,EAAE,EAAE;QACX,eAAe,EAAE,YAAY;KAC9B;CACO,CAAC;AAEX,SAAS,cAAc,CAAC,IAAwB;IAC9C,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAClC,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,mGAAmG,CACpG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe;IAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QAClD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;gBAC7C,IAAI,KAAK,CAAC,UAAU;oBAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,uBAAuB;YACzB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,WAAqB;IAC9C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;IAChC,CAAC;IAED,IAAI,KAAK,GAAa,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,CACP,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CACpE,CAAC;QACJ,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IAED,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAmB,EACnB,MAAc,EACd,UAAkB,EAClB,eAAuB;IAEvB,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3F,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAE9D,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC;IAEhD,MAAM,KAAK,GAAG,WAAW,CAAC;QACxB,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,cAAc;QACpB,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC9D,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;KACzC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAA2B,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,kBAAkB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAErF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC;QAC5C,OAAO,EAAE,eAAgC;QACzC,GAAG,EAAE,mBAAmB;QACxB,YAAY,EAAE,gBAAgB;QAC9B,IAAI,EAAE,CAAC,IAAI,CAAC;KACb,CAAC,CAAC;IAEH,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAG/B;IACC,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;IAErC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,OAAO,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC;IAE/C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAChD,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAE1D,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uFAAuF,CACxF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACtE,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAC9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,MAAM,IAAI,CAAC,CAAC;AACnD,CAAC"}
|
|
@@ -0,0 +1,68 @@
|
|
|
1
|
+
export interface AuthorizationProofArtifact {
|
|
2
|
+
proofVersion: string;
|
|
3
|
+
policyCommitment: string;
|
|
4
|
+
publicInputs: string[];
|
|
5
|
+
actionData: string;
|
|
6
|
+
currentTimestamp: string | number;
|
|
7
|
+
cumulativeSpend: string | number;
|
|
8
|
+
value: string | number;
|
|
9
|
+
proof: string;
|
|
10
|
+
constraintCount?: number;
|
|
11
|
+
}
|
|
12
|
+
export interface AuthorizationProofManifest {
|
|
13
|
+
manifestVersion: "catp_authorization_proof_manifest_v1";
|
|
14
|
+
proofVersion: "authorization_groth16_v1";
|
|
15
|
+
auditCommitment: string | null;
|
|
16
|
+
auditAgent: string | null;
|
|
17
|
+
policyCommitment: string;
|
|
18
|
+
publicInputs: string[];
|
|
19
|
+
actionData: string;
|
|
20
|
+
currentTimestamp: string;
|
|
21
|
+
cumulativeSpend: string;
|
|
22
|
+
value: string;
|
|
23
|
+
proof: string;
|
|
24
|
+
verifier: string | null;
|
|
25
|
+
agentAuthorizer: string | null;
|
|
26
|
+
chainId: string | null;
|
|
27
|
+
proofUrl: string | null;
|
|
28
|
+
sourceArtifact: string | null;
|
|
29
|
+
}
|
|
30
|
+
export declare function buildAuthorizationProofManifest(artifact: AuthorizationProofArtifact, opts?: {
|
|
31
|
+
auditCommitment?: string;
|
|
32
|
+
auditAgent?: string;
|
|
33
|
+
verifier?: string;
|
|
34
|
+
agentAuthorizer?: string;
|
|
35
|
+
chainId?: string;
|
|
36
|
+
proofUrl?: string;
|
|
37
|
+
sourceArtifact?: string;
|
|
38
|
+
}): AuthorizationProofManifest;
|
|
39
|
+
export declare function validateAuthorizationProofManifest(manifest: AuthorizationProofManifest): void;
|
|
40
|
+
export declare function cmdProveAuthorization(opts: {
|
|
41
|
+
artifact?: string;
|
|
42
|
+
action?: string;
|
|
43
|
+
auditCommitment?: string;
|
|
44
|
+
agent?: string;
|
|
45
|
+
file?: string;
|
|
46
|
+
currentTimestamp?: string;
|
|
47
|
+
cumulativeSpend?: string;
|
|
48
|
+
artifactOut?: string;
|
|
49
|
+
witnessOut?: string;
|
|
50
|
+
proverScript?: string;
|
|
51
|
+
deployment?: string;
|
|
52
|
+
verifier?: string;
|
|
53
|
+
agentAuthorizer?: string;
|
|
54
|
+
chainId?: string;
|
|
55
|
+
proofUrl?: string;
|
|
56
|
+
out?: string;
|
|
57
|
+
}): void;
|
|
58
|
+
export declare function readDeploymentMetadata(path: string): {
|
|
59
|
+
verifier?: string;
|
|
60
|
+
agentAuthorizer?: string;
|
|
61
|
+
chainId?: string;
|
|
62
|
+
};
|
|
63
|
+
export declare function cmdVerifyAuthorization(opts: {
|
|
64
|
+
manifest?: string;
|
|
65
|
+
checkAudit?: boolean;
|
|
66
|
+
auditAgent?: string;
|
|
67
|
+
}): void;
|
|
68
|
+
//# sourceMappingURL=authorization.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../../src/commands/authorization.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,0BAA0B;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,GAAG,MAAM,CAAC;IAClC,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,eAAe,EAAE,sCAAsC,CAAC;IACxD,YAAY,EAAE,0BAA0B,CAAC;IACzC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,0BAA0B,EACpC,IAAI,GAAE;IACJ,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,0BAA0B,CAqC5B;AAED,wBAAgB,kCAAkC,CAAC,QAAQ,EAAE,0BAA0B,GAAG,IAAI,CA6B7F;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,GAAG,IAAI,CA2CP;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAWA;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA8BnH"}
|
|
@@ -0,0 +1,342 @@
|
|
|
1
|
+
import { execFileSync } from "node:child_process";
|
|
2
|
+
import { existsSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "node:fs";
|
|
3
|
+
import { tmpdir } from "node:os";
|
|
4
|
+
import { join } from "node:path";
|
|
5
|
+
import { buildGroth16WitnessFromSources } from "./witness.js";
|
|
6
|
+
import { auditRoot } from "../audit/paths.js";
|
|
7
|
+
import { findPolicyFile, loadPolicy } from "../policy/loader.js";
|
|
8
|
+
const PROOF_VERSION = "authorization_groth16_v1";
|
|
9
|
+
export function buildAuthorizationProofManifest(artifact, opts = {}) {
|
|
10
|
+
validateGroth16Artifact(artifact);
|
|
11
|
+
if (opts.auditCommitment !== undefined) {
|
|
12
|
+
assertCommitment(opts.auditCommitment, "auditCommitment");
|
|
13
|
+
}
|
|
14
|
+
if (opts.auditAgent !== undefined) {
|
|
15
|
+
assertNonEmptyString(opts.auditAgent, "auditAgent");
|
|
16
|
+
}
|
|
17
|
+
if (opts.verifier !== undefined) {
|
|
18
|
+
assertAddress(opts.verifier, "verifier");
|
|
19
|
+
}
|
|
20
|
+
if (opts.agentAuthorizer !== undefined) {
|
|
21
|
+
assertAddress(opts.agentAuthorizer, "agentAuthorizer");
|
|
22
|
+
}
|
|
23
|
+
if (opts.chainId !== undefined && !/^[0-9]+$/.test(opts.chainId)) {
|
|
24
|
+
throw new Error("chainId must be a decimal integer string");
|
|
25
|
+
}
|
|
26
|
+
return {
|
|
27
|
+
manifestVersion: "catp_authorization_proof_manifest_v1",
|
|
28
|
+
proofVersion: PROOF_VERSION,
|
|
29
|
+
auditCommitment: opts.auditCommitment ?? null,
|
|
30
|
+
auditAgent: opts.auditAgent ?? null,
|
|
31
|
+
policyCommitment: artifact.policyCommitment,
|
|
32
|
+
publicInputs: artifact.publicInputs,
|
|
33
|
+
actionData: artifact.actionData,
|
|
34
|
+
currentTimestamp: normalizeIntegerString(artifact.currentTimestamp, "currentTimestamp"),
|
|
35
|
+
cumulativeSpend: normalizeIntegerString(artifact.cumulativeSpend, "cumulativeSpend"),
|
|
36
|
+
value: normalizeIntegerString(artifact.value, "value"),
|
|
37
|
+
proof: artifact.proof,
|
|
38
|
+
verifier: opts.verifier ?? null,
|
|
39
|
+
agentAuthorizer: opts.agentAuthorizer ?? null,
|
|
40
|
+
chainId: opts.chainId ?? null,
|
|
41
|
+
proofUrl: opts.proofUrl ?? null,
|
|
42
|
+
sourceArtifact: opts.sourceArtifact ?? null,
|
|
43
|
+
};
|
|
44
|
+
}
|
|
45
|
+
export function validateAuthorizationProofManifest(manifest) {
|
|
46
|
+
if (manifest.manifestVersion !== "catp_authorization_proof_manifest_v1") {
|
|
47
|
+
throw new Error("manifestVersion must be catp_authorization_proof_manifest_v1");
|
|
48
|
+
}
|
|
49
|
+
validateGroth16Artifact({
|
|
50
|
+
proofVersion: manifest.proofVersion,
|
|
51
|
+
policyCommitment: manifest.policyCommitment,
|
|
52
|
+
publicInputs: manifest.publicInputs,
|
|
53
|
+
actionData: manifest.actionData,
|
|
54
|
+
currentTimestamp: manifest.currentTimestamp,
|
|
55
|
+
cumulativeSpend: manifest.cumulativeSpend,
|
|
56
|
+
value: manifest.value,
|
|
57
|
+
proof: manifest.proof,
|
|
58
|
+
});
|
|
59
|
+
if (manifest.auditCommitment !== null) {
|
|
60
|
+
assertCommitment(manifest.auditCommitment, "auditCommitment");
|
|
61
|
+
}
|
|
62
|
+
if (manifest.auditAgent !== null) {
|
|
63
|
+
assertNonEmptyString(manifest.auditAgent, "auditAgent");
|
|
64
|
+
}
|
|
65
|
+
if (manifest.verifier !== null) {
|
|
66
|
+
assertAddress(manifest.verifier, "verifier");
|
|
67
|
+
}
|
|
68
|
+
if (manifest.agentAuthorizer !== null) {
|
|
69
|
+
assertAddress(manifest.agentAuthorizer, "agentAuthorizer");
|
|
70
|
+
}
|
|
71
|
+
if (manifest.chainId !== null && !/^[0-9]+$/.test(manifest.chainId)) {
|
|
72
|
+
throw new Error("chainId must be a decimal integer string");
|
|
73
|
+
}
|
|
74
|
+
}
|
|
75
|
+
export function cmdProveAuthorization(opts) {
|
|
76
|
+
if (opts.artifact && opts.action) {
|
|
77
|
+
throw new Error("use --artifact or --action, not both");
|
|
78
|
+
}
|
|
79
|
+
let artifactPath = opts.artifact;
|
|
80
|
+
let cleanupDir = null;
|
|
81
|
+
if (!artifactPath) {
|
|
82
|
+
const generated = generateGroth16Artifact(opts);
|
|
83
|
+
artifactPath = generated.artifactPath;
|
|
84
|
+
cleanupDir = generated.cleanupDir;
|
|
85
|
+
}
|
|
86
|
+
if (!existsSync(artifactPath)) {
|
|
87
|
+
if (cleanupDir)
|
|
88
|
+
rmSync(cleanupDir, { recursive: true, force: true });
|
|
89
|
+
throw new Error(`artifact not found: ${artifactPath}`);
|
|
90
|
+
}
|
|
91
|
+
try {
|
|
92
|
+
const artifact = JSON.parse(readFileSync(artifactPath, "utf8"));
|
|
93
|
+
const deployment = opts.deployment ? readDeploymentMetadata(opts.deployment) : {};
|
|
94
|
+
const manifest = buildAuthorizationProofManifest(artifact, {
|
|
95
|
+
auditCommitment: opts.auditCommitment,
|
|
96
|
+
auditAgent: resolveAuditAgent(opts),
|
|
97
|
+
verifier: opts.verifier ?? deployment.verifier,
|
|
98
|
+
agentAuthorizer: opts.agentAuthorizer ?? deployment.agentAuthorizer,
|
|
99
|
+
chainId: opts.chainId ?? deployment.chainId,
|
|
100
|
+
proofUrl: opts.proofUrl,
|
|
101
|
+
sourceArtifact: opts.artifact ?? opts.artifactOut ?? undefined,
|
|
102
|
+
});
|
|
103
|
+
const encoded = `${JSON.stringify(manifest, null, 2)}\n`;
|
|
104
|
+
if (opts.out) {
|
|
105
|
+
writeFileSync(opts.out, encoded, "utf8");
|
|
106
|
+
process.stdout.write(`Wrote authorization proof manifest to ${opts.out}\n`);
|
|
107
|
+
}
|
|
108
|
+
else {
|
|
109
|
+
process.stdout.write(encoded);
|
|
110
|
+
}
|
|
111
|
+
}
|
|
112
|
+
finally {
|
|
113
|
+
if (cleanupDir) {
|
|
114
|
+
rmSync(cleanupDir, { recursive: true, force: true });
|
|
115
|
+
}
|
|
116
|
+
}
|
|
117
|
+
}
|
|
118
|
+
export function readDeploymentMetadata(path) {
|
|
119
|
+
if (!existsSync(path)) {
|
|
120
|
+
throw new Error(`deployment not found: ${path}`);
|
|
121
|
+
}
|
|
122
|
+
const parsed = JSON.parse(readFileSync(path, "utf8"));
|
|
123
|
+
const verifier = optionalString(parsed.groth16AuthorizationVerifier, "deployment.groth16AuthorizationVerifier");
|
|
124
|
+
const agentAuthorizer = optionalString(parsed.agentAuthorizer, "deployment.agentAuthorizer");
|
|
125
|
+
const chainId = optionalIntegerString(parsed.chainId, "deployment.chainId");
|
|
126
|
+
if (verifier !== undefined)
|
|
127
|
+
assertAddress(verifier, "deployment.groth16AuthorizationVerifier");
|
|
128
|
+
if (agentAuthorizer !== undefined)
|
|
129
|
+
assertAddress(agentAuthorizer, "deployment.agentAuthorizer");
|
|
130
|
+
return { verifier, agentAuthorizer, chainId };
|
|
131
|
+
}
|
|
132
|
+
export function cmdVerifyAuthorization(opts) {
|
|
133
|
+
if (!opts.manifest) {
|
|
134
|
+
throw new Error("missing --manifest <path>");
|
|
135
|
+
}
|
|
136
|
+
if (!existsSync(opts.manifest)) {
|
|
137
|
+
throw new Error(`manifest not found: ${opts.manifest}`);
|
|
138
|
+
}
|
|
139
|
+
const manifest = JSON.parse(readFileSync(opts.manifest, "utf8"));
|
|
140
|
+
validateAuthorizationProofManifest(manifest);
|
|
141
|
+
const lines = [
|
|
142
|
+
"Authorization proof manifest is structurally valid.",
|
|
143
|
+
`proofVersion=${manifest.proofVersion}`,
|
|
144
|
+
`policyCommitment=${manifest.policyCommitment}`,
|
|
145
|
+
`auditCommitment=${manifest.auditCommitment ?? "none"}`,
|
|
146
|
+
];
|
|
147
|
+
if (opts.checkAudit) {
|
|
148
|
+
const auditAgent = opts.auditAgent ?? manifest.auditAgent;
|
|
149
|
+
if (!manifest.auditCommitment) {
|
|
150
|
+
throw new Error("manifest has no auditCommitment to check");
|
|
151
|
+
}
|
|
152
|
+
if (!auditAgent) {
|
|
153
|
+
throw new Error("missing --audit-agent <id>; manifest does not include auditAgent");
|
|
154
|
+
}
|
|
155
|
+
if (!findAuditEntry(auditAgent, manifest.auditCommitment)) {
|
|
156
|
+
throw new Error(`No audit entry found for commitment ${manifest.auditCommitment}`);
|
|
157
|
+
}
|
|
158
|
+
lines.push(`auditEntry=found:${auditAgent}`);
|
|
159
|
+
}
|
|
160
|
+
process.stdout.write(`${lines.join("\n")}\n`);
|
|
161
|
+
}
|
|
162
|
+
function validateGroth16Artifact(artifact) {
|
|
163
|
+
if (artifact.proofVersion !== PROOF_VERSION) {
|
|
164
|
+
throw new Error(`proofVersion must be ${PROOF_VERSION}`);
|
|
165
|
+
}
|
|
166
|
+
assertBytes32(artifact.policyCommitment, "policyCommitment");
|
|
167
|
+
assertHex(artifact.actionData, "actionData");
|
|
168
|
+
assertHex(artifact.proof, "proof");
|
|
169
|
+
if (hexByteLength(artifact.proof) !== 256) {
|
|
170
|
+
throw new Error("proof must be 256 bytes");
|
|
171
|
+
}
|
|
172
|
+
if (!Array.isArray(artifact.publicInputs) || artifact.publicInputs.length !== 13) {
|
|
173
|
+
throw new Error("publicInputs must contain 13 values");
|
|
174
|
+
}
|
|
175
|
+
for (const [index, input] of artifact.publicInputs.entries()) {
|
|
176
|
+
assertBytes32(input, `publicInputs[${index}]`);
|
|
177
|
+
}
|
|
178
|
+
if (artifact.publicInputs[0].toLowerCase() !== artifact.policyCommitment.toLowerCase()) {
|
|
179
|
+
throw new Error("publicInputs[0] must equal policyCommitment");
|
|
180
|
+
}
|
|
181
|
+
const value = normalizePositiveU64(artifact.value, "value");
|
|
182
|
+
const currentTimestamp = normalizeU64(artifact.currentTimestamp, "currentTimestamp");
|
|
183
|
+
const cumulativeSpend = normalizeU64(artifact.cumulativeSpend, "cumulativeSpend");
|
|
184
|
+
if (normalizeU64(artifact.publicInputs[10], "publicInputs[10]") !== value) {
|
|
185
|
+
throw new Error("publicInputs[10] must equal value");
|
|
186
|
+
}
|
|
187
|
+
if (normalizeU64(artifact.publicInputs[11], "publicInputs[11]") !== currentTimestamp) {
|
|
188
|
+
throw new Error("publicInputs[11] must equal currentTimestamp");
|
|
189
|
+
}
|
|
190
|
+
if (normalizeU64(artifact.publicInputs[12], "publicInputs[12]") !== cumulativeSpend) {
|
|
191
|
+
throw new Error("publicInputs[12] must equal cumulativeSpend");
|
|
192
|
+
}
|
|
193
|
+
}
|
|
194
|
+
function generateGroth16Artifact(opts) {
|
|
195
|
+
if (!opts.action && !opts.auditCommitment) {
|
|
196
|
+
throw new Error("missing --artifact <path>, --action <path>, or --audit-commitment <hex>");
|
|
197
|
+
}
|
|
198
|
+
if (opts.action && opts.auditCommitment) {
|
|
199
|
+
throw new Error("use only one of --action or --audit-commitment");
|
|
200
|
+
}
|
|
201
|
+
const cleanupDir = opts.artifactOut && opts.witnessOut ? null : mkdtempSync(join(tmpdir(), "catp-prove-"));
|
|
202
|
+
const witnessPath = opts.witnessOut ?? join(cleanupDir, "authorization_groth16_v1.witness.json");
|
|
203
|
+
const artifactPath = opts.artifactOut ?? join(cleanupDir, "authorization_groth16_v1.json");
|
|
204
|
+
const proverScript = opts.proverScript ?? join(process.cwd(), "scripts", "generate-groth16-verifier.sh");
|
|
205
|
+
if (!existsSync(proverScript)) {
|
|
206
|
+
if (cleanupDir)
|
|
207
|
+
rmSync(cleanupDir, { recursive: true, force: true });
|
|
208
|
+
throw new Error(`prover script not found: ${proverScript}`);
|
|
209
|
+
}
|
|
210
|
+
const witness = buildGroth16WitnessFromSources({
|
|
211
|
+
action: opts.action,
|
|
212
|
+
auditCommitment: opts.auditCommitment,
|
|
213
|
+
agent: opts.agent,
|
|
214
|
+
file: opts.file,
|
|
215
|
+
currentTimestamp: opts.currentTimestamp,
|
|
216
|
+
cumulativeSpend: opts.cumulativeSpend,
|
|
217
|
+
});
|
|
218
|
+
writeFileSync(witnessPath, `${JSON.stringify(witness, null, 2)}\n`, "utf8");
|
|
219
|
+
execFileSync("bash", [
|
|
220
|
+
proverScript,
|
|
221
|
+
"--witness",
|
|
222
|
+
witnessPath,
|
|
223
|
+
"--out",
|
|
224
|
+
artifactPath,
|
|
225
|
+
], { stdio: "inherit" });
|
|
226
|
+
return { artifactPath, cleanupDir };
|
|
227
|
+
}
|
|
228
|
+
function resolveAuditAgent(opts) {
|
|
229
|
+
if (!opts.auditCommitment)
|
|
230
|
+
return undefined;
|
|
231
|
+
if (opts.agent)
|
|
232
|
+
return opts.agent;
|
|
233
|
+
const policyPath = opts.file ?? findPolicyFile();
|
|
234
|
+
if (!policyPath)
|
|
235
|
+
return undefined;
|
|
236
|
+
return loadPolicy(policyPath).agent.id;
|
|
237
|
+
}
|
|
238
|
+
function findAuditEntry(agentId, commitment) {
|
|
239
|
+
const root = auditRoot(agentId);
|
|
240
|
+
if (!existsSync(root))
|
|
241
|
+
return null;
|
|
242
|
+
for (const date of readdirSync(root).sort()) {
|
|
243
|
+
const file = join(root, date, "actions.jsonl");
|
|
244
|
+
if (!existsSync(file))
|
|
245
|
+
continue;
|
|
246
|
+
const lines = readFileSync(file, "utf8").trimEnd().split("\n").filter(Boolean);
|
|
247
|
+
for (const line of lines) {
|
|
248
|
+
try {
|
|
249
|
+
const entry = JSON.parse(line);
|
|
250
|
+
if (entry.commitment.toLowerCase() === commitment.toLowerCase()) {
|
|
251
|
+
return entry;
|
|
252
|
+
}
|
|
253
|
+
}
|
|
254
|
+
catch {
|
|
255
|
+
// skip malformed audit lines
|
|
256
|
+
}
|
|
257
|
+
}
|
|
258
|
+
}
|
|
259
|
+
return null;
|
|
260
|
+
}
|
|
261
|
+
function normalizeIntegerString(value, field) {
|
|
262
|
+
return normalizeU64(value, field);
|
|
263
|
+
}
|
|
264
|
+
function normalizePositiveU64(value, field) {
|
|
265
|
+
const parsed = BigInt(normalizeU64(value, field));
|
|
266
|
+
if (parsed === 0n) {
|
|
267
|
+
throw new Error(`${field} must be between 1 and u64::MAX`);
|
|
268
|
+
}
|
|
269
|
+
return parsed.toString();
|
|
270
|
+
}
|
|
271
|
+
function normalizeU64(value, field) {
|
|
272
|
+
const parsed = parseInteger(value, field);
|
|
273
|
+
const max = (1n << 64n) - 1n;
|
|
274
|
+
if (parsed < 0n || parsed > max) {
|
|
275
|
+
throw new Error(`${field} must fit in u64`);
|
|
276
|
+
}
|
|
277
|
+
return parsed.toString();
|
|
278
|
+
}
|
|
279
|
+
function parseInteger(value, field) {
|
|
280
|
+
if (typeof value === "number") {
|
|
281
|
+
if (!Number.isSafeInteger(value)) {
|
|
282
|
+
throw new Error(`${field} must be a safe integer`);
|
|
283
|
+
}
|
|
284
|
+
return BigInt(value);
|
|
285
|
+
}
|
|
286
|
+
if (/^0x[0-9a-fA-F]+$/.test(value))
|
|
287
|
+
return BigInt(value);
|
|
288
|
+
if (/^[0-9]+$/.test(value))
|
|
289
|
+
return BigInt(value);
|
|
290
|
+
throw new Error(`${field} must be an integer string`);
|
|
291
|
+
}
|
|
292
|
+
function optionalString(value, field) {
|
|
293
|
+
if (value === undefined || value === null || value === "")
|
|
294
|
+
return undefined;
|
|
295
|
+
if (typeof value !== "string") {
|
|
296
|
+
throw new Error(`${field} must be a string`);
|
|
297
|
+
}
|
|
298
|
+
return value;
|
|
299
|
+
}
|
|
300
|
+
function optionalIntegerString(value, field) {
|
|
301
|
+
if (value === undefined || value === null || value === "")
|
|
302
|
+
return undefined;
|
|
303
|
+
if (typeof value === "number") {
|
|
304
|
+
if (!Number.isSafeInteger(value) || value < 0) {
|
|
305
|
+
throw new Error(`${field} must be a non-negative safe integer`);
|
|
306
|
+
}
|
|
307
|
+
return value.toString();
|
|
308
|
+
}
|
|
309
|
+
if (typeof value === "string" && /^[0-9]+$/.test(value)) {
|
|
310
|
+
return value;
|
|
311
|
+
}
|
|
312
|
+
throw new Error(`${field} must be a decimal integer`);
|
|
313
|
+
}
|
|
314
|
+
function assertHex(value, field) {
|
|
315
|
+
if (!/^0x([0-9a-fA-F]{2})*$/.test(value)) {
|
|
316
|
+
throw new Error(`${field} must be an even-length 0x-prefixed hex string`);
|
|
317
|
+
}
|
|
318
|
+
}
|
|
319
|
+
function assertBytes32(value, field) {
|
|
320
|
+
if (!/^0x[0-9a-fA-F]{64}$/.test(value)) {
|
|
321
|
+
throw new Error(`${field} must be a 32-byte 0x-prefixed hex string`);
|
|
322
|
+
}
|
|
323
|
+
}
|
|
324
|
+
function assertCommitment(value, field) {
|
|
325
|
+
if (!/^[0-9a-fA-F]{64}$/.test(value)) {
|
|
326
|
+
throw new Error(`${field} must be a 64-character hex commitment`);
|
|
327
|
+
}
|
|
328
|
+
}
|
|
329
|
+
function assertNonEmptyString(value, field) {
|
|
330
|
+
if (value.length === 0) {
|
|
331
|
+
throw new Error(`${field} must be a non-empty string`);
|
|
332
|
+
}
|
|
333
|
+
}
|
|
334
|
+
function assertAddress(value, field) {
|
|
335
|
+
if (!/^0x[0-9a-fA-F]{40}$/.test(value)) {
|
|
336
|
+
throw new Error(`${field} must be an EVM address`);
|
|
337
|
+
}
|
|
338
|
+
}
|
|
339
|
+
function hexByteLength(value) {
|
|
340
|
+
return (value.length - 2) / 2;
|
|
341
|
+
}
|
|
342
|
+
//# sourceMappingURL=authorization.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"authorization.js","sourceRoot":"","sources":["../../src/commands/authorization.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACpG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjE,MAAM,aAAa,GAAG,0BAA0B,CAAC;AAiCjD,MAAM,UAAU,+BAA+B,CAC7C,QAAoC,EACpC,OAQI,EAAE;IAEN,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAElC,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvC,gBAAgB,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,oBAAoB,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvC,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO;QACL,eAAe,EAAE,sCAAsC;QACvD,YAAY,EAAE,aAAa;QAC3B,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;QAC7C,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;QACnC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,gBAAgB,EAAE,sBAAsB,CAAC,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QACvF,eAAe,EAAE,sBAAsB,CAAC,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC;QACpF,KAAK,EAAE,sBAAsB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;QACtD,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI;QAC7C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;QAC7B,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;QAC/B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,QAAoC;IACrF,IAAI,QAAQ,CAAC,eAAe,KAAK,sCAAsC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,uBAAuB,CAAC;QACtB,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;KACtB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACtC,gBAAgB,CAAC,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QACjC,oBAAoB,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/B,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QACtC,aAAa,CAAC,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAiBrC;IACC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;IACjC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAChD,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;QACtC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;IACpC,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,IAAI,UAAU;YAAE,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAA+B,CAAC;QAC9F,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,MAAM,QAAQ,GAAG,+BAA+B,CAAC,QAAQ,EAAE;YACzD,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,UAAU,EAAE,iBAAiB,CAAC,IAAI,CAAC;YACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ;YAC9C,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,UAAU,CAAC,eAAe;YACnE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO;YAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,IAAI,SAAS;SAC/D,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAEzD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAKjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAA4B,CAAC;IACjF,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,4BAA4B,EAAE,yCAAyC,CAAC,CAAC;IAChH,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC5E,IAAI,QAAQ,KAAK,SAAS;QAAE,aAAa,CAAC,QAAQ,EAAE,yCAAyC,CAAC,CAAC;IAC/F,IAAI,eAAe,KAAK,SAAS;QAAE,aAAa,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IAChG,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAsE;IAC3G,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAA+B,CAAC;IAC/F,kCAAkC,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG;QACZ,qDAAqD;QACrD,gBAAgB,QAAQ,CAAC,YAAY,EAAE;QACvC,oBAAoB,QAAQ,CAAC,gBAAgB,EAAE;QAC/C,mBAAmB,QAAQ,CAAC,eAAe,IAAI,MAAM,EAAE;KACxD,CAAC;IACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,uCAAuC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,oBAAoB,UAAU,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAoC;IACnE,IAAI,QAAQ,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,wBAAwB,aAAa,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,aAAa,CAAC,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC7D,SAAS,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC7C,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACnC,IAAI,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;QAC7D,aAAa,CAAC,KAAK,EAAE,gBAAgB,KAAK,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;QACvF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,KAAK,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,gBAAgB,GAAG,YAAY,CAAC,QAAQ,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IACrF,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAClF,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,KAAK,KAAK,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,KAAK,gBAAgB,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,KAAK,eAAe,EAAE,CAAC;QACpF,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,IAUhC;IACC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3G,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAoB,EAAE,uCAAuC,CAAC,CAAC;IAC3G,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAoB,EAAE,+BAA+B,CAAC,CAAC;IACrG,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,8BAA8B,CAAC,CAAC;IACzG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,IAAI,UAAU;YAAE,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,OAAO,GAAG,8BAA8B,CAAC;QAC7C,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC,CAAC;IACH,aAAa,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE5E,YAAY,CAAC,MAAM,EAAE;QACnB,YAAY;QACZ,WAAW;QACX,WAAW;QACX,OAAO;QACP,YAAY;KACb,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAEzB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAiE;IAC1F,IAAI,CAAC,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;IACjD,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,UAAkB;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;gBAC7C,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;oBAChE,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAsB,EAAE,KAAa;IACnE,OAAO,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAsB,EAAE,KAAa;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAClD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,KAAsB,EAAE,KAAa;IACzD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,MAAM,GAAG,EAAE,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,YAAY,CAAC,KAAsB,EAAE,KAAa;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mBAAmB,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,KAAa;IAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa;IAC7C,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,wCAAwC,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa,EAAE,KAAa;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa;IACjD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AAChC,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAgCA,wBAAgB,OAAO,IAAI,IAAI,CAa9B"}
|
package/dist/commands/init.js
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,QAAQ,GAAG
|
|
1
|
+
{"version":3,"file":"init.js","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2BhB,CAAC;AAEF,MAAM,UAAU,OAAO;IACrB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACrD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACtE,OAAO;IACT,CAAC;IACD,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C;QAC3C,iEAAiE;QACjE,2BAA2B;QAC3B,+DAA+D,CAChE,CAAC;AACJ,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../src/commands/log.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../src/commands/log.ts"],"names":[],"mappings":"AAkCA,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAuBxE;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAkB1E"}
|
package/dist/commands/log.js
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import { readFileSync, readdirSync, existsSync } from "node:fs";
|
|
2
2
|
import { join } from "node:path";
|
|
3
|
-
import {
|
|
3
|
+
import { auditRoot } from "../audit/paths.js";
|
|
4
4
|
import { findPolicyFile, loadPolicy } from "../policy/loader.js";
|
|
5
5
|
import { verifyChain } from "../audit/verifier.js";
|
|
6
6
|
function resolveAgentId(opts) {
|
|
@@ -14,7 +14,7 @@ function resolveAgentId(opts) {
|
|
|
14
14
|
return loadPolicy(policyPath).agent.id;
|
|
15
15
|
}
|
|
16
16
|
function latestLogFile(agentId) {
|
|
17
|
-
const base =
|
|
17
|
+
const base = auditRoot(agentId);
|
|
18
18
|
if (!existsSync(base))
|
|
19
19
|
return null;
|
|
20
20
|
const dates = readdirSync(base).sort().reverse();
|
|
@@ -22,6 +22,15 @@ function latestLogFile(agentId) {
|
|
|
22
22
|
return null;
|
|
23
23
|
return join(base, dates[0], "actions.jsonl");
|
|
24
24
|
}
|
|
25
|
+
function allLogFiles(agentId) {
|
|
26
|
+
const base = auditRoot(agentId);
|
|
27
|
+
if (!existsSync(base))
|
|
28
|
+
return [];
|
|
29
|
+
return readdirSync(base)
|
|
30
|
+
.sort()
|
|
31
|
+
.map((date) => join(base, date, "actions.jsonl"))
|
|
32
|
+
.filter((file) => existsSync(file));
|
|
33
|
+
}
|
|
25
34
|
export function cmdLogShow(opts) {
|
|
26
35
|
const agentId = resolveAgentId(opts);
|
|
27
36
|
const logFile = latestLogFile(agentId);
|
|
@@ -47,18 +56,20 @@ export function cmdLogShow(opts) {
|
|
|
47
56
|
}
|
|
48
57
|
export async function cmdLogVerify(opts) {
|
|
49
58
|
const agentId = resolveAgentId(opts);
|
|
50
|
-
const
|
|
51
|
-
if (
|
|
59
|
+
const logFiles = allLogFiles(agentId);
|
|
60
|
+
if (logFiles.length === 0) {
|
|
52
61
|
process.stdout.write(`No audit log found for agent "${agentId}"\n`);
|
|
53
62
|
return;
|
|
54
63
|
}
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
64
|
+
let checked = 0;
|
|
65
|
+
for (const logFile of logFiles) {
|
|
66
|
+
const result = await verifyChain(logFile);
|
|
67
|
+
checked += result.checked;
|
|
68
|
+
if (!result.ok) {
|
|
69
|
+
process.stderr.write(`✗ Chain broken in ${logFile} at entry ${result.broken_at}: ${result.message}\n`);
|
|
70
|
+
process.exit(1);
|
|
71
|
+
}
|
|
62
72
|
}
|
|
73
|
+
process.stdout.write(`✓ Chain intact — ${checked} entries verified across ${logFiles.length} log file(s)\n`);
|
|
63
74
|
}
|
|
64
75
|
//# sourceMappingURL=log.js.map
|
package/dist/commands/log.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"log.js","sourceRoot":"","sources":["../../src/commands/log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"log.js","sourceRoot":"","sources":["../../src/commands/log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAGnD,SAAS,cAAc,CAAC,IAAwB;IAC9C,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAClC,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,WAAW,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;SAChD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAuC;IAChE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,OAAO,KAAK,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;YACzC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAChD,MAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,GAAG,IAAI,SAAS,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM,iBAAiB,OAAO,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAwB;IACzD,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,OAAO,KAAK,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,OAAO,aAAa,MAAM,CAAC,SAAS,KAAK,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACvG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,OAAO,4BAA4B,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;AAC/G,CAAC"}
|
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
import type { AuthorizationAction, CatpPolicy } from "../policy/types.js";
|
|
2
|
+
export type WitnessActionInput = AuthorizationAction;
|
|
3
|
+
export interface Groth16Witness {
|
|
4
|
+
actionType: string;
|
|
5
|
+
protocol: string;
|
|
6
|
+
token: string;
|
|
7
|
+
value: string;
|
|
8
|
+
currentTimestamp: string;
|
|
9
|
+
cumulativeSpend: string;
|
|
10
|
+
allowedAction: string;
|
|
11
|
+
allowedProtocol: string;
|
|
12
|
+
allowedToken: string;
|
|
13
|
+
maxValuePerTx: string;
|
|
14
|
+
maxValueTotal: string;
|
|
15
|
+
validFrom: string;
|
|
16
|
+
validUntil: string;
|
|
17
|
+
}
|
|
18
|
+
export declare function buildGroth16Witness(policy: CatpPolicy, action: WitnessActionInput, opts?: {
|
|
19
|
+
currentTimestamp?: string | number;
|
|
20
|
+
cumulativeSpend?: string | number;
|
|
21
|
+
}): Groth16Witness;
|
|
22
|
+
export declare function cmdWitness(opts: {
|
|
23
|
+
action?: string;
|
|
24
|
+
auditCommitment?: string;
|
|
25
|
+
agent?: string;
|
|
26
|
+
file?: string;
|
|
27
|
+
out?: string;
|
|
28
|
+
currentTimestamp?: string;
|
|
29
|
+
cumulativeSpend?: string;
|
|
30
|
+
}): void;
|
|
31
|
+
export declare function buildGroth16WitnessFromSources(opts: {
|
|
32
|
+
action?: string;
|
|
33
|
+
auditCommitment?: string;
|
|
34
|
+
agent?: string;
|
|
35
|
+
file?: string;
|
|
36
|
+
currentTimestamp?: string;
|
|
37
|
+
cumulativeSpend?: string;
|
|
38
|
+
}): Groth16Witness;
|
|
39
|
+
//# sourceMappingURL=witness.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"witness.d.ts","sourceRoot":"","sources":["../../src/commands/witness.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAc,mBAAmB,EAAuB,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAW3G,MAAM,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,kBAAkB,EAC1B,IAAI,GAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;CAAO,GACnF,cAAc,CAyChB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,IAAI,CAUP;AAED,wBAAgB,8BAA8B,CAAC,IAAI,EAAE;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,cAAc,CAsBjB"}
|
|
@@ -0,0 +1,164 @@
|
|
|
1
|
+
import { existsSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
|
|
2
|
+
import { join } from "node:path";
|
|
3
|
+
import { auditRoot } from "../audit/paths.js";
|
|
4
|
+
import { findPolicyFile, loadPolicy } from "../policy/loader.js";
|
|
5
|
+
const MAX_U64 = (1n << 64n) - 1n;
|
|
6
|
+
const ACTION_TYPE = {
|
|
7
|
+
swap: "0",
|
|
8
|
+
transfer: "1",
|
|
9
|
+
deposit: "2",
|
|
10
|
+
withdraw: "3",
|
|
11
|
+
};
|
|
12
|
+
export function buildGroth16Witness(policy, action, opts = {}) {
|
|
13
|
+
if (!policy.authorization) {
|
|
14
|
+
throw new Error("catp-policy.toml is missing [authorization]");
|
|
15
|
+
}
|
|
16
|
+
const auth = normalizeAuthorization(policy.authorization);
|
|
17
|
+
const actionType = normalizeActionType(action.actionType, "actionType");
|
|
18
|
+
const value = normalizeU64(action.value, "value");
|
|
19
|
+
const currentTimestamp = normalizeU64(opts.currentTimestamp ?? action.currentTimestamp ?? Math.floor(Date.now() / 1000), "currentTimestamp");
|
|
20
|
+
const cumulativeSpend = normalizeU64(opts.cumulativeSpend ?? action.cumulativeSpend ?? "0", "cumulativeSpend");
|
|
21
|
+
const protocol = normalizeBytes32(action.protocol, "protocol");
|
|
22
|
+
const token = normalizeBytes32(action.token, "token");
|
|
23
|
+
if (actionType !== auth.allowedAction) {
|
|
24
|
+
throw new Error("actionType must match authorization.allowed_action");
|
|
25
|
+
}
|
|
26
|
+
if (protocol.toLowerCase() !== auth.allowedProtocol.toLowerCase()) {
|
|
27
|
+
throw new Error("protocol must match authorization.allowed_protocol");
|
|
28
|
+
}
|
|
29
|
+
if (token.toLowerCase() !== auth.allowedToken.toLowerCase()) {
|
|
30
|
+
throw new Error("token must match authorization.allowed_token");
|
|
31
|
+
}
|
|
32
|
+
return {
|
|
33
|
+
actionType,
|
|
34
|
+
protocol,
|
|
35
|
+
token,
|
|
36
|
+
value,
|
|
37
|
+
currentTimestamp,
|
|
38
|
+
cumulativeSpend,
|
|
39
|
+
allowedAction: auth.allowedAction,
|
|
40
|
+
allowedProtocol: auth.allowedProtocol,
|
|
41
|
+
allowedToken: auth.allowedToken,
|
|
42
|
+
maxValuePerTx: auth.maxValuePerTx,
|
|
43
|
+
maxValueTotal: auth.maxValueTotal,
|
|
44
|
+
validFrom: auth.validFrom,
|
|
45
|
+
validUntil: auth.validUntil,
|
|
46
|
+
};
|
|
47
|
+
}
|
|
48
|
+
export function cmdWitness(opts) {
|
|
49
|
+
const witness = buildGroth16WitnessFromSources(opts);
|
|
50
|
+
const encoded = `${JSON.stringify(witness, null, 2)}\n`;
|
|
51
|
+
if (opts.out) {
|
|
52
|
+
writeFileSync(opts.out, encoded, "utf8");
|
|
53
|
+
process.stdout.write(`Wrote Groth16 witness to ${opts.out}\n`);
|
|
54
|
+
}
|
|
55
|
+
else {
|
|
56
|
+
process.stdout.write(encoded);
|
|
57
|
+
}
|
|
58
|
+
}
|
|
59
|
+
export function buildGroth16WitnessFromSources(opts) {
|
|
60
|
+
if (!opts.action && !opts.auditCommitment) {
|
|
61
|
+
throw new Error("missing --action <path> or --audit-commitment <hex>");
|
|
62
|
+
}
|
|
63
|
+
if (opts.action && opts.auditCommitment) {
|
|
64
|
+
throw new Error("use only one of --action or --audit-commitment");
|
|
65
|
+
}
|
|
66
|
+
const policyPath = opts.file ?? findPolicyFile();
|
|
67
|
+
if (!policyPath) {
|
|
68
|
+
throw new Error("Could not find catp-policy.toml. Specify --file <path>.");
|
|
69
|
+
}
|
|
70
|
+
const policy = loadPolicy(policyPath);
|
|
71
|
+
const action = opts.action
|
|
72
|
+
? JSON.parse(readFileSync(opts.action, "utf8"))
|
|
73
|
+
: readAuthorizationActionFromAudit(resolveAgentId(policy, opts.agent), opts.auditCommitment);
|
|
74
|
+
return buildGroth16Witness(policy, action, {
|
|
75
|
+
currentTimestamp: opts.currentTimestamp,
|
|
76
|
+
cumulativeSpend: opts.cumulativeSpend,
|
|
77
|
+
});
|
|
78
|
+
}
|
|
79
|
+
function resolveAgentId(policy, agent) {
|
|
80
|
+
return agent ?? policy.agent.id;
|
|
81
|
+
}
|
|
82
|
+
function readAuthorizationActionFromAudit(agentId, commitment) {
|
|
83
|
+
if (!/^[0-9a-fA-F]{64}$/.test(commitment)) {
|
|
84
|
+
throw new Error("--audit-commitment must be a 64-character hex commitment");
|
|
85
|
+
}
|
|
86
|
+
const entry = findAuditEntry(agentId, commitment);
|
|
87
|
+
if (!entry) {
|
|
88
|
+
throw new Error(`No audit entry found for commitment ${commitment}`);
|
|
89
|
+
}
|
|
90
|
+
if (!entry.authorization) {
|
|
91
|
+
throw new Error(`Audit entry ${commitment} does not contain authorization action data`);
|
|
92
|
+
}
|
|
93
|
+
return entry.authorization;
|
|
94
|
+
}
|
|
95
|
+
function findAuditEntry(agentId, commitment) {
|
|
96
|
+
const root = auditRoot(agentId);
|
|
97
|
+
if (!existsSync(root))
|
|
98
|
+
return null;
|
|
99
|
+
for (const date of readdirSync(root).sort()) {
|
|
100
|
+
const file = join(root, date, "actions.jsonl");
|
|
101
|
+
if (!existsSync(file))
|
|
102
|
+
continue;
|
|
103
|
+
const lines = readFileSync(file, "utf8").trimEnd().split("\n").filter(Boolean);
|
|
104
|
+
for (const line of lines) {
|
|
105
|
+
try {
|
|
106
|
+
const entry = JSON.parse(line);
|
|
107
|
+
if (entry.commitment.toLowerCase() === commitment.toLowerCase()) {
|
|
108
|
+
return entry;
|
|
109
|
+
}
|
|
110
|
+
}
|
|
111
|
+
catch {
|
|
112
|
+
// skip malformed audit lines
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
}
|
|
116
|
+
return null;
|
|
117
|
+
}
|
|
118
|
+
function normalizeAuthorization(auth) {
|
|
119
|
+
return {
|
|
120
|
+
allowedAction: normalizeActionType(auth.allowed_action, "authorization.allowed_action"),
|
|
121
|
+
allowedProtocol: normalizeBytes32(auth.allowed_protocol, "authorization.allowed_protocol"),
|
|
122
|
+
allowedToken: normalizeBytes32(auth.allowed_token, "authorization.allowed_token"),
|
|
123
|
+
maxValuePerTx: normalizeU64(auth.max_value_per_tx, "authorization.max_value_per_tx"),
|
|
124
|
+
maxValueTotal: normalizeU64(auth.max_value_total, "authorization.max_value_total"),
|
|
125
|
+
validFrom: normalizeU64(auth.valid_from, "authorization.valid_from"),
|
|
126
|
+
validUntil: normalizeU64(auth.valid_until, "authorization.valid_until"),
|
|
127
|
+
};
|
|
128
|
+
}
|
|
129
|
+
function normalizeActionType(value, field) {
|
|
130
|
+
if (typeof value === "string" && ACTION_TYPE[value.toLowerCase()] !== undefined) {
|
|
131
|
+
return ACTION_TYPE[value.toLowerCase()];
|
|
132
|
+
}
|
|
133
|
+
const parsed = normalizeU64(value, field);
|
|
134
|
+
if (!["0", "1", "2", "3"].includes(parsed)) {
|
|
135
|
+
throw new Error(`${field} must be Swap, Transfer, Deposit, Withdraw, or 0..3`);
|
|
136
|
+
}
|
|
137
|
+
return parsed;
|
|
138
|
+
}
|
|
139
|
+
function normalizeBytes32(value, field) {
|
|
140
|
+
if (!/^0x[0-9a-fA-F]{64}$/.test(value)) {
|
|
141
|
+
throw new Error(`${field} must be a 0x-prefixed 32-byte hex string`);
|
|
142
|
+
}
|
|
143
|
+
return value;
|
|
144
|
+
}
|
|
145
|
+
function normalizeU64(value, field) {
|
|
146
|
+
let parsed;
|
|
147
|
+
if (typeof value === "number") {
|
|
148
|
+
if (!Number.isSafeInteger(value)) {
|
|
149
|
+
throw new Error(`${field} must be a safe integer`);
|
|
150
|
+
}
|
|
151
|
+
parsed = BigInt(value);
|
|
152
|
+
}
|
|
153
|
+
else if (/^0x[0-9a-fA-F]+$/.test(value) || /^[0-9]+$/.test(value)) {
|
|
154
|
+
parsed = BigInt(value);
|
|
155
|
+
}
|
|
156
|
+
else {
|
|
157
|
+
throw new Error(`${field} must be an integer string`);
|
|
158
|
+
}
|
|
159
|
+
if (parsed < 0n || parsed > MAX_U64) {
|
|
160
|
+
throw new Error(`${field} must fit in u64`);
|
|
161
|
+
}
|
|
162
|
+
return parsed.toString();
|
|
163
|
+
}
|
|
164
|
+
//# sourceMappingURL=witness.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"witness.js","sourceRoot":"","sources":["../../src/commands/witness.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGjE,MAAM,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;AAEjC,MAAM,WAAW,GAA2B;IAC1C,IAAI,EAAE,GAAG;IACT,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,GAAG;IACZ,QAAQ,EAAE,GAAG;CACd,CAAC;AAoBF,MAAM,UAAU,mBAAmB,CACjC,MAAkB,EAClB,MAA0B,EAC1B,OAAkF,EAAE;IAEpF,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,GAAG,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG,YAAY,CACnC,IAAI,CAAC,gBAAgB,IAAI,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EACjF,kBAAkB,CACnB,CAAC;IACF,MAAM,eAAe,GAAG,YAAY,CAAC,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe,IAAI,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC/G,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEtD,IAAI,UAAU,KAAK,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,OAAO;QACL,UAAU;QACV,QAAQ;QACR,KAAK;QACL,KAAK;QACL,gBAAgB;QAChB,eAAe;QACf,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAQ1B;IACC,MAAM,OAAO,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAExD,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAO9C;IACC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM;QACxB,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAwB;QACvE,CAAC,CAAC,gCAAgC,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,eAAyB,CAAC,CAAC;IAEzG,OAAO,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE;QACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAkB,EAAE,KAAc;IACxD,OAAO,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,gCAAgC,CAAC,OAAe,EAAE,UAAkB;IAC3E,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,uCAAuC,UAAU,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,6CAA6C,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC,aAAa,CAAC;AAC7B,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,UAAkB;IACzD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC;gBAC7C,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;oBAChE,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,6BAA6B;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAyB;IACvD,OAAO;QACL,aAAa,EAAE,mBAAmB,CAAC,IAAI,CAAC,cAAc,EAAE,8BAA8B,CAAC;QACvF,eAAe,EAAE,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,EAAE,gCAAgC,CAAC;QAC1F,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,aAAa,EAAE,6BAA6B,CAAC;QACjF,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE,gCAAgC,CAAC;QACpF,aAAa,EAAE,YAAY,CAAC,IAAI,CAAC,eAAe,EAAE,+BAA+B,CAAC;QAClF,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,0BAA0B,CAAC;QACpE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,2BAA2B,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAsB,EAAE,KAAa;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;QAChF,OAAO,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,qDAAqD,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAa;IACpD,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,KAAsB,EAAE,KAAa;IACzD,IAAI,MAAc,CAAC;IACnB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;SAAM,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,MAAM,GAAG,EAAE,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;AAC3B,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/policy/loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,
|
|
1
|
+
{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/policy/loader.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAuB,UAAU,EAAE,MAAM,YAAY,CAAC;AAIlE,wBAAgB,cAAc,CAAC,QAAQ,GAAE,MAAsB,GAAG,MAAM,GAAG,IAAI,CAS9E;AAED,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,CAIzD"}
|
package/dist/policy/loader.js
CHANGED
|
@@ -57,7 +57,11 @@ function validate(raw, path) {
|
|
|
57
57
|
reason: typeof rule.reason === "string" ? rule.reason : undefined,
|
|
58
58
|
};
|
|
59
59
|
});
|
|
60
|
-
return {
|
|
60
|
+
return {
|
|
61
|
+
agent: { id: agent.id, version: agent.version },
|
|
62
|
+
rules,
|
|
63
|
+
authorization: validateAuthorization(obj.authorization, path),
|
|
64
|
+
};
|
|
61
65
|
}
|
|
62
66
|
function toStringArray(v) {
|
|
63
67
|
if (v === undefined || v === null)
|
|
@@ -66,4 +70,35 @@ function toStringArray(v) {
|
|
|
66
70
|
return undefined;
|
|
67
71
|
return v.filter((x) => typeof x === "string");
|
|
68
72
|
}
|
|
73
|
+
function validateAuthorization(raw, path) {
|
|
74
|
+
if (raw === undefined || raw === null)
|
|
75
|
+
return undefined;
|
|
76
|
+
if (typeof raw !== "object") {
|
|
77
|
+
throw new Error(`${path}: [authorization] must be an object`);
|
|
78
|
+
}
|
|
79
|
+
const auth = raw;
|
|
80
|
+
const required = [
|
|
81
|
+
"allowed_action",
|
|
82
|
+
"allowed_protocol",
|
|
83
|
+
"allowed_token",
|
|
84
|
+
"max_value_per_tx",
|
|
85
|
+
"max_value_total",
|
|
86
|
+
"valid_from",
|
|
87
|
+
"valid_until",
|
|
88
|
+
];
|
|
89
|
+
for (const field of required) {
|
|
90
|
+
if (typeof auth[field] !== "string" || auth[field] === "") {
|
|
91
|
+
throw new Error(`${path}: authorization.${field} must be a non-empty string`);
|
|
92
|
+
}
|
|
93
|
+
}
|
|
94
|
+
return {
|
|
95
|
+
allowed_action: auth.allowed_action,
|
|
96
|
+
allowed_protocol: auth.allowed_protocol,
|
|
97
|
+
allowed_token: auth.allowed_token,
|
|
98
|
+
max_value_per_tx: auth.max_value_per_tx,
|
|
99
|
+
max_value_total: auth.max_value_total,
|
|
100
|
+
valid_from: auth.valid_from,
|
|
101
|
+
valid_until: auth.valid_until,
|
|
102
|
+
};
|
|
103
|
+
}
|
|
69
104
|
//# sourceMappingURL=loader.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/policy/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C,MAAM,UAAU,cAAc,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IAC7D,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAY,CAAC;IACrC,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY,EAAE,IAAY;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAE3C,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAgC,CAAC;IACnD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE;QACpD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,IAAI,GAAG,CAA4B,CAAC;QAC1C,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,CAAC,mCAAmC,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,CAAC,2BAA2B,CAAC,CAAC;QAClE,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAc;YACzB,KAAK,EAAE,IAAI,CAAC,KAAgB;YAC5B,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC;YAClD,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC;YAChD,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,
|
|
1
|
+
{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/policy/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAE3C,MAAM,UAAU,cAAc,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IAC7D,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC7C,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAY,CAAC;IACrC,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY,EAAE,IAAY;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAE3C,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAgC,CAAC;IACnD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,4CAA4C,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE;QACpD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,CAAC,qBAAqB,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,IAAI,GAAG,CAA4B,CAAC;QAC1C,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,CAAC,mCAAmC,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,CAAC,2BAA2B,CAAC,CAAC;QAClE,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAc;YACzB,KAAK,EAAE,IAAI,CAAC,KAAgB;YAC5B,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC;YAClD,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC;YAChD,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAClE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,EAAY,EAAE,OAAO,EAAE,KAAK,CAAC,OAAiB,EAAE;QACnE,KAAK;QACL,aAAa,EAAE,qBAAqB,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY,EAAE,IAAY;IACvD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACxD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,qCAAqC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,GAA8B,CAAC;IAC5C,MAAM,QAAQ,GAAG;QACf,gBAAgB;QAChB,kBAAkB;QAClB,eAAe;QACf,kBAAkB;QAClB,iBAAiB;QACjB,YAAY;QACZ,aAAa;KACL,CAAC;IACX,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,KAAK,6BAA6B,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,OAAO;QACL,cAAc,EAAE,IAAI,CAAC,cAAwB;QAC7C,gBAAgB,EAAE,IAAI,CAAC,gBAA0B;QACjD,aAAa,EAAE,IAAI,CAAC,aAAuB;QAC3C,gBAAgB,EAAE,IAAI,CAAC,gBAA0B;QACjD,eAAe,EAAE,IAAI,CAAC,eAAyB;QAC/C,UAAU,EAAE,IAAI,CAAC,UAAoB;QACrC,WAAW,EAAE,IAAI,CAAC,WAAqB;KACxC,CAAC;AACJ,CAAC"}
|
package/dist/policy/types.d.ts
CHANGED
|
@@ -13,6 +13,7 @@ export interface Rule {
|
|
|
13
13
|
export interface CatpPolicy {
|
|
14
14
|
agent: AgentMeta;
|
|
15
15
|
rules: Rule[];
|
|
16
|
+
authorization?: AuthorizationConfig;
|
|
16
17
|
}
|
|
17
18
|
export interface HookInput {
|
|
18
19
|
session_id?: string;
|
|
@@ -26,5 +27,23 @@ export interface AuditEntry {
|
|
|
26
27
|
rule_matched: string | null;
|
|
27
28
|
commitment: string;
|
|
28
29
|
input_summary: string;
|
|
30
|
+
authorization?: AuthorizationAction;
|
|
31
|
+
}
|
|
32
|
+
export interface AuthorizationConfig {
|
|
33
|
+
allowed_action: string;
|
|
34
|
+
allowed_protocol: string;
|
|
35
|
+
allowed_token: string;
|
|
36
|
+
max_value_per_tx: string;
|
|
37
|
+
max_value_total: string;
|
|
38
|
+
valid_from: string;
|
|
39
|
+
valid_until: string;
|
|
40
|
+
}
|
|
41
|
+
export interface AuthorizationAction {
|
|
42
|
+
actionType: string | number;
|
|
43
|
+
protocol: string;
|
|
44
|
+
token: string;
|
|
45
|
+
value: string | number;
|
|
46
|
+
currentTimestamp?: string | number;
|
|
47
|
+
cumulativeSpend?: string | number;
|
|
29
48
|
}
|
|
30
49
|
//# sourceMappingURL=types.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/policy/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,IAAI,EAAE,CAAC;
|
|
1
|
+
{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/policy/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,IAAI;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,SAAS;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,mBAAmB,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC"}
|
package/package.json
CHANGED