@cello-protocol/protocol-types 0.0.50 → 0.0.51
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/submission.d.ts +22 -1
- package/dist/submission.d.ts.map +1 -1
- package/dist/submission.js.map +1 -1
- package/package.json +2 -2
package/dist/submission.d.ts
CHANGED
|
@@ -45,8 +45,29 @@ export declare const SUBMISSION_DOMAIN = "CELLO-SUBMIT-v1";
|
|
|
45
45
|
* changes no field and no order — so every signature already made over a `submit` or `withdraw`
|
|
46
46
|
* body still verifies. For `refuse` and `withdraw` alike, `subject` is the TARGET SIGNAL HASH: both
|
|
47
47
|
* act on an existing signal instead of asserting a fact about a party.
|
|
48
|
+
*
|
|
49
|
+
* `revoke` (M10B / DOD-END-REVOKE-3) is the SUBJECT retracting a signal the PORTAL issued about
|
|
50
|
+
* them — their GitHub link, say. `subject` is the TARGET SIGNAL HASH, as for `refuse`/`withdraw`.
|
|
51
|
+
*
|
|
52
|
+
* ── WHY THIS RIDES THE SUBMISSION QUEUE AND NOT A DIRECT CALL TO THE DIRECTORY ─────────────────
|
|
53
|
+
* The daemon used to POST this straight at a directory, and it could never have worked: it aimed at
|
|
54
|
+
* the health port, and the real route is on the internal API, which is firewalled to the VPC and
|
|
55
|
+
* unreachable from an operator's machine by any URL.
|
|
56
|
+
*
|
|
57
|
+
* But the deciding reason is not reachability, it is ENFORCEMENT. Certain signals must not be
|
|
58
|
+
* revocable at all — a `track_record` its subject can delete is worth nothing to anyone — and that
|
|
59
|
+
* rule cannot live at the directory, which deliberately cannot tell a `track_record` from a
|
|
60
|
+
* `github_id`: `type` is an opaque string with no enum precisely so a new signal type never needs a
|
|
61
|
+
* directory deploy (`DOD-INV-ZERO-BUMP`). Both are portal-issued, so `issuer_kind` does not separate
|
|
62
|
+
* them either. A direct agent→directory verb would therefore revoke a behavioural record on request,
|
|
63
|
+
* leaving only an editable client in the way — which is no enforcement at all.
|
|
64
|
+
*
|
|
65
|
+
* The PORTAL minted the signal and knows what it is. So the category check lives where it can
|
|
66
|
+
* actually be enforced, and this op is how the request reaches it. It costs asynchrony — the answer
|
|
67
|
+
* is "queued" and the outcome arrives on the results channel — and that is the price of the rule
|
|
68
|
+
* being real rather than advisory.
|
|
48
69
|
*/
|
|
49
|
-
export type SubmissionOp = "submit" | "withdraw" | "refuse";
|
|
70
|
+
export type SubmissionOp = "submit" | "withdraw" | "refuse" | "revoke";
|
|
50
71
|
/**
|
|
51
72
|
* The signed part of a submission. Every field is inside the TBS — a field outside it is
|
|
52
73
|
* unauthenticated data an attacker can edit in flight while the signature still verifies.
|
package/dist/submission.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"submission.d.ts","sourceRoot":"","sources":["../src/submission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D;;wCAEwC;AACxC,eAAO,MAAM,iBAAiB,oBAAoB,CAAC;AAEnD
|
|
1
|
+
{"version":3,"file":"submission.d.ts","sourceRoot":"","sources":["../src/submission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D;;wCAEwC;AACxC,eAAO,MAAM,iBAAiB,oBAAoB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAOvE;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,CAAC,EAAE,MAAM,CAAC;IACV,EAAE,EAAE,YAAY,CAAC;IACjB;2FACuF;IACvF,YAAY,EAAE,iBAAiB,CAAC;IAChC;oEACgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;;OAUG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;gGAC4F;IAC5F,IAAI,EAAE,MAAM,CAAC;IACb;oGACgG;IAChG,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,0FAA0F;AAC1F,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,cAAc,GAAG,UAAU,CAWnE;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,GAAG,UAAU,CAYxF;AAeD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,gBAAgB,CA6CpE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,iBAAiB,EAAE,UAAU,GAAG,MAAM,CAElE"}
|
package/dist/submission.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"submission.js","sourceRoot":"","sources":["../src/submission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGnD;;wCAEwC;AACxC,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;
|
|
1
|
+
{"version":3,"file":"submission.js","sourceRoot":"","sources":["../src/submission.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAGnD;;wCAEwC;AACxC,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC;AAuCnD,kGAAkG;AAClG,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,4EAA4E;AAC5E,MAAM,aAAa,GAAG,SAAS,GAAG,CAAC,CAAC;AA0CpC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAoB;IACrD,OAAO,UAAU,CAAC;QAChB,iBAAiB;QACjB,IAAI,CAAC,CAAC;QACN,IAAI,CAAC,EAAE;QACP,IAAI,CAAC,YAAY;QACjB,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,gBAAgB;QACrB,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,SAAS;KACf,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAoB,EAAE,SAAqB;IAC1E,OAAO,UAAU,CAAC;QAChB,iBAAiB;QACjB,IAAI,CAAC,CAAC;QACN,IAAI,CAAC,EAAE;QACP,IAAI,CAAC,YAAY;QACjB,IAAI,CAAC,OAAO;QACZ,IAAI,CAAC,gBAAgB;QACrB,IAAI,CAAC,IAAI;QACT,IAAI,CAAC,SAAS;QACd,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,SAAS,GAAG,CAAC,CAAU,EAAE,KAAa;IACpC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,mBAAmB,CAAC,CAAC;IAC9F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,GAAG,CAAC,CAAU,EAAE,KAAa;IACpC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,yBAAyB,KAAK,qBAAqB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACrC,8FAA8F;QAC9F,0EAA0E;QAC1E,MAAM,IAAI,KAAK,CAAC,kCAAkC,aAAa,kBAAkB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,iBAAiB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,+EAA+E,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,UAAU,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACpD,IAAI,WAAW,KAAK,OAAO,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,+CAA+C,WAAW,GAAG,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,SAAS,YAAY,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,4FAA4F;IAC5F,iGAAiG;IACjG,iGAAiG;IACjG,qEAAqE;IACrE,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO;QACL,IAAI,EAAE;YACJ,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;YACvB,EAAE;YACF,YAAY,EAAE,WAAW;YACzB,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;YACnC,gBAAgB,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC;YACrD,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;YAC7B,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC;SACxC;QACD,SAAS,EAAE,cAAc;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY,CAAC,iBAA6B;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cello-protocol/protocol-types",
|
|
3
|
-
"version": "0.0.
|
|
3
|
+
"version": "0.0.51",
|
|
4
4
|
"private": false,
|
|
5
5
|
"type": "module",
|
|
6
6
|
"engines": {
|
|
@@ -26,7 +26,7 @@
|
|
|
26
26
|
],
|
|
27
27
|
"dependencies": {
|
|
28
28
|
"cbor-x": "^1.6.4",
|
|
29
|
-
"@cello-protocol/crypto": "0.0.
|
|
29
|
+
"@cello-protocol/crypto": "0.0.47"
|
|
30
30
|
},
|
|
31
31
|
"devDependencies": {
|
|
32
32
|
"@claude-flow/testing": "3.0.0-alpha.6",
|