@continuonai/rcan-ts 1.2.2 → 1.2.3

package/dist/index.mjs

@@ -3218,6 +3218,66 @@ async function verifyPQSignature(msg, trustedKeys, _requirePQ = true) {
   return verifyMessage(msg, trustedKeys);
 }
 
+// src/mcp.ts
+var LOA_TO_SCOPES = {
+  0: ["discover", "status", "transparency"],
+  1: ["chat", "control", "system"],
+  3: ["system", "safety"]
+};
+var TOOL_LOA_REQUIREMENTS = {
+  // Tier 0 — read
+  robot_ping: 0,
+  robot_status: 0,
+  robot_telemetry: 0,
+  fleet_list: 0,
+  rrf_lookup: 0,
+  compliance_report: 0,
+  // Tier 1 — operate
+  robot_command: 1,
+  harness_get: 1,
+  research_run: 1,
+  contribute_toggle: 1,
+  components_list: 1,
+  // Tier 3 — admin
+  harness_set: 3,
+  system_upgrade: 3,
+  loa_enable: 3
+};
+function clientAllowsTool(client, toolName) {
+  const required = TOOL_LOA_REQUIREMENTS[toolName] ?? 99;
+  return client.loa >= required;
+}
+
+// src/delegation.ts
+var MAX_DELEGATION_DEPTH = 3;
+function validateDelegationChain2(chain) {
+  if (chain.length > MAX_DELEGATION_DEPTH) {
+    throw new Error(
+      `RCAN: delegation chain max depth is ${MAX_DELEGATION_DEPTH}, got ${chain.length}`
+    );
+  }
+}
+var _hashImpl;
+function verifyMediaChunkHash(chunk) {
+  if (!chunk.data) return;
+  let actual;
+  if (_hashImpl) {
+    actual = _hashImpl(chunk.data);
+  } else {
+    try {
+      const m = typeof __require !== "undefined" ? __require : null;
+      if (!m) return;
+      const { createHash } = m("node:crypto");
+      actual = "sha256:" + createHash("sha256").update(chunk.data).digest("hex");
+    } catch {
+      return;
+    }
+  }
+  if (actual !== chunk.hash_sha256) {
+    throw new Error(`MediaChunk hash mismatch: expected ${chunk.hash_sha256}, got ${actual}`);
+  }
+}
+
 // src/index.ts
 var VERSION = "0.6.0";
 var RCAN_VERSION = "1.6";
@@ -3239,6 +3299,7 @@ export {
   GateError,
   HiTLGate,
   KeyStore,
+  LOA_TO_SCOPES,
   LevelOfAssurance,
   M2MAuthError,
   M2M_TRUSTED_ISSUER,
@@ -3282,6 +3343,7 @@ export {
   SCOPE_MIN_ROLE,
   SDK_VERSION,
   SPEC_VERSION,
+  TOOL_LOA_REQUIREMENTS,
   TransportEncoding,
   TransportError,
   TrustAnchorCache,
@@ -3296,6 +3358,7 @@ export {
   canonicalManifestJson,
   checkClockSync,
   checkRevocation,
+  clientAllowsTool,
   decodeBleFrames,
   decodeCompact,
   decodeMinimal,
@@ -3363,10 +3426,12 @@ export {
   validateSafetyMessage,
   validateTrainingDataMessage,
   validateURI,
+  validateDelegationChain2 as validateV22DelegationChain,
   validateVersionCompat,
   verifyM2mTrustedToken,
   verifyM2mTrustedTokenClaims,
   verifyMessage,
-  verifyPQSignature
+  verifyPQSignature,
+  verifyMediaChunkHash as verifyV22MediaChunkHash
 };
 //# sourceMappingURL=index.mjs.map