@cotal-ai/auth 0.87.0 → 0.89.0

package/dist/tool-result-consent.d.ts

@@ -0,0 +1,44 @@
+import { type AnchorResolver, type SecretStore, type ToolResultConsent } from "@cotal-ai/core";
+import type { KV } from "@nats-io/kv";
+import { type IdpConfig } from "./idp.js";
+/** Provisioned by the trusted host. The seed is read only inside the auth process. */
+export declare const toolResultConsentKey: (space: string) => string;
+export interface ToolResultConsentInput {
+    id: string;
+    idpToken: string;
+    subject: string;
+    accountPublicKey: string;
+    holder: {
+        actor: string;
+        lifecycleUid: string;
+    };
+    target: {
+        owner: string;
+        actor: string;
+        lifecycleUid: string;
+    };
+    ttlMs: number;
+}
+export interface ToolResultConsentSignerOptions {
+    keyId: string;
+    /** Fresh account-local anchor resolution, injected only by the trusted composition. */
+    resolveAnchor: AnchorResolver;
+}
+export type ToolResultConsentRecorder = (consent: ToolResultConsent) => Promise<void>;
+/** Closed host envelope. Owner, scope and timestamps cannot be supplied for the holder. */
+export declare function parseToolResultConsentInput(raw: unknown): ToolResultConsentInput;
+/** Native atomic create, without a retry or a success classification after a lost acknowledgement. */
+export declare function makeToolResultConsentRecorder(kv: Pick<KV, "put">, fence: () => void, space: string): ToolResultConsentRecorder;
+/** Sign and record within the host process. Nothing returns until the create-only write succeeds. */
+export declare function createToolResultConsentSigner(deps: {
+    space: string;
+    accountPublicKey: string;
+    dir: string;
+    store: SecretStore;
+    idp: IdpConfig;
+    ownerSecret: string | Uint8Array;
+    signer: ToolResultConsentSignerOptions;
+    record: ToolResultConsentRecorder;
+    now?: () => number;
+}): (raw: unknown) => Promise<ToolResultConsent>;
+//# sourceMappingURL=tool-result-consent.d.ts.map

package/dist/tool-result-consent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-result-consent.d.ts","sourceRoot":"","sources":["../src/tool-result-consent.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACxF,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAGtC,OAAO,EAA8B,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAGtE,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,GAAI,OAAO,MAAM,KAAG,MAAoE,CAAC;AAC1H,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,uFAAuF;IACvF,aAAa,EAAE,cAAc,CAAC;CAC/B;AACD,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAOtF,2FAA2F;AAC3F,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,OAAO,GAAG,sBAAsB,CAchF;AAED,sGAAsG;AACtG,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,yBAAyB,CAa9H;AAED,qGAAqG;AACrG,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,KAAK,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,SAAS,CAAC;IACzF,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IAAC,MAAM,EAAE,8BAA8B,CAAC;IAAC,MAAM,EAAE,yBAAyB,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACjI,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAsD/C"}

package/dist/tool-result-consent.js

@@ -0,0 +1,135 @@
+import { fromSeed } from "@nats-io/nkeys";
+import { EpEnvelopeError, assertDerivedOwnerToken, assertLifecycleToken, assertValidOwnerToken, canonicalJson, isCasLoss, parseToolResultConsent, resolveToolResultConsentAnchor, signArtifact, verifyArtifactSignature, TOOL_RESULT_CONSENT_MAX_TTL_MS } from "@cotal-ai/core";
+import { spaceSegment } from "@cotal-ai/workspace";
+import { deriveOwnerForIdpSubject } from "./derive.js";
+import { verifyToolResultHumanProof } from "./idp.js";
+import { findInteractiveActor, findManagedActor } from "./ledger.js";
+/** Provisioned by the trusted host. The seed is read only inside the auth process. */
+export const toolResultConsentKey = (space) => `auth/${spaceSegment(space)}/tool-result-consent-key.json`;
+function fail(code, message) {
+    throw new EpEnvelopeError(code, message, undefined, "not-executed");
+}
+const rec = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+const exact = (v, keys) => rec(v) && Object.keys(v).length === keys.length && keys.every(k => Object.hasOwn(v, k));
+/** Closed host envelope. Owner, scope and timestamps cannot be supplied for the holder. */
+export function parseToolResultConsentInput(raw) {
+    if (!exact(raw, ["id", "idpToken", "subject", "accountPublicKey", "holder", "target", "ttlMs"]) ||
+        !exact(raw.holder, ["actor", "lifecycleUid"]) || !exact(raw.target, ["owner", "actor", "lifecycleUid"]) ||
+        typeof raw.id !== "string" || !/^[A-Za-z0-9_-]{1,200}$/.test(raw.id) ||
+        typeof raw.idpToken !== "string" || !raw.idpToken || raw.idpToken.length > 16_384 ||
+        typeof raw.subject !== "string" || !raw.subject || raw.subject.length > 512 ||
+        typeof raw.accountPublicKey !== "string" || typeof raw.ttlMs !== "number" || !Number.isSafeInteger(raw.ttlMs) || raw.ttlMs <= 0 || raw.ttlMs > TOOL_RESULT_CONSENT_MAX_TTL_MS)
+        fail("bad-request", "invalid closed tool-result consent request");
+    try {
+        assertDerivedOwnerToken(raw.target.owner);
+        assertValidOwnerToken(raw.target.actor);
+        assertValidOwnerToken(raw.holder.actor);
+        assertLifecycleToken(raw.target.lifecycleUid);
+        assertLifecycleToken(raw.holder.lifecycleUid);
+    }
+    catch {
+        fail("bad-request", "invalid consent principal or lifecycle");
+    }
+    return JSON.parse(canonicalJson(raw));
+}
+/** Native atomic create, without a retry or a success classification after a lost acknowledgement. */
+export function makeToolResultConsentRecorder(kv, fence, space) {
+    return async (consent) => {
+        parseToolResultConsent(consent);
+        if (consent.space !== space)
+            fail("permission-denied", "consent record belongs to another space");
+        fence();
+        try {
+            await kv.put(`consent.${consent.id}`, new TextEncoder().encode(JSON.stringify(consent)), { previousSeq: 0 });
+        }
+        catch (error) {
+            if (isCasLoss(error))
+                throw new EpEnvelopeError("conflict", "consent id is already recorded", undefined, "not-executed");
+            throw new EpEnvelopeError("unavailable", "consent persistence outcome is unknown; no automatic retry", undefined, "unknown");
+        }
+        try {
+            fence();
+        }
+        catch {
+            throw new EpEnvelopeError("unavailable", "consent recorded but authority fenced before release", undefined, "unknown");
+        }
+    };
+}
+/** Sign and record within the host process. Nothing returns until the create-only write succeeds. */
+export function createToolResultConsentSigner(deps) {
+    return async (raw) => {
+        const input = parseToolResultConsentInput(raw);
+        if (input.accountPublicKey !== deps.accountPublicKey)
+            fail("permission-denied", "consent account mismatch");
+        let proof;
+        try {
+            proof = await verifyToolResultHumanProof(input.idpToken, deps.idp, deps.now);
+        }
+        catch {
+            fail("permission-denied", "fresh signed password proof required");
+        }
+        const owner = deriveOwnerForIdpSubject(deps.ownerSecret, deps.idp.issuer, proof.sub);
+        const current = () => {
+            const now = (deps.now ?? Date.now)();
+            if (!Number.isSafeInteger(now) || now < 0 || now < proof.authTime * 1000 || now - proof.authTime * 1000 > 300_000 || now >= proof.exp * 1000)
+                fail("permission-denied", "fresh signed password proof required");
+            if (proof.sub !== input.subject || input.target.owner !== owner || input.target.actor === input.holder.actor)
+                fail("permission-denied", "consent requires the same verified owner and an interactive holder");
+            const holder = findInteractiveActor(deps.dir, owner, input.holder.actor);
+            const target = findManagedActor(deps.dir, owner, input.target.actor);
+            if (!holder || holder.lifecycleUid !== input.holder.lifecycleUid || !target || target.lifecycleUid !== input.target.lifecycleUid)
+                fail("permission-denied", "consent holder or managed target lifecycle is not current");
+            return now;
+        };
+        current();
+        let stored;
+        try {
+            const value = await deps.store.get(toolResultConsentKey(deps.space));
+            stored = value === undefined ? undefined : JSON.parse(value);
+        }
+        catch {
+            fail("unavailable", "consent signing material unavailable");
+        }
+        if (!exact(stored, ["ver", "keyId", "seed"]) || stored.ver !== 1 || stored.keyId !== deps.signer.keyId || typeof stored.seed !== "string")
+            fail("unavailable", "consent signing material unavailable");
+        const now = current();
+        const anchor = await resolveToolResultConsentAnchor(deps.signer.resolveAnchor, deps.signer.keyId, now);
+        let signed;
+        try {
+            const key = fromSeed(new TextEncoder().encode(stored.seed));
+            try {
+                if (key.getPublicKey() !== anchor.publicKey)
+                    fail("unavailable", "consent signing key does not match its anchor");
+                const iat = current();
+                if (iat < anchor.validFrom || iat > anchor.validTo)
+                    fail("permission-denied", "consent anchor is no longer current");
+                signed = parseToolResultConsent(signArtifact({ v: 1, kind: "tool-result-consent", id: input.id, space: deps.space,
+                    target: input.target, holder: { owner, actor: input.holder.actor }, iat, exp: iat + input.ttlMs, issuer: { keyId: deps.signer.keyId } }, key));
+                verifyArtifactSignature(signed, anchor);
+            }
+            finally {
+                key.clear();
+            }
+        }
+        catch (error) {
+            if (error instanceof EpEnvelopeError)
+                throw error;
+            fail("unavailable", "consent signing failed");
+        }
+        current();
+        await deps.record(signed);
+        try {
+            current();
+            const releasedAnchor = await resolveToolResultConsentAnchor(deps.signer.resolveAnchor, deps.signer.keyId, signed.iat);
+            verifyArtifactSignature(signed, releasedAnchor);
+            current();
+            if ((deps.now ?? Date.now)() >= signed.exp)
+                throw new Error("expired before release");
+        }
+        catch {
+            throw new EpEnvelopeError("unavailable", "consent recorded but release authority changed", undefined, "unknown");
+        }
+        return signed;
+    };
+}
+//# sourceMappingURL=tool-result-consent.js.map

package/dist/tool-result-consent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-result-consent.js","sourceRoot":"","sources":["../src/tool-result-consent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,aAAa,EAAE,SAAS,EACtH,sBAAsB,EAAE,8BAA8B,EAAE,YAAY,EAAE,uBAAuB,EAAE,8BAA8B,EAC9D,MAAM,gBAAgB,CAAC;AAExF,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAkB,MAAM,UAAU,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAErE,sFAAsF;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,QAAQ,YAAY,CAAC,KAAK,CAAC,+BAA+B,CAAC;AAgB1H,SAAS,IAAI,CAAC,IAAyD,EAAE,OAAe;IACtF,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;AACtE,CAAC;AACD,MAAM,GAAG,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACnH,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,IAAc,EAAgC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEpK,2FAA2F;AAC3F,MAAM,UAAU,2BAA2B,CAAC,GAAY;IACtD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3F,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;QACvG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACpE,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM;QACjF,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;QAC3E,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,GAAG,8BAA8B;QAC/K,IAAI,CAAC,aAAa,EAAE,4CAA4C,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;QACpD,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;QAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;QACrG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAsB,CAAC,CAAC;QAAC,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAsB,CAAC,CAAC;IACnH,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,aAAa,EAAE,wCAAwC,CAAC,CAAC;IAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAA2B,CAAC;AAClE,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,6BAA6B,CAAC,EAAmB,EAAE,KAAiB,EAAE,KAAa;IACjG,OAAO,KAAK,EAAC,OAAO,EAAC,EAAE;QACrB,sBAAsB,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;YAAE,IAAI,CAAC,mBAAmB,EAAE,yCAAyC,CAAC,CAAC;QAClG,KAAK,EAAE,CAAC;QACR,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QACrH,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,SAAS,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,gCAAgC,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;YACzH,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,4DAA4D,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAC/H,CAAC;QACD,IAAI,CAAC;YAAC,KAAK,EAAE,CAAC;QAAC,CAAC;QAChB,MAAM,CAAC;YAAC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,sDAAsD,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;IACnI,CAAC,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,6BAA6B,CAAC,IAG7C;IACC,OAAO,KAAK,EAAC,GAAG,EAAC,EAAE;QACjB,MAAM,KAAK,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,gBAAgB,KAAK,IAAI,CAAC,gBAAgB;YAAE,IAAI,CAAC,mBAAmB,EAAE,0BAA0B,CAAC,CAAC;QAC5G,IAAI,KAA6D,CAAC;QAClE,IAAI,CAAC;YAAC,KAAK,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QACrF,MAAM,CAAC;YAAC,IAAI,CAAC,mBAAmB,EAAE,sCAAsC,CAAC,CAAC;QAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACrF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,QAAQ,GAAG,IAAI,GAAG,OAAO,IAAI,GAAG,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI;gBAC1I,IAAI,CAAC,mBAAmB,EAAE,sCAAsC,CAAC,CAAC;YACpE,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,CAAC,KAAK;gBAC1G,IAAI,CAAC,mBAAmB,EAAE,oEAAoE,CAAC,CAAC;YAClG,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzE,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM,CAAC,YAAY;gBAC9H,IAAI,CAAC,mBAAmB,EAAE,2DAA2D,CAAC,CAAC;YACzF,OAAO,GAAG,CAAC;QACb,CAAC,CAAC;QACF,OAAO,EAAE,CAAC;QACV,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC3I,MAAM,CAAC;YAAC,IAAI,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;QAAC,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YACvI,IAAI,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvG,IAAI,MAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,YAAY,EAAE,KAAK,MAAM,CAAC,SAAS;oBAAE,IAAI,CAAC,aAAa,EAAE,+CAA+C,CAAC,CAAC;gBAClH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;gBACtB,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,IAAI,GAAG,GAAG,MAAM,CAAC,OAAO;oBAAE,IAAI,CAAC,mBAAmB,EAAE,qCAAqC,CAAC,CAAC;gBACrH,MAAM,GAAG,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK;oBAC/G,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC;gBACjJ,uBAAuB,CAAC,MAA4C,EAAE,MAAM,CAAC,CAAC;YAChF,CAAC;oBAAS,CAAC;gBAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe;gBAAE,MAAM,KAAK,CAAC;YAClD,IAAI,CAAC,aAAa,EAAE,wBAAwB,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,CAAC;QACV,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,EAAE,CAAC;YACV,MAAM,cAAc,GAAG,MAAM,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACtH,uBAAuB,CAAC,MAA4C,EAAE,cAAc,CAAC,CAAC;YACtF,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACxF,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,gDAAgD,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,CAAC;QAC7H,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/auth",
   "description": "Cotal per-user auth bridge: opaque owner-token derivation and strict user-token validation for the NATS auth-callout cutover (Plane 1 ↔ Plane 2).",
-  "version": "0.87.0",
+  "version": "0.89.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -18,9 +18,9 @@
     }
   },
   "dependencies": {
-    "@cotal-ai/core": "0.87.0",
-    "@cotal-ai/lang": "0.87.0",
-    "@cotal-ai/workspace": "0.87.0",
+    "@cotal-ai/core": "0.89.0",
+    "@cotal-ai/lang": "0.89.0",
+    "@cotal-ai/workspace": "0.89.0",
     "@nats-io/jwt": "0.0.10-5",
     "@nats-io/nkeys": "^2.0.3",
     "@nats-io/transport-node": "^3.4.0",