@cotal-ai/core 0.11.6 → 0.13.0

package/dist/schema-profile.d.ts

@@ -0,0 +1,93 @@
+/**
+ * The normative JSON Schema 2020-12 execution profile for contract schemas (SPEC §13.7, D27).
+ *
+ * A contract schema is a CLOSED resource bundle: fully self-contained (local `#/…` refs) or
+ * referencing other contract-store artifacts by digest (`cotal:sha256:<hex>`) only. Ambient
+ * HTTP/file/URI resolution never happens; every external reference must be supplied by the
+ * caller as an already-fetched, digest-verified bundle member. Registration-time violations are
+ * `contract-invalid` (distinct from invocation-time `bad-request`), and all bounds are enforced
+ * BEFORE compilation so a hostile descriptor cannot turn registration into a DoS.
+ */
+import { type ValidateFunction } from "ajv/dist/2020.js";
+/** Registration-time bounds (SPEC §13.7/§13.8). Fixed by the profile, not caller-tunable, and
+ *  RUNTIME-frozen (the afa715b class): a post-import `maxDepth = MAX_SAFE_INTEGER` would remove
+ *  the pre-compilation recursion/DoS ceiling, so mutation throws instead. */
+export declare const SCHEMA_PROFILE: Readonly<{
+    /** One schema document's canonical form, bytes. */
+    readonly maxDocumentBytes: number;
+    /** The complete resolved closure (root + digest-referenced members), bytes. */
+    readonly maxClosureBytes: number;
+    /** Structural nesting depth of any document. */
+    readonly maxDepth: 32;
+    /** Digest-reference chain depth (root → member → member …). */
+    readonly maxRefChain: 32;
+    /** Compile budget per closure, ms. */
+    readonly compileBudgetMs: 100;
+    /** Bounded pattern complexity: max characters of any `pattern` / `patternProperties` regex. */
+    readonly maxPatternChars: 256;
+    /** Per-value validation budget at the serving boundary, ms (§13.8 reference; post-hoc,
+     *  fail-loud as `bad-request`). */
+    readonly validateBudgetMs: 10;
+    /** Compiled-schema cache entries (the SPEC's reference 256-entry LRU). */
+    readonly compiledCacheEntries: 256;
+}>;
+/** The canonical void schema (§13.7): the one artifact a side with no payload declares, so both
+ *  `op` digests exist for every command. Validation against it means the payload is absent or
+ *  `null`. */
+export declare const VOID_SCHEMA: Readonly<{
+    readonly type: "null";
+}>;
+/** Artifact digest of the void schema document — one fixed value by construction. */
+export declare const VOID_SCHEMA_ARTIFACT_DIGEST: string;
+/** The void schema's CLOSURE digest (the §13.7 manifest of a self-contained document) — the
+ *  value `op.inputDigest`/`op.outputDigest` carry for a payload-free side. */
+export declare const VOID_SCHEMA_DIGEST: string;
+/** Thrown for every profile violation at registration/ingest time; maps to the wire error
+ *  code `contract-invalid` (never `bad-request`, which is for invocation-time args). */
+export declare class ContractInvalidError extends Error {
+    readonly code: "contract-invalid";
+    constructor(message: string);
+}
+/** A closed schema bundle: the root document plus every digest-referenced member, already
+ *  fetched and digest-verified (see `verifyArtifact`). Keyed by `sha256:<hex>`. */
+export interface SchemaBundle {
+    root: unknown;
+    /** Digest → verified member document. Every `cotal:` ref in the closure must resolve here. */
+    members?: Record<string, unknown>;
+}
+/** A registered contract schema: the compiled validator plus the bundle's CLOSURE digest —
+ *  the artifact digest of the §13.7 manifest `{ v: 1, root, members[] }` (members = every
+ *  artifact transitively REACHABLE from the root, sorted and deduplicated). The closure digest
+ *  is the contract identity `op.inputDigest`/`op.outputDigest` pin.
+ *
+ *  The interface is structural for CONSUMERS, but authority seams never accept structure: a
+ *  compiled contract is FROZEN and brand-registered by this compiler ({@link compileContract}),
+ *  and {@link assertCompiledContract} refuses any object the profile compiler did not produce —
+ *  so a hand-built `{validate, closureDigest}` pair (an arbitrary validator wearing a
+ *  registered digest) can never enter a serve table (§13.7: the digest and its enforcing
+ *  validator are one value). */
+export interface CompiledContract {
+    validate: ValidateFunction;
+    closureDigest: string;
+}
+/** True iff `c` is a frozen contract this profile compiler produced (never structural). */
+export declare function isCompiledContract(c: unknown): c is CompiledContract;
+/** Refuse anything that is not a compiler-produced contract: authority seams (the serve table,
+ *  the grant mint) call this so a fabricated validator/digest pair fails loud, never serves. */
+export declare function assertCompiledContract(c: unknown, what: string): CompiledContract;
+/** Validate the whole closure against the profile and compile it with a real 2020-12
+ *  validator. No network, no filesystem: `loadSchema` is never installed, and every
+ *  `cotal:` reference must be present in `bundle.members`. */
+export declare function compileContract(bundle: SchemaBundle): CompiledContract;
+/** {@link compileContract} without the closure identity, kept for validation-only callers. */
+export declare function compileContractSchema(bundle: SchemaBundle): ValidateFunction;
+/** A bounded compiled-schema LRU (SPEC §13.7's reference 256-entry cache), keyed by CLOSURE
+ *  digest. The profile walk (incl. member digest verification) runs on EVERY call — only the
+ *  ajv compilation is skipped on a hit. Sound across callers: two bundles with one closure
+ *  digest are byte-identical closures, so a hit can never serve another caller's
+ *  mis-assembled bundle. */
+export declare function createCompiledContractCache(capacity?: number): {
+    compile: (bundle: SchemaBundle) => CompiledContract;
+    size: () => number;
+};
+//# sourceMappingURL=schema-profile.d.ts.map

package/dist/schema-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-profile.d.ts","sourceRoot":"","sources":["../src/schema-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAW,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAIlE;;6EAE6E;AAC7E,eAAO,MAAM,cAAc;IACzB,mDAAmD;;IAEnD,+EAA+E;;IAE/E,gDAAgD;;IAEhD,+DAA+D;;IAE/D,sCAAsC;;IAEtC,+FAA+F;;IAE/F;uCACmC;;IAEnC,0EAA0E;;EAEjE,CAAC;AAEZ;;cAEc;AACd,eAAO,MAAM,WAAW;;EAA2C,CAAC;AACpE,qFAAqF;AACrF,eAAO,MAAM,2BAA2B,QAA8B,CAAC;AACvE;8EAC8E;AAC9E,eAAO,MAAM,kBAAkB,QAA2E,CAAC;AAK3G;wFACwF;AACxF,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAU;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAqED;mFACmF;AACnF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAqBD;;;;;;;;;;gCAUgC;AAChC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;CACvB;AAaD,2FAA2F;AAC3F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,gBAAgB,CAEpE;AAED;gGACgG;AAChG,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAIjF;AA4ED;;8DAE8D;AAC9D,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAGtE;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAE5E;AAED;;;;4BAI4B;AAC5B,wBAAgB,2BAA2B,CAAC,QAAQ,GAAE,MAA4C,GAAG;IACnG,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,gBAAgB,CAAC;IACpD,IAAI,EAAE,MAAM,MAAM,CAAC;CACpB,CAmBA"}

package/dist/schema-profile.js

@@ -0,0 +1,284 @@
+/**
+ * The normative JSON Schema 2020-12 execution profile for contract schemas (SPEC §13.7, D27).
+ *
+ * A contract schema is a CLOSED resource bundle: fully self-contained (local `#/…` refs) or
+ * referencing other contract-store artifacts by digest (`cotal:sha256:<hex>`) only. Ambient
+ * HTTP/file/URI resolution never happens; every external reference must be supplied by the
+ * caller as an already-fetched, digest-verified bundle member. Registration-time violations are
+ * `contract-invalid` (distinct from invocation-time `bad-request`), and all bounds are enforced
+ * BEFORE compilation so a hostile descriptor cannot turn registration into a DoS.
+ */
+import { Ajv2020 } from "ajv/dist/2020.js";
+import { canonicalJson, contractDigest, isContractDigest } from "./canonical.js";
+import { assertSafePattern } from "./safe-pattern.js";
+/** Registration-time bounds (SPEC §13.7/§13.8). Fixed by the profile, not caller-tunable, and
+ *  RUNTIME-frozen (the afa715b class): a post-import `maxDepth = MAX_SAFE_INTEGER` would remove
+ *  the pre-compilation recursion/DoS ceiling, so mutation throws instead. */
+export const SCHEMA_PROFILE = Object.freeze({
+    /** One schema document's canonical form, bytes. */
+    maxDocumentBytes: 256 * 1024,
+    /** The complete resolved closure (root + digest-referenced members), bytes. */
+    maxClosureBytes: 1024 * 1024,
+    /** Structural nesting depth of any document. */
+    maxDepth: 32,
+    /** Digest-reference chain depth (root → member → member …). */
+    maxRefChain: 32,
+    /** Compile budget per closure, ms. */
+    compileBudgetMs: 100,
+    /** Bounded pattern complexity: max characters of any `pattern` / `patternProperties` regex. */
+    maxPatternChars: 256,
+    /** Per-value validation budget at the serving boundary, ms (§13.8 reference; post-hoc,
+     *  fail-loud as `bad-request`). */
+    validateBudgetMs: 10,
+    /** Compiled-schema cache entries (the SPEC's reference 256-entry LRU). */
+    compiledCacheEntries: 256,
+});
+/** The canonical void schema (§13.7): the one artifact a side with no payload declares, so both
+ *  `op` digests exist for every command. Validation against it means the payload is absent or
+ *  `null`. */
+export const VOID_SCHEMA = Object.freeze({ type: "null" });
+/** Artifact digest of the void schema document — one fixed value by construction. */
+export const VOID_SCHEMA_ARTIFACT_DIGEST = contractDigest(VOID_SCHEMA);
+/** The void schema's CLOSURE digest (the §13.7 manifest of a self-contained document) — the
+ *  value `op.inputDigest`/`op.outputDigest` carry for a payload-free side. */
+export const VOID_SCHEMA_DIGEST = contractDigest({ v: 1, root: VOID_SCHEMA_ARTIFACT_DIGEST, members: [] });
+/** The digest-pinned contract-store reference scheme: `cotal:sha256:<hex>[#/json/pointer]`. */
+const STORE_REF = /^cotal:(sha256:[0-9a-f]{64})(#.*)?$/;
+/** Thrown for every profile violation at registration/ingest time; maps to the wire error
+ *  code `contract-invalid` (never `bad-request`, which is for invocation-time args). */
+export class ContractInvalidError extends Error {
+    code = "contract-invalid";
+    constructor(message) {
+        super(message);
+        this.name = "ContractInvalidError";
+    }
+}
+/** Canonicalize within the profile boundary: an I-JSON violation (lone surrogate, undefined,
+ *  non-finite number) in a schema document is a PROFILE violation and must surface as
+ *  `contract-invalid`, never as a raw canonicalizer error (§13.7). */
+function canonicalOrInvalid(v, label) {
+    try {
+        return canonicalJson(v);
+    }
+    catch (e) {
+        throw new ContractInvalidError(`${label}: ${e.message}`);
+    }
+}
+function digestOrInvalid(v, label) {
+    try {
+        return contractDigest(v);
+    }
+    catch (e) {
+        throw new ContractInvalidError(`${label}: ${e.message}`);
+    }
+}
+function structuralDepth(v, depth = 0) {
+    if (depth > SCHEMA_PROFILE.maxDepth)
+        return depth; // short-circuit, caller throws
+    if (v === null || typeof v !== "object")
+        return depth;
+    let max = depth;
+    const children = Array.isArray(v) ? v : Object.values(v);
+    for (const c of children) {
+        const d = structuralDepth(c, depth + 1);
+        if (d > max)
+            max = d;
+        if (max > SCHEMA_PROFILE.maxDepth)
+            return max;
+    }
+    return max;
+}
+/** The bounded-pattern-complexity gate (§13.7/§13.8 "bounded pattern complexity", "bounded
+ *  regex"): the {@link assertSafePattern} SAFE SUBSET — a length bound plus an admission
+ *  analysis that refuses nested repetition, repeated nullable or ambiguous-alternation bodies,
+ *  overlapping variable repetitions in sequence, backreferences, lookarounds, and anything it
+ *  cannot parse. Conservative by construction: uncertainty refuses. A refused pattern is
+ *  rewritten by its author at registration time (`contract-invalid`), never probed at
+ *  validation time — the post-hoc validate budget can only classify a stall, not prevent it. */
+function assertBoundedPattern(p, label, where) {
+    try {
+        assertSafePattern(p, SCHEMA_PROFILE.maxPatternChars);
+    }
+    catch (e) {
+        throw new ContractInvalidError(`${label}: ${where} refused: ${e.message}`);
+    }
+}
+/** Collect every `$ref` string in a schema document and gate its regex patterns (structural
+ *  walk; `$ref` in 2020-12 is always a string-valued keyword wherever it appears; `pattern`
+ *  values and `patternProperties` keys are the profile's bounded-pattern-complexity surface). */
+function collectRefs(v, label, out = []) {
+    if (v === null || typeof v !== "object")
+        return out;
+    if (Array.isArray(v)) {
+        for (const c of v)
+            collectRefs(c, label, out);
+        return out;
+    }
+    for (const [k, c] of Object.entries(v)) {
+        if ((k === "$ref" || k === "$dynamicRef") && typeof c === "string")
+            out.push(c);
+        if (k === "pattern" && typeof c === "string")
+            assertBoundedPattern(c, label, "a pattern");
+        if (k === "patternProperties" && c !== null && typeof c === "object" && !Array.isArray(c)) {
+            for (const p of Object.keys(c))
+                assertBoundedPattern(p, label, "a patternProperties key");
+        }
+        collectRefs(c, label, out);
+    }
+    return out;
+}
+/** Enforce the D27 profile on one document: size, depth, and reference closure. Returns the
+ *  digest-refs the document makes (for closure walking). */
+function assertDocumentProfile(doc, label) {
+    const canonical = canonicalOrInvalid(doc, label); // also enforces I-JSON, as contract-invalid
+    const bytes = Buffer.byteLength(canonical, "utf8");
+    if (bytes > SCHEMA_PROFILE.maxDocumentBytes)
+        throw new ContractInvalidError(`${label}: document is ${bytes} bytes (profile max ${SCHEMA_PROFILE.maxDocumentBytes})`);
+    if (structuralDepth(doc) > SCHEMA_PROFILE.maxDepth)
+        throw new ContractInvalidError(`${label}: nesting exceeds profile depth ${SCHEMA_PROFILE.maxDepth}`);
+    const storeRefs = [];
+    for (const ref of collectRefs(doc, label)) {
+        if (ref.startsWith("#"))
+            continue; // local pointer/anchor — resolved within the document
+        const m = STORE_REF.exec(ref);
+        if (!m)
+            throw new ContractInvalidError(`${label}: external $ref ${JSON.stringify(ref)}; only local '#…' or digest-pinned 'cotal:sha256:<hex>' references are permitted (no ambient resolution)`);
+        storeRefs.push(m[1]);
+    }
+    return storeRefs;
+}
+/** Provenance brand: exactly the frozen objects this compiler returned. A WeakSet (not a
+ *  field) so the brand is unforgeable and unserializable; the freeze makes field swaps on a
+ *  branded object impossible, so brand membership proves BOTH fields came out of one compile. */
+const COMPILED = new WeakSet();
+function makeCompiled(validate, closureDigest) {
+    const compiled = Object.freeze({ validate, closureDigest });
+    COMPILED.add(compiled);
+    return compiled;
+}
+/** True iff `c` is a frozen contract this profile compiler produced (never structural). */
+export function isCompiledContract(c) {
+    return typeof c === "object" && c !== null && COMPILED.has(c);
+}
+/** Refuse anything that is not a compiler-produced contract: authority seams (the serve table,
+ *  the grant mint) call this so a fabricated validator/digest pair fails loud, never serves. */
+export function assertCompiledContract(c, what) {
+    if (!isCompiledContract(c))
+        throw new ContractInvalidError(`${what} is not a profile-compiled contract (schema-profile compileContract); a structural {validate, closureDigest} pair carries no compile provenance and is refused (SPEC 13.7)`);
+    return c;
+}
+/** Enforce the profile on the whole closure WITHOUT compiling: bounds every document, walks the
+ *  digest-reference graph breadth-first (chain depth + total size), VERIFIES every reachable
+ *  member against its digest key (fail-loud `contract-invalid`, so a mis-assembled bundle can
+ *  neither register nor poison the compiled cache), and returns the closure identity — the
+ *  §13.7 manifest digest. */
+function assertClosureProfile(bundle) {
+    const members = bundle.members ?? {};
+    for (const d of Object.keys(members)) {
+        if (!isContractDigest(d))
+            throw new ContractInvalidError(`bundle member key ${JSON.stringify(d)} is not a sha256 digest`);
+    }
+    const seen = new Set();
+    let closureBytes = 0;
+    let frontier = assertDocumentProfile(bundle.root, "root schema");
+    closureBytes += Buffer.byteLength(canonicalOrInvalid(bundle.root, "root schema"), "utf8");
+    for (let chain = 0; frontier.length > 0; chain++) {
+        if (chain >= SCHEMA_PROFILE.maxRefChain)
+            throw new ContractInvalidError(`reference chain exceeds profile depth ${SCHEMA_PROFILE.maxRefChain}`);
+        const next = [];
+        for (const digest of frontier) {
+            if (seen.has(digest))
+                continue;
+            seen.add(digest);
+            const member = members[digest];
+            if (member === undefined)
+                throw new ContractInvalidError(`unresolved digest reference ${digest}: not present in the bundle (schemas are closed; nothing is fetched)`);
+            if (digestOrInvalid(member, `member ${digest}`) !== digest)
+                throw new ContractInvalidError(`bundle member under ${digest} does not hash to its key (content is ${digestOrInvalid(member, `member ${digest}`)})`);
+            closureBytes += Buffer.byteLength(canonicalOrInvalid(member, `member ${digest}`), "utf8");
+            if (closureBytes > SCHEMA_PROFILE.maxClosureBytes)
+                throw new ContractInvalidError(`closure is ${closureBytes} bytes (profile max ${SCHEMA_PROFILE.maxClosureBytes})`);
+            next.push(...assertDocumentProfile(member, `member ${digest}`));
+        }
+        frontier = next;
+    }
+    // A closed bundle lists EXACTLY the closure: a member unreachable from the root escaped every
+    // bound and digest check above and never enters the closure identity, so accepting it would
+    // make registration history-dependent (cold compile vs cache hit) and hand unverified,
+    // unbounded input to the compiler. Refused deterministically, before hit and miss alike.
+    const extras = Object.keys(members).filter((d) => !seen.has(d));
+    if (extras.length > 0)
+        throw new ContractInvalidError(`bundle carries ${extras.length} member(s) unreachable from the root (${extras.slice(0, 3).join(", ")}${extras.length > 3 ? ", …" : ""})`);
+    return contractDigest({ v: 1, root: digestOrInvalid(bundle.root, "root schema"), members: [...seen].sort() });
+}
+function compileWithinBudget(bundle) {
+    const started = Date.now();
+    // Compile with deterministic local resolution only. Members register under their cotal: URI
+    // so in-document `$ref: "cotal:sha256:…"` resolves from the bundle, never the network.
+    const ajv = new Ajv2020({
+        strict: false, // the wire accepts full 2020-12, not ajv's strict-mode dialect subset
+        allErrors: false,
+        validateFormats: false,
+        loadSchema: undefined,
+        // PINNED, never inherited from Ajv's default: the safe-pattern analyzer models `/u`
+        // semantics exactly (astral atoms, surrogate refusals), so the engine MUST compile
+        // `pattern` with the `u` flag. If this ever flipped, patterns would be proven under one
+        // grammar and executed under another (an admitting under-approximation).
+        unicodeRegExp: true,
+    });
+    let validate;
+    try {
+        // Every member is reachable and digest-verified (assertClosureProfile refuses extras), so
+        // exactly the closure registers. A registration failure (e.g. a `$id` collision between
+        // members) is a profile rejection, same as a compile failure.
+        for (const [digest, member] of Object.entries(bundle.members ?? {}))
+            ajv.addSchema(member, `cotal:${digest}`);
+        validate = ajv.compile(bundle.root);
+    }
+    catch (e) {
+        throw new ContractInvalidError(`schema does not compile under the 2020-12 profile: ${e.message}`);
+    }
+    const elapsed = Date.now() - started;
+    if (elapsed > SCHEMA_PROFILE.compileBudgetMs)
+        throw new ContractInvalidError(`compile took ${elapsed}ms (profile budget ${SCHEMA_PROFILE.compileBudgetMs}ms)`);
+    return validate;
+}
+/** Validate the whole closure against the profile and compile it with a real 2020-12
+ *  validator. No network, no filesystem: `loadSchema` is never installed, and every
+ *  `cotal:` reference must be present in `bundle.members`. */
+export function compileContract(bundle) {
+    const closureDigest = assertClosureProfile(bundle);
+    return makeCompiled(compileWithinBudget(bundle), closureDigest);
+}
+/** {@link compileContract} without the closure identity, kept for validation-only callers. */
+export function compileContractSchema(bundle) {
+    return compileContract(bundle).validate;
+}
+/** A bounded compiled-schema LRU (SPEC §13.7's reference 256-entry cache), keyed by CLOSURE
+ *  digest. The profile walk (incl. member digest verification) runs on EVERY call — only the
+ *  ajv compilation is skipped on a hit. Sound across callers: two bundles with one closure
+ *  digest are byte-identical closures, so a hit can never serve another caller's
+ *  mis-assembled bundle. */
+export function createCompiledContractCache(capacity = SCHEMA_PROFILE.compiledCacheEntries) {
+    if (!Number.isSafeInteger(capacity) || capacity < 1)
+        throw new Error(`cache capacity ${capacity} is not a positive integer`);
+    const lru = new Map();
+    return {
+        compile(bundle) {
+            const closureDigest = assertClosureProfile(bundle);
+            const hit = lru.get(closureDigest);
+            if (hit) {
+                lru.delete(closureDigest); // refresh recency
+                lru.set(closureDigest, hit);
+                return hit;
+            }
+            const compiled = makeCompiled(compileWithinBudget(bundle), closureDigest);
+            lru.set(closureDigest, compiled);
+            if (lru.size > capacity)
+                lru.delete(lru.keys().next().value);
+            return compiled;
+        },
+        size: () => lru.size,
+    };
+}
+//# sourceMappingURL=schema-profile.js.map

package/dist/schema-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-profile.js","sourceRoot":"","sources":["../src/schema-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,OAAO,EAAyB,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD;;6EAE6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,mDAAmD;IACnD,gBAAgB,EAAE,GAAG,GAAG,IAAI;IAC5B,+EAA+E;IAC/E,eAAe,EAAE,IAAI,GAAG,IAAI;IAC5B,gDAAgD;IAChD,QAAQ,EAAE,EAAE;IACZ,+DAA+D;IAC/D,WAAW,EAAE,EAAE;IACf,sCAAsC;IACtC,eAAe,EAAE,GAAG;IACpB,+FAA+F;IAC/F,eAAe,EAAE,GAAG;IACpB;uCACmC;IACnC,gBAAgB,EAAE,EAAE;IACpB,0EAA0E;IAC1E,oBAAoB,EAAE,GAAG;CACjB,CAAC,CAAC;AAEZ;;cAEc;AACd,MAAM,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAW,CAAC,CAAC;AACpE,qFAAqF;AACrF,MAAM,CAAC,MAAM,2BAA2B,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;AACvE;8EAC8E;AAC9E,MAAM,CAAC,MAAM,kBAAkB,GAAG,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AAE3G,+FAA+F;AAC/F,MAAM,SAAS,GAAG,qCAAqC,CAAC;AAExD;wFACwF;AACxF,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,GAAG,kBAA2B,CAAC;IAC5C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;sEAEsE;AACtE,SAAS,kBAAkB,CAAC,CAAU,EAAE,KAAa;IACnD,IAAI,CAAC;QACH,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,CAAU,EAAE,KAAa;IAChD,IAAI,CAAC;QACH,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,KAAM,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,CAAU,EAAE,KAAK,GAAG,CAAC;IAC5C,IAAI,KAAK,GAAG,cAAc,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC,CAAC,+BAA+B;IAClF,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAA4B,CAAC,CAAC;IACpF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,GAAG;YAAE,GAAG,GAAG,CAAC,CAAC;QACrB,IAAI,GAAG,GAAG,cAAc,CAAC,QAAQ;YAAE,OAAO,GAAG,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;gGAMgG;AAChG,SAAS,oBAAoB,CAAC,CAAS,EAAE,KAAa,EAAE,KAAa;IACnE,IAAI,CAAC;QACH,iBAAiB,CAAC,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,KAAK,KAAK,aAAc,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED;;iGAEiG;AACjG,SAAS,WAAW,CAAC,CAAU,EAAE,KAAa,EAAE,MAAgB,EAAE;IAChE,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,CAAC;YAAE,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC9C,OAAO,GAAG,CAAC;IACb,CAAC;IACD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,aAAa,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,oBAAoB,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,mBAAmB,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC;gBAAE,oBAAoB,CAAC,CAAC,EAAE,KAAK,EAAE,yBAAyB,CAAC,CAAC;QACvH,CAAC;QACD,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAUD;4DAC4D;AAC5D,SAAS,qBAAqB,CAAC,GAAY,EAAE,KAAa;IACxD,MAAM,SAAS,GAAG,kBAAkB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,4CAA4C;IAC9F,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,KAAK,GAAG,cAAc,CAAC,gBAAgB;QACzC,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,iBAAiB,KAAK,uBAAuB,cAAc,CAAC,gBAAgB,GAAG,CAAC,CAAC;IAC1H,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,QAAQ;QAChD,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,mCAAmC,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvG,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,sDAAsD;QACzF,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,GAAG,KAAK,mBAAmB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,0GAA0G,CAAC,CAAC;QACjM,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAkBD;;iGAEiG;AACjG,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAoB,CAAC;AAEjD,SAAS,YAAY,CAAC,QAA0B,EAAE,aAAqB;IACrE,MAAM,QAAQ,GAAqB,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9E,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,kBAAkB,CAAC,CAAU;IAC3C,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAqB,CAAC,CAAC;AACpF,CAAC;AAED;gGACgG;AAChG,MAAM,UAAU,sBAAsB,CAAC,CAAU,EAAE,IAAY;IAC7D,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACxB,MAAM,IAAI,oBAAoB,CAAC,GAAG,IAAI,4KAA4K,CAAC,CAAC;IACtN,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;6BAI6B;AAC7B,SAAS,oBAAoB,CAAC,MAAoB;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;IAC5H,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACjE,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1F,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,IAAI,KAAK,IAAI,cAAc,CAAC,WAAW;YACrC,MAAM,IAAI,oBAAoB,CAAC,yCAAyC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;QACxG,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,SAAS;YAC/B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,MAAM,KAAK,SAAS;gBACtB,MAAM,IAAI,oBAAoB,CAAC,+BAA+B,MAAM,sEAAsE,CAAC,CAAC;YAC9I,IAAI,eAAe,CAAC,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC,KAAK,MAAM;gBACxD,MAAM,IAAI,oBAAoB,CAAC,uBAAuB,MAAM,yCAAyC,eAAe,CAAC,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;YACvJ,YAAY,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1F,IAAI,YAAY,GAAG,cAAc,CAAC,eAAe;gBAC/C,MAAM,IAAI,oBAAoB,CAAC,cAAc,YAAY,uBAAuB,cAAc,CAAC,eAAe,GAAG,CAAC,CAAC;YACrH,IAAI,CAAC,IAAI,CAAC,GAAG,qBAAqB,CAAC,MAAM,EAAE,UAAU,MAAM,EAAE,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,8FAA8F;IAC9F,4FAA4F;IAC5F,uFAAuF;IACvF,yFAAyF;IACzF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QACnB,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,MAAM,CAAC,MAAM,yCAAyC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5K,OAAO,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAoB;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,4FAA4F;IAC5F,uFAAuF;IACvF,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC;QACtB,MAAM,EAAE,KAAK,EAAE,sEAAsE;QACrF,SAAS,EAAE,KAAK;QAChB,eAAe,EAAE,KAAK;QACtB,UAAU,EAAE,SAAS;QACrB,oFAAoF;QACpF,mFAAmF;QACnF,wFAAwF;QACxF,yEAAyE;QACzE,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IACH,IAAI,QAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,0FAA0F;QAC1F,wFAAwF;QACxF,8DAA8D;QAC9D,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;YAAE,GAAG,CAAC,SAAS,CAAC,MAAgB,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;QACxH,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAc,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,oBAAoB,CAAC,sDAAuD,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACrC,IAAI,OAAO,GAAG,cAAc,CAAC,eAAe;QAC1C,MAAM,IAAI,oBAAoB,CAAC,gBAAgB,OAAO,sBAAsB,cAAc,CAAC,eAAe,KAAK,CAAC,CAAC;IACnH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;8DAE8D;AAC9D,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;AAClE,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,qBAAqB,CAAC,MAAoB;IACxD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;AAC1C,CAAC;AAED;;;;4BAI4B;AAC5B,MAAM,UAAU,2BAA2B,CAAC,WAAmB,cAAc,CAAC,oBAAoB;IAIhG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,4BAA4B,CAAC,CAAC;IAC7H,MAAM,GAAG,GAAG,IAAI,GAAG,EAA4B,CAAC;IAChD,OAAO;QACL,OAAO,CAAC,MAAoB;YAC1B,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACnC,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB;gBAC7C,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;gBAC5B,OAAO,GAAG,CAAC;YACb,CAAC;YACD,MAAM,QAAQ,GAAG,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;YAC1E,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YACjC,IAAI,GAAG,CAAC,IAAI,GAAG,QAAQ;gBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAe,CAAC,CAAC;YACvE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI;KACrB,CAAC;AACJ,CAAC"}

package/dist/secret-store.d.ts

@@ -0,0 +1,46 @@
+/**
+ * The abstract seam for persisting secret material.
+ *
+ * Core owns ONLY this tiny value-store contract. The default filesystem adapter (`FsSecretStore`)
+ * lives in `@cotal-ai/workspace` because on-disk layout is a workstation concern, not the wire
+ * protocol. A closed hosted composition injects its own KMS/Vault-backed implementation at its
+ * composition root; nothing here knows it is being hosted.
+ *
+ * SCOPE — what routes through a `SecretStore`. Only DURABLE HOSTED SECRET BLOBS: the full persisted
+ * space trust bundle (operator + account seeds and the account signing seed; only the system-account
+ * seed is stripped before disk), the auth service's callout / issuer / owner-secret / service-key
+ * material, agent standing creds, and any daemon standing credential the hosted composition persists
+ * (renewable ones — delivery / membership-rw — are read via `get` on each refresh, never a one-shot
+ * snapshot; rotation-renewed observer / evictor creds are read at start or per use).
+ * Machine-local, transient, or non-secret artifacts are NOT `SecretStore` material and remain the
+ * local filesystem owner's responsibility: the mesh registry,
+ * the transient MCP config, launcher scripts, personas, auth-service discovery (pid/port), the IdP
+ * pin, `membership.json`, the login cache, and the actor ledger (authorization DB state, not an
+ * exportable blob). Every
+ * durable secret that routes through here must be READ through `get` too, or a hosted `put` is a
+ * silent no-op while a raw `readFileSync` stays authoritative.
+ *
+ * KEYS are OPAQUE logical strings built by the owning package. Core assigns them no taxonomy: a
+ * KMS key-id / policy / HSM-slot mapping is the closed adapter's concern. Typing the key could not
+ * enforce "signing-seed never leaves the HSM" anyway, because {@link SecretStore.get} necessarily
+ * exports the value; non-exportable signing, if ever needed, is a separate capability seam
+ * (sign / mint), not a richer key here. v1 accepts that signing material DOES enter process memory
+ * (e.g. `mintCreds`).
+ */
+export interface SecretStore {
+    /** The stored value for `key`, or `undefined` if absent. */
+    get(key: string): Promise<string | undefined>;
+    /** Store `value` under `key`, replacing any prior value AS A WHOLE: a concurrent `get` observes
+     *  either the complete old value or the complete new one, never a partial or torn intermediate
+     *  (FS adapter → atomic temp+rename; a managed backend → a conditional / whole-object put). This
+     *  atomicity is part of the contract because standing daemon/agent creds are re-read live during
+     *  renewal. Private perms / hardening beyond the atomicity guarantee remain the adapter's concern. */
+    put(key: string, value: string): Promise<void>;
+    /** Remove `key`. Idempotent. The ONLY portable contract is: after a successful `delete`,
+     *  `get(key)` returns absent. This is NOT cryptographic shred, revocation, or credential kill —
+     *  a backend may retain recoverable versions, and any already-issued NATS cred or signing seed
+     *  stays valid until its credential lifetime ends or broker/key rotation invalidates it (those
+     *  are mint / renewal / eviction concerns, not `SecretStore`). */
+    delete(key: string): Promise<void>;
+}
+//# sourceMappingURL=secret-store.d.ts.map

package/dist/secret-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-store.d.ts","sourceRoot":"","sources":["../src/secret-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAE9C;;;;0GAIsG;IACtG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/C;;;;sEAIkE;IAClE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC"}

package/dist/secret-store.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secret-store.js.map

package/dist/secret-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-store.js","sourceRoot":"","sources":["../src/secret-store.ts"],"names":[],"mappings":""}

package/dist/space-auth.d.ts

@@ -0,0 +1,9 @@
+import type { SpaceAuth } from "./provision.js";
+/**
+ * Validate an existing full space trust bundle before a restore or other state mutation.
+ *
+ * This is read-only: it never generates, rotates, or signs key material, and returns the same
+ * validated object. Persisted bundles may omit `sys.signingSeed`; when present, it is validated too.
+ */
+export declare function validateSpaceAuth(auth: unknown, expectedSpace?: string): SpaceAuth;
+//# sourceMappingURL=space-auth.d.ts.map

package/dist/space-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-auth.d.ts","sourceRoot":"","sources":["../src/space-auth.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AA4DhD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CA2DlF"}

package/dist/space-auth.js

@@ -0,0 +1,126 @@
+import { decode, Types } from "@nats-io/jwt";
+import { fromPublic, fromSeed } from "@nats-io/nkeys";
+import { token } from "./subjects.js";
+function record(value, field) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw new Error(`validateSpaceAuth: ${field} must be an object`);
+    return value;
+}
+function string(value, field) {
+    if (typeof value !== "string" || value.length === 0)
+        throw new Error(`validateSpaceAuth: ${field} must be a non-empty string`);
+    return value;
+}
+function publicKey(value, field, prefix) {
+    let pair;
+    try {
+        pair = fromPublic(value);
+        const pub = pair.getPublicKey();
+        if (!pub.startsWith(prefix))
+            throw new Error();
+        return pub;
+    }
+    catch {
+        throw new Error(`validateSpaceAuth: ${field} is not a valid ${prefix === "A" ? "account" : "operator"} public nkey`);
+    }
+    finally {
+        pair?.clear();
+    }
+}
+function seedPublicKey(value, field, prefix) {
+    let pair;
+    try {
+        pair = fromSeed(new TextEncoder().encode(value));
+        const pub = pair.getPublicKey();
+        if (!pub.startsWith(prefix))
+            throw new Error();
+        return pub;
+    }
+    catch {
+        throw new Error(`validateSpaceAuth: ${field} is not a valid ${prefix === "A" ? "account" : "operator"} seed`);
+    }
+    finally {
+        pair?.clear();
+    }
+}
+function claims(jwt, field) {
+    try {
+        const decoded = decode(jwt);
+        const now = Math.floor(Date.now() / 1000);
+        if (decoded.aud !== "NATS")
+            throw new Error();
+        if (!Number.isSafeInteger(decoded.iat) || decoded.iat < 0)
+            throw new Error();
+        if (typeof decoded.jti !== "string" || decoded.jti.length === 0)
+            throw new Error();
+        if (decoded.exp !== undefined && (!Number.isSafeInteger(decoded.exp) || decoded.exp <= now))
+            throw new Error();
+        if (decoded.nbf !== undefined && (!Number.isSafeInteger(decoded.nbf) || decoded.nbf > now))
+            throw new Error();
+        return decoded;
+    }
+    catch {
+        throw new Error(`validateSpaceAuth: ${field} is not a currently valid signed NATS JWT`);
+    }
+}
+/**
+ * Validate an existing full space trust bundle before a restore or other state mutation.
+ *
+ * This is read-only: it never generates, rotates, or signs key material, and returns the same
+ * validated object. Persisted bundles may omit `sys.signingSeed`; when present, it is validated too.
+ */
+export function validateSpaceAuth(auth, expectedSpace) {
+    const root = record(auth, "auth");
+    const operator = record(root.operator, "operator");
+    const account = record(root.account, "account");
+    const sys = record(root.sys, "sys");
+    const space = string(root.space, "space");
+    if (!space.trim())
+        throw new Error("validateSpaceAuth: space must not be blank");
+    if (expectedSpace !== undefined && space !== expectedSpace)
+        throw new Error(`validateSpaceAuth: space "${space}" does not match expected space "${expectedSpace}"`);
+    const operatorSeed = string(operator.seed, "operator.seed");
+    const operatorJwt = string(operator.jwt, "operator.jwt");
+    const accountPub = publicKey(string(account.pub, "account.pub"), "account.pub", "A");
+    const accountSeed = string(account.seed, "account.seed");
+    const accountJwt = string(account.jwt, "account.jwt");
+    const signingSeed = string(account.signingSeed, "account.signingSeed");
+    const signingPub = publicKey(string(account.signingPub, "account.signingPub"), "account.signingPub", "A");
+    const sysPub = publicKey(string(sys.pub, "sys.pub"), "sys.pub", "A");
+    const sysJwt = string(sys.jwt, "sys.jwt");
+    if (accountPub === sysPub || signingPub === sysPub)
+        throw new Error("validateSpaceAuth: data account identities and system account must use distinct nkeys");
+    const operatorPub = seedPublicKey(operatorSeed, "operator.seed", "O");
+    if (seedPublicKey(accountSeed, "account.seed", "A") !== accountPub)
+        throw new Error("validateSpaceAuth: account.seed does not match account.pub");
+    if (seedPublicKey(signingSeed, "account.signingSeed", "A") !== signingPub)
+        throw new Error("validateSpaceAuth: account.signingSeed does not match account.signingPub");
+    if (sys.signingSeed !== undefined) {
+        const sysSigningSeed = string(sys.signingSeed, "sys.signingSeed");
+        if (seedPublicKey(sysSigningSeed, "sys.signingSeed", "A") !== sysPub)
+            throw new Error("validateSpaceAuth: sys.signingSeed does not match sys.pub");
+    }
+    const operatorClaims = claims(operatorJwt, "operator.jwt");
+    const accountClaims = claims(accountJwt, "account.jwt");
+    const sysClaims = claims(sysJwt, "sys.jwt");
+    publicKey(operatorClaims.sub, "operator JWT subject", "O");
+    if (operatorClaims.nats?.type !== Types.Operator || operatorClaims.sub !== operatorPub || operatorClaims.iss !== operatorPub)
+        throw new Error("validateSpaceAuth: operator JWT subject, issuer, or type does not match operator.seed");
+    if (operatorClaims.name !== `cotal-${token(space)}`)
+        throw new Error("validateSpaceAuth: operator JWT name does not match space");
+    if (operatorClaims.nats.system_account !== sysPub)
+        throw new Error("validateSpaceAuth: operator JWT system account does not match sys.pub");
+    if (accountClaims.nats?.type !== Types.Account || accountClaims.sub !== accountPub || accountClaims.iss !== operatorPub)
+        throw new Error("validateSpaceAuth: account JWT subject, issuer, or type does not match the operator/account keys");
+    if (accountClaims.name !== token(space))
+        throw new Error("validateSpaceAuth: account JWT name does not match space");
+    const signingKeys = accountClaims.nats.signing_keys;
+    if (!Array.isArray(signingKeys) || !signingKeys.includes(signingPub))
+        throw new Error("validateSpaceAuth: active account signing key is not trusted as an unscoped signer by account.jwt");
+    if (sysClaims.nats?.type !== Types.Account || sysClaims.sub !== sysPub || sysClaims.iss !== operatorPub)
+        throw new Error("validateSpaceAuth: system account JWT subject, issuer, or type does not match the operator/system keys");
+    if (sysClaims.name !== "SYS")
+        throw new Error("validateSpaceAuth: system account JWT name must be SYS");
+    return auth;
+}
+//# sourceMappingURL=space-auth.js.map

package/dist/space-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-auth.js","sourceRoot":"","sources":["../src/space-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA+B,KAAK,EAAE,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAgB,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAItC,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,oBAAoB,CAAC,CAAC;IACnE,OAAO,KAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,6BAA6B,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa,EAAE,MAAiB;IAChE,IAAI,IAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC/C,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,mBAAmB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,cAAc,CAAC,CAAC;IACvH,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,KAAa,EAAE,MAAiB;IACpE,IAAI,IAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC/C,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,mBAAmB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC;IAChH,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAI,GAAW,EAAE,KAAa;IAC3C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAI,GAAG,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,CAAC,GAAG,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC7E,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACnF,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC/G,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC9G,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,2CAA2C,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAa,EAAE,aAAsB;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACjF,IAAI,aAAa,KAAK,SAAS,IAAI,KAAK,KAAK,aAAa;QACxD,MAAM,IAAI,KAAK,CAAC,6BAA6B,KAAK,oCAAoC,aAAa,GAAG,CAAC,CAAC;IAE1G,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,oBAAoB,CAAC,EAAE,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,MAAM;QAChD,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAE3G,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IACtE,IAAI,aAAa,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,CAAC,KAAK,UAAU;QAChE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,IAAI,aAAa,CAAC,WAAW,EAAE,qBAAqB,EAAE,GAAG,CAAC,KAAK,UAAU;QACvE,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;QAClE,IAAI,aAAa,CAAC,cAAc,EAAE,iBAAiB,EAAE,GAAG,CAAC,KAAK,MAAM;YAClE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,CAAW,WAAW,EAAE,cAAc,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,MAAM,CAAU,UAAU,EAAE,aAAa,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAU,MAAM,EAAE,SAAS,CAAC,CAAC;IAErD,SAAS,CAAC,cAAc,CAAC,GAAG,EAAE,sBAAsB,EAAE,GAAG,CAAC,CAAC;IAC3D,IAAI,cAAc,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,QAAQ,IAAI,cAAc,CAAC,GAAG,KAAK,WAAW,IAAI,cAAc,CAAC,GAAG,KAAK,WAAW;QAC1H,MAAM,IAAI,KAAK,CAAC,uFAAuF,CAAC,CAAC;IAC3G,IAAI,cAAc,CAAC,IAAI,KAAK,SAAS,KAAK,CAAC,KAAK,CAAC,EAAE;QACjD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,IAAI,cAAc,CAAC,IAAI,CAAC,cAAc,KAAK,MAAM;QAC/C,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAE3F,IAAI,aAAa,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,aAAa,CAAC,GAAG,KAAK,UAAU,IAAI,aAAa,CAAC,GAAG,KAAK,WAAW;QACrH,MAAM,IAAI,KAAK,CAAC,kGAAkG,CAAC,CAAC;IACtH,IAAI,aAAa,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,mGAAmG,CAAC,CAAC;IAEvH,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,GAAG,KAAK,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,WAAW;QACrG,MAAM,IAAI,KAAK,CAAC,wGAAwG,CAAC,CAAC;IAC5H,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK;QAC1B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,OAAO,IAAiB,CAAC;AAC3B,CAAC"}