@emilia-protocol/gate 0.10.0 → 0.11.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@emilia-protocol/gate",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/emiliaprotocol/emilia-protocol.git",
@@ -47,6 +47,13 @@
     "./evidence-postgres": "./evidence-postgres.js",
     "./witness-postgres": "./witness-postgres.js",
     "./evidence": "./evidence.js",
+    "./action-escrow": "./action-escrow.js",
+    "./action-escrow-evidence": "./action-escrow-evidence.js",
+    "./action-escrow-state": "./action-escrow-state.js",
+    "./action-escrow-postgres": "./action-escrow-postgres.js",
+    "./action-escrow-verifiers": "./action-escrow-verifiers.js",
+    "./action-escrow-custodian": "./action-escrow-custodian.js",
+    "./action-escrow-package": "./action-escrow-package.js",
     "./reports/auditor-workpaper": "./reports/auditor-workpaper.js",
     "./reports/reperform": "./reports/reperform.js",
     "./reports/external-verification": "./reports/external-verification.js",
@@ -66,6 +73,13 @@
     "evidence-postgres.js",
     "witness-postgres.js",
     "evidence.js",
+    "action-escrow.js",
+    "action-escrow-evidence.js",
+    "action-escrow-state.js",
+    "action-escrow-postgres.js",
+    "action-escrow-verifiers.js",
+    "action-escrow-custodian.js",
+    "action-escrow-package.js",
     "action-packs.js",
     "action-control-manifest.js",
     "execution-binding.js",
@@ -140,8 +154,8 @@
     "cf1": "node cf1.mjs"
   },
   "dependencies": {
-    "@emilia-protocol/require-receipt": "0.6.0",
-    "@emilia-protocol/verify": "3.10.1"
+    "@emilia-protocol/require-receipt": "0.6.1",
+    "@emilia-protocol/verify": "3.11.0"
   },
   "keywords": [
     "emilia",

package/strict-json.js

@@ -4,8 +4,25 @@
 
 export const MAX_JSON_DEPTH = 64;
 
+function hasUnpairedUtf16Surrogate(value) {
+  for (let index = 0; index < value.length; index += 1) {
+    const code = value.charCodeAt(index);
+    if (code >= 0xd800 && code <= 0xdbff) {
+      const next = value.charCodeAt(index + 1);
+      if (next < 0xdc00 || next > 0xdfff) return true;
+      index += 1;
+    } else if (code >= 0xdc00 && code <= 0xdfff) {
+      return true;
+    }
+  }
+  return false;
+}
+
 export function strictJsonGate(raw) {
   if (typeof raw !== 'string') return { ok: false, reason: 'JSON input must be text' };
+  if (hasUnpairedUtf16Surrogate(raw)) {
+    return { ok: false, reason: 'unpaired Unicode surrogate' };
+  }
   try { JSON.parse(raw); } catch { return { ok: false, reason: 'invalid JSON syntax' }; }
   let index = 0;
   const stack = [];