@grantex/sdk 0.6.0 → 0.7.0

package/dist/authorization-details.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Read `urn:grantex:tools:v1` entries from a grant's `authorization_details`.
+ *
+ * This is the only place that interprets the `authorization_details` claim
+ * (RFC 9396), so a change to the token format touches one function. Shape:
+ *
+ * ```json
+ * "authorization_details": [{
+ *   "type": "urn:grantex:tools:v1",
+ *   "connector": "acme_kyb",
+ *   "purpose": "aml.cdd.onboarding",
+ *   "data_region": "eu",
+ *   "tools": ["resolve_business", "verify_business", "screen_*"],
+ *   "caps": {"verify_business": {"per_hour": 50, "per_case": 3},
+ *            "cost_units": {"per_day": 5000}}
+ * }]
+ * ```
+ *
+ * Entries of other types are separate authorizations and are ignored here. A
+ * tools entry constrains calls on its connector in addition to the grant's
+ * scopes. Anything ambiguous (a claim that is not an array, an entry without
+ * a string `type`, a tools entry with an unknown key, a value of the wrong
+ * type, or two tools entries for one connector) throws
+ * `AuthorizationDetailsError`, and `enforce()` denies. Mirrors the Python
+ * SDK's `grantex._authorization_details`.
+ *
+ * `caps` is validated here, for every call on the connector: each key is an
+ * exact tool name or `cost_units` (the connector's cost-unit budget), never a
+ * wildcard, and each value is a non-empty object of `per_hour`, `per_day` and
+ * `per_case` counts from 0 to 2147483647.
+ */
+export declare const TOOLS_DETAIL_TYPE = "urn:grantex:tools:v1";
+declare const CAP_WINDOWS: readonly ['per_hour', 'per_day', 'per_case'];
+/** Key of the connector cost-unit budget in `caps`; reserved as a tool name. */
+export declare const COST_UNITS_KEY = "cost_units";
+export type CapWindowCounts = Partial<Record<(typeof CAP_WINDOWS)[number], number>>;
+export declare class AuthorizationDetailsError extends Error {
+    constructor(message: string);
+}
+/** One `urn:grantex:tools:v1` entry. */
+export interface ToolsAuthorization {
+    connector: string;
+    /** The grant's purpose for this connector, exactly as issued (not validated). */
+    purpose?: string;
+    dataRegion?: string;
+    /** Tool names, or prefixes ending in `*`; absent means every tool. */
+    tools?: readonly string[];
+    /** Validated caps: tool name (or `cost_units`) to window to count. */
+    caps?: Readonly<Record<string, Readonly<CapWindowCounts>>>;
+}
+/** Whether an entry's `tools` list (when present) names `tool`. */
+export declare function toolsAuthorizationAllows(entry: ToolsAuthorization, tool: string): boolean;
+/**
+ * Return the tools entries of an `authorization_details` claim by connector.
+ * `undefined` or `null` (no claim) yields an empty map.
+ *
+ * @throws {AuthorizationDetailsError} the claim is malformed or ambiguous.
+ */
+export declare function parseToolsAuthorization(claim: unknown): Map<string, ToolsAuthorization>;
+export declare const DECISION_DETAIL_TYPE = "urn:grantex:decision:v1";
+/**
+ * One `urn:grantex:decision:v1` entry: tools on a connector that need a
+ * decision grant, and the decisions on each that need two approvers.
+ *
+ * ```json
+ * {"type": "urn:grantex:decision:v1", "connector": "acme_kyb",
+ *  "tools": ["case_decision"], "four_eyes_on": {"case_decision": ["decline"]}}
+ * ```
+ */
+export interface DecisionReference {
+    connector: string;
+    tools: readonly string[];
+    fourEyesOn: Readonly<Record<string, readonly string[]>>;
+}
+/**
+ * Return the decision references of an `authorization_details` claim by
+ * connector. `undefined` or `null` yields an empty map. Entries of other types
+ * are ignored.
+ *
+ * @throws {AuthorizationDetailsError} an entry is malformed: an unknown key, no
+ *   tools, a tool name that is not a name, `four_eyes_on` naming a tool not in
+ *   `tools`, or two entries for one connector.
+ */
+export declare function parseDecisionReferences(claim: unknown): Map<string, DecisionReference>;
+export {};
+//# sourceMappingURL=authorization-details.d.ts.map

package/dist/authorization-details.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-details.d.ts","sourceRoot":"","sources":["../src/authorization-details.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AAKxD,QAAA,MAAM,WAAW,YAAI,UAAU,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAGjE,gFAAgF;AAChF,eAAO,MAAM,cAAc,eAAe,CAAC;AAE3C,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpF,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAED,wCAAwC;AACxC,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,sEAAsE;IACtE,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;CAC5D;AAmCD,mEAAmE;AACnE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAGzF;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAmDvF;AAED,eAAO,MAAM,oBAAoB,4BAA4B,CAAC;AAM9D;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;CACzD;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAsDtF"}

package/dist/authorization-details.js

@@ -0,0 +1,209 @@
+/**
+ * Read `urn:grantex:tools:v1` entries from a grant's `authorization_details`.
+ *
+ * This is the only place that interprets the `authorization_details` claim
+ * (RFC 9396), so a change to the token format touches one function. Shape:
+ *
+ * ```json
+ * "authorization_details": [{
+ *   "type": "urn:grantex:tools:v1",
+ *   "connector": "acme_kyb",
+ *   "purpose": "aml.cdd.onboarding",
+ *   "data_region": "eu",
+ *   "tools": ["resolve_business", "verify_business", "screen_*"],
+ *   "caps": {"verify_business": {"per_hour": 50, "per_case": 3},
+ *            "cost_units": {"per_day": 5000}}
+ * }]
+ * ```
+ *
+ * Entries of other types are separate authorizations and are ignored here. A
+ * tools entry constrains calls on its connector in addition to the grant's
+ * scopes. Anything ambiguous (a claim that is not an array, an entry without
+ * a string `type`, a tools entry with an unknown key, a value of the wrong
+ * type, or two tools entries for one connector) throws
+ * `AuthorizationDetailsError`, and `enforce()` denies. Mirrors the Python
+ * SDK's `grantex._authorization_details`.
+ *
+ * `caps` is validated here, for every call on the connector: each key is an
+ * exact tool name or `cost_units` (the connector's cost-unit budget), never a
+ * wildcard, and each value is a non-empty object of `per_hour`, `per_day` and
+ * `per_case` counts from 0 to 2147483647.
+ */
+export const TOOLS_DETAIL_TYPE = 'urn:grantex:tools:v1';
+const ENTRY_KEYS = new Set(['type', 'connector', 'purpose', 'data_region', 'tools', 'caps']);
+const NAME_RE = /^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$/;
+const TOOL_PATTERN_RE = /^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}\*?$/;
+const CAP_WINDOWS = ['per_hour', 'per_day', 'per_case'];
+const MAX_COUNT = 2147483647;
+/** Key of the connector cost-unit budget in `caps`; reserved as a tool name. */
+export const COST_UNITS_KEY = 'cost_units';
+export class AuthorizationDetailsError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'AuthorizationDetailsError';
+    }
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function parseCaps(raw, where) {
+    if (!isPlainObject(raw) || Object.keys(raw).length === 0) {
+        throw new AuthorizationDetailsError(`${where} must be a non-empty object`);
+    }
+    const parsed = {};
+    for (const [name, windows] of Object.entries(raw)) {
+        if (!(name === COST_UNITS_KEY || NAME_RE.test(name))) {
+            throw new AuthorizationDetailsError(`${where} key "${name}" must be an exact tool name or cost_units; wildcards are not allowed`);
+        }
+        if (!isPlainObject(windows) || Object.keys(windows).length === 0) {
+            throw new AuthorizationDetailsError(`${where}.${name} must be a non-empty object`);
+        }
+        const counts = {};
+        for (const [window, value] of Object.entries(windows)) {
+            if (!CAP_WINDOWS.includes(window)) {
+                throw new AuthorizationDetailsError(`${where}.${name} has unknown window "${window}"`);
+            }
+            if (typeof value !== 'number' || !Number.isInteger(value) || value < 0 || value > MAX_COUNT) {
+                throw new AuthorizationDetailsError(`${where}.${name}.${window} must be an integer between 0 and ${MAX_COUNT}`);
+            }
+            counts[window] = value;
+        }
+        Object.defineProperty(parsed, name, { value: Object.freeze(counts), enumerable: true, writable: false, configurable: false });
+    }
+    return parsed;
+}
+/** Whether an entry's `tools` list (when present) names `tool`. */
+export function toolsAuthorizationAllows(entry, tool) {
+    if (entry.tools === undefined)
+        return true;
+    return entry.tools.some((t) => (t.endsWith('*') ? tool.startsWith(t.slice(0, -1)) : t === tool));
+}
+/**
+ * Return the tools entries of an `authorization_details` claim by connector.
+ * `undefined` or `null` (no claim) yields an empty map.
+ *
+ * @throws {AuthorizationDetailsError} the claim is malformed or ambiguous.
+ */
+export function parseToolsAuthorization(claim) {
+    const entries = new Map();
+    if (claim === undefined || claim === null)
+        return entries;
+    if (!Array.isArray(claim))
+        throw new AuthorizationDetailsError('authorization_details must be an array');
+    claim.forEach((raw, index) => {
+        const where = `authorization_details[${index}]`;
+        if (!isPlainObject(raw))
+            throw new AuthorizationDetailsError(`${where} must be an object`);
+        const type = raw['type'];
+        if (typeof type !== 'string' || type.length === 0) {
+            throw new AuthorizationDetailsError(`${where}.type must be a non-empty string`);
+        }
+        if (type !== TOOLS_DETAIL_TYPE)
+            return;
+        const unknown = Object.keys(raw).filter((k) => !ENTRY_KEYS.has(k)).sort();
+        if (unknown.length > 0)
+            throw new AuthorizationDetailsError(`${where} has unknown key "${unknown[0]}"`);
+        const connector = raw['connector'];
+        if (typeof connector !== 'string' || !NAME_RE.test(connector)) {
+            throw new AuthorizationDetailsError(`${where}.connector must be a connector name`);
+        }
+        if (entries.has(connector)) {
+            throw new AuthorizationDetailsError(`${where} repeats connector "${connector}"; a grant carries one tools entry per connector`);
+        }
+        const entry = { connector };
+        const purpose = raw['purpose'];
+        if (purpose !== undefined && purpose !== null) {
+            if (typeof purpose !== 'string')
+                throw new AuthorizationDetailsError(`${where}.purpose must be a string`);
+            entry.purpose = purpose;
+        }
+        const dataRegion = raw['data_region'];
+        if (dataRegion !== undefined && dataRegion !== null) {
+            if (typeof dataRegion !== 'string')
+                throw new AuthorizationDetailsError(`${where}.data_region must be a string`);
+            entry.dataRegion = dataRegion;
+        }
+        if ('tools' in raw) {
+            const tools = raw['tools'];
+            if (!Array.isArray(tools) || !tools.every((t) => typeof t === 'string' && TOOL_PATTERN_RE.test(t))) {
+                throw new AuthorizationDetailsError(`${where}.tools must be an array of tool names or name prefixes ending in *`);
+            }
+            entry.tools = Object.freeze([...tools]);
+        }
+        if ('caps' in raw) {
+            entry.caps = Object.freeze(parseCaps(raw['caps'], `${where}.caps`));
+        }
+        entries.set(connector, entry);
+    });
+    return entries;
+}
+export const DECISION_DETAIL_TYPE = 'urn:grantex:decision:v1';
+const DECISION_ENTRY_KEYS = new Set(['type', 'connector', 'tools', 'four_eyes_on']);
+const TOOL_NAME_RE = NAME_RE;
+const DECISION_RE = /^[a-z][a-z0-9_]{0,63}$/;
+/**
+ * Return the decision references of an `authorization_details` claim by
+ * connector. `undefined` or `null` yields an empty map. Entries of other types
+ * are ignored.
+ *
+ * @throws {AuthorizationDetailsError} an entry is malformed: an unknown key, no
+ *   tools, a tool name that is not a name, `four_eyes_on` naming a tool not in
+ *   `tools`, or two entries for one connector.
+ */
+export function parseDecisionReferences(claim) {
+    const entries = new Map();
+    if (claim === undefined || claim === null)
+        return entries;
+    if (!Array.isArray(claim))
+        throw new AuthorizationDetailsError('authorization_details must be an array');
+    claim.forEach((raw, index) => {
+        const where = `authorization_details[${index}]`;
+        if (!isPlainObject(raw))
+            throw new AuthorizationDetailsError(`${where} must be an object`);
+        const type = raw['type'];
+        if (typeof type !== 'string' || type.length === 0) {
+            throw new AuthorizationDetailsError(`${where}.type must be a non-empty string`);
+        }
+        if (type !== DECISION_DETAIL_TYPE)
+            return;
+        const unknown = Object.keys(raw).filter((k) => !DECISION_ENTRY_KEYS.has(k)).sort();
+        if (unknown.length > 0)
+            throw new AuthorizationDetailsError(`${where} has unknown key "${unknown[0]}"`);
+        const connector = raw['connector'];
+        if (typeof connector !== 'string' || !NAME_RE.test(connector)) {
+            throw new AuthorizationDetailsError(`${where}.connector must be a connector name`);
+        }
+        if (entries.has(connector)) {
+            throw new AuthorizationDetailsError(`${where} repeats connector "${connector}"; a grant carries one decision entry per connector`);
+        }
+        const tools = raw['tools'];
+        if (!Array.isArray(tools) || tools.length === 0
+            || !tools.every((t) => typeof t === 'string' && TOOL_NAME_RE.test(t))) {
+            throw new AuthorizationDetailsError(`${where}.tools must be a non-empty array of tool names`);
+        }
+        const fourEyesOn = {};
+        if ('four_eyes_on' in raw) {
+            const rawFourEyes = raw['four_eyes_on'];
+            if (!isPlainObject(rawFourEyes)) {
+                throw new AuthorizationDetailsError(`${where}.four_eyes_on must be an object`);
+            }
+            for (const [tool, decisions] of Object.entries(rawFourEyes)) {
+                if (!tools.includes(tool)) {
+                    throw new AuthorizationDetailsError(`${where}.four_eyes_on names "${tool}", which is not in tools`);
+                }
+                if (!Array.isArray(decisions) || decisions.length === 0
+                    || !decisions.every((d) => typeof d === 'string' && DECISION_RE.test(d))) {
+                    throw new AuthorizationDetailsError(`${where}.four_eyes_on.${tool} must be a non-empty array of decisions`);
+                }
+                fourEyesOn[tool] = Object.freeze([...decisions]);
+            }
+        }
+        entries.set(connector, {
+            connector,
+            tools: Object.freeze([...tools]),
+            fourEyesOn: Object.freeze(fourEyesOn),
+        });
+    });
+    return entries;
+}
+//# sourceMappingURL=authorization-details.js.map

package/dist/authorization-details.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization-details.js","sourceRoot":"","sources":["../src/authorization-details.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AAExD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7F,MAAM,OAAO,GAAG,qCAAqC,CAAC;AACtD,MAAM,eAAe,GAAG,wCAAwC,CAAC;AACjE,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AACjE,MAAM,SAAS,GAAG,UAAU,CAAC;AAE7B,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAI3C,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAcD,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,KAAa;IAC5C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,MAAM,GAAoC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,yBAAyB,CACjC,GAAG,KAAK,SAAS,IAAI,uEAAuE,CAC7F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,IAAI,IAAI,6BAA6B,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,IAAI,CAAE,WAAiC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,IAAI,IAAI,wBAAwB,MAAM,GAAG,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,SAAS,EAAE,CAAC;gBAC5F,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,MAAM,qCAAqC,SAAS,EAAE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,CAAC,MAAsC,CAAC,GAAG,KAAK,CAAC;QACzD,CAAC;QACD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IAChI,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,wBAAwB,CAAC,KAAyB,EAAE,IAAY;IAC9E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;AACnG,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,yBAAyB,CAAC,wCAAwC,CAAC,CAAC;IAEzG,KAAK,CAAC,OAAO,CAAC,CAAC,GAAY,EAAE,KAAK,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,yBAAyB,KAAK,GAAG,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,IAAI,KAAK,iBAAiB;YAAE,OAAO;QAEvC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,qBAAqB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAExG,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;QACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAyB,CACjC,GAAG,KAAK,uBAAuB,SAAS,kDAAkD,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAuB,EAAE,SAAS,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ;gBAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;YAC1G,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;QACtC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACpD,IAAI,OAAO,UAAU,KAAK,QAAQ;gBAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,+BAA+B,CAAC,CAAC;YACjH,KAAK,CAAC,UAAU,GAAG,UAAU,CAAC;QAChC,CAAC;QACD,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnG,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,oEAAoE,CAAC,CAAC;YACpH,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAI,KAAkB,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AAE9D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;AACpF,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAiB7C;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IACrD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,yBAAyB,CAAC,wCAAwC,CAAC,CAAC;IAEzG,KAAK,CAAC,OAAO,CAAC,CAAC,GAAY,EAAE,KAAK,EAAE,EAAE;QACpC,MAAM,KAAK,GAAG,yBAAyB,KAAK,GAAG,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,IAAI,KAAK,oBAAoB;YAAE,OAAO;QAE1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACnF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,qBAAqB,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxG,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC,CAAC;QACnC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,qCAAqC,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAyB,CACjC,GAAG,KAAK,uBAAuB,SAAS,qDAAqD,CAC9F,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;eACxC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,gDAAgD,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,UAAU,GAAsC,EAAE,CAAC;QACzD,IAAI,cAAc,IAAI,GAAG,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;YACxC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;gBAChC,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;YACjF,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5D,IAAI,CAAE,KAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,wBAAwB,IAAI,0BAA0B,CAAC,CAAC;gBACtG,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;uBAChD,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7E,MAAM,IAAI,yBAAyB,CAAC,GAAG,KAAK,iBAAiB,IAAI,yCAAyC,CAAC,CAAC;gBAC9G,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAI,SAAsB,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE;YACrB,SAAS;YACT,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAI,KAAkB,CAAC,CAAC;YAC9C,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/canonical.d.ts

@@ -0,0 +1,47 @@
+/**
+ * JSON Canonicalization Scheme (RFC 8785).
+ *
+ * `canonicalize` turns a JSON value into its canonical text: object members
+ * sorted by the UTF-16 code units of their names, no insignificant
+ * whitespace, strings escaped as `JSON.stringify` escapes them and numbers in
+ * the ECMAScript `Number` format. Two values that differ only in member order,
+ * whitespace or number spelling canonicalise to the same text.
+ *
+ * The input must be I-JSON (RFC 7493). Anything without a single canonical
+ * form throws `CanonicalizationError` instead of being coerced or dropped:
+ * `NaN` and infinities; strings or member names with an unpaired surrogate;
+ * `undefined`, functions, symbols, bigints, sparse arrays and objects that
+ * are not plain objects (such as `Date` or `Map`, whose `toJSON` is not
+ * consulted); nesting deeper than `MAX_DEPTH`.
+ *
+ * The Python SDK implements the same rules in `grantex.canonical`; both are
+ * tested against the RFC 8785 test vectors and the shared fixtures in
+ * `spec/examples/canonicalization/`. Python additionally refuses integers
+ * whose digits are not the canonical form of a double (such as 2^53 + 1);
+ * a JavaScript number has already been rounded by the parser.
+ */
+/** Deepest nesting of arrays and objects accepted. */
+export declare const MAX_DEPTH = 64;
+/** The value has no RFC 8785 canonical form. */
+export declare class CanonicalizationError extends Error {
+    constructor(message: string);
+}
+/** Returns the RFC 8785 canonical JSON text of `value`. */
+export declare function canonicalize(value: unknown): string;
+/** Returns the RFC 8785 canonical JSON of `value` as UTF-8 bytes. */
+export declare function canonicalizeToBytes(value: unknown): Uint8Array;
+/** Serialises a finite number as `Number.prototype.toString` does (`-0` as `0`). */
+export declare function serializeNumber(value: number): string;
+/** A JSON text repeats a member name within one object. */
+export declare class DuplicateKeyError extends CanonicalizationError {
+    readonly key: string;
+    constructor(key: string);
+}
+/**
+ * Parses JSON text like `JSON.parse`, but throws `DuplicateKeyError` when an
+ * object repeats a member name (after unescaping), instead of silently keeping
+ * the last value. Use it wherever the raw text of a value to canonicalise is
+ * available.
+ */
+export declare function parseJsonRejectingDuplicates(text: string): unknown;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,sDAAsD;AACtD,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B,gDAAgD;AAChD,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAO,EAAE,MAAM,EAG1B;CACF;AAID,2DAA2D;AAC3D,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAInD;AAED,qEAAqE;AACrE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAE9D;AAED,oFAAoF;AACpF,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMrD;AA+DD,2DAA2D;AAC3D,qBAAa,iBAAkB,SAAQ,qBAAqB;IAC1D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,YAAY,GAAG,EAAE,MAAM,EAItB;CACF;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CA6BlE"}

package/dist/canonical.js

@@ -0,0 +1,163 @@
+/**
+ * JSON Canonicalization Scheme (RFC 8785).
+ *
+ * `canonicalize` turns a JSON value into its canonical text: object members
+ * sorted by the UTF-16 code units of their names, no insignificant
+ * whitespace, strings escaped as `JSON.stringify` escapes them and numbers in
+ * the ECMAScript `Number` format. Two values that differ only in member order,
+ * whitespace or number spelling canonicalise to the same text.
+ *
+ * The input must be I-JSON (RFC 7493). Anything without a single canonical
+ * form throws `CanonicalizationError` instead of being coerced or dropped:
+ * `NaN` and infinities; strings or member names with an unpaired surrogate;
+ * `undefined`, functions, symbols, bigints, sparse arrays and objects that
+ * are not plain objects (such as `Date` or `Map`, whose `toJSON` is not
+ * consulted); nesting deeper than `MAX_DEPTH`.
+ *
+ * The Python SDK implements the same rules in `grantex.canonical`; both are
+ * tested against the RFC 8785 test vectors and the shared fixtures in
+ * `spec/examples/canonicalization/`. Python additionally refuses integers
+ * whose digits are not the canonical form of a double (such as 2^53 + 1);
+ * a JavaScript number has already been rounded by the parser.
+ */
+/** Deepest nesting of arrays and objects accepted. */
+export const MAX_DEPTH = 64;
+/** The value has no RFC 8785 canonical form. */
+export class CanonicalizationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CanonicalizationError';
+    }
+}
+const LONE_SURROGATE = /[\uD800-\uDFFF]/u;
+/** Returns the RFC 8785 canonical JSON text of `value`. */
+export function canonicalize(value) {
+    const out = [];
+    write(value, out, 0);
+    return out.join('');
+}
+/** Returns the RFC 8785 canonical JSON of `value` as UTF-8 bytes. */
+export function canonicalizeToBytes(value) {
+    return new TextEncoder().encode(canonicalize(value));
+}
+/** Serialises a finite number as `Number.prototype.toString` does (`-0` as `0`). */
+export function serializeNumber(value) {
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        throw new CanonicalizationError('NaN and infinite numbers have no JSON form');
+    }
+    // JSON.stringify applies Number::toString and writes -0 as 0.
+    return JSON.stringify(value);
+}
+function write(value, out, depth) {
+    if (value === null) {
+        out.push('null');
+        return;
+    }
+    switch (typeof value) {
+        case 'boolean':
+            out.push(value ? 'true' : 'false');
+            return;
+        case 'number':
+            out.push(serializeNumber(value));
+            return;
+        case 'string':
+            out.push(serializeString(value));
+            return;
+        case 'object':
+            break;
+        default:
+            throw new CanonicalizationError(`value of type ${typeof value} has no JSON form`);
+    }
+    if (depth >= MAX_DEPTH) {
+        throw new CanonicalizationError(`nesting deeper than ${MAX_DEPTH} levels`);
+    }
+    if (Array.isArray(value)) {
+        out.push('[');
+        for (let index = 0; index < value.length; index++) {
+            if (!Object.prototype.hasOwnProperty.call(value, index)) {
+                throw new CanonicalizationError('sparse arrays have no JSON form');
+            }
+            if (index > 0)
+                out.push(',');
+            write(value[index], out, depth + 1);
+        }
+        out.push(']');
+        return;
+    }
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null) {
+        throw new CanonicalizationError('only plain objects have a JSON form');
+    }
+    const record = value;
+    // Array.prototype.sort without a comparator orders strings by UTF-16 code units.
+    const keys = Object.keys(record).sort();
+    out.push('{');
+    keys.forEach((key, index) => {
+        if (index > 0)
+            out.push(',');
+        out.push(serializeString(key));
+        out.push(':');
+        write(record[key], out, depth + 1);
+    });
+    out.push('}');
+}
+function serializeString(value) {
+    if (LONE_SURROGATE.test(value)) {
+        throw new CanonicalizationError('string contains an unpaired surrogate');
+    }
+    // For well-formed strings JSON.stringify escapes exactly as RFC 8785 requires:
+    // \b \t \n \f \r \" \\ as two-character escapes, other C0 controls as \u00xx.
+    return JSON.stringify(value);
+}
+/** A JSON text repeats a member name within one object. */
+export class DuplicateKeyError extends CanonicalizationError {
+    key;
+    constructor(key) {
+        super(`duplicate member name ${JSON.stringify(key)}`);
+        this.name = 'DuplicateKeyError';
+        this.key = key;
+    }
+}
+/**
+ * Parses JSON text like `JSON.parse`, but throws `DuplicateKeyError` when an
+ * object repeats a member name (after unescaping), instead of silently keeping
+ * the last value. Use it wherever the raw text of a value to canonicalise is
+ * available.
+ */
+export function parseJsonRejectingDuplicates(text) {
+    const value = JSON.parse(text);
+    const stack = [];
+    let i = 0;
+    while (i < text.length) {
+        const ch = text[i];
+        if (ch === '"') {
+            let j = i + 1;
+            while (j < text.length && text[j] !== '"')
+                j += text[j] === '\\' ? 2 : 1;
+            const top = stack[stack.length - 1];
+            if (top?.keys && top.expectKey) {
+                const key = JSON.parse(text.slice(i, j + 1));
+                if (top.keys.has(key))
+                    throw new DuplicateKeyError(key);
+                top.keys.add(key);
+                top.expectKey = false;
+            }
+            i = j + 1;
+            continue;
+        }
+        if (ch === '{')
+            stack.push({ keys: new Set(), expectKey: true });
+        else if (ch === '[')
+            stack.push({ keys: null, expectKey: false });
+        else if (ch === '}' || ch === ']')
+            stack.pop();
+        else if (ch === ',') {
+            const top = stack[stack.length - 1];
+            if (top?.keys)
+                top.expectKey = true;
+        }
+        i += 1;
+    }
+    return value;
+}
+//# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAE5B,gDAAgD;AAChD,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAED,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAE1C,2DAA2D;AAC3D,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACrB,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,qBAAqB,CAAC,4CAA4C,CAAC,CAAC;IAChF,CAAC;IACD,8DAA8D;IAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,GAAa,EAAE,KAAa;IACzD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IACD,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,SAAS;YACZ,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO;QACT,KAAK,QAAQ;YACX,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,OAAO;QACT,KAAK,QAAQ;YACX,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,OAAO;QACT,KAAK,QAAQ;YACX,MAAM;QACR;YACE,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,OAAO,KAAK,mBAAmB,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,qBAAqB,CAAC,uBAAuB,SAAS,SAAS,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,qBAAqB,CAAC,iCAAiC,CAAC,CAAC;YACrE,CAAC;YACD,IAAI,KAAK,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAY,CAAC;IAC1D,IAAI,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACzD,MAAM,IAAI,qBAAqB,CAAC,qCAAqC,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,iFAAiF;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACd,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1B,IAAI,KAAK,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,qBAAqB,CAAC,uCAAuC,CAAC,CAAC;IAC3E,CAAC;IACD,+EAA+E;IAC/E,8EAA8E;IAC9E,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,2DAA2D;AAC3D,MAAM,OAAO,iBAAkB,SAAQ,qBAAqB;IACjD,GAAG,CAAS;IACrB,YAAY,GAAW;QACrB,KAAK,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAuD,EAAE,CAAC;IACrE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzE,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,GAAG,EAAE,IAAI,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAW,CAAC;gBACvD,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;YACxB,CAAC;YACD,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACV,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;aAC5D,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;aAC7D,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,CAAC,GAAG,EAAE,CAAC;aAC1C,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACpB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,GAAG,EAAE,IAAI;gBAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACtC,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/caps/index.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Call caps and cost-unit budgets for tool calls.
+ *
+ * `CapsMeter` reserves units against every applicable counter atomically,
+ * before the call that incurs cost. Backends: `RedisCapsBackend` (Lua script,
+ * tenant-scoped keys; preferred), `PostgresCapsBackend` (row locks and upserts,
+ * for deployments without Redis) and `InMemoryCapsBackend` (**tests only**).
+ *
+ * There is no automatic failover between backends: two stores would keep two
+ * sets of counters and concurrent calls could exceed a cap. If the configured
+ * backend is unavailable the meter throws `MeterUnavailableError` and
+ * `enforce()` denies. See docs/concepts/caps-and-metering.md.
+ */
+export { CAPS_MODES, CAP_ERROR_CODE, CapExceededError, CapsConfigurationError, CapsMeter, MAX_COUNT, MeterUnavailableError, WINDOW_MS, counterKey, resolveLimits, tenantHash, type CapLimit, type CapWindow, type CapsMode, type CapsBackend, type CounterUsage, type Reservation, type ResolvedCapLimit, } from './meter.js';
+export { InMemoryCapsBackend } from './memory.js';
+export { REFUND_SCRIPT, RESERVE_SCRIPT, USAGE_SCRIPT, RedisCapsBackend, ioredisRunner, type RedisScriptRunner, } from './redis.js';
+export { CAPS_SCHEMA_SQL, PostgresCapsBackend, type PgClientLike, type PgPoolLike } from './postgres.js';
+export { CASE_REQUIRED, INVALID_CASE_ID, INVALID_COST_COMPONENT, MALFORMED_GRANT_CAPS, buildCapLimits, counterId, parseGrantCaps, type BuildCapLimitsOptions, } from './limits.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/caps/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/caps/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,SAAS,EACT,SAAS,EACT,qBAAqB,EACrB,SAAS,EACT,UAAU,EACV,aAAa,EACb,UAAU,EACV,KAAK,QAAQ,EACb,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,gBAAgB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,aAAa,EACb,KAAK,iBAAiB,GACvB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AACzG,OAAO,EACL,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,SAAS,EACT,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,aAAa,CAAC"}

package/dist/caps/index.js

@@ -0,0 +1,19 @@
+/**
+ * Call caps and cost-unit budgets for tool calls.
+ *
+ * `CapsMeter` reserves units against every applicable counter atomically,
+ * before the call that incurs cost. Backends: `RedisCapsBackend` (Lua script,
+ * tenant-scoped keys; preferred), `PostgresCapsBackend` (row locks and upserts,
+ * for deployments without Redis) and `InMemoryCapsBackend` (**tests only**).
+ *
+ * There is no automatic failover between backends: two stores would keep two
+ * sets of counters and concurrent calls could exceed a cap. If the configured
+ * backend is unavailable the meter throws `MeterUnavailableError` and
+ * `enforce()` denies. See docs/concepts/caps-and-metering.md.
+ */
+export { CAPS_MODES, CAP_ERROR_CODE, CapExceededError, CapsConfigurationError, CapsMeter, MAX_COUNT, MeterUnavailableError, WINDOW_MS, counterKey, resolveLimits, tenantHash, } from './meter.js';
+export { InMemoryCapsBackend } from './memory.js';
+export { REFUND_SCRIPT, RESERVE_SCRIPT, USAGE_SCRIPT, RedisCapsBackend, ioredisRunner, } from './redis.js';
+export { CAPS_SCHEMA_SQL, PostgresCapsBackend } from './postgres.js';
+export { CASE_REQUIRED, INVALID_CASE_ID, INVALID_COST_COMPONENT, MALFORMED_GRANT_CAPS, buildCapLimits, counterId, parseGrantCaps, } from './limits.js';
+//# sourceMappingURL=index.js.map

package/dist/caps/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/caps/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,sBAAsB,EACtB,SAAS,EACT,SAAS,EACT,qBAAqB,EACrB,SAAS,EACT,UAAU,EACV,aAAa,EACb,UAAU,GAQX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EACL,aAAa,EACb,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,aAAa,GAEd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAsC,MAAM,eAAe,CAAC;AACzG,OAAO,EACL,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,SAAS,EACT,cAAc,GAEf,MAAM,aAAa,CAAC"}

package/dist/caps/limits.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Derive the counters a tool call is metered against. Mirrors the Python SDK's
+ * `grantex.caps._limits`.
+ *
+ * - The **manifest** (`caps` on the tool) declares tenant-wide counters per tool.
+ * - The **grant** (`caps` in its `urn:grantex:tools:v1` entry) declares counters
+ *   for that grant only: per tool (`{"verify_business": {"per_hour": 50}}`)
+ *   and a connector cost-unit budget (`{"cost_units": {"per_day": 5000}}`).
+ *
+ * Every declared cap is its own counter and all of them must hold. A call's
+ * cost is the sum of the manifest `cost_units` for the components it incurs
+ * (all declared components unless the caller names them).
+ */
+import type { ToolSpec } from '../manifest.js';
+import { type CapLimit, type CapWindow } from './meter.js';
+export declare const CASE_REQUIRED = "case_required";
+export declare const INVALID_CASE_ID = "invalid_case_id";
+export declare const INVALID_COST_COMPONENT = "invalid_cost_component";
+export declare const MALFORMED_GRANT_CAPS = "malformed_grant_caps";
+/** Unambiguous counter identity; identical to the Python SDK's `counter_id`. */
+export declare function counterId(...parts: string[]): string;
+/** Validate a grant entry's `caps`; `cost_units` is the connector budget. */
+export declare function parseGrantCaps(caps: unknown): Map<string, Partial<Record<CapWindow, number>>>;
+export interface BuildCapLimitsOptions {
+    connector: string;
+    tool: string;
+    spec: ToolSpec;
+    grantId: string;
+    grantCaps?: unknown;
+    caseId?: string;
+    costComponents?: readonly string[];
+}
+/**
+ * The limits for one call of `tool`.
+ *
+ * @throws {CapsConfigurationError} with `subReason` `case_required`,
+ *   `invalid_case_id`, `invalid_cost_component` or `malformed_grant_caps`.
+ */
+export declare function buildCapLimits(options: BuildCapLimitsOptions): CapLimit[];
+//# sourceMappingURL=limits.d.ts.map

package/dist/caps/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/caps/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAqC,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,YAAY,CAAC;AAK9F,eAAO,MAAM,aAAa,kBAAkB,CAAC;AAC7C,eAAO,MAAM,eAAe,oBAAoB,CAAC;AACjD,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAC/D,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAE3D,gFAAgF;AAChF,wBAAgB,SAAS,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAEpD;AAuBD,6EAA6E;AAC7E,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAM7F;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,QAAQ,EAAE,CAuDzE"}