@heyanon-arp/cli 0.0.12 → 0.0.13

package/dist/cli.js

@@ -504,7 +504,11 @@ var init_api = __esm({
           query,
           signal
         );
-        return (0, import_shield.guardInboundFieldsBatch)(rows, ["scopeSummary", "title", "brief", "acceptanceCriteria"], { selfDid: signer.did });
+        return Promise.all(
+          rows.map(
+            (row) => signer.did === row.offererDid ? row : (0, import_shield.guardInboundFields)(row, ["scopeSummary", "title", "brief", "acceptanceCriteria"], { selfDid: signer.did }).then((r) => r.event)
+          )
+        );
       }
       /**
        * Signed `GET /v1/relationships/:id/work`. One row per
@@ -521,7 +525,14 @@ var init_api = __esm({
           signer,
           query
         );
-        return (0, import_shield.guardInboundFieldsBatch)(rows, ["responseOutput", "requestParams"], { selfDid: signer.did });
+        return Promise.all(
+          rows.map((row) => {
+            const fields = [];
+            if (signer.did !== row.callerDid) fields.push("requestParams");
+            if (signer.did !== row.payeeDid) fields.push("responseOutput");
+            return fields.length === 0 ? row : (0, import_shield.guardInboundFields)(row, fields, { selfDid: signer.did }).then((r) => r.event);
+          })
+        );
       }
       /**
        * Signed `GET /v1/relationships/:id/receipts`. One row per
@@ -3489,6 +3500,11 @@ function settlementKeyFromDidDoc(didDoc, buyerDid) {
   return mb.startsWith("z") ? mb.slice(1) : mb;
 }
 function projectDelegationRowForHash(d) {
+  if ((0, import_shield2.isShieldRedacted)(d.scopeSummary)) {
+    throw new Error(
+      `settlement: delegation ${d.delegationId} has shield-withheld scope (flagged by content-security). Cannot derive condition_hash over withheld content \u2014 do not settle; review and dispute.`
+    );
+  }
   const out = {
     delegationId: d.delegationId,
     scopeSummary: d.scopeSummary,
@@ -3896,10 +3912,11 @@ async function autoSignAndDeliverPayeeSig(opts, cmdName = "receipt propose") {
     serverTimestamp: result.serverTimestamp
   };
 }
-var import_sdk10, import_utils3, import_web33, import_chalk17, NATIVE_SOL_MINT2, SETTLEMENT_MIN_EXPIRY_HEADROOM_SECS, SETTLEMENT_REFRESH_HEADROOM_SECS, LOCK_READ_NOT_VISIBLE_RETRIES, LOCK_READ_RETRY_DELAY_MS;
+var import_sdk10, import_shield2, import_utils3, import_web33, import_chalk17, NATIVE_SOL_MINT2, SETTLEMENT_MIN_EXPIRY_HEADROOM_SECS, SETTLEMENT_REFRESH_HEADROOM_SECS, LOCK_READ_NOT_VISIBLE_RETRIES, LOCK_READ_RETRY_DELAY_MS;
 var init_settlement = __esm({
   "src/commands/settlement.ts"() {
     import_sdk10 = require("@heyanon-arp/sdk");
+    import_shield2 = require("@heyanon-arp/shield");
     import_utils3 = require("@noble/hashes/utils");
     import_web33 = require("@solana/web3.js");
     import_chalk17 = __toESM(require("chalk"));
@@ -4263,6 +4280,11 @@ async function computeWorkLogHashes(api, sender, relationshipId, delegationId, r
       `receipt propose --auto-hashes: work-log row ${requestId} is in state '${workLog.state}', not 'responded'. The payee must \`work respond\` before a receipt can be proposed.`
     );
   }
+  if ((0, import_shield3.isShieldRedacted)(workLog.requestParams) || (0, import_shield3.isShieldRedacted)(workLog.responseOutput)) {
+    throw new Error(
+      `receipt propose --auto-hashes: work-log row ${requestId} has shield-withheld content (the counterparty's request or response was flagged by content-security). Cannot reconstruct canonical hashes over withheld content \u2014 do not settle; review and dispute. See ~/.heyshield/receipts.jsonl.`
+    );
+  }
   const requestBody = {
     type: "work_request",
     content: { delegation_id: workLog.delegationId, request_id: workLog.requestId, params: workLog.requestParams }
@@ -4965,11 +4987,12 @@ function requireDid2(cmdName, did, label) {
     throw new Error(`${cmdName}: ${label} must look like 'did:arp:...' (got '${did}')`);
   }
 }
-var import_node_fs7, import_sdk11, import_chalk18, POST_COMMIT_ERROR_CODES2, VERDICT_VALUES, SHA256_RE;
+var import_node_fs7, import_sdk11, import_shield3, import_chalk18, POST_COMMIT_ERROR_CODES2, VERDICT_VALUES, SHA256_RE;
 var init_receipt = __esm({
   "src/commands/receipt.ts"() {
     import_node_fs7 = require("fs");
     import_sdk11 = require("@heyanon-arp/sdk");
+    import_shield3 = require("@heyanon-arp/shield");
     import_chalk18 = __toESM(require("chalk"));
     init_api();
     init_format();
@@ -5080,14 +5103,14 @@ var init_receipt = __esm({
 });
 
 // src/cli.ts
-var import_shield2 = require("@heyanon-arp/shield");
+var import_shield4 = require("@heyanon-arp/shield");
 var import_commander = require("commander");
 var import_simple_update_notifier = __toESM(require("simple-update-notifier"));
 
 // package.json
 var package_default = {
   name: "@heyanon-arp/cli",
-  version: "0.0.12",
+  version: "0.0.13",
   description: "Command-line client for the Agent Relationship Protocol \u2014 register agents, sign envelopes, run escrowed work cycles on Solana.",
   license: "MIT",
   keywords: ["arp", "agent-relationship-protocol", "did", "solana", "escrow", "ed25519", "agents", "a2a", "cli"],
@@ -8645,7 +8668,7 @@ async function main() {
   registerReceiptsCommand(program);
   registerWalletCommands(program);
   registerSettlementCommands(program);
-  (0, import_shield2.installMiddleware)(program);
+  (0, import_shield4.installMiddleware)(program);
   try {
     await program.parseAsync(process.argv);
   } catch (err) {