@heyanon-arp/sdk 0.0.38 → 0.0.40

package/dist/index.js

@@ -217,7 +217,13 @@ function verifyKeyLinkAttestation(attestation) {
     return false;
   }
   if (identityPubkey.length !== 32) return false;
-  return verify2(sigBytes, canonicalBytes(payload), identityPubkey);
+  let signingBytes;
+  try {
+    signingBytes = canonicalBytes(payload);
+  } catch {
+    return false;
+  }
+  return verify2(sigBytes, signingBytes, identityPubkey);
 }
 function signedMessageHash(envelope) {
   const input = envelope.attachments === void 0 ? { protected: envelope.protected, body: envelope.body } : { protected: envelope.protected, body: envelope.body, attachments: envelope.attachments };
@@ -407,6 +413,7 @@ var DELEGATION_STATES = [
   "dispute_resolved"
 ];
 var DELEGATION_ACTIVE_STATES = ["offered", "accepted", "pending_lock_finalization", "locked"];
+var DELEGATION_INFLIGHT_STATES = [...DELEGATION_ACTIVE_STATES, "disputing"];
 function isDelegationState(v) {
   return typeof v === "string" && DELEGATION_STATES.includes(v);
 }
@@ -1213,6 +1220,7 @@ exports.DECIMAL_AMOUNT_REGEX = DECIMAL_AMOUNT_REGEX;
 exports.DECLINE_REASONS = DECLINE_REASONS;
 exports.DELEGATION_ACTIONS = DELEGATION_ACTIONS;
 exports.DELEGATION_ACTIVE_STATES = DELEGATION_ACTIVE_STATES;
+exports.DELEGATION_INFLIGHT_STATES = DELEGATION_INFLIGHT_STATES;
 exports.DELEGATION_OFFER_REJECTION_CODES = DELEGATION_OFFER_REJECTION_CODES;
 exports.DELEGATION_STATES = DELEGATION_STATES;
 exports.DEVNET_MINTS = DEVNET_MINTS;

package/dist/index.mjs

@@ -192,7 +192,13 @@ function verifyKeyLinkAttestation(attestation) {
     return false;
   }
   if (identityPubkey.length !== 32) return false;
-  return verify2(sigBytes, canonicalBytes(payload), identityPubkey);
+  let signingBytes;
+  try {
+    signingBytes = canonicalBytes(payload);
+  } catch {
+    return false;
+  }
+  return verify2(sigBytes, signingBytes, identityPubkey);
 }
 function signedMessageHash(envelope) {
   const input = envelope.attachments === void 0 ? { protected: envelope.protected, body: envelope.body } : { protected: envelope.protected, body: envelope.body, attachments: envelope.attachments };
@@ -382,6 +388,7 @@ var DELEGATION_STATES = [
   "dispute_resolved"
 ];
 var DELEGATION_ACTIVE_STATES = ["offered", "accepted", "pending_lock_finalization", "locked"];
+var DELEGATION_INFLIGHT_STATES = [...DELEGATION_ACTIVE_STATES, "disputing"];
 function isDelegationState(v) {
   return typeof v === "string" && DELEGATION_STATES.includes(v);
 }
@@ -1162,4 +1169,4 @@ var CliAuthTokenErrorCodes = {
   REQUIRED: "AUTH_TOKEN_REQUIRED"
 };
 
-export { AGENT_BADGES, AGENT_NAME_REGEX, AGENT_TAG_REGEX, ASSET_DECIMALS_MAX, ASSET_DECIMALS_MIN, ASSET_SYMBOL_MAX_LEN, ASSET_SYMBOL_MIN_LEN, ASSET_WHITELIST, ASSOCIATED_TOKEN_PROGRAM_ID, ASSOCIATED_TOKEN_PROGRAM_ID_BASE58, AgentBadges, BODY_TYPES, BodyTypes, CAIP19_REGEX, CLI_AUTH_TOKEN_ERROR_CODES, CLI_LOGIN_SESSION_STATES, CLI_LOGIN_SESSION_STORED_STATES, CREATE_LOCK_DISCRIMINATOR, CREATE_LOCK_NATIVE_DISCRIMINATOR, CURRENT_PROTOCOL_VERSION, CliAuthTokenErrorCodes, CliLoginSessionStates, DECIMAL_AMOUNT_REGEX, DECLINE_REASONS, DELEGATION_ACTIONS, DELEGATION_ACTIVE_STATES, DELEGATION_OFFER_REJECTION_CODES, DELEGATION_STATES, DEVNET_MINTS, DID_ARP_REGEX, DISCOVERY_SORTS, DelegationActions, DelegationOfferRejectionCodes, DelegationStates, DiscoverySorts, ED25519_SIG_PREFIX2 as ED25519_SIG_PREFIX, ESCROW_PDA_SEEDS, ESCROW_PROGRAM_ID_BASE58, ESCROW_RELEASE_METHODS, EscrowReleaseMethods, HANDSHAKE_DECISIONS, HandshakeDecisions, INBOX_BLOCK_SCOPES, InboxBlockScopes, LIVE_RELATIONSHIP_STATE_NAMES, LOCK_ACCOUNT_DISCRIMINATOR, LOCK_ACCOUNT_SIZE, LOCK_STATE_NAMES, LOCK_TERMINAL_STATES, LockStates, LockTerminalStates, MAINNET_MINTS, MAX_CLOCK_SKEW_SECONDS, MAX_ENVELOPE_TTL_SECONDS, NATIVE_SOL_MINT, NATIVE_SOL_MINT_BASE58, NO_ARG_LIFECYCLE_INSTRUCTIONS, OWNER_SIGNING_METHODS, POST_COMMIT_ERROR_CODES, POST_COMMIT_ERROR_CODE_PREFIXES, PROTOCOL_VERSIONS, Purpose, READ_MODEL_STATUSES, RECEIPT_VERDICTS, RELATIONSHIP_STATE_NAMES, RESERVED_NAMES, ReadModelStatuses, ReceiptVerdicts, RelationshipStates, SHA256_HEX_RE, SLIP44_SOLANA, SOLANA_CLUSTER_IDS, SPL_TOKEN_PROGRAM_ID, SPL_TOKEN_PROGRAM_ID_BASE58, SYSTEM_PROGRAM_ID_BASE58, TOKEN_2022_PROGRAM_ID_BASE58, WELL_KNOWN_ASSETS, WELL_KNOWN_ASSET_KEYS, WORK_LOG_STATES, WorkLogStates, base58btcDecode, base58btcEncode, buildAcceptLockIx, buildCancelLockIx, buildClaimExpiredWorkIx, buildClaimWorkPaymentIx, buildCloseDisputeIx, buildCreateLockIx, buildCreateLockIxData, buildLifecycleIxData, buildOpenDisputeIx, buildResolveDisputeIx, buildResolveDisputeIxData, buildSubmitWorkIx, bytes16ToDelegationId, canonicalBytes, canonicalJson, canonicalSha256Hex, decodeLockAccount, delegationIdToBytes16, deriveAta, deriveCollateralConfigPda, deriveConfigPda, deriveDelegationConditionHash, deriveDisputeResolutionPda, deriveEscrowPda, deriveEventAuthorityPda, deriveLockId, deriveLockPda, deriveOperatorAuthPda, deriveStakeVaultPda, expiresAt, fetchLockAccount, findAssetByAssetId, findAssetMetaByMint, findFirstChainDivergence, formatDid, generateKeyPair, getPublicKey2 as getPublicKey, instructionDiscriminator, isAgentBadge, isAssetIdentifier, isBodyType, isCliLoginSessionWireState, isDecimalAmountString, isDeclineReason, isDelegationAction, isDelegationState, isEscrowReleaseMethod, isHandshakeDecision, isPostCommitErrorCode, isReadModelStatus, isReceiptVerdict, isRelationshipState, isReservedName, isSha256Hex, isValidAgentName, isValidDid, isWhitelistedAssetId, isWorkLogState, normalizeName, parseCaip19SolanaAssetId, parseDid, pollUntil, resolveAsset, rfc3339, senderNonce, serverEventHash, sign2 as sign, signChallenge, signEnvelope, signKeyLinkAttestation, signedMessageHash, uuidV4, verify2 as verify, verifyChallenge, verifyEnvelope, verifyKeyLinkAttestation };
+export { AGENT_BADGES, AGENT_NAME_REGEX, AGENT_TAG_REGEX, ASSET_DECIMALS_MAX, ASSET_DECIMALS_MIN, ASSET_SYMBOL_MAX_LEN, ASSET_SYMBOL_MIN_LEN, ASSET_WHITELIST, ASSOCIATED_TOKEN_PROGRAM_ID, ASSOCIATED_TOKEN_PROGRAM_ID_BASE58, AgentBadges, BODY_TYPES, BodyTypes, CAIP19_REGEX, CLI_AUTH_TOKEN_ERROR_CODES, CLI_LOGIN_SESSION_STATES, CLI_LOGIN_SESSION_STORED_STATES, CREATE_LOCK_DISCRIMINATOR, CREATE_LOCK_NATIVE_DISCRIMINATOR, CURRENT_PROTOCOL_VERSION, CliAuthTokenErrorCodes, CliLoginSessionStates, DECIMAL_AMOUNT_REGEX, DECLINE_REASONS, DELEGATION_ACTIONS, DELEGATION_ACTIVE_STATES, DELEGATION_INFLIGHT_STATES, DELEGATION_OFFER_REJECTION_CODES, DELEGATION_STATES, DEVNET_MINTS, DID_ARP_REGEX, DISCOVERY_SORTS, DelegationActions, DelegationOfferRejectionCodes, DelegationStates, DiscoverySorts, ED25519_SIG_PREFIX2 as ED25519_SIG_PREFIX, ESCROW_PDA_SEEDS, ESCROW_PROGRAM_ID_BASE58, ESCROW_RELEASE_METHODS, EscrowReleaseMethods, HANDSHAKE_DECISIONS, HandshakeDecisions, INBOX_BLOCK_SCOPES, InboxBlockScopes, LIVE_RELATIONSHIP_STATE_NAMES, LOCK_ACCOUNT_DISCRIMINATOR, LOCK_ACCOUNT_SIZE, LOCK_STATE_NAMES, LOCK_TERMINAL_STATES, LockStates, LockTerminalStates, MAINNET_MINTS, MAX_CLOCK_SKEW_SECONDS, MAX_ENVELOPE_TTL_SECONDS, NATIVE_SOL_MINT, NATIVE_SOL_MINT_BASE58, NO_ARG_LIFECYCLE_INSTRUCTIONS, OWNER_SIGNING_METHODS, POST_COMMIT_ERROR_CODES, POST_COMMIT_ERROR_CODE_PREFIXES, PROTOCOL_VERSIONS, Purpose, READ_MODEL_STATUSES, RECEIPT_VERDICTS, RELATIONSHIP_STATE_NAMES, RESERVED_NAMES, ReadModelStatuses, ReceiptVerdicts, RelationshipStates, SHA256_HEX_RE, SLIP44_SOLANA, SOLANA_CLUSTER_IDS, SPL_TOKEN_PROGRAM_ID, SPL_TOKEN_PROGRAM_ID_BASE58, SYSTEM_PROGRAM_ID_BASE58, TOKEN_2022_PROGRAM_ID_BASE58, WELL_KNOWN_ASSETS, WELL_KNOWN_ASSET_KEYS, WORK_LOG_STATES, WorkLogStates, base58btcDecode, base58btcEncode, buildAcceptLockIx, buildCancelLockIx, buildClaimExpiredWorkIx, buildClaimWorkPaymentIx, buildCloseDisputeIx, buildCreateLockIx, buildCreateLockIxData, buildLifecycleIxData, buildOpenDisputeIx, buildResolveDisputeIx, buildResolveDisputeIxData, buildSubmitWorkIx, bytes16ToDelegationId, canonicalBytes, canonicalJson, canonicalSha256Hex, decodeLockAccount, delegationIdToBytes16, deriveAta, deriveCollateralConfigPda, deriveConfigPda, deriveDelegationConditionHash, deriveDisputeResolutionPda, deriveEscrowPda, deriveEventAuthorityPda, deriveLockId, deriveLockPda, deriveOperatorAuthPda, deriveStakeVaultPda, expiresAt, fetchLockAccount, findAssetByAssetId, findAssetMetaByMint, findFirstChainDivergence, formatDid, generateKeyPair, getPublicKey2 as getPublicKey, instructionDiscriminator, isAgentBadge, isAssetIdentifier, isBodyType, isCliLoginSessionWireState, isDecimalAmountString, isDeclineReason, isDelegationAction, isDelegationState, isEscrowReleaseMethod, isHandshakeDecision, isPostCommitErrorCode, isReadModelStatus, isReceiptVerdict, isRelationshipState, isReservedName, isSha256Hex, isValidAgentName, isValidDid, isWhitelistedAssetId, isWorkLogState, normalizeName, parseCaip19SolanaAssetId, parseDid, pollUntil, resolveAsset, rfc3339, senderNonce, serverEventHash, sign2 as sign, signChallenge, signEnvelope, signKeyLinkAttestation, signedMessageHash, uuidV4, verify2 as verify, verifyChallenge, verifyEnvelope, verifyKeyLinkAttestation };

package/dist/types/agent.d.ts

@@ -68,8 +68,8 @@ export interface AgentRegisteredResponse {
 }
 /**
  * Public view of an ARP agent — signed reads (`GET /v1/agents/:did`)
- * and the profile `PATCH` response. Owner-only material (raw scrypt,
- * encrypted secrets) never appears here.
+ * and the profile `PATCH` response. Owner-only material (raw key
+ * material, encrypted secrets) never appears here.
  */
 export interface AgentPublic {
     did: string;

package/dist/types/delegation.d.ts

@@ -13,12 +13,27 @@
 export declare const DELEGATION_STATES: readonly ["offered", "accepted", "pending_lock_finalization", "locked", "disputing", "completed", "declined", "canceled", "failed", "refunded", "dispute_resolved"];
 export type DelegationState = (typeof DELEGATION_STATES)[number];
 /**
- * Non-terminal "the cycle is still live" subset — offered through
- * locked. Used for worker capacity counting and the CLI's active-cycle
- * view. Declared `satisfies readonly DelegationState[]` so it can never
- * name a state that isn't in `DELEGATION_STATES`.
+ * Happy-path "forward-progress" live subset — offered through locked.
+ * Used by the CLI's active-cycle view (`pickLatestLive` in `status`) to
+ * pick the delegation a relationship is currently advancing. Does NOT
+ * include `disputing` (a dispute is in-flight but off the happy path) —
+ * for "is this still occupying a slot / not yet terminal" use
+ * {@link DELEGATION_INFLIGHT_STATES}. Declared `satisfies readonly
+ * DelegationState[]` so it can never name a state outside
+ * `DELEGATION_STATES`.
  */
 export declare const DELEGATION_ACTIVE_STATES: readonly ["offered", "accepted", "pending_lock_finalization", "locked"];
+/**
+ * In-flight (non-terminal) subset — every state that is NOT a terminal
+ * outcome (completed / declined / canceled / failed / refunded /
+ * dispute_resolved). It is {@link DELEGATION_ACTIVE_STATES} plus
+ * `disputing`, derived from it so the two can never drift. This is the
+ * canonical "occupies a worker capacity slot" set: it backs the
+ * `maxActiveDelegations` capacity gate AND the worker active-tasks read
+ * (`GET /v1/agents/:did/active-delegations`), so a disputing delegation
+ * still counts against capacity and still shows up as a live task.
+ */
+export declare const DELEGATION_INFLIGHT_STATES: readonly ["offered", "accepted", "pending_lock_finalization", "locked", "disputing"];
 export declare function isDelegationState(v: unknown): v is DelegationState;
 /**
  * Named-member accessor for the delegation FSM — lets consumers write

package/dist/types/index.d.ts

@@ -3,7 +3,7 @@ export { SHA256_HEX_RE, isSha256Hex, ED25519_SIG_PREFIX, PROTOCOL_VERSIONS, CURR
 export type { HandshakeBody, HandshakeContent, HandshakeResponseBody, HandshakeResponseContent, HandshakeDecision, DelegationBody, DelegationContent, DelegationAction, WorkRequestBody, WorkRequestContent, WorkResponseBody, WorkResponseContent, ReceiptBody, ReceiptContent, ReceiptVerdict, AnyBody, BodyType, DeclineReason, AssetIdentifier, } from './body';
 export { DECLINE_REASONS, isDeclineReason, HANDSHAKE_DECISIONS, HandshakeDecisions, isHandshakeDecision, DELEGATION_ACTIONS, DelegationActions, isDelegationAction, RECEIPT_VERDICTS, ReceiptVerdicts, isReceiptVerdict, BODY_TYPES, BodyTypes, isBodyType, } from './body';
 export type { DelegationState } from './delegation';
-export { DELEGATION_STATES, DELEGATION_ACTIVE_STATES, DelegationStates, isDelegationState } from './delegation';
+export { DELEGATION_STATES, DELEGATION_ACTIVE_STATES, DELEGATION_INFLIGHT_STATES, DelegationStates, isDelegationState } from './delegation';
 export type { RelationshipState } from './relationship';
 export { RELATIONSHIP_STATE_NAMES, LIVE_RELATIONSHIP_STATE_NAMES, RelationshipStates, isRelationshipState } from './relationship';
 export type { WorkLogState } from './work-log';
@@ -16,7 +16,7 @@ export type { InboxBlockScope, InboxBlock, BlockInboxBody } from './inbox';
 export { INBOX_BLOCK_SCOPES, InboxBlockScopes } from './inbox';
 export type { CliSessionCreated, CliTokenIssued, CliWhoami, MyAgentSummary, CliLoginSessionStoredState, CliLoginSessionWireState, } from './cli-auth';
 export { CLI_LOGIN_SESSION_STORED_STATES, CLI_LOGIN_SESSION_STATES, CliLoginSessionStates, isCliLoginSessionWireState } from './cli-auth';
-export type { AssetIdentifierWire, DelegationPublic, DisputeResolutionPublic, ReceiptPublic, RelationshipPublic, WorkLogPublic, EventPublic, IngestResult, SenderSequenceResponse, InboxUnblockResult, ListRelationshipsQuery, ListInboxQuery, ListEventsQuery, ListDelegationsQuery, ListWorkLogsQuery, ListReceiptsQuery, } from './read-model';
+export type { AssetIdentifierWire, DelegationPublic, DisputeResolutionPublic, ReceiptPublic, RelationshipPublic, WorkLogPublic, EventPublic, IngestResult, SenderSequenceResponse, InboxUnblockResult, ListRelationshipsQuery, ListInboxQuery, ListEventsQuery, ListDelegationsQuery, ListActiveDelegationsQuery, ListWorkLogsQuery, ListReceiptsQuery, } from './read-model';
 export type { AcceptPrefs, AcceptCurrency, AgentRegisteredResponse, AgentPublic, UpdateAgentBody, RegisterAgentRequest, ChallengeResponse, ReputationScores, ReputationCounters, AgentReputation, AssetVolume, AgentSettlementVolume, AgentStatsRates, AgentStats, } from './agent';
 export { AGENT_TAG_REGEX, AGENT_NAME_REGEX, RESERVED_NAMES, isReservedName, isValidAgentName, normalizeName } from './agent';
 export type { OwnerSigningMethod, KeyLinkPayload, Ed25519KeyLinkAttestation } from './identity';

package/dist/types/read-model.d.ts

@@ -202,6 +202,19 @@ export interface ListDelegationsQuery {
     after?: string;
     limit?: number;
 }
+/**
+ * Query for `GET /v1/agents/:did/active-delegations` — the signer's own
+ * in-flight delegations as recipient (worker tasks). The result set is
+ * always scoped to {@link DELEGATION_INFLIGHT_STATES}; `state` narrows it
+ * to ONE in-flight state and is rejected if it names a terminal one.
+ */
+export interface ListActiveDelegationsQuery {
+    /** Narrow to one in-flight state (must be a member of DELEGATION_INFLIGHT_STATES). */
+    state?: DelegationState;
+    /** Opaque per-row cursor — the previous page's last `id`. */
+    after?: string;
+    limit?: number;
+}
 /** Query for `GET /v1/relationships/:id/work`. */
 export interface ListWorkLogsQuery {
     state?: WorkLogState;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@heyanon-arp/sdk",
-  "version": "0.0.38",
-  "description": "TypeScript SDK for the Agent Relationship Protocol — canonical JSON, Ed25519 envelope sign/verify, did:arp identity, scrypt key attestation, chain-audit helpers.",
+  "version": "0.0.40",
+  "description": "TypeScript SDK for the Agent Relationship Protocol — canonical JSON, Ed25519 envelope sign/verify, did:arp identity, Ed25519 owner key-link attestation, chain-audit helpers.",
   "license": "MIT",
   "keywords": [
     "arp",