@humanagencyp/hap-core 0.4.4 → 0.4.6

package/dist/index.d.mts

@@ -118,6 +118,17 @@ type BoundType =
     kind: 'enum';
     values: readonly string[];
 };
+/**
+ * The measurement dimension of a numeric bound's value.
+ *
+ * Orthogonal to `BoundType` (which describes how the bound is *enforced*).
+ * `unit` describes what the *value* means — 4 minutes vs 4 hours vs 4 EUR.
+ *
+ * UI uses this to render the unit next to the input. Future gatekeeper
+ * versions can use it to enforce unit alignment between profile bounds
+ * and tool payloads.
+ */
+type FieldUnit = 'count' | 'minutes' | 'hours' | 'days' | `currency:${string}` | 'percent';
 /**
  * Bounds field definition within a v0.4 profile.
  *
@@ -138,6 +149,13 @@ interface ProfileBoundsField {
      * treat a missing boundType as an error when running in v0.4 mode.
      */
     boundType?: BoundType;
+    /**
+     * The measurement dimension of the bound's value. UI renders the unit
+     * inline next to the input (e.g. `4 min`, `100 EUR`). Independent from
+     * `boundType` — the same unit can appear under different enforcement
+     * kinds, and the same boundType can carry different units.
+     */
+    unit?: FieldUnit;
     /** @deprecated v0.4: use boundType instead. */
     constraint?: FieldConstraint;
     /** @deprecated v0.4: use boundType: { kind: 'enum', values: [...] }. */
@@ -580,4 +598,4 @@ declare function listProfiles(): string[];
 declare function getAllProfiles(): AgentProfile[];
 declare function clearProfiles(): void;
 
-export { type AgentBoundsParams, type AgentContextParams, type AgentFrameParams, type AgentProfile, type Attestation, type AttestationHeader, type AttestationPayload, type BoundType, type CumulativeFieldDef, type CumulativeWindow, type DeclaredFieldDef, type ExecutionContextFieldDef, type ExecutionLogEntry, type ExecutionLogQuery, type ExecutionMappingTransform, type ExecutionMappingValue, type ExecutionPath, type FieldConstraint, type GateQuestion, type GatekeeperError, type GatekeeperRequest, type GatekeeperResult, type ProfileBoundsField, type ProfileContextField, type ProfileFrameField, type ProfileToolGating, type ProfileToolGatingEntry, type ResolvedDomain, attestationId, canonicalBounds, canonicalContext, canonicalFrame, checkAttestationExpiry, clearProfiles, computeBoundsHash, computeContextHash, computeFrameHash, decodeAttestationBlob, encodeAttestationBlob, frameHash, getAllProfiles, getProfile, isV4Attestation, listProfiles, registerProfile, validateBoundsParams, validateContextParams, validateFrameParams, verify, verifyAttestation, verifyAttestationSignature, verifyAttestationV4, verifyBoundsHash, verifyContextHash, verifyFrameHash };
+export { type AgentBoundsParams, type AgentContextParams, type AgentFrameParams, type AgentProfile, type Attestation, type AttestationHeader, type AttestationPayload, type BoundType, type CumulativeFieldDef, type CumulativeWindow, type DeclaredFieldDef, type ExecutionContextFieldDef, type ExecutionLogEntry, type ExecutionLogQuery, type ExecutionMappingTransform, type ExecutionMappingValue, type ExecutionPath, type FieldConstraint, type FieldUnit, type GateQuestion, type GatekeeperError, type GatekeeperRequest, type GatekeeperResult, type ProfileBoundsField, type ProfileContextField, type ProfileFrameField, type ProfileToolGating, type ProfileToolGatingEntry, type ResolvedDomain, attestationId, canonicalBounds, canonicalContext, canonicalFrame, checkAttestationExpiry, clearProfiles, computeBoundsHash, computeContextHash, computeFrameHash, decodeAttestationBlob, encodeAttestationBlob, frameHash, getAllProfiles, getProfile, isV4Attestation, listProfiles, registerProfile, validateBoundsParams, validateContextParams, validateFrameParams, verify, verifyAttestation, verifyAttestationSignature, verifyAttestationV4, verifyBoundsHash, verifyContextHash, verifyFrameHash };

package/dist/index.d.ts

@@ -118,6 +118,17 @@ type BoundType =
     kind: 'enum';
     values: readonly string[];
 };
+/**
+ * The measurement dimension of a numeric bound's value.
+ *
+ * Orthogonal to `BoundType` (which describes how the bound is *enforced*).
+ * `unit` describes what the *value* means — 4 minutes vs 4 hours vs 4 EUR.
+ *
+ * UI uses this to render the unit next to the input. Future gatekeeper
+ * versions can use it to enforce unit alignment between profile bounds
+ * and tool payloads.
+ */
+type FieldUnit = 'count' | 'minutes' | 'hours' | 'days' | `currency:${string}` | 'percent';
 /**
  * Bounds field definition within a v0.4 profile.
  *
@@ -138,6 +149,13 @@ interface ProfileBoundsField {
      * treat a missing boundType as an error when running in v0.4 mode.
      */
     boundType?: BoundType;
+    /**
+     * The measurement dimension of the bound's value. UI renders the unit
+     * inline next to the input (e.g. `4 min`, `100 EUR`). Independent from
+     * `boundType` — the same unit can appear under different enforcement
+     * kinds, and the same boundType can carry different units.
+     */
+    unit?: FieldUnit;
     /** @deprecated v0.4: use boundType instead. */
     constraint?: FieldConstraint;
     /** @deprecated v0.4: use boundType: { kind: 'enum', values: [...] }. */
@@ -580,4 +598,4 @@ declare function listProfiles(): string[];
 declare function getAllProfiles(): AgentProfile[];
 declare function clearProfiles(): void;
 
-export { type AgentBoundsParams, type AgentContextParams, type AgentFrameParams, type AgentProfile, type Attestation, type AttestationHeader, type AttestationPayload, type BoundType, type CumulativeFieldDef, type CumulativeWindow, type DeclaredFieldDef, type ExecutionContextFieldDef, type ExecutionLogEntry, type ExecutionLogQuery, type ExecutionMappingTransform, type ExecutionMappingValue, type ExecutionPath, type FieldConstraint, type GateQuestion, type GatekeeperError, type GatekeeperRequest, type GatekeeperResult, type ProfileBoundsField, type ProfileContextField, type ProfileFrameField, type ProfileToolGating, type ProfileToolGatingEntry, type ResolvedDomain, attestationId, canonicalBounds, canonicalContext, canonicalFrame, checkAttestationExpiry, clearProfiles, computeBoundsHash, computeContextHash, computeFrameHash, decodeAttestationBlob, encodeAttestationBlob, frameHash, getAllProfiles, getProfile, isV4Attestation, listProfiles, registerProfile, validateBoundsParams, validateContextParams, validateFrameParams, verify, verifyAttestation, verifyAttestationSignature, verifyAttestationV4, verifyBoundsHash, verifyContextHash, verifyFrameHash };
+export { type AgentBoundsParams, type AgentContextParams, type AgentFrameParams, type AgentProfile, type Attestation, type AttestationHeader, type AttestationPayload, type BoundType, type CumulativeFieldDef, type CumulativeWindow, type DeclaredFieldDef, type ExecutionContextFieldDef, type ExecutionLogEntry, type ExecutionLogQuery, type ExecutionMappingTransform, type ExecutionMappingValue, type ExecutionPath, type FieldConstraint, type FieldUnit, type GateQuestion, type GatekeeperError, type GatekeeperRequest, type GatekeeperResult, type ProfileBoundsField, type ProfileContextField, type ProfileFrameField, type ProfileToolGating, type ProfileToolGatingEntry, type ResolvedDomain, attestationId, canonicalBounds, canonicalContext, canonicalFrame, checkAttestationExpiry, clearProfiles, computeBoundsHash, computeContextHash, computeFrameHash, decodeAttestationBlob, encodeAttestationBlob, frameHash, getAllProfiles, getProfile, isV4Attestation, listProfiles, registerProfile, validateBoundsParams, validateContextParams, validateFrameParams, verify, verifyAttestation, verifyAttestationSignature, verifyAttestationV4, verifyBoundsHash, verifyContextHash, verifyFrameHash };

package/dist/index.js

@@ -439,10 +439,22 @@ async function verifyV4(request, profile, publicKeyHex, now, executionLog) {
   if (v4BoundsErrors.length > 0) {
     return { approved: false, errors: v4BoundsErrors };
   }
-  if (context && profile.contextSchema && Object.keys(profile.contextSchema.fields).length > 0) {
-    const contextErrors = checkContextConstraints(context, request.execution, profile);
-    if (contextErrors.length > 0) {
-      return { approved: false, errors: contextErrors };
+  if (profile.contextSchema && Object.keys(profile.contextSchema.fields).length > 0) {
+    const enforceableFields = Object.entries(profile.contextSchema.fields).filter(([, def]) => def.constraint?.enforceable?.length);
+    if (enforceableFields.length > 0 && !context) {
+      return {
+        approved: false,
+        errors: [{
+          code: "BOUND_EXCEEDED",
+          message: `Declared context required for constraint enforcement but not provided. Fields: ${enforceableFields.map(([n]) => n).join(", ")}`
+        }]
+      };
+    }
+    if (context) {
+      const contextErrors = checkContextConstraints(context, request.execution, profile);
+      if (contextErrors.length > 0) {
+        return { approved: false, errors: contextErrors };
+      }
     }
   }
   return { approved: true };

package/dist/index.mjs

@@ -377,10 +377,22 @@ async function verifyV4(request, profile, publicKeyHex, now, executionLog) {
   if (v4BoundsErrors.length > 0) {
     return { approved: false, errors: v4BoundsErrors };
   }
-  if (context && profile.contextSchema && Object.keys(profile.contextSchema.fields).length > 0) {
-    const contextErrors = checkContextConstraints(context, request.execution, profile);
-    if (contextErrors.length > 0) {
-      return { approved: false, errors: contextErrors };
+  if (profile.contextSchema && Object.keys(profile.contextSchema.fields).length > 0) {
+    const enforceableFields = Object.entries(profile.contextSchema.fields).filter(([, def]) => def.constraint?.enforceable?.length);
+    if (enforceableFields.length > 0 && !context) {
+      return {
+        approved: false,
+        errors: [{
+          code: "BOUND_EXCEEDED",
+          message: `Declared context required for constraint enforcement but not provided. Fields: ${enforceableFields.map(([n]) => n).join(", ")}`
+        }]
+      };
+    }
+    if (context) {
+      const contextErrors = checkContextConstraints(context, request.execution, profile);
+      if (contextErrors.length > 0) {
+        return { approved: false, errors: contextErrors };
+      }
     }
   }
   return { approved: true };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@humanagencyp/hap-core",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "description": "Core types, cryptographic primitives, and verification logic for the Human Agency Protocol",
   "license": "MIT",
   "repository": {
@@ -21,16 +21,6 @@
     "dist",
     "src"
   ],
-  "scripts": {
-    "build": "tsup src/index.ts --format cjs,esm --dts",
-    "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "prepublishOnly": "pnpm build",
-    "release:patch": "pnpm version patch && git push --follow-tags",
-    "release:minor": "pnpm version minor && git push --follow-tags",
-    "release:major": "pnpm version major && git push --follow-tags"
-  },
   "dependencies": {
     "@noble/ed25519": "^2.1.0"
   },
@@ -39,5 +29,14 @@
     "tsup": "^8.0.0",
     "typescript": "^5.3.0",
     "vitest": "^1.0.0"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts --format cjs,esm --dts",
+    "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "release:patch": "pnpm version patch && git push --follow-tags",
+    "release:minor": "pnpm version minor && git push --follow-tags",
+    "release:major": "pnpm version major && git push --follow-tags"
   }
-}
+}

package/src/gatekeeper.ts

@@ -274,11 +274,30 @@ async function verifyV4(
     return { approved: false, errors: v4BoundsErrors };
   }
 
-  // Check context constraints using contextSchema
-  if (context && profile.contextSchema && Object.keys(profile.contextSchema.fields).length > 0) {
-    const contextErrors = checkContextConstraints(context, request.execution, profile);
-    if (contextErrors.length > 0) {
-      return { approved: false, errors: contextErrors };
+  // Check context constraints using contextSchema.
+  // Fail closed: if the profile declares enforceable context constraints but
+  // no declared context was supplied, reject — the SP cannot enforce these
+  // (it only holds context_hash), so skipping the check would silently
+  // bypass scope restrictions like allowed_recipients / allowed_domains.
+  if (profile.contextSchema && Object.keys(profile.contextSchema.fields).length > 0) {
+    const enforceableFields = Object.entries(profile.contextSchema.fields)
+      .filter(([, def]) => def.constraint?.enforceable?.length);
+
+    if (enforceableFields.length > 0 && !context) {
+      return {
+        approved: false,
+        errors: [{
+          code: 'BOUND_EXCEEDED',
+          message: `Declared context required for constraint enforcement but not provided. Fields: ${enforceableFields.map(([n]) => n).join(', ')}`,
+        }],
+      };
+    }
+
+    if (context) {
+      const contextErrors = checkContextConstraints(context, request.execution, profile);
+      if (contextErrors.length > 0) {
+        return { approved: false, errors: contextErrors };
+      }
     }
   }
 

package/src/types.ts

@@ -117,6 +117,22 @@ export type BoundType =
    */
   | { kind: 'enum'; values: readonly string[] };
 
+/**
+ * The measurement dimension of a numeric bound's value.
+ *
+ * Orthogonal to `BoundType` (which describes how the bound is *enforced*).
+ * `unit` describes what the *value* means — 4 minutes vs 4 hours vs 4 EUR.
+ *
+ * UI uses this to render the unit next to the input. Future gatekeeper
+ * versions can use it to enforce unit alignment between profile bounds
+ * and tool payloads.
+ */
+export type FieldUnit =
+  | 'count'                 // dimensionless integer (no unit suffix in UI)
+  | 'minutes' | 'hours' | 'days'
+  | `currency:${string}`    // ISO 4217 code, e.g. 'currency:EUR'
+  | 'percent';
+
 /**
  * Bounds field definition within a v0.4 profile.
  *
@@ -137,6 +153,13 @@ export interface ProfileBoundsField {
    * treat a missing boundType as an error when running in v0.4 mode.
    */
   boundType?: BoundType;
+  /**
+   * The measurement dimension of the bound's value. UI renders the unit
+   * inline next to the input (e.g. `4 min`, `100 EUR`). Independent from
+   * `boundType` — the same unit can appear under different enforcement
+   * kinds, and the same boundType can carry different units.
+   */
+  unit?: FieldUnit;
   /** @deprecated v0.4: use boundType instead. */
   constraint?: FieldConstraint;
   /** @deprecated v0.4: use boundType: { kind: 'enum', values: [...] }. */