@iicp/client 0.7.91 → 0.7.93

package/dist/dispatch_ticket_trust.d.ts

@@ -0,0 +1,89 @@
+export declare const DISPATCH_TICKET_V2_PROFILE = "dispatch_ticket_v2";
+type Json = null | boolean | number | string | Json[] | {
+    [key: string]: Json;
+};
+export interface DispatchTrustKey {
+    key_id: string;
+    public_key_b64url: string;
+    state: "active" | "retiring" | "revoked";
+    valid_from: number;
+    valid_until: number;
+    allowed_profiles?: string[];
+    issuers?: string[];
+    audiences?: string[];
+}
+export interface DispatchTrustBundle {
+    bundle_version: number;
+    keys: DispatchTrustKey[];
+    issuer?: string;
+    valid_from?: number;
+    valid_until?: number;
+}
+export interface DispatchTicketBindings {
+    issuer: string;
+    provider_id: string;
+    intent: string;
+    constraints_digest: string;
+    audience?: string;
+}
+export interface DispatchTrustDecision {
+    accepted: boolean;
+    code: string;
+    anchored: boolean;
+    key_id?: string;
+}
+export interface StoredDispatchTrustBundle {
+    bundle: DispatchTrustBundle;
+    canonical_bytes: Buffer;
+    digest: string;
+    high_water: number;
+}
+export type TrustBundleInstallStatus = "installed" | "unchanged" | "stale" | "conflict" | "recovered" | "recovery_required";
+export interface TrustBundleInstallResult {
+    status: TrustBundleInstallStatus;
+    state?: StoredDispatchTrustBundle;
+}
+export interface AdminRecoveryAuthorization {
+    reason: string;
+    minimum_high_water?: number;
+}
+export interface TrustBundleStore {
+    load(): StoredDispatchTrustBundle | undefined;
+    install(bundle: DispatchTrustBundle, expectedCurrentVersion?: number): TrustBundleInstallResult;
+    recover(bundle: DispatchTrustBundle, authorization?: AdminRecoveryAuthorization): TrustBundleInstallResult;
+}
+export declare class TrustBundleStoreError extends Error {
+}
+export declare class TrustBundleStoreCorrupt extends TrustBundleStoreError {
+}
+export declare class TrustBundleStoreLocked extends TrustBundleStoreError {
+}
+export declare class LocalDispatchReplayCache {
+    private readonly seen;
+    contains(jti: string, now: number): boolean;
+    remember(jti: string, expiresAt: number): void;
+}
+export declare function canonicalTicketClaims(value: Json): string;
+export declare function canonicalDispatchTrustBundle(bundle: DispatchTrustBundle): Buffer;
+export declare class FileDispatchTrustBundleStore implements TrustBundleStore {
+    readonly path: string;
+    readonly lockPath: string;
+    private readonly lockTimeoutMs;
+    constructor(path: string, options?: {
+        lockTimeoutMs?: number;
+    });
+    private prepareDirectory;
+    private acquireLock;
+    private releaseLock;
+    load(): StoredDispatchTrustBundle | undefined;
+    private commit;
+    install(bundle: DispatchTrustBundle, expectedCurrentVersion?: number): TrustBundleInstallResult;
+    recover(bundle: DispatchTrustBundle, authorization?: AdminRecoveryAuthorization): TrustBundleInstallResult;
+}
+export declare function verifyDispatchTicketV2(claims: Record<string, Json>, signatureB64url: string, bundle: DispatchTrustBundle, bindings: DispatchTicketBindings, options: {
+    now: number;
+    minimumBundleVersion?: number;
+    replayCache?: LocalDispatchReplayCache;
+}): DispatchTrustDecision;
+export {};
+//# sourceMappingURL=dispatch_ticket_trust.d.ts.map

package/dist/dispatch_ticket_trust.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch_ticket_trust.d.ts","sourceRoot":"","sources":["../src/dispatch_ticket_trust.ts"],"names":[],"mappings":"AAiBA,eAAO,MAAM,0BAA0B,uBAAuB,CAAC;AAI/D,KAAK,IAAI,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAEhF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,gBAAgB,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,wBAAwB,GAAG,WAAW,GAAG,WAAW,GAAG,OAAO,GAAG,UAAU,GAAG,WAAW,GAAG,mBAAmB,CAAC;AAE5H,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,wBAAwB,CAAC;IACjC,KAAK,CAAC,EAAE,yBAAyB,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,yBAAyB,GAAG,SAAS,CAAC;IAC9C,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,EAAE,MAAM,GAAG,wBAAwB,CAAC;IAChG,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,aAAa,CAAC,EAAE,0BAA0B,GAAG,wBAAwB,CAAC;CAC5G;AAED,qBAAa,qBAAsB,SAAQ,KAAK;CAAG;AACnD,qBAAa,uBAAwB,SAAQ,qBAAqB;CAAG;AACrE,qBAAa,sBAAuB,SAAQ,qBAAqB;CAAG;AAEpE,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAElD,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAK3C,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;CAG/C;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,IAAI,GAAG,MAAM,CAMzD;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAoBhF;AAUD,qBAAa,4BAA6B,YAAW,gBAAgB;IACnE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAA;KAAO;IAMlE,OAAO,CAAC,gBAAgB;IAMxB,OAAO,CAAC,WAAW;IAiBnB,OAAO,CAAC,WAAW;IAOnB,IAAI,IAAI,yBAAyB,GAAG,SAAS;IA4B7C,OAAO,CAAC,MAAM;IAoCd,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,EAAE,MAAM,GAAG,wBAAwB;IAqB/F,OAAO,CAAC,MAAM,EAAE,mBAAmB,EAAE,aAAa,CAAC,EAAE,0BAA0B,GAAG,wBAAwB;CAiB3G;AAMD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAC5B,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,EAAE,sBAAsB,EAChC,OAAO,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,wBAAwB,CAAA;CAAE,GAC9F,qBAAqB,CAqCvB"}

package/dist/dispatch_ticket_trust.js

@@ -0,0 +1,302 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileDispatchTrustBundleStore = exports.LocalDispatchReplayCache = exports.TrustBundleStoreLocked = exports.TrustBundleStoreCorrupt = exports.TrustBundleStoreError = exports.DISPATCH_TICKET_V2_PROFILE = void 0;
+exports.canonicalTicketClaims = canonicalTicketClaims;
+exports.canonicalDispatchTrustBundle = canonicalDispatchTrustBundle;
+exports.verifyDispatchTicketV2 = verifyDispatchTicketV2;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+exports.DISPATCH_TICKET_V2_PROFILE = "dispatch_ticket_v2";
+const DOMAIN = Buffer.from("IICP-DISPATCH-TICKET-V2\0", "utf8");
+const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
+class TrustBundleStoreError extends Error {
+}
+exports.TrustBundleStoreError = TrustBundleStoreError;
+class TrustBundleStoreCorrupt extends TrustBundleStoreError {
+}
+exports.TrustBundleStoreCorrupt = TrustBundleStoreCorrupt;
+class TrustBundleStoreLocked extends TrustBundleStoreError {
+}
+exports.TrustBundleStoreLocked = TrustBundleStoreLocked;
+class LocalDispatchReplayCache {
+    seen = new Map();
+    contains(jti, now) {
+        for (const [key, expiry] of this.seen)
+            if (expiry <= now)
+                this.seen.delete(key);
+        return this.seen.has(jti);
+    }
+    remember(jti, expiresAt) {
+        this.seen.set(jti, expiresAt);
+    }
+}
+exports.LocalDispatchReplayCache = LocalDispatchReplayCache;
+function canonicalTicketClaims(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalTicketClaims).join(",")}]`;
+    if (value !== null && typeof value === "object") {
+        return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalTicketClaims(value[key])}`).join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+function canonicalDispatchTrustBundle(bundle) {
+    const normalized = {
+        bundle_version: bundle.bundle_version,
+        keys: [...bundle.keys]
+            .sort((a, b) => a.key_id.localeCompare(b.key_id))
+            .map((key) => ({
+            key_id: key.key_id,
+            public_key_b64url: key.public_key_b64url,
+            state: key.state,
+            valid_from: key.valid_from,
+            valid_until: key.valid_until,
+            allowed_profiles: [...(key.allowed_profiles ?? [exports.DISPATCH_TICKET_V2_PROFILE])].sort(),
+            issuers: [...(key.issuers ?? [])].sort(),
+            audiences: [...(key.audiences ?? [])].sort(),
+        })),
+    };
+    if (bundle.issuer !== undefined)
+        normalized.issuer = bundle.issuer;
+    if (bundle.valid_from !== undefined)
+        normalized.valid_from = bundle.valid_from;
+    if (bundle.valid_until !== undefined)
+        normalized.valid_until = bundle.valid_until;
+    return Buffer.from(canonicalTicketClaims(normalized), "utf8");
+}
+function bundleDigest(bytes) {
+    return `sha256:${(0, node_crypto_1.createHash)("sha256").update(bytes).digest("hex")}`;
+}
+function sleepMilliseconds(milliseconds) {
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, milliseconds);
+}
+class FileDispatchTrustBundleStore {
+    path;
+    lockPath;
+    lockTimeoutMs;
+    constructor(path, options = {}) {
+        this.path = path;
+        this.lockPath = `${path}.lock`;
+        this.lockTimeoutMs = Math.max(0, options.lockTimeoutMs ?? 2_000);
+    }
+    prepareDirectory() {
+        const directory = (0, node_path_1.dirname)(this.path);
+        (0, node_fs_1.mkdirSync)(directory, { recursive: true, mode: 0o700 });
+        if (((0, node_fs_1.statSync)(directory).mode & 0o077) !== 0)
+            throw new TrustBundleStoreError("trust store directory must be owner-only");
+    }
+    acquireLock() {
+        this.prepareDirectory();
+        const deadline = Date.now() + this.lockTimeoutMs;
+        while (true) {
+            try {
+                const fd = (0, node_fs_1.openSync)(this.lockPath, "wx", 0o600);
+                (0, node_fs_1.writeFileSync)(fd, `${process.pid}\n`);
+                (0, node_fs_1.fsyncSync)(fd);
+                return fd;
+            }
+            catch (error) {
+                if (error.code !== "EEXIST")
+                    throw error;
+                if (Date.now() >= deadline)
+                    throw new TrustBundleStoreLocked("trust store lock is held");
+                sleepMilliseconds(10);
+            }
+        }
+    }
+    releaseLock(fd) {
+        (0, node_fs_1.closeSync)(fd);
+        try {
+            (0, node_fs_1.unlinkSync)(this.lockPath);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+    }
+    load() {
+        if (!(0, node_fs_1.existsSync)(this.path))
+            return undefined;
+        const metadata = (0, node_fs_1.lstatSync)(this.path);
+        if (metadata.isSymbolicLink() || !metadata.isFile())
+            throw new TrustBundleStoreCorrupt("trust store must be a regular file, not a link");
+        if ((metadata.mode & 0o077) !== 0)
+            throw new TrustBundleStoreCorrupt("trust store file must be owner-only");
+        try {
+            const raw = (0, node_fs_1.readFileSync)(this.path);
+            if (raw.length > 4 * 1024 * 1024)
+                throw new Error("state exceeds size limit");
+            const state = JSON.parse(raw.toString("utf8"));
+            if (typeof state.bundle_b64 !== "string" || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(state.bundle_b64)) {
+                throw new Error("invalid bundle base64");
+            }
+            const canonicalBytes = Buffer.from(state.bundle_b64, "base64");
+            const digest = bundleDigest(canonicalBytes);
+            if (digest !== state.bundle_digest)
+                throw new Error("bundle digest mismatch");
+            const bundle = JSON.parse(canonicalBytes.toString("utf8"));
+            const highWater = Number(state.high_water);
+            if (!Number.isSafeInteger(bundle.bundle_version) || bundle.bundle_version < 0 || state.bundle_version !== bundle.bundle_version || !Number.isSafeInteger(highWater) || highWater < bundle.bundle_version) {
+                throw new Error("bundle version/high-water mismatch");
+            }
+            if (!canonicalDispatchTrustBundle(bundle).equals(canonicalBytes))
+                throw new Error("bundle is not canonical");
+            return { bundle, canonical_bytes: canonicalBytes, digest, high_water: highWater };
+        }
+        catch (error) {
+            if (error instanceof TrustBundleStoreCorrupt)
+                throw error;
+            throw new TrustBundleStoreCorrupt(`invalid trust store: ${error.message}`);
+        }
+    }
+    commit(bundle, highWater) {
+        if (!Number.isSafeInteger(bundle.bundle_version) || bundle.bundle_version < 0 || !Number.isSafeInteger(highWater) || highWater < bundle.bundle_version) {
+            throw new TrustBundleStoreError("bundle version and high-water mark must be non-negative safe integers");
+        }
+        const canonicalBytes = canonicalDispatchTrustBundle(bundle);
+        const digest = bundleDigest(canonicalBytes);
+        const state = {
+            bundle_b64: canonicalBytes.toString("base64"),
+            bundle_digest: digest,
+            bundle_version: bundle.bundle_version,
+            high_water: highWater,
+        };
+        const payload = Buffer.from(canonicalTicketClaims(state), "utf8");
+        const temporary = (0, node_path_1.join)((0, node_path_1.dirname)(this.path), `${(0, node_path_1.basename)(this.path)}.tmp-${process.pid}-${(0, node_crypto_1.randomUUID)()}`);
+        const fd = (0, node_fs_1.openSync)(temporary, "wx", 0o600);
+        try {
+            (0, node_fs_1.writeFileSync)(fd, payload);
+            (0, node_fs_1.fsyncSync)(fd);
+        }
+        finally {
+            (0, node_fs_1.closeSync)(fd);
+        }
+        try {
+            (0, node_fs_1.renameSync)(temporary, this.path);
+            (0, node_fs_1.chmodSync)(this.path, 0o600);
+            try {
+                const directoryFd = (0, node_fs_1.openSync)((0, node_path_1.dirname)(this.path), "r");
+                try {
+                    (0, node_fs_1.fsyncSync)(directoryFd);
+                }
+                finally {
+                    (0, node_fs_1.closeSync)(directoryFd);
+                }
+            }
+            catch {
+                // Some platforms do not allow fsync on a directory; atomic rename still applies.
+            }
+        }
+        finally {
+            if ((0, node_fs_1.existsSync)(temporary))
+                (0, node_fs_1.unlinkSync)(temporary);
+        }
+        return { bundle, canonical_bytes: canonicalBytes, digest, high_water: highWater };
+    }
+    install(bundle, expectedCurrentVersion) {
+        if (!Number.isSafeInteger(bundle.bundle_version) || bundle.bundle_version < 0) {
+            throw new TrustBundleStoreError("bundle version must be a non-negative safe integer");
+        }
+        const fd = this.acquireLock();
+        try {
+            const current = this.load();
+            const currentVersion = current?.bundle.bundle_version;
+            if (expectedCurrentVersion !== undefined && expectedCurrentVersion !== currentVersion)
+                return { status: "conflict", state: current };
+            const candidateDigest = bundleDigest(canonicalDispatchTrustBundle(bundle));
+            const highWater = current?.high_water ?? 0;
+            if (bundle.bundle_version < highWater)
+                return { status: "stale", state: current };
+            if (current && bundle.bundle_version === currentVersion) {
+                return { status: candidateDigest === current.digest ? "unchanged" : "conflict", state: current };
+            }
+            return { status: "installed", state: this.commit(bundle, Math.max(highWater, bundle.bundle_version)) };
+        }
+        finally {
+            this.releaseLock(fd);
+        }
+    }
+    recover(bundle, authorization) {
+        if (!Number.isSafeInteger(bundle.bundle_version) || bundle.bundle_version < 0) {
+            throw new TrustBundleStoreError("bundle version must be a non-negative safe integer");
+        }
+        if (!authorization?.reason.trim())
+            return { status: "recovery_required" };
+        const fd = this.acquireLock();
+        try {
+            let current;
+            try {
+                current = this.load();
+            }
+            catch (error) {
+                if (!(error instanceof TrustBundleStoreCorrupt))
+                    throw error;
+            }
+            const highWater = Math.max(bundle.bundle_version, authorization.minimum_high_water ?? 0, current?.high_water ?? 0);
+            return { status: "recovered", state: this.commit(bundle, highWater) };
+        }
+        finally {
+            this.releaseLock(fd);
+        }
+    }
+}
+exports.FileDispatchTrustBundleStore = FileDispatchTrustBundleStore;
+function decision(code, keyId, accepted = false) {
+    return { accepted, code, anchored: accepted, ...(keyId ? { key_id: keyId } : {}) };
+}
+function verifyDispatchTicketV2(claims, signatureB64url, bundle, bindings, options) {
+    const minimum = options.minimumBundleVersion ?? 0;
+    if (!Number.isSafeInteger(bundle.bundle_version) || bundle.bundle_version < minimum)
+        return decision("reject_bundle_rollback");
+    if (bundle.valid_from !== undefined && options.now < bundle.valid_from)
+        return decision("reject_bundle_not_yet_valid");
+    if (bundle.valid_until !== undefined && options.now > bundle.valid_until)
+        return decision("reject_bundle_expired");
+    if (claims.profile !== exports.DISPATCH_TICKET_V2_PROFILE)
+        return decision("reject_required_profile_downgrade");
+    const keyId = typeof claims.key_id === "string" ? claims.key_id : undefined;
+    const key = keyId ? bundle.keys.find((candidate) => candidate.key_id === keyId) : undefined;
+    if (!key)
+        return decision("reject_unknown_key", keyId);
+    if (key.state === "revoked")
+        return decision("reject_key_revoked", keyId);
+    if (options.now < key.valid_from || options.now > key.valid_until)
+        return decision("reject_key_expired", keyId);
+    if (!(key.allowed_profiles ?? [exports.DISPATCH_TICKET_V2_PROFILE]).includes(exports.DISPATCH_TICKET_V2_PROFILE))
+        return decision("reject_profile_not_allowed", keyId);
+    if (key.issuers?.length && !key.issuers.includes(String(claims.issuer)))
+        return decision("reject_issuer", keyId);
+    if (key.audiences?.length && !key.audiences.includes(String(claims.audience)))
+        return decision("reject_audience", keyId);
+    const expected = {
+        issuer: bindings.issuer,
+        provider_id: bindings.provider_id,
+        intent: bindings.intent,
+        constraints_digest: bindings.constraints_digest,
+    };
+    if (Object.entries(expected).some(([name, value]) => claims[name] !== value))
+        return decision("reject_claim_mismatch", keyId);
+    if (bindings.audience !== undefined && claims.audience !== bindings.audience)
+        return decision("reject_claim_mismatch", keyId);
+    const expiresAt = claims.expires_at;
+    const jti = claims.jti;
+    if (!Number.isSafeInteger(expiresAt) || Number(expiresAt) <= options.now || typeof jti !== "string" || !jti)
+        return decision("reject_claim_mismatch", keyId);
+    try {
+        const raw = Buffer.from(key.public_key_b64url, "base64url");
+        if (raw.length !== 32)
+            return decision("reject_signature", keyId);
+        const publicKey = (0, node_crypto_1.createPublicKey)({ key: Buffer.concat([ED25519_SPKI_PREFIX, raw]), format: "der", type: "spki" });
+        const message = Buffer.concat([DOMAIN, Buffer.from(canonicalTicketClaims(claims), "utf8")]);
+        if (!(0, node_crypto_1.verify)(null, message, publicKey, Buffer.from(signatureB64url, "base64url")))
+            return decision("reject_signature", keyId);
+    }
+    catch {
+        return decision("reject_signature", keyId);
+    }
+    if (options.replayCache?.contains(jti, options.now))
+        return decision("reject_local_replay", keyId);
+    options.replayCache?.remember(jti, Number(expiresAt));
+    return decision("accept_anchored", keyId, true);
+}
+//# sourceMappingURL=dispatch_ticket_trust.js.map

package/dist/dispatch_ticket_trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch_ticket_trust.js","sourceRoot":"","sources":["../src/dispatch_ticket_trust.ts"],"names":[],"mappings":";;;AAmGA,sDAMC;AAED,oEAoBC;AA+JD,wDA2CC;AAzUD,6CAA8E;AAC9E,qCAaiB;AACjB,yCAAoD;AAEvC,QAAA,0BAA0B,GAAG,oBAAoB,CAAC;AAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,MAAM,CAAC,CAAC;AAChE,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AA+D3E,MAAa,qBAAsB,SAAQ,KAAK;CAAG;AAAnD,sDAAmD;AACnD,MAAa,uBAAwB,SAAQ,qBAAqB;CAAG;AAArE,0DAAqE;AACrE,MAAa,sBAAuB,SAAQ,qBAAqB;CAAG;AAApE,wDAAoE;AAEpE,MAAa,wBAAwB;IAClB,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,QAAQ,CAAC,GAAW,EAAE,GAAW;QAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,IAAI,MAAM,IAAI,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,QAAQ,CAAC,GAAW,EAAE,SAAiB;QACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAChC,CAAC;CACF;AAXD,4DAWC;AAED,SAAgB,qBAAqB,CAAC,KAAW;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACnF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChI,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAgB,4BAA4B,CAAC,MAA2B;IACtE,MAAM,UAAU,GAAyB;QACvC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;aACnB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;aAChD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACb,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,iBAAiB,EAAE,GAAG,CAAC,iBAAiB;YACxC,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,gBAAgB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,kCAA0B,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YACpF,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;YACxC,SAAS,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;SAC7C,CAAC,CAAC;KACN,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,UAAU,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACnE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,UAAU,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC/E,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS;QAAE,UAAU,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IAClF,OAAO,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,UAAU,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,OAAO,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;AAC7E,CAAC;AAED,MAAa,4BAA4B;IAC9B,IAAI,CAAS;IACb,QAAQ,CAAS;IACT,aAAa,CAAS;IAEvC,YAAY,IAAY,EAAE,UAAsC,EAAE;QAChE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,GAAG,IAAI,OAAO,CAAC;QAC/B,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC;IACnE,CAAC;IAEO,gBAAgB;QACtB,MAAM,SAAS,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAA,kBAAQ,EAAC,SAAS,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,qBAAqB,CAAC,0CAA0C,CAAC,CAAC;IAC5H,CAAC;IAEO,WAAW;QACjB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC;QACjD,OAAO,IAAI,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,IAAA,kBAAQ,EAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBAChD,IAAA,uBAAa,EAAC,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;gBACtC,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;gBACd,OAAO,EAAE,CAAC;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;gBACpE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,MAAM,IAAI,sBAAsB,CAAC,0BAA0B,CAAC,CAAC;gBACzF,iBAAiB,CAAC,EAAE,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,EAAU;QAC5B,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QACd,IAAI,CAAC;YAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChD,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,uBAAuB,CAAC,gDAAgD,CAAC,CAAC;QACzI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,uBAAuB,CAAC,qCAAqC,CAAC,CAAC;QAC5G,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;YAC1E,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,kEAAkE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;gBACvI,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YACD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAC/D,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;YAC5C,IAAI,MAAM,KAAK,KAAK,CAAC,aAAa;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwB,CAAC;YAClF,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;gBACzM,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YAC7G,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QACpF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,uBAAuB;gBAAE,MAAM,KAAK,CAAC;YAC1D,MAAM,IAAI,uBAAuB,CAAC,wBAAyB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;IACH,CAAC;IAEO,MAAM,CAAC,MAA2B,EAAE,SAAiB;QAC3D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;YACvJ,MAAM,IAAI,qBAAqB,CAAC,uEAAuE,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,cAAc,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG;YACZ,UAAU,EAAE,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7C,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,SAAS;SACtB,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,KAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAA,oBAAQ,EAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAA,wBAAU,GAAE,EAAE,CAAC,CAAC;QACxG,MAAM,EAAE,GAAG,IAAA,kBAAQ,EAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,IAAA,uBAAa,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3B,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;QAChB,CAAC;QACD,IAAI,CAAC;YACH,IAAA,oBAAU,EAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,IAAA,mBAAS,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAA,kBAAQ,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;gBACtD,IAAI,CAAC;oBAAC,IAAA,mBAAS,EAAC,WAAW,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,IAAA,mBAAS,EAAC,WAAW,CAAC,CAAC;gBAAC,CAAC;YACrE,CAAC;YAAC,MAAM,CAAC;gBACP,iFAAiF;YACnF,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,IAAA,oBAAU,EAAC,SAAS,CAAC;gBAAE,IAAA,oBAAU,EAAC,SAAS,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACpF,CAAC;IAED,OAAO,CAAC,MAA2B,EAAE,sBAA+B;QAClE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,qBAAqB,CAAC,oDAAoD,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,cAAc,GAAG,OAAO,EAAE,MAAM,CAAC,cAAc,CAAC;YACtD,IAAI,sBAAsB,KAAK,SAAS,IAAI,sBAAsB,KAAK,cAAc;gBAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YACrI,MAAM,eAAe,GAAG,YAAY,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC,CAAC;YAC3E,MAAM,SAAS,GAAG,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC;YAC3C,IAAI,MAAM,CAAC,cAAc,GAAG,SAAS;gBAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YAClF,IAAI,OAAO,IAAI,MAAM,CAAC,cAAc,KAAK,cAAc,EAAE,CAAC;gBACxD,OAAO,EAAE,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;YACnG,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACzG,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAA2B,EAAE,aAA0C;QAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,qBAAqB,CAAC,oDAAoD,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC1E,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,OAA8C,CAAC;YACnD,IAAI,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAC5C,IAAI,CAAC,CAAC,KAAK,YAAY,uBAAuB,CAAC;oBAAE,MAAM,KAAK,CAAC;YAC/D,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,aAAa,CAAC,kBAAkB,IAAI,CAAC,EAAE,OAAO,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;YACnH,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACxE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;CACF;AA/ID,oEA+IC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAc,EAAE,QAAQ,GAAG,KAAK;IAC9D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAgB,sBAAsB,CACpC,MAA4B,EAC5B,eAAuB,EACvB,MAA2B,EAC3B,QAAgC,EAChC,OAA+F;IAE/F,MAAM,OAAO,GAAG,OAAO,CAAC,oBAAoB,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC,cAAc,GAAG,OAAO;QAAE,OAAO,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC/H,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IACvH,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC,uBAAuB,CAAC,CAAC;IACnH,IAAI,MAAM,CAAC,OAAO,KAAK,kCAA0B;QAAE,OAAO,QAAQ,CAAC,mCAAmC,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,WAAW;QAAE,OAAO,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAChH,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,kCAA0B,CAAC,CAAC,CAAC,QAAQ,CAAC,kCAA0B,CAAC;QAAE,OAAO,QAAQ,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;IACvJ,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACjH,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACzH,MAAM,QAAQ,GAA2B;QACvC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;KAChD,CAAC;IACF,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAC9H,IAAI,QAAQ,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QAAE,OAAO,QAAQ,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAC9H,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAC7J,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,SAAS,GAAG,IAAA,6BAAe,EAAC,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACnH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,IAAA,oBAAM,EAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC/H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IACnG,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,QAAQ,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC"}

package/dist/endpoint_security.d.ts

@@ -0,0 +1,22 @@
+/** DNS-aware provider endpoint validation and connection pinning (#667). */
+import * as http from "node:http";
+export declare function privateEndpointsAllowed(): boolean;
+export declare function hostnameAllowed(host: string, allowPrivate?: boolean): boolean;
+export declare function addressAllowed(address: string, allowPrivate?: boolean): boolean;
+export interface ResolvedEndpoint {
+    url: URL;
+    host: string;
+    port: number;
+    addresses: ReadonlyArray<{
+        address: string;
+        family: 4 | 6;
+    }>;
+}
+export declare function resolveEndpoint(url: string, allowPrivate?: boolean): Promise<ResolvedEndpoint>;
+export interface PinnedResponse {
+    status: number;
+    headers: http.IncomingHttpHeaders;
+    text: string;
+}
+export declare function postJsonPinned(url: string, body: unknown, headers: Record<string, string>, timeoutMs: number, tlsVerify?: boolean, redirectCount?: number): Promise<PinnedResponse>;
+//# sourceMappingURL=endpoint_security.d.ts.map

package/dist/endpoint_security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint_security.d.ts","sourceRoot":"","sources":["../src/endpoint_security.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAG5E,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAmBlC,wBAAgB,uBAAuB,IAAI,OAAO,CAIjD;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,UAAQ,GAAG,OAAO,CAO3E;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,UAAQ,GAAG,OAAO,CAS7E;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,GAAG,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAA;KAAE,CAAC,CAAC;CAC9D;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,UAA4B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA+BtH;AAED,MAAM,WAAW,cAAc;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAEnG,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,SAAS,EAAE,MAAM,EACjB,SAAS,UAAO,EAChB,aAAa,SAAI,GAChB,OAAO,CAAC,cAAc,CAAC,CAyCzB"}

package/dist/endpoint_security.js

@@ -0,0 +1,141 @@
+"use strict";
+/** DNS-aware provider endpoint validation and connection pinning (#667). */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.privateEndpointsAllowed = privateEndpointsAllowed;
+exports.hostnameAllowed = hostnameAllowed;
+exports.addressAllowed = addressAllowed;
+exports.resolveEndpoint = resolveEndpoint;
+exports.postJsonPinned = postJsonPinned;
+const promises_1 = require("node:dns/promises");
+const http = require("node:http");
+const https = require("node:https");
+const node_net_1 = require("node:net");
+const BLOCKED_SUFFIXES = [".local", ".internal", ".lan", ".test", ".invalid", ".localhost"];
+const blocked = new node_net_1.BlockList();
+for (const [network, prefix] of [
+    ["0.0.0.0", 8], ["10.0.0.0", 8], ["100.64.0.0", 10], ["127.0.0.0", 8],
+    ["169.254.0.0", 16], ["172.16.0.0", 12], ["192.0.0.0", 24], ["192.0.2.0", 24], ["192.168.0.0", 16],
+    ["198.18.0.0", 15], ["198.51.100.0", 24], ["203.0.113.0", 24], ["224.0.0.0", 4],
+    ["240.0.0.0", 4],
+])
+    blocked.addSubnet(network, prefix, "ipv4");
+for (const [network, prefix] of [
+    ["::", 128], ["::1", 128], ["100::", 64], ["2001:db8::", 32], ["fc00::", 7],
+    ["fe80::", 10], ["ff00::", 8],
+])
+    blocked.addSubnet(network, prefix, "ipv6");
+function privateEndpointsAllowed() {
+    return ["1", "true", "yes"].includes((process.env.IICP_PROXY_ALLOW_LOOPBACK_NODES ?? "").trim().toLowerCase());
+}
+function hostnameAllowed(host, allowPrivate = false) {
+    if (!host)
+        return false;
+    if (allowPrivate)
+        return true;
+    const normalized = host.replace(/\.$/, "").toLowerCase();
+    if (["localhost", "0.0.0.0", "::1", "::"].includes(normalized))
+        return false;
+    if (BLOCKED_SUFFIXES.some((suffix) => normalized.endsWith(suffix)))
+        return false;
+    return (0, node_net_1.isIP)(normalized) !== 0 || normalized.includes(".") || normalized.includes(":");
+}
+function addressAllowed(address, allowPrivate = false) {
+    if (allowPrivate)
+        return true;
+    const family = (0, node_net_1.isIP)(address);
+    if (family === 0)
+        return false;
+    if (family === 4)
+        return !blocked.check(address, "ipv4");
+    const dottedMapped = /^::ffff:(\d+\.\d+\.\d+\.\d+)$/i.exec(address);
+    if (dottedMapped)
+        return addressAllowed(dottedMapped[1], false);
+    if (/^::ffff:/i.test(address))
+        return false; // conservatively refuse hexadecimal mapped forms
+    return !blocked.check(address, "ipv6");
+}
+async function resolveEndpoint(url, allowPrivate = privateEndpointsAllowed()) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new Error("IICP-ENDPOINT-REFUSED: invalid provider URL");
+    }
+    if (!["http:", "https:"].includes(parsed.protocol)) {
+        throw new Error("IICP-ENDPOINT-REFUSED: provider endpoint must use HTTP or HTTPS");
+    }
+    if (parsed.username || parsed.password) {
+        throw new Error("IICP-ENDPOINT-REFUSED: provider endpoint must not contain user info");
+    }
+    const host = parsed.hostname.replace(/^\[|\]$/g, "").replace(/\.$/, "").toLowerCase();
+    if (!hostnameAllowed(host, allowPrivate)) {
+        throw new Error("IICP-ENDPOINT-REFUSED: provider hostname is prohibited by network policy");
+    }
+    const port = Number(parsed.port || (parsed.protocol === "https:" ? 443 : 80));
+    let answers;
+    const literalFamily = (0, node_net_1.isIP)(host);
+    if (literalFamily) {
+        answers = [{ address: host, family: literalFamily }];
+    }
+    else {
+        try {
+            answers = await (0, promises_1.lookup)(host, { all: true, verbatim: true });
+        }
+        catch {
+            throw new Error("IICP-ENDPOINT-REFUSED: provider hostname resolution failed");
+        }
+    }
+    const unique = [...new Map(answers.map((answer) => [`${answer.family}:${answer.address}`, answer])).values()];
+    if (unique.length === 0)
+        throw new Error("IICP-ENDPOINT-REFUSED: provider hostname returned no addresses");
+    if (unique.some((answer) => !addressAllowed(answer.address, allowPrivate))) {
+        throw new Error("IICP-ENDPOINT-REFUSED: provider hostname resolved to a prohibited address");
+    }
+    return { url: parsed, host, port, addresses: unique };
+}
+async function postJsonPinned(url, body, headers, timeoutMs, tlsVerify = true, redirectCount = 0) {
+    const endpoint = await resolveEndpoint(url);
+    const selected = endpoint.addresses[0];
+    const payload = JSON.stringify(body);
+    const requestHeaders = { ...headers, "Content-Length": String(Buffer.byteLength(payload)) };
+    const transport = endpoint.url.protocol === "https:" ? https : http;
+    const pinnedLookup = (_hostname, _options, callback) => {
+        callback(null, selected.address, selected.family);
+    };
+    const response = await new Promise((resolve, reject) => {
+        const req = transport.request({
+            protocol: endpoint.url.protocol,
+            hostname: endpoint.host,
+            port: endpoint.port,
+            path: `${endpoint.url.pathname}${endpoint.url.search}`,
+            method: "POST",
+            headers: requestHeaders,
+            servername: endpoint.host,
+            rejectUnauthorized: tlsVerify,
+            agent: false,
+            lookup: pinnedLookup,
+        }, (res) => {
+            const chunks = [];
+            res.on("data", (chunk) => chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)));
+            res.on("end", () => resolve({ status: res.statusCode ?? 0, headers: res.headers, text: Buffer.concat(chunks).toString("utf8") }));
+        });
+        req.setTimeout(timeoutMs, () => req.destroy(new Error(`Request timed out after ${timeoutMs}ms`)));
+        req.on("error", reject);
+        req.end(payload);
+    });
+    if (response.status === 307 || response.status === 308) {
+        const location = response.headers.location;
+        if (!location || redirectCount >= 3)
+            throw new Error("IICP-ENDPOINT-REFUSED: provider redirect limit exceeded or omitted Location");
+        const next = new URL(location, endpoint.url);
+        if (next.origin !== endpoint.url.origin)
+            throw new Error("IICP-ENDPOINT-REFUSED: cross-origin provider redirect is not allowed");
+        return postJsonPinned(next.toString(), body, headers, timeoutMs, tlsVerify, redirectCount + 1);
+    }
+    if (response.status >= 300 && response.status < 400) {
+        throw new Error("IICP-ENDPOINT-REFUSED: provider redirect method is not allowed");
+    }
+    return response;
+}
+//# sourceMappingURL=endpoint_security.js.map

package/dist/endpoint_security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint_security.js","sourceRoot":"","sources":["../src/endpoint_security.ts"],"names":[],"mappings":";AAAA,4EAA4E;;AAsB5E,0DAIC;AAED,0CAOC;AAED,wCASC;AASD,0CA+BC;AAID,wCAgDC;AAxID,gDAAwD;AACxD,kCAAkC;AAClC,oCAAoC;AACpC,uCAA2C;AAG3C,MAAM,gBAAgB,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;AAC5F,MAAM,OAAO,GAAG,IAAI,oBAAS,EAAE,CAAC;AAEhC,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;IAC9B,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC;IAClG,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/E,CAAC,WAAW,EAAE,CAAC,CAAC;CACU;IAAE,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AACzE,KAAK,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI;IAC9B,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;CACH;IAAE,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEzE,SAAgB,uBAAuB;IACrC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAClC,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CACzE,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAAC,IAAY,EAAE,YAAY,GAAG,KAAK;IAChE,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAA,eAAI,EAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,SAAgB,cAAc,CAAC,OAAe,EAAE,YAAY,GAAG,KAAK;IAClE,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAA,eAAI,EAAC,OAAO,CAAC,CAAC;IAC7B,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/B,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,gCAAgC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,YAAY;QAAE,OAAO,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChE,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,iDAAiD;IAC9F,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AASM,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,YAAY,GAAG,uBAAuB,EAAE;IACzF,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAAC,CAAC;IACxG,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACtF,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,IAAI,OAAkD,CAAC;IACvD,MAAM,aAAa,GAAG,IAAA,eAAI,EAAC,IAAI,CAAC,CAAC;IACjC,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAsB,EAAE,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,IAAA,iBAAS,EAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAA8C,CAAC;QAC9G,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9G,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC3G,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACxD,CAAC;AAIM,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,IAAa,EACb,OAA+B,EAC/B,SAAiB,EACjB,SAAS,GAAG,IAAI,EAChB,aAAa,GAAG,CAAC;IAEjB,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,YAAY,GAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;QACrE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrE,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5B,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ;YAC/B,QAAQ,EAAE,QAAQ,CAAC,IAAI;YACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,cAAc;YACvB,UAAU,EAAE,QAAQ,CAAC,IAAI;YACzB,kBAAkB,EAAE,SAAS;YAC7B,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,YAAY;SACrB,EAAE,CAAC,GAAyB,EAAE,EAAE;YAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7G,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACpI,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,2BAA2B,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC;QAClG,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC3C,IAAI,CAAC,QAAQ,IAAI,aAAa,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACpI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QACjI,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,GAAG,CAAC,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/index.d.ts

@@ -4,6 +4,10 @@ export { evaluatePreNormativeProfile } from "./profile_compatibility.js";
 export type { ProfileCompatibilityDecision } from "./profile_compatibility.js";
 export type { DiscoveryResult, ProfileNegotiation, ProfileRequest, RouteConstraints } from "./types.js";
 export { projectExecutionConstraints, projectRouteOptions } from "./request_projection.js";
+export { DISPATCH_TICKET_V2_PROFILE, FileDispatchTrustBundleStore, LocalDispatchReplayCache, TrustBundleStoreCorrupt, TrustBundleStoreError, TrustBundleStoreLocked, canonicalDispatchTrustBundle, canonicalTicketClaims, verifyDispatchTicketV2, } from "./dispatch_ticket_trust.js";
+export type { DispatchTicketBindings, AdminRecoveryAuthorization, DispatchTrustBundle, DispatchTrustDecision, DispatchTrustKey, StoredDispatchTrustBundle, TrustBundleInstallResult, TrustBundleInstallStatus, TrustBundleStore, } from "./dispatch_ticket_trust.js";
+export { BackendCancellationRegistry, BoundedObserverBuffer, LifecycleConflict, LifecycleResumeUnavailable, LifecycleStore, ObserverLagged, SERVICE_LIFECYCLE_PROFILE, TERMINAL_LIFECYCLE_STATES, UnknownLifecycleTask } from "./service_lifecycle.js";
+export type { BackendCancellationEvidence, BackendCancellationEvidenceLevel, BackendCancellationHandler, BackendCancellationOutcome, LifecycleEvent, LifecycleRecord, LifecycleSnapshot } from "./service_lifecycle.js";
 export { IicpError } from "./errors.js";
 export { IicpNode } from "./node.js";
 export { McpToolPolicy, toolRiskLabel, TOOL_RISK_KEYWORDS } from "./mcp_policy.js";
@@ -26,6 +30,7 @@ export type { AnthropicOptions } from "./backends/anthropic.js";
 export { getBackendHandler, BACKEND_TYPES } from "./backends/index.js";
 export type { BackendType } from "./backends/index.js";
 export type { BackendHandler, BackendOptions } from "./backends/base.js";
+export { withBackendCancellation } from "./backends/base.js";
 export { qosPriority, isQueueEligible, QOS_PRIORITY, QUEUE_ELIGIBLE, QUEUE_WAIT_MS } from "./scheduler.js";
 export { AvailabilityEvaluator } from "./availability.js";
 export type { Window } from "./availability.js";
@@ -48,4 +53,14 @@ export { CapacityExceededError, ConcurrencyGate } from "./concurrency.js";
 export { RECOVERY_EXIT_CODE, DEFAULT_RECOVERY_GRACE_CHECKS, DEFAULT_RECOVERY_CHECK_EVERY_HEARTBEATS, nodeRegistryPrefix, envGraceChecks, envCheckEveryHeartbeats, supervisedRecoveryEnabled, classifyRecovery, registryNodePresence, } from "./recovery.js";
 export type { RecoveryState, RecoveryAction, DirectoryPresence } from "./recovery.js";
 export type { ChatMessage, ChatOptions, ChatResponse, ChatChoice, ChatUsage, ClientConfig, DiscoverOptions, Node, RoutingPolicy, RoutingProfile, TaskAuth, TaskConstraints, TaskMetrics, TaskRequest, TaskResponse, } from "./types.js";
+export { evaluatePolicyDataHandling } from "./policy_data_handling.js";
+export { evaluatePolicyOperationalEvidence } from "./policy_operational_evidence.js";
+export type { PolicyEvidenceDecision, PolicyEvidenceRecord } from "./policy_operational_evidence.js";
+export { POLICY_DETAIL_FIELDS, evaluatePolicyDetailDisclosure, verifyPolicyDetailConsumerToken } from "./policy_detail_disclosure.js";
+export type { PolicyDetailDisclosureDecision } from "./policy_detail_disclosure.js";
+export { evaluateDistributedLifecycle } from "./service_lifecycle_distributed.js";
+export { evaluateLifecycleIdentity } from "./service_lifecycle_identity.js";
+export type { PolicyDataDecision, PolicyDataRecord } from "./policy_data_handling.js";
+export { decideLifecycleAccounting } from "./service_lifecycle_accounting.js";
+export type { LifecycleAccountingDecision, LifecycleAccountingInput, } from "./service_lifecycle_accounting.js";
 //# sourceMappingURL=index.d.ts.map