@ixo/flow-work 0.1.0

package/README.md

@@ -0,0 +1,49 @@
+# @ixo/flow-work
+
+Oracle-side flow-work plugin: accept UCAN-delegated `ixo.flow.work` invocations
+from the IXO flow-manager over Matrix and post receipts.
+
+It is the oracle half of the flow-work contract. Flow-manager discovers a
+capable oracle, mints a UCAN delegation scoped to a flow node, and sends an
+`ixo.flow.work.invoke` event carrying the work brief by value. `FlowWorkListener`
+validates the delegation (audience, expiry, signature chain, nb caveats),
+runs the matching capability handler, and posts an `ixo.flow.work.receipt`.
+The oracle never gains read authority over anything — inputs arrive in the
+invocation, the result leaves in the receipt.
+
+## Install
+
+```sh
+pnpm add @ixo/flow-work
+```
+
+Peer dependencies: `@ixo/oracle-runtime`, `@ixo/ucan`, `@nestjs/common`,
+`matrix-js-sdk`.
+
+## Releasing
+
+This package versions independently of the flow-manager app via
+[Changesets](https://github.com/changesets/changesets). It lives outside the
+pnpm workspace with its own lockfile, so its Changesets setup is self-contained
+in this directory.
+
+1. Make your change, then record it:
+
+   ```sh
+   cd packages/flow-work
+   pnpm changeset          # pick patch / minor / major, write a summary
+   ```
+
+   Commit the generated `.changeset/*.md` file with your PR.
+
+2. On merge to `main`, the **Release @ixo/flow-work** workflow opens a
+   `release/flow-work` PR that bumps `package.json` + `CHANGELOG.md`.
+
+3. Merging that PR publishes the new version to npm via OIDC trusted publishing.
+
+A change with no changeset never releases this package, and a change to the
+flow-manager app never releases this package — the two version independently.
+
+> The initial `0.1.0` publish is a one-time manual bootstrap
+> (`publish-flow-work.yml`, run from the Actions tab). Configure the npm trusted
+> publisher after that first release; the Changesets workflow needs no token.

package/dist/capability.d.ts

@@ -0,0 +1,26 @@
+import type { z } from 'zod';
+/**
+ * A contractable capability: the unit of work this oracle accepts from
+ * flow-manager. `can` is what flow-manager discovers and delegates
+ * (`cap:<can>` keyword on the domain card); `actionType` narrows which
+ * handler runs; the handler is a plain async function — no coupling to the
+ * runtime's tool registry.
+ */
+export interface FlowWorkCapability<Schema extends z.ZodType = z.ZodType> {
+    /** Capability ability, e.g. 'flow/diagnose'. Must match the UCAN grant. */
+    can: string;
+    /** Work discriminator within the capability, e.g. 'diagnose_http_request'. */
+    actionType: string;
+    description: string;
+    /**
+     * Claim schema constraints published on the domain card — the structured
+     * list flow-manager filters on. An empty array means no schema restriction
+     * (matches any). Omit entirely for capabilities that don't touch claims.
+     */
+    claimSchemas?: string[];
+    /** Validates the invocation's `inputs` before the handler runs. */
+    inputSchema: Schema;
+    handler: (inputs: z.infer<Schema>) => Promise<unknown>;
+}
+export declare function findCapability(capabilities: readonly FlowWorkCapability[], can: string, actionType: string): FlowWorkCapability | undefined;
+//# sourceMappingURL=capability.d.ts.map

package/dist/capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB,CAAC,MAAM,SAAS,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO;IACtE,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,mEAAmE;IACnE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD;AAED,wBAAgB,cAAc,CAC5B,YAAY,EAAE,SAAS,kBAAkB,EAAE,EAC3C,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,GACjB,kBAAkB,GAAG,SAAS,CAIhC"}

package/dist/capability.js

@@ -0,0 +1,4 @@
+export function findCapability(capabilities, can, actionType) {
+    return capabilities.find((entry) => entry.can === can && entry.actionType === actionType);
+}
+//# sourceMappingURL=capability.js.map

package/dist/capability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.js","sourceRoot":"","sources":["../src/capability.ts"],"names":[],"mappings":"AA0BA,MAAM,UAAU,cAAc,CAC5B,YAA2C,EAC3C,GAAW,EACX,UAAkB;IAElB,OAAO,YAAY,CAAC,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,CAChE,CAAC;AACJ,CAAC"}

package/dist/flow-work.plugin.d.ts

@@ -0,0 +1,24 @@
+import { OraclePlugin, z, type PluginContext, type PluginManifest } from '@ixo/oracle-runtime';
+import { type DynamicModule } from '@nestjs/common';
+import type * as sdk from 'matrix-js-sdk';
+import type { FlowWorkCapability } from './capability.js';
+export interface FlowWorkPluginOptions {
+    matrixClient: sdk.MatrixClient;
+    capabilities: FlowWorkCapability[];
+}
+export declare class FlowWorkPlugin extends OraclePlugin {
+    private readonly options;
+    readonly name = "flow-work";
+    readonly version = "0.1.0";
+    readonly manifest: PluginManifest;
+    readonly configSchema: z.ZodObject<{
+        FLOW_WORK_TRUSTED_HOMESERVERS: z.ZodString;
+        ORACLE_ENTITY_DID: z.ZodString;
+        BLOCKSYNC_GRAPHQL_URL: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    readonly autoDetectHint = "FLOW_WORK_TRUSTED_HOMESERVERS";
+    constructor(options: FlowWorkPluginOptions);
+    autoDetect(env: NodeJS.ProcessEnv): boolean;
+    getNestModules(ctx?: PluginContext): DynamicModule[];
+}
+//# sourceMappingURL=flow-work.plugin.d.ts.map

package/dist/flow-work.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-work.plugin.d.ts","sourceRoot":"","sources":["../src/flow-work.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,CAAC,EACD,KAAK,aAAa,EAClB,KAAK,cAAc,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,aAAa,EAGnB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,KAAK,GAAG,MAAM,eAAe,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AA4B1D,MAAM,WAAW,qBAAqB;IACpC,YAAY,EAAE,GAAG,CAAC,YAAY,CAAC;IAC/B,YAAY,EAAE,kBAAkB,EAAE,CAAC;CACpC;AAED,qBAAa,cAAe,SAAQ,YAAY;IAWlC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAVpC,QAAQ,CAAC,IAAI,eAAe;IAE5B,QAAQ,CAAC,OAAO,WAAW;IAE3B,QAAQ,CAAC,QAAQ,iBAAY;IAE7B,SAAkB,YAAY;;;;sBAAgB;IAE9C,SAAkB,cAAc,mCAAmC;gBAEtC,OAAO,EAAE,qBAAqB;IAIlD,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO;IAI3C,cAAc,CAAC,GAAG,CAAC,EAAE,aAAa,GAAG,aAAa,EAAE;CAiD9D"}

package/dist/flow-work.plugin.js

@@ -0,0 +1,92 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { OraclePlugin, z, } from '@ixo/oracle-runtime';
+import { Module, } from '@nestjs/common';
+import { FlowWorkListener } from './listener.js';
+import { adaptMatrixClient } from './matrix-port.js';
+import { buildDelegationValidator } from './ucan.js';
+const configSchema = z.object({
+    /** Comma-separated homeserver domains whose room invites are accepted. */
+    FLOW_WORK_TRUSTED_HOMESERVERS: z.string().trim().min(1),
+    /** This oracle's DID — the expected UCAN delegation audience. */
+    ORACLE_ENTITY_DID: z.string().trim().min(1),
+    /** Blocksync GraphQL endpoint for did:ixo key resolution. */
+    BLOCKSYNC_GRAPHQL_URL: z.string().url().optional(),
+});
+const manifest = {
+    title: 'Flow Work',
+    summary: 'Accepts contracted work from flow-manager: joins trusted rooms, validates UCAN-delegated ' +
+        'ixo.flow.work.invoke events, runs the declared capability handler, and posts receipts.',
+    whenToUse: [],
+    whenNotToUse: [],
+    examples: [],
+    tags: ['flow', 'delegation', 'ucan', 'matrix'],
+    category: 'automation',
+    visibility: 'silent',
+    stability: 'experimental',
+};
+export class FlowWorkPlugin extends OraclePlugin {
+    options;
+    name = 'flow-work';
+    version = '0.1.0';
+    manifest = manifest;
+    configSchema = configSchema;
+    autoDetectHint = 'FLOW_WORK_TRUSTED_HOMESERVERS';
+    constructor(options) {
+        super();
+        this.options = options;
+    }
+    autoDetect(env) {
+        return Boolean(env.FLOW_WORK_TRUSTED_HOMESERVERS?.trim());
+    }
+    getNestModules(ctx) {
+        if (!ctx)
+            throw new Error('FlowWorkPlugin requires a PluginContext');
+        const config = configSchema.parse(ctx.config);
+        const trustedHomeservers = config.FLOW_WORK_TRUSTED_HOMESERVERS.split(',')
+            .map((value) => value.trim())
+            .filter((value) => value.length > 0);
+        const logger = ctx.logger;
+        const listener = new FlowWorkListener({
+            port: adaptMatrixClient(this.options.matrixClient),
+            oracleDid: config.ORACLE_ENTITY_DID,
+            trustedHomeservers,
+            capabilities: this.options.capabilities,
+            validateDelegation: buildDelegationValidator({
+                oracleDid: config.ORACLE_ENTITY_DID,
+                blocksyncUrl: config.BLOCKSYNC_GRAPHQL_URL,
+            }),
+            logger,
+        });
+        const matrixClient = this.options.matrixClient;
+        class FlowWorkLifecycle {
+            onModuleInit() {
+                // The shared client is also used by EditorPlugin; only start it if
+                // nothing else has.
+                if (!matrixClient.clientRunning) {
+                    void matrixClient.startClient();
+                }
+                listener.start();
+            }
+            onModuleDestroy() {
+                listener.stop();
+            }
+        }
+        let FlowWorkModule = class FlowWorkModule {
+        };
+        FlowWorkModule = __decorate([
+            Module({ providers: [FlowWorkLifecycle] })
+        ], FlowWorkModule);
+        return [
+            {
+                module: FlowWorkModule,
+                providers: [FlowWorkLifecycle],
+            },
+        ];
+    }
+}
+//# sourceMappingURL=flow-work.plugin.js.map

package/dist/flow-work.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-work.plugin.js","sourceRoot":"","sources":["../src/flow-work.plugin.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EACL,YAAY,EACZ,CAAC,GAGF,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,MAAM,GAIP,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,gBAAgB,EAAuB,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAErD,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,6BAA6B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,iEAAiE;IACjE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,6DAA6D;IAC7D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAmB;IAC/B,KAAK,EAAE,WAAW;IAClB,OAAO,EACL,2FAA2F;QAC3F,wFAAwF;IAC1F,SAAS,EAAE,EAAE;IACb,YAAY,EAAE,EAAE;IAChB,QAAQ,EAAE,EAAE;IACZ,IAAI,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC9C,QAAQ,EAAE,YAAY;IACtB,UAAU,EAAE,QAAQ;IACpB,SAAS,EAAE,cAAc;CAC1B,CAAC;AAOF,MAAM,OAAO,cAAe,SAAQ,YAAY;IAWjB;IAVpB,IAAI,GAAG,WAAW,CAAC;IAEnB,OAAO,GAAG,OAAO,CAAC;IAElB,QAAQ,GAAG,QAAQ,CAAC;IAEX,YAAY,GAAG,YAAY,CAAC;IAE5B,cAAc,GAAG,+BAA+B,CAAC;IAEnE,YAA6B,OAA8B;QACzD,KAAK,EAAE,CAAC;QADmB,YAAO,GAAP,OAAO,CAAuB;IAE3D,CAAC;IAEQ,UAAU,CAAC,GAAsB;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAEQ,cAAc,CAAC,GAAmB;QACzC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAE9C,MAAM,kBAAkB,GAAG,MAAM,CAAC,6BAA6B,CAAC,KAAK,CAAC,GAAG,CAAC;aACvE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAmB,GAAG,CAAC,MAAM,CAAC;QAE1C,MAAM,QAAQ,GAAG,IAAI,gBAAgB,CAAC;YACpC,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;YAClD,SAAS,EAAE,MAAM,CAAC,iBAAiB;YACnC,kBAAkB;YAClB,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY;YACvC,kBAAkB,EAAE,wBAAwB,CAAC;gBAC3C,SAAS,EAAE,MAAM,CAAC,iBAAiB;gBACnC,YAAY,EAAE,MAAM,CAAC,qBAAqB;aAC3C,CAAC;YACF,MAAM;SACP,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;QAE/C,MAAM,iBAAiB;YACrB,YAAY;gBACV,mEAAmE;gBACnE,oBAAoB;gBACpB,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;oBAChC,KAAK,YAAY,CAAC,WAAW,EAAE,CAAC;gBAClC,CAAC;gBACD,QAAQ,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC;YAED,eAAe;gBACb,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClB,CAAC;SACF;QAGD,IAAM,cAAc,GAApB,MAAM,cAAc;SAAG,CAAA;QAAjB,cAAc;YADnB,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC;WACrC,cAAc,CAAG;QAEvB,OAAO;YACL;gBACE,MAAM,EAAE,cAAc;gBACtB,SAAS,EAAE,CAAC,iBAAiB,CAAC;aAC/B;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,7 @@
+export { FlowWorkPlugin, type FlowWorkPluginOptions, } from './flow-work.plugin.js';
+export { findCapability, type FlowWorkCapability } from './capability.js';
+export { FlowWorkListener, homeserverOf } from './listener.js';
+export { adaptMatrixClient, type FlowWorkMatrixPort } from './matrix-port.js';
+export { FLOW_WORK_ASSIGN_EVENT, FLOW_WORK_INVOKE_EVENT, FLOW_WORK_RECEIPT_EVENT, flowWorkInvokeSchema, type FlowWorkErrorCode, type FlowWorkInvoke, type FlowWorkReceipt, } from './protocol.js';
+export { buildDelegationValidator, type DelegationValidator } from './ucan.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,wBAAwB,EAAE,KAAK,mBAAmB,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+export { FlowWorkPlugin, } from './flow-work.plugin.js';
+export { findCapability } from './capability.js';
+export { FlowWorkListener, homeserverOf } from './listener.js';
+export { adaptMatrixClient } from './matrix-port.js';
+export { FLOW_WORK_ASSIGN_EVENT, FLOW_WORK_INVOKE_EVENT, FLOW_WORK_RECEIPT_EVENT, flowWorkInvokeSchema, } from './protocol.js';
+export { buildDelegationValidator } from './ucan.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,GAEf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,cAAc,EAA2B,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAA2B,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,GAIrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,wBAAwB,EAA4B,MAAM,WAAW,CAAC"}

package/dist/listener.d.ts

@@ -0,0 +1,51 @@
+import { type FlowWorkCapability } from './capability.js';
+import type { FlowWorkMatrixPort } from './matrix-port.js';
+import type { DelegationValidator } from './ucan.js';
+export interface FlowWorkLogger {
+    log(message: string): void;
+    warn(message: string): void;
+    error(message: string): void;
+}
+export interface FlowWorkListenerOptions {
+    port: FlowWorkMatrixPort;
+    /** This oracle's DID — invocations addressed elsewhere are ignored. */
+    oracleDid: string;
+    /** Homeserver domains whose room invites are accepted. */
+    trustedHomeservers: readonly string[];
+    capabilities: readonly FlowWorkCapability[];
+    validateDelegation: DelegationValidator;
+    logger: FlowWorkLogger;
+    /** How many recent room events to scan for an existing receipt. */
+    receiptScanLimit?: number;
+}
+/** Hostname of '@user:server.tld' or a bare/prefixed server name. */
+export declare function homeserverOf(value: string): string | null;
+/**
+ * The oracle side of the flow-work contract: accepts invites from trusted
+ * homeservers, executes UCAN-authorized `ixo.flow.work.invoke` events via
+ * the declared capability handlers, and posts `ixo.flow.work.receipt`s.
+ */
+export declare class FlowWorkListener {
+    private readonly options;
+    private readonly trusted;
+    private readonly active;
+    private readonly completed;
+    private unsubscribe;
+    constructor(options: FlowWorkListenerOptions);
+    start(): void;
+    stop(): void;
+    private handleInvite;
+    private handleRoomEvent;
+    /**
+     * Bind nb caveats to the invocation before executing. A delegation minted
+     * for one claim schema must not be reusable with unrelated claim data:
+     * `nb.claimSchema` requires the invocation's `inputs.claimSchemaId` to be
+     * present and equal.
+     */
+    private enforceCaveats;
+    private execute;
+    private hasExistingReceipt;
+    private postFailure;
+    private postReceipt;
+}
+//# sourceMappingURL=listener.d.ts.map

package/dist/listener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"listener.d.ts","sourceRoot":"","sources":["../src/listener.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,KAAK,EAEV,kBAAkB,EAEnB,MAAM,kBAAkB,CAAC;AAS1B,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAErD,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,kBAAkB,CAAC;IACzB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAC5C,kBAAkB,EAAE,mBAAmB,CAAC;IACxC,MAAM,EAAE,cAAc,CAAC;IACvB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAYD,qEAAqE;AACrE,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiBzD;AAMD;;;;GAIG;AACH,qBAAa,gBAAgB;IAMf,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,WAAW,CAAyB;gBAEf,OAAO,EAAE,uBAAuB;IAa7D,KAAK,IAAI,IAAI;IAuBb,IAAI,IAAI,IAAI;YAKE,YAAY;YAcZ,eAAe;IAgE7B;;;;;OAKG;IACH,OAAO,CAAC,cAAc;YAiBR,OAAO;IAqDrB,OAAO,CAAC,kBAAkB;YAYZ,WAAW;YAcX,WAAW;CAQ1B"}

package/dist/listener.js

@@ -0,0 +1,226 @@
+import { findCapability } from './capability.js';
+import { FLOW_WORK_INVOKE_EVENT, FLOW_WORK_RECEIPT_EVENT, flowWorkInvokeSchema, } from './protocol.js';
+class FlowWorkFailure extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'FlowWorkFailure';
+    }
+}
+/** Hostname of '@user:server.tld' or a bare/prefixed server name. */
+export function homeserverOf(value) {
+    let candidate = value.trim().toLowerCase();
+    if (candidate.startsWith('@')) {
+        const separator = candidate.indexOf(':');
+        if (separator < 0)
+            return null;
+        candidate = candidate.slice(separator + 1);
+    }
+    if (candidate === '')
+        return null;
+    try {
+        return new URL(candidate.includes('://') ? candidate : `matrix://${candidate}`).hostname
+            .replace(/\.$/, '')
+            .toLowerCase();
+    }
+    catch {
+        return null;
+    }
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * The oracle side of the flow-work contract: accepts invites from trusted
+ * homeservers, executes UCAN-authorized `ixo.flow.work.invoke` events via
+ * the declared capability handlers, and posts `ixo.flow.work.receipt`s.
+ */
+export class FlowWorkListener {
+    options;
+    trusted;
+    active = new Set();
+    completed = new Set();
+    unsubscribe = [];
+    constructor(options) {
+        this.options = options;
+        const trusted = options.trustedHomeservers
+            .map(homeserverOf)
+            .filter((value) => value !== null);
+        this.trusted = new Set(trusted);
+        if (this.trusted.size === 0) {
+            throw new Error('flow-work has no valid trusted homeserver domains');
+        }
+        if (options.capabilities.length === 0) {
+            throw new Error('flow-work has no declared capabilities');
+        }
+    }
+    start() {
+        const { port, logger } = this.options;
+        this.unsubscribe = [
+            port.onInvite((invite) => {
+                void this.handleInvite(invite).catch((error) => {
+                    logger.error(`[flow-work] invite handling failed: ${message(error)}`);
+                });
+            }),
+            port.onRoomEvent((event) => {
+                void this.handleRoomEvent(event).catch((error) => {
+                    logger.error(`[flow-work] event handling failed in ${event.roomId}: ${message(error)}`);
+                });
+            }),
+        ];
+        logger.log(`[flow-work] listening — capabilities: ${this.options.capabilities
+            .map((entry) => `${entry.can}#${entry.actionType}`)
+            .join(', ')}`);
+    }
+    stop() {
+        for (const off of this.unsubscribe)
+            off();
+        this.unsubscribe = [];
+    }
+    async handleInvite(invite) {
+        const host = homeserverOf(invite.inviterUserId);
+        if (!host || !this.trusted.has(host)) {
+            this.options.logger.warn(`[flow-work] rejected invite to ${invite.roomId} from untrusted sender ${invite.inviterUserId}`);
+            return;
+        }
+        await this.options.port.joinRoom(invite.roomId);
+        this.options.logger.log(`[flow-work] joined ${invite.roomId} (invited by ${invite.inviterUserId})`);
+    }
+    async handleRoomEvent(event) {
+        if (event.type !== FLOW_WORK_INVOKE_EVENT || !isRecord(event.content)) {
+            return;
+        }
+        if (event.content.audience !== this.options.oracleDid)
+            return;
+        const rawId = event.content.invocationId;
+        if (typeof rawId !== 'string' || rawId.trim() === '')
+            return;
+        const invocationId = rawId.trim();
+        const key = `${event.roomId}:${invocationId}`;
+        if (this.active.has(key) || this.completed.has(key))
+            return;
+        this.active.add(key);
+        let receiptPosted = false;
+        try {
+            if (this.hasExistingReceipt(event.roomId, invocationId)) {
+                this.completed.add(key);
+                return;
+            }
+            const parsed = flowWorkInvokeSchema.safeParse(event.content);
+            if (!parsed.success) {
+                await this.postFailure(event.roomId, invocationId, 'input_invalid', parsed.error.issues
+                    .map((issue) => `${issue.path.join('.')}: ${issue.message}`)
+                    .join('; '));
+                receiptPosted = true;
+                this.completed.add(key);
+                return;
+            }
+            const receipt = await this.execute(parsed.data);
+            await this.postReceipt(event.roomId, receipt);
+            receiptPosted = true;
+            this.completed.add(key);
+        }
+        catch (error) {
+            const failure = error instanceof FlowWorkFailure
+                ? error
+                : new FlowWorkFailure('tool_error', message(error));
+            try {
+                await this.postFailure(event.roomId, invocationId, failure.code, failure.message);
+                receiptPosted = true;
+                this.completed.add(key);
+            }
+            catch (postError) {
+                this.options.logger.error(`[flow-work] failed to post receipt for ${invocationId}: ${message(postError)}`);
+            }
+        }
+        finally {
+            this.active.delete(key);
+            if (!receiptPosted)
+                this.completed.delete(key);
+        }
+    }
+    /**
+     * Bind nb caveats to the invocation before executing. A delegation minted
+     * for one claim schema must not be reusable with unrelated claim data:
+     * `nb.claimSchema` requires the invocation's `inputs.claimSchemaId` to be
+     * present and equal.
+     */
+    enforceCaveats(nb, invoke) {
+        const claimSchema = nb?.claimSchema;
+        if (typeof claimSchema !== 'string' || claimSchema === '')
+            return;
+        const provided = invoke.inputs.claimSchemaId;
+        if (provided !== claimSchema) {
+            throw new FlowWorkFailure('delegation_invalid', `Delegation is caveated to claim schema '${claimSchema}' but the invocation carries '${typeof provided === 'string' ? provided : 'none'}'.`);
+        }
+    }
+    async execute(invoke) {
+        const capability = findCapability(this.options.capabilities, invoke.capability, invoke.actionType);
+        if (!capability) {
+            throw new FlowWorkFailure('capability_not_declared', `Capability '${invoke.capability}' with actionType '${invoke.actionType}' is not declared by this oracle.`);
+        }
+        const validation = await this.options.validateDelegation(invoke.delegation);
+        if (!validation.ok) {
+            throw new FlowWorkFailure(validation.code, validation.message);
+        }
+        if (validation.capability &&
+            validation.capability.can !== invoke.capability) {
+            throw new FlowWorkFailure('delegation_invalid', `Delegation grants '${validation.capability.can}', not '${invoke.capability}'.`);
+        }
+        this.enforceCaveats(validation.capability?.nb, invoke);
+        const inputs = capability.inputSchema.safeParse(invoke.inputs);
+        if (!inputs.success) {
+            throw new FlowWorkFailure('input_invalid', inputs.error.issues
+                .map((issue) => `${issue.path.join('.')}: ${issue.message}`)
+                .join('; '));
+        }
+        let output;
+        try {
+            output = await capability.handler(inputs.data);
+        }
+        catch (error) {
+            throw new FlowWorkFailure('tool_error', message(error));
+        }
+        return {
+            invocationId: invoke.invocationId,
+            status: 'success',
+            output: toReceiptOutput(output),
+            error: null,
+        };
+    }
+    hasExistingReceipt(roomId, invocationId) {
+        const limit = this.options.receiptScanLimit ?? 100;
+        return this.options.port
+            .recentEvents(roomId, limit)
+            .some((event) => event.type === FLOW_WORK_RECEIPT_EVENT &&
+            isRecord(event.content) &&
+            event.content.invocationId === invocationId);
+    }
+    async postFailure(roomId, invocationId, code, errorMessage) {
+        await this.postReceipt(roomId, {
+            invocationId,
+            status: 'failure',
+            output: null,
+            error: { code, message: errorMessage },
+        });
+    }
+    async postReceipt(roomId, receipt) {
+        await this.options.port.sendEvent(roomId, FLOW_WORK_RECEIPT_EVENT, {
+            ...receipt,
+        });
+    }
+}
+function toReceiptOutput(value) {
+    if (value === null || value === undefined)
+        return null;
+    const json = JSON.stringify(value);
+    if (json === undefined)
+        return { value: null };
+    const serializable = JSON.parse(json);
+    return isRecord(serializable) ? serializable : { value: serializable };
+}
+function message(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=listener.js.map

package/dist/listener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"listener.js","sourceRoot":"","sources":["../src/listener.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAA2B,MAAM,iBAAiB,CAAC;AAM1E,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,GAIrB,MAAM,eAAe,CAAC;AAsBvB,MAAM,eAAgB,SAAQ,KAAK;IAEtB;IADX,YACW,IAAuB,EAChC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,SAAI,GAAJ,IAAI,CAAmB;QAIhC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,qEAAqE;AACrE,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,SAAS,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,SAAS,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CACZ,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,SAAS,EAAE,CAChE,CAAC,QAAQ;aACP,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;aAClB,WAAW,EAAE,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAME;IALZ,OAAO,CAAsB;IAC7B,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3B,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,WAAW,GAAsB,EAAE,CAAC;IAE5C,YAA6B,OAAgC;QAAhC,YAAO,GAAP,OAAO,CAAyB;QAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB;aACvC,GAAG,CAAC,YAAY,CAAC;aACjB,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,KAAK;QACH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG;YACjB,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE;gBACvB,KAAK,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACtD,MAAM,CAAC,KAAK,CAAC,uCAAuC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACxE,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,EAAE;gBACzB,KAAK,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBACxD,MAAM,CAAC,KAAK,CACV,wCAAwC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,CAC1E,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC,CAAC;SACH,CAAC;QACF,MAAM,CAAC,GAAG,CACR,yCAAyC,IAAI,CAAC,OAAO,CAAC,YAAY;aAC/D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IAED,IAAI;QACF,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,WAAW;YAAE,GAAG,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,MAAsB;QAC/C,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CACtB,kCAAkC,MAAM,CAAC,MAAM,0BAA0B,MAAM,CAAC,aAAa,EAAE,CAChG,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CACrB,sBAAsB,MAAM,CAAC,MAAM,gBAAgB,MAAM,CAAC,aAAa,GAAG,CAC3E,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,KAAwB;QACpD,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACtE,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO;QAE9D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;QACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO;QAC7D,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC5D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErB,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;gBACxD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,CAAC,WAAW,CACpB,KAAK,CAAC,MAAM,EACZ,YAAY,EACZ,eAAe,EACf,MAAM,CAAC,KAAK,CAAC,MAAM;qBAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;qBAC3D,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;gBACF,aAAa,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACxB,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC9C,aAAa,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,eAAe;gBAC9B,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACxD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,WAAW,CACpB,KAAK,CAAC,MAAM,EACZ,YAAY,EACZ,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,OAAO,CAChB,CAAC;gBACF,aAAa,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CACvB,0CAA0C,YAAY,KAAK,OAAO,CAAC,SAAS,CAAC,EAAE,CAChF,CAAC;YACJ,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,aAAa;gBAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACK,cAAc,CACpB,EAAuC,EACvC,MAAsB;QAEtB,MAAM,WAAW,GAAG,EAAE,EAAE,WAAW,CAAC;QACpC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,EAAE;YAAE,OAAO;QAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;QAC7C,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,2CAA2C,WAAW,iCACpD,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAC5C,IAAI,CACL,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAsB;QAC1C,MAAM,UAAU,GAAG,cAAc,CAC/B,IAAI,CAAC,OAAO,CAAC,YAAY,EACzB,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,UAAU,CAClB,CAAC;QACF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CACvB,yBAAyB,EACzB,eAAe,MAAM,CAAC,UAAU,sBAAsB,MAAM,CAAC,UAAU,mCAAmC,CAC3G,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;QACD,IACE,UAAU,CAAC,UAAU;YACrB,UAAU,CAAC,UAAU,CAAC,GAAG,KAAK,MAAM,CAAC,UAAU,EAC/C,CAAC;YACD,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,sBAAsB,UAAU,CAAC,UAAU,CAAC,GAAG,WAAW,MAAM,CAAC,UAAU,IAAI,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,MAAM,CAAC,KAAK,CAAC,MAAM;iBAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;iBAC3D,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;QACJ,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,eAAe,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO;YACL,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC;YAC/B,KAAK,EAAE,IAAI;SACZ,CAAC;IACJ,CAAC;IAEO,kBAAkB,CAAC,MAAc,EAAE,YAAoB;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC;QACnD,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI;aACrB,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;aAC3B,IAAI,CACH,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,IAAI,KAAK,uBAAuB;YACtC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC;YACvB,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,YAAY,CAC9C,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,MAAc,EACd,YAAoB,EACpB,IAAuB,EACvB,YAAoB;QAEpB,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE;YAC7B,YAAY;YACZ,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE;SACvC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,MAAc,EACd,OAAwB;QAExB,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,uBAAuB,EAAE;YACjE,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACjD,OAAO,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/matrix-port.d.ts

@@ -0,0 +1,34 @@
+import type * as sdk from 'matrix-js-sdk';
+/**
+ * The narrow slice of Matrix the flow-work listener needs. The listener
+ * depends on this port, not on matrix-js-sdk — production wraps the real
+ * client (adaptMatrixClient), tests provide an in-memory implementation.
+ */
+declare module 'matrix-js-sdk' {
+    interface TimelineEvents {
+        [key: `ixo.flow.work.${string}`]: Record<string, unknown>;
+    }
+}
+export interface FlowWorkRoomEvent {
+    roomId: string;
+    type: string;
+    content: unknown;
+    sender?: string;
+}
+export interface FlowWorkInvite {
+    roomId: string;
+    inviterUserId: string;
+}
+export interface FlowWorkMatrixPort {
+    /** Register an invite handler. Returns an unsubscribe function. */
+    onInvite(handler: (invite: FlowWorkInvite) => void): () => void;
+    /** Register a room-event handler (decrypted where applicable). Returns unsubscribe. */
+    onRoomEvent(handler: (event: FlowWorkRoomEvent) => void): () => void;
+    joinRoom(roomId: string): Promise<void>;
+    sendEvent(roomId: string, type: `ixo.flow.work.${string}`, content: Record<string, unknown>): Promise<void>;
+    /** Most recent events in a room, newest first — used for receipt replay checks. */
+    recentEvents(roomId: string, limit: number): FlowWorkRoomEvent[];
+}
+/** Wrap a live matrix-js-sdk client in the port interface. */
+export declare function adaptMatrixClient(client: sdk.MatrixClient): FlowWorkMatrixPort;
+//# sourceMappingURL=matrix-port.d.ts.map

package/dist/matrix-port.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix-port.d.ts","sourceRoot":"","sources":["../src/matrix-port.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,GAAG,MAAM,eAAe,CAAC;AAE1C;;;;GAIG;AAIH,OAAO,QAAQ,eAAe,CAAC;IAC7B,UAAU,cAAc;QACtB,CAAC,GAAG,EAAE,iBAAiB,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC3D;CACF;AAID,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAChE,uFAAuF;IACvF,WAAW,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,SAAS,CACP,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,iBAAiB,MAAM,EAAE,EAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,mFAAmF;IACnF,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAAC;CAClE;AAED,8DAA8D;AAC9D,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,GAAG,CAAC,YAAY,GACvB,kBAAkB,CAmFpB"}

package/dist/matrix-port.js

@@ -0,0 +1,63 @@
+/** Wrap a live matrix-js-sdk client in the port interface. */
+export function adaptMatrixClient(client) {
+    return {
+        onInvite(handler) {
+            const membershipHandler = (event, member) => {
+                if (member.membership === 'invite' &&
+                    member.userId === client.getUserId()) {
+                    handler({
+                        roomId: member.roomId,
+                        inviterUserId: event.getSender() ?? '',
+                    });
+                }
+            };
+            client.on('RoomMember.membership', membershipHandler);
+            return () => client.removeListener('RoomMember.membership', membershipHandler);
+        },
+        onRoomEvent(handler) {
+            const emit = (event) => {
+                const roomId = event.getRoomId();
+                if (!roomId || event.isEncrypted())
+                    return;
+                handler({
+                    roomId,
+                    type: event.getType(),
+                    content: event.getContent(),
+                    sender: event.getSender(),
+                });
+            };
+            const timelineHandler = (event) => emit(event);
+            // Encrypted rooms surface events again once decrypted.
+            const decryptedHandler = (event) => emit(event);
+            client.on('Room.timeline', timelineHandler);
+            client.on('Event.decrypted', decryptedHandler);
+            return () => {
+                client.removeListener('Room.timeline', timelineHandler);
+                client.removeListener('Event.decrypted', decryptedHandler);
+            };
+        },
+        async joinRoom(roomId) {
+            await client.joinRoom(roomId);
+        },
+        async sendEvent(roomId, type, content) {
+            await client.sendEvent(roomId, type, content);
+        },
+        recentEvents(roomId, limit) {
+            const room = client.getRoom(roomId);
+            if (!room)
+                return [];
+            return room
+                .getLiveTimeline()
+                .getEvents()
+                .slice(-limit)
+                .reverse()
+                .map((event) => ({
+                roomId,
+                type: event.getType(),
+                content: event.getContent(),
+                sender: event.getSender(),
+            }));
+        },
+    };
+}
+//# sourceMappingURL=matrix-port.js.map

package/dist/matrix-port.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix-port.js","sourceRoot":"","sources":["../src/matrix-port.ts"],"names":[],"mappings":"AA6CA,8DAA8D;AAC9D,MAAM,UAAU,iBAAiB,CAC/B,MAAwB;IAExB,OAAO;QACL,QAAQ,CAAC,OAAO;YACd,MAAM,iBAAiB,GAAG,CACxB,KAAsB,EACtB,MAAsB,EAChB,EAAE;gBACR,IACE,MAAM,CAAC,UAAU,KAAK,QAAQ;oBAC9B,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,SAAS,EAAE,EACpC,CAAC;oBACD,OAAO,CAAC;wBACN,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE;qBACvC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,EAAE,CACP,uBAAyD,EACzD,iBAAiB,CAClB,CAAC;YACF,OAAO,GAAG,EAAE,CACV,MAAM,CAAC,cAAc,CACnB,uBAAyD,EACzD,iBAAiB,CAClB,CAAC;QACN,CAAC;QAED,WAAW,CAAC,OAAO;YACjB,MAAM,IAAI,GAAG,CAAC,KAAsB,EAAQ,EAAE;gBAC5C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE;oBAAE,OAAO;gBAC3C,OAAO,CAAC;oBACN,MAAM;oBACN,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE;oBACrB,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE;oBAC3B,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE;iBAC1B,CAAC,CAAC;YACL,CAAC,CAAC;YACF,MAAM,eAAe,GAAG,CAAC,KAAsB,EAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtE,uDAAuD;YACvD,MAAM,gBAAgB,GAAG,CAAC,KAAsB,EAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,EAAE,CAAC,eAAyC,EAAE,eAAe,CAAC,CAAC;YACtE,MAAM,CAAC,EAAE,CACP,iBAAmD,EACnD,gBAAgB,CACjB,CAAC;YACF,OAAO,GAAG,EAAE;gBACV,MAAM,CAAC,cAAc,CACnB,eAAyC,EACzC,eAAe,CAChB,CAAC;gBACF,MAAM,CAAC,cAAc,CACnB,iBAAmD,EACnD,gBAAgB,CACjB,CAAC;YACJ,CAAC,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM;YACnB,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,IAAuB,EAAE,OAAO;YACtD,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC;QAED,YAAY,CAAC,MAAM,EAAE,KAAK;YACxB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI;iBACR,eAAe,EAAE;iBACjB,SAAS,EAAE;iBACX,KAAK,CAAC,CAAC,KAAK,CAAC;iBACb,OAAO,EAAE;iBACT,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACf,MAAM;gBACN,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE;gBACrB,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE;gBAC3B,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE;aAC1B,CAAC,CAAC,CAAC;QACR,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,32 @@
+import { z } from 'zod';
+/**
+ * The flow-work wire protocol — the Matrix events flow-manager and helper
+ * oracles exchange. Mirror of flow-manager's oracle-delegation plugin
+ * (apps/app/src/plugins/oracle-delegation/oracle-room.ts). If these shapes
+ * change, both sides change together; until this lives in a shared package
+ * the duplication is deliberate and must be kept in sync.
+ */
+export declare const FLOW_WORK_ASSIGN_EVENT = "ixo.flow.work.assign";
+export declare const FLOW_WORK_INVOKE_EVENT = "ixo.flow.work.invoke";
+export declare const FLOW_WORK_RECEIPT_EVENT = "ixo.flow.work.receipt";
+export declare const flowWorkInvokeSchema: z.ZodObject<{
+    invocationId: z.ZodString;
+    capability: z.ZodString;
+    actionType: z.ZodString;
+    nodeId: z.ZodString;
+    inputs: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    delegation: z.ZodString;
+    audience: z.ZodString;
+}, z.core.$strip>;
+export type FlowWorkInvoke = z.infer<typeof flowWorkInvokeSchema>;
+export type FlowWorkErrorCode = 'delegation_invalid' | 'delegation_expired' | 'capability_not_declared' | 'input_invalid' | 'tool_error';
+export interface FlowWorkReceipt {
+    invocationId: string;
+    status: 'success' | 'failure';
+    output: Record<string, unknown> | null;
+    error: {
+        code: FlowWorkErrorCode;
+        message: string;
+    } | null;
+}
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAC7D,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAC7D,eAAO,MAAM,uBAAuB,0BAA0B,CAAC;AAE/D,eAAO,MAAM,oBAAoB;;;;;;;;iBAU/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,MAAM,MAAM,iBAAiB,GACzB,oBAAoB,GACpB,oBAAoB,GACpB,yBAAyB,GACzB,eAAe,GACf,YAAY,CAAC;AAEjB,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,KAAK,EAAE;QAAE,IAAI,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC5D"}

package/dist/protocol.js

@@ -0,0 +1,23 @@
+import { z } from 'zod';
+/**
+ * The flow-work wire protocol — the Matrix events flow-manager and helper
+ * oracles exchange. Mirror of flow-manager's oracle-delegation plugin
+ * (apps/app/src/plugins/oracle-delegation/oracle-room.ts). If these shapes
+ * change, both sides change together; until this lives in a shared package
+ * the duplication is deliberate and must be kept in sync.
+ */
+export const FLOW_WORK_ASSIGN_EVENT = 'ixo.flow.work.assign';
+export const FLOW_WORK_INVOKE_EVENT = 'ixo.flow.work.invoke';
+export const FLOW_WORK_RECEIPT_EVENT = 'ixo.flow.work.receipt';
+export const flowWorkInvokeSchema = z.object({
+    invocationId: z.string().trim().min(1),
+    capability: z.string().trim().min(1),
+    actionType: z.string().trim().min(1),
+    nodeId: z.string().trim().min(1),
+    inputs: z.record(z.string(), z.unknown()),
+    /** Serialized UCAN delegation (base64 CAR) authorizing this work. */
+    delegation: z.string().trim().min(1),
+    /** DID of the oracle this invocation is addressed to. */
+    audience: z.string().trim().min(1),
+});
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,uBAAuB,CAAC;AAE/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACzC,qEAAqE;IACrE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,yDAAyD;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACnC,CAAC,CAAC"}

package/dist/ucan.d.ts

@@ -0,0 +1,34 @@
+/**
+ * UCAN delegation validation for contracted work — same checks the runtime
+ * applies to HTTP requests (audience match, chain expiry, signature chain),
+ * built from the published @ixo/ucan package.
+ */
+export type DelegationOutcome = {
+    ok: true;
+    invokerDid: string;
+    /**
+     * The capability carried by the delegation, including its nb caveats
+     * (e.g. the claimSchema a service contract is pinned to). Note:
+     * @ixo/ucan's ValidateResult surfaces a single capability — delegations
+     * carrying additional capabilities (e.g. supplementary read grants)
+     * need upstream validator support before they can be enumerated here.
+     */
+    capability?: {
+        can: string;
+        with: string;
+        nb?: Record<string, unknown>;
+    };
+    expiration?: number;
+} | {
+    ok: false;
+    code: 'delegation_expired' | 'delegation_invalid';
+    message: string;
+};
+export type DelegationValidator = (serializedDelegation: string) => Promise<DelegationOutcome>;
+export declare function buildDelegationValidator(options: {
+    /** This oracle's DID — the expected delegation audience. */
+    oracleDid: string;
+    /** Blocksync GraphQL endpoint for did:ixo key resolution. Optional: did:key verifies locally. */
+    blocksyncUrl?: string;
+}): DelegationValidator;
+//# sourceMappingURL=ucan.d.ts.map

package/dist/ucan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ucan.d.ts","sourceRoot":"","sources":["../src/ucan.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AAEH,MAAM,MAAM,iBAAiB,GACzB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACD;IACE,EAAE,EAAE,KAAK,CAAC;IACV,IAAI,EAAE,oBAAoB,GAAG,oBAAoB,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEN,MAAM,MAAM,mBAAmB,GAAG,CAChC,oBAAoB,EAAE,MAAM,KACzB,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEhC,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,iGAAiG;IACjG,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,mBAAmB,CA8CtB"}

package/dist/ucan.js

@@ -0,0 +1,43 @@
+import { createIxoDIDResolver, createUCANValidator } from '@ixo/ucan';
+export function buildDelegationValidator(options) {
+    const validatorPromise = createUCANValidator({
+        serverDid: options.oracleDid,
+        rootIssuers: [],
+        ...(options.blocksyncUrl
+            ? {
+                didResolver: createIxoDIDResolver({
+                    indexerUrl: options.blocksyncUrl,
+                }),
+            }
+            : {}),
+    });
+    return async (serializedDelegation) => {
+        const validator = await validatorPromise;
+        const result = await validator.validateDelegation(serializedDelegation);
+        if (!result.ok) {
+            const code = result.error?.code === 'EXPIRED'
+                ? 'delegation_expired'
+                : 'delegation_invalid';
+            return {
+                ok: false,
+                code,
+                message: `[${result.error?.code ?? 'UNKNOWN'}] ${result.error?.message ?? 'delegation validation failed'}`,
+            };
+        }
+        if (!result.invoker) {
+            return {
+                ok: false,
+                code: 'delegation_invalid',
+                message: 'Delegation validated without an invoker DID',
+            };
+        }
+        const capability = result.capability;
+        return {
+            ok: true,
+            invokerDid: result.invoker,
+            capability,
+            expiration: result.expiration,
+        };
+    };
+}
+//# sourceMappingURL=ucan.js.map

package/dist/ucan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ucan.js","sourceRoot":"","sources":["../src/ucan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAgCtE,MAAM,UAAU,wBAAwB,CAAC,OAKxC;IACC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;QAC3C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,WAAW,EAAE,EAAE;QACf,GAAG,CAAC,OAAO,CAAC,YAAY;YACtB,CAAC,CAAC;gBACE,WAAW,EAAE,oBAAoB,CAAC;oBAChC,UAAU,EAAE,OAAO,CAAC,YAAY;iBACjC,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,EAAE;QACpC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;QAExE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,GACR,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS;gBAC9B,CAAC,CAAC,oBAAoB;gBACtB,CAAC,CAAC,oBAAoB,CAAC;YAC3B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI;gBACJ,OAAO,EAAE,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,SAAS,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,8BAA8B,EAAE;aAC3G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,oBAAoB;gBAC1B,OAAO,EAAE,6CAA6C;aACvD,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAEb,CAAC;QACd,OAAO;YACL,EAAE,EAAE,IAAI;YACR,UAAU,EAAE,MAAM,CAAC,OAAO;YAC1B,UAAU;YACV,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@ixo/flow-work",
+  "version": "0.1.0",
+  "description": "Oracle-side flow-work plugin: accept UCAN-delegated ixo.flow.work invocations from the IXO flow-manager over Matrix and post receipts.",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ixoworld/flow-manager-oracle.git",
+    "directory": "packages/flow-work"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "dependencies": {
+    "zod": "^4.4.3"
+  },
+  "peerDependencies": {
+    "@ixo/oracle-runtime": ">=1.3.4",
+    "@ixo/ucan": ">=2.0.0",
+    "@nestjs/common": ">=11.0.0",
+    "matrix-js-sdk": ">=37.0.0"
+  },
+  "devDependencies": {
+    "@changesets/cli": "^2.31.0",
+    "@ixo/oracle-runtime": "^1.3.4",
+    "@ixo/ucan": "^2.0.0",
+    "@nestjs/common": "^11.1.19",
+    "@types/node": "^22.10.7",
+    "matrix-js-sdk": "^37.11.0",
+    "typescript": "^5.7.3",
+    "vitest": "^3.2.4"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.build.json --noEmit",
+    "test": "vitest run",
+    "changeset": "changeset",
+    "version": "changeset version",
+    "release": "changeset publish"
+  }
+}