@nomosprotocol/sdk 2.6.0 → 2.7.0

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { CurrencyPolicy, ActVerdict, KeyCertificate as KeyCertificate$2, RevocationStatement, RevocationList, ScopeTerms } from '@nomosprotocol/verify';
+import { RegistrarRecord, CurrencyPolicy, ActVerdict, KeyCertificate as KeyCertificate$2, RevocationStatement, RevocationList, ScopeTerms } from '@nomosprotocol/verify';
 export { bindingDigest, verifyAct, verifyArtifact, verifySeal } from '@nomosprotocol/verify';
 
 interface VerifyDecisionParams {
@@ -1015,6 +1015,64 @@ declare function suggestToolBindings(artifact: string, tools: ToolDescription[],
 /** A plain report of a suggestion, for the person who has to check it. */
 declare function describeSuggestion(s: BindingSuggestion): string;
 
+/**
+ * Registrar logs for accept({ resolution }) (NOMOS-SPEC-014, Draft): which laws apply where, as a
+ * registrar you pin has signed them.
+ *
+ * registrarSource() fetches a registrar's public log and its signed head, and checks them with
+ * @nomosprotocol/verify before anything is used: every entry's hash and the chain from 64 zeros; the
+ * head's signature under the key YOU pin (never a key fetched from the same place as the log); the
+ * head's age against your bound; and that today's log extends the head it saw last time, so history
+ * can only be added to. It then folds the log into the record the resolver reads.
+ *
+ * A registrar that cannot be read, or whose copy fails a check, throws RegistrarUnavailable, and
+ * accept() refuses to commit with 503 and Retry-After. An unreadable registrar is never read as
+ * "no law applies" (SPEC-014 C8).
+ */
+
+declare class RegistrarUnavailable extends Error {
+    readonly retryAfterSeconds: number;
+    readonly registrar: string;
+    constructor(message: string, retryAfterSeconds: number, registrar: string);
+}
+interface RegistrarSourceOptions {
+    /** The id you pin this registrar under; resolution names it in its answers. */
+    id: string;
+    /** Where the registrar serves its log: the origin of `/.well-known/nomos-exchange-log` (the NOMOS
+     *  platform registrar is https://www.nomosprotocol.com). */
+    url: string;
+    /** The registrar's signing key, which you pin (PEM). Heads signed by any other key are refused. */
+    publicKeyPem: string;
+    /** The scope the registrar is certified over (SPEC-014 C6). Default: everything it claims. */
+    certifiedScope?: string;
+    /** How old a signed head may be before the copy is stale (SPEC-014 0.2.0). Default 600. */
+    maxHeadAgeSeconds?: number;
+    /** How long to reuse a verified log before fetching again. Default 60. */
+    refreshSeconds?: number;
+    /** The head you kept from an earlier run (for example the last receipt's `resolution.heads`). The
+     *  first read must extend it. Without it, the history check starts from this process's first
+     *  read: create each source once and reuse it, since a new source forgets the head it saw. */
+    initialHead?: {
+        size: number;
+        hash: string;
+    } | null;
+    fetch?: typeof fetch;
+    now?: () => Date;
+}
+interface RegistrarView {
+    record: RegistrarRecord;
+    head: {
+        size: number;
+        hash: string;
+        at: string;
+        kid: string;
+    };
+}
+type RegistrarSource = (() => Promise<RegistrarView>) & {
+    id: string;
+};
+declare function registrarSource(o: RegistrarSourceOptions): RegistrarSource;
+
 type SignatureSuite = 'Ed25519' | 'ES256';
 interface Signer {
     /** NOMOS-SPEC-001 §8.4 key id of the public key. */
@@ -1199,6 +1257,29 @@ interface AcceptedAuthority {
     currencyPolicy: CurrencyPolicy;
     /** Your record of the version in force: the seal hash of the version you accept. */
     inForceSealHash?: string;
+    /** The name your pinned registrars list this authority under (its Exchange name), when it is a
+     *  law they list. Resolution counts an Act under this authority as carrying that law. */
+    registrarName?: string;
+}
+/** accept({ resolution }): before committing, work out which laws govern this act here, now, from
+ *  registrars you pin, and commit only if the Act carries every one (NOMOS-SPEC-014). */
+interface AcceptResolution {
+    /** The registrars whose law you undertake to honour (registrarSource()). */
+    registrars: RegistrarSource[];
+    /** The context that decides which law applies (jurisdiction, established_in, subjects_in,
+     *  output_used_in, ...), from YOUR knowledge and your own state. It is never read from the Act:
+     *  a carrier that stated its own context would choose the law again. A fact you leave out is
+     *  unknown, so a law that turns on it holds the Act (INCOMPLETE), never permits it. */
+    context: (act: any, localFacts: Record<string, unknown>) => Record<string, unknown> | Promise<Record<string, unknown>>;
+}
+/** What resolution decided, kept on the receipt so an auditor can replay it against the logs. */
+interface ReceiptResolution {
+    status: 'RESOLVED' | 'INCOMPLETE' | 'CONFLICT';
+    context: Record<string, unknown>;
+    applicable: string[];
+    /** The log head of each registrar consulted (id → head hash). */
+    heads: Record<string, string>;
+    laws_not_presented?: string[];
 }
 interface Receipt {
     act_id: string;
@@ -1212,6 +1293,7 @@ interface Receipt {
     in_force_source?: string;
     currency_policy: CurrencyPolicy;
     consent_origins?: string[];
+    resolution?: ReceiptResolution;
 }
 /** One atomic operation (SPEC-008 §8). `tx` is passed to `commit` and `localFacts` so your own
  *  writes and reads share it. */
@@ -1267,6 +1349,9 @@ interface AcceptOptions<Tx = unknown> {
         certs?: Set<string>;
         artifacts?: Set<string>;
     };
+    /** Resolve which laws govern the act before committing (NOMOS-SPEC-014, Draft). Without it,
+     *  accept() verifies the one authority the Act carries, as before. */
+    resolution?: AcceptResolution;
     /** `shadow`: verify and record every verdict, never commit. For pilots. */
     mode?: 'enforce' | 'shadow';
     /** Every verdict, committed or not (SPEC-008 §9: a receipt for every verification). */
@@ -1750,4 +1835,4 @@ declare function approver(o: ApproverOptions): {
     pending: Map<string, Pending>;
 };
 
-export { ACT_MEDIA_TYPE, type AcceptOptions, type AcceptStore, type AcceptTransaction, type AcceptedAuthority, type KeyCertificate as ActKeyCertificate, type ActOptions, type ActResult, type ActStatus, type Action, type Answer, type ApproverOptions, type Artifact, type ArtifactList, type ArtifactSchema, type ArtifactSchemaField, type AttestationInfo, type AwaitApprovalOptions, type BindingProposal, type BindingSuggestion, type BuildActOptions, type CanApproval, type CanCaller, type CanOptions, type CanParams, type CanResolutionMember, type CanResolutionResult, type CanResult, type CanVerdict, type CertificateRegistry, type ChainVerdictDecision, type ConservedStateInfo, type ConservedStateReceipt, type Contradiction, type DetectContradictionsParams, type DetectContradictionsResult, type EnrolmentClaims, type FactBinding, type GenerateGovernanceParams, type GenerateGovernanceResult, type IssueOptions, type IssuerDocument, type IssuerOptions, type KeyCertificate$1 as KeyCertificate, type ListArtifactsParams, MAX_PRESENTED, Nomos, NomosAPIError, NomosActError, NomosAuthenticationError, NomosAuthorizationError, type NomosConfig, NomosDiscoveryError, NomosError, type NomosErrorCode, NomosIssuerNotTrustedError, NomosNetworkError, NomosNotFoundError, NomosPaymentRequiredError, NomosRateLimitError, type NomosRawResponse, NomosValidationError, type NomosWebhookEvent, type NomosWebhookEventType, NomosWebhookSignatureError, type PasskeyApproverOptions, type PasskeyCredential, type PasskeyStore, type PendingApproval, type PgClient, type PgPool, type PolicyField, type PostgresStoreOptions, type Receipt, RegistryError, type RegistryStore, type RelyingPartyDocument, type RequestOptions, type Reservation, type ReserveByActParams, type ReserveByQueryParams, type ReserveParams, type ResolvedAuthorityRef, type RevocationSourceOptions, RevocationUnavailable, type SignatureSuite, type Signer, type ToolBindings, type ToolDescription, type UnresolvedFact, type Verdict, type VerifyChainOptions, type VerifyChainParams, type VerifyChainResult, type VerifyDecisionParams, type VerifyDecisionResult, WELL_KNOWN, type WithLastResponse, type WitnessDocument, type WitnessOptions, accept, act, applyToolBindings, approver, buildAct, can, certificateRegistry, certify, describeSuggestion, fetchDocument, generateSigner, issuer, kidOf, localSigner, memoryPasskeyStore, memoryRegistryStore, memoryStore, nomos, originOf, parseToolBindings, passkeyApprover, postgresPasskeyStore, postgresRegistryStore, postgresStore, presentedCertificates, readAttestation, reliedKids, revocationListCertificates, revocationSource, seal, seededSigner, signConsent, signEnrolmentToken, signInForce, signRevocation, signRevocationList, signTestimony, statusFor, suggestToolBindings, verifyChain, verifyEnrolmentToken, witness };
+export { ACT_MEDIA_TYPE, type AcceptOptions, type AcceptResolution, type AcceptStore, type AcceptTransaction, type AcceptedAuthority, type KeyCertificate as ActKeyCertificate, type ActOptions, type ActResult, type ActStatus, type Action, type Answer, type ApproverOptions, type Artifact, type ArtifactList, type ArtifactSchema, type ArtifactSchemaField, type AttestationInfo, type AwaitApprovalOptions, type BindingProposal, type BindingSuggestion, type BuildActOptions, type CanApproval, type CanCaller, type CanOptions, type CanParams, type CanResolutionMember, type CanResolutionResult, type CanResult, type CanVerdict, type CertificateRegistry, type ChainVerdictDecision, type ConservedStateInfo, type ConservedStateReceipt, type Contradiction, type DetectContradictionsParams, type DetectContradictionsResult, type EnrolmentClaims, type FactBinding, type GenerateGovernanceParams, type GenerateGovernanceResult, type IssueOptions, type IssuerDocument, type IssuerOptions, type KeyCertificate$1 as KeyCertificate, type ListArtifactsParams, MAX_PRESENTED, Nomos, NomosAPIError, NomosActError, NomosAuthenticationError, NomosAuthorizationError, type NomosConfig, NomosDiscoveryError, NomosError, type NomosErrorCode, NomosIssuerNotTrustedError, NomosNetworkError, NomosNotFoundError, NomosPaymentRequiredError, NomosRateLimitError, type NomosRawResponse, NomosValidationError, type NomosWebhookEvent, type NomosWebhookEventType, NomosWebhookSignatureError, type PasskeyApproverOptions, type PasskeyCredential, type PasskeyStore, type PendingApproval, type PgClient, type PgPool, type PolicyField, type PostgresStoreOptions, type Receipt, type ReceiptResolution, type RegistrarSource, type RegistrarSourceOptions, RegistrarUnavailable, type RegistrarView, RegistryError, type RegistryStore, type RelyingPartyDocument, type RequestOptions, type Reservation, type ReserveByActParams, type ReserveByQueryParams, type ReserveParams, type ResolvedAuthorityRef, type RevocationSourceOptions, RevocationUnavailable, type SignatureSuite, type Signer, type ToolBindings, type ToolDescription, type UnresolvedFact, type Verdict, type VerifyChainOptions, type VerifyChainParams, type VerifyChainResult, type VerifyDecisionParams, type VerifyDecisionResult, WELL_KNOWN, type WithLastResponse, type WitnessDocument, type WitnessOptions, accept, act, applyToolBindings, approver, buildAct, can, certificateRegistry, certify, describeSuggestion, fetchDocument, generateSigner, issuer, kidOf, localSigner, memoryPasskeyStore, memoryRegistryStore, memoryStore, nomos, originOf, parseToolBindings, passkeyApprover, postgresPasskeyStore, postgresRegistryStore, postgresStore, presentedCertificates, readAttestation, registrarSource, reliedKids, revocationListCertificates, revocationSource, seal, seededSigner, signConsent, signEnrolmentToken, signInForce, signRevocation, signRevocationList, signTestimony, statusFor, suggestToolBindings, verifyChain, verifyEnrolmentToken, witness };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { CurrencyPolicy, ActVerdict, KeyCertificate as KeyCertificate$2, RevocationStatement, RevocationList, ScopeTerms } from '@nomosprotocol/verify';
+import { RegistrarRecord, CurrencyPolicy, ActVerdict, KeyCertificate as KeyCertificate$2, RevocationStatement, RevocationList, ScopeTerms } from '@nomosprotocol/verify';
 export { bindingDigest, verifyAct, verifyArtifact, verifySeal } from '@nomosprotocol/verify';
 
 interface VerifyDecisionParams {
@@ -1015,6 +1015,64 @@ declare function suggestToolBindings(artifact: string, tools: ToolDescription[],
 /** A plain report of a suggestion, for the person who has to check it. */
 declare function describeSuggestion(s: BindingSuggestion): string;
 
+/**
+ * Registrar logs for accept({ resolution }) (NOMOS-SPEC-014, Draft): which laws apply where, as a
+ * registrar you pin has signed them.
+ *
+ * registrarSource() fetches a registrar's public log and its signed head, and checks them with
+ * @nomosprotocol/verify before anything is used: every entry's hash and the chain from 64 zeros; the
+ * head's signature under the key YOU pin (never a key fetched from the same place as the log); the
+ * head's age against your bound; and that today's log extends the head it saw last time, so history
+ * can only be added to. It then folds the log into the record the resolver reads.
+ *
+ * A registrar that cannot be read, or whose copy fails a check, throws RegistrarUnavailable, and
+ * accept() refuses to commit with 503 and Retry-After. An unreadable registrar is never read as
+ * "no law applies" (SPEC-014 C8).
+ */
+
+declare class RegistrarUnavailable extends Error {
+    readonly retryAfterSeconds: number;
+    readonly registrar: string;
+    constructor(message: string, retryAfterSeconds: number, registrar: string);
+}
+interface RegistrarSourceOptions {
+    /** The id you pin this registrar under; resolution names it in its answers. */
+    id: string;
+    /** Where the registrar serves its log: the origin of `/.well-known/nomos-exchange-log` (the NOMOS
+     *  platform registrar is https://www.nomosprotocol.com). */
+    url: string;
+    /** The registrar's signing key, which you pin (PEM). Heads signed by any other key are refused. */
+    publicKeyPem: string;
+    /** The scope the registrar is certified over (SPEC-014 C6). Default: everything it claims. */
+    certifiedScope?: string;
+    /** How old a signed head may be before the copy is stale (SPEC-014 0.2.0). Default 600. */
+    maxHeadAgeSeconds?: number;
+    /** How long to reuse a verified log before fetching again. Default 60. */
+    refreshSeconds?: number;
+    /** The head you kept from an earlier run (for example the last receipt's `resolution.heads`). The
+     *  first read must extend it. Without it, the history check starts from this process's first
+     *  read: create each source once and reuse it, since a new source forgets the head it saw. */
+    initialHead?: {
+        size: number;
+        hash: string;
+    } | null;
+    fetch?: typeof fetch;
+    now?: () => Date;
+}
+interface RegistrarView {
+    record: RegistrarRecord;
+    head: {
+        size: number;
+        hash: string;
+        at: string;
+        kid: string;
+    };
+}
+type RegistrarSource = (() => Promise<RegistrarView>) & {
+    id: string;
+};
+declare function registrarSource(o: RegistrarSourceOptions): RegistrarSource;
+
 type SignatureSuite = 'Ed25519' | 'ES256';
 interface Signer {
     /** NOMOS-SPEC-001 §8.4 key id of the public key. */
@@ -1199,6 +1257,29 @@ interface AcceptedAuthority {
     currencyPolicy: CurrencyPolicy;
     /** Your record of the version in force: the seal hash of the version you accept. */
     inForceSealHash?: string;
+    /** The name your pinned registrars list this authority under (its Exchange name), when it is a
+     *  law they list. Resolution counts an Act under this authority as carrying that law. */
+    registrarName?: string;
+}
+/** accept({ resolution }): before committing, work out which laws govern this act here, now, from
+ *  registrars you pin, and commit only if the Act carries every one (NOMOS-SPEC-014). */
+interface AcceptResolution {
+    /** The registrars whose law you undertake to honour (registrarSource()). */
+    registrars: RegistrarSource[];
+    /** The context that decides which law applies (jurisdiction, established_in, subjects_in,
+     *  output_used_in, ...), from YOUR knowledge and your own state. It is never read from the Act:
+     *  a carrier that stated its own context would choose the law again. A fact you leave out is
+     *  unknown, so a law that turns on it holds the Act (INCOMPLETE), never permits it. */
+    context: (act: any, localFacts: Record<string, unknown>) => Record<string, unknown> | Promise<Record<string, unknown>>;
+}
+/** What resolution decided, kept on the receipt so an auditor can replay it against the logs. */
+interface ReceiptResolution {
+    status: 'RESOLVED' | 'INCOMPLETE' | 'CONFLICT';
+    context: Record<string, unknown>;
+    applicable: string[];
+    /** The log head of each registrar consulted (id → head hash). */
+    heads: Record<string, string>;
+    laws_not_presented?: string[];
 }
 interface Receipt {
     act_id: string;
@@ -1212,6 +1293,7 @@ interface Receipt {
     in_force_source?: string;
     currency_policy: CurrencyPolicy;
     consent_origins?: string[];
+    resolution?: ReceiptResolution;
 }
 /** One atomic operation (SPEC-008 §8). `tx` is passed to `commit` and `localFacts` so your own
  *  writes and reads share it. */
@@ -1267,6 +1349,9 @@ interface AcceptOptions<Tx = unknown> {
         certs?: Set<string>;
         artifacts?: Set<string>;
     };
+    /** Resolve which laws govern the act before committing (NOMOS-SPEC-014, Draft). Without it,
+     *  accept() verifies the one authority the Act carries, as before. */
+    resolution?: AcceptResolution;
     /** `shadow`: verify and record every verdict, never commit. For pilots. */
     mode?: 'enforce' | 'shadow';
     /** Every verdict, committed or not (SPEC-008 §9: a receipt for every verification). */
@@ -1750,4 +1835,4 @@ declare function approver(o: ApproverOptions): {
     pending: Map<string, Pending>;
 };
 
-export { ACT_MEDIA_TYPE, type AcceptOptions, type AcceptStore, type AcceptTransaction, type AcceptedAuthority, type KeyCertificate as ActKeyCertificate, type ActOptions, type ActResult, type ActStatus, type Action, type Answer, type ApproverOptions, type Artifact, type ArtifactList, type ArtifactSchema, type ArtifactSchemaField, type AttestationInfo, type AwaitApprovalOptions, type BindingProposal, type BindingSuggestion, type BuildActOptions, type CanApproval, type CanCaller, type CanOptions, type CanParams, type CanResolutionMember, type CanResolutionResult, type CanResult, type CanVerdict, type CertificateRegistry, type ChainVerdictDecision, type ConservedStateInfo, type ConservedStateReceipt, type Contradiction, type DetectContradictionsParams, type DetectContradictionsResult, type EnrolmentClaims, type FactBinding, type GenerateGovernanceParams, type GenerateGovernanceResult, type IssueOptions, type IssuerDocument, type IssuerOptions, type KeyCertificate$1 as KeyCertificate, type ListArtifactsParams, MAX_PRESENTED, Nomos, NomosAPIError, NomosActError, NomosAuthenticationError, NomosAuthorizationError, type NomosConfig, NomosDiscoveryError, NomosError, type NomosErrorCode, NomosIssuerNotTrustedError, NomosNetworkError, NomosNotFoundError, NomosPaymentRequiredError, NomosRateLimitError, type NomosRawResponse, NomosValidationError, type NomosWebhookEvent, type NomosWebhookEventType, NomosWebhookSignatureError, type PasskeyApproverOptions, type PasskeyCredential, type PasskeyStore, type PendingApproval, type PgClient, type PgPool, type PolicyField, type PostgresStoreOptions, type Receipt, RegistryError, type RegistryStore, type RelyingPartyDocument, type RequestOptions, type Reservation, type ReserveByActParams, type ReserveByQueryParams, type ReserveParams, type ResolvedAuthorityRef, type RevocationSourceOptions, RevocationUnavailable, type SignatureSuite, type Signer, type ToolBindings, type ToolDescription, type UnresolvedFact, type Verdict, type VerifyChainOptions, type VerifyChainParams, type VerifyChainResult, type VerifyDecisionParams, type VerifyDecisionResult, WELL_KNOWN, type WithLastResponse, type WitnessDocument, type WitnessOptions, accept, act, applyToolBindings, approver, buildAct, can, certificateRegistry, certify, describeSuggestion, fetchDocument, generateSigner, issuer, kidOf, localSigner, memoryPasskeyStore, memoryRegistryStore, memoryStore, nomos, originOf, parseToolBindings, passkeyApprover, postgresPasskeyStore, postgresRegistryStore, postgresStore, presentedCertificates, readAttestation, reliedKids, revocationListCertificates, revocationSource, seal, seededSigner, signConsent, signEnrolmentToken, signInForce, signRevocation, signRevocationList, signTestimony, statusFor, suggestToolBindings, verifyChain, verifyEnrolmentToken, witness };
+export { ACT_MEDIA_TYPE, type AcceptOptions, type AcceptResolution, type AcceptStore, type AcceptTransaction, type AcceptedAuthority, type KeyCertificate as ActKeyCertificate, type ActOptions, type ActResult, type ActStatus, type Action, type Answer, type ApproverOptions, type Artifact, type ArtifactList, type ArtifactSchema, type ArtifactSchemaField, type AttestationInfo, type AwaitApprovalOptions, type BindingProposal, type BindingSuggestion, type BuildActOptions, type CanApproval, type CanCaller, type CanOptions, type CanParams, type CanResolutionMember, type CanResolutionResult, type CanResult, type CanVerdict, type CertificateRegistry, type ChainVerdictDecision, type ConservedStateInfo, type ConservedStateReceipt, type Contradiction, type DetectContradictionsParams, type DetectContradictionsResult, type EnrolmentClaims, type FactBinding, type GenerateGovernanceParams, type GenerateGovernanceResult, type IssueOptions, type IssuerDocument, type IssuerOptions, type KeyCertificate$1 as KeyCertificate, type ListArtifactsParams, MAX_PRESENTED, Nomos, NomosAPIError, NomosActError, NomosAuthenticationError, NomosAuthorizationError, type NomosConfig, NomosDiscoveryError, NomosError, type NomosErrorCode, NomosIssuerNotTrustedError, NomosNetworkError, NomosNotFoundError, NomosPaymentRequiredError, NomosRateLimitError, type NomosRawResponse, NomosValidationError, type NomosWebhookEvent, type NomosWebhookEventType, NomosWebhookSignatureError, type PasskeyApproverOptions, type PasskeyCredential, type PasskeyStore, type PendingApproval, type PgClient, type PgPool, type PolicyField, type PostgresStoreOptions, type Receipt, type ReceiptResolution, type RegistrarSource, type RegistrarSourceOptions, RegistrarUnavailable, type RegistrarView, RegistryError, type RegistryStore, type RelyingPartyDocument, type RequestOptions, type Reservation, type ReserveByActParams, type ReserveByQueryParams, type ReserveParams, type ResolvedAuthorityRef, type RevocationSourceOptions, RevocationUnavailable, type SignatureSuite, type Signer, type ToolBindings, type ToolDescription, type UnresolvedFact, type Verdict, type VerifyChainOptions, type VerifyChainParams, type VerifyChainResult, type VerifyDecisionParams, type VerifyDecisionResult, WELL_KNOWN, type WithLastResponse, type WitnessDocument, type WitnessOptions, accept, act, applyToolBindings, approver, buildAct, can, certificateRegistry, certify, describeSuggestion, fetchDocument, generateSigner, issuer, kidOf, localSigner, memoryPasskeyStore, memoryRegistryStore, memoryStore, nomos, originOf, parseToolBindings, passkeyApprover, postgresPasskeyStore, postgresRegistryStore, postgresStore, presentedCertificates, readAttestation, registrarSource, reliedKids, revocationListCertificates, revocationSource, seal, seededSigner, signConsent, signEnrolmentToken, signInForce, signRevocation, signRevocationList, signTestimony, statusFor, suggestToolBindings, verifyChain, verifyEnrolmentToken, witness };