@orangecheck/agent-core 2.2.0 → 2.4.0

package/dist/index.mjs

@@ -15,7 +15,9 @@ var REGISTERED_SCOPES = {
   "nostr:publish": { keys: ["kind", "relay", "max_bytes"] },
   "http:request": { keys: ["origin", "method", "max_rps", "max_bytes_out"] },
   "ln:send": { keys: ["max_sats", "node", "max_fee_sats"] },
-  "mcp:invoke": { keys: ["server", "tool", "max_invocations"] }
+  "mcp:invoke": { keys: ["server", "tool", "max_invocations"] },
+  // oc-pledge-protocol SPEC §7.3.
+  "pledge:create": { keys: ["max_bond_sats", "mechanism", "counterparty"] }
 };
 var NUMERIC_KEYS = /* @__PURE__ */ new Set([
   "max_bytes",
@@ -26,6 +28,7 @@ var NUMERIC_KEYS = /* @__PURE__ */ new Set([
   "max_sats",
   "max_fee_sats",
   "max_invocations",
+  "max_bond_sats",
   "kind"
 ]);
 var IDENT_RE = /^[a-z][a-z0-9_]*$/;
@@ -682,8 +685,7 @@ async function verifyAction(input) {
     if (h === null || hash === null) {
       return err("E_MALFORMED", "confirmed OTS proof missing block_height or block_hash");
     }
-    const verified = actionAnchor !== null;
-    anchor = { status: "confirmed", blockHeight: h, blockHash: hash, verified };
+    anchor = actionAnchor !== null ? { status: "confirmed", blockHeight: h, blockHash: hash, verified: true } : { status: "claimed", blockHeight: h, blockHash: hash, verified: false };
   }
   return {
     ok: true,
@@ -1094,6 +1096,18 @@ async function verifyFederationDelegation(input) {
   }
   const quorum = await checkFederationQuorum(env.principal, env.sig, env.id, input);
   if (!quorum.ok) return quorum;
+  if (!input.skipRevocationCheck && !input.revocations) {
+    return fail(
+      "E_MALFORMED",
+      "verifyFederationDelegation requires `revocations` (fetch kind-30085 by #delegation) or an explicit skipRevocationCheck:true to state that revocation is not being checked"
+    );
+  }
+  for (const rev of input.revocations ?? []) {
+    if (rev?.delegation_id !== env.id) continue;
+    const rr = await verifyRevocationOf(env, rev, input);
+    if (!rr.ok) continue;
+    return fail("E_REVOKED", `delegation ${env.id} was revoked by ${rev.id}`);
+  }
   if (!input.skipTemporalCheck) {
     const now = input.now ?? /* @__PURE__ */ new Date();
     const issued = new Date(env.issued_at);
@@ -1104,6 +1118,42 @@ async function verifyFederationDelegation(input) {
   }
   return { ok: true, id: env.id, canonicalMessage: delegationCanonicalMessage(canonInput) };
 }
+async function verifyRevocationOf(d, rev, input) {
+  if (rev.signer?.alg === "federation") {
+    return verifyFederationRevocation({
+      envelope: rev,
+      delegation: d,
+      verifyBip322: input.verifyBip322,
+      skipSignatureVerification: input.skipSignatureVerification
+    });
+  }
+  const v1 = rev;
+  const holders = d.revocation?.holders ?? ["principal"];
+  if (!Array.isArray(holders) || !holders.includes("agent")) {
+    return fail("E_REVOKER_UNAUTHORIZED", "only the federation may revoke this delegation");
+  }
+  if (v1.kind !== "agent-revocation" || v1.signer?.address !== d.agent.address) {
+    return fail("E_REVOKER_UNAUTHORIZED", "a single-address revocation must be signed by the agent");
+  }
+  if (typeof v1.reason !== "string" || !ISO_UTC.test(v1.signed_at ?? "")) {
+    return fail("E_MALFORMED", "revocation reason / signed_at invalid");
+  }
+  const canonInput = {
+    address: v1.signer.address,
+    delegation_id: v1.delegation_id,
+    reason: v1.reason,
+    signed_at: v1.signed_at
+  };
+  const id = computeRevocationId(canonInput);
+  if (id !== v1.id) return fail("E_BAD_ID", `reconstructed id (${id}) != revocation.id (${v1.id})`);
+  if (!input.skipSignatureVerification) {
+    if (!input.verifyBip322) return fail("E_BAD_SIG", "no BIP-322 verifier supplied");
+    if (typeof v1.sig?.value !== "string" || !await input.verifyBip322(v1.id, v1.sig.value, v1.signer.address)) {
+      return fail("E_BAD_SIG", "revocation BIP-322 signature did not verify");
+    }
+  }
+  return { ok: true, id: v1.id, canonicalMessage: revocationCanonicalMessage(canonInput) };
+}
 async function verifyFederationRevocation(input) {
   const env = input.envelope;
   if (env?.kind !== "agent-revocation") return fail("E_MALFORMED", 'kind must be "agent-revocation"');