@orangecheck/agent-core 2.3.0 → 2.4.0

package/dist/index.d.mts

@@ -125,6 +125,8 @@ declare function federationDescriptorCanonicalMessage(descriptor: FederationDesc
 declare function computeFederationDescriptorId(descriptor: FederationDescriptor): string;
 interface VerifyFederationDelegationInput extends VerifyFederationBase {
     envelope: FederationDelegationEnvelope;
+    revocations?: Array<FederationRevocationEnvelope | RevocationEnvelope>;
+    skipRevocationCheck?: boolean;
     now?: Date;
     skipTemporalCheck?: boolean;
 }

package/dist/index.d.ts

@@ -125,6 +125,8 @@ declare function federationDescriptorCanonicalMessage(descriptor: FederationDesc
 declare function computeFederationDescriptorId(descriptor: FederationDescriptor): string;
 interface VerifyFederationDelegationInput extends VerifyFederationBase {
     envelope: FederationDelegationEnvelope;
+    revocations?: Array<FederationRevocationEnvelope | RevocationEnvelope>;
+    skipRevocationCheck?: boolean;
     now?: Date;
     skipTemporalCheck?: boolean;
 }

package/dist/index.js

@@ -686,8 +686,7 @@ async function verifyAction(input) {
     if (h === null || hash === null) {
       return err("E_MALFORMED", "confirmed OTS proof missing block_height or block_hash");
     }
-    const verified = actionAnchor !== null;
-    anchor = { status: "confirmed", blockHeight: h, blockHash: hash, verified };
+    anchor = actionAnchor !== null ? { status: "confirmed", blockHeight: h, blockHash: hash, verified: true } : { status: "claimed", blockHeight: h, blockHash: hash, verified: false };
   }
   return {
     ok: true,
@@ -1098,6 +1097,18 @@ async function verifyFederationDelegation(input) {
   }
   const quorum = await checkFederationQuorum(env.principal, env.sig, env.id, input);
   if (!quorum.ok) return quorum;
+  if (!input.skipRevocationCheck && !input.revocations) {
+    return fail(
+      "E_MALFORMED",
+      "verifyFederationDelegation requires `revocations` (fetch kind-30085 by #delegation) or an explicit skipRevocationCheck:true to state that revocation is not being checked"
+    );
+  }
+  for (const rev of input.revocations ?? []) {
+    if (rev?.delegation_id !== env.id) continue;
+    const rr = await verifyRevocationOf(env, rev, input);
+    if (!rr.ok) continue;
+    return fail("E_REVOKED", `delegation ${env.id} was revoked by ${rev.id}`);
+  }
   if (!input.skipTemporalCheck) {
     const now = input.now ?? /* @__PURE__ */ new Date();
     const issued = new Date(env.issued_at);
@@ -1108,6 +1119,42 @@ async function verifyFederationDelegation(input) {
   }
   return { ok: true, id: env.id, canonicalMessage: delegationCanonicalMessage(canonInput) };
 }
+async function verifyRevocationOf(d, rev, input) {
+  if (rev.signer?.alg === "federation") {
+    return verifyFederationRevocation({
+      envelope: rev,
+      delegation: d,
+      verifyBip322: input.verifyBip322,
+      skipSignatureVerification: input.skipSignatureVerification
+    });
+  }
+  const v1 = rev;
+  const holders = d.revocation?.holders ?? ["principal"];
+  if (!Array.isArray(holders) || !holders.includes("agent")) {
+    return fail("E_REVOKER_UNAUTHORIZED", "only the federation may revoke this delegation");
+  }
+  if (v1.kind !== "agent-revocation" || v1.signer?.address !== d.agent.address) {
+    return fail("E_REVOKER_UNAUTHORIZED", "a single-address revocation must be signed by the agent");
+  }
+  if (typeof v1.reason !== "string" || !ISO_UTC.test(v1.signed_at ?? "")) {
+    return fail("E_MALFORMED", "revocation reason / signed_at invalid");
+  }
+  const canonInput = {
+    address: v1.signer.address,
+    delegation_id: v1.delegation_id,
+    reason: v1.reason,
+    signed_at: v1.signed_at
+  };
+  const id = computeRevocationId(canonInput);
+  if (id !== v1.id) return fail("E_BAD_ID", `reconstructed id (${id}) != revocation.id (${v1.id})`);
+  if (!input.skipSignatureVerification) {
+    if (!input.verifyBip322) return fail("E_BAD_SIG", "no BIP-322 verifier supplied");
+    if (typeof v1.sig?.value !== "string" || !await input.verifyBip322(v1.id, v1.sig.value, v1.signer.address)) {
+      return fail("E_BAD_SIG", "revocation BIP-322 signature did not verify");
+    }
+  }
+  return { ok: true, id: v1.id, canonicalMessage: revocationCanonicalMessage(canonInput) };
+}
 async function verifyFederationRevocation(input) {
   const env = input.envelope;
   if (env?.kind !== "agent-revocation") return fail("E_MALFORMED", 'kind must be "agent-revocation"');