@orangecheck/agent-core 2.5.0 → 2.6.0

package/dist/index.mjs

@@ -512,7 +512,7 @@ async function verifyDelegation(input) {
   if (!input.skipRevocationCheck && !input.revocations) {
     return err(
       "E_MALFORMED",
-      "verifyDelegation requires `revocations` (fetch kind-30085 by #delegation) or an explicit skipRevocationCheck:true to state that revocation is not being checked"
+      'verifyDelegation requires `revocations` (query kind 30085 with "#t": [delegation id], SPEC \xA79.4) or an explicit skipRevocationCheck:true to state that revocation is not being checked'
     );
   }
   if (input.revocations) {
@@ -532,7 +532,6 @@ async function verifyDelegation(input) {
     const now = input.now ?? /* @__PURE__ */ new Date();
     const issued = new Date(env.issued_at);
     const expires = new Date(env.expires_at);
-    if (expires <= issued) return err("E_MALFORMED", "expires_at <= issued_at");
     if (now < issued) return err("E_NOT_YET_VALID", `delegation not valid until ${env.issued_at}`);
     if (now >= expires) return err("E_EXPIRED", `delegation expired at ${env.expires_at}`);
   }
@@ -640,7 +639,7 @@ async function verifyAction(input) {
   if (!input.skipRevocationCheck && !input.revocations) {
     return err(
       "E_MALFORMED",
-      "verifyAction requires `revocations` (fetch kind-30085 by #delegation for every link in the chain) or an explicit skipRevocationCheck:true"
+      'verifyAction requires `revocations` (query kind 30085 with "#t": [id of every link in the chain], SPEC \xA79.4) or an explicit skipRevocationCheck:true'
     );
   }
   let actionAnchor;
@@ -797,11 +796,22 @@ function checkDelegationShape(env) {
   }
   if (!isIsoUtc(env.issued_at)) return err("E_MALFORMED", "issued_at must be ISO 8601 UTC");
   if (!isIsoUtc(env.expires_at)) return err("E_MALFORMED", "expires_at must be ISO 8601 UTC");
+  const windowError = delegationWindowError(env.issued_at, env.expires_at);
+  if (windowError) return err("E_MALFORMED", windowError);
   if (!/^[0-9a-f]{32}$/.test(env.nonce)) return err("E_MALFORMED", "nonce must be 32 lowercase hex chars");
   if (env.sig?.alg !== "bip322" || typeof env.sig.value !== "string") return err("E_MALFORMED", "sig invalid");
   if (env.sig.pubkey !== env.principal.address) return err("E_MALFORMED", "sig.pubkey must equal principal.address");
   return null;
 }
+var MAX_DELEGATION_MS = 365 * 864e5;
+function delegationWindowError(issuedAt, expiresAt) {
+  const issued = Date.parse(issuedAt);
+  const expires = Date.parse(expiresAt);
+  if (Number.isNaN(issued) || Number.isNaN(expires)) return "issued_at / expires_at must be real UTC times";
+  if (expires <= issued) return "expires_at must be after issued_at";
+  if (expires - issued > MAX_DELEGATION_MS) return "expires_at is more than 365 days after issued_at (SPEC \xA74.4)";
+  return null;
+}
 function checkActionShape(a) {
   if (a.kind !== "agent-action") return err("E_MALFORMED", 'kind must be "agent-action"');
   if (!isHex64(a.id)) return err("E_MALFORMED", "id must be 64 lowercase hex chars");
@@ -1073,6 +1083,8 @@ async function verifyFederationDelegation(input) {
   if (!ISO_UTC.test(env.issued_at) || !ISO_UTC.test(env.expires_at)) {
     return fail("E_MALFORMED", "issued_at / expires_at must be ISO 8601 UTC");
   }
+  const windowError = delegationWindowError(env.issued_at, env.expires_at);
+  if (windowError) return fail("E_MALFORMED", windowError);
   if (!/^[0-9a-f]{32}$/.test(env.nonce)) return fail("E_MALFORMED", "nonce must be 32 hex chars");
   let canonicalScopes;
   try {
@@ -1104,7 +1116,7 @@ async function verifyFederationDelegation(input) {
   if (!input.skipRevocationCheck && !input.revocations) {
     return fail(
       "E_MALFORMED",
-      "verifyFederationDelegation requires `revocations` (fetch kind-30085 by #delegation) or an explicit skipRevocationCheck:true to state that revocation is not being checked"
+      'verifyFederationDelegation requires `revocations` (query kind 30085 with "#t": [delegation id], SPEC \xA79.4) or an explicit skipRevocationCheck:true to state that revocation is not being checked'
     );
   }
   for (const rev of input.revocations ?? []) {
@@ -1117,7 +1129,6 @@ async function verifyFederationDelegation(input) {
     const now = input.now ?? /* @__PURE__ */ new Date();
     const issued = new Date(env.issued_at);
     const expires = new Date(env.expires_at);
-    if (expires <= issued) return fail("E_MALFORMED", "expires_at <= issued_at");
     if (now < issued) return fail("E_NOT_YET_VALID", `delegation not valid until ${env.issued_at}`);
     if (now >= expires) return fail("E_EXPIRED", `delegation expired at ${env.expires_at}`);
   }