@orangecheck/agent-core 2.5.1 → 2.6.0

package/README.md

@@ -1,6 +1,6 @@
 # @orangecheck/agent-core
 
-> **Full reference:** [docs.ochk.io/sdk/agent-core](https://docs.ochk.io/sdk/agent-core) — auto-generated from the TypeScript source on every release.
+> **Full reference:** [ochk.io/docs/sdk/agent-core](https://ochk.io/docs/sdk/agent-core) — auto-generated from the TypeScript source on every release.
 > Hand-written prose below is the high-level overview; the docs site is the source of truth for every export, type, and signature.
 
 

package/dist/index.js

@@ -533,7 +533,6 @@ async function verifyDelegation(input) {
     const now = input.now ?? /* @__PURE__ */ new Date();
     const issued = new Date(env.issued_at);
     const expires = new Date(env.expires_at);
-    if (expires <= issued) return err("E_MALFORMED", "expires_at <= issued_at");
     if (now < issued) return err("E_NOT_YET_VALID", `delegation not valid until ${env.issued_at}`);
     if (now >= expires) return err("E_EXPIRED", `delegation expired at ${env.expires_at}`);
   }
@@ -798,11 +797,22 @@ function checkDelegationShape(env) {
   }
   if (!isIsoUtc(env.issued_at)) return err("E_MALFORMED", "issued_at must be ISO 8601 UTC");
   if (!isIsoUtc(env.expires_at)) return err("E_MALFORMED", "expires_at must be ISO 8601 UTC");
+  const windowError = delegationWindowError(env.issued_at, env.expires_at);
+  if (windowError) return err("E_MALFORMED", windowError);
   if (!/^[0-9a-f]{32}$/.test(env.nonce)) return err("E_MALFORMED", "nonce must be 32 lowercase hex chars");
   if (env.sig?.alg !== "bip322" || typeof env.sig.value !== "string") return err("E_MALFORMED", "sig invalid");
   if (env.sig.pubkey !== env.principal.address) return err("E_MALFORMED", "sig.pubkey must equal principal.address");
   return null;
 }
+var MAX_DELEGATION_MS = 365 * 864e5;
+function delegationWindowError(issuedAt, expiresAt) {
+  const issued = Date.parse(issuedAt);
+  const expires = Date.parse(expiresAt);
+  if (Number.isNaN(issued) || Number.isNaN(expires)) return "issued_at / expires_at must be real UTC times";
+  if (expires <= issued) return "expires_at must be after issued_at";
+  if (expires - issued > MAX_DELEGATION_MS) return "expires_at is more than 365 days after issued_at (SPEC \xA74.4)";
+  return null;
+}
 function checkActionShape(a) {
   if (a.kind !== "agent-action") return err("E_MALFORMED", 'kind must be "agent-action"');
   if (!isHex64(a.id)) return err("E_MALFORMED", "id must be 64 lowercase hex chars");
@@ -1074,6 +1084,8 @@ async function verifyFederationDelegation(input) {
   if (!ISO_UTC.test(env.issued_at) || !ISO_UTC.test(env.expires_at)) {
     return fail("E_MALFORMED", "issued_at / expires_at must be ISO 8601 UTC");
   }
+  const windowError = delegationWindowError(env.issued_at, env.expires_at);
+  if (windowError) return fail("E_MALFORMED", windowError);
   if (!/^[0-9a-f]{32}$/.test(env.nonce)) return fail("E_MALFORMED", "nonce must be 32 hex chars");
   let canonicalScopes;
   try {
@@ -1118,7 +1130,6 @@ async function verifyFederationDelegation(input) {
     const now = input.now ?? /* @__PURE__ */ new Date();
     const issued = new Date(env.issued_at);
     const expires = new Date(env.expires_at);
-    if (expires <= issued) return fail("E_MALFORMED", "expires_at <= issued_at");
     if (now < issued) return fail("E_NOT_YET_VALID", `delegation not valid until ${env.issued_at}`);
     if (now >= expires) return fail("E_EXPIRED", `delegation expired at ${env.expires_at}`);
   }