@orangecheck/agent-core 2.5.1 → 2.7.0

package/dist/index.mjs

@@ -410,6 +410,7 @@ function hasPrivateScopes(envelope) {
 
 // src/verify.ts
 var DEFAULT_MAX_CHAIN_DEPTH = 5;
+var DEFAULT_MAX_SKEW_MS = 12e4;
 var AgentError = class extends Error {
   constructor(code, message) {
     super(message);
@@ -532,7 +533,6 @@ async function verifyDelegation(input) {
     const now = input.now ?? /* @__PURE__ */ new Date();
     const issued = new Date(env.issued_at);
     const expires = new Date(env.expires_at);
-    if (expires <= issued) return err("E_MALFORMED", "expires_at <= issued_at");
     if (now < issued) return err("E_NOT_YET_VALID", `delegation not valid until ${env.issued_at}`);
     if (now >= expires) return err("E_EXPIRED", `delegation expired at ${env.expires_at}`);
   }
@@ -545,6 +545,12 @@ async function verifyDelegation(input) {
   };
 }
 async function verifyAction(input) {
+  return verifyActionAt(input, input.now ?? /* @__PURE__ */ new Date());
+}
+async function verifyActionAsOfSignedAt(input) {
+  return verifyActionAt(input, null);
+}
+async function verifyActionAt(input, now) {
   const a = input.action;
   const d = input.delegation;
   const chain = input.subdelegationChain ?? [];
@@ -622,6 +628,17 @@ async function verifyAction(input) {
   if (signed < issued || signed >= expires) {
     return err("E_OUT_OF_WINDOW", `action.signed_at ${a.signed_at} is outside leaf window [${leaf.issued_at}, ${leaf.expires_at})`);
   }
+  if (now) {
+    const t = now.getTime();
+    for (const link of [rootHydrated, ...hydratedChain]) {
+      if (t < new Date(link.issued_at).getTime()) {
+        return err("E_NOT_YET_VALID", `${link.id} is not valid until ${link.issued_at}`);
+      }
+      if (t >= new Date(link.expires_at).getTime()) {
+        return err("E_EXPIRED", `${link.id} expired at ${link.expires_at}`);
+      }
+    }
+  }
   if (!leaf.scopes) {
     return err("E_SCOPES_NEITHER_PROVIDED", "leaf has no plaintext scopes after hydration");
   }
@@ -670,9 +687,21 @@ async function verifyAction(input) {
         if (revocationPrecedes(rev, revAnchor, a, actionAnchor)) {
           return err("E_REVOKED", `chain link ${link.id} was revoked by ${rev.id} before action was signed`);
         }
+        if (now && (revAnchor !== null || new Date(rev.signed_at).getTime() <= now.getTime())) {
+          return err("E_REVOKED", `chain link ${link.id} was revoked by ${rev.id}`);
+        }
       }
     }
   }
+  if (now) {
+    const maxSkew = input.maxSkewMs ?? DEFAULT_MAX_SKEW_MS;
+    if (Math.abs(now.getTime() - signed) > maxSkew) {
+      return err(
+        "E_STALE",
+        `action.signed_at ${a.signed_at} is more than ${maxSkew} ms from the time of verification ${now.toISOString()}`
+      );
+    }
+  }
   if (input.content) {
     const actualHash = "sha256:" + hexEncode(sha256(input.content));
     if (actualHash !== a.content.hash) {
@@ -700,7 +729,20 @@ async function verifyAction(input) {
     delegation: rootHydrated,
     chain: hydratedChain,
     scopeExercised: exercised,
-    anchor
+    anchor,
+    asOf: now ? { basis: "now", now: now.toISOString() } : { basis: "signed_at", signedAt: a.signed_at, anchored: actionAnchor !== null }
+  };
+}
+function createReplayGuard(maxSkewMs = DEFAULT_MAX_SKEW_MS) {
+  const keepUntil = /* @__PURE__ */ new Map();
+  return {
+    firstUse(action, now = /* @__PURE__ */ new Date()) {
+      const t = now.getTime();
+      for (const [id, until] of keepUntil) if (until <= t) keepUntil.delete(id);
+      if (keepUntil.has(action.id)) return false;
+      keepUntil.set(action.id, new Date(action.signed_at).getTime() + maxSkewMs);
+      return true;
+    }
   };
 }
 async function hydrateSubdelegationScopes(sub, input) {
@@ -797,11 +839,22 @@ function checkDelegationShape(env) {
   }
   if (!isIsoUtc(env.issued_at)) return err("E_MALFORMED", "issued_at must be ISO 8601 UTC");
   if (!isIsoUtc(env.expires_at)) return err("E_MALFORMED", "expires_at must be ISO 8601 UTC");
+  const windowError = delegationWindowError(env.issued_at, env.expires_at);
+  if (windowError) return err("E_MALFORMED", windowError);
   if (!/^[0-9a-f]{32}$/.test(env.nonce)) return err("E_MALFORMED", "nonce must be 32 lowercase hex chars");
   if (env.sig?.alg !== "bip322" || typeof env.sig.value !== "string") return err("E_MALFORMED", "sig invalid");
   if (env.sig.pubkey !== env.principal.address) return err("E_MALFORMED", "sig.pubkey must equal principal.address");
   return null;
 }
+var MAX_DELEGATION_MS = 365 * 864e5;
+function delegationWindowError(issuedAt, expiresAt) {
+  const issued = Date.parse(issuedAt);
+  const expires = Date.parse(expiresAt);
+  if (Number.isNaN(issued) || Number.isNaN(expires)) return "issued_at / expires_at must be real UTC times";
+  if (expires <= issued) return "expires_at must be after issued_at";
+  if (expires - issued > MAX_DELEGATION_MS) return "expires_at is more than 365 days after issued_at (SPEC \xA74.4)";
+  return null;
+}
 function checkActionShape(a) {
   if (a.kind !== "agent-action") return err("E_MALFORMED", 'kind must be "agent-action"');
   if (!isHex64(a.id)) return err("E_MALFORMED", "id must be 64 lowercase hex chars");
@@ -1073,6 +1126,8 @@ async function verifyFederationDelegation(input) {
   if (!ISO_UTC.test(env.issued_at) || !ISO_UTC.test(env.expires_at)) {
     return fail("E_MALFORMED", "issued_at / expires_at must be ISO 8601 UTC");
   }
+  const windowError = delegationWindowError(env.issued_at, env.expires_at);
+  if (windowError) return fail("E_MALFORMED", windowError);
   if (!/^[0-9a-f]{32}$/.test(env.nonce)) return fail("E_MALFORMED", "nonce must be 32 hex chars");
   let canonicalScopes;
   try {
@@ -1117,7 +1172,6 @@ async function verifyFederationDelegation(input) {
     const now = input.now ?? /* @__PURE__ */ new Date();
     const issued = new Date(env.issued_at);
     const expires = new Date(env.expires_at);
-    if (expires <= issued) return fail("E_MALFORMED", "expires_at <= issued_at");
     if (now < issued) return fail("E_NOT_YET_VALID", `delegation not valid until ${env.issued_at}`);
     if (now >= expires) return fail("E_EXPIRED", `delegation expired at ${env.expires_at}`);
   }
@@ -1228,6 +1282,6 @@ function assertScopeGranted(delegation, scopeExercised, fnName) {
   }
 }
 
-export { AgentError, DEFAULT_MAX_CHAIN_DEPTH, ENVELOPE_VERSION, REGISTERED_SCOPES, ScopeNotGrantedError, ScopeParseError, actionCanonicalBytes, actionCanonicalMessage, assertScopeGranted, canonicalActionBytes, canonicalDelegationBytes, canonicalRevocationBytes, canonicalizeAction, canonicalizeDelegation, canonicalizeRevocation, canonicalizeScope, canonicalizeScopeString, canonicalizeScopes, computeActionId, computeDelegationId, computeFederationDescriptorId, computeRevocationId, computeSubdelegationId, decodeScopesPayload, delegationCanonicalBytes, delegationCanonicalMessage, encodeScopesPayload, federationDescriptorCanonicalMessage, hasPrivateScopes, isSubScope, parseAndCanonicalizeScopes, parseScope, revocationCanonicalBytes, revocationCanonicalMessage, sealScopes, sha256Hex, subdelegationCanonicalBytes, subdelegationCanonicalMessage, unsealScopes, validateScope, verifyAction, verifyDelegation, verifyFederationDelegation, verifyFederationRevocation, verifyRevocation, verifySubdelegation };
+export { AgentError, DEFAULT_MAX_CHAIN_DEPTH, DEFAULT_MAX_SKEW_MS, ENVELOPE_VERSION, REGISTERED_SCOPES, ScopeNotGrantedError, ScopeParseError, actionCanonicalBytes, actionCanonicalMessage, assertScopeGranted, canonicalActionBytes, canonicalDelegationBytes, canonicalRevocationBytes, canonicalizeAction, canonicalizeDelegation, canonicalizeRevocation, canonicalizeScope, canonicalizeScopeString, canonicalizeScopes, computeActionId, computeDelegationId, computeFederationDescriptorId, computeRevocationId, computeSubdelegationId, createReplayGuard, decodeScopesPayload, delegationCanonicalBytes, delegationCanonicalMessage, encodeScopesPayload, federationDescriptorCanonicalMessage, hasPrivateScopes, isSubScope, parseAndCanonicalizeScopes, parseScope, revocationCanonicalBytes, revocationCanonicalMessage, sealScopes, sha256Hex, subdelegationCanonicalBytes, subdelegationCanonicalMessage, unsealScopes, validateScope, verifyAction, verifyActionAsOfSignedAt, verifyDelegation, verifyFederationDelegation, verifyFederationRevocation, verifyRevocation, verifySubdelegation };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map