@proof-holdings/delegation-self-refusal 0.1.0

package/dist/verdict.js

@@ -0,0 +1,89 @@
+import { defaultCacheDir, writeCache, readCache } from './cache.js';
+import { DEFAULT_BASE_URL, pollDelegationStatus } from './poll.js';
+import { MAX_GRACE_FAILURES, nextIntervalMs } from './schedule.js';
+/**
+ * Applies the documented defaults once. Both `guardDelegation` and `installProofLayer` call this
+ * exactly once per installation and hand the SAME object to the gate and to the showcase — two
+ * independent resolutions could disagree on `cacheDir` and silently split the grace state machine
+ * across two files.
+ */
+export function resolveOptions(opts) {
+    return {
+        ...opts,
+        token: opts.token,
+        baseUrl: opts.baseUrl ?? DEFAULT_BASE_URL,
+        cacheDir: opts.cacheDir ?? defaultCacheDir(),
+        pollIntervalMs: opts.pollIntervalMs ?? 60_000,
+    };
+}
+/**
+ * Caching is an optimization on top of an already-computed verdict, not a precondition for
+ * returning it — a filesystem error here (read-only FS, permission denial, disk full) must not
+ * throw out of the gated handler and must not discard a verdict that was already determined.
+ * `console.error` (never `console.log`/stdout) is this repo's established safe channel for an
+ * MCP stdio server, where stdout is the JSON-RPC transport itself (mcp/src/server.ts:96,100).
+ */
+export function safeWriteCache(cacheDir, token, entry) {
+    try {
+        writeCache(cacheDir, token, entry);
+    }
+    catch (error) {
+        console.error(`delegation-self-refusal: failed to persist cache entry (continuing with the verdict already computed): ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Applies the grace-window state machine and returns a definitive verdict. A cold start (no cache
+ * file at all) has no grace to extend — an unresolved first poll refuses immediately (SC-12: "a
+ * first run has none"). A cached UnresolvedVerdict is never persisted as `lastDecided`: only
+ * ValidVerdict/RefusedVerdict are ever served from cache.
+ */
+export async function currentVerdict(opts) {
+    const cache = readCache(opts.cacheDir, opts.token);
+    const interval = nextIntervalMs(opts.pollIntervalMs);
+    const dueForPoll = !cache || Date.now() - cache.lastCheckedAtMs >= interval;
+    let result;
+    if (dueForPoll) {
+        result = await pollDelegationStatus(opts.token, opts.baseUrl, opts.fetchImpl);
+    }
+    else if (cache?.lastDecided) {
+        return cache.lastDecided;
+    }
+    else {
+        result = { kind: 'unresolved' };
+    }
+    if (result.kind !== 'unresolved') {
+        safeWriteCache(opts.cacheDir, opts.token, {
+            lastDecided: result,
+            lastCheckedAtMs: Date.now(),
+            consecutiveUnresolved: 0,
+        });
+        return result;
+    }
+    const failures = (cache?.consecutiveUnresolved ?? 0) + 1;
+    if (cache?.lastDecided && failures <= MAX_GRACE_FAILURES) {
+        safeWriteCache(opts.cacheDir, opts.token, {
+            lastDecided: cache.lastDecided,
+            lastCheckedAtMs: Date.now(),
+            consecutiveUnresolved: failures,
+        });
+        return cache.lastDecided;
+    }
+    const refusal = cache?.lastDecided
+        ? {
+            kind: 'refused',
+            reason: 'grace_exhausted',
+            message: `Could not reconfirm authorization after ${failures} consecutive failed checks`,
+        }
+        : {
+            kind: 'refused',
+            reason: 'unresolved_at_startup',
+            message: 'Authorization could not be confirmed on the first check',
+        };
+    safeWriteCache(opts.cacheDir, opts.token, {
+        lastDecided: refusal,
+        lastCheckedAtMs: Date.now(),
+        consecutiveUnresolved: failures,
+    });
+    return refusal;
+}
+//# sourceMappingURL=verdict.js.map

package/dist/verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict.js","sourceRoot":"","sources":["../src/verdict.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAuBnE;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAgE;IAC7F,OAAO;QACL,GAAG,IAAI;QACP,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,gBAAgB;QACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,eAAe,EAAE;QAC5C,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,MAAM;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,KAAa,EAAE,KAAuC;IACrG,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CACX,0GACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAqB;IACxD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,eAAe,IAAI,QAAQ,CAAC;IAE5E,IAAI,MAAkB,CAAC;IACvB,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAChF,CAAC;SAAM,IAAI,KAAK,EAAE,WAAW,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,WAAW,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACjC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE;YACxC,WAAW,EAAE,MAAM;YACnB,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE;YAC3B,qBAAqB,EAAE,CAAC;SACzB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,qBAAqB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAEzD,IAAI,KAAK,EAAE,WAAW,IAAI,QAAQ,IAAI,kBAAkB,EAAE,CAAC;QACzD,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE;YACxC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE;YAC3B,qBAAqB,EAAE,QAAQ;SAChC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,WAAW,CAAC;IAC3B,CAAC;IAED,MAAM,OAAO,GAAmB,KAAK,EAAE,WAAW;QAChD,CAAC,CAAC;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,iBAAiB;YACzB,OAAO,EAAE,2CAA2C,QAAQ,4BAA4B;SACzF;QACH,CAAC,CAAC;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,uBAAuB;YAC/B,OAAO,EAAE,yDAAyD;SACnE,CAAC;IAEN,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,EAAE;QACxC,WAAW,EAAE,OAAO;QACpB,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3B,qBAAqB,EAAE,QAAQ;KAChC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/package.json

@@ -0,0 +1,69 @@
+{
+  "name": "@proof-holdings/delegation-self-refusal",
+  "version": "0.1.0",
+  "description": "A delegated MCP server that refuses its own tool calls once its Proof of Delegation is revoked, suspended, or expired — self-enforcement, not consumer verification",
+  "type": "module",
+  "license": "MIT",
+  "author": "proof.holdings <hello@proof.holdings> (https://proof.holdings)",
+  "homepage": "https://proof.holdings",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ProofHoldings/delegation-self-refusal.git"
+  },
+  "bugs": {
+    "email": "hello@proof.holdings",
+    "url": "https://proof.holdings/support"
+  },
+  "keywords": [
+    "proof-of-delegation",
+    "delegation",
+    "revocation",
+    "mcp",
+    "agent-card",
+    "self-enforcement"
+  ],
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "peerDependencies": {
+    "zod": "^3.25 || ^4.0"
+  },
+  "peerDependenciesMeta": {
+    "zod": {
+      "optional": false
+    }
+  },
+  "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.12.0",
+    "@types/node": "^20.11.0",
+    "typescript": "^5.5.0",
+    "vitest": "^3.0.0",
+    "zod": "^3.25.76"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@proof-holdings/delegation-verifier": "^0.1.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}