@sentropic/h2a-cli 0.75.0 → 0.78.0

package/dist/runtime/remote/client.d.ts

@@ -1,27 +0,0 @@
-/**
- * HTTP client for signed envelopes (DEC-076), the send side of slice 3b.
- *
- * Signs an envelope (DEC-073) and POSTs it to a remote h2a endpoint. The
- * transport only moves bytes — provenance and freshness are carried in the
- * envelope itself and verified by the receiver (DEC-075).
- */
-import { type H2AEnvelope } from "@sentropic/h2a";
-export interface SendRemoteOptions {
-    /** Signer instance id recorded in the signature's `by`. */
-    by: string;
-    /** Signer's ed25519 private-key PEM. */
-    privateKeyPem: string;
-    /** Optional fetch override (tests / custom agents). Defaults to global fetch. */
-    fetchImpl?: typeof fetch;
-}
-export interface SendRemoteResult {
-    status: number;
-    body: unknown;
-}
-/**
- * Sign `envelope` and POST it as JSON to `url`. Returns the HTTP status and the
- * parsed JSON body (or undefined if the response was not JSON). Network errors
- * propagate to the caller.
- */
-export declare function sendRemoteEnvelope(url: string, envelope: H2AEnvelope, options: SendRemoteOptions): Promise<SendRemoteResult>;
-//# sourceMappingURL=client.d.ts.map

package/dist/runtime/remote/client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/runtime/remote/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAgB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,2DAA2D;IAC3D,EAAE,EAAE,MAAM,CAAC;IACX,wCAAwC;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAkB3B"}

package/dist/runtime/remote/client.js

@@ -1,34 +0,0 @@
-/**
- * HTTP client for signed envelopes (DEC-076), the send side of slice 3b.
- *
- * Signs an envelope (DEC-073) and POSTs it to a remote h2a endpoint. The
- * transport only moves bytes — provenance and freshness are carried in the
- * envelope itself and verified by the receiver (DEC-075).
- */
-import { signEnvelope } from "@sentropic/h2a";
-/**
- * Sign `envelope` and POST it as JSON to `url`. Returns the HTTP status and the
- * parsed JSON body (or undefined if the response was not JSON). Network errors
- * propagate to the caller.
- */
-export async function sendRemoteEnvelope(url, envelope, options) {
-    const signed = signEnvelope(envelope, {
-        by: options.by,
-        privateKeyPem: options.privateKeyPem
-    });
-    const doFetch = options.fetchImpl ?? fetch;
-    const res = await doFetch(url, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify(signed)
-    });
-    let body;
-    try {
-        body = await res.json();
-    }
-    catch {
-        body = undefined;
-    }
-    return { status: res.status, body };
-}
-//# sourceMappingURL=client.js.map

package/dist/runtime/remote/client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/runtime/remote/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAoB,MAAM,gBAAgB,CAAC;AAgBhE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,QAAqB,EACrB,OAA0B;IAE1B,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,EAAE;QACpC,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,aAAa,EAAE,OAAO,CAAC,aAAa;KACrC,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAC7B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;KAC7B,CAAC,CAAC;IACH,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC"}

package/dist/runtime/remote/index.d.ts

@@ -1,5 +0,0 @@
-export { acceptRemoteEnvelope, type AcceptRemoteOptions, type H2AAcceptRejection, type H2AAcceptResult } from "./accept.js";
-export { createRemoteServer, rejectionStatus, type RemoteServerOptions } from "./server.js";
-export { sendRemoteEnvelope, type SendRemoteOptions, type SendRemoteResult } from "./client.js";
-export { remoteServerForStore, type RemoteServerForStoreOptions } from "./serve.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/runtime/remote/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/remote/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,KAAK,mBAAmB,EACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,KAAK,2BAA2B,EACjC,MAAM,YAAY,CAAC"}

package/dist/runtime/remote/index.js

@@ -1,5 +0,0 @@
-export { acceptRemoteEnvelope } from "./accept.js";
-export { createRemoteServer, rejectionStatus } from "./server.js";
-export { sendRemoteEnvelope } from "./client.js";
-export { remoteServerForStore } from "./serve.js";
-//# sourceMappingURL=index.js.map

package/dist/runtime/remote/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/remote/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EAIrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAClB,eAAe,EAEhB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,kBAAkB,EAGnB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EAErB,MAAM,YAAY,CAAC"}

package/dist/runtime/remote/serve.d.ts

@@ -1,27 +0,0 @@
-/**
- * Store wiring for the remote HTTP server (DEC-077), slice 3b-ii.
- *
- * Binds the generic `createRemoteServer` (DEC-076) to a local-files store:
- * public keys are resolved from the registry, and accepted envelopes are
- * delivered to the recipient's inbox. Kept separate from `server.ts` so the
- * HTTP layer stays store-agnostic and unit-testable.
- */
-import type { Server } from "node:http";
-import { type H2AReplayGuard } from "@sentropic/h2a";
-import type { LocalStore } from "../local-files/store.js";
-export interface RemoteServerForStoreOptions {
-    /** POST endpoint path. Default `/h2a/envelopes`. */
-    path?: string;
-    /** Shared replay guard. Defaults to a fresh in-memory guard. */
-    guard?: H2AReplayGuard;
-    /** Body-size cap (bytes). */
-    maxBodyBytes?: number;
-}
-/**
- * Build (unstarted) an HTTP server that authenticates against `store`'s
- * registry and delivers accepted envelopes to local inboxes. Resolving a
- * signer with no registered public key yields `no-public-key` (401), so an
- * unknown or key-less sender is refused.
- */
-export declare function remoteServerForStore(store: LocalStore, options?: RemoteServerForStoreOptions): Server;
-//# sourceMappingURL=serve.d.ts.map

package/dist/runtime/remote/serve.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../../../src/runtime/remote/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAG1D,MAAM,WAAW,2BAA2B;IAC1C,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,6BAA6B;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,UAAU,EACjB,OAAO,GAAE,2BAAgC,GACxC,MAAM,CAQR"}

package/dist/runtime/remote/serve.js

@@ -1,26 +0,0 @@
-/**
- * Store wiring for the remote HTTP server (DEC-077), slice 3b-ii.
- *
- * Binds the generic `createRemoteServer` (DEC-076) to a local-files store:
- * public keys are resolved from the registry, and accepted envelopes are
- * delivered to the recipient's inbox. Kept separate from `server.ts` so the
- * HTTP layer stays store-agnostic and unit-testable.
- */
-import { createReplayGuard } from "@sentropic/h2a";
-import { createRemoteServer } from "./server.js";
-/**
- * Build (unstarted) an HTTP server that authenticates against `store`'s
- * registry and delivers accepted envelopes to local inboxes. Resolving a
- * signer with no registered public key yields `no-public-key` (401), so an
- * unknown or key-less sender is refused.
- */
-export function remoteServerForStore(store, options = {}) {
-    return createRemoteServer({
-        resolvePublicKeys: (signer) => store.listInstanceKeys(signer),
-        deliver: (recipient, envelope) => store.putInboxMessage(recipient, envelope),
-        guard: options.guard ?? createReplayGuard(),
-        path: options.path,
-        maxBodyBytes: options.maxBodyBytes
-    });
-}
-//# sourceMappingURL=serve.js.map

package/dist/runtime/remote/serve.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"serve.js","sourceRoot":"","sources":["../../../src/runtime/remote/serve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,OAAO,EAAE,iBAAiB,EAAuB,MAAM,gBAAgB,CAAC;AAGxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAWjD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAiB,EACjB,UAAuC,EAAE;IAEzC,OAAO,kBAAkB,CAAC;QACxB,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAC7D,OAAO,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,EAAE,QAAQ,CAAC;QAC5E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,iBAAiB,EAAE;QAC3C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/remote/server.d.ts

@@ -1,36 +0,0 @@
-/**
- * HTTP transport for signed envelopes (DEC-076), slice 3b of the signed-bearer
- * transport-auth workstream (DEC-073/074/075).
- *
- * The server is a thin, channel-untrusting front-end over the DEC-075
- * `acceptRemoteEnvelope` pipeline: it reads a POSTed JSON envelope and hands it
- * to the pipeline, which does all verification. The HTTP layer adds only
- * framing (a single POST endpoint, a body-size cap) and a result→status map.
- */
-import { type Server } from "node:http";
-import { type H2AEnvelope, type H2AReplayGuard } from "@sentropic/h2a";
-import { type H2AAcceptRejection } from "./accept.js";
-export interface RemoteServerOptions {
-    /** Resolve a signer instance to its active ed25519 public-key PEMs (DEC-078). */
-    resolvePublicKeys: (signerInstance: string) => string[];
-    /** Deliver an accepted envelope to a local recipient's inbox. */
-    deliver: (recipient: string, envelope: H2AEnvelope) => void;
-    /** Shared replay guard. Defaults to a fresh in-memory guard (DEC-074). */
-    guard?: H2AReplayGuard;
-    /** POST endpoint path. Default `/h2a/envelopes`. */
-    path?: string;
-    /** Reject bodies larger than this many bytes. Default 256 KiB. */
-    maxBodyBytes?: number;
-    /** Clock source handed to the replay guard. Defaults to `Date.now`. */
-    now?: () => number;
-}
-/** Map an accept-pipeline rejection to an HTTP status code. */
-export declare function rejectionStatus(reason: H2AAcceptRejection): number;
-/**
- * Build (but do not start) an HTTP server that feeds POSTed envelopes to the
- * DEC-075 trust boundary. Accepted → 202; rejected → see {@link rejectionStatus};
- * wrong method/path → 404/405. The caller starts it with `.listen(port, host)`
- * and is responsible for closing it.
- */
-export declare function createRemoteServer(options: RemoteServerOptions): Server;
-//# sourceMappingURL=server.d.ts.map

package/dist/runtime/remote/server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../src/runtime/remote/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAqB,KAAK,WAAW,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE1F,OAAO,EAAwB,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,iBAAiB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACxD,iEAAiE;IACjE,OAAO,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,KAAK,IAAI,CAAC;IAC5D,0EAA0E;IAC1E,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,+DAA+D;AAC/D,wBAAgB,eAAe,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAkBlE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CA2DvE"}

package/dist/runtime/remote/server.js

@@ -1,100 +0,0 @@
-/**
- * HTTP transport for signed envelopes (DEC-076), slice 3b of the signed-bearer
- * transport-auth workstream (DEC-073/074/075).
- *
- * The server is a thin, channel-untrusting front-end over the DEC-075
- * `acceptRemoteEnvelope` pipeline: it reads a POSTed JSON envelope and hands it
- * to the pipeline, which does all verification. The HTTP layer adds only
- * framing (a single POST endpoint, a body-size cap) and a result→status map.
- */
-import { createServer } from "node:http";
-import { createReplayGuard } from "@sentropic/h2a";
-import { acceptRemoteEnvelope } from "./accept.js";
-/** Map an accept-pipeline rejection to an HTTP status code. */
-export function rejectionStatus(reason) {
-    switch (reason) {
-        case "malformed":
-        case "no-target":
-        case "no-signature":
-        case "invalid-timestamp":
-            return 400; // bad request (structural / unparseable)
-        case "no-public-key":
-        case "bad-signature":
-            return 401; // unauthorized (cannot authenticate the emitter)
-        case "replayed":
-            return 409; // conflict (already seen)
-        case "expired":
-        case "future":
-            return 422; // unprocessable (outside the freshness window)
-        default:
-            return 400;
-    }
-}
-/**
- * Build (but do not start) an HTTP server that feeds POSTed envelopes to the
- * DEC-075 trust boundary. Accepted → 202; rejected → see {@link rejectionStatus};
- * wrong method/path → 404/405. The caller starts it with `.listen(port, host)`
- * and is responsible for closing it.
- */
-export function createRemoteServer(options) {
-    const guard = options.guard ?? createReplayGuard();
-    const path = options.path ?? "/h2a/envelopes";
-    const maxBodyBytes = options.maxBodyBytes ?? 256 * 1024;
-    return createServer((req, res) => {
-        const respond = (status, body) => {
-            const payload = JSON.stringify(body);
-            res.writeHead(status, { "content-type": "application/json" });
-            res.end(payload);
-        };
-        const url = req.url ?? "";
-        if (url.split("?")[0] !== path) {
-            respond(404, { ok: false, error: "not-found" });
-            return;
-        }
-        if (req.method !== "POST") {
-            res.setHeader("allow", "POST");
-            respond(405, { ok: false, error: "method-not-allowed" });
-            return;
-        }
-        const chunks = [];
-        let total = 0;
-        let aborted = false;
-        req.on("data", (chunk) => {
-            if (aborted)
-                return;
-            total += chunk.length;
-            if (total > maxBodyBytes) {
-                aborted = true;
-                respond(413, { ok: false, error: "payload-too-large" });
-                req.destroy();
-                return;
-            }
-            chunks.push(chunk);
-        });
-        req.on("end", () => {
-            if (aborted)
-                return;
-            let payload;
-            try {
-                payload = JSON.parse(Buffer.concat(chunks).toString("utf8"));
-            }
-            catch {
-                respond(400, { ok: false, reason: "malformed" });
-                return;
-            }
-            const result = acceptRemoteEnvelope(payload, {
-                resolvePublicKeys: options.resolvePublicKeys,
-                guard,
-                deliver: options.deliver,
-                now: options.now?.()
-            });
-            if (result.ok) {
-                respond(202, result);
-            }
-            else {
-                respond(rejectionStatus(result.reason), result);
-            }
-        });
-    });
-}
-//# sourceMappingURL=server.js.map

package/dist/runtime/remote/server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/runtime/remote/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AAEtD,OAAO,EAAE,iBAAiB,EAAyC,MAAM,gBAAgB,CAAC;AAE1F,OAAO,EAAE,oBAAoB,EAA2B,MAAM,aAAa,CAAC;AAiB5E,+DAA+D;AAC/D,MAAM,UAAU,eAAe,CAAC,MAA0B;IACxD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,cAAc,CAAC;QACpB,KAAK,mBAAmB;YACtB,OAAO,GAAG,CAAC,CAAC,yCAAyC;QACvD,KAAK,eAAe,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,GAAG,CAAC,CAAC,iDAAiD;QAC/D,KAAK,UAAU;YACb,OAAO,GAAG,CAAC,CAAC,0BAA0B;QACxC,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,GAAG,CAAC,CAAC,+CAA+C;QAC7D;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,iBAAiB,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,gBAAgB,CAAC;IAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,CAAC;IAExD,OAAO,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/B,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,IAAa,EAAQ,EAAE;YACtD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC9D,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;QAC1B,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,GAAG,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/B,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,OAAO;gBAAE,OAAO;YACpB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,YAAY,EAAE,CAAC;gBACzB,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBACxD,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,OAAO;gBAAE,OAAO;YACpB,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;gBACjD,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE;gBAC3C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,KAAK;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE;aACrB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime/sysml/client.d.ts

@@ -1,44 +0,0 @@
-/**
- * DEC-098 — SysML v2 interop S2 (spec: docs/sysml-interop.md §7, DEC-081). The
- * I/O adapter: fetch a referenced element from the SysML v2 API & Services and
- * canonical-hash it for content-integrity (trust level (b), §4). Pure ref types
- * stay in core (S1); all I/O lives here. The verify path + CLI are S3.
- *
- * Endpoint follows the OMG SysML v2 API & Services REST/HTTP PSM:
- *   GET {apiBase}/projects/{project}/commits/{commit}/elements/{element}
- *
- * The HTTP client is injectable (`fetchImpl`) so the adapter is unit-testable
- * against a mock API with no network. API credentials are held out-of-band and
- * passed per call (`auth`); h2a never embeds them in envelopes (§6).
- */
-import { type H2ASysmlRef } from "@sentropic/h2a";
-/** Minimal subset of the Fetch `Response` the adapter needs (global `fetch` satisfies it). */
-export interface SysmlFetchResponse {
-    readonly ok: boolean;
-    readonly status: number;
-    json(): Promise<unknown>;
-}
-export type SysmlFetchImpl = (url: string, init?: {
-    headers?: Record<string, string>;
-}) => Promise<SysmlFetchResponse>;
-export interface ResolveSysmlOptions {
-    /** Repository base URL; falls back to `ref.apiBase`. */
-    readonly apiBase?: string;
-    /** Bearer token for the SysML API (held out-of-band, never in an envelope). */
-    readonly auth?: string;
-    /** Injected HTTP client; defaults to global `fetch`. */
-    readonly fetchImpl?: SysmlFetchImpl;
-}
-/**
- * Fetch the referenced element at its immutable commit. Requires `ref.element`
- * (whole-project resolution — `element` omitted — is a later slice; default
- * documented in docs/loop-decisions.md). Throws on a non-OK HTTP status.
- */
-export declare function resolveSysmlElement(ref: H2ASysmlRef, options?: ResolveSysmlOptions): Promise<unknown>;
-/**
- * Canonical hash of a fetched element, for content-integrity (trust level (b)).
- * Reuses the core canonical hashing (DEC-035) so the value is comparable to a
- * `ref.elementHash` embedded at sign time.
- */
-export declare function hashSysmlElement(element: unknown): string;
-//# sourceMappingURL=client.d.ts.map

package/dist/runtime/sysml/client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/runtime/sysml/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE/D,8FAA8F;AAC9F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1B;AAED,MAAM,MAAM,cAAc,GAAG,CAC3B,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,KACxC,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEjC,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;CACrC;AAUD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,WAAW,EAChB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,OAAO,CAAC,CAoBlB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEzD"}

package/dist/runtime/sysml/client.js

@@ -1,52 +0,0 @@
-/**
- * DEC-098 — SysML v2 interop S2 (spec: docs/sysml-interop.md §7, DEC-081). The
- * I/O adapter: fetch a referenced element from the SysML v2 API & Services and
- * canonical-hash it for content-integrity (trust level (b), §4). Pure ref types
- * stay in core (S1); all I/O lives here. The verify path + CLI are S3.
- *
- * Endpoint follows the OMG SysML v2 API & Services REST/HTTP PSM:
- *   GET {apiBase}/projects/{project}/commits/{commit}/elements/{element}
- *
- * The HTTP client is injectable (`fetchImpl`) so the adapter is unit-testable
- * against a mock API with no network. API credentials are held out-of-band and
- * passed per call (`auth`); h2a never embeds them in envelopes (§6).
- */
-import { computeHash } from "@sentropic/h2a";
-function resolveBase(ref, options) {
-    const base = options.apiBase ?? ref.apiBase;
-    if (!base) {
-        throw new Error("resolveSysmlElement: apiBase is required (pass it or set ref.apiBase)");
-    }
-    return base.replace(/\/+$/, "");
-}
-/**
- * Fetch the referenced element at its immutable commit. Requires `ref.element`
- * (whole-project resolution — `element` omitted — is a later slice; default
- * documented in docs/loop-decisions.md). Throws on a non-OK HTTP status.
- */
-export async function resolveSysmlElement(ref, options = {}) {
-    if (!ref.element) {
-        throw new Error("resolveSysmlElement: ref.element is required (whole-project resolution is not supported yet)");
-    }
-    const base = resolveBase(ref, options);
-    const url = `${base}/projects/${encodeURIComponent(ref.project)}/commits/${encodeURIComponent(ref.commit)}/elements/${encodeURIComponent(ref.element)}`;
-    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
-    if (!fetchImpl) {
-        throw new Error("resolveSysmlElement: no fetch implementation available (pass fetchImpl)");
-    }
-    const headers = options.auth ? { Authorization: `Bearer ${options.auth}` } : undefined;
-    const res = await fetchImpl(url, headers ? { headers } : undefined);
-    if (!res.ok) {
-        throw new Error(`resolveSysmlElement: ${url} returned HTTP ${res.status}`);
-    }
-    return res.json();
-}
-/**
- * Canonical hash of a fetched element, for content-integrity (trust level (b)).
- * Reuses the core canonical hashing (DEC-035) so the value is comparable to a
- * `ref.elementHash` embedded at sign time.
- */
-export function hashSysmlElement(element) {
-    return computeHash(element);
-}
-//# sourceMappingURL=client.js.map

package/dist/runtime/sysml/client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../src/runtime/sysml/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,WAAW,EAAoB,MAAM,gBAAgB,CAAC;AAuB/D,SAAS,WAAW,CAAC,GAAgB,EAAE,OAA4B;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAAgB,EAChB,UAA+B,EAAE;IAEjC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,8FAA8F,CAC/F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,GAAG,IAAI,aAAa,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,kBAAkB,CAC3F,GAAG,CAAC,MAAM,CACX,aAAa,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAK,UAAU,CAAC,KAA+C,CAAC;IACnG,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,kBAAkB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;AAC9B,CAAC"}

package/dist/runtime/sysml/disclosure.d.ts

@@ -1,23 +0,0 @@
-/**
- * DEC-100 — SysML v2 interop S4 (spec §5, DEC-081). Map an h2a disclosure mode
- * (DEC-045) onto a SysML v2 **query scope**: what a CONTROL / recipient may read
- * through the API, expressed abstractly (the concrete API params / SysML `view`
- * id are repo-specific — this is the policy→scope decision, not the wire call).
- *
- * Pure + total over the six disclosure modes.
- */
-import type { H2ADisclosureMode } from "@sentropic/h2a";
-/** How much of the referenced element the recipient may read. */
-export type H2ASysmlQueryDetail = "none" | "attestation" | "metadata" | "redacted" | "full";
-export interface H2ASysmlQueryScope {
-    readonly mode: H2ADisclosureMode;
-    /** Whether the adapter should fetch element content at all. */
-    readonly fetch: boolean;
-    readonly detail: H2ASysmlQueryDetail;
-    /** Suggested SysML view id (viewpoint/view mechanism) when a filtered query applies. */
-    readonly view?: string;
-    readonly note: string;
-}
-/** Total: every disclosure mode maps to a query scope. */
-export declare function sysmlQueryScope(mode: H2ADisclosureMode): H2ASysmlQueryScope;
-//# sourceMappingURL=disclosure.d.ts.map

package/dist/runtime/sysml/disclosure.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"disclosure.d.ts","sourceRoot":"","sources":["../../../src/runtime/sysml/disclosure.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,iEAAiE;AACjE,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,aAAa,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;AAE5F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,wFAAwF;IACxF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AA2CD,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,IAAI,EAAE,iBAAiB,GAAG,kBAAkB,CAE3E"}

package/dist/runtime/sysml/disclosure.js

@@ -1,53 +0,0 @@
-/**
- * DEC-100 — SysML v2 interop S4 (spec §5, DEC-081). Map an h2a disclosure mode
- * (DEC-045) onto a SysML v2 **query scope**: what a CONTROL / recipient may read
- * through the API, expressed abstractly (the concrete API params / SysML `view`
- * id are repo-specific — this is the policy→scope decision, not the wire call).
- *
- * Pure + total over the six disclosure modes.
- */
-const SCOPES = {
-    denied: {
-        mode: "denied",
-        fetch: false,
-        detail: "none",
-        note: "no access — the recipient may not query the model"
-    },
-    "hash-only": {
-        mode: "hash-only",
-        fetch: false,
-        detail: "none",
-        note: "compare the embedded elementHash only; no content query"
-    },
-    attestation: {
-        mode: "attestation",
-        fetch: false,
-        detail: "attestation",
-        note: "the signed envelope (with elementHash) is the attestation; no content query"
-    },
-    "evidence-package": {
-        mode: "evidence-package",
-        fetch: true,
-        detail: "metadata",
-        note: "fetch element metadata + hash for an evidence package (not full content)"
-    },
-    "redacted-view": {
-        mode: "redacted-view",
-        fetch: true,
-        detail: "redacted",
-        view: "redacted",
-        note: "query a SysML redacted view (sensitive members excluded)"
-    },
-    "full-view": {
-        mode: "full-view",
-        fetch: true,
-        detail: "full",
-        view: "full",
-        note: "query the full element"
-    }
-};
-/** Total: every disclosure mode maps to a query scope. */
-export function sysmlQueryScope(mode) {
-    return SCOPES[mode];
-}
-//# sourceMappingURL=disclosure.js.map

package/dist/runtime/sysml/disclosure.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"disclosure.js","sourceRoot":"","sources":["../../../src/runtime/sysml/disclosure.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiBH,MAAM,MAAM,GAAkD;IAC5D,MAAM,EAAE;QACN,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,mDAAmD;KAC1D;IACD,WAAW,EAAE;QACX,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,yDAAyD;KAChE;IACD,WAAW,EAAE;QACX,IAAI,EAAE,aAAa;QACnB,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,6EAA6E;KACpF;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,kBAAkB;QACxB,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,0EAA0E;KACjF;IACD,eAAe,EAAE;QACf,IAAI,EAAE,eAAe;QACrB,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,0DAA0D;KACjE;IACD,WAAW,EAAE;QACX,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,wBAAwB;KAC/B;CACF,CAAC;AAEF,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,IAAuB;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;AACtB,CAAC"}

package/dist/runtime/sysml/index.d.ts

@@ -1,4 +0,0 @@
-export { resolveSysmlElement, hashSysmlElement, type SysmlFetchImpl, type SysmlFetchResponse, type ResolveSysmlOptions } from "./client.js";
-export { verifyEnvelopeSysmlRef, extractSysmlRef, type VerifyEnvelopeSysmlOptions, type VerifyEnvelopeSysmlResult } from "./verify.js";
-export { sysmlQueryScope, type H2ASysmlQueryScope, type H2ASysmlQueryDetail } from "./disclosure.js";
-//# sourceMappingURL=index.d.ts.map

package/dist/runtime/sysml/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/sysml/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC/B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACzB,MAAM,iBAAiB,CAAC"}

package/dist/runtime/sysml/index.js

@@ -1,4 +0,0 @@
-export { resolveSysmlElement, hashSysmlElement } from "./client.js";
-export { verifyEnvelopeSysmlRef, extractSysmlRef } from "./verify.js";
-export { sysmlQueryScope } from "./disclosure.js";
-//# sourceMappingURL=index.js.map

package/dist/runtime/sysml/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/sysml/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAIjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,eAAe,EAGhB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EAGhB,MAAM,iBAAiB,CAAC"}

package/dist/runtime/sysml/verify.d.ts

@@ -1,32 +0,0 @@
-/**
- * DEC-099 — SysML v2 interop S3 (spec §4, DEC-081). Verify that an envelope's
- * embedded `H2ASysmlRef` is (a) signed by the claimed actor — **commit-trust**,
- * the default: a valid signature over an immutable commit is enough — and
- * optionally (b) **content-integrity**: re-fetch the element (S2) and check its
- * canonical hash against the `elementHash` embedded at sign time, catching a
- * repository that violated immutability or a wrong `apiBase`.
- */
-import { type H2AEnvelope, type H2ASysmlRef } from "@sentropic/h2a";
-import { type SysmlFetchImpl } from "./client.js";
-/** Extract the ref from the conventional location `body.subject.sysmlRef` (spec §2). */
-export declare function extractSysmlRef(envelope: H2AEnvelope): H2ASysmlRef | undefined;
-export interface VerifyEnvelopeSysmlOptions {
-    /** Public key to verify the envelope signature against (commit-trust). */
-    readonly publicKeyPem: string;
-    /** Only accept a signature from this signer id. */
-    readonly by?: string;
-    /** Also re-fetch + re-hash the element and compare to `ref.elementHash`. */
-    readonly contentIntegrity?: boolean;
-    readonly apiBase?: string;
-    readonly auth?: string;
-    readonly fetchImpl?: SysmlFetchImpl;
-}
-export interface VerifyEnvelopeSysmlResult {
-    readonly ok: boolean;
-    readonly ref?: H2ASysmlRef;
-    readonly signatureVerified: boolean;
-    readonly contentVerified?: boolean;
-    readonly reason?: string;
-}
-export declare function verifyEnvelopeSysmlRef(envelope: H2AEnvelope, options: VerifyEnvelopeSysmlOptions): Promise<VerifyEnvelopeSysmlResult>;
-//# sourceMappingURL=verify.d.ts.map

package/dist/runtime/sysml/verify.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../../src/runtime/sysml/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAyC,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzF,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,WAAW,GAAG,WAAW,GAAG,SAAS,CAO9E;AAED,MAAM,WAAW,0BAA0B;IACzC,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,mDAAmD;IACnD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;CACrC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAsB,sBAAsB,CAC1C,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,yBAAyB,CAAC,CA8CpC"}

package/dist/runtime/sysml/verify.js

@@ -1,67 +0,0 @@
-/**
- * DEC-099 — SysML v2 interop S3 (spec §4, DEC-081). Verify that an envelope's
- * embedded `H2ASysmlRef` is (a) signed by the claimed actor — **commit-trust**,
- * the default: a valid signature over an immutable commit is enough — and
- * optionally (b) **content-integrity**: re-fetch the element (S2) and check its
- * canonical hash against the `elementHash` embedded at sign time, catching a
- * repository that violated immutability or a wrong `apiBase`.
- */
-import { isH2ASysmlRef, validateSysmlRef, verifyEnvelopeSignature } from "@sentropic/h2a";
-import { hashSysmlElement, resolveSysmlElement } from "./client.js";
-/** Extract the ref from the conventional location `body.subject.sysmlRef` (spec §2). */
-export function extractSysmlRef(envelope) {
-    const body = envelope.body;
-    if (!body || typeof body !== "object")
-        return undefined;
-    const subject = body.subject;
-    if (!subject || typeof subject !== "object")
-        return undefined;
-    const ref = subject.sysmlRef;
-    return isH2ASysmlRef(ref) ? ref : undefined;
-}
-export async function verifyEnvelopeSysmlRef(envelope, options) {
-    const ref = extractSysmlRef(envelope);
-    if (!ref)
-        return { ok: false, signatureVerified: false, reason: "no-sysml-ref" };
-    const validation = validateSysmlRef(ref);
-    if (!validation.ok) {
-        return { ok: false, ref, signatureVerified: false, reason: `invalid-ref:${validation.errors.join(",")}` };
-    }
-    const signatureVerified = verifyEnvelopeSignature(envelope, options.publicKeyPem, options.by ? { by: options.by } : {});
-    if (!signatureVerified) {
-        return { ok: false, ref, signatureVerified: false, reason: "signature-failed" };
-    }
-    // (a) commit-trust: a valid signature over the immutable commit is enough.
-    if (!options.contentIntegrity) {
-        return { ok: true, ref, signatureVerified: true };
-    }
-    // (b) content-integrity: re-fetch + re-hash + compare.
-    if (!ref.elementHash) {
-        return { ok: false, ref, signatureVerified: true, contentVerified: false, reason: "no-element-hash" };
-    }
-    try {
-        const element = await resolveSysmlElement(ref, {
-            ...(options.apiBase ? { apiBase: options.apiBase } : {}),
-            ...(options.auth ? { auth: options.auth } : {}),
-            ...(options.fetchImpl ? { fetchImpl: options.fetchImpl } : {})
-        });
-        const contentVerified = hashSysmlElement(element) === ref.elementHash;
-        return {
-            ok: contentVerified,
-            ref,
-            signatureVerified: true,
-            contentVerified,
-            ...(contentVerified ? {} : { reason: "content-hash-mismatch" })
-        };
-    }
-    catch (err) {
-        return {
-            ok: false,
-            ref,
-            signatureVerified: true,
-            contentVerified: false,
-            reason: `fetch-failed:${err.message}`
-        };
-    }
-}
-//# sourceMappingURL=verify.js.map

package/dist/runtime/sysml/verify.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/runtime/sysml/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,uBAAuB,EAGxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAuB,MAAM,aAAa,CAAC;AAEzF,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,QAAqB;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA2C,CAAC;IAClE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAA8C,CAAC;IACpE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC7B,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAsBD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAqB,EACrB,OAAmC;IAEnC,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACjF,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5G,CAAC;IACD,MAAM,iBAAiB,GAAG,uBAAuB,CAC/C,QAAQ,EACR,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CACrC,CAAC;IACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAClF,CAAC;IACD,2EAA2E;IAC3E,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IACD,uDAAuD;IACvD,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE;YAC7C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,WAAW,CAAC;QACtE,OAAO;YACL,EAAE,EAAE,eAAe;YACnB,GAAG;YACH,iBAAiB,EAAE,IAAI;YACvB,eAAe;YACf,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,GAAG;YACH,iBAAiB,EAAE,IAAI;YACvB,eAAe,EAAE,KAAK;YACtB,MAAM,EAAE,gBAAiB,GAAa,CAAC,OAAO,EAAE;SACjD,CAAC;IACJ,CAAC;AACH,CAAC"}