@sentropic/h2a 0.85.25 → 0.87.0

package/dist/runtime/enrollment/ceremony.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ceremony.js","sourceRoot":"","sources":["../../../src/runtime/enrollment/ceremony.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,8EAA8E;AAC9E,iFAAiF;AACjF,kCAAkC;AAClC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EACL,6BAA6B,EAC7B,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAEjD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AAE/D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC;AAE5F;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC;AAE5F;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAEpD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,OAAO,EAAE,WAAW,CAAU,CAAC;AAE7E;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAsFnE;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,UAAU,4BAA4B;AAC1C,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,+BAA+B;AAC/B,KAAoF;IAEpF,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAyB;IAC7D,8EAA8E;IAC9E,8EAA8E;IAC9E,wEAAwE;IACxE,+DAA+D;IAC/D,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,eAAe,CACpB,4BAA4B,CAAC,KAAK,CAAC,EACnC,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,YAAY,CACnB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,CAAC,QAAQ,8CAA8C;YACvF,uEAAuE,CAC1E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,QAAQ,+BAA+B;YAC1F,2EAA2E,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAsCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAqC;IAErC,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,mBAAmB,CAAC;YAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,oEAAoE;YACpE,iEAAiE;YACjE,oBAAoB,EAAE,6BAA6B;YACnD,qEAAqE;SACtE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,IAAI,KAAK,CACb,+DAA+D,KAAK,CAAC,IAAI,IAAI;YAC3E,IAAK,KAAe,CAAC,OAAO,GAAG,CAClC,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,6EAA6E;IAC7E,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CACb,iDAAiD,QAAQ,CAAC,QAAQ,wBAAwB;YACxF,WAAW,QAAQ,CAAC,MAAM,GAAG,CAChC,CAAC;IACJ,CAAC;IAED,IAAI,aAAqB,CAAC;IAC1B,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,aAAa,GAAG,YAAY,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC9D,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,mEAAmE;QACnE,8CAA8C;QAC9C,MAAM,IAAI,KAAK,CACb,wDAAwD,QAAQ,CAAC,QAAQ,IAAI;YAC3E,IAAK,KAAe,CAAC,OAAO,GAAG,CAClC,CAAC;IACJ,CAAC;IAED,wBAAwB,CAAC;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,YAAY;QACZ,UAAU,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACvF,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,aAAa;QACb,YAAY;QACZ,cAAc,EAAE,QAAQ,CAAC,MAAM;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,gEAAgE;QAChE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,SAAS;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,gBAAgB,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAkBD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,SAAS,sBAAsB,CAAC,SAAiC;IAC/D,yEAAyE;IACzE,EAAE;IACF,4EAA4E;IAC5E,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,kEAAkE;IAClE,gFAAgF;IAChF,yDAAyD;IACzD,EAAE;IACF,6EAA6E;IAC7E,8EAA8E;IAC9E,yBAAyB;IACzB,EAAE;IACF,gFAAgF;IAChF,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAC9C,CAAC,GAAG,EAAE,EAAE,CAAC,CAAE,6BAAmD,CAAC,QAAQ,CAAC,GAAG,CAAC,CAC7E,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,yDAAyD,KAAK,UAAU;YACtE,GAAG,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,0CAA0C;YACxF,2FAA2F;YAC3F,qFAAqF;YACrF,CAAC,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC;gBAClC,CAAC,CAAC,wFAAwF;oBACxF,sCAAsC;gBACxC,CAAC,CAAC,EAAE,CAAC,CACV,CAAC;IACJ,CAAC;IACD,gFAAgF;IAChF,4EAA4E;IAC5E,gFAAgF;IAChF,mEAAmE;IACnE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,0FAA0F;YACxF,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA0C,CAAC;IAC7E,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;IAChC,kFAAkF;IAClF,kFAAkF;IAClF,+EAA+E;IAC/E,4EAA4E;IAC5E,2DAA2D;IAC3D,EAAE;IACF,mFAAmF;IACnF,2EAA2E;IAC3E,8EAA8E;IAC9E,kFAAkF;IAClF,iFAAiF;IACjF,oFAAoF;IACpF,yEAAyE;IACzE,iFAAiF;IACjF,iFAAiF;IACjF,0BAA0B;IAC1B,EAAE;IACF,gFAAgF;IAChF,gFAAgF;IAChF,8EAA8E;IAC9E,iFAAiF;IACjF,kFAAkF;IAClF,iFAAiF;IACjF,+EAA+E;IAC/E,uBAAuB;IACvB,EAAE;IACF,+EAA+E;IAC/E,2EAA2E;IAC3E,iFAAiF;IACjF,iFAAiF;IACjF,kFAAkF;IAClF,iFAAiF;IACjF,mFAAmF;IACnF,iFAAiF;IACjF,uDAAuD;IACvD,EAAE;IACF,mFAAmF;IACnF,oFAAoF;IACpF,kFAAkF;IAClF,mFAAmF;IACnF,oFAAoF;IACpF,4EAA4E;IAC5E,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/E,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,gCAAgC,CACvC,OAA+B,EAC/B,KAAa;IAEb,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,6FAA6F;YAC3F,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CACb,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,6EAA6E;IAC7E,2DAA2D;IAC3D,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,KAAK,CAAC,MAAM,mBAAmB;YAC3E,GAAG,+BAA+B,0DAA0D,CAC/F,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,+EAA+E;IAC/E,+EAA+E;IAC/E,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,yFAAyF;YACvF,6EAA6E,CAChF,CAAC;IACJ,CAAC;IACD,0DAA0D;IAC1D,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,KAAK,CAAC,MAAM,8BAA8B;YACtF,GAAG,+BAA+B,eAAe,6BAA6B,UAAU;YACxF,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,+EAA+E;IAC/E,8DAA8D;IAC9D,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACb,sCAAsC,OAAO,CAAC,KAAK,CAAC,MAAM,6BAA6B;YACrF,GAAG,+BAA+B,yBAAyB,6BAA6B,GAAG;YAC3F,4FAA4F,CAC/F,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,CAAC,SAAS,8BAA8B,CACxF,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,wCAAwC,OAAO,CAAC,SAAS,kCAAkC,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iCAAiC,CAC/C,SAAiC,EACjC,KAAa;IAEb,2BAA2B,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,2BAA2B,CACzC,SAAiC,EACjC,KAAa;IAEb,MAAM,OAAO,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClD,gCAAgC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAmC;IAEnC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,kFAAkF;IAClF,iFAAiF;IACjF,kFAAkF;IAClF,kFAAkF;IAClF,+EAA+E;IAC/E,MAAM,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAEtE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC;IACjE,gFAAgF;IAChF,0DAA0D;IAC1D,EAAE;IACF,+EAA+E;IAC/E,6EAA6E;IAC7E,wEAAwE;IACxE,0EAA0E;IAC1E,iDAAiD;IACjD,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE,yBAAyB;QAC/B,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,QAAQ;QACR,YAAY;KACJ,CAAC;IACX,MAAM,SAAS,GAAG,aAAa,CAAC,4BAA4B,CAAC,QAAQ,CAAC,EAAE;QACtE,EAAE,EAAE,QAAQ;QACZ,aAAa;KACd,CAAC,CAAC;IAEH,MAAM,KAAK,GAAuB,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7D,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,kCAAkC,QAAQ,+CAA+C;YACvF,wEAAwE,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAsCD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAoC;IAEpC,MAAM,eAAe,GAAG,OAAO,CAAC,mBAAmB,IAAI,yBAAyB,CAAC;IACjF,MAAM,QAAQ,GAAG,eAAe,CAAC;QAC/B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,uBAAuB,CAAC;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ;QACR,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,oBAAoB,EAAE,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC;QAC9D,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AA+CD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAqC;IAErC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC;AACjE,CAAC"}

package/dist/runtime/enrollment/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * h2a's side of the principal↔agent enrollment ceremony (P1, step 3).
+ *
+ * Contract: Part B of
+ * `docs/superpowers/specs/2026-07-24-h2a-feed-contract-for-sentropic.md`
+ * (ratified 2026-07-24, amended 2026-07-25, signed-composite amendment
+ * 2026-07-25).
+ *
+ * Step 3 = proving control of the agent's ed25519 key over a gateway-issued
+ * challenge, and nothing else. The 39-auth principal is the authorizing
+ * authority; the binding record and the challenge/verify endpoint are
+ * sentropic's. No binding store, no network transport, no bearer token, and no
+ * principal identifier ever reaches the agent.
+ */
+export { assertKeyIsLocallyActive, assertSignableEnrollmentChallenge, buildEnrollmentProof, enrollmentProofSignedPayload, listUnusablePrivateKeys, resolveEnrollmentIdentity, runEnrollmentCeremony, sanitizeEnrollmentChallenge, signEnrollmentChallenge, verifyEnrollmentProof, H2A_ENROLLMENT_CHALLENGE_KEYS, H2A_ENROLLMENT_MAX_NONCE_LENGTH, H2A_ENROLLMENT_NONCE_MAX_BITS, H2A_ENROLLMENT_NONCE_MAX_LENGTH, H2A_ENROLLMENT_NONCE_MIN_BITS, H2A_ENROLLMENT_NONCE_MIN_LENGTH, H2A_ENROLLMENT_NONCE_PATTERN, H2A_ENROLLMENT_PROOF_TYPE, type BuildEnrollmentProofOptions, type EnrollmentCeremonyResult, type EnrollmentIdentityResolver, type EnrollmentProofResult, type EnrollmentProofSubmitter, type EnrollmentSubmission, type H2AEnrollmentChallenge, type H2AEnrollmentIdentity, type H2AEnrollmentProof, type ResolveEnrollmentIdentityInput, type RunEnrollmentCeremonyOptions, type SignEnrollmentChallengeInput } from "./ceremony.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/enrollment/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/enrollment/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,wBAAwB,EACxB,iCAAiC,EACjC,oBAAoB,EACpB,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,4BAA4B,EAC5B,yBAAyB,EACzB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,8BAA8B,EACnC,KAAK,4BAA4B,EACjC,KAAK,4BAA4B,EAClC,MAAM,eAAe,CAAC"}

package/dist/runtime/enrollment/index.js

@@ -0,0 +1,16 @@
+/**
+ * h2a's side of the principal↔agent enrollment ceremony (P1, step 3).
+ *
+ * Contract: Part B of
+ * `docs/superpowers/specs/2026-07-24-h2a-feed-contract-for-sentropic.md`
+ * (ratified 2026-07-24, amended 2026-07-25, signed-composite amendment
+ * 2026-07-25).
+ *
+ * Step 3 = proving control of the agent's ed25519 key over a gateway-issued
+ * challenge, and nothing else. The 39-auth principal is the authorizing
+ * authority; the binding record and the challenge/verify endpoint are
+ * sentropic's. No binding store, no network transport, no bearer token, and no
+ * principal identifier ever reaches the agent.
+ */
+export { assertKeyIsLocallyActive, assertSignableEnrollmentChallenge, buildEnrollmentProof, enrollmentProofSignedPayload, listUnusablePrivateKeys, resolveEnrollmentIdentity, runEnrollmentCeremony, sanitizeEnrollmentChallenge, signEnrollmentChallenge, verifyEnrollmentProof, H2A_ENROLLMENT_CHALLENGE_KEYS, H2A_ENROLLMENT_MAX_NONCE_LENGTH, H2A_ENROLLMENT_NONCE_MAX_BITS, H2A_ENROLLMENT_NONCE_MAX_LENGTH, H2A_ENROLLMENT_NONCE_MIN_BITS, H2A_ENROLLMENT_NONCE_MIN_LENGTH, H2A_ENROLLMENT_NONCE_PATTERN, H2A_ENROLLMENT_PROOF_TYPE } from "./ceremony.js";
+//# sourceMappingURL=index.js.map

package/dist/runtime/enrollment/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/enrollment/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EACL,wBAAwB,EACxB,iCAAiC,EACjC,oBAAoB,EACpB,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,2BAA2B,EAC3B,uBAAuB,EACvB,qBAAqB,EACrB,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,EAC7B,+BAA+B,EAC/B,4BAA4B,EAC5B,yBAAyB,EAa1B,MAAM,eAAe,CAAC"}

package/dist/runtime/feed/descriptors.d.ts

@@ -0,0 +1,261 @@
+/**
+ * h2a → sentropic session-exposure feed — DESCRIPTOR BUILDERS (P1, step 1).
+ *
+ * Implements Part A of the ratified contract
+ * `docs/superpowers/specs/2026-07-24-h2a-feed-contract-for-sentropic.md`
+ * (RATIFIED by the sentropic architect, 2026-07-24, with three binding
+ * conditions accepted). Sentropic owns the multi-tenant gateway, the 39-auth
+ * broker and the UI panel; this module is h2a's own surface only.
+ *
+ * Everything here is PURE: presence records + registrations in, opaque
+ * descriptors out. No I/O, no network, no auth, no push, and never a clock —
+ * `asOf` is always injected by the caller, so every derivation is
+ * deterministic and unit-testable.
+ *
+ * Governing rule of the contract, enforced structurally in this module:
+ * *if a field can't be shown safely in a browser, it doesn't belong in the
+ * feed.* No message bodies, no negotiation content, no keys or tokens, and no
+ * filesystem path — `workspaceLabel` reads `H2AWorkspaceRef.label` and NEVER
+ * `.path` or `launchContext.cwd` (Part A, "Opacity boundary", non-negotiable).
+ *
+ * NOT wired into the hosted MCP handlers yet: that is step 5 of the P1 plan and
+ * is gated on the architecture lane's per-principal root partition (Part C).
+ */
+import { type H2AActorRegistration, type H2ARole, type H2ASession } from "@sentropic/h2a";
+/**
+ * Per-descriptor liveness. `stale` is NOT a synonym for `idle`: see
+ * {@link deriveLiveness} — it is a FEED-PIPELINE freshness signal, not an agent
+ * state.
+ */
+export type H2ALivenessState = "live" | "idle" | "stale" | "closed";
+/** An agent instance as it may be rendered in a browser. Opaque, non-secret. */
+export interface InstanceDescriptor {
+    /**
+     * `H2ASession.instance` / `H2AActorRegistration.instance` — the addressable
+     * `host:slug(label):uuid12` handle frozen at mint (DEC-114). Shown verbatim
+     * because P1 is "read your OWN data": this is the resource id of the
+     * principal's own agent, not a counterpart reference.
+     */
+    readonly instanceId: string;
+    readonly displayName: string;
+    readonly host: string;
+    /**
+     * `H2AActorRegistration.roles[0]` **validated against `H2A_ROLES` on read**,
+     * or the literal `'unknown'` when the instance has no registration, declares
+     * no role, or declares a string outside the enum.
+     *
+     * The union is deliberate (architect ruling, 2026-07-25): a MISSING role must
+     * never be rendered as a real `H2ARole`. Synthesizing e.g. `'AGENTS'` would be
+     * indistinguishable from an asserted claim, so once real roles land
+     * (PRINCIPAL/CONDUCTOR/CONTROL) an absent role would silently read as a
+     * genuine claim of authority and no consumer could tell the two apart.
+     *
+     * Validation on READ is what makes the union true on the wire whoever wrote
+     * the registry: the store re-validates nothing on read, `mirror/accept.ts`
+     * authorizes a mirrored registration by key ownership without constraining its
+     * content, and `mcp/handlers.ts` applies a caller-supplied registration. A
+     * `'SUPERADMIN'` planted by any of those paths must surface as `'unknown'`,
+     * never as an out-of-union string in a typed consumer.
+     */
+    readonly role: H2ARole | "unknown";
+    /** Human label only. NEVER a filesystem path (Part A, opacity boundary). */
+    readonly workspaceLabel: string;
+    /**
+     * Ratification condition #3: a DECLARED, NON-AUTHORITATIVE DISPLAY LIST
+     * ONLY. Self-reported by the agent at registration, and it MUST NEVER be an
+     * input to any authorization decision — authorization stays principal-binding
+     * + server-side scoping (Part B).
+     *
+     * The NAME carries that semantic on purpose (architect ruling, 2026-07-25):
+     * the field is sourced from `H2AActorRegistration.declaredCapabilities` and
+     * never from the authority-bearing `capabilities`, which is the subagent
+     * ceiling and the attestation right. The whole defect this rename closes was
+     * ambiguity between "display list" and "authz list", so the wire field does
+     * not keep the ambiguous name.
+     *
+     * ALLOWLISTED on read: values are intersected with the closed vocabulary
+     * `H2A_DECLARED_CAPABILITIES`, so only known members survive. It is an
+     * intersection, never a denylist — nothing here strips `/home/` or PEM
+     * markers, because a denylist is whack-a-mole and loses to the next encoding.
+     * Anything outside the vocabulary was never a valid declaration and is
+     * dropped silently.
+     */
+    readonly declaredCapabilities: readonly string[];
+    /**
+     * ISO 8601 — max heartbeat across this instance's known sessions, or
+     * `'unknown'` when no session carries a parseable heartbeat. NEVER the
+     * registration's mint time: reporting a `createdAt` as "last seen" would be an
+     * unearned freshness claim, the same class the Q1 ruling rejected.
+     */
+    readonly lastSeen: string;
+    readonly liveness: H2ALivenessState;
+}
+/** A session as it may be rendered in a browser. Opaque, non-secret. */
+export interface SessionDescriptor {
+    readonly sessionId: string;
+    readonly instanceId: string;
+    readonly topicOrTitle: string;
+    readonly state: "open" | "idle" | "closed";
+    /**
+     * ISO 8601 — `H2ASession.startedAt`, or `'unknown'` when it is missing or
+     * unparseable. Validated on read for the same reason `role` is: the contract
+     * types this field as ISO 8601, and a presence record written by any other
+     * path must not be able to put arbitrary text in an ISO-typed field.
+     */
+    readonly openedAt: string;
+    /**
+     * ISO 8601, or `'unknown'` when neither source carries a parseable timestamp.
+     * See {@link SessionDescriptor.activitySource} for provenance.
+     */
+    readonly lastActivityAt: string;
+    /**
+     * Ratification condition #2: discriminates proven MCP traffic
+     * (`lastMcpActivityAt`, WP-F) from a bare heartbeat fallback, so a consumer
+     * can NEVER present "process alive" as "proven channel activity" by
+     * omission. The gateway/UI MUST render `'heartbeat'` as advisory.
+     */
+    readonly activitySource: "mcp" | "heartbeat";
+    /**
+     * Other parties' handles, opacified. Empty for P1 — and empty as an
+     * ESTABLISHED FACT, produced by the explicit branch in
+     * `counterpartsOpaqueRefsFor()` rather than by a literal default: per the
+     * contract's Gaps §2 no h2a structure records "who is this session in contact
+     * with", and negotiations are not mirrored yet (EVO-13 scopes
+     * `h2a_conflict_posture` out until they are). So `[]` here means "there is no
+     * counterpart source at all", never "we did not look". When a derivation lands, the raw `instance:` routing string is
+     * never emitted — the feed server opacifies it with a server-held,
+     * per-principal salt (ratification condition #1) that is stable within a
+     * principal but not enumerable or reversible into a routable bus address.
+     */
+    readonly counterpartsOpaqueRefs: readonly string[];
+}
+/**
+ * The feed envelope (Part C). `asOf` is what makes staleness checkable by the
+ * consumer: the gateway/UI renders the `liveness`/`state` the feed computed and
+ * never re-derives liveness from wall-clock arithmetic of its own.
+ */
+export interface H2AFeedResponse {
+    /** ISO 8601 — the feed's own read timestamp. */
+    readonly asOf: string;
+    /**
+     * Empty means "we looked and this principal has nothing" — an established
+     * fact, never a default: the builders throw if a source was not read, so a
+     * broken presence read can never surface here as "no agents". A consumer may
+     * therefore trust an empty feed the same way it trusts a populated one.
+     */
+    readonly instances: readonly InstanceDescriptor[];
+    /** Empty carries the same established-fact meaning as `instances`. */
+    readonly sessions: readonly SessionDescriptor[];
+}
+/** Input common to every builder. `asOf` is injected — never `Date.now()`. */
+export interface BuildFeedInput {
+    /** The feed's read timestamp, in epoch ms. */
+    readonly asOf: number;
+    /**
+     * Presence records, e.g. from `listPresence(root)`. **Required to be an
+     * array**: an empty feed must mean "we looked and there is nothing", so a
+     * missing/failed read throws instead of rendering as "no agents".
+     */
+    readonly sessions: readonly H2ASession[];
+    /**
+     * Registry rows, e.g. from `store.listInstances()`. **Required, and required
+     * to be an array**: a caller with no registry must pass `[]` DELIBERATELY,
+     * which is a claim ("I looked, the registry is empty"). Omitting it — or
+     * passing the result of a failed read — throws rather than quietly producing a
+     * feed that says the owner has no agents.
+     */
+    readonly registrations: readonly H2AActorRegistration[];
+    /**
+     * The mirror push daemon's interval (ms). Only meaningful for MIRRORED rows:
+     * it is what makes `stale` computable (Part C). Absent → no row is `stale`.
+     */
+    readonly pushIntervalMs?: number;
+}
+/**
+ * Session state per the contract's code block. Reuses h2a's existing
+ * primitives — the 90s keepalive window that already gates
+ * `h2a_discover_sessions`, and WP-F connection confidence. Nothing about
+ * freshness is reimplemented here.
+ */
+export declare function deriveSessionState(session: H2ASession, asOf: number): "open" | "idle" | "closed";
+/**
+ * Liveness per the contract's code block. Same two primitives as
+ * {@link deriveSessionState}, plus the one distinction `state` does not need:
+ * `stale`.
+ *
+ * `stale` is the FEED PIPELINE's own freshness bleeding into a row, not an
+ * agent state. A directly-observed local session (no `mirroredAt`) is NEVER
+ * `stale` — the same-machine clock is trustworthy, so it goes straight to
+ * live/idle/closed. A replicated row is `stale` when the daemon that should
+ * keep refreshing it has gone quiet for more than 2x its push interval: at
+ * that point the numerically "fresh" `heartbeatAt`/`lastMcpActivityAt` carried
+ * in the record can no longer be trusted the way a live local read can, so the
+ * honest label is "we don't know", not "live".
+ */
+export declare function deriveLiveness(session: H2ASession, asOf: number, pushIntervalMs?: number): H2ALivenessState;
+/**
+ * Roll several sessions' liveness up to their instance: best-of, per Part A
+ * ("Best-of across the instance's sessions"). An instance with no session at
+ * all reads `closed` — absence is not liveness.
+ */
+export declare function rollUpLiveness(states: readonly H2ALivenessState[]): H2ALivenessState;
+export interface BuildSessionDescriptorOptions {
+    readonly asOf: number;
+    /** Registration owning this session, when known — used for name fallbacks. */
+    readonly registration?: H2AActorRegistration | undefined;
+}
+/**
+ * One presence record → one `SessionDescriptor`.
+ *
+ * `lastActivityAt` prefers `lastMcpActivityAt` (WP-F: proof the MCP channel
+ * carried real traffic) and falls back to `heartbeatAt`. The fallback is
+ * advisory-only — a live process, not proven channel activity — which is why
+ * `activitySource` is baked into the descriptor rather than left to the
+ * consumer's inference (ratification condition #2).
+ */
+export declare function buildSessionDescriptor(session: H2ASession, options: BuildSessionDescriptorOptions): SessionDescriptor;
+export interface BuildInstanceDescriptorOptions {
+    readonly asOf: number;
+    /** This instance's presence records; any order. */
+    readonly sessions: readonly H2ASession[];
+    readonly registration?: H2AActorRegistration | undefined;
+    readonly pushIntervalMs?: number | undefined;
+}
+/**
+ * One instance (+ its sessions) → one `InstanceDescriptor`.
+ *
+ * `displayName` order per Part A: the registration's DEC-114 mutable name,
+ * then the most recent LIVE session's host-native name (WP-6), then the
+ * workspace label. `lastSeen` is the max heartbeat across the instance's
+ * sessions. `host` comes from the most recent session's host hint.
+ *
+ * Every chain below matches the contract's declared mapping exactly and adds no
+ * undeclared step: earlier revisions scanned ALL sessions for a label/host and
+ * fell back to `workspace.host` and to `registration.createdAt`, none of which
+ * the spec declares. Code and contract must not disagree, so those were removed
+ * rather than quietly kept.
+ */
+export declare function buildInstanceDescriptor(instanceId: string, options: BuildInstanceDescriptorOptions): InstanceDescriptor;
+/**
+ * Presence + registry → `InstanceDescriptor[]`, **ordered by `lastSeen`
+ * descending** (most recently seen agent first). The order is part of the
+ * behaviour, not an accident of input order, and is pinned by a test — a
+ * documented behaviour that can be deleted with the suite still green is not a
+ * behaviour. Rows whose `lastSeen` is the sentinel sort last.
+ */
+export declare function buildInstanceDescriptors(input: BuildFeedInput): InstanceDescriptor[];
+/**
+ * Presence + registry → `SessionDescriptor[]`, **ordered by `lastActivityAt`
+ * descending** (most recently active session first). Pinned by a test, for the
+ * same reason as {@link buildInstanceDescriptors}.
+ */
+export declare function buildSessionDescriptors(input: BuildFeedInput): SessionDescriptor[];
+/**
+ * Presence + registry → the whole `H2AFeedResponse`.
+ *
+ * The caller decides WHICH sessions and registrations to hand in — this
+ * function never widens that set, and (per P1) principal scoping happens
+ * server-side before the call, never here.
+ */
+export declare function buildFeedResponse(input: BuildFeedInput): H2AFeedResponse;
+//# sourceMappingURL=descriptors.d.ts.map

package/dist/runtime/feed/descriptors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptors.d.ts","sourceRoot":"","sources":["../../../src/runtime/feed/descriptors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EAML,KAAK,oBAAoB,EACzB,KAAK,OAAO,EACZ,KAAK,UAAU,EAChB,MAAM,gBAAgB,CAAC;AAExB;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEpE,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;;;;;;;;;;;;;;;OAmBG;IACH,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;CACrC;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,KAAK,GAAG,WAAW,CAAC;IAC7C;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;CACpD;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACjD;AA8FD,8EAA8E;AAC9E,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAC;IACzC;;;;;;OAMG;IACH,QAAQ,CAAC,aAAa,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACxD;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAwED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,MAAM,GAAG,QAAQ,CAS5B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,MAAM,GACtB,gBAAgB,CA8BlB;AAkBD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAAG,gBAAgB,CAMpF;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;CAC1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,6BAA6B,GACrC,iBAAiB,CAiCnB;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,8BAA8B,GACtC,kBAAkB,CAgDpB;AA4BD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG,kBAAkB,EAAE,CAcpF;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,GAAG,iBAAiB,EAAE,CAWlF;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CAMxE"}