@sourcey/catalog-verifier 1.1.35 → 1.2.0

package/dist/modules/agent-readiness-engine/src/assertions.js

@@ -1,252 +0,0 @@
-import { ipAddressVersion } from "provenry/primitives";
-/** The HTTP methods an observed call may use; a query may send its terms in a body. */
-export const OBSERVED_CALL_METHODS = {
-    read: ["GET", "HEAD"],
-    write: ["POST", "PUT", "PATCH", "DELETE"],
-    query: ["GET", "POST"],
-};
-/** Whether an observation may locate the operand from this source. */
-export function operandReads(operand, source) {
-    return source === operand.source || (operand.callerNamed === true && source === "request");
-}
-const pass = () => ({ holds: true, reason: "The canonical assertion holds." });
-const fail = (reason) => ({ holds: false, reason });
-const identifier = (value) => typeof value === "string" && value.trim().length > 0 && value.length <= 512;
-const resourceIdentifier = (value) => identifier(value) || (typeof value === "number" && Number.isSafeInteger(value) && value > 0);
-const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value)
-    ? value
-    : null;
-/**
- * Whether a sent value carries an identifier: it occurs there, and not as part
- * of a longer run of letters and digits, so `id:rec-1` carries `rec-1` and
- * `rec-10` does not.
- */
-function carries(text, id) {
-    const word = /^[A-Za-z0-9]$/u;
-    for (let at = text.indexOf(id); at >= 0; at = text.indexOf(id, at + 1)) {
-        const joinsBefore = word.test(id[0]) && word.test(text[at - 1] ?? "");
-        const joinsAfter = word.test(id.at(-1)) && word.test(text[at + id.length] ?? "");
-        if (!joinsBefore && !joinsAfter)
-            return true;
-    }
-    return false;
-}
-/**
- * The identifier a creation established: one its response returned, or one the caller named
- * in what it sent, which must then carry the run's nonce so it is this run's.
- */
-function createdIdentifier(input, name) {
-    const id = input.values.get(name);
-    if (!resourceIdentifier(id))
-        return undefined;
-    return input.requests.has(name) && !carries(String(id), input.context.nonce) ? undefined : id;
-}
-const created = {
-    observations: [{ name: "id", source: "json", method: "write", callerNamed: true }],
-    evaluate: (input) => createdIdentifier(input, "id") !== undefined
-        ? pass()
-        : fail("The creation established no resource identifier of this run's."),
-};
-/** A message's identifier is the service's: a caller never names it. */
-const accepted = {
-    observations: [{ name: "id", source: "json", method: "write" }],
-    evaluate: ({ values }) => resourceIdentifier(values.get("id"))
-        ? pass()
-        : fail("The service did not return the message's identifier."),
-};
-/**
- * Portable Sourcey job semantics. A binding supplies locations only: never a
- * comparison value, predicate, threshold, verdict or executable callback.
- */
-const proofs = {
-    dns_answer: {
-        observations: [
-            { name: "query_name", source: "json", method: "read" },
-            { name: "records", source: "json", method: "read" },
-        ],
-        sameCall: [["query_name", "records"]],
-        evaluate({ values, context }) {
-            const normalize = (value) => typeof value === "string" ? value.toLowerCase().replace(/\.$/u, "") : null;
-            if (normalize(values.get("query_name")) !== normalize(context.inputs.name)) {
-                return fail("The answer does not name the queried domain.");
-            }
-            const records = values.get("records");
-            const address = (value) => {
-                if (typeof value === "string")
-                    return ipAddressVersion(value) !== 0;
-                const record = object(value);
-                if (!record || typeof record.data !== "string")
-                    return false;
-                return ((record.type === 1 && ipAddressVersion(record.data) === 4) ||
-                    (record.type === 28 && ipAddressVersion(record.data) === 6));
-            };
-            return Array.isArray(records) && records.some(address)
-                ? pass()
-                : fail("The answer carries no valid address record.");
-        },
-    },
-    dns_success: {
-        observations: [{ name: "status", source: "json", method: "read" }],
-        evaluate: ({ values }) => values.get("status") === 0
-            ? pass()
-            : fail("The resolver did not report successful resolution."),
-    },
-    model_selected: {
-        observations: [
-            { name: "models", source: "json", method: "read" },
-            { name: "used_model", source: "stream", method: "write" },
-        ],
-        differentCall: [["models", "used_model"]],
-        evaluate({ values }) {
-            const listed = values.get("models");
-            const used = values.get("used_model");
-            if (!Array.isArray(listed) || !Array.isArray(used))
-                return fail("No live model list and streamed model identity.");
-            const ids = new Set(listed.flatMap((value) => {
-                const id = typeof value === "string" ? value : object(value)?.id;
-                return identifier(id) ? [id] : [];
-            }));
-            const selected = used.filter((value) => value !== undefined && value !== null);
-            return selected.length > 0 && selected.every((value) => identifier(value) && ids.has(value))
-                ? pass()
-                : fail("The streamed model is not established by the live model list.");
-        },
-    },
-    stream_chunks: {
-        observations: [{ name: "chunks", source: "stream", method: "write" }],
-        evaluate({ values }) {
-            const chunks = values.get("chunks");
-            return Array.isArray(chunks) &&
-                chunks.length >= 2 &&
-                chunks.every((chunk) => object(chunk) !== null && object(chunk)?.error === undefined)
-                ? pass()
-                : fail("The completion did not stream multiple successful chunks.");
-        },
-    },
-    tool_called: {
-        observations: [
-            { name: "tool_name", source: "stream", method: "write" },
-            { name: "tool_arguments", source: "stream", method: "write" },
-        ],
-        sameCall: [["tool_name", "tool_arguments"]],
-        evaluate({ values, context }) {
-            const names = values.get("tool_name");
-            const arguments_ = values.get("tool_arguments");
-            if (!Array.isArray(names) || !Array.isArray(arguments_))
-                return fail("No streamed tool call.");
-            const parts = (items) => items.every((item) => item === undefined || item === null || typeof item === "string")
-                ? items.filter((item) => typeof item === "string").join("")
-                : null;
-            if (parts(names) !== "sourcey_probe")
-                return fail("The completion did not call the provided Sourcey probe tool.");
-            const encoded = parts(arguments_);
-            if (encoded === null)
-                return fail("The tool arguments are not readable.");
-            let argumentsValue;
-            try {
-                argumentsValue = JSON.parse(encoded);
-            }
-            catch {
-                return fail("The tool arguments are not complete JSON.");
-            }
-            return object(argumentsValue)?.nonce === context.nonce
-                ? pass()
-                : fail("The tool call does not carry this run's nonce.");
-        },
-    },
-    resource_created: created,
-    resource_read_back: {
-        observations: [
-            { name: "created_id", source: "json", method: "write", callerNamed: true },
-            { name: "read_id", source: "json", method: "read" },
-            { name: "content", source: "json", method: "read" },
-        ],
-        sameCall: [["read_id", "content"]],
-        differentCall: [["created_id", "read_id"]],
-        evaluate: (input) => {
-            const id = createdIdentifier(input, "created_id");
-            return id !== undefined &&
-                id === input.values.get("read_id") &&
-                input.values.get("content") === input.context.nonce
-                ? pass()
-                : fail("The readback does not establish the created resource with this run's nonce.");
-        },
-    },
-    /**
-     * Found by what was asked, not by the key: the query the call sent is the
-     * run's nonce, and nothing it sent carries the created identifier, which the
-     * request's templates alone cannot rule out (a literal or another response
-     * can still hold it). A name the caller gave carries the nonce, so it must
-     * add to it: the bare nonce would be the query itself.
-     */
-    resource_found_by_query: {
-        observations: [
-            { name: "created_id", source: "json", method: "write", callerNamed: true },
-            { name: "query", source: "request", method: "query" },
-            { name: "found_id", source: "json", method: "query" },
-            { name: "content", source: "json", method: "query" },
-        ],
-        sameCall: [
-            ["query", "found_id"],
-            ["found_id", "content"],
-        ],
-        differentCall: [["created_id", "found_id"]],
-        independentCall: [["query", "created_id"]],
-        evaluate(input) {
-            const { values, requests, context } = input;
-            const id = createdIdentifier(input, "created_id");
-            const sent = requests.get("query");
-            if (id === undefined)
-                return fail("The creation established no resource identifier of this run's.");
-            if (values.get("query") !== context.nonce || sent === undefined) {
-                return fail("The query did not send this run's nonce.");
-            }
-            if (sent.some((text) => carries(text, String(id)))) {
-                return fail("The query sent the created identifier, so it did not find the resource.");
-            }
-            return values.get("found_id") === id && values.get("content") === context.nonce
-                ? pass()
-                : fail("The query did not return the created resource with this run's nonce.");
-        },
-    },
-    message_accepted: accepted,
-    /**
-     * Delivery as the service itself reports it: a read of the accepted message,
-     * by the identifier the send returned, whose status is `delivered`. Sourcey
-     * has no phone to receive on, so this is the service's own statement and is
-     * recorded as that.
-     */
-    message_delivered: {
-        observations: [
-            { name: "message_id", source: "json", method: "write" },
-            { name: "read_id", source: "json", method: "read" },
-            { name: "status", source: "json", method: "read" },
-        ],
-        sameCall: [["read_id", "status"]],
-        differentCall: [["message_id", "read_id"]],
-        evaluate({ values }) {
-            const id = values.get("message_id");
-            const status = values.get("status");
-            return resourceIdentifier(id) &&
-                id === values.get("read_id") &&
-                typeof status === "string" &&
-                status.toLowerCase() === "delivered"
-                ? pass()
-                : fail("The service does not report the accepted message as delivered.");
-        },
-    },
-    sink_received: {
-        observations: [],
-        async evaluate({ context, sink }) {
-            if (!sink || !context.sinks.recipient)
-                return fail("No controlled recipient observes delivery.");
-            return (await sink.received({ sink: "recipient", contains: context.nonce }))
-                ? pass()
-                : fail("The controlled recipient did not receive this run's nonce.");
-        },
-    },
-};
-export function agentReadinessAssertionProof(proof) {
-    return proofs[proof];
-}
-//# sourceMappingURL=assertions.js.map

package/dist/modules/agent-readiness-engine/src/assertions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"assertions.js","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/assertions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAOvD,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAE9B;IACF,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC;IACzC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB,CAAC;AAoBF,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,OAAgB,EAAE,MAAyB;IACtE,OAAO,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC;AAC7F,CAAC;AAoBD,MAAM,IAAI,GAAG,GAAiB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;AAC7F,MAAM,IAAI,GAAG,CAAC,MAAc,EAAgB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1E,MAAM,UAAU,GAAG,CAAC,KAAc,EAAmB,EAAE,CACrD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;AAC9E,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAAW,EAAE,CACrD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;AAC/F,MAAM,MAAM,GAAG,CAAC,KAAc,EAAkC,EAAE,CAChE,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAClE,CAAC,CAAE,KAAiC;IACpC,CAAC,CAAC,IAAI,CAAC;AAEX;;;;GAIG;AACH,SAAS,OAAO,CAAC,IAAY,EAAE,EAAU;IACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC;IAC9B,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAW,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,KAAqB,EAAE,IAAY;IAC5D,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9C,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,MAAM,OAAO,GAAmB;IAC9B,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAClF,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAClB,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,SAAS;QAC1C,CAAC,CAAC,IAAI,EAAE;QACR,CAAC,CAAC,IAAI,CAAC,gEAAgE,CAAC;CAC7E,CAAC;AAEF,wEAAwE;AACxE,MAAM,QAAQ,GAAmB;IAC/B,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/D,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,IAAI,EAAE;QACR,CAAC,CAAC,IAAI,CAAC,sDAAsD,CAAC;CACnE,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,GAA4C;IACtD,UAAU,EAAE;QACV,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YACtD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SACpD;QACD,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;YAC1B,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CACnC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7E,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3E,OAAO,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE;gBACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAC7D,OAAO,CACL,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC1D,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAC5D,CAAC;YACJ,CAAC,CAAC;YACF,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBACpD,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC1D,CAAC;KACF;IACD,WAAW,EAAE;QACX,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACxB,CAAC,CAAC,IAAI,EAAE;YACR,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC;KACjE;IACD,cAAc,EAAE;QACd,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YAClD,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;SAC1D;QACD,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzC,QAAQ,CAAC,EAAE,MAAM,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAChD,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACvB,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACjE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,CAAC,CAAC,CACH,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;YAC/E,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC1F,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAC5E,CAAC;KACF;IACD,aAAa,EAAE;QACb,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACrE,QAAQ,CAAC,EAAE,MAAM,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1B,MAAM,CAAC,MAAM,IAAI,CAAC;gBAClB,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC;gBACrF,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,CAAC;KACF;IACD,WAAW,EAAE;QACX,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;YACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;SAC9D;QACD,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC3C,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBACrD,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,CAAC,KAAyB,EAAiB,EAAE,CACzD,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;gBACpF,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3E,CAAC,CAAC,IAAI,CAAC;YACX,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,eAAe;gBAClC,OAAO,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,sCAAsC,CAAC,CAAC;YAC1E,IAAI,cAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,KAAK,OAAO,CAAC,KAAK;gBACpD,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC7D,CAAC;KACF;IACD,gBAAgB,EAAE,OAAO;IACzB,kBAAkB,EAAE;QAClB,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE;YAC1E,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YACnD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SACpD;QACD,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAClC,aAAa,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC1C,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,MAAM,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAClD,OAAO,EAAE,KAAK,SAAS;gBACrB,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBAClC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,KAAK;gBACnD,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;QAC1F,CAAC;KACF;IACD;;;;;;OAMG;IACH,uBAAuB,EAAE;QACvB,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE;YAC1E,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE;YACrD,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;YACrD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;SACrD;QACD,QAAQ,EAAE;YACR,CAAC,OAAO,EAAE,UAAU,CAAC;YACrB,CAAC,UAAU,EAAE,SAAS,CAAC;SACxB;QACD,aAAa,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QAC3C,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC1C,QAAQ,CAAC,KAAK;YACZ,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;YAC5C,MAAM,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;YAClD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,EAAE,KAAK,SAAS;gBAClB,OAAO,IAAI,CAAC,gEAAgE,CAAC,CAAC;YAChF,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChE,OAAO,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnD,OAAO,IAAI,CAAC,yEAAyE,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,KAAK;gBAC7E,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,sEAAsE,CAAC,CAAC;QACnF,CAAC;KACF;IACD,gBAAgB,EAAE,QAAQ;IAC1B;;;;;OAKG;IACH,iBAAiB,EAAE;QACjB,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;YACvD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YACnD,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SACnD;QACD,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACjC,aAAa,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC1C,QAAQ,CAAC,EAAE,MAAM,EAAE;YACjB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO,kBAAkB,CAAC,EAAE,CAAC;gBAC3B,EAAE,KAAK,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;gBAC5B,OAAO,MAAM,KAAK,QAAQ;gBAC1B,MAAM,CAAC,WAAW,EAAE,KAAK,WAAW;gBACpC,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC7E,CAAC;KACF;IACD,aAAa,EAAE;QACb,YAAY,EAAE,EAAE;QAChB,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;YAC9B,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS;gBACnC,OAAO,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC1E,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QACzE,CAAC;KACF;CACF,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,KAAY;IACvD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/modules/agent-readiness-engine/src/authority.d.ts

@@ -1,81 +0,0 @@
-import type { ExchangeRecord } from "provenry/exchange/records";
-import { type Challenge } from "./challenges.js";
-/**
- * The authority chain an *authority* answer, or an error before authority,
- * points to (north star §5.5): RFC 9728 protected-resource metadata, then the
- * authorization server's RFC 8414 or OpenID metadata, then its auth.md agent
- * registration or how Sourcey's agent can identify itself as an OAuth client,
- * then whether a PKCE authorization request with that client reaches consent.
- * These are the pure readings; the probe suite performs the exchanges.
- */
-/** The Bearer challenge's parameters an agent follows: where the metadata is, and what scope. */
-export declare function bearerChallenge(record: ExchangeRecord): Challenge | null;
-/**
- * Where the protected-resource metadata for a resource is: the challenge's
- * `resource_metadata`, else RFC 9728 §3.1's well-known location with the
- * resource's path inserted, then at the root.
- */
-export declare function protectedResourceMetadataUrls(resource: string, challenge: Challenge | null): readonly string[];
-/** RFC 9728 metadata as published: the resource, its authorization servers and its scopes. */
-export declare function protectedResourceMetadata(document: unknown): {
-    readonly resource: string;
-    readonly authorizationServers: readonly string[];
-    readonly scopes: readonly string[];
-} | null;
-/** RFC 9728 metadata for a resource on the operation's origin: its first authorization server. */
-export declare function readProtectedResource(document: unknown, operationUrl: string): {
-    readonly authorizationServer: string;
-    readonly scopes: readonly string[];
-} | null;
-/**
- * Where an authorization server's metadata is, in the order MCP clients try:
- * RFC 8414 with the issuer's path inserted, OpenID with it inserted, OpenID
- * with it appended; or, for an issuer without a path, RFC 8414 then OpenID.
- */
-export declare function authorizationServerMetadataUrls(issuer: string): readonly string[];
-export interface AuthorizationServerMetadata {
-    readonly issuer: string;
-    /** Null for a server that only registers agents (auth.md) and runs no authorization flow. */
-    readonly authorizationEndpoint: string | null;
-    readonly registrationEndpoint: string | null;
-    readonly clientIdMetadataDocument: boolean;
-    /** S256 is listed: an MCP client refuses a server that does not list it. */
-    readonly pkce: boolean;
-    /**
-     * The server's auth.md agent registration (`agent_auth` with an
-     * `identity_endpoint`): `agent` when it offers `anonymous`, which needs no
-     * person; `claimable` when it offers only `service_auth` or
-     * `identity_assertion`, which a person claims or confirms once.
-     */
-    readonly registration: "agent" | "claimable" | null;
-    /** A renewal grant is offered: refresh, or with auth.md the JWT-bearer exchange of its assertion. */
-    readonly renewal: boolean;
-    /** A revocation endpoint is named. */
-    readonly revocation: boolean;
-}
-/** Server metadata for exactly this issuer (RFC 8414 §3.3), or null. */
-export declare function readAuthorizationServer(document: unknown, issuer: string): AuthorizationServerMetadata | null;
-/** The client id a dynamic registration returned, or null. */
-export declare function registeredClientId(document: unknown): string | null;
-/**
- * The PKCE authorization request a probe sends: Sourcey's client, its redirect
- * URI, a challenge derived from the run's nonce, and the resource and scope the
- * chain named. Sourcey never redeems a code, so the verifier is never sent.
- */
-export declare function authorizationRequestUrl(input: {
-    readonly authorizationEndpoint: string;
-    readonly clientId: string;
-    readonly resource: string;
-    readonly scopes: readonly string[];
-    readonly nonce: string;
-}): string;
-/**
- * Whether an answered authorization request reached consent: the server
- * accepted it and moved to the person's sign-in or consent, answering with a
- * page (2xx HTML) or redirecting, with no `error`, anywhere but back to
- * Sourcey. A redirect back carries an error or a code Sourcey discards; a
- * redirect carrying `error` refused the client; any other answer refused it
- * too. An unanswered request is residue (`probeUnanswered`) and never read here.
- */
-export declare function consentReached(record: ExchangeRecord): boolean;
-//# sourceMappingURL=authority.d.ts.map

package/dist/modules/agent-readiness-engine/src/authority.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/authority.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,KAAK,SAAS,EAAmB,MAAM,iBAAiB,CAAC;AAIlE;;;;;;;GAOG;AAEH,iGAAiG;AACjG,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI,CAIxE;AAED;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,SAAS,GAAG,IAAI,GAC1B,SAAS,MAAM,EAAE,CASnB;AAED,8FAA8F;AAC9F,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,OAAO,GAAG;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACpC,GAAG,IAAI,CAaP;AAED,kGAAkG;AAClG,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,EACjB,YAAY,EAAE,MAAM,GACnB;IAAE,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,IAAI,CAKrF;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAajF;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6FAA6F;IAC7F,QAAQ,CAAC,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7C,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAAC;IACpD,qGAAqG;IACrG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,sCAAsC;IACtC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAID,wEAAwE;AACxE,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,OAAO,EACjB,MAAM,EAAE,MAAM,GACb,2BAA2B,GAAG,IAAI,CAsBpC;AAoBD,8DAA8D;AAC9D,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAGnE;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAYT;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAoB9D"}

package/dist/modules/agent-readiness-engine/src/authority.js

@@ -1,193 +0,0 @@
-import { createHash } from "node:crypto";
-import { AGENT_READINESS_REDIRECT_URI } from "../../../contracts/agent-readiness/src/index.js";
-import { parseChallenges } from "./challenges.js";
-import { httpsUrl, record } from "./documents.js";
-import { responseHeader, unansweredRecord } from "./records.js";
-/**
- * The authority chain an *authority* answer, or an error before authority,
- * points to (north star §5.5): RFC 9728 protected-resource metadata, then the
- * authorization server's RFC 8414 or OpenID metadata, then its auth.md agent
- * registration or how Sourcey's agent can identify itself as an OAuth client,
- * then whether a PKCE authorization request with that client reaches consent.
- * These are the pure readings; the probe suite performs the exchanges.
- */
-/** The Bearer challenge's parameters an agent follows: where the metadata is, and what scope. */
-export function bearerChallenge(record) {
-    const header = responseHeader(record, "www-authenticate");
-    if (header === null)
-        return null;
-    return parseChallenges(header).find(({ scheme }) => scheme === "bearer") ?? null;
-}
-/**
- * Where the protected-resource metadata for a resource is: the challenge's
- * `resource_metadata`, else RFC 9728 §3.1's well-known location with the
- * resource's path inserted, then at the root.
- */
-export function protectedResourceMetadataUrls(resource, challenge) {
-    const named = oauthUrl(challenge?.params.resource_metadata);
-    if (named)
-        return [named];
-    const url = new URL(resource);
-    const path = url.pathname.replace(/\/+$/u, "");
-    return [
-        ...(path ? [`${url.origin}/.well-known/oauth-protected-resource${path}`] : []),
-        `${url.origin}/.well-known/oauth-protected-resource`,
-    ];
-}
-/** RFC 9728 metadata as published: the resource, its authorization servers and its scopes. */
-export function protectedResourceMetadata(document) {
-    const metadata = record(document);
-    const resource = oauthUrl(metadata?.resource);
-    if (!resource)
-        return null;
-    return {
-        resource,
-        authorizationServers: Array.isArray(metadata?.authorization_servers)
-            ? metadata.authorization_servers.flatMap((server) => oauthUrl(server) ?? [])
-            : [],
-        scopes: Array.isArray(metadata?.scopes_supported)
-            ? metadata.scopes_supported.filter((scope) => typeof scope === "string")
-            : [],
-    };
-}
-/** RFC 9728 metadata for a resource on the operation's origin: its first authorization server. */
-export function readProtectedResource(document, operationUrl) {
-    const metadata = protectedResourceMetadata(document);
-    if (!metadata || new URL(metadata.resource).origin !== new URL(operationUrl).origin)
-        return null;
-    const [authorizationServer] = metadata.authorizationServers;
-    return authorizationServer ? { authorizationServer, scopes: metadata.scopes } : null;
-}
-/**
- * Where an authorization server's metadata is, in the order MCP clients try:
- * RFC 8414 with the issuer's path inserted, OpenID with it inserted, OpenID
- * with it appended; or, for an issuer without a path, RFC 8414 then OpenID.
- */
-export function authorizationServerMetadataUrls(issuer) {
-    const url = new URL(issuer);
-    const path = url.pathname.replace(/\/+$/u, "");
-    return path
-        ? [
-            `${url.origin}/.well-known/oauth-authorization-server${path}`,
-            `${url.origin}/.well-known/openid-configuration${path}`,
-            `${url.origin}${path}/.well-known/openid-configuration`,
-        ]
-        : [
-            `${url.origin}/.well-known/oauth-authorization-server`,
-            `${url.origin}/.well-known/openid-configuration`,
-        ];
-}
-const JWT_BEARER_GRANT = "urn:ietf:params:oauth:grant-type:jwt-bearer";
-/** Server metadata for exactly this issuer (RFC 8414 §3.3), or null. */
-export function readAuthorizationServer(document, issuer) {
-    const metadata = record(document);
-    const stated = oauthUrl(metadata?.issuer);
-    const authorizationEndpoint = oauthUrl(metadata?.authorization_endpoint);
-    const registration = agentRegistration(metadata?.agent_auth);
-    if (!stated || trimmed(stated) !== trimmed(issuer))
-        return null;
-    if (!authorizationEndpoint && !registration)
-        return null;
-    const strings = (value) => Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
-    const grants = strings(metadata?.grant_types_supported);
-    return {
-        issuer: stated,
-        authorizationEndpoint,
-        registrationEndpoint: oauthUrl(metadata?.registration_endpoint),
-        clientIdMetadataDocument: metadata?.client_id_metadata_document_supported === true,
-        pkce: strings(metadata?.code_challenge_methods_supported).includes("S256"),
-        registration,
-        renewal: grants.includes("refresh_token") ||
-            (registration !== null && grants.includes(JWT_BEARER_GRANT)),
-        revocation: oauthUrl(metadata?.revocation_endpoint) !== null,
-    };
-}
-/**
- * auth.md's `agent_auth` block: an `identity_endpoint` the agent registers at,
- * and the registration types it accepts (`identity_types_supported`). An
- * `anonymous` registration is the agent's own, unless the block names a
- * `claim_endpoint`: what the agent made then lasts until a person claims it
- * later (north star §5.6, Onboard `approval`), as does a registration a person
- * confirms (`service_auth`, `identity_assertion`).
- */
-function agentRegistration(value) {
-    const block = record(value);
-    if (!block || !oauthUrl(block.identity_endpoint))
-        return null;
-    const types = Array.isArray(block.identity_types_supported) ? block.identity_types_supported : [];
-    if (types.includes("anonymous"))
-        return oauthUrl(block.claim_endpoint) ? "claimable" : "agent";
-    return types.includes("service_auth") || types.includes("identity_assertion")
-        ? "claimable"
-        : null;
-}
-/** The client id a dynamic registration returned, or null. */
-export function registeredClientId(document) {
-    const id = record(document)?.client_id;
-    return typeof id === "string" && id.length > 0 && id.length <= 512 ? id : null;
-}
-/**
- * The PKCE authorization request a probe sends: Sourcey's client, its redirect
- * URI, a challenge derived from the run's nonce, and the resource and scope the
- * chain named. Sourcey never redeems a code, so the verifier is never sent.
- */
-export function authorizationRequestUrl(input) {
-    const url = new URL(input.authorizationEndpoint);
-    const verifier = base64url(sha256(`sourcey.agent-readiness-pkce:${input.nonce}`));
-    url.searchParams.set("response_type", "code");
-    url.searchParams.set("client_id", input.clientId);
-    url.searchParams.set("redirect_uri", AGENT_READINESS_REDIRECT_URI);
-    url.searchParams.set("state", input.nonce);
-    url.searchParams.set("code_challenge", base64url(sha256(verifier)));
-    url.searchParams.set("code_challenge_method", "S256");
-    url.searchParams.set("resource", input.resource);
-    if (input.scopes.length > 0)
-        url.searchParams.set("scope", input.scopes.join(" "));
-    return url.href;
-}
-/**
- * Whether an answered authorization request reached consent: the server
- * accepted it and moved to the person's sign-in or consent, answering with a
- * page (2xx HTML) or redirecting, with no `error`, anywhere but back to
- * Sourcey. A redirect back carries an error or a code Sourcey discards; a
- * redirect carrying `error` refused the client; any other answer refused it
- * too. An unanswered request is residue (`probeUnanswered`) and never read here.
- */
-export function consentReached(record) {
-    if (unansweredRecord(record) || record.outcome !== "responded")
-        return false;
-    const { status, body } = record.response;
-    if (status >= 200 && status <= 299)
-        return body.media_type === "text/html";
-    if (status >= 300 && status <= 399) {
-        const location = responseHeader(record, "location");
-        if (location === null)
-            return false;
-        let target;
-        try {
-            target = new URL(location, record.request.url);
-        }
-        catch {
-            return false;
-        }
-        const back = new URL(AGENT_READINESS_REDIRECT_URI);
-        return (!target.searchParams.has("error") &&
-            !(target.origin === back.origin && target.pathname === back.pathname));
-    }
-    return false;
-}
-function sha256(text) {
-    return createHash("sha256").update(text, "utf8").digest();
-}
-function base64url(bytes) {
-    return bytes.toString("base64url");
-}
-function trimmed(url) {
-    return url.replace(/\/+$/u, "");
-}
-/** An OAuth URL (RFC 8414, RFC 9728): HTTPS, with no credentials and no fragment. */
-function oauthUrl(value) {
-    const url = httpsUrl(value);
-    return url !== null && new URL(url).hash === "" ? url : null;
-}
-//# sourceMappingURL=authority.js.map

package/dist/modules/agent-readiness-engine/src/authority.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authority.js","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,iDAAiD,CAAC;AAC/F,OAAO,EAAkB,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhE;;;;;;;GAOG;AAEH,iGAAiG;AACjG,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC1D,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAgB,EAChB,SAA2B;IAE3B,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC5D,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,wCAAwC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,GAAG,CAAC,MAAM,uCAAuC;KACrD,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,yBAAyB,CAAC,QAAiB;IAKzD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO;QACL,QAAQ;QACR,oBAAoB,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,qBAAqB,CAAC;YAClE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5E,CAAC,CAAC,EAAE;QACN,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,gBAAgB,CAAC;YAC/C,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACzF,CAAC,CAAC,EAAE;KACP,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CACnC,QAAiB,EACjB,YAAoB;IAEpB,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjG,MAAM,CAAC,mBAAmB,CAAC,GAAG,QAAQ,CAAC,oBAAoB,CAAC;IAC5D,OAAO,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAAC,MAAc;IAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,IAAI;QACT,CAAC,CAAC;YACE,GAAG,GAAG,CAAC,MAAM,0CAA0C,IAAI,EAAE;YAC7D,GAAG,GAAG,CAAC,MAAM,oCAAoC,IAAI,EAAE;YACvD,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,mCAAmC;SACxD;QACH,CAAC,CAAC;YACE,GAAG,GAAG,CAAC,MAAM,yCAAyC;YACtD,GAAG,GAAG,CAAC,MAAM,mCAAmC;SACjD,CAAC;AACR,CAAC;AAuBD,MAAM,gBAAgB,GAAG,6CAA6C,CAAC;AAEvE,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CACrC,QAAiB,EACjB,MAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,qBAAqB,GAAG,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,CAAC,qBAAqB,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE,CACjC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IACxD,OAAO;QACL,MAAM,EAAE,MAAM;QACd,qBAAqB;QACrB,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;QAC/D,wBAAwB,EAAE,QAAQ,EAAE,qCAAqC,KAAK,IAAI;QAClF,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,gCAAgC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1E,YAAY;QACZ,OAAO,EACL,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC;YAChC,CAAC,YAAY,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC9D,UAAU,EAAE,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,KAAK,IAAI;KAC7D,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/F,OAAO,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC3E,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,kBAAkB,CAAC,QAAiB;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC;IACvC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAMvC;IACC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,gCAAgC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,4BAA4B,CAAC,CAAC;IACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACtD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACnF,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC;IAC7E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IACzC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,UAAU,KAAK,WAAW,CAAC;IAC3E,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpD,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACpC,IAAI,MAAW,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACnD,OAAO,CACL,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;YACjC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CACtE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,qFAAqF;AACrF,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,GAAG,KAAK,IAAI,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC"}

package/dist/modules/agent-readiness-engine/src/binding.d.ts

@@ -1,13 +0,0 @@
-import { type AgentReadinessJob, type AgentReadinessJobBinding } from "../../../contracts/agent-readiness/src/index.js";
-/**
- * Why a binding cannot perform its library job, or nothing. A binding maps
- * every library observation exactly once, reads only the job's inputs and sinks,
- * places the run's nonce wherever it locates a request observation, and cleans
- * up when the job is consequential. Whether its calls stay on its declared
- * surface is the declaration's own rule, checked where it is parsed.
- */
-export declare function agentReadinessBindingIssues(input: {
-    readonly job: AgentReadinessJob;
-    readonly binding: AgentReadinessJobBinding;
-}): readonly string[];
-//# sourceMappingURL=binding.d.ts.map

package/dist/modules/agent-readiness-engine/src/binding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/binding.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAK9B,MAAM,iDAAiD,CAAC;AAIzD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC5C,GAAG,SAAS,MAAM,EAAE,CAuHpB"}