@tenuo/core 0.2.4-beta.0 → 0.2.5-beta.0

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import type { CreateTenuoOptions, DevRoot, PublicKeyHandle, Tenuo } from "./api.ts";
+import type { ApprovalContextAttestation, ApprovalInfo, ApprovalRequest, ControlPlaneApprovalRequestV1, ControlPlaneApprovalResponseV1, CreateTenuoOptions, DevRoot, IssuerKey, PublicKeyHandle, ReceiptChainInfo, ReceiptInfo, RevocationListInfo, RevocationListInput, SignApprovalOptions, Tenuo } from "./api.ts";
 export declare function devRoot(options?: {
     readonly allowInProduction?: boolean;
 }): DevRoot;
@@ -7,6 +7,43 @@ export declare function publicKeyFromHex(hex: string): PublicKeyHandle;
 export declare function publicKeyFromBytes(bytes: Uint8Array): PublicKeyHandle;
 export declare function holderKeyFromEnv(name: string): Uint8Array;
 export declare function holderKeyFromHex(hex: string): Uint8Array;
+/**
+ * A fresh 32-byte Ed25519 secret. One per agent, kept in that agent's
+ * process; only its public key (see `publicKeyFromHolderKey`) travels.
+ */
+export declare function generateHolderKey(): Uint8Array;
+/** Same shape as a holder key. Named separately so a control plane's key reads as one. */
+export declare function generateIssuerKey(): Uint8Array;
+/** The public half of a holder or issuer secret. */
+export declare function publicKeyFromHolderKey(holderKey: Uint8Array): PublicKeyHandle;
+/** Stable control-plane key from the environment. This process becomes an issuer. */
+export declare function issuerKeyFromEnv(name: string): IssuerKey;
+export declare function issuerKeyFromHex(hex: string): IssuerKey;
+export declare function issuerKeyFromBytes(secret: Uint8Array): IssuerKey;
+/** Sign an approval as an approver. The approver never needs the warrant or the holder key. */
+export declare function signApproval(request: ApprovalRequest | string, approverSecret: Uint8Array, options: SignApprovalOptions): string;
+/** Decode an approval envelope. Not authorization: the call path still decides. */
+export declare function inspectApproval(envelope: string | Uint8Array): ApprovalInfo;
+/** Sign a revocation list with an explicit issuer secret. */
+export declare function signRevocationList(input: RevocationListInput, issuerSecret: Uint8Array): string;
+export declare function inspectRevocationList(wire: string | Uint8Array): RevocationListInfo;
+/** Signature authenticity of a receipt. Not authorization. */
+export declare function verifyReceipt(wire: string | Uint8Array): ReceiptInfo;
+/**
+ * Root-anchored receipt check: the embedded warrant chain against `roots`
+ * at the receipt's own decision instant. Needs no trust in the signer.
+ */
+export declare function verifyReceiptChain(wire: string | Uint8Array, roots: readonly PublicKeyHandle[]): ReceiptChainInfo;
+/**
+ * The v1 JSON body a control plane's approval API accepts. Same shape the
+ * Python SDK produces, so one approval service serves both.
+ */
+export declare function controlPlaneApprovalRequestV1(request: ApprovalRequest, options?: {
+    readonly attestation?: ApprovalContextAttestation;
+    readonly temporal?: Readonly<Record<string, string>>;
+}): ControlPlaneApprovalRequestV1;
+/** Approval envelopes from a v1 response, ready for `{ approvals }` on the call. Empty unless status is a success. */
+export declare function signedApprovalsFromResponseV1(response: ControlPlaneApprovalResponseV1): string[];
 export declare const createTenuo: ((options?: CreateTenuoOptions) => Tenuo) & {
     devRoot: typeof devRoot;
     publicKeyFromEnv: typeof publicKeyFromEnv;
@@ -14,5 +51,19 @@ export declare const createTenuo: ((options?: CreateTenuoOptions) => Tenuo) & {
     publicKeyFromBytes: typeof publicKeyFromBytes;
     holderKeyFromEnv: typeof holderKeyFromEnv;
     holderKeyFromHex: typeof holderKeyFromHex;
+    generateHolderKey: typeof generateHolderKey;
+    generateIssuerKey: typeof generateIssuerKey;
+    publicKeyFromHolderKey: typeof publicKeyFromHolderKey;
+    issuerKeyFromEnv: typeof issuerKeyFromEnv;
+    issuerKeyFromHex: typeof issuerKeyFromHex;
+    issuerKeyFromBytes: typeof issuerKeyFromBytes;
+    signApproval: typeof signApproval;
+    inspectApproval: typeof inspectApproval;
+    signRevocationList: typeof signRevocationList;
+    inspectRevocationList: typeof inspectRevocationList;
+    verifyReceipt: typeof verifyReceipt;
+    verifyReceiptChain: typeof verifyReceiptChain;
+    controlPlaneApprovalRequestV1: typeof controlPlaneApprovalRequestV1;
+    signedApprovalsFromResponseV1: typeof signedApprovalsFromResponseV1;
 };
 //# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,kBAAkB,EAClB,OAAO,EAEP,eAAe,EAIf,KAAK,EAIN,MAAM,UAAU,CAAC;AA+BlB,wBAAgB,OAAO,CAAC,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CASnF;AAwBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAgB9D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAE7D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,eAAe,CAMrE;AAoBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAgBzD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAExD;AA6XD,eAAO,MAAM,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,kBAAkB,KAAK,KAAK,CAAC,GAAG;IACpE,OAAO,EAAE,OAAO,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;CAQ1C,CAAC"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,0BAA0B,EAC1B,YAAY,EACZ,eAAe,EAEf,6BAA6B,EAC7B,8BAA8B,EAC9B,kBAAkB,EAClB,OAAO,EAGP,SAAS,EAOT,eAAe,EACf,gBAAgB,EAChB,WAAW,EAEX,kBAAkB,EAClB,mBAAmB,EAGnB,mBAAmB,EACnB,KAAK,EAIN,MAAM,UAAU,CAAC;AA2ClB,wBAAgB,OAAO,CAAC,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CASnF;AA0CD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAE9D;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAE7D;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,eAAe,CAKrE;AAsBD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAEzD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAExD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,UAAU,CAE9C;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,IAAI,UAAU,CAE9C;AAED,oDAAoD;AACpD,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAG,eAAe,CAM7E;AAaD,qFAAqF;AACrF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAExD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAEvD;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,CAKhE;AAmxBD,+FAA+F;AAC/F,wBAAgB,YAAY,CAC1B,OAAO,EAAE,eAAe,GAAG,MAAM,EACjC,cAAc,EAAE,UAAU,EAC1B,OAAO,EAAE,mBAAmB,GAC3B,MAAM,CAuBR;AAED,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,YAAY,CAqB3E;AAED,6DAA6D;AAC7D,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU,GAAG,MAAM,CAU/F;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,kBAAkB,CAcnF;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,WAAW,CAsBpE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,KAAK,EAAE,SAAS,eAAe,EAAE,GAAG,gBAAgB,CAyBjH;AAED;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,eAAe,EACxB,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtD,GACA,6BAA6B,CAyC/B;AAED,sHAAsH;AACtH,wBAAgB,6BAA6B,CAAC,QAAQ,EAAE,8BAA8B,GAAG,MAAM,EAAE,CAehG;AAeD,eAAO,MAAM,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,kBAAkB,KAAK,KAAK,CAAC,GAAG;IACpE,OAAO,EAAE,OAAO,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,iBAAiB,EAAE,OAAO,iBAAiB,CAAC;IAC5C,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IACtD,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IAC1C,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,eAAe,EAAE,OAAO,eAAe,CAAC;IACxC,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,qBAAqB,EAAE,OAAO,qBAAqB,CAAC;IACpD,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,kBAAkB,EAAE,OAAO,kBAAkB,CAAC;IAC9C,6BAA6B,EAAE,OAAO,6BAA6B,CAAC;IACpE,6BAA6B,EAAE,OAAO,6BAA6B,CAAC;CAsBpE,CAAC"}