@tenuo/core 0.2.4-beta.0 → 0.2.5-beta.0

package/dist/generated/tenuo_wasm.js

@@ -21,6 +21,43 @@ class SdkContext {
         const ptr = this.__destroy_into_raw();
         wasm.__wbg_sdkcontext_free(ptr, 0);
     }
+    /**
+     * Signed statement from this session's holder that it is the one asking
+     * for `tool(args)`. Carried inside a control-plane approval request so
+     * the approver can tell a genuine request from a forged one.
+     * @param {SdkSession} session
+     * @param {string} tool
+     * @param {any} args_json
+     * @returns {any}
+     */
+    approvalContextAttestation(session, tool, args_json) {
+        _assertClass(session, SdkSession);
+        const ptr0 = passStringToWasm0(tool, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sdkcontext_approvalContextAttestation(this.__wbg_ptr, session.__wbg_ptr, ptr0, len0, args_json);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return takeFromExternrefTable0(ret[0]);
+    }
+    /**
+     * Everything an approval service needs to present `tool(args)` to a
+     * human and mint a matching `SignedApproval`. Not a signed artifact.
+     * @param {SdkSession} session
+     * @param {string} tool
+     * @param {any} args_json
+     * @returns {any}
+     */
+    approvalRequest(session, tool, args_json) {
+        _assertClass(session, SdkSession);
+        const ptr0 = passStringToWasm0(tool, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sdkcontext_approvalRequest(this.__wbg_ptr, session.__wbg_ptr, ptr0, len0, args_json);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return takeFromExternrefTable0(ret[0]);
+    }
     /**
      * Sign PoP and authorize in one call. Never returns allow without a core allow.
      *
@@ -84,6 +121,42 @@ class SdkContext {
         const ret = wasm.sdkcontext_authorizePresented(this.__wbg_ptr, warrants, ptr0, len0, args_json, ptr1, len1, approvals, tool_allow, ptr2, len2);
         return ret;
     }
+    /**
+     * Explain what the leaf would decide for `tool(args)`, field by field.
+     * No proof-of-possession is signed, so this works on any session,
+     * including one issued to another holder.
+     * @param {SdkSession} session
+     * @param {string} tool
+     * @param {any} args_json
+     * @returns {any}
+     */
+    explain(session, tool, args_json) {
+        _assertClass(session, SdkSession);
+        const ptr0 = passStringToWasm0(tool, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sdkcontext_explain(this.__wbg_ptr, session.__wbg_ptr, ptr0, len0, args_json);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return takeFromExternrefTable0(ret[0]);
+    }
+    /**
+     * Issuer context from a stable 32-byte Ed25519 secret. Its own public
+     * key is trusted; `extra_roots` (hex) are trusted as well, so one
+     * process can verify chains from several control planes.
+     * @param {Uint8Array} secret
+     * @param {any} extra_roots
+     * @returns {SdkContext}
+     */
+    static fromIssuerSecret(secret, extra_roots) {
+        const ptr0 = passArray8ToWasm0(secret, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sdkcontext_fromIssuerSecret(ptr0, len0, extra_roots);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return SdkContext.__wrap(ret[0]);
+    }
     /**
      * Authorizer-only context. `mint()` fails; import a session from the wire.
      * @param {any} roots
@@ -96,6 +169,48 @@ class SdkContext {
         }
         return SdkContext.__wrap(ret[0]);
     }
+    /**
+     * Issue an execution session from an issuer session. The issuer
+     * session's holder signs; core checks the tools against
+     * `issuableTools`, constraints against `constraintBounds`, clearance,
+     * and issue depth. No control-plane key is involved.
+     * @param {SdkSession} issuer
+     * @param {any} options
+     * @returns {SdkSession}
+     */
+    issue(issuer, options) {
+        _assertClass(issuer, SdkSession);
+        const ret = wasm.sdkcontext_issue(this.__wbg_ptr, issuer.__wbg_ptr, options);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return SdkSession.__wrap(ret[0]);
+    }
+    /**
+     * Public key of the local issuer, hex. Verifier-only contexts have none.
+     *
+     * This is what other processes put in `trustedRoots` to accept warrants
+     * this context mints. It is a public key: sharing it grants nothing.
+     * @returns {string}
+     */
+    issuerPublicKey() {
+        let deferred2_0;
+        let deferred2_1;
+        try {
+            const ret = wasm.sdkcontext_issuerPublicKey(this.__wbg_ptr);
+            var ptr1 = ret[0];
+            var len1 = ret[1];
+            if (ret[3]) {
+                ptr1 = 0; len1 = 0;
+                throw takeFromExternrefTable0(ret[2]);
+            }
+            deferred2_0 = ptr1;
+            deferred2_1 = len1;
+            return getStringFromWasm0(ptr1, len1);
+        } finally {
+            wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+        }
+    }
     /**
      * Load a published SignedRevocationList. The SRL must be signed by a trusted root.
      * @param {string} wire
@@ -114,27 +229,61 @@ class SdkContext {
      *
      * `require_approval` is optional:
      * `{ "approvers": ["hex..."], "min": 2, "tools": ["transfer"] }`
+     *
+     * `holder_hex` binds the warrant to another agent's public key. The
+     * returned session then has no holder secret: export it with `toWire()`
+     * and let that agent import it. Omit it to mint a local session with a
+     * fresh holder key.
+     *
+     * `max_depth` caps how many times the authority may be delegated below
+     * the root (0 = terminal). Omit for the protocol maximum.
      * @param {any} allow_json
      * @param {number} ttl_seconds
      * @param {any} require_approval
+     * @param {string | null} [holder_hex]
+     * @param {number | null} [max_depth]
+     * @returns {SdkSession}
+     */
+    mint(allow_json, ttl_seconds, require_approval, holder_hex, max_depth) {
+        var ptr0 = isLikeNone(holder_hex) ? 0 : passStringToWasm0(holder_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        var len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sdkcontext_mint(this.__wbg_ptr, allow_json, ttl_seconds, require_approval, ptr0, len0, isLikeNone(max_depth) ? Number.MAX_SAFE_INTEGER : (max_depth) >>> 0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return SdkSession.__wrap(ret[0]);
+    }
+    /**
+     * `mint()` with every option the protocol offers: kind, clearance,
+     * session and agent ids, approval gates with messages and per-argument
+     * triggers, and issuer-warrant fields. Keys are camelCase; unknown keys
+     * are rejected.
+     * @param {any} options
      * @returns {SdkSession}
      */
-    mint(allow_json, ttl_seconds, require_approval) {
-        const ret = wasm.sdkcontext_mint(this.__wbg_ptr, allow_json, ttl_seconds, require_approval);
+    mintExtended(options) {
+        const ret = wasm.sdkcontext_mintExtended(this.__wbg_ptr, options);
         if (ret[2]) {
             throw takeFromExternrefTable0(ret[1]);
         }
         return SdkSession.__wrap(ret[0]);
     }
     /**
-     * Attenuate the leaf. The current holder signs; the same holder keeps the child.
+     * Attenuate the leaf. The current holder signs.
+     *
+     * Without `options.holder` the same holder keeps the child. With it, the
+     * child is bound to that public key: this is delegation to another agent,
+     * and the returned session carries no holder secret (see `SdkSession`).
+     * Core rejects any child that is not within its parent — tools,
+     * constraints, lifetime, and depth — before a token exists.
      * @param {SdkSession} session
      * @param {any} allow_json
+     * @param {any} options
      * @returns {SdkSession}
      */
-    narrow(session, allow_json) {
+    narrow(session, allow_json, options) {
         _assertClass(session, SdkSession);
-        const ret = wasm.sdkcontext_narrow(this.__wbg_ptr, session.__wbg_ptr, allow_json);
+        const ret = wasm.sdkcontext_narrow(this.__wbg_ptr, session.__wbg_ptr, allow_json, options);
         if (ret[2]) {
             throw takeFromExternrefTable0(ret[1]);
         }
@@ -197,12 +346,42 @@ class SdkContext {
             wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
         }
     }
+    /**
+     * Sign a revocation list with this context's issuer key. Load it with
+     * `loadRevocationList` anywhere this issuer is a trusted root.
+     * @param {any} ids
+     * @param {number | null} [version]
+     * @returns {string}
+     */
+    signRevocationListVersioned(ids, version) {
+        let deferred2_0;
+        let deferred2_1;
+        try {
+            const ret = wasm.sdkcontext_signRevocationListVersioned(this.__wbg_ptr, ids, isLikeNone(version) ? Number.MAX_SAFE_INTEGER : (version) >>> 0);
+            var ptr1 = ret[0];
+            var len1 = ret[1];
+            if (ret[3]) {
+                ptr1 = 0; len1 = 0;
+                throw takeFromExternrefTable0(ret[2]);
+            }
+            deferred2_0 = ptr1;
+            deferred2_1 = len1;
+            return getStringFromWasm0(ptr1, len1);
+        } finally {
+            wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
+        }
+    }
 }
 if (Symbol.dispose) SdkContext.prototype[Symbol.dispose] = SdkContext.prototype.free;
 exports.SdkContext = SdkContext;
 
 /**
  * Opaque warrant chain (root first) + leaf holder key. Not JSON-serializable from JS.
+ *
+ * `holder` is `None` when the leaf was issued or delegated to another agent's
+ * key. Such a session can be exported with `toWire()` and handed over, but it
+ * cannot sign proof-of-possession here; the holder imports it with
+ * `SdkSession.fromWire` and its own secret.
  */
 class SdkSession {
     static __wrap(ptr) {
@@ -248,6 +427,18 @@ class SdkSession {
             wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
         }
     }
+    /**
+     * Public view of the leaf: holder public key, depth, ceiling, lifetime,
+     * tools. Never the holder secret.
+     * @returns {any}
+     */
+    describe() {
+        const ret = wasm.sdksession_describe(this.__wbg_ptr);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return takeFromExternrefTable0(ret[0]);
+    }
     /**
      * Test / interop seam. Not on the public TypeScript Session type.
      * @returns {any}
@@ -625,6 +816,22 @@ function parse_connect_token(token) {
 }
 exports.parse_connect_token = parse_connect_token;
 
+/**
+ * Decode and check an approval envelope. Not authorization.
+ * @param {string} envelope
+ * @returns {any}
+ */
+function sdkInspectApproval(envelope) {
+    const ptr0 = passStringToWasm0(envelope, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.sdkInspectApproval(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.sdkInspectApproval = sdkInspectApproval;
+
 /**
  * @param {string} payload_hex
  * @param {string} signature_hex
@@ -643,6 +850,22 @@ function sdkInspectParts(payload_hex, signature_hex) {
 }
 exports.sdkInspectParts = sdkInspectParts;
 
+/**
+ * Decode a signed revocation list without loading it.
+ * @param {string} wire
+ * @returns {any}
+ */
+function sdkInspectRevocationList(wire) {
+    const ptr0 = passStringToWasm0(wire, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.sdkInspectRevocationList(ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.sdkInspectRevocationList = sdkInspectRevocationList;
+
 /**
  * @param {string} wire
  * @returns {any}
@@ -658,6 +881,46 @@ function sdkInspectWarrant(wire) {
 }
 exports.sdkInspectWarrant = sdkInspectWarrant;
 
+/**
+ * @returns {any}
+ */
+function sdkProtocolLimits() {
+    const ret = wasm.sdkProtocolLimits();
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.sdkProtocolLimits = sdkProtocolLimits;
+
+/**
+ * Public key (hex) for a 32-byte Ed25519 holder secret. What an agent hands
+ * to whoever will issue or delegate a warrant to it.
+ * @param {Uint8Array} holder_secret
+ * @returns {string}
+ */
+function sdkPublicKeyFromHolderKey(holder_secret) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passArray8ToWasm0(holder_secret, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sdkPublicKeyFromHolderKey(ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+exports.sdkPublicKeyFromHolderKey = sdkPublicKeyFromHolderKey;
+
 /**
  * Test / host seam. Signs a SignedApproval envelope; does not authorize.
  * @param {SdkSession} session
@@ -695,6 +958,42 @@ function sdkSignApproval(session, tool, args_json, approver_secret, external_id,
 }
 exports.sdkSignApproval = sdkSignApproval;
 
+/**
+ * Sign an approval for a request hash. The approver never needs the
+ * warrant or the holder key; the hash already commits to both.
+ * @param {string} request_hash_hex
+ * @param {Uint8Array} approver_secret
+ * @param {string} external_id
+ * @param {number | null} [ttl_seconds]
+ * @param {number | null} [warrant_expires_at]
+ * @returns {string}
+ */
+function sdkSignApprovalForRequest(request_hash_hex, approver_secret, external_id, ttl_seconds, warrant_expires_at) {
+    let deferred5_0;
+    let deferred5_1;
+    try {
+        const ptr0 = passStringToWasm0(request_hash_hex, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passArray8ToWasm0(approver_secret, wasm.__wbindgen_malloc);
+        const len1 = WASM_VECTOR_LEN;
+        const ptr2 = passStringToWasm0(external_id, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len2 = WASM_VECTOR_LEN;
+        const ret = wasm.sdkSignApprovalForRequest(ptr0, len0, ptr1, len1, ptr2, len2, isLikeNone(ttl_seconds) ? Number.MAX_SAFE_INTEGER : (ttl_seconds) >>> 0, !isLikeNone(warrant_expires_at), isLikeNone(warrant_expires_at) ? 0 : warrant_expires_at);
+        var ptr4 = ret[0];
+        var len4 = ret[1];
+        if (ret[3]) {
+            ptr4 = 0; len4 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred5_0 = ptr4;
+        deferred5_1 = len4;
+        return getStringFromWasm0(ptr4, len4);
+    } finally {
+        wasm.__wbindgen_free(deferred5_0, deferred5_1, 1);
+    }
+}
+exports.sdkSignApprovalForRequest = sdkSignApprovalForRequest;
+
 /**
  * Test seam. Signs the published generator envelope (not the in-memory SRL codec).
  * @param {any} ids
@@ -752,6 +1051,35 @@ function sdkSignRevocationList(ids, issuer_secret) {
 }
 exports.sdkSignRevocationList = sdkSignRevocationList;
 
+/**
+ * Sign a revocation list with an explicit issuer secret (control-plane path).
+ * @param {any} ids
+ * @param {number | null | undefined} version
+ * @param {Uint8Array} issuer_secret
+ * @returns {string}
+ */
+function sdkSignRevocationListVersioned(ids, version, issuer_secret) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const ptr0 = passArray8ToWasm0(issuer_secret, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sdkSignRevocationListVersioned(ids, isLikeNone(version) ? Number.MAX_SAFE_INTEGER : (version) >>> 0, ptr0, len0);
+        var ptr2 = ret[0];
+        var len2 = ret[1];
+        if (ret[3]) {
+            ptr2 = 0; len2 = 0;
+            throw takeFromExternrefTable0(ret[2]);
+        }
+        deferred3_0 = ptr2;
+        deferred3_1 = len2;
+        return getStringFromWasm0(ptr2, len2);
+    } finally {
+        wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
+    }
+}
+exports.sdkSignRevocationListVersioned = sdkSignRevocationListVersioned;
+
 /**
  * Signature authenticity only. Not authorization.
  * @param {string} wire

package/dist/generated/tenuo_wasm_bg.wasm.d.ts

@@ -1,30 +1,12 @@
 /* tslint:disable */
 /* eslint-disable */
 export const memory: WebAssembly.Memory;
-export const check_access: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: number) => any;
-export const check_access_with_pop: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: number, i: number) => any;
-export const check_chain_access: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: number) => any;
-export const check_chain_access_with_approvals: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: any, i: number, j: number) => any;
-export const check_revocation: (a: number, b: number, c: number, d: number) => any;
-export const compute_request_hash_wasm: (a: number, b: number, c: number, d: number, e: any) => any;
-export const create_issuer_warrant: (a: any) => any;
-export const create_sample_warrant: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint) => any;
-export const create_warrant_from_config: (a: any) => any;
-export const decode_pem_chain_wasm: (a: number, b: number) => any;
-export const decode_warrant: (a: number, b: number) => any;
-export const evaluate_approval_gates: (a: number, b: number, c: number, d: number, e: any) => any;
-export const generate_keypair: () => any;
-export const parse_connect_token: (a: number, b: number) => any;
-export const sign: (a: number, b: number, c: number, d: number, e: number, f: number, g: any) => any;
-export const sign_receipt: (a: any, b: number, c: number) => any;
-export const verify_approval_set: (a: number, b: number, c: number, d: number, e: any) => any;
-export const verify_signed_approval: (a: number, b: number) => any;
-export const verify_srl: (a: number, b: number, c: number, d: number) => any;
-export const init_panic_hook: () => void;
 export const __wbg_sdkcontext_free: (a: number, b: number) => void;
 export const __wbg_sdksession_free: (a: number, b: number) => void;
 export const sdkInspectParts: (a: number, b: number, c: number, d: number) => [number, number, number];
 export const sdkInspectWarrant: (a: number, b: number) => [number, number, number];
+export const sdkProtocolLimits: () => [number, number, number];
+export const sdkPublicKeyFromHolderKey: (a: number, b: number) => [number, number, number, number];
 export const sdkSignApproval: (a: number, b: number, c: number, d: any, e: number, f: number, g: number, h: number, i: number, j: number) => [number, number, number, number];
 export const sdkSignPublishedRevocationList: (a: any, b: number, c: number, d: number) => [number, number, number, number];
 export const sdkSignRevocationList: (a: any, b: number, c: number) => [number, number, number, number];
@@ -34,13 +16,15 @@ export const sdkcontext_authorize: (a: number, b: number, c: number, d: number,
 export const sdkcontext_authorizeAsOf: (a: number, b: number, c: number, d: number, e: any, f: number, g: any, h: any) => any;
 export const sdkcontext_authorizePresented: (a: number, b: any, c: number, d: number, e: any, f: number, g: number, h: any, i: any, j: number, k: number) => any;
 export const sdkcontext_fromTrustedRoots: (a: any) => [number, number, number];
+export const sdkcontext_issuerPublicKey: (a: number) => [number, number, number, number];
 export const sdkcontext_loadRevocationList: (a: number, b: number, c: number) => [number, number];
-export const sdkcontext_mint: (a: number, b: any, c: number, d: any) => [number, number, number];
-export const sdkcontext_narrow: (a: number, b: number, c: any) => [number, number, number];
+export const sdkcontext_mint: (a: number, b: any, c: number, d: any, e: number, f: number, g: number) => [number, number, number];
+export const sdkcontext_narrow: (a: number, b: number, c: any, d: any) => [number, number, number];
 export const sdkcontext_new: () => number;
 export const sdkcontext_signPop: (a: number, b: number, c: number, d: number, e: any) => [number, number, number, number];
 export const sdkcontext_signRevocationList: (a: number, b: any) => [number, number, number, number];
 export const sdksession_dedupKey: (a: number, b: number, c: number, d: any) => [number, number, number, number];
+export const sdksession_describe: (a: number) => [number, number, number];
 export const sdksession_exportWire: (a: number) => [number, number, number];
 export const sdksession_fromChain: (a: any, b: number, c: number) => [number, number, number];
 export const sdksession_fromParts: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
@@ -48,6 +32,37 @@ export const sdksession_fromWire: (a: number, b: number, c: number, d: number) =
 export const sdksession_toStackWire: (a: number) => [number, number, number, number];
 export const sdksession_toWire: (a: number) => [number, number, number];
 export const sdksession_warrantIds: (a: number) => [number, number, number];
+export const check_access: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: number) => any;
+export const check_access_with_pop: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: number, i: number) => any;
+export const check_chain_access: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: number) => any;
+export const check_chain_access_with_approvals: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: any, i: number, j: number) => any;
+export const check_revocation: (a: number, b: number, c: number, d: number) => any;
+export const compute_request_hash_wasm: (a: number, b: number, c: number, d: number, e: any) => any;
+export const create_issuer_warrant: (a: any) => any;
+export const create_sample_warrant: (a: number, b: number, c: number, d: number, e: number, f: number, g: bigint) => any;
+export const create_warrant_from_config: (a: any) => any;
+export const decode_pem_chain_wasm: (a: number, b: number) => any;
+export const decode_warrant: (a: number, b: number) => any;
+export const evaluate_approval_gates: (a: number, b: number, c: number, d: number, e: any) => any;
+export const generate_keypair: () => any;
+export const parse_connect_token: (a: number, b: number) => any;
+export const sign: (a: number, b: number, c: number, d: number, e: number, f: number, g: any) => any;
+export const sign_receipt: (a: any, b: number, c: number) => any;
+export const verify_approval_set: (a: number, b: number, c: number, d: number, e: any) => any;
+export const verify_signed_approval: (a: number, b: number) => any;
+export const verify_srl: (a: number, b: number, c: number, d: number) => any;
+export const init_panic_hook: () => void;
+export const sdkInspectApproval: (a: number, b: number) => [number, number, number];
+export const sdkInspectRevocationList: (a: number, b: number) => [number, number, number];
+export const sdkSignApprovalForRequest: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => [number, number, number, number];
+export const sdkSignRevocationListVersioned: (a: any, b: number, c: number, d: number) => [number, number, number, number];
+export const sdkcontext_approvalContextAttestation: (a: number, b: number, c: number, d: number, e: any) => [number, number, number];
+export const sdkcontext_approvalRequest: (a: number, b: number, c: number, d: number, e: any) => [number, number, number];
+export const sdkcontext_explain: (a: number, b: number, c: number, d: number, e: any) => [number, number, number];
+export const sdkcontext_fromIssuerSecret: (a: number, b: number, c: any) => [number, number, number];
+export const sdkcontext_issue: (a: number, b: number, c: any) => [number, number, number];
+export const sdkcontext_mintExtended: (a: number, b: any) => [number, number, number];
+export const sdkcontext_signRevocationListVersioned: (a: number, b: any, c: number) => [number, number, number, number];
 export const __wbindgen_malloc: (a: number, b: number) => number;
 export const __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
 export const __wbindgen_exn_store: (a: number) => void;

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-export type { AllowPolicy, ApprovalRequest, ConstraintExpr, CreateTenuoOptions, Decision, DevRoot, EmailConstraint, ExactConstraint, ExecuteOptions, MaxConstraint, McpAttachOptions, McpCallParams, McpHandlerPolicy, McpJsonRpcError, McpVerifyOptions, NarrowInput, NonceStore, OneOfConstraint, PatternConstraint, ProtectedTool, PublicKeyHandle, RequireApproval, Session, SessionAllow, SessionFromWireInput, SessionInput, Tenuo, TenuoErrorCode, TenuoMcp, TenuoMcpMeta, ToolLike, WarrantPart, ToolPolicy, UnderConstraint, } from "./api.ts";
+export type { AllConstraint, AllowPolicy, AnyOfConstraint, ApprovalContextAttestation, ApprovalInfo, ApprovalRequest, ApprovalRequestSummary, ArgApprovalGate, CelConstraint, CidrConstraint, Clearance, ConstraintExpr, ContainsConstraint, ControlPlaneApprovalRequestV1, ControlPlaneApprovalResponseV1, CreateTenuoOptions, Decision, DevRoot, EmailConstraint, ExactConstraint, ExecuteOptions, ExplainedField, Explanation, IssueInput, IssuerKey, MaxConstraint, McpAttachOptions, McpCallParams, McpHandlerPolicy, McpJsonRpcError, McpVerifyOptions, MinConstraint, NarrowInput, NarrowOptions, NonceStore, NotConstraint, NotOneOfConstraint, OneOfConstraint, PatternConstraint, PresentedCall, ProtectedTool, PublicKeyHandle, RangeConstraint, ReceiptChainInfo, ReceiptInfo, RegexConstraint, RequireApproval, RevocationListInfo, RevocationListInput, Session, SessionAllow, SessionFromWireInput, SessionInfo, SessionInput, ShlexConstraint, SignApprovalOptions, SubsetConstraint, Tenuo, TenuoErrorCode, TenuoMcp, TenuoMcpMeta, ToolApprovalGate, ToolLike, ToolPolicy, UnderConstraint, UrlPatternConstraint, UrlSafeConstraint, WarrantPart, WildcardConstraint, } from "./api.ts";
 export { ApprovalRequiredError, AuthorizationDeniedError, TenuoConfigurationError, TenuoError, } from "./errors.ts";
-export { email, exact, max, oneOf, pattern, under } from "./constraints.ts";
+export { all, anyOf, cel, cidr, contains, email, exact, max, min, not, notOneOf, oneOf, pattern, range, regex, shlex, subset, under, urlPattern, urlSafe, wildcard, } from "./constraints.ts";
 export { memoryNonceStore } from "./nonce.ts";
 export { Session as SessionHandle, isSession } from "./session.ts";
 export { createTenuo } from "./client.ts";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,WAAW,EACX,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,QAAQ,EACR,OAAO,EACP,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,eAAe,EACf,eAAe,EACf,OAAO,EACP,YAAY,EACZ,oBAAoB,EACpB,YAAY,EACZ,KAAK,EACL,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,aAAa,EACb,WAAW,EACX,eAAe,EACf,0BAA0B,EAC1B,YAAY,EACZ,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,cAAc,EACd,SAAS,EACT,cAAc,EACd,kBAAkB,EAClB,6BAA6B,EAC7B,8BAA8B,EAC9B,kBAAkB,EAClB,QAAQ,EACR,OAAO,EACP,eAAe,EACf,eAAe,EACf,cAAc,EACd,cAAc,EACd,WAAW,EACX,UAAU,EACV,SAAS,EACT,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,WAAW,EACX,aAAa,EACb,UAAU,EACV,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,WAAW,EACX,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,mBAAmB,EACnB,OAAO,EACP,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,KAAK,EACL,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,gBAAgB,EAChB,QAAQ,EACR,UAAU,EACV,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,WAAW,EACX,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,GAAG,EACH,KAAK,EACL,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,KAAK,EACL,KAAK,EACL,GAAG,EACH,GAAG,EACH,GAAG,EACH,QAAQ,EACR,KAAK,EACL,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,EACL,MAAM,EACN,KAAK,EACL,UAAU,EACV,OAAO,EACP,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,5 +1,5 @@
 export { ApprovalRequiredError, AuthorizationDeniedError, TenuoConfigurationError, TenuoError, } from "./errors.js";
-export { email, exact, max, oneOf, pattern, under } from "./constraints.js";
+export { all, anyOf, cel, cidr, contains, email, exact, max, min, not, notOneOf, oneOf, pattern, range, regex, shlex, subset, under, urlPattern, urlSafe, wildcard, } from "./constraints.js";
 export { memoryNonceStore } from "./nonce.js";
 export { Session as SessionHandle, isSession } from "./session.js";
 export { createTenuo } from "./client.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAqCA,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAwEA,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,GAAG,EACH,KAAK,EACL,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,KAAK,EACL,KAAK,EACL,GAAG,EACH,GAAG,EACH,GAAG,EACH,QAAQ,EACR,KAAK,EACL,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,EACL,MAAM,EACN,KAAK,EACL,UAAU,EACV,OAAO,EACP,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/mcp.d.ts

@@ -1,4 +1,20 @@
-import type { TenuoMcp } from "./api.ts";
+import type { McpAttachOptions, McpVerifyOptions, PresentedCall, Session as SessionContract, TenuoMcp } from "./api.ts";
 import type { WasmContext, WasmDecision } from "./wasm.ts";
-export declare function createMcp(context: WasmContext, decide: (decision: WasmDecision, tool: string) => void): TenuoMcp;
+export type Decide = (decision: WasmDecision, tool: string, native?: object, args?: Record<string, unknown>) => void;
+/**
+ * Transport-agnostic half of `attach`: authorize locally, then sign
+ * proof-of-possession over the call. Shared by `tenuo.present()` and
+ * `tenuo.mcp.attach()`.
+ */
+export declare function presentCall(context: WasmContext, decide: Decide, session: SessionContract, name: string, args: Readonly<Record<string, unknown>>, options: McpAttachOptions | undefined, label: string): {
+    readonly presented: PresentedCall;
+    readonly wireArgs: Record<string, unknown>;
+};
+/**
+ * Transport-agnostic half of `verify`: check a presented warrant chain and
+ * proof-of-possession, then apply the host ceiling. Shared by
+ * `tenuo.verify()` and `tenuo.mcp.verify()`.
+ */
+export declare function verifyPresented(context: WasmContext, decide: Decide, presented: PresentedCall, name: string, args: Readonly<Record<string, unknown>>, options: McpVerifyOptions | undefined, label: string): Promise<Readonly<Record<string, unknown>>>;
+export declare function createMcp(context: WasmContext, decide: Decide): TenuoMcp;
 //# sourceMappingURL=mcp.d.ts.map

package/dist/mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAMV,QAAQ,EACT,MAAM,UAAU,CAAC;AAGlB,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE3D,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,QAAQ,CAuFhH"}
+{"version":3,"file":"mcp.d.ts","sourceRoot":"","sources":["../src/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAIhB,gBAAgB,EAChB,aAAa,EACb,OAAO,IAAI,eAAe,EAE1B,QAAQ,EACT,MAAM,UAAU,CAAC;AAGlB,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE3D,MAAM,MAAM,MAAM,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;AAErH;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACvC,OAAO,EAAE,gBAAgB,GAAG,SAAS,EACrC,KAAK,EAAE,MAAM,GACZ;IAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAyBnF;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,WAAW,EACpB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,aAAa,EACxB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACvC,OAAO,EAAE,gBAAgB,GAAG,SAAS,EACrC,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CA2B5C;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,CAuCxE"}