@tenuo/core 0.2.4-beta.0 → 0.3.0-beta.0

package/dist/constraints.js

@@ -1,32 +1,180 @@
+import { TenuoConfigurationError } from "./errors.js";
+/**
+ * Constraint builders. These produce plain marker objects; every one is
+ * evaluated by the Rust core, never in TypeScript. The set matches the
+ * Python SDK and the core `Constraint` enum one for one. Builders that
+ * validate their input throw `TenuoConfigurationError` at the call site.
+ * Deeper checks, such as regex syntax, run in the core when `session()`
+ * compiles the policy. Nothing here makes an authorization decision.
+ */
 /** Directory prefix. Evaluated in core as Subpath — not a string prefix check in TS. */
-export function under(root) {
+export function under(root, options) {
     if (!root.startsWith("/")) {
-        throw new Error("tenuo.under() expects an absolute path (start with /)");
+        throw new TenuoConfigurationError("tenuo.under() expects an absolute path (start with /)");
     }
-    return { kind: "under", root };
+    const out = {
+        kind: "under",
+        root,
+    };
+    if (options?.caseSensitive !== undefined) {
+        out.caseSensitive = options.caseSensitive;
+    }
+    if (options?.allowEqual !== undefined) {
+        out.allowEqual = options.allowEqual;
+    }
+    return out;
 }
 export function email(options) {
     return { kind: "email", domain: options.domain };
 }
 export function max(value) {
     if (!Number.isFinite(value)) {
-        throw new Error("tenuo.max() requires a finite number");
+        throw new TenuoConfigurationError("tenuo.max() requires a finite number");
     }
     return { kind: "max", value };
 }
+export function min(value) {
+    if (!Number.isFinite(value)) {
+        throw new TenuoConfigurationError("tenuo.min() requires a finite number");
+    }
+    return { kind: "min", value };
+}
+/** Numeric interval. Bounds are inclusive unless `minExclusive` / `maxExclusive`. */
+export function range(options) {
+    if (options.min === undefined && options.max === undefined) {
+        throw new TenuoConfigurationError("tenuo.range() requires min, max, or both");
+    }
+    for (const bound of [options.min, options.max]) {
+        if (bound !== undefined && !Number.isFinite(bound)) {
+            throw new TenuoConfigurationError("tenuo.range() bounds must be finite numbers");
+        }
+    }
+    if (options.min !== undefined && options.max !== undefined && options.min > options.max) {
+        throw new TenuoConfigurationError("tenuo.range() min must not exceed max");
+    }
+    const out = { kind: "range" };
+    if (options.min !== undefined) {
+        out.min = options.min;
+    }
+    if (options.max !== undefined) {
+        out.max = options.max;
+    }
+    if (options.minExclusive === true) {
+        out.minExclusive = true;
+    }
+    if (options.maxExclusive === true) {
+        out.maxExclusive = true;
+    }
+    return out;
+}
 export function oneOf(values) {
     if (values.length === 0) {
-        throw new Error("tenuo.oneOf() requires at least one value");
+        throw new TenuoConfigurationError("tenuo.oneOf() requires at least one value");
     }
     return { kind: "oneOf", values };
 }
+/** Any value except these. */
+export function notOneOf(values) {
+    if (values.length === 0) {
+        throw new TenuoConfigurationError("tenuo.notOneOf() requires at least one value");
+    }
+    return { kind: "notOneOf", values };
+}
 export function pattern(pattern) {
     if (pattern.length === 0) {
-        throw new Error("tenuo.pattern() requires a non-empty pattern");
+        throw new TenuoConfigurationError("tenuo.pattern() requires a non-empty pattern");
     }
     return { kind: "pattern", pattern };
 }
+/** Regular expression, compiled and evaluated in core. */
+export function regex(source) {
+    if (source.length === 0) {
+        throw new TenuoConfigurationError("tenuo.regex() requires a non-empty expression");
+    }
+    return { kind: "regex", source };
+}
 export function exact(value) {
     return { kind: "exact", value };
 }
+/** Any value at all. Name it in a zero-trust policy to allow an argument without constraining it. */
+export function wildcard() {
+    return { kind: "wildcard" };
+}
+/** IP address inside a network, e.g. `cidr("10.0.0.0/8")`. */
+export function cidr(network) {
+    if (!network.includes("/")) {
+        throw new TenuoConfigurationError("tenuo.cidr() expects CIDR notation like 10.0.0.0/8");
+    }
+    return { kind: "cidr", network };
+}
+/** URL glob, e.g. `urlPattern("https://*.example.com/api/*")`. Parsed as a URL, not a string. */
+export function urlPattern(pattern) {
+    if (pattern.length === 0) {
+        throw new TenuoConfigurationError("tenuo.urlPattern() requires a non-empty pattern");
+    }
+    return { kind: "urlPattern", pattern };
+}
+/**
+ * SSRF-aware URL check: http/https only by default, private and link-local
+ * hosts rejected, optional allow and deny domain lists (`*.example.com`).
+ */
+export function urlSafe(options) {
+    const out = { kind: "urlSafe" };
+    if (options?.schemes !== undefined) {
+        out.schemes = options.schemes;
+    }
+    if (options?.allowDomains !== undefined) {
+        out.allowDomains = options.allowDomains;
+    }
+    if (options?.denyDomains !== undefined) {
+        out.denyDomains = options.denyDomains;
+    }
+    return out;
+}
+/** Shell command whose first word must be one of `allow`. Parsed with shell quoting rules in core. */
+export function shlex(allow) {
+    if (allow.length === 0) {
+        throw new TenuoConfigurationError("tenuo.shlex() requires at least one allowed command");
+    }
+    return { kind: "shlex", allow };
+}
+/** List argument that must include every one of these values. */
+export function contains(values) {
+    if (values.length === 0) {
+        throw new TenuoConfigurationError("tenuo.contains() requires at least one value");
+    }
+    return { kind: "contains", values };
+}
+/** List argument whose every element must be one of these values. */
+export function subset(values) {
+    if (values.length === 0) {
+        throw new TenuoConfigurationError("tenuo.subset() requires at least one value");
+    }
+    return { kind: "subset", values };
+}
+/** Satisfied when at least one inner constraint is. */
+export function anyOf(constraints) {
+    if (constraints.length === 0) {
+        throw new TenuoConfigurationError("tenuo.anyOf() requires at least one constraint");
+    }
+    return { kind: "anyOf", constraints };
+}
+/** Satisfied only when every inner constraint is. */
+export function all(constraints) {
+    if (constraints.length === 0) {
+        throw new TenuoConfigurationError("tenuo.all() requires at least one constraint");
+    }
+    return { kind: "all", constraints };
+}
+/** Satisfied when the inner constraint is not. Delegation cannot narrow a `not`; prefer `notOneOf`. */
+export function not(constraint) {
+    return { kind: "not", constraint };
+}
+/** Common Expression Language predicate over the argument value, evaluated in core. */
+export function cel(expression) {
+    if (expression.trim().length === 0) {
+        throw new TenuoConfigurationError("tenuo.cel() requires a non-empty expression");
+    }
+    return { kind: "cel", expression };
+}
 //# sourceMappingURL=constraints.js.map

package/dist/constraints.js.map

@@ -1 +1 @@
-{"version":3,"file":"constraints.js","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":"AASA,wFAAwF;AACxF,MAAM,UAAU,KAAK,CAAC,IAAY;IAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAA2B;IAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAyB;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAgC;IACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC"}
+{"version":3,"file":"constraints.js","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;;;;GAOG;AAEH,wFAAwF;AACxF,MAAM,UAAU,KAAK,CACnB,IAAY,EACZ,OAA6E;IAE7E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,uBAAuB,CAAC,uDAAuD,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,GAAG,GAAmF;QAC1F,IAAI,EAAE,OAAO;QACb,IAAI;KACL,CAAC;IACF,IAAI,OAAO,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QACzC,GAAG,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAA2B;IAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAAC,sCAAsC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAAC,sCAAsC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,KAAK,CAAC,OAKrB;IACC,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,IAAI,uBAAuB,CAAC,0CAA0C,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,uBAAuB,CAAC,6CAA6C,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACxF,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,GAAG,GAML,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAyB;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,2CAA2C,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,QAAQ,CAAC,MAAyB;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,KAAK,CAAC,MAAc;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,+CAA+C,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAgC;IACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,QAAQ;IACtB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,uBAAuB,CAAC,oDAAoD,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,uBAAuB,CAAC,iDAAiD,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,OAIvB;IACC,MAAM,GAAG,GAKL,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACxB,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,KAAK,CAAC,KAAwB;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,uBAAuB,CAAC,qDAAqD,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAC,MAA8C;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,MAAM,CAAC,MAA8C;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,4CAA4C,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,KAAK,CAAC,WAAsC;IAC1D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAAC,gDAAgD,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,GAAG,CAAC,WAAsC;IACxD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACtC,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,GAAG,CAAC,UAA0B;IAC5C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,GAAG,CAAC,UAAkB;IACpC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,uBAAuB,CAAC,6CAA6C,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC","sourcesContent":["import type {\n  AllConstraint,\n  AnyOfConstraint,\n  CelConstraint,\n  CidrConstraint,\n  ConstraintExpr,\n  ContainsConstraint,\n  EmailConstraint,\n  ExactConstraint,\n  MaxConstraint,\n  MinConstraint,\n  NotConstraint,\n  NotOneOfConstraint,\n  OneOfConstraint,\n  PatternConstraint,\n  RangeConstraint,\n  RegexConstraint,\n  ShlexConstraint,\n  SubsetConstraint,\n  UnderConstraint,\n  UrlPatternConstraint,\n  UrlSafeConstraint,\n  WildcardConstraint,\n} from \"./api.ts\";\nimport { TenuoConfigurationError } from \"./errors.ts\";\n\n/**\n * Constraint builders. These produce plain marker objects; every one is\n * evaluated by the Rust core, never in TypeScript. The set matches the\n * Python SDK and the core `Constraint` enum one for one. Builders that\n * validate their input throw `TenuoConfigurationError` at the call site.\n * Deeper checks, such as regex syntax, run in the core when `session()`\n * compiles the policy. Nothing here makes an authorization decision.\n */\n\n/** Directory prefix. Evaluated in core as Subpath — not a string prefix check in TS. */\nexport function under(\n  root: string,\n  options?: { readonly caseSensitive?: boolean; readonly allowEqual?: boolean },\n): UnderConstraint {\n  if (!root.startsWith(\"/\")) {\n    throw new TenuoConfigurationError(\"tenuo.under() expects an absolute path (start with /)\");\n  }\n  const out: { kind: \"under\"; root: string; caseSensitive?: boolean; allowEqual?: boolean } = {\n    kind: \"under\",\n    root,\n  };\n  if (options?.caseSensitive !== undefined) {\n    out.caseSensitive = options.caseSensitive;\n  }\n  if (options?.allowEqual !== undefined) {\n    out.allowEqual = options.allowEqual;\n  }\n  return out;\n}\n\nexport function email(options: { domain: string }): EmailConstraint {\n  return { kind: \"email\", domain: options.domain };\n}\n\nexport function max(value: number): MaxConstraint {\n  if (!Number.isFinite(value)) {\n    throw new TenuoConfigurationError(\"tenuo.max() requires a finite number\");\n  }\n  return { kind: \"max\", value };\n}\n\nexport function min(value: number): MinConstraint {\n  if (!Number.isFinite(value)) {\n    throw new TenuoConfigurationError(\"tenuo.min() requires a finite number\");\n  }\n  return { kind: \"min\", value };\n}\n\n/** Numeric interval. Bounds are inclusive unless `minExclusive` / `maxExclusive`. */\nexport function range(options: {\n  readonly min?: number;\n  readonly max?: number;\n  readonly minExclusive?: boolean;\n  readonly maxExclusive?: boolean;\n}): RangeConstraint {\n  if (options.min === undefined && options.max === undefined) {\n    throw new TenuoConfigurationError(\"tenuo.range() requires min, max, or both\");\n  }\n  for (const bound of [options.min, options.max]) {\n    if (bound !== undefined && !Number.isFinite(bound)) {\n      throw new TenuoConfigurationError(\"tenuo.range() bounds must be finite numbers\");\n    }\n  }\n  if (options.min !== undefined && options.max !== undefined && options.min > options.max) {\n    throw new TenuoConfigurationError(\"tenuo.range() min must not exceed max\");\n  }\n  const out: {\n    kind: \"range\";\n    min?: number;\n    max?: number;\n    minExclusive?: boolean;\n    maxExclusive?: boolean;\n  } = { kind: \"range\" };\n  if (options.min !== undefined) {\n    out.min = options.min;\n  }\n  if (options.max !== undefined) {\n    out.max = options.max;\n  }\n  if (options.minExclusive === true) {\n    out.minExclusive = true;\n  }\n  if (options.maxExclusive === true) {\n    out.maxExclusive = true;\n  }\n  return out;\n}\n\nexport function oneOf(values: readonly string[]): OneOfConstraint {\n  if (values.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.oneOf() requires at least one value\");\n  }\n  return { kind: \"oneOf\", values };\n}\n\n/** Any value except these. */\nexport function notOneOf(values: readonly string[]): NotOneOfConstraint {\n  if (values.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.notOneOf() requires at least one value\");\n  }\n  return { kind: \"notOneOf\", values };\n}\n\nexport function pattern(pattern: string): PatternConstraint {\n  if (pattern.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.pattern() requires a non-empty pattern\");\n  }\n  return { kind: \"pattern\", pattern };\n}\n\n/** Regular expression, compiled and evaluated in core. */\nexport function regex(source: string): RegexConstraint {\n  if (source.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.regex() requires a non-empty expression\");\n  }\n  return { kind: \"regex\", source };\n}\n\nexport function exact(value: string | number | boolean): ExactConstraint {\n  return { kind: \"exact\", value };\n}\n\n/** Any value at all. Name it in a zero-trust policy to allow an argument without constraining it. */\nexport function wildcard(): WildcardConstraint {\n  return { kind: \"wildcard\" };\n}\n\n/** IP address inside a network, e.g. `cidr(\"10.0.0.0/8\")`. */\nexport function cidr(network: string): CidrConstraint {\n  if (!network.includes(\"/\")) {\n    throw new TenuoConfigurationError(\"tenuo.cidr() expects CIDR notation like 10.0.0.0/8\");\n  }\n  return { kind: \"cidr\", network };\n}\n\n/** URL glob, e.g. `urlPattern(\"https://*.example.com/api/*\")`. Parsed as a URL, not a string. */\nexport function urlPattern(pattern: string): UrlPatternConstraint {\n  if (pattern.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.urlPattern() requires a non-empty pattern\");\n  }\n  return { kind: \"urlPattern\", pattern };\n}\n\n/**\n * SSRF-aware URL check: http/https only by default, private and link-local\n * hosts rejected, optional allow and deny domain lists (`*.example.com`).\n */\nexport function urlSafe(options?: {\n  readonly schemes?: readonly string[];\n  readonly allowDomains?: readonly string[];\n  readonly denyDomains?: readonly string[];\n}): UrlSafeConstraint {\n  const out: {\n    kind: \"urlSafe\";\n    schemes?: readonly string[];\n    allowDomains?: readonly string[];\n    denyDomains?: readonly string[];\n  } = { kind: \"urlSafe\" };\n  if (options?.schemes !== undefined) {\n    out.schemes = options.schemes;\n  }\n  if (options?.allowDomains !== undefined) {\n    out.allowDomains = options.allowDomains;\n  }\n  if (options?.denyDomains !== undefined) {\n    out.denyDomains = options.denyDomains;\n  }\n  return out;\n}\n\n/** Shell command whose first word must be one of `allow`. Parsed with shell quoting rules in core. */\nexport function shlex(allow: readonly string[]): ShlexConstraint {\n  if (allow.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.shlex() requires at least one allowed command\");\n  }\n  return { kind: \"shlex\", allow };\n}\n\n/** List argument that must include every one of these values. */\nexport function contains(values: readonly (string | number | boolean)[]): ContainsConstraint {\n  if (values.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.contains() requires at least one value\");\n  }\n  return { kind: \"contains\", values };\n}\n\n/** List argument whose every element must be one of these values. */\nexport function subset(values: readonly (string | number | boolean)[]): SubsetConstraint {\n  if (values.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.subset() requires at least one value\");\n  }\n  return { kind: \"subset\", values };\n}\n\n/** Satisfied when at least one inner constraint is. */\nexport function anyOf(constraints: readonly ConstraintExpr[]): AnyOfConstraint {\n  if (constraints.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.anyOf() requires at least one constraint\");\n  }\n  return { kind: \"anyOf\", constraints };\n}\n\n/** Satisfied only when every inner constraint is. */\nexport function all(constraints: readonly ConstraintExpr[]): AllConstraint {\n  if (constraints.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.all() requires at least one constraint\");\n  }\n  return { kind: \"all\", constraints };\n}\n\n/** Satisfied when the inner constraint is not. Delegation cannot narrow a `not`; prefer `notOneOf`. */\nexport function not(constraint: ConstraintExpr): NotConstraint {\n  return { kind: \"not\", constraint };\n}\n\n/** Common Expression Language predicate over the argument value, evaluated in core. */\nexport function cel(expression: string): CelConstraint {\n  if (expression.trim().length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.cel() requires a non-empty expression\");\n  }\n  return { kind: \"cel\", expression };\n}\n"]}

package/dist/errors.d.ts

@@ -1,4 +1,4 @@
-import type { TenuoErrorCode } from "./api.ts";
+import type { ApprovalRequest, TenuoErrorCode } from "./api.ts";
 export declare class TenuoError extends Error {
     readonly code: TenuoErrorCode;
     constructor(code: TenuoErrorCode, message: string);
@@ -14,6 +14,11 @@ export declare class ApprovalRequiredError extends TenuoError {
     readonly tool: string;
     readonly required: number;
     readonly received: number;
-    constructor(tool: string, required: number, received: number, message?: string);
+    /**
+     * What to send to an approval service, when the SDK had the session at
+     * hand. Absent on the server-side verify path, where only the caller can
+     * build it.
+     */
+    readonly request?: ApprovalRequest;
+    constructor(tool: string, required: number, received: number, message?: string, request?: ApprovalRequest);
 }
-//# sourceMappingURL=errors.d.ts.map

package/dist/errors.js

@@ -26,12 +26,21 @@ export class ApprovalRequiredError extends TenuoError {
     tool;
     required;
     received;
-    constructor(tool, required, received, message) {
+    /**
+     * What to send to an approval service, when the SDK had the session at
+     * hand. Absent on the server-side verify path, where only the caller can
+     * build it.
+     */
+    request;
+    constructor(tool, required, received, message, request) {
         super("TENUO_APPROVAL_REQUIRED", message ?? `Approval required for ${tool}`);
         this.name = "ApprovalRequiredError";
         this.tool = tool;
         this.required = required;
         this.received = received;
+        if (request !== undefined) {
+            this.request = request;
+        }
     }
 }
 //# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,CAAiB;IAE9B,YAAY,IAAoB,EAAE,OAAe;QAC/C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,UAAU;IACrD,YAAY,OAAe,EAAE,OAAuB,qBAAqB;QACvE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IAC7C,KAAK,CAAU;IAExB,YAAY,IAAoB,EAAE,OAAe,EAAE,KAAc;QAC/D,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IAC1C,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,QAAQ,CAAS;IAE1B,YAAY,IAAY,EAAE,QAAgB,EAAE,QAAgB,EAAE,OAAgB;QAC5E,KAAK,CAAC,yBAAyB,EAAE,OAAO,IAAI,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,CAAiB;IAE9B,YAAY,IAAoB,EAAE,OAAe;QAC/C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,UAAU;IACrD,YAAY,OAAe,EAAE,OAAuB,qBAAqB;QACvE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IAC7C,KAAK,CAAU;IAExB,YAAY,IAAoB,EAAE,OAAe,EAAE,KAAc;QAC/D,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IAC1C,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,QAAQ,CAAS;IAC1B;;;;OAIG;IACM,OAAO,CAAmB;IAEnC,YAAY,IAAY,EAAE,QAAgB,EAAE,QAAgB,EAAE,OAAgB,EAAE,OAAyB;QACvG,KAAK,CAAC,yBAAyB,EAAE,OAAO,IAAI,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;CACF","sourcesContent":["import type { ApprovalRequest, TenuoErrorCode } from \"./api.ts\";\n\nexport class TenuoError extends Error {\n  readonly code: TenuoErrorCode;\n\n  constructor(code: TenuoErrorCode, message: string) {\n    super(message);\n    this.name = \"TenuoError\";\n    this.code = code;\n  }\n}\n\nexport class TenuoConfigurationError extends TenuoError {\n  constructor(message: string, code: TenuoErrorCode = \"TENUO_CONFIGURATION\") {\n    super(code, message);\n    this.name = \"TenuoConfigurationError\";\n  }\n}\n\nexport class AuthorizationDeniedError extends TenuoError {\n  readonly field?: string;\n\n  constructor(code: TenuoErrorCode, message: string, field?: string) {\n    super(code, message);\n    this.name = \"AuthorizationDeniedError\";\n    if (field !== undefined) {\n      this.field = field;\n    }\n  }\n}\n\nexport class ApprovalRequiredError extends TenuoError {\n  readonly tool: string;\n  readonly required: number;\n  readonly received: number;\n  /**\n   * What to send to an approval service, when the SDK had the session at\n   * hand. Absent on the server-side verify path, where only the caller can\n   * build it.\n   */\n  readonly request?: ApprovalRequest;\n\n  constructor(tool: string, required: number, received: number, message?: string, request?: ApprovalRequest) {\n    super(\"TENUO_APPROVAL_REQUIRED\", message ?? `Approval required for ${tool}`);\n    this.name = \"ApprovalRequiredError\";\n    this.tool = tool;\n    this.required = required;\n    this.received = received;\n    if (request !== undefined) {\n      this.request = request;\n    }\n  }\n}\n"]}

package/dist/generated/tenuo_wasm.d.ts

@@ -8,6 +8,17 @@
 export class SdkContext {
     free(): void;
     [Symbol.dispose](): void;
+    /**
+     * Signed statement from this session's holder that it is the one asking
+     * for `tool(args)`. Carried inside a control-plane approval request so
+     * the approver can tell a genuine request from a forged one.
+     */
+    approvalContextAttestation(session: SdkSession, tool: string, args_json: any): any;
+    /**
+     * Everything an approval service needs to present `tool(args)` to a
+     * human and mint a matching `SignedApproval`. Not a signed artifact.
+     */
+    approvalRequest(session: SdkSession, tool: string, args_json: any): any;
     /**
      * Sign PoP and authorize in one call. Never returns allow without a core allow.
      *
@@ -26,10 +37,36 @@ export class SdkContext {
      * Null/undefined: no extra ceiling. Empty object: open.
      */
     authorizePresented(warrants: any, tool: string, args_json: any, pop: string, approvals: any, tool_allow: any, request_id?: string | null): any;
+    /**
+     * Explain what the leaf would decide for `tool(args)`, field by field.
+     * No proof-of-possession is signed, so this works on any session,
+     * including one issued to another holder.
+     */
+    explain(session: SdkSession, tool: string, args_json: any): any;
+    /**
+     * Issuer context from a stable 32-byte Ed25519 secret. Its own public
+     * key is trusted; `extra_roots` (hex) are trusted as well, so one
+     * process can verify chains from several control planes.
+     */
+    static fromIssuerSecret(secret: Uint8Array, extra_roots: any): SdkContext;
     /**
      * Authorizer-only context. `mint()` fails; import a session from the wire.
      */
     static fromTrustedRoots(roots: any): SdkContext;
+    /**
+     * Issue an execution session from an issuer session. The issuer
+     * session's holder signs; core checks the tools against
+     * `issuableTools`, constraints against `constraintBounds`, clearance,
+     * and issue depth. No control-plane key is involved.
+     */
+    issue(issuer: SdkSession, options: any): SdkSession;
+    /**
+     * Public key of the local issuer, hex. Verifier-only contexts have none.
+     *
+     * This is what other processes put in `trustedRoots` to accept warrants
+     * this context mints. It is a public key: sharing it grants nothing.
+     */
+    issuerPublicKey(): string;
     /**
      * Load a published SignedRevocationList. The SRL must be signed by a trusted root.
      */
@@ -40,12 +77,33 @@ export class SdkContext {
      *
      * `require_approval` is optional:
      * `{ "approvers": ["hex..."], "min": 2, "tools": ["transfer"] }`
+     *
+     * `holder_hex` binds the warrant to another agent's public key. The
+     * returned session then has no holder secret: export it with `toWire()`
+     * and let that agent import it. Omit it to mint a local session with a
+     * fresh holder key.
+     *
+     * `max_depth` caps how many times the authority may be delegated below
+     * the root (0 = terminal). Omit for the protocol maximum.
+     */
+    mint(allow_json: any, ttl_seconds: number, require_approval: any, holder_hex?: string | null, max_depth?: number | null): SdkSession;
+    /**
+     * `mint()` with every option the protocol offers: kind, clearance,
+     * session and agent ids, approval gates with messages and per-argument
+     * triggers, and issuer-warrant fields. Keys are camelCase; unknown keys
+     * are rejected.
      */
-    mint(allow_json: any, ttl_seconds: number, require_approval: any): SdkSession;
+    mintExtended(options: any): SdkSession;
     /**
-     * Attenuate the leaf. The current holder signs; the same holder keeps the child.
+     * Attenuate the leaf. The current holder signs.
+     *
+     * Without `options.holder` the same holder keeps the child. With it, the
+     * child is bound to that public key: this is delegation to another agent,
+     * and the returned session carries no holder secret (see `SdkSession`).
+     * Core rejects any child that is not within its parent — tools,
+     * constraints, lifetime, and depth — before a token exists.
      */
-    narrow(session: SdkSession, allow_json: any): SdkSession;
+    narrow(session: SdkSession, allow_json: any, options: any): SdkSession;
     constructor();
     /**
      * Holder PoP only. Does not authorize. Used to fill `_meta.tenuo.signature`.
@@ -55,10 +113,25 @@ export class SdkContext {
      * Test / host seam. Signs an SRL with the local issuer. Does not load it.
      */
     signRevocationList(ids: any): string;
+    /**
+     * Sign a revocation list with this context's issuer key. Load it with
+     * `loadRevocationList` anywhere this issuer is a trusted root.
+     */
+    signRevocationListVersioned(ids: any, version?: number | null): string;
+    /**
+     * Sign verifier receipts with this 32-byte holder secret instead of an
+     * ephemeral key. Used by the TypeScript `Runtime`.
+     */
+    withReceiptSigner(secret: Uint8Array): SdkContext;
 }
 
 /**
  * Opaque warrant chain (root first) + leaf holder key. Not JSON-serializable from JS.
+ *
+ * `holder` is `None` when the leaf was issued or delegated to another agent's
+ * key. Such a session can be exported with `toWire()` and handed over, but it
+ * cannot sign proof-of-possession here; the holder imports it with
+ * `SdkSession.fromWire` and its own secret.
  */
 export class SdkSession {
     private constructor();
@@ -69,6 +142,11 @@ export class SdkSession {
      * Not a PoP. MCP replay uses the PoP signature, not this key.
      */
     dedupKey(tool: string, args_json: any): string;
+    /**
+     * Public view of the leaf: holder public key, depth, ceiling, lifetime,
+     * tools. Never the holder secret.
+     */
+    describe(): any;
     /**
      * Test / interop seam. Not on the public TypeScript Session type.
      */
@@ -99,6 +177,16 @@ export class SdkSession {
     warrantIds(): any;
 }
 
+/**
+ * Typed preflight of a warrant's approval gates for `(tool, args)`.
+ *
+ * Returns `{ status: "not_gated"|"exempt"|"required"|"denied", tool, kind?,
+ * argument?, arguments, message?, code?, reason?, error? }`. Parse errors
+ * fail closed with `status: "required"` and `error` set (no fabricated
+ * `kind`). `denied` means the warrant's constraints refuse the call.
+ */
+export function approval_requirement(warrant_b64: string, tool: string, args_json: any): any;
+
 export function check_access(warrant_b64: string, tool: string, args_json: any, trusted_root_hex: string, dry_run: boolean): any;
 
 /**
@@ -175,6 +263,9 @@ export function decode_warrant(base64_warrant: string): any;
  * Returns `{ approval_required: true/false, tool, error }`.
  * This reads `extensions["tenuo.approval_gates"]` from the warrant, parses it,
  * and runs the gate evaluation logic from tenuo-core.
+ *
+ * Malformed warrants, gate maps, or arguments fail closed (`approval_required: true`).
+ * Prefer `approval_requirement` when the caller must distinguish exemptions.
  */
 export function evaluate_approval_gates(warrant_b64: string, tool: string, args_json: any): any;
 
@@ -186,25 +277,58 @@ export function generate_keypair(): any;
 export function init_panic_hook(): void;
 
 /**
- * Parse a `TENUO_CONNECT_TOKEN` string into its component fields.
+ * Inspect how a warrant gates `tool`, without evaluating arguments.
  *
- * The token is a base64url-encoded JSON blob: `{ v, e, k, a?, t? }`.
- * This WASM binding keeps the parsing canonical so TypeScript doesn't need
- * to duplicate the decode logic.
+ * Returns `{ kind: "none"|"whole_tool"|"conditional", tool, arguments, message?, error? }`.
+ * Parse errors fail closed with `kind: "unknown"` and `error` set so callers
+ * cannot treat a malformed map as ungated.
+ */
+export function inspect_approval_gate(warrant_b64: string, tool: string): any;
+
+/**
+ * Parse a complete `tenuo_ct_…` token into its component fields.
+ *
+ * Accepts padded and unpadded Base64URL. Version must be 1; omitted `v`
+ * is an error. Trailing `/v1` is stripped from `e`.
+ * Registration-token aliases: `t`, `r`, `registration_token`.
  *
  * Returns `{ endpoint, apiKey, agentId?, registrationToken?, error? }`.
  */
 export function parse_connect_token(token: string): any;
 
+/**
+ * Decode and check an approval envelope. Not authorization.
+ */
+export function sdkInspectApproval(envelope: string): any;
+
 export function sdkInspectParts(payload_hex: string, signature_hex: string): any;
 
+/**
+ * Decode a signed revocation list without loading it.
+ */
+export function sdkInspectRevocationList(wire: string): any;
+
 export function sdkInspectWarrant(wire: string): any;
 
+export function sdkProtocolLimits(): any;
+
+/**
+ * Public key (hex) for a 32-byte Ed25519 holder secret. What an agent hands
+ * to whoever will issue or delegate a warrant to it.
+ */
+export function sdkPublicKeyFromHolderKey(holder_secret: Uint8Array): string;
+
 /**
  * Test / host seam. Signs a SignedApproval envelope; does not authorize.
  */
 export function sdkSignApproval(session: SdkSession, tool: string, args_json: any, approver_secret: Uint8Array, external_id: string, as_of?: number | null): string;
 
+/**
+ * Sign an approval for a request hash. The approver never needs the
+ * warrant or the holder key; the hash already commits to both.
+ */
+export function sdkSignApprovalForRequest(request_hash_hex: string, approver_secret: Uint8Array, external_id: string, ttl_seconds?: number | null, warrant_expires_at?: number | null): string;
+
 /**
  * Test seam. Signs the published generator envelope (not the in-memory SRL codec).
  */
@@ -215,6 +339,11 @@ export function sdkSignPublishedRevocationList(ids: any, version: number, issuer
  */
 export function sdkSignRevocationList(ids: any, issuer_secret: Uint8Array): string;
 
+/**
+ * Sign a revocation list with an explicit issuer secret (control-plane path).
+ */
+export function sdkSignRevocationListVersioned(ids: any, version: number | null | undefined, issuer_secret: Uint8Array): string;
+
 /**
  * Signature authenticity only. Not authorization.
  */