@tenuo/core 0.2.4-beta.0 → 0.3.0-beta.0

package/dist/runtime.d.ts

@@ -0,0 +1,51 @@
+import type { PublicKeyHandle, Session, Tenuo, WarrantPart } from "./api.ts";
+import type { HolderIdentity } from "./identity.ts";
+export type ReceiptsMode = "collect" | "off";
+export type RuntimeOptions = {
+    readonly identity: HolderIdentity;
+    readonly trustedRoots: readonly PublicKeyHandle[];
+    /** Published SignedRevocationList. Fetching it is the caller's job. */
+    readonly revocationList?: string | Uint8Array;
+    /**
+     * `collect` retains receipts produced through this runtime's sessions
+     * (tools, present, MCP attach) and through this runtime's tenuo
+     * (verify, MCP verify/handler) until `acknowledgeReceipts()`.
+     * `drainReceipts()` is a snapshot. Default `off`.
+     */
+    readonly receipts?: ReceiptsMode;
+    /** Bound on each receipt outbox. Default 10_000. */
+    readonly receiptMax?: number;
+};
+export type SessionWarrant = string | readonly string[] | readonly WarrantPart[];
+/**
+ * Long-lived holder runtime. Owns identity, trusted roots, the current
+ * revocation list, and optional receipt collection. Does not perform
+ * network I/O or invent hosted-service defaults.
+ */
+export declare class Runtime {
+    #private;
+    readonly identity: HolderIdentity;
+    readonly tenuo: Tenuo;
+    constructor(tenuo: Tenuo, identity: HolderIdentity, collect: boolean, max?: number);
+    applyRevocationList(list: string | Uint8Array): void;
+    sessionFromWire(warrant: SessionWarrant): Session;
+    /** Undrained receipts from every session and presented call handled by this runtime. */
+    peekReceipts(): string[];
+    /**
+     * Snapshot of receipts across holder sessions and presented-path
+     * verification. Same as `peekReceipts`; nothing is removed until
+     * `acknowledgeReceipts`.
+     */
+    drainReceipts(): string[];
+    acknowledgeReceipts(count: number): number;
+    /** Receipts dropped because the shared outbox was full. */
+    receiptOverflows(): number;
+}
+export declare function createRuntime(createTenuo: (options: {
+    trustedRoots: readonly PublicKeyHandle[];
+    revocationList?: string | Uint8Array;
+    receiptSigner?: Uint8Array;
+}) => Tenuo, options: RuntimeOptions): Runtime;
+export declare function drainSessionReceipts(session: object): string[];
+export declare function peekSessionReceipts(session: object): string[];
+export declare function acknowledgeSessionReceipts(session: object, count: number): number;

package/dist/runtime.js

@@ -0,0 +1,102 @@
+import { TenuoConfigurationError } from "./errors.js";
+import { bindHostCollector, bindSessionCollector, hostCollector, linkedHostCollector, ReceiptCollector, sessionCollector, } from "./receipts.js";
+/**
+ * Long-lived holder runtime. Owns identity, trusted roots, the current
+ * revocation list, and optional receipt collection. Does not perform
+ * network I/O or invent hosted-service defaults.
+ */
+export class Runtime {
+    identity;
+    tenuo;
+    #collect;
+    #max;
+    #sessionCollectors = [];
+    constructor(tenuo, identity, collect, max = 10_000) {
+        this.tenuo = tenuo;
+        this.identity = identity;
+        this.#collect = collect;
+        this.#max = max;
+        if (collect) {
+            bindHostCollector(tenuo, new ReceiptCollector(max));
+        }
+    }
+    applyRevocationList(list) {
+        this.tenuo.revoke(list);
+    }
+    sessionFromWire(warrant) {
+        const session = this.tenuo.sessionFromWire({
+            warrant,
+            holderKey: this.identity.holderKey,
+        });
+        if (this.#collect) {
+            const collector = new ReceiptCollector(this.#max);
+            this.#sessionCollectors.push(collector);
+            bindSessionCollector(session, collector, hostCollector(this.tenuo));
+        }
+        return session;
+    }
+    /** Undrained receipts from every session and presented call handled by this runtime. */
+    peekReceipts() {
+        return hostCollector(this.tenuo)?.peek() ?? [];
+    }
+    /**
+     * Snapshot of receipts across holder sessions and presented-path
+     * verification. Same as `peekReceipts`; nothing is removed until
+     * `acknowledgeReceipts`.
+     */
+    drainReceipts() {
+        return this.peekReceipts();
+    }
+    acknowledgeReceipts(count) {
+        const host = hostCollector(this.tenuo);
+        if (host === undefined) {
+            return 0;
+        }
+        const taken = host.peek().slice(0, count);
+        const removed = host.acknowledge(count);
+        const acked = taken.slice(0, removed);
+        for (const collector of this.#sessionCollectors) {
+            collector.removeMatching(acked);
+        }
+        return removed;
+    }
+    /** Receipts dropped because the shared outbox was full. */
+    receiptOverflows() {
+        return hostCollector(this.tenuo)?.overflowed ?? 0;
+    }
+}
+export function createRuntime(createTenuo, options) {
+    if (options.trustedRoots.length === 0) {
+        throw new TenuoConfigurationError("createTenuo.runtime() requires at least one trusted root.");
+    }
+    const tenuoOptions = { trustedRoots: options.trustedRoots };
+    if (options.revocationList !== undefined) {
+        tenuoOptions.revocationList = options.revocationList;
+    }
+    const tenuo = createTenuo({
+        ...tenuoOptions,
+        receiptSigner: options.identity.holderKey,
+    });
+    if (options.receiptMax !== undefined &&
+        (!Number.isInteger(options.receiptMax) || options.receiptMax <= 0)) {
+        throw new TenuoConfigurationError("createTenuo.runtime() receiptMax must be a positive integer.");
+    }
+    return new Runtime(tenuo, options.identity, options.receipts === "collect", options.receiptMax ?? 10_000);
+}
+export function drainSessionReceipts(session) {
+    return sessionCollector(session)?.drain() ?? [];
+}
+export function peekSessionReceipts(session) {
+    return sessionCollector(session)?.peek() ?? [];
+}
+export function acknowledgeSessionReceipts(session, count) {
+    const collector = sessionCollector(session);
+    if (collector === undefined) {
+        return 0;
+    }
+    const taken = collector.peek().slice(0, count);
+    const removed = collector.acknowledge(count);
+    linkedHostCollector(session)?.removeMatching(taken.slice(0, removed));
+    return removed;
+}
+//# sourceMappingURL=runtime.js.map

package/dist/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAsBvB;;;;GAIG;AACH,MAAM,OAAO,OAAO;IACT,QAAQ,CAAiB;IACzB,KAAK,CAAQ;IACb,QAAQ,CAAU;IAClB,IAAI,CAAS;IACb,kBAAkB,GAAuB,EAAE,CAAC;IAErD,YACE,KAAY,EACZ,QAAwB,EACxB,OAAgB,EAChB,GAAG,GAAG,MAAM;QAEZ,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,OAAO,EAAE,CAAC;YACZ,iBAAiB,CAAC,KAAK,EAAE,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,mBAAmB,CAAC,IAAyB;QAC3C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,eAAe,CAAC,OAAuB;QACrC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;YACzC,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;SACnC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,SAAS,GAAG,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxC,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,wFAAwF;IACxF,YAAY;QACV,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAED,mBAAmB,CAAC,KAAa;QAC/B,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAChD,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,2DAA2D;IAC3D,gBAAgB;QACd,OAAO,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,UAAU,IAAI,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAC3B,WAIW,EACX,OAAuB;IAEvB,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,uBAAuB,CAC/B,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAId,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAC3C,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,YAAY,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IACvD,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC;QACxB,GAAG,YAAY;QACf,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS;KAC1C,CAAC,CAAC;IACH,IACE,OAAO,CAAC,UAAU,KAAK,SAAS;QAChC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,uBAAuB,CAAC,8DAA8D,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,IAAI,OAAO,CAChB,KAAK,EACL,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,QAAQ,KAAK,SAAS,EAC9B,OAAO,CAAC,UAAU,IAAI,MAAM,CAC7B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,OAAO,gBAAgB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,OAAO,gBAAgB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAe,EAAE,KAAa;IACvE,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC7C,mBAAmB,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import type { PublicKeyHandle, Session, Tenuo, WarrantPart } from \"./api.ts\";\nimport { TenuoConfigurationError } from \"./errors.ts\";\nimport type { HolderIdentity } from \"./identity.ts\";\nimport {\n  bindHostCollector,\n  bindSessionCollector,\n  hostCollector,\n  linkedHostCollector,\n  ReceiptCollector,\n  sessionCollector,\n} from \"./receipts.ts\";\n\nexport type ReceiptsMode = \"collect\" | \"off\";\n\nexport type RuntimeOptions = {\n  readonly identity: HolderIdentity;\n  readonly trustedRoots: readonly PublicKeyHandle[];\n  /** Published SignedRevocationList. Fetching it is the caller's job. */\n  readonly revocationList?: string | Uint8Array;\n  /**\n   * `collect` retains receipts produced through this runtime's sessions\n   * (tools, present, MCP attach) and through this runtime's tenuo\n   * (verify, MCP verify/handler) until `acknowledgeReceipts()`.\n   * `drainReceipts()` is a snapshot. Default `off`.\n   */\n  readonly receipts?: ReceiptsMode;\n  /** Bound on each receipt outbox. Default 10_000. */\n  readonly receiptMax?: number;\n};\n\nexport type SessionWarrant = string | readonly string[] | readonly WarrantPart[];\n\n/**\n * Long-lived holder runtime. Owns identity, trusted roots, the current\n * revocation list, and optional receipt collection. Does not perform\n * network I/O or invent hosted-service defaults.\n */\nexport class Runtime {\n  readonly identity: HolderIdentity;\n  readonly tenuo: Tenuo;\n  readonly #collect: boolean;\n  readonly #max: number;\n  readonly #sessionCollectors: ReceiptCollector[] = [];\n\n  constructor(\n    tenuo: Tenuo,\n    identity: HolderIdentity,\n    collect: boolean,\n    max = 10_000,\n  ) {\n    this.tenuo = tenuo;\n    this.identity = identity;\n    this.#collect = collect;\n    this.#max = max;\n    if (collect) {\n      bindHostCollector(tenuo, new ReceiptCollector(max));\n    }\n  }\n\n  applyRevocationList(list: string | Uint8Array): void {\n    this.tenuo.revoke(list);\n  }\n\n  sessionFromWire(warrant: SessionWarrant): Session {\n    const session = this.tenuo.sessionFromWire({\n      warrant,\n      holderKey: this.identity.holderKey,\n    });\n    if (this.#collect) {\n      const collector = new ReceiptCollector(this.#max);\n      this.#sessionCollectors.push(collector);\n      bindSessionCollector(session, collector, hostCollector(this.tenuo));\n    }\n    return session;\n  }\n\n  /** Undrained receipts from every session and presented call handled by this runtime. */\n  peekReceipts(): string[] {\n    return hostCollector(this.tenuo)?.peek() ?? [];\n  }\n\n  /**\n   * Snapshot of receipts across holder sessions and presented-path\n   * verification. Same as `peekReceipts`; nothing is removed until\n   * `acknowledgeReceipts`.\n   */\n  drainReceipts(): string[] {\n    return this.peekReceipts();\n  }\n\n  acknowledgeReceipts(count: number): number {\n    const host = hostCollector(this.tenuo);\n    if (host === undefined) {\n      return 0;\n    }\n    const taken = host.peek().slice(0, count);\n    const removed = host.acknowledge(count);\n    const acked = taken.slice(0, removed);\n    for (const collector of this.#sessionCollectors) {\n      collector.removeMatching(acked);\n    }\n    return removed;\n  }\n\n  /** Receipts dropped because the shared outbox was full. */\n  receiptOverflows(): number {\n    return hostCollector(this.tenuo)?.overflowed ?? 0;\n  }\n}\n\nexport function createRuntime(\n  createTenuo: (options: {\n    trustedRoots: readonly PublicKeyHandle[];\n    revocationList?: string | Uint8Array;\n    receiptSigner?: Uint8Array;\n  }) => Tenuo,\n  options: RuntimeOptions,\n): Runtime {\n  if (options.trustedRoots.length === 0) {\n    throw new TenuoConfigurationError(\n      \"createTenuo.runtime() requires at least one trusted root.\",\n    );\n  }\n  const tenuoOptions: {\n    trustedRoots: readonly PublicKeyHandle[];\n    revocationList?: string | Uint8Array;\n    receiptSigner?: Uint8Array;\n  } = { trustedRoots: options.trustedRoots };\n  if (options.revocationList !== undefined) {\n    tenuoOptions.revocationList = options.revocationList;\n  }\n  const tenuo = createTenuo({\n    ...tenuoOptions,\n    receiptSigner: options.identity.holderKey,\n  });\n  if (\n    options.receiptMax !== undefined &&\n    (!Number.isInteger(options.receiptMax) || options.receiptMax <= 0)\n  ) {\n    throw new TenuoConfigurationError(\"createTenuo.runtime() receiptMax must be a positive integer.\");\n  }\n  return new Runtime(\n    tenuo,\n    options.identity,\n    options.receipts === \"collect\",\n    options.receiptMax ?? 10_000,\n  );\n}\n\nexport function drainSessionReceipts(session: object): string[] {\n  return sessionCollector(session)?.drain() ?? [];\n}\n\nexport function peekSessionReceipts(session: object): string[] {\n  return sessionCollector(session)?.peek() ?? [];\n}\n\nexport function acknowledgeSessionReceipts(session: object, count: number): number {\n  const collector = sessionCollector(session);\n  if (collector === undefined) {\n    return 0;\n  }\n  const taken = collector.peek().slice(0, count);\n  const removed = collector.acknowledge(count);\n  linkedHostCollector(session)?.removeMatching(taken.slice(0, removed));\n  return removed;\n}\n"]}

package/dist/session.d.ts

@@ -1,4 +1,4 @@
-import type { Session as SessionContract } from "./api.ts";
+import type { Session as SessionContract, SessionInfo } from "./api.ts";
 import type { WasmSession } from "./wasm.ts";
 declare const inspect: unique symbol;
 /**
@@ -12,8 +12,15 @@ export declare class Session implements SessionContract {
     [inspect](): string;
     toWire(): string[];
     dedupKey(tool: string, args: Readonly<Record<string, unknown>>): string;
+    inspect(): SessionInfo;
+    /**
+     * Snapshot of collected receipts. Same as `drainReceipts`; nothing is
+     * removed until `acknowledgeReceipts`.
+     */
+    peekReceipts(): string[];
+    drainReceipts(): string[];
+    acknowledgeReceipts(count: number): number;
 }
 export declare function isSession(value: unknown): value is Session;
 export declare function nativeSession(session: Session): WasmSession;
 export {};
-//# sourceMappingURL=session.d.ts.map

package/dist/session.js

@@ -1,4 +1,5 @@
 import { TenuoConfigurationError } from "./errors.js";
+import { acknowledgeSessionReceipts, drainSessionReceipts, peekSessionReceipts, } from "./runtime.js";
 const inspect = Symbol.for("nodejs.util.inspect.custom");
 const nativeSessions = new WeakMap();
 /**
@@ -36,6 +37,61 @@ export class Session {
         }
         return native.dedupKey(tool, args);
     }
+    inspect() {
+        const native = nativeSessions.get(this);
+        if (typeof native?.describe !== "function") {
+            throw new TenuoConfigurationError("session is not bound to the WASM core");
+        }
+        const info = native.describe();
+        const out = {
+            kind: info.kind,
+            holderPublicKey: info.holder_public_key,
+            rootPublicKey: info.root_public_key,
+            depth: info.depth,
+            maxDepth: info.max_depth,
+            terminal: info.terminal,
+            expiresAt: info.expires_at,
+            tools: [...info.tools],
+            warrantIds: [...info.warrant_ids],
+            canAuthorize: info.can_authorize,
+            approvalGatedTools: [...info.approval_gated_tools],
+        };
+        if (info.clearance !== undefined) {
+            out.clearance = info.clearance;
+        }
+        if (info.session_id !== undefined) {
+            out.sessionId = info.session_id;
+        }
+        if (info.agent_id !== undefined) {
+            out.agentId = info.agent_id;
+        }
+        if (info.issuable_tools !== undefined) {
+            out.issuableTools = [...info.issuable_tools];
+        }
+        if (info.max_issue_depth !== undefined) {
+            out.maxIssueDepth = info.max_issue_depth;
+        }
+        if (info.required_approvers !== undefined) {
+            out.requiredApprovers = [...info.required_approvers];
+        }
+        if (info.min_approvals !== undefined) {
+            out.minApprovals = info.min_approvals;
+        }
+        return out;
+    }
+    /**
+     * Snapshot of collected receipts. Same as `drainReceipts`; nothing is
+     * removed until `acknowledgeReceipts`.
+     */
+    peekReceipts() {
+        return peekSessionReceipts(this);
+    }
+    drainReceipts() {
+        return drainSessionReceipts(this);
+    }
+    acknowledgeReceipts(count) {
+        return acknowledgeSessionReceipts(this, count);
+    }
 }
 export function isSession(value) {
     return value instanceof Session;

package/dist/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAGtD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AACzD,MAAM,cAAc,GAAG,IAAI,OAAO,EAAwB,CAAC;AAE3D;;GAEG;AACH,MAAM,OAAO,OAAO;IACT,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,cAAuB,CAAC;IAExD,YAAY,MAAmB;QAC7B,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,MAAM;QACJ,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,QAAQ;QACN,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,CAAC,OAAO,CAAC;QACP,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,MAAM;QACJ,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAA2C,CAAC;QAClF,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,uBAAuB,CAAC,wCAAwC,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,IAAuC;QAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAEzB,CAAC;QACd,IAAI,OAAO,MAAM,EAAE,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,OAAO,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,cAAc,CAAC;AAGtB,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AACzD,MAAM,cAAc,GAAG,IAAI,OAAO,EAAwB,CAAC;AAE3D;;GAEG;AACH,MAAM,OAAO,OAAO;IACT,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,cAAuB,CAAC;IAExD,YAAY,MAAmB;QAC7B,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,MAAM;QACJ,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,QAAQ;QACN,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,CAAC,OAAO,CAAC;QACP,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,MAAM;QACJ,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAA2C,CAAC;QAClF,IAAI,MAAM,EAAE,MAAM,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,uBAAuB,CAAC,wCAAwC,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,QAAQ,CAAC,IAAY,EAAE,IAAuC;QAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAEzB,CAAC;QACd,IAAI,OAAO,MAAM,EAAE,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAA6C,CAAC;QACpF,IAAI,OAAO,MAAM,EAAE,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC3C,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAqB,CAAC;QAClD,MAAM,GAAG,GAEL;YACF,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,eAAe,EAAE,IAAI,CAAC,iBAAiB;YACvC,aAAa,EAAE,IAAI,CAAC,eAAe;YACnC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YACtB,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;YACjC,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,kBAAkB,EAAE,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC;SACnD,CAAC;QACF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,GAAG,CAAC,aAAa,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YACvC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YAC1C,GAAG,CAAC,iBAAiB,GAAG,CAAC,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC;QACxC,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,aAAa;QACX,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,mBAAmB,CAAC,KAAa;QAC/B,OAAO,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,OAAO,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import type { Session as SessionContract, SessionInfo } from \"./api.ts\";\nimport { TenuoConfigurationError } from \"./errors.ts\";\nimport {\n  acknowledgeSessionReceipts,\n  drainSessionReceipts,\n  peekSessionReceipts,\n} from \"./runtime.ts\";\nimport type { WasmSession, WasmSessionInfo } from \"./wasm.ts\";\n\nconst inspect = Symbol.for(\"nodejs.util.inspect.custom\");\nconst nativeSessions = new WeakMap<Session, WasmSession>();\n\n/**\n * Opaque session handle. Structural clones and JSON are not sessions.\n */\nexport class Session implements SessionContract {\n  readonly [Symbol.toStringTag] = \"TenuoSession\" as const;\n\n  constructor(native: WasmSession) {\n    nativeSessions.set(this, native);\n  }\n\n  toJSON(): string {\n    return \"[TenuoSession]\";\n  }\n\n  toString(): string {\n    return \"[TenuoSession]\";\n  }\n\n  [inspect](): string {\n    return \"[TenuoSession]\";\n  }\n\n  toWire(): string[] {\n    const native = nativeSessions.get(this) as { toWire?: () => unknown } | undefined;\n    if (native?.toWire === undefined) {\n      throw new TenuoConfigurationError(\"session is not bound to the WASM core\");\n    }\n    const tokens = native.toWire();\n    if (!Array.isArray(tokens) || tokens.some((token) => typeof token !== \"string\")) {\n      throw new TenuoConfigurationError(\"toWire() did not return warrant tokens\");\n    }\n    return tokens;\n  }\n\n  dedupKey(tool: string, args: Readonly<Record<string, unknown>>): string {\n    const native = nativeSessions.get(this) as\n      | { dedupKey?: (tool: string, args: unknown) => string }\n      | undefined;\n    if (typeof native?.dedupKey !== \"function\") {\n      throw new TenuoConfigurationError(\"session is not bound to the WASM core\");\n    }\n    return native.dedupKey(tool, args);\n  }\n\n  inspect(): SessionInfo {\n    const native = nativeSessions.get(this) as { describe?: () => unknown } | undefined;\n    if (typeof native?.describe !== \"function\") {\n      throw new TenuoConfigurationError(\"session is not bound to the WASM core\");\n    }\n    const info = native.describe() as WasmSessionInfo;\n    const out: {\n      -readonly [K in keyof SessionInfo]: SessionInfo[K];\n    } = {\n      kind: info.kind,\n      holderPublicKey: info.holder_public_key,\n      rootPublicKey: info.root_public_key,\n      depth: info.depth,\n      maxDepth: info.max_depth,\n      terminal: info.terminal,\n      expiresAt: info.expires_at,\n      tools: [...info.tools],\n      warrantIds: [...info.warrant_ids],\n      canAuthorize: info.can_authorize,\n      approvalGatedTools: [...info.approval_gated_tools],\n    };\n    if (info.clearance !== undefined) {\n      out.clearance = info.clearance;\n    }\n    if (info.session_id !== undefined) {\n      out.sessionId = info.session_id;\n    }\n    if (info.agent_id !== undefined) {\n      out.agentId = info.agent_id;\n    }\n    if (info.issuable_tools !== undefined) {\n      out.issuableTools = [...info.issuable_tools];\n    }\n    if (info.max_issue_depth !== undefined) {\n      out.maxIssueDepth = info.max_issue_depth;\n    }\n    if (info.required_approvers !== undefined) {\n      out.requiredApprovers = [...info.required_approvers];\n    }\n    if (info.min_approvals !== undefined) {\n      out.minApprovals = info.min_approvals;\n    }\n    return out;\n  }\n\n  /**\n   * Snapshot of collected receipts. Same as `drainReceipts`; nothing is\n   * removed until `acknowledgeReceipts`.\n   */\n  peekReceipts(): string[] {\n    return peekSessionReceipts(this);\n  }\n\n  drainReceipts(): string[] {\n    return drainSessionReceipts(this);\n  }\n\n  acknowledgeReceipts(count: number): number {\n    return acknowledgeSessionReceipts(this, count);\n  }\n}\n\nexport function isSession(value: unknown): value is Session {\n  return value instanceof Session;\n}\n\nexport function nativeSession(session: Session): WasmSession {\n  const native = nativeSessions.get(session);\n  if (!native) {\n    throw new TenuoConfigurationError(\"session is not bound to the WASM core\");\n  }\n  return native;\n}\n"]}

package/dist/wasm.d.ts

@@ -66,9 +66,157 @@ export type WasmReceiptChain = {
     leaf_holder?: string;
 };
 export type WasmSession = object;
+/** Mirrors `SessionInfoDto` in tenuo-wasm. Snake case is the WASM boundary. */
+export type WasmSessionInfo = {
+    kind: "execution" | "issuer";
+    holder_public_key: string;
+    root_public_key: string;
+    depth: number;
+    max_depth: number;
+    terminal: boolean;
+    expires_at: number;
+    tools: string[];
+    warrant_ids: string[];
+    can_authorize: boolean;
+    clearance?: number;
+    session_id?: string;
+    agent_id?: string;
+    issuable_tools?: string[];
+    max_issue_depth?: number;
+    required_approvers?: string[];
+    min_approvals?: number;
+    approval_gated_tools: string[];
+};
+/** Security limits exported by tenuo-core; TypeScript must not redefine them. */
+export type WasmProtocolLimits = {
+    max_delegation_depth: number;
+    max_warrant_ttl_seconds: number;
+};
+/** Mirrors `NarrowOptions` in tenuo-wasm. Unknown keys are rejected there. */
+export type WasmNarrowOptions = {
+    holder?: string;
+    ttlSeconds?: number;
+    terminal?: boolean;
+    maxDepth?: number;
+    clearance?: number | string;
+    agentId?: string;
+    addApprovers?: string[];
+    minApprovals?: number;
+};
+export type WasmRequireApproval = {
+    approvers: string[];
+    min: number;
+    tools?: string[];
+    gates?: Record<string, {
+        message?: string;
+        args?: Record<string, unknown>;
+    }>;
+};
+/** Mirrors `MintOptions` in tenuo-wasm. */
+export type WasmMintOptions = {
+    kind?: "execution" | "issuer";
+    allow?: unknown;
+    ttlSeconds?: number;
+    holder?: string;
+    maxDepth?: number;
+    clearance?: number | string;
+    sessionId?: string;
+    agentId?: string;
+    requireApproval?: WasmRequireApproval;
+    issuableTools?: string[];
+    constraintBounds?: unknown;
+    maxIssueDepth?: number;
+};
+/** Mirrors `IssueOptions` in tenuo-wasm. */
+export type WasmIssueOptions = {
+    allow: unknown;
+    holder: string;
+    ttlSeconds?: number;
+    maxDepth?: number;
+    clearance?: number | string;
+    sessionId?: string;
+    agentId?: string;
+    requireApproval?: {
+        approvers: string[];
+        min: number;
+    };
+};
+export type WasmExplainField = {
+    field: string;
+    kind: string;
+    constraint: unknown;
+    value?: unknown;
+    satisfied: boolean;
+    reason?: string;
+};
+export type WasmExplain = {
+    tool: string;
+    kind: "execution" | "issuer";
+    outcome: "allow" | "deny";
+    code?: TenuoErrorCode;
+    field?: string;
+    message?: string;
+    tool_granted: boolean;
+    fields: WasmExplainField[];
+    unknown_fields: string[];
+    missing_fields: string[];
+    expired: boolean;
+    expires_at: number;
+    chain_valid: boolean;
+    chain_error?: TenuoErrorCode;
+};
+export type WasmApprovalRequest = {
+    request_id: string;
+    warrant_id: string;
+    tool: string;
+    args: Record<string, unknown>;
+    request_hash: string;
+    holder_public_key: string;
+    required_approvers: string[];
+    min_approvals: number;
+    warrant_expires_at: number;
+    created_at: number;
+    message: string;
+};
+export type WasmAttestation = {
+    version: number;
+    canonicalization: string;
+    warrant_id: string;
+    tool: string;
+    request_hash: string;
+    holder_key_hex: string;
+    args_canonical_cbor_b64: string;
+    signer_key_hex: string;
+    signature_b64: string;
+};
+export type WasmApprovalInfo = {
+    approver_public_key: string;
+    request_hash: string;
+    external_id: string;
+    approved_at: number;
+    expires_at: number;
+    expired: boolean;
+    signature_valid: boolean;
+    error?: string;
+};
+export type WasmSrlInfo = {
+    version: number;
+    issued_at: number;
+    issuer_public_key: string;
+    revoked_ids: string[];
+    signature_valid: boolean;
+};
 export type WasmContext = {
-    mint(allow: unknown, ttlSeconds: number, requireApproval?: unknown): WasmSession;
-    narrow(session: WasmSession, allow: unknown): WasmSession;
+    withReceiptSigner(secret: Uint8Array): WasmContext;
+    mint(allow: unknown, ttlSeconds: number, requireApproval?: unknown, holderHex?: string, maxDepth?: number): WasmSession;
+    mintExtended(options: WasmMintOptions): WasmSession;
+    narrow(session: WasmSession, allow: unknown, options?: WasmNarrowOptions): WasmSession;
+    issue(issuer: WasmSession, options: WasmIssueOptions): WasmSession;
+    issuerPublicKey(): string;
+    explain(session: WasmSession, tool: string, args: unknown): WasmExplain;
+    approvalRequest(session: WasmSession, tool: string, args: unknown): WasmApprovalRequest;
+    approvalContextAttestation(session: WasmSession, tool: string, args: unknown): WasmAttestation;
+    signRevocationListVersioned(ids: string[], version?: number): string;
     authorize(session: WasmSession, tool: string, args: unknown, approvals?: unknown, toolAllow?: unknown, requestId?: string): WasmDecision;
     authorizeAsOf(session: WasmSession, tool: string, args: unknown, asOf: number, approvals?: unknown, toolAllow?: unknown): WasmDecision;
     loadRevocationList(srl: string): void;
@@ -80,6 +228,7 @@ type Generated = {
     SdkContext: {
         new (): WasmContext;
         fromTrustedRoots(roots: string[]): WasmContext;
+        fromIssuerSecret(secret: Uint8Array, extraRoots?: string[]): WasmContext;
     };
     SdkSession: {
         fromWire(warrant: string, holder: Uint8Array): WasmSession;
@@ -88,20 +237,73 @@ type Generated = {
     };
     sdkInspectWarrant(wire: string): WasmInspect;
     sdkInspectParts(payloadHex: string, signatureHex: string): WasmInspect;
+    sdkProtocolLimits(): WasmProtocolLimits;
+    sdkPublicKeyFromHolderKey(holderSecret: Uint8Array): string;
     sdkSignApproval(session: WasmSession, tool: string, args: unknown, approverSecret: Uint8Array, externalId: string, asOf?: number): string;
+    sdkSignApprovalForRequest(requestHashHex: string, approverSecret: Uint8Array, externalId: string, ttlSeconds?: number, warrantExpiresAt?: number): string;
+    sdkInspectApproval(envelope: string): WasmApprovalInfo;
     sdkSignRevocationList(ids: string[], issuerSecret: Uint8Array): string;
+    sdkSignRevocationListVersioned(ids: string[], version: number | undefined, issuerSecret: Uint8Array): string;
     sdkSignPublishedRevocationList(ids: string[], version: number, issuerSecret: Uint8Array): string;
+    sdkInspectRevocationList(wire: string): WasmSrlInfo;
     sdkVerifyReceipt(wire: string): WasmReceipt;
     sdkVerifyReceiptChain(wire: string, roots: string[]): WasmReceiptChain;
+    approval_requirement(warrantB64: string, tool: string, args: unknown): ApprovalRequirement & {
+        error?: string;
+    };
+    inspect_approval_gate(warrantB64: string, tool: string): ApprovalGateInspection & {
+        error?: string;
+    };
+    evaluate_approval_gates(warrantB64: string, tool: string, args: unknown): {
+        approval_required: boolean;
+        tool: string;
+        error?: string;
+    };
 };
 export declare function wasmAvailable(): boolean;
 export declare function loadWasm(): Generated;
-export declare function createDevContext(): WasmContext;
-export declare function createVerifierContext(rootHexes: readonly string[], revocationList?: string): WasmContext;
+export declare function createDevContext(receiptSigner?: Uint8Array): WasmContext;
+export declare function protocolLimits(): WasmProtocolLimits;
+export declare function createVerifierContext(rootHexes: readonly string[], revocationList?: string, receiptSigner?: Uint8Array): WasmContext;
+export declare function createIssuerContext(secret: Uint8Array, extraRootHexes: readonly string[], receiptSigner?: Uint8Array): WasmContext;
 export declare function importSessionFromWire(warrant: string, holderKey: Uint8Array): WasmSession;
 export declare function importSessionFromParts(payloadHex: string, signatureHex: string, holderKey: Uint8Array): WasmSession;
 export declare function importSessionFromChain(parts: unknown, holderKey: Uint8Array): WasmSession;
 export declare function inspectWarrant(wire: string): WasmInspect;
 export declare function inspectParts(payloadHex: string, signatureHex: string): WasmInspect;
+/** Hex public key for a 32-byte holder secret. Ed25519, derived in Rust. */
+export declare function publicKeyHexFromHolderKey(holderSecret: Uint8Array): string;
+export type ApprovalRequirementStatus = "not_gated" | "exempt" | "required" | "denied";
+export type ApprovalRequirement = {
+    status: ApprovalRequirementStatus;
+    tool: string;
+    kind?: "whole_tool" | "argument";
+    argument?: string;
+    arguments: string[];
+    message?: string;
+    code?: string;
+    reason?: string;
+};
+export type ApprovalGateInspection = {
+    kind: "none" | "whole_tool" | "conditional" | "unknown";
+    tool: string;
+    arguments: string[];
+    message?: string;
+};
+/**
+ * Typed preflight of a warrant's approval gates for `(tool, args)`.
+ *
+ * Capability constraints are checked first. `denied` means the authorizer
+ * will refuse the call — do not collect approval. Malformed encodings throw
+ * (fail-closed).
+ */
+export declare function approvalRequirement(warrantB64: string, tool: string, args: Record<string, unknown>): ApprovalRequirement;
+/** Inspect how a warrant gates `tool`, without evaluating arguments. */
+export declare function inspectApprovalGate(warrantB64: string, tool: string): ApprovalGateInspection;
+/**
+ * Gate-map-only boolean. Does not run capability checks, so split-view
+ * callers (PoP args vs constraint args) still see a firing gate. Prefer
+ * {@link approvalRequirement} when the caller must distinguish `denied`.
+ */
+export declare function evaluateApprovalGates(warrantB64: string, tool: string, args: Record<string, unknown>): boolean;
 export {};
-//# sourceMappingURL=wasm.d.ts.map

package/dist/wasm.js

@@ -31,18 +31,36 @@ export function loadWasm() {
         throw wrapped;
     }
 }
-export function createDevContext() {
+export function createDevContext(receiptSigner) {
     const { SdkContext } = loadWasm();
-    return new SdkContext();
+    let context = new SdkContext();
+    if (receiptSigner !== undefined) {
+        context = context.withReceiptSigner(receiptSigner);
+    }
+    return context;
 }
-export function createVerifierContext(rootHexes, revocationList) {
+export function protocolLimits() {
+    return loadWasm().sdkProtocolLimits();
+}
+export function createVerifierContext(rootHexes, revocationList, receiptSigner) {
     const { SdkContext } = loadWasm();
-    const context = SdkContext.fromTrustedRoots([...rootHexes]);
+    let context = SdkContext.fromTrustedRoots([...rootHexes]);
+    if (receiptSigner !== undefined) {
+        context = context.withReceiptSigner(receiptSigner);
+    }
     if (revocationList !== undefined && revocationList.length > 0) {
         context.loadRevocationList(revocationList);
     }
     return context;
 }
+export function createIssuerContext(secret, extraRootHexes, receiptSigner) {
+    const { SdkContext } = loadWasm();
+    let context = SdkContext.fromIssuerSecret(secret, [...extraRootHexes]);
+    if (receiptSigner !== undefined) {
+        context = context.withReceiptSigner(receiptSigner);
+    }
+    return context;
+}
 export function importSessionFromWire(warrant, holderKey) {
     const { SdkSession } = loadWasm();
     return SdkSession.fromWire(warrant, holderKey);
@@ -61,4 +79,44 @@ export function inspectWarrant(wire) {
 export function inspectParts(payloadHex, signatureHex) {
     return loadWasm().sdkInspectParts(payloadHex, signatureHex);
 }
+/** Hex public key for a 32-byte holder secret. Ed25519, derived in Rust. */
+export function publicKeyHexFromHolderKey(holderSecret) {
+    return loadWasm().sdkPublicKeyFromHolderKey(holderSecret);
+}
+function loadApprovalWasm() {
+    return loadWasm();
+}
+function throwIfGateError(error) {
+    if (error) {
+        throw new TenuoConfigurationError(error);
+    }
+}
+/**
+ * Typed preflight of a warrant's approval gates for `(tool, args)`.
+ *
+ * Capability constraints are checked first. `denied` means the authorizer
+ * will refuse the call — do not collect approval. Malformed encodings throw
+ * (fail-closed).
+ */
+export function approvalRequirement(warrantB64, tool, args) {
+    const result = loadApprovalWasm().approval_requirement(warrantB64, tool, args);
+    throwIfGateError(result.error);
+    return result;
+}
+/** Inspect how a warrant gates `tool`, without evaluating arguments. */
+export function inspectApprovalGate(warrantB64, tool) {
+    const result = loadApprovalWasm().inspect_approval_gate(warrantB64, tool);
+    throwIfGateError(result.error);
+    return result;
+}
+/**
+ * Gate-map-only boolean. Does not run capability checks, so split-view
+ * callers (PoP args vs constraint args) still see a firing gate. Prefer
+ * {@link approvalRequirement} when the caller must distinguish `denied`.
+ */
+export function evaluateApprovalGates(warrantB64, tool, args) {
+    const result = loadApprovalWasm().evaluate_approval_gates(warrantB64, tool, args);
+    throwIfGateError(result.error);
+    return result.approval_required;
+}
 //# sourceMappingURL=wasm.js.map