@tenuo/core 0.2.5-beta.0 → 0.3.1-beta.0

package/dist/constraints.js

@@ -1,12 +1,34 @@
+import { TenuoConfigurationError } from "./errors.js";
+/**
+ * Builders throw on a misspelled option instead of dropping it: an option
+ * that vanishes silently (`urlSafe({ domains })`) widens authority. The core
+ * applies the same rule to raw constraint objects when the policy compiles.
+ */
+function rejectUnknownOptions(builder, options, allowed) {
+    if (options === undefined || options === null) {
+        return;
+    }
+    if (typeof options !== "object" || Array.isArray(options)) {
+        throw new TenuoConfigurationError(`tenuo.${builder}() expects an options object`);
+    }
+    const unknown = Object.keys(options).find((key) => !allowed.includes(key));
+    if (unknown !== undefined) {
+        throw new TenuoConfigurationError(`tenuo.${builder}() received unknown option "${unknown}"; allowed options: ${allowed.join(", ")}`);
+    }
+}
 /**
  * Constraint builders. These produce plain marker objects; every one is
  * evaluated by the Rust core, never in TypeScript. The set matches the
- * Python SDK and the core `Constraint` enum one for one.
+ * Python SDK and the core `Constraint` enum one for one. Builders that
+ * validate their input throw `TenuoConfigurationError` at the call site.
+ * Deeper checks, such as regex syntax, run in the core when `session()`
+ * compiles the policy. Nothing here makes an authorization decision.
  */
 /** Directory prefix. Evaluated in core as Subpath — not a string prefix check in TS. */
 export function under(root, options) {
+    rejectUnknownOptions("under", options, ["caseSensitive", "allowEqual"]);
     if (!root.startsWith("/")) {
-        throw new Error("tenuo.under() expects an absolute path (start with /)");
+        throw new TenuoConfigurationError("tenuo.under() expects an absolute path (start with /)");
     }
     const out = {
         kind: "under",
@@ -21,32 +43,34 @@ export function under(root, options) {
     return out;
 }
 export function email(options) {
+    rejectUnknownOptions("email", options, ["domain"]);
     return { kind: "email", domain: options.domain };
 }
 export function max(value) {
     if (!Number.isFinite(value)) {
-        throw new Error("tenuo.max() requires a finite number");
+        throw new TenuoConfigurationError("tenuo.max() requires a finite number");
     }
     return { kind: "max", value };
 }
 export function min(value) {
     if (!Number.isFinite(value)) {
-        throw new Error("tenuo.min() requires a finite number");
+        throw new TenuoConfigurationError("tenuo.min() requires a finite number");
     }
     return { kind: "min", value };
 }
 /** Numeric interval. Bounds are inclusive unless `minExclusive` / `maxExclusive`. */
 export function range(options) {
+    rejectUnknownOptions("range", options, ["min", "max", "minExclusive", "maxExclusive"]);
     if (options.min === undefined && options.max === undefined) {
-        throw new Error("tenuo.range() requires min, max, or both");
+        throw new TenuoConfigurationError("tenuo.range() requires min, max, or both");
     }
     for (const bound of [options.min, options.max]) {
         if (bound !== undefined && !Number.isFinite(bound)) {
-            throw new Error("tenuo.range() bounds must be finite numbers");
+            throw new TenuoConfigurationError("tenuo.range() bounds must be finite numbers");
         }
     }
     if (options.min !== undefined && options.max !== undefined && options.min > options.max) {
-        throw new Error("tenuo.range() min must not exceed max");
+        throw new TenuoConfigurationError("tenuo.range() min must not exceed max");
     }
     const out = { kind: "range" };
     if (options.min !== undefined) {
@@ -65,27 +89,51 @@ export function range(options) {
 }
 export function oneOf(values) {
     if (values.length === 0) {
-        throw new Error("tenuo.oneOf() requires at least one value");
+        throw new TenuoConfigurationError("tenuo.oneOf() requires at least one value");
     }
     return { kind: "oneOf", values };
 }
 /** Any value except these. */
 export function notOneOf(values) {
     if (values.length === 0) {
-        throw new Error("tenuo.notOneOf() requires at least one value");
+        throw new TenuoConfigurationError("tenuo.notOneOf() requires at least one value");
     }
     return { kind: "notOneOf", values };
 }
+/**
+ * Generic string glob. `*` matches `/`; this is not path containment.
+ * For filesystem arguments, use `pathGlob(root, glob)`.
+ */
 export function pattern(pattern) {
     if (pattern.length === 0) {
-        throw new Error("tenuo.pattern() requires a non-empty pattern");
+        throw new TenuoConfigurationError("tenuo.pattern() requires a non-empty pattern");
     }
     return { kind: "pattern", pattern };
 }
+/**
+ * A traversal-safe filesystem glob: the value must stay under `root` and
+ * match `glob`.
+ *
+ * The glob is tested against the whole path, not against the part below
+ * `root`, so it matches at any depth:
+ *
+ * ```ts
+ * pathGlob("/workspace", "*.json");
+ * // /workspace/reports/q3.json  allowed
+ * // /workspace/secrets.env      denied (glob)
+ * // /etc/passwd.json            denied (root)
+ * ```
+ *
+ * A delegatee can narrow this to a tighter `pathGlob`, or to an `exact()`
+ * path the parent already admits.
+ */
+export function pathGlob(root, glob, options) {
+    return all([under(root, options), pattern(glob)]);
+}
 /** Regular expression, compiled and evaluated in core. */
 export function regex(source) {
     if (source.length === 0) {
-        throw new Error("tenuo.regex() requires a non-empty expression");
+        throw new TenuoConfigurationError("tenuo.regex() requires a non-empty expression");
     }
     return { kind: "regex", source };
 }
@@ -99,14 +147,14 @@ export function wildcard() {
 /** IP address inside a network, e.g. `cidr("10.0.0.0/8")`. */
 export function cidr(network) {
     if (!network.includes("/")) {
-        throw new Error("tenuo.cidr() expects CIDR notation like 10.0.0.0/8");
+        throw new TenuoConfigurationError("tenuo.cidr() expects CIDR notation like 10.0.0.0/8");
     }
     return { kind: "cidr", network };
 }
 /** URL glob, e.g. `urlPattern("https://*.example.com/api/*")`. Parsed as a URL, not a string. */
 export function urlPattern(pattern) {
     if (pattern.length === 0) {
-        throw new Error("tenuo.urlPattern() requires a non-empty pattern");
+        throw new TenuoConfigurationError("tenuo.urlPattern() requires a non-empty pattern");
     }
     return { kind: "urlPattern", pattern };
 }
@@ -115,6 +163,7 @@ export function urlPattern(pattern) {
  * hosts rejected, optional allow and deny domain lists (`*.example.com`).
  */
 export function urlSafe(options) {
+    rejectUnknownOptions("urlSafe", options, ["schemes", "allowDomains", "denyDomains"]);
     const out = { kind: "urlSafe" };
     if (options?.schemes !== undefined) {
         out.schemes = options.schemes;
@@ -130,35 +179,35 @@ export function urlSafe(options) {
 /** Shell command whose first word must be one of `allow`. Parsed with shell quoting rules in core. */
 export function shlex(allow) {
     if (allow.length === 0) {
-        throw new Error("tenuo.shlex() requires at least one allowed command");
+        throw new TenuoConfigurationError("tenuo.shlex() requires at least one allowed command");
     }
     return { kind: "shlex", allow };
 }
 /** List argument that must include every one of these values. */
 export function contains(values) {
     if (values.length === 0) {
-        throw new Error("tenuo.contains() requires at least one value");
+        throw new TenuoConfigurationError("tenuo.contains() requires at least one value");
     }
     return { kind: "contains", values };
 }
 /** List argument whose every element must be one of these values. */
 export function subset(values) {
     if (values.length === 0) {
-        throw new Error("tenuo.subset() requires at least one value");
+        throw new TenuoConfigurationError("tenuo.subset() requires at least one value");
     }
     return { kind: "subset", values };
 }
 /** Satisfied when at least one inner constraint is. */
 export function anyOf(constraints) {
     if (constraints.length === 0) {
-        throw new Error("tenuo.anyOf() requires at least one constraint");
+        throw new TenuoConfigurationError("tenuo.anyOf() requires at least one constraint");
     }
     return { kind: "anyOf", constraints };
 }
 /** Satisfied only when every inner constraint is. */
 export function all(constraints) {
     if (constraints.length === 0) {
-        throw new Error("tenuo.all() requires at least one constraint");
+        throw new TenuoConfigurationError("tenuo.all() requires at least one constraint");
     }
     return { kind: "all", constraints };
 }
@@ -169,7 +218,7 @@ export function not(constraint) {
 /** Common Expression Language predicate over the argument value, evaluated in core. */
 export function cel(expression) {
     if (expression.trim().length === 0) {
-        throw new Error("tenuo.cel() requires a non-empty expression");
+        throw new TenuoConfigurationError("tenuo.cel() requires a non-empty expression");
     }
     return { kind: "cel", expression };
 }

package/dist/constraints.js.map

@@ -1 +1 @@
-{"version":3,"file":"constraints.js","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":"AAyBA;;;;GAIG;AAEH,wFAAwF;AACxF,MAAM,UAAU,KAAK,CACnB,IAAY,EACZ,OAA6E;IAE7E,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,GAAG,GAAmF;QAC1F,IAAI,EAAE,OAAO;QACb,IAAI;KACL,CAAC;IACF,IAAI,OAAO,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QACzC,GAAG,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAA2B;IAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,KAAK,CAAC,OAKrB;IACC,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GAML,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAyB;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,QAAQ,CAAC,MAAyB;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,KAAK,CAAC,MAAc;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAgC;IACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,QAAQ;IACtB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,OAIvB;IACC,MAAM,GAAG,GAKL,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACxB,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,KAAK,CAAC,KAAwB;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAC,MAA8C;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,MAAM,CAAC,MAA8C;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,KAAK,CAAC,WAAsC;IAC1D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,GAAG,CAAC,WAAsC;IACxD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACtC,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,GAAG,CAAC,UAA0B;IAC5C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,GAAG,CAAC,UAAkB;IACpC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC"}
+{"version":3,"file":"constraints.js","sourceRoot":"","sources":["../src/constraints.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAEtD;;;;GAIG;AACH,SAAS,oBAAoB,CAC3B,OAAe,EACf,OAAgB,EAChB,OAA0B;IAE1B,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,uBAAuB,CAAC,SAAS,OAAO,8BAA8B,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,uBAAuB,CAC/B,SAAS,OAAO,+BAA+B,OAAO,uBAAuB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AAEH,wFAAwF;AACxF,MAAM,UAAU,KAAK,CACnB,IAAY,EACZ,OAA6E;IAE7E,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,uBAAuB,CAAC,uDAAuD,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,GAAG,GAAmF;QAC1F,IAAI,EAAE,OAAO;QACb,IAAI;KACL,CAAC;IACF,IAAI,OAAO,EAAE,aAAa,KAAK,SAAS,EAAE,CAAC;QACzC,GAAG,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,EAAE,CAAC;QACtC,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,OAA2B;IAC/C,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAAC,sCAAsC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,KAAa;IAC/B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,uBAAuB,CAAC,sCAAsC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,KAAK,CAAC,OAKrB;IACC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC3D,MAAM,IAAI,uBAAuB,CAAC,0CAA0C,CAAC,CAAC;IAChF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,uBAAuB,CAAC,6CAA6C,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACxF,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,GAAG,GAML,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACtB,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAyB;IAC7C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,2CAA2C,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,QAAQ,CAAC,MAAyB;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,IAAY,EACZ,OAA6E;IAE7E,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,KAAK,CAAC,MAAc;IAClC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,+CAA+C,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAgC;IACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,QAAQ;IACtB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,uBAAuB,CAAC,oDAAoD,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,uBAAuB,CAAC,iDAAiD,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,OAIvB;IACC,oBAAoB,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;IACrF,MAAM,GAAG,GAKL,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACxB,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;QACnC,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,EAAE,YAAY,KAAK,SAAS,EAAE,CAAC;QACxC,GAAG,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;QACvC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IACxC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,KAAK,CAAC,KAAwB;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,uBAAuB,CAAC,qDAAqD,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAClC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,QAAQ,CAAC,MAA8C;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACtC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,MAAM,CAAC,MAA8C;IACnE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,uBAAuB,CAAC,4CAA4C,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,uDAAuD;AACvD,MAAM,UAAU,KAAK,CAAC,WAAsC;IAC1D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAAC,gDAAgD,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AACxC,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,GAAG,CAAC,WAAsC;IACxD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACtC,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,GAAG,CAAC,UAA0B;IAC5C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,GAAG,CAAC,UAAkB;IACpC,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,uBAAuB,CAAC,6CAA6C,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACrC,CAAC","sourcesContent":["import type {\n  AllConstraint,\n  AnyOfConstraint,\n  CelConstraint,\n  CidrConstraint,\n  ConstraintExpr,\n  ContainsConstraint,\n  EmailConstraint,\n  ExactConstraint,\n  MaxConstraint,\n  MinConstraint,\n  NotConstraint,\n  NotOneOfConstraint,\n  OneOfConstraint,\n  PatternConstraint,\n  RangeConstraint,\n  RegexConstraint,\n  ShlexConstraint,\n  SubsetConstraint,\n  UnderConstraint,\n  UrlPatternConstraint,\n  UrlSafeConstraint,\n  WildcardConstraint,\n} from \"./api.ts\";\nimport { TenuoConfigurationError } from \"./errors.ts\";\n\n/**\n * Builders throw on a misspelled option instead of dropping it: an option\n * that vanishes silently (`urlSafe({ domains })`) widens authority. The core\n * applies the same rule to raw constraint objects when the policy compiles.\n */\nfunction rejectUnknownOptions(\n  builder: string,\n  options: unknown,\n  allowed: readonly string[],\n): void {\n  if (options === undefined || options === null) {\n    return;\n  }\n  if (typeof options !== \"object\" || Array.isArray(options)) {\n    throw new TenuoConfigurationError(`tenuo.${builder}() expects an options object`);\n  }\n  const unknown = Object.keys(options).find((key) => !allowed.includes(key));\n  if (unknown !== undefined) {\n    throw new TenuoConfigurationError(\n      `tenuo.${builder}() received unknown option \"${unknown}\"; allowed options: ${allowed.join(\", \")}`,\n    );\n  }\n}\n\n/**\n * Constraint builders. These produce plain marker objects; every one is\n * evaluated by the Rust core, never in TypeScript. The set matches the\n * Python SDK and the core `Constraint` enum one for one. Builders that\n * validate their input throw `TenuoConfigurationError` at the call site.\n * Deeper checks, such as regex syntax, run in the core when `session()`\n * compiles the policy. Nothing here makes an authorization decision.\n */\n\n/** Directory prefix. Evaluated in core as Subpath — not a string prefix check in TS. */\nexport function under(\n  root: string,\n  options?: { readonly caseSensitive?: boolean; readonly allowEqual?: boolean },\n): UnderConstraint {\n  rejectUnknownOptions(\"under\", options, [\"caseSensitive\", \"allowEqual\"]);\n  if (!root.startsWith(\"/\")) {\n    throw new TenuoConfigurationError(\"tenuo.under() expects an absolute path (start with /)\");\n  }\n  const out: { kind: \"under\"; root: string; caseSensitive?: boolean; allowEqual?: boolean } = {\n    kind: \"under\",\n    root,\n  };\n  if (options?.caseSensitive !== undefined) {\n    out.caseSensitive = options.caseSensitive;\n  }\n  if (options?.allowEqual !== undefined) {\n    out.allowEqual = options.allowEqual;\n  }\n  return out;\n}\n\nexport function email(options: { domain: string }): EmailConstraint {\n  rejectUnknownOptions(\"email\", options, [\"domain\"]);\n  return { kind: \"email\", domain: options.domain };\n}\n\nexport function max(value: number): MaxConstraint {\n  if (!Number.isFinite(value)) {\n    throw new TenuoConfigurationError(\"tenuo.max() requires a finite number\");\n  }\n  return { kind: \"max\", value };\n}\n\nexport function min(value: number): MinConstraint {\n  if (!Number.isFinite(value)) {\n    throw new TenuoConfigurationError(\"tenuo.min() requires a finite number\");\n  }\n  return { kind: \"min\", value };\n}\n\n/** Numeric interval. Bounds are inclusive unless `minExclusive` / `maxExclusive`. */\nexport function range(options: {\n  readonly min?: number;\n  readonly max?: number;\n  readonly minExclusive?: boolean;\n  readonly maxExclusive?: boolean;\n}): RangeConstraint {\n  rejectUnknownOptions(\"range\", options, [\"min\", \"max\", \"minExclusive\", \"maxExclusive\"]);\n  if (options.min === undefined && options.max === undefined) {\n    throw new TenuoConfigurationError(\"tenuo.range() requires min, max, or both\");\n  }\n  for (const bound of [options.min, options.max]) {\n    if (bound !== undefined && !Number.isFinite(bound)) {\n      throw new TenuoConfigurationError(\"tenuo.range() bounds must be finite numbers\");\n    }\n  }\n  if (options.min !== undefined && options.max !== undefined && options.min > options.max) {\n    throw new TenuoConfigurationError(\"tenuo.range() min must not exceed max\");\n  }\n  const out: {\n    kind: \"range\";\n    min?: number;\n    max?: number;\n    minExclusive?: boolean;\n    maxExclusive?: boolean;\n  } = { kind: \"range\" };\n  if (options.min !== undefined) {\n    out.min = options.min;\n  }\n  if (options.max !== undefined) {\n    out.max = options.max;\n  }\n  if (options.minExclusive === true) {\n    out.minExclusive = true;\n  }\n  if (options.maxExclusive === true) {\n    out.maxExclusive = true;\n  }\n  return out;\n}\n\nexport function oneOf(values: readonly string[]): OneOfConstraint {\n  if (values.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.oneOf() requires at least one value\");\n  }\n  return { kind: \"oneOf\", values };\n}\n\n/** Any value except these. */\nexport function notOneOf(values: readonly string[]): NotOneOfConstraint {\n  if (values.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.notOneOf() requires at least one value\");\n  }\n  return { kind: \"notOneOf\", values };\n}\n\n/**\n * Generic string glob. `*` matches `/`; this is not path containment.\n * For filesystem arguments, use `pathGlob(root, glob)`.\n */\nexport function pattern(pattern: string): PatternConstraint {\n  if (pattern.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.pattern() requires a non-empty pattern\");\n  }\n  return { kind: \"pattern\", pattern };\n}\n\n/**\n * A traversal-safe filesystem glob: the value must stay under `root` and\n * match `glob`.\n *\n * The glob is tested against the whole path, not against the part below\n * `root`, so it matches at any depth:\n *\n * ```ts\n * pathGlob(\"/workspace\", \"*.json\");\n * // /workspace/reports/q3.json  allowed\n * // /workspace/secrets.env      denied (glob)\n * // /etc/passwd.json            denied (root)\n * ```\n *\n * A delegatee can narrow this to a tighter `pathGlob`, or to an `exact()`\n * path the parent already admits.\n */\nexport function pathGlob(\n  root: string,\n  glob: string,\n  options?: { readonly caseSensitive?: boolean; readonly allowEqual?: boolean },\n): AllConstraint {\n  return all([under(root, options), pattern(glob)]);\n}\n\n/** Regular expression, compiled and evaluated in core. */\nexport function regex(source: string): RegexConstraint {\n  if (source.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.regex() requires a non-empty expression\");\n  }\n  return { kind: \"regex\", source };\n}\n\nexport function exact(value: string | number | boolean): ExactConstraint {\n  return { kind: \"exact\", value };\n}\n\n/** Any value at all. Name it in a zero-trust policy to allow an argument without constraining it. */\nexport function wildcard(): WildcardConstraint {\n  return { kind: \"wildcard\" };\n}\n\n/** IP address inside a network, e.g. `cidr(\"10.0.0.0/8\")`. */\nexport function cidr(network: string): CidrConstraint {\n  if (!network.includes(\"/\")) {\n    throw new TenuoConfigurationError(\"tenuo.cidr() expects CIDR notation like 10.0.0.0/8\");\n  }\n  return { kind: \"cidr\", network };\n}\n\n/** URL glob, e.g. `urlPattern(\"https://*.example.com/api/*\")`. Parsed as a URL, not a string. */\nexport function urlPattern(pattern: string): UrlPatternConstraint {\n  if (pattern.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.urlPattern() requires a non-empty pattern\");\n  }\n  return { kind: \"urlPattern\", pattern };\n}\n\n/**\n * SSRF-aware URL check: http/https only by default, private and link-local\n * hosts rejected, optional allow and deny domain lists (`*.example.com`).\n */\nexport function urlSafe(options?: {\n  readonly schemes?: readonly string[];\n  readonly allowDomains?: readonly string[];\n  readonly denyDomains?: readonly string[];\n}): UrlSafeConstraint {\n  rejectUnknownOptions(\"urlSafe\", options, [\"schemes\", \"allowDomains\", \"denyDomains\"]);\n  const out: {\n    kind: \"urlSafe\";\n    schemes?: readonly string[];\n    allowDomains?: readonly string[];\n    denyDomains?: readonly string[];\n  } = { kind: \"urlSafe\" };\n  if (options?.schemes !== undefined) {\n    out.schemes = options.schemes;\n  }\n  if (options?.allowDomains !== undefined) {\n    out.allowDomains = options.allowDomains;\n  }\n  if (options?.denyDomains !== undefined) {\n    out.denyDomains = options.denyDomains;\n  }\n  return out;\n}\n\n/** Shell command whose first word must be one of `allow`. Parsed with shell quoting rules in core. */\nexport function shlex(allow: readonly string[]): ShlexConstraint {\n  if (allow.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.shlex() requires at least one allowed command\");\n  }\n  return { kind: \"shlex\", allow };\n}\n\n/** List argument that must include every one of these values. */\nexport function contains(values: readonly (string | number | boolean)[]): ContainsConstraint {\n  if (values.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.contains() requires at least one value\");\n  }\n  return { kind: \"contains\", values };\n}\n\n/** List argument whose every element must be one of these values. */\nexport function subset(values: readonly (string | number | boolean)[]): SubsetConstraint {\n  if (values.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.subset() requires at least one value\");\n  }\n  return { kind: \"subset\", values };\n}\n\n/** Satisfied when at least one inner constraint is. */\nexport function anyOf(constraints: readonly ConstraintExpr[]): AnyOfConstraint {\n  if (constraints.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.anyOf() requires at least one constraint\");\n  }\n  return { kind: \"anyOf\", constraints };\n}\n\n/** Satisfied only when every inner constraint is. */\nexport function all(constraints: readonly ConstraintExpr[]): AllConstraint {\n  if (constraints.length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.all() requires at least one constraint\");\n  }\n  return { kind: \"all\", constraints };\n}\n\n/** Satisfied when the inner constraint is not. Delegation cannot narrow a `not`; prefer `notOneOf`. */\nexport function not(constraint: ConstraintExpr): NotConstraint {\n  return { kind: \"not\", constraint };\n}\n\n/** Common Expression Language predicate over the argument value, evaluated in core. */\nexport function cel(expression: string): CelConstraint {\n  if (expression.trim().length === 0) {\n    throw new TenuoConfigurationError(\"tenuo.cel() requires a non-empty expression\");\n  }\n  return { kind: \"cel\", expression };\n}\n"]}

package/dist/errors.d.ts

@@ -22,4 +22,3 @@ export declare class ApprovalRequiredError extends TenuoError {
     readonly request?: ApprovalRequest;
     constructor(tool: string, required: number, received: number, message?: string, request?: ApprovalRequest);
 }
-//# sourceMappingURL=errors.d.ts.map

package/dist/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,CAAiB;IAE9B,YAAY,IAAoB,EAAE,OAAe;QAC/C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,UAAU;IACrD,YAAY,OAAe,EAAE,OAAuB,qBAAqB;QACvE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IAC7C,KAAK,CAAU;IAExB,YAAY,IAAoB,EAAE,OAAe,EAAE,KAAc;QAC/D,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IAC1C,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,QAAQ,CAAS;IAC1B;;;;OAIG;IACM,OAAO,CAAmB;IAEnC,YAAY,IAAY,EAAE,QAAgB,EAAE,QAAgB,EAAE,OAAgB,EAAE,OAAyB;QACvG,KAAK,CAAC,yBAAyB,EAAE,OAAO,IAAI,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,CAAiB;IAE9B,YAAY,IAAoB,EAAE,OAAe;QAC/C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,UAAU;IACrD,YAAY,OAAe,EAAE,OAAuB,qBAAqB;QACvE,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IAC7C,KAAK,CAAU;IAExB,YAAY,IAAoB,EAAE,OAAe,EAAE,KAAc;QAC/D,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,qBAAsB,SAAQ,UAAU;IAC1C,IAAI,CAAS;IACb,QAAQ,CAAS;IACjB,QAAQ,CAAS;IAC1B;;;;OAIG;IACM,OAAO,CAAmB;IAEnC,YAAY,IAAY,EAAE,QAAgB,EAAE,QAAgB,EAAE,OAAgB,EAAE,OAAyB;QACvG,KAAK,CAAC,yBAAyB,EAAE,OAAO,IAAI,yBAAyB,IAAI,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,CAAC;IACH,CAAC;CACF","sourcesContent":["import type { ApprovalRequest, TenuoErrorCode } from \"./api.ts\";\n\nexport class TenuoError extends Error {\n  readonly code: TenuoErrorCode;\n\n  constructor(code: TenuoErrorCode, message: string) {\n    super(message);\n    this.name = \"TenuoError\";\n    this.code = code;\n  }\n}\n\nexport class TenuoConfigurationError extends TenuoError {\n  constructor(message: string, code: TenuoErrorCode = \"TENUO_CONFIGURATION\") {\n    super(code, message);\n    this.name = \"TenuoConfigurationError\";\n  }\n}\n\nexport class AuthorizationDeniedError extends TenuoError {\n  readonly field?: string;\n\n  constructor(code: TenuoErrorCode, message: string, field?: string) {\n    super(code, message);\n    this.name = \"AuthorizationDeniedError\";\n    if (field !== undefined) {\n      this.field = field;\n    }\n  }\n}\n\nexport class ApprovalRequiredError extends TenuoError {\n  readonly tool: string;\n  readonly required: number;\n  readonly received: number;\n  /**\n   * What to send to an approval service, when the SDK had the session at\n   * hand. Absent on the server-side verify path, where only the caller can\n   * build it.\n   */\n  readonly request?: ApprovalRequest;\n\n  constructor(tool: string, required: number, received: number, message?: string, request?: ApprovalRequest) {\n    super(\"TENUO_APPROVAL_REQUIRED\", message ?? `Approval required for ${tool}`);\n    this.name = \"ApprovalRequiredError\";\n    this.tool = tool;\n    this.required = required;\n    this.received = received;\n    if (request !== undefined) {\n      this.request = request;\n    }\n  }\n}\n"]}

package/dist/generated/tenuo_wasm.d.ts

@@ -118,6 +118,11 @@ export class SdkContext {
      * `loadRevocationList` anywhere this issuer is a trusted root.
      */
     signRevocationListVersioned(ids: any, version?: number | null): string;
+    /**
+     * Sign verifier receipts with this 32-byte holder secret instead of an
+     * ephemeral key. Used by the TypeScript `Runtime`.
+     */
+    withReceiptSigner(secret: Uint8Array): SdkContext;
 }
 
 /**
@@ -172,6 +177,16 @@ export class SdkSession {
     warrantIds(): any;
 }
 
+/**
+ * Typed preflight of a warrant's approval gates for `(tool, args)`.
+ *
+ * Returns `{ status: "not_gated"|"exempt"|"required"|"denied", tool, kind?,
+ * argument?, arguments, message?, code?, reason?, error? }`. Parse errors
+ * fail closed with `status: "required"` and `error` set (no fabricated
+ * `kind`). `denied` means the warrant's constraints refuse the call.
+ */
+export function approval_requirement(warrant_b64: string, tool: string, args_json: any): any;
+
 export function check_access(warrant_b64: string, tool: string, args_json: any, trusted_root_hex: string, dry_run: boolean): any;
 
 /**
@@ -248,6 +263,9 @@ export function decode_warrant(base64_warrant: string): any;
  * Returns `{ approval_required: true/false, tool, error }`.
  * This reads `extensions["tenuo.approval_gates"]` from the warrant, parses it,
  * and runs the gate evaluation logic from tenuo-core.
+ *
+ * Malformed warrants, gate maps, or arguments fail closed (`approval_required: true`).
+ * Prefer `approval_requirement` when the caller must distinguish exemptions.
  */
 export function evaluate_approval_gates(warrant_b64: string, tool: string, args_json: any): any;
 
@@ -259,11 +277,20 @@ export function generate_keypair(): any;
 export function init_panic_hook(): void;
 
 /**
- * Parse a `TENUO_CONNECT_TOKEN` string into its component fields.
+ * Inspect how a warrant gates `tool`, without evaluating arguments.
+ *
+ * Returns `{ kind: "none"|"whole_tool"|"conditional", tool, arguments, message?, error? }`.
+ * Parse errors fail closed with `kind: "unknown"` and `error` set so callers
+ * cannot treat a malformed map as ungated.
+ */
+export function inspect_approval_gate(warrant_b64: string, tool: string): any;
+
+/**
+ * Parse a complete `tenuo_ct_…` token into its component fields.
  *
- * The token is a base64url-encoded JSON blob: `{ v, e, k, a?, t? }`.
- * This WASM binding keeps the parsing canonical so TypeScript doesn't need
- * to duplicate the decode logic.
+ * Accepts padded and unpadded Base64URL. Version must be 1; omitted `v`
+ * is an error. Trailing `/v1` is stripped from `e`.
+ * Registration-token aliases: `t`, `r`, `registration_token`.
  *
  * Returns `{ endpoint, apiKey, agentId?, registrationToken?, error? }`.
  */

package/dist/generated/tenuo_wasm.js

@@ -371,6 +371,22 @@ class SdkContext {
             wasm.__wbindgen_free(deferred2_0, deferred2_1, 1);
         }
     }
+    /**
+     * Sign verifier receipts with this 32-byte holder secret instead of an
+     * ephemeral key. Used by the TypeScript `Runtime`.
+     * @param {Uint8Array} secret
+     * @returns {SdkContext}
+     */
+    withReceiptSigner(secret) {
+        const ptr = this.__destroy_into_raw();
+        const ptr0 = passArray8ToWasm0(secret, wasm.__wbindgen_malloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.sdkcontext_withReceiptSigner(ptr, ptr0, len0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return SdkContext.__wrap(ret[0]);
+    }
 }
 if (Symbol.dispose) SdkContext.prototype[Symbol.dispose] = SdkContext.prototype.free;
 exports.SdkContext = SdkContext;
@@ -550,6 +566,28 @@ class SdkSession {
 if (Symbol.dispose) SdkSession.prototype[Symbol.dispose] = SdkSession.prototype.free;
 exports.SdkSession = SdkSession;
 
+/**
+ * Typed preflight of a warrant's approval gates for `(tool, args)`.
+ *
+ * Returns `{ status: "not_gated"|"exempt"|"required"|"denied", tool, kind?,
+ * argument?, arguments, message?, code?, reason?, error? }`. Parse errors
+ * fail closed with `status: "required"` and `error` set (no fabricated
+ * `kind`). `denied` means the warrant's constraints refuse the call.
+ * @param {string} warrant_b64
+ * @param {string} tool
+ * @param {any} args_json
+ * @returns {any}
+ */
+function approval_requirement(warrant_b64, tool, args_json) {
+    const ptr0 = passStringToWasm0(warrant_b64, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(tool, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.approval_requirement(ptr0, len0, ptr1, len1, args_json);
+    return ret;
+}
+exports.approval_requirement = approval_requirement;
+
 /**
  * @param {string} warrant_b64
  * @param {string} tool
@@ -767,6 +805,9 @@ exports.decode_warrant = decode_warrant;
  * Returns `{ approval_required: true/false, tool, error }`.
  * This reads `extensions["tenuo.approval_gates"]` from the warrant, parses it,
  * and runs the gate evaluation logic from tenuo-core.
+ *
+ * Malformed warrants, gate maps, or arguments fail closed (`approval_required: true`).
+ * Prefer `approval_requirement` when the caller must distinguish exemptions.
  * @param {string} warrant_b64
  * @param {string} tool
  * @param {any} args_json
@@ -798,11 +839,31 @@ function init_panic_hook() {
 exports.init_panic_hook = init_panic_hook;
 
 /**
- * Parse a `TENUO_CONNECT_TOKEN` string into its component fields.
+ * Inspect how a warrant gates `tool`, without evaluating arguments.
+ *
+ * Returns `{ kind: "none"|"whole_tool"|"conditional", tool, arguments, message?, error? }`.
+ * Parse errors fail closed with `kind: "unknown"` and `error` set so callers
+ * cannot treat a malformed map as ungated.
+ * @param {string} warrant_b64
+ * @param {string} tool
+ * @returns {any}
+ */
+function inspect_approval_gate(warrant_b64, tool) {
+    const ptr0 = passStringToWasm0(warrant_b64, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(tool, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.inspect_approval_gate(ptr0, len0, ptr1, len1);
+    return ret;
+}
+exports.inspect_approval_gate = inspect_approval_gate;
+
+/**
+ * Parse a complete `tenuo_ct_…` token into its component fields.
  *
- * The token is a base64url-encoded JSON blob: `{ v, e, k, a?, t? }`.
- * This WASM binding keeps the parsing canonical so TypeScript doesn't need
- * to duplicate the decode logic.
+ * Accepts padded and unpadded Base64URL. Version must be 1; omitted `v`
+ * is an error. Trailing `/v1` is stripped from `e`.
+ * Registration-token aliases: `t`, `r`, `registration_token`.
  *
  * Returns `{ endpoint, apiKey, agentId?, registrationToken?, error? }`.
  * @param {string} token

package/dist/generated/tenuo_wasm_bg.wasm.d.ts

@@ -23,6 +23,7 @@ export const sdkcontext_narrow: (a: number, b: number, c: any, d: any) => [numbe
 export const sdkcontext_new: () => number;
 export const sdkcontext_signPop: (a: number, b: number, c: number, d: number, e: any) => [number, number, number, number];
 export const sdkcontext_signRevocationList: (a: number, b: any) => [number, number, number, number];
+export const sdkcontext_withReceiptSigner: (a: number, b: number, c: number) => [number, number, number];
 export const sdksession_dedupKey: (a: number, b: number, c: number, d: any) => [number, number, number, number];
 export const sdksession_describe: (a: number) => [number, number, number];
 export const sdksession_exportWire: (a: number) => [number, number, number];
@@ -32,6 +33,7 @@ export const sdksession_fromWire: (a: number, b: number, c: number, d: number) =
 export const sdksession_toStackWire: (a: number) => [number, number, number, number];
 export const sdksession_toWire: (a: number) => [number, number, number];
 export const sdksession_warrantIds: (a: number) => [number, number, number];
+export const approval_requirement: (a: number, b: number, c: number, d: number, e: any) => any;
 export const check_access: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: number) => any;
 export const check_access_with_pop: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: number, i: number) => any;
 export const check_chain_access: (a: number, b: number, c: number, d: number, e: any, f: number, g: number, h: number) => any;
@@ -45,6 +47,7 @@ export const decode_pem_chain_wasm: (a: number, b: number) => any;
 export const decode_warrant: (a: number, b: number) => any;
 export const evaluate_approval_gates: (a: number, b: number, c: number, d: number, e: any) => any;
 export const generate_keypair: () => any;
+export const inspect_approval_gate: (a: number, b: number, c: number, d: number) => any;
 export const parse_connect_token: (a: number, b: number) => any;
 export const sign: (a: number, b: number, c: number, d: number, e: number, f: number, g: any) => any;
 export const sign_receipt: (a: any, b: number, c: number) => any;

package/dist/identity.d.ts

@@ -0,0 +1,25 @@
+import type { PublicKeyHandle } from "./api.ts";
+declare const inspect: unique symbol;
+/**
+ * Holder keypair. Core owns the representation; persistence is the caller's
+ * job (or a later Node adapter). The secret never appears in stringification,
+ * inspection, or JSON.
+ */
+export declare class HolderIdentity {
+    readonly publicKey: PublicKeyHandle;
+    constructor(holderKey: Uint8Array);
+    /** Copy of the 32-byte Ed25519 secret. */
+    get holderKey(): Uint8Array;
+    toJSON(): {
+        readonly publicKey: string;
+    };
+    toString(): string;
+    [inspect](): {
+        readonly publicKey: string;
+    };
+}
+/** Import a 32-byte holder secret. */
+export declare function identityFromKey(holderKey: Uint8Array): HolderIdentity;
+/** Fresh holder identity. Uses Web Crypto; does not touch the filesystem. */
+export declare function generateIdentity(): HolderIdentity;
+export {};

package/dist/identity.js

@@ -0,0 +1,61 @@
+import { TenuoConfigurationError } from "./errors.js";
+import { loadWasm, publicKeyHexFromHolderKey } from "./wasm.js";
+const inspect = Symbol.for("nodejs.util.inspect.custom");
+const secrets = new WeakMap();
+/**
+ * Holder keypair. Core owns the representation; persistence is the caller's
+ * job (or a later Node adapter). The secret never appears in stringification,
+ * inspection, or JSON.
+ */
+export class HolderIdentity {
+    publicKey;
+    constructor(holderKey) {
+        if (!(holderKey instanceof Uint8Array) || holderKey.length !== 32) {
+            throw new TenuoConfigurationError("HolderIdentity requires a 32-byte holder key");
+        }
+        loadWasm();
+        secrets.set(this, new Uint8Array(holderKey));
+        this.publicKey = {
+            kind: "public-key",
+            source: "bytes",
+            hex: publicKeyHexFromHolderKey(holderKey),
+        };
+    }
+    /** Copy of the 32-byte Ed25519 secret. */
+    get holderKey() {
+        const secret = secrets.get(this);
+        if (secret === undefined) {
+            throw new TenuoConfigurationError("identity is not bound to a holder key");
+        }
+        return new Uint8Array(secret);
+    }
+    toJSON() {
+        return { publicKey: this.publicKey.hex };
+    }
+    toString() {
+        return `TenuoIdentity(${this.publicKey.hex.slice(0, 8)}…)`;
+    }
+    [inspect]() {
+        return this.toJSON();
+    }
+}
+/** Import a 32-byte holder secret. */
+export function identityFromKey(holderKey) {
+    if (!(holderKey instanceof Uint8Array) || holderKey.length !== 32) {
+        throw new TenuoConfigurationError("identity() requires a 32-byte holder key");
+    }
+    loadWasm();
+    return new HolderIdentity(holderKey);
+}
+/** Fresh holder identity. Uses Web Crypto; does not touch the filesystem. */
+export function generateIdentity() {
+    return identityFromKey(randomSecret());
+}
+function randomSecret() {
+    const cryptoObj = globalThis.crypto;
+    if (cryptoObj === undefined || typeof cryptoObj.getRandomValues !== "function") {
+        throw new TenuoConfigurationError("generateIdentity() needs Web Crypto (globalThis.crypto.getRandomValues).");
+    }
+    return cryptoObj.getRandomValues(new Uint8Array(32));
+}
+//# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAEhE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AACzD,MAAM,OAAO,GAAG,IAAI,OAAO,EAA8B,CAAC;AAE1D;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAChB,SAAS,CAAkB;IAEpC,YAAY,SAAqB;QAC/B,IAAI,CAAC,CAAC,SAAS,YAAY,UAAU,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAClE,MAAM,IAAI,uBAAuB,CAAC,8CAA8C,CAAC,CAAC;QACpF,CAAC;QACD,QAAQ,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,SAAS,GAAG;YACf,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,OAAO;YACf,GAAG,EAAE,yBAAyB,CAAC,SAAS,CAAC;SAC1C,CAAC;IACJ,CAAC;IAED,0CAA0C;IAC1C,IAAI,SAAS;QACX,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,uBAAuB,CAAC,uCAAuC,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,MAAM;QACJ,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC;IAC3C,CAAC;IAED,QAAQ;QACN,OAAO,iBAAiB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAED,CAAC,OAAO,CAAC;QACP,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;CACF;AAED,sCAAsC;AACtC,MAAM,UAAU,eAAe,CAAC,SAAqB;IACnD,IAAI,CAAC,CAAC,SAAS,YAAY,UAAU,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAClE,MAAM,IAAI,uBAAuB,CAAC,0CAA0C,CAAC,CAAC;IAChF,CAAC;IACD,QAAQ,EAAE,CAAC;IACX,OAAO,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC;IACpC,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;QAC/E,MAAM,IAAI,uBAAuB,CAC/B,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC","sourcesContent":["import type { PublicKeyHandle } from \"./api.ts\";\nimport { TenuoConfigurationError } from \"./errors.ts\";\nimport { loadWasm, publicKeyHexFromHolderKey } from \"./wasm.ts\";\n\nconst inspect = Symbol.for(\"nodejs.util.inspect.custom\");\nconst secrets = new WeakMap<HolderIdentity, Uint8Array>();\n\n/**\n * Holder keypair. Core owns the representation; persistence is the caller's\n * job (or a later Node adapter). The secret never appears in stringification,\n * inspection, or JSON.\n */\nexport class HolderIdentity {\n  readonly publicKey: PublicKeyHandle;\n\n  constructor(holderKey: Uint8Array) {\n    if (!(holderKey instanceof Uint8Array) || holderKey.length !== 32) {\n      throw new TenuoConfigurationError(\"HolderIdentity requires a 32-byte holder key\");\n    }\n    loadWasm();\n    secrets.set(this, new Uint8Array(holderKey));\n    this.publicKey = {\n      kind: \"public-key\",\n      source: \"bytes\",\n      hex: publicKeyHexFromHolderKey(holderKey),\n    };\n  }\n\n  /** Copy of the 32-byte Ed25519 secret. */\n  get holderKey(): Uint8Array {\n    const secret = secrets.get(this);\n    if (secret === undefined) {\n      throw new TenuoConfigurationError(\"identity is not bound to a holder key\");\n    }\n    return new Uint8Array(secret);\n  }\n\n  toJSON(): { readonly publicKey: string } {\n    return { publicKey: this.publicKey.hex };\n  }\n\n  toString(): string {\n    return `TenuoIdentity(${this.publicKey.hex.slice(0, 8)}…)`;\n  }\n\n  [inspect](): { readonly publicKey: string } {\n    return this.toJSON();\n  }\n}\n\n/** Import a 32-byte holder secret. */\nexport function identityFromKey(holderKey: Uint8Array): HolderIdentity {\n  if (!(holderKey instanceof Uint8Array) || holderKey.length !== 32) {\n    throw new TenuoConfigurationError(\"identity() requires a 32-byte holder key\");\n  }\n  loadWasm();\n  return new HolderIdentity(holderKey);\n}\n\n/** Fresh holder identity. Uses Web Crypto; does not touch the filesystem. */\nexport function generateIdentity(): HolderIdentity {\n  return identityFromKey(randomSecret());\n}\n\nfunction randomSecret(): Uint8Array {\n  const cryptoObj = globalThis.crypto;\n  if (cryptoObj === undefined || typeof cryptoObj.getRandomValues !== \"function\") {\n    throw new TenuoConfigurationError(\n      \"generateIdentity() needs Web Crypto (globalThis.crypto.getRandomValues).\",\n    );\n  }\n  return cryptoObj.getRandomValues(new Uint8Array(32));\n}\n"]}

package/dist/index.d.ts

@@ -1,7 +1,13 @@
-export type { AllConstraint, AllowPolicy, AnyOfConstraint, ApprovalContextAttestation, ApprovalInfo, ApprovalRequest, ApprovalRequestSummary, ArgApprovalGate, CelConstraint, CidrConstraint, Clearance, ConstraintExpr, ContainsConstraint, ControlPlaneApprovalRequestV1, ControlPlaneApprovalResponseV1, CreateTenuoOptions, Decision, DevRoot, EmailConstraint, ExactConstraint, ExecuteOptions, ExplainedField, Explanation, IssueInput, IssuerKey, MaxConstraint, McpAttachOptions, McpCallParams, McpHandlerPolicy, McpJsonRpcError, McpVerifyOptions, MinConstraint, NarrowInput, NarrowOptions, NonceStore, NotConstraint, NotOneOfConstraint, OneOfConstraint, PatternConstraint, PresentedCall, ProtectedTool, PublicKeyHandle, RangeConstraint, ReceiptChainInfo, ReceiptInfo, RegexConstraint, RequireApproval, RevocationListInfo, RevocationListInput, Session, SessionAllow, SessionFromWireInput, SessionInfo, SessionInput, ShlexConstraint, SignApprovalOptions, SubsetConstraint, Tenuo, TenuoErrorCode, TenuoMcp, TenuoMcpMeta, ToolApprovalGate, ToolLike, ToolPolicy, UnderConstraint, UrlPatternConstraint, UrlSafeConstraint, WarrantPart, WildcardConstraint, } from "./api.ts";
+export type { ApprovalGateInspection, ApprovalRequirement, ApprovalRequirementStatus, } from "./wasm.ts";
+export { approvalRequirement, evaluateApprovalGates, inspectApprovalGate } from "./wasm.ts";
+export type { AllConstraint, AllowPolicy, AnyOfConstraint, ApprovalContextAttestation, ApprovalInfo, ApprovalRequest, ApprovalRequestSummary, ArgApprovalGate, CelConstraint, CidrConstraint, Clearance, ConstraintExpr, ContainsConstraint, ControlPlaneApprovalRequestV1, ControlPlaneApprovalResponseV1, CreateTenuoOptions, Decision, DevRoot, EmailConstraint, ExactConstraint, ExecuteOptions, ExplainedField, Explanation, IssueInput, IssuerKey, MaxConstraint, McpAttachOptions, McpCallParams, McpHandlerPolicy, McpJsonRpcError, McpVerifyOptions, MinConstraint, NarrowInput, NarrowOptions, NonceStore, NotConstraint, NotOneOfConstraint, OneOfConstraint, PatternConstraint, PresentedCall, ProtectedTool, PublicKeyHandle, RangeConstraint, ReceiptChainInfo, ReceiptInfo, RegexConstraint, RequireApproval, RevocationListInfo, RevocationListInput, Session, SessionAllow, SessionFromWireInput, SessionInfo, SessionInput, ShlexConstraint, SignApprovalOptions, SubsetConstraint, Tenuo, LegacyTenuoErrorCode, ProtocolDenialCode, TenuoErrorCode, TenuoMcp, TenuoMcpMeta, ToolApprovalGate, ToolLike, ToolPolicy, UnderConstraint, UrlPatternConstraint, UrlSafeConstraint, WarrantPart, WildcardConstraint, } from "./api.ts";
 export { ApprovalRequiredError, AuthorizationDeniedError, TenuoConfigurationError, TenuoError, } from "./errors.ts";
-export { all, anyOf, cel, cidr, contains, email, exact, max, min, not, notOneOf, oneOf, pattern, range, regex, shlex, subset, under, urlPattern, urlSafe, wildcard, } from "./constraints.ts";
+export { all, anyOf, cel, cidr, contains, email, exact, max, min, not, notOneOf, oneOf, pathGlob, pattern, range, regex, shlex, subset, under, urlPattern, urlSafe, wildcard, } from "./constraints.ts";
 export { memoryNonceStore } from "./nonce.ts";
 export { Session as SessionHandle, isSession } from "./session.ts";
+export { ConnectToken, parseConnectToken } from "./connect.ts";
+export type { ResolveEndpointOptions } from "./connect.ts";
+export { HolderIdentity, generateIdentity, identityFromKey } from "./identity.ts";
+export { Runtime } from "./runtime.ts";
+export type { ReceiptsMode, RuntimeOptions, SessionWarrant } from "./runtime.ts";
 export { createTenuo } from "./client.ts";
-//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,6 +1,10 @@
+export { approvalRequirement, evaluateApprovalGates, inspectApprovalGate } from "./wasm.js";
 export { ApprovalRequiredError, AuthorizationDeniedError, TenuoConfigurationError, TenuoError, } from "./errors.js";
-export { all, anyOf, cel, cidr, contains, email, exact, max, min, not, notOneOf, oneOf, pattern, range, regex, shlex, subset, under, urlPattern, urlSafe, wildcard, } from "./constraints.js";
+export { all, anyOf, cel, cidr, contains, email, exact, max, min, not, notOneOf, oneOf, pathGlob, pattern, range, regex, shlex, subset, under, urlPattern, urlSafe, wildcard, } from "./constraints.js";
 export { memoryNonceStore } from "./nonce.js";
 export { Session as SessionHandle, isSession } from "./session.js";
+export { ConnectToken, parseConnectToken } from "./connect.js";
+export { HolderIdentity, generateIdentity, identityFromKey } from "./identity.js";
+export { Runtime } from "./runtime.js";
 export { createTenuo } from "./client.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAwEA,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,GAAG,EACH,KAAK,EACL,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,KAAK,EACL,KAAK,EACL,GAAG,EACH,GAAG,EACH,GAAG,EACH,QAAQ,EACR,KAAK,EACL,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,EACL,MAAM,EACN,KAAK,EACL,UAAU,EACV,OAAO,EACP,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AA4E5F,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,GAAG,EACH,KAAK,EACL,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,KAAK,EACL,KAAK,EACL,GAAG,EACH,GAAG,EACH,GAAG,EACH,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,EACL,MAAM,EACN,KAAK,EACL,UAAU,EACV,OAAO,EACP,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAG/D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAElF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC","sourcesContent":["export type {\n  ApprovalGateInspection,\n  ApprovalRequirement,\n  ApprovalRequirementStatus,\n} from \"./wasm.ts\";\n\nexport { approvalRequirement, evaluateApprovalGates, inspectApprovalGate } from \"./wasm.ts\";\n\nexport type {\n  AllConstraint,\n  AllowPolicy,\n  AnyOfConstraint,\n  ApprovalContextAttestation,\n  ApprovalInfo,\n  ApprovalRequest,\n  ApprovalRequestSummary,\n  ArgApprovalGate,\n  CelConstraint,\n  CidrConstraint,\n  Clearance,\n  ConstraintExpr,\n  ContainsConstraint,\n  ControlPlaneApprovalRequestV1,\n  ControlPlaneApprovalResponseV1,\n  CreateTenuoOptions,\n  Decision,\n  DevRoot,\n  EmailConstraint,\n  ExactConstraint,\n  ExecuteOptions,\n  ExplainedField,\n  Explanation,\n  IssueInput,\n  IssuerKey,\n  MaxConstraint,\n  McpAttachOptions,\n  McpCallParams,\n  McpHandlerPolicy,\n  McpJsonRpcError,\n  McpVerifyOptions,\n  MinConstraint,\n  NarrowInput,\n  NarrowOptions,\n  NonceStore,\n  NotConstraint,\n  NotOneOfConstraint,\n  OneOfConstraint,\n  PatternConstraint,\n  PresentedCall,\n  ProtectedTool,\n  PublicKeyHandle,\n  RangeConstraint,\n  ReceiptChainInfo,\n  ReceiptInfo,\n  RegexConstraint,\n  RequireApproval,\n  RevocationListInfo,\n  RevocationListInput,\n  Session,\n  SessionAllow,\n  SessionFromWireInput,\n  SessionInfo,\n  SessionInput,\n  ShlexConstraint,\n  SignApprovalOptions,\n  SubsetConstraint,\n  Tenuo,\n  LegacyTenuoErrorCode,\n  ProtocolDenialCode,\n  TenuoErrorCode,\n  TenuoMcp,\n  TenuoMcpMeta,\n  ToolApprovalGate,\n  ToolLike,\n  ToolPolicy,\n  UnderConstraint,\n  UrlPatternConstraint,\n  UrlSafeConstraint,\n  WarrantPart,\n  WildcardConstraint,\n} from \"./api.ts\";\n\nexport {\n  ApprovalRequiredError,\n  AuthorizationDeniedError,\n  TenuoConfigurationError,\n  TenuoError,\n} from \"./errors.ts\";\n\nexport {\n  all,\n  anyOf,\n  cel,\n  cidr,\n  contains,\n  email,\n  exact,\n  max,\n  min,\n  not,\n  notOneOf,\n  oneOf,\n  pathGlob,\n  pattern,\n  range,\n  regex,\n  shlex,\n  subset,\n  under,\n  urlPattern,\n  urlSafe,\n  wildcard,\n} from \"./constraints.ts\";\n\nexport { memoryNonceStore } from \"./nonce.ts\";\n\nexport { Session as SessionHandle, isSession } from \"./session.ts\";\n\nexport { ConnectToken, parseConnectToken } from \"./connect.ts\";\nexport type { ResolveEndpointOptions } from \"./connect.ts\";\n\nexport { HolderIdentity, generateIdentity, identityFromKey } from \"./identity.ts\";\n\nexport { Runtime } from \"./runtime.ts\";\nexport type { ReceiptsMode, RuntimeOptions, SessionWarrant } from \"./runtime.ts\";\n\nexport { createTenuo } from \"./client.ts\";\n"]}

package/dist/mcp.d.ts

@@ -6,7 +6,7 @@ export type Decide = (decision: WasmDecision, tool: string, native?: object, arg
  * proof-of-possession over the call. Shared by `tenuo.present()` and
  * `tenuo.mcp.attach()`.
  */
-export declare function presentCall(context: WasmContext, decide: Decide, session: SessionContract, name: string, args: Readonly<Record<string, unknown>>, options: McpAttachOptions | undefined, label: string): {
+export declare function presentCall(context: WasmContext, decide: Decide, session: SessionContract, name: string, args: Readonly<Record<string, unknown>>, options: McpAttachOptions | undefined, label: string, host?: object): {
     readonly presented: PresentedCall;
     readonly wireArgs: Record<string, unknown>;
 };
@@ -15,6 +15,5 @@ export declare function presentCall(context: WasmContext, decide: Decide, sessio
  * proof-of-possession, then apply the host ceiling. Shared by
  * `tenuo.verify()` and `tenuo.mcp.verify()`.
  */
-export declare function verifyPresented(context: WasmContext, decide: Decide, presented: PresentedCall, name: string, args: Readonly<Record<string, unknown>>, options: McpVerifyOptions | undefined, label: string): Promise<Readonly<Record<string, unknown>>>;
-export declare function createMcp(context: WasmContext, decide: Decide): TenuoMcp;
-//# sourceMappingURL=mcp.d.ts.map
+export declare function verifyPresented(context: WasmContext, decide: Decide, presented: PresentedCall, name: string, args: Readonly<Record<string, unknown>>, options: McpVerifyOptions | undefined, label: string, host?: object): Promise<Readonly<Record<string, unknown>>>;
+export declare function createMcp(context: WasmContext, decide: Decide, host?: object): TenuoMcp;