@tenuo/core 0.3.3-beta.0 → 0.3.4-beta.0

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "package": "@tenuo/core",
-  "version": "0.3.3-beta.0",
-  "sourceCommit": "6d0b668f3d4d4da137967624eee5e307462ded54",
+  "version": "0.3.4-beta.0",
+  "sourceCommit": "134bc5131608bafd20e817f228c098500d371372",
   "sourceClean": false,
-  "wasmSha256": "7fb51e3beda0f2f0cb91863456d22ecc9b139fdfa869e65dead03b315adc3c22",
+  "wasmSha256": "2636e2d0c2407810defac81c448996f10728d728f2e454f65f93a2b4ba89f4fc",
   "wasmMatchesCommit": false
 }

package/dist/generated/tenuo_wasm.d.ts

@@ -322,6 +322,11 @@ export function parse_connect_token(token: string): any;
  */
 export function parse_strict_json(json_text: string): void;
 
+/**
+ * Diagnose all capability-constraint failures without authorizing the call.
+ */
+export function sdkDiagnoseConstraints(wire: string, tool: string, args_json: any): any;
+
 /**
  * Decode and check an approval envelope. Not authorization.
  */
@@ -393,6 +398,15 @@ export function sdkVerifyReceipt(wire: string): any;
  */
 export function sdkVerifyReceiptChain(wire: string, roots: any): any;
 
+/**
+ * The core's Shlex decision for `command`.
+ *
+ * `allow` is a list of binary names or paths. The returned object has
+ * `allowed`, `reason`, `tokens`, `operators`, `expansion`, `controls`, and
+ * `binary_allowed`.
+ */
+export function shlex_inspect(allow: any, command: string): any;
+
 /**
  * Create a Proof-of-Possession signature for a warrant
  */

package/dist/generated/tenuo_wasm.js

@@ -969,6 +969,26 @@ function parse_strict_json(json_text) {
 }
 exports.parse_strict_json = parse_strict_json;
 
+/**
+ * Diagnose all capability-constraint failures without authorizing the call.
+ * @param {string} wire
+ * @param {string} tool
+ * @param {any} args_json
+ * @returns {any}
+ */
+function sdkDiagnoseConstraints(wire, tool, args_json) {
+    const ptr0 = passStringToWasm0(wire, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(tool, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.sdkDiagnoseConstraints(ptr0, len0, ptr1, len1, args_json);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.sdkDiagnoseConstraints = sdkDiagnoseConstraints;
+
 /**
  * Decode and check an approval envelope. Not authorization.
  * @param {any} envelope
@@ -1277,6 +1297,27 @@ function sdkVerifyReceiptChain(wire, roots) {
 }
 exports.sdkVerifyReceiptChain = sdkVerifyReceiptChain;
 
+/**
+ * The core's Shlex decision for `command`.
+ *
+ * `allow` is a list of binary names or paths. The returned object has
+ * `allowed`, `reason`, `tokens`, `operators`, `expansion`, `controls`, and
+ * `binary_allowed`.
+ * @param {any} allow
+ * @param {string} command
+ * @returns {any}
+ */
+function shlex_inspect(allow, command) {
+    const ptr0 = passStringToWasm0(command, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+    const len0 = WASM_VECTOR_LEN;
+    const ret = wasm.shlex_inspect(allow, ptr0, len0);
+    if (ret[2]) {
+        throw takeFromExternrefTable0(ret[1]);
+    }
+    return takeFromExternrefTable0(ret[0]);
+}
+exports.shlex_inspect = shlex_inspect;
+
 /**
  * Create a Proof-of-Possession signature for a warrant
  * @param {string} private_key_hex

package/dist/generated/tenuo_wasm_bg.wasm.d.ts

@@ -4,6 +4,7 @@ export const memory: WebAssembly.Memory;
 export const __wbg_sdkcontext_free: (a: number, b: number) => void;
 export const __wbg_sdksession_free: (a: number, b: number) => void;
 export const parse_strict_json: (a: number, b: number) => [number, number];
+export const sdkDiagnoseConstraints: (a: number, b: number, c: number, d: number, e: any) => [number, number, number];
 export const sdkInspectParts: (a: number, b: number, c: number, d: number) => [number, number, number];
 export const sdkInspectWarrant: (a: number, b: number) => [number, number, number];
 export const sdkProtocolLimits: () => [number, number, number];
@@ -53,6 +54,7 @@ export const evaluate_approval_gates: (a: number, b: number, c: number, d: numbe
 export const generate_keypair: () => any;
 export const inspect_approval_gate: (a: number, b: number, c: number, d: number) => any;
 export const parse_connect_token: (a: number, b: number) => any;
+export const shlex_inspect: (a: any, b: number, c: number) => [number, number, number];
 export const sign: (a: number, b: number, c: number, d: number, e: number, f: number, g: any) => any;
 export const sign_receipt: (a: any, b: number, c: number) => any;
 export const verify_approval_set: (a: number, b: number, c: number, d: number, e: any) => any;

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-export type { ApprovalGateInspection, ApprovalRequirement, ApprovalRequirementStatus, } from "./wasm.ts";
-export { approvalRequirement, evaluateApprovalGates, inspectApprovalGate, parseStrictJson, } from "./wasm.ts";
+export type { ApprovalGateInspection, ApprovalRequirement, ApprovalRequirementStatus, ConstraintDiagnostics, ConstraintViolationKind, ShlexCheck, } from "./wasm.ts";
+export { approvalRequirement, checkShlex, diagnoseConstraints, evaluateApprovalGates, inspectApprovalGate, parseStrictJson, } from "./wasm.ts";
 export type { AllConstraint, AllowPolicy, AnyOfConstraint, ApprovalContextAttestation, ApprovalInfo, ApprovalRequest, ApprovalRequestSummary, ArgApprovalGate, CelConstraint, CidrConstraint, Clearance, ConstraintExpr, ContainsConstraint, ControlPlaneApprovalRequestV1, ControlPlaneApprovalResponseV1, CreateTenuoOptions, Decision, DevRoot, EmailConstraint, ExactConstraint, ExecuteOptions, ExplainedField, Explanation, IssueInput, IssuerKey, MaxConstraint, McpAttachOptions, McpCallParams, McpHandlerPolicy, McpJsonRpcError, McpVerifyOptions, MinConstraint, NarrowInput, NarrowOptions, NonceStore, NotConstraint, NotOneOfConstraint, OneOfConstraint, PatternConstraint, PresentedCall, ProtectedTool, PublicKeyHandle, RangeConstraint, ReceiptChainInfo, ReceiptInfo, RegexConstraint, RequireApproval, RevocationListInfo, RevocationListInput, Session, SessionAllow, SessionFromWireInput, SessionInfo, SessionInput, ShlexConstraint, SignApprovalOptions, SubsetConstraint, Tenuo, LegacyTenuoErrorCode, ProtocolDenialCode, TenuoErrorCode, TenuoMcp, TenuoMcpMeta, ToolApprovalGate, ToolLike, ToolPolicy, UnderConstraint, UrlPatternConstraint, UrlSafeConstraint, WarrantPart, WildcardConstraint, } from "./api.ts";
 export { ApprovalRequiredError, AuthorizationDeniedError, TenuoConfigurationError, TenuoError, } from "./errors.ts";
 export { all, anyOf, cel, cidr, contains, email, exact, max, min, not, notOneOf, oneOf, pathGlob, pattern, range, regex, shlex, subset, under, urlPattern, urlSafe, wildcard, } from "./constraints.ts";

package/dist/index.js

@@ -1,4 +1,4 @@
-export { approvalRequirement, evaluateApprovalGates, inspectApprovalGate, parseStrictJson, } from "./wasm.js";
+export { approvalRequirement, checkShlex, diagnoseConstraints, evaluateApprovalGates, inspectApprovalGate, parseStrictJson, } from "./wasm.js";
 export { ApprovalRequiredError, AuthorizationDeniedError, TenuoConfigurationError, TenuoError, } from "./errors.js";
 export { all, anyOf, cel, cidr, contains, email, exact, max, min, not, notOneOf, oneOf, pathGlob, pattern, range, regex, shlex, subset, under, urlPattern, urlSafe, wildcard, } from "./constraints.js";
 export { memoryNonceStore } from "./nonce.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,GAChB,MAAM,WAAW,CAAC;AA4EnB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,GAAG,EACH,KAAK,EACL,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,KAAK,EACL,KAAK,EACL,GAAG,EACH,GAAG,EACH,GAAG,EACH,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,EACL,MAAM,EACN,KAAK,EACL,UAAU,EACV,OAAO,EACP,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAG/D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAElF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC","sourcesContent":["export type {\n  ApprovalGateInspection,\n  ApprovalRequirement,\n  ApprovalRequirementStatus,\n} from \"./wasm.ts\";\n\nexport {\n  approvalRequirement,\n  evaluateApprovalGates,\n  inspectApprovalGate,\n  parseStrictJson,\n} from \"./wasm.ts\";\n\nexport type {\n  AllConstraint,\n  AllowPolicy,\n  AnyOfConstraint,\n  ApprovalContextAttestation,\n  ApprovalInfo,\n  ApprovalRequest,\n  ApprovalRequestSummary,\n  ArgApprovalGate,\n  CelConstraint,\n  CidrConstraint,\n  Clearance,\n  ConstraintExpr,\n  ContainsConstraint,\n  ControlPlaneApprovalRequestV1,\n  ControlPlaneApprovalResponseV1,\n  CreateTenuoOptions,\n  Decision,\n  DevRoot,\n  EmailConstraint,\n  ExactConstraint,\n  ExecuteOptions,\n  ExplainedField,\n  Explanation,\n  IssueInput,\n  IssuerKey,\n  MaxConstraint,\n  McpAttachOptions,\n  McpCallParams,\n  McpHandlerPolicy,\n  McpJsonRpcError,\n  McpVerifyOptions,\n  MinConstraint,\n  NarrowInput,\n  NarrowOptions,\n  NonceStore,\n  NotConstraint,\n  NotOneOfConstraint,\n  OneOfConstraint,\n  PatternConstraint,\n  PresentedCall,\n  ProtectedTool,\n  PublicKeyHandle,\n  RangeConstraint,\n  ReceiptChainInfo,\n  ReceiptInfo,\n  RegexConstraint,\n  RequireApproval,\n  RevocationListInfo,\n  RevocationListInput,\n  Session,\n  SessionAllow,\n  SessionFromWireInput,\n  SessionInfo,\n  SessionInput,\n  ShlexConstraint,\n  SignApprovalOptions,\n  SubsetConstraint,\n  Tenuo,\n  LegacyTenuoErrorCode,\n  ProtocolDenialCode,\n  TenuoErrorCode,\n  TenuoMcp,\n  TenuoMcpMeta,\n  ToolApprovalGate,\n  ToolLike,\n  ToolPolicy,\n  UnderConstraint,\n  UrlPatternConstraint,\n  UrlSafeConstraint,\n  WarrantPart,\n  WildcardConstraint,\n} from \"./api.ts\";\n\nexport {\n  ApprovalRequiredError,\n  AuthorizationDeniedError,\n  TenuoConfigurationError,\n  TenuoError,\n} from \"./errors.ts\";\n\nexport {\n  all,\n  anyOf,\n  cel,\n  cidr,\n  contains,\n  email,\n  exact,\n  max,\n  min,\n  not,\n  notOneOf,\n  oneOf,\n  pathGlob,\n  pattern,\n  range,\n  regex,\n  shlex,\n  subset,\n  under,\n  urlPattern,\n  urlSafe,\n  wildcard,\n} from \"./constraints.ts\";\n\nexport { memoryNonceStore } from \"./nonce.ts\";\n\nexport { Session as SessionHandle, isSession } from \"./session.ts\";\n\nexport { ConnectToken, parseConnectToken } from \"./connect.ts\";\nexport type { ResolveEndpointOptions } from \"./connect.ts\";\n\nexport { HolderIdentity, generateIdentity, identityFromKey } from \"./identity.ts\";\n\nexport { Runtime } from \"./runtime.ts\";\nexport type { ReceiptsMode, RuntimeOptions, SessionWarrant } from \"./runtime.ts\";\n\nexport { createTenuo } from \"./client.ts\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,GAChB,MAAM,WAAW,CAAC;AA4EnB,OAAO,EACL,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,EACvB,UAAU,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,GAAG,EACH,KAAK,EACL,GAAG,EACH,IAAI,EACJ,QAAQ,EACR,KAAK,EACL,KAAK,EACL,GAAG,EACH,GAAG,EACH,GAAG,EACH,QAAQ,EACR,KAAK,EACL,QAAQ,EACR,OAAO,EACP,KAAK,EACL,KAAK,EACL,KAAK,EACL,MAAM,EACN,KAAK,EACL,UAAU,EACV,OAAO,EACP,QAAQ,GACT,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEnE,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAG/D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAElF,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAGvC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC","sourcesContent":["export type {\n  ApprovalGateInspection,\n  ApprovalRequirement,\n  ApprovalRequirementStatus,\n  ConstraintDiagnostics,\n  ConstraintViolationKind,\n  ShlexCheck,\n} from \"./wasm.ts\";\n\nexport {\n  approvalRequirement,\n  checkShlex,\n  diagnoseConstraints,\n  evaluateApprovalGates,\n  inspectApprovalGate,\n  parseStrictJson,\n} from \"./wasm.ts\";\n\nexport type {\n  AllConstraint,\n  AllowPolicy,\n  AnyOfConstraint,\n  ApprovalContextAttestation,\n  ApprovalInfo,\n  ApprovalRequest,\n  ApprovalRequestSummary,\n  ArgApprovalGate,\n  CelConstraint,\n  CidrConstraint,\n  Clearance,\n  ConstraintExpr,\n  ContainsConstraint,\n  ControlPlaneApprovalRequestV1,\n  ControlPlaneApprovalResponseV1,\n  CreateTenuoOptions,\n  Decision,\n  DevRoot,\n  EmailConstraint,\n  ExactConstraint,\n  ExecuteOptions,\n  ExplainedField,\n  Explanation,\n  IssueInput,\n  IssuerKey,\n  MaxConstraint,\n  McpAttachOptions,\n  McpCallParams,\n  McpHandlerPolicy,\n  McpJsonRpcError,\n  McpVerifyOptions,\n  MinConstraint,\n  NarrowInput,\n  NarrowOptions,\n  NonceStore,\n  NotConstraint,\n  NotOneOfConstraint,\n  OneOfConstraint,\n  PatternConstraint,\n  PresentedCall,\n  ProtectedTool,\n  PublicKeyHandle,\n  RangeConstraint,\n  ReceiptChainInfo,\n  ReceiptInfo,\n  RegexConstraint,\n  RequireApproval,\n  RevocationListInfo,\n  RevocationListInput,\n  Session,\n  SessionAllow,\n  SessionFromWireInput,\n  SessionInfo,\n  SessionInput,\n  ShlexConstraint,\n  SignApprovalOptions,\n  SubsetConstraint,\n  Tenuo,\n  LegacyTenuoErrorCode,\n  ProtocolDenialCode,\n  TenuoErrorCode,\n  TenuoMcp,\n  TenuoMcpMeta,\n  ToolApprovalGate,\n  ToolLike,\n  ToolPolicy,\n  UnderConstraint,\n  UrlPatternConstraint,\n  UrlSafeConstraint,\n  WarrantPart,\n  WildcardConstraint,\n} from \"./api.ts\";\n\nexport {\n  ApprovalRequiredError,\n  AuthorizationDeniedError,\n  TenuoConfigurationError,\n  TenuoError,\n} from \"./errors.ts\";\n\nexport {\n  all,\n  anyOf,\n  cel,\n  cidr,\n  contains,\n  email,\n  exact,\n  max,\n  min,\n  not,\n  notOneOf,\n  oneOf,\n  pathGlob,\n  pattern,\n  range,\n  regex,\n  shlex,\n  subset,\n  under,\n  urlPattern,\n  urlSafe,\n  wildcard,\n} from \"./constraints.ts\";\n\nexport { memoryNonceStore } from \"./nonce.ts\";\n\nexport { Session as SessionHandle, isSession } from \"./session.ts\";\n\nexport { ConnectToken, parseConnectToken } from \"./connect.ts\";\nexport type { ResolveEndpointOptions } from \"./connect.ts\";\n\nexport { HolderIdentity, generateIdentity, identityFromKey } from \"./identity.ts\";\n\nexport { Runtime } from \"./runtime.ts\";\nexport type { ReceiptsMode, RuntimeOptions, SessionWarrant } from \"./runtime.ts\";\n\nexport { createTenuo } from \"./client.ts\";\n"]}

package/dist/wasm.d.ts

@@ -15,6 +15,18 @@ export type WasmInspect = {
     signature_hex: string;
     id: string;
 };
+export type ConstraintViolationKind = "tool_not_authorized" | "unknown_field" | "missing_required" | "constraint_mismatch";
+export type ConstraintDiagnostics = {
+    closedWorld: boolean;
+    violations: Array<{
+        field: string;
+        kind: ConstraintViolationKind;
+        reason: string;
+    }>;
+};
+type WasmConstraintDiagnostics = Omit<ConstraintDiagnostics, "closedWorld"> & {
+    closed_world: boolean;
+};
 export type WasmReceipt = {
     authentic: true;
     /** Hex key the receipt is signed under — resolve against your authorizer set. */
@@ -247,6 +259,7 @@ type Generated = {
         fromChain(parts: unknown, holder: Uint8Array): WasmSession;
     };
     sdkInspectWarrant(wire: string): WasmInspect;
+    sdkDiagnoseConstraints(wire: string, tool: string, args: unknown): WasmConstraintDiagnostics;
     sdkInspectParts(payloadHex: string, signatureHex: string): WasmInspect;
     sdkProtocolLimits(): WasmProtocolLimits;
     sdkPublicKeyFromHolderKey(holderSecret: Uint8Array): string;
@@ -271,7 +284,18 @@ type Generated = {
         error?: string;
     };
     parse_strict_json(jsonText: string): void;
+    shlex_inspect(allow: string[], command: string): ShlexCheck;
 };
+/** Decision from the core Shlex check. The same object Python `Shlex.check` returns. */
+export interface ShlexCheck {
+    allowed: boolean;
+    reason: string;
+    tokens: string[];
+    operators: string[];
+    expansion: string[];
+    controls: string[];
+    binary_allowed: boolean;
+}
 export declare function wasmAvailable(): boolean;
 export declare function loadWasm(): Generated;
 export declare function createDevContext(receiptSigner?: Uint8Array): WasmContext;
@@ -282,6 +306,12 @@ export declare function importSessionFromWire(warrant: string, holderKey: Uint8A
 export declare function importSessionFromParts(payloadHex: string, signatureHex: string, holderKey: Uint8Array): WasmSession;
 export declare function importSessionFromChain(parts: unknown, holderKey: Uint8Array): WasmSession;
 export declare function inspectWarrant(wire: string): WasmInspect;
+/**
+ * List every capability-constraint failure in deterministic order.
+ * Diagnostic only: this does not verify signatures, expiry, revocation,
+ * approvals, or proof-of-possession, and must not be used to authorize.
+ */
+export declare function diagnoseConstraints(wire: string, tool: string, args: unknown): ConstraintDiagnostics;
 export declare function inspectParts(payloadHex: string, signatureHex: string): WasmInspect;
 /** Hex public key for a 32-byte holder secret. Ed25519, derived in Rust. */
 export declare function publicKeyHexFromHolderKey(holderSecret: Uint8Array): string;
@@ -311,6 +341,14 @@ export type ApprovalGateInspection = {
  * property and `null` stays `null`.
  */
 export declare function parseStrictJson(text: string): unknown;
+/**
+ * The core's Shlex decision for one command.
+ *
+ * `allow` is the binary allowlist. Each entry matches the command word
+ * literally, and any command word containing `..` is rejected. The reason is
+ * the same string the warrant uses.
+ */
+export declare function checkShlex(allow: readonly string[], command: string): ShlexCheck;
 /**
  * Typed preflight of a warrant's approval gates for `(tool, args)`.
  *

package/dist/wasm.js

@@ -76,6 +76,15 @@ export function importSessionFromChain(parts, holderKey) {
 export function inspectWarrant(wire) {
     return loadWasm().sdkInspectWarrant(wire);
 }
+/**
+ * List every capability-constraint failure in deterministic order.
+ * Diagnostic only: this does not verify signatures, expiry, revocation,
+ * approvals, or proof-of-possession, and must not be used to authorize.
+ */
+export function diagnoseConstraints(wire, tool, args) {
+    const result = loadWasm().sdkDiagnoseConstraints(wire, tool, args);
+    return { closedWorld: result.closed_world, violations: result.violations };
+}
 export function inspectParts(payloadHex, signatureHex) {
     return loadWasm().sdkInspectParts(payloadHex, signatureHex);
 }
@@ -103,6 +112,16 @@ export function parseStrictJson(text) {
     loadWasm().parse_strict_json(text);
     return JSON.parse(text);
 }
+/**
+ * The core's Shlex decision for one command.
+ *
+ * `allow` is the binary allowlist. Each entry matches the command word
+ * literally, and any command word containing `..` is rejected. The reason is
+ * the same string the warrant uses.
+ */
+export function checkShlex(allow, command) {
+    return loadWasm().shlex_inspect([...allow], command);
+}
 /**
  * Typed preflight of a warrant's approval gates for `(tool, args)`.
  *

package/dist/wasm.js.map

@@ -1 +1 @@
-{"version":3,"file":"wasm.js","sourceRoot":"","sources":["../src/wasm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AA2VtD,IAAI,MAA6B,CAAC;AAElC,SAAS,aAAa;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,cAAc,GAClB,8NAA8N,CAAC;AAEjO,MAAM,UAAU,QAAQ;IACtB,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,OAAO,CAAC,IAAI,CAAc,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QAC/E,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,aAA0B;IACzD,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,IAAI,OAAO,GAAgB,IAAI,UAAU,EAAE,CAAC;IAC5C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAA4B,EAC5B,cAAuB,EACvB,aAA0B;IAE1B,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAC1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAkB,EAClB,cAAiC,EACjC,aAA0B;IAE1B,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;IACvE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,SAAqB;IAC1E,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,YAAoB,EACpB,SAAqB;IAErB,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,OAAO,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,SAAqB;IAC1E,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,OAAO,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,QAAQ,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,YAAoB;IACnE,OAAO,QAAQ,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,yBAAyB,CAAC,YAAwB;IAChE,OAAO,QAAQ,EAAE,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC;AAC5D,CAAC;AAsBD,SAAS,gBAAgB;IACvB,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,QAAQ,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,IAAY,EACZ,IAA6B;IAE7B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/E,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,IAAY;IAClE,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1E,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,IAAY,EACZ,IAA6B;IAE7B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,uBAAuB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAClF,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,iBAAiB,CAAC;AAClC,CAAC","sourcesContent":["import { createRequire } from \"node:module\";\nimport { existsSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { TenuoConfigurationError } from \"./errors.ts\";\nimport type { TenuoErrorCode } from \"./api.ts\";\n\nexport type WasmDecision = {\n  outcome: \"allow\" | \"deny\" | \"approval_required\";\n  code?: TenuoErrorCode;\n  field?: string;\n  message?: string;\n  args?: Record<string, unknown>;\n  tool?: string;\n  required?: number;\n  received?: number;\n  receipt?: string;\n};\n\nexport type WasmInspect = {\n  payload_hex: string;\n  signature_hex: string;\n  id: string;\n};\n\nexport type WasmReceipt = {\n  authentic: true;\n  /** Hex key the receipt is signed under — resolve against your authorizer set. */\n  signer_key: string;\n  outcome: \"allow\" | \"deny\";\n  action: string;\n  decision_code?: string;\n  request_id: string;\n  /** Version of the revocation list in force, when it carried one. */\n  srl_version?: number;\n  /**\n   * SHA-256 (hex) of the revocation list bytes in force at decision time.\n   * Absent means no revocation data was loaded — a different claim from a\n   * loaded list that revoked nothing.\n   */\n  srl_hash?: string;\n  /**\n   * SHA-256 (hex) commitment to the canonical invocation this decision was\n   * made over. Absent when the arguments could not be canonicalized — never\n   * zero-filled, so absence is a claim rather than a value.\n   */\n  request_hash?: string;\n  /** SHA-256 (hex) of the host ceiling applied to this decision. */\n  policy_definition_hash?: string;\n  /**\n   * SHA-256 (hex) of the previous receipt from this signer. Absent on the\n   * first receipt, or when the deployment does not chain. A broken link means\n   * a receipt was removed from the stream.\n   */\n  prev_receipt_hash?: string;\n  /** SHA-256 (hex) of the trusted root set in force at decision time. */\n  trusted_roots_hash?: string;\n};\n\nexport type WasmReceiptChain = {\n  signer_key: string;\n  outcome: \"allow\" | \"deny\";\n  decision_code?: string;\n  timestamp: number;\n  /** The embedded chain verifies to a supplied root at the decision instant. */\n  chain_valid: boolean;\n  /** Canonical error name when it does not. */\n  chain_error?: string;\n  /**\n   * Deny receipts only: the chain failure matches the stated decision_code,\n   * so the embedded authority independently corroborates the refusal.\n   */\n  corroborates_denial?: boolean;\n  root_issuer?: string;\n  leaf_holder?: string;\n};\n\nexport type WasmSession = object;\n\n/** Mirrors `SessionInfoDto` in tenuo-wasm. Snake case is the WASM boundary. */\nexport type WasmSessionInfo = {\n  kind: \"execution\" | \"issuer\";\n  holder_public_key: string;\n  root_public_key: string;\n  depth: number;\n  max_depth: number;\n  terminal: boolean;\n  expires_at: number;\n  tools: string[];\n  warrant_ids: string[];\n  can_authorize: boolean;\n  clearance?: number;\n  session_id?: string;\n  agent_id?: string;\n  issuable_tools?: string[];\n  max_issue_depth?: number;\n  required_approvers?: string[];\n  min_approvals?: number;\n  approval_gated_tools: string[];\n};\n\n/** Security limits exported by tenuo-core; TypeScript must not redefine them. */\nexport type WasmProtocolLimits = {\n  max_delegation_depth: number;\n  max_warrant_ttl_seconds: number;\n};\n\n/** Mirrors `NarrowOptions` in tenuo-wasm. Unknown keys are rejected there. */\nexport type WasmNarrowOptions = {\n  holder?: string;\n  ttlSeconds?: number;\n  terminal?: boolean;\n  maxDepth?: number;\n  clearance?: number | string;\n  agentId?: string;\n  addApprovers?: string[];\n  minApprovals?: number;\n};\n\nexport type WasmRequireApproval = {\n  approvers: string[];\n  min: number;\n  tools?: string[];\n  gates?: Record<string, { message?: string; args?: Record<string, unknown> }>;\n};\n\n/** Mirrors `MintOptions` in tenuo-wasm. */\nexport type WasmMintOptions = {\n  kind?: \"execution\" | \"issuer\";\n  allow?: unknown;\n  ttlSeconds?: number;\n  holder?: string;\n  maxDepth?: number;\n  clearance?: number | string;\n  sessionId?: string;\n  agentId?: string;\n  requireApproval?: WasmRequireApproval;\n  issuableTools?: string[];\n  constraintBounds?: unknown;\n  maxIssueDepth?: number;\n};\n\n/** Mirrors `IssueOptions` in tenuo-wasm. */\nexport type WasmIssueOptions = {\n  allow: unknown;\n  holder: string;\n  ttlSeconds?: number;\n  maxDepth?: number;\n  clearance?: number | string;\n  sessionId?: string;\n  agentId?: string;\n  requireApproval?: { approvers: string[]; min: number };\n};\n\nexport type WasmExplainField = {\n  field: string;\n  kind: string;\n  constraint: unknown;\n  value?: unknown;\n  satisfied: boolean;\n  reason_code?: string;\n  reason?: string;\n};\n\nexport type WasmExplain = {\n  tool: string;\n  kind: \"execution\" | \"issuer\";\n  outcome: \"allow\" | \"deny\";\n  code?: TenuoErrorCode;\n  field?: string;\n  message?: string;\n  tool_granted: boolean;\n  fields: WasmExplainField[];\n  unknown_fields: string[];\n  missing_fields: string[];\n  expired: boolean;\n  expires_at: number;\n  chain_valid: boolean;\n  chain_error?: TenuoErrorCode;\n};\n\nexport type WasmApprovalRequest = {\n  request_id: string;\n  warrant_id: string;\n  tool: string;\n  args: Record<string, unknown>;\n  request_hash: string;\n  holder_public_key: string;\n  required_approvers: string[];\n  min_approvals: number;\n  warrant_expires_at: number;\n  created_at: number;\n  message: string;\n};\n\nexport type WasmAttestation = {\n  version: number;\n  canonicalization: string;\n  warrant_id: string;\n  tool: string;\n  request_hash: string;\n  holder_key_hex: string;\n  args_canonical_cbor_b64: string;\n  signer_key_hex: string;\n  signature_b64: string;\n};\n\nexport type WasmApprovalInfo = {\n  approver_public_key: string;\n  request_hash: string;\n  nonce: string;\n  external_id: string;\n  approved_at: number;\n  expires_at: number;\n  expired: boolean;\n  signature_valid: boolean;\n  error?: string;\n};\n\nexport type WasmSrlInfo = {\n  version: number;\n  issued_at: number;\n  issuer_public_key: string;\n  revoked_ids: string[];\n  signature_valid: boolean;\n};\n\nexport type WasmContext = {\n  withReceiptSigner(secret: Uint8Array): WasmContext;\n  mint(\n    allow: unknown,\n    ttlSeconds: number,\n    requireApproval?: unknown,\n    holderHex?: string,\n    maxDepth?: number,\n  ): WasmSession;\n  mintExtended(options: WasmMintOptions): WasmSession;\n  narrow(session: WasmSession, allow: unknown, options?: WasmNarrowOptions): WasmSession;\n  issue(issuer: WasmSession, options: WasmIssueOptions): WasmSession;\n  issuerPublicKey(): string;\n  explain(session: WasmSession, tool: string, args: unknown): WasmExplain;\n  approvalRequest(session: WasmSession, tool: string, args: unknown): WasmApprovalRequest;\n  approvalContextAttestation(session: WasmSession, tool: string, args: unknown): WasmAttestation;\n  signRevocationListVersioned(ids: string[], version?: number): string;\n  authorize(\n    session: WasmSession,\n    tool: string,\n    args: unknown,\n    approvals?: unknown,\n    toolAllow?: unknown,\n    requestId?: string,\n  ): WasmDecision;\n  authorizeAsOf(\n    session: WasmSession,\n    tool: string,\n    args: unknown,\n    asOf: number,\n    approvals?: unknown,\n    toolAllow?: unknown,\n  ): WasmDecision;\n  loadRevocationList(srl: string): void;\n  signRevocationList(ids: string[]): string;\n  signPop(session: WasmSession, tool: string, args: unknown): string;\n  signMeta(\n    session: WasmSession,\n    tool: string,\n    argsJson: string,\n    timestamp: number,\n    approvals?: unknown,\n  ): { warrant: string; signature: string; approvals?: string[] };\n  /** Holder proof only; does not authorize execution. */\n  verifyMetaPop(\n    warrant: string,\n    signature: string,\n    tool: string,\n    argsJson: string,\n    timestamp: number,\n  ): boolean;\n  /** Compatibility alias for verifyMetaPop. */\n  verifyMeta(\n    warrant: string,\n    signature: string,\n    tool: string,\n    argsJson: string,\n    timestamp: number,\n  ): boolean;\n  authorizePresented(\n    warrants: unknown,\n    tool: string,\n    args: unknown,\n    pop: string,\n    approvals?: unknown,\n    toolAllow?: unknown,\n    requestId?: string,\n  ): WasmDecision;\n};\n\ntype Generated = {\n  SdkContext: {\n    new (): WasmContext;\n    fromTrustedRoots(roots: string[]): WasmContext;\n    fromIssuerSecret(secret: Uint8Array, extraRoots?: string[]): WasmContext;\n  };\n  SdkSession: {\n    fromWire(warrant: string, holder: Uint8Array): WasmSession;\n    fromParts(payloadHex: string, signatureHex: string, holder: Uint8Array): WasmSession;\n    fromChain(parts: unknown, holder: Uint8Array): WasmSession;\n  };\n  sdkInspectWarrant(wire: string): WasmInspect;\n  sdkInspectParts(payloadHex: string, signatureHex: string): WasmInspect;\n  sdkProtocolLimits(): WasmProtocolLimits;\n  sdkPublicKeyFromHolderKey(holderSecret: Uint8Array): string;\n  sdkSignApproval(\n    session: WasmSession,\n    tool: string,\n    args: unknown,\n    approverSecret: Uint8Array,\n    externalId: string,\n    asOf?: number,\n  ): string;\n  sdkSignApprovalForRequest(\n    requestHashHex: string,\n    approverSecret: Uint8Array,\n    externalId: string,\n    ttlSeconds?: number,\n    warrantExpiresAt?: number,\n  ): string;\n  sdkInspectApproval(envelope: string | Uint8Array): WasmApprovalInfo;\n  sdkSignRevocationList(ids: string[], issuerSecret: Uint8Array): string;\n  sdkSignRevocationListVersioned(ids: string[], version: number | undefined, issuerSecret: Uint8Array): string;\n  sdkSignPublishedRevocationList(ids: string[], version: number, issuerSecret: Uint8Array): string;\n  sdkInspectRevocationList(wire: string): WasmSrlInfo;\n  sdkVerifyReceipt(wire: string): WasmReceipt;\n  sdkVerifyReceiptChain(wire: string, roots: string[]): WasmReceiptChain;\n  approval_requirement(\n    warrantB64: string,\n    tool: string,\n    args: unknown,\n  ): ApprovalRequirement & { error?: string };\n  inspect_approval_gate(\n    warrantB64: string,\n    tool: string,\n  ): ApprovalGateInspection & { error?: string };\n  evaluate_approval_gates(\n    warrantB64: string,\n    tool: string,\n    args: unknown,\n  ): { approval_required: boolean; tool: string; error?: string };\n  parse_strict_json(jsonText: string): void;\n};\n\nlet loaded: Generated | undefined;\n\nfunction generatedPath(): string {\n  const here = dirname(fileURLToPath(import.meta.url));\n  return join(here, \"generated\", \"tenuo_wasm.js\");\n}\n\nexport function wasmAvailable(): boolean {\n  return existsSync(generatedPath());\n}\n\nconst WASM_LOAD_HINT =\n  \"WASM core is missing from this @tenuo/core install. @tenuo/core is Node 20+ only (not a bundler target). If this is Next.js/webpack, set serverExternalPackages: ['@tenuo/core']. Do not run wasm-pack in the consuming app.\";\n\nexport function loadWasm(): Generated {\n  if (loaded) {\n    return loaded;\n  }\n  const path = generatedPath();\n  if (!existsSync(path)) {\n    throw new TenuoConfigurationError(WASM_LOAD_HINT, \"TENUO_NOT_READY\");\n  }\n  try {\n    const require = createRequire(import.meta.url);\n    loaded = require(path) as Generated;\n    return loaded;\n  } catch (error) {\n    const wrapped = new TenuoConfigurationError(WASM_LOAD_HINT, \"TENUO_NOT_READY\");\n    wrapped.cause = error;\n    throw wrapped;\n  }\n}\n\nexport function createDevContext(receiptSigner?: Uint8Array): WasmContext {\n  const { SdkContext } = loadWasm();\n  let context: WasmContext = new SdkContext();\n  if (receiptSigner !== undefined) {\n    context = context.withReceiptSigner(receiptSigner);\n  }\n  return context;\n}\n\nexport function protocolLimits(): WasmProtocolLimits {\n  return loadWasm().sdkProtocolLimits();\n}\n\nexport function createVerifierContext(\n  rootHexes: readonly string[],\n  revocationList?: string,\n  receiptSigner?: Uint8Array,\n): WasmContext {\n  const { SdkContext } = loadWasm();\n  let context = SdkContext.fromTrustedRoots([...rootHexes]);\n  if (receiptSigner !== undefined) {\n    context = context.withReceiptSigner(receiptSigner);\n  }\n  if (revocationList !== undefined && revocationList.length > 0) {\n    context.loadRevocationList(revocationList);\n  }\n  return context;\n}\n\nexport function createIssuerContext(\n  secret: Uint8Array,\n  extraRootHexes: readonly string[],\n  receiptSigner?: Uint8Array,\n): WasmContext {\n  const { SdkContext } = loadWasm();\n  let context = SdkContext.fromIssuerSecret(secret, [...extraRootHexes]);\n  if (receiptSigner !== undefined) {\n    context = context.withReceiptSigner(receiptSigner);\n  }\n  return context;\n}\n\nexport function importSessionFromWire(warrant: string, holderKey: Uint8Array): WasmSession {\n  const { SdkSession } = loadWasm();\n  return SdkSession.fromWire(warrant, holderKey);\n}\n\nexport function importSessionFromParts(\n  payloadHex: string,\n  signatureHex: string,\n  holderKey: Uint8Array,\n): WasmSession {\n  const { SdkSession } = loadWasm();\n  return SdkSession.fromParts(payloadHex, signatureHex, holderKey);\n}\n\nexport function importSessionFromChain(parts: unknown, holderKey: Uint8Array): WasmSession {\n  const { SdkSession } = loadWasm();\n  return SdkSession.fromChain(parts, holderKey);\n}\n\nexport function inspectWarrant(wire: string): WasmInspect {\n  return loadWasm().sdkInspectWarrant(wire);\n}\n\nexport function inspectParts(payloadHex: string, signatureHex: string): WasmInspect {\n  return loadWasm().sdkInspectParts(payloadHex, signatureHex);\n}\n\n/** Hex public key for a 32-byte holder secret. Ed25519, derived in Rust. */\nexport function publicKeyHexFromHolderKey(holderSecret: Uint8Array): string {\n  return loadWasm().sdkPublicKeyFromHolderKey(holderSecret);\n}\n\nexport type ApprovalRequirementStatus = \"not_gated\" | \"exempt\" | \"required\" | \"denied\";\n\nexport type ApprovalRequirement = {\n  status: ApprovalRequirementStatus;\n  tool: string;\n  kind?: \"whole_tool\" | \"argument\";\n  argument?: string;\n  arguments: string[];\n  message?: string;\n  code?: string;\n  reason?: string;\n};\n\nexport type ApprovalGateInspection = {\n  kind: \"none\" | \"whole_tool\" | \"conditional\" | \"unknown\";\n  tool: string;\n  arguments: string[];\n  message?: string;\n};\n\nfunction loadApprovalWasm() {\n  return loadWasm();\n}\n\nfunction throwIfGateError(error: string | undefined): void {\n  if (error) {\n    throw new TenuoConfigurationError(error);\n  }\n}\n\n/**\n * Parse JSON text and reject a repeated key in any object.\n *\n * `verify()` receives an object the host already parsed. A duplicate key is\n * gone by then. Call this while the text is still available. After the check,\n * the value is `JSON.parse` of the original text, so each key is an own data\n * property and `null` stays `null`.\n */\nexport function parseStrictJson(text: string): unknown {\n  loadWasm().parse_strict_json(text);\n  return JSON.parse(text);\n}\n\n/**\n * Typed preflight of a warrant's approval gates for `(tool, args)`.\n *\n * Capability constraints are checked first. `denied` means the authorizer\n * will refuse the call — do not collect approval. Malformed encodings throw\n * (fail-closed).\n */\nexport function approvalRequirement(\n  warrantB64: string,\n  tool: string,\n  args: Record<string, unknown>,\n): ApprovalRequirement {\n  const result = loadApprovalWasm().approval_requirement(warrantB64, tool, args);\n  throwIfGateError(result.error);\n  return result;\n}\n\n/** Inspect how a warrant gates `tool`, without evaluating arguments. */\nexport function inspectApprovalGate(warrantB64: string, tool: string): ApprovalGateInspection {\n  const result = loadApprovalWasm().inspect_approval_gate(warrantB64, tool);\n  throwIfGateError(result.error);\n  return result;\n}\n\n/**\n * Gate-map-only boolean. Does not run capability checks, so split-view\n * callers (PoP args vs constraint args) still see a firing gate. Prefer\n * {@link approvalRequirement} when the caller must distinguish `denied`.\n */\nexport function evaluateApprovalGates(\n  warrantB64: string,\n  tool: string,\n  args: Record<string, unknown>,\n): boolean {\n  const result = loadApprovalWasm().evaluate_approval_gates(warrantB64, tool, args);\n  throwIfGateError(result.error);\n  return result.approval_required;\n}\n"]}
+{"version":3,"file":"wasm.js","sourceRoot":"","sources":["../src/wasm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AA2XtD,IAAI,MAA6B,CAAC;AAElC,SAAS,aAAa;IACpB,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,cAAc,GAClB,8NAA8N,CAAC;AAEjO,MAAM,UAAU,QAAQ;IACtB,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,uBAAuB,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,OAAO,CAAC,IAAI,CAAc,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,IAAI,uBAAuB,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;QAC/E,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,aAA0B;IACzD,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,IAAI,OAAO,GAAgB,IAAI,UAAU,EAAE,CAAC;IAC5C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,QAAQ,EAAE,CAAC,iBAAiB,EAAE,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAA4B,EAC5B,cAAuB,EACvB,aAA0B;IAE1B,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;IAC1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAkB,EAClB,cAAiC,EACjC,aAA0B;IAE1B,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;IACvE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,SAAqB;IAC1E,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,YAAoB,EACpB,SAAqB;IAErB,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,OAAO,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,SAAqB;IAC1E,MAAM,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,CAAC;IAClC,OAAO,UAAU,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,QAAQ,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,IAAY,EACZ,IAAa;IAEb,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAkB,EAAE,YAAoB;IACnE,OAAO,QAAQ,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAC9D,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,yBAAyB,CAAC,YAAwB;IAChE,OAAO,QAAQ,EAAE,CAAC,yBAAyB,CAAC,YAAY,CAAC,CAAC;AAC5D,CAAC;AAsBD,SAAS,gBAAgB;IACvB,OAAO,QAAQ,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,QAAQ,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAwB,EAAE,OAAe;IAClE,OAAO,QAAQ,EAAE,CAAC,aAAa,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,IAAY,EACZ,IAA6B;IAE7B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/E,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,mBAAmB,CAAC,UAAkB,EAAE,IAAY;IAClE,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAC1E,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,IAAY,EACZ,IAA6B;IAE7B,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC,uBAAuB,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAClF,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,iBAAiB,CAAC;AAClC,CAAC","sourcesContent":["import { createRequire } from \"node:module\";\nimport { existsSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { fileURLToPath } from \"node:url\";\nimport { TenuoConfigurationError } from \"./errors.ts\";\nimport type { TenuoErrorCode } from \"./api.ts\";\n\nexport type WasmDecision = {\n  outcome: \"allow\" | \"deny\" | \"approval_required\";\n  code?: TenuoErrorCode;\n  field?: string;\n  message?: string;\n  args?: Record<string, unknown>;\n  tool?: string;\n  required?: number;\n  received?: number;\n  receipt?: string;\n};\n\nexport type WasmInspect = {\n  payload_hex: string;\n  signature_hex: string;\n  id: string;\n};\n\nexport type ConstraintViolationKind =\n  | \"tool_not_authorized\"\n  | \"unknown_field\"\n  | \"missing_required\"\n  | \"constraint_mismatch\";\n\nexport type ConstraintDiagnostics = {\n  closedWorld: boolean;\n  violations: Array<{\n    field: string;\n    kind: ConstraintViolationKind;\n    reason: string;\n  }>;\n};\n\ntype WasmConstraintDiagnostics = Omit<ConstraintDiagnostics, \"closedWorld\"> & {\n  closed_world: boolean;\n};\n\nexport type WasmReceipt = {\n  authentic: true;\n  /** Hex key the receipt is signed under — resolve against your authorizer set. */\n  signer_key: string;\n  outcome: \"allow\" | \"deny\";\n  action: string;\n  decision_code?: string;\n  request_id: string;\n  /** Version of the revocation list in force, when it carried one. */\n  srl_version?: number;\n  /**\n   * SHA-256 (hex) of the revocation list bytes in force at decision time.\n   * Absent means no revocation data was loaded — a different claim from a\n   * loaded list that revoked nothing.\n   */\n  srl_hash?: string;\n  /**\n   * SHA-256 (hex) commitment to the canonical invocation this decision was\n   * made over. Absent when the arguments could not be canonicalized — never\n   * zero-filled, so absence is a claim rather than a value.\n   */\n  request_hash?: string;\n  /** SHA-256 (hex) of the host ceiling applied to this decision. */\n  policy_definition_hash?: string;\n  /**\n   * SHA-256 (hex) of the previous receipt from this signer. Absent on the\n   * first receipt, or when the deployment does not chain. A broken link means\n   * a receipt was removed from the stream.\n   */\n  prev_receipt_hash?: string;\n  /** SHA-256 (hex) of the trusted root set in force at decision time. */\n  trusted_roots_hash?: string;\n};\n\nexport type WasmReceiptChain = {\n  signer_key: string;\n  outcome: \"allow\" | \"deny\";\n  decision_code?: string;\n  timestamp: number;\n  /** The embedded chain verifies to a supplied root at the decision instant. */\n  chain_valid: boolean;\n  /** Canonical error name when it does not. */\n  chain_error?: string;\n  /**\n   * Deny receipts only: the chain failure matches the stated decision_code,\n   * so the embedded authority independently corroborates the refusal.\n   */\n  corroborates_denial?: boolean;\n  root_issuer?: string;\n  leaf_holder?: string;\n};\n\nexport type WasmSession = object;\n\n/** Mirrors `SessionInfoDto` in tenuo-wasm. Snake case is the WASM boundary. */\nexport type WasmSessionInfo = {\n  kind: \"execution\" | \"issuer\";\n  holder_public_key: string;\n  root_public_key: string;\n  depth: number;\n  max_depth: number;\n  terminal: boolean;\n  expires_at: number;\n  tools: string[];\n  warrant_ids: string[];\n  can_authorize: boolean;\n  clearance?: number;\n  session_id?: string;\n  agent_id?: string;\n  issuable_tools?: string[];\n  max_issue_depth?: number;\n  required_approvers?: string[];\n  min_approvals?: number;\n  approval_gated_tools: string[];\n};\n\n/** Security limits exported by tenuo-core; TypeScript must not redefine them. */\nexport type WasmProtocolLimits = {\n  max_delegation_depth: number;\n  max_warrant_ttl_seconds: number;\n};\n\n/** Mirrors `NarrowOptions` in tenuo-wasm. Unknown keys are rejected there. */\nexport type WasmNarrowOptions = {\n  holder?: string;\n  ttlSeconds?: number;\n  terminal?: boolean;\n  maxDepth?: number;\n  clearance?: number | string;\n  agentId?: string;\n  addApprovers?: string[];\n  minApprovals?: number;\n};\n\nexport type WasmRequireApproval = {\n  approvers: string[];\n  min: number;\n  tools?: string[];\n  gates?: Record<string, { message?: string; args?: Record<string, unknown> }>;\n};\n\n/** Mirrors `MintOptions` in tenuo-wasm. */\nexport type WasmMintOptions = {\n  kind?: \"execution\" | \"issuer\";\n  allow?: unknown;\n  ttlSeconds?: number;\n  holder?: string;\n  maxDepth?: number;\n  clearance?: number | string;\n  sessionId?: string;\n  agentId?: string;\n  requireApproval?: WasmRequireApproval;\n  issuableTools?: string[];\n  constraintBounds?: unknown;\n  maxIssueDepth?: number;\n};\n\n/** Mirrors `IssueOptions` in tenuo-wasm. */\nexport type WasmIssueOptions = {\n  allow: unknown;\n  holder: string;\n  ttlSeconds?: number;\n  maxDepth?: number;\n  clearance?: number | string;\n  sessionId?: string;\n  agentId?: string;\n  requireApproval?: { approvers: string[]; min: number };\n};\n\nexport type WasmExplainField = {\n  field: string;\n  kind: string;\n  constraint: unknown;\n  value?: unknown;\n  satisfied: boolean;\n  reason_code?: string;\n  reason?: string;\n};\n\nexport type WasmExplain = {\n  tool: string;\n  kind: \"execution\" | \"issuer\";\n  outcome: \"allow\" | \"deny\";\n  code?: TenuoErrorCode;\n  field?: string;\n  message?: string;\n  tool_granted: boolean;\n  fields: WasmExplainField[];\n  unknown_fields: string[];\n  missing_fields: string[];\n  expired: boolean;\n  expires_at: number;\n  chain_valid: boolean;\n  chain_error?: TenuoErrorCode;\n};\n\nexport type WasmApprovalRequest = {\n  request_id: string;\n  warrant_id: string;\n  tool: string;\n  args: Record<string, unknown>;\n  request_hash: string;\n  holder_public_key: string;\n  required_approvers: string[];\n  min_approvals: number;\n  warrant_expires_at: number;\n  created_at: number;\n  message: string;\n};\n\nexport type WasmAttestation = {\n  version: number;\n  canonicalization: string;\n  warrant_id: string;\n  tool: string;\n  request_hash: string;\n  holder_key_hex: string;\n  args_canonical_cbor_b64: string;\n  signer_key_hex: string;\n  signature_b64: string;\n};\n\nexport type WasmApprovalInfo = {\n  approver_public_key: string;\n  request_hash: string;\n  nonce: string;\n  external_id: string;\n  approved_at: number;\n  expires_at: number;\n  expired: boolean;\n  signature_valid: boolean;\n  error?: string;\n};\n\nexport type WasmSrlInfo = {\n  version: number;\n  issued_at: number;\n  issuer_public_key: string;\n  revoked_ids: string[];\n  signature_valid: boolean;\n};\n\nexport type WasmContext = {\n  withReceiptSigner(secret: Uint8Array): WasmContext;\n  mint(\n    allow: unknown,\n    ttlSeconds: number,\n    requireApproval?: unknown,\n    holderHex?: string,\n    maxDepth?: number,\n  ): WasmSession;\n  mintExtended(options: WasmMintOptions): WasmSession;\n  narrow(session: WasmSession, allow: unknown, options?: WasmNarrowOptions): WasmSession;\n  issue(issuer: WasmSession, options: WasmIssueOptions): WasmSession;\n  issuerPublicKey(): string;\n  explain(session: WasmSession, tool: string, args: unknown): WasmExplain;\n  approvalRequest(session: WasmSession, tool: string, args: unknown): WasmApprovalRequest;\n  approvalContextAttestation(session: WasmSession, tool: string, args: unknown): WasmAttestation;\n  signRevocationListVersioned(ids: string[], version?: number): string;\n  authorize(\n    session: WasmSession,\n    tool: string,\n    args: unknown,\n    approvals?: unknown,\n    toolAllow?: unknown,\n    requestId?: string,\n  ): WasmDecision;\n  authorizeAsOf(\n    session: WasmSession,\n    tool: string,\n    args: unknown,\n    asOf: number,\n    approvals?: unknown,\n    toolAllow?: unknown,\n  ): WasmDecision;\n  loadRevocationList(srl: string): void;\n  signRevocationList(ids: string[]): string;\n  signPop(session: WasmSession, tool: string, args: unknown): string;\n  signMeta(\n    session: WasmSession,\n    tool: string,\n    argsJson: string,\n    timestamp: number,\n    approvals?: unknown,\n  ): { warrant: string; signature: string; approvals?: string[] };\n  /** Holder proof only; does not authorize execution. */\n  verifyMetaPop(\n    warrant: string,\n    signature: string,\n    tool: string,\n    argsJson: string,\n    timestamp: number,\n  ): boolean;\n  /** Compatibility alias for verifyMetaPop. */\n  verifyMeta(\n    warrant: string,\n    signature: string,\n    tool: string,\n    argsJson: string,\n    timestamp: number,\n  ): boolean;\n  authorizePresented(\n    warrants: unknown,\n    tool: string,\n    args: unknown,\n    pop: string,\n    approvals?: unknown,\n    toolAllow?: unknown,\n    requestId?: string,\n  ): WasmDecision;\n};\n\ntype Generated = {\n  SdkContext: {\n    new (): WasmContext;\n    fromTrustedRoots(roots: string[]): WasmContext;\n    fromIssuerSecret(secret: Uint8Array, extraRoots?: string[]): WasmContext;\n  };\n  SdkSession: {\n    fromWire(warrant: string, holder: Uint8Array): WasmSession;\n    fromParts(payloadHex: string, signatureHex: string, holder: Uint8Array): WasmSession;\n    fromChain(parts: unknown, holder: Uint8Array): WasmSession;\n  };\n  sdkInspectWarrant(wire: string): WasmInspect;\n  sdkDiagnoseConstraints(wire: string, tool: string, args: unknown): WasmConstraintDiagnostics;\n  sdkInspectParts(payloadHex: string, signatureHex: string): WasmInspect;\n  sdkProtocolLimits(): WasmProtocolLimits;\n  sdkPublicKeyFromHolderKey(holderSecret: Uint8Array): string;\n  sdkSignApproval(\n    session: WasmSession,\n    tool: string,\n    args: unknown,\n    approverSecret: Uint8Array,\n    externalId: string,\n    asOf?: number,\n  ): string;\n  sdkSignApprovalForRequest(\n    requestHashHex: string,\n    approverSecret: Uint8Array,\n    externalId: string,\n    ttlSeconds?: number,\n    warrantExpiresAt?: number,\n  ): string;\n  sdkInspectApproval(envelope: string | Uint8Array): WasmApprovalInfo;\n  sdkSignRevocationList(ids: string[], issuerSecret: Uint8Array): string;\n  sdkSignRevocationListVersioned(ids: string[], version: number | undefined, issuerSecret: Uint8Array): string;\n  sdkSignPublishedRevocationList(ids: string[], version: number, issuerSecret: Uint8Array): string;\n  sdkInspectRevocationList(wire: string): WasmSrlInfo;\n  sdkVerifyReceipt(wire: string): WasmReceipt;\n  sdkVerifyReceiptChain(wire: string, roots: string[]): WasmReceiptChain;\n  approval_requirement(\n    warrantB64: string,\n    tool: string,\n    args: unknown,\n  ): ApprovalRequirement & { error?: string };\n  inspect_approval_gate(\n    warrantB64: string,\n    tool: string,\n  ): ApprovalGateInspection & { error?: string };\n  evaluate_approval_gates(\n    warrantB64: string,\n    tool: string,\n    args: unknown,\n  ): { approval_required: boolean; tool: string; error?: string };\n  parse_strict_json(jsonText: string): void;\n  shlex_inspect(allow: string[], command: string): ShlexCheck;\n};\n\n/** Decision from the core Shlex check. The same object Python `Shlex.check` returns. */\nexport interface ShlexCheck {\n  allowed: boolean;\n  reason: string;\n  tokens: string[];\n  operators: string[];\n  expansion: string[];\n  controls: string[];\n  binary_allowed: boolean;\n}\n\nlet loaded: Generated | undefined;\n\nfunction generatedPath(): string {\n  const here = dirname(fileURLToPath(import.meta.url));\n  return join(here, \"generated\", \"tenuo_wasm.js\");\n}\n\nexport function wasmAvailable(): boolean {\n  return existsSync(generatedPath());\n}\n\nconst WASM_LOAD_HINT =\n  \"WASM core is missing from this @tenuo/core install. @tenuo/core is Node 20+ only (not a bundler target). If this is Next.js/webpack, set serverExternalPackages: ['@tenuo/core']. Do not run wasm-pack in the consuming app.\";\n\nexport function loadWasm(): Generated {\n  if (loaded) {\n    return loaded;\n  }\n  const path = generatedPath();\n  if (!existsSync(path)) {\n    throw new TenuoConfigurationError(WASM_LOAD_HINT, \"TENUO_NOT_READY\");\n  }\n  try {\n    const require = createRequire(import.meta.url);\n    loaded = require(path) as Generated;\n    return loaded;\n  } catch (error) {\n    const wrapped = new TenuoConfigurationError(WASM_LOAD_HINT, \"TENUO_NOT_READY\");\n    wrapped.cause = error;\n    throw wrapped;\n  }\n}\n\nexport function createDevContext(receiptSigner?: Uint8Array): WasmContext {\n  const { SdkContext } = loadWasm();\n  let context: WasmContext = new SdkContext();\n  if (receiptSigner !== undefined) {\n    context = context.withReceiptSigner(receiptSigner);\n  }\n  return context;\n}\n\nexport function protocolLimits(): WasmProtocolLimits {\n  return loadWasm().sdkProtocolLimits();\n}\n\nexport function createVerifierContext(\n  rootHexes: readonly string[],\n  revocationList?: string,\n  receiptSigner?: Uint8Array,\n): WasmContext {\n  const { SdkContext } = loadWasm();\n  let context = SdkContext.fromTrustedRoots([...rootHexes]);\n  if (receiptSigner !== undefined) {\n    context = context.withReceiptSigner(receiptSigner);\n  }\n  if (revocationList !== undefined && revocationList.length > 0) {\n    context.loadRevocationList(revocationList);\n  }\n  return context;\n}\n\nexport function createIssuerContext(\n  secret: Uint8Array,\n  extraRootHexes: readonly string[],\n  receiptSigner?: Uint8Array,\n): WasmContext {\n  const { SdkContext } = loadWasm();\n  let context = SdkContext.fromIssuerSecret(secret, [...extraRootHexes]);\n  if (receiptSigner !== undefined) {\n    context = context.withReceiptSigner(receiptSigner);\n  }\n  return context;\n}\n\nexport function importSessionFromWire(warrant: string, holderKey: Uint8Array): WasmSession {\n  const { SdkSession } = loadWasm();\n  return SdkSession.fromWire(warrant, holderKey);\n}\n\nexport function importSessionFromParts(\n  payloadHex: string,\n  signatureHex: string,\n  holderKey: Uint8Array,\n): WasmSession {\n  const { SdkSession } = loadWasm();\n  return SdkSession.fromParts(payloadHex, signatureHex, holderKey);\n}\n\nexport function importSessionFromChain(parts: unknown, holderKey: Uint8Array): WasmSession {\n  const { SdkSession } = loadWasm();\n  return SdkSession.fromChain(parts, holderKey);\n}\n\nexport function inspectWarrant(wire: string): WasmInspect {\n  return loadWasm().sdkInspectWarrant(wire);\n}\n\n/**\n * List every capability-constraint failure in deterministic order.\n * Diagnostic only: this does not verify signatures, expiry, revocation,\n * approvals, or proof-of-possession, and must not be used to authorize.\n */\nexport function diagnoseConstraints(\n  wire: string,\n  tool: string,\n  args: unknown,\n): ConstraintDiagnostics {\n  const result = loadWasm().sdkDiagnoseConstraints(wire, tool, args);\n  return { closedWorld: result.closed_world, violations: result.violations };\n}\n\nexport function inspectParts(payloadHex: string, signatureHex: string): WasmInspect {\n  return loadWasm().sdkInspectParts(payloadHex, signatureHex);\n}\n\n/** Hex public key for a 32-byte holder secret. Ed25519, derived in Rust. */\nexport function publicKeyHexFromHolderKey(holderSecret: Uint8Array): string {\n  return loadWasm().sdkPublicKeyFromHolderKey(holderSecret);\n}\n\nexport type ApprovalRequirementStatus = \"not_gated\" | \"exempt\" | \"required\" | \"denied\";\n\nexport type ApprovalRequirement = {\n  status: ApprovalRequirementStatus;\n  tool: string;\n  kind?: \"whole_tool\" | \"argument\";\n  argument?: string;\n  arguments: string[];\n  message?: string;\n  code?: string;\n  reason?: string;\n};\n\nexport type ApprovalGateInspection = {\n  kind: \"none\" | \"whole_tool\" | \"conditional\" | \"unknown\";\n  tool: string;\n  arguments: string[];\n  message?: string;\n};\n\nfunction loadApprovalWasm() {\n  return loadWasm();\n}\n\nfunction throwIfGateError(error: string | undefined): void {\n  if (error) {\n    throw new TenuoConfigurationError(error);\n  }\n}\n\n/**\n * Parse JSON text and reject a repeated key in any object.\n *\n * `verify()` receives an object the host already parsed. A duplicate key is\n * gone by then. Call this while the text is still available. After the check,\n * the value is `JSON.parse` of the original text, so each key is an own data\n * property and `null` stays `null`.\n */\nexport function parseStrictJson(text: string): unknown {\n  loadWasm().parse_strict_json(text);\n  return JSON.parse(text);\n}\n\n/**\n * The core's Shlex decision for one command.\n *\n * `allow` is the binary allowlist. Each entry matches the command word\n * literally, and any command word containing `..` is rejected. The reason is\n * the same string the warrant uses.\n */\nexport function checkShlex(allow: readonly string[], command: string): ShlexCheck {\n  return loadWasm().shlex_inspect([...allow], command);\n}\n\n/**\n * Typed preflight of a warrant's approval gates for `(tool, args)`.\n *\n * Capability constraints are checked first. `denied` means the authorizer\n * will refuse the call — do not collect approval. Malformed encodings throw\n * (fail-closed).\n */\nexport function approvalRequirement(\n  warrantB64: string,\n  tool: string,\n  args: Record<string, unknown>,\n): ApprovalRequirement {\n  const result = loadApprovalWasm().approval_requirement(warrantB64, tool, args);\n  throwIfGateError(result.error);\n  return result;\n}\n\n/** Inspect how a warrant gates `tool`, without evaluating arguments. */\nexport function inspectApprovalGate(warrantB64: string, tool: string): ApprovalGateInspection {\n  const result = loadApprovalWasm().inspect_approval_gate(warrantB64, tool);\n  throwIfGateError(result.error);\n  return result;\n}\n\n/**\n * Gate-map-only boolean. Does not run capability checks, so split-view\n * callers (PoP args vs constraint args) still see a firing gate. Prefer\n * {@link approvalRequirement} when the caller must distinguish `denied`.\n */\nexport function evaluateApprovalGates(\n  warrantB64: string,\n  tool: string,\n  args: Record<string, unknown>,\n): boolean {\n  const result = loadApprovalWasm().evaluate_approval_gates(warrantB64, tool, args);\n  throwIfGateError(result.error);\n  return result.approval_required;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tenuo/core",
-  "version": "0.3.3-beta.0",
+  "version": "0.3.4-beta.0",
   "description": "Task-scoped authorization for AI agents in TypeScript: signed warrants limit which tools an agent can call and with which arguments, verified by the Tenuo Rust core compiled to WASM (beta).",
   "license": "Apache-2.0",
   "author": "Tenuo Contributors",
@@ -55,7 +55,7 @@
     "typecheck": "tsc --noEmit",
     "build": "tsc -p tsconfig.build.json && node scripts/copy-build-assets.mjs && node scripts/write-build-info.mjs",
     "pack:smoke": "node scripts/pack-smoke.mjs",
-    "publish:npm": "npm publish --access public --provenance --tag beta",
+    "publish:npm": "node ../../scripts/npm-release-policy.mjs publish .",
     "build:wasm": "pnpm --dir ../.. build:wasm"
   },
   "engines": {