@weaveprotocol/core 0.1.0

package/dist/validation/crypto-gate.js

@@ -0,0 +1,37 @@
+import { utf8Encode, base64UrlDecode } from '../utils/encoding.js';
+import { canonicalize, getExpressionId, signedPart } from '../schema/expression.js';
+/**
+ * Creates a gate that performs cryptographic validation of expressions.
+ * @param provider The cryptographic provider to use.
+ * @returns A CryptoGate instance.
+ */
+export function createCryptoGate(provider) {
+    return {
+        async validate(expression, resolvePublicKey) {
+            try {
+                // Only the unsigned payload is signed — the id is a hash of it, and
+                // neither signature is part of what was hashed.
+                const { id, signature } = expression;
+                const unsignedPayload = signedPart(expression);
+                const expectedId = await getExpressionId(unsignedPayload);
+                if (id !== expectedId) {
+                    return { passed: false, gate: 'crypto', reason: 'Expression id does not match its content' };
+                }
+                const data = utf8Encode(canonicalize(unsignedPayload));
+                const publicKey = await resolvePublicKey(expression.author);
+                const sigBytes = base64UrlDecode(signature);
+                const isValid = await provider.verify(publicKey, sigBytes, data);
+                if (isValid) {
+                    return { passed: true, gate: 'crypto' };
+                }
+                else {
+                    return { passed: false, gate: 'crypto', reason: 'Signature verification failed' };
+                }
+            }
+            catch (err) {
+                return { passed: false, gate: 'crypto', reason: err.message || 'Unknown crypto error' };
+            }
+        }
+    };
+}
+//# sourceMappingURL=crypto-gate.js.map

package/dist/validation/crypto-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-gate.js","sourceRoot":"","sources":["../../src/validation/crypto-gate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAYpF;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAwB;IACvD,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,UAAsB,EAAE,gBAAqD;YAC1F,IAAI,CAAC;gBACH,oEAAoE;gBACpE,gDAAgD;gBAChD,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,UAAU,CAAC;gBACrC,MAAM,eAAe,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;gBAE/C,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAC;gBAC1D,IAAI,EAAE,KAAK,UAAU,EAAE,CAAC;oBACtB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;gBAC/F,CAAC;gBAED,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;gBAEvD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAC5D,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAU,CAAC,CAAC;gBAE7C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACjE,IAAI,OAAO,EAAE,CAAC;oBACZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC1C,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,EAAE,CAAC;gBACpF,CAAC;YACH,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,sBAAsB,EAAE,CAAC;YAC1F,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/validation/index.d.ts

@@ -0,0 +1,6 @@
+export * from './crypto-gate.js';
+export * from './structural-gate.js';
+export * from './stateful-gate.js';
+export * from './validation-engine.js';
+export * from './capability-gate.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}

package/dist/validation/index.js

@@ -0,0 +1,6 @@
+export * from './crypto-gate.js';
+export * from './structural-gate.js';
+export * from './stateful-gate.js';
+export * from './validation-engine.js';
+export * from './capability-gate.js';
+//# sourceMappingURL=index.js.map

package/dist/validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/validation/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,sBAAsB,CAAC"}

package/dist/validation/stateful-gate.d.ts

@@ -0,0 +1,15 @@
+import { Expression } from '../types.js';
+import { GateResult } from './crypto-gate.js';
+export interface StateContext {
+    readonly getExpression: (id: string) => Promise<Expression | null>;
+}
+export interface StatefulGate {
+    registerRule(collection: string, wasmBytes: Uint8Array): Promise<void>;
+    validate(expression: Expression, context: StateContext): Promise<GateResult>;
+}
+/**
+ * Creates a WebAssembly-based stateful validation gate.
+ * @returns A StatefulGate instance.
+ */
+export declare function createStatefulGate(): StatefulGate;
+//# sourceMappingURL=stateful-gate.d.ts.map

package/dist/validation/stateful-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stateful-gate.d.ts","sourceRoot":"","sources":["../../src/validation/stateful-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC9E;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAsDjD"}

package/dist/validation/stateful-gate.js

@@ -0,0 +1,50 @@
+import { utf8Encode } from '../utils/encoding.js';
+/**
+ * Creates a WebAssembly-based stateful validation gate.
+ * @returns A StatefulGate instance.
+ */
+export function createStatefulGate() {
+    const rules = new Map();
+    return {
+        async registerRule(collection, wasmBytes) {
+            const module = await WebAssembly.compile(wasmBytes);
+            const instance = await WebAssembly.instantiate(module, {
+                env: {
+                    abort: () => { throw new Error('Wasm aborted'); }
+                }
+            });
+            rules.set(collection, instance);
+        },
+        async validate(expression, _context) {
+            const instance = rules.get(expression.collection);
+            if (!instance) {
+                return { passed: true, gate: 'stateful' };
+            }
+            try {
+                const { validate: wasmValidate, memory } = instance.exports;
+                if (typeof wasmValidate !== 'function' || !memory) {
+                    return { passed: false, gate: 'stateful', reason: 'Invalid WASM exports' };
+                }
+                const json = JSON.stringify(expression);
+                const bytes = utf8Encode(json);
+                let ptr = 0;
+                if (instance.exports.alloc) {
+                    ptr = instance.exports.alloc(bytes.length);
+                }
+                const memView = new Uint8Array(memory.buffer);
+                memView.set(bytes, ptr);
+                const result = wasmValidate(ptr, bytes.length);
+                if (result === 0) {
+                    return { passed: true, gate: 'stateful' };
+                }
+                else {
+                    return { passed: false, gate: 'stateful', reason: `WASM validation failed with code ${result}` };
+                }
+            }
+            catch (err) {
+                return { passed: false, gate: 'stateful', reason: err.message || 'WASM execution error' };
+            }
+        }
+    };
+}
+//# sourceMappingURL=stateful-gate.js.map

package/dist/validation/stateful-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stateful-gate.js","sourceRoot":"","sources":["../../src/validation/stateful-gate.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAWlD;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IAEtD,OAAO;QACL,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,SAAqB;YAC1D,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,SAAyB,CAAC,CAAC;YACpE,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,MAAM,EAAE;gBACrD,GAAG,EAAE;oBACH,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;iBAClD;aACF,CAAC,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,UAAsB,EAAE,QAAsB;YAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAC5C,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAInD,CAAC;gBAEF,IAAI,OAAO,YAAY,KAAK,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;oBAClD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;gBAC7E,CAAC;gBAED,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBACxC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;gBAE/B,IAAI,GAAG,GAAG,CAAC,CAAC;gBACZ,IAAK,QAAQ,CAAC,OAAe,CAAC,KAAK,EAAE,CAAC;oBACpC,GAAG,GAAI,QAAQ,CAAC,OAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACtD,CAAC;gBAED,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAExB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gBAE/C,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;gBAC5C,CAAC;qBAAM,CAAC;oBACN,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,oCAAoC,MAAM,EAAE,EAAE,CAAC;gBACnG,CAAC;YACH,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,sBAAsB,EAAE,CAAC;YAC5F,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/validation/structural-gate.d.ts

@@ -0,0 +1,18 @@
+import { Expression } from '../types.js';
+import { SchemaEngine } from '../schema/schema-engine.js';
+import { GateResult } from './crypto-gate.js';
+export interface StructuralGate {
+    validate(expression: Expression): Promise<GateResult>;
+}
+export interface StructuralGateOptions {
+    /**
+     * Let through collections no schema is registered for. A node that stores
+     * data for apps it has never heard of — an always-on node, or a space an
+     * agent is extending — cannot know every shape, and rejecting what it does not
+     * recognise would make it refuse to keep other people's data. Signatures and
+     * capabilities are still checked. Default false.
+     */
+    readonly allowUnknownCollections?: boolean;
+}
+export declare function createStructuralGate(schemaEngine: SchemaEngine, options?: StructuralGateOptions): StructuralGate;
+//# sourceMappingURL=structural-gate.d.ts.map

package/dist/validation/structural-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"structural-gate.d.ts","sourceRoot":"","sources":["../../src/validation/structural-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACvD;AAsBD,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAC5C;AAED,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,GAAE,qBAA0B,GAAG,cAAc,CAkCpH"}

package/dist/validation/structural-gate.js

@@ -0,0 +1,54 @@
+import { checkVersionShape } from '../records/version.js';
+/**
+ * Creates a structural validation gate.
+ * @param schemaEngine The engine containing registered schemas.
+ * @returns A StructuralGate instance.
+ */
+/**
+ * Recognizes a body that has been encrypted for a private space.
+ * @param body The expression body
+ * @returns Whether it is an encryption envelope rather than plain content
+ */
+function isEncryptedBody(body) {
+    if (!body || typeof body !== 'object')
+        return false;
+    const envelope = body;
+    return (typeof envelope.ciphertext === 'string' &&
+        typeof envelope.iv === 'string' &&
+        typeof envelope.keyId === 'string');
+}
+export function createStructuralGate(schemaEngine, options = {}) {
+    return {
+        async validate(expression) {
+            try {
+                // A version must make sense on its own — key, seq and the links a later
+                // version carries — whatever the body says.
+                const malformed = checkVersionShape(expression);
+                if (malformed)
+                    return { passed: false, gate: 'structural', reason: malformed };
+                // Private-space bodies are encrypted before signing, so their shape can
+                // only be checked by a member after decryption. Non-members still relay
+                // them, and their signatures and capabilities are checked as usual.
+                if (isEncryptedBody(expression.body)) {
+                    return { passed: true, gate: 'structural' };
+                }
+                if (options.allowUnknownCollections && !schemaEngine.getCollection(expression.collection)) {
+                    return { passed: true, gate: 'structural' };
+                }
+                const result = await schemaEngine.validate(expression.collection, expression.body);
+                if (result.issues) {
+                    return {
+                        passed: false,
+                        gate: 'structural',
+                        reason: `Validation failed: ${result.issues.map(i => i.message).join(', ')}`
+                    };
+                }
+                return { passed: true, gate: 'structural' };
+            }
+            catch (err) {
+                return { passed: false, gate: 'structural', reason: err.message || 'Validation error' };
+            }
+        }
+    };
+}
+//# sourceMappingURL=structural-gate.js.map

package/dist/validation/structural-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structural-gate.js","sourceRoot":"","sources":["../../src/validation/structural-gate.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAM1D;;;;GAIG;AACH;;;;GAIG;AACH,SAAS,eAAe,CAAC,IAAa;IACpC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,QAAQ,GAAG,IAA+B,CAAC;IACjD,OAAO,CACL,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ;QACvC,OAAO,QAAQ,CAAC,EAAE,KAAK,QAAQ;QAC/B,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CACnC,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,oBAAoB,CAAC,YAA0B,EAAE,UAAiC,EAAE;IAClG,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,UAAsB;YACnC,IAAI,CAAC;gBACH,wEAAwE;gBACxE,4CAA4C;gBAC5C,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBAChD,IAAI,SAAS;oBAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;gBAE/E,wEAAwE;gBACxE,wEAAwE;gBACxE,oEAAoE;gBACpE,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;gBAC9C,CAAC;gBAED,IAAI,OAAO,CAAC,uBAAuB,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC1F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;gBAC9C,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;gBACnF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,OAAO;wBACL,MAAM,EAAE,KAAK;wBACb,IAAI,EAAE,YAAY;wBAClB,MAAM,EAAE,sBAAsB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBAC7E,CAAC;gBACJ,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,kBAAkB,EAAE,CAAC;YAC1F,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/validation/validation-engine.d.ts

@@ -0,0 +1,28 @@
+import { Expression } from '../types.js';
+import { CryptoGate, GateResult } from './crypto-gate.js';
+import { StructuralGate } from './structural-gate.js';
+import { StatefulGate } from './stateful-gate.js';
+import { CapabilityGate } from './capability-gate.js';
+export interface ValidationEngineConfig {
+    readonly cryptoGate: CryptoGate;
+    readonly structuralGate: StructuralGate;
+    readonly statefulGate: StatefulGate;
+    /** Optional authorization gate — checks the author's UCAN chain */
+    readonly capabilityGate?: CapabilityGate;
+    readonly resolvePublicKey: (did: string) => Promise<CryptoKey>;
+    readonly getExpression: (id: string) => Promise<Expression | null>;
+}
+export interface ValidationResult {
+    readonly valid: boolean;
+    readonly gates: ReadonlyArray<GateResult>;
+}
+export interface ValidationEngine {
+    validate(expression: Expression): Promise<ValidationResult>;
+}
+/**
+ * Creates a three-gate validation engine pipeline.
+ * @param config Configuration for the validation engine.
+ * @returns A ValidationEngine instance.
+ */
+export declare function createValidationEngine(config: ValidationEngineConfig): ValidationEngine;
+//# sourceMappingURL=validation-engine.d.ts.map

package/dist/validation/validation-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-engine.d.ts","sourceRoot":"","sources":["../../src/validation/validation-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEtD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,mEAAmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/D,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC7D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,gBAAgB,CAiCvF"}

package/dist/validation/validation-engine.js

@@ -0,0 +1,38 @@
+/**
+ * Creates a three-gate validation engine pipeline.
+ * @param config Configuration for the validation engine.
+ * @returns A ValidationEngine instance.
+ */
+export function createValidationEngine(config) {
+    const { cryptoGate, structuralGate, statefulGate, capabilityGate, resolvePublicKey, getExpression } = config;
+    return {
+        async validate(expression) {
+            const gates = [];
+            // 1. Structural Gate
+            const structuralRes = await structuralGate.validate(expression);
+            gates.push(structuralRes);
+            if (!structuralRes.passed)
+                return { valid: false, gates };
+            // 2. Crypto Gate
+            const cryptoRes = await cryptoGate.validate(expression, resolvePublicKey);
+            gates.push(cryptoRes);
+            if (!cryptoRes.passed)
+                return { valid: false, gates };
+            // 3. Capability Gate — who signed it is settled, now: were they allowed to?
+            if (capabilityGate) {
+                const capabilityRes = await capabilityGate.validate(expression);
+                gates.push(capabilityRes);
+                if (!capabilityRes.passed)
+                    return { valid: false, gates };
+            }
+            // 4. Stateful Gate
+            const stateContext = { getExpression };
+            const statefulRes = await statefulGate.validate(expression, stateContext);
+            gates.push(statefulRes);
+            if (!statefulRes.passed)
+                return { valid: false, gates };
+            return { valid: true, gates };
+        }
+    };
+}
+//# sourceMappingURL=validation-engine.js.map

package/dist/validation/validation-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-engine.js","sourceRoot":"","sources":["../../src/validation/validation-engine.ts"],"names":[],"mappings":"AAyBA;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA8B;IACnE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAE7G,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,UAAsB;YACnC,MAAM,KAAK,GAAiB,EAAE,CAAC;YAE/B,qBAAqB;YACrB,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1B,IAAI,CAAC,aAAa,CAAC,MAAM;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAE1D,iBAAiB;YACjB,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,IAAI,CAAC,SAAS,CAAC,MAAM;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAEtD,4EAA4E;YAC5E,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;gBAChE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC1B,IAAI,CAAC,aAAa,CAAC,MAAM;oBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAC5D,CAAC;YAED,mBAAmB;YACnB,MAAM,YAAY,GAAG,EAAE,aAAa,EAAE,CAAC;YACvC,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;YAC1E,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,MAAM;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YAExD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,107 @@
+{
+  "name": "@weaveprotocol/core",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "Self-sovereign P2P protocol for the browser — identity, schemas, storage, networking, and gossip sync",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/leifriksheim/weave.git"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./identity": {
+      "import": "./dist/identity/index.js",
+      "types": "./dist/identity/index.d.ts"
+    },
+    "./schema": {
+      "import": "./dist/schema/index.js",
+      "types": "./dist/schema/index.d.ts"
+    },
+    "./storage": {
+      "import": "./dist/storage/index.js",
+      "types": "./dist/storage/index.d.ts"
+    },
+    "./network": {
+      "import": "./dist/network/index.js",
+      "types": "./dist/network/index.d.ts"
+    },
+    "./sync": {
+      "import": "./dist/sync/index.js",
+      "types": "./dist/sync/index.d.ts"
+    },
+    "./validation": {
+      "import": "./dist/validation/index.js",
+      "types": "./dist/validation/index.d.ts"
+    },
+    "./privacy": {
+      "import": "./dist/privacy/index.js",
+      "types": "./dist/privacy/index.d.ts"
+    },
+    "./node": {
+      "import": "./dist/node/index.js",
+      "types": "./dist/node/index.d.ts"
+    },
+    "./schemas": {
+      "import": "./dist/schemas/index.js",
+      "types": "./dist/schemas/index.d.ts"
+    },
+    "./session": {
+      "import": "./dist/session/index.js",
+      "types": "./dist/session/index.d.ts"
+    },
+    "./elements": {
+      "import": "./dist/elements/index.js",
+      "types": "./dist/elements/index.d.ts"
+    },
+    "./react": {
+      "import": "./dist/react/index.js",
+      "types": "./dist/react/index.d.ts"
+    }
+  },
+  "scripts": {
+    "dev": "node scripts/dev.mjs",
+    "weave": "node --env-file=cli/.env.dev --import tsx cli/src/main.ts",
+    "build": "rm -rf dist && tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "node --experimental-vm-modules --import tsx --test tests/**/*.test.ts",
+    "signal": "node server/signaling-server.mjs",
+    "prepublishOnly": "npm run build"
+  },
+  "devDependencies": {
+    "@types/react": "^19.3.0",
+    "@types/ws": "^8.18.1",
+    "tsx": "^4.19.0",
+    "typescript": "^5.6.0",
+    "ws": "^8.21.3",
+    "zod": "^4.6.5"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "@cfworker/json-schema": "^4.1.1",
+    "@noble/curves": "^2.4.0",
+    "@scure/base": "^2.4.0"
+  },
+  "peerDependencies": {
+    "react": ">=18"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}