@ziffer-io/mcp 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -0,0 +1,610 @@
1
+ THIRD-PARTY NOTICES for @ziffer-io/mcp
2
+
3
+ GENERATED FILE -- do not edit by hand.
4
+ Regenerate with: node tools/third-party-notices.mjs
5
+ tools/release-npm.sh refuses to publish when this file is out of date.
6
+
7
+ The LICENSE beside this file governs the ZIFFER SDK itself, which is
8
+ proprietary software of code75 SASU. The components below are third-party
9
+ open-source, are redistributed under their own licences, and those licences
10
+ govern them and prevail for those components only (SDK licence, section 5).
11
+ Each entry is read from the component as it is installed, at the version
12
+ this release resolves.
13
+
14
+ 99 component(s):
15
+
16
+ ----------------------------------------------------------------------------
17
+ @hono/node-server 2.1.1
18
+ licence: MIT
19
+ Copyright (c) 2022 - present, Yusuke Wada and Hono contributors
20
+ full text: LICENSE, as distributed in the package
21
+
22
+ ----------------------------------------------------------------------------
23
+ @modelcontextprotocol/sdk 1.30.0
24
+ licence: MIT
25
+ Copyright (c) 2024 Anthropic, PBC
26
+ full text: LICENSE, as distributed in the package
27
+
28
+ ----------------------------------------------------------------------------
29
+ @noble/ciphers 2.3.0
30
+ licence: MIT
31
+ Copyright (c) 2022 Paul Miller (https://paulmillr.com)
32
+ full text: LICENSE, as distributed in the package
33
+
34
+ ----------------------------------------------------------------------------
35
+ @noble/curves 2.3.0
36
+ licence: MIT
37
+ Copyright (c) 2022 Paul Miller (https://paulmillr.com)
38
+ full text: LICENSE, as distributed in the package
39
+
40
+ ----------------------------------------------------------------------------
41
+ @noble/hashes 2.3.0
42
+ licence: MIT
43
+ Copyright (c) 2022 Paul Miller (https://paulmillr.com)
44
+ full text: LICENSE, as distributed in the package
45
+
46
+ ----------------------------------------------------------------------------
47
+ @noble/post-quantum 0.7.0
48
+ licence: MIT
49
+ Copyright (c) 2024 Paul Miller (https://paulmillr.com)
50
+ full text: LICENSE, as distributed in the package
51
+
52
+ ----------------------------------------------------------------------------
53
+ @ziffer-io/client link:../acp-client
54
+ licence: SEE LICENSE IN LICENSE
55
+ Copyright (c) 2026 code75 SASU, Paris, France. All rights reserved.
56
+ full text: LICENSE, as distributed in the package
57
+
58
+ ----------------------------------------------------------------------------
59
+ @ziffer-io/types link:../types
60
+ licence: SEE LICENSE IN LICENSE
61
+ Copyright (c) 2026 code75 SASU, Paris, France. All rights reserved.
62
+ full text: LICENSE, as distributed in the package
63
+
64
+ ----------------------------------------------------------------------------
65
+ @ziffer-io/verify link:../acp-verify
66
+ licence: SEE LICENSE IN LICENSE
67
+ Copyright (c) 2026 code75 SASU, Paris, France. All rights reserved.
68
+ full text: LICENSE, as distributed in the package
69
+
70
+ ----------------------------------------------------------------------------
71
+ accepts 2.0.0
72
+ licence: MIT
73
+ Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
74
+ full text: LICENSE, as distributed in the package
75
+
76
+ ----------------------------------------------------------------------------
77
+ ajv 8.20.0
78
+ licence: MIT
79
+ Copyright (c) 2015-2021 Evgeny Poberezkin
80
+ full text: LICENSE, as distributed in the package
81
+
82
+ ----------------------------------------------------------------------------
83
+ ajv-formats 3.0.1
84
+ licence: MIT
85
+ Copyright (c) 2020 Evgeny Poberezkin
86
+ full text: LICENSE, as distributed in the package
87
+
88
+ ----------------------------------------------------------------------------
89
+ body-parser 2.3.0
90
+ licence: MIT
91
+ Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
92
+ full text: LICENSE, as distributed in the package
93
+
94
+ ----------------------------------------------------------------------------
95
+ bytes 3.1.2
96
+ licence: MIT
97
+ Copyright (c) 2012-2014 TJ Holowaychuk <tj@vision-media.ca>
98
+ full text: LICENSE, as distributed in the package
99
+
100
+ ----------------------------------------------------------------------------
101
+ call-bind-apply-helpers 1.0.2
102
+ licence: MIT
103
+ Copyright (c) 2024 Jordan Harband
104
+ full text: LICENSE, as distributed in the package
105
+
106
+ ----------------------------------------------------------------------------
107
+ call-bound 1.0.4
108
+ licence: MIT
109
+ Copyright (c) 2024 Jordan Harband
110
+ full text: LICENSE, as distributed in the package
111
+
112
+ ----------------------------------------------------------------------------
113
+ content-disposition 1.1.0
114
+ licence: MIT
115
+ Copyright (c) 2014-2017 Douglas Christopher Wilson
116
+ full text: LICENSE, as distributed in the package
117
+
118
+ ----------------------------------------------------------------------------
119
+ content-type 1.0.5
120
+ licence: MIT
121
+ Copyright (c) 2015 Douglas Christopher Wilson
122
+ full text: LICENSE, as distributed in the package
123
+
124
+ ----------------------------------------------------------------------------
125
+ content-type 2.1.0
126
+ licence: MIT
127
+ Copyright (c) 2015 Douglas Christopher Wilson
128
+ full text: LICENSE, as distributed in the package
129
+
130
+ ----------------------------------------------------------------------------
131
+ cookie 0.7.2
132
+ licence: MIT
133
+ Copyright (c) 2012-2014 Roman Shtylman <shtylman@gmail.com>
134
+ full text: LICENSE, as distributed in the package
135
+
136
+ ----------------------------------------------------------------------------
137
+ cookie-signature 1.2.2
138
+ licence: MIT
139
+ Copyright (c) 2012–2024 LearnBoost <tj@learnboost.com> and other contributors;
140
+ full text: LICENSE, as distributed in the package
141
+
142
+ ----------------------------------------------------------------------------
143
+ cors 2.8.6
144
+ licence: MIT
145
+ Copyright (c) 2013 Troy Goode <troygoode@gmail.com>
146
+ full text: LICENSE, as distributed in the package
147
+
148
+ ----------------------------------------------------------------------------
149
+ cross-spawn 7.0.6
150
+ licence: MIT
151
+ Copyright (c) 2018 Made With MOXY Lda <hello@moxy.studio>
152
+ full text: LICENSE, as distributed in the package
153
+
154
+ ----------------------------------------------------------------------------
155
+ debug 4.4.3
156
+ licence: MIT
157
+ Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>
158
+ full text: LICENSE, as distributed in the package
159
+
160
+ ----------------------------------------------------------------------------
161
+ depd 2.0.0
162
+ licence: MIT
163
+ Copyright (c) 2014-2018 Douglas Christopher Wilson
164
+ full text: LICENSE, as distributed in the package
165
+
166
+ ----------------------------------------------------------------------------
167
+ dunder-proto 1.0.1
168
+ licence: MIT
169
+ Copyright (c) 2024 ECMAScript Shims
170
+ full text: LICENSE, as distributed in the package
171
+
172
+ ----------------------------------------------------------------------------
173
+ ee-first 1.1.1
174
+ licence: MIT
175
+ Copyright (c) 2014 Jonathan Ong me@jongleberry.com
176
+ full text: LICENSE, as distributed in the package
177
+
178
+ ----------------------------------------------------------------------------
179
+ encodeurl 2.0.0
180
+ licence: MIT
181
+ Copyright (c) 2016 Douglas Christopher Wilson
182
+ full text: LICENSE, as distributed in the package
183
+
184
+ ----------------------------------------------------------------------------
185
+ es-define-property 1.0.1
186
+ licence: MIT
187
+ Copyright (c) 2024 Jordan Harband
188
+ full text: LICENSE, as distributed in the package
189
+
190
+ ----------------------------------------------------------------------------
191
+ es-errors 1.3.0
192
+ licence: MIT
193
+ Copyright (c) 2024 Jordan Harband
194
+ full text: LICENSE, as distributed in the package
195
+
196
+ ----------------------------------------------------------------------------
197
+ es-object-atoms 1.1.2
198
+ licence: MIT
199
+ Copyright (c) 2024 Jordan Harband
200
+ full text: LICENSE, as distributed in the package
201
+
202
+ ----------------------------------------------------------------------------
203
+ escape-html 1.0.3
204
+ licence: MIT
205
+ Copyright (c) 2012-2013 TJ Holowaychuk
206
+ full text: LICENSE, as distributed in the package
207
+
208
+ ----------------------------------------------------------------------------
209
+ etag 1.8.1
210
+ licence: MIT
211
+ Copyright (c) 2014-2016 Douglas Christopher Wilson
212
+ full text: LICENSE, as distributed in the package
213
+
214
+ ----------------------------------------------------------------------------
215
+ eventsource 3.0.7
216
+ licence: MIT
217
+ Copyright (c) EventSource GitHub organisation
218
+ full text: LICENSE, as distributed in the package
219
+
220
+ ----------------------------------------------------------------------------
221
+ eventsource-parser 3.1.1
222
+ licence: MIT
223
+ Copyright (c) 2026 Espen Hovlandsdal <espen@hovlandsdal.com>
224
+ full text: LICENSE, as distributed in the package
225
+
226
+ ----------------------------------------------------------------------------
227
+ express 5.2.1
228
+ licence: MIT
229
+ Copyright (c) 2009-2014 TJ Holowaychuk <tj@vision-media.ca>
230
+ full text: LICENSE, as distributed in the package
231
+
232
+ ----------------------------------------------------------------------------
233
+ express-rate-limit 8.7.0
234
+ licence: MIT
235
+ Copyright 2023 Nathan Friedly, Vedant K
236
+ full text: license, as distributed in the package
237
+
238
+ ----------------------------------------------------------------------------
239
+ fast-deep-equal 3.1.3
240
+ licence: MIT
241
+ Copyright (c) 2017 Evgeny Poberezkin
242
+ full text: LICENSE, as distributed in the package
243
+
244
+ ----------------------------------------------------------------------------
245
+ fast-uri 3.1.6
246
+ licence: BSD-3-Clause
247
+ Copyright (c) 2011-2021, Gary Court until https://github.com/garycourt/uri-js/commit/a1acf730b4bba3f1097c9f52e7d9d3aba8cdcaae
248
+ full text: LICENSE, as distributed in the package
249
+
250
+ ----------------------------------------------------------------------------
251
+ finalhandler 2.1.1
252
+ licence: MIT
253
+ Copyright (c) 2014-2022 Douglas Christopher Wilson <doug@somethingdoug.com>
254
+ full text: LICENSE, as distributed in the package
255
+
256
+ ----------------------------------------------------------------------------
257
+ forwarded 0.2.0
258
+ licence: MIT
259
+ Copyright (c) 2014-2017 Douglas Christopher Wilson
260
+ full text: LICENSE, as distributed in the package
261
+
262
+ ----------------------------------------------------------------------------
263
+ fresh 2.0.0
264
+ licence: MIT
265
+ Copyright (c) 2012 TJ Holowaychuk <tj@vision-media.ca>
266
+ full text: LICENSE, as distributed in the package
267
+
268
+ ----------------------------------------------------------------------------
269
+ function-bind 1.1.2
270
+ licence: MIT
271
+ Copyright (c) 2013 Raynos.
272
+ full text: LICENSE, as distributed in the package
273
+
274
+ ----------------------------------------------------------------------------
275
+ get-intrinsic 1.3.0
276
+ licence: MIT
277
+ Copyright (c) 2020 Jordan Harband
278
+ full text: LICENSE, as distributed in the package
279
+
280
+ ----------------------------------------------------------------------------
281
+ get-proto 1.0.1
282
+ licence: MIT
283
+ Copyright (c) 2025 Jordan Harband
284
+ full text: LICENSE, as distributed in the package
285
+
286
+ ----------------------------------------------------------------------------
287
+ gopd 1.2.0
288
+ licence: MIT
289
+ Copyright (c) 2022 Jordan Harband
290
+ full text: LICENSE, as distributed in the package
291
+
292
+ ----------------------------------------------------------------------------
293
+ has-symbols 1.1.0
294
+ licence: MIT
295
+ Copyright (c) 2016 Jordan Harband
296
+ full text: LICENSE, as distributed in the package
297
+
298
+ ----------------------------------------------------------------------------
299
+ hasown 2.0.4
300
+ licence: MIT
301
+ Copyright (c) Jordan Harband and contributors
302
+ full text: LICENSE, as distributed in the package
303
+
304
+ ----------------------------------------------------------------------------
305
+ hono 4.13.5
306
+ licence: MIT
307
+ Copyright (c) 2021 - present, Yusuke Wada and Hono contributors
308
+ full text: LICENSE, as distributed in the package
309
+
310
+ ----------------------------------------------------------------------------
311
+ http-errors 2.0.1
312
+ licence: MIT
313
+ Copyright (c) 2014 Jonathan Ong me@jongleberry.com
314
+ full text: LICENSE, as distributed in the package
315
+
316
+ ----------------------------------------------------------------------------
317
+ iconv-lite 0.7.3
318
+ licence: MIT
319
+ Copyright (c) 2011 Alexander Shtuchkin
320
+ full text: LICENSE, as distributed in the package
321
+
322
+ ----------------------------------------------------------------------------
323
+ inherits 2.0.4
324
+ licence: ISC
325
+ Copyright (c) Isaac Z. Schlueter
326
+ full text: LICENSE, as distributed in the package
327
+
328
+ ----------------------------------------------------------------------------
329
+ ip-address 10.7.0
330
+ licence: MIT
331
+ Copyright (C) 2011 by Beau Gunderson
332
+ full text: LICENSE, as distributed in the package
333
+
334
+ ----------------------------------------------------------------------------
335
+ ipaddr.js 1.9.1
336
+ licence: MIT
337
+ Copyright (C) 2011-2017 whitequark <whitequark@whitequark.org>
338
+ full text: LICENSE, as distributed in the package
339
+
340
+ ----------------------------------------------------------------------------
341
+ is-promise 4.0.0
342
+ licence: MIT
343
+ Copyright (c) 2014 Forbes Lindesay
344
+ full text: LICENSE, as distributed in the package
345
+
346
+ ----------------------------------------------------------------------------
347
+ isexe 2.0.0
348
+ licence: ISC
349
+ Copyright (c) Isaac Z. Schlueter and Contributors
350
+ full text: LICENSE, as distributed in the package
351
+
352
+ ----------------------------------------------------------------------------
353
+ jose 6.2.10
354
+ licence: MIT
355
+ Copyright (c) 2018 Filip Skokan
356
+ full text: LICENSE.md, as distributed in the package
357
+
358
+ ----------------------------------------------------------------------------
359
+ json-schema-traverse 1.0.0
360
+ licence: MIT
361
+ Copyright (c) 2017 Evgeny Poberezkin
362
+ full text: LICENSE, as distributed in the package
363
+
364
+ ----------------------------------------------------------------------------
365
+ json-schema-typed 8.0.2
366
+ licence: BSD-2-Clause
367
+ Original source code is copyright (c) 2019-2025 Remy Rylan
368
+ full text: LICENSE.md, as distributed in the package
369
+
370
+ ----------------------------------------------------------------------------
371
+ math-intrinsics 1.1.0
372
+ licence: MIT
373
+ Copyright (c) 2024 ECMAScript Shims
374
+ full text: LICENSE, as distributed in the package
375
+
376
+ ----------------------------------------------------------------------------
377
+ media-typer 1.1.1
378
+ licence: MIT
379
+ Copyright (c) 2014-2017 Douglas Christopher Wilson
380
+ full text: LICENSE, as distributed in the package
381
+
382
+ ----------------------------------------------------------------------------
383
+ merge-descriptors 2.0.0
384
+ licence: MIT
385
+ Copyright (c) Jonathan Ong <me@jongleberry.com>
386
+ full text: license, as distributed in the package
387
+
388
+ ----------------------------------------------------------------------------
389
+ mime-db 1.54.0
390
+ licence: MIT
391
+ Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
392
+ full text: LICENSE, as distributed in the package
393
+
394
+ ----------------------------------------------------------------------------
395
+ mime-types 3.0.2
396
+ licence: MIT
397
+ Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
398
+ full text: LICENSE, as distributed in the package
399
+
400
+ ----------------------------------------------------------------------------
401
+ ms 2.1.3
402
+ licence: MIT
403
+ Copyright (c) 2020 Vercel, Inc.
404
+ full text: license.md, as distributed in the package
405
+
406
+ ----------------------------------------------------------------------------
407
+ negotiator 1.1.0
408
+ licence: MIT
409
+ Copyright (c) 2012-2014 Federico Romero
410
+ full text: LICENSE, as distributed in the package
411
+
412
+ ----------------------------------------------------------------------------
413
+ object-assign 4.1.1
414
+ licence: MIT
415
+ Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
416
+ full text: license, as distributed in the package
417
+
418
+ ----------------------------------------------------------------------------
419
+ object-inspect 1.13.4
420
+ licence: MIT
421
+ Copyright (c) 2013 James Halliday
422
+ full text: LICENSE, as distributed in the package
423
+
424
+ ----------------------------------------------------------------------------
425
+ on-finished 2.4.1
426
+ licence: MIT
427
+ Copyright (c) 2013 Jonathan Ong <me@jongleberry.com>
428
+ full text: LICENSE, as distributed in the package
429
+
430
+ ----------------------------------------------------------------------------
431
+ once 1.4.0
432
+ licence: ISC
433
+ Copyright (c) Isaac Z. Schlueter and Contributors
434
+ full text: LICENSE, as distributed in the package
435
+
436
+ ----------------------------------------------------------------------------
437
+ parseurl 1.3.3
438
+ licence: MIT
439
+ Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
440
+ full text: LICENSE, as distributed in the package
441
+
442
+ ----------------------------------------------------------------------------
443
+ path-key 3.1.1
444
+ licence: MIT
445
+ Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
446
+ full text: license, as distributed in the package
447
+
448
+ ----------------------------------------------------------------------------
449
+ path-to-regexp 8.4.2
450
+ licence: MIT
451
+ Copyright (c) 2014 Blake Embrey (hello@blakeembrey.com)
452
+ full text: LICENSE, as distributed in the package
453
+
454
+ ----------------------------------------------------------------------------
455
+ pkce-challenge 5.0.1
456
+ licence: MIT
457
+ Copyright (c) 2019
458
+ full text: LICENSE, as distributed in the package
459
+
460
+ ----------------------------------------------------------------------------
461
+ proxy-addr 2.0.7
462
+ licence: MIT
463
+ Copyright (c) 2014-2016 Douglas Christopher Wilson
464
+ full text: LICENSE, as distributed in the package
465
+
466
+ ----------------------------------------------------------------------------
467
+ qs 6.16.0
468
+ licence: BSD-3-Clause
469
+ Copyright (c) 2014, Nathan LaFreniere and other [contributors](https://github.com/ljharb/qs/graphs/contributors)
470
+ full text: LICENSE.md, as distributed in the package
471
+
472
+ ----------------------------------------------------------------------------
473
+ range-parser 1.3.0
474
+ licence: MIT
475
+ Copyright (c) 2012-2014 TJ Holowaychuk <tj@vision-media.ca>
476
+ full text: LICENSE, as distributed in the package
477
+
478
+ ----------------------------------------------------------------------------
479
+ raw-body 3.0.2
480
+ licence: MIT
481
+ Copyright (c) 2013-2014 Jonathan Ong <me@jongleberry.com>
482
+ full text: LICENSE, as distributed in the package
483
+
484
+ ----------------------------------------------------------------------------
485
+ require-from-string 2.0.2
486
+ licence: MIT
487
+ Copyright (c) Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)
488
+ full text: license, as distributed in the package
489
+
490
+ ----------------------------------------------------------------------------
491
+ router 2.2.0
492
+ licence: MIT
493
+ Copyright (c) 2013 Roman Shtylman
494
+ full text: LICENSE, as distributed in the package
495
+
496
+ ----------------------------------------------------------------------------
497
+ safer-buffer 2.1.2
498
+ licence: MIT
499
+ Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>
500
+ full text: LICENSE, as distributed in the package
501
+
502
+ ----------------------------------------------------------------------------
503
+ send 1.2.1
504
+ licence: MIT
505
+ Copyright (c) 2012 TJ Holowaychuk
506
+ full text: LICENSE, as distributed in the package
507
+
508
+ ----------------------------------------------------------------------------
509
+ serve-static 2.2.1
510
+ licence: MIT
511
+ Copyright (c) 2010 Sencha Inc.
512
+ full text: LICENSE, as distributed in the package
513
+
514
+ ----------------------------------------------------------------------------
515
+ setprototypeof 1.2.0
516
+ licence: ISC
517
+ Copyright (c) 2015, Wes Todd
518
+ full text: LICENSE, as distributed in the package
519
+
520
+ ----------------------------------------------------------------------------
521
+ shebang-command 2.0.0
522
+ licence: MIT
523
+ Copyright (c) Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)
524
+ full text: license, as distributed in the package
525
+
526
+ ----------------------------------------------------------------------------
527
+ shebang-regex 3.0.0
528
+ licence: MIT
529
+ Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
530
+ full text: license, as distributed in the package
531
+
532
+ ----------------------------------------------------------------------------
533
+ side-channel 1.1.1
534
+ licence: MIT
535
+ Copyright (c) 2019 Jordan Harband
536
+ full text: LICENSE, as distributed in the package
537
+
538
+ ----------------------------------------------------------------------------
539
+ side-channel-list 1.0.1
540
+ licence: MIT
541
+ Copyright (c) 2024 Jordan Harband
542
+ full text: LICENSE, as distributed in the package
543
+
544
+ ----------------------------------------------------------------------------
545
+ side-channel-map 1.0.1
546
+ licence: MIT
547
+ Copyright (c) 2024 Jordan Harband
548
+ full text: LICENSE, as distributed in the package
549
+
550
+ ----------------------------------------------------------------------------
551
+ side-channel-weakmap 1.0.2
552
+ licence: MIT
553
+ Copyright (c) 2019 Jordan Harband
554
+ full text: LICENSE, as distributed in the package
555
+
556
+ ----------------------------------------------------------------------------
557
+ statuses 2.0.2
558
+ licence: MIT
559
+ Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
560
+ full text: LICENSE, as distributed in the package
561
+
562
+ ----------------------------------------------------------------------------
563
+ toidentifier 1.0.1
564
+ licence: MIT
565
+ Copyright (c) 2016 Douglas Christopher Wilson <doug@somethingdoug.com>
566
+ full text: LICENSE, as distributed in the package
567
+
568
+ ----------------------------------------------------------------------------
569
+ type-is 2.1.0
570
+ licence: MIT
571
+ Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>
572
+ full text: LICENSE, as distributed in the package
573
+
574
+ ----------------------------------------------------------------------------
575
+ unpipe 1.0.0
576
+ licence: MIT
577
+ Copyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>
578
+ full text: LICENSE, as distributed in the package
579
+
580
+ ----------------------------------------------------------------------------
581
+ vary 1.1.2
582
+ licence: MIT
583
+ Copyright (c) 2014-2017 Douglas Christopher Wilson
584
+ full text: LICENSE, as distributed in the package
585
+
586
+ ----------------------------------------------------------------------------
587
+ which 2.0.2
588
+ licence: ISC
589
+ Copyright (c) Isaac Z. Schlueter and Contributors
590
+ full text: LICENSE, as distributed in the package
591
+
592
+ ----------------------------------------------------------------------------
593
+ wrappy 1.0.2
594
+ licence: ISC
595
+ Copyright (c) Isaac Z. Schlueter and Contributors
596
+ full text: LICENSE, as distributed in the package
597
+
598
+ ----------------------------------------------------------------------------
599
+ zod 4.5.4
600
+ licence: MIT
601
+ Copyright (c) 2025 Colin McDonnell
602
+ full text: LICENSE, as distributed in the package
603
+
604
+ ----------------------------------------------------------------------------
605
+ zod-to-json-schema 3.25.2
606
+ licence: ISC
607
+ Copyright (c) 2020, Stefan Terdell
608
+ full text: LICENSE, as distributed in the package
609
+
610
+ ----------------------------------------------------------------------------
@@ -0,0 +1,76 @@
1
+ /**
2
+ * Read a {@link TrustAnchor} off disk, from the document the engine's own tool
3
+ * writes (ACP-197, section 6b point 3).
4
+ *
5
+ * # The format is not ours to choose
6
+ *
7
+ * `ZIFFER_TRUST_ANCHOR` names the output of `acp-bundle pubkey --key <file>`,
8
+ * at engine pin fed43d1, `crates/acp-bundle-cli/src/main.rs::cmd_pubkey` (the
9
+ * same four keys in the same order it wrote at 356ef8e, where this comment was
10
+ * first written; re-read at the v1.3.32 pin rather than assumed). That
11
+ * document exists precisely so an operator stops transcribing a key between
12
+ * three encodings by hand, and its doc comment says why a slip matters: **a
13
+ * transcription slip does not surface as a transcription slip** -- it surfaces
14
+ * as a signature that does not verify, wearing the face of a compromise. A
15
+ * second file format here would put that slip back, one layer up.
16
+ *
17
+ * The fields read are the two the engine's own `load_public_key` reads, because
18
+ * the top level of that document IS the `--pubkey` file:
19
+ *
20
+ * ```json
21
+ * {
22
+ * "ed25519_pk_hex": "<64 hex chars>",
23
+ * "fingerprint": "sha256:<hex>",
24
+ * "identity": { "classical": "<base64>", "pq": "<base64>" },
25
+ * "mldsa65_pk_hex": "<3904 hex chars>"
26
+ * }
27
+ * ```
28
+ *
29
+ * `identity` and `fingerprint` are other encodings of the same two keys and are
30
+ * deliberately NOT read: reading a key twice from one file is two answers to
31
+ * "which identity is this", and the one nobody exercises is the wrong one.
32
+ *
33
+ * # Why the suite floor is not in this file
34
+ *
35
+ * {@link TrustAnchor} needs a third value, `minSuite`, and this document does
36
+ * not carry it -- by construction. `cmd_pubkey` refuses to emit an `alg` field
37
+ * and states the rule: a suite name is a WIRE field (CR-1), never a member of
38
+ * an identity, and putting one beside a key would invent a shape no schema in
39
+ * the engine declares. So the floor is separate configuration, in
40
+ * `ZIFFER_SUITE_FLOOR`, with no default -- which is also the shape the Executor
41
+ * already ships (`ZIFFER_POLICY_SIGNING_KEY` names the key file and
42
+ * `ZIFFER_EXECUTOR_SUITE_FLOOR` names the floor beside it,
43
+ * `docs/onboarding/executor.md` section 4: "an unknown suite is refused, never
44
+ * defaulted").
45
+ */
46
+ import type { TrustAnchor } from '@ziffer-io/verify';
47
+ /**
48
+ * A trust anchor file that is missing, unreadable, or not what it claims to be.
49
+ *
50
+ * Named like the configuration refusals in `config.ts` and for the same reason:
51
+ * the agent reading this needs to act, and "the file you named is a signing
52
+ * key" and "the file you named does not exist" are different actions.
53
+ *
54
+ * `detail` never carries file CONTENT. A malformed anchor is quoted back into
55
+ * an agent's context, and if the file turned out to be a secret key, echoing
56
+ * the bytes that made it malformed is how the key gets there.
57
+ */
58
+ export declare class AnchorError extends Error {
59
+ readonly name: string;
60
+ /** The path that was read, which is safe to name and is what identifies it. */
61
+ readonly path: string;
62
+ constructor(name: string, path: string, detail: string);
63
+ }
64
+ /**
65
+ * Read and parse the anchor document at `path`, or refuse by name.
66
+ *
67
+ * @param minSuite the CR-4 floor from `ZIFFER_SUITE_FLOOR`, passed through
68
+ * unvalidated: `verifyReceipt` is the one place that knows
69
+ * which suite names exist, and it refuses an unknown floor
70
+ * under `CLAUSE_UNKNOWN_SUITE`. A second table of suite names
71
+ * here would be a second answer to what a suite is.
72
+ * @throws AnchorError `TrustAnchorUnreadable`, `TrustAnchorNotJson`,
73
+ * `TrustAnchorHoldsSecret` or `TrustAnchorMalformed`.
74
+ */
75
+ export declare function loadTrustAnchor(path: string, minSuite: string): Promise<TrustAnchor>;
76
+ //# sourceMappingURL=anchor.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"anchor.d.ts","sourceRoot":"","sources":["../src/anchor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAqBrD;;;;;;;;;;GAUG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,SAAkB,IAAI,EAAE,MAAM,CAAC;IAC/B,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAKvD;AAiDD;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA4C1F"}