agent-comms 3.10.0 → 3.11.0

package/dist/test/capability-admission-tool-actions.test.js

@@ -0,0 +1,198 @@
+/**
+ * Unit tests for the capability_pending/capability_accept/capability_reject CommsTool actions -- the human-facing wrapper around MeshStore's own createCapabilityAskHandler/listPendingCapabilityRequests/acceptCapabilityRequest/rejectCapabilityRequest (agent-comms#165), mirroring room-admission-tool-actions.test.ts's own real-MeshStore integration style rather than a fully faked harness.
+ */
+import { webcrypto } from "node:crypto";
+import { describe, it, expect } from "vitest";
+import { createNodeIdentity } from "wire-mesh-core/adapters/node-identity";
+import { verifyCapabilityToken } from "wire-mesh-core/domain/tokens";
+import { createRevocationView } from "wire-mesh-core/domain/revocation-view";
+import { MeshStore } from "../core/mesh-store.js";
+import { CommsTool } from "../core/tool.js";
+import { buildAction } from "../core/bridge.js";
+import { toIdentityPort } from "../core/wire-mesh-identity.js";
+import { loadOrCreateIdentity } from "../core/identity-store.js";
+import { wireTestTransport } from "./test-transport.js";
+const ES256 = -7;
+const HOUR_MS = 3_600_000;
+const CAPABILITY = "dm:send";
+async function generateEs256Identity() {
+    const keyPair = await webcrypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-256" }, true, ["sign", "verify"]);
+    const publicKeyBytes = new Uint8Array(await webcrypto.subtle.exportKey("raw", keyPair.publicKey));
+    return createNodeIdentity(keyPair.privateKey, publicKeyBytes, ES256);
+}
+function fakeCapabilityRequest() {
+    return {
+        requestId: 1,
+        command: {
+            verb: CAPABILITY,
+            params: { verb: "capability.request", capability: CAPABILITY },
+        },
+        scope: { kind: "user" },
+    };
+}
+describe("capability admission CommsTool actions", () => {
+    it("capability_pending lists a held-open capability request", async () => {
+        const store = new MeshStore();
+        await wireTestTransport(store);
+        const owner = await store.registerAgent({
+            name: "owner",
+            harness: "pi",
+            cwd: "/tmp/p",
+            pid: process.pid,
+            visibility: "visible",
+            tags: [],
+        });
+        const requester = await generateEs256Identity();
+        const handler = store.createCapabilityAskHandler({
+            capability: CAPABILITY,
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        void handler({
+            ...fakeCapabilityRequest(),
+            respond: async () => { },
+        });
+        const tool = new CommsTool(store);
+        const ctx = {
+            agentId: owner.id,
+            harness: "pi",
+            cwd: "/tmp/p",
+            pid: process.pid,
+        };
+        const pendingResult = await tool.handle(ctx, buildAction({ action: "capability_pending" }));
+        expect(pendingResult.isError).toBe(false);
+        expect(pendingResult.content.includes(CAPABILITY)).toBeTruthy();
+    });
+    it("capability_accept mints and returns a granted token to the requester", async () => {
+        const store = new MeshStore();
+        const slot = await wireTestTransport(store);
+        const owner = await store.registerAgent({
+            name: "owner",
+            harness: "pi",
+            cwd: "/tmp/p",
+            pid: process.pid,
+            visibility: "visible",
+            tags: [],
+        });
+        const requester = await generateEs256Identity();
+        const handler = store.createCapabilityAskHandler({
+            capability: CAPABILITY,
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        let respondedWith;
+        const outcomePromise = handler({
+            ...fakeCapabilityRequest(),
+            respond: async (outcome) => {
+                respondedWith = outcome;
+            },
+        });
+        const tool = new CommsTool(store);
+        const ctx = {
+            agentId: owner.id,
+            harness: "pi",
+            cwd: "/tmp/p",
+            pid: process.pid,
+        };
+        const requestId = store.listPendingCapabilityRequests()[0]?.requestId;
+        if (requestId === undefined)
+            throw new Error("no pending request found");
+        const expires = Date.now() + HOUR_MS;
+        const acceptResult = await tool.handle(ctx, buildAction({
+            action: "capability_accept",
+            requestId,
+            expires,
+        }));
+        expect(acceptResult.isError).toBe(false);
+        await outcomePromise;
+        const outcome = respondedWith;
+        expect(outcome.result).toBe("ok");
+        const identity = await toIdentityPort(loadOrCreateIdentity(slot));
+        const verdict = await verifyCapabilityToken(outcome["granted-token"], {
+            identity,
+            clock: { now: () => Date.now() },
+            revocation: createRevocationView(),
+            expectedBearer: requester.deviceId,
+        });
+        expect(verdict.ok).toBe(true);
+        if (verdict.ok) {
+            expect(verdict.claims.capability).toBe(CAPABILITY);
+        }
+        const pendingAfter = await tool.handle(ctx, buildAction({ action: "capability_pending" }));
+        expect(pendingAfter.content).toBe("No pending capability requests.");
+    });
+    it("capability_reject denies the pending request with an optional reason", async () => {
+        const store = new MeshStore();
+        await wireTestTransport(store);
+        const owner = await store.registerAgent({
+            name: "owner",
+            harness: "pi",
+            cwd: "/tmp/p",
+            pid: process.pid,
+            visibility: "visible",
+            tags: [],
+        });
+        const requester = await generateEs256Identity();
+        const handler = store.createCapabilityAskHandler({
+            capability: CAPABILITY,
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        let respondedWith;
+        const outcomePromise = handler({
+            ...fakeCapabilityRequest(),
+            respond: async (outcome) => {
+                respondedWith = outcome;
+            },
+        });
+        const tool = new CommsTool(store);
+        const ctx = {
+            agentId: owner.id,
+            harness: "pi",
+            cwd: "/tmp/p",
+            pid: process.pid,
+        };
+        const pendingList = store.listPendingCapabilityRequests();
+        const requestId = pendingList[0]?.requestId;
+        if (requestId === undefined)
+            throw new Error("no pending request found");
+        const rejectResult = await tool.handle(ctx, buildAction({
+            action: "capability_reject",
+            requestId,
+            reason: "not now",
+        }));
+        expect(rejectResult.isError).toBe(false);
+        await outcomePromise;
+        expect(respondedWith).toEqual({
+            result: "error",
+            code: "denied",
+            message: "not now",
+        });
+    });
+    it("capability_accept on a store with no matching pending request reports failure, not a crash", async () => {
+        const store = new MeshStore();
+        await wireTestTransport(store);
+        const owner = await store.registerAgent({
+            name: "owner",
+            harness: "pi",
+            cwd: "/tmp/p",
+            pid: process.pid,
+            visibility: "visible",
+            tags: [],
+        });
+        const tool = new CommsTool(store);
+        const ctx = {
+            agentId: owner.id,
+            harness: "pi",
+            cwd: "/tmp/p",
+            pid: process.pid,
+        };
+        const result = await tool.handle(ctx, buildAction({
+            action: "capability_accept",
+            requestId: "not-a-real-request",
+            expires: Date.now() + HOUR_MS,
+        }));
+        expect(result.isError).toBe(true);
+    });
+});
+//# sourceMappingURL=capability-admission-tool-actions.test.js.map

package/dist/test/capability-admission-tool-actions.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-admission-tool-actions.test.js","sourceRoot":"","sources":["../../src/test/capability-admission-tool-actions.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC;AACjB,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,KAAK,UAAU,qBAAqB;IAClC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,WAAW,CAChD,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,UAAU,CACnC,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAC3D,CAAC;IACF,OAAO,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO;QACL,SAAS,EAAE,CAAC;QACZ,OAAO,EAAE;YACP,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,UAAU,EAAE;SAC/D;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;KACxB,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU,EAAE,SAAS;YACrB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,0BAA0B,CAAC;YAC/C,UAAU,EAAE,UAAU;YACtB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,KAAK,OAAO,CAAC;YACX,GAAG,qBAAqB,EAAE;YAC1B,OAAO,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG;YACV,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CACrC,GAAG,EACH,WAAW,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAC9C,CAAC;QAEF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU,EAAE,SAAS;YACrB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,0BAA0B,CAAC;YAC/C,UAAU,EAAE,UAAU;YACtB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,aAAsB,CAAC;QAC3B,MAAM,cAAc,GAAG,OAAO,CAAC;YAC7B,GAAG,qBAAqB,EAAE;YAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,aAAa,GAAG,OAAO,CAAC;YAC1B,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG;YACV,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QACF,MAAM,SAAS,GAAG,KAAK,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;QACtE,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAEzE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CACpC,GAAG,EACH,WAAW,CAAC;YACV,MAAM,EAAE,mBAAmB;YAC3B,SAAS;YACT,OAAO;SACR,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,cAAc,CAAC;QACrB,MAAM,OAAO,GAAG,aAGf,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;YACpE,QAAQ;YACR,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE;YAChC,UAAU,EAAE,oBAAoB,EAAE;YAClC,cAAc,EAAE,SAAS,CAAC,QAAQ;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CACpC,GAAG,EACH,WAAW,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAC9C,CAAC;QACF,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU,EAAE,SAAS;YACrB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,0BAA0B,CAAC;YAC/C,UAAU,EAAE,UAAU;YACtB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,aAAsB,CAAC;QAC3B,MAAM,cAAc,GAAG,OAAO,CAAC;YAC7B,GAAG,qBAAqB,EAAE;YAC1B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;gBACzB,aAAa,GAAG,OAAO,CAAC;YAC1B,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG;YACV,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QACF,MAAM,WAAW,GAAG,KAAK,CAAC,6BAA6B,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;QAC5C,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAEzE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,MAAM,CACpC,GAAG,EACH,WAAW,CAAC;YACV,MAAM,EAAE,mBAAmB;YAC3B,SAAS;YACT,MAAM,EAAE,SAAS;SAClB,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,cAAc,CAAC;QACrB,MAAM,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC;YAC5B,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;YACtC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,UAAU,EAAE,SAAS;YACrB,IAAI,EAAE,EAAE;SACT,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG;YACV,OAAO,EAAE,KAAK,CAAC,EAAE;YACjB,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,QAAQ;YACb,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAC9B,GAAG,EACH,WAAW,CAAC;YACV,MAAM,EAAE,mBAAmB;YAC3B,SAAS,EAAE,oBAAoB;YAC/B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;SAC9B,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/capability-ask.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=capability-ask.test.d.ts.map

package/dist/test/capability-ask.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-ask.test.d.ts","sourceRoot":"","sources":["../../src/test/capability-ask.test.ts"],"names":[],"mappings":""}

package/dist/test/capability-ask.test.js

@@ -0,0 +1,300 @@
+/**
+ * Direct, DI-based unit tests for CapabilityAskAdmission -- mirrors connection-approval.test.ts's own approach (a narrow, injectable deps surface, fake collaborators via vi.fn()) so every branch of the ask tier's tool-layer surfacing (agent-comms#165) is asserted on directly rather than only indirectly through a live transport.
+ */
+import { webcrypto } from "node:crypto";
+import { describe, it, expect, vi } from "vitest";
+import { createNodeIdentity } from "wire-mesh-core/adapters/node-identity";
+import { deviceIdToHex } from "wire-mesh-core/domain/device-id";
+import { verifyCapabilityToken } from "wire-mesh-core/domain/tokens";
+import { createRevocationView } from "wire-mesh-core/domain/revocation-view";
+import { CapabilityAskAdmission, } from "../core/capability-ask.js";
+const ES256 = -7;
+const NOW_MS = 1_893_456_000_000;
+const HOUR_MS = 3_600_000;
+const EXPIRES_MS = NOW_MS + HOUR_MS;
+const CAPABILITY = "dm:send";
+const SCOPE = { kind: "user" };
+const OWNER_ID = "owner-peer";
+async function generateEs256Identity() {
+    const keyPair = await webcrypto.subtle.generateKey({ name: "ECDSA", namedCurve: "P-256" }, true, ["sign", "verify"]);
+    const publicKeyBytes = new Uint8Array(await webcrypto.subtle.exportKey("raw", keyPair.publicKey));
+    return createNodeIdentity(keyPair.privateKey, publicKeyBytes, ES256);
+}
+function fixedClock(atMs) {
+    return { now: () => atMs };
+}
+function makeHarness(options = {}) {
+    const queueDelivery = vi.fn();
+    const onDelivery = options.withOnDelivery === true ? vi.fn() : undefined;
+    const deps = {
+        getPeerId: () => OWNER_ID,
+        getOnDelivery: () => onDelivery,
+        queueDelivery,
+    };
+    return {
+        deps,
+        admission: new CapabilityAskAdmission(deps),
+        queueDelivery,
+        onDelivery,
+    };
+}
+let nextRequestId = 0;
+function fakeIncoming(params) {
+    nextRequestId += 1;
+    return {
+        requestId: nextRequestId,
+        command: { verb: CAPABILITY, params },
+        scope: SCOPE,
+        respond: vi.fn(async () => undefined),
+    };
+}
+describe("CapabilityAskAdmission — createAskHandler", () => {
+    it("holds the request open, queues a capability_request delivery event, and touches neither respond nor onDelivery's own callback synchronously", async () => {
+        const h = makeHarness({ withOnDelivery: true });
+        const identity = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = h.admission.createAskHandler({
+            capability: CAPABILITY,
+            identity,
+            clock: fixedClock(NOW_MS),
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+        });
+        // The handler awaits only until onRequest is called, never until decide() settles -- the ask stays held open, so this resolves without ever calling respond().
+        await handler(incoming);
+        expect(incoming.respond).not.toHaveBeenCalled();
+        expect(h.queueDelivery).toHaveBeenCalledTimes(1);
+        const [deliveredTo, event] = h.queueDelivery.mock.calls[0];
+        expect(deliveredTo).toBe(OWNER_ID);
+        expect(event).toEqual({
+            type: "capability_request",
+            requestId: expect.any(String),
+            capability: CAPABILITY,
+            scopeKind: "user",
+            requesterDevice: deviceIdToHex(requester.deviceId),
+        });
+        expect(h.onDelivery).toHaveBeenCalledTimes(1);
+    });
+    it("includes scopePath in the delivery event when the incoming request's own scope carries one", async () => {
+        const h = makeHarness();
+        const identity = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = h.admission.createAskHandler({
+            capability: CAPABILITY,
+            identity,
+            clock: fixedClock(NOW_MS),
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        nextRequestId += 1;
+        const incoming = {
+            requestId: nextRequestId,
+            command: {
+                verb: CAPABILITY,
+                params: { verb: "capability.request", capability: CAPABILITY },
+            },
+            scope: { kind: "room", path: "abc/general" },
+            respond: vi.fn(async () => undefined),
+        };
+        await handler(incoming);
+        const [, event] = h.queueDelivery.mock.calls[0];
+        expect(event).toMatchObject({
+            scopeKind: "room",
+            scopePath: "abc/general",
+        });
+    });
+    it("responds malformed for a request naming a different capability, and never surfaces it as a pending ask", async () => {
+        const h = makeHarness();
+        const identity = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = h.admission.createAskHandler({
+            capability: CAPABILITY,
+            identity,
+            clock: fixedClock(NOW_MS),
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: "room:member",
+        });
+        await handler(incoming);
+        expect(incoming.respond).toHaveBeenCalledWith({
+            result: "error",
+            code: "malformed",
+        });
+        expect(h.queueDelivery).not.toHaveBeenCalled();
+        expect(h.admission.listPendingCapabilityRequests()).toEqual([]);
+    });
+});
+describe("CapabilityAskAdmission — listPendingCapabilityRequests / acceptCapabilityRequest / rejectCapabilityRequest", () => {
+    it("lists every still-held ask with its capability, scope, and requester", async () => {
+        const h = makeHarness();
+        const identity = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = h.admission.createAskHandler({
+            capability: CAPABILITY,
+            identity,
+            clock: fixedClock(NOW_MS),
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        await handler(fakeIncoming({ verb: "capability.request", capability: CAPABILITY }));
+        expect(h.admission.listPendingCapabilityRequests()).toEqual([
+            {
+                requestId: expect.any(String),
+                capability: CAPABILITY,
+                scopeKind: "user",
+                requesterDevice: deviceIdToHex(requester.deviceId),
+            },
+        ]);
+    });
+    it("accepting a pending ask mints a granted token, responds ok, and removes it from the pending list", async () => {
+        const h = makeHarness();
+        const identity = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = h.admission.createAskHandler({
+            capability: CAPABILITY,
+            identity,
+            clock: fixedClock(NOW_MS),
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+        });
+        await handler(incoming);
+        const [requestId] = h.admission
+            .listPendingCapabilityRequests()
+            .map((p) => p.requestId);
+        if (requestId === undefined)
+            throw new Error("no pending request");
+        await h.admission.acceptCapabilityRequest(requestId, {
+            expires: EXPIRES_MS,
+            delegationsRemaining: 1,
+        });
+        expect(incoming.respond).toHaveBeenCalledTimes(1);
+        const outcome = incoming.respond.mock.calls[0]?.[0];
+        expect(outcome.result).toBe("ok");
+        const verdict = await verifyCapabilityToken(outcome["granted-token"], {
+            identity,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            expectedBearer: requester.deviceId,
+        });
+        expect(verdict.ok).toBe(true);
+        if (verdict.ok) {
+            expect(verdict.claims.capability).toBe(CAPABILITY);
+        }
+        expect(h.admission.listPendingCapabilityRequests()).toEqual([]);
+    });
+    it("rejecting a pending ask responds denied with the given reason and removes it from the pending list", async () => {
+        const h = makeHarness();
+        const identity = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = h.admission.createAskHandler({
+            capability: CAPABILITY,
+            identity,
+            clock: fixedClock(NOW_MS),
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+        });
+        await handler(incoming);
+        const [requestId] = h.admission
+            .listPendingCapabilityRequests()
+            .map((p) => p.requestId);
+        if (requestId === undefined)
+            throw new Error("no pending request");
+        await h.admission.rejectCapabilityRequest(requestId, "not right now");
+        expect(incoming.respond).toHaveBeenCalledWith({
+            result: "error",
+            code: "denied",
+            message: "not right now",
+        });
+        expect(h.admission.listPendingCapabilityRequests()).toEqual([]);
+    });
+    it("rejects with no message field when no reason is given", async () => {
+        const h = makeHarness();
+        const identity = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = h.admission.createAskHandler({
+            capability: CAPABILITY,
+            identity,
+            clock: fixedClock(NOW_MS),
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+        });
+        await handler(incoming);
+        const [requestId] = h.admission
+            .listPendingCapabilityRequests()
+            .map((p) => p.requestId);
+        if (requestId === undefined)
+            throw new Error("no pending request");
+        await h.admission.rejectCapabilityRequest(requestId);
+        expect(incoming.respond).toHaveBeenCalledWith({
+            result: "error",
+            code: "denied",
+        });
+    });
+    it("throws naming the exact unknown request id when accepting, and never touches decide", async () => {
+        const h = makeHarness();
+        await expect(h.admission.acceptCapabilityRequest("no-such-request", {
+            expires: EXPIRES_MS,
+        })).rejects.toThrow("No pending capability request no-such-request");
+    });
+    it("throws naming the exact unknown request id when rejecting", async () => {
+        const h = makeHarness();
+        await expect(h.admission.rejectCapabilityRequest("no-such-request")).rejects.toThrow("No pending capability request no-such-request");
+    });
+    it("grants a narrower capability than requested when the accept decision names one explicitly", async () => {
+        const h = makeHarness();
+        const identity = await generateEs256Identity();
+        const requester = await generateEs256Identity();
+        const handler = h.admission.createAskHandler({
+            capability: CAPABILITY,
+            identity,
+            clock: fixedClock(NOW_MS),
+            bearerDevice: requester.deviceId,
+            timeoutMs: HOUR_MS,
+        });
+        const incoming = fakeIncoming({
+            verb: "capability.request",
+            capability: CAPABILITY,
+        });
+        await handler(incoming);
+        const [requestId] = h.admission
+            .listPendingCapabilityRequests()
+            .map((p) => p.requestId);
+        if (requestId === undefined)
+            throw new Error("no pending request");
+        await h.admission.acceptCapabilityRequest(requestId, {
+            expires: EXPIRES_MS,
+            capability: "dm:send-narrow",
+        });
+        const outcome = incoming.respond.mock.calls[0]?.[0];
+        const verdict = await verifyCapabilityToken(outcome["granted-token"], {
+            identity,
+            clock: fixedClock(NOW_MS),
+            revocation: createRevocationView(),
+            expectedBearer: requester.deviceId,
+        });
+        expect(verdict.ok).toBe(true);
+        if (verdict.ok) {
+            expect(verdict.claims.capability).toBe("dm:send-narrow");
+        }
+    });
+});
+//# sourceMappingURL=capability-ask.test.js.map

package/dist/test/capability-ask.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-ask.test.js","sourceRoot":"","sources":["../../src/test/capability-ask.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAI7E,OAAO,EACL,sBAAsB,GAEvB,MAAM,2BAA2B,CAAC;AAGnC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC;AACjB,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;AACpC,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,MAAe,EAAE,CAAC;AACxC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B,KAAK,UAAU,qBAAqB;IAClC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,WAAW,CAChD,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,UAAU,CACnC,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,CAC3D,CAAC;IACF,OAAO,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AASD,SAAS,WAAW,CAClB,UAAkD,EAAE;IAEpD,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,EAA+C,CAAC;IAC3E,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,MAAM,IAAI,GAA+B;QACvC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ;QACzB,aAAa,EAAE,GAAG,EAAE,CAAC,UAAU;QAC/B,aAAa;KACd,CAAC;IACF,OAAO;QACL,IAAI;QACJ,SAAS,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC;QAC3C,aAAa;QACb,UAAU;KACX,CAAC;AACJ,CAAC;AAMD,IAAI,aAAa,GAAG,CAAC,CAAC;AACtB,SAAS,YAAY,CAAC,MAA+B;IACnD,aAAa,IAAI,CAAC,CAAC;IACnB,OAAO;QACL,SAAS,EAAE,aAAa;QACxB,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE;QACrC,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,6IAA6I,EAAE,KAAK,IAAI,EAAE;QAC3J,MAAM,CAAC,GAAG,WAAW,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAEhD,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAC3C,UAAU,EAAE,UAAU;YACtB,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,+JAA+J;QAC/J,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAChD,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAGxD,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC7B,UAAU,EAAE,UAAU;YACtB,SAAS,EAAE,MAAM;YACjB,eAAe,EAAE,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC;SACnD,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4FAA4F,EAAE,KAAK,IAAI,EAAE;QAC1G,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAEhD,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAC3C,UAAU,EAAE,UAAU;YACtB,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,aAAa,IAAI,CAAC,CAAC;QACnB,MAAM,QAAQ,GAAiB;YAC7B,SAAS,EAAE,aAAa;YACxB,OAAO,EAAE;gBACP,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,UAAU,EAAE;aAC/D;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;YAC5C,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;SACtC,CAAC;QACF,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC;QAC3E,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC;YAC1B,SAAS,EAAE,MAAM;YACjB,SAAS,EAAE,aAAa;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACtH,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAEhD,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAC3C,UAAU,EAAE,UAAU;YACtB,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,aAAa;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QAExB,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC/C,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,6BAA6B,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4GAA4G,EAAE,GAAG,EAAE;IAC1H,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAC3C,UAAU,EAAE,UAAU;YACtB,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,OAAO,CACX,YAAY,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CACrE,CAAC;QAEF,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,6BAA6B,EAAE,CAAC,CAAC,OAAO,CAAC;YAC1D;gBACE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7B,UAAU,EAAE,UAAU;gBACtB,SAAS,EAAE,MAAM;gBACjB,eAAe,EAAE,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC;aACnD;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,KAAK,IAAI,EAAE;QAChH,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAC3C,UAAU,EAAE,UAAU;YACtB,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS;aAC5B,6BAA6B,EAAE;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAEnE,MAAM,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,SAAS,EAAE;YACnD,OAAO,EAAE,UAAU;YACnB,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAGjD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElC,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;YACpE,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,cAAc,EAAE,SAAS,CAAC,QAAQ;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,6BAA6B,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;QAClH,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAC3C,UAAU,EAAE,UAAU;YACtB,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS;aAC5B,6BAA6B,EAAE;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAEnE,MAAM,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;QAEtE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,eAAe;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,6BAA6B,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAC3C,UAAU,EAAE,UAAU;YACtB,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS;aAC5B,6BAA6B,EAAE;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAEnE,MAAM,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAErD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC;YAC5C,MAAM,EAAE,OAAO;YACf,IAAI,EAAE,QAAQ;SACf,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,MAAM,CACV,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,iBAAiB,EAAE;YACrD,OAAO,EAAE,UAAU;SACpB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,MAAM,CACV,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CACvD,CAAC,OAAO,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;QACzG,MAAM,CAAC,GAAG,WAAW,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;YAC3C,UAAU,EAAE,UAAU;YACtB,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,YAAY,EAAE,SAAS,CAAC,QAAQ;YAChC,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,YAAY,CAAC;YAC5B,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,SAAS;aAC5B,6BAA6B,EAAE;aAC/B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC3B,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAEnE,MAAM,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,SAAS,EAAE;YACnD,OAAO,EAAE,UAAU;YACnB,UAAU,EAAE,gBAAgB;SAC7B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAGjD,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE;YACpE,QAAQ;YACR,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC;YACzB,UAAU,EAAE,oBAAoB,EAAE;YAClC,cAAc,EAAE,SAAS,CAAC,QAAQ;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/mcp-registry-retry.test.js

@@ -47,5 +47,21 @@ describe("isRetryablePublishFailure", () => {
     it("does not misclassify an unrelated failure as retryable", () => {
         expect(isRetryablePublishFailure("permission denied")).toBe(false);
     });
+    it("recognises a raw connection-level failure with no HTTP status, confirmed in production (ExaDev/agent-comms, run 35249771867, v3.9.0): a dial-tcp i/o timeout reaching the registry, which matches neither the propagation-lag text nor the 5xx status pattern above since no HTTP response was ever received", () => {
+        const output = 'Error: publish failed: error sending request: Post "https://registry.modelcontextprotocol.io/v0/publish": dial tcp 34.61.200.254:443: i/o timeout';
+        expect(isRetryablePublishFailure(output)).toBe(true);
+    });
+    it("recognises a connection-refused failure as the same class of connection-level error", () => {
+        const output = 'Error: publish failed: error sending request: Post "https://registry.modelcontextprotocol.io/v0/publish": dial tcp 34.61.200.254:443: connect: connection refused';
+        expect(isRetryablePublishFailure(output)).toBe(true);
+    });
+    it("recognises a 401 caused by the login JWT expiring mid-retry-window, confirmed in production (ExaDev/agent-comms, run 35239013253, v3.9.0): mcp-publisher logs in once before the retry loop starts, and a retry attempt late in the 15-minute budget can present a token that has since expired", () => {
+        const output = 'Error: publish failed: server returned status 401: {"title":"Unauthorized","status":401,"detail":"Invalid or expired Registry JWT token","instance":"/v0/publish"}';
+        expect(isRetryablePublishFailure(output)).toBe(true);
+    });
+    it("does not retry a 401 that is a genuine authorisation failure rather than an expired token, since retrying an unrecognised or wrongly-scoped credential can never fix it", () => {
+        const output = 'Error: publish failed: server returned status 401: {"title":"Unauthorized","status":401,"detail":"Registry JWT token does not grant publish access to this namespace","instance":"/v0/publish"}';
+        expect(isRetryablePublishFailure(output)).toBe(false);
+    });
 });
 //# sourceMappingURL=mcp-registry-retry.test.js.map

package/dist/test/mcp-registry-retry.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp-registry-retry.test.js","sourceRoot":"","sources":["../../src/test/mcp-registry-retry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAC5C,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CACnD,sBAAsB,GAAG,qBAAqB,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,CACJ,gBAAgB,CAAC,kBAAkB,GAAG,gCAAgC,CAAC,CACxE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wPAAwP,EAAE,GAAG,EAAE;QAChQ,MAAM,gBAAgB,GACpB,CAAC,8BAA8B;YAC7B,8BAA8B;YAC9B,8BAA8B;YAC9B,8BAA8B,CAAC;YACjC,aAAa,CAAC;QAChB,IAAI,OAAO,GAAG,sBAAsB,CAAC;QACrC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACpC,OAAO,IAAI,OAAO,CAAC;YACnB,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,gBAAgB,CAAC,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,CAAC,UAAU,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GACV,sRAAsR,CAAC;QACzR,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gZAAgZ,EAAE,GAAG,EAAE;QACxZ,MAAM,MAAM,GAAG,2DAA2D,CAAC;QAC3E,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uIAAuI,EAAE,GAAG,EAAE;QAC/I,MAAM,MAAM,GACV,gEAAgE,CAAC;QACnE,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"mcp-registry-retry.test.js","sourceRoot":"","sources":["../../src/test/mcp-registry-retry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,+BAA+B,CAAC;AAEvC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,gCAAgC,GAAG,EAAE,CAAC;AAC5C,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,8BAA8B,GAAG,GAAG,CAAC;AAE3C,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CACnD,sBAAsB,GAAG,qBAAqB,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,CACJ,gBAAgB,CAAC,kBAAkB,GAAG,gCAAgC,CAAC,CACxE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wPAAwP,EAAE,GAAG,EAAE;QAChQ,MAAM,gBAAgB,GACpB,CAAC,8BAA8B;YAC7B,8BAA8B;YAC9B,8BAA8B;YAC9B,8BAA8B,CAAC;YACjC,aAAa,CAAC;QAChB,IAAI,OAAO,GAAG,sBAAsB,CAAC;QACrC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACpC,OAAO,IAAI,OAAO,CAAC;YACnB,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,CAAC,OAAO,GAAG,gBAAgB,CAAC,CAAC,UAAU,EAAE,CAAC;QAChD,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,CAAC,UAAU,EAAE,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,MAAM,GACV,sRAAsR,CAAC;QACzR,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gZAAgZ,EAAE,GAAG,EAAE;QACxZ,MAAM,MAAM,GAAG,2DAA2D,CAAC;QAC3E,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uIAAuI,EAAE,GAAG,EAAE;QAC/I,MAAM,MAAM,GACV,gEAAgE,CAAC;QACnE,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,yBAAyB,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8SAA8S,EAAE,GAAG,EAAE;QACtT,MAAM,MAAM,GACV,mJAAmJ,CAAC;QACtJ,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,MAAM,GACV,mKAAmK,CAAC;QACtK,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iSAAiS,EAAE,GAAG,EAAE;QACzS,MAAM,MAAM,GACV,oKAAoK,CAAC;QACvK,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yKAAyK,EAAE,GAAG,EAAE;QACjL,MAAM,MAAM,GACV,iMAAiM,CAAC;QACpM,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-comms",
-  "version": "3.10.0",
+  "version": "3.11.0",
   "description": "Cross-harness communication mesh for LLM agents — rooms, DMs, presence, and real-time push delivery over TCP",
   "type": "module",
   "packageManager": "pnpm@12.4.1+sha512.2e81e399d73fe8390dab25e06aa788ab7a5908248d2f5a370f82b481147a6a7a367bf8048f9a6fdb6460f21a66f0542dedb8b94ca2c8723596741920b1656d4c",