agent-comms 4.1.10 → 4.3.0

package/dist/test/dm-grant-actions.unit.test.js

@@ -0,0 +1,72 @@
+/**
+ * Unit tests for the dm_admit, dm_use_grant and dm_revoke tool actions, against a fake store so no mesh is involved.
+ */
+import { describe, expect, it, vi } from "vitest";
+import { dmAdmit, dmRevoke, dmUseGrant } from "../core/dm-grant-actions.js";
+import { encodeTokenText } from "../core/token-text.js";
+/** A device-id is a 64-character lowercase hex SHA-256 digest. */
+const DEVICE_ID_HEX_LENGTH = 64;
+const SENDER = "a".repeat(DEVICE_ID_HEX_LENGTH);
+const RECEIVER = "b".repeat(DEVICE_ID_HEX_LENGTH);
+const bytes = (text) => Uint8Array.from(new TextEncoder().encode(text));
+const GRANT = [
+    bytes("protected"),
+    {},
+    bytes("payload"),
+    bytes("signature"),
+];
+describe("dmAdmit", () => {
+    it("mints a grant for the named device and returns it with the exact call the sender should make", async () => {
+        const admitAgentForDm = vi.fn(async () => Promise.resolve(GRANT));
+        const result = await dmAdmit({ admitAgentForDm }, { action: "dm_admit", target: SENDER }, RECEIVER);
+        expect(admitAgentForDm).toHaveBeenCalledWith(SENDER);
+        expect(result.isError).toBe(false);
+        expect(result.content).toContain(encodeTokenText(GRANT));
+        expect(result.content).toContain(`dm_use_grant with target ${RECEIVER}`);
+    });
+    it("reports that grants are unavailable on a store that cannot mint them", async () => {
+        const result = await dmAdmit({}, { action: "dm_admit", target: SENDER }, RECEIVER);
+        expect(result.isError).toBe(true);
+        expect(result.content).toContain("not available");
+    });
+});
+describe("dmUseGrant", () => {
+    it("presents the decoded grant to the counterpart and reports DM access", async () => {
+        const requestDmAccess = vi.fn(async () => Promise.resolve());
+        const result = await dmUseGrant({ requestDmAccess }, {
+            action: "dm_use_grant",
+            target: RECEIVER,
+            grant: encodeTokenText(GRANT),
+        });
+        expect(requestDmAccess).toHaveBeenCalledWith(RECEIVER, GRANT);
+        expect(result.isError).toBe(false);
+        expect(result.content).toContain(RECEIVER);
+    });
+    it("refuses text that is not a token before contacting anyone", async () => {
+        const requestDmAccess = vi.fn(async () => Promise.resolve());
+        await expect(dmUseGrant({ requestDmAccess }, { action: "dm_use_grant", target: RECEIVER, grant: "not a token" })).rejects.toThrow(/not a valid capability token/);
+        expect(requestDmAccess).not.toHaveBeenCalled();
+    });
+    it("reports that grants are unavailable on a store that cannot present them", async () => {
+        const result = await dmUseGrant({}, {
+            action: "dm_use_grant",
+            target: RECEIVER,
+            grant: encodeTokenText(GRANT),
+        });
+        expect(result.isError).toBe(true);
+    });
+});
+describe("dmRevoke", () => {
+    it("revokes the named device's grant and says so", async () => {
+        const revokeAgentDmAccess = vi.fn(async () => Promise.resolve());
+        const result = await dmRevoke({ revokeAgentDmAccess }, { action: "dm_revoke", target: SENDER });
+        expect(revokeAgentDmAccess).toHaveBeenCalledWith(SENDER);
+        expect(result.isError).toBe(false);
+        expect(result.content).toContain(SENDER);
+    });
+    it("reports that revoking is unavailable on a store that cannot", async () => {
+        const result = await dmRevoke({}, { action: "dm_revoke", target: SENDER });
+        expect(result.isError).toBe(true);
+    });
+});
+//# sourceMappingURL=dm-grant-actions.unit.test.js.map

package/dist/test/dm-grant-actions.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dm-grant-actions.unit.test.js","sourceRoot":"","sources":["../../src/test/dm-grant-actions.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,kEAAkE;AAClE,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAElD,MAAM,KAAK,GAAG,CAAC,IAAY,EAA2B,EAAE,CACtD,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,MAAM,KAAK,GAAoB;IAC7B,KAAK,CAAC,WAAW,CAAC;IAClB,EAAE;IACF,KAAK,CAAC,SAAS,CAAC;IAChB,KAAK,CAAC,WAAW,CAAC;CACnB,CAAC;AAEF,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,EAAE,eAAe,EAAE,EACnB,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EACtC,QAAQ,CACT,CAAC;QAEF,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,MAAM,GAAG,MAAM,OAAO,CAC1B,EAAE,EACF,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,EACtC,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAE7D,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,EAAE,eAAe,EAAE,EACnB;YACE,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;SAC9B,CACF,CAAC;QAEF,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAE7D,MAAM,MAAM,CACV,UAAU,CACR,EAAE,eAAe,EAAE,EACnB,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,CACnE,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAClD,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,EAAE,EACF;YACE,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;SAC9B,CACF,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,mBAAmB,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,EAAE,mBAAmB,EAAE,EACvB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CACxC,CAAC;QAEF,MAAM,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/dm-grant-tool.integration.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Integration test for pre-authorised DMs through the tool surface: the receiver admits the sender (dm_admit), the sender presents the grant (dm_use_grant), and the first DM is delivered with no decision at the receiving end. A grant minted for someone else, or revoked, is refused.
+ */
+export {};
+//# sourceMappingURL=dm-grant-tool.integration.test.d.ts.map

package/dist/test/dm-grant-tool.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dm-grant-tool.integration.test.d.ts","sourceRoot":"","sources":["../../src/test/dm-grant-tool.integration.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/test/dm-grant-tool.integration.test.js

@@ -0,0 +1,145 @@
+/**
+ * Integration test for pre-authorised DMs through the tool surface: the receiver admits the sender (dm_admit), the sender presents the grant (dm_use_grant), and the first DM is delivered with no decision at the receiving end. A grant minted for someone else, or revoked, is refused.
+ */
+import { test, expect } from "vitest";
+import { MeshStore } from "../core/mesh-store.js";
+import { CommsTool } from "../core/tool.js";
+import { dmRoomPath } from "../core/room-path.js";
+import { waitFor, wireTestTransport } from "./test-transport.js";
+let nextPort = 25_450;
+function freshPort() {
+    nextPort += 1;
+    return nextPort;
+}
+async function party(port, name) {
+    const store = new MeshStore({ coordinatorPort: port });
+    await wireTestTransport(store);
+    await store.init();
+    await store.registerAgent({
+        name,
+        harness: "test",
+        cwd: `/test/${name}`,
+        pid: process.pid,
+        visibility: "visible",
+        tags: [],
+    });
+    return {
+        store,
+        tool: new CommsTool(store),
+        ctx: {
+            agentId: store.peerId,
+            harness: "test",
+            cwd: `/test/${name}`,
+            pid: process.pid,
+        },
+    };
+}
+async function connectedPair() {
+    const port = freshPort();
+    const sender = await party(port, "sender");
+    const receiver = await party(port, "receiver");
+    await waitFor(() => sender.store.serialise().agents[receiver.store.peerId] !== undefined, "the sender sees the receiver");
+    return { sender, receiver };
+}
+/** The grant text in a dm_admit result: its last line. */
+function grantFrom(content) {
+    const line = content.split("\n").at(-1);
+    if (line === undefined || line === "")
+        throw new Error("no grant in result");
+    return line;
+}
+test("a grant lets the sender's first DM through with no decision at the receiver", async () => {
+    const { sender, receiver } = await connectedPair();
+    try {
+        const admitted = await receiver.tool.handle(receiver.ctx, {
+            action: "dm_admit",
+            target: sender.store.peerId,
+        });
+        expect(admitted.isError).toBe(false);
+        expect(admitted.content).toContain(`dm_use_grant with target ${receiver.store.peerId}`);
+        const used = await sender.tool.handle(sender.ctx, {
+            action: "dm_use_grant",
+            target: receiver.store.peerId,
+            grant: grantFrom(admitted.content),
+        });
+        expect(used.isError).toBe(false);
+        expect(receiver.store.listPendingRoomJoins()).toEqual([]);
+        const sent = await sender.tool.handle(sender.ctx, {
+            action: "dm",
+            target: receiver.store.peerId,
+            content: "no decision needed",
+        });
+        expect(sent.isError).toBe(false);
+        const dmPath = dmRoomPath(sender.store.peerId, receiver.store.peerId);
+        await waitFor(() => (receiver.store.serialise().dms[dmPath] ?? []).some((m) => m.content === "no decision needed"), "the receiver gets the DM");
+        expect(receiver.store.listPendingRoomJoins()).toEqual([]);
+    }
+    finally {
+        await receiver.store.shutdown();
+        await sender.store.shutdown();
+    }
+});
+test("a grant minted for a different device is refused", async () => {
+    const { sender, receiver } = await connectedPair();
+    try {
+        const someoneElse = "c".repeat(sender.store.peerId.length);
+        const admitted = await receiver.tool.handle(receiver.ctx, {
+            action: "dm_admit",
+            target: someoneElse,
+        });
+        const used = await sender.tool.handle(sender.ctx, {
+            action: "dm_use_grant",
+            target: receiver.store.peerId,
+            grant: grantFrom(admitted.content),
+        });
+        expect(used.isError).toBe(true);
+        expect(used.content).toMatch(/refused/);
+    }
+    finally {
+        await receiver.store.shutdown();
+        await sender.store.shutdown();
+    }
+});
+test("a revoked grant is refused", async () => {
+    const { sender, receiver } = await connectedPair();
+    try {
+        const admitted = await receiver.tool.handle(receiver.ctx, {
+            action: "dm_admit",
+            target: sender.store.peerId,
+        });
+        const revoked = await receiver.tool.handle(receiver.ctx, {
+            action: "dm_revoke",
+            target: sender.store.peerId,
+        });
+        expect(revoked.isError).toBe(false);
+        const used = await sender.tool.handle(sender.ctx, {
+            action: "dm_use_grant",
+            target: receiver.store.peerId,
+            grant: grantFrom(admitted.content),
+        });
+        expect(used.isError).toBe(true);
+        expect(used.content).toMatch(/refused/);
+    }
+    finally {
+        await receiver.store.shutdown();
+        await sender.store.shutdown();
+    }
+});
+test("dm_use_grant with text that is not a grant fails without contacting the receiver", async () => {
+    const { sender, receiver } = await connectedPair();
+    try {
+        const used = await sender.tool.handle(sender.ctx, {
+            action: "dm_use_grant",
+            target: receiver.store.peerId,
+            grant: "this is not a grant",
+        });
+        expect(used.isError).toBe(true);
+        expect(used.content).toMatch(/not a valid capability token/);
+        expect(receiver.store.listPendingRoomJoins()).toEqual([]);
+    }
+    finally {
+        await receiver.store.shutdown();
+        await sender.store.shutdown();
+    }
+});
+//# sourceMappingURL=dm-grant-tool.integration.test.js.map

package/dist/test/dm-grant-tool.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dm-grant-tool.integration.test.js","sourceRoot":"","sources":["../../src/test/dm-grant-tool.integration.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAEjE,IAAI,QAAQ,GAAG,MAAM,CAAC;AACtB,SAAS,SAAS;IAChB,QAAQ,IAAI,CAAC,CAAC;IACd,OAAO,QAAQ,CAAC;AAClB,CAAC;AAQD,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACnB,MAAM,KAAK,CAAC,aAAa,CAAC;QACxB,IAAI;QACJ,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,SAAS,IAAI,EAAE;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IACH,OAAO;QACL,KAAK;QACL,IAAI,EAAE,IAAI,SAAS,CAAC,KAAK,CAAC;QAC1B,GAAG,EAAE;YACH,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,SAAS,IAAI,EAAE;YACpB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,OAAO,CACX,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS,EAC1E,8BAA8B,CAC/B,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,0DAA0D;AAC1D,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE;YACxD,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAChC,4BAA4B,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CACpD,CAAC;QAEF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;YAChD,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC7B,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;SACnC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;YAChD,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC7B,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjC,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtE,MAAM,OAAO,CACX,GAAG,EAAE,CACH,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CACjD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,oBAAoB,CAC1C,EACH,0BAA0B,CAC3B,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;IAClE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE;YACxD,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;YAChD,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC7B,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;SACnC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;IAC5C,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE;YACxD,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE;YACvD,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;YAChD,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC7B,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;SACnC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;IAClG,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE;YAChD,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM;YAC7B,KAAK,EAAE,qBAAqB;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAC7D,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,MAAM,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAChC,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/test/token-text.unit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=token-text.unit.test.d.ts.map

package/dist/test/token-text.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-text.unit.test.d.ts","sourceRoot":"","sources":["../../src/test/token-text.unit.test.ts"],"names":[],"mappings":""}

package/dist/test/token-text.unit.test.js

@@ -0,0 +1,46 @@
+/**
+ * Unit tests for the text form of a capability token, used to hand a dm:send grant from one person to another as a plain string.
+ */
+import { describe, expect, it } from "vitest";
+import { decodeTokenText, encodeTokenText } from "../core/token-text.js";
+const bytes = (text) => Uint8Array.from(new TextEncoder().encode(text));
+// A structurally valid stand-in: the codec only serialises a token's byte-string fields, it never verifies one.
+const TOKEN = [
+    bytes("protected"),
+    { "4": bytes("key-id") },
+    bytes("payload"),
+    bytes("signature"),
+];
+/** Long enough to be plausible text, short enough that it cannot be the whole token. */
+const TRUNCATED_LENGTH = 10;
+describe("token text", () => {
+    it("round-trips a token exactly", () => {
+        expect(decodeTokenText(encodeTokenText(TOKEN))).toEqual(TOKEN);
+    });
+    it("round-trips a token with no payload", () => {
+        const detached = [
+            bytes("protected"),
+            {},
+            null,
+            bytes("signature"),
+        ];
+        expect(decodeTokenText(encodeTokenText(detached))).toEqual(detached);
+    });
+    it("encodes to a single line with no whitespace, safe to paste into a message", () => {
+        expect(encodeTokenText(TOKEN)).toMatch(/^\S+$/);
+    });
+    it("tolerates whitespace around a pasted token", () => {
+        expect(decodeTokenText(`  ${encodeTokenText(TOKEN)}\n`)).toEqual(TOKEN);
+    });
+    it("rejects text that is not a token, with a message naming what was wrong", () => {
+        for (const text of [
+            "",
+            "not a token",
+            "e30",
+            encodeTokenText(TOKEN).slice(0, TRUNCATED_LENGTH),
+        ]) {
+            expect(() => decodeTokenText(text)).toThrow(/not a valid capability token/);
+        }
+    });
+});
+//# sourceMappingURL=token-text.unit.test.js.map

package/dist/test/token-text.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-text.unit.test.js","sourceRoot":"","sources":["../../src/test/token-text.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEzE,MAAM,KAAK,GAAG,CAAC,IAAY,EAA2B,EAAE,CACtD,UAAU,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AAElD,gHAAgH;AAChH,MAAM,KAAK,GAAoB;IAC7B,KAAK,CAAC,WAAW,CAAC;IAClB,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;IACxB,KAAK,CAAC,SAAS,CAAC;IAChB,KAAK,CAAC,WAAW,CAAC;CACnB,CAAC;AAEF,wFAAwF;AACxF,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,QAAQ,GAAoB;YAChC,KAAK,CAAC,WAAW,CAAC;YAClB,EAAE;YACF,IAAI;YACJ,KAAK,CAAC,WAAW,CAAC;SACnB,CAAC;QACF,MAAM,CAAC,eAAe,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,eAAe,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,KAAK,MAAM,IAAI,IAAI;YACjB,EAAE;YACF,aAAa;YACb,KAAK;YACL,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC;SAClD,EAAE,CAAC;YACF,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CACzC,8BAA8B,CAC/B,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-comms",
   "description": "Cross-harness communication mesh for LLM agents — rooms, DMs, presence, and real-time push delivery over TCP",
-  "version": "4.1.10",
+  "version": "4.3.0",
   "bin": {
     "agent-comms": "dist/cli.js"
   },