agent-comms 8.4.1 → 8.6.0

package/dist/test/machine-list-groups.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-list-groups.unit.test.js","sourceRoot":"","sources":["../../src/test/machine-list-groups.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAGtE,2EAA2E;AAC3E,MAAM,OAAO,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,EAAE,CAAC;AAE3C,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO;QACL,EAAE;QACF,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,CAAC;QACN,SAAS,EAAE,EAAE;QACb,UAAU,EAAE,SAAS;QACrB,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,EAAE;QACR,eAAe,EAAE,EAAE;KACpB,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,MAAM,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;YACvB,CAAC,UAAU,EAAE,MAAM,CAAC;YACpB,CAAC,OAAO,EAAE,MAAM,CAAC;YACjB,CAAC,UAAU,EAAE,MAAM,CAAC;SACrB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEvE,MAAM,CACJ,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CACtE,CAAC,OAAO,CAAC;YACR,CAAC,8BAA8B,EAAE,CAAC,OAAO,CAAC,CAAC;YAC3C,CAAC,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC;YAC/B,CAAC,qBAAqB,EAAE,CAAC,UAAU,CAAC,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;YACvB,CAAC,KAAK,EAAE,MAAM,CAAC;YACf,CAAC,OAAO,EAAE,QAAQ,CAAC;YACnB,CAAC,KAAK,EAAE,MAAM,CAAC;SAChB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEvE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kHAAkH,EAAE,GAAG,EAAE;QAC1H,MAAM,MAAM,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAErC,MAAM,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;YACvE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE;SAC/B,CAAC,CAAC;QACH,MAAM,CAAC,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CACzE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CACjC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,MAAM,GAAG,oBAAoB,CACjC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAChB,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAC5B,MAAM,EACN,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,EAAE,GAAG,CACzB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/machine-membership-trust.integration.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Integration tests for machine identity (agent-comms#343): every bridge on a host is vouched for by that host's machine key, so list_agents groups devices by machine, whoami names the machine, and another machine that trusts this one reaches all of its devices until it untrusts the machine, which revokes the whole host in one act. Two hosts meet through a real hub; the stores of one host share its machine and user identity directories.
+ */
+export {};
+//# sourceMappingURL=machine-membership-trust.integration.test.d.ts.map

package/dist/test/machine-membership-trust.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-membership-trust.integration.test.d.ts","sourceRoot":"","sources":["../../src/test/machine-membership-trust.integration.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/test/machine-membership-trust.integration.test.js

@@ -0,0 +1,152 @@
+/**
+ * Integration tests for machine identity (agent-comms#343): every bridge on a host is vouched for by that host's machine key, so list_agents groups devices by machine, whoami names the machine, and another machine that trusts this one reaches all of its devices until it untrusts the machine, which revokes the whole host in one act. Two hosts meet through a real hub; the stores of one host share its machine and user identity directories.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { tmpdir } from "node:os";
+import { afterEach, describe, expect, it } from "vitest";
+import { MeshStore } from "../core/mesh-store.js";
+import { CommsTool } from "../core/tool.js";
+import { shortId } from "../core/display-name.js";
+import { freeLocalPort, realHubOverWs, TeardownStack } from "./hub-helpers.js";
+import { wireTestTransport } from "./test-transport.js";
+/** Short enough that a gossip re-advertisement fires within a test's own poll budget. */
+const FAST_GOSSIP_INTERVAL_MS = 50;
+const POLL_ATTEMPTS = 100;
+const POLL_INTERVAL_MS = 50;
+const sleep = async (ms) => new Promise((resolve) => {
+    setTimeout(resolve, ms);
+});
+async function waitFor(what, check) {
+    for (let i = 0; i < POLL_ATTEMPTS; i++) {
+        if (await check())
+            return;
+        await sleep(POLL_INTERVAL_MS);
+    }
+    expect(false, `timed out waiting for ${what}`).toBeTruthy();
+}
+const cleanups = new TeardownStack();
+const dirs = [];
+afterEach(async () => {
+    await cleanups.run();
+    for (const dir of dirs.splice(0)) {
+        fs.rmSync(dir, { recursive: true, force: true });
+    }
+});
+/** One host's identity directory: its machine key and its account's user key live here, as they do in ~/.agent-comms. */
+function hostDir() {
+    const dir = fs.mkdtempSync(path.join(tmpdir(), "machine-trust-host-"));
+    dirs.push(dir);
+    return dir;
+}
+async function hostStore(hubUrl, coordinatorPort, dir) {
+    const store = new MeshStore({ coordinatorPort, hubUrl });
+    await wireTestTransport(store, {
+        presenceReadvertiseIntervalMs: FAST_GOSSIP_INTERVAL_MS,
+        userIdentityOptions: { dir },
+        machineIdentityOptions: { dir },
+    });
+    await store.init();
+    cleanups.push(async () => store.shutdown());
+    return store;
+}
+function machineOf(store) {
+    const machine = store.getMachineId();
+    if (machine === undefined)
+        throw new Error("store has no identity yet");
+    return machine;
+}
+async function register(store, name) {
+    const agent = await store.registerAgent({
+        name,
+        harness: "test",
+        cwd: `/test/${name}`,
+        pid: process.pid,
+        visibility: "visible",
+        tags: [],
+    });
+    return agent.id;
+}
+async function listAgentsText(store) {
+    const result = await new CommsTool(store).handle({ agentId: store.peerId, harness: "test", cwd: "/test", pid: process.pid }, { action: "list_agents" });
+    expect(result.isError, result.content).toBe(false);
+    return result.content;
+}
+/** The rows list_agents prints under the given machine heading, up to the next heading. */
+function rowsUnder(listing, heading) {
+    const start = listing.indexOf(heading);
+    if (start === -1)
+        return "";
+    const rest = listing.slice(start + heading.length);
+    const next = rest.search(/\n {2}Machine /);
+    return next === -1 ? rest : rest.slice(0, next);
+}
+describe("machine identity", () => {
+    it("gives every store on a host the same machine, named by whoami, and groups local agents under this machine", async () => {
+        const hub = await realHubOverWs();
+        cleanups.push(hub.close);
+        const dir = hostDir();
+        const a1 = await hostStore(hub.url, await freeLocalPort(), dir);
+        const a2 = await hostStore(hub.url, a1.coordinatorPort, dir);
+        await register(a1, "a1-agent");
+        await register(a2, "a2-agent");
+        expect(machineOf(a1)).toBe(machineOf(a2));
+        expect(machineOf(a1)).not.toBe(a1.getUserPrincipalId());
+        const whoami = await new CommsTool(a1).handle({ agentId: a1.peerId, harness: "test", cwd: "/test", pid: process.pid }, { action: "whoami" });
+        expect(whoami.content).toContain(`Machine: ${machineOf(a1)}`);
+        const heading = `Machine ${shortId(machineOf(a1))} (this machine):`;
+        await waitFor("a1 to place a2 on this machine", async () => rowsUnder(await listAgentsText(a1), heading).includes(a2.peerId));
+        expect(rowsUnder(await listAgentsText(a1), heading)).toContain(a1.peerId);
+    });
+    it("reaches every device of a trusted remote machine, grouped under it, and revokes the whole host when the machine is untrusted", async () => {
+        const hub = await realHubOverWs();
+        cleanups.push(hub.close);
+        const dirA = hostDir();
+        const dirB = hostDir();
+        const a1 = await hostStore(hub.url, await freeLocalPort(), dirA);
+        const a2 = await hostStore(hub.url, a1.coordinatorPort, dirA);
+        const b1 = await hostStore(hub.url, await freeLocalPort(), dirB);
+        await register(a1, "a1-agent");
+        await register(a2, "a2-agent");
+        await register(b1, "b1-agent");
+        // Each host trusts only the other's machine: no device id and no principal is trusted anywhere.
+        a1.addTrustedGatewayMachine(machineOf(b1));
+        a2.addTrustedGatewayMachine(machineOf(b1));
+        b1.addTrustedGatewayMachine(machineOf(a1));
+        expect(b1.listTrustedGateways()).toEqual([]);
+        expect(b1.listTrustedGatewayPrincipals()).toEqual([]);
+        const remoteHeading = `Machine ${shortId(machineOf(a1))}:`;
+        await waitFor("b1 to list both of A's devices under A's machine", async () => {
+            const rows = rowsUnder(await listAgentsText(b1), remoteHeading);
+            return rows.includes(a1.peerId) && rows.includes(a2.peerId);
+        });
+        expect(b1.listVerifiedMembers()).toEqual(expect.arrayContaining([
+            { device: a1.peerId, kind: "machine", issuer: machineOf(a1) },
+            { device: a2.peerId, kind: "machine", issuer: machineOf(a1) },
+        ]));
+        expect(b1.gatewayTrust.isReachable(a2.peerId)).toBe(true);
+        b1.removeTrustedGatewayMachine(machineOf(a1));
+        expect(b1.gatewayTrust.isReachable(a1.peerId)).toBe(false);
+        expect(b1.gatewayTrust.isReachable(a2.peerId)).toBe(false);
+        expect(b1.listVerifiedMembers()).toEqual([]);
+        const afterRevoke = await listAgentsText(b1);
+        expect(afterRevoke).toContain(b1.peerId);
+        expect(afterRevoke).not.toContain(a1.peerId);
+        expect(afterRevoke).not.toContain(a2.peerId);
+        expect(afterRevoke).not.toContain(remoteHeading);
+    });
+    it("carries the machine proof only in a visible agent's advert", async () => {
+        const store = new MeshStore({ coordinatorPort: await freeLocalPort() });
+        await wireTestTransport(store);
+        await store.init();
+        cleanups.push(async () => store.shutdown());
+        const id = await register(store, "visible-then-hidden");
+        await waitFor("the machine proof to be minted", async () => {
+            await Promise.resolve();
+            return store.selfAgentAdvert?.machine !== undefined;
+        });
+        await store.updateAgent(id, { visibility: "hidden" });
+        expect(store.selfAgentAdvert).toBeUndefined();
+    });
+});
+//# sourceMappingURL=machine-membership-trust.integration.test.js.map

package/dist/test/machine-membership-trust.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-membership-trust.integration.test.js","sourceRoot":"","sources":["../../src/test/machine-membership-trust.integration.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,yFAAyF;AACzF,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAE5B,MAAM,KAAK,GAAG,KAAK,EAAE,EAAU,EAAiB,EAAE,CAChD,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;IAC5B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL,KAAK,UAAU,OAAO,CACpB,IAAY,EACZ,KAA6B;IAE7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,IAAI,MAAM,KAAK,EAAE;YAAE,OAAO;QAC1B,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,yBAAyB,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;AACrC,MAAM,IAAI,GAAa,EAAE,CAAC;AAE1B,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,yHAAyH;AACzH,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAAc,EACd,eAAuB,EACvB,GAAW;IAEX,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;IACzD,MAAM,iBAAiB,CAAC,KAAK,EAAE;QAC7B,6BAA6B,EAAE,uBAAuB;QACtD,mBAAmB,EAAE,EAAE,GAAG,EAAE;QAC5B,sBAAsB,EAAE,EAAE,GAAG,EAAE;KAChC,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACnB,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,KAAgB;IACjC,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;IACrC,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAAgB,EAAE,IAAY;IACpD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC;QACtC,IAAI;QACJ,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,SAAS,IAAI,EAAE;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IACH,OAAO,KAAK,CAAC,EAAE,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAgB;IAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAC9C,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAC1E,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B,CAAC;IACF,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,2FAA2F;AAC3F,SAAS,SAAS,CAAC,OAAe,EAAE,OAAe;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,KAAK,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC3C,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,2GAA2G,EAAE,KAAK,IAAI,EAAE;QACzH,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,aAAa,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;QAC7D,MAAM,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/B,MAAM,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAE/B,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,kBAAkB,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,CAC3C,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EACvE,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAE9D,MAAM,OAAO,GAAG,WAAW,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC;QACpE,MAAM,OAAO,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE,CACzD,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CACjE,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8HAA8H,EAAE,KAAK,IAAI,EAAE;QAC5I,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,aAAa,EAAE,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,aAAa,EAAE,EAAE,IAAI,CAAC,CAAC;QACjE,MAAM,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/B,MAAM,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/B,MAAM,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAE/B,gGAAgG;QAChG,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,EAAE,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,EAAE,CAAC,4BAA4B,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAG,WAAW,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC;QAC3D,MAAM,OAAO,CACX,kDAAkD,EAClD,KAAK,IAAI,EAAE;YACT,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;YAChE,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC9D,CAAC,CACF,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CACtC,MAAM,CAAC,eAAe,CAAC;YACrB,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE;YAC7D,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,EAAE;SAC9D,CAAC,CACH,CAAC;QACF,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE1D,EAAE,CAAC,2BAA2B,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;QAE9C,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,MAAM,aAAa,EAAE,EAAE,CAAC,CAAC;QACxE,MAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC/B,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;QAExD,MAAM,OAAO,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,eAAe,EAAE,OAAO,KAAK,SAAS,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEtD,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/membership-proof.unit.test.js

@@ -10,7 +10,13 @@ import { createRevocationView } from "wire-mesh-core/domain/revocation-view";
 import { generateIdentity } from "../core/identity.js";
 import { toIdentityPort } from "../core/wire-mesh-identity.js";
 import { loadOrCreateUserIdentity } from "../core/user-identity.js";
-import { MAX_MEMBERSHIP_PROOF_LENGTH, MEMBERSHIP_PROOF_LIFETIME_MS, mintMembershipProof, verifyMembershipProof, } from "../core/membership-proof.js";
+import { MAX_MEMBERSHIP_PROOF_LENGTH, MEMBERSHIP_PROOF_LIFETIME_MS, identifyMembershipProofIssuer, mintMembershipProof, verifyMembershipProof, } from "../core/membership-proof.js";
+import { loadOrCreateMachineIdentity } from "../core/machine-identity.js";
+import { mintCapabilityToken } from "wire-mesh-core/domain/tokens";
+import { deviceIdToHex } from "wire-mesh-core/domain/device-id";
+import { DEVICE_MEMBER_CAPABILITY } from "../core/device-membership-verification.js";
+import { encodeTokenText } from "../core/token-text.js";
+import { randomId } from "../core/random-id.js";
 async function makeUser() {
     const dir = fs.mkdtempSync(path.join(tmpdir(), "membership-proof-user-"));
     return toIdentityPort(loadOrCreateUserIdentity({ dir }));
@@ -30,14 +36,14 @@ describe("membership proof", () => {
         const clock = createSystemClock();
         const before = clock.now();
         const proof = await mintMembershipProof({
-            userIdentity: user,
+            issuer: user,
             clock,
             deviceId: device.deviceId,
         });
         const verdict = await verifyMembershipProof({
             proof,
             deviceId: device.deviceId,
-            principalId: user.deviceId,
+            issuerId: user.deviceId,
             ...(await makeVerifier()),
         });
         expect(verdict.ok).toBe(true);
@@ -50,7 +56,7 @@ describe("membership proof", () => {
         const user = await makeUser();
         const device = await toIdentityPort(generateIdentity());
         const proof = await mintMembershipProof({
-            userIdentity: user,
+            issuer: user,
             clock: createSystemClock(),
             deviceId: device.deviceId,
         });
@@ -61,14 +67,14 @@ describe("membership proof", () => {
         const device = await toIdentityPort(generateIdentity());
         const other = await toIdentityPort(generateIdentity());
         const proof = await mintMembershipProof({
-            userIdentity: user,
+            issuer: user,
             clock: createSystemClock(),
             deviceId: device.deviceId,
         });
         const verdict = await verifyMembershipProof({
             proof,
             deviceId: other.deviceId,
-            principalId: user.deviceId,
+            issuerId: user.deviceId,
             ...(await makeVerifier()),
         });
         expect(verdict.ok).toBe(false);
@@ -78,14 +84,14 @@ describe("membership proof", () => {
         const stranger = await makeUser();
         const device = await toIdentityPort(generateIdentity());
         const proof = await mintMembershipProof({
-            userIdentity: user,
+            issuer: user,
             clock: createSystemClock(),
             deviceId: device.deviceId,
         });
         const verdict = await verifyMembershipProof({
             proof,
             deviceId: device.deviceId,
-            principalId: stranger.deviceId,
+            issuerId: stranger.deviceId,
             ...(await makeVerifier()),
         });
         expect(verdict.ok).toBe(false);
@@ -95,7 +101,7 @@ describe("membership proof", () => {
         const device = await toIdentityPort(generateIdentity());
         const clock = createSystemClock();
         const proof = await mintMembershipProof({
-            userIdentity: user,
+            issuer: user,
             clock,
             deviceId: device.deviceId,
         });
@@ -106,7 +112,7 @@ describe("membership proof", () => {
         const verdict = await verifyMembershipProof({
             proof,
             deviceId: device.deviceId,
-            principalId: user.deviceId,
+            issuerId: user.deviceId,
             ...verifier,
             clock: later,
         });
@@ -118,7 +124,7 @@ describe("membership proof", () => {
         const verdict = await verifyMembershipProof({
             proof: "a".repeat(MAX_MEMBERSHIP_PROOF_LENGTH + 1),
             deviceId: device.deviceId,
-            principalId: user.deviceId,
+            issuerId: user.deviceId,
             ...(await makeVerifier()),
         });
         expect(verdict).toEqual({ ok: false, reason: "too_long" });
@@ -127,7 +133,7 @@ describe("membership proof", () => {
         const user = await makeUser();
         const device = await toIdentityPort(generateIdentity());
         const proof = await mintMembershipProof({
-            userIdentity: user,
+            issuer: user,
             clock: createSystemClock(),
             deviceId: device.deviceId,
         });
@@ -139,10 +145,96 @@ describe("membership proof", () => {
         const verdict = await verifyMembershipProof({
             proof: "not a proof",
             deviceId: device.deviceId,
-            principalId: user.deviceId,
+            issuerId: user.deviceId,
             ...(await makeVerifier()),
         });
         expect(verdict.ok).toBe(false);
     });
+    it("verifies a machine's proof exactly as it verifies a principal's, and not against the principal", async () => {
+        const dir = fs.mkdtempSync(path.join(tmpdir(), "membership-proof-host-"));
+        const machine = await toIdentityPort(loadOrCreateMachineIdentity({ dir }));
+        const user = await toIdentityPort(loadOrCreateUserIdentity({ dir }));
+        const device = await toIdentityPort(generateIdentity());
+        const proof = await mintMembershipProof({
+            issuer: machine,
+            clock: createSystemClock(),
+            deviceId: device.deviceId,
+        });
+        const verifier = await makeVerifier();
+        const asMachine = await verifyMembershipProof({
+            proof,
+            deviceId: device.deviceId,
+            issuerId: machine.deviceId,
+            ...verifier,
+        });
+        const asPrincipal = await verifyMembershipProof({
+            proof,
+            deviceId: device.deviceId,
+            issuerId: user.deviceId,
+            ...verifier,
+        });
+        expect(asMachine.ok).toBe(true);
+        expect(asPrincipal).toEqual({ ok: false, reason: "wrong_scope_path" });
+    });
+    it("identifies the issuer a proof names without being told it beforehand", async () => {
+        const dir = fs.mkdtempSync(path.join(tmpdir(), "membership-proof-host-"));
+        const machine = await toIdentityPort(loadOrCreateMachineIdentity({ dir }));
+        const device = await toIdentityPort(generateIdentity());
+        const proof = await mintMembershipProof({
+            issuer: machine,
+            clock: createSystemClock(),
+            deviceId: device.deviceId,
+        });
+        const verdict = await identifyMembershipProofIssuer({
+            proof,
+            deviceId: device.deviceId,
+            ...(await makeVerifier()),
+        });
+        expect(verdict.ok).toBe(true);
+        if (!verdict.ok)
+            return;
+        expect(verdict.issuerHex).toBe(deviceIdToHex(machine.deviceId));
+    });
+    it("does not identify a proof for a different device", async () => {
+        const dir = fs.mkdtempSync(path.join(tmpdir(), "membership-proof-host-"));
+        const machine = await toIdentityPort(loadOrCreateMachineIdentity({ dir }));
+        const device = await toIdentityPort(generateIdentity());
+        const other = await toIdentityPort(generateIdentity());
+        const proof = await mintMembershipProof({
+            issuer: machine,
+            clock: createSystemClock(),
+            deviceId: device.deviceId,
+        });
+        const verdict = await identifyMembershipProofIssuer({
+            proof,
+            deviceId: other.deviceId,
+            ...(await makeVerifier()),
+        });
+        expect(verdict.ok).toBe(false);
+    });
+    it("does not identify a proof whose named group is not the key that signed it", async () => {
+        const impostor = await toIdentityPort(generateIdentity());
+        const victim = await toIdentityPort(generateIdentity());
+        const device = await toIdentityPort(generateIdentity());
+        const clock = createSystemClock();
+        const minted = await mintCapabilityToken({
+            identity: impostor,
+            clock,
+            tokenId: randomId(),
+            bearer: device.deviceId,
+            capability: DEVICE_MEMBER_CAPABILITY,
+            scope: { kind: "group", path: deviceIdToHex(victim.deviceId) },
+            expires: clock.now() + MEMBERSHIP_PROOF_LIFETIME_MS,
+            delegationsRemaining: 0,
+        });
+        if (!minted.ok)
+            throw new Error(`mint failed: ${minted.reason}`);
+        const verdict = await identifyMembershipProofIssuer({
+            proof: encodeTokenText(minted.token),
+            deviceId: device.deviceId,
+            ...(await makeVerifier()),
+        });
+        expect(verdict).toEqual({ ok: false, reason: "wrong_chain_root" });
+    });
 });
 //# sourceMappingURL=membership-proof.unit.test.js.map

package/dist/test/membership-proof.unit.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"membership-proof.unit.test.js","sourceRoot":"","sources":["../../src/test/membership-proof.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AAErC,KAAK,UAAU,QAAQ;IACrB,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC1E,OAAO,cAAc,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,YAAY;IACzB,OAAO;QACL,QAAQ,EAAE,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC;QAClD,KAAK,EAAE,iBAAiB,EAAE;QAC1B,UAAU,EAAE,oBAAoB,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,8GAA8G,EAAE,KAAK,IAAI,EAAE;QAC5H,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAE3B,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,IAAI,CAAC,QAAQ;YAC1B,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO;QACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,mBAAmB,CACzC,KAAK,CAAC,GAAG,EAAE,GAAG,4BAA4B,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAEvD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,WAAW,EAAE,IAAI,CAAC,QAAQ;YAC1B,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,QAAQ,CAAC,QAAQ;YAC9B,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAElC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG;YACZ,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,4BAA4B,GAAG,CAAC;SAC1D,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,IAAI,CAAC,QAAQ;YAC1B,GAAG,QAAQ;YACX,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,2BAA2B,GAAG,CAAC,CAAC;YAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,IAAI,CAAC,QAAQ;YAC1B,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,2BAA2B,GAAG,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,IAAI,CAAC,QAAQ;YAC1B,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"membership-proof.unit.test.js","sourceRoot":"","sources":["../../src/test/membership-proof.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,EAC5B,6BAA6B,EAC7B,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,KAAK,UAAU,QAAQ;IACrB,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IAC1E,OAAO,cAAc,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,YAAY;IACzB,OAAO;QACL,QAAQ,EAAE,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC;QAClD,KAAK,EAAE,iBAAiB,EAAE;QAC1B,UAAU,EAAE,oBAAoB,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,8GAA8G,EAAE,KAAK,IAAI,EAAE;QAC5H,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAE3B,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,MAAM,EAAE,IAAI;YACZ,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO;QACxB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,mBAAmB,CACzC,KAAK,CAAC,GAAG,EAAE,GAAG,4BAA4B,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;QACtG,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAEvD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,QAAQ,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAElC,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,MAAM,EAAE,IAAI;YACZ,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG;YACZ,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,4BAA4B,GAAG,CAAC;SAC1D,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,QAAQ;YACX,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,2BAA2B,GAAG,CAAC,CAAC;YAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,MAAM,EAAE,IAAI;YACZ,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,2BAA2B,GAAG,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC;YAC1C,KAAK,EAAE,aAAa;YACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;QAEtC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC;YAC5C,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,QAAQ;SACZ,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC;YAC9C,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,QAAQ;SACZ,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,6BAA6B,CAAC;YAClD,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO;QACxB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,iBAAiB,EAAE;YAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,6BAA6B,CAAC;YAClD,KAAK;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACvC,QAAQ,EAAE,QAAQ;YAClB,KAAK;YACL,OAAO,EAAE,QAAQ,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,QAAQ;YACvB,UAAU,EAAE,wBAAwB;YACpC,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YAC9D,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,4BAA4B;YACnD,oBAAoB,EAAE,CAAC;SACxB,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,MAAM,6BAA6B,CAAC;YAClD,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,YAAY,EAAE,CAAC;SAC1B,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/name-claim.unit.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Unit tests for self display name claims (core/name-claim, agent-comms#345): the issuer is authentic, the content is the issuer's own, and nothing else verifies.
+ */
+export {};
+//# sourceMappingURL=name-claim.unit.test.d.ts.map

package/dist/test/name-claim.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-claim.unit.test.d.ts","sourceRoot":"","sources":["../../src/test/name-claim.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/test/name-claim.unit.test.js

@@ -0,0 +1,135 @@
+/**
+ * Unit tests for self display name claims (core/name-claim, agent-comms#345): the issuer is authentic, the content is the issuer's own, and nothing else verifies.
+ */
+import { describe, expect, it } from "vitest";
+import { createSystemClock } from "wire-mesh-core/adapters/system-clock";
+import { deviceIdToHex } from "wire-mesh-core/domain/device-id";
+import { generateIdentity } from "../core/identity.js";
+import { toIdentityPort } from "../core/wire-mesh-identity.js";
+import { mintNameClaim, verifyNameClaim } from "../core/name-claim.js";
+const LIFETIME_MS = 60_000;
+async function port() {
+    return toIdentityPort(generateIdentity());
+}
+/** Decodes a claim's text to its wire object, for tests that tamper with one field. */
+function decode(claim) {
+    const parsed = JSON.parse(Buffer.from(claim, "base64url").toString("utf-8"));
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+        throw new Error("claim is not an object");
+    }
+    return Object.fromEntries(Object.entries(parsed));
+}
+function encode(wire) {
+    return Buffer.from(JSON.stringify(wire), "utf-8").toString("base64url");
+}
+describe("name claim", () => {
+    it("verifies for its own subject and yields the name the subject chose", async () => {
+        const machine = await port();
+        const verifier = await port();
+        const clock = createSystemClock();
+        const claim = await mintNameClaim({
+            issuer: machine,
+            clock,
+            name: "joe-mbp",
+            lifetimeMs: LIFETIME_MS,
+        });
+        const verdict = await verifyNameClaim({
+            claim,
+            subject: deviceIdToHex(machine.deviceId),
+            identity: verifier,
+            clock,
+        });
+        expect(verdict).toMatchObject({ ok: true, name: "joe-mbp" });
+    });
+    it("does not verify for any other subject", async () => {
+        const machine = await port();
+        const other = await port();
+        const clock = createSystemClock();
+        const claim = await mintNameClaim({
+            issuer: machine,
+            clock,
+            name: "joe-mbp",
+            lifetimeMs: LIFETIME_MS,
+        });
+        const verdict = await verifyNameClaim({
+            claim,
+            subject: deviceIdToHex(other.deviceId),
+            identity: other,
+            clock,
+        });
+        expect(verdict).toEqual({ ok: false, reason: "wrong_subject" });
+    });
+    it("refuses a claim relabelled to name another subject, since its key is not that subject's", async () => {
+        const impostor = await port();
+        const victim = await port();
+        const clock = createSystemClock();
+        const claim = await mintNameClaim({
+            issuer: impostor,
+            clock,
+            name: "victim's name",
+            lifetimeMs: LIFETIME_MS,
+        });
+        const victimHex = deviceIdToHex(victim.deviceId);
+        const verdict = await verifyNameClaim({
+            claim: encode({ ...decode(claim), subject: victimHex }),
+            subject: victimHex,
+            identity: victim,
+            clock,
+        });
+        expect(verdict).toEqual({ ok: false, reason: "wrong_key" });
+    });
+    it("refuses a claim whose name was changed after signing", async () => {
+        const machine = await port();
+        const clock = createSystemClock();
+        const claim = await mintNameClaim({
+            issuer: machine,
+            clock,
+            name: "joe-mbp",
+            lifetimeMs: LIFETIME_MS,
+        });
+        const verdict = await verifyNameClaim({
+            claim: encode({ ...decode(claim), name: "someone-else" }),
+            subject: deviceIdToHex(machine.deviceId),
+            identity: machine,
+            clock,
+        });
+        expect(verdict).toEqual({ ok: false, reason: "bad_signature" });
+    });
+    it("refuses an expired claim", async () => {
+        const machine = await port();
+        const minted = createSystemClock();
+        const claim = await mintNameClaim({
+            issuer: machine,
+            clock: minted,
+            name: "joe-mbp",
+            lifetimeMs: LIFETIME_MS,
+        });
+        const later = { now: () => minted.now() + LIFETIME_MS + 1 };
+        const verdict = await verifyNameClaim({
+            claim,
+            subject: deviceIdToHex(machine.deviceId),
+            identity: machine,
+            clock: later,
+        });
+        expect(verdict).toEqual({ ok: false, reason: "expired" });
+    });
+    it("refuses a signed name that carries a control sequence, and text that is not a claim", async () => {
+        const machine = await port();
+        const clock = createSystemClock();
+        const subject = deviceIdToHex(machine.deviceId);
+        const claim = await mintNameClaim({
+            issuer: machine,
+            clock,
+            name: "evil\u001b[2J",
+            lifetimeMs: LIFETIME_MS,
+        });
+        expect(await verifyNameClaim({ claim, subject, identity: machine, clock })).toEqual({ ok: false, reason: "unusable_name" });
+        expect(await verifyNameClaim({
+            claim: "not a claim",
+            subject,
+            identity: machine,
+            clock,
+        })).toEqual({ ok: false, reason: "not_a_claim" });
+    });
+});
+//# sourceMappingURL=name-claim.unit.test.js.map

package/dist/test/name-claim.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-claim.unit.test.js","sourceRoot":"","sources":["../../src/test/name-claim.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEvE,MAAM,WAAW,GAAG,MAAM,CAAC;AAE3B,KAAK,UAAU,IAAI;IACjB,OAAO,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,uFAAuF;AACvF,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAChC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAClD,CAAC;IACF,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,MAAM,CAAC,IAAuC;IACrD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC1E,CAAC;AAED,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,MAAM,EAAE,OAAO;YACf,KAAK;YACL,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,KAAK;YACL,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxC,QAAQ,EAAE,QAAQ;YAClB,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,IAAI,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,MAAM,EAAE,OAAO;YACf,KAAK;YACL,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,KAAK;YACL,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;YACtC,QAAQ,EAAE,KAAK;YACf,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,MAAM,EAAE,QAAQ;YAChB,KAAK;YACL,IAAI,EAAE,eAAe;YACrB,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,KAAK,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YACvD,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,MAAM;YAChB,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,MAAM,EAAE,OAAO;YACf,KAAK;YACL,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,KAAK,EAAE,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;YACzD,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxC,QAAQ,EAAE,OAAO;YACjB,KAAK;SACN,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QACH,MAAM,KAAK,GAAU,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;QAEnE,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,KAAK;YACL,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,MAAM,EAAE,OAAO;YACf,KAAK;YACL,IAAI,EAAE,eAAe;YACrB,UAAU,EAAE,WAAW;SACxB,CAAC,CAAC;QAEH,MAAM,CACJ,MAAM,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CACpE,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QAClD,MAAM,CACJ,MAAM,eAAe,CAAC;YACpB,KAAK,EAAE,aAAa;YACpB,OAAO;YACP,QAAQ,EAAE,OAAO;YACjB,KAAK;SACN,CAAC,CACH,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/naming.integration.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Integration tests for naming (agent-comms#345): a machine's self display name, signed by its machine key, reaches a peer that trusts it and is shown as that machine's own claim; the viewer's petnames come first wherever an id is shown; and a petname never leaves the viewer's own storage, over the hub or over a direct peer session. Two hosts meet through a real hub; the stores of one host share its identity directory.
+ */
+export {};
+//# sourceMappingURL=naming.integration.test.d.ts.map

package/dist/test/naming.integration.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.integration.test.d.ts","sourceRoot":"","sources":["../../src/test/naming.integration.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}